Linux-libre 4.4.228-gnu
[librecmc/linux-libre.git] / drivers / net / wireless / iwlwifi / dvm / mac80211.c
1 /******************************************************************************
2  *
3  * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved.
4  *
5  * Portions of this file are derived from the ipw3945 project, as well
6  * as portions of the ieee80211 subsystem header files.
7  *
8  * This program is free software; you can redistribute it and/or modify it
9  * under the terms of version 2 of the GNU General Public License as
10  * published by the Free Software Foundation.
11  *
12  * This program is distributed in the hope that it will be useful, but WITHOUT
13  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
14  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
15  * more details.
16  *
17  * You should have received a copy of the GNU General Public License along with
18  * this program; if not, write to the Free Software Foundation, Inc.,
19  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
20  *
21  * The full GNU General Public License is included in this distribution in the
22  * file called LICENSE.
23  *
24  * Contact Information:
25  *  Intel Linux Wireless <ilw@linux.intel.com>
26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
27  *
28  *****************************************************************************/
29 #include <linux/kernel.h>
30 #include <linux/module.h>
31 #include <linux/slab.h>
32 #include <linux/dma-mapping.h>
33 #include <linux/delay.h>
34 #include <linux/sched.h>
35 #include <linux/skbuff.h>
36 #include <linux/netdevice.h>
37 #include <linux/etherdevice.h>
38 #include <linux/if_arp.h>
39
40 #include <net/ieee80211_radiotap.h>
41 #include <net/mac80211.h>
42
43 #include <asm/div64.h>
44
45 #include "iwl-io.h"
46 #include "iwl-trans.h"
47 #include "iwl-op-mode.h"
48 #include "iwl-modparams.h"
49
50 #include "dev.h"
51 #include "calib.h"
52 #include "agn.h"
53
54 /*****************************************************************************
55  *
56  * mac80211 entry point functions
57  *
58  *****************************************************************************/
59
60 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
61         {
62                 .max = 1,
63                 .types = BIT(NL80211_IFTYPE_STATION),
64         },
65         {
66                 .max = 1,
67                 .types = BIT(NL80211_IFTYPE_AP),
68         },
69 };
70
71 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
72         {
73                 .max = 2,
74                 .types = BIT(NL80211_IFTYPE_STATION),
75         },
76 };
77
78 static const struct ieee80211_iface_combination
79 iwlagn_iface_combinations_dualmode[] = {
80         { .num_different_channels = 1,
81           .max_interfaces = 2,
82           .beacon_int_infra_match = true,
83           .limits = iwlagn_sta_ap_limits,
84           .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
85         },
86         { .num_different_channels = 1,
87           .max_interfaces = 2,
88           .limits = iwlagn_2sta_limits,
89           .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
90         },
91 };
92
93 /*
94  * Not a mac80211 entry point function, but it fits in with all the
95  * other mac80211 functions grouped here.
96  */
97 int iwlagn_mac_setup_register(struct iwl_priv *priv,
98                               const struct iwl_ucode_capabilities *capa)
99 {
100         int ret;
101         struct ieee80211_hw *hw = priv->hw;
102         struct iwl_rxon_context *ctx;
103
104         hw->rate_control_algorithm = "iwl-agn-rs";
105
106         /* Tell mac80211 our characteristics */
107         ieee80211_hw_set(hw, SIGNAL_DBM);
108         ieee80211_hw_set(hw, AMPDU_AGGREGATION);
109         ieee80211_hw_set(hw, NEED_DTIM_BEFORE_ASSOC);
110         ieee80211_hw_set(hw, SPECTRUM_MGMT);
111         ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
112         ieee80211_hw_set(hw, QUEUE_CONTROL);
113         ieee80211_hw_set(hw, SUPPORTS_PS);
114         ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
115         ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
116         ieee80211_hw_set(hw, WANT_MONITOR_VIF);
117
118         hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE;
119         hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT;
120
121         /*
122          * Including the following line will crash some AP's.  This
123          * workaround removes the stimulus which causes the crash until
124          * the AP software can be fixed.
125         hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
126          */
127
128         if (priv->nvm_data->sku_cap_11n_enable)
129                 hw->wiphy->features |= NL80211_FEATURE_DYNAMIC_SMPS |
130                                        NL80211_FEATURE_STATIC_SMPS;
131
132         /*
133          * Enable 11w if advertised by firmware and software crypto
134          * is not enabled (as the firmware will interpret some mgmt
135          * packets, so enabling it with software crypto isn't safe)
136          */
137         if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
138             !iwlwifi_mod_params.sw_crypto)
139                 ieee80211_hw_set(hw, MFP_CAPABLE);
140
141         hw->sta_data_size = sizeof(struct iwl_station_priv);
142         hw->vif_data_size = sizeof(struct iwl_vif_priv);
143
144         for_each_context(priv, ctx) {
145                 hw->wiphy->interface_modes |= ctx->interface_modes;
146                 hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
147         }
148
149         BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
150
151         if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
152                 hw->wiphy->iface_combinations =
153                         iwlagn_iface_combinations_dualmode;
154                 hw->wiphy->n_iface_combinations =
155                         ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
156         }
157
158         hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
159         hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
160                                        REGULATORY_DISABLE_BEACON_HINTS;
161
162 #ifdef CONFIG_PM_SLEEP
163         if (priv->fw->img[IWL_UCODE_WOWLAN].sec[0].len &&
164             priv->trans->ops->d3_suspend &&
165             priv->trans->ops->d3_resume &&
166             device_can_wakeup(priv->trans->dev)) {
167                 priv->wowlan_support.flags = WIPHY_WOWLAN_MAGIC_PKT |
168                                              WIPHY_WOWLAN_DISCONNECT |
169                                              WIPHY_WOWLAN_EAP_IDENTITY_REQ |
170                                              WIPHY_WOWLAN_RFKILL_RELEASE;
171                 if (!iwlwifi_mod_params.sw_crypto)
172                         priv->wowlan_support.flags |=
173                                 WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
174                                 WIPHY_WOWLAN_GTK_REKEY_FAILURE;
175
176                 priv->wowlan_support.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
177                 priv->wowlan_support.pattern_min_len =
178                                         IWLAGN_WOWLAN_MIN_PATTERN_LEN;
179                 priv->wowlan_support.pattern_max_len =
180                                         IWLAGN_WOWLAN_MAX_PATTERN_LEN;
181                 hw->wiphy->wowlan = &priv->wowlan_support;
182         }
183 #endif
184
185         if (iwlwifi_mod_params.power_save)
186                 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
187         else
188                 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
189
190         hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
191         /* we create the 802.11 header and a max-length SSID element */
192         hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34;
193
194         /*
195          * We don't use all queues: 4 and 9 are unused and any
196          * aggregation queue gets mapped down to the AC queue.
197          */
198         hw->queues = IWLAGN_FIRST_AMPDU_QUEUE;
199
200         hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
201
202         if (priv->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels)
203                 priv->hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
204                         &priv->nvm_data->bands[IEEE80211_BAND_2GHZ];
205         if (priv->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels)
206                 priv->hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
207                         &priv->nvm_data->bands[IEEE80211_BAND_5GHZ];
208
209         hw->wiphy->hw_version = priv->trans->hw_id;
210
211         iwl_leds_init(priv);
212
213         ret = ieee80211_register_hw(priv->hw);
214         if (ret) {
215                 IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
216                 iwl_leds_exit(priv);
217                 return ret;
218         }
219         priv->mac80211_registered = 1;
220
221         return 0;
222 }
223
224 void iwlagn_mac_unregister(struct iwl_priv *priv)
225 {
226         if (!priv->mac80211_registered)
227                 return;
228         iwl_leds_exit(priv);
229         ieee80211_unregister_hw(priv->hw);
230         priv->mac80211_registered = 0;
231 }
232
233 static int __iwl_up(struct iwl_priv *priv)
234 {
235         struct iwl_rxon_context *ctx;
236         int ret;
237
238         lockdep_assert_held(&priv->mutex);
239
240         if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
241                 IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
242                 return -EIO;
243         }
244
245         for_each_context(priv, ctx) {
246                 ret = iwlagn_alloc_bcast_station(priv, ctx);
247                 if (ret) {
248                         iwl_dealloc_bcast_stations(priv);
249                         return ret;
250                 }
251         }
252
253         ret = iwl_trans_start_hw(priv->trans);
254         if (ret) {
255                 IWL_ERR(priv, "Failed to start HW: %d\n", ret);
256                 goto error;
257         }
258
259         ret = iwl_run_init_ucode(priv);
260         if (ret) {
261                 IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
262                 goto error;
263         }
264
265         ret = iwl_trans_start_hw(priv->trans);
266         if (ret) {
267                 IWL_ERR(priv, "Failed to start HW: %d\n", ret);
268                 goto error;
269         }
270
271         ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR);
272         if (ret) {
273                 IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
274                 goto error;
275         }
276
277         ret = iwl_alive_start(priv);
278         if (ret)
279                 goto error;
280         return 0;
281
282  error:
283         set_bit(STATUS_EXIT_PENDING, &priv->status);
284         iwl_down(priv);
285         clear_bit(STATUS_EXIT_PENDING, &priv->status);
286
287         IWL_ERR(priv, "Unable to initialize device.\n");
288         return ret;
289 }
290
291 static int iwlagn_mac_start(struct ieee80211_hw *hw)
292 {
293         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
294         int ret;
295
296         IWL_DEBUG_MAC80211(priv, "enter\n");
297
298         /* we should be verifying the device is ready to be opened */
299         mutex_lock(&priv->mutex);
300         ret = __iwl_up(priv);
301         mutex_unlock(&priv->mutex);
302         if (ret)
303                 return ret;
304
305         IWL_DEBUG_INFO(priv, "Start UP work done.\n");
306
307         /* Now we should be done, and the READY bit should be set. */
308         if (WARN_ON(!test_bit(STATUS_READY, &priv->status)))
309                 ret = -EIO;
310
311         iwlagn_led_enable(priv);
312
313         priv->is_open = 1;
314         IWL_DEBUG_MAC80211(priv, "leave\n");
315         return 0;
316 }
317
318 static void iwlagn_mac_stop(struct ieee80211_hw *hw)
319 {
320         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
321
322         IWL_DEBUG_MAC80211(priv, "enter\n");
323
324         if (!priv->is_open)
325                 return;
326
327         priv->is_open = 0;
328
329         mutex_lock(&priv->mutex);
330         iwl_down(priv);
331         mutex_unlock(&priv->mutex);
332
333         iwl_cancel_deferred_work(priv);
334
335         flush_workqueue(priv->workqueue);
336
337         IWL_DEBUG_MAC80211(priv, "leave\n");
338 }
339
340 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
341                                       struct ieee80211_vif *vif,
342                                       struct cfg80211_gtk_rekey_data *data)
343 {
344         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
345
346         if (iwlwifi_mod_params.sw_crypto)
347                 return;
348
349         IWL_DEBUG_MAC80211(priv, "enter\n");
350         mutex_lock(&priv->mutex);
351
352         if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
353                 goto out;
354
355         memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
356         memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
357         priv->replay_ctr =
358                 cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
359         priv->have_rekey_data = true;
360
361  out:
362         mutex_unlock(&priv->mutex);
363         IWL_DEBUG_MAC80211(priv, "leave\n");
364 }
365
366 #ifdef CONFIG_PM_SLEEP
367
368 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
369                               struct cfg80211_wowlan *wowlan)
370 {
371         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
372         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
373         int ret;
374
375         if (WARN_ON(!wowlan))
376                 return -EINVAL;
377
378         IWL_DEBUG_MAC80211(priv, "enter\n");
379         mutex_lock(&priv->mutex);
380
381         /* Don't attempt WoWLAN when not associated, tear down instead. */
382         if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
383             !iwl_is_associated_ctx(ctx)) {
384                 ret = 1;
385                 goto out;
386         }
387
388         ret = iwlagn_suspend(priv, wowlan);
389         if (ret)
390                 goto error;
391
392         /* let the ucode operate on its own */
393         iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET,
394                     CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
395
396         iwl_trans_d3_suspend(priv->trans, false);
397
398         goto out;
399
400  error:
401         priv->wowlan = false;
402         iwlagn_prepare_restart(priv);
403         ieee80211_restart_hw(priv->hw);
404  out:
405         mutex_unlock(&priv->mutex);
406         IWL_DEBUG_MAC80211(priv, "leave\n");
407
408         return ret;
409 }
410
411 struct iwl_resume_data {
412         struct iwl_priv *priv;
413         struct iwlagn_wowlan_status *cmd;
414         bool valid;
415 };
416
417 static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait,
418                                  struct iwl_rx_packet *pkt, void *data)
419 {
420         struct iwl_resume_data *resume_data = data;
421         struct iwl_priv *priv = resume_data->priv;
422
423         if (iwl_rx_packet_payload_len(pkt) != sizeof(*resume_data->cmd)) {
424                 IWL_ERR(priv, "rx wrong size data\n");
425                 return true;
426         }
427         memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd));
428         resume_data->valid = true;
429
430         return true;
431 }
432
433 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
434 {
435         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
436         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
437         struct ieee80211_vif *vif;
438         u32 base;
439         int ret;
440         enum iwl_d3_status d3_status;
441         struct error_table_start {
442                 /* cf. struct iwl_error_event_table */
443                 u32 valid;
444                 u32 error_id;
445         } err_info;
446         struct iwl_notification_wait status_wait;
447         static const u16 status_cmd[] = {
448                 REPLY_WOWLAN_GET_STATUS,
449         };
450         struct iwlagn_wowlan_status status_data = {};
451         struct iwl_resume_data resume_data = {
452                 .priv = priv,
453                 .cmd = &status_data,
454                 .valid = false,
455         };
456         struct cfg80211_wowlan_wakeup wakeup = {
457                 .pattern_idx = -1,
458         };
459 #ifdef CONFIG_IWLWIFI_DEBUGFS
460         const struct fw_img *img;
461 #endif
462
463         IWL_DEBUG_MAC80211(priv, "enter\n");
464         mutex_lock(&priv->mutex);
465
466         /* we'll clear ctx->vif during iwlagn_prepare_restart() */
467         vif = ctx->vif;
468
469         ret = iwl_trans_d3_resume(priv->trans, &d3_status, false);
470         if (ret)
471                 goto out_unlock;
472
473         if (d3_status != IWL_D3_STATUS_ALIVE) {
474                 IWL_INFO(priv, "Device was reset during suspend\n");
475                 goto out_unlock;
476         }
477
478         /* uCode is no longer operating by itself */
479         iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR,
480                     CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
481
482         base = priv->device_pointers.error_event_table;
483         if (!iwlagn_hw_valid_rtc_data_addr(base)) {
484                 IWL_WARN(priv, "Invalid error table during resume!\n");
485                 goto out_unlock;
486         }
487
488         iwl_trans_read_mem_bytes(priv->trans, base,
489                                  &err_info, sizeof(err_info));
490
491         if (err_info.valid) {
492                 IWL_INFO(priv, "error table is valid (%d, 0x%x)\n",
493                          err_info.valid, err_info.error_id);
494                 if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) {
495                         wakeup.rfkill_release = true;
496                         ieee80211_report_wowlan_wakeup(vif, &wakeup,
497                                                        GFP_KERNEL);
498                 }
499                 goto out_unlock;
500         }
501
502 #ifdef CONFIG_IWLWIFI_DEBUGFS
503         img = &priv->fw->img[IWL_UCODE_WOWLAN];
504         if (!priv->wowlan_sram)
505                 priv->wowlan_sram =
506                         kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len,
507                                 GFP_KERNEL);
508
509         if (priv->wowlan_sram)
510                 iwl_trans_read_mem(priv->trans, 0x800000,
511                                    priv->wowlan_sram,
512                                    img->sec[IWL_UCODE_SECTION_DATA].len / 4);
513 #endif
514
515         /*
516          * This is very strange. The GET_STATUS command is sent but the device
517          * doesn't reply properly, it seems it doesn't close the RBD so one is
518          * always left open ... As a result, we need to send another command
519          * and have to reset the driver afterwards. As we need to switch to
520          * runtime firmware again that'll happen.
521          */
522
523         iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd,
524                                    ARRAY_SIZE(status_cmd), iwl_resume_status_fn,
525                                    &resume_data);
526
527         iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL);
528         iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL);
529         /* an RBD is left open in the firmware now! */
530
531         ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5);
532         if (ret)
533                 goto out_unlock;
534
535         if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) {
536                 u32 reasons = le32_to_cpu(status_data.wakeup_reason);
537                 struct cfg80211_wowlan_wakeup *wakeup_report;
538
539                 IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons);
540
541                 if (reasons) {
542                         if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET)
543                                 wakeup.magic_pkt = true;
544                         if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH)
545                                 wakeup.pattern_idx = status_data.pattern_number;
546                         if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
547                                        IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE))
548                                 wakeup.disconnect = true;
549                         if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL)
550                                 wakeup.gtk_rekey_failure = true;
551                         if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ)
552                                 wakeup.eap_identity_req = true;
553                         if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE)
554                                 wakeup.four_way_handshake = true;
555                         wakeup_report = &wakeup;
556                 } else {
557                         wakeup_report = NULL;
558                 }
559
560                 ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL);
561         }
562
563         priv->wowlan = false;
564
565         iwlagn_prepare_restart(priv);
566
567         memset((void *)&ctx->active, 0, sizeof(ctx->active));
568         iwl_connection_init_rx_config(priv, ctx);
569         iwlagn_set_rxon_chain(priv, ctx);
570
571  out_unlock:
572         mutex_unlock(&priv->mutex);
573         IWL_DEBUG_MAC80211(priv, "leave\n");
574
575         ieee80211_resume_disconnect(vif);
576
577         return 1;
578 }
579
580 static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled)
581 {
582         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
583
584         device_set_wakeup_enable(priv->trans->dev, enabled);
585 }
586 #endif
587
588 static void iwlagn_mac_tx(struct ieee80211_hw *hw,
589                           struct ieee80211_tx_control *control,
590                           struct sk_buff *skb)
591 {
592         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
593
594         if (iwlagn_tx_skb(priv, control->sta, skb))
595                 ieee80211_free_txskb(hw, skb);
596 }
597
598 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
599                                        struct ieee80211_vif *vif,
600                                        struct ieee80211_key_conf *keyconf,
601                                        struct ieee80211_sta *sta,
602                                        u32 iv32, u16 *phase1key)
603 {
604         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
605
606         iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
607 }
608
609 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
610                               struct ieee80211_vif *vif,
611                               struct ieee80211_sta *sta,
612                               struct ieee80211_key_conf *key)
613 {
614         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
615         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
616         struct iwl_rxon_context *ctx = vif_priv->ctx;
617         int ret;
618         bool is_default_wep_key = false;
619
620         IWL_DEBUG_MAC80211(priv, "enter\n");
621
622         if (iwlwifi_mod_params.sw_crypto) {
623                 IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
624                 return -EOPNOTSUPP;
625         }
626
627         switch (key->cipher) {
628         case WLAN_CIPHER_SUITE_TKIP:
629                 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
630                 /* fall through */
631         case WLAN_CIPHER_SUITE_CCMP:
632                 key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
633                 break;
634         default:
635                 break;
636         }
637
638         /*
639          * We could program these keys into the hardware as well, but we
640          * don't expect much multicast traffic in IBSS and having keys
641          * for more stations is probably more useful.
642          *
643          * Mark key TX-only and return 0.
644          */
645         if (vif->type == NL80211_IFTYPE_ADHOC &&
646             !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
647                 key->hw_key_idx = WEP_INVALID_OFFSET;
648                 return 0;
649         }
650
651         /* If they key was TX-only, accept deletion */
652         if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
653                 return 0;
654
655         mutex_lock(&priv->mutex);
656         iwl_scan_cancel_timeout(priv, 100);
657
658         BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
659
660         /*
661          * If we are getting WEP group key and we didn't receive any key mapping
662          * so far, we are in legacy wep mode (group key only), otherwise we are
663          * in 1X mode.
664          * In legacy wep mode, we use another host command to the uCode.
665          */
666         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
667              key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
668                 if (cmd == SET_KEY)
669                         is_default_wep_key = !ctx->key_mapping_keys;
670                 else
671                         is_default_wep_key =
672                                 key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
673         }
674
675
676         switch (cmd) {
677         case SET_KEY:
678                 if (is_default_wep_key) {
679                         ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
680                         break;
681                 }
682                 ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
683                 if (ret) {
684                         /*
685                          * can't add key for RX, but we don't need it
686                          * in the device for TX so still return 0
687                          */
688                         ret = 0;
689                         key->hw_key_idx = WEP_INVALID_OFFSET;
690                 }
691
692                 IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
693                 break;
694         case DISABLE_KEY:
695                 if (is_default_wep_key)
696                         ret = iwl_remove_default_wep_key(priv, ctx, key);
697                 else
698                         ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
699
700                 IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
701                 break;
702         default:
703                 ret = -EINVAL;
704         }
705
706         mutex_unlock(&priv->mutex);
707         IWL_DEBUG_MAC80211(priv, "leave\n");
708
709         return ret;
710 }
711
712 static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg)
713 {
714         if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
715                 return false;
716         return true;
717 }
718
719 static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg)
720 {
721         if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
722                 return false;
723         if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG)
724                 return true;
725
726         /* disabled by default */
727         return false;
728 }
729
730 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
731                                    struct ieee80211_vif *vif,
732                                    struct ieee80211_ampdu_params *params)
733 {
734         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
735         int ret = -EINVAL;
736         struct ieee80211_sta *sta = params->sta;
737         enum ieee80211_ampdu_mlme_action action = params->action;
738         u16 tid = params->tid;
739         u16 *ssn = &params->ssn;
740         u8 buf_size = params->buf_size;
741         struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
742
743         IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
744                      sta->addr, tid);
745
746         if (!(priv->nvm_data->sku_cap_11n_enable))
747                 return -EACCES;
748
749         IWL_DEBUG_MAC80211(priv, "enter\n");
750         mutex_lock(&priv->mutex);
751
752         switch (action) {
753         case IEEE80211_AMPDU_RX_START:
754                 if (!iwl_enable_rx_ampdu(priv->cfg))
755                         break;
756                 IWL_DEBUG_HT(priv, "start Rx\n");
757                 ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
758                 break;
759         case IEEE80211_AMPDU_RX_STOP:
760                 IWL_DEBUG_HT(priv, "stop Rx\n");
761                 ret = iwl_sta_rx_agg_stop(priv, sta, tid);
762                 break;
763         case IEEE80211_AMPDU_TX_START:
764                 if (!priv->trans->ops->txq_enable)
765                         break;
766                 if (!iwl_enable_tx_ampdu(priv->cfg))
767                         break;
768                 IWL_DEBUG_HT(priv, "start Tx\n");
769                 ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
770                 break;
771         case IEEE80211_AMPDU_TX_STOP_FLUSH:
772         case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
773                 IWL_DEBUG_HT(priv, "Flush Tx\n");
774                 ret = iwlagn_tx_agg_flush(priv, vif, sta, tid);
775                 break;
776         case IEEE80211_AMPDU_TX_STOP_CONT:
777                 IWL_DEBUG_HT(priv, "stop Tx\n");
778                 ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
779                 if ((ret == 0) && (priv->agg_tids_count > 0)) {
780                         priv->agg_tids_count--;
781                         IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
782                                      priv->agg_tids_count);
783                 }
784                 if (!priv->agg_tids_count &&
785                     priv->hw_params.use_rts_for_aggregation) {
786                         /*
787                          * switch off RTS/CTS if it was previously enabled
788                          */
789                         sta_priv->lq_sta.lq.general_params.flags &=
790                                 ~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
791                         iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
792                                         &sta_priv->lq_sta.lq, CMD_ASYNC, false);
793                 }
794                 break;
795         case IEEE80211_AMPDU_TX_OPERATIONAL:
796                 ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size);
797                 break;
798         }
799         mutex_unlock(&priv->mutex);
800         IWL_DEBUG_MAC80211(priv, "leave\n");
801         return ret;
802 }
803
804 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
805                               struct ieee80211_vif *vif,
806                               struct ieee80211_sta *sta)
807 {
808         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
809         struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
810         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
811         bool is_ap = vif->type == NL80211_IFTYPE_STATION;
812         int ret;
813         u8 sta_id;
814
815         IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
816                         sta->addr);
817         sta_priv->sta_id = IWL_INVALID_STATION;
818
819         atomic_set(&sta_priv->pending_frames, 0);
820         if (vif->type == NL80211_IFTYPE_AP)
821                 sta_priv->client = true;
822
823         ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
824                                      is_ap, sta, &sta_id);
825         if (ret) {
826                 IWL_ERR(priv, "Unable to add station %pM (%d)\n",
827                         sta->addr, ret);
828                 /* Should we return success if return code is EEXIST ? */
829                 return ret;
830         }
831
832         sta_priv->sta_id = sta_id;
833
834         return 0;
835 }
836
837 static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw,
838                                  struct ieee80211_vif *vif,
839                                  struct ieee80211_sta *sta)
840 {
841         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
842         struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
843         int ret;
844
845         IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr);
846
847         if (vif->type == NL80211_IFTYPE_STATION) {
848                 /*
849                  * Station will be removed from device when the RXON
850                  * is set to unassociated -- just deactivate it here
851                  * to avoid re-programming it.
852                  */
853                 ret = 0;
854                 iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr);
855         } else {
856                 ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr);
857                 if (ret)
858                         IWL_DEBUG_QUIET_RFKILL(priv,
859                                 "Error removing station %pM\n", sta->addr);
860         }
861         return ret;
862 }
863
864 static int iwlagn_mac_sta_state(struct ieee80211_hw *hw,
865                                 struct ieee80211_vif *vif,
866                                 struct ieee80211_sta *sta,
867                                 enum ieee80211_sta_state old_state,
868                                 enum ieee80211_sta_state new_state)
869 {
870         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
871         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
872         enum {
873                 NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT,
874         } op = NONE;
875         int ret;
876
877         IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n",
878                            sta->addr, old_state, new_state);
879
880         mutex_lock(&priv->mutex);
881         if (vif->type == NL80211_IFTYPE_STATION) {
882                 if (old_state == IEEE80211_STA_NOTEXIST &&
883                     new_state == IEEE80211_STA_NONE)
884                         op = ADD;
885                 else if (old_state == IEEE80211_STA_NONE &&
886                          new_state == IEEE80211_STA_NOTEXIST)
887                         op = REMOVE;
888                 else if (old_state == IEEE80211_STA_AUTH &&
889                          new_state == IEEE80211_STA_ASSOC)
890                         op = HT_RATE_INIT;
891         } else {
892                 if (old_state == IEEE80211_STA_AUTH &&
893                     new_state == IEEE80211_STA_ASSOC)
894                         op = ADD_RATE_INIT;
895                 else if (old_state == IEEE80211_STA_ASSOC &&
896                          new_state == IEEE80211_STA_AUTH)
897                         op = REMOVE;
898         }
899
900         switch (op) {
901         case ADD:
902                 ret = iwlagn_mac_sta_add(hw, vif, sta);
903                 if (ret)
904                         break;
905                 /*
906                  * Clear the in-progress flag, the AP station entry was added
907                  * but we'll initialize LQ only when we've associated (which
908                  * would also clear the in-progress flag). This is necessary
909                  * in case we never initialize LQ because association fails.
910                  */
911                 spin_lock_bh(&priv->sta_lock);
912                 priv->stations[iwl_sta_id(sta)].used &=
913                         ~IWL_STA_UCODE_INPROGRESS;
914                 spin_unlock_bh(&priv->sta_lock);
915                 break;
916         case REMOVE:
917                 ret = iwlagn_mac_sta_remove(hw, vif, sta);
918                 break;
919         case ADD_RATE_INIT:
920                 ret = iwlagn_mac_sta_add(hw, vif, sta);
921                 if (ret)
922                         break;
923                 /* Initialize rate scaling */
924                 IWL_DEBUG_INFO(priv,
925                                "Initializing rate scaling for station %pM\n",
926                                sta->addr);
927                 iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
928                 ret = 0;
929                 break;
930         case HT_RATE_INIT:
931                 /* Initialize rate scaling */
932                 ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta);
933                 if (ret)
934                         break;
935                 IWL_DEBUG_INFO(priv,
936                                "Initializing rate scaling for station %pM\n",
937                                sta->addr);
938                 iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
939                 ret = 0;
940                 break;
941         default:
942                 ret = 0;
943                 break;
944         }
945
946         /*
947          * mac80211 might WARN if we fail, but due the way we
948          * (badly) handle hard rfkill, we might fail here
949          */
950         if (iwl_is_rfkill(priv))
951                 ret = 0;
952
953         mutex_unlock(&priv->mutex);
954         IWL_DEBUG_MAC80211(priv, "leave\n");
955
956         return ret;
957 }
958
959 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
960                                       struct ieee80211_vif *vif,
961                                       struct ieee80211_channel_switch *ch_switch)
962 {
963         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
964         struct ieee80211_conf *conf = &hw->conf;
965         struct ieee80211_channel *channel = ch_switch->chandef.chan;
966         struct iwl_ht_config *ht_conf = &priv->current_ht_config;
967         /*
968          * MULTI-FIXME
969          * When we add support for multiple interfaces, we need to
970          * revisit this. The channel switch command in the device
971          * only affects the BSS context, but what does that really
972          * mean? And what if we get a CSA on the second interface?
973          * This needs a lot of work.
974          */
975         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
976         u16 ch;
977
978         IWL_DEBUG_MAC80211(priv, "enter\n");
979
980         mutex_lock(&priv->mutex);
981
982         if (iwl_is_rfkill(priv))
983                 goto out;
984
985         if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
986             test_bit(STATUS_SCANNING, &priv->status) ||
987             test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
988                 goto out;
989
990         if (!iwl_is_associated_ctx(ctx))
991                 goto out;
992
993         if (!priv->lib->set_channel_switch)
994                 goto out;
995
996         ch = channel->hw_value;
997         if (le16_to_cpu(ctx->active.channel) == ch)
998                 goto out;
999
1000         priv->current_ht_config.smps = conf->smps_mode;
1001
1002         /* Configure HT40 channels */
1003         switch (cfg80211_get_chandef_type(&ch_switch->chandef)) {
1004         case NL80211_CHAN_NO_HT:
1005         case NL80211_CHAN_HT20:
1006                 ctx->ht.is_40mhz = false;
1007                 ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1008                 break;
1009         case NL80211_CHAN_HT40MINUS:
1010                 ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1011                 ctx->ht.is_40mhz = true;
1012                 break;
1013         case NL80211_CHAN_HT40PLUS:
1014                 ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
1015                 ctx->ht.is_40mhz = true;
1016                 break;
1017         }
1018
1019         if ((le16_to_cpu(ctx->staging.channel) != ch))
1020                 ctx->staging.flags = 0;
1021
1022         iwl_set_rxon_channel(priv, channel, ctx);
1023         iwl_set_rxon_ht(priv, ht_conf);
1024         iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
1025
1026         /*
1027          * at this point, staging_rxon has the
1028          * configuration for channel switch
1029          */
1030         set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1031         priv->switch_channel = cpu_to_le16(ch);
1032         if (priv->lib->set_channel_switch(priv, ch_switch)) {
1033                 clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1034                 priv->switch_channel = 0;
1035                 ieee80211_chswitch_done(ctx->vif, false);
1036         }
1037
1038 out:
1039         mutex_unlock(&priv->mutex);
1040         IWL_DEBUG_MAC80211(priv, "leave\n");
1041 }
1042
1043 void iwl_chswitch_done(struct iwl_priv *priv, bool is_success)
1044 {
1045         /*
1046          * MULTI-FIXME
1047          * See iwlagn_mac_channel_switch.
1048          */
1049         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1050
1051         if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1052                 return;
1053
1054         if (!test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1055                 return;
1056
1057         if (ctx->vif)
1058                 ieee80211_chswitch_done(ctx->vif, is_success);
1059 }
1060
1061 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
1062                                     unsigned int changed_flags,
1063                                     unsigned int *total_flags,
1064                                     u64 multicast)
1065 {
1066         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1067         __le32 filter_or = 0, filter_nand = 0;
1068         struct iwl_rxon_context *ctx;
1069
1070 #define CHK(test, flag) do { \
1071         if (*total_flags & (test))              \
1072                 filter_or |= (flag);            \
1073         else                                    \
1074                 filter_nand |= (flag);          \
1075         } while (0)
1076
1077         IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
1078                         changed_flags, *total_flags);
1079
1080         CHK(FIF_OTHER_BSS, RXON_FILTER_PROMISC_MSK);
1081         /* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
1082         CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
1083         CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
1084
1085 #undef CHK
1086
1087         mutex_lock(&priv->mutex);
1088
1089         for_each_context(priv, ctx) {
1090                 ctx->staging.filter_flags &= ~filter_nand;
1091                 ctx->staging.filter_flags |= filter_or;
1092
1093                 /*
1094                  * Not committing directly because hardware can perform a scan,
1095                  * but we'll eventually commit the filter flags change anyway.
1096                  */
1097         }
1098
1099         mutex_unlock(&priv->mutex);
1100
1101         /*
1102          * Receiving all multicast frames is always enabled by the
1103          * default flags setup in iwl_connection_init_rx_config()
1104          * since we currently do not support programming multicast
1105          * filters into the device.
1106          */
1107         *total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI |
1108                         FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
1109 }
1110
1111 static void iwlagn_mac_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1112                              u32 queues, bool drop)
1113 {
1114         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1115         u32 scd_queues;
1116
1117         mutex_lock(&priv->mutex);
1118         IWL_DEBUG_MAC80211(priv, "enter\n");
1119
1120         if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
1121                 IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
1122                 goto done;
1123         }
1124         if (iwl_is_rfkill(priv)) {
1125                 IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
1126                 goto done;
1127         }
1128
1129         scd_queues = BIT(priv->cfg->base_params->num_of_queues) - 1;
1130         scd_queues &= ~(BIT(IWL_IPAN_CMD_QUEUE_NUM) |
1131                         BIT(IWL_DEFAULT_CMD_QUEUE_NUM));
1132
1133         if (drop) {
1134                 IWL_DEBUG_TX_QUEUES(priv, "Flushing SCD queues: 0x%x\n",
1135                                     scd_queues);
1136                 if (iwlagn_txfifo_flush(priv, scd_queues)) {
1137                         IWL_ERR(priv, "flush request fail\n");
1138                         goto done;
1139                 }
1140         }
1141
1142         IWL_DEBUG_TX_QUEUES(priv, "wait transmit/flush all frames\n");
1143         iwl_trans_wait_tx_queue_empty(priv->trans, scd_queues);
1144 done:
1145         mutex_unlock(&priv->mutex);
1146         IWL_DEBUG_MAC80211(priv, "leave\n");
1147 }
1148
1149 static void iwlagn_mac_event_callback(struct ieee80211_hw *hw,
1150                                       struct ieee80211_vif *vif,
1151                                       const struct ieee80211_event *event)
1152 {
1153         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1154
1155         if (event->type != RSSI_EVENT)
1156                 return;
1157
1158         IWL_DEBUG_MAC80211(priv, "enter\n");
1159
1160         if (priv->lib->bt_params &&
1161             priv->lib->bt_params->advanced_bt_coexist) {
1162                 if (event->u.rssi.data == RSSI_EVENT_LOW)
1163                         priv->bt_enable_pspoll = true;
1164                 else if (event->u.rssi.data == RSSI_EVENT_HIGH)
1165                         priv->bt_enable_pspoll = false;
1166
1167                 queue_work(priv->workqueue, &priv->bt_runtime_config);
1168         } else {
1169                 IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
1170                                 "ignoring RSSI callback\n");
1171         }
1172
1173         IWL_DEBUG_MAC80211(priv, "leave\n");
1174 }
1175
1176 static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
1177                               struct ieee80211_sta *sta, bool set)
1178 {
1179         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1180
1181         queue_work(priv->workqueue, &priv->beacon_update);
1182
1183         return 0;
1184 }
1185
1186 static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw,
1187                               struct ieee80211_vif *vif, u16 queue,
1188                               const struct ieee80211_tx_queue_params *params)
1189 {
1190         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1191         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1192         struct iwl_rxon_context *ctx = vif_priv->ctx;
1193         int q;
1194
1195         if (WARN_ON(!ctx))
1196                 return -EINVAL;
1197
1198         IWL_DEBUG_MAC80211(priv, "enter\n");
1199
1200         if (!iwl_is_ready_rf(priv)) {
1201                 IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n");
1202                 return -EIO;
1203         }
1204
1205         if (queue >= AC_NUM) {
1206                 IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue);
1207                 return 0;
1208         }
1209
1210         q = AC_NUM - 1 - queue;
1211
1212         mutex_lock(&priv->mutex);
1213
1214         ctx->qos_data.def_qos_parm.ac[q].cw_min =
1215                 cpu_to_le16(params->cw_min);
1216         ctx->qos_data.def_qos_parm.ac[q].cw_max =
1217                 cpu_to_le16(params->cw_max);
1218         ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
1219         ctx->qos_data.def_qos_parm.ac[q].edca_txop =
1220                         cpu_to_le16((params->txop * 32));
1221
1222         ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0;
1223
1224         mutex_unlock(&priv->mutex);
1225
1226         IWL_DEBUG_MAC80211(priv, "leave\n");
1227         return 0;
1228 }
1229
1230 static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw)
1231 {
1232         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1233
1234         return priv->ibss_manager == IWL_IBSS_MANAGER;
1235 }
1236
1237 static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1238 {
1239         iwl_connection_init_rx_config(priv, ctx);
1240
1241         iwlagn_set_rxon_chain(priv, ctx);
1242
1243         return iwlagn_commit_rxon(priv, ctx);
1244 }
1245
1246 static int iwl_setup_interface(struct iwl_priv *priv,
1247                                struct iwl_rxon_context *ctx)
1248 {
1249         struct ieee80211_vif *vif = ctx->vif;
1250         int err, ac;
1251
1252         lockdep_assert_held(&priv->mutex);
1253
1254         /*
1255          * This variable will be correct only when there's just
1256          * a single context, but all code using it is for hardware
1257          * that supports only one context.
1258          */
1259         priv->iw_mode = vif->type;
1260
1261         ctx->is_active = true;
1262
1263         err = iwl_set_mode(priv, ctx);
1264         if (err) {
1265                 if (!ctx->always_active)
1266                         ctx->is_active = false;
1267                 return err;
1268         }
1269
1270         if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist &&
1271             vif->type == NL80211_IFTYPE_ADHOC) {
1272                 /*
1273                  * pretend to have high BT traffic as long as we
1274                  * are operating in IBSS mode, as this will cause
1275                  * the rate scaling etc. to behave as intended.
1276                  */
1277                 priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1278         }
1279
1280         /* set up queue mappings */
1281         for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
1282                 vif->hw_queue[ac] = ctx->ac_to_queue[ac];
1283
1284         if (vif->type == NL80211_IFTYPE_AP)
1285                 vif->cab_queue = ctx->mcast_queue;
1286         else
1287                 vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
1288
1289         return 0;
1290 }
1291
1292 static int iwlagn_mac_add_interface(struct ieee80211_hw *hw,
1293                                     struct ieee80211_vif *vif)
1294 {
1295         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1296         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1297         struct iwl_rxon_context *tmp, *ctx = NULL;
1298         int err;
1299         enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif);
1300         bool reset = false;
1301
1302         IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n",
1303                            viftype, vif->addr);
1304
1305         mutex_lock(&priv->mutex);
1306
1307         if (!iwl_is_ready_rf(priv)) {
1308                 IWL_WARN(priv, "Try to add interface when device not ready\n");
1309                 err = -EINVAL;
1310                 goto out;
1311         }
1312
1313         for_each_context(priv, tmp) {
1314                 u32 possible_modes =
1315                         tmp->interface_modes | tmp->exclusive_interface_modes;
1316
1317                 if (tmp->vif) {
1318                         /* On reset we need to add the same interface again */
1319                         if (tmp->vif == vif) {
1320                                 reset = true;
1321                                 ctx = tmp;
1322                                 break;
1323                         }
1324
1325                         /* check if this busy context is exclusive */
1326                         if (tmp->exclusive_interface_modes &
1327                                                 BIT(tmp->vif->type)) {
1328                                 err = -EINVAL;
1329                                 goto out;
1330                         }
1331                         continue;
1332                 }
1333
1334                 if (!(possible_modes & BIT(viftype)))
1335                         continue;
1336
1337                 /* have maybe usable context w/o interface */
1338                 ctx = tmp;
1339                 break;
1340         }
1341
1342         if (!ctx) {
1343                 err = -EOPNOTSUPP;
1344                 goto out;
1345         }
1346
1347         vif_priv->ctx = ctx;
1348         ctx->vif = vif;
1349
1350         /*
1351          * In SNIFFER device type, the firmware reports the FCS to
1352          * the host, rather than snipping it off. Unfortunately,
1353          * mac80211 doesn't (yet) provide a per-packet flag for
1354          * this, so that we have to set the hardware flag based
1355          * on the interfaces added. As the monitor interface can
1356          * only be present by itself, and will be removed before
1357          * other interfaces are added, this is safe.
1358          */
1359         if (vif->type == NL80211_IFTYPE_MONITOR)
1360                 ieee80211_hw_set(priv->hw, RX_INCLUDES_FCS);
1361         else
1362                 __clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, priv->hw->flags);
1363
1364         err = iwl_setup_interface(priv, ctx);
1365         if (!err || reset)
1366                 goto out;
1367
1368         ctx->vif = NULL;
1369         priv->iw_mode = NL80211_IFTYPE_STATION;
1370  out:
1371         mutex_unlock(&priv->mutex);
1372
1373         IWL_DEBUG_MAC80211(priv, "leave\n");
1374         return err;
1375 }
1376
1377 static void iwl_teardown_interface(struct iwl_priv *priv,
1378                                    struct ieee80211_vif *vif,
1379                                    bool mode_change)
1380 {
1381         struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1382
1383         lockdep_assert_held(&priv->mutex);
1384
1385         if (priv->scan_vif == vif) {
1386                 iwl_scan_cancel_timeout(priv, 200);
1387                 iwl_force_scan_end(priv);
1388         }
1389
1390         if (!mode_change) {
1391                 iwl_set_mode(priv, ctx);
1392                 if (!ctx->always_active)
1393                         ctx->is_active = false;
1394         }
1395
1396         /*
1397          * When removing the IBSS interface, overwrite the
1398          * BT traffic load with the stored one from the last
1399          * notification, if any. If this is a device that
1400          * doesn't implement this, this has no effect since
1401          * both values are the same and zero.
1402          */
1403         if (vif->type == NL80211_IFTYPE_ADHOC)
1404                 priv->bt_traffic_load = priv->last_bt_traffic_load;
1405 }
1406
1407 static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw,
1408                               struct ieee80211_vif *vif)
1409 {
1410         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1411         struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1412
1413         IWL_DEBUG_MAC80211(priv, "enter\n");
1414
1415         mutex_lock(&priv->mutex);
1416
1417         if (WARN_ON(ctx->vif != vif)) {
1418                 struct iwl_rxon_context *tmp;
1419                 IWL_ERR(priv, "ctx->vif = %p, vif = %p\n", ctx->vif, vif);
1420                 for_each_context(priv, tmp)
1421                         IWL_ERR(priv, "\tID = %d:\tctx = %p\tctx->vif = %p\n",
1422                                 tmp->ctxid, tmp, tmp->vif);
1423         }
1424         ctx->vif = NULL;
1425
1426         iwl_teardown_interface(priv, vif, false);
1427
1428         mutex_unlock(&priv->mutex);
1429
1430         IWL_DEBUG_MAC80211(priv, "leave\n");
1431
1432 }
1433
1434 static int iwlagn_mac_change_interface(struct ieee80211_hw *hw,
1435                                        struct ieee80211_vif *vif,
1436                                        enum nl80211_iftype newtype, bool newp2p)
1437 {
1438         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1439         struct iwl_rxon_context *ctx, *tmp;
1440         enum nl80211_iftype newviftype = newtype;
1441         u32 interface_modes;
1442         int err;
1443
1444         IWL_DEBUG_MAC80211(priv, "enter\n");
1445
1446         newtype = ieee80211_iftype_p2p(newtype, newp2p);
1447
1448         mutex_lock(&priv->mutex);
1449
1450         ctx = iwl_rxon_ctx_from_vif(vif);
1451
1452         /*
1453          * To simplify this code, only support changes on the
1454          * BSS context. The PAN context is usually reassigned
1455          * by creating/removing P2P interfaces anyway.
1456          */
1457         if (ctx->ctxid != IWL_RXON_CTX_BSS) {
1458                 err = -EBUSY;
1459                 goto out;
1460         }
1461
1462         if (!ctx->vif || !iwl_is_ready_rf(priv)) {
1463                 /*
1464                  * Huh? But wait ... this can maybe happen when
1465                  * we're in the middle of a firmware restart!
1466                  */
1467                 err = -EBUSY;
1468                 goto out;
1469         }
1470
1471         /* Check if the switch is supported in the same context */
1472         interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes;
1473         if (!(interface_modes & BIT(newtype))) {
1474                 err = -EBUSY;
1475                 goto out;
1476         }
1477
1478         if (ctx->exclusive_interface_modes & BIT(newtype)) {
1479                 for_each_context(priv, tmp) {
1480                         if (ctx == tmp)
1481                                 continue;
1482
1483                         if (!tmp->is_active)
1484                                 continue;
1485
1486                         /*
1487                          * The current mode switch would be exclusive, but
1488                          * another context is active ... refuse the switch.
1489                          */
1490                         err = -EBUSY;
1491                         goto out;
1492                 }
1493         }
1494
1495         /* success */
1496         iwl_teardown_interface(priv, vif, true);
1497         vif->type = newviftype;
1498         vif->p2p = newp2p;
1499         err = iwl_setup_interface(priv, ctx);
1500         WARN_ON(err);
1501         /*
1502          * We've switched internally, but submitting to the
1503          * device may have failed for some reason. Mask this
1504          * error, because otherwise mac80211 will not switch
1505          * (and set the interface type back) and we'll be
1506          * out of sync with it.
1507          */
1508         err = 0;
1509
1510  out:
1511         mutex_unlock(&priv->mutex);
1512         IWL_DEBUG_MAC80211(priv, "leave\n");
1513
1514         return err;
1515 }
1516
1517 static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw,
1518                               struct ieee80211_vif *vif,
1519                               struct ieee80211_scan_request *hw_req)
1520 {
1521         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1522         struct cfg80211_scan_request *req = &hw_req->req;
1523         int ret;
1524
1525         IWL_DEBUG_MAC80211(priv, "enter\n");
1526
1527         if (req->n_channels == 0)
1528                 return -EINVAL;
1529
1530         mutex_lock(&priv->mutex);
1531
1532         /*
1533          * If an internal scan is in progress, just set
1534          * up the scan_request as per above.
1535          */
1536         if (priv->scan_type != IWL_SCAN_NORMAL) {
1537                 IWL_DEBUG_SCAN(priv,
1538                                "SCAN request during internal scan - defer\n");
1539                 priv->scan_request = req;
1540                 priv->scan_vif = vif;
1541                 ret = 0;
1542         } else {
1543                 priv->scan_request = req;
1544                 priv->scan_vif = vif;
1545                 /*
1546                  * mac80211 will only ask for one band at a time
1547                  * so using channels[0] here is ok
1548                  */
1549                 ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL,
1550                                         req->channels[0]->band);
1551                 if (ret) {
1552                         priv->scan_request = NULL;
1553                         priv->scan_vif = NULL;
1554                 }
1555         }
1556
1557         IWL_DEBUG_MAC80211(priv, "leave\n");
1558
1559         mutex_unlock(&priv->mutex);
1560
1561         return ret;
1562 }
1563
1564 static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id)
1565 {
1566         struct iwl_addsta_cmd cmd = {
1567                 .mode = STA_CONTROL_MODIFY_MSK,
1568                 .station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1569                 .sta.sta_id = sta_id,
1570         };
1571
1572         iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1573 }
1574
1575 static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw,
1576                                   struct ieee80211_vif *vif,
1577                                   enum sta_notify_cmd cmd,
1578                                   struct ieee80211_sta *sta)
1579 {
1580         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1581         struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
1582         int sta_id;
1583
1584         IWL_DEBUG_MAC80211(priv, "enter\n");
1585
1586         switch (cmd) {
1587         case STA_NOTIFY_SLEEP:
1588                 WARN_ON(!sta_priv->client);
1589                 sta_priv->asleep = true;
1590                 if (atomic_read(&sta_priv->pending_frames) > 0)
1591                         ieee80211_sta_block_awake(hw, sta, true);
1592                 break;
1593         case STA_NOTIFY_AWAKE:
1594                 WARN_ON(!sta_priv->client);
1595                 if (!sta_priv->asleep)
1596                         break;
1597                 sta_priv->asleep = false;
1598                 sta_id = iwl_sta_id(sta);
1599                 if (sta_id != IWL_INVALID_STATION)
1600                         iwl_sta_modify_ps_wake(priv, sta_id);
1601                 break;
1602         default:
1603                 break;
1604         }
1605         IWL_DEBUG_MAC80211(priv, "leave\n");
1606 }
1607
1608 const struct ieee80211_ops iwlagn_hw_ops = {
1609         .tx = iwlagn_mac_tx,
1610         .start = iwlagn_mac_start,
1611         .stop = iwlagn_mac_stop,
1612 #ifdef CONFIG_PM_SLEEP
1613         .suspend = iwlagn_mac_suspend,
1614         .resume = iwlagn_mac_resume,
1615         .set_wakeup = iwlagn_mac_set_wakeup,
1616 #endif
1617         .add_interface = iwlagn_mac_add_interface,
1618         .remove_interface = iwlagn_mac_remove_interface,
1619         .change_interface = iwlagn_mac_change_interface,
1620         .config = iwlagn_mac_config,
1621         .configure_filter = iwlagn_configure_filter,
1622         .set_key = iwlagn_mac_set_key,
1623         .update_tkip_key = iwlagn_mac_update_tkip_key,
1624         .set_rekey_data = iwlagn_mac_set_rekey_data,
1625         .conf_tx = iwlagn_mac_conf_tx,
1626         .bss_info_changed = iwlagn_bss_info_changed,
1627         .ampdu_action = iwlagn_mac_ampdu_action,
1628         .hw_scan = iwlagn_mac_hw_scan,
1629         .sta_notify = iwlagn_mac_sta_notify,
1630         .sta_state = iwlagn_mac_sta_state,
1631         .channel_switch = iwlagn_mac_channel_switch,
1632         .flush = iwlagn_mac_flush,
1633         .tx_last_beacon = iwlagn_mac_tx_last_beacon,
1634         .event_callback = iwlagn_mac_event_callback,
1635         .set_tim = iwlagn_mac_set_tim,
1636 };
1637
1638 /* This function both allocates and initializes hw and priv. */
1639 struct ieee80211_hw *iwl_alloc_all(void)
1640 {
1641         struct iwl_priv *priv;
1642         struct iwl_op_mode *op_mode;
1643         /* mac80211 allocates memory for this device instance, including
1644          *   space for this driver's private structure */
1645         struct ieee80211_hw *hw;
1646
1647         hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) +
1648                                 sizeof(struct iwl_op_mode), &iwlagn_hw_ops);
1649         if (!hw)
1650                 goto out;
1651
1652         op_mode = hw->priv;
1653         priv = IWL_OP_MODE_GET_DVM(op_mode);
1654         priv->hw = hw;
1655
1656 out:
1657         return hw;
1658 }