SAFE public projects git trees. - safe/jmp/linux-2.6/blob - drivers/net/wireless/libertas/main.c

   1 /**
   2   * This file contains the major functions in WLAN
   3   * driver. It includes init, exit, open, close and main
   4   * thread etc..
   5   */
   6
   7 #include <linux/moduleparam.h>
   8 #include <linux/delay.h>
   9 #include <linux/etherdevice.h>
  10 #include <linux/netdevice.h>
  11 #include <linux/if_arp.h>
  12 #include <linux/kthread.h>
  13 #include <linux/kfifo.h>
  14
  15 #include <net/iw_handler.h>
  16 #include <net/ieee80211.h>
  17
  18 #include "host.h"
  19 #include "decl.h"
  20 #include "dev.h"
  21 #include "wext.h"
  22 #include "debugfs.h"
  23 #include "scan.h"
  24 #include "assoc.h"
  25 #include "cmd.h"
  26
  27 #define DRIVER_RELEASE_VERSION "323.p0"
  28 const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
  29 #ifdef  DEBUG
  30     "-dbg"
  31 #endif
  32     "";
  33
  34
  35 /* Module parameters */
  36 unsigned int lbs_debug;
  37 EXPORT_SYMBOL_GPL(lbs_debug);
  38 module_param_named(libertas_debug, lbs_debug, int, 0644);
  39
  40
  41 /* This global structure is used to send the confirm_sleep command as
  42  * fast as possible down to the firmware. */
  43 struct cmd_confirm_sleep confirm_sleep;
  44
  45
  46 #define LBS_TX_PWR_DEFAULT              20      /*100mW */
  47 #define LBS_TX_PWR_US_DEFAULT           20      /*100mW */
  48 #define LBS_TX_PWR_JP_DEFAULT           16      /*50mW */
  49 #define LBS_TX_PWR_FR_DEFAULT           20      /*100mW */
  50 #define LBS_TX_PWR_EMEA_DEFAULT 20      /*100mW */
  51
  52 /* Format { channel, frequency (MHz), maxtxpower } */
  53 /* band: 'B/G', region: USA FCC/Canada IC */
  54 static struct chan_freq_power channel_freq_power_US_BG[] = {
  55         {1, 2412, LBS_TX_PWR_US_DEFAULT},
  56         {2, 2417, LBS_TX_PWR_US_DEFAULT},
  57         {3, 2422, LBS_TX_PWR_US_DEFAULT},
  58         {4, 2427, LBS_TX_PWR_US_DEFAULT},
  59         {5, 2432, LBS_TX_PWR_US_DEFAULT},
  60         {6, 2437, LBS_TX_PWR_US_DEFAULT},
  61         {7, 2442, LBS_TX_PWR_US_DEFAULT},
  62         {8, 2447, LBS_TX_PWR_US_DEFAULT},
  63         {9, 2452, LBS_TX_PWR_US_DEFAULT},
  64         {10, 2457, LBS_TX_PWR_US_DEFAULT},
  65         {11, 2462, LBS_TX_PWR_US_DEFAULT}
  66 };
  67
  68 /* band: 'B/G', region: Europe ETSI */
  69 static struct chan_freq_power channel_freq_power_EU_BG[] = {
  70         {1, 2412, LBS_TX_PWR_EMEA_DEFAULT},
  71         {2, 2417, LBS_TX_PWR_EMEA_DEFAULT},
  72         {3, 2422, LBS_TX_PWR_EMEA_DEFAULT},
  73         {4, 2427, LBS_TX_PWR_EMEA_DEFAULT},
  74         {5, 2432, LBS_TX_PWR_EMEA_DEFAULT},
  75         {6, 2437, LBS_TX_PWR_EMEA_DEFAULT},
  76         {7, 2442, LBS_TX_PWR_EMEA_DEFAULT},
  77         {8, 2447, LBS_TX_PWR_EMEA_DEFAULT},
  78         {9, 2452, LBS_TX_PWR_EMEA_DEFAULT},
  79         {10, 2457, LBS_TX_PWR_EMEA_DEFAULT},
  80         {11, 2462, LBS_TX_PWR_EMEA_DEFAULT},
  81         {12, 2467, LBS_TX_PWR_EMEA_DEFAULT},
  82         {13, 2472, LBS_TX_PWR_EMEA_DEFAULT}
  83 };
  84
  85 /* band: 'B/G', region: Spain */
  86 static struct chan_freq_power channel_freq_power_SPN_BG[] = {
  87         {10, 2457, LBS_TX_PWR_DEFAULT},
  88         {11, 2462, LBS_TX_PWR_DEFAULT}
  89 };
  90
  91 /* band: 'B/G', region: France */
  92 static struct chan_freq_power channel_freq_power_FR_BG[] = {
  93         {10, 2457, LBS_TX_PWR_FR_DEFAULT},
  94         {11, 2462, LBS_TX_PWR_FR_DEFAULT},
  95         {12, 2467, LBS_TX_PWR_FR_DEFAULT},
  96         {13, 2472, LBS_TX_PWR_FR_DEFAULT}
  97 };
  98
  99 /* band: 'B/G', region: Japan */
 100 static struct chan_freq_power channel_freq_power_JPN_BG[] = {
 101         {1, 2412, LBS_TX_PWR_JP_DEFAULT},
 102         {2, 2417, LBS_TX_PWR_JP_DEFAULT},
 103         {3, 2422, LBS_TX_PWR_JP_DEFAULT},
 104         {4, 2427, LBS_TX_PWR_JP_DEFAULT},
 105         {5, 2432, LBS_TX_PWR_JP_DEFAULT},
 106         {6, 2437, LBS_TX_PWR_JP_DEFAULT},
 107         {7, 2442, LBS_TX_PWR_JP_DEFAULT},
 108         {8, 2447, LBS_TX_PWR_JP_DEFAULT},
 109         {9, 2452, LBS_TX_PWR_JP_DEFAULT},
 110         {10, 2457, LBS_TX_PWR_JP_DEFAULT},
 111         {11, 2462, LBS_TX_PWR_JP_DEFAULT},
 112         {12, 2467, LBS_TX_PWR_JP_DEFAULT},
 113         {13, 2472, LBS_TX_PWR_JP_DEFAULT},
 114         {14, 2484, LBS_TX_PWR_JP_DEFAULT}
 115 };
 116
 117 /**
 118  * the structure for channel, frequency and power
 119  */
 120 struct region_cfp_table {
 121         u8 region;
 122         struct chan_freq_power *cfp_BG;
 123         int cfp_no_BG;
 124 };
 125
 126 /**
 127  * the structure for the mapping between region and CFP
 128  */
 129 static struct region_cfp_table region_cfp_table[] = {
 130         {0x10,                  /*US FCC */
 131          channel_freq_power_US_BG,
 132          ARRAY_SIZE(channel_freq_power_US_BG),
 133          }
 134         ,
 135         {0x20,                  /*CANADA IC */
 136          channel_freq_power_US_BG,
 137          ARRAY_SIZE(channel_freq_power_US_BG),
 138          }
 139         ,
 140         {0x30, /*EU*/ channel_freq_power_EU_BG,
 141          ARRAY_SIZE(channel_freq_power_EU_BG),
 142          }
 143         ,
 144         {0x31, /*SPAIN*/ channel_freq_power_SPN_BG,
 145          ARRAY_SIZE(channel_freq_power_SPN_BG),
 146          }
 147         ,
 148         {0x32, /*FRANCE*/ channel_freq_power_FR_BG,
 149          ARRAY_SIZE(channel_freq_power_FR_BG),
 150          }
 151         ,
 152         {0x40, /*JAPAN*/ channel_freq_power_JPN_BG,
 153          ARRAY_SIZE(channel_freq_power_JPN_BG),
 154          }
 155         ,
 156 /*Add new region here */
 157 };
 158
 159 /**
 160  * the table to keep region code
 161  */
 162 u16 lbs_region_code_to_index[MRVDRV_MAX_REGION_CODE] =
 163     { 0x10, 0x20, 0x30, 0x31, 0x32, 0x40 };
 164
 165 /**
 166  * 802.11b/g supported bitrates (in 500Kb/s units)
 167  */
 168 u8 lbs_bg_rates[MAX_RATES] =
 169     { 0x02, 0x04, 0x0b, 0x16, 0x0c, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c,
 170 0x00, 0x00 };
 171
 172 /**
 173  * FW rate table.  FW refers to rates by their index in this table, not by the
 174  * rate value itself.  Values of 0x00 are
 175  * reserved positions.
 176  */
 177 static u8 fw_data_rates[MAX_RATES] =
 178     { 0x02, 0x04, 0x0B, 0x16, 0x00, 0x0C, 0x12,
 179       0x18, 0x24, 0x30, 0x48, 0x60, 0x6C, 0x00
 180 };
 181
 182 /**
 183  *  @brief use index to get the data rate
 184  *
 185  *  @param idx                The index of data rate
 186  *  @return                     data rate or 0
 187  */
 188 u32 lbs_fw_index_to_data_rate(u8 idx)
 189 {
 190         if (idx >= sizeof(fw_data_rates))
 191                 idx = 0;
 192         return fw_data_rates[idx];
 193 }
 194
 195 /**
 196  *  @brief use rate to get the index
 197  *
 198  *  @param rate                 data rate
 199  *  @return                     index or 0
 200  */
 201 u8 lbs_data_rate_to_fw_index(u32 rate)
 202 {
 203         u8 i;
 204
 205         if (!rate)
 206                 return 0;
 207
 208         for (i = 0; i < sizeof(fw_data_rates); i++) {
 209                 if (rate == fw_data_rates[i])
 210                         return i;
 211         }
 212         return 0;
 213 }
 214
 215 /**
 216  * Attributes exported through sysfs
 217  */
 218
 219 /**
 220  * @brief Get function for sysfs attribute anycast_mask
 221  */
 222 static ssize_t lbs_anycast_get(struct device *dev,
 223                 struct device_attribute *attr, char * buf)
 224 {
 225         struct lbs_private *priv = to_net_dev(dev)->priv;
 226         struct cmd_ds_mesh_access mesh_access;
 227         int ret;
 228
 229         memset(&mesh_access, 0, sizeof(mesh_access));
 230
 231         ret = lbs_mesh_access(priv, CMD_ACT_MESH_GET_ANYCAST, &mesh_access);
 232         if (ret)
 233                 return ret;
 234
 235         return snprintf(buf, 12, "0x%X\n", le32_to_cpu(mesh_access.data[0]));
 236 }
 237
 238 /**
 239  * @brief Set function for sysfs attribute anycast_mask
 240  */
 241 static ssize_t lbs_anycast_set(struct device *dev,
 242                 struct device_attribute *attr, const char * buf, size_t count)
 243 {
 244         struct lbs_private *priv = to_net_dev(dev)->priv;
 245         struct cmd_ds_mesh_access mesh_access;
 246         uint32_t datum;
 247         int ret;
 248
 249         memset(&mesh_access, 0, sizeof(mesh_access));
 250         sscanf(buf, "%x", &datum);
 251         mesh_access.data[0] = cpu_to_le32(datum);
 252
 253         ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_ANYCAST, &mesh_access);
 254         if (ret)
 255                 return ret;
 256
 257         return strlen(buf);
 258 }
 259
 260 static int lbs_add_rtap(struct lbs_private *priv);
 261 static void lbs_remove_rtap(struct lbs_private *priv);
 262 static int lbs_add_mesh(struct lbs_private *priv);
 263 static void lbs_remove_mesh(struct lbs_private *priv);
 264
 265
 266 /**
 267  * Get function for sysfs attribute rtap
 268  */
 269 static ssize_t lbs_rtap_get(struct device *dev,
 270                 struct device_attribute *attr, char * buf)
 271 {
 272         struct lbs_private *priv = to_net_dev(dev)->priv;
 273         return snprintf(buf, 5, "0x%X\n", priv->monitormode);
 274 }
 275
 276 /**
 277  *  Set function for sysfs attribute rtap
 278  */
 279 static ssize_t lbs_rtap_set(struct device *dev,
 280                 struct device_attribute *attr, const char * buf, size_t count)
 281 {
 282         int monitor_mode;
 283         struct lbs_private *priv = to_net_dev(dev)->priv;
 284
 285         sscanf(buf, "%x", &monitor_mode);
 286         if (monitor_mode) {
 287                 if (priv->monitormode == monitor_mode)
 288                         return strlen(buf);
 289                 if (!priv->monitormode) {
 290                         if (priv->infra_open || priv->mesh_open)
 291                                 return -EBUSY;
 292                         if (priv->mode == IW_MODE_INFRA)
 293                                 lbs_send_deauthentication(priv);
 294                         else if (priv->mode == IW_MODE_ADHOC)
 295                                 lbs_stop_adhoc_network(priv);
 296                         lbs_add_rtap(priv);
 297                 }
 298                 priv->monitormode = monitor_mode;
 299         }
 300
 301         else {
 302                 if (!priv->monitormode)
 303                         return strlen(buf);
 304                 priv->monitormode = 0;
 305                 lbs_remove_rtap(priv);
 306
 307                 if (priv->currenttxskb) {
 308                         dev_kfree_skb_any(priv->currenttxskb);
 309                         priv->currenttxskb = NULL;
 310                 }
 311
 312                 /* Wake queues, command thread, etc. */
 313                 lbs_host_to_card_done(priv);
 314         }
 315
 316         lbs_prepare_and_send_command(priv,
 317                         CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
 318                         CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
 319         return strlen(buf);
 320 }
 321
 322 /**
 323  * lbs_rtap attribute to be exported per ethX interface
 324  * through sysfs (/sys/class/net/ethX/lbs_rtap)
 325  */
 326 static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );
 327
 328 /**
 329  * Get function for sysfs attribute mesh
 330  */
 331 static ssize_t lbs_mesh_get(struct device *dev,
 332                 struct device_attribute *attr, char * buf)
 333 {
 334         struct lbs_private *priv = to_net_dev(dev)->priv;
 335         return snprintf(buf, 5, "0x%X\n", !!priv->mesh_dev);
 336 }
 337
 338 /**
 339  *  Set function for sysfs attribute mesh
 340  */
 341 static ssize_t lbs_mesh_set(struct device *dev,
 342                 struct device_attribute *attr, const char * buf, size_t count)
 343 {
 344         struct lbs_private *priv = to_net_dev(dev)->priv;
 345         int enable;
 346         int ret;
 347
 348         sscanf(buf, "%x", &enable);
 349         enable = !!enable;
 350         if (enable == !!priv->mesh_dev)
 351                 return count;
 352
 353         ret = lbs_mesh_config(priv, enable, priv->curbssparams.channel);
 354         if (ret)
 355                 return ret;
 356
 357         if (enable)
 358                 lbs_add_mesh(priv);
 359         else
 360                 lbs_remove_mesh(priv);
 361
 362         return count;
 363 }
 364
 365 /**
 366  * lbs_mesh attribute to be exported per ethX interface
 367  * through sysfs (/sys/class/net/ethX/lbs_mesh)
 368  */
 369 static DEVICE_ATTR(lbs_mesh, 0644, lbs_mesh_get, lbs_mesh_set);
 370
 371 /**
 372  * anycast_mask attribute to be exported per mshX interface
 373  * through sysfs (/sys/class/net/mshX/anycast_mask)
 374  */
 375 static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
 376
 377 static struct attribute *lbs_mesh_sysfs_entries[] = {
 378         &dev_attr_anycast_mask.attr,
 379         NULL,
 380 };
 381
 382 static struct attribute_group lbs_mesh_attr_group = {
 383         .attrs = lbs_mesh_sysfs_entries,
 384 };
 385
 386 /**
 387  *  @brief This function opens the ethX or mshX interface
 388  *
 389  *  @param dev     A pointer to net_device structure
 390  *  @return        0 or -EBUSY if monitor mode active
 391  */
 392 static int lbs_dev_open(struct net_device *dev)
 393 {
 394         struct lbs_private *priv = (struct lbs_private *) dev->priv ;
 395         int ret = 0;
 396
 397         lbs_deb_enter(LBS_DEB_NET);
 398
 399         spin_lock_irq(&priv->driver_lock);
 400
 401         if (priv->monitormode) {
 402                 ret = -EBUSY;
 403                 goto out;
 404         }
 405
 406         if (dev == priv->mesh_dev) {
 407                 priv->mesh_open = 1;
 408                 priv->mesh_connect_status = LBS_CONNECTED;
 409                 netif_carrier_on(dev);
 410         } else {
 411                 priv->infra_open = 1;
 412
 413                 if (priv->connect_status == LBS_CONNECTED)
 414                         netif_carrier_on(dev);
 415                 else
 416                         netif_carrier_off(dev);
 417         }
 418
 419         if (!priv->tx_pending_len)
 420                 netif_wake_queue(dev);
 421  out:
 422
 423         spin_unlock_irq(&priv->driver_lock);
 424         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
 425         return ret;
 426 }
 427
 428 /**
 429  *  @brief This function closes the mshX interface
 430  *
 431  *  @param dev     A pointer to net_device structure
 432  *  @return        0
 433  */
 434 static int lbs_mesh_stop(struct net_device *dev)
 435 {
 436         struct lbs_private *priv = (struct lbs_private *) (dev->priv);
 437
 438         lbs_deb_enter(LBS_DEB_MESH);
 439         spin_lock_irq(&priv->driver_lock);
 440
 441         priv->mesh_open = 0;
 442         priv->mesh_connect_status = LBS_DISCONNECTED;
 443
 444         netif_stop_queue(dev);
 445         netif_carrier_off(dev);
 446
 447         spin_unlock_irq(&priv->driver_lock);
 448
 449         lbs_deb_leave(LBS_DEB_MESH);
 450         return 0;
 451 }
 452
 453 /**
 454  *  @brief This function closes the ethX interface
 455  *
 456  *  @param dev     A pointer to net_device structure
 457  *  @return        0
 458  */
 459 static int lbs_eth_stop(struct net_device *dev)
 460 {
 461         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 462
 463         lbs_deb_enter(LBS_DEB_NET);
 464
 465         spin_lock_irq(&priv->driver_lock);
 466         priv->infra_open = 0;
 467         netif_stop_queue(dev);
 468         spin_unlock_irq(&priv->driver_lock);
 469
 470         lbs_deb_leave(LBS_DEB_NET);
 471         return 0;
 472 }
 473
 474 static void lbs_tx_timeout(struct net_device *dev)
 475 {
 476         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 477
 478         lbs_deb_enter(LBS_DEB_TX);
 479
 480         lbs_pr_err("tx watch dog timeout\n");
 481
 482         dev->trans_start = jiffies;
 483
 484         if (priv->currenttxskb)
 485                 lbs_send_tx_feedback(priv, 0);
 486
 487         /* XX: Shouldn't we also call into the hw-specific driver
 488            to kick it somehow? */
 489         lbs_host_to_card_done(priv);
 490
 491         /* More often than not, this actually happens because the
 492            firmware has crapped itself -- rather than just a very
 493            busy medium. So send a harmless command, and if/when
 494            _that_ times out, we'll kick it in the head. */
 495         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
 496                                      0, 0, NULL);
 497
 498         lbs_deb_leave(LBS_DEB_TX);
 499 }
 500
 501 void lbs_host_to_card_done(struct lbs_private *priv)
 502 {
 503         unsigned long flags;
 504
 505         lbs_deb_enter(LBS_DEB_THREAD);
 506
 507         spin_lock_irqsave(&priv->driver_lock, flags);
 508
 509         priv->dnld_sent = DNLD_RES_RECEIVED;
 510
 511         /* Wake main thread if commands are pending */
 512         if (!priv->cur_cmd || priv->tx_pending_len > 0)
 513                 wake_up_interruptible(&priv->waitq);
 514
 515         spin_unlock_irqrestore(&priv->driver_lock, flags);
 516         lbs_deb_leave(LBS_DEB_THREAD);
 517 }
 518 EXPORT_SYMBOL_GPL(lbs_host_to_card_done);
 519
 520 /**
 521  *  @brief This function returns the network statistics
 522  *
 523  *  @param dev     A pointer to struct lbs_private structure
 524  *  @return        A pointer to net_device_stats structure
 525  */
 526 static struct net_device_stats *lbs_get_stats(struct net_device *dev)
 527 {
 528         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 529
 530         lbs_deb_enter(LBS_DEB_NET);
 531         return &priv->stats;
 532 }
 533
 534 static int lbs_set_mac_address(struct net_device *dev, void *addr)
 535 {
 536         int ret = 0;
 537         struct lbs_private *priv = (struct lbs_private *) dev->priv;
 538         struct sockaddr *phwaddr = addr;
 539         struct cmd_ds_802_11_mac_address cmd;
 540
 541         lbs_deb_enter(LBS_DEB_NET);
 542
 543         /* In case it was called from the mesh device */
 544         dev = priv->dev;
 545
 546         cmd.hdr.size = cpu_to_le16(sizeof(cmd));
 547         cmd.action = cpu_to_le16(CMD_ACT_SET);
 548         memcpy(cmd.macadd, phwaddr->sa_data, ETH_ALEN);
 549
 550         ret = lbs_cmd_with_response(priv, CMD_802_11_MAC_ADDRESS, &cmd);
 551         if (ret) {
 552                 lbs_deb_net("set MAC address failed\n");
 553                 goto done;
 554         }
 555
 556         memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
 557         memcpy(dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
 558         if (priv->mesh_dev)
 559                 memcpy(priv->mesh_dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
 560
 561 done:
 562         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
 563         return ret;
 564 }
 565
 566 static int lbs_copy_multicast_address(struct lbs_private *priv,
 567                                      struct net_device *dev)
 568 {
 569         int i = 0;
 570         struct dev_mc_list *mcptr = dev->mc_list;
 571
 572         for (i = 0; i < dev->mc_count; i++) {
 573                 memcpy(&priv->multicastlist[i], mcptr->dmi_addr, ETH_ALEN);
 574                 mcptr = mcptr->next;
 575         }
 576         return i;
 577 }
 578
 579 static void lbs_set_multicast_list(struct net_device *dev)
 580 {
 581         struct lbs_private *priv = dev->priv;
 582         int old_mac_control;
 583         DECLARE_MAC_BUF(mac);
 584
 585         lbs_deb_enter(LBS_DEB_NET);
 586
 587         old_mac_control = priv->mac_control;
 588
 589         if (dev->flags & IFF_PROMISC) {
 590                 lbs_deb_net("enable promiscuous mode\n");
 591                 priv->mac_control |=
 592                     CMD_ACT_MAC_PROMISCUOUS_ENABLE;
 593                 priv->mac_control &=
 594                     ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
 595                       CMD_ACT_MAC_MULTICAST_ENABLE);
 596         } else {
 597                 /* Multicast */
 598                 priv->mac_control &=
 599                     ~CMD_ACT_MAC_PROMISCUOUS_ENABLE;
 600
 601                 if (dev->flags & IFF_ALLMULTI || dev->mc_count >
 602                     MRVDRV_MAX_MULTICAST_LIST_SIZE) {
 603                         lbs_deb_net( "enabling all multicast\n");
 604                         priv->mac_control |=
 605                             CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
 606                         priv->mac_control &=
 607                             ~CMD_ACT_MAC_MULTICAST_ENABLE;
 608                 } else {
 609                         priv->mac_control &=
 610                             ~CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
 611
 612                         if (!dev->mc_count) {
 613                                 lbs_deb_net("no multicast addresses, "
 614                                        "disabling multicast\n");
 615                                 priv->mac_control &=
 616                                     ~CMD_ACT_MAC_MULTICAST_ENABLE;
 617                         } else {
 618                                 int i;
 619
 620                                 priv->mac_control |=
 621                                     CMD_ACT_MAC_MULTICAST_ENABLE;
 622
 623                                 priv->nr_of_multicastmacaddr =
 624                                     lbs_copy_multicast_address(priv, dev);
 625
 626                                 lbs_deb_net("multicast addresses: %d\n",
 627                                        dev->mc_count);
 628
 629                                 for (i = 0; i < dev->mc_count; i++) {
 630                                         lbs_deb_net("Multicast address %d: %s\n",
 631                                                i, print_mac(mac,
 632                                                priv->multicastlist[i]));
 633                                 }
 634                                 /* send multicast addresses to firmware */
 635                                 lbs_prepare_and_send_command(priv,
 636                                                       CMD_MAC_MULTICAST_ADR,
 637                                                       CMD_ACT_SET, 0, 0,
 638                                                       NULL);
 639                         }
 640                 }
 641         }
 642
 643         if (priv->mac_control != old_mac_control)
 644                 lbs_set_mac_control(priv);
 645
 646         lbs_deb_leave(LBS_DEB_NET);
 647 }
 648
 649 /**
 650  *  @brief This function handles the major jobs in the LBS driver.
 651  *  It handles all events generated by firmware, RX data received
 652  *  from firmware and TX data sent from kernel.
 653  *
 654  *  @param data    A pointer to lbs_thread structure
 655  *  @return        0
 656  */
 657 static int lbs_thread(void *data)
 658 {
 659         struct net_device *dev = data;
 660         struct lbs_private *priv = dev->priv;
 661         wait_queue_t wait;
 662
 663         lbs_deb_enter(LBS_DEB_THREAD);
 664
 665         init_waitqueue_entry(&wait, current);
 666
 667         for (;;) {
 668                 int shouldsleep;
 669                 u8 resp_idx;
 670
 671                 lbs_deb_thread("1: currenttxskb %p, dnld_sent %d\n",
 672                                 priv->currenttxskb, priv->dnld_sent);
 673
 674                 add_wait_queue(&priv->waitq, &wait);
 675                 set_current_state(TASK_INTERRUPTIBLE);
 676                 spin_lock_irq(&priv->driver_lock);
 677
 678                 if (kthread_should_stop())
 679                         shouldsleep = 0;        /* Bye */
 680                 else if (priv->surpriseremoved)
 681                         shouldsleep = 1;        /* We need to wait until we're _told_ to die */
 682                 else if (priv->psstate == PS_STATE_SLEEP)
 683                         shouldsleep = 1;        /* Sleep mode. Nothing we can do till it wakes */
 684                 else if (priv->cmd_timed_out)
 685                         shouldsleep = 0;        /* Command timed out. Recover */
 686                 else if (!priv->fw_ready)
 687                         shouldsleep = 1;        /* Firmware not ready. We're waiting for it */
 688                 else if (priv->dnld_sent)
 689                         shouldsleep = 1;        /* Something is en route to the device already */
 690                 else if (priv->tx_pending_len > 0)
 691                         shouldsleep = 0;        /* We've a packet to send */
 692                 else if (priv->cur_cmd)
 693                         shouldsleep = 1;        /* Can't send a command; one already running */
 694                 else if (!list_empty(&priv->cmdpendingq))
 695                         shouldsleep = 0;        /* We have a command to send */
 696                 else if (__kfifo_len(priv->event_fifo))
 697                         shouldsleep = 0;        /* We have an event to process */
 698                 else if (priv->resp_len[priv->resp_idx])
 699                         shouldsleep = 0;        /* We have a command response */
 700                 else
 701                         shouldsleep = 1;        /* No command */
 702
 703                 if (shouldsleep) {
 704                         lbs_deb_thread("sleeping, connect_status %d, "
 705                                 "ps_mode %d, ps_state %d\n",
 706                                 priv->connect_status,
 707                                 priv->psmode, priv->psstate);
 708                         spin_unlock_irq(&priv->driver_lock);
 709                         schedule();
 710                 } else
 711                         spin_unlock_irq(&priv->driver_lock);
 712
 713                 lbs_deb_thread("2: currenttxskb %p, dnld_send %d\n",
 714                                priv->currenttxskb, priv->dnld_sent);
 715
 716                 set_current_state(TASK_RUNNING);
 717                 remove_wait_queue(&priv->waitq, &wait);
 718
 719                 lbs_deb_thread("3: currenttxskb %p, dnld_sent %d\n",
 720                                priv->currenttxskb, priv->dnld_sent);
 721
 722                 if (kthread_should_stop()) {
 723                         lbs_deb_thread("break from main thread\n");
 724                         break;
 725                 }
 726
 727                 if (priv->surpriseremoved) {
 728                         lbs_deb_thread("adapter removed; waiting to die...\n");
 729                         continue;
 730                 }
 731
 732                 lbs_deb_thread("4: currenttxskb %p, dnld_sent %d\n",
 733                        priv->currenttxskb, priv->dnld_sent);
 734
 735                 /* Process any pending command response */
 736                 spin_lock_irq(&priv->driver_lock);
 737                 resp_idx = priv->resp_idx;
 738                 if (priv->resp_len[resp_idx]) {
 739                         spin_unlock_irq(&priv->driver_lock);
 740                         lbs_process_command_response(priv,
 741                                 priv->resp_buf[resp_idx],
 742                                 priv->resp_len[resp_idx]);
 743                         spin_lock_irq(&priv->driver_lock);
 744                         priv->resp_len[resp_idx] = 0;
 745                 }
 746                 spin_unlock_irq(&priv->driver_lock);
 747
 748                 /* command timeout stuff */
 749                 if (priv->cmd_timed_out && priv->cur_cmd) {
 750                         struct cmd_ctrl_node *cmdnode = priv->cur_cmd;
 751
 752                         if (++priv->nr_retries > 10) {
 753                                 lbs_pr_info("Excessive timeouts submitting command %x\n",
 754                                             le16_to_cpu(cmdnode->cmdbuf->command));
 755                                 lbs_complete_command(priv, cmdnode, -ETIMEDOUT);
 756                                 priv->nr_retries = 0;
 757                         } else {
 758                                 priv->cur_cmd = NULL;
 759                                 priv->dnld_sent = DNLD_RES_RECEIVED;
 760                                 lbs_pr_info("requeueing command %x due to timeout (#%d)\n",
 761                                             le16_to_cpu(cmdnode->cmdbuf->command), priv->nr_retries);
 762
 763                                 /* Stick it back at the _top_ of the pending queue
 764                                    for immediate resubmission */
 765                                 list_add(&cmdnode->list, &priv->cmdpendingq);
 766                         }
 767                 }
 768                 priv->cmd_timed_out = 0;
 769
 770                 /* Process hardware events, e.g. card removed, link lost */
 771                 spin_lock_irq(&priv->driver_lock);
 772                 while (__kfifo_len(priv->event_fifo)) {
 773                         u32 event;
 774
 775                         __kfifo_get(priv->event_fifo, (unsigned char *) &event,
 776                                 sizeof(event));
 777                         spin_unlock_irq(&priv->driver_lock);
 778                         lbs_process_event(priv, event);
 779                         spin_lock_irq(&priv->driver_lock);
 780                 }
 781                 spin_unlock_irq(&priv->driver_lock);
 782
 783                 if (!priv->fw_ready)
 784                         continue;
 785
 786                 /* Check if we need to confirm Sleep Request received previously */
 787                 if (priv->psstate == PS_STATE_PRE_SLEEP &&
 788                     !priv->dnld_sent && !priv->cur_cmd) {
 789                         if (priv->connect_status == LBS_CONNECTED) {
 790                                 lbs_deb_thread("pre-sleep, currenttxskb %p, "
 791                                         "dnld_sent %d, cur_cmd %p\n",
 792                                         priv->currenttxskb, priv->dnld_sent,
 793                                         priv->cur_cmd);
 794
 795                                 lbs_ps_confirm_sleep(priv);
 796                         } else {
 797                                 /* workaround for firmware sending
 798                                  * deauth/linkloss event immediately
 799                                  * after sleep request; remove this
 800                                  * after firmware fixes it
 801                                  */
 802                                 priv->psstate = PS_STATE_AWAKE;
 803                                 lbs_pr_alert("ignore PS_SleepConfirm in "
 804                                         "non-connected state\n");
 805                         }
 806                 }
 807
 808                 /* The PS state is changed during processing of Sleep Request
 809                  * event above
 810                  */
 811                 if ((priv->psstate == PS_STATE_SLEEP) ||
 812                     (priv->psstate == PS_STATE_PRE_SLEEP))
 813                         continue;
 814
 815                 /* Execute the next command */
 816                 if (!priv->dnld_sent && !priv->cur_cmd)
 817                         lbs_execute_next_command(priv);
 818
 819                 /* Wake-up command waiters which can't sleep in
 820                  * lbs_prepare_and_send_command
 821                  */
 822                 if (!list_empty(&priv->cmdpendingq))
 823                         wake_up_all(&priv->cmd_pending);
 824
 825                 spin_lock_irq(&priv->driver_lock);
 826                 if (!priv->dnld_sent && priv->tx_pending_len > 0) {
 827                         int ret = priv->hw_host_to_card(priv, MVMS_DAT,
 828                                                         priv->tx_pending_buf,
 829                                                         priv->tx_pending_len);
 830                         if (ret) {
 831                                 lbs_deb_tx("host_to_card failed %d\n", ret);
 832                                 priv->dnld_sent = DNLD_RES_RECEIVED;
 833                         }
 834                         priv->tx_pending_len = 0;
 835                         if (!priv->currenttxskb) {
 836                                 /* We can wake the queues immediately if we aren't
 837                                    waiting for TX feedback */
 838                                 if (priv->connect_status == LBS_CONNECTED)
 839                                         netif_wake_queue(priv->dev);
 840                                 if (priv->mesh_dev &&
 841                                     priv->mesh_connect_status == LBS_CONNECTED)
 842                                         netif_wake_queue(priv->mesh_dev);
 843                         }
 844                 }
 845                 spin_unlock_irq(&priv->driver_lock);
 846         }
 847
 848         del_timer(&priv->command_timer);
 849         wake_up_all(&priv->cmd_pending);
 850
 851         lbs_deb_leave(LBS_DEB_THREAD);
 852         return 0;
 853 }
 854
 855 static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
 856                                 struct cmd_header *cmd)
 857 {
 858         lbs_deb_enter(LBS_DEB_FW);
 859
 860         netif_device_detach(priv->dev);
 861         if (priv->mesh_dev)
 862                 netif_device_detach(priv->mesh_dev);
 863
 864         priv->fw_ready = 0;
 865         lbs_deb_leave(LBS_DEB_FW);
 866         return 0;
 867 }
 868
 869 int lbs_suspend(struct lbs_private *priv)
 870 {
 871         struct cmd_header cmd;
 872         int ret;
 873
 874         lbs_deb_enter(LBS_DEB_FW);
 875
 876         if (priv->wol_criteria == 0xffffffff) {
 877                 lbs_pr_info("Suspend attempt without configuring wake params!\n");
 878                 return -EINVAL;
 879         }
 880
 881         memset(&cmd, 0, sizeof(cmd));
 882
 883         ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
 884                         sizeof(cmd), lbs_suspend_callback, 0);
 885         if (ret)
 886                 lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);
 887
 888         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
 889         return ret;
 890 }
 891 EXPORT_SYMBOL_GPL(lbs_suspend);
 892
 893 int lbs_resume(struct lbs_private *priv)
 894 {
 895         lbs_deb_enter(LBS_DEB_FW);
 896
 897         priv->fw_ready = 1;
 898
 899         /* Firmware doesn't seem to give us RX packets any more
 900            until we send it some command. Might as well update */
 901         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
 902                                      0, 0, NULL);
 903
 904         netif_device_attach(priv->dev);
 905         if (priv->mesh_dev)
 906                 netif_device_attach(priv->mesh_dev);
 907
 908         lbs_deb_leave(LBS_DEB_FW);
 909         return 0;
 910 }
 911 EXPORT_SYMBOL_GPL(lbs_resume);
 912
 913 /**
 914  *  @brief This function downloads firmware image, gets
 915  *  HW spec from firmware and set basic parameters to
 916  *  firmware.
 917  *
 918  *  @param priv    A pointer to struct lbs_private structure
 919  *  @return        0 or -1
 920  */
 921 static int lbs_setup_firmware(struct lbs_private *priv)
 922 {
 923         int ret = -1;
 924
 925         lbs_deb_enter(LBS_DEB_FW);
 926
 927         /*
 928          * Read MAC address from HW
 929          */
 930         memset(priv->current_addr, 0xff, ETH_ALEN);
 931         ret = lbs_update_hw_spec(priv);
 932         if (ret) {
 933                 ret = -1;
 934                 goto done;
 935         }
 936
 937         lbs_set_mac_control(priv);
 938
 939         ret = lbs_get_data_rate(priv);
 940         if (ret < 0) {
 941                 ret = -1;
 942                 goto done;
 943         }
 944
 945         ret = 0;
 946 done:
 947         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
 948         return ret;
 949 }
 950
 951 /**
 952  *  This function handles the timeout of command sending.
 953  *  It will re-send the same command again.
 954  */
 955 static void command_timer_fn(unsigned long data)
 956 {
 957         struct lbs_private *priv = (struct lbs_private *)data;
 958         unsigned long flags;
 959
 960         lbs_deb_enter(LBS_DEB_CMD);
 961         spin_lock_irqsave(&priv->driver_lock, flags);
 962
 963         if (!priv->cur_cmd) {
 964                 lbs_pr_info("Command timer expired; no pending command\n");
 965                 goto out;
 966         }
 967
 968         lbs_pr_info("Command %x timed out\n", le16_to_cpu(priv->cur_cmd->cmdbuf->command));
 969
 970         priv->cmd_timed_out = 1;
 971         wake_up_interruptible(&priv->waitq);
 972 out:
 973         spin_unlock_irqrestore(&priv->driver_lock, flags);
 974         lbs_deb_leave(LBS_DEB_CMD);
 975 }
 976
 977 static void lbs_sync_channel_worker(struct work_struct *work)
 978 {
 979         struct lbs_private *priv = container_of(work, struct lbs_private,
 980                 sync_channel);
 981
 982         lbs_deb_enter(LBS_DEB_MAIN);
 983         if (lbs_update_channel(priv))
 984                 lbs_pr_info("Channel synchronization failed.");
 985         lbs_deb_leave(LBS_DEB_MAIN);
 986 }
 987
 988
 989 static int lbs_init_adapter(struct lbs_private *priv)
 990 {
 991         size_t bufsize;
 992         int i, ret = 0;
 993
 994         lbs_deb_enter(LBS_DEB_MAIN);
 995
 996         /* Allocate buffer to store the BSSID list */
 997         bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
 998         priv->networks = kzalloc(bufsize, GFP_KERNEL);
 999         if (!priv->networks) {
1000                 lbs_pr_err("Out of memory allocating beacons\n");
1001                 ret = -1;
1002                 goto out;
1003         }
1004
1005         /* Initialize scan result lists */
1006         INIT_LIST_HEAD(&priv->network_free_list);
1007         INIT_LIST_HEAD(&priv->network_list);
1008         for (i = 0; i < MAX_NETWORK_COUNT; i++) {
1009                 list_add_tail(&priv->networks[i].list,
1010                               &priv->network_free_list);
1011         }
1012
1013         memset(priv->current_addr, 0xff, ETH_ALEN);
1014
1015         priv->connect_status = LBS_DISCONNECTED;
1016         priv->mesh_connect_status = LBS_DISCONNECTED;
1017         priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
1018         priv->mode = IW_MODE_INFRA;
1019         priv->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
1020         priv->mac_control = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
1021         priv->radioon = RADIO_ON;
1022         priv->auto_rate = 1;
1023         priv->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
1024         priv->psmode = LBS802_11POWERMODECAM;
1025         priv->psstate = PS_STATE_FULL_POWER;
1026
1027         mutex_init(&priv->lock);
1028
1029         setup_timer(&priv->command_timer, command_timer_fn,
1030                 (unsigned long)priv);
1031
1032         INIT_LIST_HEAD(&priv->cmdfreeq);
1033         INIT_LIST_HEAD(&priv->cmdpendingq);
1034
1035         spin_lock_init(&priv->driver_lock);
1036         init_waitqueue_head(&priv->cmd_pending);
1037
1038         /* Allocate the command buffers */
1039         if (lbs_allocate_cmd_buffer(priv)) {
1040                 lbs_pr_err("Out of memory allocating command buffers\n");
1041                 ret = -ENOMEM;
1042                 goto out;
1043         }
1044         priv->resp_idx = 0;
1045         priv->resp_len[0] = priv->resp_len[1] = 0;
1046
1047         /* Create the event FIFO */
1048         priv->event_fifo = kfifo_alloc(sizeof(u32) * 16, GFP_KERNEL, NULL);
1049         if (IS_ERR(priv->event_fifo)) {
1050                 lbs_pr_err("Out of memory allocating event FIFO buffer\n");
1051                 ret = -ENOMEM;
1052                 goto out;
1053         }
1054
1055 out:
1056         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1057
1058         return ret;
1059 }
1060
1061 static void lbs_free_adapter(struct lbs_private *priv)
1062 {
1063         lbs_deb_enter(LBS_DEB_MAIN);
1064
1065         lbs_free_cmd_buffer(priv);
1066         if (priv->event_fifo)
1067                 kfifo_free(priv->event_fifo);
1068         del_timer(&priv->command_timer);
1069         kfree(priv->networks);
1070         priv->networks = NULL;
1071
1072         lbs_deb_leave(LBS_DEB_MAIN);
1073 }
1074
1075 /**
1076  * @brief This function adds the card. it will probe the
1077  * card, allocate the lbs_priv and initialize the device.
1078  *
1079  *  @param card    A pointer to card
1080  *  @return        A pointer to struct lbs_private structure
1081  */
1082 struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
1083 {
1084         struct net_device *dev = NULL;
1085         struct lbs_private *priv = NULL;
1086
1087         lbs_deb_enter(LBS_DEB_MAIN);
1088
1089         /* Allocate an Ethernet device and register it */
1090         dev = alloc_etherdev(sizeof(struct lbs_private));
1091         if (!dev) {
1092                 lbs_pr_err("init ethX device failed\n");
1093                 goto done;
1094         }
1095         priv = dev->priv;
1096
1097         if (lbs_init_adapter(priv)) {
1098                 lbs_pr_err("failed to initialize adapter structure.\n");
1099                 goto err_init_adapter;
1100         }
1101
1102         priv->dev = dev;
1103         priv->card = card;
1104         priv->mesh_open = 0;
1105         priv->infra_open = 0;
1106
1107         /* Setup the OS Interface to our functions */
1108         dev->open = lbs_dev_open;
1109         dev->hard_start_xmit = lbs_hard_start_xmit;
1110         dev->stop = lbs_eth_stop;
1111         dev->set_mac_address = lbs_set_mac_address;
1112         dev->tx_timeout = lbs_tx_timeout;
1113         dev->get_stats = lbs_get_stats;
1114         dev->watchdog_timeo = 5 * HZ;
1115         dev->ethtool_ops = &lbs_ethtool_ops;
1116 #ifdef  WIRELESS_EXT
1117         dev->wireless_handlers = (struct iw_handler_def *)&lbs_handler_def;
1118 #endif
1119         dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1120         dev->set_multicast_list = lbs_set_multicast_list;
1121
1122         SET_NETDEV_DEV(dev, dmdev);
1123
1124         priv->rtap_net_dev = NULL;
1125
1126         lbs_deb_thread("Starting main thread...\n");
1127         init_waitqueue_head(&priv->waitq);
1128         priv->main_thread = kthread_run(lbs_thread, dev, "lbs_main");
1129         if (IS_ERR(priv->main_thread)) {
1130                 lbs_deb_thread("Error creating main thread.\n");
1131                 goto err_init_adapter;
1132         }
1133
1134         priv->work_thread = create_singlethread_workqueue("lbs_worker");
1135         INIT_DELAYED_WORK(&priv->assoc_work, lbs_association_worker);
1136         INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
1137         INIT_WORK(&priv->sync_channel, lbs_sync_channel_worker);
1138
1139         sprintf(priv->mesh_ssid, "mesh");
1140         priv->mesh_ssid_len = 4;
1141
1142         priv->wol_criteria = 0xffffffff;
1143         priv->wol_gpio = 0xff;
1144
1145         goto done;
1146
1147 err_init_adapter:
1148         lbs_free_adapter(priv);
1149         free_netdev(dev);
1150         priv = NULL;
1151
1152 done:
1153         lbs_deb_leave_args(LBS_DEB_MAIN, "priv %p", priv);
1154         return priv;
1155 }
1156 EXPORT_SYMBOL_GPL(lbs_add_card);
1157
1158
1159 int lbs_remove_card(struct lbs_private *priv)
1160 {
1161         struct net_device *dev = priv->dev;
1162         union iwreq_data wrqu;
1163
1164         lbs_deb_enter(LBS_DEB_MAIN);
1165
1166         lbs_remove_mesh(priv);
1167         lbs_remove_rtap(priv);
1168
1169         dev = priv->dev;
1170
1171         cancel_delayed_work(&priv->scan_work);
1172         cancel_delayed_work(&priv->assoc_work);
1173         destroy_workqueue(priv->work_thread);
1174
1175         if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
1176                 priv->psmode = LBS802_11POWERMODECAM;
1177                 lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
1178         }
1179
1180         memset(wrqu.ap_addr.sa_data, 0xaa, ETH_ALEN);
1181         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1182         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
1183
1184         /* Stop the thread servicing the interrupts */
1185         priv->surpriseremoved = 1;
1186         kthread_stop(priv->main_thread);
1187
1188         lbs_free_adapter(priv);
1189
1190         priv->dev = NULL;
1191         free_netdev(dev);
1192
1193         lbs_deb_leave(LBS_DEB_MAIN);
1194         return 0;
1195 }
1196 EXPORT_SYMBOL_GPL(lbs_remove_card);
1197
1198
1199 int lbs_start_card(struct lbs_private *priv)
1200 {
1201         struct net_device *dev = priv->dev;
1202         int ret = -1;
1203
1204         lbs_deb_enter(LBS_DEB_MAIN);
1205
1206         /* poke the firmware */
1207         ret = lbs_setup_firmware(priv);
1208         if (ret)
1209                 goto done;
1210
1211         /* init 802.11d */
1212         lbs_init_11d(priv);
1213
1214         if (register_netdev(dev)) {
1215                 lbs_pr_err("cannot register ethX device\n");
1216                 goto done;
1217         }
1218         if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
1219                 lbs_pr_err("cannot register lbs_rtap attribute\n");
1220
1221         lbs_update_channel(priv);
1222
1223         /* 5.0.16p0 is known to NOT support any mesh */
1224         if (priv->fwrelease > 0x05001000) {
1225                 /* Enable mesh, if supported, and work out which TLV it uses.
1226                    0x100 + 291 is an unofficial value used in 5.110.20.pXX
1227                    0x100 + 37 is the official value used in 5.110.21.pXX
1228                    but we check them in that order because 20.pXX doesn't
1229                    give an error -- it just silently fails. */
1230
1231                 /* 5.110.20.pXX firmware will fail the command if the channel
1232                    doesn't match the existing channel. But only if the TLV
1233                    is correct. If the channel is wrong, _BOTH_ versions will
1234                    give an error to 0x100+291, and allow 0x100+37 to succeed.
1235                    It's just that 5.110.20.pXX will not have done anything
1236                    useful */
1237
1238                 priv->mesh_tlv = 0x100 + 291;
1239                 if (lbs_mesh_config(priv, 1, priv->curbssparams.channel)) {
1240                         priv->mesh_tlv = 0x100 + 37;
1241                         if (lbs_mesh_config(priv, 1, priv->curbssparams.channel))
1242                                 priv->mesh_tlv = 0;
1243                 }
1244                 if (priv->mesh_tlv) {
1245                         lbs_add_mesh(priv);
1246
1247                         if (device_create_file(&dev->dev, &dev_attr_lbs_mesh))
1248                                 lbs_pr_err("cannot register lbs_mesh attribute\n");
1249                 }
1250         }
1251
1252         lbs_debugfs_init_one(priv, dev);
1253
1254         lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);
1255
1256         ret = 0;
1257
1258 done:
1259         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1260         return ret;
1261 }
1262 EXPORT_SYMBOL_GPL(lbs_start_card);
1263
1264
1265 int lbs_stop_card(struct lbs_private *priv)
1266 {
1267         struct net_device *dev = priv->dev;
1268         int ret = -1;
1269         struct cmd_ctrl_node *cmdnode;
1270         unsigned long flags;
1271
1272         lbs_deb_enter(LBS_DEB_MAIN);
1273
1274         netif_stop_queue(priv->dev);
1275         netif_carrier_off(priv->dev);
1276
1277         lbs_debugfs_remove_one(priv);
1278         device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
1279         if (priv->mesh_tlv)
1280                 device_remove_file(&dev->dev, &dev_attr_lbs_mesh);
1281
1282         /* Flush pending command nodes */
1283         spin_lock_irqsave(&priv->driver_lock, flags);
1284         list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
1285                 cmdnode->result = -ENOENT;
1286                 cmdnode->cmdwaitqwoken = 1;
1287                 wake_up_interruptible(&cmdnode->cmdwait_q);
1288         }
1289         spin_unlock_irqrestore(&priv->driver_lock, flags);
1290
1291         unregister_netdev(dev);
1292
1293         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1294         return ret;
1295 }
1296 EXPORT_SYMBOL_GPL(lbs_stop_card);
1297
1298
1299 /**
1300  * @brief This function adds mshX interface
1301  *
1302  *  @param priv    A pointer to the struct lbs_private structure
1303  *  @return        0 if successful, -X otherwise
1304  */
1305 static int lbs_add_mesh(struct lbs_private *priv)
1306 {
1307         struct net_device *mesh_dev = NULL;
1308         int ret = 0;
1309
1310         lbs_deb_enter(LBS_DEB_MESH);
1311
1312         /* Allocate a virtual mesh device */
1313         if (!(mesh_dev = alloc_netdev(0, "msh%d", ether_setup))) {
1314                 lbs_deb_mesh("init mshX device failed\n");
1315                 ret = -ENOMEM;
1316                 goto done;
1317         }
1318         mesh_dev->priv = priv;
1319         priv->mesh_dev = mesh_dev;
1320
1321         mesh_dev->open = lbs_dev_open;
1322         mesh_dev->hard_start_xmit = lbs_hard_start_xmit;
1323         mesh_dev->stop = lbs_mesh_stop;
1324         mesh_dev->get_stats = lbs_get_stats;
1325         mesh_dev->set_mac_address = lbs_set_mac_address;
1326         mesh_dev->ethtool_ops = &lbs_ethtool_ops;
1327         memcpy(mesh_dev->dev_addr, priv->dev->dev_addr,
1328                         sizeof(priv->dev->dev_addr));
1329
1330         SET_NETDEV_DEV(priv->mesh_dev, priv->dev->dev.parent);
1331
1332 #ifdef  WIRELESS_EXT
1333         mesh_dev->wireless_handlers = (struct iw_handler_def *)&mesh_handler_def;
1334 #endif
1335         /* Register virtual mesh interface */
1336         ret = register_netdev(mesh_dev);
1337         if (ret) {
1338                 lbs_pr_err("cannot register mshX virtual interface\n");
1339                 goto err_free;
1340         }
1341
1342         ret = sysfs_create_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1343         if (ret)
1344                 goto err_unregister;
1345
1346         /* Everything successful */
1347         ret = 0;
1348         goto done;
1349
1350 err_unregister:
1351         unregister_netdev(mesh_dev);
1352
1353 err_free:
1354         free_netdev(mesh_dev);
1355
1356 done:
1357         lbs_deb_leave_args(LBS_DEB_MESH, "ret %d", ret);
1358         return ret;
1359 }
1360
1361 static void lbs_remove_mesh(struct lbs_private *priv)
1362 {
1363         struct net_device *mesh_dev;
1364
1365
1366         mesh_dev = priv->mesh_dev;
1367         if (!mesh_dev)
1368                 return;
1369
1370         lbs_deb_enter(LBS_DEB_MESH);
1371         netif_stop_queue(mesh_dev);
1372         netif_carrier_off(priv->mesh_dev);
1373         sysfs_remove_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1374         unregister_netdev(mesh_dev);
1375         priv->mesh_dev = NULL;
1376         free_netdev(mesh_dev);
1377         lbs_deb_leave(LBS_DEB_MESH);
1378 }
1379
1380 /**
1381  *  @brief This function finds the CFP in
1382  *  region_cfp_table based on region and band parameter.
1383  *
1384  *  @param region  The region code
1385  *  @param band    The band
1386  *  @param cfp_no  A pointer to CFP number
1387  *  @return        A pointer to CFP
1388  */
1389 struct chan_freq_power *lbs_get_region_cfp_table(u8 region, int *cfp_no)
1390 {
1391         int i, end;
1392
1393         lbs_deb_enter(LBS_DEB_MAIN);
1394
1395         end = ARRAY_SIZE(region_cfp_table);
1396
1397         for (i = 0; i < end ; i++) {
1398                 lbs_deb_main("region_cfp_table[i].region=%d\n",
1399                         region_cfp_table[i].region);
1400                 if (region_cfp_table[i].region == region) {
1401                         *cfp_no = region_cfp_table[i].cfp_no_BG;
1402                         lbs_deb_leave(LBS_DEB_MAIN);
1403                         return region_cfp_table[i].cfp_BG;
1404                 }
1405         }
1406
1407         lbs_deb_leave_args(LBS_DEB_MAIN, "ret NULL");
1408         return NULL;
1409 }
1410
1411 int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
1412 {
1413         int ret = 0;
1414         int i = 0;
1415
1416         struct chan_freq_power *cfp;
1417         int cfp_no;
1418
1419         lbs_deb_enter(LBS_DEB_MAIN);
1420
1421         memset(priv->region_channel, 0, sizeof(priv->region_channel));
1422
1423         cfp = lbs_get_region_cfp_table(region, &cfp_no);
1424         if (cfp != NULL) {
1425                 priv->region_channel[i].nrcfp = cfp_no;
1426                 priv->region_channel[i].CFP = cfp;
1427         } else {
1428                 lbs_deb_main("wrong region code %#x in band B/G\n",
1429                        region);
1430                 ret = -1;
1431                 goto out;
1432         }
1433         priv->region_channel[i].valid = 1;
1434         priv->region_channel[i].region = region;
1435         priv->region_channel[i].band = band;
1436         i++;
1437 out:
1438         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1439         return ret;
1440 }
1441
1442 void lbs_queue_event(struct lbs_private *priv, u32 event)
1443 {
1444         unsigned long flags;
1445
1446         lbs_deb_enter(LBS_DEB_THREAD);
1447         spin_lock_irqsave(&priv->driver_lock, flags);
1448
1449         if (priv->psstate == PS_STATE_SLEEP)
1450                 priv->psstate = PS_STATE_AWAKE;
1451
1452         __kfifo_put(priv->event_fifo, (unsigned char *) &event, sizeof(u32));
1453
1454         wake_up_interruptible(&priv->waitq);
1455
1456         spin_unlock_irqrestore(&priv->driver_lock, flags);
1457         lbs_deb_leave(LBS_DEB_THREAD);
1458 }
1459 EXPORT_SYMBOL_GPL(lbs_queue_event);
1460
1461 void lbs_notify_command_response(struct lbs_private *priv, u8 resp_idx)
1462 {
1463         lbs_deb_enter(LBS_DEB_THREAD);
1464
1465         if (priv->psstate == PS_STATE_SLEEP)
1466                 priv->psstate = PS_STATE_AWAKE;
1467
1468         /* Swap buffers by flipping the response index */
1469         BUG_ON(resp_idx > 1);
1470         priv->resp_idx = resp_idx;
1471
1472         wake_up_interruptible(&priv->waitq);
1473
1474         lbs_deb_leave(LBS_DEB_THREAD);
1475 }
1476 EXPORT_SYMBOL_GPL(lbs_notify_command_response);
1477
1478 static int __init lbs_init_module(void)
1479 {
1480         lbs_deb_enter(LBS_DEB_MAIN);
1481         memset(&confirm_sleep, 0, sizeof(confirm_sleep));
1482         confirm_sleep.hdr.command = cpu_to_le16(CMD_802_11_PS_MODE);
1483         confirm_sleep.hdr.size = cpu_to_le16(sizeof(confirm_sleep));
1484         confirm_sleep.action = cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
1485         lbs_debugfs_init();
1486         lbs_deb_leave(LBS_DEB_MAIN);
1487         return 0;
1488 }
1489
1490 static void __exit lbs_exit_module(void)
1491 {
1492         lbs_deb_enter(LBS_DEB_MAIN);
1493         lbs_debugfs_remove();
1494         lbs_deb_leave(LBS_DEB_MAIN);
1495 }
1496
1497 /*
1498  * rtap interface support fuctions
1499  */
1500
1501 static int lbs_rtap_open(struct net_device *dev)
1502 {
1503         /* Yes, _stop_ the queue. Because we don't support injection */
1504         lbs_deb_enter(LBS_DEB_MAIN);
1505         netif_carrier_off(dev);
1506         netif_stop_queue(dev);
1507         lbs_deb_leave(LBS_DEB_LEAVE);
1508         return 0;
1509 }
1510
1511 static int lbs_rtap_stop(struct net_device *dev)
1512 {
1513         lbs_deb_enter(LBS_DEB_MAIN);
1514         lbs_deb_leave(LBS_DEB_MAIN);
1515         return 0;
1516 }
1517
1518 static int lbs_rtap_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
1519 {
1520         netif_stop_queue(dev);
1521         return NETDEV_TX_BUSY;
1522 }
1523
1524 static struct net_device_stats *lbs_rtap_get_stats(struct net_device *dev)
1525 {
1526         struct lbs_private *priv = dev->priv;
1527         lbs_deb_enter(LBS_DEB_NET);
1528         return &priv->stats;
1529 }
1530
1531
1532 static void lbs_remove_rtap(struct lbs_private *priv)
1533 {
1534         lbs_deb_enter(LBS_DEB_MAIN);
1535         if (priv->rtap_net_dev == NULL)
1536                 return;
1537         unregister_netdev(priv->rtap_net_dev);
1538         free_netdev(priv->rtap_net_dev);
1539         priv->rtap_net_dev = NULL;
1540         lbs_deb_leave(LBS_DEB_MAIN);
1541 }
1542
1543 static int lbs_add_rtap(struct lbs_private *priv)
1544 {
1545         int ret = 0;
1546         struct net_device *rtap_dev;
1547
1548         lbs_deb_enter(LBS_DEB_MAIN);
1549         if (priv->rtap_net_dev) {
1550                 ret = -EPERM;
1551                 goto out;
1552         }
1553
1554         rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
1555         if (rtap_dev == NULL) {
1556                 ret = -ENOMEM;
1557                 goto out;
1558         }
1559
1560         memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
1561         rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
1562         rtap_dev->open = lbs_rtap_open;
1563         rtap_dev->stop = lbs_rtap_stop;
1564         rtap_dev->get_stats = lbs_rtap_get_stats;
1565         rtap_dev->hard_start_xmit = lbs_rtap_hard_start_xmit;
1566         rtap_dev->set_multicast_list = lbs_set_multicast_list;
1567         rtap_dev->priv = priv;
1568         SET_NETDEV_DEV(rtap_dev, priv->dev->dev.parent);
1569
1570         ret = register_netdev(rtap_dev);
1571         if (ret) {
1572                 free_netdev(rtap_dev);
1573                 goto out;
1574         }
1575         priv->rtap_net_dev = rtap_dev;
1576
1577 out:
1578         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1579         return ret;
1580 }
1581
1582 #ifndef CONFIG_IEEE80211
1583 const char *escape_essid(const char *essid, u8 essid_len)
1584 {
1585         static char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
1586         const char *s = essid;
1587         char *d = escaped;
1588
1589         if (ieee80211_is_empty_essid(essid, essid_len)) {
1590                 memcpy(escaped, "<hidden>", sizeof("<hidden>"));
1591                 return escaped;
1592         }
1593
1594         essid_len = min(essid_len, (u8) IW_ESSID_MAX_SIZE);
1595         while (essid_len--) {
1596                 if (*s == '\0') {
1597                         *d++ = '\\';
1598                         *d++ = '0';
1599                         s++;
1600                 } else {
1601                         *d++ = *s++;
1602                 }
1603         }
1604         *d = '\0';
1605         return escaped;
1606 }
1607 #endif
1608
1609 module_init(lbs_init_module);
1610 module_exit(lbs_exit_module);
1611
1612 MODULE_DESCRIPTION("Libertas WLAN Driver Library");
1613 MODULE_AUTHOR("Marvell International Ltd.");
1614 MODULE_LICENSE("GPL");