drivers/net/wireless/libertas/cmd.c

   1 /**
   2   * This file contains the handling of command.
   3   * It prepares command and sends it to firmware when it is ready.
   4   */
   5
   6 #include <net/iw_handler.h>
   7 #include "host.h"
   8 #include "hostcmd.h"
   9 #include "decl.h"
  10 #include "defs.h"
  11 #include "dev.h"
  12 #include "join.h"
  13 #include "wext.h"
  14
  15 static void cleanup_cmdnode(struct cmd_ctrl_node *ptempnode);
  16 struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv);
  17 void lbs_set_cmd_ctrl_node(struct lbs_private *priv,
  18                     struct cmd_ctrl_node *ptempnode,
  19                     u16 wait_option, void *pdata_buf);
  20
  21
  22 static u16 commands_allowed_in_ps[] = {
  23         CMD_802_11_RSSI,
  24 };
  25
  26 /**
  27  *  @brief This function checks if the commans is allowed
  28  *  in PS mode not.
  29  *
  30  *  @param command the command ID
  31  *  @return        TRUE or FALSE
  32  */
  33 static u8 is_command_allowed_in_ps(__le16 command)
  34 {
  35         int i;
  36
  37         for (i = 0; i < ARRAY_SIZE(commands_allowed_in_ps); i++) {
  38                 if (command == cpu_to_le16(commands_allowed_in_ps[i]))
  39                         return 1;
  40         }
  41
  42         return 0;
  43 }
  44
  45 static int lbs_cmd_hw_spec(struct lbs_private *priv, struct cmd_ds_command *cmd)
  46 {
  47         struct cmd_ds_get_hw_spec *hwspec = &cmd->params.hwspec;
  48
  49         lbs_deb_enter(LBS_DEB_CMD);
  50
  51         cmd->command = cpu_to_le16(CMD_GET_HW_SPEC);
  52         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_get_hw_spec) + S_DS_GEN);
  53         memcpy(hwspec->permanentaddr, priv->adapter->current_addr, ETH_ALEN);
  54
  55         lbs_deb_leave(LBS_DEB_CMD);
  56         return 0;
  57 }
  58
  59 static int lbs_cmd_802_11_ps_mode(struct lbs_private *priv,
  60                                    struct cmd_ds_command *cmd,
  61                                    u16 cmd_action)
  62 {
  63         struct cmd_ds_802_11_ps_mode *psm = &cmd->params.psmode;
  64
  65         lbs_deb_enter(LBS_DEB_CMD);
  66
  67         cmd->command = cpu_to_le16(CMD_802_11_PS_MODE);
  68         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_ps_mode) +
  69                                 S_DS_GEN);
  70         psm->action = cpu_to_le16(cmd_action);
  71         psm->multipledtim = 0;
  72         switch (cmd_action) {
  73         case CMD_SUBCMD_ENTER_PS:
  74                 lbs_deb_cmd("PS command:" "SubCode- Enter PS\n");
  75
  76                 psm->locallisteninterval = 0;
  77                 psm->nullpktinterval = 0;
  78                 psm->multipledtim =
  79                     cpu_to_le16(MRVDRV_DEFAULT_MULTIPLE_DTIM);
  80                 break;
  81
  82         case CMD_SUBCMD_EXIT_PS:
  83                 lbs_deb_cmd("PS command:" "SubCode- Exit PS\n");
  84                 break;
  85
  86         case CMD_SUBCMD_SLEEP_CONFIRMED:
  87                 lbs_deb_cmd("PS command: SubCode- sleep confirm\n");
  88                 break;
  89
  90         default:
  91                 break;
  92         }
  93
  94         lbs_deb_leave(LBS_DEB_CMD);
  95         return 0;
  96 }
  97
  98 static int lbs_cmd_802_11_inactivity_timeout(struct lbs_private *priv,
  99                                               struct cmd_ds_command *cmd,
 100                                               u16 cmd_action, void *pdata_buf)
 101 {
 102         u16 *timeout = pdata_buf;
 103
 104         lbs_deb_enter(LBS_DEB_CMD);
 105
 106         cmd->command = cpu_to_le16(CMD_802_11_INACTIVITY_TIMEOUT);
 107         cmd->size =
 108             cpu_to_le16(sizeof(struct cmd_ds_802_11_inactivity_timeout)
 109                              + S_DS_GEN);
 110
 111         cmd->params.inactivity_timeout.action = cpu_to_le16(cmd_action);
 112
 113         if (cmd_action)
 114                 cmd->params.inactivity_timeout.timeout = cpu_to_le16(*timeout);
 115         else
 116                 cmd->params.inactivity_timeout.timeout = 0;
 117
 118         lbs_deb_leave(LBS_DEB_CMD);
 119         return 0;
 120 }
 121
 122 static int lbs_cmd_802_11_sleep_params(struct lbs_private *priv,
 123                                         struct cmd_ds_command *cmd,
 124                                         u16 cmd_action)
 125 {
 126         struct lbs_adapter *adapter = priv->adapter;
 127         struct cmd_ds_802_11_sleep_params *sp = &cmd->params.sleep_params;
 128
 129         lbs_deb_enter(LBS_DEB_CMD);
 130
 131         cmd->size = cpu_to_le16((sizeof(struct cmd_ds_802_11_sleep_params)) +
 132                                 S_DS_GEN);
 133         cmd->command = cpu_to_le16(CMD_802_11_SLEEP_PARAMS);
 134
 135         if (cmd_action == CMD_ACT_GET) {
 136                 memset(&adapter->sp, 0, sizeof(struct sleep_params));
 137                 memset(sp, 0, sizeof(struct cmd_ds_802_11_sleep_params));
 138                 sp->action = cpu_to_le16(cmd_action);
 139         } else if (cmd_action == CMD_ACT_SET) {
 140                 sp->action = cpu_to_le16(cmd_action);
 141                 sp->error = cpu_to_le16(adapter->sp.sp_error);
 142                 sp->offset = cpu_to_le16(adapter->sp.sp_offset);
 143                 sp->stabletime = cpu_to_le16(adapter->sp.sp_stabletime);
 144                 sp->calcontrol = (u8) adapter->sp.sp_calcontrol;
 145                 sp->externalsleepclk = (u8) adapter->sp.sp_extsleepclk;
 146                 sp->reserved = cpu_to_le16(adapter->sp.sp_reserved);
 147         }
 148
 149         lbs_deb_leave(LBS_DEB_CMD);
 150         return 0;
 151 }
 152
 153 static int lbs_cmd_802_11_set_wep(struct lbs_private *priv,
 154                                    struct cmd_ds_command *cmd,
 155                                    u32 cmd_act,
 156                                    void * pdata_buf)
 157 {
 158         struct cmd_ds_802_11_set_wep *wep = &cmd->params.wep;
 159         struct lbs_adapter *adapter = priv->adapter;
 160         int ret = 0;
 161         struct assoc_request * assoc_req = pdata_buf;
 162
 163         lbs_deb_enter(LBS_DEB_CMD);
 164
 165         cmd->command = cpu_to_le16(CMD_802_11_SET_WEP);
 166         cmd->size = cpu_to_le16(sizeof(*wep) + S_DS_GEN);
 167
 168         if (cmd_act == CMD_ACT_ADD) {
 169                 int i;
 170
 171                 if (!assoc_req) {
 172                         lbs_deb_cmd("Invalid association request!");
 173                         ret = -1;
 174                         goto done;
 175                 }
 176
 177                 wep->action = cpu_to_le16(CMD_ACT_ADD);
 178
 179                 /* default tx key index */
 180                 wep->keyindex = cpu_to_le16((u16)(assoc_req->wep_tx_keyidx &
 181                                                   (u32)CMD_WEP_KEY_INDEX_MASK));
 182
 183                 /* Copy key types and material to host command structure */
 184                 for (i = 0; i < 4; i++) {
 185                         struct enc_key * pkey = &assoc_req->wep_keys[i];
 186
 187                         switch (pkey->len) {
 188                         case KEY_LEN_WEP_40:
 189                                 wep->keytype[i] = CMD_TYPE_WEP_40_BIT;
 190                                 memmove(&wep->keymaterial[i], pkey->key,
 191                                         pkey->len);
 192                                 lbs_deb_cmd("SET_WEP: add key %d (40 bit)\n", i);
 193                                 break;
 194                         case KEY_LEN_WEP_104:
 195                                 wep->keytype[i] = CMD_TYPE_WEP_104_BIT;
 196                                 memmove(&wep->keymaterial[i], pkey->key,
 197                                         pkey->len);
 198                                 lbs_deb_cmd("SET_WEP: add key %d (104 bit)\n", i);
 199                                 break;
 200                         case 0:
 201                                 break;
 202                         default:
 203                                 lbs_deb_cmd("SET_WEP: invalid key %d, length %d\n",
 204                                        i, pkey->len);
 205                                 ret = -1;
 206                                 goto done;
 207                                 break;
 208                         }
 209                 }
 210         } else if (cmd_act == CMD_ACT_REMOVE) {
 211                 /* ACT_REMOVE clears _all_ WEP keys */
 212                 wep->action = cpu_to_le16(CMD_ACT_REMOVE);
 213
 214                 /* default tx key index */
 215                 wep->keyindex = cpu_to_le16((u16)(adapter->wep_tx_keyidx &
 216                                                   (u32)CMD_WEP_KEY_INDEX_MASK));
 217                 lbs_deb_cmd("SET_WEP: remove key %d\n", adapter->wep_tx_keyidx);
 218         }
 219
 220         ret = 0;
 221
 222 done:
 223         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 224         return ret;
 225 }
 226
 227 static int lbs_cmd_802_11_enable_rsn(struct lbs_private *priv,
 228                                       struct cmd_ds_command *cmd,
 229                                       u16 cmd_action,
 230                                       void * pdata_buf)
 231 {
 232         struct cmd_ds_802_11_enable_rsn *penableRSN = &cmd->params.enbrsn;
 233         u32 * enable = pdata_buf;
 234
 235         lbs_deb_enter(LBS_DEB_CMD);
 236
 237         cmd->command = cpu_to_le16(CMD_802_11_ENABLE_RSN);
 238         cmd->size = cpu_to_le16(sizeof(*penableRSN) + S_DS_GEN);
 239         penableRSN->action = cpu_to_le16(cmd_action);
 240
 241         if (cmd_action == CMD_ACT_SET) {
 242                 if (*enable)
 243                         penableRSN->enable = cpu_to_le16(CMD_ENABLE_RSN);
 244                 else
 245                         penableRSN->enable = cpu_to_le16(CMD_DISABLE_RSN);
 246                 lbs_deb_cmd("ENABLE_RSN: %d\n", *enable);
 247         }
 248
 249         lbs_deb_leave(LBS_DEB_CMD);
 250         return 0;
 251 }
 252
 253
 254 static ssize_t lbs_tlv_size(const u8 *tlv, u16 size)
 255 {
 256         ssize_t pos = 0;
 257         struct mrvlietypesheader *tlv_h;
 258         while (pos < size) {
 259                 u16 length;
 260                 tlv_h = (struct mrvlietypesheader *) tlv;
 261                 if (tlv_h->len == 0)
 262                         return pos;
 263                 length = le16_to_cpu(tlv_h->len) +
 264                         sizeof(struct mrvlietypesheader);
 265                 pos += length;
 266                 tlv += length;
 267         }
 268         return pos;
 269 }
 270
 271
 272 static void lbs_cmd_802_11_subscribe_event(struct lbs_private *priv,
 273         struct cmd_ds_command *cmd, u16 cmd_action,
 274         void *pdata_buf)
 275 {
 276         struct cmd_ds_802_11_subscribe_event *events =
 277                 (struct cmd_ds_802_11_subscribe_event *) pdata_buf;
 278
 279         /* pdata_buf points to a struct cmd_ds_802_11_subscribe_event and room
 280          * for various Marvell TLVs */
 281
 282         lbs_deb_enter(LBS_DEB_CMD);
 283
 284         cmd->size = cpu_to_le16(sizeof(*events)
 285                         - sizeof(events->tlv)
 286                         + S_DS_GEN);
 287         cmd->params.subscribe_event.action = cpu_to_le16(cmd_action);
 288         if (cmd_action == CMD_ACT_GET) {
 289                 cmd->params.subscribe_event.events = 0;
 290         } else {
 291                 ssize_t sz = lbs_tlv_size(events->tlv, sizeof(events->tlv));
 292                 cmd->size = cpu_to_le16(le16_to_cpu(cmd->size) + sz);
 293                 cmd->params.subscribe_event.events = events->events;
 294                 memcpy(cmd->params.subscribe_event.tlv, events->tlv, sz);
 295         }
 296
 297         lbs_deb_leave(LBS_DEB_CMD);
 298 }
 299
 300 static void set_one_wpa_key(struct MrvlIEtype_keyParamSet * pkeyparamset,
 301                             struct enc_key * pkey)
 302 {
 303         lbs_deb_enter(LBS_DEB_CMD);
 304
 305         if (pkey->flags & KEY_INFO_WPA_ENABLED) {
 306                 pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_ENABLED);
 307         }
 308         if (pkey->flags & KEY_INFO_WPA_UNICAST) {
 309                 pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_UNICAST);
 310         }
 311         if (pkey->flags & KEY_INFO_WPA_MCAST) {
 312                 pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_MCAST);
 313         }
 314
 315         pkeyparamset->type = cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
 316         pkeyparamset->keytypeid = cpu_to_le16(pkey->type);
 317         pkeyparamset->keylen = cpu_to_le16(pkey->len);
 318         memcpy(pkeyparamset->key, pkey->key, pkey->len);
 319         pkeyparamset->length = cpu_to_le16(  sizeof(pkeyparamset->keytypeid)
 320                                                 + sizeof(pkeyparamset->keyinfo)
 321                                                 + sizeof(pkeyparamset->keylen)
 322                                                 + sizeof(pkeyparamset->key));
 323         lbs_deb_leave(LBS_DEB_CMD);
 324 }
 325
 326 static int lbs_cmd_802_11_key_material(struct lbs_private *priv,
 327                                         struct cmd_ds_command *cmd,
 328                                         u16 cmd_action,
 329                                         u32 cmd_oid, void *pdata_buf)
 330 {
 331         struct cmd_ds_802_11_key_material *pkeymaterial =
 332             &cmd->params.keymaterial;
 333         struct assoc_request * assoc_req = pdata_buf;
 334         int ret = 0;
 335         int index = 0;
 336
 337         lbs_deb_enter(LBS_DEB_CMD);
 338
 339         cmd->command = cpu_to_le16(CMD_802_11_KEY_MATERIAL);
 340         pkeymaterial->action = cpu_to_le16(cmd_action);
 341
 342         if (cmd_action == CMD_ACT_GET) {
 343                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof (pkeymaterial->action));
 344                 ret = 0;
 345                 goto done;
 346         }
 347
 348         memset(&pkeymaterial->keyParamSet, 0, sizeof(pkeymaterial->keyParamSet));
 349
 350         if (test_bit(ASSOC_FLAG_WPA_UCAST_KEY, &assoc_req->flags)) {
 351                 set_one_wpa_key(&pkeymaterial->keyParamSet[index],
 352                                 &assoc_req->wpa_unicast_key);
 353                 index++;
 354         }
 355
 356         if (test_bit(ASSOC_FLAG_WPA_MCAST_KEY, &assoc_req->flags)) {
 357                 set_one_wpa_key(&pkeymaterial->keyParamSet[index],
 358                                 &assoc_req->wpa_mcast_key);
 359                 index++;
 360         }
 361
 362         cmd->size = cpu_to_le16(  S_DS_GEN
 363                                 + sizeof (pkeymaterial->action)
 364                                 + (index * sizeof(struct MrvlIEtype_keyParamSet)));
 365
 366         ret = 0;
 367
 368 done:
 369         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 370         return ret;
 371 }
 372
 373 static int lbs_cmd_802_11_reset(struct lbs_private *priv,
 374                                  struct cmd_ds_command *cmd, int cmd_action)
 375 {
 376         struct cmd_ds_802_11_reset *reset = &cmd->params.reset;
 377
 378         lbs_deb_enter(LBS_DEB_CMD);
 379
 380         cmd->command = cpu_to_le16(CMD_802_11_RESET);
 381         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_reset) + S_DS_GEN);
 382         reset->action = cpu_to_le16(cmd_action);
 383
 384         lbs_deb_leave(LBS_DEB_CMD);
 385         return 0;
 386 }
 387
 388 static int lbs_cmd_802_11_get_log(struct lbs_private *priv,
 389                                    struct cmd_ds_command *cmd)
 390 {
 391         lbs_deb_enter(LBS_DEB_CMD);
 392         cmd->command = cpu_to_le16(CMD_802_11_GET_LOG);
 393         cmd->size =
 394                 cpu_to_le16(sizeof(struct cmd_ds_802_11_get_log) + S_DS_GEN);
 395
 396         lbs_deb_leave(LBS_DEB_CMD);
 397         return 0;
 398 }
 399
 400 static int lbs_cmd_802_11_get_stat(struct lbs_private *priv,
 401                                     struct cmd_ds_command *cmd)
 402 {
 403         lbs_deb_enter(LBS_DEB_CMD);
 404         cmd->command = cpu_to_le16(CMD_802_11_GET_STAT);
 405         cmd->size =
 406             cpu_to_le16(sizeof(struct cmd_ds_802_11_get_stat) + S_DS_GEN);
 407
 408         lbs_deb_leave(LBS_DEB_CMD);
 409         return 0;
 410 }
 411
 412 static int lbs_cmd_802_11_snmp_mib(struct lbs_private *priv,
 413                                     struct cmd_ds_command *cmd,
 414                                     int cmd_action,
 415                                     int cmd_oid, void *pdata_buf)
 416 {
 417         struct cmd_ds_802_11_snmp_mib *pSNMPMIB = &cmd->params.smib;
 418         struct lbs_adapter *adapter = priv->adapter;
 419         u8 ucTemp;
 420
 421         lbs_deb_enter(LBS_DEB_CMD);
 422
 423         lbs_deb_cmd("SNMP_CMD: cmd_oid = 0x%x\n", cmd_oid);
 424
 425         cmd->command = cpu_to_le16(CMD_802_11_SNMP_MIB);
 426         cmd->size = cpu_to_le16(sizeof(*pSNMPMIB) + S_DS_GEN);
 427
 428         switch (cmd_oid) {
 429         case OID_802_11_INFRASTRUCTURE_MODE:
 430         {
 431                 u8 mode = (u8) (size_t) pdata_buf;
 432                 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
 433                 pSNMPMIB->oid = cpu_to_le16((u16) DESIRED_BSSTYPE_I);
 434                 pSNMPMIB->bufsize = sizeof(u8);
 435                 if (mode == IW_MODE_ADHOC) {
 436                         ucTemp = SNMP_MIB_VALUE_ADHOC;
 437                 } else {
 438                         /* Infra and Auto modes */
 439                         ucTemp = SNMP_MIB_VALUE_INFRA;
 440                 }
 441
 442                 memmove(pSNMPMIB->value, &ucTemp, sizeof(u8));
 443
 444                 break;
 445         }
 446
 447         case OID_802_11D_ENABLE:
 448                 {
 449                         u32 ulTemp;
 450
 451                         pSNMPMIB->oid = cpu_to_le16((u16) DOT11D_I);
 452
 453                         if (cmd_action == CMD_ACT_SET) {
 454                                 pSNMPMIB->querytype = CMD_ACT_SET;
 455                                 pSNMPMIB->bufsize = sizeof(u16);
 456                                 ulTemp = *(u32 *)pdata_buf;
 457                                 *((__le16 *)(pSNMPMIB->value)) =
 458                                     cpu_to_le16((u16) ulTemp);
 459                         }
 460                         break;
 461                 }
 462
 463         case OID_802_11_FRAGMENTATION_THRESHOLD:
 464                 {
 465                         u32 ulTemp;
 466
 467                         pSNMPMIB->oid = cpu_to_le16((u16) FRAGTHRESH_I);
 468
 469                         if (cmd_action == CMD_ACT_GET) {
 470                                 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
 471                         } else if (cmd_action == CMD_ACT_SET) {
 472                                 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
 473                                 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
 474                                 ulTemp = *((u32 *) pdata_buf);
 475                                 *((__le16 *)(pSNMPMIB->value)) =
 476                                     cpu_to_le16((u16) ulTemp);
 477
 478                         }
 479
 480                         break;
 481                 }
 482
 483         case OID_802_11_RTS_THRESHOLD:
 484                 {
 485
 486                         u32 ulTemp;
 487                         pSNMPMIB->oid = le16_to_cpu((u16) RTSTHRESH_I);
 488
 489                         if (cmd_action == CMD_ACT_GET) {
 490                                 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
 491                         } else if (cmd_action == CMD_ACT_SET) {
 492                                 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
 493                                 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
 494                                 ulTemp = *((u32 *)pdata_buf);
 495                                 *(__le16 *)(pSNMPMIB->value) =
 496                                     cpu_to_le16((u16) ulTemp);
 497
 498                         }
 499                         break;
 500                 }
 501         case OID_802_11_TX_RETRYCOUNT:
 502                 pSNMPMIB->oid = cpu_to_le16((u16) SHORT_RETRYLIM_I);
 503
 504                 if (cmd_action == CMD_ACT_GET) {
 505                         pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
 506                 } else if (cmd_action == CMD_ACT_SET) {
 507                         pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
 508                         pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
 509                         *((__le16 *)(pSNMPMIB->value)) =
 510                             cpu_to_le16((u16) adapter->txretrycount);
 511                 }
 512
 513                 break;
 514         default:
 515                 break;
 516         }
 517
 518         lbs_deb_cmd(
 519                "SNMP_CMD: command=0x%x, size=0x%x, seqnum=0x%x, result=0x%x\n",
 520                le16_to_cpu(cmd->command), le16_to_cpu(cmd->size),
 521                le16_to_cpu(cmd->seqnum), le16_to_cpu(cmd->result));
 522
 523         lbs_deb_cmd(
 524                "SNMP_CMD: action 0x%x, oid 0x%x, oidsize 0x%x, value 0x%x\n",
 525                le16_to_cpu(pSNMPMIB->querytype), le16_to_cpu(pSNMPMIB->oid),
 526                le16_to_cpu(pSNMPMIB->bufsize),
 527                le16_to_cpu(*(__le16 *) pSNMPMIB->value));
 528
 529         lbs_deb_leave(LBS_DEB_CMD);
 530         return 0;
 531 }
 532
 533 static int lbs_cmd_802_11_radio_control(struct lbs_private *priv,
 534                                          struct cmd_ds_command *cmd,
 535                                          int cmd_action)
 536 {
 537         struct lbs_adapter *adapter = priv->adapter;
 538         struct cmd_ds_802_11_radio_control *pradiocontrol = &cmd->params.radio;
 539
 540         lbs_deb_enter(LBS_DEB_CMD);
 541
 542         cmd->size =
 543             cpu_to_le16((sizeof(struct cmd_ds_802_11_radio_control)) +
 544                              S_DS_GEN);
 545         cmd->command = cpu_to_le16(CMD_802_11_RADIO_CONTROL);
 546
 547         pradiocontrol->action = cpu_to_le16(cmd_action);
 548
 549         switch (adapter->preamble) {
 550         case CMD_TYPE_SHORT_PREAMBLE:
 551                 pradiocontrol->control = cpu_to_le16(SET_SHORT_PREAMBLE);
 552                 break;
 553
 554         case CMD_TYPE_LONG_PREAMBLE:
 555                 pradiocontrol->control = cpu_to_le16(SET_LONG_PREAMBLE);
 556                 break;
 557
 558         case CMD_TYPE_AUTO_PREAMBLE:
 559         default:
 560                 pradiocontrol->control = cpu_to_le16(SET_AUTO_PREAMBLE);
 561                 break;
 562         }
 563
 564         if (adapter->radioon)
 565                 pradiocontrol->control |= cpu_to_le16(TURN_ON_RF);
 566         else
 567                 pradiocontrol->control &= cpu_to_le16(~TURN_ON_RF);
 568
 569         lbs_deb_leave(LBS_DEB_CMD);
 570         return 0;
 571 }
 572
 573 static int lbs_cmd_802_11_rf_tx_power(struct lbs_private *priv,
 574                                        struct cmd_ds_command *cmd,
 575                                        u16 cmd_action, void *pdata_buf)
 576 {
 577
 578         struct cmd_ds_802_11_rf_tx_power *prtp = &cmd->params.txp;
 579
 580         lbs_deb_enter(LBS_DEB_CMD);
 581
 582         cmd->size =
 583             cpu_to_le16((sizeof(struct cmd_ds_802_11_rf_tx_power)) + S_DS_GEN);
 584         cmd->command = cpu_to_le16(CMD_802_11_RF_TX_POWER);
 585         prtp->action = cpu_to_le16(cmd_action);
 586
 587         lbs_deb_cmd("RF_TX_POWER_CMD: size:%d cmd:0x%x Act:%d\n",
 588                     le16_to_cpu(cmd->size), le16_to_cpu(cmd->command),
 589                     le16_to_cpu(prtp->action));
 590
 591         switch (cmd_action) {
 592         case CMD_ACT_TX_POWER_OPT_GET:
 593                 prtp->action = cpu_to_le16(CMD_ACT_GET);
 594                 prtp->currentlevel = 0;
 595                 break;
 596
 597         case CMD_ACT_TX_POWER_OPT_SET_HIGH:
 598                 prtp->action = cpu_to_le16(CMD_ACT_SET);
 599                 prtp->currentlevel = cpu_to_le16(CMD_ACT_TX_POWER_INDEX_HIGH);
 600                 break;
 601
 602         case CMD_ACT_TX_POWER_OPT_SET_MID:
 603                 prtp->action = cpu_to_le16(CMD_ACT_SET);
 604                 prtp->currentlevel = cpu_to_le16(CMD_ACT_TX_POWER_INDEX_MID);
 605                 break;
 606
 607         case CMD_ACT_TX_POWER_OPT_SET_LOW:
 608                 prtp->action = cpu_to_le16(CMD_ACT_SET);
 609                 prtp->currentlevel = cpu_to_le16(*((u16 *) pdata_buf));
 610                 break;
 611         }
 612
 613         lbs_deb_leave(LBS_DEB_CMD);
 614         return 0;
 615 }
 616
 617 static int lbs_cmd_802_11_monitor_mode(struct lbs_private *priv,
 618                                       struct cmd_ds_command *cmd,
 619                                       u16 cmd_action, void *pdata_buf)
 620 {
 621         struct cmd_ds_802_11_monitor_mode *monitor = &cmd->params.monitor;
 622
 623         cmd->command = cpu_to_le16(CMD_802_11_MONITOR_MODE);
 624         cmd->size =
 625             cpu_to_le16(sizeof(struct cmd_ds_802_11_monitor_mode) +
 626                              S_DS_GEN);
 627
 628         monitor->action = cpu_to_le16(cmd_action);
 629         if (cmd_action == CMD_ACT_SET) {
 630                 monitor->mode =
 631                     cpu_to_le16((u16) (*(u32 *) pdata_buf));
 632         }
 633
 634         return 0;
 635 }
 636
 637 static int lbs_cmd_802_11_rate_adapt_rateset(struct lbs_private *priv,
 638                                               struct cmd_ds_command *cmd,
 639                                               u16 cmd_action)
 640 {
 641         struct cmd_ds_802_11_rate_adapt_rateset
 642         *rateadapt = &cmd->params.rateset;
 643         struct lbs_adapter *adapter = priv->adapter;
 644
 645         lbs_deb_enter(LBS_DEB_CMD);
 646         cmd->size =
 647             cpu_to_le16(sizeof(struct cmd_ds_802_11_rate_adapt_rateset)
 648                              + S_DS_GEN);
 649         cmd->command = cpu_to_le16(CMD_802_11_RATE_ADAPT_RATESET);
 650
 651         rateadapt->action = cpu_to_le16(cmd_action);
 652         rateadapt->enablehwauto = cpu_to_le16(adapter->enablehwauto);
 653         rateadapt->bitmap = cpu_to_le16(adapter->ratebitmap);
 654
 655         lbs_deb_leave(LBS_DEB_CMD);
 656         return 0;
 657 }
 658
 659 static int lbs_cmd_802_11_data_rate(struct lbs_private *priv,
 660                                      struct cmd_ds_command *cmd,
 661                                      u16 cmd_action)
 662 {
 663         struct cmd_ds_802_11_data_rate *pdatarate = &cmd->params.drate;
 664         struct lbs_adapter *adapter = priv->adapter;
 665
 666         lbs_deb_enter(LBS_DEB_CMD);
 667
 668         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_data_rate) +
 669                              S_DS_GEN);
 670         cmd->command = cpu_to_le16(CMD_802_11_DATA_RATE);
 671         memset(pdatarate, 0, sizeof(struct cmd_ds_802_11_data_rate));
 672         pdatarate->action = cpu_to_le16(cmd_action);
 673
 674         if (cmd_action == CMD_ACT_SET_TX_FIX_RATE) {
 675                 pdatarate->rates[0] = lbs_data_rate_to_fw_index(adapter->cur_rate);
 676                 lbs_deb_cmd("DATA_RATE: set fixed 0x%02X\n",
 677                        adapter->cur_rate);
 678         } else if (cmd_action == CMD_ACT_SET_TX_AUTO) {
 679                 lbs_deb_cmd("DATA_RATE: setting auto\n");
 680         }
 681
 682         lbs_deb_leave(LBS_DEB_CMD);
 683         return 0;
 684 }
 685
 686 static int lbs_cmd_mac_multicast_adr(struct lbs_private *priv,
 687                                       struct cmd_ds_command *cmd,
 688                                       u16 cmd_action)
 689 {
 690         struct cmd_ds_mac_multicast_adr *pMCastAdr = &cmd->params.madr;
 691         struct lbs_adapter *adapter = priv->adapter;
 692
 693         lbs_deb_enter(LBS_DEB_CMD);
 694         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_mac_multicast_adr) +
 695                              S_DS_GEN);
 696         cmd->command = cpu_to_le16(CMD_MAC_MULTICAST_ADR);
 697
 698         lbs_deb_cmd("MULTICAST_ADR: setting %d addresses\n", pMCastAdr->nr_of_adrs);
 699         pMCastAdr->action = cpu_to_le16(cmd_action);
 700         pMCastAdr->nr_of_adrs =
 701             cpu_to_le16((u16) adapter->nr_of_multicastmacaddr);
 702         memcpy(pMCastAdr->maclist, adapter->multicastlist,
 703                adapter->nr_of_multicastmacaddr * ETH_ALEN);
 704
 705         lbs_deb_leave(LBS_DEB_CMD);
 706         return 0;
 707 }
 708
 709 static int lbs_cmd_802_11_rf_channel(struct lbs_private *priv,
 710                                       struct cmd_ds_command *cmd,
 711                                       int option, void *pdata_buf)
 712 {
 713         struct cmd_ds_802_11_rf_channel *rfchan = &cmd->params.rfchannel;
 714
 715         lbs_deb_enter(LBS_DEB_CMD);
 716         cmd->command = cpu_to_le16(CMD_802_11_RF_CHANNEL);
 717         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_rf_channel) +
 718                                 S_DS_GEN);
 719
 720         if (option == CMD_OPT_802_11_RF_CHANNEL_SET) {
 721                 rfchan->currentchannel = cpu_to_le16(*((u16 *) pdata_buf));
 722         }
 723
 724         rfchan->action = cpu_to_le16(option);
 725
 726         lbs_deb_leave(LBS_DEB_CMD);
 727         return 0;
 728 }
 729
 730 static int lbs_cmd_802_11_rssi(struct lbs_private *priv,
 731                                 struct cmd_ds_command *cmd)
 732 {
 733         struct lbs_adapter *adapter = priv->adapter;
 734
 735         lbs_deb_enter(LBS_DEB_CMD);
 736         cmd->command = cpu_to_le16(CMD_802_11_RSSI);
 737         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_rssi) + S_DS_GEN);
 738         cmd->params.rssi.N = cpu_to_le16(DEFAULT_BCN_AVG_FACTOR);
 739
 740         /* reset Beacon SNR/NF/RSSI values */
 741         adapter->SNR[TYPE_BEACON][TYPE_NOAVG] = 0;
 742         adapter->SNR[TYPE_BEACON][TYPE_AVG] = 0;
 743         adapter->NF[TYPE_BEACON][TYPE_NOAVG] = 0;
 744         adapter->NF[TYPE_BEACON][TYPE_AVG] = 0;
 745         adapter->RSSI[TYPE_BEACON][TYPE_NOAVG] = 0;
 746         adapter->RSSI[TYPE_BEACON][TYPE_AVG] = 0;
 747
 748         lbs_deb_leave(LBS_DEB_CMD);
 749         return 0;
 750 }
 751
 752 static int lbs_cmd_reg_access(struct lbs_private *priv,
 753                                struct cmd_ds_command *cmdptr,
 754                                u8 cmd_action, void *pdata_buf)
 755 {
 756         struct lbs_offset_value *offval;
 757
 758         lbs_deb_enter(LBS_DEB_CMD);
 759
 760         offval = (struct lbs_offset_value *)pdata_buf;
 761
 762         switch (cmdptr->command) {
 763         case CMD_MAC_REG_ACCESS:
 764                 {
 765                         struct cmd_ds_mac_reg_access *macreg;
 766
 767                         cmdptr->size =
 768                             cpu_to_le16(sizeof (struct cmd_ds_mac_reg_access)
 769                                         + S_DS_GEN);
 770                         macreg =
 771                             (struct cmd_ds_mac_reg_access *)&cmdptr->params.
 772                             macreg;
 773
 774                         macreg->action = cpu_to_le16(cmd_action);
 775                         macreg->offset = cpu_to_le16((u16) offval->offset);
 776                         macreg->value = cpu_to_le32(offval->value);
 777
 778                         break;
 779                 }
 780
 781         case CMD_BBP_REG_ACCESS:
 782                 {
 783                         struct cmd_ds_bbp_reg_access *bbpreg;
 784
 785                         cmdptr->size =
 786                             cpu_to_le16(sizeof
 787                                              (struct cmd_ds_bbp_reg_access)
 788                                              + S_DS_GEN);
 789                         bbpreg =
 790                             (struct cmd_ds_bbp_reg_access *)&cmdptr->params.
 791                             bbpreg;
 792
 793                         bbpreg->action = cpu_to_le16(cmd_action);
 794                         bbpreg->offset = cpu_to_le16((u16) offval->offset);
 795                         bbpreg->value = (u8) offval->value;
 796
 797                         break;
 798                 }
 799
 800         case CMD_RF_REG_ACCESS:
 801                 {
 802                         struct cmd_ds_rf_reg_access *rfreg;
 803
 804                         cmdptr->size =
 805                             cpu_to_le16(sizeof
 806                                              (struct cmd_ds_rf_reg_access) +
 807                                              S_DS_GEN);
 808                         rfreg =
 809                             (struct cmd_ds_rf_reg_access *)&cmdptr->params.
 810                             rfreg;
 811
 812                         rfreg->action = cpu_to_le16(cmd_action);
 813                         rfreg->offset = cpu_to_le16((u16) offval->offset);
 814                         rfreg->value = (u8) offval->value;
 815
 816                         break;
 817                 }
 818
 819         default:
 820                 break;
 821         }
 822
 823         lbs_deb_leave(LBS_DEB_CMD);
 824         return 0;
 825 }
 826
 827 static int lbs_cmd_802_11_mac_address(struct lbs_private *priv,
 828                                        struct cmd_ds_command *cmd,
 829                                        u16 cmd_action)
 830 {
 831         struct lbs_adapter *adapter = priv->adapter;
 832
 833         lbs_deb_enter(LBS_DEB_CMD);
 834         cmd->command = cpu_to_le16(CMD_802_11_MAC_ADDRESS);
 835         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_mac_address) +
 836                              S_DS_GEN);
 837         cmd->result = 0;
 838
 839         cmd->params.macadd.action = cpu_to_le16(cmd_action);
 840
 841         if (cmd_action == CMD_ACT_SET) {
 842                 memcpy(cmd->params.macadd.macadd,
 843                        adapter->current_addr, ETH_ALEN);
 844                 lbs_deb_hex(LBS_DEB_CMD, "SET_CMD: MAC addr", adapter->current_addr, 6);
 845         }
 846
 847         lbs_deb_leave(LBS_DEB_CMD);
 848         return 0;
 849 }
 850
 851 static int lbs_cmd_802_11_eeprom_access(struct lbs_private *priv,
 852                                          struct cmd_ds_command *cmd,
 853                                          int cmd_action, void *pdata_buf)
 854 {
 855         struct lbs_ioctl_regrdwr *ea = pdata_buf;
 856
 857         lbs_deb_enter(LBS_DEB_CMD);
 858
 859         cmd->command = cpu_to_le16(CMD_802_11_EEPROM_ACCESS);
 860         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_eeprom_access) +
 861                                 S_DS_GEN);
 862         cmd->result = 0;
 863
 864         cmd->params.rdeeprom.action = cpu_to_le16(ea->action);
 865         cmd->params.rdeeprom.offset = cpu_to_le16(ea->offset);
 866         cmd->params.rdeeprom.bytecount = cpu_to_le16(ea->NOB);
 867         cmd->params.rdeeprom.value = 0;
 868
 869         lbs_deb_leave(LBS_DEB_CMD);
 870         return 0;
 871 }
 872
 873 static int lbs_cmd_bt_access(struct lbs_private *priv,
 874                                struct cmd_ds_command *cmd,
 875                                u16 cmd_action, void *pdata_buf)
 876 {
 877         struct cmd_ds_bt_access *bt_access = &cmd->params.bt;
 878         lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
 879
 880         cmd->command = cpu_to_le16(CMD_BT_ACCESS);
 881         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_bt_access) + S_DS_GEN);
 882         cmd->result = 0;
 883         bt_access->action = cpu_to_le16(cmd_action);
 884
 885         switch (cmd_action) {
 886         case CMD_ACT_BT_ACCESS_ADD:
 887                 memcpy(bt_access->addr1, pdata_buf, 2 * ETH_ALEN);
 888                 lbs_deb_hex(LBS_DEB_MESH, "BT_ADD: blinded MAC addr", bt_access->addr1, 6);
 889                 break;
 890         case CMD_ACT_BT_ACCESS_DEL:
 891                 memcpy(bt_access->addr1, pdata_buf, 1 * ETH_ALEN);
 892                 lbs_deb_hex(LBS_DEB_MESH, "BT_DEL: blinded MAC addr", bt_access->addr1, 6);
 893                 break;
 894         case CMD_ACT_BT_ACCESS_LIST:
 895                 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
 896                 break;
 897         case CMD_ACT_BT_ACCESS_RESET:
 898                 break;
 899         case CMD_ACT_BT_ACCESS_SET_INVERT:
 900                 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
 901                 break;
 902         case CMD_ACT_BT_ACCESS_GET_INVERT:
 903                 break;
 904         default:
 905                 break;
 906         }
 907         lbs_deb_leave(LBS_DEB_CMD);
 908         return 0;
 909 }
 910
 911 static int lbs_cmd_fwt_access(struct lbs_private *priv,
 912                                struct cmd_ds_command *cmd,
 913                                u16 cmd_action, void *pdata_buf)
 914 {
 915         struct cmd_ds_fwt_access *fwt_access = &cmd->params.fwt;
 916         lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
 917
 918         cmd->command = cpu_to_le16(CMD_FWT_ACCESS);
 919         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_fwt_access) + S_DS_GEN);
 920         cmd->result = 0;
 921
 922         if (pdata_buf)
 923                 memcpy(fwt_access, pdata_buf, sizeof(*fwt_access));
 924         else
 925                 memset(fwt_access, 0, sizeof(*fwt_access));
 926
 927         fwt_access->action = cpu_to_le16(cmd_action);
 928
 929         lbs_deb_leave(LBS_DEB_CMD);
 930         return 0;
 931 }
 932
 933 static int lbs_cmd_mesh_access(struct lbs_private *priv,
 934                                 struct cmd_ds_command *cmd,
 935                                 u16 cmd_action, void *pdata_buf)
 936 {
 937         struct cmd_ds_mesh_access *mesh_access = &cmd->params.mesh;
 938         lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
 939
 940         cmd->command = cpu_to_le16(CMD_MESH_ACCESS);
 941         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_mesh_access) + S_DS_GEN);
 942         cmd->result = 0;
 943
 944         if (pdata_buf)
 945                 memcpy(mesh_access, pdata_buf, sizeof(*mesh_access));
 946         else
 947                 memset(mesh_access, 0, sizeof(*mesh_access));
 948
 949         mesh_access->action = cpu_to_le16(cmd_action);
 950
 951         lbs_deb_leave(LBS_DEB_CMD);
 952         return 0;
 953 }
 954
 955 static int lbs_cmd_bcn_ctrl(struct lbs_private * priv,
 956                                 struct cmd_ds_command *cmd,
 957                                 u16 cmd_action)
 958 {
 959         struct cmd_ds_802_11_beacon_control
 960                 *bcn_ctrl = &cmd->params.bcn_ctrl;
 961         struct lbs_adapter *adapter = priv->adapter;
 962
 963         lbs_deb_enter(LBS_DEB_CMD);
 964         cmd->size =
 965             cpu_to_le16(sizeof(struct cmd_ds_802_11_beacon_control)
 966                              + S_DS_GEN);
 967         cmd->command = cpu_to_le16(CMD_802_11_BEACON_CTRL);
 968
 969         bcn_ctrl->action = cpu_to_le16(cmd_action);
 970         bcn_ctrl->beacon_enable = cpu_to_le16(adapter->beacon_enable);
 971         bcn_ctrl->beacon_period = cpu_to_le16(adapter->beacon_period);
 972
 973         lbs_deb_leave(LBS_DEB_CMD);
 974         return 0;
 975 }
 976
 977 static int lbs_cmd_set_boot2_ver(struct lbs_private *priv,
 978                                 struct cmd_ds_command *cmd,
 979                                 u16 cmd_action, void *pdata_buf)
 980 {
 981         struct cmd_ds_set_boot2_ver *boot2_ver = &cmd->params.boot2_ver;
 982         cmd->command = cpu_to_le16(CMD_SET_BOOT2_VER);
 983         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_set_boot2_ver) + S_DS_GEN);
 984         boot2_ver->version = priv->boot2_version;
 985         return 0;
 986 }
 987
 988 /*
 989  * Note: NEVER use lbs_queue_cmd() with addtail==0 other than for
 990  * the command timer, because it does not account for queued commands.
 991  */
 992 void lbs_queue_cmd(struct lbs_adapter *adapter,
 993         struct cmd_ctrl_node *cmdnode,
 994         u8 addtail)
 995 {
 996         unsigned long flags;
 997         struct cmd_ds_command *cmdptr;
 998
 999         lbs_deb_enter(LBS_DEB_HOST);
1000
1001         if (!cmdnode) {
1002                 lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
1003                 goto done;
1004         }
1005
1006         cmdptr = (struct cmd_ds_command *)cmdnode->bufvirtualaddr;
1007         if (!cmdptr) {
1008                 lbs_deb_host("QUEUE_CMD: cmdptr is NULL\n");
1009                 goto done;
1010         }
1011
1012         /* Exit_PS command needs to be queued in the header always. */
1013         if (cmdptr->command == CMD_802_11_PS_MODE) {
1014                 struct cmd_ds_802_11_ps_mode *psm = &cmdptr->params.psmode;
1015                 if (psm->action == cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1016                         if (adapter->psstate != PS_STATE_FULL_POWER)
1017                                 addtail = 0;
1018                 }
1019         }
1020
1021         spin_lock_irqsave(&adapter->driver_lock, flags);
1022
1023         if (addtail) {
1024                 list_add_tail(&cmdnode->list, &adapter->cmdpendingq);
1025                 adapter->nr_cmd_pending++;
1026         } else
1027                 list_add(&cmdnode->list, &adapter->cmdpendingq);
1028
1029         spin_unlock_irqrestore(&adapter->driver_lock, flags);
1030
1031         lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
1032                le16_to_cpu(((struct cmd_ds_gen*)cmdnode->bufvirtualaddr)->command));
1033
1034 done:
1035         lbs_deb_leave(LBS_DEB_HOST);
1036 }
1037
1038 /*
1039  * TODO: Fix the issue when DownloadcommandToStation is being called the
1040  * second time when the command times out. All the cmdptr->xxx are in little
1041  * endian and therefore all the comparissions will fail.
1042  * For now - we are not performing the endian conversion the second time - but
1043  * for PS and DEEP_SLEEP we need to worry
1044  */
1045 static int DownloadcommandToStation(struct lbs_private *priv,
1046                                     struct cmd_ctrl_node *cmdnode)
1047 {
1048         unsigned long flags;
1049         struct cmd_ds_command *cmdptr;
1050         struct lbs_adapter *adapter = priv->adapter;
1051         int ret = -1;
1052         u16 cmdsize;
1053         u16 command;
1054
1055         lbs_deb_enter(LBS_DEB_HOST);
1056
1057         if (!adapter || !cmdnode) {
1058                 lbs_deb_host("DNLD_CMD: adapter or cmdmode is NULL\n");
1059                 goto done;
1060         }
1061
1062         cmdptr = (struct cmd_ds_command *)cmdnode->bufvirtualaddr;
1063
1064         spin_lock_irqsave(&adapter->driver_lock, flags);
1065         if (!cmdptr || !cmdptr->size) {
1066                 lbs_deb_host("DNLD_CMD: cmdptr is NULL or zero\n");
1067                 __lbs_cleanup_and_insert_cmd(priv, cmdnode);
1068                 spin_unlock_irqrestore(&adapter->driver_lock, flags);
1069                 goto done;
1070         }
1071
1072         adapter->cur_cmd = cmdnode;
1073         adapter->cur_cmd_retcode = 0;
1074         spin_unlock_irqrestore(&adapter->driver_lock, flags);
1075
1076         cmdsize = cmdptr->size;
1077         command = cpu_to_le16(cmdptr->command);
1078
1079         lbs_deb_host("DNLD_CMD: command 0x%04x, size %d, jiffies %lu\n",
1080                     command, le16_to_cpu(cmdptr->size), jiffies);
1081         lbs_deb_hex(LBS_DEB_HOST, "DNLD_CMD", cmdnode->bufvirtualaddr, cmdsize);
1082
1083         cmdnode->cmdwaitqwoken = 0;
1084         cmdsize = cpu_to_le16(cmdsize);
1085
1086         ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmdptr, cmdsize);
1087
1088         if (ret != 0) {
1089                 lbs_deb_host("DNLD_CMD: hw_host_to_card failed\n");
1090                 spin_lock_irqsave(&adapter->driver_lock, flags);
1091                 adapter->cur_cmd_retcode = ret;
1092                 __lbs_cleanup_and_insert_cmd(priv, adapter->cur_cmd);
1093                 adapter->nr_cmd_pending--;
1094                 adapter->cur_cmd = NULL;
1095                 spin_unlock_irqrestore(&adapter->driver_lock, flags);
1096                 goto done;
1097         }
1098
1099         lbs_deb_cmd("DNLD_CMD: sent command 0x%04x, jiffies %lu\n", command, jiffies);
1100
1101         /* Setup the timer after transmit command */
1102         if (command == CMD_802_11_SCAN || command == CMD_802_11_AUTHENTICATE
1103             || command == CMD_802_11_ASSOCIATE)
1104                 mod_timer(&adapter->command_timer, jiffies + (10*HZ));
1105         else
1106                 mod_timer(&adapter->command_timer, jiffies + (5*HZ));
1107
1108         ret = 0;
1109
1110 done:
1111         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1112         return ret;
1113 }
1114
1115 static int lbs_cmd_mac_control(struct lbs_private *priv,
1116                                 struct cmd_ds_command *cmd)
1117 {
1118         struct cmd_ds_mac_control *mac = &cmd->params.macctrl;
1119
1120         lbs_deb_enter(LBS_DEB_CMD);
1121
1122         cmd->command = cpu_to_le16(CMD_MAC_CONTROL);
1123         cmd->size = cpu_to_le16(sizeof(struct cmd_ds_mac_control) + S_DS_GEN);
1124         mac->action = cpu_to_le16(priv->adapter->currentpacketfilter);
1125
1126         lbs_deb_cmd("MAC_CONTROL: action 0x%x, size %d\n",
1127                     le16_to_cpu(mac->action), le16_to_cpu(cmd->size));
1128
1129         lbs_deb_leave(LBS_DEB_CMD);
1130         return 0;
1131 }
1132
1133 /**
1134  *  This function inserts command node to cmdfreeq
1135  *  after cleans it. Requires adapter->driver_lock held.
1136  */
1137 void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1138         struct cmd_ctrl_node *ptempcmd)
1139 {
1140         struct lbs_adapter *adapter = priv->adapter;
1141
1142         if (!ptempcmd)
1143                 return;
1144
1145         cleanup_cmdnode(ptempcmd);
1146         list_add_tail(&ptempcmd->list, &adapter->cmdfreeq);
1147 }
1148
1149 static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1150         struct cmd_ctrl_node *ptempcmd)
1151 {
1152         unsigned long flags;
1153
1154         spin_lock_irqsave(&priv->adapter->driver_lock, flags);
1155         __lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1156         spin_unlock_irqrestore(&priv->adapter->driver_lock, flags);
1157 }
1158
1159 int lbs_set_radio_control(struct lbs_private *priv)
1160 {
1161         int ret = 0;
1162
1163         lbs_deb_enter(LBS_DEB_CMD);
1164
1165         ret = lbs_prepare_and_send_command(priv,
1166                                     CMD_802_11_RADIO_CONTROL,
1167                                     CMD_ACT_SET,
1168                                     CMD_OPTION_WAITFORRSP, 0, NULL);
1169
1170         lbs_deb_cmd("RADIO_SET: radio %d, preamble %d\n",
1171                priv->adapter->radioon, priv->adapter->preamble);
1172
1173         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1174         return ret;
1175 }
1176
1177 int lbs_set_mac_packet_filter(struct lbs_private *priv)
1178 {
1179         int ret = 0;
1180
1181         lbs_deb_enter(LBS_DEB_CMD);
1182
1183         /* Send MAC control command to station */
1184         ret = lbs_prepare_and_send_command(priv,
1185                                     CMD_MAC_CONTROL, 0, 0, 0, NULL);
1186
1187         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1188         return ret;
1189 }
1190
1191 /**
1192  *  @brief This function prepare the command before send to firmware.
1193  *
1194  *  @param priv         A pointer to struct lbs_private structure
1195  *  @param cmd_no       command number
1196  *  @param cmd_action   command action: GET or SET
1197  *  @param wait_option  wait option: wait response or not
1198  *  @param cmd_oid      cmd oid: treated as sub command
1199  *  @param pdata_buf    A pointer to informaion buffer
1200  *  @return             0 or -1
1201  */
1202 int lbs_prepare_and_send_command(struct lbs_private *priv,
1203                           u16 cmd_no,
1204                           u16 cmd_action,
1205                           u16 wait_option, u32 cmd_oid, void *pdata_buf)
1206 {
1207         int ret = 0;
1208         struct lbs_adapter *adapter = priv->adapter;
1209         struct cmd_ctrl_node *cmdnode;
1210         struct cmd_ds_command *cmdptr;
1211         unsigned long flags;
1212
1213         lbs_deb_enter(LBS_DEB_HOST);
1214
1215         if (!adapter) {
1216                 lbs_deb_host("PREP_CMD: adapter is NULL\n");
1217                 ret = -1;
1218                 goto done;
1219         }
1220
1221         if (adapter->surpriseremoved) {
1222                 lbs_deb_host("PREP_CMD: card removed\n");
1223                 ret = -1;
1224                 goto done;
1225         }
1226
1227         cmdnode = lbs_get_cmd_ctrl_node(priv);
1228
1229         if (cmdnode == NULL) {
1230                 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1231
1232                 /* Wake up main thread to execute next command */
1233                 wake_up_interruptible(&priv->waitq);
1234                 ret = -1;
1235                 goto done;
1236         }
1237
1238         lbs_set_cmd_ctrl_node(priv, cmdnode, wait_option, pdata_buf);
1239
1240         cmdptr = (struct cmd_ds_command *)cmdnode->bufvirtualaddr;
1241
1242         lbs_deb_host("PREP_CMD: command 0x%04x\n", cmd_no);
1243
1244         if (!cmdptr) {
1245                 lbs_deb_host("PREP_CMD: cmdptr is NULL\n");
1246                 lbs_cleanup_and_insert_cmd(priv, cmdnode);
1247                 ret = -1;
1248                 goto done;
1249         }
1250
1251         /* Set sequence number, command and INT option */
1252         adapter->seqnum++;
1253         cmdptr->seqnum = cpu_to_le16(adapter->seqnum);
1254
1255         cmdptr->command = cpu_to_le16(cmd_no);
1256         cmdptr->result = 0;
1257
1258         switch (cmd_no) {
1259         case CMD_GET_HW_SPEC:
1260                 ret = lbs_cmd_hw_spec(priv, cmdptr);
1261                 break;
1262         case CMD_802_11_PS_MODE:
1263                 ret = lbs_cmd_802_11_ps_mode(priv, cmdptr, cmd_action);
1264                 break;
1265
1266         case CMD_802_11_SCAN:
1267                 ret = lbs_cmd_80211_scan(priv, cmdptr, pdata_buf);
1268                 break;
1269
1270         case CMD_MAC_CONTROL:
1271                 ret = lbs_cmd_mac_control(priv, cmdptr);
1272                 break;
1273
1274         case CMD_802_11_ASSOCIATE:
1275         case CMD_802_11_REASSOCIATE:
1276                 ret = lbs_cmd_80211_associate(priv, cmdptr, pdata_buf);
1277                 break;
1278
1279         case CMD_802_11_DEAUTHENTICATE:
1280                 ret = lbs_cmd_80211_deauthenticate(priv, cmdptr);
1281                 break;
1282
1283         case CMD_802_11_SET_WEP:
1284                 ret = lbs_cmd_802_11_set_wep(priv, cmdptr, cmd_action, pdata_buf);
1285                 break;
1286
1287         case CMD_802_11_AD_HOC_START:
1288                 ret = lbs_cmd_80211_ad_hoc_start(priv, cmdptr, pdata_buf);
1289                 break;
1290         case CMD_CODE_DNLD:
1291                 break;
1292
1293         case CMD_802_11_RESET:
1294                 ret = lbs_cmd_802_11_reset(priv, cmdptr, cmd_action);
1295                 break;
1296
1297         case CMD_802_11_GET_LOG:
1298                 ret = lbs_cmd_802_11_get_log(priv, cmdptr);
1299                 break;
1300
1301         case CMD_802_11_AUTHENTICATE:
1302                 ret = lbs_cmd_80211_authenticate(priv, cmdptr, pdata_buf);
1303                 break;
1304
1305         case CMD_802_11_GET_STAT:
1306                 ret = lbs_cmd_802_11_get_stat(priv, cmdptr);
1307                 break;
1308
1309         case CMD_802_11_SNMP_MIB:
1310                 ret = lbs_cmd_802_11_snmp_mib(priv, cmdptr,
1311                                                cmd_action, cmd_oid, pdata_buf);
1312                 break;
1313
1314         case CMD_MAC_REG_ACCESS:
1315         case CMD_BBP_REG_ACCESS:
1316         case CMD_RF_REG_ACCESS:
1317                 ret = lbs_cmd_reg_access(priv, cmdptr, cmd_action, pdata_buf);
1318                 break;
1319
1320         case CMD_802_11_RF_CHANNEL:
1321                 ret = lbs_cmd_802_11_rf_channel(priv, cmdptr,
1322                                                  cmd_action, pdata_buf);
1323                 break;
1324
1325         case CMD_802_11_RF_TX_POWER:
1326                 ret = lbs_cmd_802_11_rf_tx_power(priv, cmdptr,
1327                                                   cmd_action, pdata_buf);
1328                 break;
1329
1330         case CMD_802_11_RADIO_CONTROL:
1331                 ret = lbs_cmd_802_11_radio_control(priv, cmdptr, cmd_action);
1332                 break;
1333
1334         case CMD_802_11_DATA_RATE:
1335                 ret = lbs_cmd_802_11_data_rate(priv, cmdptr, cmd_action);
1336                 break;
1337         case CMD_802_11_RATE_ADAPT_RATESET:
1338                 ret = lbs_cmd_802_11_rate_adapt_rateset(priv,
1339                                                          cmdptr, cmd_action);
1340                 break;
1341
1342         case CMD_MAC_MULTICAST_ADR:
1343                 ret = lbs_cmd_mac_multicast_adr(priv, cmdptr, cmd_action);
1344                 break;
1345
1346         case CMD_802_11_MONITOR_MODE:
1347                 ret = lbs_cmd_802_11_monitor_mode(priv, cmdptr,
1348                                           cmd_action, pdata_buf);
1349                 break;
1350
1351         case CMD_802_11_AD_HOC_JOIN:
1352                 ret = lbs_cmd_80211_ad_hoc_join(priv, cmdptr, pdata_buf);
1353                 break;
1354
1355         case CMD_802_11_RSSI:
1356                 ret = lbs_cmd_802_11_rssi(priv, cmdptr);
1357                 break;
1358
1359         case CMD_802_11_AD_HOC_STOP:
1360                 ret = lbs_cmd_80211_ad_hoc_stop(priv, cmdptr);
1361                 break;
1362
1363         case CMD_802_11_ENABLE_RSN:
1364                 ret = lbs_cmd_802_11_enable_rsn(priv, cmdptr, cmd_action,
1365                                 pdata_buf);
1366                 break;
1367
1368         case CMD_802_11_KEY_MATERIAL:
1369                 ret = lbs_cmd_802_11_key_material(priv, cmdptr, cmd_action,
1370                                 cmd_oid, pdata_buf);
1371                 break;
1372
1373         case CMD_802_11_PAIRWISE_TSC:
1374                 break;
1375         case CMD_802_11_GROUP_TSC:
1376                 break;
1377
1378         case CMD_802_11_MAC_ADDRESS:
1379                 ret = lbs_cmd_802_11_mac_address(priv, cmdptr, cmd_action);
1380                 break;
1381
1382         case CMD_802_11_EEPROM_ACCESS:
1383                 ret = lbs_cmd_802_11_eeprom_access(priv, cmdptr,
1384                                                     cmd_action, pdata_buf);
1385                 break;
1386
1387         case CMD_802_11_SET_AFC:
1388         case CMD_802_11_GET_AFC:
1389
1390                 cmdptr->command = cpu_to_le16(cmd_no);
1391                 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_afc) +
1392                                            S_DS_GEN);
1393
1394                 memmove(&cmdptr->params.afc,
1395                         pdata_buf, sizeof(struct cmd_ds_802_11_afc));
1396
1397                 ret = 0;
1398                 goto done;
1399
1400         case CMD_802_11D_DOMAIN_INFO:
1401                 ret = lbs_cmd_802_11d_domain_info(priv, cmdptr,
1402                                                    cmd_no, cmd_action);
1403                 break;
1404
1405         case CMD_802_11_SLEEP_PARAMS:
1406                 ret = lbs_cmd_802_11_sleep_params(priv, cmdptr, cmd_action);
1407                 break;
1408         case CMD_802_11_INACTIVITY_TIMEOUT:
1409                 ret = lbs_cmd_802_11_inactivity_timeout(priv, cmdptr,
1410                                                          cmd_action, pdata_buf);
1411                 lbs_set_cmd_ctrl_node(priv, cmdnode, 0, pdata_buf);
1412                 break;
1413
1414         case CMD_802_11_TPC_CFG:
1415                 cmdptr->command = cpu_to_le16(CMD_802_11_TPC_CFG);
1416                 cmdptr->size =
1417                     cpu_to_le16(sizeof(struct cmd_ds_802_11_tpc_cfg) +
1418                                      S_DS_GEN);
1419
1420                 memmove(&cmdptr->params.tpccfg,
1421                         pdata_buf, sizeof(struct cmd_ds_802_11_tpc_cfg));
1422
1423                 ret = 0;
1424                 break;
1425         case CMD_802_11_LED_GPIO_CTRL:
1426                 {
1427                         struct mrvlietypes_ledgpio *gpio =
1428                             (struct mrvlietypes_ledgpio*)
1429                             cmdptr->params.ledgpio.data;
1430
1431                         memmove(&cmdptr->params.ledgpio,
1432                                 pdata_buf,
1433                                 sizeof(struct cmd_ds_802_11_led_ctrl));
1434
1435                         cmdptr->command =
1436                             cpu_to_le16(CMD_802_11_LED_GPIO_CTRL);
1437
1438 #define ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN 8
1439                         cmdptr->size =
1440                             cpu_to_le16(gpio->header.len + S_DS_GEN +
1441                                              ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN);
1442                         gpio->header.len = cpu_to_le16(gpio->header.len);
1443
1444                         ret = 0;
1445                         break;
1446                 }
1447         case CMD_802_11_SUBSCRIBE_EVENT:
1448                 lbs_cmd_802_11_subscribe_event(priv, cmdptr,
1449                         cmd_action, pdata_buf);
1450                 break;
1451         case CMD_802_11_PWR_CFG:
1452                 cmdptr->command = cpu_to_le16(CMD_802_11_PWR_CFG);
1453                 cmdptr->size =
1454                     cpu_to_le16(sizeof(struct cmd_ds_802_11_pwr_cfg) +
1455                                      S_DS_GEN);
1456                 memmove(&cmdptr->params.pwrcfg, pdata_buf,
1457                         sizeof(struct cmd_ds_802_11_pwr_cfg));
1458
1459                 ret = 0;
1460                 break;
1461         case CMD_BT_ACCESS:
1462                 ret = lbs_cmd_bt_access(priv, cmdptr, cmd_action, pdata_buf);
1463                 break;
1464
1465         case CMD_FWT_ACCESS:
1466                 ret = lbs_cmd_fwt_access(priv, cmdptr, cmd_action, pdata_buf);
1467                 break;
1468
1469         case CMD_MESH_ACCESS:
1470                 ret = lbs_cmd_mesh_access(priv, cmdptr, cmd_action, pdata_buf);
1471                 break;
1472
1473         case CMD_SET_BOOT2_VER:
1474                 ret = lbs_cmd_set_boot2_ver(priv, cmdptr, cmd_action, pdata_buf);
1475                 break;
1476
1477         case CMD_GET_TSF:
1478                 cmdptr->command = cpu_to_le16(CMD_GET_TSF);
1479                 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_get_tsf) +
1480                                            S_DS_GEN);
1481                 ret = 0;
1482                 break;
1483         case CMD_802_11_BEACON_CTRL:
1484                 ret = lbs_cmd_bcn_ctrl(priv, cmdptr, cmd_action);
1485                 break;
1486         default:
1487                 lbs_deb_host("PREP_CMD: unknown command 0x%04x\n", cmd_no);
1488                 ret = -1;
1489                 break;
1490         }
1491
1492         /* return error, since the command preparation failed */
1493         if (ret != 0) {
1494                 lbs_deb_host("PREP_CMD: command preparation failed\n");
1495                 lbs_cleanup_and_insert_cmd(priv, cmdnode);
1496                 ret = -1;
1497                 goto done;
1498         }
1499
1500         cmdnode->cmdwaitqwoken = 0;
1501
1502         lbs_queue_cmd(adapter, cmdnode, 1);
1503         wake_up_interruptible(&priv->waitq);
1504
1505         if (wait_option & CMD_OPTION_WAITFORRSP) {
1506                 lbs_deb_host("PREP_CMD: wait for response\n");
1507                 might_sleep();
1508                 wait_event_interruptible(cmdnode->cmdwait_q,
1509                                          cmdnode->cmdwaitqwoken);
1510         }
1511
1512         spin_lock_irqsave(&adapter->driver_lock, flags);
1513         if (adapter->cur_cmd_retcode) {
1514                 lbs_deb_host("PREP_CMD: command failed with return code %d\n",
1515                        adapter->cur_cmd_retcode);
1516                 adapter->cur_cmd_retcode = 0;
1517                 ret = -1;
1518         }
1519         spin_unlock_irqrestore(&adapter->driver_lock, flags);
1520
1521 done:
1522         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1523         return ret;
1524 }
1525 EXPORT_SYMBOL_GPL(lbs_prepare_and_send_command);
1526
1527 /**
1528  *  @brief This function allocates the command buffer and link
1529  *  it to command free queue.
1530  *
1531  *  @param priv         A pointer to struct lbs_private structure
1532  *  @return             0 or -1
1533  */
1534 int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1535 {
1536         int ret = 0;
1537         u32 ulbufsize;
1538         u32 i;
1539         struct cmd_ctrl_node *tempcmd_array;
1540         u8 *ptempvirtualaddr;
1541         struct lbs_adapter *adapter = priv->adapter;
1542
1543         lbs_deb_enter(LBS_DEB_HOST);
1544
1545         /* Allocate and initialize cmdCtrlNode */
1546         ulbufsize = sizeof(struct cmd_ctrl_node) * MRVDRV_NUM_OF_CMD_BUFFER;
1547
1548         if (!(tempcmd_array = kzalloc(ulbufsize, GFP_KERNEL))) {
1549                 lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1550                 ret = -1;
1551                 goto done;
1552         }
1553         adapter->cmd_array = tempcmd_array;
1554
1555         /* Allocate and initialize command buffers */
1556         ulbufsize = MRVDRV_SIZE_OF_CMD_BUFFER;
1557         for (i = 0; i < MRVDRV_NUM_OF_CMD_BUFFER; i++) {
1558                 if (!(ptempvirtualaddr = kzalloc(ulbufsize, GFP_KERNEL))) {
1559                         lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1560                         ret = -1;
1561                         goto done;
1562                 }
1563
1564                 /* Update command buffer virtual */
1565                 tempcmd_array[i].bufvirtualaddr = ptempvirtualaddr;
1566         }
1567
1568         for (i = 0; i < MRVDRV_NUM_OF_CMD_BUFFER; i++) {
1569                 init_waitqueue_head(&tempcmd_array[i].cmdwait_q);
1570                 lbs_cleanup_and_insert_cmd(priv, &tempcmd_array[i]);
1571         }
1572
1573         ret = 0;
1574
1575 done:
1576         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1577         return ret;
1578 }
1579
1580 /**
1581  *  @brief This function frees the command buffer.
1582  *
1583  *  @param priv         A pointer to struct lbs_private structure
1584  *  @return             0 or -1
1585  */
1586 int lbs_free_cmd_buffer(struct lbs_private *priv)
1587 {
1588         u32 ulbufsize; /* Someone needs to die for this. Slowly and painfully */
1589         unsigned int i;
1590         struct cmd_ctrl_node *tempcmd_array;
1591         struct lbs_adapter *adapter = priv->adapter;
1592
1593         lbs_deb_enter(LBS_DEB_HOST);
1594
1595         /* need to check if cmd array is allocated or not */
1596         if (adapter->cmd_array == NULL) {
1597                 lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1598                 goto done;
1599         }
1600
1601         tempcmd_array = adapter->cmd_array;
1602
1603         /* Release shared memory buffers */
1604         ulbufsize = MRVDRV_SIZE_OF_CMD_BUFFER;
1605         for (i = 0; i < MRVDRV_NUM_OF_CMD_BUFFER; i++) {
1606                 if (tempcmd_array[i].bufvirtualaddr) {
1607                         kfree(tempcmd_array[i].bufvirtualaddr);
1608                         tempcmd_array[i].bufvirtualaddr = NULL;
1609                 }
1610         }
1611
1612         /* Release cmd_ctrl_node */
1613         if (adapter->cmd_array) {
1614                 kfree(adapter->cmd_array);
1615                 adapter->cmd_array = NULL;
1616         }
1617
1618 done:
1619         lbs_deb_leave(LBS_DEB_HOST);
1620         return 0;
1621 }
1622
1623 /**
1624  *  @brief This function gets a free command node if available in
1625  *  command free queue.
1626  *
1627  *  @param priv         A pointer to struct lbs_private structure
1628  *  @return cmd_ctrl_node A pointer to cmd_ctrl_node structure or NULL
1629  */
1630 struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv)
1631 {
1632         struct cmd_ctrl_node *tempnode;
1633         struct lbs_adapter *adapter = priv->adapter;
1634         unsigned long flags;
1635
1636         lbs_deb_enter(LBS_DEB_HOST);
1637
1638         if (!adapter)
1639                 return NULL;
1640
1641         spin_lock_irqsave(&adapter->driver_lock, flags);
1642
1643         if (!list_empty(&adapter->cmdfreeq)) {
1644                 tempnode = list_first_entry(&adapter->cmdfreeq,
1645                                             struct cmd_ctrl_node, list);
1646                 list_del(&tempnode->list);
1647         } else {
1648                 lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1649                 tempnode = NULL;
1650         }
1651
1652         spin_unlock_irqrestore(&adapter->driver_lock, flags);
1653
1654         if (tempnode)
1655                 cleanup_cmdnode(tempnode);
1656
1657         lbs_deb_leave(LBS_DEB_HOST);
1658         return tempnode;
1659 }
1660
1661 /**
1662  *  @brief This function cleans command node.
1663  *
1664  *  @param ptempnode    A pointer to cmdCtrlNode structure
1665  *  @return             n/a
1666  */
1667 static void cleanup_cmdnode(struct cmd_ctrl_node *ptempnode)
1668 {
1669         lbs_deb_enter(LBS_DEB_HOST);
1670
1671         if (!ptempnode)
1672                 return;
1673         ptempnode->cmdwaitqwoken = 1;
1674         wake_up_interruptible(&ptempnode->cmdwait_q);
1675         ptempnode->wait_option = 0;
1676         ptempnode->pdata_buf = NULL;
1677         ptempnode->pdata_size = 0;
1678
1679         if (ptempnode->bufvirtualaddr != NULL)
1680                 memset(ptempnode->bufvirtualaddr, 0, MRVDRV_SIZE_OF_CMD_BUFFER);
1681
1682         lbs_deb_leave(LBS_DEB_HOST);
1683 }
1684
1685 /**
1686  *  @brief This function initializes the command node.
1687  *
1688  *  @param priv         A pointer to struct lbs_private structure
1689  *  @param ptempnode    A pointer to cmd_ctrl_node structure
1690  *  @param wait_option  wait option: wait response or not
1691  *  @param pdata_buf    A pointer to informaion buffer
1692  *  @return             0 or -1
1693  */
1694 void lbs_set_cmd_ctrl_node(struct lbs_private *priv,
1695                     struct cmd_ctrl_node *ptempnode,
1696                     u16 wait_option, void *pdata_buf)
1697 {
1698         lbs_deb_enter(LBS_DEB_HOST);
1699
1700         if (!ptempnode)
1701                 return;
1702
1703         ptempnode->wait_option = wait_option;
1704         ptempnode->pdata_buf = pdata_buf;
1705         ptempnode->pdata_size = 0;
1706
1707         lbs_deb_leave(LBS_DEB_HOST);
1708 }
1709
1710 /**
1711  *  @brief This function executes next command in command
1712  *  pending queue. It will put fimware back to PS mode
1713  *  if applicable.
1714  *
1715  *  @param priv     A pointer to struct lbs_private structure
1716  *  @return        0 or -1
1717  */
1718 int lbs_execute_next_command(struct lbs_private *priv)
1719 {
1720         struct lbs_adapter *adapter = priv->adapter;
1721         struct cmd_ctrl_node *cmdnode = NULL;
1722         struct cmd_ds_command *cmdptr;
1723         unsigned long flags;
1724         int ret = 0;
1725
1726         // Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1727         // only caller to us is lbs_thread() and we get even when a
1728         // data packet is received
1729         lbs_deb_enter(LBS_DEB_THREAD);
1730
1731         spin_lock_irqsave(&adapter->driver_lock, flags);
1732
1733         if (adapter->cur_cmd) {
1734                 lbs_pr_alert( "EXEC_NEXT_CMD: already processing command!\n");
1735                 spin_unlock_irqrestore(&adapter->driver_lock, flags);
1736                 ret = -1;
1737                 goto done;
1738         }
1739
1740         if (!list_empty(&adapter->cmdpendingq)) {
1741                 cmdnode = list_first_entry(&adapter->cmdpendingq,
1742                                            struct cmd_ctrl_node, list);
1743         }
1744
1745         spin_unlock_irqrestore(&adapter->driver_lock, flags);
1746
1747         if (cmdnode) {
1748                 cmdptr = (struct cmd_ds_command *)cmdnode->bufvirtualaddr;
1749
1750                 if (is_command_allowed_in_ps(cmdptr->command)) {
1751                         if ((adapter->psstate == PS_STATE_SLEEP) ||
1752                             (adapter->psstate == PS_STATE_PRE_SLEEP)) {
1753                                 lbs_deb_host(
1754                                        "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1755                                        le16_to_cpu(cmdptr->command),
1756                                        adapter->psstate);
1757                                 ret = -1;
1758                                 goto done;
1759                         }
1760                         lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1761                                "0x%04x in psstate %d\n",
1762                                     le16_to_cpu(cmdptr->command),
1763                                     adapter->psstate);
1764                 } else if (adapter->psstate != PS_STATE_FULL_POWER) {
1765                         /*
1766                          * 1. Non-PS command:
1767                          * Queue it. set needtowakeup to TRUE if current state
1768                          * is SLEEP, otherwise call lbs_ps_wakeup to send Exit_PS.
1769                          * 2. PS command but not Exit_PS:
1770                          * Ignore it.
1771                          * 3. PS command Exit_PS:
1772                          * Set needtowakeup to TRUE if current state is SLEEP,
1773                          * otherwise send this command down to firmware
1774                          * immediately.
1775                          */
1776                         if (cmdptr->command !=
1777                             cpu_to_le16(CMD_802_11_PS_MODE)) {
1778                                 /*  Prepare to send Exit PS,
1779                                  *  this non PS command will be sent later */
1780                                 if ((adapter->psstate == PS_STATE_SLEEP)
1781                                     || (adapter->psstate == PS_STATE_PRE_SLEEP)
1782                                     ) {
1783                                         /* w/ new scheme, it will not reach here.
1784                                            since it is blocked in main_thread. */
1785                                         adapter->needtowakeup = 1;
1786                                 } else
1787                                         lbs_ps_wakeup(priv, 0);
1788
1789                                 ret = 0;
1790                                 goto done;
1791                         } else {
1792                                 /*
1793                                  * PS command. Ignore it if it is not Exit_PS.
1794                                  * otherwise send it down immediately.
1795                                  */
1796                                 struct cmd_ds_802_11_ps_mode *psm =
1797                                     &cmdptr->params.psmode;
1798
1799                                 lbs_deb_host(
1800                                        "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1801                                        psm->action);
1802                                 if (psm->action !=
1803                                     cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1804                                         lbs_deb_host(
1805                                                "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1806                                         list_del(&cmdnode->list);
1807                                         lbs_cleanup_and_insert_cmd(priv, cmdnode);
1808
1809                                         ret = 0;
1810                                         goto done;
1811                                 }
1812
1813                                 if ((adapter->psstate == PS_STATE_SLEEP) ||
1814                                     (adapter->psstate == PS_STATE_PRE_SLEEP)) {
1815                                         lbs_deb_host(
1816                                                "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1817                                         list_del(&cmdnode->list);
1818                                         lbs_cleanup_and_insert_cmd(priv, cmdnode);
1819                                         adapter->needtowakeup = 1;
1820
1821                                         ret = 0;
1822                                         goto done;
1823                                 }
1824
1825                                 lbs_deb_host(
1826                                        "EXEC_NEXT_CMD: sending EXIT_PS\n");
1827                         }
1828                 }
1829                 list_del(&cmdnode->list);
1830                 lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1831                             le16_to_cpu(cmdptr->command));
1832                 DownloadcommandToStation(priv, cmdnode);
1833         } else {
1834                 /*
1835                  * check if in power save mode, if yes, put the device back
1836                  * to PS mode
1837                  */
1838                 if ((adapter->psmode != LBS802_11POWERMODECAM) &&
1839                     (adapter->psstate == PS_STATE_FULL_POWER) &&
1840                     ((adapter->connect_status == LBS_CONNECTED) ||
1841                     (adapter->mesh_connect_status == LBS_CONNECTED))) {
1842                         if (adapter->secinfo.WPAenabled ||
1843                             adapter->secinfo.WPA2enabled) {
1844                                 /* check for valid WPA group keys */
1845                                 if (adapter->wpa_mcast_key.len ||
1846                                     adapter->wpa_unicast_key.len) {
1847                                         lbs_deb_host(
1848                                                "EXEC_NEXT_CMD: WPA enabled and GTK_SET"
1849                                                " go back to PS_SLEEP");
1850                                         lbs_ps_sleep(priv, 0);
1851                                 }
1852                         } else {
1853                                 lbs_deb_host(
1854                                        "EXEC_NEXT_CMD: cmdpendingq empty, "
1855                                        "go back to PS_SLEEP");
1856                                 lbs_ps_sleep(priv, 0);
1857                         }
1858                 }
1859         }
1860
1861         ret = 0;
1862 done:
1863         lbs_deb_leave(LBS_DEB_THREAD);
1864         return ret;
1865 }
1866
1867 void lbs_send_iwevcustom_event(struct lbs_private *priv, s8 *str)
1868 {
1869         union iwreq_data iwrq;
1870         u8 buf[50];
1871
1872         lbs_deb_enter(LBS_DEB_WEXT);
1873
1874         memset(&iwrq, 0, sizeof(union iwreq_data));
1875         memset(buf, 0, sizeof(buf));
1876
1877         snprintf(buf, sizeof(buf) - 1, "%s", str);
1878
1879         iwrq.data.length = strlen(buf) + 1 + IW_EV_LCP_LEN;
1880
1881         /* Send Event to upper layer */
1882         lbs_deb_wext("event indication string %s\n", (char *)buf);
1883         lbs_deb_wext("event indication length %d\n", iwrq.data.length);
1884         lbs_deb_wext("sending wireless event IWEVCUSTOM for %s\n", str);
1885
1886         wireless_send_event(priv->dev, IWEVCUSTOM, &iwrq, buf);
1887
1888         lbs_deb_leave(LBS_DEB_WEXT);
1889 }
1890
1891 static int sendconfirmsleep(struct lbs_private *priv, u8 *cmdptr, u16 size)
1892 {
1893         unsigned long flags;
1894         struct lbs_adapter *adapter = priv->adapter;
1895         int ret = 0;
1896
1897         lbs_deb_enter(LBS_DEB_HOST);
1898
1899         lbs_deb_host("SEND_SLEEPC_CMD: before download, cmd size %d\n",
1900                size);
1901
1902         lbs_deb_hex(LBS_DEB_HOST, "sleep confirm command", cmdptr, size);
1903
1904         ret = priv->hw_host_to_card(priv, MVMS_CMD, cmdptr, size);
1905         priv->dnld_sent = DNLD_RES_RECEIVED;
1906
1907         spin_lock_irqsave(&adapter->driver_lock, flags);
1908         if (adapter->intcounter || adapter->currenttxskb)
1909                 lbs_deb_host("SEND_SLEEPC_CMD: intcounter %d, currenttxskb %p\n",
1910                        adapter->intcounter, adapter->currenttxskb);
1911         spin_unlock_irqrestore(&adapter->driver_lock, flags);
1912
1913         if (ret) {
1914                 lbs_pr_alert(
1915                        "SEND_SLEEPC_CMD: Host to Card failed for Confirm Sleep\n");
1916         } else {
1917                 spin_lock_irqsave(&adapter->driver_lock, flags);
1918                 if (!adapter->intcounter) {
1919                         adapter->psstate = PS_STATE_SLEEP;
1920                 } else {
1921                         lbs_deb_host("SEND_SLEEPC_CMD: after sent, intcounter %d\n",
1922                                adapter->intcounter);
1923                 }
1924                 spin_unlock_irqrestore(&adapter->driver_lock, flags);
1925
1926                 lbs_deb_host("SEND_SLEEPC_CMD: sent confirm sleep\n");
1927         }
1928
1929         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1930         return ret;
1931 }
1932
1933 void lbs_ps_sleep(struct lbs_private *priv, int wait_option)
1934 {
1935         lbs_deb_enter(LBS_DEB_HOST);
1936
1937         /*
1938          * PS is currently supported only in Infrastructure mode
1939          * Remove this check if it is to be supported in IBSS mode also
1940          */
1941
1942         lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1943                               CMD_SUBCMD_ENTER_PS, wait_option, 0, NULL);
1944
1945         lbs_deb_leave(LBS_DEB_HOST);
1946 }
1947
1948 /**
1949  *  @brief This function sends Exit_PS command to firmware.
1950  *
1951  *  @param priv         A pointer to struct lbs_private structure
1952  *  @param wait_option  wait response or not
1953  *  @return             n/a
1954  */
1955 void lbs_ps_wakeup(struct lbs_private *priv, int wait_option)
1956 {
1957         __le32 Localpsmode;
1958
1959         lbs_deb_enter(LBS_DEB_HOST);
1960
1961         Localpsmode = cpu_to_le32(LBS802_11POWERMODECAM);
1962
1963         lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1964                               CMD_SUBCMD_EXIT_PS,
1965                               wait_option, 0, &Localpsmode);
1966
1967         lbs_deb_leave(LBS_DEB_HOST);
1968 }
1969
1970 /**
1971  *  @brief This function checks condition and prepares to
1972  *  send sleep confirm command to firmware if ok.
1973  *
1974  *  @param priv         A pointer to struct lbs_private structure
1975  *  @param psmode       Power Saving mode
1976  *  @return             n/a
1977  */
1978 void lbs_ps_confirm_sleep(struct lbs_private *priv, u16 psmode)
1979 {
1980         unsigned long flags =0;
1981         struct lbs_adapter *adapter = priv->adapter;
1982         u8 allowed = 1;
1983
1984         lbs_deb_enter(LBS_DEB_HOST);
1985
1986         if (priv->dnld_sent) {
1987                 allowed = 0;
1988                 lbs_deb_host("dnld_sent was set");
1989         }
1990
1991         spin_lock_irqsave(&adapter->driver_lock, flags);
1992         if (adapter->cur_cmd) {
1993                 allowed = 0;
1994                 lbs_deb_host("cur_cmd was set");
1995         }
1996         if (adapter->intcounter > 0) {
1997                 allowed = 0;
1998                 lbs_deb_host("intcounter %d", adapter->intcounter);
1999         }
2000         spin_unlock_irqrestore(&adapter->driver_lock, flags);
2001
2002         if (allowed) {
2003                 lbs_deb_host("sending lbs_ps_confirm_sleep\n");
2004                 sendconfirmsleep(priv, (u8 *) & adapter->lbs_ps_confirm_sleep,
2005                                  sizeof(struct PS_CMD_ConfirmSleep));
2006         } else {
2007                 lbs_deb_host("sleep confirm has been delayed\n");
2008         }
2009
2010         lbs_deb_leave(LBS_DEB_HOST);
2011 }
2012
2013
2014 /**
2015  *  @brief Simple way to call firmware functions
2016  *
2017  *  @param priv         A pointer to struct lbs_private structure
2018  *  @param psmode       one of the many CMD_802_11_xxxx
2019  *  @param cmd          pointer to the parameters structure for above command
2020  *                      (this should not include the command, size, sequence
2021  *                      and result fields from struct cmd_ds_gen)
2022  *  @param cmd_size     size structure pointed to by cmd
2023  *  @param rsp          pointer to an area where the result should be placed
2024  *  @param rsp_size     pointer to the size of the rsp area. If the firmware
2025  *                      returns fewer bytes, then this *rsp_size will be
2026  *                      changed to the actual size.
2027  *  @return             -1 in case of a higher level error, otherwise
2028  *                      the result code from the firmware
2029  */
2030 int lbs_cmd(struct lbs_private *priv,
2031         u16 command,
2032         void *cmd, int cmd_size,
2033         void *rsp, int *rsp_size)
2034 {
2035         struct lbs_adapter *adapter = priv->adapter;
2036         struct cmd_ctrl_node *cmdnode;
2037         struct cmd_ds_gen *cmdptr;
2038         unsigned long flags;
2039         int ret = 0;
2040
2041         lbs_deb_enter(LBS_DEB_HOST);
2042         lbs_deb_host("rsp at %p, rsp_size at %p\n", rsp, rsp_size);
2043
2044         if (!adapter || !rsp_size) {
2045                 lbs_deb_host("PREP_CMD: adapter is NULL\n");
2046                 ret = -1;
2047                 goto done;
2048         }
2049
2050         if (adapter->surpriseremoved) {
2051                 lbs_deb_host("PREP_CMD: card removed\n");
2052                 ret = -1;
2053                 goto done;
2054         }
2055
2056         cmdnode = lbs_get_cmd_ctrl_node(priv);
2057
2058         if (cmdnode == NULL) {
2059                 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
2060
2061                 /* Wake up main thread to execute next command */
2062                 wake_up_interruptible(&priv->waitq);
2063                 ret = -1;
2064                 goto done;
2065         }
2066
2067         cmdptr = (struct cmd_ds_gen *)cmdnode->bufvirtualaddr;
2068         cmdnode->wait_option = CMD_OPTION_WAITFORRSP;
2069         cmdnode->pdata_buf = rsp;
2070         cmdnode->pdata_size = rsp_size;
2071
2072         /* Set sequence number, clean result, move to buffer */
2073         adapter->seqnum++;
2074         cmdptr->command = cpu_to_le16(command);
2075         cmdptr->size    = cpu_to_le16(cmd_size + S_DS_GEN);
2076         cmdptr->seqnum = cpu_to_le16(adapter->seqnum);
2077         cmdptr->result = 0;
2078         memcpy(cmdptr->cmdresp, cmd, cmd_size);
2079
2080         lbs_deb_host("PREP_CMD: command 0x%04x\n", command);
2081
2082         /* here was the big old switch() statement, which is now obsolete,
2083          * because the caller of lbs_cmd() sets up all of *cmd for us. */
2084
2085         cmdnode->cmdwaitqwoken = 0;
2086         lbs_queue_cmd(adapter, cmdnode, 1);
2087         wake_up_interruptible(&priv->waitq);
2088
2089         might_sleep();
2090         wait_event_interruptible(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);
2091
2092         spin_lock_irqsave(&adapter->driver_lock, flags);
2093         if (adapter->cur_cmd_retcode) {
2094                 lbs_deb_host("PREP_CMD: command failed with return code %d\n",
2095                        adapter->cur_cmd_retcode);
2096                 adapter->cur_cmd_retcode = 0;
2097                 ret = -1;
2098         }
2099         spin_unlock_irqrestore(&adapter->driver_lock, flags);
2100
2101 done:
2102         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
2103         return ret;
2104 }
2105 EXPORT_SYMBOL_GPL(lbs_cmd);
2106
2107