linux/drivers/net/wireless/ath/ar5523/ar5523.c
<<
>>
Prefs
   1/*
   2 * Copyright (c) 2006 Damien Bergamini <damien.bergamini@free.fr>
   3 * Copyright (c) 2006 Sam Leffler, Errno Consulting
   4 * Copyright (c) 2007 Christoph Hellwig <hch@lst.de>
   5 * Copyright (c) 2008-2009 Weongyo Jeong <weongyo@freebsd.org>
   6 * Copyright (c) 2012 Pontus Fuchs <pontus.fuchs@gmail.com>
   7 *
   8 * Permission to use, copy, modify, and/or distribute this software for any
   9 * purpose with or without fee is hereby granted, provided that the above
  10 * copyright notice and this permission notice appear in all copies.
  11 *
  12 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  13 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  14 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  15 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  16 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19 */
  20
  21/*
  22 * This driver is based on the uath driver written by Damien Bergamini for
  23 * OpenBSD, who did black-box analysis of the Windows binary driver to find
  24 * out how the hardware works.  It contains a lot magic numbers because of
  25 * that and only has minimal functionality.
  26 */
  27#include <linux/compiler.h>
  28#include <linux/kernel.h>
  29#include <linux/module.h>
  30#include <linux/list.h>
  31#include <linux/completion.h>
  32#include <linux/firmware.h>
  33#include <linux/skbuff.h>
  34#include <linux/usb.h>
  35#include <net/mac80211.h>
  36
  37#include "ar5523.h"
  38#include "ar5523_hw.h"
  39
  40/*
  41 * Various supported device vendors/products.
  42 * UB51: AR5005UG 802.11b/g, UB52: AR5005UX 802.11a/b/g
  43 */
  44
  45static int ar5523_submit_rx_cmd(struct ar5523 *ar);
  46static void ar5523_data_tx_pkt_put(struct ar5523 *ar);
  47
  48static void ar5523_read_reply(struct ar5523 *ar, struct ar5523_cmd_hdr *hdr,
  49                              struct ar5523_tx_cmd *cmd)
  50{
  51        int dlen, olen;
  52        __be32 *rp;
  53
  54        dlen = be32_to_cpu(hdr->len) - sizeof(*hdr);
  55
  56        if (dlen < 0) {
  57                WARN_ON(1);
  58                goto out;
  59        }
  60
  61        ar5523_dbg(ar, "Code = %d len = %d\n", be32_to_cpu(hdr->code) & 0xff,
  62                   dlen);
  63
  64        rp = (__be32 *)(hdr + 1);
  65        if (dlen >= sizeof(u32)) {
  66                olen = be32_to_cpu(rp[0]);
  67                dlen -= sizeof(u32);
  68                if (olen == 0) {
  69                        /* convention is 0 =>'s one word */
  70                        olen = sizeof(u32);
  71                }
  72        } else
  73                olen = 0;
  74
  75        if (cmd->odata) {
  76                if (cmd->olen < olen) {
  77                        ar5523_err(ar, "olen to small %d < %d\n",
  78                                   cmd->olen, olen);
  79                        cmd->olen = 0;
  80                        cmd->res = -EOVERFLOW;
  81                } else {
  82                        cmd->olen = olen;
  83                        memcpy(cmd->odata, &rp[1], olen);
  84                        cmd->res = 0;
  85                }
  86        }
  87
  88out:
  89        complete(&cmd->done);
  90}
  91
  92static void ar5523_cmd_rx_cb(struct urb *urb)
  93{
  94        struct ar5523 *ar = urb->context;
  95        struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
  96        struct ar5523_cmd_hdr *hdr = ar->rx_cmd_buf;
  97        int dlen;
  98        u32 code, hdrlen;
  99
 100        if (urb->status) {
 101                if (urb->status != -ESHUTDOWN)
 102                        ar5523_err(ar, "RX USB error %d.\n", urb->status);
 103                goto skip;
 104        }
 105
 106        if (urb->actual_length < sizeof(struct ar5523_cmd_hdr)) {
 107                ar5523_err(ar, "RX USB to short.\n");
 108                goto skip;
 109        }
 110
 111        ar5523_dbg(ar, "%s code %02x priv %d\n", __func__,
 112                   be32_to_cpu(hdr->code) & 0xff, hdr->priv);
 113
 114        code = be32_to_cpu(hdr->code);
 115        hdrlen = be32_to_cpu(hdr->len);
 116
 117        switch (code & 0xff) {
 118        default:
 119                /* reply to a read command */
 120                if (hdr->priv != AR5523_CMD_ID) {
 121                        ar5523_err(ar, "Unexpected command id: %02x\n",
 122                                   code & 0xff);
 123                        goto skip;
 124                }
 125                ar5523_read_reply(ar, hdr, cmd);
 126                break;
 127
 128        case WDCMSG_DEVICE_AVAIL:
 129                ar5523_dbg(ar, "WDCMSG_DEVICE_AVAIL\n");
 130                cmd->res = 0;
 131                cmd->olen = 0;
 132                complete(&cmd->done);
 133                break;
 134
 135        case WDCMSG_SEND_COMPLETE:
 136                ar5523_dbg(ar, "WDCMSG_SEND_COMPLETE: %d pending\n",
 137                        atomic_read(&ar->tx_nr_pending));
 138                if (!test_bit(AR5523_HW_UP, &ar->flags))
 139                        ar5523_dbg(ar, "Unexpected WDCMSG_SEND_COMPLETE\n");
 140                else {
 141                        mod_timer(&ar->tx_wd_timer,
 142                                  jiffies + AR5523_TX_WD_TIMEOUT);
 143                        ar5523_data_tx_pkt_put(ar);
 144
 145                }
 146                break;
 147
 148        case WDCMSG_TARGET_START:
 149                /* This command returns a bogus id so it needs special
 150                   handling */
 151                dlen = hdrlen - sizeof(*hdr);
 152                if (dlen != (int)sizeof(u32)) {
 153                        ar5523_err(ar, "Invalid reply to WDCMSG_TARGET_START");
 154                        return;
 155                }
 156                memcpy(cmd->odata, hdr + 1, sizeof(u32));
 157                cmd->olen = sizeof(u32);
 158                cmd->res = 0;
 159                complete(&cmd->done);
 160                break;
 161
 162        case WDCMSG_STATS_UPDATE:
 163                ar5523_dbg(ar, "WDCMSG_STATS_UPDATE\n");
 164                break;
 165        }
 166
 167skip:
 168        ar5523_submit_rx_cmd(ar);
 169}
 170
 171static int ar5523_alloc_rx_cmd(struct ar5523 *ar)
 172{
 173        ar->rx_cmd_urb = usb_alloc_urb(0, GFP_KERNEL);
 174        if (!ar->rx_cmd_urb)
 175                return -ENOMEM;
 176
 177        ar->rx_cmd_buf = usb_alloc_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
 178                                            GFP_KERNEL,
 179                                            &ar->rx_cmd_urb->transfer_dma);
 180        if (!ar->rx_cmd_buf) {
 181                usb_free_urb(ar->rx_cmd_urb);
 182                return -ENOMEM;
 183        }
 184        return 0;
 185}
 186
 187static void ar5523_cancel_rx_cmd(struct ar5523 *ar)
 188{
 189        usb_kill_urb(ar->rx_cmd_urb);
 190}
 191
 192static void ar5523_free_rx_cmd(struct ar5523 *ar)
 193{
 194        usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
 195                          ar->rx_cmd_buf, ar->rx_cmd_urb->transfer_dma);
 196        usb_free_urb(ar->rx_cmd_urb);
 197}
 198
 199static int ar5523_submit_rx_cmd(struct ar5523 *ar)
 200{
 201        int error;
 202
 203        usb_fill_bulk_urb(ar->rx_cmd_urb, ar->dev,
 204                          ar5523_cmd_rx_pipe(ar->dev), ar->rx_cmd_buf,
 205                          AR5523_MAX_RXCMDSZ, ar5523_cmd_rx_cb, ar);
 206        ar->rx_cmd_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
 207
 208        error = usb_submit_urb(ar->rx_cmd_urb, GFP_ATOMIC);
 209        if (error) {
 210                if (error != -ENODEV)
 211                        ar5523_err(ar, "error %d when submitting rx urb\n",
 212                                   error);
 213                return error;
 214        }
 215        return 0;
 216}
 217
 218/*
 219 * Command submitted cb
 220 */
 221static void ar5523_cmd_tx_cb(struct urb *urb)
 222{
 223        struct ar5523_tx_cmd *cmd = urb->context;
 224        struct ar5523 *ar = cmd->ar;
 225
 226        if (urb->status) {
 227                ar5523_err(ar, "Failed to TX command. Status = %d\n",
 228                           urb->status);
 229                cmd->res = urb->status;
 230                complete(&cmd->done);
 231                return;
 232        }
 233
 234        if (!(cmd->flags & AR5523_CMD_FLAG_READ)) {
 235                cmd->res = 0;
 236                complete(&cmd->done);
 237        }
 238}
 239
 240static int ar5523_cmd(struct ar5523 *ar, u32 code, const void *idata,
 241                      int ilen, void *odata, int olen, int flags)
 242{
 243        struct ar5523_cmd_hdr *hdr;
 244        struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
 245        int xferlen, error;
 246
 247        /* always bulk-out a multiple of 4 bytes */
 248        xferlen = (sizeof(struct ar5523_cmd_hdr) + ilen + 3) & ~3;
 249
 250        hdr = (struct ar5523_cmd_hdr *)cmd->buf_tx;
 251        memset(hdr, 0, sizeof(struct ar5523_cmd_hdr));
 252        hdr->len  = cpu_to_be32(xferlen);
 253        hdr->code = cpu_to_be32(code);
 254        hdr->priv = AR5523_CMD_ID;
 255
 256        if (flags & AR5523_CMD_FLAG_MAGIC)
 257                hdr->magic = cpu_to_be32(1 << 24);
 258        memcpy(hdr + 1, idata, ilen);
 259
 260        cmd->odata = odata;
 261        cmd->olen = olen;
 262        cmd->flags = flags;
 263
 264        ar5523_dbg(ar, "do cmd %02x\n", code);
 265
 266        usb_fill_bulk_urb(cmd->urb_tx, ar->dev, ar5523_cmd_tx_pipe(ar->dev),
 267                          cmd->buf_tx, xferlen, ar5523_cmd_tx_cb, cmd);
 268        cmd->urb_tx->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
 269
 270        error = usb_submit_urb(cmd->urb_tx, GFP_KERNEL);
 271        if (error) {
 272                ar5523_err(ar, "could not send command 0x%x, error=%d\n",
 273                           code, error);
 274                return error;
 275        }
 276
 277        if (!wait_for_completion_timeout(&cmd->done, 2 * HZ)) {
 278                cmd->odata = NULL;
 279                ar5523_err(ar, "timeout waiting for command %02x reply\n",
 280                           code);
 281                cmd->res = -ETIMEDOUT;
 282        }
 283        return cmd->res;
 284}
 285
 286static int ar5523_cmd_write(struct ar5523 *ar, u32 code, const void *data,
 287                            int len, int flags)
 288{
 289        flags &= ~AR5523_CMD_FLAG_READ;
 290        return ar5523_cmd(ar, code, data, len, NULL, 0, flags);
 291}
 292
 293static int ar5523_cmd_read(struct ar5523 *ar, u32 code, const void *idata,
 294                           int ilen, void *odata, int olen, int flags)
 295{
 296        flags |= AR5523_CMD_FLAG_READ;
 297        return ar5523_cmd(ar, code, idata, ilen, odata, olen, flags);
 298}
 299
 300static int ar5523_config(struct ar5523 *ar, u32 reg, u32 val)
 301{
 302        struct ar5523_write_mac write;
 303        int error;
 304
 305        write.reg = cpu_to_be32(reg);
 306        write.len = cpu_to_be32(0);     /* 0 = single write */
 307        *(__be32 *)write.data = cpu_to_be32(val);
 308
 309        error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
 310                                 3 * sizeof(u32), 0);
 311        if (error != 0)
 312                ar5523_err(ar, "could not write register 0x%02x\n", reg);
 313        return error;
 314}
 315
 316static int ar5523_config_multi(struct ar5523 *ar, u32 reg, const void *data,
 317                               int len)
 318{
 319        struct ar5523_write_mac write;
 320        int error;
 321
 322        write.reg = cpu_to_be32(reg);
 323        write.len = cpu_to_be32(len);
 324        memcpy(write.data, data, len);
 325
 326        /* properly handle the case where len is zero (reset) */
 327        error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
 328            (len == 0) ? sizeof(u32) : 2 * sizeof(u32) + len, 0);
 329        if (error != 0)
 330                ar5523_err(ar, "could not write %d bytes to register 0x%02x\n",
 331                           len, reg);
 332        return error;
 333}
 334
 335static int ar5523_get_status(struct ar5523 *ar, u32 which, void *odata,
 336                             int olen)
 337{
 338        int error;
 339        __be32 which_be;
 340
 341        which_be = cpu_to_be32(which);
 342        error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_STATUS,
 343            &which_be, sizeof(which_be), odata, olen, AR5523_CMD_FLAG_MAGIC);
 344        if (error != 0)
 345                ar5523_err(ar, "could not read EEPROM offset 0x%02x\n", which);
 346        return error;
 347}
 348
 349static int ar5523_get_capability(struct ar5523 *ar, u32 cap, u32 *val)
 350{
 351        int error;
 352        __be32 cap_be, val_be;
 353
 354        cap_be = cpu_to_be32(cap);
 355        error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_CAPABILITY, &cap_be,
 356                                sizeof(cap_be), &val_be, sizeof(__be32),
 357                                AR5523_CMD_FLAG_MAGIC);
 358        if (error != 0) {
 359                ar5523_err(ar, "could not read capability %u\n", cap);
 360                return error;
 361        }
 362        *val = be32_to_cpu(val_be);
 363        return error;
 364}
 365
 366static int ar5523_get_devcap(struct ar5523 *ar)
 367{
 368#define GETCAP(x) do {                          \
 369        error = ar5523_get_capability(ar, x, &cap);             \
 370        if (error != 0)                                 \
 371                return error;                           \
 372        ar5523_info(ar, "Cap: "                 \
 373            "%s=0x%08x\n", #x, cap);    \
 374} while (0)
 375        int error;
 376        u32 cap;
 377
 378        /* collect device capabilities */
 379        GETCAP(CAP_TARGET_VERSION);
 380        GETCAP(CAP_TARGET_REVISION);
 381        GETCAP(CAP_MAC_VERSION);
 382        GETCAP(CAP_MAC_REVISION);
 383        GETCAP(CAP_PHY_REVISION);
 384        GETCAP(CAP_ANALOG_5GHz_REVISION);
 385        GETCAP(CAP_ANALOG_2GHz_REVISION);
 386
 387        GETCAP(CAP_REG_DOMAIN);
 388        GETCAP(CAP_REG_CAP_BITS);
 389        GETCAP(CAP_WIRELESS_MODES);
 390        GETCAP(CAP_CHAN_SPREAD_SUPPORT);
 391        GETCAP(CAP_COMPRESS_SUPPORT);
 392        GETCAP(CAP_BURST_SUPPORT);
 393        GETCAP(CAP_FAST_FRAMES_SUPPORT);
 394        GETCAP(CAP_CHAP_TUNING_SUPPORT);
 395        GETCAP(CAP_TURBOG_SUPPORT);
 396        GETCAP(CAP_TURBO_PRIME_SUPPORT);
 397        GETCAP(CAP_DEVICE_TYPE);
 398        GETCAP(CAP_WME_SUPPORT);
 399        GETCAP(CAP_TOTAL_QUEUES);
 400        GETCAP(CAP_CONNECTION_ID_MAX);
 401
 402        GETCAP(CAP_LOW_5GHZ_CHAN);
 403        GETCAP(CAP_HIGH_5GHZ_CHAN);
 404        GETCAP(CAP_LOW_2GHZ_CHAN);
 405        GETCAP(CAP_HIGH_2GHZ_CHAN);
 406        GETCAP(CAP_TWICE_ANTENNAGAIN_5G);
 407        GETCAP(CAP_TWICE_ANTENNAGAIN_2G);
 408
 409        GETCAP(CAP_CIPHER_AES_CCM);
 410        GETCAP(CAP_CIPHER_TKIP);
 411        GETCAP(CAP_MIC_TKIP);
 412        return 0;
 413}
 414
 415static int ar5523_set_ledsteady(struct ar5523 *ar, int lednum, int ledmode)
 416{
 417        struct ar5523_cmd_ledsteady led;
 418
 419        led.lednum = cpu_to_be32(lednum);
 420        led.ledmode = cpu_to_be32(ledmode);
 421
 422        ar5523_dbg(ar, "set %s led %s (steady)\n",
 423                   (lednum == UATH_LED_LINK) ? "link" : "activity",
 424                   ledmode ? "on" : "off");
 425        return ar5523_cmd_write(ar, WDCMSG_SET_LED_STEADY, &led, sizeof(led),
 426                                 0);
 427}
 428
 429static int ar5523_set_rxfilter(struct ar5523 *ar, u32 bits, u32 op)
 430{
 431        struct ar5523_cmd_rx_filter rxfilter;
 432
 433        rxfilter.bits = cpu_to_be32(bits);
 434        rxfilter.op = cpu_to_be32(op);
 435
 436        ar5523_dbg(ar, "setting Rx filter=0x%x flags=0x%x\n", bits, op);
 437        return ar5523_cmd_write(ar, WDCMSG_RX_FILTER, &rxfilter,
 438                                 sizeof(rxfilter), 0);
 439}
 440
 441static int ar5523_reset_tx_queues(struct ar5523 *ar)
 442{
 443        __be32 qid = cpu_to_be32(0);
 444
 445        ar5523_dbg(ar, "resetting Tx queue\n");
 446        return ar5523_cmd_write(ar, WDCMSG_RELEASE_TX_QUEUE,
 447                                 &qid, sizeof(qid), 0);
 448}
 449
 450static int ar5523_set_chan(struct ar5523 *ar)
 451{
 452        struct ieee80211_conf *conf = &ar->hw->conf;
 453
 454        struct ar5523_cmd_reset reset;
 455
 456        memset(&reset, 0, sizeof(reset));
 457        reset.flags |= cpu_to_be32(UATH_CHAN_2GHZ);
 458        reset.flags |= cpu_to_be32(UATH_CHAN_OFDM);
 459        reset.freq = cpu_to_be32(conf->chandef.chan->center_freq);
 460        reset.maxrdpower = cpu_to_be32(50);     /* XXX */
 461        reset.channelchange = cpu_to_be32(1);
 462        reset.keeprccontent = cpu_to_be32(0);
 463
 464        ar5523_dbg(ar, "set chan flags 0x%x freq %d\n",
 465                   be32_to_cpu(reset.flags),
 466                   conf->chandef.chan->center_freq);
 467        return ar5523_cmd_write(ar, WDCMSG_RESET, &reset, sizeof(reset), 0);
 468}
 469
 470static int ar5523_queue_init(struct ar5523 *ar)
 471{
 472        struct ar5523_cmd_txq_setup qinfo;
 473
 474        ar5523_dbg(ar, "setting up Tx queue\n");
 475        qinfo.qid            = cpu_to_be32(0);
 476        qinfo.len            = cpu_to_be32(sizeof(qinfo.attr));
 477        qinfo.attr.priority  = cpu_to_be32(0);  /* XXX */
 478        qinfo.attr.aifs      = cpu_to_be32(3);
 479        qinfo.attr.logcwmin  = cpu_to_be32(4);
 480        qinfo.attr.logcwmax  = cpu_to_be32(10);
 481        qinfo.attr.bursttime = cpu_to_be32(0);
 482        qinfo.attr.mode      = cpu_to_be32(0);
 483        qinfo.attr.qflags    = cpu_to_be32(1);  /* XXX? */
 484        return ar5523_cmd_write(ar, WDCMSG_SETUP_TX_QUEUE, &qinfo,
 485                                 sizeof(qinfo), 0);
 486}
 487
 488static int ar5523_switch_chan(struct ar5523 *ar)
 489{
 490        int error;
 491
 492        error = ar5523_set_chan(ar);
 493        if (error) {
 494                ar5523_err(ar, "could not set chan, error %d\n", error);
 495                goto out_err;
 496        }
 497
 498        /* reset Tx rings */
 499        error = ar5523_reset_tx_queues(ar);
 500        if (error) {
 501                ar5523_err(ar, "could not reset Tx queues, error %d\n",
 502                           error);
 503                goto out_err;
 504        }
 505        /* set Tx rings WME properties */
 506        error = ar5523_queue_init(ar);
 507        if (error)
 508                ar5523_err(ar, "could not init wme, error %d\n", error);
 509
 510out_err:
 511        return error;
 512}
 513
 514static void ar5523_rx_data_put(struct ar5523 *ar,
 515                                struct ar5523_rx_data *data)
 516{
 517        unsigned long flags;
 518        spin_lock_irqsave(&ar->rx_data_list_lock, flags);
 519        list_move(&data->list, &ar->rx_data_free);
 520        spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
 521}
 522
 523static void ar5523_data_rx_cb(struct urb *urb)
 524{
 525        struct ar5523_rx_data *data = urb->context;
 526        struct ar5523 *ar = data->ar;
 527        struct ar5523_rx_desc *desc;
 528        struct ar5523_chunk *chunk;
 529        struct ieee80211_hw *hw = ar->hw;
 530        struct ieee80211_rx_status *rx_status;
 531        u32 rxlen;
 532        int usblen = urb->actual_length;
 533        int hdrlen, pad;
 534
 535        ar5523_dbg(ar, "%s\n", __func__);
 536        /* sync/async unlink faults aren't errors */
 537        if (urb->status) {
 538                if (urb->status != -ESHUTDOWN)
 539                        ar5523_err(ar, "%s: USB err: %d\n", __func__,
 540                                   urb->status);
 541                goto skip;
 542        }
 543
 544        if (usblen < AR5523_MIN_RXBUFSZ) {
 545                ar5523_err(ar, "RX: wrong xfer size (usblen=%d)\n", usblen);
 546                goto skip;
 547        }
 548
 549        chunk = (struct ar5523_chunk *) data->skb->data;
 550
 551        if (((chunk->flags & UATH_CFLAGS_FINAL) == 0) ||
 552                chunk->seqnum != 0) {
 553                ar5523_dbg(ar, "RX: No final flag. s: %d f: %02x l: %d\n",
 554                           chunk->seqnum, chunk->flags,
 555                           be16_to_cpu(chunk->length));
 556                goto skip;
 557        }
 558
 559        /* Rx descriptor is located at the end, 32-bit aligned */
 560        desc = (struct ar5523_rx_desc *)
 561                (data->skb->data + usblen - sizeof(struct ar5523_rx_desc));
 562
 563        rxlen = be32_to_cpu(desc->len);
 564        if (rxlen > ar->rxbufsz) {
 565                ar5523_dbg(ar, "RX: Bad descriptor (len=%d)\n",
 566                           be32_to_cpu(desc->len));
 567                goto skip;
 568        }
 569
 570        if (!rxlen) {
 571                ar5523_dbg(ar, "RX: rxlen is 0\n");
 572                goto skip;
 573        }
 574
 575        if (be32_to_cpu(desc->status) != 0) {
 576                ar5523_dbg(ar, "Bad RX status (0x%x len = %d). Skip\n",
 577                           be32_to_cpu(desc->status), be32_to_cpu(desc->len));
 578                goto skip;
 579        }
 580
 581        skb_reserve(data->skb, sizeof(*chunk));
 582        skb_put(data->skb, rxlen - sizeof(struct ar5523_rx_desc));
 583
 584        hdrlen = ieee80211_get_hdrlen_from_skb(data->skb);
 585        if (!IS_ALIGNED(hdrlen, 4)) {
 586                ar5523_dbg(ar, "eek, alignment workaround activated\n");
 587                pad = ALIGN(hdrlen, 4) - hdrlen;
 588                memmove(data->skb->data + pad, data->skb->data, hdrlen);
 589                skb_pull(data->skb, pad);
 590                skb_put(data->skb, pad);
 591        }
 592
 593        rx_status = IEEE80211_SKB_RXCB(data->skb);
 594        memset(rx_status, 0, sizeof(*rx_status));
 595        rx_status->freq = be32_to_cpu(desc->channel);
 596        rx_status->band = hw->conf.chandef.chan->band;
 597        rx_status->signal = -95 + be32_to_cpu(desc->rssi);
 598
 599        ieee80211_rx_irqsafe(hw, data->skb);
 600        data->skb = NULL;
 601
 602skip:
 603        if (data->skb) {
 604                dev_kfree_skb_irq(data->skb);
 605                data->skb = NULL;
 606        }
 607
 608        ar5523_rx_data_put(ar, data);
 609        if (atomic_inc_return(&ar->rx_data_free_cnt) >=
 610            AR5523_RX_DATA_REFILL_COUNT &&
 611            test_bit(AR5523_HW_UP, &ar->flags))
 612                queue_work(ar->wq, &ar->rx_refill_work);
 613}
 614
 615static void ar5523_rx_refill_work(struct work_struct *work)
 616{
 617        struct ar5523 *ar = container_of(work, struct ar5523, rx_refill_work);
 618        struct ar5523_rx_data *data;
 619        unsigned long flags;
 620        int error;
 621
 622        ar5523_dbg(ar, "%s\n", __func__);
 623        do {
 624                spin_lock_irqsave(&ar->rx_data_list_lock, flags);
 625
 626                if (!list_empty(&ar->rx_data_free))
 627                        data = (struct ar5523_rx_data *) ar->rx_data_free.next;
 628                else
 629                        data = NULL;
 630                spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
 631
 632                if (!data)
 633                        goto done;
 634
 635                data->skb = alloc_skb(ar->rxbufsz, GFP_KERNEL);
 636                if (!data->skb) {
 637                        ar5523_err(ar, "could not allocate rx skbuff\n");
 638                        return;
 639                }
 640
 641                usb_fill_bulk_urb(data->urb, ar->dev,
 642                                  ar5523_data_rx_pipe(ar->dev), data->skb->data,
 643                                  ar->rxbufsz, ar5523_data_rx_cb, data);
 644
 645                spin_lock_irqsave(&ar->rx_data_list_lock, flags);
 646                list_move(&data->list, &ar->rx_data_used);
 647                spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
 648                atomic_dec(&ar->rx_data_free_cnt);
 649
 650                error = usb_submit_urb(data->urb, GFP_KERNEL);
 651                if (error) {
 652                        kfree_skb(data->skb);
 653                        if (error != -ENODEV)
 654                                ar5523_err(ar, "Err sending rx data urb %d\n",
 655                                           error);
 656                        ar5523_rx_data_put(ar, data);
 657                        atomic_inc(&ar->rx_data_free_cnt);
 658                        return;
 659                }
 660
 661        } while (true);
 662done:
 663        return;
 664}
 665
 666static void ar5523_cancel_rx_bufs(struct ar5523 *ar)
 667{
 668        struct ar5523_rx_data *data;
 669        unsigned long flags;
 670
 671        do {
 672                spin_lock_irqsave(&ar->rx_data_list_lock, flags);
 673                if (!list_empty(&ar->rx_data_used))
 674                        data = (struct ar5523_rx_data *) ar->rx_data_used.next;
 675                else
 676                        data = NULL;
 677                spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
 678
 679                if (!data)
 680                        break;
 681
 682                usb_kill_urb(data->urb);
 683                list_move(&data->list, &ar->rx_data_free);
 684                atomic_inc(&ar->rx_data_free_cnt);
 685        } while (data);
 686}
 687
 688static void ar5523_free_rx_bufs(struct ar5523 *ar)
 689{
 690        struct ar5523_rx_data *data;
 691
 692        ar5523_cancel_rx_bufs(ar);
 693        while (!list_empty(&ar->rx_data_free)) {
 694                data = (struct ar5523_rx_data *) ar->rx_data_free.next;
 695                list_del(&data->list);
 696                usb_free_urb(data->urb);
 697        }
 698}
 699
 700static int ar5523_alloc_rx_bufs(struct ar5523 *ar)
 701{
 702        int i;
 703
 704        for (i = 0; i < AR5523_RX_DATA_COUNT; i++) {
 705                struct ar5523_rx_data *data = &ar->rx_data[i];
 706
 707                data->ar = ar;
 708                data->urb = usb_alloc_urb(0, GFP_KERNEL);
 709                if (!data->urb) {
 710                        ar5523_err(ar, "could not allocate rx data urb\n");
 711                        goto err;
 712                }
 713                list_add_tail(&data->list, &ar->rx_data_free);
 714                atomic_inc(&ar->rx_data_free_cnt);
 715        }
 716        return 0;
 717
 718err:
 719        ar5523_free_rx_bufs(ar);
 720        return -ENOMEM;
 721}
 722
 723static void ar5523_data_tx_pkt_put(struct ar5523 *ar)
 724{
 725        atomic_dec(&ar->tx_nr_total);
 726        if (!atomic_dec_return(&ar->tx_nr_pending)) {
 727                del_timer(&ar->tx_wd_timer);
 728                wake_up(&ar->tx_flush_waitq);
 729        }
 730
 731        if (atomic_read(&ar->tx_nr_total) < AR5523_TX_DATA_RESTART_COUNT) {
 732                ar5523_dbg(ar, "restart tx queue\n");
 733                ieee80211_wake_queues(ar->hw);
 734        }
 735}
 736
 737static void ar5523_data_tx_cb(struct urb *urb)
 738{
 739        struct sk_buff *skb = urb->context;
 740        struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
 741        struct ar5523_tx_data *data = (struct ar5523_tx_data *)
 742                                       txi->driver_data;
 743        struct ar5523 *ar = data->ar;
 744        unsigned long flags;
 745
 746        ar5523_dbg(ar, "data tx urb completed: %d\n", urb->status);
 747
 748        spin_lock_irqsave(&ar->tx_data_list_lock, flags);
 749        list_del(&data->list);
 750        spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
 751
 752        if (urb->status) {
 753                ar5523_dbg(ar, "%s: urb status: %d\n", __func__, urb->status);
 754                ar5523_data_tx_pkt_put(ar);
 755                ieee80211_free_txskb(ar->hw, skb);
 756        } else {
 757                skb_pull(skb, sizeof(struct ar5523_tx_desc) + sizeof(__be32));
 758                ieee80211_tx_status_irqsafe(ar->hw, skb);
 759        }
 760        usb_free_urb(urb);
 761}
 762
 763static void ar5523_tx(struct ieee80211_hw *hw,
 764                       struct ieee80211_tx_control *control,
 765                       struct sk_buff *skb)
 766{
 767        struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
 768        struct ar5523_tx_data *data = (struct ar5523_tx_data *)
 769                                        txi->driver_data;
 770        struct ar5523 *ar = hw->priv;
 771        unsigned long flags;
 772
 773        ar5523_dbg(ar, "tx called\n");
 774        if (atomic_inc_return(&ar->tx_nr_total) >= AR5523_TX_DATA_COUNT) {
 775                ar5523_dbg(ar, "tx queue full\n");
 776                ar5523_dbg(ar, "stop queues (tot %d pend %d)\n",
 777                           atomic_read(&ar->tx_nr_total),
 778                           atomic_read(&ar->tx_nr_pending));
 779                ieee80211_stop_queues(hw);
 780        }
 781
 782        spin_lock_irqsave(&ar->tx_data_list_lock, flags);
 783        list_add_tail(&data->list, &ar->tx_queue_pending);
 784        spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
 785
 786        ieee80211_queue_work(ar->hw, &ar->tx_work);
 787}
 788
 789static void ar5523_tx_work_locked(struct ar5523 *ar)
 790{
 791        struct ar5523_tx_data *data;
 792        struct ar5523_tx_desc *desc;
 793        struct ar5523_chunk *chunk;
 794        struct ieee80211_tx_info *txi;
 795        struct urb *urb;
 796        struct sk_buff *skb;
 797        int error = 0, paylen;
 798        u32 txqid;
 799        unsigned long flags;
 800
 801        BUILD_BUG_ON(sizeof(struct ar5523_tx_data) >
 802                     IEEE80211_TX_INFO_DRIVER_DATA_SIZE);
 803
 804        ar5523_dbg(ar, "%s\n", __func__);
 805        do {
 806                spin_lock_irqsave(&ar->tx_data_list_lock, flags);
 807                if (!list_empty(&ar->tx_queue_pending)) {
 808                        data = (struct ar5523_tx_data *)
 809                                ar->tx_queue_pending.next;
 810                        list_del(&data->list);
 811                } else
 812                        data = NULL;
 813                spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
 814
 815                if (!data)
 816                        break;
 817
 818                txi = container_of((void *)data, struct ieee80211_tx_info,
 819                                   driver_data);
 820                txqid = 0;
 821
 822                skb = container_of((void *)txi, struct sk_buff, cb);
 823                paylen = skb->len;
 824
 825                urb = usb_alloc_urb(0, GFP_KERNEL);
 826                if (!urb) {
 827                        ar5523_err(ar, "Failed to allocate TX urb\n");
 828                        ieee80211_free_txskb(ar->hw, skb);
 829                        continue;
 830                }
 831
 832                data->ar = ar;
 833                data->urb = urb;
 834
 835                desc = (struct ar5523_tx_desc *)skb_push(skb, sizeof(*desc));
 836                chunk = (struct ar5523_chunk *)skb_push(skb, sizeof(*chunk));
 837
 838                chunk->seqnum = 0;
 839                chunk->flags = UATH_CFLAGS_FINAL;
 840                chunk->length = cpu_to_be16(skb->len);
 841
 842                desc->msglen = cpu_to_be32(skb->len);
 843                desc->msgid  = AR5523_DATA_ID;
 844                desc->buflen = cpu_to_be32(paylen);
 845                desc->type   = cpu_to_be32(WDCMSG_SEND);
 846                desc->flags  = cpu_to_be32(UATH_TX_NOTIFY);
 847
 848                if (test_bit(AR5523_CONNECTED, &ar->flags))
 849                        desc->connid = cpu_to_be32(AR5523_ID_BSS);
 850                else
 851                        desc->connid = cpu_to_be32(AR5523_ID_BROADCAST);
 852
 853                if (txi->flags & IEEE80211_TX_CTL_USE_MINRATE)
 854                        txqid |= UATH_TXQID_MINRATE;
 855
 856                desc->txqid = cpu_to_be32(txqid);
 857
 858                urb->transfer_flags = URB_ZERO_PACKET;
 859                usb_fill_bulk_urb(urb, ar->dev, ar5523_data_tx_pipe(ar->dev),
 860                                  skb->data, skb->len, ar5523_data_tx_cb, skb);
 861
 862                spin_lock_irqsave(&ar->tx_data_list_lock, flags);
 863                list_add_tail(&data->list, &ar->tx_queue_submitted);
 864                spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
 865                mod_timer(&ar->tx_wd_timer, jiffies + AR5523_TX_WD_TIMEOUT);
 866                atomic_inc(&ar->tx_nr_pending);
 867
 868                ar5523_dbg(ar, "TX Frame (%d pending)\n",
 869                           atomic_read(&ar->tx_nr_pending));
 870                error = usb_submit_urb(urb, GFP_KERNEL);
 871                if (error) {
 872                        ar5523_err(ar, "error %d when submitting tx urb\n",
 873                                   error);
 874                        spin_lock_irqsave(&ar->tx_data_list_lock, flags);
 875                        list_del(&data->list);
 876                        spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
 877                        atomic_dec(&ar->tx_nr_pending);
 878                        ar5523_data_tx_pkt_put(ar);
 879                        usb_free_urb(urb);
 880                        ieee80211_free_txskb(ar->hw, skb);
 881                }
 882        } while (true);
 883}
 884
 885static void ar5523_tx_work(struct work_struct *work)
 886{
 887        struct ar5523 *ar = container_of(work, struct ar5523, tx_work);
 888
 889        ar5523_dbg(ar, "%s\n", __func__);
 890        mutex_lock(&ar->mutex);
 891        ar5523_tx_work_locked(ar);
 892        mutex_unlock(&ar->mutex);
 893}
 894
 895static void ar5523_tx_wd_timer(unsigned long arg)
 896{
 897        struct ar5523 *ar = (struct ar5523 *) arg;
 898
 899        ar5523_dbg(ar, "TX watchdog timer triggered\n");
 900        ieee80211_queue_work(ar->hw, &ar->tx_wd_work);
 901}
 902
 903static void ar5523_tx_wd_work(struct work_struct *work)
 904{
 905        struct ar5523 *ar = container_of(work, struct ar5523, tx_wd_work);
 906
 907        /* Occasionally the TX queues stop responding. The only way to
 908         * recover seems to be to reset the dongle.
 909         */
 910
 911        mutex_lock(&ar->mutex);
 912        ar5523_err(ar, "TX queue stuck (tot %d pend %d)\n",
 913                   atomic_read(&ar->tx_nr_total),
 914                   atomic_read(&ar->tx_nr_pending));
 915
 916        ar5523_err(ar, "Will restart dongle.\n");
 917        ar5523_cmd_write(ar, WDCMSG_TARGET_RESET, NULL, 0, 0);
 918        mutex_unlock(&ar->mutex);
 919}
 920
 921static void ar5523_flush_tx(struct ar5523 *ar)
 922{
 923        ar5523_tx_work_locked(ar);
 924
 925        /* Don't waste time trying to flush if USB is disconnected */
 926        if (test_bit(AR5523_USB_DISCONNECTED, &ar->flags))
 927                return;
 928        if (!wait_event_timeout(ar->tx_flush_waitq,
 929            !atomic_read(&ar->tx_nr_pending), AR5523_FLUSH_TIMEOUT))
 930                ar5523_err(ar, "flush timeout (tot %d pend %d)\n",
 931                           atomic_read(&ar->tx_nr_total),
 932                           atomic_read(&ar->tx_nr_pending));
 933}
 934
 935static void ar5523_free_tx_cmd(struct ar5523 *ar)
 936{
 937        struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
 938
 939        usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ, cmd->buf_tx,
 940                          cmd->urb_tx->transfer_dma);
 941        usb_free_urb(cmd->urb_tx);
 942}
 943
 944static int ar5523_alloc_tx_cmd(struct ar5523 *ar)
 945{
 946        struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
 947
 948        cmd->ar = ar;
 949        init_completion(&cmd->done);
 950
 951        cmd->urb_tx = usb_alloc_urb(0, GFP_KERNEL);
 952        if (!cmd->urb_tx) {
 953                ar5523_err(ar, "could not allocate urb\n");
 954                return -ENOMEM;
 955        }
 956        cmd->buf_tx = usb_alloc_coherent(ar->dev, AR5523_MAX_TXCMDSZ,
 957                                         GFP_KERNEL,
 958                                         &cmd->urb_tx->transfer_dma);
 959        if (!cmd->buf_tx) {
 960                usb_free_urb(cmd->urb_tx);
 961                return -ENOMEM;
 962        }
 963        return 0;
 964}
 965
 966/*
 967 * This function is called periodically (every second) when associated to
 968 * query device statistics.
 969 */
 970static void ar5523_stat_work(struct work_struct *work)
 971{
 972        struct ar5523 *ar = container_of(work, struct ar5523, stat_work.work);
 973        int error;
 974
 975        ar5523_dbg(ar, "%s\n", __func__);
 976        mutex_lock(&ar->mutex);
 977
 978        /*
 979         * Send request for statistics asynchronously once a second. This
 980         * seems to be important. Throughput is a lot better if this is done.
 981         */
 982        error = ar5523_cmd_write(ar, WDCMSG_TARGET_GET_STATS, NULL, 0, 0);
 983        if (error)
 984                ar5523_err(ar, "could not query stats, error %d\n", error);
 985        mutex_unlock(&ar->mutex);
 986        ieee80211_queue_delayed_work(ar->hw, &ar->stat_work, HZ);
 987}
 988
 989/*
 990 * Interface routines to the mac80211 stack.
 991 */
 992static int ar5523_start(struct ieee80211_hw *hw)
 993{
 994        struct ar5523 *ar = hw->priv;
 995        int error;
 996        __be32 val;
 997
 998        ar5523_dbg(ar, "start called\n");
 999
1000        mutex_lock(&ar->mutex);
1001        val = cpu_to_be32(0);
1002        ar5523_cmd_write(ar, WDCMSG_BIND, &val, sizeof(val), 0);
1003
1004        /* set MAC address */
1005        ar5523_config_multi(ar, CFG_MAC_ADDR, &ar->hw->wiphy->perm_addr,
1006                            ETH_ALEN);
1007
1008        /* XXX honor net80211 state */
1009        ar5523_config(ar, CFG_RATE_CONTROL_ENABLE, 0x00000001);
1010        ar5523_config(ar, CFG_DIVERSITY_CTL, 0x00000001);
1011        ar5523_config(ar, CFG_ABOLT, 0x0000003f);
1012        ar5523_config(ar, CFG_WME_ENABLED, 0x00000000);
1013
1014        ar5523_config(ar, CFG_SERVICE_TYPE, 1);
1015        ar5523_config(ar, CFG_TP_SCALE, 0x00000000);
1016        ar5523_config(ar, CFG_TPC_HALF_DBM5, 0x0000003c);
1017        ar5523_config(ar, CFG_TPC_HALF_DBM2, 0x0000003c);
1018        ar5523_config(ar, CFG_OVERRD_TX_POWER, 0x00000000);
1019        ar5523_config(ar, CFG_GMODE_PROTECTION, 0x00000000);
1020        ar5523_config(ar, CFG_GMODE_PROTECT_RATE_INDEX, 0x00000003);
1021        ar5523_config(ar, CFG_PROTECTION_TYPE, 0x00000000);
1022        ar5523_config(ar, CFG_MODE_CTS, 0x00000002);
1023
1024        error = ar5523_cmd_read(ar, WDCMSG_TARGET_START, NULL, 0,
1025            &val, sizeof(val), AR5523_CMD_FLAG_MAGIC);
1026        if (error) {
1027                ar5523_dbg(ar, "could not start target, error %d\n", error);
1028                goto err;
1029        }
1030        ar5523_dbg(ar, "WDCMSG_TARGET_START returns handle: 0x%x\n",
1031                   be32_to_cpu(val));
1032
1033        ar5523_switch_chan(ar);
1034
1035        val = cpu_to_be32(TARGET_DEVICE_AWAKE);
1036        ar5523_cmd_write(ar, WDCMSG_SET_PWR_MODE, &val, sizeof(val), 0);
1037        /* XXX? check */
1038        ar5523_cmd_write(ar, WDCMSG_RESET_KEY_CACHE, NULL, 0, 0);
1039
1040        set_bit(AR5523_HW_UP, &ar->flags);
1041        queue_work(ar->wq, &ar->rx_refill_work);
1042
1043        /* enable Rx */
1044        ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1045        ar5523_set_rxfilter(ar,
1046                            UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1047                            UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON,
1048                            UATH_FILTER_OP_SET);
1049
1050        ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_ON);
1051        ar5523_dbg(ar, "start OK\n");
1052
1053err:
1054        mutex_unlock(&ar->mutex);
1055        return error;
1056}
1057
1058static void ar5523_stop(struct ieee80211_hw *hw)
1059{
1060        struct ar5523 *ar = hw->priv;
1061
1062        ar5523_dbg(ar, "stop called\n");
1063
1064        cancel_delayed_work_sync(&ar->stat_work);
1065        mutex_lock(&ar->mutex);
1066        clear_bit(AR5523_HW_UP, &ar->flags);
1067
1068        ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1069        ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_OFF);
1070
1071        ar5523_cmd_write(ar, WDCMSG_TARGET_STOP, NULL, 0, 0);
1072
1073        del_timer_sync(&ar->tx_wd_timer);
1074        cancel_work_sync(&ar->tx_wd_work);
1075        cancel_work_sync(&ar->rx_refill_work);
1076        ar5523_cancel_rx_bufs(ar);
1077        mutex_unlock(&ar->mutex);
1078}
1079
1080static int ar5523_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1081{
1082        struct ar5523 *ar = hw->priv;
1083        int ret;
1084
1085        ar5523_dbg(ar, "set_rts_threshold called\n");
1086        mutex_lock(&ar->mutex);
1087
1088        ret = ar5523_config(ar, CFG_USER_RTS_THRESHOLD, value);
1089
1090        mutex_unlock(&ar->mutex);
1091        return ret;
1092}
1093
1094static void ar5523_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1095                         u32 queues, bool drop)
1096{
1097        struct ar5523 *ar = hw->priv;
1098
1099        ar5523_dbg(ar, "flush called\n");
1100        ar5523_flush_tx(ar);
1101}
1102
1103static int ar5523_add_interface(struct ieee80211_hw *hw,
1104                                struct ieee80211_vif *vif)
1105{
1106        struct ar5523 *ar = hw->priv;
1107
1108        ar5523_dbg(ar, "add interface called\n");
1109
1110        if (ar->vif) {
1111                ar5523_dbg(ar, "invalid add_interface\n");
1112                return -EOPNOTSUPP;
1113        }
1114
1115        switch (vif->type) {
1116        case NL80211_IFTYPE_STATION:
1117                ar->vif = vif;
1118                break;
1119        default:
1120                return -EOPNOTSUPP;
1121        }
1122        return 0;
1123}
1124
1125static void ar5523_remove_interface(struct ieee80211_hw *hw,
1126                                    struct ieee80211_vif *vif)
1127{
1128        struct ar5523 *ar = hw->priv;
1129
1130        ar5523_dbg(ar, "remove interface called\n");
1131        ar->vif = NULL;
1132}
1133
1134static int ar5523_hwconfig(struct ieee80211_hw *hw, u32 changed)
1135{
1136        struct ar5523 *ar = hw->priv;
1137
1138        ar5523_dbg(ar, "config called\n");
1139        mutex_lock(&ar->mutex);
1140        if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
1141                ar5523_dbg(ar, "Do channel switch\n");
1142                ar5523_flush_tx(ar);
1143                ar5523_switch_chan(ar);
1144        }
1145        mutex_unlock(&ar->mutex);
1146        return 0;
1147}
1148
1149static int ar5523_get_wlan_mode(struct ar5523 *ar,
1150                                struct ieee80211_bss_conf *bss_conf)
1151{
1152        struct ieee80211_supported_band *band;
1153        int bit;
1154        struct ieee80211_sta *sta;
1155        u32 sta_rate_set;
1156
1157        band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1158        sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1159        if (!sta) {
1160                ar5523_info(ar, "STA not found!\n");
1161                return WLAN_MODE_11b;
1162        }
1163        sta_rate_set = sta->supp_rates[ar->hw->conf.chandef.chan->band];
1164
1165        for (bit = 0; bit < band->n_bitrates; bit++) {
1166                if (sta_rate_set & 1) {
1167                        int rate = band->bitrates[bit].bitrate;
1168                        switch (rate) {
1169                        case 60:
1170                        case 90:
1171                        case 120:
1172                        case 180:
1173                        case 240:
1174                        case 360:
1175                        case 480:
1176                        case 540:
1177                                return WLAN_MODE_11g;
1178                        }
1179                }
1180                sta_rate_set >>= 1;
1181        }
1182        return WLAN_MODE_11b;
1183}
1184
1185static void ar5523_create_rateset(struct ar5523 *ar,
1186                                  struct ieee80211_bss_conf *bss_conf,
1187                                  struct ar5523_cmd_rateset *rs,
1188                                  bool basic)
1189{
1190        struct ieee80211_supported_band *band;
1191        struct ieee80211_sta *sta;
1192        int bit, i = 0;
1193        u32 sta_rate_set, basic_rate_set;
1194
1195        sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1196        basic_rate_set = bss_conf->basic_rates;
1197        if (!sta) {
1198                ar5523_info(ar, "STA not found. Cannot set rates\n");
1199                sta_rate_set = bss_conf->basic_rates;
1200        } else
1201                sta_rate_set = sta->supp_rates[ar->hw->conf.chandef.chan->band];
1202
1203        ar5523_dbg(ar, "sta rate_set = %08x\n", sta_rate_set);
1204
1205        band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1206        for (bit = 0; bit < band->n_bitrates; bit++) {
1207                BUG_ON(i >= AR5523_MAX_NRATES);
1208                ar5523_dbg(ar, "Considering rate %d : %d\n",
1209                           band->bitrates[bit].hw_value, sta_rate_set & 1);
1210                if (sta_rate_set & 1) {
1211                        rs->set[i] = band->bitrates[bit].hw_value;
1212                        if (basic_rate_set & 1 && basic)
1213                                rs->set[i] |= 0x80;
1214                        i++;
1215                }
1216                sta_rate_set >>= 1;
1217                basic_rate_set >>= 1;
1218        }
1219
1220        rs->length = i;
1221}
1222
1223static int ar5523_set_basic_rates(struct ar5523 *ar,
1224                                  struct ieee80211_bss_conf *bss)
1225{
1226        struct ar5523_cmd_rates rates;
1227
1228        memset(&rates, 0, sizeof(rates));
1229        rates.connid = cpu_to_be32(2);          /* XXX */
1230        rates.size   = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1231        ar5523_create_rateset(ar, bss, &rates.rateset, true);
1232
1233        return ar5523_cmd_write(ar, WDCMSG_SET_BASIC_RATE, &rates,
1234                                sizeof(rates), 0);
1235}
1236
1237static int ar5523_create_connection(struct ar5523 *ar,
1238                                    struct ieee80211_vif *vif,
1239                                    struct ieee80211_bss_conf *bss)
1240{
1241        struct ar5523_cmd_create_connection create;
1242        int wlan_mode;
1243
1244        memset(&create, 0, sizeof(create));
1245        create.connid = cpu_to_be32(2);
1246        create.bssid = cpu_to_be32(0);
1247        /* XXX packed or not?  */
1248        create.size = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1249
1250        ar5523_create_rateset(ar, bss, &create.connattr.rateset, false);
1251
1252        wlan_mode = ar5523_get_wlan_mode(ar, bss);
1253        create.connattr.wlanmode = cpu_to_be32(wlan_mode);
1254
1255        return ar5523_cmd_write(ar, WDCMSG_CREATE_CONNECTION, &create,
1256                                sizeof(create), 0);
1257}
1258
1259static int ar5523_write_associd(struct ar5523 *ar,
1260                                struct ieee80211_bss_conf *bss)
1261{
1262        struct ar5523_cmd_set_associd associd;
1263
1264        memset(&associd, 0, sizeof(associd));
1265        associd.defaultrateix = cpu_to_be32(0); /* XXX */
1266        associd.associd = cpu_to_be32(bss->aid);
1267        associd.timoffset = cpu_to_be32(0x3b);  /* XXX */
1268        memcpy(associd.bssid, bss->bssid, ETH_ALEN);
1269        return ar5523_cmd_write(ar, WDCMSG_WRITE_ASSOCID, &associd,
1270                                sizeof(associd), 0);
1271}
1272
1273static void ar5523_bss_info_changed(struct ieee80211_hw *hw,
1274                                    struct ieee80211_vif *vif,
1275                                    struct ieee80211_bss_conf *bss,
1276                                    u32 changed)
1277{
1278        struct ar5523 *ar = hw->priv;
1279        int error;
1280
1281        ar5523_dbg(ar, "bss_info_changed called\n");
1282        mutex_lock(&ar->mutex);
1283
1284        if (!(changed & BSS_CHANGED_ASSOC))
1285                goto out_unlock;
1286
1287        if (bss->assoc) {
1288                error = ar5523_create_connection(ar, vif, bss);
1289                if (error) {
1290                        ar5523_err(ar, "could not create connection\n");
1291                        goto out_unlock;
1292                }
1293
1294                error = ar5523_set_basic_rates(ar, bss);
1295                if (error) {
1296                        ar5523_err(ar, "could not set negotiated rate set\n");
1297                        goto out_unlock;
1298                }
1299
1300                error = ar5523_write_associd(ar, bss);
1301                if (error) {
1302                        ar5523_err(ar, "could not set association\n");
1303                        goto out_unlock;
1304                }
1305
1306                /* turn link LED on */
1307                ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_ON);
1308                set_bit(AR5523_CONNECTED, &ar->flags);
1309                ieee80211_queue_delayed_work(hw, &ar->stat_work, HZ);
1310
1311        } else {
1312                cancel_delayed_work(&ar->stat_work);
1313                clear_bit(AR5523_CONNECTED, &ar->flags);
1314                ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1315        }
1316
1317out_unlock:
1318        mutex_unlock(&ar->mutex);
1319
1320}
1321
1322#define AR5523_SUPPORTED_FILTERS (FIF_PROMISC_IN_BSS | \
1323                                  FIF_ALLMULTI | \
1324                                  FIF_FCSFAIL | \
1325                                  FIF_OTHER_BSS)
1326
1327static void ar5523_configure_filter(struct ieee80211_hw *hw,
1328                                    unsigned int changed_flags,
1329                                    unsigned int *total_flags,
1330                                    u64 multicast)
1331{
1332        struct ar5523 *ar = hw->priv;
1333        u32 filter = 0;
1334
1335        ar5523_dbg(ar, "configure_filter called\n");
1336        mutex_lock(&ar->mutex);
1337        ar5523_flush_tx(ar);
1338
1339        *total_flags &= AR5523_SUPPORTED_FILTERS;
1340
1341        /* The filters seems strange. UATH_FILTER_RX_BCAST and
1342         * UATH_FILTER_RX_MCAST does not result in those frames being RXed.
1343         * The only way I have found to get [mb]cast frames seems to be
1344         * to set UATH_FILTER_RX_PROM. */
1345        filter |= UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1346                  UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON |
1347                  UATH_FILTER_RX_PROM;
1348
1349        ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1350        ar5523_set_rxfilter(ar, filter, UATH_FILTER_OP_SET);
1351
1352        mutex_unlock(&ar->mutex);
1353}
1354
1355static const struct ieee80211_ops ar5523_ops = {
1356        .start                  = ar5523_start,
1357        .stop                   = ar5523_stop,
1358        .tx                     = ar5523_tx,
1359        .set_rts_threshold      = ar5523_set_rts_threshold,
1360        .add_interface          = ar5523_add_interface,
1361        .remove_interface       = ar5523_remove_interface,
1362        .config                 = ar5523_hwconfig,
1363        .bss_info_changed       = ar5523_bss_info_changed,
1364        .configure_filter       = ar5523_configure_filter,
1365        .flush                  = ar5523_flush,
1366};
1367
1368static int ar5523_host_available(struct ar5523 *ar)
1369{
1370        struct ar5523_cmd_host_available setup;
1371
1372        /* inform target the host is available */
1373        setup.sw_ver_major = cpu_to_be32(ATH_SW_VER_MAJOR);
1374        setup.sw_ver_minor = cpu_to_be32(ATH_SW_VER_MINOR);
1375        setup.sw_ver_patch = cpu_to_be32(ATH_SW_VER_PATCH);
1376        setup.sw_ver_build = cpu_to_be32(ATH_SW_VER_BUILD);
1377        return ar5523_cmd_read(ar, WDCMSG_HOST_AVAILABLE,
1378                               &setup, sizeof(setup), NULL, 0, 0);
1379}
1380
1381static int ar5523_get_devstatus(struct ar5523 *ar)
1382{
1383        u8 macaddr[ETH_ALEN];
1384        int error;
1385
1386        /* retrieve MAC address */
1387        error = ar5523_get_status(ar, ST_MAC_ADDR, macaddr, ETH_ALEN);
1388        if (error) {
1389                ar5523_err(ar, "could not read MAC address\n");
1390                return error;
1391        }
1392
1393        SET_IEEE80211_PERM_ADDR(ar->hw, macaddr);
1394
1395        error = ar5523_get_status(ar, ST_SERIAL_NUMBER,
1396            &ar->serial[0], sizeof(ar->serial));
1397        if (error) {
1398                ar5523_err(ar, "could not read device serial number\n");
1399                return error;
1400        }
1401        return 0;
1402}
1403
1404#define AR5523_SANE_RXBUFSZ 2000
1405
1406static int ar5523_get_max_rxsz(struct ar5523 *ar)
1407{
1408        int error;
1409        __be32 rxsize;
1410
1411        /* Get max rx size */
1412        error = ar5523_get_status(ar, ST_WDC_TRANSPORT_CHUNK_SIZE, &rxsize,
1413                                  sizeof(rxsize));
1414        if (error != 0) {
1415                ar5523_err(ar, "could not read max RX size\n");
1416                return error;
1417        }
1418
1419        ar->rxbufsz = be32_to_cpu(rxsize);
1420
1421        if (!ar->rxbufsz || ar->rxbufsz > AR5523_SANE_RXBUFSZ) {
1422                ar5523_err(ar, "Bad rxbufsz from device. Using %d instead\n",
1423                           AR5523_SANE_RXBUFSZ);
1424                ar->rxbufsz = AR5523_SANE_RXBUFSZ;
1425        }
1426
1427        ar5523_dbg(ar, "Max RX buf size: %d\n", ar->rxbufsz);
1428        return 0;
1429}
1430
1431/*
1432 * This is copied from rtl818x, but we should probably move this
1433 * to common code as in OpenBSD.
1434 */
1435static const struct ieee80211_rate ar5523_rates[] = {
1436        { .bitrate = 10, .hw_value = 2, },
1437        { .bitrate = 20, .hw_value = 4 },
1438        { .bitrate = 55, .hw_value = 11, },
1439        { .bitrate = 110, .hw_value = 22, },
1440        { .bitrate = 60, .hw_value = 12, },
1441        { .bitrate = 90, .hw_value = 18, },
1442        { .bitrate = 120, .hw_value = 24, },
1443        { .bitrate = 180, .hw_value = 36, },
1444        { .bitrate = 240, .hw_value = 48, },
1445        { .bitrate = 360, .hw_value = 72, },
1446        { .bitrate = 480, .hw_value = 96, },
1447        { .bitrate = 540, .hw_value = 108, },
1448};
1449
1450static const struct ieee80211_channel ar5523_channels[] = {
1451        { .center_freq = 2412 },
1452        { .center_freq = 2417 },
1453        { .center_freq = 2422 },
1454        { .center_freq = 2427 },
1455        { .center_freq = 2432 },
1456        { .center_freq = 2437 },
1457        { .center_freq = 2442 },
1458        { .center_freq = 2447 },
1459        { .center_freq = 2452 },
1460        { .center_freq = 2457 },
1461        { .center_freq = 2462 },
1462        { .center_freq = 2467 },
1463        { .center_freq = 2472 },
1464        { .center_freq = 2484 },
1465};
1466
1467static int ar5523_init_modes(struct ar5523 *ar)
1468{
1469        BUILD_BUG_ON(sizeof(ar->channels) != sizeof(ar5523_channels));
1470        BUILD_BUG_ON(sizeof(ar->rates) != sizeof(ar5523_rates));
1471
1472        memcpy(ar->channels, ar5523_channels, sizeof(ar5523_channels));
1473        memcpy(ar->rates, ar5523_rates, sizeof(ar5523_rates));
1474
1475        ar->band.band = IEEE80211_BAND_2GHZ;
1476        ar->band.channels = ar->channels;
1477        ar->band.n_channels = ARRAY_SIZE(ar5523_channels);
1478        ar->band.bitrates = ar->rates;
1479        ar->band.n_bitrates = ARRAY_SIZE(ar5523_rates);
1480        ar->hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &ar->band;
1481        return 0;
1482}
1483
1484/*
1485 * Load the MIPS R4000 microcode into the device.  Once the image is loaded,
1486 * the device will detach itself from the bus and reattach later with a new
1487 * product Id (a la ezusb).
1488 */
1489static int ar5523_load_firmware(struct usb_device *dev)
1490{
1491        struct ar5523_fwblock *txblock, *rxblock;
1492        const struct firmware *fw;
1493        void *fwbuf;
1494        int len, offset;
1495        int foolen; /* XXX(hch): handle short transfers */
1496        int error = -ENXIO;
1497
1498        if (request_firmware(&fw, AR5523_FIRMWARE_FILE, &dev->dev)) {
1499                dev_err(&dev->dev, "no firmware found: %s\n",
1500                        AR5523_FIRMWARE_FILE);
1501                return -ENOENT;
1502        }
1503
1504        txblock = kmalloc(sizeof(*txblock), GFP_KERNEL);
1505        if (!txblock)
1506                goto out;
1507
1508        rxblock = kmalloc(sizeof(*rxblock), GFP_KERNEL);
1509        if (!rxblock)
1510                goto out_free_txblock;
1511
1512        fwbuf = kmalloc(AR5523_MAX_FWBLOCK_SIZE, GFP_KERNEL);
1513        if (!fwbuf)
1514                goto out_free_rxblock;
1515
1516        memset(txblock, 0, sizeof(struct ar5523_fwblock));
1517        txblock->flags = cpu_to_be32(AR5523_WRITE_BLOCK);
1518        txblock->total = cpu_to_be32(fw->size);
1519
1520        offset = 0;
1521        len = fw->size;
1522        while (len > 0) {
1523                int mlen = min(len, AR5523_MAX_FWBLOCK_SIZE);
1524
1525                txblock->remain = cpu_to_be32(len - mlen);
1526                txblock->len = cpu_to_be32(mlen);
1527
1528                /* send firmware block meta-data */
1529                error = usb_bulk_msg(dev, ar5523_cmd_tx_pipe(dev),
1530                                     txblock, sizeof(*txblock), &foolen,
1531                                     AR5523_CMD_TIMEOUT);
1532                if (error) {
1533                        dev_err(&dev->dev,
1534                                "could not send firmware block info\n");
1535                        goto out_free_fwbuf;
1536                }
1537
1538                /* send firmware block data */
1539                memcpy(fwbuf, fw->data + offset, mlen);
1540                error = usb_bulk_msg(dev, ar5523_data_tx_pipe(dev),
1541                                     fwbuf, mlen, &foolen,
1542                                     AR5523_DATA_TIMEOUT);
1543                if (error) {
1544                        dev_err(&dev->dev,
1545                                "could not send firmware block data\n");
1546                        goto out_free_fwbuf;
1547                }
1548
1549                /* wait for ack from firmware */
1550                error = usb_bulk_msg(dev, ar5523_cmd_rx_pipe(dev),
1551                                     rxblock, sizeof(*rxblock), &foolen,
1552                                     AR5523_CMD_TIMEOUT);
1553                if (error) {
1554                        dev_err(&dev->dev,
1555                                "could not read firmware answer\n");
1556                        goto out_free_fwbuf;
1557                }
1558
1559                len -= mlen;
1560                offset += mlen;
1561        }
1562
1563        /*
1564         * Set the error to -ENXIO to make sure we continue probing for
1565         * a driver.
1566         */
1567        error = -ENXIO;
1568
1569 out_free_fwbuf:
1570        kfree(fwbuf);
1571 out_free_rxblock:
1572        kfree(rxblock);
1573 out_free_txblock:
1574        kfree(txblock);
1575 out:
1576        release_firmware(fw);
1577        return error;
1578}
1579
1580static int ar5523_probe(struct usb_interface *intf,
1581                        const struct usb_device_id *id)
1582{
1583        struct usb_device *dev = interface_to_usbdev(intf);
1584        struct ieee80211_hw *hw;
1585        struct ar5523 *ar;
1586        int error = -ENOMEM;
1587
1588        /*
1589         * Load firmware if the device requires it.  This will return
1590         * -ENXIO on success and we'll get called back afer the usb
1591         * id changes to indicate that the firmware is present.
1592         */
1593        if (id->driver_info & AR5523_FLAG_PRE_FIRMWARE)
1594                return ar5523_load_firmware(dev);
1595
1596
1597        hw = ieee80211_alloc_hw(sizeof(*ar), &ar5523_ops);
1598        if (!hw)
1599                goto out;
1600        SET_IEEE80211_DEV(hw, &intf->dev);
1601
1602        ar = hw->priv;
1603        ar->hw = hw;
1604        ar->dev = dev;
1605        mutex_init(&ar->mutex);
1606
1607        INIT_DELAYED_WORK(&ar->stat_work, ar5523_stat_work);
1608        init_timer(&ar->tx_wd_timer);
1609        setup_timer(&ar->tx_wd_timer, ar5523_tx_wd_timer, (unsigned long) ar);
1610        INIT_WORK(&ar->tx_wd_work, ar5523_tx_wd_work);
1611        INIT_WORK(&ar->tx_work, ar5523_tx_work);
1612        INIT_LIST_HEAD(&ar->tx_queue_pending);
1613        INIT_LIST_HEAD(&ar->tx_queue_submitted);
1614        spin_lock_init(&ar->tx_data_list_lock);
1615        atomic_set(&ar->tx_nr_total, 0);
1616        atomic_set(&ar->tx_nr_pending, 0);
1617        init_waitqueue_head(&ar->tx_flush_waitq);
1618
1619        atomic_set(&ar->rx_data_free_cnt, 0);
1620        INIT_WORK(&ar->rx_refill_work, ar5523_rx_refill_work);
1621        INIT_LIST_HEAD(&ar->rx_data_free);
1622        INIT_LIST_HEAD(&ar->rx_data_used);
1623        spin_lock_init(&ar->rx_data_list_lock);
1624
1625        ar->wq = create_singlethread_workqueue("ar5523");
1626        if (!ar->wq) {
1627                ar5523_err(ar, "Could not create wq\n");
1628                goto out_free_ar;
1629        }
1630
1631        error = ar5523_alloc_rx_bufs(ar);
1632        if (error) {
1633                ar5523_err(ar, "Could not allocate rx buffers\n");
1634                goto out_free_wq;
1635        }
1636
1637        error = ar5523_alloc_rx_cmd(ar);
1638        if (error) {
1639                ar5523_err(ar, "Could not allocate rx command buffers\n");
1640                goto out_free_rx_bufs;
1641        }
1642
1643        error = ar5523_alloc_tx_cmd(ar);
1644        if (error) {
1645                ar5523_err(ar, "Could not allocate tx command buffers\n");
1646                goto out_free_rx_cmd;
1647        }
1648
1649        error = ar5523_submit_rx_cmd(ar);
1650        if (error) {
1651                ar5523_err(ar, "Failed to submit rx cmd\n");
1652                goto out_free_tx_cmd;
1653        }
1654
1655        /*
1656         * We're now ready to send/receive firmware commands.
1657         */
1658        error = ar5523_host_available(ar);
1659        if (error) {
1660                ar5523_err(ar, "could not initialize adapter\n");
1661                goto out_cancel_rx_cmd;
1662        }
1663
1664        error = ar5523_get_max_rxsz(ar);
1665        if (error) {
1666                ar5523_err(ar, "could not get caps from adapter\n");
1667                goto out_cancel_rx_cmd;
1668        }
1669
1670        error = ar5523_get_devcap(ar);
1671        if (error) {
1672                ar5523_err(ar, "could not get caps from adapter\n");
1673                goto out_cancel_rx_cmd;
1674        }
1675
1676        error = ar5523_get_devstatus(ar);
1677        if (error != 0) {
1678                ar5523_err(ar, "could not get device status\n");
1679                goto out_cancel_rx_cmd;
1680        }
1681
1682        ar5523_info(ar, "MAC/BBP AR5523, RF AR%c112\n",
1683                        (id->driver_info & AR5523_FLAG_ABG) ? '5' : '2');
1684
1685        ar->vif = NULL;
1686        hw->flags = IEEE80211_HW_RX_INCLUDES_FCS |
1687                    IEEE80211_HW_SIGNAL_DBM |
1688                    IEEE80211_HW_HAS_RATE_CONTROL;
1689        hw->extra_tx_headroom = sizeof(struct ar5523_tx_desc) +
1690                                sizeof(struct ar5523_chunk);
1691        hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION);
1692        hw->queues = 1;
1693
1694        error = ar5523_init_modes(ar);
1695        if (error)
1696                goto out_cancel_rx_cmd;
1697
1698        usb_set_intfdata(intf, hw);
1699
1700        error = ieee80211_register_hw(hw);
1701        if (error) {
1702                ar5523_err(ar, "could not register device\n");
1703                goto out_cancel_rx_cmd;
1704        }
1705
1706        ar5523_info(ar, "Found and initialized AR5523 device\n");
1707        return 0;
1708
1709out_cancel_rx_cmd:
1710        ar5523_cancel_rx_cmd(ar);
1711out_free_tx_cmd:
1712        ar5523_free_tx_cmd(ar);
1713out_free_rx_cmd:
1714        ar5523_free_rx_cmd(ar);
1715out_free_rx_bufs:
1716        ar5523_free_rx_bufs(ar);
1717out_free_wq:
1718        destroy_workqueue(ar->wq);
1719out_free_ar:
1720        ieee80211_free_hw(hw);
1721out:
1722        return error;
1723}
1724
1725static void ar5523_disconnect(struct usb_interface *intf)
1726{
1727        struct ieee80211_hw *hw = usb_get_intfdata(intf);
1728        struct ar5523 *ar = hw->priv;
1729
1730        ar5523_dbg(ar, "detaching\n");
1731        set_bit(AR5523_USB_DISCONNECTED, &ar->flags);
1732
1733        ieee80211_unregister_hw(hw);
1734
1735        ar5523_cancel_rx_cmd(ar);
1736        ar5523_free_tx_cmd(ar);
1737        ar5523_free_rx_cmd(ar);
1738        ar5523_free_rx_bufs(ar);
1739
1740        destroy_workqueue(ar->wq);
1741
1742        ieee80211_free_hw(hw);
1743        usb_set_intfdata(intf, NULL);
1744}
1745
1746#define AR5523_DEVICE_UG(vendor, device) \
1747        { USB_DEVICE((vendor), (device)) }, \
1748        { USB_DEVICE((vendor), (device) + 1), \
1749                .driver_info = AR5523_FLAG_PRE_FIRMWARE }
1750#define AR5523_DEVICE_UX(vendor, device) \
1751        { USB_DEVICE((vendor), (device)), \
1752                .driver_info = AR5523_FLAG_ABG }, \
1753        { USB_DEVICE((vendor), (device) + 1), \
1754                .driver_info = AR5523_FLAG_ABG|AR5523_FLAG_PRE_FIRMWARE }
1755
1756static struct usb_device_id ar5523_id_table[] = {
1757        AR5523_DEVICE_UG(0x168c, 0x0001),       /* Atheros / AR5523 */
1758        AR5523_DEVICE_UG(0x0cf3, 0x0001),       /* Atheros2 / AR5523_1 */
1759        AR5523_DEVICE_UG(0x0cf3, 0x0003),       /* Atheros2 / AR5523_2 */
1760        AR5523_DEVICE_UX(0x0cf3, 0x0005),       /* Atheros2 / AR5523_3 */
1761        AR5523_DEVICE_UG(0x0d8e, 0x7801),       /* Conceptronic / AR5523_1 */
1762        AR5523_DEVICE_UX(0x0d8e, 0x7811),       /* Conceptronic / AR5523_2 */
1763        AR5523_DEVICE_UX(0x2001, 0x3a00),       /* Dlink / DWLAG132 */
1764        AR5523_DEVICE_UG(0x2001, 0x3a02),       /* Dlink / DWLG132 */
1765        AR5523_DEVICE_UX(0x2001, 0x3a04),       /* Dlink / DWLAG122 */
1766        AR5523_DEVICE_UG(0x07d1, 0x3a07),       /* D-Link / WUA-2340 rev A1 */
1767        AR5523_DEVICE_UG(0x1690, 0x0712),       /* Gigaset / AR5523 */
1768        AR5523_DEVICE_UG(0x1690, 0x0710),       /* Gigaset / SMCWUSBTG */
1769        AR5523_DEVICE_UG(0x129b, 0x160b),       /* Gigaset / USB stick 108
1770                                                   (CyberTAN Technology) */
1771        AR5523_DEVICE_UG(0x16ab, 0x7801),       /* Globalsun / AR5523_1 */
1772        AR5523_DEVICE_UX(0x16ab, 0x7811),       /* Globalsun / AR5523_2 */
1773        AR5523_DEVICE_UG(0x0d8e, 0x7802),       /* Globalsun / AR5523_3 */
1774        AR5523_DEVICE_UX(0x0846, 0x4300),       /* Netgear / WG111U */
1775        AR5523_DEVICE_UG(0x0846, 0x4250),       /* Netgear / WG111T */
1776        AR5523_DEVICE_UG(0x0846, 0x5f00),       /* Netgear / WPN111 */
1777        AR5523_DEVICE_UG(0x157e, 0x3006),       /* Umedia / AR5523_1 */
1778        AR5523_DEVICE_UX(0x157e, 0x3205),       /* Umedia / AR5523_2 */
1779        AR5523_DEVICE_UG(0x157e, 0x3006),       /* Umedia / TEW444UBEU */
1780        AR5523_DEVICE_UG(0x1435, 0x0826),       /* Wistronneweb / AR5523_1 */
1781        AR5523_DEVICE_UX(0x1435, 0x0828),       /* Wistronneweb / AR5523_2 */
1782        AR5523_DEVICE_UG(0x0cde, 0x0012),       /* Zcom / AR5523 */
1783        AR5523_DEVICE_UG(0x1385, 0x4250),       /* Netgear3 / WG111T (2) */
1784        AR5523_DEVICE_UG(0x1385, 0x5f00),       /* Netgear / WPN111 */
1785        AR5523_DEVICE_UG(0x1385, 0x5f02),       /* Netgear / WPN111 */
1786        { }
1787};
1788MODULE_DEVICE_TABLE(usb, ar5523_id_table);
1789
1790static struct usb_driver ar5523_driver = {
1791        .name           = "ar5523",
1792        .id_table       = ar5523_id_table,
1793        .probe          = ar5523_probe,
1794        .disconnect     = ar5523_disconnect,
1795};
1796
1797module_usb_driver(ar5523_driver);
1798
1799MODULE_LICENSE("Dual BSD/GPL");
1800MODULE_FIRMWARE(AR5523_FIRMWARE_FILE);
1801