2 * This file is part of wl1251
4 * Copyright (C) 2008-2009 Nokia Corporation
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * version 2 as published by the Free Software Foundation.
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * General Public License for more details.
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, write to the Free Software
17 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
22 #include <linux/module.h>
23 #include <linux/interrupt.h>
24 #include <linux/firmware.h>
25 #include <linux/delay.h>
26 #include <linux/irq.h>
27 #include <linux/crc32.h>
28 #include <linux/etherdevice.h>
29 #include <linux/vmalloc.h>
30 #include <linux/slab.h>
31 #include <linux/netdevice.h>
34 #include "wl12xx_80211.h"
46 void wl1251_enable_interrupts(struct wl1251 *wl)
48 wl->if_ops->enable_irq(wl);
51 void wl1251_disable_interrupts(struct wl1251 *wl)
53 wl->if_ops->disable_irq(wl);
56 static int wl1251_power_off(struct wl1251 *wl)
58 return wl->if_ops->power(wl, false);
61 static int wl1251_power_on(struct wl1251 *wl)
63 return wl->if_ops->power(wl, true);
66 static int wl1251_fetch_firmware(struct wl1251 *wl)
68 const struct firmware *fw;
69 struct device *dev = wiphy_dev(wl->hw->wiphy);
72 ret = request_firmware(&fw, WL1251_FW_NAME, dev);
75 wl1251_error("could not get firmware: %d", ret);
80 wl1251_error("firmware size is not multiple of 32 bits: %zu",
86 wl->fw_len = fw->size;
87 wl->fw = vmalloc(wl->fw_len);
90 wl1251_error("could not allocate memory for the firmware");
95 memcpy(wl->fw, fw->data, wl->fw_len);
100 release_firmware(fw);
105 static int wl1251_fetch_nvs(struct wl1251 *wl)
107 const struct firmware *fw;
108 struct device *dev = wiphy_dev(wl->hw->wiphy);
111 ret = request_firmware(&fw, WL1251_NVS_NAME, dev);
114 wl1251_error("could not get nvs file: %d", ret);
119 wl1251_error("nvs size is not multiple of 32 bits: %zu",
125 wl->nvs_len = fw->size;
126 wl->nvs = kmemdup(fw->data, wl->nvs_len, GFP_KERNEL);
129 wl1251_error("could not allocate memory for the nvs file");
137 release_firmware(fw);
142 static void wl1251_fw_wakeup(struct wl1251 *wl)
146 elp_reg = ELPCTRL_WAKE_UP;
147 wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, elp_reg);
148 elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
150 if (!(elp_reg & ELPCTRL_WLAN_READY))
151 wl1251_warning("WLAN not ready");
154 static int wl1251_chip_wakeup(struct wl1251 *wl)
158 ret = wl1251_power_on(wl);
162 msleep(WL1251_POWER_ON_SLEEP);
163 wl->if_ops->reset(wl);
165 /* We don't need a real memory partition here, because we only want
166 * to use the registers at this point. */
167 wl1251_set_partition(wl,
171 REGISTERS_DOWN_SIZE);
173 /* ELP module wake up */
174 wl1251_fw_wakeup(wl);
176 /* whal_FwCtrl_BootSm() */
178 /* 0. read chip id from CHIP_ID */
179 wl->chip_id = wl1251_reg_read32(wl, CHIP_ID_B);
181 /* 1. check if chip id is valid */
183 switch (wl->chip_id) {
184 case CHIP_ID_1251_PG12:
185 wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG12)",
188 case CHIP_ID_1251_PG11:
189 wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG11)",
192 case CHIP_ID_1251_PG10:
194 wl1251_error("unsupported chip id: 0x%x", wl->chip_id);
199 if (wl->fw == NULL) {
200 ret = wl1251_fetch_firmware(wl);
205 if (wl->nvs == NULL && !wl->use_eeprom) {
206 /* No NVS from netlink, try to get it from the filesystem */
207 ret = wl1251_fetch_nvs(wl);
216 #define WL1251_IRQ_LOOP_COUNT 100
217 irqreturn_t wl1251_irq(int irq, void *cookie)
219 u32 intr, ctr = WL1251_IRQ_LOOP_COUNT;
220 struct wl1251 *wl = cookie;
223 mutex_lock(&wl->mutex);
225 wl1251_debug(DEBUG_IRQ, "IRQ work");
227 if (wl->state == WL1251_STATE_OFF)
230 ret = wl1251_ps_elp_wakeup(wl);
234 wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, WL1251_ACX_INTR_ALL);
236 intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
237 wl1251_debug(DEBUG_IRQ, "intr: 0x%x", intr);
241 wl->rx_counter = wl1251_mem_read32(
242 wl, wl->data_path->rx_control_addr);
244 /* We handle a frmware bug here */
245 switch ((wl->rx_counter - wl->rx_handled) & 0xf) {
247 wl1251_debug(DEBUG_IRQ,
248 "RX: FW and host in sync");
249 intr &= ~WL1251_ACX_INTR_RX0_DATA;
250 intr &= ~WL1251_ACX_INTR_RX1_DATA;
253 wl1251_debug(DEBUG_IRQ, "RX: FW +1");
254 intr |= WL1251_ACX_INTR_RX0_DATA;
255 intr &= ~WL1251_ACX_INTR_RX1_DATA;
258 wl1251_debug(DEBUG_IRQ, "RX: FW +2");
259 intr |= WL1251_ACX_INTR_RX0_DATA;
260 intr |= WL1251_ACX_INTR_RX1_DATA;
264 "RX: FW and host out of sync: %d",
265 wl->rx_counter - wl->rx_handled);
269 wl->rx_handled = wl->rx_counter;
271 wl1251_debug(DEBUG_IRQ, "RX counter: %d",
275 intr &= wl->intr_mask;
278 wl1251_debug(DEBUG_IRQ, "INTR is 0");
282 if (intr & WL1251_ACX_INTR_TX_RESULT) {
283 wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_TX_RESULT");
284 wl1251_tx_complete(wl);
287 if (intr & WL1251_ACX_INTR_RX0_DATA) {
288 wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX0_DATA");
291 if ((intr & WL1251_ACX_INTR_RX1_DATA)
292 && skb_queue_len(&wl->tx_queue) > 0)
293 wl1251_tx_work_unlocked(wl, false);
296 if (intr & WL1251_ACX_INTR_RX1_DATA) {
297 wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX1_DATA");
301 if (intr & WL1251_ACX_INTR_EVENT_A) {
302 wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_A");
303 wl1251_event_handle(wl, 0);
306 if (intr & WL1251_ACX_INTR_EVENT_B) {
307 wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_B");
308 wl1251_event_handle(wl, 1);
311 if (intr & WL1251_ACX_INTR_INIT_COMPLETE)
312 wl1251_debug(DEBUG_IRQ,
313 "WL1251_ACX_INTR_INIT_COMPLETE");
315 if (skb_queue_len(&wl->tx_queue) > 0)
316 wl1251_tx_work_unlocked(wl, false);
321 intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
325 wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, ~(wl->intr_mask));
326 wl1251_ps_elp_sleep(wl);
329 mutex_unlock(&wl->mutex);
332 EXPORT_SYMBOL_GPL(wl1251_irq);
334 static void wl1251_irq_work(struct work_struct *work)
337 container_of(work, struct wl1251, irq_work);
342 static int wl1251_join(struct wl1251 *wl, u8 bss_type, u8 channel,
343 u16 beacon_interval, u8 dtim_period)
347 ret = wl1251_acx_frame_rates(wl, DEFAULT_HW_GEN_TX_RATE,
348 DEFAULT_HW_GEN_MODULATION_TYPE,
349 wl->tx_mgmt_frm_rate,
350 wl->tx_mgmt_frm_mod);
355 * Join command applies filters, and if we are not associated,
356 * BSSID filter must be disabled for association to work.
358 if (is_zero_ether_addr(wl->bssid))
359 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
361 ret = wl1251_cmd_join(wl, bss_type, channel, beacon_interval,
366 ret = wl1251_event_wait(wl, JOIN_EVENT_COMPLETE_ID, 100);
368 wl1251_warning("join timeout");
370 wl1251_no_ps_event(wl);
376 static void wl1251_op_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
378 struct wl1251 *wl = hw->priv;
381 skb_queue_tail(&wl->tx_queue, skb);
384 * The chip specific setup must run before the first TX packet -
385 * before that, the tx_work will not be initialized!
388 ieee80211_queue_work(wl->hw, &wl->tx_work);
391 * The workqueue is slow to process the tx_queue and we need stop
392 * the queue here, otherwise the queue will get too long.
394 if (skb_queue_len(&wl->tx_queue) >= WL1251_TX_QUEUE_HIGH_WATERMARK) {
395 wl1251_debug(DEBUG_TX, "op_tx: tx_queue full, stop queues");
397 spin_lock_irqsave(&wl->wl_lock, flags);
398 ieee80211_stop_queues(wl->hw);
399 wl->tx_queue_stopped = true;
400 spin_unlock_irqrestore(&wl->wl_lock, flags);
404 static int wl1251_op_start(struct ieee80211_hw *hw)
406 struct wl1251 *wl = hw->priv;
407 struct wiphy *wiphy = hw->wiphy;
410 wl1251_debug(DEBUG_MAC80211, "mac80211 start");
412 mutex_lock(&wl->mutex);
414 if (wl->state != WL1251_STATE_OFF) {
415 wl1251_error("cannot start because not in off state: %d",
421 ret = wl1251_chip_wakeup(wl);
425 ret = wl1251_boot(wl);
429 ret = wl1251_hw_init(wl);
433 ret = wl1251_acx_station_id(wl);
437 wl->state = WL1251_STATE_ON;
439 wl1251_info("firmware booted (%s)", wl->fw_ver);
441 /* update hw/fw version info in wiphy struct */
442 wiphy->hw_version = wl->chip_id;
443 strncpy(wiphy->fw_version, wl->fw_ver, sizeof(wiphy->fw_version));
447 wl1251_power_off(wl);
449 mutex_unlock(&wl->mutex);
454 static void wl1251_op_stop(struct ieee80211_hw *hw)
456 struct wl1251 *wl = hw->priv;
460 wl1251_debug(DEBUG_MAC80211, "mac80211 stop");
462 mutex_lock(&wl->mutex);
464 WARN_ON(wl->state != WL1251_STATE_ON);
467 ieee80211_scan_completed(wl->hw, true);
468 wl->scanning = false;
471 wl->state = WL1251_STATE_OFF;
473 wl1251_disable_interrupts(wl);
475 mutex_unlock(&wl->mutex);
477 cancel_work_sync(&wl->irq_work);
478 cancel_work_sync(&wl->tx_work);
479 cancel_delayed_work_sync(&wl->ps_work);
480 cancel_delayed_work_sync(&wl->elp_work);
482 mutex_lock(&wl->mutex);
484 /* let's notify MAC80211 about the remaining pending TX frames */
486 wl1251_power_off(wl);
488 memset(wl->bssid, 0, ETH_ALEN);
490 wl->bss_type = MAX_BSS_TYPE;
492 wl->data_in_count = 0;
495 wl->rx_current_buffer = 0;
497 wl->next_tx_complete = 0;
499 wl->station_mode = STATION_ACTIVE_MODE;
500 wl->tx_queue_stopped = false;
501 wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
503 wl->channel = WL1251_DEFAULT_CHANNEL;
504 wl->monitor_present = false;
506 wl->long_doze_mode_set = false;
508 wl1251_debugfs_reset(wl);
510 mutex_unlock(&wl->mutex);
513 static int wl1251_op_add_interface(struct ieee80211_hw *hw,
514 struct ieee80211_vif *vif)
516 struct wl1251 *wl = hw->priv;
519 wl1251_debug(DEBUG_MAC80211, "mac80211 add interface type %d mac %pM",
520 vif->type, vif->addr);
522 mutex_lock(&wl->mutex);
531 case NL80211_IFTYPE_STATION:
532 wl->bss_type = BSS_TYPE_STA_BSS;
534 case NL80211_IFTYPE_ADHOC:
535 wl->bss_type = BSS_TYPE_IBSS;
542 if (memcmp(wl->mac_addr, vif->addr, ETH_ALEN)) {
543 memcpy(wl->mac_addr, vif->addr, ETH_ALEN);
544 SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
545 ret = wl1251_acx_station_id(wl);
551 mutex_unlock(&wl->mutex);
555 static void wl1251_op_remove_interface(struct ieee80211_hw *hw,
556 struct ieee80211_vif *vif)
558 struct wl1251 *wl = hw->priv;
560 mutex_lock(&wl->mutex);
561 wl1251_debug(DEBUG_MAC80211, "mac80211 remove interface");
563 memset(wl->bssid, 0, ETH_ALEN);
564 mutex_unlock(&wl->mutex);
567 static int wl1251_build_null_data(struct wl1251 *wl)
569 struct sk_buff *skb = NULL;
575 if (wl->bss_type == BSS_TYPE_IBSS) {
576 size = sizeof(struct wl12xx_null_data_template);
579 skb = ieee80211_nullfunc_get(wl->hw, wl->vif);
586 ret = wl1251_cmd_template_set(wl, CMD_NULL_DATA, ptr, size);
591 wl1251_warning("cmd buld null data failed %d", ret);
597 static int wl1251_build_qos_null_data(struct wl1251 *wl)
599 struct ieee80211_qos_hdr template;
601 memset(&template, 0, sizeof(template));
603 memcpy(template.addr1, wl->bssid, ETH_ALEN);
604 memcpy(template.addr2, wl->mac_addr, ETH_ALEN);
605 memcpy(template.addr3, wl->bssid, ETH_ALEN);
607 template.frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
608 IEEE80211_STYPE_QOS_NULLFUNC |
609 IEEE80211_FCTL_TODS);
611 /* FIXME: not sure what priority to use here */
612 template.qos_ctrl = cpu_to_le16(0);
614 return wl1251_cmd_template_set(wl, CMD_QOS_NULL_DATA, &template,
618 static void wl1251_ps_work(struct work_struct *work)
620 struct delayed_work *dwork;
622 unsigned long diff, wait;
628 dwork = container_of(work, struct delayed_work, work);
629 wl = container_of(dwork, struct wl1251, ps_work);
631 mutex_lock(&wl->mutex);
633 /* don't change PS modes while still transitioning, to avoid possbile
634 * fw bugs (it normally takes ~130ms to enable and ~10ms to disable) */
635 if (wl->ps_transitioning) {
636 diff = jiffies - wl->ps_change_jiffies;
637 if (diff > msecs_to_jiffies(500)) {
638 wl1251_error("PS change taking too long: %lu", diff);
639 wl->ps_transitioning = false;
641 //wl1251_error("PS still transitioning");
642 ieee80211_queue_delayed_work(wl->hw, &wl->ps_work,
643 msecs_to_jiffies(50));
648 have_ps = wl->station_mode == STATION_POWER_SAVE_MODE;
649 need_ps = wl->psm_requested && !wl->bss_lost
650 && wl->rate < wl->ps_rate_threshold;
652 if (need_ps == have_ps) {
653 //wl1251_info("ps: already in mode %d", have_ps);
657 /* don't enter PS if there was recent activity */
661 diff = jiffies - wl->last_no_ps_jiffies[1];
662 if (diff < msecs_to_jiffies(1000))
663 wait = msecs_to_jiffies(1000) - diff + 1;
665 diff = jiffies - wl->last_no_ps_jiffies[0];
666 if (diff < msecs_to_jiffies(3000))
667 wait += msecs_to_jiffies(1000);
669 for (i = 0; i < ARRAY_SIZE(wl->tx_frames); i++) {
670 if (wl->tx_frames[i] != NULL) {
671 //wl1251_error(" frm %d busy", i);
672 if (wait < msecs_to_jiffies(50))
673 wait = msecs_to_jiffies(50);
679 ieee80211_queue_delayed_work(wl->hw, &wl->ps_work, wait);
684 ret = wl1251_ps_elp_wakeup(wl);
689 wl1251_acx_wr_tbtt_and_dtim(wl, wl->beacon_int,
692 ret = wl1251_ps_set_mode(wl,
693 need_ps ? STATION_POWER_SAVE_MODE : STATION_ACTIVE_MODE);
697 // wl1251_info("psm %d, r %u", need_ps, wl->rate);
700 wl1251_ps_elp_sleep(wl);
703 mutex_unlock(&wl->mutex);
706 static bool wl1251_can_do_pm(struct ieee80211_conf *conf, struct wl1251 *wl)
708 return (conf->flags & IEEE80211_CONF_PS) && !wl->monitor_present;
711 static int wl1251_op_config(struct ieee80211_hw *hw, u32 changed)
713 struct wl1251 *wl = hw->priv;
714 struct ieee80211_conf *conf = &hw->conf;
715 int channel, ret = 0;
717 channel = ieee80211_frequency_to_channel(conf->channel->center_freq);
719 wl1251_debug(DEBUG_MAC80211,
720 "mac80211 config ch %d monitor %s psm %s power %d",
722 conf->flags & IEEE80211_CONF_MONITOR ? "on" : "off",
723 conf->flags & IEEE80211_CONF_PS ? "on" : "off",
726 mutex_lock(&wl->mutex);
728 ret = wl1251_ps_elp_wakeup(wl);
732 if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
735 if (conf->flags & IEEE80211_CONF_MONITOR) {
736 wl->monitor_present = true;
737 mode = DF_SNIFF_MODE_ENABLE | DF_ENCRYPTION_DISABLE;
739 wl->monitor_present = false;
743 ret = wl1251_acx_feature_cfg(wl, mode);
748 if (channel != wl->channel) {
749 wl->channel = channel;
752 * Use ENABLE_RX command for channel switching when no
753 * interface is present (monitor mode only).
754 * This leaves the tx path disabled in firmware, whereas
755 * the usual JOIN command seems to transmit some frames
758 * Note that bss_type must be BSS_TYPE_STA_BSS, also at least
759 * one join has to be performed before CMD_ENABLE_RX can
760 * properly switch channels (join will be done by CONF_IDLE).
762 if (wl->vif == NULL) {
763 wl->bss_type = BSS_TYPE_STA_BSS;
765 ret = wl1251_cmd_data_path_rx(wl, wl->channel, 1);
767 ret = wl1251_join(wl, wl->bss_type, wl->channel,
768 wl->beacon_int, wl->dtim_period);
774 if (wl1251_can_do_pm(conf, wl) && !wl->psm_requested) {
775 wl1251_debug(DEBUG_PSM, "psm enabled");
777 wl->psm_requested = true;
779 wl->dtim_period = conf->ps_dtim_period;
781 ieee80211_queue_delayed_work(wl->hw, &wl->ps_work, 0);
782 } else if (!wl1251_can_do_pm(conf, wl) && wl->psm_requested) {
783 wl1251_debug(DEBUG_PSM, "psm disabled");
785 wl->psm_requested = false;
787 ieee80211_queue_delayed_work(wl->hw, &wl->ps_work, 0);
790 if (changed & IEEE80211_CONF_CHANGE_IDLE) {
791 if (conf->flags & IEEE80211_CONF_IDLE) {
792 ret = wl1251_ps_set_mode(wl, STATION_IDLE);
796 ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
800 ret = wl1251_event_wait(wl, PS_REPORT_EVENT_ID, 100);
802 wl1251_error("error waiting for wakeup");
804 ret = wl1251_join(wl, wl->bss_type, wl->channel,
805 wl->beacon_int, wl->dtim_period);
811 if (conf->power_level != wl->power_level) {
812 ret = wl1251_acx_tx_power(wl, conf->power_level);
816 wl->power_level = conf->power_level;
820 wl1251_ps_elp_sleep(wl);
823 mutex_unlock(&wl->mutex);
828 struct wl1251_filter_params {
831 u8 mc_list[ACX_MC_ADDRESS_GROUP_MAX][ETH_ALEN];
834 static u64 wl1251_op_prepare_multicast(struct ieee80211_hw *hw,
835 struct netdev_hw_addr_list *mc_list)
837 struct wl1251_filter_params *fp;
838 struct netdev_hw_addr *ha;
839 struct wl1251 *wl = hw->priv;
841 if (unlikely(wl->state == WL1251_STATE_OFF))
844 fp = kzalloc(sizeof(*fp), GFP_ATOMIC);
846 wl1251_error("Out of memory setting filters.");
850 /* update multicast filtering parameters */
851 fp->mc_list_length = 0;
852 if (netdev_hw_addr_list_count(mc_list) > ACX_MC_ADDRESS_GROUP_MAX) {
856 netdev_hw_addr_list_for_each(ha, mc_list) {
857 memcpy(fp->mc_list[fp->mc_list_length],
859 fp->mc_list_length++;
863 return (u64)(unsigned long)fp;
866 #define WL1251_SUPPORTED_FILTERS (FIF_PROMISC_IN_BSS | \
869 FIF_BCN_PRBRESP_PROMISC | \
874 static void wl1251_op_configure_filter(struct ieee80211_hw *hw,
875 unsigned int changed,
876 unsigned int *total, u64 multicast)
878 struct wl1251_filter_params *fp = (void *)(unsigned long)multicast;
879 struct wl1251 *wl = hw->priv;
882 wl1251_debug(DEBUG_MAC80211, "mac80211 configure filter");
884 *total &= WL1251_SUPPORTED_FILTERS;
885 changed &= WL1251_SUPPORTED_FILTERS;
888 /* no filters which we support changed */
893 mutex_lock(&wl->mutex);
895 wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
896 wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
898 if (*total & FIF_PROMISC_IN_BSS) {
899 wl->rx_config |= CFG_BSSID_FILTER_EN;
900 wl->rx_config |= CFG_RX_ALL_GOOD;
902 if (*total & FIF_ALLMULTI)
904 * CFG_MC_FILTER_EN in rx_config needs to be 0 to receive
905 * all multicast frames
907 wl->rx_config &= ~CFG_MC_FILTER_EN;
908 if (*total & FIF_FCSFAIL)
909 wl->rx_filter |= CFG_RX_FCS_ERROR;
910 if (*total & FIF_BCN_PRBRESP_PROMISC) {
911 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
912 wl->rx_config &= ~CFG_SSID_FILTER_EN;
914 if (*total & FIF_CONTROL)
915 wl->rx_filter |= CFG_RX_CTL_EN;
916 if (*total & FIF_OTHER_BSS || is_zero_ether_addr(wl->bssid))
917 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
918 if (*total & FIF_PROBE_REQ)
919 wl->rx_filter |= CFG_RX_PREQ_EN;
921 if (wl->state == WL1251_STATE_OFF)
924 ret = wl1251_ps_elp_wakeup(wl);
928 if (*total & FIF_ALLMULTI || *total & FIF_PROMISC_IN_BSS)
929 ret = wl1251_acx_group_address_tbl(wl, false, NULL, 0);
931 ret = wl1251_acx_group_address_tbl(wl, fp->enabled,
937 /* send filters to firmware */
938 wl1251_acx_rx_config(wl, wl->rx_config, wl->rx_filter);
940 wl1251_ps_elp_sleep(wl);
943 mutex_unlock(&wl->mutex);
948 static int wl1251_set_key_type(struct wl1251 *wl,
949 struct wl1251_cmd_set_keys *key,
950 enum set_key_cmd cmd,
951 struct ieee80211_key_conf *mac80211_key,
954 switch (mac80211_key->cipher) {
955 case WLAN_CIPHER_SUITE_WEP40:
956 case WLAN_CIPHER_SUITE_WEP104:
957 if (is_broadcast_ether_addr(addr))
958 key->key_type = KEY_WEP_DEFAULT;
960 key->key_type = KEY_WEP_ADDR;
962 mac80211_key->hw_key_idx = mac80211_key->keyidx;
964 case WLAN_CIPHER_SUITE_TKIP:
965 if (is_broadcast_ether_addr(addr))
966 key->key_type = KEY_TKIP_MIC_GROUP;
968 key->key_type = KEY_TKIP_MIC_PAIRWISE;
970 mac80211_key->hw_key_idx = mac80211_key->keyidx;
972 case WLAN_CIPHER_SUITE_CCMP:
973 if (is_broadcast_ether_addr(addr))
974 key->key_type = KEY_AES_GROUP;
976 key->key_type = KEY_AES_PAIRWISE;
977 mac80211_key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
980 wl1251_error("Unknown key cipher 0x%x", mac80211_key->cipher);
987 static int wl1251_op_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
988 struct ieee80211_vif *vif,
989 struct ieee80211_sta *sta,
990 struct ieee80211_key_conf *key)
992 struct wl1251 *wl = hw->priv;
993 struct wl1251_cmd_set_keys *wl_cmd;
997 static const u8 bcast_addr[ETH_ALEN] =
998 { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
1000 wl1251_debug(DEBUG_MAC80211, "mac80211 set key");
1002 wl_cmd = kzalloc(sizeof(*wl_cmd), GFP_KERNEL);
1008 addr = sta ? sta->addr : bcast_addr;
1010 wl1251_debug(DEBUG_CRYPT, "CMD: 0x%x", cmd);
1011 wl1251_dump(DEBUG_CRYPT, "ADDR: ", addr, ETH_ALEN);
1012 wl1251_debug(DEBUG_CRYPT, "Key: algo:0x%x, id:%d, len:%d flags 0x%x",
1013 key->cipher, key->keyidx, key->keylen, key->flags);
1014 wl1251_dump(DEBUG_CRYPT, "KEY: ", key->key, key->keylen);
1016 if (is_zero_ether_addr(addr)) {
1017 /* We dont support TX only encryption */
1022 mutex_lock(&wl->mutex);
1026 if (wl->monitor_present) {
1030 wl_cmd->key_action = KEY_ADD_OR_REPLACE;
1033 wl_cmd->key_action = KEY_REMOVE;
1036 wl1251_error("Unsupported key cmd 0x%x", cmd);
1040 ret = wl1251_ps_elp_wakeup(wl);
1044 ret = wl1251_set_key_type(wl, wl_cmd, cmd, key, addr);
1046 wl1251_error("Set KEY type failed");
1050 if (wl_cmd->key_type != KEY_WEP_DEFAULT)
1051 memcpy(wl_cmd->addr, addr, ETH_ALEN);
1053 if ((wl_cmd->key_type == KEY_TKIP_MIC_GROUP) ||
1054 (wl_cmd->key_type == KEY_TKIP_MIC_PAIRWISE)) {
1056 * We get the key in the following form:
1057 * TKIP (16 bytes) - TX MIC (8 bytes) - RX MIC (8 bytes)
1058 * but the target is expecting:
1059 * TKIP - RX MIC - TX MIC
1061 memcpy(wl_cmd->key, key->key, 16);
1062 memcpy(wl_cmd->key + 16, key->key + 24, 8);
1063 memcpy(wl_cmd->key + 24, key->key + 16, 8);
1066 memcpy(wl_cmd->key, key->key, key->keylen);
1068 wl_cmd->key_size = key->keylen;
1070 wl_cmd->id = key->keyidx;
1071 wl_cmd->ssid_profile = 0;
1073 wl1251_dump(DEBUG_CRYPT, "TARGET KEY: ", wl_cmd, sizeof(*wl_cmd));
1075 ret = wl1251_cmd_send(wl, CMD_SET_KEYS, wl_cmd, sizeof(*wl_cmd));
1077 wl1251_warning("could not set keys");
1082 wl1251_ps_elp_sleep(wl);
1085 mutex_unlock(&wl->mutex);
1093 static int wl1251_op_hw_scan(struct ieee80211_hw *hw,
1094 struct ieee80211_vif *vif,
1095 struct cfg80211_scan_request *req)
1097 struct wl1251 *wl = hw->priv;
1098 struct sk_buff *skb;
1099 size_t ssid_len = 0;
1103 wl1251_debug(DEBUG_MAC80211, "mac80211 hw scan");
1106 ssid = req->ssids[0].ssid;
1107 ssid_len = req->ssids[0].ssid_len;
1110 mutex_lock(&wl->mutex);
1113 wl1251_debug(DEBUG_SCAN, "scan already in progress");
1118 ret = wl1251_ps_elp_wakeup(wl);
1122 skb = ieee80211_probereq_get(wl->hw, wl->vif, ssid, ssid_len,
1123 req->ie, req->ie_len);
1129 ret = wl1251_cmd_template_set(wl, CMD_PROBE_REQ, skb->data,
1135 ret = wl1251_cmd_trigger_scan_to(wl, 0);
1139 wl->scanning = true;
1141 ret = wl1251_cmd_scan(wl, ssid, ssid_len, req->channels,
1142 req->n_channels, WL1251_SCAN_NUM_PROBES);
1144 wl1251_debug(DEBUG_SCAN, "scan failed %d", ret);
1145 wl->scanning = false;
1150 wl1251_ps_elp_sleep(wl);
1153 mutex_unlock(&wl->mutex);
1158 static int wl1251_op_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1160 struct wl1251 *wl = hw->priv;
1163 mutex_lock(&wl->mutex);
1165 ret = wl1251_ps_elp_wakeup(wl);
1169 ret = wl1251_acx_rts_threshold(wl, (u16) value);
1171 wl1251_warning("wl1251_op_set_rts_threshold failed: %d", ret);
1173 wl1251_ps_elp_sleep(wl);
1176 mutex_unlock(&wl->mutex);
1181 static void wl1251_op_bss_info_changed(struct ieee80211_hw *hw,
1182 struct ieee80211_vif *vif,
1183 struct ieee80211_bss_conf *bss_conf,
1186 struct wl1251 *wl = hw->priv;
1187 struct sk_buff *beacon, *skb;
1188 bool do_join = false;
1192 wl1251_debug(DEBUG_MAC80211, "mac80211 bss info changed");
1194 mutex_lock(&wl->mutex);
1196 ret = wl1251_ps_elp_wakeup(wl);
1200 if (changed & BSS_CHANGED_CQM) {
1201 ret = wl1251_acx_low_rssi(wl, bss_conf->cqm_rssi_thold,
1202 WL1251_DEFAULT_LOW_RSSI_WEIGHT,
1203 WL1251_DEFAULT_LOW_RSSI_DEPTH,
1204 WL1251_ACX_LOW_RSSI_TYPE_EDGE);
1207 wl->rssi_thold = bss_conf->cqm_rssi_thold;
1210 if ((changed & BSS_CHANGED_BSSID) &&
1211 memcmp(wl->bssid, bss_conf->bssid, ETH_ALEN)) {
1212 memcpy(wl->bssid, bss_conf->bssid, ETH_ALEN);
1214 if (!is_zero_ether_addr(wl->bssid)) {
1215 ret = wl1251_build_null_data(wl);
1219 ret = wl1251_build_qos_null_data(wl);
1227 if (changed & BSS_CHANGED_ASSOC) {
1228 if (bss_conf->assoc) {
1229 wl->beacon_int = bss_conf->beacon_int;
1231 skb = ieee80211_pspoll_get(wl->hw, wl->vif);
1235 ret = wl1251_cmd_template_set(wl, CMD_PS_POLL,
1242 ret = wl1251_acx_aid(wl, bss_conf->aid);
1246 /* use defaults when not associated */
1247 wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1248 wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1251 if (changed & BSS_CHANGED_ERP_SLOT) {
1252 if (bss_conf->use_short_slot)
1253 ret = wl1251_acx_slot(wl, SLOT_TIME_SHORT);
1255 ret = wl1251_acx_slot(wl, SLOT_TIME_LONG);
1257 wl1251_warning("Set slot time failed %d", ret);
1262 if (changed & BSS_CHANGED_ERP_PREAMBLE) {
1263 if (bss_conf->use_short_preamble)
1264 wl1251_acx_set_preamble(wl, ACX_PREAMBLE_SHORT);
1266 wl1251_acx_set_preamble(wl, ACX_PREAMBLE_LONG);
1269 if (changed & BSS_CHANGED_ERP_CTS_PROT) {
1270 if (bss_conf->use_cts_prot)
1271 ret = wl1251_acx_cts_protect(wl, CTSPROTECT_ENABLE);
1273 ret = wl1251_acx_cts_protect(wl, CTSPROTECT_DISABLE);
1275 wl1251_warning("Set ctsprotect failed %d", ret);
1280 if (changed & BSS_CHANGED_ARP_FILTER) {
1281 __be32 addr = bss_conf->arp_addr_list[0];
1282 WARN_ON(wl->bss_type != BSS_TYPE_STA_BSS);
1284 enable = bss_conf->arp_addr_cnt == 1 && bss_conf->assoc;
1285 wl1251_acx_arp_ip_filter(wl, enable, addr);
1291 if (changed & BSS_CHANGED_BEACON) {
1292 beacon = ieee80211_beacon_get(hw, vif);
1296 ret = wl1251_cmd_template_set(wl, CMD_BEACON, beacon->data,
1300 dev_kfree_skb(beacon);
1304 ret = wl1251_cmd_template_set(wl, CMD_PROBE_RESP, beacon->data,
1307 dev_kfree_skb(beacon);
1316 ret = wl1251_join(wl, wl->bss_type, wl->channel,
1317 wl->beacon_int, wl->dtim_period);
1323 wl1251_ps_elp_sleep(wl);
1326 mutex_unlock(&wl->mutex);
1330 /* can't be const, mac80211 writes to this */
1331 static struct ieee80211_rate wl1251_rates[] = {
1334 .hw_value_short = 0x1, },
1337 .hw_value_short = 0x2,
1338 .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1341 .hw_value_short = 0x4,
1342 .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1345 .hw_value_short = 0x20,
1346 .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1349 .hw_value_short = 0x8, },
1352 .hw_value_short = 0x10, },
1355 .hw_value_short = 0x40, },
1358 .hw_value_short = 0x80, },
1361 .hw_value_short = 0x200, },
1364 .hw_value_short = 0x400, },
1367 .hw_value_short = 0x800, },
1370 .hw_value_short = 0x1000, },
1373 /* can't be const, mac80211 writes to this */
1374 static struct ieee80211_channel wl1251_channels[] = {
1375 { .hw_value = 1, .center_freq = 2412},
1376 { .hw_value = 2, .center_freq = 2417},
1377 { .hw_value = 3, .center_freq = 2422},
1378 { .hw_value = 4, .center_freq = 2427},
1379 { .hw_value = 5, .center_freq = 2432},
1380 { .hw_value = 6, .center_freq = 2437},
1381 { .hw_value = 7, .center_freq = 2442},
1382 { .hw_value = 8, .center_freq = 2447},
1383 { .hw_value = 9, .center_freq = 2452},
1384 { .hw_value = 10, .center_freq = 2457},
1385 { .hw_value = 11, .center_freq = 2462},
1386 { .hw_value = 12, .center_freq = 2467},
1387 { .hw_value = 13, .center_freq = 2472},
1390 static int wl1251_op_conf_tx(struct ieee80211_hw *hw,
1391 struct ieee80211_vif *vif, u16 queue,
1392 const struct ieee80211_tx_queue_params *params)
1394 enum wl1251_acx_ps_scheme ps_scheme;
1395 struct wl1251 *wl = hw->priv;
1398 mutex_lock(&wl->mutex);
1400 wl1251_debug(DEBUG_MAC80211, "mac80211 conf tx %d", queue);
1402 ret = wl1251_ps_elp_wakeup(wl);
1406 /* mac80211 uses units of 32 usec */
1407 ret = wl1251_acx_ac_cfg(wl, wl1251_tx_get_queue(queue),
1408 params->cw_min, params->cw_max,
1409 params->aifs, params->txop * 32);
1414 ps_scheme = WL1251_ACX_PS_SCHEME_UPSD_TRIGGER;
1416 ps_scheme = WL1251_ACX_PS_SCHEME_LEGACY;
1418 ret = wl1251_acx_tid_cfg(wl, wl1251_tx_get_queue(queue),
1420 wl1251_tx_get_queue(queue), ps_scheme,
1421 WL1251_ACX_ACK_POLICY_LEGACY);
1426 wl1251_ps_elp_sleep(wl);
1429 mutex_unlock(&wl->mutex);
1434 static int wl1251_op_get_survey(struct ieee80211_hw *hw, int idx,
1435 struct survey_info *survey)
1437 struct wl1251 *wl = hw->priv;
1438 struct ieee80211_conf *conf = &hw->conf;
1443 survey->channel = conf->channel;
1444 survey->filled = SURVEY_INFO_NOISE_DBM;
1445 survey->noise = wl->noise;
1450 /* can't be const, mac80211 writes to this */
1451 static struct ieee80211_supported_band wl1251_band_2ghz = {
1452 .channels = wl1251_channels,
1453 .n_channels = ARRAY_SIZE(wl1251_channels),
1454 .bitrates = wl1251_rates,
1455 .n_bitrates = ARRAY_SIZE(wl1251_rates),
1458 static const struct ieee80211_ops wl1251_ops = {
1459 .start = wl1251_op_start,
1460 .stop = wl1251_op_stop,
1461 .add_interface = wl1251_op_add_interface,
1462 .remove_interface = wl1251_op_remove_interface,
1463 .config = wl1251_op_config,
1464 .prepare_multicast = wl1251_op_prepare_multicast,
1465 .configure_filter = wl1251_op_configure_filter,
1467 .set_key = wl1251_op_set_key,
1468 .hw_scan = wl1251_op_hw_scan,
1469 .bss_info_changed = wl1251_op_bss_info_changed,
1470 .set_rts_threshold = wl1251_op_set_rts_threshold,
1471 .conf_tx = wl1251_op_conf_tx,
1472 .get_survey = wl1251_op_get_survey,
1475 static int wl1251_read_eeprom_byte(struct wl1251 *wl, off_t offset, u8 *data)
1477 unsigned long timeout;
1479 wl1251_reg_write32(wl, EE_ADDR, offset);
1480 wl1251_reg_write32(wl, EE_CTL, EE_CTL_READ);
1482 /* EE_CTL_READ clears when data is ready */
1483 timeout = jiffies + msecs_to_jiffies(100);
1485 if (!(wl1251_reg_read32(wl, EE_CTL) & EE_CTL_READ))
1488 if (time_after(jiffies, timeout))
1494 *data = wl1251_reg_read32(wl, EE_DATA);
1498 static int wl1251_read_eeprom(struct wl1251 *wl, off_t offset,
1499 u8 *data, size_t len)
1504 wl1251_reg_write32(wl, EE_START, 0);
1506 for (i = 0; i < len; i++) {
1507 ret = wl1251_read_eeprom_byte(wl, offset + i, &data[i]);
1515 static int wl1251_read_eeprom_mac(struct wl1251 *wl)
1520 wl1251_set_partition(wl, 0, 0, REGISTERS_BASE, REGISTERS_DOWN_SIZE);
1522 ret = wl1251_read_eeprom(wl, 0x1c, mac, sizeof(mac));
1524 wl1251_warning("failed to read MAC address from EEPROM");
1528 /* MAC is stored in reverse order */
1529 for (i = 0; i < ETH_ALEN; i++)
1530 wl->mac_addr[i] = mac[ETH_ALEN - i - 1];
1535 /* temporary (?) hack for EEPROM dumping
1536 * (it seems this can only be done before fw is running) */
1537 static int wl1251_dump_eeprom(struct wl1251 *wl)
1541 wl1251_set_partition(wl, 0, 0, REGISTERS_BASE, REGISTERS_DOWN_SIZE);
1543 wl->eeprom_dump = kzalloc(1024, GFP_KERNEL);
1544 if (wl->eeprom_dump == NULL) {
1549 ret = wl1251_read_eeprom(wl, 0, wl->eeprom_dump, 1024);
1551 wl1251_error("eeprom dump failed: %d", ret);
1552 kfree(wl->eeprom_dump);
1553 wl->eeprom_dump = NULL;
1557 wl1251_info("eeprom dumped.");
1563 static int wl1251_register_hw(struct wl1251 *wl)
1567 if (wl->mac80211_registered)
1570 SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
1572 ret = ieee80211_register_hw(wl->hw);
1574 wl1251_error("unable to register mac80211 hw: %d", ret);
1578 wl->mac80211_registered = true;
1580 wl1251_notice("loaded");
1585 int wl1251_init_ieee80211(struct wl1251 *wl)
1589 /* The tx descriptor buffer and the TKIP space */
1590 wl->hw->extra_tx_headroom = sizeof(struct tx_double_buffer_desc)
1591 + WL1251_TKIP_IV_SPACE;
1594 /* FIXME: find a proper value */
1595 wl->hw->channel_change_time = 10000;
1597 wl->hw->flags = IEEE80211_HW_SIGNAL_DBM |
1598 IEEE80211_HW_SUPPORTS_PS |
1599 IEEE80211_HW_SUPPORTS_DYNAMIC_PS |
1600 IEEE80211_HW_BEACON_FILTER |
1601 IEEE80211_HW_SUPPORTS_UAPSD |
1602 IEEE80211_HW_SUPPORTS_CQM_RSSI;
1604 wl->hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
1605 BIT(NL80211_IFTYPE_ADHOC);
1606 wl->hw->wiphy->max_scan_ssids = 1;
1607 wl->hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &wl1251_band_2ghz;
1612 wl1251_read_eeprom_mac(wl);
1613 if (wl->dump_eeprom)
1614 wl1251_dump_eeprom(wl);
1616 ret = wl1251_register_hw(wl);
1620 wl1251_debugfs_init(wl);
1621 wl1251_notice("initialized");
1628 EXPORT_SYMBOL_GPL(wl1251_init_ieee80211);
1630 struct ieee80211_hw *wl1251_alloc_hw(void)
1632 struct ieee80211_hw *hw;
1635 static const u8 nokia_oui[3] = {0x00, 0x1f, 0xdf};
1637 hw = ieee80211_alloc_hw(sizeof(*wl), &wl1251_ops);
1639 wl1251_error("could not alloc ieee80211_hw");
1640 return ERR_PTR(-ENOMEM);
1644 memset(wl, 0, sizeof(*wl));
1648 wl->data_in_count = 0;
1650 skb_queue_head_init(&wl->tx_queue);
1652 INIT_DELAYED_WORK(&wl->ps_work, wl1251_ps_work);
1653 INIT_DELAYED_WORK(&wl->elp_work, wl1251_elp_work);
1654 wl->channel = WL1251_DEFAULT_CHANNEL;
1655 wl->monitor_present = false;
1657 wl->scanning = false;
1658 wl->bss_type = MAX_BSS_TYPE;
1659 wl->default_key = 0;
1663 wl->rx_current_buffer = 0;
1665 wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
1666 wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
1668 wl->station_mode = STATION_ACTIVE_MODE;
1669 wl->psm_requested = false;
1670 wl->tx_queue_stopped = false;
1671 wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
1673 wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1674 wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1676 wl->ps_rate_threshold = 100000;
1678 for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++)
1679 wl->tx_frames[i] = NULL;
1681 wl->next_tx_complete = 0;
1683 INIT_WORK(&wl->irq_work, wl1251_irq_work);
1684 INIT_WORK(&wl->tx_work, wl1251_tx_work);
1687 * In case our MAC address is not correctly set,
1688 * we use a random but Nokia MAC.
1690 memcpy(wl->mac_addr, nokia_oui, 3);
1691 get_random_bytes(wl->mac_addr + 3, 3);
1693 wl->state = WL1251_STATE_OFF;
1694 mutex_init(&wl->mutex);
1696 wl->tx_mgmt_frm_rate = DEFAULT_HW_GEN_TX_RATE;
1697 wl->tx_mgmt_frm_mod = DEFAULT_HW_GEN_MODULATION_TYPE;
1699 wl->rx_descriptor = kmalloc(sizeof(*wl->rx_descriptor), GFP_KERNEL);
1700 if (!wl->rx_descriptor) {
1701 wl1251_error("could not allocate memory for rx descriptor");
1702 ieee80211_free_hw(hw);
1703 return ERR_PTR(-ENOMEM);
1708 EXPORT_SYMBOL_GPL(wl1251_alloc_hw);
1710 int wl1251_free_hw(struct wl1251 *wl)
1712 ieee80211_unregister_hw(wl->hw);
1714 wl1251_debugfs_exit(wl);
1716 kfree(wl->target_mem_map);
1717 kfree(wl->data_path);
1723 kfree(wl->rx_descriptor);
1724 wl->rx_descriptor = NULL;
1726 ieee80211_free_hw(wl->hw);
1728 if (wl->eeprom_dump != NULL)
1729 kfree(wl->eeprom_dump);
1733 EXPORT_SYMBOL_GPL(wl1251_free_hw);
1735 MODULE_DESCRIPTION("TI wl1251 Wireles LAN Driver Core");
1736 MODULE_LICENSE("GPL");
1737 MODULE_AUTHOR("Kalle Valo <kvalo@adurom.com>");
1738 MODULE_FIRMWARE(WL1251_FW_NAME);