2 * This file contains the handling of command.
3 * It prepares command and sends it to firmware when it is ready.
6 #include <net/iw_handler.h>
16 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv);
17 static void lbs_set_cmd_ctrl_node(struct lbs_private *priv,
18 struct cmd_ctrl_node *ptempnode,
23 * @brief Checks whether a command is allowed in Power Save mode
25 * @param command the command ID
26 * @return 1 if allowed, 0 if not allowed
28 static u8 is_command_allowed_in_ps(u16 cmd)
40 * @brief Updates the hardware details like MAC address and regulatory region
42 * @param priv A pointer to struct lbs_private structure
44 * @return 0 on success, error on failure
46 int lbs_update_hw_spec(struct lbs_private *priv)
48 struct cmd_ds_get_hw_spec cmd;
53 lbs_deb_enter(LBS_DEB_CMD);
55 memset(&cmd, 0, sizeof(cmd));
56 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
57 memcpy(cmd.permanentaddr, priv->current_addr, ETH_ALEN);
58 ret = lbs_cmd_with_response(priv, CMD_GET_HW_SPEC, &cmd);
62 priv->fwcapinfo = le32_to_cpu(cmd.fwcapinfo);
63 memcpy(priv->fwreleasenumber, cmd.fwreleasenumber, 4);
65 lbs_deb_cmd("GET_HW_SPEC: firmware release %u.%u.%up%u\n",
66 priv->fwreleasenumber[2], priv->fwreleasenumber[1],
67 priv->fwreleasenumber[0], priv->fwreleasenumber[3]);
68 lbs_deb_cmd("GET_HW_SPEC: MAC addr %s\n",
69 print_mac(mac, cmd.permanentaddr));
70 lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
71 cmd.hwifversion, cmd.version);
73 /* Clamp region code to 8-bit since FW spec indicates that it should
74 * only ever be 8-bit, even though the field size is 16-bit. Some firmware
75 * returns non-zero high 8 bits here.
77 priv->regioncode = le16_to_cpu(cmd.regioncode) & 0xFF;
79 for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
80 /* use the region code to search for the index */
81 if (priv->regioncode == lbs_region_code_to_index[i])
85 /* if it's unidentified region code, use the default (USA) */
86 if (i >= MRVDRV_MAX_REGION_CODE) {
87 priv->regioncode = 0x10;
88 lbs_pr_info("unidentified region code; using the default (USA)\n");
91 if (priv->current_addr[0] == 0xff)
92 memmove(priv->current_addr, cmd.permanentaddr, ETH_ALEN);
94 memcpy(priv->dev->dev_addr, priv->current_addr, ETH_ALEN);
96 memcpy(priv->mesh_dev->dev_addr, priv->current_addr, ETH_ALEN);
98 if (lbs_set_regiontable(priv, priv->regioncode, 0)) {
103 if (lbs_set_universaltable(priv, 0)) {
109 lbs_deb_leave(LBS_DEB_CMD);
113 int lbs_host_sleep_cfg(struct lbs_private *priv, uint32_t criteria)
115 struct cmd_ds_host_sleep cmd_config;
118 cmd_config.hdr.size = cpu_to_le16(sizeof(cmd_config));
119 cmd_config.criteria = cpu_to_le32(criteria);
120 cmd_config.gpio = priv->wol_gpio;
121 cmd_config.gap = priv->wol_gap;
123 ret = lbs_cmd_with_response(priv, CMD_802_11_HOST_SLEEP_CFG, &cmd_config);
125 lbs_deb_cmd("Set WOL criteria to %x\n", criteria);
126 priv->wol_criteria = criteria;
128 lbs_pr_info("HOST_SLEEP_CFG failed %d\n", ret);
133 EXPORT_SYMBOL_GPL(lbs_host_sleep_cfg);
135 static int lbs_cmd_802_11_ps_mode(struct lbs_private *priv,
136 struct cmd_ds_command *cmd,
139 struct cmd_ds_802_11_ps_mode *psm = &cmd->params.psmode;
141 lbs_deb_enter(LBS_DEB_CMD);
143 cmd->command = cpu_to_le16(CMD_802_11_PS_MODE);
144 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_ps_mode) +
146 psm->action = cpu_to_le16(cmd_action);
147 psm->multipledtim = 0;
148 switch (cmd_action) {
149 case CMD_SUBCMD_ENTER_PS:
150 lbs_deb_cmd("PS command:" "SubCode- Enter PS\n");
152 psm->locallisteninterval = 0;
153 psm->nullpktinterval = 0;
155 cpu_to_le16(MRVDRV_DEFAULT_MULTIPLE_DTIM);
158 case CMD_SUBCMD_EXIT_PS:
159 lbs_deb_cmd("PS command:" "SubCode- Exit PS\n");
162 case CMD_SUBCMD_SLEEP_CONFIRMED:
163 lbs_deb_cmd("PS command: SubCode- sleep confirm\n");
170 lbs_deb_leave(LBS_DEB_CMD);
174 int lbs_cmd_802_11_inactivity_timeout(struct lbs_private *priv,
175 uint16_t cmd_action, uint16_t *timeout)
177 struct cmd_ds_802_11_inactivity_timeout cmd;
180 lbs_deb_enter(LBS_DEB_CMD);
182 cmd.hdr.command = cpu_to_le16(CMD_802_11_INACTIVITY_TIMEOUT);
183 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
185 cmd.action = cpu_to_le16(cmd_action);
187 if (cmd_action == CMD_ACT_SET)
188 cmd.timeout = cpu_to_le16(*timeout);
192 ret = lbs_cmd_with_response(priv, CMD_802_11_INACTIVITY_TIMEOUT, &cmd);
195 *timeout = le16_to_cpu(cmd.timeout);
197 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
201 int lbs_cmd_802_11_sleep_params(struct lbs_private *priv, uint16_t cmd_action,
202 struct sleep_params *sp)
204 struct cmd_ds_802_11_sleep_params cmd;
207 lbs_deb_enter(LBS_DEB_CMD);
209 if (cmd_action == CMD_ACT_GET) {
210 memset(&cmd, 0, sizeof(cmd));
212 cmd.error = cpu_to_le16(sp->sp_error);
213 cmd.offset = cpu_to_le16(sp->sp_offset);
214 cmd.stabletime = cpu_to_le16(sp->sp_stabletime);
215 cmd.calcontrol = sp->sp_calcontrol;
216 cmd.externalsleepclk = sp->sp_extsleepclk;
217 cmd.reserved = cpu_to_le16(sp->sp_reserved);
219 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
220 cmd.action = cpu_to_le16(cmd_action);
222 ret = lbs_cmd_with_response(priv, CMD_802_11_SLEEP_PARAMS, &cmd);
225 lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, "
226 "calcontrol 0x%x extsleepclk 0x%x\n",
227 le16_to_cpu(cmd.error), le16_to_cpu(cmd.offset),
228 le16_to_cpu(cmd.stabletime), cmd.calcontrol,
229 cmd.externalsleepclk);
231 sp->sp_error = le16_to_cpu(cmd.error);
232 sp->sp_offset = le16_to_cpu(cmd.offset);
233 sp->sp_stabletime = le16_to_cpu(cmd.stabletime);
234 sp->sp_calcontrol = cmd.calcontrol;
235 sp->sp_extsleepclk = cmd.externalsleepclk;
236 sp->sp_reserved = le16_to_cpu(cmd.reserved);
239 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
243 int lbs_cmd_802_11_set_wep(struct lbs_private *priv, uint16_t cmd_action,
244 struct assoc_request *assoc)
246 struct cmd_ds_802_11_set_wep cmd;
249 lbs_deb_enter(LBS_DEB_CMD);
251 cmd.hdr.command = cpu_to_le16(CMD_802_11_SET_WEP);
252 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
254 cmd.action = cpu_to_le16(cmd_action);
256 if (cmd_action == CMD_ACT_ADD) {
259 /* default tx key index */
260 cmd.keyindex = cpu_to_le16(assoc->wep_tx_keyidx &
261 CMD_WEP_KEY_INDEX_MASK);
263 /* Copy key types and material to host command structure */
264 for (i = 0; i < 4; i++) {
265 struct enc_key *pkey = &assoc->wep_keys[i];
269 cmd.keytype[i] = CMD_TYPE_WEP_40_BIT;
270 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
271 lbs_deb_cmd("SET_WEP: add key %d (40 bit)\n", i);
273 case KEY_LEN_WEP_104:
274 cmd.keytype[i] = CMD_TYPE_WEP_104_BIT;
275 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
276 lbs_deb_cmd("SET_WEP: add key %d (104 bit)\n", i);
281 lbs_deb_cmd("SET_WEP: invalid key %d, length %d\n",
288 } else if (cmd_action == CMD_ACT_REMOVE) {
289 /* ACT_REMOVE clears _all_ WEP keys */
291 /* default tx key index */
292 cmd.keyindex = cpu_to_le16(priv->wep_tx_keyidx &
293 CMD_WEP_KEY_INDEX_MASK);
294 lbs_deb_cmd("SET_WEP: remove key %d\n", priv->wep_tx_keyidx);
297 ret = lbs_cmd_with_response(priv, CMD_802_11_SET_WEP, &cmd);
299 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
303 int lbs_cmd_802_11_enable_rsn(struct lbs_private *priv, uint16_t cmd_action,
306 struct cmd_ds_802_11_enable_rsn cmd;
309 lbs_deb_enter(LBS_DEB_CMD);
311 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
312 cmd.action = cpu_to_le16(cmd_action);
314 if (cmd_action == CMD_ACT_SET) {
316 cmd.enable = cpu_to_le16(CMD_ENABLE_RSN);
318 cmd.enable = cpu_to_le16(CMD_DISABLE_RSN);
319 lbs_deb_cmd("ENABLE_RSN: %d\n", *enable);
322 ret = lbs_cmd_with_response(priv, CMD_802_11_ENABLE_RSN, &cmd);
323 if (!ret && cmd_action == CMD_ACT_GET)
324 *enable = le16_to_cpu(cmd.enable);
326 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
330 static void set_one_wpa_key(struct MrvlIEtype_keyParamSet * pkeyparamset,
331 struct enc_key * pkey)
333 lbs_deb_enter(LBS_DEB_CMD);
335 if (pkey->flags & KEY_INFO_WPA_ENABLED) {
336 pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_ENABLED);
338 if (pkey->flags & KEY_INFO_WPA_UNICAST) {
339 pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_UNICAST);
341 if (pkey->flags & KEY_INFO_WPA_MCAST) {
342 pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_MCAST);
345 pkeyparamset->type = cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
346 pkeyparamset->keytypeid = cpu_to_le16(pkey->type);
347 pkeyparamset->keylen = cpu_to_le16(pkey->len);
348 memcpy(pkeyparamset->key, pkey->key, pkey->len);
349 pkeyparamset->length = cpu_to_le16( sizeof(pkeyparamset->keytypeid)
350 + sizeof(pkeyparamset->keyinfo)
351 + sizeof(pkeyparamset->keylen)
352 + sizeof(pkeyparamset->key));
353 lbs_deb_leave(LBS_DEB_CMD);
356 static int lbs_cmd_802_11_key_material(struct lbs_private *priv,
357 struct cmd_ds_command *cmd,
359 u32 cmd_oid, void *pdata_buf)
361 struct cmd_ds_802_11_key_material *pkeymaterial =
362 &cmd->params.keymaterial;
363 struct assoc_request * assoc_req = pdata_buf;
367 lbs_deb_enter(LBS_DEB_CMD);
369 cmd->command = cpu_to_le16(CMD_802_11_KEY_MATERIAL);
370 pkeymaterial->action = cpu_to_le16(cmd_action);
372 if (cmd_action == CMD_ACT_GET) {
373 cmd->size = cpu_to_le16(S_DS_GEN + sizeof (pkeymaterial->action));
378 memset(&pkeymaterial->keyParamSet, 0, sizeof(pkeymaterial->keyParamSet));
380 if (test_bit(ASSOC_FLAG_WPA_UCAST_KEY, &assoc_req->flags)) {
381 set_one_wpa_key(&pkeymaterial->keyParamSet[index],
382 &assoc_req->wpa_unicast_key);
386 if (test_bit(ASSOC_FLAG_WPA_MCAST_KEY, &assoc_req->flags)) {
387 set_one_wpa_key(&pkeymaterial->keyParamSet[index],
388 &assoc_req->wpa_mcast_key);
392 cmd->size = cpu_to_le16( S_DS_GEN
393 + sizeof (pkeymaterial->action)
394 + (index * sizeof(struct MrvlIEtype_keyParamSet)));
399 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
403 static int lbs_cmd_802_11_reset(struct lbs_private *priv,
404 struct cmd_ds_command *cmd, int cmd_action)
406 struct cmd_ds_802_11_reset *reset = &cmd->params.reset;
408 lbs_deb_enter(LBS_DEB_CMD);
410 cmd->command = cpu_to_le16(CMD_802_11_RESET);
411 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_reset) + S_DS_GEN);
412 reset->action = cpu_to_le16(cmd_action);
414 lbs_deb_leave(LBS_DEB_CMD);
418 static int lbs_cmd_802_11_get_log(struct lbs_private *priv,
419 struct cmd_ds_command *cmd)
421 lbs_deb_enter(LBS_DEB_CMD);
422 cmd->command = cpu_to_le16(CMD_802_11_GET_LOG);
424 cpu_to_le16(sizeof(struct cmd_ds_802_11_get_log) + S_DS_GEN);
426 lbs_deb_leave(LBS_DEB_CMD);
430 static int lbs_cmd_802_11_get_stat(struct lbs_private *priv,
431 struct cmd_ds_command *cmd)
433 lbs_deb_enter(LBS_DEB_CMD);
434 cmd->command = cpu_to_le16(CMD_802_11_GET_STAT);
436 cpu_to_le16(sizeof(struct cmd_ds_802_11_get_stat) + S_DS_GEN);
438 lbs_deb_leave(LBS_DEB_CMD);
442 static int lbs_cmd_802_11_snmp_mib(struct lbs_private *priv,
443 struct cmd_ds_command *cmd,
445 int cmd_oid, void *pdata_buf)
447 struct cmd_ds_802_11_snmp_mib *pSNMPMIB = &cmd->params.smib;
450 lbs_deb_enter(LBS_DEB_CMD);
452 lbs_deb_cmd("SNMP_CMD: cmd_oid = 0x%x\n", cmd_oid);
454 cmd->command = cpu_to_le16(CMD_802_11_SNMP_MIB);
455 cmd->size = cpu_to_le16(sizeof(*pSNMPMIB) + S_DS_GEN);
458 case OID_802_11_INFRASTRUCTURE_MODE:
460 u8 mode = (u8) (size_t) pdata_buf;
461 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
462 pSNMPMIB->oid = cpu_to_le16((u16) DESIRED_BSSTYPE_I);
463 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u8));
464 if (mode == IW_MODE_ADHOC) {
465 ucTemp = SNMP_MIB_VALUE_ADHOC;
467 /* Infra and Auto modes */
468 ucTemp = SNMP_MIB_VALUE_INFRA;
471 memmove(pSNMPMIB->value, &ucTemp, sizeof(u8));
476 case OID_802_11D_ENABLE:
480 pSNMPMIB->oid = cpu_to_le16((u16) DOT11D_I);
482 if (cmd_action == CMD_ACT_SET) {
483 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
484 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
485 ulTemp = *(u32 *)pdata_buf;
486 *((__le16 *)(pSNMPMIB->value)) =
487 cpu_to_le16((u16) ulTemp);
492 case OID_802_11_FRAGMENTATION_THRESHOLD:
496 pSNMPMIB->oid = cpu_to_le16((u16) FRAGTHRESH_I);
498 if (cmd_action == CMD_ACT_GET) {
499 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
500 } else if (cmd_action == CMD_ACT_SET) {
501 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
502 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
503 ulTemp = *((u32 *) pdata_buf);
504 *((__le16 *)(pSNMPMIB->value)) =
505 cpu_to_le16((u16) ulTemp);
512 case OID_802_11_RTS_THRESHOLD:
516 pSNMPMIB->oid = cpu_to_le16(RTSTHRESH_I);
518 if (cmd_action == CMD_ACT_GET) {
519 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
520 } else if (cmd_action == CMD_ACT_SET) {
521 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
522 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
523 ulTemp = *((u32 *)pdata_buf);
524 *(__le16 *)(pSNMPMIB->value) =
525 cpu_to_le16((u16) ulTemp);
530 case OID_802_11_TX_RETRYCOUNT:
531 pSNMPMIB->oid = cpu_to_le16((u16) SHORT_RETRYLIM_I);
533 if (cmd_action == CMD_ACT_GET) {
534 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
535 } else if (cmd_action == CMD_ACT_SET) {
536 pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
537 pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
538 *((__le16 *)(pSNMPMIB->value)) =
539 cpu_to_le16((u16) priv->txretrycount);
548 "SNMP_CMD: command=0x%x, size=0x%x, seqnum=0x%x, result=0x%x\n",
549 le16_to_cpu(cmd->command), le16_to_cpu(cmd->size),
550 le16_to_cpu(cmd->seqnum), le16_to_cpu(cmd->result));
553 "SNMP_CMD: action 0x%x, oid 0x%x, oidsize 0x%x, value 0x%x\n",
554 le16_to_cpu(pSNMPMIB->querytype), le16_to_cpu(pSNMPMIB->oid),
555 le16_to_cpu(pSNMPMIB->bufsize),
556 le16_to_cpu(*(__le16 *) pSNMPMIB->value));
558 lbs_deb_leave(LBS_DEB_CMD);
562 static int lbs_cmd_802_11_rf_tx_power(struct lbs_private *priv,
563 struct cmd_ds_command *cmd,
564 u16 cmd_action, void *pdata_buf)
567 struct cmd_ds_802_11_rf_tx_power *prtp = &cmd->params.txp;
569 lbs_deb_enter(LBS_DEB_CMD);
572 cpu_to_le16((sizeof(struct cmd_ds_802_11_rf_tx_power)) + S_DS_GEN);
573 cmd->command = cpu_to_le16(CMD_802_11_RF_TX_POWER);
574 prtp->action = cpu_to_le16(cmd_action);
576 lbs_deb_cmd("RF_TX_POWER_CMD: size:%d cmd:0x%x Act:%d\n",
577 le16_to_cpu(cmd->size), le16_to_cpu(cmd->command),
578 le16_to_cpu(prtp->action));
580 switch (cmd_action) {
581 case CMD_ACT_TX_POWER_OPT_GET:
582 prtp->action = cpu_to_le16(CMD_ACT_GET);
583 prtp->currentlevel = 0;
586 case CMD_ACT_TX_POWER_OPT_SET_HIGH:
587 prtp->action = cpu_to_le16(CMD_ACT_SET);
588 prtp->currentlevel = cpu_to_le16(CMD_ACT_TX_POWER_INDEX_HIGH);
591 case CMD_ACT_TX_POWER_OPT_SET_MID:
592 prtp->action = cpu_to_le16(CMD_ACT_SET);
593 prtp->currentlevel = cpu_to_le16(CMD_ACT_TX_POWER_INDEX_MID);
596 case CMD_ACT_TX_POWER_OPT_SET_LOW:
597 prtp->action = cpu_to_le16(CMD_ACT_SET);
598 prtp->currentlevel = cpu_to_le16(*((u16 *) pdata_buf));
602 lbs_deb_leave(LBS_DEB_CMD);
606 static int lbs_cmd_802_11_monitor_mode(struct lbs_private *priv,
607 struct cmd_ds_command *cmd,
608 u16 cmd_action, void *pdata_buf)
610 struct cmd_ds_802_11_monitor_mode *monitor = &cmd->params.monitor;
612 cmd->command = cpu_to_le16(CMD_802_11_MONITOR_MODE);
614 cpu_to_le16(sizeof(struct cmd_ds_802_11_monitor_mode) +
617 monitor->action = cpu_to_le16(cmd_action);
618 if (cmd_action == CMD_ACT_SET) {
620 cpu_to_le16((u16) (*(u32 *) pdata_buf));
626 static int lbs_cmd_802_11_rate_adapt_rateset(struct lbs_private *priv,
627 struct cmd_ds_command *cmd,
630 struct cmd_ds_802_11_rate_adapt_rateset
631 *rateadapt = &cmd->params.rateset;
633 lbs_deb_enter(LBS_DEB_CMD);
635 cpu_to_le16(sizeof(struct cmd_ds_802_11_rate_adapt_rateset)
637 cmd->command = cpu_to_le16(CMD_802_11_RATE_ADAPT_RATESET);
639 rateadapt->action = cpu_to_le16(cmd_action);
640 rateadapt->enablehwauto = cpu_to_le16(priv->enablehwauto);
641 rateadapt->bitmap = cpu_to_le16(priv->ratebitmap);
643 lbs_deb_leave(LBS_DEB_CMD);
648 * @brief Get the current data rate
650 * @param priv A pointer to struct lbs_private structure
652 * @return The data rate on success, error on failure
654 int lbs_get_data_rate(struct lbs_private *priv)
656 struct cmd_ds_802_11_data_rate cmd;
659 lbs_deb_enter(LBS_DEB_CMD);
661 memset(&cmd, 0, sizeof(cmd));
662 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
663 cmd.action = cpu_to_le16(CMD_ACT_GET_TX_RATE);
665 ret = lbs_cmd_with_response(priv, CMD_802_11_DATA_RATE, &cmd);
669 lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) &cmd, sizeof (cmd));
671 ret = (int) lbs_fw_index_to_data_rate(cmd.rates[0]);
672 lbs_deb_cmd("DATA_RATE: current rate 0x%02x\n", ret);
675 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
680 * @brief Set the data rate
682 * @param priv A pointer to struct lbs_private structure
683 * @param rate The desired data rate, or 0 to clear a locked rate
685 * @return 0 on success, error on failure
687 int lbs_set_data_rate(struct lbs_private *priv, u8 rate)
689 struct cmd_ds_802_11_data_rate cmd;
692 lbs_deb_enter(LBS_DEB_CMD);
694 memset(&cmd, 0, sizeof(cmd));
695 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
698 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_FIX_RATE);
699 cmd.rates[0] = lbs_data_rate_to_fw_index(rate);
700 if (cmd.rates[0] == 0) {
701 lbs_deb_cmd("DATA_RATE: invalid requested rate of"
706 lbs_deb_cmd("DATA_RATE: set fixed 0x%02X\n", cmd.rates[0]);
708 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_AUTO);
709 lbs_deb_cmd("DATA_RATE: setting auto\n");
712 ret = lbs_cmd_with_response(priv, CMD_802_11_DATA_RATE, &cmd);
716 lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) &cmd, sizeof (cmd));
718 /* FIXME: get actual rates FW can do if this command actually returns
719 * all data rates supported.
721 priv->cur_rate = lbs_fw_index_to_data_rate(cmd.rates[0]);
722 lbs_deb_cmd("DATA_RATE: current rate is 0x%02x\n", priv->cur_rate);
725 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
729 static int lbs_cmd_mac_multicast_adr(struct lbs_private *priv,
730 struct cmd_ds_command *cmd,
733 struct cmd_ds_mac_multicast_adr *pMCastAdr = &cmd->params.madr;
735 lbs_deb_enter(LBS_DEB_CMD);
736 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_mac_multicast_adr) +
738 cmd->command = cpu_to_le16(CMD_MAC_MULTICAST_ADR);
740 lbs_deb_cmd("MULTICAST_ADR: setting %d addresses\n", pMCastAdr->nr_of_adrs);
741 pMCastAdr->action = cpu_to_le16(cmd_action);
742 pMCastAdr->nr_of_adrs =
743 cpu_to_le16((u16) priv->nr_of_multicastmacaddr);
744 memcpy(pMCastAdr->maclist, priv->multicastlist,
745 priv->nr_of_multicastmacaddr * ETH_ALEN);
747 lbs_deb_leave(LBS_DEB_CMD);
752 * @brief Get the radio channel
754 * @param priv A pointer to struct lbs_private structure
756 * @return The channel on success, error on failure
758 int lbs_get_channel(struct lbs_private *priv)
760 struct cmd_ds_802_11_rf_channel cmd;
763 lbs_deb_enter(LBS_DEB_CMD);
765 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
766 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_GET);
768 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
772 ret = le16_to_cpu(cmd.channel);
773 lbs_deb_cmd("current radio channel is %d\n", ret);
776 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
781 * @brief Set the radio channel
783 * @param priv A pointer to struct lbs_private structure
784 * @param channel The desired channel, or 0 to clear a locked channel
786 * @return 0 on success, error on failure
788 int lbs_set_channel(struct lbs_private *priv, u8 channel)
790 struct cmd_ds_802_11_rf_channel cmd;
791 u8 old_channel = priv->curbssparams.channel;
794 lbs_deb_enter(LBS_DEB_CMD);
796 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
797 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_SET);
798 cmd.channel = cpu_to_le16(channel);
800 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
804 priv->curbssparams.channel = (uint8_t) le16_to_cpu(cmd.channel);
805 lbs_deb_cmd("channel switch from %d to %d\n", old_channel,
806 priv->curbssparams.channel);
809 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
813 static int lbs_cmd_802_11_rssi(struct lbs_private *priv,
814 struct cmd_ds_command *cmd)
817 lbs_deb_enter(LBS_DEB_CMD);
818 cmd->command = cpu_to_le16(CMD_802_11_RSSI);
819 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_rssi) + S_DS_GEN);
820 cmd->params.rssi.N = cpu_to_le16(DEFAULT_BCN_AVG_FACTOR);
822 /* reset Beacon SNR/NF/RSSI values */
823 priv->SNR[TYPE_BEACON][TYPE_NOAVG] = 0;
824 priv->SNR[TYPE_BEACON][TYPE_AVG] = 0;
825 priv->NF[TYPE_BEACON][TYPE_NOAVG] = 0;
826 priv->NF[TYPE_BEACON][TYPE_AVG] = 0;
827 priv->RSSI[TYPE_BEACON][TYPE_NOAVG] = 0;
828 priv->RSSI[TYPE_BEACON][TYPE_AVG] = 0;
830 lbs_deb_leave(LBS_DEB_CMD);
834 static int lbs_cmd_reg_access(struct lbs_private *priv,
835 struct cmd_ds_command *cmdptr,
836 u8 cmd_action, void *pdata_buf)
838 struct lbs_offset_value *offval;
840 lbs_deb_enter(LBS_DEB_CMD);
842 offval = (struct lbs_offset_value *)pdata_buf;
844 switch (le16_to_cpu(cmdptr->command)) {
845 case CMD_MAC_REG_ACCESS:
847 struct cmd_ds_mac_reg_access *macreg;
850 cpu_to_le16(sizeof (struct cmd_ds_mac_reg_access)
853 (struct cmd_ds_mac_reg_access *)&cmdptr->params.
856 macreg->action = cpu_to_le16(cmd_action);
857 macreg->offset = cpu_to_le16((u16) offval->offset);
858 macreg->value = cpu_to_le32(offval->value);
863 case CMD_BBP_REG_ACCESS:
865 struct cmd_ds_bbp_reg_access *bbpreg;
869 (struct cmd_ds_bbp_reg_access)
872 (struct cmd_ds_bbp_reg_access *)&cmdptr->params.
875 bbpreg->action = cpu_to_le16(cmd_action);
876 bbpreg->offset = cpu_to_le16((u16) offval->offset);
877 bbpreg->value = (u8) offval->value;
882 case CMD_RF_REG_ACCESS:
884 struct cmd_ds_rf_reg_access *rfreg;
888 (struct cmd_ds_rf_reg_access) +
891 (struct cmd_ds_rf_reg_access *)&cmdptr->params.
894 rfreg->action = cpu_to_le16(cmd_action);
895 rfreg->offset = cpu_to_le16((u16) offval->offset);
896 rfreg->value = (u8) offval->value;
905 lbs_deb_leave(LBS_DEB_CMD);
909 static int lbs_cmd_802_11_mac_address(struct lbs_private *priv,
910 struct cmd_ds_command *cmd,
914 lbs_deb_enter(LBS_DEB_CMD);
915 cmd->command = cpu_to_le16(CMD_802_11_MAC_ADDRESS);
916 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_mac_address) +
920 cmd->params.macadd.action = cpu_to_le16(cmd_action);
922 if (cmd_action == CMD_ACT_SET) {
923 memcpy(cmd->params.macadd.macadd,
924 priv->current_addr, ETH_ALEN);
925 lbs_deb_hex(LBS_DEB_CMD, "SET_CMD: MAC addr", priv->current_addr, 6);
928 lbs_deb_leave(LBS_DEB_CMD);
932 static int lbs_cmd_802_11_eeprom_access(struct lbs_private *priv,
933 struct cmd_ds_command *cmd,
934 int cmd_action, void *pdata_buf)
936 struct lbs_ioctl_regrdwr *ea = pdata_buf;
938 lbs_deb_enter(LBS_DEB_CMD);
940 cmd->command = cpu_to_le16(CMD_802_11_EEPROM_ACCESS);
941 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_eeprom_access) +
945 cmd->params.rdeeprom.action = cpu_to_le16(ea->action);
946 cmd->params.rdeeprom.offset = cpu_to_le16(ea->offset);
947 cmd->params.rdeeprom.bytecount = cpu_to_le16(ea->NOB);
948 cmd->params.rdeeprom.value = 0;
950 lbs_deb_leave(LBS_DEB_CMD);
954 static int lbs_cmd_bt_access(struct lbs_private *priv,
955 struct cmd_ds_command *cmd,
956 u16 cmd_action, void *pdata_buf)
958 struct cmd_ds_bt_access *bt_access = &cmd->params.bt;
959 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
961 cmd->command = cpu_to_le16(CMD_BT_ACCESS);
962 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_bt_access) + S_DS_GEN);
964 bt_access->action = cpu_to_le16(cmd_action);
966 switch (cmd_action) {
967 case CMD_ACT_BT_ACCESS_ADD:
968 memcpy(bt_access->addr1, pdata_buf, 2 * ETH_ALEN);
969 lbs_deb_hex(LBS_DEB_MESH, "BT_ADD: blinded MAC addr", bt_access->addr1, 6);
971 case CMD_ACT_BT_ACCESS_DEL:
972 memcpy(bt_access->addr1, pdata_buf, 1 * ETH_ALEN);
973 lbs_deb_hex(LBS_DEB_MESH, "BT_DEL: blinded MAC addr", bt_access->addr1, 6);
975 case CMD_ACT_BT_ACCESS_LIST:
976 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
978 case CMD_ACT_BT_ACCESS_RESET:
980 case CMD_ACT_BT_ACCESS_SET_INVERT:
981 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
983 case CMD_ACT_BT_ACCESS_GET_INVERT:
988 lbs_deb_leave(LBS_DEB_CMD);
992 static int lbs_cmd_fwt_access(struct lbs_private *priv,
993 struct cmd_ds_command *cmd,
994 u16 cmd_action, void *pdata_buf)
996 struct cmd_ds_fwt_access *fwt_access = &cmd->params.fwt;
997 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
999 cmd->command = cpu_to_le16(CMD_FWT_ACCESS);
1000 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_fwt_access) + S_DS_GEN);
1004 memcpy(fwt_access, pdata_buf, sizeof(*fwt_access));
1006 memset(fwt_access, 0, sizeof(*fwt_access));
1008 fwt_access->action = cpu_to_le16(cmd_action);
1010 lbs_deb_leave(LBS_DEB_CMD);
1014 int lbs_mesh_access(struct lbs_private *priv, uint16_t cmd_action,
1015 struct cmd_ds_mesh_access *cmd)
1019 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1021 cmd->hdr.command = cpu_to_le16(CMD_MESH_ACCESS);
1022 cmd->hdr.size = cpu_to_le16(sizeof(*cmd));
1023 cmd->hdr.result = 0;
1025 cmd->action = cpu_to_le16(cmd_action);
1027 ret = lbs_cmd_with_response(priv, CMD_MESH_ACCESS, cmd);
1029 lbs_deb_leave(LBS_DEB_CMD);
1032 EXPORT_SYMBOL_GPL(lbs_mesh_access);
1034 int lbs_mesh_config(struct lbs_private *priv, uint16_t enable, uint16_t chan)
1036 struct cmd_ds_mesh_config cmd;
1038 memset(&cmd, 0, sizeof(cmd));
1039 cmd.action = cpu_to_le16(enable);
1040 cmd.channel = cpu_to_le16(chan);
1041 cmd.type = cpu_to_le16(priv->mesh_tlv);
1042 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1045 cmd.length = cpu_to_le16(priv->mesh_ssid_len);
1046 memcpy(cmd.data, priv->mesh_ssid, priv->mesh_ssid_len);
1048 lbs_deb_cmd("mesh config enable %d TLV %x channel %d SSID %s\n",
1049 enable, priv->mesh_tlv, chan,
1050 escape_essid(priv->mesh_ssid, priv->mesh_ssid_len));
1051 return lbs_cmd_with_response(priv, CMD_MESH_CONFIG, &cmd);
1054 static int lbs_cmd_bcn_ctrl(struct lbs_private * priv,
1055 struct cmd_ds_command *cmd,
1058 struct cmd_ds_802_11_beacon_control
1059 *bcn_ctrl = &cmd->params.bcn_ctrl;
1061 lbs_deb_enter(LBS_DEB_CMD);
1063 cpu_to_le16(sizeof(struct cmd_ds_802_11_beacon_control)
1065 cmd->command = cpu_to_le16(CMD_802_11_BEACON_CTRL);
1067 bcn_ctrl->action = cpu_to_le16(cmd_action);
1068 bcn_ctrl->beacon_enable = cpu_to_le16(priv->beacon_enable);
1069 bcn_ctrl->beacon_period = cpu_to_le16(priv->beacon_period);
1071 lbs_deb_leave(LBS_DEB_CMD);
1075 static void lbs_queue_cmd(struct lbs_private *priv,
1076 struct cmd_ctrl_node *cmdnode)
1078 unsigned long flags;
1081 lbs_deb_enter(LBS_DEB_HOST);
1084 lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
1087 if (!cmdnode->cmdbuf->size) {
1088 lbs_deb_host("DNLD_CMD: cmd size is zero\n");
1091 cmdnode->result = 0;
1093 /* Exit_PS command needs to be queued in the header always. */
1094 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_PS_MODE) {
1095 struct cmd_ds_802_11_ps_mode *psm = (void *) &cmdnode->cmdbuf[1];
1097 if (psm->action == cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1098 if (priv->psstate != PS_STATE_FULL_POWER)
1103 spin_lock_irqsave(&priv->driver_lock, flags);
1106 list_add_tail(&cmdnode->list, &priv->cmdpendingq);
1108 list_add(&cmdnode->list, &priv->cmdpendingq);
1110 spin_unlock_irqrestore(&priv->driver_lock, flags);
1112 lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
1113 le16_to_cpu(cmdnode->cmdbuf->command));
1116 lbs_deb_leave(LBS_DEB_HOST);
1119 static void lbs_submit_command(struct lbs_private *priv,
1120 struct cmd_ctrl_node *cmdnode)
1122 unsigned long flags;
1123 struct cmd_header *cmd;
1129 lbs_deb_enter(LBS_DEB_HOST);
1131 cmd = cmdnode->cmdbuf;
1133 spin_lock_irqsave(&priv->driver_lock, flags);
1134 priv->cur_cmd = cmdnode;
1135 priv->cur_cmd_retcode = 0;
1136 spin_unlock_irqrestore(&priv->driver_lock, flags);
1138 cmdsize = le16_to_cpu(cmd->size);
1139 command = le16_to_cpu(cmd->command);
1141 /* These commands take longer */
1142 if (command == CMD_802_11_SCAN || command == CMD_802_11_ASSOCIATE ||
1143 command == CMD_802_11_AUTHENTICATE)
1146 lbs_deb_host("DNLD_CMD: command 0x%04x, seq %d, size %d, jiffies %lu\n",
1147 command, le16_to_cpu(cmd->seqnum), cmdsize, jiffies);
1148 lbs_deb_hex(LBS_DEB_HOST, "DNLD_CMD", (void *) cmdnode->cmdbuf, cmdsize);
1150 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmd, cmdsize);
1153 lbs_pr_info("DNLD_CMD: hw_host_to_card failed: %d\n", ret);
1154 /* Let the timer kick in and retry, and potentially reset
1155 the whole thing if the condition persists */
1158 lbs_deb_cmd("DNLD_CMD: sent command 0x%04x, jiffies %lu\n",
1161 /* Setup the timer after transmit command */
1162 mod_timer(&priv->command_timer, jiffies + timeo);
1164 lbs_deb_leave(LBS_DEB_HOST);
1167 static int lbs_cmd_mac_control(struct lbs_private *priv,
1168 struct cmd_ds_command *cmd)
1170 struct cmd_ds_mac_control *mac = &cmd->params.macctrl;
1172 lbs_deb_enter(LBS_DEB_CMD);
1174 cmd->command = cpu_to_le16(CMD_MAC_CONTROL);
1175 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_mac_control) + S_DS_GEN);
1176 mac->action = cpu_to_le16(priv->currentpacketfilter);
1178 lbs_deb_cmd("MAC_CONTROL: action 0x%x, size %d\n",
1179 le16_to_cpu(mac->action), le16_to_cpu(cmd->size));
1181 lbs_deb_leave(LBS_DEB_CMD);
1186 * This function inserts command node to cmdfreeq
1187 * after cleans it. Requires priv->driver_lock held.
1189 static void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1190 struct cmd_ctrl_node *cmdnode)
1192 lbs_deb_enter(LBS_DEB_HOST);
1197 cmdnode->callback = NULL;
1198 cmdnode->callback_arg = 0;
1200 memset(cmdnode->cmdbuf, 0, LBS_CMD_BUFFER_SIZE);
1202 list_add_tail(&cmdnode->list, &priv->cmdfreeq);
1204 lbs_deb_leave(LBS_DEB_HOST);
1207 static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1208 struct cmd_ctrl_node *ptempcmd)
1210 unsigned long flags;
1212 spin_lock_irqsave(&priv->driver_lock, flags);
1213 __lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1214 spin_unlock_irqrestore(&priv->driver_lock, flags);
1217 void lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1220 if (cmd == priv->cur_cmd)
1221 priv->cur_cmd_retcode = result;
1223 cmd->result = result;
1224 cmd->cmdwaitqwoken = 1;
1225 wake_up_interruptible(&cmd->cmdwait_q);
1228 __lbs_cleanup_and_insert_cmd(priv, cmd);
1229 priv->cur_cmd = NULL;
1232 int lbs_set_radio_control(struct lbs_private *priv)
1235 struct cmd_ds_802_11_radio_control cmd;
1237 lbs_deb_enter(LBS_DEB_CMD);
1239 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1240 cmd.action = cpu_to_le16(CMD_ACT_SET);
1242 switch (priv->preamble) {
1243 case CMD_TYPE_SHORT_PREAMBLE:
1244 cmd.control = cpu_to_le16(SET_SHORT_PREAMBLE);
1247 case CMD_TYPE_LONG_PREAMBLE:
1248 cmd.control = cpu_to_le16(SET_LONG_PREAMBLE);
1251 case CMD_TYPE_AUTO_PREAMBLE:
1253 cmd.control = cpu_to_le16(SET_AUTO_PREAMBLE);
1258 cmd.control |= cpu_to_le16(TURN_ON_RF);
1260 cmd.control &= cpu_to_le16(~TURN_ON_RF);
1262 lbs_deb_cmd("RADIO_SET: radio %d, preamble %d\n", priv->radioon,
1265 ret = lbs_cmd_with_response(priv, CMD_802_11_RADIO_CONTROL, &cmd);
1267 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1271 int lbs_set_mac_packet_filter(struct lbs_private *priv)
1275 lbs_deb_enter(LBS_DEB_CMD);
1277 /* Send MAC control command to station */
1278 ret = lbs_prepare_and_send_command(priv,
1279 CMD_MAC_CONTROL, 0, 0, 0, NULL);
1281 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1286 * @brief This function prepare the command before send to firmware.
1288 * @param priv A pointer to struct lbs_private structure
1289 * @param cmd_no command number
1290 * @param cmd_action command action: GET or SET
1291 * @param wait_option wait option: wait response or not
1292 * @param cmd_oid cmd oid: treated as sub command
1293 * @param pdata_buf A pointer to informaion buffer
1296 int lbs_prepare_and_send_command(struct lbs_private *priv,
1299 u16 wait_option, u32 cmd_oid, void *pdata_buf)
1302 struct cmd_ctrl_node *cmdnode;
1303 struct cmd_ds_command *cmdptr;
1304 unsigned long flags;
1306 lbs_deb_enter(LBS_DEB_HOST);
1309 lbs_deb_host("PREP_CMD: priv is NULL\n");
1314 if (priv->surpriseremoved) {
1315 lbs_deb_host("PREP_CMD: card removed\n");
1320 cmdnode = lbs_get_cmd_ctrl_node(priv);
1322 if (cmdnode == NULL) {
1323 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1325 /* Wake up main thread to execute next command */
1326 wake_up_interruptible(&priv->waitq);
1331 lbs_set_cmd_ctrl_node(priv, cmdnode, pdata_buf);
1333 cmdptr = (struct cmd_ds_command *)cmdnode->cmdbuf;
1335 lbs_deb_host("PREP_CMD: command 0x%04x\n", cmd_no);
1337 /* Set sequence number, command and INT option */
1339 cmdptr->seqnum = cpu_to_le16(priv->seqnum);
1341 cmdptr->command = cpu_to_le16(cmd_no);
1345 case CMD_802_11_PS_MODE:
1346 ret = lbs_cmd_802_11_ps_mode(priv, cmdptr, cmd_action);
1349 case CMD_802_11_SCAN:
1350 ret = lbs_cmd_80211_scan(priv, cmdptr, pdata_buf);
1353 case CMD_MAC_CONTROL:
1354 ret = lbs_cmd_mac_control(priv, cmdptr);
1357 case CMD_802_11_ASSOCIATE:
1358 case CMD_802_11_REASSOCIATE:
1359 ret = lbs_cmd_80211_associate(priv, cmdptr, pdata_buf);
1362 case CMD_802_11_DEAUTHENTICATE:
1363 ret = lbs_cmd_80211_deauthenticate(priv, cmdptr);
1366 case CMD_802_11_AD_HOC_START:
1367 ret = lbs_cmd_80211_ad_hoc_start(priv, cmdptr, pdata_buf);
1372 case CMD_802_11_RESET:
1373 ret = lbs_cmd_802_11_reset(priv, cmdptr, cmd_action);
1376 case CMD_802_11_GET_LOG:
1377 ret = lbs_cmd_802_11_get_log(priv, cmdptr);
1380 case CMD_802_11_AUTHENTICATE:
1381 ret = lbs_cmd_80211_authenticate(priv, cmdptr, pdata_buf);
1384 case CMD_802_11_GET_STAT:
1385 ret = lbs_cmd_802_11_get_stat(priv, cmdptr);
1388 case CMD_802_11_SNMP_MIB:
1389 ret = lbs_cmd_802_11_snmp_mib(priv, cmdptr,
1390 cmd_action, cmd_oid, pdata_buf);
1393 case CMD_MAC_REG_ACCESS:
1394 case CMD_BBP_REG_ACCESS:
1395 case CMD_RF_REG_ACCESS:
1396 ret = lbs_cmd_reg_access(priv, cmdptr, cmd_action, pdata_buf);
1399 case CMD_802_11_RF_TX_POWER:
1400 ret = lbs_cmd_802_11_rf_tx_power(priv, cmdptr,
1401 cmd_action, pdata_buf);
1404 case CMD_802_11_RATE_ADAPT_RATESET:
1405 ret = lbs_cmd_802_11_rate_adapt_rateset(priv,
1406 cmdptr, cmd_action);
1409 case CMD_MAC_MULTICAST_ADR:
1410 ret = lbs_cmd_mac_multicast_adr(priv, cmdptr, cmd_action);
1413 case CMD_802_11_MONITOR_MODE:
1414 ret = lbs_cmd_802_11_monitor_mode(priv, cmdptr,
1415 cmd_action, pdata_buf);
1418 case CMD_802_11_AD_HOC_JOIN:
1419 ret = lbs_cmd_80211_ad_hoc_join(priv, cmdptr, pdata_buf);
1422 case CMD_802_11_RSSI:
1423 ret = lbs_cmd_802_11_rssi(priv, cmdptr);
1426 case CMD_802_11_AD_HOC_STOP:
1427 ret = lbs_cmd_80211_ad_hoc_stop(priv, cmdptr);
1430 case CMD_802_11_KEY_MATERIAL:
1431 ret = lbs_cmd_802_11_key_material(priv, cmdptr, cmd_action,
1432 cmd_oid, pdata_buf);
1435 case CMD_802_11_PAIRWISE_TSC:
1437 case CMD_802_11_GROUP_TSC:
1440 case CMD_802_11_MAC_ADDRESS:
1441 ret = lbs_cmd_802_11_mac_address(priv, cmdptr, cmd_action);
1444 case CMD_802_11_EEPROM_ACCESS:
1445 ret = lbs_cmd_802_11_eeprom_access(priv, cmdptr,
1446 cmd_action, pdata_buf);
1449 case CMD_802_11_SET_AFC:
1450 case CMD_802_11_GET_AFC:
1452 cmdptr->command = cpu_to_le16(cmd_no);
1453 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_afc) +
1456 memmove(&cmdptr->params.afc,
1457 pdata_buf, sizeof(struct cmd_ds_802_11_afc));
1462 case CMD_802_11D_DOMAIN_INFO:
1463 ret = lbs_cmd_802_11d_domain_info(priv, cmdptr,
1464 cmd_no, cmd_action);
1467 case CMD_802_11_TPC_CFG:
1468 cmdptr->command = cpu_to_le16(CMD_802_11_TPC_CFG);
1470 cpu_to_le16(sizeof(struct cmd_ds_802_11_tpc_cfg) +
1473 memmove(&cmdptr->params.tpccfg,
1474 pdata_buf, sizeof(struct cmd_ds_802_11_tpc_cfg));
1478 case CMD_802_11_LED_GPIO_CTRL:
1480 struct mrvlietypes_ledgpio *gpio =
1481 (struct mrvlietypes_ledgpio*)
1482 cmdptr->params.ledgpio.data;
1484 memmove(&cmdptr->params.ledgpio,
1486 sizeof(struct cmd_ds_802_11_led_ctrl));
1489 cpu_to_le16(CMD_802_11_LED_GPIO_CTRL);
1491 #define ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN 8
1493 cpu_to_le16(le16_to_cpu(gpio->header.len)
1495 + ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN);
1496 gpio->header.len = gpio->header.len;
1502 case CMD_802_11_PWR_CFG:
1503 cmdptr->command = cpu_to_le16(CMD_802_11_PWR_CFG);
1505 cpu_to_le16(sizeof(struct cmd_ds_802_11_pwr_cfg) +
1507 memmove(&cmdptr->params.pwrcfg, pdata_buf,
1508 sizeof(struct cmd_ds_802_11_pwr_cfg));
1513 ret = lbs_cmd_bt_access(priv, cmdptr, cmd_action, pdata_buf);
1516 case CMD_FWT_ACCESS:
1517 ret = lbs_cmd_fwt_access(priv, cmdptr, cmd_action, pdata_buf);
1521 cmdptr->command = cpu_to_le16(CMD_GET_TSF);
1522 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_get_tsf) +
1526 case CMD_802_11_BEACON_CTRL:
1527 ret = lbs_cmd_bcn_ctrl(priv, cmdptr, cmd_action);
1530 lbs_deb_host("PREP_CMD: unknown command 0x%04x\n", cmd_no);
1535 /* return error, since the command preparation failed */
1537 lbs_deb_host("PREP_CMD: command preparation failed\n");
1538 lbs_cleanup_and_insert_cmd(priv, cmdnode);
1543 cmdnode->cmdwaitqwoken = 0;
1545 lbs_queue_cmd(priv, cmdnode);
1546 wake_up_interruptible(&priv->waitq);
1548 if (wait_option & CMD_OPTION_WAITFORRSP) {
1549 lbs_deb_host("PREP_CMD: wait for response\n");
1551 wait_event_interruptible(cmdnode->cmdwait_q,
1552 cmdnode->cmdwaitqwoken);
1555 spin_lock_irqsave(&priv->driver_lock, flags);
1556 if (priv->cur_cmd_retcode) {
1557 lbs_deb_host("PREP_CMD: command failed with return code %d\n",
1558 priv->cur_cmd_retcode);
1559 priv->cur_cmd_retcode = 0;
1562 spin_unlock_irqrestore(&priv->driver_lock, flags);
1565 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1568 EXPORT_SYMBOL_GPL(lbs_prepare_and_send_command);
1571 * @brief This function allocates the command buffer and link
1572 * it to command free queue.
1574 * @param priv A pointer to struct lbs_private structure
1577 int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1582 struct cmd_ctrl_node *cmdarray;
1584 lbs_deb_enter(LBS_DEB_HOST);
1586 /* Allocate and initialize the command array */
1587 bufsize = sizeof(struct cmd_ctrl_node) * LBS_NUM_CMD_BUFFERS;
1588 if (!(cmdarray = kzalloc(bufsize, GFP_KERNEL))) {
1589 lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1593 priv->cmd_array = cmdarray;
1595 /* Allocate and initialize each command buffer in the command array */
1596 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1597 cmdarray[i].cmdbuf = kzalloc(LBS_CMD_BUFFER_SIZE, GFP_KERNEL);
1598 if (!cmdarray[i].cmdbuf) {
1599 lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1605 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1606 init_waitqueue_head(&cmdarray[i].cmdwait_q);
1607 lbs_cleanup_and_insert_cmd(priv, &cmdarray[i]);
1612 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1617 * @brief This function frees the command buffer.
1619 * @param priv A pointer to struct lbs_private structure
1622 int lbs_free_cmd_buffer(struct lbs_private *priv)
1624 struct cmd_ctrl_node *cmdarray;
1627 lbs_deb_enter(LBS_DEB_HOST);
1629 /* need to check if cmd array is allocated or not */
1630 if (priv->cmd_array == NULL) {
1631 lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1635 cmdarray = priv->cmd_array;
1637 /* Release shared memory buffers */
1638 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1639 if (cmdarray[i].cmdbuf) {
1640 kfree(cmdarray[i].cmdbuf);
1641 cmdarray[i].cmdbuf = NULL;
1645 /* Release cmd_ctrl_node */
1646 if (priv->cmd_array) {
1647 kfree(priv->cmd_array);
1648 priv->cmd_array = NULL;
1652 lbs_deb_leave(LBS_DEB_HOST);
1657 * @brief This function gets a free command node if available in
1658 * command free queue.
1660 * @param priv A pointer to struct lbs_private structure
1661 * @return cmd_ctrl_node A pointer to cmd_ctrl_node structure or NULL
1663 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv)
1665 struct cmd_ctrl_node *tempnode;
1666 unsigned long flags;
1668 lbs_deb_enter(LBS_DEB_HOST);
1673 spin_lock_irqsave(&priv->driver_lock, flags);
1675 if (!list_empty(&priv->cmdfreeq)) {
1676 tempnode = list_first_entry(&priv->cmdfreeq,
1677 struct cmd_ctrl_node, list);
1678 list_del(&tempnode->list);
1680 lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1684 spin_unlock_irqrestore(&priv->driver_lock, flags);
1686 lbs_deb_leave(LBS_DEB_HOST);
1691 * @brief This function cleans command node.
1693 * @param ptempnode A pointer to cmdCtrlNode structure
1698 * @brief This function initializes the command node.
1700 * @param priv A pointer to struct lbs_private structure
1701 * @param ptempnode A pointer to cmd_ctrl_node structure
1702 * @param pdata_buf A pointer to informaion buffer
1705 static void lbs_set_cmd_ctrl_node(struct lbs_private *priv,
1706 struct cmd_ctrl_node *ptempnode,
1709 lbs_deb_enter(LBS_DEB_HOST);
1714 ptempnode->callback = NULL;
1715 ptempnode->callback_arg = (unsigned long)pdata_buf;
1717 lbs_deb_leave(LBS_DEB_HOST);
1721 * @brief This function executes next command in command
1722 * pending queue. It will put fimware back to PS mode
1725 * @param priv A pointer to struct lbs_private structure
1728 int lbs_execute_next_command(struct lbs_private *priv)
1730 struct cmd_ctrl_node *cmdnode = NULL;
1731 struct cmd_header *cmd;
1732 unsigned long flags;
1735 // Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1736 // only caller to us is lbs_thread() and we get even when a
1737 // data packet is received
1738 lbs_deb_enter(LBS_DEB_THREAD);
1740 spin_lock_irqsave(&priv->driver_lock, flags);
1742 if (priv->cur_cmd) {
1743 lbs_pr_alert( "EXEC_NEXT_CMD: already processing command!\n");
1744 spin_unlock_irqrestore(&priv->driver_lock, flags);
1749 if (!list_empty(&priv->cmdpendingq)) {
1750 cmdnode = list_first_entry(&priv->cmdpendingq,
1751 struct cmd_ctrl_node, list);
1754 spin_unlock_irqrestore(&priv->driver_lock, flags);
1757 cmd = cmdnode->cmdbuf;
1759 if (is_command_allowed_in_ps(le16_to_cpu(cmd->command))) {
1760 if ((priv->psstate == PS_STATE_SLEEP) ||
1761 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1763 "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1764 le16_to_cpu(cmd->command),
1769 lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1770 "0x%04x in psstate %d\n",
1771 le16_to_cpu(cmd->command), priv->psstate);
1772 } else if (priv->psstate != PS_STATE_FULL_POWER) {
1774 * 1. Non-PS command:
1775 * Queue it. set needtowakeup to TRUE if current state
1776 * is SLEEP, otherwise call lbs_ps_wakeup to send Exit_PS.
1777 * 2. PS command but not Exit_PS:
1779 * 3. PS command Exit_PS:
1780 * Set needtowakeup to TRUE if current state is SLEEP,
1781 * otherwise send this command down to firmware
1784 if (cmd->command != cpu_to_le16(CMD_802_11_PS_MODE)) {
1785 /* Prepare to send Exit PS,
1786 * this non PS command will be sent later */
1787 if ((priv->psstate == PS_STATE_SLEEP)
1788 || (priv->psstate == PS_STATE_PRE_SLEEP)
1790 /* w/ new scheme, it will not reach here.
1791 since it is blocked in main_thread. */
1792 priv->needtowakeup = 1;
1794 lbs_ps_wakeup(priv, 0);
1800 * PS command. Ignore it if it is not Exit_PS.
1801 * otherwise send it down immediately.
1803 struct cmd_ds_802_11_ps_mode *psm = (void *)&cmd[1];
1806 "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1809 cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1811 "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1812 list_del(&cmdnode->list);
1813 spin_lock_irqsave(&priv->driver_lock, flags);
1814 lbs_complete_command(priv, cmdnode, 0);
1815 spin_unlock_irqrestore(&priv->driver_lock, flags);
1821 if ((priv->psstate == PS_STATE_SLEEP) ||
1822 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1824 "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1825 list_del(&cmdnode->list);
1826 spin_lock_irqsave(&priv->driver_lock, flags);
1827 lbs_complete_command(priv, cmdnode, 0);
1828 spin_unlock_irqrestore(&priv->driver_lock, flags);
1829 priv->needtowakeup = 1;
1836 "EXEC_NEXT_CMD: sending EXIT_PS\n");
1839 list_del(&cmdnode->list);
1840 lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1841 le16_to_cpu(cmd->command));
1842 lbs_submit_command(priv, cmdnode);
1845 * check if in power save mode, if yes, put the device back
1848 if ((priv->psmode != LBS802_11POWERMODECAM) &&
1849 (priv->psstate == PS_STATE_FULL_POWER) &&
1850 ((priv->connect_status == LBS_CONNECTED) ||
1851 (priv->mesh_connect_status == LBS_CONNECTED))) {
1852 if (priv->secinfo.WPAenabled ||
1853 priv->secinfo.WPA2enabled) {
1854 /* check for valid WPA group keys */
1855 if (priv->wpa_mcast_key.len ||
1856 priv->wpa_unicast_key.len) {
1858 "EXEC_NEXT_CMD: WPA enabled and GTK_SET"
1859 " go back to PS_SLEEP");
1860 lbs_ps_sleep(priv, 0);
1864 "EXEC_NEXT_CMD: cmdpendingq empty, "
1865 "go back to PS_SLEEP");
1866 lbs_ps_sleep(priv, 0);
1873 lbs_deb_leave(LBS_DEB_THREAD);
1877 void lbs_send_iwevcustom_event(struct lbs_private *priv, s8 *str)
1879 union iwreq_data iwrq;
1882 lbs_deb_enter(LBS_DEB_WEXT);
1884 memset(&iwrq, 0, sizeof(union iwreq_data));
1885 memset(buf, 0, sizeof(buf));
1887 snprintf(buf, sizeof(buf) - 1, "%s", str);
1889 iwrq.data.length = strlen(buf) + 1 + IW_EV_LCP_LEN;
1891 /* Send Event to upper layer */
1892 lbs_deb_wext("event indication string %s\n", (char *)buf);
1893 lbs_deb_wext("event indication length %d\n", iwrq.data.length);
1894 lbs_deb_wext("sending wireless event IWEVCUSTOM for %s\n", str);
1896 wireless_send_event(priv->dev, IWEVCUSTOM, &iwrq, buf);
1898 lbs_deb_leave(LBS_DEB_WEXT);
1901 static int sendconfirmsleep(struct lbs_private *priv, u8 *cmdptr, u16 size)
1903 unsigned long flags;
1906 lbs_deb_enter(LBS_DEB_HOST);
1908 lbs_deb_host("SEND_SLEEPC_CMD: before download, cmd size %d\n",
1911 lbs_deb_hex(LBS_DEB_HOST, "sleep confirm command", cmdptr, size);
1913 ret = priv->hw_host_to_card(priv, MVMS_CMD, cmdptr, size);
1915 spin_lock_irqsave(&priv->driver_lock, flags);
1916 if (priv->intcounter || priv->currenttxskb)
1917 lbs_deb_host("SEND_SLEEPC_CMD: intcounter %d, currenttxskb %p\n",
1918 priv->intcounter, priv->currenttxskb);
1919 spin_unlock_irqrestore(&priv->driver_lock, flags);
1923 "SEND_SLEEPC_CMD: Host to Card failed for Confirm Sleep\n");
1925 spin_lock_irqsave(&priv->driver_lock, flags);
1926 if (!priv->intcounter) {
1927 priv->psstate = PS_STATE_SLEEP;
1929 lbs_deb_host("SEND_SLEEPC_CMD: after sent, intcounter %d\n",
1932 spin_unlock_irqrestore(&priv->driver_lock, flags);
1934 lbs_deb_host("SEND_SLEEPC_CMD: sent confirm sleep\n");
1937 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1941 void lbs_ps_sleep(struct lbs_private *priv, int wait_option)
1943 lbs_deb_enter(LBS_DEB_HOST);
1946 * PS is currently supported only in Infrastructure mode
1947 * Remove this check if it is to be supported in IBSS mode also
1950 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1951 CMD_SUBCMD_ENTER_PS, wait_option, 0, NULL);
1953 lbs_deb_leave(LBS_DEB_HOST);
1957 * @brief This function sends Exit_PS command to firmware.
1959 * @param priv A pointer to struct lbs_private structure
1960 * @param wait_option wait response or not
1963 void lbs_ps_wakeup(struct lbs_private *priv, int wait_option)
1967 lbs_deb_enter(LBS_DEB_HOST);
1969 Localpsmode = cpu_to_le32(LBS802_11POWERMODECAM);
1971 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1973 wait_option, 0, &Localpsmode);
1975 lbs_deb_leave(LBS_DEB_HOST);
1979 * @brief This function checks condition and prepares to
1980 * send sleep confirm command to firmware if ok.
1982 * @param priv A pointer to struct lbs_private structure
1983 * @param psmode Power Saving mode
1986 void lbs_ps_confirm_sleep(struct lbs_private *priv, u16 psmode)
1988 unsigned long flags =0;
1991 lbs_deb_enter(LBS_DEB_HOST);
1993 if (priv->dnld_sent) {
1995 lbs_deb_host("dnld_sent was set\n");
1998 spin_lock_irqsave(&priv->driver_lock, flags);
1999 if (priv->cur_cmd) {
2001 lbs_deb_host("cur_cmd was set\n");
2003 if (priv->intcounter > 0) {
2005 lbs_deb_host("intcounter %d\n", priv->intcounter);
2007 spin_unlock_irqrestore(&priv->driver_lock, flags);
2010 lbs_deb_host("sending lbs_ps_confirm_sleep\n");
2011 sendconfirmsleep(priv, (u8 *) & priv->lbs_ps_confirm_sleep,
2012 sizeof(struct PS_CMD_ConfirmSleep));
2014 lbs_deb_host("sleep confirm has been delayed\n");
2017 lbs_deb_leave(LBS_DEB_HOST);
2022 * @brief Simple callback that copies response back into command
2024 * @param priv A pointer to struct lbs_private structure
2025 * @param extra A pointer to the original command structure for which
2026 * 'resp' is a response
2027 * @param resp A pointer to the command response
2029 * @return 0 on success, error on failure
2031 int lbs_cmd_copyback(struct lbs_private *priv, unsigned long extra,
2032 struct cmd_header *resp)
2034 struct cmd_header *buf = (void *)extra;
2037 lbs_deb_enter(LBS_DEB_CMD);
2039 copy_len = min(le16_to_cpu(buf->size), le16_to_cpu(resp->size));
2040 lbs_deb_cmd("Copying back %u bytes; command response was %u bytes, "
2041 "copy back buffer was %u bytes\n", copy_len,
2042 le16_to_cpu(resp->size), le16_to_cpu(buf->size));
2043 memcpy(buf, resp, copy_len);
2045 lbs_deb_leave(LBS_DEB_CMD);
2048 EXPORT_SYMBOL_GPL(lbs_cmd_copyback);
2050 struct cmd_ctrl_node *__lbs_cmd_async(struct lbs_private *priv, uint16_t command,
2051 struct cmd_header *in_cmd, int in_cmd_size,
2052 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
2053 unsigned long callback_arg)
2055 struct cmd_ctrl_node *cmdnode;
2057 lbs_deb_enter(LBS_DEB_HOST);
2059 if (priv->surpriseremoved) {
2060 lbs_deb_host("PREP_CMD: card removed\n");
2061 cmdnode = ERR_PTR(-ENOENT);
2065 cmdnode = lbs_get_cmd_ctrl_node(priv);
2066 if (cmdnode == NULL) {
2067 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
2069 /* Wake up main thread to execute next command */
2070 wake_up_interruptible(&priv->waitq);
2071 cmdnode = ERR_PTR(-ENOBUFS);
2075 cmdnode->callback = callback;
2076 cmdnode->callback_arg = callback_arg;
2078 /* Copy the incoming command to the buffer */
2079 memcpy(cmdnode->cmdbuf, in_cmd, in_cmd_size);
2081 /* Set sequence number, clean result, move to buffer */
2083 cmdnode->cmdbuf->command = cpu_to_le16(command);
2084 cmdnode->cmdbuf->size = cpu_to_le16(in_cmd_size);
2085 cmdnode->cmdbuf->seqnum = cpu_to_le16(priv->seqnum);
2086 cmdnode->cmdbuf->result = 0;
2088 lbs_deb_host("PREP_CMD: command 0x%04x\n", command);
2090 /* here was the big old switch() statement, which is now obsolete,
2091 * because the caller of lbs_cmd() sets up all of *cmd for us. */
2093 cmdnode->cmdwaitqwoken = 0;
2094 lbs_queue_cmd(priv, cmdnode);
2095 wake_up_interruptible(&priv->waitq);
2098 lbs_deb_leave_args(LBS_DEB_HOST, "ret %p", cmdnode);
2102 int __lbs_cmd(struct lbs_private *priv, uint16_t command,
2103 struct cmd_header *in_cmd, int in_cmd_size,
2104 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
2105 unsigned long callback_arg)
2107 struct cmd_ctrl_node *cmdnode;
2108 unsigned long flags;
2111 lbs_deb_enter(LBS_DEB_HOST);
2113 cmdnode = __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
2114 callback, callback_arg);
2115 if (IS_ERR(cmdnode)) {
2116 ret = PTR_ERR(cmdnode);
2121 wait_event_interruptible(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);
2123 spin_lock_irqsave(&priv->driver_lock, flags);
2124 ret = cmdnode->result;
2126 lbs_pr_info("PREP_CMD: command 0x%04x failed: %d\n",
2129 __lbs_cleanup_and_insert_cmd(priv, cmdnode);
2130 spin_unlock_irqrestore(&priv->driver_lock, flags);
2133 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
2136 EXPORT_SYMBOL_GPL(__lbs_cmd);