2 * This file contains the major functions in WLAN
3 * driver. It includes init, exit, open, close and main
7 #include <linux/moduleparam.h>
8 #include <linux/delay.h>
9 #include <linux/etherdevice.h>
10 #include <linux/netdevice.h>
11 #include <linux/if_arp.h>
12 #include <linux/kthread.h>
13 #include <linux/kfifo.h>
14 #include <linux/stddef.h>
15 #include <linux/ieee80211.h>
16 #include <net/iw_handler.h>
17 #include <net/cfg80211.h>
29 #define DRIVER_RELEASE_VERSION "323.p0"
30 const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
37 /* Module parameters */
38 unsigned int lbs_debug;
39 EXPORT_SYMBOL_GPL(lbs_debug);
40 module_param_named(libertas_debug, lbs_debug, int, 0644);
43 /* This global structure is used to send the confirm_sleep command as
44 * fast as possible down to the firmware. */
45 struct cmd_confirm_sleep confirm_sleep;
49 * the table to keep region code
51 u16 lbs_region_code_to_index[MRVDRV_MAX_REGION_CODE] =
52 { 0x10, 0x20, 0x30, 0x31, 0x32, 0x40 };
55 * FW rate table. FW refers to rates by their index in this table, not by the
56 * rate value itself. Values of 0x00 are
59 static u8 fw_data_rates[MAX_RATES] =
60 { 0x02, 0x04, 0x0B, 0x16, 0x00, 0x0C, 0x12,
61 0x18, 0x24, 0x30, 0x48, 0x60, 0x6C, 0x00
65 * @brief use index to get the data rate
67 * @param idx The index of data rate
68 * @return data rate or 0
70 u32 lbs_fw_index_to_data_rate(u8 idx)
72 if (idx >= sizeof(fw_data_rates))
74 return fw_data_rates[idx];
78 * @brief use rate to get the index
80 * @param rate data rate
83 u8 lbs_data_rate_to_fw_index(u32 rate)
90 for (i = 0; i < sizeof(fw_data_rates); i++) {
91 if (rate == fw_data_rates[i])
98 static int lbs_add_rtap(struct lbs_private *priv);
99 static void lbs_remove_rtap(struct lbs_private *priv);
103 * Get function for sysfs attribute rtap
105 static ssize_t lbs_rtap_get(struct device *dev,
106 struct device_attribute *attr, char * buf)
108 struct lbs_private *priv = to_net_dev(dev)->ml_priv;
109 return snprintf(buf, 5, "0x%X\n", priv->monitormode);
113 * Set function for sysfs attribute rtap
115 static ssize_t lbs_rtap_set(struct device *dev,
116 struct device_attribute *attr, const char * buf, size_t count)
119 struct lbs_private *priv = to_net_dev(dev)->ml_priv;
121 sscanf(buf, "%x", &monitor_mode);
123 if (priv->monitormode == monitor_mode)
125 if (!priv->monitormode) {
126 if (priv->infra_open || lbs_mesh_open(priv))
128 if (priv->mode == IW_MODE_INFRA)
129 lbs_cmd_80211_deauthenticate(priv,
130 priv->curbssparams.bssid,
131 WLAN_REASON_DEAUTH_LEAVING);
132 else if (priv->mode == IW_MODE_ADHOC)
133 lbs_adhoc_stop(priv);
136 priv->monitormode = monitor_mode;
138 if (!priv->monitormode)
140 priv->monitormode = 0;
141 lbs_remove_rtap(priv);
143 if (priv->currenttxskb) {
144 dev_kfree_skb_any(priv->currenttxskb);
145 priv->currenttxskb = NULL;
148 /* Wake queues, command thread, etc. */
149 lbs_host_to_card_done(priv);
152 lbs_prepare_and_send_command(priv,
153 CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
154 CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
159 * lbs_rtap attribute to be exported per ethX interface
160 * through sysfs (/sys/class/net/ethX/lbs_rtap)
162 static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );
165 * @brief This function opens the ethX interface
167 * @param dev A pointer to net_device structure
168 * @return 0 or -EBUSY if monitor mode active
170 static int lbs_dev_open(struct net_device *dev)
172 struct lbs_private *priv = dev->ml_priv;
175 lbs_deb_enter(LBS_DEB_NET);
177 spin_lock_irq(&priv->driver_lock);
179 if (priv->monitormode) {
184 priv->infra_open = 1;
186 if (priv->connect_status == LBS_CONNECTED)
187 netif_carrier_on(dev);
189 netif_carrier_off(dev);
191 if (!priv->tx_pending_len)
192 netif_wake_queue(dev);
195 spin_unlock_irq(&priv->driver_lock);
196 lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
201 * @brief This function closes the ethX interface
203 * @param dev A pointer to net_device structure
206 static int lbs_eth_stop(struct net_device *dev)
208 struct lbs_private *priv = dev->ml_priv;
210 lbs_deb_enter(LBS_DEB_NET);
212 spin_lock_irq(&priv->driver_lock);
213 priv->infra_open = 0;
214 netif_stop_queue(dev);
215 spin_unlock_irq(&priv->driver_lock);
217 schedule_work(&priv->mcast_work);
219 lbs_deb_leave(LBS_DEB_NET);
223 static void lbs_tx_timeout(struct net_device *dev)
225 struct lbs_private *priv = dev->ml_priv;
227 lbs_deb_enter(LBS_DEB_TX);
229 lbs_pr_err("tx watch dog timeout\n");
231 dev->trans_start = jiffies;
233 if (priv->currenttxskb)
234 lbs_send_tx_feedback(priv, 0);
236 /* XX: Shouldn't we also call into the hw-specific driver
237 to kick it somehow? */
238 lbs_host_to_card_done(priv);
240 /* More often than not, this actually happens because the
241 firmware has crapped itself -- rather than just a very
242 busy medium. So send a harmless command, and if/when
243 _that_ times out, we'll kick it in the head. */
244 lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
247 lbs_deb_leave(LBS_DEB_TX);
250 void lbs_host_to_card_done(struct lbs_private *priv)
254 lbs_deb_enter(LBS_DEB_THREAD);
256 spin_lock_irqsave(&priv->driver_lock, flags);
258 priv->dnld_sent = DNLD_RES_RECEIVED;
260 /* Wake main thread if commands are pending */
261 if (!priv->cur_cmd || priv->tx_pending_len > 0) {
262 if (!priv->wakeup_dev_required)
263 wake_up_interruptible(&priv->waitq);
266 spin_unlock_irqrestore(&priv->driver_lock, flags);
267 lbs_deb_leave(LBS_DEB_THREAD);
269 EXPORT_SYMBOL_GPL(lbs_host_to_card_done);
271 int lbs_set_mac_address(struct net_device *dev, void *addr)
274 struct lbs_private *priv = dev->ml_priv;
275 struct sockaddr *phwaddr = addr;
276 struct cmd_ds_802_11_mac_address cmd;
278 lbs_deb_enter(LBS_DEB_NET);
280 /* In case it was called from the mesh device */
283 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
284 cmd.action = cpu_to_le16(CMD_ACT_SET);
285 memcpy(cmd.macadd, phwaddr->sa_data, ETH_ALEN);
287 ret = lbs_cmd_with_response(priv, CMD_802_11_MAC_ADDRESS, &cmd);
289 lbs_deb_net("set MAC address failed\n");
293 memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
294 memcpy(dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
296 memcpy(priv->mesh_dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
299 lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
304 static inline int mac_in_list(unsigned char *list, int list_len,
308 if (!memcmp(list, mac, ETH_ALEN))
317 static int lbs_add_mcast_addrs(struct cmd_ds_mac_multicast_adr *cmd,
318 struct net_device *dev, int nr_addrs)
321 struct dev_mc_list *mc_list;
323 if ((dev->flags & (IFF_UP|IFF_MULTICAST)) != (IFF_UP|IFF_MULTICAST))
326 netif_addr_lock_bh(dev);
327 for (mc_list = dev->mc_list; mc_list; mc_list = mc_list->next) {
328 if (mac_in_list(cmd->maclist, nr_addrs, mc_list->dmi_addr)) {
329 lbs_deb_net("mcast address %s:%pM skipped\n", dev->name,
334 if (i == MRVDRV_MAX_MULTICAST_LIST_SIZE)
336 memcpy(&cmd->maclist[6*i], mc_list->dmi_addr, ETH_ALEN);
337 lbs_deb_net("mcast address %s:%pM added to filter\n", dev->name,
341 netif_addr_unlock_bh(dev);
348 static void lbs_set_mcast_worker(struct work_struct *work)
350 struct lbs_private *priv = container_of(work, struct lbs_private, mcast_work);
351 struct cmd_ds_mac_multicast_adr mcast_cmd;
354 int old_mac_control = priv->mac_control;
356 lbs_deb_enter(LBS_DEB_NET);
358 dev_flags = priv->dev->flags;
360 dev_flags |= priv->mesh_dev->flags;
362 if (dev_flags & IFF_PROMISC) {
363 priv->mac_control |= CMD_ACT_MAC_PROMISCUOUS_ENABLE;
364 priv->mac_control &= ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
365 CMD_ACT_MAC_MULTICAST_ENABLE);
366 goto out_set_mac_control;
367 } else if (dev_flags & IFF_ALLMULTI) {
369 priv->mac_control |= CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
370 priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
371 CMD_ACT_MAC_MULTICAST_ENABLE);
372 goto out_set_mac_control;
375 /* Once for priv->dev, again for priv->mesh_dev if it exists */
376 nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->dev, 0);
377 if (nr_addrs >= 0 && priv->mesh_dev)
378 nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->mesh_dev, nr_addrs);
383 int size = offsetof(struct cmd_ds_mac_multicast_adr,
384 maclist[6*nr_addrs]);
386 mcast_cmd.action = cpu_to_le16(CMD_ACT_SET);
387 mcast_cmd.hdr.size = cpu_to_le16(size);
388 mcast_cmd.nr_of_adrs = cpu_to_le16(nr_addrs);
390 lbs_cmd_async(priv, CMD_MAC_MULTICAST_ADR, &mcast_cmd.hdr, size);
392 priv->mac_control |= CMD_ACT_MAC_MULTICAST_ENABLE;
394 priv->mac_control &= ~CMD_ACT_MAC_MULTICAST_ENABLE;
396 priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
397 CMD_ACT_MAC_ALL_MULTICAST_ENABLE);
399 if (priv->mac_control != old_mac_control)
400 lbs_set_mac_control(priv);
402 lbs_deb_leave(LBS_DEB_NET);
405 void lbs_set_multicast_list(struct net_device *dev)
407 struct lbs_private *priv = dev->ml_priv;
409 schedule_work(&priv->mcast_work);
413 * @brief This function handles the major jobs in the LBS driver.
414 * It handles all events generated by firmware, RX data received
415 * from firmware and TX data sent from kernel.
417 * @param data A pointer to lbs_thread structure
420 static int lbs_thread(void *data)
422 struct net_device *dev = data;
423 struct lbs_private *priv = dev->ml_priv;
426 lbs_deb_enter(LBS_DEB_THREAD);
428 init_waitqueue_entry(&wait, current);
434 lbs_deb_thread("1: currenttxskb %p, dnld_sent %d\n",
435 priv->currenttxskb, priv->dnld_sent);
437 add_wait_queue(&priv->waitq, &wait);
438 set_current_state(TASK_INTERRUPTIBLE);
439 spin_lock_irq(&priv->driver_lock);
441 if (kthread_should_stop())
442 shouldsleep = 0; /* Bye */
443 else if (priv->surpriseremoved)
444 shouldsleep = 1; /* We need to wait until we're _told_ to die */
445 else if (priv->psstate == PS_STATE_SLEEP)
446 shouldsleep = 1; /* Sleep mode. Nothing we can do till it wakes */
447 else if (priv->cmd_timed_out)
448 shouldsleep = 0; /* Command timed out. Recover */
449 else if (!priv->fw_ready)
450 shouldsleep = 1; /* Firmware not ready. We're waiting for it */
451 else if (priv->dnld_sent)
452 shouldsleep = 1; /* Something is en route to the device already */
453 else if (priv->tx_pending_len > 0)
454 shouldsleep = 0; /* We've a packet to send */
455 else if (priv->resp_len[priv->resp_idx])
456 shouldsleep = 0; /* We have a command response */
457 else if (priv->cur_cmd)
458 shouldsleep = 1; /* Can't send a command; one already running */
459 else if (!list_empty(&priv->cmdpendingq) &&
460 !(priv->wakeup_dev_required))
461 shouldsleep = 0; /* We have a command to send */
462 else if (kfifo_len(&priv->event_fifo))
463 shouldsleep = 0; /* We have an event to process */
465 shouldsleep = 1; /* No command */
468 lbs_deb_thread("sleeping, connect_status %d, "
469 "psmode %d, psstate %d\n",
470 priv->connect_status,
471 priv->psmode, priv->psstate);
472 spin_unlock_irq(&priv->driver_lock);
475 spin_unlock_irq(&priv->driver_lock);
477 lbs_deb_thread("2: currenttxskb %p, dnld_send %d\n",
478 priv->currenttxskb, priv->dnld_sent);
480 set_current_state(TASK_RUNNING);
481 remove_wait_queue(&priv->waitq, &wait);
483 lbs_deb_thread("3: currenttxskb %p, dnld_sent %d\n",
484 priv->currenttxskb, priv->dnld_sent);
486 if (kthread_should_stop()) {
487 lbs_deb_thread("break from main thread\n");
491 if (priv->surpriseremoved) {
492 lbs_deb_thread("adapter removed; waiting to die...\n");
496 lbs_deb_thread("4: currenttxskb %p, dnld_sent %d\n",
497 priv->currenttxskb, priv->dnld_sent);
499 /* Process any pending command response */
500 spin_lock_irq(&priv->driver_lock);
501 resp_idx = priv->resp_idx;
502 if (priv->resp_len[resp_idx]) {
503 spin_unlock_irq(&priv->driver_lock);
504 lbs_process_command_response(priv,
505 priv->resp_buf[resp_idx],
506 priv->resp_len[resp_idx]);
507 spin_lock_irq(&priv->driver_lock);
508 priv->resp_len[resp_idx] = 0;
510 spin_unlock_irq(&priv->driver_lock);
512 /* Process hardware events, e.g. card removed, link lost */
513 spin_lock_irq(&priv->driver_lock);
514 while (kfifo_len(&priv->event_fifo)) {
517 if (kfifo_out(&priv->event_fifo,
518 (unsigned char *) &event, sizeof(event)) !=
521 spin_unlock_irq(&priv->driver_lock);
522 lbs_process_event(priv, event);
523 spin_lock_irq(&priv->driver_lock);
525 spin_unlock_irq(&priv->driver_lock);
527 if (priv->wakeup_dev_required) {
528 lbs_deb_thread("Waking up device...\n");
530 if (priv->exit_deep_sleep(priv))
531 lbs_deb_thread("Wakeup device failed\n");
535 /* command timeout stuff */
536 if (priv->cmd_timed_out && priv->cur_cmd) {
537 struct cmd_ctrl_node *cmdnode = priv->cur_cmd;
539 if (++priv->nr_retries > 3) {
540 lbs_pr_info("Excessive timeouts submitting "
542 le16_to_cpu(cmdnode->cmdbuf->command));
543 lbs_complete_command(priv, cmdnode, -ETIMEDOUT);
544 priv->nr_retries = 0;
545 if (priv->reset_card)
546 priv->reset_card(priv);
548 priv->cur_cmd = NULL;
549 priv->dnld_sent = DNLD_RES_RECEIVED;
550 lbs_pr_info("requeueing command 0x%04x due "
551 "to timeout (#%d)\n",
552 le16_to_cpu(cmdnode->cmdbuf->command),
555 /* Stick it back at the _top_ of the pending queue
556 for immediate resubmission */
557 list_add(&cmdnode->list, &priv->cmdpendingq);
560 priv->cmd_timed_out = 0;
567 /* Check if we need to confirm Sleep Request received previously */
568 if (priv->psstate == PS_STATE_PRE_SLEEP &&
569 !priv->dnld_sent && !priv->cur_cmd) {
570 if (priv->connect_status == LBS_CONNECTED) {
571 lbs_deb_thread("pre-sleep, currenttxskb %p, "
572 "dnld_sent %d, cur_cmd %p\n",
573 priv->currenttxskb, priv->dnld_sent,
576 lbs_ps_confirm_sleep(priv);
578 /* workaround for firmware sending
579 * deauth/linkloss event immediately
580 * after sleep request; remove this
581 * after firmware fixes it
583 priv->psstate = PS_STATE_AWAKE;
584 lbs_pr_alert("ignore PS_SleepConfirm in "
585 "non-connected state\n");
589 /* The PS state is changed during processing of Sleep Request
592 if ((priv->psstate == PS_STATE_SLEEP) ||
593 (priv->psstate == PS_STATE_PRE_SLEEP))
596 if (priv->is_deep_sleep)
599 /* Execute the next command */
600 if (!priv->dnld_sent && !priv->cur_cmd)
601 lbs_execute_next_command(priv);
603 /* Wake-up command waiters which can't sleep in
604 * lbs_prepare_and_send_command
606 if (!list_empty(&priv->cmdpendingq))
607 wake_up_all(&priv->cmd_pending);
609 spin_lock_irq(&priv->driver_lock);
610 if (!priv->dnld_sent && priv->tx_pending_len > 0) {
611 int ret = priv->hw_host_to_card(priv, MVMS_DAT,
612 priv->tx_pending_buf,
613 priv->tx_pending_len);
615 lbs_deb_tx("host_to_card failed %d\n", ret);
616 priv->dnld_sent = DNLD_RES_RECEIVED;
618 priv->tx_pending_len = 0;
619 if (!priv->currenttxskb) {
620 /* We can wake the queues immediately if we aren't
621 waiting for TX feedback */
622 if (priv->connect_status == LBS_CONNECTED)
623 netif_wake_queue(priv->dev);
624 if (priv->mesh_dev &&
625 lbs_mesh_connected(priv))
626 netif_wake_queue(priv->mesh_dev);
629 spin_unlock_irq(&priv->driver_lock);
632 del_timer(&priv->command_timer);
633 del_timer(&priv->auto_deepsleep_timer);
634 wake_up_all(&priv->cmd_pending);
636 lbs_deb_leave(LBS_DEB_THREAD);
640 static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
641 struct cmd_header *cmd)
643 lbs_deb_enter(LBS_DEB_FW);
645 netif_device_detach(priv->dev);
647 netif_device_detach(priv->mesh_dev);
650 lbs_deb_leave(LBS_DEB_FW);
654 int lbs_suspend(struct lbs_private *priv)
656 struct cmd_header cmd;
659 lbs_deb_enter(LBS_DEB_FW);
661 if (priv->wol_criteria == 0xffffffff) {
662 lbs_pr_info("Suspend attempt without configuring wake params!\n");
666 memset(&cmd, 0, sizeof(cmd));
668 ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
669 sizeof(cmd), lbs_suspend_callback, 0);
671 lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);
673 lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
676 EXPORT_SYMBOL_GPL(lbs_suspend);
678 void lbs_resume(struct lbs_private *priv)
680 lbs_deb_enter(LBS_DEB_FW);
684 /* Firmware doesn't seem to give us RX packets any more
685 until we send it some command. Might as well update */
686 lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
689 netif_device_attach(priv->dev);
691 netif_device_attach(priv->mesh_dev);
693 lbs_deb_leave(LBS_DEB_FW);
695 EXPORT_SYMBOL_GPL(lbs_resume);
698 * @brief This function gets the HW spec from the firmware and sets
699 * some basic parameters.
701 * @param priv A pointer to struct lbs_private structure
704 static int lbs_setup_firmware(struct lbs_private *priv)
707 s16 curlevel = 0, minlevel = 0, maxlevel = 0;
709 lbs_deb_enter(LBS_DEB_FW);
711 /* Read MAC address from firmware */
712 memset(priv->current_addr, 0xff, ETH_ALEN);
713 ret = lbs_update_hw_spec(priv);
717 /* Read power levels if available */
718 ret = lbs_get_tx_power(priv, &curlevel, &minlevel, &maxlevel);
720 priv->txpower_cur = curlevel;
721 priv->txpower_min = minlevel;
722 priv->txpower_max = maxlevel;
725 lbs_set_mac_control(priv);
727 lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
732 * This function handles the timeout of command sending.
733 * It will re-send the same command again.
735 static void command_timer_fn(unsigned long data)
737 struct lbs_private *priv = (struct lbs_private *)data;
740 lbs_deb_enter(LBS_DEB_CMD);
741 spin_lock_irqsave(&priv->driver_lock, flags);
746 lbs_pr_info("command 0x%04x timed out\n",
747 le16_to_cpu(priv->cur_cmd->cmdbuf->command));
749 priv->cmd_timed_out = 1;
750 wake_up_interruptible(&priv->waitq);
752 spin_unlock_irqrestore(&priv->driver_lock, flags);
753 lbs_deb_leave(LBS_DEB_CMD);
757 * This function put the device back to deep sleep mode when timer expires
758 * and no activity (command, event, data etc.) is detected.
760 static void auto_deepsleep_timer_fn(unsigned long data)
762 struct lbs_private *priv = (struct lbs_private *)data;
765 lbs_deb_enter(LBS_DEB_CMD);
767 if (priv->is_activity_detected) {
768 priv->is_activity_detected = 0;
770 if (priv->is_auto_deep_sleep_enabled &&
771 (!priv->wakeup_dev_required) &&
772 (priv->connect_status != LBS_CONNECTED)) {
773 lbs_deb_main("Entering auto deep sleep mode...\n");
774 ret = lbs_prepare_and_send_command(priv,
775 CMD_802_11_DEEP_SLEEP, 0,
778 lbs_pr_err("Enter Deep Sleep command failed\n");
781 mod_timer(&priv->auto_deepsleep_timer , jiffies +
782 (priv->auto_deep_sleep_timeout * HZ)/1000);
783 lbs_deb_leave(LBS_DEB_CMD);
786 int lbs_enter_auto_deep_sleep(struct lbs_private *priv)
788 lbs_deb_enter(LBS_DEB_SDIO);
790 priv->is_auto_deep_sleep_enabled = 1;
791 if (priv->is_deep_sleep)
792 priv->wakeup_dev_required = 1;
793 mod_timer(&priv->auto_deepsleep_timer ,
794 jiffies + (priv->auto_deep_sleep_timeout * HZ)/1000);
796 lbs_deb_leave(LBS_DEB_SDIO);
800 int lbs_exit_auto_deep_sleep(struct lbs_private *priv)
802 lbs_deb_enter(LBS_DEB_SDIO);
804 priv->is_auto_deep_sleep_enabled = 0;
805 priv->auto_deep_sleep_timeout = 0;
806 del_timer(&priv->auto_deepsleep_timer);
808 lbs_deb_leave(LBS_DEB_SDIO);
812 static int lbs_init_adapter(struct lbs_private *priv)
817 lbs_deb_enter(LBS_DEB_MAIN);
819 /* Allocate buffer to store the BSSID list */
820 bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
821 priv->networks = kzalloc(bufsize, GFP_KERNEL);
822 if (!priv->networks) {
823 lbs_pr_err("Out of memory allocating beacons\n");
828 /* Initialize scan result lists */
829 INIT_LIST_HEAD(&priv->network_free_list);
830 INIT_LIST_HEAD(&priv->network_list);
831 for (i = 0; i < MAX_NETWORK_COUNT; i++) {
832 list_add_tail(&priv->networks[i].list,
833 &priv->network_free_list);
836 memset(priv->current_addr, 0xff, ETH_ALEN);
838 priv->connect_status = LBS_DISCONNECTED;
839 priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
840 priv->mode = IW_MODE_INFRA;
841 priv->channel = DEFAULT_AD_HOC_CHANNEL;
842 priv->mac_control = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
844 priv->enablehwauto = 1;
845 priv->psmode = LBS802_11POWERMODECAM;
846 priv->psstate = PS_STATE_FULL_POWER;
847 priv->is_deep_sleep = 0;
848 priv->is_auto_deep_sleep_enabled = 0;
849 priv->wakeup_dev_required = 0;
850 init_waitqueue_head(&priv->ds_awake_q);
852 mutex_init(&priv->lock);
854 setup_timer(&priv->command_timer, command_timer_fn,
855 (unsigned long)priv);
856 setup_timer(&priv->auto_deepsleep_timer, auto_deepsleep_timer_fn,
857 (unsigned long)priv);
859 INIT_LIST_HEAD(&priv->cmdfreeq);
860 INIT_LIST_HEAD(&priv->cmdpendingq);
862 spin_lock_init(&priv->driver_lock);
863 init_waitqueue_head(&priv->cmd_pending);
865 /* Allocate the command buffers */
866 if (lbs_allocate_cmd_buffer(priv)) {
867 lbs_pr_err("Out of memory allocating command buffers\n");
872 priv->resp_len[0] = priv->resp_len[1] = 0;
874 /* Create the event FIFO */
875 ret = kfifo_alloc(&priv->event_fifo, sizeof(u32) * 16, GFP_KERNEL);
877 lbs_pr_err("Out of memory allocating event FIFO buffer\n");
882 lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
887 static void lbs_free_adapter(struct lbs_private *priv)
889 lbs_deb_enter(LBS_DEB_MAIN);
891 lbs_free_cmd_buffer(priv);
892 kfifo_free(&priv->event_fifo);
893 del_timer(&priv->command_timer);
894 del_timer(&priv->auto_deepsleep_timer);
895 kfree(priv->networks);
896 priv->networks = NULL;
898 lbs_deb_leave(LBS_DEB_MAIN);
901 static const struct net_device_ops lbs_netdev_ops = {
902 .ndo_open = lbs_dev_open,
903 .ndo_stop = lbs_eth_stop,
904 .ndo_start_xmit = lbs_hard_start_xmit,
905 .ndo_set_mac_address = lbs_set_mac_address,
906 .ndo_tx_timeout = lbs_tx_timeout,
907 .ndo_set_multicast_list = lbs_set_multicast_list,
908 .ndo_change_mtu = eth_change_mtu,
909 .ndo_validate_addr = eth_validate_addr,
913 * @brief This function adds the card. it will probe the
914 * card, allocate the lbs_priv and initialize the device.
916 * @param card A pointer to card
917 * @return A pointer to struct lbs_private structure
919 struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
921 struct net_device *dev;
922 struct wireless_dev *wdev;
923 struct lbs_private *priv = NULL;
925 lbs_deb_enter(LBS_DEB_MAIN);
927 /* Allocate an Ethernet device and register it */
928 wdev = lbs_cfg_alloc(dmdev);
930 lbs_pr_err("cfg80211 init failed\n");
934 wdev->iftype = NL80211_IFTYPE_STATION;
935 priv = wdev_priv(wdev);
938 if (lbs_init_adapter(priv)) {
939 lbs_pr_err("failed to initialize adapter structure.\n");
943 //TODO? dev = alloc_netdev_mq(0, "wlan%d", ether_setup, IWM_TX_QUEUES);
944 dev = alloc_netdev(0, "wlan%d", ether_setup);
946 dev_err(dmdev, "no memory for network device instance\n");
950 dev->ieee80211_ptr = wdev;
952 SET_NETDEV_DEV(dev, dmdev);
956 dev->netdev_ops = &lbs_netdev_ops;
957 dev->watchdog_timeo = 5 * HZ;
958 dev->ethtool_ops = &lbs_ethtool_ops;
960 dev->wireless_handlers = &lbs_handler_def;
962 dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
965 // TODO: kzalloc + iwm_init_default_profile(iwm, iwm->umac_profile); ??
969 priv->infra_open = 0;
972 priv->rtap_net_dev = NULL;
973 strcpy(dev->name, "wlan%d");
975 lbs_deb_thread("Starting main thread...\n");
976 init_waitqueue_head(&priv->waitq);
977 priv->main_thread = kthread_run(lbs_thread, dev, "lbs_main");
978 if (IS_ERR(priv->main_thread)) {
979 lbs_deb_thread("Error creating main thread.\n");
983 priv->work_thread = create_singlethread_workqueue("lbs_worker");
984 INIT_DELAYED_WORK(&priv->assoc_work, lbs_association_worker);
985 INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
986 INIT_WORK(&priv->mcast_work, lbs_set_mcast_worker);
988 priv->wol_criteria = 0xffffffff;
989 priv->wol_gpio = 0xff;
997 lbs_free_adapter(priv);
1005 lbs_deb_leave_args(LBS_DEB_MAIN, "priv %p", priv);
1008 EXPORT_SYMBOL_GPL(lbs_add_card);
1011 void lbs_remove_card(struct lbs_private *priv)
1013 struct net_device *dev = priv->dev;
1015 lbs_deb_enter(LBS_DEB_MAIN);
1017 lbs_remove_mesh(priv);
1018 lbs_remove_rtap(priv);
1022 cancel_delayed_work_sync(&priv->scan_work);
1023 cancel_delayed_work_sync(&priv->assoc_work);
1024 cancel_work_sync(&priv->mcast_work);
1026 /* worker thread destruction blocks on the in-flight command which
1027 * should have been cleared already in lbs_stop_card().
1029 lbs_deb_main("destroying worker thread\n");
1030 destroy_workqueue(priv->work_thread);
1031 lbs_deb_main("done destroying worker thread\n");
1033 if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
1034 priv->psmode = LBS802_11POWERMODECAM;
1035 lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
1038 lbs_send_disconnect_notification(priv);
1040 if (priv->is_deep_sleep) {
1041 priv->is_deep_sleep = 0;
1042 wake_up_interruptible(&priv->ds_awake_q);
1045 /* Stop the thread servicing the interrupts */
1046 priv->surpriseremoved = 1;
1047 kthread_stop(priv->main_thread);
1049 lbs_free_adapter(priv);
1055 lbs_deb_leave(LBS_DEB_MAIN);
1057 EXPORT_SYMBOL_GPL(lbs_remove_card);
1060 static int lbs_rtap_supported(struct lbs_private *priv)
1062 if (MRVL_FW_MAJOR_REV(priv->fwrelease) == MRVL_FW_V5)
1065 /* newer firmware use a capability mask */
1066 return ((MRVL_FW_MAJOR_REV(priv->fwrelease) >= MRVL_FW_V10) &&
1067 (priv->fwcapinfo & MESH_CAPINFO_ENABLE_MASK));
1071 int lbs_start_card(struct lbs_private *priv)
1073 struct net_device *dev = priv->dev;
1076 lbs_deb_enter(LBS_DEB_MAIN);
1078 /* poke the firmware */
1079 ret = lbs_setup_firmware(priv);
1083 if (lbs_cfg_register(priv)) {
1084 lbs_pr_err("cannot register device\n");
1088 lbs_update_channel(priv);
1090 lbs_init_mesh(priv);
1093 * While rtap isn't related to mesh, only mesh-enabled
1094 * firmware implements the rtap functionality via
1095 * CMD_802_11_MONITOR_MODE.
1097 if (lbs_rtap_supported(priv)) {
1098 if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
1099 lbs_pr_err("cannot register lbs_rtap attribute\n");
1102 lbs_debugfs_init_one(priv, dev);
1104 lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);
1109 lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1112 EXPORT_SYMBOL_GPL(lbs_start_card);
1115 void lbs_stop_card(struct lbs_private *priv)
1117 struct net_device *dev;
1118 struct cmd_ctrl_node *cmdnode;
1119 unsigned long flags;
1121 lbs_deb_enter(LBS_DEB_MAIN);
1127 netif_stop_queue(dev);
1128 netif_carrier_off(dev);
1130 lbs_debugfs_remove_one(priv);
1131 lbs_deinit_mesh(priv);
1133 if (lbs_rtap_supported(priv))
1134 device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
1136 /* Delete the timeout of the currently processing command */
1137 del_timer_sync(&priv->command_timer);
1138 del_timer_sync(&priv->auto_deepsleep_timer);
1140 /* Flush pending command nodes */
1141 spin_lock_irqsave(&priv->driver_lock, flags);
1142 lbs_deb_main("clearing pending commands\n");
1143 list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
1144 cmdnode->result = -ENOENT;
1145 cmdnode->cmdwaitqwoken = 1;
1146 wake_up_interruptible(&cmdnode->cmdwait_q);
1149 /* Flush the command the card is currently processing */
1150 if (priv->cur_cmd) {
1151 lbs_deb_main("clearing current command\n");
1152 priv->cur_cmd->result = -ENOENT;
1153 priv->cur_cmd->cmdwaitqwoken = 1;
1154 wake_up_interruptible(&priv->cur_cmd->cmdwait_q);
1156 lbs_deb_main("done clearing commands\n");
1157 spin_unlock_irqrestore(&priv->driver_lock, flags);
1159 unregister_netdev(dev);
1162 lbs_deb_leave(LBS_DEB_MAIN);
1164 EXPORT_SYMBOL_GPL(lbs_stop_card);
1167 void lbs_queue_event(struct lbs_private *priv, u32 event)
1169 unsigned long flags;
1171 lbs_deb_enter(LBS_DEB_THREAD);
1172 spin_lock_irqsave(&priv->driver_lock, flags);
1174 if (priv->psstate == PS_STATE_SLEEP)
1175 priv->psstate = PS_STATE_AWAKE;
1177 kfifo_in(&priv->event_fifo, (unsigned char *) &event, sizeof(u32));
1179 wake_up_interruptible(&priv->waitq);
1181 spin_unlock_irqrestore(&priv->driver_lock, flags);
1182 lbs_deb_leave(LBS_DEB_THREAD);
1184 EXPORT_SYMBOL_GPL(lbs_queue_event);
1186 void lbs_notify_command_response(struct lbs_private *priv, u8 resp_idx)
1188 lbs_deb_enter(LBS_DEB_THREAD);
1190 if (priv->psstate == PS_STATE_SLEEP)
1191 priv->psstate = PS_STATE_AWAKE;
1193 /* Swap buffers by flipping the response index */
1194 BUG_ON(resp_idx > 1);
1195 priv->resp_idx = resp_idx;
1197 wake_up_interruptible(&priv->waitq);
1199 lbs_deb_leave(LBS_DEB_THREAD);
1201 EXPORT_SYMBOL_GPL(lbs_notify_command_response);
1203 static int __init lbs_init_module(void)
1205 lbs_deb_enter(LBS_DEB_MAIN);
1206 memset(&confirm_sleep, 0, sizeof(confirm_sleep));
1207 confirm_sleep.hdr.command = cpu_to_le16(CMD_802_11_PS_MODE);
1208 confirm_sleep.hdr.size = cpu_to_le16(sizeof(confirm_sleep));
1209 confirm_sleep.action = cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
1211 lbs_deb_leave(LBS_DEB_MAIN);
1215 static void __exit lbs_exit_module(void)
1217 lbs_deb_enter(LBS_DEB_MAIN);
1218 lbs_debugfs_remove();
1219 lbs_deb_leave(LBS_DEB_MAIN);
1223 * rtap interface support fuctions
1226 static int lbs_rtap_open(struct net_device *dev)
1228 /* Yes, _stop_ the queue. Because we don't support injection */
1229 lbs_deb_enter(LBS_DEB_MAIN);
1230 netif_carrier_off(dev);
1231 netif_stop_queue(dev);
1232 lbs_deb_leave(LBS_DEB_LEAVE);
1236 static int lbs_rtap_stop(struct net_device *dev)
1238 lbs_deb_enter(LBS_DEB_MAIN);
1239 lbs_deb_leave(LBS_DEB_MAIN);
1243 static netdev_tx_t lbs_rtap_hard_start_xmit(struct sk_buff *skb,
1244 struct net_device *dev)
1246 netif_stop_queue(dev);
1247 return NETDEV_TX_BUSY;
1250 static void lbs_remove_rtap(struct lbs_private *priv)
1252 lbs_deb_enter(LBS_DEB_MAIN);
1253 if (priv->rtap_net_dev == NULL)
1255 unregister_netdev(priv->rtap_net_dev);
1256 free_netdev(priv->rtap_net_dev);
1257 priv->rtap_net_dev = NULL;
1259 lbs_deb_leave(LBS_DEB_MAIN);
1262 static const struct net_device_ops rtap_netdev_ops = {
1263 .ndo_open = lbs_rtap_open,
1264 .ndo_stop = lbs_rtap_stop,
1265 .ndo_start_xmit = lbs_rtap_hard_start_xmit,
1268 static int lbs_add_rtap(struct lbs_private *priv)
1271 struct net_device *rtap_dev;
1273 lbs_deb_enter(LBS_DEB_MAIN);
1274 if (priv->rtap_net_dev) {
1279 rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
1280 if (rtap_dev == NULL) {
1285 memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
1286 rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
1287 rtap_dev->netdev_ops = &rtap_netdev_ops;
1288 rtap_dev->ml_priv = priv;
1289 SET_NETDEV_DEV(rtap_dev, priv->dev->dev.parent);
1291 ret = register_netdev(rtap_dev);
1293 free_netdev(rtap_dev);
1296 priv->rtap_net_dev = rtap_dev;
1299 lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1303 module_init(lbs_init_module);
1304 module_exit(lbs_exit_module);
1306 MODULE_DESCRIPTION("Libertas WLAN Driver Library");
1307 MODULE_AUTHOR("Marvell International Ltd.");
1308 MODULE_LICENSE("GPL");