1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27#include <linux/compiler.h>
28#include <linux/kernel.h>
29#include <linux/module.h>
30#include <linux/list.h>
31#include <linux/completion.h>
32#include <linux/firmware.h>
33#include <linux/skbuff.h>
34#include <linux/usb.h>
35#include <net/mac80211.h>
36
37#include "ar5523.h"
38#include "ar5523_hw.h"
39
40
41
42
43
44
45static int ar5523_submit_rx_cmd(struct ar5523 *ar);
46static void ar5523_data_tx_pkt_put(struct ar5523 *ar);
47
48static void ar5523_read_reply(struct ar5523 *ar, struct ar5523_cmd_hdr *hdr,
49 struct ar5523_tx_cmd *cmd)
50{
51 int dlen, olen;
52 __be32 *rp;
53
54 dlen = be32_to_cpu(hdr->len) - sizeof(*hdr);
55
56 if (dlen < 0) {
57 WARN_ON(1);
58 goto out;
59 }
60
61 ar5523_dbg(ar, "Code = %d len = %d\n", be32_to_cpu(hdr->code) & 0xff,
62 dlen);
63
64 rp = (__be32 *)(hdr + 1);
65 if (dlen >= sizeof(u32)) {
66 olen = be32_to_cpu(rp[0]);
67 dlen -= sizeof(u32);
68 if (olen == 0) {
69
70 olen = sizeof(u32);
71 }
72 } else
73 olen = 0;
74
75 if (cmd->odata) {
76 if (cmd->olen < olen) {
77 ar5523_err(ar, "olen to small %d < %d\n",
78 cmd->olen, olen);
79 cmd->olen = 0;
80 cmd->res = -EOVERFLOW;
81 } else {
82 cmd->olen = olen;
83 memcpy(cmd->odata, &rp[1], olen);
84 cmd->res = 0;
85 }
86 }
87
88out:
89 complete(&cmd->done);
90}
91
92static void ar5523_cmd_rx_cb(struct urb *urb)
93{
94 struct ar5523 *ar = urb->context;
95 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
96 struct ar5523_cmd_hdr *hdr = ar->rx_cmd_buf;
97 int dlen;
98 u32 code, hdrlen;
99
100 if (urb->status) {
101 if (urb->status != -ESHUTDOWN)
102 ar5523_err(ar, "RX USB error %d.\n", urb->status);
103 goto skip;
104 }
105
106 if (urb->actual_length < sizeof(struct ar5523_cmd_hdr)) {
107 ar5523_err(ar, "RX USB to short.\n");
108 goto skip;
109 }
110
111 ar5523_dbg(ar, "%s code %02x priv %d\n", __func__,
112 be32_to_cpu(hdr->code) & 0xff, hdr->priv);
113
114 code = be32_to_cpu(hdr->code);
115 hdrlen = be32_to_cpu(hdr->len);
116
117 switch (code & 0xff) {
118 default:
119
120 if (hdr->priv != AR5523_CMD_ID) {
121 ar5523_err(ar, "Unexpected command id: %02x\n",
122 code & 0xff);
123 goto skip;
124 }
125 ar5523_read_reply(ar, hdr, cmd);
126 break;
127
128 case WDCMSG_DEVICE_AVAIL:
129 ar5523_dbg(ar, "WDCMSG_DEVICE_AVAIL\n");
130 cmd->res = 0;
131 cmd->olen = 0;
132 complete(&cmd->done);
133 break;
134
135 case WDCMSG_SEND_COMPLETE:
136 ar5523_dbg(ar, "WDCMSG_SEND_COMPLETE: %d pending\n",
137 atomic_read(&ar->tx_nr_pending));
138 if (!test_bit(AR5523_HW_UP, &ar->flags))
139 ar5523_dbg(ar, "Unexpected WDCMSG_SEND_COMPLETE\n");
140 else {
141 mod_timer(&ar->tx_wd_timer,
142 jiffies + AR5523_TX_WD_TIMEOUT);
143 ar5523_data_tx_pkt_put(ar);
144
145 }
146 break;
147
148 case WDCMSG_TARGET_START:
149
150
151 dlen = hdrlen - sizeof(*hdr);
152 if (dlen != (int)sizeof(u32)) {
153 ar5523_err(ar, "Invalid reply to WDCMSG_TARGET_START");
154 return;
155 }
156 memcpy(cmd->odata, hdr + 1, sizeof(u32));
157 cmd->olen = sizeof(u32);
158 cmd->res = 0;
159 complete(&cmd->done);
160 break;
161
162 case WDCMSG_STATS_UPDATE:
163 ar5523_dbg(ar, "WDCMSG_STATS_UPDATE\n");
164 break;
165 }
166
167skip:
168 ar5523_submit_rx_cmd(ar);
169}
170
171static int ar5523_alloc_rx_cmd(struct ar5523 *ar)
172{
173 ar->rx_cmd_urb = usb_alloc_urb(0, GFP_KERNEL);
174 if (!ar->rx_cmd_urb)
175 return -ENOMEM;
176
177 ar->rx_cmd_buf = usb_alloc_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
178 GFP_KERNEL,
179 &ar->rx_cmd_urb->transfer_dma);
180 if (!ar->rx_cmd_buf) {
181 usb_free_urb(ar->rx_cmd_urb);
182 return -ENOMEM;
183 }
184 return 0;
185}
186
187static void ar5523_cancel_rx_cmd(struct ar5523 *ar)
188{
189 usb_kill_urb(ar->rx_cmd_urb);
190}
191
192static void ar5523_free_rx_cmd(struct ar5523 *ar)
193{
194 usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
195 ar->rx_cmd_buf, ar->rx_cmd_urb->transfer_dma);
196 usb_free_urb(ar->rx_cmd_urb);
197}
198
199static int ar5523_submit_rx_cmd(struct ar5523 *ar)
200{
201 int error;
202
203 usb_fill_bulk_urb(ar->rx_cmd_urb, ar->dev,
204 ar5523_cmd_rx_pipe(ar->dev), ar->rx_cmd_buf,
205 AR5523_MAX_RXCMDSZ, ar5523_cmd_rx_cb, ar);
206 ar->rx_cmd_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
207
208 error = usb_submit_urb(ar->rx_cmd_urb, GFP_ATOMIC);
209 if (error) {
210 if (error != -ENODEV)
211 ar5523_err(ar, "error %d when submitting rx urb\n",
212 error);
213 return error;
214 }
215 return 0;
216}
217
218
219
220
221static void ar5523_cmd_tx_cb(struct urb *urb)
222{
223 struct ar5523_tx_cmd *cmd = urb->context;
224 struct ar5523 *ar = cmd->ar;
225
226 if (urb->status) {
227 ar5523_err(ar, "Failed to TX command. Status = %d\n",
228 urb->status);
229 cmd->res = urb->status;
230 complete(&cmd->done);
231 return;
232 }
233
234 if (!(cmd->flags & AR5523_CMD_FLAG_READ)) {
235 cmd->res = 0;
236 complete(&cmd->done);
237 }
238}
239
240static int ar5523_cmd(struct ar5523 *ar, u32 code, const void *idata,
241 int ilen, void *odata, int olen, int flags)
242{
243 struct ar5523_cmd_hdr *hdr;
244 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
245 int xferlen, error;
246
247
248 xferlen = (sizeof(struct ar5523_cmd_hdr) + ilen + 3) & ~3;
249
250 hdr = (struct ar5523_cmd_hdr *)cmd->buf_tx;
251 memset(hdr, 0, sizeof(struct ar5523_cmd_hdr));
252 hdr->len = cpu_to_be32(xferlen);
253 hdr->code = cpu_to_be32(code);
254 hdr->priv = AR5523_CMD_ID;
255
256 if (flags & AR5523_CMD_FLAG_MAGIC)
257 hdr->magic = cpu_to_be32(1 << 24);
258 memcpy(hdr + 1, idata, ilen);
259
260 cmd->odata = odata;
261 cmd->olen = olen;
262 cmd->flags = flags;
263
264 ar5523_dbg(ar, "do cmd %02x\n", code);
265
266 usb_fill_bulk_urb(cmd->urb_tx, ar->dev, ar5523_cmd_tx_pipe(ar->dev),
267 cmd->buf_tx, xferlen, ar5523_cmd_tx_cb, cmd);
268 cmd->urb_tx->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
269
270 error = usb_submit_urb(cmd->urb_tx, GFP_KERNEL);
271 if (error) {
272 ar5523_err(ar, "could not send command 0x%x, error=%d\n",
273 code, error);
274 return error;
275 }
276
277 if (!wait_for_completion_timeout(&cmd->done, 2 * HZ)) {
278 cmd->odata = NULL;
279 ar5523_err(ar, "timeout waiting for command %02x reply\n",
280 code);
281 cmd->res = -ETIMEDOUT;
282 }
283 return cmd->res;
284}
285
286static int ar5523_cmd_write(struct ar5523 *ar, u32 code, const void *data,
287 int len, int flags)
288{
289 flags &= ~AR5523_CMD_FLAG_READ;
290 return ar5523_cmd(ar, code, data, len, NULL, 0, flags);
291}
292
293static int ar5523_cmd_read(struct ar5523 *ar, u32 code, const void *idata,
294 int ilen, void *odata, int olen, int flags)
295{
296 flags |= AR5523_CMD_FLAG_READ;
297 return ar5523_cmd(ar, code, idata, ilen, odata, olen, flags);
298}
299
300static int ar5523_config(struct ar5523 *ar, u32 reg, u32 val)
301{
302 struct ar5523_write_mac write;
303 int error;
304
305 write.reg = cpu_to_be32(reg);
306 write.len = cpu_to_be32(0);
307 *(__be32 *)write.data = cpu_to_be32(val);
308
309 error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
310 3 * sizeof(u32), 0);
311 if (error != 0)
312 ar5523_err(ar, "could not write register 0x%02x\n", reg);
313 return error;
314}
315
316static int ar5523_config_multi(struct ar5523 *ar, u32 reg, const void *data,
317 int len)
318{
319 struct ar5523_write_mac write;
320 int error;
321
322 write.reg = cpu_to_be32(reg);
323 write.len = cpu_to_be32(len);
324 memcpy(write.data, data, len);
325
326
327 error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
328 (len == 0) ? sizeof(u32) : 2 * sizeof(u32) + len, 0);
329 if (error != 0)
330 ar5523_err(ar, "could not write %d bytes to register 0x%02x\n",
331 len, reg);
332 return error;
333}
334
335static int ar5523_get_status(struct ar5523 *ar, u32 which, void *odata,
336 int olen)
337{
338 int error;
339 __be32 which_be;
340
341 which_be = cpu_to_be32(which);
342 error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_STATUS,
343 &which_be, sizeof(which_be), odata, olen, AR5523_CMD_FLAG_MAGIC);
344 if (error != 0)
345 ar5523_err(ar, "could not read EEPROM offset 0x%02x\n", which);
346 return error;
347}
348
349static int ar5523_get_capability(struct ar5523 *ar, u32 cap, u32 *val)
350{
351 int error;
352 __be32 cap_be, val_be;
353
354 cap_be = cpu_to_be32(cap);
355 error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_CAPABILITY, &cap_be,
356 sizeof(cap_be), &val_be, sizeof(__be32),
357 AR5523_CMD_FLAG_MAGIC);
358 if (error != 0) {
359 ar5523_err(ar, "could not read capability %u\n", cap);
360 return error;
361 }
362 *val = be32_to_cpu(val_be);
363 return error;
364}
365
366static int ar5523_get_devcap(struct ar5523 *ar)
367{
368#define GETCAP(x) do { \
369 error = ar5523_get_capability(ar, x, &cap); \
370 if (error != 0) \
371 return error; \
372 ar5523_info(ar, "Cap: " \
373 "%s=0x%08x\n", #x, cap); \
374} while (0)
375 int error;
376 u32 cap;
377
378
379 GETCAP(CAP_TARGET_VERSION);
380 GETCAP(CAP_TARGET_REVISION);
381 GETCAP(CAP_MAC_VERSION);
382 GETCAP(CAP_MAC_REVISION);
383 GETCAP(CAP_PHY_REVISION);
384 GETCAP(CAP_ANALOG_5GHz_REVISION);
385 GETCAP(CAP_ANALOG_2GHz_REVISION);
386
387 GETCAP(CAP_REG_DOMAIN);
388 GETCAP(CAP_REG_CAP_BITS);
389 GETCAP(CAP_WIRELESS_MODES);
390 GETCAP(CAP_CHAN_SPREAD_SUPPORT);
391 GETCAP(CAP_COMPRESS_SUPPORT);
392 GETCAP(CAP_BURST_SUPPORT);
393 GETCAP(CAP_FAST_FRAMES_SUPPORT);
394 GETCAP(CAP_CHAP_TUNING_SUPPORT);
395 GETCAP(CAP_TURBOG_SUPPORT);
396 GETCAP(CAP_TURBO_PRIME_SUPPORT);
397 GETCAP(CAP_DEVICE_TYPE);
398 GETCAP(CAP_WME_SUPPORT);
399 GETCAP(CAP_TOTAL_QUEUES);
400 GETCAP(CAP_CONNECTION_ID_MAX);
401
402 GETCAP(CAP_LOW_5GHZ_CHAN);
403 GETCAP(CAP_HIGH_5GHZ_CHAN);
404 GETCAP(CAP_LOW_2GHZ_CHAN);
405 GETCAP(CAP_HIGH_2GHZ_CHAN);
406 GETCAP(CAP_TWICE_ANTENNAGAIN_5G);
407 GETCAP(CAP_TWICE_ANTENNAGAIN_2G);
408
409 GETCAP(CAP_CIPHER_AES_CCM);
410 GETCAP(CAP_CIPHER_TKIP);
411 GETCAP(CAP_MIC_TKIP);
412 return 0;
413}
414
415static int ar5523_set_ledsteady(struct ar5523 *ar, int lednum, int ledmode)
416{
417 struct ar5523_cmd_ledsteady led;
418
419 led.lednum = cpu_to_be32(lednum);
420 led.ledmode = cpu_to_be32(ledmode);
421
422 ar5523_dbg(ar, "set %s led %s (steady)\n",
423 (lednum == UATH_LED_LINK) ? "link" : "activity",
424 ledmode ? "on" : "off");
425 return ar5523_cmd_write(ar, WDCMSG_SET_LED_STEADY, &led, sizeof(led),
426 0);
427}
428
429static int ar5523_set_rxfilter(struct ar5523 *ar, u32 bits, u32 op)
430{
431 struct ar5523_cmd_rx_filter rxfilter;
432
433 rxfilter.bits = cpu_to_be32(bits);
434 rxfilter.op = cpu_to_be32(op);
435
436 ar5523_dbg(ar, "setting Rx filter=0x%x flags=0x%x\n", bits, op);
437 return ar5523_cmd_write(ar, WDCMSG_RX_FILTER, &rxfilter,
438 sizeof(rxfilter), 0);
439}
440
441static int ar5523_reset_tx_queues(struct ar5523 *ar)
442{
443 __be32 qid = cpu_to_be32(0);
444
445 ar5523_dbg(ar, "resetting Tx queue\n");
446 return ar5523_cmd_write(ar, WDCMSG_RELEASE_TX_QUEUE,
447 &qid, sizeof(qid), 0);
448}
449
450static int ar5523_set_chan(struct ar5523 *ar)
451{
452 struct ieee80211_conf *conf = &ar->hw->conf;
453
454 struct ar5523_cmd_reset reset;
455
456 memset(&reset, 0, sizeof(reset));
457 reset.flags |= cpu_to_be32(UATH_CHAN_2GHZ);
458 reset.flags |= cpu_to_be32(UATH_CHAN_OFDM);
459 reset.freq = cpu_to_be32(conf->chandef.chan->center_freq);
460 reset.maxrdpower = cpu_to_be32(50);
461 reset.channelchange = cpu_to_be32(1);
462 reset.keeprccontent = cpu_to_be32(0);
463
464 ar5523_dbg(ar, "set chan flags 0x%x freq %d\n",
465 be32_to_cpu(reset.flags),
466 conf->chandef.chan->center_freq);
467 return ar5523_cmd_write(ar, WDCMSG_RESET, &reset, sizeof(reset), 0);
468}
469
470static int ar5523_queue_init(struct ar5523 *ar)
471{
472 struct ar5523_cmd_txq_setup qinfo;
473
474 ar5523_dbg(ar, "setting up Tx queue\n");
475 qinfo.qid = cpu_to_be32(0);
476 qinfo.len = cpu_to_be32(sizeof(qinfo.attr));
477 qinfo.attr.priority = cpu_to_be32(0);
478 qinfo.attr.aifs = cpu_to_be32(3);
479 qinfo.attr.logcwmin = cpu_to_be32(4);
480 qinfo.attr.logcwmax = cpu_to_be32(10);
481 qinfo.attr.bursttime = cpu_to_be32(0);
482 qinfo.attr.mode = cpu_to_be32(0);
483 qinfo.attr.qflags = cpu_to_be32(1);
484 return ar5523_cmd_write(ar, WDCMSG_SETUP_TX_QUEUE, &qinfo,
485 sizeof(qinfo), 0);
486}
487
488static int ar5523_switch_chan(struct ar5523 *ar)
489{
490 int error;
491
492 error = ar5523_set_chan(ar);
493 if (error) {
494 ar5523_err(ar, "could not set chan, error %d\n", error);
495 goto out_err;
496 }
497
498
499 error = ar5523_reset_tx_queues(ar);
500 if (error) {
501 ar5523_err(ar, "could not reset Tx queues, error %d\n",
502 error);
503 goto out_err;
504 }
505
506 error = ar5523_queue_init(ar);
507 if (error)
508 ar5523_err(ar, "could not init wme, error %d\n", error);
509
510out_err:
511 return error;
512}
513
514static void ar5523_rx_data_put(struct ar5523 *ar,
515 struct ar5523_rx_data *data)
516{
517 unsigned long flags;
518 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
519 list_move(&data->list, &ar->rx_data_free);
520 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
521}
522
523static void ar5523_data_rx_cb(struct urb *urb)
524{
525 struct ar5523_rx_data *data = urb->context;
526 struct ar5523 *ar = data->ar;
527 struct ar5523_rx_desc *desc;
528 struct ar5523_chunk *chunk;
529 struct ieee80211_hw *hw = ar->hw;
530 struct ieee80211_rx_status *rx_status;
531 u32 rxlen;
532 int usblen = urb->actual_length;
533 int hdrlen, pad;
534
535 ar5523_dbg(ar, "%s\n", __func__);
536
537 if (urb->status) {
538 if (urb->status != -ESHUTDOWN)
539 ar5523_err(ar, "%s: USB err: %d\n", __func__,
540 urb->status);
541 goto skip;
542 }
543
544 if (usblen < AR5523_MIN_RXBUFSZ) {
545 ar5523_err(ar, "RX: wrong xfer size (usblen=%d)\n", usblen);
546 goto skip;
547 }
548
549 chunk = (struct ar5523_chunk *) data->skb->data;
550
551 if (((chunk->flags & UATH_CFLAGS_FINAL) == 0) ||
552 chunk->seqnum != 0) {
553 ar5523_dbg(ar, "RX: No final flag. s: %d f: %02x l: %d\n",
554 chunk->seqnum, chunk->flags,
555 be16_to_cpu(chunk->length));
556 goto skip;
557 }
558
559
560 desc = (struct ar5523_rx_desc *)
561 (data->skb->data + usblen - sizeof(struct ar5523_rx_desc));
562
563 rxlen = be32_to_cpu(desc->len);
564 if (rxlen > ar->rxbufsz) {
565 ar5523_dbg(ar, "RX: Bad descriptor (len=%d)\n",
566 be32_to_cpu(desc->len));
567 goto skip;
568 }
569
570 if (!rxlen) {
571 ar5523_dbg(ar, "RX: rxlen is 0\n");
572 goto skip;
573 }
574
575 if (be32_to_cpu(desc->status) != 0) {
576 ar5523_dbg(ar, "Bad RX status (0x%x len = %d). Skip\n",
577 be32_to_cpu(desc->status), be32_to_cpu(desc->len));
578 goto skip;
579 }
580
581 skb_reserve(data->skb, sizeof(*chunk));
582 skb_put(data->skb, rxlen - sizeof(struct ar5523_rx_desc));
583
584 hdrlen = ieee80211_get_hdrlen_from_skb(data->skb);
585 if (!IS_ALIGNED(hdrlen, 4)) {
586 ar5523_dbg(ar, "eek, alignment workaround activated\n");
587 pad = ALIGN(hdrlen, 4) - hdrlen;
588 memmove(data->skb->data + pad, data->skb->data, hdrlen);
589 skb_pull(data->skb, pad);
590 skb_put(data->skb, pad);
591 }
592
593 rx_status = IEEE80211_SKB_RXCB(data->skb);
594 memset(rx_status, 0, sizeof(*rx_status));
595 rx_status->freq = be32_to_cpu(desc->channel);
596 rx_status->band = hw->conf.chandef.chan->band;
597 rx_status->signal = -95 + be32_to_cpu(desc->rssi);
598
599 ieee80211_rx_irqsafe(hw, data->skb);
600 data->skb = NULL;
601
602skip:
603 if (data->skb) {
604 dev_kfree_skb_irq(data->skb);
605 data->skb = NULL;
606 }
607
608 ar5523_rx_data_put(ar, data);
609 if (atomic_inc_return(&ar->rx_data_free_cnt) >=
610 AR5523_RX_DATA_REFILL_COUNT &&
611 test_bit(AR5523_HW_UP, &ar->flags))
612 queue_work(ar->wq, &ar->rx_refill_work);
613}
614
615static void ar5523_rx_refill_work(struct work_struct *work)
616{
617 struct ar5523 *ar = container_of(work, struct ar5523, rx_refill_work);
618 struct ar5523_rx_data *data;
619 unsigned long flags;
620 int error;
621
622 ar5523_dbg(ar, "%s\n", __func__);
623 do {
624 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
625
626 if (!list_empty(&ar->rx_data_free))
627 data = (struct ar5523_rx_data *) ar->rx_data_free.next;
628 else
629 data = NULL;
630 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
631
632 if (!data)
633 goto done;
634
635 data->skb = alloc_skb(ar->rxbufsz, GFP_KERNEL);
636 if (!data->skb) {
637 ar5523_err(ar, "could not allocate rx skbuff\n");
638 return;
639 }
640
641 usb_fill_bulk_urb(data->urb, ar->dev,
642 ar5523_data_rx_pipe(ar->dev), data->skb->data,
643 ar->rxbufsz, ar5523_data_rx_cb, data);
644
645 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
646 list_move(&data->list, &ar->rx_data_used);
647 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
648 atomic_dec(&ar->rx_data_free_cnt);
649
650 error = usb_submit_urb(data->urb, GFP_KERNEL);
651 if (error) {
652 kfree_skb(data->skb);
653 if (error != -ENODEV)
654 ar5523_err(ar, "Err sending rx data urb %d\n",
655 error);
656 ar5523_rx_data_put(ar, data);
657 atomic_inc(&ar->rx_data_free_cnt);
658 return;
659 }
660
661 } while (true);
662done:
663 return;
664}
665
666static void ar5523_cancel_rx_bufs(struct ar5523 *ar)
667{
668 struct ar5523_rx_data *data;
669 unsigned long flags;
670
671 do {
672 spin_lock_irqsave(&ar->rx_data_list_lock, flags);
673 if (!list_empty(&ar->rx_data_used))
674 data = (struct ar5523_rx_data *) ar->rx_data_used.next;
675 else
676 data = NULL;
677 spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
678
679 if (!data)
680 break;
681
682 usb_kill_urb(data->urb);
683 list_move(&data->list, &ar->rx_data_free);
684 atomic_inc(&ar->rx_data_free_cnt);
685 } while (data);
686}
687
688static void ar5523_free_rx_bufs(struct ar5523 *ar)
689{
690 struct ar5523_rx_data *data;
691
692 ar5523_cancel_rx_bufs(ar);
693 while (!list_empty(&ar->rx_data_free)) {
694 data = (struct ar5523_rx_data *) ar->rx_data_free.next;
695 list_del(&data->list);
696 usb_free_urb(data->urb);
697 }
698}
699
700static int ar5523_alloc_rx_bufs(struct ar5523 *ar)
701{
702 int i;
703
704 for (i = 0; i < AR5523_RX_DATA_COUNT; i++) {
705 struct ar5523_rx_data *data = &ar->rx_data[i];
706
707 data->ar = ar;
708 data->urb = usb_alloc_urb(0, GFP_KERNEL);
709 if (!data->urb) {
710 ar5523_err(ar, "could not allocate rx data urb\n");
711 goto err;
712 }
713 list_add_tail(&data->list, &ar->rx_data_free);
714 atomic_inc(&ar->rx_data_free_cnt);
715 }
716 return 0;
717
718err:
719 ar5523_free_rx_bufs(ar);
720 return -ENOMEM;
721}
722
723static void ar5523_data_tx_pkt_put(struct ar5523 *ar)
724{
725 atomic_dec(&ar->tx_nr_total);
726 if (!atomic_dec_return(&ar->tx_nr_pending)) {
727 del_timer(&ar->tx_wd_timer);
728 wake_up(&ar->tx_flush_waitq);
729 }
730
731 if (atomic_read(&ar->tx_nr_total) < AR5523_TX_DATA_RESTART_COUNT) {
732 ar5523_dbg(ar, "restart tx queue\n");
733 ieee80211_wake_queues(ar->hw);
734 }
735}
736
737static void ar5523_data_tx_cb(struct urb *urb)
738{
739 struct sk_buff *skb = urb->context;
740 struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
741 struct ar5523_tx_data *data = (struct ar5523_tx_data *)
742 txi->driver_data;
743 struct ar5523 *ar = data->ar;
744 unsigned long flags;
745
746 ar5523_dbg(ar, "data tx urb completed: %d\n", urb->status);
747
748 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
749 list_del(&data->list);
750 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
751
752 if (urb->status) {
753 ar5523_dbg(ar, "%s: urb status: %d\n", __func__, urb->status);
754 ar5523_data_tx_pkt_put(ar);
755 ieee80211_free_txskb(ar->hw, skb);
756 } else {
757 skb_pull(skb, sizeof(struct ar5523_tx_desc) + sizeof(__be32));
758 ieee80211_tx_status_irqsafe(ar->hw, skb);
759 }
760 usb_free_urb(urb);
761}
762
763static void ar5523_tx(struct ieee80211_hw *hw,
764 struct ieee80211_tx_control *control,
765 struct sk_buff *skb)
766{
767 struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
768 struct ar5523_tx_data *data = (struct ar5523_tx_data *)
769 txi->driver_data;
770 struct ar5523 *ar = hw->priv;
771 unsigned long flags;
772
773 ar5523_dbg(ar, "tx called\n");
774 if (atomic_inc_return(&ar->tx_nr_total) >= AR5523_TX_DATA_COUNT) {
775 ar5523_dbg(ar, "tx queue full\n");
776 ar5523_dbg(ar, "stop queues (tot %d pend %d)\n",
777 atomic_read(&ar->tx_nr_total),
778 atomic_read(&ar->tx_nr_pending));
779 ieee80211_stop_queues(hw);
780 }
781
782 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
783 list_add_tail(&data->list, &ar->tx_queue_pending);
784 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
785
786 ieee80211_queue_work(ar->hw, &ar->tx_work);
787}
788
789static void ar5523_tx_work_locked(struct ar5523 *ar)
790{
791 struct ar5523_tx_data *data;
792 struct ar5523_tx_desc *desc;
793 struct ar5523_chunk *chunk;
794 struct ieee80211_tx_info *txi;
795 struct urb *urb;
796 struct sk_buff *skb;
797 int error = 0, paylen;
798 u32 txqid;
799 unsigned long flags;
800
801 BUILD_BUG_ON(sizeof(struct ar5523_tx_data) >
802 IEEE80211_TX_INFO_DRIVER_DATA_SIZE);
803
804 ar5523_dbg(ar, "%s\n", __func__);
805 do {
806 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
807 if (!list_empty(&ar->tx_queue_pending)) {
808 data = (struct ar5523_tx_data *)
809 ar->tx_queue_pending.next;
810 list_del(&data->list);
811 } else
812 data = NULL;
813 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
814
815 if (!data)
816 break;
817
818 txi = container_of((void *)data, struct ieee80211_tx_info,
819 driver_data);
820 txqid = 0;
821
822 skb = container_of((void *)txi, struct sk_buff, cb);
823 paylen = skb->len;
824
825 urb = usb_alloc_urb(0, GFP_KERNEL);
826 if (!urb) {
827 ar5523_err(ar, "Failed to allocate TX urb\n");
828 ieee80211_free_txskb(ar->hw, skb);
829 continue;
830 }
831
832 data->ar = ar;
833 data->urb = urb;
834
835 desc = (struct ar5523_tx_desc *)skb_push(skb, sizeof(*desc));
836 chunk = (struct ar5523_chunk *)skb_push(skb, sizeof(*chunk));
837
838 chunk->seqnum = 0;
839 chunk->flags = UATH_CFLAGS_FINAL;
840 chunk->length = cpu_to_be16(skb->len);
841
842 desc->msglen = cpu_to_be32(skb->len);
843 desc->msgid = AR5523_DATA_ID;
844 desc->buflen = cpu_to_be32(paylen);
845 desc->type = cpu_to_be32(WDCMSG_SEND);
846 desc->flags = cpu_to_be32(UATH_TX_NOTIFY);
847
848 if (test_bit(AR5523_CONNECTED, &ar->flags))
849 desc->connid = cpu_to_be32(AR5523_ID_BSS);
850 else
851 desc->connid = cpu_to_be32(AR5523_ID_BROADCAST);
852
853 if (txi->flags & IEEE80211_TX_CTL_USE_MINRATE)
854 txqid |= UATH_TXQID_MINRATE;
855
856 desc->txqid = cpu_to_be32(txqid);
857
858 urb->transfer_flags = URB_ZERO_PACKET;
859 usb_fill_bulk_urb(urb, ar->dev, ar5523_data_tx_pipe(ar->dev),
860 skb->data, skb->len, ar5523_data_tx_cb, skb);
861
862 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
863 list_add_tail(&data->list, &ar->tx_queue_submitted);
864 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
865 mod_timer(&ar->tx_wd_timer, jiffies + AR5523_TX_WD_TIMEOUT);
866 atomic_inc(&ar->tx_nr_pending);
867
868 ar5523_dbg(ar, "TX Frame (%d pending)\n",
869 atomic_read(&ar->tx_nr_pending));
870 error = usb_submit_urb(urb, GFP_KERNEL);
871 if (error) {
872 ar5523_err(ar, "error %d when submitting tx urb\n",
873 error);
874 spin_lock_irqsave(&ar->tx_data_list_lock, flags);
875 list_del(&data->list);
876 spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
877 atomic_dec(&ar->tx_nr_pending);
878 ar5523_data_tx_pkt_put(ar);
879 usb_free_urb(urb);
880 ieee80211_free_txskb(ar->hw, skb);
881 }
882 } while (true);
883}
884
885static void ar5523_tx_work(struct work_struct *work)
886{
887 struct ar5523 *ar = container_of(work, struct ar5523, tx_work);
888
889 ar5523_dbg(ar, "%s\n", __func__);
890 mutex_lock(&ar->mutex);
891 ar5523_tx_work_locked(ar);
892 mutex_unlock(&ar->mutex);
893}
894
895static void ar5523_tx_wd_timer(unsigned long arg)
896{
897 struct ar5523 *ar = (struct ar5523 *) arg;
898
899 ar5523_dbg(ar, "TX watchdog timer triggered\n");
900 ieee80211_queue_work(ar->hw, &ar->tx_wd_work);
901}
902
903static void ar5523_tx_wd_work(struct work_struct *work)
904{
905 struct ar5523 *ar = container_of(work, struct ar5523, tx_wd_work);
906
907
908
909
910
911 mutex_lock(&ar->mutex);
912 ar5523_err(ar, "TX queue stuck (tot %d pend %d)\n",
913 atomic_read(&ar->tx_nr_total),
914 atomic_read(&ar->tx_nr_pending));
915
916 ar5523_err(ar, "Will restart dongle.\n");
917 ar5523_cmd_write(ar, WDCMSG_TARGET_RESET, NULL, 0, 0);
918 mutex_unlock(&ar->mutex);
919}
920
921static void ar5523_flush_tx(struct ar5523 *ar)
922{
923 ar5523_tx_work_locked(ar);
924
925
926 if (test_bit(AR5523_USB_DISCONNECTED, &ar->flags))
927 return;
928 if (!wait_event_timeout(ar->tx_flush_waitq,
929 !atomic_read(&ar->tx_nr_pending), AR5523_FLUSH_TIMEOUT))
930 ar5523_err(ar, "flush timeout (tot %d pend %d)\n",
931 atomic_read(&ar->tx_nr_total),
932 atomic_read(&ar->tx_nr_pending));
933}
934
935static void ar5523_free_tx_cmd(struct ar5523 *ar)
936{
937 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
938
939 usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ, cmd->buf_tx,
940 cmd->urb_tx->transfer_dma);
941 usb_free_urb(cmd->urb_tx);
942}
943
944static int ar5523_alloc_tx_cmd(struct ar5523 *ar)
945{
946 struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
947
948 cmd->ar = ar;
949 init_completion(&cmd->done);
950
951 cmd->urb_tx = usb_alloc_urb(0, GFP_KERNEL);
952 if (!cmd->urb_tx) {
953 ar5523_err(ar, "could not allocate urb\n");
954 return -ENOMEM;
955 }
956 cmd->buf_tx = usb_alloc_coherent(ar->dev, AR5523_MAX_TXCMDSZ,
957 GFP_KERNEL,
958 &cmd->urb_tx->transfer_dma);
959 if (!cmd->buf_tx) {
960 usb_free_urb(cmd->urb_tx);
961 return -ENOMEM;
962 }
963 return 0;
964}
965
966
967
968
969
970static void ar5523_stat_work(struct work_struct *work)
971{
972 struct ar5523 *ar = container_of(work, struct ar5523, stat_work.work);
973 int error;
974
975 ar5523_dbg(ar, "%s\n", __func__);
976 mutex_lock(&ar->mutex);
977
978
979
980
981
982 error = ar5523_cmd_write(ar, WDCMSG_TARGET_GET_STATS, NULL, 0, 0);
983 if (error)
984 ar5523_err(ar, "could not query stats, error %d\n", error);
985 mutex_unlock(&ar->mutex);
986 ieee80211_queue_delayed_work(ar->hw, &ar->stat_work, HZ);
987}
988
989
990
991
992static int ar5523_start(struct ieee80211_hw *hw)
993{
994 struct ar5523 *ar = hw->priv;
995 int error;
996 __be32 val;
997
998 ar5523_dbg(ar, "start called\n");
999
1000 mutex_lock(&ar->mutex);
1001 val = cpu_to_be32(0);
1002 ar5523_cmd_write(ar, WDCMSG_BIND, &val, sizeof(val), 0);
1003
1004
1005 ar5523_config_multi(ar, CFG_MAC_ADDR, &ar->hw->wiphy->perm_addr,
1006 ETH_ALEN);
1007
1008
1009 ar5523_config(ar, CFG_RATE_CONTROL_ENABLE, 0x00000001);
1010 ar5523_config(ar, CFG_DIVERSITY_CTL, 0x00000001);
1011 ar5523_config(ar, CFG_ABOLT, 0x0000003f);
1012 ar5523_config(ar, CFG_WME_ENABLED, 0x00000000);
1013
1014 ar5523_config(ar, CFG_SERVICE_TYPE, 1);
1015 ar5523_config(ar, CFG_TP_SCALE, 0x00000000);
1016 ar5523_config(ar, CFG_TPC_HALF_DBM5, 0x0000003c);
1017 ar5523_config(ar, CFG_TPC_HALF_DBM2, 0x0000003c);
1018 ar5523_config(ar, CFG_OVERRD_TX_POWER, 0x00000000);
1019 ar5523_config(ar, CFG_GMODE_PROTECTION, 0x00000000);
1020 ar5523_config(ar, CFG_GMODE_PROTECT_RATE_INDEX, 0x00000003);
1021 ar5523_config(ar, CFG_PROTECTION_TYPE, 0x00000000);
1022 ar5523_config(ar, CFG_MODE_CTS, 0x00000002);
1023
1024 error = ar5523_cmd_read(ar, WDCMSG_TARGET_START, NULL, 0,
1025 &val, sizeof(val), AR5523_CMD_FLAG_MAGIC);
1026 if (error) {
1027 ar5523_dbg(ar, "could not start target, error %d\n", error);
1028 goto err;
1029 }
1030 ar5523_dbg(ar, "WDCMSG_TARGET_START returns handle: 0x%x\n",
1031 be32_to_cpu(val));
1032
1033 ar5523_switch_chan(ar);
1034
1035 val = cpu_to_be32(TARGET_DEVICE_AWAKE);
1036 ar5523_cmd_write(ar, WDCMSG_SET_PWR_MODE, &val, sizeof(val), 0);
1037
1038 ar5523_cmd_write(ar, WDCMSG_RESET_KEY_CACHE, NULL, 0, 0);
1039
1040 set_bit(AR5523_HW_UP, &ar->flags);
1041 queue_work(ar->wq, &ar->rx_refill_work);
1042
1043
1044 ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1045 ar5523_set_rxfilter(ar,
1046 UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1047 UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON,
1048 UATH_FILTER_OP_SET);
1049
1050 ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_ON);
1051 ar5523_dbg(ar, "start OK\n");
1052
1053err:
1054 mutex_unlock(&ar->mutex);
1055 return error;
1056}
1057
1058static void ar5523_stop(struct ieee80211_hw *hw)
1059{
1060 struct ar5523 *ar = hw->priv;
1061
1062 ar5523_dbg(ar, "stop called\n");
1063
1064 cancel_delayed_work_sync(&ar->stat_work);
1065 mutex_lock(&ar->mutex);
1066 clear_bit(AR5523_HW_UP, &ar->flags);
1067
1068 ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1069 ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_OFF);
1070
1071 ar5523_cmd_write(ar, WDCMSG_TARGET_STOP, NULL, 0, 0);
1072
1073 del_timer_sync(&ar->tx_wd_timer);
1074 cancel_work_sync(&ar->tx_wd_work);
1075 cancel_work_sync(&ar->rx_refill_work);
1076 ar5523_cancel_rx_bufs(ar);
1077 mutex_unlock(&ar->mutex);
1078}
1079
1080static int ar5523_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1081{
1082 struct ar5523 *ar = hw->priv;
1083 int ret;
1084
1085 ar5523_dbg(ar, "set_rts_threshold called\n");
1086 mutex_lock(&ar->mutex);
1087
1088 ret = ar5523_config(ar, CFG_USER_RTS_THRESHOLD, value);
1089
1090 mutex_unlock(&ar->mutex);
1091 return ret;
1092}
1093
1094static void ar5523_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1095 u32 queues, bool drop)
1096{
1097 struct ar5523 *ar = hw->priv;
1098
1099 ar5523_dbg(ar, "flush called\n");
1100 ar5523_flush_tx(ar);
1101}
1102
1103static int ar5523_add_interface(struct ieee80211_hw *hw,
1104 struct ieee80211_vif *vif)
1105{
1106 struct ar5523 *ar = hw->priv;
1107
1108 ar5523_dbg(ar, "add interface called\n");
1109
1110 if (ar->vif) {
1111 ar5523_dbg(ar, "invalid add_interface\n");
1112 return -EOPNOTSUPP;
1113 }
1114
1115 switch (vif->type) {
1116 case NL80211_IFTYPE_STATION:
1117 ar->vif = vif;
1118 break;
1119 default:
1120 return -EOPNOTSUPP;
1121 }
1122 return 0;
1123}
1124
1125static void ar5523_remove_interface(struct ieee80211_hw *hw,
1126 struct ieee80211_vif *vif)
1127{
1128 struct ar5523 *ar = hw->priv;
1129
1130 ar5523_dbg(ar, "remove interface called\n");
1131 ar->vif = NULL;
1132}
1133
1134static int ar5523_hwconfig(struct ieee80211_hw *hw, u32 changed)
1135{
1136 struct ar5523 *ar = hw->priv;
1137
1138 ar5523_dbg(ar, "config called\n");
1139 mutex_lock(&ar->mutex);
1140 if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
1141 ar5523_dbg(ar, "Do channel switch\n");
1142 ar5523_flush_tx(ar);
1143 ar5523_switch_chan(ar);
1144 }
1145 mutex_unlock(&ar->mutex);
1146 return 0;
1147}
1148
1149static int ar5523_get_wlan_mode(struct ar5523 *ar,
1150 struct ieee80211_bss_conf *bss_conf)
1151{
1152 struct ieee80211_supported_band *band;
1153 int bit;
1154 struct ieee80211_sta *sta;
1155 u32 sta_rate_set;
1156
1157 band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1158 sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1159 if (!sta) {
1160 ar5523_info(ar, "STA not found!\n");
1161 return WLAN_MODE_11b;
1162 }
1163 sta_rate_set = sta->supp_rates[ar->hw->conf.chandef.chan->band];
1164
1165 for (bit = 0; bit < band->n_bitrates; bit++) {
1166 if (sta_rate_set & 1) {
1167 int rate = band->bitrates[bit].bitrate;
1168 switch (rate) {
1169 case 60:
1170 case 90:
1171 case 120:
1172 case 180:
1173 case 240:
1174 case 360:
1175 case 480:
1176 case 540:
1177 return WLAN_MODE_11g;
1178 }
1179 }
1180 sta_rate_set >>= 1;
1181 }
1182 return WLAN_MODE_11b;
1183}
1184
1185static void ar5523_create_rateset(struct ar5523 *ar,
1186 struct ieee80211_bss_conf *bss_conf,
1187 struct ar5523_cmd_rateset *rs,
1188 bool basic)
1189{
1190 struct ieee80211_supported_band *band;
1191 struct ieee80211_sta *sta;
1192 int bit, i = 0;
1193 u32 sta_rate_set, basic_rate_set;
1194
1195 sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1196 basic_rate_set = bss_conf->basic_rates;
1197 if (!sta) {
1198 ar5523_info(ar, "STA not found. Cannot set rates\n");
1199 sta_rate_set = bss_conf->basic_rates;
1200 } else
1201 sta_rate_set = sta->supp_rates[ar->hw->conf.chandef.chan->band];
1202
1203 ar5523_dbg(ar, "sta rate_set = %08x\n", sta_rate_set);
1204
1205 band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1206 for (bit = 0; bit < band->n_bitrates; bit++) {
1207 BUG_ON(i >= AR5523_MAX_NRATES);
1208 ar5523_dbg(ar, "Considering rate %d : %d\n",
1209 band->bitrates[bit].hw_value, sta_rate_set & 1);
1210 if (sta_rate_set & 1) {
1211 rs->set[i] = band->bitrates[bit].hw_value;
1212 if (basic_rate_set & 1 && basic)
1213 rs->set[i] |= 0x80;
1214 i++;
1215 }
1216 sta_rate_set >>= 1;
1217 basic_rate_set >>= 1;
1218 }
1219
1220 rs->length = i;
1221}
1222
1223static int ar5523_set_basic_rates(struct ar5523 *ar,
1224 struct ieee80211_bss_conf *bss)
1225{
1226 struct ar5523_cmd_rates rates;
1227
1228 memset(&rates, 0, sizeof(rates));
1229 rates.connid = cpu_to_be32(2);
1230 rates.size = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1231 ar5523_create_rateset(ar, bss, &rates.rateset, true);
1232
1233 return ar5523_cmd_write(ar, WDCMSG_SET_BASIC_RATE, &rates,
1234 sizeof(rates), 0);
1235}
1236
1237static int ar5523_create_connection(struct ar5523 *ar,
1238 struct ieee80211_vif *vif,
1239 struct ieee80211_bss_conf *bss)
1240{
1241 struct ar5523_cmd_create_connection create;
1242 int wlan_mode;
1243
1244 memset(&create, 0, sizeof(create));
1245 create.connid = cpu_to_be32(2);
1246 create.bssid = cpu_to_be32(0);
1247
1248 create.size = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1249
1250 ar5523_create_rateset(ar, bss, &create.connattr.rateset, false);
1251
1252 wlan_mode = ar5523_get_wlan_mode(ar, bss);
1253 create.connattr.wlanmode = cpu_to_be32(wlan_mode);
1254
1255 return ar5523_cmd_write(ar, WDCMSG_CREATE_CONNECTION, &create,
1256 sizeof(create), 0);
1257}
1258
1259static int ar5523_write_associd(struct ar5523 *ar,
1260 struct ieee80211_bss_conf *bss)
1261{
1262 struct ar5523_cmd_set_associd associd;
1263
1264 memset(&associd, 0, sizeof(associd));
1265 associd.defaultrateix = cpu_to_be32(0);
1266 associd.associd = cpu_to_be32(bss->aid);
1267 associd.timoffset = cpu_to_be32(0x3b);
1268 memcpy(associd.bssid, bss->bssid, ETH_ALEN);
1269 return ar5523_cmd_write(ar, WDCMSG_WRITE_ASSOCID, &associd,
1270 sizeof(associd), 0);
1271}
1272
1273static void ar5523_bss_info_changed(struct ieee80211_hw *hw,
1274 struct ieee80211_vif *vif,
1275 struct ieee80211_bss_conf *bss,
1276 u32 changed)
1277{
1278 struct ar5523 *ar = hw->priv;
1279 int error;
1280
1281 ar5523_dbg(ar, "bss_info_changed called\n");
1282 mutex_lock(&ar->mutex);
1283
1284 if (!(changed & BSS_CHANGED_ASSOC))
1285 goto out_unlock;
1286
1287 if (bss->assoc) {
1288 error = ar5523_create_connection(ar, vif, bss);
1289 if (error) {
1290 ar5523_err(ar, "could not create connection\n");
1291 goto out_unlock;
1292 }
1293
1294 error = ar5523_set_basic_rates(ar, bss);
1295 if (error) {
1296 ar5523_err(ar, "could not set negotiated rate set\n");
1297 goto out_unlock;
1298 }
1299
1300 error = ar5523_write_associd(ar, bss);
1301 if (error) {
1302 ar5523_err(ar, "could not set association\n");
1303 goto out_unlock;
1304 }
1305
1306
1307 ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_ON);
1308 set_bit(AR5523_CONNECTED, &ar->flags);
1309 ieee80211_queue_delayed_work(hw, &ar->stat_work, HZ);
1310
1311 } else {
1312 cancel_delayed_work(&ar->stat_work);
1313 clear_bit(AR5523_CONNECTED, &ar->flags);
1314 ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1315 }
1316
1317out_unlock:
1318 mutex_unlock(&ar->mutex);
1319
1320}
1321
1322#define AR5523_SUPPORTED_FILTERS (FIF_PROMISC_IN_BSS | \
1323 FIF_ALLMULTI | \
1324 FIF_FCSFAIL | \
1325 FIF_OTHER_BSS)
1326
1327static void ar5523_configure_filter(struct ieee80211_hw *hw,
1328 unsigned int changed_flags,
1329 unsigned int *total_flags,
1330 u64 multicast)
1331{
1332 struct ar5523 *ar = hw->priv;
1333 u32 filter = 0;
1334
1335 ar5523_dbg(ar, "configure_filter called\n");
1336 mutex_lock(&ar->mutex);
1337 ar5523_flush_tx(ar);
1338
1339 *total_flags &= AR5523_SUPPORTED_FILTERS;
1340
1341
1342
1343
1344
1345 filter |= UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1346 UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON |
1347 UATH_FILTER_RX_PROM;
1348
1349 ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1350 ar5523_set_rxfilter(ar, filter, UATH_FILTER_OP_SET);
1351
1352 mutex_unlock(&ar->mutex);
1353}
1354
1355static const struct ieee80211_ops ar5523_ops = {
1356 .start = ar5523_start,
1357 .stop = ar5523_stop,
1358 .tx = ar5523_tx,
1359 .set_rts_threshold = ar5523_set_rts_threshold,
1360 .add_interface = ar5523_add_interface,
1361 .remove_interface = ar5523_remove_interface,
1362 .config = ar5523_hwconfig,
1363 .bss_info_changed = ar5523_bss_info_changed,
1364 .configure_filter = ar5523_configure_filter,
1365 .flush = ar5523_flush,
1366};
1367
1368static int ar5523_host_available(struct ar5523 *ar)
1369{
1370 struct ar5523_cmd_host_available setup;
1371
1372
1373 setup.sw_ver_major = cpu_to_be32(ATH_SW_VER_MAJOR);
1374 setup.sw_ver_minor = cpu_to_be32(ATH_SW_VER_MINOR);
1375 setup.sw_ver_patch = cpu_to_be32(ATH_SW_VER_PATCH);
1376 setup.sw_ver_build = cpu_to_be32(ATH_SW_VER_BUILD);
1377 return ar5523_cmd_read(ar, WDCMSG_HOST_AVAILABLE,
1378 &setup, sizeof(setup), NULL, 0, 0);
1379}
1380
1381static int ar5523_get_devstatus(struct ar5523 *ar)
1382{
1383 u8 macaddr[ETH_ALEN];
1384 int error;
1385
1386
1387 error = ar5523_get_status(ar, ST_MAC_ADDR, macaddr, ETH_ALEN);
1388 if (error) {
1389 ar5523_err(ar, "could not read MAC address\n");
1390 return error;
1391 }
1392
1393 SET_IEEE80211_PERM_ADDR(ar->hw, macaddr);
1394
1395 error = ar5523_get_status(ar, ST_SERIAL_NUMBER,
1396 &ar->serial[0], sizeof(ar->serial));
1397 if (error) {
1398 ar5523_err(ar, "could not read device serial number\n");
1399 return error;
1400 }
1401 return 0;
1402}
1403
1404#define AR5523_SANE_RXBUFSZ 2000
1405
1406static int ar5523_get_max_rxsz(struct ar5523 *ar)
1407{
1408 int error;
1409 __be32 rxsize;
1410
1411
1412 error = ar5523_get_status(ar, ST_WDC_TRANSPORT_CHUNK_SIZE, &rxsize,
1413 sizeof(rxsize));
1414 if (error != 0) {
1415 ar5523_err(ar, "could not read max RX size\n");
1416 return error;
1417 }
1418
1419 ar->rxbufsz = be32_to_cpu(rxsize);
1420
1421 if (!ar->rxbufsz || ar->rxbufsz > AR5523_SANE_RXBUFSZ) {
1422 ar5523_err(ar, "Bad rxbufsz from device. Using %d instead\n",
1423 AR5523_SANE_RXBUFSZ);
1424 ar->rxbufsz = AR5523_SANE_RXBUFSZ;
1425 }
1426
1427 ar5523_dbg(ar, "Max RX buf size: %d\n", ar->rxbufsz);
1428 return 0;
1429}
1430
1431
1432
1433
1434
1435static const struct ieee80211_rate ar5523_rates[] = {
1436 { .bitrate = 10, .hw_value = 2, },
1437 { .bitrate = 20, .hw_value = 4 },
1438 { .bitrate = 55, .hw_value = 11, },
1439 { .bitrate = 110, .hw_value = 22, },
1440 { .bitrate = 60, .hw_value = 12, },
1441 { .bitrate = 90, .hw_value = 18, },
1442 { .bitrate = 120, .hw_value = 24, },
1443 { .bitrate = 180, .hw_value = 36, },
1444 { .bitrate = 240, .hw_value = 48, },
1445 { .bitrate = 360, .hw_value = 72, },
1446 { .bitrate = 480, .hw_value = 96, },
1447 { .bitrate = 540, .hw_value = 108, },
1448};
1449
1450static const struct ieee80211_channel ar5523_channels[] = {
1451 { .center_freq = 2412 },
1452 { .center_freq = 2417 },
1453 { .center_freq = 2422 },
1454 { .center_freq = 2427 },
1455 { .center_freq = 2432 },
1456 { .center_freq = 2437 },
1457 { .center_freq = 2442 },
1458 { .center_freq = 2447 },
1459 { .center_freq = 2452 },
1460 { .center_freq = 2457 },
1461 { .center_freq = 2462 },
1462 { .center_freq = 2467 },
1463 { .center_freq = 2472 },
1464 { .center_freq = 2484 },
1465};
1466
1467static int ar5523_init_modes(struct ar5523 *ar)
1468{
1469 BUILD_BUG_ON(sizeof(ar->channels) != sizeof(ar5523_channels));
1470 BUILD_BUG_ON(sizeof(ar->rates) != sizeof(ar5523_rates));
1471
1472 memcpy(ar->channels, ar5523_channels, sizeof(ar5523_channels));
1473 memcpy(ar->rates, ar5523_rates, sizeof(ar5523_rates));
1474
1475 ar->band.band = IEEE80211_BAND_2GHZ;
1476 ar->band.channels = ar->channels;
1477 ar->band.n_channels = ARRAY_SIZE(ar5523_channels);
1478 ar->band.bitrates = ar->rates;
1479 ar->band.n_bitrates = ARRAY_SIZE(ar5523_rates);
1480 ar->hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &ar->band;
1481 return 0;
1482}
1483
1484
1485
1486
1487
1488
1489static int ar5523_load_firmware(struct usb_device *dev)
1490{
1491 struct ar5523_fwblock *txblock, *rxblock;
1492 const struct firmware *fw;
1493 void *fwbuf;
1494 int len, offset;
1495 int foolen;
1496 int error = -ENXIO;
1497
1498 if (request_firmware(&fw, AR5523_FIRMWARE_FILE, &dev->dev)) {
1499 dev_err(&dev->dev, "no firmware found: %s\n",
1500 AR5523_FIRMWARE_FILE);
1501 return -ENOENT;
1502 }
1503
1504 txblock = kmalloc(sizeof(*txblock), GFP_KERNEL);
1505 if (!txblock)
1506 goto out;
1507
1508 rxblock = kmalloc(sizeof(*rxblock), GFP_KERNEL);
1509 if (!rxblock)
1510 goto out_free_txblock;
1511
1512 fwbuf = kmalloc(AR5523_MAX_FWBLOCK_SIZE, GFP_KERNEL);
1513 if (!fwbuf)
1514 goto out_free_rxblock;
1515
1516 memset(txblock, 0, sizeof(struct ar5523_fwblock));
1517 txblock->flags = cpu_to_be32(AR5523_WRITE_BLOCK);
1518 txblock->total = cpu_to_be32(fw->size);
1519
1520 offset = 0;
1521 len = fw->size;
1522 while (len > 0) {
1523 int mlen = min(len, AR5523_MAX_FWBLOCK_SIZE);
1524
1525 txblock->remain = cpu_to_be32(len - mlen);
1526 txblock->len = cpu_to_be32(mlen);
1527
1528
1529 error = usb_bulk_msg(dev, ar5523_cmd_tx_pipe(dev),
1530 txblock, sizeof(*txblock), &foolen,
1531 AR5523_CMD_TIMEOUT);
1532 if (error) {
1533 dev_err(&dev->dev,
1534 "could not send firmware block info\n");
1535 goto out_free_fwbuf;
1536 }
1537
1538
1539 memcpy(fwbuf, fw->data + offset, mlen);
1540 error = usb_bulk_msg(dev, ar5523_data_tx_pipe(dev),
1541 fwbuf, mlen, &foolen,
1542 AR5523_DATA_TIMEOUT);
1543 if (error) {
1544 dev_err(&dev->dev,
1545 "could not send firmware block data\n");
1546 goto out_free_fwbuf;
1547 }
1548
1549
1550 error = usb_bulk_msg(dev, ar5523_cmd_rx_pipe(dev),
1551 rxblock, sizeof(*rxblock), &foolen,
1552 AR5523_CMD_TIMEOUT);
1553 if (error) {
1554 dev_err(&dev->dev,
1555 "could not read firmware answer\n");
1556 goto out_free_fwbuf;
1557 }
1558
1559 len -= mlen;
1560 offset += mlen;
1561 }
1562
1563
1564
1565
1566
1567 error = -ENXIO;
1568
1569 out_free_fwbuf:
1570 kfree(fwbuf);
1571 out_free_rxblock:
1572 kfree(rxblock);
1573 out_free_txblock:
1574 kfree(txblock);
1575 out:
1576 release_firmware(fw);
1577 return error;
1578}
1579
1580static int ar5523_probe(struct usb_interface *intf,
1581 const struct usb_device_id *id)
1582{
1583 struct usb_device *dev = interface_to_usbdev(intf);
1584 struct ieee80211_hw *hw;
1585 struct ar5523 *ar;
1586 int error = -ENOMEM;
1587
1588
1589
1590
1591
1592
1593 if (id->driver_info & AR5523_FLAG_PRE_FIRMWARE)
1594 return ar5523_load_firmware(dev);
1595
1596
1597 hw = ieee80211_alloc_hw(sizeof(*ar), &ar5523_ops);
1598 if (!hw)
1599 goto out;
1600 SET_IEEE80211_DEV(hw, &intf->dev);
1601
1602 ar = hw->priv;
1603 ar->hw = hw;
1604 ar->dev = dev;
1605 mutex_init(&ar->mutex);
1606
1607 INIT_DELAYED_WORK(&ar->stat_work, ar5523_stat_work);
1608 init_timer(&ar->tx_wd_timer);
1609 setup_timer(&ar->tx_wd_timer, ar5523_tx_wd_timer, (unsigned long) ar);
1610 INIT_WORK(&ar->tx_wd_work, ar5523_tx_wd_work);
1611 INIT_WORK(&ar->tx_work, ar5523_tx_work);
1612 INIT_LIST_HEAD(&ar->tx_queue_pending);
1613 INIT_LIST_HEAD(&ar->tx_queue_submitted);
1614 spin_lock_init(&ar->tx_data_list_lock);
1615 atomic_set(&ar->tx_nr_total, 0);
1616 atomic_set(&ar->tx_nr_pending, 0);
1617 init_waitqueue_head(&ar->tx_flush_waitq);
1618
1619 atomic_set(&ar->rx_data_free_cnt, 0);
1620 INIT_WORK(&ar->rx_refill_work, ar5523_rx_refill_work);
1621 INIT_LIST_HEAD(&ar->rx_data_free);
1622 INIT_LIST_HEAD(&ar->rx_data_used);
1623 spin_lock_init(&ar->rx_data_list_lock);
1624
1625 ar->wq = create_singlethread_workqueue("ar5523");
1626 if (!ar->wq) {
1627 ar5523_err(ar, "Could not create wq\n");
1628 goto out_free_ar;
1629 }
1630
1631 error = ar5523_alloc_rx_bufs(ar);
1632 if (error) {
1633 ar5523_err(ar, "Could not allocate rx buffers\n");
1634 goto out_free_wq;
1635 }
1636
1637 error = ar5523_alloc_rx_cmd(ar);
1638 if (error) {
1639 ar5523_err(ar, "Could not allocate rx command buffers\n");
1640 goto out_free_rx_bufs;
1641 }
1642
1643 error = ar5523_alloc_tx_cmd(ar);
1644 if (error) {
1645 ar5523_err(ar, "Could not allocate tx command buffers\n");
1646 goto out_free_rx_cmd;
1647 }
1648
1649 error = ar5523_submit_rx_cmd(ar);
1650 if (error) {
1651 ar5523_err(ar, "Failed to submit rx cmd\n");
1652 goto out_free_tx_cmd;
1653 }
1654
1655
1656
1657
1658 error = ar5523_host_available(ar);
1659 if (error) {
1660 ar5523_err(ar, "could not initialize adapter\n");
1661 goto out_cancel_rx_cmd;
1662 }
1663
1664 error = ar5523_get_max_rxsz(ar);
1665 if (error) {
1666 ar5523_err(ar, "could not get caps from adapter\n");
1667 goto out_cancel_rx_cmd;
1668 }
1669
1670 error = ar5523_get_devcap(ar);
1671 if (error) {
1672 ar5523_err(ar, "could not get caps from adapter\n");
1673 goto out_cancel_rx_cmd;
1674 }
1675
1676 error = ar5523_get_devstatus(ar);
1677 if (error != 0) {
1678 ar5523_err(ar, "could not get device status\n");
1679 goto out_cancel_rx_cmd;
1680 }
1681
1682 ar5523_info(ar, "MAC/BBP AR5523, RF AR%c112\n",
1683 (id->driver_info & AR5523_FLAG_ABG) ? '5' : '2');
1684
1685 ar->vif = NULL;
1686 hw->flags = IEEE80211_HW_RX_INCLUDES_FCS |
1687 IEEE80211_HW_SIGNAL_DBM |
1688 IEEE80211_HW_HAS_RATE_CONTROL;
1689 hw->extra_tx_headroom = sizeof(struct ar5523_tx_desc) +
1690 sizeof(struct ar5523_chunk);
1691 hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION);
1692 hw->queues = 1;
1693
1694 error = ar5523_init_modes(ar);
1695 if (error)
1696 goto out_cancel_rx_cmd;
1697
1698 usb_set_intfdata(intf, hw);
1699
1700 error = ieee80211_register_hw(hw);
1701 if (error) {
1702 ar5523_err(ar, "could not register device\n");
1703 goto out_cancel_rx_cmd;
1704 }
1705
1706 ar5523_info(ar, "Found and initialized AR5523 device\n");
1707 return 0;
1708
1709out_cancel_rx_cmd:
1710 ar5523_cancel_rx_cmd(ar);
1711out_free_tx_cmd:
1712 ar5523_free_tx_cmd(ar);
1713out_free_rx_cmd:
1714 ar5523_free_rx_cmd(ar);
1715out_free_rx_bufs:
1716 ar5523_free_rx_bufs(ar);
1717out_free_wq:
1718 destroy_workqueue(ar->wq);
1719out_free_ar:
1720 ieee80211_free_hw(hw);
1721out:
1722 return error;
1723}
1724
1725static void ar5523_disconnect(struct usb_interface *intf)
1726{
1727 struct ieee80211_hw *hw = usb_get_intfdata(intf);
1728 struct ar5523 *ar = hw->priv;
1729
1730 ar5523_dbg(ar, "detaching\n");
1731 set_bit(AR5523_USB_DISCONNECTED, &ar->flags);
1732
1733 ieee80211_unregister_hw(hw);
1734
1735 ar5523_cancel_rx_cmd(ar);
1736 ar5523_free_tx_cmd(ar);
1737 ar5523_free_rx_cmd(ar);
1738 ar5523_free_rx_bufs(ar);
1739
1740 destroy_workqueue(ar->wq);
1741
1742 ieee80211_free_hw(hw);
1743 usb_set_intfdata(intf, NULL);
1744}
1745
1746#define AR5523_DEVICE_UG(vendor, device) \
1747 { USB_DEVICE((vendor), (device)) }, \
1748 { USB_DEVICE((vendor), (device) + 1), \
1749 .driver_info = AR5523_FLAG_PRE_FIRMWARE }
1750#define AR5523_DEVICE_UX(vendor, device) \
1751 { USB_DEVICE((vendor), (device)), \
1752 .driver_info = AR5523_FLAG_ABG }, \
1753 { USB_DEVICE((vendor), (device) + 1), \
1754 .driver_info = AR5523_FLAG_ABG|AR5523_FLAG_PRE_FIRMWARE }
1755
1756static struct usb_device_id ar5523_id_table[] = {
1757 AR5523_DEVICE_UG(0x168c, 0x0001),
1758 AR5523_DEVICE_UG(0x0cf3, 0x0001),
1759 AR5523_DEVICE_UG(0x0cf3, 0x0003),
1760 AR5523_DEVICE_UX(0x0cf3, 0x0005),
1761 AR5523_DEVICE_UG(0x0d8e, 0x7801),
1762 AR5523_DEVICE_UX(0x0d8e, 0x7811),
1763 AR5523_DEVICE_UX(0x2001, 0x3a00),
1764 AR5523_DEVICE_UG(0x2001, 0x3a02),
1765 AR5523_DEVICE_UX(0x2001, 0x3a04),
1766 AR5523_DEVICE_UG(0x07d1, 0x3a07),
1767 AR5523_DEVICE_UG(0x1690, 0x0712),
1768 AR5523_DEVICE_UG(0x1690, 0x0710),
1769 AR5523_DEVICE_UG(0x129b, 0x160b),
1770
1771 AR5523_DEVICE_UG(0x16ab, 0x7801),
1772 AR5523_DEVICE_UX(0x16ab, 0x7811),
1773 AR5523_DEVICE_UG(0x0d8e, 0x7802),
1774 AR5523_DEVICE_UX(0x0846, 0x4300),
1775 AR5523_DEVICE_UG(0x0846, 0x4250),
1776 AR5523_DEVICE_UG(0x0846, 0x5f00),
1777 AR5523_DEVICE_UG(0x157e, 0x3006),
1778 AR5523_DEVICE_UX(0x157e, 0x3205),
1779 AR5523_DEVICE_UG(0x157e, 0x3006),
1780 AR5523_DEVICE_UG(0x1435, 0x0826),
1781 AR5523_DEVICE_UX(0x1435, 0x0828),
1782 AR5523_DEVICE_UG(0x0cde, 0x0012),
1783 AR5523_DEVICE_UG(0x1385, 0x4250),
1784 AR5523_DEVICE_UG(0x1385, 0x5f00),
1785 AR5523_DEVICE_UG(0x1385, 0x5f02),
1786 { }
1787};
1788MODULE_DEVICE_TABLE(usb, ar5523_id_table);
1789
1790static struct usb_driver ar5523_driver = {
1791 .name = "ar5523",
1792 .id_table = ar5523_id_table,
1793 .probe = ar5523_probe,
1794 .disconnect = ar5523_disconnect,
1795};
1796
1797module_usb_driver(ar5523_driver);
1798
1799MODULE_LICENSE("Dual BSD/GPL");
1800MODULE_FIRMWARE(AR5523_FIRMWARE_FILE);
1801
