2 * drivers/net/wireless/mwl8k.c
3 * Driver for Marvell TOPDOG 802.11 Wireless cards
5 * Copyright (C) 2008, 2009, 2010 Marvell Semiconductor Inc.
7 * This file is licensed under the terms of the GNU General Public
8 * License version 2. This program is licensed "as is" without any
9 * warranty of any kind, whether express or implied.
12 #include <linux/init.h>
13 #include <linux/interrupt.h>
14 #include <linux/module.h>
15 #include <linux/kernel.h>
16 #include <linux/sched.h>
17 #include <linux/spinlock.h>
18 #include <linux/list.h>
19 #include <linux/pci.h>
20 #include <linux/delay.h>
21 #include <linux/completion.h>
22 #include <linux/etherdevice.h>
23 #include <linux/slab.h>
24 #include <net/mac80211.h>
25 #include <linux/moduleparam.h>
26 #include <linux/firmware.h>
27 #include <linux/workqueue.h>
29 #define MWL8K_DESC "Marvell TOPDOG(R) 802.11 Wireless Network Driver"
30 #define MWL8K_NAME KBUILD_MODNAME
31 #define MWL8K_VERSION "0.13"
33 /* Module parameters */
34 static bool ap_mode_default;
35 module_param(ap_mode_default, bool, 0);
36 MODULE_PARM_DESC(ap_mode_default,
37 "Set to 1 to make ap mode the default instead of sta mode");
39 /* Register definitions */
40 #define MWL8K_HIU_GEN_PTR 0x00000c10
41 #define MWL8K_MODE_STA 0x0000005a
42 #define MWL8K_MODE_AP 0x000000a5
43 #define MWL8K_HIU_INT_CODE 0x00000c14
44 #define MWL8K_FWSTA_READY 0xf0f1f2f4
45 #define MWL8K_FWAP_READY 0xf1f2f4a5
46 #define MWL8K_INT_CODE_CMD_FINISHED 0x00000005
47 #define MWL8K_HIU_SCRATCH 0x00000c40
49 /* Host->device communications */
50 #define MWL8K_HIU_H2A_INTERRUPT_EVENTS 0x00000c18
51 #define MWL8K_HIU_H2A_INTERRUPT_STATUS 0x00000c1c
52 #define MWL8K_HIU_H2A_INTERRUPT_MASK 0x00000c20
53 #define MWL8K_HIU_H2A_INTERRUPT_CLEAR_SEL 0x00000c24
54 #define MWL8K_HIU_H2A_INTERRUPT_STATUS_MASK 0x00000c28
55 #define MWL8K_H2A_INT_DUMMY (1 << 20)
56 #define MWL8K_H2A_INT_RESET (1 << 15)
57 #define MWL8K_H2A_INT_DOORBELL (1 << 1)
58 #define MWL8K_H2A_INT_PPA_READY (1 << 0)
60 /* Device->host communications */
61 #define MWL8K_HIU_A2H_INTERRUPT_EVENTS 0x00000c2c
62 #define MWL8K_HIU_A2H_INTERRUPT_STATUS 0x00000c30
63 #define MWL8K_HIU_A2H_INTERRUPT_MASK 0x00000c34
64 #define MWL8K_HIU_A2H_INTERRUPT_CLEAR_SEL 0x00000c38
65 #define MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK 0x00000c3c
66 #define MWL8K_A2H_INT_DUMMY (1 << 20)
67 #define MWL8K_A2H_INT_BA_WATCHDOG (1 << 14)
68 #define MWL8K_A2H_INT_CHNL_SWITCHED (1 << 11)
69 #define MWL8K_A2H_INT_QUEUE_EMPTY (1 << 10)
70 #define MWL8K_A2H_INT_RADAR_DETECT (1 << 7)
71 #define MWL8K_A2H_INT_RADIO_ON (1 << 6)
72 #define MWL8K_A2H_INT_RADIO_OFF (1 << 5)
73 #define MWL8K_A2H_INT_MAC_EVENT (1 << 3)
74 #define MWL8K_A2H_INT_OPC_DONE (1 << 2)
75 #define MWL8K_A2H_INT_RX_READY (1 << 1)
76 #define MWL8K_A2H_INT_TX_DONE (1 << 0)
78 /* HW micro second timer register
79 * located at offset 0xA600. This
80 * will be used to timestamp tx
84 #define MWL8K_HW_TIMER_REGISTER 0x0000a600
86 #define MWL8K_A2H_EVENTS (MWL8K_A2H_INT_DUMMY | \
87 MWL8K_A2H_INT_CHNL_SWITCHED | \
88 MWL8K_A2H_INT_QUEUE_EMPTY | \
89 MWL8K_A2H_INT_RADAR_DETECT | \
90 MWL8K_A2H_INT_RADIO_ON | \
91 MWL8K_A2H_INT_RADIO_OFF | \
92 MWL8K_A2H_INT_MAC_EVENT | \
93 MWL8K_A2H_INT_OPC_DONE | \
94 MWL8K_A2H_INT_RX_READY | \
95 MWL8K_A2H_INT_TX_DONE | \
96 MWL8K_A2H_INT_BA_WATCHDOG)
98 #define MWL8K_RX_QUEUES 1
99 #define MWL8K_TX_WMM_QUEUES 4
100 #define MWL8K_MAX_AMPDU_QUEUES 8
101 #define MWL8K_MAX_TX_QUEUES (MWL8K_TX_WMM_QUEUES + MWL8K_MAX_AMPDU_QUEUES)
102 #define mwl8k_tx_queues(priv) (MWL8K_TX_WMM_QUEUES + (priv)->num_ampdu_queues)
104 /* txpriorities are mapped with hw queues.
105 * Each hw queue has a txpriority.
107 #define TOTAL_HW_TX_QUEUES 8
109 /* Each HW queue can have one AMPDU stream.
110 * But, because one of the hw queue is reserved,
111 * maximum AMPDU queues that can be created are
112 * one short of total tx queues.
114 #define MWL8K_NUM_AMPDU_STREAMS (TOTAL_HW_TX_QUEUES - 1)
118 void (*rxd_init)(void *rxd, dma_addr_t next_dma_addr);
119 void (*rxd_refill)(void *rxd, dma_addr_t addr, int len);
120 int (*rxd_process)(void *rxd, struct ieee80211_rx_status *status,
121 __le16 *qos, s8 *noise);
124 struct mwl8k_device_info {
129 struct rxd_ops *ap_rxd_ops;
133 struct mwl8k_rx_queue {
136 /* hw receives here */
139 /* refill descs here */
146 DEFINE_DMA_UNMAP_ADDR(dma);
150 struct mwl8k_tx_queue {
151 /* hw transmits here */
154 /* sw appends here */
158 struct mwl8k_tx_desc *txd;
160 struct sk_buff **skb;
166 AMPDU_STREAM_IN_PROGRESS,
170 struct mwl8k_ampdu_stream {
171 struct ieee80211_sta *sta;
178 struct ieee80211_hw *hw;
179 struct pci_dev *pdev;
182 struct mwl8k_device_info *device_info;
188 const struct firmware *fw_helper;
189 const struct firmware *fw_ucode;
191 /* hardware/firmware parameters */
193 struct rxd_ops *rxd_ops;
194 struct ieee80211_supported_band band_24;
195 struct ieee80211_channel channels_24[14];
196 struct ieee80211_rate rates_24[14];
197 struct ieee80211_supported_band band_50;
198 struct ieee80211_channel channels_50[4];
199 struct ieee80211_rate rates_50[9];
200 u32 ap_macids_supported;
201 u32 sta_macids_supported;
203 /* Ampdu stream information */
205 spinlock_t stream_lock;
206 struct mwl8k_ampdu_stream ampdu[MWL8K_MAX_AMPDU_QUEUES];
207 struct work_struct watchdog_ba_handle;
209 /* firmware access */
210 struct mutex fw_mutex;
211 struct task_struct *fw_mutex_owner;
212 struct task_struct *hw_restart_owner;
214 struct completion *hostcmd_wait;
216 atomic_t watchdog_event_pending;
218 /* lock held over TX and TX reap */
221 /* TX quiesce completion, protected by fw_mutex and tx_lock */
222 struct completion *tx_wait;
224 /* List of interfaces. */
226 struct list_head vif_list;
228 /* power management status cookie from firmware */
230 dma_addr_t cookie_dma;
237 * Running count of TX packets in flight, to avoid
238 * iterating over the transmit rings each time.
242 struct mwl8k_rx_queue rxq[MWL8K_RX_QUEUES];
243 struct mwl8k_tx_queue txq[MWL8K_MAX_TX_QUEUES];
244 u32 txq_offset[MWL8K_MAX_TX_QUEUES];
247 bool radio_short_preamble;
248 bool sniffer_enabled;
251 /* XXX need to convert this to handle multiple interfaces */
253 u8 capture_bssid[ETH_ALEN];
254 struct sk_buff *beacon_skb;
257 * This FJ worker has to be global as it is scheduled from the
258 * RX handler. At this point we don't know which interface it
259 * belongs to until the list of bssids waiting to complete join
262 struct work_struct finalize_join_worker;
264 /* Tasklet to perform TX reclaim. */
265 struct tasklet_struct poll_tx_task;
267 /* Tasklet to perform RX. */
268 struct tasklet_struct poll_rx_task;
270 /* Most recently reported noise in dBm */
274 * preserve the queue configurations so they can be restored if/when
275 * the firmware image is swapped.
277 struct ieee80211_tx_queue_params wmm_params[MWL8K_TX_WMM_QUEUES];
279 /* To perform the task of reloading the firmware */
280 struct work_struct fw_reload;
281 bool hw_restart_in_progress;
283 /* async firmware loading state */
287 struct completion firmware_loading_complete;
289 /* bitmap of running BSSes */
293 #define MAX_WEP_KEY_LEN 13
294 #define NUM_WEP_KEYS 4
296 /* Per interface specific private data */
298 struct list_head list;
299 struct ieee80211_vif *vif;
301 /* Firmware macid for this vif. */
304 /* Non AMPDU sequence number assigned by driver. */
310 u8 key[sizeof(struct ieee80211_key_conf) + MAX_WEP_KEY_LEN];
311 } wep_key_conf[NUM_WEP_KEYS];
316 /* A flag to indicate is HW crypto is enabled for this bssid */
317 bool is_hw_crypto_enabled;
319 #define MWL8K_VIF(_vif) ((struct mwl8k_vif *)&((_vif)->drv_priv))
320 #define IEEE80211_KEY_CONF(_u8) ((struct ieee80211_key_conf *)(_u8))
322 struct tx_traffic_info {
327 #define MWL8K_MAX_TID 8
329 /* Index into station database. Returned by UPDATE_STADB. */
332 struct tx_traffic_info tx_stats[MWL8K_MAX_TID];
334 #define MWL8K_STA(_sta) ((struct mwl8k_sta *)&((_sta)->drv_priv))
336 static const struct ieee80211_channel mwl8k_channels_24[] = {
337 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2412, .hw_value = 1, },
338 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2417, .hw_value = 2, },
339 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2422, .hw_value = 3, },
340 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2427, .hw_value = 4, },
341 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2432, .hw_value = 5, },
342 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2437, .hw_value = 6, },
343 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2442, .hw_value = 7, },
344 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2447, .hw_value = 8, },
345 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2452, .hw_value = 9, },
346 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2457, .hw_value = 10, },
347 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2462, .hw_value = 11, },
348 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2467, .hw_value = 12, },
349 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2472, .hw_value = 13, },
350 { .band = IEEE80211_BAND_2GHZ, .center_freq = 2484, .hw_value = 14, },
353 static const struct ieee80211_rate mwl8k_rates_24[] = {
354 { .bitrate = 10, .hw_value = 2, },
355 { .bitrate = 20, .hw_value = 4, },
356 { .bitrate = 55, .hw_value = 11, },
357 { .bitrate = 110, .hw_value = 22, },
358 { .bitrate = 220, .hw_value = 44, },
359 { .bitrate = 60, .hw_value = 12, },
360 { .bitrate = 90, .hw_value = 18, },
361 { .bitrate = 120, .hw_value = 24, },
362 { .bitrate = 180, .hw_value = 36, },
363 { .bitrate = 240, .hw_value = 48, },
364 { .bitrate = 360, .hw_value = 72, },
365 { .bitrate = 480, .hw_value = 96, },
366 { .bitrate = 540, .hw_value = 108, },
367 { .bitrate = 720, .hw_value = 144, },
370 static const struct ieee80211_channel mwl8k_channels_50[] = {
371 { .band = IEEE80211_BAND_5GHZ, .center_freq = 5180, .hw_value = 36, },
372 { .band = IEEE80211_BAND_5GHZ, .center_freq = 5200, .hw_value = 40, },
373 { .band = IEEE80211_BAND_5GHZ, .center_freq = 5220, .hw_value = 44, },
374 { .band = IEEE80211_BAND_5GHZ, .center_freq = 5240, .hw_value = 48, },
377 static const struct ieee80211_rate mwl8k_rates_50[] = {
378 { .bitrate = 60, .hw_value = 12, },
379 { .bitrate = 90, .hw_value = 18, },
380 { .bitrate = 120, .hw_value = 24, },
381 { .bitrate = 180, .hw_value = 36, },
382 { .bitrate = 240, .hw_value = 48, },
383 { .bitrate = 360, .hw_value = 72, },
384 { .bitrate = 480, .hw_value = 96, },
385 { .bitrate = 540, .hw_value = 108, },
386 { .bitrate = 720, .hw_value = 144, },
389 /* Set or get info from Firmware */
390 #define MWL8K_CMD_GET 0x0000
391 #define MWL8K_CMD_SET 0x0001
392 #define MWL8K_CMD_SET_LIST 0x0002
394 /* Firmware command codes */
395 #define MWL8K_CMD_CODE_DNLD 0x0001
396 #define MWL8K_CMD_GET_HW_SPEC 0x0003
397 #define MWL8K_CMD_SET_HW_SPEC 0x0004
398 #define MWL8K_CMD_MAC_MULTICAST_ADR 0x0010
399 #define MWL8K_CMD_GET_STAT 0x0014
400 #define MWL8K_CMD_RADIO_CONTROL 0x001c
401 #define MWL8K_CMD_RF_TX_POWER 0x001e
402 #define MWL8K_CMD_TX_POWER 0x001f
403 #define MWL8K_CMD_RF_ANTENNA 0x0020
404 #define MWL8K_CMD_SET_BEACON 0x0100 /* per-vif */
405 #define MWL8K_CMD_SET_PRE_SCAN 0x0107
406 #define MWL8K_CMD_SET_POST_SCAN 0x0108
407 #define MWL8K_CMD_SET_RF_CHANNEL 0x010a
408 #define MWL8K_CMD_SET_AID 0x010d
409 #define MWL8K_CMD_SET_RATE 0x0110
410 #define MWL8K_CMD_SET_FINALIZE_JOIN 0x0111
411 #define MWL8K_CMD_RTS_THRESHOLD 0x0113
412 #define MWL8K_CMD_SET_SLOT 0x0114
413 #define MWL8K_CMD_SET_EDCA_PARAMS 0x0115
414 #define MWL8K_CMD_SET_WMM_MODE 0x0123
415 #define MWL8K_CMD_MIMO_CONFIG 0x0125
416 #define MWL8K_CMD_USE_FIXED_RATE 0x0126
417 #define MWL8K_CMD_ENABLE_SNIFFER 0x0150
418 #define MWL8K_CMD_SET_MAC_ADDR 0x0202 /* per-vif */
419 #define MWL8K_CMD_SET_RATEADAPT_MODE 0x0203
420 #define MWL8K_CMD_GET_WATCHDOG_BITMAP 0x0205
421 #define MWL8K_CMD_DEL_MAC_ADDR 0x0206 /* per-vif */
422 #define MWL8K_CMD_BSS_START 0x1100 /* per-vif */
423 #define MWL8K_CMD_SET_NEW_STN 0x1111 /* per-vif */
424 #define MWL8K_CMD_UPDATE_ENCRYPTION 0x1122 /* per-vif */
425 #define MWL8K_CMD_UPDATE_STADB 0x1123
426 #define MWL8K_CMD_BASTREAM 0x1125
428 static const char *mwl8k_cmd_name(__le16 cmd, char *buf, int bufsize)
430 u16 command = le16_to_cpu(cmd);
432 #define MWL8K_CMDNAME(x) case MWL8K_CMD_##x: do {\
433 snprintf(buf, bufsize, "%s", #x);\
436 switch (command & ~0x8000) {
437 MWL8K_CMDNAME(CODE_DNLD);
438 MWL8K_CMDNAME(GET_HW_SPEC);
439 MWL8K_CMDNAME(SET_HW_SPEC);
440 MWL8K_CMDNAME(MAC_MULTICAST_ADR);
441 MWL8K_CMDNAME(GET_STAT);
442 MWL8K_CMDNAME(RADIO_CONTROL);
443 MWL8K_CMDNAME(RF_TX_POWER);
444 MWL8K_CMDNAME(TX_POWER);
445 MWL8K_CMDNAME(RF_ANTENNA);
446 MWL8K_CMDNAME(SET_BEACON);
447 MWL8K_CMDNAME(SET_PRE_SCAN);
448 MWL8K_CMDNAME(SET_POST_SCAN);
449 MWL8K_CMDNAME(SET_RF_CHANNEL);
450 MWL8K_CMDNAME(SET_AID);
451 MWL8K_CMDNAME(SET_RATE);
452 MWL8K_CMDNAME(SET_FINALIZE_JOIN);
453 MWL8K_CMDNAME(RTS_THRESHOLD);
454 MWL8K_CMDNAME(SET_SLOT);
455 MWL8K_CMDNAME(SET_EDCA_PARAMS);
456 MWL8K_CMDNAME(SET_WMM_MODE);
457 MWL8K_CMDNAME(MIMO_CONFIG);
458 MWL8K_CMDNAME(USE_FIXED_RATE);
459 MWL8K_CMDNAME(ENABLE_SNIFFER);
460 MWL8K_CMDNAME(SET_MAC_ADDR);
461 MWL8K_CMDNAME(SET_RATEADAPT_MODE);
462 MWL8K_CMDNAME(BSS_START);
463 MWL8K_CMDNAME(SET_NEW_STN);
464 MWL8K_CMDNAME(UPDATE_ENCRYPTION);
465 MWL8K_CMDNAME(UPDATE_STADB);
466 MWL8K_CMDNAME(BASTREAM);
467 MWL8K_CMDNAME(GET_WATCHDOG_BITMAP);
469 snprintf(buf, bufsize, "0x%x", cmd);
476 /* Hardware and firmware reset */
477 static void mwl8k_hw_reset(struct mwl8k_priv *priv)
479 iowrite32(MWL8K_H2A_INT_RESET,
480 priv->regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
481 iowrite32(MWL8K_H2A_INT_RESET,
482 priv->regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
486 /* Release fw image */
487 static void mwl8k_release_fw(const struct firmware **fw)
491 release_firmware(*fw);
495 static void mwl8k_release_firmware(struct mwl8k_priv *priv)
497 mwl8k_release_fw(&priv->fw_ucode);
498 mwl8k_release_fw(&priv->fw_helper);
501 /* states for asynchronous f/w loading */
502 static void mwl8k_fw_state_machine(const struct firmware *fw, void *context);
505 FW_STATE_LOADING_PREF,
506 FW_STATE_LOADING_ALT,
510 /* Request fw image */
511 static int mwl8k_request_fw(struct mwl8k_priv *priv,
512 const char *fname, const struct firmware **fw,
515 /* release current image */
517 mwl8k_release_fw(fw);
520 return request_firmware_nowait(THIS_MODULE, 1, fname,
521 &priv->pdev->dev, GFP_KERNEL,
522 priv, mwl8k_fw_state_machine);
524 return request_firmware(fw, fname, &priv->pdev->dev);
527 static int mwl8k_request_firmware(struct mwl8k_priv *priv, char *fw_image,
530 struct mwl8k_device_info *di = priv->device_info;
533 if (di->helper_image != NULL) {
535 rc = mwl8k_request_fw(priv, di->helper_image,
536 &priv->fw_helper, true);
538 rc = mwl8k_request_fw(priv, di->helper_image,
539 &priv->fw_helper, false);
541 printk(KERN_ERR "%s: Error requesting helper fw %s\n",
542 pci_name(priv->pdev), di->helper_image);
550 * if we get here, no helper image is needed. Skip the
551 * FW_STATE_INIT state.
553 priv->fw_state = FW_STATE_LOADING_PREF;
554 rc = mwl8k_request_fw(priv, fw_image,
558 rc = mwl8k_request_fw(priv, fw_image,
559 &priv->fw_ucode, false);
561 printk(KERN_ERR "%s: Error requesting firmware file %s\n",
562 pci_name(priv->pdev), fw_image);
563 mwl8k_release_fw(&priv->fw_helper);
570 struct mwl8k_cmd_pkt {
583 mwl8k_send_fw_load_cmd(struct mwl8k_priv *priv, void *data, int length)
585 void __iomem *regs = priv->regs;
589 dma_addr = pci_map_single(priv->pdev, data, length, PCI_DMA_TODEVICE);
590 if (pci_dma_mapping_error(priv->pdev, dma_addr))
593 iowrite32(dma_addr, regs + MWL8K_HIU_GEN_PTR);
594 iowrite32(0, regs + MWL8K_HIU_INT_CODE);
595 iowrite32(MWL8K_H2A_INT_DOORBELL,
596 regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
597 iowrite32(MWL8K_H2A_INT_DUMMY,
598 regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
604 int_code = ioread32(regs + MWL8K_HIU_INT_CODE);
605 if (int_code == MWL8K_INT_CODE_CMD_FINISHED) {
606 iowrite32(0, regs + MWL8K_HIU_INT_CODE);
614 pci_unmap_single(priv->pdev, dma_addr, length, PCI_DMA_TODEVICE);
616 return loops ? 0 : -ETIMEDOUT;
619 static int mwl8k_load_fw_image(struct mwl8k_priv *priv,
620 const u8 *data, size_t length)
622 struct mwl8k_cmd_pkt *cmd;
626 cmd = kmalloc(sizeof(*cmd) + 256, GFP_KERNEL);
630 cmd->code = cpu_to_le16(MWL8K_CMD_CODE_DNLD);
637 int block_size = length > 256 ? 256 : length;
639 memcpy(cmd->payload, data + done, block_size);
640 cmd->length = cpu_to_le16(block_size);
642 rc = mwl8k_send_fw_load_cmd(priv, cmd,
643 sizeof(*cmd) + block_size);
648 length -= block_size;
653 rc = mwl8k_send_fw_load_cmd(priv, cmd, sizeof(*cmd));
661 static int mwl8k_feed_fw_image(struct mwl8k_priv *priv,
662 const u8 *data, size_t length)
664 unsigned char *buffer;
665 int may_continue, rc = 0;
666 u32 done, prev_block_size;
668 buffer = kmalloc(1024, GFP_KERNEL);
675 while (may_continue > 0) {
678 block_size = ioread32(priv->regs + MWL8K_HIU_SCRATCH);
679 if (block_size & 1) {
683 done += prev_block_size;
684 length -= prev_block_size;
687 if (block_size > 1024 || block_size > length) {
697 if (block_size == 0) {
704 prev_block_size = block_size;
705 memcpy(buffer, data + done, block_size);
707 rc = mwl8k_send_fw_load_cmd(priv, buffer, block_size);
712 if (!rc && length != 0)
720 static int mwl8k_load_firmware(struct ieee80211_hw *hw)
722 struct mwl8k_priv *priv = hw->priv;
723 const struct firmware *fw = priv->fw_ucode;
727 if (!memcmp(fw->data, "\x01\x00\x00\x00", 4)) {
728 const struct firmware *helper = priv->fw_helper;
730 if (helper == NULL) {
731 printk(KERN_ERR "%s: helper image needed but none "
732 "given\n", pci_name(priv->pdev));
736 rc = mwl8k_load_fw_image(priv, helper->data, helper->size);
738 printk(KERN_ERR "%s: unable to load firmware "
739 "helper image\n", pci_name(priv->pdev));
744 rc = mwl8k_feed_fw_image(priv, fw->data, fw->size);
746 rc = mwl8k_load_fw_image(priv, fw->data, fw->size);
750 printk(KERN_ERR "%s: unable to load firmware image\n",
751 pci_name(priv->pdev));
755 iowrite32(MWL8K_MODE_STA, priv->regs + MWL8K_HIU_GEN_PTR);
761 ready_code = ioread32(priv->regs + MWL8K_HIU_INT_CODE);
762 if (ready_code == MWL8K_FWAP_READY) {
765 } else if (ready_code == MWL8K_FWSTA_READY) {
774 return loops ? 0 : -ETIMEDOUT;
778 /* DMA header used by firmware and hardware. */
779 struct mwl8k_dma_data {
781 struct ieee80211_hdr wh;
785 /* Routines to add/remove DMA header from skb. */
786 static inline void mwl8k_remove_dma_header(struct sk_buff *skb, __le16 qos)
788 struct mwl8k_dma_data *tr;
791 tr = (struct mwl8k_dma_data *)skb->data;
792 hdrlen = ieee80211_hdrlen(tr->wh.frame_control);
794 if (hdrlen != sizeof(tr->wh)) {
795 if (ieee80211_is_data_qos(tr->wh.frame_control)) {
796 memmove(tr->data - hdrlen, &tr->wh, hdrlen - 2);
797 *((__le16 *)(tr->data - 2)) = qos;
799 memmove(tr->data - hdrlen, &tr->wh, hdrlen);
803 if (hdrlen != sizeof(*tr))
804 skb_pull(skb, sizeof(*tr) - hdrlen);
807 #define REDUCED_TX_HEADROOM 8
810 mwl8k_add_dma_header(struct mwl8k_priv *priv, struct sk_buff *skb,
811 int head_pad, int tail_pad)
813 struct ieee80211_hdr *wh;
816 struct mwl8k_dma_data *tr;
819 * Add a firmware DMA header; the firmware requires that we
820 * present a 2-byte payload length followed by a 4-address
821 * header (without QoS field), followed (optionally) by any
822 * WEP/ExtIV header (but only filled in for CCMP).
824 wh = (struct ieee80211_hdr *)skb->data;
826 hdrlen = ieee80211_hdrlen(wh->frame_control);
829 * Check if skb_resize is required because of
830 * tx_headroom adjustment.
832 if (priv->ap_fw && (hdrlen < (sizeof(struct ieee80211_cts)
833 + REDUCED_TX_HEADROOM))) {
834 if (pskb_expand_head(skb, REDUCED_TX_HEADROOM, 0, GFP_ATOMIC)) {
836 wiphy_err(priv->hw->wiphy,
837 "Failed to reallocate TX buffer\n");
840 skb->truesize += REDUCED_TX_HEADROOM;
843 reqd_hdrlen = sizeof(*tr) + head_pad;
845 if (hdrlen != reqd_hdrlen)
846 skb_push(skb, reqd_hdrlen - hdrlen);
848 if (ieee80211_is_data_qos(wh->frame_control))
849 hdrlen -= IEEE80211_QOS_CTL_LEN;
851 tr = (struct mwl8k_dma_data *)skb->data;
853 memmove(&tr->wh, wh, hdrlen);
854 if (hdrlen != sizeof(tr->wh))
855 memset(((void *)&tr->wh) + hdrlen, 0, sizeof(tr->wh) - hdrlen);
858 * Firmware length is the length of the fully formed "802.11
859 * payload". That is, everything except for the 802.11 header.
860 * This includes all crypto material including the MIC.
862 tr->fwlen = cpu_to_le16(skb->len - sizeof(*tr) + tail_pad);
865 static void mwl8k_encapsulate_tx_frame(struct mwl8k_priv *priv,
868 struct ieee80211_hdr *wh;
869 struct ieee80211_tx_info *tx_info;
870 struct ieee80211_key_conf *key_conf;
874 wh = (struct ieee80211_hdr *)skb->data;
876 tx_info = IEEE80211_SKB_CB(skb);
879 if (ieee80211_is_data(wh->frame_control))
880 key_conf = tx_info->control.hw_key;
883 * Make sure the packet header is in the DMA header format (4-address
884 * without QoS), and add head & tail padding when HW crypto is enabled.
886 * We have the following trailer padding requirements:
887 * - WEP: 4 trailer bytes (ICV)
888 * - TKIP: 12 trailer bytes (8 MIC + 4 ICV)
889 * - CCMP: 8 trailer bytes (MIC)
892 if (key_conf != NULL) {
893 head_pad = key_conf->iv_len;
894 switch (key_conf->cipher) {
895 case WLAN_CIPHER_SUITE_WEP40:
896 case WLAN_CIPHER_SUITE_WEP104:
899 case WLAN_CIPHER_SUITE_TKIP:
902 case WLAN_CIPHER_SUITE_CCMP:
907 mwl8k_add_dma_header(priv, skb, head_pad, data_pad);
911 * Packet reception for 88w8366 AP firmware.
913 struct mwl8k_rxd_8366_ap {
917 __le32 pkt_phys_addr;
918 __le32 next_rxd_phys_addr;
922 __le32 hw_noise_floor_info;
931 #define MWL8K_8366_AP_RATE_INFO_MCS_FORMAT 0x80
932 #define MWL8K_8366_AP_RATE_INFO_40MHZ 0x40
933 #define MWL8K_8366_AP_RATE_INFO_RATEID(x) ((x) & 0x3f)
935 #define MWL8K_8366_AP_RX_CTRL_OWNED_BY_HOST 0x80
937 /* 8366 AP rx_status bits */
938 #define MWL8K_8366_AP_RXSTAT_DECRYPT_ERR_MASK 0x80
939 #define MWL8K_8366_AP_RXSTAT_GENERAL_DECRYPT_ERR 0xFF
940 #define MWL8K_8366_AP_RXSTAT_TKIP_DECRYPT_MIC_ERR 0x02
941 #define MWL8K_8366_AP_RXSTAT_WEP_DECRYPT_ICV_ERR 0x04
942 #define MWL8K_8366_AP_RXSTAT_TKIP_DECRYPT_ICV_ERR 0x08
944 static void mwl8k_rxd_8366_ap_init(void *_rxd, dma_addr_t next_dma_addr)
946 struct mwl8k_rxd_8366_ap *rxd = _rxd;
948 rxd->next_rxd_phys_addr = cpu_to_le32(next_dma_addr);
949 rxd->rx_ctrl = MWL8K_8366_AP_RX_CTRL_OWNED_BY_HOST;
952 static void mwl8k_rxd_8366_ap_refill(void *_rxd, dma_addr_t addr, int len)
954 struct mwl8k_rxd_8366_ap *rxd = _rxd;
956 rxd->pkt_len = cpu_to_le16(len);
957 rxd->pkt_phys_addr = cpu_to_le32(addr);
963 mwl8k_rxd_8366_ap_process(void *_rxd, struct ieee80211_rx_status *status,
964 __le16 *qos, s8 *noise)
966 struct mwl8k_rxd_8366_ap *rxd = _rxd;
968 if (!(rxd->rx_ctrl & MWL8K_8366_AP_RX_CTRL_OWNED_BY_HOST))
972 memset(status, 0, sizeof(*status));
974 status->signal = -rxd->rssi;
975 *noise = -rxd->noise_floor;
977 if (rxd->rate & MWL8K_8366_AP_RATE_INFO_MCS_FORMAT) {
978 status->flag |= RX_FLAG_HT;
979 if (rxd->rate & MWL8K_8366_AP_RATE_INFO_40MHZ)
980 status->flag |= RX_FLAG_40MHZ;
981 status->rate_idx = MWL8K_8366_AP_RATE_INFO_RATEID(rxd->rate);
985 for (i = 0; i < ARRAY_SIZE(mwl8k_rates_24); i++) {
986 if (mwl8k_rates_24[i].hw_value == rxd->rate) {
987 status->rate_idx = i;
993 if (rxd->channel > 14) {
994 status->band = IEEE80211_BAND_5GHZ;
995 if (!(status->flag & RX_FLAG_HT))
996 status->rate_idx -= 5;
998 status->band = IEEE80211_BAND_2GHZ;
1000 status->freq = ieee80211_channel_to_frequency(rxd->channel,
1003 *qos = rxd->qos_control;
1005 if ((rxd->rx_status != MWL8K_8366_AP_RXSTAT_GENERAL_DECRYPT_ERR) &&
1006 (rxd->rx_status & MWL8K_8366_AP_RXSTAT_DECRYPT_ERR_MASK) &&
1007 (rxd->rx_status & MWL8K_8366_AP_RXSTAT_TKIP_DECRYPT_MIC_ERR))
1008 status->flag |= RX_FLAG_MMIC_ERROR;
1010 return le16_to_cpu(rxd->pkt_len);
1013 static struct rxd_ops rxd_8366_ap_ops = {
1014 .rxd_size = sizeof(struct mwl8k_rxd_8366_ap),
1015 .rxd_init = mwl8k_rxd_8366_ap_init,
1016 .rxd_refill = mwl8k_rxd_8366_ap_refill,
1017 .rxd_process = mwl8k_rxd_8366_ap_process,
1021 * Packet reception for STA firmware.
1023 struct mwl8k_rxd_sta {
1027 __le32 pkt_phys_addr;
1028 __le32 next_rxd_phys_addr;
1040 #define MWL8K_STA_RATE_INFO_SHORTPRE 0x8000
1041 #define MWL8K_STA_RATE_INFO_ANTSELECT(x) (((x) >> 11) & 0x3)
1042 #define MWL8K_STA_RATE_INFO_RATEID(x) (((x) >> 3) & 0x3f)
1043 #define MWL8K_STA_RATE_INFO_40MHZ 0x0004
1044 #define MWL8K_STA_RATE_INFO_SHORTGI 0x0002
1045 #define MWL8K_STA_RATE_INFO_MCS_FORMAT 0x0001
1047 #define MWL8K_STA_RX_CTRL_OWNED_BY_HOST 0x02
1048 #define MWL8K_STA_RX_CTRL_DECRYPT_ERROR 0x04
1049 /* ICV=0 or MIC=1 */
1050 #define MWL8K_STA_RX_CTRL_DEC_ERR_TYPE 0x08
1051 /* Key is uploaded only in failure case */
1052 #define MWL8K_STA_RX_CTRL_KEY_INDEX 0x30
1054 static void mwl8k_rxd_sta_init(void *_rxd, dma_addr_t next_dma_addr)
1056 struct mwl8k_rxd_sta *rxd = _rxd;
1058 rxd->next_rxd_phys_addr = cpu_to_le32(next_dma_addr);
1059 rxd->rx_ctrl = MWL8K_STA_RX_CTRL_OWNED_BY_HOST;
1062 static void mwl8k_rxd_sta_refill(void *_rxd, dma_addr_t addr, int len)
1064 struct mwl8k_rxd_sta *rxd = _rxd;
1066 rxd->pkt_len = cpu_to_le16(len);
1067 rxd->pkt_phys_addr = cpu_to_le32(addr);
1073 mwl8k_rxd_sta_process(void *_rxd, struct ieee80211_rx_status *status,
1074 __le16 *qos, s8 *noise)
1076 struct mwl8k_rxd_sta *rxd = _rxd;
1079 if (!(rxd->rx_ctrl & MWL8K_STA_RX_CTRL_OWNED_BY_HOST))
1083 rate_info = le16_to_cpu(rxd->rate_info);
1085 memset(status, 0, sizeof(*status));
1087 status->signal = -rxd->rssi;
1088 *noise = -rxd->noise_level;
1089 status->antenna = MWL8K_STA_RATE_INFO_ANTSELECT(rate_info);
1090 status->rate_idx = MWL8K_STA_RATE_INFO_RATEID(rate_info);
1092 if (rate_info & MWL8K_STA_RATE_INFO_SHORTPRE)
1093 status->flag |= RX_FLAG_SHORTPRE;
1094 if (rate_info & MWL8K_STA_RATE_INFO_40MHZ)
1095 status->flag |= RX_FLAG_40MHZ;
1096 if (rate_info & MWL8K_STA_RATE_INFO_SHORTGI)
1097 status->flag |= RX_FLAG_SHORT_GI;
1098 if (rate_info & MWL8K_STA_RATE_INFO_MCS_FORMAT)
1099 status->flag |= RX_FLAG_HT;
1101 if (rxd->channel > 14) {
1102 status->band = IEEE80211_BAND_5GHZ;
1103 if (!(status->flag & RX_FLAG_HT))
1104 status->rate_idx -= 5;
1106 status->band = IEEE80211_BAND_2GHZ;
1108 status->freq = ieee80211_channel_to_frequency(rxd->channel,
1111 *qos = rxd->qos_control;
1112 if ((rxd->rx_ctrl & MWL8K_STA_RX_CTRL_DECRYPT_ERROR) &&
1113 (rxd->rx_ctrl & MWL8K_STA_RX_CTRL_DEC_ERR_TYPE))
1114 status->flag |= RX_FLAG_MMIC_ERROR;
1116 return le16_to_cpu(rxd->pkt_len);
1119 static struct rxd_ops rxd_sta_ops = {
1120 .rxd_size = sizeof(struct mwl8k_rxd_sta),
1121 .rxd_init = mwl8k_rxd_sta_init,
1122 .rxd_refill = mwl8k_rxd_sta_refill,
1123 .rxd_process = mwl8k_rxd_sta_process,
1127 #define MWL8K_RX_DESCS 256
1128 #define MWL8K_RX_MAXSZ 3800
1130 static int mwl8k_rxq_init(struct ieee80211_hw *hw, int index)
1132 struct mwl8k_priv *priv = hw->priv;
1133 struct mwl8k_rx_queue *rxq = priv->rxq + index;
1141 size = MWL8K_RX_DESCS * priv->rxd_ops->rxd_size;
1143 rxq->rxd = pci_alloc_consistent(priv->pdev, size, &rxq->rxd_dma);
1144 if (rxq->rxd == NULL) {
1145 wiphy_err(hw->wiphy, "failed to alloc RX descriptors\n");
1148 memset(rxq->rxd, 0, size);
1150 rxq->buf = kcalloc(MWL8K_RX_DESCS, sizeof(*rxq->buf), GFP_KERNEL);
1151 if (rxq->buf == NULL) {
1152 pci_free_consistent(priv->pdev, size, rxq->rxd, rxq->rxd_dma);
1156 for (i = 0; i < MWL8K_RX_DESCS; i++) {
1160 dma_addr_t next_dma_addr;
1162 desc_size = priv->rxd_ops->rxd_size;
1163 rxd = rxq->rxd + (i * priv->rxd_ops->rxd_size);
1166 if (nexti == MWL8K_RX_DESCS)
1168 next_dma_addr = rxq->rxd_dma + (nexti * desc_size);
1170 priv->rxd_ops->rxd_init(rxd, next_dma_addr);
1176 static int rxq_refill(struct ieee80211_hw *hw, int index, int limit)
1178 struct mwl8k_priv *priv = hw->priv;
1179 struct mwl8k_rx_queue *rxq = priv->rxq + index;
1183 while (rxq->rxd_count < MWL8K_RX_DESCS && limit--) {
1184 struct sk_buff *skb;
1189 skb = dev_alloc_skb(MWL8K_RX_MAXSZ);
1193 addr = pci_map_single(priv->pdev, skb->data,
1194 MWL8K_RX_MAXSZ, DMA_FROM_DEVICE);
1198 if (rxq->tail == MWL8K_RX_DESCS)
1200 rxq->buf[rx].skb = skb;
1201 dma_unmap_addr_set(&rxq->buf[rx], dma, addr);
1203 rxd = rxq->rxd + (rx * priv->rxd_ops->rxd_size);
1204 priv->rxd_ops->rxd_refill(rxd, addr, MWL8K_RX_MAXSZ);
1212 /* Must be called only when the card's reception is completely halted */
1213 static void mwl8k_rxq_deinit(struct ieee80211_hw *hw, int index)
1215 struct mwl8k_priv *priv = hw->priv;
1216 struct mwl8k_rx_queue *rxq = priv->rxq + index;
1219 if (rxq->rxd == NULL)
1222 for (i = 0; i < MWL8K_RX_DESCS; i++) {
1223 if (rxq->buf[i].skb != NULL) {
1224 pci_unmap_single(priv->pdev,
1225 dma_unmap_addr(&rxq->buf[i], dma),
1226 MWL8K_RX_MAXSZ, PCI_DMA_FROMDEVICE);
1227 dma_unmap_addr_set(&rxq->buf[i], dma, 0);
1229 kfree_skb(rxq->buf[i].skb);
1230 rxq->buf[i].skb = NULL;
1237 pci_free_consistent(priv->pdev,
1238 MWL8K_RX_DESCS * priv->rxd_ops->rxd_size,
1239 rxq->rxd, rxq->rxd_dma);
1245 * Scan a list of BSSIDs to process for finalize join.
1246 * Allows for extension to process multiple BSSIDs.
1249 mwl8k_capture_bssid(struct mwl8k_priv *priv, struct ieee80211_hdr *wh)
1251 return priv->capture_beacon &&
1252 ieee80211_is_beacon(wh->frame_control) &&
1253 ether_addr_equal(wh->addr3, priv->capture_bssid);
1256 static inline void mwl8k_save_beacon(struct ieee80211_hw *hw,
1257 struct sk_buff *skb)
1259 struct mwl8k_priv *priv = hw->priv;
1261 priv->capture_beacon = false;
1262 memset(priv->capture_bssid, 0, ETH_ALEN);
1265 * Use GFP_ATOMIC as rxq_process is called from
1266 * the primary interrupt handler, memory allocation call
1269 priv->beacon_skb = skb_copy(skb, GFP_ATOMIC);
1270 if (priv->beacon_skb != NULL)
1271 ieee80211_queue_work(hw, &priv->finalize_join_worker);
1274 static inline struct mwl8k_vif *mwl8k_find_vif_bss(struct list_head *vif_list,
1277 struct mwl8k_vif *mwl8k_vif;
1279 list_for_each_entry(mwl8k_vif,
1281 if (memcmp(bssid, mwl8k_vif->bssid,
1289 static int rxq_process(struct ieee80211_hw *hw, int index, int limit)
1291 struct mwl8k_priv *priv = hw->priv;
1292 struct mwl8k_vif *mwl8k_vif = NULL;
1293 struct mwl8k_rx_queue *rxq = priv->rxq + index;
1297 while (rxq->rxd_count && limit--) {
1298 struct sk_buff *skb;
1301 struct ieee80211_rx_status status;
1302 struct ieee80211_hdr *wh;
1305 skb = rxq->buf[rxq->head].skb;
1309 rxd = rxq->rxd + (rxq->head * priv->rxd_ops->rxd_size);
1311 pkt_len = priv->rxd_ops->rxd_process(rxd, &status, &qos,
1316 rxq->buf[rxq->head].skb = NULL;
1318 pci_unmap_single(priv->pdev,
1319 dma_unmap_addr(&rxq->buf[rxq->head], dma),
1320 MWL8K_RX_MAXSZ, PCI_DMA_FROMDEVICE);
1321 dma_unmap_addr_set(&rxq->buf[rxq->head], dma, 0);
1324 if (rxq->head == MWL8K_RX_DESCS)
1329 wh = &((struct mwl8k_dma_data *)skb->data)->wh;
1332 * Check for a pending join operation. Save a
1333 * copy of the beacon and schedule a tasklet to
1334 * send a FINALIZE_JOIN command to the firmware.
1336 if (mwl8k_capture_bssid(priv, (void *)skb->data))
1337 mwl8k_save_beacon(hw, skb);
1339 if (ieee80211_has_protected(wh->frame_control)) {
1341 /* Check if hw crypto has been enabled for
1342 * this bss. If yes, set the status flags
1345 mwl8k_vif = mwl8k_find_vif_bss(&priv->vif_list,
1348 if (mwl8k_vif != NULL &&
1349 mwl8k_vif->is_hw_crypto_enabled) {
1351 * When MMIC ERROR is encountered
1352 * by the firmware, payload is
1353 * dropped and only 32 bytes of
1354 * mwl8k Firmware header is sent
1357 * We need to add four bytes of
1358 * key information. In it
1359 * MAC80211 expects keyidx set to
1360 * 0 for triggering Counter
1361 * Measure of MMIC failure.
1363 if (status.flag & RX_FLAG_MMIC_ERROR) {
1364 struct mwl8k_dma_data *tr;
1365 tr = (struct mwl8k_dma_data *)skb->data;
1366 memset((void *)&(tr->data), 0, 4);
1370 if (!ieee80211_is_auth(wh->frame_control))
1371 status.flag |= RX_FLAG_IV_STRIPPED |
1373 RX_FLAG_MMIC_STRIPPED;
1377 skb_put(skb, pkt_len);
1378 mwl8k_remove_dma_header(skb, qos);
1379 memcpy(IEEE80211_SKB_RXCB(skb), &status, sizeof(status));
1380 ieee80211_rx_irqsafe(hw, skb);
1390 * Packet transmission.
1393 #define MWL8K_TXD_STATUS_OK 0x00000001
1394 #define MWL8K_TXD_STATUS_OK_RETRY 0x00000002
1395 #define MWL8K_TXD_STATUS_OK_MORE_RETRY 0x00000004
1396 #define MWL8K_TXD_STATUS_MULTICAST_TX 0x00000008
1397 #define MWL8K_TXD_STATUS_FW_OWNED 0x80000000
1399 #define MWL8K_QOS_QLEN_UNSPEC 0xff00
1400 #define MWL8K_QOS_ACK_POLICY_MASK 0x0060
1401 #define MWL8K_QOS_ACK_POLICY_NORMAL 0x0000
1402 #define MWL8K_QOS_ACK_POLICY_BLOCKACK 0x0060
1403 #define MWL8K_QOS_EOSP 0x0010
1405 struct mwl8k_tx_desc {
1410 __le32 pkt_phys_addr;
1412 __u8 dest_MAC_addr[ETH_ALEN];
1413 __le32 next_txd_phys_addr;
1420 #define MWL8K_TX_DESCS 128
1422 static int mwl8k_txq_init(struct ieee80211_hw *hw, int index)
1424 struct mwl8k_priv *priv = hw->priv;
1425 struct mwl8k_tx_queue *txq = priv->txq + index;
1433 size = MWL8K_TX_DESCS * sizeof(struct mwl8k_tx_desc);
1435 txq->txd = pci_alloc_consistent(priv->pdev, size, &txq->txd_dma);
1436 if (txq->txd == NULL) {
1437 wiphy_err(hw->wiphy, "failed to alloc TX descriptors\n");
1440 memset(txq->txd, 0, size);
1442 txq->skb = kcalloc(MWL8K_TX_DESCS, sizeof(*txq->skb), GFP_KERNEL);
1443 if (txq->skb == NULL) {
1444 pci_free_consistent(priv->pdev, size, txq->txd, txq->txd_dma);
1448 for (i = 0; i < MWL8K_TX_DESCS; i++) {
1449 struct mwl8k_tx_desc *tx_desc;
1452 tx_desc = txq->txd + i;
1453 nexti = (i + 1) % MWL8K_TX_DESCS;
1455 tx_desc->status = 0;
1456 tx_desc->next_txd_phys_addr =
1457 cpu_to_le32(txq->txd_dma + nexti * sizeof(*tx_desc));
1463 static inline void mwl8k_tx_start(struct mwl8k_priv *priv)
1465 iowrite32(MWL8K_H2A_INT_PPA_READY,
1466 priv->regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
1467 iowrite32(MWL8K_H2A_INT_DUMMY,
1468 priv->regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
1469 ioread32(priv->regs + MWL8K_HIU_INT_CODE);
1472 static void mwl8k_dump_tx_rings(struct ieee80211_hw *hw)
1474 struct mwl8k_priv *priv = hw->priv;
1477 for (i = 0; i < mwl8k_tx_queues(priv); i++) {
1478 struct mwl8k_tx_queue *txq = priv->txq + i;
1484 for (desc = 0; desc < MWL8K_TX_DESCS; desc++) {
1485 struct mwl8k_tx_desc *tx_desc = txq->txd + desc;
1488 status = le32_to_cpu(tx_desc->status);
1489 if (status & MWL8K_TXD_STATUS_FW_OWNED)
1494 if (tx_desc->pkt_len == 0)
1498 wiphy_err(hw->wiphy,
1499 "txq[%d] len=%d head=%d tail=%d "
1500 "fw_owned=%d drv_owned=%d unused=%d\n",
1502 txq->len, txq->head, txq->tail,
1503 fw_owned, drv_owned, unused);
1508 * Must be called with priv->fw_mutex held and tx queues stopped.
1510 #define MWL8K_TX_WAIT_TIMEOUT_MS 5000
1512 static int mwl8k_tx_wait_empty(struct ieee80211_hw *hw)
1514 struct mwl8k_priv *priv = hw->priv;
1515 DECLARE_COMPLETION_ONSTACK(tx_wait);
1521 /* Since fw restart is in progress, allow only the firmware
1522 * commands from the restart code and block the other
1523 * commands since they are going to fail in any case since
1524 * the firmware has crashed
1526 if (priv->hw_restart_in_progress) {
1527 if (priv->hw_restart_owner == current)
1533 if (atomic_read(&priv->watchdog_event_pending))
1537 * The TX queues are stopped at this point, so this test
1538 * doesn't need to take ->tx_lock.
1540 if (!priv->pending_tx_pkts)
1546 spin_lock_bh(&priv->tx_lock);
1547 priv->tx_wait = &tx_wait;
1550 unsigned long timeout;
1552 oldcount = priv->pending_tx_pkts;
1554 spin_unlock_bh(&priv->tx_lock);
1555 timeout = wait_for_completion_timeout(&tx_wait,
1556 msecs_to_jiffies(MWL8K_TX_WAIT_TIMEOUT_MS));
1558 if (atomic_read(&priv->watchdog_event_pending)) {
1559 spin_lock_bh(&priv->tx_lock);
1560 priv->tx_wait = NULL;
1561 spin_unlock_bh(&priv->tx_lock);
1565 spin_lock_bh(&priv->tx_lock);
1568 WARN_ON(priv->pending_tx_pkts);
1570 wiphy_notice(hw->wiphy, "tx rings drained\n");
1574 if (priv->pending_tx_pkts < oldcount) {
1575 wiphy_notice(hw->wiphy,
1576 "waiting for tx rings to drain (%d -> %d pkts)\n",
1577 oldcount, priv->pending_tx_pkts);
1582 priv->tx_wait = NULL;
1584 wiphy_err(hw->wiphy, "tx rings stuck for %d ms\n",
1585 MWL8K_TX_WAIT_TIMEOUT_MS);
1586 mwl8k_dump_tx_rings(hw);
1587 priv->hw_restart_in_progress = true;
1588 ieee80211_queue_work(hw, &priv->fw_reload);
1592 priv->tx_wait = NULL;
1593 spin_unlock_bh(&priv->tx_lock);
1598 #define MWL8K_TXD_SUCCESS(status) \
1599 ((status) & (MWL8K_TXD_STATUS_OK | \
1600 MWL8K_TXD_STATUS_OK_RETRY | \
1601 MWL8K_TXD_STATUS_OK_MORE_RETRY))
1603 static int mwl8k_tid_queue_mapping(u8 tid)
1610 return IEEE80211_AC_BE;
1614 return IEEE80211_AC_BK;
1618 return IEEE80211_AC_VI;
1622 return IEEE80211_AC_VO;
1630 /* The firmware will fill in the rate information
1631 * for each packet that gets queued in the hardware
1632 * and these macros will interpret that info.
1635 #define RI_FORMAT(a) (a & 0x0001)
1636 #define RI_RATE_ID_MCS(a) ((a & 0x01f8) >> 3)
1639 mwl8k_txq_reclaim(struct ieee80211_hw *hw, int index, int limit, int force)
1641 struct mwl8k_priv *priv = hw->priv;
1642 struct mwl8k_tx_queue *txq = priv->txq + index;
1646 while (txq->len > 0 && limit--) {
1648 struct mwl8k_tx_desc *tx_desc;
1651 struct sk_buff *skb;
1652 struct ieee80211_tx_info *info;
1654 struct ieee80211_sta *sta;
1655 struct mwl8k_sta *sta_info = NULL;
1657 struct ieee80211_hdr *wh;
1660 tx_desc = txq->txd + tx;
1662 status = le32_to_cpu(tx_desc->status);
1664 if (status & MWL8K_TXD_STATUS_FW_OWNED) {
1668 ~cpu_to_le32(MWL8K_TXD_STATUS_FW_OWNED);
1671 txq->head = (tx + 1) % MWL8K_TX_DESCS;
1672 BUG_ON(txq->len == 0);
1674 priv->pending_tx_pkts--;
1676 addr = le32_to_cpu(tx_desc->pkt_phys_addr);
1677 size = le16_to_cpu(tx_desc->pkt_len);
1679 txq->skb[tx] = NULL;
1681 BUG_ON(skb == NULL);
1682 pci_unmap_single(priv->pdev, addr, size, PCI_DMA_TODEVICE);
1684 mwl8k_remove_dma_header(skb, tx_desc->qos_control);
1686 wh = (struct ieee80211_hdr *) skb->data;
1688 /* Mark descriptor as unused */
1689 tx_desc->pkt_phys_addr = 0;
1690 tx_desc->pkt_len = 0;
1692 info = IEEE80211_SKB_CB(skb);
1693 if (ieee80211_is_data(wh->frame_control)) {
1695 sta = ieee80211_find_sta_by_ifaddr(hw, wh->addr1,
1698 sta_info = MWL8K_STA(sta);
1699 BUG_ON(sta_info == NULL);
1700 rate_info = le16_to_cpu(tx_desc->rate_info);
1701 /* If rate is < 6.5 Mpbs for an ht station
1702 * do not form an ampdu. If the station is a
1703 * legacy station (format = 0), do not form an
1706 if (RI_RATE_ID_MCS(rate_info) < 1 ||
1707 RI_FORMAT(rate_info) == 0) {
1708 sta_info->is_ampdu_allowed = false;
1710 sta_info->is_ampdu_allowed = true;
1716 ieee80211_tx_info_clear_status(info);
1718 /* Rate control is happening in the firmware.
1719 * Ensure no tx rate is being reported.
1721 info->status.rates[0].idx = -1;
1722 info->status.rates[0].count = 1;
1724 if (MWL8K_TXD_SUCCESS(status))
1725 info->flags |= IEEE80211_TX_STAT_ACK;
1727 ieee80211_tx_status_irqsafe(hw, skb);
1735 /* must be called only when the card's transmit is completely halted */
1736 static void mwl8k_txq_deinit(struct ieee80211_hw *hw, int index)
1738 struct mwl8k_priv *priv = hw->priv;
1739 struct mwl8k_tx_queue *txq = priv->txq + index;
1741 if (txq->txd == NULL)
1744 mwl8k_txq_reclaim(hw, index, INT_MAX, 1);
1749 pci_free_consistent(priv->pdev,
1750 MWL8K_TX_DESCS * sizeof(struct mwl8k_tx_desc),
1751 txq->txd, txq->txd_dma);
1755 /* caller must hold priv->stream_lock when calling the stream functions */
1756 static struct mwl8k_ampdu_stream *
1757 mwl8k_add_stream(struct ieee80211_hw *hw, struct ieee80211_sta *sta, u8 tid)
1759 struct mwl8k_ampdu_stream *stream;
1760 struct mwl8k_priv *priv = hw->priv;
1763 for (i = 0; i < MWL8K_NUM_AMPDU_STREAMS; i++) {
1764 stream = &priv->ampdu[i];
1765 if (stream->state == AMPDU_NO_STREAM) {
1767 stream->state = AMPDU_STREAM_NEW;
1770 wiphy_debug(hw->wiphy, "Added a new stream for %pM %d",
1779 mwl8k_start_stream(struct ieee80211_hw *hw, struct mwl8k_ampdu_stream *stream)
1783 /* if the stream has already been started, don't start it again */
1784 if (stream->state != AMPDU_STREAM_NEW)
1786 ret = ieee80211_start_tx_ba_session(stream->sta, stream->tid, 0);
1788 wiphy_debug(hw->wiphy, "Failed to start stream for %pM %d: "
1789 "%d\n", stream->sta->addr, stream->tid, ret);
1791 wiphy_debug(hw->wiphy, "Started stream for %pM %d\n",
1792 stream->sta->addr, stream->tid);
1797 mwl8k_remove_stream(struct ieee80211_hw *hw, struct mwl8k_ampdu_stream *stream)
1799 wiphy_debug(hw->wiphy, "Remove stream for %pM %d\n", stream->sta->addr,
1801 memset(stream, 0, sizeof(*stream));
1804 static struct mwl8k_ampdu_stream *
1805 mwl8k_lookup_stream(struct ieee80211_hw *hw, u8 *addr, u8 tid)
1807 struct mwl8k_priv *priv = hw->priv;
1810 for (i = 0; i < MWL8K_NUM_AMPDU_STREAMS; i++) {
1811 struct mwl8k_ampdu_stream *stream;
1812 stream = &priv->ampdu[i];
1813 if (stream->state == AMPDU_NO_STREAM)
1815 if (!memcmp(stream->sta->addr, addr, ETH_ALEN) &&
1822 #define MWL8K_AMPDU_PACKET_THRESHOLD 64
1823 static inline bool mwl8k_ampdu_allowed(struct ieee80211_sta *sta, u8 tid)
1825 struct mwl8k_sta *sta_info = MWL8K_STA(sta);
1826 struct tx_traffic_info *tx_stats;
1828 BUG_ON(tid >= MWL8K_MAX_TID);
1829 tx_stats = &sta_info->tx_stats[tid];
1831 return sta_info->is_ampdu_allowed &&
1832 tx_stats->pkts > MWL8K_AMPDU_PACKET_THRESHOLD;
1835 static inline void mwl8k_tx_count_packet(struct ieee80211_sta *sta, u8 tid)
1837 struct mwl8k_sta *sta_info = MWL8K_STA(sta);
1838 struct tx_traffic_info *tx_stats;
1840 BUG_ON(tid >= MWL8K_MAX_TID);
1841 tx_stats = &sta_info->tx_stats[tid];
1843 if (tx_stats->start_time == 0)
1844 tx_stats->start_time = jiffies;
1846 /* reset the packet count after each second elapses. If the number of
1847 * packets ever exceeds the ampdu_min_traffic threshold, we will allow
1848 * an ampdu stream to be started.
1850 if (jiffies - tx_stats->start_time > HZ) {
1852 tx_stats->start_time = 0;
1857 /* The hardware ampdu queues start from 5.
1858 * txpriorities for ampdu queues are
1859 * 5 6 7 0 1 2 3 4 ie., queue 5 is highest
1860 * and queue 3 is lowest (queue 4 is reserved)
1865 mwl8k_txq_xmit(struct ieee80211_hw *hw,
1867 struct ieee80211_sta *sta,
1868 struct sk_buff *skb)
1870 struct mwl8k_priv *priv = hw->priv;
1871 struct ieee80211_tx_info *tx_info;
1872 struct mwl8k_vif *mwl8k_vif;
1873 struct ieee80211_hdr *wh;
1874 struct mwl8k_tx_queue *txq;
1875 struct mwl8k_tx_desc *tx;
1882 struct mwl8k_ampdu_stream *stream = NULL;
1883 bool start_ba_session = false;
1884 bool mgmtframe = false;
1885 struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)skb->data;
1886 bool eapol_frame = false;
1888 wh = (struct ieee80211_hdr *)skb->data;
1889 if (ieee80211_is_data_qos(wh->frame_control))
1890 qos = le16_to_cpu(*((__le16 *)ieee80211_get_qos_ctl(wh)));
1894 if (skb->protocol == cpu_to_be16(ETH_P_PAE))
1897 if (ieee80211_is_mgmt(wh->frame_control))
1901 mwl8k_encapsulate_tx_frame(priv, skb);
1903 mwl8k_add_dma_header(priv, skb, 0, 0);
1905 wh = &((struct mwl8k_dma_data *)skb->data)->wh;
1907 tx_info = IEEE80211_SKB_CB(skb);
1908 mwl8k_vif = MWL8K_VIF(tx_info->control.vif);
1910 if (tx_info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ) {
1911 wh->seq_ctrl &= cpu_to_le16(IEEE80211_SCTL_FRAG);
1912 wh->seq_ctrl |= cpu_to_le16(mwl8k_vif->seqno);
1913 mwl8k_vif->seqno += 0x10;
1916 /* Setup firmware control bit fields for each frame type. */
1919 if (ieee80211_is_mgmt(wh->frame_control) ||
1920 ieee80211_is_ctl(wh->frame_control)) {
1922 qos |= MWL8K_QOS_QLEN_UNSPEC | MWL8K_QOS_EOSP;
1923 } else if (ieee80211_is_data(wh->frame_control)) {
1925 if (is_multicast_ether_addr(wh->addr1))
1926 txstatus |= MWL8K_TXD_STATUS_MULTICAST_TX;
1928 qos &= ~MWL8K_QOS_ACK_POLICY_MASK;
1929 if (tx_info->flags & IEEE80211_TX_CTL_AMPDU)
1930 qos |= MWL8K_QOS_ACK_POLICY_BLOCKACK;
1932 qos |= MWL8K_QOS_ACK_POLICY_NORMAL;
1935 /* Queue ADDBA request in the respective data queue. While setting up
1936 * the ampdu stream, mac80211 queues further packets for that
1937 * particular ra/tid pair. However, packets piled up in the hardware
1938 * for that ra/tid pair will still go out. ADDBA request and the
1939 * related data packets going out from different queues asynchronously
1940 * will cause a shift in the receiver window which might result in
1941 * ampdu packets getting dropped at the receiver after the stream has
1944 if (unlikely(ieee80211_is_action(wh->frame_control) &&
1945 mgmt->u.action.category == WLAN_CATEGORY_BACK &&
1946 mgmt->u.action.u.addba_req.action_code == WLAN_ACTION_ADDBA_REQ &&
1948 u16 capab = le16_to_cpu(mgmt->u.action.u.addba_req.capab);
1949 tid = (capab & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2;
1950 index = mwl8k_tid_queue_mapping(tid);
1955 if (priv->ap_fw && sta && sta->ht_cap.ht_supported && !eapol_frame &&
1956 ieee80211_is_data_qos(wh->frame_control)) {
1958 mwl8k_tx_count_packet(sta, tid);
1959 spin_lock(&priv->stream_lock);
1960 stream = mwl8k_lookup_stream(hw, sta->addr, tid);
1961 if (stream != NULL) {
1962 if (stream->state == AMPDU_STREAM_ACTIVE) {
1963 WARN_ON(!(qos & MWL8K_QOS_ACK_POLICY_BLOCKACK));
1964 txpriority = (BA_QUEUE + stream->idx) %
1966 if (stream->idx <= 1)
1967 index = stream->idx +
1968 MWL8K_TX_WMM_QUEUES;
1970 } else if (stream->state == AMPDU_STREAM_NEW) {
1971 /* We get here if the driver sends us packets
1972 * after we've initiated a stream, but before
1973 * our ampdu_action routine has been called
1974 * with IEEE80211_AMPDU_TX_START to get the SSN
1975 * for the ADDBA request. So this packet can
1976 * go out with no risk of sequence number
1977 * mismatch. No special handling is required.
1980 /* Drop packets that would go out after the
1981 * ADDBA request was sent but before the ADDBA
1982 * response is received. If we don't do this,
1983 * the recipient would probably receive it
1984 * after the ADDBA request with SSN 0. This
1985 * will cause the recipient's BA receive window
1986 * to shift, which would cause the subsequent
1987 * packets in the BA stream to be discarded.
1988 * mac80211 queues our packets for us in this
1989 * case, so this is really just a safety check.
1991 wiphy_warn(hw->wiphy,
1992 "Cannot send packet while ADDBA "
1993 "dialog is underway.\n");
1994 spin_unlock(&priv->stream_lock);
1999 /* Defer calling mwl8k_start_stream so that the current
2000 * skb can go out before the ADDBA request. This
2001 * prevents sequence number mismatch at the recepient
2002 * as described above.
2004 if (mwl8k_ampdu_allowed(sta, tid)) {
2005 stream = mwl8k_add_stream(hw, sta, tid);
2007 start_ba_session = true;
2010 spin_unlock(&priv->stream_lock);
2012 qos &= ~MWL8K_QOS_ACK_POLICY_MASK;
2013 qos |= MWL8K_QOS_ACK_POLICY_NORMAL;
2016 dma = pci_map_single(priv->pdev, skb->data,
2017 skb->len, PCI_DMA_TODEVICE);
2019 if (pci_dma_mapping_error(priv->pdev, dma)) {
2020 wiphy_debug(hw->wiphy,
2021 "failed to dma map skb, dropping TX frame.\n");
2022 if (start_ba_session) {
2023 spin_lock(&priv->stream_lock);
2024 mwl8k_remove_stream(hw, stream);
2025 spin_unlock(&priv->stream_lock);
2031 spin_lock_bh(&priv->tx_lock);
2033 txq = priv->txq + index;
2035 /* Mgmt frames that go out frequently are probe
2036 * responses. Other mgmt frames got out relatively
2037 * infrequently. Hence reserve 2 buffers so that
2038 * other mgmt frames do not get dropped due to an
2039 * already queued probe response in one of the
2043 if (txq->len >= MWL8K_TX_DESCS - 2) {
2044 if (!mgmtframe || txq->len == MWL8K_TX_DESCS) {
2045 if (start_ba_session) {
2046 spin_lock(&priv->stream_lock);
2047 mwl8k_remove_stream(hw, stream);
2048 spin_unlock(&priv->stream_lock);
2050 spin_unlock_bh(&priv->tx_lock);
2051 pci_unmap_single(priv->pdev, dma, skb->len,
2058 BUG_ON(txq->skb[txq->tail] != NULL);
2059 txq->skb[txq->tail] = skb;
2061 tx = txq->txd + txq->tail;
2062 tx->data_rate = txdatarate;
2063 tx->tx_priority = txpriority;
2064 tx->qos_control = cpu_to_le16(qos);
2065 tx->pkt_phys_addr = cpu_to_le32(dma);
2066 tx->pkt_len = cpu_to_le16(skb->len);
2068 if (!priv->ap_fw && sta != NULL)
2069 tx->peer_id = MWL8K_STA(sta)->peer_id;
2073 if (priv->ap_fw && ieee80211_is_data(wh->frame_control) && !eapol_frame)
2074 tx->timestamp = cpu_to_le32(ioread32(priv->regs +
2075 MWL8K_HW_TIMER_REGISTER));
2080 tx->status = cpu_to_le32(MWL8K_TXD_STATUS_FW_OWNED | txstatus);
2083 priv->pending_tx_pkts++;
2086 if (txq->tail == MWL8K_TX_DESCS)
2089 mwl8k_tx_start(priv);
2091 spin_unlock_bh(&priv->tx_lock);
2093 /* Initiate the ampdu session here */
2094 if (start_ba_session) {
2095 spin_lock(&priv->stream_lock);
2096 if (mwl8k_start_stream(hw, stream))
2097 mwl8k_remove_stream(hw, stream);
2098 spin_unlock(&priv->stream_lock);
2106 * We have the following requirements for issuing firmware commands:
2107 * - Some commands require that the packet transmit path is idle when
2108 * the command is issued. (For simplicity, we'll just quiesce the
2109 * transmit path for every command.)
2110 * - There are certain sequences of commands that need to be issued to
2111 * the hardware sequentially, with no other intervening commands.
2113 * This leads to an implementation of a "firmware lock" as a mutex that
2114 * can be taken recursively, and which is taken by both the low-level
2115 * command submission function (mwl8k_post_cmd) as well as any users of
2116 * that function that require issuing of an atomic sequence of commands,
2117 * and quiesces the transmit path whenever it's taken.
2119 static int mwl8k_fw_lock(struct ieee80211_hw *hw)
2121 struct mwl8k_priv *priv = hw->priv;
2123 if (priv->fw_mutex_owner != current) {
2126 mutex_lock(&priv->fw_mutex);
2127 ieee80211_stop_queues(hw);
2129 rc = mwl8k_tx_wait_empty(hw);
2131 if (!priv->hw_restart_in_progress)
2132 ieee80211_wake_queues(hw);
2134 mutex_unlock(&priv->fw_mutex);
2139 priv->fw_mutex_owner = current;
2142 priv->fw_mutex_depth++;
2147 static void mwl8k_fw_unlock(struct ieee80211_hw *hw)
2149 struct mwl8k_priv *priv = hw->priv;
2151 if (!--priv->fw_mutex_depth) {
2152 if (!priv->hw_restart_in_progress)
2153 ieee80211_wake_queues(hw);
2155 priv->fw_mutex_owner = NULL;
2156 mutex_unlock(&priv->fw_mutex);
2160 static void mwl8k_enable_bsses(struct ieee80211_hw *hw, bool enable,
2164 * Command processing.
2167 /* Timeout firmware commands after 10s */
2168 #define MWL8K_CMD_TIMEOUT_MS 10000
2170 static int mwl8k_post_cmd(struct ieee80211_hw *hw, struct mwl8k_cmd_pkt *cmd)
2172 DECLARE_COMPLETION_ONSTACK(cmd_wait);
2173 struct mwl8k_priv *priv = hw->priv;
2174 void __iomem *regs = priv->regs;
2175 dma_addr_t dma_addr;
2176 unsigned int dma_size;
2178 unsigned long timeout = 0;
2182 wiphy_dbg(hw->wiphy, "Posting %s [%d]\n",
2183 mwl8k_cmd_name(cmd->code, buf, sizeof(buf)), cmd->macid);
2185 /* Before posting firmware commands that could change the hardware
2186 * characteristics, make sure that all BSSes are stopped temporary.
2187 * Enable these stopped BSSes after completion of the commands
2190 rc = mwl8k_fw_lock(hw);
2194 if (priv->ap_fw && priv->running_bsses) {
2195 switch (le16_to_cpu(cmd->code)) {
2196 case MWL8K_CMD_SET_RF_CHANNEL:
2197 case MWL8K_CMD_RADIO_CONTROL:
2198 case MWL8K_CMD_RF_TX_POWER:
2199 case MWL8K_CMD_TX_POWER:
2200 case MWL8K_CMD_RF_ANTENNA:
2201 case MWL8K_CMD_RTS_THRESHOLD:
2202 case MWL8K_CMD_MIMO_CONFIG:
2203 bitmap = priv->running_bsses;
2204 mwl8k_enable_bsses(hw, false, bitmap);
2209 cmd->result = (__force __le16) 0xffff;
2210 dma_size = le16_to_cpu(cmd->length);
2211 dma_addr = pci_map_single(priv->pdev, cmd, dma_size,
2212 PCI_DMA_BIDIRECTIONAL);
2213 if (pci_dma_mapping_error(priv->pdev, dma_addr))
2216 priv->hostcmd_wait = &cmd_wait;
2217 iowrite32(dma_addr, regs + MWL8K_HIU_GEN_PTR);
2218 iowrite32(MWL8K_H2A_INT_DOORBELL,
2219 regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
2220 iowrite32(MWL8K_H2A_INT_DUMMY,
2221 regs + MWL8K_HIU_H2A_INTERRUPT_EVENTS);
2223 timeout = wait_for_completion_timeout(&cmd_wait,
2224 msecs_to_jiffies(MWL8K_CMD_TIMEOUT_MS));
2226 priv->hostcmd_wait = NULL;
2229 pci_unmap_single(priv->pdev, dma_addr, dma_size,
2230 PCI_DMA_BIDIRECTIONAL);
2233 wiphy_err(hw->wiphy, "Command %s timeout after %u ms\n",
2234 mwl8k_cmd_name(cmd->code, buf, sizeof(buf)),
2235 MWL8K_CMD_TIMEOUT_MS);
2240 ms = MWL8K_CMD_TIMEOUT_MS - jiffies_to_msecs(timeout);
2242 rc = cmd->result ? -EINVAL : 0;
2244 wiphy_err(hw->wiphy, "Command %s error 0x%x\n",
2245 mwl8k_cmd_name(cmd->code, buf, sizeof(buf)),
2246 le16_to_cpu(cmd->result));
2248 wiphy_notice(hw->wiphy, "Command %s took %d ms\n",
2249 mwl8k_cmd_name(cmd->code,
2255 mwl8k_enable_bsses(hw, true, bitmap);
2257 mwl8k_fw_unlock(hw);
2262 static int mwl8k_post_pervif_cmd(struct ieee80211_hw *hw,
2263 struct ieee80211_vif *vif,
2264 struct mwl8k_cmd_pkt *cmd)
2267 cmd->macid = MWL8K_VIF(vif)->macid;
2268 return mwl8k_post_cmd(hw, cmd);
2272 * Setup code shared between STA and AP firmware images.
2274 static void mwl8k_setup_2ghz_band(struct ieee80211_hw *hw)
2276 struct mwl8k_priv *priv = hw->priv;
2278 BUILD_BUG_ON(sizeof(priv->channels_24) != sizeof(mwl8k_channels_24));
2279 memcpy(priv->channels_24, mwl8k_channels_24, sizeof(mwl8k_channels_24));
2281 BUILD_BUG_ON(sizeof(priv->rates_24) != sizeof(mwl8k_rates_24));
2282 memcpy(priv->rates_24, mwl8k_rates_24, sizeof(mwl8k_rates_24));
2284 priv->band_24.band = IEEE80211_BAND_2GHZ;
2285 priv->band_24.channels = priv->channels_24;
2286 priv->band_24.n_channels = ARRAY_SIZE(mwl8k_channels_24);
2287 priv->band_24.bitrates = priv->rates_24;
2288 priv->band_24.n_bitrates = ARRAY_SIZE(mwl8k_rates_24);
2290 hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &priv->band_24;
2293 static void mwl8k_setup_5ghz_band(struct ieee80211_hw *hw)
2295 struct mwl8k_priv *priv = hw->priv;
2297 BUILD_BUG_ON(sizeof(priv->channels_50) != sizeof(mwl8k_channels_50));
2298 memcpy(priv->channels_50, mwl8k_channels_50, sizeof(mwl8k_channels_50));
2300 BUILD_BUG_ON(sizeof(priv->rates_50) != sizeof(mwl8k_rates_50));
2301 memcpy(priv->rates_50, mwl8k_rates_50, sizeof(mwl8k_rates_50));
2303 priv->band_50.band = IEEE80211_BAND_5GHZ;
2304 priv->band_50.channels = priv->channels_50;
2305 priv->band_50.n_channels = ARRAY_SIZE(mwl8k_channels_50);
2306 priv->band_50.bitrates = priv->rates_50;
2307 priv->band_50.n_bitrates = ARRAY_SIZE(mwl8k_rates_50);
2309 hw->wiphy->bands[IEEE80211_BAND_5GHZ] = &priv->band_50;
2313 * CMD_GET_HW_SPEC (STA version).
2315 struct mwl8k_cmd_get_hw_spec_sta {
2316 struct mwl8k_cmd_pkt header;
2318 __u8 host_interface;
2320 __u8 perm_addr[ETH_ALEN];
2325 __u8 mcs_bitmap[16];
2326 __le32 rx_queue_ptr;
2327 __le32 num_tx_queues;
2328 __le32 tx_queue_ptrs[MWL8K_TX_WMM_QUEUES];
2330 __le32 num_tx_desc_per_queue;
2334 #define MWL8K_CAP_MAX_AMSDU 0x20000000
2335 #define MWL8K_CAP_GREENFIELD 0x08000000
2336 #define MWL8K_CAP_AMPDU 0x04000000
2337 #define MWL8K_CAP_RX_STBC 0x01000000
2338 #define MWL8K_CAP_TX_STBC 0x00800000
2339 #define MWL8K_CAP_SHORTGI_40MHZ 0x00400000
2340 #define MWL8K_CAP_SHORTGI_20MHZ 0x00200000
2341 #define MWL8K_CAP_RX_ANTENNA_MASK 0x000e0000
2342 #define MWL8K_CAP_TX_ANTENNA_MASK 0x0001c000
2343 #define MWL8K_CAP_DELAY_BA 0x00003000
2344 #define MWL8K_CAP_MIMO 0x00000200
2345 #define MWL8K_CAP_40MHZ 0x00000100
2346 #define MWL8K_CAP_BAND_MASK 0x00000007
2347 #define MWL8K_CAP_5GHZ 0x00000004
2348 #define MWL8K_CAP_2GHZ4 0x00000001
2351 mwl8k_set_ht_caps(struct ieee80211_hw *hw,
2352 struct ieee80211_supported_band *band, u32 cap)
2357 band->ht_cap.ht_supported = 1;
2359 if (cap & MWL8K_CAP_MAX_AMSDU)
2360 band->ht_cap.cap |= IEEE80211_HT_CAP_MAX_AMSDU;
2361 if (cap & MWL8K_CAP_GREENFIELD)
2362 band->ht_cap.cap |= IEEE80211_HT_CAP_GRN_FLD;
2363 if (cap & MWL8K_CAP_AMPDU) {
2364 hw->flags |= IEEE80211_HW_AMPDU_AGGREGATION;
2365 band->ht_cap.ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
2366 band->ht_cap.ampdu_density = IEEE80211_HT_MPDU_DENSITY_NONE;
2368 if (cap & MWL8K_CAP_RX_STBC)
2369 band->ht_cap.cap |= IEEE80211_HT_CAP_RX_STBC;
2370 if (cap & MWL8K_CAP_TX_STBC)
2371 band->ht_cap.cap |= IEEE80211_HT_CAP_TX_STBC;
2372 if (cap & MWL8K_CAP_SHORTGI_40MHZ)
2373 band->ht_cap.cap |= IEEE80211_HT_CAP_SGI_40;
2374 if (cap & MWL8K_CAP_SHORTGI_20MHZ)
2375 band->ht_cap.cap |= IEEE80211_HT_CAP_SGI_20;
2376 if (cap & MWL8K_CAP_DELAY_BA)
2377 band->ht_cap.cap |= IEEE80211_HT_CAP_DELAY_BA;
2378 if (cap & MWL8K_CAP_40MHZ)
2379 band->ht_cap.cap |= IEEE80211_HT_CAP_SUP_WIDTH_20_40;
2381 rx_streams = hweight32(cap & MWL8K_CAP_RX_ANTENNA_MASK);
2382 tx_streams = hweight32(cap & MWL8K_CAP_TX_ANTENNA_MASK);
2384 band->ht_cap.mcs.rx_mask[0] = 0xff;
2385 if (rx_streams >= 2)
2386 band->ht_cap.mcs.rx_mask[1] = 0xff;
2387 if (rx_streams >= 3)
2388 band->ht_cap.mcs.rx_mask[2] = 0xff;
2389 band->ht_cap.mcs.rx_mask[4] = 0x01;
2390 band->ht_cap.mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
2392 if (rx_streams != tx_streams) {
2393 band->ht_cap.mcs.tx_params |= IEEE80211_HT_MCS_TX_RX_DIFF;
2394 band->ht_cap.mcs.tx_params |= (tx_streams - 1) <<
2395 IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT;
2400 mwl8k_set_caps(struct ieee80211_hw *hw, u32 caps)
2402 struct mwl8k_priv *priv = hw->priv;
2404 if ((caps & MWL8K_CAP_2GHZ4) || !(caps & MWL8K_CAP_BAND_MASK)) {
2405 mwl8k_setup_2ghz_band(hw);
2406 if (caps & MWL8K_CAP_MIMO)
2407 mwl8k_set_ht_caps(hw, &priv->band_24, caps);
2410 if (caps & MWL8K_CAP_5GHZ) {
2411 mwl8k_setup_5ghz_band(hw);
2412 if (caps & MWL8K_CAP_MIMO)
2413 mwl8k_set_ht_caps(hw, &priv->band_50, caps);
2417 static int mwl8k_cmd_get_hw_spec_sta(struct ieee80211_hw *hw)
2419 struct mwl8k_priv *priv = hw->priv;
2420 struct mwl8k_cmd_get_hw_spec_sta *cmd;
2424 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2428 cmd->header.code = cpu_to_le16(MWL8K_CMD_GET_HW_SPEC);
2429 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2431 memset(cmd->perm_addr, 0xff, sizeof(cmd->perm_addr));
2432 cmd->ps_cookie = cpu_to_le32(priv->cookie_dma);
2433 cmd->rx_queue_ptr = cpu_to_le32(priv->rxq[0].rxd_dma);
2434 cmd->num_tx_queues = cpu_to_le32(mwl8k_tx_queues(priv));
2435 for (i = 0; i < mwl8k_tx_queues(priv); i++)
2436 cmd->tx_queue_ptrs[i] = cpu_to_le32(priv->txq[i].txd_dma);
2437 cmd->num_tx_desc_per_queue = cpu_to_le32(MWL8K_TX_DESCS);
2438 cmd->total_rxd = cpu_to_le32(MWL8K_RX_DESCS);
2440 rc = mwl8k_post_cmd(hw, &cmd->header);
2443 SET_IEEE80211_PERM_ADDR(hw, cmd->perm_addr);
2444 priv->num_mcaddrs = le16_to_cpu(cmd->num_mcaddrs);
2445 priv->fw_rev = le32_to_cpu(cmd->fw_rev);
2446 priv->hw_rev = cmd->hw_rev;
2447 mwl8k_set_caps(hw, le32_to_cpu(cmd->caps));
2448 priv->ap_macids_supported = 0x00000000;
2449 priv->sta_macids_supported = 0x00000001;
2457 * CMD_GET_HW_SPEC (AP version).
2459 struct mwl8k_cmd_get_hw_spec_ap {
2460 struct mwl8k_cmd_pkt header;
2462 __u8 host_interface;
2465 __u8 perm_addr[ETH_ALEN];
2476 __le32 fw_api_version;
2478 __le32 num_of_ampdu_queues;
2479 __le32 wcbbase_ampdu[MWL8K_MAX_AMPDU_QUEUES];
2482 static int mwl8k_cmd_get_hw_spec_ap(struct ieee80211_hw *hw)
2484 struct mwl8k_priv *priv = hw->priv;
2485 struct mwl8k_cmd_get_hw_spec_ap *cmd;
2489 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2493 cmd->header.code = cpu_to_le16(MWL8K_CMD_GET_HW_SPEC);
2494 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2496 memset(cmd->perm_addr, 0xff, sizeof(cmd->perm_addr));
2497 cmd->ps_cookie = cpu_to_le32(priv->cookie_dma);
2499 rc = mwl8k_post_cmd(hw, &cmd->header);
2504 api_version = le32_to_cpu(cmd->fw_api_version);
2505 if (priv->device_info->fw_api_ap != api_version) {
2506 printk(KERN_ERR "%s: Unsupported fw API version for %s."
2507 " Expected %d got %d.\n", MWL8K_NAME,
2508 priv->device_info->part_name,
2509 priv->device_info->fw_api_ap,
2514 SET_IEEE80211_PERM_ADDR(hw, cmd->perm_addr);
2515 priv->num_mcaddrs = le16_to_cpu(cmd->num_mcaddrs);
2516 priv->fw_rev = le32_to_cpu(cmd->fw_rev);
2517 priv->hw_rev = cmd->hw_rev;
2518 mwl8k_set_caps(hw, le32_to_cpu(cmd->caps));
2519 priv->ap_macids_supported = 0x000000ff;
2520 priv->sta_macids_supported = 0x00000100;
2521 priv->num_ampdu_queues = le32_to_cpu(cmd->num_of_ampdu_queues);
2522 if (priv->num_ampdu_queues > MWL8K_MAX_AMPDU_QUEUES) {
2523 wiphy_warn(hw->wiphy, "fw reported %d ampdu queues"
2524 " but we only support %d.\n",
2525 priv->num_ampdu_queues,
2526 MWL8K_MAX_AMPDU_QUEUES);
2527 priv->num_ampdu_queues = MWL8K_MAX_AMPDU_QUEUES;
2529 off = le32_to_cpu(cmd->rxwrptr) & 0xffff;
2530 iowrite32(priv->rxq[0].rxd_dma, priv->sram + off);
2532 off = le32_to_cpu(cmd->rxrdptr) & 0xffff;
2533 iowrite32(priv->rxq[0].rxd_dma, priv->sram + off);
2535 priv->txq_offset[0] = le32_to_cpu(cmd->wcbbase0) & 0xffff;
2536 priv->txq_offset[1] = le32_to_cpu(cmd->wcbbase1) & 0xffff;
2537 priv->txq_offset[2] = le32_to_cpu(cmd->wcbbase2) & 0xffff;
2538 priv->txq_offset[3] = le32_to_cpu(cmd->wcbbase3) & 0xffff;
2540 for (i = 0; i < priv->num_ampdu_queues; i++)
2541 priv->txq_offset[i + MWL8K_TX_WMM_QUEUES] =
2542 le32_to_cpu(cmd->wcbbase_ampdu[i]) & 0xffff;
2553 struct mwl8k_cmd_set_hw_spec {
2554 struct mwl8k_cmd_pkt header;
2556 __u8 host_interface;
2558 __u8 perm_addr[ETH_ALEN];
2563 __le32 rx_queue_ptr;
2564 __le32 num_tx_queues;
2565 __le32 tx_queue_ptrs[MWL8K_MAX_TX_QUEUES];
2567 __le32 num_tx_desc_per_queue;
2571 /* If enabled, MWL8K_SET_HW_SPEC_FLAG_ENABLE_LIFE_TIME_EXPIRY will cause
2572 * packets to expire 500 ms after the timestamp in the tx descriptor. That is,
2573 * the packets that are queued for more than 500ms, will be dropped in the
2574 * hardware. This helps minimizing the issues caused due to head-of-line
2575 * blocking where a slow client can hog the bandwidth and affect traffic to a
2578 #define MWL8K_SET_HW_SPEC_FLAG_ENABLE_LIFE_TIME_EXPIRY 0x00000400
2579 #define MWL8K_SET_HW_SPEC_FLAG_GENERATE_CCMP_HDR 0x00000200
2580 #define MWL8K_SET_HW_SPEC_FLAG_HOST_DECR_MGMT 0x00000080
2581 #define MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_PROBERESP 0x00000020
2582 #define MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_BEACON 0x00000010
2584 static int mwl8k_cmd_set_hw_spec(struct ieee80211_hw *hw)
2586 struct mwl8k_priv *priv = hw->priv;
2587 struct mwl8k_cmd_set_hw_spec *cmd;
2591 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2595 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_HW_SPEC);
2596 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2598 cmd->ps_cookie = cpu_to_le32(priv->cookie_dma);
2599 cmd->rx_queue_ptr = cpu_to_le32(priv->rxq[0].rxd_dma);
2600 cmd->num_tx_queues = cpu_to_le32(mwl8k_tx_queues(priv));
2603 * Mac80211 stack has Q0 as highest priority and Q3 as lowest in
2604 * that order. Firmware has Q3 as highest priority and Q0 as lowest
2605 * in that order. Map Q3 of mac80211 to Q0 of firmware so that the
2606 * priority is interpreted the right way in firmware.
2608 for (i = 0; i < mwl8k_tx_queues(priv); i++) {
2609 int j = mwl8k_tx_queues(priv) - 1 - i;
2610 cmd->tx_queue_ptrs[i] = cpu_to_le32(priv->txq[j].txd_dma);
2613 cmd->flags = cpu_to_le32(MWL8K_SET_HW_SPEC_FLAG_HOST_DECR_MGMT |
2614 MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_PROBERESP |
2615 MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_BEACON |
2616 MWL8K_SET_HW_SPEC_FLAG_ENABLE_LIFE_TIME_EXPIRY |
2617 MWL8K_SET_HW_SPEC_FLAG_GENERATE_CCMP_HDR);
2618 cmd->num_tx_desc_per_queue = cpu_to_le32(MWL8K_TX_DESCS);
2619 cmd->total_rxd = cpu_to_le32(MWL8K_RX_DESCS);
2621 rc = mwl8k_post_cmd(hw, &cmd->header);
2628 * CMD_MAC_MULTICAST_ADR.
2630 struct mwl8k_cmd_mac_multicast_adr {
2631 struct mwl8k_cmd_pkt header;
2634 __u8 addr[0][ETH_ALEN];
2637 #define MWL8K_ENABLE_RX_DIRECTED 0x0001
2638 #define MWL8K_ENABLE_RX_MULTICAST 0x0002
2639 #define MWL8K_ENABLE_RX_ALL_MULTICAST 0x0004
2640 #define MWL8K_ENABLE_RX_BROADCAST 0x0008
2642 static struct mwl8k_cmd_pkt *
2643 __mwl8k_cmd_mac_multicast_adr(struct ieee80211_hw *hw, int allmulti,
2644 struct netdev_hw_addr_list *mc_list)
2646 struct mwl8k_priv *priv = hw->priv;
2647 struct mwl8k_cmd_mac_multicast_adr *cmd;
2652 mc_count = netdev_hw_addr_list_count(mc_list);
2654 if (allmulti || mc_count > priv->num_mcaddrs) {
2659 size = sizeof(*cmd) + mc_count * ETH_ALEN;
2661 cmd = kzalloc(size, GFP_ATOMIC);
2665 cmd->header.code = cpu_to_le16(MWL8K_CMD_MAC_MULTICAST_ADR);
2666 cmd->header.length = cpu_to_le16(size);
2667 cmd->action = cpu_to_le16(MWL8K_ENABLE_RX_DIRECTED |
2668 MWL8K_ENABLE_RX_BROADCAST);
2671 cmd->action |= cpu_to_le16(MWL8K_ENABLE_RX_ALL_MULTICAST);
2672 } else if (mc_count) {
2673 struct netdev_hw_addr *ha;
2676 cmd->action |= cpu_to_le16(MWL8K_ENABLE_RX_MULTICAST);
2677 cmd->numaddr = cpu_to_le16(mc_count);
2678 netdev_hw_addr_list_for_each(ha, mc_list) {
2679 memcpy(cmd->addr[i], ha->addr, ETH_ALEN);
2683 return &cmd->header;
2689 struct mwl8k_cmd_get_stat {
2690 struct mwl8k_cmd_pkt header;
2694 #define MWL8K_STAT_ACK_FAILURE 9
2695 #define MWL8K_STAT_RTS_FAILURE 12
2696 #define MWL8K_STAT_FCS_ERROR 24
2697 #define MWL8K_STAT_RTS_SUCCESS 11
2699 static int mwl8k_cmd_get_stat(struct ieee80211_hw *hw,
2700 struct ieee80211_low_level_stats *stats)
2702 struct mwl8k_cmd_get_stat *cmd;
2705 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2709 cmd->header.code = cpu_to_le16(MWL8K_CMD_GET_STAT);
2710 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2712 rc = mwl8k_post_cmd(hw, &cmd->header);
2714 stats->dot11ACKFailureCount =
2715 le32_to_cpu(cmd->stats[MWL8K_STAT_ACK_FAILURE]);
2716 stats->dot11RTSFailureCount =
2717 le32_to_cpu(cmd->stats[MWL8K_STAT_RTS_FAILURE]);
2718 stats->dot11FCSErrorCount =
2719 le32_to_cpu(cmd->stats[MWL8K_STAT_FCS_ERROR]);
2720 stats->dot11RTSSuccessCount =
2721 le32_to_cpu(cmd->stats[MWL8K_STAT_RTS_SUCCESS]);
2729 * CMD_RADIO_CONTROL.
2731 struct mwl8k_cmd_radio_control {
2732 struct mwl8k_cmd_pkt header;
2739 mwl8k_cmd_radio_control(struct ieee80211_hw *hw, bool enable, bool force)
2741 struct mwl8k_priv *priv = hw->priv;
2742 struct mwl8k_cmd_radio_control *cmd;
2745 if (enable == priv->radio_on && !force)
2748 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2752 cmd->header.code = cpu_to_le16(MWL8K_CMD_RADIO_CONTROL);
2753 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2754 cmd->action = cpu_to_le16(MWL8K_CMD_SET);
2755 cmd->control = cpu_to_le16(priv->radio_short_preamble ? 3 : 1);
2756 cmd->radio_on = cpu_to_le16(enable ? 0x0001 : 0x0000);
2758 rc = mwl8k_post_cmd(hw, &cmd->header);
2762 priv->radio_on = enable;
2767 static int mwl8k_cmd_radio_disable(struct ieee80211_hw *hw)
2769 return mwl8k_cmd_radio_control(hw, 0, 0);
2772 static int mwl8k_cmd_radio_enable(struct ieee80211_hw *hw)
2774 return mwl8k_cmd_radio_control(hw, 1, 0);
2778 mwl8k_set_radio_preamble(struct ieee80211_hw *hw, bool short_preamble)
2780 struct mwl8k_priv *priv = hw->priv;
2782 priv->radio_short_preamble = short_preamble;
2784 return mwl8k_cmd_radio_control(hw, 1, 1);
2790 #define MWL8K_RF_TX_POWER_LEVEL_TOTAL 8
2792 struct mwl8k_cmd_rf_tx_power {
2793 struct mwl8k_cmd_pkt header;
2795 __le16 support_level;
2796 __le16 current_level;
2798 __le16 power_level_list[MWL8K_RF_TX_POWER_LEVEL_TOTAL];
2801 static int mwl8k_cmd_rf_tx_power(struct ieee80211_hw *hw, int dBm)
2803 struct mwl8k_cmd_rf_tx_power *cmd;
2806 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2810 cmd->header.code = cpu_to_le16(MWL8K_CMD_RF_TX_POWER);
2811 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2812 cmd->action = cpu_to_le16(MWL8K_CMD_SET);
2813 cmd->support_level = cpu_to_le16(dBm);
2815 rc = mwl8k_post_cmd(hw, &cmd->header);
2824 #define MWL8K_TX_POWER_LEVEL_TOTAL 12
2826 struct mwl8k_cmd_tx_power {
2827 struct mwl8k_cmd_pkt header;
2833 __le16 power_level_list[MWL8K_TX_POWER_LEVEL_TOTAL];
2836 static int mwl8k_cmd_tx_power(struct ieee80211_hw *hw,
2837 struct ieee80211_conf *conf,
2840 struct ieee80211_channel *channel = conf->channel;
2841 struct mwl8k_cmd_tx_power *cmd;
2845 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2849 cmd->header.code = cpu_to_le16(MWL8K_CMD_TX_POWER);
2850 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2851 cmd->action = cpu_to_le16(MWL8K_CMD_SET_LIST);
2853 if (channel->band == IEEE80211_BAND_2GHZ)
2854 cmd->band = cpu_to_le16(0x1);
2855 else if (channel->band == IEEE80211_BAND_5GHZ)
2856 cmd->band = cpu_to_le16(0x4);
2858 cmd->channel = cpu_to_le16(channel->hw_value);
2860 if (conf->channel_type == NL80211_CHAN_NO_HT ||
2861 conf->channel_type == NL80211_CHAN_HT20) {
2862 cmd->bw = cpu_to_le16(0x2);
2864 cmd->bw = cpu_to_le16(0x4);
2865 if (conf->channel_type == NL80211_CHAN_HT40MINUS)
2866 cmd->sub_ch = cpu_to_le16(0x3);
2867 else if (conf->channel_type == NL80211_CHAN_HT40PLUS)
2868 cmd->sub_ch = cpu_to_le16(0x1);
2871 for (i = 0; i < MWL8K_TX_POWER_LEVEL_TOTAL; i++)
2872 cmd->power_level_list[i] = cpu_to_le16(pwr);
2874 rc = mwl8k_post_cmd(hw, &cmd->header);
2883 struct mwl8k_cmd_rf_antenna {
2884 struct mwl8k_cmd_pkt header;
2889 #define MWL8K_RF_ANTENNA_RX 1
2890 #define MWL8K_RF_ANTENNA_TX 2
2893 mwl8k_cmd_rf_antenna(struct ieee80211_hw *hw, int antenna, int mask)
2895 struct mwl8k_cmd_rf_antenna *cmd;
2898 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2902 cmd->header.code = cpu_to_le16(MWL8K_CMD_RF_ANTENNA);
2903 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2904 cmd->antenna = cpu_to_le16(antenna);
2905 cmd->mode = cpu_to_le16(mask);
2907 rc = mwl8k_post_cmd(hw, &cmd->header);
2916 struct mwl8k_cmd_set_beacon {
2917 struct mwl8k_cmd_pkt header;
2922 static int mwl8k_cmd_set_beacon(struct ieee80211_hw *hw,
2923 struct ieee80211_vif *vif, u8 *beacon, int len)
2925 struct mwl8k_cmd_set_beacon *cmd;
2928 cmd = kzalloc(sizeof(*cmd) + len, GFP_KERNEL);
2932 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_BEACON);
2933 cmd->header.length = cpu_to_le16(sizeof(*cmd) + len);
2934 cmd->beacon_len = cpu_to_le16(len);
2935 memcpy(cmd->beacon, beacon, len);
2937 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
2946 struct mwl8k_cmd_set_pre_scan {
2947 struct mwl8k_cmd_pkt header;
2950 static int mwl8k_cmd_set_pre_scan(struct ieee80211_hw *hw)
2952 struct mwl8k_cmd_set_pre_scan *cmd;
2955 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2959 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_PRE_SCAN);
2960 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2962 rc = mwl8k_post_cmd(hw, &cmd->header);
2969 * CMD_SET_POST_SCAN.
2971 struct mwl8k_cmd_set_post_scan {
2972 struct mwl8k_cmd_pkt header;
2974 __u8 bssid[ETH_ALEN];
2978 mwl8k_cmd_set_post_scan(struct ieee80211_hw *hw, const __u8 *mac)
2980 struct mwl8k_cmd_set_post_scan *cmd;
2983 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
2987 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_POST_SCAN);
2988 cmd->header.length = cpu_to_le16(sizeof(*cmd));
2990 memcpy(cmd->bssid, mac, ETH_ALEN);
2992 rc = mwl8k_post_cmd(hw, &cmd->header);
2999 * CMD_SET_RF_CHANNEL.
3001 struct mwl8k_cmd_set_rf_channel {
3002 struct mwl8k_cmd_pkt header;
3004 __u8 current_channel;
3005 __le32 channel_flags;
3008 static int mwl8k_cmd_set_rf_channel(struct ieee80211_hw *hw,
3009 struct ieee80211_conf *conf)
3011 struct ieee80211_channel *channel = conf->channel;
3012 struct mwl8k_cmd_set_rf_channel *cmd;
3015 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3019 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_RF_CHANNEL);
3020 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3021 cmd->action = cpu_to_le16(MWL8K_CMD_SET);
3022 cmd->current_channel = channel->hw_value;
3024 if (channel->band == IEEE80211_BAND_2GHZ)
3025 cmd->channel_flags |= cpu_to_le32(0x00000001);
3026 else if (channel->band == IEEE80211_BAND_5GHZ)
3027 cmd->channel_flags |= cpu_to_le32(0x00000004);
3029 if (conf->channel_type == NL80211_CHAN_NO_HT ||
3030 conf->channel_type == NL80211_CHAN_HT20)
3031 cmd->channel_flags |= cpu_to_le32(0x00000080);
3032 else if (conf->channel_type == NL80211_CHAN_HT40MINUS)
3033 cmd->channel_flags |= cpu_to_le32(0x000001900);
3034 else if (conf->channel_type == NL80211_CHAN_HT40PLUS)
3035 cmd->channel_flags |= cpu_to_le32(0x000000900);
3037 rc = mwl8k_post_cmd(hw, &cmd->header);
3046 #define MWL8K_FRAME_PROT_DISABLED 0x00
3047 #define MWL8K_FRAME_PROT_11G 0x07
3048 #define MWL8K_FRAME_PROT_11N_HT_40MHZ_ONLY 0x02
3049 #define MWL8K_FRAME_PROT_11N_HT_ALL 0x06
3051 struct mwl8k_cmd_update_set_aid {
3052 struct mwl8k_cmd_pkt header;
3055 /* AP's MAC address (BSSID) */
3056 __u8 bssid[ETH_ALEN];
3057 __le16 protection_mode;
3058 __u8 supp_rates[14];
3061 static void legacy_rate_mask_to_array(u8 *rates, u32 mask)
3067 * Clear nonstandard rates 4 and 13.
3071 for (i = 0, j = 0; i < 14; i++) {
3072 if (mask & (1 << i))
3073 rates[j++] = mwl8k_rates_24[i].hw_value;
3078 mwl8k_cmd_set_aid(struct ieee80211_hw *hw,
3079 struct ieee80211_vif *vif, u32 legacy_rate_mask)
3081 struct mwl8k_cmd_update_set_aid *cmd;
3085 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3089 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_AID);
3090 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3091 cmd->aid = cpu_to_le16(vif->bss_conf.aid);
3092 memcpy(cmd->bssid, vif->bss_conf.bssid, ETH_ALEN);
3094 if (vif->bss_conf.use_cts_prot) {
3095 prot_mode = MWL8K_FRAME_PROT_11G;
3097 switch (vif->bss_conf.ht_operation_mode &
3098 IEEE80211_HT_OP_MODE_PROTECTION) {
3099 case IEEE80211_HT_OP_MODE_PROTECTION_20MHZ:
3100 prot_mode = MWL8K_FRAME_PROT_11N_HT_40MHZ_ONLY;
3102 case IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED:
3103 prot_mode = MWL8K_FRAME_PROT_11N_HT_ALL;
3106 prot_mode = MWL8K_FRAME_PROT_DISABLED;
3110 cmd->protection_mode = cpu_to_le16(prot_mode);
3112 legacy_rate_mask_to_array(cmd->supp_rates, legacy_rate_mask);
3114 rc = mwl8k_post_cmd(hw, &cmd->header);
3123 struct mwl8k_cmd_set_rate {
3124 struct mwl8k_cmd_pkt header;
3125 __u8 legacy_rates[14];
3127 /* Bitmap for supported MCS codes. */
3133 mwl8k_cmd_set_rate(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
3134 u32 legacy_rate_mask, u8 *mcs_rates)
3136 struct mwl8k_cmd_set_rate *cmd;
3139 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3143 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_RATE);
3144 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3145 legacy_rate_mask_to_array(cmd->legacy_rates, legacy_rate_mask);
3146 memcpy(cmd->mcs_set, mcs_rates, 16);
3148 rc = mwl8k_post_cmd(hw, &cmd->header);
3155 * CMD_FINALIZE_JOIN.
3157 #define MWL8K_FJ_BEACON_MAXLEN 128
3159 struct mwl8k_cmd_finalize_join {
3160 struct mwl8k_cmd_pkt header;
3161 __le32 sleep_interval; /* Number of beacon periods to sleep */
3162 __u8 beacon_data[MWL8K_FJ_BEACON_MAXLEN];
3165 static int mwl8k_cmd_finalize_join(struct ieee80211_hw *hw, void *frame,
3166 int framelen, int dtim)
3168 struct mwl8k_cmd_finalize_join *cmd;
3169 struct ieee80211_mgmt *payload = frame;
3173 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3177 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_FINALIZE_JOIN);
3178 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3179 cmd->sleep_interval = cpu_to_le32(dtim ? dtim : 1);
3181 payload_len = framelen - ieee80211_hdrlen(payload->frame_control);
3182 if (payload_len < 0)
3184 else if (payload_len > MWL8K_FJ_BEACON_MAXLEN)
3185 payload_len = MWL8K_FJ_BEACON_MAXLEN;
3187 memcpy(cmd->beacon_data, &payload->u.beacon, payload_len);
3189 rc = mwl8k_post_cmd(hw, &cmd->header);
3196 * CMD_SET_RTS_THRESHOLD.
3198 struct mwl8k_cmd_set_rts_threshold {
3199 struct mwl8k_cmd_pkt header;
3205 mwl8k_cmd_set_rts_threshold(struct ieee80211_hw *hw, int rts_thresh)
3207 struct mwl8k_cmd_set_rts_threshold *cmd;
3210 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3214 cmd->header.code = cpu_to_le16(MWL8K_CMD_RTS_THRESHOLD);
3215 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3216 cmd->action = cpu_to_le16(MWL8K_CMD_SET);
3217 cmd->threshold = cpu_to_le16(rts_thresh);
3219 rc = mwl8k_post_cmd(hw, &cmd->header);
3228 struct mwl8k_cmd_set_slot {
3229 struct mwl8k_cmd_pkt header;
3234 static int mwl8k_cmd_set_slot(struct ieee80211_hw *hw, bool short_slot_time)
3236 struct mwl8k_cmd_set_slot *cmd;
3239 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3243 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_SLOT);
3244 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3245 cmd->action = cpu_to_le16(MWL8K_CMD_SET);
3246 cmd->short_slot = short_slot_time;
3248 rc = mwl8k_post_cmd(hw, &cmd->header);
3255 * CMD_SET_EDCA_PARAMS.
3257 struct mwl8k_cmd_set_edca_params {
3258 struct mwl8k_cmd_pkt header;
3260 /* See MWL8K_SET_EDCA_XXX below */
3263 /* TX opportunity in units of 32 us */
3268 /* Log exponent of max contention period: 0...15 */
3271 /* Log exponent of min contention period: 0...15 */
3274 /* Adaptive interframe spacing in units of 32us */
3277 /* TX queue to configure */
3281 /* Log exponent of max contention period: 0...15 */
3284 /* Log exponent of min contention period: 0...15 */
3287 /* Adaptive interframe spacing in units of 32us */
3290 /* TX queue to configure */
3296 #define MWL8K_SET_EDCA_CW 0x01
3297 #define MWL8K_SET_EDCA_TXOP 0x02
3298 #define MWL8K_SET_EDCA_AIFS 0x04
3300 #define MWL8K_SET_EDCA_ALL (MWL8K_SET_EDCA_CW | \
3301 MWL8K_SET_EDCA_TXOP | \
3302 MWL8K_SET_EDCA_AIFS)
3305 mwl8k_cmd_set_edca_params(struct ieee80211_hw *hw, __u8 qnum,
3306 __u16 cw_min, __u16 cw_max,
3307 __u8 aifs, __u16 txop)
3309 struct mwl8k_priv *priv = hw->priv;
3310 struct mwl8k_cmd_set_edca_params *cmd;
3313 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3317 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_EDCA_PARAMS);
3318 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3319 cmd->action = cpu_to_le16(MWL8K_SET_EDCA_ALL);
3320 cmd->txop = cpu_to_le16(txop);
3322 cmd->ap.log_cw_max = cpu_to_le32(ilog2(cw_max + 1));
3323 cmd->ap.log_cw_min = cpu_to_le32(ilog2(cw_min + 1));
3324 cmd->ap.aifs = aifs;
3327 cmd->sta.log_cw_max = (u8)ilog2(cw_max + 1);
3328 cmd->sta.log_cw_min = (u8)ilog2(cw_min + 1);
3329 cmd->sta.aifs = aifs;
3330 cmd->sta.txq = qnum;
3333 rc = mwl8k_post_cmd(hw, &cmd->header);
3342 struct mwl8k_cmd_set_wmm_mode {
3343 struct mwl8k_cmd_pkt header;
3347 static int mwl8k_cmd_set_wmm_mode(struct ieee80211_hw *hw, bool enable)
3349 struct mwl8k_priv *priv = hw->priv;
3350 struct mwl8k_cmd_set_wmm_mode *cmd;
3353 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3357 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_WMM_MODE);
3358 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3359 cmd->action = cpu_to_le16(!!enable);
3361 rc = mwl8k_post_cmd(hw, &cmd->header);
3365 priv->wmm_enabled = enable;
3373 struct mwl8k_cmd_mimo_config {
3374 struct mwl8k_cmd_pkt header;
3376 __u8 rx_antenna_map;
3377 __u8 tx_antenna_map;
3380 static int mwl8k_cmd_mimo_config(struct ieee80211_hw *hw, __u8 rx, __u8 tx)
3382 struct mwl8k_cmd_mimo_config *cmd;
3385 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3389 cmd->header.code = cpu_to_le16(MWL8K_CMD_MIMO_CONFIG);
3390 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3391 cmd->action = cpu_to_le32((u32)MWL8K_CMD_SET);
3392 cmd->rx_antenna_map = rx;
3393 cmd->tx_antenna_map = tx;
3395 rc = mwl8k_post_cmd(hw, &cmd->header);
3402 * CMD_USE_FIXED_RATE (STA version).
3404 struct mwl8k_cmd_use_fixed_rate_sta {
3405 struct mwl8k_cmd_pkt header;
3407 __le32 allow_rate_drop;
3411 __le32 enable_retry;
3420 #define MWL8K_USE_AUTO_RATE 0x0002
3421 #define MWL8K_UCAST_RATE 0
3423 static int mwl8k_cmd_use_fixed_rate_sta(struct ieee80211_hw *hw)
3425 struct mwl8k_cmd_use_fixed_rate_sta *cmd;
3428 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3432 cmd->header.code = cpu_to_le16(MWL8K_CMD_USE_FIXED_RATE);
3433 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3434 cmd->action = cpu_to_le32(MWL8K_USE_AUTO_RATE);
3435 cmd->rate_type = cpu_to_le32(MWL8K_UCAST_RATE);
3437 rc = mwl8k_post_cmd(hw, &cmd->header);
3444 * CMD_USE_FIXED_RATE (AP version).
3446 struct mwl8k_cmd_use_fixed_rate_ap {
3447 struct mwl8k_cmd_pkt header;
3449 __le32 allow_rate_drop;
3451 struct mwl8k_rate_entry_ap {
3453 __le32 enable_retry;
3458 u8 multicast_rate_type;
3463 mwl8k_cmd_use_fixed_rate_ap(struct ieee80211_hw *hw, int mcast, int mgmt)
3465 struct mwl8k_cmd_use_fixed_rate_ap *cmd;
3468 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3472 cmd->header.code = cpu_to_le16(MWL8K_CMD_USE_FIXED_RATE);
3473 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3474 cmd->action = cpu_to_le32(MWL8K_USE_AUTO_RATE);
3475 cmd->multicast_rate = mcast;
3476 cmd->management_rate = mgmt;
3478 rc = mwl8k_post_cmd(hw, &cmd->header);
3485 * CMD_ENABLE_SNIFFER.
3487 struct mwl8k_cmd_enable_sniffer {
3488 struct mwl8k_cmd_pkt header;
3492 static int mwl8k_cmd_enable_sniffer(struct ieee80211_hw *hw, bool enable)
3494 struct mwl8k_cmd_enable_sniffer *cmd;
3497 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3501 cmd->header.code = cpu_to_le16(MWL8K_CMD_ENABLE_SNIFFER);
3502 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3503 cmd->action = cpu_to_le32(!!enable);
3505 rc = mwl8k_post_cmd(hw, &cmd->header);
3511 struct mwl8k_cmd_update_mac_addr {
3512 struct mwl8k_cmd_pkt header;
3516 __u8 mac_addr[ETH_ALEN];
3518 __u8 mac_addr[ETH_ALEN];
3522 #define MWL8K_MAC_TYPE_PRIMARY_CLIENT 0
3523 #define MWL8K_MAC_TYPE_SECONDARY_CLIENT 1
3524 #define MWL8K_MAC_TYPE_PRIMARY_AP 2
3525 #define MWL8K_MAC_TYPE_SECONDARY_AP 3
3527 static int mwl8k_cmd_update_mac_addr(struct ieee80211_hw *hw,
3528 struct ieee80211_vif *vif, u8 *mac, bool set)
3530 struct mwl8k_priv *priv = hw->priv;
3531 struct mwl8k_vif *mwl8k_vif = MWL8K_VIF(vif);
3532 struct mwl8k_cmd_update_mac_addr *cmd;
3536 mac_type = MWL8K_MAC_TYPE_PRIMARY_AP;
3537 if (vif != NULL && vif->type == NL80211_IFTYPE_STATION) {
3538 if (mwl8k_vif->macid + 1 == ffs(priv->sta_macids_supported))
3540 mac_type = MWL8K_MAC_TYPE_SECONDARY_CLIENT;
3542 mac_type = MWL8K_MAC_TYPE_PRIMARY_CLIENT;
3544 mac_type = MWL8K_MAC_TYPE_SECONDARY_CLIENT;
3545 } else if (vif != NULL && vif->type == NL80211_IFTYPE_AP) {
3546 if (mwl8k_vif->macid + 1 == ffs(priv->ap_macids_supported))
3547 mac_type = MWL8K_MAC_TYPE_PRIMARY_AP;
3549 mac_type = MWL8K_MAC_TYPE_SECONDARY_AP;
3552 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3557 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_MAC_ADDR);
3559 cmd->header.code = cpu_to_le16(MWL8K_CMD_DEL_MAC_ADDR);
3561 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3563 cmd->mbss.mac_type = cpu_to_le16(mac_type);
3564 memcpy(cmd->mbss.mac_addr, mac, ETH_ALEN);
3566 memcpy(cmd->mac_addr, mac, ETH_ALEN);
3569 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
3576 * MWL8K_CMD_SET_MAC_ADDR.
3578 static inline int mwl8k_cmd_set_mac_addr(struct ieee80211_hw *hw,
3579 struct ieee80211_vif *vif, u8 *mac)
3581 return mwl8k_cmd_update_mac_addr(hw, vif, mac, true);
3585 * MWL8K_CMD_DEL_MAC_ADDR.
3587 static inline int mwl8k_cmd_del_mac_addr(struct ieee80211_hw *hw,
3588 struct ieee80211_vif *vif, u8 *mac)
3590 return mwl8k_cmd_update_mac_addr(hw, vif, mac, false);
3594 * CMD_SET_RATEADAPT_MODE.
3596 struct mwl8k_cmd_set_rate_adapt_mode {
3597 struct mwl8k_cmd_pkt header;
3602 static int mwl8k_cmd_set_rateadapt_mode(struct ieee80211_hw *hw, __u16 mode)
3604 struct mwl8k_cmd_set_rate_adapt_mode *cmd;
3607 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3611 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_RATEADAPT_MODE);
3612 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3613 cmd->action = cpu_to_le16(MWL8K_CMD_SET);
3614 cmd->mode = cpu_to_le16(mode);
3616 rc = mwl8k_post_cmd(hw, &cmd->header);
3623 * CMD_GET_WATCHDOG_BITMAP.
3625 struct mwl8k_cmd_get_watchdog_bitmap {
3626 struct mwl8k_cmd_pkt header;
3630 static int mwl8k_cmd_get_watchdog_bitmap(struct ieee80211_hw *hw, u8 *bitmap)
3632 struct mwl8k_cmd_get_watchdog_bitmap *cmd;
3635 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3639 cmd->header.code = cpu_to_le16(MWL8K_CMD_GET_WATCHDOG_BITMAP);
3640 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3642 rc = mwl8k_post_cmd(hw, &cmd->header);
3644 *bitmap = cmd->bitmap;
3651 #define MWL8K_WMM_QUEUE_NUMBER 3
3653 static void mwl8k_destroy_ba(struct ieee80211_hw *hw,
3656 static void mwl8k_watchdog_ba_events(struct work_struct *work)
3659 u8 bitmap = 0, stream_index;
3660 struct mwl8k_ampdu_stream *streams;
3661 struct mwl8k_priv *priv =
3662 container_of(work, struct mwl8k_priv, watchdog_ba_handle);
3663 struct ieee80211_hw *hw = priv->hw;
3669 rc = mwl8k_cmd_get_watchdog_bitmap(priv->hw, &bitmap);
3673 spin_lock(&priv->stream_lock);
3675 /* the bitmap is the hw queue number. Map it to the ampdu queue. */
3676 for (i = 0; i < TOTAL_HW_TX_QUEUES; i++) {
3677 if (bitmap & (1 << i)) {
3678 stream_index = (i + MWL8K_WMM_QUEUE_NUMBER) %
3680 streams = &priv->ampdu[stream_index];
3681 if (streams->state == AMPDU_STREAM_ACTIVE) {
3682 ieee80211_stop_tx_ba_session(streams->sta,
3684 spin_unlock(&priv->stream_lock);
3685 mwl8k_destroy_ba(hw, stream_index);
3686 spin_lock(&priv->stream_lock);
3691 spin_unlock(&priv->stream_lock);
3693 atomic_dec(&priv->watchdog_event_pending);
3694 status = ioread32(priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK);
3695 iowrite32((status | MWL8K_A2H_INT_BA_WATCHDOG),
3696 priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK);
3697 mwl8k_fw_unlock(hw);
3705 struct mwl8k_cmd_bss_start {
3706 struct mwl8k_cmd_pkt header;
3710 static int mwl8k_cmd_bss_start(struct ieee80211_hw *hw,
3711 struct ieee80211_vif *vif, int enable)
3713 struct mwl8k_cmd_bss_start *cmd;
3714 struct mwl8k_vif *mwl8k_vif = MWL8K_VIF(vif);
3715 struct mwl8k_priv *priv = hw->priv;
3718 if (enable && (priv->running_bsses & (1 << mwl8k_vif->macid)))
3721 if (!enable && !(priv->running_bsses & (1 << mwl8k_vif->macid)))
3724 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3728 cmd->header.code = cpu_to_le16(MWL8K_CMD_BSS_START);
3729 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3730 cmd->enable = cpu_to_le32(enable);
3732 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
3737 priv->running_bsses |= (1 << mwl8k_vif->macid);
3739 priv->running_bsses &= ~(1 << mwl8k_vif->macid);
3744 static void mwl8k_enable_bsses(struct ieee80211_hw *hw, bool enable, u32 bitmap)
3746 struct mwl8k_priv *priv = hw->priv;
3747 struct mwl8k_vif *mwl8k_vif, *tmp_vif;
3748 struct ieee80211_vif *vif;
3750 list_for_each_entry_safe(mwl8k_vif, tmp_vif, &priv->vif_list, list) {
3751 vif = mwl8k_vif->vif;
3753 if (!(bitmap & (1 << mwl8k_vif->macid)))
3756 if (vif->type == NL80211_IFTYPE_AP)
3757 mwl8k_cmd_bss_start(hw, vif, enable);
3765 * UPSTREAM is tx direction
3767 #define BASTREAM_FLAG_DIRECTION_UPSTREAM 0x00
3768 #define BASTREAM_FLAG_IMMEDIATE_TYPE 0x01
3770 enum ba_stream_action_type {
3779 struct mwl8k_create_ba_stream {
3784 u8 peer_mac_addr[6];
3790 u8 reset_seq_no_flag;
3792 u8 sta_src_mac_addr[6];
3795 struct mwl8k_destroy_ba_stream {
3800 struct mwl8k_cmd_bastream {
3801 struct mwl8k_cmd_pkt header;
3804 struct mwl8k_create_ba_stream create_params;
3805 struct mwl8k_destroy_ba_stream destroy_params;
3810 mwl8k_check_ba(struct ieee80211_hw *hw, struct mwl8k_ampdu_stream *stream,
3811 struct ieee80211_vif *vif)
3813 struct mwl8k_cmd_bastream *cmd;
3816 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3820 cmd->header.code = cpu_to_le16(MWL8K_CMD_BASTREAM);
3821 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3823 cmd->action = cpu_to_le32(MWL8K_BA_CHECK);
3825 cmd->create_params.queue_id = stream->idx;
3826 memcpy(&cmd->create_params.peer_mac_addr[0], stream->sta->addr,
3828 cmd->create_params.tid = stream->tid;
3830 cmd->create_params.flags =
3831 cpu_to_le32(BASTREAM_FLAG_IMMEDIATE_TYPE) |
3832 cpu_to_le32(BASTREAM_FLAG_DIRECTION_UPSTREAM);
3834 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
3842 mwl8k_create_ba(struct ieee80211_hw *hw, struct mwl8k_ampdu_stream *stream,
3843 u8 buf_size, struct ieee80211_vif *vif)
3845 struct mwl8k_cmd_bastream *cmd;
3848 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3853 cmd->header.code = cpu_to_le16(MWL8K_CMD_BASTREAM);
3854 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3856 cmd->action = cpu_to_le32(MWL8K_BA_CREATE);
3858 cmd->create_params.bar_thrs = cpu_to_le32((u32)buf_size);
3859 cmd->create_params.window_size = cpu_to_le32((u32)buf_size);
3860 cmd->create_params.queue_id = stream->idx;
3862 memcpy(cmd->create_params.peer_mac_addr, stream->sta->addr, ETH_ALEN);
3863 cmd->create_params.tid = stream->tid;
3864 cmd->create_params.curr_seq_no = cpu_to_le16(0);
3865 cmd->create_params.reset_seq_no_flag = 1;
3867 cmd->create_params.param_info =
3868 (stream->sta->ht_cap.ampdu_factor &
3869 IEEE80211_HT_AMPDU_PARM_FACTOR) |
3870 ((stream->sta->ht_cap.ampdu_density << 2) &
3871 IEEE80211_HT_AMPDU_PARM_DENSITY);
3873 cmd->create_params.flags =
3874 cpu_to_le32(BASTREAM_FLAG_IMMEDIATE_TYPE |
3875 BASTREAM_FLAG_DIRECTION_UPSTREAM);
3877 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
3879 wiphy_debug(hw->wiphy, "Created a BA stream for %pM : tid %d\n",
3880 stream->sta->addr, stream->tid);
3886 static void mwl8k_destroy_ba(struct ieee80211_hw *hw,
3889 struct mwl8k_cmd_bastream *cmd;
3891 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3895 cmd->header.code = cpu_to_le16(MWL8K_CMD_BASTREAM);
3896 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3897 cmd->action = cpu_to_le32(MWL8K_BA_DESTROY);
3899 cmd->destroy_params.ba_context = cpu_to_le32(idx);
3900 mwl8k_post_cmd(hw, &cmd->header);
3902 wiphy_debug(hw->wiphy, "Deleted BA stream index %d\n", idx);
3910 struct mwl8k_cmd_set_new_stn {
3911 struct mwl8k_cmd_pkt header;
3917 __le32 legacy_rates;
3920 __le16 ht_capabilities_info;
3921 __u8 mac_ht_param_info;
3923 __u8 control_channel;
3932 #define MWL8K_STA_ACTION_ADD 0
3933 #define MWL8K_STA_ACTION_REMOVE 2
3935 static int mwl8k_cmd_set_new_stn_add(struct ieee80211_hw *hw,
3936 struct ieee80211_vif *vif,
3937 struct ieee80211_sta *sta)
3939 struct mwl8k_cmd_set_new_stn *cmd;
3943 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3947 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_NEW_STN);
3948 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3949 cmd->aid = cpu_to_le16(sta->aid);
3950 memcpy(cmd->mac_addr, sta->addr, ETH_ALEN);
3951 cmd->stn_id = cpu_to_le16(sta->aid);
3952 cmd->action = cpu_to_le16(MWL8K_STA_ACTION_ADD);
3953 if (hw->conf.channel->band == IEEE80211_BAND_2GHZ)
3954 rates = sta->supp_rates[IEEE80211_BAND_2GHZ];
3956 rates = sta->supp_rates[IEEE80211_BAND_5GHZ] << 5;
3957 cmd->legacy_rates = cpu_to_le32(rates);
3958 if (sta->ht_cap.ht_supported) {
3959 cmd->ht_rates[0] = sta->ht_cap.mcs.rx_mask[0];
3960 cmd->ht_rates[1] = sta->ht_cap.mcs.rx_mask[1];
3961 cmd->ht_rates[2] = sta->ht_cap.mcs.rx_mask[2];
3962 cmd->ht_rates[3] = sta->ht_cap.mcs.rx_mask[3];
3963 cmd->ht_capabilities_info = cpu_to_le16(sta->ht_cap.cap);
3964 cmd->mac_ht_param_info = (sta->ht_cap.ampdu_factor & 3) |
3965 ((sta->ht_cap.ampdu_density & 7) << 2);
3966 cmd->is_qos_sta = 1;
3969 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
3975 static int mwl8k_cmd_set_new_stn_add_self(struct ieee80211_hw *hw,
3976 struct ieee80211_vif *vif)
3978 struct mwl8k_cmd_set_new_stn *cmd;
3981 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
3985 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_NEW_STN);
3986 cmd->header.length = cpu_to_le16(sizeof(*cmd));
3987 memcpy(cmd->mac_addr, vif->addr, ETH_ALEN);
3989 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
3995 static int mwl8k_cmd_set_new_stn_del(struct ieee80211_hw *hw,
3996 struct ieee80211_vif *vif, u8 *addr)
3998 struct mwl8k_cmd_set_new_stn *cmd;
3999 struct mwl8k_priv *priv = hw->priv;
4003 spin_lock(&priv->stream_lock);
4004 /* Destroy any active ampdu streams for this sta */
4005 for (i = 0; i < MWL8K_NUM_AMPDU_STREAMS; i++) {
4006 struct mwl8k_ampdu_stream *s;
4007 s = &priv->ampdu[i];
4008 if (s->state != AMPDU_NO_STREAM) {
4009 if (memcmp(s->sta->addr, addr, ETH_ALEN) == 0) {
4010 if (s->state == AMPDU_STREAM_ACTIVE) {
4012 spin_unlock(&priv->stream_lock);
4013 mwl8k_destroy_ba(hw, idx);
4014 spin_lock(&priv->stream_lock);
4015 } else if (s->state == AMPDU_STREAM_NEW) {
4016 mwl8k_remove_stream(hw, s);
4022 spin_unlock(&priv->stream_lock);
4024 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
4028 cmd->header.code = cpu_to_le16(MWL8K_CMD_SET_NEW_STN);
4029 cmd->header.length = cpu_to_le16(sizeof(*cmd));
4030 memcpy(cmd->mac_addr, addr, ETH_ALEN);
4031 cmd->action = cpu_to_le16(MWL8K_STA_ACTION_REMOVE);
4033 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
4040 * CMD_UPDATE_ENCRYPTION.
4043 #define MAX_ENCR_KEY_LENGTH 16
4044 #define MIC_KEY_LENGTH 8
4046 struct mwl8k_cmd_update_encryption {
4047 struct mwl8k_cmd_pkt header;
4056 struct mwl8k_cmd_set_key {
4057 struct mwl8k_cmd_pkt header;
4066 __u8 key_material[MAX_ENCR_KEY_LENGTH];
4067 __u8 tkip_tx_mic_key[MIC_KEY_LENGTH];
4068 __u8 tkip_rx_mic_key[MIC_KEY_LENGTH];
4069 __le16 tkip_rsc_low;
4070 __le32 tkip_rsc_high;
4071 __le16 tkip_tsc_low;
4072 __le32 tkip_tsc_high;
4079 MWL8K_ENCR_REMOVE_KEY,
4080 MWL8K_ENCR_SET_GROUP_KEY,
4083 #define MWL8K_UPDATE_ENCRYPTION_TYPE_WEP 0
4084 #define MWL8K_UPDATE_ENCRYPTION_TYPE_DISABLE 1
4085 #define MWL8K_UPDATE_ENCRYPTION_TYPE_TKIP 4
4086 #define MWL8K_UPDATE_ENCRYPTION_TYPE_MIXED 7
4087 #define MWL8K_UPDATE_ENCRYPTION_TYPE_AES 8
4095 #define MWL8K_KEY_FLAG_TXGROUPKEY 0x00000004
4096 #define MWL8K_KEY_FLAG_PAIRWISE 0x00000008
4097 #define MWL8K_KEY_FLAG_TSC_VALID 0x00000040
4098 #define MWL8K_KEY_FLAG_WEP_TXKEY 0x01000000
4099 #define MWL8K_KEY_FLAG_MICKEY_VALID 0x02000000
4101 static int mwl8k_cmd_update_encryption_enable(struct ieee80211_hw *hw,
4102 struct ieee80211_vif *vif,
4106 struct mwl8k_cmd_update_encryption *cmd;
4109 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
4113 cmd->header.code = cpu_to_le16(MWL8K_CMD_UPDATE_ENCRYPTION);
4114 cmd->header.length = cpu_to_le16(sizeof(*cmd));
4115 cmd->action = cpu_to_le32(MWL8K_ENCR_ENABLE);
4116 memcpy(cmd->mac_addr, addr, ETH_ALEN);
4117 cmd->encr_type = encr_type;
4119 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
4125 static int mwl8k_encryption_set_cmd_info(struct mwl8k_cmd_set_key *cmd,
4127 struct ieee80211_key_conf *key)
4129 cmd->header.code = cpu_to_le16(MWL8K_CMD_UPDATE_ENCRYPTION);
4130 cmd->header.length = cpu_to_le16(sizeof(*cmd));
4131 cmd->length = cpu_to_le16(sizeof(*cmd) -
4132 offsetof(struct mwl8k_cmd_set_key, length));
4133 cmd->key_id = cpu_to_le32(key->keyidx);
4134 cmd->key_len = cpu_to_le16(key->keylen);
4135 memcpy(cmd->mac_addr, addr, ETH_ALEN);
4137 switch (key->cipher) {
4138 case WLAN_CIPHER_SUITE_WEP40:
4139 case WLAN_CIPHER_SUITE_WEP104:
4140 cmd->key_type_id = cpu_to_le16(MWL8K_ALG_WEP);
4141 if (key->keyidx == 0)
4142 cmd->key_info = cpu_to_le32(MWL8K_KEY_FLAG_WEP_TXKEY);
4145 case WLAN_CIPHER_SUITE_TKIP:
4146 cmd->key_type_id = cpu_to_le16(MWL8K_ALG_TKIP);
4147 cmd->key_info = (key->flags & IEEE80211_KEY_FLAG_PAIRWISE)
4148 ? cpu_to_le32(MWL8K_KEY_FLAG_PAIRWISE)
4149 : cpu_to_le32(MWL8K_KEY_FLAG_TXGROUPKEY);
4150 cmd->key_info |= cpu_to_le32(MWL8K_KEY_FLAG_MICKEY_VALID
4151 | MWL8K_KEY_FLAG_TSC_VALID);
4153 case WLAN_CIPHER_SUITE_CCMP:
4154 cmd->key_type_id = cpu_to_le16(MWL8K_ALG_CCMP);
4155 cmd->key_info = (key->flags & IEEE80211_KEY_FLAG_PAIRWISE)
4156 ? cpu_to_le32(MWL8K_KEY_FLAG_PAIRWISE)
4157 : cpu_to_le32(MWL8K_KEY_FLAG_TXGROUPKEY);
4166 static int mwl8k_cmd_encryption_set_key(struct ieee80211_hw *hw,
4167 struct ieee80211_vif *vif,
4169 struct ieee80211_key_conf *key)
4171 struct mwl8k_cmd_set_key *cmd;
4176 struct mwl8k_vif *mwl8k_vif = MWL8K_VIF(vif);
4178 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
4182 rc = mwl8k_encryption_set_cmd_info(cmd, addr, key);
4188 if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE)
4189 action = MWL8K_ENCR_SET_KEY;
4191 action = MWL8K_ENCR_SET_GROUP_KEY;
4193 switch (key->cipher) {
4194 case WLAN_CIPHER_SUITE_WEP40:
4195 case WLAN_CIPHER_SUITE_WEP104:
4196 if (!mwl8k_vif->wep_key_conf[idx].enabled) {
4197 memcpy(mwl8k_vif->wep_key_conf[idx].key, key,
4198 sizeof(*key) + key->keylen);
4199 mwl8k_vif->wep_key_conf[idx].enabled = 1;
4202 keymlen = key->keylen;
4203 action = MWL8K_ENCR_SET_KEY;
4205 case WLAN_CIPHER_SUITE_TKIP:
4206 keymlen = MAX_ENCR_KEY_LENGTH + 2 * MIC_KEY_LENGTH;
4208 case WLAN_CIPHER_SUITE_CCMP:
4209 keymlen = key->keylen;
4216 memcpy(cmd->key_material, key->key, keymlen);
4217 cmd->action = cpu_to_le32(action);
4219 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
4226 static int mwl8k_cmd_encryption_remove_key(struct ieee80211_hw *hw,
4227 struct ieee80211_vif *vif,
4229 struct ieee80211_key_conf *key)
4231 struct mwl8k_cmd_set_key *cmd;
4233 struct mwl8k_vif *mwl8k_vif = MWL8K_VIF(vif);
4235 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
4239 rc = mwl8k_encryption_set_cmd_info(cmd, addr, key);
4243 if (key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
4244 key->cipher == WLAN_CIPHER_SUITE_WEP104)
4245 mwl8k_vif->wep_key_conf[key->keyidx].enabled = 0;
4247 cmd->action = cpu_to_le32(MWL8K_ENCR_REMOVE_KEY);
4249 rc = mwl8k_post_pervif_cmd(hw, vif, &cmd->header);
4256 static int mwl8k_set_key(struct ieee80211_hw *hw,
4257 enum set_key_cmd cmd_param,
4258 struct ieee80211_vif *vif,
4259 struct ieee80211_sta *sta,
4260 struct ieee80211_key_conf *key)
4265 struct mwl8k_vif *mwl8k_vif = MWL8K_VIF(vif);
4266 struct mwl8k_priv *priv = hw->priv;
4268 if (vif->type == NL80211_IFTYPE_STATION && !priv->ap_fw)
4276 if (cmd_param == SET_KEY) {
4277 rc = mwl8k_cmd_encryption_set_key(hw, vif, addr, key);
4281 if ((key->cipher == WLAN_CIPHER_SUITE_WEP40)
4282 || (key->cipher == WLAN_CIPHER_SUITE_WEP104))
4283 encr_type = MWL8K_UPDATE_ENCRYPTION_TYPE_WEP;
4285 encr_type = MWL8K_UPDATE_ENCRYPTION_TYPE_MIXED;
4287 rc = mwl8k_cmd_update_encryption_enable(hw, vif, addr,
4292 mwl8k_vif->is_hw_crypto_enabled = true;
4295 rc = mwl8k_cmd_encryption_remove_key(hw, vif, addr, key);
4307 struct ewc_ht_info {
4313 struct peer_capability_info {
4314 /* Peer type - AP vs. STA. */
4317 /* Basic 802.11 capabilities from assoc resp. */
4320 /* Set if peer supports 802.11n high throughput (HT). */
4323 /* Valid if HT is supported. */
4325 __u8 extended_ht_caps;
4326 struct ewc_ht_info ewc_info;
4328 /* Legacy rate table. Intersection of our rates and peer rates. */
4329 __u8 legacy_rates[12];
4331 /* HT rate table. Intersection of our rates and peer rates. */
4335 /* If set, interoperability mode, no proprietary extensions. */
4339 __le16 amsdu_enabled;
4342 struct mwl8k_cmd_update_stadb {
4343 struct mwl8k_cmd_pkt header;
4345 /* See STADB_ACTION_TYPE */
4348 /* Peer MAC address */
4349 __u8 peer_addr[ETH_ALEN];
4353 /* Peer info - valid during add/update. */
4354 struct peer_capability_info peer_info;
4357 #define MWL8K_STA_DB_MODIFY_ENTRY 1
4358 #define MWL8K_STA_DB_DEL_ENTRY 2
4360 /* Peer Entry flags - used to define the type of the peer node */
4361 #define MWL8K_PEER_TYPE_ACCESSPOINT 2
4363 static int mwl8k_cmd_update_stadb_add(struct ieee80211_hw *hw,
4364 struct ieee80211_vif *vif,
4365 struct ieee80211_sta *sta)
4367 struct mwl8k_cmd_update_stadb *cmd;
4368 struct peer_capability_info *p;
4372 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
4376 cmd->header.code = cpu_to_le16(MWL8K_CMD_UPDATE_STADB);
4377 cmd->header.length = cpu_to_le16(sizeof(*cmd));
4378 cmd->action = cpu_to_le32(MWL8K_STA_DB_MODIFY_ENTRY);
4379 memcpy(cmd->peer_addr, sta->addr, ETH_ALEN);
4381 p = &cmd->peer_info;
4382 p->peer_type = MWL8K_PEER_TYPE_ACCESSPOINT;
4383 p->basic_caps = cpu_to_le16(vif->bss_conf.assoc_capability);
4384 p->ht_support = sta->ht_cap.ht_supported;
4385 p->ht_caps = cpu_to_le16(sta->ht_cap.cap);
4386 p->extended_ht_caps = (sta->ht_cap.ampdu_factor & 3) |
4387 ((sta->ht_cap.ampdu_density & 7) << 2);
4388 if (hw->conf.channel->band == IEEE80211_BAND_2GHZ)
4389 rates = sta->supp_rates[IEEE80211_BAND_2GHZ];
4391 rates = sta->supp_rates[IEEE80211_BAND_5GHZ] << 5;
4392 legacy_rate_mask_to_array(p->legacy_rates, rates);
4393 memcpy(p->ht_rates, sta->ht_cap.mcs.rx_mask, 16);
4395 p->amsdu_enabled = 0;
4397 rc = mwl8k_post_cmd(hw, &cmd->header);
4405 static int mwl8k_cmd_update_stadb_del(struct ieee80211_hw *hw,
4406 struct ieee80211_vif *vif, u8 *addr)
4408 struct mwl8k_cmd_update_stadb *cmd;
4411 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
4415 cmd->header.code = cpu_to_le16(MWL8K_CMD_UPDATE_STADB);
4416 cmd->header.length = cpu_to_le16(sizeof(*cmd));
4417 cmd->action = cpu_to_le32(MWL8K_STA_DB_DEL_ENTRY);
4418 memcpy(cmd->peer_addr, addr, ETH_ALEN);
4420 rc = mwl8k_post_cmd(hw, &cmd->header);
4428 * Interrupt handling.
4430 static irqreturn_t mwl8k_interrupt(int irq, void *dev_id)
4432 struct ieee80211_hw *hw = dev_id;
4433 struct mwl8k_priv *priv = hw->priv;
4436 status = ioread32(priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS);
4440 if (status & MWL8K_A2H_INT_TX_DONE) {
4441 status &= ~MWL8K_A2H_INT_TX_DONE;
4442 tasklet_schedule(&priv->poll_tx_task);
4445 if (status & MWL8K_A2H_INT_RX_READY) {
4446 status &= ~MWL8K_A2H_INT_RX_READY;
4447 tasklet_schedule(&priv->poll_rx_task);
4450 if (status & MWL8K_A2H_INT_BA_WATCHDOG) {
4451 iowrite32(~MWL8K_A2H_INT_BA_WATCHDOG,
4452 priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK);
4454 atomic_inc(&priv->watchdog_event_pending);
4455 status &= ~MWL8K_A2H_INT_BA_WATCHDOG;
4456 ieee80211_queue_work(hw, &priv->watchdog_ba_handle);
4460 iowrite32(~status, priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS);
4462 if (status & MWL8K_A2H_INT_OPC_DONE) {
4463 if (priv->hostcmd_wait != NULL)
4464 complete(priv->hostcmd_wait);
4467 if (status & MWL8K_A2H_INT_QUEUE_EMPTY) {
4468 if (!mutex_is_locked(&priv->fw_mutex) &&
4469 priv->radio_on && priv->pending_tx_pkts)
4470 mwl8k_tx_start(priv);
4476 static void mwl8k_tx_poll(unsigned long data)
4478 struct ieee80211_hw *hw = (struct ieee80211_hw *)data;
4479 struct mwl8k_priv *priv = hw->priv;
4485 spin_lock_bh(&priv->tx_lock);
4487 for (i = 0; i < mwl8k_tx_queues(priv); i++)
4488 limit -= mwl8k_txq_reclaim(hw, i, limit, 0);
4490 if (!priv->pending_tx_pkts && priv->tx_wait != NULL) {
4491 complete(priv->tx_wait);
4492 priv->tx_wait = NULL;
4495 spin_unlock_bh(&priv->tx_lock);
4498 writel(~MWL8K_A2H_INT_TX_DONE,
4499 priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS);
4501 tasklet_schedule(&priv->poll_tx_task);
4505 static void mwl8k_rx_poll(unsigned long data)
4507 struct ieee80211_hw *hw = (struct ieee80211_hw *)data;
4508 struct mwl8k_priv *priv = hw->priv;
4512 limit -= rxq_process(hw, 0, limit);
4513 limit -= rxq_refill(hw, 0, limit);
4516 writel(~MWL8K_A2H_INT_RX_READY,
4517 priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS);
4519 tasklet_schedule(&priv->poll_rx_task);
4525 * Core driver operations.
4527 static void mwl8k_tx(struct ieee80211_hw *hw,
4528 struct ieee80211_tx_control *control,
4529 struct sk_buff *skb)
4531 struct mwl8k_priv *priv = hw->priv;
4532 int index = skb_get_queue_mapping(skb);
4534 if (!priv->radio_on) {
4535 wiphy_debug(hw->wiphy,
4536 "dropped TX frame since radio disabled\n");
4541 mwl8k_txq_xmit(hw, index, control->sta, skb);
4544 static int mwl8k_start(struct ieee80211_hw *hw)
4546 struct mwl8k_priv *priv = hw->priv;
4549 rc = request_irq(priv->pdev->irq, mwl8k_interrupt,
4550 IRQF_SHARED, MWL8K_NAME, hw);
4553 wiphy_err(hw->wiphy, "failed to register IRQ handler\n");
4556 priv->irq = priv->pdev->irq;
4558 /* Enable TX reclaim and RX tasklets. */
4559 tasklet_enable(&priv->poll_tx_task);
4560 tasklet_enable(&priv->poll_rx_task);
4562 /* Enable interrupts */
4563 iowrite32(MWL8K_A2H_EVENTS, priv->regs + MWL8K_HIU_A2H_INTERRUPT_MASK);
4564 iowrite32(MWL8K_A2H_EVENTS,
4565 priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK);
4567 rc = mwl8k_fw_lock(hw);
4569 rc = mwl8k_cmd_radio_enable(hw);
4573 rc = mwl8k_cmd_enable_sniffer(hw, 0);
4576 rc = mwl8k_cmd_set_pre_scan(hw);
4579 rc = mwl8k_cmd_set_post_scan(hw,
4580 "\x00\x00\x00\x00\x00\x00");
4584 rc = mwl8k_cmd_set_rateadapt_mode(hw, 0);
4587 rc = mwl8k_cmd_set_wmm_mode(hw, 0);
4589 mwl8k_fw_unlock(hw);
4593 iowrite32(0, priv->regs + MWL8K_HIU_A2H_INTERRUPT_MASK);
4594 free_irq(priv->pdev->irq, hw);
4596 tasklet_disable(&priv->poll_tx_task);
4597 tasklet_disable(&priv->poll_rx_task);
4599 ieee80211_wake_queues(hw);
4605 static void mwl8k_stop(struct ieee80211_hw *hw)
4607 struct mwl8k_priv *priv = hw->priv;
4610 if (!priv->hw_restart_in_progress)
4611 mwl8k_cmd_radio_disable(hw);
4613 ieee80211_stop_queues(hw);
4615 /* Disable interrupts */
4616 iowrite32(0, priv->regs + MWL8K_HIU_A2H_INTERRUPT_MASK);
4617 if (priv->irq != -1) {
4618 free_irq(priv->pdev->irq, hw);
4622 /* Stop finalize join worker */
4623 cancel_work_sync(&priv->finalize_join_worker);
4624 cancel_work_sync(&priv->watchdog_ba_handle);
4625 if (priv->beacon_skb != NULL)
4626 dev_kfree_skb(priv->beacon_skb);
4628 /* Stop TX reclaim and RX tasklets. */
4629 tasklet_disable(&priv->poll_tx_task);
4630 tasklet_disable(&priv->poll_rx_task);
4632 /* Return all skbs to mac80211 */
4633 for (i = 0; i < mwl8k_tx_queues(priv); i++)
4634 mwl8k_txq_reclaim(hw, i, INT_MAX, 1);
4637 static int mwl8k_reload_firmware(struct ieee80211_hw *hw, char *fw_image);
4639 static int mwl8k_add_interface(struct ieee80211_hw *hw,
4640 struct ieee80211_vif *vif)
4642 struct mwl8k_priv *priv = hw->priv;
4643 struct mwl8k_vif *mwl8k_vif;
4644 u32 macids_supported;
4646 struct mwl8k_device_info *di;
4649 * Reject interface creation if sniffer mode is active, as
4650 * STA operation is mutually exclusive with hardware sniffer
4651 * mode. (Sniffer mode is only used on STA firmware.)
4653 if (priv->sniffer_enabled) {
4654 wiphy_info(hw->wiphy,
4655 "unable to create STA interface because sniffer mode is enabled\n");
4659 di = priv->device_info;
4660 switch (vif->type) {
4661 case NL80211_IFTYPE_AP:
4662 if (!priv->ap_fw && di->fw_image_ap) {
4663 /* we must load the ap fw to meet this request */
4664 if (!list_empty(&priv->vif_list))
4666 rc = mwl8k_reload_firmware(hw, di->fw_image_ap);
4670 macids_supported = priv->ap_macids_supported;
4672 case NL80211_IFTYPE_STATION:
4673 if (priv->ap_fw && di->fw_image_sta) {
4674 if (!list_empty(&priv->vif_list)) {
4675 wiphy_warn(hw->wiphy, "AP interface is running.\n"
4676 "Adding STA interface for WDS");
4678 /* we must load the sta fw to
4679 * meet this request.
4681 rc = mwl8k_reload_firmware(hw,
4687 macids_supported = priv->sta_macids_supported;
4693 macid = ffs(macids_supported & ~priv->macids_used);
4697 /* Setup driver private area. */
4698 mwl8k_vif = MWL8K_VIF(vif);
4699 memset(mwl8k_vif, 0, sizeof(*mwl8k_vif));
4700 mwl8k_vif->vif = vif;
4701 mwl8k_vif->macid = macid;
4702 mwl8k_vif->seqno = 0;
4703 memcpy(mwl8k_vif->bssid, vif->addr, ETH_ALEN);
4704 mwl8k_vif->is_hw_crypto_enabled = false;
4706 /* Set the mac address. */
4707 mwl8k_cmd_set_mac_addr(hw, vif, vif->addr);
4709 if (vif->type == NL80211_IFTYPE_AP)
4710 mwl8k_cmd_set_new_stn_add_self(hw, vif);
4712 priv->macids_used |= 1 << mwl8k_vif->macid;
4713 list_add_tail(&mwl8k_vif->list, &priv->vif_list);
4718 static void mwl8k_remove_vif(struct mwl8k_priv *priv, struct mwl8k_vif *vif)
4720 /* Has ieee80211_restart_hw re-added the removed interfaces? */
4721 if (!priv->macids_used)
4724 priv->macids_used &= ~(1 << vif->macid);
4725 list_del(&vif->list);
4728 static void mwl8k_remove_interface(struct ieee80211_hw *hw,
4729 struct ieee80211_vif *vif)
4731 struct mwl8k_priv *priv = hw->priv;
4732 struct mwl8k_vif *mwl8k_vif = MWL8K_VIF(vif);
4734 if (vif->type == NL80211_IFTYPE_AP)
4735 mwl8k_cmd_set_new_stn_del(hw, vif, vif->addr);
4737 mwl8k_cmd_del_mac_addr(hw, vif, vif->addr);
4739 mwl8k_remove_vif(priv, mwl8k_vif);
4742 static void mwl8k_hw_restart_work(struct work_struct *work)
4744 struct mwl8k_priv *priv =
4745 container_of(work, struct mwl8k_priv, fw_reload);
4746 struct ieee80211_hw *hw = priv->hw;
4747 struct mwl8k_device_info *di;
4750 /* If some command is waiting for a response, clear it */
4751 if (priv->hostcmd_wait != NULL) {
4752 complete(priv->hostcmd_wait);
4753 priv->hostcmd_wait = NULL;
4756 priv->hw_restart_owner = current;
4757 di = priv->device_info;
4761 rc = mwl8k_reload_firmware(hw, di->fw_image_ap);
4763 rc = mwl8k_reload_firmware(hw, di->fw_image_sta);
4768 priv->hw_restart_owner = NULL;
4769 priv->hw_restart_in_progress = false;
4772 * This unlock will wake up the queues and
4773 * also opens the command path for other
4776 mwl8k_fw_unlock(hw);
4778 ieee80211_restart_hw(hw);
4780 wiphy_err(hw->wiphy, "Firmware restarted successfully\n");
4784 mwl8k_fw_unlock(hw);
4786 wiphy_err(hw->wiphy, "Firmware restart failed\n");
4789 static int mwl8k_config(struct ieee80211_hw *hw, u32 changed)
4791 struct ieee80211_conf *conf = &hw->conf;
4792 struct mwl8k_priv *priv = hw->priv;
4795 if (conf->flags & IEEE80211_CONF_IDLE) {
4796 mwl8k_cmd_radio_disable(hw);
4800 rc = mwl8k_fw_lock(hw);
4804 rc = mwl8k_cmd_radio_enable(hw);
4808 if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
4809 rc = mwl8k_cmd_set_rf_channel(hw, conf);
4814 if (conf->power_level > 18)
4815 conf->power_level = 18;
4819 if (conf->flags & IEEE80211_CONF_CHANGE_POWER) {
4820 rc = mwl8k_cmd_tx_power(hw, conf, conf->power_level);
4827 rc = mwl8k_cmd_rf_tx_power(hw, conf->power_level);
4830 rc = mwl8k_cmd_mimo_config(hw, 0x7, 0x7);
4834 mwl8k_fw_unlock(hw);
4840 mwl8k_bss_info_changed_sta(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
4841 struct ieee80211_bss_conf *info, u32 changed)
4843 struct mwl8k_priv *priv = hw->priv;
4844 u32 ap_legacy_rates = 0;
4845 u8 ap_mcs_rates[16];
4848 if (mwl8k_fw_lock(hw))
4852 * No need to capture a beacon if we're no longer associated.
4854 if ((changed & BSS_CHANGED_ASSOC) && !vif->bss_conf.assoc)
4855 priv->capture_beacon = false;
4858 * Get the AP's legacy and MCS rates.
4860 if (vif->bss_conf.assoc) {
4861 struct ieee80211_sta *ap;
4865 ap = ieee80211_find_sta(vif, vif->bss_conf.bssid);
4871 if (hw->conf.channel->band == IEEE80211_BAND_2GHZ) {
4872 ap_legacy_rates = ap->supp_rates[IEEE80211_BAND_2GHZ];
4875 ap->supp_rates[IEEE80211_BAND_5GHZ] << 5;
4877 memcpy(ap_mcs_rates, ap->ht_cap.mcs.rx_mask, 16);
4882 if ((changed & BSS_CHANGED_ASSOC) && vif->bss_conf.assoc &&
4884 rc = mwl8k_cmd_set_rate(hw, vif, ap_legacy_rates, ap_mcs_rates);
4888 rc = mwl8k_cmd_use_fixed_rate_sta(hw);
4892 if ((changed & BSS_CHANGED_ASSOC) && vif->bss_conf.assoc &&
4897 /* Use AP firmware specific rate command.
4899 idx = ffs(vif->bss_conf.basic_rates);
4903 if (hw->conf.channel->band == IEEE80211_BAND_2GHZ)
4904 rate = mwl8k_rates_24[idx].hw_value;
4906 rate = mwl8k_rates_50[idx].hw_value;
4908 mwl8k_cmd_use_fixed_rate_ap(hw, rate, rate);
4912 if (changed & BSS_CHANGED_ERP_PREAMBLE) {
4913 rc = mwl8k_set_radio_preamble(hw,
4914 vif->bss_conf.use_short_preamble);
4919 if ((changed & BSS_CHANGED_ERP_SLOT) && !priv->ap_fw) {
4920 rc = mwl8k_cmd_set_slot(hw, vif->bss_conf.use_short_slot);
4925 if (vif->bss_conf.assoc && !priv->ap_fw &&
4926 (changed & (BSS_CHANGED_ASSOC | BSS_CHANGED_ERP_CTS_PROT |
4928 rc = mwl8k_cmd_set_aid(hw, vif, ap_legacy_rates);
4933 if (vif->bss_conf.assoc &&
4934 (changed & (BSS_CHANGED_ASSOC | BSS_CHANGED_BEACON_INT))) {
4936 * Finalize the join. Tell rx handler to process
4937 * next beacon from our BSSID.
4939 memcpy(priv->capture_bssid, vif->bss_conf.bssid, ETH_ALEN);
4940 priv->capture_beacon = true;
4944 mwl8k_fw_unlock(hw);
4948 mwl8k_bss_info_changed_ap(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
4949 struct ieee80211_bss_conf *info, u32 changed)
4953 if (mwl8k_fw_lock(hw))
4956 if (changed & BSS_CHANGED_ERP_PREAMBLE) {
4957 rc = mwl8k_set_radio_preamble(hw,
4958 vif->bss_conf.use_short_preamble);
4963 if (changed & BSS_CHANGED_BASIC_RATES) {
4968 * Use lowest supported basic rate for multicasts
4969 * and management frames (such as probe responses --
4970 * beacons will always go out at 1 Mb/s).
4972 idx = ffs(vif->bss_conf.basic_rates);
4976 if (hw->conf.channel->band == IEEE80211_BAND_2GHZ)
4977 rate = mwl8k_rates_24[idx].hw_value;
4979 rate = mwl8k_rates_50[idx].hw_value;
4981 mwl8k_cmd_use_fixed_rate_ap(hw, rate, rate);
4984 if (changed & (BSS_CHANGED_BEACON_INT | BSS_CHANGED_BEACON)) {
4985 struct sk_buff *skb;
4987 skb = ieee80211_beacon_get(hw, vif);
4989 mwl8k_cmd_set_beacon(hw, vif, skb->data, skb->len);
4994 if (changed & BSS_CHANGED_BEACON_ENABLED)
4995 mwl8k_cmd_bss_start(hw, vif, info->enable_beacon);
4998 mwl8k_fw_unlock(hw);
5002 mwl8k_bss_info_changed(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
5003 struct ieee80211_bss_conf *info, u32 changed)
5005 if (vif->type == NL80211_IFTYPE_STATION)
5006 mwl8k_bss_info_changed_sta(hw, vif, info, changed);
5007 if (vif->type == NL80211_IFTYPE_AP)
5008 mwl8k_bss_info_changed_ap(hw, vif, info, changed);
5011 static u64 mwl8k_prepare_multicast(struct ieee80211_hw *hw,
5012 struct netdev_hw_addr_list *mc_list)
5014 struct mwl8k_cmd_pkt *cmd;
5017 * Synthesize and return a command packet that programs the
5018 * hardware multicast address filter. At this point we don't
5019 * know whether FIF_ALLMULTI is being requested, but if it is,
5020 * we'll end up throwing this packet away and creating a new
5021 * one in mwl8k_configure_filter().
5023 cmd = __mwl8k_cmd_mac_multicast_adr(hw, 0, mc_list);
5025 return (unsigned long)cmd;
5029 mwl8k_configure_filter_sniffer(struct ieee80211_hw *hw,
5030 unsigned int changed_flags,
5031 unsigned int *total_flags)
5033 struct mwl8k_priv *priv = hw->priv;
5036 * Hardware sniffer mode is mutually exclusive with STA
5037 * operation, so refuse to enable sniffer mode if a STA
5038 * interface is active.
5040 if (!list_empty(&priv->vif_list)) {
5041 if (net_ratelimit())
5042 wiphy_info(hw->wiphy,
5043 "not enabling sniffer mode because STA interface is active\n");
5047 if (!priv->sniffer_enabled) {
5048 if (mwl8k_cmd_enable_sniffer(hw, 1))
5050 priv->sniffer_enabled = true;
5053 *total_flags &= FIF_PROMISC_IN_BSS | FIF_ALLMULTI |
5054 FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL |
5060 static struct mwl8k_vif *mwl8k_first_vif(struct mwl8k_priv *priv)
5062 if (!list_empty(&priv->vif_list))
5063 return list_entry(priv->vif_list.next, struct mwl8k_vif, list);
5068 static void mwl8k_configure_filter(struct ieee80211_hw *hw,
5069 unsigned int changed_flags,
5070 unsigned int *total_flags,
5073 struct mwl8k_priv *priv = hw->priv;
5074 struct mwl8k_cmd_pkt *cmd = (void *)(unsigned long)multicast;
5077 * AP firmware doesn't allow fine-grained control over
5078 * the receive filter.
5081 *total_flags &= FIF_ALLMULTI | FIF_BCN_PRBRESP_PROMISC;
5087 * Enable hardware sniffer mode if FIF_CONTROL or
5088 * FIF_OTHER_BSS is requested.
5090 if (*total_flags & (FIF_CONTROL | FIF_OTHER_BSS) &&
5091 mwl8k_configure_filter_sniffer(hw, changed_flags, total_flags)) {
5096 /* Clear unsupported feature flags */
5097 *total_flags &= FIF_ALLMULTI | FIF_BCN_PRBRESP_PROMISC;
5099 if (mwl8k_fw_lock(hw)) {
5104 if (priv->sniffer_enabled) {
5105 mwl8k_cmd_enable_sniffer(hw, 0);
5106 priv->sniffer_enabled = false;
5109 if (changed_flags & FIF_BCN_PRBRESP_PROMISC) {
5110 if (*total_flags & FIF_BCN_PRBRESP_PROMISC) {
5112 * Disable the BSS filter.
5114 mwl8k_cmd_set_pre_scan(hw);
5116 struct mwl8k_vif *mwl8k_vif;
5120 * Enable the BSS filter.
5122 * If there is an active STA interface, use that
5123 * interface's BSSID, otherwise use a dummy one
5124 * (where the OUI part needs to be nonzero for
5125 * the BSSID to be accepted by POST_SCAN).
5127 mwl8k_vif = mwl8k_first_vif(priv);
5128 if (mwl8k_vif != NULL)
5129 bssid = mwl8k_vif->vif->bss_conf.bssid;
5131 bssid = "\x01\x00\x00\x00\x00\x00";
5133 mwl8k_cmd_set_post_scan(hw, bssid);
5138 * If FIF_ALLMULTI is being requested, throw away the command
5139 * packet that ->prepare_multicast() built and replace it with
5140 * a command packet that enables reception of all multicast
5143 if (*total_flags & FIF_ALLMULTI) {
5145 cmd = __mwl8k_cmd_mac_multicast_adr(hw, 1, NULL);
5149 mwl8k_post_cmd(hw, cmd);
5153 mwl8k_fw_unlock(hw);
5156 static int mwl8k_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
5158 return mwl8k_cmd_set_rts_threshold(hw, value);
5161 static int mwl8k_sta_remove(struct ieee80211_hw *hw,
5162 struct ieee80211_vif *vif,
5163 struct ieee80211_sta *sta)
5165 struct mwl8k_priv *priv = hw->priv;
5168 return mwl8k_cmd_set_new_stn_del(hw, vif, sta->addr);
5170 return mwl8k_cmd_update_stadb_del(hw, vif, sta->addr);
5173 static int mwl8k_sta_add(struct ieee80211_hw *hw,
5174 struct ieee80211_vif *vif,
5175 struct ieee80211_sta *sta)
5177 struct mwl8k_priv *priv = hw->priv;
5180 struct mwl8k_vif *mwl8k_vif = MWL8K_VIF(vif);
5181 struct ieee80211_key_conf *key;
5184 ret = mwl8k_cmd_update_stadb_add(hw, vif, sta);
5186 MWL8K_STA(sta)->peer_id = ret;
5187 if (sta->ht_cap.ht_supported)
5188 MWL8K_STA(sta)->is_ampdu_allowed = true;
5193 ret = mwl8k_cmd_set_new_stn_add(hw, vif, sta);
5196 for (i = 0; i < NUM_WEP_KEYS; i++) {
5197 key = IEEE80211_KEY_CONF(mwl8k_vif->wep_key_conf[i].key);
5198 if (mwl8k_vif->wep_key_conf[i].enabled)
5199 mwl8k_set_key(hw, SET_KEY, vif, sta, key);
5204 static int mwl8k_conf_tx(struct ieee80211_hw *hw,
5205 struct ieee80211_vif *vif, u16 queue,
5206 const struct ieee80211_tx_queue_params *params)
5208 struct mwl8k_priv *priv = hw->priv;
5211 rc = mwl8k_fw_lock(hw);
5213 BUG_ON(queue > MWL8K_TX_WMM_QUEUES - 1);
5214 memcpy(&priv->wmm_params[queue], params, sizeof(*params));
5216 if (!priv->wmm_enabled)
5217 rc = mwl8k_cmd_set_wmm_mode(hw, 1);
5220 int q = MWL8K_TX_WMM_QUEUES - 1 - queue;
5221 rc = mwl8k_cmd_set_edca_params(hw, q,
5228 mwl8k_fw_unlock(hw);
5234 static int mwl8k_get_stats(struct ieee80211_hw *hw,
5235 struct ieee80211_low_level_stats *stats)
5237 return mwl8k_cmd_get_stat(hw, stats);
5240 static int mwl8k_get_survey(struct ieee80211_hw *hw, int idx,
5241 struct survey_info *survey)
5243 struct mwl8k_priv *priv = hw->priv;
5244 struct ieee80211_conf *conf = &hw->conf;
5249 survey->channel = conf->channel;
5250 survey->filled = SURVEY_INFO_NOISE_DBM;
5251 survey->noise = priv->noise;
5256 #define MAX_AMPDU_ATTEMPTS 5
5259 mwl8k_ampdu_action(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
5260 enum ieee80211_ampdu_mlme_action action,
5261 struct ieee80211_sta *sta, u16 tid, u16 *ssn,
5266 struct mwl8k_priv *priv = hw->priv;
5267 struct mwl8k_ampdu_stream *stream;
5268 u8 *addr = sta->addr, idx;
5269 struct mwl8k_sta *sta_info = MWL8K_STA(sta);
5271 if (!(hw->flags & IEEE80211_HW_AMPDU_AGGREGATION))
5274 spin_lock(&priv->stream_lock);
5275 stream = mwl8k_lookup_stream(hw, addr, tid);
5278 case IEEE80211_AMPDU_RX_START:
5279 case IEEE80211_AMPDU_RX_STOP:
5281 case IEEE80211_AMPDU_TX_START:
5282 /* By the time we get here the hw queues may contain outgoing
5283 * packets for this RA/TID that are not part of this BA
5284 * session. The hw will assign sequence numbers to these
5285 * packets as they go out. So if we query the hw for its next
5286 * sequence number and use that for the SSN here, it may end up
5287 * being wrong, which will lead to sequence number mismatch at
5288 * the recipient. To avoid this, we reset the sequence number
5289 * to O for the first MPDU in this BA stream.
5292 if (stream == NULL) {
5293 /* This means that somebody outside this driver called
5294 * ieee80211_start_tx_ba_session. This is unexpected
5295 * because we do our own rate control. Just warn and
5298 wiphy_warn(hw->wiphy, "Unexpected call to %s. "
5299 "Proceeding anyway.\n", __func__);
5300 stream = mwl8k_add_stream(hw, sta, tid);
5302 if (stream == NULL) {
5303 wiphy_debug(hw->wiphy, "no free AMPDU streams\n");
5307 stream->state = AMPDU_STREAM_IN_PROGRESS;
5309 /* Release the lock before we do the time consuming stuff */
5310 spin_unlock(&priv->stream_lock);
5311 for (i = 0; i < MAX_AMPDU_ATTEMPTS; i++) {
5313 /* Check if link is still valid */
5314 if (!sta_info->is_ampdu_allowed) {
5315 spin_lock(&priv->stream_lock);
5316 mwl8k_remove_stream(hw, stream);
5317 spin_unlock(&priv->stream_lock);
5321 rc = mwl8k_check_ba(hw, stream, vif);
5323 /* If HW restart is in progress mwl8k_post_cmd will
5324 * return -EBUSY. Avoid retrying mwl8k_check_ba in
5327 if (!rc || rc == -EBUSY)
5330 * HW queues take time to be flushed, give them
5336 spin_lock(&priv->stream_lock);
5338 wiphy_err(hw->wiphy, "Stream for tid %d busy after %d"
5339 " attempts\n", tid, MAX_AMPDU_ATTEMPTS);
5340 mwl8k_remove_stream(hw, stream);
5344 ieee80211_start_tx_ba_cb_irqsafe(vif, addr, tid);
5346 case IEEE80211_AMPDU_TX_STOP_CONT:
5347 case IEEE80211_AMPDU_TX_STOP_FLUSH:
5348 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
5350 if (stream->state == AMPDU_STREAM_ACTIVE) {
5352 spin_unlock(&priv->stream_lock);
5353 mwl8k_destroy_ba(hw, idx);
5354 spin_lock(&priv->stream_lock);
5356 mwl8k_remove_stream(hw, stream);
5358 ieee80211_stop_tx_ba_cb_irqsafe(vif, addr, tid);
5360 case IEEE80211_AMPDU_TX_OPERATIONAL:
5361 BUG_ON(stream == NULL);
5362 BUG_ON(stream->state != AMPDU_STREAM_IN_PROGRESS);
5363 spin_unlock(&priv->stream_lock);
5364 rc = mwl8k_create_ba(hw, stream, buf_size, vif);
5365 spin_lock(&priv->stream_lock);
5367 stream->state = AMPDU_STREAM_ACTIVE;
5370 spin_unlock(&priv->stream_lock);
5371 mwl8k_destroy_ba(hw, idx);
5372 spin_lock(&priv->stream_lock);
5373 wiphy_debug(hw->wiphy,
5374 "Failed adding stream for sta %pM tid %d\n",
5376 mwl8k_remove_stream(hw, stream);
5384 spin_unlock(&priv->stream_lock);
5388 static const struct ieee80211_ops mwl8k_ops = {
5390 .start = mwl8k_start,
5392 .add_interface = mwl8k_add_interface,
5393 .remove_interface = mwl8k_remove_interface,
5394 .config = mwl8k_config,
5395 .bss_info_changed = mwl8k_bss_info_changed,
5396 .prepare_multicast = mwl8k_prepare_multicast,
5397 .configure_filter = mwl8k_configure_filter,
5398 .set_key = mwl8k_set_key,
5399 .set_rts_threshold = mwl8k_set_rts_threshold,
5400 .sta_add = mwl8k_sta_add,
5401 .sta_remove = mwl8k_sta_remove,
5402 .conf_tx = mwl8k_conf_tx,
5403 .get_stats = mwl8k_get_stats,
5404 .get_survey = mwl8k_get_survey,
5405 .ampdu_action = mwl8k_ampdu_action,
5408 static void mwl8k_finalize_join_worker(struct work_struct *work)
5410 struct mwl8k_priv *priv =
5411 container_of(work, struct mwl8k_priv, finalize_join_worker);
5412 struct sk_buff *skb = priv->beacon_skb;
5413 struct ieee80211_mgmt *mgmt = (void *)skb->data;
5414 int len = skb->len - offsetof(struct ieee80211_mgmt, u.beacon.variable);
5415 const u8 *tim = cfg80211_find_ie(WLAN_EID_TIM,
5416 mgmt->u.beacon.variable, len);
5417 int dtim_period = 1;
5419 if (tim && tim[1] >= 2)
5420 dtim_period = tim[3];
5422 mwl8k_cmd_finalize_join(priv->hw, skb->data, skb->len, dtim_period);
5425 priv->beacon_skb = NULL;
5434 #define MWL8K_8366_AP_FW_API 3
5435 #define _MWL8K_8366_AP_FW(api) "mwl8k/fmimage_8366_ap-" #api ".fw"
5436 #define MWL8K_8366_AP_FW(api) _MWL8K_8366_AP_FW(api)
5438 static struct mwl8k_device_info mwl8k_info_tbl[] = {
5440 .part_name = "88w8363",
5441 .helper_image = "mwl8k/helper_8363.fw",
5442 .fw_image_sta = "mwl8k/fmimage_8363.fw",
5445 .part_name = "88w8687",
5446 .helper_image = "mwl8k/helper_8687.fw",
5447 .fw_image_sta = "mwl8k/fmimage_8687.fw",
5450 .part_name = "88w8366",
5451 .helper_image = "mwl8k/helper_8366.fw",
5452 .fw_image_sta = "mwl8k/fmimage_8366.fw",
5453 .fw_image_ap = MWL8K_8366_AP_FW(MWL8K_8366_AP_FW_API),
5454 .fw_api_ap = MWL8K_8366_AP_FW_API,
5455 .ap_rxd_ops = &rxd_8366_ap_ops,
5459 MODULE_FIRMWARE("mwl8k/helper_8363.fw");
5460 MODULE_FIRMWARE("mwl8k/fmimage_8363.fw");
5461 MODULE_FIRMWARE("mwl8k/helper_8687.fw");
5462 MODULE_FIRMWARE("mwl8k/fmimage_8687.fw");
5463 MODULE_FIRMWARE("mwl8k/helper_8366.fw");
5464 MODULE_FIRMWARE("mwl8k/fmimage_8366.fw");
5465 MODULE_FIRMWARE(MWL8K_8366_AP_FW(MWL8K_8366_AP_FW_API));
5467 static DEFINE_PCI_DEVICE_TABLE(mwl8k_pci_id_table) = {
5468 { PCI_VDEVICE(MARVELL, 0x2a0a), .driver_data = MWL8363, },
5469 { PCI_VDEVICE(MARVELL, 0x2a0c), .driver_data = MWL8363, },
5470 { PCI_VDEVICE(MARVELL, 0x2a24), .driver_data = MWL8363, },
5471 { PCI_VDEVICE(MARVELL, 0x2a2b), .driver_data = MWL8687, },
5472 { PCI_VDEVICE(MARVELL, 0x2a30), .driver_data = MWL8687, },
5473 { PCI_VDEVICE(MARVELL, 0x2a40), .driver_data = MWL8366, },
5474 { PCI_VDEVICE(MARVELL, 0x2a41), .driver_data = MWL8366, },
5475 { PCI_VDEVICE(MARVELL, 0x2a42), .driver_data = MWL8366, },
5476 { PCI_VDEVICE(MARVELL, 0x2a43), .driver_data = MWL8366, },
5479 MODULE_DEVICE_TABLE(pci, mwl8k_pci_id_table);
5481 static int mwl8k_request_alt_fw(struct mwl8k_priv *priv)
5484 printk(KERN_ERR "%s: Error requesting preferred fw %s.\n"
5485 "Trying alternative firmware %s\n", pci_name(priv->pdev),
5486 priv->fw_pref, priv->fw_alt);
5487 rc = mwl8k_request_fw(priv, priv->fw_alt, &priv->fw_ucode, true);
5489 printk(KERN_ERR "%s: Error requesting alt fw %s\n",
5490 pci_name(priv->pdev), priv->fw_alt);
5496 static int mwl8k_firmware_load_success(struct mwl8k_priv *priv);
5497 static void mwl8k_fw_state_machine(const struct firmware *fw, void *context)
5499 struct mwl8k_priv *priv = context;
5500 struct mwl8k_device_info *di = priv->device_info;
5503 switch (priv->fw_state) {
5506 printk(KERN_ERR "%s: Error requesting helper fw %s\n",
5507 pci_name(priv->pdev), di->helper_image);
5510 priv->fw_helper = fw;
5511 rc = mwl8k_request_fw(priv, priv->fw_pref, &priv->fw_ucode,
5513 if (rc && priv->fw_alt) {
5514 rc = mwl8k_request_alt_fw(priv);
5517 priv->fw_state = FW_STATE_LOADING_ALT;
5521 priv->fw_state = FW_STATE_LOADING_PREF;
5524 case FW_STATE_LOADING_PREF:
5527 rc = mwl8k_request_alt_fw(priv);
5530 priv->fw_state = FW_STATE_LOADING_ALT;
5534 priv->fw_ucode = fw;
5535 rc = mwl8k_firmware_load_success(priv);
5539 complete(&priv->firmware_loading_complete);
5543 case FW_STATE_LOADING_ALT:
5545 printk(KERN_ERR "%s: Error requesting alt fw %s\n",
5546 pci_name(priv->pdev), di->helper_image);
5549 priv->fw_ucode = fw;
5550 rc = mwl8k_firmware_load_success(priv);
5554 complete(&priv->firmware_loading_complete);
5558 printk(KERN_ERR "%s: Unexpected firmware loading state: %d\n",
5559 MWL8K_NAME, priv->fw_state);
5566 priv->fw_state = FW_STATE_ERROR;
5567 complete(&priv->firmware_loading_complete);
5568 device_release_driver(&priv->pdev->dev);
5569 mwl8k_release_firmware(priv);
5572 #define MAX_RESTART_ATTEMPTS 1
5573 static int mwl8k_init_firmware(struct ieee80211_hw *hw, char *fw_image,
5576 struct mwl8k_priv *priv = hw->priv;
5578 int count = MAX_RESTART_ATTEMPTS;
5581 /* Reset firmware and hardware */
5582 mwl8k_hw_reset(priv);
5584 /* Ask userland hotplug daemon for the device firmware */
5585 rc = mwl8k_request_firmware(priv, fw_image, nowait);
5587 wiphy_err(hw->wiphy, "Firmware files not found\n");
5594 /* Load firmware into hardware */
5595 rc = mwl8k_load_firmware(hw);
5597 wiphy_err(hw->wiphy, "Cannot start firmware\n");
5599 /* Reclaim memory once firmware is successfully loaded */
5600 mwl8k_release_firmware(priv);
5603 /* FW did not start successfully;
5604 * lets try one more time
5607 wiphy_err(hw->wiphy, "Trying to reload the firmware again\n");
5615 static int mwl8k_init_txqs(struct ieee80211_hw *hw)
5617 struct mwl8k_priv *priv = hw->priv;
5621 for (i = 0; i < mwl8k_tx_queues(priv); i++) {
5622 rc = mwl8k_txq_init(hw, i);
5626 iowrite32(priv->txq[i].txd_dma,
5627 priv->sram + priv->txq_offset[i]);
5632 /* initialize hw after successfully loading a firmware image */
5633 static int mwl8k_probe_hw(struct ieee80211_hw *hw)
5635 struct mwl8k_priv *priv = hw->priv;
5640 priv->rxd_ops = priv->device_info->ap_rxd_ops;
5641 if (priv->rxd_ops == NULL) {
5642 wiphy_err(hw->wiphy,
5643 "Driver does not have AP firmware image support for this hardware\n");
5645 goto err_stop_firmware;
5648 priv->rxd_ops = &rxd_sta_ops;
5651 priv->sniffer_enabled = false;
5652 priv->wmm_enabled = false;
5653 priv->pending_tx_pkts = 0;
5654 atomic_set(&priv->watchdog_event_pending, 0);
5656 rc = mwl8k_rxq_init(hw, 0);
5658 goto err_stop_firmware;
5659 rxq_refill(hw, 0, INT_MAX);
5661 /* For the sta firmware, we need to know the dma addresses of tx queues
5662 * before sending MWL8K_CMD_GET_HW_SPEC. So we must initialize them
5663 * prior to issuing this command. But for the AP case, we learn the
5664 * total number of queues from the result CMD_GET_HW_SPEC, so for this
5665 * case we must initialize the tx queues after.
5667 priv->num_ampdu_queues = 0;
5669 rc = mwl8k_init_txqs(hw);
5671 goto err_free_queues;
5674 iowrite32(0, priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS);
5675 iowrite32(0, priv->regs + MWL8K_HIU_A2H_INTERRUPT_MASK);
5676 iowrite32(MWL8K_A2H_INT_TX_DONE|MWL8K_A2H_INT_RX_READY|
5677 MWL8K_A2H_INT_BA_WATCHDOG,
5678 priv->regs + MWL8K_HIU_A2H_INTERRUPT_CLEAR_SEL);
5679 iowrite32(MWL8K_A2H_INT_OPC_DONE,
5680 priv->regs + MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK);
5682 rc = request_irq(priv->pdev->irq, mwl8k_interrupt,
5683 IRQF_SHARED, MWL8K_NAME, hw);
5685 wiphy_err(hw->wiphy, "failed to register IRQ handler\n");
5686 goto err_free_queues;
5690 * When hw restart is requested,
5691 * mac80211 will take care of clearing
5692 * the ampdu streams, so do not clear
5693 * the ampdu state here
5695 if (!priv->hw_restart_in_progress)
5696 memset(priv->ampdu, 0, sizeof(priv->ampdu));
5699 * Temporarily enable interrupts. Initial firmware host
5700 * commands use interrupts and avoid polling. Disable
5701 * interrupts when done.
5703 iowrite32(MWL8K_A2H_EVENTS, priv->regs + MWL8K_HIU_A2H_INTERRUPT_MASK);
5705 /* Get config data, mac addrs etc */
5707 rc = mwl8k_cmd_get_hw_spec_ap(hw);
5709 rc = mwl8k_init_txqs(hw);
5711 rc = mwl8k_cmd_set_hw_spec(hw);
5713 rc = mwl8k_cmd_get_hw_spec_sta(hw);
5716 wiphy_err(hw->wiphy, "Cannot initialise firmware\n");
5720 /* Turn radio off */
5721 rc = mwl8k_cmd_radio_disable(hw);
5723 wiphy_err(hw->wiphy, "Cannot disable\n");
5727 /* Clear MAC address */
5728 rc = mwl8k_cmd_set_mac_addr(hw, NULL, "\x00\x00\x00\x00\x00\x00");
5730 wiphy_err(hw->wiphy, "Cannot clear MAC address\n");
5734 /* Configure Antennas */
5735 rc = mwl8k_cmd_rf_antenna(hw, MWL8K_RF_ANTENNA_RX, 0x3);
5737 wiphy_warn(hw->wiphy, "failed to set # of RX antennas");
5738 rc = mwl8k_cmd_rf_antenna(hw, MWL8K_RF_ANTENNA_TX, 0x7);
5740 wiphy_warn(hw->wiphy, "failed to set # of TX antennas");
5743 /* Disable interrupts */
5744 iowrite32(0, priv->regs + MWL8K_HIU_A2H_INTERRUPT_MASK);
5745 free_irq(priv->pdev->irq, hw);
5747 wiphy_info(hw->wiphy, "%s v%d, %pm, %s firmware %u.%u.%u.%u\n",
5748 priv->device_info->part_name,
5749 priv->hw_rev, hw->wiphy->perm_addr,
5750 priv->ap_fw ? "AP" : "STA",
5751 (priv->fw_rev >> 24) & 0xff, (priv->fw_rev >> 16) & 0xff,
5752 (priv->fw_rev >> 8) & 0xff, priv->fw_rev & 0xff);
5757 iowrite32(0, priv->regs + MWL8K_HIU_A2H_INTERRUPT_MASK);
5758 free_irq(priv->pdev->irq, hw);
5761 for (i = 0; i < mwl8k_tx_queues(priv); i++)
5762 mwl8k_txq_deinit(hw, i);
5763 mwl8k_rxq_deinit(hw, 0);
5766 mwl8k_hw_reset(priv);
5772 * invoke mwl8k_reload_firmware to change the firmware image after the device
5773 * has already been registered
5775 static int mwl8k_reload_firmware(struct ieee80211_hw *hw, char *fw_image)
5778 struct mwl8k_priv *priv = hw->priv;
5779 struct mwl8k_vif *vif, *tmp_vif;
5782 mwl8k_rxq_deinit(hw, 0);
5785 * All the existing interfaces are re-added by the ieee80211_reconfig;
5786 * which means driver should remove existing interfaces before calling
5787 * ieee80211_restart_hw
5789 if (priv->hw_restart_in_progress)
5790 list_for_each_entry_safe(vif, tmp_vif, &priv->vif_list, list)
5791 mwl8k_remove_vif(priv, vif);
5793 for (i = 0; i < mwl8k_tx_queues(priv); i++)
5794 mwl8k_txq_deinit(hw, i);
5796 rc = mwl8k_init_firmware(hw, fw_image, false);
5800 rc = mwl8k_probe_hw(hw);
5804 if (priv->hw_restart_in_progress)
5807 rc = mwl8k_start(hw);
5811 rc = mwl8k_config(hw, ~0);
5815 for (i = 0; i < MWL8K_TX_WMM_QUEUES; i++) {
5816 rc = mwl8k_conf_tx(hw, NULL, i, &priv->wmm_params[i]);
5824 printk(KERN_WARNING "mwl8k: Failed to reload firmware image.\n");
5828 static const struct ieee80211_iface_limit ap_if_limits[] = {
5829 { .max = 8, .types = BIT(NL80211_IFTYPE_AP) },
5830 { .max = 1, .types = BIT(NL80211_IFTYPE_STATION) },
5833 static const struct ieee80211_iface_combination ap_if_comb = {
5834 .limits = ap_if_limits,
5835 .n_limits = ARRAY_SIZE(ap_if_limits),
5836 .max_interfaces = 8,
5837 .num_different_channels = 1,
5841 static int mwl8k_firmware_load_success(struct mwl8k_priv *priv)
5843 struct ieee80211_hw *hw = priv->hw;
5846 rc = mwl8k_load_firmware(hw);
5847 mwl8k_release_firmware(priv);
5849 wiphy_err(hw->wiphy, "Cannot start firmware\n");
5854 * Extra headroom is the size of the required DMA header
5855 * minus the size of the smallest 802.11 frame (CTS frame).
5857 hw->extra_tx_headroom =
5858 sizeof(struct mwl8k_dma_data) - sizeof(struct ieee80211_cts);
5860 hw->extra_tx_headroom -= priv->ap_fw ? REDUCED_TX_HEADROOM : 0;
5862 hw->channel_change_time = 10;
5864 hw->queues = MWL8K_TX_WMM_QUEUES;
5866 /* Set rssi values to dBm */
5867 hw->flags |= IEEE80211_HW_SIGNAL_DBM | IEEE80211_HW_HAS_RATE_CONTROL;
5870 * Ask mac80211 to not to trigger PS mode
5871 * based on PM bit of incoming frames.
5874 hw->flags |= IEEE80211_HW_AP_LINK_PS;
5876 hw->vif_data_size = sizeof(struct mwl8k_vif);
5877 hw->sta_data_size = sizeof(struct mwl8k_sta);
5879 priv->macids_used = 0;
5880 INIT_LIST_HEAD(&priv->vif_list);
5882 /* Set default radio state and preamble */
5883 priv->radio_on = false;
5884 priv->radio_short_preamble = false;
5886 /* Finalize join worker */
5887 INIT_WORK(&priv->finalize_join_worker, mwl8k_finalize_join_worker);
5888 /* Handle watchdog ba events */
5889 INIT_WORK(&priv->watchdog_ba_handle, mwl8k_watchdog_ba_events);
5890 /* To reload the firmware if it crashes */
5891 INIT_WORK(&priv->fw_reload, mwl8k_hw_restart_work);
5893 /* TX reclaim and RX tasklets. */
5894 tasklet_init(&priv->poll_tx_task, mwl8k_tx_poll, (unsigned long)hw);
5895 tasklet_disable(&priv->poll_tx_task);
5896 tasklet_init(&priv->poll_rx_task, mwl8k_rx_poll, (unsigned long)hw);
5897 tasklet_disable(&priv->poll_rx_task);
5899 /* Power management cookie */
5900 priv->cookie = pci_alloc_consistent(priv->pdev, 4, &priv->cookie_dma);
5901 if (priv->cookie == NULL)
5904 mutex_init(&priv->fw_mutex);
5905 priv->fw_mutex_owner = NULL;
5906 priv->fw_mutex_depth = 0;
5907 priv->hostcmd_wait = NULL;
5909 spin_lock_init(&priv->tx_lock);
5911 spin_lock_init(&priv->stream_lock);
5913 priv->tx_wait = NULL;
5915 rc = mwl8k_probe_hw(hw);
5917 goto err_free_cookie;
5919 hw->wiphy->interface_modes = 0;
5921 if (priv->ap_macids_supported || priv->device_info->fw_image_ap) {
5922 hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_AP);
5923 hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_STATION);
5924 hw->wiphy->iface_combinations = &ap_if_comb;
5925 hw->wiphy->n_iface_combinations = 1;
5928 if (priv->sta_macids_supported || priv->device_info->fw_image_sta)
5929 hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_STATION);
5931 rc = ieee80211_register_hw(hw);
5933 wiphy_err(hw->wiphy, "Cannot register device\n");
5934 goto err_unprobe_hw;
5940 for (i = 0; i < mwl8k_tx_queues(priv); i++)
5941 mwl8k_txq_deinit(hw, i);
5942 mwl8k_rxq_deinit(hw, 0);
5945 if (priv->cookie != NULL)
5946 pci_free_consistent(priv->pdev, 4,
5947 priv->cookie, priv->cookie_dma);
5951 static int mwl8k_probe(struct pci_dev *pdev,
5952 const struct pci_device_id *id)
5954 static int printed_version;
5955 struct ieee80211_hw *hw;
5956 struct mwl8k_priv *priv;
5957 struct mwl8k_device_info *di;
5960 if (!printed_version) {
5961 printk(KERN_INFO "%s version %s\n", MWL8K_DESC, MWL8K_VERSION);
5962 printed_version = 1;
5966 rc = pci_enable_device(pdev);
5968 printk(KERN_ERR "%s: Cannot enable new PCI device\n",
5973 rc = pci_request_regions(pdev, MWL8K_NAME);
5975 printk(KERN_ERR "%s: Cannot obtain PCI resources\n",
5977 goto err_disable_device;
5980 pci_set_master(pdev);
5983 hw = ieee80211_alloc_hw(sizeof(*priv), &mwl8k_ops);
5985 printk(KERN_ERR "%s: ieee80211 alloc failed\n", MWL8K_NAME);
5990 SET_IEEE80211_DEV(hw, &pdev->dev);
5991 pci_set_drvdata(pdev, hw);
5996 priv->device_info = &mwl8k_info_tbl[id->driver_data];
5999 priv->sram = pci_iomap(pdev, 0, 0x10000);
6000 if (priv->sram == NULL) {
6001 wiphy_err(hw->wiphy, "Cannot map device SRAM\n");
6007 * If BAR0 is a 32 bit BAR, the register BAR will be BAR1.
6008 * If BAR0 is a 64 bit BAR, the register BAR will be BAR2.
6010 priv->regs = pci_iomap(pdev, 1, 0x10000);
6011 if (priv->regs == NULL) {
6012 priv->regs = pci_iomap(pdev, 2, 0x10000);
6013 if (priv->regs == NULL) {
6014 wiphy_err(hw->wiphy, "Cannot map device registers\n");
6021 * Choose the initial fw image depending on user input. If a second
6022 * image is available, make it the alternative image that will be
6023 * loaded if the first one fails.
6025 init_completion(&priv->firmware_loading_complete);
6026 di = priv->device_info;
6027 if (ap_mode_default && di->fw_image_ap) {
6028 priv->fw_pref = di->fw_image_ap;
6029 priv->fw_alt = di->fw_image_sta;
6030 } else if (!ap_mode_default && di->fw_image_sta) {
6031 priv->fw_pref = di->fw_image_sta;
6032 priv->fw_alt = di->fw_image_ap;
6033 } else if (ap_mode_default && !di->fw_image_ap && di->fw_image_sta) {
6034 printk(KERN_WARNING "AP fw is unavailable. Using STA fw.");
6035 priv->fw_pref = di->fw_image_sta;
6036 } else if (!ap_mode_default && !di->fw_image_sta && di->fw_image_ap) {
6037 printk(KERN_WARNING "STA fw is unavailable. Using AP fw.");
6038 priv->fw_pref = di->fw_image_ap;
6040 rc = mwl8k_init_firmware(hw, priv->fw_pref, true);
6042 goto err_stop_firmware;
6044 priv->hw_restart_in_progress = false;
6046 priv->running_bsses = 0;
6051 mwl8k_hw_reset(priv);
6054 if (priv->regs != NULL)
6055 pci_iounmap(pdev, priv->regs);
6057 if (priv->sram != NULL)
6058 pci_iounmap(pdev, priv->sram);
6060 pci_set_drvdata(pdev, NULL);
6061 ieee80211_free_hw(hw);
6064 pci_release_regions(pdev);
6067 pci_disable_device(pdev);
6072 static void mwl8k_remove(struct pci_dev *pdev)
6074 struct ieee80211_hw *hw = pci_get_drvdata(pdev);
6075 struct mwl8k_priv *priv;
6082 wait_for_completion(&priv->firmware_loading_complete);
6084 if (priv->fw_state == FW_STATE_ERROR) {
6085 mwl8k_hw_reset(priv);
6089 ieee80211_stop_queues(hw);
6091 ieee80211_unregister_hw(hw);
6093 /* Remove TX reclaim and RX tasklets. */
6094 tasklet_kill(&priv->poll_tx_task);
6095 tasklet_kill(&priv->poll_rx_task);
6098 mwl8k_hw_reset(priv);
6100 /* Return all skbs to mac80211 */
6101 for (i = 0; i < mwl8k_tx_queues(priv); i++)
6102 mwl8k_txq_reclaim(hw, i, INT_MAX, 1);
6104 for (i = 0; i < mwl8k_tx_queues(priv); i++)
6105 mwl8k_txq_deinit(hw, i);
6107 mwl8k_rxq_deinit(hw, 0);
6109 pci_free_consistent(priv->pdev, 4, priv->cookie, priv->cookie_dma);
6112 pci_iounmap(pdev, priv->regs);
6113 pci_iounmap(pdev, priv->sram);
6114 pci_set_drvdata(pdev, NULL);
6115 ieee80211_free_hw(hw);
6116 pci_release_regions(pdev);
6117 pci_disable_device(pdev);
6120 static struct pci_driver mwl8k_driver = {
6122 .id_table = mwl8k_pci_id_table,
6123 .probe = mwl8k_probe,
6124 .remove = mwl8k_remove,
6127 module_pci_driver(mwl8k_driver);
6129 MODULE_DESCRIPTION(MWL8K_DESC);
6130 MODULE_VERSION(MWL8K_VERSION);
6131 MODULE_AUTHOR("Lennert Buytenhek <buytenh@marvell.com>");
6132 MODULE_LICENSE("GPL");