2 * This file contains the handling of command.
3 * It prepares command and sends it to firmware when it is ready.
6 #include <net/iw_handler.h>
7 #include <net/lib80211.h>
8 #include <linux/kfifo.h>
18 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv);
22 * @brief Simple callback that copies response back into command
24 * @param priv A pointer to struct lbs_private structure
25 * @param extra A pointer to the original command structure for which
26 * 'resp' is a response
27 * @param resp A pointer to the command response
29 * @return 0 on success, error on failure
31 int lbs_cmd_copyback(struct lbs_private *priv, unsigned long extra,
32 struct cmd_header *resp)
34 struct cmd_header *buf = (void *)extra;
37 copy_len = min(le16_to_cpu(buf->size), le16_to_cpu(resp->size));
38 memcpy(buf, resp, copy_len);
41 EXPORT_SYMBOL_GPL(lbs_cmd_copyback);
44 * @brief Simple callback that ignores the result. Use this if
45 * you just want to send a command to the hardware, but don't
46 * care for the result.
49 * @param extra ignored
52 * @return 0 for success
54 static int lbs_cmd_async_callback(struct lbs_private *priv, unsigned long extra,
55 struct cmd_header *resp)
62 * @brief Checks whether a command is allowed in Power Save mode
64 * @param command the command ID
65 * @return 1 if allowed, 0 if not allowed
67 static u8 is_command_allowed_in_ps(u16 cmd)
79 * @brief Updates the hardware details like MAC address and regulatory region
81 * @param priv A pointer to struct lbs_private structure
83 * @return 0 on success, error on failure
85 int lbs_update_hw_spec(struct lbs_private *priv)
87 struct cmd_ds_get_hw_spec cmd;
91 lbs_deb_enter(LBS_DEB_CMD);
93 memset(&cmd, 0, sizeof(cmd));
94 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
95 memcpy(cmd.permanentaddr, priv->current_addr, ETH_ALEN);
96 ret = lbs_cmd_with_response(priv, CMD_GET_HW_SPEC, &cmd);
100 priv->fwcapinfo = le32_to_cpu(cmd.fwcapinfo);
102 /* The firmware release is in an interesting format: the patch
103 * level is in the most significant nibble ... so fix that: */
104 priv->fwrelease = le32_to_cpu(cmd.fwrelease);
105 priv->fwrelease = (priv->fwrelease << 8) |
106 (priv->fwrelease >> 24 & 0xff);
108 /* Some firmware capabilities:
109 * CF card firmware 5.0.16p0: cap 0x00000303
110 * USB dongle firmware 5.110.17p2: cap 0x00000303
112 lbs_pr_info("%pM, fw %u.%u.%up%u, cap 0x%08x\n",
114 priv->fwrelease >> 24 & 0xff,
115 priv->fwrelease >> 16 & 0xff,
116 priv->fwrelease >> 8 & 0xff,
117 priv->fwrelease & 0xff,
119 lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
120 cmd.hwifversion, cmd.version);
122 /* Determine mesh_fw_ver from fwrelease and fwcapinfo */
123 /* 5.0.16p0 9.0.0.p0 is known to NOT support any mesh */
124 /* 5.110.22 have mesh command with 0xa3 command id */
125 /* 10.0.0.p0 FW brings in mesh config command with different id */
126 /* Check FW version MSB and initialize mesh_fw_ver */
127 if (MRVL_FW_MAJOR_REV(priv->fwrelease) == MRVL_FW_V5)
128 priv->mesh_fw_ver = MESH_FW_OLD;
129 else if ((MRVL_FW_MAJOR_REV(priv->fwrelease) >= MRVL_FW_V10) &&
130 (priv->fwcapinfo & MESH_CAPINFO_ENABLE_MASK))
131 priv->mesh_fw_ver = MESH_FW_NEW;
133 priv->mesh_fw_ver = MESH_NONE;
135 /* Clamp region code to 8-bit since FW spec indicates that it should
136 * only ever be 8-bit, even though the field size is 16-bit. Some firmware
137 * returns non-zero high 8 bits here.
139 priv->regioncode = le16_to_cpu(cmd.regioncode) & 0xFF;
141 for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
142 /* use the region code to search for the index */
143 if (priv->regioncode == lbs_region_code_to_index[i])
147 /* if it's unidentified region code, use the default (USA) */
148 if (i >= MRVDRV_MAX_REGION_CODE) {
149 priv->regioncode = 0x10;
150 lbs_pr_info("unidentified region code; using the default (USA)\n");
153 if (priv->current_addr[0] == 0xff)
154 memmove(priv->current_addr, cmd.permanentaddr, ETH_ALEN);
156 memcpy(priv->dev->dev_addr, priv->current_addr, ETH_ALEN);
158 memcpy(priv->mesh_dev->dev_addr, priv->current_addr, ETH_ALEN);
160 if (lbs_set_regiontable(priv, priv->regioncode, 0)) {
165 if (lbs_set_universaltable(priv, 0)) {
171 lbs_deb_leave(LBS_DEB_CMD);
175 int lbs_host_sleep_cfg(struct lbs_private *priv, uint32_t criteria,
176 struct wol_config *p_wol_config)
178 struct cmd_ds_host_sleep cmd_config;
181 cmd_config.hdr.size = cpu_to_le16(sizeof(cmd_config));
182 cmd_config.criteria = cpu_to_le32(criteria);
183 cmd_config.gpio = priv->wol_gpio;
184 cmd_config.gap = priv->wol_gap;
186 if (p_wol_config != NULL)
187 memcpy((uint8_t *)&cmd_config.wol_conf, (uint8_t *)p_wol_config,
188 sizeof(struct wol_config));
190 cmd_config.wol_conf.action = CMD_ACT_ACTION_NONE;
192 ret = lbs_cmd_with_response(priv, CMD_802_11_HOST_SLEEP_CFG, &cmd_config);
195 lbs_deb_cmd("Set WOL criteria to %x\n", criteria);
196 priv->wol_criteria = criteria;
198 memcpy((uint8_t *) p_wol_config,
199 (uint8_t *)&cmd_config.wol_conf,
200 sizeof(struct wol_config));
202 lbs_pr_info("HOST_SLEEP_CFG failed %d\n", ret);
207 EXPORT_SYMBOL_GPL(lbs_host_sleep_cfg);
209 static int lbs_cmd_802_11_ps_mode(struct cmd_ds_command *cmd,
212 struct cmd_ds_802_11_ps_mode *psm = &cmd->params.psmode;
214 lbs_deb_enter(LBS_DEB_CMD);
216 cmd->command = cpu_to_le16(CMD_802_11_PS_MODE);
217 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_ps_mode) +
219 psm->action = cpu_to_le16(cmd_action);
220 psm->multipledtim = 0;
221 switch (cmd_action) {
222 case CMD_SUBCMD_ENTER_PS:
223 lbs_deb_cmd("PS command:" "SubCode- Enter PS\n");
225 psm->locallisteninterval = 0;
226 psm->nullpktinterval = 0;
228 cpu_to_le16(MRVDRV_DEFAULT_MULTIPLE_DTIM);
231 case CMD_SUBCMD_EXIT_PS:
232 lbs_deb_cmd("PS command:" "SubCode- Exit PS\n");
235 case CMD_SUBCMD_SLEEP_CONFIRMED:
236 lbs_deb_cmd("PS command: SubCode- sleep confirm\n");
243 lbs_deb_leave(LBS_DEB_CMD);
247 int lbs_cmd_802_11_inactivity_timeout(struct lbs_private *priv,
248 uint16_t cmd_action, uint16_t *timeout)
250 struct cmd_ds_802_11_inactivity_timeout cmd;
253 lbs_deb_enter(LBS_DEB_CMD);
255 cmd.hdr.command = cpu_to_le16(CMD_802_11_INACTIVITY_TIMEOUT);
256 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
258 cmd.action = cpu_to_le16(cmd_action);
260 if (cmd_action == CMD_ACT_SET)
261 cmd.timeout = cpu_to_le16(*timeout);
265 ret = lbs_cmd_with_response(priv, CMD_802_11_INACTIVITY_TIMEOUT, &cmd);
268 *timeout = le16_to_cpu(cmd.timeout);
270 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
274 int lbs_cmd_802_11_sleep_params(struct lbs_private *priv, uint16_t cmd_action,
275 struct sleep_params *sp)
277 struct cmd_ds_802_11_sleep_params cmd;
280 lbs_deb_enter(LBS_DEB_CMD);
282 if (cmd_action == CMD_ACT_GET) {
283 memset(&cmd, 0, sizeof(cmd));
285 cmd.error = cpu_to_le16(sp->sp_error);
286 cmd.offset = cpu_to_le16(sp->sp_offset);
287 cmd.stabletime = cpu_to_le16(sp->sp_stabletime);
288 cmd.calcontrol = sp->sp_calcontrol;
289 cmd.externalsleepclk = sp->sp_extsleepclk;
290 cmd.reserved = cpu_to_le16(sp->sp_reserved);
292 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
293 cmd.action = cpu_to_le16(cmd_action);
295 ret = lbs_cmd_with_response(priv, CMD_802_11_SLEEP_PARAMS, &cmd);
298 lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, "
299 "calcontrol 0x%x extsleepclk 0x%x\n",
300 le16_to_cpu(cmd.error), le16_to_cpu(cmd.offset),
301 le16_to_cpu(cmd.stabletime), cmd.calcontrol,
302 cmd.externalsleepclk);
304 sp->sp_error = le16_to_cpu(cmd.error);
305 sp->sp_offset = le16_to_cpu(cmd.offset);
306 sp->sp_stabletime = le16_to_cpu(cmd.stabletime);
307 sp->sp_calcontrol = cmd.calcontrol;
308 sp->sp_extsleepclk = cmd.externalsleepclk;
309 sp->sp_reserved = le16_to_cpu(cmd.reserved);
312 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
316 int lbs_cmd_802_11_set_wep(struct lbs_private *priv, uint16_t cmd_action,
317 struct assoc_request *assoc)
319 struct cmd_ds_802_11_set_wep cmd;
322 lbs_deb_enter(LBS_DEB_CMD);
324 memset(&cmd, 0, sizeof(cmd));
325 cmd.hdr.command = cpu_to_le16(CMD_802_11_SET_WEP);
326 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
328 cmd.action = cpu_to_le16(cmd_action);
330 if (cmd_action == CMD_ACT_ADD) {
333 /* default tx key index */
334 cmd.keyindex = cpu_to_le16(assoc->wep_tx_keyidx &
335 CMD_WEP_KEY_INDEX_MASK);
337 /* Copy key types and material to host command structure */
338 for (i = 0; i < 4; i++) {
339 struct enc_key *pkey = &assoc->wep_keys[i];
343 cmd.keytype[i] = CMD_TYPE_WEP_40_BIT;
344 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
345 lbs_deb_cmd("SET_WEP: add key %d (40 bit)\n", i);
347 case KEY_LEN_WEP_104:
348 cmd.keytype[i] = CMD_TYPE_WEP_104_BIT;
349 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
350 lbs_deb_cmd("SET_WEP: add key %d (104 bit)\n", i);
355 lbs_deb_cmd("SET_WEP: invalid key %d, length %d\n",
362 } else if (cmd_action == CMD_ACT_REMOVE) {
363 /* ACT_REMOVE clears _all_ WEP keys */
365 /* default tx key index */
366 cmd.keyindex = cpu_to_le16(priv->wep_tx_keyidx &
367 CMD_WEP_KEY_INDEX_MASK);
368 lbs_deb_cmd("SET_WEP: remove key %d\n", priv->wep_tx_keyidx);
371 ret = lbs_cmd_with_response(priv, CMD_802_11_SET_WEP, &cmd);
373 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
377 int lbs_cmd_802_11_enable_rsn(struct lbs_private *priv, uint16_t cmd_action,
380 struct cmd_ds_802_11_enable_rsn cmd;
383 lbs_deb_enter(LBS_DEB_CMD);
385 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
386 cmd.action = cpu_to_le16(cmd_action);
388 if (cmd_action == CMD_ACT_GET)
392 cmd.enable = cpu_to_le16(CMD_ENABLE_RSN);
394 cmd.enable = cpu_to_le16(CMD_DISABLE_RSN);
395 lbs_deb_cmd("ENABLE_RSN: %d\n", *enable);
398 ret = lbs_cmd_with_response(priv, CMD_802_11_ENABLE_RSN, &cmd);
399 if (!ret && cmd_action == CMD_ACT_GET)
400 *enable = le16_to_cpu(cmd.enable);
402 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
406 static void set_one_wpa_key(struct MrvlIEtype_keyParamSet *keyparam,
409 lbs_deb_enter(LBS_DEB_CMD);
411 if (key->flags & KEY_INFO_WPA_ENABLED)
412 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_ENABLED);
413 if (key->flags & KEY_INFO_WPA_UNICAST)
414 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_UNICAST);
415 if (key->flags & KEY_INFO_WPA_MCAST)
416 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_MCAST);
418 keyparam->type = cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
419 keyparam->keytypeid = cpu_to_le16(key->type);
420 keyparam->keylen = cpu_to_le16(key->len);
421 memcpy(keyparam->key, key->key, key->len);
423 /* Length field doesn't include the {type,length} header */
424 keyparam->length = cpu_to_le16(sizeof(*keyparam) - 4);
425 lbs_deb_leave(LBS_DEB_CMD);
428 int lbs_cmd_802_11_key_material(struct lbs_private *priv, uint16_t cmd_action,
429 struct assoc_request *assoc)
431 struct cmd_ds_802_11_key_material cmd;
435 lbs_deb_enter(LBS_DEB_CMD);
437 cmd.action = cpu_to_le16(cmd_action);
438 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
440 if (cmd_action == CMD_ACT_GET) {
441 cmd.hdr.size = cpu_to_le16(S_DS_GEN + 2);
443 memset(cmd.keyParamSet, 0, sizeof(cmd.keyParamSet));
445 if (test_bit(ASSOC_FLAG_WPA_UCAST_KEY, &assoc->flags)) {
446 set_one_wpa_key(&cmd.keyParamSet[index],
447 &assoc->wpa_unicast_key);
451 if (test_bit(ASSOC_FLAG_WPA_MCAST_KEY, &assoc->flags)) {
452 set_one_wpa_key(&cmd.keyParamSet[index],
453 &assoc->wpa_mcast_key);
457 /* The common header and as many keys as we included */
458 cmd.hdr.size = cpu_to_le16(offsetof(typeof(cmd),
459 keyParamSet[index]));
461 ret = lbs_cmd_with_response(priv, CMD_802_11_KEY_MATERIAL, &cmd);
462 /* Copy the returned key to driver private data */
463 if (!ret && cmd_action == CMD_ACT_GET) {
464 void *buf_ptr = cmd.keyParamSet;
465 void *resp_end = &(&cmd)[1];
467 while (buf_ptr < resp_end) {
468 struct MrvlIEtype_keyParamSet *keyparam = buf_ptr;
470 uint16_t param_set_len = le16_to_cpu(keyparam->length);
471 uint16_t key_len = le16_to_cpu(keyparam->keylen);
472 uint16_t key_flags = le16_to_cpu(keyparam->keyinfo);
473 uint16_t key_type = le16_to_cpu(keyparam->keytypeid);
476 end = (void *)keyparam + sizeof(keyparam->type)
477 + sizeof(keyparam->length) + param_set_len;
479 /* Make sure we don't access past the end of the IEs */
483 if (key_flags & KEY_INFO_WPA_UNICAST)
484 key = &priv->wpa_unicast_key;
485 else if (key_flags & KEY_INFO_WPA_MCAST)
486 key = &priv->wpa_mcast_key;
490 /* Copy returned key into driver */
491 memset(key, 0, sizeof(struct enc_key));
492 if (key_len > sizeof(key->key))
494 key->type = key_type;
495 key->flags = key_flags;
497 memcpy(key->key, keyparam->key, key->len);
503 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
508 * @brief Set an SNMP MIB value
510 * @param priv A pointer to struct lbs_private structure
511 * @param oid The OID to set in the firmware
512 * @param val Value to set the OID to
514 * @return 0 on success, error on failure
516 int lbs_set_snmp_mib(struct lbs_private *priv, u32 oid, u16 val)
518 struct cmd_ds_802_11_snmp_mib cmd;
521 lbs_deb_enter(LBS_DEB_CMD);
523 memset(&cmd, 0, sizeof (cmd));
524 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
525 cmd.action = cpu_to_le16(CMD_ACT_SET);
526 cmd.oid = cpu_to_le16((u16) oid);
529 case SNMP_MIB_OID_BSS_TYPE:
530 cmd.bufsize = cpu_to_le16(sizeof(u8));
531 cmd.value[0] = (val == IW_MODE_ADHOC) ? 2 : 1;
533 case SNMP_MIB_OID_11D_ENABLE:
534 case SNMP_MIB_OID_FRAG_THRESHOLD:
535 case SNMP_MIB_OID_RTS_THRESHOLD:
536 case SNMP_MIB_OID_SHORT_RETRY_LIMIT:
537 case SNMP_MIB_OID_LONG_RETRY_LIMIT:
538 cmd.bufsize = cpu_to_le16(sizeof(u16));
539 *((__le16 *)(&cmd.value)) = cpu_to_le16(val);
542 lbs_deb_cmd("SNMP_CMD: (set) unhandled OID 0x%x\n", oid);
547 lbs_deb_cmd("SNMP_CMD: (set) oid 0x%x, oid size 0x%x, value 0x%x\n",
548 le16_to_cpu(cmd.oid), le16_to_cpu(cmd.bufsize), val);
550 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
553 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
558 * @brief Get an SNMP MIB value
560 * @param priv A pointer to struct lbs_private structure
561 * @param oid The OID to retrieve from the firmware
562 * @param out_val Location for the returned value
564 * @return 0 on success, error on failure
566 int lbs_get_snmp_mib(struct lbs_private *priv, u32 oid, u16 *out_val)
568 struct cmd_ds_802_11_snmp_mib cmd;
571 lbs_deb_enter(LBS_DEB_CMD);
573 memset(&cmd, 0, sizeof (cmd));
574 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
575 cmd.action = cpu_to_le16(CMD_ACT_GET);
576 cmd.oid = cpu_to_le16(oid);
578 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
582 switch (le16_to_cpu(cmd.bufsize)) {
584 if (oid == SNMP_MIB_OID_BSS_TYPE) {
585 if (cmd.value[0] == 2)
586 *out_val = IW_MODE_ADHOC;
588 *out_val = IW_MODE_INFRA;
590 *out_val = cmd.value[0];
593 *out_val = le16_to_cpu(*((__le16 *)(&cmd.value)));
596 lbs_deb_cmd("SNMP_CMD: (get) unhandled OID 0x%x size %d\n",
597 oid, le16_to_cpu(cmd.bufsize));
602 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
607 * @brief Get the min, max, and current TX power
609 * @param priv A pointer to struct lbs_private structure
610 * @param curlevel Current power level in dBm
611 * @param minlevel Minimum supported power level in dBm (optional)
612 * @param maxlevel Maximum supported power level in dBm (optional)
614 * @return 0 on success, error on failure
616 int lbs_get_tx_power(struct lbs_private *priv, s16 *curlevel, s16 *minlevel,
619 struct cmd_ds_802_11_rf_tx_power cmd;
622 lbs_deb_enter(LBS_DEB_CMD);
624 memset(&cmd, 0, sizeof(cmd));
625 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
626 cmd.action = cpu_to_le16(CMD_ACT_GET);
628 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
630 *curlevel = le16_to_cpu(cmd.curlevel);
632 *minlevel = cmd.minlevel;
634 *maxlevel = cmd.maxlevel;
637 lbs_deb_leave(LBS_DEB_CMD);
642 * @brief Set the TX power
644 * @param priv A pointer to struct lbs_private structure
645 * @param dbm The desired power level in dBm
647 * @return 0 on success, error on failure
649 int lbs_set_tx_power(struct lbs_private *priv, s16 dbm)
651 struct cmd_ds_802_11_rf_tx_power cmd;
654 lbs_deb_enter(LBS_DEB_CMD);
656 memset(&cmd, 0, sizeof(cmd));
657 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
658 cmd.action = cpu_to_le16(CMD_ACT_SET);
659 cmd.curlevel = cpu_to_le16(dbm);
661 lbs_deb_cmd("SET_RF_TX_POWER: %d dBm\n", dbm);
663 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
665 lbs_deb_leave(LBS_DEB_CMD);
669 static int lbs_cmd_802_11_monitor_mode(struct cmd_ds_command *cmd,
670 u16 cmd_action, void *pdata_buf)
672 struct cmd_ds_802_11_monitor_mode *monitor = &cmd->params.monitor;
674 cmd->command = cpu_to_le16(CMD_802_11_MONITOR_MODE);
676 cpu_to_le16(sizeof(struct cmd_ds_802_11_monitor_mode) +
679 monitor->action = cpu_to_le16(cmd_action);
680 if (cmd_action == CMD_ACT_SET) {
682 cpu_to_le16((u16) (*(u32 *) pdata_buf));
688 static __le16 lbs_rate_to_fw_bitmap(int rate, int lower_rates_ok)
708 int i = lbs_data_rate_to_fw_index(rate);
710 ratemask = (0x1fef >> (12 - i));
713 return cpu_to_le16(ratemask);
716 int lbs_cmd_802_11_rate_adapt_rateset(struct lbs_private *priv,
719 struct cmd_ds_802_11_rate_adapt_rateset cmd;
722 lbs_deb_enter(LBS_DEB_CMD);
724 if (!priv->cur_rate && !priv->enablehwauto)
727 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
729 cmd.action = cpu_to_le16(cmd_action);
730 cmd.enablehwauto = cpu_to_le16(priv->enablehwauto);
731 cmd.bitmap = lbs_rate_to_fw_bitmap(priv->cur_rate, priv->enablehwauto);
732 ret = lbs_cmd_with_response(priv, CMD_802_11_RATE_ADAPT_RATESET, &cmd);
733 if (!ret && cmd_action == CMD_ACT_GET) {
734 priv->ratebitmap = le16_to_cpu(cmd.bitmap);
735 priv->enablehwauto = le16_to_cpu(cmd.enablehwauto);
738 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
741 EXPORT_SYMBOL_GPL(lbs_cmd_802_11_rate_adapt_rateset);
744 * @brief Set the data rate
746 * @param priv A pointer to struct lbs_private structure
747 * @param rate The desired data rate, or 0 to clear a locked rate
749 * @return 0 on success, error on failure
751 int lbs_set_data_rate(struct lbs_private *priv, u8 rate)
753 struct cmd_ds_802_11_data_rate cmd;
756 lbs_deb_enter(LBS_DEB_CMD);
758 memset(&cmd, 0, sizeof(cmd));
759 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
762 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_FIX_RATE);
763 cmd.rates[0] = lbs_data_rate_to_fw_index(rate);
764 if (cmd.rates[0] == 0) {
765 lbs_deb_cmd("DATA_RATE: invalid requested rate of"
770 lbs_deb_cmd("DATA_RATE: set fixed 0x%02X\n", cmd.rates[0]);
772 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_AUTO);
773 lbs_deb_cmd("DATA_RATE: setting auto\n");
776 ret = lbs_cmd_with_response(priv, CMD_802_11_DATA_RATE, &cmd);
780 lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) &cmd, sizeof (cmd));
782 /* FIXME: get actual rates FW can do if this command actually returns
783 * all data rates supported.
785 priv->cur_rate = lbs_fw_index_to_data_rate(cmd.rates[0]);
786 lbs_deb_cmd("DATA_RATE: current rate is 0x%02x\n", priv->cur_rate);
789 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
794 * @brief Get the radio channel
796 * @param priv A pointer to struct lbs_private structure
798 * @return The channel on success, error on failure
800 int lbs_get_channel(struct lbs_private *priv)
802 struct cmd_ds_802_11_rf_channel cmd;
805 lbs_deb_enter(LBS_DEB_CMD);
807 memset(&cmd, 0, sizeof(cmd));
808 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
809 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_GET);
811 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
815 ret = le16_to_cpu(cmd.channel);
816 lbs_deb_cmd("current radio channel is %d\n", ret);
819 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
823 int lbs_update_channel(struct lbs_private *priv)
827 /* the channel in f/w could be out of sync; get the current channel */
828 lbs_deb_enter(LBS_DEB_ASSOC);
830 ret = lbs_get_channel(priv);
832 priv->curbssparams.channel = ret;
835 lbs_deb_leave_args(LBS_DEB_ASSOC, "ret %d", ret);
840 * @brief Set the radio channel
842 * @param priv A pointer to struct lbs_private structure
843 * @param channel The desired channel, or 0 to clear a locked channel
845 * @return 0 on success, error on failure
847 int lbs_set_channel(struct lbs_private *priv, u8 channel)
849 struct cmd_ds_802_11_rf_channel cmd;
851 u8 old_channel = priv->curbssparams.channel;
855 lbs_deb_enter(LBS_DEB_CMD);
857 memset(&cmd, 0, sizeof(cmd));
858 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
859 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_SET);
860 cmd.channel = cpu_to_le16(channel);
862 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
866 priv->curbssparams.channel = (uint8_t) le16_to_cpu(cmd.channel);
867 lbs_deb_cmd("channel switch from %d to %d\n", old_channel,
868 priv->curbssparams.channel);
871 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
875 static int lbs_cmd_802_11_rssi(struct lbs_private *priv,
876 struct cmd_ds_command *cmd)
879 lbs_deb_enter(LBS_DEB_CMD);
880 cmd->command = cpu_to_le16(CMD_802_11_RSSI);
881 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_rssi) + S_DS_GEN);
882 cmd->params.rssi.N = cpu_to_le16(DEFAULT_BCN_AVG_FACTOR);
884 /* reset Beacon SNR/NF/RSSI values */
885 priv->SNR[TYPE_BEACON][TYPE_NOAVG] = 0;
886 priv->SNR[TYPE_BEACON][TYPE_AVG] = 0;
887 priv->NF[TYPE_BEACON][TYPE_NOAVG] = 0;
888 priv->NF[TYPE_BEACON][TYPE_AVG] = 0;
889 priv->RSSI[TYPE_BEACON][TYPE_NOAVG] = 0;
890 priv->RSSI[TYPE_BEACON][TYPE_AVG] = 0;
892 lbs_deb_leave(LBS_DEB_CMD);
896 static int lbs_cmd_reg_access(struct cmd_ds_command *cmdptr,
897 u8 cmd_action, void *pdata_buf)
899 struct lbs_offset_value *offval;
901 lbs_deb_enter(LBS_DEB_CMD);
903 offval = (struct lbs_offset_value *)pdata_buf;
905 switch (le16_to_cpu(cmdptr->command)) {
906 case CMD_MAC_REG_ACCESS:
908 struct cmd_ds_mac_reg_access *macreg;
911 cpu_to_le16(sizeof (struct cmd_ds_mac_reg_access)
914 (struct cmd_ds_mac_reg_access *)&cmdptr->params.
917 macreg->action = cpu_to_le16(cmd_action);
918 macreg->offset = cpu_to_le16((u16) offval->offset);
919 macreg->value = cpu_to_le32(offval->value);
924 case CMD_BBP_REG_ACCESS:
926 struct cmd_ds_bbp_reg_access *bbpreg;
930 (struct cmd_ds_bbp_reg_access)
933 (struct cmd_ds_bbp_reg_access *)&cmdptr->params.
936 bbpreg->action = cpu_to_le16(cmd_action);
937 bbpreg->offset = cpu_to_le16((u16) offval->offset);
938 bbpreg->value = (u8) offval->value;
943 case CMD_RF_REG_ACCESS:
945 struct cmd_ds_rf_reg_access *rfreg;
949 (struct cmd_ds_rf_reg_access) +
952 (struct cmd_ds_rf_reg_access *)&cmdptr->params.
955 rfreg->action = cpu_to_le16(cmd_action);
956 rfreg->offset = cpu_to_le16((u16) offval->offset);
957 rfreg->value = (u8) offval->value;
966 lbs_deb_leave(LBS_DEB_CMD);
970 static int lbs_cmd_bt_access(struct cmd_ds_command *cmd,
971 u16 cmd_action, void *pdata_buf)
973 struct cmd_ds_bt_access *bt_access = &cmd->params.bt;
974 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
976 cmd->command = cpu_to_le16(CMD_BT_ACCESS);
977 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_bt_access) + S_DS_GEN);
979 bt_access->action = cpu_to_le16(cmd_action);
981 switch (cmd_action) {
982 case CMD_ACT_BT_ACCESS_ADD:
983 memcpy(bt_access->addr1, pdata_buf, 2 * ETH_ALEN);
984 lbs_deb_hex(LBS_DEB_MESH, "BT_ADD: blinded MAC addr", bt_access->addr1, 6);
986 case CMD_ACT_BT_ACCESS_DEL:
987 memcpy(bt_access->addr1, pdata_buf, 1 * ETH_ALEN);
988 lbs_deb_hex(LBS_DEB_MESH, "BT_DEL: blinded MAC addr", bt_access->addr1, 6);
990 case CMD_ACT_BT_ACCESS_LIST:
991 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
993 case CMD_ACT_BT_ACCESS_RESET:
995 case CMD_ACT_BT_ACCESS_SET_INVERT:
996 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
998 case CMD_ACT_BT_ACCESS_GET_INVERT:
1003 lbs_deb_leave(LBS_DEB_CMD);
1007 static int lbs_cmd_fwt_access(struct cmd_ds_command *cmd,
1008 u16 cmd_action, void *pdata_buf)
1010 struct cmd_ds_fwt_access *fwt_access = &cmd->params.fwt;
1011 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1013 cmd->command = cpu_to_le16(CMD_FWT_ACCESS);
1014 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_fwt_access) + S_DS_GEN);
1018 memcpy(fwt_access, pdata_buf, sizeof(*fwt_access));
1020 memset(fwt_access, 0, sizeof(*fwt_access));
1022 fwt_access->action = cpu_to_le16(cmd_action);
1024 lbs_deb_leave(LBS_DEB_CMD);
1028 int lbs_mesh_access(struct lbs_private *priv, uint16_t cmd_action,
1029 struct cmd_ds_mesh_access *cmd)
1033 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1035 cmd->hdr.command = cpu_to_le16(CMD_MESH_ACCESS);
1036 cmd->hdr.size = cpu_to_le16(sizeof(*cmd));
1037 cmd->hdr.result = 0;
1039 cmd->action = cpu_to_le16(cmd_action);
1041 ret = lbs_cmd_with_response(priv, CMD_MESH_ACCESS, cmd);
1043 lbs_deb_leave(LBS_DEB_CMD);
1047 static int __lbs_mesh_config_send(struct lbs_private *priv,
1048 struct cmd_ds_mesh_config *cmd,
1049 uint16_t action, uint16_t type)
1052 u16 command = CMD_MESH_CONFIG_OLD;
1054 lbs_deb_enter(LBS_DEB_CMD);
1057 * Command id is 0xac for v10 FW along with mesh interface
1058 * id in bits 14-13-12.
1060 if (priv->mesh_fw_ver == MESH_FW_NEW)
1061 command = CMD_MESH_CONFIG |
1062 (MESH_IFACE_ID << MESH_IFACE_BIT_OFFSET);
1064 cmd->hdr.command = cpu_to_le16(command);
1065 cmd->hdr.size = cpu_to_le16(sizeof(struct cmd_ds_mesh_config));
1066 cmd->hdr.result = 0;
1068 cmd->type = cpu_to_le16(type);
1069 cmd->action = cpu_to_le16(action);
1071 ret = lbs_cmd_with_response(priv, command, cmd);
1073 lbs_deb_leave(LBS_DEB_CMD);
1077 int lbs_mesh_config_send(struct lbs_private *priv,
1078 struct cmd_ds_mesh_config *cmd,
1079 uint16_t action, uint16_t type)
1083 if (!(priv->fwcapinfo & FW_CAPINFO_PERSISTENT_CONFIG))
1086 ret = __lbs_mesh_config_send(priv, cmd, action, type);
1090 /* This function is the CMD_MESH_CONFIG legacy function. It only handles the
1091 * START and STOP actions. The extended actions supported by CMD_MESH_CONFIG
1092 * are all handled by preparing a struct cmd_ds_mesh_config and passing it to
1093 * lbs_mesh_config_send.
1095 int lbs_mesh_config(struct lbs_private *priv, uint16_t action, uint16_t chan)
1097 struct cmd_ds_mesh_config cmd;
1098 struct mrvl_meshie *ie;
1099 DECLARE_SSID_BUF(ssid);
1101 memset(&cmd, 0, sizeof(cmd));
1102 cmd.channel = cpu_to_le16(chan);
1103 ie = (struct mrvl_meshie *)cmd.data;
1106 case CMD_ACT_MESH_CONFIG_START:
1107 ie->id = WLAN_EID_GENERIC;
1108 ie->val.oui[0] = 0x00;
1109 ie->val.oui[1] = 0x50;
1110 ie->val.oui[2] = 0x43;
1111 ie->val.type = MARVELL_MESH_IE_TYPE;
1112 ie->val.subtype = MARVELL_MESH_IE_SUBTYPE;
1113 ie->val.version = MARVELL_MESH_IE_VERSION;
1114 ie->val.active_protocol_id = MARVELL_MESH_PROTO_ID_HWMP;
1115 ie->val.active_metric_id = MARVELL_MESH_METRIC_ID;
1116 ie->val.mesh_capability = MARVELL_MESH_CAPABILITY;
1117 ie->val.mesh_id_len = priv->mesh_ssid_len;
1118 memcpy(ie->val.mesh_id, priv->mesh_ssid, priv->mesh_ssid_len);
1119 ie->len = sizeof(struct mrvl_meshie_val) -
1120 IW_ESSID_MAX_SIZE + priv->mesh_ssid_len;
1121 cmd.length = cpu_to_le16(sizeof(struct mrvl_meshie_val));
1123 case CMD_ACT_MESH_CONFIG_STOP:
1128 lbs_deb_cmd("mesh config action %d type %x channel %d SSID %s\n",
1129 action, priv->mesh_tlv, chan,
1130 print_ssid(ssid, priv->mesh_ssid, priv->mesh_ssid_len));
1132 return __lbs_mesh_config_send(priv, &cmd, action, priv->mesh_tlv);
1135 static int lbs_cmd_bcn_ctrl(struct lbs_private * priv,
1136 struct cmd_ds_command *cmd,
1139 struct cmd_ds_802_11_beacon_control
1140 *bcn_ctrl = &cmd->params.bcn_ctrl;
1142 lbs_deb_enter(LBS_DEB_CMD);
1144 cpu_to_le16(sizeof(struct cmd_ds_802_11_beacon_control)
1146 cmd->command = cpu_to_le16(CMD_802_11_BEACON_CTRL);
1148 bcn_ctrl->action = cpu_to_le16(cmd_action);
1149 bcn_ctrl->beacon_enable = cpu_to_le16(priv->beacon_enable);
1150 bcn_ctrl->beacon_period = cpu_to_le16(priv->beacon_period);
1152 lbs_deb_leave(LBS_DEB_CMD);
1156 static void lbs_queue_cmd(struct lbs_private *priv,
1157 struct cmd_ctrl_node *cmdnode)
1159 unsigned long flags;
1162 lbs_deb_enter(LBS_DEB_HOST);
1165 lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
1168 if (!cmdnode->cmdbuf->size) {
1169 lbs_deb_host("DNLD_CMD: cmd size is zero\n");
1172 cmdnode->result = 0;
1174 /* Exit_PS command needs to be queued in the header always. */
1175 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_PS_MODE) {
1176 struct cmd_ds_802_11_ps_mode *psm = (void *) &cmdnode->cmdbuf[1];
1178 if (psm->action == cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1179 if (priv->psstate != PS_STATE_FULL_POWER)
1184 spin_lock_irqsave(&priv->driver_lock, flags);
1187 list_add_tail(&cmdnode->list, &priv->cmdpendingq);
1189 list_add(&cmdnode->list, &priv->cmdpendingq);
1191 spin_unlock_irqrestore(&priv->driver_lock, flags);
1193 lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
1194 le16_to_cpu(cmdnode->cmdbuf->command));
1197 lbs_deb_leave(LBS_DEB_HOST);
1200 static void lbs_submit_command(struct lbs_private *priv,
1201 struct cmd_ctrl_node *cmdnode)
1203 unsigned long flags;
1204 struct cmd_header *cmd;
1210 lbs_deb_enter(LBS_DEB_HOST);
1212 cmd = cmdnode->cmdbuf;
1214 spin_lock_irqsave(&priv->driver_lock, flags);
1215 priv->cur_cmd = cmdnode;
1216 priv->cur_cmd_retcode = 0;
1217 spin_unlock_irqrestore(&priv->driver_lock, flags);
1219 cmdsize = le16_to_cpu(cmd->size);
1220 command = le16_to_cpu(cmd->command);
1222 /* These commands take longer */
1223 if (command == CMD_802_11_SCAN || command == CMD_802_11_ASSOCIATE)
1226 lbs_deb_cmd("DNLD_CMD: command 0x%04x, seq %d, size %d\n",
1227 command, le16_to_cpu(cmd->seqnum), cmdsize);
1228 lbs_deb_hex(LBS_DEB_CMD, "DNLD_CMD", (void *) cmdnode->cmdbuf, cmdsize);
1230 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmd, cmdsize);
1233 lbs_pr_info("DNLD_CMD: hw_host_to_card failed: %d\n", ret);
1234 /* Let the timer kick in and retry, and potentially reset
1235 the whole thing if the condition persists */
1239 /* Setup the timer after transmit command */
1240 mod_timer(&priv->command_timer, jiffies + timeo);
1242 lbs_deb_leave(LBS_DEB_HOST);
1246 * This function inserts command node to cmdfreeq
1247 * after cleans it. Requires priv->driver_lock held.
1249 static void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1250 struct cmd_ctrl_node *cmdnode)
1252 lbs_deb_enter(LBS_DEB_HOST);
1257 cmdnode->callback = NULL;
1258 cmdnode->callback_arg = 0;
1260 memset(cmdnode->cmdbuf, 0, LBS_CMD_BUFFER_SIZE);
1262 list_add_tail(&cmdnode->list, &priv->cmdfreeq);
1264 lbs_deb_leave(LBS_DEB_HOST);
1267 static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1268 struct cmd_ctrl_node *ptempcmd)
1270 unsigned long flags;
1272 spin_lock_irqsave(&priv->driver_lock, flags);
1273 __lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1274 spin_unlock_irqrestore(&priv->driver_lock, flags);
1277 void lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1280 if (cmd == priv->cur_cmd)
1281 priv->cur_cmd_retcode = result;
1283 cmd->result = result;
1284 cmd->cmdwaitqwoken = 1;
1285 wake_up_interruptible(&cmd->cmdwait_q);
1287 if (!cmd->callback || cmd->callback == lbs_cmd_async_callback)
1288 __lbs_cleanup_and_insert_cmd(priv, cmd);
1289 priv->cur_cmd = NULL;
1292 int lbs_set_radio(struct lbs_private *priv, u8 preamble, u8 radio_on)
1294 struct cmd_ds_802_11_radio_control cmd;
1297 lbs_deb_enter(LBS_DEB_CMD);
1299 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1300 cmd.action = cpu_to_le16(CMD_ACT_SET);
1302 /* Only v8 and below support setting the preamble */
1303 if (priv->fwrelease < 0x09000000) {
1305 case RADIO_PREAMBLE_SHORT:
1306 if (!(priv->capability & WLAN_CAPABILITY_SHORT_PREAMBLE))
1309 case RADIO_PREAMBLE_AUTO:
1310 case RADIO_PREAMBLE_LONG:
1311 cmd.control = cpu_to_le16(preamble);
1319 cmd.control |= cpu_to_le16(0x1);
1321 cmd.control &= cpu_to_le16(~0x1);
1322 priv->txpower_cur = 0;
1325 lbs_deb_cmd("RADIO_CONTROL: radio %s, preamble %d\n",
1326 radio_on ? "ON" : "OFF", preamble);
1328 priv->radio_on = radio_on;
1330 ret = lbs_cmd_with_response(priv, CMD_802_11_RADIO_CONTROL, &cmd);
1333 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1337 void lbs_set_mac_control(struct lbs_private *priv)
1339 struct cmd_ds_mac_control cmd;
1341 lbs_deb_enter(LBS_DEB_CMD);
1343 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1344 cmd.action = cpu_to_le16(priv->mac_control);
1347 lbs_cmd_async(priv, CMD_MAC_CONTROL, &cmd.hdr, sizeof(cmd));
1349 lbs_deb_leave(LBS_DEB_CMD);
1353 * @brief This function prepare the command before send to firmware.
1355 * @param priv A pointer to struct lbs_private structure
1356 * @param cmd_no command number
1357 * @param cmd_action command action: GET or SET
1358 * @param wait_option wait option: wait response or not
1359 * @param cmd_oid cmd oid: treated as sub command
1360 * @param pdata_buf A pointer to informaion buffer
1363 int lbs_prepare_and_send_command(struct lbs_private *priv,
1366 u16 wait_option, u32 cmd_oid, void *pdata_buf)
1369 struct cmd_ctrl_node *cmdnode;
1370 struct cmd_ds_command *cmdptr;
1371 unsigned long flags;
1373 lbs_deb_enter(LBS_DEB_HOST);
1376 lbs_deb_host("PREP_CMD: priv is NULL\n");
1381 if (priv->surpriseremoved) {
1382 lbs_deb_host("PREP_CMD: card removed\n");
1387 cmdnode = lbs_get_cmd_ctrl_node(priv);
1389 if (cmdnode == NULL) {
1390 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1392 /* Wake up main thread to execute next command */
1393 wake_up_interruptible(&priv->waitq);
1398 cmdnode->callback = NULL;
1399 cmdnode->callback_arg = (unsigned long)pdata_buf;
1401 cmdptr = (struct cmd_ds_command *)cmdnode->cmdbuf;
1403 lbs_deb_host("PREP_CMD: command 0x%04x\n", cmd_no);
1405 /* Set sequence number, command and INT option */
1407 cmdptr->seqnum = cpu_to_le16(priv->seqnum);
1409 cmdptr->command = cpu_to_le16(cmd_no);
1413 case CMD_802_11_PS_MODE:
1414 ret = lbs_cmd_802_11_ps_mode(cmdptr, cmd_action);
1417 case CMD_802_11_ASSOCIATE:
1418 case CMD_802_11_REASSOCIATE:
1419 ret = lbs_cmd_80211_associate(priv, cmdptr, pdata_buf);
1422 case CMD_MAC_REG_ACCESS:
1423 case CMD_BBP_REG_ACCESS:
1424 case CMD_RF_REG_ACCESS:
1425 ret = lbs_cmd_reg_access(cmdptr, cmd_action, pdata_buf);
1428 case CMD_802_11_MONITOR_MODE:
1429 ret = lbs_cmd_802_11_monitor_mode(cmdptr,
1430 cmd_action, pdata_buf);
1433 case CMD_802_11_RSSI:
1434 ret = lbs_cmd_802_11_rssi(priv, cmdptr);
1437 case CMD_802_11_SET_AFC:
1438 case CMD_802_11_GET_AFC:
1440 cmdptr->command = cpu_to_le16(cmd_no);
1441 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_afc) +
1444 memmove(&cmdptr->params.afc,
1445 pdata_buf, sizeof(struct cmd_ds_802_11_afc));
1450 case CMD_802_11D_DOMAIN_INFO:
1451 ret = lbs_cmd_802_11d_domain_info(priv, cmdptr,
1452 cmd_no, cmd_action);
1455 case CMD_802_11_TPC_CFG:
1456 cmdptr->command = cpu_to_le16(CMD_802_11_TPC_CFG);
1458 cpu_to_le16(sizeof(struct cmd_ds_802_11_tpc_cfg) +
1461 memmove(&cmdptr->params.tpccfg,
1462 pdata_buf, sizeof(struct cmd_ds_802_11_tpc_cfg));
1466 case CMD_802_11_LED_GPIO_CTRL:
1468 struct mrvl_ie_ledgpio *gpio =
1469 (struct mrvl_ie_ledgpio*)
1470 cmdptr->params.ledgpio.data;
1472 memmove(&cmdptr->params.ledgpio,
1474 sizeof(struct cmd_ds_802_11_led_ctrl));
1477 cpu_to_le16(CMD_802_11_LED_GPIO_CTRL);
1479 #define ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN 8
1481 cpu_to_le16(le16_to_cpu(gpio->header.len)
1483 + ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN);
1484 gpio->header.len = gpio->header.len;
1491 ret = lbs_cmd_bt_access(cmdptr, cmd_action, pdata_buf);
1494 case CMD_FWT_ACCESS:
1495 ret = lbs_cmd_fwt_access(cmdptr, cmd_action, pdata_buf);
1499 cmdptr->command = cpu_to_le16(CMD_GET_TSF);
1500 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_get_tsf) +
1504 case CMD_802_11_BEACON_CTRL:
1505 ret = lbs_cmd_bcn_ctrl(priv, cmdptr, cmd_action);
1508 lbs_pr_err("PREP_CMD: unknown command 0x%04x\n", cmd_no);
1513 /* return error, since the command preparation failed */
1515 lbs_deb_host("PREP_CMD: command preparation failed\n");
1516 lbs_cleanup_and_insert_cmd(priv, cmdnode);
1521 cmdnode->cmdwaitqwoken = 0;
1523 lbs_queue_cmd(priv, cmdnode);
1524 wake_up_interruptible(&priv->waitq);
1526 if (wait_option & CMD_OPTION_WAITFORRSP) {
1527 lbs_deb_host("PREP_CMD: wait for response\n");
1529 wait_event_interruptible(cmdnode->cmdwait_q,
1530 cmdnode->cmdwaitqwoken);
1533 spin_lock_irqsave(&priv->driver_lock, flags);
1534 if (priv->cur_cmd_retcode) {
1535 lbs_deb_host("PREP_CMD: command failed with return code %d\n",
1536 priv->cur_cmd_retcode);
1537 priv->cur_cmd_retcode = 0;
1540 spin_unlock_irqrestore(&priv->driver_lock, flags);
1543 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1548 * @brief This function allocates the command buffer and link
1549 * it to command free queue.
1551 * @param priv A pointer to struct lbs_private structure
1554 int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1559 struct cmd_ctrl_node *cmdarray;
1561 lbs_deb_enter(LBS_DEB_HOST);
1563 /* Allocate and initialize the command array */
1564 bufsize = sizeof(struct cmd_ctrl_node) * LBS_NUM_CMD_BUFFERS;
1565 if (!(cmdarray = kzalloc(bufsize, GFP_KERNEL))) {
1566 lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1570 priv->cmd_array = cmdarray;
1572 /* Allocate and initialize each command buffer in the command array */
1573 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1574 cmdarray[i].cmdbuf = kzalloc(LBS_CMD_BUFFER_SIZE, GFP_KERNEL);
1575 if (!cmdarray[i].cmdbuf) {
1576 lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1582 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1583 init_waitqueue_head(&cmdarray[i].cmdwait_q);
1584 lbs_cleanup_and_insert_cmd(priv, &cmdarray[i]);
1589 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1594 * @brief This function frees the command buffer.
1596 * @param priv A pointer to struct lbs_private structure
1599 int lbs_free_cmd_buffer(struct lbs_private *priv)
1601 struct cmd_ctrl_node *cmdarray;
1604 lbs_deb_enter(LBS_DEB_HOST);
1606 /* need to check if cmd array is allocated or not */
1607 if (priv->cmd_array == NULL) {
1608 lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1612 cmdarray = priv->cmd_array;
1614 /* Release shared memory buffers */
1615 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1616 if (cmdarray[i].cmdbuf) {
1617 kfree(cmdarray[i].cmdbuf);
1618 cmdarray[i].cmdbuf = NULL;
1622 /* Release cmd_ctrl_node */
1623 if (priv->cmd_array) {
1624 kfree(priv->cmd_array);
1625 priv->cmd_array = NULL;
1629 lbs_deb_leave(LBS_DEB_HOST);
1634 * @brief This function gets a free command node if available in
1635 * command free queue.
1637 * @param priv A pointer to struct lbs_private structure
1638 * @return cmd_ctrl_node A pointer to cmd_ctrl_node structure or NULL
1640 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv)
1642 struct cmd_ctrl_node *tempnode;
1643 unsigned long flags;
1645 lbs_deb_enter(LBS_DEB_HOST);
1650 spin_lock_irqsave(&priv->driver_lock, flags);
1652 if (!list_empty(&priv->cmdfreeq)) {
1653 tempnode = list_first_entry(&priv->cmdfreeq,
1654 struct cmd_ctrl_node, list);
1655 list_del(&tempnode->list);
1657 lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1661 spin_unlock_irqrestore(&priv->driver_lock, flags);
1663 lbs_deb_leave(LBS_DEB_HOST);
1668 * @brief This function executes next command in command
1669 * pending queue. It will put firmware back to PS mode
1672 * @param priv A pointer to struct lbs_private structure
1675 int lbs_execute_next_command(struct lbs_private *priv)
1677 struct cmd_ctrl_node *cmdnode = NULL;
1678 struct cmd_header *cmd;
1679 unsigned long flags;
1682 /* Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1683 * only caller to us is lbs_thread() and we get even when a
1684 * data packet is received */
1685 lbs_deb_enter(LBS_DEB_THREAD);
1687 spin_lock_irqsave(&priv->driver_lock, flags);
1689 if (priv->cur_cmd) {
1690 lbs_pr_alert( "EXEC_NEXT_CMD: already processing command!\n");
1691 spin_unlock_irqrestore(&priv->driver_lock, flags);
1696 if (!list_empty(&priv->cmdpendingq)) {
1697 cmdnode = list_first_entry(&priv->cmdpendingq,
1698 struct cmd_ctrl_node, list);
1701 spin_unlock_irqrestore(&priv->driver_lock, flags);
1704 cmd = cmdnode->cmdbuf;
1706 if (is_command_allowed_in_ps(le16_to_cpu(cmd->command))) {
1707 if ((priv->psstate == PS_STATE_SLEEP) ||
1708 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1710 "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1711 le16_to_cpu(cmd->command),
1716 lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1717 "0x%04x in psstate %d\n",
1718 le16_to_cpu(cmd->command), priv->psstate);
1719 } else if (priv->psstate != PS_STATE_FULL_POWER) {
1721 * 1. Non-PS command:
1722 * Queue it. set needtowakeup to TRUE if current state
1723 * is SLEEP, otherwise call lbs_ps_wakeup to send Exit_PS.
1724 * 2. PS command but not Exit_PS:
1726 * 3. PS command Exit_PS:
1727 * Set needtowakeup to TRUE if current state is SLEEP,
1728 * otherwise send this command down to firmware
1731 if (cmd->command != cpu_to_le16(CMD_802_11_PS_MODE)) {
1732 /* Prepare to send Exit PS,
1733 * this non PS command will be sent later */
1734 if ((priv->psstate == PS_STATE_SLEEP)
1735 || (priv->psstate == PS_STATE_PRE_SLEEP)
1737 /* w/ new scheme, it will not reach here.
1738 since it is blocked in main_thread. */
1739 priv->needtowakeup = 1;
1741 lbs_ps_wakeup(priv, 0);
1747 * PS command. Ignore it if it is not Exit_PS.
1748 * otherwise send it down immediately.
1750 struct cmd_ds_802_11_ps_mode *psm = (void *)&cmd[1];
1753 "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1756 cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1758 "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1759 list_del(&cmdnode->list);
1760 spin_lock_irqsave(&priv->driver_lock, flags);
1761 lbs_complete_command(priv, cmdnode, 0);
1762 spin_unlock_irqrestore(&priv->driver_lock, flags);
1768 if ((priv->psstate == PS_STATE_SLEEP) ||
1769 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1771 "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1772 list_del(&cmdnode->list);
1773 spin_lock_irqsave(&priv->driver_lock, flags);
1774 lbs_complete_command(priv, cmdnode, 0);
1775 spin_unlock_irqrestore(&priv->driver_lock, flags);
1776 priv->needtowakeup = 1;
1783 "EXEC_NEXT_CMD: sending EXIT_PS\n");
1786 list_del(&cmdnode->list);
1787 lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1788 le16_to_cpu(cmd->command));
1789 lbs_submit_command(priv, cmdnode);
1792 * check if in power save mode, if yes, put the device back
1795 if ((priv->psmode != LBS802_11POWERMODECAM) &&
1796 (priv->psstate == PS_STATE_FULL_POWER) &&
1797 ((priv->connect_status == LBS_CONNECTED) ||
1798 (priv->mesh_connect_status == LBS_CONNECTED))) {
1799 if (priv->secinfo.WPAenabled ||
1800 priv->secinfo.WPA2enabled) {
1801 /* check for valid WPA group keys */
1802 if (priv->wpa_mcast_key.len ||
1803 priv->wpa_unicast_key.len) {
1805 "EXEC_NEXT_CMD: WPA enabled and GTK_SET"
1806 " go back to PS_SLEEP");
1807 lbs_ps_sleep(priv, 0);
1811 "EXEC_NEXT_CMD: cmdpendingq empty, "
1812 "go back to PS_SLEEP");
1813 lbs_ps_sleep(priv, 0);
1820 lbs_deb_leave(LBS_DEB_THREAD);
1824 void lbs_send_iwevcustom_event(struct lbs_private *priv, s8 *str)
1826 union iwreq_data iwrq;
1829 lbs_deb_enter(LBS_DEB_WEXT);
1831 memset(&iwrq, 0, sizeof(union iwreq_data));
1832 memset(buf, 0, sizeof(buf));
1834 snprintf(buf, sizeof(buf) - 1, "%s", str);
1836 iwrq.data.length = strlen(buf) + 1 + IW_EV_LCP_LEN;
1838 /* Send Event to upper layer */
1839 lbs_deb_wext("event indication string %s\n", (char *)buf);
1840 lbs_deb_wext("event indication length %d\n", iwrq.data.length);
1841 lbs_deb_wext("sending wireless event IWEVCUSTOM for %s\n", str);
1843 wireless_send_event(priv->dev, IWEVCUSTOM, &iwrq, buf);
1845 lbs_deb_leave(LBS_DEB_WEXT);
1848 static void lbs_send_confirmsleep(struct lbs_private *priv)
1850 unsigned long flags;
1853 lbs_deb_enter(LBS_DEB_HOST);
1854 lbs_deb_hex(LBS_DEB_HOST, "sleep confirm", (u8 *) &confirm_sleep,
1855 sizeof(confirm_sleep));
1857 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) &confirm_sleep,
1858 sizeof(confirm_sleep));
1860 lbs_pr_alert("confirm_sleep failed\n");
1864 spin_lock_irqsave(&priv->driver_lock, flags);
1866 /* We don't get a response on the sleep-confirmation */
1867 priv->dnld_sent = DNLD_RES_RECEIVED;
1869 /* If nothing to do, go back to sleep (?) */
1870 if (!__kfifo_len(priv->event_fifo) && !priv->resp_len[priv->resp_idx])
1871 priv->psstate = PS_STATE_SLEEP;
1873 spin_unlock_irqrestore(&priv->driver_lock, flags);
1876 lbs_deb_leave(LBS_DEB_HOST);
1879 void lbs_ps_sleep(struct lbs_private *priv, int wait_option)
1881 lbs_deb_enter(LBS_DEB_HOST);
1884 * PS is currently supported only in Infrastructure mode
1885 * Remove this check if it is to be supported in IBSS mode also
1888 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1889 CMD_SUBCMD_ENTER_PS, wait_option, 0, NULL);
1891 lbs_deb_leave(LBS_DEB_HOST);
1895 * @brief This function sends Exit_PS command to firmware.
1897 * @param priv A pointer to struct lbs_private structure
1898 * @param wait_option wait response or not
1901 void lbs_ps_wakeup(struct lbs_private *priv, int wait_option)
1905 lbs_deb_enter(LBS_DEB_HOST);
1907 Localpsmode = cpu_to_le32(LBS802_11POWERMODECAM);
1909 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1911 wait_option, 0, &Localpsmode);
1913 lbs_deb_leave(LBS_DEB_HOST);
1917 * @brief This function checks condition and prepares to
1918 * send sleep confirm command to firmware if ok.
1920 * @param priv A pointer to struct lbs_private structure
1921 * @param psmode Power Saving mode
1924 void lbs_ps_confirm_sleep(struct lbs_private *priv)
1926 unsigned long flags =0;
1929 lbs_deb_enter(LBS_DEB_HOST);
1931 spin_lock_irqsave(&priv->driver_lock, flags);
1932 if (priv->dnld_sent) {
1934 lbs_deb_host("dnld_sent was set\n");
1937 /* In-progress command? */
1938 if (priv->cur_cmd) {
1940 lbs_deb_host("cur_cmd was set\n");
1943 /* Pending events or command responses? */
1944 if (__kfifo_len(priv->event_fifo) || priv->resp_len[priv->resp_idx]) {
1946 lbs_deb_host("pending events or command responses\n");
1948 spin_unlock_irqrestore(&priv->driver_lock, flags);
1951 lbs_deb_host("sending lbs_ps_confirm_sleep\n");
1952 lbs_send_confirmsleep(priv);
1954 lbs_deb_host("sleep confirm has been delayed\n");
1957 lbs_deb_leave(LBS_DEB_HOST);
1962 * @brief Configures the transmission power control functionality.
1964 * @param priv A pointer to struct lbs_private structure
1965 * @param enable Transmission power control enable
1966 * @param p0 Power level when link quality is good (dBm).
1967 * @param p1 Power level when link quality is fair (dBm).
1968 * @param p2 Power level when link quality is poor (dBm).
1969 * @param usesnr Use Signal to Noise Ratio in TPC
1971 * @return 0 on success
1973 int lbs_set_tpc_cfg(struct lbs_private *priv, int enable, int8_t p0, int8_t p1,
1974 int8_t p2, int usesnr)
1976 struct cmd_ds_802_11_tpc_cfg cmd;
1979 memset(&cmd, 0, sizeof(cmd));
1980 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1981 cmd.action = cpu_to_le16(CMD_ACT_SET);
1982 cmd.enable = !!enable;
1983 cmd.usesnr = !!usesnr;
1988 ret = lbs_cmd_with_response(priv, CMD_802_11_TPC_CFG, &cmd);
1994 * @brief Configures the power adaptation settings.
1996 * @param priv A pointer to struct lbs_private structure
1997 * @param enable Power adaptation enable
1998 * @param p0 Power level for 1, 2, 5.5 and 11 Mbps (dBm).
1999 * @param p1 Power level for 6, 9, 12, 18, 22, 24 and 36 Mbps (dBm).
2000 * @param p2 Power level for 48 and 54 Mbps (dBm).
2002 * @return 0 on Success
2005 int lbs_set_power_adapt_cfg(struct lbs_private *priv, int enable, int8_t p0,
2006 int8_t p1, int8_t p2)
2008 struct cmd_ds_802_11_pa_cfg cmd;
2011 memset(&cmd, 0, sizeof(cmd));
2012 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
2013 cmd.action = cpu_to_le16(CMD_ACT_SET);
2014 cmd.enable = !!enable;
2019 ret = lbs_cmd_with_response(priv, CMD_802_11_PA_CFG , &cmd);
2025 static struct cmd_ctrl_node *__lbs_cmd_async(struct lbs_private *priv,
2026 uint16_t command, struct cmd_header *in_cmd, int in_cmd_size,
2027 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
2028 unsigned long callback_arg)
2030 struct cmd_ctrl_node *cmdnode;
2032 lbs_deb_enter(LBS_DEB_HOST);
2034 if (priv->surpriseremoved) {
2035 lbs_deb_host("PREP_CMD: card removed\n");
2036 cmdnode = ERR_PTR(-ENOENT);
2040 cmdnode = lbs_get_cmd_ctrl_node(priv);
2041 if (cmdnode == NULL) {
2042 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
2044 /* Wake up main thread to execute next command */
2045 wake_up_interruptible(&priv->waitq);
2046 cmdnode = ERR_PTR(-ENOBUFS);
2050 cmdnode->callback = callback;
2051 cmdnode->callback_arg = callback_arg;
2053 /* Copy the incoming command to the buffer */
2054 memcpy(cmdnode->cmdbuf, in_cmd, in_cmd_size);
2056 /* Set sequence number, clean result, move to buffer */
2058 cmdnode->cmdbuf->command = cpu_to_le16(command);
2059 cmdnode->cmdbuf->size = cpu_to_le16(in_cmd_size);
2060 cmdnode->cmdbuf->seqnum = cpu_to_le16(priv->seqnum);
2061 cmdnode->cmdbuf->result = 0;
2063 lbs_deb_host("PREP_CMD: command 0x%04x\n", command);
2065 cmdnode->cmdwaitqwoken = 0;
2066 lbs_queue_cmd(priv, cmdnode);
2067 wake_up_interruptible(&priv->waitq);
2070 lbs_deb_leave_args(LBS_DEB_HOST, "ret %p", cmdnode);
2074 void lbs_cmd_async(struct lbs_private *priv, uint16_t command,
2075 struct cmd_header *in_cmd, int in_cmd_size)
2077 lbs_deb_enter(LBS_DEB_CMD);
2078 __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
2079 lbs_cmd_async_callback, 0);
2080 lbs_deb_leave(LBS_DEB_CMD);
2083 int __lbs_cmd(struct lbs_private *priv, uint16_t command,
2084 struct cmd_header *in_cmd, int in_cmd_size,
2085 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
2086 unsigned long callback_arg)
2088 struct cmd_ctrl_node *cmdnode;
2089 unsigned long flags;
2092 lbs_deb_enter(LBS_DEB_HOST);
2094 cmdnode = __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
2095 callback, callback_arg);
2096 if (IS_ERR(cmdnode)) {
2097 ret = PTR_ERR(cmdnode);
2102 wait_event_interruptible(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);
2104 spin_lock_irqsave(&priv->driver_lock, flags);
2105 ret = cmdnode->result;
2107 lbs_pr_info("PREP_CMD: command 0x%04x failed: %d\n",
2110 __lbs_cleanup_and_insert_cmd(priv, cmdnode);
2111 spin_unlock_irqrestore(&priv->driver_lock, flags);
2114 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
2117 EXPORT_SYMBOL_GPL(__lbs_cmd);