0001
0002
0003
0004
0005
0006
0007
0008
0009
0010
0011
0012
0013
0014
0015
0016
0017
0018
0019
0020
0021
0022
0023
0024
0025
0026
0027 #include <linux/compiler.h>
0028 #include <linux/kernel.h>
0029 #include <linux/module.h>
0030 #include <linux/list.h>
0031 #include <linux/completion.h>
0032 #include <linux/firmware.h>
0033 #include <linux/skbuff.h>
0034 #include <linux/usb.h>
0035 #include <net/mac80211.h>
0036
0037 #include "ar5523.h"
0038 #include "ar5523_hw.h"
0039
0040
0041
0042
0043
0044
0045 static int ar5523_submit_rx_cmd(struct ar5523 *ar);
0046 static void ar5523_data_tx_pkt_put(struct ar5523 *ar);
0047
0048 static void ar5523_read_reply(struct ar5523 *ar, struct ar5523_cmd_hdr *hdr,
0049 struct ar5523_tx_cmd *cmd)
0050 {
0051 int dlen, olen;
0052 __be32 *rp;
0053
0054 dlen = be32_to_cpu(hdr->len) - sizeof(*hdr);
0055
0056 if (dlen < 0) {
0057 WARN_ON(1);
0058 goto out;
0059 }
0060
0061 ar5523_dbg(ar, "Code = %d len = %d\n", be32_to_cpu(hdr->code) & 0xff,
0062 dlen);
0063
0064 rp = (__be32 *)(hdr + 1);
0065 if (dlen >= sizeof(u32)) {
0066 olen = be32_to_cpu(rp[0]);
0067 dlen -= sizeof(u32);
0068 if (olen == 0) {
0069
0070 olen = sizeof(u32);
0071 }
0072 } else
0073 olen = 0;
0074
0075 if (cmd->odata) {
0076 if (cmd->olen < olen) {
0077 ar5523_err(ar, "olen too small %d < %d\n",
0078 cmd->olen, olen);
0079 cmd->olen = 0;
0080 cmd->res = -EOVERFLOW;
0081 } else {
0082 cmd->olen = olen;
0083 memcpy(cmd->odata, &rp[1], olen);
0084 cmd->res = 0;
0085 }
0086 }
0087
0088 out:
0089 complete(&cmd->done);
0090 }
0091
0092 static void ar5523_cmd_rx_cb(struct urb *urb)
0093 {
0094 struct ar5523 *ar = urb->context;
0095 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
0096 struct ar5523_cmd_hdr *hdr = ar->rx_cmd_buf;
0097 int dlen;
0098 u32 code, hdrlen;
0099
0100 if (urb->status) {
0101 if (urb->status != -ESHUTDOWN)
0102 ar5523_err(ar, "RX USB error %d.\n", urb->status);
0103 goto skip;
0104 }
0105
0106 if (urb->actual_length < sizeof(struct ar5523_cmd_hdr)) {
0107 ar5523_err(ar, "RX USB too short.\n");
0108 goto skip;
0109 }
0110
0111 ar5523_dbg(ar, "%s code %02x priv %d\n", __func__,
0112 be32_to_cpu(hdr->code) & 0xff, hdr->priv);
0113
0114 code = be32_to_cpu(hdr->code);
0115 hdrlen = be32_to_cpu(hdr->len);
0116
0117 switch (code & 0xff) {
0118 default:
0119
0120 if (hdr->priv != AR5523_CMD_ID) {
0121 ar5523_err(ar, "Unexpected command id: %02x\n",
0122 code & 0xff);
0123 goto skip;
0124 }
0125 ar5523_read_reply(ar, hdr, cmd);
0126 break;
0127
0128 case WDCMSG_DEVICE_AVAIL:
0129 ar5523_dbg(ar, "WDCMSG_DEVICE_AVAIL\n");
0130 cmd->res = 0;
0131 cmd->olen = 0;
0132 complete(&cmd->done);
0133 break;
0134
0135 case WDCMSG_SEND_COMPLETE:
0136 ar5523_dbg(ar, "WDCMSG_SEND_COMPLETE: %d pending\n",
0137 atomic_read(&ar->tx_nr_pending));
0138 if (!test_bit(AR5523_HW_UP, &ar->flags))
0139 ar5523_dbg(ar, "Unexpected WDCMSG_SEND_COMPLETE\n");
0140 else {
0141 mod_timer(&ar->tx_wd_timer,
0142 jiffies + AR5523_TX_WD_TIMEOUT);
0143 ar5523_data_tx_pkt_put(ar);
0144
0145 }
0146 break;
0147
0148 case WDCMSG_TARGET_START:
0149
0150
0151 dlen = hdrlen - sizeof(*hdr);
0152 if (dlen != (int)sizeof(u32)) {
0153 ar5523_err(ar, "Invalid reply to WDCMSG_TARGET_START");
0154 return;
0155 }
0156 if (!cmd->odata) {
0157 ar5523_err(ar, "Unexpected WDCMSG_TARGET_START reply");
0158 return;
0159 }
0160 memcpy(cmd->odata, hdr + 1, sizeof(u32));
0161 cmd->olen = sizeof(u32);
0162 cmd->res = 0;
0163 complete(&cmd->done);
0164 break;
0165
0166 case WDCMSG_STATS_UPDATE:
0167 ar5523_dbg(ar, "WDCMSG_STATS_UPDATE\n");
0168 break;
0169 }
0170
0171 skip:
0172 ar5523_submit_rx_cmd(ar);
0173 }
0174
0175 static int ar5523_alloc_rx_cmd(struct ar5523 *ar)
0176 {
0177 ar->rx_cmd_urb = usb_alloc_urb(0, GFP_KERNEL);
0178 if (!ar->rx_cmd_urb)
0179 return -ENOMEM;
0180
0181 ar->rx_cmd_buf = usb_alloc_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
0182 GFP_KERNEL,
0183 &ar->rx_cmd_urb->transfer_dma);
0184 if (!ar->rx_cmd_buf) {
0185 usb_free_urb(ar->rx_cmd_urb);
0186 return -ENOMEM;
0187 }
0188 return 0;
0189 }
0190
0191 static void ar5523_cancel_rx_cmd(struct ar5523 *ar)
0192 {
0193 usb_kill_urb(ar->rx_cmd_urb);
0194 }
0195
0196 static void ar5523_free_rx_cmd(struct ar5523 *ar)
0197 {
0198 usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
0199 ar->rx_cmd_buf, ar->rx_cmd_urb->transfer_dma);
0200 usb_free_urb(ar->rx_cmd_urb);
0201 }
0202
0203 static int ar5523_submit_rx_cmd(struct ar5523 *ar)
0204 {
0205 int error;
0206
0207 usb_fill_bulk_urb(ar->rx_cmd_urb, ar->dev,
0208 ar5523_cmd_rx_pipe(ar->dev), ar->rx_cmd_buf,
0209 AR5523_MAX_RXCMDSZ, ar5523_cmd_rx_cb, ar);
0210 ar->rx_cmd_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
0211
0212 error = usb_submit_urb(ar->rx_cmd_urb, GFP_ATOMIC);
0213 if (error) {
0214 if (error != -ENODEV)
0215 ar5523_err(ar, "error %d when submitting rx urb\n",
0216 error);
0217 return error;
0218 }
0219 return 0;
0220 }
0221
0222
0223
0224
0225 static void ar5523_cmd_tx_cb(struct urb *urb)
0226 {
0227 struct ar5523_tx_cmd *cmd = urb->context;
0228 struct ar5523 *ar = cmd->ar;
0229
0230 if (urb->status) {
0231 ar5523_err(ar, "Failed to TX command. Status = %d\n",
0232 urb->status);
0233 cmd->res = urb->status;
0234 complete(&cmd->done);
0235 return;
0236 }
0237
0238 if (!(cmd->flags & AR5523_CMD_FLAG_READ)) {
0239 cmd->res = 0;
0240 complete(&cmd->done);
0241 }
0242 }
0243
0244 static int ar5523_cmd(struct ar5523 *ar, u32 code, const void *idata,
0245 int ilen, void *odata, int olen, int flags)
0246 {
0247 struct ar5523_cmd_hdr *hdr;
0248 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
0249 int xferlen, error;
0250
0251
0252 xferlen = (sizeof(struct ar5523_cmd_hdr) + ilen + 3) & ~3;
0253
0254 hdr = (struct ar5523_cmd_hdr *)cmd->buf_tx;
0255 memset(hdr, 0, sizeof(struct ar5523_cmd_hdr));
0256 hdr->len = cpu_to_be32(xferlen);
0257 hdr->code = cpu_to_be32(code);
0258 hdr->priv = AR5523_CMD_ID;
0259
0260 if (flags & AR5523_CMD_FLAG_MAGIC)
0261 hdr->magic = cpu_to_be32(1 << 24);
0262 if (ilen)
0263 memcpy(hdr + 1, idata, ilen);
0264
0265 cmd->odata = odata;
0266 cmd->olen = olen;
0267 cmd->flags = flags;
0268
0269 ar5523_dbg(ar, "do cmd %02x\n", code);
0270
0271 usb_fill_bulk_urb(cmd->urb_tx, ar->dev, ar5523_cmd_tx_pipe(ar->dev),
0272 cmd->buf_tx, xferlen, ar5523_cmd_tx_cb, cmd);
0273 cmd->urb_tx->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
0274
0275 error = usb_submit_urb(cmd->urb_tx, GFP_KERNEL);
0276 if (error) {
0277 ar5523_err(ar, "could not send command 0x%x, error=%d\n",
0278 code, error);
0279 return error;
0280 }
0281
0282 if (!wait_for_completion_timeout(&cmd->done, 2 * HZ)) {
0283 cmd->odata = NULL;
0284 ar5523_err(ar, "timeout waiting for command %02x reply\n",
0285 code);
0286 cmd->res = -ETIMEDOUT;
0287 }
0288 return cmd->res;
0289 }
0290
0291 static int ar5523_cmd_write(struct ar5523 *ar, u32 code, const void *data,
0292 int len, int flags)
0293 {
0294 flags &= ~AR5523_CMD_FLAG_READ;
0295 return ar5523_cmd(ar, code, data, len, NULL, 0, flags);
0296 }
0297
0298 static int ar5523_cmd_read(struct ar5523 *ar, u32 code, const void *idata,
0299 int ilen, void *odata, int olen, int flags)
0300 {
0301 flags |= AR5523_CMD_FLAG_READ;
0302 return ar5523_cmd(ar, code, idata, ilen, odata, olen, flags);
0303 }
0304
0305 static int ar5523_config(struct ar5523 *ar, u32 reg, u32 val)
0306 {
0307 struct ar5523_write_mac write;
0308 int error;
0309
0310 write.reg = cpu_to_be32(reg);
0311 write.len = cpu_to_be32(0);
0312 *(__be32 *)write.data = cpu_to_be32(val);
0313
0314 error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
0315 3 * sizeof(u32), 0);
0316 if (error != 0)
0317 ar5523_err(ar, "could not write register 0x%02x\n", reg);
0318 return error;
0319 }
0320
0321 static int ar5523_config_multi(struct ar5523 *ar, u32 reg, const void *data,
0322 int len)
0323 {
0324 struct ar5523_write_mac write;
0325 int error;
0326
0327 write.reg = cpu_to_be32(reg);
0328 write.len = cpu_to_be32(len);
0329 memcpy(write.data, data, len);
0330
0331
0332 error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
0333 (len == 0) ? sizeof(u32) : 2 * sizeof(u32) + len, 0);
0334 if (error != 0)
0335 ar5523_err(ar, "could not write %d bytes to register 0x%02x\n",
0336 len, reg);
0337 return error;
0338 }
0339
0340 static int ar5523_get_status(struct ar5523 *ar, u32 which, void *odata,
0341 int olen)
0342 {
0343 int error;
0344 __be32 which_be;
0345
0346 which_be = cpu_to_be32(which);
0347 error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_STATUS,
0348 &which_be, sizeof(which_be), odata, olen, AR5523_CMD_FLAG_MAGIC);
0349 if (error != 0)
0350 ar5523_err(ar, "could not read EEPROM offset 0x%02x\n", which);
0351 return error;
0352 }
0353
0354 static int ar5523_get_capability(struct ar5523 *ar, u32 cap, u32 *val)
0355 {
0356 int error;
0357 __be32 cap_be, val_be;
0358
0359 cap_be = cpu_to_be32(cap);
0360 error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_CAPABILITY, &cap_be,
0361 sizeof(cap_be), &val_be, sizeof(__be32),
0362 AR5523_CMD_FLAG_MAGIC);
0363 if (error != 0) {
0364 ar5523_err(ar, "could not read capability %u\n", cap);
0365 return error;
0366 }
0367 *val = be32_to_cpu(val_be);
0368 return error;
0369 }
0370
0371 static int ar5523_get_devcap(struct ar5523 *ar)
0372 {
0373 #define GETCAP(x) do { \
0374 error = ar5523_get_capability(ar, x, &cap); \
0375 if (error != 0) \
0376 return error; \
0377 ar5523_info(ar, "Cap: " \
0378 "%s=0x%08x\n", #x, cap); \
0379 } while (0)
0380 int error;
0381 u32 cap;
0382
0383
0384 GETCAP(CAP_TARGET_VERSION);
0385 GETCAP(CAP_TARGET_REVISION);
0386 GETCAP(CAP_MAC_VERSION);
0387 GETCAP(CAP_MAC_REVISION);
0388 GETCAP(CAP_PHY_REVISION);
0389 GETCAP(CAP_ANALOG_5GHz_REVISION);
0390 GETCAP(CAP_ANALOG_2GHz_REVISION);
0391
0392 GETCAP(CAP_REG_DOMAIN);
0393 GETCAP(CAP_REG_CAP_BITS);
0394 GETCAP(CAP_WIRELESS_MODES);
0395 GETCAP(CAP_CHAN_SPREAD_SUPPORT);
0396 GETCAP(CAP_COMPRESS_SUPPORT);
0397 GETCAP(CAP_BURST_SUPPORT);
0398 GETCAP(CAP_FAST_FRAMES_SUPPORT);
0399 GETCAP(CAP_CHAP_TUNING_SUPPORT);
0400 GETCAP(CAP_TURBOG_SUPPORT);
0401 GETCAP(CAP_TURBO_PRIME_SUPPORT);
0402 GETCAP(CAP_DEVICE_TYPE);
0403 GETCAP(CAP_WME_SUPPORT);
0404 GETCAP(CAP_TOTAL_QUEUES);
0405 GETCAP(CAP_CONNECTION_ID_MAX);
0406
0407 GETCAP(CAP_LOW_5GHZ_CHAN);
0408 GETCAP(CAP_HIGH_5GHZ_CHAN);
0409 GETCAP(CAP_LOW_2GHZ_CHAN);
0410 GETCAP(CAP_HIGH_2GHZ_CHAN);
0411 GETCAP(CAP_TWICE_ANTENNAGAIN_5G);
0412 GETCAP(CAP_TWICE_ANTENNAGAIN_2G);
0413
0414 GETCAP(CAP_CIPHER_AES_CCM);
0415 GETCAP(CAP_CIPHER_TKIP);
0416 GETCAP(CAP_MIC_TKIP);
0417 return 0;
0418 }
0419
0420 static int ar5523_set_ledsteady(struct ar5523 *ar, int lednum, int ledmode)
0421 {
0422 struct ar5523_cmd_ledsteady led;
0423
0424 led.lednum = cpu_to_be32(lednum);
0425 led.ledmode = cpu_to_be32(ledmode);
0426
0427 ar5523_dbg(ar, "set %s led %s (steady)\n",
0428 (lednum == UATH_LED_LINK) ? "link" : "activity",
0429 ledmode ? "on" : "off");
0430 return ar5523_cmd_write(ar, WDCMSG_SET_LED_STEADY, &led, sizeof(led),
0431 0);
0432 }
0433
0434 static int ar5523_set_rxfilter(struct ar5523 *ar, u32 bits, u32 op)
0435 {
0436 struct ar5523_cmd_rx_filter rxfilter;
0437
0438 rxfilter.bits = cpu_to_be32(bits);
0439 rxfilter.op = cpu_to_be32(op);
0440
0441 ar5523_dbg(ar, "setting Rx filter=0x%x flags=0x%x\n", bits, op);
0442 return ar5523_cmd_write(ar, WDCMSG_RX_FILTER, &rxfilter,
0443 sizeof(rxfilter), 0);
0444 }
0445
0446 static int ar5523_reset_tx_queues(struct ar5523 *ar)
0447 {
0448 __be32 qid = cpu_to_be32(0);
0449
0450 ar5523_dbg(ar, "resetting Tx queue\n");
0451 return ar5523_cmd_write(ar, WDCMSG_RELEASE_TX_QUEUE,
0452 &qid, sizeof(qid), 0);
0453 }
0454
0455 static int ar5523_set_chan(struct ar5523 *ar)
0456 {
0457 struct ieee80211_conf *conf = &ar->hw->conf;
0458
0459 struct ar5523_cmd_reset reset;
0460
0461 memset(&reset, 0, sizeof(reset));
0462 reset.flags |= cpu_to_be32(UATH_CHAN_2GHZ);
0463 reset.flags |= cpu_to_be32(UATH_CHAN_OFDM);
0464 reset.freq = cpu_to_be32(conf->chandef.chan->center_freq);
0465 reset.maxrdpower = cpu_to_be32(50);
0466 reset.channelchange = cpu_to_be32(1);
0467 reset.keeprccontent = cpu_to_be32(0);
0468
0469 ar5523_dbg(ar, "set chan flags 0x%x freq %d\n",
0470 be32_to_cpu(reset.flags),
0471 conf->chandef.chan->center_freq);
0472 return ar5523_cmd_write(ar, WDCMSG_RESET, &reset, sizeof(reset), 0);
0473 }
0474
0475 static int ar5523_queue_init(struct ar5523 *ar)
0476 {
0477 struct ar5523_cmd_txq_setup qinfo;
0478
0479 ar5523_dbg(ar, "setting up Tx queue\n");
0480 qinfo.qid = cpu_to_be32(0);
0481 qinfo.len = cpu_to_be32(sizeof(qinfo.attr));
0482 qinfo.attr.priority = cpu_to_be32(0);
0483 qinfo.attr.aifs = cpu_to_be32(3);
0484 qinfo.attr.logcwmin = cpu_to_be32(4);
0485 qinfo.attr.logcwmax = cpu_to_be32(10);
0486 qinfo.attr.bursttime = cpu_to_be32(0);
0487 qinfo.attr.mode = cpu_to_be32(0);
0488 qinfo.attr.qflags = cpu_to_be32(1);
0489 return ar5523_cmd_write(ar, WDCMSG_SETUP_TX_QUEUE, &qinfo,
0490 sizeof(qinfo), 0);
0491 }
0492
0493 static int ar5523_switch_chan(struct ar5523 *ar)
0494 {
0495 int error;
0496
0497 error = ar5523_set_chan(ar);
0498 if (error) {
0499 ar5523_err(ar, "could not set chan, error %d\n", error);
0500 goto out_err;
0501 }
0502
0503
0504 error = ar5523_reset_tx_queues(ar);
0505 if (error) {
0506 ar5523_err(ar, "could not reset Tx queues, error %d\n",
0507 error);
0508 goto out_err;
0509 }
0510
0511 error = ar5523_queue_init(ar);
0512 if (error)
0513 ar5523_err(ar, "could not init wme, error %d\n", error);
0514
0515 out_err:
0516 return error;
0517 }
0518
0519 static void ar5523_rx_data_put(struct ar5523 *ar,
0520 struct ar5523_rx_data *data)
0521 {
0522 unsigned long flags;
0523 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
0524 list_move(&data->list, &ar->rx_data_free);
0525 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
0526 }
0527
0528 static void ar5523_data_rx_cb(struct urb *urb)
0529 {
0530 struct ar5523_rx_data *data = urb->context;
0531 struct ar5523 *ar = data->ar;
0532 struct ar5523_rx_desc *desc;
0533 struct ar5523_chunk *chunk;
0534 struct ieee80211_hw *hw = ar->hw;
0535 struct ieee80211_rx_status *rx_status;
0536 u32 rxlen;
0537 int usblen = urb->actual_length;
0538 int hdrlen, pad;
0539
0540 ar5523_dbg(ar, "%s\n", __func__);
0541
0542 if (urb->status) {
0543 if (urb->status != -ESHUTDOWN)
0544 ar5523_err(ar, "%s: USB err: %d\n", __func__,
0545 urb->status);
0546 goto skip;
0547 }
0548
0549 if (usblen < AR5523_MIN_RXBUFSZ) {
0550 ar5523_err(ar, "RX: wrong xfer size (usblen=%d)\n", usblen);
0551 goto skip;
0552 }
0553
0554 chunk = (struct ar5523_chunk *) data->skb->data;
0555
0556 if (((chunk->flags & UATH_CFLAGS_FINAL) == 0) ||
0557 chunk->seqnum != 0) {
0558 ar5523_dbg(ar, "RX: No final flag. s: %d f: %02x l: %d\n",
0559 chunk->seqnum, chunk->flags,
0560 be16_to_cpu(chunk->length));
0561 goto skip;
0562 }
0563
0564
0565 desc = (struct ar5523_rx_desc *)
0566 (data->skb->data + usblen - sizeof(struct ar5523_rx_desc));
0567
0568 rxlen = be32_to_cpu(desc->len);
0569 if (rxlen > ar->rxbufsz) {
0570 ar5523_dbg(ar, "RX: Bad descriptor (len=%d)\n",
0571 be32_to_cpu(desc->len));
0572 goto skip;
0573 }
0574
0575 if (!rxlen) {
0576 ar5523_dbg(ar, "RX: rxlen is 0\n");
0577 goto skip;
0578 }
0579
0580 if (be32_to_cpu(desc->status) != 0) {
0581 ar5523_dbg(ar, "Bad RX status (0x%x len = %d). Skip\n",
0582 be32_to_cpu(desc->status), be32_to_cpu(desc->len));
0583 goto skip;
0584 }
0585
0586 skb_reserve(data->skb, sizeof(*chunk));
0587 skb_put(data->skb, rxlen - sizeof(struct ar5523_rx_desc));
0588
0589 hdrlen = ieee80211_get_hdrlen_from_skb(data->skb);
0590 if (!IS_ALIGNED(hdrlen, 4)) {
0591 ar5523_dbg(ar, "eek, alignment workaround activated\n");
0592 pad = ALIGN(hdrlen, 4) - hdrlen;
0593 memmove(data->skb->data + pad, data->skb->data, hdrlen);
0594 skb_pull(data->skb, pad);
0595 skb_put(data->skb, pad);
0596 }
0597
0598 rx_status = IEEE80211_SKB_RXCB(data->skb);
0599 memset(rx_status, 0, sizeof(*rx_status));
0600 rx_status->freq = be32_to_cpu(desc->channel);
0601 rx_status->band = hw->conf.chandef.chan->band;
0602 rx_status->signal = -95 + be32_to_cpu(desc->rssi);
0603
0604 ieee80211_rx_irqsafe(hw, data->skb);
0605 data->skb = NULL;
0606
0607 skip:
0608 if (data->skb) {
0609 dev_kfree_skb_irq(data->skb);
0610 data->skb = NULL;
0611 }
0612
0613 ar5523_rx_data_put(ar, data);
0614 if (atomic_inc_return(&ar->rx_data_free_cnt) >=
0615 AR5523_RX_DATA_REFILL_COUNT &&
0616 test_bit(AR5523_HW_UP, &ar->flags))
0617 queue_work(ar->wq, &ar->rx_refill_work);
0618 }
0619
0620 static void ar5523_rx_refill_work(struct work_struct *work)
0621 {
0622 struct ar5523 *ar = container_of(work, struct ar5523, rx_refill_work);
0623 struct ar5523_rx_data *data;
0624 unsigned long flags;
0625 int error;
0626
0627 ar5523_dbg(ar, "%s\n", __func__);
0628 do {
0629 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
0630
0631 if (!list_empty(&ar->rx_data_free))
0632 data = (struct ar5523_rx_data *) ar->rx_data_free.next;
0633 else
0634 data = NULL;
0635 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
0636
0637 if (!data)
0638 goto done;
0639
0640 data->skb = alloc_skb(ar->rxbufsz, GFP_KERNEL);
0641 if (!data->skb) {
0642 ar5523_err(ar, "could not allocate rx skbuff\n");
0643 return;
0644 }
0645
0646 usb_fill_bulk_urb(data->urb, ar->dev,
0647 ar5523_data_rx_pipe(ar->dev), data->skb->data,
0648 ar->rxbufsz, ar5523_data_rx_cb, data);
0649
0650 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
0651 list_move(&data->list, &ar->rx_data_used);
0652 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
0653 atomic_dec(&ar->rx_data_free_cnt);
0654
0655 error = usb_submit_urb(data->urb, GFP_KERNEL);
0656 if (error) {
0657 kfree_skb(data->skb);
0658 if (error != -ENODEV)
0659 ar5523_err(ar, "Err sending rx data urb %d\n",
0660 error);
0661 ar5523_rx_data_put(ar, data);
0662 atomic_inc(&ar->rx_data_free_cnt);
0663 return;
0664 }
0665
0666 } while (true);
0667 done:
0668 return;
0669 }
0670
0671 static void ar5523_cancel_rx_bufs(struct ar5523 *ar)
0672 {
0673 struct ar5523_rx_data *data;
0674 unsigned long flags;
0675
0676 do {
0677 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
0678 if (!list_empty(&ar->rx_data_used))
0679 data = (struct ar5523_rx_data *) ar->rx_data_used.next;
0680 else
0681 data = NULL;
0682 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
0683
0684 if (!data)
0685 break;
0686
0687 usb_kill_urb(data->urb);
0688 list_move(&data->list, &ar->rx_data_free);
0689 atomic_inc(&ar->rx_data_free_cnt);
0690 } while (data);
0691 }
0692
0693 static void ar5523_free_rx_bufs(struct ar5523 *ar)
0694 {
0695 struct ar5523_rx_data *data;
0696
0697 ar5523_cancel_rx_bufs(ar);
0698 while (!list_empty(&ar->rx_data_free)) {
0699 data = (struct ar5523_rx_data *) ar->rx_data_free.next;
0700 list_del(&data->list);
0701 usb_free_urb(data->urb);
0702 }
0703 }
0704
0705 static int ar5523_alloc_rx_bufs(struct ar5523 *ar)
0706 {
0707 int i;
0708
0709 for (i = 0; i < AR5523_RX_DATA_COUNT; i++) {
0710 struct ar5523_rx_data *data = &ar->rx_data[i];
0711
0712 data->ar = ar;
0713 data->urb = usb_alloc_urb(0, GFP_KERNEL);
0714 if (!data->urb)
0715 goto err;
0716 list_add_tail(&data->list, &ar->rx_data_free);
0717 atomic_inc(&ar->rx_data_free_cnt);
0718 }
0719 return 0;
0720
0721 err:
0722 ar5523_free_rx_bufs(ar);
0723 return -ENOMEM;
0724 }
0725
0726 static void ar5523_data_tx_pkt_put(struct ar5523 *ar)
0727 {
0728 atomic_dec(&ar->tx_nr_total);
0729 if (!atomic_dec_return(&ar->tx_nr_pending)) {
0730 del_timer(&ar->tx_wd_timer);
0731 wake_up(&ar->tx_flush_waitq);
0732 }
0733
0734 if (atomic_read(&ar->tx_nr_total) < AR5523_TX_DATA_RESTART_COUNT) {
0735 ar5523_dbg(ar, "restart tx queue\n");
0736 ieee80211_wake_queues(ar->hw);
0737 }
0738 }
0739
0740 static void ar5523_data_tx_cb(struct urb *urb)
0741 {
0742 struct sk_buff *skb = urb->context;
0743 struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
0744 struct ar5523_tx_data *data = (struct ar5523_tx_data *)
0745 txi->driver_data;
0746 struct ar5523 *ar = data->ar;
0747 unsigned long flags;
0748
0749 ar5523_dbg(ar, "data tx urb completed: %d\n", urb->status);
0750
0751 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
0752 list_del(&data->list);
0753 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
0754
0755 if (urb->status) {
0756 ar5523_dbg(ar, "%s: urb status: %d\n", __func__, urb->status);
0757 ar5523_data_tx_pkt_put(ar);
0758 ieee80211_free_txskb(ar->hw, skb);
0759 } else {
0760 skb_pull(skb, sizeof(struct ar5523_tx_desc) + sizeof(__be32));
0761 ieee80211_tx_status_irqsafe(ar->hw, skb);
0762 }
0763 usb_free_urb(urb);
0764 }
0765
0766 static void ar5523_tx(struct ieee80211_hw *hw,
0767 struct ieee80211_tx_control *control,
0768 struct sk_buff *skb)
0769 {
0770 struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
0771 struct ar5523_tx_data *data = (struct ar5523_tx_data *)
0772 txi->driver_data;
0773 struct ar5523 *ar = hw->priv;
0774 unsigned long flags;
0775
0776 ar5523_dbg(ar, "tx called\n");
0777 if (atomic_inc_return(&ar->tx_nr_total) >= AR5523_TX_DATA_COUNT) {
0778 ar5523_dbg(ar, "tx queue full\n");
0779 ar5523_dbg(ar, "stop queues (tot %d pend %d)\n",
0780 atomic_read(&ar->tx_nr_total),
0781 atomic_read(&ar->tx_nr_pending));
0782 ieee80211_stop_queues(hw);
0783 }
0784
0785 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
0786 list_add_tail(&data->list, &ar->tx_queue_pending);
0787 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
0788
0789 ieee80211_queue_work(ar->hw, &ar->tx_work);
0790 }
0791
0792 static void ar5523_tx_work_locked(struct ar5523 *ar)
0793 {
0794 struct ar5523_tx_data *data;
0795 struct ar5523_tx_desc *desc;
0796 struct ar5523_chunk *chunk;
0797 struct ieee80211_tx_info *txi;
0798 struct urb *urb;
0799 struct sk_buff *skb;
0800 int error = 0, paylen;
0801 u32 txqid;
0802 unsigned long flags;
0803
0804 BUILD_BUG_ON(sizeof(struct ar5523_tx_data) >
0805 IEEE80211_TX_INFO_DRIVER_DATA_SIZE);
0806
0807 ar5523_dbg(ar, "%s\n", __func__);
0808 do {
0809 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
0810 if (!list_empty(&ar->tx_queue_pending)) {
0811 data = (struct ar5523_tx_data *)
0812 ar->tx_queue_pending.next;
0813 list_del(&data->list);
0814 } else
0815 data = NULL;
0816 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
0817
0818 if (!data)
0819 break;
0820
0821 txi = container_of((void *)data, struct ieee80211_tx_info,
0822 driver_data);
0823 txqid = 0;
0824
0825 skb = container_of((void *)txi, struct sk_buff, cb);
0826 paylen = skb->len;
0827
0828 urb = usb_alloc_urb(0, GFP_KERNEL);
0829 if (!urb) {
0830 ieee80211_free_txskb(ar->hw, skb);
0831 continue;
0832 }
0833
0834 data->ar = ar;
0835 data->urb = urb;
0836
0837 desc = skb_push(skb, sizeof(*desc));
0838 chunk = skb_push(skb, sizeof(*chunk));
0839
0840 chunk->seqnum = 0;
0841 chunk->flags = UATH_CFLAGS_FINAL;
0842 chunk->length = cpu_to_be16(skb->len);
0843
0844 desc->msglen = cpu_to_be32(skb->len);
0845 desc->msgid = AR5523_DATA_ID;
0846 desc->buflen = cpu_to_be32(paylen);
0847 desc->type = cpu_to_be32(WDCMSG_SEND);
0848 desc->flags = cpu_to_be32(UATH_TX_NOTIFY);
0849
0850 if (test_bit(AR5523_CONNECTED, &ar->flags))
0851 desc->connid = cpu_to_be32(AR5523_ID_BSS);
0852 else
0853 desc->connid = cpu_to_be32(AR5523_ID_BROADCAST);
0854
0855 if (txi->flags & IEEE80211_TX_CTL_USE_MINRATE)
0856 txqid |= UATH_TXQID_MINRATE;
0857
0858 desc->txqid = cpu_to_be32(txqid);
0859
0860 urb->transfer_flags = URB_ZERO_PACKET;
0861 usb_fill_bulk_urb(urb, ar->dev, ar5523_data_tx_pipe(ar->dev),
0862 skb->data, skb->len, ar5523_data_tx_cb, skb);
0863
0864 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
0865 list_add_tail(&data->list, &ar->tx_queue_submitted);
0866 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
0867 mod_timer(&ar->tx_wd_timer, jiffies + AR5523_TX_WD_TIMEOUT);
0868 atomic_inc(&ar->tx_nr_pending);
0869
0870 ar5523_dbg(ar, "TX Frame (%d pending)\n",
0871 atomic_read(&ar->tx_nr_pending));
0872 error = usb_submit_urb(urb, GFP_KERNEL);
0873 if (error) {
0874 ar5523_err(ar, "error %d when submitting tx urb\n",
0875 error);
0876 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
0877 list_del(&data->list);
0878 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
0879 atomic_dec(&ar->tx_nr_pending);
0880 ar5523_data_tx_pkt_put(ar);
0881 usb_free_urb(urb);
0882 ieee80211_free_txskb(ar->hw, skb);
0883 }
0884 } while (true);
0885 }
0886
0887 static void ar5523_tx_work(struct work_struct *work)
0888 {
0889 struct ar5523 *ar = container_of(work, struct ar5523, tx_work);
0890
0891 ar5523_dbg(ar, "%s\n", __func__);
0892 mutex_lock(&ar->mutex);
0893 ar5523_tx_work_locked(ar);
0894 mutex_unlock(&ar->mutex);
0895 }
0896
0897 static void ar5523_tx_wd_timer(struct timer_list *t)
0898 {
0899 struct ar5523 *ar = from_timer(ar, t, tx_wd_timer);
0900
0901 ar5523_dbg(ar, "TX watchdog timer triggered\n");
0902 ieee80211_queue_work(ar->hw, &ar->tx_wd_work);
0903 }
0904
0905 static void ar5523_tx_wd_work(struct work_struct *work)
0906 {
0907 struct ar5523 *ar = container_of(work, struct ar5523, tx_wd_work);
0908
0909
0910
0911
0912
0913 mutex_lock(&ar->mutex);
0914 ar5523_err(ar, "TX queue stuck (tot %d pend %d)\n",
0915 atomic_read(&ar->tx_nr_total),
0916 atomic_read(&ar->tx_nr_pending));
0917
0918 ar5523_err(ar, "Will restart dongle.\n");
0919 ar5523_cmd_write(ar, WDCMSG_TARGET_RESET, NULL, 0, 0);
0920 mutex_unlock(&ar->mutex);
0921 }
0922
0923 static void ar5523_flush_tx(struct ar5523 *ar)
0924 {
0925 ar5523_tx_work_locked(ar);
0926
0927
0928 if (test_bit(AR5523_USB_DISCONNECTED, &ar->flags))
0929 return;
0930 if (!wait_event_timeout(ar->tx_flush_waitq,
0931 !atomic_read(&ar->tx_nr_pending), AR5523_FLUSH_TIMEOUT))
0932 ar5523_err(ar, "flush timeout (tot %d pend %d)\n",
0933 atomic_read(&ar->tx_nr_total),
0934 atomic_read(&ar->tx_nr_pending));
0935 }
0936
0937 static void ar5523_free_tx_cmd(struct ar5523 *ar)
0938 {
0939 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
0940
0941 usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ, cmd->buf_tx,
0942 cmd->urb_tx->transfer_dma);
0943 usb_free_urb(cmd->urb_tx);
0944 }
0945
0946 static int ar5523_alloc_tx_cmd(struct ar5523 *ar)
0947 {
0948 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
0949
0950 cmd->ar = ar;
0951 init_completion(&cmd->done);
0952
0953 cmd->urb_tx = usb_alloc_urb(0, GFP_KERNEL);
0954 if (!cmd->urb_tx)
0955 return -ENOMEM;
0956 cmd->buf_tx = usb_alloc_coherent(ar->dev, AR5523_MAX_TXCMDSZ,
0957 GFP_KERNEL,
0958 &cmd->urb_tx->transfer_dma);
0959 if (!cmd->buf_tx) {
0960 usb_free_urb(cmd->urb_tx);
0961 return -ENOMEM;
0962 }
0963 return 0;
0964 }
0965
0966
0967
0968
0969
0970 static void ar5523_stat_work(struct work_struct *work)
0971 {
0972 struct ar5523 *ar = container_of(work, struct ar5523, stat_work.work);
0973 int error;
0974
0975 ar5523_dbg(ar, "%s\n", __func__);
0976 mutex_lock(&ar->mutex);
0977
0978
0979
0980
0981
0982 error = ar5523_cmd_write(ar, WDCMSG_TARGET_GET_STATS, NULL, 0, 0);
0983 if (error)
0984 ar5523_err(ar, "could not query stats, error %d\n", error);
0985 mutex_unlock(&ar->mutex);
0986 ieee80211_queue_delayed_work(ar->hw, &ar->stat_work, HZ);
0987 }
0988
0989
0990
0991
0992 static int ar5523_start(struct ieee80211_hw *hw)
0993 {
0994 struct ar5523 *ar = hw->priv;
0995 int error;
0996 __be32 val;
0997
0998 ar5523_dbg(ar, "start called\n");
0999
1000 mutex_lock(&ar->mutex);
1001 val = cpu_to_be32(0);
1002 ar5523_cmd_write(ar, WDCMSG_BIND, &val, sizeof(val), 0);
1003
1004
1005 ar5523_config_multi(ar, CFG_MAC_ADDR, &ar->hw->wiphy->perm_addr,
1006 ETH_ALEN);
1007
1008
1009 ar5523_config(ar, CFG_RATE_CONTROL_ENABLE, 0x00000001);
1010 ar5523_config(ar, CFG_DIVERSITY_CTL, 0x00000001);
1011 ar5523_config(ar, CFG_ABOLT, 0x0000003f);
1012 ar5523_config(ar, CFG_WME_ENABLED, 0x00000000);
1013
1014 ar5523_config(ar, CFG_SERVICE_TYPE, 1);
1015 ar5523_config(ar, CFG_TP_SCALE, 0x00000000);
1016 ar5523_config(ar, CFG_TPC_HALF_DBM5, 0x0000003c);
1017 ar5523_config(ar, CFG_TPC_HALF_DBM2, 0x0000003c);
1018 ar5523_config(ar, CFG_OVERRD_TX_POWER, 0x00000000);
1019 ar5523_config(ar, CFG_GMODE_PROTECTION, 0x00000000);
1020 ar5523_config(ar, CFG_GMODE_PROTECT_RATE_INDEX, 0x00000003);
1021 ar5523_config(ar, CFG_PROTECTION_TYPE, 0x00000000);
1022 ar5523_config(ar, CFG_MODE_CTS, 0x00000002);
1023
1024 error = ar5523_cmd_read(ar, WDCMSG_TARGET_START, NULL, 0,
1025 &val, sizeof(val), AR5523_CMD_FLAG_MAGIC);
1026 if (error) {
1027 ar5523_dbg(ar, "could not start target, error %d\n", error);
1028 goto err;
1029 }
1030 ar5523_dbg(ar, "WDCMSG_TARGET_START returns handle: 0x%x\n",
1031 be32_to_cpu(val));
1032
1033 ar5523_switch_chan(ar);
1034
1035 val = cpu_to_be32(TARGET_DEVICE_AWAKE);
1036 ar5523_cmd_write(ar, WDCMSG_SET_PWR_MODE, &val, sizeof(val), 0);
1037
1038 ar5523_cmd_write(ar, WDCMSG_RESET_KEY_CACHE, NULL, 0, 0);
1039
1040 set_bit(AR5523_HW_UP, &ar->flags);
1041 queue_work(ar->wq, &ar->rx_refill_work);
1042
1043
1044 ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1045 ar5523_set_rxfilter(ar,
1046 UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1047 UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON,
1048 UATH_FILTER_OP_SET);
1049
1050 ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_ON);
1051 ar5523_dbg(ar, "start OK\n");
1052
1053 err:
1054 mutex_unlock(&ar->mutex);
1055 return error;
1056 }
1057
1058 static void ar5523_stop(struct ieee80211_hw *hw)
1059 {
1060 struct ar5523 *ar = hw->priv;
1061
1062 ar5523_dbg(ar, "stop called\n");
1063
1064 cancel_delayed_work_sync(&ar->stat_work);
1065 mutex_lock(&ar->mutex);
1066 clear_bit(AR5523_HW_UP, &ar->flags);
1067
1068 ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1069 ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_OFF);
1070
1071 ar5523_cmd_write(ar, WDCMSG_TARGET_STOP, NULL, 0, 0);
1072
1073 del_timer_sync(&ar->tx_wd_timer);
1074 cancel_work_sync(&ar->tx_wd_work);
1075 cancel_work_sync(&ar->rx_refill_work);
1076 ar5523_cancel_rx_bufs(ar);
1077 mutex_unlock(&ar->mutex);
1078 }
1079
1080 static int ar5523_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1081 {
1082 struct ar5523 *ar = hw->priv;
1083 int ret;
1084
1085 ar5523_dbg(ar, "set_rts_threshold called\n");
1086 mutex_lock(&ar->mutex);
1087
1088 ret = ar5523_config(ar, CFG_USER_RTS_THRESHOLD, value);
1089
1090 mutex_unlock(&ar->mutex);
1091 return ret;
1092 }
1093
1094 static void ar5523_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1095 u32 queues, bool drop)
1096 {
1097 struct ar5523 *ar = hw->priv;
1098
1099 ar5523_dbg(ar, "flush called\n");
1100 ar5523_flush_tx(ar);
1101 }
1102
1103 static int ar5523_add_interface(struct ieee80211_hw *hw,
1104 struct ieee80211_vif *vif)
1105 {
1106 struct ar5523 *ar = hw->priv;
1107
1108 ar5523_dbg(ar, "add interface called\n");
1109
1110 if (ar->vif) {
1111 ar5523_dbg(ar, "invalid add_interface\n");
1112 return -EOPNOTSUPP;
1113 }
1114
1115 switch (vif->type) {
1116 case NL80211_IFTYPE_STATION:
1117 ar->vif = vif;
1118 break;
1119 default:
1120 return -EOPNOTSUPP;
1121 }
1122 return 0;
1123 }
1124
1125 static void ar5523_remove_interface(struct ieee80211_hw *hw,
1126 struct ieee80211_vif *vif)
1127 {
1128 struct ar5523 *ar = hw->priv;
1129
1130 ar5523_dbg(ar, "remove interface called\n");
1131 ar->vif = NULL;
1132 }
1133
1134 static int ar5523_hwconfig(struct ieee80211_hw *hw, u32 changed)
1135 {
1136 struct ar5523 *ar = hw->priv;
1137
1138 ar5523_dbg(ar, "config called\n");
1139 mutex_lock(&ar->mutex);
1140 if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
1141 ar5523_dbg(ar, "Do channel switch\n");
1142 ar5523_flush_tx(ar);
1143 ar5523_switch_chan(ar);
1144 }
1145 mutex_unlock(&ar->mutex);
1146 return 0;
1147 }
1148
1149 static int ar5523_get_wlan_mode(struct ar5523 *ar,
1150 struct ieee80211_bss_conf *bss_conf)
1151 {
1152 struct ieee80211_supported_band *band;
1153 int bit;
1154 struct ieee80211_sta *sta;
1155 u32 sta_rate_set;
1156
1157 band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1158 sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1159 if (!sta) {
1160 ar5523_info(ar, "STA not found!\n");
1161 return WLAN_MODE_11b;
1162 }
1163 sta_rate_set = sta->deflink.supp_rates[ar->hw->conf.chandef.chan->band];
1164
1165 for (bit = 0; bit < band->n_bitrates; bit++) {
1166 if (sta_rate_set & 1) {
1167 int rate = band->bitrates[bit].bitrate;
1168 switch (rate) {
1169 case 60:
1170 case 90:
1171 case 120:
1172 case 180:
1173 case 240:
1174 case 360:
1175 case 480:
1176 case 540:
1177 return WLAN_MODE_11g;
1178 }
1179 }
1180 sta_rate_set >>= 1;
1181 }
1182 return WLAN_MODE_11b;
1183 }
1184
1185 static void ar5523_create_rateset(struct ar5523 *ar,
1186 struct ieee80211_bss_conf *bss_conf,
1187 struct ar5523_cmd_rateset *rs,
1188 bool basic)
1189 {
1190 struct ieee80211_supported_band *band;
1191 struct ieee80211_sta *sta;
1192 int bit, i = 0;
1193 u32 sta_rate_set, basic_rate_set;
1194
1195 sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1196 basic_rate_set = bss_conf->basic_rates;
1197 if (!sta) {
1198 ar5523_info(ar, "STA not found. Cannot set rates\n");
1199 sta_rate_set = bss_conf->basic_rates;
1200 } else
1201 sta_rate_set = sta->deflink.supp_rates[ar->hw->conf.chandef.chan->band];
1202
1203 ar5523_dbg(ar, "sta rate_set = %08x\n", sta_rate_set);
1204
1205 band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1206 for (bit = 0; bit < band->n_bitrates; bit++) {
1207 BUG_ON(i >= AR5523_MAX_NRATES);
1208 ar5523_dbg(ar, "Considering rate %d : %d\n",
1209 band->bitrates[bit].hw_value, sta_rate_set & 1);
1210 if (sta_rate_set & 1) {
1211 rs->set[i] = band->bitrates[bit].hw_value;
1212 if (basic_rate_set & 1 && basic)
1213 rs->set[i] |= 0x80;
1214 i++;
1215 }
1216 sta_rate_set >>= 1;
1217 basic_rate_set >>= 1;
1218 }
1219
1220 rs->length = i;
1221 }
1222
1223 static int ar5523_set_basic_rates(struct ar5523 *ar,
1224 struct ieee80211_bss_conf *bss)
1225 {
1226 struct ar5523_cmd_rates rates;
1227
1228 memset(&rates, 0, sizeof(rates));
1229 rates.connid = cpu_to_be32(2);
1230 rates.size = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1231 ar5523_create_rateset(ar, bss, &rates.rateset, true);
1232
1233 return ar5523_cmd_write(ar, WDCMSG_SET_BASIC_RATE, &rates,
1234 sizeof(rates), 0);
1235 }
1236
1237 static int ar5523_create_connection(struct ar5523 *ar,
1238 struct ieee80211_vif *vif,
1239 struct ieee80211_bss_conf *bss)
1240 {
1241 struct ar5523_cmd_create_connection create;
1242 int wlan_mode;
1243
1244 memset(&create, 0, sizeof(create));
1245 create.connid = cpu_to_be32(2);
1246 create.bssid = cpu_to_be32(0);
1247
1248 create.size = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1249
1250 ar5523_create_rateset(ar, bss, &create.connattr.rateset, false);
1251
1252 wlan_mode = ar5523_get_wlan_mode(ar, bss);
1253 create.connattr.wlanmode = cpu_to_be32(wlan_mode);
1254
1255 return ar5523_cmd_write(ar, WDCMSG_CREATE_CONNECTION, &create,
1256 sizeof(create), 0);
1257 }
1258
1259 static int ar5523_write_associd(struct ar5523 *ar, struct ieee80211_vif *vif)
1260 {
1261 struct ieee80211_bss_conf *bss = &vif->bss_conf;
1262 struct ar5523_cmd_set_associd associd;
1263
1264 memset(&associd, 0, sizeof(associd));
1265 associd.defaultrateix = cpu_to_be32(0);
1266 associd.associd = cpu_to_be32(vif->cfg.aid);
1267 associd.timoffset = cpu_to_be32(0x3b);
1268 memcpy(associd.bssid, bss->bssid, ETH_ALEN);
1269 return ar5523_cmd_write(ar, WDCMSG_WRITE_ASSOCID, &associd,
1270 sizeof(associd), 0);
1271 }
1272
1273 static void ar5523_bss_info_changed(struct ieee80211_hw *hw,
1274 struct ieee80211_vif *vif,
1275 struct ieee80211_bss_conf *bss,
1276 u64 changed)
1277 {
1278 struct ar5523 *ar = hw->priv;
1279 int error;
1280
1281 ar5523_dbg(ar, "bss_info_changed called\n");
1282 mutex_lock(&ar->mutex);
1283
1284 if (!(changed & BSS_CHANGED_ASSOC))
1285 goto out_unlock;
1286
1287 if (vif->cfg.assoc) {
1288 error = ar5523_create_connection(ar, vif, bss);
1289 if (error) {
1290 ar5523_err(ar, "could not create connection\n");
1291 goto out_unlock;
1292 }
1293
1294 error = ar5523_set_basic_rates(ar, bss);
1295 if (error) {
1296 ar5523_err(ar, "could not set negotiated rate set\n");
1297 goto out_unlock;
1298 }
1299
1300 error = ar5523_write_associd(ar, vif);
1301 if (error) {
1302 ar5523_err(ar, "could not set association\n");
1303 goto out_unlock;
1304 }
1305
1306
1307 ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_ON);
1308 set_bit(AR5523_CONNECTED, &ar->flags);
1309 ieee80211_queue_delayed_work(hw, &ar->stat_work, HZ);
1310
1311 } else {
1312 cancel_delayed_work(&ar->stat_work);
1313 clear_bit(AR5523_CONNECTED, &ar->flags);
1314 ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1315 }
1316
1317 out_unlock:
1318 mutex_unlock(&ar->mutex);
1319
1320 }
1321
1322 #define AR5523_SUPPORTED_FILTERS (FIF_ALLMULTI | \
1323 FIF_FCSFAIL | \
1324 FIF_OTHER_BSS)
1325
1326 static void ar5523_configure_filter(struct ieee80211_hw *hw,
1327 unsigned int changed_flags,
1328 unsigned int *total_flags,
1329 u64 multicast)
1330 {
1331 struct ar5523 *ar = hw->priv;
1332 u32 filter = 0;
1333
1334 ar5523_dbg(ar, "configure_filter called\n");
1335 mutex_lock(&ar->mutex);
1336 ar5523_flush_tx(ar);
1337
1338 *total_flags &= AR5523_SUPPORTED_FILTERS;
1339
1340
1341
1342
1343
1344 filter |= UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1345 UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON |
1346 UATH_FILTER_RX_PROM;
1347
1348 ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1349 ar5523_set_rxfilter(ar, filter, UATH_FILTER_OP_SET);
1350
1351 mutex_unlock(&ar->mutex);
1352 }
1353
1354 static const struct ieee80211_ops ar5523_ops = {
1355 .start = ar5523_start,
1356 .stop = ar5523_stop,
1357 .tx = ar5523_tx,
1358 .set_rts_threshold = ar5523_set_rts_threshold,
1359 .add_interface = ar5523_add_interface,
1360 .remove_interface = ar5523_remove_interface,
1361 .config = ar5523_hwconfig,
1362 .bss_info_changed = ar5523_bss_info_changed,
1363 .configure_filter = ar5523_configure_filter,
1364 .flush = ar5523_flush,
1365 };
1366
1367 static int ar5523_host_available(struct ar5523 *ar)
1368 {
1369 struct ar5523_cmd_host_available setup;
1370
1371
1372 setup.sw_ver_major = cpu_to_be32(ATH_SW_VER_MAJOR);
1373 setup.sw_ver_minor = cpu_to_be32(ATH_SW_VER_MINOR);
1374 setup.sw_ver_patch = cpu_to_be32(ATH_SW_VER_PATCH);
1375 setup.sw_ver_build = cpu_to_be32(ATH_SW_VER_BUILD);
1376 return ar5523_cmd_read(ar, WDCMSG_HOST_AVAILABLE,
1377 &setup, sizeof(setup), NULL, 0, 0);
1378 }
1379
1380 static int ar5523_get_devstatus(struct ar5523 *ar)
1381 {
1382 u8 macaddr[ETH_ALEN];
1383 int error;
1384
1385
1386 error = ar5523_get_status(ar, ST_MAC_ADDR, macaddr, ETH_ALEN);
1387 if (error) {
1388 ar5523_err(ar, "could not read MAC address\n");
1389 return error;
1390 }
1391
1392 SET_IEEE80211_PERM_ADDR(ar->hw, macaddr);
1393
1394 error = ar5523_get_status(ar, ST_SERIAL_NUMBER,
1395 &ar->serial[0], sizeof(ar->serial));
1396 if (error) {
1397 ar5523_err(ar, "could not read device serial number\n");
1398 return error;
1399 }
1400 return 0;
1401 }
1402
1403 #define AR5523_SANE_RXBUFSZ 2000
1404
1405 static int ar5523_get_max_rxsz(struct ar5523 *ar)
1406 {
1407 int error;
1408 __be32 rxsize;
1409
1410
1411 error = ar5523_get_status(ar, ST_WDC_TRANSPORT_CHUNK_SIZE, &rxsize,
1412 sizeof(rxsize));
1413 if (error != 0) {
1414 ar5523_err(ar, "could not read max RX size\n");
1415 return error;
1416 }
1417
1418 ar->rxbufsz = be32_to_cpu(rxsize);
1419
1420 if (!ar->rxbufsz || ar->rxbufsz > AR5523_SANE_RXBUFSZ) {
1421 ar5523_err(ar, "Bad rxbufsz from device. Using %d instead\n",
1422 AR5523_SANE_RXBUFSZ);
1423 ar->rxbufsz = AR5523_SANE_RXBUFSZ;
1424 }
1425
1426 ar5523_dbg(ar, "Max RX buf size: %d\n", ar->rxbufsz);
1427 return 0;
1428 }
1429
1430
1431
1432
1433
1434 static const struct ieee80211_rate ar5523_rates[] = {
1435 { .bitrate = 10, .hw_value = 2, },
1436 { .bitrate = 20, .hw_value = 4 },
1437 { .bitrate = 55, .hw_value = 11, },
1438 { .bitrate = 110, .hw_value = 22, },
1439 { .bitrate = 60, .hw_value = 12, },
1440 { .bitrate = 90, .hw_value = 18, },
1441 { .bitrate = 120, .hw_value = 24, },
1442 { .bitrate = 180, .hw_value = 36, },
1443 { .bitrate = 240, .hw_value = 48, },
1444 { .bitrate = 360, .hw_value = 72, },
1445 { .bitrate = 480, .hw_value = 96, },
1446 { .bitrate = 540, .hw_value = 108, },
1447 };
1448
1449 static const struct ieee80211_channel ar5523_channels[] = {
1450 { .center_freq = 2412 },
1451 { .center_freq = 2417 },
1452 { .center_freq = 2422 },
1453 { .center_freq = 2427 },
1454 { .center_freq = 2432 },
1455 { .center_freq = 2437 },
1456 { .center_freq = 2442 },
1457 { .center_freq = 2447 },
1458 { .center_freq = 2452 },
1459 { .center_freq = 2457 },
1460 { .center_freq = 2462 },
1461 { .center_freq = 2467 },
1462 { .center_freq = 2472 },
1463 { .center_freq = 2484 },
1464 };
1465
1466 static int ar5523_init_modes(struct ar5523 *ar)
1467 {
1468 BUILD_BUG_ON(sizeof(ar->channels) != sizeof(ar5523_channels));
1469 BUILD_BUG_ON(sizeof(ar->rates) != sizeof(ar5523_rates));
1470
1471 memcpy(ar->channels, ar5523_channels, sizeof(ar5523_channels));
1472 memcpy(ar->rates, ar5523_rates, sizeof(ar5523_rates));
1473
1474 ar->band.band = NL80211_BAND_2GHZ;
1475 ar->band.channels = ar->channels;
1476 ar->band.n_channels = ARRAY_SIZE(ar5523_channels);
1477 ar->band.bitrates = ar->rates;
1478 ar->band.n_bitrates = ARRAY_SIZE(ar5523_rates);
1479 ar->hw->wiphy->bands[NL80211_BAND_2GHZ] = &ar->band;
1480 return 0;
1481 }
1482
1483
1484
1485
1486
1487
1488 static int ar5523_load_firmware(struct usb_device *dev)
1489 {
1490 struct ar5523_fwblock *txblock, *rxblock;
1491 const struct firmware *fw;
1492 void *fwbuf;
1493 int len, offset;
1494 int foolen;
1495 int error = -ENXIO;
1496
1497 if (request_firmware(&fw, AR5523_FIRMWARE_FILE, &dev->dev)) {
1498 dev_err(&dev->dev, "no firmware found: %s\n",
1499 AR5523_FIRMWARE_FILE);
1500 return -ENOENT;
1501 }
1502
1503 txblock = kzalloc(sizeof(*txblock), GFP_KERNEL);
1504 if (!txblock)
1505 goto out;
1506
1507 rxblock = kmalloc(sizeof(*rxblock), GFP_KERNEL);
1508 if (!rxblock)
1509 goto out_free_txblock;
1510
1511 fwbuf = kmalloc(AR5523_MAX_FWBLOCK_SIZE, GFP_KERNEL);
1512 if (!fwbuf)
1513 goto out_free_rxblock;
1514
1515 txblock->flags = cpu_to_be32(AR5523_WRITE_BLOCK);
1516 txblock->total = cpu_to_be32(fw->size);
1517
1518 offset = 0;
1519 len = fw->size;
1520 while (len > 0) {
1521 int mlen = min(len, AR5523_MAX_FWBLOCK_SIZE);
1522
1523 txblock->remain = cpu_to_be32(len - mlen);
1524 txblock->len = cpu_to_be32(mlen);
1525
1526
1527 error = usb_bulk_msg(dev, ar5523_cmd_tx_pipe(dev),
1528 txblock, sizeof(*txblock), &foolen,
1529 AR5523_CMD_TIMEOUT);
1530 if (error) {
1531 dev_err(&dev->dev,
1532 "could not send firmware block info\n");
1533 goto out_free_fwbuf;
1534 }
1535
1536
1537 memcpy(fwbuf, fw->data + offset, mlen);
1538 error = usb_bulk_msg(dev, ar5523_data_tx_pipe(dev),
1539 fwbuf, mlen, &foolen,
1540 AR5523_DATA_TIMEOUT);
1541 if (error) {
1542 dev_err(&dev->dev,
1543 "could not send firmware block data\n");
1544 goto out_free_fwbuf;
1545 }
1546
1547
1548 error = usb_bulk_msg(dev, ar5523_cmd_rx_pipe(dev),
1549 rxblock, sizeof(*rxblock), &foolen,
1550 AR5523_CMD_TIMEOUT);
1551 if (error) {
1552 dev_err(&dev->dev,
1553 "could not read firmware answer\n");
1554 goto out_free_fwbuf;
1555 }
1556
1557 len -= mlen;
1558 offset += mlen;
1559 }
1560
1561
1562
1563
1564
1565 error = -ENXIO;
1566
1567 out_free_fwbuf:
1568 kfree(fwbuf);
1569 out_free_rxblock:
1570 kfree(rxblock);
1571 out_free_txblock:
1572 kfree(txblock);
1573 out:
1574 release_firmware(fw);
1575 return error;
1576 }
1577
1578 static int ar5523_probe(struct usb_interface *intf,
1579 const struct usb_device_id *id)
1580 {
1581 struct usb_device *dev = interface_to_usbdev(intf);
1582 struct ieee80211_hw *hw;
1583 struct ar5523 *ar;
1584 int error = -ENOMEM;
1585
1586
1587
1588
1589
1590
1591 if (id->driver_info & AR5523_FLAG_PRE_FIRMWARE)
1592 return ar5523_load_firmware(dev);
1593
1594
1595 hw = ieee80211_alloc_hw(sizeof(*ar), &ar5523_ops);
1596 if (!hw)
1597 goto out;
1598 SET_IEEE80211_DEV(hw, &intf->dev);
1599
1600 ar = hw->priv;
1601 ar->hw = hw;
1602 ar->dev = dev;
1603 mutex_init(&ar->mutex);
1604
1605 INIT_DELAYED_WORK(&ar->stat_work, ar5523_stat_work);
1606 timer_setup(&ar->tx_wd_timer, ar5523_tx_wd_timer, 0);
1607 INIT_WORK(&ar->tx_wd_work, ar5523_tx_wd_work);
1608 INIT_WORK(&ar->tx_work, ar5523_tx_work);
1609 INIT_LIST_HEAD(&ar->tx_queue_pending);
1610 INIT_LIST_HEAD(&ar->tx_queue_submitted);
1611 spin_lock_init(&ar->tx_data_list_lock);
1612 atomic_set(&ar->tx_nr_total, 0);
1613 atomic_set(&ar->tx_nr_pending, 0);
1614 init_waitqueue_head(&ar->tx_flush_waitq);
1615
1616 atomic_set(&ar->rx_data_free_cnt, 0);
1617 INIT_WORK(&ar->rx_refill_work, ar5523_rx_refill_work);
1618 INIT_LIST_HEAD(&ar->rx_data_free);
1619 INIT_LIST_HEAD(&ar->rx_data_used);
1620 spin_lock_init(&ar->rx_data_list_lock);
1621
1622 ar->wq = create_singlethread_workqueue("ar5523");
1623 if (!ar->wq) {
1624 ar5523_err(ar, "Could not create wq\n");
1625 goto out_free_ar;
1626 }
1627
1628 error = ar5523_alloc_rx_bufs(ar);
1629 if (error) {
1630 ar5523_err(ar, "Could not allocate rx buffers\n");
1631 goto out_free_wq;
1632 }
1633
1634 error = ar5523_alloc_rx_cmd(ar);
1635 if (error) {
1636 ar5523_err(ar, "Could not allocate rx command buffers\n");
1637 goto out_free_rx_bufs;
1638 }
1639
1640 error = ar5523_alloc_tx_cmd(ar);
1641 if (error) {
1642 ar5523_err(ar, "Could not allocate tx command buffers\n");
1643 goto out_free_rx_cmd;
1644 }
1645
1646 error = ar5523_submit_rx_cmd(ar);
1647 if (error) {
1648 ar5523_err(ar, "Failed to submit rx cmd\n");
1649 goto out_free_tx_cmd;
1650 }
1651
1652
1653
1654
1655 error = ar5523_host_available(ar);
1656 if (error) {
1657 ar5523_err(ar, "could not initialize adapter\n");
1658 goto out_cancel_rx_cmd;
1659 }
1660
1661 error = ar5523_get_max_rxsz(ar);
1662 if (error) {
1663 ar5523_err(ar, "could not get caps from adapter\n");
1664 goto out_cancel_rx_cmd;
1665 }
1666
1667 error = ar5523_get_devcap(ar);
1668 if (error) {
1669 ar5523_err(ar, "could not get caps from adapter\n");
1670 goto out_cancel_rx_cmd;
1671 }
1672
1673 error = ar5523_get_devstatus(ar);
1674 if (error != 0) {
1675 ar5523_err(ar, "could not get device status\n");
1676 goto out_cancel_rx_cmd;
1677 }
1678
1679 ar5523_info(ar, "MAC/BBP AR5523, RF AR%c112\n",
1680 (id->driver_info & AR5523_FLAG_ABG) ? '5' : '2');
1681
1682 ar->vif = NULL;
1683 ieee80211_hw_set(hw, HAS_RATE_CONTROL);
1684 ieee80211_hw_set(hw, RX_INCLUDES_FCS);
1685 ieee80211_hw_set(hw, SIGNAL_DBM);
1686 hw->extra_tx_headroom = sizeof(struct ar5523_tx_desc) +
1687 sizeof(struct ar5523_chunk);
1688 hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION);
1689 hw->queues = 1;
1690
1691 error = ar5523_init_modes(ar);
1692 if (error)
1693 goto out_cancel_rx_cmd;
1694
1695 wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
1696
1697 usb_set_intfdata(intf, hw);
1698
1699 error = ieee80211_register_hw(hw);
1700 if (error) {
1701 ar5523_err(ar, "could not register device\n");
1702 goto out_cancel_rx_cmd;
1703 }
1704
1705 ar5523_info(ar, "Found and initialized AR5523 device\n");
1706 return 0;
1707
1708 out_cancel_rx_cmd:
1709 ar5523_cancel_rx_cmd(ar);
1710 out_free_tx_cmd:
1711 ar5523_free_tx_cmd(ar);
1712 out_free_rx_cmd:
1713 ar5523_free_rx_cmd(ar);
1714 out_free_rx_bufs:
1715 ar5523_free_rx_bufs(ar);
1716 out_free_wq:
1717 destroy_workqueue(ar->wq);
1718 out_free_ar:
1719 ieee80211_free_hw(hw);
1720 out:
1721 return error;
1722 }
1723
1724 static void ar5523_disconnect(struct usb_interface *intf)
1725 {
1726 struct ieee80211_hw *hw = usb_get_intfdata(intf);
1727 struct ar5523 *ar = hw->priv;
1728
1729 ar5523_dbg(ar, "detaching\n");
1730 set_bit(AR5523_USB_DISCONNECTED, &ar->flags);
1731
1732 ieee80211_unregister_hw(hw);
1733
1734 ar5523_cancel_rx_cmd(ar);
1735 ar5523_free_tx_cmd(ar);
1736 ar5523_free_rx_cmd(ar);
1737 ar5523_free_rx_bufs(ar);
1738
1739 destroy_workqueue(ar->wq);
1740
1741 ieee80211_free_hw(hw);
1742 usb_set_intfdata(intf, NULL);
1743 }
1744
1745 #define AR5523_DEVICE_UG(vendor, device) \
1746 { USB_DEVICE((vendor), (device)) }, \
1747 { USB_DEVICE((vendor), (device) + 1), \
1748 .driver_info = AR5523_FLAG_PRE_FIRMWARE }
1749 #define AR5523_DEVICE_UX(vendor, device) \
1750 { USB_DEVICE((vendor), (device)), \
1751 .driver_info = AR5523_FLAG_ABG }, \
1752 { USB_DEVICE((vendor), (device) + 1), \
1753 .driver_info = AR5523_FLAG_ABG|AR5523_FLAG_PRE_FIRMWARE }
1754
1755 static const struct usb_device_id ar5523_id_table[] = {
1756 AR5523_DEVICE_UG(0x168c, 0x0001),
1757 AR5523_DEVICE_UG(0x0cf3, 0x0001),
1758 AR5523_DEVICE_UG(0x0cf3, 0x0003),
1759 AR5523_DEVICE_UX(0x0cf3, 0x0005),
1760 AR5523_DEVICE_UG(0x0d8e, 0x7801),
1761 AR5523_DEVICE_UX(0x0d8e, 0x7811),
1762 AR5523_DEVICE_UX(0x2001, 0x3a00),
1763 AR5523_DEVICE_UG(0x2001, 0x3a02),
1764 AR5523_DEVICE_UX(0x2001, 0x3a04),
1765 AR5523_DEVICE_UG(0x07d1, 0x3a07),
1766 AR5523_DEVICE_UG(0x1690, 0x0712),
1767 AR5523_DEVICE_UG(0x1690, 0x0710),
1768 AR5523_DEVICE_UG(0x129b, 0x160b),
1769
1770 AR5523_DEVICE_UG(0x16ab, 0x7801),
1771 AR5523_DEVICE_UX(0x16ab, 0x7811),
1772 AR5523_DEVICE_UG(0x0d8e, 0x7802),
1773 AR5523_DEVICE_UX(0x0846, 0x4300),
1774 AR5523_DEVICE_UG(0x0846, 0x4250),
1775 AR5523_DEVICE_UG(0x0846, 0x5f00),
1776 AR5523_DEVICE_UG(0x083a, 0x4506),
1777
1778 AR5523_DEVICE_UG(0x157e, 0x3006),
1779 AR5523_DEVICE_UX(0x157e, 0x3205),
1780 AR5523_DEVICE_UG(0x1435, 0x0826),
1781 AR5523_DEVICE_UX(0x1435, 0x0828),
1782 AR5523_DEVICE_UG(0x0cde, 0x0012),
1783 AR5523_DEVICE_UG(0x1385, 0x4250),
1784 AR5523_DEVICE_UG(0x1385, 0x5f00),
1785 AR5523_DEVICE_UG(0x1385, 0x5f02),
1786 { }
1787 };
1788 MODULE_DEVICE_TABLE(usb, ar5523_id_table);
1789
1790 static struct usb_driver ar5523_driver = {
1791 .name = "ar5523",
1792 .id_table = ar5523_id_table,
1793 .probe = ar5523_probe,
1794 .disconnect = ar5523_disconnect,
1795 };
1796
1797 module_usb_driver(ar5523_driver);
1798
1799 MODULE_LICENSE("Dual BSD/GPL");
1800 MODULE_FIRMWARE(AR5523_FIRMWARE_FILE);