2 * Copyright (c) 2010 Broadcom Corporation
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 #include <linux/init.h>
18 #include <linux/kernel.h>
19 #include <linux/kthread.h>
20 #include <linux/slab.h>
21 #include <linux/skbuff.h>
22 #include <linux/netdevice.h>
23 #include <linux/etherdevice.h>
24 #include <linux/mmc/sdio_func.h>
25 #include <linux/random.h>
26 #include <linux/spinlock.h>
27 #include <linux/ethtool.h>
28 #include <linux/fcntl.h>
30 #include <linux/uaccess.h>
31 #include <linux/hardirq.h>
32 #include <linux/mutex.h>
33 #include <linux/wait.h>
34 #include <net/cfg80211.h>
35 #include <net/rtnetlink.h>
37 #include <brcmu_utils.h>
38 #include <brcmu_wifi.h>
42 #include "dhd_proto.h"
44 #include "wl_cfg80211.h"
47 MODULE_AUTHOR("Broadcom Corporation");
48 MODULE_DESCRIPTION("Broadcom 802.11n wireless LAN fullmac driver.");
49 MODULE_SUPPORTED_DEVICE("Broadcom 802.11n WLAN fullmac cards");
50 MODULE_LICENSE("Dual BSD/GPL");
53 /* Interface control information */
55 struct brcmf_info *info; /* back pointer to brcmf_info */
56 /* OS/stack specifics */
57 struct net_device *ndev;
58 struct net_device_stats stats;
59 int idx; /* iface idx in dongle */
60 int state; /* interface state */
61 u8 mac_addr[ETH_ALEN]; /* assigned MAC address */
64 /* Local private structure (extension of pub) */
68 /* OS/stack specifics */
69 struct brcmf_if *iflist[BRCMF_MAX_IFS];
71 struct mutex proto_block;
73 struct work_struct setmacaddr_work;
74 struct work_struct multicast_work;
75 u8 macvalue[ETH_ALEN];
76 atomic_t pend_8021x_cnt;
80 module_param(brcmf_msg_level, int, 0);
83 static int brcmf_net2idx(struct brcmf_info *drvr_priv, struct net_device *ndev)
87 while (i < BRCMF_MAX_IFS) {
88 if (drvr_priv->iflist[i] && drvr_priv->iflist[i]->ndev == ndev)
96 int brcmf_ifname2idx(struct brcmf_info *drvr_priv, char *name)
98 int i = BRCMF_MAX_IFS;
101 if (name == NULL || *name == '\0')
105 ifp = drvr_priv->iflist[i];
106 if (ifp && !strncmp(ifp->ndev->name, name, IFNAMSIZ))
110 brcmf_dbg(TRACE, "return idx %d for \"%s\"\n", i, name);
112 return i; /* default - the primary interface */
115 char *brcmf_ifname(struct brcmf_pub *drvr, int ifidx)
117 struct brcmf_info *drvr_priv = drvr->info;
119 if (ifidx < 0 || ifidx >= BRCMF_MAX_IFS) {
120 brcmf_dbg(ERROR, "ifidx %d out of range\n", ifidx);
124 if (drvr_priv->iflist[ifidx] == NULL) {
125 brcmf_dbg(ERROR, "null i/f %d\n", ifidx);
129 if (drvr_priv->iflist[ifidx]->ndev)
130 return drvr_priv->iflist[ifidx]->ndev->name;
135 static void _brcmf_set_multicast_list(struct work_struct *work)
137 struct net_device *ndev;
138 struct netdev_hw_addr *ha;
143 struct brcmf_dcmd dcmd;
148 struct brcmf_info *drvr_priv = container_of(work, struct brcmf_info,
151 ndev = drvr_priv->iflist[0]->ndev;
152 cnt = netdev_mc_count(ndev);
154 /* Determine initial value of allmulti flag */
155 allmulti = (ndev->flags & IFF_ALLMULTI) ? true : false;
157 /* Send down the multicast list first. */
159 buflen = sizeof("mcast_list") + sizeof(cnt) + (cnt * ETH_ALEN);
160 bufp = buf = kmalloc(buflen, GFP_ATOMIC);
164 strcpy(bufp, "mcast_list");
165 bufp += strlen("mcast_list") + 1;
167 cnt_le = cpu_to_le32(cnt);
168 memcpy(bufp, &cnt_le, sizeof(cnt));
169 bufp += sizeof(cnt_le);
171 netdev_for_each_mc_addr(ha, ndev) {
174 memcpy(bufp, ha->addr, ETH_ALEN);
179 memset(&dcmd, 0, sizeof(dcmd));
180 dcmd.cmd = BRCMF_C_SET_VAR;
185 ret = brcmf_proto_dcmd(&drvr_priv->pub, 0, &dcmd, dcmd.len);
187 brcmf_dbg(ERROR, "%s: set mcast_list failed, cnt %d\n",
188 brcmf_ifname(&drvr_priv->pub, 0), cnt);
189 allmulti = cnt ? true : allmulti;
194 /* Now send the allmulti setting. This is based on the setting in the
195 * net_device flags, but might be modified above to be turned on if we
196 * were trying to set some addresses and dongle rejected it...
199 buflen = sizeof("allmulti") + sizeof(allmulti);
200 buf = kmalloc(buflen, GFP_ATOMIC);
204 allmulti_le = cpu_to_le32(allmulti);
207 ("allmulti", (void *)&allmulti_le,
208 sizeof(allmulti_le), buf, buflen)) {
209 brcmf_dbg(ERROR, "%s: mkiovar failed for allmulti, datalen %d buflen %u\n",
210 brcmf_ifname(&drvr_priv->pub, 0),
211 (int)sizeof(allmulti), buflen);
216 memset(&dcmd, 0, sizeof(dcmd));
217 dcmd.cmd = BRCMF_C_SET_VAR;
222 ret = brcmf_proto_dcmd(&drvr_priv->pub, 0, &dcmd, dcmd.len);
224 brcmf_dbg(ERROR, "%s: set allmulti %d failed\n",
225 brcmf_ifname(&drvr_priv->pub, 0),
226 le32_to_cpu(allmulti_le));
231 /* Finally, pick up the PROMISC flag as well, like the NIC
234 allmulti = (ndev->flags & IFF_PROMISC) ? true : false;
235 allmulti_le = cpu_to_le32(allmulti);
237 memset(&dcmd, 0, sizeof(dcmd));
238 dcmd.cmd = BRCMF_C_SET_PROMISC;
239 dcmd.buf = &allmulti_le;
240 dcmd.len = sizeof(allmulti_le);
243 ret = brcmf_proto_dcmd(&drvr_priv->pub, 0, &dcmd, dcmd.len);
245 brcmf_dbg(ERROR, "%s: set promisc %d failed\n",
246 brcmf_ifname(&drvr_priv->pub, 0),
247 le32_to_cpu(allmulti_le));
252 _brcmf_set_mac_address(struct work_struct *work)
255 struct brcmf_dcmd dcmd;
258 struct brcmf_info *drvr_priv = container_of(work, struct brcmf_info,
261 brcmf_dbg(TRACE, "enter\n");
262 if (!brcmu_mkiovar("cur_etheraddr", (char *)drvr_priv->macvalue,
263 ETH_ALEN, buf, 32)) {
264 brcmf_dbg(ERROR, "%s: mkiovar failed for cur_etheraddr\n",
265 brcmf_ifname(&drvr_priv->pub, 0));
268 memset(&dcmd, 0, sizeof(dcmd));
269 dcmd.cmd = BRCMF_C_SET_VAR;
274 ret = brcmf_proto_dcmd(&drvr_priv->pub, 0, &dcmd, dcmd.len);
276 brcmf_dbg(ERROR, "%s: set cur_etheraddr failed\n",
277 brcmf_ifname(&drvr_priv->pub, 0));
279 memcpy(drvr_priv->iflist[0]->ndev->dev_addr,
280 drvr_priv->macvalue, ETH_ALEN);
285 static int brcmf_netdev_set_mac_address(struct net_device *ndev, void *addr)
287 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
289 struct sockaddr *sa = (struct sockaddr *)addr;
292 ifidx = brcmf_net2idx(drvr_priv, ndev);
293 if (ifidx == BRCMF_BAD_IF)
296 memcpy(&drvr_priv->macvalue, sa->sa_data, ETH_ALEN);
297 schedule_work(&drvr_priv->setmacaddr_work);
301 static void brcmf_netdev_set_multicast_list(struct net_device *ndev)
303 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
307 ifidx = brcmf_net2idx(drvr_priv, ndev);
308 if (ifidx == BRCMF_BAD_IF)
311 schedule_work(&drvr_priv->multicast_work);
314 int brcmf_sendpkt(struct brcmf_pub *drvr, int ifidx, struct sk_buff *pktbuf)
316 struct brcmf_info *drvr_priv = drvr->info;
319 if (!drvr->up || (drvr->busstate == BRCMF_BUS_DOWN))
322 /* Update multicast statistic */
323 if (pktbuf->len >= ETH_ALEN) {
324 u8 *pktdata = (u8 *) (pktbuf->data);
325 struct ethhdr *eh = (struct ethhdr *)pktdata;
327 if (is_multicast_ether_addr(eh->h_dest))
328 drvr->tx_multicast++;
329 if (ntohs(eh->h_proto) == ETH_P_PAE)
330 atomic_inc(&drvr_priv->pend_8021x_cnt);
333 /* If the protocol uses a data header, apply it */
334 brcmf_proto_hdrpush(drvr, ifidx, pktbuf);
336 /* Use bus module to send data frame */
337 return brcmf_sdbrcm_bus_txdata(drvr->bus, pktbuf);
340 static int brcmf_netdev_start_xmit(struct sk_buff *skb, struct net_device *ndev)
343 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
347 brcmf_dbg(TRACE, "Enter\n");
350 if (!drvr_priv->pub.up || (drvr_priv->pub.busstate == BRCMF_BUS_DOWN)) {
351 brcmf_dbg(ERROR, "xmit rejected pub.up=%d busstate=%d\n",
352 drvr_priv->pub.up, drvr_priv->pub.busstate);
353 netif_stop_queue(ndev);
357 ifidx = brcmf_net2idx(drvr_priv, ndev);
358 if (ifidx == BRCMF_BAD_IF) {
359 brcmf_dbg(ERROR, "bad ifidx %d\n", ifidx);
360 netif_stop_queue(ndev);
364 /* Make sure there's enough room for any header */
365 if (skb_headroom(skb) < drvr_priv->pub.hdrlen) {
366 struct sk_buff *skb2;
368 brcmf_dbg(INFO, "%s: insufficient headroom\n",
369 brcmf_ifname(&drvr_priv->pub, ifidx));
370 drvr_priv->pub.tx_realloc++;
371 skb2 = skb_realloc_headroom(skb, drvr_priv->pub.hdrlen);
375 brcmf_dbg(ERROR, "%s: skb_realloc_headroom failed\n",
376 brcmf_ifname(&drvr_priv->pub, ifidx));
382 ret = brcmf_sendpkt(&drvr_priv->pub, ifidx, skb);
386 drvr_priv->pub.dstats.tx_dropped++;
388 drvr_priv->pub.tx_packets++;
390 /* Return ok: we always eat the packet */
394 void brcmf_txflowcontrol(struct brcmf_pub *drvr, int ifidx, bool state)
396 struct net_device *ndev;
397 struct brcmf_info *drvr_priv = drvr->info;
399 brcmf_dbg(TRACE, "Enter\n");
402 ndev = drvr_priv->iflist[ifidx]->ndev;
404 netif_stop_queue(ndev);
406 netif_wake_queue(ndev);
409 static int brcmf_host_event(struct brcmf_info *drvr_priv, int *ifidx,
410 void *pktdata, struct brcmf_event_msg *event,
415 bcmerror = brcmf_c_host_event(drvr_priv, ifidx, pktdata, event, data);
419 if (drvr_priv->iflist[*ifidx]->ndev)
420 brcmf_cfg80211_event(drvr_priv->iflist[*ifidx]->ndev,
426 void brcmf_rx_frame(struct brcmf_pub *drvr, int ifidx, struct sk_buff *skb,
429 struct brcmf_info *drvr_priv = drvr->info;
433 struct sk_buff *pnext, *save_pktbuf;
435 struct brcmf_if *ifp;
436 struct brcmf_event_msg event;
438 brcmf_dbg(TRACE, "Enter\n");
442 for (i = 0; skb && i < numpkt; i++, skb = pnext) {
447 /* Get the protocol, maintain skb around eth_type_trans()
448 * The main reason for this hack is for the limitation of
449 * Linux 2.4 where 'eth_type_trans' uses the
450 * 'net->hard_header_len'
451 * to perform skb_pull inside vs ETH_HLEN. Since to avoid
452 * coping of the packet coming from the network stack to add
453 * BDC, Hardware header etc, during network interface
455 * we set the 'net->hard_header_len' to ETH_HLEN + extra space
457 * for BDC, Hardware header etc. and not just the ETH_HLEN
462 ifp = drvr_priv->iflist[ifidx];
464 ifp = drvr_priv->iflist[0];
466 skb->dev = ifp->ndev;
467 skb->protocol = eth_type_trans(skb, skb->dev);
469 if (skb->pkt_type == PACKET_MULTICAST)
470 drvr_priv->pub.rx_multicast++;
475 /* Strip header, count, deliver upward */
476 skb_pull(skb, ETH_HLEN);
478 /* Process special event packets and then discard them */
479 if (ntohs(skb->protocol) == ETH_P_LINK_CTL)
480 brcmf_host_event(drvr_priv, &ifidx,
484 if (drvr_priv->iflist[ifidx] &&
485 !drvr_priv->iflist[ifidx]->state)
486 ifp = drvr_priv->iflist[ifidx];
489 ifp->ndev->last_rx = jiffies;
491 drvr->dstats.rx_bytes += skb->len;
492 drvr->rx_packets++; /* Local count */
497 /* If the receive is not processed inside an ISR,
498 * the softirqd must be woken explicitly to service
499 * the NET_RX_SOFTIRQ. In 2.6 kernels, this is handled
500 * by netif_rx_ni(), but in earlier kernels, we need
507 void brcmf_txcomplete(struct brcmf_pub *drvr, struct sk_buff *txp, bool success)
510 struct brcmf_info *drvr_priv = drvr->info;
514 brcmf_proto_hdrpull(drvr, &ifidx, txp);
516 eh = (struct ethhdr *)(txp->data);
517 type = ntohs(eh->h_proto);
519 if (type == ETH_P_PAE)
520 atomic_dec(&drvr_priv->pend_8021x_cnt);
524 static struct net_device_stats *brcmf_netdev_get_stats(struct net_device *ndev)
526 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
528 struct brcmf_if *ifp;
531 brcmf_dbg(TRACE, "Enter\n");
533 ifidx = brcmf_net2idx(drvr_priv, ndev);
534 if (ifidx == BRCMF_BAD_IF)
537 ifp = drvr_priv->iflist[ifidx];
539 if (drvr_priv->pub.up)
540 /* Use the protocol to get dongle stats */
541 brcmf_proto_dstats(&drvr_priv->pub);
543 /* Copy dongle stats to net device stats */
544 ifp->stats.rx_packets = drvr_priv->pub.dstats.rx_packets;
545 ifp->stats.tx_packets = drvr_priv->pub.dstats.tx_packets;
546 ifp->stats.rx_bytes = drvr_priv->pub.dstats.rx_bytes;
547 ifp->stats.tx_bytes = drvr_priv->pub.dstats.tx_bytes;
548 ifp->stats.rx_errors = drvr_priv->pub.dstats.rx_errors;
549 ifp->stats.tx_errors = drvr_priv->pub.dstats.tx_errors;
550 ifp->stats.rx_dropped = drvr_priv->pub.dstats.rx_dropped;
551 ifp->stats.tx_dropped = drvr_priv->pub.dstats.tx_dropped;
552 ifp->stats.multicast = drvr_priv->pub.dstats.multicast;
557 /* Retrieve current toe component enables, which are kept
558 as a bitmap in toe_ol iovar */
559 static int brcmf_toe_get(struct brcmf_info *drvr_priv, int ifidx, u32 *toe_ol)
561 struct brcmf_dcmd dcmd;
565 memset(&dcmd, 0, sizeof(dcmd));
567 dcmd.cmd = BRCMF_C_GET_VAR;
569 dcmd.len = (uint) sizeof(buf);
572 strcpy(buf, "toe_ol");
573 ret = brcmf_proto_dcmd(&drvr_priv->pub, ifidx, &dcmd, dcmd.len);
575 /* Check for older dongle image that doesn't support toe_ol */
577 brcmf_dbg(ERROR, "%s: toe not supported by device\n",
578 brcmf_ifname(&drvr_priv->pub, ifidx));
582 brcmf_dbg(INFO, "%s: could not get toe_ol: ret=%d\n",
583 brcmf_ifname(&drvr_priv->pub, ifidx), ret);
587 memcpy(toe_ol, buf, sizeof(u32));
591 /* Set current toe component enables in toe_ol iovar,
592 and set toe global enable iovar */
593 static int brcmf_toe_set(struct brcmf_info *drvr_priv, int ifidx, u32 toe_ol)
595 struct brcmf_dcmd dcmd;
599 memset(&dcmd, 0, sizeof(dcmd));
601 dcmd.cmd = BRCMF_C_SET_VAR;
603 dcmd.len = (uint) sizeof(buf);
606 /* Set toe_ol as requested */
608 strcpy(buf, "toe_ol");
609 memcpy(&buf[sizeof("toe_ol")], &toe_ol, sizeof(u32));
611 ret = brcmf_proto_dcmd(&drvr_priv->pub, ifidx, &dcmd, dcmd.len);
613 brcmf_dbg(ERROR, "%s: could not set toe_ol: ret=%d\n",
614 brcmf_ifname(&drvr_priv->pub, ifidx), ret);
618 /* Enable toe globally only if any components are enabled. */
623 memcpy(&buf[sizeof("toe")], &toe, sizeof(u32));
625 ret = brcmf_proto_dcmd(&drvr_priv->pub, ifidx, &dcmd, dcmd.len);
627 brcmf_dbg(ERROR, "%s: could not set toe: ret=%d\n",
628 brcmf_ifname(&drvr_priv->pub, ifidx), ret);
635 static void brcmf_ethtool_get_drvinfo(struct net_device *ndev,
636 struct ethtool_drvinfo *info)
638 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
641 sprintf(info->driver, KBUILD_MODNAME);
642 sprintf(info->version, "%lu", drvr_priv->pub.drv_version);
643 sprintf(info->fw_version, "%s", BCM4329_FW_NAME);
644 sprintf(info->bus_info, "%s",
645 dev_name(brcmf_bus_get_device(drvr_priv->pub.bus)));
648 static struct ethtool_ops brcmf_ethtool_ops = {
649 .get_drvinfo = brcmf_ethtool_get_drvinfo
652 static int brcmf_ethtool(struct brcmf_info *drvr_priv, void __user *uaddr)
654 struct ethtool_drvinfo info;
655 char drvname[sizeof(info.driver)];
657 struct ethtool_value edata;
658 u32 toe_cmpnt, csum_dir;
661 brcmf_dbg(TRACE, "Enter\n");
663 /* all ethtool calls start with a cmd word */
664 if (copy_from_user(&cmd, uaddr, sizeof(u32)))
668 case ETHTOOL_GDRVINFO:
669 /* Copy out any request driver name */
670 if (copy_from_user(&info, uaddr, sizeof(info)))
672 strncpy(drvname, info.driver, sizeof(info.driver));
673 drvname[sizeof(info.driver) - 1] = '\0';
675 /* clear struct for return */
676 memset(&info, 0, sizeof(info));
679 /* if requested, identify ourselves */
680 if (strcmp(drvname, "?dhd") == 0) {
681 sprintf(info.driver, "dhd");
682 strcpy(info.version, BRCMF_VERSION_STR);
685 /* otherwise, require dongle to be up */
686 else if (!drvr_priv->pub.up) {
687 brcmf_dbg(ERROR, "dongle is not up\n");
691 /* finally, report dongle driver type */
692 else if (drvr_priv->pub.iswl)
693 sprintf(info.driver, "wl");
695 sprintf(info.driver, "xx");
697 sprintf(info.version, "%lu", drvr_priv->pub.drv_version);
698 if (copy_to_user(uaddr, &info, sizeof(info)))
700 brcmf_dbg(CTL, "given %*s, returning %s\n",
701 (int)sizeof(drvname), drvname, info.driver);
704 /* Get toe offload components from dongle */
705 case ETHTOOL_GRXCSUM:
706 case ETHTOOL_GTXCSUM:
707 ret = brcmf_toe_get(drvr_priv, 0, &toe_cmpnt);
712 (cmd == ETHTOOL_GTXCSUM) ? TOE_TX_CSUM_OL : TOE_RX_CSUM_OL;
715 edata.data = (toe_cmpnt & csum_dir) ? 1 : 0;
717 if (copy_to_user(uaddr, &edata, sizeof(edata)))
721 /* Set toe offload components in dongle */
722 case ETHTOOL_SRXCSUM:
723 case ETHTOOL_STXCSUM:
724 if (copy_from_user(&edata, uaddr, sizeof(edata)))
727 /* Read the current settings, update and write back */
728 ret = brcmf_toe_get(drvr_priv, 0, &toe_cmpnt);
733 (cmd == ETHTOOL_STXCSUM) ? TOE_TX_CSUM_OL : TOE_RX_CSUM_OL;
736 toe_cmpnt |= csum_dir;
738 toe_cmpnt &= ~csum_dir;
740 ret = brcmf_toe_set(drvr_priv, 0, toe_cmpnt);
744 /* If setting TX checksum mode, tell Linux the new mode */
745 if (cmd == ETHTOOL_STXCSUM) {
747 drvr_priv->iflist[0]->ndev->features |=
750 drvr_priv->iflist[0]->ndev->features &=
763 static int brcmf_netdev_ioctl_entry(struct net_device *ndev, struct ifreq *ifr,
766 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
770 ifidx = brcmf_net2idx(drvr_priv, ndev);
771 brcmf_dbg(TRACE, "ifidx %d, cmd 0x%04x\n", ifidx, cmd);
773 if (ifidx == BRCMF_BAD_IF)
776 if (cmd == SIOCETHTOOL)
777 return brcmf_ethtool(drvr_priv, ifr->ifr_data);
782 /* called only from within this driver. Sends a command to the dongle. */
783 s32 brcmf_exec_dcmd(struct net_device *ndev, u32 cmd, void *arg, u32 len)
785 struct brcmf_dcmd dcmd;
789 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
793 memset(&dcmd, 0, sizeof(dcmd));
798 ifidx = brcmf_net2idx(drvr_priv, ndev);
800 if (dcmd.buf != NULL)
801 buflen = min_t(uint, dcmd.len, BRCMF_DCMD_MAXLEN);
803 /* send to dongle (must be up, and wl) */
804 if ((drvr_priv->pub.busstate != BRCMF_BUS_DATA)) {
805 brcmf_dbg(ERROR, "DONGLE_DOWN\n");
810 if (!drvr_priv->pub.iswl) {
816 * Intercept BRCMF_C_SET_KEY CMD - serialize M4 send and
817 * set key CMD to prevent M4 encryption.
819 is_set_key_cmd = ((dcmd.cmd == BRCMF_C_SET_KEY) ||
820 ((dcmd.cmd == BRCMF_C_SET_VAR) &&
821 !(strncmp("wsec_key", dcmd.buf, 9))) ||
822 ((dcmd.cmd == BRCMF_C_SET_VAR) &&
823 !(strncmp("bsscfg:wsec_key", dcmd.buf, 15))));
825 brcmf_netdev_wait_pend8021x(ndev);
827 err = brcmf_proto_dcmd(&drvr_priv->pub, ifidx, &dcmd, buflen);
836 static int brcmf_netdev_stop(struct net_device *ndev)
838 struct brcmf_pub *drvr = *(struct brcmf_pub **) netdev_priv(ndev);
840 brcmf_dbg(TRACE, "Enter\n");
841 brcmf_cfg80211_down(drvr->config);
845 /* Set state and stop OS transmissions */
847 netif_stop_queue(ndev);
852 static int brcmf_netdev_open(struct net_device *ndev)
854 struct brcmf_info *drvr_priv = *(struct brcmf_info **)
857 int ifidx = brcmf_net2idx(drvr_priv, ndev);
860 brcmf_dbg(TRACE, "ifidx %d\n", ifidx);
862 if (ifidx == 0) { /* do it only for primary eth0 */
864 /* try to bring up bus */
865 ret = brcmf_bus_start(&drvr_priv->pub);
867 brcmf_dbg(ERROR, "failed with code %d\n", ret);
870 atomic_set(&drvr_priv->pend_8021x_cnt, 0);
872 memcpy(ndev->dev_addr, drvr_priv->pub.mac, ETH_ALEN);
874 /* Get current TOE mode from dongle */
875 if (brcmf_toe_get(drvr_priv, ifidx, &toe_ol) >= 0
876 && (toe_ol & TOE_TX_CSUM_OL) != 0)
877 drvr_priv->iflist[ifidx]->ndev->features |=
880 drvr_priv->iflist[ifidx]->ndev->features &=
883 /* Allow transmit calls */
884 netif_start_queue(ndev);
885 drvr_priv->pub.up = 1;
886 if (brcmf_cfg80211_up(drvr_priv->pub.config)) {
887 brcmf_dbg(ERROR, "failed to bring up cfg80211\n");
895 brcmf_add_if(struct brcmf_info *drvr_priv, int ifidx, struct net_device *ndev,
896 char *name, u8 *mac_addr, u32 flags, u8 bssidx)
898 struct brcmf_if *ifp;
899 int ret = 0, err = 0;
901 brcmf_dbg(TRACE, "idx %d, handle->%p\n", ifidx, ndev);
903 ifp = drvr_priv->iflist[ifidx];
905 ifp = kmalloc(sizeof(struct brcmf_if), GFP_ATOMIC);
910 memset(ifp, 0, sizeof(struct brcmf_if));
911 ifp->info = drvr_priv;
912 drvr_priv->iflist[ifidx] = ifp;
913 if (mac_addr != NULL)
914 memcpy(&ifp->mac_addr, mac_addr, ETH_ALEN);
917 ifp->state = BRCMF_E_IF_ADD;
920 * Delete the existing interface before overwriting it
921 * in case we missed the BRCMF_E_IF_DEL event.
923 if (ifp->ndev != NULL) {
924 brcmf_dbg(ERROR, "ERROR: netdev:%s already exists, try free & unregister\n",
926 netif_stop_queue(ifp->ndev);
927 unregister_netdev(ifp->ndev);
928 free_netdev(ifp->ndev);
931 /* Allocate netdev, including space for private structure */
932 ifp->ndev = alloc_netdev(sizeof(drvr_priv), "wlan%d",
935 brcmf_dbg(ERROR, "OOM - alloc_netdev\n");
940 memcpy(netdev_priv(ifp->ndev), &drvr_priv,
942 err = brcmf_net_attach(&drvr_priv->pub, ifp->idx);
944 brcmf_dbg(ERROR, "brcmf_net_attach failed, err %d\n",
948 brcmf_dbg(TRACE, " ==== pid:%x, net_device for if:%s created ===\n",
949 current->pid, ifp->ndev->name);
956 free_netdev(ifp->ndev);
958 drvr_priv->iflist[ifp->idx] = NULL;
967 void brcmf_del_if(struct brcmf_info *drvr_priv, int ifidx)
969 struct brcmf_if *ifp;
971 brcmf_dbg(TRACE, "idx %d\n", ifidx);
973 ifp = drvr_priv->iflist[ifidx];
975 brcmf_dbg(ERROR, "Null interface\n");
979 ifp->state = BRCMF_E_IF_DEL;
981 if (ifp->ndev != NULL) {
982 netif_stop_queue(ifp->ndev);
983 unregister_netdev(ifp->ndev);
984 free_netdev(ifp->ndev);
985 drvr_priv->iflist[ifidx] = NULL;
990 struct brcmf_pub *brcmf_attach(struct brcmf_bus *bus, uint bus_hdrlen)
992 struct brcmf_info *drvr_priv = NULL;
993 struct net_device *ndev;
995 brcmf_dbg(TRACE, "Enter\n");
997 /* Allocate netdev, including space for private structure */
998 ndev = alloc_netdev(sizeof(drvr_priv), "wlan%d", ether_setup);
1000 brcmf_dbg(ERROR, "OOM - alloc_netdev\n");
1004 /* Allocate primary brcmf_info */
1005 drvr_priv = kzalloc(sizeof(struct brcmf_info), GFP_ATOMIC);
1010 * Save the brcmf_info into the priv
1012 memcpy(netdev_priv(ndev), &drvr_priv, sizeof(drvr_priv));
1014 if (brcmf_add_if(drvr_priv, 0, ndev, ndev->name, NULL, 0, 0) ==
1018 ndev->netdev_ops = NULL;
1019 mutex_init(&drvr_priv->proto_block);
1021 /* Link to info module */
1022 drvr_priv->pub.info = drvr_priv;
1024 /* Link to bus module */
1025 drvr_priv->pub.bus = bus;
1026 drvr_priv->pub.hdrlen = bus_hdrlen;
1028 /* Attach and link in the protocol */
1029 if (brcmf_proto_attach(&drvr_priv->pub) != 0) {
1030 brcmf_dbg(ERROR, "brcmf_prot_attach failed\n");
1034 /* Attach and link in the cfg80211 */
1035 drvr_priv->pub.config =
1036 brcmf_cfg80211_attach(ndev,
1037 brcmf_bus_get_device(bus),
1039 if (drvr_priv->pub.config == NULL) {
1040 brcmf_dbg(ERROR, "wl_cfg80211_attach failed\n");
1044 INIT_WORK(&drvr_priv->setmacaddr_work, _brcmf_set_mac_address);
1045 INIT_WORK(&drvr_priv->multicast_work, _brcmf_set_multicast_list);
1048 * Save the brcmf_info into the priv
1050 memcpy(netdev_priv(ndev), &drvr_priv, sizeof(drvr_priv));
1052 return &drvr_priv->pub;
1058 brcmf_detach(&drvr_priv->pub);
1063 int brcmf_bus_start(struct brcmf_pub *drvr)
1066 struct brcmf_info *drvr_priv = drvr->info;
1067 /* Room for "event_msgs" + '\0' + bitvec */
1068 char iovbuf[BRCMF_EVENTING_MASK_LEN + 12];
1070 brcmf_dbg(TRACE, "\n");
1072 /* Bring up the bus */
1073 ret = brcmf_sdbrcm_bus_init(&drvr_priv->pub);
1075 brcmf_dbg(ERROR, "brcmf_sdbrcm_bus_init failed %d\n", ret);
1079 /* If bus is not ready, can't come up */
1080 if (drvr_priv->pub.busstate != BRCMF_BUS_DATA) {
1081 brcmf_dbg(ERROR, "failed bus is not ready\n");
1085 brcmu_mkiovar("event_msgs", drvr->eventmask, BRCMF_EVENTING_MASK_LEN,
1086 iovbuf, sizeof(iovbuf));
1087 brcmf_proto_cdc_query_dcmd(drvr, 0, BRCMF_C_GET_VAR, iovbuf,
1089 memcpy(drvr->eventmask, iovbuf, BRCMF_EVENTING_MASK_LEN);
1091 setbit(drvr->eventmask, BRCMF_E_SET_SSID);
1092 setbit(drvr->eventmask, BRCMF_E_PRUNE);
1093 setbit(drvr->eventmask, BRCMF_E_AUTH);
1094 setbit(drvr->eventmask, BRCMF_E_REASSOC);
1095 setbit(drvr->eventmask, BRCMF_E_REASSOC_IND);
1096 setbit(drvr->eventmask, BRCMF_E_DEAUTH_IND);
1097 setbit(drvr->eventmask, BRCMF_E_DISASSOC_IND);
1098 setbit(drvr->eventmask, BRCMF_E_DISASSOC);
1099 setbit(drvr->eventmask, BRCMF_E_JOIN);
1100 setbit(drvr->eventmask, BRCMF_E_ASSOC_IND);
1101 setbit(drvr->eventmask, BRCMF_E_PSK_SUP);
1102 setbit(drvr->eventmask, BRCMF_E_LINK);
1103 setbit(drvr->eventmask, BRCMF_E_NDIS_LINK);
1104 setbit(drvr->eventmask, BRCMF_E_MIC_ERROR);
1105 setbit(drvr->eventmask, BRCMF_E_PMKID_CACHE);
1106 setbit(drvr->eventmask, BRCMF_E_TXFAIL);
1107 setbit(drvr->eventmask, BRCMF_E_JOIN_START);
1108 setbit(drvr->eventmask, BRCMF_E_SCAN_COMPLETE);
1110 /* enable dongle roaming event */
1112 drvr->pktfilter_count = 1;
1113 /* Setup filter to allow only unicast */
1114 drvr->pktfilter[0] = "100 0 0 0 0x01 0x00";
1116 /* Bus is ready, do any protocol initialization */
1117 ret = brcmf_proto_init(&drvr_priv->pub);
1124 static struct net_device_ops brcmf_netdev_ops_pri = {
1125 .ndo_open = brcmf_netdev_open,
1126 .ndo_stop = brcmf_netdev_stop,
1127 .ndo_get_stats = brcmf_netdev_get_stats,
1128 .ndo_do_ioctl = brcmf_netdev_ioctl_entry,
1129 .ndo_start_xmit = brcmf_netdev_start_xmit,
1130 .ndo_set_mac_address = brcmf_netdev_set_mac_address,
1131 .ndo_set_rx_mode = brcmf_netdev_set_multicast_list
1134 int brcmf_net_attach(struct brcmf_pub *drvr, int ifidx)
1136 struct brcmf_info *drvr_priv = drvr->info;
1137 struct net_device *ndev;
1138 u8 temp_addr[ETH_ALEN] = {
1139 0x00, 0x90, 0x4c, 0x11, 0x22, 0x33};
1141 brcmf_dbg(TRACE, "ifidx %d\n", ifidx);
1143 ndev = drvr_priv->iflist[ifidx]->ndev;
1144 ndev->netdev_ops = &brcmf_netdev_ops_pri;
1147 * We have to use the primary MAC for virtual interfaces
1150 /* for virtual interfaces use the primary MAC */
1151 memcpy(temp_addr, drvr_priv->pub.mac, ETH_ALEN);
1156 brcmf_dbg(TRACE, "ACCESS POINT MAC:\n");
1157 /* ACCESSPOINT INTERFACE CASE */
1158 temp_addr[0] |= 0X02; /* set bit 2 ,
1159 - Locally Administered address */
1162 ndev->hard_header_len = ETH_HLEN + drvr_priv->pub.hdrlen;
1163 ndev->ethtool_ops = &brcmf_ethtool_ops;
1165 drvr_priv->pub.rxsz = ndev->mtu + ndev->hard_header_len +
1166 drvr_priv->pub.hdrlen;
1168 memcpy(ndev->dev_addr, temp_addr, ETH_ALEN);
1170 if (register_netdev(ndev) != 0) {
1171 brcmf_dbg(ERROR, "couldn't register the net device\n");
1175 brcmf_dbg(INFO, "%s: Broadcom Dongle Host Driver\n", ndev->name);
1180 ndev->netdev_ops = NULL;
1184 static void brcmf_bus_detach(struct brcmf_pub *drvr)
1186 struct brcmf_info *drvr_priv;
1188 brcmf_dbg(TRACE, "Enter\n");
1191 drvr_priv = drvr->info;
1193 /* Stop the protocol module */
1194 brcmf_proto_stop(&drvr_priv->pub);
1196 /* Stop the bus module */
1197 brcmf_sdbrcm_bus_stop(drvr_priv->pub.bus);
1202 void brcmf_detach(struct brcmf_pub *drvr)
1204 struct brcmf_info *drvr_priv;
1206 brcmf_dbg(TRACE, "Enter\n");
1209 drvr_priv = drvr->info;
1211 struct brcmf_if *ifp;
1214 for (i = 1; i < BRCMF_MAX_IFS; i++)
1215 if (drvr_priv->iflist[i])
1216 brcmf_del_if(drvr_priv, i);
1218 ifp = drvr_priv->iflist[0];
1219 if (ifp->ndev->netdev_ops == &brcmf_netdev_ops_pri) {
1221 brcmf_netdev_stop(ifp->ndev);
1223 unregister_netdev(ifp->ndev);
1226 cancel_work_sync(&drvr_priv->setmacaddr_work);
1227 cancel_work_sync(&drvr_priv->multicast_work);
1229 brcmf_bus_detach(drvr);
1232 brcmf_proto_detach(drvr);
1234 brcmf_cfg80211_detach(drvr->config);
1236 free_netdev(ifp->ndev);
1243 static void __exit brcmf_module_cleanup(void)
1245 brcmf_dbg(TRACE, "Enter\n");
1247 brcmf_bus_unregister();
1250 static int __init brcmf_module_init(void)
1254 brcmf_dbg(TRACE, "Enter\n");
1256 error = brcmf_bus_register();
1259 brcmf_dbg(ERROR, "brcmf_bus_register failed\n");
1268 module_init(brcmf_module_init);
1269 module_exit(brcmf_module_cleanup);
1271 int brcmf_os_proto_block(struct brcmf_pub *drvr)
1273 struct brcmf_info *drvr_priv = drvr->info;
1276 mutex_lock(&drvr_priv->proto_block);
1282 int brcmf_os_proto_unblock(struct brcmf_pub *drvr)
1284 struct brcmf_info *drvr_priv = drvr->info;
1287 mutex_unlock(&drvr_priv->proto_block);
1294 static int brcmf_get_pend_8021x_cnt(struct brcmf_info *drvr_priv)
1296 return atomic_read(&drvr_priv->pend_8021x_cnt);
1299 #define MAX_WAIT_FOR_8021X_TX 10
1301 int brcmf_netdev_wait_pend8021x(struct net_device *ndev)
1303 struct brcmf_info *drvr_priv = *(struct brcmf_info **)netdev_priv(ndev);
1304 int timeout = 10 * HZ / 1000;
1305 int ntimes = MAX_WAIT_FOR_8021X_TX;
1306 int pend = brcmf_get_pend_8021x_cnt(drvr_priv);
1308 while (ntimes && pend) {
1310 set_current_state(TASK_INTERRUPTIBLE);
1311 schedule_timeout(timeout);
1312 set_current_state(TASK_RUNNING);
1315 pend = brcmf_get_pend_8021x_cnt(drvr_priv);
1321 int brcmf_write_to_file(struct brcmf_pub *drvr, u8 *buf, int size)
1325 mm_segment_t old_fs;
1328 /* change to KERNEL_DS address limit */
1332 /* open file to write */
1333 fp = filp_open("/tmp/mem_dump", O_WRONLY | O_CREAT, 0640);
1335 brcmf_dbg(ERROR, "open file error\n");
1340 /* Write buf to file */
1341 fp->f_op->write(fp, buf, size, &pos);
1344 /* free buf before return */
1346 /* close file before return */
1348 filp_close(fp, current->files);
1349 /* restore previous address limit */