drivers/net/wireless/libertas/main.c

   1 /**
   2   * This file contains the major functions in WLAN
   3   * driver. It includes init, exit, open, close and main
   4   * thread etc..
   5   */
   6
   7 #include <linux/moduleparam.h>
   8 #include <linux/delay.h>
   9 #include <linux/etherdevice.h>
  10 #include <linux/netdevice.h>
  11 #include <linux/if_arp.h>
  12 #include <linux/kthread.h>
  13 #include <linux/kfifo.h>
  14 #include <linux/stddef.h>
  15
  16 #include <net/iw_handler.h>
  17 #include <net/ieee80211.h>
  18
  19 #include "host.h"
  20 #include "decl.h"
  21 #include "dev.h"
  22 #include "wext.h"
  23 #include "debugfs.h"
  24 #include "scan.h"
  25 #include "assoc.h"
  26 #include "cmd.h"
  27
  28 #define DRIVER_RELEASE_VERSION "323.p0"
  29 const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
  30 #ifdef  DEBUG
  31     "-dbg"
  32 #endif
  33     "";
  34
  35
  36 /* Module parameters */
  37 unsigned int lbs_debug;
  38 EXPORT_SYMBOL_GPL(lbs_debug);
  39 module_param_named(libertas_debug, lbs_debug, int, 0644);
  40
  41
  42 /* This global structure is used to send the confirm_sleep command as
  43  * fast as possible down to the firmware. */
  44 struct cmd_confirm_sleep confirm_sleep;
  45
  46
  47 #define LBS_TX_PWR_DEFAULT              20      /*100mW */
  48 #define LBS_TX_PWR_US_DEFAULT           20      /*100mW */
  49 #define LBS_TX_PWR_JP_DEFAULT           16      /*50mW */
  50 #define LBS_TX_PWR_FR_DEFAULT           20      /*100mW */
  51 #define LBS_TX_PWR_EMEA_DEFAULT 20      /*100mW */
  52
  53 /* Format { channel, frequency (MHz), maxtxpower } */
  54 /* band: 'B/G', region: USA FCC/Canada IC */
  55 static struct chan_freq_power channel_freq_power_US_BG[] = {
  56         {1, 2412, LBS_TX_PWR_US_DEFAULT},
  57         {2, 2417, LBS_TX_PWR_US_DEFAULT},
  58         {3, 2422, LBS_TX_PWR_US_DEFAULT},
  59         {4, 2427, LBS_TX_PWR_US_DEFAULT},
  60         {5, 2432, LBS_TX_PWR_US_DEFAULT},
  61         {6, 2437, LBS_TX_PWR_US_DEFAULT},
  62         {7, 2442, LBS_TX_PWR_US_DEFAULT},
  63         {8, 2447, LBS_TX_PWR_US_DEFAULT},
  64         {9, 2452, LBS_TX_PWR_US_DEFAULT},
  65         {10, 2457, LBS_TX_PWR_US_DEFAULT},
  66         {11, 2462, LBS_TX_PWR_US_DEFAULT}
  67 };
  68
  69 /* band: 'B/G', region: Europe ETSI */
  70 static struct chan_freq_power channel_freq_power_EU_BG[] = {
  71         {1, 2412, LBS_TX_PWR_EMEA_DEFAULT},
  72         {2, 2417, LBS_TX_PWR_EMEA_DEFAULT},
  73         {3, 2422, LBS_TX_PWR_EMEA_DEFAULT},
  74         {4, 2427, LBS_TX_PWR_EMEA_DEFAULT},
  75         {5, 2432, LBS_TX_PWR_EMEA_DEFAULT},
  76         {6, 2437, LBS_TX_PWR_EMEA_DEFAULT},
  77         {7, 2442, LBS_TX_PWR_EMEA_DEFAULT},
  78         {8, 2447, LBS_TX_PWR_EMEA_DEFAULT},
  79         {9, 2452, LBS_TX_PWR_EMEA_DEFAULT},
  80         {10, 2457, LBS_TX_PWR_EMEA_DEFAULT},
  81         {11, 2462, LBS_TX_PWR_EMEA_DEFAULT},
  82         {12, 2467, LBS_TX_PWR_EMEA_DEFAULT},
  83         {13, 2472, LBS_TX_PWR_EMEA_DEFAULT}
  84 };
  85
  86 /* band: 'B/G', region: Spain */
  87 static struct chan_freq_power channel_freq_power_SPN_BG[] = {
  88         {10, 2457, LBS_TX_PWR_DEFAULT},
  89         {11, 2462, LBS_TX_PWR_DEFAULT}
  90 };
  91
  92 /* band: 'B/G', region: France */
  93 static struct chan_freq_power channel_freq_power_FR_BG[] = {
  94         {10, 2457, LBS_TX_PWR_FR_DEFAULT},
  95         {11, 2462, LBS_TX_PWR_FR_DEFAULT},
  96         {12, 2467, LBS_TX_PWR_FR_DEFAULT},
  97         {13, 2472, LBS_TX_PWR_FR_DEFAULT}
  98 };
  99
 100 /* band: 'B/G', region: Japan */
 101 static struct chan_freq_power channel_freq_power_JPN_BG[] = {
 102         {1, 2412, LBS_TX_PWR_JP_DEFAULT},
 103         {2, 2417, LBS_TX_PWR_JP_DEFAULT},
 104         {3, 2422, LBS_TX_PWR_JP_DEFAULT},
 105         {4, 2427, LBS_TX_PWR_JP_DEFAULT},
 106         {5, 2432, LBS_TX_PWR_JP_DEFAULT},
 107         {6, 2437, LBS_TX_PWR_JP_DEFAULT},
 108         {7, 2442, LBS_TX_PWR_JP_DEFAULT},
 109         {8, 2447, LBS_TX_PWR_JP_DEFAULT},
 110         {9, 2452, LBS_TX_PWR_JP_DEFAULT},
 111         {10, 2457, LBS_TX_PWR_JP_DEFAULT},
 112         {11, 2462, LBS_TX_PWR_JP_DEFAULT},
 113         {12, 2467, LBS_TX_PWR_JP_DEFAULT},
 114         {13, 2472, LBS_TX_PWR_JP_DEFAULT},
 115         {14, 2484, LBS_TX_PWR_JP_DEFAULT}
 116 };
 117
 118 /**
 119  * the structure for channel, frequency and power
 120  */
 121 struct region_cfp_table {
 122         u8 region;
 123         struct chan_freq_power *cfp_BG;
 124         int cfp_no_BG;
 125 };
 126
 127 /**
 128  * the structure for the mapping between region and CFP
 129  */
 130 static struct region_cfp_table region_cfp_table[] = {
 131         {0x10,                  /*US FCC */
 132          channel_freq_power_US_BG,
 133          ARRAY_SIZE(channel_freq_power_US_BG),
 134          }
 135         ,
 136         {0x20,                  /*CANADA IC */
 137          channel_freq_power_US_BG,
 138          ARRAY_SIZE(channel_freq_power_US_BG),
 139          }
 140         ,
 141         {0x30, /*EU*/ channel_freq_power_EU_BG,
 142          ARRAY_SIZE(channel_freq_power_EU_BG),
 143          }
 144         ,
 145         {0x31, /*SPAIN*/ channel_freq_power_SPN_BG,
 146          ARRAY_SIZE(channel_freq_power_SPN_BG),
 147          }
 148         ,
 149         {0x32, /*FRANCE*/ channel_freq_power_FR_BG,
 150          ARRAY_SIZE(channel_freq_power_FR_BG),
 151          }
 152         ,
 153         {0x40, /*JAPAN*/ channel_freq_power_JPN_BG,
 154          ARRAY_SIZE(channel_freq_power_JPN_BG),
 155          }
 156         ,
 157 /*Add new region here */
 158 };
 159
 160 /**
 161  * the table to keep region code
 162  */
 163 u16 lbs_region_code_to_index[MRVDRV_MAX_REGION_CODE] =
 164     { 0x10, 0x20, 0x30, 0x31, 0x32, 0x40 };
 165
 166 /**
 167  * 802.11b/g supported bitrates (in 500Kb/s units)
 168  */
 169 u8 lbs_bg_rates[MAX_RATES] =
 170     { 0x02, 0x04, 0x0b, 0x16, 0x0c, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c,
 171 0x00, 0x00 };
 172
 173 /**
 174  * FW rate table.  FW refers to rates by their index in this table, not by the
 175  * rate value itself.  Values of 0x00 are
 176  * reserved positions.
 177  */
 178 static u8 fw_data_rates[MAX_RATES] =
 179     { 0x02, 0x04, 0x0B, 0x16, 0x00, 0x0C, 0x12,
 180       0x18, 0x24, 0x30, 0x48, 0x60, 0x6C, 0x00
 181 };
 182
 183 /**
 184  *  @brief use index to get the data rate
 185  *
 186  *  @param idx                The index of data rate
 187  *  @return                     data rate or 0
 188  */
 189 u32 lbs_fw_index_to_data_rate(u8 idx)
 190 {
 191         if (idx >= sizeof(fw_data_rates))
 192                 idx = 0;
 193         return fw_data_rates[idx];
 194 }
 195
 196 /**
 197  *  @brief use rate to get the index
 198  *
 199  *  @param rate                 data rate
 200  *  @return                     index or 0
 201  */
 202 u8 lbs_data_rate_to_fw_index(u32 rate)
 203 {
 204         u8 i;
 205
 206         if (!rate)
 207                 return 0;
 208
 209         for (i = 0; i < sizeof(fw_data_rates); i++) {
 210                 if (rate == fw_data_rates[i])
 211                         return i;
 212         }
 213         return 0;
 214 }
 215
 216 /**
 217  * Attributes exported through sysfs
 218  */
 219
 220 /**
 221  * @brief Get function for sysfs attribute anycast_mask
 222  */
 223 static ssize_t lbs_anycast_get(struct device *dev,
 224                 struct device_attribute *attr, char * buf)
 225 {
 226         struct lbs_private *priv = to_net_dev(dev)->priv;
 227         struct cmd_ds_mesh_access mesh_access;
 228         int ret;
 229
 230         memset(&mesh_access, 0, sizeof(mesh_access));
 231
 232         ret = lbs_mesh_access(priv, CMD_ACT_MESH_GET_ANYCAST, &mesh_access);
 233         if (ret)
 234                 return ret;
 235
 236         return snprintf(buf, 12, "0x%X\n", le32_to_cpu(mesh_access.data[0]));
 237 }
 238
 239 /**
 240  * @brief Set function for sysfs attribute anycast_mask
 241  */
 242 static ssize_t lbs_anycast_set(struct device *dev,
 243                 struct device_attribute *attr, const char * buf, size_t count)
 244 {
 245         struct lbs_private *priv = to_net_dev(dev)->priv;
 246         struct cmd_ds_mesh_access mesh_access;
 247         uint32_t datum;
 248         int ret;
 249
 250         memset(&mesh_access, 0, sizeof(mesh_access));
 251         sscanf(buf, "%x", &datum);
 252         mesh_access.data[0] = cpu_to_le32(datum);
 253
 254         ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_ANYCAST, &mesh_access);
 255         if (ret)
 256                 return ret;
 257
 258         return strlen(buf);
 259 }
 260
 261 static int lbs_add_rtap(struct lbs_private *priv);
 262 static void lbs_remove_rtap(struct lbs_private *priv);
 263 static int lbs_add_mesh(struct lbs_private *priv);
 264 static void lbs_remove_mesh(struct lbs_private *priv);
 265
 266
 267 /**
 268  * Get function for sysfs attribute rtap
 269  */
 270 static ssize_t lbs_rtap_get(struct device *dev,
 271                 struct device_attribute *attr, char * buf)
 272 {
 273         struct lbs_private *priv = to_net_dev(dev)->priv;
 274         return snprintf(buf, 5, "0x%X\n", priv->monitormode);
 275 }
 276
 277 /**
 278  *  Set function for sysfs attribute rtap
 279  */
 280 static ssize_t lbs_rtap_set(struct device *dev,
 281                 struct device_attribute *attr, const char * buf, size_t count)
 282 {
 283         int monitor_mode;
 284         struct lbs_private *priv = to_net_dev(dev)->priv;
 285
 286         sscanf(buf, "%x", &monitor_mode);
 287         if (monitor_mode) {
 288                 if (priv->monitormode == monitor_mode)
 289                         return strlen(buf);
 290                 if (!priv->monitormode) {
 291                         if (priv->infra_open || priv->mesh_open)
 292                                 return -EBUSY;
 293                         if (priv->mode == IW_MODE_INFRA)
 294                                 lbs_send_deauthentication(priv);
 295                         else if (priv->mode == IW_MODE_ADHOC)
 296                                 lbs_stop_adhoc_network(priv);
 297                         lbs_add_rtap(priv);
 298                 }
 299                 priv->monitormode = monitor_mode;
 300         }
 301
 302         else {
 303                 if (!priv->monitormode)
 304                         return strlen(buf);
 305                 priv->monitormode = 0;
 306                 lbs_remove_rtap(priv);
 307
 308                 if (priv->currenttxskb) {
 309                         dev_kfree_skb_any(priv->currenttxskb);
 310                         priv->currenttxskb = NULL;
 311                 }
 312
 313                 /* Wake queues, command thread, etc. */
 314                 lbs_host_to_card_done(priv);
 315         }
 316
 317         lbs_prepare_and_send_command(priv,
 318                         CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
 319                         CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
 320         return strlen(buf);
 321 }
 322
 323 /**
 324  * lbs_rtap attribute to be exported per ethX interface
 325  * through sysfs (/sys/class/net/ethX/lbs_rtap)
 326  */
 327 static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );
 328
 329 /**
 330  * Get function for sysfs attribute mesh
 331  */
 332 static ssize_t lbs_mesh_get(struct device *dev,
 333                 struct device_attribute *attr, char * buf)
 334 {
 335         struct lbs_private *priv = to_net_dev(dev)->priv;
 336         return snprintf(buf, 5, "0x%X\n", !!priv->mesh_dev);
 337 }
 338
 339 /**
 340  *  Set function for sysfs attribute mesh
 341  */
 342 static ssize_t lbs_mesh_set(struct device *dev,
 343                 struct device_attribute *attr, const char * buf, size_t count)
 344 {
 345         struct lbs_private *priv = to_net_dev(dev)->priv;
 346         int enable;
 347         int ret, action = CMD_ACT_MESH_CONFIG_STOP;
 348
 349         sscanf(buf, "%x", &enable);
 350         enable = !!enable;
 351         if (enable == !!priv->mesh_dev)
 352                 return count;
 353         if (enable)
 354                 action = CMD_ACT_MESH_CONFIG_START;
 355         ret = lbs_mesh_config(priv, action, priv->curbssparams.channel);
 356         if (ret)
 357                 return ret;
 358
 359         if (enable)
 360                 lbs_add_mesh(priv);
 361         else
 362                 lbs_remove_mesh(priv);
 363
 364         return count;
 365 }
 366
 367 /**
 368  * lbs_mesh attribute to be exported per ethX interface
 369  * through sysfs (/sys/class/net/ethX/lbs_mesh)
 370  */
 371 static DEVICE_ATTR(lbs_mesh, 0644, lbs_mesh_get, lbs_mesh_set);
 372
 373 /**
 374  * anycast_mask attribute to be exported per mshX interface
 375  * through sysfs (/sys/class/net/mshX/anycast_mask)
 376  */
 377 static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
 378
 379 static struct attribute *lbs_mesh_sysfs_entries[] = {
 380         &dev_attr_anycast_mask.attr,
 381         NULL,
 382 };
 383
 384 static struct attribute_group lbs_mesh_attr_group = {
 385         .attrs = lbs_mesh_sysfs_entries,
 386 };
 387
 388 /**
 389  *  @brief This function opens the ethX or mshX interface
 390  *
 391  *  @param dev     A pointer to net_device structure
 392  *  @return        0 or -EBUSY if monitor mode active
 393  */
 394 static int lbs_dev_open(struct net_device *dev)
 395 {
 396         struct lbs_private *priv = (struct lbs_private *) dev->priv ;
 397         int ret = 0;
 398
 399         lbs_deb_enter(LBS_DEB_NET);
 400
 401         spin_lock_irq(&priv->driver_lock);
 402
 403         if (priv->monitormode) {
 404                 ret = -EBUSY;
 405                 goto out;
 406         }
 407
 408         if (dev == priv->mesh_dev) {
 409                 priv->mesh_open = 1;
 410                 priv->mesh_connect_status = LBS_CONNECTED;
 411                 netif_carrier_on(dev);
 412         } else {
 413                 priv->infra_open = 1;
 414
 415                 if (priv->connect_status == LBS_CONNECTED)
 416                         netif_carrier_on(dev);
 417                 else
 418                         netif_carrier_off(dev);
 419         }
 420
 421         if (!priv->tx_pending_len)
 422                 netif_wake_queue(dev);
 423  out:
 424
 425         spin_unlock_irq(&priv->driver_lock);
 426         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
 427         return ret;
 428 }
 429
 430 /**
 431  *  @brief This function closes the mshX interface
 432  *
 433  *  @param dev     A pointer to net_device structure
 434  *  @return        0
 435  */
 436 static int lbs_mesh_stop(struct net_device *dev)
 437 {
 438         struct lbs_private *priv = (struct lbs_private *) (dev->priv);
 439
 440         lbs_deb_enter(LBS_DEB_MESH);
 441         spin_lock_irq(&priv->driver_lock);
 442
 443         priv->mesh_open = 0;
 444         priv->mesh_connect_status = LBS_DISCONNECTED;
 445
 446         netif_stop_queue(dev);
 447         netif_carrier_off(dev);
 448
 449         spin_unlock_irq(&priv->driver_lock);
 450
 451         schedule_work(&priv->mcast_work);
 452
 453         lbs_deb_leave(LBS_DEB_MESH);
 454         return 0;
 455 }
 456
 457 /**
 458  *  @brief This function closes the ethX interface
 459  *
 460  *  @param dev     A pointer to net_device structure
 461  *  @return        0
 462  */
 463 static int lbs_eth_stop(struct net_device *dev)
 464 {
 465         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 466
 467         lbs_deb_enter(LBS_DEB_NET);
 468
 469         spin_lock_irq(&priv->driver_lock);
 470         priv->infra_open = 0;
 471         netif_stop_queue(dev);
 472         spin_unlock_irq(&priv->driver_lock);
 473
 474         schedule_work(&priv->mcast_work);
 475
 476         lbs_deb_leave(LBS_DEB_NET);
 477         return 0;
 478 }
 479
 480 static void lbs_tx_timeout(struct net_device *dev)
 481 {
 482         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 483
 484         lbs_deb_enter(LBS_DEB_TX);
 485
 486         lbs_pr_err("tx watch dog timeout\n");
 487
 488         dev->trans_start = jiffies;
 489
 490         if (priv->currenttxskb)
 491                 lbs_send_tx_feedback(priv, 0);
 492
 493         /* XX: Shouldn't we also call into the hw-specific driver
 494            to kick it somehow? */
 495         lbs_host_to_card_done(priv);
 496
 497         /* More often than not, this actually happens because the
 498            firmware has crapped itself -- rather than just a very
 499            busy medium. So send a harmless command, and if/when
 500            _that_ times out, we'll kick it in the head. */
 501         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
 502                                      0, 0, NULL);
 503
 504         lbs_deb_leave(LBS_DEB_TX);
 505 }
 506
 507 void lbs_host_to_card_done(struct lbs_private *priv)
 508 {
 509         unsigned long flags;
 510
 511         lbs_deb_enter(LBS_DEB_THREAD);
 512
 513         spin_lock_irqsave(&priv->driver_lock, flags);
 514
 515         priv->dnld_sent = DNLD_RES_RECEIVED;
 516
 517         /* Wake main thread if commands are pending */
 518         if (!priv->cur_cmd || priv->tx_pending_len > 0)
 519                 wake_up_interruptible(&priv->waitq);
 520
 521         spin_unlock_irqrestore(&priv->driver_lock, flags);
 522         lbs_deb_leave(LBS_DEB_THREAD);
 523 }
 524 EXPORT_SYMBOL_GPL(lbs_host_to_card_done);
 525
 526 /**
 527  *  @brief This function returns the network statistics
 528  *
 529  *  @param dev     A pointer to struct lbs_private structure
 530  *  @return        A pointer to net_device_stats structure
 531  */
 532 static struct net_device_stats *lbs_get_stats(struct net_device *dev)
 533 {
 534         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 535
 536         lbs_deb_enter(LBS_DEB_NET);
 537         return &priv->stats;
 538 }
 539
 540 static int lbs_set_mac_address(struct net_device *dev, void *addr)
 541 {
 542         int ret = 0;
 543         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 544         struct sockaddr *phwaddr = addr;
 545         struct cmd_ds_802_11_mac_address cmd;
 546
 547         lbs_deb_enter(LBS_DEB_NET);
 548
 549         /* In case it was called from the mesh device */
 550         dev = priv->dev;
 551
 552         cmd.hdr.size = cpu_to_le16(sizeof(cmd));
 553         cmd.action = cpu_to_le16(CMD_ACT_SET);
 554         memcpy(cmd.macadd, phwaddr->sa_data, ETH_ALEN);
 555
 556         ret = lbs_cmd_with_response(priv, CMD_802_11_MAC_ADDRESS, &cmd);
 557         if (ret) {
 558                 lbs_deb_net("set MAC address failed\n");
 559                 goto done;
 560         }
 561
 562         memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
 563         memcpy(dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
 564         if (priv->mesh_dev)
 565                 memcpy(priv->mesh_dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
 566
 567 done:
 568         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
 569         return ret;
 570 }
 571
 572
 573 static inline int mac_in_list(unsigned char *list, int list_len,
 574                               unsigned char *mac)
 575 {
 576         while (list_len) {
 577                 if (!memcmp(list, mac, ETH_ALEN))
 578                         return 1;
 579                 list += ETH_ALEN;
 580                 list_len--;
 581         }
 582         return 0;
 583 }
 584
 585
 586 static int lbs_add_mcast_addrs(struct cmd_ds_mac_multicast_adr *cmd,
 587                                struct net_device *dev, int nr_addrs)
 588 {
 589         int i = nr_addrs;
 590         struct dev_mc_list *mc_list;
 591         DECLARE_MAC_BUF(mac);
 592
 593         if ((dev->flags & (IFF_UP|IFF_MULTICAST)) != (IFF_UP|IFF_MULTICAST))
 594                 return nr_addrs;
 595
 596         netif_tx_lock_bh(dev);
 597         for (mc_list = dev->mc_list; mc_list; mc_list = mc_list->next) {
 598                 if (mac_in_list(cmd->maclist, nr_addrs, mc_list->dmi_addr)) {
 599                         lbs_deb_net("mcast address %s:%s skipped\n", dev->name,
 600                                     print_mac(mac, mc_list->dmi_addr));
 601                         continue;
 602                 }
 603
 604                 if (i == MRVDRV_MAX_MULTICAST_LIST_SIZE)
 605                         break;
 606                 memcpy(&cmd->maclist[6*i], mc_list->dmi_addr, ETH_ALEN);
 607                 lbs_deb_net("mcast address %s:%s added to filter\n", dev->name,
 608                             print_mac(mac, mc_list->dmi_addr));
 609                 i++;
 610         }
 611         netif_tx_unlock_bh(dev);
 612         if (mc_list)
 613                 return -EOVERFLOW;
 614
 615         return i;
 616 }
 617
 618 static void lbs_set_mcast_worker(struct work_struct *work)
 619 {
 620         struct lbs_private *priv = container_of(work, struct lbs_private, mcast_work);
 621         struct cmd_ds_mac_multicast_adr mcast_cmd;
 622         int dev_flags;
 623         int nr_addrs;
 624         int old_mac_control = priv->mac_control;
 625
 626         lbs_deb_enter(LBS_DEB_NET);
 627
 628         dev_flags = priv->dev->flags;
 629         if (priv->mesh_dev)
 630                 dev_flags |= priv->mesh_dev->flags;
 631
 632         if (dev_flags & IFF_PROMISC) {
 633                 priv->mac_control |= CMD_ACT_MAC_PROMISCUOUS_ENABLE;
 634                 priv->mac_control &= ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
 635                                        CMD_ACT_MAC_MULTICAST_ENABLE);
 636                 goto out_set_mac_control;
 637         } else if (dev_flags & IFF_ALLMULTI) {
 638         do_allmulti:
 639                 priv->mac_control |= CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
 640                 priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
 641                                        CMD_ACT_MAC_MULTICAST_ENABLE);
 642                 goto out_set_mac_control;
 643         }
 644
 645         /* Once for priv->dev, again for priv->mesh_dev if it exists */
 646         nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->dev, 0);
 647         if (nr_addrs >= 0 && priv->mesh_dev)
 648                 nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->mesh_dev, nr_addrs);
 649         if (nr_addrs < 0)
 650                 goto do_allmulti;
 651
 652         if (nr_addrs) {
 653                 int size = offsetof(struct cmd_ds_mac_multicast_adr,
 654                                     maclist[6*nr_addrs]);
 655
 656                 mcast_cmd.action = cpu_to_le16(CMD_ACT_SET);
 657                 mcast_cmd.hdr.size = cpu_to_le16(size);
 658                 mcast_cmd.nr_of_adrs = cpu_to_le16(nr_addrs);
 659
 660                 lbs_cmd_async(priv, CMD_MAC_MULTICAST_ADR, &mcast_cmd.hdr, size);
 661
 662                 priv->mac_control |= CMD_ACT_MAC_MULTICAST_ENABLE;
 663         } else
 664                 priv->mac_control &= ~CMD_ACT_MAC_MULTICAST_ENABLE;
 665
 666         priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
 667                                CMD_ACT_MAC_ALL_MULTICAST_ENABLE);
 668  out_set_mac_control:
 669         if (priv->mac_control != old_mac_control)
 670                 lbs_set_mac_control(priv);
 671
 672         lbs_deb_leave(LBS_DEB_NET);
 673 }
 674
 675 static void lbs_set_multicast_list(struct net_device *dev)
 676 {
 677         struct lbs_private *priv = dev->priv;
 678
 679         schedule_work(&priv->mcast_work);
 680 }
 681
 682 /**
 683  *  @brief This function handles the major jobs in the LBS driver.
 684  *  It handles all events generated by firmware, RX data received
 685  *  from firmware and TX data sent from kernel.
 686  *
 687  *  @param data    A pointer to lbs_thread structure
 688  *  @return        0
 689  */
 690 static int lbs_thread(void *data)
 691 {
 692         struct net_device *dev = data;
 693         struct lbs_private *priv = dev->priv;
 694         wait_queue_t wait;
 695
 696         lbs_deb_enter(LBS_DEB_THREAD);
 697
 698         init_waitqueue_entry(&wait, current);
 699
 700         for (;;) {
 701                 int shouldsleep;
 702                 u8 resp_idx;
 703
 704                 lbs_deb_thread("1: currenttxskb %p, dnld_sent %d\n",
 705                                 priv->currenttxskb, priv->dnld_sent);
 706
 707                 add_wait_queue(&priv->waitq, &wait);
 708                 set_current_state(TASK_INTERRUPTIBLE);
 709                 spin_lock_irq(&priv->driver_lock);
 710
 711                 if (kthread_should_stop())
 712                         shouldsleep = 0;        /* Bye */
 713                 else if (priv->surpriseremoved)
 714                         shouldsleep = 1;        /* We need to wait until we're _told_ to die */
 715                 else if (priv->psstate == PS_STATE_SLEEP)
 716                         shouldsleep = 1;        /* Sleep mode. Nothing we can do till it wakes */
 717                 else if (priv->cmd_timed_out)
 718                         shouldsleep = 0;        /* Command timed out. Recover */
 719                 else if (!priv->fw_ready)
 720                         shouldsleep = 1;        /* Firmware not ready. We're waiting for it */
 721                 else if (priv->dnld_sent)
 722                         shouldsleep = 1;        /* Something is en route to the device already */
 723                 else if (priv->tx_pending_len > 0)
 724                         shouldsleep = 0;        /* We've a packet to send */
 725                 else if (priv->cur_cmd)
 726                         shouldsleep = 1;        /* Can't send a command; one already running */
 727                 else if (!list_empty(&priv->cmdpendingq))
 728                         shouldsleep = 0;        /* We have a command to send */
 729                 else if (__kfifo_len(priv->event_fifo))
 730                         shouldsleep = 0;        /* We have an event to process */
 731                 else if (priv->resp_len[priv->resp_idx])
 732                         shouldsleep = 0;        /* We have a command response */
 733                 else
 734                         shouldsleep = 1;        /* No command */
 735
 736                 if (shouldsleep) {
 737                         lbs_deb_thread("sleeping, connect_status %d, "
 738                                 "psmode %d, psstate %d\n",
 739                                 priv->connect_status,
 740                                 priv->psmode, priv->psstate);
 741                         spin_unlock_irq(&priv->driver_lock);
 742                         schedule();
 743                 } else
 744                         spin_unlock_irq(&priv->driver_lock);
 745
 746                 lbs_deb_thread("2: currenttxskb %p, dnld_send %d\n",
 747                                priv->currenttxskb, priv->dnld_sent);
 748
 749                 set_current_state(TASK_RUNNING);
 750                 remove_wait_queue(&priv->waitq, &wait);
 751
 752                 lbs_deb_thread("3: currenttxskb %p, dnld_sent %d\n",
 753                                priv->currenttxskb, priv->dnld_sent);
 754
 755                 if (kthread_should_stop()) {
 756                         lbs_deb_thread("break from main thread\n");
 757                         break;
 758                 }
 759
 760                 if (priv->surpriseremoved) {
 761                         lbs_deb_thread("adapter removed; waiting to die...\n");
 762                         continue;
 763                 }
 764
 765                 lbs_deb_thread("4: currenttxskb %p, dnld_sent %d\n",
 766                        priv->currenttxskb, priv->dnld_sent);
 767
 768                 spin_lock_irq(&priv->driver_lock);
 769                 /* Process any pending command response */
 770                 resp_idx = priv->resp_idx;
 771                 if (priv->resp_len[resp_idx]) {
 772                         spin_unlock_irq(&priv->driver_lock);
 773                         lbs_process_command_response(priv,
 774                                 priv->resp_buf[resp_idx],
 775                                 priv->resp_len[resp_idx]);
 776                         spin_lock_irq(&priv->driver_lock);
 777                         priv->resp_len[resp_idx] = 0;
 778                 }
 779                 spin_unlock_irq(&priv->driver_lock);
 780
 781                 /* command timeout stuff */
 782                 if (priv->cmd_timed_out && priv->cur_cmd) {
 783                         struct cmd_ctrl_node *cmdnode = priv->cur_cmd;
 784
 785                         if (++priv->nr_retries > 10) {
 786                                 lbs_pr_info("Excessive timeouts submitting command %x\n",
 787                                             le16_to_cpu(cmdnode->cmdbuf->command));
 788                                 lbs_complete_command(priv, cmdnode, -ETIMEDOUT);
 789                                 priv->nr_retries = 0;
 790                         } else {
 791                                 priv->cur_cmd = NULL;
 792                                 lbs_pr_info("requeueing command %x due to timeout (#%d)\n",
 793                                             le16_to_cpu(cmdnode->cmdbuf->command), priv->nr_retries);
 794
 795                                 /* Stick it back at the _top_ of the pending queue
 796                                    for immediate resubmission */
 797                                 list_add(&cmdnode->list, &priv->cmdpendingq);
 798                         }
 799                 }
 800                 priv->cmd_timed_out = 0;
 801
 802                 /* Process hardware events, e.g. card removed, link lost */
 803                 spin_lock_irq(&priv->driver_lock);
 804                 while (__kfifo_len(priv->event_fifo)) {
 805                         u32 event;
 806
 807                         __kfifo_get(priv->event_fifo, (unsigned char *) &event,
 808                                 sizeof(event));
 809                         spin_unlock_irq(&priv->driver_lock);
 810                         lbs_process_event(priv, event);
 811                         spin_lock_irq(&priv->driver_lock);
 812                 }
 813                 spin_unlock_irq(&priv->driver_lock);
 814
 815                 if (!priv->fw_ready)
 816                         continue;
 817
 818                 /* Check if we need to confirm Sleep Request received previously */
 819                 if (priv->psstate == PS_STATE_PRE_SLEEP &&
 820                     !priv->dnld_sent && !priv->cur_cmd) {
 821                         if (priv->connect_status == LBS_CONNECTED) {
 822                                 lbs_deb_thread("pre-sleep, currenttxskb %p, "
 823                                         "dnld_sent %d, cur_cmd %p\n",
 824                                         priv->currenttxskb, priv->dnld_sent,
 825                                         priv->cur_cmd);
 826
 827                                 lbs_ps_confirm_sleep(priv);
 828                         } else {
 829                                 /* workaround for firmware sending
 830                                  * deauth/linkloss event immediately
 831                                  * after sleep request; remove this
 832                                  * after firmware fixes it
 833                                  */
 834                                 priv->psstate = PS_STATE_AWAKE;
 835                                 lbs_pr_alert("ignore PS_SleepConfirm in "
 836                                         "non-connected state\n");
 837                         }
 838                 }
 839
 840                 /* The PS state is changed during processing of Sleep Request
 841                  * event above
 842                  */
 843                 if ((priv->psstate == PS_STATE_SLEEP) ||
 844                     (priv->psstate == PS_STATE_PRE_SLEEP))
 845                         continue;
 846
 847                 /* Execute the next command */
 848                 if (!priv->dnld_sent && !priv->cur_cmd)
 849                         lbs_execute_next_command(priv);
 850
 851                 /* Wake-up command waiters which can't sleep in
 852                  * lbs_prepare_and_send_command
 853                  */
 854                 if (!list_empty(&priv->cmdpendingq))
 855                         wake_up_all(&priv->cmd_pending);
 856
 857                 spin_lock_irq(&priv->driver_lock);
 858                 if (!priv->dnld_sent && priv->tx_pending_len > 0) {
 859                         int ret = priv->hw_host_to_card(priv, MVMS_DAT,
 860                                                         priv->tx_pending_buf,
 861                                                         priv->tx_pending_len);
 862                         if (ret) {
 863                                 lbs_deb_tx("host_to_card failed %d\n", ret);
 864                                 priv->dnld_sent = DNLD_RES_RECEIVED;
 865                         }
 866                         priv->tx_pending_len = 0;
 867                         if (!priv->currenttxskb) {
 868                                 /* We can wake the queues immediately if we aren't
 869                                    waiting for TX feedback */
 870                                 if (priv->connect_status == LBS_CONNECTED)
 871                                         netif_wake_queue(priv->dev);
 872                                 if (priv->mesh_dev &&
 873                                     priv->mesh_connect_status == LBS_CONNECTED)
 874                                         netif_wake_queue(priv->mesh_dev);
 875                         }
 876                 }
 877                 spin_unlock_irq(&priv->driver_lock);
 878         }
 879
 880         del_timer(&priv->command_timer);
 881         wake_up_all(&priv->cmd_pending);
 882
 883         lbs_deb_leave(LBS_DEB_THREAD);
 884         return 0;
 885 }
 886
 887 static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
 888                                 struct cmd_header *cmd)
 889 {
 890         lbs_deb_enter(LBS_DEB_FW);
 891
 892         netif_device_detach(priv->dev);
 893         if (priv->mesh_dev)
 894                 netif_device_detach(priv->mesh_dev);
 895
 896         priv->fw_ready = 0;
 897         lbs_deb_leave(LBS_DEB_FW);
 898         return 0;
 899 }
 900
 901 int lbs_suspend(struct lbs_private *priv)
 902 {
 903         struct cmd_header cmd;
 904         int ret;
 905
 906         lbs_deb_enter(LBS_DEB_FW);
 907
 908         if (priv->wol_criteria == 0xffffffff) {
 909                 lbs_pr_info("Suspend attempt without configuring wake params!\n");
 910                 return -EINVAL;
 911         }
 912
 913         memset(&cmd, 0, sizeof(cmd));
 914
 915         ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
 916                         sizeof(cmd), lbs_suspend_callback, 0);
 917         if (ret)
 918                 lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);
 919
 920         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
 921         return ret;
 922 }
 923 EXPORT_SYMBOL_GPL(lbs_suspend);
 924
 925 void lbs_resume(struct lbs_private *priv)
 926 {
 927         lbs_deb_enter(LBS_DEB_FW);
 928
 929         priv->fw_ready = 1;
 930
 931         /* Firmware doesn't seem to give us RX packets any more
 932            until we send it some command. Might as well update */
 933         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
 934                                      0, 0, NULL);
 935
 936         netif_device_attach(priv->dev);
 937         if (priv->mesh_dev)
 938                 netif_device_attach(priv->mesh_dev);
 939
 940         lbs_deb_leave(LBS_DEB_FW);
 941 }
 942 EXPORT_SYMBOL_GPL(lbs_resume);
 943
 944 /**
 945  *  @brief This function downloads firmware image, gets
 946  *  HW spec from firmware and set basic parameters to
 947  *  firmware.
 948  *
 949  *  @param priv    A pointer to struct lbs_private structure
 950  *  @return        0 or -1
 951  */
 952 static int lbs_setup_firmware(struct lbs_private *priv)
 953 {
 954         int ret = -1;
 955
 956         lbs_deb_enter(LBS_DEB_FW);
 957
 958         /*
 959          * Read MAC address from HW
 960          */
 961         memset(priv->current_addr, 0xff, ETH_ALEN);
 962         ret = lbs_update_hw_spec(priv);
 963         if (ret)
 964                 goto done;
 965
 966         lbs_set_mac_control(priv);
 967 done:
 968         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
 969         return ret;
 970 }
 971
 972 /**
 973  *  This function handles the timeout of command sending.
 974  *  It will re-send the same command again.
 975  */
 976 static void command_timer_fn(unsigned long data)
 977 {
 978         struct lbs_private *priv = (struct lbs_private *)data;
 979         unsigned long flags;
 980
 981         lbs_deb_enter(LBS_DEB_CMD);
 982         spin_lock_irqsave(&priv->driver_lock, flags);
 983
 984         if (!priv->cur_cmd) {
 985                 lbs_pr_info("Command timer expired; no pending command\n");
 986                 goto out;
 987         }
 988
 989         lbs_pr_info("Command %x timed out\n", le16_to_cpu(priv->cur_cmd->cmdbuf->command));
 990
 991         priv->cmd_timed_out = 1;
 992         wake_up_interruptible(&priv->waitq);
 993 out:
 994         spin_unlock_irqrestore(&priv->driver_lock, flags);
 995         lbs_deb_leave(LBS_DEB_CMD);
 996 }
 997
 998 static void lbs_sync_channel_worker(struct work_struct *work)
 999 {
1000         struct lbs_private *priv = container_of(work, struct lbs_private,
1001                 sync_channel);
1002
1003         lbs_deb_enter(LBS_DEB_MAIN);
1004         if (lbs_update_channel(priv))
1005                 lbs_pr_info("Channel synchronization failed.");
1006         lbs_deb_leave(LBS_DEB_MAIN);
1007 }
1008
1009
1010 static int lbs_init_adapter(struct lbs_private *priv)
1011 {
1012         size_t bufsize;
1013         int i, ret = 0;
1014
1015         lbs_deb_enter(LBS_DEB_MAIN);
1016
1017         /* Allocate buffer to store the BSSID list */
1018         bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
1019         priv->networks = kzalloc(bufsize, GFP_KERNEL);
1020         if (!priv->networks) {
1021                 lbs_pr_err("Out of memory allocating beacons\n");
1022                 ret = -1;
1023                 goto out;
1024         }
1025
1026         /* Initialize scan result lists */
1027         INIT_LIST_HEAD(&priv->network_free_list);
1028         INIT_LIST_HEAD(&priv->network_list);
1029         for (i = 0; i < MAX_NETWORK_COUNT; i++) {
1030                 list_add_tail(&priv->networks[i].list,
1031                               &priv->network_free_list);
1032         }
1033
1034         memset(priv->current_addr, 0xff, ETH_ALEN);
1035
1036         priv->connect_status = LBS_DISCONNECTED;
1037         priv->mesh_connect_status = LBS_DISCONNECTED;
1038         priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
1039         priv->mode = IW_MODE_INFRA;
1040         priv->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
1041         priv->mac_control = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
1042         priv->radioon = RADIO_ON;
1043         priv->auto_rate = 1;
1044         priv->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
1045         priv->psmode = LBS802_11POWERMODECAM;
1046         priv->psstate = PS_STATE_FULL_POWER;
1047
1048         mutex_init(&priv->lock);
1049
1050         setup_timer(&priv->command_timer, command_timer_fn,
1051                 (unsigned long)priv);
1052
1053         INIT_LIST_HEAD(&priv->cmdfreeq);
1054         INIT_LIST_HEAD(&priv->cmdpendingq);
1055
1056         spin_lock_init(&priv->driver_lock);
1057         init_waitqueue_head(&priv->cmd_pending);
1058
1059         /* Allocate the command buffers */
1060         if (lbs_allocate_cmd_buffer(priv)) {
1061                 lbs_pr_err("Out of memory allocating command buffers\n");
1062                 ret = -ENOMEM;
1063                 goto out;
1064         }
1065         priv->resp_idx = 0;
1066         priv->resp_len[0] = priv->resp_len[1] = 0;
1067
1068         /* Create the event FIFO */
1069         priv->event_fifo = kfifo_alloc(sizeof(u32) * 16, GFP_KERNEL, NULL);
1070         if (IS_ERR(priv->event_fifo)) {
1071                 lbs_pr_err("Out of memory allocating event FIFO buffer\n");
1072                 ret = -ENOMEM;
1073                 goto out;
1074         }
1075
1076 out:
1077         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1078
1079         return ret;
1080 }
1081
1082 static void lbs_free_adapter(struct lbs_private *priv)
1083 {
1084         lbs_deb_enter(LBS_DEB_MAIN);
1085
1086         lbs_free_cmd_buffer(priv);
1087         if (priv->event_fifo)
1088                 kfifo_free(priv->event_fifo);
1089         del_timer(&priv->command_timer);
1090         kfree(priv->networks);
1091         priv->networks = NULL;
1092
1093         lbs_deb_leave(LBS_DEB_MAIN);
1094 }
1095
1096 /**
1097  * @brief This function adds the card. it will probe the
1098  * card, allocate the lbs_priv and initialize the device.
1099  *
1100  *  @param card    A pointer to card
1101  *  @return        A pointer to struct lbs_private structure
1102  */
1103 struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
1104 {
1105         struct net_device *dev = NULL;
1106         struct lbs_private *priv = NULL;
1107
1108         lbs_deb_enter(LBS_DEB_MAIN);
1109
1110         /* Allocate an Ethernet device and register it */
1111         dev = alloc_etherdev(sizeof(struct lbs_private));
1112         if (!dev) {
1113                 lbs_pr_err("init ethX device failed\n");
1114                 goto done;
1115         }
1116         priv = dev->priv;
1117
1118         if (lbs_init_adapter(priv)) {
1119                 lbs_pr_err("failed to initialize adapter structure.\n");
1120                 goto err_init_adapter;
1121         }
1122
1123         priv->dev = dev;
1124         priv->card = card;
1125         priv->mesh_open = 0;
1126         priv->infra_open = 0;
1127
1128         /* Setup the OS Interface to our functions */
1129         dev->open = lbs_dev_open;
1130         dev->hard_start_xmit = lbs_hard_start_xmit;
1131         dev->stop = lbs_eth_stop;
1132         dev->set_mac_address = lbs_set_mac_address;
1133         dev->tx_timeout = lbs_tx_timeout;
1134         dev->get_stats = lbs_get_stats;
1135         dev->watchdog_timeo = 5 * HZ;
1136         dev->ethtool_ops = &lbs_ethtool_ops;
1137 #ifdef  WIRELESS_EXT
1138         dev->wireless_handlers = (struct iw_handler_def *)&lbs_handler_def;
1139 #endif
1140         dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1141         dev->set_multicast_list = lbs_set_multicast_list;
1142
1143         SET_NETDEV_DEV(dev, dmdev);
1144
1145         priv->rtap_net_dev = NULL;
1146
1147         lbs_deb_thread("Starting main thread...\n");
1148         init_waitqueue_head(&priv->waitq);
1149         priv->main_thread = kthread_run(lbs_thread, dev, "lbs_main");
1150         if (IS_ERR(priv->main_thread)) {
1151                 lbs_deb_thread("Error creating main thread.\n");
1152                 goto err_init_adapter;
1153         }
1154
1155         priv->work_thread = create_singlethread_workqueue("lbs_worker");
1156         INIT_DELAYED_WORK(&priv->assoc_work, lbs_association_worker);
1157         INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
1158         INIT_WORK(&priv->mcast_work, lbs_set_mcast_worker);
1159         INIT_WORK(&priv->sync_channel, lbs_sync_channel_worker);
1160
1161         sprintf(priv->mesh_ssid, "mesh");
1162         priv->mesh_ssid_len = 4;
1163
1164         priv->wol_criteria = 0xffffffff;
1165         priv->wol_gpio = 0xff;
1166
1167         goto done;
1168
1169 err_init_adapter:
1170         lbs_free_adapter(priv);
1171         free_netdev(dev);
1172         priv = NULL;
1173
1174 done:
1175         lbs_deb_leave_args(LBS_DEB_MAIN, "priv %p", priv);
1176         return priv;
1177 }
1178 EXPORT_SYMBOL_GPL(lbs_add_card);
1179
1180
1181 void lbs_remove_card(struct lbs_private *priv)
1182 {
1183         struct net_device *dev = priv->dev;
1184         union iwreq_data wrqu;
1185
1186         lbs_deb_enter(LBS_DEB_MAIN);
1187
1188         lbs_remove_mesh(priv);
1189         lbs_remove_rtap(priv);
1190
1191         dev = priv->dev;
1192
1193         cancel_delayed_work_sync(&priv->scan_work);
1194         cancel_delayed_work_sync(&priv->assoc_work);
1195         cancel_work_sync(&priv->mcast_work);
1196         destroy_workqueue(priv->work_thread);
1197
1198         if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
1199                 priv->psmode = LBS802_11POWERMODECAM;
1200                 lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
1201         }
1202
1203         memset(wrqu.ap_addr.sa_data, 0xaa, ETH_ALEN);
1204         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1205         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
1206
1207         /* Stop the thread servicing the interrupts */
1208         priv->surpriseremoved = 1;
1209         kthread_stop(priv->main_thread);
1210
1211         lbs_free_adapter(priv);
1212
1213         priv->dev = NULL;
1214         free_netdev(dev);
1215
1216         lbs_deb_leave(LBS_DEB_MAIN);
1217 }
1218 EXPORT_SYMBOL_GPL(lbs_remove_card);
1219
1220
1221 int lbs_start_card(struct lbs_private *priv)
1222 {
1223         struct net_device *dev = priv->dev;
1224         int ret = -1;
1225
1226         lbs_deb_enter(LBS_DEB_MAIN);
1227
1228         /* poke the firmware */
1229         ret = lbs_setup_firmware(priv);
1230         if (ret)
1231                 goto done;
1232
1233         /* init 802.11d */
1234         lbs_init_11d(priv);
1235
1236         if (register_netdev(dev)) {
1237                 lbs_pr_err("cannot register ethX device\n");
1238                 goto done;
1239         }
1240         if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
1241                 lbs_pr_err("cannot register lbs_rtap attribute\n");
1242
1243         lbs_update_channel(priv);
1244
1245         /* 5.0.16p0 is known to NOT support any mesh */
1246         if (priv->fwrelease > 0x05001000) {
1247                 /* Enable mesh, if supported, and work out which TLV it uses.
1248                    0x100 + 291 is an unofficial value used in 5.110.20.pXX
1249                    0x100 + 37 is the official value used in 5.110.21.pXX
1250                    but we check them in that order because 20.pXX doesn't
1251                    give an error -- it just silently fails. */
1252
1253                 /* 5.110.20.pXX firmware will fail the command if the channel
1254                    doesn't match the existing channel. But only if the TLV
1255                    is correct. If the channel is wrong, _BOTH_ versions will
1256                    give an error to 0x100+291, and allow 0x100+37 to succeed.
1257                    It's just that 5.110.20.pXX will not have done anything
1258                    useful */
1259
1260                 priv->mesh_tlv = 0x100 + 291;
1261                 if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1262                                     priv->curbssparams.channel)) {
1263                         priv->mesh_tlv = 0x100 + 37;
1264                         if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1265                                             priv->curbssparams.channel))
1266                                 priv->mesh_tlv = 0;
1267                 }
1268                 if (priv->mesh_tlv) {
1269                         lbs_add_mesh(priv);
1270
1271                         if (device_create_file(&dev->dev, &dev_attr_lbs_mesh))
1272                                 lbs_pr_err("cannot register lbs_mesh attribute\n");
1273                 }
1274         }
1275
1276         lbs_debugfs_init_one(priv, dev);
1277
1278         lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);
1279
1280         ret = 0;
1281
1282 done:
1283         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1284         return ret;
1285 }
1286 EXPORT_SYMBOL_GPL(lbs_start_card);
1287
1288
1289 void lbs_stop_card(struct lbs_private *priv)
1290 {
1291         struct net_device *dev = priv->dev;
1292         struct cmd_ctrl_node *cmdnode;
1293         unsigned long flags;
1294
1295         lbs_deb_enter(LBS_DEB_MAIN);
1296
1297         if (!priv)
1298                 goto out;
1299
1300         netif_stop_queue(priv->dev);
1301         netif_carrier_off(priv->dev);
1302
1303         lbs_debugfs_remove_one(priv);
1304         device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
1305         if (priv->mesh_tlv)
1306                 device_remove_file(&dev->dev, &dev_attr_lbs_mesh);
1307
1308         /* Flush pending command nodes */
1309         del_timer_sync(&priv->command_timer);
1310         spin_lock_irqsave(&priv->driver_lock, flags);
1311         list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
1312                 cmdnode->result = -ENOENT;
1313                 cmdnode->cmdwaitqwoken = 1;
1314                 wake_up_interruptible(&cmdnode->cmdwait_q);
1315         }
1316         spin_unlock_irqrestore(&priv->driver_lock, flags);
1317
1318         unregister_netdev(dev);
1319
1320 out:
1321         lbs_deb_leave(LBS_DEB_MAIN);
1322 }
1323 EXPORT_SYMBOL_GPL(lbs_stop_card);
1324
1325
1326 /**
1327  * @brief This function adds mshX interface
1328  *
1329  *  @param priv    A pointer to the struct lbs_private structure
1330  *  @return        0 if successful, -X otherwise
1331  */
1332 static int lbs_add_mesh(struct lbs_private *priv)
1333 {
1334         struct net_device *mesh_dev = NULL;
1335         int ret = 0;
1336
1337         lbs_deb_enter(LBS_DEB_MESH);
1338
1339         /* Allocate a virtual mesh device */
1340         if (!(mesh_dev = alloc_netdev(0, "msh%d", ether_setup))) {
1341                 lbs_deb_mesh("init mshX device failed\n");
1342                 ret = -ENOMEM;
1343                 goto done;
1344         }
1345         mesh_dev->priv = priv;
1346         priv->mesh_dev = mesh_dev;
1347
1348         mesh_dev->open = lbs_dev_open;
1349         mesh_dev->hard_start_xmit = lbs_hard_start_xmit;
1350         mesh_dev->stop = lbs_mesh_stop;
1351         mesh_dev->get_stats = lbs_get_stats;
1352         mesh_dev->set_mac_address = lbs_set_mac_address;
1353         mesh_dev->ethtool_ops = &lbs_ethtool_ops;
1354         memcpy(mesh_dev->dev_addr, priv->dev->dev_addr,
1355                         sizeof(priv->dev->dev_addr));
1356
1357         SET_NETDEV_DEV(priv->mesh_dev, priv->dev->dev.parent);
1358
1359 #ifdef  WIRELESS_EXT
1360         mesh_dev->wireless_handlers = (struct iw_handler_def *)&mesh_handler_def;
1361 #endif
1362         mesh_dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1363         mesh_dev->set_multicast_list = lbs_set_multicast_list;
1364         /* Register virtual mesh interface */
1365         ret = register_netdev(mesh_dev);
1366         if (ret) {
1367                 lbs_pr_err("cannot register mshX virtual interface\n");
1368                 goto err_free;
1369         }
1370
1371         ret = sysfs_create_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1372         if (ret)
1373                 goto err_unregister;
1374
1375         /* Everything successful */
1376         ret = 0;
1377         goto done;
1378
1379 err_unregister:
1380         unregister_netdev(mesh_dev);
1381
1382 err_free:
1383         free_netdev(mesh_dev);
1384
1385 done:
1386         lbs_deb_leave_args(LBS_DEB_MESH, "ret %d", ret);
1387         return ret;
1388 }
1389
1390 static void lbs_remove_mesh(struct lbs_private *priv)
1391 {
1392         struct net_device *mesh_dev;
1393
1394
1395         mesh_dev = priv->mesh_dev;
1396         if (!mesh_dev)
1397                 return;
1398
1399         lbs_deb_enter(LBS_DEB_MESH);
1400         netif_stop_queue(mesh_dev);
1401         netif_carrier_off(priv->mesh_dev);
1402         sysfs_remove_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1403         unregister_netdev(mesh_dev);
1404         priv->mesh_dev = NULL;
1405         free_netdev(mesh_dev);
1406         lbs_deb_leave(LBS_DEB_MESH);
1407 }
1408
1409 /**
1410  *  @brief This function finds the CFP in
1411  *  region_cfp_table based on region and band parameter.
1412  *
1413  *  @param region  The region code
1414  *  @param band    The band
1415  *  @param cfp_no  A pointer to CFP number
1416  *  @return        A pointer to CFP
1417  */
1418 struct chan_freq_power *lbs_get_region_cfp_table(u8 region, int *cfp_no)
1419 {
1420         int i, end;
1421
1422         lbs_deb_enter(LBS_DEB_MAIN);
1423
1424         end = ARRAY_SIZE(region_cfp_table);
1425
1426         for (i = 0; i < end ; i++) {
1427                 lbs_deb_main("region_cfp_table[i].region=%d\n",
1428                         region_cfp_table[i].region);
1429                 if (region_cfp_table[i].region == region) {
1430                         *cfp_no = region_cfp_table[i].cfp_no_BG;
1431                         lbs_deb_leave(LBS_DEB_MAIN);
1432                         return region_cfp_table[i].cfp_BG;
1433                 }
1434         }
1435
1436         lbs_deb_leave_args(LBS_DEB_MAIN, "ret NULL");
1437         return NULL;
1438 }
1439
1440 int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
1441 {
1442         int ret = 0;
1443         int i = 0;
1444
1445         struct chan_freq_power *cfp;
1446         int cfp_no;
1447
1448         lbs_deb_enter(LBS_DEB_MAIN);
1449
1450         memset(priv->region_channel, 0, sizeof(priv->region_channel));
1451
1452         cfp = lbs_get_region_cfp_table(region, &cfp_no);
1453         if (cfp != NULL) {
1454                 priv->region_channel[i].nrcfp = cfp_no;
1455                 priv->region_channel[i].CFP = cfp;
1456         } else {
1457                 lbs_deb_main("wrong region code %#x in band B/G\n",
1458                        region);
1459                 ret = -1;
1460                 goto out;
1461         }
1462         priv->region_channel[i].valid = 1;
1463         priv->region_channel[i].region = region;
1464         priv->region_channel[i].band = band;
1465         i++;
1466 out:
1467         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1468         return ret;
1469 }
1470
1471 void lbs_queue_event(struct lbs_private *priv, u32 event)
1472 {
1473         unsigned long flags;
1474
1475         lbs_deb_enter(LBS_DEB_THREAD);
1476         spin_lock_irqsave(&priv->driver_lock, flags);
1477
1478         if (priv->psstate == PS_STATE_SLEEP)
1479                 priv->psstate = PS_STATE_AWAKE;
1480
1481         __kfifo_put(priv->event_fifo, (unsigned char *) &event, sizeof(u32));
1482
1483         wake_up_interruptible(&priv->waitq);
1484
1485         spin_unlock_irqrestore(&priv->driver_lock, flags);
1486         lbs_deb_leave(LBS_DEB_THREAD);
1487 }
1488 EXPORT_SYMBOL_GPL(lbs_queue_event);
1489
1490 void lbs_notify_command_response(struct lbs_private *priv, u8 resp_idx)
1491 {
1492         lbs_deb_enter(LBS_DEB_THREAD);
1493
1494         if (priv->psstate == PS_STATE_SLEEP)
1495                 priv->psstate = PS_STATE_AWAKE;
1496
1497         /* Swap buffers by flipping the response index */
1498         BUG_ON(resp_idx > 1);
1499         priv->resp_idx = resp_idx;
1500
1501         wake_up_interruptible(&priv->waitq);
1502
1503         lbs_deb_leave(LBS_DEB_THREAD);
1504 }
1505 EXPORT_SYMBOL_GPL(lbs_notify_command_response);
1506
1507 static int __init lbs_init_module(void)
1508 {
1509         lbs_deb_enter(LBS_DEB_MAIN);
1510         memset(&confirm_sleep, 0, sizeof(confirm_sleep));
1511         confirm_sleep.hdr.command = cpu_to_le16(CMD_802_11_PS_MODE);
1512         confirm_sleep.hdr.size = cpu_to_le16(sizeof(confirm_sleep));
1513         confirm_sleep.action = cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
1514         lbs_debugfs_init();
1515         lbs_deb_leave(LBS_DEB_MAIN);
1516         return 0;
1517 }
1518
1519 static void __exit lbs_exit_module(void)
1520 {
1521         lbs_deb_enter(LBS_DEB_MAIN);
1522         lbs_debugfs_remove();
1523         lbs_deb_leave(LBS_DEB_MAIN);
1524 }
1525
1526 /*
1527  * rtap interface support fuctions
1528  */
1529
1530 static int lbs_rtap_open(struct net_device *dev)
1531 {
1532         /* Yes, _stop_ the queue. Because we don't support injection */
1533         lbs_deb_enter(LBS_DEB_MAIN);
1534         netif_carrier_off(dev);
1535         netif_stop_queue(dev);
1536         lbs_deb_leave(LBS_DEB_LEAVE);
1537         return 0;
1538 }
1539
1540 static int lbs_rtap_stop(struct net_device *dev)
1541 {
1542         lbs_deb_enter(LBS_DEB_MAIN);
1543         lbs_deb_leave(LBS_DEB_MAIN);
1544         return 0;
1545 }
1546
1547 static int lbs_rtap_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
1548 {
1549         netif_stop_queue(dev);
1550         return NETDEV_TX_BUSY;
1551 }
1552
1553 static struct net_device_stats *lbs_rtap_get_stats(struct net_device *dev)
1554 {
1555         struct lbs_private *priv = dev->priv;
1556         lbs_deb_enter(LBS_DEB_NET);
1557         return &priv->stats;
1558 }
1559
1560
1561 static void lbs_remove_rtap(struct lbs_private *priv)
1562 {
1563         lbs_deb_enter(LBS_DEB_MAIN);
1564         if (priv->rtap_net_dev == NULL)
1565                 goto out;
1566         unregister_netdev(priv->rtap_net_dev);
1567         free_netdev(priv->rtap_net_dev);
1568         priv->rtap_net_dev = NULL;
1569 out:
1570         lbs_deb_leave(LBS_DEB_MAIN);
1571 }
1572
1573 static int lbs_add_rtap(struct lbs_private *priv)
1574 {
1575         int ret = 0;
1576         struct net_device *rtap_dev;
1577
1578         lbs_deb_enter(LBS_DEB_MAIN);
1579         if (priv->rtap_net_dev) {
1580                 ret = -EPERM;
1581                 goto out;
1582         }
1583
1584         rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
1585         if (rtap_dev == NULL) {
1586                 ret = -ENOMEM;
1587                 goto out;
1588         }
1589
1590         memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
1591         rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
1592         rtap_dev->open = lbs_rtap_open;
1593         rtap_dev->stop = lbs_rtap_stop;
1594         rtap_dev->get_stats = lbs_rtap_get_stats;
1595         rtap_dev->hard_start_xmit = lbs_rtap_hard_start_xmit;
1596         rtap_dev->priv = priv;
1597
1598         ret = register_netdev(rtap_dev);
1599         if (ret) {
1600                 free_netdev(rtap_dev);
1601                 goto out;
1602         }
1603         priv->rtap_net_dev = rtap_dev;
1604
1605 out:
1606         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1607         return ret;
1608 }
1609
1610 #ifndef CONFIG_IEEE80211
1611 const char *escape_essid(const char *essid, u8 essid_len)
1612 {
1613         static char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
1614         const char *s = essid;
1615         char *d = escaped;
1616
1617         if (ieee80211_is_empty_essid(essid, essid_len)) {
1618                 memcpy(escaped, "<hidden>", sizeof("<hidden>"));
1619                 return escaped;
1620         }
1621
1622         essid_len = min(essid_len, (u8) IW_ESSID_MAX_SIZE);
1623         while (essid_len--) {
1624                 if (*s == '\0') {
1625                         *d++ = '\\';
1626                         *d++ = '0';
1627                         s++;
1628                 } else {
1629                         *d++ = *s++;
1630                 }
1631         }
1632         *d = '\0';
1633         return escaped;
1634 }
1635 #endif
1636
1637 module_init(lbs_init_module);
1638 module_exit(lbs_exit_module);
1639
1640 MODULE_DESCRIPTION("Libertas WLAN Driver Library");
1641 MODULE_AUTHOR("Marvell International Ltd.");
1642 MODULE_LICENSE("GPL");