drivers/net/wireless/wl1251/main.c

   1 /*
   2  * This file is part of wl1251
   3  *
   4  * Copyright (C) 2008-2009 Nokia Corporation
   5  *
   6  * This program is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU General Public License
   8  * version 2 as published by the Free Software Foundation.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13  * General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License
  16  * along with this program; if not, write to the Free Software
  17  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
  18  * 02110-1301 USA
  19  *
  20  */
  21
  22 #include <linux/module.h>
  23 #include <linux/interrupt.h>
  24 #include <linux/firmware.h>
  25 #include <linux/delay.h>
  26 #include <linux/irq.h>
  27 #include <linux/crc32.h>
  28 #include <linux/etherdevice.h>
  29 #include <linux/vmalloc.h>
  30 #include <linux/slab.h>
  31 #include <linux/netdevice.h>
  32
  33 #include "wl1251.h"
  34 #include "wl12xx_80211.h"
  35 #include "reg.h"
  36 #include "io.h"
  37 #include "cmd.h"
  38 #include "event.h"
  39 #include "tx.h"
  40 #include "rx.h"
  41 #include "ps.h"
  42 #include "init.h"
  43 #include "debugfs.h"
  44 #include "boot.h"
  45
  46 static bool use_fw_ps = true;
  47 module_param(use_fw_ps, bool, 0644);
  48 MODULE_PARM_DESC(use_fw_ps, "Enable powersave once and leave it for chip's "
  49                             "firmware to manage. When disabled, mac80211 "
  50                             "will toggle powersave on tx activity instead. "
  51                             "Default: y/Y/1");
  52
  53 void wl1251_enable_interrupts(struct wl1251 *wl)
  54 {
  55         wl->if_ops->enable_irq(wl);
  56 }
  57
  58 void wl1251_disable_interrupts(struct wl1251 *wl)
  59 {
  60         wl->if_ops->disable_irq(wl);
  61 }
  62
  63 static int wl1251_power_off(struct wl1251 *wl)
  64 {
  65         return wl->if_ops->power(wl, false);
  66 }
  67
  68 static int wl1251_power_on(struct wl1251 *wl)
  69 {
  70         return wl->if_ops->power(wl, true);
  71 }
  72
  73 static int wl1251_fetch_firmware(struct wl1251 *wl)
  74 {
  75         const struct firmware *fw;
  76         struct device *dev = wiphy_dev(wl->hw->wiphy);
  77         int ret;
  78
  79         ret = request_firmware(&fw, WL1251_FW_NAME, dev);
  80
  81         if (ret < 0) {
  82                 wl1251_error("could not get firmware: %d", ret);
  83                 return ret;
  84         }
  85
  86         if (fw->size % 4) {
  87                 wl1251_error("firmware size is not multiple of 32 bits: %zu",
  88                              fw->size);
  89                 ret = -EILSEQ;
  90                 goto out;
  91         }
  92
  93         wl->fw_len = fw->size;
  94         wl->fw = vmalloc(wl->fw_len);
  95
  96         if (!wl->fw) {
  97                 wl1251_error("could not allocate memory for the firmware");
  98                 ret = -ENOMEM;
  99                 goto out;
 100         }
 101
 102         memcpy(wl->fw, fw->data, wl->fw_len);
 103
 104         ret = 0;
 105
 106 out:
 107         release_firmware(fw);
 108
 109         return ret;
 110 }
 111
 112 static int wl1251_fetch_nvs(struct wl1251 *wl)
 113 {
 114         const struct firmware *fw;
 115         struct device *dev = wiphy_dev(wl->hw->wiphy);
 116         int ret;
 117
 118         ret = request_firmware(&fw, WL1251_NVS_NAME, dev);
 119
 120         if (ret < 0) {
 121                 wl1251_error("could not get nvs file: %d", ret);
 122                 return ret;
 123         }
 124
 125         if (fw->size % 4) {
 126                 wl1251_error("nvs size is not multiple of 32 bits: %zu",
 127                              fw->size);
 128                 ret = -EILSEQ;
 129                 goto out;
 130         }
 131
 132         wl->nvs_len = fw->size;
 133         wl->nvs = kmemdup(fw->data, wl->nvs_len, GFP_KERNEL);
 134
 135         if (!wl->nvs) {
 136                 wl1251_error("could not allocate memory for the nvs file");
 137                 ret = -ENOMEM;
 138                 goto out;
 139         }
 140
 141         ret = 0;
 142
 143 out:
 144         release_firmware(fw);
 145
 146         return ret;
 147 }
 148
 149 static void wl1251_fw_wakeup(struct wl1251 *wl)
 150 {
 151         u32 elp_reg;
 152
 153         elp_reg = ELPCTRL_WAKE_UP;
 154         wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, elp_reg);
 155         elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
 156
 157         if (!(elp_reg & ELPCTRL_WLAN_READY))
 158                 wl1251_warning("WLAN not ready");
 159 }
 160
 161 static int wl1251_chip_wakeup(struct wl1251 *wl)
 162 {
 163         int ret;
 164
 165         ret = wl1251_power_on(wl);
 166         if (ret < 0)
 167                 return ret;
 168
 169         msleep(WL1251_POWER_ON_SLEEP);
 170         wl->if_ops->reset(wl);
 171
 172         /* We don't need a real memory partition here, because we only want
 173          * to use the registers at this point. */
 174         wl1251_set_partition(wl,
 175                              0x00000000,
 176                              0x00000000,
 177                              REGISTERS_BASE,
 178                              REGISTERS_DOWN_SIZE);
 179
 180         /* ELP module wake up */
 181         wl1251_fw_wakeup(wl);
 182
 183         /* whal_FwCtrl_BootSm() */
 184
 185         /* 0. read chip id from CHIP_ID */
 186         wl->chip_id = wl1251_reg_read32(wl, CHIP_ID_B);
 187
 188         /* 1. check if chip id is valid */
 189
 190         switch (wl->chip_id) {
 191         case CHIP_ID_1251_PG12:
 192                 wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG12)",
 193                              wl->chip_id);
 194                 break;
 195         case CHIP_ID_1251_PG11:
 196                 wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG11)",
 197                              wl->chip_id);
 198                 break;
 199         case CHIP_ID_1251_PG10:
 200         default:
 201                 wl1251_error("unsupported chip id: 0x%x", wl->chip_id);
 202                 ret = -ENODEV;
 203                 goto out;
 204         }
 205
 206         if (wl->fw == NULL) {
 207                 ret = wl1251_fetch_firmware(wl);
 208                 if (ret < 0)
 209                         goto out;
 210         }
 211
 212         if (wl->nvs == NULL && !wl->use_eeprom) {
 213                 /* No NVS from netlink, try to get it from the filesystem */
 214                 ret = wl1251_fetch_nvs(wl);
 215                 if (ret < 0)
 216                         goto out;
 217         }
 218
 219 out:
 220         return ret;
 221 }
 222
 223 #define WL1251_IRQ_LOOP_COUNT 100
 224 irqreturn_t wl1251_irq(int irq, void *cookie)
 225 {
 226         u32 intr, ctr = WL1251_IRQ_LOOP_COUNT;
 227         struct wl1251 *wl = cookie;
 228         int ret;
 229
 230         mutex_lock(&wl->mutex);
 231
 232         wl1251_debug(DEBUG_IRQ, "IRQ work");
 233
 234         if (wl->state == WL1251_STATE_OFF)
 235                 goto out;
 236
 237         ret = wl1251_ps_elp_wakeup(wl);
 238         if (ret < 0)
 239                 goto out;
 240
 241         wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, WL1251_ACX_INTR_ALL);
 242
 243         intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
 244         wl1251_debug(DEBUG_IRQ, "intr: 0x%x", intr);
 245
 246         do {
 247                 if (wl->data_path) {
 248                         wl->rx_counter = wl1251_mem_read32(
 249                                 wl, wl->data_path->rx_control_addr);
 250
 251                         /* We handle a frmware bug here */
 252                         switch ((wl->rx_counter - wl->rx_handled) & 0xf) {
 253                         case 0:
 254                                 wl1251_debug(DEBUG_IRQ,
 255                                              "RX: FW and host in sync");
 256                                 intr &= ~WL1251_ACX_INTR_RX0_DATA;
 257                                 intr &= ~WL1251_ACX_INTR_RX1_DATA;
 258                                 break;
 259                         case 1:
 260                                 wl1251_debug(DEBUG_IRQ, "RX: FW +1");
 261                                 intr |= WL1251_ACX_INTR_RX0_DATA;
 262                                 intr &= ~WL1251_ACX_INTR_RX1_DATA;
 263                                 break;
 264                         case 2:
 265                                 wl1251_debug(DEBUG_IRQ, "RX: FW +2");
 266                                 intr |= WL1251_ACX_INTR_RX0_DATA;
 267                                 intr |= WL1251_ACX_INTR_RX1_DATA;
 268                                 break;
 269                         default:
 270                                 wl1251_warning(
 271                                         "RX: FW and host out of sync: %d",
 272                                         wl->rx_counter - wl->rx_handled);
 273                                 break;
 274                         }
 275
 276                         wl->rx_handled = wl->rx_counter;
 277
 278                         wl1251_debug(DEBUG_IRQ, "RX counter: %d",
 279                                      wl->rx_counter);
 280                 }
 281
 282                 intr &= wl->intr_mask;
 283
 284                 if (intr == 0) {
 285                         wl1251_debug(DEBUG_IRQ, "INTR is 0");
 286                         goto out_sleep;
 287                 }
 288
 289                 if (intr & WL1251_ACX_INTR_TX_RESULT) {
 290                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_TX_RESULT");
 291                         wl1251_tx_complete(wl);
 292                 }
 293
 294                 if (intr & WL1251_ACX_INTR_RX0_DATA) {
 295                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX0_DATA");
 296                         wl1251_rx(wl);
 297
 298                         if ((intr & WL1251_ACX_INTR_RX1_DATA)
 299                             && skb_queue_len(&wl->tx_queue) > 0)
 300                                 wl1251_tx_work_unlocked(wl, false);
 301                 }
 302
 303                 if (intr & WL1251_ACX_INTR_RX1_DATA) {
 304                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX1_DATA");
 305                         wl1251_rx(wl);
 306                 }
 307
 308                 if (intr & WL1251_ACX_INTR_EVENT_A) {
 309                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_A");
 310                         wl1251_event_handle(wl, 0);
 311                 }
 312
 313                 if (intr & WL1251_ACX_INTR_EVENT_B) {
 314                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_B");
 315                         wl1251_event_handle(wl, 1);
 316                 }
 317
 318                 if (intr & WL1251_ACX_INTR_INIT_COMPLETE)
 319                         wl1251_debug(DEBUG_IRQ,
 320                                      "WL1251_ACX_INTR_INIT_COMPLETE");
 321
 322                 if (skb_queue_len(&wl->tx_queue) > 0)
 323                         wl1251_tx_work_unlocked(wl, false);
 324
 325                 if (--ctr == 0)
 326                         break;
 327
 328                 intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
 329         } while (intr);
 330
 331 out_sleep:
 332         wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, ~(wl->intr_mask));
 333         wl1251_ps_elp_sleep(wl);
 334
 335 out:
 336         mutex_unlock(&wl->mutex);
 337         return IRQ_HANDLED;
 338 }
 339 EXPORT_SYMBOL_GPL(wl1251_irq);
 340
 341 static void wl1251_irq_work(struct work_struct *work)
 342 {
 343         struct wl1251 *wl =
 344                 container_of(work, struct wl1251, irq_work);
 345
 346         wl1251_irq(0, wl);
 347 }
 348
 349 static int wl1251_join(struct wl1251 *wl, u8 bss_type, u8 channel,
 350                        u16 beacon_interval, u8 dtim_period)
 351 {
 352         int ret;
 353
 354         ret = wl1251_acx_frame_rates(wl, DEFAULT_HW_GEN_TX_RATE,
 355                                      DEFAULT_HW_GEN_MODULATION_TYPE,
 356                                      wl->tx_mgmt_frm_rate,
 357                                      wl->tx_mgmt_frm_mod);
 358         if (ret < 0)
 359                 goto out;
 360
 361         /*
 362          * Join command applies filters, and if we are not associated,
 363          * BSSID filter must be disabled for association to work.
 364          */
 365         if (is_zero_ether_addr(wl->bssid))
 366                 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
 367
 368         ret = wl1251_cmd_join(wl, bss_type, channel, beacon_interval,
 369                               dtim_period);
 370         if (ret < 0)
 371                 goto out;
 372
 373         ret = wl1251_event_wait(wl, JOIN_EVENT_COMPLETE_ID, 100);
 374         if (ret < 0)
 375                 wl1251_warning("join timeout");
 376
 377         wl1251_no_ps_event(wl);
 378         wl->bss_lost = 0;
 379
 380 out:
 381         return ret;
 382 }
 383
 384 static void wl1251_op_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
 385 {
 386         struct wl1251 *wl = hw->priv;
 387         unsigned long flags;
 388
 389         skb_queue_tail(&wl->tx_queue, skb);
 390
 391         /*
 392          * The chip specific setup must run before the first TX packet -
 393          * before that, the tx_work will not be initialized!
 394          */
 395
 396         ieee80211_queue_work(wl->hw, &wl->tx_work);
 397
 398         /*
 399          * The workqueue is slow to process the tx_queue and we need stop
 400          * the queue here, otherwise the queue will get too long.
 401          */
 402         if (skb_queue_len(&wl->tx_queue) >= WL1251_TX_QUEUE_HIGH_WATERMARK) {
 403                 wl1251_debug(DEBUG_TX, "op_tx: tx_queue full, stop queues");
 404
 405                 spin_lock_irqsave(&wl->wl_lock, flags);
 406                 ieee80211_stop_queues(wl->hw);
 407                 wl->tx_queue_stopped = true;
 408                 spin_unlock_irqrestore(&wl->wl_lock, flags);
 409         }
 410 }
 411
 412 static int wl1251_op_start(struct ieee80211_hw *hw)
 413 {
 414         struct wl1251 *wl = hw->priv;
 415         struct wiphy *wiphy = hw->wiphy;
 416         int ret = 0;
 417
 418         wl1251_debug(DEBUG_MAC80211, "mac80211 start");
 419
 420         mutex_lock(&wl->mutex);
 421
 422         if (wl->state != WL1251_STATE_OFF) {
 423                 wl1251_error("cannot start because not in off state: %d",
 424                              wl->state);
 425                 ret = -EBUSY;
 426                 goto out;
 427         }
 428
 429         ret = wl1251_chip_wakeup(wl);
 430         if (ret < 0)
 431                 goto out;
 432
 433         ret = wl1251_boot(wl);
 434         if (ret < 0)
 435                 goto out;
 436
 437         ret = wl1251_hw_init(wl);
 438         if (ret < 0)
 439                 goto out;
 440
 441         ret = wl1251_acx_station_id(wl);
 442         if (ret < 0)
 443                 goto out;
 444
 445         wl->state = WL1251_STATE_ON;
 446
 447         wl1251_info("firmware booted (%s)", wl->fw_ver);
 448
 449         /* update hw/fw version info in wiphy struct */
 450         wiphy->hw_version = wl->chip_id;
 451         strncpy(wiphy->fw_version, wl->fw_ver, sizeof(wiphy->fw_version));
 452
 453 out:
 454         if (ret < 0)
 455                 wl1251_power_off(wl);
 456
 457         mutex_unlock(&wl->mutex);
 458
 459         return ret;
 460 }
 461
 462 static void wl1251_op_stop(struct ieee80211_hw *hw)
 463 {
 464         struct wl1251 *wl = hw->priv;
 465
 466         wl1251_info("down");
 467
 468         wl1251_debug(DEBUG_MAC80211, "mac80211 stop");
 469
 470         mutex_lock(&wl->mutex);
 471
 472         WARN_ON(wl->state != WL1251_STATE_ON);
 473
 474         if (wl->scanning) {
 475                 ieee80211_scan_completed(wl->hw, true);
 476                 wl->scanning = false;
 477         }
 478
 479         wl->state = WL1251_STATE_OFF;
 480
 481         wl1251_disable_interrupts(wl);
 482
 483         mutex_unlock(&wl->mutex);
 484
 485         cancel_work_sync(&wl->irq_work);
 486         cancel_work_sync(&wl->tx_work);
 487         cancel_delayed_work_sync(&wl->ps_work);
 488         cancel_delayed_work_sync(&wl->elp_work);
 489
 490         mutex_lock(&wl->mutex);
 491
 492         /* let's notify MAC80211 about the remaining pending TX frames */
 493         wl1251_tx_flush(wl);
 494         wl1251_power_off(wl);
 495
 496         memset(wl->bssid, 0, ETH_ALEN);
 497         wl->listen_int = 1;
 498         wl->bss_type = MAX_BSS_TYPE;
 499
 500         wl->data_in_count = 0;
 501         wl->rx_counter = 0;
 502         wl->rx_handled = 0;
 503         wl->rx_current_buffer = 0;
 504         wl->rx_last_id = 0;
 505         wl->next_tx_complete = 0;
 506         wl->elp = false;
 507         wl->station_mode = STATION_ACTIVE_MODE;
 508         wl->tx_queue_stopped = false;
 509         wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
 510         wl->rssi_thold = 0;
 511         wl->channel = WL1251_DEFAULT_CHANNEL;
 512         wl->monitor_present = false;
 513         wl->joined = false;
 514         wl->long_doze_mode_set = false;
 515
 516         wl1251_debugfs_reset(wl);
 517
 518         mutex_unlock(&wl->mutex);
 519 }
 520
 521 static int wl1251_op_add_interface(struct ieee80211_hw *hw,
 522                                    struct ieee80211_vif *vif)
 523 {
 524         struct wl1251 *wl = hw->priv;
 525         int ret = 0;
 526
 527         wl1251_debug(DEBUG_MAC80211, "mac80211 add interface type %d mac %pM",
 528                      vif->type, vif->addr);
 529
 530         mutex_lock(&wl->mutex);
 531         if (wl->vif) {
 532                 ret = -EBUSY;
 533                 goto out;
 534         }
 535
 536         wl->vif = vif;
 537
 538         switch (vif->type) {
 539         case NL80211_IFTYPE_STATION:
 540                 wl->bss_type = BSS_TYPE_STA_BSS;
 541                 break;
 542         case NL80211_IFTYPE_ADHOC:
 543                 wl->bss_type = BSS_TYPE_IBSS;
 544                 break;
 545         default:
 546                 ret = -EOPNOTSUPP;
 547                 goto out;
 548         }
 549
 550         if (memcmp(wl->mac_addr, vif->addr, ETH_ALEN)) {
 551                 memcpy(wl->mac_addr, vif->addr, ETH_ALEN);
 552                 SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
 553                 ret = wl1251_acx_station_id(wl);
 554                 if (ret < 0)
 555                         goto out;
 556         }
 557
 558 out:
 559         mutex_unlock(&wl->mutex);
 560         return ret;
 561 }
 562
 563 static void wl1251_op_remove_interface(struct ieee80211_hw *hw,
 564                                          struct ieee80211_vif *vif)
 565 {
 566         struct wl1251 *wl = hw->priv;
 567
 568         mutex_lock(&wl->mutex);
 569         wl1251_debug(DEBUG_MAC80211, "mac80211 remove interface");
 570         wl->vif = NULL;
 571         memset(wl->bssid, 0, ETH_ALEN);
 572         mutex_unlock(&wl->mutex);
 573 }
 574
 575 static int wl1251_build_null_data(struct wl1251 *wl)
 576 {
 577         struct sk_buff *skb = NULL;
 578         int size;
 579         void *ptr;
 580         int ret = -ENOMEM;
 581
 582
 583         if (wl->bss_type == BSS_TYPE_IBSS) {
 584                 size = sizeof(struct wl12xx_null_data_template);
 585                 ptr = NULL;
 586         } else {
 587                 skb = ieee80211_nullfunc_get(wl->hw, wl->vif);
 588                 if (!skb)
 589                         goto out;
 590                 size = skb->len;
 591                 ptr = skb->data;
 592         }
 593
 594         ret = wl1251_cmd_template_set(wl, CMD_NULL_DATA, ptr, size);
 595
 596 out:
 597         dev_kfree_skb(skb);
 598         if (ret)
 599                 wl1251_warning("cmd buld null data failed %d", ret);
 600
 601         return ret;
 602
 603 }
 604
 605 static int wl1251_build_qos_null_data(struct wl1251 *wl)
 606 {
 607         struct ieee80211_qos_hdr template;
 608
 609         memset(&template, 0, sizeof(template));
 610
 611         memcpy(template.addr1, wl->bssid, ETH_ALEN);
 612         memcpy(template.addr2, wl->mac_addr, ETH_ALEN);
 613         memcpy(template.addr3, wl->bssid, ETH_ALEN);
 614
 615         template.frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
 616                                              IEEE80211_STYPE_QOS_NULLFUNC |
 617                                              IEEE80211_FCTL_TODS);
 618
 619         /* FIXME: not sure what priority to use here */
 620         template.qos_ctrl = cpu_to_le16(0);
 621
 622         return wl1251_cmd_template_set(wl, CMD_QOS_NULL_DATA, &template,
 623                                        sizeof(template));
 624 }
 625
 626 static void wl1251_ps_work(struct work_struct *work)
 627 {
 628         struct delayed_work *dwork;
 629         struct wl1251 *wl;
 630         unsigned long diff, wait;
 631         bool need_ps;
 632         bool have_ps;
 633         int ret;
 634         int i;
 635
 636         dwork = container_of(work, struct delayed_work, work);
 637         wl = container_of(dwork, struct wl1251, ps_work);
 638
 639         mutex_lock(&wl->mutex);
 640
 641         /* don't change PS modes while still transitioning, to avoid possbile
 642          * fw bugs (it normally takes ~130ms to enable and ~10ms to disable) */
 643         if (wl->ps_transitioning) {
 644                 diff = jiffies - wl->ps_change_jiffies;
 645                 if (diff > msecs_to_jiffies(500)) {
 646                         wl1251_error("PS change taking too long: %lu", diff);
 647                         wl->ps_transitioning = false;
 648                 } else {
 649                         //wl1251_error("PS still transitioning");
 650                         ieee80211_queue_delayed_work(wl->hw, &wl->ps_work,
 651                                 msecs_to_jiffies(50));
 652                         goto out;
 653                 }
 654         }
 655
 656         have_ps = wl->station_mode == STATION_POWER_SAVE_MODE;
 657         need_ps = wl->psm_requested && !wl->bss_lost
 658                 && wl->rate < wl->ps_rate_threshold;
 659
 660         if (need_ps == have_ps) {
 661                 //wl1251_info("ps: already in mode %d", have_ps);
 662                 goto out;
 663         }
 664
 665         /* don't enter PS if there was recent activity */
 666         if (need_ps) {
 667                 wait = 0;
 668
 669                 diff = jiffies - wl->last_no_ps_jiffies[1];
 670                 if (diff < msecs_to_jiffies(1000))
 671                         wait = msecs_to_jiffies(1000) - diff + 1;
 672
 673                 diff = jiffies - wl->last_no_ps_jiffies[0];
 674                 if (diff < msecs_to_jiffies(3000))
 675                         wait += msecs_to_jiffies(1000);
 676
 677                 for (i = 0; i < ARRAY_SIZE(wl->tx_frames); i++) {
 678                         if (wl->tx_frames[i] != NULL) {
 679                                 //wl1251_error("  frm %d busy", i);
 680                                 if (wait < msecs_to_jiffies(50))
 681                                         wait = msecs_to_jiffies(50);
 682                                 break;
 683                         }
 684                 }
 685
 686                 if (wait > 0) {
 687                         ieee80211_queue_delayed_work(wl->hw, &wl->ps_work, wait);
 688                         goto out;
 689                 }
 690         }
 691
 692         ret = wl1251_ps_elp_wakeup(wl);
 693         if (ret < 0)
 694                 goto out;
 695
 696         if (need_ps) {
 697                 wl1251_acx_wr_tbtt_and_dtim(wl, wl->beacon_int,
 698                                             wl->dtim_period);
 699         }
 700         ret = wl1251_ps_set_mode(wl,
 701                 need_ps ? STATION_POWER_SAVE_MODE : STATION_ACTIVE_MODE);
 702         if (ret < 0)
 703                 goto out_sleep;
 704
 705         // wl1251_info("psm %d, r %u", need_ps, wl->rate);
 706
 707 out_sleep:
 708         wl1251_ps_elp_sleep(wl);
 709
 710 out:
 711         mutex_unlock(&wl->mutex);
 712 }
 713
 714 static bool wl1251_can_do_pm(struct ieee80211_conf *conf, struct wl1251 *wl)
 715 {
 716         return (conf->flags & IEEE80211_CONF_PS) && !wl->monitor_present;
 717 }
 718
 719 static int wl1251_op_config(struct ieee80211_hw *hw, u32 changed)
 720 {
 721         struct wl1251 *wl = hw->priv;
 722         struct ieee80211_conf *conf = &hw->conf;
 723         int channel, ret = 0;
 724
 725         channel = ieee80211_frequency_to_channel(conf->channel->center_freq);
 726
 727         wl1251_debug(DEBUG_MAC80211,
 728                      "mac80211 config ch %d monitor %s psm %s power %d",
 729                      channel,
 730                      conf->flags & IEEE80211_CONF_MONITOR ? "on" : "off",
 731                      conf->flags & IEEE80211_CONF_PS ? "on" : "off",
 732                      conf->power_level);
 733
 734         mutex_lock(&wl->mutex);
 735
 736         ret = wl1251_ps_elp_wakeup(wl);
 737         if (ret < 0)
 738                 goto out;
 739
 740         if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
 741                 u32 mode;
 742
 743                 if (conf->flags & IEEE80211_CONF_MONITOR) {
 744                         wl->monitor_present = true;
 745                         mode = DF_SNIFF_MODE_ENABLE | DF_ENCRYPTION_DISABLE;
 746                 } else {
 747                         wl->monitor_present = false;
 748                         mode = 0;
 749                 }
 750
 751                 ret = wl1251_acx_feature_cfg(wl, mode);
 752                 if (ret < 0)
 753                         goto out_sleep;
 754         }
 755
 756         if (channel != wl->channel) {
 757                 wl->channel = channel;
 758
 759                 /*
 760                  * Use ENABLE_RX command for channel switching when no
 761                  * interface is present (monitor mode only).
 762                  * This leaves the tx path disabled in firmware, whereas
 763                  * the usual JOIN command seems to transmit some frames
 764                  * at firmware level.
 765                  *
 766                  * Note that bss_type must be BSS_TYPE_STA_BSS, also at least
 767                  * one join has to be performed before CMD_ENABLE_RX can
 768                  * properly switch channels (join will be done by CONF_IDLE).
 769                  */
 770                 if (wl->vif == NULL) {
 771                         wl->bss_type = BSS_TYPE_STA_BSS;
 772                         wl->joined = false;
 773                         ret = wl1251_cmd_data_path_rx(wl, wl->channel, 1);
 774                 } else {
 775                         ret = wl1251_join(wl, wl->bss_type, wl->channel,
 776                                           wl->beacon_int, wl->dtim_period);
 777                 }
 778                 if (ret < 0)
 779                         goto out_sleep;
 780         }
 781
 782         if (wl1251_can_do_pm(conf, wl) && !wl->psm_requested) {
 783                 wl1251_debug(DEBUG_PSM, "psm enabled");
 784
 785                 wl->psm_requested = true;
 786
 787                 wl->dtim_period = conf->ps_dtim_period;
 788
 789                 ieee80211_queue_delayed_work(wl->hw, &wl->ps_work, 0);
 790         } else if (!wl1251_can_do_pm(conf, wl) && wl->psm_requested) {
 791                 wl1251_debug(DEBUG_PSM, "psm disabled");
 792
 793                 wl->psm_requested = false;
 794
 795                 ieee80211_queue_delayed_work(wl->hw, &wl->ps_work, 0);
 796         }
 797
 798         if (changed & IEEE80211_CONF_CHANGE_IDLE) {
 799                 if (conf->flags & IEEE80211_CONF_IDLE) {
 800                         ret = wl1251_ps_set_mode(wl, STATION_IDLE);
 801                         if (ret < 0)
 802                                 goto out_sleep;
 803                 } else {
 804                         ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
 805                         if (ret < 0)
 806                                 goto out_sleep;
 807
 808                         ret = wl1251_event_wait(wl, PS_REPORT_EVENT_ID, 100);
 809                         if (ret < 0)
 810                                 wl1251_error("error waiting for wakeup");
 811
 812                         ret = wl1251_join(wl, wl->bss_type, wl->channel,
 813                                           wl->beacon_int, wl->dtim_period);
 814                         if (ret < 0)
 815                                 goto out_sleep;
 816                 }
 817         }
 818
 819         if (conf->power_level != wl->power_level) {
 820                 ret = wl1251_acx_tx_power(wl, conf->power_level);
 821                 if (ret < 0)
 822                         goto out_sleep;
 823
 824                 wl->power_level = conf->power_level;
 825         }
 826
 827 out_sleep:
 828         wl1251_ps_elp_sleep(wl);
 829
 830 out:
 831         mutex_unlock(&wl->mutex);
 832
 833         return ret;
 834 }
 835
 836 struct wl1251_filter_params {
 837         bool enabled;
 838         int mc_list_length;
 839         u8 mc_list[ACX_MC_ADDRESS_GROUP_MAX][ETH_ALEN];
 840 };
 841
 842 static u64 wl1251_op_prepare_multicast(struct ieee80211_hw *hw,
 843                                        struct netdev_hw_addr_list *mc_list)
 844 {
 845         struct wl1251_filter_params *fp;
 846         struct netdev_hw_addr *ha;
 847         struct wl1251 *wl = hw->priv;
 848
 849         if (unlikely(wl->state == WL1251_STATE_OFF))
 850                 return 0;
 851
 852         fp = kzalloc(sizeof(*fp), GFP_ATOMIC);
 853         if (!fp) {
 854                 wl1251_error("Out of memory setting filters.");
 855                 return 0;
 856         }
 857
 858         /* update multicast filtering parameters */
 859         fp->mc_list_length = 0;
 860         if (netdev_hw_addr_list_count(mc_list) > ACX_MC_ADDRESS_GROUP_MAX) {
 861                 fp->enabled = false;
 862         } else {
 863                 fp->enabled = true;
 864                 netdev_hw_addr_list_for_each(ha, mc_list) {
 865                         memcpy(fp->mc_list[fp->mc_list_length],
 866                                         ha->addr, ETH_ALEN);
 867                         fp->mc_list_length++;
 868                 }
 869         }
 870
 871         return (u64)(unsigned long)fp;
 872 }
 873
 874 #define WL1251_SUPPORTED_FILTERS (FIF_PROMISC_IN_BSS | \
 875                                   FIF_ALLMULTI | \
 876                                   FIF_FCSFAIL | \
 877                                   FIF_BCN_PRBRESP_PROMISC | \
 878                                   FIF_CONTROL | \
 879                                   FIF_OTHER_BSS | \
 880                                   FIF_PROBE_REQ)
 881
 882 static void wl1251_op_configure_filter(struct ieee80211_hw *hw,
 883                                        unsigned int changed,
 884                                        unsigned int *total, u64 multicast)
 885 {
 886         struct wl1251_filter_params *fp = (void *)(unsigned long)multicast;
 887         struct wl1251 *wl = hw->priv;
 888         int ret;
 889
 890         wl1251_debug(DEBUG_MAC80211, "mac80211 configure filter");
 891
 892         *total &= WL1251_SUPPORTED_FILTERS;
 893         changed &= WL1251_SUPPORTED_FILTERS;
 894
 895         if (changed == 0) {
 896                 /* no filters which we support changed */
 897                 kfree(fp);
 898                 return;
 899         }
 900
 901         mutex_lock(&wl->mutex);
 902
 903         wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
 904         wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
 905
 906         if (*total & FIF_PROMISC_IN_BSS) {
 907                 wl->rx_config |= CFG_BSSID_FILTER_EN;
 908                 wl->rx_config |= CFG_RX_ALL_GOOD;
 909         }
 910         if (*total & FIF_ALLMULTI)
 911                 /*
 912                  * CFG_MC_FILTER_EN in rx_config needs to be 0 to receive
 913                  * all multicast frames
 914                  */
 915                 wl->rx_config &= ~CFG_MC_FILTER_EN;
 916         if (*total & FIF_FCSFAIL)
 917                 wl->rx_filter |= CFG_RX_FCS_ERROR;
 918         if (*total & FIF_BCN_PRBRESP_PROMISC) {
 919                 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
 920                 wl->rx_config &= ~CFG_SSID_FILTER_EN;
 921         }
 922         if (*total & FIF_CONTROL)
 923                 wl->rx_filter |= CFG_RX_CTL_EN;
 924         if (*total & FIF_OTHER_BSS || is_zero_ether_addr(wl->bssid))
 925                 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
 926         if (*total & FIF_PROBE_REQ)
 927                 wl->rx_filter |= CFG_RX_PREQ_EN;
 928
 929         if (wl->state == WL1251_STATE_OFF)
 930                 goto out;
 931
 932         ret = wl1251_ps_elp_wakeup(wl);
 933         if (ret < 0)
 934                 goto out;
 935
 936         if (*total & FIF_ALLMULTI || *total & FIF_PROMISC_IN_BSS)
 937                 ret = wl1251_acx_group_address_tbl(wl, false, NULL, 0);
 938         else if (fp)
 939                 ret = wl1251_acx_group_address_tbl(wl, fp->enabled,
 940                                                    fp->mc_list,
 941                                                    fp->mc_list_length);
 942         if (ret < 0)
 943                 goto out;
 944
 945         /* send filters to firmware */
 946         wl1251_acx_rx_config(wl, wl->rx_config, wl->rx_filter);
 947
 948         wl1251_ps_elp_sleep(wl);
 949
 950 out:
 951         mutex_unlock(&wl->mutex);
 952         kfree(fp);
 953 }
 954
 955 /* HW encryption */
 956 static int wl1251_set_key_type(struct wl1251 *wl,
 957                                struct wl1251_cmd_set_keys *key,
 958                                enum set_key_cmd cmd,
 959                                struct ieee80211_key_conf *mac80211_key,
 960                                const u8 *addr)
 961 {
 962         switch (mac80211_key->cipher) {
 963         case WLAN_CIPHER_SUITE_WEP40:
 964         case WLAN_CIPHER_SUITE_WEP104:
 965                 if (is_broadcast_ether_addr(addr))
 966                         key->key_type = KEY_WEP_DEFAULT;
 967                 else
 968                         key->key_type = KEY_WEP_ADDR;
 969
 970                 mac80211_key->hw_key_idx = mac80211_key->keyidx;
 971                 break;
 972         case WLAN_CIPHER_SUITE_TKIP:
 973                 if (is_broadcast_ether_addr(addr))
 974                         key->key_type = KEY_TKIP_MIC_GROUP;
 975                 else
 976                         key->key_type = KEY_TKIP_MIC_PAIRWISE;
 977
 978                 mac80211_key->hw_key_idx = mac80211_key->keyidx;
 979                 break;
 980         case WLAN_CIPHER_SUITE_CCMP:
 981                 if (is_broadcast_ether_addr(addr))
 982                         key->key_type = KEY_AES_GROUP;
 983                 else
 984                         key->key_type = KEY_AES_PAIRWISE;
 985                 mac80211_key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
 986                 break;
 987         default:
 988                 wl1251_error("Unknown key cipher 0x%x", mac80211_key->cipher);
 989                 return -EOPNOTSUPP;
 990         }
 991
 992         return 0;
 993 }
 994
 995 static int wl1251_op_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
 996                              struct ieee80211_vif *vif,
 997                              struct ieee80211_sta *sta,
 998                              struct ieee80211_key_conf *key)
 999 {
1000         struct wl1251 *wl = hw->priv;
1001         struct wl1251_cmd_set_keys *wl_cmd;
1002         const u8 *addr;
1003         int ret;
1004
1005         static const u8 bcast_addr[ETH_ALEN] =
1006                 { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
1007
1008         wl1251_debug(DEBUG_MAC80211, "mac80211 set key");
1009
1010         wl_cmd = kzalloc(sizeof(*wl_cmd), GFP_KERNEL);
1011         if (!wl_cmd) {
1012                 ret = -ENOMEM;
1013                 goto out;
1014         }
1015
1016         addr = sta ? sta->addr : bcast_addr;
1017
1018         wl1251_debug(DEBUG_CRYPT, "CMD: 0x%x", cmd);
1019         wl1251_dump(DEBUG_CRYPT, "ADDR: ", addr, ETH_ALEN);
1020         wl1251_debug(DEBUG_CRYPT, "Key: algo:0x%x, id:%d, len:%d flags 0x%x",
1021                      key->cipher, key->keyidx, key->keylen, key->flags);
1022         wl1251_dump(DEBUG_CRYPT, "KEY: ", key->key, key->keylen);
1023
1024         if (is_zero_ether_addr(addr)) {
1025                 /* We dont support TX only encryption */
1026                 ret = -EOPNOTSUPP;
1027                 goto out;
1028         }
1029
1030         mutex_lock(&wl->mutex);
1031
1032         switch (cmd) {
1033         case SET_KEY:
1034                 if (wl->monitor_present) {
1035                         ret = -EOPNOTSUPP;
1036                         goto out_unlock;
1037                 }
1038                 wl_cmd->key_action = KEY_ADD_OR_REPLACE;
1039                 break;
1040         case DISABLE_KEY:
1041                 wl_cmd->key_action = KEY_REMOVE;
1042                 break;
1043         default:
1044                 wl1251_error("Unsupported key cmd 0x%x", cmd);
1045                 break;
1046         }
1047
1048         ret = wl1251_ps_elp_wakeup(wl);
1049         if (ret < 0)
1050                 goto out_unlock;
1051
1052         ret = wl1251_set_key_type(wl, wl_cmd, cmd, key, addr);
1053         if (ret < 0) {
1054                 wl1251_error("Set KEY type failed");
1055                 goto out_sleep;
1056         }
1057
1058         if (wl_cmd->key_type != KEY_WEP_DEFAULT)
1059                 memcpy(wl_cmd->addr, addr, ETH_ALEN);
1060
1061         if ((wl_cmd->key_type == KEY_TKIP_MIC_GROUP) ||
1062             (wl_cmd->key_type == KEY_TKIP_MIC_PAIRWISE)) {
1063                 /*
1064                  * We get the key in the following form:
1065                  * TKIP (16 bytes) - TX MIC (8 bytes) - RX MIC (8 bytes)
1066                  * but the target is expecting:
1067                  * TKIP - RX MIC - TX MIC
1068                  */
1069                 memcpy(wl_cmd->key, key->key, 16);
1070                 memcpy(wl_cmd->key + 16, key->key + 24, 8);
1071                 memcpy(wl_cmd->key + 24, key->key + 16, 8);
1072
1073         } else {
1074                 memcpy(wl_cmd->key, key->key, key->keylen);
1075         }
1076         wl_cmd->key_size = key->keylen;
1077
1078         wl_cmd->id = key->keyidx;
1079         wl_cmd->ssid_profile = 0;
1080
1081         wl1251_dump(DEBUG_CRYPT, "TARGET KEY: ", wl_cmd, sizeof(*wl_cmd));
1082
1083         ret = wl1251_cmd_send(wl, CMD_SET_KEYS, wl_cmd, sizeof(*wl_cmd));
1084         if (ret < 0) {
1085                 wl1251_warning("could not set keys");
1086                 goto out_sleep;
1087         }
1088
1089 out_sleep:
1090         wl1251_ps_elp_sleep(wl);
1091
1092 out_unlock:
1093         mutex_unlock(&wl->mutex);
1094
1095 out:
1096         kfree(wl_cmd);
1097
1098         return ret;
1099 }
1100
1101 static int wl1251_op_hw_scan(struct ieee80211_hw *hw,
1102                              struct ieee80211_vif *vif,
1103                              struct cfg80211_scan_request *req)
1104 {
1105         struct wl1251 *wl = hw->priv;
1106         struct sk_buff *skb;
1107         size_t ssid_len = 0;
1108         u8 *ssid = NULL;
1109         int ret;
1110
1111         wl1251_debug(DEBUG_MAC80211, "mac80211 hw scan");
1112
1113         if (req->n_ssids) {
1114                 ssid = req->ssids[0].ssid;
1115                 ssid_len = req->ssids[0].ssid_len;
1116         }
1117
1118         mutex_lock(&wl->mutex);
1119
1120         if (wl->scanning) {
1121                 wl1251_debug(DEBUG_SCAN, "scan already in progress");
1122                 ret = -EINVAL;
1123                 goto out;
1124         }
1125
1126         ret = wl1251_ps_elp_wakeup(wl);
1127         if (ret < 0)
1128                 goto out;
1129
1130         skb = ieee80211_probereq_get(wl->hw, wl->vif, ssid, ssid_len,
1131                                      req->ie, req->ie_len);
1132         if (!skb) {
1133                 ret = -ENOMEM;
1134                 goto out;
1135         }
1136
1137         ret = wl1251_cmd_template_set(wl, CMD_PROBE_REQ, skb->data,
1138                                       skb->len);
1139         dev_kfree_skb(skb);
1140         if (ret < 0)
1141                 goto out_sleep;
1142
1143         ret = wl1251_cmd_trigger_scan_to(wl, 0);
1144         if (ret < 0)
1145                 goto out_sleep;
1146
1147         wl->scanning = true;
1148
1149         ret = wl1251_cmd_scan(wl, ssid, ssid_len, req->channels,
1150                               req->n_channels, WL1251_SCAN_NUM_PROBES);
1151         if (ret < 0) {
1152                 wl1251_debug(DEBUG_SCAN, "scan failed %d", ret);
1153                 wl->scanning = false;
1154                 goto out_sleep;
1155         }
1156
1157 out_sleep:
1158         wl1251_ps_elp_sleep(wl);
1159
1160 out:
1161         mutex_unlock(&wl->mutex);
1162
1163         return ret;
1164 }
1165
1166 static int wl1251_op_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1167 {
1168         struct wl1251 *wl = hw->priv;
1169         int ret;
1170
1171         mutex_lock(&wl->mutex);
1172
1173         ret = wl1251_ps_elp_wakeup(wl);
1174         if (ret < 0)
1175                 goto out;
1176
1177         ret = wl1251_acx_rts_threshold(wl, (u16) value);
1178         if (ret < 0)
1179                 wl1251_warning("wl1251_op_set_rts_threshold failed: %d", ret);
1180
1181         wl1251_ps_elp_sleep(wl);
1182
1183 out:
1184         mutex_unlock(&wl->mutex);
1185
1186         return ret;
1187 }
1188
1189 static void wl1251_op_bss_info_changed(struct ieee80211_hw *hw,
1190                                        struct ieee80211_vif *vif,
1191                                        struct ieee80211_bss_conf *bss_conf,
1192                                        u32 changed)
1193 {
1194         struct wl1251 *wl = hw->priv;
1195         struct sk_buff *beacon, *skb;
1196         bool do_join = false;
1197         bool enable;
1198         int ret;
1199
1200         wl1251_debug(DEBUG_MAC80211, "mac80211 bss info changed");
1201
1202         mutex_lock(&wl->mutex);
1203
1204         ret = wl1251_ps_elp_wakeup(wl);
1205         if (ret < 0)
1206                 goto out;
1207
1208         if (changed & BSS_CHANGED_CQM) {
1209                 ret = wl1251_acx_low_rssi(wl, bss_conf->cqm_rssi_thold,
1210                                           WL1251_DEFAULT_LOW_RSSI_WEIGHT,
1211                                           WL1251_DEFAULT_LOW_RSSI_DEPTH,
1212                                           WL1251_ACX_LOW_RSSI_TYPE_EDGE);
1213                 if (ret < 0)
1214                         goto out;
1215                 wl->rssi_thold = bss_conf->cqm_rssi_thold;
1216         }
1217
1218         if ((changed & BSS_CHANGED_BSSID) &&
1219             memcmp(wl->bssid, bss_conf->bssid, ETH_ALEN)) {
1220                 memcpy(wl->bssid, bss_conf->bssid, ETH_ALEN);
1221
1222                 if (!is_zero_ether_addr(wl->bssid)) {
1223                         ret = wl1251_build_null_data(wl);
1224                         if (ret < 0)
1225                                 goto out_sleep;
1226
1227                         ret = wl1251_build_qos_null_data(wl);
1228                         if (ret < 0)
1229                                 goto out_sleep;
1230
1231                         do_join = true;
1232                 }
1233         }
1234
1235         if (changed & BSS_CHANGED_ASSOC) {
1236                 if (bss_conf->assoc) {
1237                         wl->beacon_int = bss_conf->beacon_int;
1238
1239                         skb = ieee80211_pspoll_get(wl->hw, wl->vif);
1240                         if (!skb)
1241                                 goto out_sleep;
1242
1243                         ret = wl1251_cmd_template_set(wl, CMD_PS_POLL,
1244                                                       skb->data,
1245                                                       skb->len);
1246                         dev_kfree_skb(skb);
1247                         if (ret < 0)
1248                                 goto out_sleep;
1249
1250                         ret = wl1251_acx_aid(wl, bss_conf->aid);
1251                         if (ret < 0)
1252                                 goto out_sleep;
1253                 } else {
1254                         /* use defaults when not associated */
1255                         wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1256                         wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1257                 }
1258         }
1259         if (changed & BSS_CHANGED_ERP_SLOT) {
1260                 if (bss_conf->use_short_slot)
1261                         ret = wl1251_acx_slot(wl, SLOT_TIME_SHORT);
1262                 else
1263                         ret = wl1251_acx_slot(wl, SLOT_TIME_LONG);
1264                 if (ret < 0) {
1265                         wl1251_warning("Set slot time failed %d", ret);
1266                         goto out_sleep;
1267                 }
1268         }
1269
1270         if (changed & BSS_CHANGED_ERP_PREAMBLE) {
1271                 if (bss_conf->use_short_preamble)
1272                         wl1251_acx_set_preamble(wl, ACX_PREAMBLE_SHORT);
1273                 else
1274                         wl1251_acx_set_preamble(wl, ACX_PREAMBLE_LONG);
1275         }
1276
1277         if (changed & BSS_CHANGED_ERP_CTS_PROT) {
1278                 if (bss_conf->use_cts_prot)
1279                         ret = wl1251_acx_cts_protect(wl, CTSPROTECT_ENABLE);
1280                 else
1281                         ret = wl1251_acx_cts_protect(wl, CTSPROTECT_DISABLE);
1282                 if (ret < 0) {
1283                         wl1251_warning("Set ctsprotect failed %d", ret);
1284                         goto out_sleep;
1285                 }
1286         }
1287
1288         if (changed & BSS_CHANGED_ARP_FILTER) {
1289                 __be32 addr = bss_conf->arp_addr_list[0];
1290                 WARN_ON(wl->bss_type != BSS_TYPE_STA_BSS);
1291
1292                 enable = bss_conf->arp_addr_cnt == 1 && bss_conf->assoc;
1293                 wl1251_acx_arp_ip_filter(wl, enable, addr);
1294
1295                 if (ret < 0)
1296                         goto out_sleep;
1297         }
1298
1299         if (changed & BSS_CHANGED_BEACON) {
1300                 beacon = ieee80211_beacon_get(hw, vif);
1301                 if (!beacon)
1302                         goto out_sleep;
1303
1304                 ret = wl1251_cmd_template_set(wl, CMD_BEACON, beacon->data,
1305                                               beacon->len);
1306
1307                 if (ret < 0) {
1308                         dev_kfree_skb(beacon);
1309                         goto out_sleep;
1310                 }
1311
1312                 ret = wl1251_cmd_template_set(wl, CMD_PROBE_RESP, beacon->data,
1313                                               beacon->len);
1314
1315                 dev_kfree_skb(beacon);
1316
1317                 if (ret < 0)
1318                         goto out_sleep;
1319
1320                 do_join = true;
1321         }
1322
1323         if (do_join) {
1324                 ret = wl1251_join(wl, wl->bss_type, wl->channel,
1325                                   wl->beacon_int, wl->dtim_period);
1326                 if (ret < 0)
1327                         goto out_sleep;
1328         }
1329
1330 out_sleep:
1331         wl1251_ps_elp_sleep(wl);
1332
1333 out:
1334         mutex_unlock(&wl->mutex);
1335 }
1336
1337
1338 /* can't be const, mac80211 writes to this */
1339 static struct ieee80211_rate wl1251_rates[] = {
1340         { .bitrate = 10,
1341           .hw_value = 0x1,
1342           .hw_value_short = 0x1, },
1343         { .bitrate = 20,
1344           .hw_value = 0x2,
1345           .hw_value_short = 0x2,
1346           .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1347         { .bitrate = 55,
1348           .hw_value = 0x4,
1349           .hw_value_short = 0x4,
1350           .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1351         { .bitrate = 110,
1352           .hw_value = 0x20,
1353           .hw_value_short = 0x20,
1354           .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1355         { .bitrate = 60,
1356           .hw_value = 0x8,
1357           .hw_value_short = 0x8, },
1358         { .bitrate = 90,
1359           .hw_value = 0x10,
1360           .hw_value_short = 0x10, },
1361         { .bitrate = 120,
1362           .hw_value = 0x40,
1363           .hw_value_short = 0x40, },
1364         { .bitrate = 180,
1365           .hw_value = 0x80,
1366           .hw_value_short = 0x80, },
1367         { .bitrate = 240,
1368           .hw_value = 0x200,
1369           .hw_value_short = 0x200, },
1370         { .bitrate = 360,
1371          .hw_value = 0x400,
1372          .hw_value_short = 0x400, },
1373         { .bitrate = 480,
1374           .hw_value = 0x800,
1375           .hw_value_short = 0x800, },
1376         { .bitrate = 540,
1377           .hw_value = 0x1000,
1378           .hw_value_short = 0x1000, },
1379 };
1380
1381 /* can't be const, mac80211 writes to this */
1382 static struct ieee80211_channel wl1251_channels[] = {
1383         { .hw_value = 1, .center_freq = 2412},
1384         { .hw_value = 2, .center_freq = 2417},
1385         { .hw_value = 3, .center_freq = 2422},
1386         { .hw_value = 4, .center_freq = 2427},
1387         { .hw_value = 5, .center_freq = 2432},
1388         { .hw_value = 6, .center_freq = 2437},
1389         { .hw_value = 7, .center_freq = 2442},
1390         { .hw_value = 8, .center_freq = 2447},
1391         { .hw_value = 9, .center_freq = 2452},
1392         { .hw_value = 10, .center_freq = 2457},
1393         { .hw_value = 11, .center_freq = 2462},
1394         { .hw_value = 12, .center_freq = 2467},
1395         { .hw_value = 13, .center_freq = 2472},
1396 };
1397
1398 static int wl1251_op_conf_tx(struct ieee80211_hw *hw,
1399                              struct ieee80211_vif *vif, u16 queue,
1400                              const struct ieee80211_tx_queue_params *params)
1401 {
1402         enum wl1251_acx_ps_scheme ps_scheme;
1403         struct wl1251 *wl = hw->priv;
1404         int ret;
1405
1406         mutex_lock(&wl->mutex);
1407
1408         wl1251_debug(DEBUG_MAC80211, "mac80211 conf tx %d", queue);
1409
1410         ret = wl1251_ps_elp_wakeup(wl);
1411         if (ret < 0)
1412                 goto out;
1413
1414         /* mac80211 uses units of 32 usec */
1415         ret = wl1251_acx_ac_cfg(wl, wl1251_tx_get_queue(queue),
1416                                 params->cw_min, params->cw_max,
1417                                 params->aifs, params->txop * 32);
1418         if (ret < 0)
1419                 goto out_sleep;
1420
1421         if (params->uapsd)
1422                 ps_scheme = WL1251_ACX_PS_SCHEME_UPSD_TRIGGER;
1423         else
1424                 ps_scheme = WL1251_ACX_PS_SCHEME_LEGACY;
1425
1426         ret = wl1251_acx_tid_cfg(wl, wl1251_tx_get_queue(queue),
1427                                  CHANNEL_TYPE_EDCF,
1428                                  wl1251_tx_get_queue(queue), ps_scheme,
1429                                  WL1251_ACX_ACK_POLICY_LEGACY);
1430         if (ret < 0)
1431                 goto out_sleep;
1432
1433 out_sleep:
1434         wl1251_ps_elp_sleep(wl);
1435
1436 out:
1437         mutex_unlock(&wl->mutex);
1438
1439         return ret;
1440 }
1441
1442 static int wl1251_op_get_survey(struct ieee80211_hw *hw, int idx,
1443                                 struct survey_info *survey)
1444 {
1445         struct wl1251 *wl = hw->priv;
1446         struct ieee80211_conf *conf = &hw->conf;
1447
1448         if (idx != 0)
1449                 return -ENOENT;
1450
1451         survey->channel = conf->channel;
1452         survey->filled = SURVEY_INFO_NOISE_DBM;
1453         survey->noise = wl->noise;
1454
1455         return 0;
1456 }
1457
1458 /* can't be const, mac80211 writes to this */
1459 static struct ieee80211_supported_band wl1251_band_2ghz = {
1460         .channels = wl1251_channels,
1461         .n_channels = ARRAY_SIZE(wl1251_channels),
1462         .bitrates = wl1251_rates,
1463         .n_bitrates = ARRAY_SIZE(wl1251_rates),
1464 };
1465
1466 static const struct ieee80211_ops wl1251_ops = {
1467         .start = wl1251_op_start,
1468         .stop = wl1251_op_stop,
1469         .add_interface = wl1251_op_add_interface,
1470         .remove_interface = wl1251_op_remove_interface,
1471         .config = wl1251_op_config,
1472         .prepare_multicast = wl1251_op_prepare_multicast,
1473         .configure_filter = wl1251_op_configure_filter,
1474         .tx = wl1251_op_tx,
1475         .set_key = wl1251_op_set_key,
1476         .hw_scan = wl1251_op_hw_scan,
1477         .bss_info_changed = wl1251_op_bss_info_changed,
1478         .set_rts_threshold = wl1251_op_set_rts_threshold,
1479         .conf_tx = wl1251_op_conf_tx,
1480         .get_survey = wl1251_op_get_survey,
1481 };
1482
1483 static int wl1251_read_eeprom_byte(struct wl1251 *wl, off_t offset, u8 *data)
1484 {
1485         unsigned long timeout;
1486
1487         wl1251_reg_write32(wl, EE_ADDR, offset);
1488         wl1251_reg_write32(wl, EE_CTL, EE_CTL_READ);
1489
1490         /* EE_CTL_READ clears when data is ready */
1491         timeout = jiffies + msecs_to_jiffies(100);
1492         while (1) {
1493                 if (!(wl1251_reg_read32(wl, EE_CTL) & EE_CTL_READ))
1494                         break;
1495
1496                 if (time_after(jiffies, timeout))
1497                         return -ETIMEDOUT;
1498
1499                 msleep(1);
1500         }
1501
1502         *data = wl1251_reg_read32(wl, EE_DATA);
1503         return 0;
1504 }
1505
1506 static int wl1251_read_eeprom(struct wl1251 *wl, off_t offset,
1507                               u8 *data, size_t len)
1508 {
1509         size_t i;
1510         int ret;
1511
1512         wl1251_reg_write32(wl, EE_START, 0);
1513
1514         for (i = 0; i < len; i++) {
1515                 ret = wl1251_read_eeprom_byte(wl, offset + i, &data[i]);
1516                 if (ret < 0)
1517                         return ret;
1518         }
1519
1520         return 0;
1521 }
1522
1523 static int wl1251_read_eeprom_mac(struct wl1251 *wl)
1524 {
1525         u8 mac[ETH_ALEN];
1526         int i, ret;
1527
1528         wl1251_set_partition(wl, 0, 0, REGISTERS_BASE, REGISTERS_DOWN_SIZE);
1529
1530         ret = wl1251_read_eeprom(wl, 0x1c, mac, sizeof(mac));
1531         if (ret < 0) {
1532                 wl1251_warning("failed to read MAC address from EEPROM");
1533                 return ret;
1534         }
1535
1536         /* MAC is stored in reverse order */
1537         for (i = 0; i < ETH_ALEN; i++)
1538                 wl->mac_addr[i] = mac[ETH_ALEN - i - 1];
1539
1540         return 0;
1541 }
1542
1543 /* temporary (?) hack for EEPROM dumping
1544  * (it seems this can only be done before fw is running) */
1545 static int wl1251_dump_eeprom(struct wl1251 *wl)
1546 {
1547         int ret;
1548
1549         wl1251_set_partition(wl, 0, 0, REGISTERS_BASE, REGISTERS_DOWN_SIZE);
1550
1551         wl->eeprom_dump = kzalloc(1024, GFP_KERNEL);
1552         if (wl->eeprom_dump == NULL) {
1553                 ret = -ENOMEM;
1554                 goto out;
1555         }
1556
1557         ret = wl1251_read_eeprom(wl, 0, wl->eeprom_dump, 1024);
1558         if (ret != 0) {
1559                 wl1251_error("eeprom dump failed: %d", ret);
1560                 kfree(wl->eeprom_dump);
1561                 wl->eeprom_dump = NULL;
1562                 goto out;
1563         }
1564
1565         wl1251_info("eeprom dumped.");
1566
1567 out:
1568         return ret;
1569 }
1570
1571 static int wl1251_register_hw(struct wl1251 *wl)
1572 {
1573         int ret;
1574
1575         if (wl->mac80211_registered)
1576                 return 0;
1577
1578         SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
1579
1580         ret = ieee80211_register_hw(wl->hw);
1581         if (ret < 0) {
1582                 wl1251_error("unable to register mac80211 hw: %d", ret);
1583                 return ret;
1584         }
1585
1586         wl->mac80211_registered = true;
1587
1588         wl1251_notice("loaded");
1589
1590         return 0;
1591 }
1592
1593 int wl1251_init_ieee80211(struct wl1251 *wl)
1594 {
1595         int ret;
1596
1597         /* The tx descriptor buffer and the TKIP space */
1598         wl->hw->extra_tx_headroom = sizeof(struct tx_double_buffer_desc)
1599                 + WL1251_TKIP_IV_SPACE;
1600
1601         /* unit us */
1602         /* FIXME: find a proper value */
1603         wl->hw->channel_change_time = 10000;
1604
1605         wl->hw->flags = IEEE80211_HW_SIGNAL_DBM |
1606                 IEEE80211_HW_SUPPORTS_PS |
1607                 IEEE80211_HW_BEACON_FILTER |
1608                 IEEE80211_HW_SUPPORTS_UAPSD |
1609                 IEEE80211_HW_SUPPORTS_CQM_RSSI;
1610
1611         if (use_fw_ps)
1612                 wl->hw->flags |= IEEE80211_HW_SUPPORTS_DYNAMIC_PS;
1613
1614         wl->hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
1615                                          BIT(NL80211_IFTYPE_ADHOC);
1616         wl->hw->wiphy->max_scan_ssids = 1;
1617         wl->hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &wl1251_band_2ghz;
1618
1619         wl->hw->queues = 4;
1620
1621         if (wl->use_eeprom)
1622                 wl1251_read_eeprom_mac(wl);
1623         if (wl->dump_eeprom)
1624                 wl1251_dump_eeprom(wl);
1625
1626         ret = wl1251_register_hw(wl);
1627         if (ret)
1628                 goto out;
1629
1630         wl1251_debugfs_init(wl);
1631         wl1251_notice("initialized");
1632
1633         ret = 0;
1634
1635 out:
1636         return ret;
1637 }
1638 EXPORT_SYMBOL_GPL(wl1251_init_ieee80211);
1639
1640 struct ieee80211_hw *wl1251_alloc_hw(void)
1641 {
1642         struct ieee80211_hw *hw;
1643         struct wl1251 *wl;
1644         int i;
1645         static const u8 nokia_oui[3] = {0x00, 0x1f, 0xdf};
1646
1647         hw = ieee80211_alloc_hw(sizeof(*wl), &wl1251_ops);
1648         if (!hw) {
1649                 wl1251_error("could not alloc ieee80211_hw");
1650                 return ERR_PTR(-ENOMEM);
1651         }
1652
1653         wl = hw->priv;
1654         memset(wl, 0, sizeof(*wl));
1655
1656         wl->hw = hw;
1657
1658         wl->data_in_count = 0;
1659
1660         skb_queue_head_init(&wl->tx_queue);
1661
1662         INIT_DELAYED_WORK(&wl->ps_work, wl1251_ps_work);
1663         INIT_DELAYED_WORK(&wl->elp_work, wl1251_elp_work);
1664         wl->channel = WL1251_DEFAULT_CHANNEL;
1665         wl->monitor_present = false;
1666         wl->joined = false;
1667         wl->scanning = false;
1668         wl->bss_type = MAX_BSS_TYPE;
1669         wl->default_key = 0;
1670         wl->listen_int = 1;
1671         wl->rx_counter = 0;
1672         wl->rx_handled = 0;
1673         wl->rx_current_buffer = 0;
1674         wl->rx_last_id = 0;
1675         wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
1676         wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
1677         wl->elp = false;
1678         wl->station_mode = STATION_ACTIVE_MODE;
1679         wl->psm_requested = false;
1680         wl->tx_queue_stopped = false;
1681         wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
1682         wl->rssi_thold = 0;
1683         wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1684         wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1685         wl->vif = NULL;
1686         wl->ps_rate_threshold = 100000;
1687
1688         for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++)
1689                 wl->tx_frames[i] = NULL;
1690
1691         wl->next_tx_complete = 0;
1692
1693         INIT_WORK(&wl->irq_work, wl1251_irq_work);
1694         INIT_WORK(&wl->tx_work, wl1251_tx_work);
1695
1696         /*
1697          * In case our MAC address is not correctly set,
1698          * we use a random but Nokia MAC.
1699          */
1700         memcpy(wl->mac_addr, nokia_oui, 3);
1701         get_random_bytes(wl->mac_addr + 3, 3);
1702
1703         wl->state = WL1251_STATE_OFF;
1704         mutex_init(&wl->mutex);
1705         spin_lock_init(&wl->wl_lock);
1706
1707         wl->tx_mgmt_frm_rate = DEFAULT_HW_GEN_TX_RATE;
1708         wl->tx_mgmt_frm_mod = DEFAULT_HW_GEN_MODULATION_TYPE;
1709
1710         wl->rx_descriptor = kmalloc(sizeof(*wl->rx_descriptor), GFP_KERNEL);
1711         if (!wl->rx_descriptor) {
1712                 wl1251_error("could not allocate memory for rx descriptor");
1713                 ieee80211_free_hw(hw);
1714                 return ERR_PTR(-ENOMEM);
1715         }
1716
1717         return hw;
1718 }
1719 EXPORT_SYMBOL_GPL(wl1251_alloc_hw);
1720
1721 int wl1251_free_hw(struct wl1251 *wl)
1722 {
1723         ieee80211_unregister_hw(wl->hw);
1724
1725         wl1251_debugfs_exit(wl);
1726
1727         kfree(wl->target_mem_map);
1728         kfree(wl->data_path);
1729         vfree(wl->fw);
1730         wl->fw = NULL;
1731         kfree(wl->nvs);
1732         wl->nvs = NULL;
1733
1734         kfree(wl->rx_descriptor);
1735         wl->rx_descriptor = NULL;
1736
1737         ieee80211_free_hw(wl->hw);
1738
1739         if (wl->eeprom_dump != NULL)
1740                 kfree(wl->eeprom_dump);
1741
1742         return 0;
1743 }
1744 EXPORT_SYMBOL_GPL(wl1251_free_hw);
1745
1746 MODULE_DESCRIPTION("TI wl1251 Wireles LAN Driver Core");
1747 MODULE_LICENSE("GPL");
1748 MODULE_AUTHOR("Kalle Valo <kvalo@adurom.com>");
1749 MODULE_FIRMWARE(WL1251_FW_NAME);