drivers/net/wireless/broadcom/b43/xmit.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3
   4   Broadcom B43 wireless driver
   5
   6   Transmission (TX/RX) related functions.
   7
   8   Copyright (C) 2005 Martin Langer <martin-langer@gmx.de>
   9   Copyright (C) 2005 Stefano Brivio <stefano.brivio@polimi.it>
  10   Copyright (C) 2005, 2006 Michael Buesch <m@bues.ch>
  11   Copyright (C) 2005 Danny van Dyk <kugelfang@gentoo.org>
  12   Copyright (C) 2005 Andreas Jaggi <andreas.jaggi@waterwave.ch>
  13
  14
  15 */
  16
  17 #include "xmit.h"
  18 #include "phy_common.h"
  19 #include "dma.h"
  20 #include "pio.h"
  21
  22 static const struct b43_tx_legacy_rate_phy_ctl_entry b43_tx_legacy_rate_phy_ctl[] = {
  23         { B43_CCK_RATE_1MB,     0x0,                    0x0 },
  24         { B43_CCK_RATE_2MB,     0x0,                    0x1 },
  25         { B43_CCK_RATE_5MB,     0x0,                    0x2 },
  26         { B43_CCK_RATE_11MB,    0x0,                    0x3 },
  27         { B43_OFDM_RATE_6MB,    B43_TXH_PHY1_CRATE_1_2, B43_TXH_PHY1_MODUL_BPSK },
  28         { B43_OFDM_RATE_9MB,    B43_TXH_PHY1_CRATE_3_4, B43_TXH_PHY1_MODUL_BPSK },
  29         { B43_OFDM_RATE_12MB,   B43_TXH_PHY1_CRATE_1_2, B43_TXH_PHY1_MODUL_QPSK },
  30         { B43_OFDM_RATE_18MB,   B43_TXH_PHY1_CRATE_3_4, B43_TXH_PHY1_MODUL_QPSK },
  31         { B43_OFDM_RATE_24MB,   B43_TXH_PHY1_CRATE_1_2, B43_TXH_PHY1_MODUL_QAM16 },
  32         { B43_OFDM_RATE_36MB,   B43_TXH_PHY1_CRATE_3_4, B43_TXH_PHY1_MODUL_QAM16 },
  33         { B43_OFDM_RATE_48MB,   B43_TXH_PHY1_CRATE_2_3, B43_TXH_PHY1_MODUL_QAM64 },
  34         { B43_OFDM_RATE_54MB,   B43_TXH_PHY1_CRATE_3_4, B43_TXH_PHY1_MODUL_QAM64 },
  35 };
  36
  37 static const struct b43_tx_legacy_rate_phy_ctl_entry *
  38 b43_tx_legacy_rate_phy_ctl_ent(u8 bitrate)
  39 {
  40         const struct b43_tx_legacy_rate_phy_ctl_entry *e;
  41         unsigned int i;
  42
  43         for (i = 0; i < ARRAY_SIZE(b43_tx_legacy_rate_phy_ctl); i++) {
  44                 e = &(b43_tx_legacy_rate_phy_ctl[i]);
  45                 if (e->bitrate == bitrate)
  46                         return e;
  47         }
  48
  49         B43_WARN_ON(1);
  50         return NULL;
  51 }
  52
  53 /* Extract the bitrate index out of a CCK PLCP header. */
  54 static int b43_plcp_get_bitrate_idx_cck(struct b43_plcp_hdr6 *plcp)
  55 {
  56         switch (plcp->raw[0]) {
  57         case 0x0A:
  58                 return 0;
  59         case 0x14:
  60                 return 1;
  61         case 0x37:
  62                 return 2;
  63         case 0x6E:
  64                 return 3;
  65         }
  66         return -1;
  67 }
  68
  69 /* Extract the bitrate index out of an OFDM PLCP header. */
  70 static int b43_plcp_get_bitrate_idx_ofdm(struct b43_plcp_hdr6 *plcp, bool ghz5)
  71 {
  72         /* For 2 GHz band first OFDM rate is at index 4, see main.c */
  73         int base = ghz5 ? 0 : 4;
  74
  75         switch (plcp->raw[0] & 0xF) {
  76         case 0xB:
  77                 return base + 0;
  78         case 0xF:
  79                 return base + 1;
  80         case 0xA:
  81                 return base + 2;
  82         case 0xE:
  83                 return base + 3;
  84         case 0x9:
  85                 return base + 4;
  86         case 0xD:
  87                 return base + 5;
  88         case 0x8:
  89                 return base + 6;
  90         case 0xC:
  91                 return base + 7;
  92         }
  93         return -1;
  94 }
  95
  96 u8 b43_plcp_get_ratecode_cck(const u8 bitrate)
  97 {
  98         switch (bitrate) {
  99         case B43_CCK_RATE_1MB:
 100                 return 0x0A;
 101         case B43_CCK_RATE_2MB:
 102                 return 0x14;
 103         case B43_CCK_RATE_5MB:
 104                 return 0x37;
 105         case B43_CCK_RATE_11MB:
 106                 return 0x6E;
 107         }
 108         B43_WARN_ON(1);
 109         return 0;
 110 }
 111
 112 u8 b43_plcp_get_ratecode_ofdm(const u8 bitrate)
 113 {
 114         switch (bitrate) {
 115         case B43_OFDM_RATE_6MB:
 116                 return 0xB;
 117         case B43_OFDM_RATE_9MB:
 118                 return 0xF;
 119         case B43_OFDM_RATE_12MB:
 120                 return 0xA;
 121         case B43_OFDM_RATE_18MB:
 122                 return 0xE;
 123         case B43_OFDM_RATE_24MB:
 124                 return 0x9;
 125         case B43_OFDM_RATE_36MB:
 126                 return 0xD;
 127         case B43_OFDM_RATE_48MB:
 128                 return 0x8;
 129         case B43_OFDM_RATE_54MB:
 130                 return 0xC;
 131         }
 132         B43_WARN_ON(1);
 133         return 0;
 134 }
 135
 136 void b43_generate_plcp_hdr(struct b43_plcp_hdr4 *plcp,
 137                            const u16 octets, const u8 bitrate)
 138 {
 139         __u8 *raw = plcp->raw;
 140
 141         if (b43_is_ofdm_rate(bitrate)) {
 142                 u32 d;
 143
 144                 d = b43_plcp_get_ratecode_ofdm(bitrate);
 145                 B43_WARN_ON(octets & 0xF000);
 146                 d |= (octets << 5);
 147                 plcp->data = cpu_to_le32(d);
 148         } else {
 149                 u32 plen;
 150
 151                 plen = octets * 16 / bitrate;
 152                 if ((octets * 16 % bitrate) > 0) {
 153                         plen++;
 154                         if ((bitrate == B43_CCK_RATE_11MB)
 155                             && ((octets * 8 % 11) < 4)) {
 156                                 raw[1] = 0x84;
 157                         } else
 158                                 raw[1] = 0x04;
 159                 } else
 160                         raw[1] = 0x04;
 161                 plcp->data |= cpu_to_le32(plen << 16);
 162                 raw[0] = b43_plcp_get_ratecode_cck(bitrate);
 163         }
 164 }
 165
 166 /* TODO: verify if needed for SSLPN or LCN  */
 167 static u16 b43_generate_tx_phy_ctl1(struct b43_wldev *dev, u8 bitrate)
 168 {
 169         const struct b43_phy *phy = &dev->phy;
 170         const struct b43_tx_legacy_rate_phy_ctl_entry *e;
 171         u16 control = 0;
 172         u16 bw;
 173
 174         if (phy->type == B43_PHYTYPE_LP)
 175                 bw = B43_TXH_PHY1_BW_20;
 176         else /* FIXME */
 177                 bw = B43_TXH_PHY1_BW_20;
 178
 179         if (0) { /* FIXME: MIMO */
 180         } else if (b43_is_cck_rate(bitrate) && phy->type != B43_PHYTYPE_LP) {
 181                 control = bw;
 182         } else {
 183                 control = bw;
 184                 e = b43_tx_legacy_rate_phy_ctl_ent(bitrate);
 185                 if (e) {
 186                         control |= e->coding_rate;
 187                         control |= e->modulation;
 188                 }
 189                 control |= B43_TXH_PHY1_MODE_SISO;
 190         }
 191
 192         return control;
 193 }
 194
 195 static u8 b43_calc_fallback_rate(u8 bitrate, int gmode)
 196 {
 197         switch (bitrate) {
 198         case B43_CCK_RATE_1MB:
 199                 return B43_CCK_RATE_1MB;
 200         case B43_CCK_RATE_2MB:
 201                 return B43_CCK_RATE_1MB;
 202         case B43_CCK_RATE_5MB:
 203                 return B43_CCK_RATE_2MB;
 204         case B43_CCK_RATE_11MB:
 205                 return B43_CCK_RATE_5MB;
 206         /*
 207          * Don't just fallback to CCK; it may be in 5GHz operation
 208          * and falling back to CCK won't work out very well.
 209          */
 210         case B43_OFDM_RATE_6MB:
 211                 if (gmode)
 212                         return B43_CCK_RATE_5MB;
 213                 else
 214                         return B43_OFDM_RATE_6MB;
 215         case B43_OFDM_RATE_9MB:
 216                 return B43_OFDM_RATE_6MB;
 217         case B43_OFDM_RATE_12MB:
 218                 return B43_OFDM_RATE_9MB;
 219         case B43_OFDM_RATE_18MB:
 220                 return B43_OFDM_RATE_12MB;
 221         case B43_OFDM_RATE_24MB:
 222                 return B43_OFDM_RATE_18MB;
 223         case B43_OFDM_RATE_36MB:
 224                 return B43_OFDM_RATE_24MB;
 225         case B43_OFDM_RATE_48MB:
 226                 return B43_OFDM_RATE_36MB;
 227         case B43_OFDM_RATE_54MB:
 228                 return B43_OFDM_RATE_48MB;
 229         }
 230         B43_WARN_ON(1);
 231         return 0;
 232 }
 233
 234 /* Generate a TX data header. */
 235 int b43_generate_txhdr(struct b43_wldev *dev,
 236                        u8 *_txhdr,
 237                        struct sk_buff *skb_frag,
 238                        struct ieee80211_tx_info *info,
 239                        u16 cookie)
 240 {
 241         const unsigned char *fragment_data = skb_frag->data;
 242         unsigned int fragment_len = skb_frag->len;
 243         struct b43_txhdr *txhdr = (struct b43_txhdr *)_txhdr;
 244         const struct b43_phy *phy = &dev->phy;
 245         const struct ieee80211_hdr *wlhdr =
 246             (const struct ieee80211_hdr *)fragment_data;
 247         int use_encryption = !!info->control.hw_key;
 248         __le16 fctl = wlhdr->frame_control;
 249         struct ieee80211_rate *fbrate;
 250         u8 rate, rate_fb;
 251         int rate_ofdm, rate_fb_ofdm;
 252         unsigned int plcp_fragment_len;
 253         u32 mac_ctl = 0;
 254         u16 phy_ctl = 0;
 255         bool fill_phy_ctl1 = (phy->type == B43_PHYTYPE_LP ||
 256                               phy->type == B43_PHYTYPE_N ||
 257                               phy->type == B43_PHYTYPE_HT);
 258         u8 extra_ft = 0;
 259         struct ieee80211_rate *txrate;
 260         struct ieee80211_tx_rate *rates;
 261
 262         memset(txhdr, 0, sizeof(*txhdr));
 263
 264         txrate = ieee80211_get_tx_rate(dev->wl->hw, info);
 265         rate = txrate ? txrate->hw_value : B43_CCK_RATE_1MB;
 266         rate_ofdm = b43_is_ofdm_rate(rate);
 267         fbrate = ieee80211_get_alt_retry_rate(dev->wl->hw, info, 0) ? : txrate;
 268         rate_fb = fbrate->hw_value;
 269         rate_fb_ofdm = b43_is_ofdm_rate(rate_fb);
 270
 271         if (rate_ofdm)
 272                 txhdr->phy_rate = b43_plcp_get_ratecode_ofdm(rate);
 273         else
 274                 txhdr->phy_rate = b43_plcp_get_ratecode_cck(rate);
 275         txhdr->mac_frame_ctl = wlhdr->frame_control;
 276         memcpy(txhdr->tx_receiver, wlhdr->addr1, ETH_ALEN);
 277
 278         /* Calculate duration for fallback rate */
 279         if ((rate_fb == rate) ||
 280             (wlhdr->duration_id & cpu_to_le16(0x8000)) ||
 281             (wlhdr->duration_id == cpu_to_le16(0))) {
 282                 /* If the fallback rate equals the normal rate or the
 283                  * dur_id field contains an AID, CFP magic or 0,
 284                  * use the original dur_id field. */
 285                 txhdr->dur_fb = wlhdr->duration_id;
 286         } else {
 287                 txhdr->dur_fb = ieee80211_generic_frame_duration(
 288                         dev->wl->hw, info->control.vif, info->band,
 289                         fragment_len, fbrate);
 290         }
 291
 292         plcp_fragment_len = fragment_len + FCS_LEN;
 293         if (use_encryption) {
 294                 u8 key_idx = info->control.hw_key->hw_key_idx;
 295                 struct b43_key *key;
 296                 int wlhdr_len;
 297                 size_t iv_len;
 298
 299                 B43_WARN_ON(key_idx >= ARRAY_SIZE(dev->key));
 300                 key = &(dev->key[key_idx]);
 301
 302                 if (unlikely(!key->keyconf)) {
 303                         /* This key is invalid. This might only happen
 304                          * in a short timeframe after machine resume before
 305                          * we were able to reconfigure keys.
 306                          * Drop this packet completely. Do not transmit it
 307                          * unencrypted to avoid leaking information. */
 308                         return -ENOKEY;
 309                 }
 310
 311                 /* Hardware appends ICV. */
 312                 plcp_fragment_len += info->control.hw_key->icv_len;
 313
 314                 key_idx = b43_kidx_to_fw(dev, key_idx);
 315                 mac_ctl |= (key_idx << B43_TXH_MAC_KEYIDX_SHIFT) &
 316                            B43_TXH_MAC_KEYIDX;
 317                 mac_ctl |= (key->algorithm << B43_TXH_MAC_KEYALG_SHIFT) &
 318                            B43_TXH_MAC_KEYALG;
 319                 wlhdr_len = ieee80211_hdrlen(fctl);
 320                 if (key->algorithm == B43_SEC_ALGO_TKIP) {
 321                         u16 phase1key[5];
 322                         int i;
 323                         /* we give the phase1key and iv16 here, the key is stored in
 324                          * shm. With that the hardware can do phase 2 and encryption.
 325                          */
 326                         ieee80211_get_tkip_p1k(info->control.hw_key, skb_frag, phase1key);
 327                         /* phase1key is in host endian. Copy to little-endian txhdr->iv. */
 328                         for (i = 0; i < 5; i++) {
 329                                 txhdr->iv[i * 2 + 0] = phase1key[i];
 330                                 txhdr->iv[i * 2 + 1] = phase1key[i] >> 8;
 331                         }
 332                         /* iv16 */
 333                         memcpy(txhdr->iv + 10, ((u8 *) wlhdr) + wlhdr_len, 3);
 334                 } else {
 335                         iv_len = min_t(size_t, info->control.hw_key->iv_len,
 336                                      ARRAY_SIZE(txhdr->iv));
 337                         memcpy(txhdr->iv, ((u8 *) wlhdr) + wlhdr_len, iv_len);
 338                 }
 339         }
 340         switch (dev->fw.hdr_format) {
 341         case B43_FW_HDR_598:
 342                 b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->format_598.plcp),
 343                                       plcp_fragment_len, rate);
 344                 break;
 345         case B43_FW_HDR_351:
 346                 b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->format_351.plcp),
 347                                       plcp_fragment_len, rate);
 348                 break;
 349         case B43_FW_HDR_410:
 350                 b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->format_410.plcp),
 351                                       plcp_fragment_len, rate);
 352                 break;
 353         }
 354         b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->plcp_fb),
 355                               plcp_fragment_len, rate_fb);
 356
 357         /* Extra Frame Types */
 358         if (rate_fb_ofdm)
 359                 extra_ft |= B43_TXH_EFT_FB_OFDM;
 360         else
 361                 extra_ft |= B43_TXH_EFT_FB_CCK;
 362
 363         /* Set channel radio code. Note that the micrcode ORs 0x100 to
 364          * this value before comparing it to the value in SHM, if this
 365          * is a 5Ghz packet.
 366          */
 367         txhdr->chan_radio_code = phy->channel;
 368
 369         /* PHY TX Control word */
 370         if (rate_ofdm)
 371                 phy_ctl |= B43_TXH_PHY_ENC_OFDM;
 372         else
 373                 phy_ctl |= B43_TXH_PHY_ENC_CCK;
 374         if (info->control.rates[0].flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE)
 375                 phy_ctl |= B43_TXH_PHY_SHORTPRMBL;
 376
 377         switch (b43_ieee80211_antenna_sanitize(dev, 0)) {
 378         case 0: /* Default */
 379                 phy_ctl |= B43_TXH_PHY_ANT01AUTO;
 380                 break;
 381         case 1: /* Antenna 0 */
 382                 phy_ctl |= B43_TXH_PHY_ANT0;
 383                 break;
 384         case 2: /* Antenna 1 */
 385                 phy_ctl |= B43_TXH_PHY_ANT1;
 386                 break;
 387         case 3: /* Antenna 2 */
 388                 phy_ctl |= B43_TXH_PHY_ANT2;
 389                 break;
 390         case 4: /* Antenna 3 */
 391                 phy_ctl |= B43_TXH_PHY_ANT3;
 392                 break;
 393         default:
 394                 B43_WARN_ON(1);
 395         }
 396
 397         rates = info->control.rates;
 398         /* MAC control */
 399         if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
 400                 mac_ctl |= B43_TXH_MAC_ACK;
 401         /* use hardware sequence counter as the non-TID counter */
 402         if (info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ)
 403                 mac_ctl |= B43_TXH_MAC_HWSEQ;
 404         if (info->flags & IEEE80211_TX_CTL_FIRST_FRAGMENT)
 405                 mac_ctl |= B43_TXH_MAC_STMSDU;
 406         if (!phy->gmode)
 407                 mac_ctl |= B43_TXH_MAC_5GHZ;
 408
 409         /* Overwrite rates[0].count to make the retry calculation
 410          * in the tx status easier. need the actual retry limit to
 411          * detect whether the fallback rate was used.
 412          */
 413         if ((rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
 414             (rates[0].count <= dev->wl->hw->conf.long_frame_max_tx_count)) {
 415                 rates[0].count = dev->wl->hw->conf.long_frame_max_tx_count;
 416                 mac_ctl |= B43_TXH_MAC_LONGFRAME;
 417         } else {
 418                 rates[0].count = dev->wl->hw->conf.short_frame_max_tx_count;
 419         }
 420
 421         /* Generate the RTS or CTS-to-self frame */
 422         if ((rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
 423             (rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT)) {
 424                 unsigned int len;
 425                 struct ieee80211_hdr *uninitialized_var(hdr);
 426                 int rts_rate, rts_rate_fb;
 427                 int rts_rate_ofdm, rts_rate_fb_ofdm;
 428                 struct b43_plcp_hdr6 *uninitialized_var(plcp);
 429                 struct ieee80211_rate *rts_cts_rate;
 430
 431                 rts_cts_rate = ieee80211_get_rts_cts_rate(dev->wl->hw, info);
 432
 433                 rts_rate = rts_cts_rate ? rts_cts_rate->hw_value : B43_CCK_RATE_1MB;
 434                 rts_rate_ofdm = b43_is_ofdm_rate(rts_rate);
 435                 rts_rate_fb = b43_calc_fallback_rate(rts_rate, phy->gmode);
 436                 rts_rate_fb_ofdm = b43_is_ofdm_rate(rts_rate_fb);
 437
 438                 if (rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT) {
 439                         struct ieee80211_cts *uninitialized_var(cts);
 440
 441                         switch (dev->fw.hdr_format) {
 442                         case B43_FW_HDR_598:
 443                                 cts = (struct ieee80211_cts *)
 444                                         (txhdr->format_598.rts_frame);
 445                                 break;
 446                         case B43_FW_HDR_351:
 447                                 cts = (struct ieee80211_cts *)
 448                                         (txhdr->format_351.rts_frame);
 449                                 break;
 450                         case B43_FW_HDR_410:
 451                                 cts = (struct ieee80211_cts *)
 452                                         (txhdr->format_410.rts_frame);
 453                                 break;
 454                         }
 455                         ieee80211_ctstoself_get(dev->wl->hw, info->control.vif,
 456                                                 fragment_data, fragment_len,
 457                                                 info, cts);
 458                         mac_ctl |= B43_TXH_MAC_SENDCTS;
 459                         len = sizeof(struct ieee80211_cts);
 460                 } else {
 461                         struct ieee80211_rts *uninitialized_var(rts);
 462
 463                         switch (dev->fw.hdr_format) {
 464                         case B43_FW_HDR_598:
 465                                 rts = (struct ieee80211_rts *)
 466                                         (txhdr->format_598.rts_frame);
 467                                 break;
 468                         case B43_FW_HDR_351:
 469                                 rts = (struct ieee80211_rts *)
 470                                         (txhdr->format_351.rts_frame);
 471                                 break;
 472                         case B43_FW_HDR_410:
 473                                 rts = (struct ieee80211_rts *)
 474                                         (txhdr->format_410.rts_frame);
 475                                 break;
 476                         }
 477                         ieee80211_rts_get(dev->wl->hw, info->control.vif,
 478                                           fragment_data, fragment_len,
 479                                           info, rts);
 480                         mac_ctl |= B43_TXH_MAC_SENDRTS;
 481                         len = sizeof(struct ieee80211_rts);
 482                 }
 483                 len += FCS_LEN;
 484
 485                 /* Generate the PLCP headers for the RTS/CTS frame */
 486                 switch (dev->fw.hdr_format) {
 487                 case B43_FW_HDR_598:
 488                         plcp = &txhdr->format_598.rts_plcp;
 489                         break;
 490                 case B43_FW_HDR_351:
 491                         plcp = &txhdr->format_351.rts_plcp;
 492                         break;
 493                 case B43_FW_HDR_410:
 494                         plcp = &txhdr->format_410.rts_plcp;
 495                         break;
 496                 }
 497                 b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)plcp,
 498                                       len, rts_rate);
 499                 plcp = &txhdr->rts_plcp_fb;
 500                 b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)plcp,
 501                                       len, rts_rate_fb);
 502
 503                 switch (dev->fw.hdr_format) {
 504                 case B43_FW_HDR_598:
 505                         hdr = (struct ieee80211_hdr *)
 506                                 (&txhdr->format_598.rts_frame);
 507                         break;
 508                 case B43_FW_HDR_351:
 509                         hdr = (struct ieee80211_hdr *)
 510                                 (&txhdr->format_351.rts_frame);
 511                         break;
 512                 case B43_FW_HDR_410:
 513                         hdr = (struct ieee80211_hdr *)
 514                                 (&txhdr->format_410.rts_frame);
 515                         break;
 516                 }
 517                 txhdr->rts_dur_fb = hdr->duration_id;
 518
 519                 if (rts_rate_ofdm) {
 520                         extra_ft |= B43_TXH_EFT_RTS_OFDM;
 521                         txhdr->phy_rate_rts =
 522                             b43_plcp_get_ratecode_ofdm(rts_rate);
 523                 } else {
 524                         extra_ft |= B43_TXH_EFT_RTS_CCK;
 525                         txhdr->phy_rate_rts =
 526                             b43_plcp_get_ratecode_cck(rts_rate);
 527                 }
 528                 if (rts_rate_fb_ofdm)
 529                         extra_ft |= B43_TXH_EFT_RTSFB_OFDM;
 530                 else
 531                         extra_ft |= B43_TXH_EFT_RTSFB_CCK;
 532
 533                 if (rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS &&
 534                     fill_phy_ctl1) {
 535                         txhdr->phy_ctl1_rts = cpu_to_le16(
 536                                 b43_generate_tx_phy_ctl1(dev, rts_rate));
 537                         txhdr->phy_ctl1_rts_fb = cpu_to_le16(
 538                                 b43_generate_tx_phy_ctl1(dev, rts_rate_fb));
 539                 }
 540         }
 541
 542         /* Magic cookie */
 543         switch (dev->fw.hdr_format) {
 544         case B43_FW_HDR_598:
 545                 txhdr->format_598.cookie = cpu_to_le16(cookie);
 546                 break;
 547         case B43_FW_HDR_351:
 548                 txhdr->format_351.cookie = cpu_to_le16(cookie);
 549                 break;
 550         case B43_FW_HDR_410:
 551                 txhdr->format_410.cookie = cpu_to_le16(cookie);
 552                 break;
 553         }
 554
 555         if (fill_phy_ctl1) {
 556                 txhdr->phy_ctl1 =
 557                         cpu_to_le16(b43_generate_tx_phy_ctl1(dev, rate));
 558                 txhdr->phy_ctl1_fb =
 559                         cpu_to_le16(b43_generate_tx_phy_ctl1(dev, rate_fb));
 560         }
 561
 562         /* Apply the bitfields */
 563         txhdr->mac_ctl = cpu_to_le32(mac_ctl);
 564         txhdr->phy_ctl = cpu_to_le16(phy_ctl);
 565         txhdr->extra_ft = extra_ft;
 566
 567         return 0;
 568 }
 569
 570 static s8 b43_rssi_postprocess(struct b43_wldev *dev,
 571                                u8 in_rssi, int ofdm,
 572                                int adjust_2053, int adjust_2050)
 573 {
 574         struct b43_phy *phy = &dev->phy;
 575         struct b43_phy_g *gphy = phy->g;
 576         s32 tmp;
 577
 578         switch (phy->radio_ver) {
 579         case 0x2050:
 580                 if (ofdm) {
 581                         tmp = in_rssi;
 582                         if (tmp > 127)
 583                                 tmp -= 256;
 584                         tmp *= 73;
 585                         tmp /= 64;
 586                         if (adjust_2050)
 587                                 tmp += 25;
 588                         else
 589                                 tmp -= 3;
 590                 } else {
 591                         if (dev->dev->bus_sprom->
 592                             boardflags_lo & B43_BFL_RSSI) {
 593                                 if (in_rssi > 63)
 594                                         in_rssi = 63;
 595                                 B43_WARN_ON(phy->type != B43_PHYTYPE_G);
 596                                 tmp = gphy->nrssi_lt[in_rssi];
 597                                 tmp = 31 - tmp;
 598                                 tmp *= -131;
 599                                 tmp /= 128;
 600                                 tmp -= 57;
 601                         } else {
 602                                 tmp = in_rssi;
 603                                 tmp = 31 - tmp;
 604                                 tmp *= -149;
 605                                 tmp /= 128;
 606                                 tmp -= 68;
 607                         }
 608                         if (phy->type == B43_PHYTYPE_G && adjust_2050)
 609                                 tmp += 25;
 610                 }
 611                 break;
 612         case 0x2060:
 613                 if (in_rssi > 127)
 614                         tmp = in_rssi - 256;
 615                 else
 616                         tmp = in_rssi;
 617                 break;
 618         default:
 619                 tmp = in_rssi;
 620                 tmp -= 11;
 621                 tmp *= 103;
 622                 tmp /= 64;
 623                 if (adjust_2053)
 624                         tmp -= 109;
 625                 else
 626                         tmp -= 83;
 627         }
 628
 629         return (s8) tmp;
 630 }
 631
 632 //TODO
 633 #if 0
 634 static s8 b43_rssinoise_postprocess(struct b43_wldev *dev, u8 in_rssi)
 635 {
 636         struct b43_phy *phy = &dev->phy;
 637         s8 ret;
 638
 639         ret = b43_rssi_postprocess(dev, in_rssi, 0, 1, 1);
 640
 641         return ret;
 642 }
 643 #endif
 644
 645 void b43_rx(struct b43_wldev *dev, struct sk_buff *skb, const void *_rxhdr)
 646 {
 647         struct ieee80211_rx_status status;
 648         struct b43_plcp_hdr6 *plcp;
 649         struct ieee80211_hdr *wlhdr;
 650         const struct b43_rxhdr_fw4 *rxhdr = _rxhdr;
 651         __le16 fctl;
 652         u16 phystat0, phystat3;
 653         u16 uninitialized_var(chanstat), uninitialized_var(mactime);
 654         u32 uninitialized_var(macstat);
 655         u16 chanid;
 656         int padding, rate_idx;
 657
 658         memset(&status, 0, sizeof(status));
 659
 660         /* Get metadata about the frame from the header. */
 661         phystat0 = le16_to_cpu(rxhdr->phy_status0);
 662         phystat3 = le16_to_cpu(rxhdr->phy_status3);
 663         switch (dev->fw.hdr_format) {
 664         case B43_FW_HDR_598:
 665                 macstat = le32_to_cpu(rxhdr->format_598.mac_status);
 666                 mactime = le16_to_cpu(rxhdr->format_598.mac_time);
 667                 chanstat = le16_to_cpu(rxhdr->format_598.channel);
 668                 break;
 669         case B43_FW_HDR_410:
 670         case B43_FW_HDR_351:
 671                 macstat = le32_to_cpu(rxhdr->format_351.mac_status);
 672                 mactime = le16_to_cpu(rxhdr->format_351.mac_time);
 673                 chanstat = le16_to_cpu(rxhdr->format_351.channel);
 674                 break;
 675         }
 676
 677         if (unlikely(macstat & B43_RX_MAC_FCSERR)) {
 678                 dev->wl->ieee_stats.dot11FCSErrorCount++;
 679                 status.flag |= RX_FLAG_FAILED_FCS_CRC;
 680         }
 681         if (unlikely(phystat0 & (B43_RX_PHYST0_PLCPHCF | B43_RX_PHYST0_PLCPFV)))
 682                 status.flag |= RX_FLAG_FAILED_PLCP_CRC;
 683         if (phystat0 & B43_RX_PHYST0_SHORTPRMBL)
 684                 status.enc_flags |= RX_ENC_FLAG_SHORTPRE;
 685         if (macstat & B43_RX_MAC_DECERR) {
 686                 /* Decryption with the given key failed.
 687                  * Drop the packet. We also won't be able to decrypt it with
 688                  * the key in software. */
 689                 goto drop;
 690         }
 691
 692         /* Skip PLCP and padding */
 693         padding = (macstat & B43_RX_MAC_PADDING) ? 2 : 0;
 694         if (unlikely(skb->len < (sizeof(struct b43_plcp_hdr6) + padding))) {
 695                 b43dbg(dev->wl, "RX: Packet size underrun (1)\n");
 696                 goto drop;
 697         }
 698         plcp = (struct b43_plcp_hdr6 *)(skb->data + padding);
 699         skb_pull(skb, sizeof(struct b43_plcp_hdr6) + padding);
 700         /* The skb contains the Wireless Header + payload data now */
 701         if (unlikely(skb->len < (2 + 2 + 6 /*minimum hdr */  + FCS_LEN))) {
 702                 b43dbg(dev->wl, "RX: Packet size underrun (2)\n");
 703                 goto drop;
 704         }
 705         wlhdr = (struct ieee80211_hdr *)(skb->data);
 706         fctl = wlhdr->frame_control;
 707
 708         if (macstat & B43_RX_MAC_DEC) {
 709                 unsigned int keyidx;
 710                 int wlhdr_len;
 711
 712                 keyidx = ((macstat & B43_RX_MAC_KEYIDX)
 713                           >> B43_RX_MAC_KEYIDX_SHIFT);
 714                 /* We must adjust the key index here. We want the "physical"
 715                  * key index, but the ucode passed it slightly different.
 716                  */
 717                 keyidx = b43_kidx_to_raw(dev, keyidx);
 718                 B43_WARN_ON(keyidx >= ARRAY_SIZE(dev->key));
 719
 720                 if (dev->key[keyidx].algorithm != B43_SEC_ALGO_NONE) {
 721                         wlhdr_len = ieee80211_hdrlen(fctl);
 722                         if (unlikely(skb->len < (wlhdr_len + 3))) {
 723                                 b43dbg(dev->wl,
 724                                        "RX: Packet size underrun (3)\n");
 725                                 goto drop;
 726                         }
 727                         status.flag |= RX_FLAG_DECRYPTED;
 728                 }
 729         }
 730
 731         /* Link quality statistics */
 732         switch (chanstat & B43_RX_CHAN_PHYTYPE) {
 733         case B43_PHYTYPE_HT:
 734                 /* TODO: is max the right choice? */
 735                 status.signal = max_t(__s8,
 736                         max(rxhdr->phy_ht_power0, rxhdr->phy_ht_power1),
 737                         rxhdr->phy_ht_power2);
 738                 break;
 739         case B43_PHYTYPE_N:
 740                 /* Broadcom has code for min and avg, but always uses max */
 741                 if (rxhdr->power0 == 16 || rxhdr->power0 == 32)
 742                         status.signal = max(rxhdr->power1, rxhdr->power2);
 743                 else
 744                         status.signal = max(rxhdr->power0, rxhdr->power1);
 745                 break;
 746         case B43_PHYTYPE_B:
 747         case B43_PHYTYPE_G:
 748         case B43_PHYTYPE_LP:
 749                 status.signal = b43_rssi_postprocess(dev, rxhdr->jssi,
 750                                                   (phystat0 & B43_RX_PHYST0_OFDM),
 751                                                   (phystat0 & B43_RX_PHYST0_GAINCTL),
 752                                                   (phystat3 & B43_RX_PHYST3_TRSTATE));
 753                 break;
 754         }
 755
 756         if (phystat0 & B43_RX_PHYST0_OFDM)
 757                 rate_idx = b43_plcp_get_bitrate_idx_ofdm(plcp,
 758                                         !!(chanstat & B43_RX_CHAN_5GHZ));
 759         else
 760                 rate_idx = b43_plcp_get_bitrate_idx_cck(plcp);
 761         if (unlikely(rate_idx == -1)) {
 762                 /* PLCP seems to be corrupted.
 763                  * Drop the frame, if we are not interested in corrupted frames. */
 764                 if (!(dev->wl->filter_flags & FIF_PLCPFAIL))
 765                         goto drop;
 766         }
 767         status.rate_idx = rate_idx;
 768         status.antenna = !!(phystat0 & B43_RX_PHYST0_ANT);
 769
 770         /*
 771          * All frames on monitor interfaces and beacons always need a full
 772          * 64-bit timestamp. Monitor interfaces need it for diagnostic
 773          * purposes and beacons for IBSS merging.
 774          * This code assumes we get to process the packet within 16 bits
 775          * of timestamp, i.e. about 65 milliseconds after the PHY received
 776          * the first symbol.
 777          */
 778         if (ieee80211_is_beacon(fctl) || dev->wl->radiotap_enabled) {
 779                 u16 low_mactime_now;
 780
 781                 b43_tsf_read(dev, &status.mactime);
 782                 low_mactime_now = status.mactime;
 783                 status.mactime = status.mactime & ~0xFFFFULL;
 784                 status.mactime += mactime;
 785                 if (low_mactime_now <= mactime)
 786                         status.mactime -= 0x10000;
 787                 status.flag |= RX_FLAG_MACTIME_START;
 788         }
 789
 790         chanid = (chanstat & B43_RX_CHAN_ID) >> B43_RX_CHAN_ID_SHIFT;
 791         switch (chanstat & B43_RX_CHAN_PHYTYPE) {
 792         case B43_PHYTYPE_G:
 793                 status.band = NL80211_BAND_2GHZ;
 794                 /* Somewhere between 478.104 and 508.1084 firmware for G-PHY
 795                  * has been modified to be compatible with N-PHY and others.
 796                  */
 797                 if (dev->fw.rev >= 508)
 798                         status.freq = ieee80211_channel_to_frequency(chanid, status.band);
 799                 else
 800                         status.freq = chanid + 2400;
 801                 break;
 802         case B43_PHYTYPE_N:
 803         case B43_PHYTYPE_LP:
 804         case B43_PHYTYPE_HT:
 805                 /* chanid is the SHM channel cookie. Which is the plain
 806                  * channel number in b43. */
 807                 if (chanstat & B43_RX_CHAN_5GHZ)
 808                         status.band = NL80211_BAND_5GHZ;
 809                 else
 810                         status.band = NL80211_BAND_2GHZ;
 811                 status.freq =
 812                         ieee80211_channel_to_frequency(chanid, status.band);
 813                 break;
 814         default:
 815                 B43_WARN_ON(1);
 816                 goto drop;
 817         }
 818
 819         memcpy(IEEE80211_SKB_RXCB(skb), &status, sizeof(status));
 820         ieee80211_rx_ni(dev->wl->hw, skb);
 821
 822 #if B43_DEBUG
 823         dev->rx_count++;
 824 #endif
 825         return;
 826 drop:
 827         dev_kfree_skb_any(skb);
 828 }
 829
 830 void b43_handle_txstatus(struct b43_wldev *dev,
 831                          const struct b43_txstatus *status)
 832 {
 833         b43_debugfs_log_txstat(dev, status);
 834
 835         if (status->intermediate)
 836                 return;
 837         if (status->for_ampdu)
 838                 return;
 839         if (!status->acked)
 840                 dev->wl->ieee_stats.dot11ACKFailureCount++;
 841         if (status->rts_count) {
 842                 if (status->rts_count == 0xF)   //FIXME
 843                         dev->wl->ieee_stats.dot11RTSFailureCount++;
 844                 else
 845                         dev->wl->ieee_stats.dot11RTSSuccessCount++;
 846         }
 847
 848         if (b43_using_pio_transfers(dev))
 849                 b43_pio_handle_txstatus(dev, status);
 850         else
 851                 b43_dma_handle_txstatus(dev, status);
 852
 853         b43_phy_txpower_check(dev, 0);
 854 }
 855
 856 /* Fill out the mac80211 TXstatus report based on the b43-specific
 857  * txstatus report data. This returns a boolean whether the frame was
 858  * successfully transmitted. */
 859 bool b43_fill_txstatus_report(struct b43_wldev *dev,
 860                               struct ieee80211_tx_info *report,
 861                               const struct b43_txstatus *status)
 862 {
 863         bool frame_success = true;
 864         int retry_limit;
 865
 866         /* preserve the confiured retry limit before clearing the status
 867          * The xmit function has overwritten the rc's value with the actual
 868          * retry limit done by the hardware */
 869         retry_limit = report->status.rates[0].count;
 870         ieee80211_tx_info_clear_status(report);
 871
 872         if (status->acked) {
 873                 /* The frame was ACKed. */
 874                 report->flags |= IEEE80211_TX_STAT_ACK;
 875         } else {
 876                 /* The frame was not ACKed... */
 877                 if (!(report->flags & IEEE80211_TX_CTL_NO_ACK)) {
 878                         /* ...but we expected an ACK. */
 879                         frame_success = false;
 880                 }
 881         }
 882         if (status->frame_count == 0) {
 883                 /* The frame was not transmitted at all. */
 884                 report->status.rates[0].count = 0;
 885         } else if (status->rts_count > dev->wl->hw->conf.short_frame_max_tx_count) {
 886                 /*
 887                  * If the short retries (RTS, not data frame) have exceeded
 888                  * the limit, the hw will not have tried the selected rate,
 889                  * but will have used the fallback rate instead.
 890                  * Don't let the rate control count attempts for the selected
 891                  * rate in this case, otherwise the statistics will be off.
 892                  */
 893                 report->status.rates[0].count = 0;
 894                 report->status.rates[1].count = status->frame_count;
 895         } else {
 896                 if (status->frame_count > retry_limit) {
 897                         report->status.rates[0].count = retry_limit;
 898                         report->status.rates[1].count = status->frame_count -
 899                                         retry_limit;
 900
 901                 } else {
 902                         report->status.rates[0].count = status->frame_count;
 903                         report->status.rates[1].idx = -1;
 904                 }
 905         }
 906
 907         return frame_success;
 908 }
 909
 910 /* Stop any TX operation on the device (suspend the hardware queues) */
 911 void b43_tx_suspend(struct b43_wldev *dev)
 912 {
 913         if (b43_using_pio_transfers(dev))
 914                 b43_pio_tx_suspend(dev);
 915         else
 916                 b43_dma_tx_suspend(dev);
 917 }
 918
 919 /* Resume any TX operation on the device (resume the hardware queues) */
 920 void b43_tx_resume(struct b43_wldev *dev)
 921 {
 922         if (b43_using_pio_transfers(dev))
 923                 b43_pio_tx_resume(dev);
 924         else
 925                 b43_dma_tx_resume(dev);
 926 }