drivers/net/wireless/iwlwifi/iwl-agn.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2003 - 2011 Intel Corporation. All rights reserved.
   4  *
   5  * Portions of this file are derived from the ipw3945 project, as well
   6  * as portions of the ieee80211 subsystem header files.
   7  *
   8  * This program is free software; you can redistribute it and/or modify it
   9  * under the terms of version 2 of the GNU General Public License as
  10  * published by the Free Software Foundation.
  11  *
  12  * This program is distributed in the hope that it will be useful, but WITHOUT
  13  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  14  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  15  * more details.
  16  *
  17  * You should have received a copy of the GNU General Public License along with
  18  * this program; if not, write to the Free Software Foundation, Inc.,
  19  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  20  *
  21  * The full GNU General Public License is included in this distribution in the
  22  * file called LICENSE.
  23  *
  24  * Contact Information:
  25  *  Intel Linux Wireless <ilw@linux.intel.com>
  26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  27  *
  28  *****************************************************************************/
  29 #include <linux/kernel.h>
  30 #include <linux/module.h>
  31 #include <linux/init.h>
  32 #include <linux/slab.h>
  33 #include <linux/dma-mapping.h>
  34 #include <linux/delay.h>
  35 #include <linux/sched.h>
  36 #include <linux/skbuff.h>
  37 #include <linux/netdevice.h>
  38 #include <linux/firmware.h>
  39 #include <linux/etherdevice.h>
  40 #include <linux/if_arp.h>
  41
  42 #include <net/mac80211.h>
  43
  44 #include <asm/div64.h>
  45
  46 #include "iwl-eeprom.h"
  47 #include "iwl-dev.h"
  48 #include "iwl-core.h"
  49 #include "iwl-io.h"
  50 #include "iwl-agn-calib.h"
  51 #include "iwl-agn.h"
  52 #include "iwl-shared.h"
  53 #include "iwl-bus.h"
  54 #include "iwl-trans.h"
  55
  56 /******************************************************************************
  57  *
  58  * module boiler plate
  59  *
  60  ******************************************************************************/
  61
  62 /*
  63  * module name, copyright, version, etc.
  64  */
  65 #define DRV_DESCRIPTION "Intel(R) Wireless WiFi Link AGN driver for Linux"
  66
  67 #ifdef CONFIG_IWLWIFI_DEBUG
  68 #define VD "d"
  69 #else
  70 #define VD
  71 #endif
  72
  73 #define DRV_VERSION     IWLWIFI_VERSION VD
  74
  75
  76 MODULE_DESCRIPTION(DRV_DESCRIPTION);
  77 MODULE_VERSION(DRV_VERSION);
  78 MODULE_AUTHOR(DRV_COPYRIGHT " " DRV_AUTHOR);
  79 MODULE_LICENSE("GPL");
  80 MODULE_ALIAS("iwlagn");
  81
  82 void iwl_update_chain_flags(struct iwl_priv *priv)
  83 {
  84         struct iwl_rxon_context *ctx;
  85
  86         for_each_context(priv, ctx) {
  87                 iwlagn_set_rxon_chain(priv, ctx);
  88                 if (ctx->active.rx_chain != ctx->staging.rx_chain)
  89                         iwlagn_commit_rxon(priv, ctx);
  90         }
  91 }
  92
  93 /* Parse the beacon frame to find the TIM element and set tim_idx & tim_size */
  94 static void iwl_set_beacon_tim(struct iwl_priv *priv,
  95                                struct iwl_tx_beacon_cmd *tx_beacon_cmd,
  96                                u8 *beacon, u32 frame_size)
  97 {
  98         u16 tim_idx;
  99         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)beacon;
 100
 101         /*
 102          * The index is relative to frame start but we start looking at the
 103          * variable-length part of the beacon.
 104          */
 105         tim_idx = mgmt->u.beacon.variable - beacon;
 106
 107         /* Parse variable-length elements of beacon to find WLAN_EID_TIM */
 108         while ((tim_idx < (frame_size - 2)) &&
 109                         (beacon[tim_idx] != WLAN_EID_TIM))
 110                 tim_idx += beacon[tim_idx+1] + 2;
 111
 112         /* If TIM field was found, set variables */
 113         if ((tim_idx < (frame_size - 1)) && (beacon[tim_idx] == WLAN_EID_TIM)) {
 114                 tx_beacon_cmd->tim_idx = cpu_to_le16(tim_idx);
 115                 tx_beacon_cmd->tim_size = beacon[tim_idx+1];
 116         } else
 117                 IWL_WARN(priv, "Unable to find TIM Element in beacon\n");
 118 }
 119
 120 int iwlagn_send_beacon_cmd(struct iwl_priv *priv)
 121 {
 122         struct iwl_tx_beacon_cmd *tx_beacon_cmd;
 123         struct iwl_host_cmd cmd = {
 124                 .id = REPLY_TX_BEACON,
 125                 .flags = CMD_SYNC,
 126         };
 127         struct ieee80211_tx_info *info;
 128         u32 frame_size;
 129         u32 rate_flags;
 130         u32 rate;
 131
 132         /*
 133          * We have to set up the TX command, the TX Beacon command, and the
 134          * beacon contents.
 135          */
 136
 137         lockdep_assert_held(&priv->shrd->mutex);
 138
 139         if (!priv->beacon_ctx) {
 140                 IWL_ERR(priv, "trying to build beacon w/o beacon context!\n");
 141                 return 0;
 142         }
 143
 144         if (WARN_ON(!priv->beacon_skb))
 145                 return -EINVAL;
 146
 147         /* Allocate beacon command */
 148         if (!priv->beacon_cmd)
 149                 priv->beacon_cmd = kzalloc(sizeof(*tx_beacon_cmd), GFP_KERNEL);
 150         tx_beacon_cmd = priv->beacon_cmd;
 151         if (!tx_beacon_cmd)
 152                 return -ENOMEM;
 153
 154         frame_size = priv->beacon_skb->len;
 155
 156         /* Set up TX command fields */
 157         tx_beacon_cmd->tx.len = cpu_to_le16((u16)frame_size);
 158         tx_beacon_cmd->tx.sta_id = priv->beacon_ctx->bcast_sta_id;
 159         tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
 160         tx_beacon_cmd->tx.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK |
 161                 TX_CMD_FLG_TSF_MSK | TX_CMD_FLG_STA_RATE_MSK;
 162
 163         /* Set up TX beacon command fields */
 164         iwl_set_beacon_tim(priv, tx_beacon_cmd, priv->beacon_skb->data,
 165                            frame_size);
 166
 167         /* Set up packet rate and flags */
 168         info = IEEE80211_SKB_CB(priv->beacon_skb);
 169
 170         /*
 171          * Let's set up the rate at least somewhat correctly;
 172          * it will currently not actually be used by the uCode,
 173          * it uses the broadcast station's rate instead.
 174          */
 175         if (info->control.rates[0].idx < 0 ||
 176             info->control.rates[0].flags & IEEE80211_TX_RC_MCS)
 177                 rate = 0;
 178         else
 179                 rate = info->control.rates[0].idx;
 180
 181         priv->mgmt_tx_ant = iwl_toggle_tx_ant(priv, priv->mgmt_tx_ant,
 182                                               hw_params(priv).valid_tx_ant);
 183         rate_flags = iwl_ant_idx_to_flags(priv->mgmt_tx_ant);
 184
 185         /* In mac80211, rates for 5 GHz start at 0 */
 186         if (info->band == IEEE80211_BAND_5GHZ)
 187                 rate += IWL_FIRST_OFDM_RATE;
 188         else if (rate >= IWL_FIRST_CCK_RATE && rate <= IWL_LAST_CCK_RATE)
 189                 rate_flags |= RATE_MCS_CCK_MSK;
 190
 191         tx_beacon_cmd->tx.rate_n_flags =
 192                         iwl_hw_set_rate_n_flags(rate, rate_flags);
 193
 194         /* Submit command */
 195         cmd.len[0] = sizeof(*tx_beacon_cmd);
 196         cmd.data[0] = tx_beacon_cmd;
 197         cmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY;
 198         cmd.len[1] = frame_size;
 199         cmd.data[1] = priv->beacon_skb->data;
 200         cmd.dataflags[1] = IWL_HCMD_DFL_NOCOPY;
 201
 202         return iwl_trans_send_cmd(trans(priv), &cmd);
 203 }
 204
 205 static void iwl_bg_beacon_update(struct work_struct *work)
 206 {
 207         struct iwl_priv *priv =
 208                 container_of(work, struct iwl_priv, beacon_update);
 209         struct sk_buff *beacon;
 210
 211         mutex_lock(&priv->shrd->mutex);
 212         if (!priv->beacon_ctx) {
 213                 IWL_ERR(priv, "updating beacon w/o beacon context!\n");
 214                 goto out;
 215         }
 216
 217         if (priv->beacon_ctx->vif->type != NL80211_IFTYPE_AP) {
 218                 /*
 219                  * The ucode will send beacon notifications even in
 220                  * IBSS mode, but we don't want to process them. But
 221                  * we need to defer the type check to here due to
 222                  * requiring locking around the beacon_ctx access.
 223                  */
 224                 goto out;
 225         }
 226
 227         /* Pull updated AP beacon from mac80211. will fail if not in AP mode */
 228         beacon = ieee80211_beacon_get(priv->hw, priv->beacon_ctx->vif);
 229         if (!beacon) {
 230                 IWL_ERR(priv, "update beacon failed -- keeping old\n");
 231                 goto out;
 232         }
 233
 234         /* new beacon skb is allocated every time; dispose previous.*/
 235         dev_kfree_skb(priv->beacon_skb);
 236
 237         priv->beacon_skb = beacon;
 238
 239         iwlagn_send_beacon_cmd(priv);
 240  out:
 241         mutex_unlock(&priv->shrd->mutex);
 242 }
 243
 244 static void iwl_bg_bt_runtime_config(struct work_struct *work)
 245 {
 246         struct iwl_priv *priv =
 247                 container_of(work, struct iwl_priv, bt_runtime_config);
 248
 249         mutex_lock(&priv->shrd->mutex);
 250         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 251                 goto out;
 252
 253         /* dont send host command if rf-kill is on */
 254         if (!iwl_is_ready_rf(priv->shrd))
 255                 goto out;
 256
 257         iwlagn_send_advance_bt_config(priv);
 258 out:
 259         mutex_unlock(&priv->shrd->mutex);
 260 }
 261
 262 static void iwl_bg_bt_full_concurrency(struct work_struct *work)
 263 {
 264         struct iwl_priv *priv =
 265                 container_of(work, struct iwl_priv, bt_full_concurrency);
 266         struct iwl_rxon_context *ctx;
 267
 268         mutex_lock(&priv->shrd->mutex);
 269
 270         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 271                 goto out;
 272
 273         /* dont send host command if rf-kill is on */
 274         if (!iwl_is_ready_rf(priv->shrd))
 275                 goto out;
 276
 277         IWL_DEBUG_INFO(priv, "BT coex in %s mode\n",
 278                        priv->bt_full_concurrent ?
 279                        "full concurrency" : "3-wire");
 280
 281         /*
 282          * LQ & RXON updated cmds must be sent before BT Config cmd
 283          * to avoid 3-wire collisions
 284          */
 285         for_each_context(priv, ctx) {
 286                 iwlagn_set_rxon_chain(priv, ctx);
 287                 iwlagn_commit_rxon(priv, ctx);
 288         }
 289
 290         iwlagn_send_advance_bt_config(priv);
 291 out:
 292         mutex_unlock(&priv->shrd->mutex);
 293 }
 294
 295 /**
 296  * iwl_bg_statistics_periodic - Timer callback to queue statistics
 297  *
 298  * This callback is provided in order to send a statistics request.
 299  *
 300  * This timer function is continually reset to execute within
 301  * REG_RECALIB_PERIOD seconds since the last STATISTICS_NOTIFICATION
 302  * was received.  We need to ensure we receive the statistics in order
 303  * to update the temperature used for calibrating the TXPOWER.
 304  */
 305 static void iwl_bg_statistics_periodic(unsigned long data)
 306 {
 307         struct iwl_priv *priv = (struct iwl_priv *)data;
 308
 309         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 310                 return;
 311
 312         /* dont send host command if rf-kill is on */
 313         if (!iwl_is_ready_rf(priv->shrd))
 314                 return;
 315
 316         iwl_send_statistics_request(priv, CMD_ASYNC, false);
 317 }
 318
 319
 320 static void iwl_print_cont_event_trace(struct iwl_priv *priv, u32 base,
 321                                         u32 start_idx, u32 num_events,
 322                                         u32 mode)
 323 {
 324         u32 i;
 325         u32 ptr;        /* SRAM byte address of log data */
 326         u32 ev, time, data; /* event log data */
 327         unsigned long reg_flags;
 328
 329         if (mode == 0)
 330                 ptr = base + (4 * sizeof(u32)) + (start_idx * 2 * sizeof(u32));
 331         else
 332                 ptr = base + (4 * sizeof(u32)) + (start_idx * 3 * sizeof(u32));
 333
 334         /* Make sure device is powered up for SRAM reads */
 335         spin_lock_irqsave(&bus(priv)->reg_lock, reg_flags);
 336         if (iwl_grab_nic_access(bus(priv))) {
 337                 spin_unlock_irqrestore(&bus(priv)->reg_lock, reg_flags);
 338                 return;
 339         }
 340
 341         /* Set starting address; reads will auto-increment */
 342         iwl_write32(bus(priv), HBUS_TARG_MEM_RADDR, ptr);
 343         rmb();
 344
 345         /*
 346          * "time" is actually "data" for mode 0 (no timestamp).
 347          * place event id # at far right for easier visual parsing.
 348          */
 349         for (i = 0; i < num_events; i++) {
 350                 ev = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 351                 time = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 352                 if (mode == 0) {
 353                         trace_iwlwifi_dev_ucode_cont_event(priv,
 354                                                         0, time, ev);
 355                 } else {
 356                         data = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 357                         trace_iwlwifi_dev_ucode_cont_event(priv,
 358                                                 time, data, ev);
 359                 }
 360         }
 361         /* Allow device to power down */
 362         iwl_release_nic_access(bus(priv));
 363         spin_unlock_irqrestore(&bus(priv)->reg_lock, reg_flags);
 364 }
 365
 366 static void iwl_continuous_event_trace(struct iwl_priv *priv)
 367 {
 368         u32 capacity;   /* event log capacity in # entries */
 369         u32 base;       /* SRAM byte address of event log header */
 370         u32 mode;       /* 0 - no timestamp, 1 - timestamp recorded */
 371         u32 num_wraps;  /* # times uCode wrapped to top of log */
 372         u32 next_entry; /* index of next entry to be written by uCode */
 373
 374         base = priv->device_pointers.error_event_table;
 375         if (iwlagn_hw_valid_rtc_data_addr(base)) {
 376                 capacity = iwl_read_targ_mem(bus(priv), base);
 377                 num_wraps = iwl_read_targ_mem(bus(priv),
 378                                                 base + (2 * sizeof(u32)));
 379                 mode = iwl_read_targ_mem(bus(priv), base + (1 * sizeof(u32)));
 380                 next_entry = iwl_read_targ_mem(bus(priv),
 381                                                 base + (3 * sizeof(u32)));
 382         } else
 383                 return;
 384
 385         if (num_wraps == priv->event_log.num_wraps) {
 386                 iwl_print_cont_event_trace(priv,
 387                                        base, priv->event_log.next_entry,
 388                                        next_entry - priv->event_log.next_entry,
 389                                        mode);
 390                 priv->event_log.non_wraps_count++;
 391         } else {
 392                 if ((num_wraps - priv->event_log.num_wraps) > 1)
 393                         priv->event_log.wraps_more_count++;
 394                 else
 395                         priv->event_log.wraps_once_count++;
 396                 trace_iwlwifi_dev_ucode_wrap_event(priv,
 397                                 num_wraps - priv->event_log.num_wraps,
 398                                 next_entry, priv->event_log.next_entry);
 399                 if (next_entry < priv->event_log.next_entry) {
 400                         iwl_print_cont_event_trace(priv, base,
 401                                priv->event_log.next_entry,
 402                                capacity - priv->event_log.next_entry,
 403                                mode);
 404
 405                         iwl_print_cont_event_trace(priv, base, 0,
 406                                 next_entry, mode);
 407                 } else {
 408                         iwl_print_cont_event_trace(priv, base,
 409                                next_entry, capacity - next_entry,
 410                                mode);
 411
 412                         iwl_print_cont_event_trace(priv, base, 0,
 413                                 next_entry, mode);
 414                 }
 415         }
 416         priv->event_log.num_wraps = num_wraps;
 417         priv->event_log.next_entry = next_entry;
 418 }
 419
 420 /**
 421  * iwl_bg_ucode_trace - Timer callback to log ucode event
 422  *
 423  * The timer is continually set to execute every
 424  * UCODE_TRACE_PERIOD milliseconds after the last timer expired
 425  * this function is to perform continuous uCode event logging operation
 426  * if enabled
 427  */
 428 static void iwl_bg_ucode_trace(unsigned long data)
 429 {
 430         struct iwl_priv *priv = (struct iwl_priv *)data;
 431
 432         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 433                 return;
 434
 435         if (priv->event_log.ucode_trace) {
 436                 iwl_continuous_event_trace(priv);
 437                 /* Reschedule the timer to occur in UCODE_TRACE_PERIOD */
 438                 mod_timer(&priv->ucode_trace,
 439                          jiffies + msecs_to_jiffies(UCODE_TRACE_PERIOD));
 440         }
 441 }
 442
 443 static void iwl_bg_tx_flush(struct work_struct *work)
 444 {
 445         struct iwl_priv *priv =
 446                 container_of(work, struct iwl_priv, tx_flush);
 447
 448         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 449                 return;
 450
 451         /* do nothing if rf-kill is on */
 452         if (!iwl_is_ready_rf(priv->shrd))
 453                 return;
 454
 455         IWL_DEBUG_INFO(priv, "device request: flush all tx frames\n");
 456         iwlagn_dev_txfifo_flush(priv, IWL_DROP_ALL);
 457 }
 458
 459 /******************************************************************************
 460  *
 461  * uCode download functions
 462  *
 463  ******************************************************************************/
 464
 465 static void iwl_free_fw_desc(struct iwl_priv *priv, struct fw_desc *desc)
 466 {
 467         if (desc->v_addr)
 468                 dma_free_coherent(bus(priv)->dev, desc->len,
 469                                   desc->v_addr, desc->p_addr);
 470         desc->v_addr = NULL;
 471         desc->len = 0;
 472 }
 473
 474 static void iwl_free_fw_img(struct iwl_priv *priv, struct fw_img *img)
 475 {
 476         iwl_free_fw_desc(priv, &img->code);
 477         iwl_free_fw_desc(priv, &img->data);
 478 }
 479
 480 static void iwl_dealloc_ucode(struct iwl_priv *priv)
 481 {
 482         iwl_free_fw_img(priv, &priv->ucode_rt);
 483         iwl_free_fw_img(priv, &priv->ucode_init);
 484         iwl_free_fw_img(priv, &priv->ucode_wowlan);
 485 }
 486
 487 static int iwl_alloc_fw_desc(struct iwl_priv *priv, struct fw_desc *desc,
 488                              const void *data, size_t len)
 489 {
 490         if (!len) {
 491                 desc->v_addr = NULL;
 492                 return -EINVAL;
 493         }
 494
 495         desc->v_addr = dma_alloc_coherent(bus(priv)->dev, len,
 496                                           &desc->p_addr, GFP_KERNEL);
 497         if (!desc->v_addr)
 498                 return -ENOMEM;
 499
 500         desc->len = len;
 501         memcpy(desc->v_addr, data, len);
 502         return 0;
 503 }
 504
 505 static void iwl_init_context(struct iwl_priv *priv, u32 ucode_flags)
 506 {
 507         int i;
 508
 509         /*
 510          * The default context is always valid,
 511          * the PAN context depends on uCode.
 512          */
 513         priv->shrd->valid_contexts = BIT(IWL_RXON_CTX_BSS);
 514         if (ucode_flags & IWL_UCODE_TLV_FLAGS_PAN)
 515                 priv->shrd->valid_contexts |= BIT(IWL_RXON_CTX_PAN);
 516
 517         for (i = 0; i < NUM_IWL_RXON_CTX; i++)
 518                 priv->contexts[i].ctxid = i;
 519
 520         priv->contexts[IWL_RXON_CTX_BSS].always_active = true;
 521         priv->contexts[IWL_RXON_CTX_BSS].is_active = true;
 522         priv->contexts[IWL_RXON_CTX_BSS].rxon_cmd = REPLY_RXON;
 523         priv->contexts[IWL_RXON_CTX_BSS].rxon_timing_cmd = REPLY_RXON_TIMING;
 524         priv->contexts[IWL_RXON_CTX_BSS].rxon_assoc_cmd = REPLY_RXON_ASSOC;
 525         priv->contexts[IWL_RXON_CTX_BSS].qos_cmd = REPLY_QOS_PARAM;
 526         priv->contexts[IWL_RXON_CTX_BSS].ap_sta_id = IWL_AP_ID;
 527         priv->contexts[IWL_RXON_CTX_BSS].wep_key_cmd = REPLY_WEPKEY;
 528         priv->contexts[IWL_RXON_CTX_BSS].exclusive_interface_modes =
 529                 BIT(NL80211_IFTYPE_ADHOC);
 530         priv->contexts[IWL_RXON_CTX_BSS].interface_modes =
 531                 BIT(NL80211_IFTYPE_STATION);
 532         priv->contexts[IWL_RXON_CTX_BSS].ap_devtype = RXON_DEV_TYPE_AP;
 533         priv->contexts[IWL_RXON_CTX_BSS].ibss_devtype = RXON_DEV_TYPE_IBSS;
 534         priv->contexts[IWL_RXON_CTX_BSS].station_devtype = RXON_DEV_TYPE_ESS;
 535         priv->contexts[IWL_RXON_CTX_BSS].unused_devtype = RXON_DEV_TYPE_ESS;
 536
 537         priv->contexts[IWL_RXON_CTX_PAN].rxon_cmd = REPLY_WIPAN_RXON;
 538         priv->contexts[IWL_RXON_CTX_PAN].rxon_timing_cmd =
 539                 REPLY_WIPAN_RXON_TIMING;
 540         priv->contexts[IWL_RXON_CTX_PAN].rxon_assoc_cmd =
 541                 REPLY_WIPAN_RXON_ASSOC;
 542         priv->contexts[IWL_RXON_CTX_PAN].qos_cmd = REPLY_WIPAN_QOS_PARAM;
 543         priv->contexts[IWL_RXON_CTX_PAN].ap_sta_id = IWL_AP_ID_PAN;
 544         priv->contexts[IWL_RXON_CTX_PAN].wep_key_cmd = REPLY_WIPAN_WEPKEY;
 545         priv->contexts[IWL_RXON_CTX_PAN].bcast_sta_id = IWLAGN_PAN_BCAST_ID;
 546         priv->contexts[IWL_RXON_CTX_PAN].station_flags = STA_FLG_PAN_STATION;
 547         priv->contexts[IWL_RXON_CTX_PAN].interface_modes =
 548                 BIT(NL80211_IFTYPE_STATION) | BIT(NL80211_IFTYPE_AP);
 549
 550         if (ucode_flags & IWL_UCODE_TLV_FLAGS_P2P)
 551                 priv->contexts[IWL_RXON_CTX_PAN].interface_modes |=
 552                         BIT(NL80211_IFTYPE_P2P_CLIENT) |
 553                         BIT(NL80211_IFTYPE_P2P_GO);
 554
 555         priv->contexts[IWL_RXON_CTX_PAN].ap_devtype = RXON_DEV_TYPE_CP;
 556         priv->contexts[IWL_RXON_CTX_PAN].station_devtype = RXON_DEV_TYPE_2STA;
 557         priv->contexts[IWL_RXON_CTX_PAN].unused_devtype = RXON_DEV_TYPE_P2P;
 558
 559         BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
 560 }
 561
 562
 563 struct iwlagn_ucode_capabilities {
 564         u32 max_probe_length;
 565         u32 standard_phy_calibration_size;
 566         u32 flags;
 567 };
 568
 569 static void iwl_ucode_callback(const struct firmware *ucode_raw, void *context);
 570 static int iwlagn_mac_setup_register(struct iwl_priv *priv,
 571                                   struct iwlagn_ucode_capabilities *capa);
 572
 573 #define UCODE_EXPERIMENTAL_INDEX        100
 574 #define UCODE_EXPERIMENTAL_TAG          "exp"
 575
 576 static int __must_check iwl_request_firmware(struct iwl_priv *priv, bool first)
 577 {
 578         const char *name_pre = priv->cfg->fw_name_pre;
 579         char tag[8];
 580
 581         if (first) {
 582 #ifdef CONFIG_IWLWIFI_DEBUG_EXPERIMENTAL_UCODE
 583                 priv->fw_index = UCODE_EXPERIMENTAL_INDEX;
 584                 strcpy(tag, UCODE_EXPERIMENTAL_TAG);
 585         } else if (priv->fw_index == UCODE_EXPERIMENTAL_INDEX) {
 586 #endif
 587                 priv->fw_index = priv->cfg->ucode_api_max;
 588                 sprintf(tag, "%d", priv->fw_index);
 589         } else {
 590                 priv->fw_index--;
 591                 sprintf(tag, "%d", priv->fw_index);
 592         }
 593
 594         if (priv->fw_index < priv->cfg->ucode_api_min) {
 595                 IWL_ERR(priv, "no suitable firmware found!\n");
 596                 return -ENOENT;
 597         }
 598
 599         sprintf(priv->firmware_name, "%s%s%s", name_pre, tag, ".ucode");
 600
 601         IWL_DEBUG_INFO(priv, "attempting to load firmware %s'%s'\n",
 602                        (priv->fw_index == UCODE_EXPERIMENTAL_INDEX)
 603                                 ? "EXPERIMENTAL " : "",
 604                        priv->firmware_name);
 605
 606         return request_firmware_nowait(THIS_MODULE, 1, priv->firmware_name,
 607                                        bus(priv)->dev,
 608                                        GFP_KERNEL, priv, iwl_ucode_callback);
 609 }
 610
 611 struct iwlagn_firmware_pieces {
 612         const void *inst, *data, *init, *init_data, *wowlan_inst, *wowlan_data;
 613         size_t inst_size, data_size, init_size, init_data_size,
 614                wowlan_inst_size, wowlan_data_size;
 615
 616         u32 build;
 617
 618         u32 init_evtlog_ptr, init_evtlog_size, init_errlog_ptr;
 619         u32 inst_evtlog_ptr, inst_evtlog_size, inst_errlog_ptr;
 620 };
 621
 622 static int iwlagn_load_legacy_firmware(struct iwl_priv *priv,
 623                                        const struct firmware *ucode_raw,
 624                                        struct iwlagn_firmware_pieces *pieces)
 625 {
 626         struct iwl_ucode_header *ucode = (void *)ucode_raw->data;
 627         u32 api_ver, hdr_size;
 628         const u8 *src;
 629
 630         priv->ucode_ver = le32_to_cpu(ucode->ver);
 631         api_ver = IWL_UCODE_API(priv->ucode_ver);
 632
 633         switch (api_ver) {
 634         default:
 635                 hdr_size = 28;
 636                 if (ucode_raw->size < hdr_size) {
 637                         IWL_ERR(priv, "File size too small!\n");
 638                         return -EINVAL;
 639                 }
 640                 pieces->build = le32_to_cpu(ucode->u.v2.build);
 641                 pieces->inst_size = le32_to_cpu(ucode->u.v2.inst_size);
 642                 pieces->data_size = le32_to_cpu(ucode->u.v2.data_size);
 643                 pieces->init_size = le32_to_cpu(ucode->u.v2.init_size);
 644                 pieces->init_data_size = le32_to_cpu(ucode->u.v2.init_data_size);
 645                 src = ucode->u.v2.data;
 646                 break;
 647         case 0:
 648         case 1:
 649         case 2:
 650                 hdr_size = 24;
 651                 if (ucode_raw->size < hdr_size) {
 652                         IWL_ERR(priv, "File size too small!\n");
 653                         return -EINVAL;
 654                 }
 655                 pieces->build = 0;
 656                 pieces->inst_size = le32_to_cpu(ucode->u.v1.inst_size);
 657                 pieces->data_size = le32_to_cpu(ucode->u.v1.data_size);
 658                 pieces->init_size = le32_to_cpu(ucode->u.v1.init_size);
 659                 pieces->init_data_size = le32_to_cpu(ucode->u.v1.init_data_size);
 660                 src = ucode->u.v1.data;
 661                 break;
 662         }
 663
 664         /* Verify size of file vs. image size info in file's header */
 665         if (ucode_raw->size != hdr_size + pieces->inst_size +
 666                                 pieces->data_size + pieces->init_size +
 667                                 pieces->init_data_size) {
 668
 669                 IWL_ERR(priv,
 670                         "uCode file size %d does not match expected size\n",
 671                         (int)ucode_raw->size);
 672                 return -EINVAL;
 673         }
 674
 675         pieces->inst = src;
 676         src += pieces->inst_size;
 677         pieces->data = src;
 678         src += pieces->data_size;
 679         pieces->init = src;
 680         src += pieces->init_size;
 681         pieces->init_data = src;
 682         src += pieces->init_data_size;
 683
 684         return 0;
 685 }
 686
 687 static int iwlagn_load_firmware(struct iwl_priv *priv,
 688                                 const struct firmware *ucode_raw,
 689                                 struct iwlagn_firmware_pieces *pieces,
 690                                 struct iwlagn_ucode_capabilities *capa)
 691 {
 692         struct iwl_tlv_ucode_header *ucode = (void *)ucode_raw->data;
 693         struct iwl_ucode_tlv *tlv;
 694         size_t len = ucode_raw->size;
 695         const u8 *data;
 696         int wanted_alternative = iwlagn_mod_params.wanted_ucode_alternative;
 697         int tmp;
 698         u64 alternatives;
 699         u32 tlv_len;
 700         enum iwl_ucode_tlv_type tlv_type;
 701         const u8 *tlv_data;
 702
 703         if (len < sizeof(*ucode)) {
 704                 IWL_ERR(priv, "uCode has invalid length: %zd\n", len);
 705                 return -EINVAL;
 706         }
 707
 708         if (ucode->magic != cpu_to_le32(IWL_TLV_UCODE_MAGIC)) {
 709                 IWL_ERR(priv, "invalid uCode magic: 0X%x\n",
 710                         le32_to_cpu(ucode->magic));
 711                 return -EINVAL;
 712         }
 713
 714         /*
 715          * Check which alternatives are present, and "downgrade"
 716          * when the chosen alternative is not present, warning
 717          * the user when that happens. Some files may not have
 718          * any alternatives, so don't warn in that case.
 719          */
 720         alternatives = le64_to_cpu(ucode->alternatives);
 721         tmp = wanted_alternative;
 722         if (wanted_alternative > 63)
 723                 wanted_alternative = 63;
 724         while (wanted_alternative && !(alternatives & BIT(wanted_alternative)))
 725                 wanted_alternative--;
 726         if (wanted_alternative && wanted_alternative != tmp)
 727                 IWL_WARN(priv,
 728                          "uCode alternative %d not available, choosing %d\n",
 729                          tmp, wanted_alternative);
 730
 731         priv->ucode_ver = le32_to_cpu(ucode->ver);
 732         pieces->build = le32_to_cpu(ucode->build);
 733         data = ucode->data;
 734
 735         len -= sizeof(*ucode);
 736
 737         while (len >= sizeof(*tlv)) {
 738                 u16 tlv_alt;
 739
 740                 len -= sizeof(*tlv);
 741                 tlv = (void *)data;
 742
 743                 tlv_len = le32_to_cpu(tlv->length);
 744                 tlv_type = le16_to_cpu(tlv->type);
 745                 tlv_alt = le16_to_cpu(tlv->alternative);
 746                 tlv_data = tlv->data;
 747
 748                 if (len < tlv_len) {
 749                         IWL_ERR(priv, "invalid TLV len: %zd/%u\n",
 750                                 len, tlv_len);
 751                         return -EINVAL;
 752                 }
 753                 len -= ALIGN(tlv_len, 4);
 754                 data += sizeof(*tlv) + ALIGN(tlv_len, 4);
 755
 756                 /*
 757                  * Alternative 0 is always valid.
 758                  *
 759                  * Skip alternative TLVs that are not selected.
 760                  */
 761                 if (tlv_alt != 0 && tlv_alt != wanted_alternative)
 762                         continue;
 763
 764                 switch (tlv_type) {
 765                 case IWL_UCODE_TLV_INST:
 766                         pieces->inst = tlv_data;
 767                         pieces->inst_size = tlv_len;
 768                         break;
 769                 case IWL_UCODE_TLV_DATA:
 770                         pieces->data = tlv_data;
 771                         pieces->data_size = tlv_len;
 772                         break;
 773                 case IWL_UCODE_TLV_INIT:
 774                         pieces->init = tlv_data;
 775                         pieces->init_size = tlv_len;
 776                         break;
 777                 case IWL_UCODE_TLV_INIT_DATA:
 778                         pieces->init_data = tlv_data;
 779                         pieces->init_data_size = tlv_len;
 780                         break;
 781                 case IWL_UCODE_TLV_BOOT:
 782                         IWL_ERR(priv, "Found unexpected BOOT ucode\n");
 783                         break;
 784                 case IWL_UCODE_TLV_PROBE_MAX_LEN:
 785                         if (tlv_len != sizeof(u32))
 786                                 goto invalid_tlv_len;
 787                         capa->max_probe_length =
 788                                         le32_to_cpup((__le32 *)tlv_data);
 789                         break;
 790                 case IWL_UCODE_TLV_PAN:
 791                         if (tlv_len)
 792                                 goto invalid_tlv_len;
 793                         capa->flags |= IWL_UCODE_TLV_FLAGS_PAN;
 794                         break;
 795                 case IWL_UCODE_TLV_FLAGS:
 796                         /* must be at least one u32 */
 797                         if (tlv_len < sizeof(u32))
 798                                 goto invalid_tlv_len;
 799                         /* and a proper number of u32s */
 800                         if (tlv_len % sizeof(u32))
 801                                 goto invalid_tlv_len;
 802                         /*
 803                          * This driver only reads the first u32 as
 804                          * right now no more features are defined,
 805                          * if that changes then either the driver
 806                          * will not work with the new firmware, or
 807                          * it'll not take advantage of new features.
 808                          */
 809                         capa->flags = le32_to_cpup((__le32 *)tlv_data);
 810                         break;
 811                 case IWL_UCODE_TLV_INIT_EVTLOG_PTR:
 812                         if (tlv_len != sizeof(u32))
 813                                 goto invalid_tlv_len;
 814                         pieces->init_evtlog_ptr =
 815                                         le32_to_cpup((__le32 *)tlv_data);
 816                         break;
 817                 case IWL_UCODE_TLV_INIT_EVTLOG_SIZE:
 818                         if (tlv_len != sizeof(u32))
 819                                 goto invalid_tlv_len;
 820                         pieces->init_evtlog_size =
 821                                         le32_to_cpup((__le32 *)tlv_data);
 822                         break;
 823                 case IWL_UCODE_TLV_INIT_ERRLOG_PTR:
 824                         if (tlv_len != sizeof(u32))
 825                                 goto invalid_tlv_len;
 826                         pieces->init_errlog_ptr =
 827                                         le32_to_cpup((__le32 *)tlv_data);
 828                         break;
 829                 case IWL_UCODE_TLV_RUNT_EVTLOG_PTR:
 830                         if (tlv_len != sizeof(u32))
 831                                 goto invalid_tlv_len;
 832                         pieces->inst_evtlog_ptr =
 833                                         le32_to_cpup((__le32 *)tlv_data);
 834                         break;
 835                 case IWL_UCODE_TLV_RUNT_EVTLOG_SIZE:
 836                         if (tlv_len != sizeof(u32))
 837                                 goto invalid_tlv_len;
 838                         pieces->inst_evtlog_size =
 839                                         le32_to_cpup((__le32 *)tlv_data);
 840                         break;
 841                 case IWL_UCODE_TLV_RUNT_ERRLOG_PTR:
 842                         if (tlv_len != sizeof(u32))
 843                                 goto invalid_tlv_len;
 844                         pieces->inst_errlog_ptr =
 845                                         le32_to_cpup((__le32 *)tlv_data);
 846                         break;
 847                 case IWL_UCODE_TLV_ENHANCE_SENS_TBL:
 848                         if (tlv_len)
 849                                 goto invalid_tlv_len;
 850                         priv->enhance_sensitivity_table = true;
 851                         break;
 852                 case IWL_UCODE_TLV_WOWLAN_INST:
 853                         pieces->wowlan_inst = tlv_data;
 854                         pieces->wowlan_inst_size = tlv_len;
 855                         break;
 856                 case IWL_UCODE_TLV_WOWLAN_DATA:
 857                         pieces->wowlan_data = tlv_data;
 858                         pieces->wowlan_data_size = tlv_len;
 859                         break;
 860                 case IWL_UCODE_TLV_PHY_CALIBRATION_SIZE:
 861                         if (tlv_len != sizeof(u32))
 862                                 goto invalid_tlv_len;
 863                         capa->standard_phy_calibration_size =
 864                                         le32_to_cpup((__le32 *)tlv_data);
 865                         break;
 866                 default:
 867                         IWL_DEBUG_INFO(priv, "unknown TLV: %d\n", tlv_type);
 868                         break;
 869                 }
 870         }
 871
 872         if (len) {
 873                 IWL_ERR(priv, "invalid TLV after parsing: %zd\n", len);
 874                 iwl_print_hex_dump(priv, IWL_DL_FW, (u8 *)data, len);
 875                 return -EINVAL;
 876         }
 877
 878         return 0;
 879
 880  invalid_tlv_len:
 881         IWL_ERR(priv, "TLV %d has invalid size: %u\n", tlv_type, tlv_len);
 882         iwl_print_hex_dump(priv, IWL_DL_FW, tlv_data, tlv_len);
 883
 884         return -EINVAL;
 885 }
 886
 887 /**
 888  * iwl_ucode_callback - callback when firmware was loaded
 889  *
 890  * If loaded successfully, copies the firmware into buffers
 891  * for the card to fetch (via DMA).
 892  */
 893 static void iwl_ucode_callback(const struct firmware *ucode_raw, void *context)
 894 {
 895         struct iwl_priv *priv = context;
 896         struct iwl_ucode_header *ucode;
 897         int err;
 898         struct iwlagn_firmware_pieces pieces;
 899         const unsigned int api_max = priv->cfg->ucode_api_max;
 900         unsigned int api_ok = priv->cfg->ucode_api_ok;
 901         const unsigned int api_min = priv->cfg->ucode_api_min;
 902         u32 api_ver;
 903         char buildstr[25];
 904         u32 build;
 905         struct iwlagn_ucode_capabilities ucode_capa = {
 906                 .max_probe_length = 200,
 907                 .standard_phy_calibration_size =
 908                         IWL_DEFAULT_STANDARD_PHY_CALIBRATE_TBL_SIZE,
 909         };
 910
 911         if (!api_ok)
 912                 api_ok = api_max;
 913
 914         memset(&pieces, 0, sizeof(pieces));
 915
 916         if (!ucode_raw) {
 917                 if (priv->fw_index <= api_ok)
 918                         IWL_ERR(priv,
 919                                 "request for firmware file '%s' failed.\n",
 920                                 priv->firmware_name);
 921                 goto try_again;
 922         }
 923
 924         IWL_DEBUG_INFO(priv, "Loaded firmware file '%s' (%zd bytes).\n",
 925                        priv->firmware_name, ucode_raw->size);
 926
 927         /* Make sure that we got at least the API version number */
 928         if (ucode_raw->size < 4) {
 929                 IWL_ERR(priv, "File size way too small!\n");
 930                 goto try_again;
 931         }
 932
 933         /* Data from ucode file:  header followed by uCode images */
 934         ucode = (struct iwl_ucode_header *)ucode_raw->data;
 935
 936         if (ucode->ver)
 937                 err = iwlagn_load_legacy_firmware(priv, ucode_raw, &pieces);
 938         else
 939                 err = iwlagn_load_firmware(priv, ucode_raw, &pieces,
 940                                            &ucode_capa);
 941
 942         if (err)
 943                 goto try_again;
 944
 945         api_ver = IWL_UCODE_API(priv->ucode_ver);
 946         build = pieces.build;
 947
 948         /*
 949          * api_ver should match the api version forming part of the
 950          * firmware filename ... but we don't check for that and only rely
 951          * on the API version read from firmware header from here on forward
 952          */
 953         /* no api version check required for experimental uCode */
 954         if (priv->fw_index != UCODE_EXPERIMENTAL_INDEX) {
 955                 if (api_ver < api_min || api_ver > api_max) {
 956                         IWL_ERR(priv,
 957                                 "Driver unable to support your firmware API. "
 958                                 "Driver supports v%u, firmware is v%u.\n",
 959                                 api_max, api_ver);
 960                         goto try_again;
 961                 }
 962
 963                 if (api_ver < api_ok) {
 964                         if (api_ok != api_max)
 965                                 IWL_ERR(priv, "Firmware has old API version, "
 966                                         "expected v%u through v%u, got v%u.\n",
 967                                         api_ok, api_max, api_ver);
 968                         else
 969                                 IWL_ERR(priv, "Firmware has old API version, "
 970                                         "expected v%u, got v%u.\n",
 971                                         api_max, api_ver);
 972                         IWL_ERR(priv, "New firmware can be obtained from "
 973                                       "http://www.intellinuxwireless.org/.\n");
 974                 }
 975         }
 976
 977         if (build)
 978                 sprintf(buildstr, " build %u%s", build,
 979                        (priv->fw_index == UCODE_EXPERIMENTAL_INDEX)
 980                                 ? " (EXP)" : "");
 981         else
 982                 buildstr[0] = '\0';
 983
 984         IWL_INFO(priv, "loaded firmware version %u.%u.%u.%u%s\n",
 985                  IWL_UCODE_MAJOR(priv->ucode_ver),
 986                  IWL_UCODE_MINOR(priv->ucode_ver),
 987                  IWL_UCODE_API(priv->ucode_ver),
 988                  IWL_UCODE_SERIAL(priv->ucode_ver),
 989                  buildstr);
 990
 991         snprintf(priv->hw->wiphy->fw_version,
 992                  sizeof(priv->hw->wiphy->fw_version),
 993                  "%u.%u.%u.%u%s",
 994                  IWL_UCODE_MAJOR(priv->ucode_ver),
 995                  IWL_UCODE_MINOR(priv->ucode_ver),
 996                  IWL_UCODE_API(priv->ucode_ver),
 997                  IWL_UCODE_SERIAL(priv->ucode_ver),
 998                  buildstr);
 999
1000         /*
1001          * For any of the failures below (before allocating pci memory)
1002          * we will try to load a version with a smaller API -- maybe the
1003          * user just got a corrupted version of the latest API.
1004          */
1005
1006         IWL_DEBUG_INFO(priv, "f/w package hdr ucode version raw = 0x%x\n",
1007                        priv->ucode_ver);
1008         IWL_DEBUG_INFO(priv, "f/w package hdr runtime inst size = %Zd\n",
1009                        pieces.inst_size);
1010         IWL_DEBUG_INFO(priv, "f/w package hdr runtime data size = %Zd\n",
1011                        pieces.data_size);
1012         IWL_DEBUG_INFO(priv, "f/w package hdr init inst size = %Zd\n",
1013                        pieces.init_size);
1014         IWL_DEBUG_INFO(priv, "f/w package hdr init data size = %Zd\n",
1015                        pieces.init_data_size);
1016
1017         /* Verify that uCode images will fit in card's SRAM */
1018         if (pieces.inst_size > hw_params(priv).max_inst_size) {
1019                 IWL_ERR(priv, "uCode instr len %Zd too large to fit in\n",
1020                         pieces.inst_size);
1021                 goto try_again;
1022         }
1023
1024         if (pieces.data_size > hw_params(priv).max_data_size) {
1025                 IWL_ERR(priv, "uCode data len %Zd too large to fit in\n",
1026                         pieces.data_size);
1027                 goto try_again;
1028         }
1029
1030         if (pieces.init_size > hw_params(priv).max_inst_size) {
1031                 IWL_ERR(priv, "uCode init instr len %Zd too large to fit in\n",
1032                         pieces.init_size);
1033                 goto try_again;
1034         }
1035
1036         if (pieces.init_data_size > hw_params(priv).max_data_size) {
1037                 IWL_ERR(priv, "uCode init data len %Zd too large to fit in\n",
1038                         pieces.init_data_size);
1039                 goto try_again;
1040         }
1041
1042         /* Allocate ucode buffers for card's bus-master loading ... */
1043
1044         /* Runtime instructions and 2 copies of data:
1045          * 1) unmodified from disk
1046          * 2) backup cache for save/restore during power-downs */
1047         if (iwl_alloc_fw_desc(priv, &priv->ucode_rt.code,
1048                               pieces.inst, pieces.inst_size))
1049                 goto err_pci_alloc;
1050         if (iwl_alloc_fw_desc(priv, &priv->ucode_rt.data,
1051                               pieces.data, pieces.data_size))
1052                 goto err_pci_alloc;
1053
1054         /* Initialization instructions and data */
1055         if (pieces.init_size && pieces.init_data_size) {
1056                 if (iwl_alloc_fw_desc(priv, &priv->ucode_init.code,
1057                                       pieces.init, pieces.init_size))
1058                         goto err_pci_alloc;
1059                 if (iwl_alloc_fw_desc(priv, &priv->ucode_init.data,
1060                                       pieces.init_data, pieces.init_data_size))
1061                         goto err_pci_alloc;
1062         }
1063
1064         /* WoWLAN instructions and data */
1065         if (pieces.wowlan_inst_size && pieces.wowlan_data_size) {
1066                 if (iwl_alloc_fw_desc(priv, &priv->ucode_wowlan.code,
1067                                       pieces.wowlan_inst,
1068                                       pieces.wowlan_inst_size))
1069                         goto err_pci_alloc;
1070                 if (iwl_alloc_fw_desc(priv, &priv->ucode_wowlan.data,
1071                                       pieces.wowlan_data,
1072                                       pieces.wowlan_data_size))
1073                         goto err_pci_alloc;
1074         }
1075
1076         /* Now that we can no longer fail, copy information */
1077
1078         /*
1079          * The (size - 16) / 12 formula is based on the information recorded
1080          * for each event, which is of mode 1 (including timestamp) for all
1081          * new microcodes that include this information.
1082          */
1083         priv->init_evtlog_ptr = pieces.init_evtlog_ptr;
1084         if (pieces.init_evtlog_size)
1085                 priv->init_evtlog_size = (pieces.init_evtlog_size - 16)/12;
1086         else
1087                 priv->init_evtlog_size =
1088                         priv->cfg->base_params->max_event_log_size;
1089         priv->init_errlog_ptr = pieces.init_errlog_ptr;
1090         priv->inst_evtlog_ptr = pieces.inst_evtlog_ptr;
1091         if (pieces.inst_evtlog_size)
1092                 priv->inst_evtlog_size = (pieces.inst_evtlog_size - 16)/12;
1093         else
1094                 priv->inst_evtlog_size =
1095                         priv->cfg->base_params->max_event_log_size;
1096         priv->inst_errlog_ptr = pieces.inst_errlog_ptr;
1097
1098         priv->new_scan_threshold_behaviour =
1099                 !!(ucode_capa.flags & IWL_UCODE_TLV_FLAGS_NEWSCAN);
1100
1101         if (!(priv->cfg->sku & EEPROM_SKU_CAP_IPAN_ENABLE))
1102                 ucode_capa.flags &= ~IWL_UCODE_TLV_FLAGS_PAN;
1103
1104         /*
1105          * if not PAN, then don't support P2P -- might be a uCode
1106          * packaging bug or due to the eeprom check above
1107          */
1108         if (!(ucode_capa.flags & IWL_UCODE_TLV_FLAGS_PAN))
1109                 ucode_capa.flags &= ~IWL_UCODE_TLV_FLAGS_P2P;
1110
1111         if (ucode_capa.flags & IWL_UCODE_TLV_FLAGS_PAN) {
1112                 priv->sta_key_max_num = STA_KEY_MAX_NUM_PAN;
1113                 priv->shrd->cmd_queue = IWL_IPAN_CMD_QUEUE_NUM;
1114         } else {
1115                 priv->sta_key_max_num = STA_KEY_MAX_NUM;
1116                 priv->shrd->cmd_queue = IWL_DEFAULT_CMD_QUEUE_NUM;
1117         }
1118
1119         /*
1120          * figure out the offset of chain noise reset and gain commands
1121          * base on the size of standard phy calibration commands table size
1122          */
1123         if (ucode_capa.standard_phy_calibration_size >
1124             IWL_MAX_PHY_CALIBRATE_TBL_SIZE)
1125                 ucode_capa.standard_phy_calibration_size =
1126                         IWL_MAX_STANDARD_PHY_CALIBRATE_TBL_SIZE;
1127
1128         priv->phy_calib_chain_noise_reset_cmd =
1129                 ucode_capa.standard_phy_calibration_size;
1130         priv->phy_calib_chain_noise_gain_cmd =
1131                 ucode_capa.standard_phy_calibration_size + 1;
1132
1133         /* initialize all valid contexts */
1134         iwl_init_context(priv, ucode_capa.flags);
1135
1136         /**************************************************
1137          * This is still part of probe() in a sense...
1138          *
1139          * 9. Setup and register with mac80211 and debugfs
1140          **************************************************/
1141         err = iwlagn_mac_setup_register(priv, &ucode_capa);
1142         if (err)
1143                 goto out_unbind;
1144
1145         err = iwl_dbgfs_register(priv, DRV_NAME);
1146         if (err)
1147                 IWL_ERR(priv, "failed to create debugfs files. Ignoring error: %d\n", err);
1148
1149         /* We have our copies now, allow OS release its copies */
1150         release_firmware(ucode_raw);
1151         complete(&priv->firmware_loading_complete);
1152         return;
1153
1154  try_again:
1155         /* try next, if any */
1156         if (iwl_request_firmware(priv, false))
1157                 goto out_unbind;
1158         release_firmware(ucode_raw);
1159         return;
1160
1161  err_pci_alloc:
1162         IWL_ERR(priv, "failed to allocate pci memory\n");
1163         iwl_dealloc_ucode(priv);
1164  out_unbind:
1165         complete(&priv->firmware_loading_complete);
1166         device_release_driver(bus(priv)->dev);
1167         release_firmware(ucode_raw);
1168 }
1169
1170 static void iwl_rf_kill_ct_config(struct iwl_priv *priv)
1171 {
1172         struct iwl_ct_kill_config cmd;
1173         struct iwl_ct_kill_throttling_config adv_cmd;
1174         unsigned long flags;
1175         int ret = 0;
1176
1177         spin_lock_irqsave(&priv->shrd->lock, flags);
1178         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_CLR,
1179                     CSR_UCODE_DRV_GP1_REG_BIT_CT_KILL_EXIT);
1180         spin_unlock_irqrestore(&priv->shrd->lock, flags);
1181         priv->thermal_throttle.ct_kill_toggle = false;
1182
1183         if (priv->cfg->base_params->support_ct_kill_exit) {
1184                 adv_cmd.critical_temperature_enter =
1185                         cpu_to_le32(hw_params(priv).ct_kill_threshold);
1186                 adv_cmd.critical_temperature_exit =
1187                         cpu_to_le32(hw_params(priv).ct_kill_exit_threshold);
1188
1189                 ret = iwl_trans_send_cmd_pdu(trans(priv),
1190                                        REPLY_CT_KILL_CONFIG_CMD,
1191                                        CMD_SYNC, sizeof(adv_cmd), &adv_cmd);
1192                 if (ret)
1193                         IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n");
1194                 else
1195                         IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD "
1196                                 "succeeded, critical temperature enter is %d,"
1197                                 "exit is %d\n",
1198                                 hw_params(priv).ct_kill_threshold,
1199                                 hw_params(priv).ct_kill_exit_threshold);
1200         } else {
1201                 cmd.critical_temperature_R =
1202                         cpu_to_le32(hw_params(priv).ct_kill_threshold);
1203
1204                 ret = iwl_trans_send_cmd_pdu(trans(priv),
1205                                        REPLY_CT_KILL_CONFIG_CMD,
1206                                        CMD_SYNC, sizeof(cmd), &cmd);
1207                 if (ret)
1208                         IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n");
1209                 else
1210                         IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD "
1211                                 "succeeded, "
1212                                 "critical temperature is %d\n",
1213                                 hw_params(priv).ct_kill_threshold);
1214         }
1215 }
1216
1217 static int iwlagn_send_calib_cfg_rt(struct iwl_priv *priv, u32 cfg)
1218 {
1219         struct iwl_calib_cfg_cmd calib_cfg_cmd;
1220         struct iwl_host_cmd cmd = {
1221                 .id = CALIBRATION_CFG_CMD,
1222                 .len = { sizeof(struct iwl_calib_cfg_cmd), },
1223                 .data = { &calib_cfg_cmd, },
1224         };
1225
1226         memset(&calib_cfg_cmd, 0, sizeof(calib_cfg_cmd));
1227         calib_cfg_cmd.ucd_calib_cfg.once.is_enable = IWL_CALIB_RT_CFG_ALL;
1228         calib_cfg_cmd.ucd_calib_cfg.once.start = cpu_to_le32(cfg);
1229
1230         return iwl_trans_send_cmd(trans(priv), &cmd);
1231 }
1232
1233
1234 static int iwlagn_send_tx_ant_config(struct iwl_priv *priv, u8 valid_tx_ant)
1235 {
1236         struct iwl_tx_ant_config_cmd tx_ant_cmd = {
1237           .valid = cpu_to_le32(valid_tx_ant),
1238         };
1239
1240         if (IWL_UCODE_API(priv->ucode_ver) > 1) {
1241                 IWL_DEBUG_HC(priv, "select valid tx ant: %u\n", valid_tx_ant);
1242                 return iwl_trans_send_cmd_pdu(trans(priv),
1243                                         TX_ANT_CONFIGURATION_CMD,
1244                                         CMD_SYNC,
1245                                         sizeof(struct iwl_tx_ant_config_cmd),
1246                                         &tx_ant_cmd);
1247         } else {
1248                 IWL_DEBUG_HC(priv, "TX_ANT_CONFIGURATION_CMD not supported\n");
1249                 return -EOPNOTSUPP;
1250         }
1251 }
1252
1253 /**
1254  * iwl_alive_start - called after REPLY_ALIVE notification received
1255  *                   from protocol/runtime uCode (initialization uCode's
1256  *                   Alive gets handled by iwl_init_alive_start()).
1257  */
1258 int iwl_alive_start(struct iwl_priv *priv)
1259 {
1260         int ret = 0;
1261         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1262
1263         /*TODO: this should go to the transport layer */
1264         iwl_reset_ict(trans(priv));
1265
1266         IWL_DEBUG_INFO(priv, "Runtime Alive received.\n");
1267
1268         /* After the ALIVE response, we can send host commands to the uCode */
1269         set_bit(STATUS_ALIVE, &priv->shrd->status);
1270
1271         /* Enable watchdog to monitor the driver tx queues */
1272         iwl_setup_watchdog(priv);
1273
1274         if (iwl_is_rfkill(priv->shrd))
1275                 return -ERFKILL;
1276
1277         /* download priority table before any calibration request */
1278         if (priv->cfg->bt_params &&
1279             priv->cfg->bt_params->advanced_bt_coexist) {
1280                 /* Configure Bluetooth device coexistence support */
1281                 if (priv->cfg->bt_params->bt_sco_disable)
1282                         priv->bt_enable_pspoll = false;
1283                 else
1284                         priv->bt_enable_pspoll = true;
1285
1286                 priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK;
1287                 priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT;
1288                 priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT;
1289                 iwlagn_send_advance_bt_config(priv);
1290                 priv->bt_valid = IWLAGN_BT_VALID_ENABLE_FLAGS;
1291                 priv->cur_rssi_ctx = NULL;
1292
1293                 iwlagn_send_prio_tbl(priv);
1294
1295                 /* FIXME: w/a to force change uCode BT state machine */
1296                 ret = iwlagn_send_bt_env(priv, IWL_BT_COEX_ENV_OPEN,
1297                                          BT_COEX_PRIO_TBL_EVT_INIT_CALIB2);
1298                 if (ret)
1299                         return ret;
1300                 ret = iwlagn_send_bt_env(priv, IWL_BT_COEX_ENV_CLOSE,
1301                                          BT_COEX_PRIO_TBL_EVT_INIT_CALIB2);
1302                 if (ret)
1303                         return ret;
1304         } else if (priv->cfg->bt_params) {
1305                 /*
1306                  * default is 2-wire BT coexexistence support
1307                  */
1308                 iwl_send_bt_config(priv);
1309         }
1310
1311         if (hw_params(priv).calib_rt_cfg)
1312                 iwlagn_send_calib_cfg_rt(priv,
1313                                          hw_params(priv).calib_rt_cfg);
1314
1315         ieee80211_wake_queues(priv->hw);
1316
1317         priv->active_rate = IWL_RATES_MASK;
1318
1319         /* Configure Tx antenna selection based on H/W config */
1320         iwlagn_send_tx_ant_config(priv, priv->cfg->valid_tx_ant);
1321
1322         if (iwl_is_associated_ctx(ctx) && !priv->shrd->wowlan) {
1323                 struct iwl_rxon_cmd *active_rxon =
1324                                 (struct iwl_rxon_cmd *)&ctx->active;
1325                 /* apply any changes in staging */
1326                 ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK;
1327                 active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
1328         } else {
1329                 struct iwl_rxon_context *tmp;
1330                 /* Initialize our rx_config data */
1331                 for_each_context(priv, tmp)
1332                         iwl_connection_init_rx_config(priv, tmp);
1333
1334                 iwlagn_set_rxon_chain(priv, ctx);
1335         }
1336
1337         if (!priv->shrd->wowlan) {
1338                 /* WoWLAN ucode will not reply in the same way, skip it */
1339                 iwl_reset_run_time_calib(priv);
1340         }
1341
1342         set_bit(STATUS_READY, &priv->shrd->status);
1343
1344         /* Configure the adapter for unassociated operation */
1345         ret = iwlagn_commit_rxon(priv, ctx);
1346         if (ret)
1347                 return ret;
1348
1349         /* At this point, the NIC is initialized and operational */
1350         iwl_rf_kill_ct_config(priv);
1351
1352         IWL_DEBUG_INFO(priv, "ALIVE processing complete.\n");
1353
1354         return iwl_power_update_mode(priv, true);
1355 }
1356
1357 static void iwl_cancel_deferred_work(struct iwl_priv *priv);
1358
1359 static void __iwl_down(struct iwl_priv *priv)
1360 {
1361         int exit_pending;
1362
1363         IWL_DEBUG_INFO(priv, DRV_NAME " is going down\n");
1364
1365         iwl_scan_cancel_timeout(priv, 200);
1366
1367         /*
1368          * If active, scanning won't cancel it, so say it expired.
1369          * No race since we hold the mutex here and a new one
1370          * can't come in at this time.
1371          */
1372         ieee80211_remain_on_channel_expired(priv->hw);
1373
1374         exit_pending =
1375                 test_and_set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1376
1377         /* Stop TX queues watchdog. We need to have STATUS_EXIT_PENDING bit set
1378          * to prevent rearm timer */
1379         del_timer_sync(&priv->watchdog);
1380
1381         iwl_clear_ucode_stations(priv, NULL);
1382         iwl_dealloc_bcast_stations(priv);
1383         iwl_clear_driver_stations(priv);
1384
1385         /* reset BT coex data */
1386         priv->bt_status = 0;
1387         priv->cur_rssi_ctx = NULL;
1388         priv->bt_is_sco = 0;
1389         if (priv->cfg->bt_params)
1390                 priv->bt_traffic_load =
1391                          priv->cfg->bt_params->bt_init_traffic_load;
1392         else
1393                 priv->bt_traffic_load = 0;
1394         priv->bt_full_concurrent = false;
1395         priv->bt_ci_compliance = 0;
1396
1397         /* Wipe out the EXIT_PENDING status bit if we are not actually
1398          * exiting the module */
1399         if (!exit_pending)
1400                 clear_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1401
1402         if (priv->mac80211_registered)
1403                 ieee80211_stop_queues(priv->hw);
1404
1405         iwl_trans_stop_device(trans(priv));
1406
1407         /* Clear out all status bits but a few that are stable across reset */
1408         priv->shrd->status &=
1409                         test_bit(STATUS_RF_KILL_HW, &priv->shrd->status) <<
1410                                 STATUS_RF_KILL_HW |
1411                         test_bit(STATUS_GEO_CONFIGURED, &priv->shrd->status) <<
1412                                 STATUS_GEO_CONFIGURED |
1413                         test_bit(STATUS_FW_ERROR, &priv->shrd->status) <<
1414                                 STATUS_FW_ERROR |
1415                         test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) <<
1416                                 STATUS_EXIT_PENDING;
1417
1418         dev_kfree_skb(priv->beacon_skb);
1419         priv->beacon_skb = NULL;
1420 }
1421
1422 static void iwl_down(struct iwl_priv *priv)
1423 {
1424         mutex_lock(&priv->shrd->mutex);
1425         __iwl_down(priv);
1426         mutex_unlock(&priv->shrd->mutex);
1427
1428         iwl_cancel_deferred_work(priv);
1429 }
1430
1431 #define MAX_HW_RESTARTS 5
1432
1433 static int __iwl_up(struct iwl_priv *priv)
1434 {
1435         struct iwl_rxon_context *ctx;
1436         int ret;
1437
1438         lockdep_assert_held(&priv->shrd->mutex);
1439
1440         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status)) {
1441                 IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
1442                 return -EIO;
1443         }
1444
1445         for_each_context(priv, ctx) {
1446                 ret = iwlagn_alloc_bcast_station(priv, ctx);
1447                 if (ret) {
1448                         iwl_dealloc_bcast_stations(priv);
1449                         return ret;
1450                 }
1451         }
1452
1453         ret = iwlagn_run_init_ucode(priv);
1454         if (ret) {
1455                 IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
1456                 goto error;
1457         }
1458
1459         ret = iwlagn_load_ucode_wait_alive(priv,
1460                                            &priv->ucode_rt,
1461                                            IWL_UCODE_REGULAR);
1462         if (ret) {
1463                 IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
1464                 goto error;
1465         }
1466
1467         ret = iwl_alive_start(priv);
1468         if (ret)
1469                 goto error;
1470         return 0;
1471
1472  error:
1473         set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1474         __iwl_down(priv);
1475         clear_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1476
1477         IWL_ERR(priv, "Unable to initialize device.\n");
1478         return ret;
1479 }
1480
1481
1482 /*****************************************************************************
1483  *
1484  * Workqueue callbacks
1485  *
1486  *****************************************************************************/
1487
1488 static void iwl_bg_run_time_calib_work(struct work_struct *work)
1489 {
1490         struct iwl_priv *priv = container_of(work, struct iwl_priv,
1491                         run_time_calib_work);
1492
1493         mutex_lock(&priv->shrd->mutex);
1494
1495         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) ||
1496             test_bit(STATUS_SCANNING, &priv->shrd->status)) {
1497                 mutex_unlock(&priv->shrd->mutex);
1498                 return;
1499         }
1500
1501         if (priv->start_calib) {
1502                 iwl_chain_noise_calibration(priv);
1503                 iwl_sensitivity_calibration(priv);
1504         }
1505
1506         mutex_unlock(&priv->shrd->mutex);
1507 }
1508
1509 static void iwlagn_prepare_restart(struct iwl_priv *priv)
1510 {
1511         bool bt_full_concurrent;
1512         u8 bt_ci_compliance;
1513         u8 bt_load;
1514         u8 bt_status;
1515         bool bt_is_sco;
1516
1517         lockdep_assert_held(&priv->shrd->mutex);
1518
1519         priv->is_open = 0;
1520
1521         /*
1522          * __iwl_down() will clear the BT status variables,
1523          * which is correct, but when we restart we really
1524          * want to keep them so restore them afterwards.
1525          *
1526          * The restart process will later pick them up and
1527          * re-configure the hw when we reconfigure the BT
1528          * command.
1529          */
1530         bt_full_concurrent = priv->bt_full_concurrent;
1531         bt_ci_compliance = priv->bt_ci_compliance;
1532         bt_load = priv->bt_traffic_load;
1533         bt_status = priv->bt_status;
1534         bt_is_sco = priv->bt_is_sco;
1535
1536         __iwl_down(priv);
1537
1538         priv->bt_full_concurrent = bt_full_concurrent;
1539         priv->bt_ci_compliance = bt_ci_compliance;
1540         priv->bt_traffic_load = bt_load;
1541         priv->bt_status = bt_status;
1542         priv->bt_is_sco = bt_is_sco;
1543 }
1544
1545 static void iwl_bg_restart(struct work_struct *data)
1546 {
1547         struct iwl_priv *priv = container_of(data, struct iwl_priv, restart);
1548
1549         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
1550                 return;
1551
1552         if (test_and_clear_bit(STATUS_FW_ERROR, &priv->shrd->status)) {
1553                 mutex_lock(&priv->shrd->mutex);
1554                 iwlagn_prepare_restart(priv);
1555                 mutex_unlock(&priv->shrd->mutex);
1556                 iwl_cancel_deferred_work(priv);
1557                 ieee80211_restart_hw(priv->hw);
1558         } else {
1559                 WARN_ON(1);
1560         }
1561 }
1562
1563 /*****************************************************************************
1564  *
1565  * mac80211 entry point functions
1566  *
1567  *****************************************************************************/
1568
1569 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
1570         {
1571                 .max = 1,
1572                 .types = BIT(NL80211_IFTYPE_STATION),
1573         },
1574         {
1575                 .max = 1,
1576                 .types = BIT(NL80211_IFTYPE_AP),
1577         },
1578 };
1579
1580 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
1581         {
1582                 .max = 2,
1583                 .types = BIT(NL80211_IFTYPE_STATION),
1584         },
1585 };
1586
1587 static const struct ieee80211_iface_limit iwlagn_p2p_sta_go_limits[] = {
1588         {
1589                 .max = 1,
1590                 .types = BIT(NL80211_IFTYPE_STATION),
1591         },
1592         {
1593                 .max = 1,
1594                 .types = BIT(NL80211_IFTYPE_P2P_GO) |
1595                          BIT(NL80211_IFTYPE_AP),
1596         },
1597 };
1598
1599 static const struct ieee80211_iface_limit iwlagn_p2p_2sta_limits[] = {
1600         {
1601                 .max = 2,
1602                 .types = BIT(NL80211_IFTYPE_STATION),
1603         },
1604         {
1605                 .max = 1,
1606                 .types = BIT(NL80211_IFTYPE_P2P_CLIENT),
1607         },
1608 };
1609
1610 static const struct ieee80211_iface_combination
1611 iwlagn_iface_combinations_dualmode[] = {
1612         { .num_different_channels = 1,
1613           .max_interfaces = 2,
1614           .beacon_int_infra_match = true,
1615           .limits = iwlagn_sta_ap_limits,
1616           .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
1617         },
1618         { .num_different_channels = 1,
1619           .max_interfaces = 2,
1620           .limits = iwlagn_2sta_limits,
1621           .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
1622         },
1623 };
1624
1625 static const struct ieee80211_iface_combination
1626 iwlagn_iface_combinations_p2p[] = {
1627         { .num_different_channels = 1,
1628           .max_interfaces = 2,
1629           .beacon_int_infra_match = true,
1630           .limits = iwlagn_p2p_sta_go_limits,
1631           .n_limits = ARRAY_SIZE(iwlagn_p2p_sta_go_limits),
1632         },
1633         { .num_different_channels = 1,
1634           .max_interfaces = 2,
1635           .limits = iwlagn_p2p_2sta_limits,
1636           .n_limits = ARRAY_SIZE(iwlagn_p2p_2sta_limits),
1637         },
1638 };
1639
1640 /*
1641  * Not a mac80211 entry point function, but it fits in with all the
1642  * other mac80211 functions grouped here.
1643  */
1644 static int iwlagn_mac_setup_register(struct iwl_priv *priv,
1645                                   struct iwlagn_ucode_capabilities *capa)
1646 {
1647         int ret;
1648         struct ieee80211_hw *hw = priv->hw;
1649         struct iwl_rxon_context *ctx;
1650
1651         hw->rate_control_algorithm = "iwl-agn-rs";
1652
1653         /* Tell mac80211 our characteristics */
1654         hw->flags = IEEE80211_HW_SIGNAL_DBM |
1655                     IEEE80211_HW_AMPDU_AGGREGATION |
1656                     IEEE80211_HW_NEED_DTIM_PERIOD |
1657                     IEEE80211_HW_SPECTRUM_MGMT |
1658                     IEEE80211_HW_REPORTS_TX_ACK_STATUS;
1659
1660         /*
1661          * Including the following line will crash some AP's.  This
1662          * workaround removes the stimulus which causes the crash until
1663          * the AP software can be fixed.
1664         hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
1665          */
1666
1667         hw->flags |= IEEE80211_HW_SUPPORTS_PS |
1668                      IEEE80211_HW_SUPPORTS_DYNAMIC_PS;
1669
1670         if (priv->cfg->sku & EEPROM_SKU_CAP_11N_ENABLE)
1671                 hw->flags |= IEEE80211_HW_SUPPORTS_DYNAMIC_SMPS |
1672                              IEEE80211_HW_SUPPORTS_STATIC_SMPS;
1673
1674         if (capa->flags & IWL_UCODE_TLV_FLAGS_MFP)
1675                 hw->flags |= IEEE80211_HW_MFP_CAPABLE;
1676
1677         hw->sta_data_size = sizeof(struct iwl_station_priv);
1678         hw->vif_data_size = sizeof(struct iwl_vif_priv);
1679
1680         for_each_context(priv, ctx) {
1681                 hw->wiphy->interface_modes |= ctx->interface_modes;
1682                 hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
1683         }
1684
1685         BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
1686
1687         if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)) {
1688                 hw->wiphy->iface_combinations = iwlagn_iface_combinations_p2p;
1689                 hw->wiphy->n_iface_combinations =
1690                         ARRAY_SIZE(iwlagn_iface_combinations_p2p);
1691         } else if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
1692                 hw->wiphy->iface_combinations = iwlagn_iface_combinations_dualmode;
1693                 hw->wiphy->n_iface_combinations =
1694                         ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
1695         }
1696
1697         hw->wiphy->max_remain_on_channel_duration = 1000;
1698
1699         hw->wiphy->flags |= WIPHY_FLAG_CUSTOM_REGULATORY |
1700                             WIPHY_FLAG_DISABLE_BEACON_HINTS |
1701                             WIPHY_FLAG_IBSS_RSN;
1702
1703 #ifdef CONFIG_PM_SLEEP
1704         if (priv->ucode_wowlan.code.len && device_can_wakeup(bus(priv)->dev)) {
1705                 hw->wiphy->wowlan.flags = WIPHY_WOWLAN_MAGIC_PKT |
1706                                           WIPHY_WOWLAN_DISCONNECT |
1707                                           WIPHY_WOWLAN_EAP_IDENTITY_REQ |
1708                                           WIPHY_WOWLAN_RFKILL_RELEASE;
1709                 if (!iwlagn_mod_params.sw_crypto)
1710                         hw->wiphy->wowlan.flags |=
1711                                 WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
1712                                 WIPHY_WOWLAN_GTK_REKEY_FAILURE;
1713
1714                 hw->wiphy->wowlan.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
1715                 hw->wiphy->wowlan.pattern_min_len =
1716                                         IWLAGN_WOWLAN_MIN_PATTERN_LEN;
1717                 hw->wiphy->wowlan.pattern_max_len =
1718                                         IWLAGN_WOWLAN_MAX_PATTERN_LEN;
1719         }
1720 #endif
1721
1722         if (iwlagn_mod_params.power_save)
1723                 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
1724         else
1725                 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
1726
1727         hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
1728         /* we create the 802.11 header and a zero-length SSID element */
1729         hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 2;
1730
1731         /* Default value; 4 EDCA QOS priorities */
1732         hw->queues = 4;
1733
1734         hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
1735
1736         if (priv->bands[IEEE80211_BAND_2GHZ].n_channels)
1737                 priv->hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
1738                         &priv->bands[IEEE80211_BAND_2GHZ];
1739         if (priv->bands[IEEE80211_BAND_5GHZ].n_channels)
1740                 priv->hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
1741                         &priv->bands[IEEE80211_BAND_5GHZ];
1742
1743         iwl_leds_init(priv);
1744
1745         ret = ieee80211_register_hw(priv->hw);
1746         if (ret) {
1747                 IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
1748                 iwl_leds_exit(priv);
1749                 return ret;
1750         }
1751         priv->mac80211_registered = 1;
1752
1753         return 0;
1754 }
1755
1756
1757 static int iwlagn_mac_start(struct ieee80211_hw *hw)
1758 {
1759         struct iwl_priv *priv = hw->priv;
1760         int ret;
1761
1762         IWL_DEBUG_MAC80211(priv, "enter\n");
1763
1764         /* we should be verifying the device is ready to be opened */
1765         mutex_lock(&priv->shrd->mutex);
1766         ret = __iwl_up(priv);
1767         mutex_unlock(&priv->shrd->mutex);
1768         if (ret)
1769                 return ret;
1770
1771         IWL_DEBUG_INFO(priv, "Start UP work done.\n");
1772
1773         /* Now we should be done, and the READY bit should be set. */
1774         if (WARN_ON(!test_bit(STATUS_READY, &priv->shrd->status)))
1775                 ret = -EIO;
1776
1777         iwlagn_led_enable(priv);
1778
1779         priv->is_open = 1;
1780         IWL_DEBUG_MAC80211(priv, "leave\n");
1781         return 0;
1782 }
1783
1784 static void iwlagn_mac_stop(struct ieee80211_hw *hw)
1785 {
1786         struct iwl_priv *priv = hw->priv;
1787
1788         IWL_DEBUG_MAC80211(priv, "enter\n");
1789
1790         if (!priv->is_open)
1791                 return;
1792
1793         priv->is_open = 0;
1794
1795         iwl_down(priv);
1796
1797         flush_workqueue(priv->shrd->workqueue);
1798
1799         /* User space software may expect getting rfkill changes
1800          * even if interface is down */
1801         iwl_write32(bus(priv), CSR_INT, 0xFFFFFFFF);
1802         iwl_enable_rfkill_int(priv);
1803
1804         IWL_DEBUG_MAC80211(priv, "leave\n");
1805 }
1806
1807 #ifdef CONFIG_PM_SLEEP
1808 static int iwlagn_send_patterns(struct iwl_priv *priv,
1809                                 struct cfg80211_wowlan *wowlan)
1810 {
1811         struct iwlagn_wowlan_patterns_cmd *pattern_cmd;
1812         struct iwl_host_cmd cmd = {
1813                 .id = REPLY_WOWLAN_PATTERNS,
1814                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
1815                 .flags = CMD_SYNC,
1816         };
1817         int i, err;
1818
1819         if (!wowlan->n_patterns)
1820                 return 0;
1821
1822         cmd.len[0] = sizeof(*pattern_cmd) +
1823                         wowlan->n_patterns * sizeof(struct iwlagn_wowlan_pattern);
1824
1825         pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL);
1826         if (!pattern_cmd)
1827                 return -ENOMEM;
1828
1829         pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns);
1830
1831         for (i = 0; i < wowlan->n_patterns; i++) {
1832                 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8);
1833
1834                 memcpy(&pattern_cmd->patterns[i].mask,
1835                         wowlan->patterns[i].mask, mask_len);
1836                 memcpy(&pattern_cmd->patterns[i].pattern,
1837                         wowlan->patterns[i].pattern,
1838                         wowlan->patterns[i].pattern_len);
1839                 pattern_cmd->patterns[i].mask_size = mask_len;
1840                 pattern_cmd->patterns[i].pattern_size =
1841                         wowlan->patterns[i].pattern_len;
1842         }
1843
1844         cmd.data[0] = pattern_cmd;
1845         err = iwl_trans_send_cmd(trans(priv), &cmd);
1846         kfree(pattern_cmd);
1847         return err;
1848 }
1849 #endif
1850
1851 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
1852                                       struct ieee80211_vif *vif,
1853                                       struct cfg80211_gtk_rekey_data *data)
1854 {
1855         struct iwl_priv *priv = hw->priv;
1856
1857         if (iwlagn_mod_params.sw_crypto)
1858                 return;
1859
1860         IWL_DEBUG_MAC80211(priv, "enter\n");
1861         mutex_lock(&priv->shrd->mutex);
1862
1863         if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
1864                 goto out;
1865
1866         memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
1867         memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
1868         priv->replay_ctr = cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
1869         priv->have_rekey_data = true;
1870
1871  out:
1872         mutex_unlock(&priv->shrd->mutex);
1873         IWL_DEBUG_MAC80211(priv, "leave\n");
1874 }
1875
1876 struct wowlan_key_data {
1877         struct iwl_rxon_context *ctx;
1878         struct iwlagn_wowlan_rsc_tsc_params_cmd *rsc_tsc;
1879         struct iwlagn_wowlan_tkip_params_cmd *tkip;
1880         const u8 *bssid;
1881         bool error, use_rsc_tsc, use_tkip;
1882 };
1883
1884 #ifdef CONFIG_PM_SLEEP
1885 static void iwlagn_convert_p1k(u16 *p1k, __le16 *out)
1886 {
1887         int i;
1888
1889         for (i = 0; i < IWLAGN_P1K_SIZE; i++)
1890                 out[i] = cpu_to_le16(p1k[i]);
1891 }
1892
1893 static void iwlagn_wowlan_program_keys(struct ieee80211_hw *hw,
1894                                        struct ieee80211_vif *vif,
1895                                        struct ieee80211_sta *sta,
1896                                        struct ieee80211_key_conf *key,
1897                                        void *_data)
1898 {
1899         struct iwl_priv *priv = hw->priv;
1900         struct wowlan_key_data *data = _data;
1901         struct iwl_rxon_context *ctx = data->ctx;
1902         struct aes_sc *aes_sc, *aes_tx_sc = NULL;
1903         struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL;
1904         struct iwlagn_p1k_cache *rx_p1ks;
1905         u8 *rx_mic_key;
1906         struct ieee80211_key_seq seq;
1907         u32 cur_rx_iv32 = 0;
1908         u16 p1k[IWLAGN_P1K_SIZE];
1909         int ret, i;
1910
1911         mutex_lock(&priv->shrd->mutex);
1912
1913         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
1914              key->cipher == WLAN_CIPHER_SUITE_WEP104) &&
1915              !sta && !ctx->key_mapping_keys)
1916                 ret = iwl_set_default_wep_key(priv, ctx, key);
1917         else
1918                 ret = iwl_set_dynamic_key(priv, ctx, key, sta);
1919
1920         if (ret) {
1921                 IWL_ERR(priv, "Error setting key during suspend!\n");
1922                 data->error = true;
1923         }
1924
1925         switch (key->cipher) {
1926         case WLAN_CIPHER_SUITE_TKIP:
1927                 if (sta) {
1928                         tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.unicast_rsc;
1929                         tkip_tx_sc = &data->rsc_tsc->all_tsc_rsc.tkip.tsc;
1930
1931                         rx_p1ks = data->tkip->rx_uni;
1932
1933                         ieee80211_get_key_tx_seq(key, &seq);
1934                         tkip_tx_sc->iv16 = cpu_to_le16(seq.tkip.iv16);
1935                         tkip_tx_sc->iv32 = cpu_to_le32(seq.tkip.iv32);
1936
1937                         ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
1938                         iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
1939
1940                         memcpy(data->tkip->mic_keys.tx,
1941                                &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY],
1942                                IWLAGN_MIC_KEY_SIZE);
1943
1944                         rx_mic_key = data->tkip->mic_keys.rx_unicast;
1945                 } else {
1946                         tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.multicast_rsc;
1947                         rx_p1ks = data->tkip->rx_multi;
1948                         rx_mic_key = data->tkip->mic_keys.rx_mcast;
1949                 }
1950
1951                 /*
1952                  * For non-QoS this relies on the fact that both the uCode and
1953                  * mac80211 use TID 0 (as they need to to avoid replay attacks)
1954                  * for checking the IV in the frames.
1955                  */
1956                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
1957                         ieee80211_get_key_rx_seq(key, i, &seq);
1958                         tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16);
1959                         tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32);
1960                         /* wrapping isn't allowed, AP must rekey */
1961                         if (seq.tkip.iv32 > cur_rx_iv32)
1962                                 cur_rx_iv32 = seq.tkip.iv32;
1963                 }
1964
1965                 ieee80211_get_tkip_rx_p1k(key, data->bssid, cur_rx_iv32, p1k);
1966                 iwlagn_convert_p1k(p1k, rx_p1ks[0].p1k);
1967                 ieee80211_get_tkip_rx_p1k(key, data->bssid,
1968                                           cur_rx_iv32 + 1, p1k);
1969                 iwlagn_convert_p1k(p1k, rx_p1ks[1].p1k);
1970
1971                 memcpy(rx_mic_key,
1972                        &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY],
1973                        IWLAGN_MIC_KEY_SIZE);
1974
1975                 data->use_tkip = true;
1976                 data->use_rsc_tsc = true;
1977                 break;
1978         case WLAN_CIPHER_SUITE_CCMP:
1979                 if (sta) {
1980                         u8 *pn = seq.ccmp.pn;
1981
1982                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.unicast_rsc;
1983                         aes_tx_sc = &data->rsc_tsc->all_tsc_rsc.aes.tsc;
1984
1985                         ieee80211_get_key_tx_seq(key, &seq);
1986                         aes_tx_sc->pn = cpu_to_le64(
1987                                         (u64)pn[5] |
1988                                         ((u64)pn[4] << 8) |
1989                                         ((u64)pn[3] << 16) |
1990                                         ((u64)pn[2] << 24) |
1991                                         ((u64)pn[1] << 32) |
1992                                         ((u64)pn[0] << 40));
1993                 } else
1994                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.multicast_rsc;
1995
1996                 /*
1997                  * For non-QoS this relies on the fact that both the uCode and
1998                  * mac80211 use TID 0 for checking the IV in the frames.
1999                  */
2000                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
2001                         u8 *pn = seq.ccmp.pn;
2002
2003                         ieee80211_get_key_rx_seq(key, i, &seq);
2004                         aes_sc->pn = cpu_to_le64(
2005                                         (u64)pn[5] |
2006                                         ((u64)pn[4] << 8) |
2007                                         ((u64)pn[3] << 16) |
2008                                         ((u64)pn[2] << 24) |
2009                                         ((u64)pn[1] << 32) |
2010                                         ((u64)pn[0] << 40));
2011                 }
2012                 data->use_rsc_tsc = true;
2013                 break;
2014         }
2015
2016         mutex_unlock(&priv->shrd->mutex);
2017 }
2018
2019 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
2020                               struct cfg80211_wowlan *wowlan)
2021 {
2022         struct iwl_priv *priv = hw->priv;
2023         struct iwlagn_wowlan_wakeup_filter_cmd wakeup_filter_cmd;
2024         struct iwl_rxon_cmd rxon;
2025         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2026         struct iwlagn_wowlan_kek_kck_material_cmd kek_kck_cmd;
2027         struct iwlagn_wowlan_tkip_params_cmd tkip_cmd = {};
2028         struct wowlan_key_data key_data = {
2029                 .ctx = ctx,
2030                 .bssid = ctx->active.bssid_addr,
2031                 .use_rsc_tsc = false,
2032                 .tkip = &tkip_cmd,
2033                 .use_tkip = false,
2034         };
2035         int ret, i;
2036         u16 seq;
2037
2038         if (WARN_ON(!wowlan))
2039                 return -EINVAL;
2040
2041         IWL_DEBUG_MAC80211(priv, "enter\n");
2042         mutex_lock(&priv->shrd->mutex);
2043
2044         /* Don't attempt WoWLAN when not associated, tear down instead. */
2045         if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
2046             !iwl_is_associated_ctx(ctx)) {
2047                 ret = 1;
2048                 goto out;
2049         }
2050
2051         key_data.rsc_tsc = kzalloc(sizeof(*key_data.rsc_tsc), GFP_KERNEL);
2052         if (!key_data.rsc_tsc) {
2053                 ret = -ENOMEM;
2054                 goto out;
2055         }
2056
2057         memset(&wakeup_filter_cmd, 0, sizeof(wakeup_filter_cmd));
2058
2059         /*
2060          * We know the last used seqno, and the uCode expects to know that
2061          * one, it will increment before TX.
2062          */
2063         seq = le16_to_cpu(priv->last_seq_ctl) & IEEE80211_SCTL_SEQ;
2064         wakeup_filter_cmd.non_qos_seq = cpu_to_le16(seq);
2065
2066         /*
2067          * For QoS counters, we store the one to use next, so subtract 0x10
2068          * since the uCode will add 0x10 before using the value.
2069          */
2070         for (i = 0; i < 8; i++) {
2071                 seq = priv->shrd->tid_data[IWL_AP_ID][i].seq_number;
2072                 seq -= 0x10;
2073                 wakeup_filter_cmd.qos_seq[i] = cpu_to_le16(seq);
2074         }
2075
2076         if (wowlan->disconnect)
2077                 wakeup_filter_cmd.enabled |=
2078                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
2079                                     IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE);
2080         if (wowlan->magic_pkt)
2081                 wakeup_filter_cmd.enabled |=
2082                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET);
2083         if (wowlan->gtk_rekey_failure)
2084                 wakeup_filter_cmd.enabled |=
2085                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL);
2086         if (wowlan->eap_identity_req)
2087                 wakeup_filter_cmd.enabled |=
2088                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ);
2089         if (wowlan->four_way_handshake)
2090                 wakeup_filter_cmd.enabled |=
2091                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE);
2092         if (wowlan->rfkill_release)
2093                 wakeup_filter_cmd.enabled |=
2094                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_RFKILL);
2095         if (wowlan->n_patterns)
2096                 wakeup_filter_cmd.enabled |=
2097                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH);
2098
2099         iwl_scan_cancel_timeout(priv, 200);
2100
2101         memcpy(&rxon, &ctx->active, sizeof(rxon));
2102
2103         iwl_trans_stop_device(trans(priv));
2104
2105         priv->shrd->wowlan = true;
2106
2107         ret = iwlagn_load_ucode_wait_alive(priv, &priv->ucode_wowlan,
2108                                            IWL_UCODE_WOWLAN);
2109         if (ret)
2110                 goto error;
2111
2112         /* now configure WoWLAN ucode */
2113         ret = iwl_alive_start(priv);
2114         if (ret)
2115                 goto error;
2116
2117         memcpy(&ctx->staging, &rxon, sizeof(rxon));
2118         ret = iwlagn_commit_rxon(priv, ctx);
2119         if (ret)
2120                 goto error;
2121
2122         ret = iwl_power_update_mode(priv, true);
2123         if (ret)
2124                 goto error;
2125
2126         if (!iwlagn_mod_params.sw_crypto) {
2127                 /* mark all keys clear */
2128                 priv->ucode_key_table = 0;
2129                 ctx->key_mapping_keys = 0;
2130
2131                 /*
2132                  * This needs to be unlocked due to lock ordering
2133                  * constraints. Since we're in the suspend path
2134                  * that isn't really a problem though.
2135                  */
2136                 mutex_unlock(&priv->shrd->mutex);
2137                 ieee80211_iter_keys(priv->hw, ctx->vif,
2138                                     iwlagn_wowlan_program_keys,
2139                                     &key_data);
2140                 mutex_lock(&priv->shrd->mutex);
2141                 if (key_data.error) {
2142                         ret = -EIO;
2143                         goto error;
2144                 }
2145
2146                 if (key_data.use_rsc_tsc) {
2147                         struct iwl_host_cmd rsc_tsc_cmd = {
2148                                 .id = REPLY_WOWLAN_TSC_RSC_PARAMS,
2149                                 .flags = CMD_SYNC,
2150                                 .data[0] = key_data.rsc_tsc,
2151                                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
2152                                 .len[0] = sizeof(*key_data.rsc_tsc),
2153                         };
2154
2155                         ret = iwl_trans_send_cmd(trans(priv), &rsc_tsc_cmd);
2156                         if (ret)
2157                                 goto error;
2158                 }
2159
2160                 if (key_data.use_tkip) {
2161                         ret = iwl_trans_send_cmd_pdu(trans(priv),
2162                                                  REPLY_WOWLAN_TKIP_PARAMS,
2163                                                  CMD_SYNC, sizeof(tkip_cmd),
2164                                                  &tkip_cmd);
2165                         if (ret)
2166                                 goto error;
2167                 }
2168
2169                 if (priv->have_rekey_data) {
2170                         memset(&kek_kck_cmd, 0, sizeof(kek_kck_cmd));
2171                         memcpy(kek_kck_cmd.kck, priv->kck, NL80211_KCK_LEN);
2172                         kek_kck_cmd.kck_len = cpu_to_le16(NL80211_KCK_LEN);
2173                         memcpy(kek_kck_cmd.kek, priv->kek, NL80211_KEK_LEN);
2174                         kek_kck_cmd.kek_len = cpu_to_le16(NL80211_KEK_LEN);
2175                         kek_kck_cmd.replay_ctr = priv->replay_ctr;
2176
2177                         ret = iwl_trans_send_cmd_pdu(trans(priv),
2178                                                  REPLY_WOWLAN_KEK_KCK_MATERIAL,
2179                                                  CMD_SYNC, sizeof(kek_kck_cmd),
2180                                                  &kek_kck_cmd);
2181                         if (ret)
2182                                 goto error;
2183                 }
2184         }
2185
2186         ret = iwl_trans_send_cmd_pdu(trans(priv), REPLY_WOWLAN_WAKEUP_FILTER,
2187                                  CMD_SYNC, sizeof(wakeup_filter_cmd),
2188                                  &wakeup_filter_cmd);
2189         if (ret)
2190                 goto error;
2191
2192         ret = iwlagn_send_patterns(priv, wowlan);
2193         if (ret)
2194                 goto error;
2195
2196         device_set_wakeup_enable(bus(priv)->dev, true);
2197
2198         /* Now let the ucode operate on its own */
2199         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_SET,
2200                           CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
2201
2202         goto out;
2203
2204  error:
2205         priv->shrd->wowlan = false;
2206         iwlagn_prepare_restart(priv);
2207         ieee80211_restart_hw(priv->hw);
2208  out:
2209         mutex_unlock(&priv->shrd->mutex);
2210         kfree(key_data.rsc_tsc);
2211         IWL_DEBUG_MAC80211(priv, "leave\n");
2212
2213         return ret;
2214 }
2215
2216 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
2217 {
2218         struct iwl_priv *priv = hw->priv;
2219         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2220         struct ieee80211_vif *vif;
2221         unsigned long flags;
2222         u32 base, status = 0xffffffff;
2223         int ret = -EIO;
2224
2225         IWL_DEBUG_MAC80211(priv, "enter\n");
2226         mutex_lock(&priv->shrd->mutex);
2227
2228         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_CLR,
2229                           CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
2230
2231         base = priv->device_pointers.error_event_table;
2232         if (iwlagn_hw_valid_rtc_data_addr(base)) {
2233                 spin_lock_irqsave(&bus(priv)->reg_lock, flags);
2234                 ret = iwl_grab_nic_access_silent(bus(priv));
2235                 if (ret == 0) {
2236                         iwl_write32(bus(priv), HBUS_TARG_MEM_RADDR, base);
2237                         status = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
2238                         iwl_release_nic_access(bus(priv));
2239                 }
2240                 spin_unlock_irqrestore(&bus(priv)->reg_lock, flags);
2241
2242 #ifdef CONFIG_IWLWIFI_DEBUGFS
2243                 if (ret == 0) {
2244                         if (!priv->wowlan_sram)
2245                                 priv->wowlan_sram =
2246                                         kzalloc(priv->ucode_wowlan.data.len,
2247                                                 GFP_KERNEL);
2248
2249                         if (priv->wowlan_sram)
2250                                 _iwl_read_targ_mem_words(
2251                                         bus(priv), 0x800000, priv->wowlan_sram,
2252                                         priv->ucode_wowlan.data.len / 4);
2253                 }
2254 #endif
2255         }
2256
2257         /* we'll clear ctx->vif during iwlagn_prepare_restart() */
2258         vif = ctx->vif;
2259
2260         priv->shrd->wowlan = false;
2261
2262         device_set_wakeup_enable(bus(priv)->dev, false);
2263
2264         iwlagn_prepare_restart(priv);
2265
2266         memset((void *)&ctx->active, 0, sizeof(ctx->active));
2267         iwl_connection_init_rx_config(priv, ctx);
2268         iwlagn_set_rxon_chain(priv, ctx);
2269
2270         mutex_unlock(&priv->shrd->mutex);
2271         IWL_DEBUG_MAC80211(priv, "leave\n");
2272
2273         ieee80211_resume_disconnect(vif);
2274
2275         return 1;
2276 }
2277 #endif
2278
2279 static void iwlagn_mac_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
2280 {
2281         struct iwl_priv *priv = hw->priv;
2282
2283         IWL_DEBUG_MACDUMP(priv, "enter\n");
2284
2285         IWL_DEBUG_TX(priv, "dev->xmit(%d bytes) at rate 0x%02x\n", skb->len,
2286                      ieee80211_get_tx_rate(hw, IEEE80211_SKB_CB(skb))->bitrate);
2287
2288         if (iwlagn_tx_skb(priv, skb))
2289                 dev_kfree_skb_any(skb);
2290
2291         IWL_DEBUG_MACDUMP(priv, "leave\n");
2292 }
2293
2294 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
2295                                        struct ieee80211_vif *vif,
2296                                        struct ieee80211_key_conf *keyconf,
2297                                        struct ieee80211_sta *sta,
2298                                        u32 iv32, u16 *phase1key)
2299 {
2300         struct iwl_priv *priv = hw->priv;
2301
2302         iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
2303 }
2304
2305 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
2306                               struct ieee80211_vif *vif,
2307                               struct ieee80211_sta *sta,
2308                               struct ieee80211_key_conf *key)
2309 {
2310         struct iwl_priv *priv = hw->priv;
2311         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2312         struct iwl_rxon_context *ctx = vif_priv->ctx;
2313         int ret;
2314         bool is_default_wep_key = false;
2315
2316         IWL_DEBUG_MAC80211(priv, "enter\n");
2317
2318         if (iwlagn_mod_params.sw_crypto) {
2319                 IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
2320                 return -EOPNOTSUPP;
2321         }
2322
2323         switch (key->cipher) {
2324         case WLAN_CIPHER_SUITE_TKIP:
2325                 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
2326                 /* fall through */
2327         case WLAN_CIPHER_SUITE_CCMP:
2328                 key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
2329                 break;
2330         default:
2331                 break;
2332         }
2333
2334         /*
2335          * We could program these keys into the hardware as well, but we
2336          * don't expect much multicast traffic in IBSS and having keys
2337          * for more stations is probably more useful.
2338          *
2339          * Mark key TX-only and return 0.
2340          */
2341         if (vif->type == NL80211_IFTYPE_ADHOC &&
2342             !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
2343                 key->hw_key_idx = WEP_INVALID_OFFSET;
2344                 return 0;
2345         }
2346
2347         /* If they key was TX-only, accept deletion */
2348         if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
2349                 return 0;
2350
2351         mutex_lock(&priv->shrd->mutex);
2352         iwl_scan_cancel_timeout(priv, 100);
2353
2354         BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
2355
2356         /*
2357          * If we are getting WEP group key and we didn't receive any key mapping
2358          * so far, we are in legacy wep mode (group key only), otherwise we are
2359          * in 1X mode.
2360          * In legacy wep mode, we use another host command to the uCode.
2361          */
2362         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
2363              key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
2364                 if (cmd == SET_KEY)
2365                         is_default_wep_key = !ctx->key_mapping_keys;
2366                 else
2367                         is_default_wep_key =
2368                                 key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
2369         }
2370
2371
2372         switch (cmd) {
2373         case SET_KEY:
2374                 if (is_default_wep_key) {
2375                         ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
2376                         break;
2377                 }
2378                 ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
2379                 if (ret) {
2380                         /*
2381                          * can't add key for RX, but we don't need it
2382                          * in the device for TX so still return 0
2383                          */
2384                         ret = 0;
2385                         key->hw_key_idx = WEP_INVALID_OFFSET;
2386                 }
2387
2388                 IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
2389                 break;
2390         case DISABLE_KEY:
2391                 if (is_default_wep_key)
2392                         ret = iwl_remove_default_wep_key(priv, ctx, key);
2393                 else
2394                         ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
2395
2396                 IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
2397                 break;
2398         default:
2399                 ret = -EINVAL;
2400         }
2401
2402         mutex_unlock(&priv->shrd->mutex);
2403         IWL_DEBUG_MAC80211(priv, "leave\n");
2404
2405         return ret;
2406 }
2407
2408 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
2409                                    struct ieee80211_vif *vif,
2410                                    enum ieee80211_ampdu_mlme_action action,
2411                                    struct ieee80211_sta *sta, u16 tid, u16 *ssn,
2412                                    u8 buf_size)
2413 {
2414         struct iwl_priv *priv = hw->priv;
2415         int ret = -EINVAL;
2416         struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
2417         struct iwl_rxon_context *ctx =  iwl_rxon_ctx_from_vif(vif);
2418
2419         IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
2420                      sta->addr, tid);
2421
2422         if (!(priv->cfg->sku & EEPROM_SKU_CAP_11N_ENABLE))
2423                 return -EACCES;
2424
2425         IWL_DEBUG_MAC80211(priv, "enter\n");
2426         mutex_lock(&priv->shrd->mutex);
2427
2428         switch (action) {
2429         case IEEE80211_AMPDU_RX_START:
2430                 IWL_DEBUG_HT(priv, "start Rx\n");
2431                 ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
2432                 break;
2433         case IEEE80211_AMPDU_RX_STOP:
2434                 IWL_DEBUG_HT(priv, "stop Rx\n");
2435                 ret = iwl_sta_rx_agg_stop(priv, sta, tid);
2436                 if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
2437                         ret = 0;
2438                 break;
2439         case IEEE80211_AMPDU_TX_START:
2440                 IWL_DEBUG_HT(priv, "start Tx\n");
2441                 ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
2442                 break;
2443         case IEEE80211_AMPDU_TX_STOP:
2444                 IWL_DEBUG_HT(priv, "stop Tx\n");
2445                 ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
2446                 if ((ret == 0) && (priv->agg_tids_count > 0)) {
2447                         priv->agg_tids_count--;
2448                         IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
2449                                      priv->agg_tids_count);
2450                 }
2451                 if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
2452                         ret = 0;
2453                 if (!priv->agg_tids_count && priv->cfg->ht_params &&
2454                     priv->cfg->ht_params->use_rts_for_aggregation) {
2455                         /*
2456                          * switch off RTS/CTS if it was previously enabled
2457                          */
2458                         sta_priv->lq_sta.lq.general_params.flags &=
2459                                 ~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
2460                         iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
2461                                         &sta_priv->lq_sta.lq, CMD_ASYNC, false);
2462                 }
2463                 break;
2464         case IEEE80211_AMPDU_TX_OPERATIONAL:
2465                 buf_size = min_t(int, buf_size, LINK_QUAL_AGG_FRAME_LIMIT_DEF);
2466
2467                 iwl_trans_tx_agg_setup(trans(priv), ctx->ctxid, iwl_sta_id(sta),
2468                                 tid, buf_size);
2469
2470                 /*
2471                  * If the limit is 0, then it wasn't initialised yet,
2472                  * use the default. We can do that since we take the
2473                  * minimum below, and we don't want to go above our
2474                  * default due to hardware restrictions.
2475                  */
2476                 if (sta_priv->max_agg_bufsize == 0)
2477                         sta_priv->max_agg_bufsize =
2478                                 LINK_QUAL_AGG_FRAME_LIMIT_DEF;
2479
2480                 /*
2481                  * Even though in theory the peer could have different
2482                  * aggregation reorder buffer sizes for different sessions,
2483                  * our ucode doesn't allow for that and has a global limit
2484                  * for each station. Therefore, use the minimum of all the
2485                  * aggregation sessions and our default value.
2486                  */
2487                 sta_priv->max_agg_bufsize =
2488                         min(sta_priv->max_agg_bufsize, buf_size);
2489
2490                 if (priv->cfg->ht_params &&
2491                     priv->cfg->ht_params->use_rts_for_aggregation) {
2492                         /*
2493                          * switch to RTS/CTS if it is the prefer protection
2494                          * method for HT traffic
2495                          */
2496
2497                         sta_priv->lq_sta.lq.general_params.flags |=
2498                                 LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
2499                 }
2500                 priv->agg_tids_count++;
2501                 IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
2502                              priv->agg_tids_count);
2503
2504                 sta_priv->lq_sta.lq.agg_params.agg_frame_cnt_limit =
2505                         sta_priv->max_agg_bufsize;
2506
2507                 iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
2508                                 &sta_priv->lq_sta.lq, CMD_ASYNC, false);
2509
2510                 IWL_INFO(priv, "Tx aggregation enabled on ra = %pM tid = %d\n",
2511                          sta->addr, tid);
2512                 ret = 0;
2513                 break;
2514         }
2515         mutex_unlock(&priv->shrd->mutex);
2516         IWL_DEBUG_MAC80211(priv, "leave\n");
2517         return ret;
2518 }
2519
2520 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
2521                               struct ieee80211_vif *vif,
2522                               struct ieee80211_sta *sta)
2523 {
2524         struct iwl_priv *priv = hw->priv;
2525         struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
2526         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2527         bool is_ap = vif->type == NL80211_IFTYPE_STATION;
2528         int ret = 0;
2529         u8 sta_id;
2530
2531         IWL_DEBUG_MAC80211(priv, "received request to add station %pM\n",
2532                         sta->addr);
2533         mutex_lock(&priv->shrd->mutex);
2534         IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
2535                         sta->addr);
2536         sta_priv->sta_id = IWL_INVALID_STATION;
2537
2538         atomic_set(&sta_priv->pending_frames, 0);
2539         if (vif->type == NL80211_IFTYPE_AP)
2540                 sta_priv->client = true;
2541
2542         ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
2543                                      is_ap, sta, &sta_id);
2544         if (ret) {
2545                 IWL_ERR(priv, "Unable to add station %pM (%d)\n",
2546                         sta->addr, ret);
2547                 /* Should we return success if return code is EEXIST ? */
2548                 goto out;
2549         }
2550
2551         sta_priv->sta_id = sta_id;
2552
2553         /* Initialize rate scaling */
2554         IWL_DEBUG_INFO(priv, "Initializing rate scaling for station %pM\n",
2555                        sta->addr);
2556         iwl_rs_rate_init(priv, sta, sta_id);
2557  out:
2558         mutex_unlock(&priv->shrd->mutex);
2559         IWL_DEBUG_MAC80211(priv, "leave\n");
2560
2561         return ret;
2562 }
2563
2564 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
2565                                 struct ieee80211_channel_switch *ch_switch)
2566 {
2567         struct iwl_priv *priv = hw->priv;
2568         const struct iwl_channel_info *ch_info;
2569         struct ieee80211_conf *conf = &hw->conf;
2570         struct ieee80211_channel *channel = ch_switch->channel;
2571         struct iwl_ht_config *ht_conf = &priv->current_ht_config;
2572         /*
2573          * MULTI-FIXME
2574          * When we add support for multiple interfaces, we need to
2575          * revisit this. The channel switch command in the device
2576          * only affects the BSS context, but what does that really
2577          * mean? And what if we get a CSA on the second interface?
2578          * This needs a lot of work.
2579          */
2580         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2581         u16 ch;
2582
2583         IWL_DEBUG_MAC80211(priv, "enter\n");
2584
2585         mutex_lock(&priv->shrd->mutex);
2586
2587         if (iwl_is_rfkill(priv->shrd))
2588                 goto out;
2589
2590         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) ||
2591             test_bit(STATUS_SCANNING, &priv->shrd->status) ||
2592             test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status))
2593                 goto out;
2594
2595         if (!iwl_is_associated_ctx(ctx))
2596                 goto out;
2597
2598         if (!priv->cfg->lib->set_channel_switch)
2599                 goto out;
2600
2601         ch = channel->hw_value;
2602         if (le16_to_cpu(ctx->active.channel) == ch)
2603                 goto out;
2604
2605         ch_info = iwl_get_channel_info(priv, channel->band, ch);
2606         if (!is_channel_valid(ch_info)) {
2607                 IWL_DEBUG_MAC80211(priv, "invalid channel\n");
2608                 goto out;
2609         }
2610
2611         spin_lock_irq(&priv->shrd->lock);
2612
2613         priv->current_ht_config.smps = conf->smps_mode;
2614
2615         /* Configure HT40 channels */
2616         ctx->ht.enabled = conf_is_ht(conf);
2617         if (ctx->ht.enabled)
2618                 iwlagn_config_ht40(conf, ctx);
2619         else
2620                 ctx->ht.is_40mhz = false;
2621
2622         if ((le16_to_cpu(ctx->staging.channel) != ch))
2623                 ctx->staging.flags = 0;
2624
2625         iwl_set_rxon_channel(priv, channel, ctx);
2626         iwl_set_rxon_ht(priv, ht_conf);
2627         iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
2628
2629         spin_unlock_irq(&priv->shrd->lock);
2630
2631         iwl_set_rate(priv);
2632         /*
2633          * at this point, staging_rxon has the
2634          * configuration for channel switch
2635          */
2636         set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status);
2637         priv->switch_channel = cpu_to_le16(ch);
2638         if (priv->cfg->lib->set_channel_switch(priv, ch_switch)) {
2639                 clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status);
2640                 priv->switch_channel = 0;
2641                 ieee80211_chswitch_done(ctx->vif, false);
2642         }
2643
2644 out:
2645         mutex_unlock(&priv->shrd->mutex);
2646         IWL_DEBUG_MAC80211(priv, "leave\n");
2647 }
2648
2649 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
2650                                     unsigned int changed_flags,
2651                                     unsigned int *total_flags,
2652                                     u64 multicast)
2653 {
2654         struct iwl_priv *priv = hw->priv;
2655         __le32 filter_or = 0, filter_nand = 0;
2656         struct iwl_rxon_context *ctx;
2657
2658 #define CHK(test, flag) do { \
2659         if (*total_flags & (test))              \
2660                 filter_or |= (flag);            \
2661         else                                    \
2662                 filter_nand |= (flag);          \
2663         } while (0)
2664
2665         IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
2666                         changed_flags, *total_flags);
2667
2668         CHK(FIF_OTHER_BSS | FIF_PROMISC_IN_BSS, RXON_FILTER_PROMISC_MSK);
2669         /* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
2670         CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
2671         CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
2672
2673 #undef CHK
2674
2675         mutex_lock(&priv->shrd->mutex);
2676
2677         for_each_context(priv, ctx) {
2678                 ctx->staging.filter_flags &= ~filter_nand;
2679                 ctx->staging.filter_flags |= filter_or;
2680
2681                 /*
2682                  * Not committing directly because hardware can perform a scan,
2683                  * but we'll eventually commit the filter flags change anyway.
2684                  */
2685         }
2686
2687         mutex_unlock(&priv->shrd->mutex);
2688
2689         /*
2690          * Receiving all multicast frames is always enabled by the
2691          * default flags setup in iwl_connection_init_rx_config()
2692          * since we currently do not support programming multicast
2693          * filters into the device.
2694          */
2695         *total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI | FIF_PROMISC_IN_BSS |
2696                         FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
2697 }
2698
2699 static void iwlagn_mac_flush(struct ieee80211_hw *hw, bool drop)
2700 {
2701         struct iwl_priv *priv = hw->priv;
2702
2703         mutex_lock(&priv->shrd->mutex);
2704         IWL_DEBUG_MAC80211(priv, "enter\n");
2705
2706         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status)) {
2707                 IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
2708                 goto done;
2709         }
2710         if (iwl_is_rfkill(priv->shrd)) {
2711                 IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
2712                 goto done;
2713         }
2714
2715         /*
2716          * mac80211 will not push any more frames for transmit
2717          * until the flush is completed
2718          */
2719         if (drop) {
2720                 IWL_DEBUG_MAC80211(priv, "send flush command\n");
2721                 if (iwlagn_txfifo_flush(priv, IWL_DROP_ALL)) {
2722                         IWL_ERR(priv, "flush request fail\n");
2723                         goto done;
2724                 }
2725         }
2726         IWL_DEBUG_MAC80211(priv, "wait transmit/flush all frames\n");
2727         iwl_trans_wait_tx_queue_empty(trans(priv));
2728 done:
2729         mutex_unlock(&priv->shrd->mutex);
2730         IWL_DEBUG_MAC80211(priv, "leave\n");
2731 }
2732
2733 void iwlagn_disable_roc(struct iwl_priv *priv)
2734 {
2735         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_PAN];
2736
2737         lockdep_assert_held(&priv->shrd->mutex);
2738
2739         if (!priv->hw_roc_setup)
2740                 return;
2741
2742         ctx->staging.dev_type = RXON_DEV_TYPE_P2P;
2743         ctx->staging.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
2744
2745         priv->hw_roc_channel = NULL;
2746
2747         memset(ctx->staging.node_addr, 0, ETH_ALEN);
2748
2749         iwlagn_commit_rxon(priv, ctx);
2750
2751         ctx->is_active = false;
2752         priv->hw_roc_setup = false;
2753 }
2754
2755 static void iwlagn_disable_roc_work(struct work_struct *work)
2756 {
2757         struct iwl_priv *priv = container_of(work, struct iwl_priv,
2758                                              hw_roc_disable_work.work);
2759
2760         mutex_lock(&priv->shrd->mutex);
2761         iwlagn_disable_roc(priv);
2762         mutex_unlock(&priv->shrd->mutex);
2763 }
2764
2765 static int iwlagn_mac_remain_on_channel(struct ieee80211_hw *hw,
2766                                      struct ieee80211_channel *channel,
2767                                      enum nl80211_channel_type channel_type,
2768                                      int duration)
2769 {
2770         struct iwl_priv *priv = hw->priv;
2771         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_PAN];
2772         int err = 0;
2773
2774         if (!(priv->shrd->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
2775                 return -EOPNOTSUPP;
2776
2777         if (!(ctx->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)))
2778                 return -EOPNOTSUPP;
2779
2780         IWL_DEBUG_MAC80211(priv, "enter\n");
2781         mutex_lock(&priv->shrd->mutex);
2782
2783         if (test_bit(STATUS_SCAN_HW, &priv->shrd->status)) {
2784                 err = -EBUSY;
2785                 goto out;
2786         }
2787
2788         priv->hw_roc_channel = channel;
2789         priv->hw_roc_chantype = channel_type;
2790         priv->hw_roc_duration = duration;
2791         priv->hw_roc_start_notified = false;
2792         cancel_delayed_work(&priv->hw_roc_disable_work);
2793
2794         if (!ctx->is_active) {
2795                 ctx->is_active = true;
2796                 ctx->staging.dev_type = RXON_DEV_TYPE_P2P;
2797                 memcpy(ctx->staging.node_addr,
2798                        priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
2799                        ETH_ALEN);
2800                 memcpy(ctx->staging.bssid_addr,
2801                        priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
2802                        ETH_ALEN);
2803                 err = iwlagn_commit_rxon(priv, ctx);
2804                 if (err)
2805                         goto out;
2806                 ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK |
2807                                              RXON_FILTER_PROMISC_MSK |
2808                                              RXON_FILTER_CTL2HOST_MSK;
2809
2810                 err = iwlagn_commit_rxon(priv, ctx);
2811                 if (err) {
2812                         iwlagn_disable_roc(priv);
2813                         goto out;
2814                 }
2815                 priv->hw_roc_setup = true;
2816         }
2817
2818         err = iwl_scan_initiate(priv, ctx->vif, IWL_SCAN_ROC, channel->band);
2819         if (err)
2820                 iwlagn_disable_roc(priv);
2821
2822  out:
2823         mutex_unlock(&priv->shrd->mutex);
2824         IWL_DEBUG_MAC80211(priv, "leave\n");
2825
2826         return err;
2827 }
2828
2829 static int iwlagn_mac_cancel_remain_on_channel(struct ieee80211_hw *hw)
2830 {
2831         struct iwl_priv *priv = hw->priv;
2832
2833         if (!(priv->shrd->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
2834                 return -EOPNOTSUPP;
2835
2836         IWL_DEBUG_MAC80211(priv, "enter\n");
2837         mutex_lock(&priv->shrd->mutex);
2838         iwl_scan_cancel_timeout(priv, priv->hw_roc_duration);
2839         iwlagn_disable_roc(priv);
2840         mutex_unlock(&priv->shrd->mutex);
2841         IWL_DEBUG_MAC80211(priv, "leave\n");
2842
2843         return 0;
2844 }
2845
2846 static int iwlagn_mac_tx_sync(struct ieee80211_hw *hw,
2847                               struct ieee80211_vif *vif,
2848                               const u8 *bssid,
2849                               enum ieee80211_tx_sync_type type)
2850 {
2851         struct iwl_priv *priv = hw->priv;
2852         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2853         struct iwl_rxon_context *ctx = vif_priv->ctx;
2854         int ret;
2855         u8 sta_id;
2856
2857         if (ctx->ctxid != IWL_RXON_CTX_PAN)
2858                 return 0;
2859
2860         IWL_DEBUG_MAC80211(priv, "enter\n");
2861         mutex_lock(&priv->shrd->mutex);
2862
2863         if (iwl_is_associated_ctx(ctx)) {
2864                 ret = 0;
2865                 goto out;
2866         }
2867
2868         if (ctx->preauth_bssid || test_bit(STATUS_SCAN_HW, &priv->shrd->status)) {
2869                 ret = -EBUSY;
2870                 goto out;
2871         }
2872
2873         ret = iwl_add_station_common(priv, ctx, bssid, true, NULL, &sta_id);
2874         if (ret)
2875                 goto out;
2876
2877         if (WARN_ON(sta_id != ctx->ap_sta_id)) {
2878                 ret = -EIO;
2879                 goto out_remove_sta;
2880         }
2881
2882         memcpy(ctx->bssid, bssid, ETH_ALEN);
2883         ctx->preauth_bssid = true;
2884
2885         ret = iwlagn_commit_rxon(priv, ctx);
2886
2887         if (ret == 0)
2888                 goto out;
2889
2890  out_remove_sta:
2891         iwl_remove_station(priv, sta_id, bssid);
2892  out:
2893         mutex_unlock(&priv->shrd->mutex);
2894         IWL_DEBUG_MAC80211(priv, "leave\n");
2895
2896         return ret;
2897 }
2898
2899 static void iwlagn_mac_finish_tx_sync(struct ieee80211_hw *hw,
2900                                    struct ieee80211_vif *vif,
2901                                    const u8 *bssid,
2902                                    enum ieee80211_tx_sync_type type)
2903 {
2904         struct iwl_priv *priv = hw->priv;
2905         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2906         struct iwl_rxon_context *ctx = vif_priv->ctx;
2907
2908         if (ctx->ctxid != IWL_RXON_CTX_PAN)
2909                 return;
2910
2911         IWL_DEBUG_MAC80211(priv, "enter\n");
2912         mutex_lock(&priv->shrd->mutex);
2913
2914         if (iwl_is_associated_ctx(ctx))
2915                 goto out;
2916
2917         iwl_remove_station(priv, ctx->ap_sta_id, bssid);
2918         ctx->preauth_bssid = false;
2919         /* no need to commit */
2920  out:
2921         mutex_unlock(&priv->shrd->mutex);
2922         IWL_DEBUG_MAC80211(priv, "leave\n");
2923 }
2924
2925 /*****************************************************************************
2926  *
2927  * driver setup and teardown
2928  *
2929  *****************************************************************************/
2930
2931 static void iwl_setup_deferred_work(struct iwl_priv *priv)
2932 {
2933         priv->shrd->workqueue = create_singlethread_workqueue(DRV_NAME);
2934
2935         init_waitqueue_head(&priv->shrd->wait_command_queue);
2936
2937         INIT_WORK(&priv->restart, iwl_bg_restart);
2938         INIT_WORK(&priv->beacon_update, iwl_bg_beacon_update);
2939         INIT_WORK(&priv->run_time_calib_work, iwl_bg_run_time_calib_work);
2940         INIT_WORK(&priv->tx_flush, iwl_bg_tx_flush);
2941         INIT_WORK(&priv->bt_full_concurrency, iwl_bg_bt_full_concurrency);
2942         INIT_WORK(&priv->bt_runtime_config, iwl_bg_bt_runtime_config);
2943         INIT_DELAYED_WORK(&priv->hw_roc_disable_work,
2944                           iwlagn_disable_roc_work);
2945
2946         iwl_setup_scan_deferred_work(priv);
2947
2948         if (priv->cfg->lib->bt_setup_deferred_work)
2949                 priv->cfg->lib->bt_setup_deferred_work(priv);
2950
2951         init_timer(&priv->statistics_periodic);
2952         priv->statistics_periodic.data = (unsigned long)priv;
2953         priv->statistics_periodic.function = iwl_bg_statistics_periodic;
2954
2955         init_timer(&priv->ucode_trace);
2956         priv->ucode_trace.data = (unsigned long)priv;
2957         priv->ucode_trace.function = iwl_bg_ucode_trace;
2958
2959         init_timer(&priv->watchdog);
2960         priv->watchdog.data = (unsigned long)priv;
2961         priv->watchdog.function = iwl_bg_watchdog;
2962 }
2963
2964 static void iwl_cancel_deferred_work(struct iwl_priv *priv)
2965 {
2966         if (priv->cfg->lib->cancel_deferred_work)
2967                 priv->cfg->lib->cancel_deferred_work(priv);
2968
2969         cancel_work_sync(&priv->run_time_calib_work);
2970         cancel_work_sync(&priv->beacon_update);
2971
2972         iwl_cancel_scan_deferred_work(priv);
2973
2974         cancel_work_sync(&priv->bt_full_concurrency);
2975         cancel_work_sync(&priv->bt_runtime_config);
2976         cancel_delayed_work_sync(&priv->hw_roc_disable_work);
2977
2978         del_timer_sync(&priv->statistics_periodic);
2979         del_timer_sync(&priv->ucode_trace);
2980 }
2981
2982 static void iwl_init_hw_rates(struct iwl_priv *priv,
2983                               struct ieee80211_rate *rates)
2984 {
2985         int i;
2986
2987         for (i = 0; i < IWL_RATE_COUNT_LEGACY; i++) {
2988                 rates[i].bitrate = iwl_rates[i].ieee * 5;
2989                 rates[i].hw_value = i; /* Rate scaling will work on indexes */
2990                 rates[i].hw_value_short = i;
2991                 rates[i].flags = 0;
2992                 if ((i >= IWL_FIRST_CCK_RATE) && (i <= IWL_LAST_CCK_RATE)) {
2993                         /*
2994                          * If CCK != 1M then set short preamble rate flag.
2995                          */
2996                         rates[i].flags |=
2997                                 (iwl_rates[i].plcp == IWL_RATE_1M_PLCP) ?
2998                                         0 : IEEE80211_RATE_SHORT_PREAMBLE;
2999                 }
3000         }
3001 }
3002
3003 static int iwl_init_drv(struct iwl_priv *priv)
3004 {
3005         int ret;
3006
3007         spin_lock_init(&priv->shrd->sta_lock);
3008
3009         mutex_init(&priv->shrd->mutex);
3010
3011         priv->ieee_channels = NULL;
3012         priv->ieee_rates = NULL;
3013         priv->band = IEEE80211_BAND_2GHZ;
3014
3015         priv->iw_mode = NL80211_IFTYPE_STATION;
3016         priv->current_ht_config.smps = IEEE80211_SMPS_STATIC;
3017         priv->missed_beacon_threshold = IWL_MISSED_BEACON_THRESHOLD_DEF;
3018         priv->agg_tids_count = 0;
3019
3020         /* initialize force reset */
3021         priv->force_reset[IWL_RF_RESET].reset_duration =
3022                 IWL_DELAY_NEXT_FORCE_RF_RESET;
3023         priv->force_reset[IWL_FW_RESET].reset_duration =
3024                 IWL_DELAY_NEXT_FORCE_FW_RELOAD;
3025
3026         priv->rx_statistics_jiffies = jiffies;
3027
3028         /* Choose which receivers/antennas to use */
3029         iwlagn_set_rxon_chain(priv, &priv->contexts[IWL_RXON_CTX_BSS]);
3030
3031         iwl_init_scan_params(priv);
3032
3033         /* init bt coex */
3034         if (priv->cfg->bt_params &&
3035             priv->cfg->bt_params->advanced_bt_coexist) {
3036                 priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT;
3037                 priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT;
3038                 priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK;
3039                 priv->bt_on_thresh = BT_ON_THRESHOLD_DEF;
3040                 priv->bt_duration = BT_DURATION_LIMIT_DEF;
3041                 priv->dynamic_frag_thresh = BT_FRAG_THRESHOLD_DEF;
3042         }
3043
3044         ret = iwl_init_channel_map(priv);
3045         if (ret) {
3046                 IWL_ERR(priv, "initializing regulatory failed: %d\n", ret);
3047                 goto err;
3048         }
3049
3050         ret = iwl_init_geos(priv);
3051         if (ret) {
3052                 IWL_ERR(priv, "initializing geos failed: %d\n", ret);
3053                 goto err_free_channel_map;
3054         }
3055         iwl_init_hw_rates(priv, priv->ieee_rates);
3056
3057         return 0;
3058
3059 err_free_channel_map:
3060         iwl_free_channel_map(priv);
3061 err:
3062         return ret;
3063 }
3064
3065 static void iwl_uninit_drv(struct iwl_priv *priv)
3066 {
3067         iwl_calib_free_results(priv);
3068         iwl_free_geos(priv);
3069         iwl_free_channel_map(priv);
3070         if (priv->tx_cmd_pool)
3071                 kmem_cache_destroy(priv->tx_cmd_pool);
3072         kfree(priv->scan_cmd);
3073         kfree(priv->beacon_cmd);
3074 #ifdef CONFIG_IWLWIFI_DEBUGFS
3075         kfree(priv->wowlan_sram);
3076 #endif
3077 }
3078
3079 static void iwlagn_mac_rssi_callback(struct ieee80211_hw *hw,
3080                            enum ieee80211_rssi_event rssi_event)
3081 {
3082         struct iwl_priv *priv = hw->priv;
3083
3084         IWL_DEBUG_MAC80211(priv, "enter\n");
3085         mutex_lock(&priv->shrd->mutex);
3086
3087         if (priv->cfg->bt_params &&
3088                         priv->cfg->bt_params->advanced_bt_coexist) {
3089                 if (rssi_event == RSSI_EVENT_LOW)
3090                         priv->bt_enable_pspoll = true;
3091                 else if (rssi_event == RSSI_EVENT_HIGH)
3092                         priv->bt_enable_pspoll = false;
3093
3094                 iwlagn_send_advance_bt_config(priv);
3095         } else {
3096                 IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
3097                                 "ignoring RSSI callback\n");
3098         }
3099
3100         mutex_unlock(&priv->shrd->mutex);
3101         IWL_DEBUG_MAC80211(priv, "leave\n");
3102 }
3103
3104 static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
3105                            struct ieee80211_sta *sta, bool set)
3106 {
3107         struct iwl_priv *priv = hw->priv;
3108
3109         queue_work(priv->shrd->workqueue, &priv->beacon_update);
3110
3111         return 0;
3112 }
3113
3114 struct ieee80211_ops iwlagn_hw_ops = {
3115         .tx = iwlagn_mac_tx,
3116         .start = iwlagn_mac_start,
3117         .stop = iwlagn_mac_stop,
3118 #ifdef CONFIG_PM_SLEEP
3119         .suspend = iwlagn_mac_suspend,
3120         .resume = iwlagn_mac_resume,
3121 #endif
3122         .add_interface = iwlagn_mac_add_interface,
3123         .remove_interface = iwlagn_mac_remove_interface,
3124         .change_interface = iwlagn_mac_change_interface,
3125         .config = iwlagn_mac_config,
3126         .configure_filter = iwlagn_configure_filter,
3127         .set_key = iwlagn_mac_set_key,
3128         .update_tkip_key = iwlagn_mac_update_tkip_key,
3129         .set_rekey_data = iwlagn_mac_set_rekey_data,
3130         .conf_tx = iwlagn_mac_conf_tx,
3131         .bss_info_changed = iwlagn_bss_info_changed,
3132         .ampdu_action = iwlagn_mac_ampdu_action,
3133         .hw_scan = iwlagn_mac_hw_scan,
3134         .sta_notify = iwlagn_mac_sta_notify,
3135         .sta_add = iwlagn_mac_sta_add,
3136         .sta_remove = iwlagn_mac_sta_remove,
3137         .channel_switch = iwlagn_mac_channel_switch,
3138         .flush = iwlagn_mac_flush,
3139         .tx_last_beacon = iwlagn_mac_tx_last_beacon,
3140         .remain_on_channel = iwlagn_mac_remain_on_channel,
3141         .cancel_remain_on_channel = iwlagn_mac_cancel_remain_on_channel,
3142         .rssi_callback = iwlagn_mac_rssi_callback,
3143         CFG80211_TESTMODE_CMD(iwlagn_mac_testmode_cmd)
3144         CFG80211_TESTMODE_DUMP(iwlagn_mac_testmode_dump)
3145         .tx_sync = iwlagn_mac_tx_sync,
3146         .finish_tx_sync = iwlagn_mac_finish_tx_sync,
3147         .set_tim = iwlagn_mac_set_tim,
3148 };
3149
3150 static u32 iwl_hw_detect(struct iwl_priv *priv)
3151 {
3152         return iwl_read32(bus(priv), CSR_HW_REV);
3153 }
3154
3155 /* Size of one Rx buffer in host DRAM */
3156 #define IWL_RX_BUF_SIZE_4K (4 * 1024)
3157 #define IWL_RX_BUF_SIZE_8K (8 * 1024)
3158
3159 static int iwl_set_hw_params(struct iwl_priv *priv)
3160 {
3161         if (iwlagn_mod_params.amsdu_size_8K)
3162                 hw_params(priv).rx_page_order =
3163                         get_order(IWL_RX_BUF_SIZE_8K);
3164         else
3165                 hw_params(priv).rx_page_order =
3166                         get_order(IWL_RX_BUF_SIZE_4K);
3167
3168         if (iwlagn_mod_params.disable_11n)
3169                 priv->cfg->sku &= ~EEPROM_SKU_CAP_11N_ENABLE;
3170
3171         hw_params(priv).num_ampdu_queues =
3172                 priv->cfg->base_params->num_of_ampdu_queues;
3173         hw_params(priv).shadow_reg_enable =
3174                 priv->cfg->base_params->shadow_reg_enable;
3175         hw_params(priv).sku = priv->cfg->sku;
3176         hw_params(priv).wd_timeout = priv->cfg->base_params->wd_timeout;
3177
3178         /* Device-specific setup */
3179         return priv->cfg->lib->set_hw_params(priv);
3180 }
3181
3182 /* This function both allocates and initializes hw and priv. */
3183 static struct ieee80211_hw *iwl_alloc_all(struct iwl_cfg *cfg)
3184 {
3185         struct iwl_priv *priv;
3186         /* mac80211 allocates memory for this device instance, including
3187          *   space for this driver's private structure */
3188         struct ieee80211_hw *hw;
3189
3190         hw = ieee80211_alloc_hw(sizeof(struct iwl_priv), &iwlagn_hw_ops);
3191         if (hw == NULL) {
3192                 pr_err("%s: Can not allocate network device\n",
3193                        cfg->name);
3194                 goto out;
3195         }
3196
3197         priv = hw->priv;
3198         priv->hw = hw;
3199
3200 out:
3201         return hw;
3202 }
3203
3204 int iwl_probe(struct iwl_bus *bus, const struct iwl_trans_ops *trans_ops,
3205                 struct iwl_cfg *cfg)
3206 {
3207         int err = 0;
3208         struct iwl_priv *priv;
3209         struct ieee80211_hw *hw;
3210         u16 num_mac;
3211         u32 hw_rev;
3212
3213         /************************
3214          * 1. Allocating HW data
3215          ************************/
3216         hw = iwl_alloc_all(cfg);
3217         if (!hw) {
3218                 err = -ENOMEM;
3219                 goto out;
3220         }
3221
3222         priv = hw->priv;
3223         priv->shrd = &priv->_shrd;
3224         bus->shrd = priv->shrd;
3225         priv->shrd->bus = bus;
3226         priv->shrd->priv = priv;
3227
3228         priv->shrd->trans = trans_ops->alloc(priv->shrd);
3229         if (priv->shrd->trans == NULL) {
3230                 err = -ENOMEM;
3231                 goto out_free_traffic_mem;
3232         }
3233
3234         /* At this point both hw and priv are allocated. */
3235
3236         SET_IEEE80211_DEV(hw, bus(priv)->dev);
3237
3238         IWL_DEBUG_INFO(priv, "*** LOAD DRIVER ***\n");
3239         priv->cfg = cfg;
3240
3241         /* is antenna coupling more than 35dB ? */
3242         priv->bt_ant_couple_ok =
3243                 (iwlagn_mod_params.ant_coupling >
3244                         IWL_BT_ANTENNA_COUPLING_THRESHOLD) ?
3245                         true : false;
3246
3247         /* enable/disable bt channel inhibition */
3248         priv->bt_ch_announce = iwlagn_mod_params.bt_ch_announce;
3249         IWL_DEBUG_INFO(priv, "BT channel inhibition is %s\n",
3250                        (priv->bt_ch_announce) ? "On" : "Off");
3251
3252         if (iwl_alloc_traffic_mem(priv))
3253                 IWL_ERR(priv, "Not enough memory to generate traffic log\n");
3254
3255         /* these spin locks will be used in apm_ops.init and EEPROM access
3256          * we should init now
3257          */
3258         spin_lock_init(&bus(priv)->reg_lock);
3259         spin_lock_init(&priv->shrd->lock);
3260
3261         /*
3262          * stop and reset the on-board processor just in case it is in a
3263          * strange state ... like being left stranded by a primary kernel
3264          * and this is now the kdump kernel trying to start up
3265          */
3266         iwl_write32(bus(priv), CSR_RESET, CSR_RESET_REG_FLAG_NEVO_RESET);
3267
3268         /***********************
3269          * 3. Read REV register
3270          ***********************/
3271         hw_rev = iwl_hw_detect(priv);
3272         IWL_INFO(priv, "Detected %s, REV=0x%X\n",
3273                 priv->cfg->name, hw_rev);
3274
3275         err = iwl_trans_request_irq(trans(priv));
3276         if (err)
3277                 goto out_free_trans;
3278
3279         if (iwl_trans_prepare_card_hw(trans(priv))) {
3280                 err = -EIO;
3281                 IWL_WARN(priv, "Failed, HW not ready\n");
3282                 goto out_free_trans;
3283         }
3284
3285         /*****************
3286          * 4. Read EEPROM
3287          *****************/
3288         /* Read the EEPROM */
3289         err = iwl_eeprom_init(priv, hw_rev);
3290         if (err) {
3291                 IWL_ERR(priv, "Unable to init EEPROM\n");
3292                 goto out_free_trans;
3293         }
3294         err = iwl_eeprom_check_version(priv);
3295         if (err)
3296                 goto out_free_eeprom;
3297
3298         err = iwl_eeprom_check_sku(priv);
3299         if (err)
3300                 goto out_free_eeprom;
3301
3302         /* extract MAC Address */
3303         iwl_eeprom_get_mac(priv, priv->addresses[0].addr);
3304         IWL_DEBUG_INFO(priv, "MAC address: %pM\n", priv->addresses[0].addr);
3305         priv->hw->wiphy->addresses = priv->addresses;
3306         priv->hw->wiphy->n_addresses = 1;
3307         num_mac = iwl_eeprom_query16(priv, EEPROM_NUM_MAC_ADDRESS);
3308         if (num_mac > 1) {
3309                 memcpy(priv->addresses[1].addr, priv->addresses[0].addr,
3310                        ETH_ALEN);
3311                 priv->addresses[1].addr[5]++;
3312                 priv->hw->wiphy->n_addresses++;
3313         }
3314
3315         /************************
3316          * 5. Setup HW constants
3317          ************************/
3318         if (iwl_set_hw_params(priv)) {
3319                 err = -ENOENT;
3320                 IWL_ERR(priv, "failed to set hw parameters\n");
3321                 goto out_free_eeprom;
3322         }
3323
3324         /*******************
3325          * 6. Setup priv
3326          *******************/
3327
3328         err = iwl_init_drv(priv);
3329         if (err)
3330                 goto out_free_eeprom;
3331         /* At this point both hw and priv are initialized. */
3332
3333         /********************
3334          * 7. Setup services
3335          ********************/
3336         iwl_setup_deferred_work(priv);
3337         iwl_setup_rx_handlers(priv);
3338         iwl_testmode_init(priv);
3339
3340         /*********************************************
3341          * 8. Enable interrupts
3342          *********************************************/
3343
3344         iwl_enable_rfkill_int(priv);
3345
3346         /* If platform's RF_KILL switch is NOT set to KILL */
3347         if (iwl_read32(bus(priv),
3348                         CSR_GP_CNTRL) & CSR_GP_CNTRL_REG_FLAG_HW_RF_KILL_SW)
3349                 clear_bit(STATUS_RF_KILL_HW, &priv->shrd->status);
3350         else
3351                 set_bit(STATUS_RF_KILL_HW, &priv->shrd->status);
3352
3353         wiphy_rfkill_set_hw_state(priv->hw->wiphy,
3354                 test_bit(STATUS_RF_KILL_HW, &priv->shrd->status));
3355
3356         iwl_power_initialize(priv);
3357         iwl_tt_initialize(priv);
3358
3359         init_completion(&priv->firmware_loading_complete);
3360
3361         err = iwl_request_firmware(priv, true);
3362         if (err)
3363                 goto out_destroy_workqueue;
3364
3365         return 0;
3366
3367 out_destroy_workqueue:
3368         destroy_workqueue(priv->shrd->workqueue);
3369         priv->shrd->workqueue = NULL;
3370         iwl_uninit_drv(priv);
3371 out_free_eeprom:
3372         iwl_eeprom_free(priv);
3373 out_free_trans:
3374         iwl_trans_free(trans(priv));
3375 out_free_traffic_mem:
3376         iwl_free_traffic_mem(priv);
3377         ieee80211_free_hw(priv->hw);
3378 out:
3379         return err;
3380 }
3381
3382 void __devexit iwl_remove(struct iwl_priv * priv)
3383 {
3384         wait_for_completion(&priv->firmware_loading_complete);
3385
3386         IWL_DEBUG_INFO(priv, "*** UNLOAD DRIVER ***\n");
3387
3388         iwl_dbgfs_unregister(priv);
3389
3390         /* ieee80211_unregister_hw call wil cause iwlagn_mac_stop to
3391          * to be called and iwl_down since we are removing the device
3392          * we need to set STATUS_EXIT_PENDING bit.
3393          */
3394         set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
3395
3396         iwl_testmode_cleanup(priv);
3397         iwl_leds_exit(priv);
3398
3399         if (priv->mac80211_registered) {
3400                 ieee80211_unregister_hw(priv->hw);
3401                 priv->mac80211_registered = 0;
3402         }
3403
3404         iwl_tt_exit(priv);
3405
3406         /*This will stop the queues, move the device to low power state */
3407         iwl_trans_stop_device(trans(priv));
3408
3409         iwl_dealloc_ucode(priv);
3410
3411         iwl_eeprom_free(priv);
3412
3413         /*netif_stop_queue(dev); */
3414         flush_workqueue(priv->shrd->workqueue);
3415
3416         /* ieee80211_unregister_hw calls iwlagn_mac_stop, which flushes
3417          * priv->shrd->workqueue... so we can't take down the workqueue
3418          * until now... */
3419         destroy_workqueue(priv->shrd->workqueue);
3420         priv->shrd->workqueue = NULL;
3421         iwl_free_traffic_mem(priv);
3422
3423         iwl_trans_free(trans(priv));
3424
3425         iwl_uninit_drv(priv);
3426
3427         dev_kfree_skb(priv->beacon_skb);
3428
3429         ieee80211_free_hw(priv->hw);
3430 }
3431
3432
3433 /*****************************************************************************
3434  *
3435  * driver and module entry point
3436  *
3437  *****************************************************************************/
3438 static int __init iwl_init(void)
3439 {
3440
3441         int ret;
3442         pr_info(DRV_DESCRIPTION ", " DRV_VERSION "\n");
3443         pr_info(DRV_COPYRIGHT "\n");
3444
3445         ret = iwlagn_rate_control_register();
3446         if (ret) {
3447                 pr_err("Unable to register rate control algorithm: %d\n", ret);
3448                 return ret;
3449         }
3450
3451         ret = iwl_pci_register_driver();
3452
3453         if (ret)
3454                 goto error_register;
3455         return ret;
3456
3457 error_register:
3458         iwlagn_rate_control_unregister();
3459         return ret;
3460 }
3461
3462 static void __exit iwl_exit(void)
3463 {
3464         iwl_pci_unregister_driver();
3465         iwlagn_rate_control_unregister();
3466 }
3467
3468 module_exit(iwl_exit);
3469 module_init(iwl_init);
3470
3471 #ifdef CONFIG_IWLWIFI_DEBUG
3472 module_param_named(debug, iwlagn_mod_params.debug_level, uint,
3473                    S_IRUGO | S_IWUSR);
3474 MODULE_PARM_DESC(debug, "debug output mask");
3475 #endif
3476
3477 module_param_named(swcrypto, iwlagn_mod_params.sw_crypto, int, S_IRUGO);
3478 MODULE_PARM_DESC(swcrypto, "using crypto in software (default 0 [hardware])");
3479 module_param_named(queues_num, iwlagn_mod_params.num_of_queues, int, S_IRUGO);
3480 MODULE_PARM_DESC(queues_num, "number of hw queues.");
3481 module_param_named(11n_disable, iwlagn_mod_params.disable_11n, int, S_IRUGO);
3482 MODULE_PARM_DESC(11n_disable, "disable 11n functionality");
3483 module_param_named(amsdu_size_8K, iwlagn_mod_params.amsdu_size_8K,
3484                    int, S_IRUGO);
3485 MODULE_PARM_DESC(amsdu_size_8K, "enable 8K amsdu size");
3486 module_param_named(fw_restart, iwlagn_mod_params.restart_fw, int, S_IRUGO);
3487 MODULE_PARM_DESC(fw_restart, "restart firmware in case of error");
3488
3489 module_param_named(ucode_alternative,
3490                    iwlagn_mod_params.wanted_ucode_alternative,
3491                    int, S_IRUGO);
3492 MODULE_PARM_DESC(ucode_alternative,
3493                  "specify ucode alternative to use from ucode file");
3494
3495 module_param_named(antenna_coupling, iwlagn_mod_params.ant_coupling,
3496                    int, S_IRUGO);
3497 MODULE_PARM_DESC(antenna_coupling,
3498                  "specify antenna coupling in dB (defualt: 0 dB)");
3499
3500 module_param_named(bt_ch_inhibition, iwlagn_mod_params.bt_ch_announce,
3501                    bool, S_IRUGO);
3502 MODULE_PARM_DESC(bt_ch_inhibition,
3503                  "Enable BT channel inhibition (default: enable)");
3504
3505 module_param_named(plcp_check, iwlagn_mod_params.plcp_check, bool, S_IRUGO);
3506 MODULE_PARM_DESC(plcp_check, "Check plcp health (default: 1 [enabled])");
3507
3508 module_param_named(ack_check, iwlagn_mod_params.ack_check, bool, S_IRUGO);
3509 MODULE_PARM_DESC(ack_check, "Check ack health (default: 0 [disabled])");
3510
3511 module_param_named(wd_disable, iwlagn_mod_params.wd_disable, int, S_IRUGO);
3512 MODULE_PARM_DESC(wd_disable,
3513                 "Disable stuck queue watchdog timer 0=system default, "
3514                 "1=disable, 2=enable (default: 0)");
3515
3516 /*
3517  * set bt_coex_active to true, uCode will do kill/defer
3518  * every time the priority line is asserted (BT is sending signals on the
3519  * priority line in the PCIx).
3520  * set bt_coex_active to false, uCode will ignore the BT activity and
3521  * perform the normal operation
3522  *
3523  * User might experience transmit issue on some platform due to WiFi/BT
3524  * co-exist problem. The possible behaviors are:
3525  *   Able to scan and finding all the available AP
3526  *   Not able to associate with any AP
3527  * On those platforms, WiFi communication can be restored by set
3528  * "bt_coex_active" module parameter to "false"
3529  *
3530  * default: bt_coex_active = true (BT_COEX_ENABLE)
3531  */
3532 module_param_named(bt_coex_active, iwlagn_mod_params.bt_coex_active,
3533                 bool, S_IRUGO);
3534 MODULE_PARM_DESC(bt_coex_active, "enable wifi/bt co-exist (default: enable)");
3535
3536 module_param_named(led_mode, iwlagn_mod_params.led_mode, int, S_IRUGO);
3537 MODULE_PARM_DESC(led_mode, "0=system default, "
3538                 "1=On(RF On)/Off(RF Off), 2=blinking (default: 0)");
3539
3540 module_param_named(power_save, iwlagn_mod_params.power_save,
3541                 bool, S_IRUGO);
3542 MODULE_PARM_DESC(power_save,
3543                  "enable WiFi power management (default: disable)");
3544
3545 module_param_named(power_level, iwlagn_mod_params.power_level,
3546                 int, S_IRUGO);
3547 MODULE_PARM_DESC(power_level,
3548                  "default power save level (range from 1 - 5, default: 1)");
3549
3550 module_param_named(auto_agg, iwlagn_mod_params.auto_agg,
3551                 bool, S_IRUGO);
3552 MODULE_PARM_DESC(auto_agg,
3553                  "enable agg w/o check traffic load (default: enable)");
3554
3555 /*
3556  * For now, keep using power level 1 instead of automatically
3557  * adjusting ...
3558  */
3559 module_param_named(no_sleep_autoadjust, iwlagn_mod_params.no_sleep_autoadjust,
3560                 bool, S_IRUGO);
3561 MODULE_PARM_DESC(no_sleep_autoadjust,
3562                  "don't automatically adjust sleep level "
3563                  "according to maximum network latency (default: true)");