drivers/net/wireless/iwlwifi/iwl-agn.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2003 - 2011 Intel Corporation. All rights reserved.
   4  *
   5  * Portions of this file are derived from the ipw3945 project, as well
   6  * as portions of the ieee80211 subsystem header files.
   7  *
   8  * This program is free software; you can redistribute it and/or modify it
   9  * under the terms of version 2 of the GNU General Public License as
  10  * published by the Free Software Foundation.
  11  *
  12  * This program is distributed in the hope that it will be useful, but WITHOUT
  13  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  14  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  15  * more details.
  16  *
  17  * You should have received a copy of the GNU General Public License along with
  18  * this program; if not, write to the Free Software Foundation, Inc.,
  19  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  20  *
  21  * The full GNU General Public License is included in this distribution in the
  22  * file called LICENSE.
  23  *
  24  * Contact Information:
  25  *  Intel Linux Wireless <ilw@linux.intel.com>
  26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  27  *
  28  *****************************************************************************/
  29 #include <linux/kernel.h>
  30 #include <linux/module.h>
  31 #include <linux/init.h>
  32 #include <linux/slab.h>
  33 #include <linux/dma-mapping.h>
  34 #include <linux/delay.h>
  35 #include <linux/sched.h>
  36 #include <linux/skbuff.h>
  37 #include <linux/netdevice.h>
  38 #include <linux/firmware.h>
  39 #include <linux/etherdevice.h>
  40 #include <linux/if_arp.h>
  41
  42 #include <net/mac80211.h>
  43
  44 #include <asm/div64.h>
  45
  46 #include "iwl-eeprom.h"
  47 #include "iwl-dev.h"
  48 #include "iwl-core.h"
  49 #include "iwl-io.h"
  50 #include "iwl-agn-calib.h"
  51 #include "iwl-agn.h"
  52 #include "iwl-shared.h"
  53 #include "iwl-bus.h"
  54 #include "iwl-trans.h"
  55
  56 /******************************************************************************
  57  *
  58  * module boiler plate
  59  *
  60  ******************************************************************************/
  61
  62 /*
  63  * module name, copyright, version, etc.
  64  */
  65 #define DRV_DESCRIPTION "Intel(R) Wireless WiFi Link AGN driver for Linux"
  66
  67 #ifdef CONFIG_IWLWIFI_DEBUG
  68 #define VD "d"
  69 #else
  70 #define VD
  71 #endif
  72
  73 #define DRV_VERSION     IWLWIFI_VERSION VD
  74
  75
  76 MODULE_DESCRIPTION(DRV_DESCRIPTION);
  77 MODULE_VERSION(DRV_VERSION);
  78 MODULE_AUTHOR(DRV_COPYRIGHT " " DRV_AUTHOR);
  79 MODULE_LICENSE("GPL");
  80 MODULE_ALIAS("iwlagn");
  81
  82 void iwl_update_chain_flags(struct iwl_priv *priv)
  83 {
  84         struct iwl_rxon_context *ctx;
  85
  86         for_each_context(priv, ctx) {
  87                 iwlagn_set_rxon_chain(priv, ctx);
  88                 if (ctx->active.rx_chain != ctx->staging.rx_chain)
  89                         iwlagn_commit_rxon(priv, ctx);
  90         }
  91 }
  92
  93 /* Parse the beacon frame to find the TIM element and set tim_idx & tim_size */
  94 static void iwl_set_beacon_tim(struct iwl_priv *priv,
  95                                struct iwl_tx_beacon_cmd *tx_beacon_cmd,
  96                                u8 *beacon, u32 frame_size)
  97 {
  98         u16 tim_idx;
  99         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)beacon;
 100
 101         /*
 102          * The index is relative to frame start but we start looking at the
 103          * variable-length part of the beacon.
 104          */
 105         tim_idx = mgmt->u.beacon.variable - beacon;
 106
 107         /* Parse variable-length elements of beacon to find WLAN_EID_TIM */
 108         while ((tim_idx < (frame_size - 2)) &&
 109                         (beacon[tim_idx] != WLAN_EID_TIM))
 110                 tim_idx += beacon[tim_idx+1] + 2;
 111
 112         /* If TIM field was found, set variables */
 113         if ((tim_idx < (frame_size - 1)) && (beacon[tim_idx] == WLAN_EID_TIM)) {
 114                 tx_beacon_cmd->tim_idx = cpu_to_le16(tim_idx);
 115                 tx_beacon_cmd->tim_size = beacon[tim_idx+1];
 116         } else
 117                 IWL_WARN(priv, "Unable to find TIM Element in beacon\n");
 118 }
 119
 120 int iwlagn_send_beacon_cmd(struct iwl_priv *priv)
 121 {
 122         struct iwl_tx_beacon_cmd *tx_beacon_cmd;
 123         struct iwl_host_cmd cmd = {
 124                 .id = REPLY_TX_BEACON,
 125                 .flags = CMD_SYNC,
 126         };
 127         struct ieee80211_tx_info *info;
 128         u32 frame_size;
 129         u32 rate_flags;
 130         u32 rate;
 131
 132         /*
 133          * We have to set up the TX command, the TX Beacon command, and the
 134          * beacon contents.
 135          */
 136
 137         lockdep_assert_held(&priv->shrd->mutex);
 138
 139         if (!priv->beacon_ctx) {
 140                 IWL_ERR(priv, "trying to build beacon w/o beacon context!\n");
 141                 return 0;
 142         }
 143
 144         if (WARN_ON(!priv->beacon_skb))
 145                 return -EINVAL;
 146
 147         /* Allocate beacon command */
 148         if (!priv->beacon_cmd)
 149                 priv->beacon_cmd = kzalloc(sizeof(*tx_beacon_cmd), GFP_KERNEL);
 150         tx_beacon_cmd = priv->beacon_cmd;
 151         if (!tx_beacon_cmd)
 152                 return -ENOMEM;
 153
 154         frame_size = priv->beacon_skb->len;
 155
 156         /* Set up TX command fields */
 157         tx_beacon_cmd->tx.len = cpu_to_le16((u16)frame_size);
 158         tx_beacon_cmd->tx.sta_id = priv->beacon_ctx->bcast_sta_id;
 159         tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
 160         tx_beacon_cmd->tx.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK |
 161                 TX_CMD_FLG_TSF_MSK | TX_CMD_FLG_STA_RATE_MSK;
 162
 163         /* Set up TX beacon command fields */
 164         iwl_set_beacon_tim(priv, tx_beacon_cmd, priv->beacon_skb->data,
 165                            frame_size);
 166
 167         /* Set up packet rate and flags */
 168         info = IEEE80211_SKB_CB(priv->beacon_skb);
 169
 170         /*
 171          * Let's set up the rate at least somewhat correctly;
 172          * it will currently not actually be used by the uCode,
 173          * it uses the broadcast station's rate instead.
 174          */
 175         if (info->control.rates[0].idx < 0 ||
 176             info->control.rates[0].flags & IEEE80211_TX_RC_MCS)
 177                 rate = 0;
 178         else
 179                 rate = info->control.rates[0].idx;
 180
 181         priv->mgmt_tx_ant = iwl_toggle_tx_ant(priv, priv->mgmt_tx_ant,
 182                                               hw_params(priv).valid_tx_ant);
 183         rate_flags = iwl_ant_idx_to_flags(priv->mgmt_tx_ant);
 184
 185         /* In mac80211, rates for 5 GHz start at 0 */
 186         if (info->band == IEEE80211_BAND_5GHZ)
 187                 rate += IWL_FIRST_OFDM_RATE;
 188         else if (rate >= IWL_FIRST_CCK_RATE && rate <= IWL_LAST_CCK_RATE)
 189                 rate_flags |= RATE_MCS_CCK_MSK;
 190
 191         tx_beacon_cmd->tx.rate_n_flags =
 192                         iwl_hw_set_rate_n_flags(rate, rate_flags);
 193
 194         /* Submit command */
 195         cmd.len[0] = sizeof(*tx_beacon_cmd);
 196         cmd.data[0] = tx_beacon_cmd;
 197         cmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY;
 198         cmd.len[1] = frame_size;
 199         cmd.data[1] = priv->beacon_skb->data;
 200         cmd.dataflags[1] = IWL_HCMD_DFL_NOCOPY;
 201
 202         return iwl_trans_send_cmd(trans(priv), &cmd);
 203 }
 204
 205 static void iwl_bg_beacon_update(struct work_struct *work)
 206 {
 207         struct iwl_priv *priv =
 208                 container_of(work, struct iwl_priv, beacon_update);
 209         struct sk_buff *beacon;
 210
 211         mutex_lock(&priv->shrd->mutex);
 212         if (!priv->beacon_ctx) {
 213                 IWL_ERR(priv, "updating beacon w/o beacon context!\n");
 214                 goto out;
 215         }
 216
 217         if (priv->beacon_ctx->vif->type != NL80211_IFTYPE_AP) {
 218                 /*
 219                  * The ucode will send beacon notifications even in
 220                  * IBSS mode, but we don't want to process them. But
 221                  * we need to defer the type check to here due to
 222                  * requiring locking around the beacon_ctx access.
 223                  */
 224                 goto out;
 225         }
 226
 227         /* Pull updated AP beacon from mac80211. will fail if not in AP mode */
 228         beacon = ieee80211_beacon_get(priv->hw, priv->beacon_ctx->vif);
 229         if (!beacon) {
 230                 IWL_ERR(priv, "update beacon failed -- keeping old\n");
 231                 goto out;
 232         }
 233
 234         /* new beacon skb is allocated every time; dispose previous.*/
 235         dev_kfree_skb(priv->beacon_skb);
 236
 237         priv->beacon_skb = beacon;
 238
 239         iwlagn_send_beacon_cmd(priv);
 240  out:
 241         mutex_unlock(&priv->shrd->mutex);
 242 }
 243
 244 static void iwl_bg_bt_runtime_config(struct work_struct *work)
 245 {
 246         struct iwl_priv *priv =
 247                 container_of(work, struct iwl_priv, bt_runtime_config);
 248
 249         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 250                 return;
 251
 252         /* dont send host command if rf-kill is on */
 253         if (!iwl_is_ready_rf(priv->shrd))
 254                 return;
 255         iwlagn_send_advance_bt_config(priv);
 256 }
 257
 258 static void iwl_bg_bt_full_concurrency(struct work_struct *work)
 259 {
 260         struct iwl_priv *priv =
 261                 container_of(work, struct iwl_priv, bt_full_concurrency);
 262         struct iwl_rxon_context *ctx;
 263
 264         mutex_lock(&priv->shrd->mutex);
 265
 266         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 267                 goto out;
 268
 269         /* dont send host command if rf-kill is on */
 270         if (!iwl_is_ready_rf(priv->shrd))
 271                 goto out;
 272
 273         IWL_DEBUG_INFO(priv, "BT coex in %s mode\n",
 274                        priv->bt_full_concurrent ?
 275                        "full concurrency" : "3-wire");
 276
 277         /*
 278          * LQ & RXON updated cmds must be sent before BT Config cmd
 279          * to avoid 3-wire collisions
 280          */
 281         for_each_context(priv, ctx) {
 282                 iwlagn_set_rxon_chain(priv, ctx);
 283                 iwlagn_commit_rxon(priv, ctx);
 284         }
 285
 286         iwlagn_send_advance_bt_config(priv);
 287 out:
 288         mutex_unlock(&priv->shrd->mutex);
 289 }
 290
 291 /**
 292  * iwl_bg_statistics_periodic - Timer callback to queue statistics
 293  *
 294  * This callback is provided in order to send a statistics request.
 295  *
 296  * This timer function is continually reset to execute within
 297  * REG_RECALIB_PERIOD seconds since the last STATISTICS_NOTIFICATION
 298  * was received.  We need to ensure we receive the statistics in order
 299  * to update the temperature used for calibrating the TXPOWER.
 300  */
 301 static void iwl_bg_statistics_periodic(unsigned long data)
 302 {
 303         struct iwl_priv *priv = (struct iwl_priv *)data;
 304
 305         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 306                 return;
 307
 308         /* dont send host command if rf-kill is on */
 309         if (!iwl_is_ready_rf(priv->shrd))
 310                 return;
 311
 312         iwl_send_statistics_request(priv, CMD_ASYNC, false);
 313 }
 314
 315
 316 static void iwl_print_cont_event_trace(struct iwl_priv *priv, u32 base,
 317                                         u32 start_idx, u32 num_events,
 318                                         u32 mode)
 319 {
 320         u32 i;
 321         u32 ptr;        /* SRAM byte address of log data */
 322         u32 ev, time, data; /* event log data */
 323         unsigned long reg_flags;
 324
 325         if (mode == 0)
 326                 ptr = base + (4 * sizeof(u32)) + (start_idx * 2 * sizeof(u32));
 327         else
 328                 ptr = base + (4 * sizeof(u32)) + (start_idx * 3 * sizeof(u32));
 329
 330         /* Make sure device is powered up for SRAM reads */
 331         spin_lock_irqsave(&bus(priv)->reg_lock, reg_flags);
 332         if (iwl_grab_nic_access(bus(priv))) {
 333                 spin_unlock_irqrestore(&bus(priv)->reg_lock, reg_flags);
 334                 return;
 335         }
 336
 337         /* Set starting address; reads will auto-increment */
 338         iwl_write32(bus(priv), HBUS_TARG_MEM_RADDR, ptr);
 339         rmb();
 340
 341         /*
 342          * "time" is actually "data" for mode 0 (no timestamp).
 343          * place event id # at far right for easier visual parsing.
 344          */
 345         for (i = 0; i < num_events; i++) {
 346                 ev = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 347                 time = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 348                 if (mode == 0) {
 349                         trace_iwlwifi_dev_ucode_cont_event(priv,
 350                                                         0, time, ev);
 351                 } else {
 352                         data = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 353                         trace_iwlwifi_dev_ucode_cont_event(priv,
 354                                                 time, data, ev);
 355                 }
 356         }
 357         /* Allow device to power down */
 358         iwl_release_nic_access(bus(priv));
 359         spin_unlock_irqrestore(&bus(priv)->reg_lock, reg_flags);
 360 }
 361
 362 static void iwl_continuous_event_trace(struct iwl_priv *priv)
 363 {
 364         u32 capacity;   /* event log capacity in # entries */
 365         u32 base;       /* SRAM byte address of event log header */
 366         u32 mode;       /* 0 - no timestamp, 1 - timestamp recorded */
 367         u32 num_wraps;  /* # times uCode wrapped to top of log */
 368         u32 next_entry; /* index of next entry to be written by uCode */
 369
 370         base = priv->device_pointers.error_event_table;
 371         if (iwlagn_hw_valid_rtc_data_addr(base)) {
 372                 capacity = iwl_read_targ_mem(bus(priv), base);
 373                 num_wraps = iwl_read_targ_mem(bus(priv),
 374                                                 base + (2 * sizeof(u32)));
 375                 mode = iwl_read_targ_mem(bus(priv), base + (1 * sizeof(u32)));
 376                 next_entry = iwl_read_targ_mem(bus(priv),
 377                                                 base + (3 * sizeof(u32)));
 378         } else
 379                 return;
 380
 381         if (num_wraps == priv->event_log.num_wraps) {
 382                 iwl_print_cont_event_trace(priv,
 383                                        base, priv->event_log.next_entry,
 384                                        next_entry - priv->event_log.next_entry,
 385                                        mode);
 386                 priv->event_log.non_wraps_count++;
 387         } else {
 388                 if ((num_wraps - priv->event_log.num_wraps) > 1)
 389                         priv->event_log.wraps_more_count++;
 390                 else
 391                         priv->event_log.wraps_once_count++;
 392                 trace_iwlwifi_dev_ucode_wrap_event(priv,
 393                                 num_wraps - priv->event_log.num_wraps,
 394                                 next_entry, priv->event_log.next_entry);
 395                 if (next_entry < priv->event_log.next_entry) {
 396                         iwl_print_cont_event_trace(priv, base,
 397                                priv->event_log.next_entry,
 398                                capacity - priv->event_log.next_entry,
 399                                mode);
 400
 401                         iwl_print_cont_event_trace(priv, base, 0,
 402                                 next_entry, mode);
 403                 } else {
 404                         iwl_print_cont_event_trace(priv, base,
 405                                next_entry, capacity - next_entry,
 406                                mode);
 407
 408                         iwl_print_cont_event_trace(priv, base, 0,
 409                                 next_entry, mode);
 410                 }
 411         }
 412         priv->event_log.num_wraps = num_wraps;
 413         priv->event_log.next_entry = next_entry;
 414 }
 415
 416 /**
 417  * iwl_bg_ucode_trace - Timer callback to log ucode event
 418  *
 419  * The timer is continually set to execute every
 420  * UCODE_TRACE_PERIOD milliseconds after the last timer expired
 421  * this function is to perform continuous uCode event logging operation
 422  * if enabled
 423  */
 424 static void iwl_bg_ucode_trace(unsigned long data)
 425 {
 426         struct iwl_priv *priv = (struct iwl_priv *)data;
 427
 428         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 429                 return;
 430
 431         if (priv->event_log.ucode_trace) {
 432                 iwl_continuous_event_trace(priv);
 433                 /* Reschedule the timer to occur in UCODE_TRACE_PERIOD */
 434                 mod_timer(&priv->ucode_trace,
 435                          jiffies + msecs_to_jiffies(UCODE_TRACE_PERIOD));
 436         }
 437 }
 438
 439 static void iwl_bg_tx_flush(struct work_struct *work)
 440 {
 441         struct iwl_priv *priv =
 442                 container_of(work, struct iwl_priv, tx_flush);
 443
 444         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 445                 return;
 446
 447         /* do nothing if rf-kill is on */
 448         if (!iwl_is_ready_rf(priv->shrd))
 449                 return;
 450
 451         IWL_DEBUG_INFO(priv, "device request: flush all tx frames\n");
 452         iwlagn_dev_txfifo_flush(priv, IWL_DROP_ALL);
 453 }
 454
 455 /******************************************************************************
 456  *
 457  * uCode download functions
 458  *
 459  ******************************************************************************/
 460
 461 static void iwl_free_fw_desc(struct iwl_priv *priv, struct fw_desc *desc)
 462 {
 463         if (desc->v_addr)
 464                 dma_free_coherent(bus(priv)->dev, desc->len,
 465                                   desc->v_addr, desc->p_addr);
 466         desc->v_addr = NULL;
 467         desc->len = 0;
 468 }
 469
 470 static void iwl_free_fw_img(struct iwl_priv *priv, struct fw_img *img)
 471 {
 472         iwl_free_fw_desc(priv, &img->code);
 473         iwl_free_fw_desc(priv, &img->data);
 474 }
 475
 476 static void iwl_dealloc_ucode(struct iwl_priv *priv)
 477 {
 478         iwl_free_fw_img(priv, &priv->ucode_rt);
 479         iwl_free_fw_img(priv, &priv->ucode_init);
 480         iwl_free_fw_img(priv, &priv->ucode_wowlan);
 481 }
 482
 483 static int iwl_alloc_fw_desc(struct iwl_priv *priv, struct fw_desc *desc,
 484                              const void *data, size_t len)
 485 {
 486         if (!len) {
 487                 desc->v_addr = NULL;
 488                 return -EINVAL;
 489         }
 490
 491         desc->v_addr = dma_alloc_coherent(bus(priv)->dev, len,
 492                                           &desc->p_addr, GFP_KERNEL);
 493         if (!desc->v_addr)
 494                 return -ENOMEM;
 495
 496         desc->len = len;
 497         memcpy(desc->v_addr, data, len);
 498         return 0;
 499 }
 500
 501 static void iwl_init_context(struct iwl_priv *priv, u32 ucode_flags)
 502 {
 503         int i;
 504
 505         /*
 506          * The default context is always valid,
 507          * the PAN context depends on uCode.
 508          */
 509         priv->shrd->valid_contexts = BIT(IWL_RXON_CTX_BSS);
 510         if (ucode_flags & IWL_UCODE_TLV_FLAGS_PAN)
 511                 priv->shrd->valid_contexts |= BIT(IWL_RXON_CTX_PAN);
 512
 513         for (i = 0; i < NUM_IWL_RXON_CTX; i++)
 514                 priv->contexts[i].ctxid = i;
 515
 516         priv->contexts[IWL_RXON_CTX_BSS].always_active = true;
 517         priv->contexts[IWL_RXON_CTX_BSS].is_active = true;
 518         priv->contexts[IWL_RXON_CTX_BSS].rxon_cmd = REPLY_RXON;
 519         priv->contexts[IWL_RXON_CTX_BSS].rxon_timing_cmd = REPLY_RXON_TIMING;
 520         priv->contexts[IWL_RXON_CTX_BSS].rxon_assoc_cmd = REPLY_RXON_ASSOC;
 521         priv->contexts[IWL_RXON_CTX_BSS].qos_cmd = REPLY_QOS_PARAM;
 522         priv->contexts[IWL_RXON_CTX_BSS].ap_sta_id = IWL_AP_ID;
 523         priv->contexts[IWL_RXON_CTX_BSS].wep_key_cmd = REPLY_WEPKEY;
 524         priv->contexts[IWL_RXON_CTX_BSS].exclusive_interface_modes =
 525                 BIT(NL80211_IFTYPE_ADHOC);
 526         priv->contexts[IWL_RXON_CTX_BSS].interface_modes =
 527                 BIT(NL80211_IFTYPE_STATION);
 528         priv->contexts[IWL_RXON_CTX_BSS].ap_devtype = RXON_DEV_TYPE_AP;
 529         priv->contexts[IWL_RXON_CTX_BSS].ibss_devtype = RXON_DEV_TYPE_IBSS;
 530         priv->contexts[IWL_RXON_CTX_BSS].station_devtype = RXON_DEV_TYPE_ESS;
 531         priv->contexts[IWL_RXON_CTX_BSS].unused_devtype = RXON_DEV_TYPE_ESS;
 532
 533         priv->contexts[IWL_RXON_CTX_PAN].rxon_cmd = REPLY_WIPAN_RXON;
 534         priv->contexts[IWL_RXON_CTX_PAN].rxon_timing_cmd =
 535                 REPLY_WIPAN_RXON_TIMING;
 536         priv->contexts[IWL_RXON_CTX_PAN].rxon_assoc_cmd =
 537                 REPLY_WIPAN_RXON_ASSOC;
 538         priv->contexts[IWL_RXON_CTX_PAN].qos_cmd = REPLY_WIPAN_QOS_PARAM;
 539         priv->contexts[IWL_RXON_CTX_PAN].ap_sta_id = IWL_AP_ID_PAN;
 540         priv->contexts[IWL_RXON_CTX_PAN].wep_key_cmd = REPLY_WIPAN_WEPKEY;
 541         priv->contexts[IWL_RXON_CTX_PAN].bcast_sta_id = IWLAGN_PAN_BCAST_ID;
 542         priv->contexts[IWL_RXON_CTX_PAN].station_flags = STA_FLG_PAN_STATION;
 543         priv->contexts[IWL_RXON_CTX_PAN].interface_modes =
 544                 BIT(NL80211_IFTYPE_STATION) | BIT(NL80211_IFTYPE_AP);
 545
 546         if (ucode_flags & IWL_UCODE_TLV_FLAGS_P2P)
 547                 priv->contexts[IWL_RXON_CTX_PAN].interface_modes |=
 548                         BIT(NL80211_IFTYPE_P2P_CLIENT) |
 549                         BIT(NL80211_IFTYPE_P2P_GO);
 550
 551         priv->contexts[IWL_RXON_CTX_PAN].ap_devtype = RXON_DEV_TYPE_CP;
 552         priv->contexts[IWL_RXON_CTX_PAN].station_devtype = RXON_DEV_TYPE_2STA;
 553         priv->contexts[IWL_RXON_CTX_PAN].unused_devtype = RXON_DEV_TYPE_P2P;
 554
 555         BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
 556 }
 557
 558
 559 struct iwlagn_ucode_capabilities {
 560         u32 max_probe_length;
 561         u32 standard_phy_calibration_size;
 562         u32 flags;
 563 };
 564
 565 static void iwl_ucode_callback(const struct firmware *ucode_raw, void *context);
 566 static int iwlagn_mac_setup_register(struct iwl_priv *priv,
 567                                   struct iwlagn_ucode_capabilities *capa);
 568
 569 #define UCODE_EXPERIMENTAL_INDEX        100
 570 #define UCODE_EXPERIMENTAL_TAG          "exp"
 571
 572 static int __must_check iwl_request_firmware(struct iwl_priv *priv, bool first)
 573 {
 574         const char *name_pre = priv->cfg->fw_name_pre;
 575         char tag[8];
 576
 577         if (first) {
 578 #ifdef CONFIG_IWLWIFI_DEBUG_EXPERIMENTAL_UCODE
 579                 priv->fw_index = UCODE_EXPERIMENTAL_INDEX;
 580                 strcpy(tag, UCODE_EXPERIMENTAL_TAG);
 581         } else if (priv->fw_index == UCODE_EXPERIMENTAL_INDEX) {
 582 #endif
 583                 priv->fw_index = priv->cfg->ucode_api_max;
 584                 sprintf(tag, "%d", priv->fw_index);
 585         } else {
 586                 priv->fw_index--;
 587                 sprintf(tag, "%d", priv->fw_index);
 588         }
 589
 590         if (priv->fw_index < priv->cfg->ucode_api_min) {
 591                 IWL_ERR(priv, "no suitable firmware found!\n");
 592                 return -ENOENT;
 593         }
 594
 595         sprintf(priv->firmware_name, "%s%s%s", name_pre, tag, ".ucode");
 596
 597         IWL_DEBUG_INFO(priv, "attempting to load firmware %s'%s'\n",
 598                        (priv->fw_index == UCODE_EXPERIMENTAL_INDEX)
 599                                 ? "EXPERIMENTAL " : "",
 600                        priv->firmware_name);
 601
 602         return request_firmware_nowait(THIS_MODULE, 1, priv->firmware_name,
 603                                        bus(priv)->dev,
 604                                        GFP_KERNEL, priv, iwl_ucode_callback);
 605 }
 606
 607 struct iwlagn_firmware_pieces {
 608         const void *inst, *data, *init, *init_data, *wowlan_inst, *wowlan_data;
 609         size_t inst_size, data_size, init_size, init_data_size,
 610                wowlan_inst_size, wowlan_data_size;
 611
 612         u32 build;
 613
 614         u32 init_evtlog_ptr, init_evtlog_size, init_errlog_ptr;
 615         u32 inst_evtlog_ptr, inst_evtlog_size, inst_errlog_ptr;
 616 };
 617
 618 static int iwlagn_load_legacy_firmware(struct iwl_priv *priv,
 619                                        const struct firmware *ucode_raw,
 620                                        struct iwlagn_firmware_pieces *pieces)
 621 {
 622         struct iwl_ucode_header *ucode = (void *)ucode_raw->data;
 623         u32 api_ver, hdr_size;
 624         const u8 *src;
 625
 626         priv->ucode_ver = le32_to_cpu(ucode->ver);
 627         api_ver = IWL_UCODE_API(priv->ucode_ver);
 628
 629         switch (api_ver) {
 630         default:
 631                 hdr_size = 28;
 632                 if (ucode_raw->size < hdr_size) {
 633                         IWL_ERR(priv, "File size too small!\n");
 634                         return -EINVAL;
 635                 }
 636                 pieces->build = le32_to_cpu(ucode->u.v2.build);
 637                 pieces->inst_size = le32_to_cpu(ucode->u.v2.inst_size);
 638                 pieces->data_size = le32_to_cpu(ucode->u.v2.data_size);
 639                 pieces->init_size = le32_to_cpu(ucode->u.v2.init_size);
 640                 pieces->init_data_size = le32_to_cpu(ucode->u.v2.init_data_size);
 641                 src = ucode->u.v2.data;
 642                 break;
 643         case 0:
 644         case 1:
 645         case 2:
 646                 hdr_size = 24;
 647                 if (ucode_raw->size < hdr_size) {
 648                         IWL_ERR(priv, "File size too small!\n");
 649                         return -EINVAL;
 650                 }
 651                 pieces->build = 0;
 652                 pieces->inst_size = le32_to_cpu(ucode->u.v1.inst_size);
 653                 pieces->data_size = le32_to_cpu(ucode->u.v1.data_size);
 654                 pieces->init_size = le32_to_cpu(ucode->u.v1.init_size);
 655                 pieces->init_data_size = le32_to_cpu(ucode->u.v1.init_data_size);
 656                 src = ucode->u.v1.data;
 657                 break;
 658         }
 659
 660         /* Verify size of file vs. image size info in file's header */
 661         if (ucode_raw->size != hdr_size + pieces->inst_size +
 662                                 pieces->data_size + pieces->init_size +
 663                                 pieces->init_data_size) {
 664
 665                 IWL_ERR(priv,
 666                         "uCode file size %d does not match expected size\n",
 667                         (int)ucode_raw->size);
 668                 return -EINVAL;
 669         }
 670
 671         pieces->inst = src;
 672         src += pieces->inst_size;
 673         pieces->data = src;
 674         src += pieces->data_size;
 675         pieces->init = src;
 676         src += pieces->init_size;
 677         pieces->init_data = src;
 678         src += pieces->init_data_size;
 679
 680         return 0;
 681 }
 682
 683 static int iwlagn_load_firmware(struct iwl_priv *priv,
 684                                 const struct firmware *ucode_raw,
 685                                 struct iwlagn_firmware_pieces *pieces,
 686                                 struct iwlagn_ucode_capabilities *capa)
 687 {
 688         struct iwl_tlv_ucode_header *ucode = (void *)ucode_raw->data;
 689         struct iwl_ucode_tlv *tlv;
 690         size_t len = ucode_raw->size;
 691         const u8 *data;
 692         int wanted_alternative = iwlagn_mod_params.wanted_ucode_alternative;
 693         int tmp;
 694         u64 alternatives;
 695         u32 tlv_len;
 696         enum iwl_ucode_tlv_type tlv_type;
 697         const u8 *tlv_data;
 698
 699         if (len < sizeof(*ucode)) {
 700                 IWL_ERR(priv, "uCode has invalid length: %zd\n", len);
 701                 return -EINVAL;
 702         }
 703
 704         if (ucode->magic != cpu_to_le32(IWL_TLV_UCODE_MAGIC)) {
 705                 IWL_ERR(priv, "invalid uCode magic: 0X%x\n",
 706                         le32_to_cpu(ucode->magic));
 707                 return -EINVAL;
 708         }
 709
 710         /*
 711          * Check which alternatives are present, and "downgrade"
 712          * when the chosen alternative is not present, warning
 713          * the user when that happens. Some files may not have
 714          * any alternatives, so don't warn in that case.
 715          */
 716         alternatives = le64_to_cpu(ucode->alternatives);
 717         tmp = wanted_alternative;
 718         if (wanted_alternative > 63)
 719                 wanted_alternative = 63;
 720         while (wanted_alternative && !(alternatives & BIT(wanted_alternative)))
 721                 wanted_alternative--;
 722         if (wanted_alternative && wanted_alternative != tmp)
 723                 IWL_WARN(priv,
 724                          "uCode alternative %d not available, choosing %d\n",
 725                          tmp, wanted_alternative);
 726
 727         priv->ucode_ver = le32_to_cpu(ucode->ver);
 728         pieces->build = le32_to_cpu(ucode->build);
 729         data = ucode->data;
 730
 731         len -= sizeof(*ucode);
 732
 733         while (len >= sizeof(*tlv)) {
 734                 u16 tlv_alt;
 735
 736                 len -= sizeof(*tlv);
 737                 tlv = (void *)data;
 738
 739                 tlv_len = le32_to_cpu(tlv->length);
 740                 tlv_type = le16_to_cpu(tlv->type);
 741                 tlv_alt = le16_to_cpu(tlv->alternative);
 742                 tlv_data = tlv->data;
 743
 744                 if (len < tlv_len) {
 745                         IWL_ERR(priv, "invalid TLV len: %zd/%u\n",
 746                                 len, tlv_len);
 747                         return -EINVAL;
 748                 }
 749                 len -= ALIGN(tlv_len, 4);
 750                 data += sizeof(*tlv) + ALIGN(tlv_len, 4);
 751
 752                 /*
 753                  * Alternative 0 is always valid.
 754                  *
 755                  * Skip alternative TLVs that are not selected.
 756                  */
 757                 if (tlv_alt != 0 && tlv_alt != wanted_alternative)
 758                         continue;
 759
 760                 switch (tlv_type) {
 761                 case IWL_UCODE_TLV_INST:
 762                         pieces->inst = tlv_data;
 763                         pieces->inst_size = tlv_len;
 764                         break;
 765                 case IWL_UCODE_TLV_DATA:
 766                         pieces->data = tlv_data;
 767                         pieces->data_size = tlv_len;
 768                         break;
 769                 case IWL_UCODE_TLV_INIT:
 770                         pieces->init = tlv_data;
 771                         pieces->init_size = tlv_len;
 772                         break;
 773                 case IWL_UCODE_TLV_INIT_DATA:
 774                         pieces->init_data = tlv_data;
 775                         pieces->init_data_size = tlv_len;
 776                         break;
 777                 case IWL_UCODE_TLV_BOOT:
 778                         IWL_ERR(priv, "Found unexpected BOOT ucode\n");
 779                         break;
 780                 case IWL_UCODE_TLV_PROBE_MAX_LEN:
 781                         if (tlv_len != sizeof(u32))
 782                                 goto invalid_tlv_len;
 783                         capa->max_probe_length =
 784                                         le32_to_cpup((__le32 *)tlv_data);
 785                         break;
 786                 case IWL_UCODE_TLV_PAN:
 787                         if (tlv_len)
 788                                 goto invalid_tlv_len;
 789                         capa->flags |= IWL_UCODE_TLV_FLAGS_PAN;
 790                         break;
 791                 case IWL_UCODE_TLV_FLAGS:
 792                         /* must be at least one u32 */
 793                         if (tlv_len < sizeof(u32))
 794                                 goto invalid_tlv_len;
 795                         /* and a proper number of u32s */
 796                         if (tlv_len % sizeof(u32))
 797                                 goto invalid_tlv_len;
 798                         /*
 799                          * This driver only reads the first u32 as
 800                          * right now no more features are defined,
 801                          * if that changes then either the driver
 802                          * will not work with the new firmware, or
 803                          * it'll not take advantage of new features.
 804                          */
 805                         capa->flags = le32_to_cpup((__le32 *)tlv_data);
 806                         break;
 807                 case IWL_UCODE_TLV_INIT_EVTLOG_PTR:
 808                         if (tlv_len != sizeof(u32))
 809                                 goto invalid_tlv_len;
 810                         pieces->init_evtlog_ptr =
 811                                         le32_to_cpup((__le32 *)tlv_data);
 812                         break;
 813                 case IWL_UCODE_TLV_INIT_EVTLOG_SIZE:
 814                         if (tlv_len != sizeof(u32))
 815                                 goto invalid_tlv_len;
 816                         pieces->init_evtlog_size =
 817                                         le32_to_cpup((__le32 *)tlv_data);
 818                         break;
 819                 case IWL_UCODE_TLV_INIT_ERRLOG_PTR:
 820                         if (tlv_len != sizeof(u32))
 821                                 goto invalid_tlv_len;
 822                         pieces->init_errlog_ptr =
 823                                         le32_to_cpup((__le32 *)tlv_data);
 824                         break;
 825                 case IWL_UCODE_TLV_RUNT_EVTLOG_PTR:
 826                         if (tlv_len != sizeof(u32))
 827                                 goto invalid_tlv_len;
 828                         pieces->inst_evtlog_ptr =
 829                                         le32_to_cpup((__le32 *)tlv_data);
 830                         break;
 831                 case IWL_UCODE_TLV_RUNT_EVTLOG_SIZE:
 832                         if (tlv_len != sizeof(u32))
 833                                 goto invalid_tlv_len;
 834                         pieces->inst_evtlog_size =
 835                                         le32_to_cpup((__le32 *)tlv_data);
 836                         break;
 837                 case IWL_UCODE_TLV_RUNT_ERRLOG_PTR:
 838                         if (tlv_len != sizeof(u32))
 839                                 goto invalid_tlv_len;
 840                         pieces->inst_errlog_ptr =
 841                                         le32_to_cpup((__le32 *)tlv_data);
 842                         break;
 843                 case IWL_UCODE_TLV_ENHANCE_SENS_TBL:
 844                         if (tlv_len)
 845                                 goto invalid_tlv_len;
 846                         priv->enhance_sensitivity_table = true;
 847                         break;
 848                 case IWL_UCODE_TLV_WOWLAN_INST:
 849                         pieces->wowlan_inst = tlv_data;
 850                         pieces->wowlan_inst_size = tlv_len;
 851                         break;
 852                 case IWL_UCODE_TLV_WOWLAN_DATA:
 853                         pieces->wowlan_data = tlv_data;
 854                         pieces->wowlan_data_size = tlv_len;
 855                         break;
 856                 case IWL_UCODE_TLV_PHY_CALIBRATION_SIZE:
 857                         if (tlv_len != sizeof(u32))
 858                                 goto invalid_tlv_len;
 859                         capa->standard_phy_calibration_size =
 860                                         le32_to_cpup((__le32 *)tlv_data);
 861                         break;
 862                 default:
 863                         IWL_DEBUG_INFO(priv, "unknown TLV: %d\n", tlv_type);
 864                         break;
 865                 }
 866         }
 867
 868         if (len) {
 869                 IWL_ERR(priv, "invalid TLV after parsing: %zd\n", len);
 870                 iwl_print_hex_dump(priv, IWL_DL_FW, (u8 *)data, len);
 871                 return -EINVAL;
 872         }
 873
 874         return 0;
 875
 876  invalid_tlv_len:
 877         IWL_ERR(priv, "TLV %d has invalid size: %u\n", tlv_type, tlv_len);
 878         iwl_print_hex_dump(priv, IWL_DL_FW, tlv_data, tlv_len);
 879
 880         return -EINVAL;
 881 }
 882
 883 /**
 884  * iwl_ucode_callback - callback when firmware was loaded
 885  *
 886  * If loaded successfully, copies the firmware into buffers
 887  * for the card to fetch (via DMA).
 888  */
 889 static void iwl_ucode_callback(const struct firmware *ucode_raw, void *context)
 890 {
 891         struct iwl_priv *priv = context;
 892         struct iwl_ucode_header *ucode;
 893         int err;
 894         struct iwlagn_firmware_pieces pieces;
 895         const unsigned int api_max = priv->cfg->ucode_api_max;
 896         unsigned int api_ok = priv->cfg->ucode_api_ok;
 897         const unsigned int api_min = priv->cfg->ucode_api_min;
 898         u32 api_ver;
 899         char buildstr[25];
 900         u32 build;
 901         struct iwlagn_ucode_capabilities ucode_capa = {
 902                 .max_probe_length = 200,
 903                 .standard_phy_calibration_size =
 904                         IWL_DEFAULT_STANDARD_PHY_CALIBRATE_TBL_SIZE,
 905         };
 906
 907         if (!api_ok)
 908                 api_ok = api_max;
 909
 910         memset(&pieces, 0, sizeof(pieces));
 911
 912         if (!ucode_raw) {
 913                 if (priv->fw_index <= api_ok)
 914                         IWL_ERR(priv,
 915                                 "request for firmware file '%s' failed.\n",
 916                                 priv->firmware_name);
 917                 goto try_again;
 918         }
 919
 920         IWL_DEBUG_INFO(priv, "Loaded firmware file '%s' (%zd bytes).\n",
 921                        priv->firmware_name, ucode_raw->size);
 922
 923         /* Make sure that we got at least the API version number */
 924         if (ucode_raw->size < 4) {
 925                 IWL_ERR(priv, "File size way too small!\n");
 926                 goto try_again;
 927         }
 928
 929         /* Data from ucode file:  header followed by uCode images */
 930         ucode = (struct iwl_ucode_header *)ucode_raw->data;
 931
 932         if (ucode->ver)
 933                 err = iwlagn_load_legacy_firmware(priv, ucode_raw, &pieces);
 934         else
 935                 err = iwlagn_load_firmware(priv, ucode_raw, &pieces,
 936                                            &ucode_capa);
 937
 938         if (err)
 939                 goto try_again;
 940
 941         api_ver = IWL_UCODE_API(priv->ucode_ver);
 942         build = pieces.build;
 943
 944         /*
 945          * api_ver should match the api version forming part of the
 946          * firmware filename ... but we don't check for that and only rely
 947          * on the API version read from firmware header from here on forward
 948          */
 949         /* no api version check required for experimental uCode */
 950         if (priv->fw_index != UCODE_EXPERIMENTAL_INDEX) {
 951                 if (api_ver < api_min || api_ver > api_max) {
 952                         IWL_ERR(priv,
 953                                 "Driver unable to support your firmware API. "
 954                                 "Driver supports v%u, firmware is v%u.\n",
 955                                 api_max, api_ver);
 956                         goto try_again;
 957                 }
 958
 959                 if (api_ver < api_ok) {
 960                         if (api_ok != api_max)
 961                                 IWL_ERR(priv, "Firmware has old API version, "
 962                                         "expected v%u through v%u, got v%u.\n",
 963                                         api_ok, api_max, api_ver);
 964                         else
 965                                 IWL_ERR(priv, "Firmware has old API version, "
 966                                         "expected v%u, got v%u.\n",
 967                                         api_max, api_ver);
 968                         IWL_ERR(priv, "New firmware can be obtained from "
 969                                       "http://www.intellinuxwireless.org/.\n");
 970                 }
 971         }
 972
 973         if (build)
 974                 sprintf(buildstr, " build %u%s", build,
 975                        (priv->fw_index == UCODE_EXPERIMENTAL_INDEX)
 976                                 ? " (EXP)" : "");
 977         else
 978                 buildstr[0] = '\0';
 979
 980         IWL_INFO(priv, "loaded firmware version %u.%u.%u.%u%s\n",
 981                  IWL_UCODE_MAJOR(priv->ucode_ver),
 982                  IWL_UCODE_MINOR(priv->ucode_ver),
 983                  IWL_UCODE_API(priv->ucode_ver),
 984                  IWL_UCODE_SERIAL(priv->ucode_ver),
 985                  buildstr);
 986
 987         snprintf(priv->hw->wiphy->fw_version,
 988                  sizeof(priv->hw->wiphy->fw_version),
 989                  "%u.%u.%u.%u%s",
 990                  IWL_UCODE_MAJOR(priv->ucode_ver),
 991                  IWL_UCODE_MINOR(priv->ucode_ver),
 992                  IWL_UCODE_API(priv->ucode_ver),
 993                  IWL_UCODE_SERIAL(priv->ucode_ver),
 994                  buildstr);
 995
 996         /*
 997          * For any of the failures below (before allocating pci memory)
 998          * we will try to load a version with a smaller API -- maybe the
 999          * user just got a corrupted version of the latest API.
1000          */
1001
1002         IWL_DEBUG_INFO(priv, "f/w package hdr ucode version raw = 0x%x\n",
1003                        priv->ucode_ver);
1004         IWL_DEBUG_INFO(priv, "f/w package hdr runtime inst size = %Zd\n",
1005                        pieces.inst_size);
1006         IWL_DEBUG_INFO(priv, "f/w package hdr runtime data size = %Zd\n",
1007                        pieces.data_size);
1008         IWL_DEBUG_INFO(priv, "f/w package hdr init inst size = %Zd\n",
1009                        pieces.init_size);
1010         IWL_DEBUG_INFO(priv, "f/w package hdr init data size = %Zd\n",
1011                        pieces.init_data_size);
1012
1013         /* Verify that uCode images will fit in card's SRAM */
1014         if (pieces.inst_size > hw_params(priv).max_inst_size) {
1015                 IWL_ERR(priv, "uCode instr len %Zd too large to fit in\n",
1016                         pieces.inst_size);
1017                 goto try_again;
1018         }
1019
1020         if (pieces.data_size > hw_params(priv).max_data_size) {
1021                 IWL_ERR(priv, "uCode data len %Zd too large to fit in\n",
1022                         pieces.data_size);
1023                 goto try_again;
1024         }
1025
1026         if (pieces.init_size > hw_params(priv).max_inst_size) {
1027                 IWL_ERR(priv, "uCode init instr len %Zd too large to fit in\n",
1028                         pieces.init_size);
1029                 goto try_again;
1030         }
1031
1032         if (pieces.init_data_size > hw_params(priv).max_data_size) {
1033                 IWL_ERR(priv, "uCode init data len %Zd too large to fit in\n",
1034                         pieces.init_data_size);
1035                 goto try_again;
1036         }
1037
1038         /* Allocate ucode buffers for card's bus-master loading ... */
1039
1040         /* Runtime instructions and 2 copies of data:
1041          * 1) unmodified from disk
1042          * 2) backup cache for save/restore during power-downs */
1043         if (iwl_alloc_fw_desc(priv, &priv->ucode_rt.code,
1044                               pieces.inst, pieces.inst_size))
1045                 goto err_pci_alloc;
1046         if (iwl_alloc_fw_desc(priv, &priv->ucode_rt.data,
1047                               pieces.data, pieces.data_size))
1048                 goto err_pci_alloc;
1049
1050         /* Initialization instructions and data */
1051         if (pieces.init_size && pieces.init_data_size) {
1052                 if (iwl_alloc_fw_desc(priv, &priv->ucode_init.code,
1053                                       pieces.init, pieces.init_size))
1054                         goto err_pci_alloc;
1055                 if (iwl_alloc_fw_desc(priv, &priv->ucode_init.data,
1056                                       pieces.init_data, pieces.init_data_size))
1057                         goto err_pci_alloc;
1058         }
1059
1060         /* WoWLAN instructions and data */
1061         if (pieces.wowlan_inst_size && pieces.wowlan_data_size) {
1062                 if (iwl_alloc_fw_desc(priv, &priv->ucode_wowlan.code,
1063                                       pieces.wowlan_inst,
1064                                       pieces.wowlan_inst_size))
1065                         goto err_pci_alloc;
1066                 if (iwl_alloc_fw_desc(priv, &priv->ucode_wowlan.data,
1067                                       pieces.wowlan_data,
1068                                       pieces.wowlan_data_size))
1069                         goto err_pci_alloc;
1070         }
1071
1072         /* Now that we can no longer fail, copy information */
1073
1074         /*
1075          * The (size - 16) / 12 formula is based on the information recorded
1076          * for each event, which is of mode 1 (including timestamp) for all
1077          * new microcodes that include this information.
1078          */
1079         priv->init_evtlog_ptr = pieces.init_evtlog_ptr;
1080         if (pieces.init_evtlog_size)
1081                 priv->init_evtlog_size = (pieces.init_evtlog_size - 16)/12;
1082         else
1083                 priv->init_evtlog_size =
1084                         priv->cfg->base_params->max_event_log_size;
1085         priv->init_errlog_ptr = pieces.init_errlog_ptr;
1086         priv->inst_evtlog_ptr = pieces.inst_evtlog_ptr;
1087         if (pieces.inst_evtlog_size)
1088                 priv->inst_evtlog_size = (pieces.inst_evtlog_size - 16)/12;
1089         else
1090                 priv->inst_evtlog_size =
1091                         priv->cfg->base_params->max_event_log_size;
1092         priv->inst_errlog_ptr = pieces.inst_errlog_ptr;
1093
1094         priv->new_scan_threshold_behaviour =
1095                 !!(ucode_capa.flags & IWL_UCODE_TLV_FLAGS_NEWSCAN);
1096
1097         if (!(priv->cfg->sku & EEPROM_SKU_CAP_IPAN_ENABLE))
1098                 ucode_capa.flags &= ~IWL_UCODE_TLV_FLAGS_PAN;
1099
1100         /*
1101          * if not PAN, then don't support P2P -- might be a uCode
1102          * packaging bug or due to the eeprom check above
1103          */
1104         if (!(ucode_capa.flags & IWL_UCODE_TLV_FLAGS_PAN))
1105                 ucode_capa.flags &= ~IWL_UCODE_TLV_FLAGS_P2P;
1106
1107         if (ucode_capa.flags & IWL_UCODE_TLV_FLAGS_PAN) {
1108                 priv->sta_key_max_num = STA_KEY_MAX_NUM_PAN;
1109                 priv->shrd->cmd_queue = IWL_IPAN_CMD_QUEUE_NUM;
1110         } else {
1111                 priv->sta_key_max_num = STA_KEY_MAX_NUM;
1112                 priv->shrd->cmd_queue = IWL_DEFAULT_CMD_QUEUE_NUM;
1113         }
1114
1115         /*
1116          * figure out the offset of chain noise reset and gain commands
1117          * base on the size of standard phy calibration commands table size
1118          */
1119         if (ucode_capa.standard_phy_calibration_size >
1120             IWL_MAX_PHY_CALIBRATE_TBL_SIZE)
1121                 ucode_capa.standard_phy_calibration_size =
1122                         IWL_MAX_STANDARD_PHY_CALIBRATE_TBL_SIZE;
1123
1124         priv->phy_calib_chain_noise_reset_cmd =
1125                 ucode_capa.standard_phy_calibration_size;
1126         priv->phy_calib_chain_noise_gain_cmd =
1127                 ucode_capa.standard_phy_calibration_size + 1;
1128
1129         /* initialize all valid contexts */
1130         iwl_init_context(priv, ucode_capa.flags);
1131
1132         /**************************************************
1133          * This is still part of probe() in a sense...
1134          *
1135          * 9. Setup and register with mac80211 and debugfs
1136          **************************************************/
1137         err = iwlagn_mac_setup_register(priv, &ucode_capa);
1138         if (err)
1139                 goto out_unbind;
1140
1141         err = iwl_dbgfs_register(priv, DRV_NAME);
1142         if (err)
1143                 IWL_ERR(priv, "failed to create debugfs files. Ignoring error: %d\n", err);
1144
1145         /* We have our copies now, allow OS release its copies */
1146         release_firmware(ucode_raw);
1147         complete(&priv->firmware_loading_complete);
1148         return;
1149
1150  try_again:
1151         /* try next, if any */
1152         if (iwl_request_firmware(priv, false))
1153                 goto out_unbind;
1154         release_firmware(ucode_raw);
1155         return;
1156
1157  err_pci_alloc:
1158         IWL_ERR(priv, "failed to allocate pci memory\n");
1159         iwl_dealloc_ucode(priv);
1160  out_unbind:
1161         complete(&priv->firmware_loading_complete);
1162         device_release_driver(bus(priv)->dev);
1163         release_firmware(ucode_raw);
1164 }
1165
1166 static void iwl_rf_kill_ct_config(struct iwl_priv *priv)
1167 {
1168         struct iwl_ct_kill_config cmd;
1169         struct iwl_ct_kill_throttling_config adv_cmd;
1170         unsigned long flags;
1171         int ret = 0;
1172
1173         spin_lock_irqsave(&priv->shrd->lock, flags);
1174         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_CLR,
1175                     CSR_UCODE_DRV_GP1_REG_BIT_CT_KILL_EXIT);
1176         spin_unlock_irqrestore(&priv->shrd->lock, flags);
1177         priv->thermal_throttle.ct_kill_toggle = false;
1178
1179         if (priv->cfg->base_params->support_ct_kill_exit) {
1180                 adv_cmd.critical_temperature_enter =
1181                         cpu_to_le32(hw_params(priv).ct_kill_threshold);
1182                 adv_cmd.critical_temperature_exit =
1183                         cpu_to_le32(hw_params(priv).ct_kill_exit_threshold);
1184
1185                 ret = iwl_trans_send_cmd_pdu(trans(priv),
1186                                        REPLY_CT_KILL_CONFIG_CMD,
1187                                        CMD_SYNC, sizeof(adv_cmd), &adv_cmd);
1188                 if (ret)
1189                         IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n");
1190                 else
1191                         IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD "
1192                                 "succeeded, critical temperature enter is %d,"
1193                                 "exit is %d\n",
1194                                 hw_params(priv).ct_kill_threshold,
1195                                 hw_params(priv).ct_kill_exit_threshold);
1196         } else {
1197                 cmd.critical_temperature_R =
1198                         cpu_to_le32(hw_params(priv).ct_kill_threshold);
1199
1200                 ret = iwl_trans_send_cmd_pdu(trans(priv),
1201                                        REPLY_CT_KILL_CONFIG_CMD,
1202                                        CMD_SYNC, sizeof(cmd), &cmd);
1203                 if (ret)
1204                         IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n");
1205                 else
1206                         IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD "
1207                                 "succeeded, "
1208                                 "critical temperature is %d\n",
1209                                 hw_params(priv).ct_kill_threshold);
1210         }
1211 }
1212
1213 static int iwlagn_send_calib_cfg_rt(struct iwl_priv *priv, u32 cfg)
1214 {
1215         struct iwl_calib_cfg_cmd calib_cfg_cmd;
1216         struct iwl_host_cmd cmd = {
1217                 .id = CALIBRATION_CFG_CMD,
1218                 .len = { sizeof(struct iwl_calib_cfg_cmd), },
1219                 .data = { &calib_cfg_cmd, },
1220         };
1221
1222         memset(&calib_cfg_cmd, 0, sizeof(calib_cfg_cmd));
1223         calib_cfg_cmd.ucd_calib_cfg.once.is_enable = IWL_CALIB_RT_CFG_ALL;
1224         calib_cfg_cmd.ucd_calib_cfg.once.start = cpu_to_le32(cfg);
1225
1226         return iwl_trans_send_cmd(trans(priv), &cmd);
1227 }
1228
1229
1230 static int iwlagn_send_tx_ant_config(struct iwl_priv *priv, u8 valid_tx_ant)
1231 {
1232         struct iwl_tx_ant_config_cmd tx_ant_cmd = {
1233           .valid = cpu_to_le32(valid_tx_ant),
1234         };
1235
1236         if (IWL_UCODE_API(priv->ucode_ver) > 1) {
1237                 IWL_DEBUG_HC(priv, "select valid tx ant: %u\n", valid_tx_ant);
1238                 return iwl_trans_send_cmd_pdu(trans(priv),
1239                                         TX_ANT_CONFIGURATION_CMD,
1240                                         CMD_SYNC,
1241                                         sizeof(struct iwl_tx_ant_config_cmd),
1242                                         &tx_ant_cmd);
1243         } else {
1244                 IWL_DEBUG_HC(priv, "TX_ANT_CONFIGURATION_CMD not supported\n");
1245                 return -EOPNOTSUPP;
1246         }
1247 }
1248
1249 /**
1250  * iwl_alive_start - called after REPLY_ALIVE notification received
1251  *                   from protocol/runtime uCode (initialization uCode's
1252  *                   Alive gets handled by iwl_init_alive_start()).
1253  */
1254 int iwl_alive_start(struct iwl_priv *priv)
1255 {
1256         int ret = 0;
1257         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1258
1259         /*TODO: this should go to the transport layer */
1260         iwl_reset_ict(trans(priv));
1261
1262         IWL_DEBUG_INFO(priv, "Runtime Alive received.\n");
1263
1264         /* After the ALIVE response, we can send host commands to the uCode */
1265         set_bit(STATUS_ALIVE, &priv->shrd->status);
1266
1267         /* Enable watchdog to monitor the driver tx queues */
1268         iwl_setup_watchdog(priv);
1269
1270         if (iwl_is_rfkill(priv->shrd))
1271                 return -ERFKILL;
1272
1273         /* download priority table before any calibration request */
1274         if (priv->cfg->bt_params &&
1275             priv->cfg->bt_params->advanced_bt_coexist) {
1276                 /* Configure Bluetooth device coexistence support */
1277                 if (priv->cfg->bt_params->bt_sco_disable)
1278                         priv->bt_enable_pspoll = false;
1279                 else
1280                         priv->bt_enable_pspoll = true;
1281
1282                 priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK;
1283                 priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT;
1284                 priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT;
1285                 iwlagn_send_advance_bt_config(priv);
1286                 priv->bt_valid = IWLAGN_BT_VALID_ENABLE_FLAGS;
1287                 priv->cur_rssi_ctx = NULL;
1288
1289                 iwlagn_send_prio_tbl(priv);
1290
1291                 /* FIXME: w/a to force change uCode BT state machine */
1292                 ret = iwlagn_send_bt_env(priv, IWL_BT_COEX_ENV_OPEN,
1293                                          BT_COEX_PRIO_TBL_EVT_INIT_CALIB2);
1294                 if (ret)
1295                         return ret;
1296                 ret = iwlagn_send_bt_env(priv, IWL_BT_COEX_ENV_CLOSE,
1297                                          BT_COEX_PRIO_TBL_EVT_INIT_CALIB2);
1298                 if (ret)
1299                         return ret;
1300         } else {
1301                 /*
1302                  * default is 2-wire BT coexexistence support
1303                  */
1304                 iwl_send_bt_config(priv);
1305         }
1306
1307         if (hw_params(priv).calib_rt_cfg)
1308                 iwlagn_send_calib_cfg_rt(priv,
1309                                          hw_params(priv).calib_rt_cfg);
1310
1311         ieee80211_wake_queues(priv->hw);
1312
1313         priv->active_rate = IWL_RATES_MASK;
1314
1315         /* Configure Tx antenna selection based on H/W config */
1316         iwlagn_send_tx_ant_config(priv, priv->cfg->valid_tx_ant);
1317
1318         if (iwl_is_associated_ctx(ctx) && !priv->shrd->wowlan) {
1319                 struct iwl_rxon_cmd *active_rxon =
1320                                 (struct iwl_rxon_cmd *)&ctx->active;
1321                 /* apply any changes in staging */
1322                 ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK;
1323                 active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
1324         } else {
1325                 struct iwl_rxon_context *tmp;
1326                 /* Initialize our rx_config data */
1327                 for_each_context(priv, tmp)
1328                         iwl_connection_init_rx_config(priv, tmp);
1329
1330                 iwlagn_set_rxon_chain(priv, ctx);
1331         }
1332
1333         if (!priv->shrd->wowlan) {
1334                 /* WoWLAN ucode will not reply in the same way, skip it */
1335                 iwl_reset_run_time_calib(priv);
1336         }
1337
1338         set_bit(STATUS_READY, &priv->shrd->status);
1339
1340         /* Configure the adapter for unassociated operation */
1341         ret = iwlagn_commit_rxon(priv, ctx);
1342         if (ret)
1343                 return ret;
1344
1345         /* At this point, the NIC is initialized and operational */
1346         iwl_rf_kill_ct_config(priv);
1347
1348         IWL_DEBUG_INFO(priv, "ALIVE processing complete.\n");
1349
1350         return iwl_power_update_mode(priv, true);
1351 }
1352
1353 static void iwl_cancel_deferred_work(struct iwl_priv *priv);
1354
1355 static void __iwl_down(struct iwl_priv *priv)
1356 {
1357         int exit_pending;
1358
1359         IWL_DEBUG_INFO(priv, DRV_NAME " is going down\n");
1360
1361         iwl_scan_cancel_timeout(priv, 200);
1362
1363         /*
1364          * If active, scanning won't cancel it, so say it expired.
1365          * No race since we hold the mutex here and a new one
1366          * can't come in at this time.
1367          */
1368         ieee80211_remain_on_channel_expired(priv->hw);
1369
1370         exit_pending =
1371                 test_and_set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1372
1373         /* Stop TX queues watchdog. We need to have STATUS_EXIT_PENDING bit set
1374          * to prevent rearm timer */
1375         del_timer_sync(&priv->watchdog);
1376
1377         iwl_clear_ucode_stations(priv, NULL);
1378         iwl_dealloc_bcast_stations(priv);
1379         iwl_clear_driver_stations(priv);
1380
1381         /* reset BT coex data */
1382         priv->bt_status = 0;
1383         priv->cur_rssi_ctx = NULL;
1384         priv->bt_is_sco = 0;
1385         if (priv->cfg->bt_params)
1386                 priv->bt_traffic_load =
1387                          priv->cfg->bt_params->bt_init_traffic_load;
1388         else
1389                 priv->bt_traffic_load = 0;
1390         priv->bt_full_concurrent = false;
1391         priv->bt_ci_compliance = 0;
1392
1393         /* Wipe out the EXIT_PENDING status bit if we are not actually
1394          * exiting the module */
1395         if (!exit_pending)
1396                 clear_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1397
1398         if (priv->mac80211_registered)
1399                 ieee80211_stop_queues(priv->hw);
1400
1401         iwl_trans_stop_device(trans(priv));
1402
1403         /* Clear out all status bits but a few that are stable across reset */
1404         priv->shrd->status &=
1405                         test_bit(STATUS_RF_KILL_HW, &priv->shrd->status) <<
1406                                 STATUS_RF_KILL_HW |
1407                         test_bit(STATUS_GEO_CONFIGURED, &priv->shrd->status) <<
1408                                 STATUS_GEO_CONFIGURED |
1409                         test_bit(STATUS_FW_ERROR, &priv->shrd->status) <<
1410                                 STATUS_FW_ERROR |
1411                         test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) <<
1412                                 STATUS_EXIT_PENDING;
1413
1414         dev_kfree_skb(priv->beacon_skb);
1415         priv->beacon_skb = NULL;
1416 }
1417
1418 static void iwl_down(struct iwl_priv *priv)
1419 {
1420         mutex_lock(&priv->shrd->mutex);
1421         __iwl_down(priv);
1422         mutex_unlock(&priv->shrd->mutex);
1423
1424         iwl_cancel_deferred_work(priv);
1425 }
1426
1427 #define MAX_HW_RESTARTS 5
1428
1429 static int __iwl_up(struct iwl_priv *priv)
1430 {
1431         struct iwl_rxon_context *ctx;
1432         int ret;
1433
1434         lockdep_assert_held(&priv->shrd->mutex);
1435
1436         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status)) {
1437                 IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
1438                 return -EIO;
1439         }
1440
1441         for_each_context(priv, ctx) {
1442                 ret = iwlagn_alloc_bcast_station(priv, ctx);
1443                 if (ret) {
1444                         iwl_dealloc_bcast_stations(priv);
1445                         return ret;
1446                 }
1447         }
1448
1449         ret = iwlagn_run_init_ucode(priv);
1450         if (ret) {
1451                 IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
1452                 goto error;
1453         }
1454
1455         ret = iwlagn_load_ucode_wait_alive(priv,
1456                                            &priv->ucode_rt,
1457                                            IWL_UCODE_REGULAR);
1458         if (ret) {
1459                 IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
1460                 goto error;
1461         }
1462
1463         ret = iwl_alive_start(priv);
1464         if (ret)
1465                 goto error;
1466         return 0;
1467
1468  error:
1469         set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1470         __iwl_down(priv);
1471         clear_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1472
1473         IWL_ERR(priv, "Unable to initialize device.\n");
1474         return ret;
1475 }
1476
1477
1478 /*****************************************************************************
1479  *
1480  * Workqueue callbacks
1481  *
1482  *****************************************************************************/
1483
1484 static void iwl_bg_run_time_calib_work(struct work_struct *work)
1485 {
1486         struct iwl_priv *priv = container_of(work, struct iwl_priv,
1487                         run_time_calib_work);
1488
1489         mutex_lock(&priv->shrd->mutex);
1490
1491         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) ||
1492             test_bit(STATUS_SCANNING, &priv->shrd->status)) {
1493                 mutex_unlock(&priv->shrd->mutex);
1494                 return;
1495         }
1496
1497         if (priv->start_calib) {
1498                 iwl_chain_noise_calibration(priv);
1499                 iwl_sensitivity_calibration(priv);
1500         }
1501
1502         mutex_unlock(&priv->shrd->mutex);
1503 }
1504
1505 static void iwlagn_prepare_restart(struct iwl_priv *priv)
1506 {
1507         struct iwl_rxon_context *ctx;
1508         bool bt_full_concurrent;
1509         u8 bt_ci_compliance;
1510         u8 bt_load;
1511         u8 bt_status;
1512         bool bt_is_sco;
1513
1514         lockdep_assert_held(&priv->shrd->mutex);
1515
1516         for_each_context(priv, ctx)
1517                 ctx->vif = NULL;
1518         priv->is_open = 0;
1519
1520         /*
1521          * __iwl_down() will clear the BT status variables,
1522          * which is correct, but when we restart we really
1523          * want to keep them so restore them afterwards.
1524          *
1525          * The restart process will later pick them up and
1526          * re-configure the hw when we reconfigure the BT
1527          * command.
1528          */
1529         bt_full_concurrent = priv->bt_full_concurrent;
1530         bt_ci_compliance = priv->bt_ci_compliance;
1531         bt_load = priv->bt_traffic_load;
1532         bt_status = priv->bt_status;
1533         bt_is_sco = priv->bt_is_sco;
1534
1535         __iwl_down(priv);
1536
1537         priv->bt_full_concurrent = bt_full_concurrent;
1538         priv->bt_ci_compliance = bt_ci_compliance;
1539         priv->bt_traffic_load = bt_load;
1540         priv->bt_status = bt_status;
1541         priv->bt_is_sco = bt_is_sco;
1542 }
1543
1544 static void iwl_bg_restart(struct work_struct *data)
1545 {
1546         struct iwl_priv *priv = container_of(data, struct iwl_priv, restart);
1547
1548         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
1549                 return;
1550
1551         if (test_and_clear_bit(STATUS_FW_ERROR, &priv->shrd->status)) {
1552                 mutex_lock(&priv->shrd->mutex);
1553                 iwlagn_prepare_restart(priv);
1554                 mutex_unlock(&priv->shrd->mutex);
1555                 iwl_cancel_deferred_work(priv);
1556                 ieee80211_restart_hw(priv->hw);
1557         } else {
1558                 WARN_ON(1);
1559         }
1560 }
1561
1562 /*****************************************************************************
1563  *
1564  * mac80211 entry point functions
1565  *
1566  *****************************************************************************/
1567
1568 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
1569         {
1570                 .max = 1,
1571                 .types = BIT(NL80211_IFTYPE_STATION),
1572         },
1573         {
1574                 .max = 1,
1575                 .types = BIT(NL80211_IFTYPE_AP),
1576         },
1577 };
1578
1579 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
1580         {
1581                 .max = 2,
1582                 .types = BIT(NL80211_IFTYPE_STATION),
1583         },
1584 };
1585
1586 static const struct ieee80211_iface_limit iwlagn_p2p_sta_go_limits[] = {
1587         {
1588                 .max = 1,
1589                 .types = BIT(NL80211_IFTYPE_STATION),
1590         },
1591         {
1592                 .max = 1,
1593                 .types = BIT(NL80211_IFTYPE_P2P_GO) |
1594                          BIT(NL80211_IFTYPE_AP),
1595         },
1596 };
1597
1598 static const struct ieee80211_iface_limit iwlagn_p2p_2sta_limits[] = {
1599         {
1600                 .max = 2,
1601                 .types = BIT(NL80211_IFTYPE_STATION),
1602         },
1603         {
1604                 .max = 1,
1605                 .types = BIT(NL80211_IFTYPE_P2P_CLIENT),
1606         },
1607 };
1608
1609 static const struct ieee80211_iface_combination
1610 iwlagn_iface_combinations_dualmode[] = {
1611         { .num_different_channels = 1,
1612           .max_interfaces = 2,
1613           .beacon_int_infra_match = true,
1614           .limits = iwlagn_sta_ap_limits,
1615           .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
1616         },
1617         { .num_different_channels = 1,
1618           .max_interfaces = 2,
1619           .limits = iwlagn_2sta_limits,
1620           .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
1621         },
1622 };
1623
1624 static const struct ieee80211_iface_combination
1625 iwlagn_iface_combinations_p2p[] = {
1626         { .num_different_channels = 1,
1627           .max_interfaces = 2,
1628           .beacon_int_infra_match = true,
1629           .limits = iwlagn_p2p_sta_go_limits,
1630           .n_limits = ARRAY_SIZE(iwlagn_p2p_sta_go_limits),
1631         },
1632         { .num_different_channels = 1,
1633           .max_interfaces = 2,
1634           .limits = iwlagn_p2p_2sta_limits,
1635           .n_limits = ARRAY_SIZE(iwlagn_p2p_2sta_limits),
1636         },
1637 };
1638
1639 /*
1640  * Not a mac80211 entry point function, but it fits in with all the
1641  * other mac80211 functions grouped here.
1642  */
1643 static int iwlagn_mac_setup_register(struct iwl_priv *priv,
1644                                   struct iwlagn_ucode_capabilities *capa)
1645 {
1646         int ret;
1647         struct ieee80211_hw *hw = priv->hw;
1648         struct iwl_rxon_context *ctx;
1649
1650         hw->rate_control_algorithm = "iwl-agn-rs";
1651
1652         /* Tell mac80211 our characteristics */
1653         hw->flags = IEEE80211_HW_SIGNAL_DBM |
1654                     IEEE80211_HW_AMPDU_AGGREGATION |
1655                     IEEE80211_HW_NEED_DTIM_PERIOD |
1656                     IEEE80211_HW_SPECTRUM_MGMT |
1657                     IEEE80211_HW_REPORTS_TX_ACK_STATUS;
1658
1659         /*
1660          * Including the following line will crash some AP's.  This
1661          * workaround removes the stimulus which causes the crash until
1662          * the AP software can be fixed.
1663         hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
1664          */
1665
1666         hw->flags |= IEEE80211_HW_SUPPORTS_PS |
1667                      IEEE80211_HW_SUPPORTS_DYNAMIC_PS;
1668
1669         if (priv->cfg->sku & EEPROM_SKU_CAP_11N_ENABLE)
1670                 hw->flags |= IEEE80211_HW_SUPPORTS_DYNAMIC_SMPS |
1671                              IEEE80211_HW_SUPPORTS_STATIC_SMPS;
1672
1673         if (capa->flags & IWL_UCODE_TLV_FLAGS_MFP)
1674                 hw->flags |= IEEE80211_HW_MFP_CAPABLE;
1675
1676         hw->sta_data_size = sizeof(struct iwl_station_priv);
1677         hw->vif_data_size = sizeof(struct iwl_vif_priv);
1678
1679         for_each_context(priv, ctx) {
1680                 hw->wiphy->interface_modes |= ctx->interface_modes;
1681                 hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
1682         }
1683
1684         BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
1685
1686         if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)) {
1687                 hw->wiphy->iface_combinations = iwlagn_iface_combinations_p2p;
1688                 hw->wiphy->n_iface_combinations =
1689                         ARRAY_SIZE(iwlagn_iface_combinations_p2p);
1690         } else if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
1691                 hw->wiphy->iface_combinations = iwlagn_iface_combinations_dualmode;
1692                 hw->wiphy->n_iface_combinations =
1693                         ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
1694         }
1695
1696         hw->wiphy->max_remain_on_channel_duration = 1000;
1697
1698         hw->wiphy->flags |= WIPHY_FLAG_CUSTOM_REGULATORY |
1699                             WIPHY_FLAG_DISABLE_BEACON_HINTS |
1700                             WIPHY_FLAG_IBSS_RSN;
1701
1702         if (priv->ucode_wowlan.code.len && device_can_wakeup(bus(priv)->dev)) {
1703                 hw->wiphy->wowlan.flags = WIPHY_WOWLAN_MAGIC_PKT |
1704                                           WIPHY_WOWLAN_DISCONNECT |
1705                                           WIPHY_WOWLAN_EAP_IDENTITY_REQ |
1706                                           WIPHY_WOWLAN_RFKILL_RELEASE;
1707                 if (!iwlagn_mod_params.sw_crypto)
1708                         hw->wiphy->wowlan.flags |=
1709                                 WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
1710                                 WIPHY_WOWLAN_GTK_REKEY_FAILURE;
1711
1712                 hw->wiphy->wowlan.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
1713                 hw->wiphy->wowlan.pattern_min_len =
1714                                         IWLAGN_WOWLAN_MIN_PATTERN_LEN;
1715                 hw->wiphy->wowlan.pattern_max_len =
1716                                         IWLAGN_WOWLAN_MAX_PATTERN_LEN;
1717         }
1718
1719         if (iwlagn_mod_params.power_save)
1720                 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
1721         else
1722                 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
1723
1724         hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
1725         /* we create the 802.11 header and a zero-length SSID element */
1726         hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 2;
1727
1728         /* Default value; 4 EDCA QOS priorities */
1729         hw->queues = 4;
1730
1731         hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
1732
1733         if (priv->bands[IEEE80211_BAND_2GHZ].n_channels)
1734                 priv->hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
1735                         &priv->bands[IEEE80211_BAND_2GHZ];
1736         if (priv->bands[IEEE80211_BAND_5GHZ].n_channels)
1737                 priv->hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
1738                         &priv->bands[IEEE80211_BAND_5GHZ];
1739
1740         iwl_leds_init(priv);
1741
1742         ret = ieee80211_register_hw(priv->hw);
1743         if (ret) {
1744                 IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
1745                 return ret;
1746         }
1747         priv->mac80211_registered = 1;
1748
1749         return 0;
1750 }
1751
1752
1753 static int iwlagn_mac_start(struct ieee80211_hw *hw)
1754 {
1755         struct iwl_priv *priv = hw->priv;
1756         int ret;
1757
1758         IWL_DEBUG_MAC80211(priv, "enter\n");
1759
1760         /* we should be verifying the device is ready to be opened */
1761         mutex_lock(&priv->shrd->mutex);
1762         ret = __iwl_up(priv);
1763         mutex_unlock(&priv->shrd->mutex);
1764         if (ret)
1765                 return ret;
1766
1767         IWL_DEBUG_INFO(priv, "Start UP work done.\n");
1768
1769         /* Now we should be done, and the READY bit should be set. */
1770         if (WARN_ON(!test_bit(STATUS_READY, &priv->shrd->status)))
1771                 ret = -EIO;
1772
1773         iwlagn_led_enable(priv);
1774
1775         priv->is_open = 1;
1776         IWL_DEBUG_MAC80211(priv, "leave\n");
1777         return 0;
1778 }
1779
1780 static void iwlagn_mac_stop(struct ieee80211_hw *hw)
1781 {
1782         struct iwl_priv *priv = hw->priv;
1783
1784         IWL_DEBUG_MAC80211(priv, "enter\n");
1785
1786         if (!priv->is_open)
1787                 return;
1788
1789         priv->is_open = 0;
1790
1791         iwl_down(priv);
1792
1793         flush_workqueue(priv->shrd->workqueue);
1794
1795         /* User space software may expect getting rfkill changes
1796          * even if interface is down */
1797         iwl_write32(bus(priv), CSR_INT, 0xFFFFFFFF);
1798         iwl_enable_rfkill_int(priv);
1799
1800         IWL_DEBUG_MAC80211(priv, "leave\n");
1801 }
1802
1803 #ifdef CONFIG_PM_SLEEP
1804 static int iwlagn_send_patterns(struct iwl_priv *priv,
1805                                 struct cfg80211_wowlan *wowlan)
1806 {
1807         struct iwlagn_wowlan_patterns_cmd *pattern_cmd;
1808         struct iwl_host_cmd cmd = {
1809                 .id = REPLY_WOWLAN_PATTERNS,
1810                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
1811                 .flags = CMD_SYNC,
1812         };
1813         int i, err;
1814
1815         if (!wowlan->n_patterns)
1816                 return 0;
1817
1818         cmd.len[0] = sizeof(*pattern_cmd) +
1819                         wowlan->n_patterns * sizeof(struct iwlagn_wowlan_pattern);
1820
1821         pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL);
1822         if (!pattern_cmd)
1823                 return -ENOMEM;
1824
1825         pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns);
1826
1827         for (i = 0; i < wowlan->n_patterns; i++) {
1828                 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8);
1829
1830                 memcpy(&pattern_cmd->patterns[i].mask,
1831                         wowlan->patterns[i].mask, mask_len);
1832                 memcpy(&pattern_cmd->patterns[i].pattern,
1833                         wowlan->patterns[i].pattern,
1834                         wowlan->patterns[i].pattern_len);
1835                 pattern_cmd->patterns[i].mask_size = mask_len;
1836                 pattern_cmd->patterns[i].pattern_size =
1837                         wowlan->patterns[i].pattern_len;
1838         }
1839
1840         cmd.data[0] = pattern_cmd;
1841         err = iwl_trans_send_cmd(trans(priv), &cmd);
1842         kfree(pattern_cmd);
1843         return err;
1844 }
1845 #endif
1846
1847 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
1848                                       struct ieee80211_vif *vif,
1849                                       struct cfg80211_gtk_rekey_data *data)
1850 {
1851         struct iwl_priv *priv = hw->priv;
1852
1853         if (iwlagn_mod_params.sw_crypto)
1854                 return;
1855
1856         IWL_DEBUG_MAC80211(priv, "enter\n");
1857         mutex_lock(&priv->shrd->mutex);
1858
1859         if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
1860                 goto out;
1861
1862         memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
1863         memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
1864         priv->replay_ctr = cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
1865         priv->have_rekey_data = true;
1866
1867  out:
1868         mutex_unlock(&priv->shrd->mutex);
1869         IWL_DEBUG_MAC80211(priv, "leave\n");
1870 }
1871
1872 struct wowlan_key_data {
1873         struct iwl_rxon_context *ctx;
1874         struct iwlagn_wowlan_rsc_tsc_params_cmd *rsc_tsc;
1875         struct iwlagn_wowlan_tkip_params_cmd *tkip;
1876         const u8 *bssid;
1877         bool error, use_rsc_tsc, use_tkip;
1878 };
1879
1880 #ifdef CONFIG_PM_SLEEP
1881 static void iwlagn_convert_p1k(u16 *p1k, __le16 *out)
1882 {
1883         int i;
1884
1885         for (i = 0; i < IWLAGN_P1K_SIZE; i++)
1886                 out[i] = cpu_to_le16(p1k[i]);
1887 }
1888
1889 static void iwlagn_wowlan_program_keys(struct ieee80211_hw *hw,
1890                                        struct ieee80211_vif *vif,
1891                                        struct ieee80211_sta *sta,
1892                                        struct ieee80211_key_conf *key,
1893                                        void *_data)
1894 {
1895         struct iwl_priv *priv = hw->priv;
1896         struct wowlan_key_data *data = _data;
1897         struct iwl_rxon_context *ctx = data->ctx;
1898         struct aes_sc *aes_sc, *aes_tx_sc = NULL;
1899         struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL;
1900         struct iwlagn_p1k_cache *rx_p1ks;
1901         u8 *rx_mic_key;
1902         struct ieee80211_key_seq seq;
1903         u32 cur_rx_iv32 = 0;
1904         u16 p1k[IWLAGN_P1K_SIZE];
1905         int ret, i;
1906
1907         mutex_lock(&priv->shrd->mutex);
1908
1909         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
1910              key->cipher == WLAN_CIPHER_SUITE_WEP104) &&
1911              !sta && !ctx->key_mapping_keys)
1912                 ret = iwl_set_default_wep_key(priv, ctx, key);
1913         else
1914                 ret = iwl_set_dynamic_key(priv, ctx, key, sta);
1915
1916         if (ret) {
1917                 IWL_ERR(priv, "Error setting key during suspend!\n");
1918                 data->error = true;
1919         }
1920
1921         switch (key->cipher) {
1922         case WLAN_CIPHER_SUITE_TKIP:
1923                 if (sta) {
1924                         tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.unicast_rsc;
1925                         tkip_tx_sc = &data->rsc_tsc->all_tsc_rsc.tkip.tsc;
1926
1927                         rx_p1ks = data->tkip->rx_uni;
1928
1929                         ieee80211_get_key_tx_seq(key, &seq);
1930                         tkip_tx_sc->iv16 = cpu_to_le16(seq.tkip.iv16);
1931                         tkip_tx_sc->iv32 = cpu_to_le32(seq.tkip.iv32);
1932
1933                         ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
1934                         iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
1935
1936                         memcpy(data->tkip->mic_keys.tx,
1937                                &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY],
1938                                IWLAGN_MIC_KEY_SIZE);
1939
1940                         rx_mic_key = data->tkip->mic_keys.rx_unicast;
1941                 } else {
1942                         tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.multicast_rsc;
1943                         rx_p1ks = data->tkip->rx_multi;
1944                         rx_mic_key = data->tkip->mic_keys.rx_mcast;
1945                 }
1946
1947                 /*
1948                  * For non-QoS this relies on the fact that both the uCode and
1949                  * mac80211 use TID 0 (as they need to to avoid replay attacks)
1950                  * for checking the IV in the frames.
1951                  */
1952                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
1953                         ieee80211_get_key_rx_seq(key, i, &seq);
1954                         tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16);
1955                         tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32);
1956                         /* wrapping isn't allowed, AP must rekey */
1957                         if (seq.tkip.iv32 > cur_rx_iv32)
1958                                 cur_rx_iv32 = seq.tkip.iv32;
1959                 }
1960
1961                 ieee80211_get_tkip_rx_p1k(key, data->bssid, cur_rx_iv32, p1k);
1962                 iwlagn_convert_p1k(p1k, rx_p1ks[0].p1k);
1963                 ieee80211_get_tkip_rx_p1k(key, data->bssid,
1964                                           cur_rx_iv32 + 1, p1k);
1965                 iwlagn_convert_p1k(p1k, rx_p1ks[1].p1k);
1966
1967                 memcpy(rx_mic_key,
1968                        &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY],
1969                        IWLAGN_MIC_KEY_SIZE);
1970
1971                 data->use_tkip = true;
1972                 data->use_rsc_tsc = true;
1973                 break;
1974         case WLAN_CIPHER_SUITE_CCMP:
1975                 if (sta) {
1976                         u8 *pn = seq.ccmp.pn;
1977
1978                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.unicast_rsc;
1979                         aes_tx_sc = &data->rsc_tsc->all_tsc_rsc.aes.tsc;
1980
1981                         ieee80211_get_key_tx_seq(key, &seq);
1982                         aes_tx_sc->pn = cpu_to_le64(
1983                                         (u64)pn[5] |
1984                                         ((u64)pn[4] << 8) |
1985                                         ((u64)pn[3] << 16) |
1986                                         ((u64)pn[2] << 24) |
1987                                         ((u64)pn[1] << 32) |
1988                                         ((u64)pn[0] << 40));
1989                 } else
1990                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.multicast_rsc;
1991
1992                 /*
1993                  * For non-QoS this relies on the fact that both the uCode and
1994                  * mac80211 use TID 0 for checking the IV in the frames.
1995                  */
1996                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
1997                         u8 *pn = seq.ccmp.pn;
1998
1999                         ieee80211_get_key_rx_seq(key, i, &seq);
2000                         aes_sc->pn = cpu_to_le64(
2001                                         (u64)pn[5] |
2002                                         ((u64)pn[4] << 8) |
2003                                         ((u64)pn[3] << 16) |
2004                                         ((u64)pn[2] << 24) |
2005                                         ((u64)pn[1] << 32) |
2006                                         ((u64)pn[0] << 40));
2007                 }
2008                 data->use_rsc_tsc = true;
2009                 break;
2010         }
2011
2012         mutex_unlock(&priv->shrd->mutex);
2013 }
2014
2015 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
2016                               struct cfg80211_wowlan *wowlan)
2017 {
2018         struct iwl_priv *priv = hw->priv;
2019         struct iwlagn_wowlan_wakeup_filter_cmd wakeup_filter_cmd;
2020         struct iwl_rxon_cmd rxon;
2021         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2022         struct iwlagn_wowlan_kek_kck_material_cmd kek_kck_cmd;
2023         struct iwlagn_wowlan_tkip_params_cmd tkip_cmd = {};
2024         struct wowlan_key_data key_data = {
2025                 .ctx = ctx,
2026                 .bssid = ctx->active.bssid_addr,
2027                 .use_rsc_tsc = false,
2028                 .tkip = &tkip_cmd,
2029                 .use_tkip = false,
2030         };
2031         struct iwlagn_d3_config_cmd d3_cfg_cmd = {};
2032         int ret, i;
2033         u16 seq;
2034
2035         if (WARN_ON(!wowlan))
2036                 return -EINVAL;
2037
2038         IWL_DEBUG_MAC80211(priv, "enter\n");
2039         mutex_lock(&priv->shrd->mutex);
2040
2041         /* Don't attempt WoWLAN when not associated, tear down instead. */
2042         if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
2043             !iwl_is_associated_ctx(ctx)) {
2044                 ret = 1;
2045                 goto out;
2046         }
2047
2048         key_data.rsc_tsc = kzalloc(sizeof(*key_data.rsc_tsc), GFP_KERNEL);
2049         if (!key_data.rsc_tsc) {
2050                 ret = -ENOMEM;
2051                 goto out;
2052         }
2053
2054         memset(&wakeup_filter_cmd, 0, sizeof(wakeup_filter_cmd));
2055
2056         /*
2057          * We know the last used seqno, and the uCode expects to know that
2058          * one, it will increment before TX.
2059          */
2060         seq = le16_to_cpu(priv->last_seq_ctl) & IEEE80211_SCTL_SEQ;
2061         wakeup_filter_cmd.non_qos_seq = cpu_to_le16(seq);
2062
2063         /*
2064          * For QoS counters, we store the one to use next, so subtract 0x10
2065          * since the uCode will add 0x10 before using the value.
2066          */
2067         for (i = 0; i < 8; i++) {
2068                 seq = priv->shrd->tid_data[IWL_AP_ID][i].seq_number;
2069                 seq -= 0x10;
2070                 wakeup_filter_cmd.qos_seq[i] = cpu_to_le16(seq);
2071         }
2072
2073         if (wowlan->disconnect)
2074                 wakeup_filter_cmd.enabled |=
2075                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
2076                                     IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE);
2077         if (wowlan->magic_pkt)
2078                 wakeup_filter_cmd.enabled |=
2079                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET);
2080         if (wowlan->gtk_rekey_failure)
2081                 wakeup_filter_cmd.enabled |=
2082                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL);
2083         if (wowlan->eap_identity_req)
2084                 wakeup_filter_cmd.enabled |=
2085                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ);
2086         if (wowlan->four_way_handshake)
2087                 wakeup_filter_cmd.enabled |=
2088                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE);
2089         if (wowlan->n_patterns)
2090                 wakeup_filter_cmd.enabled |=
2091                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH);
2092
2093         if (wowlan->rfkill_release)
2094                 d3_cfg_cmd.wakeup_flags |=
2095                         cpu_to_le32(IWLAGN_D3_WAKEUP_RFKILL);
2096
2097         iwl_scan_cancel_timeout(priv, 200);
2098
2099         memcpy(&rxon, &ctx->active, sizeof(rxon));
2100
2101         iwl_trans_stop_device(trans(priv));
2102
2103         priv->shrd->wowlan = true;
2104
2105         ret = iwlagn_load_ucode_wait_alive(priv, &priv->ucode_wowlan,
2106                                            IWL_UCODE_WOWLAN);
2107         if (ret)
2108                 goto error;
2109
2110         /* now configure WoWLAN ucode */
2111         ret = iwl_alive_start(priv);
2112         if (ret)
2113                 goto error;
2114
2115         memcpy(&ctx->staging, &rxon, sizeof(rxon));
2116         ret = iwlagn_commit_rxon(priv, ctx);
2117         if (ret)
2118                 goto error;
2119
2120         ret = iwl_power_update_mode(priv, true);
2121         if (ret)
2122                 goto error;
2123
2124         if (!iwlagn_mod_params.sw_crypto) {
2125                 /* mark all keys clear */
2126                 priv->ucode_key_table = 0;
2127                 ctx->key_mapping_keys = 0;
2128
2129                 /*
2130                  * This needs to be unlocked due to lock ordering
2131                  * constraints. Since we're in the suspend path
2132                  * that isn't really a problem though.
2133                  */
2134                 mutex_unlock(&priv->shrd->mutex);
2135                 ieee80211_iter_keys(priv->hw, ctx->vif,
2136                                     iwlagn_wowlan_program_keys,
2137                                     &key_data);
2138                 mutex_lock(&priv->shrd->mutex);
2139                 if (key_data.error) {
2140                         ret = -EIO;
2141                         goto error;
2142                 }
2143
2144                 if (key_data.use_rsc_tsc) {
2145                         struct iwl_host_cmd rsc_tsc_cmd = {
2146                                 .id = REPLY_WOWLAN_TSC_RSC_PARAMS,
2147                                 .flags = CMD_SYNC,
2148                                 .data[0] = key_data.rsc_tsc,
2149                                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
2150                                 .len[0] = sizeof(*key_data.rsc_tsc),
2151                         };
2152
2153                         ret = iwl_trans_send_cmd(trans(priv), &rsc_tsc_cmd);
2154                         if (ret)
2155                                 goto error;
2156                 }
2157
2158                 if (key_data.use_tkip) {
2159                         ret = iwl_trans_send_cmd_pdu(trans(priv),
2160                                                  REPLY_WOWLAN_TKIP_PARAMS,
2161                                                  CMD_SYNC, sizeof(tkip_cmd),
2162                                                  &tkip_cmd);
2163                         if (ret)
2164                                 goto error;
2165                 }
2166
2167                 if (priv->have_rekey_data) {
2168                         memset(&kek_kck_cmd, 0, sizeof(kek_kck_cmd));
2169                         memcpy(kek_kck_cmd.kck, priv->kck, NL80211_KCK_LEN);
2170                         kek_kck_cmd.kck_len = cpu_to_le16(NL80211_KCK_LEN);
2171                         memcpy(kek_kck_cmd.kek, priv->kek, NL80211_KEK_LEN);
2172                         kek_kck_cmd.kek_len = cpu_to_le16(NL80211_KEK_LEN);
2173                         kek_kck_cmd.replay_ctr = priv->replay_ctr;
2174
2175                         ret = iwl_trans_send_cmd_pdu(trans(priv),
2176                                                  REPLY_WOWLAN_KEK_KCK_MATERIAL,
2177                                                  CMD_SYNC, sizeof(kek_kck_cmd),
2178                                                  &kek_kck_cmd);
2179                         if (ret)
2180                                 goto error;
2181                 }
2182         }
2183
2184         ret = iwl_trans_send_cmd_pdu(trans(priv), REPLY_D3_CONFIG, CMD_SYNC,
2185                                      sizeof(d3_cfg_cmd), &d3_cfg_cmd);
2186         if (ret)
2187                 goto error;
2188
2189         ret = iwl_trans_send_cmd_pdu(trans(priv), REPLY_WOWLAN_WAKEUP_FILTER,
2190                                  CMD_SYNC, sizeof(wakeup_filter_cmd),
2191                                  &wakeup_filter_cmd);
2192         if (ret)
2193                 goto error;
2194
2195         ret = iwlagn_send_patterns(priv, wowlan);
2196         if (ret)
2197                 goto error;
2198
2199         device_set_wakeup_enable(bus(priv)->dev, true);
2200
2201         /* Now let the ucode operate on its own */
2202         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_SET,
2203                           CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
2204
2205         goto out;
2206
2207  error:
2208         priv->shrd->wowlan = false;
2209         iwlagn_prepare_restart(priv);
2210         ieee80211_restart_hw(priv->hw);
2211  out:
2212         mutex_unlock(&priv->shrd->mutex);
2213         kfree(key_data.rsc_tsc);
2214         IWL_DEBUG_MAC80211(priv, "leave\n");
2215
2216         return ret;
2217 }
2218
2219 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
2220 {
2221         struct iwl_priv *priv = hw->priv;
2222         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2223         struct ieee80211_vif *vif;
2224         unsigned long flags;
2225         u32 base, status = 0xffffffff;
2226         int ret = -EIO;
2227
2228         IWL_DEBUG_MAC80211(priv, "enter\n");
2229         mutex_lock(&priv->shrd->mutex);
2230
2231         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_CLR,
2232                           CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
2233
2234         base = priv->device_pointers.error_event_table;
2235         if (iwlagn_hw_valid_rtc_data_addr(base)) {
2236                 spin_lock_irqsave(&bus(priv)->reg_lock, flags);
2237                 ret = iwl_grab_nic_access_silent(bus(priv));
2238                 if (ret == 0) {
2239                         iwl_write32(bus(priv), HBUS_TARG_MEM_RADDR, base);
2240                         status = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
2241                         iwl_release_nic_access(bus(priv));
2242                 }
2243                 spin_unlock_irqrestore(&bus(priv)->reg_lock, flags);
2244
2245 #ifdef CONFIG_IWLWIFI_DEBUGFS
2246                 if (ret == 0) {
2247                         if (!priv->wowlan_sram)
2248                                 priv->wowlan_sram =
2249                                         kzalloc(priv->ucode_wowlan.data.len,
2250                                                 GFP_KERNEL);
2251
2252                         if (priv->wowlan_sram)
2253                                 _iwl_read_targ_mem_words(
2254                                         bus(priv), 0x800000, priv->wowlan_sram,
2255                                         priv->ucode_wowlan.data.len / 4);
2256                 }
2257 #endif
2258         }
2259
2260         /* we'll clear ctx->vif during iwlagn_prepare_restart() */
2261         vif = ctx->vif;
2262
2263         priv->shrd->wowlan = false;
2264
2265         device_set_wakeup_enable(bus(priv)->dev, false);
2266
2267         iwlagn_prepare_restart(priv);
2268
2269         memset((void *)&ctx->active, 0, sizeof(ctx->active));
2270         iwl_connection_init_rx_config(priv, ctx);
2271         iwlagn_set_rxon_chain(priv, ctx);
2272
2273         mutex_unlock(&priv->shrd->mutex);
2274         IWL_DEBUG_MAC80211(priv, "leave\n");
2275
2276         ieee80211_resume_disconnect(vif);
2277
2278         return 1;
2279 }
2280 #endif
2281
2282 static void iwlagn_mac_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
2283 {
2284         struct iwl_priv *priv = hw->priv;
2285
2286         IWL_DEBUG_MACDUMP(priv, "enter\n");
2287
2288         IWL_DEBUG_TX(priv, "dev->xmit(%d bytes) at rate 0x%02x\n", skb->len,
2289                      ieee80211_get_tx_rate(hw, IEEE80211_SKB_CB(skb))->bitrate);
2290
2291         if (iwlagn_tx_skb(priv, skb))
2292                 dev_kfree_skb_any(skb);
2293
2294         IWL_DEBUG_MACDUMP(priv, "leave\n");
2295 }
2296
2297 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
2298                                        struct ieee80211_vif *vif,
2299                                        struct ieee80211_key_conf *keyconf,
2300                                        struct ieee80211_sta *sta,
2301                                        u32 iv32, u16 *phase1key)
2302 {
2303         struct iwl_priv *priv = hw->priv;
2304
2305         iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
2306 }
2307
2308 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
2309                               struct ieee80211_vif *vif,
2310                               struct ieee80211_sta *sta,
2311                               struct ieee80211_key_conf *key)
2312 {
2313         struct iwl_priv *priv = hw->priv;
2314         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2315         struct iwl_rxon_context *ctx = vif_priv->ctx;
2316         int ret;
2317         bool is_default_wep_key = false;
2318
2319         IWL_DEBUG_MAC80211(priv, "enter\n");
2320
2321         if (iwlagn_mod_params.sw_crypto) {
2322                 IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
2323                 return -EOPNOTSUPP;
2324         }
2325
2326         /*
2327          * We could program these keys into the hardware as well, but we
2328          * don't expect much multicast traffic in IBSS and having keys
2329          * for more stations is probably more useful.
2330          *
2331          * Mark key TX-only and return 0.
2332          */
2333         if (vif->type == NL80211_IFTYPE_ADHOC &&
2334             !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
2335                 key->hw_key_idx = WEP_INVALID_OFFSET;
2336                 return 0;
2337         }
2338
2339         /* If they key was TX-only, accept deletion */
2340         if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
2341                 return 0;
2342
2343         mutex_lock(&priv->shrd->mutex);
2344         iwl_scan_cancel_timeout(priv, 100);
2345
2346         BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
2347
2348         /*
2349          * If we are getting WEP group key and we didn't receive any key mapping
2350          * so far, we are in legacy wep mode (group key only), otherwise we are
2351          * in 1X mode.
2352          * In legacy wep mode, we use another host command to the uCode.
2353          */
2354         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
2355              key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
2356                 if (cmd == SET_KEY)
2357                         is_default_wep_key = !ctx->key_mapping_keys;
2358                 else
2359                         is_default_wep_key =
2360                                 key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
2361         }
2362
2363
2364         switch (cmd) {
2365         case SET_KEY:
2366                 if (is_default_wep_key) {
2367                         ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
2368                         break;
2369                 }
2370                 ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
2371                 if (ret) {
2372                         /*
2373                          * can't add key for RX, but we don't need it
2374                          * in the device for TX so still return 0
2375                          */
2376                         ret = 0;
2377                         key->hw_key_idx = WEP_INVALID_OFFSET;
2378                 }
2379
2380                 IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
2381                 break;
2382         case DISABLE_KEY:
2383                 if (is_default_wep_key)
2384                         ret = iwl_remove_default_wep_key(priv, ctx, key);
2385                 else
2386                         ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
2387
2388                 IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
2389                 break;
2390         default:
2391                 ret = -EINVAL;
2392         }
2393
2394         mutex_unlock(&priv->shrd->mutex);
2395         IWL_DEBUG_MAC80211(priv, "leave\n");
2396
2397         return ret;
2398 }
2399
2400 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
2401                                    struct ieee80211_vif *vif,
2402                                    enum ieee80211_ampdu_mlme_action action,
2403                                    struct ieee80211_sta *sta, u16 tid, u16 *ssn,
2404                                    u8 buf_size)
2405 {
2406         struct iwl_priv *priv = hw->priv;
2407         int ret = -EINVAL;
2408         struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
2409         struct iwl_rxon_context *ctx =  iwl_rxon_ctx_from_vif(vif);
2410
2411         IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
2412                      sta->addr, tid);
2413
2414         if (!(priv->cfg->sku & EEPROM_SKU_CAP_11N_ENABLE))
2415                 return -EACCES;
2416
2417         IWL_DEBUG_MAC80211(priv, "enter\n");
2418         mutex_lock(&priv->shrd->mutex);
2419
2420         switch (action) {
2421         case IEEE80211_AMPDU_RX_START:
2422                 IWL_DEBUG_HT(priv, "start Rx\n");
2423                 ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
2424                 break;
2425         case IEEE80211_AMPDU_RX_STOP:
2426                 IWL_DEBUG_HT(priv, "stop Rx\n");
2427                 ret = iwl_sta_rx_agg_stop(priv, sta, tid);
2428                 if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
2429                         ret = 0;
2430                 break;
2431         case IEEE80211_AMPDU_TX_START:
2432                 IWL_DEBUG_HT(priv, "start Tx\n");
2433                 ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
2434                 break;
2435         case IEEE80211_AMPDU_TX_STOP:
2436                 IWL_DEBUG_HT(priv, "stop Tx\n");
2437                 ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
2438                 if ((ret == 0) && (priv->agg_tids_count > 0)) {
2439                         priv->agg_tids_count--;
2440                         IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
2441                                      priv->agg_tids_count);
2442                 }
2443                 if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
2444                         ret = 0;
2445                 if (!priv->agg_tids_count && priv->cfg->ht_params &&
2446                     priv->cfg->ht_params->use_rts_for_aggregation) {
2447                         /*
2448                          * switch off RTS/CTS if it was previously enabled
2449                          */
2450                         sta_priv->lq_sta.lq.general_params.flags &=
2451                                 ~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
2452                         iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
2453                                         &sta_priv->lq_sta.lq, CMD_ASYNC, false);
2454                 }
2455                 break;
2456         case IEEE80211_AMPDU_TX_OPERATIONAL:
2457                 buf_size = min_t(int, buf_size, LINK_QUAL_AGG_FRAME_LIMIT_DEF);
2458
2459                 iwl_trans_tx_agg_setup(trans(priv), ctx->ctxid, iwl_sta_id(sta),
2460                                 tid, buf_size);
2461
2462                 /*
2463                  * If the limit is 0, then it wasn't initialised yet,
2464                  * use the default. We can do that since we take the
2465                  * minimum below, and we don't want to go above our
2466                  * default due to hardware restrictions.
2467                  */
2468                 if (sta_priv->max_agg_bufsize == 0)
2469                         sta_priv->max_agg_bufsize =
2470                                 LINK_QUAL_AGG_FRAME_LIMIT_DEF;
2471
2472                 /*
2473                  * Even though in theory the peer could have different
2474                  * aggregation reorder buffer sizes for different sessions,
2475                  * our ucode doesn't allow for that and has a global limit
2476                  * for each station. Therefore, use the minimum of all the
2477                  * aggregation sessions and our default value.
2478                  */
2479                 sta_priv->max_agg_bufsize =
2480                         min(sta_priv->max_agg_bufsize, buf_size);
2481
2482                 if (priv->cfg->ht_params &&
2483                     priv->cfg->ht_params->use_rts_for_aggregation) {
2484                         /*
2485                          * switch to RTS/CTS if it is the prefer protection
2486                          * method for HT traffic
2487                          */
2488
2489                         sta_priv->lq_sta.lq.general_params.flags |=
2490                                 LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
2491                 }
2492                 priv->agg_tids_count++;
2493                 IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
2494                              priv->agg_tids_count);
2495
2496                 sta_priv->lq_sta.lq.agg_params.agg_frame_cnt_limit =
2497                         sta_priv->max_agg_bufsize;
2498
2499                 iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
2500                                 &sta_priv->lq_sta.lq, CMD_ASYNC, false);
2501
2502                 IWL_INFO(priv, "Tx aggregation enabled on ra = %pM tid = %d\n",
2503                          sta->addr, tid);
2504                 ret = 0;
2505                 break;
2506         }
2507         mutex_unlock(&priv->shrd->mutex);
2508         IWL_DEBUG_MAC80211(priv, "leave\n");
2509         return ret;
2510 }
2511
2512 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
2513                               struct ieee80211_vif *vif,
2514                               struct ieee80211_sta *sta)
2515 {
2516         struct iwl_priv *priv = hw->priv;
2517         struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
2518         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2519         bool is_ap = vif->type == NL80211_IFTYPE_STATION;
2520         int ret = 0;
2521         u8 sta_id;
2522
2523         IWL_DEBUG_MAC80211(priv, "received request to add station %pM\n",
2524                         sta->addr);
2525         mutex_lock(&priv->shrd->mutex);
2526         IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
2527                         sta->addr);
2528         sta_priv->sta_id = IWL_INVALID_STATION;
2529
2530         atomic_set(&sta_priv->pending_frames, 0);
2531         if (vif->type == NL80211_IFTYPE_AP)
2532                 sta_priv->client = true;
2533
2534         ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
2535                                      is_ap, sta, &sta_id);
2536         if (ret) {
2537                 IWL_ERR(priv, "Unable to add station %pM (%d)\n",
2538                         sta->addr, ret);
2539                 /* Should we return success if return code is EEXIST ? */
2540                 goto out;
2541         }
2542
2543         sta_priv->sta_id = sta_id;
2544
2545         /* Initialize rate scaling */
2546         IWL_DEBUG_INFO(priv, "Initializing rate scaling for station %pM\n",
2547                        sta->addr);
2548         iwl_rs_rate_init(priv, sta, sta_id);
2549  out:
2550         mutex_unlock(&priv->shrd->mutex);
2551         IWL_DEBUG_MAC80211(priv, "leave\n");
2552
2553         return ret;
2554 }
2555
2556 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
2557                                 struct ieee80211_channel_switch *ch_switch)
2558 {
2559         struct iwl_priv *priv = hw->priv;
2560         const struct iwl_channel_info *ch_info;
2561         struct ieee80211_conf *conf = &hw->conf;
2562         struct ieee80211_channel *channel = ch_switch->channel;
2563         struct iwl_ht_config *ht_conf = &priv->current_ht_config;
2564         /*
2565          * MULTI-FIXME
2566          * When we add support for multiple interfaces, we need to
2567          * revisit this. The channel switch command in the device
2568          * only affects the BSS context, but what does that really
2569          * mean? And what if we get a CSA on the second interface?
2570          * This needs a lot of work.
2571          */
2572         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2573         u16 ch;
2574
2575         IWL_DEBUG_MAC80211(priv, "enter\n");
2576
2577         mutex_lock(&priv->shrd->mutex);
2578
2579         if (iwl_is_rfkill(priv->shrd))
2580                 goto out;
2581
2582         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) ||
2583             test_bit(STATUS_SCANNING, &priv->shrd->status) ||
2584             test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status))
2585                 goto out;
2586
2587         if (!iwl_is_associated_ctx(ctx))
2588                 goto out;
2589
2590         if (!priv->cfg->lib->set_channel_switch)
2591                 goto out;
2592
2593         ch = channel->hw_value;
2594         if (le16_to_cpu(ctx->active.channel) == ch)
2595                 goto out;
2596
2597         ch_info = iwl_get_channel_info(priv, channel->band, ch);
2598         if (!is_channel_valid(ch_info)) {
2599                 IWL_DEBUG_MAC80211(priv, "invalid channel\n");
2600                 goto out;
2601         }
2602
2603         spin_lock_irq(&priv->shrd->lock);
2604
2605         priv->current_ht_config.smps = conf->smps_mode;
2606
2607         /* Configure HT40 channels */
2608         ctx->ht.enabled = conf_is_ht(conf);
2609         if (ctx->ht.enabled) {
2610                 if (conf_is_ht40_minus(conf)) {
2611                         ctx->ht.extension_chan_offset =
2612                                 IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2613                         ctx->ht.is_40mhz = true;
2614                 } else if (conf_is_ht40_plus(conf)) {
2615                         ctx->ht.extension_chan_offset =
2616                                 IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2617                         ctx->ht.is_40mhz = true;
2618                 } else {
2619                         ctx->ht.extension_chan_offset =
2620                                 IEEE80211_HT_PARAM_CHA_SEC_NONE;
2621                         ctx->ht.is_40mhz = false;
2622                 }
2623         } else
2624                 ctx->ht.is_40mhz = false;
2625
2626         if ((le16_to_cpu(ctx->staging.channel) != ch))
2627                 ctx->staging.flags = 0;
2628
2629         iwl_set_rxon_channel(priv, channel, ctx);
2630         iwl_set_rxon_ht(priv, ht_conf);
2631         iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
2632
2633         spin_unlock_irq(&priv->shrd->lock);
2634
2635         iwl_set_rate(priv);
2636         /*
2637          * at this point, staging_rxon has the
2638          * configuration for channel switch
2639          */
2640         set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status);
2641         priv->switch_channel = cpu_to_le16(ch);
2642         if (priv->cfg->lib->set_channel_switch(priv, ch_switch)) {
2643                 clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status);
2644                 priv->switch_channel = 0;
2645                 ieee80211_chswitch_done(ctx->vif, false);
2646         }
2647
2648 out:
2649         mutex_unlock(&priv->shrd->mutex);
2650         IWL_DEBUG_MAC80211(priv, "leave\n");
2651 }
2652
2653 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
2654                                     unsigned int changed_flags,
2655                                     unsigned int *total_flags,
2656                                     u64 multicast)
2657 {
2658         struct iwl_priv *priv = hw->priv;
2659         __le32 filter_or = 0, filter_nand = 0;
2660         struct iwl_rxon_context *ctx;
2661
2662 #define CHK(test, flag) do { \
2663         if (*total_flags & (test))              \
2664                 filter_or |= (flag);            \
2665         else                                    \
2666                 filter_nand |= (flag);          \
2667         } while (0)
2668
2669         IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
2670                         changed_flags, *total_flags);
2671
2672         CHK(FIF_OTHER_BSS | FIF_PROMISC_IN_BSS, RXON_FILTER_PROMISC_MSK);
2673         /* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
2674         CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
2675         CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
2676
2677 #undef CHK
2678
2679         mutex_lock(&priv->shrd->mutex);
2680
2681         for_each_context(priv, ctx) {
2682                 ctx->staging.filter_flags &= ~filter_nand;
2683                 ctx->staging.filter_flags |= filter_or;
2684
2685                 /*
2686                  * Not committing directly because hardware can perform a scan,
2687                  * but we'll eventually commit the filter flags change anyway.
2688                  */
2689         }
2690
2691         mutex_unlock(&priv->shrd->mutex);
2692
2693         /*
2694          * Receiving all multicast frames is always enabled by the
2695          * default flags setup in iwl_connection_init_rx_config()
2696          * since we currently do not support programming multicast
2697          * filters into the device.
2698          */
2699         *total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI | FIF_PROMISC_IN_BSS |
2700                         FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
2701 }
2702
2703 static void iwlagn_mac_flush(struct ieee80211_hw *hw, bool drop)
2704 {
2705         struct iwl_priv *priv = hw->priv;
2706
2707         mutex_lock(&priv->shrd->mutex);
2708         IWL_DEBUG_MAC80211(priv, "enter\n");
2709
2710         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status)) {
2711                 IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
2712                 goto done;
2713         }
2714         if (iwl_is_rfkill(priv->shrd)) {
2715                 IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
2716                 goto done;
2717         }
2718
2719         /*
2720          * mac80211 will not push any more frames for transmit
2721          * until the flush is completed
2722          */
2723         if (drop) {
2724                 IWL_DEBUG_MAC80211(priv, "send flush command\n");
2725                 if (iwlagn_txfifo_flush(priv, IWL_DROP_ALL)) {
2726                         IWL_ERR(priv, "flush request fail\n");
2727                         goto done;
2728                 }
2729         }
2730         IWL_DEBUG_MAC80211(priv, "wait transmit/flush all frames\n");
2731         iwl_trans_wait_tx_queue_empty(trans(priv));
2732 done:
2733         mutex_unlock(&priv->shrd->mutex);
2734         IWL_DEBUG_MAC80211(priv, "leave\n");
2735 }
2736
2737 void iwlagn_disable_roc(struct iwl_priv *priv)
2738 {
2739         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_PAN];
2740
2741         lockdep_assert_held(&priv->shrd->mutex);
2742
2743         if (!priv->hw_roc_setup)
2744                 return;
2745
2746         ctx->staging.dev_type = RXON_DEV_TYPE_P2P;
2747         ctx->staging.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
2748
2749         priv->hw_roc_channel = NULL;
2750
2751         memset(ctx->staging.node_addr, 0, ETH_ALEN);
2752
2753         iwlagn_commit_rxon(priv, ctx);
2754
2755         ctx->is_active = false;
2756         priv->hw_roc_setup = false;
2757 }
2758
2759 static void iwlagn_disable_roc_work(struct work_struct *work)
2760 {
2761         struct iwl_priv *priv = container_of(work, struct iwl_priv,
2762                                              hw_roc_disable_work.work);
2763
2764         mutex_lock(&priv->shrd->mutex);
2765         iwlagn_disable_roc(priv);
2766         mutex_unlock(&priv->shrd->mutex);
2767 }
2768
2769 static int iwlagn_mac_remain_on_channel(struct ieee80211_hw *hw,
2770                                      struct ieee80211_channel *channel,
2771                                      enum nl80211_channel_type channel_type,
2772                                      int duration)
2773 {
2774         struct iwl_priv *priv = hw->priv;
2775         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_PAN];
2776         int err = 0;
2777
2778         if (!(priv->shrd->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
2779                 return -EOPNOTSUPP;
2780
2781         if (!(ctx->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)))
2782                 return -EOPNOTSUPP;
2783
2784         IWL_DEBUG_MAC80211(priv, "enter\n");
2785         mutex_lock(&priv->shrd->mutex);
2786
2787         if (test_bit(STATUS_SCAN_HW, &priv->shrd->status)) {
2788                 err = -EBUSY;
2789                 goto out;
2790         }
2791
2792         priv->hw_roc_channel = channel;
2793         priv->hw_roc_chantype = channel_type;
2794         priv->hw_roc_duration = duration;
2795         priv->hw_roc_start_notified = false;
2796         cancel_delayed_work(&priv->hw_roc_disable_work);
2797
2798         if (!ctx->is_active) {
2799                 ctx->is_active = true;
2800                 ctx->staging.dev_type = RXON_DEV_TYPE_P2P;
2801                 memcpy(ctx->staging.node_addr,
2802                        priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
2803                        ETH_ALEN);
2804                 memcpy(ctx->staging.bssid_addr,
2805                        priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
2806                        ETH_ALEN);
2807                 err = iwlagn_commit_rxon(priv, ctx);
2808                 if (err)
2809                         goto out;
2810                 ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK |
2811                                              RXON_FILTER_PROMISC_MSK |
2812                                              RXON_FILTER_CTL2HOST_MSK;
2813
2814                 err = iwlagn_commit_rxon(priv, ctx);
2815                 if (err) {
2816                         iwlagn_disable_roc(priv);
2817                         goto out;
2818                 }
2819                 priv->hw_roc_setup = true;
2820         }
2821
2822         err = iwl_scan_initiate(priv, ctx->vif, IWL_SCAN_ROC, channel->band);
2823         if (err)
2824                 iwlagn_disable_roc(priv);
2825
2826  out:
2827         mutex_unlock(&priv->shrd->mutex);
2828         IWL_DEBUG_MAC80211(priv, "leave\n");
2829
2830         return err;
2831 }
2832
2833 static int iwlagn_mac_cancel_remain_on_channel(struct ieee80211_hw *hw)
2834 {
2835         struct iwl_priv *priv = hw->priv;
2836
2837         if (!(priv->shrd->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
2838                 return -EOPNOTSUPP;
2839
2840         IWL_DEBUG_MAC80211(priv, "enter\n");
2841         mutex_lock(&priv->shrd->mutex);
2842         iwl_scan_cancel_timeout(priv, priv->hw_roc_duration);
2843         iwlagn_disable_roc(priv);
2844         mutex_unlock(&priv->shrd->mutex);
2845         IWL_DEBUG_MAC80211(priv, "leave\n");
2846
2847         return 0;
2848 }
2849
2850 static int iwlagn_mac_tx_sync(struct ieee80211_hw *hw,
2851                               struct ieee80211_vif *vif,
2852                               const u8 *bssid,
2853                               enum ieee80211_tx_sync_type type)
2854 {
2855         struct iwl_priv *priv = hw->priv;
2856         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2857         struct iwl_rxon_context *ctx = vif_priv->ctx;
2858         int ret;
2859         u8 sta_id;
2860
2861         IWL_DEBUG_MAC80211(priv, "enter\n");
2862         mutex_lock(&priv->shrd->mutex);
2863
2864         if (iwl_is_associated_ctx(ctx)) {
2865                 ret = 0;
2866                 goto out;
2867         }
2868
2869         if (ctx->preauth_bssid || test_bit(STATUS_SCAN_HW, &priv->shrd->status)) {
2870                 ret = -EBUSY;
2871                 goto out;
2872         }
2873
2874         ret = iwl_add_station_common(priv, ctx, bssid, true, NULL, &sta_id);
2875         if (ret)
2876                 goto out;
2877
2878         if (WARN_ON(sta_id != ctx->ap_sta_id)) {
2879                 ret = -EIO;
2880                 goto out_remove_sta;
2881         }
2882
2883         memcpy(ctx->bssid, bssid, ETH_ALEN);
2884         ctx->preauth_bssid = true;
2885
2886         ret = iwlagn_commit_rxon(priv, ctx);
2887
2888         if (ret == 0)
2889                 goto out;
2890
2891  out_remove_sta:
2892         iwl_remove_station(priv, sta_id, bssid);
2893  out:
2894         mutex_unlock(&priv->shrd->mutex);
2895         IWL_DEBUG_MAC80211(priv, "leave\n");
2896
2897         return ret;
2898 }
2899
2900 static void iwlagn_mac_finish_tx_sync(struct ieee80211_hw *hw,
2901                                    struct ieee80211_vif *vif,
2902                                    const u8 *bssid,
2903                                    enum ieee80211_tx_sync_type type)
2904 {
2905         struct iwl_priv *priv = hw->priv;
2906         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2907         struct iwl_rxon_context *ctx = vif_priv->ctx;
2908
2909         IWL_DEBUG_MAC80211(priv, "enter\n");
2910         mutex_lock(&priv->shrd->mutex);
2911
2912         if (iwl_is_associated_ctx(ctx))
2913                 goto out;
2914
2915         iwl_remove_station(priv, ctx->ap_sta_id, bssid);
2916         ctx->preauth_bssid = false;
2917         /* no need to commit */
2918  out:
2919         mutex_unlock(&priv->shrd->mutex);
2920         IWL_DEBUG_MAC80211(priv, "leave\n");
2921 }
2922
2923 /*****************************************************************************
2924  *
2925  * driver setup and teardown
2926  *
2927  *****************************************************************************/
2928
2929 static void iwl_setup_deferred_work(struct iwl_priv *priv)
2930 {
2931         priv->shrd->workqueue = create_singlethread_workqueue(DRV_NAME);
2932
2933         init_waitqueue_head(&priv->shrd->wait_command_queue);
2934
2935         INIT_WORK(&priv->restart, iwl_bg_restart);
2936         INIT_WORK(&priv->beacon_update, iwl_bg_beacon_update);
2937         INIT_WORK(&priv->run_time_calib_work, iwl_bg_run_time_calib_work);
2938         INIT_WORK(&priv->tx_flush, iwl_bg_tx_flush);
2939         INIT_WORK(&priv->bt_full_concurrency, iwl_bg_bt_full_concurrency);
2940         INIT_WORK(&priv->bt_runtime_config, iwl_bg_bt_runtime_config);
2941         INIT_DELAYED_WORK(&priv->hw_roc_disable_work,
2942                           iwlagn_disable_roc_work);
2943
2944         iwl_setup_scan_deferred_work(priv);
2945
2946         if (priv->cfg->lib->bt_setup_deferred_work)
2947                 priv->cfg->lib->bt_setup_deferred_work(priv);
2948
2949         init_timer(&priv->statistics_periodic);
2950         priv->statistics_periodic.data = (unsigned long)priv;
2951         priv->statistics_periodic.function = iwl_bg_statistics_periodic;
2952
2953         init_timer(&priv->ucode_trace);
2954         priv->ucode_trace.data = (unsigned long)priv;
2955         priv->ucode_trace.function = iwl_bg_ucode_trace;
2956
2957         init_timer(&priv->watchdog);
2958         priv->watchdog.data = (unsigned long)priv;
2959         priv->watchdog.function = iwl_bg_watchdog;
2960 }
2961
2962 static void iwl_cancel_deferred_work(struct iwl_priv *priv)
2963 {
2964         if (priv->cfg->lib->cancel_deferred_work)
2965                 priv->cfg->lib->cancel_deferred_work(priv);
2966
2967         cancel_work_sync(&priv->run_time_calib_work);
2968         cancel_work_sync(&priv->beacon_update);
2969
2970         iwl_cancel_scan_deferred_work(priv);
2971
2972         cancel_work_sync(&priv->bt_full_concurrency);
2973         cancel_work_sync(&priv->bt_runtime_config);
2974         cancel_delayed_work_sync(&priv->hw_roc_disable_work);
2975
2976         del_timer_sync(&priv->statistics_periodic);
2977         del_timer_sync(&priv->ucode_trace);
2978 }
2979
2980 static void iwl_init_hw_rates(struct iwl_priv *priv,
2981                               struct ieee80211_rate *rates)
2982 {
2983         int i;
2984
2985         for (i = 0; i < IWL_RATE_COUNT_LEGACY; i++) {
2986                 rates[i].bitrate = iwl_rates[i].ieee * 5;
2987                 rates[i].hw_value = i; /* Rate scaling will work on indexes */
2988                 rates[i].hw_value_short = i;
2989                 rates[i].flags = 0;
2990                 if ((i >= IWL_FIRST_CCK_RATE) && (i <= IWL_LAST_CCK_RATE)) {
2991                         /*
2992                          * If CCK != 1M then set short preamble rate flag.
2993                          */
2994                         rates[i].flags |=
2995                                 (iwl_rates[i].plcp == IWL_RATE_1M_PLCP) ?
2996                                         0 : IEEE80211_RATE_SHORT_PREAMBLE;
2997                 }
2998         }
2999 }
3000
3001 static int iwl_init_drv(struct iwl_priv *priv)
3002 {
3003         int ret;
3004
3005         spin_lock_init(&priv->shrd->sta_lock);
3006
3007         mutex_init(&priv->shrd->mutex);
3008
3009         priv->ieee_channels = NULL;
3010         priv->ieee_rates = NULL;
3011         priv->band = IEEE80211_BAND_2GHZ;
3012
3013         priv->iw_mode = NL80211_IFTYPE_STATION;
3014         priv->current_ht_config.smps = IEEE80211_SMPS_STATIC;
3015         priv->missed_beacon_threshold = IWL_MISSED_BEACON_THRESHOLD_DEF;
3016         priv->agg_tids_count = 0;
3017
3018         /* initialize force reset */
3019         priv->force_reset[IWL_RF_RESET].reset_duration =
3020                 IWL_DELAY_NEXT_FORCE_RF_RESET;
3021         priv->force_reset[IWL_FW_RESET].reset_duration =
3022                 IWL_DELAY_NEXT_FORCE_FW_RELOAD;
3023
3024         priv->rx_statistics_jiffies = jiffies;
3025
3026         /* Choose which receivers/antennas to use */
3027         iwlagn_set_rxon_chain(priv, &priv->contexts[IWL_RXON_CTX_BSS]);
3028
3029         iwl_init_scan_params(priv);
3030
3031         /* init bt coex */
3032         if (priv->cfg->bt_params &&
3033             priv->cfg->bt_params->advanced_bt_coexist) {
3034                 priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT;
3035                 priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT;
3036                 priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK;
3037                 priv->bt_on_thresh = BT_ON_THRESHOLD_DEF;
3038                 priv->bt_duration = BT_DURATION_LIMIT_DEF;
3039                 priv->dynamic_frag_thresh = BT_FRAG_THRESHOLD_DEF;
3040         }
3041
3042         ret = iwl_init_channel_map(priv);
3043         if (ret) {
3044                 IWL_ERR(priv, "initializing regulatory failed: %d\n", ret);
3045                 goto err;
3046         }
3047
3048         ret = iwl_init_geos(priv);
3049         if (ret) {
3050                 IWL_ERR(priv, "initializing geos failed: %d\n", ret);
3051                 goto err_free_channel_map;
3052         }
3053         iwl_init_hw_rates(priv, priv->ieee_rates);
3054
3055         return 0;
3056
3057 err_free_channel_map:
3058         iwl_free_channel_map(priv);
3059 err:
3060         return ret;
3061 }
3062
3063 static void iwl_uninit_drv(struct iwl_priv *priv)
3064 {
3065         iwl_calib_free_results(priv);
3066         iwl_free_geos(priv);
3067         iwl_free_channel_map(priv);
3068         if (priv->tx_cmd_pool)
3069                 kmem_cache_destroy(priv->tx_cmd_pool);
3070         kfree(priv->scan_cmd);
3071         kfree(priv->beacon_cmd);
3072 #ifdef CONFIG_IWLWIFI_DEBUGFS
3073         kfree(priv->wowlan_sram);
3074 #endif
3075 }
3076
3077 static void iwlagn_mac_rssi_callback(struct ieee80211_hw *hw,
3078                            enum ieee80211_rssi_event rssi_event)
3079 {
3080         struct iwl_priv *priv = hw->priv;
3081
3082         IWL_DEBUG_MAC80211(priv, "enter\n");
3083         mutex_lock(&priv->shrd->mutex);
3084
3085         if (priv->cfg->bt_params &&
3086                         priv->cfg->bt_params->advanced_bt_coexist) {
3087                 if (rssi_event == RSSI_EVENT_LOW)
3088                         priv->bt_enable_pspoll = true;
3089                 else if (rssi_event == RSSI_EVENT_HIGH)
3090                         priv->bt_enable_pspoll = false;
3091
3092                 iwlagn_send_advance_bt_config(priv);
3093         } else {
3094                 IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
3095                                 "ignoring RSSI callback\n");
3096         }
3097
3098         mutex_unlock(&priv->shrd->mutex);
3099         IWL_DEBUG_MAC80211(priv, "leave\n");
3100 }
3101
3102 static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
3103                            struct ieee80211_sta *sta, bool set)
3104 {
3105         struct iwl_priv *priv = hw->priv;
3106
3107         queue_work(priv->shrd->workqueue, &priv->beacon_update);
3108
3109         return 0;
3110 }
3111
3112 struct ieee80211_ops iwlagn_hw_ops = {
3113         .tx = iwlagn_mac_tx,
3114         .start = iwlagn_mac_start,
3115         .stop = iwlagn_mac_stop,
3116 #ifdef CONFIG_PM_SLEEP
3117         .suspend = iwlagn_mac_suspend,
3118         .resume = iwlagn_mac_resume,
3119 #endif
3120         .add_interface = iwlagn_mac_add_interface,
3121         .remove_interface = iwlagn_mac_remove_interface,
3122         .change_interface = iwlagn_mac_change_interface,
3123         .config = iwlagn_mac_config,
3124         .configure_filter = iwlagn_configure_filter,
3125         .set_key = iwlagn_mac_set_key,
3126         .update_tkip_key = iwlagn_mac_update_tkip_key,
3127         .set_rekey_data = iwlagn_mac_set_rekey_data,
3128         .conf_tx = iwlagn_mac_conf_tx,
3129         .bss_info_changed = iwlagn_bss_info_changed,
3130         .ampdu_action = iwlagn_mac_ampdu_action,
3131         .hw_scan = iwlagn_mac_hw_scan,
3132         .sta_notify = iwlagn_mac_sta_notify,
3133         .sta_add = iwlagn_mac_sta_add,
3134         .sta_remove = iwlagn_mac_sta_remove,
3135         .channel_switch = iwlagn_mac_channel_switch,
3136         .flush = iwlagn_mac_flush,
3137         .tx_last_beacon = iwlagn_mac_tx_last_beacon,
3138         .remain_on_channel = iwlagn_mac_remain_on_channel,
3139         .cancel_remain_on_channel = iwlagn_mac_cancel_remain_on_channel,
3140         .rssi_callback = iwlagn_mac_rssi_callback,
3141         CFG80211_TESTMODE_CMD(iwlagn_mac_testmode_cmd)
3142         CFG80211_TESTMODE_DUMP(iwlagn_mac_testmode_dump)
3143         .tx_sync = iwlagn_mac_tx_sync,
3144         .finish_tx_sync = iwlagn_mac_finish_tx_sync,
3145         .set_tim = iwlagn_mac_set_tim,
3146 };
3147
3148 static u32 iwl_hw_detect(struct iwl_priv *priv)
3149 {
3150         return iwl_read32(bus(priv), CSR_HW_REV);
3151 }
3152
3153 /* Size of one Rx buffer in host DRAM */
3154 #define IWL_RX_BUF_SIZE_4K (4 * 1024)
3155 #define IWL_RX_BUF_SIZE_8K (8 * 1024)
3156
3157 static int iwl_set_hw_params(struct iwl_priv *priv)
3158 {
3159         if (iwlagn_mod_params.amsdu_size_8K)
3160                 hw_params(priv).rx_page_order =
3161                         get_order(IWL_RX_BUF_SIZE_8K);
3162         else
3163                 hw_params(priv).rx_page_order =
3164                         get_order(IWL_RX_BUF_SIZE_4K);
3165
3166         if (iwlagn_mod_params.disable_11n)
3167                 priv->cfg->sku &= ~EEPROM_SKU_CAP_11N_ENABLE;
3168
3169         hw_params(priv).num_ampdu_queues =
3170                 priv->cfg->base_params->num_of_ampdu_queues;
3171         hw_params(priv).shadow_reg_enable =
3172                 priv->cfg->base_params->shadow_reg_enable;
3173         hw_params(priv).sku = priv->cfg->sku;
3174         hw_params(priv).wd_timeout = priv->cfg->base_params->wd_timeout;
3175
3176         /* Device-specific setup */
3177         return priv->cfg->lib->set_hw_params(priv);
3178 }
3179
3180 /* This function both allocates and initializes hw and priv. */
3181 static struct ieee80211_hw *iwl_alloc_all(void)
3182 {
3183         struct iwl_priv *priv;
3184         /* mac80211 allocates memory for this device instance, including
3185          *   space for this driver's private structure */
3186         struct ieee80211_hw *hw;
3187
3188         hw = ieee80211_alloc_hw(sizeof(struct iwl_priv), &iwlagn_hw_ops);
3189         if (!hw)
3190                 goto out;
3191
3192         priv = hw->priv;
3193         priv->hw = hw;
3194
3195 out:
3196         return hw;
3197 }
3198
3199 int iwl_probe(struct iwl_bus *bus, const struct iwl_trans_ops *trans_ops,
3200                 struct iwl_cfg *cfg)
3201 {
3202         int err = 0;
3203         struct iwl_priv *priv;
3204         struct ieee80211_hw *hw;
3205         u16 num_mac;
3206         u32 hw_rev;
3207
3208         /************************
3209          * 1. Allocating HW data
3210          ************************/
3211         hw = iwl_alloc_all();
3212         if (!hw) {
3213                 pr_err("%s: Cannot allocate network device\n", cfg->name);
3214                 err = -ENOMEM;
3215                 goto out;
3216         }
3217
3218         priv = hw->priv;
3219         priv->shrd = &priv->_shrd;
3220         bus->shrd = priv->shrd;
3221         priv->shrd->bus = bus;
3222         priv->shrd->priv = priv;
3223
3224         priv->shrd->trans = trans_ops->alloc(priv->shrd);
3225         if (priv->shrd->trans == NULL) {
3226                 err = -ENOMEM;
3227                 goto out_free_traffic_mem;
3228         }
3229
3230         /* At this point both hw and priv are allocated. */
3231
3232         SET_IEEE80211_DEV(hw, bus(priv)->dev);
3233
3234         IWL_DEBUG_INFO(priv, "*** LOAD DRIVER ***\n");
3235         priv->cfg = cfg;
3236
3237         /* is antenna coupling more than 35dB ? */
3238         priv->bt_ant_couple_ok =
3239                 (iwlagn_mod_params.ant_coupling >
3240                         IWL_BT_ANTENNA_COUPLING_THRESHOLD) ?
3241                         true : false;
3242
3243         /* enable/disable bt channel inhibition */
3244         priv->bt_ch_announce = iwlagn_mod_params.bt_ch_announce;
3245         IWL_DEBUG_INFO(priv, "BT channel inhibition is %s\n",
3246                        (priv->bt_ch_announce) ? "On" : "Off");
3247
3248         if (iwl_alloc_traffic_mem(priv))
3249                 IWL_ERR(priv, "Not enough memory to generate traffic log\n");
3250
3251         /* these spin locks will be used in apm_ops.init and EEPROM access
3252          * we should init now
3253          */
3254         spin_lock_init(&bus(priv)->reg_lock);
3255         spin_lock_init(&priv->shrd->lock);
3256
3257         /*
3258          * stop and reset the on-board processor just in case it is in a
3259          * strange state ... like being left stranded by a primary kernel
3260          * and this is now the kdump kernel trying to start up
3261          */
3262         iwl_write32(bus(priv), CSR_RESET, CSR_RESET_REG_FLAG_NEVO_RESET);
3263
3264         /***********************
3265          * 3. Read REV register
3266          ***********************/
3267         hw_rev = iwl_hw_detect(priv);
3268         IWL_INFO(priv, "Detected %s, REV=0x%X\n",
3269                 priv->cfg->name, hw_rev);
3270
3271         err = iwl_trans_request_irq(trans(priv));
3272         if (err)
3273                 goto out_free_trans;
3274
3275         if (iwl_trans_prepare_card_hw(trans(priv))) {
3276                 err = -EIO;
3277                 IWL_WARN(priv, "Failed, HW not ready\n");
3278                 goto out_free_trans;
3279         }
3280
3281         /*****************
3282          * 4. Read EEPROM
3283          *****************/
3284         /* Read the EEPROM */
3285         err = iwl_eeprom_init(priv, hw_rev);
3286         if (err) {
3287                 IWL_ERR(priv, "Unable to init EEPROM\n");
3288                 goto out_free_trans;
3289         }
3290         err = iwl_eeprom_check_version(priv);
3291         if (err)
3292                 goto out_free_eeprom;
3293
3294         err = iwl_eeprom_check_sku(priv);
3295         if (err)
3296                 goto out_free_eeprom;
3297
3298         /* extract MAC Address */
3299         iwl_eeprom_get_mac(priv, priv->addresses[0].addr);
3300         IWL_DEBUG_INFO(priv, "MAC address: %pM\n", priv->addresses[0].addr);
3301         priv->hw->wiphy->addresses = priv->addresses;
3302         priv->hw->wiphy->n_addresses = 1;
3303         num_mac = iwl_eeprom_query16(priv, EEPROM_NUM_MAC_ADDRESS);
3304         if (num_mac > 1) {
3305                 memcpy(priv->addresses[1].addr, priv->addresses[0].addr,
3306                        ETH_ALEN);
3307                 priv->addresses[1].addr[5]++;
3308                 priv->hw->wiphy->n_addresses++;
3309         }
3310
3311         /************************
3312          * 5. Setup HW constants
3313          ************************/
3314         if (iwl_set_hw_params(priv)) {
3315                 err = -ENOENT;
3316                 IWL_ERR(priv, "failed to set hw parameters\n");
3317                 goto out_free_eeprom;
3318         }
3319
3320         /*******************
3321          * 6. Setup priv
3322          *******************/
3323
3324         err = iwl_init_drv(priv);
3325         if (err)
3326                 goto out_free_eeprom;
3327         /* At this point both hw and priv are initialized. */
3328
3329         /********************
3330          * 7. Setup services
3331          ********************/
3332         iwl_setup_deferred_work(priv);
3333         iwl_setup_rx_handlers(priv);
3334         iwl_testmode_init(priv);
3335
3336         /*********************************************
3337          * 8. Enable interrupts
3338          *********************************************/
3339
3340         iwl_enable_rfkill_int(priv);
3341
3342         /* If platform's RF_KILL switch is NOT set to KILL */
3343         if (iwl_read32(bus(priv),
3344                         CSR_GP_CNTRL) & CSR_GP_CNTRL_REG_FLAG_HW_RF_KILL_SW)
3345                 clear_bit(STATUS_RF_KILL_HW, &priv->shrd->status);
3346         else
3347                 set_bit(STATUS_RF_KILL_HW, &priv->shrd->status);
3348
3349         wiphy_rfkill_set_hw_state(priv->hw->wiphy,
3350                 test_bit(STATUS_RF_KILL_HW, &priv->shrd->status));
3351
3352         iwl_power_initialize(priv);
3353         iwl_tt_initialize(priv);
3354
3355         init_completion(&priv->firmware_loading_complete);
3356
3357         err = iwl_request_firmware(priv, true);
3358         if (err)
3359                 goto out_destroy_workqueue;
3360
3361         return 0;
3362
3363 out_destroy_workqueue:
3364         destroy_workqueue(priv->shrd->workqueue);
3365         priv->shrd->workqueue = NULL;
3366         iwl_uninit_drv(priv);
3367 out_free_eeprom:
3368         iwl_eeprom_free(priv);
3369 out_free_trans:
3370         iwl_trans_free(trans(priv));
3371 out_free_traffic_mem:
3372         iwl_free_traffic_mem(priv);
3373         ieee80211_free_hw(priv->hw);
3374 out:
3375         return err;
3376 }
3377
3378 void __devexit iwl_remove(struct iwl_priv * priv)
3379 {
3380         wait_for_completion(&priv->firmware_loading_complete);
3381
3382         IWL_DEBUG_INFO(priv, "*** UNLOAD DRIVER ***\n");
3383
3384         iwl_dbgfs_unregister(priv);
3385
3386         /* ieee80211_unregister_hw call wil cause iwlagn_mac_stop to
3387          * to be called and iwl_down since we are removing the device
3388          * we need to set STATUS_EXIT_PENDING bit.
3389          */
3390         set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
3391
3392         iwl_testmode_cleanup(priv);
3393         iwl_leds_exit(priv);
3394
3395         if (priv->mac80211_registered) {
3396                 ieee80211_unregister_hw(priv->hw);
3397                 priv->mac80211_registered = 0;
3398         }
3399
3400         iwl_tt_exit(priv);
3401
3402         /*This will stop the queues, move the device to low power state */
3403         iwl_trans_stop_device(trans(priv));
3404
3405         iwl_dealloc_ucode(priv);
3406
3407         iwl_eeprom_free(priv);
3408
3409         /*netif_stop_queue(dev); */
3410         flush_workqueue(priv->shrd->workqueue);
3411
3412         /* ieee80211_unregister_hw calls iwlagn_mac_stop, which flushes
3413          * priv->shrd->workqueue... so we can't take down the workqueue
3414          * until now... */
3415         destroy_workqueue(priv->shrd->workqueue);
3416         priv->shrd->workqueue = NULL;
3417         iwl_free_traffic_mem(priv);
3418
3419         iwl_trans_free(trans(priv));
3420
3421         iwl_uninit_drv(priv);
3422
3423         dev_kfree_skb(priv->beacon_skb);
3424
3425         ieee80211_free_hw(priv->hw);
3426 }
3427
3428
3429 /*****************************************************************************
3430  *
3431  * driver and module entry point
3432  *
3433  *****************************************************************************/
3434 static int __init iwl_init(void)
3435 {
3436
3437         int ret;
3438         pr_info(DRV_DESCRIPTION ", " DRV_VERSION "\n");
3439         pr_info(DRV_COPYRIGHT "\n");
3440
3441         ret = iwlagn_rate_control_register();
3442         if (ret) {
3443                 pr_err("Unable to register rate control algorithm: %d\n", ret);
3444                 return ret;
3445         }
3446
3447         ret = iwl_pci_register_driver();
3448
3449         if (ret)
3450                 goto error_register;
3451         return ret;
3452
3453 error_register:
3454         iwlagn_rate_control_unregister();
3455         return ret;
3456 }
3457
3458 static void __exit iwl_exit(void)
3459 {
3460         iwl_pci_unregister_driver();
3461         iwlagn_rate_control_unregister();
3462 }
3463
3464 module_exit(iwl_exit);
3465 module_init(iwl_init);
3466
3467 #ifdef CONFIG_IWLWIFI_DEBUG
3468 module_param_named(debug, iwlagn_mod_params.debug_level, uint,
3469                    S_IRUGO | S_IWUSR);
3470 MODULE_PARM_DESC(debug, "debug output mask");
3471 #endif
3472
3473 module_param_named(swcrypto, iwlagn_mod_params.sw_crypto, int, S_IRUGO);
3474 MODULE_PARM_DESC(swcrypto, "using crypto in software (default 0 [hardware])");
3475 module_param_named(queues_num, iwlagn_mod_params.num_of_queues, int, S_IRUGO);
3476 MODULE_PARM_DESC(queues_num, "number of hw queues.");
3477 module_param_named(11n_disable, iwlagn_mod_params.disable_11n, int, S_IRUGO);
3478 MODULE_PARM_DESC(11n_disable, "disable 11n functionality");
3479 module_param_named(amsdu_size_8K, iwlagn_mod_params.amsdu_size_8K,
3480                    int, S_IRUGO);
3481 MODULE_PARM_DESC(amsdu_size_8K, "enable 8K amsdu size");
3482 module_param_named(fw_restart, iwlagn_mod_params.restart_fw, int, S_IRUGO);
3483 MODULE_PARM_DESC(fw_restart, "restart firmware in case of error");
3484
3485 module_param_named(ucode_alternative,
3486                    iwlagn_mod_params.wanted_ucode_alternative,
3487                    int, S_IRUGO);
3488 MODULE_PARM_DESC(ucode_alternative,
3489                  "specify ucode alternative to use from ucode file");
3490
3491 module_param_named(antenna_coupling, iwlagn_mod_params.ant_coupling,
3492                    int, S_IRUGO);
3493 MODULE_PARM_DESC(antenna_coupling,
3494                  "specify antenna coupling in dB (defualt: 0 dB)");
3495
3496 module_param_named(bt_ch_inhibition, iwlagn_mod_params.bt_ch_announce,
3497                    bool, S_IRUGO);
3498 MODULE_PARM_DESC(bt_ch_inhibition,
3499                  "Enable BT channel inhibition (default: enable)");
3500
3501 module_param_named(plcp_check, iwlagn_mod_params.plcp_check, bool, S_IRUGO);
3502 MODULE_PARM_DESC(plcp_check, "Check plcp health (default: 1 [enabled])");
3503
3504 module_param_named(ack_check, iwlagn_mod_params.ack_check, bool, S_IRUGO);
3505 MODULE_PARM_DESC(ack_check, "Check ack health (default: 0 [disabled])");
3506
3507 module_param_named(wd_disable, iwlagn_mod_params.wd_disable, bool, S_IRUGO);
3508 MODULE_PARM_DESC(wd_disable,
3509                 "Disable stuck queue watchdog timer (default: 0 [enabled])");
3510
3511 /*
3512  * set bt_coex_active to true, uCode will do kill/defer
3513  * every time the priority line is asserted (BT is sending signals on the
3514  * priority line in the PCIx).
3515  * set bt_coex_active to false, uCode will ignore the BT activity and
3516  * perform the normal operation
3517  *
3518  * User might experience transmit issue on some platform due to WiFi/BT
3519  * co-exist problem. The possible behaviors are:
3520  *   Able to scan and finding all the available AP
3521  *   Not able to associate with any AP
3522  * On those platforms, WiFi communication can be restored by set
3523  * "bt_coex_active" module parameter to "false"
3524  *
3525  * default: bt_coex_active = true (BT_COEX_ENABLE)
3526  */
3527 module_param_named(bt_coex_active, iwlagn_mod_params.bt_coex_active,
3528                 bool, S_IRUGO);
3529 MODULE_PARM_DESC(bt_coex_active, "enable wifi/bt co-exist (default: enable)");
3530
3531 module_param_named(led_mode, iwlagn_mod_params.led_mode, int, S_IRUGO);
3532 MODULE_PARM_DESC(led_mode, "0=system default, "
3533                 "1=On(RF On)/Off(RF Off), 2=blinking (default: 0)");
3534
3535 module_param_named(power_save, iwlagn_mod_params.power_save,
3536                 bool, S_IRUGO);
3537 MODULE_PARM_DESC(power_save,
3538                  "enable WiFi power management (default: disable)");
3539
3540 module_param_named(power_level, iwlagn_mod_params.power_level,
3541                 int, S_IRUGO);
3542 MODULE_PARM_DESC(power_level,
3543                  "default power save level (range from 1 - 5, default: 1)");
3544
3545 module_param_named(auto_agg, iwlagn_mod_params.auto_agg,
3546                 bool, S_IRUGO);
3547 MODULE_PARM_DESC(auto_agg,
3548                  "enable agg w/o check traffic load (default: enable)");
3549
3550 /*
3551  * For now, keep using power level 1 instead of automatically
3552  * adjusting ...
3553  */
3554 module_param_named(no_sleep_autoadjust, iwlagn_mod_params.no_sleep_autoadjust,
3555                 bool, S_IRUGO);
3556 MODULE_PARM_DESC(no_sleep_autoadjust,
3557                  "don't automatically adjust sleep level "
3558                  "according to maximum network latency (default: true)");