drivers/staging/brcm80211/brcmsmac/mac80211_if.c

   1 /*
   2  * Copyright (c) 2010 Broadcom Corporation
   3  *
   4  * Permission to use, copy, modify, and/or distribute this software for any
   5  * purpose with or without fee is hereby granted, provided that the above
   6  * copyright notice and this permission notice appear in all copies.
   7  *
   8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
  11  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
  13  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
  14  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15  */
  16
  17 #define __UNDEF_NO_VERSION__
  18
  19 #include <linux/etherdevice.h>
  20 #include <linux/pci.h>
  21 #include <linux/sched.h>
  22 #include <linux/firmware.h>
  23 #include <net/mac80211.h>
  24 #include <defs.h>
  25 #include "nicpci.h"
  26 #include "phy/phy_int.h"
  27 #include "d11.h"
  28 #include "channel.h"
  29 #include "scb.h"
  30 #include "pub.h"
  31 #include "ucode_loader.h"
  32 #include "mac80211_if.h"
  33
  34 #define N_TX_QUEUES     4 /* #tx queues on mac80211<->driver interface */
  35
  36 #define LOCK(wl)        spin_lock_bh(&(wl)->lock)
  37 #define UNLOCK(wl)      spin_unlock_bh(&(wl)->lock)
  38
  39 /* locking from inside brcms_isr */
  40 #define ISR_LOCK(wl, flags)\
  41         do {\
  42                 spin_lock(&(wl)->isr_lock);\
  43                 (void)(flags); } \
  44         while (0)
  45
  46 #define ISR_UNLOCK(wl, flags)\
  47         do {\
  48                 spin_unlock(&(wl)->isr_lock);\
  49                 (void)(flags); } \
  50         while (0)
  51
  52 /* locking under LOCK() to synchronize with brcms_isr */
  53 #define INT_LOCK(wl, flags)     spin_lock_irqsave(&(wl)->isr_lock, flags)
  54 #define INT_UNLOCK(wl, flags)   spin_unlock_irqrestore(&(wl)->isr_lock, flags)
  55
  56 static void brcms_timer(unsigned long data);
  57 static void _brcms_timer(struct brcms_timer *t);
  58
  59
  60 static int ieee_hw_init(struct ieee80211_hw *hw);
  61 static int ieee_hw_rate_init(struct ieee80211_hw *hw);
  62
  63 static int wl_linux_watchdog(void *ctx);
  64
  65 /* Flags we support */
  66 #define MAC_FILTERS (FIF_PROMISC_IN_BSS | \
  67         FIF_ALLMULTI | \
  68         FIF_FCSFAIL | \
  69         FIF_PLCPFAIL | \
  70         FIF_CONTROL | \
  71         FIF_OTHER_BSS | \
  72         FIF_BCN_PRBRESP_PROMISC)
  73
  74 static int n_adapters_found;
  75
  76 static int brcms_request_fw(struct brcms_info *wl, struct pci_dev *pdev);
  77 static void brcms_release_fw(struct brcms_info *wl);
  78
  79 /* local prototypes */
  80 static void brcms_dpc(unsigned long data);
  81 static irqreturn_t brcms_isr(int irq, void *dev_id);
  82
  83 static int __devinit brcms_pci_probe(struct pci_dev *pdev,
  84                                   const struct pci_device_id *ent);
  85 static void brcms_remove(struct pci_dev *pdev);
  86 static void brcms_free(struct brcms_info *wl);
  87 static void brcms_set_basic_rate(struct wl_rateset *rs, u16 rate, bool is_br);
  88
  89 MODULE_AUTHOR("Broadcom Corporation");
  90 MODULE_DESCRIPTION("Broadcom 802.11n wireless LAN driver.");
  91 MODULE_SUPPORTED_DEVICE("Broadcom 802.11n WLAN cards");
  92 MODULE_LICENSE("Dual BSD/GPL");
  93
  94 /* recognized PCI IDs */
  95 static DEFINE_PCI_DEVICE_TABLE(brcms_pci_id_table) = {
  96         {PCI_VENDOR_ID_BROADCOM, 0x4357, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0},      /* 43225 2G */
  97         {PCI_VENDOR_ID_BROADCOM, 0x4353, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0},      /* 43224 DUAL */
  98         {PCI_VENDOR_ID_BROADCOM, 0x4727, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0},      /* 4313 DUAL */
  99         /* 43224 Ven */
 100         {PCI_VENDOR_ID_BROADCOM, 0x0576, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
 101         {0}
 102 };
 103
 104 MODULE_DEVICE_TABLE(pci, brcms_pci_id_table);
 105
 106 #ifdef BCMDBG
 107 static int msglevel = 0xdeadbeef;
 108 module_param(msglevel, int, 0);
 109 static int phymsglevel = 0xdeadbeef;
 110 module_param(phymsglevel, int, 0);
 111 #endif                          /* BCMDBG */
 112
 113 #define HW_TO_WL(hw)     (hw->priv)
 114 #define WL_TO_HW(wl)      (wl->pub->ieee_hw)
 115
 116 /* MAC80211 callback functions */
 117 static int brcms_ops_start(struct ieee80211_hw *hw);
 118 static void brcms_ops_stop(struct ieee80211_hw *hw);
 119 static int brcms_ops_add_interface(struct ieee80211_hw *hw,
 120                                 struct ieee80211_vif *vif);
 121 static void brcms_ops_remove_interface(struct ieee80211_hw *hw,
 122                                     struct ieee80211_vif *vif);
 123 static int brcms_ops_config(struct ieee80211_hw *hw, u32 changed);
 124 static void brcms_ops_bss_info_changed(struct ieee80211_hw *hw,
 125                                     struct ieee80211_vif *vif,
 126                                     struct ieee80211_bss_conf *info,
 127                                     u32 changed);
 128 static void brcms_ops_configure_filter(struct ieee80211_hw *hw,
 129                                     unsigned int changed_flags,
 130                                     unsigned int *total_flags, u64 multicast);
 131 static int brcms_ops_set_tim(struct ieee80211_hw *hw, struct ieee80211_sta *sta,
 132                           bool set);
 133 static void brcms_ops_sw_scan_start(struct ieee80211_hw *hw);
 134 static void brcms_ops_sw_scan_complete(struct ieee80211_hw *hw);
 135 static void brcms_ops_set_tsf(struct ieee80211_hw *hw, u64 tsf);
 136 static int brcms_ops_get_stats(struct ieee80211_hw *hw,
 137                             struct ieee80211_low_level_stats *stats);
 138 static void brcms_ops_sta_notify(struct ieee80211_hw *hw,
 139                               struct ieee80211_vif *vif,
 140                               enum sta_notify_cmd cmd,
 141                               struct ieee80211_sta *sta);
 142 static int brcms_ops_conf_tx(struct ieee80211_hw *hw, u16 queue,
 143                           const struct ieee80211_tx_queue_params *params);
 144 static u64 brcms_ops_get_tsf(struct ieee80211_hw *hw);
 145 static int brcms_ops_sta_add(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
 146                       struct ieee80211_sta *sta);
 147 static int brcms_ops_sta_remove(struct ieee80211_hw *hw,
 148                                 struct ieee80211_vif *vif,
 149                                 struct ieee80211_sta *sta);
 150 static int brcms_ops_ampdu_action(struct ieee80211_hw *hw,
 151                                struct ieee80211_vif *vif,
 152                                enum ieee80211_ampdu_mlme_action action,
 153                                struct ieee80211_sta *sta, u16 tid, u16 *ssn,
 154                                u8 buf_size);
 155 static void brcms_ops_rfkill_poll(struct ieee80211_hw *hw);
 156 static void brcms_ops_flush(struct ieee80211_hw *hw, bool drop);
 157
 158 static void brcms_ops_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
 159 {
 160         struct brcms_info *wl = hw->priv;
 161
 162         LOCK(wl);
 163         if (!wl->pub->up) {
 164                 wiphy_err(wl->wiphy, "ops->tx called while down\n");
 165                 kfree_skb(skb);
 166                 goto done;
 167         }
 168         brcms_c_sendpkt_mac80211(wl->wlc, skb, hw);
 169  done:
 170         UNLOCK(wl);
 171 }
 172
 173 static int brcms_ops_start(struct ieee80211_hw *hw)
 174 {
 175         struct brcms_info *wl = hw->priv;
 176         bool blocked;
 177         /*
 178           struct ieee80211_channel *curchan = hw->conf.channel;
 179         */
 180
 181         ieee80211_wake_queues(hw);
 182         LOCK(wl);
 183         blocked = brcms_rfkill_set_hw_state(wl);
 184         UNLOCK(wl);
 185         if (!blocked)
 186                 wiphy_rfkill_stop_polling(wl->pub->ieee_hw->wiphy);
 187
 188         return 0;
 189 }
 190
 191 static void brcms_ops_stop(struct ieee80211_hw *hw)
 192 {
 193         ieee80211_stop_queues(hw);
 194 }
 195
 196 static int
 197 brcms_ops_add_interface(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
 198 {
 199         struct brcms_info *wl;
 200         int err;
 201
 202         /* Just STA for now */
 203         if (vif->type != NL80211_IFTYPE_AP &&
 204             vif->type != NL80211_IFTYPE_MESH_POINT &&
 205             vif->type != NL80211_IFTYPE_STATION &&
 206             vif->type != NL80211_IFTYPE_WDS &&
 207             vif->type != NL80211_IFTYPE_ADHOC) {
 208                 wiphy_err(hw->wiphy, "%s: Attempt to add type %d, only"
 209                           " STA for now\n", __func__, vif->type);
 210                 return -EOPNOTSUPP;
 211         }
 212
 213         wl = HW_TO_WL(hw);
 214         LOCK(wl);
 215         err = brcms_up(wl);
 216         UNLOCK(wl);
 217
 218         if (err != 0) {
 219                 wiphy_err(hw->wiphy, "%s: brcms_up() returned %d\n", __func__,
 220                           err);
 221         }
 222         return err;
 223 }
 224
 225 static void
 226 brcms_ops_remove_interface(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
 227 {
 228         struct brcms_info *wl;
 229
 230         wl = HW_TO_WL(hw);
 231
 232         /* put driver in down state */
 233         LOCK(wl);
 234         brcms_down(wl);
 235         UNLOCK(wl);
 236 }
 237
 238 /*
 239  * precondition: perimeter lock has been acquired
 240  */
 241 static int
 242 ieee_set_channel(struct ieee80211_hw *hw, struct ieee80211_channel *chan,
 243                  enum nl80211_channel_type type)
 244 {
 245         struct brcms_info *wl = HW_TO_WL(hw);
 246         int err = 0;
 247
 248         switch (type) {
 249         case NL80211_CHAN_HT20:
 250         case NL80211_CHAN_NO_HT:
 251                 err = brcms_c_set(wl->wlc, WLC_SET_CHANNEL, chan->hw_value);
 252                 break;
 253         case NL80211_CHAN_HT40MINUS:
 254         case NL80211_CHAN_HT40PLUS:
 255                 wiphy_err(hw->wiphy,
 256                           "%s: Need to implement 40 Mhz Channels!\n", __func__);
 257                 err = 1;
 258                 break;
 259         }
 260
 261         if (err)
 262                 return -EIO;
 263         return err;
 264 }
 265
 266 static int brcms_ops_config(struct ieee80211_hw *hw, u32 changed)
 267 {
 268         struct ieee80211_conf *conf = &hw->conf;
 269         struct brcms_info *wl = HW_TO_WL(hw);
 270         int err = 0;
 271         int new_int;
 272         struct wiphy *wiphy = hw->wiphy;
 273
 274         LOCK(wl);
 275         if (changed & IEEE80211_CONF_CHANGE_LISTEN_INTERVAL) {
 276                 if (brcms_c_set_par(wl->wlc, IOV_BCN_LI_BCN,
 277                                     conf->listen_interval) < 0) {
 278                         wiphy_err(wiphy, "%s: Error setting listen_interval\n",
 279                                   __func__);
 280                         err = -EIO;
 281                         goto config_out;
 282                 }
 283                 brcms_c_get_par(wl->wlc, IOV_BCN_LI_BCN, &new_int);
 284         }
 285         if (changed & IEEE80211_CONF_CHANGE_MONITOR)
 286                 wiphy_err(wiphy, "%s: change monitor mode: %s (implement)\n",
 287                           __func__, conf->flags & IEEE80211_CONF_MONITOR ?
 288                           "true" : "false");
 289         if (changed & IEEE80211_CONF_CHANGE_PS)
 290                 wiphy_err(wiphy, "%s: change power-save mode: %s (implement)\n",
 291                           __func__, conf->flags & IEEE80211_CONF_PS ?
 292                           "true" : "false");
 293
 294         if (changed & IEEE80211_CONF_CHANGE_POWER) {
 295                 if (brcms_c_set_par(wl->wlc, IOV_QTXPOWER,
 296                                     conf->power_level * 4) < 0) {
 297                         wiphy_err(wiphy, "%s: Error setting power_level\n",
 298                                   __func__);
 299                         err = -EIO;
 300                         goto config_out;
 301                 }
 302                 brcms_c_get_par(wl->wlc, IOV_QTXPOWER, &new_int);
 303                 if (new_int != (conf->power_level * 4))
 304                         wiphy_err(wiphy, "%s: Power level req != actual, %d %d"
 305                                   "\n", __func__, conf->power_level * 4,
 306                                   new_int);
 307         }
 308         if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
 309                 err = ieee_set_channel(hw, conf->channel, conf->channel_type);
 310         }
 311         if (changed & IEEE80211_CONF_CHANGE_RETRY_LIMITS) {
 312                 if (brcms_c_set
 313                     (wl->wlc, WLC_SET_SRL,
 314                      conf->short_frame_max_tx_count) < 0) {
 315                         wiphy_err(wiphy, "%s: Error setting srl\n", __func__);
 316                         err = -EIO;
 317                         goto config_out;
 318                 }
 319                 if (brcms_c_set(wl->wlc, WLC_SET_LRL,
 320                                 conf->long_frame_max_tx_count) < 0) {
 321                         wiphy_err(wiphy, "%s: Error setting lrl\n", __func__);
 322                         err = -EIO;
 323                         goto config_out;
 324                 }
 325         }
 326
 327  config_out:
 328         UNLOCK(wl);
 329         return err;
 330 }
 331
 332 static void
 333 brcms_ops_bss_info_changed(struct ieee80211_hw *hw,
 334                         struct ieee80211_vif *vif,
 335                         struct ieee80211_bss_conf *info, u32 changed)
 336 {
 337         struct brcms_info *wl = HW_TO_WL(hw);
 338         struct wiphy *wiphy = hw->wiphy;
 339         int val;
 340
 341         if (changed & BSS_CHANGED_ASSOC) {
 342                 /* association status changed (associated/disassociated)
 343                  * also implies a change in the AID.
 344                  */
 345                 wiphy_err(wiphy, "%s: %s: %sassociated\n", KBUILD_MODNAME,
 346                           __func__, info->assoc ? "" : "dis");
 347                 LOCK(wl);
 348                 brcms_c_associate_upd(wl->wlc, info->assoc);
 349                 UNLOCK(wl);
 350         }
 351         if (changed & BSS_CHANGED_ERP_SLOT) {
 352                 /* slot timing changed */
 353                 if (info->use_short_slot)
 354                         val = 1;
 355                 else
 356                         val = 0;
 357                 LOCK(wl);
 358                 brcms_c_set(wl->wlc, WLC_SET_SHORTSLOT_OVERRIDE, val);
 359                 UNLOCK(wl);
 360         }
 361
 362         if (changed & BSS_CHANGED_HT) {
 363                 /* 802.11n parameters changed */
 364                 u16 mode = info->ht_operation_mode;
 365
 366                 LOCK(wl);
 367                 brcms_c_protection_upd(wl->wlc, WLC_PROT_N_CFG,
 368                         mode & IEEE80211_HT_OP_MODE_PROTECTION);
 369                 brcms_c_protection_upd(wl->wlc, WLC_PROT_N_NONGF,
 370                         mode & IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT);
 371                 brcms_c_protection_upd(wl->wlc, WLC_PROT_N_OBSS,
 372                         mode & IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT);
 373                 UNLOCK(wl);
 374         }
 375         if (changed & BSS_CHANGED_BASIC_RATES) {
 376                 struct ieee80211_supported_band *bi;
 377                 u32 br_mask, i;
 378                 u16 rate;
 379                 struct wl_rateset rs;
 380                 int error;
 381
 382                 /* retrieve the current rates */
 383                 LOCK(wl);
 384                 error = brcms_c_ioctl(wl->wlc, WLC_GET_CURR_RATESET,
 385                                   &rs, sizeof(rs), NULL);
 386                 UNLOCK(wl);
 387                 if (error) {
 388                         wiphy_err(wiphy, "%s: retrieve rateset failed: %d\n",
 389                                   __func__, error);
 390                         return;
 391                 }
 392                 br_mask = info->basic_rates;
 393                 bi = hw->wiphy->bands[brcms_c_get_curband(wl->wlc)];
 394                 for (i = 0; i < bi->n_bitrates; i++) {
 395                         /* convert to internal rate value */
 396                         rate = (bi->bitrates[i].bitrate << 1) / 10;
 397
 398                         /* set/clear basic rate flag */
 399                         brcms_set_basic_rate(&rs, rate, br_mask & 1);
 400                         br_mask >>= 1;
 401                 }
 402
 403                 /* update the rate set */
 404                 LOCK(wl);
 405                 brcms_c_ioctl(wl->wlc, WLC_SET_RATESET, &rs, sizeof(rs), NULL);
 406                 UNLOCK(wl);
 407         }
 408         if (changed & BSS_CHANGED_BEACON_INT) {
 409                 /* Beacon interval changed */
 410                 LOCK(wl);
 411                 brcms_c_set(wl->wlc, WLC_SET_BCNPRD, info->beacon_int);
 412                 UNLOCK(wl);
 413         }
 414         if (changed & BSS_CHANGED_BSSID) {
 415                 /* BSSID changed, for whatever reason (IBSS and managed mode) */
 416                 LOCK(wl);
 417                 brcms_c_set_addrmatch(wl->wlc, RCM_BSSID_OFFSET,
 418                                   info->bssid);
 419                 UNLOCK(wl);
 420         }
 421         if (changed & BSS_CHANGED_BEACON) {
 422                 /* Beacon data changed, retrieve new beacon (beaconing modes) */
 423                 wiphy_err(wiphy, "%s: beacon changed\n", __func__);
 424         }
 425         if (changed & BSS_CHANGED_BEACON_ENABLED) {
 426                 /* Beaconing should be enabled/disabled (beaconing modes) */
 427                 wiphy_err(wiphy, "%s: Beacon enabled: %s\n", __func__,
 428                           info->enable_beacon ? "true" : "false");
 429         }
 430         if (changed & BSS_CHANGED_CQM) {
 431                 /* Connection quality monitor config changed */
 432                 wiphy_err(wiphy, "%s: cqm change: threshold %d, hys %d "
 433                           " (implement)\n", __func__, info->cqm_rssi_thold,
 434                           info->cqm_rssi_hyst);
 435         }
 436         if (changed & BSS_CHANGED_IBSS) {
 437                 /* IBSS join status changed */
 438                 wiphy_err(wiphy, "%s: IBSS joined: %s (implement)\n", __func__,
 439                           info->ibss_joined ? "true" : "false");
 440         }
 441         if (changed & BSS_CHANGED_ARP_FILTER) {
 442                 /* Hardware ARP filter address list or state changed */
 443                 wiphy_err(wiphy, "%s: arp filtering: enabled %s, count %d"
 444                           " (implement)\n", __func__, info->arp_filter_enabled ?
 445                           "true" : "false", info->arp_addr_cnt);
 446         }
 447         if (changed & BSS_CHANGED_QOS) {
 448                 /*
 449                  * QoS for this association was enabled/disabled.
 450                  * Note that it is only ever disabled for station mode.
 451                  */
 452                 wiphy_err(wiphy, "%s: qos enabled: %s (implement)\n", __func__,
 453                           info->qos ? "true" : "false");
 454         }
 455         if (changed & BSS_CHANGED_IDLE) {
 456                 /* Idle changed for this BSS/interface */
 457                 wiphy_err(wiphy, "%s: BSS idle: %s (implement)\n", __func__,
 458                           info->idle ? "true" : "false");
 459         }
 460         return;
 461 }
 462
 463 static void
 464 brcms_ops_configure_filter(struct ieee80211_hw *hw,
 465                         unsigned int changed_flags,
 466                         unsigned int *total_flags, u64 multicast)
 467 {
 468         struct brcms_info *wl = hw->priv;
 469         struct wiphy *wiphy = hw->wiphy;
 470
 471         changed_flags &= MAC_FILTERS;
 472         *total_flags &= MAC_FILTERS;
 473         if (changed_flags & FIF_PROMISC_IN_BSS)
 474                 wiphy_err(wiphy, "FIF_PROMISC_IN_BSS\n");
 475         if (changed_flags & FIF_ALLMULTI)
 476                 wiphy_err(wiphy, "FIF_ALLMULTI\n");
 477         if (changed_flags & FIF_FCSFAIL)
 478                 wiphy_err(wiphy, "FIF_FCSFAIL\n");
 479         if (changed_flags & FIF_PLCPFAIL)
 480                 wiphy_err(wiphy, "FIF_PLCPFAIL\n");
 481         if (changed_flags & FIF_CONTROL)
 482                 wiphy_err(wiphy, "FIF_CONTROL\n");
 483         if (changed_flags & FIF_OTHER_BSS)
 484                 wiphy_err(wiphy, "FIF_OTHER_BSS\n");
 485         if (changed_flags & FIF_BCN_PRBRESP_PROMISC) {
 486                 LOCK(wl);
 487                 if (*total_flags & FIF_BCN_PRBRESP_PROMISC) {
 488                         wl->pub->mac80211_state |= MAC80211_PROMISC_BCNS;
 489                         brcms_c_mac_bcn_promisc_change(wl->wlc, 1);
 490                 } else {
 491                         brcms_c_mac_bcn_promisc_change(wl->wlc, 0);
 492                         wl->pub->mac80211_state &= ~MAC80211_PROMISC_BCNS;
 493                 }
 494                 UNLOCK(wl);
 495         }
 496         return;
 497 }
 498
 499 static int
 500 brcms_ops_set_tim(struct ieee80211_hw *hw, struct ieee80211_sta *sta, bool set)
 501 {
 502         return 0;
 503 }
 504
 505 static void brcms_ops_sw_scan_start(struct ieee80211_hw *hw)
 506 {
 507         struct brcms_info *wl = hw->priv;
 508         LOCK(wl);
 509         brcms_c_scan_start(wl->wlc);
 510         UNLOCK(wl);
 511         return;
 512 }
 513
 514 static void brcms_ops_sw_scan_complete(struct ieee80211_hw *hw)
 515 {
 516         struct brcms_info *wl = hw->priv;
 517         LOCK(wl);
 518         brcms_c_scan_stop(wl->wlc);
 519         UNLOCK(wl);
 520         return;
 521 }
 522
 523 static void brcms_ops_set_tsf(struct ieee80211_hw *hw, u64 tsf)
 524 {
 525         wiphy_err(hw->wiphy, "%s: Enter\n", __func__);
 526         return;
 527 }
 528
 529 static int
 530 brcms_ops_get_stats(struct ieee80211_hw *hw,
 531                  struct ieee80211_low_level_stats *stats)
 532 {
 533         struct brcms_info *wl = hw->priv;
 534         struct wl_cnt *cnt;
 535
 536         LOCK(wl);
 537         cnt = wl->pub->_cnt;
 538         stats->dot11ACKFailureCount = 0;
 539         stats->dot11RTSFailureCount = 0;
 540         stats->dot11FCSErrorCount = 0;
 541         stats->dot11RTSSuccessCount = 0;
 542         UNLOCK(wl);
 543         return 0;
 544 }
 545
 546 static void
 547 brcms_ops_sta_notify(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
 548                   enum sta_notify_cmd cmd, struct ieee80211_sta *sta)
 549 {
 550         switch (cmd) {
 551         default:
 552                 wiphy_err(hw->wiphy, "%s: Unknown cmd = %d\n", __func__,
 553                           cmd);
 554                 break;
 555         }
 556         return;
 557 }
 558
 559 static int
 560 brcms_ops_conf_tx(struct ieee80211_hw *hw, u16 queue,
 561                const struct ieee80211_tx_queue_params *params)
 562 {
 563         struct brcms_info *wl = hw->priv;
 564
 565         LOCK(wl);
 566         brcms_c_wme_setparams(wl->wlc, queue, params, true);
 567         UNLOCK(wl);
 568
 569         return 0;
 570 }
 571
 572 static u64 brcms_ops_get_tsf(struct ieee80211_hw *hw)
 573 {
 574         wiphy_err(hw->wiphy, "%s: Enter\n", __func__);
 575         return 0;
 576 }
 577
 578 static int
 579 brcms_ops_sta_add(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
 580                struct ieee80211_sta *sta)
 581 {
 582         struct scb *scb;
 583
 584         int i;
 585         struct brcms_info *wl = hw->priv;
 586
 587         /* Init the scb */
 588         scb = (struct scb *)sta->drv_priv;
 589         memset(scb, 0, sizeof(struct scb));
 590         for (i = 0; i < NUMPRIO; i++)
 591                 scb->seqctl[i] = 0xFFFF;
 592         scb->seqctl_nonqos = 0xFFFF;
 593         scb->magic = SCB_MAGIC;
 594
 595         wl->pub->global_scb = scb;
 596         wl->pub->global_ampdu = &(scb->scb_ampdu);
 597         wl->pub->global_ampdu->scb = scb;
 598         wl->pub->global_ampdu->max_pdu = 16;
 599         brcmu_pktq_init(&scb->scb_ampdu.txq, AMPDU_MAX_SCB_TID,
 600                   AMPDU_MAX_SCB_TID * PKTQ_LEN_DEFAULT);
 601
 602         sta->ht_cap.ht_supported = true;
 603         sta->ht_cap.ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
 604         sta->ht_cap.ampdu_density = AMPDU_DEF_MPDU_DENSITY;
 605         sta->ht_cap.cap = IEEE80211_HT_CAP_GRN_FLD |
 606             IEEE80211_HT_CAP_SGI_20 |
 607             IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_40MHZ_INTOLERANT;
 608
 609         /* minstrel_ht initiates addBA on our behalf by calling ieee80211_start_tx_ba_session() */
 610         return 0;
 611 }
 612
 613 static int
 614 brcms_ops_sta_remove(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
 615                   struct ieee80211_sta *sta)
 616 {
 617         return 0;
 618 }
 619
 620 static int
 621 brcms_ops_ampdu_action(struct ieee80211_hw *hw,
 622                     struct ieee80211_vif *vif,
 623                     enum ieee80211_ampdu_mlme_action action,
 624                     struct ieee80211_sta *sta, u16 tid, u16 *ssn,
 625                     u8 buf_size)
 626 {
 627         struct scb *scb = (struct scb *)sta->drv_priv;
 628         struct brcms_info *wl = hw->priv;
 629         int status;
 630
 631         if (WARN_ON(scb->magic != SCB_MAGIC))
 632                 return -EIDRM;
 633         switch (action) {
 634         case IEEE80211_AMPDU_RX_START:
 635                 break;
 636         case IEEE80211_AMPDU_RX_STOP:
 637                 break;
 638         case IEEE80211_AMPDU_TX_START:
 639                 LOCK(wl);
 640                 status = brcms_c_aggregatable(wl->wlc, tid);
 641                 UNLOCK(wl);
 642                 if (!status) {
 643                         wiphy_err(wl->wiphy, "START: tid %d is not agg\'able\n",
 644                                   tid);
 645                         return -EINVAL;
 646                 }
 647                 /* XXX: Use the starting sequence number provided ... */
 648                 *ssn = 0;
 649                 ieee80211_start_tx_ba_cb_irqsafe(vif, sta->addr, tid);
 650                 break;
 651
 652         case IEEE80211_AMPDU_TX_STOP:
 653                 LOCK(wl);
 654                 brcms_c_ampdu_flush(wl->wlc, sta, tid);
 655                 UNLOCK(wl);
 656                 ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
 657                 break;
 658         case IEEE80211_AMPDU_TX_OPERATIONAL:
 659                 /*
 660                  * BA window size from ADDBA response ('buf_size') defines how
 661                  * many outstanding MPDUs are allowed for the BA stream by
 662                  * recipient and traffic class.
 663                  */
 664                 LOCK(wl);
 665                 brcms_c_ampdu_tx_operational(wl->wlc, tid, buf_size);
 666                 UNLOCK(wl);
 667                 /* Power save wakeup */
 668                 break;
 669         default:
 670                 wiphy_err(wl->wiphy, "%s: Invalid command, ignoring\n",
 671                           __func__);
 672         }
 673
 674         return 0;
 675 }
 676
 677 static void brcms_ops_rfkill_poll(struct ieee80211_hw *hw)
 678 {
 679         struct brcms_info *wl = HW_TO_WL(hw);
 680         bool blocked;
 681
 682         LOCK(wl);
 683         blocked = brcms_c_check_radio_disabled(wl->wlc);
 684         UNLOCK(wl);
 685
 686         wiphy_rfkill_set_hw_state(wl->pub->ieee_hw->wiphy, blocked);
 687 }
 688
 689 static void brcms_ops_flush(struct ieee80211_hw *hw, bool drop)
 690 {
 691         struct brcms_info *wl = HW_TO_WL(hw);
 692
 693         no_printk("%s: drop = %s\n", __func__, drop ? "true" : "false");
 694
 695         /* wait for packet queue and dma fifos to run empty */
 696         LOCK(wl);
 697         brcms_c_wait_for_tx_completion(wl->wlc, drop);
 698         UNLOCK(wl);
 699 }
 700
 701 static const struct ieee80211_ops brcms_ops = {
 702         .tx = brcms_ops_tx,
 703         .start = brcms_ops_start,
 704         .stop = brcms_ops_stop,
 705         .add_interface = brcms_ops_add_interface,
 706         .remove_interface = brcms_ops_remove_interface,
 707         .config = brcms_ops_config,
 708         .bss_info_changed = brcms_ops_bss_info_changed,
 709         .configure_filter = brcms_ops_configure_filter,
 710         .set_tim = brcms_ops_set_tim,
 711         .sw_scan_start = brcms_ops_sw_scan_start,
 712         .sw_scan_complete = brcms_ops_sw_scan_complete,
 713         .set_tsf = brcms_ops_set_tsf,
 714         .get_stats = brcms_ops_get_stats,
 715         .sta_notify = brcms_ops_sta_notify,
 716         .conf_tx = brcms_ops_conf_tx,
 717         .get_tsf = brcms_ops_get_tsf,
 718         .sta_add = brcms_ops_sta_add,
 719         .sta_remove = brcms_ops_sta_remove,
 720         .ampdu_action = brcms_ops_ampdu_action,
 721         .rfkill_poll = brcms_ops_rfkill_poll,
 722         .flush = brcms_ops_flush,
 723 };
 724
 725 /*
 726  * is called in brcms_pci_probe() context, therefore no locking required.
 727  */
 728 static int brcms_set_hint(struct brcms_info *wl, char *abbrev)
 729 {
 730         return regulatory_hint(wl->pub->ieee_hw->wiphy, abbrev);
 731 }
 732
 733 /**
 734  * attach to the WL device.
 735  *
 736  * Attach to the WL device identified by vendor and device parameters.
 737  * regs is a host accessible memory address pointing to WL device registers.
 738  *
 739  * brcms_attach is not defined as static because in the case where no bus
 740  * is defined, wl_attach will never be called, and thus, gcc will issue
 741  * a warning that this function is defined but not used if we declare
 742  * it as static.
 743  *
 744  *
 745  * is called in brcms_pci_probe() context, therefore no locking required.
 746  */
 747 static struct brcms_info *brcms_attach(u16 vendor, u16 device,
 748                                        unsigned long regs,
 749                             uint bustype, void *btparam, uint irq)
 750 {
 751         struct brcms_info *wl = NULL;
 752         int unit, err;
 753         unsigned long base_addr;
 754         struct ieee80211_hw *hw;
 755         u8 perm[ETH_ALEN];
 756
 757         unit = n_adapters_found;
 758         err = 0;
 759
 760         if (unit < 0) {
 761                 return NULL;
 762         }
 763
 764         /* allocate private info */
 765         hw = pci_get_drvdata(btparam);  /* btparam == pdev */
 766         if (hw != NULL)
 767                 wl = hw->priv;
 768         if (WARN_ON(hw == NULL) || WARN_ON(wl == NULL))
 769                 return NULL;
 770         wl->wiphy = hw->wiphy;
 771
 772         atomic_set(&wl->callbacks, 0);
 773
 774         /* setup the bottom half handler */
 775         tasklet_init(&wl->tasklet, brcms_dpc, (unsigned long) wl);
 776
 777
 778
 779         base_addr = regs;
 780
 781         if (bustype == PCI_BUS || bustype == RPC_BUS) {
 782                 /* Do nothing */
 783         } else {
 784                 bustype = PCI_BUS;
 785                 BCMMSG(wl->wiphy, "force to PCI\n");
 786         }
 787         wl->bcm_bustype = bustype;
 788
 789         wl->regsva = ioremap_nocache(base_addr, PCI_BAR0_WINSZ);
 790         if (wl->regsva == NULL) {
 791                 wiphy_err(wl->wiphy, "wl%d: ioremap() failed\n", unit);
 792                 goto fail;
 793         }
 794         spin_lock_init(&wl->lock);
 795         spin_lock_init(&wl->isr_lock);
 796
 797         /* prepare ucode */
 798         if (brcms_request_fw(wl, (struct pci_dev *)btparam) < 0) {
 799                 wiphy_err(wl->wiphy, "%s: Failed to find firmware usually in "
 800                           "%s\n", KBUILD_MODNAME, "/lib/firmware/brcm");
 801                 brcms_release_fw(wl);
 802                 brcms_remove((struct pci_dev *)btparam);
 803                 return NULL;
 804         }
 805
 806         /* common load-time initialization */
 807         wl->wlc = brcms_c_attach((void *)wl, vendor, device, unit, false,
 808                              wl->regsva, wl->bcm_bustype, btparam, &err);
 809         brcms_release_fw(wl);
 810         if (!wl->wlc) {
 811                 wiphy_err(wl->wiphy, "%s: attach() failed with code %d\n",
 812                           KBUILD_MODNAME, err);
 813                 goto fail;
 814         }
 815         wl->pub = brcms_c_pub(wl->wlc);
 816
 817         wl->pub->ieee_hw = hw;
 818
 819         if (brcms_c_set_par(wl->wlc, IOV_MPC, 0) < 0) {
 820                 wiphy_err(wl->wiphy, "wl%d: Error setting MPC variable to 0\n",
 821                           unit);
 822         }
 823
 824         /* register our interrupt handler */
 825         if (request_irq(irq, brcms_isr, IRQF_SHARED, KBUILD_MODNAME, wl)) {
 826                 wiphy_err(wl->wiphy, "wl%d: request_irq() failed\n", unit);
 827                 goto fail;
 828         }
 829         wl->irq = irq;
 830
 831         /* register module */
 832         brcms_c_module_register(wl->pub, "linux", wl, wl_linux_watchdog, NULL);
 833
 834         if (ieee_hw_init(hw)) {
 835                 wiphy_err(wl->wiphy, "wl%d: %s: ieee_hw_init failed!\n", unit,
 836                           __func__);
 837                 goto fail;
 838         }
 839
 840         memcpy(perm, &wl->pub->cur_etheraddr, ETH_ALEN);
 841         if (WARN_ON(!is_valid_ether_addr(perm)))
 842                 goto fail;
 843         SET_IEEE80211_PERM_ADDR(hw, perm);
 844
 845         err = ieee80211_register_hw(hw);
 846         if (err) {
 847                 wiphy_err(wl->wiphy, "%s: ieee80211_register_hw failed, status"
 848                           "%d\n", __func__, err);
 849         }
 850
 851         if (wl->pub->srom_ccode[0])
 852                 err = brcms_set_hint(wl, wl->pub->srom_ccode);
 853         else
 854                 err = brcms_set_hint(wl, "US");
 855         if (err) {
 856                 wiphy_err(wl->wiphy, "%s: regulatory_hint failed, status %d\n",
 857                           __func__, err);
 858         }
 859
 860         n_adapters_found++;
 861         return wl;
 862
 863 fail:
 864         brcms_free(wl);
 865         return NULL;
 866 }
 867
 868
 869
 870 #define CHAN2GHZ(channel, freqency, chflags)  { \
 871         .band = IEEE80211_BAND_2GHZ, \
 872         .center_freq = (freqency), \
 873         .hw_value = (channel), \
 874         .flags = chflags, \
 875         .max_antenna_gain = 0, \
 876         .max_power = 19, \
 877 }
 878
 879 static struct ieee80211_channel brcms_2ghz_chantable[] = {
 880         CHAN2GHZ(1, 2412, IEEE80211_CHAN_NO_HT40MINUS),
 881         CHAN2GHZ(2, 2417, IEEE80211_CHAN_NO_HT40MINUS),
 882         CHAN2GHZ(3, 2422, IEEE80211_CHAN_NO_HT40MINUS),
 883         CHAN2GHZ(4, 2427, IEEE80211_CHAN_NO_HT40MINUS),
 884         CHAN2GHZ(5, 2432, 0),
 885         CHAN2GHZ(6, 2437, 0),
 886         CHAN2GHZ(7, 2442, 0),
 887         CHAN2GHZ(8, 2447, IEEE80211_CHAN_NO_HT40PLUS),
 888         CHAN2GHZ(9, 2452, IEEE80211_CHAN_NO_HT40PLUS),
 889         CHAN2GHZ(10, 2457, IEEE80211_CHAN_NO_HT40PLUS),
 890         CHAN2GHZ(11, 2462, IEEE80211_CHAN_NO_HT40PLUS),
 891         CHAN2GHZ(12, 2467,
 892                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_IBSS |
 893                  IEEE80211_CHAN_NO_HT40PLUS),
 894         CHAN2GHZ(13, 2472,
 895                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_IBSS |
 896                  IEEE80211_CHAN_NO_HT40PLUS),
 897         CHAN2GHZ(14, 2484,
 898                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_IBSS |
 899                  IEEE80211_CHAN_NO_HT40PLUS | IEEE80211_CHAN_NO_HT40MINUS)
 900 };
 901
 902 #define CHAN5GHZ(channel, chflags)  { \
 903         .band = IEEE80211_BAND_5GHZ, \
 904         .center_freq = 5000 + 5*(channel), \
 905         .hw_value = (channel), \
 906         .flags = chflags, \
 907         .max_antenna_gain = 0, \
 908         .max_power = 21, \
 909 }
 910
 911 static struct ieee80211_channel brcms_5ghz_nphy_chantable[] = {
 912         /* UNII-1 */
 913         CHAN5GHZ(36, IEEE80211_CHAN_NO_HT40MINUS),
 914         CHAN5GHZ(40, IEEE80211_CHAN_NO_HT40PLUS),
 915         CHAN5GHZ(44, IEEE80211_CHAN_NO_HT40MINUS),
 916         CHAN5GHZ(48, IEEE80211_CHAN_NO_HT40PLUS),
 917         /* UNII-2 */
 918         CHAN5GHZ(52,
 919                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 920                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40MINUS),
 921         CHAN5GHZ(56,
 922                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 923                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS),
 924         CHAN5GHZ(60,
 925                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 926                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40MINUS),
 927         CHAN5GHZ(64,
 928                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 929                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS),
 930         /* MID */
 931         CHAN5GHZ(100,
 932                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 933                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40MINUS),
 934         CHAN5GHZ(104,
 935                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 936                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS),
 937         CHAN5GHZ(108,
 938                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 939                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40MINUS),
 940         CHAN5GHZ(112,
 941                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 942                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS),
 943         CHAN5GHZ(116,
 944                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 945                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40MINUS),
 946         CHAN5GHZ(120,
 947                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 948                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS),
 949         CHAN5GHZ(124,
 950                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 951                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40MINUS),
 952         CHAN5GHZ(128,
 953                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 954                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS),
 955         CHAN5GHZ(132,
 956                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 957                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40MINUS),
 958         CHAN5GHZ(136,
 959                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 960                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS),
 961         CHAN5GHZ(140,
 962                  IEEE80211_CHAN_RADAR | IEEE80211_CHAN_NO_IBSS |
 963                  IEEE80211_CHAN_PASSIVE_SCAN | IEEE80211_CHAN_NO_HT40PLUS |
 964                  IEEE80211_CHAN_NO_HT40MINUS),
 965         /* UNII-3 */
 966         CHAN5GHZ(149, IEEE80211_CHAN_NO_HT40MINUS),
 967         CHAN5GHZ(153, IEEE80211_CHAN_NO_HT40PLUS),
 968         CHAN5GHZ(157, IEEE80211_CHAN_NO_HT40MINUS),
 969         CHAN5GHZ(161, IEEE80211_CHAN_NO_HT40PLUS),
 970         CHAN5GHZ(165, IEEE80211_CHAN_NO_HT40PLUS | IEEE80211_CHAN_NO_HT40MINUS)
 971 };
 972
 973 #define RATE(rate100m, _flags) { \
 974         .bitrate = (rate100m), \
 975         .flags = (_flags), \
 976         .hw_value = (rate100m / 5), \
 977 }
 978
 979 static struct ieee80211_rate legacy_ratetable[] = {
 980         RATE(10, 0),
 981         RATE(20, IEEE80211_RATE_SHORT_PREAMBLE),
 982         RATE(55, IEEE80211_RATE_SHORT_PREAMBLE),
 983         RATE(110, IEEE80211_RATE_SHORT_PREAMBLE),
 984         RATE(60, 0),
 985         RATE(90, 0),
 986         RATE(120, 0),
 987         RATE(180, 0),
 988         RATE(240, 0),
 989         RATE(360, 0),
 990         RATE(480, 0),
 991         RATE(540, 0),
 992 };
 993
 994 static struct ieee80211_supported_band brcms_band_2GHz_nphy = {
 995         .band = IEEE80211_BAND_2GHZ,
 996         .channels = brcms_2ghz_chantable,
 997         .n_channels = ARRAY_SIZE(brcms_2ghz_chantable),
 998         .bitrates = legacy_ratetable,
 999         .n_bitrates = ARRAY_SIZE(legacy_ratetable),
1000         .ht_cap = {
1001                    /* from include/linux/ieee80211.h */
1002                    .cap = IEEE80211_HT_CAP_GRN_FLD |
1003                    IEEE80211_HT_CAP_SGI_20 |
1004                    IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_40MHZ_INTOLERANT,
1005                    .ht_supported = true,
1006                    .ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K,
1007                    .ampdu_density = AMPDU_DEF_MPDU_DENSITY,
1008                    .mcs = {
1009                            /* placeholders for now */
1010                            .rx_mask = {0xff, 0xff, 0, 0, 0, 0, 0, 0, 0, 0},
1011                            .rx_highest = 500,
1012                            .tx_params = IEEE80211_HT_MCS_TX_DEFINED}
1013                    }
1014 };
1015
1016 static struct ieee80211_supported_band brcms_band_5GHz_nphy = {
1017         .band = IEEE80211_BAND_5GHZ,
1018         .channels = brcms_5ghz_nphy_chantable,
1019         .n_channels = ARRAY_SIZE(brcms_5ghz_nphy_chantable),
1020         .bitrates = legacy_ratetable + 4,
1021         .n_bitrates = ARRAY_SIZE(legacy_ratetable) - 4,
1022         .ht_cap = {
1023                    /* use IEEE80211_HT_CAP_* from include/linux/ieee80211.h */
1024                    .cap = IEEE80211_HT_CAP_GRN_FLD | IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_40MHZ_INTOLERANT,     /* No 40 mhz yet */
1025                    .ht_supported = true,
1026                    .ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K,
1027                    .ampdu_density = AMPDU_DEF_MPDU_DENSITY,
1028                    .mcs = {
1029                            /* placeholders for now */
1030                            .rx_mask = {0xff, 0xff, 0, 0, 0, 0, 0, 0, 0, 0},
1031                            .rx_highest = 500,
1032                            .tx_params = IEEE80211_HT_MCS_TX_DEFINED}
1033                    }
1034 };
1035
1036 /*
1037  * is called in brcms_pci_probe() context, therefore no locking required.
1038  */
1039 static int ieee_hw_rate_init(struct ieee80211_hw *hw)
1040 {
1041         struct brcms_info *wl = HW_TO_WL(hw);
1042         int has_5g;
1043         char phy_list[4];
1044
1045         has_5g = 0;
1046
1047         hw->wiphy->bands[IEEE80211_BAND_2GHZ] = NULL;
1048         hw->wiphy->bands[IEEE80211_BAND_5GHZ] = NULL;
1049
1050         if (brcms_c_get(wl->wlc, WLC_GET_PHYLIST, (int *)&phy_list) < 0)
1051                 wiphy_err(hw->wiphy, "Phy list failed\n");
1052
1053         if (phy_list[0] == 'n' || phy_list[0] == 'c') {
1054                 if (phy_list[0] == 'c') {
1055                         /* Single stream */
1056                         brcms_band_2GHz_nphy.ht_cap.mcs.rx_mask[1] = 0;
1057                         brcms_band_2GHz_nphy.ht_cap.mcs.rx_highest = 72;
1058                 }
1059                 hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &brcms_band_2GHz_nphy;
1060         } else {
1061                 return -EPERM;
1062         }
1063
1064         /* Assume all bands use the same phy.  True for 11n devices. */
1065         if (NBANDS_PUB(wl->pub) > 1) {
1066                 has_5g++;
1067                 if (phy_list[0] == 'n' || phy_list[0] == 'c') {
1068                         hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
1069                             &brcms_band_5GHz_nphy;
1070                 } else {
1071                         return -EPERM;
1072                 }
1073         }
1074         return 0;
1075 }
1076
1077 /*
1078  * is called in brcms_pci_probe() context, therefore no locking required.
1079  */
1080 static int ieee_hw_init(struct ieee80211_hw *hw)
1081 {
1082         hw->flags = IEEE80211_HW_SIGNAL_DBM
1083             /* | IEEE80211_HW_CONNECTION_MONITOR  What is this? */
1084             | IEEE80211_HW_REPORTS_TX_ACK_STATUS
1085             | IEEE80211_HW_AMPDU_AGGREGATION;
1086
1087         hw->extra_tx_headroom = brcms_c_get_header_len();
1088         hw->queues = N_TX_QUEUES;
1089         /* FIXME: this doesn't seem to be used properly in minstrel_ht.
1090          * mac80211/status.c:ieee80211_tx_status() checks this value,
1091          * but mac80211/rc80211_minstrel_ht.c:minstrel_ht_get_rate()
1092          * appears to always set 3 rates
1093          */
1094         hw->max_rates = 2;      /* Primary rate and 1 fallback rate */
1095
1096         hw->channel_change_time = 7 * 1000;     /* channel change time is dependent on chip and band  */
1097         hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION);
1098
1099         hw->rate_control_algorithm = "minstrel_ht";
1100
1101         hw->sta_data_size = sizeof(struct scb);
1102         return ieee_hw_rate_init(hw);
1103 }
1104
1105 /**
1106  * determines if a device is a WL device, and if so, attaches it.
1107  *
1108  * This function determines if a device pointed to by pdev is a WL device,
1109  * and if so, performs a brcms_attach() on it.
1110  *
1111  * Perimeter lock is initialized in the course of this function.
1112  */
1113 static int __devinit
1114 brcms_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
1115 {
1116         int rc;
1117         struct brcms_info *wl;
1118         struct ieee80211_hw *hw;
1119         u32 val;
1120
1121         dev_info(&pdev->dev, "bus %d slot %d func %d irq %d\n",
1122                pdev->bus->number, PCI_SLOT(pdev->devfn),
1123                PCI_FUNC(pdev->devfn), pdev->irq);
1124
1125         if ((pdev->vendor != PCI_VENDOR_ID_BROADCOM) ||
1126             ((pdev->device != 0x0576) &&
1127              ((pdev->device & 0xff00) != 0x4300) &&
1128              ((pdev->device & 0xff00) != 0x4700) &&
1129              ((pdev->device < 43000) || (pdev->device > 43999))))
1130                 return -ENODEV;
1131
1132         rc = pci_enable_device(pdev);
1133         if (rc) {
1134                 pr_err("%s: Cannot enable device %d-%d_%d\n",
1135                        __func__, pdev->bus->number, PCI_SLOT(pdev->devfn),
1136                        PCI_FUNC(pdev->devfn));
1137                 return -ENODEV;
1138         }
1139         pci_set_master(pdev);
1140
1141         pci_read_config_dword(pdev, 0x40, &val);
1142         if ((val & 0x0000ff00) != 0)
1143                 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
1144
1145         hw = ieee80211_alloc_hw(sizeof(struct brcms_info), &brcms_ops);
1146         if (!hw) {
1147                 pr_err("%s: ieee80211_alloc_hw failed\n", __func__);
1148                 return -ENOMEM;
1149         }
1150
1151         SET_IEEE80211_DEV(hw, &pdev->dev);
1152
1153         pci_set_drvdata(pdev, hw);
1154
1155         memset(hw->priv, 0, sizeof(*wl));
1156
1157         wl = brcms_attach(pdev->vendor, pdev->device,
1158                           pci_resource_start(pdev, 0), PCI_BUS, pdev,
1159                           pdev->irq);
1160
1161         if (!wl) {
1162                 pr_err("%s: %s: brcms_attach failed!\n", KBUILD_MODNAME,
1163                        __func__);
1164                 return -ENODEV;
1165         }
1166         return 0;
1167 }
1168
1169 static int brcms_suspend(struct pci_dev *pdev, pm_message_t state)
1170 {
1171         struct brcms_info *wl;
1172         struct ieee80211_hw *hw;
1173
1174         hw = pci_get_drvdata(pdev);
1175         wl = HW_TO_WL(hw);
1176         if (!wl) {
1177                 wiphy_err(wl->wiphy,
1178                           "brcms_suspend: pci_get_drvdata failed\n");
1179                 return -ENODEV;
1180         }
1181
1182         /* only need to flag hw is down for proper resume */
1183         LOCK(wl);
1184         wl->pub->hw_up = false;
1185         UNLOCK(wl);
1186
1187         pci_save_state(pdev);
1188         pci_disable_device(pdev);
1189         return pci_set_power_state(pdev, PCI_D3hot);
1190 }
1191
1192 static int brcms_resume(struct pci_dev *pdev)
1193 {
1194         struct brcms_info *wl;
1195         struct ieee80211_hw *hw;
1196         int err = 0;
1197         u32 val;
1198
1199         hw = pci_get_drvdata(pdev);
1200         wl = HW_TO_WL(hw);
1201         if (!wl) {
1202                 wiphy_err(wl->wiphy,
1203                           "wl: brcms_resume: pci_get_drvdata failed\n");
1204                 return -ENODEV;
1205         }
1206
1207         err = pci_set_power_state(pdev, PCI_D0);
1208         if (err)
1209                 return err;
1210
1211         pci_restore_state(pdev);
1212
1213         err = pci_enable_device(pdev);
1214         if (err)
1215                 return err;
1216
1217         pci_set_master(pdev);
1218
1219         pci_read_config_dword(pdev, 0x40, &val);
1220         if ((val & 0x0000ff00) != 0)
1221                 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
1222
1223         /*
1224         *  done. driver will be put in up state
1225         *  in brcms_ops_add_interface() call.
1226         */
1227         return err;
1228 }
1229
1230 /*
1231 * called from both kernel as from this kernel module.
1232 * precondition: perimeter lock is not acquired.
1233 */
1234 static void brcms_remove(struct pci_dev *pdev)
1235 {
1236         struct brcms_info *wl;
1237         struct ieee80211_hw *hw;
1238         int status;
1239
1240         hw = pci_get_drvdata(pdev);
1241         wl = HW_TO_WL(hw);
1242         if (!wl) {
1243                 pr_err("wl: brcms_remove: pci_get_drvdata failed\n");
1244                 return;
1245         }
1246
1247         LOCK(wl);
1248         status = brcms_c_chipmatch(pdev->vendor, pdev->device);
1249         UNLOCK(wl);
1250         if (!status) {
1251                 wiphy_err(wl->wiphy, "wl: brcms_remove: chipmatch "
1252                                      "failed\n");
1253                 return;
1254         }
1255         if (wl->wlc) {
1256                 wiphy_rfkill_set_hw_state(wl->pub->ieee_hw->wiphy, false);
1257                 wiphy_rfkill_stop_polling(wl->pub->ieee_hw->wiphy);
1258                 ieee80211_unregister_hw(hw);
1259                 LOCK(wl);
1260                 brcms_down(wl);
1261                 UNLOCK(wl);
1262         }
1263         pci_disable_device(pdev);
1264
1265         brcms_free(wl);
1266
1267         pci_set_drvdata(pdev, NULL);
1268         ieee80211_free_hw(hw);
1269 }
1270
1271 static struct pci_driver brcms_pci_driver = {
1272         .name     = KBUILD_MODNAME,
1273         .probe    = brcms_pci_probe,
1274         .suspend  = brcms_suspend,
1275         .resume   = brcms_resume,
1276         .remove   = __devexit_p(brcms_remove),
1277         .id_table = brcms_pci_id_table,
1278 };
1279
1280 /**
1281  * This is the main entry point for the WL driver.
1282  *
1283  * This function determines if a device pointed to by pdev is a WL device,
1284  * and if so, performs a brcms_attach() on it.
1285  *
1286  */
1287 static int __init brcms_module_init(void)
1288 {
1289         int error = -ENODEV;
1290
1291 #ifdef BCMDBG
1292         if (msglevel != 0xdeadbeef)
1293                 brcm_msg_level = msglevel;
1294         if (phymsglevel != 0xdeadbeef)
1295                 phyhal_msg_level = phymsglevel;
1296 #endif                          /* BCMDBG */
1297
1298         error = pci_register_driver(&brcms_pci_driver);
1299         if (!error)
1300                 return 0;
1301
1302
1303
1304         return error;
1305 }
1306
1307 /**
1308  * This function unloads the WL driver from the system.
1309  *
1310  * This function unconditionally unloads the WL driver module from the
1311  * system.
1312  *
1313  */
1314 static void __exit brcms_module_exit(void)
1315 {
1316         pci_unregister_driver(&brcms_pci_driver);
1317
1318 }
1319
1320 module_init(brcms_module_init);
1321 module_exit(brcms_module_exit);
1322
1323 /**
1324  * This function frees the WL per-device resources.
1325  *
1326  * This function frees resources owned by the WL device pointed to
1327  * by the wl parameter.
1328  *
1329  * precondition: can both be called locked and unlocked
1330  *
1331  */
1332 static void brcms_free(struct brcms_info *wl)
1333 {
1334         struct brcms_timer *t, *next;
1335
1336         /* free ucode data */
1337         if (wl->fw.fw_cnt)
1338                 brcms_ucode_data_free();
1339         if (wl->irq)
1340                 free_irq(wl->irq, wl);
1341
1342         /* kill dpc */
1343         tasklet_kill(&wl->tasklet);
1344
1345         if (wl->pub) {
1346                 brcms_c_module_unregister(wl->pub, "linux", wl);
1347         }
1348
1349         /* free common resources */
1350         if (wl->wlc) {
1351                 brcms_c_detach(wl->wlc);
1352                 wl->wlc = NULL;
1353                 wl->pub = NULL;
1354         }
1355
1356         /* virtual interface deletion is deferred so we cannot spinwait */
1357
1358         /* wait for all pending callbacks to complete */
1359         while (atomic_read(&wl->callbacks) > 0)
1360                 schedule();
1361
1362         /* free timers */
1363         for (t = wl->timers; t; t = next) {
1364                 next = t->next;
1365 #ifdef BCMDBG
1366                 kfree(t->name);
1367 #endif
1368                 kfree(t);
1369         }
1370
1371         /*
1372          * unregister_netdev() calls get_stats() which may read chip registers
1373          * so we cannot unmap the chip registers until after calling unregister_netdev() .
1374          */
1375         if (wl->regsva && wl->bcm_bustype != SDIO_BUS &&
1376             wl->bcm_bustype != JTAG_BUS) {
1377                 iounmap((void *)wl->regsva);
1378         }
1379         wl->regsva = NULL;
1380 }
1381
1382 /* flags the given rate in rateset as requested */
1383 static void brcms_set_basic_rate(struct wl_rateset *rs, u16 rate, bool is_br)
1384 {
1385         u32 i;
1386
1387         for (i = 0; i < rs->count; i++) {
1388                 if (rate != (rs->rates[i] & 0x7f))
1389                         continue;
1390
1391                 if (is_br)
1392                         rs->rates[i] |= WLC_RATE_FLAG;
1393                 else
1394                         rs->rates[i] &= WLC_RATE_MASK;
1395                 return;
1396         }
1397 }
1398
1399 /*
1400  * precondition: perimeter lock has been acquired
1401  */
1402 void brcms_txflowcontrol(struct brcms_info *wl, struct brcms_if *wlif,
1403                          bool state, int prio)
1404 {
1405         wiphy_err(wl->wiphy, "Shouldn't be here %s\n", __func__);
1406 }
1407
1408 /*
1409  * precondition: perimeter lock has been acquired
1410  */
1411 void brcms_init(struct brcms_info *wl)
1412 {
1413         BCMMSG(WL_TO_HW(wl)->wiphy, "wl%d\n", wl->pub->unit);
1414         brcms_reset(wl);
1415
1416         brcms_c_init(wl->wlc);
1417 }
1418
1419 /*
1420  * precondition: perimeter lock has been acquired
1421  */
1422 uint brcms_reset(struct brcms_info *wl)
1423 {
1424         BCMMSG(WL_TO_HW(wl)->wiphy, "wl%d\n", wl->pub->unit);
1425         brcms_c_reset(wl->wlc);
1426
1427         /* dpc will not be rescheduled */
1428         wl->resched = 0;
1429
1430         return 0;
1431 }
1432
1433 /*
1434  * These are interrupt on/off entry points. Disable interrupts
1435  * during interrupt state transition.
1436  */
1437 void brcms_intrson(struct brcms_info *wl)
1438 {
1439         unsigned long flags;
1440
1441         INT_LOCK(wl, flags);
1442         brcms_c_intrson(wl->wlc);
1443         INT_UNLOCK(wl, flags);
1444 }
1445
1446 /*
1447  * precondition: perimeter lock has been acquired
1448  */
1449 bool wl_alloc_dma_resources(struct brcms_info *wl, uint addrwidth)
1450 {
1451         return true;
1452 }
1453
1454 u32 brcms_intrsoff(struct brcms_info *wl)
1455 {
1456         unsigned long flags;
1457         u32 status;
1458
1459         INT_LOCK(wl, flags);
1460         status = brcms_c_intrsoff(wl->wlc);
1461         INT_UNLOCK(wl, flags);
1462         return status;
1463 }
1464
1465 void brcms_intrsrestore(struct brcms_info *wl, u32 macintmask)
1466 {
1467         unsigned long flags;
1468
1469         INT_LOCK(wl, flags);
1470         brcms_c_intrsrestore(wl->wlc, macintmask);
1471         INT_UNLOCK(wl, flags);
1472 }
1473
1474 /*
1475  * precondition: perimeter lock has been acquired
1476  */
1477 int brcms_up(struct brcms_info *wl)
1478 {
1479         int error = 0;
1480
1481         if (wl->pub->up)
1482                 return 0;
1483
1484         error = brcms_c_up(wl->wlc);
1485
1486         return error;
1487 }
1488
1489 /*
1490  * precondition: perimeter lock has been acquired
1491  */
1492 void brcms_down(struct brcms_info *wl)
1493 {
1494         uint callbacks, ret_val = 0;
1495
1496         /* call common down function */
1497         ret_val = brcms_c_down(wl->wlc);
1498         callbacks = atomic_read(&wl->callbacks) - ret_val;
1499
1500         /* wait for down callbacks to complete */
1501         UNLOCK(wl);
1502
1503         /* For HIGH_only driver, it's important to actually schedule other work,
1504          * not just spin wait since everything runs at schedule level
1505          */
1506         SPINWAIT((atomic_read(&wl->callbacks) > callbacks), 100 * 1000);
1507
1508         LOCK(wl);
1509 }
1510
1511 static irqreturn_t brcms_isr(int irq, void *dev_id)
1512 {
1513         struct brcms_info *wl;
1514         bool ours, wantdpc;
1515         unsigned long flags;
1516
1517         wl = (struct brcms_info *) dev_id;
1518
1519         ISR_LOCK(wl, flags);
1520
1521         /* call common first level interrupt handler */
1522         ours = brcms_c_isr(wl->wlc, &wantdpc);
1523         if (ours) {
1524                 /* if more to do... */
1525                 if (wantdpc) {
1526
1527                         /* ...and call the second level interrupt handler */
1528                         /* schedule dpc */
1529                         tasklet_schedule(&wl->tasklet);
1530                 }
1531         }
1532
1533         ISR_UNLOCK(wl, flags);
1534
1535         return IRQ_RETVAL(ours);
1536 }
1537
1538 static void brcms_dpc(unsigned long data)
1539 {
1540         struct brcms_info *wl;
1541
1542         wl = (struct brcms_info *) data;
1543
1544         LOCK(wl);
1545
1546         /* call the common second level interrupt handler */
1547         if (wl->pub->up) {
1548                 if (wl->resched) {
1549                         unsigned long flags;
1550
1551                         INT_LOCK(wl, flags);
1552                         brcms_c_intrsupd(wl->wlc);
1553                         INT_UNLOCK(wl, flags);
1554                 }
1555
1556                 wl->resched = brcms_c_dpc(wl->wlc, true);
1557         }
1558
1559         /* brcms_c_dpc() may bring the driver down */
1560         if (!wl->pub->up)
1561                 goto done;
1562
1563         /* re-schedule dpc */
1564         if (wl->resched)
1565                 tasklet_schedule(&wl->tasklet);
1566         else {
1567                 /* re-enable interrupts */
1568                 brcms_intrson(wl);
1569         }
1570
1571  done:
1572         UNLOCK(wl);
1573 }
1574
1575 /*
1576  * is called by the kernel from software irq context
1577  */
1578 static void brcms_timer(unsigned long data)
1579 {
1580         _brcms_timer((struct brcms_timer *) data);
1581 }
1582
1583 /*
1584 * precondition: perimeter lock is not acquired
1585  */
1586 static void _brcms_timer(struct brcms_timer *t)
1587 {
1588         LOCK(t->wl);
1589
1590         if (t->set) {
1591                 if (t->periodic) {
1592                         t->timer.expires = jiffies + t->ms * HZ / 1000;
1593                         atomic_inc(&t->wl->callbacks);
1594                         add_timer(&t->timer);
1595                         t->set = true;
1596                 } else
1597                         t->set = false;
1598
1599                 t->fn(t->arg);
1600         }
1601
1602         atomic_dec(&t->wl->callbacks);
1603
1604         UNLOCK(t->wl);
1605 }
1606
1607 /*
1608  * Adds a timer to the list. Caller supplies a timer function.
1609  * Is called from wlc.
1610  *
1611  * precondition: perimeter lock has been acquired
1612  */
1613 struct brcms_timer *brcms_init_timer(struct brcms_info *wl,
1614                                      void (*fn) (void *arg),
1615                                      void *arg, const char *name)
1616 {
1617         struct brcms_timer *t;
1618
1619         t = kzalloc(sizeof(struct brcms_timer), GFP_ATOMIC);
1620         if (!t) {
1621                 wiphy_err(wl->wiphy, "wl%d: brcms_init_timer: out of memory\n",
1622                           wl->pub->unit);
1623                 return 0;
1624         }
1625
1626         init_timer(&t->timer);
1627         t->timer.data = (unsigned long) t;
1628         t->timer.function = brcms_timer;
1629         t->wl = wl;
1630         t->fn = fn;
1631         t->arg = arg;
1632         t->next = wl->timers;
1633         wl->timers = t;
1634
1635 #ifdef BCMDBG
1636         t->name = kmalloc(strlen(name) + 1, GFP_ATOMIC);
1637         if (t->name)
1638                 strcpy(t->name, name);
1639 #endif
1640
1641         return t;
1642 }
1643
1644 /* BMAC_NOTE: Add timer adds only the kernel timer since it's going to be more accurate
1645  * as well as it's easier to make it periodic
1646  *
1647  * precondition: perimeter lock has been acquired
1648  */
1649 void brcms_add_timer(struct brcms_info *wl, struct brcms_timer *t, uint ms,
1650                      int periodic)
1651 {
1652 #ifdef BCMDBG
1653         if (t->set) {
1654                 wiphy_err(wl->wiphy, "%s: Already set. Name: %s, per %d\n",
1655                           __func__, t->name, periodic);
1656         }
1657 #endif
1658         t->ms = ms;
1659         t->periodic = (bool) periodic;
1660         t->set = true;
1661         t->timer.expires = jiffies + ms * HZ / 1000;
1662
1663         atomic_inc(&wl->callbacks);
1664         add_timer(&t->timer);
1665 }
1666
1667 /*
1668  * return true if timer successfully deleted, false if still pending
1669  *
1670  * precondition: perimeter lock has been acquired
1671  */
1672 bool brcms_del_timer(struct brcms_info *wl, struct brcms_timer *t)
1673 {
1674         if (t->set) {
1675                 t->set = false;
1676                 if (!del_timer(&t->timer)) {
1677                         return false;
1678                 }
1679                 atomic_dec(&wl->callbacks);
1680         }
1681
1682         return true;
1683 }
1684
1685 /*
1686  * precondition: perimeter lock has been acquired
1687  */
1688 void brcms_free_timer(struct brcms_info *wl, struct brcms_timer *t)
1689 {
1690         struct brcms_timer *tmp;
1691
1692         /* delete the timer in case it is active */
1693         brcms_del_timer(wl, t);
1694
1695         if (wl->timers == t) {
1696                 wl->timers = wl->timers->next;
1697 #ifdef BCMDBG
1698                 kfree(t->name);
1699 #endif
1700                 kfree(t);
1701                 return;
1702
1703         }
1704
1705         tmp = wl->timers;
1706         while (tmp) {
1707                 if (tmp->next == t) {
1708                         tmp->next = t->next;
1709 #ifdef BCMDBG
1710                         kfree(t->name);
1711 #endif
1712                         kfree(t);
1713                         return;
1714                 }
1715                 tmp = tmp->next;
1716         }
1717
1718 }
1719
1720 /*
1721  * runs in software irq context
1722  *
1723  * precondition: perimeter lock is not acquired
1724  */
1725 static int wl_linux_watchdog(void *ctx)
1726 {
1727         return 0;
1728 }
1729
1730 struct firmware_hdr {
1731         u32 offset;
1732         u32 len;
1733         u32 idx;
1734 };
1735
1736 char *brcms_firmwares[MAX_FW_IMAGES] = {
1737         "brcm/bcm43xx",
1738         NULL
1739 };
1740
1741 /*
1742  * precondition: perimeter lock has been acquired
1743  */
1744 int brcms_ucode_init_buf(struct brcms_info *wl, void **pbuf, u32 idx)
1745 {
1746         int i, entry;
1747         const u8 *pdata;
1748         struct firmware_hdr *hdr;
1749         for (i = 0; i < wl->fw.fw_cnt; i++) {
1750                 hdr = (struct firmware_hdr *)wl->fw.fw_hdr[i]->data;
1751                 for (entry = 0; entry < wl->fw.hdr_num_entries[i];
1752                      entry++, hdr++) {
1753                         if (hdr->idx == idx) {
1754                                 pdata = wl->fw.fw_bin[i]->data + hdr->offset;
1755                                 *pbuf = kmalloc(hdr->len, GFP_ATOMIC);
1756                                 if (*pbuf == NULL) {
1757                                         wiphy_err(wl->wiphy, "fail to alloc %d"
1758                                                   " bytes\n", hdr->len);
1759                                         goto fail;
1760                                 }
1761                                 memcpy(*pbuf, pdata, hdr->len);
1762                                 return 0;
1763                         }
1764                 }
1765         }
1766         wiphy_err(wl->wiphy, "ERROR: ucode buf tag:%d can not be found!\n",
1767                   idx);
1768         *pbuf = NULL;
1769 fail:
1770         return -ENODATA;
1771 }
1772
1773 /*
1774  * Precondition: Since this function is called in brcms_pci_probe() context,
1775  * no locking is required.
1776  */
1777 int brcms_ucode_init_uint(struct brcms_info *wl, u32 *data, u32 idx)
1778 {
1779         int i, entry;
1780         const u8 *pdata;
1781         struct firmware_hdr *hdr;
1782         for (i = 0; i < wl->fw.fw_cnt; i++) {
1783                 hdr = (struct firmware_hdr *)wl->fw.fw_hdr[i]->data;
1784                 for (entry = 0; entry < wl->fw.hdr_num_entries[i];
1785                      entry++, hdr++) {
1786                         if (hdr->idx == idx) {
1787                                 pdata = wl->fw.fw_bin[i]->data + hdr->offset;
1788                                 if (hdr->len != 4) {
1789                                         wiphy_err(wl->wiphy,
1790                                                   "ERROR: fw hdr len\n");
1791                                         return -ENOMSG;
1792                                 }
1793                                 *data = *((u32 *) pdata);
1794                                 return 0;
1795                         }
1796                 }
1797         }
1798         wiphy_err(wl->wiphy, "ERROR: ucode tag:%d can not be found!\n", idx);
1799         return -ENOMSG;
1800 }
1801
1802 /*
1803  * Precondition: Since this function is called in brcms_pci_probe() context,
1804  * no locking is required.
1805  */
1806 static int brcms_request_fw(struct brcms_info *wl, struct pci_dev *pdev)
1807 {
1808         int status;
1809         struct device *device = &pdev->dev;
1810         char fw_name[100];
1811         int i;
1812
1813         memset((void *)&wl->fw, 0, sizeof(struct brcms_firmware));
1814         for (i = 0; i < MAX_FW_IMAGES; i++) {
1815                 if (brcms_firmwares[i] == NULL)
1816                         break;
1817                 sprintf(fw_name, "%s-%d.fw", brcms_firmwares[i],
1818                         UCODE_LOADER_API_VER);
1819                 status = request_firmware(&wl->fw.fw_bin[i], fw_name, device);
1820                 if (status) {
1821                         wiphy_err(wl->wiphy, "%s: fail to load firmware %s\n",
1822                                   KBUILD_MODNAME, fw_name);
1823                         return status;
1824                 }
1825                 sprintf(fw_name, "%s_hdr-%d.fw", brcms_firmwares[i],
1826                         UCODE_LOADER_API_VER);
1827                 status = request_firmware(&wl->fw.fw_hdr[i], fw_name, device);
1828                 if (status) {
1829                         wiphy_err(wl->wiphy, "%s: fail to load firmware %s\n",
1830                                   KBUILD_MODNAME, fw_name);
1831                         return status;
1832                 }
1833                 wl->fw.hdr_num_entries[i] =
1834                     wl->fw.fw_hdr[i]->size / (sizeof(struct firmware_hdr));
1835         }
1836         wl->fw.fw_cnt = i;
1837         return brcms_ucode_data_init(wl);
1838 }
1839
1840 /*
1841  * precondition: can both be called locked and unlocked
1842  */
1843 void brcms_ucode_free_buf(void *p)
1844 {
1845         kfree(p);
1846 }
1847
1848 /*
1849  * Precondition: Since this function is called in brcms_pci_probe() context,
1850  * no locking is required.
1851  */
1852 static void brcms_release_fw(struct brcms_info *wl)
1853 {
1854         int i;
1855         for (i = 0; i < MAX_FW_IMAGES; i++) {
1856                 release_firmware(wl->fw.fw_bin[i]);
1857                 release_firmware(wl->fw.fw_hdr[i]);
1858         }
1859 }
1860
1861
1862 /*
1863  * checks validity of all firmware images loaded from user space
1864  *
1865  * Precondition: Since this function is called in brcms_pci_probe() context,
1866  * no locking is required.
1867  */
1868 int brcms_check_firmwares(struct brcms_info *wl)
1869 {
1870         int i;
1871         int entry;
1872         int rc = 0;
1873         const struct firmware *fw;
1874         const struct firmware *fw_hdr;
1875         struct firmware_hdr *ucode_hdr;
1876         for (i = 0; i < MAX_FW_IMAGES && rc == 0; i++) {
1877                 fw =  wl->fw.fw_bin[i];
1878                 fw_hdr = wl->fw.fw_hdr[i];
1879                 if (fw == NULL && fw_hdr == NULL) {
1880                         break;
1881                 } else if (fw == NULL || fw_hdr == NULL) {
1882                         wiphy_err(wl->wiphy, "%s: invalid bin/hdr fw\n",
1883                                   __func__);
1884                         rc = -EBADF;
1885                 } else if (fw_hdr->size % sizeof(struct firmware_hdr)) {
1886                         wiphy_err(wl->wiphy, "%s: non integral fw hdr file "
1887                                 "size %zu/%zu\n", __func__, fw_hdr->size,
1888                                 sizeof(struct firmware_hdr));
1889                         rc = -EBADF;
1890                 } else if (fw->size < MIN_FW_SIZE || fw->size > MAX_FW_SIZE) {
1891                         wiphy_err(wl->wiphy, "%s: out of bounds fw file size "
1892                                   "%zu\n", __func__, fw->size);
1893                         rc = -EBADF;
1894                 } else {
1895                         /* check if ucode section overruns firmware image */
1896                         ucode_hdr = (struct firmware_hdr *)fw_hdr->data;
1897                         for (entry = 0; entry < wl->fw.hdr_num_entries[i] &&
1898                              !rc; entry++, ucode_hdr++) {
1899                                 if (ucode_hdr->offset + ucode_hdr->len >
1900                                     fw->size) {
1901                                         wiphy_err(wl->wiphy,
1902                                                   "%s: conflicting bin/hdr\n",
1903                                                   __func__);
1904                                         rc = -EBADF;
1905                                 }
1906                         }
1907                 }
1908         }
1909         if (rc == 0 && wl->fw.fw_cnt != i) {
1910                 wiphy_err(wl->wiphy, "%s: invalid fw_cnt=%d\n", __func__,
1911                         wl->fw.fw_cnt);
1912                 rc = -EBADF;
1913         }
1914         return rc;
1915 }
1916
1917 /*
1918  * precondition: perimeter lock has been acquired
1919  */
1920 bool brcms_rfkill_set_hw_state(struct brcms_info *wl)
1921 {
1922         bool blocked = brcms_c_check_radio_disabled(wl->wlc);
1923
1924         UNLOCK(wl);
1925         wiphy_rfkill_set_hw_state(wl->pub->ieee_hw->wiphy, blocked);
1926         if (blocked)
1927                 wiphy_rfkill_start_polling(wl->pub->ieee_hw->wiphy);
1928         LOCK(wl);
1929         return blocked;
1930 }
1931
1932 /*
1933  * precondition: perimeter lock has been acquired
1934  */
1935 void brcms_msleep(struct brcms_info *wl, uint ms)
1936 {
1937         UNLOCK(wl);
1938         msleep(ms);
1939         LOCK(wl);
1940 }