xref: /linux/drivers/net/wireless/ti/wl1251/main.c (revision 4949009eb8d40a441dcddcd96e101e77d31cf1b2)
1 /*
2  * This file is part of wl1251
3  *
4  * Copyright (C) 2008-2009 Nokia Corporation
5  *
6  * This program is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU General Public License
8  * version 2 as published by the Free Software Foundation.
9  *
10  * This program is distributed in the hope that it will be useful, but
11  * WITHOUT ANY WARRANTY; without even the implied warranty of
12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
13  * General Public License for more details.
14  *
15  * You should have received a copy of the GNU General Public License
16  * along with this program; if not, write to the Free Software
17  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
18  * 02110-1301 USA
19  *
20  */
21 
22 #include <linux/module.h>
23 #include <linux/interrupt.h>
24 #include <linux/firmware.h>
25 #include <linux/delay.h>
26 #include <linux/irq.h>
27 #include <linux/crc32.h>
28 #include <linux/etherdevice.h>
29 #include <linux/vmalloc.h>
30 #include <linux/slab.h>
31 #include <linux/netdevice.h>
32 
33 #include "wl1251.h"
34 #include "wl12xx_80211.h"
35 #include "reg.h"
36 #include "io.h"
37 #include "cmd.h"
38 #include "event.h"
39 #include "tx.h"
40 #include "rx.h"
41 #include "ps.h"
42 #include "init.h"
43 #include "debugfs.h"
44 #include "boot.h"
45 
46 void wl1251_enable_interrupts(struct wl1251 *wl)
47 {
48 	wl->if_ops->enable_irq(wl);
49 }
50 
51 void wl1251_disable_interrupts(struct wl1251 *wl)
52 {
53 	wl->if_ops->disable_irq(wl);
54 }
55 
56 static int wl1251_power_off(struct wl1251 *wl)
57 {
58 	return wl->if_ops->power(wl, false);
59 }
60 
61 static int wl1251_power_on(struct wl1251 *wl)
62 {
63 	return wl->if_ops->power(wl, true);
64 }
65 
66 static int wl1251_fetch_firmware(struct wl1251 *wl)
67 {
68 	const struct firmware *fw;
69 	struct device *dev = wiphy_dev(wl->hw->wiphy);
70 	int ret;
71 
72 	ret = request_firmware(&fw, WL1251_FW_NAME, dev);
73 
74 	if (ret < 0) {
75 		wl1251_error("could not get firmware: %d", ret);
76 		return ret;
77 	}
78 
79 	if (fw->size % 4) {
80 		wl1251_error("firmware size is not multiple of 32 bits: %zu",
81 			     fw->size);
82 		ret = -EILSEQ;
83 		goto out;
84 	}
85 
86 	wl->fw_len = fw->size;
87 	wl->fw = vmalloc(wl->fw_len);
88 
89 	if (!wl->fw) {
90 		wl1251_error("could not allocate memory for the firmware");
91 		ret = -ENOMEM;
92 		goto out;
93 	}
94 
95 	memcpy(wl->fw, fw->data, wl->fw_len);
96 
97 	ret = 0;
98 
99 out:
100 	release_firmware(fw);
101 
102 	return ret;
103 }
104 
105 static int wl1251_fetch_nvs(struct wl1251 *wl)
106 {
107 	const struct firmware *fw;
108 	struct device *dev = wiphy_dev(wl->hw->wiphy);
109 	int ret;
110 
111 	ret = request_firmware(&fw, WL1251_NVS_NAME, dev);
112 
113 	if (ret < 0) {
114 		wl1251_error("could not get nvs file: %d", ret);
115 		return ret;
116 	}
117 
118 	if (fw->size % 4) {
119 		wl1251_error("nvs size is not multiple of 32 bits: %zu",
120 			     fw->size);
121 		ret = -EILSEQ;
122 		goto out;
123 	}
124 
125 	wl->nvs_len = fw->size;
126 	wl->nvs = kmemdup(fw->data, wl->nvs_len, GFP_KERNEL);
127 
128 	if (!wl->nvs) {
129 		wl1251_error("could not allocate memory for the nvs file");
130 		ret = -ENOMEM;
131 		goto out;
132 	}
133 
134 	ret = 0;
135 
136 out:
137 	release_firmware(fw);
138 
139 	return ret;
140 }
141 
142 static void wl1251_fw_wakeup(struct wl1251 *wl)
143 {
144 	u32 elp_reg;
145 
146 	elp_reg = ELPCTRL_WAKE_UP;
147 	wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, elp_reg);
148 	elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
149 
150 	if (!(elp_reg & ELPCTRL_WLAN_READY))
151 		wl1251_warning("WLAN not ready");
152 }
153 
154 static int wl1251_chip_wakeup(struct wl1251 *wl)
155 {
156 	int ret;
157 
158 	ret = wl1251_power_on(wl);
159 	if (ret < 0)
160 		return ret;
161 
162 	msleep(WL1251_POWER_ON_SLEEP);
163 	wl->if_ops->reset(wl);
164 
165 	/* We don't need a real memory partition here, because we only want
166 	 * to use the registers at this point. */
167 	wl1251_set_partition(wl,
168 			     0x00000000,
169 			     0x00000000,
170 			     REGISTERS_BASE,
171 			     REGISTERS_DOWN_SIZE);
172 
173 	/* ELP module wake up */
174 	wl1251_fw_wakeup(wl);
175 
176 	/* whal_FwCtrl_BootSm() */
177 
178 	/* 0. read chip id from CHIP_ID */
179 	wl->chip_id = wl1251_reg_read32(wl, CHIP_ID_B);
180 
181 	/* 1. check if chip id is valid */
182 
183 	switch (wl->chip_id) {
184 	case CHIP_ID_1251_PG12:
185 		wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG12)",
186 			     wl->chip_id);
187 		break;
188 	case CHIP_ID_1251_PG11:
189 		wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG11)",
190 			     wl->chip_id);
191 		break;
192 	case CHIP_ID_1251_PG10:
193 	default:
194 		wl1251_error("unsupported chip id: 0x%x", wl->chip_id);
195 		ret = -ENODEV;
196 		goto out;
197 	}
198 
199 	if (wl->fw == NULL) {
200 		ret = wl1251_fetch_firmware(wl);
201 		if (ret < 0)
202 			goto out;
203 	}
204 
205 	if (wl->nvs == NULL && !wl->use_eeprom) {
206 		/* No NVS from netlink, try to get it from the filesystem */
207 		ret = wl1251_fetch_nvs(wl);
208 		if (ret < 0)
209 			goto out;
210 	}
211 
212 out:
213 	return ret;
214 }
215 
216 #define WL1251_IRQ_LOOP_COUNT 10
217 static void wl1251_irq_work(struct work_struct *work)
218 {
219 	u32 intr, ctr = WL1251_IRQ_LOOP_COUNT;
220 	struct wl1251 *wl =
221 		container_of(work, struct wl1251, irq_work);
222 	int ret;
223 
224 	mutex_lock(&wl->mutex);
225 
226 	wl1251_debug(DEBUG_IRQ, "IRQ work");
227 
228 	if (wl->state == WL1251_STATE_OFF)
229 		goto out;
230 
231 	ret = wl1251_ps_elp_wakeup(wl);
232 	if (ret < 0)
233 		goto out;
234 
235 	wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, WL1251_ACX_INTR_ALL);
236 
237 	intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
238 	wl1251_debug(DEBUG_IRQ, "intr: 0x%x", intr);
239 
240 	do {
241 		if (wl->data_path) {
242 			wl->rx_counter = wl1251_mem_read32(
243 				wl, wl->data_path->rx_control_addr);
244 
245 			/* We handle a frmware bug here */
246 			switch ((wl->rx_counter - wl->rx_handled) & 0xf) {
247 			case 0:
248 				wl1251_debug(DEBUG_IRQ,
249 					     "RX: FW and host in sync");
250 				intr &= ~WL1251_ACX_INTR_RX0_DATA;
251 				intr &= ~WL1251_ACX_INTR_RX1_DATA;
252 				break;
253 			case 1:
254 				wl1251_debug(DEBUG_IRQ, "RX: FW +1");
255 				intr |= WL1251_ACX_INTR_RX0_DATA;
256 				intr &= ~WL1251_ACX_INTR_RX1_DATA;
257 				break;
258 			case 2:
259 				wl1251_debug(DEBUG_IRQ, "RX: FW +2");
260 				intr |= WL1251_ACX_INTR_RX0_DATA;
261 				intr |= WL1251_ACX_INTR_RX1_DATA;
262 				break;
263 			default:
264 				wl1251_warning(
265 					"RX: FW and host out of sync: %d",
266 					wl->rx_counter - wl->rx_handled);
267 				break;
268 			}
269 
270 			wl->rx_handled = wl->rx_counter;
271 
272 			wl1251_debug(DEBUG_IRQ, "RX counter: %d",
273 				     wl->rx_counter);
274 		}
275 
276 		intr &= wl->intr_mask;
277 
278 		if (intr == 0) {
279 			wl1251_debug(DEBUG_IRQ, "INTR is 0");
280 			goto out_sleep;
281 		}
282 
283 		if (intr & WL1251_ACX_INTR_RX0_DATA) {
284 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX0_DATA");
285 			wl1251_rx(wl);
286 		}
287 
288 		if (intr & WL1251_ACX_INTR_RX1_DATA) {
289 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX1_DATA");
290 			wl1251_rx(wl);
291 		}
292 
293 		if (intr & WL1251_ACX_INTR_TX_RESULT) {
294 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_TX_RESULT");
295 			wl1251_tx_complete(wl);
296 		}
297 
298 		if (intr & WL1251_ACX_INTR_EVENT_A) {
299 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_A");
300 			wl1251_event_handle(wl, 0);
301 		}
302 
303 		if (intr & WL1251_ACX_INTR_EVENT_B) {
304 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_B");
305 			wl1251_event_handle(wl, 1);
306 		}
307 
308 		if (intr & WL1251_ACX_INTR_INIT_COMPLETE)
309 			wl1251_debug(DEBUG_IRQ,
310 				     "WL1251_ACX_INTR_INIT_COMPLETE");
311 
312 		if (--ctr == 0)
313 			break;
314 
315 		intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
316 	} while (intr);
317 
318 out_sleep:
319 	wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, ~(wl->intr_mask));
320 	wl1251_ps_elp_sleep(wl);
321 
322 out:
323 	mutex_unlock(&wl->mutex);
324 }
325 
326 static int wl1251_join(struct wl1251 *wl, u8 bss_type, u8 channel,
327 		       u16 beacon_interval, u8 dtim_period)
328 {
329 	int ret;
330 
331 	ret = wl1251_acx_frame_rates(wl, DEFAULT_HW_GEN_TX_RATE,
332 				     DEFAULT_HW_GEN_MODULATION_TYPE,
333 				     wl->tx_mgmt_frm_rate,
334 				     wl->tx_mgmt_frm_mod);
335 	if (ret < 0)
336 		goto out;
337 
338 	/*
339 	 * Join command applies filters, and if we are not associated,
340 	 * BSSID filter must be disabled for association to work.
341 	 */
342 	if (is_zero_ether_addr(wl->bssid))
343 		wl->rx_config &= ~CFG_BSSID_FILTER_EN;
344 
345 	ret = wl1251_cmd_join(wl, bss_type, channel, beacon_interval,
346 			      dtim_period);
347 	if (ret < 0)
348 		goto out;
349 
350 	ret = wl1251_event_wait(wl, JOIN_EVENT_COMPLETE_ID, 100);
351 	if (ret < 0)
352 		wl1251_warning("join timeout");
353 
354 out:
355 	return ret;
356 }
357 
358 static void wl1251_op_tx(struct ieee80211_hw *hw,
359 			 struct ieee80211_tx_control *control,
360 			 struct sk_buff *skb)
361 {
362 	struct wl1251 *wl = hw->priv;
363 	unsigned long flags;
364 
365 	skb_queue_tail(&wl->tx_queue, skb);
366 
367 	/*
368 	 * The chip specific setup must run before the first TX packet -
369 	 * before that, the tx_work will not be initialized!
370 	 */
371 
372 	ieee80211_queue_work(wl->hw, &wl->tx_work);
373 
374 	/*
375 	 * The workqueue is slow to process the tx_queue and we need stop
376 	 * the queue here, otherwise the queue will get too long.
377 	 */
378 	if (skb_queue_len(&wl->tx_queue) >= WL1251_TX_QUEUE_HIGH_WATERMARK) {
379 		wl1251_debug(DEBUG_TX, "op_tx: tx_queue full, stop queues");
380 
381 		spin_lock_irqsave(&wl->wl_lock, flags);
382 		ieee80211_stop_queues(wl->hw);
383 		wl->tx_queue_stopped = true;
384 		spin_unlock_irqrestore(&wl->wl_lock, flags);
385 	}
386 }
387 
388 static int wl1251_op_start(struct ieee80211_hw *hw)
389 {
390 	struct wl1251 *wl = hw->priv;
391 	struct wiphy *wiphy = hw->wiphy;
392 	int ret = 0;
393 
394 	wl1251_debug(DEBUG_MAC80211, "mac80211 start");
395 
396 	mutex_lock(&wl->mutex);
397 
398 	if (wl->state != WL1251_STATE_OFF) {
399 		wl1251_error("cannot start because not in off state: %d",
400 			     wl->state);
401 		ret = -EBUSY;
402 		goto out;
403 	}
404 
405 	ret = wl1251_chip_wakeup(wl);
406 	if (ret < 0)
407 		goto out;
408 
409 	ret = wl1251_boot(wl);
410 	if (ret < 0)
411 		goto out;
412 
413 	ret = wl1251_hw_init(wl);
414 	if (ret < 0)
415 		goto out;
416 
417 	ret = wl1251_acx_station_id(wl);
418 	if (ret < 0)
419 		goto out;
420 
421 	wl->state = WL1251_STATE_ON;
422 
423 	wl1251_info("firmware booted (%s)", wl->fw_ver);
424 
425 	/* update hw/fw version info in wiphy struct */
426 	wiphy->hw_version = wl->chip_id;
427 	strncpy(wiphy->fw_version, wl->fw_ver, sizeof(wiphy->fw_version));
428 
429 out:
430 	if (ret < 0)
431 		wl1251_power_off(wl);
432 
433 	mutex_unlock(&wl->mutex);
434 
435 	return ret;
436 }
437 
438 static void wl1251_op_stop(struct ieee80211_hw *hw)
439 {
440 	struct wl1251 *wl = hw->priv;
441 
442 	wl1251_info("down");
443 
444 	wl1251_debug(DEBUG_MAC80211, "mac80211 stop");
445 
446 	mutex_lock(&wl->mutex);
447 
448 	WARN_ON(wl->state != WL1251_STATE_ON);
449 
450 	if (wl->scanning) {
451 		ieee80211_scan_completed(wl->hw, true);
452 		wl->scanning = false;
453 	}
454 
455 	wl->state = WL1251_STATE_OFF;
456 
457 	wl1251_disable_interrupts(wl);
458 
459 	mutex_unlock(&wl->mutex);
460 
461 	cancel_work_sync(&wl->irq_work);
462 	cancel_work_sync(&wl->tx_work);
463 	cancel_delayed_work_sync(&wl->elp_work);
464 
465 	mutex_lock(&wl->mutex);
466 
467 	/* let's notify MAC80211 about the remaining pending TX frames */
468 	wl1251_tx_flush(wl);
469 	wl1251_power_off(wl);
470 
471 	memset(wl->bssid, 0, ETH_ALEN);
472 	wl->listen_int = 1;
473 	wl->bss_type = MAX_BSS_TYPE;
474 
475 	wl->data_in_count = 0;
476 	wl->rx_counter = 0;
477 	wl->rx_handled = 0;
478 	wl->rx_current_buffer = 0;
479 	wl->rx_last_id = 0;
480 	wl->next_tx_complete = 0;
481 	wl->elp = false;
482 	wl->station_mode = STATION_ACTIVE_MODE;
483 	wl->psm_entry_retry = 0;
484 	wl->tx_queue_stopped = false;
485 	wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
486 	wl->rssi_thold = 0;
487 	wl->channel = WL1251_DEFAULT_CHANNEL;
488 	wl->monitor_present = false;
489 	wl->joined = false;
490 
491 	wl1251_debugfs_reset(wl);
492 
493 	mutex_unlock(&wl->mutex);
494 }
495 
496 static int wl1251_op_add_interface(struct ieee80211_hw *hw,
497 				   struct ieee80211_vif *vif)
498 {
499 	struct wl1251 *wl = hw->priv;
500 	int ret = 0;
501 
502 	vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER |
503 			     IEEE80211_VIF_SUPPORTS_CQM_RSSI;
504 
505 	wl1251_debug(DEBUG_MAC80211, "mac80211 add interface type %d mac %pM",
506 		     vif->type, vif->addr);
507 
508 	mutex_lock(&wl->mutex);
509 	if (wl->vif) {
510 		ret = -EBUSY;
511 		goto out;
512 	}
513 
514 	wl->vif = vif;
515 
516 	switch (vif->type) {
517 	case NL80211_IFTYPE_STATION:
518 		wl->bss_type = BSS_TYPE_STA_BSS;
519 		break;
520 	case NL80211_IFTYPE_ADHOC:
521 		wl->bss_type = BSS_TYPE_IBSS;
522 		break;
523 	default:
524 		ret = -EOPNOTSUPP;
525 		goto out;
526 	}
527 
528 	if (!ether_addr_equal_unaligned(wl->mac_addr, vif->addr)) {
529 		memcpy(wl->mac_addr, vif->addr, ETH_ALEN);
530 		SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
531 		ret = wl1251_acx_station_id(wl);
532 		if (ret < 0)
533 			goto out;
534 	}
535 
536 out:
537 	mutex_unlock(&wl->mutex);
538 	return ret;
539 }
540 
541 static void wl1251_op_remove_interface(struct ieee80211_hw *hw,
542 					 struct ieee80211_vif *vif)
543 {
544 	struct wl1251 *wl = hw->priv;
545 
546 	mutex_lock(&wl->mutex);
547 	wl1251_debug(DEBUG_MAC80211, "mac80211 remove interface");
548 	wl->vif = NULL;
549 	memset(wl->bssid, 0, ETH_ALEN);
550 	mutex_unlock(&wl->mutex);
551 }
552 
553 static int wl1251_build_null_data(struct wl1251 *wl)
554 {
555 	struct sk_buff *skb = NULL;
556 	int size;
557 	void *ptr;
558 	int ret = -ENOMEM;
559 
560 	if (wl->bss_type == BSS_TYPE_IBSS) {
561 		size = sizeof(struct wl12xx_null_data_template);
562 		ptr = NULL;
563 	} else {
564 		skb = ieee80211_nullfunc_get(wl->hw, wl->vif);
565 		if (!skb)
566 			goto out;
567 		size = skb->len;
568 		ptr = skb->data;
569 	}
570 
571 	ret = wl1251_cmd_template_set(wl, CMD_NULL_DATA, ptr, size);
572 
573 out:
574 	dev_kfree_skb(skb);
575 	if (ret)
576 		wl1251_warning("cmd buld null data failed: %d", ret);
577 
578 	return ret;
579 }
580 
581 static int wl1251_build_qos_null_data(struct wl1251 *wl)
582 {
583 	struct ieee80211_qos_hdr template;
584 
585 	memset(&template, 0, sizeof(template));
586 
587 	memcpy(template.addr1, wl->bssid, ETH_ALEN);
588 	memcpy(template.addr2, wl->mac_addr, ETH_ALEN);
589 	memcpy(template.addr3, wl->bssid, ETH_ALEN);
590 
591 	template.frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
592 					     IEEE80211_STYPE_QOS_NULLFUNC |
593 					     IEEE80211_FCTL_TODS);
594 
595 	/* FIXME: not sure what priority to use here */
596 	template.qos_ctrl = cpu_to_le16(0);
597 
598 	return wl1251_cmd_template_set(wl, CMD_QOS_NULL_DATA, &template,
599 				       sizeof(template));
600 }
601 
602 static bool wl1251_can_do_pm(struct ieee80211_conf *conf, struct wl1251 *wl)
603 {
604 	return (conf->flags & IEEE80211_CONF_PS) && !wl->monitor_present;
605 }
606 
607 static int wl1251_op_config(struct ieee80211_hw *hw, u32 changed)
608 {
609 	struct wl1251 *wl = hw->priv;
610 	struct ieee80211_conf *conf = &hw->conf;
611 	int channel, ret = 0;
612 
613 	channel = ieee80211_frequency_to_channel(
614 			conf->chandef.chan->center_freq);
615 
616 	wl1251_debug(DEBUG_MAC80211,
617 		     "mac80211 config ch %d monitor %s psm %s power %d",
618 		     channel,
619 		     conf->flags & IEEE80211_CONF_MONITOR ? "on" : "off",
620 		     conf->flags & IEEE80211_CONF_PS ? "on" : "off",
621 		     conf->power_level);
622 
623 	mutex_lock(&wl->mutex);
624 
625 	ret = wl1251_ps_elp_wakeup(wl);
626 	if (ret < 0)
627 		goto out;
628 
629 	if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
630 		u32 mode;
631 
632 		if (conf->flags & IEEE80211_CONF_MONITOR) {
633 			wl->monitor_present = true;
634 			mode = DF_SNIFF_MODE_ENABLE | DF_ENCRYPTION_DISABLE;
635 		} else {
636 			wl->monitor_present = false;
637 			mode = 0;
638 		}
639 
640 		ret = wl1251_acx_feature_cfg(wl, mode);
641 		if (ret < 0)
642 			goto out_sleep;
643 	}
644 
645 	if (channel != wl->channel) {
646 		wl->channel = channel;
647 
648 		/*
649 		 * Use ENABLE_RX command for channel switching when no
650 		 * interface is present (monitor mode only).
651 		 * This leaves the tx path disabled in firmware, whereas
652 		 * the usual JOIN command seems to transmit some frames
653 		 * at firmware level.
654 		 */
655 		if (wl->vif == NULL) {
656 			wl->joined = false;
657 			ret = wl1251_cmd_data_path_rx(wl, wl->channel, 1);
658 		} else {
659 			ret = wl1251_join(wl, wl->bss_type, wl->channel,
660 					  wl->beacon_int, wl->dtim_period);
661 		}
662 		if (ret < 0)
663 			goto out_sleep;
664 	}
665 
666 	if (wl1251_can_do_pm(conf, wl) && !wl->psm_requested) {
667 		wl1251_debug(DEBUG_PSM, "psm enabled");
668 
669 		wl->psm_requested = true;
670 
671 		wl->dtim_period = conf->ps_dtim_period;
672 
673 		ret = wl1251_acx_wr_tbtt_and_dtim(wl, wl->beacon_int,
674 						  wl->dtim_period);
675 
676 		/*
677 		 * mac80211 enables PSM only if we're already associated.
678 		 */
679 		ret = wl1251_ps_set_mode(wl, STATION_POWER_SAVE_MODE);
680 		if (ret < 0)
681 			goto out_sleep;
682 	} else if (!wl1251_can_do_pm(conf, wl) && wl->psm_requested) {
683 		wl1251_debug(DEBUG_PSM, "psm disabled");
684 
685 		wl->psm_requested = false;
686 
687 		if (wl->station_mode != STATION_ACTIVE_MODE) {
688 			ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
689 			if (ret < 0)
690 				goto out_sleep;
691 		}
692 	}
693 
694 	if (changed & IEEE80211_CONF_CHANGE_IDLE && !wl->scanning) {
695 		if (conf->flags & IEEE80211_CONF_IDLE) {
696 			ret = wl1251_ps_set_mode(wl, STATION_IDLE);
697 			if (ret < 0)
698 				goto out_sleep;
699 		} else {
700 			ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
701 			if (ret < 0)
702 				goto out_sleep;
703 			ret = wl1251_join(wl, wl->bss_type, wl->channel,
704 					  wl->beacon_int, wl->dtim_period);
705 			if (ret < 0)
706 				goto out_sleep;
707 		}
708 	}
709 
710 	if (conf->power_level != wl->power_level) {
711 		ret = wl1251_acx_tx_power(wl, conf->power_level);
712 		if (ret < 0)
713 			goto out_sleep;
714 
715 		wl->power_level = conf->power_level;
716 	}
717 
718 out_sleep:
719 	wl1251_ps_elp_sleep(wl);
720 
721 out:
722 	mutex_unlock(&wl->mutex);
723 
724 	return ret;
725 }
726 
727 struct wl1251_filter_params {
728 	bool enabled;
729 	int mc_list_length;
730 	u8 mc_list[ACX_MC_ADDRESS_GROUP_MAX][ETH_ALEN];
731 };
732 
733 static u64 wl1251_op_prepare_multicast(struct ieee80211_hw *hw,
734 				       struct netdev_hw_addr_list *mc_list)
735 {
736 	struct wl1251_filter_params *fp;
737 	struct netdev_hw_addr *ha;
738 	struct wl1251 *wl = hw->priv;
739 
740 	if (unlikely(wl->state == WL1251_STATE_OFF))
741 		return 0;
742 
743 	fp = kzalloc(sizeof(*fp), GFP_ATOMIC);
744 	if (!fp) {
745 		wl1251_error("Out of memory setting filters.");
746 		return 0;
747 	}
748 
749 	/* update multicast filtering parameters */
750 	fp->mc_list_length = 0;
751 	if (netdev_hw_addr_list_count(mc_list) > ACX_MC_ADDRESS_GROUP_MAX) {
752 		fp->enabled = false;
753 	} else {
754 		fp->enabled = true;
755 		netdev_hw_addr_list_for_each(ha, mc_list) {
756 			memcpy(fp->mc_list[fp->mc_list_length],
757 					ha->addr, ETH_ALEN);
758 			fp->mc_list_length++;
759 		}
760 	}
761 
762 	return (u64)(unsigned long)fp;
763 }
764 
765 #define WL1251_SUPPORTED_FILTERS (FIF_PROMISC_IN_BSS | \
766 				  FIF_ALLMULTI | \
767 				  FIF_FCSFAIL | \
768 				  FIF_BCN_PRBRESP_PROMISC | \
769 				  FIF_CONTROL | \
770 				  FIF_OTHER_BSS | \
771 				  FIF_PROBE_REQ)
772 
773 static void wl1251_op_configure_filter(struct ieee80211_hw *hw,
774 				       unsigned int changed,
775 				       unsigned int *total, u64 multicast)
776 {
777 	struct wl1251_filter_params *fp = (void *)(unsigned long)multicast;
778 	struct wl1251 *wl = hw->priv;
779 	int ret;
780 
781 	wl1251_debug(DEBUG_MAC80211, "mac80211 configure filter");
782 
783 	*total &= WL1251_SUPPORTED_FILTERS;
784 	changed &= WL1251_SUPPORTED_FILTERS;
785 
786 	if (changed == 0) {
787 		/* no filters which we support changed */
788 		kfree(fp);
789 		return;
790 	}
791 
792 	mutex_lock(&wl->mutex);
793 
794 	wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
795 	wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
796 
797 	if (*total & FIF_PROMISC_IN_BSS) {
798 		wl->rx_config |= CFG_BSSID_FILTER_EN;
799 		wl->rx_config |= CFG_RX_ALL_GOOD;
800 	}
801 	if (*total & FIF_ALLMULTI)
802 		/*
803 		 * CFG_MC_FILTER_EN in rx_config needs to be 0 to receive
804 		 * all multicast frames
805 		 */
806 		wl->rx_config &= ~CFG_MC_FILTER_EN;
807 	if (*total & FIF_FCSFAIL)
808 		wl->rx_filter |= CFG_RX_FCS_ERROR;
809 	if (*total & FIF_BCN_PRBRESP_PROMISC) {
810 		wl->rx_config &= ~CFG_BSSID_FILTER_EN;
811 		wl->rx_config &= ~CFG_SSID_FILTER_EN;
812 	}
813 	if (*total & FIF_CONTROL)
814 		wl->rx_filter |= CFG_RX_CTL_EN;
815 	if (*total & FIF_OTHER_BSS || is_zero_ether_addr(wl->bssid))
816 		wl->rx_config &= ~CFG_BSSID_FILTER_EN;
817 	if (*total & FIF_PROBE_REQ)
818 		wl->rx_filter |= CFG_RX_PREQ_EN;
819 
820 	if (wl->state == WL1251_STATE_OFF)
821 		goto out;
822 
823 	ret = wl1251_ps_elp_wakeup(wl);
824 	if (ret < 0)
825 		goto out;
826 
827 	if (*total & FIF_ALLMULTI || *total & FIF_PROMISC_IN_BSS)
828 		ret = wl1251_acx_group_address_tbl(wl, false, NULL, 0);
829 	else if (fp)
830 		ret = wl1251_acx_group_address_tbl(wl, fp->enabled,
831 						   fp->mc_list,
832 						   fp->mc_list_length);
833 	if (ret < 0)
834 		goto out;
835 
836 	/* send filters to firmware */
837 	wl1251_acx_rx_config(wl, wl->rx_config, wl->rx_filter);
838 
839 	wl1251_ps_elp_sleep(wl);
840 
841 out:
842 	mutex_unlock(&wl->mutex);
843 	kfree(fp);
844 }
845 
846 /* HW encryption */
847 static int wl1251_set_key_type(struct wl1251 *wl,
848 			       struct wl1251_cmd_set_keys *key,
849 			       enum set_key_cmd cmd,
850 			       struct ieee80211_key_conf *mac80211_key,
851 			       const u8 *addr)
852 {
853 	switch (mac80211_key->cipher) {
854 	case WLAN_CIPHER_SUITE_WEP40:
855 	case WLAN_CIPHER_SUITE_WEP104:
856 		if (is_broadcast_ether_addr(addr))
857 			key->key_type = KEY_WEP_DEFAULT;
858 		else
859 			key->key_type = KEY_WEP_ADDR;
860 
861 		mac80211_key->hw_key_idx = mac80211_key->keyidx;
862 		break;
863 	case WLAN_CIPHER_SUITE_TKIP:
864 		if (is_broadcast_ether_addr(addr))
865 			key->key_type = KEY_TKIP_MIC_GROUP;
866 		else
867 			key->key_type = KEY_TKIP_MIC_PAIRWISE;
868 
869 		mac80211_key->hw_key_idx = mac80211_key->keyidx;
870 		break;
871 	case WLAN_CIPHER_SUITE_CCMP:
872 		if (is_broadcast_ether_addr(addr))
873 			key->key_type = KEY_AES_GROUP;
874 		else
875 			key->key_type = KEY_AES_PAIRWISE;
876 		mac80211_key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
877 		break;
878 	default:
879 		wl1251_error("Unknown key cipher 0x%x", mac80211_key->cipher);
880 		return -EOPNOTSUPP;
881 	}
882 
883 	return 0;
884 }
885 
886 static int wl1251_op_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
887 			     struct ieee80211_vif *vif,
888 			     struct ieee80211_sta *sta,
889 			     struct ieee80211_key_conf *key)
890 {
891 	struct wl1251 *wl = hw->priv;
892 	struct wl1251_cmd_set_keys *wl_cmd;
893 	const u8 *addr;
894 	int ret;
895 
896 	static const u8 bcast_addr[ETH_ALEN] =
897 		{ 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
898 
899 	wl1251_debug(DEBUG_MAC80211, "mac80211 set key");
900 
901 	wl_cmd = kzalloc(sizeof(*wl_cmd), GFP_KERNEL);
902 	if (!wl_cmd) {
903 		ret = -ENOMEM;
904 		goto out;
905 	}
906 
907 	addr = sta ? sta->addr : bcast_addr;
908 
909 	wl1251_debug(DEBUG_CRYPT, "CMD: 0x%x", cmd);
910 	wl1251_dump(DEBUG_CRYPT, "ADDR: ", addr, ETH_ALEN);
911 	wl1251_debug(DEBUG_CRYPT, "Key: algo:0x%x, id:%d, len:%d flags 0x%x",
912 		     key->cipher, key->keyidx, key->keylen, key->flags);
913 	wl1251_dump(DEBUG_CRYPT, "KEY: ", key->key, key->keylen);
914 
915 	if (is_zero_ether_addr(addr)) {
916 		/* We dont support TX only encryption */
917 		ret = -EOPNOTSUPP;
918 		goto out;
919 	}
920 
921 	mutex_lock(&wl->mutex);
922 
923 	switch (cmd) {
924 	case SET_KEY:
925 		if (wl->monitor_present) {
926 			ret = -EOPNOTSUPP;
927 			goto out_unlock;
928 		}
929 		wl_cmd->key_action = KEY_ADD_OR_REPLACE;
930 		break;
931 	case DISABLE_KEY:
932 		wl_cmd->key_action = KEY_REMOVE;
933 		break;
934 	default:
935 		wl1251_error("Unsupported key cmd 0x%x", cmd);
936 		break;
937 	}
938 
939 	ret = wl1251_ps_elp_wakeup(wl);
940 	if (ret < 0)
941 		goto out_unlock;
942 
943 	ret = wl1251_set_key_type(wl, wl_cmd, cmd, key, addr);
944 	if (ret < 0) {
945 		wl1251_error("Set KEY type failed");
946 		goto out_sleep;
947 	}
948 
949 	if (wl_cmd->key_type != KEY_WEP_DEFAULT)
950 		memcpy(wl_cmd->addr, addr, ETH_ALEN);
951 
952 	if ((wl_cmd->key_type == KEY_TKIP_MIC_GROUP) ||
953 	    (wl_cmd->key_type == KEY_TKIP_MIC_PAIRWISE)) {
954 		/*
955 		 * We get the key in the following form:
956 		 * TKIP (16 bytes) - TX MIC (8 bytes) - RX MIC (8 bytes)
957 		 * but the target is expecting:
958 		 * TKIP - RX MIC - TX MIC
959 		 */
960 		memcpy(wl_cmd->key, key->key, 16);
961 		memcpy(wl_cmd->key + 16, key->key + 24, 8);
962 		memcpy(wl_cmd->key + 24, key->key + 16, 8);
963 
964 	} else {
965 		memcpy(wl_cmd->key, key->key, key->keylen);
966 	}
967 	wl_cmd->key_size = key->keylen;
968 
969 	wl_cmd->id = key->keyidx;
970 	wl_cmd->ssid_profile = 0;
971 
972 	wl1251_dump(DEBUG_CRYPT, "TARGET KEY: ", wl_cmd, sizeof(*wl_cmd));
973 
974 	ret = wl1251_cmd_send(wl, CMD_SET_KEYS, wl_cmd, sizeof(*wl_cmd));
975 	if (ret < 0) {
976 		wl1251_warning("could not set keys");
977 		goto out_sleep;
978 	}
979 
980 out_sleep:
981 	wl1251_ps_elp_sleep(wl);
982 
983 out_unlock:
984 	mutex_unlock(&wl->mutex);
985 
986 out:
987 	kfree(wl_cmd);
988 
989 	return ret;
990 }
991 
992 static int wl1251_op_hw_scan(struct ieee80211_hw *hw,
993 			     struct ieee80211_vif *vif,
994 			     struct ieee80211_scan_request *hw_req)
995 {
996 	struct cfg80211_scan_request *req = &hw_req->req;
997 	struct wl1251 *wl = hw->priv;
998 	struct sk_buff *skb;
999 	size_t ssid_len = 0;
1000 	u8 *ssid = NULL;
1001 	int ret;
1002 
1003 	wl1251_debug(DEBUG_MAC80211, "mac80211 hw scan");
1004 
1005 	if (req->n_ssids) {
1006 		ssid = req->ssids[0].ssid;
1007 		ssid_len = req->ssids[0].ssid_len;
1008 	}
1009 
1010 	mutex_lock(&wl->mutex);
1011 
1012 	if (wl->scanning) {
1013 		wl1251_debug(DEBUG_SCAN, "scan already in progress");
1014 		ret = -EINVAL;
1015 		goto out;
1016 	}
1017 
1018 	ret = wl1251_ps_elp_wakeup(wl);
1019 	if (ret < 0)
1020 		goto out;
1021 
1022 	if (hw->conf.flags & IEEE80211_CONF_IDLE) {
1023 		ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
1024 		if (ret < 0)
1025 			goto out_sleep;
1026 		ret = wl1251_join(wl, wl->bss_type, wl->channel,
1027 				  wl->beacon_int, wl->dtim_period);
1028 		if (ret < 0)
1029 			goto out_sleep;
1030 	}
1031 
1032 	skb = ieee80211_probereq_get(wl->hw, wl->vif->addr, ssid, ssid_len,
1033 				     req->ie_len);
1034 	if (!skb) {
1035 		ret = -ENOMEM;
1036 		goto out_idle;
1037 	}
1038 	if (req->ie_len)
1039 		memcpy(skb_put(skb, req->ie_len), req->ie, req->ie_len);
1040 
1041 	ret = wl1251_cmd_template_set(wl, CMD_PROBE_REQ, skb->data,
1042 				      skb->len);
1043 	dev_kfree_skb(skb);
1044 	if (ret < 0)
1045 		goto out_idle;
1046 
1047 	ret = wl1251_cmd_trigger_scan_to(wl, 0);
1048 	if (ret < 0)
1049 		goto out_idle;
1050 
1051 	wl->scanning = true;
1052 
1053 	ret = wl1251_cmd_scan(wl, ssid, ssid_len, req->channels,
1054 			      req->n_channels, WL1251_SCAN_NUM_PROBES);
1055 	if (ret < 0) {
1056 		wl1251_debug(DEBUG_SCAN, "scan failed %d", ret);
1057 		wl->scanning = false;
1058 		goto out_idle;
1059 	}
1060 	goto out_sleep;
1061 
1062 out_idle:
1063 	if (hw->conf.flags & IEEE80211_CONF_IDLE)
1064 		ret = wl1251_ps_set_mode(wl, STATION_IDLE);
1065 out_sleep:
1066 	wl1251_ps_elp_sleep(wl);
1067 
1068 out:
1069 	mutex_unlock(&wl->mutex);
1070 
1071 	return ret;
1072 }
1073 
1074 static int wl1251_op_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1075 {
1076 	struct wl1251 *wl = hw->priv;
1077 	int ret;
1078 
1079 	mutex_lock(&wl->mutex);
1080 
1081 	ret = wl1251_ps_elp_wakeup(wl);
1082 	if (ret < 0)
1083 		goto out;
1084 
1085 	ret = wl1251_acx_rts_threshold(wl, (u16) value);
1086 	if (ret < 0)
1087 		wl1251_warning("wl1251_op_set_rts_threshold failed: %d", ret);
1088 
1089 	wl1251_ps_elp_sleep(wl);
1090 
1091 out:
1092 	mutex_unlock(&wl->mutex);
1093 
1094 	return ret;
1095 }
1096 
1097 static void wl1251_op_bss_info_changed(struct ieee80211_hw *hw,
1098 				       struct ieee80211_vif *vif,
1099 				       struct ieee80211_bss_conf *bss_conf,
1100 				       u32 changed)
1101 {
1102 	struct wl1251 *wl = hw->priv;
1103 	struct sk_buff *beacon, *skb;
1104 	bool enable;
1105 	int ret;
1106 
1107 	wl1251_debug(DEBUG_MAC80211, "mac80211 bss info changed");
1108 
1109 	mutex_lock(&wl->mutex);
1110 
1111 	ret = wl1251_ps_elp_wakeup(wl);
1112 	if (ret < 0)
1113 		goto out;
1114 
1115 	if (changed & BSS_CHANGED_CQM) {
1116 		ret = wl1251_acx_low_rssi(wl, bss_conf->cqm_rssi_thold,
1117 					  WL1251_DEFAULT_LOW_RSSI_WEIGHT,
1118 					  WL1251_DEFAULT_LOW_RSSI_DEPTH,
1119 					  WL1251_ACX_LOW_RSSI_TYPE_EDGE);
1120 		if (ret < 0)
1121 			goto out;
1122 		wl->rssi_thold = bss_conf->cqm_rssi_thold;
1123 	}
1124 
1125 	if ((changed & BSS_CHANGED_BSSID) &&
1126 	    memcmp(wl->bssid, bss_conf->bssid, ETH_ALEN)) {
1127 		memcpy(wl->bssid, bss_conf->bssid, ETH_ALEN);
1128 
1129 		if (!is_zero_ether_addr(wl->bssid)) {
1130 			ret = wl1251_build_null_data(wl);
1131 			if (ret < 0)
1132 				goto out_sleep;
1133 
1134 			ret = wl1251_build_qos_null_data(wl);
1135 			if (ret < 0)
1136 				goto out_sleep;
1137 
1138 			ret = wl1251_join(wl, wl->bss_type, wl->channel,
1139 					  wl->beacon_int, wl->dtim_period);
1140 			if (ret < 0)
1141 				goto out_sleep;
1142 		}
1143 	}
1144 
1145 	if (changed & BSS_CHANGED_ASSOC) {
1146 		if (bss_conf->assoc) {
1147 			wl->beacon_int = bss_conf->beacon_int;
1148 
1149 			skb = ieee80211_pspoll_get(wl->hw, wl->vif);
1150 			if (!skb)
1151 				goto out_sleep;
1152 
1153 			ret = wl1251_cmd_template_set(wl, CMD_PS_POLL,
1154 						      skb->data,
1155 						      skb->len);
1156 			dev_kfree_skb(skb);
1157 			if (ret < 0)
1158 				goto out_sleep;
1159 
1160 			ret = wl1251_acx_aid(wl, bss_conf->aid);
1161 			if (ret < 0)
1162 				goto out_sleep;
1163 		} else {
1164 			/* use defaults when not associated */
1165 			wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1166 			wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1167 		}
1168 	}
1169 	if (changed & BSS_CHANGED_ERP_SLOT) {
1170 		if (bss_conf->use_short_slot)
1171 			ret = wl1251_acx_slot(wl, SLOT_TIME_SHORT);
1172 		else
1173 			ret = wl1251_acx_slot(wl, SLOT_TIME_LONG);
1174 		if (ret < 0) {
1175 			wl1251_warning("Set slot time failed %d", ret);
1176 			goto out_sleep;
1177 		}
1178 	}
1179 
1180 	if (changed & BSS_CHANGED_ERP_PREAMBLE) {
1181 		if (bss_conf->use_short_preamble)
1182 			wl1251_acx_set_preamble(wl, ACX_PREAMBLE_SHORT);
1183 		else
1184 			wl1251_acx_set_preamble(wl, ACX_PREAMBLE_LONG);
1185 	}
1186 
1187 	if (changed & BSS_CHANGED_ERP_CTS_PROT) {
1188 		if (bss_conf->use_cts_prot)
1189 			ret = wl1251_acx_cts_protect(wl, CTSPROTECT_ENABLE);
1190 		else
1191 			ret = wl1251_acx_cts_protect(wl, CTSPROTECT_DISABLE);
1192 		if (ret < 0) {
1193 			wl1251_warning("Set ctsprotect failed %d", ret);
1194 			goto out_sleep;
1195 		}
1196 	}
1197 
1198 	if (changed & BSS_CHANGED_ARP_FILTER) {
1199 		__be32 addr = bss_conf->arp_addr_list[0];
1200 		WARN_ON(wl->bss_type != BSS_TYPE_STA_BSS);
1201 
1202 		enable = bss_conf->arp_addr_cnt == 1 && bss_conf->assoc;
1203 		wl1251_acx_arp_ip_filter(wl, enable, addr);
1204 
1205 		if (ret < 0)
1206 			goto out_sleep;
1207 	}
1208 
1209 	if (changed & BSS_CHANGED_BEACON) {
1210 		beacon = ieee80211_beacon_get(hw, vif);
1211 		if (!beacon)
1212 			goto out_sleep;
1213 
1214 		ret = wl1251_cmd_template_set(wl, CMD_BEACON, beacon->data,
1215 					      beacon->len);
1216 
1217 		if (ret < 0) {
1218 			dev_kfree_skb(beacon);
1219 			goto out_sleep;
1220 		}
1221 
1222 		ret = wl1251_cmd_template_set(wl, CMD_PROBE_RESP, beacon->data,
1223 					      beacon->len);
1224 
1225 		dev_kfree_skb(beacon);
1226 
1227 		if (ret < 0)
1228 			goto out_sleep;
1229 
1230 		ret = wl1251_join(wl, wl->bss_type, wl->channel,
1231 				  wl->beacon_int, wl->dtim_period);
1232 
1233 		if (ret < 0)
1234 			goto out_sleep;
1235 	}
1236 
1237 out_sleep:
1238 	wl1251_ps_elp_sleep(wl);
1239 
1240 out:
1241 	mutex_unlock(&wl->mutex);
1242 }
1243 
1244 
1245 /* can't be const, mac80211 writes to this */
1246 static struct ieee80211_rate wl1251_rates[] = {
1247 	{ .bitrate = 10,
1248 	  .hw_value = 0x1,
1249 	  .hw_value_short = 0x1, },
1250 	{ .bitrate = 20,
1251 	  .hw_value = 0x2,
1252 	  .hw_value_short = 0x2,
1253 	  .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1254 	{ .bitrate = 55,
1255 	  .hw_value = 0x4,
1256 	  .hw_value_short = 0x4,
1257 	  .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1258 	{ .bitrate = 110,
1259 	  .hw_value = 0x20,
1260 	  .hw_value_short = 0x20,
1261 	  .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1262 	{ .bitrate = 60,
1263 	  .hw_value = 0x8,
1264 	  .hw_value_short = 0x8, },
1265 	{ .bitrate = 90,
1266 	  .hw_value = 0x10,
1267 	  .hw_value_short = 0x10, },
1268 	{ .bitrate = 120,
1269 	  .hw_value = 0x40,
1270 	  .hw_value_short = 0x40, },
1271 	{ .bitrate = 180,
1272 	  .hw_value = 0x80,
1273 	  .hw_value_short = 0x80, },
1274 	{ .bitrate = 240,
1275 	  .hw_value = 0x200,
1276 	  .hw_value_short = 0x200, },
1277 	{ .bitrate = 360,
1278 	 .hw_value = 0x400,
1279 	 .hw_value_short = 0x400, },
1280 	{ .bitrate = 480,
1281 	  .hw_value = 0x800,
1282 	  .hw_value_short = 0x800, },
1283 	{ .bitrate = 540,
1284 	  .hw_value = 0x1000,
1285 	  .hw_value_short = 0x1000, },
1286 };
1287 
1288 /* can't be const, mac80211 writes to this */
1289 static struct ieee80211_channel wl1251_channels[] = {
1290 	{ .hw_value = 1, .center_freq = 2412},
1291 	{ .hw_value = 2, .center_freq = 2417},
1292 	{ .hw_value = 3, .center_freq = 2422},
1293 	{ .hw_value = 4, .center_freq = 2427},
1294 	{ .hw_value = 5, .center_freq = 2432},
1295 	{ .hw_value = 6, .center_freq = 2437},
1296 	{ .hw_value = 7, .center_freq = 2442},
1297 	{ .hw_value = 8, .center_freq = 2447},
1298 	{ .hw_value = 9, .center_freq = 2452},
1299 	{ .hw_value = 10, .center_freq = 2457},
1300 	{ .hw_value = 11, .center_freq = 2462},
1301 	{ .hw_value = 12, .center_freq = 2467},
1302 	{ .hw_value = 13, .center_freq = 2472},
1303 };
1304 
1305 static int wl1251_op_conf_tx(struct ieee80211_hw *hw,
1306 			     struct ieee80211_vif *vif, u16 queue,
1307 			     const struct ieee80211_tx_queue_params *params)
1308 {
1309 	enum wl1251_acx_ps_scheme ps_scheme;
1310 	struct wl1251 *wl = hw->priv;
1311 	int ret;
1312 
1313 	mutex_lock(&wl->mutex);
1314 
1315 	wl1251_debug(DEBUG_MAC80211, "mac80211 conf tx %d", queue);
1316 
1317 	ret = wl1251_ps_elp_wakeup(wl);
1318 	if (ret < 0)
1319 		goto out;
1320 
1321 	/* mac80211 uses units of 32 usec */
1322 	ret = wl1251_acx_ac_cfg(wl, wl1251_tx_get_queue(queue),
1323 				params->cw_min, params->cw_max,
1324 				params->aifs, params->txop * 32);
1325 	if (ret < 0)
1326 		goto out_sleep;
1327 
1328 	if (params->uapsd)
1329 		ps_scheme = WL1251_ACX_PS_SCHEME_UPSD_TRIGGER;
1330 	else
1331 		ps_scheme = WL1251_ACX_PS_SCHEME_LEGACY;
1332 
1333 	ret = wl1251_acx_tid_cfg(wl, wl1251_tx_get_queue(queue),
1334 				 CHANNEL_TYPE_EDCF,
1335 				 wl1251_tx_get_queue(queue), ps_scheme,
1336 				 WL1251_ACX_ACK_POLICY_LEGACY);
1337 	if (ret < 0)
1338 		goto out_sleep;
1339 
1340 out_sleep:
1341 	wl1251_ps_elp_sleep(wl);
1342 
1343 out:
1344 	mutex_unlock(&wl->mutex);
1345 
1346 	return ret;
1347 }
1348 
1349 static int wl1251_op_get_survey(struct ieee80211_hw *hw, int idx,
1350 				struct survey_info *survey)
1351 {
1352 	struct wl1251 *wl = hw->priv;
1353 	struct ieee80211_conf *conf = &hw->conf;
1354 
1355 	if (idx != 0)
1356 		return -ENOENT;
1357 
1358 	survey->channel = conf->chandef.chan;
1359 	survey->filled = SURVEY_INFO_NOISE_DBM;
1360 	survey->noise = wl->noise;
1361 
1362 	return 0;
1363 }
1364 
1365 /* can't be const, mac80211 writes to this */
1366 static struct ieee80211_supported_band wl1251_band_2ghz = {
1367 	.channels = wl1251_channels,
1368 	.n_channels = ARRAY_SIZE(wl1251_channels),
1369 	.bitrates = wl1251_rates,
1370 	.n_bitrates = ARRAY_SIZE(wl1251_rates),
1371 };
1372 
1373 static const struct ieee80211_ops wl1251_ops = {
1374 	.start = wl1251_op_start,
1375 	.stop = wl1251_op_stop,
1376 	.add_interface = wl1251_op_add_interface,
1377 	.remove_interface = wl1251_op_remove_interface,
1378 	.config = wl1251_op_config,
1379 	.prepare_multicast = wl1251_op_prepare_multicast,
1380 	.configure_filter = wl1251_op_configure_filter,
1381 	.tx = wl1251_op_tx,
1382 	.set_key = wl1251_op_set_key,
1383 	.hw_scan = wl1251_op_hw_scan,
1384 	.bss_info_changed = wl1251_op_bss_info_changed,
1385 	.set_rts_threshold = wl1251_op_set_rts_threshold,
1386 	.conf_tx = wl1251_op_conf_tx,
1387 	.get_survey = wl1251_op_get_survey,
1388 };
1389 
1390 static int wl1251_read_eeprom_byte(struct wl1251 *wl, off_t offset, u8 *data)
1391 {
1392 	unsigned long timeout;
1393 
1394 	wl1251_reg_write32(wl, EE_ADDR, offset);
1395 	wl1251_reg_write32(wl, EE_CTL, EE_CTL_READ);
1396 
1397 	/* EE_CTL_READ clears when data is ready */
1398 	timeout = jiffies + msecs_to_jiffies(100);
1399 	while (1) {
1400 		if (!(wl1251_reg_read32(wl, EE_CTL) & EE_CTL_READ))
1401 			break;
1402 
1403 		if (time_after(jiffies, timeout))
1404 			return -ETIMEDOUT;
1405 
1406 		msleep(1);
1407 	}
1408 
1409 	*data = wl1251_reg_read32(wl, EE_DATA);
1410 	return 0;
1411 }
1412 
1413 static int wl1251_read_eeprom(struct wl1251 *wl, off_t offset,
1414 			      u8 *data, size_t len)
1415 {
1416 	size_t i;
1417 	int ret;
1418 
1419 	wl1251_reg_write32(wl, EE_START, 0);
1420 
1421 	for (i = 0; i < len; i++) {
1422 		ret = wl1251_read_eeprom_byte(wl, offset + i, &data[i]);
1423 		if (ret < 0)
1424 			return ret;
1425 	}
1426 
1427 	return 0;
1428 }
1429 
1430 static int wl1251_read_eeprom_mac(struct wl1251 *wl)
1431 {
1432 	u8 mac[ETH_ALEN];
1433 	int i, ret;
1434 
1435 	wl1251_set_partition(wl, 0, 0, REGISTERS_BASE, REGISTERS_DOWN_SIZE);
1436 
1437 	ret = wl1251_read_eeprom(wl, 0x1c, mac, sizeof(mac));
1438 	if (ret < 0) {
1439 		wl1251_warning("failed to read MAC address from EEPROM");
1440 		return ret;
1441 	}
1442 
1443 	/* MAC is stored in reverse order */
1444 	for (i = 0; i < ETH_ALEN; i++)
1445 		wl->mac_addr[i] = mac[ETH_ALEN - i - 1];
1446 
1447 	return 0;
1448 }
1449 
1450 static int wl1251_register_hw(struct wl1251 *wl)
1451 {
1452 	int ret;
1453 
1454 	if (wl->mac80211_registered)
1455 		return 0;
1456 
1457 	SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
1458 
1459 	ret = ieee80211_register_hw(wl->hw);
1460 	if (ret < 0) {
1461 		wl1251_error("unable to register mac80211 hw: %d", ret);
1462 		return ret;
1463 	}
1464 
1465 	wl->mac80211_registered = true;
1466 
1467 	wl1251_notice("loaded");
1468 
1469 	return 0;
1470 }
1471 
1472 int wl1251_init_ieee80211(struct wl1251 *wl)
1473 {
1474 	int ret;
1475 
1476 	/* The tx descriptor buffer and the TKIP space */
1477 	wl->hw->extra_tx_headroom = sizeof(struct tx_double_buffer_desc)
1478 		+ WL1251_TKIP_IV_SPACE;
1479 
1480 	/* unit us */
1481 	/* FIXME: find a proper value */
1482 
1483 	wl->hw->flags = IEEE80211_HW_SIGNAL_DBM |
1484 		IEEE80211_HW_SUPPORTS_PS |
1485 		IEEE80211_HW_SUPPORTS_UAPSD;
1486 
1487 	wl->hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
1488 					 BIT(NL80211_IFTYPE_ADHOC);
1489 	wl->hw->wiphy->max_scan_ssids = 1;
1490 	wl->hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &wl1251_band_2ghz;
1491 
1492 	wl->hw->queues = 4;
1493 
1494 	if (wl->use_eeprom)
1495 		wl1251_read_eeprom_mac(wl);
1496 
1497 	ret = wl1251_register_hw(wl);
1498 	if (ret)
1499 		goto out;
1500 
1501 	wl1251_debugfs_init(wl);
1502 	wl1251_notice("initialized");
1503 
1504 	ret = 0;
1505 
1506 out:
1507 	return ret;
1508 }
1509 EXPORT_SYMBOL_GPL(wl1251_init_ieee80211);
1510 
1511 struct ieee80211_hw *wl1251_alloc_hw(void)
1512 {
1513 	struct ieee80211_hw *hw;
1514 	struct wl1251 *wl;
1515 	int i;
1516 	static const u8 nokia_oui[3] = {0x00, 0x1f, 0xdf};
1517 
1518 	hw = ieee80211_alloc_hw(sizeof(*wl), &wl1251_ops);
1519 	if (!hw) {
1520 		wl1251_error("could not alloc ieee80211_hw");
1521 		return ERR_PTR(-ENOMEM);
1522 	}
1523 
1524 	wl = hw->priv;
1525 	memset(wl, 0, sizeof(*wl));
1526 
1527 	wl->hw = hw;
1528 
1529 	wl->data_in_count = 0;
1530 
1531 	skb_queue_head_init(&wl->tx_queue);
1532 
1533 	INIT_DELAYED_WORK(&wl->elp_work, wl1251_elp_work);
1534 	wl->channel = WL1251_DEFAULT_CHANNEL;
1535 	wl->monitor_present = false;
1536 	wl->joined = false;
1537 	wl->scanning = false;
1538 	wl->bss_type = MAX_BSS_TYPE;
1539 	wl->default_key = 0;
1540 	wl->listen_int = 1;
1541 	wl->rx_counter = 0;
1542 	wl->rx_handled = 0;
1543 	wl->rx_current_buffer = 0;
1544 	wl->rx_last_id = 0;
1545 	wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
1546 	wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
1547 	wl->elp = false;
1548 	wl->station_mode = STATION_ACTIVE_MODE;
1549 	wl->psm_requested = false;
1550 	wl->psm_entry_retry = 0;
1551 	wl->tx_queue_stopped = false;
1552 	wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
1553 	wl->rssi_thold = 0;
1554 	wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1555 	wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1556 	wl->vif = NULL;
1557 
1558 	for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++)
1559 		wl->tx_frames[i] = NULL;
1560 
1561 	wl->next_tx_complete = 0;
1562 
1563 	INIT_WORK(&wl->irq_work, wl1251_irq_work);
1564 	INIT_WORK(&wl->tx_work, wl1251_tx_work);
1565 
1566 	/*
1567 	 * In case our MAC address is not correctly set,
1568 	 * we use a random but Nokia MAC.
1569 	 */
1570 	memcpy(wl->mac_addr, nokia_oui, 3);
1571 	get_random_bytes(wl->mac_addr + 3, 3);
1572 
1573 	wl->state = WL1251_STATE_OFF;
1574 	mutex_init(&wl->mutex);
1575 
1576 	wl->tx_mgmt_frm_rate = DEFAULT_HW_GEN_TX_RATE;
1577 	wl->tx_mgmt_frm_mod = DEFAULT_HW_GEN_MODULATION_TYPE;
1578 
1579 	wl->rx_descriptor = kmalloc(sizeof(*wl->rx_descriptor), GFP_KERNEL);
1580 	if (!wl->rx_descriptor) {
1581 		wl1251_error("could not allocate memory for rx descriptor");
1582 		ieee80211_free_hw(hw);
1583 		return ERR_PTR(-ENOMEM);
1584 	}
1585 
1586 	return hw;
1587 }
1588 EXPORT_SYMBOL_GPL(wl1251_alloc_hw);
1589 
1590 int wl1251_free_hw(struct wl1251 *wl)
1591 {
1592 	ieee80211_unregister_hw(wl->hw);
1593 
1594 	wl1251_debugfs_exit(wl);
1595 
1596 	kfree(wl->target_mem_map);
1597 	kfree(wl->data_path);
1598 	vfree(wl->fw);
1599 	wl->fw = NULL;
1600 	kfree(wl->nvs);
1601 	wl->nvs = NULL;
1602 
1603 	kfree(wl->rx_descriptor);
1604 	wl->rx_descriptor = NULL;
1605 
1606 	ieee80211_free_hw(wl->hw);
1607 
1608 	return 0;
1609 }
1610 EXPORT_SYMBOL_GPL(wl1251_free_hw);
1611 
1612 MODULE_DESCRIPTION("TI wl1251 Wireles LAN Driver Core");
1613 MODULE_LICENSE("GPL");
1614 MODULE_AUTHOR("Kalle Valo <kvalo@adurom.com>");
1615 MODULE_FIRMWARE(WL1251_FW_NAME);
1616 MODULE_FIRMWARE(WL1251_NVS_NAME);
1617