2 * This file contains the handling of command.
3 * It prepares command and sends it to firmware when it is ready.
6 #include <net/iw_handler.h>
7 #include <net/ieee80211.h>
8 #include <linux/kfifo.h>
18 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv);
22 * @brief Simple callback that copies response back into command
24 * @param priv A pointer to struct lbs_private structure
25 * @param extra A pointer to the original command structure for which
26 * 'resp' is a response
27 * @param resp A pointer to the command response
29 * @return 0 on success, error on failure
31 int lbs_cmd_copyback(struct lbs_private *priv, unsigned long extra,
32 struct cmd_header *resp)
34 struct cmd_header *buf = (void *)extra;
37 copy_len = min(le16_to_cpu(buf->size), le16_to_cpu(resp->size));
38 memcpy(buf, resp, copy_len);
41 EXPORT_SYMBOL_GPL(lbs_cmd_copyback);
44 * @brief Simple callback that ignores the result. Use this if
45 * you just want to send a command to the hardware, but don't
46 * care for the result.
49 * @param extra ignored
52 * @return 0 for success
54 static int lbs_cmd_async_callback(struct lbs_private *priv, unsigned long extra,
55 struct cmd_header *resp)
62 * @brief Checks whether a command is allowed in Power Save mode
64 * @param command the command ID
65 * @return 1 if allowed, 0 if not allowed
67 static u8 is_command_allowed_in_ps(u16 cmd)
79 * @brief Updates the hardware details like MAC address and regulatory region
81 * @param priv A pointer to struct lbs_private structure
83 * @return 0 on success, error on failure
85 int lbs_update_hw_spec(struct lbs_private *priv)
87 struct cmd_ds_get_hw_spec cmd;
92 lbs_deb_enter(LBS_DEB_CMD);
94 memset(&cmd, 0, sizeof(cmd));
95 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
96 memcpy(cmd.permanentaddr, priv->current_addr, ETH_ALEN);
97 ret = lbs_cmd_with_response(priv, CMD_GET_HW_SPEC, &cmd);
101 priv->fwcapinfo = le32_to_cpu(cmd.fwcapinfo);
103 /* The firmware release is in an interesting format: the patch
104 * level is in the most significant nibble ... so fix that: */
105 priv->fwrelease = le32_to_cpu(cmd.fwrelease);
106 priv->fwrelease = (priv->fwrelease << 8) |
107 (priv->fwrelease >> 24 & 0xff);
109 /* Some firmware capabilities:
110 * CF card firmware 5.0.16p0: cap 0x00000303
111 * USB dongle firmware 5.110.17p2: cap 0x00000303
113 lbs_pr_info("%s, fw %u.%u.%up%u, cap 0x%08x\n",
114 print_mac(mac, cmd.permanentaddr),
115 priv->fwrelease >> 24 & 0xff,
116 priv->fwrelease >> 16 & 0xff,
117 priv->fwrelease >> 8 & 0xff,
118 priv->fwrelease & 0xff,
120 lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
121 cmd.hwifversion, cmd.version);
123 /* Clamp region code to 8-bit since FW spec indicates that it should
124 * only ever be 8-bit, even though the field size is 16-bit. Some firmware
125 * returns non-zero high 8 bits here.
127 priv->regioncode = le16_to_cpu(cmd.regioncode) & 0xFF;
129 for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
130 /* use the region code to search for the index */
131 if (priv->regioncode == lbs_region_code_to_index[i])
135 /* if it's unidentified region code, use the default (USA) */
136 if (i >= MRVDRV_MAX_REGION_CODE) {
137 priv->regioncode = 0x10;
138 lbs_pr_info("unidentified region code; using the default (USA)\n");
141 if (priv->current_addr[0] == 0xff)
142 memmove(priv->current_addr, cmd.permanentaddr, ETH_ALEN);
144 memcpy(priv->dev->dev_addr, priv->current_addr, ETH_ALEN);
146 memcpy(priv->mesh_dev->dev_addr, priv->current_addr, ETH_ALEN);
148 if (lbs_set_regiontable(priv, priv->regioncode, 0)) {
153 if (lbs_set_universaltable(priv, 0)) {
159 lbs_deb_leave(LBS_DEB_CMD);
163 int lbs_host_sleep_cfg(struct lbs_private *priv, uint32_t criteria)
165 struct cmd_ds_host_sleep cmd_config;
168 cmd_config.hdr.size = cpu_to_le16(sizeof(cmd_config));
169 cmd_config.criteria = cpu_to_le32(criteria);
170 cmd_config.gpio = priv->wol_gpio;
171 cmd_config.gap = priv->wol_gap;
173 ret = lbs_cmd_with_response(priv, CMD_802_11_HOST_SLEEP_CFG, &cmd_config);
175 lbs_deb_cmd("Set WOL criteria to %x\n", criteria);
176 priv->wol_criteria = criteria;
178 lbs_pr_info("HOST_SLEEP_CFG failed %d\n", ret);
183 EXPORT_SYMBOL_GPL(lbs_host_sleep_cfg);
185 static int lbs_cmd_802_11_ps_mode(struct cmd_ds_command *cmd,
188 struct cmd_ds_802_11_ps_mode *psm = &cmd->params.psmode;
190 lbs_deb_enter(LBS_DEB_CMD);
192 cmd->command = cpu_to_le16(CMD_802_11_PS_MODE);
193 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_ps_mode) +
195 psm->action = cpu_to_le16(cmd_action);
196 psm->multipledtim = 0;
197 switch (cmd_action) {
198 case CMD_SUBCMD_ENTER_PS:
199 lbs_deb_cmd("PS command:" "SubCode- Enter PS\n");
201 psm->locallisteninterval = 0;
202 psm->nullpktinterval = 0;
204 cpu_to_le16(MRVDRV_DEFAULT_MULTIPLE_DTIM);
207 case CMD_SUBCMD_EXIT_PS:
208 lbs_deb_cmd("PS command:" "SubCode- Exit PS\n");
211 case CMD_SUBCMD_SLEEP_CONFIRMED:
212 lbs_deb_cmd("PS command: SubCode- sleep confirm\n");
219 lbs_deb_leave(LBS_DEB_CMD);
223 int lbs_cmd_802_11_inactivity_timeout(struct lbs_private *priv,
224 uint16_t cmd_action, uint16_t *timeout)
226 struct cmd_ds_802_11_inactivity_timeout cmd;
229 lbs_deb_enter(LBS_DEB_CMD);
231 cmd.hdr.command = cpu_to_le16(CMD_802_11_INACTIVITY_TIMEOUT);
232 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
234 cmd.action = cpu_to_le16(cmd_action);
236 if (cmd_action == CMD_ACT_SET)
237 cmd.timeout = cpu_to_le16(*timeout);
241 ret = lbs_cmd_with_response(priv, CMD_802_11_INACTIVITY_TIMEOUT, &cmd);
244 *timeout = le16_to_cpu(cmd.timeout);
246 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
250 int lbs_cmd_802_11_sleep_params(struct lbs_private *priv, uint16_t cmd_action,
251 struct sleep_params *sp)
253 struct cmd_ds_802_11_sleep_params cmd;
256 lbs_deb_enter(LBS_DEB_CMD);
258 if (cmd_action == CMD_ACT_GET) {
259 memset(&cmd, 0, sizeof(cmd));
261 cmd.error = cpu_to_le16(sp->sp_error);
262 cmd.offset = cpu_to_le16(sp->sp_offset);
263 cmd.stabletime = cpu_to_le16(sp->sp_stabletime);
264 cmd.calcontrol = sp->sp_calcontrol;
265 cmd.externalsleepclk = sp->sp_extsleepclk;
266 cmd.reserved = cpu_to_le16(sp->sp_reserved);
268 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
269 cmd.action = cpu_to_le16(cmd_action);
271 ret = lbs_cmd_with_response(priv, CMD_802_11_SLEEP_PARAMS, &cmd);
274 lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, "
275 "calcontrol 0x%x extsleepclk 0x%x\n",
276 le16_to_cpu(cmd.error), le16_to_cpu(cmd.offset),
277 le16_to_cpu(cmd.stabletime), cmd.calcontrol,
278 cmd.externalsleepclk);
280 sp->sp_error = le16_to_cpu(cmd.error);
281 sp->sp_offset = le16_to_cpu(cmd.offset);
282 sp->sp_stabletime = le16_to_cpu(cmd.stabletime);
283 sp->sp_calcontrol = cmd.calcontrol;
284 sp->sp_extsleepclk = cmd.externalsleepclk;
285 sp->sp_reserved = le16_to_cpu(cmd.reserved);
288 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
292 int lbs_cmd_802_11_set_wep(struct lbs_private *priv, uint16_t cmd_action,
293 struct assoc_request *assoc)
295 struct cmd_ds_802_11_set_wep cmd;
298 lbs_deb_enter(LBS_DEB_CMD);
300 memset(&cmd, 0, sizeof(cmd));
301 cmd.hdr.command = cpu_to_le16(CMD_802_11_SET_WEP);
302 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
304 cmd.action = cpu_to_le16(cmd_action);
306 if (cmd_action == CMD_ACT_ADD) {
309 /* default tx key index */
310 cmd.keyindex = cpu_to_le16(assoc->wep_tx_keyidx &
311 CMD_WEP_KEY_INDEX_MASK);
313 /* Copy key types and material to host command structure */
314 for (i = 0; i < 4; i++) {
315 struct enc_key *pkey = &assoc->wep_keys[i];
319 cmd.keytype[i] = CMD_TYPE_WEP_40_BIT;
320 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
321 lbs_deb_cmd("SET_WEP: add key %d (40 bit)\n", i);
323 case KEY_LEN_WEP_104:
324 cmd.keytype[i] = CMD_TYPE_WEP_104_BIT;
325 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
326 lbs_deb_cmd("SET_WEP: add key %d (104 bit)\n", i);
331 lbs_deb_cmd("SET_WEP: invalid key %d, length %d\n",
338 } else if (cmd_action == CMD_ACT_REMOVE) {
339 /* ACT_REMOVE clears _all_ WEP keys */
341 /* default tx key index */
342 cmd.keyindex = cpu_to_le16(priv->wep_tx_keyidx &
343 CMD_WEP_KEY_INDEX_MASK);
344 lbs_deb_cmd("SET_WEP: remove key %d\n", priv->wep_tx_keyidx);
347 ret = lbs_cmd_with_response(priv, CMD_802_11_SET_WEP, &cmd);
349 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
353 int lbs_cmd_802_11_enable_rsn(struct lbs_private *priv, uint16_t cmd_action,
356 struct cmd_ds_802_11_enable_rsn cmd;
359 lbs_deb_enter(LBS_DEB_CMD);
361 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
362 cmd.action = cpu_to_le16(cmd_action);
364 if (cmd_action == CMD_ACT_GET)
368 cmd.enable = cpu_to_le16(CMD_ENABLE_RSN);
370 cmd.enable = cpu_to_le16(CMD_DISABLE_RSN);
371 lbs_deb_cmd("ENABLE_RSN: %d\n", *enable);
374 ret = lbs_cmd_with_response(priv, CMD_802_11_ENABLE_RSN, &cmd);
375 if (!ret && cmd_action == CMD_ACT_GET)
376 *enable = le16_to_cpu(cmd.enable);
378 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
382 static void set_one_wpa_key(struct MrvlIEtype_keyParamSet *keyparam,
385 lbs_deb_enter(LBS_DEB_CMD);
387 if (key->flags & KEY_INFO_WPA_ENABLED)
388 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_ENABLED);
389 if (key->flags & KEY_INFO_WPA_UNICAST)
390 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_UNICAST);
391 if (key->flags & KEY_INFO_WPA_MCAST)
392 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_MCAST);
394 keyparam->type = cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
395 keyparam->keytypeid = cpu_to_le16(key->type);
396 keyparam->keylen = cpu_to_le16(key->len);
397 memcpy(keyparam->key, key->key, key->len);
399 /* Length field doesn't include the {type,length} header */
400 keyparam->length = cpu_to_le16(sizeof(*keyparam) - 4);
401 lbs_deb_leave(LBS_DEB_CMD);
404 int lbs_cmd_802_11_key_material(struct lbs_private *priv, uint16_t cmd_action,
405 struct assoc_request *assoc)
407 struct cmd_ds_802_11_key_material cmd;
411 lbs_deb_enter(LBS_DEB_CMD);
413 cmd.action = cpu_to_le16(cmd_action);
414 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
416 if (cmd_action == CMD_ACT_GET) {
417 cmd.hdr.size = cpu_to_le16(S_DS_GEN + 2);
419 memset(cmd.keyParamSet, 0, sizeof(cmd.keyParamSet));
421 if (test_bit(ASSOC_FLAG_WPA_UCAST_KEY, &assoc->flags)) {
422 set_one_wpa_key(&cmd.keyParamSet[index],
423 &assoc->wpa_unicast_key);
427 if (test_bit(ASSOC_FLAG_WPA_MCAST_KEY, &assoc->flags)) {
428 set_one_wpa_key(&cmd.keyParamSet[index],
429 &assoc->wpa_mcast_key);
433 /* The common header and as many keys as we included */
434 cmd.hdr.size = cpu_to_le16(offsetof(typeof(cmd),
435 keyParamSet[index]));
437 ret = lbs_cmd_with_response(priv, CMD_802_11_KEY_MATERIAL, &cmd);
438 /* Copy the returned key to driver private data */
439 if (!ret && cmd_action == CMD_ACT_GET) {
440 void *buf_ptr = cmd.keyParamSet;
441 void *resp_end = &(&cmd)[1];
443 while (buf_ptr < resp_end) {
444 struct MrvlIEtype_keyParamSet *keyparam = buf_ptr;
446 uint16_t param_set_len = le16_to_cpu(keyparam->length);
447 uint16_t key_len = le16_to_cpu(keyparam->keylen);
448 uint16_t key_flags = le16_to_cpu(keyparam->keyinfo);
449 uint16_t key_type = le16_to_cpu(keyparam->keytypeid);
452 end = (void *)keyparam + sizeof(keyparam->type)
453 + sizeof(keyparam->length) + param_set_len;
455 /* Make sure we don't access past the end of the IEs */
459 if (key_flags & KEY_INFO_WPA_UNICAST)
460 key = &priv->wpa_unicast_key;
461 else if (key_flags & KEY_INFO_WPA_MCAST)
462 key = &priv->wpa_mcast_key;
466 /* Copy returned key into driver */
467 memset(key, 0, sizeof(struct enc_key));
468 if (key_len > sizeof(key->key))
470 key->type = key_type;
471 key->flags = key_flags;
473 memcpy(key->key, keyparam->key, key->len);
479 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
483 static int lbs_cmd_802_11_reset(struct cmd_ds_command *cmd, int cmd_action)
485 struct cmd_ds_802_11_reset *reset = &cmd->params.reset;
487 lbs_deb_enter(LBS_DEB_CMD);
489 cmd->command = cpu_to_le16(CMD_802_11_RESET);
490 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_reset) + S_DS_GEN);
491 reset->action = cpu_to_le16(cmd_action);
493 lbs_deb_leave(LBS_DEB_CMD);
497 static int lbs_cmd_802_11_snmp_mib(struct lbs_private *priv,
498 struct cmd_ds_command *cmd,
500 int cmd_oid, void *pdata_buf)
502 struct cmd_ds_802_11_snmp_mib *pSNMPMIB = &cmd->params.smib;
505 lbs_deb_enter(LBS_DEB_CMD);
507 lbs_deb_cmd("SNMP_CMD: cmd_oid = 0x%x\n", cmd_oid);
509 cmd->command = cpu_to_le16(CMD_802_11_SNMP_MIB);
510 cmd->size = cpu_to_le16(sizeof(*pSNMPMIB) + S_DS_GEN);
513 case OID_802_11_INFRASTRUCTURE_MODE:
515 u8 mode = (u8) (size_t) pdata_buf;
516 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
517 pSNMPMIB->oid = cpu_to_le16((u16) DESIRED_BSSTYPE_I);
518 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u8));
519 if (mode == IW_MODE_ADHOC) {
520 ucTemp = SNMP_MIB_VALUE_ADHOC;
522 /* Infra and Auto modes */
523 ucTemp = SNMP_MIB_VALUE_INFRA;
526 memmove(pSNMPMIB->value, &ucTemp, sizeof(u8));
531 case OID_802_11D_ENABLE:
535 pSNMPMIB->oid = cpu_to_le16((u16) DOT11D_I);
537 if (cmd_action == CMD_ACT_SET) {
538 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
539 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
540 ulTemp = *(u32 *)pdata_buf;
541 *((__le16 *)(pSNMPMIB->value)) =
542 cpu_to_le16((u16) ulTemp);
547 case OID_802_11_FRAGMENTATION_THRESHOLD:
551 pSNMPMIB->oid = cpu_to_le16((u16) FRAGTHRESH_I);
553 if (cmd_action == CMD_ACT_GET) {
554 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
555 } else if (cmd_action == CMD_ACT_SET) {
556 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
557 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
558 ulTemp = *((u32 *) pdata_buf);
559 *((__le16 *)(pSNMPMIB->value)) =
560 cpu_to_le16((u16) ulTemp);
567 case OID_802_11_RTS_THRESHOLD:
571 pSNMPMIB->oid = cpu_to_le16(RTSTHRESH_I);
573 if (cmd_action == CMD_ACT_GET) {
574 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
575 } else if (cmd_action == CMD_ACT_SET) {
576 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
577 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
578 ulTemp = *((u32 *)pdata_buf);
579 *(__le16 *)(pSNMPMIB->value) =
580 cpu_to_le16((u16) ulTemp);
585 case OID_802_11_TX_RETRYCOUNT:
586 pSNMPMIB->oid = cpu_to_le16((u16) SHORT_RETRYLIM_I);
588 if (cmd_action == CMD_ACT_GET) {
589 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
590 } else if (cmd_action == CMD_ACT_SET) {
591 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
592 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
593 *((__le16 *)(pSNMPMIB->value)) =
594 cpu_to_le16((u16) priv->txretrycount);
603 "SNMP_CMD: command=0x%x, size=0x%x, seqnum=0x%x, result=0x%x\n",
604 le16_to_cpu(cmd->command), le16_to_cpu(cmd->size),
605 le16_to_cpu(cmd->seqnum), le16_to_cpu(cmd->result));
608 "SNMP_CMD: action 0x%x, oid 0x%x, oidsize 0x%x, value 0x%x\n",
609 le16_to_cpu(pSNMPMIB->querytype), le16_to_cpu(pSNMPMIB->oid),
610 le16_to_cpu(pSNMPMIB->bufsize),
611 le16_to_cpu(*(__le16 *) pSNMPMIB->value));
613 lbs_deb_leave(LBS_DEB_CMD);
618 * @brief Get the min, max, and current TX power
620 * @param priv A pointer to struct lbs_private structure
621 * @param curlevel Current power level in dBm
622 * @param minlevel Minimum supported power level in dBm (optional)
623 * @param maxlevel Maximum supported power level in dBm (optional)
625 * @return 0 on success, error on failure
627 int lbs_get_tx_power(struct lbs_private *priv, s16 *curlevel, s16 *minlevel,
630 struct cmd_ds_802_11_rf_tx_power cmd;
633 lbs_deb_enter(LBS_DEB_CMD);
635 memset(&cmd, 0, sizeof(cmd));
636 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
637 cmd.action = cpu_to_le16(CMD_ACT_GET);
639 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
641 *curlevel = le16_to_cpu(cmd.curlevel);
643 *minlevel = le16_to_cpu(cmd.minlevel);
645 *maxlevel = le16_to_cpu(cmd.maxlevel);
648 lbs_deb_leave(LBS_DEB_CMD);
653 * @brief Set the TX power
655 * @param priv A pointer to struct lbs_private structure
656 * @param dbm The desired power level in dBm
658 * @return 0 on success, error on failure
660 int lbs_set_tx_power(struct lbs_private *priv, s16 dbm)
662 struct cmd_ds_802_11_rf_tx_power cmd;
665 lbs_deb_enter(LBS_DEB_CMD);
667 memset(&cmd, 0, sizeof(cmd));
668 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
669 cmd.action = cpu_to_le16(CMD_ACT_SET);
670 cmd.curlevel = cpu_to_le16(dbm);
672 lbs_deb_cmd("SET_RF_TX_POWER: %d dBm\n", dbm);
674 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
676 lbs_deb_leave(LBS_DEB_CMD);
680 static int lbs_cmd_802_11_monitor_mode(struct cmd_ds_command *cmd,
681 u16 cmd_action, void *pdata_buf)
683 struct cmd_ds_802_11_monitor_mode *monitor = &cmd->params.monitor;
685 cmd->command = cpu_to_le16(CMD_802_11_MONITOR_MODE);
687 cpu_to_le16(sizeof(struct cmd_ds_802_11_monitor_mode) +
690 monitor->action = cpu_to_le16(cmd_action);
691 if (cmd_action == CMD_ACT_SET) {
693 cpu_to_le16((u16) (*(u32 *) pdata_buf));
699 static __le16 lbs_rate_to_fw_bitmap(int rate, int lower_rates_ok)
719 int i = lbs_data_rate_to_fw_index(rate);
721 ratemask = (0x1fef >> (12 - i));
724 return cpu_to_le16(ratemask);
727 int lbs_cmd_802_11_rate_adapt_rateset(struct lbs_private *priv,
730 struct cmd_ds_802_11_rate_adapt_rateset cmd;
733 lbs_deb_enter(LBS_DEB_CMD);
735 if (!priv->cur_rate && !priv->enablehwauto)
738 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
740 cmd.action = cpu_to_le16(cmd_action);
741 cmd.enablehwauto = cpu_to_le16(priv->enablehwauto);
742 cmd.bitmap = lbs_rate_to_fw_bitmap(priv->cur_rate, priv->enablehwauto);
743 ret = lbs_cmd_with_response(priv, CMD_802_11_RATE_ADAPT_RATESET, &cmd);
744 if (!ret && cmd_action == CMD_ACT_GET) {
745 priv->ratebitmap = le16_to_cpu(cmd.bitmap);
746 priv->enablehwauto = le16_to_cpu(cmd.enablehwauto);
749 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
752 EXPORT_SYMBOL_GPL(lbs_cmd_802_11_rate_adapt_rateset);
755 * @brief Set the data rate
757 * @param priv A pointer to struct lbs_private structure
758 * @param rate The desired data rate, or 0 to clear a locked rate
760 * @return 0 on success, error on failure
762 int lbs_set_data_rate(struct lbs_private *priv, u8 rate)
764 struct cmd_ds_802_11_data_rate cmd;
767 lbs_deb_enter(LBS_DEB_CMD);
769 memset(&cmd, 0, sizeof(cmd));
770 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
773 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_FIX_RATE);
774 cmd.rates[0] = lbs_data_rate_to_fw_index(rate);
775 if (cmd.rates[0] == 0) {
776 lbs_deb_cmd("DATA_RATE: invalid requested rate of"
781 lbs_deb_cmd("DATA_RATE: set fixed 0x%02X\n", cmd.rates[0]);
783 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_AUTO);
784 lbs_deb_cmd("DATA_RATE: setting auto\n");
787 ret = lbs_cmd_with_response(priv, CMD_802_11_DATA_RATE, &cmd);
791 lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) &cmd, sizeof (cmd));
793 /* FIXME: get actual rates FW can do if this command actually returns
794 * all data rates supported.
796 priv->cur_rate = lbs_fw_index_to_data_rate(cmd.rates[0]);
797 lbs_deb_cmd("DATA_RATE: current rate is 0x%02x\n", priv->cur_rate);
800 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
805 * @brief Get the radio channel
807 * @param priv A pointer to struct lbs_private structure
809 * @return The channel on success, error on failure
811 int lbs_get_channel(struct lbs_private *priv)
813 struct cmd_ds_802_11_rf_channel cmd;
816 lbs_deb_enter(LBS_DEB_CMD);
818 memset(&cmd, 0, sizeof(cmd));
819 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
820 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_GET);
822 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
826 ret = le16_to_cpu(cmd.channel);
827 lbs_deb_cmd("current radio channel is %d\n", ret);
830 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
834 int lbs_update_channel(struct lbs_private *priv)
838 /* the channel in f/w could be out of sync; get the current channel */
839 lbs_deb_enter(LBS_DEB_ASSOC);
841 ret = lbs_get_channel(priv);
843 priv->curbssparams.channel = ret;
846 lbs_deb_leave_args(LBS_DEB_ASSOC, "ret %d", ret);
851 * @brief Set the radio channel
853 * @param priv A pointer to struct lbs_private structure
854 * @param channel The desired channel, or 0 to clear a locked channel
856 * @return 0 on success, error on failure
858 int lbs_set_channel(struct lbs_private *priv, u8 channel)
860 struct cmd_ds_802_11_rf_channel cmd;
861 u8 old_channel = priv->curbssparams.channel;
864 lbs_deb_enter(LBS_DEB_CMD);
866 memset(&cmd, 0, sizeof(cmd));
867 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
868 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_SET);
869 cmd.channel = cpu_to_le16(channel);
871 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
875 priv->curbssparams.channel = (uint8_t) le16_to_cpu(cmd.channel);
876 lbs_deb_cmd("channel switch from %d to %d\n", old_channel,
877 priv->curbssparams.channel);
880 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
884 static int lbs_cmd_802_11_rssi(struct lbs_private *priv,
885 struct cmd_ds_command *cmd)
888 lbs_deb_enter(LBS_DEB_CMD);
889 cmd->command = cpu_to_le16(CMD_802_11_RSSI);
890 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_rssi) + S_DS_GEN);
891 cmd->params.rssi.N = cpu_to_le16(DEFAULT_BCN_AVG_FACTOR);
893 /* reset Beacon SNR/NF/RSSI values */
894 priv->SNR[TYPE_BEACON][TYPE_NOAVG] = 0;
895 priv->SNR[TYPE_BEACON][TYPE_AVG] = 0;
896 priv->NF[TYPE_BEACON][TYPE_NOAVG] = 0;
897 priv->NF[TYPE_BEACON][TYPE_AVG] = 0;
898 priv->RSSI[TYPE_BEACON][TYPE_NOAVG] = 0;
899 priv->RSSI[TYPE_BEACON][TYPE_AVG] = 0;
901 lbs_deb_leave(LBS_DEB_CMD);
905 static int lbs_cmd_reg_access(struct cmd_ds_command *cmdptr,
906 u8 cmd_action, void *pdata_buf)
908 struct lbs_offset_value *offval;
910 lbs_deb_enter(LBS_DEB_CMD);
912 offval = (struct lbs_offset_value *)pdata_buf;
914 switch (le16_to_cpu(cmdptr->command)) {
915 case CMD_MAC_REG_ACCESS:
917 struct cmd_ds_mac_reg_access *macreg;
920 cpu_to_le16(sizeof (struct cmd_ds_mac_reg_access)
923 (struct cmd_ds_mac_reg_access *)&cmdptr->params.
926 macreg->action = cpu_to_le16(cmd_action);
927 macreg->offset = cpu_to_le16((u16) offval->offset);
928 macreg->value = cpu_to_le32(offval->value);
933 case CMD_BBP_REG_ACCESS:
935 struct cmd_ds_bbp_reg_access *bbpreg;
939 (struct cmd_ds_bbp_reg_access)
942 (struct cmd_ds_bbp_reg_access *)&cmdptr->params.
945 bbpreg->action = cpu_to_le16(cmd_action);
946 bbpreg->offset = cpu_to_le16((u16) offval->offset);
947 bbpreg->value = (u8) offval->value;
952 case CMD_RF_REG_ACCESS:
954 struct cmd_ds_rf_reg_access *rfreg;
958 (struct cmd_ds_rf_reg_access) +
961 (struct cmd_ds_rf_reg_access *)&cmdptr->params.
964 rfreg->action = cpu_to_le16(cmd_action);
965 rfreg->offset = cpu_to_le16((u16) offval->offset);
966 rfreg->value = (u8) offval->value;
975 lbs_deb_leave(LBS_DEB_CMD);
979 static int lbs_cmd_bt_access(struct cmd_ds_command *cmd,
980 u16 cmd_action, void *pdata_buf)
982 struct cmd_ds_bt_access *bt_access = &cmd->params.bt;
983 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
985 cmd->command = cpu_to_le16(CMD_BT_ACCESS);
986 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_bt_access) + S_DS_GEN);
988 bt_access->action = cpu_to_le16(cmd_action);
990 switch (cmd_action) {
991 case CMD_ACT_BT_ACCESS_ADD:
992 memcpy(bt_access->addr1, pdata_buf, 2 * ETH_ALEN);
993 lbs_deb_hex(LBS_DEB_MESH, "BT_ADD: blinded MAC addr", bt_access->addr1, 6);
995 case CMD_ACT_BT_ACCESS_DEL:
996 memcpy(bt_access->addr1, pdata_buf, 1 * ETH_ALEN);
997 lbs_deb_hex(LBS_DEB_MESH, "BT_DEL: blinded MAC addr", bt_access->addr1, 6);
999 case CMD_ACT_BT_ACCESS_LIST:
1000 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
1002 case CMD_ACT_BT_ACCESS_RESET:
1004 case CMD_ACT_BT_ACCESS_SET_INVERT:
1005 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
1007 case CMD_ACT_BT_ACCESS_GET_INVERT:
1012 lbs_deb_leave(LBS_DEB_CMD);
1016 static int lbs_cmd_fwt_access(struct cmd_ds_command *cmd,
1017 u16 cmd_action, void *pdata_buf)
1019 struct cmd_ds_fwt_access *fwt_access = &cmd->params.fwt;
1020 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1022 cmd->command = cpu_to_le16(CMD_FWT_ACCESS);
1023 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_fwt_access) + S_DS_GEN);
1027 memcpy(fwt_access, pdata_buf, sizeof(*fwt_access));
1029 memset(fwt_access, 0, sizeof(*fwt_access));
1031 fwt_access->action = cpu_to_le16(cmd_action);
1033 lbs_deb_leave(LBS_DEB_CMD);
1037 int lbs_mesh_access(struct lbs_private *priv, uint16_t cmd_action,
1038 struct cmd_ds_mesh_access *cmd)
1042 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1044 cmd->hdr.command = cpu_to_le16(CMD_MESH_ACCESS);
1045 cmd->hdr.size = cpu_to_le16(sizeof(*cmd));
1046 cmd->hdr.result = 0;
1048 cmd->action = cpu_to_le16(cmd_action);
1050 ret = lbs_cmd_with_response(priv, CMD_MESH_ACCESS, cmd);
1052 lbs_deb_leave(LBS_DEB_CMD);
1056 static int __lbs_mesh_config_send(struct lbs_private *priv,
1057 struct cmd_ds_mesh_config *cmd,
1058 uint16_t action, uint16_t type)
1062 lbs_deb_enter(LBS_DEB_CMD);
1064 cmd->hdr.command = cpu_to_le16(CMD_MESH_CONFIG);
1065 cmd->hdr.size = cpu_to_le16(sizeof(struct cmd_ds_mesh_config));
1066 cmd->hdr.result = 0;
1068 cmd->type = cpu_to_le16(type);
1069 cmd->action = cpu_to_le16(action);
1071 ret = lbs_cmd_with_response(priv, CMD_MESH_CONFIG, cmd);
1073 lbs_deb_leave(LBS_DEB_CMD);
1077 int lbs_mesh_config_send(struct lbs_private *priv,
1078 struct cmd_ds_mesh_config *cmd,
1079 uint16_t action, uint16_t type)
1083 if (!(priv->fwcapinfo & FW_CAPINFO_PERSISTENT_CONFIG))
1086 ret = __lbs_mesh_config_send(priv, cmd, action, type);
1090 /* This function is the CMD_MESH_CONFIG legacy function. It only handles the
1091 * START and STOP actions. The extended actions supported by CMD_MESH_CONFIG
1092 * are all handled by preparing a struct cmd_ds_mesh_config and passing it to
1093 * lbs_mesh_config_send.
1095 int lbs_mesh_config(struct lbs_private *priv, uint16_t action, uint16_t chan)
1097 struct cmd_ds_mesh_config cmd;
1098 struct mrvl_meshie *ie;
1100 memset(&cmd, 0, sizeof(cmd));
1101 cmd.channel = cpu_to_le16(chan);
1102 ie = (struct mrvl_meshie *)cmd.data;
1105 case CMD_ACT_MESH_CONFIG_START:
1106 ie->hdr.id = MFIE_TYPE_GENERIC;
1107 ie->val.oui[0] = 0x00;
1108 ie->val.oui[1] = 0x50;
1109 ie->val.oui[2] = 0x43;
1110 ie->val.type = MARVELL_MESH_IE_TYPE;
1111 ie->val.subtype = MARVELL_MESH_IE_SUBTYPE;
1112 ie->val.version = MARVELL_MESH_IE_VERSION;
1113 ie->val.active_protocol_id = MARVELL_MESH_PROTO_ID_HWMP;
1114 ie->val.active_metric_id = MARVELL_MESH_METRIC_ID;
1115 ie->val.mesh_capability = MARVELL_MESH_CAPABILITY;
1116 ie->val.mesh_id_len = priv->mesh_ssid_len;
1117 memcpy(ie->val.mesh_id, priv->mesh_ssid, priv->mesh_ssid_len);
1118 ie->hdr.len = sizeof(struct mrvl_meshie_val) -
1119 IW_ESSID_MAX_SIZE + priv->mesh_ssid_len;
1120 cmd.length = cpu_to_le16(sizeof(struct mrvl_meshie_val));
1122 case CMD_ACT_MESH_CONFIG_STOP:
1127 lbs_deb_cmd("mesh config action %d type %x channel %d SSID %s\n",
1128 action, priv->mesh_tlv, chan,
1129 escape_essid(priv->mesh_ssid, priv->mesh_ssid_len));
1131 return __lbs_mesh_config_send(priv, &cmd, action, priv->mesh_tlv);
1134 static int lbs_cmd_bcn_ctrl(struct lbs_private * priv,
1135 struct cmd_ds_command *cmd,
1138 struct cmd_ds_802_11_beacon_control
1139 *bcn_ctrl = &cmd->params.bcn_ctrl;
1141 lbs_deb_enter(LBS_DEB_CMD);
1143 cpu_to_le16(sizeof(struct cmd_ds_802_11_beacon_control)
1145 cmd->command = cpu_to_le16(CMD_802_11_BEACON_CTRL);
1147 bcn_ctrl->action = cpu_to_le16(cmd_action);
1148 bcn_ctrl->beacon_enable = cpu_to_le16(priv->beacon_enable);
1149 bcn_ctrl->beacon_period = cpu_to_le16(priv->beacon_period);
1151 lbs_deb_leave(LBS_DEB_CMD);
1155 static void lbs_queue_cmd(struct lbs_private *priv,
1156 struct cmd_ctrl_node *cmdnode)
1158 unsigned long flags;
1161 lbs_deb_enter(LBS_DEB_HOST);
1164 lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
1167 if (!cmdnode->cmdbuf->size) {
1168 lbs_deb_host("DNLD_CMD: cmd size is zero\n");
1171 cmdnode->result = 0;
1173 /* Exit_PS command needs to be queued in the header always. */
1174 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_PS_MODE) {
1175 struct cmd_ds_802_11_ps_mode *psm = (void *) &cmdnode->cmdbuf[1];
1177 if (psm->action == cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1178 if (priv->psstate != PS_STATE_FULL_POWER)
1183 spin_lock_irqsave(&priv->driver_lock, flags);
1186 list_add_tail(&cmdnode->list, &priv->cmdpendingq);
1188 list_add(&cmdnode->list, &priv->cmdpendingq);
1190 spin_unlock_irqrestore(&priv->driver_lock, flags);
1192 lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
1193 le16_to_cpu(cmdnode->cmdbuf->command));
1196 lbs_deb_leave(LBS_DEB_HOST);
1199 static void lbs_submit_command(struct lbs_private *priv,
1200 struct cmd_ctrl_node *cmdnode)
1202 unsigned long flags;
1203 struct cmd_header *cmd;
1209 lbs_deb_enter(LBS_DEB_HOST);
1211 cmd = cmdnode->cmdbuf;
1213 spin_lock_irqsave(&priv->driver_lock, flags);
1214 priv->cur_cmd = cmdnode;
1215 priv->cur_cmd_retcode = 0;
1216 spin_unlock_irqrestore(&priv->driver_lock, flags);
1218 cmdsize = le16_to_cpu(cmd->size);
1219 command = le16_to_cpu(cmd->command);
1221 /* These commands take longer */
1222 if (command == CMD_802_11_SCAN || command == CMD_802_11_ASSOCIATE ||
1223 command == CMD_802_11_AUTHENTICATE)
1226 lbs_deb_cmd("DNLD_CMD: command 0x%04x, seq %d, size %d\n",
1227 command, le16_to_cpu(cmd->seqnum), cmdsize);
1228 lbs_deb_hex(LBS_DEB_CMD, "DNLD_CMD", (void *) cmdnode->cmdbuf, cmdsize);
1230 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmd, cmdsize);
1233 lbs_pr_info("DNLD_CMD: hw_host_to_card failed: %d\n", ret);
1234 /* Let the timer kick in and retry, and potentially reset
1235 the whole thing if the condition persists */
1239 /* Setup the timer after transmit command */
1240 mod_timer(&priv->command_timer, jiffies + timeo);
1242 lbs_deb_leave(LBS_DEB_HOST);
1246 * This function inserts command node to cmdfreeq
1247 * after cleans it. Requires priv->driver_lock held.
1249 static void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1250 struct cmd_ctrl_node *cmdnode)
1252 lbs_deb_enter(LBS_DEB_HOST);
1257 cmdnode->callback = NULL;
1258 cmdnode->callback_arg = 0;
1260 memset(cmdnode->cmdbuf, 0, LBS_CMD_BUFFER_SIZE);
1262 list_add_tail(&cmdnode->list, &priv->cmdfreeq);
1264 lbs_deb_leave(LBS_DEB_HOST);
1267 static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1268 struct cmd_ctrl_node *ptempcmd)
1270 unsigned long flags;
1272 spin_lock_irqsave(&priv->driver_lock, flags);
1273 __lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1274 spin_unlock_irqrestore(&priv->driver_lock, flags);
1277 void lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1280 if (cmd == priv->cur_cmd)
1281 priv->cur_cmd_retcode = result;
1283 cmd->result = result;
1284 cmd->cmdwaitqwoken = 1;
1285 wake_up_interruptible(&cmd->cmdwait_q);
1287 if (!cmd->callback || cmd->callback == lbs_cmd_async_callback)
1288 __lbs_cleanup_and_insert_cmd(priv, cmd);
1289 priv->cur_cmd = NULL;
1292 int lbs_set_radio_control(struct lbs_private *priv)
1295 struct cmd_ds_802_11_radio_control cmd;
1297 lbs_deb_enter(LBS_DEB_CMD);
1299 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1300 cmd.action = cpu_to_le16(CMD_ACT_SET);
1302 switch (priv->preamble) {
1303 case CMD_TYPE_SHORT_PREAMBLE:
1304 cmd.control = cpu_to_le16(SET_SHORT_PREAMBLE);
1307 case CMD_TYPE_LONG_PREAMBLE:
1308 cmd.control = cpu_to_le16(SET_LONG_PREAMBLE);
1311 case CMD_TYPE_AUTO_PREAMBLE:
1313 cmd.control = cpu_to_le16(SET_AUTO_PREAMBLE);
1318 cmd.control |= cpu_to_le16(TURN_ON_RF);
1320 cmd.control &= cpu_to_le16(~TURN_ON_RF);
1322 lbs_deb_cmd("RADIO_SET: radio %d, preamble %d\n", priv->radioon,
1325 ret = lbs_cmd_with_response(priv, CMD_802_11_RADIO_CONTROL, &cmd);
1327 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1331 void lbs_set_mac_control(struct lbs_private *priv)
1333 struct cmd_ds_mac_control cmd;
1335 lbs_deb_enter(LBS_DEB_CMD);
1337 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1338 cmd.action = cpu_to_le16(priv->mac_control);
1341 lbs_cmd_async(priv, CMD_MAC_CONTROL, &cmd.hdr, sizeof(cmd));
1343 lbs_deb_leave(LBS_DEB_CMD);
1347 * @brief This function prepare the command before send to firmware.
1349 * @param priv A pointer to struct lbs_private structure
1350 * @param cmd_no command number
1351 * @param cmd_action command action: GET or SET
1352 * @param wait_option wait option: wait response or not
1353 * @param cmd_oid cmd oid: treated as sub command
1354 * @param pdata_buf A pointer to informaion buffer
1357 int lbs_prepare_and_send_command(struct lbs_private *priv,
1360 u16 wait_option, u32 cmd_oid, void *pdata_buf)
1363 struct cmd_ctrl_node *cmdnode;
1364 struct cmd_ds_command *cmdptr;
1365 unsigned long flags;
1367 lbs_deb_enter(LBS_DEB_HOST);
1370 lbs_deb_host("PREP_CMD: priv is NULL\n");
1375 if (priv->surpriseremoved) {
1376 lbs_deb_host("PREP_CMD: card removed\n");
1381 cmdnode = lbs_get_cmd_ctrl_node(priv);
1383 if (cmdnode == NULL) {
1384 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1386 /* Wake up main thread to execute next command */
1387 wake_up_interruptible(&priv->waitq);
1392 cmdnode->callback = NULL;
1393 cmdnode->callback_arg = (unsigned long)pdata_buf;
1395 cmdptr = (struct cmd_ds_command *)cmdnode->cmdbuf;
1397 lbs_deb_host("PREP_CMD: command 0x%04x\n", cmd_no);
1399 /* Set sequence number, command and INT option */
1401 cmdptr->seqnum = cpu_to_le16(priv->seqnum);
1403 cmdptr->command = cpu_to_le16(cmd_no);
1407 case CMD_802_11_PS_MODE:
1408 ret = lbs_cmd_802_11_ps_mode(cmdptr, cmd_action);
1411 case CMD_802_11_ASSOCIATE:
1412 case CMD_802_11_REASSOCIATE:
1413 ret = lbs_cmd_80211_associate(priv, cmdptr, pdata_buf);
1416 case CMD_802_11_AD_HOC_START:
1417 ret = lbs_cmd_80211_ad_hoc_start(priv, cmdptr, pdata_buf);
1420 case CMD_802_11_RESET:
1421 ret = lbs_cmd_802_11_reset(cmdptr, cmd_action);
1424 case CMD_802_11_AUTHENTICATE:
1425 ret = lbs_cmd_80211_authenticate(priv, cmdptr, pdata_buf);
1428 case CMD_802_11_SNMP_MIB:
1429 ret = lbs_cmd_802_11_snmp_mib(priv, cmdptr,
1430 cmd_action, cmd_oid, pdata_buf);
1433 case CMD_MAC_REG_ACCESS:
1434 case CMD_BBP_REG_ACCESS:
1435 case CMD_RF_REG_ACCESS:
1436 ret = lbs_cmd_reg_access(cmdptr, cmd_action, pdata_buf);
1439 case CMD_802_11_MONITOR_MODE:
1440 ret = lbs_cmd_802_11_monitor_mode(cmdptr,
1441 cmd_action, pdata_buf);
1444 case CMD_802_11_AD_HOC_JOIN:
1445 ret = lbs_cmd_80211_ad_hoc_join(priv, cmdptr, pdata_buf);
1448 case CMD_802_11_RSSI:
1449 ret = lbs_cmd_802_11_rssi(priv, cmdptr);
1452 case CMD_802_11_AD_HOC_STOP:
1453 ret = lbs_cmd_80211_ad_hoc_stop(cmdptr);
1456 case CMD_802_11_SET_AFC:
1457 case CMD_802_11_GET_AFC:
1459 cmdptr->command = cpu_to_le16(cmd_no);
1460 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_afc) +
1463 memmove(&cmdptr->params.afc,
1464 pdata_buf, sizeof(struct cmd_ds_802_11_afc));
1469 case CMD_802_11D_DOMAIN_INFO:
1470 ret = lbs_cmd_802_11d_domain_info(priv, cmdptr,
1471 cmd_no, cmd_action);
1474 case CMD_802_11_TPC_CFG:
1475 cmdptr->command = cpu_to_le16(CMD_802_11_TPC_CFG);
1477 cpu_to_le16(sizeof(struct cmd_ds_802_11_tpc_cfg) +
1480 memmove(&cmdptr->params.tpccfg,
1481 pdata_buf, sizeof(struct cmd_ds_802_11_tpc_cfg));
1485 case CMD_802_11_LED_GPIO_CTRL:
1487 struct mrvlietypes_ledgpio *gpio =
1488 (struct mrvlietypes_ledgpio*)
1489 cmdptr->params.ledgpio.data;
1491 memmove(&cmdptr->params.ledgpio,
1493 sizeof(struct cmd_ds_802_11_led_ctrl));
1496 cpu_to_le16(CMD_802_11_LED_GPIO_CTRL);
1498 #define ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN 8
1500 cpu_to_le16(le16_to_cpu(gpio->header.len)
1502 + ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN);
1503 gpio->header.len = gpio->header.len;
1510 ret = lbs_cmd_bt_access(cmdptr, cmd_action, pdata_buf);
1513 case CMD_FWT_ACCESS:
1514 ret = lbs_cmd_fwt_access(cmdptr, cmd_action, pdata_buf);
1518 cmdptr->command = cpu_to_le16(CMD_GET_TSF);
1519 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_get_tsf) +
1523 case CMD_802_11_BEACON_CTRL:
1524 ret = lbs_cmd_bcn_ctrl(priv, cmdptr, cmd_action);
1527 lbs_pr_err("PREP_CMD: unknown command 0x%04x\n", cmd_no);
1532 /* return error, since the command preparation failed */
1534 lbs_deb_host("PREP_CMD: command preparation failed\n");
1535 lbs_cleanup_and_insert_cmd(priv, cmdnode);
1540 cmdnode->cmdwaitqwoken = 0;
1542 lbs_queue_cmd(priv, cmdnode);
1543 wake_up_interruptible(&priv->waitq);
1545 if (wait_option & CMD_OPTION_WAITFORRSP) {
1546 lbs_deb_host("PREP_CMD: wait for response\n");
1548 wait_event_interruptible(cmdnode->cmdwait_q,
1549 cmdnode->cmdwaitqwoken);
1552 spin_lock_irqsave(&priv->driver_lock, flags);
1553 if (priv->cur_cmd_retcode) {
1554 lbs_deb_host("PREP_CMD: command failed with return code %d\n",
1555 priv->cur_cmd_retcode);
1556 priv->cur_cmd_retcode = 0;
1559 spin_unlock_irqrestore(&priv->driver_lock, flags);
1562 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1567 * @brief This function allocates the command buffer and link
1568 * it to command free queue.
1570 * @param priv A pointer to struct lbs_private structure
1573 int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1578 struct cmd_ctrl_node *cmdarray;
1580 lbs_deb_enter(LBS_DEB_HOST);
1582 /* Allocate and initialize the command array */
1583 bufsize = sizeof(struct cmd_ctrl_node) * LBS_NUM_CMD_BUFFERS;
1584 if (!(cmdarray = kzalloc(bufsize, GFP_KERNEL))) {
1585 lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1589 priv->cmd_array = cmdarray;
1591 /* Allocate and initialize each command buffer in the command array */
1592 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1593 cmdarray[i].cmdbuf = kzalloc(LBS_CMD_BUFFER_SIZE, GFP_KERNEL);
1594 if (!cmdarray[i].cmdbuf) {
1595 lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1601 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1602 init_waitqueue_head(&cmdarray[i].cmdwait_q);
1603 lbs_cleanup_and_insert_cmd(priv, &cmdarray[i]);
1608 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1613 * @brief This function frees the command buffer.
1615 * @param priv A pointer to struct lbs_private structure
1618 int lbs_free_cmd_buffer(struct lbs_private *priv)
1620 struct cmd_ctrl_node *cmdarray;
1623 lbs_deb_enter(LBS_DEB_HOST);
1625 /* need to check if cmd array is allocated or not */
1626 if (priv->cmd_array == NULL) {
1627 lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1631 cmdarray = priv->cmd_array;
1633 /* Release shared memory buffers */
1634 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1635 if (cmdarray[i].cmdbuf) {
1636 kfree(cmdarray[i].cmdbuf);
1637 cmdarray[i].cmdbuf = NULL;
1641 /* Release cmd_ctrl_node */
1642 if (priv->cmd_array) {
1643 kfree(priv->cmd_array);
1644 priv->cmd_array = NULL;
1648 lbs_deb_leave(LBS_DEB_HOST);
1653 * @brief This function gets a free command node if available in
1654 * command free queue.
1656 * @param priv A pointer to struct lbs_private structure
1657 * @return cmd_ctrl_node A pointer to cmd_ctrl_node structure or NULL
1659 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv)
1661 struct cmd_ctrl_node *tempnode;
1662 unsigned long flags;
1664 lbs_deb_enter(LBS_DEB_HOST);
1669 spin_lock_irqsave(&priv->driver_lock, flags);
1671 if (!list_empty(&priv->cmdfreeq)) {
1672 tempnode = list_first_entry(&priv->cmdfreeq,
1673 struct cmd_ctrl_node, list);
1674 list_del(&tempnode->list);
1676 lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1680 spin_unlock_irqrestore(&priv->driver_lock, flags);
1682 lbs_deb_leave(LBS_DEB_HOST);
1687 * @brief This function executes next command in command
1688 * pending queue. It will put fimware back to PS mode
1691 * @param priv A pointer to struct lbs_private structure
1694 int lbs_execute_next_command(struct lbs_private *priv)
1696 struct cmd_ctrl_node *cmdnode = NULL;
1697 struct cmd_header *cmd;
1698 unsigned long flags;
1701 /* Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1702 * only caller to us is lbs_thread() and we get even when a
1703 * data packet is received */
1704 lbs_deb_enter(LBS_DEB_THREAD);
1706 spin_lock_irqsave(&priv->driver_lock, flags);
1708 if (priv->cur_cmd) {
1709 lbs_pr_alert( "EXEC_NEXT_CMD: already processing command!\n");
1710 spin_unlock_irqrestore(&priv->driver_lock, flags);
1715 if (!list_empty(&priv->cmdpendingq)) {
1716 cmdnode = list_first_entry(&priv->cmdpendingq,
1717 struct cmd_ctrl_node, list);
1720 spin_unlock_irqrestore(&priv->driver_lock, flags);
1723 cmd = cmdnode->cmdbuf;
1725 if (is_command_allowed_in_ps(le16_to_cpu(cmd->command))) {
1726 if ((priv->psstate == PS_STATE_SLEEP) ||
1727 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1729 "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1730 le16_to_cpu(cmd->command),
1735 lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1736 "0x%04x in psstate %d\n",
1737 le16_to_cpu(cmd->command), priv->psstate);
1738 } else if (priv->psstate != PS_STATE_FULL_POWER) {
1740 * 1. Non-PS command:
1741 * Queue it. set needtowakeup to TRUE if current state
1742 * is SLEEP, otherwise call lbs_ps_wakeup to send Exit_PS.
1743 * 2. PS command but not Exit_PS:
1745 * 3. PS command Exit_PS:
1746 * Set needtowakeup to TRUE if current state is SLEEP,
1747 * otherwise send this command down to firmware
1750 if (cmd->command != cpu_to_le16(CMD_802_11_PS_MODE)) {
1751 /* Prepare to send Exit PS,
1752 * this non PS command will be sent later */
1753 if ((priv->psstate == PS_STATE_SLEEP)
1754 || (priv->psstate == PS_STATE_PRE_SLEEP)
1756 /* w/ new scheme, it will not reach here.
1757 since it is blocked in main_thread. */
1758 priv->needtowakeup = 1;
1760 lbs_ps_wakeup(priv, 0);
1766 * PS command. Ignore it if it is not Exit_PS.
1767 * otherwise send it down immediately.
1769 struct cmd_ds_802_11_ps_mode *psm = (void *)&cmd[1];
1772 "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1775 cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1777 "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1778 list_del(&cmdnode->list);
1779 spin_lock_irqsave(&priv->driver_lock, flags);
1780 lbs_complete_command(priv, cmdnode, 0);
1781 spin_unlock_irqrestore(&priv->driver_lock, flags);
1787 if ((priv->psstate == PS_STATE_SLEEP) ||
1788 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1790 "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1791 list_del(&cmdnode->list);
1792 spin_lock_irqsave(&priv->driver_lock, flags);
1793 lbs_complete_command(priv, cmdnode, 0);
1794 spin_unlock_irqrestore(&priv->driver_lock, flags);
1795 priv->needtowakeup = 1;
1802 "EXEC_NEXT_CMD: sending EXIT_PS\n");
1805 list_del(&cmdnode->list);
1806 lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1807 le16_to_cpu(cmd->command));
1808 lbs_submit_command(priv, cmdnode);
1811 * check if in power save mode, if yes, put the device back
1814 if ((priv->psmode != LBS802_11POWERMODECAM) &&
1815 (priv->psstate == PS_STATE_FULL_POWER) &&
1816 ((priv->connect_status == LBS_CONNECTED) ||
1817 (priv->mesh_connect_status == LBS_CONNECTED))) {
1818 if (priv->secinfo.WPAenabled ||
1819 priv->secinfo.WPA2enabled) {
1820 /* check for valid WPA group keys */
1821 if (priv->wpa_mcast_key.len ||
1822 priv->wpa_unicast_key.len) {
1824 "EXEC_NEXT_CMD: WPA enabled and GTK_SET"
1825 " go back to PS_SLEEP");
1826 lbs_ps_sleep(priv, 0);
1830 "EXEC_NEXT_CMD: cmdpendingq empty, "
1831 "go back to PS_SLEEP");
1832 lbs_ps_sleep(priv, 0);
1839 lbs_deb_leave(LBS_DEB_THREAD);
1843 void lbs_send_iwevcustom_event(struct lbs_private *priv, s8 *str)
1845 union iwreq_data iwrq;
1848 lbs_deb_enter(LBS_DEB_WEXT);
1850 memset(&iwrq, 0, sizeof(union iwreq_data));
1851 memset(buf, 0, sizeof(buf));
1853 snprintf(buf, sizeof(buf) - 1, "%s", str);
1855 iwrq.data.length = strlen(buf) + 1 + IW_EV_LCP_LEN;
1857 /* Send Event to upper layer */
1858 lbs_deb_wext("event indication string %s\n", (char *)buf);
1859 lbs_deb_wext("event indication length %d\n", iwrq.data.length);
1860 lbs_deb_wext("sending wireless event IWEVCUSTOM for %s\n", str);
1862 wireless_send_event(priv->dev, IWEVCUSTOM, &iwrq, buf);
1864 lbs_deb_leave(LBS_DEB_WEXT);
1867 static void lbs_send_confirmsleep(struct lbs_private *priv)
1869 unsigned long flags;
1872 lbs_deb_enter(LBS_DEB_HOST);
1873 lbs_deb_hex(LBS_DEB_HOST, "sleep confirm", (u8 *) &confirm_sleep,
1874 sizeof(confirm_sleep));
1876 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) &confirm_sleep,
1877 sizeof(confirm_sleep));
1879 lbs_pr_alert("confirm_sleep failed\n");
1883 spin_lock_irqsave(&priv->driver_lock, flags);
1885 /* We don't get a response on the sleep-confirmation */
1886 priv->dnld_sent = DNLD_RES_RECEIVED;
1888 /* If nothing to do, go back to sleep (?) */
1889 if (!__kfifo_len(priv->event_fifo) && !priv->resp_len[priv->resp_idx])
1890 priv->psstate = PS_STATE_SLEEP;
1892 spin_unlock_irqrestore(&priv->driver_lock, flags);
1895 lbs_deb_leave(LBS_DEB_HOST);
1898 void lbs_ps_sleep(struct lbs_private *priv, int wait_option)
1900 lbs_deb_enter(LBS_DEB_HOST);
1903 * PS is currently supported only in Infrastructure mode
1904 * Remove this check if it is to be supported in IBSS mode also
1907 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1908 CMD_SUBCMD_ENTER_PS, wait_option, 0, NULL);
1910 lbs_deb_leave(LBS_DEB_HOST);
1914 * @brief This function sends Exit_PS command to firmware.
1916 * @param priv A pointer to struct lbs_private structure
1917 * @param wait_option wait response or not
1920 void lbs_ps_wakeup(struct lbs_private *priv, int wait_option)
1924 lbs_deb_enter(LBS_DEB_HOST);
1926 Localpsmode = cpu_to_le32(LBS802_11POWERMODECAM);
1928 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1930 wait_option, 0, &Localpsmode);
1932 lbs_deb_leave(LBS_DEB_HOST);
1936 * @brief This function checks condition and prepares to
1937 * send sleep confirm command to firmware if ok.
1939 * @param priv A pointer to struct lbs_private structure
1940 * @param psmode Power Saving mode
1943 void lbs_ps_confirm_sleep(struct lbs_private *priv)
1945 unsigned long flags =0;
1948 lbs_deb_enter(LBS_DEB_HOST);
1950 spin_lock_irqsave(&priv->driver_lock, flags);
1951 if (priv->dnld_sent) {
1953 lbs_deb_host("dnld_sent was set\n");
1956 /* In-progress command? */
1957 if (priv->cur_cmd) {
1959 lbs_deb_host("cur_cmd was set\n");
1962 /* Pending events or command responses? */
1963 if (__kfifo_len(priv->event_fifo) || priv->resp_len[priv->resp_idx]) {
1965 lbs_deb_host("pending events or command responses\n");
1967 spin_unlock_irqrestore(&priv->driver_lock, flags);
1970 lbs_deb_host("sending lbs_ps_confirm_sleep\n");
1971 lbs_send_confirmsleep(priv);
1973 lbs_deb_host("sleep confirm has been delayed\n");
1976 lbs_deb_leave(LBS_DEB_HOST);
1980 static struct cmd_ctrl_node *__lbs_cmd_async(struct lbs_private *priv,
1981 uint16_t command, struct cmd_header *in_cmd, int in_cmd_size,
1982 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
1983 unsigned long callback_arg)
1985 struct cmd_ctrl_node *cmdnode;
1987 lbs_deb_enter(LBS_DEB_HOST);
1989 if (priv->surpriseremoved) {
1990 lbs_deb_host("PREP_CMD: card removed\n");
1991 cmdnode = ERR_PTR(-ENOENT);
1995 cmdnode = lbs_get_cmd_ctrl_node(priv);
1996 if (cmdnode == NULL) {
1997 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1999 /* Wake up main thread to execute next command */
2000 wake_up_interruptible(&priv->waitq);
2001 cmdnode = ERR_PTR(-ENOBUFS);
2005 cmdnode->callback = callback;
2006 cmdnode->callback_arg = callback_arg;
2008 /* Copy the incoming command to the buffer */
2009 memcpy(cmdnode->cmdbuf, in_cmd, in_cmd_size);
2011 /* Set sequence number, clean result, move to buffer */
2013 cmdnode->cmdbuf->command = cpu_to_le16(command);
2014 cmdnode->cmdbuf->size = cpu_to_le16(in_cmd_size);
2015 cmdnode->cmdbuf->seqnum = cpu_to_le16(priv->seqnum);
2016 cmdnode->cmdbuf->result = 0;
2018 lbs_deb_host("PREP_CMD: command 0x%04x\n", command);
2020 cmdnode->cmdwaitqwoken = 0;
2021 lbs_queue_cmd(priv, cmdnode);
2022 wake_up_interruptible(&priv->waitq);
2025 lbs_deb_leave_args(LBS_DEB_HOST, "ret %p", cmdnode);
2029 void lbs_cmd_async(struct lbs_private *priv, uint16_t command,
2030 struct cmd_header *in_cmd, int in_cmd_size)
2032 lbs_deb_enter(LBS_DEB_CMD);
2033 __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
2034 lbs_cmd_async_callback, 0);
2035 lbs_deb_leave(LBS_DEB_CMD);
2038 int __lbs_cmd(struct lbs_private *priv, uint16_t command,
2039 struct cmd_header *in_cmd, int in_cmd_size,
2040 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
2041 unsigned long callback_arg)
2043 struct cmd_ctrl_node *cmdnode;
2044 unsigned long flags;
2047 lbs_deb_enter(LBS_DEB_HOST);
2049 cmdnode = __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
2050 callback, callback_arg);
2051 if (IS_ERR(cmdnode)) {
2052 ret = PTR_ERR(cmdnode);
2057 wait_event_interruptible(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);
2059 spin_lock_irqsave(&priv->driver_lock, flags);
2060 ret = cmdnode->result;
2062 lbs_pr_info("PREP_CMD: command 0x%04x failed: %d\n",
2065 __lbs_cleanup_and_insert_cmd(priv, cmdnode);
2066 spin_unlock_irqrestore(&priv->driver_lock, flags);
2069 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
2072 EXPORT_SYMBOL_GPL(__lbs_cmd);