SAFE public projects git trees. - safe/jmp/linux-2.6/blob - drivers/net/wireless/libertas/cmdresp.c

   1 /**
   2   * This file contains the handling of command
   3   * responses as well as events generated by firmware.
   4   */
   5 #include <linux/delay.h>
   6 #include <linux/if_arp.h>
   7 #include <linux/netdevice.h>
   8
   9 #include <net/iw_handler.h>
  10
  11 #include "host.h"
  12 #include "decl.h"
  13 #include "defs.h"
  14 #include "dev.h"
  15 #include "join.h"
  16 #include "wext.h"
  17
  18 /**
  19  *  @brief This function handles disconnect event. it
  20  *  reports disconnect to upper layer, clean tx/rx packets,
  21  *  reset link state etc.
  22  *
  23  *  @param priv    A pointer to struct lbs_private structure
  24  *  @return        n/a
  25  */
  26 void lbs_mac_event_disconnected(struct lbs_private *priv)
  27 {
  28         union iwreq_data wrqu;
  29
  30         if (priv->connect_status != LBS_CONNECTED)
  31                 return;
  32
  33         lbs_deb_enter(LBS_DEB_ASSOC);
  34
  35         memset(wrqu.ap_addr.sa_data, 0x00, ETH_ALEN);
  36         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
  37
  38         /*
  39          * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
  40          * It causes problem in the Supplicant
  41          */
  42
  43         msleep_interruptible(1000);
  44         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
  45
  46         /* Free Tx and Rx packets */
  47         kfree_skb(priv->currenttxskb);
  48         priv->currenttxskb = NULL;
  49
  50         /* report disconnect to upper layer */
  51         netif_stop_queue(priv->dev);
  52         netif_carrier_off(priv->dev);
  53
  54         /* reset SNR/NF/RSSI values */
  55         memset(priv->SNR, 0x00, sizeof(priv->SNR));
  56         memset(priv->NF, 0x00, sizeof(priv->NF));
  57         memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
  58         memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
  59         memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
  60         priv->nextSNRNF = 0;
  61         priv->numSNRNF = 0;
  62         priv->connect_status = LBS_DISCONNECTED;
  63
  64         /* Clear out associated SSID and BSSID since connection is
  65          * no longer valid.
  66          */
  67         memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
  68         memset(&priv->curbssparams.ssid, 0, IW_ESSID_MAX_SIZE);
  69         priv->curbssparams.ssid_len = 0;
  70
  71         if (priv->psstate != PS_STATE_FULL_POWER) {
  72                 /* make firmware to exit PS mode */
  73                 lbs_deb_cmd("disconnected, so exit PS mode\n");
  74                 lbs_ps_wakeup(priv, 0);
  75         }
  76         lbs_deb_leave(LBS_DEB_CMD);
  77 }
  78
  79 /**
  80  *  @brief This function handles MIC failure event.
  81  *
  82  *  @param priv    A pointer to struct lbs_private structure
  83  *  @para  event   the event id
  84  *  @return        n/a
  85  */
  86 static void handle_mic_failureevent(struct lbs_private *priv, u32 event)
  87 {
  88         char buf[50];
  89
  90         lbs_deb_enter(LBS_DEB_CMD);
  91         memset(buf, 0, sizeof(buf));
  92
  93         sprintf(buf, "%s", "MLME-MICHAELMICFAILURE.indication ");
  94
  95         if (event == MACREG_INT_CODE_MIC_ERR_UNICAST) {
  96                 strcat(buf, "unicast ");
  97         } else {
  98                 strcat(buf, "multicast ");
  99         }
 100
 101         lbs_send_iwevcustom_event(priv, buf);
 102         lbs_deb_leave(LBS_DEB_CMD);
 103 }
 104
 105 static int lbs_ret_reg_access(struct lbs_private *priv,
 106                                u16 type, struct cmd_ds_command *resp)
 107 {
 108         int ret = 0;
 109
 110         lbs_deb_enter(LBS_DEB_CMD);
 111
 112         switch (type) {
 113         case CMD_RET(CMD_MAC_REG_ACCESS):
 114                 {
 115                         struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
 116
 117                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
 118                         priv->offsetvalue.value = le32_to_cpu(reg->value);
 119                         break;
 120                 }
 121
 122         case CMD_RET(CMD_BBP_REG_ACCESS):
 123                 {
 124                         struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
 125
 126                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
 127                         priv->offsetvalue.value = reg->value;
 128                         break;
 129                 }
 130
 131         case CMD_RET(CMD_RF_REG_ACCESS):
 132                 {
 133                         struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
 134
 135                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
 136                         priv->offsetvalue.value = reg->value;
 137                         break;
 138                 }
 139
 140         default:
 141                 ret = -1;
 142         }
 143
 144         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 145         return ret;
 146 }
 147
 148 static int lbs_ret_802_11_sleep_params(struct lbs_private *priv,
 149                                         struct cmd_ds_command *resp)
 150 {
 151         struct cmd_ds_802_11_sleep_params *sp = &resp->params.sleep_params;
 152
 153         lbs_deb_enter(LBS_DEB_CMD);
 154
 155         lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, calcontrol 0x%x "
 156                     "extsleepclk 0x%x\n", le16_to_cpu(sp->error),
 157                     le16_to_cpu(sp->offset), le16_to_cpu(sp->stabletime),
 158                     sp->calcontrol, sp->externalsleepclk);
 159
 160         priv->sp.sp_error = le16_to_cpu(sp->error);
 161         priv->sp.sp_offset = le16_to_cpu(sp->offset);
 162         priv->sp.sp_stabletime = le16_to_cpu(sp->stabletime);
 163         priv->sp.sp_calcontrol = sp->calcontrol;
 164         priv->sp.sp_extsleepclk = sp->externalsleepclk;
 165         priv->sp.sp_reserved = le16_to_cpu(sp->reserved);
 166
 167         lbs_deb_enter(LBS_DEB_CMD);
 168         return 0;
 169 }
 170
 171 static int lbs_ret_802_11_stat(struct lbs_private *priv,
 172                                 struct cmd_ds_command *resp)
 173 {
 174         lbs_deb_enter(LBS_DEB_CMD);
 175 /*      currently priv->wlan802_11Stat is unused
 176
 177         struct cmd_ds_802_11_get_stat *p11Stat = &resp->params.gstat;
 178
 179         // TODO Convert it to Big endian befor copy
 180         memcpy(&priv->wlan802_11Stat,
 181                p11Stat, sizeof(struct cmd_ds_802_11_get_stat));
 182 */
 183         lbs_deb_leave(LBS_DEB_CMD);
 184         return 0;
 185 }
 186
 187 static int lbs_ret_802_11_snmp_mib(struct lbs_private *priv,
 188                                     struct cmd_ds_command *resp)
 189 {
 190         struct cmd_ds_802_11_snmp_mib *smib = &resp->params.smib;
 191         u16 oid = le16_to_cpu(smib->oid);
 192         u16 querytype = le16_to_cpu(smib->querytype);
 193
 194         lbs_deb_enter(LBS_DEB_CMD);
 195
 196         lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid,
 197                querytype);
 198         lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib->bufsize));
 199
 200         if (querytype == CMD_ACT_GET) {
 201                 switch (oid) {
 202                 case FRAGTHRESH_I:
 203                         priv->fragthsd =
 204                                 le16_to_cpu(*((__le16 *)(smib->value)));
 205                         lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
 206                                     priv->fragthsd);
 207                         break;
 208                 case RTSTHRESH_I:
 209                         priv->rtsthsd =
 210                                 le16_to_cpu(*((__le16 *)(smib->value)));
 211                         lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
 212                                     priv->rtsthsd);
 213                         break;
 214                 case SHORT_RETRYLIM_I:
 215                         priv->txretrycount =
 216                                 le16_to_cpu(*((__le16 *)(smib->value)));
 217                         lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
 218                                     priv->rtsthsd);
 219                         break;
 220                 default:
 221                         break;
 222                 }
 223         }
 224
 225         lbs_deb_enter(LBS_DEB_CMD);
 226         return 0;
 227 }
 228
 229 static int lbs_ret_802_11_key_material(struct lbs_private *priv,
 230                                         struct cmd_ds_command *resp)
 231 {
 232         struct cmd_ds_802_11_key_material *pkeymaterial =
 233             &resp->params.keymaterial;
 234         u16 action = le16_to_cpu(pkeymaterial->action);
 235
 236         lbs_deb_enter(LBS_DEB_CMD);
 237
 238         /* Copy the returned key to driver private data */
 239         if (action == CMD_ACT_GET) {
 240                 u8 * buf_ptr = (u8 *) &pkeymaterial->keyParamSet;
 241                 u8 * resp_end = (u8 *) (resp + le16_to_cpu(resp->size));
 242
 243                 while (buf_ptr < resp_end) {
 244                         struct MrvlIEtype_keyParamSet * pkeyparamset =
 245                             (struct MrvlIEtype_keyParamSet *) buf_ptr;
 246                         struct enc_key * pkey;
 247                         u16 param_set_len = le16_to_cpu(pkeyparamset->length);
 248                         u16 key_len = le16_to_cpu(pkeyparamset->keylen);
 249                         u16 key_flags = le16_to_cpu(pkeyparamset->keyinfo);
 250                         u16 key_type = le16_to_cpu(pkeyparamset->keytypeid);
 251                         u8 * end;
 252
 253                         end = (u8 *) pkeyparamset + sizeof (pkeyparamset->type)
 254                                                   + sizeof (pkeyparamset->length)
 255                                                   + param_set_len;
 256                         /* Make sure we don't access past the end of the IEs */
 257                         if (end > resp_end)
 258                                 break;
 259
 260                         if (key_flags & KEY_INFO_WPA_UNICAST)
 261                                 pkey = &priv->wpa_unicast_key;
 262                         else if (key_flags & KEY_INFO_WPA_MCAST)
 263                                 pkey = &priv->wpa_mcast_key;
 264                         else
 265                                 break;
 266
 267                         /* Copy returned key into driver */
 268                         memset(pkey, 0, sizeof(struct enc_key));
 269                         if (key_len > sizeof(pkey->key))
 270                                 break;
 271                         pkey->type = key_type;
 272                         pkey->flags = key_flags;
 273                         pkey->len = key_len;
 274                         memcpy(pkey->key, pkeyparamset->key, pkey->len);
 275
 276                         buf_ptr = end + 1;
 277                 }
 278         }
 279
 280         lbs_deb_enter(LBS_DEB_CMD);
 281         return 0;
 282 }
 283
 284 static int lbs_ret_802_11_mac_address(struct lbs_private *priv,
 285                                        struct cmd_ds_command *resp)
 286 {
 287         struct cmd_ds_802_11_mac_address *macadd = &resp->params.macadd;
 288
 289         lbs_deb_enter(LBS_DEB_CMD);
 290
 291         memcpy(priv->current_addr, macadd->macadd, ETH_ALEN);
 292
 293         lbs_deb_enter(LBS_DEB_CMD);
 294         return 0;
 295 }
 296
 297 static int lbs_ret_802_11_rf_tx_power(struct lbs_private *priv,
 298                                        struct cmd_ds_command *resp)
 299 {
 300         struct cmd_ds_802_11_rf_tx_power *rtp = &resp->params.txp;
 301
 302         lbs_deb_enter(LBS_DEB_CMD);
 303
 304         priv->txpowerlevel = le16_to_cpu(rtp->currentlevel);
 305
 306         lbs_deb_cmd("TX power currently %d\n", priv->txpowerlevel);
 307
 308         lbs_deb_leave(LBS_DEB_CMD);
 309         return 0;
 310 }
 311
 312 static int lbs_ret_802_11_rate_adapt_rateset(struct lbs_private *priv,
 313                                               struct cmd_ds_command *resp)
 314 {
 315         struct cmd_ds_802_11_rate_adapt_rateset *rates = &resp->params.rateset;
 316
 317         lbs_deb_enter(LBS_DEB_CMD);
 318
 319         if (rates->action == CMD_ACT_GET) {
 320                 priv->enablehwauto = le16_to_cpu(rates->enablehwauto);
 321                 priv->ratebitmap = le16_to_cpu(rates->bitmap);
 322         }
 323
 324         lbs_deb_leave(LBS_DEB_CMD);
 325         return 0;
 326 }
 327
 328 static int lbs_ret_802_11_rf_channel(struct lbs_private *priv,
 329                                       struct cmd_ds_command *resp)
 330 {
 331         struct cmd_ds_802_11_rf_channel *rfchannel = &resp->params.rfchannel;
 332         u16 action = le16_to_cpu(rfchannel->action);
 333         u16 newchannel = le16_to_cpu(rfchannel->currentchannel);
 334
 335         lbs_deb_enter(LBS_DEB_CMD);
 336
 337         if (action == CMD_OPT_802_11_RF_CHANNEL_GET
 338             && priv->curbssparams.channel != newchannel) {
 339                 lbs_deb_cmd("channel switch from %d to %d\n",
 340                        priv->curbssparams.channel, newchannel);
 341
 342                 /* Update the channel again */
 343                 priv->curbssparams.channel = newchannel;
 344         }
 345
 346         lbs_deb_enter(LBS_DEB_CMD);
 347         return 0;
 348 }
 349
 350 static int lbs_ret_802_11_rssi(struct lbs_private *priv,
 351                                 struct cmd_ds_command *resp)
 352 {
 353         struct cmd_ds_802_11_rssi_rsp *rssirsp = &resp->params.rssirsp;
 354
 355         lbs_deb_enter(LBS_DEB_CMD);
 356
 357         /* store the non average value */
 358         priv->SNR[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->SNR);
 359         priv->NF[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->noisefloor);
 360
 361         priv->SNR[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgSNR);
 362         priv->NF[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgnoisefloor);
 363
 364         priv->RSSI[TYPE_BEACON][TYPE_NOAVG] =
 365             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_NOAVG],
 366                      priv->NF[TYPE_BEACON][TYPE_NOAVG]);
 367
 368         priv->RSSI[TYPE_BEACON][TYPE_AVG] =
 369             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_AVG] / AVG_SCALE,
 370                      priv->NF[TYPE_BEACON][TYPE_AVG] / AVG_SCALE);
 371
 372         lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
 373                priv->RSSI[TYPE_BEACON][TYPE_NOAVG],
 374                priv->RSSI[TYPE_BEACON][TYPE_AVG]);
 375
 376         lbs_deb_leave(LBS_DEB_CMD);
 377         return 0;
 378 }
 379
 380 static int lbs_ret_802_11_eeprom_access(struct lbs_private *priv,
 381                                   struct cmd_ds_command *resp)
 382 {
 383         struct lbs_ioctl_regrdwr *pbuf;
 384         pbuf = (struct lbs_ioctl_regrdwr *) priv->prdeeprom;
 385
 386         lbs_deb_enter_args(LBS_DEB_CMD, "len %d",
 387                le16_to_cpu(resp->params.rdeeprom.bytecount));
 388         if (pbuf->NOB < le16_to_cpu(resp->params.rdeeprom.bytecount)) {
 389                 pbuf->NOB = 0;
 390                 lbs_deb_cmd("EEPROM read length too big\n");
 391                 return -1;
 392         }
 393         pbuf->NOB = le16_to_cpu(resp->params.rdeeprom.bytecount);
 394         if (pbuf->NOB > 0) {
 395
 396                 memcpy(&pbuf->value, (u8 *) & resp->params.rdeeprom.value,
 397                        le16_to_cpu(resp->params.rdeeprom.bytecount));
 398                 lbs_deb_hex(LBS_DEB_CMD, "EEPROM", (char *)&pbuf->value,
 399                         le16_to_cpu(resp->params.rdeeprom.bytecount));
 400         }
 401         lbs_deb_leave(LBS_DEB_CMD);
 402         return 0;
 403 }
 404
 405 static int lbs_ret_get_log(struct lbs_private *priv,
 406                             struct cmd_ds_command *resp)
 407 {
 408         struct cmd_ds_802_11_get_log *logmessage = &resp->params.glog;
 409
 410         lbs_deb_enter(LBS_DEB_CMD);
 411
 412         /* Stored little-endian */
 413         memcpy(&priv->logmsg, logmessage, sizeof(struct cmd_ds_802_11_get_log));
 414
 415         lbs_deb_leave(LBS_DEB_CMD);
 416         return 0;
 417 }
 418
 419 static int lbs_ret_802_11_enable_rsn(struct lbs_private *priv,
 420                                           struct cmd_ds_command *resp)
 421 {
 422         struct cmd_ds_802_11_enable_rsn *enable_rsn = &resp->params.enbrsn;
 423         u32 * pdata_buf = priv->cur_cmd->pdata_buf;
 424
 425         lbs_deb_enter(LBS_DEB_CMD);
 426
 427         if (enable_rsn->action == cpu_to_le16(CMD_ACT_GET)) {
 428                 if (pdata_buf)
 429                         *pdata_buf = (u32) le16_to_cpu(enable_rsn->enable);
 430         }
 431
 432         lbs_deb_leave(LBS_DEB_CMD);
 433         return 0;
 434 }
 435
 436 static int lbs_ret_802_11_bcn_ctrl(struct lbs_private * priv,
 437                                         struct cmd_ds_command *resp)
 438 {
 439         struct cmd_ds_802_11_beacon_control *bcn_ctrl =
 440             &resp->params.bcn_ctrl;
 441
 442         lbs_deb_enter(LBS_DEB_CMD);
 443
 444         if (bcn_ctrl->action == CMD_ACT_GET) {
 445                 priv->beacon_enable = (u8) le16_to_cpu(bcn_ctrl->beacon_enable);
 446                 priv->beacon_period = le16_to_cpu(bcn_ctrl->beacon_period);
 447         }
 448
 449         lbs_deb_enter(LBS_DEB_CMD);
 450         return 0;
 451 }
 452
 453 static int lbs_ret_802_11_subscribe_event(struct lbs_private *priv,
 454         struct cmd_ds_command *resp)
 455 {
 456         struct cmd_ds_802_11_subscribe_event *cmd_event =
 457                 &resp->params.subscribe_event;
 458         struct cmd_ds_802_11_subscribe_event *dst_event =
 459                 priv->cur_cmd->pdata_buf;
 460
 461         lbs_deb_enter(LBS_DEB_CMD);
 462
 463         if (dst_event->action == cpu_to_le16(CMD_ACT_GET)) {
 464                 dst_event->events = cmd_event->events;
 465                 memcpy(dst_event->tlv, cmd_event->tlv, sizeof(dst_event->tlv));
 466         }
 467
 468         lbs_deb_leave(LBS_DEB_CMD);
 469         return 0;
 470 }
 471
 472 static inline int handle_cmd_response(struct lbs_private *priv,
 473                                       unsigned long dummy,
 474                                       struct cmd_header *cmd_response)
 475 {
 476         struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
 477         int ret = 0;
 478         unsigned long flags;
 479         uint16_t respcmd = le16_to_cpu(resp->command);
 480
 481         lbs_deb_enter(LBS_DEB_HOST);
 482
 483         switch (respcmd) {
 484         case CMD_RET(CMD_MAC_REG_ACCESS):
 485         case CMD_RET(CMD_BBP_REG_ACCESS):
 486         case CMD_RET(CMD_RF_REG_ACCESS):
 487                 ret = lbs_ret_reg_access(priv, respcmd, resp);
 488                 break;
 489
 490         case CMD_RET(CMD_802_11_SCAN):
 491                 ret = lbs_ret_80211_scan(priv, resp);
 492                 break;
 493
 494         case CMD_RET(CMD_802_11_GET_LOG):
 495                 ret = lbs_ret_get_log(priv, resp);
 496                 break;
 497
 498         case CMD_RET_802_11_ASSOCIATE:
 499         case CMD_RET(CMD_802_11_ASSOCIATE):
 500         case CMD_RET(CMD_802_11_REASSOCIATE):
 501                 ret = lbs_ret_80211_associate(priv, resp);
 502                 break;
 503
 504         case CMD_RET(CMD_802_11_DISASSOCIATE):
 505         case CMD_RET(CMD_802_11_DEAUTHENTICATE):
 506                 ret = lbs_ret_80211_disassociate(priv, resp);
 507                 break;
 508
 509         case CMD_RET(CMD_802_11_AD_HOC_START):
 510         case CMD_RET(CMD_802_11_AD_HOC_JOIN):
 511                 ret = lbs_ret_80211_ad_hoc_start(priv, resp);
 512                 break;
 513
 514         case CMD_RET(CMD_802_11_GET_STAT):
 515                 ret = lbs_ret_802_11_stat(priv, resp);
 516                 break;
 517
 518         case CMD_RET(CMD_802_11_SNMP_MIB):
 519                 ret = lbs_ret_802_11_snmp_mib(priv, resp);
 520                 break;
 521
 522         case CMD_RET(CMD_802_11_RF_TX_POWER):
 523                 ret = lbs_ret_802_11_rf_tx_power(priv, resp);
 524                 break;
 525
 526         case CMD_RET(CMD_802_11_SET_AFC):
 527         case CMD_RET(CMD_802_11_GET_AFC):
 528                 spin_lock_irqsave(&priv->driver_lock, flags);
 529                 memmove(priv->cur_cmd->pdata_buf, &resp->params.afc,
 530                         sizeof(struct cmd_ds_802_11_afc));
 531                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 532
 533                 break;
 534
 535         case CMD_RET(CMD_MAC_MULTICAST_ADR):
 536         case CMD_RET(CMD_MAC_CONTROL):
 537         case CMD_RET(CMD_802_11_SET_WEP):
 538         case CMD_RET(CMD_802_11_RESET):
 539         case CMD_RET(CMD_802_11_AUTHENTICATE):
 540         case CMD_RET(CMD_802_11_RADIO_CONTROL):
 541         case CMD_RET(CMD_802_11_BEACON_STOP):
 542                 break;
 543
 544         case CMD_RET(CMD_802_11_ENABLE_RSN):
 545                 ret = lbs_ret_802_11_enable_rsn(priv, resp);
 546                 break;
 547
 548         case CMD_RET(CMD_802_11_RATE_ADAPT_RATESET):
 549                 ret = lbs_ret_802_11_rate_adapt_rateset(priv, resp);
 550                 break;
 551         case CMD_RET(CMD_802_11_RF_CHANNEL):
 552                 ret = lbs_ret_802_11_rf_channel(priv, resp);
 553                 break;
 554
 555         case CMD_RET(CMD_802_11_RSSI):
 556                 ret = lbs_ret_802_11_rssi(priv, resp);
 557                 break;
 558
 559         case CMD_RET(CMD_802_11_MAC_ADDRESS):
 560                 ret = lbs_ret_802_11_mac_address(priv, resp);
 561                 break;
 562
 563         case CMD_RET(CMD_802_11_AD_HOC_STOP):
 564                 ret = lbs_ret_80211_ad_hoc_stop(priv, resp);
 565                 break;
 566
 567         case CMD_RET(CMD_802_11_KEY_MATERIAL):
 568                 ret = lbs_ret_802_11_key_material(priv, resp);
 569                 break;
 570
 571         case CMD_RET(CMD_802_11_EEPROM_ACCESS):
 572                 ret = lbs_ret_802_11_eeprom_access(priv, resp);
 573                 break;
 574
 575         case CMD_RET(CMD_802_11D_DOMAIN_INFO):
 576                 ret = lbs_ret_802_11d_domain_info(priv, resp);
 577                 break;
 578
 579         case CMD_RET(CMD_802_11_SLEEP_PARAMS):
 580                 ret = lbs_ret_802_11_sleep_params(priv, resp);
 581                 break;
 582         case CMD_RET(CMD_802_11_INACTIVITY_TIMEOUT):
 583                 spin_lock_irqsave(&priv->driver_lock, flags);
 584                 *((u16 *) priv->cur_cmd->pdata_buf) =
 585                     le16_to_cpu(resp->params.inactivity_timeout.timeout);
 586                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 587                 break;
 588
 589         case CMD_RET(CMD_802_11_TPC_CFG):
 590                 spin_lock_irqsave(&priv->driver_lock, flags);
 591                 memmove(priv->cur_cmd->pdata_buf, &resp->params.tpccfg,
 592                         sizeof(struct cmd_ds_802_11_tpc_cfg));
 593                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 594                 break;
 595         case CMD_RET(CMD_802_11_LED_GPIO_CTRL):
 596                 spin_lock_irqsave(&priv->driver_lock, flags);
 597                 memmove(priv->cur_cmd->pdata_buf, &resp->params.ledgpio,
 598                         sizeof(struct cmd_ds_802_11_led_ctrl));
 599                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 600                 break;
 601         case CMD_RET(CMD_802_11_SUBSCRIBE_EVENT):
 602                 ret = lbs_ret_802_11_subscribe_event(priv, resp);
 603                 break;
 604
 605         case CMD_RET(CMD_802_11_PWR_CFG):
 606                 spin_lock_irqsave(&priv->driver_lock, flags);
 607                 memmove(priv->cur_cmd->pdata_buf, &resp->params.pwrcfg,
 608                         sizeof(struct cmd_ds_802_11_pwr_cfg));
 609                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 610
 611                 break;
 612
 613         case CMD_RET(CMD_GET_TSF):
 614                 spin_lock_irqsave(&priv->driver_lock, flags);
 615                 memcpy(priv->cur_cmd->pdata_buf,
 616                        &resp->params.gettsf.tsfvalue, sizeof(u64));
 617                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 618                 break;
 619         case CMD_RET(CMD_BT_ACCESS):
 620                 spin_lock_irqsave(&priv->driver_lock, flags);
 621                 if (priv->cur_cmd->pdata_buf)
 622                         memcpy(priv->cur_cmd->pdata_buf,
 623                                &resp->params.bt.addr1, 2 * ETH_ALEN);
 624                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 625                 break;
 626         case CMD_RET(CMD_FWT_ACCESS):
 627                 spin_lock_irqsave(&priv->driver_lock, flags);
 628                 if (priv->cur_cmd->pdata_buf)
 629                         memcpy(priv->cur_cmd->pdata_buf, &resp->params.fwt,
 630                                sizeof(resp->params.fwt));
 631                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 632                 break;
 633         case CMD_RET(CMD_802_11_BEACON_CTRL):
 634                 ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
 635                 break;
 636
 637         default:
 638                 lbs_deb_host("CMD_RESP: unknown cmd response 0x%04x\n",
 639                             resp->command);
 640                 break;
 641         }
 642         lbs_deb_leave(LBS_DEB_HOST);
 643         return ret;
 644 }
 645
 646 int lbs_process_rx_command(struct lbs_private *priv)
 647 {
 648         u16 respcmd;
 649         struct cmd_header *resp;
 650         int ret = 0;
 651         ulong flags;
 652         u16 result;
 653
 654         lbs_deb_enter(LBS_DEB_HOST);
 655
 656         /* Now we got response from FW, cancel the command timer */
 657         del_timer(&priv->command_timer);
 658
 659         mutex_lock(&priv->lock);
 660         spin_lock_irqsave(&priv->driver_lock, flags);
 661
 662         if (!priv->cur_cmd) {
 663                 lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
 664                 ret = -1;
 665                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 666                 goto done;
 667         }
 668         resp = priv->cur_cmd->cmdbuf;
 669
 670         respcmd = le16_to_cpu(resp->command);
 671         result = le16_to_cpu(resp->result);
 672
 673         lbs_deb_host("CMD_RESP: response 0x%04x, size %d, jiffies %lu\n",
 674                 respcmd, priv->upld_len, jiffies);
 675         lbs_deb_hex(LBS_DEB_HOST, "CMD_RESP", (void *) resp, priv->upld_len);
 676
 677         if (!(respcmd & 0x8000)) {
 678                 lbs_deb_host("invalid response!\n");
 679                 priv->cur_cmd_retcode = -1;
 680                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
 681                 priv->cur_cmd = NULL;
 682                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 683                 ret = -1;
 684                 goto done;
 685         }
 686
 687         /* Store the response code to cur_cmd_retcode. */
 688         priv->cur_cmd_retcode = result;
 689
 690         if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
 691                 struct cmd_ds_802_11_ps_mode *psmode = (void *) resp;
 692                 u16 action = le16_to_cpu(psmode->action);
 693
 694                 lbs_deb_host(
 695                        "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
 696                        result, action);
 697
 698                 if (result) {
 699                         lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
 700                                     result);
 701                         /*
 702                          * We should not re-try enter-ps command in
 703                          * ad-hoc mode. It takes place in
 704                          * lbs_execute_next_command().
 705                          */
 706                         if (priv->mode == IW_MODE_ADHOC &&
 707                             action == CMD_SUBCMD_ENTER_PS)
 708                                 priv->psmode = LBS802_11POWERMODECAM;
 709                 } else if (action == CMD_SUBCMD_ENTER_PS) {
 710                         priv->needtowakeup = 0;
 711                         priv->psstate = PS_STATE_AWAKE;
 712
 713                         lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
 714                         if (priv->connect_status != LBS_CONNECTED) {
 715                                 /*
 716                                  * When Deauth Event received before Enter_PS command
 717                                  * response, We need to wake up the firmware.
 718                                  */
 719                                 lbs_deb_host(
 720                                        "disconnected, invoking lbs_ps_wakeup\n");
 721
 722                                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 723                                 mutex_unlock(&priv->lock);
 724                                 lbs_ps_wakeup(priv, 0);
 725                                 mutex_lock(&priv->lock);
 726                                 spin_lock_irqsave(&priv->driver_lock, flags);
 727                         }
 728                 } else if (action == CMD_SUBCMD_EXIT_PS) {
 729                         priv->needtowakeup = 0;
 730                         priv->psstate = PS_STATE_FULL_POWER;
 731                         lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
 732                 } else {
 733                         lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
 734                 }
 735
 736                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
 737                 priv->cur_cmd = NULL;
 738                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 739
 740                 ret = 0;
 741                 goto done;
 742         }
 743
 744         /* If the command is not successful, cleanup and return failure */
 745         if ((result != 0 || !(respcmd & 0x8000))) {
 746                 lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
 747                        result, respcmd);
 748                 /*
 749                  * Handling errors here
 750                  */
 751                 switch (respcmd) {
 752                 case CMD_RET(CMD_GET_HW_SPEC):
 753                 case CMD_RET(CMD_802_11_RESET):
 754                         lbs_deb_host("CMD_RESP: reset failed\n");
 755                         break;
 756
 757                 }
 758
 759                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
 760                 priv->cur_cmd = NULL;
 761                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 762
 763                 ret = -1;
 764                 goto done;
 765         }
 766
 767         spin_unlock_irqrestore(&priv->driver_lock, flags);
 768
 769         if (priv->cur_cmd && priv->cur_cmd->callback) {
 770                 ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
 771                                 resp);
 772         } else
 773                 ret = handle_cmd_response(priv, 0, resp);
 774
 775         spin_lock_irqsave(&priv->driver_lock, flags);
 776
 777         if (priv->cur_cmd) {
 778                 /* Clean up and Put current command back to cmdfreeq */
 779                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
 780                 priv->cur_cmd = NULL;
 781         }
 782         spin_unlock_irqrestore(&priv->driver_lock, flags);
 783
 784 done:
 785         mutex_unlock(&priv->lock);
 786         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
 787         return ret;
 788 }
 789
 790 int lbs_process_event(struct lbs_private *priv)
 791 {
 792         int ret = 0;
 793         u32 eventcause;
 794
 795         lbs_deb_enter(LBS_DEB_CMD);
 796
 797         spin_lock_irq(&priv->driver_lock);
 798         eventcause = priv->eventcause >> SBI_EVENT_CAUSE_SHIFT;
 799         spin_unlock_irq(&priv->driver_lock);
 800
 801         lbs_deb_cmd("event cause %d\n", eventcause);
 802
 803         switch (eventcause) {
 804         case MACREG_INT_CODE_LINK_SENSED:
 805                 lbs_deb_cmd("EVENT: MACREG_INT_CODE_LINK_SENSED\n");
 806                 break;
 807
 808         case MACREG_INT_CODE_DEAUTHENTICATED:
 809                 lbs_deb_cmd("EVENT: deauthenticated\n");
 810                 lbs_mac_event_disconnected(priv);
 811                 break;
 812
 813         case MACREG_INT_CODE_DISASSOCIATED:
 814                 lbs_deb_cmd("EVENT: disassociated\n");
 815                 lbs_mac_event_disconnected(priv);
 816                 break;
 817
 818         case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
 819                 lbs_deb_cmd("EVENT: link lost\n");
 820                 lbs_mac_event_disconnected(priv);
 821                 break;
 822
 823         case MACREG_INT_CODE_PS_SLEEP:
 824                 lbs_deb_cmd("EVENT: sleep\n");
 825
 826                 /* handle unexpected PS SLEEP event */
 827                 if (priv->psstate == PS_STATE_FULL_POWER) {
 828                         lbs_deb_cmd(
 829                                "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
 830                         break;
 831                 }
 832                 priv->psstate = PS_STATE_PRE_SLEEP;
 833
 834                 lbs_ps_confirm_sleep(priv, (u16) priv->psmode);
 835
 836                 break;
 837
 838         case MACREG_INT_CODE_PS_AWAKE:
 839                 lbs_deb_cmd("EVENT: awake\n");
 840
 841                 /* handle unexpected PS AWAKE event */
 842                 if (priv->psstate == PS_STATE_FULL_POWER) {
 843                         lbs_deb_cmd(
 844                                "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
 845                         break;
 846                 }
 847
 848                 priv->psstate = PS_STATE_AWAKE;
 849
 850                 if (priv->needtowakeup) {
 851                         /*
 852                          * wait for the command processing to finish
 853                          * before resuming sending
 854                          * priv->needtowakeup will be set to FALSE
 855                          * in lbs_ps_wakeup()
 856                          */
 857                         lbs_deb_cmd("waking up ...\n");
 858                         lbs_ps_wakeup(priv, 0);
 859                 }
 860                 break;
 861
 862         case MACREG_INT_CODE_MIC_ERR_UNICAST:
 863                 lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
 864                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_UNICAST);
 865                 break;
 866
 867         case MACREG_INT_CODE_MIC_ERR_MULTICAST:
 868                 lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
 869                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_MULTICAST);
 870                 break;
 871         case MACREG_INT_CODE_MIB_CHANGED:
 872         case MACREG_INT_CODE_INIT_DONE:
 873                 break;
 874
 875         case MACREG_INT_CODE_ADHOC_BCN_LOST:
 876                 lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
 877                 break;
 878
 879         case MACREG_INT_CODE_RSSI_LOW:
 880                 lbs_pr_alert("EVENT: rssi low\n");
 881                 break;
 882         case MACREG_INT_CODE_SNR_LOW:
 883                 lbs_pr_alert("EVENT: snr low\n");
 884                 break;
 885         case MACREG_INT_CODE_MAX_FAIL:
 886                 lbs_pr_alert("EVENT: max fail\n");
 887                 break;
 888         case MACREG_INT_CODE_RSSI_HIGH:
 889                 lbs_pr_alert("EVENT: rssi high\n");
 890                 break;
 891         case MACREG_INT_CODE_SNR_HIGH:
 892                 lbs_pr_alert("EVENT: snr high\n");
 893                 break;
 894
 895         case MACREG_INT_CODE_MESH_AUTO_STARTED:
 896                 /* Ignore spurious autostart events if autostart is disabled */
 897                 if (!priv->mesh_autostart_enabled) {
 898                         lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
 899                         break;
 900                 }
 901                 lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
 902                 priv->mesh_connect_status = LBS_CONNECTED;
 903                 if (priv->mesh_open == 1) {
 904                         netif_wake_queue(priv->mesh_dev);
 905                         netif_carrier_on(priv->mesh_dev);
 906                 }
 907                 priv->mode = IW_MODE_ADHOC;
 908                 schedule_work(&priv->sync_channel);
 909                 break;
 910
 911         default:
 912                 lbs_pr_alert("EVENT: unknown event id %d\n", eventcause);
 913                 break;
 914         }
 915
 916         spin_lock_irq(&priv->driver_lock);
 917         priv->eventcause = 0;
 918         spin_unlock_irq(&priv->driver_lock);
 919
 920         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 921         return ret;
 922 }