err.no Git - linux-2.6/blob - drivers/net/wireless/libertas/cmdresp.c

   1 /**
   2   * This file contains the handling of command
   3   * responses as well as events generated by firmware.
   4   */
   5 #include <linux/delay.h>
   6 #include <linux/if_arp.h>
   7 #include <linux/netdevice.h>
   8
   9 #include <net/iw_handler.h>
  10
  11 #include "host.h"
  12 #include "decl.h"
  13 #include "defs.h"
  14 #include "dev.h"
  15 #include "join.h"
  16 #include "wext.h"
  17
  18 /**
  19  *  @brief This function handles disconnect event. it
  20  *  reports disconnect to upper layer, clean tx/rx packets,
  21  *  reset link state etc.
  22  *
  23  *  @param priv    A pointer to struct lbs_private structure
  24  *  @return        n/a
  25  */
  26 void lbs_mac_event_disconnected(struct lbs_private *priv)
  27 {
  28         union iwreq_data wrqu;
  29
  30         if (priv->connect_status != LBS_CONNECTED)
  31                 return;
  32
  33         lbs_deb_enter(LBS_DEB_ASSOC);
  34
  35         memset(wrqu.ap_addr.sa_data, 0x00, ETH_ALEN);
  36         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
  37
  38         /*
  39          * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
  40          * It causes problem in the Supplicant
  41          */
  42
  43         msleep_interruptible(1000);
  44         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
  45
  46         /* report disconnect to upper layer */
  47         netif_stop_queue(priv->dev);
  48         netif_carrier_off(priv->dev);
  49
  50         /* Free Tx and Rx packets */
  51         kfree_skb(priv->currenttxskb);
  52         priv->currenttxskb = NULL;
  53         priv->tx_pending_len = 0;
  54
  55         /* reset SNR/NF/RSSI values */
  56         memset(priv->SNR, 0x00, sizeof(priv->SNR));
  57         memset(priv->NF, 0x00, sizeof(priv->NF));
  58         memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
  59         memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
  60         memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
  61         priv->nextSNRNF = 0;
  62         priv->numSNRNF = 0;
  63         priv->connect_status = LBS_DISCONNECTED;
  64
  65         /* Clear out associated SSID and BSSID since connection is
  66          * no longer valid.
  67          */
  68         memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
  69         memset(&priv->curbssparams.ssid, 0, IW_ESSID_MAX_SIZE);
  70         priv->curbssparams.ssid_len = 0;
  71
  72         if (priv->psstate != PS_STATE_FULL_POWER) {
  73                 /* make firmware to exit PS mode */
  74                 lbs_deb_cmd("disconnected, so exit PS mode\n");
  75                 lbs_ps_wakeup(priv, 0);
  76         }
  77         lbs_deb_leave(LBS_DEB_CMD);
  78 }
  79
  80 /**
  81  *  @brief This function handles MIC failure event.
  82  *
  83  *  @param priv    A pointer to struct lbs_private structure
  84  *  @para  event   the event id
  85  *  @return        n/a
  86  */
  87 static void handle_mic_failureevent(struct lbs_private *priv, u32 event)
  88 {
  89         char buf[50];
  90
  91         lbs_deb_enter(LBS_DEB_CMD);
  92         memset(buf, 0, sizeof(buf));
  93
  94         sprintf(buf, "%s", "MLME-MICHAELMICFAILURE.indication ");
  95
  96         if (event == MACREG_INT_CODE_MIC_ERR_UNICAST) {
  97                 strcat(buf, "unicast ");
  98         } else {
  99                 strcat(buf, "multicast ");
 100         }
 101
 102         lbs_send_iwevcustom_event(priv, buf);
 103         lbs_deb_leave(LBS_DEB_CMD);
 104 }
 105
 106 static int lbs_ret_reg_access(struct lbs_private *priv,
 107                                u16 type, struct cmd_ds_command *resp)
 108 {
 109         int ret = 0;
 110
 111         lbs_deb_enter(LBS_DEB_CMD);
 112
 113         switch (type) {
 114         case CMD_RET(CMD_MAC_REG_ACCESS):
 115                 {
 116                         struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
 117
 118                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
 119                         priv->offsetvalue.value = le32_to_cpu(reg->value);
 120                         break;
 121                 }
 122
 123         case CMD_RET(CMD_BBP_REG_ACCESS):
 124                 {
 125                         struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
 126
 127                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
 128                         priv->offsetvalue.value = reg->value;
 129                         break;
 130                 }
 131
 132         case CMD_RET(CMD_RF_REG_ACCESS):
 133                 {
 134                         struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
 135
 136                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
 137                         priv->offsetvalue.value = reg->value;
 138                         break;
 139                 }
 140
 141         default:
 142                 ret = -1;
 143         }
 144
 145         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 146         return ret;
 147 }
 148
 149 static int lbs_ret_802_11_sleep_params(struct lbs_private *priv,
 150                                         struct cmd_ds_command *resp)
 151 {
 152         struct cmd_ds_802_11_sleep_params *sp = &resp->params.sleep_params;
 153
 154         lbs_deb_enter(LBS_DEB_CMD);
 155
 156         lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, calcontrol 0x%x "
 157                     "extsleepclk 0x%x\n", le16_to_cpu(sp->error),
 158                     le16_to_cpu(sp->offset), le16_to_cpu(sp->stabletime),
 159                     sp->calcontrol, sp->externalsleepclk);
 160
 161         priv->sp.sp_error = le16_to_cpu(sp->error);
 162         priv->sp.sp_offset = le16_to_cpu(sp->offset);
 163         priv->sp.sp_stabletime = le16_to_cpu(sp->stabletime);
 164         priv->sp.sp_calcontrol = sp->calcontrol;
 165         priv->sp.sp_extsleepclk = sp->externalsleepclk;
 166         priv->sp.sp_reserved = le16_to_cpu(sp->reserved);
 167
 168         lbs_deb_enter(LBS_DEB_CMD);
 169         return 0;
 170 }
 171
 172 static int lbs_ret_802_11_stat(struct lbs_private *priv,
 173                                 struct cmd_ds_command *resp)
 174 {
 175         lbs_deb_enter(LBS_DEB_CMD);
 176 /*      currently priv->wlan802_11Stat is unused
 177
 178         struct cmd_ds_802_11_get_stat *p11Stat = &resp->params.gstat;
 179
 180         // TODO Convert it to Big endian befor copy
 181         memcpy(&priv->wlan802_11Stat,
 182                p11Stat, sizeof(struct cmd_ds_802_11_get_stat));
 183 */
 184         lbs_deb_leave(LBS_DEB_CMD);
 185         return 0;
 186 }
 187
 188 static int lbs_ret_802_11_snmp_mib(struct lbs_private *priv,
 189                                     struct cmd_ds_command *resp)
 190 {
 191         struct cmd_ds_802_11_snmp_mib *smib = &resp->params.smib;
 192         u16 oid = le16_to_cpu(smib->oid);
 193         u16 querytype = le16_to_cpu(smib->querytype);
 194
 195         lbs_deb_enter(LBS_DEB_CMD);
 196
 197         lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid,
 198                querytype);
 199         lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib->bufsize));
 200
 201         if (querytype == CMD_ACT_GET) {
 202                 switch (oid) {
 203                 case FRAGTHRESH_I:
 204                         priv->fragthsd =
 205                                 le16_to_cpu(*((__le16 *)(smib->value)));
 206                         lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
 207                                     priv->fragthsd);
 208                         break;
 209                 case RTSTHRESH_I:
 210                         priv->rtsthsd =
 211                                 le16_to_cpu(*((__le16 *)(smib->value)));
 212                         lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
 213                                     priv->rtsthsd);
 214                         break;
 215                 case SHORT_RETRYLIM_I:
 216                         priv->txretrycount =
 217                                 le16_to_cpu(*((__le16 *)(smib->value)));
 218                         lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
 219                                     priv->rtsthsd);
 220                         break;
 221                 default:
 222                         break;
 223                 }
 224         }
 225
 226         lbs_deb_enter(LBS_DEB_CMD);
 227         return 0;
 228 }
 229
 230 static int lbs_ret_802_11_key_material(struct lbs_private *priv,
 231                                         struct cmd_ds_command *resp)
 232 {
 233         struct cmd_ds_802_11_key_material *pkeymaterial =
 234             &resp->params.keymaterial;
 235         u16 action = le16_to_cpu(pkeymaterial->action);
 236
 237         lbs_deb_enter(LBS_DEB_CMD);
 238
 239         /* Copy the returned key to driver private data */
 240         if (action == CMD_ACT_GET) {
 241                 u8 * buf_ptr = (u8 *) &pkeymaterial->keyParamSet;
 242                 u8 * resp_end = (u8 *) (resp + le16_to_cpu(resp->size));
 243
 244                 while (buf_ptr < resp_end) {
 245                         struct MrvlIEtype_keyParamSet * pkeyparamset =
 246                             (struct MrvlIEtype_keyParamSet *) buf_ptr;
 247                         struct enc_key * pkey;
 248                         u16 param_set_len = le16_to_cpu(pkeyparamset->length);
 249                         u16 key_len = le16_to_cpu(pkeyparamset->keylen);
 250                         u16 key_flags = le16_to_cpu(pkeyparamset->keyinfo);
 251                         u16 key_type = le16_to_cpu(pkeyparamset->keytypeid);
 252                         u8 * end;
 253
 254                         end = (u8 *) pkeyparamset + sizeof (pkeyparamset->type)
 255                                                   + sizeof (pkeyparamset->length)
 256                                                   + param_set_len;
 257                         /* Make sure we don't access past the end of the IEs */
 258                         if (end > resp_end)
 259                                 break;
 260
 261                         if (key_flags & KEY_INFO_WPA_UNICAST)
 262                                 pkey = &priv->wpa_unicast_key;
 263                         else if (key_flags & KEY_INFO_WPA_MCAST)
 264                                 pkey = &priv->wpa_mcast_key;
 265                         else
 266                                 break;
 267
 268                         /* Copy returned key into driver */
 269                         memset(pkey, 0, sizeof(struct enc_key));
 270                         if (key_len > sizeof(pkey->key))
 271                                 break;
 272                         pkey->type = key_type;
 273                         pkey->flags = key_flags;
 274                         pkey->len = key_len;
 275                         memcpy(pkey->key, pkeyparamset->key, pkey->len);
 276
 277                         buf_ptr = end + 1;
 278                 }
 279         }
 280
 281         lbs_deb_enter(LBS_DEB_CMD);
 282         return 0;
 283 }
 284
 285 static int lbs_ret_802_11_mac_address(struct lbs_private *priv,
 286                                        struct cmd_ds_command *resp)
 287 {
 288         struct cmd_ds_802_11_mac_address *macadd = &resp->params.macadd;
 289
 290         lbs_deb_enter(LBS_DEB_CMD);
 291
 292         memcpy(priv->current_addr, macadd->macadd, ETH_ALEN);
 293
 294         lbs_deb_enter(LBS_DEB_CMD);
 295         return 0;
 296 }
 297
 298 static int lbs_ret_802_11_rf_tx_power(struct lbs_private *priv,
 299                                        struct cmd_ds_command *resp)
 300 {
 301         struct cmd_ds_802_11_rf_tx_power *rtp = &resp->params.txp;
 302
 303         lbs_deb_enter(LBS_DEB_CMD);
 304
 305         priv->txpowerlevel = le16_to_cpu(rtp->currentlevel);
 306
 307         lbs_deb_cmd("TX power currently %d\n", priv->txpowerlevel);
 308
 309         lbs_deb_leave(LBS_DEB_CMD);
 310         return 0;
 311 }
 312
 313 static int lbs_ret_802_11_rate_adapt_rateset(struct lbs_private *priv,
 314                                               struct cmd_ds_command *resp)
 315 {
 316         struct cmd_ds_802_11_rate_adapt_rateset *rates = &resp->params.rateset;
 317
 318         lbs_deb_enter(LBS_DEB_CMD);
 319
 320         if (rates->action == CMD_ACT_GET) {
 321                 priv->enablehwauto = le16_to_cpu(rates->enablehwauto);
 322                 priv->ratebitmap = le16_to_cpu(rates->bitmap);
 323         }
 324
 325         lbs_deb_leave(LBS_DEB_CMD);
 326         return 0;
 327 }
 328
 329 static int lbs_ret_802_11_rssi(struct lbs_private *priv,
 330                                 struct cmd_ds_command *resp)
 331 {
 332         struct cmd_ds_802_11_rssi_rsp *rssirsp = &resp->params.rssirsp;
 333
 334         lbs_deb_enter(LBS_DEB_CMD);
 335
 336         /* store the non average value */
 337         priv->SNR[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->SNR);
 338         priv->NF[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->noisefloor);
 339
 340         priv->SNR[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgSNR);
 341         priv->NF[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgnoisefloor);
 342
 343         priv->RSSI[TYPE_BEACON][TYPE_NOAVG] =
 344             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_NOAVG],
 345                      priv->NF[TYPE_BEACON][TYPE_NOAVG]);
 346
 347         priv->RSSI[TYPE_BEACON][TYPE_AVG] =
 348             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_AVG] / AVG_SCALE,
 349                      priv->NF[TYPE_BEACON][TYPE_AVG] / AVG_SCALE);
 350
 351         lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
 352                priv->RSSI[TYPE_BEACON][TYPE_NOAVG],
 353                priv->RSSI[TYPE_BEACON][TYPE_AVG]);
 354
 355         lbs_deb_leave(LBS_DEB_CMD);
 356         return 0;
 357 }
 358
 359 static int lbs_ret_802_11_eeprom_access(struct lbs_private *priv,
 360                                   struct cmd_ds_command *resp)
 361 {
 362         struct lbs_ioctl_regrdwr *pbuf;
 363         pbuf = (struct lbs_ioctl_regrdwr *) priv->prdeeprom;
 364
 365         lbs_deb_enter_args(LBS_DEB_CMD, "len %d",
 366                le16_to_cpu(resp->params.rdeeprom.bytecount));
 367         if (pbuf->NOB < le16_to_cpu(resp->params.rdeeprom.bytecount)) {
 368                 pbuf->NOB = 0;
 369                 lbs_deb_cmd("EEPROM read length too big\n");
 370                 return -1;
 371         }
 372         pbuf->NOB = le16_to_cpu(resp->params.rdeeprom.bytecount);
 373         if (pbuf->NOB > 0) {
 374
 375                 memcpy(&pbuf->value, (u8 *) & resp->params.rdeeprom.value,
 376                        le16_to_cpu(resp->params.rdeeprom.bytecount));
 377                 lbs_deb_hex(LBS_DEB_CMD, "EEPROM", (char *)&pbuf->value,
 378                         le16_to_cpu(resp->params.rdeeprom.bytecount));
 379         }
 380         lbs_deb_leave(LBS_DEB_CMD);
 381         return 0;
 382 }
 383
 384 static int lbs_ret_get_log(struct lbs_private *priv,
 385                             struct cmd_ds_command *resp)
 386 {
 387         struct cmd_ds_802_11_get_log *logmessage = &resp->params.glog;
 388
 389         lbs_deb_enter(LBS_DEB_CMD);
 390
 391         /* Stored little-endian */
 392         memcpy(&priv->logmsg, logmessage, sizeof(struct cmd_ds_802_11_get_log));
 393
 394         lbs_deb_leave(LBS_DEB_CMD);
 395         return 0;
 396 }
 397
 398 static int lbs_ret_802_11_enable_rsn(struct lbs_private *priv,
 399                                           struct cmd_ds_command *resp)
 400 {
 401         struct cmd_ds_802_11_enable_rsn *enable_rsn = &resp->params.enbrsn;
 402         uint32_t * pdata_buf = (uint32_t *)priv->cur_cmd->callback_arg;
 403
 404         lbs_deb_enter(LBS_DEB_CMD);
 405
 406         if (enable_rsn->action == cpu_to_le16(CMD_ACT_GET)) {
 407                 if (pdata_buf)
 408                         *pdata_buf = (uint32_t) le16_to_cpu(enable_rsn->enable);
 409         }
 410
 411         lbs_deb_leave(LBS_DEB_CMD);
 412         return 0;
 413 }
 414
 415 static int lbs_ret_802_11_bcn_ctrl(struct lbs_private * priv,
 416                                         struct cmd_ds_command *resp)
 417 {
 418         struct cmd_ds_802_11_beacon_control *bcn_ctrl =
 419             &resp->params.bcn_ctrl;
 420
 421         lbs_deb_enter(LBS_DEB_CMD);
 422
 423         if (bcn_ctrl->action == CMD_ACT_GET) {
 424                 priv->beacon_enable = (u8) le16_to_cpu(bcn_ctrl->beacon_enable);
 425                 priv->beacon_period = le16_to_cpu(bcn_ctrl->beacon_period);
 426         }
 427
 428         lbs_deb_enter(LBS_DEB_CMD);
 429         return 0;
 430 }
 431
 432 static int lbs_ret_802_11_subscribe_event(struct lbs_private *priv,
 433         struct cmd_ds_command *resp)
 434 {
 435         struct cmd_ds_802_11_subscribe_event *cmd_event =
 436                 &resp->params.subscribe_event;
 437         struct cmd_ds_802_11_subscribe_event *dst_event =
 438                 (void *)priv->cur_cmd->callback_arg;
 439
 440         lbs_deb_enter(LBS_DEB_CMD);
 441
 442         if (dst_event->action == cpu_to_le16(CMD_ACT_GET)) {
 443                 dst_event->events = cmd_event->events;
 444                 memcpy(dst_event->tlv, cmd_event->tlv, sizeof(dst_event->tlv));
 445         }
 446
 447         lbs_deb_leave(LBS_DEB_CMD);
 448         return 0;
 449 }
 450
 451 static inline int handle_cmd_response(struct lbs_private *priv,
 452                                       unsigned long dummy,
 453                                       struct cmd_header *cmd_response)
 454 {
 455         struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
 456         int ret = 0;
 457         unsigned long flags;
 458         uint16_t respcmd = le16_to_cpu(resp->command);
 459
 460         lbs_deb_enter(LBS_DEB_HOST);
 461
 462         switch (respcmd) {
 463         case CMD_RET(CMD_MAC_REG_ACCESS):
 464         case CMD_RET(CMD_BBP_REG_ACCESS):
 465         case CMD_RET(CMD_RF_REG_ACCESS):
 466                 ret = lbs_ret_reg_access(priv, respcmd, resp);
 467                 break;
 468
 469         case CMD_RET(CMD_802_11_SCAN):
 470                 ret = lbs_ret_80211_scan(priv, resp);
 471                 break;
 472
 473         case CMD_RET(CMD_802_11_GET_LOG):
 474                 ret = lbs_ret_get_log(priv, resp);
 475                 break;
 476
 477         case CMD_RET_802_11_ASSOCIATE:
 478         case CMD_RET(CMD_802_11_ASSOCIATE):
 479         case CMD_RET(CMD_802_11_REASSOCIATE):
 480                 ret = lbs_ret_80211_associate(priv, resp);
 481                 break;
 482
 483         case CMD_RET(CMD_802_11_DISASSOCIATE):
 484         case CMD_RET(CMD_802_11_DEAUTHENTICATE):
 485                 ret = lbs_ret_80211_disassociate(priv, resp);
 486                 break;
 487
 488         case CMD_RET(CMD_802_11_AD_HOC_START):
 489         case CMD_RET(CMD_802_11_AD_HOC_JOIN):
 490                 ret = lbs_ret_80211_ad_hoc_start(priv, resp);
 491                 break;
 492
 493         case CMD_RET(CMD_802_11_GET_STAT):
 494                 ret = lbs_ret_802_11_stat(priv, resp);
 495                 break;
 496
 497         case CMD_RET(CMD_802_11_SNMP_MIB):
 498                 ret = lbs_ret_802_11_snmp_mib(priv, resp);
 499                 break;
 500
 501         case CMD_RET(CMD_802_11_RF_TX_POWER):
 502                 ret = lbs_ret_802_11_rf_tx_power(priv, resp);
 503                 break;
 504
 505         case CMD_RET(CMD_802_11_SET_AFC):
 506         case CMD_RET(CMD_802_11_GET_AFC):
 507                 spin_lock_irqsave(&priv->driver_lock, flags);
 508                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.afc,
 509                         sizeof(struct cmd_ds_802_11_afc));
 510                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 511
 512                 break;
 513
 514         case CMD_RET(CMD_MAC_MULTICAST_ADR):
 515         case CMD_RET(CMD_MAC_CONTROL):
 516         case CMD_RET(CMD_802_11_SET_WEP):
 517         case CMD_RET(CMD_802_11_RESET):
 518         case CMD_RET(CMD_802_11_AUTHENTICATE):
 519         case CMD_RET(CMD_802_11_BEACON_STOP):
 520                 break;
 521
 522         case CMD_RET(CMD_802_11_ENABLE_RSN):
 523                 ret = lbs_ret_802_11_enable_rsn(priv, resp);
 524                 break;
 525
 526         case CMD_RET(CMD_802_11_RATE_ADAPT_RATESET):
 527                 ret = lbs_ret_802_11_rate_adapt_rateset(priv, resp);
 528                 break;
 529
 530         case CMD_RET(CMD_802_11_RSSI):
 531                 ret = lbs_ret_802_11_rssi(priv, resp);
 532                 break;
 533
 534         case CMD_RET(CMD_802_11_MAC_ADDRESS):
 535                 ret = lbs_ret_802_11_mac_address(priv, resp);
 536                 break;
 537
 538         case CMD_RET(CMD_802_11_AD_HOC_STOP):
 539                 ret = lbs_ret_80211_ad_hoc_stop(priv, resp);
 540                 break;
 541
 542         case CMD_RET(CMD_802_11_KEY_MATERIAL):
 543                 ret = lbs_ret_802_11_key_material(priv, resp);
 544                 break;
 545
 546         case CMD_RET(CMD_802_11_EEPROM_ACCESS):
 547                 ret = lbs_ret_802_11_eeprom_access(priv, resp);
 548                 break;
 549
 550         case CMD_RET(CMD_802_11D_DOMAIN_INFO):
 551                 ret = lbs_ret_802_11d_domain_info(priv, resp);
 552                 break;
 553
 554         case CMD_RET(CMD_802_11_SLEEP_PARAMS):
 555                 ret = lbs_ret_802_11_sleep_params(priv, resp);
 556                 break;
 557         case CMD_RET(CMD_802_11_INACTIVITY_TIMEOUT):
 558                 spin_lock_irqsave(&priv->driver_lock, flags);
 559                 *((uint16_t *) priv->cur_cmd->callback_arg) =
 560                     le16_to_cpu(resp->params.inactivity_timeout.timeout);
 561                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 562                 break;
 563
 564         case CMD_RET(CMD_802_11_TPC_CFG):
 565                 spin_lock_irqsave(&priv->driver_lock, flags);
 566                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.tpccfg,
 567                         sizeof(struct cmd_ds_802_11_tpc_cfg));
 568                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 569                 break;
 570         case CMD_RET(CMD_802_11_LED_GPIO_CTRL):
 571                 spin_lock_irqsave(&priv->driver_lock, flags);
 572                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.ledgpio,
 573                         sizeof(struct cmd_ds_802_11_led_ctrl));
 574                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 575                 break;
 576         case CMD_RET(CMD_802_11_SUBSCRIBE_EVENT):
 577                 ret = lbs_ret_802_11_subscribe_event(priv, resp);
 578                 break;
 579
 580         case CMD_RET(CMD_802_11_PWR_CFG):
 581                 spin_lock_irqsave(&priv->driver_lock, flags);
 582                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.pwrcfg,
 583                         sizeof(struct cmd_ds_802_11_pwr_cfg));
 584                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 585
 586                 break;
 587
 588         case CMD_RET(CMD_GET_TSF):
 589                 spin_lock_irqsave(&priv->driver_lock, flags);
 590                 memcpy((void *)priv->cur_cmd->callback_arg,
 591                        &resp->params.gettsf.tsfvalue, sizeof(u64));
 592                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 593                 break;
 594         case CMD_RET(CMD_BT_ACCESS):
 595                 spin_lock_irqsave(&priv->driver_lock, flags);
 596                 if (priv->cur_cmd->callback_arg)
 597                         memcpy((void *)priv->cur_cmd->callback_arg,
 598                                &resp->params.bt.addr1, 2 * ETH_ALEN);
 599                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 600                 break;
 601         case CMD_RET(CMD_FWT_ACCESS):
 602                 spin_lock_irqsave(&priv->driver_lock, flags);
 603                 if (priv->cur_cmd->callback_arg)
 604                         memcpy((void *)priv->cur_cmd->callback_arg, &resp->params.fwt,
 605                                sizeof(resp->params.fwt));
 606                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 607                 break;
 608         case CMD_RET(CMD_802_11_BEACON_CTRL):
 609                 ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
 610                 break;
 611
 612         default:
 613                 lbs_deb_host("CMD_RESP: unknown cmd response 0x%04x\n",
 614                              le16_to_cpu(resp->command));
 615                 break;
 616         }
 617         lbs_deb_leave(LBS_DEB_HOST);
 618         return ret;
 619 }
 620
 621 int lbs_process_rx_command(struct lbs_private *priv)
 622 {
 623         uint16_t respcmd, curcmd;
 624         struct cmd_header *resp;
 625         int ret = 0;
 626         unsigned long flags;
 627         uint16_t result;
 628
 629         lbs_deb_enter(LBS_DEB_HOST);
 630
 631         mutex_lock(&priv->lock);
 632         spin_lock_irqsave(&priv->driver_lock, flags);
 633
 634         if (!priv->cur_cmd) {
 635                 lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
 636                 ret = -1;
 637                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 638                 goto done;
 639         }
 640
 641         resp = (void *)priv->upld_buf;
 642
 643         curcmd = le16_to_cpu(resp->command);
 644
 645         respcmd = le16_to_cpu(resp->command);
 646         result = le16_to_cpu(resp->result);
 647
 648         lbs_deb_host("CMD_RESP: response 0x%04x, seq %d, size %d, jiffies %lu\n",
 649                      respcmd, le16_to_cpu(resp->seqnum), priv->upld_len, jiffies);
 650         lbs_deb_hex(LBS_DEB_HOST, "CMD_RESP", (void *) resp, priv->upld_len);
 651
 652         if (resp->seqnum != resp->seqnum) {
 653                 lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
 654                             le16_to_cpu(resp->seqnum), le16_to_cpu(resp->seqnum));
 655                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 656                 ret = -1;
 657                 goto done;
 658         }
 659         if (respcmd != CMD_RET(curcmd) &&
 660             respcmd != CMD_802_11_ASSOCIATE && curcmd != CMD_RET_802_11_ASSOCIATE) {
 661                 lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
 662                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 663                 ret = -1;
 664                 goto done;
 665         }
 666
 667         if (resp->result == cpu_to_le16(0x0004)) {
 668                 /* 0x0004 means -EAGAIN. Drop the response, let it time out
 669                    and be resubmitted */
 670                 lbs_pr_info("Firmware returns DEFER to command %x. Will let it time out...\n",
 671                             le16_to_cpu(resp->command));
 672                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 673                 ret = -1;
 674                 goto done;
 675         }
 676
 677         /* Now we got response from FW, cancel the command timer */
 678         del_timer(&priv->command_timer);
 679         priv->cmd_timed_out = 0;
 680         if (priv->nr_retries) {
 681                 lbs_pr_info("Received result %x to command %x after %d retries\n",
 682                             result, curcmd, priv->nr_retries);
 683                 priv->nr_retries = 0;
 684         }
 685
 686         /* Store the response code to cur_cmd_retcode. */
 687         priv->cur_cmd_retcode = result;
 688
 689         if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
 690                 struct cmd_ds_802_11_ps_mode *psmode = (void *) &resp[1];
 691                 u16 action = le16_to_cpu(psmode->action);
 692
 693                 lbs_deb_host(
 694                        "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
 695                        result, action);
 696
 697                 if (result) {
 698                         lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
 699                                     result);
 700                         /*
 701                          * We should not re-try enter-ps command in
 702                          * ad-hoc mode. It takes place in
 703                          * lbs_execute_next_command().
 704                          */
 705                         if (priv->mode == IW_MODE_ADHOC &&
 706                             action == CMD_SUBCMD_ENTER_PS)
 707                                 priv->psmode = LBS802_11POWERMODECAM;
 708                 } else if (action == CMD_SUBCMD_ENTER_PS) {
 709                         priv->needtowakeup = 0;
 710                         priv->psstate = PS_STATE_AWAKE;
 711
 712                         lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
 713                         if (priv->connect_status != LBS_CONNECTED) {
 714                                 /*
 715                                  * When Deauth Event received before Enter_PS command
 716                                  * response, We need to wake up the firmware.
 717                                  */
 718                                 lbs_deb_host(
 719                                        "disconnected, invoking lbs_ps_wakeup\n");
 720
 721                                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 722                                 mutex_unlock(&priv->lock);
 723                                 lbs_ps_wakeup(priv, 0);
 724                                 mutex_lock(&priv->lock);
 725                                 spin_lock_irqsave(&priv->driver_lock, flags);
 726                         }
 727                 } else if (action == CMD_SUBCMD_EXIT_PS) {
 728                         priv->needtowakeup = 0;
 729                         priv->psstate = PS_STATE_FULL_POWER;
 730                         lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
 731                 } else {
 732                         lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
 733                 }
 734
 735                 lbs_complete_command(priv, priv->cur_cmd, result);
 736                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 737
 738                 ret = 0;
 739                 goto done;
 740         }
 741
 742         /* If the command is not successful, cleanup and return failure */
 743         if ((result != 0 || !(respcmd & 0x8000))) {
 744                 lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
 745                        result, respcmd);
 746                 /*
 747                  * Handling errors here
 748                  */
 749                 switch (respcmd) {
 750                 case CMD_RET(CMD_GET_HW_SPEC):
 751                 case CMD_RET(CMD_802_11_RESET):
 752                         lbs_deb_host("CMD_RESP: reset failed\n");
 753                         break;
 754
 755                 }
 756                 lbs_complete_command(priv, priv->cur_cmd, result);
 757                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 758
 759                 ret = -1;
 760                 goto done;
 761         }
 762
 763         spin_unlock_irqrestore(&priv->driver_lock, flags);
 764
 765         if (priv->cur_cmd && priv->cur_cmd->callback) {
 766                 ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
 767                                 resp);
 768         } else
 769                 ret = handle_cmd_response(priv, 0, resp);
 770
 771         spin_lock_irqsave(&priv->driver_lock, flags);
 772
 773         if (priv->cur_cmd) {
 774                 /* Clean up and Put current command back to cmdfreeq */
 775                 lbs_complete_command(priv, priv->cur_cmd, result);
 776         }
 777         spin_unlock_irqrestore(&priv->driver_lock, flags);
 778
 779 done:
 780         mutex_unlock(&priv->lock);
 781         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
 782         return ret;
 783 }
 784
 785 static int lbs_send_confirmwake(struct lbs_private *priv)
 786 {
 787         struct cmd_header *cmd = &priv->lbs_ps_confirm_wake;
 788         int ret = 0;
 789
 790         lbs_deb_enter(LBS_DEB_HOST);
 791
 792         cmd->command = cpu_to_le16(CMD_802_11_WAKEUP_CONFIRM);
 793         cmd->size = cpu_to_le16(sizeof(*cmd));
 794         cmd->seqnum = cpu_to_le16(++priv->seqnum);
 795         cmd->result = 0;
 796
 797         lbs_deb_host("SEND_WAKEC_CMD: before download\n");
 798
 799         lbs_deb_hex(LBS_DEB_HOST, "wake confirm command", (void *)cmd, sizeof(*cmd));
 800
 801         ret = priv->hw_host_to_card(priv, MVMS_CMD, (void *)cmd, sizeof(*cmd));
 802         if (ret)
 803                 lbs_pr_alert("SEND_WAKEC_CMD: Host to Card failed for Confirm Wake\n");
 804
 805         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
 806         return ret;
 807 }
 808
 809 int lbs_process_event(struct lbs_private *priv)
 810 {
 811         int ret = 0;
 812         u32 eventcause;
 813
 814         lbs_deb_enter(LBS_DEB_CMD);
 815
 816         spin_lock_irq(&priv->driver_lock);
 817         eventcause = priv->eventcause >> SBI_EVENT_CAUSE_SHIFT;
 818         spin_unlock_irq(&priv->driver_lock);
 819
 820         lbs_deb_cmd("event cause %d\n", eventcause);
 821
 822         switch (eventcause) {
 823         case MACREG_INT_CODE_LINK_SENSED:
 824                 lbs_deb_cmd("EVENT: MACREG_INT_CODE_LINK_SENSED\n");
 825                 break;
 826
 827         case MACREG_INT_CODE_DEAUTHENTICATED:
 828                 lbs_deb_cmd("EVENT: deauthenticated\n");
 829                 lbs_mac_event_disconnected(priv);
 830                 break;
 831
 832         case MACREG_INT_CODE_DISASSOCIATED:
 833                 lbs_deb_cmd("EVENT: disassociated\n");
 834                 lbs_mac_event_disconnected(priv);
 835                 break;
 836
 837         case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
 838                 lbs_deb_cmd("EVENT: link lost\n");
 839                 lbs_mac_event_disconnected(priv);
 840                 break;
 841
 842         case MACREG_INT_CODE_PS_SLEEP:
 843                 lbs_deb_cmd("EVENT: sleep\n");
 844
 845                 /* handle unexpected PS SLEEP event */
 846                 if (priv->psstate == PS_STATE_FULL_POWER) {
 847                         lbs_deb_cmd(
 848                                "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
 849                         break;
 850                 }
 851                 priv->psstate = PS_STATE_PRE_SLEEP;
 852
 853                 lbs_ps_confirm_sleep(priv, (u16) priv->psmode);
 854
 855                 break;
 856
 857         case MACREG_INT_CODE_HOST_AWAKE:
 858                 lbs_deb_cmd("EVENT: HOST_AWAKE\n");
 859                 lbs_send_confirmwake(priv);
 860                 break;
 861
 862         case MACREG_INT_CODE_PS_AWAKE:
 863                 lbs_deb_cmd("EVENT: awake\n");
 864                 /* handle unexpected PS AWAKE event */
 865                 if (priv->psstate == PS_STATE_FULL_POWER) {
 866                         lbs_deb_cmd(
 867                                "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
 868                         break;
 869                 }
 870
 871                 priv->psstate = PS_STATE_AWAKE;
 872
 873                 if (priv->needtowakeup) {
 874                         /*
 875                          * wait for the command processing to finish
 876                          * before resuming sending
 877                          * priv->needtowakeup will be set to FALSE
 878                          * in lbs_ps_wakeup()
 879                          */
 880                         lbs_deb_cmd("waking up ...\n");
 881                         lbs_ps_wakeup(priv, 0);
 882                 }
 883                 break;
 884
 885         case MACREG_INT_CODE_MIC_ERR_UNICAST:
 886                 lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
 887                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_UNICAST);
 888                 break;
 889
 890         case MACREG_INT_CODE_MIC_ERR_MULTICAST:
 891                 lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
 892                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_MULTICAST);
 893                 break;
 894         case MACREG_INT_CODE_MIB_CHANGED:
 895         case MACREG_INT_CODE_INIT_DONE:
 896                 break;
 897
 898         case MACREG_INT_CODE_ADHOC_BCN_LOST:
 899                 lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
 900                 break;
 901
 902         case MACREG_INT_CODE_RSSI_LOW:
 903                 lbs_pr_alert("EVENT: rssi low\n");
 904                 break;
 905         case MACREG_INT_CODE_SNR_LOW:
 906                 lbs_pr_alert("EVENT: snr low\n");
 907                 break;
 908         case MACREG_INT_CODE_MAX_FAIL:
 909                 lbs_pr_alert("EVENT: max fail\n");
 910                 break;
 911         case MACREG_INT_CODE_RSSI_HIGH:
 912                 lbs_pr_alert("EVENT: rssi high\n");
 913                 break;
 914         case MACREG_INT_CODE_SNR_HIGH:
 915                 lbs_pr_alert("EVENT: snr high\n");
 916                 break;
 917
 918         case MACREG_INT_CODE_MESH_AUTO_STARTED:
 919                 /* Ignore spurious autostart events if autostart is disabled */
 920                 if (!priv->mesh_autostart_enabled) {
 921                         lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
 922                         break;
 923                 }
 924                 lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
 925                 priv->mesh_connect_status = LBS_CONNECTED;
 926                 if (priv->mesh_open) {
 927                         netif_carrier_on(priv->mesh_dev);
 928                         if (!priv->tx_pending_len)
 929                                 netif_wake_queue(priv->mesh_dev);
 930                 }
 931                 priv->mode = IW_MODE_ADHOC;
 932                 schedule_work(&priv->sync_channel);
 933                 break;
 934
 935         default:
 936                 lbs_pr_alert("EVENT: unknown event id %d\n", eventcause);
 937                 break;
 938         }
 939
 940         spin_lock_irq(&priv->driver_lock);
 941         priv->eventcause = 0;
 942         spin_unlock_irq(&priv->driver_lock);
 943
 944         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 945         return ret;
 946 }