iwlegacy: merge all ops structures into one
[platform/kernel/linux-arm64.git] / drivers / net / wireless / iwlegacy / 3945.c
1 /******************************************************************************
2  *
3  * Copyright(c) 2003 - 2011 Intel Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  * The full GNU General Public License is included in this distribution in the
19  * file called LICENSE.
20  *
21  * Contact Information:
22  *  Intel Linux Wireless <ilw@linux.intel.com>
23  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
24  *
25  *****************************************************************************/
26
27 #include <linux/kernel.h>
28 #include <linux/module.h>
29 #include <linux/init.h>
30 #include <linux/slab.h>
31 #include <linux/pci.h>
32 #include <linux/dma-mapping.h>
33 #include <linux/delay.h>
34 #include <linux/sched.h>
35 #include <linux/skbuff.h>
36 #include <linux/netdevice.h>
37 #include <linux/firmware.h>
38 #include <linux/etherdevice.h>
39 #include <asm/unaligned.h>
40 #include <net/mac80211.h>
41
42 #include "common.h"
43 #include "3945.h"
44
45 /* Send led command */
46 static int
47 il3945_send_led_cmd(struct il_priv *il, struct il_led_cmd *led_cmd)
48 {
49         struct il_host_cmd cmd = {
50                 .id = C_LEDS,
51                 .len = sizeof(struct il_led_cmd),
52                 .data = led_cmd,
53                 .flags = CMD_ASYNC,
54                 .callback = NULL,
55         };
56
57         return il_send_cmd(il, &cmd);
58 }
59
60 #define IL_DECLARE_RATE_INFO(r, ip, in, rp, rn, pp, np)    \
61         [RATE_##r##M_IDX] = { RATE_##r##M_PLCP,   \
62                                     RATE_##r##M_IEEE,   \
63                                     RATE_##ip##M_IDX, \
64                                     RATE_##in##M_IDX, \
65                                     RATE_##rp##M_IDX, \
66                                     RATE_##rn##M_IDX, \
67                                     RATE_##pp##M_IDX, \
68                                     RATE_##np##M_IDX, \
69                                     RATE_##r##M_IDX_TBL, \
70                                     RATE_##ip##M_IDX_TBL }
71
72 /*
73  * Parameter order:
74  *   rate, prev rate, next rate, prev tgg rate, next tgg rate
75  *
76  * If there isn't a valid next or previous rate then INV is used which
77  * maps to RATE_INVALID
78  *
79  */
80 const struct il3945_rate_info il3945_rates[RATE_COUNT_3945] = {
81         IL_DECLARE_RATE_INFO(1, INV, 2, INV, 2, INV, 2),        /*  1mbps */
82         IL_DECLARE_RATE_INFO(2, 1, 5, 1, 5, 1, 5),      /*  2mbps */
83         IL_DECLARE_RATE_INFO(5, 2, 6, 2, 11, 2, 11),    /*5.5mbps */
84         IL_DECLARE_RATE_INFO(11, 9, 12, 5, 12, 5, 18),  /* 11mbps */
85         IL_DECLARE_RATE_INFO(6, 5, 9, 5, 11, 5, 11),    /*  6mbps */
86         IL_DECLARE_RATE_INFO(9, 6, 11, 5, 11, 5, 11),   /*  9mbps */
87         IL_DECLARE_RATE_INFO(12, 11, 18, 11, 18, 11, 18),       /* 12mbps */
88         IL_DECLARE_RATE_INFO(18, 12, 24, 12, 24, 11, 24),       /* 18mbps */
89         IL_DECLARE_RATE_INFO(24, 18, 36, 18, 36, 18, 36),       /* 24mbps */
90         IL_DECLARE_RATE_INFO(36, 24, 48, 24, 48, 24, 48),       /* 36mbps */
91         IL_DECLARE_RATE_INFO(48, 36, 54, 36, 54, 36, 54),       /* 48mbps */
92         IL_DECLARE_RATE_INFO(54, 48, INV, 48, INV, 48, INV),    /* 54mbps */
93 };
94
95 static inline u8
96 il3945_get_prev_ieee_rate(u8 rate_idx)
97 {
98         u8 rate = il3945_rates[rate_idx].prev_ieee;
99
100         if (rate == RATE_INVALID)
101                 rate = rate_idx;
102         return rate;
103 }
104
105 /* 1 = enable the il3945_disable_events() function */
106 #define IL_EVT_DISABLE (0)
107 #define IL_EVT_DISABLE_SIZE (1532/32)
108
109 /**
110  * il3945_disable_events - Disable selected events in uCode event log
111  *
112  * Disable an event by writing "1"s into "disable"
113  *   bitmap in SRAM.  Bit position corresponds to Event # (id/type).
114  *   Default values of 0 enable uCode events to be logged.
115  * Use for only special debugging.  This function is just a placeholder as-is,
116  *   you'll need to provide the special bits! ...
117  *   ... and set IL_EVT_DISABLE to 1. */
118 void
119 il3945_disable_events(struct il_priv *il)
120 {
121         int i;
122         u32 base;               /* SRAM address of event log header */
123         u32 disable_ptr;        /* SRAM address of event-disable bitmap array */
124         u32 array_size;         /* # of u32 entries in array */
125         static const u32 evt_disable[IL_EVT_DISABLE_SIZE] = {
126                 0x00000000,     /*   31 -    0  Event id numbers */
127                 0x00000000,     /*   63 -   32 */
128                 0x00000000,     /*   95 -   64 */
129                 0x00000000,     /*  127 -   96 */
130                 0x00000000,     /*  159 -  128 */
131                 0x00000000,     /*  191 -  160 */
132                 0x00000000,     /*  223 -  192 */
133                 0x00000000,     /*  255 -  224 */
134                 0x00000000,     /*  287 -  256 */
135                 0x00000000,     /*  319 -  288 */
136                 0x00000000,     /*  351 -  320 */
137                 0x00000000,     /*  383 -  352 */
138                 0x00000000,     /*  415 -  384 */
139                 0x00000000,     /*  447 -  416 */
140                 0x00000000,     /*  479 -  448 */
141                 0x00000000,     /*  511 -  480 */
142                 0x00000000,     /*  543 -  512 */
143                 0x00000000,     /*  575 -  544 */
144                 0x00000000,     /*  607 -  576 */
145                 0x00000000,     /*  639 -  608 */
146                 0x00000000,     /*  671 -  640 */
147                 0x00000000,     /*  703 -  672 */
148                 0x00000000,     /*  735 -  704 */
149                 0x00000000,     /*  767 -  736 */
150                 0x00000000,     /*  799 -  768 */
151                 0x00000000,     /*  831 -  800 */
152                 0x00000000,     /*  863 -  832 */
153                 0x00000000,     /*  895 -  864 */
154                 0x00000000,     /*  927 -  896 */
155                 0x00000000,     /*  959 -  928 */
156                 0x00000000,     /*  991 -  960 */
157                 0x00000000,     /* 1023 -  992 */
158                 0x00000000,     /* 1055 - 1024 */
159                 0x00000000,     /* 1087 - 1056 */
160                 0x00000000,     /* 1119 - 1088 */
161                 0x00000000,     /* 1151 - 1120 */
162                 0x00000000,     /* 1183 - 1152 */
163                 0x00000000,     /* 1215 - 1184 */
164                 0x00000000,     /* 1247 - 1216 */
165                 0x00000000,     /* 1279 - 1248 */
166                 0x00000000,     /* 1311 - 1280 */
167                 0x00000000,     /* 1343 - 1312 */
168                 0x00000000,     /* 1375 - 1344 */
169                 0x00000000,     /* 1407 - 1376 */
170                 0x00000000,     /* 1439 - 1408 */
171                 0x00000000,     /* 1471 - 1440 */
172                 0x00000000,     /* 1503 - 1472 */
173         };
174
175         base = le32_to_cpu(il->card_alive.log_event_table_ptr);
176         if (!il3945_hw_valid_rtc_data_addr(base)) {
177                 IL_ERR("Invalid event log pointer 0x%08X\n", base);
178                 return;
179         }
180
181         disable_ptr = il_read_targ_mem(il, base + (4 * sizeof(u32)));
182         array_size = il_read_targ_mem(il, base + (5 * sizeof(u32)));
183
184         if (IL_EVT_DISABLE && array_size == IL_EVT_DISABLE_SIZE) {
185                 D_INFO("Disabling selected uCode log events at 0x%x\n",
186                        disable_ptr);
187                 for (i = 0; i < IL_EVT_DISABLE_SIZE; i++)
188                         il_write_targ_mem(il, disable_ptr + (i * sizeof(u32)),
189                                           evt_disable[i]);
190
191         } else {
192                 D_INFO("Selected uCode log events may be disabled\n");
193                 D_INFO("  by writing \"1\"s into disable bitmap\n");
194                 D_INFO("  in SRAM at 0x%x, size %d u32s\n", disable_ptr,
195                        array_size);
196         }
197
198 }
199
200 static int
201 il3945_hwrate_to_plcp_idx(u8 plcp)
202 {
203         int idx;
204
205         for (idx = 0; idx < RATE_COUNT_3945; idx++)
206                 if (il3945_rates[idx].plcp == plcp)
207                         return idx;
208         return -1;
209 }
210
211 #ifdef CONFIG_IWLEGACY_DEBUG
212 #define TX_STATUS_ENTRY(x) case TX_3945_STATUS_FAIL_ ## x: return #x
213
214 static const char *
215 il3945_get_tx_fail_reason(u32 status)
216 {
217         switch (status & TX_STATUS_MSK) {
218         case TX_3945_STATUS_SUCCESS:
219                 return "SUCCESS";
220                 TX_STATUS_ENTRY(SHORT_LIMIT);
221                 TX_STATUS_ENTRY(LONG_LIMIT);
222                 TX_STATUS_ENTRY(FIFO_UNDERRUN);
223                 TX_STATUS_ENTRY(MGMNT_ABORT);
224                 TX_STATUS_ENTRY(NEXT_FRAG);
225                 TX_STATUS_ENTRY(LIFE_EXPIRE);
226                 TX_STATUS_ENTRY(DEST_PS);
227                 TX_STATUS_ENTRY(ABORTED);
228                 TX_STATUS_ENTRY(BT_RETRY);
229                 TX_STATUS_ENTRY(STA_INVALID);
230                 TX_STATUS_ENTRY(FRAG_DROPPED);
231                 TX_STATUS_ENTRY(TID_DISABLE);
232                 TX_STATUS_ENTRY(FRAME_FLUSHED);
233                 TX_STATUS_ENTRY(INSUFFICIENT_CF_POLL);
234                 TX_STATUS_ENTRY(TX_LOCKED);
235                 TX_STATUS_ENTRY(NO_BEACON_ON_RADAR);
236         }
237
238         return "UNKNOWN";
239 }
240 #else
241 static inline const char *
242 il3945_get_tx_fail_reason(u32 status)
243 {
244         return "";
245 }
246 #endif
247
248 /*
249  * get ieee prev rate from rate scale table.
250  * for A and B mode we need to overright prev
251  * value
252  */
253 int
254 il3945_rs_next_rate(struct il_priv *il, int rate)
255 {
256         int next_rate = il3945_get_prev_ieee_rate(rate);
257
258         switch (il->band) {
259         case IEEE80211_BAND_5GHZ:
260                 if (rate == RATE_12M_IDX)
261                         next_rate = RATE_9M_IDX;
262                 else if (rate == RATE_6M_IDX)
263                         next_rate = RATE_6M_IDX;
264                 break;
265         case IEEE80211_BAND_2GHZ:
266                 if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
267                     il_is_associated(il)) {
268                         if (rate == RATE_11M_IDX)
269                                 next_rate = RATE_5M_IDX;
270                 }
271                 break;
272
273         default:
274                 break;
275         }
276
277         return next_rate;
278 }
279
280 /**
281  * il3945_tx_queue_reclaim - Reclaim Tx queue entries already Tx'd
282  *
283  * When FW advances 'R' idx, all entries between old and new 'R' idx
284  * need to be reclaimed. As result, some free space forms. If there is
285  * enough free space (> low mark), wake the stack that feeds us.
286  */
287 static void
288 il3945_tx_queue_reclaim(struct il_priv *il, int txq_id, int idx)
289 {
290         struct il_tx_queue *txq = &il->txq[txq_id];
291         struct il_queue *q = &txq->q;
292         struct sk_buff *skb;
293
294         BUG_ON(txq_id == IL39_CMD_QUEUE_NUM);
295
296         for (idx = il_queue_inc_wrap(idx, q->n_bd); q->read_ptr != idx;
297              q->read_ptr = il_queue_inc_wrap(q->read_ptr, q->n_bd)) {
298
299                 skb = txq->skbs[txq->q.read_ptr];
300                 ieee80211_tx_status_irqsafe(il->hw, skb);
301                 txq->skbs[txq->q.read_ptr] = NULL;
302                 il->ops->txq_free_tfd(il, txq);
303         }
304
305         if (il_queue_space(q) > q->low_mark && txq_id >= 0 &&
306             txq_id != IL39_CMD_QUEUE_NUM && il->mac80211_registered)
307                 il_wake_queue(il, txq);
308 }
309
310 /**
311  * il3945_hdl_tx - Handle Tx response
312  */
313 static void
314 il3945_hdl_tx(struct il_priv *il, struct il_rx_buf *rxb)
315 {
316         struct il_rx_pkt *pkt = rxb_addr(rxb);
317         u16 sequence = le16_to_cpu(pkt->hdr.sequence);
318         int txq_id = SEQ_TO_QUEUE(sequence);
319         int idx = SEQ_TO_IDX(sequence);
320         struct il_tx_queue *txq = &il->txq[txq_id];
321         struct ieee80211_tx_info *info;
322         struct il3945_tx_resp *tx_resp = (void *)&pkt->u.raw[0];
323         u32 status = le32_to_cpu(tx_resp->status);
324         int rate_idx;
325         int fail;
326
327         if (idx >= txq->q.n_bd || il_queue_used(&txq->q, idx) == 0) {
328                 IL_ERR("Read idx for DMA queue txq_id (%d) idx %d "
329                        "is out of range [0-%d] %d %d\n", txq_id, idx,
330                        txq->q.n_bd, txq->q.write_ptr, txq->q.read_ptr);
331                 return;
332         }
333
334         txq->time_stamp = jiffies;
335         info = IEEE80211_SKB_CB(txq->skbs[txq->q.read_ptr]);
336         ieee80211_tx_info_clear_status(info);
337
338         /* Fill the MRR chain with some info about on-chip retransmissions */
339         rate_idx = il3945_hwrate_to_plcp_idx(tx_resp->rate);
340         if (info->band == IEEE80211_BAND_5GHZ)
341                 rate_idx -= IL_FIRST_OFDM_RATE;
342
343         fail = tx_resp->failure_frame;
344
345         info->status.rates[0].idx = rate_idx;
346         info->status.rates[0].count = fail + 1; /* add final attempt */
347
348         /* tx_status->rts_retry_count = tx_resp->failure_rts; */
349         info->flags |=
350             ((status & TX_STATUS_MSK) ==
351              TX_STATUS_SUCCESS) ? IEEE80211_TX_STAT_ACK : 0;
352
353         D_TX("Tx queue %d Status %s (0x%08x) plcp rate %d retries %d\n", txq_id,
354              il3945_get_tx_fail_reason(status), status, tx_resp->rate,
355              tx_resp->failure_frame);
356
357         D_TX_REPLY("Tx queue reclaim %d\n", idx);
358         il3945_tx_queue_reclaim(il, txq_id, idx);
359
360         if (status & TX_ABORT_REQUIRED_MSK)
361                 IL_ERR("TODO:  Implement Tx ABORT REQUIRED!!!\n");
362 }
363
364 /*****************************************************************************
365  *
366  * Intel PRO/Wireless 3945ABG/BG Network Connection
367  *
368  *  RX handler implementations
369  *
370  *****************************************************************************/
371 #ifdef CONFIG_IWLEGACY_DEBUGFS
372 static void
373 il3945_accumulative_stats(struct il_priv *il, __le32 * stats)
374 {
375         int i;
376         __le32 *prev_stats;
377         u32 *accum_stats;
378         u32 *delta, *max_delta;
379
380         prev_stats = (__le32 *) &il->_3945.stats;
381         accum_stats = (u32 *) &il->_3945.accum_stats;
382         delta = (u32 *) &il->_3945.delta_stats;
383         max_delta = (u32 *) &il->_3945.max_delta;
384
385         for (i = sizeof(__le32); i < sizeof(struct il3945_notif_stats);
386              i +=
387              sizeof(__le32), stats++, prev_stats++, delta++, max_delta++,
388              accum_stats++) {
389                 if (le32_to_cpu(*stats) > le32_to_cpu(*prev_stats)) {
390                         *delta =
391                             (le32_to_cpu(*stats) - le32_to_cpu(*prev_stats));
392                         *accum_stats += *delta;
393                         if (*delta > *max_delta)
394                                 *max_delta = *delta;
395                 }
396         }
397
398         /* reset accumulative stats for "no-counter" type stats */
399         il->_3945.accum_stats.general.temperature =
400             il->_3945.stats.general.temperature;
401         il->_3945.accum_stats.general.ttl_timestamp =
402             il->_3945.stats.general.ttl_timestamp;
403 }
404 #endif
405
406 void
407 il3945_hdl_stats(struct il_priv *il, struct il_rx_buf *rxb)
408 {
409         struct il_rx_pkt *pkt = rxb_addr(rxb);
410
411         D_RX("Statistics notification received (%d vs %d).\n",
412              (int)sizeof(struct il3945_notif_stats),
413              le32_to_cpu(pkt->len_n_flags) & IL_RX_FRAME_SIZE_MSK);
414 #ifdef CONFIG_IWLEGACY_DEBUGFS
415         il3945_accumulative_stats(il, (__le32 *) &pkt->u.raw);
416 #endif
417
418         memcpy(&il->_3945.stats, pkt->u.raw, sizeof(il->_3945.stats));
419 }
420
421 void
422 il3945_hdl_c_stats(struct il_priv *il, struct il_rx_buf *rxb)
423 {
424         struct il_rx_pkt *pkt = rxb_addr(rxb);
425         __le32 *flag = (__le32 *) &pkt->u.raw;
426
427         if (le32_to_cpu(*flag) & UCODE_STATS_CLEAR_MSK) {
428 #ifdef CONFIG_IWLEGACY_DEBUGFS
429                 memset(&il->_3945.accum_stats, 0,
430                        sizeof(struct il3945_notif_stats));
431                 memset(&il->_3945.delta_stats, 0,
432                        sizeof(struct il3945_notif_stats));
433                 memset(&il->_3945.max_delta, 0,
434                        sizeof(struct il3945_notif_stats));
435 #endif
436                 D_RX("Statistics have been cleared\n");
437         }
438         il3945_hdl_stats(il, rxb);
439 }
440
441 /******************************************************************************
442  *
443  * Misc. internal state and helper functions
444  *
445  ******************************************************************************/
446
447 /* This is necessary only for a number of stats, see the caller. */
448 static int
449 il3945_is_network_packet(struct il_priv *il, struct ieee80211_hdr *header)
450 {
451         /* Filter incoming packets to determine if they are targeted toward
452          * this network, discarding packets coming from ourselves */
453         switch (il->iw_mode) {
454         case NL80211_IFTYPE_ADHOC:      /* Header: Dest. | Source    | BSSID */
455                 /* packets to our IBSS update information */
456                 return !compare_ether_addr(header->addr3, il->bssid);
457         case NL80211_IFTYPE_STATION:    /* Header: Dest. | AP{BSSID} | Source */
458                 /* packets to our IBSS update information */
459                 return !compare_ether_addr(header->addr2, il->bssid);
460         default:
461                 return 1;
462         }
463 }
464
465 static void
466 il3945_pass_packet_to_mac80211(struct il_priv *il, struct il_rx_buf *rxb,
467                                struct ieee80211_rx_status *stats)
468 {
469         struct il_rx_pkt *pkt = rxb_addr(rxb);
470         struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
471         struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
472         struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
473         u16 len = le16_to_cpu(rx_hdr->len);
474         struct sk_buff *skb;
475         __le16 fc = hdr->frame_control;
476
477         /* We received data from the HW, so stop the watchdog */
478         if (unlikely
479             (len + IL39_RX_FRAME_SIZE >
480              PAGE_SIZE << il->hw_params.rx_page_order)) {
481                 D_DROP("Corruption detected!\n");
482                 return;
483         }
484
485         /* We only process data packets if the interface is open */
486         if (unlikely(!il->is_open)) {
487                 D_DROP("Dropping packet while interface is not open.\n");
488                 return;
489         }
490
491         skb = dev_alloc_skb(128);
492         if (!skb) {
493                 IL_ERR("dev_alloc_skb failed\n");
494                 return;
495         }
496
497         if (!il3945_mod_params.sw_crypto)
498                 il_set_decrypted_flag(il, (struct ieee80211_hdr *)rxb_addr(rxb),
499                                       le32_to_cpu(rx_end->status), stats);
500
501         skb_add_rx_frag(skb, 0, rxb->page,
502                         (void *)rx_hdr->payload - (void *)pkt, len);
503
504         il_update_stats(il, false, fc, len);
505         memcpy(IEEE80211_SKB_RXCB(skb), stats, sizeof(*stats));
506
507         ieee80211_rx(il->hw, skb);
508         il->alloc_rxb_page--;
509         rxb->page = NULL;
510 }
511
512 #define IL_DELAY_NEXT_SCAN_AFTER_ASSOC (HZ*6)
513
514 static void
515 il3945_hdl_rx(struct il_priv *il, struct il_rx_buf *rxb)
516 {
517         struct ieee80211_hdr *header;
518         struct ieee80211_rx_status rx_status;
519         struct il_rx_pkt *pkt = rxb_addr(rxb);
520         struct il3945_rx_frame_stats *rx_stats = IL_RX_STATS(pkt);
521         struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
522         struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
523         u16 rx_stats_sig_avg __maybe_unused = le16_to_cpu(rx_stats->sig_avg);
524         u16 rx_stats_noise_diff __maybe_unused =
525             le16_to_cpu(rx_stats->noise_diff);
526         u8 network_packet;
527
528         rx_status.flag = 0;
529         rx_status.mactime = le64_to_cpu(rx_end->timestamp);
530         rx_status.band =
531             (rx_hdr->
532              phy_flags & RX_RES_PHY_FLAGS_BAND_24_MSK) ? IEEE80211_BAND_2GHZ :
533             IEEE80211_BAND_5GHZ;
534         rx_status.freq =
535             ieee80211_channel_to_frequency(le16_to_cpu(rx_hdr->channel),
536                                            rx_status.band);
537
538         rx_status.rate_idx = il3945_hwrate_to_plcp_idx(rx_hdr->rate);
539         if (rx_status.band == IEEE80211_BAND_5GHZ)
540                 rx_status.rate_idx -= IL_FIRST_OFDM_RATE;
541
542         rx_status.antenna =
543             (le16_to_cpu(rx_hdr->phy_flags) & RX_RES_PHY_FLAGS_ANTENNA_MSK) >>
544             4;
545
546         /* set the preamble flag if appropriate */
547         if (rx_hdr->phy_flags & RX_RES_PHY_FLAGS_SHORT_PREAMBLE_MSK)
548                 rx_status.flag |= RX_FLAG_SHORTPRE;
549
550         if ((unlikely(rx_stats->phy_count > 20))) {
551                 D_DROP("dsp size out of range [0,20]: %d/n",
552                        rx_stats->phy_count);
553                 return;
554         }
555
556         if (!(rx_end->status & RX_RES_STATUS_NO_CRC32_ERROR) ||
557             !(rx_end->status & RX_RES_STATUS_NO_RXE_OVERFLOW)) {
558                 D_RX("Bad CRC or FIFO: 0x%08X.\n", rx_end->status);
559                 return;
560         }
561
562         /* Convert 3945's rssi indicator to dBm */
563         rx_status.signal = rx_stats->rssi - IL39_RSSI_OFFSET;
564
565         D_STATS("Rssi %d sig_avg %d noise_diff %d\n", rx_status.signal,
566                 rx_stats_sig_avg, rx_stats_noise_diff);
567
568         header = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
569
570         network_packet = il3945_is_network_packet(il, header);
571
572         D_STATS("[%c] %d RSSI:%d Signal:%u, Rate:%u\n",
573                 network_packet ? '*' : ' ', le16_to_cpu(rx_hdr->channel),
574                 rx_status.signal, rx_status.signal, rx_status.rate_idx);
575
576         il_dbg_log_rx_data_frame(il, le16_to_cpu(rx_hdr->len), header);
577
578         if (network_packet) {
579                 il->_3945.last_beacon_time =
580                     le32_to_cpu(rx_end->beacon_timestamp);
581                 il->_3945.last_tsf = le64_to_cpu(rx_end->timestamp);
582                 il->_3945.last_rx_rssi = rx_status.signal;
583         }
584
585         il3945_pass_packet_to_mac80211(il, rxb, &rx_status);
586 }
587
588 int
589 il3945_hw_txq_attach_buf_to_tfd(struct il_priv *il, struct il_tx_queue *txq,
590                                 dma_addr_t addr, u16 len, u8 reset, u8 pad)
591 {
592         int count;
593         struct il_queue *q;
594         struct il3945_tfd *tfd, *tfd_tmp;
595
596         q = &txq->q;
597         tfd_tmp = (struct il3945_tfd *)txq->tfds;
598         tfd = &tfd_tmp[q->write_ptr];
599
600         if (reset)
601                 memset(tfd, 0, sizeof(*tfd));
602
603         count = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
604
605         if (count >= NUM_TFD_CHUNKS || count < 0) {
606                 IL_ERR("Error can not send more than %d chunks\n",
607                        NUM_TFD_CHUNKS);
608                 return -EINVAL;
609         }
610
611         tfd->tbs[count].addr = cpu_to_le32(addr);
612         tfd->tbs[count].len = cpu_to_le32(len);
613
614         count++;
615
616         tfd->control_flags =
617             cpu_to_le32(TFD_CTL_COUNT_SET(count) | TFD_CTL_PAD_SET(pad));
618
619         return 0;
620 }
621
622 /**
623  * il3945_hw_txq_free_tfd - Free one TFD, those at idx [txq->q.read_ptr]
624  *
625  * Does NOT advance any idxes
626  */
627 void
628 il3945_hw_txq_free_tfd(struct il_priv *il, struct il_tx_queue *txq)
629 {
630         struct il3945_tfd *tfd_tmp = (struct il3945_tfd *)txq->tfds;
631         int idx = txq->q.read_ptr;
632         struct il3945_tfd *tfd = &tfd_tmp[idx];
633         struct pci_dev *dev = il->pci_dev;
634         int i;
635         int counter;
636
637         /* sanity check */
638         counter = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
639         if (counter > NUM_TFD_CHUNKS) {
640                 IL_ERR("Too many chunks: %i\n", counter);
641                 /* @todo issue fatal error, it is quite serious situation */
642                 return;
643         }
644
645         /* Unmap tx_cmd */
646         if (counter)
647                 pci_unmap_single(dev, dma_unmap_addr(&txq->meta[idx], mapping),
648                                  dma_unmap_len(&txq->meta[idx], len),
649                                  PCI_DMA_TODEVICE);
650
651         /* unmap chunks if any */
652
653         for (i = 1; i < counter; i++)
654                 pci_unmap_single(dev, le32_to_cpu(tfd->tbs[i].addr),
655                                  le32_to_cpu(tfd->tbs[i].len),
656                                  PCI_DMA_TODEVICE);
657
658         /* free SKB */
659         if (txq->skbs) {
660                 struct sk_buff *skb = txq->skbs[txq->q.read_ptr];
661
662                 /* can be called from irqs-disabled context */
663                 if (skb) {
664                         dev_kfree_skb_any(skb);
665                         txq->skbs[txq->q.read_ptr] = NULL;
666                 }
667         }
668 }
669
670 /**
671  * il3945_hw_build_tx_cmd_rate - Add rate portion to TX_CMD:
672  *
673 */
674 void
675 il3945_hw_build_tx_cmd_rate(struct il_priv *il, struct il_device_cmd *cmd,
676                             struct ieee80211_tx_info *info,
677                             struct ieee80211_hdr *hdr, int sta_id)
678 {
679         u16 hw_value = ieee80211_get_tx_rate(il->hw, info)->hw_value;
680         u16 rate_idx = min(hw_value & 0xffff, RATE_COUNT_3945 - 1);
681         u16 rate_mask;
682         int rate;
683         const u8 rts_retry_limit = 7;
684         u8 data_retry_limit;
685         __le32 tx_flags;
686         __le16 fc = hdr->frame_control;
687         struct il3945_tx_cmd *tx_cmd = (struct il3945_tx_cmd *)cmd->cmd.payload;
688
689         rate = il3945_rates[rate_idx].plcp;
690         tx_flags = tx_cmd->tx_flags;
691
692         /* We need to figure out how to get the sta->supp_rates while
693          * in this running context */
694         rate_mask = RATES_MASK_3945;
695
696         /* Set retry limit on DATA packets and Probe Responses */
697         if (ieee80211_is_probe_resp(fc))
698                 data_retry_limit = 3;
699         else
700                 data_retry_limit = IL_DEFAULT_TX_RETRY;
701         tx_cmd->data_retry_limit = data_retry_limit;
702         /* Set retry limit on RTS packets */
703         tx_cmd->rts_retry_limit = min(data_retry_limit, rts_retry_limit);
704
705         tx_cmd->rate = rate;
706         tx_cmd->tx_flags = tx_flags;
707
708         /* OFDM */
709         tx_cmd->supp_rates[0] =
710             ((rate_mask & IL_OFDM_RATES_MASK) >> IL_FIRST_OFDM_RATE) & 0xFF;
711
712         /* CCK */
713         tx_cmd->supp_rates[1] = (rate_mask & 0xF);
714
715         D_RATE("Tx sta id: %d, rate: %d (plcp), flags: 0x%4X "
716                "cck/ofdm mask: 0x%x/0x%x\n", sta_id, tx_cmd->rate,
717                le32_to_cpu(tx_cmd->tx_flags), tx_cmd->supp_rates[1],
718                tx_cmd->supp_rates[0]);
719 }
720
721 static u8
722 il3945_sync_sta(struct il_priv *il, int sta_id, u16 tx_rate)
723 {
724         unsigned long flags_spin;
725         struct il_station_entry *station;
726
727         if (sta_id == IL_INVALID_STATION)
728                 return IL_INVALID_STATION;
729
730         spin_lock_irqsave(&il->sta_lock, flags_spin);
731         station = &il->stations[sta_id];
732
733         station->sta.sta.modify_mask = STA_MODIFY_TX_RATE_MSK;
734         station->sta.rate_n_flags = cpu_to_le16(tx_rate);
735         station->sta.mode = STA_CONTROL_MODIFY_MSK;
736         il_send_add_sta(il, &station->sta, CMD_ASYNC);
737         spin_unlock_irqrestore(&il->sta_lock, flags_spin);
738
739         D_RATE("SCALE sync station %d to rate %d\n", sta_id, tx_rate);
740         return sta_id;
741 }
742
743 static void
744 il3945_set_pwr_vmain(struct il_priv *il)
745 {
746 /*
747  * (for documentation purposes)
748  * to set power to V_AUX, do
749
750                 if (pci_pme_capable(il->pci_dev, PCI_D3cold)) {
751                         il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
752                                         APMG_PS_CTRL_VAL_PWR_SRC_VAUX,
753                                         ~APMG_PS_CTRL_MSK_PWR_SRC);
754
755                         _il_poll_bit(il, CSR_GPIO_IN,
756                                      CSR_GPIO_IN_VAL_VAUX_PWR_SRC,
757                                      CSR_GPIO_IN_BIT_AUX_POWER, 5000);
758                 }
759  */
760
761         il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
762                               APMG_PS_CTRL_VAL_PWR_SRC_VMAIN,
763                               ~APMG_PS_CTRL_MSK_PWR_SRC);
764
765         _il_poll_bit(il, CSR_GPIO_IN, CSR_GPIO_IN_VAL_VMAIN_PWR_SRC,
766                      CSR_GPIO_IN_BIT_AUX_POWER, 5000);
767 }
768
769 static int
770 il3945_rx_init(struct il_priv *il, struct il_rx_queue *rxq)
771 {
772         il_wr(il, FH39_RCSR_RBD_BASE(0), rxq->bd_dma);
773         il_wr(il, FH39_RCSR_RPTR_ADDR(0), rxq->rb_stts_dma);
774         il_wr(il, FH39_RCSR_WPTR(0), 0);
775         il_wr(il, FH39_RCSR_CONFIG(0),
776               FH39_RCSR_RX_CONFIG_REG_VAL_DMA_CHNL_EN_ENABLE |
777               FH39_RCSR_RX_CONFIG_REG_VAL_RDRBD_EN_ENABLE |
778               FH39_RCSR_RX_CONFIG_REG_BIT_WR_STTS_EN |
779               FH39_RCSR_RX_CONFIG_REG_VAL_MAX_FRAG_SIZE_128 | (RX_QUEUE_SIZE_LOG
780                                                                <<
781                                                                FH39_RCSR_RX_CONFIG_REG_POS_RBDC_SIZE)
782               | FH39_RCSR_RX_CONFIG_REG_VAL_IRQ_DEST_INT_HOST | (1 <<
783                                                                  FH39_RCSR_RX_CONFIG_REG_POS_IRQ_RBTH)
784               | FH39_RCSR_RX_CONFIG_REG_VAL_MSG_MODE_FH);
785
786         /* fake read to flush all prev I/O */
787         il_rd(il, FH39_RSSR_CTRL);
788
789         return 0;
790 }
791
792 static int
793 il3945_tx_reset(struct il_priv *il)
794 {
795
796         /* bypass mode */
797         il_wr_prph(il, ALM_SCD_MODE_REG, 0x2);
798
799         /* RA 0 is active */
800         il_wr_prph(il, ALM_SCD_ARASTAT_REG, 0x01);
801
802         /* all 6 fifo are active */
803         il_wr_prph(il, ALM_SCD_TXFACT_REG, 0x3f);
804
805         il_wr_prph(il, ALM_SCD_SBYP_MODE_1_REG, 0x010000);
806         il_wr_prph(il, ALM_SCD_SBYP_MODE_2_REG, 0x030002);
807         il_wr_prph(il, ALM_SCD_TXF4MF_REG, 0x000004);
808         il_wr_prph(il, ALM_SCD_TXF5MF_REG, 0x000005);
809
810         il_wr(il, FH39_TSSR_CBB_BASE, il->_3945.shared_phys);
811
812         il_wr(il, FH39_TSSR_MSG_CONFIG,
813               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TXPD_ON |
814               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_TXPD_ON |
815               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_MAX_FRAG_SIZE_128B |
816               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TFD_ON |
817               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_CBB_ON |
818               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RSP_WAIT_TH |
819               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_RSP_WAIT_TH);
820
821         return 0;
822 }
823
824 /**
825  * il3945_txq_ctx_reset - Reset TX queue context
826  *
827  * Destroys all DMA structures and initialize them again
828  */
829 static int
830 il3945_txq_ctx_reset(struct il_priv *il)
831 {
832         int rc;
833         int txq_id, slots_num;
834
835         il3945_hw_txq_ctx_free(il);
836
837         /* allocate tx queue structure */
838         rc = il_alloc_txq_mem(il);
839         if (rc)
840                 return rc;
841
842         /* Tx CMD queue */
843         rc = il3945_tx_reset(il);
844         if (rc)
845                 goto error;
846
847         /* Tx queue(s) */
848         for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
849                 slots_num =
850                     (txq_id ==
851                      IL39_CMD_QUEUE_NUM) ? TFD_CMD_SLOTS : TFD_TX_CMD_SLOTS;
852                 rc = il_tx_queue_init(il, &il->txq[txq_id], slots_num, txq_id);
853                 if (rc) {
854                         IL_ERR("Tx %d queue init failed\n", txq_id);
855                         goto error;
856                 }
857         }
858
859         return rc;
860
861 error:
862         il3945_hw_txq_ctx_free(il);
863         return rc;
864 }
865
866 /*
867  * Start up 3945's basic functionality after it has been reset
868  * (e.g. after platform boot, or shutdown via il_apm_stop())
869  * NOTE:  This does not load uCode nor start the embedded processor
870  */
871 static int
872 il3945_apm_init(struct il_priv *il)
873 {
874         int ret = il_apm_init(il);
875
876         /* Clear APMG (NIC's internal power management) interrupts */
877         il_wr_prph(il, APMG_RTC_INT_MSK_REG, 0x0);
878         il_wr_prph(il, APMG_RTC_INT_STT_REG, 0xFFFFFFFF);
879
880         /* Reset radio chip */
881         il_set_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
882         udelay(5);
883         il_clear_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
884
885         return ret;
886 }
887
888 static void
889 il3945_nic_config(struct il_priv *il)
890 {
891         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
892         unsigned long flags;
893         u8 rev_id = il->pci_dev->revision;
894
895         spin_lock_irqsave(&il->lock, flags);
896
897         /* Determine HW type */
898         D_INFO("HW Revision ID = 0x%X\n", rev_id);
899
900         if (rev_id & PCI_CFG_REV_ID_BIT_RTP)
901                 D_INFO("RTP type\n");
902         else if (rev_id & PCI_CFG_REV_ID_BIT_BASIC_SKU) {
903                 D_INFO("3945 RADIO-MB type\n");
904                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
905                            CSR39_HW_IF_CONFIG_REG_BIT_3945_MB);
906         } else {
907                 D_INFO("3945 RADIO-MM type\n");
908                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
909                            CSR39_HW_IF_CONFIG_REG_BIT_3945_MM);
910         }
911
912         if (EEPROM_SKU_CAP_OP_MODE_MRC == eeprom->sku_cap) {
913                 D_INFO("SKU OP mode is mrc\n");
914                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
915                            CSR39_HW_IF_CONFIG_REG_BIT_SKU_MRC);
916         } else
917                 D_INFO("SKU OP mode is basic\n");
918
919         if ((eeprom->board_revision & 0xF0) == 0xD0) {
920                 D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
921                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
922                            CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
923         } else {
924                 D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
925                 il_clear_bit(il, CSR_HW_IF_CONFIG_REG,
926                              CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
927         }
928
929         if (eeprom->almgor_m_version <= 1) {
930                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
931                            CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_A);
932                 D_INFO("Card M type A version is 0x%X\n",
933                        eeprom->almgor_m_version);
934         } else {
935                 D_INFO("Card M type B version is 0x%X\n",
936                        eeprom->almgor_m_version);
937                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
938                            CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_B);
939         }
940         spin_unlock_irqrestore(&il->lock, flags);
941
942         if (eeprom->sku_cap & EEPROM_SKU_CAP_SW_RF_KILL_ENABLE)
943                 D_RF_KILL("SW RF KILL supported in EEPROM.\n");
944
945         if (eeprom->sku_cap & EEPROM_SKU_CAP_HW_RF_KILL_ENABLE)
946                 D_RF_KILL("HW RF KILL supported in EEPROM.\n");
947 }
948
949 int
950 il3945_hw_nic_init(struct il_priv *il)
951 {
952         int rc;
953         unsigned long flags;
954         struct il_rx_queue *rxq = &il->rxq;
955
956         spin_lock_irqsave(&il->lock, flags);
957         il3945_apm_init(il);
958         spin_unlock_irqrestore(&il->lock, flags);
959
960         il3945_set_pwr_vmain(il);
961         il3945_nic_config(il);
962
963         /* Allocate the RX queue, or reset if it is already allocated */
964         if (!rxq->bd) {
965                 rc = il_rx_queue_alloc(il);
966                 if (rc) {
967                         IL_ERR("Unable to initialize Rx queue\n");
968                         return -ENOMEM;
969                 }
970         } else
971                 il3945_rx_queue_reset(il, rxq);
972
973         il3945_rx_replenish(il);
974
975         il3945_rx_init(il, rxq);
976
977         /* Look at using this instead:
978            rxq->need_update = 1;
979            il_rx_queue_update_write_ptr(il, rxq);
980          */
981
982         il_wr(il, FH39_RCSR_WPTR(0), rxq->write & ~7);
983
984         rc = il3945_txq_ctx_reset(il);
985         if (rc)
986                 return rc;
987
988         set_bit(S_INIT, &il->status);
989
990         return 0;
991 }
992
993 /**
994  * il3945_hw_txq_ctx_free - Free TXQ Context
995  *
996  * Destroy all TX DMA queues and structures
997  */
998 void
999 il3945_hw_txq_ctx_free(struct il_priv *il)
1000 {
1001         int txq_id;
1002
1003         /* Tx queues */
1004         if (il->txq)
1005                 for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++)
1006                         if (txq_id == IL39_CMD_QUEUE_NUM)
1007                                 il_cmd_queue_free(il);
1008                         else
1009                                 il_tx_queue_free(il, txq_id);
1010
1011         /* free tx queue structure */
1012         il_txq_mem(il);
1013 }
1014
1015 void
1016 il3945_hw_txq_ctx_stop(struct il_priv *il)
1017 {
1018         int txq_id;
1019
1020         /* stop SCD */
1021         il_wr_prph(il, ALM_SCD_MODE_REG, 0);
1022         il_wr_prph(il, ALM_SCD_TXFACT_REG, 0);
1023
1024         /* reset TFD queues */
1025         for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
1026                 il_wr(il, FH39_TCSR_CONFIG(txq_id), 0x0);
1027                 il_poll_bit(il, FH39_TSSR_TX_STATUS,
1028                             FH39_TSSR_TX_STATUS_REG_MSK_CHNL_IDLE(txq_id),
1029                             1000);
1030         }
1031
1032         il3945_hw_txq_ctx_free(il);
1033 }
1034
1035 /**
1036  * il3945_hw_reg_adjust_power_by_temp
1037  * return idx delta into power gain settings table
1038 */
1039 static int
1040 il3945_hw_reg_adjust_power_by_temp(int new_reading, int old_reading)
1041 {
1042         return (new_reading - old_reading) * (-11) / 100;
1043 }
1044
1045 /**
1046  * il3945_hw_reg_temp_out_of_range - Keep temperature in sane range
1047  */
1048 static inline int
1049 il3945_hw_reg_temp_out_of_range(int temperature)
1050 {
1051         return (temperature < -260 || temperature > 25) ? 1 : 0;
1052 }
1053
1054 int
1055 il3945_hw_get_temperature(struct il_priv *il)
1056 {
1057         return _il_rd(il, CSR_UCODE_DRV_GP2);
1058 }
1059
1060 /**
1061  * il3945_hw_reg_txpower_get_temperature
1062  * get the current temperature by reading from NIC
1063 */
1064 static int
1065 il3945_hw_reg_txpower_get_temperature(struct il_priv *il)
1066 {
1067         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1068         int temperature;
1069
1070         temperature = il3945_hw_get_temperature(il);
1071
1072         /* driver's okay range is -260 to +25.
1073          *   human readable okay range is 0 to +285 */
1074         D_INFO("Temperature: %d\n", temperature + IL_TEMP_CONVERT);
1075
1076         /* handle insane temp reading */
1077         if (il3945_hw_reg_temp_out_of_range(temperature)) {
1078                 IL_ERR("Error bad temperature value  %d\n", temperature);
1079
1080                 /* if really really hot(?),
1081                  *   substitute the 3rd band/group's temp measured at factory */
1082                 if (il->last_temperature > 100)
1083                         temperature = eeprom->groups[2].temperature;
1084                 else            /* else use most recent "sane" value from driver */
1085                         temperature = il->last_temperature;
1086         }
1087
1088         return temperature;     /* raw, not "human readable" */
1089 }
1090
1091 /* Adjust Txpower only if temperature variance is greater than threshold.
1092  *
1093  * Both are lower than older versions' 9 degrees */
1094 #define IL_TEMPERATURE_LIMIT_TIMER   6
1095
1096 /**
1097  * il3945_is_temp_calib_needed - determines if new calibration is needed
1098  *
1099  * records new temperature in tx_mgr->temperature.
1100  * replaces tx_mgr->last_temperature *only* if calib needed
1101  *    (assumes caller will actually do the calibration!). */
1102 static int
1103 il3945_is_temp_calib_needed(struct il_priv *il)
1104 {
1105         int temp_diff;
1106
1107         il->temperature = il3945_hw_reg_txpower_get_temperature(il);
1108         temp_diff = il->temperature - il->last_temperature;
1109
1110         /* get absolute value */
1111         if (temp_diff < 0) {
1112                 D_POWER("Getting cooler, delta %d,\n", temp_diff);
1113                 temp_diff = -temp_diff;
1114         } else if (temp_diff == 0)
1115                 D_POWER("Same temp,\n");
1116         else
1117                 D_POWER("Getting warmer, delta %d,\n", temp_diff);
1118
1119         /* if we don't need calibration, *don't* update last_temperature */
1120         if (temp_diff < IL_TEMPERATURE_LIMIT_TIMER) {
1121                 D_POWER("Timed thermal calib not needed\n");
1122                 return 0;
1123         }
1124
1125         D_POWER("Timed thermal calib needed\n");
1126
1127         /* assume that caller will actually do calib ...
1128          *   update the "last temperature" value */
1129         il->last_temperature = il->temperature;
1130         return 1;
1131 }
1132
1133 #define IL_MAX_GAIN_ENTRIES 78
1134 #define IL_CCK_FROM_OFDM_POWER_DIFF  -5
1135 #define IL_CCK_FROM_OFDM_IDX_DIFF (10)
1136
1137 /* radio and DSP power table, each step is 1/2 dB.
1138  * 1st number is for RF analog gain, 2nd number is for DSP pre-DAC gain. */
1139 static struct il3945_tx_power power_gain_table[2][IL_MAX_GAIN_ENTRIES] = {
1140         {
1141          {251, 127},            /* 2.4 GHz, highest power */
1142          {251, 127},
1143          {251, 127},
1144          {251, 127},
1145          {251, 125},
1146          {251, 110},
1147          {251, 105},
1148          {251, 98},
1149          {187, 125},
1150          {187, 115},
1151          {187, 108},
1152          {187, 99},
1153          {243, 119},
1154          {243, 111},
1155          {243, 105},
1156          {243, 97},
1157          {243, 92},
1158          {211, 106},
1159          {211, 100},
1160          {179, 120},
1161          {179, 113},
1162          {179, 107},
1163          {147, 125},
1164          {147, 119},
1165          {147, 112},
1166          {147, 106},
1167          {147, 101},
1168          {147, 97},
1169          {147, 91},
1170          {115, 107},
1171          {235, 121},
1172          {235, 115},
1173          {235, 109},
1174          {203, 127},
1175          {203, 121},
1176          {203, 115},
1177          {203, 108},
1178          {203, 102},
1179          {203, 96},
1180          {203, 92},
1181          {171, 110},
1182          {171, 104},
1183          {171, 98},
1184          {139, 116},
1185          {227, 125},
1186          {227, 119},
1187          {227, 113},
1188          {227, 107},
1189          {227, 101},
1190          {227, 96},
1191          {195, 113},
1192          {195, 106},
1193          {195, 102},
1194          {195, 95},
1195          {163, 113},
1196          {163, 106},
1197          {163, 102},
1198          {163, 95},
1199          {131, 113},
1200          {131, 106},
1201          {131, 102},
1202          {131, 95},
1203          {99, 113},
1204          {99, 106},
1205          {99, 102},
1206          {99, 95},
1207          {67, 113},
1208          {67, 106},
1209          {67, 102},
1210          {67, 95},
1211          {35, 113},
1212          {35, 106},
1213          {35, 102},
1214          {35, 95},
1215          {3, 113},
1216          {3, 106},
1217          {3, 102},
1218          {3, 95}                /* 2.4 GHz, lowest power */
1219         },
1220         {
1221          {251, 127},            /* 5.x GHz, highest power */
1222          {251, 120},
1223          {251, 114},
1224          {219, 119},
1225          {219, 101},
1226          {187, 113},
1227          {187, 102},
1228          {155, 114},
1229          {155, 103},
1230          {123, 117},
1231          {123, 107},
1232          {123, 99},
1233          {123, 92},
1234          {91, 108},
1235          {59, 125},
1236          {59, 118},
1237          {59, 109},
1238          {59, 102},
1239          {59, 96},
1240          {59, 90},
1241          {27, 104},
1242          {27, 98},
1243          {27, 92},
1244          {115, 118},
1245          {115, 111},
1246          {115, 104},
1247          {83, 126},
1248          {83, 121},
1249          {83, 113},
1250          {83, 105},
1251          {83, 99},
1252          {51, 118},
1253          {51, 111},
1254          {51, 104},
1255          {51, 98},
1256          {19, 116},
1257          {19, 109},
1258          {19, 102},
1259          {19, 98},
1260          {19, 93},
1261          {171, 113},
1262          {171, 107},
1263          {171, 99},
1264          {139, 120},
1265          {139, 113},
1266          {139, 107},
1267          {139, 99},
1268          {107, 120},
1269          {107, 113},
1270          {107, 107},
1271          {107, 99},
1272          {75, 120},
1273          {75, 113},
1274          {75, 107},
1275          {75, 99},
1276          {43, 120},
1277          {43, 113},
1278          {43, 107},
1279          {43, 99},
1280          {11, 120},
1281          {11, 113},
1282          {11, 107},
1283          {11, 99},
1284          {131, 107},
1285          {131, 99},
1286          {99, 120},
1287          {99, 113},
1288          {99, 107},
1289          {99, 99},
1290          {67, 120},
1291          {67, 113},
1292          {67, 107},
1293          {67, 99},
1294          {35, 120},
1295          {35, 113},
1296          {35, 107},
1297          {35, 99},
1298          {3, 120}               /* 5.x GHz, lowest power */
1299         }
1300 };
1301
1302 static inline u8
1303 il3945_hw_reg_fix_power_idx(int idx)
1304 {
1305         if (idx < 0)
1306                 return 0;
1307         if (idx >= IL_MAX_GAIN_ENTRIES)
1308                 return IL_MAX_GAIN_ENTRIES - 1;
1309         return (u8) idx;
1310 }
1311
1312 /* Kick off thermal recalibration check every 60 seconds */
1313 #define REG_RECALIB_PERIOD (60)
1314
1315 /**
1316  * il3945_hw_reg_set_scan_power - Set Tx power for scan probe requests
1317  *
1318  * Set (in our channel info database) the direct scan Tx power for 1 Mbit (CCK)
1319  * or 6 Mbit (OFDM) rates.
1320  */
1321 static void
1322 il3945_hw_reg_set_scan_power(struct il_priv *il, u32 scan_tbl_idx, s32 rate_idx,
1323                              const s8 *clip_pwrs,
1324                              struct il_channel_info *ch_info, int band_idx)
1325 {
1326         struct il3945_scan_power_info *scan_power_info;
1327         s8 power;
1328         u8 power_idx;
1329
1330         scan_power_info = &ch_info->scan_pwr_info[scan_tbl_idx];
1331
1332         /* use this channel group's 6Mbit clipping/saturation pwr,
1333          *   but cap at regulatory scan power restriction (set during init
1334          *   based on eeprom channel data) for this channel.  */
1335         power = min(ch_info->scan_power, clip_pwrs[RATE_6M_IDX_TBL]);
1336
1337         power = min(power, il->tx_power_user_lmt);
1338         scan_power_info->requested_power = power;
1339
1340         /* find difference between new scan *power* and current "normal"
1341          *   Tx *power* for 6Mb.  Use this difference (x2) to adjust the
1342          *   current "normal" temperature-compensated Tx power *idx* for
1343          *   this rate (1Mb or 6Mb) to yield new temp-compensated scan power
1344          *   *idx*. */
1345         power_idx =
1346             ch_info->power_info[rate_idx].power_table_idx - (power -
1347                                                              ch_info->
1348                                                              power_info
1349                                                              [RATE_6M_IDX_TBL].
1350                                                              requested_power) *
1351             2;
1352
1353         /* store reference idx that we use when adjusting *all* scan
1354          *   powers.  So we can accommodate user (all channel) or spectrum
1355          *   management (single channel) power changes "between" temperature
1356          *   feedback compensation procedures.
1357          * don't force fit this reference idx into gain table; it may be a
1358          *   negative number.  This will help avoid errors when we're at
1359          *   the lower bounds (highest gains, for warmest temperatures)
1360          *   of the table. */
1361
1362         /* don't exceed table bounds for "real" setting */
1363         power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1364
1365         scan_power_info->power_table_idx = power_idx;
1366         scan_power_info->tpc.tx_gain =
1367             power_gain_table[band_idx][power_idx].tx_gain;
1368         scan_power_info->tpc.dsp_atten =
1369             power_gain_table[band_idx][power_idx].dsp_atten;
1370 }
1371
1372 /**
1373  * il3945_send_tx_power - fill in Tx Power command with gain settings
1374  *
1375  * Configures power settings for all rates for the current channel,
1376  * using values from channel info struct, and send to NIC
1377  */
1378 static int
1379 il3945_send_tx_power(struct il_priv *il)
1380 {
1381         int rate_idx, i;
1382         const struct il_channel_info *ch_info = NULL;
1383         struct il3945_txpowertable_cmd txpower = {
1384                 .channel = il->active.channel,
1385         };
1386         u16 chan;
1387
1388         if (WARN_ONCE
1389             (test_bit(S_SCAN_HW, &il->status),
1390              "TX Power requested while scanning!\n"))
1391                 return -EAGAIN;
1392
1393         chan = le16_to_cpu(il->active.channel);
1394
1395         txpower.band = (il->band == IEEE80211_BAND_5GHZ) ? 0 : 1;
1396         ch_info = il_get_channel_info(il, il->band, chan);
1397         if (!ch_info) {
1398                 IL_ERR("Failed to get channel info for channel %d [%d]\n", chan,
1399                        il->band);
1400                 return -EINVAL;
1401         }
1402
1403         if (!il_is_channel_valid(ch_info)) {
1404                 D_POWER("Not calling TX_PWR_TBL_CMD on " "non-Tx channel.\n");
1405                 return 0;
1406         }
1407
1408         /* fill cmd with power settings for all rates for current channel */
1409         /* Fill OFDM rate */
1410         for (rate_idx = IL_FIRST_OFDM_RATE, i = 0;
1411              rate_idx <= IL39_LAST_OFDM_RATE; rate_idx++, i++) {
1412
1413                 txpower.power[i].tpc = ch_info->power_info[i].tpc;
1414                 txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1415
1416                 D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1417                         le16_to_cpu(txpower.channel), txpower.band,
1418                         txpower.power[i].tpc.tx_gain,
1419                         txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1420         }
1421         /* Fill CCK rates */
1422         for (rate_idx = IL_FIRST_CCK_RATE; rate_idx <= IL_LAST_CCK_RATE;
1423              rate_idx++, i++) {
1424                 txpower.power[i].tpc = ch_info->power_info[i].tpc;
1425                 txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1426
1427                 D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1428                         le16_to_cpu(txpower.channel), txpower.band,
1429                         txpower.power[i].tpc.tx_gain,
1430                         txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1431         }
1432
1433         return il_send_cmd_pdu(il, C_TX_PWR_TBL,
1434                                sizeof(struct il3945_txpowertable_cmd),
1435                                &txpower);
1436
1437 }
1438
1439 /**
1440  * il3945_hw_reg_set_new_power - Configures power tables at new levels
1441  * @ch_info: Channel to update.  Uses power_info.requested_power.
1442  *
1443  * Replace requested_power and base_power_idx ch_info fields for
1444  * one channel.
1445  *
1446  * Called if user or spectrum management changes power preferences.
1447  * Takes into account h/w and modulation limitations (clip power).
1448  *
1449  * This does *not* send anything to NIC, just sets up ch_info for one channel.
1450  *
1451  * NOTE: reg_compensate_for_temperature_dif() *must* be run after this to
1452  *       properly fill out the scan powers, and actual h/w gain settings,
1453  *       and send changes to NIC
1454  */
1455 static int
1456 il3945_hw_reg_set_new_power(struct il_priv *il, struct il_channel_info *ch_info)
1457 {
1458         struct il3945_channel_power_info *power_info;
1459         int power_changed = 0;
1460         int i;
1461         const s8 *clip_pwrs;
1462         int power;
1463
1464         /* Get this chnlgrp's rate-to-max/clip-powers table */
1465         clip_pwrs = il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1466
1467         /* Get this channel's rate-to-current-power settings table */
1468         power_info = ch_info->power_info;
1469
1470         /* update OFDM Txpower settings */
1471         for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++, ++power_info) {
1472                 int delta_idx;
1473
1474                 /* limit new power to be no more than h/w capability */
1475                 power = min(ch_info->curr_txpow, clip_pwrs[i]);
1476                 if (power == power_info->requested_power)
1477                         continue;
1478
1479                 /* find difference between old and new requested powers,
1480                  *    update base (non-temp-compensated) power idx */
1481                 delta_idx = (power - power_info->requested_power) * 2;
1482                 power_info->base_power_idx -= delta_idx;
1483
1484                 /* save new requested power value */
1485                 power_info->requested_power = power;
1486
1487                 power_changed = 1;
1488         }
1489
1490         /* update CCK Txpower settings, based on OFDM 12M setting ...
1491          *    ... all CCK power settings for a given channel are the *same*. */
1492         if (power_changed) {
1493                 power =
1494                     ch_info->power_info[RATE_12M_IDX_TBL].requested_power +
1495                     IL_CCK_FROM_OFDM_POWER_DIFF;
1496
1497                 /* do all CCK rates' il3945_channel_power_info structures */
1498                 for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++) {
1499                         power_info->requested_power = power;
1500                         power_info->base_power_idx =
1501                             ch_info->power_info[RATE_12M_IDX_TBL].
1502                             base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
1503                         ++power_info;
1504                 }
1505         }
1506
1507         return 0;
1508 }
1509
1510 /**
1511  * il3945_hw_reg_get_ch_txpower_limit - returns new power limit for channel
1512  *
1513  * NOTE: Returned power limit may be less (but not more) than requested,
1514  *       based strictly on regulatory (eeprom and spectrum mgt) limitations
1515  *       (no consideration for h/w clipping limitations).
1516  */
1517 static int
1518 il3945_hw_reg_get_ch_txpower_limit(struct il_channel_info *ch_info)
1519 {
1520         s8 max_power;
1521
1522 #if 0
1523         /* if we're using TGd limits, use lower of TGd or EEPROM */
1524         if (ch_info->tgd_data.max_power != 0)
1525                 max_power =
1526                     min(ch_info->tgd_data.max_power,
1527                         ch_info->eeprom.max_power_avg);
1528
1529         /* else just use EEPROM limits */
1530         else
1531 #endif
1532                 max_power = ch_info->eeprom.max_power_avg;
1533
1534         return min(max_power, ch_info->max_power_avg);
1535 }
1536
1537 /**
1538  * il3945_hw_reg_comp_txpower_temp - Compensate for temperature
1539  *
1540  * Compensate txpower settings of *all* channels for temperature.
1541  * This only accounts for the difference between current temperature
1542  *   and the factory calibration temperatures, and bases the new settings
1543  *   on the channel's base_power_idx.
1544  *
1545  * If RxOn is "associated", this sends the new Txpower to NIC!
1546  */
1547 static int
1548 il3945_hw_reg_comp_txpower_temp(struct il_priv *il)
1549 {
1550         struct il_channel_info *ch_info = NULL;
1551         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1552         int delta_idx;
1553         const s8 *clip_pwrs;    /* array of h/w max power levels for each rate */
1554         u8 a_band;
1555         u8 rate_idx;
1556         u8 scan_tbl_idx;
1557         u8 i;
1558         int ref_temp;
1559         int temperature = il->temperature;
1560
1561         if (il->disable_tx_power_cal || test_bit(S_SCANNING, &il->status)) {
1562                 /* do not perform tx power calibration */
1563                 return 0;
1564         }
1565         /* set up new Tx power info for each and every channel, 2.4 and 5.x */
1566         for (i = 0; i < il->channel_count; i++) {
1567                 ch_info = &il->channel_info[i];
1568                 a_band = il_is_channel_a_band(ch_info);
1569
1570                 /* Get this chnlgrp's factory calibration temperature */
1571                 ref_temp = (s16) eeprom->groups[ch_info->group_idx].temperature;
1572
1573                 /* get power idx adjustment based on current and factory
1574                  * temps */
1575                 delta_idx =
1576                     il3945_hw_reg_adjust_power_by_temp(temperature, ref_temp);
1577
1578                 /* set tx power value for all rates, OFDM and CCK */
1579                 for (rate_idx = 0; rate_idx < RATE_COUNT_3945; rate_idx++) {
1580                         int power_idx =
1581                             ch_info->power_info[rate_idx].base_power_idx;
1582
1583                         /* temperature compensate */
1584                         power_idx += delta_idx;
1585
1586                         /* stay within table range */
1587                         power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1588                         ch_info->power_info[rate_idx].power_table_idx =
1589                             (u8) power_idx;
1590                         ch_info->power_info[rate_idx].tpc =
1591                             power_gain_table[a_band][power_idx];
1592                 }
1593
1594                 /* Get this chnlgrp's rate-to-max/clip-powers table */
1595                 clip_pwrs =
1596                     il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1597
1598                 /* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
1599                 for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
1600                      scan_tbl_idx++) {
1601                         s32 actual_idx =
1602                             (scan_tbl_idx ==
1603                              0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
1604                         il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
1605                                                      actual_idx, clip_pwrs,
1606                                                      ch_info, a_band);
1607                 }
1608         }
1609
1610         /* send Txpower command for current channel to ucode */
1611         return il->ops->send_tx_power(il);
1612 }
1613
1614 int
1615 il3945_hw_reg_set_txpower(struct il_priv *il, s8 power)
1616 {
1617         struct il_channel_info *ch_info;
1618         s8 max_power;
1619         u8 a_band;
1620         u8 i;
1621
1622         if (il->tx_power_user_lmt == power) {
1623                 D_POWER("Requested Tx power same as current " "limit: %ddBm.\n",
1624                         power);
1625                 return 0;
1626         }
1627
1628         D_POWER("Setting upper limit clamp to %ddBm.\n", power);
1629         il->tx_power_user_lmt = power;
1630
1631         /* set up new Tx powers for each and every channel, 2.4 and 5.x */
1632
1633         for (i = 0; i < il->channel_count; i++) {
1634                 ch_info = &il->channel_info[i];
1635                 a_band = il_is_channel_a_band(ch_info);
1636
1637                 /* find minimum power of all user and regulatory constraints
1638                  *    (does not consider h/w clipping limitations) */
1639                 max_power = il3945_hw_reg_get_ch_txpower_limit(ch_info);
1640                 max_power = min(power, max_power);
1641                 if (max_power != ch_info->curr_txpow) {
1642                         ch_info->curr_txpow = max_power;
1643
1644                         /* this considers the h/w clipping limitations */
1645                         il3945_hw_reg_set_new_power(il, ch_info);
1646                 }
1647         }
1648
1649         /* update txpower settings for all channels,
1650          *   send to NIC if associated. */
1651         il3945_is_temp_calib_needed(il);
1652         il3945_hw_reg_comp_txpower_temp(il);
1653
1654         return 0;
1655 }
1656
1657 static int
1658 il3945_send_rxon_assoc(struct il_priv *il)
1659 {
1660         int rc = 0;
1661         struct il_rx_pkt *pkt;
1662         struct il3945_rxon_assoc_cmd rxon_assoc;
1663         struct il_host_cmd cmd = {
1664                 .id = C_RXON_ASSOC,
1665                 .len = sizeof(rxon_assoc),
1666                 .flags = CMD_WANT_SKB,
1667                 .data = &rxon_assoc,
1668         };
1669         const struct il_rxon_cmd *rxon1 = &il->staging;
1670         const struct il_rxon_cmd *rxon2 = &il->active;
1671
1672         if (rxon1->flags == rxon2->flags &&
1673             rxon1->filter_flags == rxon2->filter_flags &&
1674             rxon1->cck_basic_rates == rxon2->cck_basic_rates &&
1675             rxon1->ofdm_basic_rates == rxon2->ofdm_basic_rates) {
1676                 D_INFO("Using current RXON_ASSOC.  Not resending.\n");
1677                 return 0;
1678         }
1679
1680         rxon_assoc.flags = il->staging.flags;
1681         rxon_assoc.filter_flags = il->staging.filter_flags;
1682         rxon_assoc.ofdm_basic_rates = il->staging.ofdm_basic_rates;
1683         rxon_assoc.cck_basic_rates = il->staging.cck_basic_rates;
1684         rxon_assoc.reserved = 0;
1685
1686         rc = il_send_cmd_sync(il, &cmd);
1687         if (rc)
1688                 return rc;
1689
1690         pkt = (struct il_rx_pkt *)cmd.reply_page;
1691         if (pkt->hdr.flags & IL_CMD_FAILED_MSK) {
1692                 IL_ERR("Bad return from C_RXON_ASSOC command\n");
1693                 rc = -EIO;
1694         }
1695
1696         il_free_pages(il, cmd.reply_page);
1697
1698         return rc;
1699 }
1700
1701 /**
1702  * il3945_commit_rxon - commit staging_rxon to hardware
1703  *
1704  * The RXON command in staging_rxon is committed to the hardware and
1705  * the active_rxon structure is updated with the new data.  This
1706  * function correctly transitions out of the RXON_ASSOC_MSK state if
1707  * a HW tune is required based on the RXON structure changes.
1708  */
1709 int
1710 il3945_commit_rxon(struct il_priv *il)
1711 {
1712         /* cast away the const for active_rxon in this function */
1713         struct il3945_rxon_cmd *active_rxon = (void *)&il->active;
1714         struct il3945_rxon_cmd *staging_rxon = (void *)&il->staging;
1715         int rc = 0;
1716         bool new_assoc = !!(staging_rxon->filter_flags & RXON_FILTER_ASSOC_MSK);
1717
1718         if (test_bit(S_EXIT_PENDING, &il->status))
1719                 return -EINVAL;
1720
1721         if (!il_is_alive(il))
1722                 return -1;
1723
1724         /* always get timestamp with Rx frame */
1725         staging_rxon->flags |= RXON_FLG_TSF2HOST_MSK;
1726
1727         /* select antenna */
1728         staging_rxon->flags &= ~(RXON_FLG_DIS_DIV_MSK | RXON_FLG_ANT_SEL_MSK);
1729         staging_rxon->flags |= il3945_get_antenna_flags(il);
1730
1731         rc = il_check_rxon_cmd(il);
1732         if (rc) {
1733                 IL_ERR("Invalid RXON configuration.  Not committing.\n");
1734                 return -EINVAL;
1735         }
1736
1737         /* If we don't need to send a full RXON, we can use
1738          * il3945_rxon_assoc_cmd which is used to reconfigure filter
1739          * and other flags for the current radio configuration. */
1740         if (!il_full_rxon_required(il)) {
1741                 rc = il_send_rxon_assoc(il);
1742                 if (rc) {
1743                         IL_ERR("Error setting RXON_ASSOC "
1744                                "configuration (%d).\n", rc);
1745                         return rc;
1746                 }
1747
1748                 memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1749                 /*
1750                  * We do not commit tx power settings while channel changing,
1751                  * do it now if tx power changed.
1752                  */
1753                 il_set_tx_power(il, il->tx_power_next, false);
1754                 return 0;
1755         }
1756
1757         /* If we are currently associated and the new config requires
1758          * an RXON_ASSOC and the new config wants the associated mask enabled,
1759          * we must clear the associated from the active configuration
1760          * before we apply the new config */
1761         if (il_is_associated(il) && new_assoc) {
1762                 D_INFO("Toggling associated bit on current RXON\n");
1763                 active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
1764
1765                 /*
1766                  * reserved4 and 5 could have been filled by the iwlcore code.
1767                  * Let's clear them before pushing to the 3945.
1768                  */
1769                 active_rxon->reserved4 = 0;
1770                 active_rxon->reserved5 = 0;
1771                 rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1772                                      &il->active);
1773
1774                 /* If the mask clearing failed then we set
1775                  * active_rxon back to what it was previously */
1776                 if (rc) {
1777                         active_rxon->filter_flags |= RXON_FILTER_ASSOC_MSK;
1778                         IL_ERR("Error clearing ASSOC_MSK on current "
1779                                "configuration (%d).\n", rc);
1780                         return rc;
1781                 }
1782                 il_clear_ucode_stations(il);
1783                 il_restore_stations(il);
1784         }
1785
1786         D_INFO("Sending RXON\n" "* with%s RXON_FILTER_ASSOC_MSK\n"
1787                "* channel = %d\n" "* bssid = %pM\n", (new_assoc ? "" : "out"),
1788                le16_to_cpu(staging_rxon->channel), staging_rxon->bssid_addr);
1789
1790         /*
1791          * reserved4 and 5 could have been filled by the iwlcore code.
1792          * Let's clear them before pushing to the 3945.
1793          */
1794         staging_rxon->reserved4 = 0;
1795         staging_rxon->reserved5 = 0;
1796
1797         il_set_rxon_hwcrypto(il, !il3945_mod_params.sw_crypto);
1798
1799         /* Apply the new configuration */
1800         rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1801                              staging_rxon);
1802         if (rc) {
1803                 IL_ERR("Error setting new configuration (%d).\n", rc);
1804                 return rc;
1805         }
1806
1807         memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1808
1809         if (!new_assoc) {
1810                 il_clear_ucode_stations(il);
1811                 il_restore_stations(il);
1812         }
1813
1814         /* If we issue a new RXON command which required a tune then we must
1815          * send a new TXPOWER command or we won't be able to Tx any frames */
1816         rc = il_set_tx_power(il, il->tx_power_next, true);
1817         if (rc) {
1818                 IL_ERR("Error setting Tx power (%d).\n", rc);
1819                 return rc;
1820         }
1821
1822         /* Init the hardware's rate fallback order based on the band */
1823         rc = il3945_init_hw_rate_table(il);
1824         if (rc) {
1825                 IL_ERR("Error setting HW rate table: %02X\n", rc);
1826                 return -EIO;
1827         }
1828
1829         return 0;
1830 }
1831
1832 /**
1833  * il3945_reg_txpower_periodic -  called when time to check our temperature.
1834  *
1835  * -- reset periodic timer
1836  * -- see if temp has changed enough to warrant re-calibration ... if so:
1837  *     -- correct coeffs for temp (can reset temp timer)
1838  *     -- save this temp as "last",
1839  *     -- send new set of gain settings to NIC
1840  * NOTE:  This should continue working, even when we're not associated,
1841  *   so we can keep our internal table of scan powers current. */
1842 void
1843 il3945_reg_txpower_periodic(struct il_priv *il)
1844 {
1845         /* This will kick in the "brute force"
1846          * il3945_hw_reg_comp_txpower_temp() below */
1847         if (!il3945_is_temp_calib_needed(il))
1848                 goto reschedule;
1849
1850         /* Set up a new set of temp-adjusted TxPowers, send to NIC.
1851          * This is based *only* on current temperature,
1852          * ignoring any previous power measurements */
1853         il3945_hw_reg_comp_txpower_temp(il);
1854
1855 reschedule:
1856         queue_delayed_work(il->workqueue, &il->_3945.thermal_periodic,
1857                            REG_RECALIB_PERIOD * HZ);
1858 }
1859
1860 static void
1861 il3945_bg_reg_txpower_periodic(struct work_struct *work)
1862 {
1863         struct il_priv *il = container_of(work, struct il_priv,
1864                                           _3945.thermal_periodic.work);
1865
1866         if (test_bit(S_EXIT_PENDING, &il->status))
1867                 return;
1868
1869         mutex_lock(&il->mutex);
1870         il3945_reg_txpower_periodic(il);
1871         mutex_unlock(&il->mutex);
1872 }
1873
1874 /**
1875  * il3945_hw_reg_get_ch_grp_idx - find the channel-group idx (0-4) for channel.
1876  *
1877  * This function is used when initializing channel-info structs.
1878  *
1879  * NOTE: These channel groups do *NOT* match the bands above!
1880  *       These channel groups are based on factory-tested channels;
1881  *       on A-band, EEPROM's "group frequency" entries represent the top
1882  *       channel in each group 1-4.  Group 5 All B/G channels are in group 0.
1883  */
1884 static u16
1885 il3945_hw_reg_get_ch_grp_idx(struct il_priv *il,
1886                              const struct il_channel_info *ch_info)
1887 {
1888         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1889         struct il3945_eeprom_txpower_group *ch_grp = &eeprom->groups[0];
1890         u8 group;
1891         u16 group_idx = 0;      /* based on factory calib frequencies */
1892         u8 grp_channel;
1893
1894         /* Find the group idx for the channel ... don't use idx 1(?) */
1895         if (il_is_channel_a_band(ch_info)) {
1896                 for (group = 1; group < 5; group++) {
1897                         grp_channel = ch_grp[group].group_channel;
1898                         if (ch_info->channel <= grp_channel) {
1899                                 group_idx = group;
1900                                 break;
1901                         }
1902                 }
1903                 /* group 4 has a few channels *above* its factory cal freq */
1904                 if (group == 5)
1905                         group_idx = 4;
1906         } else
1907                 group_idx = 0;  /* 2.4 GHz, group 0 */
1908
1909         D_POWER("Chnl %d mapped to grp %d\n", ch_info->channel, group_idx);
1910         return group_idx;
1911 }
1912
1913 /**
1914  * il3945_hw_reg_get_matched_power_idx - Interpolate to get nominal idx
1915  *
1916  * Interpolate to get nominal (i.e. at factory calibration temperature) idx
1917  *   into radio/DSP gain settings table for requested power.
1918  */
1919 static int
1920 il3945_hw_reg_get_matched_power_idx(struct il_priv *il, s8 requested_power,
1921                                     s32 setting_idx, s32 *new_idx)
1922 {
1923         const struct il3945_eeprom_txpower_group *chnl_grp = NULL;
1924         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1925         s32 idx0, idx1;
1926         s32 power = 2 * requested_power;
1927         s32 i;
1928         const struct il3945_eeprom_txpower_sample *samples;
1929         s32 gains0, gains1;
1930         s32 res;
1931         s32 denominator;
1932
1933         chnl_grp = &eeprom->groups[setting_idx];
1934         samples = chnl_grp->samples;
1935         for (i = 0; i < 5; i++) {
1936                 if (power == samples[i].power) {
1937                         *new_idx = samples[i].gain_idx;
1938                         return 0;
1939                 }
1940         }
1941
1942         if (power > samples[1].power) {
1943                 idx0 = 0;
1944                 idx1 = 1;
1945         } else if (power > samples[2].power) {
1946                 idx0 = 1;
1947                 idx1 = 2;
1948         } else if (power > samples[3].power) {
1949                 idx0 = 2;
1950                 idx1 = 3;
1951         } else {
1952                 idx0 = 3;
1953                 idx1 = 4;
1954         }
1955
1956         denominator = (s32) samples[idx1].power - (s32) samples[idx0].power;
1957         if (denominator == 0)
1958                 return -EINVAL;
1959         gains0 = (s32) samples[idx0].gain_idx * (1 << 19);
1960         gains1 = (s32) samples[idx1].gain_idx * (1 << 19);
1961         res =
1962             gains0 + (gains1 - gains0) * ((s32) power -
1963                                           (s32) samples[idx0].power) /
1964             denominator + (1 << 18);
1965         *new_idx = res >> 19;
1966         return 0;
1967 }
1968
1969 static void
1970 il3945_hw_reg_init_channel_groups(struct il_priv *il)
1971 {
1972         u32 i;
1973         s32 rate_idx;
1974         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1975         const struct il3945_eeprom_txpower_group *group;
1976
1977         D_POWER("Initializing factory calib info from EEPROM\n");
1978
1979         for (i = 0; i < IL_NUM_TX_CALIB_GROUPS; i++) {
1980                 s8 *clip_pwrs;  /* table of power levels for each rate */
1981                 s8 satur_pwr;   /* saturation power for each chnl group */
1982                 group = &eeprom->groups[i];
1983
1984                 /* sanity check on factory saturation power value */
1985                 if (group->saturation_power < 40) {
1986                         IL_WARN("Error: saturation power is %d, "
1987                                 "less than minimum expected 40\n",
1988                                 group->saturation_power);
1989                         return;
1990                 }
1991
1992                 /*
1993                  * Derive requested power levels for each rate, based on
1994                  *   hardware capabilities (saturation power for band).
1995                  * Basic value is 3dB down from saturation, with further
1996                  *   power reductions for highest 3 data rates.  These
1997                  *   backoffs provide headroom for high rate modulation
1998                  *   power peaks, without too much distortion (clipping).
1999                  */
2000                 /* we'll fill in this array with h/w max power levels */
2001                 clip_pwrs = (s8 *) il->_3945.clip_groups[i].clip_powers;
2002
2003                 /* divide factory saturation power by 2 to find -3dB level */
2004                 satur_pwr = (s8) (group->saturation_power >> 1);
2005
2006                 /* fill in channel group's nominal powers for each rate */
2007                 for (rate_idx = 0; rate_idx < RATE_COUNT_3945;
2008                      rate_idx++, clip_pwrs++) {
2009                         switch (rate_idx) {
2010                         case RATE_36M_IDX_TBL:
2011                                 if (i == 0)     /* B/G */
2012                                         *clip_pwrs = satur_pwr;
2013                                 else    /* A */
2014                                         *clip_pwrs = satur_pwr - 5;
2015                                 break;
2016                         case RATE_48M_IDX_TBL:
2017                                 if (i == 0)
2018                                         *clip_pwrs = satur_pwr - 7;
2019                                 else
2020                                         *clip_pwrs = satur_pwr - 10;
2021                                 break;
2022                         case RATE_54M_IDX_TBL:
2023                                 if (i == 0)
2024                                         *clip_pwrs = satur_pwr - 9;
2025                                 else
2026                                         *clip_pwrs = satur_pwr - 12;
2027                                 break;
2028                         default:
2029                                 *clip_pwrs = satur_pwr;
2030                                 break;
2031                         }
2032                 }
2033         }
2034 }
2035
2036 /**
2037  * il3945_txpower_set_from_eeprom - Set channel power info based on EEPROM
2038  *
2039  * Second pass (during init) to set up il->channel_info
2040  *
2041  * Set up Tx-power settings in our channel info database for each VALID
2042  * (for this geo/SKU) channel, at all Tx data rates, based on eeprom values
2043  * and current temperature.
2044  *
2045  * Since this is based on current temperature (at init time), these values may
2046  * not be valid for very long, but it gives us a starting/default point,
2047  * and allows us to active (i.e. using Tx) scan.
2048  *
2049  * This does *not* write values to NIC, just sets up our internal table.
2050  */
2051 int
2052 il3945_txpower_set_from_eeprom(struct il_priv *il)
2053 {
2054         struct il_channel_info *ch_info = NULL;
2055         struct il3945_channel_power_info *pwr_info;
2056         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
2057         int delta_idx;
2058         u8 rate_idx;
2059         u8 scan_tbl_idx;
2060         const s8 *clip_pwrs;    /* array of power levels for each rate */
2061         u8 gain, dsp_atten;
2062         s8 power;
2063         u8 pwr_idx, base_pwr_idx, a_band;
2064         u8 i;
2065         int temperature;
2066
2067         /* save temperature reference,
2068          *   so we can determine next time to calibrate */
2069         temperature = il3945_hw_reg_txpower_get_temperature(il);
2070         il->last_temperature = temperature;
2071
2072         il3945_hw_reg_init_channel_groups(il);
2073
2074         /* initialize Tx power info for each and every channel, 2.4 and 5.x */
2075         for (i = 0, ch_info = il->channel_info; i < il->channel_count;
2076              i++, ch_info++) {
2077                 a_band = il_is_channel_a_band(ch_info);
2078                 if (!il_is_channel_valid(ch_info))
2079                         continue;
2080
2081                 /* find this channel's channel group (*not* "band") idx */
2082                 ch_info->group_idx = il3945_hw_reg_get_ch_grp_idx(il, ch_info);
2083
2084                 /* Get this chnlgrp's rate->max/clip-powers table */
2085                 clip_pwrs =
2086                     il->_3945.clip_groups[ch_info->group_idx].clip_powers;
2087
2088                 /* calculate power idx *adjustment* value according to
2089                  *  diff between current temperature and factory temperature */
2090                 delta_idx =
2091                     il3945_hw_reg_adjust_power_by_temp(temperature,
2092                                                        eeprom->groups[ch_info->
2093                                                                       group_idx].
2094                                                        temperature);
2095
2096                 D_POWER("Delta idx for channel %d: %d [%d]\n", ch_info->channel,
2097                         delta_idx, temperature + IL_TEMP_CONVERT);
2098
2099                 /* set tx power value for all OFDM rates */
2100                 for (rate_idx = 0; rate_idx < IL_OFDM_RATES; rate_idx++) {
2101                         s32 uninitialized_var(power_idx);
2102                         int rc;
2103
2104                         /* use channel group's clip-power table,
2105                          *   but don't exceed channel's max power */
2106                         s8 pwr = min(ch_info->max_power_avg,
2107                                      clip_pwrs[rate_idx]);
2108
2109                         pwr_info = &ch_info->power_info[rate_idx];
2110
2111                         /* get base (i.e. at factory-measured temperature)
2112                          *    power table idx for this rate's power */
2113                         rc = il3945_hw_reg_get_matched_power_idx(il, pwr,
2114                                                                  ch_info->
2115                                                                  group_idx,
2116                                                                  &power_idx);
2117                         if (rc) {
2118                                 IL_ERR("Invalid power idx\n");
2119                                 return rc;
2120                         }
2121                         pwr_info->base_power_idx = (u8) power_idx;
2122
2123                         /* temperature compensate */
2124                         power_idx += delta_idx;
2125
2126                         /* stay within range of gain table */
2127                         power_idx = il3945_hw_reg_fix_power_idx(power_idx);
2128
2129                         /* fill 1 OFDM rate's il3945_channel_power_info struct */
2130                         pwr_info->requested_power = pwr;
2131                         pwr_info->power_table_idx = (u8) power_idx;
2132                         pwr_info->tpc.tx_gain =
2133                             power_gain_table[a_band][power_idx].tx_gain;
2134                         pwr_info->tpc.dsp_atten =
2135                             power_gain_table[a_band][power_idx].dsp_atten;
2136                 }
2137
2138                 /* set tx power for CCK rates, based on OFDM 12 Mbit settings */
2139                 pwr_info = &ch_info->power_info[RATE_12M_IDX_TBL];
2140                 power = pwr_info->requested_power + IL_CCK_FROM_OFDM_POWER_DIFF;
2141                 pwr_idx = pwr_info->power_table_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2142                 base_pwr_idx =
2143                     pwr_info->base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2144
2145                 /* stay within table range */
2146                 pwr_idx = il3945_hw_reg_fix_power_idx(pwr_idx);
2147                 gain = power_gain_table[a_band][pwr_idx].tx_gain;
2148                 dsp_atten = power_gain_table[a_band][pwr_idx].dsp_atten;
2149
2150                 /* fill each CCK rate's il3945_channel_power_info structure
2151                  * NOTE:  All CCK-rate Txpwrs are the same for a given chnl!
2152                  * NOTE:  CCK rates start at end of OFDM rates! */
2153                 for (rate_idx = 0; rate_idx < IL_CCK_RATES; rate_idx++) {
2154                         pwr_info =
2155                             &ch_info->power_info[rate_idx + IL_OFDM_RATES];
2156                         pwr_info->requested_power = power;
2157                         pwr_info->power_table_idx = pwr_idx;
2158                         pwr_info->base_power_idx = base_pwr_idx;
2159                         pwr_info->tpc.tx_gain = gain;
2160                         pwr_info->tpc.dsp_atten = dsp_atten;
2161                 }
2162
2163                 /* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
2164                 for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
2165                      scan_tbl_idx++) {
2166                         s32 actual_idx =
2167                             (scan_tbl_idx ==
2168                              0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
2169                         il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
2170                                                      actual_idx, clip_pwrs,
2171                                                      ch_info, a_band);
2172                 }
2173         }
2174
2175         return 0;
2176 }
2177
2178 int
2179 il3945_hw_rxq_stop(struct il_priv *il)
2180 {
2181         int rc;
2182
2183         il_wr(il, FH39_RCSR_CONFIG(0), 0);
2184         rc = il_poll_bit(il, FH39_RSSR_STATUS,
2185                          FH39_RSSR_CHNL0_RX_STATUS_CHNL_IDLE, 1000);
2186         if (rc < 0)
2187                 IL_ERR("Can't stop Rx DMA.\n");
2188
2189         return 0;
2190 }
2191
2192 int
2193 il3945_hw_tx_queue_init(struct il_priv *il, struct il_tx_queue *txq)
2194 {
2195         int txq_id = txq->q.id;
2196
2197         struct il3945_shared *shared_data = il->_3945.shared_virt;
2198
2199         shared_data->tx_base_ptr[txq_id] = cpu_to_le32((u32) txq->q.dma_addr);
2200
2201         il_wr(il, FH39_CBCC_CTRL(txq_id), 0);
2202         il_wr(il, FH39_CBCC_BASE(txq_id), 0);
2203
2204         il_wr(il, FH39_TCSR_CONFIG(txq_id),
2205               FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_RTC_NOINT |
2206               FH39_TCSR_TX_CONFIG_REG_VAL_MSG_MODE_TXF |
2207               FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_HOST_IFTFD |
2208               FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CREDIT_ENABLE_VAL |
2209               FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CHNL_ENABLE);
2210
2211         /* fake read to flush all prev. writes */
2212         _il_rd(il, FH39_TSSR_CBB_BASE);
2213
2214         return 0;
2215 }
2216
2217 /*
2218  * HCMD utils
2219  */
2220 static u16
2221 il3945_get_hcmd_size(u8 cmd_id, u16 len)
2222 {
2223         switch (cmd_id) {
2224         case C_RXON:
2225                 return sizeof(struct il3945_rxon_cmd);
2226         case C_POWER_TBL:
2227                 return sizeof(struct il3945_powertable_cmd);
2228         default:
2229                 return len;
2230         }
2231 }
2232
2233 static u16
2234 il3945_build_addsta_hcmd(const struct il_addsta_cmd *cmd, u8 * data)
2235 {
2236         struct il3945_addsta_cmd *addsta = (struct il3945_addsta_cmd *)data;
2237         addsta->mode = cmd->mode;
2238         memcpy(&addsta->sta, &cmd->sta, sizeof(struct sta_id_modify));
2239         memcpy(&addsta->key, &cmd->key, sizeof(struct il4965_keyinfo));
2240         addsta->station_flags = cmd->station_flags;
2241         addsta->station_flags_msk = cmd->station_flags_msk;
2242         addsta->tid_disable_tx = cpu_to_le16(0);
2243         addsta->rate_n_flags = cmd->rate_n_flags;
2244         addsta->add_immediate_ba_tid = cmd->add_immediate_ba_tid;
2245         addsta->remove_immediate_ba_tid = cmd->remove_immediate_ba_tid;
2246         addsta->add_immediate_ba_ssn = cmd->add_immediate_ba_ssn;
2247
2248         return (u16) sizeof(struct il3945_addsta_cmd);
2249 }
2250
2251 static int
2252 il3945_add_bssid_station(struct il_priv *il, const u8 * addr, u8 * sta_id_r)
2253 {
2254         int ret;
2255         u8 sta_id;
2256         unsigned long flags;
2257
2258         if (sta_id_r)
2259                 *sta_id_r = IL_INVALID_STATION;
2260
2261         ret = il_add_station_common(il, addr, 0, NULL, &sta_id);
2262         if (ret) {
2263                 IL_ERR("Unable to add station %pM\n", addr);
2264                 return ret;
2265         }
2266
2267         if (sta_id_r)
2268                 *sta_id_r = sta_id;
2269
2270         spin_lock_irqsave(&il->sta_lock, flags);
2271         il->stations[sta_id].used |= IL_STA_LOCAL;
2272         spin_unlock_irqrestore(&il->sta_lock, flags);
2273
2274         return 0;
2275 }
2276
2277 static int
2278 il3945_manage_ibss_station(struct il_priv *il, struct ieee80211_vif *vif,
2279                            bool add)
2280 {
2281         struct il_vif_priv *vif_priv = (void *)vif->drv_priv;
2282         int ret;
2283
2284         if (add) {
2285                 ret =
2286                     il3945_add_bssid_station(il, vif->bss_conf.bssid,
2287                                              &vif_priv->ibss_bssid_sta_id);
2288                 if (ret)
2289                         return ret;
2290
2291                 il3945_sync_sta(il, vif_priv->ibss_bssid_sta_id,
2292                                 (il->band ==
2293                                  IEEE80211_BAND_5GHZ) ? RATE_6M_PLCP :
2294                                 RATE_1M_PLCP);
2295                 il3945_rate_scale_init(il->hw, vif_priv->ibss_bssid_sta_id);
2296
2297                 return 0;
2298         }
2299
2300         return il_remove_station(il, vif_priv->ibss_bssid_sta_id,
2301                                  vif->bss_conf.bssid);
2302 }
2303
2304 /**
2305  * il3945_init_hw_rate_table - Initialize the hardware rate fallback table
2306  */
2307 int
2308 il3945_init_hw_rate_table(struct il_priv *il)
2309 {
2310         int rc, i, idx, prev_idx;
2311         struct il3945_rate_scaling_cmd rate_cmd = {
2312                 .reserved = {0, 0, 0},
2313         };
2314         struct il3945_rate_scaling_info *table = rate_cmd.table;
2315
2316         for (i = 0; i < ARRAY_SIZE(il3945_rates); i++) {
2317                 idx = il3945_rates[i].table_rs_idx;
2318
2319                 table[idx].rate_n_flags = cpu_to_le16(il3945_rates[i].plcp);
2320                 table[idx].try_cnt = il->retry_rate;
2321                 prev_idx = il3945_get_prev_ieee_rate(i);
2322                 table[idx].next_rate_idx = il3945_rates[prev_idx].table_rs_idx;
2323         }
2324
2325         switch (il->band) {
2326         case IEEE80211_BAND_5GHZ:
2327                 D_RATE("Select A mode rate scale\n");
2328                 /* If one of the following CCK rates is used,
2329                  * have it fall back to the 6M OFDM rate */
2330                 for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++)
2331                         table[i].next_rate_idx =
2332                             il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2333
2334                 /* Don't fall back to CCK rates */
2335                 table[RATE_12M_IDX_TBL].next_rate_idx = RATE_9M_IDX_TBL;
2336
2337                 /* Don't drop out of OFDM rates */
2338                 table[RATE_6M_IDX_TBL].next_rate_idx =
2339                     il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2340                 break;
2341
2342         case IEEE80211_BAND_2GHZ:
2343                 D_RATE("Select B/G mode rate scale\n");
2344                 /* If an OFDM rate is used, have it fall back to the
2345                  * 1M CCK rates */
2346
2347                 if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
2348                     il_is_associated(il)) {
2349
2350                         idx = IL_FIRST_CCK_RATE;
2351                         for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++)
2352                                 table[i].next_rate_idx =
2353                                     il3945_rates[idx].table_rs_idx;
2354
2355                         idx = RATE_11M_IDX_TBL;
2356                         /* CCK shouldn't fall back to OFDM... */
2357                         table[idx].next_rate_idx = RATE_5M_IDX_TBL;
2358                 }
2359                 break;
2360
2361         default:
2362                 WARN_ON(1);
2363                 break;
2364         }
2365
2366         /* Update the rate scaling for control frame Tx */
2367         rate_cmd.table_id = 0;
2368         rc = il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2369         if (rc)
2370                 return rc;
2371
2372         /* Update the rate scaling for data frame Tx */
2373         rate_cmd.table_id = 1;
2374         return il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2375 }
2376
2377 /* Called when initializing driver */
2378 int
2379 il3945_hw_set_hw_params(struct il_priv *il)
2380 {
2381         memset((void *)&il->hw_params, 0, sizeof(struct il_hw_params));
2382
2383         il->_3945.shared_virt =
2384             dma_alloc_coherent(&il->pci_dev->dev, sizeof(struct il3945_shared),
2385                                &il->_3945.shared_phys, GFP_KERNEL);
2386         if (!il->_3945.shared_virt) {
2387                 IL_ERR("failed to allocate pci memory\n");
2388                 return -ENOMEM;
2389         }
2390
2391         il->hw_params.bcast_id = IL3945_BROADCAST_ID;
2392
2393         /* Assign number of Usable TX queues */
2394         il->hw_params.max_txq_num = il->cfg->num_of_queues;
2395
2396         il->hw_params.tfd_size = sizeof(struct il3945_tfd);
2397         il->hw_params.rx_page_order = get_order(IL_RX_BUF_SIZE_3K);
2398         il->hw_params.max_rxq_size = RX_QUEUE_SIZE;
2399         il->hw_params.max_rxq_log = RX_QUEUE_SIZE_LOG;
2400         il->hw_params.max_stations = IL3945_STATION_COUNT;
2401
2402         il->sta_key_max_num = STA_KEY_MAX_NUM;
2403
2404         il->hw_params.rx_wrt_ptr_reg = FH39_RSCSR_CHNL0_WPTR;
2405         il->hw_params.max_beacon_itrvl = IL39_MAX_UCODE_BEACON_INTERVAL;
2406         il->hw_params.beacon_time_tsf_bits = IL3945_EXT_BEACON_TIME_POS;
2407
2408         return 0;
2409 }
2410
2411 unsigned int
2412 il3945_hw_get_beacon_cmd(struct il_priv *il, struct il3945_frame *frame,
2413                          u8 rate)
2414 {
2415         struct il3945_tx_beacon_cmd *tx_beacon_cmd;
2416         unsigned int frame_size;
2417
2418         tx_beacon_cmd = (struct il3945_tx_beacon_cmd *)&frame->u;
2419         memset(tx_beacon_cmd, 0, sizeof(*tx_beacon_cmd));
2420
2421         tx_beacon_cmd->tx.sta_id = il->hw_params.bcast_id;
2422         tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
2423
2424         frame_size =
2425             il3945_fill_beacon_frame(il, tx_beacon_cmd->frame,
2426                                      sizeof(frame->u) - sizeof(*tx_beacon_cmd));
2427
2428         BUG_ON(frame_size > MAX_MPDU_SIZE);
2429         tx_beacon_cmd->tx.len = cpu_to_le16((u16) frame_size);
2430
2431         tx_beacon_cmd->tx.rate = rate;
2432         tx_beacon_cmd->tx.tx_flags =
2433             (TX_CMD_FLG_SEQ_CTL_MSK | TX_CMD_FLG_TSF_MSK);
2434
2435         /* supp_rates[0] == OFDM start at IL_FIRST_OFDM_RATE */
2436         tx_beacon_cmd->tx.supp_rates[0] =
2437             (IL_OFDM_BASIC_RATES_MASK >> IL_FIRST_OFDM_RATE) & 0xFF;
2438
2439         tx_beacon_cmd->tx.supp_rates[1] = (IL_CCK_BASIC_RATES_MASK & 0xF);
2440
2441         return sizeof(struct il3945_tx_beacon_cmd) + frame_size;
2442 }
2443
2444 void
2445 il3945_hw_handler_setup(struct il_priv *il)
2446 {
2447         il->handlers[C_TX] = il3945_hdl_tx;
2448         il->handlers[N_3945_RX] = il3945_hdl_rx;
2449 }
2450
2451 void
2452 il3945_hw_setup_deferred_work(struct il_priv *il)
2453 {
2454         INIT_DELAYED_WORK(&il->_3945.thermal_periodic,
2455                           il3945_bg_reg_txpower_periodic);
2456 }
2457
2458 void
2459 il3945_hw_cancel_deferred_work(struct il_priv *il)
2460 {
2461         cancel_delayed_work(&il->_3945.thermal_periodic);
2462 }
2463
2464 /* check contents of special bootstrap uCode SRAM */
2465 static int
2466 il3945_verify_bsm(struct il_priv *il)
2467 {
2468         __le32 *image = il->ucode_boot.v_addr;
2469         u32 len = il->ucode_boot.len;
2470         u32 reg;
2471         u32 val;
2472
2473         D_INFO("Begin verify bsm\n");
2474
2475         /* verify BSM SRAM contents */
2476         val = il_rd_prph(il, BSM_WR_DWCOUNT_REG);
2477         for (reg = BSM_SRAM_LOWER_BOUND; reg < BSM_SRAM_LOWER_BOUND + len;
2478              reg += sizeof(u32), image++) {
2479                 val = il_rd_prph(il, reg);
2480                 if (val != le32_to_cpu(*image)) {
2481                         IL_ERR("BSM uCode verification failed at "
2482                                "addr 0x%08X+%u (of %u), is 0x%x, s/b 0x%x\n",
2483                                BSM_SRAM_LOWER_BOUND, reg - BSM_SRAM_LOWER_BOUND,
2484                                len, val, le32_to_cpu(*image));
2485                         return -EIO;
2486                 }
2487         }
2488
2489         D_INFO("BSM bootstrap uCode image OK\n");
2490
2491         return 0;
2492 }
2493
2494 /******************************************************************************
2495  *
2496  * EEPROM related functions
2497  *
2498  ******************************************************************************/
2499
2500 /*
2501  * Clear the OWNER_MSK, to establish driver (instead of uCode running on
2502  * embedded controller) as EEPROM reader; each read is a series of pulses
2503  * to/from the EEPROM chip, not a single event, so even reads could conflict
2504  * if they weren't arbitrated by some ownership mechanism.  Here, the driver
2505  * simply claims ownership, which should be safe when this function is called
2506  * (i.e. before loading uCode!).
2507  */
2508 static int
2509 il3945_eeprom_acquire_semaphore(struct il_priv *il)
2510 {
2511         _il_clear_bit(il, CSR_EEPROM_GP, CSR_EEPROM_GP_IF_OWNER_MSK);
2512         return 0;
2513 }
2514
2515 static void
2516 il3945_eeprom_release_semaphore(struct il_priv *il)
2517 {
2518         return;
2519 }
2520
2521  /**
2522   * il3945_load_bsm - Load bootstrap instructions
2523   *
2524   * BSM operation:
2525   *
2526   * The Bootstrap State Machine (BSM) stores a short bootstrap uCode program
2527   * in special SRAM that does not power down during RFKILL.  When powering back
2528   * up after power-saving sleeps (or during initial uCode load), the BSM loads
2529   * the bootstrap program into the on-board processor, and starts it.
2530   *
2531   * The bootstrap program loads (via DMA) instructions and data for a new
2532   * program from host DRAM locations indicated by the host driver in the
2533   * BSM_DRAM_* registers.  Once the new program is loaded, it starts
2534   * automatically.
2535   *
2536   * When initializing the NIC, the host driver points the BSM to the
2537   * "initialize" uCode image.  This uCode sets up some internal data, then
2538   * notifies host via "initialize alive" that it is complete.
2539   *
2540   * The host then replaces the BSM_DRAM_* pointer values to point to the
2541   * normal runtime uCode instructions and a backup uCode data cache buffer
2542   * (filled initially with starting data values for the on-board processor),
2543   * then triggers the "initialize" uCode to load and launch the runtime uCode,
2544   * which begins normal operation.
2545   *
2546   * When doing a power-save shutdown, runtime uCode saves data SRAM into
2547   * the backup data cache in DRAM before SRAM is powered down.
2548   *
2549   * When powering back up, the BSM loads the bootstrap program.  This reloads
2550   * the runtime uCode instructions and the backup data cache into SRAM,
2551   * and re-launches the runtime uCode from where it left off.
2552   */
2553 static int
2554 il3945_load_bsm(struct il_priv *il)
2555 {
2556         __le32 *image = il->ucode_boot.v_addr;
2557         u32 len = il->ucode_boot.len;
2558         dma_addr_t pinst;
2559         dma_addr_t pdata;
2560         u32 inst_len;
2561         u32 data_len;
2562         int rc;
2563         int i;
2564         u32 done;
2565         u32 reg_offset;
2566
2567         D_INFO("Begin load bsm\n");
2568
2569         /* make sure bootstrap program is no larger than BSM's SRAM size */
2570         if (len > IL39_MAX_BSM_SIZE)
2571                 return -EINVAL;
2572
2573         /* Tell bootstrap uCode where to find the "Initialize" uCode
2574          *   in host DRAM ... host DRAM physical address bits 31:0 for 3945.
2575          * NOTE:  il3945_initialize_alive_start() will replace these values,
2576          *        after the "initialize" uCode has run, to point to
2577          *        runtime/protocol instructions and backup data cache. */
2578         pinst = il->ucode_init.p_addr;
2579         pdata = il->ucode_init_data.p_addr;
2580         inst_len = il->ucode_init.len;
2581         data_len = il->ucode_init_data.len;
2582
2583         il_wr_prph(il, BSM_DRAM_INST_PTR_REG, pinst);
2584         il_wr_prph(il, BSM_DRAM_DATA_PTR_REG, pdata);
2585         il_wr_prph(il, BSM_DRAM_INST_BYTECOUNT_REG, inst_len);
2586         il_wr_prph(il, BSM_DRAM_DATA_BYTECOUNT_REG, data_len);
2587
2588         /* Fill BSM memory with bootstrap instructions */
2589         for (reg_offset = BSM_SRAM_LOWER_BOUND;
2590              reg_offset < BSM_SRAM_LOWER_BOUND + len;
2591              reg_offset += sizeof(u32), image++)
2592                 _il_wr_prph(il, reg_offset, le32_to_cpu(*image));
2593
2594         rc = il3945_verify_bsm(il);
2595         if (rc)
2596                 return rc;
2597
2598         /* Tell BSM to copy from BSM SRAM into instruction SRAM, when asked */
2599         il_wr_prph(il, BSM_WR_MEM_SRC_REG, 0x0);
2600         il_wr_prph(il, BSM_WR_MEM_DST_REG, IL39_RTC_INST_LOWER_BOUND);
2601         il_wr_prph(il, BSM_WR_DWCOUNT_REG, len / sizeof(u32));
2602
2603         /* Load bootstrap code into instruction SRAM now,
2604          *   to prepare to load "initialize" uCode */
2605         il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START);
2606
2607         /* Wait for load of bootstrap uCode to finish */
2608         for (i = 0; i < 100; i++) {
2609                 done = il_rd_prph(il, BSM_WR_CTRL_REG);
2610                 if (!(done & BSM_WR_CTRL_REG_BIT_START))
2611                         break;
2612                 udelay(10);
2613         }
2614         if (i < 100)
2615                 D_INFO("BSM write complete, poll %d iterations\n", i);
2616         else {
2617                 IL_ERR("BSM write did not complete!\n");
2618                 return -EIO;
2619         }
2620
2621         /* Enable future boot loads whenever power management unit triggers it
2622          *   (e.g. when powering back up after power-save shutdown) */
2623         il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START_EN);
2624
2625         return 0;
2626 }
2627
2628 const struct il_ops il3945_ops = {
2629         .txq_attach_buf_to_tfd = il3945_hw_txq_attach_buf_to_tfd,
2630         .txq_free_tfd = il3945_hw_txq_free_tfd,
2631         .txq_init = il3945_hw_tx_queue_init,
2632         .load_ucode = il3945_load_bsm,
2633         .dump_nic_error_log = il3945_dump_nic_error_log,
2634         .apm_init = il3945_apm_init,
2635         .send_tx_power = il3945_send_tx_power,
2636         .is_valid_rtc_data_addr = il3945_hw_valid_rtc_data_addr,
2637         .eeprom_acquire_semaphore = il3945_eeprom_acquire_semaphore,
2638         .eeprom_release_semaphore = il3945_eeprom_release_semaphore,
2639
2640         .rxon_assoc = il3945_send_rxon_assoc,
2641         .commit_rxon = il3945_commit_rxon,
2642
2643         .get_hcmd_size = il3945_get_hcmd_size,
2644         .build_addsta_hcmd = il3945_build_addsta_hcmd,
2645         .request_scan = il3945_request_scan,
2646         .post_scan = il3945_post_scan,
2647
2648         .post_associate = il3945_post_associate,
2649         .config_ap = il3945_config_ap,
2650         .manage_ibss_station = il3945_manage_ibss_station,
2651
2652         .send_led_cmd = il3945_send_led_cmd,
2653 };
2654
2655 static struct il_cfg il3945_bg_cfg = {
2656         .name = "3945BG",
2657         .fw_name_pre = IL3945_FW_PRE,
2658         .ucode_api_max = IL3945_UCODE_API_MAX,
2659         .ucode_api_min = IL3945_UCODE_API_MIN,
2660         .sku = IL_SKU_G,
2661         .eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2662         .mod_params = &il3945_mod_params,
2663         .led_mode = IL_LED_BLINK,
2664
2665         .eeprom_size = IL3945_EEPROM_IMG_SIZE,
2666         .num_of_queues = IL39_NUM_QUEUES,
2667         .pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2668         .set_l0s = false,
2669         .use_bsm = true,
2670         .led_compensation = 64,
2671         .wd_timeout = IL_DEF_WD_TIMEOUT,
2672
2673         .regulatory_bands = {
2674                 EEPROM_REGULATORY_BAND_1_CHANNELS,
2675                 EEPROM_REGULATORY_BAND_2_CHANNELS,
2676                 EEPROM_REGULATORY_BAND_3_CHANNELS,
2677                 EEPROM_REGULATORY_BAND_4_CHANNELS,
2678                 EEPROM_REGULATORY_BAND_5_CHANNELS,
2679                 EEPROM_REGULATORY_BAND_NO_HT40,
2680                 EEPROM_REGULATORY_BAND_NO_HT40,
2681         },
2682 };
2683
2684 static struct il_cfg il3945_abg_cfg = {
2685         .name = "3945ABG",
2686         .fw_name_pre = IL3945_FW_PRE,
2687         .ucode_api_max = IL3945_UCODE_API_MAX,
2688         .ucode_api_min = IL3945_UCODE_API_MIN,
2689         .sku = IL_SKU_A | IL_SKU_G,
2690         .eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2691         .mod_params = &il3945_mod_params,
2692         .led_mode = IL_LED_BLINK,
2693
2694         .eeprom_size = IL3945_EEPROM_IMG_SIZE,
2695         .num_of_queues = IL39_NUM_QUEUES,
2696         .pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2697         .set_l0s = false,
2698         .use_bsm = true,
2699         .led_compensation = 64,
2700         .wd_timeout = IL_DEF_WD_TIMEOUT,
2701
2702         .regulatory_bands = {
2703                 EEPROM_REGULATORY_BAND_1_CHANNELS,
2704                 EEPROM_REGULATORY_BAND_2_CHANNELS,
2705                 EEPROM_REGULATORY_BAND_3_CHANNELS,
2706                 EEPROM_REGULATORY_BAND_4_CHANNELS,
2707                 EEPROM_REGULATORY_BAND_5_CHANNELS,
2708                 EEPROM_REGULATORY_BAND_NO_HT40,
2709                 EEPROM_REGULATORY_BAND_NO_HT40,
2710         },
2711 };
2712
2713 DEFINE_PCI_DEVICE_TABLE(il3945_hw_card_ids) = {
2714         {IL_PCI_DEVICE(0x4222, 0x1005, il3945_bg_cfg)},
2715         {IL_PCI_DEVICE(0x4222, 0x1034, il3945_bg_cfg)},
2716         {IL_PCI_DEVICE(0x4222, 0x1044, il3945_bg_cfg)},
2717         {IL_PCI_DEVICE(0x4227, 0x1014, il3945_bg_cfg)},
2718         {IL_PCI_DEVICE(0x4222, PCI_ANY_ID, il3945_abg_cfg)},
2719         {IL_PCI_DEVICE(0x4227, PCI_ANY_ID, il3945_abg_cfg)},
2720         {0}
2721 };
2722
2723 MODULE_DEVICE_TABLE(pci, il3945_hw_card_ids);