xref: /illumos-gate/usr/src/uts/common/io/rwn/rt2860.c (revision 33efde4275d24731ef87927237b0ffb0630b6b2d)
1 /*
2  * Copyright 2017 Gary Mills
3  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
4  * Use is subject to license terms.
5  * Copyright 2019 Joyent, Inc.
6  */
7 
8 /*
9  * Copyright (c) 2007, 2008
10  *	Damien Bergamini <damien.bergamini@free.fr>
11  *
12  * Permission to use, copy, modify, and distribute this software for any
13  * purpose with or without fee is hereby granted, provided that the above
14  * copyright notice and this permission notice appear in all copies.
15  *
16  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
17  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
18  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
19  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
20  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
21  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
22  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
23  */
24 
25 /*
26  * Ralink Technology RT2860 chipset driver
27  * http://www.ralinktech.com/
28  */
29 
30 #include <sys/types.h>
31 #include <sys/byteorder.h>
32 #include <sys/conf.h>
33 #include <sys/cmn_err.h>
34 #include <sys/stat.h>
35 #include <sys/ddi.h>
36 #include <sys/sunddi.h>
37 #include <sys/strsubr.h>
38 #include <inet/common.h>
39 #include <sys/note.h>
40 #include <sys/stream.h>
41 #include <sys/strsun.h>
42 #include <sys/modctl.h>
43 #include <sys/devops.h>
44 #include <sys/mac_provider.h>
45 #include <sys/mac_wifi.h>
46 #include <sys/net80211.h>
47 #include <sys/net80211_proto.h>
48 #include <sys/varargs.h>
49 #include <sys/pci.h>
50 #include <sys/crypto/common.h>
51 #include <sys/crypto/api.h>
52 #include <inet/wifi_ioctl.h>
53 
54 #include "rt2860_reg.h"
55 #include "rt2860_var.h"
56 
57 #define	RT2860_DBG_80211	(1 << 0)
58 #define	RT2860_DBG_DMA		(1 << 1)
59 #define	RT2860_DBG_EEPROM	(1 << 2)
60 #define	RT2860_DBG_FW		(1 << 3)
61 #define	RT2860_DBG_HW		(1 << 4)
62 #define	RT2860_DBG_INTR		(1 << 5)
63 #define	RT2860_DBG_RX		(1 << 6)
64 #define	RT2860_DBG_SCAN		(1 << 7)
65 #define	RT2860_DBG_TX		(1 << 8)
66 #define	RT2860_DBG_RADIO	(1 << 9)
67 #define	RT2860_DBG_RESUME	(1 << 10)
68 #define	RT2860_DBG_MSG		(1 << 11)
69 
70 uint32_t rt2860_dbg_flags = 0x0;
71 
72 #ifdef DEBUG
73 #define	RWN_DEBUG \
74 	rt2860_debug
75 #else
76 #define	RWN_DEBUG(...) (void)(0)
77 #endif
78 
79 static void *rt2860_soft_state_p = NULL;
80 static uint8_t rt2860_fw_bin [] = {
81 #include "fw-rt2860/rt2860.ucode"
82 };
83 
84 static const struct ieee80211_rateset rt2860_rateset_11b =
85 	{ 4, { 2, 4, 11, 22 } };
86 
87 static const struct ieee80211_rateset rt2860_rateset_11g =
88 	{ 12, { 2, 4, 11, 22, 12, 18, 24, 36, 48, 72, 96, 108 } };
89 
90 static const struct {
91 	uint32_t	reg;
92 	uint32_t	val;
93 } rt2860_def_mac[] = {
94 	RT2860_DEF_MAC
95 };
96 
97 static const struct {
98 	uint8_t	reg;
99 	uint8_t	val;
100 } rt2860_def_bbp[] = {
101 	RT2860_DEF_BBP
102 };
103 
104 static const struct rfprog {
105 	uint8_t		chan;
106 	uint32_t	r1, r2, r3, r4;
107 } rt2860_rf2850[] = {
108 	RT2860_RF2850
109 };
110 
111 /*
112  * PIO access attributes for registers
113  */
114 static ddi_device_acc_attr_t rwn_csr_accattr = {
115 	DDI_DEVICE_ATTR_V0,
116 	DDI_STRUCTURE_LE_ACC,
117 	DDI_STRICTORDER_ACC
118 };
119 
120 /*
121  * DMA access attributes for descriptors: NOT to be byte swapped.
122  */
123 static ddi_device_acc_attr_t rt2860_desc_accattr = {
124 	DDI_DEVICE_ATTR_V0,
125 	DDI_STRUCTURE_LE_ACC,
126 	DDI_STRICTORDER_ACC
127 };
128 
129 static ddi_device_acc_attr_t rt2860_buf_accattr = {
130 	DDI_DEVICE_ATTR_V0,
131 	DDI_NEVERSWAP_ACC,
132 	DDI_STRICTORDER_ACC,
133 	DDI_DEFAULT_ACC
134 };
135 
136 /*
137  * Describes the chip's DMA engine
138  */
139 static ddi_dma_attr_t rt2860_dma_attr = {
140 	DMA_ATTR_V0,			/* dma_attr version */
141 	0x0,				/* dma_attr_addr_lo */
142 	0xffffffffU,			/* dma_attr_addr_hi */
143 	0xffffffffU,			/* dma_attr_count_max */
144 	16,				/* dma_attr_align */
145 	0x00000fff,			/* dma_attr_burstsizes */
146 	1,				/* dma_attr_minxfer */
147 	0xffffffffU,			/* dma_attr_maxxfer */
148 	0xffffffffU,			/* dma_attr_seg */
149 	1,				/* dma_attr_sgllen */
150 	1,				/* dma_attr_granular */
151 	0				/* dma_attr_flags */
152 };
153 
154 static uint16_t	rt2860_eeprom_read(struct rt2860_softc *, uint8_t);
155 static int 	rt2860_read_eeprom(struct rt2860_softc *);
156 const char	*rt2860_get_rf(uint8_t);
157 static int	rt2860_alloc_dma_mem(dev_info_t *, ddi_dma_attr_t *, size_t,
158 		    ddi_device_acc_attr_t *, uint_t, uint_t, struct dma_area *);
159 static void	rt2860_free_dma_mem(struct dma_area *);
160 static int	rt2860_alloc_tx_ring(struct rt2860_softc *,
161 		    struct rt2860_tx_ring *);
162 static void	rt2860_free_tx_ring(struct rt2860_softc *,
163 		    struct rt2860_tx_ring *);
164 static int	rt2860_alloc_rx_ring(struct rt2860_softc *,
165 		    struct rt2860_rx_ring *);
166 static void	rt2860_free_rx_ring(struct rt2860_softc *,
167 		    struct rt2860_rx_ring *);
168 static int	rt2860_alloc_tx_pool(struct rt2860_softc *);
169 static void	rt2860_free_tx_pool(struct rt2860_softc *);
170 static uint16_t	rt2860_txtime(int, int, uint32_t);
171 static int	rt2860_ack_rate(struct ieee80211com *, int);
172 static int	rt2860_send(ieee80211com_t *, mblk_t *, uint8_t);
173 static uint8_t	rt2860_maxrssi_chain(struct rt2860_softc *,
174 		    const struct rt2860_rxwi *);
175 static void	rt2860_drain_stats_fifo(struct rt2860_softc *);
176 static void	rt2860_tx_intr(struct rt2860_softc *, int);
177 static void	rt2860_rx_intr(struct rt2860_softc *);
178 static uint_t	rt2860_softintr(caddr_t);
179 static uint_t	rt2860_intr(caddr_t);
180 static void	rt2860_set_region_4(struct rt2860_softc *,
181 		    uint32_t, uint32_t, int);
182 static int	rt2860_load_microcode(struct rt2860_softc *);
183 static void	rt2860_set_macaddr(struct rt2860_softc *, const uint8_t *);
184 static int	rt2860_bbp_init(struct rt2860_softc *);
185 static uint8_t	rt2860_mcu_bbp_read(struct rt2860_softc *, uint8_t);
186 static void	rt2860_mcu_bbp_write(struct rt2860_softc *, uint8_t, uint8_t);
187 static int	rt2860_mcu_cmd(struct rt2860_softc *, uint8_t, uint16_t);
188 static void	rt2860_rf_write(struct rt2860_softc *, uint8_t, uint32_t);
189 static void	rt2860_select_chan_group(struct rt2860_softc *, int);
190 static void	rt2860_set_chan(struct rt2860_softc *,
191 		    struct ieee80211_channel *);
192 static void	rt2860_updateprot(struct ieee80211com *);
193 static void	rt2860_set_leds(struct rt2860_softc *, uint16_t);
194 static void	rt2860_next_scan(void *);
195 static void	rt2860_iter_func(void *, struct ieee80211_node *);
196 static void	rt2860_updateslot(struct rt2860_softc *);
197 static uint8_t	rt2860_rate2mcs(uint8_t);
198 static void	rt2860_enable_mrr(struct rt2860_softc *);
199 static void	rt2860_set_txpreamble(struct rt2860_softc *);
200 static void	rt2860_set_basicrates(struct rt2860_softc *);
201 static void	rt2860_set_bssid(struct rt2860_softc *, const uint8_t *);
202 static void	rt2860_amrr_node_init(const struct rt2860_amrr *,
203 		    struct rt2860_amrr_node *);
204 static void	rt2860_amrr_choose(struct rt2860_amrr *,
205 		    struct ieee80211_node *, struct rt2860_amrr_node *);
206 static void	rt2860_newassoc(struct ieee80211com *, struct ieee80211_node *,
207 		    int);
208 static void	rt2860_enable_tsf_sync(struct rt2860_softc *);
209 static int	rt2860_newstate(struct ieee80211com *,
210 		    enum ieee80211_state, int);
211 static int	rt2860_init(struct rt2860_softc *);
212 static void	rt2860_stop(struct rt2860_softc *);
213 static int	rt2860_quiesce(dev_info_t *t);
214 
215 /*
216  * device operations
217  */
218 static int rt2860_attach(dev_info_t *, ddi_attach_cmd_t);
219 static int rt2860_detach(dev_info_t *, ddi_detach_cmd_t);
220 
221 /*
222  * Module Loading Data & Entry Points
223  */
224 DDI_DEFINE_STREAM_OPS(rwn_dev_ops, nulldev, nulldev, rt2860_attach,
225     rt2860_detach, nodev, NULL, D_MP, NULL, rt2860_quiesce);
226 
227 static struct modldrv rwn_modldrv = {
228 	&mod_driverops,		/* Type of module.  This one is a driver */
229 	"Ralink RT2700/2800 driver v1.2",	/* short description */
230 	&rwn_dev_ops		/* driver specific ops */
231 };
232 
233 static struct modlinkage modlinkage = {
234 	MODREV_1,
235 	(void *)&rwn_modldrv,
236 	NULL
237 };
238 
239 static int	rt2860_m_stat(void *,  uint_t, uint64_t *);
240 static int	rt2860_m_start(void *);
241 static void	rt2860_m_stop(void *);
242 static int	rt2860_m_promisc(void *, boolean_t);
243 static int	rt2860_m_multicst(void *, boolean_t, const uint8_t *);
244 static int	rt2860_m_unicst(void *, const uint8_t *);
245 static mblk_t	*rt2860_m_tx(void *, mblk_t *);
246 static void	rt2860_m_ioctl(void *, queue_t *, mblk_t *);
247 static int	rt2860_m_setprop(void *arg, const char *pr_name,
248 		    mac_prop_id_t wldp_pr_num,
249 		    uint_t wldp_length, const void *wldp_buf);
250 static void	rt2860_m_propinfo(void *arg, const char *pr_name,
251 		    mac_prop_id_t wldp_pr_num, mac_prop_info_handle_t prh);
252 static int	rt2860_m_getprop(void *arg, const char *pr_name,
253 		    mac_prop_id_t wldp_pr_num, uint_t wldp_length,
254 		    void *wldp_buf);
255 
256 static mac_callbacks_t rt2860_m_callbacks = {
257 	MC_IOCTL | MC_SETPROP | MC_GETPROP | MC_PROPINFO,
258 	rt2860_m_stat,
259 	rt2860_m_start,
260 	rt2860_m_stop,
261 	rt2860_m_promisc,
262 	rt2860_m_multicst,
263 	rt2860_m_unicst,
264 	rt2860_m_tx,
265 	NULL,
266 	rt2860_m_ioctl,
267 	NULL,
268 	NULL,
269 	NULL,
270 	rt2860_m_setprop,
271 	rt2860_m_getprop,
272 	rt2860_m_propinfo
273 };
274 
275 #ifdef DEBUG
276 void
rt2860_debug(uint32_t dbg_flags,const int8_t * fmt,...)277 rt2860_debug(uint32_t dbg_flags, const int8_t *fmt, ...)
278 {
279 	va_list args;
280 
281 	if (dbg_flags & rt2860_dbg_flags) {
282 		va_start(args, fmt);
283 		vcmn_err(CE_CONT, fmt, args);
284 		va_end(args);
285 	}
286 }
287 #endif
288 
289 const char *
rt2860_get_rf(uint8_t rev)290 rt2860_get_rf(uint8_t rev)
291 {
292 	switch (rev) {
293 	case RT2860_RF_2820:	return "RT2820";
294 	case RT2860_RF_2850:	return "RT2850";
295 	case RT2860_RF_2720:	return "RT2720";
296 	case RT2860_RF_2750:	return "RT2750";
297 	default:		return "unknown";
298 	}
299 }
300 
301 /*
302  * Read 16 bits at address 'addr' from the serial EEPROM (either 93C46,
303  * 93C66 or 93C86).
304  */
305 static uint16_t
rt2860_eeprom_read(struct rt2860_softc * sc,uint8_t addr)306 rt2860_eeprom_read(struct rt2860_softc *sc, uint8_t addr)
307 {
308 	int		n;
309 	uint16_t	val;
310 	uint32_t	tmp;
311 
312 	/* clock C once before the first command */
313 	RT2860_EEPROM_CTL(sc, 0);
314 
315 	RT2860_EEPROM_CTL(sc, RT2860_S);
316 	RT2860_EEPROM_CTL(sc, RT2860_S | RT2860_C);
317 	RT2860_EEPROM_CTL(sc, RT2860_S);
318 
319 	/* write start bit (1) */
320 	RT2860_EEPROM_CTL(sc, RT2860_S | RT2860_D);
321 	RT2860_EEPROM_CTL(sc, RT2860_S | RT2860_D | RT2860_C);
322 
323 	/* write READ opcode (10) */
324 	RT2860_EEPROM_CTL(sc, RT2860_S | RT2860_D);
325 	RT2860_EEPROM_CTL(sc, RT2860_S | RT2860_D | RT2860_C);
326 	RT2860_EEPROM_CTL(sc, RT2860_S);
327 	RT2860_EEPROM_CTL(sc, RT2860_S | RT2860_C);
328 
329 	/* write address (A5-A0 or A7-A0) */
330 	n = ((RT2860_READ(sc, RT2860_PCI_EECTRL) & 0x30) == 0) ? 5 : 7;
331 	for (; n >= 0; n--) {
332 		RT2860_EEPROM_CTL(sc, RT2860_S |
333 		    (((addr >> n) & 1) << RT2860_SHIFT_D));
334 		RT2860_EEPROM_CTL(sc, RT2860_S |
335 		    (((addr >> n) & 1) << RT2860_SHIFT_D) | RT2860_C);
336 	}
337 
338 	RT2860_EEPROM_CTL(sc, RT2860_S);
339 
340 	/* read data Q15-Q0 */
341 	val = 0;
342 	for (n = 15; n >= 0; n--) {
343 		RT2860_EEPROM_CTL(sc, RT2860_S | RT2860_C);
344 		tmp = RT2860_READ(sc, RT2860_PCI_EECTRL);
345 		val |= ((tmp & RT2860_Q) >> RT2860_SHIFT_Q) << n;
346 		RT2860_EEPROM_CTL(sc, RT2860_S);
347 	}
348 
349 	RT2860_EEPROM_CTL(sc, 0);
350 
351 	/* clear Chip Select and clock C */
352 	RT2860_EEPROM_CTL(sc, RT2860_S);
353 	RT2860_EEPROM_CTL(sc, 0);
354 	RT2860_EEPROM_CTL(sc, RT2860_C);
355 
356 	return (val);
357 }
358 
359 /*
360  * Add `delta' (signed) to each 4-bit sub-word of a 32-bit word.
361  * Used to adjust per-rate Tx power registers.
362  */
363 static inline uint32_t
b4inc(uint32_t b32,int8_t delta)364 b4inc(uint32_t b32, int8_t delta)
365 {
366 	int8_t i, b4;
367 
368 	for (i = 0; i < 8; i++) {
369 		b4 = b32 & 0xf;
370 		b4 += delta;
371 		if (b4 < 0)
372 			b4 = 0;
373 		else if (b4 > 0xf)
374 			b4 = 0xf;
375 		b32 = b32 >> 4 | b4 << 28;
376 	}
377 	return (b32);
378 }
379 
380 static int
rt2860_read_eeprom(struct rt2860_softc * sc)381 rt2860_read_eeprom(struct rt2860_softc *sc)
382 {
383 	struct ieee80211com	*ic = &sc->sc_ic;
384 	int			ridx, ant, i;
385 	int8_t			delta_2ghz, delta_5ghz;
386 	uint16_t		val;
387 
388 	/* read EEPROM version */
389 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_VERSION);
390 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
391 	    "EEPROM rev=%d, FAE=%d\n",
392 	    val & 0xff, val >> 8);
393 
394 	/* read MAC address */
395 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_MAC01);
396 	ic->ic_macaddr[0] = val & 0xff;
397 	ic->ic_macaddr[1] = val >> 8;
398 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_MAC23);
399 	ic->ic_macaddr[2] = val & 0xff;
400 	ic->ic_macaddr[3] = val >> 8;
401 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_MAC45);
402 	ic->ic_macaddr[4] = val & 0xff;
403 	ic->ic_macaddr[5] = val >> 8;
404 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
405 	    "MAC address is: %x:%x:%x:%x:%x:%x\n",
406 	    ic->ic_macaddr[0], ic->ic_macaddr[1],
407 	    ic->ic_macaddr[2], ic->ic_macaddr[3],
408 	    ic->ic_macaddr[4], ic->ic_macaddr[5]);
409 
410 	/* read country code */
411 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_COUNTRY);
412 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
413 	    "EEPROM region code=0x%04x\n", val);
414 
415 	/* read default BBP settings */
416 	for (i = 0; i < 8; i++) {
417 		val = rt2860_eeprom_read(sc, RT2860_EEPROM_BBP_BASE + i);
418 		sc->bbp[i].val = val & 0xff;
419 		sc->bbp[i].reg = val >> 8;
420 		RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
421 		    "BBP%d=0x%02x\n",
422 		    sc->bbp[i].reg, sc->bbp[i].val);
423 	}
424 
425 	/* read RF frequency offset from EEPROM */
426 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_FREQ_LEDS);
427 	sc->freq = ((val & 0xff) != 0xff) ? val & 0xff : 0;
428 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
429 	    "EEPROM freq offset %d\n", sc->freq & 0xff);
430 
431 	if ((sc->leds = val >> 8) != 0xff) {
432 		/* read LEDs operating mode */
433 		sc->led[0] = rt2860_eeprom_read(sc, RT2860_EEPROM_LED1);
434 		sc->led[1] = rt2860_eeprom_read(sc, RT2860_EEPROM_LED2);
435 		sc->led[2] = rt2860_eeprom_read(sc, RT2860_EEPROM_LED3);
436 	} else {
437 		/* broken EEPROM, use default settings */
438 		sc->leds = 0x01;
439 		sc->led[0] = 0x5555;
440 		sc->led[1] = 0x2221;
441 		sc->led[2] = 0xa9f8;
442 	}
443 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
444 	    "EEPROM LED mode=0x%02x, LEDs=0x%04x/0x%04x/0x%04x\n",
445 	    sc->leds, sc->led[0], sc->led[1], sc->led[2]);
446 
447 	/* read RF information */
448 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_ANTENNA);
449 	if (val == 0xffff) {
450 		/* broken EEPROM, default to RF2820 1T2R */
451 		RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
452 		    "invalid EEPROM antenna info, using default\n");
453 		sc->rf_rev = RT2860_RF_2820;
454 		sc->ntxchains = 1;
455 		sc->nrxchains = 2;
456 	} else {
457 		sc->rf_rev = (val >> 8) & 0xf;
458 		sc->ntxchains = (val >> 4) & 0xf;
459 		sc->nrxchains = val & 0xf;
460 	}
461 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
462 	    "EEPROM RF rev=0x%02x chains=%dT%dR\n",
463 	    sc->rf_rev, sc->ntxchains, sc->nrxchains);
464 
465 	/* check if RF supports automatic Tx access gain control */
466 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_CONFIG);
467 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
468 	    "EEPROM CFG 0x%04x\n", val);
469 	if ((val & 0xff) != 0xff)
470 		sc->calib_2ghz = sc->calib_5ghz = 0; /* XXX (val >> 1) & 1 */;
471 
472 	if (sc->sc_flags & RT2860_ADVANCED_PS) {
473 		/* read PCIe power save level */
474 		val = rt2860_eeprom_read(sc, RT2860_EEPROM_PCIE_PSLEVEL);
475 		if ((val & 0xff) != 0xff) {
476 			sc->pslevel = val & 0x3;
477 			val = rt2860_eeprom_read(sc, RT2860_EEPROM_REV);
478 			if (val >> 8 != 0x92 || !(val & 0x80))
479 				sc->pslevel = MIN(sc->pslevel, 1);
480 			RWN_DEBUG(RT2860_DBG_EEPROM,
481 			    "rwn: rt2860_read_eeprom(): "
482 			    "EEPROM PCIe PS Level=%d\n",
483 			    sc->pslevel);
484 		}
485 	}
486 	/* read power settings for 2GHz channels */
487 	for (i = 0; i < 14; i += 2) {
488 		val = rt2860_eeprom_read(sc,
489 		    RT2860_EEPROM_PWR2GHZ_BASE1 + i / 2);
490 		sc->txpow1[i + 0] = (int8_t)(val & 0xff);
491 		sc->txpow1[i + 1] = (int8_t)(val >> 8);
492 
493 		val = rt2860_eeprom_read(sc,
494 		    RT2860_EEPROM_PWR2GHZ_BASE2 + i / 2);
495 		sc->txpow2[i + 0] = (int8_t)(val & 0xff);
496 		sc->txpow2[i + 1] = (int8_t)(val >> 8);
497 	}
498 	/* fix broken Tx power entries */
499 	for (i = 0; i < 14; i++) {
500 		if (sc->txpow1[i] < 0 || sc->txpow1[i] > 31)
501 			sc->txpow1[i] = 5;
502 		if (sc->txpow2[i] < 0 || sc->txpow2[i] > 31)
503 			sc->txpow2[i] = 5;
504 		RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
505 		    "chan %d: power1=%d, power2=%d\n",
506 		    rt2860_rf2850[i].chan, sc->txpow1[i], sc->txpow2[i]);
507 	}
508 	/* read power settings for 5GHz channels */
509 	for (i = 0; i < 36; i += 2) {
510 		val = rt2860_eeprom_read(sc,
511 		    RT2860_EEPROM_PWR5GHZ_BASE1 + i / 2);
512 		sc->txpow1[i + 14] = (int8_t)(val & 0xff);
513 		sc->txpow1[i + 15] = (int8_t)(val >> 8);
514 
515 		val = rt2860_eeprom_read(sc,
516 		    RT2860_EEPROM_PWR5GHZ_BASE2 + i / 2);
517 		sc->txpow2[i + 14] = (int8_t)(val & 0xff);
518 		sc->txpow2[i + 15] = (int8_t)(val >> 8);
519 	}
520 	/* fix broken Tx power entries */
521 	for (i = 0; i < 35; i++) {
522 		if (sc->txpow1[14 + i] < -7 || sc->txpow1[14 + i] > 15)
523 			sc->txpow1[14 + i] = 5;
524 		if (sc->txpow2[14 + i] < -7 || sc->txpow2[14 + i] > 15)
525 			sc->txpow2[14 + i] = 5;
526 		RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
527 		    "chan %d: power1=%d, power2=%d\n",
528 		    rt2860_rf2850[14 + i].chan, sc->txpow1[14 + i],
529 		    sc->txpow2[14 + i]);
530 	}
531 
532 	/* read Tx power compensation for each Tx rate */
533 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_DELTAPWR);
534 	delta_2ghz = delta_5ghz = 0;
535 	if ((val & 0xff) != 0xff && (val & 0x80)) {
536 		delta_2ghz = val & 0xf;
537 		if (!(val & 0x40))	/* negative number */
538 			delta_2ghz = -delta_2ghz;
539 	}
540 	val >>= 8;
541 	if ((val & 0xff) != 0xff && (val & 0x80)) {
542 		delta_5ghz = val & 0xf;
543 		if (!(val & 0x40))	/* negative number */
544 			delta_5ghz = -delta_5ghz;
545 	}
546 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
547 	    "power compensation=%d (2GHz), %d (5GHz) \n",
548 	    delta_2ghz, delta_5ghz);
549 
550 	for (ridx = 0; ridx < 5; ridx++) {
551 		uint32_t	reg;
552 
553 		val = rt2860_eeprom_read(sc, RT2860_EEPROM_RPWR + ridx);
554 		reg = (uint32_t)val << 16;
555 		val = rt2860_eeprom_read(sc, RT2860_EEPROM_RPWR + ridx + 1);
556 		reg |= val;
557 
558 		sc->txpow20mhz[ridx] = reg;
559 		sc->txpow40mhz_2ghz[ridx] = b4inc(reg, delta_2ghz);
560 		sc->txpow40mhz_5ghz[ridx] = b4inc(reg, delta_5ghz);
561 
562 		RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
563 		    "ridx %d: power 20MHz=0x%08x, 40MHz/2GHz=0x%08x, "
564 		    "40MHz/5GHz=0x%08x\n", ridx, sc->txpow20mhz[ridx],
565 		    sc->txpow40mhz_2ghz[ridx], sc->txpow40mhz_5ghz[ridx]);
566 	}
567 
568 	/* read factory-calibrated samples for temperature compensation */
569 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI1_2GHZ);
570 	sc->tssi_2ghz[0] = val & 0xff;	/* [-4] */
571 	sc->tssi_2ghz[1] = val >> 8;	/* [-3] */
572 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI2_2GHZ);
573 	sc->tssi_2ghz[2] = val & 0xff;	/* [-2] */
574 	sc->tssi_2ghz[3] = val >> 8;	/* [-1] */
575 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI3_2GHZ);
576 	sc->tssi_2ghz[4] = val & 0xff;	/* [+0] */
577 	sc->tssi_2ghz[5] = val >> 8;	/* [+1] */
578 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI4_2GHZ);
579 	sc->tssi_2ghz[6] = val & 0xff;	/* [+2] */
580 	sc->tssi_2ghz[7] = val >> 8;	/* [+3] */
581 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI5_2GHZ);
582 	sc->tssi_2ghz[8] = val & 0xff;	/* [+4] */
583 	sc->step_2ghz = val >> 8;
584 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
585 	    "TSSI 2GHz: 0x%02x 0x%02x 0x%02x 0x%02x 0x%02x 0x%02x 0x%02x "
586 	    "0x%02x 0x%02x step=%d\n", sc->tssi_2ghz[0], sc->tssi_2ghz[1],
587 	    sc->tssi_2ghz[2], sc->tssi_2ghz[3], sc->tssi_2ghz[4],
588 	    sc->tssi_2ghz[5], sc->tssi_2ghz[6], sc->tssi_2ghz[7],
589 	    sc->tssi_2ghz[8], sc->step_2ghz);
590 	/* check that ref value is correct, otherwise disable calibration */
591 	if (sc->tssi_2ghz[4] == 0xff)
592 		sc->calib_2ghz = 0;
593 
594 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI1_5GHZ);
595 	sc->tssi_5ghz[0] = val & 0xff;	/* [-4] */
596 	sc->tssi_5ghz[1] = val >> 8;	/* [-3] */
597 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI2_5GHZ);
598 	sc->tssi_5ghz[2] = val & 0xff;	/* [-2] */
599 	sc->tssi_5ghz[3] = val >> 8;	/* [-1] */
600 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI3_5GHZ);
601 	sc->tssi_5ghz[4] = val & 0xff;	/* [+0] */
602 	sc->tssi_5ghz[5] = val >> 8;	/* [+1] */
603 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI4_5GHZ);
604 	sc->tssi_5ghz[6] = val & 0xff;	/* [+2] */
605 	sc->tssi_5ghz[7] = val >> 8;	/* [+3] */
606 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_TSSI5_5GHZ);
607 	sc->tssi_5ghz[8] = val & 0xff;	/* [+4] */
608 	sc->step_5ghz = val >> 8;
609 	RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
610 	    "TSSI 5GHz: 0x%02x 0x%02x 0x%02x 0x%02x 0x%02x 0x%02x 0x%02x "
611 	    "0x%02x 0x%02x step=%d\n", sc->tssi_5ghz[0], sc->tssi_5ghz[1],
612 	    sc->tssi_5ghz[2], sc->tssi_5ghz[3], sc->tssi_5ghz[4],
613 	    sc->tssi_5ghz[5], sc->tssi_5ghz[6], sc->tssi_5ghz[7],
614 	    sc->tssi_5ghz[8], sc->step_5ghz);
615 	/* check that ref value is correct, otherwise disable calibration */
616 	if (sc->tssi_5ghz[4] == 0xff)
617 		sc->calib_5ghz = 0;
618 
619 	/* read RSSI offsets and LNA gains from EEPROM */
620 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_RSSI1_2GHZ);
621 	sc->rssi_2ghz[0] = val & 0xff;	/* Ant A */
622 	sc->rssi_2ghz[1] = val >> 8;	/* Ant B */
623 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_RSSI2_2GHZ);
624 	sc->rssi_2ghz[2] = val & 0xff;	/* Ant C */
625 	sc->lna[2] = val >> 8;		/* channel group 2 */
626 
627 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_RSSI1_5GHZ);
628 	sc->rssi_5ghz[0] = val & 0xff;	/* Ant A */
629 	sc->rssi_5ghz[1] = val >> 8;	/* Ant B */
630 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_RSSI2_5GHZ);
631 	sc->rssi_5ghz[2] = val & 0xff;	/* Ant C */
632 	sc->lna[3] = val >> 8;		/* channel group 3 */
633 
634 	val = rt2860_eeprom_read(sc, RT2860_EEPROM_LNA);
635 	sc->lna[0] = val & 0xff;	/* channel group 0 */
636 	sc->lna[1] = val >> 8;		/* channel group 1 */
637 
638 	/* fix broken 5GHz LNA entries */
639 	if (sc->lna[2] == 0 || sc->lna[2] == 0xff) {
640 		RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
641 		    "invalid LNA for channel group %d\n", 2);
642 		sc->lna[2] = sc->lna[1];
643 	}
644 	if (sc->lna[3] == 0 || sc->lna[3] == 0xff) {
645 		RWN_DEBUG(RT2860_DBG_EEPROM, "rwn: rt2860_read_eeprom(): "
646 		    "invalid LNA for channel group %d\n", 3);
647 		sc->lna[3] = sc->lna[1];
648 	}
649 
650 	/* fix broken RSSI offset entries */
651 	for (ant = 0; ant < 3; ant++) {
652 		if (sc->rssi_2ghz[ant] < -10 || sc->rssi_2ghz[ant] > 10) {
653 			RWN_DEBUG(RT2860_DBG_EEPROM,
654 			    "rwn: rt2860_read_eeprom(): "
655 			    "invalid RSSI%d offset: %d (2GHz)\n",
656 			    ant + 1, sc->rssi_2ghz[ant]);
657 			sc->rssi_2ghz[ant] = 0;
658 		}
659 		if (sc->rssi_5ghz[ant] < -10 || sc->rssi_5ghz[ant] > 10) {
660 			RWN_DEBUG(RT2860_DBG_EEPROM,
661 			    "rwn: rt2860_read_eeprom(): "
662 			    "invalid RSSI%d offset: %d (2GHz)\n",
663 			    ant + 1, sc->rssi_5ghz[ant]);
664 			sc->rssi_5ghz[ant] = 0;
665 		}
666 	}
667 
668 	return (RT2860_SUCCESS);
669 }
670 
671 /*
672  * Allocate an DMA memory and a DMA handle for accessing it
673  */
674 static int
rt2860_alloc_dma_mem(dev_info_t * devinfo,ddi_dma_attr_t * dma_attr,size_t memsize,ddi_device_acc_attr_t * attr_p,uint_t alloc_flags,uint_t bind_flags,struct dma_area * dma_p)675 rt2860_alloc_dma_mem(dev_info_t *devinfo, ddi_dma_attr_t *dma_attr,
676     size_t memsize, ddi_device_acc_attr_t *attr_p, uint_t alloc_flags,
677     uint_t bind_flags, struct dma_area *dma_p)
678 {
679 	int	err;
680 
681 	/*
682 	 * Allocate handle
683 	 */
684 	err = ddi_dma_alloc_handle(devinfo, dma_attr,
685 	    DDI_DMA_SLEEP, NULL, &dma_p->dma_hdl);
686 	if (err != DDI_SUCCESS) {
687 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rwn_allo_dma_mem(): "
688 		    "failed to alloc handle\n");
689 		goto fail1;
690 	}
691 
692 	/*
693 	 * Allocate memory
694 	 */
695 	err = ddi_dma_mem_alloc(dma_p->dma_hdl, memsize, attr_p,
696 	    alloc_flags, DDI_DMA_SLEEP, NULL, &dma_p->mem_va,
697 	    &dma_p->alength, &dma_p->acc_hdl);
698 	if (err != DDI_SUCCESS) {
699 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rwn_alloc_dma_mem(): "
700 		    "failed to alloc mem\n");
701 		goto fail2;
702 	}
703 
704 	/*
705 	 * Bind the two together
706 	 */
707 	err = ddi_dma_addr_bind_handle(dma_p->dma_hdl, NULL,
708 	    dma_p->mem_va, dma_p->alength, bind_flags,
709 	    DDI_DMA_SLEEP, NULL, &dma_p->cookie, &dma_p->ncookies);
710 	if (err != DDI_DMA_MAPPED) {
711 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rwn_alloc_dma_mem(): "
712 		    "failed to bind handle\n");
713 		goto fail3;
714 	}
715 
716 	if (dma_p->ncookies != 1) {
717 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rwn_alloc_dma_mem(): "
718 		    "failed to alloc cookies\n");
719 		goto fail4;
720 	}
721 
722 	dma_p->nslots = ~0U;
723 	dma_p->size = ~0U;
724 	dma_p->token = ~0U;
725 	dma_p->offset = 0;
726 	return (DDI_SUCCESS);
727 
728 fail4:
729 	(void) ddi_dma_unbind_handle(dma_p->dma_hdl);
730 fail3:
731 	ddi_dma_mem_free(&dma_p->acc_hdl);
732 fail2:
733 	ddi_dma_free_handle(&dma_p->dma_hdl);
734 fail1:
735 	return (err);
736 }
737 
738 static void
rt2860_free_dma_mem(struct dma_area * dma_p)739 rt2860_free_dma_mem(struct dma_area *dma_p)
740 {
741 	if (dma_p->dma_hdl != NULL) {
742 		(void) ddi_dma_unbind_handle(dma_p->dma_hdl);
743 		if (dma_p->acc_hdl != NULL) {
744 			ddi_dma_mem_free(&dma_p->acc_hdl);
745 			dma_p->acc_hdl = NULL;
746 		}
747 		ddi_dma_free_handle(&dma_p->dma_hdl);
748 		dma_p->ncookies = 0;
749 		dma_p->dma_hdl = NULL;
750 	}
751 }
752 
753 /*ARGSUSED*/
754 static int
rt2860_alloc_tx_ring(struct rt2860_softc * sc,struct rt2860_tx_ring * ring)755 rt2860_alloc_tx_ring(struct rt2860_softc *sc, struct rt2860_tx_ring *ring)
756 {
757 	int	size, err;
758 
759 	size = RT2860_TX_RING_COUNT * sizeof (struct rt2860_txd);
760 
761 	err = rt2860_alloc_dma_mem(sc->sc_dev, &rt2860_dma_attr, size,
762 	    &rt2860_desc_accattr, DDI_DMA_CONSISTENT,
763 	    DDI_DMA_RDWR | DDI_DMA_CONSISTENT,
764 	    &ring->txdesc_dma);
765 	if (err != DDI_SUCCESS) {
766 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rt2860_alloc_tx_ring(): "
767 		    "failed to alloc dma mem\n");
768 		goto fail1;
769 	}
770 
771 	ring->txd = (struct rt2860_txd *)ring->txdesc_dma.mem_va;
772 	ring->paddr = ring->txdesc_dma.cookie.dmac_address;
773 
774 	ring->cur = 0;
775 	ring->next = 0;
776 	ring->queued = 0;
777 
778 	(void) bzero(ring->txd, size);
779 	RT2860_DMA_SYNC(ring->txdesc_dma, DDI_DMA_SYNC_FORDEV);
780 	return (DDI_SUCCESS);
781 fail1:
782 	return (err);
783 }
784 
785 void
rt2860_reset_tx_ring(struct rt2860_softc * sc,struct rt2860_tx_ring * ring)786 rt2860_reset_tx_ring(struct rt2860_softc *sc, struct rt2860_tx_ring *ring)
787 {
788 	struct rt2860_tx_data *data;
789 	int i;
790 
791 	for (i = 0; i < RT2860_TX_RING_COUNT; i++) {
792 		ring->txd[i].sdl0 &= ~LE_16(RT2860_TX_DDONE);
793 
794 		if ((data = ring->data[i]) == NULL)
795 			continue;	/* nothing mapped in this slot */
796 
797 		/* by pass if it's quiesced */
798 		if (!(sc->sc_flags & RT2860_F_QUIESCE))
799 			RT2860_DMA_SYNC(data->txbuf_dma, DDI_DMA_SYNC_FORDEV);
800 
801 		if (data->ni != NULL) {
802 			ieee80211_free_node(data->ni);
803 			data->ni = NULL;	/* node already freed */
804 		}
805 
806 		SLIST_INSERT_HEAD(&sc->data_pool, data, next);
807 		ring->data[i] = NULL;
808 	}
809 
810 	/* by pass if it's quiesced */
811 	if (!(sc->sc_flags & RT2860_F_QUIESCE))
812 		RT2860_DMA_SYNC(ring->txdesc_dma, DDI_DMA_SYNC_FORDEV);
813 
814 	ring->queued = 0;
815 	ring->cur = ring->next = 0;
816 }
817 
818 /*ARGSUSED*/
819 static void
rt2860_free_tx_ring(struct rt2860_softc * sc,struct rt2860_tx_ring * ring)820 rt2860_free_tx_ring(struct rt2860_softc *sc, struct rt2860_tx_ring *ring)
821 {
822 	if (ring->txd != NULL) {
823 		rt2860_free_dma_mem(&ring->txdesc_dma);
824 	}
825 }
826 
827 static int
rt2860_alloc_rx_ring(struct rt2860_softc * sc,struct rt2860_rx_ring * ring)828 rt2860_alloc_rx_ring(struct rt2860_softc *sc, struct rt2860_rx_ring *ring)
829 {
830 	struct rt2860_rx_data	*data;
831 	struct rt2860_rxd	*rxd;
832 	int			i, err, size, datalen;
833 
834 	size = RT2860_RX_RING_COUNT * sizeof (struct rt2860_rxd);
835 
836 	err = rt2860_alloc_dma_mem(sc->sc_dev, &rt2860_dma_attr, size,
837 	    &rt2860_desc_accattr, DDI_DMA_CONSISTENT,
838 	    DDI_DMA_RDWR | DDI_DMA_CONSISTENT,
839 	    &ring->rxdesc_dma);
840 	if (err != DDI_SUCCESS) {
841 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rt2860_alloc_rx_ring(): "
842 		    "failed to alloc dma mem\n");
843 		goto fail1;
844 	}
845 
846 	ring->rxd = (struct rt2860_rxd *)ring->rxdesc_dma.mem_va;
847 	ring->paddr = ring->rxdesc_dma.cookie.dmac_address;
848 	bzero(ring->rxd, size);
849 
850 	/*
851 	 * Pre-allocate Rx buffers and populate Rx ring.
852 	 */
853 	datalen = RT2860_RX_RING_COUNT * sizeof (struct rt2860_rx_data);
854 	bzero(ring->data, datalen);
855 	for (i = 0; i < RT2860_RX_RING_COUNT; i++) {
856 		rxd = &ring->rxd[i];
857 		data = &ring->data[i];
858 		/* alloc DMA memory */
859 		(void) rt2860_alloc_dma_mem(sc->sc_dev, &rt2860_dma_attr,
860 		    sc->sc_dmabuf_size,
861 		    &rt2860_buf_accattr,
862 		    DDI_DMA_STREAMING,
863 		    DDI_DMA_READ | DDI_DMA_STREAMING,
864 		    &data->rxbuf_dma);
865 		rxd->sdp0 = LE_32(data->rxbuf_dma.cookie.dmac_address);
866 		rxd->sdl0 = LE_16(sc->sc_dmabuf_size);
867 	}
868 
869 	ring->cur = 0;
870 
871 	RT2860_DMA_SYNC(ring->rxdesc_dma, DDI_DMA_SYNC_FORDEV);
872 	return (DDI_SUCCESS);
873 
874 fail1:
875 	return (err);
876 }
877 
878 /*ARGSUSED*/
879 void
rt2860_reset_rx_ring(struct rt2860_softc * sc,struct rt2860_rx_ring * ring)880 rt2860_reset_rx_ring(struct rt2860_softc *sc, struct rt2860_rx_ring *ring)
881 {
882 	int i;
883 
884 	for (i = 0; i < RT2860_RX_RING_COUNT; i++)
885 		ring->rxd[i].sdl0 &= ~LE_16(RT2860_RX_DDONE);
886 
887 	RT2860_DMA_SYNC(ring->rxdesc_dma, DDI_DMA_SYNC_FORDEV);
888 
889 	ring->cur = 0;
890 }
891 
892 /*ARGSUSED*/
893 static void
rt2860_free_rx_ring(struct rt2860_softc * sc,struct rt2860_rx_ring * ring)894 rt2860_free_rx_ring(struct rt2860_softc *sc, struct rt2860_rx_ring *ring)
895 {
896 	struct rt2860_rx_data	*data;
897 	int			i, count;
898 
899 	if (ring->rxd != NULL)
900 		rt2860_free_dma_mem(&ring->rxdesc_dma);
901 
902 	count = RT2860_RX_RING_COUNT;
903 
904 	for (i = 0; i < count; i++) {
905 		data = &ring->data[i];
906 		rt2860_free_dma_mem(&data->rxbuf_dma);
907 	}
908 }
909 
910 static int
rt2860_alloc_tx_pool(struct rt2860_softc * sc)911 rt2860_alloc_tx_pool(struct rt2860_softc *sc)
912 {
913 	struct rt2860_tx_data	*data;
914 	int			i, err, size;
915 
916 	size = RT2860_TX_POOL_COUNT * sizeof (struct rt2860_txwi);
917 
918 	/* init data_pool early in case of failure.. */
919 	SLIST_INIT(&sc->data_pool);
920 
921 	err = rt2860_alloc_dma_mem(sc->sc_dev, &rt2860_dma_attr, size,
922 	    &rt2860_desc_accattr, DDI_DMA_CONSISTENT,
923 	    DDI_DMA_RDWR | DDI_DMA_CONSISTENT,
924 	    &sc->txpool_dma);
925 	if (err != DDI_SUCCESS) {
926 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rt2860_alloc_tx_pool(): "
927 		    "failed to alloc dma mem\n");
928 		goto fail1;
929 	}
930 
931 	sc->txwi = (struct rt2860_txwi *)sc->txpool_dma.mem_va;
932 	(void) bzero(sc->txwi, size);
933 	RT2860_DMA_SYNC(sc->txpool_dma, DDI_DMA_SYNC_FORDEV);
934 
935 	for (i = 0; i < RT2860_TX_POOL_COUNT; i++) {
936 		data = &sc->data[i];
937 
938 		err = rt2860_alloc_dma_mem(sc->sc_dev, &rt2860_dma_attr,
939 		    sc->sc_dmabuf_size,
940 		    &rt2860_buf_accattr, DDI_DMA_CONSISTENT,
941 		    DDI_DMA_RDWR | DDI_DMA_CONSISTENT,
942 		    &data->txbuf_dma);
943 		if (err != DDI_SUCCESS) {
944 			RWN_DEBUG(RT2860_DBG_DMA,
945 			    "rwn: rt2860_alloc_tx_pool(): "
946 			    "failed to alloc dma mem\n");
947 			goto fail2;
948 		}
949 		data->txwi = &sc->txwi[i];
950 		data->paddr = sc->txpool_dma.cookie.dmac_address +
951 		    i * sizeof (struct rt2860_txwi);
952 
953 		SLIST_INSERT_HEAD(&sc->data_pool, data, next);
954 	}
955 	return (DDI_SUCCESS);
956 fail2:
957 	rt2860_free_dma_mem(&sc->txpool_dma);
958 fail1:
959 	return (err);
960 }
961 
962 static void
rt2860_free_tx_pool(struct rt2860_softc * sc)963 rt2860_free_tx_pool(struct rt2860_softc *sc)
964 {
965 	struct rt2860_tx_data	*data;
966 	int	i;
967 
968 	if (sc->txwi != NULL) {
969 		rt2860_free_dma_mem(&sc->txpool_dma);
970 	}
971 
972 	for (i = 0; i < RT2860_TX_POOL_COUNT; i++) {
973 		data = &sc->data[i];
974 		rt2860_free_dma_mem(&data->txbuf_dma);
975 	}
976 }
977 
978 /* quickly determine if a given rate is CCK or OFDM */
979 #define	RT2860_RATE_IS_OFDM(rate) ((rate) >= 12 && (rate) != 22)
980 
981 #define	RT2860_ACK_SIZE		14	/* 10 + 4(FCS) */
982 #define	RT2860_SIFS_TIME	10
983 
984 static uint8_t
rt2860_rate2mcs(uint8_t rate)985 rt2860_rate2mcs(uint8_t rate)
986 {
987 	switch (rate) {
988 	/* CCK rates */
989 	case 2:
990 		return (0);
991 	case 4:
992 		return (1);
993 	case 11:
994 		return (2);
995 	case 22:
996 		return (3);
997 	/* OFDM rates */
998 	case 12:
999 		return (0);
1000 	case 18:
1001 		return (1);
1002 	case 24:
1003 		return (2);
1004 	case 36:
1005 		return (3);
1006 	case 48:
1007 		return (4);
1008 	case 72:
1009 		return (5);
1010 	case 96:
1011 		return (6);
1012 	case 108:
1013 		return (7);
1014 	}
1015 
1016 	return (0);	/* shouldn't get there */
1017 }
1018 
1019 /*
1020  * Return the expected ack rate for a frame transmitted at rate `rate'.
1021  */
1022 static int
rt2860_ack_rate(struct ieee80211com * ic,int rate)1023 rt2860_ack_rate(struct ieee80211com *ic, int rate)
1024 {
1025 	switch (rate) {
1026 	/* CCK rates */
1027 	case 2:
1028 		return (2);
1029 	case 4:
1030 	case 11:
1031 	case 22:
1032 		return ((ic->ic_curmode == IEEE80211_MODE_11B) ? 4 : rate);
1033 
1034 	/* OFDM rates */
1035 	case 12:
1036 	case 18:
1037 		return (12);
1038 	case 24:
1039 	case 36:
1040 		return (24);
1041 	case 48:
1042 	case 72:
1043 	case 96:
1044 	case 108:
1045 		return (48);
1046 	}
1047 
1048 	/* default to 1Mbps */
1049 	return (2);
1050 }
1051 
1052 
1053 /*
1054  * Compute the duration (in us) needed to transmit `len' bytes at rate `rate'.
1055  * The function automatically determines the operating mode depending on the
1056  * given rate. `flags' indicates whether short preamble is in use or not.
1057  */
1058 static uint16_t
rt2860_txtime(int len,int rate,uint32_t flags)1059 rt2860_txtime(int len, int rate, uint32_t flags)
1060 {
1061 	uint16_t	txtime;
1062 
1063 	if (RT2860_RATE_IS_OFDM(rate)) {
1064 		/* IEEE Std 802.11g-2003, pp. 44 */
1065 		txtime = (8 + 4 * len + 3 + rate - 1) / rate;
1066 		txtime = 16 + 4 + 4 * txtime + 6;
1067 	} else {
1068 		/* IEEE Std 802.11b-1999, pp. 28 */
1069 		txtime = (16 * len + rate - 1) / rate;
1070 		if (rate != 2 && (flags & IEEE80211_F_SHPREAMBLE))
1071 			txtime +=  72 + 24;
1072 		else
1073 			txtime += 144 + 48;
1074 	}
1075 	return (txtime);
1076 }
1077 
1078 static int
rt2860_send(ieee80211com_t * ic,mblk_t * mp,uint8_t type)1079 rt2860_send(ieee80211com_t *ic, mblk_t *mp, uint8_t type)
1080 {
1081 	struct rt2860_softc	*sc = (struct rt2860_softc *)ic;
1082 	struct rt2860_tx_ring	*ring;
1083 	struct rt2860_tx_data	*data;
1084 	struct rt2860_txd	*txd;
1085 	struct rt2860_txwi	*txwi;
1086 	struct ieee80211_frame	*wh;
1087 	struct ieee80211_node	*ni;
1088 	int			qid, off, rate, err;
1089 	int			mblen, pktlen;
1090 	uint_t			hdrlen;
1091 	uint8_t			mcs, pid, qsel;
1092 	uint16_t		dur;
1093 	mblk_t			*m, *m0;
1094 
1095 	err = DDI_SUCCESS;
1096 
1097 	mutex_enter(&sc->sc_txlock);
1098 	if (RT2860_IS_SUSPEND(sc)) {
1099 		err = ENXIO;
1100 		goto fail1;
1101 	}
1102 
1103 	if ((type & IEEE80211_FC0_TYPE_MASK) !=
1104 	    IEEE80211_FC0_TYPE_DATA)
1105 		qid = sc->mgtqid;
1106 	else
1107 		qid = EDCA_AC_BE;
1108 	ring = &sc->txq[qid];
1109 
1110 	if (SLIST_EMPTY(&sc->data_pool) || (ring->queued > 15)) {
1111 		sc->sc_need_sched = 1;
1112 		sc->sc_tx_nobuf++;
1113 		err = ENOMEM;
1114 		goto fail1;
1115 	}
1116 
1117 	/* the data pool contains at least one element, pick the first */
1118 	data = SLIST_FIRST(&sc->data_pool);
1119 
1120 	m = allocb(msgdsize(mp) + 32, BPRI_MED);
1121 	if (m == NULL) {
1122 		RWN_DEBUG(RT2860_DBG_TX, "rwn: rt2860_send():"
1123 		    "rt2860_mgmt_send: can't alloc mblk.\n");
1124 		err = DDI_FAILURE;
1125 		goto fail1;
1126 	}
1127 
1128 	for (off = 0, m0 = mp; m0 != NULL; m0 = m0->b_cont) {
1129 		mblen = MBLKL(m0);
1130 		(void) bcopy(m0->b_rptr, m->b_rptr + off, mblen);
1131 		off += mblen;
1132 	}
1133 	m->b_wptr += off;
1134 
1135 	wh = (struct ieee80211_frame *)m->b_rptr;
1136 	ni = ieee80211_find_txnode(ic, wh->i_addr1);
1137 	if (ni == NULL) {
1138 		err = DDI_FAILURE;
1139 		sc->sc_tx_err++;
1140 		goto fail2;
1141 	}
1142 
1143 	if ((type & IEEE80211_FC0_TYPE_MASK) ==
1144 	    IEEE80211_FC0_TYPE_DATA)
1145 		(void) ieee80211_encap(ic, m, ni);
1146 
1147 	if (wh->i_fc[1] & IEEE80211_FC1_WEP) {
1148 		struct ieee80211_key *k;
1149 		k = ieee80211_crypto_encap(ic, m);
1150 		if (k == NULL) {
1151 			sc->sc_tx_err++;
1152 			err = DDI_FAILURE;
1153 			goto fail3;
1154 		}
1155 		/* packet header may have moved, reset our local pointer */
1156 		wh = (struct ieee80211_frame *)m->b_rptr;
1157 	}
1158 	pktlen = msgdsize(m);
1159 	hdrlen = sizeof (*wh);
1160 
1161 	/* pickup a rate */
1162 	if (IEEE80211_IS_MULTICAST(wh->i_addr1) ||
1163 	    ((type & IEEE80211_FC0_TYPE_MASK) !=
1164 	    IEEE80211_FC0_TYPE_DATA))
1165 		rate = ni->in_rates.ir_rates[0];
1166 	else {
1167 		if (ic->ic_fixed_rate != IEEE80211_FIXED_RATE_NONE)
1168 			rate = ic->ic_fixed_rate;
1169 		else
1170 			rate = ni->in_rates.ir_rates[ni->in_txrate];
1171 	}
1172 	rate &= IEEE80211_RATE_VAL;
1173 
1174 	/* get MCS code from rate */
1175 	mcs = rt2860_rate2mcs(rate);
1176 
1177 	/* setup TX Wireless Information */
1178 	txwi = data->txwi;
1179 	(void) bzero(txwi, sizeof (struct rt2860_txwi));
1180 	txwi->wcid = (type == IEEE80211_FC0_TYPE_DATA) ?
1181 	    RT2860_AID2WCID(ni->in_associd) : 0xff;
1182 	txwi->len = LE_16(pktlen);
1183 	if (!RT2860_RATE_IS_OFDM(rate)) {
1184 		txwi->phy = LE_16(RT2860_PHY_CCK);
1185 		if (rate != 2 && (ic->ic_flags & IEEE80211_F_SHPREAMBLE))
1186 			mcs |= RT2860_PHY_SHPRE;
1187 	} else
1188 		txwi->phy = LE_16(RT2860_PHY_OFDM);
1189 	txwi->phy |= LE_16(mcs);
1190 
1191 	/*
1192 	 * We store the MCS code into the driver-private PacketID field.
1193 	 * The PacketID is latched into TX_STAT_FIFO when Tx completes so
1194 	 * that we know at which initial rate the frame was transmitted.
1195 	 * We add 1 to the MCS code because setting the PacketID field to
1196 	 * 0 means that we don't want feedback in TX_STAT_FIFO.
1197 	 */
1198 	pid = (mcs + 1) & 0xf;
1199 	txwi->len |= LE_16(pid << RT2860_TX_PID_SHIFT);
1200 
1201 	/* check if RTS/CTS or CTS-to-self protection is required */
1202 	if (!IEEE80211_IS_MULTICAST(wh->i_addr1) &&
1203 	    (pktlen + IEEE80211_CRC_LEN > ic->ic_rtsthreshold ||
1204 	    ((ic->ic_flags &
1205 	    IEEE80211_F_USEPROT) && RT2860_RATE_IS_OFDM(rate))))
1206 		txwi->txop = RT2860_TX_TXOP_HT;
1207 	else
1208 		txwi->txop = RT2860_TX_TXOP_BACKOFF;
1209 
1210 	if (!IEEE80211_IS_MULTICAST(wh->i_addr1)) {
1211 		txwi->xflags |= RT2860_TX_ACK;
1212 
1213 		dur = rt2860_txtime(RT2860_ACK_SIZE, rt2860_ack_rate(ic, rate),
1214 		    ic->ic_flags) + sc->sifs;
1215 		*(uint16_t *)wh->i_dur = LE_16(dur);
1216 	}
1217 
1218 	/* copy and trim 802.11 header */
1219 	bcopy(wh, &txwi->wh, hdrlen);
1220 	m->b_rptr += hdrlen;
1221 	bcopy(m->b_rptr, data->txbuf_dma.mem_va, pktlen - hdrlen);
1222 
1223 	qsel = (qid < EDCA_NUM_AC) ? RT2860_TX_QSEL_EDCA : RT2860_TX_QSEL_MGMT;
1224 
1225 	/* first segment is TXWI + 802.11 header */
1226 	txd = &ring->txd[ring->cur];
1227 	txd->sdp0 = LE_32(data->paddr);
1228 	txd->sdl0 = LE_16(16 + hdrlen);
1229 	txd->flags = qsel;
1230 
1231 	/* finalize last segment */
1232 	txd->sdp1 = LE_32(data->txbuf_dma.cookie.dmac_address);
1233 	txd->sdl1 = LE_16(pktlen - hdrlen | RT2860_TX_LS1);
1234 
1235 	/* remove from the free pool and link it into the SW Tx slot */
1236 	SLIST_REMOVE_HEAD(&sc->data_pool, next);
1237 	data->ni = ieee80211_ref_node(ni);
1238 	ring->data[ring->cur] = data;
1239 
1240 	(void) ddi_dma_sync(sc->txpool_dma.dma_hdl,
1241 	    _PTRDIFF(txwi, sc->txwi),
1242 	    (hdrlen + 16 + 2),
1243 	    DDI_DMA_SYNC_FORDEV);
1244 	RT2860_DMA_SYNC(data->txbuf_dma, DDI_DMA_SYNC_FORDEV);
1245 	RT2860_DMA_SYNC(ring->txdesc_dma, DDI_DMA_SYNC_FORDEV);
1246 
1247 	RWN_DEBUG(RT2860_DBG_TX, "rwn: rt2860_send():"
1248 	    "sending frame qid=%d wcid=%d rate=%d cur = %x\n",
1249 	    qid, txwi->wcid, rate, ring->cur);
1250 
1251 	ring->queued++;
1252 	ring->cur = (ring->cur + 1) % RT2860_TX_RING_COUNT;
1253 
1254 	/* kick Tx */
1255 	RT2860_WRITE(sc, RT2860_TX_CTX_IDX(qid), ring->cur);
1256 
1257 	sc->sc_tx_timer = 5;
1258 
1259 	ic->ic_stats.is_tx_frags++;
1260 	ic->ic_stats.is_tx_bytes += pktlen;
1261 
1262 fail3:
1263 	ieee80211_free_node(ni);
1264 fail2:
1265 	freemsg(m);
1266 fail1:
1267 	if ((type & IEEE80211_FC0_TYPE_MASK) != IEEE80211_FC0_TYPE_DATA ||
1268 	    err == DDI_SUCCESS)
1269 		freemsg(mp);
1270 	mutex_exit(&sc->sc_txlock);
1271 	return (err);
1272 }
1273 
1274 /*
1275  * This function is called periodically (every 200ms) during scanning to
1276  * switch from one channel to another.
1277  */
1278 static void
rt2860_next_scan(void * arg)1279 rt2860_next_scan(void *arg)
1280 {
1281 	struct rt2860_softc *sc = (struct rt2860_softc *)arg;
1282 	struct ieee80211com *ic = &sc->sc_ic;
1283 
1284 	if (ic->ic_state == IEEE80211_S_SCAN)
1285 		(void) ieee80211_next_scan(ic);
1286 }
1287 
1288 static void
rt2860_updateslot(struct rt2860_softc * sc)1289 rt2860_updateslot(struct rt2860_softc *sc)
1290 {
1291 	struct ieee80211com *ic = &sc->sc_ic;
1292 	uint32_t tmp;
1293 
1294 	tmp = RT2860_READ(sc, RT2860_BKOFF_SLOT_CFG);
1295 	tmp &= ~0xff;
1296 	tmp |= (ic->ic_flags & IEEE80211_F_SHSLOT) ? 9 : 20;
1297 	RT2860_WRITE(sc, RT2860_BKOFF_SLOT_CFG, tmp);
1298 }
1299 
1300 static void
rt2860_iter_func(void * arg,struct ieee80211_node * ni)1301 rt2860_iter_func(void *arg, struct ieee80211_node *ni)
1302 {
1303 	struct rt2860_softc *sc = (struct rt2860_softc *)arg;
1304 	uint8_t wcid;
1305 
1306 	wcid = RT2860_AID2WCID(ni->in_associd);
1307 	rt2860_amrr_choose(&sc->amrr, ni, &sc->amn[wcid]);
1308 }
1309 
1310 static void
rt2860_updatestats(void * arg)1311 rt2860_updatestats(void *arg)
1312 {
1313 	struct rt2860_softc *sc = (struct rt2860_softc *)arg;
1314 	struct ieee80211com *ic = &sc->sc_ic;
1315 
1316 	if (ic->ic_opmode == IEEE80211_M_STA)
1317 		rt2860_iter_func(sc, ic->ic_bss);
1318 	else
1319 		ieee80211_iterate_nodes(&ic->ic_sta, rt2860_iter_func, arg);
1320 
1321 	sc->sc_rssadapt_id = timeout(rt2860_updatestats, (void *)sc,
1322 	    drv_usectohz(500 * 1000));
1323 }
1324 
1325 static void
rt2860_enable_mrr(struct rt2860_softc * sc)1326 rt2860_enable_mrr(struct rt2860_softc *sc)
1327 {
1328 #define	CCK(mcs)	(mcs)
1329 #define	OFDM(mcs)	((uint32_t)1 << 3 | (mcs))
1330 	RT2860_WRITE(sc, RT2860_LG_FBK_CFG0,
1331 	    OFDM(6) << 28 |	/* 54->48 */
1332 	    OFDM(5) << 24 |	/* 48->36 */
1333 	    OFDM(4) << 20 |	/* 36->24 */
1334 	    OFDM(3) << 16 |	/* 24->18 */
1335 	    OFDM(2) << 12 |	/* 18->12 */
1336 	    OFDM(1) <<  8 |	/* 12-> 9 */
1337 	    OFDM(0) <<  4 |	/*  9-> 6 */
1338 	    OFDM(0));		/*  6-> 6 */
1339 
1340 	RT2860_WRITE(sc, RT2860_LG_FBK_CFG1,
1341 	    CCK(2) << 12 |	/* 11->5.5 */
1342 	    CCK(1) <<  8 |	/* 5.5-> 2 */
1343 	    CCK(0) <<  4 |	/*   2-> 1 */
1344 	    CCK(0));		/*   1-> 1 */
1345 #undef OFDM
1346 #undef CCK
1347 }
1348 
1349 static void
rt2860_set_txpreamble(struct rt2860_softc * sc)1350 rt2860_set_txpreamble(struct rt2860_softc *sc)
1351 {
1352 	uint32_t tmp;
1353 
1354 	tmp = RT2860_READ(sc, RT2860_AUTO_RSP_CFG);
1355 	tmp &= ~RT2860_CCK_SHORT_EN;
1356 	if (sc->sc_ic.ic_flags & IEEE80211_F_SHPREAMBLE)
1357 		tmp |= RT2860_CCK_SHORT_EN;
1358 	RT2860_WRITE(sc, RT2860_AUTO_RSP_CFG, tmp);
1359 }
1360 
1361 static void
rt2860_set_bssid(struct rt2860_softc * sc,const uint8_t * bssid)1362 rt2860_set_bssid(struct rt2860_softc *sc, const uint8_t *bssid)
1363 {
1364 	RT2860_WRITE(sc, RT2860_MAC_BSSID_DW0,
1365 	    bssid[0] | bssid[1] << 8 | bssid[2] << 16 | bssid[3] << 24);
1366 	RT2860_WRITE(sc, RT2860_MAC_BSSID_DW1,
1367 	    bssid[4] | bssid[5] << 8);
1368 }
1369 
1370 static void
rt2860_set_basicrates(struct rt2860_softc * sc)1371 rt2860_set_basicrates(struct rt2860_softc *sc)
1372 {
1373 	struct ieee80211com *ic = &sc->sc_ic;
1374 
1375 	/* set basic rates mask */
1376 	if (ic->ic_curmode == IEEE80211_MODE_11B)
1377 		RT2860_WRITE(sc, RT2860_LEGACY_BASIC_RATE, 0x003);
1378 	else if (ic->ic_curmode == IEEE80211_MODE_11A)
1379 		RT2860_WRITE(sc, RT2860_LEGACY_BASIC_RATE, 0x150);
1380 	else	/* 11g */
1381 		RT2860_WRITE(sc, RT2860_LEGACY_BASIC_RATE, 0x15f);
1382 }
1383 
1384 static void
rt2860_amrr_node_init(const struct rt2860_amrr * amrr,struct rt2860_amrr_node * amn)1385 rt2860_amrr_node_init(const struct rt2860_amrr *amrr,
1386     struct rt2860_amrr_node *amn)
1387 {
1388 	amn->amn_success = 0;
1389 	amn->amn_recovery = 0;
1390 	amn->amn_txcnt = amn->amn_retrycnt = 0;
1391 	amn->amn_success_threshold = amrr->amrr_min_success_threshold;
1392 }
1393 
1394 static void
rt2860_amrr_choose(struct rt2860_amrr * amrr,struct ieee80211_node * ni,struct rt2860_amrr_node * amn)1395 rt2860_amrr_choose(struct rt2860_amrr *amrr, struct ieee80211_node *ni,
1396     struct rt2860_amrr_node *amn)
1397 {
1398 #define	RV(rate)	((rate) & IEEE80211_RATE_VAL)
1399 #define	is_success(amn)	\
1400 	((amn)->amn_retrycnt < (amn)->amn_txcnt / 10)
1401 #define	is_failure(amn)	\
1402 	((amn)->amn_retrycnt > (amn)->amn_txcnt / 3)
1403 #define	is_enough(amn)		\
1404 	((amn)->amn_txcnt > 10)
1405 #define	is_min_rate(ni)		\
1406 	((ni)->in_txrate == 0)
1407 #define	is_max_rate(ni)		\
1408 	((ni)->in_txrate == (ni)->in_rates.ir_nrates - 1)
1409 #define	increase_rate(ni)	\
1410 	((ni)->in_txrate++)
1411 #define	decrease_rate(ni)	\
1412 	((ni)->in_txrate--)
1413 #define	reset_cnt(amn)		\
1414 	{ (amn)->amn_txcnt = (amn)->amn_retrycnt = 0; }
1415 
1416 	int need_change = 0;
1417 
1418 	if (is_success(amn) && is_enough(amn)) {
1419 		amn->amn_success++;
1420 		if (amn->amn_success >= amn->amn_success_threshold &&
1421 		    !is_max_rate(ni)) {
1422 			amn->amn_recovery = 1;
1423 			amn->amn_success = 0;
1424 			increase_rate(ni);
1425 			RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_amrr_choose(): "
1426 			    "increase rate = %d, #tx = %d, #retries = %d\n",
1427 			    RV(ni->in_rates.ir_rates[ni->in_txrate]),
1428 			    amn->amn_txcnt, amn->amn_retrycnt);
1429 			need_change = 1;
1430 		} else {
1431 			amn->amn_recovery = 0;
1432 		}
1433 	} else if (is_failure(amn)) {
1434 		amn->amn_success = 0;
1435 		if (!is_min_rate(ni)) {
1436 			if (amn->amn_recovery) {
1437 				amn->amn_success_threshold *= 2;
1438 				if (amn->amn_success_threshold >
1439 				    amrr->amrr_max_success_threshold)
1440 					amn->amn_success_threshold =
1441 					    amrr->amrr_max_success_threshold;
1442 			} else {
1443 				amn->amn_success_threshold =
1444 				    amrr->amrr_min_success_threshold;
1445 			}
1446 			decrease_rate(ni);
1447 			RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_amrr_choose(): "
1448 			    "decrease rate = %d, #tx = %d, #retries = %d\n",
1449 			    RV(ni->in_rates.ir_rates[ni->in_txrate]),
1450 			    amn->amn_txcnt, amn->amn_retrycnt);
1451 			need_change = 1;
1452 		}
1453 		amn->amn_recovery = 0;
1454 	}
1455 
1456 	if (is_enough(amn) || need_change)
1457 		reset_cnt(amn);
1458 #undef RV
1459 }
1460 
1461 static void
rt2860_newassoc(struct ieee80211com * ic,struct ieee80211_node * in,int isnew)1462 rt2860_newassoc(struct ieee80211com *ic, struct ieee80211_node *in, int isnew)
1463 {
1464 	struct rt2860_softc *sc = (struct rt2860_softc *)ic;
1465 	uint32_t off;
1466 	uint8_t *fptr, wcid = 0;
1467 	int i;
1468 
1469 	if (isnew && in->in_associd != 0) {
1470 		/* only interested in true associations */
1471 		wcid = RT2860_AID2WCID(in->in_associd);
1472 
1473 		/* init WCID table entry */
1474 		off = RT2860_WCID_ENTRY(wcid);
1475 		fptr = in->in_macaddr;
1476 		for (i = 0; i < IEEE80211_ADDR_LEN; i++)
1477 			rt2860_mem_write1(sc, off++, *fptr++);
1478 	}
1479 	rt2860_amrr_node_init(&sc->amrr, &sc->amn[wcid]);
1480 
1481 	/* set rate to some reasonable initial value */
1482 	i = in->in_rates.ir_nrates - 1;
1483 	for (; i > 0 && (in->in_rates.ir_rates[i] & IEEE80211_RATE_VAL) > 72; )
1484 		i--;
1485 	in->in_txrate = i;
1486 
1487 	RWN_DEBUG(RT2860_DBG_80211, "rwn: rt2860_newassoc(): "
1488 	    "new assoc isnew=%d WCID=%d, initial rate=%d\n",
1489 	    isnew, wcid,
1490 	    in->in_rates.ir_rates[i] & IEEE80211_RATE_VAL);
1491 	RWN_DEBUG(RT2860_DBG_80211, "rwn: rt2860_newassoc(): "
1492 	    "addr=%x:%x:%x:%x:%x:%x\n",
1493 	    in->in_macaddr[0], in->in_macaddr[1], in->in_macaddr[2],
1494 	    in->in_macaddr[3], in->in_macaddr[4], in->in_macaddr[5]);
1495 }
1496 
1497 void
rt2860_enable_tsf_sync(struct rt2860_softc * sc)1498 rt2860_enable_tsf_sync(struct rt2860_softc *sc)
1499 {
1500 	struct ieee80211com *ic = &sc->sc_ic;
1501 	uint32_t tmp;
1502 
1503 	tmp = RT2860_READ(sc, RT2860_BCN_TIME_CFG);
1504 
1505 	tmp &= ~0x1fffff;
1506 	tmp |= ic->ic_bss->in_intval * 16;
1507 	tmp |= RT2860_TSF_TIMER_EN | RT2860_TBTT_TIMER_EN;
1508 	if (ic->ic_opmode == IEEE80211_M_STA) {
1509 		/*
1510 		 * Local TSF is always updated with remote TSF on beacon
1511 		 * reception.
1512 		 */
1513 		tmp |= 1 << RT2860_TSF_SYNC_MODE_SHIFT;
1514 	}
1515 
1516 	RT2860_WRITE(sc, RT2860_BCN_TIME_CFG, tmp);
1517 }
1518 
1519 static int
rt2860_newstate(struct ieee80211com * ic,enum ieee80211_state nstate,int arg)1520 rt2860_newstate(struct ieee80211com *ic, enum ieee80211_state nstate, int arg)
1521 {
1522 	struct rt2860_softc	*sc = (struct rt2860_softc *)ic;
1523 	enum ieee80211_state	ostate;
1524 	int			err;
1525 	uint32_t		tmp;
1526 
1527 	ostate = ic->ic_state;
1528 	RWN_DEBUG(RT2860_DBG_80211, "rwn: rt2860_newstate(): "
1529 	    "%x -> %x!\n", ostate, nstate);
1530 
1531 	RT2860_GLOCK(sc);
1532 	if (sc->sc_scan_id != 0) {
1533 		(void) untimeout(sc->sc_scan_id);
1534 		sc->sc_scan_id = 0;
1535 	}
1536 	if (sc->sc_rssadapt_id != 0) {
1537 		(void) untimeout(sc->sc_rssadapt_id);
1538 		sc->sc_rssadapt_id = 0;
1539 	}
1540 	if (ostate == IEEE80211_S_RUN) {
1541 		/* turn link LED off */
1542 		rt2860_set_leds(sc, RT2860_LED_RADIO);
1543 	}
1544 
1545 	switch (nstate) {
1546 	case IEEE80211_S_INIT:
1547 		if (ostate == IEEE80211_S_RUN) {
1548 			/* abort TSF synchronization */
1549 			tmp = RT2860_READ(sc, RT2860_BCN_TIME_CFG);
1550 			RT2860_WRITE(sc, RT2860_BCN_TIME_CFG,
1551 			    tmp & ~(RT2860_BCN_TX_EN | RT2860_TSF_TIMER_EN |
1552 			    RT2860_TBTT_TIMER_EN));
1553 		}
1554 		break;
1555 
1556 	case IEEE80211_S_SCAN:
1557 		rt2860_set_chan(sc, ic->ic_curchan);
1558 		sc->sc_scan_id = timeout(rt2860_next_scan, (void *)sc,
1559 		    drv_usectohz(200000));
1560 		break;
1561 
1562 	case IEEE80211_S_AUTH:
1563 	case IEEE80211_S_ASSOC:
1564 		rt2860_set_chan(sc, ic->ic_curchan);
1565 		break;
1566 
1567 	case IEEE80211_S_RUN:
1568 		rt2860_set_chan(sc, ic->ic_curchan);
1569 
1570 		if (ic->ic_opmode != IEEE80211_M_MONITOR) {
1571 			rt2860_updateslot(sc);
1572 			rt2860_enable_mrr(sc);
1573 			rt2860_set_txpreamble(sc);
1574 			rt2860_set_basicrates(sc);
1575 			rt2860_set_bssid(sc, ic->ic_bss->in_bssid);
1576 		}
1577 		if (ic->ic_opmode == IEEE80211_M_STA) {
1578 			/* fake a join to init the tx rate */
1579 			rt2860_newassoc(ic, ic->ic_bss, 1);
1580 		}
1581 
1582 		if (ic->ic_opmode != IEEE80211_M_MONITOR) {
1583 			rt2860_enable_tsf_sync(sc);
1584 			sc->sc_rssadapt_id = timeout(rt2860_updatestats,
1585 			    (void *)sc, drv_usectohz(500 * 1000));
1586 		}
1587 
1588 		/* turn link LED on */
1589 		rt2860_set_leds(sc, RT2860_LED_RADIO |
1590 		    (IEEE80211_IS_CHAN_2GHZ(ic->ic_curchan) ?
1591 		    RT2860_LED_LINK_2GHZ : RT2860_LED_LINK_5GHZ));
1592 		break;
1593 	}
1594 
1595 	RT2860_GUNLOCK(sc);
1596 
1597 	err = sc->sc_newstate(ic, nstate, arg);
1598 
1599 	return (err);
1600 }
1601 
1602 /*
1603  * Return the Rx chain with the highest RSSI for a given frame.
1604  */
1605 static uint8_t
rt2860_maxrssi_chain(struct rt2860_softc * sc,const struct rt2860_rxwi * rxwi)1606 rt2860_maxrssi_chain(struct rt2860_softc *sc, const struct rt2860_rxwi *rxwi)
1607 {
1608 	uint8_t rxchain = 0;
1609 
1610 	if (sc->nrxchains > 1)
1611 		if (rxwi->rssi[1] > rxwi->rssi[rxchain])
1612 			rxchain = 1;
1613 	if (sc->nrxchains > 2)
1614 		if (rxwi->rssi[2] > rxwi->rssi[rxchain])
1615 			rxchain = 2;
1616 
1617 	return (rxchain);
1618 }
1619 
1620 static void
rt2860_drain_stats_fifo(struct rt2860_softc * sc)1621 rt2860_drain_stats_fifo(struct rt2860_softc *sc)
1622 {
1623 	struct rt2860_amrr_node *amn;
1624 	uint32_t stat;
1625 	uint8_t wcid, mcs, pid;
1626 
1627 	/* drain Tx status FIFO (maxsize = 16) */
1628 	while ((stat = RT2860_READ(sc, RT2860_TX_STAT_FIFO)) & RT2860_TXQ_VLD) {
1629 		RWN_DEBUG(RT2860_DBG_TX, "rwn: rt2860_drain_stats_fifo(): "
1630 		    "tx stat 0x%08\n", stat);
1631 
1632 		wcid = (stat >> 8) & 0xff;
1633 
1634 		/* if no ACK was requested, no feedback is available */
1635 		if (!(stat & RT2860_TXQ_ACKREQ) || wcid == 0xff)
1636 			continue;
1637 		/* update per-STA AMRR stats */
1638 		amn = &sc->amn[wcid];
1639 		amn->amn_txcnt++;
1640 		if (stat & RT2860_TXQ_OK) {
1641 			/*
1642 			 * Check if there were retries, ie if the Tx success
1643 			 * rate is different from the requested rate.  Note
1644 			 * that it works only because we do not allow rate
1645 			 * fallback from OFDM to CCK.
1646 			 */
1647 			mcs = (stat >> RT2860_TXQ_MCS_SHIFT) & 0x7f;
1648 			pid = (stat >> RT2860_TXQ_PID_SHIFT) & 0xf;
1649 			if (mcs + 1 != pid)
1650 				amn->amn_retrycnt++;
1651 		} else
1652 			amn->amn_retrycnt++;
1653 	}
1654 }
1655 
1656 /*ARGSUSED*/
1657 static void
rt2860_tx_intr(struct rt2860_softc * sc,int qid)1658 rt2860_tx_intr(struct rt2860_softc *sc, int qid)
1659 {
1660 	struct rt2860_tx_ring	*ring = &sc->txq[qid];
1661 	struct ieee80211com	*ic = &sc->sc_ic;
1662 	uint32_t hw;
1663 
1664 	rt2860_drain_stats_fifo(sc);
1665 
1666 	mutex_enter(&sc->sc_txlock);
1667 	hw = RT2860_READ(sc, RT2860_TX_DTX_IDX(qid));
1668 	RWN_DEBUG(RT2860_DBG_TX, "rwn: rwn_tx_intr():"
1669 	    "hw = %x, ring->next = %x, queued = %d\n",
1670 	    hw, ring->next, ring->queued);
1671 	while (ring->next != hw) {
1672 		struct rt2860_txd *txd = &ring->txd[ring->next];
1673 		struct rt2860_tx_data *data = ring->data[ring->next];
1674 
1675 		if (data != NULL) {
1676 			RT2860_DMA_SYNC(data->txbuf_dma, DDI_DMA_SYNC_FORDEV);
1677 			if (data->ni != NULL) {
1678 				ieee80211_free_node(data->ni);
1679 				data->ni = NULL;
1680 			}
1681 			SLIST_INSERT_HEAD(&sc->data_pool, data, next);
1682 			ring->data[ring->next] = NULL;
1683 		}
1684 
1685 		txd->sdl0 &= ~LE_16(RT2860_TX_DDONE);
1686 
1687 		(void) ddi_dma_sync(ring->txdesc_dma.dma_hdl,
1688 		    ring->next * sizeof (struct rt2860_txd),
1689 		    sizeof (struct rt2860_txd),
1690 		    DDI_DMA_SYNC_FORDEV);
1691 
1692 		ring->queued--;
1693 		ring->next = (ring->next + 1) % RT2860_TX_RING_COUNT;
1694 
1695 		if (sc->sc_need_sched &&
1696 		    (ring->queued < RT2860_TX_RING_COUNT)) {
1697 			sc->sc_need_sched = 0;
1698 			mac_tx_update(ic->ic_mach);
1699 		}
1700 	}
1701 	sc->sc_tx_timer = 0;
1702 	mutex_exit(&sc->sc_txlock);
1703 }
1704 
1705 static void
rt2860_rx_intr(struct rt2860_softc * sc)1706 rt2860_rx_intr(struct rt2860_softc *sc)
1707 {
1708 	struct ieee80211com	*ic = &sc->sc_ic;
1709 	struct ieee80211_node	*ni;
1710 	struct ieee80211_frame	*wh;
1711 	int	pktlen;
1712 	uint8_t ant, rssi, *rxbuf;
1713 	mblk_t	*mp0;
1714 
1715 	mutex_enter(&sc->sc_rxlock);
1716 	for (;;) {
1717 		struct rt2860_rx_data *data = &sc->rxq.data[sc->rxq.cur];
1718 		struct rt2860_rxd *rxd = &sc->rxq.rxd[sc->rxq.cur];
1719 		struct rt2860_rxwi *rxwi;
1720 
1721 		(void) ddi_dma_sync(sc->rxq.rxdesc_dma.dma_hdl,
1722 		    sc->rxq.cur * sizeof (struct rt2860_rxd),
1723 		    sizeof (struct rt2860_rxd),
1724 		    DDI_DMA_SYNC_FORKERNEL);
1725 
1726 		if (!(rxd->sdl0 & LE_16(RT2860_RX_DDONE))) {
1727 			RWN_DEBUG(RT2860_DBG_RX, "rwn: rt2860_rx_intr(): "
1728 			    "rx done!\n");
1729 			break;
1730 		}
1731 
1732 		if (rxd->flags &
1733 		    LE_32(RT2860_RX_CRCERR | RT2860_RX_ICVERR)) {
1734 			RWN_DEBUG(RT2860_DBG_RX, "rwn: rt2860_rx_intr(): "
1735 			    "rx crc error & rx icv error!\n");
1736 			sc->sc_rx_err++;
1737 			goto skip;
1738 		}
1739 
1740 		if (rxd->flags & LE_32(RT2860_RX_MICERR)) {
1741 			RWN_DEBUG(RT2860_DBG_RX, "rwn: rt2860_rx_intr(): "
1742 			    "rx mic error!\n");
1743 			sc->sc_rx_err++;
1744 			goto skip;
1745 		}
1746 
1747 		(void) ddi_dma_sync(data->rxbuf_dma.dma_hdl,
1748 		    data->rxbuf_dma.offset,
1749 		    data->rxbuf_dma.alength,
1750 		    DDI_DMA_SYNC_FORCPU);
1751 
1752 		rxbuf = (uint8_t *)data->rxbuf_dma.mem_va;
1753 		rxd->sdp0 = LE_32(data->rxbuf_dma.cookie.dmac_address);
1754 		rxwi = (struct rt2860_rxwi *)rxbuf;
1755 		rxbuf = (uint8_t *)(rxwi + 1);
1756 		pktlen = LE_16(rxwi->len) & 0xfff;
1757 
1758 		mp0 = allocb(sc->sc_dmabuf_size, BPRI_MED);
1759 		if (mp0 == NULL) {
1760 			RWN_DEBUG(RT2860_DBG_RX, "rwn: rt2860_rx_intr():"
1761 			    "alloc mblk error\n");
1762 			sc->sc_rx_nobuf++;
1763 			goto skip;
1764 		}
1765 		bcopy(rxbuf, mp0->b_rptr, pktlen);
1766 		mp0->b_wptr += pktlen;
1767 
1768 		wh = (struct ieee80211_frame *)mp0->b_rptr;
1769 
1770 		/* HW may insert 2 padding bytes after 802.11 header */
1771 		if (rxd->flags & LE_32(RT2860_RX_L2PAD)) {
1772 			RWN_DEBUG(RT2860_DBG_RX, "rwn: rt2860_rx_intr():"
1773 			    "2 padding bytes after 80211 header!\n");
1774 		}
1775 
1776 		ant = rt2860_maxrssi_chain(sc, rxwi);
1777 		rssi = RT2860_RSSI_OFFSET - rxwi->rssi[ant];
1778 		/* grab a reference to the source node */
1779 		ni = ieee80211_find_rxnode(ic, wh);
1780 
1781 		(void) ieee80211_input(ic, mp0, ni, rssi, 0);
1782 
1783 		/* node is no longer needed */
1784 		ieee80211_free_node(ni);
1785 skip:
1786 		rxd->sdl0 &= ~LE_16(RT2860_RX_DDONE);
1787 
1788 		(void) ddi_dma_sync(sc->rxq.rxdesc_dma.dma_hdl,
1789 		    sc->rxq.cur * sizeof (struct rt2860_rxd),
1790 		    sizeof (struct rt2860_rxd),
1791 		    DDI_DMA_SYNC_FORDEV);
1792 
1793 		sc->rxq.cur = (sc->rxq.cur + 1) % RT2860_RX_RING_COUNT;
1794 	}
1795 	mutex_exit(&sc->sc_rxlock);
1796 
1797 	/* tell HW what we have processed */
1798 	RT2860_WRITE(sc, RT2860_RX_CALC_IDX,
1799 	    (sc->rxq.cur - 1) % RT2860_RX_RING_COUNT);
1800 }
1801 
1802 static uint_t
rt2860_softintr(caddr_t data)1803 rt2860_softintr(caddr_t data)
1804 {
1805 	struct rt2860_softc *sc = (struct rt2860_softc *)data;
1806 
1807 	/*
1808 	 * Check if the soft interrupt is triggered by another
1809 	 * driver at the same level.
1810 	 */
1811 	RT2860_GLOCK(sc);
1812 	if (sc->sc_rx_pend) {
1813 		sc->sc_rx_pend = 0;
1814 		RT2860_GUNLOCK(sc);
1815 		rt2860_rx_intr(sc);
1816 		return (DDI_INTR_CLAIMED);
1817 	}
1818 	RT2860_GUNLOCK(sc);
1819 
1820 	return (DDI_INTR_UNCLAIMED);
1821 }
1822 
1823 static uint_t
rt2860_intr(caddr_t arg)1824 rt2860_intr(caddr_t arg)
1825 {
1826 	struct rt2860_softc	*sc = (struct rt2860_softc *)arg;
1827 	uint32_t		r;
1828 
1829 	RT2860_GLOCK(sc);
1830 
1831 	if ((!RT2860_IS_RUNNING(sc)) || RT2860_IS_SUSPEND(sc)) {
1832 		/*
1833 		 * The hardware is not ready/present, don't touch anything.
1834 		 * Note this can happen early on if the IRQ is shared.
1835 		 */
1836 		RT2860_GUNLOCK(sc);
1837 		return (DDI_INTR_UNCLAIMED);
1838 	}
1839 
1840 	r = RT2860_READ(sc, RT2860_INT_STATUS);
1841 	if (r == 0xffffffff) {
1842 		RT2860_GUNLOCK(sc);
1843 		return (DDI_INTR_UNCLAIMED);
1844 	}
1845 	if (r == 0) {
1846 		RT2860_GUNLOCK(sc);
1847 		return (DDI_INTR_UNCLAIMED);
1848 	}
1849 
1850 	/* acknowledge interrupts */
1851 	RT2860_WRITE(sc, RT2860_INT_STATUS, r);
1852 
1853 	if (r & RT2860_TX_COHERENT)
1854 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr()"
1855 		    "RT2860_TX_COHERENT\n");
1856 
1857 	if (r & RT2860_RX_COHERENT)
1858 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr()"
1859 		    "RT2860_RX_COHERENT\n");
1860 
1861 	if (r & RT2860_MAC_INT_2) {
1862 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1863 		    "RT2860_MAC_INT_2\n");
1864 		rt2860_drain_stats_fifo(sc);
1865 	}
1866 
1867 	if (r & RT2860_TX_DONE_INT5) {
1868 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1869 		    "RT2860_TX_DONE_INT5\n");
1870 		rt2860_tx_intr(sc, 5);
1871 	}
1872 
1873 	if (r & RT2860_RX_DONE_INT) {
1874 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr()"
1875 		    "RT2860_RX_INT\n");
1876 		sc->sc_rx_pend = 1;
1877 		ddi_trigger_softintr(sc->sc_softintr_hdl);
1878 	}
1879 
1880 	if (r & RT2860_TX_DONE_INT4) {
1881 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1882 		    "RT2860_TX_DONE_INT4\n");
1883 		rt2860_tx_intr(sc, 4);
1884 	}
1885 
1886 	if (r & RT2860_TX_DONE_INT3) {
1887 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1888 		    "RT2860_TX_DONE_INT3\n");
1889 		rt2860_tx_intr(sc, 3);
1890 	}
1891 
1892 	if (r & RT2860_TX_DONE_INT2) {
1893 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1894 		    "RT2860_TX_DONE_INT2\n");
1895 		rt2860_tx_intr(sc, 2);
1896 	}
1897 
1898 	if (r & RT2860_TX_DONE_INT1) {
1899 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1900 		    "RT2860_TX_DONE_INT1\n");
1901 		rt2860_tx_intr(sc, 1);
1902 	}
1903 
1904 	if (r & RT2860_TX_DONE_INT0) {
1905 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1906 		    "RT2860_TX_DONE_INT0\n");
1907 		rt2860_tx_intr(sc, 0);
1908 	}
1909 
1910 	if (r & RT2860_MAC_INT_0) {
1911 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1912 		    "RT2860_MAC_INT_0\n");
1913 		struct ieee80211com *ic = &sc->sc_ic;
1914 		/* check if protection mode has changed */
1915 		if ((sc->sc_ic_flags ^ ic->ic_flags) & IEEE80211_F_USEPROT) {
1916 			rt2860_updateprot(ic);
1917 			sc->sc_ic_flags = ic->ic_flags;
1918 		}
1919 	}
1920 
1921 	if (r & RT2860_MAC_INT_3)
1922 		RWN_DEBUG(RT2860_DBG_INTR, "rwn: rt2860_intr(): "
1923 		    "RT2860_MAC_INT_3\n");
1924 
1925 	RT2860_GUNLOCK(sc);
1926 
1927 	return (DDI_INTR_CLAIMED);
1928 }
1929 
1930 static void
rt2860_set_region_4(struct rt2860_softc * sc,uint32_t addr,uint32_t data,int size)1931 rt2860_set_region_4(struct rt2860_softc *sc,
1932     uint32_t addr, uint32_t data, int size)
1933 {
1934 	for (; size > 0; size--, data++, addr += 4)
1935 		ddi_put32((sc)->sc_io_handle,
1936 		    (uint32_t *)((uintptr_t)(sc)->sc_io_base + addr), data);
1937 }
1938 
1939 static int
rt2860_load_microcode(struct rt2860_softc * sc)1940 rt2860_load_microcode(struct rt2860_softc *sc)
1941 {
1942 	int		ntries;
1943 	size_t		size;
1944 	uint8_t		*ucode, *fptr;
1945 	uint32_t	off, i;
1946 
1947 	ucode = rt2860_fw_bin;
1948 	size = sizeof (rt2860_fw_bin);
1949 	RWN_DEBUG(RT2860_DBG_FW, "rwn: rt2860_load_microcode(): "
1950 	    "The size of ucode is: %x\n", size);
1951 
1952 	/* set "host program ram write selection" bit */
1953 	RT2860_WRITE(sc, RT2860_SYS_CTRL, RT2860_HST_PM_SEL);
1954 	/* write microcode image */
1955 	fptr = ucode;
1956 	off = RT2860_FW_BASE;
1957 	for (i = 0; i < size; i++) {
1958 		rt2860_mem_write1(sc, off++, *fptr++);
1959 	}
1960 	/* kick microcontroller unit */
1961 	RT2860_WRITE(sc, RT2860_SYS_CTRL, 0);
1962 	RT2860_WRITE(sc, RT2860_SYS_CTRL, RT2860_MCU_RESET);
1963 
1964 	RT2860_WRITE(sc, RT2860_H2M_BBPAGENT, 0);
1965 	RT2860_WRITE(sc, RT2860_H2M_MAILBOX, 0);
1966 
1967 	/* wait until microcontroller is ready */
1968 	for (ntries = 0; ntries < 1000; ntries++) {
1969 		if (RT2860_READ(sc, RT2860_SYS_CTRL) & RT2860_MCU_READY)
1970 			break;
1971 		DELAY(1000);
1972 	}
1973 	if (ntries == 1000) {
1974 		RWN_DEBUG(RT2860_DBG_FW, "rwn: rt2860_load_microcode(): "
1975 		    "timeout waiting for MCU to initialie\n");
1976 		return (ETIMEDOUT);
1977 	}
1978 
1979 	return (0);
1980 }
1981 
1982 static void
rt2860_set_macaddr(struct rt2860_softc * sc,const uint8_t * addr)1983 rt2860_set_macaddr(struct rt2860_softc *sc, const uint8_t *addr)
1984 {
1985 	RT2860_WRITE(sc, RT2860_MAC_ADDR_DW0,
1986 	    addr[0] | addr[1] << 8 | addr[2] << 16 | addr[3] << 24);
1987 	RT2860_WRITE(sc, RT2860_MAC_ADDR_DW1,
1988 	    addr[4] | addr[5] << 8);
1989 }
1990 
1991 /*
1992  * Send a command to the 8051 microcontroller unit.
1993  */
1994 static int
rt2860_mcu_cmd(struct rt2860_softc * sc,uint8_t cmd,uint16_t arg)1995 rt2860_mcu_cmd(struct rt2860_softc *sc, uint8_t cmd, uint16_t arg)
1996 {
1997 	int	ntries;
1998 
1999 	for (ntries = 0; ntries < 100; ntries++) {
2000 		if (!(RT2860_READ(sc, RT2860_H2M_MAILBOX) & RT2860_H2M_BUSY))
2001 			break;
2002 		DELAY(2);
2003 	}
2004 	if (ntries == 100)
2005 		return (EIO);
2006 
2007 	RT2860_WRITE(sc, RT2860_H2M_MAILBOX,
2008 	    RT2860_H2M_BUSY | RT2860_TOKEN_NO_INTR << 16 | arg);
2009 	RT2860_WRITE(sc, RT2860_HOST_CMD, cmd);
2010 
2011 	return (RT2860_SUCCESS);
2012 }
2013 
2014 /*
2015  * Reading and writing from/to the BBP is different from RT2560 and RT2661.
2016  * We access the BBP through the 8051 microcontroller unit which means that
2017  * the microcode must be loaded first.
2018  */
2019 static uint8_t
rt2860_mcu_bbp_read(struct rt2860_softc * sc,uint8_t reg)2020 rt2860_mcu_bbp_read(struct rt2860_softc *sc, uint8_t reg)
2021 {
2022 	uint32_t val;
2023 	int ntries;
2024 
2025 	for (ntries = 0; ntries < 100; ntries++) {
2026 		if (!(RT2860_READ(sc,
2027 		    RT2860_H2M_BBPAGENT) & RT2860_BBP_CSR_KICK))
2028 			break;
2029 		DELAY(1);
2030 	}
2031 	if (ntries == 100) {
2032 		RWN_DEBUG(RT2860_DBG_FW, "rwn: rt2860_mcu_bbp_read():"
2033 		    "could not read from BBP through MCU\n");
2034 		return (0);
2035 	}
2036 
2037 	RT2860_WRITE(sc, RT2860_H2M_BBPAGENT, RT2860_BBP_RW_PARALLEL |
2038 	    RT2860_BBP_CSR_KICK | RT2860_BBP_CSR_READ | reg << 8);
2039 
2040 	(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_BBP, 0);
2041 	DELAY(1000);
2042 
2043 	for (ntries = 0; ntries < 100; ntries++) {
2044 		val = RT2860_READ(sc, RT2860_H2M_BBPAGENT);
2045 		if (!(val & RT2860_BBP_CSR_KICK))
2046 			return (val & 0xff);
2047 		DELAY(1);
2048 	}
2049 	RWN_DEBUG(RT2860_DBG_FW, "rwn: rt2860_mcu_bbp_read():"
2050 	    "could not read from BBP through MCU\n");
2051 
2052 	return (0);
2053 }
2054 
2055 static void
rt2860_mcu_bbp_write(struct rt2860_softc * sc,uint8_t reg,uint8_t val)2056 rt2860_mcu_bbp_write(struct rt2860_softc *sc, uint8_t reg, uint8_t val)
2057 {
2058 	int ntries;
2059 
2060 	for (ntries = 0; ntries < 100; ntries++) {
2061 		if (!(RT2860_READ(sc,
2062 		    RT2860_H2M_BBPAGENT) & RT2860_BBP_CSR_KICK))
2063 			break;
2064 		DELAY(1);
2065 	}
2066 	if (ntries == 100) {
2067 		RWN_DEBUG(RT2860_DBG_FW, "rwn: rt2860_mcu_bbp_write():"
2068 		    "could not write to BBP through MCU\n");
2069 		return;
2070 	}
2071 
2072 	RT2860_WRITE(sc, RT2860_H2M_BBPAGENT, RT2860_BBP_RW_PARALLEL |
2073 	    RT2860_BBP_CSR_KICK | reg << 8 | val);
2074 
2075 	(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_BBP, 0);
2076 	DELAY(1000);
2077 }
2078 
2079 static int
rt2860_bbp_init(struct rt2860_softc * sc)2080 rt2860_bbp_init(struct rt2860_softc *sc)
2081 {
2082 	int i, ntries;
2083 
2084 	/* wait for BBP to wake up */
2085 	for (ntries = 0; ntries < 20; ntries++) {
2086 		uint8_t bbp0 = rt2860_mcu_bbp_read(sc, 0);
2087 		if (bbp0 != 0 && bbp0 != 0xff)
2088 			break;
2089 	}
2090 	if (ntries == 20) {
2091 		RWN_DEBUG(RT2860_DBG_FW, "rwn: rt2860_bbp_init():"
2092 		    "timeout waiting for BBP to wake up\n");
2093 		return (ETIMEDOUT);
2094 	}
2095 
2096 	/* initialize BBP registers to default values */
2097 	for (i = 0; i < 12; i++) {
2098 		rt2860_mcu_bbp_write(sc, rt2860_def_bbp[i].reg,
2099 		    rt2860_def_bbp[i].val);
2100 	}
2101 
2102 	/* fix BBP69 and BBP73 for RT2860C */
2103 	if (sc->mac_rev == 0x28600100) {
2104 		rt2860_mcu_bbp_write(sc, 69, 0x16);
2105 		rt2860_mcu_bbp_write(sc, 73, 0x12);
2106 	}
2107 
2108 	return (0);
2109 }
2110 
2111 static void
rt2860_rf_write(struct rt2860_softc * sc,uint8_t reg,uint32_t val)2112 rt2860_rf_write(struct rt2860_softc *sc, uint8_t reg, uint32_t val)
2113 {
2114 	uint32_t tmp;
2115 	int ntries;
2116 
2117 	for (ntries = 0; ntries < 100; ntries++) {
2118 		if (!(RT2860_READ(sc, RT2860_RF_CSR_CFG0) & RT2860_RF_REG_CTRL))
2119 			break;
2120 		DELAY(1);
2121 	}
2122 	if (ntries == 100) {
2123 		RWN_DEBUG(RT2860_DBG_FW, "rwn: rwn_init()"
2124 		    "could not write to RF\n");
2125 		return;
2126 	}
2127 
2128 	/* RF registers are 24-bit on the RT2860 */
2129 	tmp = RT2860_RF_REG_CTRL | 24 << RT2860_RF_REG_WIDTH_SHIFT |
2130 	    (val & 0x3fffff) << 2 | (reg & 3);
2131 	RT2860_WRITE(sc, RT2860_RF_CSR_CFG0, tmp);
2132 }
2133 
2134 static void
rt2860_select_chan_group(struct rt2860_softc * sc,int group)2135 rt2860_select_chan_group(struct rt2860_softc *sc, int group)
2136 {
2137 	uint32_t tmp;
2138 
2139 	rt2860_mcu_bbp_write(sc, 62, 0x37 - sc->lna[group]);
2140 	rt2860_mcu_bbp_write(sc, 63, 0x37 - sc->lna[group]);
2141 	rt2860_mcu_bbp_write(sc, 64, 0x37 - sc->lna[group]);
2142 	rt2860_mcu_bbp_write(sc, 82, (group == 0) ? 0x62 : 0xf2);
2143 
2144 	tmp = RT2860_READ(sc, RT2860_TX_BAND_CFG);
2145 	tmp &= ~(RT2860_5G_BAND_SEL_N | RT2860_5G_BAND_SEL_P);
2146 	tmp |= (group == 0) ? RT2860_5G_BAND_SEL_N : RT2860_5G_BAND_SEL_P;
2147 	RT2860_WRITE(sc, RT2860_TX_BAND_CFG, tmp);
2148 
2149 	/* enable appropriate Power Amplifiers and Low Noise Amplifiers */
2150 	tmp = RT2860_RFTR_EN | RT2860_TRSW_EN;
2151 	if (group == 0) {	/* 2GHz */
2152 		tmp |= RT2860_PA_PE_G0_EN | RT2860_LNA_PE_G0_EN;
2153 		if (sc->ntxchains > 1)
2154 			tmp |= RT2860_PA_PE_G1_EN;
2155 		if (sc->nrxchains > 1)
2156 			tmp |= RT2860_LNA_PE_G1_EN;
2157 	} else {		/* 5GHz */
2158 		tmp |= RT2860_PA_PE_A0_EN | RT2860_LNA_PE_A0_EN;
2159 		if (sc->ntxchains > 1)
2160 			tmp |= RT2860_PA_PE_A1_EN;
2161 		if (sc->nrxchains > 1)
2162 			tmp |= RT2860_LNA_PE_A1_EN;
2163 	}
2164 	RT2860_WRITE(sc, RT2860_TX_PIN_CFG, tmp);
2165 
2166 	rt2860_mcu_bbp_write(sc, 66, 0x2e + sc->lna[group]);
2167 }
2168 static void
rt2860_set_chan(struct rt2860_softc * sc,struct ieee80211_channel * c)2169 rt2860_set_chan(struct rt2860_softc *sc, struct ieee80211_channel *c)
2170 {
2171 	struct ieee80211com	*ic = &sc->sc_ic;
2172 	const struct rfprog	*rfprog = rt2860_rf2850;
2173 	uint_t			i, chan, group;
2174 	uint8_t			txpow1, txpow2;
2175 	uint32_t		r2, r3, r4;
2176 
2177 	chan = ieee80211_chan2ieee(ic, c);
2178 	if (chan == 0 || chan == IEEE80211_CHAN_ANY) {
2179 		RWN_DEBUG(RT2860_DBG_FW, "Unkonwn channel!\n");
2180 		return;
2181 	}
2182 
2183 	/* find the settings for this channel (we know it exists) */
2184 	for (i = 0; rfprog[i].chan != chan; )
2185 		i++;
2186 
2187 	r2 = rfprog[i].r2;
2188 	if (sc->ntxchains == 1)
2189 		r2 |= 1 << 12;		/* 1T: disable Tx chain 2 */
2190 	if (sc->nrxchains == 1)
2191 		r2 |= 1 << 15 | 1 << 4;	/* 1R: disable Rx chains 2 & 3 */
2192 	else if (sc->nrxchains == 2)
2193 		r2 |= 1 << 4;		/* 2R: disable Rx chain 3 */
2194 
2195 	/* use Tx power values from EEPROM */
2196 	txpow1 = sc->txpow1[i];
2197 	txpow2 = sc->txpow2[i];
2198 	if (IEEE80211_IS_CHAN_5GHZ(c)) {
2199 		txpow1 = txpow1 << 1 | 1;
2200 		txpow2 = txpow2 << 1 | 1;
2201 	}
2202 	r3 = rfprog[i].r3 | txpow1 << 7;
2203 	r4 = rfprog[i].r4 | sc->freq << 13 | txpow2 << 4;
2204 
2205 	rt2860_rf_write(sc, RAL_RF1, rfprog[i].r1);
2206 	rt2860_rf_write(sc, RAL_RF2, r2);
2207 	rt2860_rf_write(sc, RAL_RF3, r3);
2208 	rt2860_rf_write(sc, RAL_RF4, r4);
2209 
2210 	DELAY(200);
2211 
2212 	rt2860_rf_write(sc, RAL_RF1, rfprog[i].r1);
2213 	rt2860_rf_write(sc, RAL_RF2, r2);
2214 	rt2860_rf_write(sc, RAL_RF3, r3 | 1);
2215 	rt2860_rf_write(sc, RAL_RF4, r4);
2216 
2217 	DELAY(200);
2218 
2219 	rt2860_rf_write(sc, RAL_RF1, rfprog[i].r1);
2220 	rt2860_rf_write(sc, RAL_RF2, r2);
2221 	rt2860_rf_write(sc, RAL_RF3, r3);
2222 	rt2860_rf_write(sc, RAL_RF4, r4);
2223 
2224 	/* 802.11a uses a 16 microseconds short interframe space */
2225 	sc->sifs = IEEE80211_IS_CHAN_5GHZ(c) ? 16 : 10;
2226 
2227 	/* determine channel group */
2228 	if (chan <= 14)
2229 		group = 0;
2230 	else if (chan <= 64)
2231 		group = 1;
2232 	else if (chan <= 128)
2233 		group = 2;
2234 	else
2235 		group = 3;
2236 
2237 	/* XXX necessary only when group has changed! */
2238 	rt2860_select_chan_group(sc, group);
2239 
2240 	DELAY(1000);
2241 }
2242 
2243 static void
rt2860_updateprot(struct ieee80211com * ic)2244 rt2860_updateprot(struct ieee80211com *ic)
2245 {
2246 	struct rt2860_softc *sc = (struct rt2860_softc *)ic;
2247 	uint32_t tmp;
2248 
2249 	tmp = RT2860_RTSTH_EN | RT2860_PROT_NAV_SHORT | RT2860_TXOP_ALLOW_ALL;
2250 	/* setup protection frame rate (MCS code) */
2251 	tmp |= (ic->ic_curmode == IEEE80211_MODE_11A) ? 0 : 3;
2252 
2253 	/* CCK frames don't require protection */
2254 	RT2860_WRITE(sc, RT2860_CCK_PROT_CFG, tmp);
2255 
2256 	if (ic->ic_flags & IEEE80211_F_USEPROT) {
2257 		if (ic->ic_protmode == IEEE80211_PROT_RTSCTS)
2258 			tmp |= RT2860_PROT_CTRL_RTS_CTS;
2259 		else if (ic->ic_protmode == IEEE80211_PROT_CTSONLY)
2260 			tmp |= RT2860_PROT_CTRL_CTS;
2261 	}
2262 	RT2860_WRITE(sc, RT2860_OFDM_PROT_CFG, tmp);
2263 }
2264 
2265 static void
rt2860_set_leds(struct rt2860_softc * sc,uint16_t which)2266 rt2860_set_leds(struct rt2860_softc *sc, uint16_t which)
2267 {
2268 	(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_LEDS,
2269 	    which | (sc->leds & 0x7f));
2270 }
2271 
2272 static int
rt2860_init(struct rt2860_softc * sc)2273 rt2860_init(struct rt2860_softc *sc)
2274 {
2275 #define	N(a)	(sizeof (a) / sizeof ((a)[0]))
2276 	struct ieee80211com	*ic;
2277 	int			i, err, qid, ridx, ntries;
2278 	uint8_t			bbp1, bbp3;
2279 	uint32_t		tmp;
2280 
2281 	ic = &sc->sc_ic;
2282 
2283 	rt2860_stop(sc);
2284 	tmp = RT2860_READ(sc, RT2860_WPDMA_GLO_CFG);
2285 	tmp &= 0xff0;
2286 	RT2860_WRITE(sc, RT2860_WPDMA_GLO_CFG, tmp | RT2860_TX_WB_DDONE);
2287 
2288 	RT2860_WRITE(sc, RT2860_WPDMA_RST_IDX, 0xffffffff);
2289 
2290 	/* PBF hardware reset */
2291 	RT2860_WRITE(sc, RT2860_SYS_CTRL, 0xe1f);
2292 	RT2860_WRITE(sc, RT2860_SYS_CTRL, 0xe00);
2293 
2294 	if (!(sc->sc_flags & RT2860_FWLOADED)) {
2295 		if ((err = rt2860_load_microcode(sc)) != 0) {
2296 			RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_init(): "
2297 			    "could not load 8051 microcode\n");
2298 			rt2860_stop(sc);
2299 			return (err);
2300 		}
2301 		RT2860_GLOCK(sc);
2302 		sc->sc_flags |= RT2860_FWLOADED;
2303 		RT2860_GUNLOCK(sc);
2304 	}
2305 
2306 	rt2860_set_macaddr(sc, ic->ic_macaddr);
2307 
2308 	/* init Tx power for all Tx rates (from EEPROM) */
2309 	for (ridx = 0; ridx < 5; ridx++) {
2310 		if (sc->txpow20mhz[ridx] == 0xffffffff)
2311 			continue;
2312 		RT2860_WRITE(sc, RT2860_TX_PWR_CFG(ridx), sc->txpow20mhz[ridx]);
2313 	}
2314 
2315 	for (ntries = 0; ntries < 100; ntries++) {
2316 		tmp = RT2860_READ(sc, RT2860_WPDMA_GLO_CFG);
2317 		if ((tmp & (RT2860_TX_DMA_BUSY | RT2860_RX_DMA_BUSY)) == 0)
2318 			break;
2319 		DELAY(1000);
2320 	}
2321 	if (ntries == 100) {
2322 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rt2860_init():"
2323 		    "timeout waiting for DMA engine\n");
2324 		rt2860_stop(sc);
2325 		return (ETIMEDOUT);
2326 	}
2327 	tmp &= 0xff0;
2328 	RT2860_WRITE(sc, RT2860_WPDMA_GLO_CFG, tmp | RT2860_TX_WB_DDONE);
2329 
2330 	/* reset Rx ring and all 6 Tx rings */
2331 	RT2860_WRITE(sc, RT2860_WPDMA_RST_IDX, 0x1003f);
2332 
2333 	/* PBF hardware reset */
2334 	RT2860_WRITE(sc, RT2860_SYS_CTRL, 0xe1f);
2335 	RT2860_WRITE(sc, RT2860_SYS_CTRL, 0xe00);
2336 
2337 	RT2860_WRITE(sc, RT2860_MAC_SYS_CTRL,
2338 	    RT2860_BBP_HRST | RT2860_MAC_SRST);
2339 	RT2860_WRITE(sc, RT2860_MAC_SYS_CTRL, 0);
2340 
2341 	for (i = 0; i < N(rt2860_def_mac); i++)
2342 		RT2860_WRITE(sc, rt2860_def_mac[i].reg, rt2860_def_mac[i].val);
2343 
2344 	/* wait while MAC is busy */
2345 	for (ntries = 0; ntries < 100; ntries++) {
2346 		if (!(RT2860_READ(sc, RT2860_MAC_STATUS_REG) &
2347 		    (RT2860_RX_STATUS_BUSY | RT2860_TX_STATUS_BUSY)))
2348 			break;
2349 		DELAY(1000);
2350 	}
2351 	if (ntries == 100) {
2352 		RWN_DEBUG(RT2860_DBG_FW, "rwn: rt2860_init():"
2353 		    "timeout waiting for MAC\n");
2354 		rt2860_stop(sc);
2355 		return (ETIMEDOUT);
2356 	}
2357 
2358 	/* clear Host to MCU mailbox */
2359 	RT2860_WRITE(sc, RT2860_H2M_BBPAGENT, 0);
2360 	RT2860_WRITE(sc, RT2860_H2M_MAILBOX, 0);
2361 
2362 	if ((err = rt2860_bbp_init(sc)) != 0) {
2363 		rt2860_stop(sc);
2364 		return (err);
2365 	}
2366 
2367 	/* init Tx rings (4 EDCAs + HCCA + Mgt) */
2368 	for (qid = 0; qid < 6; qid++) {
2369 		RT2860_WRITE(sc, RT2860_TX_BASE_PTR(qid), sc->txq[qid].paddr);
2370 		RT2860_WRITE(sc, RT2860_TX_MAX_CNT(qid), RT2860_TX_RING_COUNT);
2371 		RT2860_WRITE(sc, RT2860_TX_CTX_IDX(qid), 0);
2372 	}
2373 
2374 	/* init Rx ring */
2375 	RT2860_WRITE(sc, RT2860_RX_BASE_PTR, sc->rxq.paddr);
2376 	RT2860_WRITE(sc, RT2860_RX_MAX_CNT, RT2860_RX_RING_COUNT);
2377 	RT2860_WRITE(sc, RT2860_RX_CALC_IDX, RT2860_RX_RING_COUNT - 1);
2378 
2379 	/* setup maximum buffer sizes */
2380 	RT2860_WRITE(sc, RT2860_MAX_LEN_CFG, 1 << 12 |
2381 	    (sc->sc_dmabuf_size - sizeof (struct rt2860_rxwi) - 2));
2382 
2383 	for (ntries = 0; ntries < 100; ntries++) {
2384 		tmp = RT2860_READ(sc, RT2860_WPDMA_GLO_CFG);
2385 		if ((tmp & (RT2860_TX_DMA_BUSY | RT2860_RX_DMA_BUSY)) == 0)
2386 			break;
2387 		DELAY(1000);
2388 	}
2389 	if (ntries == 100) {
2390 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rt2860_init():"
2391 		    "timeout waiting for DMA engine\n");
2392 		rt2860_stop(sc);
2393 		return (ETIMEDOUT);
2394 	}
2395 	tmp &= 0xff0;
2396 	RT2860_WRITE(sc, RT2860_WPDMA_GLO_CFG, tmp | RT2860_TX_WB_DDONE);
2397 
2398 	/* disable interrupts mitigation */
2399 	RT2860_WRITE(sc, RT2860_DELAY_INT_CFG, 0);
2400 
2401 	/* write vendor-specific BBP values (from EEPROM) */
2402 	for (i = 0; i < 8; i++) {
2403 		if (sc->bbp[i].reg == 0 || sc->bbp[i].reg == 0xff)
2404 			continue;
2405 		rt2860_mcu_bbp_write(sc, sc->bbp[i].reg, sc->bbp[i].val);
2406 	}
2407 
2408 	/* send LEDs operating mode to microcontroller */
2409 	(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_LED1, sc->led[0]);
2410 	(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_LED2, sc->led[1]);
2411 	(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_LED3, sc->led[2]);
2412 
2413 	/* disable non-existing Rx chains */
2414 	bbp3 = rt2860_mcu_bbp_read(sc, 3);
2415 	bbp3 &= ~(1 << 3 | 1 << 4);
2416 	if (sc->nrxchains == 2)
2417 		bbp3 |= 1 << 3;
2418 	else if (sc->nrxchains == 3)
2419 		bbp3 |= 1 << 4;
2420 	rt2860_mcu_bbp_write(sc, 3, bbp3);
2421 
2422 	/* disable non-existing Tx chains */
2423 	bbp1 = rt2860_mcu_bbp_read(sc, 1);
2424 	if (sc->ntxchains == 1)
2425 		bbp1 &= ~(1 << 3 | 1 << 4);
2426 	rt2860_mcu_bbp_write(sc, 1, bbp1);
2427 
2428 	/* select default channel */
2429 	rt2860_set_chan(sc, ic->ic_curchan);
2430 
2431 	/* XXX not clear what the following 8051 command does.. */
2432 	(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_BOOT, 0);
2433 
2434 	/* set RTS threshold */
2435 	tmp = RT2860_READ(sc, RT2860_TX_RTS_CFG);
2436 	tmp &= ~0xffff00;
2437 	tmp |= ic->ic_rtsthreshold << 8;
2438 
2439 	/* setup initial protection mode */
2440 	sc->sc_ic_flags = ic->ic_flags;
2441 	rt2860_updateprot(ic);
2442 
2443 	/* enable Tx/Rx DMA engine */
2444 	RT2860_WRITE(sc, RT2860_MAC_SYS_CTRL, RT2860_MAC_TX_EN);
2445 	for (ntries = 0; ntries < 200; ntries++) {
2446 		tmp = RT2860_READ(sc, RT2860_WPDMA_GLO_CFG);
2447 		if ((tmp & (RT2860_TX_DMA_BUSY | RT2860_RX_DMA_BUSY)) == 0)
2448 			break;
2449 		DELAY(1000);
2450 	}
2451 	if (ntries == 200) {
2452 		RWN_DEBUG(RT2860_DBG_DMA, "rwn: rt2860_int():"
2453 		    "timeout waiting for DMA engine\n");
2454 		rt2860_stop(sc);
2455 		return (ETIMEDOUT);
2456 	}
2457 
2458 	DELAY(50);
2459 
2460 	tmp |= RT2860_TX_WB_DDONE | RT2860_RX_DMA_EN | RT2860_TX_DMA_EN |
2461 	    RT2860_WPDMA_BT_SIZE64 << RT2860_WPDMA_BT_SIZE_SHIFT;
2462 	RT2860_WRITE(sc, RT2860_WPDMA_GLO_CFG, tmp);
2463 
2464 	/* turn radio LED on */
2465 	rt2860_set_leds(sc, RT2860_LED_RADIO);
2466 
2467 	/* set Rx filter */
2468 	tmp = RT2860_DROP_CRC_ERR | RT2860_DROP_PHY_ERR;
2469 	if (ic->ic_opmode != IEEE80211_M_MONITOR) {
2470 		tmp |= RT2860_DROP_UC_NOME | RT2860_DROP_DUPL |
2471 		    RT2860_DROP_CTS | RT2860_DROP_BA | RT2860_DROP_ACK |
2472 		    RT2860_DROP_VER_ERR | RT2860_DROP_CTRL_RSV |
2473 		    RT2860_DROP_CFACK | RT2860_DROP_CFEND;
2474 		if (ic->ic_opmode == IEEE80211_M_STA)
2475 			tmp |= RT2860_DROP_RTS | RT2860_DROP_PSPOLL;
2476 	}
2477 	RT2860_WRITE(sc, RT2860_RX_FILTR_CFG, tmp);
2478 
2479 	RT2860_WRITE(sc, RT2860_MAC_SYS_CTRL,
2480 	    RT2860_MAC_RX_EN | RT2860_MAC_TX_EN);
2481 
2482 	/* clear pending interrupts */
2483 	RT2860_WRITE(sc, RT2860_INT_STATUS, 0xffffffff);
2484 	/* enable interrupts */
2485 	RT2860_WRITE(sc, RT2860_INT_MASK, 0x3fffc);
2486 
2487 	if (sc->sc_flags & RT2860_ADVANCED_PS)
2488 		(void) rt2860_mcu_cmd(sc, RT2860_MCU_CMD_PSLEVEL, sc->pslevel);
2489 
2490 	return (DDI_SUCCESS);
2491 }
2492 
2493 static int
rt2860_quiesce(dev_info_t * dip)2494 rt2860_quiesce(dev_info_t *dip)
2495 {
2496 	struct rt2860_softc	*sc;
2497 
2498 	sc = ddi_get_soft_state(rt2860_soft_state_p, ddi_get_instance(dip));
2499 	if (sc == NULL)
2500 		return (DDI_FAILURE);
2501 
2502 #ifdef DEBUG
2503 	rt2860_dbg_flags = 0;
2504 #endif
2505 
2506 	/*
2507 	 * No more blocking is allowed while we are in quiesce(9E) entry point
2508 	 */
2509 	sc->sc_flags |= RT2860_F_QUIESCE;
2510 
2511 	/*
2512 	 * Disable and mask all interrupts
2513 	 */
2514 	rt2860_stop(sc);
2515 	return (DDI_SUCCESS);
2516 }
2517 
2518 static void
rt2860_stop(struct rt2860_softc * sc)2519 rt2860_stop(struct rt2860_softc *sc)
2520 {
2521 	int		qid;
2522 	uint32_t	tmp;
2523 
2524 	/* by pass if it's quiesced */
2525 	if (!(sc->sc_flags & RT2860_F_QUIESCE))
2526 		RT2860_GLOCK(sc);
2527 	if (sc->sc_flags == RT2860_F_RUNNING)
2528 		rt2860_set_leds(sc, 0);	/* turn all LEDs off */
2529 	sc->sc_tx_timer = 0;
2530 	/* by pass if it's quiesced */
2531 	if (!(sc->sc_flags & RT2860_F_QUIESCE))
2532 		RT2860_GUNLOCK(sc);
2533 
2534 	/* clear RX WCID search table */
2535 	rt2860_set_region_4(sc, RT2860_WCID_ENTRY(0), 0, 512);
2536 	/* clear pairwise key table */
2537 	rt2860_set_region_4(sc, RT2860_PKEY(0), 0, 2048);
2538 	/* clear IV/EIV table */
2539 	rt2860_set_region_4(sc, RT2860_IVEIV(0), 0, 512);
2540 	/* clear WCID attribute table */
2541 	rt2860_set_region_4(sc, RT2860_WCID_ATTR(0), 0, 256);
2542 	/* clear shared key table */
2543 	rt2860_set_region_4(sc, RT2860_SKEY(0, 0), 0, 8 * 32);
2544 	/* clear shared key mode */
2545 	rt2860_set_region_4(sc, RT2860_SKEY_MODE_0_7, 0, 4);
2546 
2547 	/* disable interrupts */
2548 	RT2860_WRITE(sc, RT2860_INT_MASK, 0);
2549 
2550 	/* disable Rx */
2551 	tmp = RT2860_READ(sc, RT2860_MAC_SYS_CTRL);
2552 	tmp &= ~(RT2860_MAC_RX_EN | RT2860_MAC_TX_EN);
2553 	RT2860_WRITE(sc, RT2860_MAC_SYS_CTRL, tmp);
2554 
2555 	/* reset adapter */
2556 	RT2860_WRITE(sc, RT2860_MAC_SYS_CTRL,
2557 	    RT2860_BBP_HRST | RT2860_MAC_SRST);
2558 	RT2860_WRITE(sc, RT2860_MAC_SYS_CTRL, 0);
2559 
2560 	/* reset Tx and Rx rings (and reclaim TXWIs) */
2561 	for (qid = 0; qid < 6; qid++)
2562 		rt2860_reset_tx_ring(sc, &sc->txq[qid]);
2563 	rt2860_reset_rx_ring(sc, &sc->rxq);
2564 
2565 	/* by pass if it's quiesced */
2566 	if (!(sc->sc_flags & RT2860_F_QUIESCE))
2567 		RT2860_GLOCK(sc);
2568 	sc->sc_flags &= ~RT2860_UPD_BEACON;
2569 	/* by pass if it's quiesced */
2570 	if (!(sc->sc_flags & RT2860_F_QUIESCE))
2571 		RT2860_GUNLOCK(sc);
2572 }
2573 
2574 static int
rt2860_m_start(void * arg)2575 rt2860_m_start(void *arg)
2576 {
2577 	struct rt2860_softc	*sc = (struct rt2860_softc *)arg;
2578 	struct ieee80211com	*ic = &sc->sc_ic;
2579 	int			err;
2580 
2581 	err = rt2860_init(sc);
2582 	if (err != DDI_SUCCESS) {
2583 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_m_start():"
2584 		    "Hardware initialization failed\n");
2585 		goto fail1;
2586 	}
2587 
2588 	ieee80211_new_state(ic, IEEE80211_S_INIT, -1);
2589 
2590 	RT2860_GLOCK(sc);
2591 	sc->sc_flags |= RT2860_F_RUNNING;
2592 	RT2860_GUNLOCK(sc);
2593 
2594 	return (err);
2595 fail1:
2596 	rt2860_stop(sc);
2597 	return (err);
2598 }
2599 
2600 static void
rt2860_m_stop(void * arg)2601 rt2860_m_stop(void *arg)
2602 {
2603 	struct rt2860_softc *sc = (struct rt2860_softc *)arg;
2604 
2605 	(void) rt2860_stop(sc);
2606 
2607 	ieee80211_new_state(&sc->sc_ic, IEEE80211_S_INIT, -1);
2608 
2609 	RT2860_GLOCK(sc);
2610 	sc->sc_flags &= ~RT2860_F_RUNNING;
2611 	RT2860_GUNLOCK(sc);
2612 }
2613 
2614 static void
rt2860_m_ioctl(void * arg,queue_t * wq,mblk_t * mp)2615 rt2860_m_ioctl(void* arg, queue_t *wq, mblk_t *mp)
2616 {
2617 	struct rt2860_softc	*sc = (struct rt2860_softc *)arg;
2618 	struct ieee80211com	*ic = &sc->sc_ic;
2619 	int			err;
2620 
2621 	err = ieee80211_ioctl(ic, wq, mp);
2622 	RT2860_GLOCK(sc);
2623 	if (err == ENETRESET) {
2624 		if (ic->ic_des_esslen) {
2625 			if (RT2860_IS_RUNNING(sc)) {
2626 				RT2860_GUNLOCK(sc);
2627 				(void) rt2860_init(sc);
2628 				(void) ieee80211_new_state(ic,
2629 				    IEEE80211_S_SCAN, -1);
2630 				RT2860_GLOCK(sc);
2631 			}
2632 		}
2633 	}
2634 	RT2860_GUNLOCK(sc);
2635 }
2636 
2637 /*
2638  * Call back function for get/set proporty
2639  */
2640 static int
rt2860_m_getprop(void * arg,const char * pr_name,mac_prop_id_t wldp_pr_num,uint_t wldp_length,void * wldp_buf)2641 rt2860_m_getprop(void *arg, const char *pr_name, mac_prop_id_t wldp_pr_num,
2642     uint_t wldp_length, void *wldp_buf)
2643 {
2644 	struct rt2860_softc	*sc = (struct rt2860_softc *)arg;
2645 	int			err = 0;
2646 
2647 	err = ieee80211_getprop(&sc->sc_ic, pr_name, wldp_pr_num,
2648 	    wldp_length, wldp_buf);
2649 
2650 	return (err);
2651 }
2652 
2653 static void
rt2860_m_propinfo(void * arg,const char * pr_name,mac_prop_id_t wldp_pr_num,mac_prop_info_handle_t prh)2654 rt2860_m_propinfo(void *arg, const char *pr_name, mac_prop_id_t wldp_pr_num,
2655     mac_prop_info_handle_t prh)
2656 {
2657 	struct rt2860_softc	*sc = (struct rt2860_softc *)arg;
2658 
2659 	ieee80211_propinfo(&sc->sc_ic, pr_name, wldp_pr_num, prh);
2660 }
2661 
2662 static int
rt2860_m_setprop(void * arg,const char * pr_name,mac_prop_id_t wldp_pr_num,uint_t wldp_length,const void * wldp_buf)2663 rt2860_m_setprop(void *arg, const char *pr_name, mac_prop_id_t wldp_pr_num,
2664     uint_t wldp_length, const void *wldp_buf)
2665 {
2666 	struct rt2860_softc	*sc = (struct rt2860_softc *)arg;
2667 	ieee80211com_t		*ic = &sc->sc_ic;
2668 	int			err;
2669 
2670 	err = ieee80211_setprop(ic, pr_name, wldp_pr_num, wldp_length,
2671 	    wldp_buf);
2672 	RT2860_GLOCK(sc);
2673 	if (err == ENETRESET) {
2674 		if (ic->ic_des_esslen) {
2675 			if (RT2860_IS_RUNNING(sc)) {
2676 				RT2860_GUNLOCK(sc);
2677 				(void) rt2860_init(sc);
2678 				(void) ieee80211_new_state(ic,
2679 				    IEEE80211_S_SCAN, -1);
2680 				RT2860_GLOCK(sc);
2681 			}
2682 		}
2683 		err = 0;
2684 	}
2685 	RT2860_GUNLOCK(sc);
2686 	return (err);
2687 }
2688 
2689 static mblk_t *
rt2860_m_tx(void * arg,mblk_t * mp)2690 rt2860_m_tx(void *arg, mblk_t *mp)
2691 {
2692 	struct rt2860_softc	*sc = (struct rt2860_softc *)arg;
2693 	struct ieee80211com	*ic = &sc->sc_ic;
2694 	mblk_t			*next;
2695 
2696 	if (RT2860_IS_SUSPEND(sc)) {
2697 		freemsgchain(mp);
2698 		return (NULL);
2699 	}
2700 
2701 	/*
2702 	 * No data frames go out unless we're associated; this
2703 	 * should not happen as the 802.11 layer does not enable
2704 	 * the xmit queue until we enter the RUN state.
2705 	 */
2706 	if (ic->ic_state != IEEE80211_S_RUN) {
2707 		RWN_DEBUG(RT2860_DBG_TX, "rwn: rt2860_tx_data(): "
2708 		    "discard, state %u\n", ic->ic_state);
2709 		freemsgchain(mp);
2710 		return (NULL);
2711 	}
2712 
2713 	while (mp != NULL) {
2714 		next = mp->b_next;
2715 		mp->b_next = NULL;
2716 		if (rt2860_send(ic, mp, IEEE80211_FC0_TYPE_DATA) !=
2717 		    DDI_SUCCESS) {
2718 			mp->b_next = next;
2719 			break;
2720 		}
2721 		mp = next;
2722 	}
2723 	return (mp);
2724 }
2725 
2726 /*ARGSUSED*/
2727 static int
rt2860_m_unicst(void * arg,const uint8_t * macaddr)2728 rt2860_m_unicst(void *arg, const uint8_t *macaddr)
2729 {
2730 	return (ENOTSUP);
2731 }
2732 
2733 /*ARGSUSED*/
2734 static int
rt2860_m_multicst(void * arg,boolean_t add,const uint8_t * mca)2735 rt2860_m_multicst(void *arg, boolean_t add, const uint8_t *mca)
2736 {
2737 	return (ENOTSUP);
2738 }
2739 
2740 /*ARGSUSED*/
2741 static int
rt2860_m_promisc(void * arg,boolean_t on)2742 rt2860_m_promisc(void *arg, boolean_t on)
2743 {
2744 	return (0);
2745 }
2746 
2747 static int
rt2860_m_stat(void * arg,uint_t stat,uint64_t * val)2748 rt2860_m_stat(void *arg, uint_t stat, uint64_t *val)
2749 {
2750 	struct rt2860_softc	*sc  = (struct rt2860_softc *)arg;
2751 	ieee80211com_t		*ic = &sc->sc_ic;
2752 	ieee80211_node_t	*ni = ic->ic_bss;
2753 	struct ieee80211_rateset *rs = &ni->in_rates;
2754 
2755 	RT2860_GLOCK(sc);
2756 	switch (stat) {
2757 	case MAC_STAT_IFSPEED:
2758 		*val = ((ic->ic_fixed_rate == IEEE80211_FIXED_RATE_NONE) ?
2759 		    (rs->ir_rates[ni->in_txrate] & IEEE80211_RATE_VAL)
2760 		    : ic->ic_fixed_rate) / 2 * 1000000;
2761 		break;
2762 	case MAC_STAT_NOXMTBUF:
2763 		*val = sc->sc_tx_nobuf;
2764 		break;
2765 	case MAC_STAT_NORCVBUF:
2766 		*val = sc->sc_rx_nobuf;
2767 		break;
2768 	case MAC_STAT_IERRORS:
2769 		*val = sc->sc_rx_err;
2770 		break;
2771 	case MAC_STAT_RBYTES:
2772 		*val = ic->ic_stats.is_rx_bytes;
2773 		break;
2774 	case MAC_STAT_IPACKETS:
2775 		*val = ic->ic_stats.is_rx_frags;
2776 		break;
2777 	case MAC_STAT_OBYTES:
2778 		*val = ic->ic_stats.is_tx_bytes;
2779 		break;
2780 	case MAC_STAT_OPACKETS:
2781 		*val = ic->ic_stats.is_tx_frags;
2782 		break;
2783 	case MAC_STAT_OERRORS:
2784 	case WIFI_STAT_TX_FAILED:
2785 		*val = sc->sc_tx_err;
2786 		break;
2787 	case WIFI_STAT_TX_RETRANS:
2788 		*val = sc->sc_tx_retries;
2789 		break;
2790 	case WIFI_STAT_FCS_ERRORS:
2791 	case WIFI_STAT_WEP_ERRORS:
2792 	case WIFI_STAT_TX_FRAGS:
2793 	case WIFI_STAT_MCAST_TX:
2794 	case WIFI_STAT_RTS_SUCCESS:
2795 	case WIFI_STAT_RTS_FAILURE:
2796 	case WIFI_STAT_ACK_FAILURE:
2797 	case WIFI_STAT_RX_FRAGS:
2798 	case WIFI_STAT_MCAST_RX:
2799 	case WIFI_STAT_RX_DUPS:
2800 		RT2860_GUNLOCK(sc);
2801 		return (ieee80211_stat(ic, stat, val));
2802 	default:
2803 		RT2860_GUNLOCK(sc);
2804 		return (ENOTSUP);
2805 	}
2806 	RT2860_GUNLOCK(sc);
2807 
2808 	return (0);
2809 }
2810 
2811 static int
rt2860_attach(dev_info_t * devinfo,ddi_attach_cmd_t cmd)2812 rt2860_attach(dev_info_t *devinfo, ddi_attach_cmd_t cmd)
2813 {
2814 	struct rt2860_softc	*sc;
2815 	struct ieee80211com	*ic;
2816 	int			i, err, qid, ntries, instance;
2817 	uint8_t			cachelsz;
2818 	uint16_t		command, vendor_id, device_id;
2819 	char			strbuf[32];
2820 	wifi_data_t		wd = { 0 };
2821 	mac_register_t		*macp;
2822 
2823 	switch (cmd) {
2824 	case DDI_ATTACH:
2825 		break;
2826 	case DDI_RESUME:
2827 		sc = ddi_get_soft_state(rt2860_soft_state_p,
2828 		    ddi_get_instance(devinfo));
2829 		ASSERT(sc != NULL);
2830 		RT2860_GLOCK(sc);
2831 		sc->sc_flags &= ~RT2860_F_SUSPEND;
2832 		RT2860_GUNLOCK(sc);
2833 		if (RT2860_IS_RUNNING(sc))
2834 			(void) rt2860_init(sc);
2835 		RWN_DEBUG(RT2860_DBG_RESUME, "rwn: rt2860_attach(): "
2836 		    "resume now\n");
2837 		return (DDI_SUCCESS);
2838 	default:
2839 		return (DDI_FAILURE);
2840 	}
2841 
2842 	instance = ddi_get_instance(devinfo);
2843 
2844 	err = ddi_soft_state_zalloc(rt2860_soft_state_p, instance);
2845 	if (err != DDI_SUCCESS) {
2846 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2847 		    "unable to alloc soft_state_p\n");
2848 		return (err);
2849 	}
2850 
2851 	sc = ddi_get_soft_state(rt2860_soft_state_p, instance);
2852 	ic = (ieee80211com_t *)&sc->sc_ic;
2853 	sc->sc_dev = devinfo;
2854 
2855 	/* pci configuration */
2856 	err = ddi_regs_map_setup(devinfo, 0, &sc->sc_cfg_base, 0, 0,
2857 	    &rwn_csr_accattr, &sc->sc_cfg_handle);
2858 	if (err != DDI_SUCCESS) {
2859 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2860 		    "ddi_regs_map_setup() failed");
2861 		goto fail1;
2862 	}
2863 
2864 	cachelsz = ddi_get8(sc->sc_cfg_handle,
2865 	    (uint8_t *)(sc->sc_cfg_base + PCI_CONF_CACHE_LINESZ));
2866 	if (cachelsz == 0)
2867 		cachelsz = 0x10;
2868 	sc->sc_cachelsz = cachelsz << 2;
2869 	sc->sc_dmabuf_size = roundup(IEEE80211_MAX_LEN, sc->sc_cachelsz);
2870 
2871 	vendor_id = ddi_get16(sc->sc_cfg_handle,
2872 	    (uint16_t *)((uintptr_t)(sc->sc_cfg_base) + PCI_CONF_VENID));
2873 	device_id = ddi_get16(sc->sc_cfg_handle,
2874 	    (uint16_t *)((uintptr_t)(sc->sc_cfg_base) + PCI_CONF_DEVID));
2875 	RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2876 	    "vendor 0x%x, device id 0x%x, cache size %d\n",
2877 	    vendor_id, device_id, cachelsz);
2878 
2879 	/*
2880 	 * Enable response to memory space accesses,
2881 	 * and enabe bus master.
2882 	 */
2883 	command = PCI_COMM_MAE | PCI_COMM_ME;
2884 	ddi_put16(sc->sc_cfg_handle,
2885 	    (uint16_t *)((uintptr_t)(sc->sc_cfg_base) + PCI_CONF_COMM),
2886 	    command);
2887 	ddi_put8(sc->sc_cfg_handle,
2888 	    (uint8_t *)(sc->sc_cfg_base + PCI_CONF_LATENCY_TIMER), 0xa8);
2889 	ddi_put8(sc->sc_cfg_handle,
2890 	    (uint8_t *)(sc->sc_cfg_base + PCI_CONF_ILINE), 0x10);
2891 
2892 	/* pci i/o space */
2893 	err = ddi_regs_map_setup(devinfo, 1,
2894 	    &sc->sc_io_base, 0, 0, &rwn_csr_accattr, &sc->sc_io_handle);
2895 	if (err != DDI_SUCCESS) {
2896 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2897 		    "ddi_regs_map_setup() failed");
2898 		goto fail2;
2899 	}
2900 	RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2901 	    "PCI configuration is done successfully\n");
2902 
2903 	sc->amrr.amrr_min_success_threshold =  1;
2904 	sc->amrr.amrr_max_success_threshold = 15;
2905 
2906 	/* wait for NIC to initialize */
2907 	for (ntries = 0; ntries < 100; ntries++) {
2908 		sc->mac_rev = RT2860_READ(sc, RT2860_ASIC_VER_ID);
2909 		if (sc->mac_rev != 0 && sc->mac_rev != 0xffffffff)
2910 			break;
2911 		DELAY(10);
2912 	}
2913 	if (ntries == 100) {
2914 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2915 		    "timeout waiting for NIC initialize\n");
2916 		return (DDI_FAILURE);
2917 	}
2918 
2919 	if ((sc->mac_rev >> 16) != 0x2860 &&
2920 	    (device_id == PRODUCT_RALINK_RT2890 ||
2921 	    device_id == PRODUCT_RALINK_RT2790 ||
2922 	    device_id == PRODUCT_AWT_RT2890))
2923 		sc->sc_flags |= RT2860_ADVANCED_PS;
2924 
2925 	/* retrieve RF rev. no and various other things from EEPROM */
2926 	(void) rt2860_read_eeprom(sc);
2927 	RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2928 	    "MAC/BBP RT%X (rev 0x%04X), RF %s (%dT%dR)\n",
2929 	    sc->mac_rev >> 16, sc->mac_rev & 0xffff,
2930 	    rt2860_get_rf(sc->rf_rev), sc->ntxchains, sc->nrxchains);
2931 
2932 	/*
2933 	 * Allocate Tx (4 EDCAs + HCCA + Mgt) and Rx rings.
2934 	 */
2935 	for (qid = 0; qid < 6; qid++) {
2936 		if ((err = rt2860_alloc_tx_ring(sc, &sc->txq[qid])) != 0) {
2937 			RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2938 			    "could not allocate Tx ring %d\n", qid);
2939 			goto fail3;
2940 		}
2941 	}
2942 
2943 	if ((err = rt2860_alloc_rx_ring(sc, &sc->rxq)) != 0) {
2944 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2945 		    "could not allocte Rx ring\n");
2946 		goto fail4;
2947 	}
2948 
2949 	if ((err = rt2860_alloc_tx_pool(sc)) != 0) {
2950 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
2951 		    "could not allocte Tx pool\n");
2952 		goto fail5;
2953 	}
2954 
2955 	mutex_init(&sc->sc_genlock, NULL, MUTEX_DRIVER, NULL);
2956 	mutex_init(&sc->sc_txlock, NULL, MUTEX_DRIVER, NULL);
2957 	mutex_init(&sc->sc_rxlock, NULL, MUTEX_DRIVER, NULL);
2958 
2959 	/* mgmt ring is broken on RT2860C, use EDCA AC VO ring instead */
2960 	sc->mgtqid = (sc->mac_rev == 0x28600100) ? EDCA_AC_VO : 5;
2961 	RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach():"
2962 	    "mgtqid = %x\n", sc->mgtqid);
2963 
2964 	ic->ic_phytype = IEEE80211_T_OFDM; /* not only, but not used */
2965 	ic->ic_opmode = IEEE80211_M_STA; /* default to BSS mode */
2966 	ic->ic_state = IEEE80211_S_INIT;
2967 
2968 	/* set device capabilities */
2969 	ic->ic_caps =
2970 	    IEEE80211_C_TXPMGT |	/* tx power management */
2971 	    IEEE80211_C_SHPREAMBLE |	/* short preamble supported */
2972 	    IEEE80211_C_SHSLOT;		/* short slot time supported */
2973 
2974 	/* WPA/WPA2 support */
2975 	ic->ic_caps |= IEEE80211_C_WPA; /* Support WPA/WPA2 */
2976 
2977 	/* set supported .11b and .11g rates */
2978 	ic->ic_sup_rates[IEEE80211_MODE_11B] = rt2860_rateset_11b;
2979 	ic->ic_sup_rates[IEEE80211_MODE_11G] = rt2860_rateset_11g;
2980 
2981 	/* set supported .11b and .11g channels (1 through 14) */
2982 	for (i = 1; i <= 14; i++) {
2983 		ic->ic_sup_channels[i].ich_freq =
2984 		    ieee80211_ieee2mhz(i, IEEE80211_CHAN_2GHZ);
2985 		ic->ic_sup_channels[i].ich_flags =
2986 		    IEEE80211_CHAN_CCK | IEEE80211_CHAN_OFDM |
2987 		    IEEE80211_CHAN_DYN | IEEE80211_CHAN_2GHZ;
2988 	}
2989 
2990 	ic->ic_maxrssi = 63;
2991 	ic->ic_xmit = rt2860_send;
2992 
2993 	ieee80211_attach(ic);
2994 
2995 	/* register WPA door */
2996 	ieee80211_register_door(ic, ddi_driver_name(devinfo),
2997 	    ddi_get_instance(devinfo));
2998 
2999 	/* override state transition machine */
3000 	sc->sc_newstate = ic->ic_newstate;
3001 	ic->ic_newstate = rt2860_newstate;
3002 	ieee80211_media_init(ic);
3003 	ic->ic_def_txkey = 0;
3004 
3005 	err = ddi_add_softintr(devinfo, DDI_SOFTINT_LOW,
3006 	    &sc->sc_softintr_hdl, NULL, 0, rt2860_softintr, (caddr_t)sc);
3007 	if (err != DDI_SUCCESS) {
3008 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
3009 		    "ddi_add_softintr() failed");
3010 		goto fail8;
3011 	}
3012 
3013 	err = ddi_get_iblock_cookie(devinfo, 0, &sc->sc_iblock);
3014 	if (err != DDI_SUCCESS) {
3015 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
3016 		    "Can not get iblock cookie for INT\n");
3017 		goto fail7;
3018 	}
3019 
3020 	err = ddi_add_intr(devinfo, 0, NULL, NULL, rt2860_intr, (caddr_t)sc);
3021 	if (err != DDI_SUCCESS) {
3022 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
3023 		    "unable to add device interrupt handler\n");
3024 		goto fail7;
3025 	}
3026 
3027 	/*
3028 	 * Provide initial settings for the WiFi plugin; whenever this
3029 	 * information changes, we need to call mac_plugindata_update()
3030 	 */
3031 	wd.wd_opmode = ic->ic_opmode;
3032 	wd.wd_secalloc = WIFI_SEC_NONE;
3033 	IEEE80211_ADDR_COPY(wd.wd_bssid, ic->ic_bss->in_bssid);
3034 
3035 	if ((macp = mac_alloc(MAC_VERSION)) == NULL) {
3036 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
3037 		    "MAC version mismatch\n");
3038 		goto fail9;
3039 	}
3040 
3041 	macp->m_type_ident	= MAC_PLUGIN_IDENT_WIFI;
3042 	macp->m_driver		= sc;
3043 	macp->m_dip		= devinfo;
3044 	macp->m_src_addr	= ic->ic_macaddr;
3045 	macp->m_callbacks	= &rt2860_m_callbacks;
3046 	macp->m_min_sdu		= 0;
3047 	macp->m_max_sdu		= IEEE80211_MTU;
3048 	macp->m_pdata		= &wd;
3049 	macp->m_pdata_size	= sizeof (wd);
3050 
3051 	err = mac_register(macp, &ic->ic_mach);
3052 	mac_free(macp);
3053 	if (err != 0) {
3054 		RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach(): "
3055 		    "mac_register err %x\n", err);
3056 		goto fail9;
3057 	}
3058 
3059 	/*
3060 	 * Create minor node of type DDI_NT_NET_WIFI
3061 	 */
3062 	(void) snprintf(strbuf, sizeof (strbuf), "%s%d",
3063 	    "rwn", instance);
3064 	err = ddi_create_minor_node(devinfo, strbuf, S_IFCHR,
3065 	    instance + 1, DDI_NT_NET_WIFI, 0);
3066 
3067 	/*
3068 	 * Notify link is down now
3069 	 */
3070 	mac_link_update(ic->ic_mach, LINK_STATE_DOWN);
3071 
3072 	sc->sc_flags &= ~RT2860_F_RUNNING;
3073 
3074 	RWN_DEBUG(RT2860_DBG_MSG, "rwn: rt2860_attach() successfully.\n");
3075 	return (DDI_SUCCESS);
3076 fail9:
3077 	ddi_remove_softintr(sc->sc_softintr_hdl);
3078 fail8:
3079 	ddi_remove_intr(devinfo, 0, sc->sc_iblock);
3080 fail7:
3081 	mutex_destroy(&sc->sc_genlock);
3082 	mutex_destroy(&sc->sc_txlock);
3083 	mutex_destroy(&sc->sc_rxlock);
3084 	rt2860_free_tx_pool(sc);
3085 fail5:
3086 	rt2860_free_rx_ring(sc, &sc->rxq);
3087 fail4:
3088 	while (--qid >= 0)
3089 		rt2860_free_tx_ring(sc, &sc->txq[qid]);
3090 fail3:
3091 	ddi_regs_map_free(&sc->sc_io_handle);
3092 fail2:
3093 	ddi_regs_map_free(&sc->sc_cfg_handle);
3094 fail1:
3095 	return (err);
3096 }
3097 
3098 static int
rt2860_detach(dev_info_t * devinfo,ddi_detach_cmd_t cmd)3099 rt2860_detach(dev_info_t *devinfo, ddi_detach_cmd_t cmd)
3100 {
3101 	struct rt2860_softc	*sc;
3102 	int			qid;
3103 
3104 	sc = ddi_get_soft_state(rt2860_soft_state_p, ddi_get_instance(devinfo));
3105 
3106 	switch (cmd) {
3107 	case DDI_DETACH:
3108 		break;
3109 	case DDI_SUSPEND:
3110 		if (RT2860_IS_RUNNING(sc))
3111 			rt2860_stop(sc);
3112 		RT2860_GLOCK(sc);
3113 		sc->sc_flags &= ~RT2860_FWLOADED;
3114 		sc->sc_flags |= RT2860_F_SUSPEND;
3115 		RT2860_GUNLOCK(sc);
3116 		RWN_DEBUG(RT2860_DBG_RESUME, "rwn: rt2860_detach(): "
3117 		    "suspend now\n");
3118 		return (DDI_SUCCESS);
3119 	default:
3120 		return (DDI_FAILURE);
3121 	}
3122 
3123 	if (mac_disable(sc->sc_ic.ic_mach) != 0)
3124 		return (DDI_FAILURE);
3125 
3126 	rt2860_stop(sc);
3127 
3128 	/*
3129 	 * Unregister from the MAC layer subsystem
3130 	 */
3131 	(void) mac_unregister(sc->sc_ic.ic_mach);
3132 
3133 	ddi_remove_intr(devinfo, 0, sc->sc_iblock);
3134 	ddi_remove_softintr(sc->sc_softintr_hdl);
3135 
3136 	/*
3137 	 * detach ieee80211 layer
3138 	 */
3139 	ieee80211_detach(&sc->sc_ic);
3140 
3141 	rt2860_free_tx_pool(sc);
3142 	rt2860_free_rx_ring(sc, &sc->rxq);
3143 	for (qid = 0; qid < 6; qid++)
3144 		rt2860_free_tx_ring(sc, &sc->txq[qid]);
3145 
3146 	ddi_regs_map_free(&sc->sc_io_handle);
3147 
3148 	mutex_destroy(&sc->sc_genlock);
3149 	mutex_destroy(&sc->sc_txlock);
3150 	mutex_destroy(&sc->sc_rxlock);
3151 
3152 	ddi_remove_minor_node(devinfo, NULL);
3153 	ddi_soft_state_free(rt2860_soft_state_p, ddi_get_instance(devinfo));
3154 
3155 	return (DDI_SUCCESS);
3156 }
3157 
3158 int
_info(struct modinfo * modinfop)3159 _info(struct modinfo *modinfop)
3160 {
3161 	return (mod_info(&modlinkage, modinfop));
3162 }
3163 
3164 int
_init(void)3165 _init(void)
3166 {
3167 	int status;
3168 
3169 	status = ddi_soft_state_init(&rt2860_soft_state_p,
3170 	    sizeof (struct rt2860_softc), 1);
3171 	if (status != 0)
3172 		return (status);
3173 
3174 	mac_init_ops(&rwn_dev_ops, "rwn");
3175 	status = mod_install(&modlinkage);
3176 	if (status != 0) {
3177 		mac_fini_ops(&rwn_dev_ops);
3178 		ddi_soft_state_fini(&rt2860_soft_state_p);
3179 	}
3180 	return (status);
3181 }
3182 
3183 int
_fini(void)3184 _fini(void)
3185 {
3186 	int status;
3187 
3188 	status = mod_remove(&modlinkage);
3189 	if (status == 0) {
3190 		mac_fini_ops(&rwn_dev_ops);
3191 		ddi_soft_state_fini(&rt2860_soft_state_p);
3192 	}
3193 	return (status);
3194 }
3195