diff options
Diffstat (limited to 'drivers/net/wireless/iwlwifi/dvm')
25 files changed, 27249 insertions, 0 deletions
diff --git a/drivers/net/wireless/iwlwifi/dvm/Makefile b/drivers/net/wireless/iwlwifi/dvm/Makefile new file mode 100644 index 00000000000..4d19685f31c --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/Makefile @@ -0,0 +1,13 @@ +# DVM +obj-$(CONFIG_IWLDVM)	+= iwldvm.o +iwldvm-objs		+= main.o rs.o mac80211.o ucode.o tx.o +iwldvm-objs		+= lib.o calib.o tt.o sta.o rx.o + +iwldvm-objs		+= power.o +iwldvm-objs		+= scan.o +iwldvm-objs		+= rxon.o devices.o + +iwldvm-$(CONFIG_IWLWIFI_LEDS) += led.o +iwldvm-$(CONFIG_IWLWIFI_DEBUGFS) += debugfs.o + +ccflags-y += -D__CHECK_ENDIAN__ -I$(src)/../ diff --git a/drivers/net/wireless/iwlwifi/dvm/agn.h b/drivers/net/wireless/iwlwifi/dvm/agn.h new file mode 100644 index 00000000000..c160dad0303 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/agn.h @@ -0,0 +1,492 @@ +/****************************************************************************** + * + * This file is provided under a dual BSD/GPLv2 license.  When using or + * redistributing this file, you may do so under either license. + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + * BSD LICENSE + * + * Copyright(c) 2005 - 2014 Intel Corporation. All rights reserved. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + *  * Redistributions of source code must retain the above copyright + *    notice, this list of conditions and the following disclaimer. + *  * Redistributions in binary form must reproduce the above copyright + *    notice, this list of conditions and the following disclaimer in + *    the documentation and/or other materials provided with the + *    distribution. + *  * Neither the name Intel Corporation nor the names of its + *    contributors may be used to endorse or promote products derived + *    from this software without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + *****************************************************************************/ + +#ifndef __iwl_agn_h__ +#define __iwl_agn_h__ + +#include "iwl-config.h" + +#include "dev.h" + +/* The first 11 queues (0-10) are used otherwise */ +#define IWLAGN_FIRST_AMPDU_QUEUE	11 + +/* AUX (TX during scan dwell) queue */ +#define IWL_AUX_QUEUE		10 + +#define IWL_INVALID_STATION	255 + +/* device operations */ +extern const struct iwl_dvm_cfg iwl_dvm_1000_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_2000_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_105_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_2030_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_5000_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_5150_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_6000_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_6005_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_6050_cfg; +extern const struct iwl_dvm_cfg iwl_dvm_6030_cfg; + + +#define TIME_UNIT		1024 + +/***************************************************** +* DRIVER STATUS FUNCTIONS +******************************************************/ +#define STATUS_RF_KILL_HW	0 +#define STATUS_CT_KILL		1 +#define STATUS_ALIVE		2 +#define STATUS_READY		3 +#define STATUS_EXIT_PENDING	5 +#define STATUS_STATISTICS	6 +#define STATUS_SCANNING		7 +#define STATUS_SCAN_ABORTING	8 +#define STATUS_SCAN_HW		9 +#define STATUS_FW_ERROR		10 +#define STATUS_CHANNEL_SWITCH_PENDING 11 +#define STATUS_SCAN_COMPLETE	12 +#define STATUS_POWER_PMI	13 + +struct iwl_ucode_capabilities; + +extern const struct ieee80211_ops iwlagn_hw_ops; + +static inline void iwl_set_calib_hdr(struct iwl_calib_hdr *hdr, u8 cmd) +{ +	hdr->op_code = cmd; +	hdr->first_group = 0; +	hdr->groups_num = 1; +	hdr->data_valid = 1; +} + +void iwl_down(struct iwl_priv *priv); +void iwl_cancel_deferred_work(struct iwl_priv *priv); +void iwlagn_prepare_restart(struct iwl_priv *priv); +int __must_check iwl_rx_dispatch(struct iwl_op_mode *op_mode, +				 struct iwl_rx_cmd_buffer *rxb, +				 struct iwl_device_cmd *cmd); + +bool iwl_check_for_ct_kill(struct iwl_priv *priv); + +void iwlagn_lift_passive_no_rx(struct iwl_priv *priv); + +/* MAC80211 */ +struct ieee80211_hw *iwl_alloc_all(void); +int iwlagn_mac_setup_register(struct iwl_priv *priv, +			      const struct iwl_ucode_capabilities *capa); +void iwlagn_mac_unregister(struct iwl_priv *priv); + +/* commands */ +int iwl_dvm_send_cmd(struct iwl_priv *priv, struct iwl_host_cmd *cmd); +int iwl_dvm_send_cmd_pdu(struct iwl_priv *priv, u8 id, +			 u32 flags, u16 len, const void *data); + +/* RXON */ +void iwl_connection_init_rx_config(struct iwl_priv *priv, +				   struct iwl_rxon_context *ctx); +int iwlagn_set_pan_params(struct iwl_priv *priv); +int iwlagn_commit_rxon(struct iwl_priv *priv, struct iwl_rxon_context *ctx); +void iwlagn_set_rxon_chain(struct iwl_priv *priv, struct iwl_rxon_context *ctx); +int iwlagn_mac_config(struct ieee80211_hw *hw, u32 changed); +void iwlagn_bss_info_changed(struct ieee80211_hw *hw, +			     struct ieee80211_vif *vif, +			     struct ieee80211_bss_conf *bss_conf, +			     u32 changes); +void iwlagn_config_ht40(struct ieee80211_conf *conf, +			struct iwl_rxon_context *ctx); +void iwl_set_rxon_ht(struct iwl_priv *priv, struct iwl_ht_config *ht_conf); +void iwl_set_rxon_channel(struct iwl_priv *priv, struct ieee80211_channel *ch, +			 struct iwl_rxon_context *ctx); +void iwl_set_flags_for_band(struct iwl_priv *priv, +			    struct iwl_rxon_context *ctx, +			    enum ieee80211_band band, +			    struct ieee80211_vif *vif); + +/* uCode */ +int iwl_send_bt_env(struct iwl_priv *priv, u8 action, u8 type); +void iwl_send_prio_tbl(struct iwl_priv *priv); +int iwl_init_alive_start(struct iwl_priv *priv); +int iwl_run_init_ucode(struct iwl_priv *priv); +int iwl_load_ucode_wait_alive(struct iwl_priv *priv, +			      enum iwl_ucode_type ucode_type); +int iwl_send_calib_results(struct iwl_priv *priv); +int iwl_calib_set(struct iwl_priv *priv, +		  const struct iwl_calib_hdr *cmd, int len); +void iwl_calib_free_results(struct iwl_priv *priv); +int iwl_dump_nic_event_log(struct iwl_priv *priv, bool full_log, +			    char **buf); +int iwlagn_hw_valid_rtc_data_addr(u32 addr); + +/* lib */ +int iwlagn_send_tx_power(struct iwl_priv *priv); +void iwlagn_temperature(struct iwl_priv *priv); +int iwlagn_txfifo_flush(struct iwl_priv *priv, u32 scd_q_msk); +void iwlagn_dev_txfifo_flush(struct iwl_priv *priv); +int iwlagn_send_beacon_cmd(struct iwl_priv *priv); +int iwl_send_statistics_request(struct iwl_priv *priv, +				u8 flags, bool clear); + +static inline const struct ieee80211_supported_band *iwl_get_hw_mode( +			struct iwl_priv *priv, enum ieee80211_band band) +{ +	return priv->hw->wiphy->bands[band]; +} + +#ifdef CONFIG_PM_SLEEP +int iwlagn_send_patterns(struct iwl_priv *priv, +			 struct cfg80211_wowlan *wowlan); +int iwlagn_suspend(struct iwl_priv *priv, struct cfg80211_wowlan *wowlan); +#endif + +/* rx */ +int iwlagn_hwrate_to_mac80211_idx(u32 rate_n_flags, enum ieee80211_band band); +void iwl_setup_rx_handlers(struct iwl_priv *priv); +void iwl_chswitch_done(struct iwl_priv *priv, bool is_success); + + +/* tx */ +int iwlagn_tx_skb(struct iwl_priv *priv, +		  struct ieee80211_sta *sta, +		  struct sk_buff *skb); +int iwlagn_tx_agg_start(struct iwl_priv *priv, struct ieee80211_vif *vif, +			struct ieee80211_sta *sta, u16 tid, u16 *ssn); +int iwlagn_tx_agg_oper(struct iwl_priv *priv, struct ieee80211_vif *vif, +			struct ieee80211_sta *sta, u16 tid, u8 buf_size); +int iwlagn_tx_agg_stop(struct iwl_priv *priv, struct ieee80211_vif *vif, +		       struct ieee80211_sta *sta, u16 tid); +int iwlagn_tx_agg_flush(struct iwl_priv *priv, struct ieee80211_vif *vif, +			struct ieee80211_sta *sta, u16 tid); +int iwlagn_rx_reply_compressed_ba(struct iwl_priv *priv, +				   struct iwl_rx_cmd_buffer *rxb, +				   struct iwl_device_cmd *cmd); +int iwlagn_rx_reply_tx(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb, +			       struct iwl_device_cmd *cmd); + +static inline u32 iwl_tx_status_to_mac80211(u32 status) +{ +	status &= TX_STATUS_MSK; + +	switch (status) { +	case TX_STATUS_SUCCESS: +	case TX_STATUS_DIRECT_DONE: +		return IEEE80211_TX_STAT_ACK; +	case TX_STATUS_FAIL_DEST_PS: +	case TX_STATUS_FAIL_PASSIVE_NO_RX: +		return IEEE80211_TX_STAT_TX_FILTERED; +	default: +		return 0; +	} +} + +static inline bool iwl_is_tx_success(u32 status) +{ +	status &= TX_STATUS_MSK; +	return (status == TX_STATUS_SUCCESS) || +	       (status == TX_STATUS_DIRECT_DONE); +} + +u8 iwl_toggle_tx_ant(struct iwl_priv *priv, u8 ant_idx, u8 valid); + +/* scan */ +void iwlagn_post_scan(struct iwl_priv *priv); +int iwl_force_rf_reset(struct iwl_priv *priv, bool external); +void iwl_init_scan_params(struct iwl_priv *priv); +int iwl_scan_cancel(struct iwl_priv *priv); +void iwl_scan_cancel_timeout(struct iwl_priv *priv, unsigned long ms); +void iwl_force_scan_end(struct iwl_priv *priv); +void iwl_internal_short_hw_scan(struct iwl_priv *priv); +void iwl_setup_rx_scan_handlers(struct iwl_priv *priv); +void iwl_setup_scan_deferred_work(struct iwl_priv *priv); +void iwl_cancel_scan_deferred_work(struct iwl_priv *priv); +int __must_check iwl_scan_initiate(struct iwl_priv *priv, +				   struct ieee80211_vif *vif, +				   enum iwl_scan_type scan_type, +				   enum ieee80211_band band); + +/* For faster active scanning, scan will move to the next channel if fewer than + * PLCP_QUIET_THRESH packets are heard on this channel within + * ACTIVE_QUIET_TIME after sending probe request.  This shortens the dwell + * time if it's a quiet channel (nothing responded to our probe, and there's + * no other traffic). + * Disable "quiet" feature by setting PLCP_QUIET_THRESH to 0. */ +#define IWL_ACTIVE_QUIET_TIME       cpu_to_le16(10)  /* msec */ +#define IWL_PLCP_QUIET_THRESH       cpu_to_le16(1)  /* packets */ + +#define IWL_SCAN_CHECK_WATCHDOG		(HZ * 15) + + +/* bt coex */ +void iwlagn_send_advance_bt_config(struct iwl_priv *priv); +int iwlagn_bt_coex_profile_notif(struct iwl_priv *priv, +				  struct iwl_rx_cmd_buffer *rxb, +				  struct iwl_device_cmd *cmd); +void iwlagn_bt_rx_handler_setup(struct iwl_priv *priv); +void iwlagn_bt_setup_deferred_work(struct iwl_priv *priv); +void iwlagn_bt_cancel_deferred_work(struct iwl_priv *priv); +void iwlagn_bt_coex_rssi_monitor(struct iwl_priv *priv); +void iwlagn_bt_adjust_rssi_monitor(struct iwl_priv *priv, bool rssi_ena); + +static inline bool iwl_advanced_bt_coexist(struct iwl_priv *priv) +{ +	return priv->lib->bt_params && +	       priv->lib->bt_params->advanced_bt_coexist; +} + +#ifdef CONFIG_IWLWIFI_DEBUG +const char *iwl_get_tx_fail_reason(u32 status); +const char *iwl_get_agg_tx_fail_reason(u16 status); +#else +static inline const char *iwl_get_tx_fail_reason(u32 status) { return ""; } +static inline const char *iwl_get_agg_tx_fail_reason(u16 status) { return ""; } +#endif + + +/* station management */ +int iwlagn_manage_ibss_station(struct iwl_priv *priv, +			       struct ieee80211_vif *vif, bool add); +#define IWL_STA_DRIVER_ACTIVE BIT(0) /* driver entry is active */ +#define IWL_STA_UCODE_ACTIVE  BIT(1) /* ucode entry is active */ +#define IWL_STA_UCODE_INPROGRESS  BIT(2) /* ucode entry is in process of +					    being activated */ +#define IWL_STA_LOCAL BIT(3) /* station state not directed by mac80211; +				(this is for the IBSS BSSID stations) */ +#define IWL_STA_BCAST BIT(4) /* this station is the special bcast station */ + + +void iwl_restore_stations(struct iwl_priv *priv, struct iwl_rxon_context *ctx); +void iwl_clear_ucode_stations(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx); +void iwl_dealloc_bcast_stations(struct iwl_priv *priv); +int iwl_get_free_ucode_key_offset(struct iwl_priv *priv); +int iwl_send_add_sta(struct iwl_priv *priv, +		     struct iwl_addsta_cmd *sta, u8 flags); +int iwl_add_station_common(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +			   const u8 *addr, bool is_ap, +			   struct ieee80211_sta *sta, u8 *sta_id_r); +int iwl_remove_station(struct iwl_priv *priv, const u8 sta_id, +		       const u8 *addr); +void iwl_deactivate_station(struct iwl_priv *priv, const u8 sta_id, +			    const u8 *addr); +u8 iwl_prep_station(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +		    const u8 *addr, bool is_ap, struct ieee80211_sta *sta); + +int iwl_send_lq_cmd(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +		    struct iwl_link_quality_cmd *lq, u8 flags, bool init); +int iwl_add_sta_callback(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb, +			       struct iwl_device_cmd *cmd); +int iwl_sta_update_ht(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +		      struct ieee80211_sta *sta); + +bool iwl_is_ht40_tx_allowed(struct iwl_priv *priv, +			    struct iwl_rxon_context *ctx, +			    struct ieee80211_sta *sta); + +static inline int iwl_sta_id(struct ieee80211_sta *sta) +{ +	if (WARN_ON(!sta)) +		return IWL_INVALID_STATION; + +	return ((struct iwl_station_priv *)sta->drv_priv)->sta_id; +} + +int iwlagn_alloc_bcast_station(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx); +int iwlagn_add_bssid_station(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +			     const u8 *addr, u8 *sta_id_r); +int iwl_remove_default_wep_key(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx, +			       struct ieee80211_key_conf *key); +int iwl_set_default_wep_key(struct iwl_priv *priv, +			    struct iwl_rxon_context *ctx, +			    struct ieee80211_key_conf *key); +int iwl_restore_default_wep_keys(struct iwl_priv *priv, +				 struct iwl_rxon_context *ctx); +int iwl_set_dynamic_key(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +			struct ieee80211_key_conf *key, +			struct ieee80211_sta *sta); +int iwl_remove_dynamic_key(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +			   struct ieee80211_key_conf *key, +			   struct ieee80211_sta *sta); +void iwl_update_tkip_key(struct iwl_priv *priv, +			 struct ieee80211_vif *vif, +			 struct ieee80211_key_conf *keyconf, +			 struct ieee80211_sta *sta, u32 iv32, u16 *phase1key); +int iwl_sta_tx_modify_enable_tid(struct iwl_priv *priv, int sta_id, int tid); +int iwl_sta_rx_agg_start(struct iwl_priv *priv, struct ieee80211_sta *sta, +			 int tid, u16 ssn); +int iwl_sta_rx_agg_stop(struct iwl_priv *priv, struct ieee80211_sta *sta, +			int tid); +void iwl_sta_modify_sleep_tx_count(struct iwl_priv *priv, int sta_id, int cnt); +int iwl_update_bcast_station(struct iwl_priv *priv, +			     struct iwl_rxon_context *ctx); +int iwl_update_bcast_stations(struct iwl_priv *priv); + +/* rate */ +static inline u32 iwl_ant_idx_to_flags(u8 ant_idx) +{ +	return BIT(ant_idx) << RATE_MCS_ANT_POS; +} + +static inline u8 iwl_hw_get_rate(__le32 rate_n_flags) +{ +	return le32_to_cpu(rate_n_flags) & RATE_MCS_RATE_MSK; +} + +static inline __le32 iwl_hw_set_rate_n_flags(u8 rate, u32 flags) +{ +	return cpu_to_le32(flags|(u32)rate); +} + +int iwl_alive_start(struct iwl_priv *priv); + +#ifdef CONFIG_IWLWIFI_DEBUG +void iwl_print_rx_config_cmd(struct iwl_priv *priv, +			     enum iwl_rxon_context_id ctxid); +#else +static inline void iwl_print_rx_config_cmd(struct iwl_priv *priv, +					   enum iwl_rxon_context_id ctxid) +{ +} +#endif + +/* status checks */ + +static inline int iwl_is_ready(struct iwl_priv *priv) +{ +	/* The adapter is 'ready' if READY EXIT_PENDING is not set */ +	return test_bit(STATUS_READY, &priv->status) && +	       !test_bit(STATUS_EXIT_PENDING, &priv->status); +} + +static inline int iwl_is_alive(struct iwl_priv *priv) +{ +	return test_bit(STATUS_ALIVE, &priv->status); +} + +static inline int iwl_is_rfkill(struct iwl_priv *priv) +{ +	return test_bit(STATUS_RF_KILL_HW, &priv->status); +} + +static inline int iwl_is_ctkill(struct iwl_priv *priv) +{ +	return test_bit(STATUS_CT_KILL, &priv->status); +} + +static inline int iwl_is_ready_rf(struct iwl_priv *priv) +{ +	if (iwl_is_rfkill(priv)) +		return 0; + +	return iwl_is_ready(priv); +} + +static inline void iwl_dvm_set_pmi(struct iwl_priv *priv, bool state) +{ +	if (state) +		set_bit(STATUS_POWER_PMI, &priv->status); +	else +		clear_bit(STATUS_POWER_PMI, &priv->status); +	iwl_trans_set_pmi(priv->trans, state); +} + +#ifdef CONFIG_IWLWIFI_DEBUGFS +int iwl_dbgfs_register(struct iwl_priv *priv, struct dentry *dbgfs_dir); +#else +static inline int iwl_dbgfs_register(struct iwl_priv *priv, +				     struct dentry *dbgfs_dir) +{ +	return 0; +} +#endif /* CONFIG_IWLWIFI_DEBUGFS */ + +#ifdef CONFIG_IWLWIFI_DEBUG +#define IWL_DEBUG_QUIET_RFKILL(m, fmt, args...)	\ +do {									\ +	if (!iwl_is_rfkill((m)))					\ +		IWL_ERR(m, fmt, ##args);				\ +	else								\ +		__iwl_err((m)->dev, true,				\ +			  !iwl_have_debug_level(IWL_DL_RADIO),		\ +			  fmt, ##args);					\ +} while (0) +#else +#define IWL_DEBUG_QUIET_RFKILL(m, fmt, args...)	\ +do {									\ +	if (!iwl_is_rfkill((m)))					\ +		IWL_ERR(m, fmt, ##args);				\ +	else								\ +		__iwl_err((m)->dev, true, true, fmt, ##args);	\ +} while (0) +#endif				/* CONFIG_IWLWIFI_DEBUG */ + +extern const char *const iwl_dvm_cmd_strings[REPLY_MAX]; + +static inline const char *iwl_dvm_get_cmd_string(u8 cmd) +{ +	const char *s = iwl_dvm_cmd_strings[cmd]; +	if (s) +		return s; +	return "UNKNOWN"; +} +#endif /* __iwl_agn_h__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/calib.c b/drivers/net/wireless/iwlwifi/dvm/calib.c new file mode 100644 index 00000000000..20e6aa91070 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/calib.c @@ -0,0 +1,1113 @@ +/****************************************************************************** + * + * This file is provided under a dual BSD/GPLv2 license.  When using or + * redistributing this file, you may do so under either license. + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + * BSD LICENSE + * + * Copyright(c) 2005 - 2014 Intel Corporation. All rights reserved. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + *  * Redistributions of source code must retain the above copyright + *    notice, this list of conditions and the following disclaimer. + *  * Redistributions in binary form must reproduce the above copyright + *    notice, this list of conditions and the following disclaimer in + *    the documentation and/or other materials provided with the + *    distribution. + *  * Neither the name Intel Corporation nor the names of its + *    contributors may be used to endorse or promote products derived + *    from this software without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + *****************************************************************************/ + +#include <linux/slab.h> +#include <net/mac80211.h> + +#include "iwl-trans.h" + +#include "dev.h" +#include "calib.h" +#include "agn.h" + +/***************************************************************************** + * INIT calibrations framework + *****************************************************************************/ + +/* Opaque calibration results */ +struct iwl_calib_result { +	struct list_head list; +	size_t cmd_len; +	struct iwl_calib_hdr hdr; +	/* data follows */ +}; + +struct statistics_general_data { +	u32 beacon_silence_rssi_a; +	u32 beacon_silence_rssi_b; +	u32 beacon_silence_rssi_c; +	u32 beacon_energy_a; +	u32 beacon_energy_b; +	u32 beacon_energy_c; +}; + +int iwl_send_calib_results(struct iwl_priv *priv) +{ +	struct iwl_host_cmd hcmd = { +		.id = REPLY_PHY_CALIBRATION_CMD, +	}; +	struct iwl_calib_result *res; + +	list_for_each_entry(res, &priv->calib_results, list) { +		int ret; + +		hcmd.len[0] = res->cmd_len; +		hcmd.data[0] = &res->hdr; +		hcmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY; +		ret = iwl_dvm_send_cmd(priv, &hcmd); +		if (ret) { +			IWL_ERR(priv, "Error %d on calib cmd %d\n", +				ret, res->hdr.op_code); +			return ret; +		} +	} + +	return 0; +} + +int iwl_calib_set(struct iwl_priv *priv, +		  const struct iwl_calib_hdr *cmd, int len) +{ +	struct iwl_calib_result *res, *tmp; + +	res = kmalloc(sizeof(*res) + len - sizeof(struct iwl_calib_hdr), +		      GFP_ATOMIC); +	if (!res) +		return -ENOMEM; +	memcpy(&res->hdr, cmd, len); +	res->cmd_len = len; + +	list_for_each_entry(tmp, &priv->calib_results, list) { +		if (tmp->hdr.op_code == res->hdr.op_code) { +			list_replace(&tmp->list, &res->list); +			kfree(tmp); +			return 0; +		} +	} + +	/* wasn't in list already */ +	list_add_tail(&res->list, &priv->calib_results); + +	return 0; +} + +void iwl_calib_free_results(struct iwl_priv *priv) +{ +	struct iwl_calib_result *res, *tmp; + +	list_for_each_entry_safe(res, tmp, &priv->calib_results, list) { +		list_del(&res->list); +		kfree(res); +	} +} + +/***************************************************************************** + * RUNTIME calibrations framework + *****************************************************************************/ + +/* "false alarms" are signals that our DSP tries to lock onto, + *   but then determines that they are either noise, or transmissions + *   from a distant wireless network (also "noise", really) that get + *   "stepped on" by stronger transmissions within our own network. + * This algorithm attempts to set a sensitivity level that is high + *   enough to receive all of our own network traffic, but not so + *   high that our DSP gets too busy trying to lock onto non-network + *   activity/noise. */ +static int iwl_sens_energy_cck(struct iwl_priv *priv, +				   u32 norm_fa, +				   u32 rx_enable_time, +				   struct statistics_general_data *rx_info) +{ +	u32 max_nrg_cck = 0; +	int i = 0; +	u8 max_silence_rssi = 0; +	u32 silence_ref = 0; +	u8 silence_rssi_a = 0; +	u8 silence_rssi_b = 0; +	u8 silence_rssi_c = 0; +	u32 val; + +	/* "false_alarms" values below are cross-multiplications to assess the +	 *   numbers of false alarms within the measured period of actual Rx +	 *   (Rx is off when we're txing), vs the min/max expected false alarms +	 *   (some should be expected if rx is sensitive enough) in a +	 *   hypothetical listening period of 200 time units (TU), 204.8 msec: +	 * +	 * MIN_FA/fixed-time < false_alarms/actual-rx-time < MAX_FA/beacon-time +	 * +	 * */ +	u32 false_alarms = norm_fa * 200 * 1024; +	u32 max_false_alarms = MAX_FA_CCK * rx_enable_time; +	u32 min_false_alarms = MIN_FA_CCK * rx_enable_time; +	struct iwl_sensitivity_data *data = NULL; +	const struct iwl_sensitivity_ranges *ranges = priv->hw_params.sens; + +	data = &(priv->sensitivity_data); + +	data->nrg_auto_corr_silence_diff = 0; + +	/* Find max silence rssi among all 3 receivers. +	 * This is background noise, which may include transmissions from other +	 *    networks, measured during silence before our network's beacon */ +	silence_rssi_a = (u8)((rx_info->beacon_silence_rssi_a & +			    ALL_BAND_FILTER) >> 8); +	silence_rssi_b = (u8)((rx_info->beacon_silence_rssi_b & +			    ALL_BAND_FILTER) >> 8); +	silence_rssi_c = (u8)((rx_info->beacon_silence_rssi_c & +			    ALL_BAND_FILTER) >> 8); + +	val = max(silence_rssi_b, silence_rssi_c); +	max_silence_rssi = max(silence_rssi_a, (u8) val); + +	/* Store silence rssi in 20-beacon history table */ +	data->nrg_silence_rssi[data->nrg_silence_idx] = max_silence_rssi; +	data->nrg_silence_idx++; +	if (data->nrg_silence_idx >= NRG_NUM_PREV_STAT_L) +		data->nrg_silence_idx = 0; + +	/* Find max silence rssi across 20 beacon history */ +	for (i = 0; i < NRG_NUM_PREV_STAT_L; i++) { +		val = data->nrg_silence_rssi[i]; +		silence_ref = max(silence_ref, val); +	} +	IWL_DEBUG_CALIB(priv, "silence a %u, b %u, c %u, 20-bcn max %u\n", +			silence_rssi_a, silence_rssi_b, silence_rssi_c, +			silence_ref); + +	/* Find max rx energy (min value!) among all 3 receivers, +	 *   measured during beacon frame. +	 * Save it in 10-beacon history table. */ +	i = data->nrg_energy_idx; +	val = min(rx_info->beacon_energy_b, rx_info->beacon_energy_c); +	data->nrg_value[i] = min(rx_info->beacon_energy_a, val); + +	data->nrg_energy_idx++; +	if (data->nrg_energy_idx >= 10) +		data->nrg_energy_idx = 0; + +	/* Find min rx energy (max value) across 10 beacon history. +	 * This is the minimum signal level that we want to receive well. +	 * Add backoff (margin so we don't miss slightly lower energy frames). +	 * This establishes an upper bound (min value) for energy threshold. */ +	max_nrg_cck = data->nrg_value[0]; +	for (i = 1; i < 10; i++) +		max_nrg_cck = (u32) max(max_nrg_cck, (data->nrg_value[i])); +	max_nrg_cck += 6; + +	IWL_DEBUG_CALIB(priv, "rx energy a %u, b %u, c %u, 10-bcn max/min %u\n", +			rx_info->beacon_energy_a, rx_info->beacon_energy_b, +			rx_info->beacon_energy_c, max_nrg_cck - 6); + +	/* Count number of consecutive beacons with fewer-than-desired +	 *   false alarms. */ +	if (false_alarms < min_false_alarms) +		data->num_in_cck_no_fa++; +	else +		data->num_in_cck_no_fa = 0; +	IWL_DEBUG_CALIB(priv, "consecutive bcns with few false alarms = %u\n", +			data->num_in_cck_no_fa); + +	/* If we got too many false alarms this time, reduce sensitivity */ +	if ((false_alarms > max_false_alarms) && +		(data->auto_corr_cck > AUTO_CORR_MAX_TH_CCK)) { +		IWL_DEBUG_CALIB(priv, "norm FA %u > max FA %u\n", +		     false_alarms, max_false_alarms); +		IWL_DEBUG_CALIB(priv, "... reducing sensitivity\n"); +		data->nrg_curr_state = IWL_FA_TOO_MANY; +		/* Store for "fewer than desired" on later beacon */ +		data->nrg_silence_ref = silence_ref; + +		/* increase energy threshold (reduce nrg value) +		 *   to decrease sensitivity */ +		data->nrg_th_cck = data->nrg_th_cck - NRG_STEP_CCK; +	/* Else if we got fewer than desired, increase sensitivity */ +	} else if (false_alarms < min_false_alarms) { +		data->nrg_curr_state = IWL_FA_TOO_FEW; + +		/* Compare silence level with silence level for most recent +		 *   healthy number or too many false alarms */ +		data->nrg_auto_corr_silence_diff = (s32)data->nrg_silence_ref - +						   (s32)silence_ref; + +		IWL_DEBUG_CALIB(priv, "norm FA %u < min FA %u, silence diff %d\n", +			 false_alarms, min_false_alarms, +			 data->nrg_auto_corr_silence_diff); + +		/* Increase value to increase sensitivity, but only if: +		 * 1a) previous beacon did *not* have *too many* false alarms +		 * 1b) AND there's a significant difference in Rx levels +		 *      from a previous beacon with too many, or healthy # FAs +		 * OR 2) We've seen a lot of beacons (100) with too few +		 *       false alarms */ +		if ((data->nrg_prev_state != IWL_FA_TOO_MANY) && +			((data->nrg_auto_corr_silence_diff > NRG_DIFF) || +			(data->num_in_cck_no_fa > MAX_NUMBER_CCK_NO_FA))) { + +			IWL_DEBUG_CALIB(priv, "... increasing sensitivity\n"); +			/* Increase nrg value to increase sensitivity */ +			val = data->nrg_th_cck + NRG_STEP_CCK; +			data->nrg_th_cck = min((u32)ranges->min_nrg_cck, val); +		} else { +			IWL_DEBUG_CALIB(priv, "... but not changing sensitivity\n"); +		} + +	/* Else we got a healthy number of false alarms, keep status quo */ +	} else { +		IWL_DEBUG_CALIB(priv, " FA in safe zone\n"); +		data->nrg_curr_state = IWL_FA_GOOD_RANGE; + +		/* Store for use in "fewer than desired" with later beacon */ +		data->nrg_silence_ref = silence_ref; + +		/* If previous beacon had too many false alarms, +		 *   give it some extra margin by reducing sensitivity again +		 *   (but don't go below measured energy of desired Rx) */ +		if (IWL_FA_TOO_MANY == data->nrg_prev_state) { +			IWL_DEBUG_CALIB(priv, "... increasing margin\n"); +			if (data->nrg_th_cck > (max_nrg_cck + NRG_MARGIN)) +				data->nrg_th_cck -= NRG_MARGIN; +			else +				data->nrg_th_cck = max_nrg_cck; +		} +	} + +	/* Make sure the energy threshold does not go above the measured +	 * energy of the desired Rx signals (reduced by backoff margin), +	 * or else we might start missing Rx frames. +	 * Lower value is higher energy, so we use max()! +	 */ +	data->nrg_th_cck = max(max_nrg_cck, data->nrg_th_cck); +	IWL_DEBUG_CALIB(priv, "new nrg_th_cck %u\n", data->nrg_th_cck); + +	data->nrg_prev_state = data->nrg_curr_state; + +	/* Auto-correlation CCK algorithm */ +	if (false_alarms > min_false_alarms) { + +		/* increase auto_corr values to decrease sensitivity +		 * so the DSP won't be disturbed by the noise +		 */ +		if (data->auto_corr_cck < AUTO_CORR_MAX_TH_CCK) +			data->auto_corr_cck = AUTO_CORR_MAX_TH_CCK + 1; +		else { +			val = data->auto_corr_cck + AUTO_CORR_STEP_CCK; +			data->auto_corr_cck = +				min((u32)ranges->auto_corr_max_cck, val); +		} +		val = data->auto_corr_cck_mrc + AUTO_CORR_STEP_CCK; +		data->auto_corr_cck_mrc = +			min((u32)ranges->auto_corr_max_cck_mrc, val); +	} else if ((false_alarms < min_false_alarms) && +	   ((data->nrg_auto_corr_silence_diff > NRG_DIFF) || +	   (data->num_in_cck_no_fa > MAX_NUMBER_CCK_NO_FA))) { + +		/* Decrease auto_corr values to increase sensitivity */ +		val = data->auto_corr_cck - AUTO_CORR_STEP_CCK; +		data->auto_corr_cck = +			max((u32)ranges->auto_corr_min_cck, val); +		val = data->auto_corr_cck_mrc - AUTO_CORR_STEP_CCK; +		data->auto_corr_cck_mrc = +			max((u32)ranges->auto_corr_min_cck_mrc, val); +	} + +	return 0; +} + + +static int iwl_sens_auto_corr_ofdm(struct iwl_priv *priv, +				       u32 norm_fa, +				       u32 rx_enable_time) +{ +	u32 val; +	u32 false_alarms = norm_fa * 200 * 1024; +	u32 max_false_alarms = MAX_FA_OFDM * rx_enable_time; +	u32 min_false_alarms = MIN_FA_OFDM * rx_enable_time; +	struct iwl_sensitivity_data *data = NULL; +	const struct iwl_sensitivity_ranges *ranges = priv->hw_params.sens; + +	data = &(priv->sensitivity_data); + +	/* If we got too many false alarms this time, reduce sensitivity */ +	if (false_alarms > max_false_alarms) { + +		IWL_DEBUG_CALIB(priv, "norm FA %u > max FA %u)\n", +			     false_alarms, max_false_alarms); + +		val = data->auto_corr_ofdm + AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm = +			min((u32)ranges->auto_corr_max_ofdm, val); + +		val = data->auto_corr_ofdm_mrc + AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm_mrc = +			min((u32)ranges->auto_corr_max_ofdm_mrc, val); + +		val = data->auto_corr_ofdm_x1 + AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm_x1 = +			min((u32)ranges->auto_corr_max_ofdm_x1, val); + +		val = data->auto_corr_ofdm_mrc_x1 + AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm_mrc_x1 = +			min((u32)ranges->auto_corr_max_ofdm_mrc_x1, val); +	} + +	/* Else if we got fewer than desired, increase sensitivity */ +	else if (false_alarms < min_false_alarms) { + +		IWL_DEBUG_CALIB(priv, "norm FA %u < min FA %u\n", +			     false_alarms, min_false_alarms); + +		val = data->auto_corr_ofdm - AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm = +			max((u32)ranges->auto_corr_min_ofdm, val); + +		val = data->auto_corr_ofdm_mrc - AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm_mrc = +			max((u32)ranges->auto_corr_min_ofdm_mrc, val); + +		val = data->auto_corr_ofdm_x1 - AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm_x1 = +			max((u32)ranges->auto_corr_min_ofdm_x1, val); + +		val = data->auto_corr_ofdm_mrc_x1 - AUTO_CORR_STEP_OFDM; +		data->auto_corr_ofdm_mrc_x1 = +			max((u32)ranges->auto_corr_min_ofdm_mrc_x1, val); +	} else { +		IWL_DEBUG_CALIB(priv, "min FA %u < norm FA %u < max FA %u OK\n", +			 min_false_alarms, false_alarms, max_false_alarms); +	} +	return 0; +} + +static void iwl_prepare_legacy_sensitivity_tbl(struct iwl_priv *priv, +				struct iwl_sensitivity_data *data, +				__le16 *tbl) +{ +	tbl[HD_AUTO_CORR32_X4_TH_ADD_MIN_INDEX] = +				cpu_to_le16((u16)data->auto_corr_ofdm); +	tbl[HD_AUTO_CORR32_X4_TH_ADD_MIN_MRC_INDEX] = +				cpu_to_le16((u16)data->auto_corr_ofdm_mrc); +	tbl[HD_AUTO_CORR32_X1_TH_ADD_MIN_INDEX] = +				cpu_to_le16((u16)data->auto_corr_ofdm_x1); +	tbl[HD_AUTO_CORR32_X1_TH_ADD_MIN_MRC_INDEX] = +				cpu_to_le16((u16)data->auto_corr_ofdm_mrc_x1); + +	tbl[HD_AUTO_CORR40_X4_TH_ADD_MIN_INDEX] = +				cpu_to_le16((u16)data->auto_corr_cck); +	tbl[HD_AUTO_CORR40_X4_TH_ADD_MIN_MRC_INDEX] = +				cpu_to_le16((u16)data->auto_corr_cck_mrc); + +	tbl[HD_MIN_ENERGY_CCK_DET_INDEX] = +				cpu_to_le16((u16)data->nrg_th_cck); +	tbl[HD_MIN_ENERGY_OFDM_DET_INDEX] = +				cpu_to_le16((u16)data->nrg_th_ofdm); + +	tbl[HD_BARKER_CORR_TH_ADD_MIN_INDEX] = +				cpu_to_le16(data->barker_corr_th_min); +	tbl[HD_BARKER_CORR_TH_ADD_MIN_MRC_INDEX] = +				cpu_to_le16(data->barker_corr_th_min_mrc); +	tbl[HD_OFDM_ENERGY_TH_IN_INDEX] = +				cpu_to_le16(data->nrg_th_cca); + +	IWL_DEBUG_CALIB(priv, "ofdm: ac %u mrc %u x1 %u mrc_x1 %u thresh %u\n", +			data->auto_corr_ofdm, data->auto_corr_ofdm_mrc, +			data->auto_corr_ofdm_x1, data->auto_corr_ofdm_mrc_x1, +			data->nrg_th_ofdm); + +	IWL_DEBUG_CALIB(priv, "cck: ac %u mrc %u thresh %u\n", +			data->auto_corr_cck, data->auto_corr_cck_mrc, +			data->nrg_th_cck); +} + +/* Prepare a SENSITIVITY_CMD, send to uCode if values have changed */ +static int iwl_sensitivity_write(struct iwl_priv *priv) +{ +	struct iwl_sensitivity_cmd cmd; +	struct iwl_sensitivity_data *data = NULL; +	struct iwl_host_cmd cmd_out = { +		.id = SENSITIVITY_CMD, +		.len = { sizeof(struct iwl_sensitivity_cmd), }, +		.flags = CMD_ASYNC, +		.data = { &cmd, }, +	}; + +	data = &(priv->sensitivity_data); + +	memset(&cmd, 0, sizeof(cmd)); + +	iwl_prepare_legacy_sensitivity_tbl(priv, data, &cmd.table[0]); + +	/* Update uCode's "work" table, and copy it to DSP */ +	cmd.control = SENSITIVITY_CMD_CONTROL_WORK_TABLE; + +	/* Don't send command to uCode if nothing has changed */ +	if (!memcmp(&cmd.table[0], &(priv->sensitivity_tbl[0]), +		    sizeof(u16)*HD_TABLE_SIZE)) { +		IWL_DEBUG_CALIB(priv, "No change in SENSITIVITY_CMD\n"); +		return 0; +	} + +	/* Copy table for comparison next time */ +	memcpy(&(priv->sensitivity_tbl[0]), &(cmd.table[0]), +	       sizeof(u16)*HD_TABLE_SIZE); + +	return iwl_dvm_send_cmd(priv, &cmd_out); +} + +/* Prepare a SENSITIVITY_CMD, send to uCode if values have changed */ +static int iwl_enhance_sensitivity_write(struct iwl_priv *priv) +{ +	struct iwl_enhance_sensitivity_cmd cmd; +	struct iwl_sensitivity_data *data = NULL; +	struct iwl_host_cmd cmd_out = { +		.id = SENSITIVITY_CMD, +		.len = { sizeof(struct iwl_enhance_sensitivity_cmd), }, +		.flags = CMD_ASYNC, +		.data = { &cmd, }, +	}; + +	data = &(priv->sensitivity_data); + +	memset(&cmd, 0, sizeof(cmd)); + +	iwl_prepare_legacy_sensitivity_tbl(priv, data, &cmd.enhance_table[0]); + +	if (priv->lib->hd_v2) { +		cmd.enhance_table[HD_INA_NON_SQUARE_DET_OFDM_INDEX] = +			HD_INA_NON_SQUARE_DET_OFDM_DATA_V2; +		cmd.enhance_table[HD_INA_NON_SQUARE_DET_CCK_INDEX] = +			HD_INA_NON_SQUARE_DET_CCK_DATA_V2; +		cmd.enhance_table[HD_CORR_11_INSTEAD_OF_CORR_9_EN_INDEX] = +			HD_CORR_11_INSTEAD_OF_CORR_9_EN_DATA_V2; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_SLOPE_MRC_INDEX] = +			HD_OFDM_NON_SQUARE_DET_SLOPE_MRC_DATA_V2; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_INTERCEPT_MRC_INDEX] = +			HD_OFDM_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V2; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_SLOPE_INDEX] = +			HD_OFDM_NON_SQUARE_DET_SLOPE_DATA_V2; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_INTERCEPT_INDEX] = +			HD_OFDM_NON_SQUARE_DET_INTERCEPT_DATA_V2; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_SLOPE_MRC_INDEX] = +			HD_CCK_NON_SQUARE_DET_SLOPE_MRC_DATA_V2; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_INTERCEPT_MRC_INDEX] = +			HD_CCK_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V2; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_SLOPE_INDEX] = +			HD_CCK_NON_SQUARE_DET_SLOPE_DATA_V2; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_INTERCEPT_INDEX] = +			HD_CCK_NON_SQUARE_DET_INTERCEPT_DATA_V2; +	} else { +		cmd.enhance_table[HD_INA_NON_SQUARE_DET_OFDM_INDEX] = +			HD_INA_NON_SQUARE_DET_OFDM_DATA_V1; +		cmd.enhance_table[HD_INA_NON_SQUARE_DET_CCK_INDEX] = +			HD_INA_NON_SQUARE_DET_CCK_DATA_V1; +		cmd.enhance_table[HD_CORR_11_INSTEAD_OF_CORR_9_EN_INDEX] = +			HD_CORR_11_INSTEAD_OF_CORR_9_EN_DATA_V1; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_SLOPE_MRC_INDEX] = +			HD_OFDM_NON_SQUARE_DET_SLOPE_MRC_DATA_V1; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_INTERCEPT_MRC_INDEX] = +			HD_OFDM_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V1; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_SLOPE_INDEX] = +			HD_OFDM_NON_SQUARE_DET_SLOPE_DATA_V1; +		cmd.enhance_table[HD_OFDM_NON_SQUARE_DET_INTERCEPT_INDEX] = +			HD_OFDM_NON_SQUARE_DET_INTERCEPT_DATA_V1; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_SLOPE_MRC_INDEX] = +			HD_CCK_NON_SQUARE_DET_SLOPE_MRC_DATA_V1; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_INTERCEPT_MRC_INDEX] = +			HD_CCK_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V1; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_SLOPE_INDEX] = +			HD_CCK_NON_SQUARE_DET_SLOPE_DATA_V1; +		cmd.enhance_table[HD_CCK_NON_SQUARE_DET_INTERCEPT_INDEX] = +			HD_CCK_NON_SQUARE_DET_INTERCEPT_DATA_V1; +	} + +	/* Update uCode's "work" table, and copy it to DSP */ +	cmd.control = SENSITIVITY_CMD_CONTROL_WORK_TABLE; + +	/* Don't send command to uCode if nothing has changed */ +	if (!memcmp(&cmd.enhance_table[0], &(priv->sensitivity_tbl[0]), +		    sizeof(u16)*HD_TABLE_SIZE) && +	    !memcmp(&cmd.enhance_table[HD_INA_NON_SQUARE_DET_OFDM_INDEX], +		    &(priv->enhance_sensitivity_tbl[0]), +		    sizeof(u16)*ENHANCE_HD_TABLE_ENTRIES)) { +		IWL_DEBUG_CALIB(priv, "No change in SENSITIVITY_CMD\n"); +		return 0; +	} + +	/* Copy table for comparison next time */ +	memcpy(&(priv->sensitivity_tbl[0]), &(cmd.enhance_table[0]), +	       sizeof(u16)*HD_TABLE_SIZE); +	memcpy(&(priv->enhance_sensitivity_tbl[0]), +	       &(cmd.enhance_table[HD_INA_NON_SQUARE_DET_OFDM_INDEX]), +	       sizeof(u16)*ENHANCE_HD_TABLE_ENTRIES); + +	return iwl_dvm_send_cmd(priv, &cmd_out); +} + +void iwl_init_sensitivity(struct iwl_priv *priv) +{ +	int ret = 0; +	int i; +	struct iwl_sensitivity_data *data = NULL; +	const struct iwl_sensitivity_ranges *ranges = priv->hw_params.sens; + +	if (priv->calib_disabled & IWL_SENSITIVITY_CALIB_DISABLED) +		return; + +	IWL_DEBUG_CALIB(priv, "Start iwl_init_sensitivity\n"); + +	/* Clear driver's sensitivity algo data */ +	data = &(priv->sensitivity_data); + +	if (ranges == NULL) +		return; + +	memset(data, 0, sizeof(struct iwl_sensitivity_data)); + +	data->num_in_cck_no_fa = 0; +	data->nrg_curr_state = IWL_FA_TOO_MANY; +	data->nrg_prev_state = IWL_FA_TOO_MANY; +	data->nrg_silence_ref = 0; +	data->nrg_silence_idx = 0; +	data->nrg_energy_idx = 0; + +	for (i = 0; i < 10; i++) +		data->nrg_value[i] = 0; + +	for (i = 0; i < NRG_NUM_PREV_STAT_L; i++) +		data->nrg_silence_rssi[i] = 0; + +	data->auto_corr_ofdm =  ranges->auto_corr_min_ofdm; +	data->auto_corr_ofdm_mrc = ranges->auto_corr_min_ofdm_mrc; +	data->auto_corr_ofdm_x1  = ranges->auto_corr_min_ofdm_x1; +	data->auto_corr_ofdm_mrc_x1 = ranges->auto_corr_min_ofdm_mrc_x1; +	data->auto_corr_cck = AUTO_CORR_CCK_MIN_VAL_DEF; +	data->auto_corr_cck_mrc = ranges->auto_corr_min_cck_mrc; +	data->nrg_th_cck = ranges->nrg_th_cck; +	data->nrg_th_ofdm = ranges->nrg_th_ofdm; +	data->barker_corr_th_min = ranges->barker_corr_th_min; +	data->barker_corr_th_min_mrc = ranges->barker_corr_th_min_mrc; +	data->nrg_th_cca = ranges->nrg_th_cca; + +	data->last_bad_plcp_cnt_ofdm = 0; +	data->last_fa_cnt_ofdm = 0; +	data->last_bad_plcp_cnt_cck = 0; +	data->last_fa_cnt_cck = 0; + +	if (priv->fw->enhance_sensitivity_table) +		ret |= iwl_enhance_sensitivity_write(priv); +	else +		ret |= iwl_sensitivity_write(priv); +	IWL_DEBUG_CALIB(priv, "<<return 0x%X\n", ret); +} + +void iwl_sensitivity_calibration(struct iwl_priv *priv) +{ +	u32 rx_enable_time; +	u32 fa_cck; +	u32 fa_ofdm; +	u32 bad_plcp_cck; +	u32 bad_plcp_ofdm; +	u32 norm_fa_ofdm; +	u32 norm_fa_cck; +	struct iwl_sensitivity_data *data = NULL; +	struct statistics_rx_non_phy *rx_info; +	struct statistics_rx_phy *ofdm, *cck; +	struct statistics_general_data statis; + +	if (priv->calib_disabled & IWL_SENSITIVITY_CALIB_DISABLED) +		return; + +	data = &(priv->sensitivity_data); + +	if (!iwl_is_any_associated(priv)) { +		IWL_DEBUG_CALIB(priv, "<< - not associated\n"); +		return; +	} + +	spin_lock_bh(&priv->statistics.lock); +	rx_info = &priv->statistics.rx_non_phy; +	ofdm = &priv->statistics.rx_ofdm; +	cck = &priv->statistics.rx_cck; +	if (rx_info->interference_data_flag != INTERFERENCE_DATA_AVAILABLE) { +		IWL_DEBUG_CALIB(priv, "<< invalid data.\n"); +		spin_unlock_bh(&priv->statistics.lock); +		return; +	} + +	/* Extract Statistics: */ +	rx_enable_time = le32_to_cpu(rx_info->channel_load); +	fa_cck = le32_to_cpu(cck->false_alarm_cnt); +	fa_ofdm = le32_to_cpu(ofdm->false_alarm_cnt); +	bad_plcp_cck = le32_to_cpu(cck->plcp_err); +	bad_plcp_ofdm = le32_to_cpu(ofdm->plcp_err); + +	statis.beacon_silence_rssi_a = +			le32_to_cpu(rx_info->beacon_silence_rssi_a); +	statis.beacon_silence_rssi_b = +			le32_to_cpu(rx_info->beacon_silence_rssi_b); +	statis.beacon_silence_rssi_c = +			le32_to_cpu(rx_info->beacon_silence_rssi_c); +	statis.beacon_energy_a = +			le32_to_cpu(rx_info->beacon_energy_a); +	statis.beacon_energy_b = +			le32_to_cpu(rx_info->beacon_energy_b); +	statis.beacon_energy_c = +			le32_to_cpu(rx_info->beacon_energy_c); + +	spin_unlock_bh(&priv->statistics.lock); + +	IWL_DEBUG_CALIB(priv, "rx_enable_time = %u usecs\n", rx_enable_time); + +	if (!rx_enable_time) { +		IWL_DEBUG_CALIB(priv, "<< RX Enable Time == 0!\n"); +		return; +	} + +	/* These statistics increase monotonically, and do not reset +	 *   at each beacon.  Calculate difference from last value, or just +	 *   use the new statistics value if it has reset or wrapped around. */ +	if (data->last_bad_plcp_cnt_cck > bad_plcp_cck) +		data->last_bad_plcp_cnt_cck = bad_plcp_cck; +	else { +		bad_plcp_cck -= data->last_bad_plcp_cnt_cck; +		data->last_bad_plcp_cnt_cck += bad_plcp_cck; +	} + +	if (data->last_bad_plcp_cnt_ofdm > bad_plcp_ofdm) +		data->last_bad_plcp_cnt_ofdm = bad_plcp_ofdm; +	else { +		bad_plcp_ofdm -= data->last_bad_plcp_cnt_ofdm; +		data->last_bad_plcp_cnt_ofdm += bad_plcp_ofdm; +	} + +	if (data->last_fa_cnt_ofdm > fa_ofdm) +		data->last_fa_cnt_ofdm = fa_ofdm; +	else { +		fa_ofdm -= data->last_fa_cnt_ofdm; +		data->last_fa_cnt_ofdm += fa_ofdm; +	} + +	if (data->last_fa_cnt_cck > fa_cck) +		data->last_fa_cnt_cck = fa_cck; +	else { +		fa_cck -= data->last_fa_cnt_cck; +		data->last_fa_cnt_cck += fa_cck; +	} + +	/* Total aborted signal locks */ +	norm_fa_ofdm = fa_ofdm + bad_plcp_ofdm; +	norm_fa_cck = fa_cck + bad_plcp_cck; + +	IWL_DEBUG_CALIB(priv, "cck: fa %u badp %u  ofdm: fa %u badp %u\n", fa_cck, +			bad_plcp_cck, fa_ofdm, bad_plcp_ofdm); + +	iwl_sens_auto_corr_ofdm(priv, norm_fa_ofdm, rx_enable_time); +	iwl_sens_energy_cck(priv, norm_fa_cck, rx_enable_time, &statis); +	if (priv->fw->enhance_sensitivity_table) +		iwl_enhance_sensitivity_write(priv); +	else +		iwl_sensitivity_write(priv); +} + +static inline u8 find_first_chain(u8 mask) +{ +	if (mask & ANT_A) +		return CHAIN_A; +	if (mask & ANT_B) +		return CHAIN_B; +	return CHAIN_C; +} + +/** + * Run disconnected antenna algorithm to find out which antennas are + * disconnected. + */ +static void iwl_find_disconn_antenna(struct iwl_priv *priv, u32* average_sig, +				     struct iwl_chain_noise_data *data) +{ +	u32 active_chains = 0; +	u32 max_average_sig; +	u16 max_average_sig_antenna_i; +	u8 num_tx_chains; +	u8 first_chain; +	u16 i = 0; + +	average_sig[0] = data->chain_signal_a / IWL_CAL_NUM_BEACONS; +	average_sig[1] = data->chain_signal_b / IWL_CAL_NUM_BEACONS; +	average_sig[2] = data->chain_signal_c / IWL_CAL_NUM_BEACONS; + +	if (average_sig[0] >= average_sig[1]) { +		max_average_sig = average_sig[0]; +		max_average_sig_antenna_i = 0; +		active_chains = (1 << max_average_sig_antenna_i); +	} else { +		max_average_sig = average_sig[1]; +		max_average_sig_antenna_i = 1; +		active_chains = (1 << max_average_sig_antenna_i); +	} + +	if (average_sig[2] >= max_average_sig) { +		max_average_sig = average_sig[2]; +		max_average_sig_antenna_i = 2; +		active_chains = (1 << max_average_sig_antenna_i); +	} + +	IWL_DEBUG_CALIB(priv, "average_sig: a %d b %d c %d\n", +		     average_sig[0], average_sig[1], average_sig[2]); +	IWL_DEBUG_CALIB(priv, "max_average_sig = %d, antenna %d\n", +		     max_average_sig, max_average_sig_antenna_i); + +	/* Compare signal strengths for all 3 receivers. */ +	for (i = 0; i < NUM_RX_CHAINS; i++) { +		if (i != max_average_sig_antenna_i) { +			s32 rssi_delta = (max_average_sig - average_sig[i]); + +			/* If signal is very weak, compared with +			 * strongest, mark it as disconnected. */ +			if (rssi_delta > MAXIMUM_ALLOWED_PATHLOSS) +				data->disconn_array[i] = 1; +			else +				active_chains |= (1 << i); +			IWL_DEBUG_CALIB(priv, "i = %d  rssiDelta = %d  " +			     "disconn_array[i] = %d\n", +			     i, rssi_delta, data->disconn_array[i]); +		} +	} + +	/* +	 * The above algorithm sometimes fails when the ucode +	 * reports 0 for all chains. It's not clear why that +	 * happens to start with, but it is then causing trouble +	 * because this can make us enable more chains than the +	 * hardware really has. +	 * +	 * To be safe, simply mask out any chains that we know +	 * are not on the device. +	 */ +	active_chains &= priv->nvm_data->valid_rx_ant; + +	num_tx_chains = 0; +	for (i = 0; i < NUM_RX_CHAINS; i++) { +		/* loops on all the bits of +		 * priv->hw_setting.valid_tx_ant */ +		u8 ant_msk = (1 << i); +		if (!(priv->nvm_data->valid_tx_ant & ant_msk)) +			continue; + +		num_tx_chains++; +		if (data->disconn_array[i] == 0) +			/* there is a Tx antenna connected */ +			break; +		if (num_tx_chains == priv->hw_params.tx_chains_num && +		    data->disconn_array[i]) { +			/* +			 * If all chains are disconnected +			 * connect the first valid tx chain +			 */ +			first_chain = +				find_first_chain(priv->nvm_data->valid_tx_ant); +			data->disconn_array[first_chain] = 0; +			active_chains |= BIT(first_chain); +			IWL_DEBUG_CALIB(priv, +					"All Tx chains are disconnected W/A - declare %d as connected\n", +					first_chain); +			break; +		} +	} + +	if (active_chains != priv->nvm_data->valid_rx_ant && +	    active_chains != priv->chain_noise_data.active_chains) +		IWL_DEBUG_CALIB(priv, +				"Detected that not all antennas are connected! " +				"Connected: %#x, valid: %#x.\n", +				active_chains, +				priv->nvm_data->valid_rx_ant); + +	/* Save for use within RXON, TX, SCAN commands, etc. */ +	data->active_chains = active_chains; +	IWL_DEBUG_CALIB(priv, "active_chains (bitwise) = 0x%x\n", +			active_chains); +} + +static void iwlagn_gain_computation(struct iwl_priv *priv, +				    u32 average_noise[NUM_RX_CHAINS], +				    u8 default_chain) +{ +	int i; +	s32 delta_g; +	struct iwl_chain_noise_data *data = &priv->chain_noise_data; + +	/* +	 * Find Gain Code for the chains based on "default chain" +	 */ +	for (i = default_chain + 1; i < NUM_RX_CHAINS; i++) { +		if ((data->disconn_array[i])) { +			data->delta_gain_code[i] = 0; +			continue; +		} + +		delta_g = (priv->lib->chain_noise_scale * +			((s32)average_noise[default_chain] - +			(s32)average_noise[i])) / 1500; + +		/* bound gain by 2 bits value max, 3rd bit is sign */ +		data->delta_gain_code[i] = +			min(abs(delta_g), +			(long) CHAIN_NOISE_MAX_DELTA_GAIN_CODE); + +		if (delta_g < 0) +			/* +			 * set negative sign ... +			 * note to Intel developers:  This is uCode API format, +			 *   not the format of any internal device registers. +			 *   Do not change this format for e.g. 6050 or similar +			 *   devices.  Change format only if more resolution +			 *   (i.e. more than 2 bits magnitude) is needed. +			 */ +			data->delta_gain_code[i] |= (1 << 2); +	} + +	IWL_DEBUG_CALIB(priv, "Delta gains: ANT_B = %d  ANT_C = %d\n", +			data->delta_gain_code[1], data->delta_gain_code[2]); + +	if (!data->radio_write) { +		struct iwl_calib_chain_noise_gain_cmd cmd; + +		memset(&cmd, 0, sizeof(cmd)); + +		iwl_set_calib_hdr(&cmd.hdr, +			priv->phy_calib_chain_noise_gain_cmd); +		cmd.delta_gain_1 = data->delta_gain_code[1]; +		cmd.delta_gain_2 = data->delta_gain_code[2]; +		iwl_dvm_send_cmd_pdu(priv, REPLY_PHY_CALIBRATION_CMD, +			CMD_ASYNC, sizeof(cmd), &cmd); + +		data->radio_write = 1; +		data->state = IWL_CHAIN_NOISE_CALIBRATED; +	} +} + +/* + * Accumulate 16 beacons of signal and noise statistics for each of + *   3 receivers/antennas/rx-chains, then figure out: + * 1)  Which antennas are connected. + * 2)  Differential rx gain settings to balance the 3 receivers. + */ +void iwl_chain_noise_calibration(struct iwl_priv *priv) +{ +	struct iwl_chain_noise_data *data = NULL; + +	u32 chain_noise_a; +	u32 chain_noise_b; +	u32 chain_noise_c; +	u32 chain_sig_a; +	u32 chain_sig_b; +	u32 chain_sig_c; +	u32 average_sig[NUM_RX_CHAINS] = {INITIALIZATION_VALUE}; +	u32 average_noise[NUM_RX_CHAINS] = {INITIALIZATION_VALUE}; +	u32 min_average_noise = MIN_AVERAGE_NOISE_MAX_VALUE; +	u16 min_average_noise_antenna_i = INITIALIZATION_VALUE; +	u16 i = 0; +	u16 rxon_chnum = INITIALIZATION_VALUE; +	u16 stat_chnum = INITIALIZATION_VALUE; +	u8 rxon_band24; +	u8 stat_band24; +	struct statistics_rx_non_phy *rx_info; + +	/* +	 * MULTI-FIXME: +	 * When we support multiple interfaces on different channels, +	 * this must be modified/fixed. +	 */ +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; + +	if (priv->calib_disabled & IWL_CHAIN_NOISE_CALIB_DISABLED) +		return; + +	data = &(priv->chain_noise_data); + +	/* +	 * Accumulate just the first "chain_noise_num_beacons" after +	 * the first association, then we're done forever. +	 */ +	if (data->state != IWL_CHAIN_NOISE_ACCUMULATE) { +		if (data->state == IWL_CHAIN_NOISE_ALIVE) +			IWL_DEBUG_CALIB(priv, "Wait for noise calib reset\n"); +		return; +	} + +	spin_lock_bh(&priv->statistics.lock); + +	rx_info = &priv->statistics.rx_non_phy; + +	if (rx_info->interference_data_flag != INTERFERENCE_DATA_AVAILABLE) { +		IWL_DEBUG_CALIB(priv, " << Interference data unavailable\n"); +		spin_unlock_bh(&priv->statistics.lock); +		return; +	} + +	rxon_band24 = !!(ctx->staging.flags & RXON_FLG_BAND_24G_MSK); +	rxon_chnum = le16_to_cpu(ctx->staging.channel); +	stat_band24 = +		!!(priv->statistics.flag & STATISTICS_REPLY_FLG_BAND_24G_MSK); +	stat_chnum = le32_to_cpu(priv->statistics.flag) >> 16; + +	/* Make sure we accumulate data for just the associated channel +	 *   (even if scanning). */ +	if ((rxon_chnum != stat_chnum) || (rxon_band24 != stat_band24)) { +		IWL_DEBUG_CALIB(priv, "Stats not from chan=%d, band24=%d\n", +				rxon_chnum, rxon_band24); +		spin_unlock_bh(&priv->statistics.lock); +		return; +	} + +	/* +	 *  Accumulate beacon statistics values across +	 * "chain_noise_num_beacons" +	 */ +	chain_noise_a = le32_to_cpu(rx_info->beacon_silence_rssi_a) & +				IN_BAND_FILTER; +	chain_noise_b = le32_to_cpu(rx_info->beacon_silence_rssi_b) & +				IN_BAND_FILTER; +	chain_noise_c = le32_to_cpu(rx_info->beacon_silence_rssi_c) & +				IN_BAND_FILTER; + +	chain_sig_a = le32_to_cpu(rx_info->beacon_rssi_a) & IN_BAND_FILTER; +	chain_sig_b = le32_to_cpu(rx_info->beacon_rssi_b) & IN_BAND_FILTER; +	chain_sig_c = le32_to_cpu(rx_info->beacon_rssi_c) & IN_BAND_FILTER; + +	spin_unlock_bh(&priv->statistics.lock); + +	data->beacon_count++; + +	data->chain_noise_a = (chain_noise_a + data->chain_noise_a); +	data->chain_noise_b = (chain_noise_b + data->chain_noise_b); +	data->chain_noise_c = (chain_noise_c + data->chain_noise_c); + +	data->chain_signal_a = (chain_sig_a + data->chain_signal_a); +	data->chain_signal_b = (chain_sig_b + data->chain_signal_b); +	data->chain_signal_c = (chain_sig_c + data->chain_signal_c); + +	IWL_DEBUG_CALIB(priv, "chan=%d, band24=%d, beacon=%d\n", +			rxon_chnum, rxon_band24, data->beacon_count); +	IWL_DEBUG_CALIB(priv, "chain_sig: a %d b %d c %d\n", +			chain_sig_a, chain_sig_b, chain_sig_c); +	IWL_DEBUG_CALIB(priv, "chain_noise: a %d b %d c %d\n", +			chain_noise_a, chain_noise_b, chain_noise_c); + +	/* If this is the "chain_noise_num_beacons", determine: +	 * 1)  Disconnected antennas (using signal strengths) +	 * 2)  Differential gain (using silence noise) to balance receivers */ +	if (data->beacon_count != IWL_CAL_NUM_BEACONS) +		return; + +	/* Analyze signal for disconnected antenna */ +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist) { +		/* Disable disconnected antenna algorithm for advanced +		   bt coex, assuming valid antennas are connected */ +		data->active_chains = priv->nvm_data->valid_rx_ant; +		for (i = 0; i < NUM_RX_CHAINS; i++) +			if (!(data->active_chains & (1<<i))) +				data->disconn_array[i] = 1; +	} else +		iwl_find_disconn_antenna(priv, average_sig, data); + +	/* Analyze noise for rx balance */ +	average_noise[0] = data->chain_noise_a / IWL_CAL_NUM_BEACONS; +	average_noise[1] = data->chain_noise_b / IWL_CAL_NUM_BEACONS; +	average_noise[2] = data->chain_noise_c / IWL_CAL_NUM_BEACONS; + +	for (i = 0; i < NUM_RX_CHAINS; i++) { +		if (!(data->disconn_array[i]) && +		   (average_noise[i] <= min_average_noise)) { +			/* This means that chain i is active and has +			 * lower noise values so far: */ +			min_average_noise = average_noise[i]; +			min_average_noise_antenna_i = i; +		} +	} + +	IWL_DEBUG_CALIB(priv, "average_noise: a %d b %d c %d\n", +			average_noise[0], average_noise[1], +			average_noise[2]); + +	IWL_DEBUG_CALIB(priv, "min_average_noise = %d, antenna %d\n", +			min_average_noise, min_average_noise_antenna_i); + +	iwlagn_gain_computation( +		priv, average_noise, +		find_first_chain(priv->nvm_data->valid_rx_ant)); + +	/* Some power changes may have been made during the calibration. +	 * Update and commit the RXON +	 */ +	iwl_update_chain_flags(priv); + +	data->state = IWL_CHAIN_NOISE_DONE; +	iwl_power_update_mode(priv, false); +} + +void iwl_reset_run_time_calib(struct iwl_priv *priv) +{ +	int i; +	memset(&(priv->sensitivity_data), 0, +	       sizeof(struct iwl_sensitivity_data)); +	memset(&(priv->chain_noise_data), 0, +	       sizeof(struct iwl_chain_noise_data)); +	for (i = 0; i < NUM_RX_CHAINS; i++) +		priv->chain_noise_data.delta_gain_code[i] = +				CHAIN_NOISE_DELTA_GAIN_INIT_VAL; + +	/* Ask for statistics now, the uCode will send notification +	 * periodically after association */ +	iwl_send_statistics_request(priv, CMD_ASYNC, true); +} diff --git a/drivers/net/wireless/iwlwifi/dvm/calib.h b/drivers/net/wireless/iwlwifi/dvm/calib.h new file mode 100644 index 00000000000..aeae4e80ea4 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/calib.h @@ -0,0 +1,74 @@ +/****************************************************************************** + * + * This file is provided under a dual BSD/GPLv2 license.  When using or + * redistributing this file, you may do so under either license. + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + * BSD LICENSE + * + * Copyright(c) 2005 - 2014 Intel Corporation. All rights reserved. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + *  * Redistributions of source code must retain the above copyright + *    notice, this list of conditions and the following disclaimer. + *  * Redistributions in binary form must reproduce the above copyright + *    notice, this list of conditions and the following disclaimer in + *    the documentation and/or other materials provided with the + *    distribution. + *  * Neither the name Intel Corporation nor the names of its + *    contributors may be used to endorse or promote products derived + *    from this software without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + *****************************************************************************/ +#ifndef __iwl_calib_h__ +#define __iwl_calib_h__ + +#include "dev.h" +#include "commands.h" + +void iwl_chain_noise_calibration(struct iwl_priv *priv); +void iwl_sensitivity_calibration(struct iwl_priv *priv); + +void iwl_init_sensitivity(struct iwl_priv *priv); +void iwl_reset_run_time_calib(struct iwl_priv *priv); + +#endif /* __iwl_calib_h__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/commands.h b/drivers/net/wireless/iwlwifi/dvm/commands.h new file mode 100644 index 00000000000..751ae1d10b7 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/commands.h @@ -0,0 +1,4003 @@ +/****************************************************************************** + * + * This file is provided under a dual BSD/GPLv2 license.  When using or + * redistributing this file, you may do so under either license. + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2005 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + * BSD LICENSE + * + * Copyright(c) 2005 - 2014 Intel Corporation. All rights reserved. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + *  * Redistributions of source code must retain the above copyright + *    notice, this list of conditions and the following disclaimer. + *  * Redistributions in binary form must reproduce the above copyright + *    notice, this list of conditions and the following disclaimer in + *    the documentation and/or other materials provided with the + *    distribution. + *  * Neither the name Intel Corporation nor the names of its + *    contributors may be used to endorse or promote products derived + *    from this software without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + * + *****************************************************************************/ +/* + * Please use this file (commands.h) only for uCode API definitions. + * Please use iwl-xxxx-hw.h for hardware-related definitions. + * Please use dev.h for driver implementation definitions. + */ + +#ifndef __iwl_commands_h__ +#define __iwl_commands_h__ + +#include <linux/ieee80211.h> +#include <linux/types.h> + + +enum { +	REPLY_ALIVE = 0x1, +	REPLY_ERROR = 0x2, +	REPLY_ECHO = 0x3,		/* test command */ + +	/* RXON and QOS commands */ +	REPLY_RXON = 0x10, +	REPLY_RXON_ASSOC = 0x11, +	REPLY_QOS_PARAM = 0x13, +	REPLY_RXON_TIMING = 0x14, + +	/* Multi-Station support */ +	REPLY_ADD_STA = 0x18, +	REPLY_REMOVE_STA = 0x19, +	REPLY_REMOVE_ALL_STA = 0x1a,	/* not used */ +	REPLY_TXFIFO_FLUSH = 0x1e, + +	/* Security */ +	REPLY_WEPKEY = 0x20, + +	/* RX, TX, LEDs */ +	REPLY_TX = 0x1c, +	REPLY_LEDS_CMD = 0x48, +	REPLY_TX_LINK_QUALITY_CMD = 0x4e, + +	/* WiMAX coexistence */ +	COEX_PRIORITY_TABLE_CMD = 0x5a, +	COEX_MEDIUM_NOTIFICATION = 0x5b, +	COEX_EVENT_CMD = 0x5c, + +	/* Calibration */ +	TEMPERATURE_NOTIFICATION = 0x62, +	CALIBRATION_CFG_CMD = 0x65, +	CALIBRATION_RES_NOTIFICATION = 0x66, +	CALIBRATION_COMPLETE_NOTIFICATION = 0x67, + +	/* 802.11h related */ +	REPLY_QUIET_CMD = 0x71,		/* not used */ +	REPLY_CHANNEL_SWITCH = 0x72, +	CHANNEL_SWITCH_NOTIFICATION = 0x73, +	REPLY_SPECTRUM_MEASUREMENT_CMD = 0x74, +	SPECTRUM_MEASURE_NOTIFICATION = 0x75, + +	/* Power Management */ +	POWER_TABLE_CMD = 0x77, +	PM_SLEEP_NOTIFICATION = 0x7A, +	PM_DEBUG_STATISTIC_NOTIFIC = 0x7B, + +	/* Scan commands and notifications */ +	REPLY_SCAN_CMD = 0x80, +	REPLY_SCAN_ABORT_CMD = 0x81, +	SCAN_START_NOTIFICATION = 0x82, +	SCAN_RESULTS_NOTIFICATION = 0x83, +	SCAN_COMPLETE_NOTIFICATION = 0x84, + +	/* IBSS/AP commands */ +	BEACON_NOTIFICATION = 0x90, +	REPLY_TX_BEACON = 0x91, +	WHO_IS_AWAKE_NOTIFICATION = 0x94,	/* not used */ + +	/* Miscellaneous commands */ +	REPLY_TX_POWER_DBM_CMD = 0x95, +	QUIET_NOTIFICATION = 0x96,		/* not used */ +	REPLY_TX_PWR_TABLE_CMD = 0x97, +	REPLY_TX_POWER_DBM_CMD_V1 = 0x98,	/* old version of API */ +	TX_ANT_CONFIGURATION_CMD = 0x98, +	MEASURE_ABORT_NOTIFICATION = 0x99,	/* not used */ + +	/* Bluetooth device coexistence config command */ +	REPLY_BT_CONFIG = 0x9b, + +	/* Statistics */ +	REPLY_STATISTICS_CMD = 0x9c, +	STATISTICS_NOTIFICATION = 0x9d, + +	/* RF-KILL commands and notifications */ +	REPLY_CARD_STATE_CMD = 0xa0, +	CARD_STATE_NOTIFICATION = 0xa1, + +	/* Missed beacons notification */ +	MISSED_BEACONS_NOTIFICATION = 0xa2, + +	REPLY_CT_KILL_CONFIG_CMD = 0xa4, +	SENSITIVITY_CMD = 0xa8, +	REPLY_PHY_CALIBRATION_CMD = 0xb0, +	REPLY_RX_PHY_CMD = 0xc0, +	REPLY_RX_MPDU_CMD = 0xc1, +	REPLY_RX = 0xc3, +	REPLY_COMPRESSED_BA = 0xc5, + +	/* BT Coex */ +	REPLY_BT_COEX_PRIO_TABLE = 0xcc, +	REPLY_BT_COEX_PROT_ENV = 0xcd, +	REPLY_BT_COEX_PROFILE_NOTIF = 0xce, + +	/* PAN commands */ +	REPLY_WIPAN_PARAMS = 0xb2, +	REPLY_WIPAN_RXON = 0xb3,	/* use REPLY_RXON structure */ +	REPLY_WIPAN_RXON_TIMING = 0xb4,	/* use REPLY_RXON_TIMING structure */ +	REPLY_WIPAN_RXON_ASSOC = 0xb6,	/* use REPLY_RXON_ASSOC structure */ +	REPLY_WIPAN_QOS_PARAM = 0xb7,	/* use REPLY_QOS_PARAM structure */ +	REPLY_WIPAN_WEPKEY = 0xb8,	/* use REPLY_WEPKEY structure */ +	REPLY_WIPAN_P2P_CHANNEL_SWITCH = 0xb9, +	REPLY_WIPAN_NOA_NOTIFICATION = 0xbc, +	REPLY_WIPAN_DEACTIVATION_COMPLETE = 0xbd, + +	REPLY_WOWLAN_PATTERNS = 0xe0, +	REPLY_WOWLAN_WAKEUP_FILTER = 0xe1, +	REPLY_WOWLAN_TSC_RSC_PARAMS = 0xe2, +	REPLY_WOWLAN_TKIP_PARAMS = 0xe3, +	REPLY_WOWLAN_KEK_KCK_MATERIAL = 0xe4, +	REPLY_WOWLAN_GET_STATUS = 0xe5, +	REPLY_D3_CONFIG = 0xd3, + +	REPLY_MAX = 0xff +}; + +/* + * Minimum number of queues. MAX_NUM is defined in hw specific files. + * Set the minimum to accommodate + *  - 4 standard TX queues + *  - the command queue + *  - 4 PAN TX queues + *  - the PAN multicast queue, and + *  - the AUX (TX during scan dwell) queue. + */ +#define IWL_MIN_NUM_QUEUES	11 + +/* + * Command queue depends on iPAN support. + */ +#define IWL_DEFAULT_CMD_QUEUE_NUM	4 +#define IWL_IPAN_CMD_QUEUE_NUM		9 + +#define IWL_TX_FIFO_BK		0	/* shared */ +#define IWL_TX_FIFO_BE		1 +#define IWL_TX_FIFO_VI		2	/* shared */ +#define IWL_TX_FIFO_VO		3 +#define IWL_TX_FIFO_BK_IPAN	IWL_TX_FIFO_BK +#define IWL_TX_FIFO_BE_IPAN	4 +#define IWL_TX_FIFO_VI_IPAN	IWL_TX_FIFO_VI +#define IWL_TX_FIFO_VO_IPAN	5 +/* re-uses the VO FIFO, uCode will properly flush/schedule */ +#define IWL_TX_FIFO_AUX		5 +#define IWL_TX_FIFO_UNUSED	255 + +#define IWLAGN_CMD_FIFO_NUM	7 + +/* + * This queue number is required for proper operation + * because the ucode will stop/start the scheduler as + * required. + */ +#define IWL_IPAN_MCAST_QUEUE	8 + +/****************************************************************************** + * (0) + * Commonly used structures and definitions: + * Command header, rate_n_flags, txpower + * + *****************************************************************************/ + +/** + * iwlagn rate_n_flags bit fields + * + * rate_n_flags format is used in following iwlagn commands: + *  REPLY_RX (response only) + *  REPLY_RX_MPDU (response only) + *  REPLY_TX (both command and response) + *  REPLY_TX_LINK_QUALITY_CMD + * + * High-throughput (HT) rate format for bits 7:0 (bit 8 must be "1"): + *  2-0:  0)   6 Mbps + *        1)  12 Mbps + *        2)  18 Mbps + *        3)  24 Mbps + *        4)  36 Mbps + *        5)  48 Mbps + *        6)  54 Mbps + *        7)  60 Mbps + * + *  4-3:  0)  Single stream (SISO) + *        1)  Dual stream (MIMO) + *        2)  Triple stream (MIMO) + * + *    5:  Value of 0x20 in bits 7:0 indicates 6 Mbps HT40 duplicate data + * + * Legacy OFDM rate format for bits 7:0 (bit 8 must be "0", bit 9 "0"): + *  3-0:  0xD)   6 Mbps + *        0xF)   9 Mbps + *        0x5)  12 Mbps + *        0x7)  18 Mbps + *        0x9)  24 Mbps + *        0xB)  36 Mbps + *        0x1)  48 Mbps + *        0x3)  54 Mbps + * + * Legacy CCK rate format for bits 7:0 (bit 8 must be "0", bit 9 "1"): + *  6-0:   10)  1 Mbps + *         20)  2 Mbps + *         55)  5.5 Mbps + *        110)  11 Mbps + */ +#define RATE_MCS_CODE_MSK 0x7 +#define RATE_MCS_SPATIAL_POS 3 +#define RATE_MCS_SPATIAL_MSK 0x18 +#define RATE_MCS_HT_DUP_POS 5 +#define RATE_MCS_HT_DUP_MSK 0x20 +/* Both legacy and HT use bits 7:0 as the CCK/OFDM rate or HT MCS */ +#define RATE_MCS_RATE_MSK 0xff + +/* Bit 8: (1) HT format, (0) legacy format in bits 7:0 */ +#define RATE_MCS_FLAGS_POS 8 +#define RATE_MCS_HT_POS 8 +#define RATE_MCS_HT_MSK 0x100 + +/* Bit 9: (1) CCK, (0) OFDM.  HT (bit 8) must be "0" for this bit to be valid */ +#define RATE_MCS_CCK_POS 9 +#define RATE_MCS_CCK_MSK 0x200 + +/* Bit 10: (1) Use Green Field preamble */ +#define RATE_MCS_GF_POS 10 +#define RATE_MCS_GF_MSK 0x400 + +/* Bit 11: (1) Use 40Mhz HT40 chnl width, (0) use 20 MHz legacy chnl width */ +#define RATE_MCS_HT40_POS 11 +#define RATE_MCS_HT40_MSK 0x800 + +/* Bit 12: (1) Duplicate data on both 20MHz chnls. HT40 (bit 11) must be set. */ +#define RATE_MCS_DUP_POS 12 +#define RATE_MCS_DUP_MSK 0x1000 + +/* Bit 13: (1) Short guard interval (0.4 usec), (0) normal GI (0.8 usec) */ +#define RATE_MCS_SGI_POS 13 +#define RATE_MCS_SGI_MSK 0x2000 + +/** + * rate_n_flags Tx antenna masks + * 4965 has 2 transmitters + * 5100 has 1 transmitter B + * 5150 has 1 transmitter A + * 5300 has 3 transmitters + * 5350 has 3 transmitters + * bit14:16 + */ +#define RATE_MCS_ANT_POS	14 +#define RATE_MCS_ANT_A_MSK	0x04000 +#define RATE_MCS_ANT_B_MSK	0x08000 +#define RATE_MCS_ANT_C_MSK	0x10000 +#define RATE_MCS_ANT_AB_MSK	(RATE_MCS_ANT_A_MSK | RATE_MCS_ANT_B_MSK) +#define RATE_MCS_ANT_ABC_MSK	(RATE_MCS_ANT_AB_MSK | RATE_MCS_ANT_C_MSK) +#define RATE_ANT_NUM 3 + +#define POWER_TABLE_NUM_ENTRIES			33 +#define POWER_TABLE_NUM_HT_OFDM_ENTRIES		32 +#define POWER_TABLE_CCK_ENTRY			32 + +#define IWL_PWR_NUM_HT_OFDM_ENTRIES		24 +#define IWL_PWR_CCK_ENTRIES			2 + +/** + * struct tx_power_dual_stream + * + * Table entries in REPLY_TX_PWR_TABLE_CMD, REPLY_CHANNEL_SWITCH + * + * Same format as iwl_tx_power_dual_stream, but __le32 + */ +struct tx_power_dual_stream { +	__le32 dw; +} __packed; + +/** + * Command REPLY_TX_POWER_DBM_CMD = 0x98 + * struct iwlagn_tx_power_dbm_cmd + */ +#define IWLAGN_TX_POWER_AUTO 0x7f +#define IWLAGN_TX_POWER_NO_CLOSED (0x1 << 6) + +struct iwlagn_tx_power_dbm_cmd { +	s8 global_lmt; /*in half-dBm (e.g. 30 = 15 dBm) */ +	u8 flags; +	s8 srv_chan_lmt; /*in half-dBm (e.g. 30 = 15 dBm) */ +	u8 reserved; +} __packed; + +/** + * Command TX_ANT_CONFIGURATION_CMD = 0x98 + * This command is used to configure valid Tx antenna. + * By default uCode concludes the valid antenna according to the radio flavor. + * This command enables the driver to override/modify this conclusion. + */ +struct iwl_tx_ant_config_cmd { +	__le32 valid; +} __packed; + +/****************************************************************************** + * (0a) + * Alive and Error Commands & Responses: + * + *****************************************************************************/ + +#define UCODE_VALID_OK	cpu_to_le32(0x1) + +/** + * REPLY_ALIVE = 0x1 (response only, not a command) + * + * uCode issues this "alive" notification once the runtime image is ready + * to receive commands from the driver.  This is the *second* "alive" + * notification that the driver will receive after rebooting uCode; + * this "alive" is indicated by subtype field != 9. + * + * See comments documenting "BSM" (bootstrap state machine). + * + * This response includes two pointers to structures within the device's + * data SRAM (access via HBUS_TARG_MEM_* regs) that are useful for debugging: + * + * 1)  log_event_table_ptr indicates base of the event log.  This traces + *     a 256-entry history of uCode execution within a circular buffer. + *     Its header format is: + * + *	__le32 log_size;     log capacity (in number of entries) + *	__le32 type;         (1) timestamp with each entry, (0) no timestamp + *	__le32 wraps;        # times uCode has wrapped to top of circular buffer + *      __le32 write_index;  next circular buffer entry that uCode would fill + * + *     The header is followed by the circular buffer of log entries.  Entries + *     with timestamps have the following format: + * + *	__le32 event_id;     range 0 - 1500 + *	__le32 timestamp;    low 32 bits of TSF (of network, if associated) + *	__le32 data;         event_id-specific data value + * + *     Entries without timestamps contain only event_id and data. + * + * + * 2)  error_event_table_ptr indicates base of the error log.  This contains + *     information about any uCode error that occurs.  For agn, the format + *     of the error log is defined by struct iwl_error_event_table. + * + * The Linux driver can print both logs to the system log when a uCode error + * occurs. + */ + +/* + * Note: This structure is read from the device with IO accesses, + * and the reading already does the endian conversion. As it is + * read with u32-sized accesses, any members with a different size + * need to be ordered correctly though! + */ +struct iwl_error_event_table { +	u32 valid;		/* (nonzero) valid, (0) log is empty */ +	u32 error_id;		/* type of error */ +	u32 pc;			/* program counter */ +	u32 blink1;		/* branch link */ +	u32 blink2;		/* branch link */ +	u32 ilink1;		/* interrupt link */ +	u32 ilink2;		/* interrupt link */ +	u32 data1;		/* error-specific data */ +	u32 data2;		/* error-specific data */ +	u32 line;		/* source code line of error */ +	u32 bcon_time;		/* beacon timer */ +	u32 tsf_low;		/* network timestamp function timer */ +	u32 tsf_hi;		/* network timestamp function timer */ +	u32 gp1;		/* GP1 timer register */ +	u32 gp2;		/* GP2 timer register */ +	u32 gp3;		/* GP3 timer register */ +	u32 ucode_ver;		/* uCode version */ +	u32 hw_ver;		/* HW Silicon version */ +	u32 brd_ver;		/* HW board version */ +	u32 log_pc;		/* log program counter */ +	u32 frame_ptr;		/* frame pointer */ +	u32 stack_ptr;		/* stack pointer */ +	u32 hcmd;		/* last host command header */ +	u32 isr0;		/* isr status register LMPM_NIC_ISR0: +				 * rxtx_flag */ +	u32 isr1;		/* isr status register LMPM_NIC_ISR1: +				 * host_flag */ +	u32 isr2;		/* isr status register LMPM_NIC_ISR2: +				 * enc_flag */ +	u32 isr3;		/* isr status register LMPM_NIC_ISR3: +				 * time_flag */ +	u32 isr4;		/* isr status register LMPM_NIC_ISR4: +				 * wico interrupt */ +	u32 isr_pref;		/* isr status register LMPM_NIC_PREF_STAT */ +	u32 wait_event;		/* wait event() caller address */ +	u32 l2p_control;	/* L2pControlField */ +	u32 l2p_duration;	/* L2pDurationField */ +	u32 l2p_mhvalid;	/* L2pMhValidBits */ +	u32 l2p_addr_match;	/* L2pAddrMatchStat */ +	u32 lmpm_pmg_sel;	/* indicate which clocks are turned on +				 * (LMPM_PMG_SEL) */ +	u32 u_timestamp;	/* indicate when the date and time of the +				 * compilation */ +	u32 flow_handler;	/* FH read/write pointers, RX credit */ +} __packed; + +struct iwl_alive_resp { +	u8 ucode_minor; +	u8 ucode_major; +	__le16 reserved1; +	u8 sw_rev[8]; +	u8 ver_type; +	u8 ver_subtype;			/* not "9" for runtime alive */ +	__le16 reserved2; +	__le32 log_event_table_ptr;	/* SRAM address for event log */ +	__le32 error_event_table_ptr;	/* SRAM address for error log */ +	__le32 timestamp; +	__le32 is_valid; +} __packed; + +/* + * REPLY_ERROR = 0x2 (response only, not a command) + */ +struct iwl_error_resp { +	__le32 error_type; +	u8 cmd_id; +	u8 reserved1; +	__le16 bad_cmd_seq_num; +	__le32 error_info; +	__le64 timestamp; +} __packed; + +/****************************************************************************** + * (1) + * RXON Commands & Responses: + * + *****************************************************************************/ + +/* + * Rx config defines & structure + */ +/* rx_config device types  */ +enum { +	RXON_DEV_TYPE_AP = 1, +	RXON_DEV_TYPE_ESS = 3, +	RXON_DEV_TYPE_IBSS = 4, +	RXON_DEV_TYPE_SNIFFER = 6, +	RXON_DEV_TYPE_CP = 7, +	RXON_DEV_TYPE_2STA = 8, +	RXON_DEV_TYPE_P2P = 9, +}; + + +#define RXON_RX_CHAIN_DRIVER_FORCE_MSK		cpu_to_le16(0x1 << 0) +#define RXON_RX_CHAIN_DRIVER_FORCE_POS		(0) +#define RXON_RX_CHAIN_VALID_MSK			cpu_to_le16(0x7 << 1) +#define RXON_RX_CHAIN_VALID_POS			(1) +#define RXON_RX_CHAIN_FORCE_SEL_MSK		cpu_to_le16(0x7 << 4) +#define RXON_RX_CHAIN_FORCE_SEL_POS		(4) +#define RXON_RX_CHAIN_FORCE_MIMO_SEL_MSK	cpu_to_le16(0x7 << 7) +#define RXON_RX_CHAIN_FORCE_MIMO_SEL_POS	(7) +#define RXON_RX_CHAIN_CNT_MSK			cpu_to_le16(0x3 << 10) +#define RXON_RX_CHAIN_CNT_POS			(10) +#define RXON_RX_CHAIN_MIMO_CNT_MSK		cpu_to_le16(0x3 << 12) +#define RXON_RX_CHAIN_MIMO_CNT_POS		(12) +#define RXON_RX_CHAIN_MIMO_FORCE_MSK		cpu_to_le16(0x1 << 14) +#define RXON_RX_CHAIN_MIMO_FORCE_POS		(14) + +/* rx_config flags */ +/* band & modulation selection */ +#define RXON_FLG_BAND_24G_MSK           cpu_to_le32(1 << 0) +#define RXON_FLG_CCK_MSK                cpu_to_le32(1 << 1) +/* auto detection enable */ +#define RXON_FLG_AUTO_DETECT_MSK        cpu_to_le32(1 << 2) +/* TGg protection when tx */ +#define RXON_FLG_TGG_PROTECT_MSK        cpu_to_le32(1 << 3) +/* cck short slot & preamble */ +#define RXON_FLG_SHORT_SLOT_MSK          cpu_to_le32(1 << 4) +#define RXON_FLG_SHORT_PREAMBLE_MSK     cpu_to_le32(1 << 5) +/* antenna selection */ +#define RXON_FLG_DIS_DIV_MSK            cpu_to_le32(1 << 7) +#define RXON_FLG_ANT_SEL_MSK            cpu_to_le32(0x0f00) +#define RXON_FLG_ANT_A_MSK              cpu_to_le32(1 << 8) +#define RXON_FLG_ANT_B_MSK              cpu_to_le32(1 << 9) +/* radar detection enable */ +#define RXON_FLG_RADAR_DETECT_MSK       cpu_to_le32(1 << 12) +#define RXON_FLG_TGJ_NARROW_BAND_MSK    cpu_to_le32(1 << 13) +/* rx response to host with 8-byte TSF +* (according to ON_AIR deassertion) */ +#define RXON_FLG_TSF2HOST_MSK           cpu_to_le32(1 << 15) + + +/* HT flags */ +#define RXON_FLG_CTRL_CHANNEL_LOC_POS		(22) +#define RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK	cpu_to_le32(0x1 << 22) + +#define RXON_FLG_HT_OPERATING_MODE_POS		(23) + +#define RXON_FLG_HT_PROT_MSK			cpu_to_le32(0x1 << 23) +#define RXON_FLG_HT40_PROT_MSK			cpu_to_le32(0x2 << 23) + +#define RXON_FLG_CHANNEL_MODE_POS		(25) +#define RXON_FLG_CHANNEL_MODE_MSK		cpu_to_le32(0x3 << 25) + +/* channel mode */ +enum { +	CHANNEL_MODE_LEGACY = 0, +	CHANNEL_MODE_PURE_40 = 1, +	CHANNEL_MODE_MIXED = 2, +	CHANNEL_MODE_RESERVED = 3, +}; +#define RXON_FLG_CHANNEL_MODE_LEGACY	cpu_to_le32(CHANNEL_MODE_LEGACY << RXON_FLG_CHANNEL_MODE_POS) +#define RXON_FLG_CHANNEL_MODE_PURE_40	cpu_to_le32(CHANNEL_MODE_PURE_40 << RXON_FLG_CHANNEL_MODE_POS) +#define RXON_FLG_CHANNEL_MODE_MIXED	cpu_to_le32(CHANNEL_MODE_MIXED << RXON_FLG_CHANNEL_MODE_POS) + +/* CTS to self (if spec allows) flag */ +#define RXON_FLG_SELF_CTS_EN			cpu_to_le32(0x1<<30) + +/* rx_config filter flags */ +/* accept all data frames */ +#define RXON_FILTER_PROMISC_MSK         cpu_to_le32(1 << 0) +/* pass control & management to host */ +#define RXON_FILTER_CTL2HOST_MSK        cpu_to_le32(1 << 1) +/* accept multi-cast */ +#define RXON_FILTER_ACCEPT_GRP_MSK      cpu_to_le32(1 << 2) +/* don't decrypt uni-cast frames */ +#define RXON_FILTER_DIS_DECRYPT_MSK     cpu_to_le32(1 << 3) +/* don't decrypt multi-cast frames */ +#define RXON_FILTER_DIS_GRP_DECRYPT_MSK cpu_to_le32(1 << 4) +/* STA is associated */ +#define RXON_FILTER_ASSOC_MSK           cpu_to_le32(1 << 5) +/* transfer to host non bssid beacons in associated state */ +#define RXON_FILTER_BCON_AWARE_MSK      cpu_to_le32(1 << 6) + +/** + * REPLY_RXON = 0x10 (command, has simple generic response) + * + * RXON tunes the radio tuner to a service channel, and sets up a number + * of parameters that are used primarily for Rx, but also for Tx operations. + * + * NOTE:  When tuning to a new channel, driver must set the + *        RXON_FILTER_ASSOC_MSK to 0.  This will clear station-dependent + *        info within the device, including the station tables, tx retry + *        rate tables, and txpower tables.  Driver must build a new station + *        table and txpower table before transmitting anything on the RXON + *        channel. + * + * NOTE:  All RXONs wipe clean the internal txpower table.  Driver must + *        issue a new REPLY_TX_PWR_TABLE_CMD after each REPLY_RXON (0x10), + *        regardless of whether RXON_FILTER_ASSOC_MSK is set. + */ + +struct iwl_rxon_cmd { +	u8 node_addr[6]; +	__le16 reserved1; +	u8 bssid_addr[6]; +	__le16 reserved2; +	u8 wlap_bssid_addr[6]; +	__le16 reserved3; +	u8 dev_type; +	u8 air_propagation; +	__le16 rx_chain; +	u8 ofdm_basic_rates; +	u8 cck_basic_rates; +	__le16 assoc_id; +	__le32 flags; +	__le32 filter_flags; +	__le16 channel; +	u8 ofdm_ht_single_stream_basic_rates; +	u8 ofdm_ht_dual_stream_basic_rates; +	u8 ofdm_ht_triple_stream_basic_rates; +	u8 reserved5; +	__le16 acquisition_data; +	__le16 reserved6; +} __packed; + +/* + * REPLY_RXON_ASSOC = 0x11 (command, has simple generic response) + */ +struct iwl_rxon_assoc_cmd { +	__le32 flags; +	__le32 filter_flags; +	u8 ofdm_basic_rates; +	u8 cck_basic_rates; +	__le16 reserved1; +	u8 ofdm_ht_single_stream_basic_rates; +	u8 ofdm_ht_dual_stream_basic_rates; +	u8 ofdm_ht_triple_stream_basic_rates; +	u8 reserved2; +	__le16 rx_chain_select_flags; +	__le16 acquisition_data; +	__le32 reserved3; +} __packed; + +#define IWL_CONN_MAX_LISTEN_INTERVAL	10 +#define IWL_MAX_UCODE_BEACON_INTERVAL	4 /* 4096 */ + +/* + * REPLY_RXON_TIMING = 0x14 (command, has simple generic response) + */ +struct iwl_rxon_time_cmd { +	__le64 timestamp; +	__le16 beacon_interval; +	__le16 atim_window; +	__le32 beacon_init_val; +	__le16 listen_interval; +	u8 dtim_period; +	u8 delta_cp_bss_tbtts; +} __packed; + +/* + * REPLY_CHANNEL_SWITCH = 0x72 (command, has simple generic response) + */ +/** + * struct iwl5000_channel_switch_cmd + * @band: 0- 5.2GHz, 1- 2.4GHz + * @expect_beacon: 0- resume transmits after channel switch + *		   1- wait for beacon to resume transmits + * @channel: new channel number + * @rxon_flags: Rx on flags + * @rxon_filter_flags: filtering parameters + * @switch_time: switch time in extended beacon format + * @reserved: reserved bytes + */ +struct iwl5000_channel_switch_cmd { +	u8 band; +	u8 expect_beacon; +	__le16 channel; +	__le32 rxon_flags; +	__le32 rxon_filter_flags; +	__le32 switch_time; +	__le32 reserved[2][IWL_PWR_NUM_HT_OFDM_ENTRIES + IWL_PWR_CCK_ENTRIES]; +} __packed; + +/** + * struct iwl6000_channel_switch_cmd + * @band: 0- 5.2GHz, 1- 2.4GHz + * @expect_beacon: 0- resume transmits after channel switch + *		   1- wait for beacon to resume transmits + * @channel: new channel number + * @rxon_flags: Rx on flags + * @rxon_filter_flags: filtering parameters + * @switch_time: switch time in extended beacon format + * @reserved: reserved bytes + */ +struct iwl6000_channel_switch_cmd { +	u8 band; +	u8 expect_beacon; +	__le16 channel; +	__le32 rxon_flags; +	__le32 rxon_filter_flags; +	__le32 switch_time; +	__le32 reserved[3][IWL_PWR_NUM_HT_OFDM_ENTRIES + IWL_PWR_CCK_ENTRIES]; +} __packed; + +/* + * CHANNEL_SWITCH_NOTIFICATION = 0x73 (notification only, not a command) + */ +struct iwl_csa_notification { +	__le16 band; +	__le16 channel; +	__le32 status;		/* 0 - OK, 1 - fail */ +} __packed; + +/****************************************************************************** + * (2) + * Quality-of-Service (QOS) Commands & Responses: + * + *****************************************************************************/ + +/** + * struct iwl_ac_qos -- QOS timing params for REPLY_QOS_PARAM + * One for each of 4 EDCA access categories in struct iwl_qosparam_cmd + * + * @cw_min: Contention window, start value in numbers of slots. + *          Should be a power-of-2, minus 1.  Device's default is 0x0f. + * @cw_max: Contention window, max value in numbers of slots. + *          Should be a power-of-2, minus 1.  Device's default is 0x3f. + * @aifsn:  Number of slots in Arbitration Interframe Space (before + *          performing random backoff timing prior to Tx).  Device default 1. + * @edca_txop:  Length of Tx opportunity, in uSecs.  Device default is 0. + * + * Device will automatically increase contention window by (2*CW) + 1 for each + * transmission retry.  Device uses cw_max as a bit mask, ANDed with new CW + * value, to cap the CW value. + */ +struct iwl_ac_qos { +	__le16 cw_min; +	__le16 cw_max; +	u8 aifsn; +	u8 reserved1; +	__le16 edca_txop; +} __packed; + +/* QoS flags defines */ +#define QOS_PARAM_FLG_UPDATE_EDCA_MSK	cpu_to_le32(0x01) +#define QOS_PARAM_FLG_TGN_MSK		cpu_to_le32(0x02) +#define QOS_PARAM_FLG_TXOP_TYPE_MSK	cpu_to_le32(0x10) + +/* Number of Access Categories (AC) (EDCA), queues 0..3 */ +#define AC_NUM                4 + +/* + * REPLY_QOS_PARAM = 0x13 (command, has simple generic response) + * + * This command sets up timings for each of the 4 prioritized EDCA Tx FIFOs + * 0: Background, 1: Best Effort, 2: Video, 3: Voice. + */ +struct iwl_qosparam_cmd { +	__le32 qos_flags; +	struct iwl_ac_qos ac[AC_NUM]; +} __packed; + +/****************************************************************************** + * (3) + * Add/Modify Stations Commands & Responses: + * + *****************************************************************************/ +/* + * Multi station support + */ + +/* Special, dedicated locations within device's station table */ +#define	IWL_AP_ID		0 +#define	IWL_AP_ID_PAN		1 +#define	IWL_STA_ID		2 +#define IWLAGN_PAN_BCAST_ID	14 +#define IWLAGN_BROADCAST_ID	15 +#define	IWLAGN_STATION_COUNT	16 + +#define IWL_TID_NON_QOS IWL_MAX_TID_COUNT + +#define STA_FLG_TX_RATE_MSK		cpu_to_le32(1 << 2) +#define STA_FLG_PWR_SAVE_MSK		cpu_to_le32(1 << 8) +#define STA_FLG_PAN_STATION		cpu_to_le32(1 << 13) +#define STA_FLG_RTS_MIMO_PROT_MSK	cpu_to_le32(1 << 17) +#define STA_FLG_AGG_MPDU_8US_MSK	cpu_to_le32(1 << 18) +#define STA_FLG_MAX_AGG_SIZE_POS	(19) +#define STA_FLG_MAX_AGG_SIZE_MSK	cpu_to_le32(3 << 19) +#define STA_FLG_HT40_EN_MSK		cpu_to_le32(1 << 21) +#define STA_FLG_MIMO_DIS_MSK		cpu_to_le32(1 << 22) +#define STA_FLG_AGG_MPDU_DENSITY_POS	(23) +#define STA_FLG_AGG_MPDU_DENSITY_MSK	cpu_to_le32(7 << 23) + +/* Use in mode field.  1: modify existing entry, 0: add new station entry */ +#define STA_CONTROL_MODIFY_MSK		0x01 + +/* key flags __le16*/ +#define STA_KEY_FLG_ENCRYPT_MSK	cpu_to_le16(0x0007) +#define STA_KEY_FLG_NO_ENC	cpu_to_le16(0x0000) +#define STA_KEY_FLG_WEP		cpu_to_le16(0x0001) +#define STA_KEY_FLG_CCMP	cpu_to_le16(0x0002) +#define STA_KEY_FLG_TKIP	cpu_to_le16(0x0003) + +#define STA_KEY_FLG_KEYID_POS	8 +#define STA_KEY_FLG_INVALID 	cpu_to_le16(0x0800) +/* wep key is either from global key (0) or from station info array (1) */ +#define STA_KEY_FLG_MAP_KEY_MSK	cpu_to_le16(0x0008) + +/* wep key in STA: 5-bytes (0) or 13-bytes (1) */ +#define STA_KEY_FLG_KEY_SIZE_MSK     cpu_to_le16(0x1000) +#define STA_KEY_MULTICAST_MSK        cpu_to_le16(0x4000) +#define STA_KEY_MAX_NUM		8 +#define STA_KEY_MAX_NUM_PAN	16 +/* must not match WEP_INVALID_OFFSET */ +#define IWLAGN_HW_KEY_DEFAULT	0xfe + +/* Flags indicate whether to modify vs. don't change various station params */ +#define	STA_MODIFY_KEY_MASK		0x01 +#define	STA_MODIFY_TID_DISABLE_TX	0x02 +#define	STA_MODIFY_TX_RATE_MSK		0x04 +#define STA_MODIFY_ADDBA_TID_MSK	0x08 +#define STA_MODIFY_DELBA_TID_MSK	0x10 +#define STA_MODIFY_SLEEP_TX_COUNT_MSK	0x20 + +/* agn */ +struct iwl_keyinfo { +	__le16 key_flags; +	u8 tkip_rx_tsc_byte2;	/* TSC[2] for key mix ph1 detection */ +	u8 reserved1; +	__le16 tkip_rx_ttak[5];	/* 10-byte unicast TKIP TTAK */ +	u8 key_offset; +	u8 reserved2; +	u8 key[16];		/* 16-byte unicast decryption key */ +	__le64 tx_secur_seq_cnt; +	__le64 hw_tkip_mic_rx_key; +	__le64 hw_tkip_mic_tx_key; +} __packed; + +/** + * struct sta_id_modify + * @addr[ETH_ALEN]: station's MAC address + * @sta_id: index of station in uCode's station table + * @modify_mask: STA_MODIFY_*, 1: modify, 0: don't change + * + * Driver selects unused table index when adding new station, + * or the index to a pre-existing station entry when modifying that station. + * Some indexes have special purposes (IWL_AP_ID, index 0, is for AP). + * + * modify_mask flags select which parameters to modify vs. leave alone. + */ +struct sta_id_modify { +	u8 addr[ETH_ALEN]; +	__le16 reserved1; +	u8 sta_id; +	u8 modify_mask; +	__le16 reserved2; +} __packed; + +/* + * REPLY_ADD_STA = 0x18 (command) + * + * The device contains an internal table of per-station information, + * with info on security keys, aggregation parameters, and Tx rates for + * initial Tx attempt and any retries (agn devices uses + * REPLY_TX_LINK_QUALITY_CMD, + * + * REPLY_ADD_STA sets up the table entry for one station, either creating + * a new entry, or modifying a pre-existing one. + * + * NOTE:  RXON command (without "associated" bit set) wipes the station table + *        clean.  Moving into RF_KILL state does this also.  Driver must set up + *        new station table before transmitting anything on the RXON channel + *        (except active scans or active measurements; those commands carry + *        their own txpower/rate setup data). + * + *        When getting started on a new channel, driver must set up the + *        IWL_BROADCAST_ID entry (last entry in the table).  For a client + *        station in a BSS, once an AP is selected, driver sets up the AP STA + *        in the IWL_AP_ID entry (1st entry in the table).  BROADCAST and AP + *        are all that are needed for a BSS client station.  If the device is + *        used as AP, or in an IBSS network, driver must set up station table + *        entries for all STAs in network, starting with index IWL_STA_ID. + */ + +struct iwl_addsta_cmd { +	u8 mode;		/* 1: modify existing, 0: add new station */ +	u8 reserved[3]; +	struct sta_id_modify sta; +	struct iwl_keyinfo key; +	__le32 station_flags;		/* STA_FLG_* */ +	__le32 station_flags_msk;	/* STA_FLG_* */ + +	/* bit field to disable (1) or enable (0) Tx for Traffic ID (TID) +	 * corresponding to bit (e.g. bit 5 controls TID 5). +	 * Set modify_mask bit STA_MODIFY_TID_DISABLE_TX to use this field. */ +	__le16 tid_disable_tx; +	__le16 legacy_reserved; + +	/* TID for which to add block-ack support. +	 * Set modify_mask bit STA_MODIFY_ADDBA_TID_MSK to use this field. */ +	u8 add_immediate_ba_tid; + +	/* TID for which to remove block-ack support. +	 * Set modify_mask bit STA_MODIFY_DELBA_TID_MSK to use this field. */ +	u8 remove_immediate_ba_tid; + +	/* Starting Sequence Number for added block-ack support. +	 * Set modify_mask bit STA_MODIFY_ADDBA_TID_MSK to use this field. */ +	__le16 add_immediate_ba_ssn; + +	/* +	 * Number of packets OK to transmit to station even though +	 * it is asleep -- used to synchronise PS-poll and u-APSD +	 * responses while ucode keeps track of STA sleep state. +	 */ +	__le16 sleep_tx_count; + +	__le16 reserved2; +} __packed; + + +#define ADD_STA_SUCCESS_MSK		0x1 +#define ADD_STA_NO_ROOM_IN_TABLE	0x2 +#define ADD_STA_NO_BLOCK_ACK_RESOURCE	0x4 +#define ADD_STA_MODIFY_NON_EXIST_STA	0x8 +/* + * REPLY_ADD_STA = 0x18 (response) + */ +struct iwl_add_sta_resp { +	u8 status;	/* ADD_STA_* */ +} __packed; + +#define REM_STA_SUCCESS_MSK              0x1 +/* + *  REPLY_REM_STA = 0x19 (response) + */ +struct iwl_rem_sta_resp { +	u8 status; +} __packed; + +/* + *  REPLY_REM_STA = 0x19 (command) + */ +struct iwl_rem_sta_cmd { +	u8 num_sta;     /* number of removed stations */ +	u8 reserved[3]; +	u8 addr[ETH_ALEN]; /* MAC addr of the first station */ +	u8 reserved2[2]; +} __packed; + + +/* WiFi queues mask */ +#define IWL_SCD_BK_MSK			cpu_to_le32(BIT(0)) +#define IWL_SCD_BE_MSK			cpu_to_le32(BIT(1)) +#define IWL_SCD_VI_MSK			cpu_to_le32(BIT(2)) +#define IWL_SCD_VO_MSK			cpu_to_le32(BIT(3)) +#define IWL_SCD_MGMT_MSK		cpu_to_le32(BIT(3)) + +/* PAN queues mask */ +#define IWL_PAN_SCD_BK_MSK		cpu_to_le32(BIT(4)) +#define IWL_PAN_SCD_BE_MSK		cpu_to_le32(BIT(5)) +#define IWL_PAN_SCD_VI_MSK		cpu_to_le32(BIT(6)) +#define IWL_PAN_SCD_VO_MSK		cpu_to_le32(BIT(7)) +#define IWL_PAN_SCD_MGMT_MSK		cpu_to_le32(BIT(7)) +#define IWL_PAN_SCD_MULTICAST_MSK	cpu_to_le32(BIT(8)) + +#define IWL_AGG_TX_QUEUE_MSK		cpu_to_le32(0xffc00) + +#define IWL_DROP_ALL			BIT(1) + +/* + * REPLY_TXFIFO_FLUSH = 0x1e(command and response) + * + * When using full FIFO flush this command checks the scheduler HW block WR/RD + * pointers to check if all the frames were transferred by DMA into the + * relevant TX FIFO queue. Only when the DMA is finished and the queue is + * empty the command can finish. + * This command is used to flush the TXFIFO from transmit commands, it may + * operate on single or multiple queues, the command queue can't be flushed by + * this command. The command response is returned when all the queue flush + * operations are done. Each TX command flushed return response with the FLUSH + * status set in the TX response status. When FIFO flush operation is used, + * the flush operation ends when both the scheduler DMA done and TXFIFO empty + * are set. + * + * @queue_control: bit mask for which queues to flush + * @flush_control: flush controls + *	0: Dump single MSDU + *	1: Dump multiple MSDU according to PS, INVALID STA, TTL, TID disable. + *	2: Dump all FIFO + */ +struct iwl_txfifo_flush_cmd { +	__le32 queue_control; +	__le16 flush_control; +	__le16 reserved; +} __packed; + +/* + * REPLY_WEP_KEY = 0x20 + */ +struct iwl_wep_key { +	u8 key_index; +	u8 key_offset; +	u8 reserved1[2]; +	u8 key_size; +	u8 reserved2[3]; +	u8 key[16]; +} __packed; + +struct iwl_wep_cmd { +	u8 num_keys; +	u8 global_key_type; +	u8 flags; +	u8 reserved; +	struct iwl_wep_key key[0]; +} __packed; + +#define WEP_KEY_WEP_TYPE 1 +#define WEP_KEYS_MAX 4 +#define WEP_INVALID_OFFSET 0xff +#define WEP_KEY_LEN_64 5 +#define WEP_KEY_LEN_128 13 + +/****************************************************************************** + * (4) + * Rx Responses: + * + *****************************************************************************/ + +#define RX_RES_STATUS_NO_CRC32_ERROR	cpu_to_le32(1 << 0) +#define RX_RES_STATUS_NO_RXE_OVERFLOW	cpu_to_le32(1 << 1) + +#define RX_RES_PHY_FLAGS_BAND_24_MSK	cpu_to_le16(1 << 0) +#define RX_RES_PHY_FLAGS_MOD_CCK_MSK		cpu_to_le16(1 << 1) +#define RX_RES_PHY_FLAGS_SHORT_PREAMBLE_MSK	cpu_to_le16(1 << 2) +#define RX_RES_PHY_FLAGS_NARROW_BAND_MSK	cpu_to_le16(1 << 3) +#define RX_RES_PHY_FLAGS_ANTENNA_MSK		0x70 +#define RX_RES_PHY_FLAGS_ANTENNA_POS		4 +#define RX_RES_PHY_FLAGS_AGG_MSK		cpu_to_le16(1 << 7) + +#define RX_RES_STATUS_SEC_TYPE_MSK	(0x7 << 8) +#define RX_RES_STATUS_SEC_TYPE_NONE	(0x0 << 8) +#define RX_RES_STATUS_SEC_TYPE_WEP	(0x1 << 8) +#define RX_RES_STATUS_SEC_TYPE_CCMP	(0x2 << 8) +#define RX_RES_STATUS_SEC_TYPE_TKIP	(0x3 << 8) +#define	RX_RES_STATUS_SEC_TYPE_ERR	(0x7 << 8) + +#define RX_RES_STATUS_STATION_FOUND	(1<<6) +#define RX_RES_STATUS_NO_STATION_INFO_MISMATCH	(1<<7) + +#define RX_RES_STATUS_DECRYPT_TYPE_MSK	(0x3 << 11) +#define RX_RES_STATUS_NOT_DECRYPT	(0x0 << 11) +#define RX_RES_STATUS_DECRYPT_OK	(0x3 << 11) +#define RX_RES_STATUS_BAD_ICV_MIC	(0x1 << 11) +#define RX_RES_STATUS_BAD_KEY_TTAK	(0x2 << 11) + +#define RX_MPDU_RES_STATUS_ICV_OK	(0x20) +#define RX_MPDU_RES_STATUS_MIC_OK	(0x40) +#define RX_MPDU_RES_STATUS_TTAK_OK	(1 << 7) +#define RX_MPDU_RES_STATUS_DEC_DONE_MSK	(0x800) + + +#define IWLAGN_RX_RES_PHY_CNT 8 +#define IWLAGN_RX_RES_AGC_IDX     1 +#define IWLAGN_RX_RES_RSSI_AB_IDX 2 +#define IWLAGN_RX_RES_RSSI_C_IDX  3 +#define IWLAGN_OFDM_AGC_MSK 0xfe00 +#define IWLAGN_OFDM_AGC_BIT_POS 9 +#define IWLAGN_OFDM_RSSI_INBAND_A_BITMSK 0x00ff +#define IWLAGN_OFDM_RSSI_ALLBAND_A_BITMSK 0xff00 +#define IWLAGN_OFDM_RSSI_A_BIT_POS 0 +#define IWLAGN_OFDM_RSSI_INBAND_B_BITMSK 0xff0000 +#define IWLAGN_OFDM_RSSI_ALLBAND_B_BITMSK 0xff000000 +#define IWLAGN_OFDM_RSSI_B_BIT_POS 16 +#define IWLAGN_OFDM_RSSI_INBAND_C_BITMSK 0x00ff +#define IWLAGN_OFDM_RSSI_ALLBAND_C_BITMSK 0xff00 +#define IWLAGN_OFDM_RSSI_C_BIT_POS 0 + +struct iwlagn_non_cfg_phy { +	__le32 non_cfg_phy[IWLAGN_RX_RES_PHY_CNT];  /* up to 8 phy entries */ +} __packed; + + +/* + * REPLY_RX = 0xc3 (response only, not a command) + * Used only for legacy (non 11n) frames. + */ +struct iwl_rx_phy_res { +	u8 non_cfg_phy_cnt;     /* non configurable DSP phy data byte count */ +	u8 cfg_phy_cnt;		/* configurable DSP phy data byte count */ +	u8 stat_id;		/* configurable DSP phy data set ID */ +	u8 reserved1; +	__le64 timestamp;	/* TSF at on air rise */ +	__le32 beacon_time_stamp; /* beacon at on-air rise */ +	__le16 phy_flags;	/* general phy flags: band, modulation, ... */ +	__le16 channel;		/* channel number */ +	u8 non_cfg_phy_buf[32]; /* for various implementations of non_cfg_phy */ +	__le32 rate_n_flags;	/* RATE_MCS_* */ +	__le16 byte_count;	/* frame's byte-count */ +	__le16 frame_time;	/* frame's time on the air */ +} __packed; + +struct iwl_rx_mpdu_res_start { +	__le16 byte_count; +	__le16 reserved; +} __packed; + + +/****************************************************************************** + * (5) + * Tx Commands & Responses: + * + * Driver must place each REPLY_TX command into one of the prioritized Tx + * queues in host DRAM, shared between driver and device (see comments for + * SCD registers and Tx/Rx Queues).  When the device's Tx scheduler and uCode + * are preparing to transmit, the device pulls the Tx command over the PCI + * bus via one of the device's Tx DMA channels, to fill an internal FIFO + * from which data will be transmitted. + * + * uCode handles all timing and protocol related to control frames + * (RTS/CTS/ACK), based on flags in the Tx command.  uCode and Tx scheduler + * handle reception of block-acks; uCode updates the host driver via + * REPLY_COMPRESSED_BA. + * + * uCode handles retrying Tx when an ACK is expected but not received. + * This includes trying lower data rates than the one requested in the Tx + * command, as set up by the REPLY_TX_LINK_QUALITY_CMD (agn). + * + * Driver sets up transmit power for various rates via REPLY_TX_PWR_TABLE_CMD. + * This command must be executed after every RXON command, before Tx can occur. + *****************************************************************************/ + +/* REPLY_TX Tx flags field */ + +/* + * 1: Use RTS/CTS protocol or CTS-to-self if spec allows it + * before this frame. if CTS-to-self required check + * RXON_FLG_SELF_CTS_EN status. + */ +#define TX_CMD_FLG_PROT_REQUIRE_MSK cpu_to_le32(1 << 0) + +/* 1: Expect ACK from receiving station + * 0: Don't expect ACK (MAC header's duration field s/b 0) + * Set this for unicast frames, but not broadcast/multicast. */ +#define TX_CMD_FLG_ACK_MSK cpu_to_le32(1 << 3) + +/* For agn devices: + * 1: Use rate scale table (see REPLY_TX_LINK_QUALITY_CMD). + *    Tx command's initial_rate_index indicates first rate to try; + *    uCode walks through table for additional Tx attempts. + * 0: Use Tx rate/MCS from Tx command's rate_n_flags field. + *    This rate will be used for all Tx attempts; it will not be scaled. */ +#define TX_CMD_FLG_STA_RATE_MSK cpu_to_le32(1 << 4) + +/* 1: Expect immediate block-ack. + * Set when Txing a block-ack request frame.  Also set TX_CMD_FLG_ACK_MSK. */ +#define TX_CMD_FLG_IMM_BA_RSP_MASK  cpu_to_le32(1 << 6) + +/* Tx antenna selection field; reserved (0) for agn devices. */ +#define TX_CMD_FLG_ANT_SEL_MSK cpu_to_le32(0xf00) + +/* 1: Ignore Bluetooth priority for this frame. + * 0: Delay Tx until Bluetooth device is done (normal usage). */ +#define TX_CMD_FLG_IGNORE_BT cpu_to_le32(1 << 12) + +/* 1: uCode overrides sequence control field in MAC header. + * 0: Driver provides sequence control field in MAC header. + * Set this for management frames, non-QOS data frames, non-unicast frames, + * and also in Tx command embedded in REPLY_SCAN_CMD for active scans. */ +#define TX_CMD_FLG_SEQ_CTL_MSK cpu_to_le32(1 << 13) + +/* 1: This frame is non-last MPDU; more fragments are coming. + * 0: Last fragment, or not using fragmentation. */ +#define TX_CMD_FLG_MORE_FRAG_MSK cpu_to_le32(1 << 14) + +/* 1: uCode calculates and inserts Timestamp Function (TSF) in outgoing frame. + * 0: No TSF required in outgoing frame. + * Set this for transmitting beacons and probe responses. */ +#define TX_CMD_FLG_TSF_MSK cpu_to_le32(1 << 16) + +/* 1: Driver inserted 2 bytes pad after the MAC header, for (required) dword + *    alignment of frame's payload data field. + * 0: No pad + * Set this for MAC headers with 26 or 30 bytes, i.e. those with QOS or ADDR4 + * field (but not both).  Driver must align frame data (i.e. data following + * MAC header) to DWORD boundary. */ +#define TX_CMD_FLG_MH_PAD_MSK cpu_to_le32(1 << 20) + +/* accelerate aggregation support + * 0 - no CCMP encryption; 1 - CCMP encryption */ +#define TX_CMD_FLG_AGG_CCMP_MSK cpu_to_le32(1 << 22) + +/* HCCA-AP - disable duration overwriting. */ +#define TX_CMD_FLG_DUR_MSK cpu_to_le32(1 << 25) + + +/* + * TX command security control + */ +#define TX_CMD_SEC_WEP  	0x01 +#define TX_CMD_SEC_CCM  	0x02 +#define TX_CMD_SEC_TKIP		0x03 +#define TX_CMD_SEC_MSK		0x03 +#define TX_CMD_SEC_SHIFT	6 +#define TX_CMD_SEC_KEY128	0x08 + +/* + * REPLY_TX = 0x1c (command) + */ + +/* + * 4965 uCode updates these Tx attempt count values in host DRAM. + * Used for managing Tx retries when expecting block-acks. + * Driver should set these fields to 0. + */ +struct iwl_dram_scratch { +	u8 try_cnt;		/* Tx attempts */ +	u8 bt_kill_cnt;		/* Tx attempts blocked by Bluetooth device */ +	__le16 reserved; +} __packed; + +struct iwl_tx_cmd { +	/* +	 * MPDU byte count: +	 * MAC header (24/26/30/32 bytes) + 2 bytes pad if 26/30 header size, +	 * + 8 byte IV for CCM or TKIP (not used for WEP) +	 * + Data payload +	 * + 8-byte MIC (not used for CCM/WEP) +	 * NOTE:  Does not include Tx command bytes, post-MAC pad bytes, +	 *        MIC (CCM) 8 bytes, ICV (WEP/TKIP/CKIP) 4 bytes, CRC 4 bytes.i +	 * Range: 14-2342 bytes. +	 */ +	__le16 len; + +	/* +	 * MPDU or MSDU byte count for next frame. +	 * Used for fragmentation and bursting, but not 11n aggregation. +	 * Same as "len", but for next frame.  Set to 0 if not applicable. +	 */ +	__le16 next_frame_len; + +	__le32 tx_flags;	/* TX_CMD_FLG_* */ + +	/* uCode may modify this field of the Tx command (in host DRAM!). +	 * Driver must also set dram_lsb_ptr and dram_msb_ptr in this cmd. */ +	struct iwl_dram_scratch scratch; + +	/* Rate for *all* Tx attempts, if TX_CMD_FLG_STA_RATE_MSK is cleared. */ +	__le32 rate_n_flags;	/* RATE_MCS_* */ + +	/* Index of destination station in uCode's station table */ +	u8 sta_id; + +	/* Type of security encryption:  CCM or TKIP */ +	u8 sec_ctl;		/* TX_CMD_SEC_* */ + +	/* +	 * Index into rate table (see REPLY_TX_LINK_QUALITY_CMD) for initial +	 * Tx attempt, if TX_CMD_FLG_STA_RATE_MSK is set.  Normally "0" for +	 * data frames, this field may be used to selectively reduce initial +	 * rate (via non-0 value) for special frames (e.g. management), while +	 * still supporting rate scaling for all frames. +	 */ +	u8 initial_rate_index; +	u8 reserved; +	u8 key[16]; +	__le16 next_frame_flags; +	__le16 reserved2; +	union { +		__le32 life_time; +		__le32 attempt; +	} stop_time; + +	/* Host DRAM physical address pointer to "scratch" in this command. +	 * Must be dword aligned.  "0" in dram_lsb_ptr disables usage. */ +	__le32 dram_lsb_ptr; +	u8 dram_msb_ptr; + +	u8 rts_retry_limit;	/*byte 50 */ +	u8 data_retry_limit;	/*byte 51 */ +	u8 tid_tspec; +	union { +		__le16 pm_frame_timeout; +		__le16 attempt_duration; +	} timeout; + +	/* +	 * Duration of EDCA burst Tx Opportunity, in 32-usec units. +	 * Set this if txop time is not specified by HCCA protocol (e.g. by AP). +	 */ +	__le16 driver_txop; + +	/* +	 * MAC header goes here, followed by 2 bytes padding if MAC header +	 * length is 26 or 30 bytes, followed by payload data +	 */ +	u8 payload[0]; +	struct ieee80211_hdr hdr[0]; +} __packed; + +/* + * TX command response is sent after *agn* transmission attempts. + * + * both postpone and abort status are expected behavior from uCode. there is + * no special operation required from driver; except for RFKILL_FLUSH, + * which required tx flush host command to flush all the tx frames in queues + */ +enum { +	TX_STATUS_SUCCESS = 0x01, +	TX_STATUS_DIRECT_DONE = 0x02, +	/* postpone TX */ +	TX_STATUS_POSTPONE_DELAY = 0x40, +	TX_STATUS_POSTPONE_FEW_BYTES = 0x41, +	TX_STATUS_POSTPONE_BT_PRIO = 0x42, +	TX_STATUS_POSTPONE_QUIET_PERIOD = 0x43, +	TX_STATUS_POSTPONE_CALC_TTAK = 0x44, +	/* abort TX */ +	TX_STATUS_FAIL_INTERNAL_CROSSED_RETRY = 0x81, +	TX_STATUS_FAIL_SHORT_LIMIT = 0x82, +	TX_STATUS_FAIL_LONG_LIMIT = 0x83, +	TX_STATUS_FAIL_FIFO_UNDERRUN = 0x84, +	TX_STATUS_FAIL_DRAIN_FLOW = 0x85, +	TX_STATUS_FAIL_RFKILL_FLUSH = 0x86, +	TX_STATUS_FAIL_LIFE_EXPIRE = 0x87, +	TX_STATUS_FAIL_DEST_PS = 0x88, +	TX_STATUS_FAIL_HOST_ABORTED = 0x89, +	TX_STATUS_FAIL_BT_RETRY = 0x8a, +	TX_STATUS_FAIL_STA_INVALID = 0x8b, +	TX_STATUS_FAIL_FRAG_DROPPED = 0x8c, +	TX_STATUS_FAIL_TID_DISABLE = 0x8d, +	TX_STATUS_FAIL_FIFO_FLUSHED = 0x8e, +	TX_STATUS_FAIL_INSUFFICIENT_CF_POLL = 0x8f, +	TX_STATUS_FAIL_PASSIVE_NO_RX = 0x90, +	TX_STATUS_FAIL_NO_BEACON_ON_RADAR = 0x91, +}; + +#define	TX_PACKET_MODE_REGULAR		0x0000 +#define	TX_PACKET_MODE_BURST_SEQ	0x0100 +#define	TX_PACKET_MODE_BURST_FIRST	0x0200 + +enum { +	TX_POWER_PA_NOT_ACTIVE = 0x0, +}; + +enum { +	TX_STATUS_MSK = 0x000000ff,		/* bits 0:7 */ +	TX_STATUS_DELAY_MSK = 0x00000040, +	TX_STATUS_ABORT_MSK = 0x00000080, +	TX_PACKET_MODE_MSK = 0x0000ff00,	/* bits 8:15 */ +	TX_FIFO_NUMBER_MSK = 0x00070000,	/* bits 16:18 */ +	TX_RESERVED = 0x00780000,		/* bits 19:22 */ +	TX_POWER_PA_DETECT_MSK = 0x7f800000,	/* bits 23:30 */ +	TX_ABORT_REQUIRED_MSK = 0x80000000,	/* bits 31:31 */ +}; + +/* ******************************* + * TX aggregation status + ******************************* */ + +enum { +	AGG_TX_STATE_TRANSMITTED = 0x00, +	AGG_TX_STATE_UNDERRUN_MSK = 0x01, +	AGG_TX_STATE_BT_PRIO_MSK = 0x02, +	AGG_TX_STATE_FEW_BYTES_MSK = 0x04, +	AGG_TX_STATE_ABORT_MSK = 0x08, +	AGG_TX_STATE_LAST_SENT_TTL_MSK = 0x10, +	AGG_TX_STATE_LAST_SENT_TRY_CNT_MSK = 0x20, +	AGG_TX_STATE_LAST_SENT_BT_KILL_MSK = 0x40, +	AGG_TX_STATE_SCD_QUERY_MSK = 0x80, +	AGG_TX_STATE_TEST_BAD_CRC32_MSK = 0x100, +	AGG_TX_STATE_RESPONSE_MSK = 0x1ff, +	AGG_TX_STATE_DUMP_TX_MSK = 0x200, +	AGG_TX_STATE_DELAY_TX_MSK = 0x400 +}; + +#define AGG_TX_STATUS_MSK	0x00000fff	/* bits 0:11 */ +#define AGG_TX_TRY_MSK		0x0000f000	/* bits 12:15 */ +#define AGG_TX_TRY_POS		12 + +#define AGG_TX_STATE_LAST_SENT_MSK  (AGG_TX_STATE_LAST_SENT_TTL_MSK | \ +				     AGG_TX_STATE_LAST_SENT_TRY_CNT_MSK | \ +				     AGG_TX_STATE_LAST_SENT_BT_KILL_MSK) + +/* # tx attempts for first frame in aggregation */ +#define AGG_TX_STATE_TRY_CNT_POS 12 +#define AGG_TX_STATE_TRY_CNT_MSK 0xf000 + +/* Command ID and sequence number of Tx command for this frame */ +#define AGG_TX_STATE_SEQ_NUM_POS 16 +#define AGG_TX_STATE_SEQ_NUM_MSK 0xffff0000 + +/* + * REPLY_TX = 0x1c (response) + * + * This response may be in one of two slightly different formats, indicated + * by the frame_count field: + * + * 1)  No aggregation (frame_count == 1).  This reports Tx results for + *     a single frame.  Multiple attempts, at various bit rates, may have + *     been made for this frame. + * + * 2)  Aggregation (frame_count > 1).  This reports Tx results for + *     2 or more frames that used block-acknowledge.  All frames were + *     transmitted at same rate.  Rate scaling may have been used if first + *     frame in this new agg block failed in previous agg block(s). + * + *     Note that, for aggregation, ACK (block-ack) status is not delivered here; + *     block-ack has not been received by the time the agn device records + *     this status. + *     This status relates to reasons the tx might have been blocked or aborted + *     within the sending station (this agn device), rather than whether it was + *     received successfully by the destination station. + */ +struct agg_tx_status { +	__le16 status; +	__le16 sequence; +} __packed; + +/* + * definitions for initial rate index field + * bits [3:0] initial rate index + * bits [6:4] rate table color, used for the initial rate + * bit-7 invalid rate indication + *   i.e. rate was not chosen from rate table + *   or rate table color was changed during frame retries + * refer tlc rate info + */ + +#define IWL50_TX_RES_INIT_RATE_INDEX_POS	0 +#define IWL50_TX_RES_INIT_RATE_INDEX_MSK	0x0f +#define IWL50_TX_RES_RATE_TABLE_COLOR_POS	4 +#define IWL50_TX_RES_RATE_TABLE_COLOR_MSK	0x70 +#define IWL50_TX_RES_INV_RATE_INDEX_MSK	0x80 + +/* refer to ra_tid */ +#define IWLAGN_TX_RES_TID_POS	0 +#define IWLAGN_TX_RES_TID_MSK	0x0f +#define IWLAGN_TX_RES_RA_POS	4 +#define IWLAGN_TX_RES_RA_MSK	0xf0 + +struct iwlagn_tx_resp { +	u8 frame_count;		/* 1 no aggregation, >1 aggregation */ +	u8 bt_kill_count;	/* # blocked by bluetooth (unused for agg) */ +	u8 failure_rts;		/* # failures due to unsuccessful RTS */ +	u8 failure_frame;	/* # failures due to no ACK (unused for agg) */ + +	/* For non-agg:  Rate at which frame was successful. +	 * For agg:  Rate at which all frames were transmitted. */ +	__le32 rate_n_flags;	/* RATE_MCS_*  */ + +	/* For non-agg:  RTS + CTS + frame tx attempts time + ACK. +	 * For agg:  RTS + CTS + aggregation tx time + block-ack time. */ +	__le16 wireless_media_time;	/* uSecs */ + +	u8 pa_status;		/* RF power amplifier measurement (not used) */ +	u8 pa_integ_res_a[3]; +	u8 pa_integ_res_b[3]; +	u8 pa_integ_res_C[3]; + +	__le32 tfd_info; +	__le16 seq_ctl; +	__le16 byte_cnt; +	u8 tlc_info; +	u8 ra_tid;		/* tid (0:3), sta_id (4:7) */ +	__le16 frame_ctrl; +	/* +	 * For non-agg:  frame status TX_STATUS_* +	 * For agg:  status of 1st frame, AGG_TX_STATE_*; other frame status +	 *           fields follow this one, up to frame_count. +	 *           Bit fields: +	 *           11- 0:  AGG_TX_STATE_* status code +	 *           15-12:  Retry count for 1st frame in aggregation (retries +	 *                   occur if tx failed for this frame when it was a +	 *                   member of a previous aggregation block).  If rate +	 *                   scaling is used, retry count indicates the rate +	 *                   table entry used for all frames in the new agg. +	 *           31-16:  Sequence # for this frame's Tx cmd (not SSN!) +	 */ +	struct agg_tx_status status;	/* TX status (in aggregation - +					 * status of 1st frame) */ +} __packed; +/* + * REPLY_COMPRESSED_BA = 0xc5 (response only, not a command) + * + * Reports Block-Acknowledge from recipient station + */ +struct iwl_compressed_ba_resp { +	__le32 sta_addr_lo32; +	__le16 sta_addr_hi16; +	__le16 reserved; + +	/* Index of recipient (BA-sending) station in uCode's station table */ +	u8 sta_id; +	u8 tid; +	__le16 seq_ctl; +	__le64 bitmap; +	__le16 scd_flow; +	__le16 scd_ssn; +	u8 txed;	/* number of frames sent */ +	u8 txed_2_done; /* number of frames acked */ +	__le16 reserved1; +} __packed; + +/* + * REPLY_TX_PWR_TABLE_CMD = 0x97 (command, has simple generic response) + * + */ + +/*RS_NEW_API: only TLC_RTS remains and moved to bit 0 */ +#define  LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK	(1 << 0) + +/* # of EDCA prioritized tx fifos */ +#define  LINK_QUAL_AC_NUM AC_NUM + +/* # entries in rate scale table to support Tx retries */ +#define  LINK_QUAL_MAX_RETRY_NUM 16 + +/* Tx antenna selection values */ +#define  LINK_QUAL_ANT_A_MSK (1 << 0) +#define  LINK_QUAL_ANT_B_MSK (1 << 1) +#define  LINK_QUAL_ANT_MSK   (LINK_QUAL_ANT_A_MSK|LINK_QUAL_ANT_B_MSK) + + +/** + * struct iwl_link_qual_general_params + * + * Used in REPLY_TX_LINK_QUALITY_CMD + */ +struct iwl_link_qual_general_params { +	u8 flags; + +	/* No entries at or above this (driver chosen) index contain MIMO */ +	u8 mimo_delimiter; + +	/* Best single antenna to use for single stream (legacy, SISO). */ +	u8 single_stream_ant_msk;	/* LINK_QUAL_ANT_* */ + +	/* Best antennas to use for MIMO (unused for 4965, assumes both). */ +	u8 dual_stream_ant_msk;		/* LINK_QUAL_ANT_* */ + +	/* +	 * If driver needs to use different initial rates for different +	 * EDCA QOS access categories (as implemented by tx fifos 0-3), +	 * this table will set that up, by indicating the indexes in the +	 * rs_table[LINK_QUAL_MAX_RETRY_NUM] rate table at which to start. +	 * Otherwise, driver should set all entries to 0. +	 * +	 * Entry usage: +	 * 0 = Background, 1 = Best Effort (normal), 2 = Video, 3 = Voice +	 * TX FIFOs above 3 use same value (typically 0) as TX FIFO 3. +	 */ +	u8 start_rate_index[LINK_QUAL_AC_NUM]; +} __packed; + +#define LINK_QUAL_AGG_TIME_LIMIT_DEF	(4000) /* 4 milliseconds */ +#define LINK_QUAL_AGG_TIME_LIMIT_MAX	(8000) +#define LINK_QUAL_AGG_TIME_LIMIT_MIN	(100) + +#define LINK_QUAL_AGG_DISABLE_START_DEF	(3) +#define LINK_QUAL_AGG_DISABLE_START_MAX	(255) +#define LINK_QUAL_AGG_DISABLE_START_MIN	(0) + +#define LINK_QUAL_AGG_FRAME_LIMIT_DEF	(63) +#define LINK_QUAL_AGG_FRAME_LIMIT_MAX	(63) +#define LINK_QUAL_AGG_FRAME_LIMIT_MIN	(0) + +/** + * struct iwl_link_qual_agg_params + * + * Used in REPLY_TX_LINK_QUALITY_CMD + */ +struct iwl_link_qual_agg_params { + +	/* +	 *Maximum number of uSec in aggregation. +	 * default set to 4000 (4 milliseconds) if not configured in .cfg +	 */ +	__le16 agg_time_limit; + +	/* +	 * Number of Tx retries allowed for a frame, before that frame will +	 * no longer be considered for the start of an aggregation sequence +	 * (scheduler will then try to tx it as single frame). +	 * Driver should set this to 3. +	 */ +	u8 agg_dis_start_th; + +	/* +	 * Maximum number of frames in aggregation. +	 * 0 = no limit (default).  1 = no aggregation. +	 * Other values = max # frames in aggregation. +	 */ +	u8 agg_frame_cnt_limit; + +	__le32 reserved; +} __packed; + +/* + * REPLY_TX_LINK_QUALITY_CMD = 0x4e (command, has simple generic response) + * + * For agn devices + * + * Each station in the agn device's internal station table has its own table + * of 16 + * Tx rates and modulation modes (e.g. legacy/SISO/MIMO) for retrying Tx when + * an ACK is not received.  This command replaces the entire table for + * one station. + * + * NOTE:  Station must already be in agn device's station table. + *	  Use REPLY_ADD_STA. + * + * The rate scaling procedures described below work well.  Of course, other + * procedures are possible, and may work better for particular environments. + * + * + * FILLING THE RATE TABLE + * + * Given a particular initial rate and mode, as determined by the rate + * scaling algorithm described below, the Linux driver uses the following + * formula to fill the rs_table[LINK_QUAL_MAX_RETRY_NUM] rate table in the + * Link Quality command: + * + * + * 1)  If using High-throughput (HT) (SISO or MIMO) initial rate: + *     a) Use this same initial rate for first 3 entries. + *     b) Find next lower available rate using same mode (SISO or MIMO), + *        use for next 3 entries.  If no lower rate available, switch to + *        legacy mode (no HT40 channel, no MIMO, no short guard interval). + *     c) If using MIMO, set command's mimo_delimiter to number of entries + *        using MIMO (3 or 6). + *     d) After trying 2 HT rates, switch to legacy mode (no HT40 channel, + *        no MIMO, no short guard interval), at the next lower bit rate + *        (e.g. if second HT bit rate was 54, try 48 legacy), and follow + *        legacy procedure for remaining table entries. + * + * 2)  If using legacy initial rate: + *     a) Use the initial rate for only one entry. + *     b) For each following entry, reduce the rate to next lower available + *        rate, until reaching the lowest available rate. + *     c) When reducing rate, also switch antenna selection. + *     d) Once lowest available rate is reached, repeat this rate until + *        rate table is filled (16 entries), switching antenna each entry. + * + * + * ACCUMULATING HISTORY + * + * The rate scaling algorithm for agn devices, as implemented in Linux driver, + * uses two sets of frame Tx success history:  One for the current/active + * modulation mode, and one for a speculative/search mode that is being + * attempted. If the speculative mode turns out to be more effective (i.e. + * actual transfer rate is better), then the driver continues to use the + * speculative mode as the new current active mode. + * + * Each history set contains, separately for each possible rate, data for a + * sliding window of the 62 most recent tx attempts at that rate.  The data + * includes a shifting bitmap of success(1)/failure(0), and sums of successful + * and attempted frames, from which the driver can additionally calculate a + * success ratio (success / attempted) and number of failures + * (attempted - success), and control the size of the window (attempted). + * The driver uses the bit map to remove successes from the success sum, as + * the oldest tx attempts fall out of the window. + * + * When the agn device makes multiple tx attempts for a given frame, each + * attempt might be at a different rate, and have different modulation + * characteristics (e.g. antenna, fat channel, short guard interval), as set + * up in the rate scaling table in the Link Quality command.  The driver must + * determine which rate table entry was used for each tx attempt, to determine + * which rate-specific history to update, and record only those attempts that + * match the modulation characteristics of the history set. + * + * When using block-ack (aggregation), all frames are transmitted at the same + * rate, since there is no per-attempt acknowledgment from the destination + * station.  The Tx response struct iwl_tx_resp indicates the Tx rate in + * rate_n_flags field.  After receiving a block-ack, the driver can update + * history for the entire block all at once. + * + * + * FINDING BEST STARTING RATE: + * + * When working with a selected initial modulation mode (see below), the + * driver attempts to find a best initial rate.  The initial rate is the + * first entry in the Link Quality command's rate table. + * + * 1)  Calculate actual throughput (success ratio * expected throughput, see + *     table below) for current initial rate.  Do this only if enough frames + *     have been attempted to make the value meaningful:  at least 6 failed + *     tx attempts, or at least 8 successes.  If not enough, don't try rate + *     scaling yet. + * + * 2)  Find available rates adjacent to current initial rate.  Available means: + *     a)  supported by hardware && + *     b)  supported by association && + *     c)  within any constraints selected by user + * + * 3)  Gather measured throughputs for adjacent rates.  These might not have + *     enough history to calculate a throughput.  That's okay, we might try + *     using one of them anyway! + * + * 4)  Try decreasing rate if, for current rate: + *     a)  success ratio is < 15% || + *     b)  lower adjacent rate has better measured throughput || + *     c)  higher adjacent rate has worse throughput, and lower is unmeasured + * + *     As a sanity check, if decrease was determined above, leave rate + *     unchanged if: + *     a)  lower rate unavailable + *     b)  success ratio at current rate > 85% (very good) + *     c)  current measured throughput is better than expected throughput + *         of lower rate (under perfect 100% tx conditions, see table below) + * + * 5)  Try increasing rate if, for current rate: + *     a)  success ratio is < 15% || + *     b)  both adjacent rates' throughputs are unmeasured (try it!) || + *     b)  higher adjacent rate has better measured throughput || + *     c)  lower adjacent rate has worse throughput, and higher is unmeasured + * + *     As a sanity check, if increase was determined above, leave rate + *     unchanged if: + *     a)  success ratio at current rate < 70%.  This is not particularly + *         good performance; higher rate is sure to have poorer success. + * + * 6)  Re-evaluate the rate after each tx frame.  If working with block- + *     acknowledge, history and statistics may be calculated for the entire + *     block (including prior history that fits within the history windows), + *     before re-evaluation. + * + * FINDING BEST STARTING MODULATION MODE: + * + * After working with a modulation mode for a "while" (and doing rate scaling), + * the driver searches for a new initial mode in an attempt to improve + * throughput.  The "while" is measured by numbers of attempted frames: + * + * For legacy mode, search for new mode after: + *   480 successful frames, or 160 failed frames + * For high-throughput modes (SISO or MIMO), search for new mode after: + *   4500 successful frames, or 400 failed frames + * + * Mode switch possibilities are (3 for each mode): + * + * For legacy: + *   Change antenna, try SISO (if HT association), try MIMO (if HT association) + * For SISO: + *   Change antenna, try MIMO, try shortened guard interval (SGI) + * For MIMO: + *   Try SISO antenna A, SISO antenna B, try shortened guard interval (SGI) + * + * When trying a new mode, use the same bit rate as the old/current mode when + * trying antenna switches and shortened guard interval.  When switching to + * SISO from MIMO or legacy, or to MIMO from SISO or legacy, use a rate + * for which the expected throughput (under perfect conditions) is about the + * same or slightly better than the actual measured throughput delivered by + * the old/current mode. + * + * Actual throughput can be estimated by multiplying the expected throughput + * by the success ratio (successful / attempted tx frames).  Frame size is + * not considered in this calculation; it assumes that frame size will average + * out to be fairly consistent over several samples.  The following are + * metric values for expected throughput assuming 100% success ratio. + * Only G band has support for CCK rates: + * + *           RATE:  1    2    5   11    6   9   12   18   24   36   48   54   60 + * + *              G:  7   13   35   58   40  57   72   98  121  154  177  186  186 + *              A:  0    0    0    0   40  57   72   98  121  154  177  186  186 + *     SISO 20MHz:  0    0    0    0   42  42   76  102  124  159  183  193  202 + * SGI SISO 20MHz:  0    0    0    0   46  46   82  110  132  168  192  202  211 + *     MIMO 20MHz:  0    0    0    0   74  74  123  155  179  214  236  244  251 + * SGI MIMO 20MHz:  0    0    0    0   81  81  131  164  188  222  243  251  257 + *     SISO 40MHz:  0    0    0    0   77  77  127  160  184  220  242  250  257 + * SGI SISO 40MHz:  0    0    0    0   83  83  135  169  193  229  250  257  264 + *     MIMO 40MHz:  0    0    0    0  123 123  182  214  235  264  279  285  289 + * SGI MIMO 40MHz:  0    0    0    0  131 131  191  222  242  270  284  289  293 + * + * After the new mode has been tried for a short while (minimum of 6 failed + * frames or 8 successful frames), compare success ratio and actual throughput + * estimate of the new mode with the old.  If either is better with the new + * mode, continue to use the new mode. + * + * Continue comparing modes until all 3 possibilities have been tried. + * If moving from legacy to HT, try all 3 possibilities from the new HT + * mode.  After trying all 3, a best mode is found.  Continue to use this mode + * for the longer "while" described above (e.g. 480 successful frames for + * legacy), and then repeat the search process. + * + */ +struct iwl_link_quality_cmd { + +	/* Index of destination/recipient station in uCode's station table */ +	u8 sta_id; +	u8 reserved1; +	__le16 control;		/* not used */ +	struct iwl_link_qual_general_params general_params; +	struct iwl_link_qual_agg_params agg_params; + +	/* +	 * Rate info; when using rate-scaling, Tx command's initial_rate_index +	 * specifies 1st Tx rate attempted, via index into this table. +	 * agn devices works its way through table when retrying Tx. +	 */ +	struct { +		__le32 rate_n_flags;	/* RATE_MCS_*, IWL_RATE_* */ +	} rs_table[LINK_QUAL_MAX_RETRY_NUM]; +	__le32 reserved2; +} __packed; + +/* + * BT configuration enable flags: + *   bit 0 - 1: BT channel announcement enabled + *           0: disable + *   bit 1 - 1: priority of BT device enabled + *           0: disable + *   bit 2 - 1: BT 2 wire support enabled + *           0: disable + */ +#define BT_COEX_DISABLE (0x0) +#define BT_ENABLE_CHANNEL_ANNOUNCE BIT(0) +#define BT_ENABLE_PRIORITY	   BIT(1) +#define BT_ENABLE_2_WIRE	   BIT(2) + +#define BT_COEX_DISABLE (0x0) +#define BT_COEX_ENABLE  (BT_ENABLE_CHANNEL_ANNOUNCE | BT_ENABLE_PRIORITY) + +#define BT_LEAD_TIME_MIN (0x0) +#define BT_LEAD_TIME_DEF (0x1E) +#define BT_LEAD_TIME_MAX (0xFF) + +#define BT_MAX_KILL_MIN (0x1) +#define BT_MAX_KILL_DEF (0x5) +#define BT_MAX_KILL_MAX (0xFF) + +#define BT_DURATION_LIMIT_DEF	625 +#define BT_DURATION_LIMIT_MAX	1250 +#define BT_DURATION_LIMIT_MIN	625 + +#define BT_ON_THRESHOLD_DEF	4 +#define BT_ON_THRESHOLD_MAX	1000 +#define BT_ON_THRESHOLD_MIN	1 + +#define BT_FRAG_THRESHOLD_DEF	0 +#define BT_FRAG_THRESHOLD_MAX	0 +#define BT_FRAG_THRESHOLD_MIN	0 + +#define BT_AGG_THRESHOLD_DEF	1200 +#define BT_AGG_THRESHOLD_MAX	8000 +#define BT_AGG_THRESHOLD_MIN	400 + +/* + * REPLY_BT_CONFIG = 0x9b (command, has simple generic response) + * + * agn devices support hardware handshake with Bluetooth device on + * same platform.  Bluetooth device alerts wireless device when it will Tx; + * wireless device can delay or kill its own Tx to accommodate. + */ +struct iwl_bt_cmd { +	u8 flags; +	u8 lead_time; +	u8 max_kill; +	u8 reserved; +	__le32 kill_ack_mask; +	__le32 kill_cts_mask; +} __packed; + +#define IWLAGN_BT_FLAG_CHANNEL_INHIBITION	BIT(0) + +#define IWLAGN_BT_FLAG_COEX_MODE_MASK		(BIT(3)|BIT(4)|BIT(5)) +#define IWLAGN_BT_FLAG_COEX_MODE_SHIFT		3 +#define IWLAGN_BT_FLAG_COEX_MODE_DISABLED	0 +#define IWLAGN_BT_FLAG_COEX_MODE_LEGACY_2W	1 +#define IWLAGN_BT_FLAG_COEX_MODE_3W		2 +#define IWLAGN_BT_FLAG_COEX_MODE_4W		3 + +#define IWLAGN_BT_FLAG_UCODE_DEFAULT		BIT(6) +/* Disable Sync PSPoll on SCO/eSCO */ +#define IWLAGN_BT_FLAG_SYNC_2_BT_DISABLE	BIT(7) + +#define IWLAGN_BT_PSP_MIN_RSSI_THRESHOLD	-75 /* dBm */ +#define IWLAGN_BT_PSP_MAX_RSSI_THRESHOLD	-65 /* dBm */ + +#define IWLAGN_BT_PRIO_BOOST_MAX	0xFF +#define IWLAGN_BT_PRIO_BOOST_MIN	0x00 +#define IWLAGN_BT_PRIO_BOOST_DEFAULT	0xF0 +#define IWLAGN_BT_PRIO_BOOST_DEFAULT32	0xF0F0F0F0 + +#define IWLAGN_BT_MAX_KILL_DEFAULT	5 + +#define IWLAGN_BT3_T7_DEFAULT		1 + +enum iwl_bt_kill_idx { +	IWL_BT_KILL_DEFAULT = 0, +	IWL_BT_KILL_OVERRIDE = 1, +	IWL_BT_KILL_REDUCE = 2, +}; + +#define IWLAGN_BT_KILL_ACK_MASK_DEFAULT	cpu_to_le32(0xffff0000) +#define IWLAGN_BT_KILL_CTS_MASK_DEFAULT	cpu_to_le32(0xffff0000) +#define IWLAGN_BT_KILL_ACK_CTS_MASK_SCO	cpu_to_le32(0xffffffff) +#define IWLAGN_BT_KILL_ACK_CTS_MASK_REDUCE	cpu_to_le32(0) + +#define IWLAGN_BT3_PRIO_SAMPLE_DEFAULT	2 + +#define IWLAGN_BT3_T2_DEFAULT		0xc + +#define IWLAGN_BT_VALID_ENABLE_FLAGS	cpu_to_le16(BIT(0)) +#define IWLAGN_BT_VALID_BOOST		cpu_to_le16(BIT(1)) +#define IWLAGN_BT_VALID_MAX_KILL	cpu_to_le16(BIT(2)) +#define IWLAGN_BT_VALID_3W_TIMERS	cpu_to_le16(BIT(3)) +#define IWLAGN_BT_VALID_KILL_ACK_MASK	cpu_to_le16(BIT(4)) +#define IWLAGN_BT_VALID_KILL_CTS_MASK	cpu_to_le16(BIT(5)) +#define IWLAGN_BT_VALID_REDUCED_TX_PWR	cpu_to_le16(BIT(6)) +#define IWLAGN_BT_VALID_3W_LUT		cpu_to_le16(BIT(7)) + +#define IWLAGN_BT_ALL_VALID_MSK		(IWLAGN_BT_VALID_ENABLE_FLAGS | \ +					IWLAGN_BT_VALID_BOOST | \ +					IWLAGN_BT_VALID_MAX_KILL | \ +					IWLAGN_BT_VALID_3W_TIMERS | \ +					IWLAGN_BT_VALID_KILL_ACK_MASK | \ +					IWLAGN_BT_VALID_KILL_CTS_MASK | \ +					IWLAGN_BT_VALID_REDUCED_TX_PWR | \ +					IWLAGN_BT_VALID_3W_LUT) + +#define IWLAGN_BT_REDUCED_TX_PWR	BIT(0) + +#define IWLAGN_BT_DECISION_LUT_SIZE	12 + +struct iwl_basic_bt_cmd { +	u8 flags; +	u8 ledtime; /* unused */ +	u8 max_kill; +	u8 bt3_timer_t7_value; +	__le32 kill_ack_mask; +	__le32 kill_cts_mask; +	u8 bt3_prio_sample_time; +	u8 bt3_timer_t2_value; +	__le16 bt4_reaction_time; /* unused */ +	__le32 bt3_lookup_table[IWLAGN_BT_DECISION_LUT_SIZE]; +	/* +	 * bit 0: use reduced tx power for control frame +	 * bit 1 - 7: reserved +	 */ +	u8 reduce_txpower; +	u8 reserved; +	__le16 valid; +}; + +struct iwl_bt_cmd_v1 { +	struct iwl_basic_bt_cmd basic; +	u8 prio_boost; +	/* +	 * set IWLAGN_BT_VALID_BOOST to "1" in "valid" bitmask +	 * if configure the following patterns +	 */ +	u8 tx_prio_boost;	/* SW boost of WiFi tx priority */ +	__le16 rx_prio_boost;	/* SW boost of WiFi rx priority */ +}; + +struct iwl_bt_cmd_v2 { +	struct iwl_basic_bt_cmd basic; +	__le32 prio_boost; +	/* +	 * set IWLAGN_BT_VALID_BOOST to "1" in "valid" bitmask +	 * if configure the following patterns +	 */ +	u8 reserved; +	u8 tx_prio_boost;	/* SW boost of WiFi tx priority */ +	__le16 rx_prio_boost;	/* SW boost of WiFi rx priority */ +}; + +#define IWLAGN_BT_SCO_ACTIVE	cpu_to_le32(BIT(0)) + +struct iwlagn_bt_sco_cmd { +	__le32 flags; +}; + +/****************************************************************************** + * (6) + * Spectrum Management (802.11h) Commands, Responses, Notifications: + * + *****************************************************************************/ + +/* + * Spectrum Management + */ +#define MEASUREMENT_FILTER_FLAG (RXON_FILTER_PROMISC_MSK         | \ +				 RXON_FILTER_CTL2HOST_MSK        | \ +				 RXON_FILTER_ACCEPT_GRP_MSK      | \ +				 RXON_FILTER_DIS_DECRYPT_MSK     | \ +				 RXON_FILTER_DIS_GRP_DECRYPT_MSK | \ +				 RXON_FILTER_ASSOC_MSK           | \ +				 RXON_FILTER_BCON_AWARE_MSK) + +struct iwl_measure_channel { +	__le32 duration;	/* measurement duration in extended beacon +				 * format */ +	u8 channel;		/* channel to measure */ +	u8 type;		/* see enum iwl_measure_type */ +	__le16 reserved; +} __packed; + +/* + * REPLY_SPECTRUM_MEASUREMENT_CMD = 0x74 (command) + */ +struct iwl_spectrum_cmd { +	__le16 len;		/* number of bytes starting from token */ +	u8 token;		/* token id */ +	u8 id;			/* measurement id -- 0 or 1 */ +	u8 origin;		/* 0 = TGh, 1 = other, 2 = TGk */ +	u8 periodic;		/* 1 = periodic */ +	__le16 path_loss_timeout; +	__le32 start_time;	/* start time in extended beacon format */ +	__le32 reserved2; +	__le32 flags;		/* rxon flags */ +	__le32 filter_flags;	/* rxon filter flags */ +	__le16 channel_count;	/* minimum 1, maximum 10 */ +	__le16 reserved3; +	struct iwl_measure_channel channels[10]; +} __packed; + +/* + * REPLY_SPECTRUM_MEASUREMENT_CMD = 0x74 (response) + */ +struct iwl_spectrum_resp { +	u8 token; +	u8 id;			/* id of the prior command replaced, or 0xff */ +	__le16 status;		/* 0 - command will be handled +				 * 1 - cannot handle (conflicts with another +				 *     measurement) */ +} __packed; + +enum iwl_measurement_state { +	IWL_MEASUREMENT_START = 0, +	IWL_MEASUREMENT_STOP = 1, +}; + +enum iwl_measurement_status { +	IWL_MEASUREMENT_OK = 0, +	IWL_MEASUREMENT_CONCURRENT = 1, +	IWL_MEASUREMENT_CSA_CONFLICT = 2, +	IWL_MEASUREMENT_TGH_CONFLICT = 3, +	/* 4-5 reserved */ +	IWL_MEASUREMENT_STOPPED = 6, +	IWL_MEASUREMENT_TIMEOUT = 7, +	IWL_MEASUREMENT_PERIODIC_FAILED = 8, +}; + +#define NUM_ELEMENTS_IN_HISTOGRAM 8 + +struct iwl_measurement_histogram { +	__le32 ofdm[NUM_ELEMENTS_IN_HISTOGRAM];	/* in 0.8usec counts */ +	__le32 cck[NUM_ELEMENTS_IN_HISTOGRAM];	/* in 1usec counts */ +} __packed; + +/* clear channel availability counters */ +struct iwl_measurement_cca_counters { +	__le32 ofdm; +	__le32 cck; +} __packed; + +enum iwl_measure_type { +	IWL_MEASURE_BASIC = (1 << 0), +	IWL_MEASURE_CHANNEL_LOAD = (1 << 1), +	IWL_MEASURE_HISTOGRAM_RPI = (1 << 2), +	IWL_MEASURE_HISTOGRAM_NOISE = (1 << 3), +	IWL_MEASURE_FRAME = (1 << 4), +	/* bits 5:6 are reserved */ +	IWL_MEASURE_IDLE = (1 << 7), +}; + +/* + * SPECTRUM_MEASURE_NOTIFICATION = 0x75 (notification only, not a command) + */ +struct iwl_spectrum_notification { +	u8 id;			/* measurement id -- 0 or 1 */ +	u8 token; +	u8 channel_index;	/* index in measurement channel list */ +	u8 state;		/* 0 - start, 1 - stop */ +	__le32 start_time;	/* lower 32-bits of TSF */ +	u8 band;		/* 0 - 5.2GHz, 1 - 2.4GHz */ +	u8 channel; +	u8 type;		/* see enum iwl_measurement_type */ +	u8 reserved1; +	/* NOTE:  cca_ofdm, cca_cck, basic_type, and histogram are only only +	 * valid if applicable for measurement type requested. */ +	__le32 cca_ofdm;	/* cca fraction time in 40Mhz clock periods */ +	__le32 cca_cck;		/* cca fraction time in 44Mhz clock periods */ +	__le32 cca_time;	/* channel load time in usecs */ +	u8 basic_type;		/* 0 - bss, 1 - ofdm preamble, 2 - +				 * unidentified */ +	u8 reserved2[3]; +	struct iwl_measurement_histogram histogram; +	__le32 stop_time;	/* lower 32-bits of TSF */ +	__le32 status;		/* see iwl_measurement_status */ +} __packed; + +/****************************************************************************** + * (7) + * Power Management Commands, Responses, Notifications: + * + *****************************************************************************/ + +/** + * struct iwl_powertable_cmd - Power Table Command + * @flags: See below: + * + * POWER_TABLE_CMD = 0x77 (command, has simple generic response) + * + * PM allow: + *   bit 0 - '0' Driver not allow power management + *           '1' Driver allow PM (use rest of parameters) + * + * uCode send sleep notifications: + *   bit 1 - '0' Don't send sleep notification + *           '1' send sleep notification (SEND_PM_NOTIFICATION) + * + * Sleep over DTIM + *   bit 2 - '0' PM have to walk up every DTIM + *           '1' PM could sleep over DTIM till listen Interval. + * + * PCI power managed + *   bit 3 - '0' (PCI_CFG_LINK_CTRL & 0x1) + *           '1' !(PCI_CFG_LINK_CTRL & 0x1) + * + * Fast PD + *   bit 4 - '1' Put radio to sleep when receiving frame for others + * + * Force sleep Modes + *   bit 31/30- '00' use both mac/xtal sleeps + *              '01' force Mac sleep + *              '10' force xtal sleep + *              '11' Illegal set + * + * NOTE: if sleep_interval[SLEEP_INTRVL_TABLE_SIZE-1] > DTIM period then + * ucode assume sleep over DTIM is allowed and we don't need to wake up + * for every DTIM. + */ +#define IWL_POWER_VEC_SIZE 5 + +#define IWL_POWER_DRIVER_ALLOW_SLEEP_MSK	cpu_to_le16(BIT(0)) +#define IWL_POWER_POWER_SAVE_ENA_MSK		cpu_to_le16(BIT(0)) +#define IWL_POWER_POWER_MANAGEMENT_ENA_MSK	cpu_to_le16(BIT(1)) +#define IWL_POWER_SLEEP_OVER_DTIM_MSK		cpu_to_le16(BIT(2)) +#define IWL_POWER_PCI_PM_MSK			cpu_to_le16(BIT(3)) +#define IWL_POWER_FAST_PD			cpu_to_le16(BIT(4)) +#define IWL_POWER_BEACON_FILTERING		cpu_to_le16(BIT(5)) +#define IWL_POWER_SHADOW_REG_ENA		cpu_to_le16(BIT(6)) +#define IWL_POWER_CT_KILL_SET			cpu_to_le16(BIT(7)) +#define IWL_POWER_BT_SCO_ENA			cpu_to_le16(BIT(8)) +#define IWL_POWER_ADVANCE_PM_ENA_MSK		cpu_to_le16(BIT(9)) + +struct iwl_powertable_cmd { +	__le16 flags; +	u8 keep_alive_seconds; +	u8 debug_flags; +	__le32 rx_data_timeout; +	__le32 tx_data_timeout; +	__le32 sleep_interval[IWL_POWER_VEC_SIZE]; +	__le32 keep_alive_beacons; +} __packed; + +/* + * PM_SLEEP_NOTIFICATION = 0x7A (notification only, not a command) + * all devices identical. + */ +struct iwl_sleep_notification { +	u8 pm_sleep_mode; +	u8 pm_wakeup_src; +	__le16 reserved; +	__le32 sleep_time; +	__le32 tsf_low; +	__le32 bcon_timer; +} __packed; + +/* Sleep states.  all devices identical. */ +enum { +	IWL_PM_NO_SLEEP = 0, +	IWL_PM_SLP_MAC = 1, +	IWL_PM_SLP_FULL_MAC_UNASSOCIATE = 2, +	IWL_PM_SLP_FULL_MAC_CARD_STATE = 3, +	IWL_PM_SLP_PHY = 4, +	IWL_PM_SLP_REPENT = 5, +	IWL_PM_WAKEUP_BY_TIMER = 6, +	IWL_PM_WAKEUP_BY_DRIVER = 7, +	IWL_PM_WAKEUP_BY_RFKILL = 8, +	/* 3 reserved */ +	IWL_PM_NUM_OF_MODES = 12, +}; + +/* + * REPLY_CARD_STATE_CMD = 0xa0 (command, has simple generic response) + */ +#define CARD_STATE_CMD_DISABLE 0x00	/* Put card to sleep */ +#define CARD_STATE_CMD_ENABLE  0x01	/* Wake up card */ +#define CARD_STATE_CMD_HALT    0x02	/* Power down permanently */ +struct iwl_card_state_cmd { +	__le32 status;		/* CARD_STATE_CMD_* request new power state */ +} __packed; + +/* + * CARD_STATE_NOTIFICATION = 0xa1 (notification only, not a command) + */ +struct iwl_card_state_notif { +	__le32 flags; +} __packed; + +#define HW_CARD_DISABLED   0x01 +#define SW_CARD_DISABLED   0x02 +#define CT_CARD_DISABLED   0x04 +#define RXON_CARD_DISABLED 0x10 + +struct iwl_ct_kill_config { +	__le32   reserved; +	__le32   critical_temperature_M; +	__le32   critical_temperature_R; +}  __packed; + +/* 1000, and 6x00 */ +struct iwl_ct_kill_throttling_config { +	__le32   critical_temperature_exit; +	__le32   reserved; +	__le32   critical_temperature_enter; +}  __packed; + +/****************************************************************************** + * (8) + * Scan Commands, Responses, Notifications: + * + *****************************************************************************/ + +#define SCAN_CHANNEL_TYPE_PASSIVE cpu_to_le32(0) +#define SCAN_CHANNEL_TYPE_ACTIVE  cpu_to_le32(1) + +/** + * struct iwl_scan_channel - entry in REPLY_SCAN_CMD channel table + * + * One for each channel in the scan list. + * Each channel can independently select: + * 1)  SSID for directed active scans + * 2)  Txpower setting (for rate specified within Tx command) + * 3)  How long to stay on-channel (behavior may be modified by quiet_time, + *     quiet_plcp_th, good_CRC_th) + * + * To avoid uCode errors, make sure the following are true (see comments + * under struct iwl_scan_cmd about max_out_time and quiet_time): + * 1)  If using passive_dwell (i.e. passive_dwell != 0): + *     active_dwell <= passive_dwell (< max_out_time if max_out_time != 0) + * 2)  quiet_time <= active_dwell + * 3)  If restricting off-channel time (i.e. max_out_time !=0): + *     passive_dwell < max_out_time + *     active_dwell < max_out_time + */ + +struct iwl_scan_channel { +	/* +	 * type is defined as: +	 * 0:0 1 = active, 0 = passive +	 * 1:20 SSID direct bit map; if a bit is set, then corresponding +	 *     SSID IE is transmitted in probe request. +	 * 21:31 reserved +	 */ +	__le32 type; +	__le16 channel;	/* band is selected by iwl_scan_cmd "flags" field */ +	u8 tx_gain;		/* gain for analog radio */ +	u8 dsp_atten;		/* gain for DSP */ +	__le16 active_dwell;	/* in 1024-uSec TU (time units), typ 5-50 */ +	__le16 passive_dwell;	/* in 1024-uSec TU (time units), typ 20-500 */ +} __packed; + +/* set number of direct probes __le32 type */ +#define IWL_SCAN_PROBE_MASK(n) 	cpu_to_le32((BIT(n) | (BIT(n) - BIT(1)))) + +/** + * struct iwl_ssid_ie - directed scan network information element + * + * Up to 20 of these may appear in REPLY_SCAN_CMD, + * selected by "type" bit field in struct iwl_scan_channel; + * each channel may select different ssids from among the 20 entries. + * SSID IEs get transmitted in reverse order of entry. + */ +struct iwl_ssid_ie { +	u8 id; +	u8 len; +	u8 ssid[32]; +} __packed; + +#define PROBE_OPTION_MAX		20 +#define TX_CMD_LIFE_TIME_INFINITE	cpu_to_le32(0xFFFFFFFF) +#define IWL_GOOD_CRC_TH_DISABLED	0 +#define IWL_GOOD_CRC_TH_DEFAULT		cpu_to_le16(1) +#define IWL_GOOD_CRC_TH_NEVER		cpu_to_le16(0xffff) +#define IWL_MAX_CMD_SIZE 4096 + +/* + * REPLY_SCAN_CMD = 0x80 (command) + * + * The hardware scan command is very powerful; the driver can set it up to + * maintain (relatively) normal network traffic while doing a scan in the + * background.  The max_out_time and suspend_time control the ratio of how + * long the device stays on an associated network channel ("service channel") + * vs. how long it's away from the service channel, i.e. tuned to other channels + * for scanning. + * + * max_out_time is the max time off-channel (in usec), and suspend_time + * is how long (in "extended beacon" format) that the scan is "suspended" + * after returning to the service channel.  That is, suspend_time is the + * time that we stay on the service channel, doing normal work, between + * scan segments.  The driver may set these parameters differently to support + * scanning when associated vs. not associated, and light vs. heavy traffic + * loads when associated. + * + * After receiving this command, the device's scan engine does the following; + * + * 1)  Sends SCAN_START notification to driver + * 2)  Checks to see if it has time to do scan for one channel + * 3)  Sends NULL packet, with power-save (PS) bit set to 1, + *     to tell AP that we're going off-channel + * 4)  Tunes to first channel in scan list, does active or passive scan + * 5)  Sends SCAN_RESULT notification to driver + * 6)  Checks to see if it has time to do scan on *next* channel in list + * 7)  Repeats 4-6 until it no longer has time to scan the next channel + *     before max_out_time expires + * 8)  Returns to service channel + * 9)  Sends NULL packet with PS=0 to tell AP that we're back + * 10) Stays on service channel until suspend_time expires + * 11) Repeats entire process 2-10 until list is complete + * 12) Sends SCAN_COMPLETE notification + * + * For fast, efficient scans, the scan command also has support for staying on + * a channel for just a short time, if doing active scanning and getting no + * responses to the transmitted probe request.  This time is controlled by + * quiet_time, and the number of received packets below which a channel is + * considered "quiet" is controlled by quiet_plcp_threshold. + * + * For active scanning on channels that have regulatory restrictions against + * blindly transmitting, the scan can listen before transmitting, to make sure + * that there is already legitimate activity on the channel.  If enough + * packets are cleanly received on the channel (controlled by good_CRC_th, + * typical value 1), the scan engine starts transmitting probe requests. + * + * Driver must use separate scan commands for 2.4 vs. 5 GHz bands. + * + * To avoid uCode errors, see timing restrictions described under + * struct iwl_scan_channel. + */ + +enum iwl_scan_flags { +	/* BIT(0) currently unused */ +	IWL_SCAN_FLAGS_ACTION_FRAME_TX	= BIT(1), +	/* bits 2-7 reserved */ +}; + +struct iwl_scan_cmd { +	__le16 len; +	u8 scan_flags;		/* scan flags: see enum iwl_scan_flags */ +	u8 channel_count;	/* # channels in channel list */ +	__le16 quiet_time;	/* dwell only this # millisecs on quiet channel +				 * (only for active scan) */ +	__le16 quiet_plcp_th;	/* quiet chnl is < this # pkts (typ. 1) */ +	__le16 good_CRC_th;	/* passive -> active promotion threshold */ +	__le16 rx_chain;	/* RXON_RX_CHAIN_* */ +	__le32 max_out_time;	/* max usec to be away from associated (service) +				 * channel */ +	__le32 suspend_time;	/* pause scan this long (in "extended beacon +				 * format") when returning to service chnl: +				 */ +	__le32 flags;		/* RXON_FLG_* */ +	__le32 filter_flags;	/* RXON_FILTER_* */ + +	/* For active scans (set to all-0s for passive scans). +	 * Does not include payload.  Must specify Tx rate; no rate scaling. */ +	struct iwl_tx_cmd tx_cmd; + +	/* For directed active scans (set to all-0s otherwise) */ +	struct iwl_ssid_ie direct_scan[PROBE_OPTION_MAX]; + +	/* +	 * Probe request frame, followed by channel list. +	 * +	 * Size of probe request frame is specified by byte count in tx_cmd. +	 * Channel list follows immediately after probe request frame. +	 * Number of channels in list is specified by channel_count. +	 * Each channel in list is of type: +	 * +	 * struct iwl_scan_channel channels[0]; +	 * +	 * NOTE:  Only one band of channels can be scanned per pass.  You +	 * must not mix 2.4GHz channels and 5.2GHz channels, and you must wait +	 * for one scan to complete (i.e. receive SCAN_COMPLETE_NOTIFICATION) +	 * before requesting another scan. +	 */ +	u8 data[0]; +} __packed; + +/* Can abort will notify by complete notification with abort status. */ +#define CAN_ABORT_STATUS	cpu_to_le32(0x1) +/* complete notification statuses */ +#define ABORT_STATUS            0x2 + +/* + * REPLY_SCAN_CMD = 0x80 (response) + */ +struct iwl_scanreq_notification { +	__le32 status;		/* 1: okay, 2: cannot fulfill request */ +} __packed; + +/* + * SCAN_START_NOTIFICATION = 0x82 (notification only, not a command) + */ +struct iwl_scanstart_notification { +	__le32 tsf_low; +	__le32 tsf_high; +	__le32 beacon_timer; +	u8 channel; +	u8 band; +	u8 reserved[2]; +	__le32 status; +} __packed; + +#define  SCAN_OWNER_STATUS 0x1 +#define  MEASURE_OWNER_STATUS 0x2 + +#define IWL_PROBE_STATUS_OK		0 +#define IWL_PROBE_STATUS_TX_FAILED	BIT(0) +/* error statuses combined with TX_FAILED */ +#define IWL_PROBE_STATUS_FAIL_TTL	BIT(1) +#define IWL_PROBE_STATUS_FAIL_BT	BIT(2) + +#define NUMBER_OF_STATISTICS 1	/* first __le32 is good CRC */ +/* + * SCAN_RESULTS_NOTIFICATION = 0x83 (notification only, not a command) + */ +struct iwl_scanresults_notification { +	u8 channel; +	u8 band; +	u8 probe_status; +	u8 num_probe_not_sent; /* not enough time to send */ +	__le32 tsf_low; +	__le32 tsf_high; +	__le32 statistics[NUMBER_OF_STATISTICS]; +} __packed; + +/* + * SCAN_COMPLETE_NOTIFICATION = 0x84 (notification only, not a command) + */ +struct iwl_scancomplete_notification { +	u8 scanned_channels; +	u8 status; +	u8 bt_status;	/* BT On/Off status */ +	u8 last_channel; +	__le32 tsf_low; +	__le32 tsf_high; +} __packed; + + +/****************************************************************************** + * (9) + * IBSS/AP Commands and Notifications: + * + *****************************************************************************/ + +enum iwl_ibss_manager { +	IWL_NOT_IBSS_MANAGER = 0, +	IWL_IBSS_MANAGER = 1, +}; + +/* + * BEACON_NOTIFICATION = 0x90 (notification only, not a command) + */ + +struct iwlagn_beacon_notif { +	struct iwlagn_tx_resp beacon_notify_hdr; +	__le32 low_tsf; +	__le32 high_tsf; +	__le32 ibss_mgr_status; +} __packed; + +/* + * REPLY_TX_BEACON = 0x91 (command, has simple generic response) + */ + +struct iwl_tx_beacon_cmd { +	struct iwl_tx_cmd tx; +	__le16 tim_idx; +	u8 tim_size; +	u8 reserved1; +	struct ieee80211_hdr frame[0];	/* beacon frame */ +} __packed; + +/****************************************************************************** + * (10) + * Statistics Commands and Notifications: + * + *****************************************************************************/ + +#define IWL_TEMP_CONVERT 260 + +#define SUP_RATE_11A_MAX_NUM_CHANNELS  8 +#define SUP_RATE_11B_MAX_NUM_CHANNELS  4 +#define SUP_RATE_11G_MAX_NUM_CHANNELS  12 + +/* Used for passing to driver number of successes and failures per rate */ +struct rate_histogram { +	union { +		__le32 a[SUP_RATE_11A_MAX_NUM_CHANNELS]; +		__le32 b[SUP_RATE_11B_MAX_NUM_CHANNELS]; +		__le32 g[SUP_RATE_11G_MAX_NUM_CHANNELS]; +	} success; +	union { +		__le32 a[SUP_RATE_11A_MAX_NUM_CHANNELS]; +		__le32 b[SUP_RATE_11B_MAX_NUM_CHANNELS]; +		__le32 g[SUP_RATE_11G_MAX_NUM_CHANNELS]; +	} failed; +} __packed; + +/* statistics command response */ + +struct statistics_dbg { +	__le32 burst_check; +	__le32 burst_count; +	__le32 wait_for_silence_timeout_cnt; +	__le32 reserved[3]; +} __packed; + +struct statistics_rx_phy { +	__le32 ina_cnt; +	__le32 fina_cnt; +	__le32 plcp_err; +	__le32 crc32_err; +	__le32 overrun_err; +	__le32 early_overrun_err; +	__le32 crc32_good; +	__le32 false_alarm_cnt; +	__le32 fina_sync_err_cnt; +	__le32 sfd_timeout; +	__le32 fina_timeout; +	__le32 unresponded_rts; +	__le32 rxe_frame_limit_overrun; +	__le32 sent_ack_cnt; +	__le32 sent_cts_cnt; +	__le32 sent_ba_rsp_cnt; +	__le32 dsp_self_kill; +	__le32 mh_format_err; +	__le32 re_acq_main_rssi_sum; +	__le32 reserved3; +} __packed; + +struct statistics_rx_ht_phy { +	__le32 plcp_err; +	__le32 overrun_err; +	__le32 early_overrun_err; +	__le32 crc32_good; +	__le32 crc32_err; +	__le32 mh_format_err; +	__le32 agg_crc32_good; +	__le32 agg_mpdu_cnt; +	__le32 agg_cnt; +	__le32 unsupport_mcs; +} __packed; + +#define INTERFERENCE_DATA_AVAILABLE      cpu_to_le32(1) + +struct statistics_rx_non_phy { +	__le32 bogus_cts;	/* CTS received when not expecting CTS */ +	__le32 bogus_ack;	/* ACK received when not expecting ACK */ +	__le32 non_bssid_frames;	/* number of frames with BSSID that +					 * doesn't belong to the STA BSSID */ +	__le32 filtered_frames;	/* count frames that were dumped in the +				 * filtering process */ +	__le32 non_channel_beacons;	/* beacons with our bss id but not on +					 * our serving channel */ +	__le32 channel_beacons;	/* beacons with our bss id and in our +				 * serving channel */ +	__le32 num_missed_bcon;	/* number of missed beacons */ +	__le32 adc_rx_saturation_time;	/* count in 0.8us units the time the +					 * ADC was in saturation */ +	__le32 ina_detection_search_time;/* total time (in 0.8us) searched +					  * for INA */ +	__le32 beacon_silence_rssi_a;	/* RSSI silence after beacon frame */ +	__le32 beacon_silence_rssi_b;	/* RSSI silence after beacon frame */ +	__le32 beacon_silence_rssi_c;	/* RSSI silence after beacon frame */ +	__le32 interference_data_flag;	/* flag for interference data +					 * availability. 1 when data is +					 * available. */ +	__le32 channel_load;		/* counts RX Enable time in uSec */ +	__le32 dsp_false_alarms;	/* DSP false alarm (both OFDM +					 * and CCK) counter */ +	__le32 beacon_rssi_a; +	__le32 beacon_rssi_b; +	__le32 beacon_rssi_c; +	__le32 beacon_energy_a; +	__le32 beacon_energy_b; +	__le32 beacon_energy_c; +} __packed; + +struct statistics_rx_non_phy_bt { +	struct statistics_rx_non_phy common; +	/* additional stats for bt */ +	__le32 num_bt_kills; +	__le32 reserved[2]; +} __packed; + +struct statistics_rx { +	struct statistics_rx_phy ofdm; +	struct statistics_rx_phy cck; +	struct statistics_rx_non_phy general; +	struct statistics_rx_ht_phy ofdm_ht; +} __packed; + +struct statistics_rx_bt { +	struct statistics_rx_phy ofdm; +	struct statistics_rx_phy cck; +	struct statistics_rx_non_phy_bt general; +	struct statistics_rx_ht_phy ofdm_ht; +} __packed; + +/** + * struct statistics_tx_power - current tx power + * + * @ant_a: current tx power on chain a in 1/2 dB step + * @ant_b: current tx power on chain b in 1/2 dB step + * @ant_c: current tx power on chain c in 1/2 dB step + */ +struct statistics_tx_power { +	u8 ant_a; +	u8 ant_b; +	u8 ant_c; +	u8 reserved; +} __packed; + +struct statistics_tx_non_phy_agg { +	__le32 ba_timeout; +	__le32 ba_reschedule_frames; +	__le32 scd_query_agg_frame_cnt; +	__le32 scd_query_no_agg; +	__le32 scd_query_agg; +	__le32 scd_query_mismatch; +	__le32 frame_not_ready; +	__le32 underrun; +	__le32 bt_prio_kill; +	__le32 rx_ba_rsp_cnt; +} __packed; + +struct statistics_tx { +	__le32 preamble_cnt; +	__le32 rx_detected_cnt; +	__le32 bt_prio_defer_cnt; +	__le32 bt_prio_kill_cnt; +	__le32 few_bytes_cnt; +	__le32 cts_timeout; +	__le32 ack_timeout; +	__le32 expected_ack_cnt; +	__le32 actual_ack_cnt; +	__le32 dump_msdu_cnt; +	__le32 burst_abort_next_frame_mismatch_cnt; +	__le32 burst_abort_missing_next_frame_cnt; +	__le32 cts_timeout_collision; +	__le32 ack_or_ba_timeout_collision; +	struct statistics_tx_non_phy_agg agg; +	/* +	 * "tx_power" are optional parameters provided by uCode, +	 * 6000 series is the only device provide the information, +	 * Those are reserved fields for all the other devices +	 */ +	struct statistics_tx_power tx_power; +	__le32 reserved1; +} __packed; + + +struct statistics_div { +	__le32 tx_on_a; +	__le32 tx_on_b; +	__le32 exec_time; +	__le32 probe_time; +	__le32 reserved1; +	__le32 reserved2; +} __packed; + +struct statistics_general_common { +	__le32 temperature;   /* radio temperature */ +	__le32 temperature_m; /* radio voltage */ +	struct statistics_dbg dbg; +	__le32 sleep_time; +	__le32 slots_out; +	__le32 slots_idle; +	__le32 ttl_timestamp; +	struct statistics_div div; +	__le32 rx_enable_counter; +	/* +	 * num_of_sos_states: +	 *  count the number of times we have to re-tune +	 *  in order to get out of bad PHY status +	 */ +	__le32 num_of_sos_states; +} __packed; + +struct statistics_bt_activity { +	/* Tx statistics */ +	__le32 hi_priority_tx_req_cnt; +	__le32 hi_priority_tx_denied_cnt; +	__le32 lo_priority_tx_req_cnt; +	__le32 lo_priority_tx_denied_cnt; +	/* Rx statistics */ +	__le32 hi_priority_rx_req_cnt; +	__le32 hi_priority_rx_denied_cnt; +	__le32 lo_priority_rx_req_cnt; +	__le32 lo_priority_rx_denied_cnt; +} __packed; + +struct statistics_general { +	struct statistics_general_common common; +	__le32 reserved2; +	__le32 reserved3; +} __packed; + +struct statistics_general_bt { +	struct statistics_general_common common; +	struct statistics_bt_activity activity; +	__le32 reserved2; +	__le32 reserved3; +} __packed; + +#define UCODE_STATISTICS_CLEAR_MSK		(0x1 << 0) +#define UCODE_STATISTICS_FREQUENCY_MSK		(0x1 << 1) +#define UCODE_STATISTICS_NARROW_BAND_MSK	(0x1 << 2) + +/* + * REPLY_STATISTICS_CMD = 0x9c, + * all devices identical. + * + * This command triggers an immediate response containing uCode statistics. + * The response is in the same format as STATISTICS_NOTIFICATION 0x9d, below. + * + * If the CLEAR_STATS configuration flag is set, uCode will clear its + * internal copy of the statistics (counters) after issuing the response. + * This flag does not affect STATISTICS_NOTIFICATIONs after beacons (see below). + * + * If the DISABLE_NOTIF configuration flag is set, uCode will not issue + * STATISTICS_NOTIFICATIONs after received beacons (see below).  This flag + * does not affect the response to the REPLY_STATISTICS_CMD 0x9c itself. + */ +#define IWL_STATS_CONF_CLEAR_STATS cpu_to_le32(0x1)	/* see above */ +#define IWL_STATS_CONF_DISABLE_NOTIF cpu_to_le32(0x2)/* see above */ +struct iwl_statistics_cmd { +	__le32 configuration_flags;	/* IWL_STATS_CONF_* */ +} __packed; + +/* + * STATISTICS_NOTIFICATION = 0x9d (notification only, not a command) + * + * By default, uCode issues this notification after receiving a beacon + * while associated.  To disable this behavior, set DISABLE_NOTIF flag in the + * REPLY_STATISTICS_CMD 0x9c, above. + * + * Statistics counters continue to increment beacon after beacon, but are + * cleared when changing channels or when driver issues REPLY_STATISTICS_CMD + * 0x9c with CLEAR_STATS bit set (see above). + * + * uCode also issues this notification during scans.  uCode clears statistics + * appropriately so that each notification contains statistics for only the + * one channel that has just been scanned. + */ +#define STATISTICS_REPLY_FLG_BAND_24G_MSK         cpu_to_le32(0x2) +#define STATISTICS_REPLY_FLG_HT40_MODE_MSK        cpu_to_le32(0x8) + +struct iwl_notif_statistics { +	__le32 flag; +	struct statistics_rx rx; +	struct statistics_tx tx; +	struct statistics_general general; +} __packed; + +struct iwl_bt_notif_statistics { +	__le32 flag; +	struct statistics_rx_bt rx; +	struct statistics_tx tx; +	struct statistics_general_bt general; +} __packed; + +/* + * MISSED_BEACONS_NOTIFICATION = 0xa2 (notification only, not a command) + * + * uCode send MISSED_BEACONS_NOTIFICATION to driver when detect beacon missed + * in regardless of how many missed beacons, which mean when driver receive the + * notification, inside the command, it can find all the beacons information + * which include number of total missed beacons, number of consecutive missed + * beacons, number of beacons received and number of beacons expected to + * receive. + * + * If uCode detected consecutive_missed_beacons > 5, it will reset the radio + * in order to bring the radio/PHY back to working state; which has no relation + * to when driver will perform sensitivity calibration. + * + * Driver should set it own missed_beacon_threshold to decide when to perform + * sensitivity calibration based on number of consecutive missed beacons in + * order to improve overall performance, especially in noisy environment. + * + */ + +#define IWL_MISSED_BEACON_THRESHOLD_MIN	(1) +#define IWL_MISSED_BEACON_THRESHOLD_DEF	(5) +#define IWL_MISSED_BEACON_THRESHOLD_MAX	IWL_MISSED_BEACON_THRESHOLD_DEF + +struct iwl_missed_beacon_notif { +	__le32 consecutive_missed_beacons; +	__le32 total_missed_becons; +	__le32 num_expected_beacons; +	__le32 num_recvd_beacons; +} __packed; + + +/****************************************************************************** + * (11) + * Rx Calibration Commands: + * + * With the uCode used for open source drivers, most Tx calibration (except + * for Tx Power) and most Rx calibration is done by uCode during the + * "initialize" phase of uCode boot.  Driver must calibrate only: + * + * 1)  Tx power (depends on temperature), described elsewhere + * 2)  Receiver gain balance (optimize MIMO, and detect disconnected antennas) + * 3)  Receiver sensitivity (to optimize signal detection) + * + *****************************************************************************/ + +/** + * SENSITIVITY_CMD = 0xa8 (command, has simple generic response) + * + * This command sets up the Rx signal detector for a sensitivity level that + * is high enough to lock onto all signals within the associated network, + * but low enough to ignore signals that are below a certain threshold, so as + * not to have too many "false alarms".  False alarms are signals that the + * Rx DSP tries to lock onto, but then discards after determining that they + * are noise. + * + * The optimum number of false alarms is between 5 and 50 per 200 TUs + * (200 * 1024 uSecs, i.e. 204.8 milliseconds) of actual Rx time (i.e. + * time listening, not transmitting).  Driver must adjust sensitivity so that + * the ratio of actual false alarms to actual Rx time falls within this range. + * + * While associated, uCode delivers STATISTICS_NOTIFICATIONs after each + * received beacon.  These provide information to the driver to analyze the + * sensitivity.  Don't analyze statistics that come in from scanning, or any + * other non-associated-network source.  Pertinent statistics include: + * + * From "general" statistics (struct statistics_rx_non_phy): + * + * (beacon_energy_[abc] & 0x0FF00) >> 8 (unsigned, higher value is lower level) + *   Measure of energy of desired signal.  Used for establishing a level + *   below which the device does not detect signals. + * + * (beacon_silence_rssi_[abc] & 0x0FF00) >> 8 (unsigned, units in dB) + *   Measure of background noise in silent period after beacon. + * + * channel_load + *   uSecs of actual Rx time during beacon period (varies according to + *   how much time was spent transmitting). + * + * From "cck" and "ofdm" statistics (struct statistics_rx_phy), separately: + * + * false_alarm_cnt + *   Signal locks abandoned early (before phy-level header). + * + * plcp_err + *   Signal locks abandoned late (during phy-level header). + * + * NOTE:  Both false_alarm_cnt and plcp_err increment monotonically from + *        beacon to beacon, i.e. each value is an accumulation of all errors + *        before and including the latest beacon.  Values will wrap around to 0 + *        after counting up to 2^32 - 1.  Driver must differentiate vs. + *        previous beacon's values to determine # false alarms in the current + *        beacon period. + * + * Total number of false alarms = false_alarms + plcp_errs + * + * For OFDM, adjust the following table entries in struct iwl_sensitivity_cmd + * (notice that the start points for OFDM are at or close to settings for + * maximum sensitivity): + * + *                                             START  /  MIN  /  MAX + *   HD_AUTO_CORR32_X1_TH_ADD_MIN_INDEX          90   /   85  /  120 + *   HD_AUTO_CORR32_X1_TH_ADD_MIN_MRC_INDEX     170   /  170  /  210 + *   HD_AUTO_CORR32_X4_TH_ADD_MIN_INDEX         105   /  105  /  140 + *   HD_AUTO_CORR32_X4_TH_ADD_MIN_MRC_INDEX     220   /  220  /  270 + * + *   If actual rate of OFDM false alarms (+ plcp_errors) is too high + *   (greater than 50 for each 204.8 msecs listening), reduce sensitivity + *   by *adding* 1 to all 4 of the table entries above, up to the max for + *   each entry.  Conversely, if false alarm rate is too low (less than 5 + *   for each 204.8 msecs listening), *subtract* 1 from each entry to + *   increase sensitivity. + * + * For CCK sensitivity, keep track of the following: + * + *   1).  20-beacon history of maximum background noise, indicated by + *        (beacon_silence_rssi_[abc] & 0x0FF00), units in dB, across the + *        3 receivers.  For any given beacon, the "silence reference" is + *        the maximum of last 60 samples (20 beacons * 3 receivers). + * + *   2).  10-beacon history of strongest signal level, as indicated + *        by (beacon_energy_[abc] & 0x0FF00) >> 8, across the 3 receivers, + *        i.e. the strength of the signal through the best receiver at the + *        moment.  These measurements are "upside down", with lower values + *        for stronger signals, so max energy will be *minimum* value. + * + *        Then for any given beacon, the driver must determine the *weakest* + *        of the strongest signals; this is the minimum level that needs to be + *        successfully detected, when using the best receiver at the moment. + *        "Max cck energy" is the maximum (higher value means lower energy!) + *        of the last 10 minima.  Once this is determined, driver must add + *        a little margin by adding "6" to it. + * + *   3).  Number of consecutive beacon periods with too few false alarms. + *        Reset this to 0 at the first beacon period that falls within the + *        "good" range (5 to 50 false alarms per 204.8 milliseconds rx). + * + * Then, adjust the following CCK table entries in struct iwl_sensitivity_cmd + * (notice that the start points for CCK are at maximum sensitivity): + * + *                                             START  /  MIN  /  MAX + *   HD_AUTO_CORR40_X4_TH_ADD_MIN_INDEX         125   /  125  /  200 + *   HD_AUTO_CORR40_X4_TH_ADD_MIN_MRC_INDEX     200   /  200  /  400 + *   HD_MIN_ENERGY_CCK_DET_INDEX                100   /    0  /  100 + * + *   If actual rate of CCK false alarms (+ plcp_errors) is too high + *   (greater than 50 for each 204.8 msecs listening), method for reducing + *   sensitivity is: + * + *   1)  *Add* 3 to value in HD_AUTO_CORR40_X4_TH_ADD_MIN_MRC_INDEX, + *       up to max 400. + * + *   2)  If current value in HD_AUTO_CORR40_X4_TH_ADD_MIN_INDEX is < 160, + *       sensitivity has been reduced a significant amount; bring it up to + *       a moderate 161.  Otherwise, *add* 3, up to max 200. + * + *   3)  a)  If current value in HD_AUTO_CORR40_X4_TH_ADD_MIN_INDEX is > 160, + *       sensitivity has been reduced only a moderate or small amount; + *       *subtract* 2 from value in HD_MIN_ENERGY_CCK_DET_INDEX, + *       down to min 0.  Otherwise (if gain has been significantly reduced), + *       don't change the HD_MIN_ENERGY_CCK_DET_INDEX value. + * + *       b)  Save a snapshot of the "silence reference". + * + *   If actual rate of CCK false alarms (+ plcp_errors) is too low + *   (less than 5 for each 204.8 msecs listening), method for increasing + *   sensitivity is used only if: + * + *   1a)  Previous beacon did not have too many false alarms + *   1b)  AND difference between previous "silence reference" and current + *        "silence reference" (prev - current) is 2 or more, + *   OR 2)  100 or more consecutive beacon periods have had rate of + *          less than 5 false alarms per 204.8 milliseconds rx time. + * + *   Method for increasing sensitivity: + * + *   1)  *Subtract* 3 from value in HD_AUTO_CORR40_X4_TH_ADD_MIN_INDEX, + *       down to min 125. + * + *   2)  *Subtract* 3 from value in HD_AUTO_CORR40_X4_TH_ADD_MIN_MRC_INDEX, + *       down to min 200. + * + *   3)  *Add* 2 to value in HD_MIN_ENERGY_CCK_DET_INDEX, up to max 100. + * + *   If actual rate of CCK false alarms (+ plcp_errors) is within good range + *   (between 5 and 50 for each 204.8 msecs listening): + * + *   1)  Save a snapshot of the silence reference. + * + *   2)  If previous beacon had too many CCK false alarms (+ plcp_errors), + *       give some extra margin to energy threshold by *subtracting* 8 + *       from value in HD_MIN_ENERGY_CCK_DET_INDEX. + * + *   For all cases (too few, too many, good range), make sure that the CCK + *   detection threshold (energy) is below the energy level for robust + *   detection over the past 10 beacon periods, the "Max cck energy". + *   Lower values mean higher energy; this means making sure that the value + *   in HD_MIN_ENERGY_CCK_DET_INDEX is at or *above* "Max cck energy". + * + */ + +/* + * Table entries in SENSITIVITY_CMD (struct iwl_sensitivity_cmd) + */ +#define HD_TABLE_SIZE  (11)	/* number of entries */ +#define HD_MIN_ENERGY_CCK_DET_INDEX                 (0)	/* table indexes */ +#define HD_MIN_ENERGY_OFDM_DET_INDEX                (1) +#define HD_AUTO_CORR32_X1_TH_ADD_MIN_INDEX          (2) +#define HD_AUTO_CORR32_X1_TH_ADD_MIN_MRC_INDEX      (3) +#define HD_AUTO_CORR40_X4_TH_ADD_MIN_MRC_INDEX      (4) +#define HD_AUTO_CORR32_X4_TH_ADD_MIN_INDEX          (5) +#define HD_AUTO_CORR32_X4_TH_ADD_MIN_MRC_INDEX      (6) +#define HD_BARKER_CORR_TH_ADD_MIN_INDEX             (7) +#define HD_BARKER_CORR_TH_ADD_MIN_MRC_INDEX         (8) +#define HD_AUTO_CORR40_X4_TH_ADD_MIN_INDEX          (9) +#define HD_OFDM_ENERGY_TH_IN_INDEX                  (10) + +/* + * Additional table entries in enhance SENSITIVITY_CMD + */ +#define HD_INA_NON_SQUARE_DET_OFDM_INDEX		(11) +#define HD_INA_NON_SQUARE_DET_CCK_INDEX			(12) +#define HD_CORR_11_INSTEAD_OF_CORR_9_EN_INDEX		(13) +#define HD_OFDM_NON_SQUARE_DET_SLOPE_MRC_INDEX		(14) +#define HD_OFDM_NON_SQUARE_DET_INTERCEPT_MRC_INDEX	(15) +#define HD_OFDM_NON_SQUARE_DET_SLOPE_INDEX		(16) +#define HD_OFDM_NON_SQUARE_DET_INTERCEPT_INDEX		(17) +#define HD_CCK_NON_SQUARE_DET_SLOPE_MRC_INDEX		(18) +#define HD_CCK_NON_SQUARE_DET_INTERCEPT_MRC_INDEX	(19) +#define HD_CCK_NON_SQUARE_DET_SLOPE_INDEX		(20) +#define HD_CCK_NON_SQUARE_DET_INTERCEPT_INDEX		(21) +#define HD_RESERVED					(22) + +/* number of entries for enhanced tbl */ +#define ENHANCE_HD_TABLE_SIZE  (23) + +/* number of additional entries for enhanced tbl */ +#define ENHANCE_HD_TABLE_ENTRIES  (ENHANCE_HD_TABLE_SIZE - HD_TABLE_SIZE) + +#define HD_INA_NON_SQUARE_DET_OFDM_DATA_V1		cpu_to_le16(0) +#define HD_INA_NON_SQUARE_DET_CCK_DATA_V1		cpu_to_le16(0) +#define HD_CORR_11_INSTEAD_OF_CORR_9_EN_DATA_V1		cpu_to_le16(0) +#define HD_OFDM_NON_SQUARE_DET_SLOPE_MRC_DATA_V1	cpu_to_le16(668) +#define HD_OFDM_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V1	cpu_to_le16(4) +#define HD_OFDM_NON_SQUARE_DET_SLOPE_DATA_V1		cpu_to_le16(486) +#define HD_OFDM_NON_SQUARE_DET_INTERCEPT_DATA_V1	cpu_to_le16(37) +#define HD_CCK_NON_SQUARE_DET_SLOPE_MRC_DATA_V1		cpu_to_le16(853) +#define HD_CCK_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V1	cpu_to_le16(4) +#define HD_CCK_NON_SQUARE_DET_SLOPE_DATA_V1		cpu_to_le16(476) +#define HD_CCK_NON_SQUARE_DET_INTERCEPT_DATA_V1		cpu_to_le16(99) + +#define HD_INA_NON_SQUARE_DET_OFDM_DATA_V2		cpu_to_le16(1) +#define HD_INA_NON_SQUARE_DET_CCK_DATA_V2		cpu_to_le16(1) +#define HD_CORR_11_INSTEAD_OF_CORR_9_EN_DATA_V2		cpu_to_le16(1) +#define HD_OFDM_NON_SQUARE_DET_SLOPE_MRC_DATA_V2	cpu_to_le16(600) +#define HD_OFDM_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V2	cpu_to_le16(40) +#define HD_OFDM_NON_SQUARE_DET_SLOPE_DATA_V2		cpu_to_le16(486) +#define HD_OFDM_NON_SQUARE_DET_INTERCEPT_DATA_V2	cpu_to_le16(45) +#define HD_CCK_NON_SQUARE_DET_SLOPE_MRC_DATA_V2		cpu_to_le16(853) +#define HD_CCK_NON_SQUARE_DET_INTERCEPT_MRC_DATA_V2	cpu_to_le16(60) +#define HD_CCK_NON_SQUARE_DET_SLOPE_DATA_V2		cpu_to_le16(476) +#define HD_CCK_NON_SQUARE_DET_INTERCEPT_DATA_V2		cpu_to_le16(99) + + +/* Control field in struct iwl_sensitivity_cmd */ +#define SENSITIVITY_CMD_CONTROL_DEFAULT_TABLE	cpu_to_le16(0) +#define SENSITIVITY_CMD_CONTROL_WORK_TABLE	cpu_to_le16(1) + +/** + * struct iwl_sensitivity_cmd + * @control:  (1) updates working table, (0) updates default table + * @table:  energy threshold values, use HD_* as index into table + * + * Always use "1" in "control" to update uCode's working table and DSP. + */ +struct iwl_sensitivity_cmd { +	__le16 control;			/* always use "1" */ +	__le16 table[HD_TABLE_SIZE];	/* use HD_* as index */ +} __packed; + +/* + * + */ +struct iwl_enhance_sensitivity_cmd { +	__le16 control;			/* always use "1" */ +	__le16 enhance_table[ENHANCE_HD_TABLE_SIZE];	/* use HD_* as index */ +} __packed; + + +/** + * REPLY_PHY_CALIBRATION_CMD = 0xb0 (command, has simple generic response) + * + * This command sets the relative gains of agn device's 3 radio receiver chains. + * + * After the first association, driver should accumulate signal and noise + * statistics from the STATISTICS_NOTIFICATIONs that follow the first 20 + * beacons from the associated network (don't collect statistics that come + * in from scanning, or any other non-network source). + * + * DISCONNECTED ANTENNA: + * + * Driver should determine which antennas are actually connected, by comparing + * average beacon signal levels for the 3 Rx chains.  Accumulate (add) the + * following values over 20 beacons, one accumulator for each of the chains + * a/b/c, from struct statistics_rx_non_phy: + * + * beacon_rssi_[abc] & 0x0FF (unsigned, units in dB) + * + * Find the strongest signal from among a/b/c.  Compare the other two to the + * strongest.  If any signal is more than 15 dB (times 20, unless you + * divide the accumulated values by 20) below the strongest, the driver + * considers that antenna to be disconnected, and should not try to use that + * antenna/chain for Rx or Tx.  If both A and B seem to be disconnected, + * driver should declare the stronger one as connected, and attempt to use it + * (A and B are the only 2 Tx chains!). + * + * + * RX BALANCE: + * + * Driver should balance the 3 receivers (but just the ones that are connected + * to antennas, see above) for gain, by comparing the average signal levels + * detected during the silence after each beacon (background noise). + * Accumulate (add) the following values over 20 beacons, one accumulator for + * each of the chains a/b/c, from struct statistics_rx_non_phy: + * + * beacon_silence_rssi_[abc] & 0x0FF (unsigned, units in dB) + * + * Find the weakest background noise level from among a/b/c.  This Rx chain + * will be the reference, with 0 gain adjustment.  Attenuate other channels by + * finding noise difference: + * + * (accum_noise[i] - accum_noise[reference]) / 30 + * + * The "30" adjusts the dB in the 20 accumulated samples to units of 1.5 dB. + * For use in diff_gain_[abc] fields of struct iwl_calibration_cmd, the + * driver should limit the difference results to a range of 0-3 (0-4.5 dB), + * and set bit 2 to indicate "reduce gain".  The value for the reference + * (weakest) chain should be "0". + * + * diff_gain_[abc] bit fields: + *   2: (1) reduce gain, (0) increase gain + * 1-0: amount of gain, units of 1.5 dB + */ + +/* Phy calibration command for series */ +enum { +	IWL_PHY_CALIBRATE_DC_CMD		= 8, +	IWL_PHY_CALIBRATE_LO_CMD		= 9, +	IWL_PHY_CALIBRATE_TX_IQ_CMD		= 11, +	IWL_PHY_CALIBRATE_CRYSTAL_FRQ_CMD	= 15, +	IWL_PHY_CALIBRATE_BASE_BAND_CMD		= 16, +	IWL_PHY_CALIBRATE_TX_IQ_PERD_CMD	= 17, +	IWL_PHY_CALIBRATE_TEMP_OFFSET_CMD	= 18, +}; + +/* This enum defines the bitmap of various calibrations to enable in both + * init ucode and runtime ucode through CALIBRATION_CFG_CMD. + */ +enum iwl_ucode_calib_cfg { +	IWL_CALIB_CFG_RX_BB_IDX			= BIT(0), +	IWL_CALIB_CFG_DC_IDX			= BIT(1), +	IWL_CALIB_CFG_LO_IDX			= BIT(2), +	IWL_CALIB_CFG_TX_IQ_IDX			= BIT(3), +	IWL_CALIB_CFG_RX_IQ_IDX			= BIT(4), +	IWL_CALIB_CFG_NOISE_IDX			= BIT(5), +	IWL_CALIB_CFG_CRYSTAL_IDX		= BIT(6), +	IWL_CALIB_CFG_TEMPERATURE_IDX		= BIT(7), +	IWL_CALIB_CFG_PAPD_IDX			= BIT(8), +	IWL_CALIB_CFG_SENSITIVITY_IDX		= BIT(9), +	IWL_CALIB_CFG_TX_PWR_IDX		= BIT(10), +}; + +#define IWL_CALIB_INIT_CFG_ALL	cpu_to_le32(IWL_CALIB_CFG_RX_BB_IDX |	\ +					IWL_CALIB_CFG_DC_IDX |		\ +					IWL_CALIB_CFG_LO_IDX |		\ +					IWL_CALIB_CFG_TX_IQ_IDX |	\ +					IWL_CALIB_CFG_RX_IQ_IDX |	\ +					IWL_CALIB_CFG_CRYSTAL_IDX) + +#define IWL_CALIB_RT_CFG_ALL	cpu_to_le32(IWL_CALIB_CFG_RX_BB_IDX |	\ +					IWL_CALIB_CFG_DC_IDX |		\ +					IWL_CALIB_CFG_LO_IDX |		\ +					IWL_CALIB_CFG_TX_IQ_IDX |	\ +					IWL_CALIB_CFG_RX_IQ_IDX |	\ +					IWL_CALIB_CFG_TEMPERATURE_IDX |	\ +					IWL_CALIB_CFG_PAPD_IDX |	\ +					IWL_CALIB_CFG_TX_PWR_IDX |	\ +					IWL_CALIB_CFG_CRYSTAL_IDX) + +#define IWL_CALIB_CFG_FLAG_SEND_COMPLETE_NTFY_MSK	cpu_to_le32(BIT(0)) + +struct iwl_calib_cfg_elmnt_s { +	__le32 is_enable; +	__le32 start; +	__le32 send_res; +	__le32 apply_res; +	__le32 reserved; +} __packed; + +struct iwl_calib_cfg_status_s { +	struct iwl_calib_cfg_elmnt_s once; +	struct iwl_calib_cfg_elmnt_s perd; +	__le32 flags; +} __packed; + +struct iwl_calib_cfg_cmd { +	struct iwl_calib_cfg_status_s ucd_calib_cfg; +	struct iwl_calib_cfg_status_s drv_calib_cfg; +	__le32 reserved1; +} __packed; + +struct iwl_calib_hdr { +	u8 op_code; +	u8 first_group; +	u8 groups_num; +	u8 data_valid; +} __packed; + +struct iwl_calib_cmd { +	struct iwl_calib_hdr hdr; +	u8 data[0]; +} __packed; + +struct iwl_calib_xtal_freq_cmd { +	struct iwl_calib_hdr hdr; +	u8 cap_pin1; +	u8 cap_pin2; +	u8 pad[2]; +} __packed; + +#define DEFAULT_RADIO_SENSOR_OFFSET    cpu_to_le16(2700) +struct iwl_calib_temperature_offset_cmd { +	struct iwl_calib_hdr hdr; +	__le16 radio_sensor_offset; +	__le16 reserved; +} __packed; + +struct iwl_calib_temperature_offset_v2_cmd { +	struct iwl_calib_hdr hdr; +	__le16 radio_sensor_offset_high; +	__le16 radio_sensor_offset_low; +	__le16 burntVoltageRef; +	__le16 reserved; +} __packed; + +/* IWL_PHY_CALIBRATE_CHAIN_NOISE_RESET_CMD */ +struct iwl_calib_chain_noise_reset_cmd { +	struct iwl_calib_hdr hdr; +	u8 data[0]; +}; + +/* IWL_PHY_CALIBRATE_CHAIN_NOISE_GAIN_CMD */ +struct iwl_calib_chain_noise_gain_cmd { +	struct iwl_calib_hdr hdr; +	u8 delta_gain_1; +	u8 delta_gain_2; +	u8 pad[2]; +} __packed; + +/****************************************************************************** + * (12) + * Miscellaneous Commands: + * + *****************************************************************************/ + +/* + * LEDs Command & Response + * REPLY_LEDS_CMD = 0x48 (command, has simple generic response) + * + * For each of 3 possible LEDs (Activity/Link/Tech, selected by "id" field), + * this command turns it on or off, or sets up a periodic blinking cycle. + */ +struct iwl_led_cmd { +	__le32 interval;	/* "interval" in uSec */ +	u8 id;			/* 1: Activity, 2: Link, 3: Tech */ +	u8 off;			/* # intervals off while blinking; +				 * "0", with >0 "on" value, turns LED on */ +	u8 on;			/* # intervals on while blinking; +				 * "0", regardless of "off", turns LED off */ +	u8 reserved; +} __packed; + +/* + * station priority table entries + * also used as potential "events" value for both + * COEX_MEDIUM_NOTIFICATION and COEX_EVENT_CMD + */ + +/* + * COEX events entry flag masks + * RP - Requested Priority + * WP - Win Medium Priority: priority assigned when the contention has been won + */ +#define COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG        (0x1) +#define COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG        (0x2) +#define COEX_EVT_FLAG_DELAY_MEDIUM_FREE_NTFY_FLG  (0x4) + +#define COEX_CU_UNASSOC_IDLE_RP               4 +#define COEX_CU_UNASSOC_MANUAL_SCAN_RP        4 +#define COEX_CU_UNASSOC_AUTO_SCAN_RP          4 +#define COEX_CU_CALIBRATION_RP                4 +#define COEX_CU_PERIODIC_CALIBRATION_RP       4 +#define COEX_CU_CONNECTION_ESTAB_RP           4 +#define COEX_CU_ASSOCIATED_IDLE_RP            4 +#define COEX_CU_ASSOC_MANUAL_SCAN_RP          4 +#define COEX_CU_ASSOC_AUTO_SCAN_RP            4 +#define COEX_CU_ASSOC_ACTIVE_LEVEL_RP         4 +#define COEX_CU_RF_ON_RP                      6 +#define COEX_CU_RF_OFF_RP                     4 +#define COEX_CU_STAND_ALONE_DEBUG_RP          6 +#define COEX_CU_IPAN_ASSOC_LEVEL_RP           4 +#define COEX_CU_RSRVD1_RP                     4 +#define COEX_CU_RSRVD2_RP                     4 + +#define COEX_CU_UNASSOC_IDLE_WP               3 +#define COEX_CU_UNASSOC_MANUAL_SCAN_WP        3 +#define COEX_CU_UNASSOC_AUTO_SCAN_WP          3 +#define COEX_CU_CALIBRATION_WP                3 +#define COEX_CU_PERIODIC_CALIBRATION_WP       3 +#define COEX_CU_CONNECTION_ESTAB_WP           3 +#define COEX_CU_ASSOCIATED_IDLE_WP            3 +#define COEX_CU_ASSOC_MANUAL_SCAN_WP          3 +#define COEX_CU_ASSOC_AUTO_SCAN_WP            3 +#define COEX_CU_ASSOC_ACTIVE_LEVEL_WP         3 +#define COEX_CU_RF_ON_WP                      3 +#define COEX_CU_RF_OFF_WP                     3 +#define COEX_CU_STAND_ALONE_DEBUG_WP          6 +#define COEX_CU_IPAN_ASSOC_LEVEL_WP           3 +#define COEX_CU_RSRVD1_WP                     3 +#define COEX_CU_RSRVD2_WP                     3 + +#define COEX_UNASSOC_IDLE_FLAGS                     0 +#define COEX_UNASSOC_MANUAL_SCAN_FLAGS		\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG) +#define COEX_UNASSOC_AUTO_SCAN_FLAGS		\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG) +#define COEX_CALIBRATION_FLAGS			\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG) +#define COEX_PERIODIC_CALIBRATION_FLAGS             0 +/* + * COEX_CONNECTION_ESTAB: + * we need DELAY_MEDIUM_FREE_NTFY to let WiMAX disconnect from network. + */ +#define COEX_CONNECTION_ESTAB_FLAGS		\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG |	\ +	COEX_EVT_FLAG_DELAY_MEDIUM_FREE_NTFY_FLG) +#define COEX_ASSOCIATED_IDLE_FLAGS                  0 +#define COEX_ASSOC_MANUAL_SCAN_FLAGS		\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG) +#define COEX_ASSOC_AUTO_SCAN_FLAGS		\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	 COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG) +#define COEX_ASSOC_ACTIVE_LEVEL_FLAGS               0 +#define COEX_RF_ON_FLAGS                            0 +#define COEX_RF_OFF_FLAGS                           0 +#define COEX_STAND_ALONE_DEBUG_FLAGS		\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	 COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG) +#define COEX_IPAN_ASSOC_LEVEL_FLAGS		\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	 COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG |	\ +	 COEX_EVT_FLAG_DELAY_MEDIUM_FREE_NTFY_FLG) +#define COEX_RSRVD1_FLAGS                           0 +#define COEX_RSRVD2_FLAGS                           0 +/* + * COEX_CU_RF_ON is the event wrapping all radio ownership. + * We need DELAY_MEDIUM_FREE_NTFY to let WiMAX disconnect from network. + */ +#define COEX_CU_RF_ON_FLAGS			\ +	(COEX_EVT_FLAG_MEDIUM_FREE_NTFY_FLG |	\ +	 COEX_EVT_FLAG_MEDIUM_ACTV_NTFY_FLG |	\ +	 COEX_EVT_FLAG_DELAY_MEDIUM_FREE_NTFY_FLG) + + +enum { +	/* un-association part */ +	COEX_UNASSOC_IDLE		= 0, +	COEX_UNASSOC_MANUAL_SCAN	= 1, +	COEX_UNASSOC_AUTO_SCAN		= 2, +	/* calibration */ +	COEX_CALIBRATION		= 3, +	COEX_PERIODIC_CALIBRATION	= 4, +	/* connection */ +	COEX_CONNECTION_ESTAB		= 5, +	/* association part */ +	COEX_ASSOCIATED_IDLE		= 6, +	COEX_ASSOC_MANUAL_SCAN		= 7, +	COEX_ASSOC_AUTO_SCAN		= 8, +	COEX_ASSOC_ACTIVE_LEVEL		= 9, +	/* RF ON/OFF */ +	COEX_RF_ON			= 10, +	COEX_RF_OFF			= 11, +	COEX_STAND_ALONE_DEBUG		= 12, +	/* IPAN */ +	COEX_IPAN_ASSOC_LEVEL		= 13, +	/* reserved */ +	COEX_RSRVD1			= 14, +	COEX_RSRVD2			= 15, +	COEX_NUM_OF_EVENTS		= 16 +}; + +/* + * Coexistence WIFI/WIMAX  Command + * COEX_PRIORITY_TABLE_CMD = 0x5a + * + */ +struct iwl_wimax_coex_event_entry { +	u8 request_prio; +	u8 win_medium_prio; +	u8 reserved; +	u8 flags; +} __packed; + +/* COEX flag masks */ + +/* Station table is valid */ +#define COEX_FLAGS_STA_TABLE_VALID_MSK      (0x1) +/* UnMask wake up src at unassociated sleep */ +#define COEX_FLAGS_UNASSOC_WA_UNMASK_MSK    (0x4) +/* UnMask wake up src at associated sleep */ +#define COEX_FLAGS_ASSOC_WA_UNMASK_MSK      (0x8) +/* Enable CoEx feature. */ +#define COEX_FLAGS_COEX_ENABLE_MSK          (0x80) + +struct iwl_wimax_coex_cmd { +	u8 flags; +	u8 reserved[3]; +	struct iwl_wimax_coex_event_entry sta_prio[COEX_NUM_OF_EVENTS]; +} __packed; + +/* + * Coexistence MEDIUM NOTIFICATION + * COEX_MEDIUM_NOTIFICATION = 0x5b + * + * notification from uCode to host to indicate medium changes + * + */ +/* + * status field + * bit 0 - 2: medium status + * bit 3: medium change indication + * bit 4 - 31: reserved + */ +/* status option values, (0 - 2 bits) */ +#define COEX_MEDIUM_BUSY	(0x0) /* radio belongs to WiMAX */ +#define COEX_MEDIUM_ACTIVE	(0x1) /* radio belongs to WiFi */ +#define COEX_MEDIUM_PRE_RELEASE	(0x2) /* received radio release */ +#define COEX_MEDIUM_MSK		(0x7) + +/* send notification status (1 bit) */ +#define COEX_MEDIUM_CHANGED	(0x8) +#define COEX_MEDIUM_CHANGED_MSK	(0x8) +#define COEX_MEDIUM_SHIFT	(3) + +struct iwl_coex_medium_notification { +	__le32 status; +	__le32 events; +} __packed; + +/* + * Coexistence EVENT  Command + * COEX_EVENT_CMD = 0x5c + * + * send from host to uCode for coex event request. + */ +/* flags options */ +#define COEX_EVENT_REQUEST_MSK	(0x1) + +struct iwl_coex_event_cmd { +	u8 flags; +	u8 event; +	__le16 reserved; +} __packed; + +struct iwl_coex_event_resp { +	__le32 status; +} __packed; + + +/****************************************************************************** + * Bluetooth Coexistence commands + * + *****************************************************************************/ + +/* + * BT Status notification + * REPLY_BT_COEX_PROFILE_NOTIF = 0xce + */ +enum iwl_bt_coex_profile_traffic_load { +	IWL_BT_COEX_TRAFFIC_LOAD_NONE = 	0, +	IWL_BT_COEX_TRAFFIC_LOAD_LOW =		1, +	IWL_BT_COEX_TRAFFIC_LOAD_HIGH = 	2, +	IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS =	3, +/* + * There are no more even though below is a u8, the + * indication from the BT device only has two bits. + */ +}; + +#define BT_SESSION_ACTIVITY_1_UART_MSG		0x1 +#define BT_SESSION_ACTIVITY_2_UART_MSG		0x2 + +/* BT UART message - Share Part (BT -> WiFi) */ +#define BT_UART_MSG_FRAME1MSGTYPE_POS		(0) +#define BT_UART_MSG_FRAME1MSGTYPE_MSK		\ +		(0x7 << BT_UART_MSG_FRAME1MSGTYPE_POS) +#define BT_UART_MSG_FRAME1SSN_POS		(3) +#define BT_UART_MSG_FRAME1SSN_MSK		\ +		(0x3 << BT_UART_MSG_FRAME1SSN_POS) +#define BT_UART_MSG_FRAME1UPDATEREQ_POS		(5) +#define BT_UART_MSG_FRAME1UPDATEREQ_MSK		\ +		(0x1 << BT_UART_MSG_FRAME1UPDATEREQ_POS) +#define BT_UART_MSG_FRAME1RESERVED_POS		(6) +#define BT_UART_MSG_FRAME1RESERVED_MSK		\ +		(0x3 << BT_UART_MSG_FRAME1RESERVED_POS) + +#define BT_UART_MSG_FRAME2OPENCONNECTIONS_POS	(0) +#define BT_UART_MSG_FRAME2OPENCONNECTIONS_MSK	\ +		(0x3 << BT_UART_MSG_FRAME2OPENCONNECTIONS_POS) +#define BT_UART_MSG_FRAME2TRAFFICLOAD_POS	(2) +#define BT_UART_MSG_FRAME2TRAFFICLOAD_MSK	\ +		(0x3 << BT_UART_MSG_FRAME2TRAFFICLOAD_POS) +#define BT_UART_MSG_FRAME2CHLSEQN_POS		(4) +#define BT_UART_MSG_FRAME2CHLSEQN_MSK		\ +		(0x1 << BT_UART_MSG_FRAME2CHLSEQN_POS) +#define BT_UART_MSG_FRAME2INBAND_POS		(5) +#define BT_UART_MSG_FRAME2INBAND_MSK		\ +		(0x1 << BT_UART_MSG_FRAME2INBAND_POS) +#define BT_UART_MSG_FRAME2RESERVED_POS		(6) +#define BT_UART_MSG_FRAME2RESERVED_MSK		\ +		(0x3 << BT_UART_MSG_FRAME2RESERVED_POS) + +#define BT_UART_MSG_FRAME3SCOESCO_POS		(0) +#define BT_UART_MSG_FRAME3SCOESCO_MSK		\ +		(0x1 << BT_UART_MSG_FRAME3SCOESCO_POS) +#define BT_UART_MSG_FRAME3SNIFF_POS		(1) +#define BT_UART_MSG_FRAME3SNIFF_MSK		\ +		(0x1 << BT_UART_MSG_FRAME3SNIFF_POS) +#define BT_UART_MSG_FRAME3A2DP_POS		(2) +#define BT_UART_MSG_FRAME3A2DP_MSK		\ +		(0x1 << BT_UART_MSG_FRAME3A2DP_POS) +#define BT_UART_MSG_FRAME3ACL_POS		(3) +#define BT_UART_MSG_FRAME3ACL_MSK		\ +		(0x1 << BT_UART_MSG_FRAME3ACL_POS) +#define BT_UART_MSG_FRAME3MASTER_POS		(4) +#define BT_UART_MSG_FRAME3MASTER_MSK		\ +		(0x1 << BT_UART_MSG_FRAME3MASTER_POS) +#define BT_UART_MSG_FRAME3OBEX_POS		(5) +#define BT_UART_MSG_FRAME3OBEX_MSK		\ +		(0x1 << BT_UART_MSG_FRAME3OBEX_POS) +#define BT_UART_MSG_FRAME3RESERVED_POS		(6) +#define BT_UART_MSG_FRAME3RESERVED_MSK		\ +		(0x3 << BT_UART_MSG_FRAME3RESERVED_POS) + +#define BT_UART_MSG_FRAME4IDLEDURATION_POS	(0) +#define BT_UART_MSG_FRAME4IDLEDURATION_MSK	\ +		(0x3F << BT_UART_MSG_FRAME4IDLEDURATION_POS) +#define BT_UART_MSG_FRAME4RESERVED_POS		(6) +#define BT_UART_MSG_FRAME4RESERVED_MSK		\ +		(0x3 << BT_UART_MSG_FRAME4RESERVED_POS) + +#define BT_UART_MSG_FRAME5TXACTIVITY_POS	(0) +#define BT_UART_MSG_FRAME5TXACTIVITY_MSK	\ +		(0x3 << BT_UART_MSG_FRAME5TXACTIVITY_POS) +#define BT_UART_MSG_FRAME5RXACTIVITY_POS	(2) +#define BT_UART_MSG_FRAME5RXACTIVITY_MSK	\ +		(0x3 << BT_UART_MSG_FRAME5RXACTIVITY_POS) +#define BT_UART_MSG_FRAME5ESCORETRANSMIT_POS	(4) +#define BT_UART_MSG_FRAME5ESCORETRANSMIT_MSK	\ +		(0x3 << BT_UART_MSG_FRAME5ESCORETRANSMIT_POS) +#define BT_UART_MSG_FRAME5RESERVED_POS		(6) +#define BT_UART_MSG_FRAME5RESERVED_MSK		\ +		(0x3 << BT_UART_MSG_FRAME5RESERVED_POS) + +#define BT_UART_MSG_FRAME6SNIFFINTERVAL_POS	(0) +#define BT_UART_MSG_FRAME6SNIFFINTERVAL_MSK	\ +		(0x1F << BT_UART_MSG_FRAME6SNIFFINTERVAL_POS) +#define BT_UART_MSG_FRAME6DISCOVERABLE_POS	(5) +#define BT_UART_MSG_FRAME6DISCOVERABLE_MSK	\ +		(0x1 << BT_UART_MSG_FRAME6DISCOVERABLE_POS) +#define BT_UART_MSG_FRAME6RESERVED_POS		(6) +#define BT_UART_MSG_FRAME6RESERVED_MSK		\ +		(0x3 << BT_UART_MSG_FRAME6RESERVED_POS) + +#define BT_UART_MSG_FRAME7SNIFFACTIVITY_POS	(0) +#define BT_UART_MSG_FRAME7SNIFFACTIVITY_MSK	\ +		(0x7 << BT_UART_MSG_FRAME7SNIFFACTIVITY_POS) +#define BT_UART_MSG_FRAME7PAGE_POS		(3) +#define BT_UART_MSG_FRAME7PAGE_MSK		\ +		(0x1 << BT_UART_MSG_FRAME7PAGE_POS) +#define BT_UART_MSG_FRAME7INQUIRY_POS		(4) +#define BT_UART_MSG_FRAME7INQUIRY_MSK		\ +		(0x1 << BT_UART_MSG_FRAME7INQUIRY_POS) +#define BT_UART_MSG_FRAME7CONNECTABLE_POS	(5) +#define BT_UART_MSG_FRAME7CONNECTABLE_MSK	\ +		(0x1 << BT_UART_MSG_FRAME7CONNECTABLE_POS) +#define BT_UART_MSG_FRAME7RESERVED_POS		(6) +#define BT_UART_MSG_FRAME7RESERVED_MSK		\ +		(0x3 << BT_UART_MSG_FRAME7RESERVED_POS) + +/* BT Session Activity 2 UART message (BT -> WiFi) */ +#define BT_UART_MSG_2_FRAME1RESERVED1_POS	(5) +#define BT_UART_MSG_2_FRAME1RESERVED1_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME1RESERVED1_POS) +#define BT_UART_MSG_2_FRAME1RESERVED2_POS	(6) +#define BT_UART_MSG_2_FRAME1RESERVED2_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME1RESERVED2_POS) + +#define BT_UART_MSG_2_FRAME2AGGTRAFFICLOAD_POS	(0) +#define BT_UART_MSG_2_FRAME2AGGTRAFFICLOAD_MSK	\ +		(0x3F<<BT_UART_MSG_2_FRAME2AGGTRAFFICLOAD_POS) +#define BT_UART_MSG_2_FRAME2RESERVED_POS	(6) +#define BT_UART_MSG_2_FRAME2RESERVED_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME2RESERVED_POS) + +#define BT_UART_MSG_2_FRAME3BRLASTTXPOWER_POS	(0) +#define BT_UART_MSG_2_FRAME3BRLASTTXPOWER_MSK	\ +		(0xF<<BT_UART_MSG_2_FRAME3BRLASTTXPOWER_POS) +#define BT_UART_MSG_2_FRAME3INQPAGESRMODE_POS	(4) +#define BT_UART_MSG_2_FRAME3INQPAGESRMODE_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME3INQPAGESRMODE_POS) +#define BT_UART_MSG_2_FRAME3LEMASTER_POS	(5) +#define BT_UART_MSG_2_FRAME3LEMASTER_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME3LEMASTER_POS) +#define BT_UART_MSG_2_FRAME3RESERVED_POS	(6) +#define BT_UART_MSG_2_FRAME3RESERVED_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME3RESERVED_POS) + +#define BT_UART_MSG_2_FRAME4LELASTTXPOWER_POS	(0) +#define BT_UART_MSG_2_FRAME4LELASTTXPOWER_MSK	\ +		(0xF<<BT_UART_MSG_2_FRAME4LELASTTXPOWER_POS) +#define BT_UART_MSG_2_FRAME4NUMLECONN_POS	(4) +#define BT_UART_MSG_2_FRAME4NUMLECONN_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME4NUMLECONN_POS) +#define BT_UART_MSG_2_FRAME4RESERVED_POS	(6) +#define BT_UART_MSG_2_FRAME4RESERVED_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME4RESERVED_POS) + +#define BT_UART_MSG_2_FRAME5BTMINRSSI_POS	(0) +#define BT_UART_MSG_2_FRAME5BTMINRSSI_MSK	\ +		(0xF<<BT_UART_MSG_2_FRAME5BTMINRSSI_POS) +#define BT_UART_MSG_2_FRAME5LESCANINITMODE_POS	(4) +#define BT_UART_MSG_2_FRAME5LESCANINITMODE_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME5LESCANINITMODE_POS) +#define BT_UART_MSG_2_FRAME5LEADVERMODE_POS	(5) +#define BT_UART_MSG_2_FRAME5LEADVERMODE_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME5LEADVERMODE_POS) +#define BT_UART_MSG_2_FRAME5RESERVED_POS	(6) +#define BT_UART_MSG_2_FRAME5RESERVED_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME5RESERVED_POS) + +#define BT_UART_MSG_2_FRAME6LECONNINTERVAL_POS	(0) +#define BT_UART_MSG_2_FRAME6LECONNINTERVAL_MSK	\ +		(0x1F<<BT_UART_MSG_2_FRAME6LECONNINTERVAL_POS) +#define BT_UART_MSG_2_FRAME6RFU_POS		(5) +#define BT_UART_MSG_2_FRAME6RFU_MSK		\ +		(0x1<<BT_UART_MSG_2_FRAME6RFU_POS) +#define BT_UART_MSG_2_FRAME6RESERVED_POS	(6) +#define BT_UART_MSG_2_FRAME6RESERVED_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME6RESERVED_POS) + +#define BT_UART_MSG_2_FRAME7LECONNSLAVELAT_POS	(0) +#define BT_UART_MSG_2_FRAME7LECONNSLAVELAT_MSK	\ +		(0x7<<BT_UART_MSG_2_FRAME7LECONNSLAVELAT_POS) +#define BT_UART_MSG_2_FRAME7LEPROFILE1_POS	(3) +#define BT_UART_MSG_2_FRAME7LEPROFILE1_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME7LEPROFILE1_POS) +#define BT_UART_MSG_2_FRAME7LEPROFILE2_POS	(4) +#define BT_UART_MSG_2_FRAME7LEPROFILE2_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME7LEPROFILE2_POS) +#define BT_UART_MSG_2_FRAME7LEPROFILEOTHER_POS	(5) +#define BT_UART_MSG_2_FRAME7LEPROFILEOTHER_MSK	\ +		(0x1<<BT_UART_MSG_2_FRAME7LEPROFILEOTHER_POS) +#define BT_UART_MSG_2_FRAME7RESERVED_POS	(6) +#define BT_UART_MSG_2_FRAME7RESERVED_MSK	\ +		(0x3<<BT_UART_MSG_2_FRAME7RESERVED_POS) + + +#define BT_ENABLE_REDUCED_TXPOWER_THRESHOLD	(-62) +#define BT_DISABLE_REDUCED_TXPOWER_THRESHOLD	(-65) + +struct iwl_bt_uart_msg { +	u8 header; +	u8 frame1; +	u8 frame2; +	u8 frame3; +	u8 frame4; +	u8 frame5; +	u8 frame6; +	u8 frame7; +} __packed; + +struct iwl_bt_coex_profile_notif { +	struct iwl_bt_uart_msg last_bt_uart_msg; +	u8 bt_status; /* 0 - off, 1 - on */ +	u8 bt_traffic_load; /* 0 .. 3? */ +	u8 bt_ci_compliance; /* 0 - not complied, 1 - complied */ +	u8 reserved; +} __packed; + +#define IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS	0 +#define IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_MSK	0x1 +#define IWL_BT_COEX_PRIO_TBL_PRIO_POS		1 +#define IWL_BT_COEX_PRIO_TBL_PRIO_MASK		0x0e +#define IWL_BT_COEX_PRIO_TBL_RESERVED_POS	4 +#define IWL_BT_COEX_PRIO_TBL_RESERVED_MASK	0xf0 +#define IWL_BT_COEX_PRIO_TBL_PRIO_SHIFT		1 + +/* + * BT Coexistence Priority table + * REPLY_BT_COEX_PRIO_TABLE = 0xcc + */ +enum bt_coex_prio_table_events { +	BT_COEX_PRIO_TBL_EVT_INIT_CALIB1 = 0, +	BT_COEX_PRIO_TBL_EVT_INIT_CALIB2 = 1, +	BT_COEX_PRIO_TBL_EVT_PERIODIC_CALIB_LOW1 = 2, +	BT_COEX_PRIO_TBL_EVT_PERIODIC_CALIB_LOW2 = 3, /* DC calib */ +	BT_COEX_PRIO_TBL_EVT_PERIODIC_CALIB_HIGH1 = 4, +	BT_COEX_PRIO_TBL_EVT_PERIODIC_CALIB_HIGH2 = 5, +	BT_COEX_PRIO_TBL_EVT_DTIM = 6, +	BT_COEX_PRIO_TBL_EVT_SCAN52 = 7, +	BT_COEX_PRIO_TBL_EVT_SCAN24 = 8, +	BT_COEX_PRIO_TBL_EVT_RESERVED0 = 9, +	BT_COEX_PRIO_TBL_EVT_RESERVED1 = 10, +	BT_COEX_PRIO_TBL_EVT_RESERVED2 = 11, +	BT_COEX_PRIO_TBL_EVT_RESERVED3 = 12, +	BT_COEX_PRIO_TBL_EVT_RESERVED4 = 13, +	BT_COEX_PRIO_TBL_EVT_RESERVED5 = 14, +	BT_COEX_PRIO_TBL_EVT_RESERVED6 = 15, +	/* BT_COEX_PRIO_TBL_EVT_MAX should always be last */ +	BT_COEX_PRIO_TBL_EVT_MAX, +}; + +enum bt_coex_prio_table_priorities { +	BT_COEX_PRIO_TBL_DISABLED = 0, +	BT_COEX_PRIO_TBL_PRIO_LOW = 1, +	BT_COEX_PRIO_TBL_PRIO_HIGH = 2, +	BT_COEX_PRIO_TBL_PRIO_BYPASS = 3, +	BT_COEX_PRIO_TBL_PRIO_COEX_OFF = 4, +	BT_COEX_PRIO_TBL_PRIO_COEX_ON = 5, +	BT_COEX_PRIO_TBL_PRIO_RSRVD1 = 6, +	BT_COEX_PRIO_TBL_PRIO_RSRVD2 = 7, +	BT_COEX_PRIO_TBL_MAX, +}; + +struct iwl_bt_coex_prio_table_cmd { +	u8 prio_tbl[BT_COEX_PRIO_TBL_EVT_MAX]; +} __packed; + +#define IWL_BT_COEX_ENV_CLOSE	0 +#define IWL_BT_COEX_ENV_OPEN	1 +/* + * BT Protection Envelope + * REPLY_BT_COEX_PROT_ENV = 0xcd + */ +struct iwl_bt_coex_prot_env_cmd { +	u8 action; /* 0 = closed, 1 = open */ +	u8 type; /* 0 .. 15 */ +	u8 reserved[2]; +} __packed; + +/* + * REPLY_D3_CONFIG + */ +enum iwlagn_d3_wakeup_filters { +	IWLAGN_D3_WAKEUP_RFKILL		= BIT(0), +	IWLAGN_D3_WAKEUP_SYSASSERT	= BIT(1), +}; + +struct iwlagn_d3_config_cmd { +	__le32 min_sleep_time; +	__le32 wakeup_flags; +} __packed; + +/* + * REPLY_WOWLAN_PATTERNS + */ +#define IWLAGN_WOWLAN_MIN_PATTERN_LEN	16 +#define IWLAGN_WOWLAN_MAX_PATTERN_LEN	128 + +struct iwlagn_wowlan_pattern { +	u8 mask[IWLAGN_WOWLAN_MAX_PATTERN_LEN / 8]; +	u8 pattern[IWLAGN_WOWLAN_MAX_PATTERN_LEN]; +	u8 mask_size; +	u8 pattern_size; +	__le16 reserved; +} __packed; + +#define IWLAGN_WOWLAN_MAX_PATTERNS	20 + +struct iwlagn_wowlan_patterns_cmd { +	__le32 n_patterns; +	struct iwlagn_wowlan_pattern patterns[]; +} __packed; + +/* + * REPLY_WOWLAN_WAKEUP_FILTER + */ +enum iwlagn_wowlan_wakeup_filters { +	IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET	= BIT(0), +	IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH	= BIT(1), +	IWLAGN_WOWLAN_WAKEUP_BEACON_MISS	= BIT(2), +	IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE	= BIT(3), +	IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL	= BIT(4), +	IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ	= BIT(5), +	IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE	= BIT(6), +	IWLAGN_WOWLAN_WAKEUP_ALWAYS		= BIT(7), +	IWLAGN_WOWLAN_WAKEUP_ENABLE_NET_DETECT	= BIT(8), +}; + +struct iwlagn_wowlan_wakeup_filter_cmd { +	__le32 enabled; +	__le16 non_qos_seq; +	__le16 reserved; +	__le16 qos_seq[8]; +}; + +/* + * REPLY_WOWLAN_TSC_RSC_PARAMS + */ +#define IWLAGN_NUM_RSC	16 + +struct tkip_sc { +	__le16 iv16; +	__le16 pad; +	__le32 iv32; +} __packed; + +struct iwlagn_tkip_rsc_tsc { +	struct tkip_sc unicast_rsc[IWLAGN_NUM_RSC]; +	struct tkip_sc multicast_rsc[IWLAGN_NUM_RSC]; +	struct tkip_sc tsc; +} __packed; + +struct aes_sc { +	__le64 pn; +} __packed; + +struct iwlagn_aes_rsc_tsc { +	struct aes_sc unicast_rsc[IWLAGN_NUM_RSC]; +	struct aes_sc multicast_rsc[IWLAGN_NUM_RSC]; +	struct aes_sc tsc; +} __packed; + +union iwlagn_all_tsc_rsc { +	struct iwlagn_tkip_rsc_tsc tkip; +	struct iwlagn_aes_rsc_tsc aes; +}; + +struct iwlagn_wowlan_rsc_tsc_params_cmd { +	union iwlagn_all_tsc_rsc all_tsc_rsc; +} __packed; + +/* + * REPLY_WOWLAN_TKIP_PARAMS + */ +#define IWLAGN_MIC_KEY_SIZE	8 +#define IWLAGN_P1K_SIZE		5 +struct iwlagn_mic_keys { +	u8 tx[IWLAGN_MIC_KEY_SIZE]; +	u8 rx_unicast[IWLAGN_MIC_KEY_SIZE]; +	u8 rx_mcast[IWLAGN_MIC_KEY_SIZE]; +} __packed; + +struct iwlagn_p1k_cache { +	__le16 p1k[IWLAGN_P1K_SIZE]; +} __packed; + +#define IWLAGN_NUM_RX_P1K_CACHE	2 + +struct iwlagn_wowlan_tkip_params_cmd { +	struct iwlagn_mic_keys mic_keys; +	struct iwlagn_p1k_cache tx; +	struct iwlagn_p1k_cache rx_uni[IWLAGN_NUM_RX_P1K_CACHE]; +	struct iwlagn_p1k_cache rx_multi[IWLAGN_NUM_RX_P1K_CACHE]; +} __packed; + +/* + * REPLY_WOWLAN_KEK_KCK_MATERIAL + */ + +#define IWLAGN_KCK_MAX_SIZE	32 +#define IWLAGN_KEK_MAX_SIZE	32 + +struct iwlagn_wowlan_kek_kck_material_cmd { +	u8	kck[IWLAGN_KCK_MAX_SIZE]; +	u8	kek[IWLAGN_KEK_MAX_SIZE]; +	__le16	kck_len; +	__le16	kek_len; +	__le64	replay_ctr; +} __packed; + +#define RF_KILL_INDICATOR_FOR_WOWLAN	0x87 + +/* + * REPLY_WOWLAN_GET_STATUS = 0xe5 + */ +struct iwlagn_wowlan_status { +	__le64 replay_ctr; +	__le32 rekey_status; +	__le32 wakeup_reason; +	u8 pattern_number; +	u8 reserved1; +	__le16 qos_seq_ctr[8]; +	__le16 non_qos_seq_ctr; +	__le16 reserved2; +	union iwlagn_all_tsc_rsc tsc_rsc; +	__le16 reserved3; +} __packed; + +/* + * REPLY_WIPAN_PARAMS = 0xb2 (Commands and Notification) + */ + +/* + * Minimum slot time in TU + */ +#define IWL_MIN_SLOT_TIME	20 + +/** + * struct iwl_wipan_slot + * @width: Time in TU + * @type: + *   0 - BSS + *   1 - PAN + */ +struct iwl_wipan_slot { +	__le16 width; +	u8 type; +	u8 reserved; +} __packed; + +#define IWL_WIPAN_PARAMS_FLG_LEAVE_CHANNEL_CTS		BIT(1)	/* reserved */ +#define IWL_WIPAN_PARAMS_FLG_LEAVE_CHANNEL_QUIET	BIT(2)	/* reserved */ +#define IWL_WIPAN_PARAMS_FLG_SLOTTED_MODE		BIT(3)	/* reserved */ +#define IWL_WIPAN_PARAMS_FLG_FILTER_BEACON_NOTIF	BIT(4) +#define IWL_WIPAN_PARAMS_FLG_FULL_SLOTTED_MODE		BIT(5) + +/** + * struct iwl_wipan_params_cmd + * @flags: + *   bit0: reserved + *   bit1: CP leave channel with CTS + *   bit2: CP leave channel qith Quiet + *   bit3: slotted mode + *     1 - work in slotted mode + *     0 - work in non slotted mode + *   bit4: filter beacon notification + *   bit5: full tx slotted mode. if this flag is set, + *         uCode will perform leaving channel methods in context switch + *         also when working in same channel mode + * @num_slots: 1 - 10 + */ +struct iwl_wipan_params_cmd { +	__le16 flags; +	u8 reserved; +	u8 num_slots; +	struct iwl_wipan_slot slots[10]; +} __packed; + +/* + * REPLY_WIPAN_P2P_CHANNEL_SWITCH = 0xb9 + * + * TODO: Figure out what this is used for, + *	 it can only switch between 2.4 GHz + *	 channels!! + */ + +struct iwl_wipan_p2p_channel_switch_cmd { +	__le16 channel; +	__le16 reserved; +}; + +/* + * REPLY_WIPAN_NOA_NOTIFICATION = 0xbc + * + * This is used by the device to notify us of the + * NoA schedule it determined so we can forward it + * to userspace for inclusion in probe responses. + * + * In beacons, the NoA schedule is simply appended + * to the frame we give the device. + */ + +struct iwl_wipan_noa_descriptor { +	u8 count; +	__le32 duration; +	__le32 interval; +	__le32 starttime; +} __packed; + +struct iwl_wipan_noa_attribute { +	u8 id; +	__le16 length; +	u8 index; +	u8 ct_window; +	struct iwl_wipan_noa_descriptor descr0, descr1; +	u8 reserved; +} __packed; + +struct iwl_wipan_noa_notification { +	u32 noa_active; +	struct iwl_wipan_noa_attribute noa_attribute; +} __packed; + +#endif				/* __iwl_commands_h__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/debugfs.c b/drivers/net/wireless/iwlwifi/dvm/debugfs.c new file mode 100644 index 00000000000..0ffb6ff1a25 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/debugfs.c @@ -0,0 +1,2445 @@ +/****************************************************************************** + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + *****************************************************************************/ + +#include <linux/slab.h> +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/debugfs.h> +#include <linux/ieee80211.h> +#include <net/mac80211.h> +#include "iwl-debug.h" +#include "iwl-io.h" +#include "dev.h" +#include "agn.h" + +/* create and remove of files */ +#define DEBUGFS_ADD_FILE(name, parent, mode) do {			\ +	if (!debugfs_create_file(#name, mode, parent, priv,		\ +				 &iwl_dbgfs_##name##_ops))		\ +		goto err;						\ +} while (0) + +#define DEBUGFS_ADD_BOOL(name, parent, ptr) do {			\ +	struct dentry *__tmp;						\ +	__tmp = debugfs_create_bool(#name, S_IWUSR | S_IRUSR,		\ +				    parent, ptr);			\ +	if (IS_ERR(__tmp) || !__tmp)					\ +		goto err;						\ +} while (0) + +#define DEBUGFS_ADD_X32(name, parent, ptr) do {				\ +	struct dentry *__tmp;						\ +	__tmp = debugfs_create_x32(#name, S_IWUSR | S_IRUSR,		\ +				   parent, ptr);			\ +	if (IS_ERR(__tmp) || !__tmp)					\ +		goto err;						\ +} while (0) + +#define DEBUGFS_ADD_U32(name, parent, ptr, mode) do {			\ +	struct dentry *__tmp;						\ +	__tmp = debugfs_create_u32(#name, mode,				\ +				   parent, ptr);			\ +	if (IS_ERR(__tmp) || !__tmp)					\ +		goto err;						\ +} while (0) + +/* file operation */ +#define DEBUGFS_READ_FILE_OPS(name)                                     \ +static const struct file_operations iwl_dbgfs_##name##_ops = {          \ +	.read = iwl_dbgfs_##name##_read,				\ +	.open = simple_open,						\ +	.llseek = generic_file_llseek,					\ +}; + +#define DEBUGFS_WRITE_FILE_OPS(name)                                    \ +static const struct file_operations iwl_dbgfs_##name##_ops = {          \ +	.write = iwl_dbgfs_##name##_write,                              \ +	.open = simple_open,						\ +	.llseek = generic_file_llseek,					\ +}; + + +#define DEBUGFS_READ_WRITE_FILE_OPS(name)                               \ +static const struct file_operations iwl_dbgfs_##name##_ops = {          \ +	.write = iwl_dbgfs_##name##_write,                              \ +	.read = iwl_dbgfs_##name##_read,                                \ +	.open = simple_open,						\ +	.llseek = generic_file_llseek,					\ +}; + +static ssize_t iwl_dbgfs_sram_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	u32 val = 0; +	char *buf; +	ssize_t ret; +	int i = 0; +	bool device_format = false; +	int offset = 0; +	int len = 0; +	int pos = 0; +	int sram; +	struct iwl_priv *priv = file->private_data; +	const struct fw_img *img; +	size_t bufsz; + +	if (!iwl_is_ready_rf(priv)) +		return -EAGAIN; + +	/* default is to dump the entire data segment */ +	if (!priv->dbgfs_sram_offset && !priv->dbgfs_sram_len) { +		priv->dbgfs_sram_offset = 0x800000; +		if (!priv->ucode_loaded) +			return -EINVAL; +		img = &priv->fw->img[priv->cur_ucode]; +		priv->dbgfs_sram_len = img->sec[IWL_UCODE_SECTION_DATA].len; +	} +	len = priv->dbgfs_sram_len; + +	if (len == -4) { +		device_format = true; +		len = 4; +	} + +	bufsz =  50 + len * 4; +	buf = kmalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	pos += scnprintf(buf + pos, bufsz - pos, "sram_len: 0x%x\n", +			 len); +	pos += scnprintf(buf + pos, bufsz - pos, "sram_offset: 0x%x\n", +			priv->dbgfs_sram_offset); + +	/* adjust sram address since reads are only on even u32 boundaries */ +	offset = priv->dbgfs_sram_offset & 0x3; +	sram = priv->dbgfs_sram_offset & ~0x3; + +	/* read the first u32 from sram */ +	val = iwl_trans_read_mem32(priv->trans, sram); + +	for (; len; len--) { +		/* put the address at the start of every line */ +		if (i == 0) +			pos += scnprintf(buf + pos, bufsz - pos, +				"%08X: ", sram + offset); + +		if (device_format) +			pos += scnprintf(buf + pos, bufsz - pos, +				"%02x", (val >> (8 * (3 - offset))) & 0xff); +		else +			pos += scnprintf(buf + pos, bufsz - pos, +				"%02x ", (val >> (8 * offset)) & 0xff); + +		/* if all bytes processed, read the next u32 from sram */ +		if (++offset == 4) { +			sram += 4; +			offset = 0; +			val = iwl_trans_read_mem32(priv->trans, sram); +		} + +		/* put in extra spaces and split lines for human readability */ +		if (++i == 16) { +			i = 0; +			pos += scnprintf(buf + pos, bufsz - pos, "\n"); +		} else if (!(i & 7)) { +			pos += scnprintf(buf + pos, bufsz - pos, "   "); +		} else if (!(i & 3)) { +			pos += scnprintf(buf + pos, bufsz - pos, " "); +		} +	} +	if (i) +		pos += scnprintf(buf + pos, bufsz - pos, "\n"); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_sram_write(struct file *file, +					const char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[64]; +	int buf_size; +	u32 offset, len; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; + +	if (sscanf(buf, "%x,%x", &offset, &len) == 2) { +		priv->dbgfs_sram_offset = offset; +		priv->dbgfs_sram_len = len; +	} else if (sscanf(buf, "%x", &offset) == 1) { +		priv->dbgfs_sram_offset = offset; +		priv->dbgfs_sram_len = -4; +	} else { +		priv->dbgfs_sram_offset = 0; +		priv->dbgfs_sram_len = 0; +	} + +	return count; +} + +static ssize_t iwl_dbgfs_wowlan_sram_read(struct file *file, +					  char __user *user_buf, +					  size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	const struct fw_img *img = &priv->fw->img[IWL_UCODE_WOWLAN]; + +	if (!priv->wowlan_sram) +		return -ENODATA; + +	return simple_read_from_buffer(user_buf, count, ppos, +				       priv->wowlan_sram, +				       img->sec[IWL_UCODE_SECTION_DATA].len); +} +static ssize_t iwl_dbgfs_stations_read(struct file *file, char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	struct iwl_station_entry *station; +	struct iwl_tid_data *tid_data; +	char *buf; +	int i, j, pos = 0; +	ssize_t ret; +	/* Add 30 for initial string */ +	const size_t bufsz = 30 + sizeof(char) * 500 * (priv->num_stations); + +	buf = kmalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	pos += scnprintf(buf + pos, bufsz - pos, "num of stations: %d\n\n", +			priv->num_stations); + +	for (i = 0; i < IWLAGN_STATION_COUNT; i++) { +		station = &priv->stations[i]; +		if (!station->used) +			continue; +		pos += scnprintf(buf + pos, bufsz - pos, +				 "station %d - addr: %pM, flags: %#x\n", +				 i, station->sta.sta.addr, +				 station->sta.station_flags_msk); +		pos += scnprintf(buf + pos, bufsz - pos, +				"TID seqno  next_rclmd " +				"rate_n_flags state txq\n"); + +		for (j = 0; j < IWL_MAX_TID_COUNT; j++) { +			tid_data = &priv->tid_data[i][j]; +			pos += scnprintf(buf + pos, bufsz - pos, +				"%d:  0x%.4x 0x%.4x     0x%.8x   " +				"%d     %.2d", +				j, tid_data->seq_number, +				tid_data->next_reclaimed, +				tid_data->agg.rate_n_flags, +				tid_data->agg.state, +				tid_data->agg.txq_id); + +			if (tid_data->agg.wait_for_ba) +				pos += scnprintf(buf + pos, bufsz - pos, +						 " - waitforba"); +			pos += scnprintf(buf + pos, bufsz - pos, "\n"); +		} + +		pos += scnprintf(buf + pos, bufsz - pos, "\n"); +	} + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_nvm_read(struct file *file, +				       char __user *user_buf, +				       size_t count, +				       loff_t *ppos) +{ +	ssize_t ret; +	struct iwl_priv *priv = file->private_data; +	int pos = 0, ofs = 0, buf_size = 0; +	const u8 *ptr; +	char *buf; +	u16 nvm_ver; +	size_t eeprom_len = priv->eeprom_blob_size; +	buf_size = 4 * eeprom_len + 256; + +	if (eeprom_len % 16) +		return -ENODATA; + +	ptr = priv->eeprom_blob; +	if (!ptr) +		return -ENOMEM; + +	/* 4 characters for byte 0xYY */ +	buf = kzalloc(buf_size, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	nvm_ver = priv->nvm_data->nvm_version; +	pos += scnprintf(buf + pos, buf_size - pos, +			 "NVM version: 0x%x\n", nvm_ver); +	for (ofs = 0 ; ofs < eeprom_len ; ofs += 16) { +		pos += scnprintf(buf + pos, buf_size - pos, "0x%.4x ", ofs); +		hex_dump_to_buffer(ptr + ofs, 16 , 16, 2, buf + pos, +				   buf_size - pos, 0); +		pos += strlen(buf + pos); +		if (buf_size - pos > 0) +			buf[pos++] = '\n'; +	} + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_channels_read(struct file *file, char __user *user_buf, +				       size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	struct ieee80211_channel *channels = NULL; +	const struct ieee80211_supported_band *supp_band = NULL; +	int pos = 0, i, bufsz = PAGE_SIZE; +	char *buf; +	ssize_t ret; + +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	supp_band = iwl_get_hw_mode(priv, IEEE80211_BAND_2GHZ); +	if (supp_band) { +		channels = supp_band->channels; + +		pos += scnprintf(buf + pos, bufsz - pos, +				"Displaying %d channels in 2.4GHz band 802.11bg):\n", +				supp_band->n_channels); + +		for (i = 0; i < supp_band->n_channels; i++) +			pos += scnprintf(buf + pos, bufsz - pos, +					"%d: %ddBm: BSS%s%s, %s.\n", +					channels[i].hw_value, +					channels[i].max_power, +					channels[i].flags & IEEE80211_CHAN_RADAR ? +					" (IEEE 802.11h required)" : "", +					((channels[i].flags & IEEE80211_CHAN_NO_IR) +					|| (channels[i].flags & +					IEEE80211_CHAN_RADAR)) ? "" : +					", IBSS", +					channels[i].flags & +					IEEE80211_CHAN_NO_IR ? +					"passive only" : "active/passive"); +	} +	supp_band = iwl_get_hw_mode(priv, IEEE80211_BAND_5GHZ); +	if (supp_band) { +		channels = supp_band->channels; + +		pos += scnprintf(buf + pos, bufsz - pos, +				"Displaying %d channels in 5.2GHz band (802.11a)\n", +				supp_band->n_channels); + +		for (i = 0; i < supp_band->n_channels; i++) +			pos += scnprintf(buf + pos, bufsz - pos, +					"%d: %ddBm: BSS%s%s, %s.\n", +					channels[i].hw_value, +					channels[i].max_power, +					channels[i].flags & IEEE80211_CHAN_RADAR ? +					" (IEEE 802.11h required)" : "", +					((channels[i].flags & IEEE80211_CHAN_NO_IR) +					|| (channels[i].flags & +					IEEE80211_CHAN_RADAR)) ? "" : +					", IBSS", +					channels[i].flags & +					IEEE80211_CHAN_NO_IR ? +					"passive only" : "active/passive"); +	} +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_status_read(struct file *file, +						char __user *user_buf, +						size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	char buf[512]; +	int pos = 0; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_RF_KILL_HW:\t %d\n", +		test_bit(STATUS_RF_KILL_HW, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_CT_KILL:\t\t %d\n", +		test_bit(STATUS_CT_KILL, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_ALIVE:\t\t %d\n", +		test_bit(STATUS_ALIVE, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_READY:\t\t %d\n", +		test_bit(STATUS_READY, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_EXIT_PENDING:\t %d\n", +		test_bit(STATUS_EXIT_PENDING, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_STATISTICS:\t %d\n", +		test_bit(STATUS_STATISTICS, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_SCANNING:\t %d\n", +		test_bit(STATUS_SCANNING, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_SCAN_ABORTING:\t %d\n", +		test_bit(STATUS_SCAN_ABORTING, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_SCAN_HW:\t\t %d\n", +		test_bit(STATUS_SCAN_HW, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_POWER_PMI:\t %d\n", +		test_bit(STATUS_POWER_PMI, &priv->status)); +	pos += scnprintf(buf + pos, bufsz - pos, "STATUS_FW_ERROR:\t %d\n", +		test_bit(STATUS_FW_ERROR, &priv->status)); +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_rx_handlers_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; + +	int pos = 0; +	int cnt = 0; +	char *buf; +	int bufsz = 24 * 64; /* 24 items * 64 char per item */ +	ssize_t ret; + +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	for (cnt = 0; cnt < REPLY_MAX; cnt++) { +		if (priv->rx_handlers_stats[cnt] > 0) +			pos += scnprintf(buf + pos, bufsz - pos, +				"\tRx handler[%36s]:\t\t %u\n", +				iwl_dvm_get_cmd_string(cnt), +				priv->rx_handlers_stats[cnt]); +	} + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_rx_handlers_write(struct file *file, +					 const char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; + +	char buf[8]; +	int buf_size; +	u32 reset_flag; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%x", &reset_flag) != 1) +		return -EFAULT; +	if (reset_flag == 0) +		memset(&priv->rx_handlers_stats[0], 0, +			sizeof(priv->rx_handlers_stats)); + +	return count; +} + +static ssize_t iwl_dbgfs_qos_read(struct file *file, char __user *user_buf, +				       size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	struct iwl_rxon_context *ctx; +	int pos = 0, i; +	char buf[256 * NUM_IWL_RXON_CTX]; +	const size_t bufsz = sizeof(buf); + +	for_each_context(priv, ctx) { +		pos += scnprintf(buf + pos, bufsz - pos, "context %d:\n", +				 ctx->ctxid); +		for (i = 0; i < AC_NUM; i++) { +			pos += scnprintf(buf + pos, bufsz - pos, +				"\tcw_min\tcw_max\taifsn\ttxop\n"); +			pos += scnprintf(buf + pos, bufsz - pos, +				"AC[%d]\t%u\t%u\t%u\t%u\n", i, +				ctx->qos_data.def_qos_parm.ac[i].cw_min, +				ctx->qos_data.def_qos_parm.ac[i].cw_max, +				ctx->qos_data.def_qos_parm.ac[i].aifsn, +				ctx->qos_data.def_qos_parm.ac[i].edca_txop); +		} +		pos += scnprintf(buf + pos, bufsz - pos, "\n"); +	} +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_thermal_throttling_read(struct file *file, +				char __user *user_buf, +				size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	struct iwl_tt_restriction *restriction; +	char buf[100]; +	int pos = 0; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, +			"Thermal Throttling Mode: %s\n", +			tt->advanced_tt ? "Advance" : "Legacy"); +	pos += scnprintf(buf + pos, bufsz - pos, +			"Thermal Throttling State: %d\n", +			tt->state); +	if (tt->advanced_tt) { +		restriction = tt->restriction + tt->state; +		pos += scnprintf(buf + pos, bufsz - pos, +				"Tx mode: %d\n", +				restriction->tx_stream); +		pos += scnprintf(buf + pos, bufsz - pos, +				"Rx mode: %d\n", +				restriction->rx_stream); +		pos += scnprintf(buf + pos, bufsz - pos, +				"HT mode: %d\n", +				restriction->is_ht); +	} +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_disable_ht40_write(struct file *file, +					 const char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int ht40; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &ht40) != 1) +		return -EFAULT; +	if (!iwl_is_any_associated(priv)) +		priv->disable_ht40 = ht40 ? true : false; +	else +		return -EINVAL; + +	return count; +} + +static ssize_t iwl_dbgfs_disable_ht40_read(struct file *file, +					 char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[100]; +	int pos = 0; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, +			"11n 40MHz Mode: %s\n", +			priv->disable_ht40 ? "Disabled" : "Enabled"); +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_temperature_read(struct file *file, +					 char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int pos = 0; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, "%d\n", priv->temperature); +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + + +static ssize_t iwl_dbgfs_sleep_level_override_write(struct file *file, +						    const char __user *user_buf, +						    size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int value; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; + +	if (sscanf(buf, "%d", &value) != 1) +		return -EINVAL; + +	/* +	 * Our users expect 0 to be "CAM", but 0 isn't actually +	 * valid here. However, let's not confuse them and present +	 * IWL_POWER_INDEX_1 as "1", not "0". +	 */ +	if (value == 0) +		return -EINVAL; +	else if (value > 0) +		value -= 1; + +	if (value != -1 && (value < 0 || value >= IWL_POWER_NUM)) +		return -EINVAL; + +	if (!iwl_is_ready_rf(priv)) +		return -EAGAIN; + +	priv->power_data.debug_sleep_level_override = value; + +	mutex_lock(&priv->mutex); +	iwl_power_update_mode(priv, true); +	mutex_unlock(&priv->mutex); + +	return count; +} + +static ssize_t iwl_dbgfs_sleep_level_override_read(struct file *file, +						   char __user *user_buf, +						   size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[10]; +	int pos, value; +	const size_t bufsz = sizeof(buf); + +	/* see the write function */ +	value = priv->power_data.debug_sleep_level_override; +	if (value >= 0) +		value += 1; + +	pos = scnprintf(buf, bufsz, "%d\n", value); +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_current_sleep_command_read(struct file *file, +						    char __user *user_buf, +						    size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[200]; +	int pos = 0, i; +	const size_t bufsz = sizeof(buf); +	struct iwl_powertable_cmd *cmd = &priv->power_data.sleep_cmd; + +	pos += scnprintf(buf + pos, bufsz - pos, +			 "flags: %#.2x\n", le16_to_cpu(cmd->flags)); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "RX/TX timeout: %d/%d usec\n", +			 le32_to_cpu(cmd->rx_data_timeout), +			 le32_to_cpu(cmd->tx_data_timeout)); +	for (i = 0; i < IWL_POWER_VEC_SIZE; i++) +		pos += scnprintf(buf + pos, bufsz - pos, +				 "sleep_interval[%d]: %d\n", i, +				 le32_to_cpu(cmd->sleep_interval[i])); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +DEBUGFS_READ_WRITE_FILE_OPS(sram); +DEBUGFS_READ_FILE_OPS(wowlan_sram); +DEBUGFS_READ_FILE_OPS(nvm); +DEBUGFS_READ_FILE_OPS(stations); +DEBUGFS_READ_FILE_OPS(channels); +DEBUGFS_READ_FILE_OPS(status); +DEBUGFS_READ_WRITE_FILE_OPS(rx_handlers); +DEBUGFS_READ_FILE_OPS(qos); +DEBUGFS_READ_FILE_OPS(thermal_throttling); +DEBUGFS_READ_WRITE_FILE_OPS(disable_ht40); +DEBUGFS_READ_FILE_OPS(temperature); +DEBUGFS_READ_WRITE_FILE_OPS(sleep_level_override); +DEBUGFS_READ_FILE_OPS(current_sleep_command); + +static const char *fmt_value = "  %-30s %10u\n"; +static const char *fmt_hex   = "  %-30s       0x%02X\n"; +static const char *fmt_table = "  %-30s %10u  %10u  %10u  %10u\n"; +static const char *fmt_header = +	"%-32s    current  cumulative       delta         max\n"; + +static int iwl_statistics_flag(struct iwl_priv *priv, char *buf, int bufsz) +{ +	int p = 0; +	u32 flag; + +	lockdep_assert_held(&priv->statistics.lock); + +	flag = le32_to_cpu(priv->statistics.flag); + +	p += scnprintf(buf + p, bufsz - p, "Statistics Flag(0x%X):\n", flag); +	if (flag & UCODE_STATISTICS_CLEAR_MSK) +		p += scnprintf(buf + p, bufsz - p, +		"\tStatistics have been cleared\n"); +	p += scnprintf(buf + p, bufsz - p, "\tOperational Frequency: %s\n", +		(flag & UCODE_STATISTICS_FREQUENCY_MSK) +		? "2.4 GHz" : "5.2 GHz"); +	p += scnprintf(buf + p, bufsz - p, "\tTGj Narrow Band: %s\n", +		(flag & UCODE_STATISTICS_NARROW_BAND_MSK) +		 ? "enabled" : "disabled"); + +	return p; +} + +static ssize_t iwl_dbgfs_ucode_rx_stats_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	char *buf; +	int bufsz = sizeof(struct statistics_rx_phy) * 40 + +		    sizeof(struct statistics_rx_non_phy) * 40 + +		    sizeof(struct statistics_rx_ht_phy) * 40 + 400; +	ssize_t ret; +	struct statistics_rx_phy *ofdm, *accum_ofdm, *delta_ofdm, *max_ofdm; +	struct statistics_rx_phy *cck, *accum_cck, *delta_cck, *max_cck; +	struct statistics_rx_non_phy *general, *accum_general; +	struct statistics_rx_non_phy *delta_general, *max_general; +	struct statistics_rx_ht_phy *ht, *accum_ht, *delta_ht, *max_ht; + +	if (!iwl_is_alive(priv)) +		return -EAGAIN; + +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	/* +	 * the statistic information display here is based on +	 * the last statistics notification from uCode +	 * might not reflect the current uCode activity +	 */ +	spin_lock_bh(&priv->statistics.lock); +	ofdm = &priv->statistics.rx_ofdm; +	cck = &priv->statistics.rx_cck; +	general = &priv->statistics.rx_non_phy; +	ht = &priv->statistics.rx_ofdm_ht; +	accum_ofdm = &priv->accum_stats.rx_ofdm; +	accum_cck = &priv->accum_stats.rx_cck; +	accum_general = &priv->accum_stats.rx_non_phy; +	accum_ht = &priv->accum_stats.rx_ofdm_ht; +	delta_ofdm = &priv->delta_stats.rx_ofdm; +	delta_cck = &priv->delta_stats.rx_cck; +	delta_general = &priv->delta_stats.rx_non_phy; +	delta_ht = &priv->delta_stats.rx_ofdm_ht; +	max_ofdm = &priv->max_delta_stats.rx_ofdm; +	max_cck = &priv->max_delta_stats.rx_cck; +	max_general = &priv->max_delta_stats.rx_non_phy; +	max_ht = &priv->max_delta_stats.rx_ofdm_ht; + +	pos += iwl_statistics_flag(priv, buf, bufsz); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_header, "Statistics_Rx - OFDM:"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "ina_cnt:", +			 le32_to_cpu(ofdm->ina_cnt), +			 accum_ofdm->ina_cnt, +			 delta_ofdm->ina_cnt, max_ofdm->ina_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "fina_cnt:", +			 le32_to_cpu(ofdm->fina_cnt), accum_ofdm->fina_cnt, +			 delta_ofdm->fina_cnt, max_ofdm->fina_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "plcp_err:", +			 le32_to_cpu(ofdm->plcp_err), accum_ofdm->plcp_err, +			 delta_ofdm->plcp_err, max_ofdm->plcp_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "crc32_err:", +			 le32_to_cpu(ofdm->crc32_err), accum_ofdm->crc32_err, +			 delta_ofdm->crc32_err, max_ofdm->crc32_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "overrun_err:", +			 le32_to_cpu(ofdm->overrun_err), +			 accum_ofdm->overrun_err, delta_ofdm->overrun_err, +			 max_ofdm->overrun_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "early_overrun_err:", +			 le32_to_cpu(ofdm->early_overrun_err), +			 accum_ofdm->early_overrun_err, +			 delta_ofdm->early_overrun_err, +			 max_ofdm->early_overrun_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "crc32_good:", +			 le32_to_cpu(ofdm->crc32_good), +			 accum_ofdm->crc32_good, delta_ofdm->crc32_good, +			 max_ofdm->crc32_good); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "false_alarm_cnt:", +			 le32_to_cpu(ofdm->false_alarm_cnt), +			 accum_ofdm->false_alarm_cnt, +			 delta_ofdm->false_alarm_cnt, +			 max_ofdm->false_alarm_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "fina_sync_err_cnt:", +			 le32_to_cpu(ofdm->fina_sync_err_cnt), +			 accum_ofdm->fina_sync_err_cnt, +			 delta_ofdm->fina_sync_err_cnt, +			 max_ofdm->fina_sync_err_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sfd_timeout:", +			 le32_to_cpu(ofdm->sfd_timeout), +			 accum_ofdm->sfd_timeout, delta_ofdm->sfd_timeout, +			 max_ofdm->sfd_timeout); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "fina_timeout:", +			 le32_to_cpu(ofdm->fina_timeout), +			 accum_ofdm->fina_timeout, delta_ofdm->fina_timeout, +			 max_ofdm->fina_timeout); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "unresponded_rts:", +			 le32_to_cpu(ofdm->unresponded_rts), +			 accum_ofdm->unresponded_rts, +			 delta_ofdm->unresponded_rts, +			 max_ofdm->unresponded_rts); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "rxe_frame_lmt_ovrun:", +			 le32_to_cpu(ofdm->rxe_frame_limit_overrun), +			 accum_ofdm->rxe_frame_limit_overrun, +			 delta_ofdm->rxe_frame_limit_overrun, +			 max_ofdm->rxe_frame_limit_overrun); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sent_ack_cnt:", +			 le32_to_cpu(ofdm->sent_ack_cnt), +			 accum_ofdm->sent_ack_cnt, delta_ofdm->sent_ack_cnt, +			 max_ofdm->sent_ack_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sent_cts_cnt:", +			 le32_to_cpu(ofdm->sent_cts_cnt), +			 accum_ofdm->sent_cts_cnt, delta_ofdm->sent_cts_cnt, +			 max_ofdm->sent_cts_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sent_ba_rsp_cnt:", +			 le32_to_cpu(ofdm->sent_ba_rsp_cnt), +			 accum_ofdm->sent_ba_rsp_cnt, +			 delta_ofdm->sent_ba_rsp_cnt, +			 max_ofdm->sent_ba_rsp_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "dsp_self_kill:", +			 le32_to_cpu(ofdm->dsp_self_kill), +			 accum_ofdm->dsp_self_kill, +			 delta_ofdm->dsp_self_kill, +			 max_ofdm->dsp_self_kill); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "mh_format_err:", +			 le32_to_cpu(ofdm->mh_format_err), +			 accum_ofdm->mh_format_err, +			 delta_ofdm->mh_format_err, +			 max_ofdm->mh_format_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "re_acq_main_rssi_sum:", +			 le32_to_cpu(ofdm->re_acq_main_rssi_sum), +			 accum_ofdm->re_acq_main_rssi_sum, +			 delta_ofdm->re_acq_main_rssi_sum, +			 max_ofdm->re_acq_main_rssi_sum); + +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_header, "Statistics_Rx - CCK:"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "ina_cnt:", +			 le32_to_cpu(cck->ina_cnt), accum_cck->ina_cnt, +			 delta_cck->ina_cnt, max_cck->ina_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "fina_cnt:", +			 le32_to_cpu(cck->fina_cnt), accum_cck->fina_cnt, +			 delta_cck->fina_cnt, max_cck->fina_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "plcp_err:", +			 le32_to_cpu(cck->plcp_err), accum_cck->plcp_err, +			 delta_cck->plcp_err, max_cck->plcp_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "crc32_err:", +			 le32_to_cpu(cck->crc32_err), accum_cck->crc32_err, +			 delta_cck->crc32_err, max_cck->crc32_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "overrun_err:", +			 le32_to_cpu(cck->overrun_err), +			 accum_cck->overrun_err, delta_cck->overrun_err, +			 max_cck->overrun_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "early_overrun_err:", +			 le32_to_cpu(cck->early_overrun_err), +			 accum_cck->early_overrun_err, +			 delta_cck->early_overrun_err, +			 max_cck->early_overrun_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "crc32_good:", +			 le32_to_cpu(cck->crc32_good), accum_cck->crc32_good, +			 delta_cck->crc32_good, max_cck->crc32_good); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "false_alarm_cnt:", +			 le32_to_cpu(cck->false_alarm_cnt), +			 accum_cck->false_alarm_cnt, +			 delta_cck->false_alarm_cnt, max_cck->false_alarm_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "fina_sync_err_cnt:", +			 le32_to_cpu(cck->fina_sync_err_cnt), +			 accum_cck->fina_sync_err_cnt, +			 delta_cck->fina_sync_err_cnt, +			 max_cck->fina_sync_err_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sfd_timeout:", +			 le32_to_cpu(cck->sfd_timeout), +			 accum_cck->sfd_timeout, delta_cck->sfd_timeout, +			 max_cck->sfd_timeout); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "fina_timeout:", +			 le32_to_cpu(cck->fina_timeout), +			 accum_cck->fina_timeout, delta_cck->fina_timeout, +			 max_cck->fina_timeout); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "unresponded_rts:", +			 le32_to_cpu(cck->unresponded_rts), +			 accum_cck->unresponded_rts, delta_cck->unresponded_rts, +			 max_cck->unresponded_rts); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "rxe_frame_lmt_ovrun:", +			 le32_to_cpu(cck->rxe_frame_limit_overrun), +			 accum_cck->rxe_frame_limit_overrun, +			 delta_cck->rxe_frame_limit_overrun, +			 max_cck->rxe_frame_limit_overrun); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sent_ack_cnt:", +			 le32_to_cpu(cck->sent_ack_cnt), +			 accum_cck->sent_ack_cnt, delta_cck->sent_ack_cnt, +			 max_cck->sent_ack_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sent_cts_cnt:", +			 le32_to_cpu(cck->sent_cts_cnt), +			 accum_cck->sent_cts_cnt, delta_cck->sent_cts_cnt, +			 max_cck->sent_cts_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sent_ba_rsp_cnt:", +			 le32_to_cpu(cck->sent_ba_rsp_cnt), +			 accum_cck->sent_ba_rsp_cnt, +			 delta_cck->sent_ba_rsp_cnt, +			 max_cck->sent_ba_rsp_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "dsp_self_kill:", +			 le32_to_cpu(cck->dsp_self_kill), +			 accum_cck->dsp_self_kill, delta_cck->dsp_self_kill, +			 max_cck->dsp_self_kill); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "mh_format_err:", +			 le32_to_cpu(cck->mh_format_err), +			 accum_cck->mh_format_err, delta_cck->mh_format_err, +			 max_cck->mh_format_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "re_acq_main_rssi_sum:", +			 le32_to_cpu(cck->re_acq_main_rssi_sum), +			 accum_cck->re_acq_main_rssi_sum, +			 delta_cck->re_acq_main_rssi_sum, +			 max_cck->re_acq_main_rssi_sum); + +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_header, "Statistics_Rx - GENERAL:"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "bogus_cts:", +			 le32_to_cpu(general->bogus_cts), +			 accum_general->bogus_cts, delta_general->bogus_cts, +			 max_general->bogus_cts); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "bogus_ack:", +			 le32_to_cpu(general->bogus_ack), +			 accum_general->bogus_ack, delta_general->bogus_ack, +			 max_general->bogus_ack); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "non_bssid_frames:", +			 le32_to_cpu(general->non_bssid_frames), +			 accum_general->non_bssid_frames, +			 delta_general->non_bssid_frames, +			 max_general->non_bssid_frames); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "filtered_frames:", +			 le32_to_cpu(general->filtered_frames), +			 accum_general->filtered_frames, +			 delta_general->filtered_frames, +			 max_general->filtered_frames); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "non_channel_beacons:", +			 le32_to_cpu(general->non_channel_beacons), +			 accum_general->non_channel_beacons, +			 delta_general->non_channel_beacons, +			 max_general->non_channel_beacons); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "channel_beacons:", +			 le32_to_cpu(general->channel_beacons), +			 accum_general->channel_beacons, +			 delta_general->channel_beacons, +			 max_general->channel_beacons); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "num_missed_bcon:", +			 le32_to_cpu(general->num_missed_bcon), +			 accum_general->num_missed_bcon, +			 delta_general->num_missed_bcon, +			 max_general->num_missed_bcon); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "adc_rx_saturation_time:", +			 le32_to_cpu(general->adc_rx_saturation_time), +			 accum_general->adc_rx_saturation_time, +			 delta_general->adc_rx_saturation_time, +			 max_general->adc_rx_saturation_time); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "ina_detect_search_tm:", +			 le32_to_cpu(general->ina_detection_search_time), +			 accum_general->ina_detection_search_time, +			 delta_general->ina_detection_search_time, +			 max_general->ina_detection_search_time); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_silence_rssi_a:", +			 le32_to_cpu(general->beacon_silence_rssi_a), +			 accum_general->beacon_silence_rssi_a, +			 delta_general->beacon_silence_rssi_a, +			 max_general->beacon_silence_rssi_a); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_silence_rssi_b:", +			 le32_to_cpu(general->beacon_silence_rssi_b), +			 accum_general->beacon_silence_rssi_b, +			 delta_general->beacon_silence_rssi_b, +			 max_general->beacon_silence_rssi_b); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_silence_rssi_c:", +			 le32_to_cpu(general->beacon_silence_rssi_c), +			 accum_general->beacon_silence_rssi_c, +			 delta_general->beacon_silence_rssi_c, +			 max_general->beacon_silence_rssi_c); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "interference_data_flag:", +			 le32_to_cpu(general->interference_data_flag), +			 accum_general->interference_data_flag, +			 delta_general->interference_data_flag, +			 max_general->interference_data_flag); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "channel_load:", +			 le32_to_cpu(general->channel_load), +			 accum_general->channel_load, +			 delta_general->channel_load, +			 max_general->channel_load); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "dsp_false_alarms:", +			 le32_to_cpu(general->dsp_false_alarms), +			 accum_general->dsp_false_alarms, +			 delta_general->dsp_false_alarms, +			 max_general->dsp_false_alarms); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_rssi_a:", +			 le32_to_cpu(general->beacon_rssi_a), +			 accum_general->beacon_rssi_a, +			 delta_general->beacon_rssi_a, +			 max_general->beacon_rssi_a); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_rssi_b:", +			 le32_to_cpu(general->beacon_rssi_b), +			 accum_general->beacon_rssi_b, +			 delta_general->beacon_rssi_b, +			 max_general->beacon_rssi_b); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_rssi_c:", +			 le32_to_cpu(general->beacon_rssi_c), +			 accum_general->beacon_rssi_c, +			 delta_general->beacon_rssi_c, +			 max_general->beacon_rssi_c); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_energy_a:", +			 le32_to_cpu(general->beacon_energy_a), +			 accum_general->beacon_energy_a, +			 delta_general->beacon_energy_a, +			 max_general->beacon_energy_a); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_energy_b:", +			 le32_to_cpu(general->beacon_energy_b), +			 accum_general->beacon_energy_b, +			 delta_general->beacon_energy_b, +			 max_general->beacon_energy_b); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "beacon_energy_c:", +			 le32_to_cpu(general->beacon_energy_c), +			 accum_general->beacon_energy_c, +			 delta_general->beacon_energy_c, +			 max_general->beacon_energy_c); + +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_header, "Statistics_Rx - OFDM_HT:"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "plcp_err:", +			 le32_to_cpu(ht->plcp_err), accum_ht->plcp_err, +			 delta_ht->plcp_err, max_ht->plcp_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "overrun_err:", +			 le32_to_cpu(ht->overrun_err), accum_ht->overrun_err, +			 delta_ht->overrun_err, max_ht->overrun_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "early_overrun_err:", +			 le32_to_cpu(ht->early_overrun_err), +			 accum_ht->early_overrun_err, +			 delta_ht->early_overrun_err, +			 max_ht->early_overrun_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "crc32_good:", +			 le32_to_cpu(ht->crc32_good), accum_ht->crc32_good, +			 delta_ht->crc32_good, max_ht->crc32_good); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "crc32_err:", +			 le32_to_cpu(ht->crc32_err), accum_ht->crc32_err, +			 delta_ht->crc32_err, max_ht->crc32_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "mh_format_err:", +			 le32_to_cpu(ht->mh_format_err), +			 accum_ht->mh_format_err, +			 delta_ht->mh_format_err, max_ht->mh_format_err); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg_crc32_good:", +			 le32_to_cpu(ht->agg_crc32_good), +			 accum_ht->agg_crc32_good, +			 delta_ht->agg_crc32_good, max_ht->agg_crc32_good); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg_mpdu_cnt:", +			 le32_to_cpu(ht->agg_mpdu_cnt), +			 accum_ht->agg_mpdu_cnt, +			 delta_ht->agg_mpdu_cnt, max_ht->agg_mpdu_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg_cnt:", +			 le32_to_cpu(ht->agg_cnt), accum_ht->agg_cnt, +			 delta_ht->agg_cnt, max_ht->agg_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "unsupport_mcs:", +			 le32_to_cpu(ht->unsupport_mcs), +			 accum_ht->unsupport_mcs, +			 delta_ht->unsupport_mcs, max_ht->unsupport_mcs); + +	spin_unlock_bh(&priv->statistics.lock); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_ucode_tx_stats_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	char *buf; +	int bufsz = (sizeof(struct statistics_tx) * 48) + 250; +	ssize_t ret; +	struct statistics_tx *tx, *accum_tx, *delta_tx, *max_tx; + +	if (!iwl_is_alive(priv)) +		return -EAGAIN; + +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	/* the statistic information display here is based on +	 * the last statistics notification from uCode +	 * might not reflect the current uCode activity +	 */ +	spin_lock_bh(&priv->statistics.lock); + +	tx = &priv->statistics.tx; +	accum_tx = &priv->accum_stats.tx; +	delta_tx = &priv->delta_stats.tx; +	max_tx = &priv->max_delta_stats.tx; + +	pos += iwl_statistics_flag(priv, buf, bufsz); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_header, "Statistics_Tx:"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "preamble:", +			 le32_to_cpu(tx->preamble_cnt), +			 accum_tx->preamble_cnt, +			 delta_tx->preamble_cnt, max_tx->preamble_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "rx_detected_cnt:", +			 le32_to_cpu(tx->rx_detected_cnt), +			 accum_tx->rx_detected_cnt, +			 delta_tx->rx_detected_cnt, max_tx->rx_detected_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "bt_prio_defer_cnt:", +			 le32_to_cpu(tx->bt_prio_defer_cnt), +			 accum_tx->bt_prio_defer_cnt, +			 delta_tx->bt_prio_defer_cnt, +			 max_tx->bt_prio_defer_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "bt_prio_kill_cnt:", +			 le32_to_cpu(tx->bt_prio_kill_cnt), +			 accum_tx->bt_prio_kill_cnt, +			 delta_tx->bt_prio_kill_cnt, +			 max_tx->bt_prio_kill_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "few_bytes_cnt:", +			 le32_to_cpu(tx->few_bytes_cnt), +			 accum_tx->few_bytes_cnt, +			 delta_tx->few_bytes_cnt, max_tx->few_bytes_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "cts_timeout:", +			 le32_to_cpu(tx->cts_timeout), accum_tx->cts_timeout, +			 delta_tx->cts_timeout, max_tx->cts_timeout); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "ack_timeout:", +			 le32_to_cpu(tx->ack_timeout), +			 accum_tx->ack_timeout, +			 delta_tx->ack_timeout, max_tx->ack_timeout); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "expected_ack_cnt:", +			 le32_to_cpu(tx->expected_ack_cnt), +			 accum_tx->expected_ack_cnt, +			 delta_tx->expected_ack_cnt, +			 max_tx->expected_ack_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "actual_ack_cnt:", +			 le32_to_cpu(tx->actual_ack_cnt), +			 accum_tx->actual_ack_cnt, +			 delta_tx->actual_ack_cnt, +			 max_tx->actual_ack_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "dump_msdu_cnt:", +			 le32_to_cpu(tx->dump_msdu_cnt), +			 accum_tx->dump_msdu_cnt, +			 delta_tx->dump_msdu_cnt, +			 max_tx->dump_msdu_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "abort_nxt_frame_mismatch:", +			 le32_to_cpu(tx->burst_abort_next_frame_mismatch_cnt), +			 accum_tx->burst_abort_next_frame_mismatch_cnt, +			 delta_tx->burst_abort_next_frame_mismatch_cnt, +			 max_tx->burst_abort_next_frame_mismatch_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "abort_missing_nxt_frame:", +			 le32_to_cpu(tx->burst_abort_missing_next_frame_cnt), +			 accum_tx->burst_abort_missing_next_frame_cnt, +			 delta_tx->burst_abort_missing_next_frame_cnt, +			 max_tx->burst_abort_missing_next_frame_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "cts_timeout_collision:", +			 le32_to_cpu(tx->cts_timeout_collision), +			 accum_tx->cts_timeout_collision, +			 delta_tx->cts_timeout_collision, +			 max_tx->cts_timeout_collision); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "ack_ba_timeout_collision:", +			 le32_to_cpu(tx->ack_or_ba_timeout_collision), +			 accum_tx->ack_or_ba_timeout_collision, +			 delta_tx->ack_or_ba_timeout_collision, +			 max_tx->ack_or_ba_timeout_collision); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg ba_timeout:", +			 le32_to_cpu(tx->agg.ba_timeout), +			 accum_tx->agg.ba_timeout, +			 delta_tx->agg.ba_timeout, +			 max_tx->agg.ba_timeout); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg ba_resched_frames:", +			 le32_to_cpu(tx->agg.ba_reschedule_frames), +			 accum_tx->agg.ba_reschedule_frames, +			 delta_tx->agg.ba_reschedule_frames, +			 max_tx->agg.ba_reschedule_frames); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg scd_query_agg_frame:", +			 le32_to_cpu(tx->agg.scd_query_agg_frame_cnt), +			 accum_tx->agg.scd_query_agg_frame_cnt, +			 delta_tx->agg.scd_query_agg_frame_cnt, +			 max_tx->agg.scd_query_agg_frame_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg scd_query_no_agg:", +			 le32_to_cpu(tx->agg.scd_query_no_agg), +			 accum_tx->agg.scd_query_no_agg, +			 delta_tx->agg.scd_query_no_agg, +			 max_tx->agg.scd_query_no_agg); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg scd_query_agg:", +			 le32_to_cpu(tx->agg.scd_query_agg), +			 accum_tx->agg.scd_query_agg, +			 delta_tx->agg.scd_query_agg, +			 max_tx->agg.scd_query_agg); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg scd_query_mismatch:", +			 le32_to_cpu(tx->agg.scd_query_mismatch), +			 accum_tx->agg.scd_query_mismatch, +			 delta_tx->agg.scd_query_mismatch, +			 max_tx->agg.scd_query_mismatch); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg frame_not_ready:", +			 le32_to_cpu(tx->agg.frame_not_ready), +			 accum_tx->agg.frame_not_ready, +			 delta_tx->agg.frame_not_ready, +			 max_tx->agg.frame_not_ready); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg underrun:", +			 le32_to_cpu(tx->agg.underrun), +			 accum_tx->agg.underrun, +			 delta_tx->agg.underrun, max_tx->agg.underrun); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg bt_prio_kill:", +			 le32_to_cpu(tx->agg.bt_prio_kill), +			 accum_tx->agg.bt_prio_kill, +			 delta_tx->agg.bt_prio_kill, +			 max_tx->agg.bt_prio_kill); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "agg rx_ba_rsp_cnt:", +			 le32_to_cpu(tx->agg.rx_ba_rsp_cnt), +			 accum_tx->agg.rx_ba_rsp_cnt, +			 delta_tx->agg.rx_ba_rsp_cnt, +			 max_tx->agg.rx_ba_rsp_cnt); + +	if (tx->tx_power.ant_a || tx->tx_power.ant_b || tx->tx_power.ant_c) { +		pos += scnprintf(buf + pos, bufsz - pos, +			"tx power: (1/2 dB step)\n"); +		if ((priv->nvm_data->valid_tx_ant & ANT_A) && +		    tx->tx_power.ant_a) +			pos += scnprintf(buf + pos, bufsz - pos, +					fmt_hex, "antenna A:", +					tx->tx_power.ant_a); +		if ((priv->nvm_data->valid_tx_ant & ANT_B) && +		    tx->tx_power.ant_b) +			pos += scnprintf(buf + pos, bufsz - pos, +					fmt_hex, "antenna B:", +					tx->tx_power.ant_b); +		if ((priv->nvm_data->valid_tx_ant & ANT_C) && +		    tx->tx_power.ant_c) +			pos += scnprintf(buf + pos, bufsz - pos, +					fmt_hex, "antenna C:", +					tx->tx_power.ant_c); +	} + +	spin_unlock_bh(&priv->statistics.lock); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_ucode_general_stats_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	char *buf; +	int bufsz = sizeof(struct statistics_general) * 10 + 300; +	ssize_t ret; +	struct statistics_general_common *general, *accum_general; +	struct statistics_general_common *delta_general, *max_general; +	struct statistics_dbg *dbg, *accum_dbg, *delta_dbg, *max_dbg; +	struct statistics_div *div, *accum_div, *delta_div, *max_div; + +	if (!iwl_is_alive(priv)) +		return -EAGAIN; + +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	/* the statistic information display here is based on +	 * the last statistics notification from uCode +	 * might not reflect the current uCode activity +	 */ + +	spin_lock_bh(&priv->statistics.lock); + +	general = &priv->statistics.common; +	dbg = &priv->statistics.common.dbg; +	div = &priv->statistics.common.div; +	accum_general = &priv->accum_stats.common; +	accum_dbg = &priv->accum_stats.common.dbg; +	accum_div = &priv->accum_stats.common.div; +	delta_general = &priv->delta_stats.common; +	max_general = &priv->max_delta_stats.common; +	delta_dbg = &priv->delta_stats.common.dbg; +	max_dbg = &priv->max_delta_stats.common.dbg; +	delta_div = &priv->delta_stats.common.div; +	max_div = &priv->max_delta_stats.common.div; + +	pos += iwl_statistics_flag(priv, buf, bufsz); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_header, "Statistics_General:"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_value, "temperature:", +			 le32_to_cpu(general->temperature)); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_value, "temperature_m:", +			 le32_to_cpu(general->temperature_m)); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_value, "ttl_timestamp:", +			 le32_to_cpu(general->ttl_timestamp)); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "burst_check:", +			 le32_to_cpu(dbg->burst_check), +			 accum_dbg->burst_check, +			 delta_dbg->burst_check, max_dbg->burst_check); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "burst_count:", +			 le32_to_cpu(dbg->burst_count), +			 accum_dbg->burst_count, +			 delta_dbg->burst_count, max_dbg->burst_count); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "wait_for_silence_timeout_count:", +			 le32_to_cpu(dbg->wait_for_silence_timeout_cnt), +			 accum_dbg->wait_for_silence_timeout_cnt, +			 delta_dbg->wait_for_silence_timeout_cnt, +			 max_dbg->wait_for_silence_timeout_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "sleep_time:", +			 le32_to_cpu(general->sleep_time), +			 accum_general->sleep_time, +			 delta_general->sleep_time, max_general->sleep_time); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "slots_out:", +			 le32_to_cpu(general->slots_out), +			 accum_general->slots_out, +			 delta_general->slots_out, max_general->slots_out); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "slots_idle:", +			 le32_to_cpu(general->slots_idle), +			 accum_general->slots_idle, +			 delta_general->slots_idle, max_general->slots_idle); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "tx_on_a:", +			 le32_to_cpu(div->tx_on_a), accum_div->tx_on_a, +			 delta_div->tx_on_a, max_div->tx_on_a); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "tx_on_b:", +			 le32_to_cpu(div->tx_on_b), accum_div->tx_on_b, +			 delta_div->tx_on_b, max_div->tx_on_b); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "exec_time:", +			 le32_to_cpu(div->exec_time), accum_div->exec_time, +			 delta_div->exec_time, max_div->exec_time); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "probe_time:", +			 le32_to_cpu(div->probe_time), accum_div->probe_time, +			 delta_div->probe_time, max_div->probe_time); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "rx_enable_counter:", +			 le32_to_cpu(general->rx_enable_counter), +			 accum_general->rx_enable_counter, +			 delta_general->rx_enable_counter, +			 max_general->rx_enable_counter); +	pos += scnprintf(buf + pos, bufsz - pos, +			 fmt_table, "num_of_sos_states:", +			 le32_to_cpu(general->num_of_sos_states), +			 accum_general->num_of_sos_states, +			 delta_general->num_of_sos_states, +			 max_general->num_of_sos_states); + +	spin_unlock_bh(&priv->statistics.lock); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_ucode_bt_stats_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = (struct iwl_priv *)file->private_data; +	int pos = 0; +	char *buf; +	int bufsz = (sizeof(struct statistics_bt_activity) * 24) + 200; +	ssize_t ret; +	struct statistics_bt_activity *bt, *accum_bt; + +	if (!iwl_is_alive(priv)) +		return -EAGAIN; + +	if (!priv->bt_enable_flag) +		return -EINVAL; + +	/* make request to uCode to retrieve statistics information */ +	mutex_lock(&priv->mutex); +	ret = iwl_send_statistics_request(priv, 0, false); +	mutex_unlock(&priv->mutex); + +	if (ret) +		return -EAGAIN; +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	/* +	 * the statistic information display here is based on +	 * the last statistics notification from uCode +	 * might not reflect the current uCode activity +	 */ + +	spin_lock_bh(&priv->statistics.lock); + +	bt = &priv->statistics.bt_activity; +	accum_bt = &priv->accum_stats.bt_activity; + +	pos += iwl_statistics_flag(priv, buf, bufsz); +	pos += scnprintf(buf + pos, bufsz - pos, "Statistics_BT:\n"); +	pos += scnprintf(buf + pos, bufsz - pos, +			"\t\t\tcurrent\t\t\taccumulative\n"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "hi_priority_tx_req_cnt:\t\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->hi_priority_tx_req_cnt), +			 accum_bt->hi_priority_tx_req_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "hi_priority_tx_denied_cnt:\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->hi_priority_tx_denied_cnt), +			 accum_bt->hi_priority_tx_denied_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "lo_priority_tx_req_cnt:\t\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->lo_priority_tx_req_cnt), +			 accum_bt->lo_priority_tx_req_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "lo_priority_tx_denied_cnt:\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->lo_priority_tx_denied_cnt), +			 accum_bt->lo_priority_tx_denied_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "hi_priority_rx_req_cnt:\t\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->hi_priority_rx_req_cnt), +			 accum_bt->hi_priority_rx_req_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "hi_priority_rx_denied_cnt:\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->hi_priority_rx_denied_cnt), +			 accum_bt->hi_priority_rx_denied_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "lo_priority_rx_req_cnt:\t\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->lo_priority_rx_req_cnt), +			 accum_bt->lo_priority_rx_req_cnt); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "lo_priority_rx_denied_cnt:\t%u\t\t\t%u\n", +			 le32_to_cpu(bt->lo_priority_rx_denied_cnt), +			 accum_bt->lo_priority_rx_denied_cnt); + +	pos += scnprintf(buf + pos, bufsz - pos, +			 "(rx)num_bt_kills:\t\t%u\t\t\t%u\n", +			 le32_to_cpu(priv->statistics.num_bt_kills), +			 priv->statistics.accum_num_bt_kills); + +	spin_unlock_bh(&priv->statistics.lock); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_reply_tx_error_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = (struct iwl_priv *)file->private_data; +	int pos = 0; +	char *buf; +	int bufsz = (sizeof(struct reply_tx_error_statistics) * 24) + +		(sizeof(struct reply_agg_tx_error_statistics) * 24) + 200; +	ssize_t ret; + +	if (!iwl_is_alive(priv)) +		return -EAGAIN; + +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	pos += scnprintf(buf + pos, bufsz - pos, "Statistics_TX_Error:\n"); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_POSTPONE_DELAY), +			 priv->reply_tx_stats.pp_delay); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_POSTPONE_FEW_BYTES), +			 priv->reply_tx_stats.pp_few_bytes); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_POSTPONE_BT_PRIO), +			 priv->reply_tx_stats.pp_bt_prio); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_POSTPONE_QUIET_PERIOD), +			 priv->reply_tx_stats.pp_quiet_period); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_POSTPONE_CALC_TTAK), +			 priv->reply_tx_stats.pp_calc_ttak); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t%u\n", +			 iwl_get_tx_fail_reason( +				TX_STATUS_FAIL_INTERNAL_CROSSED_RETRY), +			 priv->reply_tx_stats.int_crossed_retry); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_SHORT_LIMIT), +			 priv->reply_tx_stats.short_limit); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_LONG_LIMIT), +			 priv->reply_tx_stats.long_limit); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_FIFO_UNDERRUN), +			 priv->reply_tx_stats.fifo_underrun); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_DRAIN_FLOW), +			 priv->reply_tx_stats.drain_flow); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_RFKILL_FLUSH), +			 priv->reply_tx_stats.rfkill_flush); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_LIFE_EXPIRE), +			 priv->reply_tx_stats.life_expire); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_DEST_PS), +			 priv->reply_tx_stats.dest_ps); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_HOST_ABORTED), +			 priv->reply_tx_stats.host_abort); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_BT_RETRY), +			 priv->reply_tx_stats.pp_delay); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_STA_INVALID), +			 priv->reply_tx_stats.sta_invalid); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_FRAG_DROPPED), +			 priv->reply_tx_stats.frag_drop); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_TID_DISABLE), +			 priv->reply_tx_stats.tid_disable); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_FIFO_FLUSHED), +			 priv->reply_tx_stats.fifo_flush); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t%u\n", +			 iwl_get_tx_fail_reason( +				TX_STATUS_FAIL_INSUFFICIENT_CF_POLL), +			 priv->reply_tx_stats.insuff_cf_poll); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_tx_fail_reason(TX_STATUS_FAIL_PASSIVE_NO_RX), +			 priv->reply_tx_stats.fail_hw_drop); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t%u\n", +			 iwl_get_tx_fail_reason( +				TX_STATUS_FAIL_NO_BEACON_ON_RADAR), +			 priv->reply_tx_stats.sta_color_mismatch); +	pos += scnprintf(buf + pos, bufsz - pos, "UNKNOWN:\t\t\t%u\n", +			 priv->reply_tx_stats.unknown); + +	pos += scnprintf(buf + pos, bufsz - pos, +			 "\nStatistics_Agg_TX_Error:\n"); + +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_UNDERRUN_MSK), +			 priv->reply_agg_tx_stats.underrun); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_BT_PRIO_MSK), +			 priv->reply_agg_tx_stats.bt_prio); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_FEW_BYTES_MSK), +			 priv->reply_agg_tx_stats.few_bytes); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_ABORT_MSK), +			 priv->reply_agg_tx_stats.abort); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t%u\n", +			 iwl_get_agg_tx_fail_reason( +				AGG_TX_STATE_LAST_SENT_TTL_MSK), +			 priv->reply_agg_tx_stats.last_sent_ttl); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t%u\n", +			 iwl_get_agg_tx_fail_reason( +				AGG_TX_STATE_LAST_SENT_TRY_CNT_MSK), +			 priv->reply_agg_tx_stats.last_sent_try); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t%u\n", +			 iwl_get_agg_tx_fail_reason( +				AGG_TX_STATE_LAST_SENT_BT_KILL_MSK), +			 priv->reply_agg_tx_stats.last_sent_bt_kill); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_SCD_QUERY_MSK), +			 priv->reply_agg_tx_stats.scd_query); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t%u\n", +			 iwl_get_agg_tx_fail_reason( +				AGG_TX_STATE_TEST_BAD_CRC32_MSK), +			 priv->reply_agg_tx_stats.bad_crc32); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_RESPONSE_MSK), +			 priv->reply_agg_tx_stats.response); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_DUMP_TX_MSK), +			 priv->reply_agg_tx_stats.dump_tx); +	pos += scnprintf(buf + pos, bufsz - pos, "%s:\t\t\t%u\n", +			 iwl_get_agg_tx_fail_reason(AGG_TX_STATE_DELAY_TX_MSK), +			 priv->reply_agg_tx_stats.delay_tx); +	pos += scnprintf(buf + pos, bufsz - pos, "UNKNOWN:\t\t\t%u\n", +			 priv->reply_agg_tx_stats.unknown); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_sensitivity_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	int cnt = 0; +	char *buf; +	int bufsz = sizeof(struct iwl_sensitivity_data) * 4 + 100; +	ssize_t ret; +	struct iwl_sensitivity_data *data; + +	data = &priv->sensitivity_data; +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	pos += scnprintf(buf + pos, bufsz - pos, "auto_corr_ofdm:\t\t\t %u\n", +			data->auto_corr_ofdm); +	pos += scnprintf(buf + pos, bufsz - pos, +			"auto_corr_ofdm_mrc:\t\t %u\n", +			data->auto_corr_ofdm_mrc); +	pos += scnprintf(buf + pos, bufsz - pos, "auto_corr_ofdm_x1:\t\t %u\n", +			data->auto_corr_ofdm_x1); +	pos += scnprintf(buf + pos, bufsz - pos, +			"auto_corr_ofdm_mrc_x1:\t\t %u\n", +			data->auto_corr_ofdm_mrc_x1); +	pos += scnprintf(buf + pos, bufsz - pos, "auto_corr_cck:\t\t\t %u\n", +			data->auto_corr_cck); +	pos += scnprintf(buf + pos, bufsz - pos, "auto_corr_cck_mrc:\t\t %u\n", +			data->auto_corr_cck_mrc); +	pos += scnprintf(buf + pos, bufsz - pos, +			"last_bad_plcp_cnt_ofdm:\t\t %u\n", +			data->last_bad_plcp_cnt_ofdm); +	pos += scnprintf(buf + pos, bufsz - pos, "last_fa_cnt_ofdm:\t\t %u\n", +			data->last_fa_cnt_ofdm); +	pos += scnprintf(buf + pos, bufsz - pos, +			"last_bad_plcp_cnt_cck:\t\t %u\n", +			data->last_bad_plcp_cnt_cck); +	pos += scnprintf(buf + pos, bufsz - pos, "last_fa_cnt_cck:\t\t %u\n", +			data->last_fa_cnt_cck); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_curr_state:\t\t\t %u\n", +			data->nrg_curr_state); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_prev_state:\t\t\t %u\n", +			data->nrg_prev_state); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_value:\t\t\t"); +	for (cnt = 0; cnt < 10; cnt++) { +		pos += scnprintf(buf + pos, bufsz - pos, " %u", +				data->nrg_value[cnt]); +	} +	pos += scnprintf(buf + pos, bufsz - pos, "\n"); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_silence_rssi:\t\t"); +	for (cnt = 0; cnt < NRG_NUM_PREV_STAT_L; cnt++) { +		pos += scnprintf(buf + pos, bufsz - pos, " %u", +				data->nrg_silence_rssi[cnt]); +	} +	pos += scnprintf(buf + pos, bufsz - pos, "\n"); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_silence_ref:\t\t %u\n", +			data->nrg_silence_ref); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_energy_idx:\t\t\t %u\n", +			data->nrg_energy_idx); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_silence_idx:\t\t %u\n", +			data->nrg_silence_idx); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_th_cck:\t\t\t %u\n", +			data->nrg_th_cck); +	pos += scnprintf(buf + pos, bufsz - pos, +			"nrg_auto_corr_silence_diff:\t %u\n", +			data->nrg_auto_corr_silence_diff); +	pos += scnprintf(buf + pos, bufsz - pos, "num_in_cck_no_fa:\t\t %u\n", +			data->num_in_cck_no_fa); +	pos += scnprintf(buf + pos, bufsz - pos, "nrg_th_ofdm:\t\t\t %u\n", +			data->nrg_th_ofdm); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + + +static ssize_t iwl_dbgfs_chain_noise_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	int cnt = 0; +	char *buf; +	int bufsz = sizeof(struct iwl_chain_noise_data) * 4 + 100; +	ssize_t ret; +	struct iwl_chain_noise_data *data; + +	data = &priv->chain_noise_data; +	buf = kzalloc(bufsz, GFP_KERNEL); +	if (!buf) +		return -ENOMEM; + +	pos += scnprintf(buf + pos, bufsz - pos, "active_chains:\t\t\t %u\n", +			data->active_chains); +	pos += scnprintf(buf + pos, bufsz - pos, "chain_noise_a:\t\t\t %u\n", +			data->chain_noise_a); +	pos += scnprintf(buf + pos, bufsz - pos, "chain_noise_b:\t\t\t %u\n", +			data->chain_noise_b); +	pos += scnprintf(buf + pos, bufsz - pos, "chain_noise_c:\t\t\t %u\n", +			data->chain_noise_c); +	pos += scnprintf(buf + pos, bufsz - pos, "chain_signal_a:\t\t\t %u\n", +			data->chain_signal_a); +	pos += scnprintf(buf + pos, bufsz - pos, "chain_signal_b:\t\t\t %u\n", +			data->chain_signal_b); +	pos += scnprintf(buf + pos, bufsz - pos, "chain_signal_c:\t\t\t %u\n", +			data->chain_signal_c); +	pos += scnprintf(buf + pos, bufsz - pos, "beacon_count:\t\t\t %u\n", +			data->beacon_count); + +	pos += scnprintf(buf + pos, bufsz - pos, "disconn_array:\t\t\t"); +	for (cnt = 0; cnt < NUM_RX_CHAINS; cnt++) { +		pos += scnprintf(buf + pos, bufsz - pos, " %u", +				data->disconn_array[cnt]); +	} +	pos += scnprintf(buf + pos, bufsz - pos, "\n"); +	pos += scnprintf(buf + pos, bufsz - pos, "delta_gain_code:\t\t"); +	for (cnt = 0; cnt < NUM_RX_CHAINS; cnt++) { +		pos += scnprintf(buf + pos, bufsz - pos, " %u", +				data->delta_gain_code[cnt]); +	} +	pos += scnprintf(buf + pos, bufsz - pos, "\n"); +	pos += scnprintf(buf + pos, bufsz - pos, "radio_write:\t\t\t %u\n", +			data->radio_write); +	pos += scnprintf(buf + pos, bufsz - pos, "state:\t\t\t\t %u\n", +			data->state); + +	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_power_save_status_read(struct file *file, +						    char __user *user_buf, +						    size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[60]; +	int pos = 0; +	const size_t bufsz = sizeof(buf); +	u32 pwrsave_status; + +	pwrsave_status = iwl_read32(priv->trans, CSR_GP_CNTRL) & +			CSR_GP_REG_POWER_SAVE_STATUS_MSK; + +	pos += scnprintf(buf + pos, bufsz - pos, "Power Save Status: "); +	pos += scnprintf(buf + pos, bufsz - pos, "%s\n", +		(pwrsave_status == CSR_GP_REG_NO_POWER_SAVE) ? "none" : +		(pwrsave_status == CSR_GP_REG_MAC_POWER_SAVE) ? "MAC" : +		(pwrsave_status == CSR_GP_REG_PHY_POWER_SAVE) ? "PHY" : +		"error"); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_clear_ucode_statistics_write(struct file *file, +					 const char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int clear; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &clear) != 1) +		return -EFAULT; + +	/* make request to uCode to retrieve statistics information */ +	mutex_lock(&priv->mutex); +	iwl_send_statistics_request(priv, 0, true); +	mutex_unlock(&priv->mutex); + +	return count; +} + +static ssize_t iwl_dbgfs_ucode_tracing_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	char buf[128]; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, "ucode trace timer is %s\n", +			priv->event_log.ucode_trace ? "On" : "Off"); +	pos += scnprintf(buf + pos, bufsz - pos, "non_wraps_count:\t\t %u\n", +			priv->event_log.non_wraps_count); +	pos += scnprintf(buf + pos, bufsz - pos, "wraps_once_count:\t\t %u\n", +			priv->event_log.wraps_once_count); +	pos += scnprintf(buf + pos, bufsz - pos, "wraps_more_count:\t\t %u\n", +			priv->event_log.wraps_more_count); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_ucode_tracing_write(struct file *file, +					 const char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int trace; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &trace) != 1) +		return -EFAULT; + +	if (trace) { +		priv->event_log.ucode_trace = true; +		if (iwl_is_alive(priv)) { +			/* start collecting data now */ +			mod_timer(&priv->ucode_trace, jiffies); +		} +	} else { +		priv->event_log.ucode_trace = false; +		del_timer_sync(&priv->ucode_trace); +	} + +	return count; +} + +static ssize_t iwl_dbgfs_rxon_flags_read(struct file *file, +					 char __user *user_buf, +					 size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int len = 0; +	char buf[20]; + +	len = sprintf(buf, "0x%04X\n", +		le32_to_cpu(priv->contexts[IWL_RXON_CTX_BSS].active.flags)); +	return simple_read_from_buffer(user_buf, count, ppos, buf, len); +} + +static ssize_t iwl_dbgfs_rxon_filter_flags_read(struct file *file, +						char __user *user_buf, +						size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int len = 0; +	char buf[20]; + +	len = sprintf(buf, "0x%04X\n", +		le32_to_cpu(priv->contexts[IWL_RXON_CTX_BSS].active.filter_flags)); +	return simple_read_from_buffer(user_buf, count, ppos, buf, len); +} + +static ssize_t iwl_dbgfs_missed_beacon_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	char buf[12]; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, "%d\n", +			priv->missed_beacon_threshold); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_missed_beacon_write(struct file *file, +					 const char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int missed; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &missed) != 1) +		return -EINVAL; + +	if (missed < IWL_MISSED_BEACON_THRESHOLD_MIN || +	    missed > IWL_MISSED_BEACON_THRESHOLD_MAX) +		priv->missed_beacon_threshold = +			IWL_MISSED_BEACON_THRESHOLD_DEF; +	else +		priv->missed_beacon_threshold = missed; + +	return count; +} + +static ssize_t iwl_dbgfs_plcp_delta_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	char buf[12]; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, "%u\n", +			priv->plcp_delta_threshold); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_plcp_delta_write(struct file *file, +					const char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int plcp; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &plcp) != 1) +		return -EINVAL; +	if ((plcp < IWL_MAX_PLCP_ERR_THRESHOLD_MIN) || +		(plcp > IWL_MAX_PLCP_ERR_THRESHOLD_MAX)) +		priv->plcp_delta_threshold = +			IWL_MAX_PLCP_ERR_THRESHOLD_DISABLE; +	else +		priv->plcp_delta_threshold = plcp; +	return count; +} + +static ssize_t iwl_dbgfs_rf_reset_read(struct file *file, +				       char __user *user_buf, +				       size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	int pos = 0; +	char buf[300]; +	const size_t bufsz = sizeof(buf); +	struct iwl_rf_reset *rf_reset = &priv->rf_reset; + +	pos += scnprintf(buf + pos, bufsz - pos, +			"RF reset statistics\n"); +	pos += scnprintf(buf + pos, bufsz - pos, +			"\tnumber of reset request: %d\n", +			rf_reset->reset_request_count); +	pos += scnprintf(buf + pos, bufsz - pos, +			"\tnumber of reset request success: %d\n", +			rf_reset->reset_success_count); +	pos += scnprintf(buf + pos, bufsz - pos, +			"\tnumber of reset request reject: %d\n", +			rf_reset->reset_reject_count); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_rf_reset_write(struct file *file, +					const char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	int ret; + +	ret = iwl_force_rf_reset(priv, true); +	return ret ? ret : count; +} + +static ssize_t iwl_dbgfs_txfifo_flush_write(struct file *file, +					const char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int flush; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &flush) != 1) +		return -EINVAL; + +	if (iwl_is_rfkill(priv)) +		return -EFAULT; + +	iwlagn_dev_txfifo_flush(priv); + +	return count; +} + +static ssize_t iwl_dbgfs_bt_traffic_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = (struct iwl_priv *)file->private_data; +	int pos = 0; +	char buf[200]; +	const size_t bufsz = sizeof(buf); + +	if (!priv->bt_enable_flag) { +		pos += scnprintf(buf + pos, bufsz - pos, "BT coex disabled\n"); +		return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +	} +	pos += scnprintf(buf + pos, bufsz - pos, "BT enable flag: 0x%x\n", +		priv->bt_enable_flag); +	pos += scnprintf(buf + pos, bufsz - pos, "BT in %s mode\n", +		priv->bt_full_concurrent ? "full concurrency" : "3-wire"); +	pos += scnprintf(buf + pos, bufsz - pos, "BT status: %s, " +			 "last traffic notif: %d\n", +		priv->bt_status ? "On" : "Off", priv->last_bt_traffic_load); +	pos += scnprintf(buf + pos, bufsz - pos, "ch_announcement: %d, " +			 "kill_ack_mask: %x, kill_cts_mask: %x\n", +		priv->bt_ch_announce, priv->kill_ack_mask, +		priv->kill_cts_mask); + +	pos += scnprintf(buf + pos, bufsz - pos, "bluetooth traffic load: "); +	switch (priv->bt_traffic_load) { +	case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS: +		pos += scnprintf(buf + pos, bufsz - pos, "Continuous\n"); +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_HIGH: +		pos += scnprintf(buf + pos, bufsz - pos, "High\n"); +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_LOW: +		pos += scnprintf(buf + pos, bufsz - pos, "Low\n"); +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_NONE: +	default: +		pos += scnprintf(buf + pos, bufsz - pos, "None\n"); +		break; +	} + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_protection_mode_read(struct file *file, +					char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = (struct iwl_priv *)file->private_data; + +	int pos = 0; +	char buf[40]; +	const size_t bufsz = sizeof(buf); + +	if (priv->cfg->ht_params) +		pos += scnprintf(buf + pos, bufsz - pos, +			 "use %s for aggregation\n", +			 (priv->hw_params.use_rts_for_aggregation) ? +				"rts/cts" : "cts-to-self"); +	else +		pos += scnprintf(buf + pos, bufsz - pos, "N/A"); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_protection_mode_write(struct file *file, +					const char __user *user_buf, +					size_t count, loff_t *ppos) { + +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; +	int rts; + +	if (!priv->cfg->ht_params) +		return -EINVAL; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &rts) != 1) +		return -EINVAL; +	if (rts) +		priv->hw_params.use_rts_for_aggregation = true; +	else +		priv->hw_params.use_rts_for_aggregation = false; +	return count; +} + +static int iwl_cmd_echo_test(struct iwl_priv *priv) +{ +	int ret; +	struct iwl_host_cmd cmd = { +		.id = REPLY_ECHO, +		.len = { 0 }, +	}; + +	ret = iwl_dvm_send_cmd(priv, &cmd); +	if (ret) +		IWL_ERR(priv, "echo testing fail: 0X%x\n", ret); +	else +		IWL_DEBUG_INFO(priv, "echo testing pass\n"); +	return ret; +} + +static ssize_t iwl_dbgfs_echo_test_write(struct file *file, +					const char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	int buf_size; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; + +	iwl_cmd_echo_test(priv); +	return count; +} + +#ifdef CONFIG_IWLWIFI_DEBUG +static ssize_t iwl_dbgfs_log_event_read(struct file *file, +					 char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char *buf = NULL; +	ssize_t ret; + +	ret = iwl_dump_nic_event_log(priv, true, &buf); +	if (ret > 0) +		ret = simple_read_from_buffer(user_buf, count, ppos, buf, ret); +	kfree(buf); +	return ret; +} + +static ssize_t iwl_dbgfs_log_event_write(struct file *file, +					const char __user *user_buf, +					size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	u32 event_log_flag; +	char buf[8]; +	int buf_size; + +	/* check that the interface is up */ +	if (!iwl_is_ready(priv)) +		return -EAGAIN; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%d", &event_log_flag) != 1) +		return -EFAULT; +	if (event_log_flag == 1) +		iwl_dump_nic_event_log(priv, true, NULL); + +	return count; +} +#endif + +static ssize_t iwl_dbgfs_calib_disabled_read(struct file *file, +					 char __user *user_buf, +					 size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[120]; +	int pos = 0; +	const size_t bufsz = sizeof(buf); + +	pos += scnprintf(buf + pos, bufsz - pos, +			 "Sensitivity calibrations %s\n", +			 (priv->calib_disabled & +					IWL_SENSITIVITY_CALIB_DISABLED) ? +			 "DISABLED" : "ENABLED"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "Chain noise calibrations %s\n", +			 (priv->calib_disabled & +					IWL_CHAIN_NOISE_CALIB_DISABLED) ? +			 "DISABLED" : "ENABLED"); +	pos += scnprintf(buf + pos, bufsz - pos, +			 "Tx power calibrations %s\n", +			 (priv->calib_disabled & +					IWL_TX_POWER_CALIB_DISABLED) ? +			 "DISABLED" : "ENABLED"); + +	return simple_read_from_buffer(user_buf, count, ppos, buf, pos); +} + +static ssize_t iwl_dbgfs_calib_disabled_write(struct file *file, +					      const char __user *user_buf, +					      size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	char buf[8]; +	u32 calib_disabled; +	int buf_size; + +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) - 1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; +	if (sscanf(buf, "%x", &calib_disabled) != 1) +		return -EFAULT; + +	priv->calib_disabled = calib_disabled; + +	return count; +} + +static ssize_t iwl_dbgfs_fw_restart_write(struct file *file, +					  const char __user *user_buf, +					  size_t count, loff_t *ppos) +{ +	struct iwl_priv *priv = file->private_data; +	bool restart_fw = iwlwifi_mod_params.restart_fw; +	int ret; + +	iwlwifi_mod_params.restart_fw = true; + +	mutex_lock(&priv->mutex); + +	/* take the return value to make compiler happy - it will fail anyway */ +	ret = iwl_dvm_send_cmd_pdu(priv, REPLY_ERROR, 0, 0, NULL); + +	mutex_unlock(&priv->mutex); + +	iwlwifi_mod_params.restart_fw = restart_fw; + +	return count; +} + +DEBUGFS_READ_FILE_OPS(ucode_rx_stats); +DEBUGFS_READ_FILE_OPS(ucode_tx_stats); +DEBUGFS_READ_FILE_OPS(ucode_general_stats); +DEBUGFS_READ_FILE_OPS(sensitivity); +DEBUGFS_READ_FILE_OPS(chain_noise); +DEBUGFS_READ_FILE_OPS(power_save_status); +DEBUGFS_WRITE_FILE_OPS(clear_ucode_statistics); +DEBUGFS_READ_WRITE_FILE_OPS(ucode_tracing); +DEBUGFS_READ_WRITE_FILE_OPS(missed_beacon); +DEBUGFS_READ_WRITE_FILE_OPS(plcp_delta); +DEBUGFS_READ_WRITE_FILE_OPS(rf_reset); +DEBUGFS_READ_FILE_OPS(rxon_flags); +DEBUGFS_READ_FILE_OPS(rxon_filter_flags); +DEBUGFS_WRITE_FILE_OPS(txfifo_flush); +DEBUGFS_READ_FILE_OPS(ucode_bt_stats); +DEBUGFS_READ_FILE_OPS(bt_traffic); +DEBUGFS_READ_WRITE_FILE_OPS(protection_mode); +DEBUGFS_READ_FILE_OPS(reply_tx_error); +DEBUGFS_WRITE_FILE_OPS(echo_test); +DEBUGFS_WRITE_FILE_OPS(fw_restart); +#ifdef CONFIG_IWLWIFI_DEBUG +DEBUGFS_READ_WRITE_FILE_OPS(log_event); +#endif +DEBUGFS_READ_WRITE_FILE_OPS(calib_disabled); + +/* + * Create the debugfs files and directories + * + */ +int iwl_dbgfs_register(struct iwl_priv *priv, struct dentry *dbgfs_dir) +{ +	struct dentry *dir_data, *dir_rf, *dir_debug; + +	priv->debugfs_dir = dbgfs_dir; + +	dir_data = debugfs_create_dir("data", dbgfs_dir); +	if (!dir_data) +		goto err; +	dir_rf = debugfs_create_dir("rf", dbgfs_dir); +	if (!dir_rf) +		goto err; +	dir_debug = debugfs_create_dir("debug", dbgfs_dir); +	if (!dir_debug) +		goto err; + +	DEBUGFS_ADD_FILE(nvm, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(sram, dir_data, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(wowlan_sram, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(stations, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(channels, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(status, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(rx_handlers, dir_data, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(qos, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(sleep_level_override, dir_data, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(current_sleep_command, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(thermal_throttling, dir_data, S_IRUSR); +	DEBUGFS_ADD_FILE(disable_ht40, dir_data, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(temperature, dir_data, S_IRUSR); + +	DEBUGFS_ADD_FILE(power_save_status, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(clear_ucode_statistics, dir_debug, S_IWUSR); +	DEBUGFS_ADD_FILE(missed_beacon, dir_debug, S_IWUSR); +	DEBUGFS_ADD_FILE(plcp_delta, dir_debug, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(rf_reset, dir_debug, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(ucode_rx_stats, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(ucode_tx_stats, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(ucode_general_stats, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(txfifo_flush, dir_debug, S_IWUSR); +	DEBUGFS_ADD_FILE(protection_mode, dir_debug, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(sensitivity, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(chain_noise, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(ucode_tracing, dir_debug, S_IWUSR | S_IRUSR); +	DEBUGFS_ADD_FILE(ucode_bt_stats, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(reply_tx_error, dir_debug, S_IRUSR); +	DEBUGFS_ADD_FILE(rxon_flags, dir_debug, S_IWUSR); +	DEBUGFS_ADD_FILE(rxon_filter_flags, dir_debug, S_IWUSR); +	DEBUGFS_ADD_FILE(echo_test, dir_debug, S_IWUSR); +	DEBUGFS_ADD_FILE(fw_restart, dir_debug, S_IWUSR); +#ifdef CONFIG_IWLWIFI_DEBUG +	DEBUGFS_ADD_FILE(log_event, dir_debug, S_IWUSR | S_IRUSR); +#endif + +	if (iwl_advanced_bt_coexist(priv)) +		DEBUGFS_ADD_FILE(bt_traffic, dir_debug, S_IRUSR); + +	/* Calibrations disabled/enabled status*/ +	DEBUGFS_ADD_FILE(calib_disabled, dir_rf, S_IWUSR | S_IRUSR); + +	/* +	 * Create a symlink with mac80211. This is not very robust, as it does +	 * not remove the symlink created. The implicit assumption is that +	 * when the opmode exits, mac80211 will also exit, and will remove +	 * this symlink as part of its cleanup. +	 */ +	if (priv->mac80211_registered) { +		char buf[100]; +		struct dentry *mac80211_dir, *dev_dir, *root_dir; + +		dev_dir = dbgfs_dir->d_parent; +		root_dir = dev_dir->d_parent; +		mac80211_dir = priv->hw->wiphy->debugfsdir; + +		snprintf(buf, 100, "../../%s/%s", root_dir->d_name.name, +			 dev_dir->d_name.name); + +		if (!debugfs_create_symlink("iwlwifi", mac80211_dir, buf)) +			goto err; +	} + +	return 0; + +err: +	IWL_ERR(priv, "failed to create the dvm debugfs entries\n"); +	return -ENOMEM; +} diff --git a/drivers/net/wireless/iwlwifi/dvm/dev.h b/drivers/net/wireless/iwlwifi/dvm/dev.h new file mode 100644 index 00000000000..a6f22c32a27 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/dev.h @@ -0,0 +1,949 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ +/* + * Please use this file (dev.h) for driver implementation definitions. + * Please use commands.h for uCode API definitions. + */ + +#ifndef __iwl_dev_h__ +#define __iwl_dev_h__ + +#include <linux/interrupt.h> +#include <linux/kernel.h> +#include <linux/wait.h> +#include <linux/leds.h> +#include <linux/slab.h> +#include <linux/mutex.h> + +#include "iwl-fw.h" +#include "iwl-eeprom-parse.h" +#include "iwl-csr.h" +#include "iwl-debug.h" +#include "iwl-agn-hw.h" +#include "iwl-op-mode.h" +#include "iwl-notif-wait.h" +#include "iwl-trans.h" + +#include "led.h" +#include "power.h" +#include "rs.h" +#include "tt.h" + +/* CT-KILL constants */ +#define CT_KILL_THRESHOLD_LEGACY   110 /* in Celsius */ +#define CT_KILL_THRESHOLD	   114 /* in Celsius */ +#define CT_KILL_EXIT_THRESHOLD     95  /* in Celsius */ + +/* Default noise level to report when noise measurement is not available. + *   This may be because we're: + *   1)  Not associated  no beacon statistics being sent to driver) + *   2)  Scanning (noise measurement does not apply to associated channel) + * Use default noise value of -127 ... this is below the range of measurable + *   Rx dBm for all agn devices, so it can indicate "unmeasurable" to user. + *   Also, -127 works better than 0 when averaging frames with/without + *   noise info (e.g. averaging might be done in app); measured dBm values are + *   always negative ... using a negative value as the default keeps all + *   averages within an s8's (used in some apps) range of negative values. */ +#define IWL_NOISE_MEAS_NOT_AVAILABLE (-127) + +/* + * RTS threshold here is total size [2347] minus 4 FCS bytes + * Per spec: + *   a value of 0 means RTS on all data/management packets + *   a value > max MSDU size means no RTS + * else RTS for data/management frames where MPDU is larger + *   than RTS value. + */ +#define DEFAULT_RTS_THRESHOLD     2347U +#define MIN_RTS_THRESHOLD         0U +#define MAX_RTS_THRESHOLD         2347U +#define MAX_MSDU_SIZE		  2304U +#define MAX_MPDU_SIZE		  2346U +#define DEFAULT_BEACON_INTERVAL   200U +#define	DEFAULT_SHORT_RETRY_LIMIT 7U +#define	DEFAULT_LONG_RETRY_LIMIT  4U + +#define IWL_NUM_SCAN_RATES         (2) + + +#define IEEE80211_DATA_LEN              2304 +#define IEEE80211_4ADDR_LEN             30 +#define IEEE80211_HLEN                  (IEEE80211_4ADDR_LEN) +#define IEEE80211_FRAME_LEN             (IEEE80211_DATA_LEN + IEEE80211_HLEN) + +#define SUP_RATE_11A_MAX_NUM_CHANNELS  8 +#define SUP_RATE_11B_MAX_NUM_CHANNELS  4 +#define SUP_RATE_11G_MAX_NUM_CHANNELS  12 + +#define IWL_SUPPORTED_RATES_IE_LEN         8 + +#define IWL_INVALID_RATE     0xFF +#define IWL_INVALID_VALUE    -1 + +union iwl_ht_rate_supp { +	u16 rates; +	struct { +		u8 siso_rate; +		u8 mimo_rate; +	}; +}; + +struct iwl_ht_config { +	bool single_chain_sufficient; +	enum ieee80211_smps_mode smps; /* current smps mode */ +}; + +/* QoS structures */ +struct iwl_qos_info { +	int qos_active; +	struct iwl_qosparam_cmd def_qos_parm; +}; + +/** + * enum iwl_agg_state + * + * The state machine of the BA agreement establishment / tear down. + * These states relate to a specific RA / TID. + * + * @IWL_AGG_OFF: aggregation is not used + * @IWL_AGG_STARTING: aggregation are starting (between start and oper) + * @IWL_AGG_ON: aggregation session is up + * @IWL_EMPTYING_HW_QUEUE_ADDBA: establishing a BA session - waiting for the + *	HW queue to be empty from packets for this RA /TID. + * @IWL_EMPTYING_HW_QUEUE_DELBA: tearing down a BA session - waiting for the + *	HW queue to be empty from packets for this RA /TID. + */ +enum iwl_agg_state { +	IWL_AGG_OFF = 0, +	IWL_AGG_STARTING, +	IWL_AGG_ON, +	IWL_EMPTYING_HW_QUEUE_ADDBA, +	IWL_EMPTYING_HW_QUEUE_DELBA, +}; + +/** + * struct iwl_ht_agg - aggregation state machine + + * This structs holds the states for the BA agreement establishment and tear + * down. It also holds the state during the BA session itself. This struct is + * duplicated for each RA / TID. + + * @rate_n_flags: Rate at which Tx was attempted. Holds the data between the + *	Tx response (REPLY_TX), and the block ack notification + *	(REPLY_COMPRESSED_BA). + * @state: state of the BA agreement establishment / tear down. + * @txq_id: Tx queue used by the BA session + * @ssn: the first packet to be sent in AGG HW queue in Tx AGG start flow, or + *	the first packet to be sent in legacy HW queue in Tx AGG stop flow. + *	Basically when next_reclaimed reaches ssn, we can tell mac80211 that + *	we are ready to finish the Tx AGG stop / start flow. + * @wait_for_ba: Expect block-ack before next Tx reply + */ +struct iwl_ht_agg { +	u32 rate_n_flags; +	enum iwl_agg_state state; +	u16 txq_id; +	u16 ssn; +	bool wait_for_ba; +}; + +/** + * struct iwl_tid_data - one for each RA / TID + + * This structs holds the states for each RA / TID. + + * @seq_number: the next WiFi sequence number to use + * @next_reclaimed: the WiFi sequence number of the next packet to be acked. + *	This is basically (last acked packet++). + * @agg: aggregation state machine + */ +struct iwl_tid_data { +	u16 seq_number; +	u16 next_reclaimed; +	struct iwl_ht_agg agg; +}; + +/* + * Structure should be accessed with sta_lock held. When station addition + * is in progress (IWL_STA_UCODE_INPROGRESS) it is possible to access only + * the commands (iwl_addsta_cmd and iwl_link_quality_cmd) without sta_lock + * held. + */ +struct iwl_station_entry { +	struct iwl_addsta_cmd sta; +	u8 used, ctxid; +	struct iwl_link_quality_cmd *lq; +}; + +/* + * iwl_station_priv: Driver's private station information + * + * When mac80211 creates a station it reserves some space (hw->sta_data_size) + * in the structure for use by driver. This structure is places in that + * space. + */ +struct iwl_station_priv { +	struct iwl_rxon_context *ctx; +	struct iwl_lq_sta lq_sta; +	atomic_t pending_frames; +	bool client; +	bool asleep; +	u8 max_agg_bufsize; +	u8 sta_id; +}; + +/** + * struct iwl_vif_priv - driver's private per-interface information + * + * When mac80211 allocates a virtual interface, it can allocate + * space for us to put data into. + */ +struct iwl_vif_priv { +	struct iwl_rxon_context *ctx; +	u8 ibss_bssid_sta_id; +}; + +struct iwl_sensitivity_ranges { +	u16 min_nrg_cck; + +	u16 nrg_th_cck; +	u16 nrg_th_ofdm; + +	u16 auto_corr_min_ofdm; +	u16 auto_corr_min_ofdm_mrc; +	u16 auto_corr_min_ofdm_x1; +	u16 auto_corr_min_ofdm_mrc_x1; + +	u16 auto_corr_max_ofdm; +	u16 auto_corr_max_ofdm_mrc; +	u16 auto_corr_max_ofdm_x1; +	u16 auto_corr_max_ofdm_mrc_x1; + +	u16 auto_corr_max_cck; +	u16 auto_corr_max_cck_mrc; +	u16 auto_corr_min_cck; +	u16 auto_corr_min_cck_mrc; + +	u16 barker_corr_th_min; +	u16 barker_corr_th_min_mrc; +	u16 nrg_th_cca; +}; + + +#define KELVIN_TO_CELSIUS(x) ((x)-273) +#define CELSIUS_TO_KELVIN(x) ((x)+273) + + +/****************************************************************************** + * + * Functions implemented in core module which are forward declared here + * for use by iwl-[4-5].c + * + * NOTE:  The implementation of these functions are not hardware specific + * which is why they are in the core module files. + * + * Naming convention -- + * iwl_         <-- Is part of iwlwifi + * iwlXXXX_     <-- Hardware specific (implemented in iwl-XXXX.c for XXXX) + * + ****************************************************************************/ +void iwl_update_chain_flags(struct iwl_priv *priv); +extern const u8 iwl_bcast_addr[ETH_ALEN]; + +#define IWL_OPERATION_MODE_AUTO     0 +#define IWL_OPERATION_MODE_HT_ONLY  1 +#define IWL_OPERATION_MODE_MIXED    2 +#define IWL_OPERATION_MODE_20MHZ    3 + +#define TX_POWER_IWL_ILLEGAL_VOLTAGE -10000 + +/* Sensitivity and chain noise calibration */ +#define INITIALIZATION_VALUE		0xFFFF +#define IWL_CAL_NUM_BEACONS		16 +#define MAXIMUM_ALLOWED_PATHLOSS	15 + +#define CHAIN_NOISE_MAX_DELTA_GAIN_CODE 3 + +#define MAX_FA_OFDM  50 +#define MIN_FA_OFDM  5 +#define MAX_FA_CCK   50 +#define MIN_FA_CCK   5 + +#define AUTO_CORR_STEP_OFDM       1 + +#define AUTO_CORR_STEP_CCK     3 +#define AUTO_CORR_MAX_TH_CCK   160 + +#define NRG_DIFF               2 +#define NRG_STEP_CCK           2 +#define NRG_MARGIN             8 +#define MAX_NUMBER_CCK_NO_FA 100 + +#define AUTO_CORR_CCK_MIN_VAL_DEF    (125) + +#define CHAIN_A             0 +#define CHAIN_B             1 +#define CHAIN_C             2 +#define CHAIN_NOISE_DELTA_GAIN_INIT_VAL 4 +#define ALL_BAND_FILTER			0xFF00 +#define IN_BAND_FILTER			0xFF +#define MIN_AVERAGE_NOISE_MAX_VALUE	0xFFFFFFFF + +#define NRG_NUM_PREV_STAT_L     20 +#define NUM_RX_CHAINS           3 + +enum iwlagn_false_alarm_state { +	IWL_FA_TOO_MANY = 0, +	IWL_FA_TOO_FEW = 1, +	IWL_FA_GOOD_RANGE = 2, +}; + +enum iwlagn_chain_noise_state { +	IWL_CHAIN_NOISE_ALIVE = 0,  /* must be 0 */ +	IWL_CHAIN_NOISE_ACCUMULATE, +	IWL_CHAIN_NOISE_CALIBRATED, +	IWL_CHAIN_NOISE_DONE, +}; + +/* Sensitivity calib data */ +struct iwl_sensitivity_data { +	u32 auto_corr_ofdm; +	u32 auto_corr_ofdm_mrc; +	u32 auto_corr_ofdm_x1; +	u32 auto_corr_ofdm_mrc_x1; +	u32 auto_corr_cck; +	u32 auto_corr_cck_mrc; + +	u32 last_bad_plcp_cnt_ofdm; +	u32 last_fa_cnt_ofdm; +	u32 last_bad_plcp_cnt_cck; +	u32 last_fa_cnt_cck; + +	u32 nrg_curr_state; +	u32 nrg_prev_state; +	u32 nrg_value[10]; +	u8  nrg_silence_rssi[NRG_NUM_PREV_STAT_L]; +	u32 nrg_silence_ref; +	u32 nrg_energy_idx; +	u32 nrg_silence_idx; +	u32 nrg_th_cck; +	s32 nrg_auto_corr_silence_diff; +	u32 num_in_cck_no_fa; +	u32 nrg_th_ofdm; + +	u16 barker_corr_th_min; +	u16 barker_corr_th_min_mrc; +	u16 nrg_th_cca; +}; + +/* Chain noise (differential Rx gain) calib data */ +struct iwl_chain_noise_data { +	u32 active_chains; +	u32 chain_noise_a; +	u32 chain_noise_b; +	u32 chain_noise_c; +	u32 chain_signal_a; +	u32 chain_signal_b; +	u32 chain_signal_c; +	u16 beacon_count; +	u8 disconn_array[NUM_RX_CHAINS]; +	u8 delta_gain_code[NUM_RX_CHAINS]; +	u8 radio_write; +	u8 state; +}; + +enum { +	MEASUREMENT_READY = (1 << 0), +	MEASUREMENT_ACTIVE = (1 << 1), +}; + +/* reply_tx_statistics (for _agn devices) */ +struct reply_tx_error_statistics { +	u32 pp_delay; +	u32 pp_few_bytes; +	u32 pp_bt_prio; +	u32 pp_quiet_period; +	u32 pp_calc_ttak; +	u32 int_crossed_retry; +	u32 short_limit; +	u32 long_limit; +	u32 fifo_underrun; +	u32 drain_flow; +	u32 rfkill_flush; +	u32 life_expire; +	u32 dest_ps; +	u32 host_abort; +	u32 bt_retry; +	u32 sta_invalid; +	u32 frag_drop; +	u32 tid_disable; +	u32 fifo_flush; +	u32 insuff_cf_poll; +	u32 fail_hw_drop; +	u32 sta_color_mismatch; +	u32 unknown; +}; + +/* reply_agg_tx_statistics (for _agn devices) */ +struct reply_agg_tx_error_statistics { +	u32 underrun; +	u32 bt_prio; +	u32 few_bytes; +	u32 abort; +	u32 last_sent_ttl; +	u32 last_sent_try; +	u32 last_sent_bt_kill; +	u32 scd_query; +	u32 bad_crc32; +	u32 response; +	u32 dump_tx; +	u32 delay_tx; +	u32 unknown; +}; + +/* + * schedule the timer to wake up every UCODE_TRACE_PERIOD milliseconds + * to perform continuous uCode event logging operation if enabled + */ +#define UCODE_TRACE_PERIOD (10) + +/* + * iwl_event_log: current uCode event log position + * + * @ucode_trace: enable/disable ucode continuous trace timer + * @num_wraps: how many times the event buffer wraps + * @next_entry:  the entry just before the next one that uCode would fill + * @non_wraps_count: counter for no wrap detected when dump ucode events + * @wraps_once_count: counter for wrap once detected when dump ucode events + * @wraps_more_count: counter for wrap more than once detected + *		      when dump ucode events + */ +struct iwl_event_log { +	bool ucode_trace; +	u32 num_wraps; +	u32 next_entry; +	int non_wraps_count; +	int wraps_once_count; +	int wraps_more_count; +}; + +#define IWL_DELAY_NEXT_FORCE_RF_RESET  (HZ*3) + +/* BT Antenna Coupling Threshold (dB) */ +#define IWL_BT_ANTENNA_COUPLING_THRESHOLD	(35) + +/* Firmware reload counter and Timestamp */ +#define IWL_MIN_RELOAD_DURATION		1000 /* 1000 ms */ +#define IWL_MAX_CONTINUE_RELOAD_CNT	4 + + +struct iwl_rf_reset { +	int reset_request_count; +	int reset_success_count; +	int reset_reject_count; +	unsigned long last_reset_jiffies; +}; + +enum iwl_rxon_context_id { +	IWL_RXON_CTX_BSS, +	IWL_RXON_CTX_PAN, + +	NUM_IWL_RXON_CTX +}; + +/* extend beacon time format bit shifting  */ +/* + * for _agn devices + * bits 31:22 - extended + * bits 21:0  - interval + */ +#define IWLAGN_EXT_BEACON_TIME_POS	22 + +struct iwl_rxon_context { +	struct ieee80211_vif *vif; + +	u8 mcast_queue; +	u8 ac_to_queue[IEEE80211_NUM_ACS]; +	u8 ac_to_fifo[IEEE80211_NUM_ACS]; + +	/* +	 * We could use the vif to indicate active, but we +	 * also need it to be active during disabling when +	 * we already removed the vif for type setting. +	 */ +	bool always_active, is_active; + +	bool ht_need_multiple_chains; + +	enum iwl_rxon_context_id ctxid; + +	u32 interface_modes, exclusive_interface_modes; +	u8 unused_devtype, ap_devtype, ibss_devtype, station_devtype; + +	/* +	 * We declare this const so it can only be +	 * changed via explicit cast within the +	 * routines that actually update the physical +	 * hardware. +	 */ +	const struct iwl_rxon_cmd active; +	struct iwl_rxon_cmd staging; + +	struct iwl_rxon_time_cmd timing; + +	struct iwl_qos_info qos_data; + +	u8 bcast_sta_id, ap_sta_id; + +	u8 rxon_cmd, rxon_assoc_cmd, rxon_timing_cmd; +	u8 qos_cmd; +	u8 wep_key_cmd; + +	struct iwl_wep_key wep_keys[WEP_KEYS_MAX]; +	u8 key_mapping_keys; + +	__le32 station_flags; + +	int beacon_int; + +	struct { +		bool non_gf_sta_present; +		u8 protection; +		bool enabled, is_40mhz; +		u8 extension_chan_offset; +	} ht; +}; + +enum iwl_scan_type { +	IWL_SCAN_NORMAL, +	IWL_SCAN_RADIO_RESET, +}; + +/** + * struct iwl_hw_params + * + * Holds the module parameters + * + * @tx_chains_num: Number of TX chains + * @rx_chains_num: Number of RX chains + * @ct_kill_threshold: temperature threshold - in hw dependent unit + * @ct_kill_exit_threshold: when to reeable the device - in hw dependent unit + *	relevant for 1000, 6000 and up + * @struct iwl_sensitivity_ranges: range of sensitivity values + * @use_rts_for_aggregation: use rts/cts protection for HT traffic + */ +struct iwl_hw_params { +	u8  tx_chains_num; +	u8  rx_chains_num; +	bool use_rts_for_aggregation; +	u32 ct_kill_threshold; +	u32 ct_kill_exit_threshold; + +	const struct iwl_sensitivity_ranges *sens; +}; + +/** + * struct iwl_dvm_bt_params - DVM specific BT (coex) parameters + * @advanced_bt_coexist: support advanced bt coexist + * @bt_init_traffic_load: specify initial bt traffic load + * @bt_prio_boost: default bt priority boost value + * @agg_time_limit: maximum number of uSec in aggregation + * @bt_sco_disable: uCode should not response to BT in SCO/ESCO mode + */ +struct iwl_dvm_bt_params { +	bool advanced_bt_coexist; +	u8 bt_init_traffic_load; +	u32 bt_prio_boost; +	u16 agg_time_limit; +	bool bt_sco_disable; +	bool bt_session_2; +}; + +/** + * struct iwl_dvm_cfg - DVM firmware specific device configuration + * @set_hw_params: set hardware parameters + * @set_channel_switch: send channel switch command + * @nic_config: apply device specific configuration + * @temperature: read temperature + * @adv_thermal_throttle: support advance thermal throttle + * @support_ct_kill_exit: support ct kill exit condition + * @plcp_delta_threshold: plcp error rate threshold used to trigger + *	radio tuning when there is a high receiving plcp error rate + * @chain_noise_scale: default chain noise scale used for gain computation + * @hd_v2: v2 of enhanced sensitivity value, used for 2000 series and up + * @no_idle_support: do not support idle mode + * @bt_params: pointer to BT parameters + * @need_temp_offset_calib: need to perform temperature offset calibration + * @no_xtal_calib: some devices do not need crystal calibration data, + *	don't send it to those + * @temp_offset_v2: support v2 of temperature offset calibration + * @adv_pm: advanced power management + */ +struct iwl_dvm_cfg { +	void (*set_hw_params)(struct iwl_priv *priv); +	int (*set_channel_switch)(struct iwl_priv *priv, +				  struct ieee80211_channel_switch *ch_switch); +	void (*nic_config)(struct iwl_priv *priv); +	void (*temperature)(struct iwl_priv *priv); + +	const struct iwl_dvm_bt_params *bt_params; +	s32 chain_noise_scale; +	u8 plcp_delta_threshold; +	bool adv_thermal_throttle; +	bool support_ct_kill_exit; +	bool hd_v2; +	bool no_idle_support; +	bool need_temp_offset_calib; +	bool no_xtal_calib; +	bool temp_offset_v2; +	bool adv_pm; +}; + +struct iwl_wipan_noa_data { +	struct rcu_head rcu_head; +	u32 length; +	u8 data[]; +}; + +/* Calibration disabling bit mask */ +enum { +	IWL_CALIB_ENABLE_ALL			= 0, + +	IWL_SENSITIVITY_CALIB_DISABLED		= BIT(0), +	IWL_CHAIN_NOISE_CALIB_DISABLED		= BIT(1), +	IWL_TX_POWER_CALIB_DISABLED		= BIT(2), + +	IWL_CALIB_DISABLE_ALL			= 0xFFFFFFFF, +}; + +#define IWL_OP_MODE_GET_DVM(_iwl_op_mode) \ +	((struct iwl_priv *) ((_iwl_op_mode)->op_mode_specific)) + +#define IWL_MAC80211_GET_DVM(_hw) \ +	((struct iwl_priv *) ((struct iwl_op_mode *) \ +	(_hw)->priv)->op_mode_specific) + +struct iwl_priv { + +	struct iwl_trans *trans; +	struct device *dev;		/* for debug prints only */ +	const struct iwl_cfg *cfg; +	const struct iwl_fw *fw; +	const struct iwl_dvm_cfg *lib; +	unsigned long status; + +	spinlock_t sta_lock; +	struct mutex mutex; + +	unsigned long transport_queue_stop; +	bool passive_no_rx; +#define IWL_INVALID_MAC80211_QUEUE	0xff +	u8 queue_to_mac80211[IWL_MAX_HW_QUEUES]; +	atomic_t queue_stop_count[IWL_MAX_HW_QUEUES]; + +	unsigned long agg_q_alloc[BITS_TO_LONGS(IWL_MAX_HW_QUEUES)]; + +	/* ieee device used by generic ieee processing code */ +	struct ieee80211_hw *hw; + +	struct list_head calib_results; + +	struct workqueue_struct *workqueue; + +	struct iwl_hw_params hw_params; + +	enum ieee80211_band band; +	u8 valid_contexts; + +	int (*rx_handlers[REPLY_MAX])(struct iwl_priv *priv, +				       struct iwl_rx_cmd_buffer *rxb, +				       struct iwl_device_cmd *cmd); + +	struct iwl_notif_wait_data notif_wait; + +	/* spectrum measurement report caching */ +	struct iwl_spectrum_notification measure_report; +	u8 measurement_status; + +	/* ucode beacon time */ +	u32 ucode_beacon_time; +	int missed_beacon_threshold; + +	/* track IBSS manager (last beacon) status */ +	u32 ibss_manager; + +	/* jiffies when last recovery from statistics was performed */ +	unsigned long rx_statistics_jiffies; + +	/*counters */ +	u32 rx_handlers_stats[REPLY_MAX]; + +	/* rf reset */ +	struct iwl_rf_reset rf_reset; + +	/* firmware reload counter and timestamp */ +	unsigned long reload_jiffies; +	int reload_count; +	bool ucode_loaded; +	bool init_ucode_run;		/* Don't run init uCode again */ + +	u8 plcp_delta_threshold; + +	/* thermal calibration */ +	s32 temperature;	/* Celsius */ +	s32 last_temperature; + +	struct iwl_wipan_noa_data __rcu *noa_data; + +	/* Scan related variables */ +	unsigned long scan_start; +	unsigned long scan_start_tsf; +	void *scan_cmd; +	enum ieee80211_band scan_band; +	struct cfg80211_scan_request *scan_request; +	struct ieee80211_vif *scan_vif; +	enum iwl_scan_type scan_type; +	u8 scan_tx_ant[IEEE80211_NUM_BANDS]; +	u8 mgmt_tx_ant; + +	/* max number of station keys */ +	u8 sta_key_max_num; + +	bool new_scan_threshold_behaviour; + +	bool wowlan; + +	/* EEPROM MAC addresses */ +	struct mac_address addresses[2]; + +	struct iwl_rxon_context contexts[NUM_IWL_RXON_CTX]; + +	__le16 switch_channel; + +	u8 start_calib; +	struct iwl_sensitivity_data sensitivity_data; +	struct iwl_chain_noise_data chain_noise_data; +	__le16 sensitivity_tbl[HD_TABLE_SIZE]; +	__le16 enhance_sensitivity_tbl[ENHANCE_HD_TABLE_ENTRIES]; + +	struct iwl_ht_config current_ht_config; + +	/* Rate scaling data */ +	u8 retry_rate; + +	int activity_timer_active; + +	struct iwl_power_mgr power_data; +	struct iwl_tt_mgmt thermal_throttle; + +	/* station table variables */ +	int num_stations; +	struct iwl_station_entry stations[IWLAGN_STATION_COUNT]; +	unsigned long ucode_key_table; +	struct iwl_tid_data tid_data[IWLAGN_STATION_COUNT][IWL_MAX_TID_COUNT]; +	atomic_t num_aux_in_flight; + +	u8 mac80211_registered; + +	/* Indication if ieee80211_ops->open has been called */ +	u8 is_open; + +	enum nl80211_iftype iw_mode; + +	/* Last Rx'd beacon timestamp */ +	u64 timestamp; + +	struct { +		__le32 flag; +		struct statistics_general_common common; +		struct statistics_rx_non_phy rx_non_phy; +		struct statistics_rx_phy rx_ofdm; +		struct statistics_rx_ht_phy rx_ofdm_ht; +		struct statistics_rx_phy rx_cck; +		struct statistics_tx tx; +#ifdef CONFIG_IWLWIFI_DEBUGFS +		struct statistics_bt_activity bt_activity; +		__le32 num_bt_kills, accum_num_bt_kills; +#endif +		spinlock_t lock; +	} statistics; +#ifdef CONFIG_IWLWIFI_DEBUGFS +	struct { +		struct statistics_general_common common; +		struct statistics_rx_non_phy rx_non_phy; +		struct statistics_rx_phy rx_ofdm; +		struct statistics_rx_ht_phy rx_ofdm_ht; +		struct statistics_rx_phy rx_cck; +		struct statistics_tx tx; +		struct statistics_bt_activity bt_activity; +	} accum_stats, delta_stats, max_delta_stats; +#endif + +	/* +	 * reporting the number of tids has AGG on. 0 means +	 * no AGGREGATION +	 */ +	u8 agg_tids_count; + +	struct iwl_rx_phy_res last_phy_res; +	u32 ampdu_ref; +	bool last_phy_res_valid; + +	/* +	 * chain noise reset and gain commands are the +	 * two extra calibration commands follows the standard +	 * phy calibration commands +	 */ +	u8 phy_calib_chain_noise_reset_cmd; +	u8 phy_calib_chain_noise_gain_cmd; + +	/* counts reply_tx error */ +	struct reply_tx_error_statistics reply_tx_stats; +	struct reply_agg_tx_error_statistics reply_agg_tx_stats; + +	/* bt coex */ +	u8 bt_enable_flag; +	u8 bt_status; +	u8 bt_traffic_load, last_bt_traffic_load; +	bool bt_ch_announce; +	bool bt_full_concurrent; +	bool bt_ant_couple_ok; +	__le32 kill_ack_mask; +	__le32 kill_cts_mask; +	__le16 bt_valid; +	bool reduced_txpower; +	u16 bt_on_thresh; +	u16 bt_duration; +	u16 dynamic_frag_thresh; +	u8 bt_ci_compliance; +	struct work_struct bt_traffic_change_work; +	bool bt_enable_pspoll; +	struct iwl_rxon_context *cur_rssi_ctx; +	bool bt_is_sco; + +	struct work_struct restart; +	struct work_struct scan_completed; +	struct work_struct abort_scan; + +	struct work_struct beacon_update; +	struct iwl_rxon_context *beacon_ctx; +	struct sk_buff *beacon_skb; +	void *beacon_cmd; + +	struct work_struct tt_work; +	struct work_struct ct_enter; +	struct work_struct ct_exit; +	struct work_struct start_internal_scan; +	struct work_struct tx_flush; +	struct work_struct bt_full_concurrency; +	struct work_struct bt_runtime_config; + +	struct delayed_work scan_check; + +	/* TX Power settings */ +	s8 tx_power_user_lmt; +	s8 tx_power_next; + +#ifdef CONFIG_IWLWIFI_DEBUGFS +	/* debugfs */ +	struct dentry *debugfs_dir; +	u32 dbgfs_sram_offset, dbgfs_sram_len; +	bool disable_ht40; +	void *wowlan_sram; +#endif /* CONFIG_IWLWIFI_DEBUGFS */ + +	struct iwl_nvm_data *nvm_data; +	/* eeprom blob for debugfs */ +	u8 *eeprom_blob; +	size_t eeprom_blob_size; + +	struct work_struct txpower_work; +	u32 calib_disabled; +	struct work_struct run_time_calib_work; +	struct timer_list statistics_periodic; +	struct timer_list ucode_trace; + +	struct iwl_event_log event_log; + +#ifdef CONFIG_IWLWIFI_LEDS +	struct led_classdev led; +	unsigned long blink_on, blink_off; +	bool led_registered; +#endif + +	/* WoWLAN GTK rekey data */ +	u8 kck[NL80211_KCK_LEN], kek[NL80211_KEK_LEN]; +	__le64 replay_ctr; +	__le16 last_seq_ctl; +	bool have_rekey_data; +#ifdef CONFIG_PM_SLEEP +	struct wiphy_wowlan_support wowlan_support; +#endif + +	/* device_pointers: pointers to ucode event tables */ +	struct { +		u32 error_event_table; +		u32 log_event_table; +	} device_pointers; + +	/* indicator of loaded ucode image */ +	enum iwl_ucode_type cur_ucode; +}; /*iwl_priv */ + +static inline struct iwl_rxon_context * +iwl_rxon_ctx_from_vif(struct ieee80211_vif *vif) +{ +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; + +	return vif_priv->ctx; +} + +#define for_each_context(priv, ctx)				\ +	for (ctx = &priv->contexts[IWL_RXON_CTX_BSS];		\ +	     ctx < &priv->contexts[NUM_IWL_RXON_CTX]; ctx++)	\ +		if (priv->valid_contexts & BIT(ctx->ctxid)) + +static inline int iwl_is_associated_ctx(struct iwl_rxon_context *ctx) +{ +	return (ctx->active.filter_flags & RXON_FILTER_ASSOC_MSK) ? 1 : 0; +} + +static inline int iwl_is_associated(struct iwl_priv *priv, +				    enum iwl_rxon_context_id ctxid) +{ +	return iwl_is_associated_ctx(&priv->contexts[ctxid]); +} + +static inline int iwl_is_any_associated(struct iwl_priv *priv) +{ +	struct iwl_rxon_context *ctx; +	for_each_context(priv, ctx) +		if (iwl_is_associated_ctx(ctx)) +			return true; +	return false; +} + +#endif				/* __iwl_dev_h__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/devices.c b/drivers/net/wireless/iwlwifi/dvm/devices.c new file mode 100644 index 00000000000..34b41e5f7cf --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/devices.c @@ -0,0 +1,690 @@ +/****************************************************************************** + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +/* + * DVM device-specific data & functions + */ +#include "iwl-io.h" +#include "iwl-prph.h" +#include "iwl-eeprom-parse.h" + +#include "agn.h" +#include "dev.h" +#include "commands.h" + + +/* + * 1000 series + * =========== + */ + +/* + * For 1000, use advance thermal throttling critical temperature threshold, + * but legacy thermal management implementation for now. + * This is for the reason of 1000 uCode using advance thermal throttling API + * but not implement ct_kill_exit based on ct_kill exit temperature + * so the thermal throttling will still based on legacy thermal throttling + * management. + * The code here need to be modified once 1000 uCode has the advanced thermal + * throttling algorithm in place + */ +static void iwl1000_set_ct_threshold(struct iwl_priv *priv) +{ +	/* want Celsius */ +	priv->hw_params.ct_kill_threshold = CT_KILL_THRESHOLD_LEGACY; +	priv->hw_params.ct_kill_exit_threshold = CT_KILL_EXIT_THRESHOLD; +} + +/* NIC configuration for 1000 series */ +static void iwl1000_nic_config(struct iwl_priv *priv) +{ +	/* Setting digital SVR for 1000 card to 1.32V */ +	/* locking is acquired in iwl_set_bits_mask_prph() function */ +	iwl_set_bits_mask_prph(priv->trans, APMG_DIGITAL_SVR_REG, +				APMG_SVR_DIGITAL_VOLTAGE_1_32, +				~APMG_SVR_VOLTAGE_CONFIG_BIT_MSK); +} + +/** + * iwl_beacon_time_mask_low - mask of lower 32 bit of beacon time + * @priv -- pointer to iwl_priv data structure + * @tsf_bits -- number of bits need to shift for masking) + */ +static inline u32 iwl_beacon_time_mask_low(struct iwl_priv *priv, +					   u16 tsf_bits) +{ +	return (1 << tsf_bits) - 1; +} + +/** + * iwl_beacon_time_mask_high - mask of higher 32 bit of beacon time + * @priv -- pointer to iwl_priv data structure + * @tsf_bits -- number of bits need to shift for masking) + */ +static inline u32 iwl_beacon_time_mask_high(struct iwl_priv *priv, +					    u16 tsf_bits) +{ +	return ((1 << (32 - tsf_bits)) - 1) << tsf_bits; +} + +/* + * extended beacon time format + * time in usec will be changed into a 32-bit value in extended:internal format + * the extended part is the beacon counts + * the internal part is the time in usec within one beacon interval + */ +static u32 iwl_usecs_to_beacons(struct iwl_priv *priv, u32 usec, +				u32 beacon_interval) +{ +	u32 quot; +	u32 rem; +	u32 interval = beacon_interval * TIME_UNIT; + +	if (!interval || !usec) +		return 0; + +	quot = (usec / interval) & +		(iwl_beacon_time_mask_high(priv, IWLAGN_EXT_BEACON_TIME_POS) >> +		IWLAGN_EXT_BEACON_TIME_POS); +	rem = (usec % interval) & iwl_beacon_time_mask_low(priv, +				   IWLAGN_EXT_BEACON_TIME_POS); + +	return (quot << IWLAGN_EXT_BEACON_TIME_POS) + rem; +} + +/* base is usually what we get from ucode with each received frame, + * the same as HW timer counter counting down + */ +static __le32 iwl_add_beacon_time(struct iwl_priv *priv, u32 base, +			   u32 addon, u32 beacon_interval) +{ +	u32 base_low = base & iwl_beacon_time_mask_low(priv, +				IWLAGN_EXT_BEACON_TIME_POS); +	u32 addon_low = addon & iwl_beacon_time_mask_low(priv, +				IWLAGN_EXT_BEACON_TIME_POS); +	u32 interval = beacon_interval * TIME_UNIT; +	u32 res = (base & iwl_beacon_time_mask_high(priv, +				IWLAGN_EXT_BEACON_TIME_POS)) + +				(addon & iwl_beacon_time_mask_high(priv, +				IWLAGN_EXT_BEACON_TIME_POS)); + +	if (base_low > addon_low) +		res += base_low - addon_low; +	else if (base_low < addon_low) { +		res += interval + base_low - addon_low; +		res += (1 << IWLAGN_EXT_BEACON_TIME_POS); +	} else +		res += (1 << IWLAGN_EXT_BEACON_TIME_POS); + +	return cpu_to_le32(res); +} + +static const struct iwl_sensitivity_ranges iwl1000_sensitivity = { +	.min_nrg_cck = 95, +	.auto_corr_min_ofdm = 90, +	.auto_corr_min_ofdm_mrc = 170, +	.auto_corr_min_ofdm_x1 = 120, +	.auto_corr_min_ofdm_mrc_x1 = 240, + +	.auto_corr_max_ofdm = 120, +	.auto_corr_max_ofdm_mrc = 210, +	.auto_corr_max_ofdm_x1 = 155, +	.auto_corr_max_ofdm_mrc_x1 = 290, + +	.auto_corr_min_cck = 125, +	.auto_corr_max_cck = 200, +	.auto_corr_min_cck_mrc = 170, +	.auto_corr_max_cck_mrc = 400, +	.nrg_th_cck = 95, +	.nrg_th_ofdm = 95, + +	.barker_corr_th_min = 190, +	.barker_corr_th_min_mrc = 390, +	.nrg_th_cca = 62, +}; + +static void iwl1000_hw_set_hw_params(struct iwl_priv *priv) +{ +	iwl1000_set_ct_threshold(priv); + +	/* Set initial sensitivity parameters */ +	priv->hw_params.sens = &iwl1000_sensitivity; +} + +const struct iwl_dvm_cfg iwl_dvm_1000_cfg = { +	.set_hw_params = iwl1000_hw_set_hw_params, +	.nic_config = iwl1000_nic_config, +	.temperature = iwlagn_temperature, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_EXT_LONG_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +}; + + +/* + * 2000 series + * =========== + */ + +static void iwl2000_set_ct_threshold(struct iwl_priv *priv) +{ +	/* want Celsius */ +	priv->hw_params.ct_kill_threshold = CT_KILL_THRESHOLD; +	priv->hw_params.ct_kill_exit_threshold = CT_KILL_EXIT_THRESHOLD; +} + +/* NIC configuration for 2000 series */ +static void iwl2000_nic_config(struct iwl_priv *priv) +{ +	iwl_set_bit(priv->trans, CSR_GP_DRIVER_REG, +		    CSR_GP_DRIVER_REG_BIT_RADIO_IQ_INVER); +} + +static const struct iwl_sensitivity_ranges iwl2000_sensitivity = { +	.min_nrg_cck = 97, +	.auto_corr_min_ofdm = 80, +	.auto_corr_min_ofdm_mrc = 128, +	.auto_corr_min_ofdm_x1 = 105, +	.auto_corr_min_ofdm_mrc_x1 = 192, + +	.auto_corr_max_ofdm = 145, +	.auto_corr_max_ofdm_mrc = 232, +	.auto_corr_max_ofdm_x1 = 110, +	.auto_corr_max_ofdm_mrc_x1 = 232, + +	.auto_corr_min_cck = 125, +	.auto_corr_max_cck = 175, +	.auto_corr_min_cck_mrc = 160, +	.auto_corr_max_cck_mrc = 310, +	.nrg_th_cck = 97, +	.nrg_th_ofdm = 100, + +	.barker_corr_th_min = 190, +	.barker_corr_th_min_mrc = 390, +	.nrg_th_cca = 62, +}; + +static void iwl2000_hw_set_hw_params(struct iwl_priv *priv) +{ +	iwl2000_set_ct_threshold(priv); + +	/* Set initial sensitivity parameters */ +	priv->hw_params.sens = &iwl2000_sensitivity; +} + +const struct iwl_dvm_cfg iwl_dvm_2000_cfg = { +	.set_hw_params = iwl2000_hw_set_hw_params, +	.nic_config = iwl2000_nic_config, +	.temperature = iwlagn_temperature, +	.adv_thermal_throttle = true, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +	.hd_v2 = true, +	.need_temp_offset_calib = true, +	.temp_offset_v2 = true, +}; + +const struct iwl_dvm_cfg iwl_dvm_105_cfg = { +	.set_hw_params = iwl2000_hw_set_hw_params, +	.nic_config = iwl2000_nic_config, +	.temperature = iwlagn_temperature, +	.adv_thermal_throttle = true, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +	.hd_v2 = true, +	.need_temp_offset_calib = true, +	.temp_offset_v2 = true, +	.adv_pm = true, +}; + +static const struct iwl_dvm_bt_params iwl2030_bt_params = { +	/* Due to bluetooth, we transmit 2.4 GHz probes only on antenna A */ +	.advanced_bt_coexist = true, +	.agg_time_limit = BT_AGG_THRESHOLD_DEF, +	.bt_init_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_NONE, +	.bt_prio_boost = IWLAGN_BT_PRIO_BOOST_DEFAULT32, +	.bt_sco_disable = true, +	.bt_session_2 = true, +}; + +const struct iwl_dvm_cfg iwl_dvm_2030_cfg = { +	.set_hw_params = iwl2000_hw_set_hw_params, +	.nic_config = iwl2000_nic_config, +	.temperature = iwlagn_temperature, +	.adv_thermal_throttle = true, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +	.hd_v2 = true, +	.bt_params = &iwl2030_bt_params, +	.need_temp_offset_calib = true, +	.temp_offset_v2 = true, +	.adv_pm = true, +}; + +/* + * 5000 series + * =========== + */ + +/* NIC configuration for 5000 series */ +static const struct iwl_sensitivity_ranges iwl5000_sensitivity = { +	.min_nrg_cck = 100, +	.auto_corr_min_ofdm = 90, +	.auto_corr_min_ofdm_mrc = 170, +	.auto_corr_min_ofdm_x1 = 105, +	.auto_corr_min_ofdm_mrc_x1 = 220, + +	.auto_corr_max_ofdm = 120, +	.auto_corr_max_ofdm_mrc = 210, +	.auto_corr_max_ofdm_x1 = 120, +	.auto_corr_max_ofdm_mrc_x1 = 240, + +	.auto_corr_min_cck = 125, +	.auto_corr_max_cck = 200, +	.auto_corr_min_cck_mrc = 200, +	.auto_corr_max_cck_mrc = 400, +	.nrg_th_cck = 100, +	.nrg_th_ofdm = 100, + +	.barker_corr_th_min = 190, +	.barker_corr_th_min_mrc = 390, +	.nrg_th_cca = 62, +}; + +static const struct iwl_sensitivity_ranges iwl5150_sensitivity = { +	.min_nrg_cck = 95, +	.auto_corr_min_ofdm = 90, +	.auto_corr_min_ofdm_mrc = 170, +	.auto_corr_min_ofdm_x1 = 105, +	.auto_corr_min_ofdm_mrc_x1 = 220, + +	.auto_corr_max_ofdm = 120, +	.auto_corr_max_ofdm_mrc = 210, +	/* max = min for performance bug in 5150 DSP */ +	.auto_corr_max_ofdm_x1 = 105, +	.auto_corr_max_ofdm_mrc_x1 = 220, + +	.auto_corr_min_cck = 125, +	.auto_corr_max_cck = 200, +	.auto_corr_min_cck_mrc = 170, +	.auto_corr_max_cck_mrc = 400, +	.nrg_th_cck = 95, +	.nrg_th_ofdm = 95, + +	.barker_corr_th_min = 190, +	.barker_corr_th_min_mrc = 390, +	.nrg_th_cca = 62, +}; + +#define IWL_5150_VOLTAGE_TO_TEMPERATURE_COEFF	(-5) + +static s32 iwl_temp_calib_to_offset(struct iwl_priv *priv) +{ +	u16 temperature, voltage; + +	temperature = le16_to_cpu(priv->nvm_data->kelvin_temperature); +	voltage = le16_to_cpu(priv->nvm_data->kelvin_voltage); + +	/* offset = temp - volt / coeff */ +	return (s32)(temperature - +			voltage / IWL_5150_VOLTAGE_TO_TEMPERATURE_COEFF); +} + +static void iwl5150_set_ct_threshold(struct iwl_priv *priv) +{ +	const s32 volt2temp_coef = IWL_5150_VOLTAGE_TO_TEMPERATURE_COEFF; +	s32 threshold = (s32)CELSIUS_TO_KELVIN(CT_KILL_THRESHOLD_LEGACY) - +			iwl_temp_calib_to_offset(priv); + +	priv->hw_params.ct_kill_threshold = threshold * volt2temp_coef; +} + +static void iwl5000_set_ct_threshold(struct iwl_priv *priv) +{ +	/* want Celsius */ +	priv->hw_params.ct_kill_threshold = CT_KILL_THRESHOLD_LEGACY; +} + +static void iwl5000_hw_set_hw_params(struct iwl_priv *priv) +{ +	iwl5000_set_ct_threshold(priv); + +	/* Set initial sensitivity parameters */ +	priv->hw_params.sens = &iwl5000_sensitivity; +} + +static void iwl5150_hw_set_hw_params(struct iwl_priv *priv) +{ +	iwl5150_set_ct_threshold(priv); + +	/* Set initial sensitivity parameters */ +	priv->hw_params.sens = &iwl5150_sensitivity; +} + +static void iwl5150_temperature(struct iwl_priv *priv) +{ +	u32 vt = 0; +	s32 offset =  iwl_temp_calib_to_offset(priv); + +	vt = le32_to_cpu(priv->statistics.common.temperature); +	vt = vt / IWL_5150_VOLTAGE_TO_TEMPERATURE_COEFF + offset; +	/* now vt hold the temperature in Kelvin */ +	priv->temperature = KELVIN_TO_CELSIUS(vt); +	iwl_tt_handler(priv); +} + +static int iwl5000_hw_channel_switch(struct iwl_priv *priv, +				     struct ieee80211_channel_switch *ch_switch) +{ +	/* +	 * MULTI-FIXME +	 * See iwlagn_mac_channel_switch. +	 */ +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	struct iwl5000_channel_switch_cmd cmd; +	u32 switch_time_in_usec, ucode_switch_time; +	u16 ch; +	u32 tsf_low; +	u8 switch_count; +	u16 beacon_interval = le16_to_cpu(ctx->timing.beacon_interval); +	struct ieee80211_vif *vif = ctx->vif; +	struct iwl_host_cmd hcmd = { +		.id = REPLY_CHANNEL_SWITCH, +		.len = { sizeof(cmd), }, +		.data = { &cmd, }, +	}; + +	cmd.band = priv->band == IEEE80211_BAND_2GHZ; +	ch = ch_switch->chandef.chan->hw_value; +	IWL_DEBUG_11H(priv, "channel switch from %d to %d\n", +		      ctx->active.channel, ch); +	cmd.channel = cpu_to_le16(ch); +	cmd.rxon_flags = ctx->staging.flags; +	cmd.rxon_filter_flags = ctx->staging.filter_flags; +	switch_count = ch_switch->count; +	tsf_low = ch_switch->timestamp & 0x0ffffffff; +	/* +	 * calculate the ucode channel switch time +	 * adding TSF as one of the factor for when to switch +	 */ +	if ((priv->ucode_beacon_time > tsf_low) && beacon_interval) { +		if (switch_count > ((priv->ucode_beacon_time - tsf_low) / +		    beacon_interval)) { +			switch_count -= (priv->ucode_beacon_time - +				tsf_low) / beacon_interval; +		} else +			switch_count = 0; +	} +	if (switch_count <= 1) +		cmd.switch_time = cpu_to_le32(priv->ucode_beacon_time); +	else { +		switch_time_in_usec = +			vif->bss_conf.beacon_int * switch_count * TIME_UNIT; +		ucode_switch_time = iwl_usecs_to_beacons(priv, +							 switch_time_in_usec, +							 beacon_interval); +		cmd.switch_time = iwl_add_beacon_time(priv, +						      priv->ucode_beacon_time, +						      ucode_switch_time, +						      beacon_interval); +	} +	IWL_DEBUG_11H(priv, "uCode time for the switch is 0x%x\n", +		      cmd.switch_time); +	cmd.expect_beacon = +		ch_switch->chandef.chan->flags & IEEE80211_CHAN_RADAR; + +	return iwl_dvm_send_cmd(priv, &hcmd); +} + +const struct iwl_dvm_cfg iwl_dvm_5000_cfg = { +	.set_hw_params = iwl5000_hw_set_hw_params, +	.set_channel_switch = iwl5000_hw_channel_switch, +	.temperature = iwlagn_temperature, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +	.no_idle_support = true, +}; + +const struct iwl_dvm_cfg iwl_dvm_5150_cfg = { +	.set_hw_params = iwl5150_hw_set_hw_params, +	.set_channel_switch = iwl5000_hw_channel_switch, +	.temperature = iwl5150_temperature, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +	.no_idle_support = true, +	.no_xtal_calib = true, +}; + + + +/* + * 6000 series + * =========== + */ + +static void iwl6000_set_ct_threshold(struct iwl_priv *priv) +{ +	/* want Celsius */ +	priv->hw_params.ct_kill_threshold = CT_KILL_THRESHOLD; +	priv->hw_params.ct_kill_exit_threshold = CT_KILL_EXIT_THRESHOLD; +} + +/* NIC configuration for 6000 series */ +static void iwl6000_nic_config(struct iwl_priv *priv) +{ +	switch (priv->cfg->device_family) { +	case IWL_DEVICE_FAMILY_6005: +	case IWL_DEVICE_FAMILY_6030: +	case IWL_DEVICE_FAMILY_6000: +		break; +	case IWL_DEVICE_FAMILY_6000i: +		/* 2x2 IPA phy type */ +		iwl_write32(priv->trans, CSR_GP_DRIVER_REG, +			     CSR_GP_DRIVER_REG_BIT_RADIO_SKU_2x2_IPA); +		break; +	case IWL_DEVICE_FAMILY_6050: +		/* Indicate calibration version to uCode. */ +		if (priv->nvm_data->calib_version >= 6) +			iwl_set_bit(priv->trans, CSR_GP_DRIVER_REG, +					CSR_GP_DRIVER_REG_BIT_CALIB_VERSION6); +		break; +	case IWL_DEVICE_FAMILY_6150: +		/* Indicate calibration version to uCode. */ +		if (priv->nvm_data->calib_version >= 6) +			iwl_set_bit(priv->trans, CSR_GP_DRIVER_REG, +					CSR_GP_DRIVER_REG_BIT_CALIB_VERSION6); +		iwl_set_bit(priv->trans, CSR_GP_DRIVER_REG, +			    CSR_GP_DRIVER_REG_BIT_6050_1x2); +		break; +	default: +		WARN_ON(1); +	} +} + +static const struct iwl_sensitivity_ranges iwl6000_sensitivity = { +	.min_nrg_cck = 110, +	.auto_corr_min_ofdm = 80, +	.auto_corr_min_ofdm_mrc = 128, +	.auto_corr_min_ofdm_x1 = 105, +	.auto_corr_min_ofdm_mrc_x1 = 192, + +	.auto_corr_max_ofdm = 145, +	.auto_corr_max_ofdm_mrc = 232, +	.auto_corr_max_ofdm_x1 = 110, +	.auto_corr_max_ofdm_mrc_x1 = 232, + +	.auto_corr_min_cck = 125, +	.auto_corr_max_cck = 175, +	.auto_corr_min_cck_mrc = 160, +	.auto_corr_max_cck_mrc = 310, +	.nrg_th_cck = 110, +	.nrg_th_ofdm = 110, + +	.barker_corr_th_min = 190, +	.barker_corr_th_min_mrc = 336, +	.nrg_th_cca = 62, +}; + +static void iwl6000_hw_set_hw_params(struct iwl_priv *priv) +{ +	iwl6000_set_ct_threshold(priv); + +	/* Set initial sensitivity parameters */ +	priv->hw_params.sens = &iwl6000_sensitivity; + +} + +static int iwl6000_hw_channel_switch(struct iwl_priv *priv, +				     struct ieee80211_channel_switch *ch_switch) +{ +	/* +	 * MULTI-FIXME +	 * See iwlagn_mac_channel_switch. +	 */ +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	struct iwl6000_channel_switch_cmd *cmd; +	u32 switch_time_in_usec, ucode_switch_time; +	u16 ch; +	u32 tsf_low; +	u8 switch_count; +	u16 beacon_interval = le16_to_cpu(ctx->timing.beacon_interval); +	struct ieee80211_vif *vif = ctx->vif; +	struct iwl_host_cmd hcmd = { +		.id = REPLY_CHANNEL_SWITCH, +		.len = { sizeof(*cmd), }, +		.dataflags[0] = IWL_HCMD_DFL_NOCOPY, +	}; +	int err; + +	cmd = kzalloc(sizeof(*cmd), GFP_KERNEL); +	if (!cmd) +		return -ENOMEM; + +	hcmd.data[0] = cmd; + +	cmd->band = priv->band == IEEE80211_BAND_2GHZ; +	ch = ch_switch->chandef.chan->hw_value; +	IWL_DEBUG_11H(priv, "channel switch from %u to %u\n", +		      ctx->active.channel, ch); +	cmd->channel = cpu_to_le16(ch); +	cmd->rxon_flags = ctx->staging.flags; +	cmd->rxon_filter_flags = ctx->staging.filter_flags; +	switch_count = ch_switch->count; +	tsf_low = ch_switch->timestamp & 0x0ffffffff; +	/* +	 * calculate the ucode channel switch time +	 * adding TSF as one of the factor for when to switch +	 */ +	if ((priv->ucode_beacon_time > tsf_low) && beacon_interval) { +		if (switch_count > ((priv->ucode_beacon_time - tsf_low) / +		    beacon_interval)) { +			switch_count -= (priv->ucode_beacon_time - +				tsf_low) / beacon_interval; +		} else +			switch_count = 0; +	} +	if (switch_count <= 1) +		cmd->switch_time = cpu_to_le32(priv->ucode_beacon_time); +	else { +		switch_time_in_usec = +			vif->bss_conf.beacon_int * switch_count * TIME_UNIT; +		ucode_switch_time = iwl_usecs_to_beacons(priv, +							 switch_time_in_usec, +							 beacon_interval); +		cmd->switch_time = iwl_add_beacon_time(priv, +						       priv->ucode_beacon_time, +						       ucode_switch_time, +						       beacon_interval); +	} +	IWL_DEBUG_11H(priv, "uCode time for the switch is 0x%x\n", +		      cmd->switch_time); +	cmd->expect_beacon = +		ch_switch->chandef.chan->flags & IEEE80211_CHAN_RADAR; + +	err = iwl_dvm_send_cmd(priv, &hcmd); +	kfree(cmd); +	return err; +} + +const struct iwl_dvm_cfg iwl_dvm_6000_cfg = { +	.set_hw_params = iwl6000_hw_set_hw_params, +	.set_channel_switch = iwl6000_hw_channel_switch, +	.nic_config = iwl6000_nic_config, +	.temperature = iwlagn_temperature, +	.adv_thermal_throttle = true, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +}; + +const struct iwl_dvm_cfg iwl_dvm_6005_cfg = { +	.set_hw_params = iwl6000_hw_set_hw_params, +	.set_channel_switch = iwl6000_hw_channel_switch, +	.nic_config = iwl6000_nic_config, +	.temperature = iwlagn_temperature, +	.adv_thermal_throttle = true, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +	.need_temp_offset_calib = true, +}; + +const struct iwl_dvm_cfg iwl_dvm_6050_cfg = { +	.set_hw_params = iwl6000_hw_set_hw_params, +	.set_channel_switch = iwl6000_hw_channel_switch, +	.nic_config = iwl6000_nic_config, +	.temperature = iwlagn_temperature, +	.adv_thermal_throttle = true, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF, +	.chain_noise_scale = 1500, +}; + +static const struct iwl_dvm_bt_params iwl6000_bt_params = { +	/* Due to bluetooth, we transmit 2.4 GHz probes only on antenna A */ +	.advanced_bt_coexist = true, +	.agg_time_limit = BT_AGG_THRESHOLD_DEF, +	.bt_init_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_NONE, +	.bt_prio_boost = IWLAGN_BT_PRIO_BOOST_DEFAULT, +	.bt_sco_disable = true, +}; + +const struct iwl_dvm_cfg iwl_dvm_6030_cfg = { +	.set_hw_params = iwl6000_hw_set_hw_params, +	.set_channel_switch = iwl6000_hw_channel_switch, +	.nic_config = iwl6000_nic_config, +	.temperature = iwlagn_temperature, +	.adv_thermal_throttle = true, +	.support_ct_kill_exit = true, +	.plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF, +	.chain_noise_scale = 1000, +	.bt_params = &iwl6000_bt_params, +	.need_temp_offset_calib = true, +	.adv_pm = true, +}; diff --git a/drivers/net/wireless/iwlwifi/dvm/led.c b/drivers/net/wireless/iwlwifi/dvm/led.c new file mode 100644 index 00000000000..ca4d6692cc4 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/led.c @@ -0,0 +1,223 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + + +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/delay.h> +#include <linux/skbuff.h> +#include <linux/netdevice.h> +#include <net/mac80211.h> +#include <linux/etherdevice.h> +#include <asm/unaligned.h> +#include "iwl-io.h" +#include "iwl-trans.h" +#include "iwl-modparams.h" +#include "dev.h" +#include "agn.h" + +/* Throughput		OFF time(ms)	ON time (ms) + *	>300			25		25 + *	>200 to 300		40		40 + *	>100 to 200		55		55 + *	>70 to 100		65		65 + *	>50 to 70		75		75 + *	>20 to 50		85		85 + *	>10 to 20		95		95 + *	>5 to 10		110		110 + *	>1 to 5			130		130 + *	>0 to 1			167		167 + *	<=0					SOLID ON + */ +static const struct ieee80211_tpt_blink iwl_blink[] = { +	{ .throughput = 0, .blink_time = 334 }, +	{ .throughput = 1 * 1024 - 1, .blink_time = 260 }, +	{ .throughput = 5 * 1024 - 1, .blink_time = 220 }, +	{ .throughput = 10 * 1024 - 1, .blink_time = 190 }, +	{ .throughput = 20 * 1024 - 1, .blink_time = 170 }, +	{ .throughput = 50 * 1024 - 1, .blink_time = 150 }, +	{ .throughput = 70 * 1024 - 1, .blink_time = 130 }, +	{ .throughput = 100 * 1024 - 1, .blink_time = 110 }, +	{ .throughput = 200 * 1024 - 1, .blink_time = 80 }, +	{ .throughput = 300 * 1024 - 1, .blink_time = 50 }, +}; + +/* Set led register off */ +void iwlagn_led_enable(struct iwl_priv *priv) +{ +	iwl_write32(priv->trans, CSR_LED_REG, CSR_LED_REG_TURN_ON); +} + +/* + * Adjust led blink rate to compensate on a MAC Clock difference on every HW + * Led blink rate analysis showed an average deviation of 20% on 5000 series + * and up. + * Need to compensate on the led on/off time per HW according to the deviation + * to achieve the desired led frequency + * The calculation is: (100-averageDeviation)/100 * blinkTime + * For code efficiency the calculation will be: + *     compensation = (100 - averageDeviation) * 64 / 100 + *     NewBlinkTime = (compensation * BlinkTime) / 64 + */ +static inline u8 iwl_blink_compensation(struct iwl_priv *priv, +				    u8 time, u16 compensation) +{ +	if (!compensation) { +		IWL_ERR(priv, "undefined blink compensation: " +			"use pre-defined blinking time\n"); +		return time; +	} + +	return (u8)((time * compensation) >> 6); +} + +static int iwl_send_led_cmd(struct iwl_priv *priv, struct iwl_led_cmd *led_cmd) +{ +	struct iwl_host_cmd cmd = { +		.id = REPLY_LEDS_CMD, +		.len = { sizeof(struct iwl_led_cmd), }, +		.data = { led_cmd, }, +		.flags = CMD_ASYNC, +	}; +	u32 reg; + +	reg = iwl_read32(priv->trans, CSR_LED_REG); +	if (reg != (reg & CSR_LED_BSM_CTRL_MSK)) +		iwl_write32(priv->trans, CSR_LED_REG, +			    reg & CSR_LED_BSM_CTRL_MSK); + +	return iwl_dvm_send_cmd(priv, &cmd); +} + +/* Set led pattern command */ +static int iwl_led_cmd(struct iwl_priv *priv, +		       unsigned long on, +		       unsigned long off) +{ +	struct iwl_led_cmd led_cmd = { +		.id = IWL_LED_LINK, +		.interval = IWL_DEF_LED_INTRVL +	}; +	int ret; + +	if (!test_bit(STATUS_READY, &priv->status)) +		return -EBUSY; + +	if (priv->blink_on == on && priv->blink_off == off) +		return 0; + +	if (off == 0) { +		/* led is SOLID_ON */ +		on = IWL_LED_SOLID; +	} + +	IWL_DEBUG_LED(priv, "Led blink time compensation=%u\n", +			priv->cfg->base_params->led_compensation); +	led_cmd.on = iwl_blink_compensation(priv, on, +				priv->cfg->base_params->led_compensation); +	led_cmd.off = iwl_blink_compensation(priv, off, +				priv->cfg->base_params->led_compensation); + +	ret = iwl_send_led_cmd(priv, &led_cmd); +	if (!ret) { +		priv->blink_on = on; +		priv->blink_off = off; +	} +	return ret; +} + +static void iwl_led_brightness_set(struct led_classdev *led_cdev, +				   enum led_brightness brightness) +{ +	struct iwl_priv *priv = container_of(led_cdev, struct iwl_priv, led); +	unsigned long on = 0; + +	if (brightness > 0) +		on = IWL_LED_SOLID; + +	iwl_led_cmd(priv, on, 0); +} + +static int iwl_led_blink_set(struct led_classdev *led_cdev, +			     unsigned long *delay_on, +			     unsigned long *delay_off) +{ +	struct iwl_priv *priv = container_of(led_cdev, struct iwl_priv, led); + +	return iwl_led_cmd(priv, *delay_on, *delay_off); +} + +void iwl_leds_init(struct iwl_priv *priv) +{ +	int mode = iwlwifi_mod_params.led_mode; +	int ret; + +	if (mode == IWL_LED_DISABLE) { +		IWL_INFO(priv, "Led disabled\n"); +		return; +	} +	if (mode == IWL_LED_DEFAULT) +		mode = priv->cfg->led_mode; + +	priv->led.name = kasprintf(GFP_KERNEL, "%s-led", +				   wiphy_name(priv->hw->wiphy)); +	priv->led.brightness_set = iwl_led_brightness_set; +	priv->led.blink_set = iwl_led_blink_set; +	priv->led.max_brightness = 1; + +	switch (mode) { +	case IWL_LED_DEFAULT: +		WARN_ON(1); +		break; +	case IWL_LED_BLINK: +		priv->led.default_trigger = +			ieee80211_create_tpt_led_trigger(priv->hw, +					IEEE80211_TPT_LEDTRIG_FL_CONNECTED, +					iwl_blink, ARRAY_SIZE(iwl_blink)); +		break; +	case IWL_LED_RF_STATE: +		priv->led.default_trigger = +			ieee80211_get_radio_led_name(priv->hw); +		break; +	} + +	ret = led_classdev_register(priv->trans->dev, &priv->led); +	if (ret) { +		kfree(priv->led.name); +		return; +	} + +	priv->led_registered = true; +} + +void iwl_leds_exit(struct iwl_priv *priv) +{ +	if (!priv->led_registered) +		return; + +	led_classdev_unregister(&priv->led); +	kfree(priv->led.name); +} diff --git a/drivers/net/wireless/iwlwifi/dvm/led.h b/drivers/net/wireless/iwlwifi/dvm/led.h new file mode 100644 index 00000000000..1c6b2252d0f --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/led.h @@ -0,0 +1,55 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +#ifndef __iwl_leds_h__ +#define __iwl_leds_h__ + + +struct iwl_priv; + +#define IWL_LED_SOLID 11 +#define IWL_DEF_LED_INTRVL cpu_to_le32(1000) + +#define IWL_LED_ACTIVITY       (0<<1) +#define IWL_LED_LINK           (1<<1) + +#ifdef CONFIG_IWLWIFI_LEDS +void iwlagn_led_enable(struct iwl_priv *priv); +void iwl_leds_init(struct iwl_priv *priv); +void iwl_leds_exit(struct iwl_priv *priv); +#else +static inline void iwlagn_led_enable(struct iwl_priv *priv) +{ +} +static inline void iwl_leds_init(struct iwl_priv *priv) +{ +} +static inline void iwl_leds_exit(struct iwl_priv *priv) +{ +} +#endif + +#endif /* __iwl_leds_h__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/lib.c b/drivers/net/wireless/iwlwifi/dvm/lib.c new file mode 100644 index 00000000000..2191621d69c --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/lib.c @@ -0,0 +1,1301 @@ +/****************************************************************************** + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ +#include <linux/etherdevice.h> +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/sched.h> +#include <net/mac80211.h> + +#include "iwl-io.h" +#include "iwl-agn-hw.h" +#include "iwl-trans.h" +#include "iwl-modparams.h" + +#include "dev.h" +#include "agn.h" + +int iwlagn_hw_valid_rtc_data_addr(u32 addr) +{ +	return (addr >= IWLAGN_RTC_DATA_LOWER_BOUND) && +		(addr < IWLAGN_RTC_DATA_UPPER_BOUND); +} + +int iwlagn_send_tx_power(struct iwl_priv *priv) +{ +	struct iwlagn_tx_power_dbm_cmd tx_power_cmd; +	u8 tx_ant_cfg_cmd; + +	if (WARN_ONCE(test_bit(STATUS_SCAN_HW, &priv->status), +		      "TX Power requested while scanning!\n")) +		return -EAGAIN; + +	/* half dBm need to multiply */ +	tx_power_cmd.global_lmt = (s8)(2 * priv->tx_power_user_lmt); + +	if (tx_power_cmd.global_lmt > priv->nvm_data->max_tx_pwr_half_dbm) { +		/* +		 * For the newer devices which using enhanced/extend tx power +		 * table in EEPROM, the format is in half dBm. driver need to +		 * convert to dBm format before report to mac80211. +		 * By doing so, there is a possibility of 1/2 dBm resolution +		 * lost. driver will perform "round-up" operation before +		 * reporting, but it will cause 1/2 dBm tx power over the +		 * regulatory limit. Perform the checking here, if the +		 * "tx_power_user_lmt" is higher than EEPROM value (in +		 * half-dBm format), lower the tx power based on EEPROM +		 */ +		tx_power_cmd.global_lmt = +			priv->nvm_data->max_tx_pwr_half_dbm; +	} +	tx_power_cmd.flags = IWLAGN_TX_POWER_NO_CLOSED; +	tx_power_cmd.srv_chan_lmt = IWLAGN_TX_POWER_AUTO; + +	if (IWL_UCODE_API(priv->fw->ucode_ver) == 1) +		tx_ant_cfg_cmd = REPLY_TX_POWER_DBM_CMD_V1; +	else +		tx_ant_cfg_cmd = REPLY_TX_POWER_DBM_CMD; + +	return iwl_dvm_send_cmd_pdu(priv, tx_ant_cfg_cmd, 0, +			sizeof(tx_power_cmd), &tx_power_cmd); +} + +void iwlagn_temperature(struct iwl_priv *priv) +{ +	lockdep_assert_held(&priv->statistics.lock); + +	/* store temperature from correct statistics (in Celsius) */ +	priv->temperature = le32_to_cpu(priv->statistics.common.temperature); +	iwl_tt_handler(priv); +} + +int iwlagn_hwrate_to_mac80211_idx(u32 rate_n_flags, enum ieee80211_band band) +{ +	int idx = 0; +	int band_offset = 0; + +	/* HT rate format: mac80211 wants an MCS number, which is just LSB */ +	if (rate_n_flags & RATE_MCS_HT_MSK) { +		idx = (rate_n_flags & 0xff); +		return idx; +	/* Legacy rate format, search for match in table */ +	} else { +		if (band == IEEE80211_BAND_5GHZ) +			band_offset = IWL_FIRST_OFDM_RATE; +		for (idx = band_offset; idx < IWL_RATE_COUNT_LEGACY; idx++) +			if (iwl_rates[idx].plcp == (rate_n_flags & 0xFF)) +				return idx - band_offset; +	} + +	return -1; +} + +int iwlagn_manage_ibss_station(struct iwl_priv *priv, +			       struct ieee80211_vif *vif, bool add) +{ +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; + +	if (add) +		return iwlagn_add_bssid_station(priv, vif_priv->ctx, +						vif->bss_conf.bssid, +						&vif_priv->ibss_bssid_sta_id); +	return iwl_remove_station(priv, vif_priv->ibss_bssid_sta_id, +				  vif->bss_conf.bssid); +} + +/** + * iwlagn_txfifo_flush: send REPLY_TXFIFO_FLUSH command to uCode + * + * pre-requirements: + *  1. acquire mutex before calling + *  2. make sure rf is on and not in exit state + */ +int iwlagn_txfifo_flush(struct iwl_priv *priv, u32 scd_q_msk) +{ +	struct iwl_txfifo_flush_cmd flush_cmd; +	struct iwl_host_cmd cmd = { +		.id = REPLY_TXFIFO_FLUSH, +		.len = { sizeof(struct iwl_txfifo_flush_cmd), }, +		.data = { &flush_cmd, }, +	}; + +	memset(&flush_cmd, 0, sizeof(flush_cmd)); + +	flush_cmd.queue_control = IWL_SCD_VO_MSK | IWL_SCD_VI_MSK | +				  IWL_SCD_BE_MSK | IWL_SCD_BK_MSK | +				  IWL_SCD_MGMT_MSK; +	if ((priv->valid_contexts != BIT(IWL_RXON_CTX_BSS))) +		flush_cmd.queue_control |= IWL_PAN_SCD_VO_MSK | +					   IWL_PAN_SCD_VI_MSK | +					   IWL_PAN_SCD_BE_MSK | +					   IWL_PAN_SCD_BK_MSK | +					   IWL_PAN_SCD_MGMT_MSK | +					   IWL_PAN_SCD_MULTICAST_MSK; + +	if (priv->nvm_data->sku_cap_11n_enable) +		flush_cmd.queue_control |= IWL_AGG_TX_QUEUE_MSK; + +	if (scd_q_msk) +		flush_cmd.queue_control = cpu_to_le32(scd_q_msk); + +	IWL_DEBUG_INFO(priv, "queue control: 0x%x\n", +		       flush_cmd.queue_control); +	flush_cmd.flush_control = cpu_to_le16(IWL_DROP_ALL); + +	return iwl_dvm_send_cmd(priv, &cmd); +} + +void iwlagn_dev_txfifo_flush(struct iwl_priv *priv) +{ +	mutex_lock(&priv->mutex); +	ieee80211_stop_queues(priv->hw); +	if (iwlagn_txfifo_flush(priv, 0)) { +		IWL_ERR(priv, "flush request fail\n"); +		goto done; +	} +	IWL_DEBUG_INFO(priv, "wait transmit/flush all frames\n"); +	iwl_trans_wait_tx_queue_empty(priv->trans, 0xffffffff); +done: +	ieee80211_wake_queues(priv->hw); +	mutex_unlock(&priv->mutex); +} + +/* + * BT coex + */ +/* Notmal TDM */ +static const __le32 iwlagn_def_3w_lookup[IWLAGN_BT_DECISION_LUT_SIZE] = { +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaeaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xcc00ff28), +	cpu_to_le32(0x0000aaaa), +	cpu_to_le32(0xcc00aaaa), +	cpu_to_le32(0x0000aaaa), +	cpu_to_le32(0xc0004000), +	cpu_to_le32(0x00004000), +	cpu_to_le32(0xf0005000), +	cpu_to_le32(0xf0005000), +}; + + +/* Loose Coex */ +static const __le32 iwlagn_loose_lookup[IWLAGN_BT_DECISION_LUT_SIZE] = { +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaeaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xcc00ff28), +	cpu_to_le32(0x0000aaaa), +	cpu_to_le32(0xcc00aaaa), +	cpu_to_le32(0x0000aaaa), +	cpu_to_le32(0x00000000), +	cpu_to_le32(0x00000000), +	cpu_to_le32(0xf0005000), +	cpu_to_le32(0xf0005000), +}; + +/* Full concurrency */ +static const __le32 iwlagn_concurrent_lookup[IWLAGN_BT_DECISION_LUT_SIZE] = { +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0xaaaaaaaa), +	cpu_to_le32(0x00000000), +	cpu_to_le32(0x00000000), +	cpu_to_le32(0x00000000), +	cpu_to_le32(0x00000000), +}; + +void iwlagn_send_advance_bt_config(struct iwl_priv *priv) +{ +	struct iwl_basic_bt_cmd basic = { +		.max_kill = IWLAGN_BT_MAX_KILL_DEFAULT, +		.bt3_timer_t7_value = IWLAGN_BT3_T7_DEFAULT, +		.bt3_prio_sample_time = IWLAGN_BT3_PRIO_SAMPLE_DEFAULT, +		.bt3_timer_t2_value = IWLAGN_BT3_T2_DEFAULT, +	}; +	struct iwl_bt_cmd_v1 bt_cmd_v1; +	struct iwl_bt_cmd_v2 bt_cmd_v2; +	int ret; + +	BUILD_BUG_ON(sizeof(iwlagn_def_3w_lookup) != +			sizeof(basic.bt3_lookup_table)); + +	if (priv->lib->bt_params) { +		/* +		 * newer generation of devices (2000 series and newer) +		 * use the version 2 of the bt command +		 * we need to make sure sending the host command +		 * with correct data structure to avoid uCode assert +		 */ +		if (priv->lib->bt_params->bt_session_2) { +			bt_cmd_v2.prio_boost = cpu_to_le32( +				priv->lib->bt_params->bt_prio_boost); +			bt_cmd_v2.tx_prio_boost = 0; +			bt_cmd_v2.rx_prio_boost = 0; +		} else { +			/* older version only has 8 bits */ +			WARN_ON(priv->lib->bt_params->bt_prio_boost & ~0xFF); +			bt_cmd_v1.prio_boost = +				priv->lib->bt_params->bt_prio_boost; +			bt_cmd_v1.tx_prio_boost = 0; +			bt_cmd_v1.rx_prio_boost = 0; +		} +	} else { +		IWL_ERR(priv, "failed to construct BT Coex Config\n"); +		return; +	} + +	/* +	 * Possible situations when BT needs to take over for receive, +	 * at the same time where STA needs to response to AP's frame(s), +	 * reduce the tx power of the required response frames, by that, +	 * allow the concurrent BT receive & WiFi transmit +	 * (BT - ANT A, WiFi -ANT B), without interference to one another +	 * +	 * Reduced tx power apply to control frames only (ACK/Back/CTS) +	 * when indicated by the BT config command +	 */ +	basic.kill_ack_mask = priv->kill_ack_mask; +	basic.kill_cts_mask = priv->kill_cts_mask; +	if (priv->reduced_txpower) +		basic.reduce_txpower = IWLAGN_BT_REDUCED_TX_PWR; +	basic.valid = priv->bt_valid; + +	/* +	 * Configure BT coex mode to "no coexistence" when the +	 * user disabled BT coexistence, we have no interface +	 * (might be in monitor mode), or the interface is in +	 * IBSS mode (no proper uCode support for coex then). +	 */ +	if (!iwlwifi_mod_params.bt_coex_active || +	    priv->iw_mode == NL80211_IFTYPE_ADHOC) { +		basic.flags = IWLAGN_BT_FLAG_COEX_MODE_DISABLED; +	} else { +		basic.flags = IWLAGN_BT_FLAG_COEX_MODE_3W << +					IWLAGN_BT_FLAG_COEX_MODE_SHIFT; + +		if (!priv->bt_enable_pspoll) +			basic.flags |= IWLAGN_BT_FLAG_SYNC_2_BT_DISABLE; +		else +			basic.flags &= ~IWLAGN_BT_FLAG_SYNC_2_BT_DISABLE; + +		if (priv->bt_ch_announce) +			basic.flags |= IWLAGN_BT_FLAG_CHANNEL_INHIBITION; +		IWL_DEBUG_COEX(priv, "BT coex flag: 0X%x\n", basic.flags); +	} +	priv->bt_enable_flag = basic.flags; +	if (priv->bt_full_concurrent) +		memcpy(basic.bt3_lookup_table, iwlagn_concurrent_lookup, +			sizeof(iwlagn_concurrent_lookup)); +	else +		memcpy(basic.bt3_lookup_table, iwlagn_def_3w_lookup, +			sizeof(iwlagn_def_3w_lookup)); + +	IWL_DEBUG_COEX(priv, "BT coex %s in %s mode\n", +		       basic.flags ? "active" : "disabled", +		       priv->bt_full_concurrent ? +		       "full concurrency" : "3-wire"); + +	if (priv->lib->bt_params->bt_session_2) { +		memcpy(&bt_cmd_v2.basic, &basic, +			sizeof(basic)); +		ret = iwl_dvm_send_cmd_pdu(priv, REPLY_BT_CONFIG, +			0, sizeof(bt_cmd_v2), &bt_cmd_v2); +	} else { +		memcpy(&bt_cmd_v1.basic, &basic, +			sizeof(basic)); +		ret = iwl_dvm_send_cmd_pdu(priv, REPLY_BT_CONFIG, +			0, sizeof(bt_cmd_v1), &bt_cmd_v1); +	} +	if (ret) +		IWL_ERR(priv, "failed to send BT Coex Config\n"); + +} + +void iwlagn_bt_adjust_rssi_monitor(struct iwl_priv *priv, bool rssi_ena) +{ +	struct iwl_rxon_context *ctx, *found_ctx = NULL; +	bool found_ap = false; + +	lockdep_assert_held(&priv->mutex); + +	/* Check whether AP or GO mode is active. */ +	if (rssi_ena) { +		for_each_context(priv, ctx) { +			if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_AP && +			    iwl_is_associated_ctx(ctx)) { +				found_ap = true; +				break; +			} +		} +	} + +	/* +	 * If disable was received or If GO/AP mode, disable RSSI +	 * measurements. +	 */ +	if (!rssi_ena || found_ap) { +		if (priv->cur_rssi_ctx) { +			ctx = priv->cur_rssi_ctx; +			ieee80211_disable_rssi_reports(ctx->vif); +			priv->cur_rssi_ctx = NULL; +		} +		return; +	} + +	/* +	 * If rssi measurements need to be enabled, consider all cases now. +	 * Figure out how many contexts are active. +	 */ +	for_each_context(priv, ctx) { +		if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_STATION && +		    iwl_is_associated_ctx(ctx)) { +			found_ctx = ctx; +			break; +		} +	} + +	/* +	 * rssi monitor already enabled for the correct interface...nothing +	 * to do. +	 */ +	if (found_ctx == priv->cur_rssi_ctx) +		return; + +	/* +	 * Figure out if rssi monitor is currently enabled, and needs +	 * to be changed. If rssi monitor is already enabled, disable +	 * it first else just enable rssi measurements on the +	 * interface found above. +	 */ +	if (priv->cur_rssi_ctx) { +		ctx = priv->cur_rssi_ctx; +		if (ctx->vif) +			ieee80211_disable_rssi_reports(ctx->vif); +	} + +	priv->cur_rssi_ctx = found_ctx; + +	if (!found_ctx) +		return; + +	ieee80211_enable_rssi_reports(found_ctx->vif, +			IWLAGN_BT_PSP_MIN_RSSI_THRESHOLD, +			IWLAGN_BT_PSP_MAX_RSSI_THRESHOLD); +} + +static bool iwlagn_bt_traffic_is_sco(struct iwl_bt_uart_msg *uart_msg) +{ +	return BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3 >> +			BT_UART_MSG_FRAME3SCOESCO_POS; +} + +static void iwlagn_bt_traffic_change_work(struct work_struct *work) +{ +	struct iwl_priv *priv = +		container_of(work, struct iwl_priv, bt_traffic_change_work); +	struct iwl_rxon_context *ctx; +	int smps_request = -1; + +	if (priv->bt_enable_flag == IWLAGN_BT_FLAG_COEX_MODE_DISABLED) { +		/* bt coex disabled */ +		return; +	} + +	/* +	 * Note: bt_traffic_load can be overridden by scan complete and +	 * coex profile notifications. Ignore that since only bad consequence +	 * can be not matching debug print with actual state. +	 */ +	IWL_DEBUG_COEX(priv, "BT traffic load changes: %d\n", +		       priv->bt_traffic_load); + +	switch (priv->bt_traffic_load) { +	case IWL_BT_COEX_TRAFFIC_LOAD_NONE: +		if (priv->bt_status) +			smps_request = IEEE80211_SMPS_DYNAMIC; +		else +			smps_request = IEEE80211_SMPS_AUTOMATIC; +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_LOW: +		smps_request = IEEE80211_SMPS_DYNAMIC; +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_HIGH: +	case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS: +		smps_request = IEEE80211_SMPS_STATIC; +		break; +	default: +		IWL_ERR(priv, "Invalid BT traffic load: %d\n", +			priv->bt_traffic_load); +		break; +	} + +	mutex_lock(&priv->mutex); + +	/* +	 * We can not send command to firmware while scanning. When the scan +	 * complete we will schedule this work again. We do check with mutex +	 * locked to prevent new scan request to arrive. We do not check +	 * STATUS_SCANNING to avoid race when queue_work two times from +	 * different notifications, but quit and not perform any work at all. +	 */ +	if (test_bit(STATUS_SCAN_HW, &priv->status)) +		goto out; + +	iwl_update_chain_flags(priv); + +	if (smps_request != -1) { +		priv->current_ht_config.smps = smps_request; +		for_each_context(priv, ctx) { +			if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_STATION) +				ieee80211_request_smps(ctx->vif, smps_request); +		} +	} + +	/* +	 * Dynamic PS poll related functionality. Adjust RSSI measurements if +	 * necessary. +	 */ +	iwlagn_bt_coex_rssi_monitor(priv); +out: +	mutex_unlock(&priv->mutex); +} + +/* + * If BT sco traffic, and RSSI monitor is enabled, move measurements to the + * correct interface or disable it if this is the last interface to be + * removed. + */ +void iwlagn_bt_coex_rssi_monitor(struct iwl_priv *priv) +{ +	if (priv->bt_is_sco && +	    priv->bt_traffic_load == IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS) +		iwlagn_bt_adjust_rssi_monitor(priv, true); +	else +		iwlagn_bt_adjust_rssi_monitor(priv, false); +} + +static void iwlagn_print_uartmsg(struct iwl_priv *priv, +				struct iwl_bt_uart_msg *uart_msg) +{ +	IWL_DEBUG_COEX(priv, "Message Type = 0x%X, SSN = 0x%X, " +			"Update Req = 0x%X\n", +		(BT_UART_MSG_FRAME1MSGTYPE_MSK & uart_msg->frame1) >> +			BT_UART_MSG_FRAME1MSGTYPE_POS, +		(BT_UART_MSG_FRAME1SSN_MSK & uart_msg->frame1) >> +			BT_UART_MSG_FRAME1SSN_POS, +		(BT_UART_MSG_FRAME1UPDATEREQ_MSK & uart_msg->frame1) >> +			BT_UART_MSG_FRAME1UPDATEREQ_POS); + +	IWL_DEBUG_COEX(priv, "Open connections = 0x%X, Traffic load = 0x%X, " +			"Chl_SeqN = 0x%X, In band = 0x%X\n", +		(BT_UART_MSG_FRAME2OPENCONNECTIONS_MSK & uart_msg->frame2) >> +			BT_UART_MSG_FRAME2OPENCONNECTIONS_POS, +		(BT_UART_MSG_FRAME2TRAFFICLOAD_MSK & uart_msg->frame2) >> +			BT_UART_MSG_FRAME2TRAFFICLOAD_POS, +		(BT_UART_MSG_FRAME2CHLSEQN_MSK & uart_msg->frame2) >> +			BT_UART_MSG_FRAME2CHLSEQN_POS, +		(BT_UART_MSG_FRAME2INBAND_MSK & uart_msg->frame2) >> +			BT_UART_MSG_FRAME2INBAND_POS); + +	IWL_DEBUG_COEX(priv, "SCO/eSCO = 0x%X, Sniff = 0x%X, A2DP = 0x%X, " +			"ACL = 0x%X, Master = 0x%X, OBEX = 0x%X\n", +		(BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3) >> +			BT_UART_MSG_FRAME3SCOESCO_POS, +		(BT_UART_MSG_FRAME3SNIFF_MSK & uart_msg->frame3) >> +			BT_UART_MSG_FRAME3SNIFF_POS, +		(BT_UART_MSG_FRAME3A2DP_MSK & uart_msg->frame3) >> +			BT_UART_MSG_FRAME3A2DP_POS, +		(BT_UART_MSG_FRAME3ACL_MSK & uart_msg->frame3) >> +			BT_UART_MSG_FRAME3ACL_POS, +		(BT_UART_MSG_FRAME3MASTER_MSK & uart_msg->frame3) >> +			BT_UART_MSG_FRAME3MASTER_POS, +		(BT_UART_MSG_FRAME3OBEX_MSK & uart_msg->frame3) >> +			BT_UART_MSG_FRAME3OBEX_POS); + +	IWL_DEBUG_COEX(priv, "Idle duration = 0x%X\n", +		(BT_UART_MSG_FRAME4IDLEDURATION_MSK & uart_msg->frame4) >> +			BT_UART_MSG_FRAME4IDLEDURATION_POS); + +	IWL_DEBUG_COEX(priv, "Tx Activity = 0x%X, Rx Activity = 0x%X, " +			"eSCO Retransmissions = 0x%X\n", +		(BT_UART_MSG_FRAME5TXACTIVITY_MSK & uart_msg->frame5) >> +			BT_UART_MSG_FRAME5TXACTIVITY_POS, +		(BT_UART_MSG_FRAME5RXACTIVITY_MSK & uart_msg->frame5) >> +			BT_UART_MSG_FRAME5RXACTIVITY_POS, +		(BT_UART_MSG_FRAME5ESCORETRANSMIT_MSK & uart_msg->frame5) >> +			BT_UART_MSG_FRAME5ESCORETRANSMIT_POS); + +	IWL_DEBUG_COEX(priv, "Sniff Interval = 0x%X, Discoverable = 0x%X\n", +		(BT_UART_MSG_FRAME6SNIFFINTERVAL_MSK & uart_msg->frame6) >> +			BT_UART_MSG_FRAME6SNIFFINTERVAL_POS, +		(BT_UART_MSG_FRAME6DISCOVERABLE_MSK & uart_msg->frame6) >> +			BT_UART_MSG_FRAME6DISCOVERABLE_POS); + +	IWL_DEBUG_COEX(priv, "Sniff Activity = 0x%X, Page = " +			"0x%X, Inquiry = 0x%X, Connectable = 0x%X\n", +		(BT_UART_MSG_FRAME7SNIFFACTIVITY_MSK & uart_msg->frame7) >> +			BT_UART_MSG_FRAME7SNIFFACTIVITY_POS, +		(BT_UART_MSG_FRAME7PAGE_MSK & uart_msg->frame7) >> +			BT_UART_MSG_FRAME7PAGE_POS, +		(BT_UART_MSG_FRAME7INQUIRY_MSK & uart_msg->frame7) >> +			BT_UART_MSG_FRAME7INQUIRY_POS, +		(BT_UART_MSG_FRAME7CONNECTABLE_MSK & uart_msg->frame7) >> +			BT_UART_MSG_FRAME7CONNECTABLE_POS); +} + +static bool iwlagn_set_kill_msk(struct iwl_priv *priv, +				struct iwl_bt_uart_msg *uart_msg) +{ +	bool need_update = false; +	u8 kill_msk = IWL_BT_KILL_REDUCE; +	static const __le32 bt_kill_ack_msg[3] = { +		IWLAGN_BT_KILL_ACK_MASK_DEFAULT, +		IWLAGN_BT_KILL_ACK_CTS_MASK_SCO, +		IWLAGN_BT_KILL_ACK_CTS_MASK_REDUCE}; +	static const __le32 bt_kill_cts_msg[3] = { +		IWLAGN_BT_KILL_CTS_MASK_DEFAULT, +		IWLAGN_BT_KILL_ACK_CTS_MASK_SCO, +		IWLAGN_BT_KILL_ACK_CTS_MASK_REDUCE}; + +	if (!priv->reduced_txpower) +		kill_msk = (BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3) +			? IWL_BT_KILL_OVERRIDE : IWL_BT_KILL_DEFAULT; +	if (priv->kill_ack_mask != bt_kill_ack_msg[kill_msk] || +	    priv->kill_cts_mask != bt_kill_cts_msg[kill_msk]) { +		priv->bt_valid |= IWLAGN_BT_VALID_KILL_ACK_MASK; +		priv->kill_ack_mask = bt_kill_ack_msg[kill_msk]; +		priv->bt_valid |= IWLAGN_BT_VALID_KILL_CTS_MASK; +		priv->kill_cts_mask = bt_kill_cts_msg[kill_msk]; +		need_update = true; +	} +	return need_update; +} + +/* + * Upon RSSI changes, sends a bt config command with following changes + *  1. enable/disable "reduced control frames tx power + *  2. update the "kill)ack_mask" and "kill_cts_mask" + * + * If "reduced tx power" is enabled, uCode shall + *  1. ACK/Back/CTS rate shall reduced to 6Mbps + *  2. not use duplciate 20/40MHz mode + */ +static bool iwlagn_fill_txpower_mode(struct iwl_priv *priv, +				struct iwl_bt_uart_msg *uart_msg) +{ +	bool need_update = false; +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	int ave_rssi; + +	if (!ctx->vif || (ctx->vif->type != NL80211_IFTYPE_STATION)) { +		IWL_DEBUG_INFO(priv, "BSS ctx not active or not in sta mode\n"); +		return false; +	} + +	ave_rssi = ieee80211_ave_rssi(ctx->vif); +	if (!ave_rssi) { +		/* no rssi data, no changes to reduce tx power */ +		IWL_DEBUG_COEX(priv, "no rssi data available\n"); +		return need_update; +	} +	if (!priv->reduced_txpower && +	    !iwl_is_associated(priv, IWL_RXON_CTX_PAN) && +	    (ave_rssi > BT_ENABLE_REDUCED_TXPOWER_THRESHOLD) && +	    (uart_msg->frame3 & (BT_UART_MSG_FRAME3ACL_MSK | +	    BT_UART_MSG_FRAME3OBEX_MSK)) && +	    !(uart_msg->frame3 & (BT_UART_MSG_FRAME3SCOESCO_MSK | +	    BT_UART_MSG_FRAME3SNIFF_MSK | BT_UART_MSG_FRAME3A2DP_MSK))) { +		/* enabling reduced tx power */ +		priv->reduced_txpower = true; +		priv->bt_valid |= IWLAGN_BT_VALID_REDUCED_TX_PWR; +		need_update = true; +	} else if (priv->reduced_txpower && +		   (iwl_is_associated(priv, IWL_RXON_CTX_PAN) || +		   (ave_rssi < BT_DISABLE_REDUCED_TXPOWER_THRESHOLD) || +		   (uart_msg->frame3 & (BT_UART_MSG_FRAME3SCOESCO_MSK | +		   BT_UART_MSG_FRAME3SNIFF_MSK | BT_UART_MSG_FRAME3A2DP_MSK)) || +		   !(uart_msg->frame3 & (BT_UART_MSG_FRAME3ACL_MSK | +		   BT_UART_MSG_FRAME3OBEX_MSK)))) { +		/* disable reduced tx power */ +		priv->reduced_txpower = false; +		priv->bt_valid |= IWLAGN_BT_VALID_REDUCED_TX_PWR; +		need_update = true; +	} + +	return need_update; +} + +int iwlagn_bt_coex_profile_notif(struct iwl_priv *priv, +				  struct iwl_rx_cmd_buffer *rxb, +				  struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_bt_coex_profile_notif *coex = (void *)pkt->data; +	struct iwl_bt_uart_msg *uart_msg = &coex->last_bt_uart_msg; + +	if (priv->bt_enable_flag == IWLAGN_BT_FLAG_COEX_MODE_DISABLED) { +		/* bt coex disabled */ +		return 0; +	} + +	IWL_DEBUG_COEX(priv, "BT Coex notification:\n"); +	IWL_DEBUG_COEX(priv, "    status: %d\n", coex->bt_status); +	IWL_DEBUG_COEX(priv, "    traffic load: %d\n", coex->bt_traffic_load); +	IWL_DEBUG_COEX(priv, "    CI compliance: %d\n", +			coex->bt_ci_compliance); +	iwlagn_print_uartmsg(priv, uart_msg); + +	priv->last_bt_traffic_load = priv->bt_traffic_load; +	priv->bt_is_sco = iwlagn_bt_traffic_is_sco(uart_msg); + +	if (priv->iw_mode != NL80211_IFTYPE_ADHOC) { +		if (priv->bt_status != coex->bt_status || +		    priv->last_bt_traffic_load != coex->bt_traffic_load) { +			if (coex->bt_status) { +				/* BT on */ +				if (!priv->bt_ch_announce) +					priv->bt_traffic_load = +						IWL_BT_COEX_TRAFFIC_LOAD_HIGH; +				else +					priv->bt_traffic_load = +						coex->bt_traffic_load; +			} else { +				/* BT off */ +				priv->bt_traffic_load = +					IWL_BT_COEX_TRAFFIC_LOAD_NONE; +			} +			priv->bt_status = coex->bt_status; +			queue_work(priv->workqueue, +				   &priv->bt_traffic_change_work); +		} +	} + +	/* schedule to send runtime bt_config */ +	/* check reduce power before change ack/cts kill mask */ +	if (iwlagn_fill_txpower_mode(priv, uart_msg) || +	    iwlagn_set_kill_msk(priv, uart_msg)) +		queue_work(priv->workqueue, &priv->bt_runtime_config); + + +	/* FIXME: based on notification, adjust the prio_boost */ + +	priv->bt_ci_compliance = coex->bt_ci_compliance; +	return 0; +} + +void iwlagn_bt_rx_handler_setup(struct iwl_priv *priv) +{ +	priv->rx_handlers[REPLY_BT_COEX_PROFILE_NOTIF] = +		iwlagn_bt_coex_profile_notif; +} + +void iwlagn_bt_setup_deferred_work(struct iwl_priv *priv) +{ +	INIT_WORK(&priv->bt_traffic_change_work, +		  iwlagn_bt_traffic_change_work); +} + +void iwlagn_bt_cancel_deferred_work(struct iwl_priv *priv) +{ +	cancel_work_sync(&priv->bt_traffic_change_work); +} + +static bool is_single_rx_stream(struct iwl_priv *priv) +{ +	return priv->current_ht_config.smps == IEEE80211_SMPS_STATIC || +	       priv->current_ht_config.single_chain_sufficient; +} + +#define IWL_NUM_RX_CHAINS_MULTIPLE	3 +#define IWL_NUM_RX_CHAINS_SINGLE	2 +#define IWL_NUM_IDLE_CHAINS_DUAL	2 +#define IWL_NUM_IDLE_CHAINS_SINGLE	1 + +/* + * Determine how many receiver/antenna chains to use. + * + * More provides better reception via diversity.  Fewer saves power + * at the expense of throughput, but only when not in powersave to + * start with. + * + * MIMO (dual stream) requires at least 2, but works better with 3. + * This does not determine *which* chains to use, just how many. + */ +static int iwl_get_active_rx_chain_count(struct iwl_priv *priv) +{ +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist && +	    (priv->bt_full_concurrent || +	     priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)) { +		/* +		 * only use chain 'A' in bt high traffic load or +		 * full concurrency mode +		 */ +		return IWL_NUM_RX_CHAINS_SINGLE; +	} +	/* # of Rx chains to use when expecting MIMO. */ +	if (is_single_rx_stream(priv)) +		return IWL_NUM_RX_CHAINS_SINGLE; +	else +		return IWL_NUM_RX_CHAINS_MULTIPLE; +} + +/* + * When we are in power saving mode, unless device support spatial + * multiplexing power save, use the active count for rx chain count. + */ +static int iwl_get_idle_rx_chain_count(struct iwl_priv *priv, int active_cnt) +{ +	/* # Rx chains when idling, depending on SMPS mode */ +	switch (priv->current_ht_config.smps) { +	case IEEE80211_SMPS_STATIC: +	case IEEE80211_SMPS_DYNAMIC: +		return IWL_NUM_IDLE_CHAINS_SINGLE; +	case IEEE80211_SMPS_AUTOMATIC: +	case IEEE80211_SMPS_OFF: +		return active_cnt; +	default: +		WARN(1, "invalid SMPS mode %d", +		     priv->current_ht_config.smps); +		return active_cnt; +	} +} + +/* up to 4 chains */ +static u8 iwl_count_chain_bitmap(u32 chain_bitmap) +{ +	u8 res; +	res = (chain_bitmap & BIT(0)) >> 0; +	res += (chain_bitmap & BIT(1)) >> 1; +	res += (chain_bitmap & BIT(2)) >> 2; +	res += (chain_bitmap & BIT(3)) >> 3; +	return res; +} + +/** + * iwlagn_set_rxon_chain - Set up Rx chain usage in "staging" RXON image + * + * Selects how many and which Rx receivers/antennas/chains to use. + * This should not be used for scan command ... it puts data in wrong place. + */ +void iwlagn_set_rxon_chain(struct iwl_priv *priv, struct iwl_rxon_context *ctx) +{ +	bool is_single = is_single_rx_stream(priv); +	bool is_cam = !test_bit(STATUS_POWER_PMI, &priv->status); +	u8 idle_rx_cnt, active_rx_cnt, valid_rx_cnt; +	u32 active_chains; +	u16 rx_chain; + +	/* Tell uCode which antennas are actually connected. +	 * Before first association, we assume all antennas are connected. +	 * Just after first association, iwl_chain_noise_calibration() +	 *    checks which antennas actually *are* connected. */ +	if (priv->chain_noise_data.active_chains) +		active_chains = priv->chain_noise_data.active_chains; +	else +		active_chains = priv->nvm_data->valid_rx_ant; + +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist && +	    (priv->bt_full_concurrent || +	     priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)) { +		/* +		 * only use chain 'A' in bt high traffic load or +		 * full concurrency mode +		 */ +		active_chains = first_antenna(active_chains); +	} + +	rx_chain = active_chains << RXON_RX_CHAIN_VALID_POS; + +	/* How many receivers should we use? */ +	active_rx_cnt = iwl_get_active_rx_chain_count(priv); +	idle_rx_cnt = iwl_get_idle_rx_chain_count(priv, active_rx_cnt); + + +	/* correct rx chain count according hw settings +	 * and chain noise calibration +	 */ +	valid_rx_cnt = iwl_count_chain_bitmap(active_chains); +	if (valid_rx_cnt < active_rx_cnt) +		active_rx_cnt = valid_rx_cnt; + +	if (valid_rx_cnt < idle_rx_cnt) +		idle_rx_cnt = valid_rx_cnt; + +	rx_chain |= active_rx_cnt << RXON_RX_CHAIN_MIMO_CNT_POS; +	rx_chain |= idle_rx_cnt  << RXON_RX_CHAIN_CNT_POS; + +	ctx->staging.rx_chain = cpu_to_le16(rx_chain); + +	if (!is_single && (active_rx_cnt >= IWL_NUM_RX_CHAINS_SINGLE) && is_cam) +		ctx->staging.rx_chain |= RXON_RX_CHAIN_MIMO_FORCE_MSK; +	else +		ctx->staging.rx_chain &= ~RXON_RX_CHAIN_MIMO_FORCE_MSK; + +	IWL_DEBUG_ASSOC(priv, "rx_chain=0x%X active=%d idle=%d\n", +			ctx->staging.rx_chain, +			active_rx_cnt, idle_rx_cnt); + +	WARN_ON(active_rx_cnt == 0 || idle_rx_cnt == 0 || +		active_rx_cnt < idle_rx_cnt); +} + +u8 iwl_toggle_tx_ant(struct iwl_priv *priv, u8 ant, u8 valid) +{ +	int i; +	u8 ind = ant; + +	if (priv->band == IEEE80211_BAND_2GHZ && +	    priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH) +		return 0; + +	for (i = 0; i < RATE_ANT_NUM - 1; i++) { +		ind = (ind + 1) < RATE_ANT_NUM ?  ind + 1 : 0; +		if (valid & BIT(ind)) +			return ind; +	} +	return ant; +} + +#ifdef CONFIG_PM_SLEEP +static void iwlagn_convert_p1k(u16 *p1k, __le16 *out) +{ +	int i; + +	for (i = 0; i < IWLAGN_P1K_SIZE; i++) +		out[i] = cpu_to_le16(p1k[i]); +} + +struct wowlan_key_data { +	struct iwl_rxon_context *ctx; +	struct iwlagn_wowlan_rsc_tsc_params_cmd *rsc_tsc; +	struct iwlagn_wowlan_tkip_params_cmd *tkip; +	const u8 *bssid; +	bool error, use_rsc_tsc, use_tkip; +}; + + +static void iwlagn_wowlan_program_keys(struct ieee80211_hw *hw, +			       struct ieee80211_vif *vif, +			       struct ieee80211_sta *sta, +			       struct ieee80211_key_conf *key, +			       void *_data) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct wowlan_key_data *data = _data; +	struct iwl_rxon_context *ctx = data->ctx; +	struct aes_sc *aes_sc, *aes_tx_sc = NULL; +	struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL; +	struct iwlagn_p1k_cache *rx_p1ks; +	u8 *rx_mic_key; +	struct ieee80211_key_seq seq; +	u32 cur_rx_iv32 = 0; +	u16 p1k[IWLAGN_P1K_SIZE]; +	int ret, i; + +	mutex_lock(&priv->mutex); + +	if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 || +	     key->cipher == WLAN_CIPHER_SUITE_WEP104) && +	     !sta && !ctx->key_mapping_keys) +		ret = iwl_set_default_wep_key(priv, ctx, key); +	else +		ret = iwl_set_dynamic_key(priv, ctx, key, sta); + +	if (ret) { +		IWL_ERR(priv, "Error setting key during suspend!\n"); +		data->error = true; +	} + +	switch (key->cipher) { +	case WLAN_CIPHER_SUITE_TKIP: +		if (sta) { +			tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.unicast_rsc; +			tkip_tx_sc = &data->rsc_tsc->all_tsc_rsc.tkip.tsc; + +			rx_p1ks = data->tkip->rx_uni; + +			ieee80211_get_key_tx_seq(key, &seq); +			tkip_tx_sc->iv16 = cpu_to_le16(seq.tkip.iv16); +			tkip_tx_sc->iv32 = cpu_to_le32(seq.tkip.iv32); + +			ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k); +			iwlagn_convert_p1k(p1k, data->tkip->tx.p1k); + +			memcpy(data->tkip->mic_keys.tx, +			       &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY], +			       IWLAGN_MIC_KEY_SIZE); + +			rx_mic_key = data->tkip->mic_keys.rx_unicast; +		} else { +			tkip_sc = +				data->rsc_tsc->all_tsc_rsc.tkip.multicast_rsc; +			rx_p1ks = data->tkip->rx_multi; +			rx_mic_key = data->tkip->mic_keys.rx_mcast; +		} + +		/* +		 * For non-QoS this relies on the fact that both the uCode and +		 * mac80211 use TID 0 (as they need to to avoid replay attacks) +		 * for checking the IV in the frames. +		 */ +		for (i = 0; i < IWLAGN_NUM_RSC; i++) { +			ieee80211_get_key_rx_seq(key, i, &seq); +			tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16); +			tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32); +			/* wrapping isn't allowed, AP must rekey */ +			if (seq.tkip.iv32 > cur_rx_iv32) +				cur_rx_iv32 = seq.tkip.iv32; +		} + +		ieee80211_get_tkip_rx_p1k(key, data->bssid, cur_rx_iv32, p1k); +		iwlagn_convert_p1k(p1k, rx_p1ks[0].p1k); +		ieee80211_get_tkip_rx_p1k(key, data->bssid, +					  cur_rx_iv32 + 1, p1k); +		iwlagn_convert_p1k(p1k, rx_p1ks[1].p1k); + +		memcpy(rx_mic_key, +		       &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY], +		       IWLAGN_MIC_KEY_SIZE); + +		data->use_tkip = true; +		data->use_rsc_tsc = true; +		break; +	case WLAN_CIPHER_SUITE_CCMP: +		if (sta) { +			u8 *pn = seq.ccmp.pn; + +			aes_sc = data->rsc_tsc->all_tsc_rsc.aes.unicast_rsc; +			aes_tx_sc = &data->rsc_tsc->all_tsc_rsc.aes.tsc; + +			ieee80211_get_key_tx_seq(key, &seq); +			aes_tx_sc->pn = cpu_to_le64( +					(u64)pn[5] | +					((u64)pn[4] << 8) | +					((u64)pn[3] << 16) | +					((u64)pn[2] << 24) | +					((u64)pn[1] << 32) | +					((u64)pn[0] << 40)); +		} else +			aes_sc = data->rsc_tsc->all_tsc_rsc.aes.multicast_rsc; + +		/* +		 * For non-QoS this relies on the fact that both the uCode and +		 * mac80211 use TID 0 for checking the IV in the frames. +		 */ +		for (i = 0; i < IWLAGN_NUM_RSC; i++) { +			u8 *pn = seq.ccmp.pn; + +			ieee80211_get_key_rx_seq(key, i, &seq); +			aes_sc->pn = cpu_to_le64( +					(u64)pn[5] | +					((u64)pn[4] << 8) | +					((u64)pn[3] << 16) | +					((u64)pn[2] << 24) | +					((u64)pn[1] << 32) | +					((u64)pn[0] << 40)); +		} +		data->use_rsc_tsc = true; +		break; +	} + +	mutex_unlock(&priv->mutex); +} + +int iwlagn_send_patterns(struct iwl_priv *priv, +			struct cfg80211_wowlan *wowlan) +{ +	struct iwlagn_wowlan_patterns_cmd *pattern_cmd; +	struct iwl_host_cmd cmd = { +		.id = REPLY_WOWLAN_PATTERNS, +		.dataflags[0] = IWL_HCMD_DFL_NOCOPY, +	}; +	int i, err; + +	if (!wowlan->n_patterns) +		return 0; + +	cmd.len[0] = sizeof(*pattern_cmd) + +		wowlan->n_patterns * sizeof(struct iwlagn_wowlan_pattern); + +	pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL); +	if (!pattern_cmd) +		return -ENOMEM; + +	pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns); + +	for (i = 0; i < wowlan->n_patterns; i++) { +		int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8); + +		memcpy(&pattern_cmd->patterns[i].mask, +			wowlan->patterns[i].mask, mask_len); +		memcpy(&pattern_cmd->patterns[i].pattern, +			wowlan->patterns[i].pattern, +			wowlan->patterns[i].pattern_len); +		pattern_cmd->patterns[i].mask_size = mask_len; +		pattern_cmd->patterns[i].pattern_size = +			wowlan->patterns[i].pattern_len; +	} + +	cmd.data[0] = pattern_cmd; +	err = iwl_dvm_send_cmd(priv, &cmd); +	kfree(pattern_cmd); +	return err; +} + +int iwlagn_suspend(struct iwl_priv *priv, struct cfg80211_wowlan *wowlan) +{ +	struct iwlagn_wowlan_wakeup_filter_cmd wakeup_filter_cmd; +	struct iwl_rxon_cmd rxon; +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	struct iwlagn_wowlan_kek_kck_material_cmd kek_kck_cmd; +	struct iwlagn_wowlan_tkip_params_cmd tkip_cmd = {}; +	struct iwlagn_d3_config_cmd d3_cfg_cmd = { +		/* +		 * Program the minimum sleep time to 10 seconds, as many +		 * platforms have issues processing a wakeup signal while +		 * still being in the process of suspending. +		 */ +		.min_sleep_time = cpu_to_le32(10 * 1000 * 1000), +	}; +	struct wowlan_key_data key_data = { +		.ctx = ctx, +		.bssid = ctx->active.bssid_addr, +		.use_rsc_tsc = false, +		.tkip = &tkip_cmd, +		.use_tkip = false, +	}; +	int ret, i; +	u16 seq; + +	key_data.rsc_tsc = kzalloc(sizeof(*key_data.rsc_tsc), GFP_KERNEL); +	if (!key_data.rsc_tsc) +		return -ENOMEM; + +	memset(&wakeup_filter_cmd, 0, sizeof(wakeup_filter_cmd)); + +	/* +	 * We know the last used seqno, and the uCode expects to know that +	 * one, it will increment before TX. +	 */ +	seq = le16_to_cpu(priv->last_seq_ctl) & IEEE80211_SCTL_SEQ; +	wakeup_filter_cmd.non_qos_seq = cpu_to_le16(seq); + +	/* +	 * For QoS counters, we store the one to use next, so subtract 0x10 +	 * since the uCode will add 0x10 before using the value. +	 */ +	for (i = 0; i < IWL_MAX_TID_COUNT; i++) { +		seq = priv->tid_data[IWL_AP_ID][i].seq_number; +		seq -= 0x10; +		wakeup_filter_cmd.qos_seq[i] = cpu_to_le16(seq); +	} + +	if (wowlan->disconnect) +		wakeup_filter_cmd.enabled |= +			cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_BEACON_MISS | +				    IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE); +	if (wowlan->magic_pkt) +		wakeup_filter_cmd.enabled |= +			cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET); +	if (wowlan->gtk_rekey_failure) +		wakeup_filter_cmd.enabled |= +			cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL); +	if (wowlan->eap_identity_req) +		wakeup_filter_cmd.enabled |= +			cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ); +	if (wowlan->four_way_handshake) +		wakeup_filter_cmd.enabled |= +			cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE); +	if (wowlan->n_patterns) +		wakeup_filter_cmd.enabled |= +			cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH); + +	if (wowlan->rfkill_release) +		d3_cfg_cmd.wakeup_flags |= +			cpu_to_le32(IWLAGN_D3_WAKEUP_RFKILL); + +	iwl_scan_cancel_timeout(priv, 200); + +	memcpy(&rxon, &ctx->active, sizeof(rxon)); + +	priv->ucode_loaded = false; +	iwl_trans_stop_device(priv->trans); + +	priv->wowlan = true; + +	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_WOWLAN); +	if (ret) +		goto out; + +	/* now configure WoWLAN ucode */ +	ret = iwl_alive_start(priv); +	if (ret) +		goto out; + +	memcpy(&ctx->staging, &rxon, sizeof(rxon)); +	ret = iwlagn_commit_rxon(priv, ctx); +	if (ret) +		goto out; + +	ret = iwl_power_update_mode(priv, true); +	if (ret) +		goto out; + +	if (!iwlwifi_mod_params.sw_crypto) { +		/* mark all keys clear */ +		priv->ucode_key_table = 0; +		ctx->key_mapping_keys = 0; + +		/* +		 * This needs to be unlocked due to lock ordering +		 * constraints. Since we're in the suspend path +		 * that isn't really a problem though. +		 */ +		mutex_unlock(&priv->mutex); +		ieee80211_iter_keys(priv->hw, ctx->vif, +				    iwlagn_wowlan_program_keys, +				    &key_data); +		mutex_lock(&priv->mutex); +		if (key_data.error) { +			ret = -EIO; +			goto out; +		} + +		if (key_data.use_rsc_tsc) { +			struct iwl_host_cmd rsc_tsc_cmd = { +				.id = REPLY_WOWLAN_TSC_RSC_PARAMS, +				.data[0] = key_data.rsc_tsc, +				.dataflags[0] = IWL_HCMD_DFL_NOCOPY, +				.len[0] = sizeof(*key_data.rsc_tsc), +			}; + +			ret = iwl_dvm_send_cmd(priv, &rsc_tsc_cmd); +			if (ret) +				goto out; +		} + +		if (key_data.use_tkip) { +			ret = iwl_dvm_send_cmd_pdu(priv, +						 REPLY_WOWLAN_TKIP_PARAMS, +						 0, sizeof(tkip_cmd), +						 &tkip_cmd); +			if (ret) +				goto out; +		} + +		if (priv->have_rekey_data) { +			memset(&kek_kck_cmd, 0, sizeof(kek_kck_cmd)); +			memcpy(kek_kck_cmd.kck, priv->kck, NL80211_KCK_LEN); +			kek_kck_cmd.kck_len = cpu_to_le16(NL80211_KCK_LEN); +			memcpy(kek_kck_cmd.kek, priv->kek, NL80211_KEK_LEN); +			kek_kck_cmd.kek_len = cpu_to_le16(NL80211_KEK_LEN); +			kek_kck_cmd.replay_ctr = priv->replay_ctr; + +			ret = iwl_dvm_send_cmd_pdu(priv, +						 REPLY_WOWLAN_KEK_KCK_MATERIAL, +						 0, sizeof(kek_kck_cmd), +						 &kek_kck_cmd); +			if (ret) +				goto out; +		} +	} + +	ret = iwl_dvm_send_cmd_pdu(priv, REPLY_D3_CONFIG, 0, +				     sizeof(d3_cfg_cmd), &d3_cfg_cmd); +	if (ret) +		goto out; + +	ret = iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_WAKEUP_FILTER, +				 0, sizeof(wakeup_filter_cmd), +				 &wakeup_filter_cmd); +	if (ret) +		goto out; + +	ret = iwlagn_send_patterns(priv, wowlan); + out: +	kfree(key_data.rsc_tsc); +	return ret; +} +#endif + +int iwl_dvm_send_cmd(struct iwl_priv *priv, struct iwl_host_cmd *cmd) +{ +	if (iwl_is_rfkill(priv) || iwl_is_ctkill(priv)) { +		IWL_WARN(priv, "Not sending command - %s KILL\n", +			 iwl_is_rfkill(priv) ? "RF" : "CT"); +		return -EIO; +	} + +	if (test_bit(STATUS_FW_ERROR, &priv->status)) { +		IWL_ERR(priv, "Command %s failed: FW Error\n", +			iwl_dvm_get_cmd_string(cmd->id)); +		return -EIO; +	} + +	/* +	 * This can happen upon FW ASSERT: we clear the STATUS_FW_ERROR flag +	 * in iwl_down but cancel the workers only later. +	 */ +	if (!priv->ucode_loaded) { +		IWL_ERR(priv, "Fw not loaded - dropping CMD: %x\n", cmd->id); +		return -EIO; +	} + +	/* +	 * Synchronous commands from this op-mode must hold +	 * the mutex, this ensures we don't try to send two +	 * (or more) synchronous commands at a time. +	 */ +	if (!(cmd->flags & CMD_ASYNC)) +		lockdep_assert_held(&priv->mutex); + +	return iwl_trans_send_cmd(priv->trans, cmd); +} + +int iwl_dvm_send_cmd_pdu(struct iwl_priv *priv, u8 id, +			 u32 flags, u16 len, const void *data) +{ +	struct iwl_host_cmd cmd = { +		.id = id, +		.len = { len, }, +		.data = { data, }, +		.flags = flags, +	}; + +	return iwl_dvm_send_cmd(priv, &cmd); +} diff --git a/drivers/net/wireless/iwlwifi/dvm/mac80211.c b/drivers/net/wireless/iwlwifi/dvm/mac80211.c new file mode 100644 index 00000000000..29af7b51e37 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/mac80211.c @@ -0,0 +1,1636 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portions of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/slab.h> +#include <linux/dma-mapping.h> +#include <linux/delay.h> +#include <linux/sched.h> +#include <linux/skbuff.h> +#include <linux/netdevice.h> +#include <linux/etherdevice.h> +#include <linux/if_arp.h> + +#include <net/ieee80211_radiotap.h> +#include <net/mac80211.h> + +#include <asm/div64.h> + +#include "iwl-io.h" +#include "iwl-trans.h" +#include "iwl-op-mode.h" +#include "iwl-modparams.h" + +#include "dev.h" +#include "calib.h" +#include "agn.h" + +/***************************************************************************** + * + * mac80211 entry point functions + * + *****************************************************************************/ + +static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = { +	{ +		.max = 1, +		.types = BIT(NL80211_IFTYPE_STATION), +	}, +	{ +		.max = 1, +		.types = BIT(NL80211_IFTYPE_AP), +	}, +}; + +static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = { +	{ +		.max = 2, +		.types = BIT(NL80211_IFTYPE_STATION), +	}, +}; + +static const struct ieee80211_iface_combination +iwlagn_iface_combinations_dualmode[] = { +	{ .num_different_channels = 1, +	  .max_interfaces = 2, +	  .beacon_int_infra_match = true, +	  .limits = iwlagn_sta_ap_limits, +	  .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits), +	}, +	{ .num_different_channels = 1, +	  .max_interfaces = 2, +	  .limits = iwlagn_2sta_limits, +	  .n_limits = ARRAY_SIZE(iwlagn_2sta_limits), +	}, +}; + +/* + * Not a mac80211 entry point function, but it fits in with all the + * other mac80211 functions grouped here. + */ +int iwlagn_mac_setup_register(struct iwl_priv *priv, +			      const struct iwl_ucode_capabilities *capa) +{ +	int ret; +	struct ieee80211_hw *hw = priv->hw; +	struct iwl_rxon_context *ctx; + +	hw->rate_control_algorithm = "iwl-agn-rs"; + +	/* Tell mac80211 our characteristics */ +	hw->flags = IEEE80211_HW_SIGNAL_DBM | +		    IEEE80211_HW_AMPDU_AGGREGATION | +		    IEEE80211_HW_NEED_DTIM_BEFORE_ASSOC | +		    IEEE80211_HW_SPECTRUM_MGMT | +		    IEEE80211_HW_REPORTS_TX_ACK_STATUS | +		    IEEE80211_HW_QUEUE_CONTROL | +		    IEEE80211_HW_SUPPORTS_PS | +		    IEEE80211_HW_SUPPORTS_DYNAMIC_PS | +		    IEEE80211_HW_WANT_MONITOR_VIF; + +	hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE; +	hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT; + +	/* +	 * Including the following line will crash some AP's.  This +	 * workaround removes the stimulus which causes the crash until +	 * the AP software can be fixed. +	hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF; +	 */ + +	if (priv->nvm_data->sku_cap_11n_enable) +		hw->flags |= IEEE80211_HW_SUPPORTS_DYNAMIC_SMPS | +			     IEEE80211_HW_SUPPORTS_STATIC_SMPS; + +	/* +	 * Enable 11w if advertised by firmware and software crypto +	 * is not enabled (as the firmware will interpret some mgmt +	 * packets, so enabling it with software crypto isn't safe) +	 */ +	if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP && +	    !iwlwifi_mod_params.sw_crypto) +		hw->flags |= IEEE80211_HW_MFP_CAPABLE; + +	hw->sta_data_size = sizeof(struct iwl_station_priv); +	hw->vif_data_size = sizeof(struct iwl_vif_priv); + +	for_each_context(priv, ctx) { +		hw->wiphy->interface_modes |= ctx->interface_modes; +		hw->wiphy->interface_modes |= ctx->exclusive_interface_modes; +	} + +	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2); + +	if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) { +		hw->wiphy->iface_combinations = +			iwlagn_iface_combinations_dualmode; +		hw->wiphy->n_iface_combinations = +			ARRAY_SIZE(iwlagn_iface_combinations_dualmode); +	} + +	hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN; +	hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG | +				       REGULATORY_DISABLE_BEACON_HINTS; + +#ifdef CONFIG_PM_SLEEP +	if (priv->fw->img[IWL_UCODE_WOWLAN].sec[0].len && +	    priv->trans->ops->d3_suspend && +	    priv->trans->ops->d3_resume && +	    device_can_wakeup(priv->trans->dev)) { +		priv->wowlan_support.flags = WIPHY_WOWLAN_MAGIC_PKT | +					     WIPHY_WOWLAN_DISCONNECT | +					     WIPHY_WOWLAN_EAP_IDENTITY_REQ | +					     WIPHY_WOWLAN_RFKILL_RELEASE; +		if (!iwlwifi_mod_params.sw_crypto) +			priv->wowlan_support.flags |= +				WIPHY_WOWLAN_SUPPORTS_GTK_REKEY | +				WIPHY_WOWLAN_GTK_REKEY_FAILURE; + +		priv->wowlan_support.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS; +		priv->wowlan_support.pattern_min_len = +					IWLAGN_WOWLAN_MIN_PATTERN_LEN; +		priv->wowlan_support.pattern_max_len = +					IWLAGN_WOWLAN_MAX_PATTERN_LEN; +		hw->wiphy->wowlan = &priv->wowlan_support; +	} +#endif + +	if (iwlwifi_mod_params.power_save) +		hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT; +	else +		hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT; + +	hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX; +	/* we create the 802.11 header and a max-length SSID element */ +	hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34; + +	/* +	 * We don't use all queues: 4 and 9 are unused and any +	 * aggregation queue gets mapped down to the AC queue. +	 */ +	hw->queues = IWLAGN_FIRST_AMPDU_QUEUE; + +	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL; + +	if (priv->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels) +		priv->hw->wiphy->bands[IEEE80211_BAND_2GHZ] = +			&priv->nvm_data->bands[IEEE80211_BAND_2GHZ]; +	if (priv->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels) +		priv->hw->wiphy->bands[IEEE80211_BAND_5GHZ] = +			&priv->nvm_data->bands[IEEE80211_BAND_5GHZ]; + +	hw->wiphy->hw_version = priv->trans->hw_id; + +	iwl_leds_init(priv); + +	ret = ieee80211_register_hw(priv->hw); +	if (ret) { +		IWL_ERR(priv, "Failed to register hw (error %d)\n", ret); +		iwl_leds_exit(priv); +		return ret; +	} +	priv->mac80211_registered = 1; + +	return 0; +} + +void iwlagn_mac_unregister(struct iwl_priv *priv) +{ +	if (!priv->mac80211_registered) +		return; +	iwl_leds_exit(priv); +	ieee80211_unregister_hw(priv->hw); +	priv->mac80211_registered = 0; +} + +static int __iwl_up(struct iwl_priv *priv) +{ +	struct iwl_rxon_context *ctx; +	int ret; + +	lockdep_assert_held(&priv->mutex); + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) { +		IWL_WARN(priv, "Exit pending; will not bring the NIC up\n"); +		return -EIO; +	} + +	for_each_context(priv, ctx) { +		ret = iwlagn_alloc_bcast_station(priv, ctx); +		if (ret) { +			iwl_dealloc_bcast_stations(priv); +			return ret; +		} +	} + +	ret = iwl_run_init_ucode(priv); +	if (ret) { +		IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret); +		goto error; +	} + +	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR); +	if (ret) { +		IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret); +		goto error; +	} + +	ret = iwl_alive_start(priv); +	if (ret) +		goto error; +	return 0; + + error: +	set_bit(STATUS_EXIT_PENDING, &priv->status); +	iwl_down(priv); +	clear_bit(STATUS_EXIT_PENDING, &priv->status); + +	IWL_ERR(priv, "Unable to initialize device.\n"); +	return ret; +} + +static int iwlagn_mac_start(struct ieee80211_hw *hw) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	int ret; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	/* we should be verifying the device is ready to be opened */ +	mutex_lock(&priv->mutex); +	ret = __iwl_up(priv); +	mutex_unlock(&priv->mutex); +	if (ret) +		return ret; + +	IWL_DEBUG_INFO(priv, "Start UP work done.\n"); + +	/* Now we should be done, and the READY bit should be set. */ +	if (WARN_ON(!test_bit(STATUS_READY, &priv->status))) +		ret = -EIO; + +	iwlagn_led_enable(priv); + +	priv->is_open = 1; +	IWL_DEBUG_MAC80211(priv, "leave\n"); +	return 0; +} + +static void iwlagn_mac_stop(struct ieee80211_hw *hw) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	if (!priv->is_open) +		return; + +	priv->is_open = 0; + +	mutex_lock(&priv->mutex); +	iwl_down(priv); +	mutex_unlock(&priv->mutex); + +	iwl_cancel_deferred_work(priv); + +	flush_workqueue(priv->workqueue); + +	IWL_DEBUG_MAC80211(priv, "leave\n"); +} + +static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw, +				      struct ieee80211_vif *vif, +				      struct cfg80211_gtk_rekey_data *data) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	if (iwlwifi_mod_params.sw_crypto) +		return; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); +	mutex_lock(&priv->mutex); + +	if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif) +		goto out; + +	memcpy(priv->kek, data->kek, NL80211_KEK_LEN); +	memcpy(priv->kck, data->kck, NL80211_KCK_LEN); +	priv->replay_ctr = +		cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr)); +	priv->have_rekey_data = true; + + out: +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); +} + +#ifdef CONFIG_PM_SLEEP + +static int iwlagn_mac_suspend(struct ieee80211_hw *hw, +			      struct cfg80211_wowlan *wowlan) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	int ret; + +	if (WARN_ON(!wowlan)) +		return -EINVAL; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); +	mutex_lock(&priv->mutex); + +	/* Don't attempt WoWLAN when not associated, tear down instead. */ +	if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION || +	    !iwl_is_associated_ctx(ctx)) { +		ret = 1; +		goto out; +	} + +	ret = iwlagn_suspend(priv, wowlan); +	if (ret) +		goto error; + +	/* let the ucode operate on its own */ +	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET, +		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE); + +	iwl_trans_d3_suspend(priv->trans, false); + +	goto out; + + error: +	priv->wowlan = false; +	iwlagn_prepare_restart(priv); +	ieee80211_restart_hw(priv->hw); + out: +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +	return ret; +} + +struct iwl_resume_data { +	struct iwl_priv *priv; +	struct iwlagn_wowlan_status *cmd; +	bool valid; +}; + +static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait, +				 struct iwl_rx_packet *pkt, void *data) +{ +	struct iwl_resume_data *resume_data = data; +	struct iwl_priv *priv = resume_data->priv; + +	if (iwl_rx_packet_payload_len(pkt) != sizeof(*resume_data->cmd)) { +		IWL_ERR(priv, "rx wrong size data\n"); +		return true; +	} +	memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd)); +	resume_data->valid = true; + +	return true; +} + +static int iwlagn_mac_resume(struct ieee80211_hw *hw) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	struct ieee80211_vif *vif; +	u32 base; +	int ret; +	enum iwl_d3_status d3_status; +	struct error_table_start { +		/* cf. struct iwl_error_event_table */ +		u32 valid; +		u32 error_id; +	} err_info; +	struct iwl_notification_wait status_wait; +	static const u8 status_cmd[] = { +		REPLY_WOWLAN_GET_STATUS, +	}; +	struct iwlagn_wowlan_status status_data = {}; +	struct iwl_resume_data resume_data = { +		.priv = priv, +		.cmd = &status_data, +		.valid = false, +	}; +	struct cfg80211_wowlan_wakeup wakeup = { +		.pattern_idx = -1, +	}; +#ifdef CONFIG_IWLWIFI_DEBUGFS +	const struct fw_img *img; +#endif + +	IWL_DEBUG_MAC80211(priv, "enter\n"); +	mutex_lock(&priv->mutex); + +	/* we'll clear ctx->vif during iwlagn_prepare_restart() */ +	vif = ctx->vif; + +	ret = iwl_trans_d3_resume(priv->trans, &d3_status, false); +	if (ret) +		goto out_unlock; + +	if (d3_status != IWL_D3_STATUS_ALIVE) { +		IWL_INFO(priv, "Device was reset during suspend\n"); +		goto out_unlock; +	} + +	/* uCode is no longer operating by itself */ +	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR, +		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE); + +	base = priv->device_pointers.error_event_table; +	if (!iwlagn_hw_valid_rtc_data_addr(base)) { +		IWL_WARN(priv, "Invalid error table during resume!\n"); +		goto out_unlock; +	} + +	iwl_trans_read_mem_bytes(priv->trans, base, +				 &err_info, sizeof(err_info)); + +	if (err_info.valid) { +		IWL_INFO(priv, "error table is valid (%d, 0x%x)\n", +			 err_info.valid, err_info.error_id); +		if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) { +			wakeup.rfkill_release = true; +			ieee80211_report_wowlan_wakeup(vif, &wakeup, +						       GFP_KERNEL); +		} +		goto out_unlock; +	} + +#ifdef CONFIG_IWLWIFI_DEBUGFS +	img = &priv->fw->img[IWL_UCODE_WOWLAN]; +	if (!priv->wowlan_sram) +		priv->wowlan_sram = +			kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len, +				GFP_KERNEL); + +	if (priv->wowlan_sram) +		iwl_trans_read_mem(priv->trans, 0x800000, +				   priv->wowlan_sram, +				   img->sec[IWL_UCODE_SECTION_DATA].len / 4); +#endif + +	/* +	 * This is very strange. The GET_STATUS command is sent but the device +	 * doesn't reply properly, it seems it doesn't close the RBD so one is +	 * always left open ... As a result, we need to send another command +	 * and have to reset the driver afterwards. As we need to switch to +	 * runtime firmware again that'll happen. +	 */ + +	iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd, +				   ARRAY_SIZE(status_cmd), iwl_resume_status_fn, +				   &resume_data); + +	iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL); +	iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL); +	/* an RBD is left open in the firmware now! */ + +	ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5); +	if (ret) +		goto out_unlock; + +	if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) { +		u32 reasons = le32_to_cpu(status_data.wakeup_reason); +		struct cfg80211_wowlan_wakeup *wakeup_report; + +		IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons); + +		if (reasons) { +			if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET) +				wakeup.magic_pkt = true; +			if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH) +				wakeup.pattern_idx = status_data.pattern_number; +			if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS | +				       IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE)) +				wakeup.disconnect = true; +			if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL) +				wakeup.gtk_rekey_failure = true; +			if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ) +				wakeup.eap_identity_req = true; +			if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE) +				wakeup.four_way_handshake = true; +			wakeup_report = &wakeup; +		} else { +			wakeup_report = NULL; +		} + +		ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL); +	} + +	priv->wowlan = false; + +	iwlagn_prepare_restart(priv); + +	memset((void *)&ctx->active, 0, sizeof(ctx->active)); +	iwl_connection_init_rx_config(priv, ctx); +	iwlagn_set_rxon_chain(priv, ctx); + + out_unlock: +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +	ieee80211_resume_disconnect(vif); + +	return 1; +} + +static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	device_set_wakeup_enable(priv->trans->dev, enabled); +} +#endif + +static void iwlagn_mac_tx(struct ieee80211_hw *hw, +			  struct ieee80211_tx_control *control, +			  struct sk_buff *skb) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	if (iwlagn_tx_skb(priv, control->sta, skb)) +		ieee80211_free_txskb(hw, skb); +} + +static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw, +				       struct ieee80211_vif *vif, +				       struct ieee80211_key_conf *keyconf, +				       struct ieee80211_sta *sta, +				       u32 iv32, u16 *phase1key) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key); +} + +static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd, +			      struct ieee80211_vif *vif, +			      struct ieee80211_sta *sta, +			      struct ieee80211_key_conf *key) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; +	struct iwl_rxon_context *ctx = vif_priv->ctx; +	int ret; +	bool is_default_wep_key = false; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	if (iwlwifi_mod_params.sw_crypto) { +		IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n"); +		return -EOPNOTSUPP; +	} + +	switch (key->cipher) { +	case WLAN_CIPHER_SUITE_TKIP: +		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC; +		/* fall through */ +	case WLAN_CIPHER_SUITE_CCMP: +		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV; +		break; +	default: +		break; +	} + +	/* +	 * We could program these keys into the hardware as well, but we +	 * don't expect much multicast traffic in IBSS and having keys +	 * for more stations is probably more useful. +	 * +	 * Mark key TX-only and return 0. +	 */ +	if (vif->type == NL80211_IFTYPE_ADHOC && +	    !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) { +		key->hw_key_idx = WEP_INVALID_OFFSET; +		return 0; +	} + +	/* If they key was TX-only, accept deletion */ +	if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET) +		return 0; + +	mutex_lock(&priv->mutex); +	iwl_scan_cancel_timeout(priv, 100); + +	BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT); + +	/* +	 * If we are getting WEP group key and we didn't receive any key mapping +	 * so far, we are in legacy wep mode (group key only), otherwise we are +	 * in 1X mode. +	 * In legacy wep mode, we use another host command to the uCode. +	 */ +	if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 || +	     key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) { +		if (cmd == SET_KEY) +			is_default_wep_key = !ctx->key_mapping_keys; +		else +			is_default_wep_key = +				key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT; +	} + + +	switch (cmd) { +	case SET_KEY: +		if (is_default_wep_key) { +			ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key); +			break; +		} +		ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta); +		if (ret) { +			/* +			 * can't add key for RX, but we don't need it +			 * in the device for TX so still return 0 +			 */ +			ret = 0; +			key->hw_key_idx = WEP_INVALID_OFFSET; +		} + +		IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n"); +		break; +	case DISABLE_KEY: +		if (is_default_wep_key) +			ret = iwl_remove_default_wep_key(priv, ctx, key); +		else +			ret = iwl_remove_dynamic_key(priv, ctx, key, sta); + +		IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n"); +		break; +	default: +		ret = -EINVAL; +	} + +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +	return ret; +} + +static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg) +{ +	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG) +		return false; +	return true; +} + +static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg) +{ +	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG) +		return false; +	if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG) +		return true; + +	/* disabled by default */ +	return false; +} + +static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw, +				   struct ieee80211_vif *vif, +				   enum ieee80211_ampdu_mlme_action action, +				   struct ieee80211_sta *sta, u16 tid, u16 *ssn, +				   u8 buf_size) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	int ret = -EINVAL; +	struct iwl_station_priv *sta_priv = (void *) sta->drv_priv; + +	IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n", +		     sta->addr, tid); + +	if (!(priv->nvm_data->sku_cap_11n_enable)) +		return -EACCES; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); +	mutex_lock(&priv->mutex); + +	switch (action) { +	case IEEE80211_AMPDU_RX_START: +		if (!iwl_enable_rx_ampdu(priv->cfg)) +			break; +		IWL_DEBUG_HT(priv, "start Rx\n"); +		ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn); +		break; +	case IEEE80211_AMPDU_RX_STOP: +		IWL_DEBUG_HT(priv, "stop Rx\n"); +		ret = iwl_sta_rx_agg_stop(priv, sta, tid); +		break; +	case IEEE80211_AMPDU_TX_START: +		if (!priv->trans->ops->txq_enable) +			break; +		if (!iwl_enable_tx_ampdu(priv->cfg)) +			break; +		IWL_DEBUG_HT(priv, "start Tx\n"); +		ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn); +		break; +	case IEEE80211_AMPDU_TX_STOP_FLUSH: +	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT: +		IWL_DEBUG_HT(priv, "Flush Tx\n"); +		ret = iwlagn_tx_agg_flush(priv, vif, sta, tid); +		break; +	case IEEE80211_AMPDU_TX_STOP_CONT: +		IWL_DEBUG_HT(priv, "stop Tx\n"); +		ret = iwlagn_tx_agg_stop(priv, vif, sta, tid); +		if ((ret == 0) && (priv->agg_tids_count > 0)) { +			priv->agg_tids_count--; +			IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n", +				     priv->agg_tids_count); +		} +		if (!priv->agg_tids_count && +		    priv->hw_params.use_rts_for_aggregation) { +			/* +			 * switch off RTS/CTS if it was previously enabled +			 */ +			sta_priv->lq_sta.lq.general_params.flags &= +				~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK; +			iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif), +					&sta_priv->lq_sta.lq, CMD_ASYNC, false); +		} +		break; +	case IEEE80211_AMPDU_TX_OPERATIONAL: +		ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size); +		break; +	} +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); +	return ret; +} + +static int iwlagn_mac_sta_add(struct ieee80211_hw *hw, +			      struct ieee80211_vif *vif, +			      struct ieee80211_sta *sta) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; +	bool is_ap = vif->type == NL80211_IFTYPE_STATION; +	int ret; +	u8 sta_id; + +	IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n", +			sta->addr); +	sta_priv->sta_id = IWL_INVALID_STATION; + +	atomic_set(&sta_priv->pending_frames, 0); +	if (vif->type == NL80211_IFTYPE_AP) +		sta_priv->client = true; + +	ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr, +				     is_ap, sta, &sta_id); +	if (ret) { +		IWL_ERR(priv, "Unable to add station %pM (%d)\n", +			sta->addr, ret); +		/* Should we return success if return code is EEXIST ? */ +		return ret; +	} + +	sta_priv->sta_id = sta_id; + +	return 0; +} + +static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw, +				 struct ieee80211_vif *vif, +				 struct ieee80211_sta *sta) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	int ret; + +	IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr); + +	if (vif->type == NL80211_IFTYPE_STATION) { +		/* +		 * Station will be removed from device when the RXON +		 * is set to unassociated -- just deactivate it here +		 * to avoid re-programming it. +		 */ +		ret = 0; +		iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr); +	} else { +		ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr); +		if (ret) +			IWL_DEBUG_QUIET_RFKILL(priv, +				"Error removing station %pM\n", sta->addr); +	} +	return ret; +} + +static int iwlagn_mac_sta_state(struct ieee80211_hw *hw, +				struct ieee80211_vif *vif, +				struct ieee80211_sta *sta, +				enum ieee80211_sta_state old_state, +				enum ieee80211_sta_state new_state) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; +	enum { +		NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT, +	} op = NONE; +	int ret; + +	IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n", +			   sta->addr, old_state, new_state); + +	mutex_lock(&priv->mutex); +	if (vif->type == NL80211_IFTYPE_STATION) { +		if (old_state == IEEE80211_STA_NOTEXIST && +		    new_state == IEEE80211_STA_NONE) +			op = ADD; +		else if (old_state == IEEE80211_STA_NONE && +			 new_state == IEEE80211_STA_NOTEXIST) +			op = REMOVE; +		else if (old_state == IEEE80211_STA_AUTH && +			 new_state == IEEE80211_STA_ASSOC) +			op = HT_RATE_INIT; +	} else { +		if (old_state == IEEE80211_STA_AUTH && +		    new_state == IEEE80211_STA_ASSOC) +			op = ADD_RATE_INIT; +		else if (old_state == IEEE80211_STA_ASSOC && +			 new_state == IEEE80211_STA_AUTH) +			op = REMOVE; +	} + +	switch (op) { +	case ADD: +		ret = iwlagn_mac_sta_add(hw, vif, sta); +		if (ret) +			break; +		/* +		 * Clear the in-progress flag, the AP station entry was added +		 * but we'll initialize LQ only when we've associated (which +		 * would also clear the in-progress flag). This is necessary +		 * in case we never initialize LQ because association fails. +		 */ +		spin_lock_bh(&priv->sta_lock); +		priv->stations[iwl_sta_id(sta)].used &= +			~IWL_STA_UCODE_INPROGRESS; +		spin_unlock_bh(&priv->sta_lock); +		break; +	case REMOVE: +		ret = iwlagn_mac_sta_remove(hw, vif, sta); +		break; +	case ADD_RATE_INIT: +		ret = iwlagn_mac_sta_add(hw, vif, sta); +		if (ret) +			break; +		/* Initialize rate scaling */ +		IWL_DEBUG_INFO(priv, +			       "Initializing rate scaling for station %pM\n", +			       sta->addr); +		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta)); +		ret = 0; +		break; +	case HT_RATE_INIT: +		/* Initialize rate scaling */ +		ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta); +		if (ret) +			break; +		IWL_DEBUG_INFO(priv, +			       "Initializing rate scaling for station %pM\n", +			       sta->addr); +		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta)); +		ret = 0; +		break; +	default: +		ret = 0; +		break; +	} + +	/* +	 * mac80211 might WARN if we fail, but due the way we +	 * (badly) handle hard rfkill, we might fail here +	 */ +	if (iwl_is_rfkill(priv)) +		ret = 0; + +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +	return ret; +} + +static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw, +				      struct ieee80211_channel_switch *ch_switch) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct ieee80211_conf *conf = &hw->conf; +	struct ieee80211_channel *channel = ch_switch->chandef.chan; +	struct iwl_ht_config *ht_conf = &priv->current_ht_config; +	/* +	 * MULTI-FIXME +	 * When we add support for multiple interfaces, we need to +	 * revisit this. The channel switch command in the device +	 * only affects the BSS context, but what does that really +	 * mean? And what if we get a CSA on the second interface? +	 * This needs a lot of work. +	 */ +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	u16 ch; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	mutex_lock(&priv->mutex); + +	if (iwl_is_rfkill(priv)) +		goto out; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status) || +	    test_bit(STATUS_SCANNING, &priv->status) || +	    test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status)) +		goto out; + +	if (!iwl_is_associated_ctx(ctx)) +		goto out; + +	if (!priv->lib->set_channel_switch) +		goto out; + +	ch = channel->hw_value; +	if (le16_to_cpu(ctx->active.channel) == ch) +		goto out; + +	priv->current_ht_config.smps = conf->smps_mode; + +	/* Configure HT40 channels */ +	switch (cfg80211_get_chandef_type(&ch_switch->chandef)) { +	case NL80211_CHAN_NO_HT: +	case NL80211_CHAN_HT20: +		ctx->ht.is_40mhz = false; +		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE; +		break; +	case NL80211_CHAN_HT40MINUS: +		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW; +		ctx->ht.is_40mhz = true; +		break; +	case NL80211_CHAN_HT40PLUS: +		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; +		ctx->ht.is_40mhz = true; +		break; +	} + +	if ((le16_to_cpu(ctx->staging.channel) != ch)) +		ctx->staging.flags = 0; + +	iwl_set_rxon_channel(priv, channel, ctx); +	iwl_set_rxon_ht(priv, ht_conf); +	iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif); + +	/* +	 * at this point, staging_rxon has the +	 * configuration for channel switch +	 */ +	set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status); +	priv->switch_channel = cpu_to_le16(ch); +	if (priv->lib->set_channel_switch(priv, ch_switch)) { +		clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status); +		priv->switch_channel = 0; +		ieee80211_chswitch_done(ctx->vif, false); +	} + +out: +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); +} + +void iwl_chswitch_done(struct iwl_priv *priv, bool is_success) +{ +	/* +	 * MULTI-FIXME +	 * See iwlagn_mac_channel_switch. +	 */ +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	if (!test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status)) +		return; + +	if (ctx->vif) +		ieee80211_chswitch_done(ctx->vif, is_success); +} + +static void iwlagn_configure_filter(struct ieee80211_hw *hw, +				    unsigned int changed_flags, +				    unsigned int *total_flags, +				    u64 multicast) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	__le32 filter_or = 0, filter_nand = 0; +	struct iwl_rxon_context *ctx; + +#define CHK(test, flag)	do { \ +	if (*total_flags & (test))		\ +		filter_or |= (flag);		\ +	else					\ +		filter_nand |= (flag);		\ +	} while (0) + +	IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n", +			changed_flags, *total_flags); + +	CHK(FIF_OTHER_BSS | FIF_PROMISC_IN_BSS, RXON_FILTER_PROMISC_MSK); +	/* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */ +	CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK); +	CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK); + +#undef CHK + +	mutex_lock(&priv->mutex); + +	for_each_context(priv, ctx) { +		ctx->staging.filter_flags &= ~filter_nand; +		ctx->staging.filter_flags |= filter_or; + +		/* +		 * Not committing directly because hardware can perform a scan, +		 * but we'll eventually commit the filter flags change anyway. +		 */ +	} + +	mutex_unlock(&priv->mutex); + +	/* +	 * Receiving all multicast frames is always enabled by the +	 * default flags setup in iwl_connection_init_rx_config() +	 * since we currently do not support programming multicast +	 * filters into the device. +	 */ +	*total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI | FIF_PROMISC_IN_BSS | +			FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL; +} + +static void iwlagn_mac_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif, +			     u32 queues, bool drop) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	mutex_lock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) { +		IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n"); +		goto done; +	} +	if (iwl_is_rfkill(priv)) { +		IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n"); +		goto done; +	} + +	/* +	 * mac80211 will not push any more frames for transmit +	 * until the flush is completed +	 */ +	if (drop) { +		IWL_DEBUG_MAC80211(priv, "send flush command\n"); +		if (iwlagn_txfifo_flush(priv, 0)) { +			IWL_ERR(priv, "flush request fail\n"); +			goto done; +		} +	} +	IWL_DEBUG_MAC80211(priv, "wait transmit/flush all frames\n"); +	iwl_trans_wait_tx_queue_empty(priv->trans, 0xffffffff); +done: +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); +} + +static void iwlagn_mac_rssi_callback(struct ieee80211_hw *hw, +				     struct ieee80211_vif *vif, +				     enum ieee80211_rssi_event rssi_event) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	IWL_DEBUG_MAC80211(priv, "enter\n"); +	mutex_lock(&priv->mutex); + +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist) { +		if (rssi_event == RSSI_EVENT_LOW) +			priv->bt_enable_pspoll = true; +		else if (rssi_event == RSSI_EVENT_HIGH) +			priv->bt_enable_pspoll = false; + +		iwlagn_send_advance_bt_config(priv); +	} else { +		IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled," +				"ignoring RSSI callback\n"); +	} + +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); +} + +static int iwlagn_mac_set_tim(struct ieee80211_hw *hw, +			      struct ieee80211_sta *sta, bool set) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	queue_work(priv->workqueue, &priv->beacon_update); + +	return 0; +} + +static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw, +			      struct ieee80211_vif *vif, u16 queue, +			      const struct ieee80211_tx_queue_params *params) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; +	struct iwl_rxon_context *ctx = vif_priv->ctx; +	int q; + +	if (WARN_ON(!ctx)) +		return -EINVAL; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	if (!iwl_is_ready_rf(priv)) { +		IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n"); +		return -EIO; +	} + +	if (queue >= AC_NUM) { +		IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue); +		return 0; +	} + +	q = AC_NUM - 1 - queue; + +	mutex_lock(&priv->mutex); + +	ctx->qos_data.def_qos_parm.ac[q].cw_min = +		cpu_to_le16(params->cw_min); +	ctx->qos_data.def_qos_parm.ac[q].cw_max = +		cpu_to_le16(params->cw_max); +	ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs; +	ctx->qos_data.def_qos_parm.ac[q].edca_txop = +			cpu_to_le16((params->txop * 32)); + +	ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0; + +	mutex_unlock(&priv->mutex); + +	IWL_DEBUG_MAC80211(priv, "leave\n"); +	return 0; +} + +static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); + +	return priv->ibss_manager == IWL_IBSS_MANAGER; +} + +static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx) +{ +	iwl_connection_init_rx_config(priv, ctx); + +	iwlagn_set_rxon_chain(priv, ctx); + +	return iwlagn_commit_rxon(priv, ctx); +} + +static int iwl_setup_interface(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx) +{ +	struct ieee80211_vif *vif = ctx->vif; +	int err, ac; + +	lockdep_assert_held(&priv->mutex); + +	/* +	 * This variable will be correct only when there's just +	 * a single context, but all code using it is for hardware +	 * that supports only one context. +	 */ +	priv->iw_mode = vif->type; + +	ctx->is_active = true; + +	err = iwl_set_mode(priv, ctx); +	if (err) { +		if (!ctx->always_active) +			ctx->is_active = false; +		return err; +	} + +	if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist && +	    vif->type == NL80211_IFTYPE_ADHOC) { +		/* +		 * pretend to have high BT traffic as long as we +		 * are operating in IBSS mode, as this will cause +		 * the rate scaling etc. to behave as intended. +		 */ +		priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH; +	} + +	/* set up queue mappings */ +	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) +		vif->hw_queue[ac] = ctx->ac_to_queue[ac]; + +	if (vif->type == NL80211_IFTYPE_AP) +		vif->cab_queue = ctx->mcast_queue; +	else +		vif->cab_queue = IEEE80211_INVAL_HW_QUEUE; + +	return 0; +} + +static int iwlagn_mac_add_interface(struct ieee80211_hw *hw, +				    struct ieee80211_vif *vif) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; +	struct iwl_rxon_context *tmp, *ctx = NULL; +	int err; +	enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif); +	bool reset = false; + +	IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n", +			   viftype, vif->addr); + +	mutex_lock(&priv->mutex); + +	if (!iwl_is_ready_rf(priv)) { +		IWL_WARN(priv, "Try to add interface when device not ready\n"); +		err = -EINVAL; +		goto out; +	} + +	for_each_context(priv, tmp) { +		u32 possible_modes = +			tmp->interface_modes | tmp->exclusive_interface_modes; + +		if (tmp->vif) { +			/* On reset we need to add the same interface again */ +			if (tmp->vif == vif) { +				reset = true; +				ctx = tmp; +				break; +			} + +			/* check if this busy context is exclusive */ +			if (tmp->exclusive_interface_modes & +						BIT(tmp->vif->type)) { +				err = -EINVAL; +				goto out; +			} +			continue; +		} + +		if (!(possible_modes & BIT(viftype))) +			continue; + +		/* have maybe usable context w/o interface */ +		ctx = tmp; +		break; +	} + +	if (!ctx) { +		err = -EOPNOTSUPP; +		goto out; +	} + +	vif_priv->ctx = ctx; +	ctx->vif = vif; + +	/* +	 * In SNIFFER device type, the firmware reports the FCS to +	 * the host, rather than snipping it off. Unfortunately, +	 * mac80211 doesn't (yet) provide a per-packet flag for +	 * this, so that we have to set the hardware flag based +	 * on the interfaces added. As the monitor interface can +	 * only be present by itself, and will be removed before +	 * other interfaces are added, this is safe. +	 */ +	if (vif->type == NL80211_IFTYPE_MONITOR) +		priv->hw->flags |= IEEE80211_HW_RX_INCLUDES_FCS; +	else +		priv->hw->flags &= ~IEEE80211_HW_RX_INCLUDES_FCS; + +	err = iwl_setup_interface(priv, ctx); +	if (!err || reset) +		goto out; + +	ctx->vif = NULL; +	priv->iw_mode = NL80211_IFTYPE_STATION; + out: +	mutex_unlock(&priv->mutex); + +	IWL_DEBUG_MAC80211(priv, "leave\n"); +	return err; +} + +static void iwl_teardown_interface(struct iwl_priv *priv, +				   struct ieee80211_vif *vif, +				   bool mode_change) +{ +	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif); + +	lockdep_assert_held(&priv->mutex); + +	if (priv->scan_vif == vif) { +		iwl_scan_cancel_timeout(priv, 200); +		iwl_force_scan_end(priv); +	} + +	if (!mode_change) { +		iwl_set_mode(priv, ctx); +		if (!ctx->always_active) +			ctx->is_active = false; +	} + +	/* +	 * When removing the IBSS interface, overwrite the +	 * BT traffic load with the stored one from the last +	 * notification, if any. If this is a device that +	 * doesn't implement this, this has no effect since +	 * both values are the same and zero. +	 */ +	if (vif->type == NL80211_IFTYPE_ADHOC) +		priv->bt_traffic_load = priv->last_bt_traffic_load; +} + +static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw, +			      struct ieee80211_vif *vif) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif); + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	mutex_lock(&priv->mutex); + +	if (WARN_ON(ctx->vif != vif)) { +		struct iwl_rxon_context *tmp; +		IWL_ERR(priv, "ctx->vif = %p, vif = %p\n", ctx->vif, vif); +		for_each_context(priv, tmp) +			IWL_ERR(priv, "\tID = %d:\tctx = %p\tctx->vif = %p\n", +				tmp->ctxid, tmp, tmp->vif); +	} +	ctx->vif = NULL; + +	iwl_teardown_interface(priv, vif, false); + +	mutex_unlock(&priv->mutex); + +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +} + +static int iwlagn_mac_change_interface(struct ieee80211_hw *hw, +				       struct ieee80211_vif *vif, +				       enum nl80211_iftype newtype, bool newp2p) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_rxon_context *ctx, *tmp; +	enum nl80211_iftype newviftype = newtype; +	u32 interface_modes; +	int err; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	newtype = ieee80211_iftype_p2p(newtype, newp2p); + +	mutex_lock(&priv->mutex); + +	ctx = iwl_rxon_ctx_from_vif(vif); + +	/* +	 * To simplify this code, only support changes on the +	 * BSS context. The PAN context is usually reassigned +	 * by creating/removing P2P interfaces anyway. +	 */ +	if (ctx->ctxid != IWL_RXON_CTX_BSS) { +		err = -EBUSY; +		goto out; +	} + +	if (!ctx->vif || !iwl_is_ready_rf(priv)) { +		/* +		 * Huh? But wait ... this can maybe happen when +		 * we're in the middle of a firmware restart! +		 */ +		err = -EBUSY; +		goto out; +	} + +	/* Check if the switch is supported in the same context */ +	interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes; +	if (!(interface_modes & BIT(newtype))) { +		err = -EBUSY; +		goto out; +	} + +	if (ctx->exclusive_interface_modes & BIT(newtype)) { +		for_each_context(priv, tmp) { +			if (ctx == tmp) +				continue; + +			if (!tmp->is_active) +				continue; + +			/* +			 * The current mode switch would be exclusive, but +			 * another context is active ... refuse the switch. +			 */ +			err = -EBUSY; +			goto out; +		} +	} + +	/* success */ +	iwl_teardown_interface(priv, vif, true); +	vif->type = newviftype; +	vif->p2p = newp2p; +	err = iwl_setup_interface(priv, ctx); +	WARN_ON(err); +	/* +	 * We've switched internally, but submitting to the +	 * device may have failed for some reason. Mask this +	 * error, because otherwise mac80211 will not switch +	 * (and set the interface type back) and we'll be +	 * out of sync with it. +	 */ +	err = 0; + + out: +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +	return err; +} + +static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw, +			      struct ieee80211_vif *vif, +			      struct cfg80211_scan_request *req) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	int ret; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	if (req->n_channels == 0) +		return -EINVAL; + +	mutex_lock(&priv->mutex); + +	/* +	 * If an internal scan is in progress, just set +	 * up the scan_request as per above. +	 */ +	if (priv->scan_type != IWL_SCAN_NORMAL) { +		IWL_DEBUG_SCAN(priv, +			       "SCAN request during internal scan - defer\n"); +		priv->scan_request = req; +		priv->scan_vif = vif; +		ret = 0; +	} else { +		priv->scan_request = req; +		priv->scan_vif = vif; +		/* +		 * mac80211 will only ask for one band at a time +		 * so using channels[0] here is ok +		 */ +		ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL, +					req->channels[0]->band); +		if (ret) { +			priv->scan_request = NULL; +			priv->scan_vif = NULL; +		} +	} + +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +	mutex_unlock(&priv->mutex); + +	return ret; +} + +static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id) +{ +	struct iwl_addsta_cmd cmd = { +		.mode = STA_CONTROL_MODIFY_MSK, +		.station_flags_msk = STA_FLG_PWR_SAVE_MSK, +		.sta.sta_id = sta_id, +	}; + +	iwl_send_add_sta(priv, &cmd, CMD_ASYNC); +} + +static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw, +				  struct ieee80211_vif *vif, +				  enum sta_notify_cmd cmd, +				  struct ieee80211_sta *sta) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	int sta_id; + +	IWL_DEBUG_MAC80211(priv, "enter\n"); + +	switch (cmd) { +	case STA_NOTIFY_SLEEP: +		WARN_ON(!sta_priv->client); +		sta_priv->asleep = true; +		if (atomic_read(&sta_priv->pending_frames) > 0) +			ieee80211_sta_block_awake(hw, sta, true); +		break; +	case STA_NOTIFY_AWAKE: +		WARN_ON(!sta_priv->client); +		if (!sta_priv->asleep) +			break; +		sta_priv->asleep = false; +		sta_id = iwl_sta_id(sta); +		if (sta_id != IWL_INVALID_STATION) +			iwl_sta_modify_ps_wake(priv, sta_id); +		break; +	default: +		break; +	} +	IWL_DEBUG_MAC80211(priv, "leave\n"); +} + +const struct ieee80211_ops iwlagn_hw_ops = { +	.tx = iwlagn_mac_tx, +	.start = iwlagn_mac_start, +	.stop = iwlagn_mac_stop, +#ifdef CONFIG_PM_SLEEP +	.suspend = iwlagn_mac_suspend, +	.resume = iwlagn_mac_resume, +	.set_wakeup = iwlagn_mac_set_wakeup, +#endif +	.add_interface = iwlagn_mac_add_interface, +	.remove_interface = iwlagn_mac_remove_interface, +	.change_interface = iwlagn_mac_change_interface, +	.config = iwlagn_mac_config, +	.configure_filter = iwlagn_configure_filter, +	.set_key = iwlagn_mac_set_key, +	.update_tkip_key = iwlagn_mac_update_tkip_key, +	.set_rekey_data = iwlagn_mac_set_rekey_data, +	.conf_tx = iwlagn_mac_conf_tx, +	.bss_info_changed = iwlagn_bss_info_changed, +	.ampdu_action = iwlagn_mac_ampdu_action, +	.hw_scan = iwlagn_mac_hw_scan, +	.sta_notify = iwlagn_mac_sta_notify, +	.sta_state = iwlagn_mac_sta_state, +	.channel_switch = iwlagn_mac_channel_switch, +	.flush = iwlagn_mac_flush, +	.tx_last_beacon = iwlagn_mac_tx_last_beacon, +	.rssi_callback = iwlagn_mac_rssi_callback, +	.set_tim = iwlagn_mac_set_tim, +}; + +/* This function both allocates and initializes hw and priv. */ +struct ieee80211_hw *iwl_alloc_all(void) +{ +	struct iwl_priv *priv; +	struct iwl_op_mode *op_mode; +	/* mac80211 allocates memory for this device instance, including +	 *   space for this driver's private structure */ +	struct ieee80211_hw *hw; + +	hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) + +				sizeof(struct iwl_op_mode), &iwlagn_hw_ops); +	if (!hw) +		goto out; + +	op_mode = hw->priv; +	priv = IWL_OP_MODE_GET_DVM(op_mode); +	priv->hw = hw; + +out: +	return hw; +} diff --git a/drivers/net/wireless/iwlwifi/dvm/main.c b/drivers/net/wireless/iwlwifi/dvm/main.c new file mode 100644 index 00000000000..0b7f46f0b07 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/main.c @@ -0,0 +1,2108 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portions of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt + +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/init.h> +#include <linux/slab.h> +#include <linux/delay.h> +#include <linux/sched.h> +#include <linux/skbuff.h> +#include <linux/netdevice.h> +#include <linux/etherdevice.h> +#include <linux/if_arp.h> + +#include <net/mac80211.h> + +#include <asm/div64.h> + +#include "iwl-eeprom-read.h" +#include "iwl-eeprom-parse.h" +#include "iwl-io.h" +#include "iwl-trans.h" +#include "iwl-op-mode.h" +#include "iwl-drv.h" +#include "iwl-modparams.h" +#include "iwl-prph.h" + +#include "dev.h" +#include "calib.h" +#include "agn.h" + + +/****************************************************************************** + * + * module boiler plate + * + ******************************************************************************/ + +/* + * module name, copyright, version, etc. + */ +#define DRV_DESCRIPTION	"Intel(R) Wireless WiFi Link AGN driver for Linux" + +#ifdef CONFIG_IWLWIFI_DEBUG +#define VD "d" +#else +#define VD +#endif + +#define DRV_VERSION     IWLWIFI_VERSION VD + + +MODULE_DESCRIPTION(DRV_DESCRIPTION); +MODULE_VERSION(DRV_VERSION); +MODULE_AUTHOR(DRV_COPYRIGHT " " DRV_AUTHOR); +MODULE_LICENSE("GPL"); + +static const struct iwl_op_mode_ops iwl_dvm_ops; + +void iwl_update_chain_flags(struct iwl_priv *priv) +{ +	struct iwl_rxon_context *ctx; + +	for_each_context(priv, ctx) { +		iwlagn_set_rxon_chain(priv, ctx); +		if (ctx->active.rx_chain != ctx->staging.rx_chain) +			iwlagn_commit_rxon(priv, ctx); +	} +} + +/* Parse the beacon frame to find the TIM element and set tim_idx & tim_size */ +static void iwl_set_beacon_tim(struct iwl_priv *priv, +			       struct iwl_tx_beacon_cmd *tx_beacon_cmd, +			       u8 *beacon, u32 frame_size) +{ +	u16 tim_idx; +	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)beacon; + +	/* +	 * The index is relative to frame start but we start looking at the +	 * variable-length part of the beacon. +	 */ +	tim_idx = mgmt->u.beacon.variable - beacon; + +	/* Parse variable-length elements of beacon to find WLAN_EID_TIM */ +	while ((tim_idx < (frame_size - 2)) && +			(beacon[tim_idx] != WLAN_EID_TIM)) +		tim_idx += beacon[tim_idx+1] + 2; + +	/* If TIM field was found, set variables */ +	if ((tim_idx < (frame_size - 1)) && (beacon[tim_idx] == WLAN_EID_TIM)) { +		tx_beacon_cmd->tim_idx = cpu_to_le16(tim_idx); +		tx_beacon_cmd->tim_size = beacon[tim_idx+1]; +	} else +		IWL_WARN(priv, "Unable to find TIM Element in beacon\n"); +} + +int iwlagn_send_beacon_cmd(struct iwl_priv *priv) +{ +	struct iwl_tx_beacon_cmd *tx_beacon_cmd; +	struct iwl_host_cmd cmd = { +		.id = REPLY_TX_BEACON, +	}; +	struct ieee80211_tx_info *info; +	u32 frame_size; +	u32 rate_flags; +	u32 rate; + +	/* +	 * We have to set up the TX command, the TX Beacon command, and the +	 * beacon contents. +	 */ + +	lockdep_assert_held(&priv->mutex); + +	if (!priv->beacon_ctx) { +		IWL_ERR(priv, "trying to build beacon w/o beacon context!\n"); +		return 0; +	} + +	if (WARN_ON(!priv->beacon_skb)) +		return -EINVAL; + +	/* Allocate beacon command */ +	if (!priv->beacon_cmd) +		priv->beacon_cmd = kzalloc(sizeof(*tx_beacon_cmd), GFP_KERNEL); +	tx_beacon_cmd = priv->beacon_cmd; +	if (!tx_beacon_cmd) +		return -ENOMEM; + +	frame_size = priv->beacon_skb->len; + +	/* Set up TX command fields */ +	tx_beacon_cmd->tx.len = cpu_to_le16((u16)frame_size); +	tx_beacon_cmd->tx.sta_id = priv->beacon_ctx->bcast_sta_id; +	tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE; +	tx_beacon_cmd->tx.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK | +		TX_CMD_FLG_TSF_MSK | TX_CMD_FLG_STA_RATE_MSK; + +	/* Set up TX beacon command fields */ +	iwl_set_beacon_tim(priv, tx_beacon_cmd, priv->beacon_skb->data, +			   frame_size); + +	/* Set up packet rate and flags */ +	info = IEEE80211_SKB_CB(priv->beacon_skb); + +	/* +	 * Let's set up the rate at least somewhat correctly; +	 * it will currently not actually be used by the uCode, +	 * it uses the broadcast station's rate instead. +	 */ +	if (info->control.rates[0].idx < 0 || +	    info->control.rates[0].flags & IEEE80211_TX_RC_MCS) +		rate = 0; +	else +		rate = info->control.rates[0].idx; + +	priv->mgmt_tx_ant = iwl_toggle_tx_ant(priv, priv->mgmt_tx_ant, +					      priv->nvm_data->valid_tx_ant); +	rate_flags = iwl_ant_idx_to_flags(priv->mgmt_tx_ant); + +	/* In mac80211, rates for 5 GHz start at 0 */ +	if (info->band == IEEE80211_BAND_5GHZ) +		rate += IWL_FIRST_OFDM_RATE; +	else if (rate >= IWL_FIRST_CCK_RATE && rate <= IWL_LAST_CCK_RATE) +		rate_flags |= RATE_MCS_CCK_MSK; + +	tx_beacon_cmd->tx.rate_n_flags = +			iwl_hw_set_rate_n_flags(rate, rate_flags); + +	/* Submit command */ +	cmd.len[0] = sizeof(*tx_beacon_cmd); +	cmd.data[0] = tx_beacon_cmd; +	cmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY; +	cmd.len[1] = frame_size; +	cmd.data[1] = priv->beacon_skb->data; +	cmd.dataflags[1] = IWL_HCMD_DFL_NOCOPY; + +	return iwl_dvm_send_cmd(priv, &cmd); +} + +static void iwl_bg_beacon_update(struct work_struct *work) +{ +	struct iwl_priv *priv = +		container_of(work, struct iwl_priv, beacon_update); +	struct sk_buff *beacon; + +	mutex_lock(&priv->mutex); +	if (!priv->beacon_ctx) { +		IWL_ERR(priv, "updating beacon w/o beacon context!\n"); +		goto out; +	} + +	if (priv->beacon_ctx->vif->type != NL80211_IFTYPE_AP) { +		/* +		 * The ucode will send beacon notifications even in +		 * IBSS mode, but we don't want to process them. But +		 * we need to defer the type check to here due to +		 * requiring locking around the beacon_ctx access. +		 */ +		goto out; +	} + +	/* Pull updated AP beacon from mac80211. will fail if not in AP mode */ +	beacon = ieee80211_beacon_get(priv->hw, priv->beacon_ctx->vif); +	if (!beacon) { +		IWL_ERR(priv, "update beacon failed -- keeping old\n"); +		goto out; +	} + +	/* new beacon skb is allocated every time; dispose previous.*/ +	dev_kfree_skb(priv->beacon_skb); + +	priv->beacon_skb = beacon; + +	iwlagn_send_beacon_cmd(priv); + out: +	mutex_unlock(&priv->mutex); +} + +static void iwl_bg_bt_runtime_config(struct work_struct *work) +{ +	struct iwl_priv *priv = +		container_of(work, struct iwl_priv, bt_runtime_config); + +	mutex_lock(&priv->mutex); +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		goto out; + +	/* dont send host command if rf-kill is on */ +	if (!iwl_is_ready_rf(priv)) +		goto out; + +	iwlagn_send_advance_bt_config(priv); +out: +	mutex_unlock(&priv->mutex); +} + +static void iwl_bg_bt_full_concurrency(struct work_struct *work) +{ +	struct iwl_priv *priv = +		container_of(work, struct iwl_priv, bt_full_concurrency); +	struct iwl_rxon_context *ctx; + +	mutex_lock(&priv->mutex); + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		goto out; + +	/* dont send host command if rf-kill is on */ +	if (!iwl_is_ready_rf(priv)) +		goto out; + +	IWL_DEBUG_INFO(priv, "BT coex in %s mode\n", +		       priv->bt_full_concurrent ? +		       "full concurrency" : "3-wire"); + +	/* +	 * LQ & RXON updated cmds must be sent before BT Config cmd +	 * to avoid 3-wire collisions +	 */ +	for_each_context(priv, ctx) { +		iwlagn_set_rxon_chain(priv, ctx); +		iwlagn_commit_rxon(priv, ctx); +	} + +	iwlagn_send_advance_bt_config(priv); +out: +	mutex_unlock(&priv->mutex); +} + +int iwl_send_statistics_request(struct iwl_priv *priv, u8 flags, bool clear) +{ +	struct iwl_statistics_cmd statistics_cmd = { +		.configuration_flags = +			clear ? IWL_STATS_CONF_CLEAR_STATS : 0, +	}; + +	if (flags & CMD_ASYNC) +		return iwl_dvm_send_cmd_pdu(priv, REPLY_STATISTICS_CMD, +					CMD_ASYNC, +					sizeof(struct iwl_statistics_cmd), +					&statistics_cmd); +	else +		return iwl_dvm_send_cmd_pdu(priv, REPLY_STATISTICS_CMD, 0, +					sizeof(struct iwl_statistics_cmd), +					&statistics_cmd); +} + +/** + * iwl_bg_statistics_periodic - Timer callback to queue statistics + * + * This callback is provided in order to send a statistics request. + * + * This timer function is continually reset to execute within + * REG_RECALIB_PERIOD seconds since the last STATISTICS_NOTIFICATION + * was received.  We need to ensure we receive the statistics in order + * to update the temperature used for calibrating the TXPOWER. + */ +static void iwl_bg_statistics_periodic(unsigned long data) +{ +	struct iwl_priv *priv = (struct iwl_priv *)data; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	/* dont send host command if rf-kill is on */ +	if (!iwl_is_ready_rf(priv)) +		return; + +	iwl_send_statistics_request(priv, CMD_ASYNC, false); +} + + +static void iwl_print_cont_event_trace(struct iwl_priv *priv, u32 base, +					u32 start_idx, u32 num_events, +					u32 capacity, u32 mode) +{ +	u32 i; +	u32 ptr;        /* SRAM byte address of log data */ +	u32 ev, time, data; /* event log data */ +	unsigned long reg_flags; + +	if (mode == 0) +		ptr = base + (4 * sizeof(u32)) + (start_idx * 2 * sizeof(u32)); +	else +		ptr = base + (4 * sizeof(u32)) + (start_idx * 3 * sizeof(u32)); + +	/* Make sure device is powered up for SRAM reads */ +	if (!iwl_trans_grab_nic_access(priv->trans, false, ®_flags)) +		return; + +	/* Set starting address; reads will auto-increment */ +	iwl_write32(priv->trans, HBUS_TARG_MEM_RADDR, ptr); + +	/* +	 * Refuse to read more than would have fit into the log from +	 * the current start_idx. This used to happen due to the race +	 * described below, but now WARN because the code below should +	 * prevent it from happening here. +	 */ +	if (WARN_ON(num_events > capacity - start_idx)) +		num_events = capacity - start_idx; + +	/* +	 * "time" is actually "data" for mode 0 (no timestamp). +	 * place event id # at far right for easier visual parsing. +	 */ +	for (i = 0; i < num_events; i++) { +		ev = iwl_read32(priv->trans, HBUS_TARG_MEM_RDAT); +		time = iwl_read32(priv->trans, HBUS_TARG_MEM_RDAT); +		if (mode == 0) { +			trace_iwlwifi_dev_ucode_cont_event( +					priv->trans->dev, 0, time, ev); +		} else { +			data = iwl_read32(priv->trans, HBUS_TARG_MEM_RDAT); +			trace_iwlwifi_dev_ucode_cont_event( +					priv->trans->dev, time, data, ev); +		} +	} +	/* Allow device to power down */ +	iwl_trans_release_nic_access(priv->trans, ®_flags); +} + +static void iwl_continuous_event_trace(struct iwl_priv *priv) +{ +	u32 capacity;   /* event log capacity in # entries */ +	struct { +		u32 capacity; +		u32 mode; +		u32 wrap_counter; +		u32 write_counter; +	} __packed read; +	u32 base;       /* SRAM byte address of event log header */ +	u32 mode;       /* 0 - no timestamp, 1 - timestamp recorded */ +	u32 num_wraps;  /* # times uCode wrapped to top of log */ +	u32 next_entry; /* index of next entry to be written by uCode */ + +	base = priv->device_pointers.log_event_table; +	if (iwlagn_hw_valid_rtc_data_addr(base)) { +		iwl_trans_read_mem_bytes(priv->trans, base, +					 &read, sizeof(read)); +		capacity = read.capacity; +		mode = read.mode; +		num_wraps = read.wrap_counter; +		next_entry = read.write_counter; +	} else +		return; + +	/* +	 * Unfortunately, the uCode doesn't use temporary variables. +	 * Therefore, it can happen that we read next_entry == capacity, +	 * which really means next_entry == 0. +	 */ +	if (unlikely(next_entry == capacity)) +		next_entry = 0; +	/* +	 * Additionally, the uCode increases the write pointer before +	 * the wraps counter, so if the write pointer is smaller than +	 * the old write pointer (wrap occurred) but we read that no +	 * wrap occurred, we actually read between the next_entry and +	 * num_wraps update (this does happen in practice!!) -- take +	 * that into account by increasing num_wraps. +	 */ +	if (unlikely(next_entry < priv->event_log.next_entry && +		     num_wraps == priv->event_log.num_wraps)) +		num_wraps++; + +	if (num_wraps == priv->event_log.num_wraps) { +		iwl_print_cont_event_trace( +			priv, base, priv->event_log.next_entry, +			next_entry - priv->event_log.next_entry, +			capacity, mode); + +		priv->event_log.non_wraps_count++; +	} else { +		if (num_wraps - priv->event_log.num_wraps > 1) +			priv->event_log.wraps_more_count++; +		else +			priv->event_log.wraps_once_count++; + +		trace_iwlwifi_dev_ucode_wrap_event(priv->trans->dev, +				num_wraps - priv->event_log.num_wraps, +				next_entry, priv->event_log.next_entry); + +		if (next_entry < priv->event_log.next_entry) { +			iwl_print_cont_event_trace( +				priv, base, priv->event_log.next_entry, +				capacity - priv->event_log.next_entry, +				capacity, mode); + +			iwl_print_cont_event_trace( +				priv, base, 0, next_entry, capacity, mode); +		} else { +			iwl_print_cont_event_trace( +				priv, base, next_entry, +				capacity - next_entry, +				capacity, mode); + +			iwl_print_cont_event_trace( +				priv, base, 0, next_entry, capacity, mode); +		} +	} + +	priv->event_log.num_wraps = num_wraps; +	priv->event_log.next_entry = next_entry; +} + +/** + * iwl_bg_ucode_trace - Timer callback to log ucode event + * + * The timer is continually set to execute every + * UCODE_TRACE_PERIOD milliseconds after the last timer expired + * this function is to perform continuous uCode event logging operation + * if enabled + */ +static void iwl_bg_ucode_trace(unsigned long data) +{ +	struct iwl_priv *priv = (struct iwl_priv *)data; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	if (priv->event_log.ucode_trace) { +		iwl_continuous_event_trace(priv); +		/* Reschedule the timer to occur in UCODE_TRACE_PERIOD */ +		mod_timer(&priv->ucode_trace, +			 jiffies + msecs_to_jiffies(UCODE_TRACE_PERIOD)); +	} +} + +static void iwl_bg_tx_flush(struct work_struct *work) +{ +	struct iwl_priv *priv = +		container_of(work, struct iwl_priv, tx_flush); + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	/* do nothing if rf-kill is on */ +	if (!iwl_is_ready_rf(priv)) +		return; + +	IWL_DEBUG_INFO(priv, "device request: flush all tx frames\n"); +	iwlagn_dev_txfifo_flush(priv); +} + +/* + * queue/FIFO/AC mapping definitions + */ + +static const u8 iwlagn_bss_ac_to_fifo[] = { +	IWL_TX_FIFO_VO, +	IWL_TX_FIFO_VI, +	IWL_TX_FIFO_BE, +	IWL_TX_FIFO_BK, +}; + +static const u8 iwlagn_bss_ac_to_queue[] = { +	0, 1, 2, 3, +}; + +static const u8 iwlagn_pan_ac_to_fifo[] = { +	IWL_TX_FIFO_VO_IPAN, +	IWL_TX_FIFO_VI_IPAN, +	IWL_TX_FIFO_BE_IPAN, +	IWL_TX_FIFO_BK_IPAN, +}; + +static const u8 iwlagn_pan_ac_to_queue[] = { +	7, 6, 5, 4, +}; + +static void iwl_init_context(struct iwl_priv *priv, u32 ucode_flags) +{ +	int i; + +	/* +	 * The default context is always valid, +	 * the PAN context depends on uCode. +	 */ +	priv->valid_contexts = BIT(IWL_RXON_CTX_BSS); +	if (ucode_flags & IWL_UCODE_TLV_FLAGS_PAN) +		priv->valid_contexts |= BIT(IWL_RXON_CTX_PAN); + +	for (i = 0; i < NUM_IWL_RXON_CTX; i++) +		priv->contexts[i].ctxid = i; + +	priv->contexts[IWL_RXON_CTX_BSS].always_active = true; +	priv->contexts[IWL_RXON_CTX_BSS].is_active = true; +	priv->contexts[IWL_RXON_CTX_BSS].rxon_cmd = REPLY_RXON; +	priv->contexts[IWL_RXON_CTX_BSS].rxon_timing_cmd = REPLY_RXON_TIMING; +	priv->contexts[IWL_RXON_CTX_BSS].rxon_assoc_cmd = REPLY_RXON_ASSOC; +	priv->contexts[IWL_RXON_CTX_BSS].qos_cmd = REPLY_QOS_PARAM; +	priv->contexts[IWL_RXON_CTX_BSS].ap_sta_id = IWL_AP_ID; +	priv->contexts[IWL_RXON_CTX_BSS].wep_key_cmd = REPLY_WEPKEY; +	priv->contexts[IWL_RXON_CTX_BSS].bcast_sta_id = IWLAGN_BROADCAST_ID; +	priv->contexts[IWL_RXON_CTX_BSS].exclusive_interface_modes = +		BIT(NL80211_IFTYPE_ADHOC) | BIT(NL80211_IFTYPE_MONITOR); +	priv->contexts[IWL_RXON_CTX_BSS].interface_modes = +		BIT(NL80211_IFTYPE_STATION); +	priv->contexts[IWL_RXON_CTX_BSS].ap_devtype = RXON_DEV_TYPE_AP; +	priv->contexts[IWL_RXON_CTX_BSS].ibss_devtype = RXON_DEV_TYPE_IBSS; +	priv->contexts[IWL_RXON_CTX_BSS].station_devtype = RXON_DEV_TYPE_ESS; +	priv->contexts[IWL_RXON_CTX_BSS].unused_devtype = RXON_DEV_TYPE_ESS; +	memcpy(priv->contexts[IWL_RXON_CTX_BSS].ac_to_queue, +	       iwlagn_bss_ac_to_queue, sizeof(iwlagn_bss_ac_to_queue)); +	memcpy(priv->contexts[IWL_RXON_CTX_BSS].ac_to_fifo, +	       iwlagn_bss_ac_to_fifo, sizeof(iwlagn_bss_ac_to_fifo)); + +	priv->contexts[IWL_RXON_CTX_PAN].rxon_cmd = REPLY_WIPAN_RXON; +	priv->contexts[IWL_RXON_CTX_PAN].rxon_timing_cmd = +		REPLY_WIPAN_RXON_TIMING; +	priv->contexts[IWL_RXON_CTX_PAN].rxon_assoc_cmd = +		REPLY_WIPAN_RXON_ASSOC; +	priv->contexts[IWL_RXON_CTX_PAN].qos_cmd = REPLY_WIPAN_QOS_PARAM; +	priv->contexts[IWL_RXON_CTX_PAN].ap_sta_id = IWL_AP_ID_PAN; +	priv->contexts[IWL_RXON_CTX_PAN].wep_key_cmd = REPLY_WIPAN_WEPKEY; +	priv->contexts[IWL_RXON_CTX_PAN].bcast_sta_id = IWLAGN_PAN_BCAST_ID; +	priv->contexts[IWL_RXON_CTX_PAN].station_flags = STA_FLG_PAN_STATION; +	priv->contexts[IWL_RXON_CTX_PAN].interface_modes = +		BIT(NL80211_IFTYPE_STATION) | BIT(NL80211_IFTYPE_AP); + +	priv->contexts[IWL_RXON_CTX_PAN].ap_devtype = RXON_DEV_TYPE_CP; +	priv->contexts[IWL_RXON_CTX_PAN].station_devtype = RXON_DEV_TYPE_2STA; +	priv->contexts[IWL_RXON_CTX_PAN].unused_devtype = RXON_DEV_TYPE_P2P; +	memcpy(priv->contexts[IWL_RXON_CTX_PAN].ac_to_queue, +	       iwlagn_pan_ac_to_queue, sizeof(iwlagn_pan_ac_to_queue)); +	memcpy(priv->contexts[IWL_RXON_CTX_PAN].ac_to_fifo, +	       iwlagn_pan_ac_to_fifo, sizeof(iwlagn_pan_ac_to_fifo)); +	priv->contexts[IWL_RXON_CTX_PAN].mcast_queue = IWL_IPAN_MCAST_QUEUE; + +	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2); +} + +static void iwl_rf_kill_ct_config(struct iwl_priv *priv) +{ +	struct iwl_ct_kill_config cmd; +	struct iwl_ct_kill_throttling_config adv_cmd; +	int ret = 0; + +	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR, +		    CSR_UCODE_DRV_GP1_REG_BIT_CT_KILL_EXIT); + +	priv->thermal_throttle.ct_kill_toggle = false; + +	if (priv->lib->support_ct_kill_exit) { +		adv_cmd.critical_temperature_enter = +			cpu_to_le32(priv->hw_params.ct_kill_threshold); +		adv_cmd.critical_temperature_exit = +			cpu_to_le32(priv->hw_params.ct_kill_exit_threshold); + +		ret = iwl_dvm_send_cmd_pdu(priv, +				       REPLY_CT_KILL_CONFIG_CMD, +				       0, sizeof(adv_cmd), &adv_cmd); +		if (ret) +			IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n"); +		else +			IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD " +				"succeeded, critical temperature enter is %d," +				"exit is %d\n", +				priv->hw_params.ct_kill_threshold, +				priv->hw_params.ct_kill_exit_threshold); +	} else { +		cmd.critical_temperature_R = +			cpu_to_le32(priv->hw_params.ct_kill_threshold); + +		ret = iwl_dvm_send_cmd_pdu(priv, +				       REPLY_CT_KILL_CONFIG_CMD, +				       0, sizeof(cmd), &cmd); +		if (ret) +			IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n"); +		else +			IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD " +				"succeeded, " +				"critical temperature is %d\n", +				priv->hw_params.ct_kill_threshold); +	} +} + +static int iwlagn_send_calib_cfg_rt(struct iwl_priv *priv, u32 cfg) +{ +	struct iwl_calib_cfg_cmd calib_cfg_cmd; +	struct iwl_host_cmd cmd = { +		.id = CALIBRATION_CFG_CMD, +		.len = { sizeof(struct iwl_calib_cfg_cmd), }, +		.data = { &calib_cfg_cmd, }, +	}; + +	memset(&calib_cfg_cmd, 0, sizeof(calib_cfg_cmd)); +	calib_cfg_cmd.ucd_calib_cfg.once.is_enable = IWL_CALIB_RT_CFG_ALL; +	calib_cfg_cmd.ucd_calib_cfg.once.start = cpu_to_le32(cfg); + +	return iwl_dvm_send_cmd(priv, &cmd); +} + + +static int iwlagn_send_tx_ant_config(struct iwl_priv *priv, u8 valid_tx_ant) +{ +	struct iwl_tx_ant_config_cmd tx_ant_cmd = { +	  .valid = cpu_to_le32(valid_tx_ant), +	}; + +	if (IWL_UCODE_API(priv->fw->ucode_ver) > 1) { +		IWL_DEBUG_HC(priv, "select valid tx ant: %u\n", valid_tx_ant); +		return iwl_dvm_send_cmd_pdu(priv, TX_ANT_CONFIGURATION_CMD, 0, +					sizeof(struct iwl_tx_ant_config_cmd), +					&tx_ant_cmd); +	} else { +		IWL_DEBUG_HC(priv, "TX_ANT_CONFIGURATION_CMD not supported\n"); +		return -EOPNOTSUPP; +	} +} + +static void iwl_send_bt_config(struct iwl_priv *priv) +{ +	struct iwl_bt_cmd bt_cmd = { +		.lead_time = BT_LEAD_TIME_DEF, +		.max_kill = BT_MAX_KILL_DEF, +		.kill_ack_mask = 0, +		.kill_cts_mask = 0, +	}; + +	if (!iwlwifi_mod_params.bt_coex_active) +		bt_cmd.flags = BT_COEX_DISABLE; +	else +		bt_cmd.flags = BT_COEX_ENABLE; + +	priv->bt_enable_flag = bt_cmd.flags; +	IWL_DEBUG_INFO(priv, "BT coex %s\n", +		(bt_cmd.flags == BT_COEX_DISABLE) ? "disable" : "active"); + +	if (iwl_dvm_send_cmd_pdu(priv, REPLY_BT_CONFIG, +			     0, sizeof(struct iwl_bt_cmd), &bt_cmd)) +		IWL_ERR(priv, "failed to send BT Coex Config\n"); +} + +/** + * iwl_alive_start - called after REPLY_ALIVE notification received + *                   from protocol/runtime uCode (initialization uCode's + *                   Alive gets handled by iwl_init_alive_start()). + */ +int iwl_alive_start(struct iwl_priv *priv) +{ +	int ret = 0; +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; + +	IWL_DEBUG_INFO(priv, "Runtime Alive received.\n"); + +	/* After the ALIVE response, we can send host commands to the uCode */ +	set_bit(STATUS_ALIVE, &priv->status); + +	if (iwl_is_rfkill(priv)) +		return -ERFKILL; + +	if (priv->event_log.ucode_trace) { +		/* start collecting data now */ +		mod_timer(&priv->ucode_trace, jiffies); +	} + +	/* download priority table before any calibration request */ +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist) { +		/* Configure Bluetooth device coexistence support */ +		if (priv->lib->bt_params->bt_sco_disable) +			priv->bt_enable_pspoll = false; +		else +			priv->bt_enable_pspoll = true; + +		priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK; +		priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT; +		priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT; +		iwlagn_send_advance_bt_config(priv); +		priv->bt_valid = IWLAGN_BT_VALID_ENABLE_FLAGS; +		priv->cur_rssi_ctx = NULL; + +		iwl_send_prio_tbl(priv); + +		/* FIXME: w/a to force change uCode BT state machine */ +		ret = iwl_send_bt_env(priv, IWL_BT_COEX_ENV_OPEN, +					 BT_COEX_PRIO_TBL_EVT_INIT_CALIB2); +		if (ret) +			return ret; +		ret = iwl_send_bt_env(priv, IWL_BT_COEX_ENV_CLOSE, +					 BT_COEX_PRIO_TBL_EVT_INIT_CALIB2); +		if (ret) +			return ret; +	} else if (priv->lib->bt_params) { +		/* +		 * default is 2-wire BT coexexistence support +		 */ +		iwl_send_bt_config(priv); +	} + +	/* +	 * Perform runtime calibrations, including DC calibration. +	 */ +	iwlagn_send_calib_cfg_rt(priv, IWL_CALIB_CFG_DC_IDX); + +	ieee80211_wake_queues(priv->hw); + +	/* Configure Tx antenna selection based on H/W config */ +	iwlagn_send_tx_ant_config(priv, priv->nvm_data->valid_tx_ant); + +	if (iwl_is_associated_ctx(ctx) && !priv->wowlan) { +		struct iwl_rxon_cmd *active_rxon = +				(struct iwl_rxon_cmd *)&ctx->active; +		/* apply any changes in staging */ +		ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK; +		active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK; +	} else { +		struct iwl_rxon_context *tmp; +		/* Initialize our rx_config data */ +		for_each_context(priv, tmp) +			iwl_connection_init_rx_config(priv, tmp); + +		iwlagn_set_rxon_chain(priv, ctx); +	} + +	if (!priv->wowlan) { +		/* WoWLAN ucode will not reply in the same way, skip it */ +		iwl_reset_run_time_calib(priv); +	} + +	set_bit(STATUS_READY, &priv->status); + +	/* Configure the adapter for unassociated operation */ +	ret = iwlagn_commit_rxon(priv, ctx); +	if (ret) +		return ret; + +	/* At this point, the NIC is initialized and operational */ +	iwl_rf_kill_ct_config(priv); + +	IWL_DEBUG_INFO(priv, "ALIVE processing complete.\n"); + +	return iwl_power_update_mode(priv, true); +} + +/** + * iwl_clear_driver_stations - clear knowledge of all stations from driver + * @priv: iwl priv struct + * + * This is called during iwl_down() to make sure that in the case + * we're coming there from a hardware restart mac80211 will be + * able to reconfigure stations -- if we're getting there in the + * normal down flow then the stations will already be cleared. + */ +static void iwl_clear_driver_stations(struct iwl_priv *priv) +{ +	struct iwl_rxon_context *ctx; + +	spin_lock_bh(&priv->sta_lock); +	memset(priv->stations, 0, sizeof(priv->stations)); +	priv->num_stations = 0; + +	priv->ucode_key_table = 0; + +	for_each_context(priv, ctx) { +		/* +		 * Remove all key information that is not stored as part +		 * of station information since mac80211 may not have had +		 * a chance to remove all the keys. When device is +		 * reconfigured by mac80211 after an error all keys will +		 * be reconfigured. +		 */ +		memset(ctx->wep_keys, 0, sizeof(ctx->wep_keys)); +		ctx->key_mapping_keys = 0; +	} + +	spin_unlock_bh(&priv->sta_lock); +} + +void iwl_down(struct iwl_priv *priv) +{ +	int exit_pending; + +	IWL_DEBUG_INFO(priv, DRV_NAME " is going down\n"); + +	lockdep_assert_held(&priv->mutex); + +	iwl_scan_cancel_timeout(priv, 200); + +	exit_pending = +		test_and_set_bit(STATUS_EXIT_PENDING, &priv->status); + +	iwl_clear_ucode_stations(priv, NULL); +	iwl_dealloc_bcast_stations(priv); +	iwl_clear_driver_stations(priv); + +	/* reset BT coex data */ +	priv->bt_status = 0; +	priv->cur_rssi_ctx = NULL; +	priv->bt_is_sco = 0; +	if (priv->lib->bt_params) +		priv->bt_traffic_load = +			 priv->lib->bt_params->bt_init_traffic_load; +	else +		priv->bt_traffic_load = 0; +	priv->bt_full_concurrent = false; +	priv->bt_ci_compliance = 0; + +	/* Wipe out the EXIT_PENDING status bit if we are not actually +	 * exiting the module */ +	if (!exit_pending) +		clear_bit(STATUS_EXIT_PENDING, &priv->status); + +	if (priv->mac80211_registered) +		ieee80211_stop_queues(priv->hw); + +	priv->ucode_loaded = false; +	iwl_trans_stop_device(priv->trans); + +	/* Set num_aux_in_flight must be done after the transport is stopped */ +	atomic_set(&priv->num_aux_in_flight, 0); + +	/* Clear out all status bits but a few that are stable across reset */ +	priv->status &= test_bit(STATUS_RF_KILL_HW, &priv->status) << +				STATUS_RF_KILL_HW | +			test_bit(STATUS_FW_ERROR, &priv->status) << +				STATUS_FW_ERROR | +			test_bit(STATUS_EXIT_PENDING, &priv->status) << +				STATUS_EXIT_PENDING; + +	dev_kfree_skb(priv->beacon_skb); +	priv->beacon_skb = NULL; +} + +/***************************************************************************** + * + * Workqueue callbacks + * + *****************************************************************************/ + +static void iwl_bg_run_time_calib_work(struct work_struct *work) +{ +	struct iwl_priv *priv = container_of(work, struct iwl_priv, +			run_time_calib_work); + +	mutex_lock(&priv->mutex); + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status) || +	    test_bit(STATUS_SCANNING, &priv->status)) { +		mutex_unlock(&priv->mutex); +		return; +	} + +	if (priv->start_calib) { +		iwl_chain_noise_calibration(priv); +		iwl_sensitivity_calibration(priv); +	} + +	mutex_unlock(&priv->mutex); +} + +void iwlagn_prepare_restart(struct iwl_priv *priv) +{ +	bool bt_full_concurrent; +	u8 bt_ci_compliance; +	u8 bt_load; +	u8 bt_status; +	bool bt_is_sco; +	int i; + +	lockdep_assert_held(&priv->mutex); + +	priv->is_open = 0; + +	/* +	 * __iwl_down() will clear the BT status variables, +	 * which is correct, but when we restart we really +	 * want to keep them so restore them afterwards. +	 * +	 * The restart process will later pick them up and +	 * re-configure the hw when we reconfigure the BT +	 * command. +	 */ +	bt_full_concurrent = priv->bt_full_concurrent; +	bt_ci_compliance = priv->bt_ci_compliance; +	bt_load = priv->bt_traffic_load; +	bt_status = priv->bt_status; +	bt_is_sco = priv->bt_is_sco; + +	iwl_down(priv); + +	priv->bt_full_concurrent = bt_full_concurrent; +	priv->bt_ci_compliance = bt_ci_compliance; +	priv->bt_traffic_load = bt_load; +	priv->bt_status = bt_status; +	priv->bt_is_sco = bt_is_sco; + +	/* reset aggregation queues */ +	for (i = IWLAGN_FIRST_AMPDU_QUEUE; i < IWL_MAX_HW_QUEUES; i++) +		priv->queue_to_mac80211[i] = IWL_INVALID_MAC80211_QUEUE; +	/* and stop counts */ +	for (i = 0; i < IWL_MAX_HW_QUEUES; i++) +		atomic_set(&priv->queue_stop_count[i], 0); + +	memset(priv->agg_q_alloc, 0, sizeof(priv->agg_q_alloc)); +} + +static void iwl_bg_restart(struct work_struct *data) +{ +	struct iwl_priv *priv = container_of(data, struct iwl_priv, restart); + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	if (test_and_clear_bit(STATUS_FW_ERROR, &priv->status)) { +		mutex_lock(&priv->mutex); +		iwlagn_prepare_restart(priv); +		mutex_unlock(&priv->mutex); +		iwl_cancel_deferred_work(priv); +		if (priv->mac80211_registered) +			ieee80211_restart_hw(priv->hw); +		else +			IWL_ERR(priv, +				"Cannot request restart before registrating with mac80211\n"); +	} else { +		WARN_ON(1); +	} +} + +/***************************************************************************** + * + * driver setup and teardown + * + *****************************************************************************/ + +static void iwl_setup_deferred_work(struct iwl_priv *priv) +{ +	priv->workqueue = create_singlethread_workqueue(DRV_NAME); + +	INIT_WORK(&priv->restart, iwl_bg_restart); +	INIT_WORK(&priv->beacon_update, iwl_bg_beacon_update); +	INIT_WORK(&priv->run_time_calib_work, iwl_bg_run_time_calib_work); +	INIT_WORK(&priv->tx_flush, iwl_bg_tx_flush); +	INIT_WORK(&priv->bt_full_concurrency, iwl_bg_bt_full_concurrency); +	INIT_WORK(&priv->bt_runtime_config, iwl_bg_bt_runtime_config); + +	iwl_setup_scan_deferred_work(priv); + +	if (priv->lib->bt_params) +		iwlagn_bt_setup_deferred_work(priv); + +	init_timer(&priv->statistics_periodic); +	priv->statistics_periodic.data = (unsigned long)priv; +	priv->statistics_periodic.function = iwl_bg_statistics_periodic; + +	init_timer(&priv->ucode_trace); +	priv->ucode_trace.data = (unsigned long)priv; +	priv->ucode_trace.function = iwl_bg_ucode_trace; +} + +void iwl_cancel_deferred_work(struct iwl_priv *priv) +{ +	if (priv->lib->bt_params) +		iwlagn_bt_cancel_deferred_work(priv); + +	cancel_work_sync(&priv->run_time_calib_work); +	cancel_work_sync(&priv->beacon_update); + +	iwl_cancel_scan_deferred_work(priv); + +	cancel_work_sync(&priv->bt_full_concurrency); +	cancel_work_sync(&priv->bt_runtime_config); + +	del_timer_sync(&priv->statistics_periodic); +	del_timer_sync(&priv->ucode_trace); +} + +static int iwl_init_drv(struct iwl_priv *priv) +{ +	spin_lock_init(&priv->sta_lock); + +	mutex_init(&priv->mutex); + +	INIT_LIST_HEAD(&priv->calib_results); + +	priv->band = IEEE80211_BAND_2GHZ; + +	priv->plcp_delta_threshold = priv->lib->plcp_delta_threshold; + +	priv->iw_mode = NL80211_IFTYPE_STATION; +	priv->current_ht_config.smps = IEEE80211_SMPS_STATIC; +	priv->missed_beacon_threshold = IWL_MISSED_BEACON_THRESHOLD_DEF; +	priv->agg_tids_count = 0; + +	priv->rx_statistics_jiffies = jiffies; + +	/* Choose which receivers/antennas to use */ +	iwlagn_set_rxon_chain(priv, &priv->contexts[IWL_RXON_CTX_BSS]); + +	iwl_init_scan_params(priv); + +	/* init bt coex */ +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist) { +		priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT; +		priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT; +		priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK; +		priv->bt_on_thresh = BT_ON_THRESHOLD_DEF; +		priv->bt_duration = BT_DURATION_LIMIT_DEF; +		priv->dynamic_frag_thresh = BT_FRAG_THRESHOLD_DEF; +	} + +	return 0; +} + +static void iwl_uninit_drv(struct iwl_priv *priv) +{ +	kfree(priv->scan_cmd); +	kfree(priv->beacon_cmd); +	kfree(rcu_dereference_raw(priv->noa_data)); +	iwl_calib_free_results(priv); +#ifdef CONFIG_IWLWIFI_DEBUGFS +	kfree(priv->wowlan_sram); +#endif +} + +static void iwl_set_hw_params(struct iwl_priv *priv) +{ +	if (priv->cfg->ht_params) +		priv->hw_params.use_rts_for_aggregation = +			priv->cfg->ht_params->use_rts_for_aggregation; + +	/* Device-specific setup */ +	priv->lib->set_hw_params(priv); +} + + + +/* show what optional capabilities we have */ +static void iwl_option_config(struct iwl_priv *priv) +{ +#ifdef CONFIG_IWLWIFI_DEBUG +	IWL_INFO(priv, "CONFIG_IWLWIFI_DEBUG enabled\n"); +#else +	IWL_INFO(priv, "CONFIG_IWLWIFI_DEBUG disabled\n"); +#endif + +#ifdef CONFIG_IWLWIFI_DEBUGFS +	IWL_INFO(priv, "CONFIG_IWLWIFI_DEBUGFS enabled\n"); +#else +	IWL_INFO(priv, "CONFIG_IWLWIFI_DEBUGFS disabled\n"); +#endif + +#ifdef CONFIG_IWLWIFI_DEVICE_TRACING +	IWL_INFO(priv, "CONFIG_IWLWIFI_DEVICE_TRACING enabled\n"); +#else +	IWL_INFO(priv, "CONFIG_IWLWIFI_DEVICE_TRACING disabled\n"); +#endif +} + +static int iwl_eeprom_init_hw_params(struct iwl_priv *priv) +{ +	struct iwl_nvm_data *data = priv->nvm_data; + +	if (data->sku_cap_11n_enable && +	    !priv->cfg->ht_params) { +		IWL_ERR(priv, "Invalid 11n configuration\n"); +		return -EINVAL; +	} + +	if (!data->sku_cap_11n_enable && !data->sku_cap_band_24GHz_enable && +	    !data->sku_cap_band_52GHz_enable) { +		IWL_ERR(priv, "Invalid device sku\n"); +		return -EINVAL; +	} + +	IWL_DEBUG_INFO(priv, +		       "Device SKU: 24GHz %s %s, 52GHz %s %s, 11.n %s %s\n", +		       data->sku_cap_band_24GHz_enable ? "" : "NOT", "enabled", +		       data->sku_cap_band_52GHz_enable ? "" : "NOT", "enabled", +		       data->sku_cap_11n_enable ? "" : "NOT", "enabled"); + +	priv->hw_params.tx_chains_num = +		num_of_ant(data->valid_tx_ant); +	if (priv->cfg->rx_with_siso_diversity) +		priv->hw_params.rx_chains_num = 1; +	else +		priv->hw_params.rx_chains_num = +			num_of_ant(data->valid_rx_ant); + +	IWL_DEBUG_INFO(priv, "Valid Tx ant: 0x%X, Valid Rx ant: 0x%X\n", +		       data->valid_tx_ant, +		       data->valid_rx_ant); + +	return 0; +} + +static struct iwl_op_mode *iwl_op_mode_dvm_start(struct iwl_trans *trans, +						 const struct iwl_cfg *cfg, +						 const struct iwl_fw *fw, +						 struct dentry *dbgfs_dir) +{ +	struct iwl_priv *priv; +	struct ieee80211_hw *hw; +	struct iwl_op_mode *op_mode; +	u16 num_mac; +	u32 ucode_flags; +	struct iwl_trans_config trans_cfg = {}; +	static const u8 no_reclaim_cmds[] = { +		REPLY_RX_PHY_CMD, +		REPLY_RX_MPDU_CMD, +		REPLY_COMPRESSED_BA, +		STATISTICS_NOTIFICATION, +		REPLY_TX, +	}; +	int i; + +	/************************ +	 * 1. Allocating HW data +	 ************************/ +	hw = iwl_alloc_all(); +	if (!hw) { +		pr_err("%s: Cannot allocate network device\n", cfg->name); +		goto out; +	} + +	op_mode = hw->priv; +	op_mode->ops = &iwl_dvm_ops; +	priv = IWL_OP_MODE_GET_DVM(op_mode); +	priv->trans = trans; +	priv->dev = trans->dev; +	priv->cfg = cfg; +	priv->fw = fw; + +	switch (priv->cfg->device_family) { +	case IWL_DEVICE_FAMILY_1000: +	case IWL_DEVICE_FAMILY_100: +		priv->lib = &iwl_dvm_1000_cfg; +		break; +	case IWL_DEVICE_FAMILY_2000: +		priv->lib = &iwl_dvm_2000_cfg; +		break; +	case IWL_DEVICE_FAMILY_105: +		priv->lib = &iwl_dvm_105_cfg; +		break; +	case IWL_DEVICE_FAMILY_2030: +	case IWL_DEVICE_FAMILY_135: +		priv->lib = &iwl_dvm_2030_cfg; +		break; +	case IWL_DEVICE_FAMILY_5000: +		priv->lib = &iwl_dvm_5000_cfg; +		break; +	case IWL_DEVICE_FAMILY_5150: +		priv->lib = &iwl_dvm_5150_cfg; +		break; +	case IWL_DEVICE_FAMILY_6000: +	case IWL_DEVICE_FAMILY_6000i: +		priv->lib = &iwl_dvm_6000_cfg; +		break; +	case IWL_DEVICE_FAMILY_6005: +		priv->lib = &iwl_dvm_6005_cfg; +		break; +	case IWL_DEVICE_FAMILY_6050: +	case IWL_DEVICE_FAMILY_6150: +		priv->lib = &iwl_dvm_6050_cfg; +		break; +	case IWL_DEVICE_FAMILY_6030: +		priv->lib = &iwl_dvm_6030_cfg; +		break; +	default: +		break; +	} + +	if (WARN_ON(!priv->lib)) +		goto out_free_hw; + +	/* +	 * Populate the state variables that the transport layer needs +	 * to know about. +	 */ +	trans_cfg.op_mode = op_mode; +	trans_cfg.no_reclaim_cmds = no_reclaim_cmds; +	trans_cfg.n_no_reclaim_cmds = ARRAY_SIZE(no_reclaim_cmds); +	trans_cfg.rx_buf_size_8k = iwlwifi_mod_params.amsdu_size_8K; +	if (!iwlwifi_mod_params.wd_disable) +		trans_cfg.queue_watchdog_timeout = +			priv->cfg->base_params->wd_timeout; +	else +		trans_cfg.queue_watchdog_timeout = IWL_WATCHDOG_DISABLED; +	trans_cfg.command_names = iwl_dvm_cmd_strings; +	trans_cfg.cmd_fifo = IWLAGN_CMD_FIFO_NUM; + +	WARN_ON(sizeof(priv->transport_queue_stop) * BITS_PER_BYTE < +		priv->cfg->base_params->num_of_queues); + +	ucode_flags = fw->ucode_capa.flags; + +	if (ucode_flags & IWL_UCODE_TLV_FLAGS_PAN) { +		priv->sta_key_max_num = STA_KEY_MAX_NUM_PAN; +		trans_cfg.cmd_queue = IWL_IPAN_CMD_QUEUE_NUM; +	} else { +		priv->sta_key_max_num = STA_KEY_MAX_NUM; +		trans_cfg.cmd_queue = IWL_DEFAULT_CMD_QUEUE_NUM; +	} + +	/* Configure transport layer */ +	iwl_trans_configure(priv->trans, &trans_cfg); + +	trans->rx_mpdu_cmd = REPLY_RX_MPDU_CMD; +	trans->rx_mpdu_cmd_hdr_size = sizeof(struct iwl_rx_mpdu_res_start); + +	/* At this point both hw and priv are allocated. */ + +	SET_IEEE80211_DEV(priv->hw, priv->trans->dev); + +	iwl_option_config(priv); + +	IWL_DEBUG_INFO(priv, "*** LOAD DRIVER ***\n"); + +	/* is antenna coupling more than 35dB ? */ +	priv->bt_ant_couple_ok = +		(iwlwifi_mod_params.ant_coupling > +			IWL_BT_ANTENNA_COUPLING_THRESHOLD) ? +			true : false; + +	/* bt channel inhibition enabled*/ +	priv->bt_ch_announce = true; +	IWL_DEBUG_INFO(priv, "BT channel inhibition is %s\n", +		       (priv->bt_ch_announce) ? "On" : "Off"); + +	/* these spin locks will be used in apm_ops.init and EEPROM access +	 * we should init now +	 */ +	spin_lock_init(&priv->statistics.lock); + +	/*********************** +	 * 2. Read REV register +	 ***********************/ +	IWL_INFO(priv, "Detected %s, REV=0x%X\n", +		priv->cfg->name, priv->trans->hw_rev); + +	if (iwl_trans_start_hw(priv->trans)) +		goto out_free_hw; + +	/* Read the EEPROM */ +	if (iwl_read_eeprom(priv->trans, &priv->eeprom_blob, +			    &priv->eeprom_blob_size)) { +		IWL_ERR(priv, "Unable to init EEPROM\n"); +		goto out_free_hw; +	} + +	/* Reset chip to save power until we load uCode during "up". */ +	iwl_trans_stop_device(priv->trans); + +	priv->nvm_data = iwl_parse_eeprom_data(priv->trans->dev, priv->cfg, +						  priv->eeprom_blob, +						  priv->eeprom_blob_size); +	if (!priv->nvm_data) +		goto out_free_eeprom_blob; + +	if (iwl_nvm_check_version(priv->nvm_data, priv->trans)) +		goto out_free_eeprom; + +	if (iwl_eeprom_init_hw_params(priv)) +		goto out_free_eeprom; + +	/* extract MAC Address */ +	memcpy(priv->addresses[0].addr, priv->nvm_data->hw_addr, ETH_ALEN); +	IWL_DEBUG_INFO(priv, "MAC address: %pM\n", priv->addresses[0].addr); +	priv->hw->wiphy->addresses = priv->addresses; +	priv->hw->wiphy->n_addresses = 1; +	num_mac = priv->nvm_data->n_hw_addrs; +	if (num_mac > 1) { +		memcpy(priv->addresses[1].addr, priv->addresses[0].addr, +		       ETH_ALEN); +		priv->addresses[1].addr[5]++; +		priv->hw->wiphy->n_addresses++; +	} + +	/************************ +	 * 4. Setup HW constants +	 ************************/ +	iwl_set_hw_params(priv); + +	if (!(priv->nvm_data->sku_cap_ipan_enable)) { +		IWL_DEBUG_INFO(priv, "Your EEPROM disabled PAN\n"); +		ucode_flags &= ~IWL_UCODE_TLV_FLAGS_PAN; +		/* +		 * if not PAN, then don't support P2P -- might be a uCode +		 * packaging bug or due to the eeprom check above +		 */ +		priv->sta_key_max_num = STA_KEY_MAX_NUM; +		trans_cfg.cmd_queue = IWL_DEFAULT_CMD_QUEUE_NUM; + +		/* Configure transport layer again*/ +		iwl_trans_configure(priv->trans, &trans_cfg); +	} + +	/******************* +	 * 5. Setup priv +	 *******************/ +	for (i = 0; i < IWL_MAX_HW_QUEUES; i++) { +		priv->queue_to_mac80211[i] = IWL_INVALID_MAC80211_QUEUE; +		if (i < IWLAGN_FIRST_AMPDU_QUEUE && +		    i != IWL_DEFAULT_CMD_QUEUE_NUM && +		    i != IWL_IPAN_CMD_QUEUE_NUM) +			priv->queue_to_mac80211[i] = i; +		atomic_set(&priv->queue_stop_count[i], 0); +	} + +	if (iwl_init_drv(priv)) +		goto out_free_eeprom; + +	/* At this point both hw and priv are initialized. */ + +	/******************** +	 * 6. Setup services +	 ********************/ +	iwl_setup_deferred_work(priv); +	iwl_setup_rx_handlers(priv); + +	iwl_power_initialize(priv); +	iwl_tt_initialize(priv); + +	snprintf(priv->hw->wiphy->fw_version, +		 sizeof(priv->hw->wiphy->fw_version), +		 "%s", fw->fw_version); + +	priv->new_scan_threshold_behaviour = +		!!(ucode_flags & IWL_UCODE_TLV_FLAGS_NEWSCAN); + +	priv->phy_calib_chain_noise_reset_cmd = +		fw->ucode_capa.standard_phy_calibration_size; +	priv->phy_calib_chain_noise_gain_cmd = +		fw->ucode_capa.standard_phy_calibration_size + 1; + +	/* initialize all valid contexts */ +	iwl_init_context(priv, ucode_flags); + +	/************************************************** +	 * This is still part of probe() in a sense... +	 * +	 * 7. Setup and register with mac80211 and debugfs +	 **************************************************/ +	if (iwlagn_mac_setup_register(priv, &fw->ucode_capa)) +		goto out_destroy_workqueue; + +	if (iwl_dbgfs_register(priv, dbgfs_dir)) +		goto out_mac80211_unregister; + +	return op_mode; + +out_mac80211_unregister: +	iwlagn_mac_unregister(priv); +out_destroy_workqueue: +	iwl_tt_exit(priv); +	iwl_cancel_deferred_work(priv); +	destroy_workqueue(priv->workqueue); +	priv->workqueue = NULL; +	iwl_uninit_drv(priv); +out_free_eeprom_blob: +	kfree(priv->eeprom_blob); +out_free_eeprom: +	iwl_free_nvm_data(priv->nvm_data); +out_free_hw: +	ieee80211_free_hw(priv->hw); +out: +	op_mode = NULL; +	return op_mode; +} + +static void iwl_op_mode_dvm_stop(struct iwl_op_mode *op_mode) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); + +	IWL_DEBUG_INFO(priv, "*** UNLOAD DRIVER ***\n"); + +	iwlagn_mac_unregister(priv); + +	iwl_tt_exit(priv); + +	kfree(priv->eeprom_blob); +	iwl_free_nvm_data(priv->nvm_data); + +	/*netif_stop_queue(dev); */ +	flush_workqueue(priv->workqueue); + +	/* ieee80211_unregister_hw calls iwlagn_mac_stop, which flushes +	 * priv->workqueue... so we can't take down the workqueue +	 * until now... */ +	destroy_workqueue(priv->workqueue); +	priv->workqueue = NULL; + +	iwl_uninit_drv(priv); + +	dev_kfree_skb(priv->beacon_skb); + +	iwl_trans_op_mode_leave(priv->trans); +	ieee80211_free_hw(priv->hw); +} + +static const char * const desc_lookup_text[] = { +	"OK", +	"FAIL", +	"BAD_PARAM", +	"BAD_CHECKSUM", +	"NMI_INTERRUPT_WDG", +	"SYSASSERT", +	"FATAL_ERROR", +	"BAD_COMMAND", +	"HW_ERROR_TUNE_LOCK", +	"HW_ERROR_TEMPERATURE", +	"ILLEGAL_CHAN_FREQ", +	"VCC_NOT_STABLE", +	"FH_ERROR", +	"NMI_INTERRUPT_HOST", +	"NMI_INTERRUPT_ACTION_PT", +	"NMI_INTERRUPT_UNKNOWN", +	"UCODE_VERSION_MISMATCH", +	"HW_ERROR_ABS_LOCK", +	"HW_ERROR_CAL_LOCK_FAIL", +	"NMI_INTERRUPT_INST_ACTION_PT", +	"NMI_INTERRUPT_DATA_ACTION_PT", +	"NMI_TRM_HW_ER", +	"NMI_INTERRUPT_TRM", +	"NMI_INTERRUPT_BREAK_POINT", +	"DEBUG_0", +	"DEBUG_1", +	"DEBUG_2", +	"DEBUG_3", +}; + +static struct { char *name; u8 num; } advanced_lookup[] = { +	{ "NMI_INTERRUPT_WDG", 0x34 }, +	{ "SYSASSERT", 0x35 }, +	{ "UCODE_VERSION_MISMATCH", 0x37 }, +	{ "BAD_COMMAND", 0x38 }, +	{ "NMI_INTERRUPT_DATA_ACTION_PT", 0x3C }, +	{ "FATAL_ERROR", 0x3D }, +	{ "NMI_TRM_HW_ERR", 0x46 }, +	{ "NMI_INTERRUPT_TRM", 0x4C }, +	{ "NMI_INTERRUPT_BREAK_POINT", 0x54 }, +	{ "NMI_INTERRUPT_WDG_RXF_FULL", 0x5C }, +	{ "NMI_INTERRUPT_WDG_NO_RBD_RXF_FULL", 0x64 }, +	{ "NMI_INTERRUPT_HOST", 0x66 }, +	{ "NMI_INTERRUPT_ACTION_PT", 0x7C }, +	{ "NMI_INTERRUPT_UNKNOWN", 0x84 }, +	{ "NMI_INTERRUPT_INST_ACTION_PT", 0x86 }, +	{ "ADVANCED_SYSASSERT", 0 }, +}; + +static const char *desc_lookup(u32 num) +{ +	int i; +	int max = ARRAY_SIZE(desc_lookup_text); + +	if (num < max) +		return desc_lookup_text[num]; + +	max = ARRAY_SIZE(advanced_lookup) - 1; +	for (i = 0; i < max; i++) { +		if (advanced_lookup[i].num == num) +			break; +	} +	return advanced_lookup[i].name; +} + +#define ERROR_START_OFFSET  (1 * sizeof(u32)) +#define ERROR_ELEM_SIZE     (7 * sizeof(u32)) + +static void iwl_dump_nic_error_log(struct iwl_priv *priv) +{ +	struct iwl_trans *trans = priv->trans; +	u32 base; +	struct iwl_error_event_table table; + +	base = priv->device_pointers.error_event_table; +	if (priv->cur_ucode == IWL_UCODE_INIT) { +		if (!base) +			base = priv->fw->init_errlog_ptr; +	} else { +		if (!base) +			base = priv->fw->inst_errlog_ptr; +	} + +	if (!iwlagn_hw_valid_rtc_data_addr(base)) { +		IWL_ERR(priv, +			"Not valid error log pointer 0x%08X for %s uCode\n", +			base, +			(priv->cur_ucode == IWL_UCODE_INIT) +					? "Init" : "RT"); +		return; +	} + +	/*TODO: Update dbgfs with ISR error stats obtained below */ +	iwl_trans_read_mem_bytes(trans, base, &table, sizeof(table)); + +	if (ERROR_START_OFFSET <= table.valid * ERROR_ELEM_SIZE) { +		IWL_ERR(trans, "Start IWL Error Log Dump:\n"); +		IWL_ERR(trans, "Status: 0x%08lX, count: %d\n", +			priv->status, table.valid); +	} + +	trace_iwlwifi_dev_ucode_error(trans->dev, table.error_id, table.tsf_low, +				      table.data1, table.data2, table.line, +				      table.blink1, table.blink2, table.ilink1, +				      table.ilink2, table.bcon_time, table.gp1, +				      table.gp2, table.gp3, table.ucode_ver, +				      table.hw_ver, table.brd_ver); +	IWL_ERR(priv, "0x%08X | %-28s\n", table.error_id, +		desc_lookup(table.error_id)); +	IWL_ERR(priv, "0x%08X | uPc\n", table.pc); +	IWL_ERR(priv, "0x%08X | branchlink1\n", table.blink1); +	IWL_ERR(priv, "0x%08X | branchlink2\n", table.blink2); +	IWL_ERR(priv, "0x%08X | interruptlink1\n", table.ilink1); +	IWL_ERR(priv, "0x%08X | interruptlink2\n", table.ilink2); +	IWL_ERR(priv, "0x%08X | data1\n", table.data1); +	IWL_ERR(priv, "0x%08X | data2\n", table.data2); +	IWL_ERR(priv, "0x%08X | line\n", table.line); +	IWL_ERR(priv, "0x%08X | beacon time\n", table.bcon_time); +	IWL_ERR(priv, "0x%08X | tsf low\n", table.tsf_low); +	IWL_ERR(priv, "0x%08X | tsf hi\n", table.tsf_hi); +	IWL_ERR(priv, "0x%08X | time gp1\n", table.gp1); +	IWL_ERR(priv, "0x%08X | time gp2\n", table.gp2); +	IWL_ERR(priv, "0x%08X | time gp3\n", table.gp3); +	IWL_ERR(priv, "0x%08X | uCode version\n", table.ucode_ver); +	IWL_ERR(priv, "0x%08X | hw version\n", table.hw_ver); +	IWL_ERR(priv, "0x%08X | board version\n", table.brd_ver); +	IWL_ERR(priv, "0x%08X | hcmd\n", table.hcmd); +	IWL_ERR(priv, "0x%08X | isr0\n", table.isr0); +	IWL_ERR(priv, "0x%08X | isr1\n", table.isr1); +	IWL_ERR(priv, "0x%08X | isr2\n", table.isr2); +	IWL_ERR(priv, "0x%08X | isr3\n", table.isr3); +	IWL_ERR(priv, "0x%08X | isr4\n", table.isr4); +	IWL_ERR(priv, "0x%08X | isr_pref\n", table.isr_pref); +	IWL_ERR(priv, "0x%08X | wait_event\n", table.wait_event); +	IWL_ERR(priv, "0x%08X | l2p_control\n", table.l2p_control); +	IWL_ERR(priv, "0x%08X | l2p_duration\n", table.l2p_duration); +	IWL_ERR(priv, "0x%08X | l2p_mhvalid\n", table.l2p_mhvalid); +	IWL_ERR(priv, "0x%08X | l2p_addr_match\n", table.l2p_addr_match); +	IWL_ERR(priv, "0x%08X | lmpm_pmg_sel\n", table.lmpm_pmg_sel); +	IWL_ERR(priv, "0x%08X | timestamp\n", table.u_timestamp); +	IWL_ERR(priv, "0x%08X | flow_handler\n", table.flow_handler); +} + +#define EVENT_START_OFFSET  (4 * sizeof(u32)) + +/** + * iwl_print_event_log - Dump error event log to syslog + * + */ +static int iwl_print_event_log(struct iwl_priv *priv, u32 start_idx, +			       u32 num_events, u32 mode, +			       int pos, char **buf, size_t bufsz) +{ +	u32 i; +	u32 base;       /* SRAM byte address of event log header */ +	u32 event_size; /* 2 u32s, or 3 u32s if timestamp recorded */ +	u32 ptr;        /* SRAM byte address of log data */ +	u32 ev, time, data; /* event log data */ +	unsigned long reg_flags; + +	struct iwl_trans *trans = priv->trans; + +	if (num_events == 0) +		return pos; + +	base = priv->device_pointers.log_event_table; +	if (priv->cur_ucode == IWL_UCODE_INIT) { +		if (!base) +			base = priv->fw->init_evtlog_ptr; +	} else { +		if (!base) +			base = priv->fw->inst_evtlog_ptr; +	} + +	if (mode == 0) +		event_size = 2 * sizeof(u32); +	else +		event_size = 3 * sizeof(u32); + +	ptr = base + EVENT_START_OFFSET + (start_idx * event_size); + +	/* Make sure device is powered up for SRAM reads */ +	if (!iwl_trans_grab_nic_access(trans, false, ®_flags)) +		return pos; + +	/* Set starting address; reads will auto-increment */ +	iwl_write32(trans, HBUS_TARG_MEM_RADDR, ptr); + +	/* "time" is actually "data" for mode 0 (no timestamp). +	* place event id # at far right for easier visual parsing. */ +	for (i = 0; i < num_events; i++) { +		ev = iwl_read32(trans, HBUS_TARG_MEM_RDAT); +		time = iwl_read32(trans, HBUS_TARG_MEM_RDAT); +		if (mode == 0) { +			/* data, ev */ +			if (bufsz) { +				pos += scnprintf(*buf + pos, bufsz - pos, +						"EVT_LOG:0x%08x:%04u\n", +						time, ev); +			} else { +				trace_iwlwifi_dev_ucode_event(trans->dev, 0, +					time, ev); +				IWL_ERR(priv, "EVT_LOG:0x%08x:%04u\n", +					time, ev); +			} +		} else { +			data = iwl_read32(trans, HBUS_TARG_MEM_RDAT); +			if (bufsz) { +				pos += scnprintf(*buf + pos, bufsz - pos, +						"EVT_LOGT:%010u:0x%08x:%04u\n", +						 time, data, ev); +			} else { +				IWL_ERR(priv, "EVT_LOGT:%010u:0x%08x:%04u\n", +					time, data, ev); +				trace_iwlwifi_dev_ucode_event(trans->dev, time, +					data, ev); +			} +		} +	} + +	/* Allow device to power down */ +	iwl_trans_release_nic_access(trans, ®_flags); +	return pos; +} + +/** + * iwl_print_last_event_logs - Dump the newest # of event log to syslog + */ +static int iwl_print_last_event_logs(struct iwl_priv *priv, u32 capacity, +				    u32 num_wraps, u32 next_entry, +				    u32 size, u32 mode, +				    int pos, char **buf, size_t bufsz) +{ +	/* +	 * display the newest DEFAULT_LOG_ENTRIES entries +	 * i.e the entries just before the next ont that uCode would fill. +	 */ +	if (num_wraps) { +		if (next_entry < size) { +			pos = iwl_print_event_log(priv, +						capacity - (size - next_entry), +						size - next_entry, mode, +						pos, buf, bufsz); +			pos = iwl_print_event_log(priv, 0, +						  next_entry, mode, +						  pos, buf, bufsz); +		} else +			pos = iwl_print_event_log(priv, next_entry - size, +						  size, mode, pos, buf, bufsz); +	} else { +		if (next_entry < size) { +			pos = iwl_print_event_log(priv, 0, next_entry, +						  mode, pos, buf, bufsz); +		} else { +			pos = iwl_print_event_log(priv, next_entry - size, +						  size, mode, pos, buf, bufsz); +		} +	} +	return pos; +} + +#define DEFAULT_DUMP_EVENT_LOG_ENTRIES (20) + +int iwl_dump_nic_event_log(struct iwl_priv *priv, bool full_log, +			    char **buf) +{ +	u32 base;       /* SRAM byte address of event log header */ +	u32 capacity;   /* event log capacity in # entries */ +	u32 mode;       /* 0 - no timestamp, 1 - timestamp recorded */ +	u32 num_wraps;  /* # times uCode wrapped to top of log */ +	u32 next_entry; /* index of next entry to be written by uCode */ +	u32 size;       /* # entries that we'll print */ +	u32 logsize; +	int pos = 0; +	size_t bufsz = 0; +	struct iwl_trans *trans = priv->trans; + +	base = priv->device_pointers.log_event_table; +	if (priv->cur_ucode == IWL_UCODE_INIT) { +		logsize = priv->fw->init_evtlog_size; +		if (!base) +			base = priv->fw->init_evtlog_ptr; +	} else { +		logsize = priv->fw->inst_evtlog_size; +		if (!base) +			base = priv->fw->inst_evtlog_ptr; +	} + +	if (!iwlagn_hw_valid_rtc_data_addr(base)) { +		IWL_ERR(priv, +			"Invalid event log pointer 0x%08X for %s uCode\n", +			base, +			(priv->cur_ucode == IWL_UCODE_INIT) +					? "Init" : "RT"); +		return -EINVAL; +	} + +	/* event log header */ +	capacity = iwl_trans_read_mem32(trans, base); +	mode = iwl_trans_read_mem32(trans, base + (1 * sizeof(u32))); +	num_wraps = iwl_trans_read_mem32(trans, base + (2 * sizeof(u32))); +	next_entry = iwl_trans_read_mem32(trans, base + (3 * sizeof(u32))); + +	if (capacity > logsize) { +		IWL_ERR(priv, "Log capacity %d is bogus, limit to %d " +			"entries\n", capacity, logsize); +		capacity = logsize; +	} + +	if (next_entry > logsize) { +		IWL_ERR(priv, "Log write index %d is bogus, limit to %d\n", +			next_entry, logsize); +		next_entry = logsize; +	} + +	size = num_wraps ? capacity : next_entry; + +	/* bail out if nothing in log */ +	if (size == 0) { +		IWL_ERR(trans, "Start IWL Event Log Dump: nothing in log\n"); +		return pos; +	} + +	if (!(iwl_have_debug_level(IWL_DL_FW_ERRORS)) && !full_log) +		size = (size > DEFAULT_DUMP_EVENT_LOG_ENTRIES) +			? DEFAULT_DUMP_EVENT_LOG_ENTRIES : size; +	IWL_ERR(priv, "Start IWL Event Log Dump: display last %u entries\n", +		size); + +#ifdef CONFIG_IWLWIFI_DEBUG +	if (buf) { +		if (full_log) +			bufsz = capacity * 48; +		else +			bufsz = size * 48; +		*buf = kmalloc(bufsz, GFP_KERNEL); +		if (!*buf) +			return -ENOMEM; +	} +	if (iwl_have_debug_level(IWL_DL_FW_ERRORS) || full_log) { +		/* +		 * if uCode has wrapped back to top of log, +		 * start at the oldest entry, +		 * i.e the next one that uCode would fill. +		 */ +		if (num_wraps) +			pos = iwl_print_event_log(priv, next_entry, +						capacity - next_entry, mode, +						pos, buf, bufsz); +		/* (then/else) start at top of log */ +		pos = iwl_print_event_log(priv, 0, +					  next_entry, mode, pos, buf, bufsz); +	} else +		pos = iwl_print_last_event_logs(priv, capacity, num_wraps, +						next_entry, size, mode, +						pos, buf, bufsz); +#else +	pos = iwl_print_last_event_logs(priv, capacity, num_wraps, +					next_entry, size, mode, +					pos, buf, bufsz); +#endif +	return pos; +} + +static void iwlagn_fw_error(struct iwl_priv *priv, bool ondemand) +{ +	unsigned int reload_msec; +	unsigned long reload_jiffies; + +	if (iwl_have_debug_level(IWL_DL_FW_ERRORS)) +		iwl_print_rx_config_cmd(priv, IWL_RXON_CTX_BSS); + +	/* uCode is no longer loaded. */ +	priv->ucode_loaded = false; + +	/* Set the FW error flag -- cleared on iwl_down */ +	set_bit(STATUS_FW_ERROR, &priv->status); + +	iwl_abort_notification_waits(&priv->notif_wait); + +	/* Keep the restart process from trying to send host +	 * commands by clearing the ready bit */ +	clear_bit(STATUS_READY, &priv->status); + +	if (!ondemand) { +		/* +		 * If firmware keep reloading, then it indicate something +		 * serious wrong and firmware having problem to recover +		 * from it. Instead of keep trying which will fill the syslog +		 * and hang the system, let's just stop it +		 */ +		reload_jiffies = jiffies; +		reload_msec = jiffies_to_msecs((long) reload_jiffies - +					(long) priv->reload_jiffies); +		priv->reload_jiffies = reload_jiffies; +		if (reload_msec <= IWL_MIN_RELOAD_DURATION) { +			priv->reload_count++; +			if (priv->reload_count >= IWL_MAX_CONTINUE_RELOAD_CNT) { +				IWL_ERR(priv, "BUG_ON, Stop restarting\n"); +				return; +			} +		} else +			priv->reload_count = 0; +	} + +	if (!test_bit(STATUS_EXIT_PENDING, &priv->status)) { +		if (iwlwifi_mod_params.restart_fw) { +			IWL_DEBUG_FW_ERRORS(priv, +				  "Restarting adapter due to uCode error.\n"); +			queue_work(priv->workqueue, &priv->restart); +		} else +			IWL_DEBUG_FW_ERRORS(priv, +				  "Detected FW error, but not restarting\n"); +	} +} + +static void iwl_nic_error(struct iwl_op_mode *op_mode) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); + +	IWL_ERR(priv, "Loaded firmware version: %s\n", +		priv->fw->fw_version); + +	iwl_dump_nic_error_log(priv); +	iwl_dump_nic_event_log(priv, false, NULL); + +	iwlagn_fw_error(priv, false); +} + +static void iwl_cmd_queue_full(struct iwl_op_mode *op_mode) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); + +	if (!iwl_check_for_ct_kill(priv)) { +		IWL_ERR(priv, "Restarting adapter queue is full\n"); +		iwlagn_fw_error(priv, false); +	} +} + +#define EEPROM_RF_CONFIG_TYPE_MAX      0x3 + +static void iwl_nic_config(struct iwl_op_mode *op_mode) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); + +	/* SKU Control */ +	iwl_trans_set_bits_mask(priv->trans, CSR_HW_IF_CONFIG_REG, +				CSR_HW_IF_CONFIG_REG_MSK_MAC_DASH | +				CSR_HW_IF_CONFIG_REG_MSK_MAC_STEP, +				(CSR_HW_REV_STEP(priv->trans->hw_rev) << +					CSR_HW_IF_CONFIG_REG_POS_MAC_STEP) | +				(CSR_HW_REV_DASH(priv->trans->hw_rev) << +					CSR_HW_IF_CONFIG_REG_POS_MAC_DASH)); + +	/* write radio config values to register */ +	if (priv->nvm_data->radio_cfg_type <= EEPROM_RF_CONFIG_TYPE_MAX) { +		u32 reg_val = +			priv->nvm_data->radio_cfg_type << +				CSR_HW_IF_CONFIG_REG_POS_PHY_TYPE | +			priv->nvm_data->radio_cfg_step << +				CSR_HW_IF_CONFIG_REG_POS_PHY_STEP | +			priv->nvm_data->radio_cfg_dash << +				CSR_HW_IF_CONFIG_REG_POS_PHY_DASH; + +		iwl_trans_set_bits_mask(priv->trans, CSR_HW_IF_CONFIG_REG, +					CSR_HW_IF_CONFIG_REG_MSK_PHY_TYPE | +					CSR_HW_IF_CONFIG_REG_MSK_PHY_STEP | +					CSR_HW_IF_CONFIG_REG_MSK_PHY_DASH, +					reg_val); + +		IWL_INFO(priv, "Radio type=0x%x-0x%x-0x%x\n", +			 priv->nvm_data->radio_cfg_type, +			 priv->nvm_data->radio_cfg_step, +			 priv->nvm_data->radio_cfg_dash); +	} else { +		WARN_ON(1); +	} + +	/* set CSR_HW_CONFIG_REG for uCode use */ +	iwl_set_bit(priv->trans, CSR_HW_IF_CONFIG_REG, +		    CSR_HW_IF_CONFIG_REG_BIT_RADIO_SI | +		    CSR_HW_IF_CONFIG_REG_BIT_MAC_SI); + +	/* W/A : NIC is stuck in a reset state after Early PCIe power off +	 * (PCIe power is lost before PERST# is asserted), +	 * causing ME FW to lose ownership and not being able to obtain it back. +	 */ +	iwl_set_bits_mask_prph(priv->trans, APMG_PS_CTRL_REG, +			       APMG_PS_CTRL_EARLY_PWR_OFF_RESET_DIS, +			       ~APMG_PS_CTRL_EARLY_PWR_OFF_RESET_DIS); + +	if (priv->lib->nic_config) +		priv->lib->nic_config(priv); +} + +static void iwl_wimax_active(struct iwl_op_mode *op_mode) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); + +	clear_bit(STATUS_READY, &priv->status); +	IWL_ERR(priv, "RF is used by WiMAX\n"); +} + +static void iwl_stop_sw_queue(struct iwl_op_mode *op_mode, int queue) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); +	int mq = priv->queue_to_mac80211[queue]; + +	if (WARN_ON_ONCE(mq == IWL_INVALID_MAC80211_QUEUE)) +		return; + +	if (atomic_inc_return(&priv->queue_stop_count[mq]) > 1) { +		IWL_DEBUG_TX_QUEUES(priv, +			"queue %d (mac80211 %d) already stopped\n", +			queue, mq); +		return; +	} + +	set_bit(mq, &priv->transport_queue_stop); +	ieee80211_stop_queue(priv->hw, mq); +} + +static void iwl_wake_sw_queue(struct iwl_op_mode *op_mode, int queue) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); +	int mq = priv->queue_to_mac80211[queue]; + +	if (WARN_ON_ONCE(mq == IWL_INVALID_MAC80211_QUEUE)) +		return; + +	if (atomic_dec_return(&priv->queue_stop_count[mq]) > 0) { +		IWL_DEBUG_TX_QUEUES(priv, +			"queue %d (mac80211 %d) already awake\n", +			queue, mq); +		return; +	} + +	clear_bit(mq, &priv->transport_queue_stop); + +	if (!priv->passive_no_rx) +		ieee80211_wake_queue(priv->hw, mq); +} + +void iwlagn_lift_passive_no_rx(struct iwl_priv *priv) +{ +	int mq; + +	if (!priv->passive_no_rx) +		return; + +	for (mq = 0; mq < IWLAGN_FIRST_AMPDU_QUEUE; mq++) { +		if (!test_bit(mq, &priv->transport_queue_stop)) { +			IWL_DEBUG_TX_QUEUES(priv, "Wake queue %d\n", mq); +			ieee80211_wake_queue(priv->hw, mq); +		} else { +			IWL_DEBUG_TX_QUEUES(priv, "Don't wake queue %d\n", mq); +		} +	} + +	priv->passive_no_rx = false; +} + +static void iwl_free_skb(struct iwl_op_mode *op_mode, struct sk_buff *skb) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); +	struct ieee80211_tx_info *info; + +	info = IEEE80211_SKB_CB(skb); +	iwl_trans_free_tx_cmd(priv->trans, info->driver_data[1]); +	ieee80211_free_txskb(priv->hw, skb); +} + +static bool iwl_set_hw_rfkill_state(struct iwl_op_mode *op_mode, bool state) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); + +	if (state) +		set_bit(STATUS_RF_KILL_HW, &priv->status); +	else +		clear_bit(STATUS_RF_KILL_HW, &priv->status); + +	wiphy_rfkill_set_hw_state(priv->hw->wiphy, state); + +	return false; +} + +static void iwl_napi_add(struct iwl_op_mode *op_mode, +			 struct napi_struct *napi, +			 struct net_device *napi_dev, +			 int (*poll)(struct napi_struct *, int), +			 int weight) +{ +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); + +	ieee80211_napi_add(priv->hw, napi, napi_dev, poll, weight); +} + +static const struct iwl_op_mode_ops iwl_dvm_ops = { +	.start = iwl_op_mode_dvm_start, +	.stop = iwl_op_mode_dvm_stop, +	.rx = iwl_rx_dispatch, +	.queue_full = iwl_stop_sw_queue, +	.queue_not_full = iwl_wake_sw_queue, +	.hw_rf_kill = iwl_set_hw_rfkill_state, +	.free_skb = iwl_free_skb, +	.nic_error = iwl_nic_error, +	.cmd_queue_full = iwl_cmd_queue_full, +	.nic_config = iwl_nic_config, +	.wimax_active = iwl_wimax_active, +	.napi_add = iwl_napi_add, +}; + +/***************************************************************************** + * + * driver and module entry point + * + *****************************************************************************/ +static int __init iwl_init(void) +{ + +	int ret; + +	ret = iwlagn_rate_control_register(); +	if (ret) { +		pr_err("Unable to register rate control algorithm: %d\n", ret); +		return ret; +	} + +	ret = iwl_opmode_register("iwldvm", &iwl_dvm_ops); +	if (ret) { +		pr_err("Unable to register op_mode: %d\n", ret); +		iwlagn_rate_control_unregister(); +	} + +	return ret; +} +module_init(iwl_init); + +static void __exit iwl_exit(void) +{ +	iwl_opmode_deregister("iwldvm"); +	iwlagn_rate_control_unregister(); +} +module_exit(iwl_exit); diff --git a/drivers/net/wireless/iwlwifi/dvm/power.c b/drivers/net/wireless/iwlwifi/dvm/power.c new file mode 100644 index 00000000000..f2c1439566b --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/power.c @@ -0,0 +1,386 @@ +/****************************************************************************** + * + * Copyright(c) 2007 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portions of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + *****************************************************************************/ + + +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/slab.h> +#include <net/mac80211.h> +#include "iwl-io.h" +#include "iwl-debug.h" +#include "iwl-trans.h" +#include "iwl-modparams.h" +#include "dev.h" +#include "agn.h" +#include "commands.h" +#include "power.h" + +/* + * Setting power level allows the card to go to sleep when not busy. + * + * We calculate a sleep command based on the required latency, which + * we get from mac80211. In order to handle thermal throttling, we can + * also use pre-defined power levels. + */ + +/* + * This defines the old power levels. They are still used by default + * (level 1) and for thermal throttle (levels 3 through 5) + */ + +struct iwl_power_vec_entry { +	struct iwl_powertable_cmd cmd; +	u8 no_dtim;	/* number of skip dtim */ +}; + +#define IWL_DTIM_RANGE_0_MAX	2 +#define IWL_DTIM_RANGE_1_MAX	10 + +#define NOSLP cpu_to_le16(0), 0, 0 +#define SLP IWL_POWER_DRIVER_ALLOW_SLEEP_MSK, 0, 0 +#define ASLP (IWL_POWER_POWER_SAVE_ENA_MSK |	\ +		IWL_POWER_POWER_MANAGEMENT_ENA_MSK | \ +		IWL_POWER_ADVANCE_PM_ENA_MSK) +#define ASLP_TOUT(T) cpu_to_le32(T) +#define TU_TO_USEC 1024 +#define SLP_TOUT(T) cpu_to_le32((T) * TU_TO_USEC) +#define SLP_VEC(X0, X1, X2, X3, X4) {cpu_to_le32(X0), \ +				     cpu_to_le32(X1), \ +				     cpu_to_le32(X2), \ +				     cpu_to_le32(X3), \ +				     cpu_to_le32(X4)} +/* default power management (not Tx power) table values */ +/* for DTIM period 0 through IWL_DTIM_RANGE_0_MAX */ +/* DTIM 0 - 2 */ +static const struct iwl_power_vec_entry range_0[IWL_POWER_NUM] = { +	{{SLP, SLP_TOUT(200), SLP_TOUT(500), SLP_VEC(1, 1, 2, 2, 0xFF)}, 0}, +	{{SLP, SLP_TOUT(200), SLP_TOUT(300), SLP_VEC(1, 2, 2, 2, 0xFF)}, 0}, +	{{SLP, SLP_TOUT(50), SLP_TOUT(100), SLP_VEC(2, 2, 2, 2, 0xFF)}, 0}, +	{{SLP, SLP_TOUT(50), SLP_TOUT(25), SLP_VEC(2, 2, 4, 4, 0xFF)}, 1}, +	{{SLP, SLP_TOUT(25), SLP_TOUT(25), SLP_VEC(2, 2, 4, 6, 0xFF)}, 2} +}; + + +/* for DTIM period IWL_DTIM_RANGE_0_MAX + 1 through IWL_DTIM_RANGE_1_MAX */ +/* DTIM 3 - 10 */ +static const struct iwl_power_vec_entry range_1[IWL_POWER_NUM] = { +	{{SLP, SLP_TOUT(200), SLP_TOUT(500), SLP_VEC(1, 2, 3, 4, 4)}, 0}, +	{{SLP, SLP_TOUT(200), SLP_TOUT(300), SLP_VEC(1, 2, 3, 4, 7)}, 0}, +	{{SLP, SLP_TOUT(50), SLP_TOUT(100), SLP_VEC(2, 4, 6, 7, 9)}, 0}, +	{{SLP, SLP_TOUT(50), SLP_TOUT(25), SLP_VEC(2, 4, 6, 9, 10)}, 1}, +	{{SLP, SLP_TOUT(25), SLP_TOUT(25), SLP_VEC(2, 4, 6, 10, 10)}, 2} +}; + +/* for DTIM period > IWL_DTIM_RANGE_1_MAX */ +/* DTIM 11 - */ +static const struct iwl_power_vec_entry range_2[IWL_POWER_NUM] = { +	{{SLP, SLP_TOUT(200), SLP_TOUT(500), SLP_VEC(1, 2, 3, 4, 0xFF)}, 0}, +	{{SLP, SLP_TOUT(200), SLP_TOUT(300), SLP_VEC(2, 4, 6, 7, 0xFF)}, 0}, +	{{SLP, SLP_TOUT(50), SLP_TOUT(100), SLP_VEC(2, 7, 9, 9, 0xFF)}, 0}, +	{{SLP, SLP_TOUT(50), SLP_TOUT(25), SLP_VEC(2, 7, 9, 9, 0xFF)}, 0}, +	{{SLP, SLP_TOUT(25), SLP_TOUT(25), SLP_VEC(4, 7, 10, 10, 0xFF)}, 0} +}; + +/* advance power management */ +/* DTIM 0 - 2 */ +static const struct iwl_power_vec_entry apm_range_0[IWL_POWER_NUM] = { +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 6, 8, 0xFF), ASLP_TOUT(2)}, 2} +}; + + +/* for DTIM period IWL_DTIM_RANGE_0_MAX + 1 through IWL_DTIM_RANGE_1_MAX */ +/* DTIM 3 - 10 */ +static const struct iwl_power_vec_entry apm_range_1[IWL_POWER_NUM] = { +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 6, 8, 0xFF), 0}, 2} +}; + +/* for DTIM period > IWL_DTIM_RANGE_1_MAX */ +/* DTIM 11 - */ +static const struct iwl_power_vec_entry apm_range_2[IWL_POWER_NUM] = { +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 4, 6, 0xFF), 0}, 0}, +	{{ASLP, 0, 0, ASLP_TOUT(50), ASLP_TOUT(50), +		SLP_VEC(1, 2, 6, 8, 0xFF), ASLP_TOUT(2)}, 2} +}; + +static void iwl_static_sleep_cmd(struct iwl_priv *priv, +				 struct iwl_powertable_cmd *cmd, +				 enum iwl_power_level lvl, int period) +{ +	const struct iwl_power_vec_entry *table; +	int max_sleep[IWL_POWER_VEC_SIZE] = { 0 }; +	int i; +	u8 skip; +	u32 slp_itrvl; + +	if (priv->lib->adv_pm) { +		table = apm_range_2; +		if (period <= IWL_DTIM_RANGE_1_MAX) +			table = apm_range_1; +		if (period <= IWL_DTIM_RANGE_0_MAX) +			table = apm_range_0; +	} else { +		table = range_2; +		if (period <= IWL_DTIM_RANGE_1_MAX) +			table = range_1; +		if (period <= IWL_DTIM_RANGE_0_MAX) +			table = range_0; +	} + +	if (WARN_ON(lvl < 0 || lvl >= IWL_POWER_NUM)) +		memset(cmd, 0, sizeof(*cmd)); +	else +		*cmd = table[lvl].cmd; + +	if (period == 0) { +		skip = 0; +		period = 1; +		for (i = 0; i < IWL_POWER_VEC_SIZE; i++) +			max_sleep[i] =  1; + +	} else { +		skip = table[lvl].no_dtim; +		for (i = 0; i < IWL_POWER_VEC_SIZE; i++) +			max_sleep[i] = le32_to_cpu(cmd->sleep_interval[i]); +		max_sleep[IWL_POWER_VEC_SIZE - 1] = skip + 1; +	} + +	slp_itrvl = le32_to_cpu(cmd->sleep_interval[IWL_POWER_VEC_SIZE - 1]); +	/* figure out the listen interval based on dtim period and skip */ +	if (slp_itrvl == 0xFF) +		cmd->sleep_interval[IWL_POWER_VEC_SIZE - 1] = +			cpu_to_le32(period * (skip + 1)); + +	slp_itrvl = le32_to_cpu(cmd->sleep_interval[IWL_POWER_VEC_SIZE - 1]); +	if (slp_itrvl > period) +		cmd->sleep_interval[IWL_POWER_VEC_SIZE - 1] = +			cpu_to_le32((slp_itrvl / period) * period); + +	if (skip) +		cmd->flags |= IWL_POWER_SLEEP_OVER_DTIM_MSK; +	else +		cmd->flags &= ~IWL_POWER_SLEEP_OVER_DTIM_MSK; + +	if (priv->cfg->base_params->shadow_reg_enable) +		cmd->flags |= IWL_POWER_SHADOW_REG_ENA; +	else +		cmd->flags &= ~IWL_POWER_SHADOW_REG_ENA; + +	if (iwl_advanced_bt_coexist(priv)) { +		if (!priv->lib->bt_params->bt_sco_disable) +			cmd->flags |= IWL_POWER_BT_SCO_ENA; +		else +			cmd->flags &= ~IWL_POWER_BT_SCO_ENA; +	} + + +	slp_itrvl = le32_to_cpu(cmd->sleep_interval[IWL_POWER_VEC_SIZE - 1]); +	if (slp_itrvl > IWL_CONN_MAX_LISTEN_INTERVAL) +		cmd->sleep_interval[IWL_POWER_VEC_SIZE - 1] = +			cpu_to_le32(IWL_CONN_MAX_LISTEN_INTERVAL); + +	/* enforce max sleep interval */ +	for (i = IWL_POWER_VEC_SIZE - 1; i >= 0 ; i--) { +		if (le32_to_cpu(cmd->sleep_interval[i]) > +		    (max_sleep[i] * period)) +			cmd->sleep_interval[i] = +				cpu_to_le32(max_sleep[i] * period); +		if (i != (IWL_POWER_VEC_SIZE - 1)) { +			if (le32_to_cpu(cmd->sleep_interval[i]) > +			    le32_to_cpu(cmd->sleep_interval[i+1])) +				cmd->sleep_interval[i] = +					cmd->sleep_interval[i+1]; +		} +	} + +	if (priv->power_data.bus_pm) +		cmd->flags |= IWL_POWER_PCI_PM_MSK; +	else +		cmd->flags &= ~IWL_POWER_PCI_PM_MSK; + +	IWL_DEBUG_POWER(priv, "numSkipDtim = %u, dtimPeriod = %d\n", +			skip, period); +	/* The power level here is 0-4 (used as array index), but user expects +	to see 1-5 (according to spec). */ +	IWL_DEBUG_POWER(priv, "Sleep command for index %d\n", lvl + 1); +} + +static void iwl_power_sleep_cam_cmd(struct iwl_priv *priv, +				    struct iwl_powertable_cmd *cmd) +{ +	memset(cmd, 0, sizeof(*cmd)); + +	if (priv->power_data.bus_pm) +		cmd->flags |= IWL_POWER_PCI_PM_MSK; + +	IWL_DEBUG_POWER(priv, "Sleep command for CAM\n"); +} + +static int iwl_set_power(struct iwl_priv *priv, struct iwl_powertable_cmd *cmd) +{ +	IWL_DEBUG_POWER(priv, "Sending power/sleep command\n"); +	IWL_DEBUG_POWER(priv, "Flags value = 0x%08X\n", cmd->flags); +	IWL_DEBUG_POWER(priv, "Tx timeout = %u\n", le32_to_cpu(cmd->tx_data_timeout)); +	IWL_DEBUG_POWER(priv, "Rx timeout = %u\n", le32_to_cpu(cmd->rx_data_timeout)); +	IWL_DEBUG_POWER(priv, "Sleep interval vector = { %d , %d , %d , %d , %d }\n", +			le32_to_cpu(cmd->sleep_interval[0]), +			le32_to_cpu(cmd->sleep_interval[1]), +			le32_to_cpu(cmd->sleep_interval[2]), +			le32_to_cpu(cmd->sleep_interval[3]), +			le32_to_cpu(cmd->sleep_interval[4])); + +	return iwl_dvm_send_cmd_pdu(priv, POWER_TABLE_CMD, 0, +				sizeof(struct iwl_powertable_cmd), cmd); +} + +static void iwl_power_build_cmd(struct iwl_priv *priv, +				struct iwl_powertable_cmd *cmd) +{ +	bool enabled = priv->hw->conf.flags & IEEE80211_CONF_PS; +	int dtimper; + +	dtimper = priv->hw->conf.ps_dtim_period ?: 1; + +	if (priv->wowlan) +		iwl_static_sleep_cmd(priv, cmd, IWL_POWER_INDEX_5, dtimper); +	else if (!priv->lib->no_idle_support && +		 priv->hw->conf.flags & IEEE80211_CONF_IDLE) +		iwl_static_sleep_cmd(priv, cmd, IWL_POWER_INDEX_5, 20); +	else if (iwl_tt_is_low_power_state(priv)) { +		/* in thermal throttling low power state */ +		iwl_static_sleep_cmd(priv, cmd, +		    iwl_tt_current_power_mode(priv), dtimper); +	} else if (!enabled) +		iwl_power_sleep_cam_cmd(priv, cmd); +	else if (priv->power_data.debug_sleep_level_override >= 0) +		iwl_static_sleep_cmd(priv, cmd, +				     priv->power_data.debug_sleep_level_override, +				     dtimper); +	else { +		/* Note that the user parameter is 1-5 (according to spec), +		but we pass 0-4 because it acts as an array index. */ +		if (iwlwifi_mod_params.power_level > IWL_POWER_INDEX_1 && +		    iwlwifi_mod_params.power_level <= IWL_POWER_NUM) +			iwl_static_sleep_cmd(priv, cmd, +				iwlwifi_mod_params.power_level - 1, dtimper); +		else +			iwl_static_sleep_cmd(priv, cmd, +				IWL_POWER_INDEX_1, dtimper); +	} +} + +int iwl_power_set_mode(struct iwl_priv *priv, struct iwl_powertable_cmd *cmd, +		       bool force) +{ +	int ret; +	bool update_chains; + +	lockdep_assert_held(&priv->mutex); + +	/* Don't update the RX chain when chain noise calibration is running */ +	update_chains = priv->chain_noise_data.state == IWL_CHAIN_NOISE_DONE || +			priv->chain_noise_data.state == IWL_CHAIN_NOISE_ALIVE; + +	if (!memcmp(&priv->power_data.sleep_cmd, cmd, sizeof(*cmd)) && !force) +		return 0; + +	if (!iwl_is_ready_rf(priv)) +		return -EIO; + +	/* scan complete use sleep_power_next, need to be updated */ +	memcpy(&priv->power_data.sleep_cmd_next, cmd, sizeof(*cmd)); +	if (test_bit(STATUS_SCANNING, &priv->status) && !force) { +		IWL_DEBUG_INFO(priv, "Defer power set mode while scanning\n"); +		return 0; +	} + +	if (cmd->flags & IWL_POWER_DRIVER_ALLOW_SLEEP_MSK) +		iwl_dvm_set_pmi(priv, true); + +	ret = iwl_set_power(priv, cmd); +	if (!ret) { +		if (!(cmd->flags & IWL_POWER_DRIVER_ALLOW_SLEEP_MSK)) +			iwl_dvm_set_pmi(priv, false); + +		if (update_chains) +			iwl_update_chain_flags(priv); +		else +			IWL_DEBUG_POWER(priv, +					"Cannot update the power, chain noise " +					"calibration running: %d\n", +					priv->chain_noise_data.state); + +		memcpy(&priv->power_data.sleep_cmd, cmd, sizeof(*cmd)); +	} else +		IWL_ERR(priv, "set power fail, ret = %d\n", ret); + +	return ret; +} + +int iwl_power_update_mode(struct iwl_priv *priv, bool force) +{ +	struct iwl_powertable_cmd cmd; + +	iwl_power_build_cmd(priv, &cmd); +	return iwl_power_set_mode(priv, &cmd, force); +} + +/* initialize to default */ +void iwl_power_initialize(struct iwl_priv *priv) +{ +	priv->power_data.bus_pm = priv->trans->pm_support; + +	priv->power_data.debug_sleep_level_override = -1; + +	memset(&priv->power_data.sleep_cmd, 0, +		sizeof(priv->power_data.sleep_cmd)); +} diff --git a/drivers/net/wireless/iwlwifi/dvm/power.h b/drivers/net/wireless/iwlwifi/dvm/power.h new file mode 100644 index 00000000000..570d3a5e467 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/power.h @@ -0,0 +1,47 @@ +/****************************************************************************** + * + * Copyright(c) 2007 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portions of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + *****************************************************************************/ +#ifndef __iwl_power_setting_h__ +#define __iwl_power_setting_h__ + +#include "commands.h" + +struct iwl_power_mgr { +	struct iwl_powertable_cmd sleep_cmd; +	struct iwl_powertable_cmd sleep_cmd_next; +	int debug_sleep_level_override; +	bool bus_pm; +}; + +int iwl_power_set_mode(struct iwl_priv *priv, struct iwl_powertable_cmd *cmd, +		       bool force); +int iwl_power_update_mode(struct iwl_priv *priv, bool force); +void iwl_power_initialize(struct iwl_priv *priv); + +extern bool no_sleep_autoadjust; + +#endif  /* __iwl_power_setting_h__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/rs.c b/drivers/net/wireless/iwlwifi/dvm/rs.c new file mode 100644 index 00000000000..32b78a66536 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/rs.c @@ -0,0 +1,3346 @@ +/****************************************************************************** + * + * Copyright(c) 2005 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ +#include <linux/kernel.h> +#include <linux/skbuff.h> +#include <linux/slab.h> +#include <net/mac80211.h> + +#include <linux/netdevice.h> +#include <linux/etherdevice.h> +#include <linux/delay.h> + +#include <linux/workqueue.h> + +#include "dev.h" +#include "agn.h" + +#define RS_NAME "iwl-agn-rs" + +#define NUM_TRY_BEFORE_ANT_TOGGLE 1 +#define IWL_NUMBER_TRY      1 +#define IWL_HT_NUMBER_TRY   3 + +#define IWL_RATE_MAX_WINDOW		62	/* # tx in history window */ +#define IWL_RATE_MIN_FAILURE_TH		6	/* min failures to calc tpt */ +#define IWL_RATE_MIN_SUCCESS_TH		8	/* min successes to calc tpt */ + +/* max allowed rate miss before sync LQ cmd */ +#define IWL_MISSED_RATE_MAX		15 +/* max time to accum history 2 seconds */ +#define IWL_RATE_SCALE_FLUSH_INTVL   (3*HZ) + +static u8 rs_ht_to_legacy[] = { +	IWL_RATE_6M_INDEX, IWL_RATE_6M_INDEX, +	IWL_RATE_6M_INDEX, IWL_RATE_6M_INDEX, +	IWL_RATE_6M_INDEX, +	IWL_RATE_6M_INDEX, IWL_RATE_9M_INDEX, +	IWL_RATE_12M_INDEX, IWL_RATE_18M_INDEX, +	IWL_RATE_24M_INDEX, IWL_RATE_36M_INDEX, +	IWL_RATE_48M_INDEX, IWL_RATE_54M_INDEX +}; + +static const u8 ant_toggle_lookup[] = { +	/*ANT_NONE -> */ ANT_NONE, +	/*ANT_A    -> */ ANT_B, +	/*ANT_B    -> */ ANT_C, +	/*ANT_AB   -> */ ANT_BC, +	/*ANT_C    -> */ ANT_A, +	/*ANT_AC   -> */ ANT_AB, +	/*ANT_BC   -> */ ANT_AC, +	/*ANT_ABC  -> */ ANT_ABC, +}; + +#define IWL_DECLARE_RATE_INFO(r, s, ip, in, rp, rn, pp, np)    \ +	[IWL_RATE_##r##M_INDEX] = { IWL_RATE_##r##M_PLCP,      \ +				    IWL_RATE_SISO_##s##M_PLCP, \ +				    IWL_RATE_MIMO2_##s##M_PLCP,\ +				    IWL_RATE_MIMO3_##s##M_PLCP,\ +				    IWL_RATE_##r##M_IEEE,      \ +				    IWL_RATE_##ip##M_INDEX,    \ +				    IWL_RATE_##in##M_INDEX,    \ +				    IWL_RATE_##rp##M_INDEX,    \ +				    IWL_RATE_##rn##M_INDEX,    \ +				    IWL_RATE_##pp##M_INDEX,    \ +				    IWL_RATE_##np##M_INDEX } + +/* + * Parameter order: + *   rate, ht rate, prev rate, next rate, prev tgg rate, next tgg rate + * + * If there isn't a valid next or previous rate then INV is used which + * maps to IWL_RATE_INVALID + * + */ +const struct iwl_rate_info iwl_rates[IWL_RATE_COUNT] = { +	IWL_DECLARE_RATE_INFO(1, INV, INV, 2, INV, 2, INV, 2),    /*  1mbps */ +	IWL_DECLARE_RATE_INFO(2, INV, 1, 5, 1, 5, 1, 5),          /*  2mbps */ +	IWL_DECLARE_RATE_INFO(5, INV, 2, 6, 2, 11, 2, 11),        /*5.5mbps */ +	IWL_DECLARE_RATE_INFO(11, INV, 9, 12, 9, 12, 5, 18),      /* 11mbps */ +	IWL_DECLARE_RATE_INFO(6, 6, 5, 9, 5, 11, 5, 11),        /*  6mbps */ +	IWL_DECLARE_RATE_INFO(9, 6, 6, 11, 6, 11, 5, 11),       /*  9mbps */ +	IWL_DECLARE_RATE_INFO(12, 12, 11, 18, 11, 18, 11, 18),   /* 12mbps */ +	IWL_DECLARE_RATE_INFO(18, 18, 12, 24, 12, 24, 11, 24),   /* 18mbps */ +	IWL_DECLARE_RATE_INFO(24, 24, 18, 36, 18, 36, 18, 36),   /* 24mbps */ +	IWL_DECLARE_RATE_INFO(36, 36, 24, 48, 24, 48, 24, 48),   /* 36mbps */ +	IWL_DECLARE_RATE_INFO(48, 48, 36, 54, 36, 54, 36, 54),   /* 48mbps */ +	IWL_DECLARE_RATE_INFO(54, 54, 48, INV, 48, INV, 48, INV),/* 54mbps */ +	IWL_DECLARE_RATE_INFO(60, 60, 48, INV, 48, INV, 48, INV),/* 60mbps */ +	/* FIXME:RS:          ^^    should be INV (legacy) */ +}; + +static inline u8 rs_extract_rate(u32 rate_n_flags) +{ +	return (u8)(rate_n_flags & RATE_MCS_RATE_MSK); +} + +static int iwl_hwrate_to_plcp_idx(u32 rate_n_flags) +{ +	int idx = 0; + +	/* HT rate format */ +	if (rate_n_flags & RATE_MCS_HT_MSK) { +		idx = rs_extract_rate(rate_n_flags); + +		if (idx >= IWL_RATE_MIMO3_6M_PLCP) +			idx = idx - IWL_RATE_MIMO3_6M_PLCP; +		else if (idx >= IWL_RATE_MIMO2_6M_PLCP) +			idx = idx - IWL_RATE_MIMO2_6M_PLCP; + +		idx += IWL_FIRST_OFDM_RATE; +		/* skip 9M not supported in ht*/ +		if (idx >= IWL_RATE_9M_INDEX) +			idx += 1; +		if ((idx >= IWL_FIRST_OFDM_RATE) && (idx <= IWL_LAST_OFDM_RATE)) +			return idx; + +	/* legacy rate format, search for match in table */ +	} else { +		for (idx = 0; idx < ARRAY_SIZE(iwl_rates); idx++) +			if (iwl_rates[idx].plcp == +					rs_extract_rate(rate_n_flags)) +				return idx; +	} + +	return -1; +} + +static void rs_rate_scale_perform(struct iwl_priv *priv, +				   struct sk_buff *skb, +				   struct ieee80211_sta *sta, +				   struct iwl_lq_sta *lq_sta); +static void rs_fill_link_cmd(struct iwl_priv *priv, +			     struct iwl_lq_sta *lq_sta, u32 rate_n_flags); +static void rs_stay_in_table(struct iwl_lq_sta *lq_sta, bool force_search); + + +#ifdef CONFIG_MAC80211_DEBUGFS +static void rs_dbgfs_set_mcs(struct iwl_lq_sta *lq_sta, +			     u32 *rate_n_flags, int index); +#else +static void rs_dbgfs_set_mcs(struct iwl_lq_sta *lq_sta, +			     u32 *rate_n_flags, int index) +{} +#endif + +/** + * The following tables contain the expected throughput metrics for all rates + * + *	1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, 54, 60 MBits + * + * where invalid entries are zeros. + * + * CCK rates are only valid in legacy table and will only be used in G + * (2.4 GHz) band. + */ + +static const u16 expected_tpt_legacy[IWL_RATE_COUNT] = { +	7, 13, 35, 58, 40, 57, 72, 98, 121, 154, 177, 186, 0 +}; + +static const u16 expected_tpt_siso20MHz[4][IWL_RATE_COUNT] = { +	{0, 0, 0, 0, 42, 0,  76, 102, 124, 159, 183, 193, 202}, /* Norm */ +	{0, 0, 0, 0, 46, 0,  82, 110, 132, 168, 192, 202, 210}, /* SGI */ +	{0, 0, 0, 0, 47, 0,  91, 133, 171, 242, 305, 334, 362}, /* AGG */ +	{0, 0, 0, 0, 52, 0, 101, 145, 187, 264, 330, 361, 390}, /* AGG+SGI */ +}; + +static const u16 expected_tpt_siso40MHz[4][IWL_RATE_COUNT] = { +	{0, 0, 0, 0,  77, 0, 127, 160, 184, 220, 242, 250, 257}, /* Norm */ +	{0, 0, 0, 0,  83, 0, 135, 169, 193, 229, 250, 257, 264}, /* SGI */ +	{0, 0, 0, 0,  94, 0, 177, 249, 313, 423, 512, 550, 586}, /* AGG */ +	{0, 0, 0, 0, 104, 0, 193, 270, 338, 454, 545, 584, 620}, /* AGG+SGI */ +}; + +static const u16 expected_tpt_mimo2_20MHz[4][IWL_RATE_COUNT] = { +	{0, 0, 0, 0,  74, 0, 123, 155, 179, 214, 236, 244, 251}, /* Norm */ +	{0, 0, 0, 0,  81, 0, 131, 164, 188, 223, 243, 251, 257}, /* SGI */ +	{0, 0, 0, 0,  89, 0, 167, 235, 296, 402, 488, 526, 560}, /* AGG */ +	{0, 0, 0, 0,  97, 0, 182, 255, 320, 431, 520, 558, 593}, /* AGG+SGI*/ +}; + +static const u16 expected_tpt_mimo2_40MHz[4][IWL_RATE_COUNT] = { +	{0, 0, 0, 0, 123, 0, 182, 214, 235, 264, 279, 285, 289}, /* Norm */ +	{0, 0, 0, 0, 131, 0, 191, 222, 242, 270, 284, 289, 293}, /* SGI */ +	{0, 0, 0, 0, 171, 0, 305, 410, 496, 634, 731, 771, 805}, /* AGG */ +	{0, 0, 0, 0, 186, 0, 329, 439, 527, 667, 764, 803, 838}, /* AGG+SGI */ +}; + +static const u16 expected_tpt_mimo3_20MHz[4][IWL_RATE_COUNT] = { +	{0, 0, 0, 0,  99, 0, 153, 186, 208, 239, 256, 263, 268}, /* Norm */ +	{0, 0, 0, 0, 106, 0, 162, 194, 215, 246, 262, 268, 273}, /* SGI */ +	{0, 0, 0, 0, 134, 0, 249, 346, 431, 574, 685, 732, 775}, /* AGG */ +	{0, 0, 0, 0, 148, 0, 272, 376, 465, 614, 727, 775, 818}, /* AGG+SGI */ +}; + +static const u16 expected_tpt_mimo3_40MHz[4][IWL_RATE_COUNT] = { +	{0, 0, 0, 0, 152, 0, 211, 239, 255, 279,  290,  294,  297}, /* Norm */ +	{0, 0, 0, 0, 160, 0, 219, 245, 261, 284,  294,  297,  300}, /* SGI */ +	{0, 0, 0, 0, 254, 0, 443, 584, 695, 868,  984, 1030, 1070}, /* AGG */ +	{0, 0, 0, 0, 277, 0, 478, 624, 737, 911, 1026, 1070, 1109}, /* AGG+SGI */ +}; + +/* mbps, mcs */ +static const struct iwl_rate_mcs_info iwl_rate_mcs[IWL_RATE_COUNT] = { +	{  "1", "BPSK DSSS"}, +	{  "2", "QPSK DSSS"}, +	{"5.5", "BPSK CCK"}, +	{ "11", "QPSK CCK"}, +	{  "6", "BPSK 1/2"}, +	{  "9", "BPSK 1/2"}, +	{ "12", "QPSK 1/2"}, +	{ "18", "QPSK 3/4"}, +	{ "24", "16QAM 1/2"}, +	{ "36", "16QAM 3/4"}, +	{ "48", "64QAM 2/3"}, +	{ "54", "64QAM 3/4"}, +	{ "60", "64QAM 5/6"}, +}; + +#define MCS_INDEX_PER_STREAM	(8) + +static void rs_rate_scale_clear_window(struct iwl_rate_scale_data *window) +{ +	window->data = 0; +	window->success_counter = 0; +	window->success_ratio = IWL_INVALID_VALUE; +	window->counter = 0; +	window->average_tpt = IWL_INVALID_VALUE; +	window->stamp = 0; +} + +static inline u8 rs_is_valid_ant(u8 valid_antenna, u8 ant_type) +{ +	return (ant_type & valid_antenna) == ant_type; +} + +/* + *	removes the old data from the statistics. All data that is older than + *	TID_MAX_TIME_DIFF, will be deleted. + */ +static void rs_tl_rm_old_stats(struct iwl_traffic_load *tl, u32 curr_time) +{ +	/* The oldest age we want to keep */ +	u32 oldest_time = curr_time - TID_MAX_TIME_DIFF; + +	while (tl->queue_count && +	       (tl->time_stamp < oldest_time)) { +		tl->total -= tl->packet_count[tl->head]; +		tl->packet_count[tl->head] = 0; +		tl->time_stamp += TID_QUEUE_CELL_SPACING; +		tl->queue_count--; +		tl->head++; +		if (tl->head >= TID_QUEUE_MAX_SIZE) +			tl->head = 0; +	} +} + +/* + *	increment traffic load value for tid and also remove + *	any old values if passed the certain time period + */ +static u8 rs_tl_add_packet(struct iwl_lq_sta *lq_data, +			   struct ieee80211_hdr *hdr) +{ +	u32 curr_time = jiffies_to_msecs(jiffies); +	u32 time_diff; +	s32 index; +	struct iwl_traffic_load *tl = NULL; +	u8 tid; + +	if (ieee80211_is_data_qos(hdr->frame_control)) { +		u8 *qc = ieee80211_get_qos_ctl(hdr); +		tid = qc[0] & 0xf; +	} else +		return IWL_MAX_TID_COUNT; + +	if (unlikely(tid >= IWL_MAX_TID_COUNT)) +		return IWL_MAX_TID_COUNT; + +	tl = &lq_data->load[tid]; + +	curr_time -= curr_time % TID_ROUND_VALUE; + +	/* Happens only for the first packet. Initialize the data */ +	if (!(tl->queue_count)) { +		tl->total = 1; +		tl->time_stamp = curr_time; +		tl->queue_count = 1; +		tl->head = 0; +		tl->packet_count[0] = 1; +		return IWL_MAX_TID_COUNT; +	} + +	time_diff = TIME_WRAP_AROUND(tl->time_stamp, curr_time); +	index = time_diff / TID_QUEUE_CELL_SPACING; + +	/* The history is too long: remove data that is older than */ +	/* TID_MAX_TIME_DIFF */ +	if (index >= TID_QUEUE_MAX_SIZE) +		rs_tl_rm_old_stats(tl, curr_time); + +	index = (tl->head + index) % TID_QUEUE_MAX_SIZE; +	tl->packet_count[index] = tl->packet_count[index] + 1; +	tl->total = tl->total + 1; + +	if ((index + 1) > tl->queue_count) +		tl->queue_count = index + 1; + +	return tid; +} + +#ifdef CONFIG_MAC80211_DEBUGFS +/** + * Program the device to use fixed rate for frame transmit + * This is for debugging/testing only + * once the device start use fixed rate, we need to reload the module + * to being back the normal operation. + */ +static void rs_program_fix_rate(struct iwl_priv *priv, +				struct iwl_lq_sta *lq_sta) +{ +	struct iwl_station_priv *sta_priv = +		container_of(lq_sta, struct iwl_station_priv, lq_sta); +	struct iwl_rxon_context *ctx = sta_priv->ctx; + +	lq_sta->active_legacy_rate = 0x0FFF;	/* 1 - 54 MBits, includes CCK */ +	lq_sta->active_siso_rate   = 0x1FD0;	/* 6 - 60 MBits, no 9, no CCK */ +	lq_sta->active_mimo2_rate  = 0x1FD0;	/* 6 - 60 MBits, no 9, no CCK */ +	lq_sta->active_mimo3_rate  = 0x1FD0;	/* 6 - 60 MBits, no 9, no CCK */ + +	IWL_DEBUG_RATE(priv, "sta_id %d rate 0x%X\n", +		lq_sta->lq.sta_id, lq_sta->dbg_fixed_rate); + +	if (lq_sta->dbg_fixed_rate) { +		rs_fill_link_cmd(NULL, lq_sta, lq_sta->dbg_fixed_rate); +		iwl_send_lq_cmd(lq_sta->drv, ctx, &lq_sta->lq, CMD_ASYNC, +				false); +	} +} +#endif + +/* +	get the traffic load value for tid +*/ +static u32 rs_tl_get_load(struct iwl_lq_sta *lq_data, u8 tid) +{ +	u32 curr_time = jiffies_to_msecs(jiffies); +	u32 time_diff; +	s32 index; +	struct iwl_traffic_load *tl = NULL; + +	if (tid >= IWL_MAX_TID_COUNT) +		return 0; + +	tl = &(lq_data->load[tid]); + +	curr_time -= curr_time % TID_ROUND_VALUE; + +	if (!(tl->queue_count)) +		return 0; + +	time_diff = TIME_WRAP_AROUND(tl->time_stamp, curr_time); +	index = time_diff / TID_QUEUE_CELL_SPACING; + +	/* The history is too long: remove data that is older than */ +	/* TID_MAX_TIME_DIFF */ +	if (index >= TID_QUEUE_MAX_SIZE) +		rs_tl_rm_old_stats(tl, curr_time); + +	return tl->total; +} + +static int rs_tl_turn_on_agg_for_tid(struct iwl_priv *priv, +				      struct iwl_lq_sta *lq_data, u8 tid, +				      struct ieee80211_sta *sta) +{ +	int ret = -EAGAIN; +	u32 load; + +	/* +	 * Don't create TX aggregation sessions when in high +	 * BT traffic, as they would just be disrupted by BT. +	 */ +	if (priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH) { +		IWL_DEBUG_COEX(priv, +			       "BT traffic (%d), no aggregation allowed\n", +			       priv->bt_traffic_load); +		return ret; +	} + +	load = rs_tl_get_load(lq_data, tid); + +	IWL_DEBUG_HT(priv, "Starting Tx agg: STA: %pM tid: %d\n", +			sta->addr, tid); +	ret = ieee80211_start_tx_ba_session(sta, tid, 5000); +	if (ret == -EAGAIN) { +		/* +		 * driver and mac80211 is out of sync +		 * this might be cause by reloading firmware +		 * stop the tx ba session here +		 */ +		IWL_ERR(priv, "Fail start Tx agg on tid: %d\n", +			tid); +		ieee80211_stop_tx_ba_session(sta, tid); +	} +	return ret; +} + +static void rs_tl_turn_on_agg(struct iwl_priv *priv, u8 tid, +			      struct iwl_lq_sta *lq_data, +			      struct ieee80211_sta *sta) +{ +	if (tid < IWL_MAX_TID_COUNT) +		rs_tl_turn_on_agg_for_tid(priv, lq_data, tid, sta); +	else +		IWL_ERR(priv, "tid exceeds max TID count: %d/%d\n", +			tid, IWL_MAX_TID_COUNT); +} + +static inline int get_num_of_ant_from_rate(u32 rate_n_flags) +{ +	return !!(rate_n_flags & RATE_MCS_ANT_A_MSK) + +	       !!(rate_n_flags & RATE_MCS_ANT_B_MSK) + +	       !!(rate_n_flags & RATE_MCS_ANT_C_MSK); +} + +/* + * Static function to get the expected throughput from an iwl_scale_tbl_info + * that wraps a NULL pointer check + */ +static s32 get_expected_tpt(struct iwl_scale_tbl_info *tbl, int rs_index) +{ +	if (tbl->expected_tpt) +		return tbl->expected_tpt[rs_index]; +	return 0; +} + +/** + * rs_collect_tx_data - Update the success/failure sliding window + * + * We keep a sliding window of the last 62 packets transmitted + * at this rate.  window->data contains the bitmask of successful + * packets. + */ +static int rs_collect_tx_data(struct iwl_scale_tbl_info *tbl, +			      int scale_index, int attempts, int successes) +{ +	struct iwl_rate_scale_data *window = NULL; +	static const u64 mask = (((u64)1) << (IWL_RATE_MAX_WINDOW - 1)); +	s32 fail_count, tpt; + +	if (scale_index < 0 || scale_index >= IWL_RATE_COUNT) +		return -EINVAL; + +	/* Select window for current tx bit rate */ +	window = &(tbl->win[scale_index]); + +	/* Get expected throughput */ +	tpt = get_expected_tpt(tbl, scale_index); + +	/* +	 * Keep track of only the latest 62 tx frame attempts in this rate's +	 * history window; anything older isn't really relevant any more. +	 * If we have filled up the sliding window, drop the oldest attempt; +	 * if the oldest attempt (highest bit in bitmap) shows "success", +	 * subtract "1" from the success counter (this is the main reason +	 * we keep these bitmaps!). +	 */ +	while (attempts > 0) { +		if (window->counter >= IWL_RATE_MAX_WINDOW) { + +			/* remove earliest */ +			window->counter = IWL_RATE_MAX_WINDOW - 1; + +			if (window->data & mask) { +				window->data &= ~mask; +				window->success_counter--; +			} +		} + +		/* Increment frames-attempted counter */ +		window->counter++; + +		/* Shift bitmap by one frame to throw away oldest history */ +		window->data <<= 1; + +		/* Mark the most recent #successes attempts as successful */ +		if (successes > 0) { +			window->success_counter++; +			window->data |= 0x1; +			successes--; +		} + +		attempts--; +	} + +	/* Calculate current success ratio, avoid divide-by-0! */ +	if (window->counter > 0) +		window->success_ratio = 128 * (100 * window->success_counter) +					/ window->counter; +	else +		window->success_ratio = IWL_INVALID_VALUE; + +	fail_count = window->counter - window->success_counter; + +	/* Calculate average throughput, if we have enough history. */ +	if ((fail_count >= IWL_RATE_MIN_FAILURE_TH) || +	    (window->success_counter >= IWL_RATE_MIN_SUCCESS_TH)) +		window->average_tpt = (window->success_ratio * tpt + 64) / 128; +	else +		window->average_tpt = IWL_INVALID_VALUE; + +	/* Tag this window as having been updated */ +	window->stamp = jiffies; + +	return 0; +} + +/* + * Fill uCode API rate_n_flags field, based on "search" or "active" table. + */ +/* FIXME:RS:remove this function and put the flags statically in the table */ +static u32 rate_n_flags_from_tbl(struct iwl_priv *priv, +				 struct iwl_scale_tbl_info *tbl, +				 int index, u8 use_green) +{ +	u32 rate_n_flags = 0; + +	if (is_legacy(tbl->lq_type)) { +		rate_n_flags = iwl_rates[index].plcp; +		if (index >= IWL_FIRST_CCK_RATE && index <= IWL_LAST_CCK_RATE) +			rate_n_flags |= RATE_MCS_CCK_MSK; + +	} else if (is_Ht(tbl->lq_type)) { +		if (index > IWL_LAST_OFDM_RATE) { +			IWL_ERR(priv, "Invalid HT rate index %d\n", index); +			index = IWL_LAST_OFDM_RATE; +		} +		rate_n_flags = RATE_MCS_HT_MSK; + +		if (is_siso(tbl->lq_type)) +			rate_n_flags |=	iwl_rates[index].plcp_siso; +		else if (is_mimo2(tbl->lq_type)) +			rate_n_flags |=	iwl_rates[index].plcp_mimo2; +		else +			rate_n_flags |=	iwl_rates[index].plcp_mimo3; +	} else { +		IWL_ERR(priv, "Invalid tbl->lq_type %d\n", tbl->lq_type); +	} + +	rate_n_flags |= ((tbl->ant_type << RATE_MCS_ANT_POS) & +						     RATE_MCS_ANT_ABC_MSK); + +	if (is_Ht(tbl->lq_type)) { +		if (tbl->is_ht40) { +			if (tbl->is_dup) +				rate_n_flags |= RATE_MCS_DUP_MSK; +			else +				rate_n_flags |= RATE_MCS_HT40_MSK; +		} +		if (tbl->is_SGI) +			rate_n_flags |= RATE_MCS_SGI_MSK; + +		if (use_green) { +			rate_n_flags |= RATE_MCS_GF_MSK; +			if (is_siso(tbl->lq_type) && tbl->is_SGI) { +				rate_n_flags &= ~RATE_MCS_SGI_MSK; +				IWL_ERR(priv, "GF was set with SGI:SISO\n"); +			} +		} +	} +	return rate_n_flags; +} + +/* + * Interpret uCode API's rate_n_flags format, + * fill "search" or "active" tx mode table. + */ +static int rs_get_tbl_info_from_mcs(const u32 rate_n_flags, +				    enum ieee80211_band band, +				    struct iwl_scale_tbl_info *tbl, +				    int *rate_idx) +{ +	u32 ant_msk = (rate_n_flags & RATE_MCS_ANT_ABC_MSK); +	u8 num_of_ant = get_num_of_ant_from_rate(rate_n_flags); +	u8 mcs; + +	memset(tbl, 0, sizeof(struct iwl_scale_tbl_info)); +	*rate_idx = iwl_hwrate_to_plcp_idx(rate_n_flags); + +	if (*rate_idx  == IWL_RATE_INVALID) { +		*rate_idx = -1; +		return -EINVAL; +	} +	tbl->is_SGI = 0;	/* default legacy setup */ +	tbl->is_ht40 = 0; +	tbl->is_dup = 0; +	tbl->ant_type = (ant_msk >> RATE_MCS_ANT_POS); +	tbl->lq_type = LQ_NONE; +	tbl->max_search = IWL_MAX_SEARCH; + +	/* legacy rate format */ +	if (!(rate_n_flags & RATE_MCS_HT_MSK)) { +		if (num_of_ant == 1) { +			if (band == IEEE80211_BAND_5GHZ) +				tbl->lq_type = LQ_A; +			else +				tbl->lq_type = LQ_G; +		} +	/* HT rate format */ +	} else { +		if (rate_n_flags & RATE_MCS_SGI_MSK) +			tbl->is_SGI = 1; + +		if ((rate_n_flags & RATE_MCS_HT40_MSK) || +		    (rate_n_flags & RATE_MCS_DUP_MSK)) +			tbl->is_ht40 = 1; + +		if (rate_n_flags & RATE_MCS_DUP_MSK) +			tbl->is_dup = 1; + +		mcs = rs_extract_rate(rate_n_flags); + +		/* SISO */ +		if (mcs <= IWL_RATE_SISO_60M_PLCP) { +			if (num_of_ant == 1) +				tbl->lq_type = LQ_SISO; /*else NONE*/ +		/* MIMO2 */ +		} else if (mcs <= IWL_RATE_MIMO2_60M_PLCP) { +			if (num_of_ant == 2) +				tbl->lq_type = LQ_MIMO2; +		/* MIMO3 */ +		} else { +			if (num_of_ant == 3) { +				tbl->max_search = IWL_MAX_11N_MIMO3_SEARCH; +				tbl->lq_type = LQ_MIMO3; +			} +		} +	} +	return 0; +} + +/* switch to another antenna/antennas and return 1 */ +/* if no other valid antenna found, return 0 */ +static int rs_toggle_antenna(u32 valid_ant, u32 *rate_n_flags, +			     struct iwl_scale_tbl_info *tbl) +{ +	u8 new_ant_type; + +	if (!tbl->ant_type || tbl->ant_type > ANT_ABC) +		return 0; + +	if (!rs_is_valid_ant(valid_ant, tbl->ant_type)) +		return 0; + +	new_ant_type = ant_toggle_lookup[tbl->ant_type]; + +	while ((new_ant_type != tbl->ant_type) && +	       !rs_is_valid_ant(valid_ant, new_ant_type)) +		new_ant_type = ant_toggle_lookup[new_ant_type]; + +	if (new_ant_type == tbl->ant_type) +		return 0; + +	tbl->ant_type = new_ant_type; +	*rate_n_flags &= ~RATE_MCS_ANT_ABC_MSK; +	*rate_n_flags |= new_ant_type << RATE_MCS_ANT_POS; +	return 1; +} + +/** + * Green-field mode is valid if the station supports it and + * there are no non-GF stations present in the BSS. + */ +static bool rs_use_green(struct ieee80211_sta *sta) +{ +	/* +	 * There's a bug somewhere in this code that causes the +	 * scaling to get stuck because GF+SGI can't be combined +	 * in SISO rates. Until we find that bug, disable GF, it +	 * has only limited benefit and we still interoperate with +	 * GF APs since we can always receive GF transmissions. +	 */ +	return false; +} + +/** + * rs_get_supported_rates - get the available rates + * + * if management frame or broadcast frame only return + * basic available rates. + * + */ +static u16 rs_get_supported_rates(struct iwl_lq_sta *lq_sta, +				  struct ieee80211_hdr *hdr, +				  enum iwl_table_type rate_type) +{ +	if (is_legacy(rate_type)) { +		return lq_sta->active_legacy_rate; +	} else { +		if (is_siso(rate_type)) +			return lq_sta->active_siso_rate; +		else if (is_mimo2(rate_type)) +			return lq_sta->active_mimo2_rate; +		else +			return lq_sta->active_mimo3_rate; +	} +} + +static u16 rs_get_adjacent_rate(struct iwl_priv *priv, u8 index, u16 rate_mask, +				int rate_type) +{ +	u8 high = IWL_RATE_INVALID; +	u8 low = IWL_RATE_INVALID; + +	/* 802.11A or ht walks to the next literal adjacent rate in +	 * the rate table */ +	if (is_a_band(rate_type) || !is_legacy(rate_type)) { +		int i; +		u32 mask; + +		/* Find the previous rate that is in the rate mask */ +		i = index - 1; +		for (mask = (1 << i); i >= 0; i--, mask >>= 1) { +			if (rate_mask & mask) { +				low = i; +				break; +			} +		} + +		/* Find the next rate that is in the rate mask */ +		i = index + 1; +		for (mask = (1 << i); i < IWL_RATE_COUNT; i++, mask <<= 1) { +			if (rate_mask & mask) { +				high = i; +				break; +			} +		} + +		return (high << 8) | low; +	} + +	low = index; +	while (low != IWL_RATE_INVALID) { +		low = iwl_rates[low].prev_rs; +		if (low == IWL_RATE_INVALID) +			break; +		if (rate_mask & (1 << low)) +			break; +		IWL_DEBUG_RATE(priv, "Skipping masked lower rate: %d\n", low); +	} + +	high = index; +	while (high != IWL_RATE_INVALID) { +		high = iwl_rates[high].next_rs; +		if (high == IWL_RATE_INVALID) +			break; +		if (rate_mask & (1 << high)) +			break; +		IWL_DEBUG_RATE(priv, "Skipping masked higher rate: %d\n", high); +	} + +	return (high << 8) | low; +} + +static u32 rs_get_lower_rate(struct iwl_lq_sta *lq_sta, +			     struct iwl_scale_tbl_info *tbl, +			     u8 scale_index, u8 ht_possible) +{ +	s32 low; +	u16 rate_mask; +	u16 high_low; +	u8 switch_to_legacy = 0; +	u8 is_green = lq_sta->is_green; +	struct iwl_priv *priv = lq_sta->drv; + +	/* check if we need to switch from HT to legacy rates. +	 * assumption is that mandatory rates (1Mbps or 6Mbps) +	 * are always supported (spec demand) */ +	if (!is_legacy(tbl->lq_type) && (!ht_possible || !scale_index)) { +		switch_to_legacy = 1; +		scale_index = rs_ht_to_legacy[scale_index]; +		if (lq_sta->band == IEEE80211_BAND_5GHZ) +			tbl->lq_type = LQ_A; +		else +			tbl->lq_type = LQ_G; + +		if (num_of_ant(tbl->ant_type) > 1) +			tbl->ant_type = +			    first_antenna(priv->nvm_data->valid_tx_ant); + +		tbl->is_ht40 = 0; +		tbl->is_SGI = 0; +		tbl->max_search = IWL_MAX_SEARCH; +	} + +	rate_mask = rs_get_supported_rates(lq_sta, NULL, tbl->lq_type); + +	/* Mask with station rate restriction */ +	if (is_legacy(tbl->lq_type)) { +		/* supp_rates has no CCK bits in A mode */ +		if (lq_sta->band == IEEE80211_BAND_5GHZ) +			rate_mask  = (u16)(rate_mask & +			   (lq_sta->supp_rates << IWL_FIRST_OFDM_RATE)); +		else +			rate_mask = (u16)(rate_mask & lq_sta->supp_rates); +	} + +	/* If we switched from HT to legacy, check current rate */ +	if (switch_to_legacy && (rate_mask & (1 << scale_index))) { +		low = scale_index; +		goto out; +	} + +	high_low = rs_get_adjacent_rate(lq_sta->drv, scale_index, rate_mask, +					tbl->lq_type); +	low = high_low & 0xff; + +	if (low == IWL_RATE_INVALID) +		low = scale_index; + +out: +	return rate_n_flags_from_tbl(lq_sta->drv, tbl, low, is_green); +} + +/* + * Simple function to compare two rate scale table types + */ +static bool table_type_matches(struct iwl_scale_tbl_info *a, +			       struct iwl_scale_tbl_info *b) +{ +	return (a->lq_type == b->lq_type) && (a->ant_type == b->ant_type) && +		(a->is_SGI == b->is_SGI); +} + +static void rs_bt_update_lq(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +			    struct iwl_lq_sta *lq_sta) +{ +	struct iwl_scale_tbl_info *tbl; +	bool full_concurrent = priv->bt_full_concurrent; + +	if (priv->bt_ant_couple_ok) { +		/* +		 * Is there a need to switch between +		 * full concurrency and 3-wire? +		 */ +		if (priv->bt_ci_compliance && priv->bt_ant_couple_ok) +			full_concurrent = true; +		else +			full_concurrent = false; +	} +	if ((priv->bt_traffic_load != priv->last_bt_traffic_load) || +	    (priv->bt_full_concurrent != full_concurrent)) { +		priv->bt_full_concurrent = full_concurrent; +		priv->last_bt_traffic_load = priv->bt_traffic_load; + +		/* Update uCode's rate table. */ +		tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +		rs_fill_link_cmd(priv, lq_sta, tbl->current_rate); +		iwl_send_lq_cmd(priv, ctx, &lq_sta->lq, CMD_ASYNC, false); + +		queue_work(priv->workqueue, &priv->bt_full_concurrency); +	} +} + +/* + * mac80211 sends us Tx status + */ +static void rs_tx_status(void *priv_r, struct ieee80211_supported_band *sband, +			 struct ieee80211_sta *sta, void *priv_sta, +			 struct sk_buff *skb) +{ +	int legacy_success; +	int retries; +	int rs_index, mac_index, i; +	struct iwl_lq_sta *lq_sta = priv_sta; +	struct iwl_link_quality_cmd *table; +	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data; +	struct iwl_op_mode *op_mode = (struct iwl_op_mode *)priv_r; +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); +	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); +	enum mac80211_rate_control_flags mac_flags; +	u32 tx_rate; +	struct iwl_scale_tbl_info tbl_type; +	struct iwl_scale_tbl_info *curr_tbl, *other_tbl, *tmp_tbl; +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	struct iwl_rxon_context *ctx = sta_priv->ctx; + +	IWL_DEBUG_RATE_LIMIT(priv, "get frame ack response, update rate scale window\n"); + +	/* Treat uninitialized rate scaling data same as non-existing. */ +	if (!lq_sta) { +		IWL_DEBUG_RATE(priv, "Station rate scaling not created yet.\n"); +		return; +	} else if (!lq_sta->drv) { +		IWL_DEBUG_RATE(priv, "Rate scaling not initialized yet.\n"); +		return; +	} + +	if (!ieee80211_is_data(hdr->frame_control) || +	    info->flags & IEEE80211_TX_CTL_NO_ACK) +		return; + +	/* This packet was aggregated but doesn't carry status info */ +	if ((info->flags & IEEE80211_TX_CTL_AMPDU) && +	    !(info->flags & IEEE80211_TX_STAT_AMPDU)) +		return; + +	/* +	 * Ignore this Tx frame response if its initial rate doesn't match +	 * that of latest Link Quality command.  There may be stragglers +	 * from a previous Link Quality command, but we're no longer interested +	 * in those; they're either from the "active" mode while we're trying +	 * to check "search" mode, or a prior "search" mode after we've moved +	 * to a new "search" mode (which might become the new "active" mode). +	 */ +	table = &lq_sta->lq; +	tx_rate = le32_to_cpu(table->rs_table[0].rate_n_flags); +	rs_get_tbl_info_from_mcs(tx_rate, priv->band, &tbl_type, &rs_index); +	if (priv->band == IEEE80211_BAND_5GHZ) +		rs_index -= IWL_FIRST_OFDM_RATE; +	mac_flags = info->status.rates[0].flags; +	mac_index = info->status.rates[0].idx; +	/* For HT packets, map MCS to PLCP */ +	if (mac_flags & IEEE80211_TX_RC_MCS) { +		mac_index &= RATE_MCS_CODE_MSK;	/* Remove # of streams */ +		if (mac_index >= (IWL_RATE_9M_INDEX - IWL_FIRST_OFDM_RATE)) +			mac_index++; +		/* +		 * mac80211 HT index is always zero-indexed; we need to move +		 * HT OFDM rates after CCK rates in 2.4 GHz band +		 */ +		if (priv->band == IEEE80211_BAND_2GHZ) +			mac_index += IWL_FIRST_OFDM_RATE; +	} +	/* Here we actually compare this rate to the latest LQ command */ +	if ((mac_index < 0) || +	    (tbl_type.is_SGI != !!(mac_flags & IEEE80211_TX_RC_SHORT_GI)) || +	    (tbl_type.is_ht40 != !!(mac_flags & IEEE80211_TX_RC_40_MHZ_WIDTH)) || +	    (tbl_type.is_dup != !!(mac_flags & IEEE80211_TX_RC_DUP_DATA)) || +	    (tbl_type.ant_type != info->status.antenna) || +	    (!!(tx_rate & RATE_MCS_HT_MSK) != !!(mac_flags & IEEE80211_TX_RC_MCS)) || +	    (!!(tx_rate & RATE_MCS_GF_MSK) != !!(mac_flags & IEEE80211_TX_RC_GREEN_FIELD)) || +	    (rs_index != mac_index)) { +		IWL_DEBUG_RATE(priv, "initial rate %d does not match %d (0x%x)\n", mac_index, rs_index, tx_rate); +		/* +		 * Since rates mis-match, the last LQ command may have failed. +		 * After IWL_MISSED_RATE_MAX mis-matches, resync the uCode with +		 * ... driver. +		 */ +		lq_sta->missed_rate_counter++; +		if (lq_sta->missed_rate_counter > IWL_MISSED_RATE_MAX) { +			lq_sta->missed_rate_counter = 0; +			iwl_send_lq_cmd(priv, ctx, &lq_sta->lq, CMD_ASYNC, false); +		} +		/* Regardless, ignore this status info for outdated rate */ +		return; +	} else +		/* Rate did match, so reset the missed_rate_counter */ +		lq_sta->missed_rate_counter = 0; + +	/* Figure out if rate scale algorithm is in active or search table */ +	if (table_type_matches(&tbl_type, +				&(lq_sta->lq_info[lq_sta->active_tbl]))) { +		curr_tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +		other_tbl = &(lq_sta->lq_info[1 - lq_sta->active_tbl]); +	} else if (table_type_matches(&tbl_type, +				&lq_sta->lq_info[1 - lq_sta->active_tbl])) { +		curr_tbl = &(lq_sta->lq_info[1 - lq_sta->active_tbl]); +		other_tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +	} else { +		IWL_DEBUG_RATE(priv, "Neither active nor search matches tx rate\n"); +		tmp_tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +		IWL_DEBUG_RATE(priv, "active- lq:%x, ant:%x, SGI:%d\n", +			tmp_tbl->lq_type, tmp_tbl->ant_type, tmp_tbl->is_SGI); +		tmp_tbl = &(lq_sta->lq_info[1 - lq_sta->active_tbl]); +		IWL_DEBUG_RATE(priv, "search- lq:%x, ant:%x, SGI:%d\n", +			tmp_tbl->lq_type, tmp_tbl->ant_type, tmp_tbl->is_SGI); +		IWL_DEBUG_RATE(priv, "actual- lq:%x, ant:%x, SGI:%d\n", +			tbl_type.lq_type, tbl_type.ant_type, tbl_type.is_SGI); +		/* +		 * no matching table found, let's by-pass the data collection +		 * and continue to perform rate scale to find the rate table +		 */ +		rs_stay_in_table(lq_sta, true); +		goto done; +	} + +	/* +	 * Updating the frame history depends on whether packets were +	 * aggregated. +	 * +	 * For aggregation, all packets were transmitted at the same rate, the +	 * first index into rate scale table. +	 */ +	if (info->flags & IEEE80211_TX_STAT_AMPDU) { +		tx_rate = le32_to_cpu(table->rs_table[0].rate_n_flags); +		rs_get_tbl_info_from_mcs(tx_rate, priv->band, &tbl_type, +				&rs_index); +		rs_collect_tx_data(curr_tbl, rs_index, +				   info->status.ampdu_len, +				   info->status.ampdu_ack_len); + +		/* Update success/fail counts if not searching for new mode */ +		if (lq_sta->stay_in_tbl) { +			lq_sta->total_success += info->status.ampdu_ack_len; +			lq_sta->total_failed += (info->status.ampdu_len - +					info->status.ampdu_ack_len); +		} +	} else { +	/* +	 * For legacy, update frame history with for each Tx retry. +	 */ +		retries = info->status.rates[0].count - 1; +		/* HW doesn't send more than 15 retries */ +		retries = min(retries, 15); + +		/* The last transmission may have been successful */ +		legacy_success = !!(info->flags & IEEE80211_TX_STAT_ACK); +		/* Collect data for each rate used during failed TX attempts */ +		for (i = 0; i <= retries; ++i) { +			tx_rate = le32_to_cpu(table->rs_table[i].rate_n_flags); +			rs_get_tbl_info_from_mcs(tx_rate, priv->band, +					&tbl_type, &rs_index); +			/* +			 * Only collect stats if retried rate is in the same RS +			 * table as active/search. +			 */ +			if (table_type_matches(&tbl_type, curr_tbl)) +				tmp_tbl = curr_tbl; +			else if (table_type_matches(&tbl_type, other_tbl)) +				tmp_tbl = other_tbl; +			else +				continue; +			rs_collect_tx_data(tmp_tbl, rs_index, 1, +					   i < retries ? 0 : legacy_success); +		} + +		/* Update success/fail counts if not searching for new mode */ +		if (lq_sta->stay_in_tbl) { +			lq_sta->total_success += legacy_success; +			lq_sta->total_failed += retries + (1 - legacy_success); +		} +	} +	/* The last TX rate is cached in lq_sta; it's set in if/else above */ +	lq_sta->last_rate_n_flags = tx_rate; +done: +	/* See if there's a better rate or modulation mode to try. */ +	if (sta && sta->supp_rates[sband->band]) +		rs_rate_scale_perform(priv, skb, sta, lq_sta); + +	if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist) +		rs_bt_update_lq(priv, ctx, lq_sta); +} + +/* + * Begin a period of staying with a selected modulation mode. + * Set "stay_in_tbl" flag to prevent any mode switches. + * Set frame tx success limits according to legacy vs. high-throughput, + * and reset overall (spanning all rates) tx success history statistics. + * These control how long we stay using same modulation mode before + * searching for a new mode. + */ +static void rs_set_stay_in_table(struct iwl_priv *priv, u8 is_legacy, +				 struct iwl_lq_sta *lq_sta) +{ +	IWL_DEBUG_RATE(priv, "we are staying in the same table\n"); +	lq_sta->stay_in_tbl = 1;	/* only place this gets set */ +	if (is_legacy) { +		lq_sta->table_count_limit = IWL_LEGACY_TABLE_COUNT; +		lq_sta->max_failure_limit = IWL_LEGACY_FAILURE_LIMIT; +		lq_sta->max_success_limit = IWL_LEGACY_SUCCESS_LIMIT; +	} else { +		lq_sta->table_count_limit = IWL_NONE_LEGACY_TABLE_COUNT; +		lq_sta->max_failure_limit = IWL_NONE_LEGACY_FAILURE_LIMIT; +		lq_sta->max_success_limit = IWL_NONE_LEGACY_SUCCESS_LIMIT; +	} +	lq_sta->table_count = 0; +	lq_sta->total_failed = 0; +	lq_sta->total_success = 0; +	lq_sta->flush_timer = jiffies; +	lq_sta->action_counter = 0; +} + +/* + * Find correct throughput table for given mode of modulation + */ +static void rs_set_expected_tpt_table(struct iwl_lq_sta *lq_sta, +				      struct iwl_scale_tbl_info *tbl) +{ +	/* Used to choose among HT tables */ +	const u16 (*ht_tbl_pointer)[IWL_RATE_COUNT]; + +	/* Check for invalid LQ type */ +	if (WARN_ON_ONCE(!is_legacy(tbl->lq_type) && !is_Ht(tbl->lq_type))) { +		tbl->expected_tpt = expected_tpt_legacy; +		return; +	} + +	/* Legacy rates have only one table */ +	if (is_legacy(tbl->lq_type)) { +		tbl->expected_tpt = expected_tpt_legacy; +		return; +	} + +	/* Choose among many HT tables depending on number of streams +	 * (SISO/MIMO2/MIMO3), channel width (20/40), SGI, and aggregation +	 * status */ +	if (is_siso(tbl->lq_type) && (!tbl->is_ht40 || lq_sta->is_dup)) +		ht_tbl_pointer = expected_tpt_siso20MHz; +	else if (is_siso(tbl->lq_type)) +		ht_tbl_pointer = expected_tpt_siso40MHz; +	else if (is_mimo2(tbl->lq_type) && (!tbl->is_ht40 || lq_sta->is_dup)) +		ht_tbl_pointer = expected_tpt_mimo2_20MHz; +	else if (is_mimo2(tbl->lq_type)) +		ht_tbl_pointer = expected_tpt_mimo2_40MHz; +	else if (is_mimo3(tbl->lq_type) && (!tbl->is_ht40 || lq_sta->is_dup)) +		ht_tbl_pointer = expected_tpt_mimo3_20MHz; +	else /* if (is_mimo3(tbl->lq_type)) <-- must be true */ +		ht_tbl_pointer = expected_tpt_mimo3_40MHz; + +	if (!tbl->is_SGI && !lq_sta->is_agg)		/* Normal */ +		tbl->expected_tpt = ht_tbl_pointer[0]; +	else if (tbl->is_SGI && !lq_sta->is_agg)	/* SGI */ +		tbl->expected_tpt = ht_tbl_pointer[1]; +	else if (!tbl->is_SGI && lq_sta->is_agg)	/* AGG */ +		tbl->expected_tpt = ht_tbl_pointer[2]; +	else						/* AGG+SGI */ +		tbl->expected_tpt = ht_tbl_pointer[3]; +} + +/* + * Find starting rate for new "search" high-throughput mode of modulation. + * Goal is to find lowest expected rate (under perfect conditions) that is + * above the current measured throughput of "active" mode, to give new mode + * a fair chance to prove itself without too many challenges. + * + * This gets called when transitioning to more aggressive modulation + * (i.e. legacy to SISO or MIMO, or SISO to MIMO), as well as less aggressive + * (i.e. MIMO to SISO).  When moving to MIMO, bit rate will typically need + * to decrease to match "active" throughput.  When moving from MIMO to SISO, + * bit rate will typically need to increase, but not if performance was bad. + */ +static s32 rs_get_best_rate(struct iwl_priv *priv, +			    struct iwl_lq_sta *lq_sta, +			    struct iwl_scale_tbl_info *tbl,	/* "search" */ +			    u16 rate_mask, s8 index) +{ +	/* "active" values */ +	struct iwl_scale_tbl_info *active_tbl = +	    &(lq_sta->lq_info[lq_sta->active_tbl]); +	s32 active_sr = active_tbl->win[index].success_ratio; +	s32 active_tpt = active_tbl->expected_tpt[index]; +	/* expected "search" throughput */ +	const u16 *tpt_tbl = tbl->expected_tpt; + +	s32 new_rate, high, low, start_hi; +	u16 high_low; +	s8 rate = index; + +	new_rate = high = low = start_hi = IWL_RATE_INVALID; + +	for (; ;) { +		high_low = rs_get_adjacent_rate(priv, rate, rate_mask, +						tbl->lq_type); + +		low = high_low & 0xff; +		high = (high_low >> 8) & 0xff; + +		/* +		 * Lower the "search" bit rate, to give new "search" mode +		 * approximately the same throughput as "active" if: +		 * +		 * 1) "Active" mode has been working modestly well (but not +		 *    great), and expected "search" throughput (under perfect +		 *    conditions) at candidate rate is above the actual +		 *    measured "active" throughput (but less than expected +		 *    "active" throughput under perfect conditions). +		 * OR +		 * 2) "Active" mode has been working perfectly or very well +		 *    and expected "search" throughput (under perfect +		 *    conditions) at candidate rate is above expected +		 *    "active" throughput (under perfect conditions). +		 */ +		if ((((100 * tpt_tbl[rate]) > lq_sta->last_tpt) && +		     ((active_sr > IWL_RATE_DECREASE_TH) && +		      (active_sr <= IWL_RATE_HIGH_TH) && +		      (tpt_tbl[rate] <= active_tpt))) || +		    ((active_sr >= IWL_RATE_SCALE_SWITCH) && +		     (tpt_tbl[rate] > active_tpt))) { + +			/* (2nd or later pass) +			 * If we've already tried to raise the rate, and are +			 * now trying to lower it, use the higher rate. */ +			if (start_hi != IWL_RATE_INVALID) { +				new_rate = start_hi; +				break; +			} + +			new_rate = rate; + +			/* Loop again with lower rate */ +			if (low != IWL_RATE_INVALID) +				rate = low; + +			/* Lower rate not available, use the original */ +			else +				break; + +		/* Else try to raise the "search" rate to match "active" */ +		} else { +			/* (2nd or later pass) +			 * If we've already tried to lower the rate, and are +			 * now trying to raise it, use the lower rate. */ +			if (new_rate != IWL_RATE_INVALID) +				break; + +			/* Loop again with higher rate */ +			else if (high != IWL_RATE_INVALID) { +				start_hi = high; +				rate = high; + +			/* Higher rate not available, use the original */ +			} else { +				new_rate = rate; +				break; +			} +		} +	} + +	return new_rate; +} + +/* + * Set up search table for MIMO2 + */ +static int rs_switch_to_mimo2(struct iwl_priv *priv, +			     struct iwl_lq_sta *lq_sta, +			     struct ieee80211_conf *conf, +			     struct ieee80211_sta *sta, +			     struct iwl_scale_tbl_info *tbl, int index) +{ +	u16 rate_mask; +	s32 rate; +	s8 is_green = lq_sta->is_green; +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	struct iwl_rxon_context *ctx = sta_priv->ctx; + +	if (!conf_is_ht(conf) || !sta->ht_cap.ht_supported) +		return -1; + +	if (sta->smps_mode == IEEE80211_SMPS_STATIC) +		return -1; + +	/* Need both Tx chains/antennas to support MIMO */ +	if (priv->hw_params.tx_chains_num < 2) +		return -1; + +	IWL_DEBUG_RATE(priv, "LQ: try to switch to MIMO2\n"); + +	tbl->lq_type = LQ_MIMO2; +	tbl->is_dup = lq_sta->is_dup; +	tbl->action = 0; +	tbl->max_search = IWL_MAX_SEARCH; +	rate_mask = lq_sta->active_mimo2_rate; + +	if (iwl_is_ht40_tx_allowed(priv, ctx, sta)) +		tbl->is_ht40 = 1; +	else +		tbl->is_ht40 = 0; + +	rs_set_expected_tpt_table(lq_sta, tbl); + +	rate = rs_get_best_rate(priv, lq_sta, tbl, rate_mask, index); + +	IWL_DEBUG_RATE(priv, "LQ: MIMO2 best rate %d mask %X\n", rate, rate_mask); +	if ((rate == IWL_RATE_INVALID) || !((1 << rate) & rate_mask)) { +		IWL_DEBUG_RATE(priv, "Can't switch with index %d rate mask %x\n", +						rate, rate_mask); +		return -1; +	} +	tbl->current_rate = rate_n_flags_from_tbl(priv, tbl, rate, is_green); + +	IWL_DEBUG_RATE(priv, "LQ: Switch to new mcs %X index is green %X\n", +		     tbl->current_rate, is_green); +	return 0; +} + +/* + * Set up search table for MIMO3 + */ +static int rs_switch_to_mimo3(struct iwl_priv *priv, +			     struct iwl_lq_sta *lq_sta, +			     struct ieee80211_conf *conf, +			     struct ieee80211_sta *sta, +			     struct iwl_scale_tbl_info *tbl, int index) +{ +	u16 rate_mask; +	s32 rate; +	s8 is_green = lq_sta->is_green; +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	struct iwl_rxon_context *ctx = sta_priv->ctx; + +	if (!conf_is_ht(conf) || !sta->ht_cap.ht_supported) +		return -1; + +	if (sta->smps_mode == IEEE80211_SMPS_STATIC) +		return -1; + +	/* Need both Tx chains/antennas to support MIMO */ +	if (priv->hw_params.tx_chains_num < 3) +		return -1; + +	IWL_DEBUG_RATE(priv, "LQ: try to switch to MIMO3\n"); + +	tbl->lq_type = LQ_MIMO3; +	tbl->is_dup = lq_sta->is_dup; +	tbl->action = 0; +	tbl->max_search = IWL_MAX_11N_MIMO3_SEARCH; +	rate_mask = lq_sta->active_mimo3_rate; + +	if (iwl_is_ht40_tx_allowed(priv, ctx, sta)) +		tbl->is_ht40 = 1; +	else +		tbl->is_ht40 = 0; + +	rs_set_expected_tpt_table(lq_sta, tbl); + +	rate = rs_get_best_rate(priv, lq_sta, tbl, rate_mask, index); + +	IWL_DEBUG_RATE(priv, "LQ: MIMO3 best rate %d mask %X\n", +		rate, rate_mask); +	if ((rate == IWL_RATE_INVALID) || !((1 << rate) & rate_mask)) { +		IWL_DEBUG_RATE(priv, "Can't switch with index %d rate mask %x\n", +						rate, rate_mask); +		return -1; +	} +	tbl->current_rate = rate_n_flags_from_tbl(priv, tbl, rate, is_green); + +	IWL_DEBUG_RATE(priv, "LQ: Switch to new mcs %X index is green %X\n", +		     tbl->current_rate, is_green); +	return 0; +} + +/* + * Set up search table for SISO + */ +static int rs_switch_to_siso(struct iwl_priv *priv, +			     struct iwl_lq_sta *lq_sta, +			     struct ieee80211_conf *conf, +			     struct ieee80211_sta *sta, +			     struct iwl_scale_tbl_info *tbl, int index) +{ +	u16 rate_mask; +	u8 is_green = lq_sta->is_green; +	s32 rate; +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	struct iwl_rxon_context *ctx = sta_priv->ctx; + +	if (!conf_is_ht(conf) || !sta->ht_cap.ht_supported) +		return -1; + +	IWL_DEBUG_RATE(priv, "LQ: try to switch to SISO\n"); + +	tbl->is_dup = lq_sta->is_dup; +	tbl->lq_type = LQ_SISO; +	tbl->action = 0; +	tbl->max_search = IWL_MAX_SEARCH; +	rate_mask = lq_sta->active_siso_rate; + +	if (iwl_is_ht40_tx_allowed(priv, ctx, sta)) +		tbl->is_ht40 = 1; +	else +		tbl->is_ht40 = 0; + +	if (is_green) +		tbl->is_SGI = 0; /*11n spec: no SGI in SISO+Greenfield*/ + +	rs_set_expected_tpt_table(lq_sta, tbl); +	rate = rs_get_best_rate(priv, lq_sta, tbl, rate_mask, index); + +	IWL_DEBUG_RATE(priv, "LQ: get best rate %d mask %X\n", rate, rate_mask); +	if ((rate == IWL_RATE_INVALID) || !((1 << rate) & rate_mask)) { +		IWL_DEBUG_RATE(priv, "can not switch with index %d rate mask %x\n", +			     rate, rate_mask); +		return -1; +	} +	tbl->current_rate = rate_n_flags_from_tbl(priv, tbl, rate, is_green); +	IWL_DEBUG_RATE(priv, "LQ: Switch to new mcs %X index is green %X\n", +		     tbl->current_rate, is_green); +	return 0; +} + +/* + * Try to switch to new modulation mode from legacy + */ +static int rs_move_legacy_other(struct iwl_priv *priv, +				struct iwl_lq_sta *lq_sta, +				struct ieee80211_conf *conf, +				struct ieee80211_sta *sta, +				int index) +{ +	struct iwl_scale_tbl_info *tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +	struct iwl_scale_tbl_info *search_tbl = +				&(lq_sta->lq_info[(1 - lq_sta->active_tbl)]); +	struct iwl_rate_scale_data *window = &(tbl->win[index]); +	u32 sz = (sizeof(struct iwl_scale_tbl_info) - +		  (sizeof(struct iwl_rate_scale_data) * IWL_RATE_COUNT)); +	u8 start_action; +	u8 valid_tx_ant = priv->nvm_data->valid_tx_ant; +	u8 tx_chains_num = priv->hw_params.tx_chains_num; +	int ret = 0; +	u8 update_search_tbl_counter = 0; + +	switch (priv->bt_traffic_load) { +	case IWL_BT_COEX_TRAFFIC_LOAD_NONE: +		/* nothing */ +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_LOW: +		/* avoid antenna B unless MIMO */ +		if (tbl->action == IWL_LEGACY_SWITCH_ANTENNA2) +			tbl->action = IWL_LEGACY_SWITCH_SISO; +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_HIGH: +	case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS: +		/* avoid antenna B and MIMO */ +		valid_tx_ant = +			first_antenna(priv->nvm_data->valid_tx_ant); +		if (tbl->action >= IWL_LEGACY_SWITCH_ANTENNA2 && +		    tbl->action != IWL_LEGACY_SWITCH_SISO) +			tbl->action = IWL_LEGACY_SWITCH_SISO; +		break; +	default: +		IWL_ERR(priv, "Invalid BT load %d\n", priv->bt_traffic_load); +		break; +	} + +	if (!iwl_ht_enabled(priv)) +		/* stay in Legacy */ +		tbl->action = IWL_LEGACY_SWITCH_ANTENNA1; +	else if (iwl_tx_ant_restriction(priv) == IWL_ANT_OK_SINGLE && +		   tbl->action > IWL_LEGACY_SWITCH_SISO) +		tbl->action = IWL_LEGACY_SWITCH_SISO; + +	/* configure as 1x1 if bt full concurrency */ +	if (priv->bt_full_concurrent) { +		if (!iwl_ht_enabled(priv)) +			tbl->action = IWL_LEGACY_SWITCH_ANTENNA1; +		else if (tbl->action >= IWL_LEGACY_SWITCH_ANTENNA2) +			tbl->action = IWL_LEGACY_SWITCH_SISO; +		valid_tx_ant = +			first_antenna(priv->nvm_data->valid_tx_ant); +	} + +	start_action = tbl->action; +	for (; ;) { +		lq_sta->action_counter++; +		switch (tbl->action) { +		case IWL_LEGACY_SWITCH_ANTENNA1: +		case IWL_LEGACY_SWITCH_ANTENNA2: +			IWL_DEBUG_RATE(priv, "LQ: Legacy toggle Antenna\n"); + +			if ((tbl->action == IWL_LEGACY_SWITCH_ANTENNA1 && +							tx_chains_num <= 1) || +			    (tbl->action == IWL_LEGACY_SWITCH_ANTENNA2 && +							tx_chains_num <= 2)) +				break; + +			/* Don't change antenna if success has been great */ +			if (window->success_ratio >= IWL_RS_GOOD_RATIO && +			    !priv->bt_full_concurrent && +			    priv->bt_traffic_load == +					IWL_BT_COEX_TRAFFIC_LOAD_NONE) +				break; + +			/* Set up search table to try other antenna */ +			memcpy(search_tbl, tbl, sz); + +			if (rs_toggle_antenna(valid_tx_ant, +				&search_tbl->current_rate, search_tbl)) { +				update_search_tbl_counter = 1; +				rs_set_expected_tpt_table(lq_sta, search_tbl); +				goto out; +			} +			break; +		case IWL_LEGACY_SWITCH_SISO: +			IWL_DEBUG_RATE(priv, "LQ: Legacy switch to SISO\n"); + +			/* Set up search table to try SISO */ +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = 0; +			ret = rs_switch_to_siso(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) { +				lq_sta->action_counter = 0; +				goto out; +			} + +			break; +		case IWL_LEGACY_SWITCH_MIMO2_AB: +		case IWL_LEGACY_SWITCH_MIMO2_AC: +		case IWL_LEGACY_SWITCH_MIMO2_BC: +			IWL_DEBUG_RATE(priv, "LQ: Legacy switch to MIMO2\n"); + +			/* Set up search table to try MIMO */ +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = 0; + +			if (tbl->action == IWL_LEGACY_SWITCH_MIMO2_AB) +				search_tbl->ant_type = ANT_AB; +			else if (tbl->action == IWL_LEGACY_SWITCH_MIMO2_AC) +				search_tbl->ant_type = ANT_AC; +			else +				search_tbl->ant_type = ANT_BC; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_mimo2(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) { +				lq_sta->action_counter = 0; +				goto out; +			} +			break; + +		case IWL_LEGACY_SWITCH_MIMO3_ABC: +			IWL_DEBUG_RATE(priv, "LQ: Legacy switch to MIMO3\n"); + +			/* Set up search table to try MIMO3 */ +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = 0; + +			search_tbl->ant_type = ANT_ABC; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_mimo3(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) { +				lq_sta->action_counter = 0; +				goto out; +			} +			break; +		} +		tbl->action++; +		if (tbl->action > IWL_LEGACY_SWITCH_MIMO3_ABC) +			tbl->action = IWL_LEGACY_SWITCH_ANTENNA1; + +		if (tbl->action == start_action) +			break; + +	} +	search_tbl->lq_type = LQ_NONE; +	return 0; + +out: +	lq_sta->search_better_tbl = 1; +	tbl->action++; +	if (tbl->action > IWL_LEGACY_SWITCH_MIMO3_ABC) +		tbl->action = IWL_LEGACY_SWITCH_ANTENNA1; +	if (update_search_tbl_counter) +		search_tbl->action = tbl->action; +	return 0; + +} + +/* + * Try to switch to new modulation mode from SISO + */ +static int rs_move_siso_to_other(struct iwl_priv *priv, +				 struct iwl_lq_sta *lq_sta, +				 struct ieee80211_conf *conf, +				 struct ieee80211_sta *sta, int index) +{ +	u8 is_green = lq_sta->is_green; +	struct iwl_scale_tbl_info *tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +	struct iwl_scale_tbl_info *search_tbl = +				&(lq_sta->lq_info[(1 - lq_sta->active_tbl)]); +	struct iwl_rate_scale_data *window = &(tbl->win[index]); +	struct ieee80211_sta_ht_cap *ht_cap = &sta->ht_cap; +	u32 sz = (sizeof(struct iwl_scale_tbl_info) - +		  (sizeof(struct iwl_rate_scale_data) * IWL_RATE_COUNT)); +	u8 start_action; +	u8 valid_tx_ant = priv->nvm_data->valid_tx_ant; +	u8 tx_chains_num = priv->hw_params.tx_chains_num; +	u8 update_search_tbl_counter = 0; +	int ret; + +	switch (priv->bt_traffic_load) { +	case IWL_BT_COEX_TRAFFIC_LOAD_NONE: +		/* nothing */ +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_LOW: +		/* avoid antenna B unless MIMO */ +		if (tbl->action == IWL_SISO_SWITCH_ANTENNA2) +			tbl->action = IWL_SISO_SWITCH_MIMO2_AB; +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_HIGH: +	case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS: +		/* avoid antenna B and MIMO */ +		valid_tx_ant = +			first_antenna(priv->nvm_data->valid_tx_ant); +		if (tbl->action != IWL_SISO_SWITCH_ANTENNA1) +			tbl->action = IWL_SISO_SWITCH_ANTENNA1; +		break; +	default: +		IWL_ERR(priv, "Invalid BT load %d\n", priv->bt_traffic_load); +		break; +	} + +	if (iwl_tx_ant_restriction(priv) == IWL_ANT_OK_SINGLE && +	    tbl->action > IWL_SISO_SWITCH_ANTENNA2) { +		/* stay in SISO */ +		tbl->action = IWL_SISO_SWITCH_ANTENNA1; +	} + +	/* configure as 1x1 if bt full concurrency */ +	if (priv->bt_full_concurrent) { +		valid_tx_ant = +			first_antenna(priv->nvm_data->valid_tx_ant); +		if (tbl->action >= IWL_LEGACY_SWITCH_ANTENNA2) +			tbl->action = IWL_SISO_SWITCH_ANTENNA1; +	} + +	start_action = tbl->action; +	for (;;) { +		lq_sta->action_counter++; +		switch (tbl->action) { +		case IWL_SISO_SWITCH_ANTENNA1: +		case IWL_SISO_SWITCH_ANTENNA2: +			IWL_DEBUG_RATE(priv, "LQ: SISO toggle Antenna\n"); +			if ((tbl->action == IWL_SISO_SWITCH_ANTENNA1 && +						tx_chains_num <= 1) || +			    (tbl->action == IWL_SISO_SWITCH_ANTENNA2 && +						tx_chains_num <= 2)) +				break; + +			if (window->success_ratio >= IWL_RS_GOOD_RATIO && +			    !priv->bt_full_concurrent && +			    priv->bt_traffic_load == +					IWL_BT_COEX_TRAFFIC_LOAD_NONE) +				break; + +			memcpy(search_tbl, tbl, sz); +			if (rs_toggle_antenna(valid_tx_ant, +				       &search_tbl->current_rate, search_tbl)) { +				update_search_tbl_counter = 1; +				goto out; +			} +			break; +		case IWL_SISO_SWITCH_MIMO2_AB: +		case IWL_SISO_SWITCH_MIMO2_AC: +		case IWL_SISO_SWITCH_MIMO2_BC: +			IWL_DEBUG_RATE(priv, "LQ: SISO switch to MIMO2\n"); +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = 0; + +			if (tbl->action == IWL_SISO_SWITCH_MIMO2_AB) +				search_tbl->ant_type = ANT_AB; +			else if (tbl->action == IWL_SISO_SWITCH_MIMO2_AC) +				search_tbl->ant_type = ANT_AC; +			else +				search_tbl->ant_type = ANT_BC; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_mimo2(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) +				goto out; +			break; +		case IWL_SISO_SWITCH_GI: +			if (!tbl->is_ht40 && !(ht_cap->cap & +						IEEE80211_HT_CAP_SGI_20)) +				break; +			if (tbl->is_ht40 && !(ht_cap->cap & +						IEEE80211_HT_CAP_SGI_40)) +				break; + +			IWL_DEBUG_RATE(priv, "LQ: SISO toggle SGI/NGI\n"); + +			memcpy(search_tbl, tbl, sz); +			if (is_green) { +				if (!tbl->is_SGI) +					break; +				else +					IWL_ERR(priv, +						"SGI was set in GF+SISO\n"); +			} +			search_tbl->is_SGI = !tbl->is_SGI; +			rs_set_expected_tpt_table(lq_sta, search_tbl); +			if (tbl->is_SGI) { +				s32 tpt = lq_sta->last_tpt / 100; +				if (tpt >= search_tbl->expected_tpt[index]) +					break; +			} +			search_tbl->current_rate = +				rate_n_flags_from_tbl(priv, search_tbl, +						      index, is_green); +			update_search_tbl_counter = 1; +			goto out; +		case IWL_SISO_SWITCH_MIMO3_ABC: +			IWL_DEBUG_RATE(priv, "LQ: SISO switch to MIMO3\n"); +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = 0; +			search_tbl->ant_type = ANT_ABC; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_mimo3(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) +				goto out; +			break; +		} +		tbl->action++; +		if (tbl->action > IWL_LEGACY_SWITCH_MIMO3_ABC) +			tbl->action = IWL_SISO_SWITCH_ANTENNA1; + +		if (tbl->action == start_action) +			break; +	} +	search_tbl->lq_type = LQ_NONE; +	return 0; + + out: +	lq_sta->search_better_tbl = 1; +	tbl->action++; +	if (tbl->action > IWL_SISO_SWITCH_MIMO3_ABC) +		tbl->action = IWL_SISO_SWITCH_ANTENNA1; +	if (update_search_tbl_counter) +		search_tbl->action = tbl->action; + +	return 0; +} + +/* + * Try to switch to new modulation mode from MIMO2 + */ +static int rs_move_mimo2_to_other(struct iwl_priv *priv, +				 struct iwl_lq_sta *lq_sta, +				 struct ieee80211_conf *conf, +				 struct ieee80211_sta *sta, int index) +{ +	s8 is_green = lq_sta->is_green; +	struct iwl_scale_tbl_info *tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +	struct iwl_scale_tbl_info *search_tbl = +				&(lq_sta->lq_info[(1 - lq_sta->active_tbl)]); +	struct iwl_rate_scale_data *window = &(tbl->win[index]); +	struct ieee80211_sta_ht_cap *ht_cap = &sta->ht_cap; +	u32 sz = (sizeof(struct iwl_scale_tbl_info) - +		  (sizeof(struct iwl_rate_scale_data) * IWL_RATE_COUNT)); +	u8 start_action; +	u8 valid_tx_ant = priv->nvm_data->valid_tx_ant; +	u8 tx_chains_num = priv->hw_params.tx_chains_num; +	u8 update_search_tbl_counter = 0; +	int ret; + +	switch (priv->bt_traffic_load) { +	case IWL_BT_COEX_TRAFFIC_LOAD_NONE: +		/* nothing */ +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_HIGH: +	case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS: +		/* avoid antenna B and MIMO */ +		if (tbl->action != IWL_MIMO2_SWITCH_SISO_A) +			tbl->action = IWL_MIMO2_SWITCH_SISO_A; +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_LOW: +		/* avoid antenna B unless MIMO */ +		if (tbl->action == IWL_MIMO2_SWITCH_SISO_B || +		    tbl->action == IWL_MIMO2_SWITCH_SISO_C) +			tbl->action = IWL_MIMO2_SWITCH_SISO_A; +		break; +	default: +		IWL_ERR(priv, "Invalid BT load %d\n", priv->bt_traffic_load); +		break; +	} + +	if ((iwl_tx_ant_restriction(priv) == IWL_ANT_OK_SINGLE) && +	    (tbl->action < IWL_MIMO2_SWITCH_SISO_A || +	     tbl->action > IWL_MIMO2_SWITCH_SISO_C)) { +		/* switch in SISO */ +		tbl->action = IWL_MIMO2_SWITCH_SISO_A; +	} + +	/* configure as 1x1 if bt full concurrency */ +	if (priv->bt_full_concurrent && +	    (tbl->action < IWL_MIMO2_SWITCH_SISO_A || +	     tbl->action > IWL_MIMO2_SWITCH_SISO_C)) +		tbl->action = IWL_MIMO2_SWITCH_SISO_A; + +	start_action = tbl->action; +	for (;;) { +		lq_sta->action_counter++; +		switch (tbl->action) { +		case IWL_MIMO2_SWITCH_ANTENNA1: +		case IWL_MIMO2_SWITCH_ANTENNA2: +			IWL_DEBUG_RATE(priv, "LQ: MIMO2 toggle Antennas\n"); + +			if (tx_chains_num <= 2) +				break; + +			if (window->success_ratio >= IWL_RS_GOOD_RATIO) +				break; + +			memcpy(search_tbl, tbl, sz); +			if (rs_toggle_antenna(valid_tx_ant, +				       &search_tbl->current_rate, search_tbl)) { +				update_search_tbl_counter = 1; +				goto out; +			} +			break; +		case IWL_MIMO2_SWITCH_SISO_A: +		case IWL_MIMO2_SWITCH_SISO_B: +		case IWL_MIMO2_SWITCH_SISO_C: +			IWL_DEBUG_RATE(priv, "LQ: MIMO2 switch to SISO\n"); + +			/* Set up new search table for SISO */ +			memcpy(search_tbl, tbl, sz); + +			if (tbl->action == IWL_MIMO2_SWITCH_SISO_A) +				search_tbl->ant_type = ANT_A; +			else if (tbl->action == IWL_MIMO2_SWITCH_SISO_B) +				search_tbl->ant_type = ANT_B; +			else +				search_tbl->ant_type = ANT_C; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_siso(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) +				goto out; + +			break; + +		case IWL_MIMO2_SWITCH_GI: +			if (!tbl->is_ht40 && !(ht_cap->cap & +						IEEE80211_HT_CAP_SGI_20)) +				break; +			if (tbl->is_ht40 && !(ht_cap->cap & +						IEEE80211_HT_CAP_SGI_40)) +				break; + +			IWL_DEBUG_RATE(priv, "LQ: MIMO2 toggle SGI/NGI\n"); + +			/* Set up new search table for MIMO2 */ +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = !tbl->is_SGI; +			rs_set_expected_tpt_table(lq_sta, search_tbl); +			/* +			 * If active table already uses the fastest possible +			 * modulation (dual stream with short guard interval), +			 * and it's working well, there's no need to look +			 * for a better type of modulation! +			 */ +			if (tbl->is_SGI) { +				s32 tpt = lq_sta->last_tpt / 100; +				if (tpt >= search_tbl->expected_tpt[index]) +					break; +			} +			search_tbl->current_rate = +				rate_n_flags_from_tbl(priv, search_tbl, +						      index, is_green); +			update_search_tbl_counter = 1; +			goto out; + +		case IWL_MIMO2_SWITCH_MIMO3_ABC: +			IWL_DEBUG_RATE(priv, "LQ: MIMO2 switch to MIMO3\n"); +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = 0; +			search_tbl->ant_type = ANT_ABC; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_mimo3(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) +				goto out; + +			break; +		} +		tbl->action++; +		if (tbl->action > IWL_MIMO2_SWITCH_MIMO3_ABC) +			tbl->action = IWL_MIMO2_SWITCH_ANTENNA1; + +		if (tbl->action == start_action) +			break; +	} +	search_tbl->lq_type = LQ_NONE; +	return 0; + out: +	lq_sta->search_better_tbl = 1; +	tbl->action++; +	if (tbl->action > IWL_MIMO2_SWITCH_MIMO3_ABC) +		tbl->action = IWL_MIMO2_SWITCH_ANTENNA1; +	if (update_search_tbl_counter) +		search_tbl->action = tbl->action; + +	return 0; + +} + +/* + * Try to switch to new modulation mode from MIMO3 + */ +static int rs_move_mimo3_to_other(struct iwl_priv *priv, +				 struct iwl_lq_sta *lq_sta, +				 struct ieee80211_conf *conf, +				 struct ieee80211_sta *sta, int index) +{ +	s8 is_green = lq_sta->is_green; +	struct iwl_scale_tbl_info *tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +	struct iwl_scale_tbl_info *search_tbl = +				&(lq_sta->lq_info[(1 - lq_sta->active_tbl)]); +	struct iwl_rate_scale_data *window = &(tbl->win[index]); +	struct ieee80211_sta_ht_cap *ht_cap = &sta->ht_cap; +	u32 sz = (sizeof(struct iwl_scale_tbl_info) - +		  (sizeof(struct iwl_rate_scale_data) * IWL_RATE_COUNT)); +	u8 start_action; +	u8 valid_tx_ant = priv->nvm_data->valid_tx_ant; +	u8 tx_chains_num = priv->hw_params.tx_chains_num; +	int ret; +	u8 update_search_tbl_counter = 0; + +	switch (priv->bt_traffic_load) { +	case IWL_BT_COEX_TRAFFIC_LOAD_NONE: +		/* nothing */ +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_HIGH: +	case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS: +		/* avoid antenna B and MIMO */ +		if (tbl->action != IWL_MIMO3_SWITCH_SISO_A) +			tbl->action = IWL_MIMO3_SWITCH_SISO_A; +		break; +	case IWL_BT_COEX_TRAFFIC_LOAD_LOW: +		/* avoid antenna B unless MIMO */ +		if (tbl->action == IWL_MIMO3_SWITCH_SISO_B || +		    tbl->action == IWL_MIMO3_SWITCH_SISO_C) +			tbl->action = IWL_MIMO3_SWITCH_SISO_A; +		break; +	default: +		IWL_ERR(priv, "Invalid BT load %d\n", priv->bt_traffic_load); +		break; +	} + +	if ((iwl_tx_ant_restriction(priv) == IWL_ANT_OK_SINGLE) && +	    (tbl->action < IWL_MIMO3_SWITCH_SISO_A || +	     tbl->action > IWL_MIMO3_SWITCH_SISO_C)) { +		/* switch in SISO */ +		tbl->action = IWL_MIMO3_SWITCH_SISO_A; +	} + +	/* configure as 1x1 if bt full concurrency */ +	if (priv->bt_full_concurrent && +	    (tbl->action < IWL_MIMO3_SWITCH_SISO_A || +	     tbl->action > IWL_MIMO3_SWITCH_SISO_C)) +		tbl->action = IWL_MIMO3_SWITCH_SISO_A; + +	start_action = tbl->action; +	for (;;) { +		lq_sta->action_counter++; +		switch (tbl->action) { +		case IWL_MIMO3_SWITCH_ANTENNA1: +		case IWL_MIMO3_SWITCH_ANTENNA2: +			IWL_DEBUG_RATE(priv, "LQ: MIMO3 toggle Antennas\n"); + +			if (tx_chains_num <= 3) +				break; + +			if (window->success_ratio >= IWL_RS_GOOD_RATIO) +				break; + +			memcpy(search_tbl, tbl, sz); +			if (rs_toggle_antenna(valid_tx_ant, +				       &search_tbl->current_rate, search_tbl)) +				goto out; +			break; +		case IWL_MIMO3_SWITCH_SISO_A: +		case IWL_MIMO3_SWITCH_SISO_B: +		case IWL_MIMO3_SWITCH_SISO_C: +			IWL_DEBUG_RATE(priv, "LQ: MIMO3 switch to SISO\n"); + +			/* Set up new search table for SISO */ +			memcpy(search_tbl, tbl, sz); + +			if (tbl->action == IWL_MIMO3_SWITCH_SISO_A) +				search_tbl->ant_type = ANT_A; +			else if (tbl->action == IWL_MIMO3_SWITCH_SISO_B) +				search_tbl->ant_type = ANT_B; +			else +				search_tbl->ant_type = ANT_C; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_siso(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) +				goto out; + +			break; + +		case IWL_MIMO3_SWITCH_MIMO2_AB: +		case IWL_MIMO3_SWITCH_MIMO2_AC: +		case IWL_MIMO3_SWITCH_MIMO2_BC: +			IWL_DEBUG_RATE(priv, "LQ: MIMO3 switch to MIMO2\n"); + +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = 0; +			if (tbl->action == IWL_MIMO3_SWITCH_MIMO2_AB) +				search_tbl->ant_type = ANT_AB; +			else if (tbl->action == IWL_MIMO3_SWITCH_MIMO2_AC) +				search_tbl->ant_type = ANT_AC; +			else +				search_tbl->ant_type = ANT_BC; + +			if (!rs_is_valid_ant(valid_tx_ant, search_tbl->ant_type)) +				break; + +			ret = rs_switch_to_mimo2(priv, lq_sta, conf, sta, +						 search_tbl, index); +			if (!ret) +				goto out; + +			break; + +		case IWL_MIMO3_SWITCH_GI: +			if (!tbl->is_ht40 && !(ht_cap->cap & +						IEEE80211_HT_CAP_SGI_20)) +				break; +			if (tbl->is_ht40 && !(ht_cap->cap & +						IEEE80211_HT_CAP_SGI_40)) +				break; + +			IWL_DEBUG_RATE(priv, "LQ: MIMO3 toggle SGI/NGI\n"); + +			/* Set up new search table for MIMO */ +			memcpy(search_tbl, tbl, sz); +			search_tbl->is_SGI = !tbl->is_SGI; +			rs_set_expected_tpt_table(lq_sta, search_tbl); +			/* +			 * If active table already uses the fastest possible +			 * modulation (dual stream with short guard interval), +			 * and it's working well, there's no need to look +			 * for a better type of modulation! +			 */ +			if (tbl->is_SGI) { +				s32 tpt = lq_sta->last_tpt / 100; +				if (tpt >= search_tbl->expected_tpt[index]) +					break; +			} +			search_tbl->current_rate = +				rate_n_flags_from_tbl(priv, search_tbl, +						      index, is_green); +			update_search_tbl_counter = 1; +			goto out; +		} +		tbl->action++; +		if (tbl->action > IWL_MIMO3_SWITCH_GI) +			tbl->action = IWL_MIMO3_SWITCH_ANTENNA1; + +		if (tbl->action == start_action) +			break; +	} +	search_tbl->lq_type = LQ_NONE; +	return 0; + out: +	lq_sta->search_better_tbl = 1; +	tbl->action++; +	if (tbl->action > IWL_MIMO3_SWITCH_GI) +		tbl->action = IWL_MIMO3_SWITCH_ANTENNA1; +	if (update_search_tbl_counter) +		search_tbl->action = tbl->action; + +	return 0; + +} + +/* + * Check whether we should continue using same modulation mode, or + * begin search for a new mode, based on: + * 1) # tx successes or failures while using this mode + * 2) # times calling this function + * 3) elapsed time in this mode (not used, for now) + */ +static void rs_stay_in_table(struct iwl_lq_sta *lq_sta, bool force_search) +{ +	struct iwl_scale_tbl_info *tbl; +	int i; +	int active_tbl; +	int flush_interval_passed = 0; +	struct iwl_priv *priv; + +	priv = lq_sta->drv; +	active_tbl = lq_sta->active_tbl; + +	tbl = &(lq_sta->lq_info[active_tbl]); + +	/* If we've been disallowing search, see if we should now allow it */ +	if (lq_sta->stay_in_tbl) { + +		/* Elapsed time using current modulation mode */ +		if (lq_sta->flush_timer) +			flush_interval_passed = +			time_after(jiffies, +					(unsigned long)(lq_sta->flush_timer + +					IWL_RATE_SCALE_FLUSH_INTVL)); + +		/* +		 * Check if we should allow search for new modulation mode. +		 * If many frames have failed or succeeded, or we've used +		 * this same modulation for a long time, allow search, and +		 * reset history stats that keep track of whether we should +		 * allow a new search.  Also (below) reset all bitmaps and +		 * stats in active history. +		 */ +		if (force_search || +		    (lq_sta->total_failed > lq_sta->max_failure_limit) || +		    (lq_sta->total_success > lq_sta->max_success_limit) || +		    ((!lq_sta->search_better_tbl) && (lq_sta->flush_timer) +		     && (flush_interval_passed))) { +			IWL_DEBUG_RATE(priv, "LQ: stay is expired %d %d %d\n", +				     lq_sta->total_failed, +				     lq_sta->total_success, +				     flush_interval_passed); + +			/* Allow search for new mode */ +			lq_sta->stay_in_tbl = 0;	/* only place reset */ +			lq_sta->total_failed = 0; +			lq_sta->total_success = 0; +			lq_sta->flush_timer = 0; + +		/* +		 * Else if we've used this modulation mode enough repetitions +		 * (regardless of elapsed time or success/failure), reset +		 * history bitmaps and rate-specific stats for all rates in +		 * active table. +		 */ +		} else { +			lq_sta->table_count++; +			if (lq_sta->table_count >= +			    lq_sta->table_count_limit) { +				lq_sta->table_count = 0; + +				IWL_DEBUG_RATE(priv, "LQ: stay in table clear win\n"); +				for (i = 0; i < IWL_RATE_COUNT; i++) +					rs_rate_scale_clear_window( +						&(tbl->win[i])); +			} +		} + +		/* If transitioning to allow "search", reset all history +		 * bitmaps and stats in active table (this will become the new +		 * "search" table). */ +		if (!lq_sta->stay_in_tbl) { +			for (i = 0; i < IWL_RATE_COUNT; i++) +				rs_rate_scale_clear_window(&(tbl->win[i])); +		} +	} +} + +/* + * setup rate table in uCode + */ +static void rs_update_rate_tbl(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx, +			       struct iwl_lq_sta *lq_sta, +			       struct iwl_scale_tbl_info *tbl, +			       int index, u8 is_green) +{ +	u32 rate; + +	/* Update uCode's rate table. */ +	rate = rate_n_flags_from_tbl(priv, tbl, index, is_green); +	rs_fill_link_cmd(priv, lq_sta, rate); +	iwl_send_lq_cmd(priv, ctx, &lq_sta->lq, CMD_ASYNC, false); +} + +/* + * Do rate scaling and search for new modulation mode. + */ +static void rs_rate_scale_perform(struct iwl_priv *priv, +				  struct sk_buff *skb, +				  struct ieee80211_sta *sta, +				  struct iwl_lq_sta *lq_sta) +{ +	struct ieee80211_hw *hw = priv->hw; +	struct ieee80211_conf *conf = &hw->conf; +	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); +	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data; +	int low = IWL_RATE_INVALID; +	int high = IWL_RATE_INVALID; +	int index; +	int i; +	struct iwl_rate_scale_data *window = NULL; +	int current_tpt = IWL_INVALID_VALUE; +	int low_tpt = IWL_INVALID_VALUE; +	int high_tpt = IWL_INVALID_VALUE; +	u32 fail_count; +	s8 scale_action = 0; +	u16 rate_mask; +	u8 update_lq = 0; +	struct iwl_scale_tbl_info *tbl, *tbl1; +	u16 rate_scale_index_msk = 0; +	u8 is_green = 0; +	u8 active_tbl = 0; +	u8 done_search = 0; +	u16 high_low; +	s32 sr; +	u8 tid = IWL_MAX_TID_COUNT; +	struct iwl_tid_data *tid_data; +	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv; +	struct iwl_rxon_context *ctx = sta_priv->ctx; + +	IWL_DEBUG_RATE(priv, "rate scale calculate new rate for skb\n"); + +	/* Send management frames and NO_ACK data using lowest rate. */ +	/* TODO: this could probably be improved.. */ +	if (!ieee80211_is_data(hdr->frame_control) || +	    info->flags & IEEE80211_TX_CTL_NO_ACK) +		return; + +	lq_sta->supp_rates = sta->supp_rates[lq_sta->band]; + +	tid = rs_tl_add_packet(lq_sta, hdr); +	if ((tid != IWL_MAX_TID_COUNT) && +	    (lq_sta->tx_agg_tid_en & (1 << tid))) { +		tid_data = &priv->tid_data[lq_sta->lq.sta_id][tid]; +		if (tid_data->agg.state == IWL_AGG_OFF) +			lq_sta->is_agg = 0; +		else +			lq_sta->is_agg = 1; +	} else +		lq_sta->is_agg = 0; + +	/* +	 * Select rate-scale / modulation-mode table to work with in +	 * the rest of this function:  "search" if searching for better +	 * modulation mode, or "active" if doing rate scaling within a mode. +	 */ +	if (!lq_sta->search_better_tbl) +		active_tbl = lq_sta->active_tbl; +	else +		active_tbl = 1 - lq_sta->active_tbl; + +	tbl = &(lq_sta->lq_info[active_tbl]); +	if (is_legacy(tbl->lq_type)) +		lq_sta->is_green = 0; +	else +		lq_sta->is_green = rs_use_green(sta); +	is_green = lq_sta->is_green; + +	/* current tx rate */ +	index = lq_sta->last_txrate_idx; + +	IWL_DEBUG_RATE(priv, "Rate scale index %d for type %d\n", index, +		       tbl->lq_type); + +	/* rates available for this association, and for modulation mode */ +	rate_mask = rs_get_supported_rates(lq_sta, hdr, tbl->lq_type); + +	IWL_DEBUG_RATE(priv, "mask 0x%04X\n", rate_mask); + +	/* mask with station rate restriction */ +	if (is_legacy(tbl->lq_type)) { +		if (lq_sta->band == IEEE80211_BAND_5GHZ) +			/* supp_rates has no CCK bits in A mode */ +			rate_scale_index_msk = (u16) (rate_mask & +				(lq_sta->supp_rates << IWL_FIRST_OFDM_RATE)); +		else +			rate_scale_index_msk = (u16) (rate_mask & +						      lq_sta->supp_rates); + +	} else +		rate_scale_index_msk = rate_mask; + +	if (!rate_scale_index_msk) +		rate_scale_index_msk = rate_mask; + +	if (!((1 << index) & rate_scale_index_msk)) { +		IWL_ERR(priv, "Current Rate is not valid\n"); +		if (lq_sta->search_better_tbl) { +			/* revert to active table if search table is not valid*/ +			tbl->lq_type = LQ_NONE; +			lq_sta->search_better_tbl = 0; +			tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); +			/* get "active" rate info */ +			index = iwl_hwrate_to_plcp_idx(tbl->current_rate); +			rs_update_rate_tbl(priv, ctx, lq_sta, tbl, +					   index, is_green); +		} +		return; +	} + +	/* Get expected throughput table and history window for current rate */ +	if (!tbl->expected_tpt) { +		IWL_ERR(priv, "tbl->expected_tpt is NULL\n"); +		return; +	} + +	/* force user max rate if set by user */ +	if ((lq_sta->max_rate_idx != -1) && +	    (lq_sta->max_rate_idx < index)) { +		index = lq_sta->max_rate_idx; +		update_lq = 1; +		window = &(tbl->win[index]); +		goto lq_update; +	} + +	window = &(tbl->win[index]); + +	/* +	 * If there is not enough history to calculate actual average +	 * throughput, keep analyzing results of more tx frames, without +	 * changing rate or mode (bypass most of the rest of this function). +	 * Set up new rate table in uCode only if old rate is not supported +	 * in current association (use new rate found above). +	 */ +	fail_count = window->counter - window->success_counter; +	if ((fail_count < IWL_RATE_MIN_FAILURE_TH) && +			(window->success_counter < IWL_RATE_MIN_SUCCESS_TH)) { +		IWL_DEBUG_RATE(priv, "LQ: still below TH. succ=%d total=%d " +			       "for index %d\n", +			       window->success_counter, window->counter, index); + +		/* Can't calculate this yet; not enough history */ +		window->average_tpt = IWL_INVALID_VALUE; + +		/* Should we stay with this modulation mode, +		 * or search for a new one? */ +		rs_stay_in_table(lq_sta, false); + +		goto out; +	} +	/* Else we have enough samples; calculate estimate of +	 * actual average throughput */ +	if (window->average_tpt != ((window->success_ratio * +			tbl->expected_tpt[index] + 64) / 128)) { +		IWL_ERR(priv, "expected_tpt should have been calculated by now\n"); +		window->average_tpt = ((window->success_ratio * +					tbl->expected_tpt[index] + 64) / 128); +	} + +	/* If we are searching for better modulation mode, check success. */ +	if (lq_sta->search_better_tbl && +	    (iwl_tx_ant_restriction(priv) == IWL_ANT_OK_MULTI)) { +		/* If good success, continue using the "search" mode; +		 * no need to send new link quality command, since we're +		 * continuing to use the setup that we've been trying. */ +		if (window->average_tpt > lq_sta->last_tpt) { + +			IWL_DEBUG_RATE(priv, "LQ: SWITCHING TO NEW TABLE " +					"suc=%d cur-tpt=%d old-tpt=%d\n", +					window->success_ratio, +					window->average_tpt, +					lq_sta->last_tpt); + +			if (!is_legacy(tbl->lq_type)) +				lq_sta->enable_counter = 1; + +			/* Swap tables; "search" becomes "active" */ +			lq_sta->active_tbl = active_tbl; +			current_tpt = window->average_tpt; + +		/* Else poor success; go back to mode in "active" table */ +		} else { + +			IWL_DEBUG_RATE(priv, "LQ: GOING BACK TO THE OLD TABLE " +					"suc=%d cur-tpt=%d old-tpt=%d\n", +					window->success_ratio, +					window->average_tpt, +					lq_sta->last_tpt); + +			/* Nullify "search" table */ +			tbl->lq_type = LQ_NONE; + +			/* Revert to "active" table */ +			active_tbl = lq_sta->active_tbl; +			tbl = &(lq_sta->lq_info[active_tbl]); + +			/* Revert to "active" rate and throughput info */ +			index = iwl_hwrate_to_plcp_idx(tbl->current_rate); +			current_tpt = lq_sta->last_tpt; + +			/* Need to set up a new rate table in uCode */ +			update_lq = 1; +		} + +		/* Either way, we've made a decision; modulation mode +		 * search is done, allow rate adjustment next time. */ +		lq_sta->search_better_tbl = 0; +		done_search = 1;	/* Don't switch modes below! */ +		goto lq_update; +	} + +	/* (Else) not in search of better modulation mode, try for better +	 * starting rate, while staying in this mode. */ +	high_low = rs_get_adjacent_rate(priv, index, rate_scale_index_msk, +					tbl->lq_type); +	low = high_low & 0xff; +	high = (high_low >> 8) & 0xff; + +	/* If user set max rate, dont allow higher than user constrain */ +	if ((lq_sta->max_rate_idx != -1) && +	    (lq_sta->max_rate_idx < high)) +		high = IWL_RATE_INVALID; + +	sr = window->success_ratio; + +	/* Collect measured throughputs for current and adjacent rates */ +	current_tpt = window->average_tpt; +	if (low != IWL_RATE_INVALID) +		low_tpt = tbl->win[low].average_tpt; +	if (high != IWL_RATE_INVALID) +		high_tpt = tbl->win[high].average_tpt; + +	scale_action = 0; + +	/* Too many failures, decrease rate */ +	if ((sr <= IWL_RATE_DECREASE_TH) || (current_tpt == 0)) { +		IWL_DEBUG_RATE(priv, "decrease rate because of low success_ratio\n"); +		scale_action = -1; + +	/* No throughput measured yet for adjacent rates; try increase. */ +	} else if ((low_tpt == IWL_INVALID_VALUE) && +		   (high_tpt == IWL_INVALID_VALUE)) { + +		if (high != IWL_RATE_INVALID && sr >= IWL_RATE_INCREASE_TH) +			scale_action = 1; +		else if (low != IWL_RATE_INVALID) +			scale_action = 0; +	} + +	/* Both adjacent throughputs are measured, but neither one has better +	 * throughput; we're using the best rate, don't change it! */ +	else if ((low_tpt != IWL_INVALID_VALUE) && +		 (high_tpt != IWL_INVALID_VALUE) && +		 (low_tpt < current_tpt) && +		 (high_tpt < current_tpt)) +		scale_action = 0; + +	/* At least one adjacent rate's throughput is measured, +	 * and may have better performance. */ +	else { +		/* Higher adjacent rate's throughput is measured */ +		if (high_tpt != IWL_INVALID_VALUE) { +			/* Higher rate has better throughput */ +			if (high_tpt > current_tpt && +					sr >= IWL_RATE_INCREASE_TH) { +				scale_action = 1; +			} else { +				scale_action = 0; +			} + +		/* Lower adjacent rate's throughput is measured */ +		} else if (low_tpt != IWL_INVALID_VALUE) { +			/* Lower rate has better throughput */ +			if (low_tpt > current_tpt) { +				IWL_DEBUG_RATE(priv, +				    "decrease rate because of low tpt\n"); +				scale_action = -1; +			} else if (sr >= IWL_RATE_INCREASE_TH) { +				scale_action = 1; +			} +		} +	} + +	/* Sanity check; asked for decrease, but success rate or throughput +	 * has been good at old rate.  Don't change it. */ +	if ((scale_action == -1) && (low != IWL_RATE_INVALID) && +		    ((sr > IWL_RATE_HIGH_TH) || +		     (current_tpt > (100 * tbl->expected_tpt[low])))) +		scale_action = 0; +	if (!iwl_ht_enabled(priv) && !is_legacy(tbl->lq_type)) +		scale_action = -1; +	if (iwl_tx_ant_restriction(priv) != IWL_ANT_OK_MULTI && +		(is_mimo2(tbl->lq_type) || is_mimo3(tbl->lq_type))) +		scale_action = -1; + +	if ((priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH) && +	     (is_mimo2(tbl->lq_type) || is_mimo3(tbl->lq_type))) { +		if (lq_sta->last_bt_traffic > priv->bt_traffic_load) { +			/* +			 * don't set scale_action, don't want to scale up if +			 * the rate scale doesn't otherwise think that is a +			 * good idea. +			 */ +		} else if (lq_sta->last_bt_traffic <= priv->bt_traffic_load) { +			scale_action = -1; +		} +	} +	lq_sta->last_bt_traffic = priv->bt_traffic_load; + +	if ((priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH) && +	     (is_mimo2(tbl->lq_type) || is_mimo3(tbl->lq_type))) { +		/* search for a new modulation */ +		rs_stay_in_table(lq_sta, true); +		goto lq_update; +	} + +	switch (scale_action) { +	case -1: +		/* Decrease starting rate, update uCode's rate table */ +		if (low != IWL_RATE_INVALID) { +			update_lq = 1; +			index = low; +		} + +		break; +	case 1: +		/* Increase starting rate, update uCode's rate table */ +		if (high != IWL_RATE_INVALID) { +			update_lq = 1; +			index = high; +		} + +		break; +	case 0: +		/* No change */ +	default: +		break; +	} + +	IWL_DEBUG_RATE(priv, "choose rate scale index %d action %d low %d " +		    "high %d type %d\n", +		     index, scale_action, low, high, tbl->lq_type); + +lq_update: +	/* Replace uCode's rate table for the destination station. */ +	if (update_lq) +		rs_update_rate_tbl(priv, ctx, lq_sta, tbl, index, is_green); + +	if (iwl_tx_ant_restriction(priv) == IWL_ANT_OK_MULTI) { +		/* Should we stay with this modulation mode, +		 * or search for a new one? */ +	  rs_stay_in_table(lq_sta, false); +	} +	/* +	 * Search for new modulation mode if we're: +	 * 1)  Not changing rates right now +	 * 2)  Not just finishing up a search +	 * 3)  Allowing a new search +	 */ +	if (!update_lq && !done_search && !lq_sta->stay_in_tbl && window->counter) { +		/* Save current throughput to compare with "search" throughput*/ +		lq_sta->last_tpt = current_tpt; + +		/* Select a new "search" modulation mode to try. +		 * If one is found, set up the new "search" table. */ +		if (is_legacy(tbl->lq_type)) +			rs_move_legacy_other(priv, lq_sta, conf, sta, index); +		else if (is_siso(tbl->lq_type)) +			rs_move_siso_to_other(priv, lq_sta, conf, sta, index); +		else if (is_mimo2(tbl->lq_type)) +			rs_move_mimo2_to_other(priv, lq_sta, conf, sta, index); +		else +			rs_move_mimo3_to_other(priv, lq_sta, conf, sta, index); + +		/* If new "search" mode was selected, set up in uCode table */ +		if (lq_sta->search_better_tbl) { +			/* Access the "search" table, clear its history. */ +			tbl = &(lq_sta->lq_info[(1 - lq_sta->active_tbl)]); +			for (i = 0; i < IWL_RATE_COUNT; i++) +				rs_rate_scale_clear_window(&(tbl->win[i])); + +			/* Use new "search" start rate */ +			index = iwl_hwrate_to_plcp_idx(tbl->current_rate); + +			IWL_DEBUG_RATE(priv, "Switch current  mcs: %X index: %d\n", +				     tbl->current_rate, index); +			rs_fill_link_cmd(priv, lq_sta, tbl->current_rate); +			iwl_send_lq_cmd(priv, ctx, &lq_sta->lq, CMD_ASYNC, false); +		} else +			done_search = 1; +	} + +	if (done_search && !lq_sta->stay_in_tbl) { +		/* If the "active" (non-search) mode was legacy, +		 * and we've tried switching antennas, +		 * but we haven't been able to try HT modes (not available), +		 * stay with best antenna legacy modulation for a while +		 * before next round of mode comparisons. */ +		tbl1 = &(lq_sta->lq_info[lq_sta->active_tbl]); +		if (is_legacy(tbl1->lq_type) && !conf_is_ht(conf) && +		    lq_sta->action_counter > tbl1->max_search) { +			IWL_DEBUG_RATE(priv, "LQ: STAY in legacy table\n"); +			rs_set_stay_in_table(priv, 1, lq_sta); +		} + +		/* If we're in an HT mode, and all 3 mode switch actions +		 * have been tried and compared, stay in this best modulation +		 * mode for a while before next round of mode comparisons. */ +		if (lq_sta->enable_counter && +		    (lq_sta->action_counter >= tbl1->max_search) && +		    iwl_ht_enabled(priv)) { +			if ((lq_sta->last_tpt > IWL_AGG_TPT_THREHOLD) && +			    (lq_sta->tx_agg_tid_en & (1 << tid)) && +			    (tid != IWL_MAX_TID_COUNT)) { +				u8 sta_id = lq_sta->lq.sta_id; +				tid_data = &priv->tid_data[sta_id][tid]; +				if (tid_data->agg.state == IWL_AGG_OFF) { +					IWL_DEBUG_RATE(priv, +						       "try to aggregate tid %d\n", +						       tid); +					rs_tl_turn_on_agg(priv, tid, +							  lq_sta, sta); +				} +			} +			rs_set_stay_in_table(priv, 0, lq_sta); +		} +	} + +out: +	tbl->current_rate = rate_n_flags_from_tbl(priv, tbl, index, is_green); +	lq_sta->last_txrate_idx = index; +} + +/** + * rs_initialize_lq - Initialize a station's hardware rate table + * + * The uCode's station table contains a table of fallback rates + * for automatic fallback during transmission. + * + * NOTE: This sets up a default set of values.  These will be replaced later + *       if the driver's iwl-agn-rs rate scaling algorithm is used, instead of + *       rc80211_simple. + * + * NOTE: Run REPLY_ADD_STA command to set up station table entry, before + *       calling this function (which runs REPLY_TX_LINK_QUALITY_CMD, + *       which requires station table entry to exist). + */ +static void rs_initialize_lq(struct iwl_priv *priv, +			     struct ieee80211_sta *sta, +			     struct iwl_lq_sta *lq_sta) +{ +	struct iwl_scale_tbl_info *tbl; +	int rate_idx; +	int i; +	u32 rate; +	u8 use_green = rs_use_green(sta); +	u8 active_tbl = 0; +	u8 valid_tx_ant; +	struct iwl_station_priv *sta_priv; +	struct iwl_rxon_context *ctx; + +	if (!sta || !lq_sta) +		return; + +	sta_priv = (void *)sta->drv_priv; +	ctx = sta_priv->ctx; + +	i = lq_sta->last_txrate_idx; + +	valid_tx_ant = priv->nvm_data->valid_tx_ant; + +	if (!lq_sta->search_better_tbl) +		active_tbl = lq_sta->active_tbl; +	else +		active_tbl = 1 - lq_sta->active_tbl; + +	tbl = &(lq_sta->lq_info[active_tbl]); + +	if ((i < 0) || (i >= IWL_RATE_COUNT)) +		i = 0; + +	rate = iwl_rates[i].plcp; +	tbl->ant_type = first_antenna(valid_tx_ant); +	rate |= tbl->ant_type << RATE_MCS_ANT_POS; + +	if (i >= IWL_FIRST_CCK_RATE && i <= IWL_LAST_CCK_RATE) +		rate |= RATE_MCS_CCK_MSK; + +	rs_get_tbl_info_from_mcs(rate, priv->band, tbl, &rate_idx); +	if (!rs_is_valid_ant(valid_tx_ant, tbl->ant_type)) +	    rs_toggle_antenna(valid_tx_ant, &rate, tbl); + +	rate = rate_n_flags_from_tbl(priv, tbl, rate_idx, use_green); +	tbl->current_rate = rate; +	rs_set_expected_tpt_table(lq_sta, tbl); +	rs_fill_link_cmd(NULL, lq_sta, rate); +	priv->stations[lq_sta->lq.sta_id].lq = &lq_sta->lq; +	iwl_send_lq_cmd(priv, ctx, &lq_sta->lq, 0, true); +} + +static void rs_get_rate(void *priv_r, struct ieee80211_sta *sta, void *priv_sta, +			struct ieee80211_tx_rate_control *txrc) +{ + +	struct sk_buff *skb = txrc->skb; +	struct ieee80211_supported_band *sband = txrc->sband; +	struct iwl_op_mode *op_mode __maybe_unused = +			(struct iwl_op_mode *)priv_r; +	struct iwl_priv *priv __maybe_unused = IWL_OP_MODE_GET_DVM(op_mode); +	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); +	struct iwl_lq_sta *lq_sta = priv_sta; +	int rate_idx; + +	IWL_DEBUG_RATE_LIMIT(priv, "rate scale calculate new rate for skb\n"); + +	/* Get max rate if user set max rate */ +	if (lq_sta) { +		lq_sta->max_rate_idx = txrc->max_rate_idx; +		if ((sband->band == IEEE80211_BAND_5GHZ) && +		    (lq_sta->max_rate_idx != -1)) +			lq_sta->max_rate_idx += IWL_FIRST_OFDM_RATE; +		if ((lq_sta->max_rate_idx < 0) || +		    (lq_sta->max_rate_idx >= IWL_RATE_COUNT)) +			lq_sta->max_rate_idx = -1; +	} + +	/* Treat uninitialized rate scaling data same as non-existing. */ +	if (lq_sta && !lq_sta->drv) { +		IWL_DEBUG_RATE(priv, "Rate scaling not initialized yet.\n"); +		priv_sta = NULL; +	} + +	/* Send management frames and NO_ACK data using lowest rate. */ +	if (rate_control_send_low(sta, priv_sta, txrc)) +		return; + +	rate_idx  = lq_sta->last_txrate_idx; + +	if (lq_sta->last_rate_n_flags & RATE_MCS_HT_MSK) { +		rate_idx -= IWL_FIRST_OFDM_RATE; +		/* 6M and 9M shared same MCS index */ +		rate_idx = (rate_idx > 0) ? (rate_idx - 1) : 0; +		if (rs_extract_rate(lq_sta->last_rate_n_flags) >= +		    IWL_RATE_MIMO3_6M_PLCP) +			rate_idx = rate_idx + (2 * MCS_INDEX_PER_STREAM); +		else if (rs_extract_rate(lq_sta->last_rate_n_flags) >= +			 IWL_RATE_MIMO2_6M_PLCP) +			rate_idx = rate_idx + MCS_INDEX_PER_STREAM; +		info->control.rates[0].flags = IEEE80211_TX_RC_MCS; +		if (lq_sta->last_rate_n_flags & RATE_MCS_SGI_MSK) +			info->control.rates[0].flags |= IEEE80211_TX_RC_SHORT_GI; +		if (lq_sta->last_rate_n_flags & RATE_MCS_DUP_MSK) +			info->control.rates[0].flags |= IEEE80211_TX_RC_DUP_DATA; +		if (lq_sta->last_rate_n_flags & RATE_MCS_HT40_MSK) +			info->control.rates[0].flags |= IEEE80211_TX_RC_40_MHZ_WIDTH; +		if (lq_sta->last_rate_n_flags & RATE_MCS_GF_MSK) +			info->control.rates[0].flags |= IEEE80211_TX_RC_GREEN_FIELD; +	} else { +		/* Check for invalid rates */ +		if ((rate_idx < 0) || (rate_idx >= IWL_RATE_COUNT_LEGACY) || +				((sband->band == IEEE80211_BAND_5GHZ) && +				 (rate_idx < IWL_FIRST_OFDM_RATE))) +			rate_idx = rate_lowest_index(sband, sta); +		/* On valid 5 GHz rate, adjust index */ +		else if (sband->band == IEEE80211_BAND_5GHZ) +			rate_idx -= IWL_FIRST_OFDM_RATE; +		info->control.rates[0].flags = 0; +	} +	info->control.rates[0].idx = rate_idx; +	info->control.rates[0].count = 1; +} + +static void *rs_alloc_sta(void *priv_rate, struct ieee80211_sta *sta, +			  gfp_t gfp) +{ +	struct iwl_station_priv *sta_priv = (struct iwl_station_priv *) sta->drv_priv; +	struct iwl_op_mode *op_mode __maybe_unused = +			(struct iwl_op_mode *)priv_rate; +	struct iwl_priv *priv __maybe_unused = IWL_OP_MODE_GET_DVM(op_mode); + +	IWL_DEBUG_RATE(priv, "create station rate scale window\n"); + +	return &sta_priv->lq_sta; +} + +/* + * Called after adding a new station to initialize rate scaling + */ +void iwl_rs_rate_init(struct iwl_priv *priv, struct ieee80211_sta *sta, u8 sta_id) +{ +	int i, j; +	struct ieee80211_hw *hw = priv->hw; +	struct ieee80211_conf *conf = &priv->hw->conf; +	struct ieee80211_sta_ht_cap *ht_cap = &sta->ht_cap; +	struct iwl_station_priv *sta_priv; +	struct iwl_lq_sta *lq_sta; +	struct ieee80211_supported_band *sband; +	unsigned long supp; /* must be unsigned long for for_each_set_bit */ + +	sta_priv = (struct iwl_station_priv *) sta->drv_priv; +	lq_sta = &sta_priv->lq_sta; +	sband = hw->wiphy->bands[conf->chandef.chan->band]; + + +	lq_sta->lq.sta_id = sta_id; + +	for (j = 0; j < LQ_SIZE; j++) +		for (i = 0; i < IWL_RATE_COUNT; i++) +			rs_rate_scale_clear_window(&lq_sta->lq_info[j].win[i]); + +	lq_sta->flush_timer = 0; +	lq_sta->supp_rates = sta->supp_rates[sband->band]; + +	IWL_DEBUG_RATE(priv, "LQ: *** rate scale station global init for station %d ***\n", +		       sta_id); +	/* TODO: what is a good starting rate for STA? About middle? Maybe not +	 * the lowest or the highest rate.. Could consider using RSSI from +	 * previous packets? Need to have IEEE 802.1X auth succeed immediately +	 * after assoc.. */ + +	lq_sta->is_dup = 0; +	lq_sta->max_rate_idx = -1; +	lq_sta->missed_rate_counter = IWL_MISSED_RATE_MAX; +	lq_sta->is_green = rs_use_green(sta); +	lq_sta->band = sband->band; +	/* +	 * active legacy rates as per supported rates bitmap +	 */ +	supp = sta->supp_rates[sband->band]; +	lq_sta->active_legacy_rate = 0; +	for_each_set_bit(i, &supp, BITS_PER_LONG) +		lq_sta->active_legacy_rate |= BIT(sband->bitrates[i].hw_value); + +	/* +	 * active_siso_rate mask includes 9 MBits (bit 5), and CCK (bits 0-3), +	 * supp_rates[] does not; shift to convert format, force 9 MBits off. +	 */ +	lq_sta->active_siso_rate = ht_cap->mcs.rx_mask[0] << 1; +	lq_sta->active_siso_rate |= ht_cap->mcs.rx_mask[0] & 0x1; +	lq_sta->active_siso_rate &= ~((u16)0x2); +	lq_sta->active_siso_rate <<= IWL_FIRST_OFDM_RATE; + +	/* Same here */ +	lq_sta->active_mimo2_rate = ht_cap->mcs.rx_mask[1] << 1; +	lq_sta->active_mimo2_rate |= ht_cap->mcs.rx_mask[1] & 0x1; +	lq_sta->active_mimo2_rate &= ~((u16)0x2); +	lq_sta->active_mimo2_rate <<= IWL_FIRST_OFDM_RATE; + +	lq_sta->active_mimo3_rate = ht_cap->mcs.rx_mask[2] << 1; +	lq_sta->active_mimo3_rate |= ht_cap->mcs.rx_mask[2] & 0x1; +	lq_sta->active_mimo3_rate &= ~((u16)0x2); +	lq_sta->active_mimo3_rate <<= IWL_FIRST_OFDM_RATE; + +	IWL_DEBUG_RATE(priv, "SISO-RATE=%X MIMO2-RATE=%X MIMO3-RATE=%X\n", +		     lq_sta->active_siso_rate, +		     lq_sta->active_mimo2_rate, +		     lq_sta->active_mimo3_rate); + +	/* These values will be overridden later */ +	lq_sta->lq.general_params.single_stream_ant_msk = +		first_antenna(priv->nvm_data->valid_tx_ant); +	lq_sta->lq.general_params.dual_stream_ant_msk = +		priv->nvm_data->valid_tx_ant & +		~first_antenna(priv->nvm_data->valid_tx_ant); +	if (!lq_sta->lq.general_params.dual_stream_ant_msk) { +		lq_sta->lq.general_params.dual_stream_ant_msk = ANT_AB; +	} else if (num_of_ant(priv->nvm_data->valid_tx_ant) == 2) { +		lq_sta->lq.general_params.dual_stream_ant_msk = +			priv->nvm_data->valid_tx_ant; +	} + +	/* as default allow aggregation for all tids */ +	lq_sta->tx_agg_tid_en = IWL_AGG_ALL_TID; +	lq_sta->drv = priv; + +	/* Set last_txrate_idx to lowest rate */ +	lq_sta->last_txrate_idx = rate_lowest_index(sband, sta); +	if (sband->band == IEEE80211_BAND_5GHZ) +		lq_sta->last_txrate_idx += IWL_FIRST_OFDM_RATE; +	lq_sta->is_agg = 0; +#ifdef CONFIG_MAC80211_DEBUGFS +	lq_sta->dbg_fixed_rate = 0; +#endif + +	rs_initialize_lq(priv, sta, lq_sta); +} + +static void rs_fill_link_cmd(struct iwl_priv *priv, +			     struct iwl_lq_sta *lq_sta, u32 new_rate) +{ +	struct iwl_scale_tbl_info tbl_type; +	int index = 0; +	int rate_idx; +	int repeat_rate = 0; +	u8 ant_toggle_cnt = 0; +	u8 use_ht_possible = 1; +	u8 valid_tx_ant = 0; +	struct iwl_station_priv *sta_priv = +		container_of(lq_sta, struct iwl_station_priv, lq_sta); +	struct iwl_link_quality_cmd *lq_cmd = &lq_sta->lq; + +	/* Override starting rate (index 0) if needed for debug purposes */ +	rs_dbgfs_set_mcs(lq_sta, &new_rate, index); + +	/* Interpret new_rate (rate_n_flags) */ +	rs_get_tbl_info_from_mcs(new_rate, lq_sta->band, +				  &tbl_type, &rate_idx); + +	if (priv && priv->bt_full_concurrent) { +		/* 1x1 only */ +		tbl_type.ant_type = +			first_antenna(priv->nvm_data->valid_tx_ant); +	} + +	/* How many times should we repeat the initial rate? */ +	if (is_legacy(tbl_type.lq_type)) { +		ant_toggle_cnt = 1; +		repeat_rate = IWL_NUMBER_TRY; +	} else { +		repeat_rate = min(IWL_HT_NUMBER_TRY, +				  LINK_QUAL_AGG_DISABLE_START_DEF - 1); +	} + +	lq_cmd->general_params.mimo_delimiter = +			is_mimo(tbl_type.lq_type) ? 1 : 0; + +	/* Fill 1st table entry (index 0) */ +	lq_cmd->rs_table[index].rate_n_flags = cpu_to_le32(new_rate); + +	if (num_of_ant(tbl_type.ant_type) == 1) { +		lq_cmd->general_params.single_stream_ant_msk = +						tbl_type.ant_type; +	} else if (num_of_ant(tbl_type.ant_type) == 2) { +		lq_cmd->general_params.dual_stream_ant_msk = +						tbl_type.ant_type; +	} /* otherwise we don't modify the existing value */ + +	index++; +	repeat_rate--; +	if (priv) { +		if (priv->bt_full_concurrent) +			valid_tx_ant = ANT_A; +		else +			valid_tx_ant = priv->nvm_data->valid_tx_ant; +	} + +	/* Fill rest of rate table */ +	while (index < LINK_QUAL_MAX_RETRY_NUM) { +		/* Repeat initial/next rate. +		 * For legacy IWL_NUMBER_TRY == 1, this loop will not execute. +		 * For HT IWL_HT_NUMBER_TRY == 3, this executes twice. */ +		while (repeat_rate > 0 && (index < LINK_QUAL_MAX_RETRY_NUM)) { +			if (is_legacy(tbl_type.lq_type)) { +				if (ant_toggle_cnt < NUM_TRY_BEFORE_ANT_TOGGLE) +					ant_toggle_cnt++; +				else if (priv && +					 rs_toggle_antenna(valid_tx_ant, +							&new_rate, &tbl_type)) +					ant_toggle_cnt = 1; +			} + +			/* Override next rate if needed for debug purposes */ +			rs_dbgfs_set_mcs(lq_sta, &new_rate, index); + +			/* Fill next table entry */ +			lq_cmd->rs_table[index].rate_n_flags = +					cpu_to_le32(new_rate); +			repeat_rate--; +			index++; +		} + +		rs_get_tbl_info_from_mcs(new_rate, lq_sta->band, &tbl_type, +						&rate_idx); + +		if (priv && priv->bt_full_concurrent) { +			/* 1x1 only */ +			tbl_type.ant_type = +			    first_antenna(priv->nvm_data->valid_tx_ant); +		} + +		/* Indicate to uCode which entries might be MIMO. +		 * If initial rate was MIMO, this will finally end up +		 * as (IWL_HT_NUMBER_TRY * 2), after 2nd pass, otherwise 0. */ +		if (is_mimo(tbl_type.lq_type)) +			lq_cmd->general_params.mimo_delimiter = index; + +		/* Get next rate */ +		new_rate = rs_get_lower_rate(lq_sta, &tbl_type, rate_idx, +					     use_ht_possible); + +		/* How many times should we repeat the next rate? */ +		if (is_legacy(tbl_type.lq_type)) { +			if (ant_toggle_cnt < NUM_TRY_BEFORE_ANT_TOGGLE) +				ant_toggle_cnt++; +			else if (priv && +				 rs_toggle_antenna(valid_tx_ant, +						   &new_rate, &tbl_type)) +				ant_toggle_cnt = 1; + +			repeat_rate = IWL_NUMBER_TRY; +		} else { +			repeat_rate = IWL_HT_NUMBER_TRY; +		} + +		/* Don't allow HT rates after next pass. +		 * rs_get_lower_rate() will change type to LQ_A or LQ_G. */ +		use_ht_possible = 0; + +		/* Override next rate if needed for debug purposes */ +		rs_dbgfs_set_mcs(lq_sta, &new_rate, index); + +		/* Fill next table entry */ +		lq_cmd->rs_table[index].rate_n_flags = cpu_to_le32(new_rate); + +		index++; +		repeat_rate--; +	} + +	lq_cmd->agg_params.agg_frame_cnt_limit = +		sta_priv->max_agg_bufsize ?: LINK_QUAL_AGG_FRAME_LIMIT_DEF; +	lq_cmd->agg_params.agg_dis_start_th = LINK_QUAL_AGG_DISABLE_START_DEF; + +	lq_cmd->agg_params.agg_time_limit = +		cpu_to_le16(LINK_QUAL_AGG_TIME_LIMIT_DEF); +	/* +	 * overwrite if needed, pass aggregation time limit +	 * to uCode in uSec +	 */ +	if (priv && priv->lib->bt_params && +	    priv->lib->bt_params->agg_time_limit && +	    priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH) +		lq_cmd->agg_params.agg_time_limit = +			cpu_to_le16(priv->lib->bt_params->agg_time_limit); +} + +static void *rs_alloc(struct ieee80211_hw *hw, struct dentry *debugfsdir) +{ +	return hw->priv; +} +/* rate scale requires free function to be implemented */ +static void rs_free(void *priv_rate) +{ +	return; +} + +static void rs_free_sta(void *priv_r, struct ieee80211_sta *sta, +			void *priv_sta) +{ +	struct iwl_op_mode *op_mode __maybe_unused = priv_r; +	struct iwl_priv *priv __maybe_unused = IWL_OP_MODE_GET_DVM(op_mode); + +	IWL_DEBUG_RATE(priv, "enter\n"); +	IWL_DEBUG_RATE(priv, "leave\n"); +} + +#ifdef CONFIG_MAC80211_DEBUGFS +static void rs_dbgfs_set_mcs(struct iwl_lq_sta *lq_sta, +			     u32 *rate_n_flags, int index) +{ +	struct iwl_priv *priv; +	u8 valid_tx_ant; +	u8 ant_sel_tx; + +	priv = lq_sta->drv; +	valid_tx_ant = priv->nvm_data->valid_tx_ant; +	if (lq_sta->dbg_fixed_rate) { +		ant_sel_tx = +		  ((lq_sta->dbg_fixed_rate & RATE_MCS_ANT_ABC_MSK) +		  >> RATE_MCS_ANT_POS); +		if ((valid_tx_ant & ant_sel_tx) == ant_sel_tx) { +			*rate_n_flags = lq_sta->dbg_fixed_rate; +			IWL_DEBUG_RATE(priv, "Fixed rate ON\n"); +		} else { +			lq_sta->dbg_fixed_rate = 0; +			IWL_ERR(priv, +			    "Invalid antenna selection 0x%X, Valid is 0x%X\n", +			    ant_sel_tx, valid_tx_ant); +			IWL_DEBUG_RATE(priv, "Fixed rate OFF\n"); +		} +	} else { +		IWL_DEBUG_RATE(priv, "Fixed rate OFF\n"); +	} +} + +static ssize_t rs_sta_dbgfs_scale_table_write(struct file *file, +			const char __user *user_buf, size_t count, loff_t *ppos) +{ +	struct iwl_lq_sta *lq_sta = file->private_data; +	struct iwl_priv *priv; +	char buf[64]; +	size_t buf_size; +	u32 parsed_rate; + + +	priv = lq_sta->drv; +	memset(buf, 0, sizeof(buf)); +	buf_size = min(count, sizeof(buf) -  1); +	if (copy_from_user(buf, user_buf, buf_size)) +		return -EFAULT; + +	if (sscanf(buf, "%x", &parsed_rate) == 1) +		lq_sta->dbg_fixed_rate = parsed_rate; +	else +		lq_sta->dbg_fixed_rate = 0; + +	rs_program_fix_rate(priv, lq_sta); + +	return count; +} + +static ssize_t rs_sta_dbgfs_scale_table_read(struct file *file, +			char __user *user_buf, size_t count, loff_t *ppos) +{ +	char *buff; +	int desc = 0; +	int i = 0; +	int index = 0; +	ssize_t ret; + +	struct iwl_lq_sta *lq_sta = file->private_data; +	struct iwl_priv *priv; +	struct iwl_scale_tbl_info *tbl = &(lq_sta->lq_info[lq_sta->active_tbl]); + +	priv = lq_sta->drv; +	buff = kmalloc(1024, GFP_KERNEL); +	if (!buff) +		return -ENOMEM; + +	desc += sprintf(buff+desc, "sta_id %d\n", lq_sta->lq.sta_id); +	desc += sprintf(buff+desc, "failed=%d success=%d rate=0%X\n", +			lq_sta->total_failed, lq_sta->total_success, +			lq_sta->active_legacy_rate); +	desc += sprintf(buff+desc, "fixed rate 0x%X\n", +			lq_sta->dbg_fixed_rate); +	desc += sprintf(buff+desc, "valid_tx_ant %s%s%s\n", +	    (priv->nvm_data->valid_tx_ant & ANT_A) ? "ANT_A," : "", +	    (priv->nvm_data->valid_tx_ant & ANT_B) ? "ANT_B," : "", +	    (priv->nvm_data->valid_tx_ant & ANT_C) ? "ANT_C" : ""); +	desc += sprintf(buff+desc, "lq type %s\n", +	   (is_legacy(tbl->lq_type)) ? "legacy" : "HT"); +	if (is_Ht(tbl->lq_type)) { +		desc += sprintf(buff+desc, " %s", +		   (is_siso(tbl->lq_type)) ? "SISO" : +		   ((is_mimo2(tbl->lq_type)) ? "MIMO2" : "MIMO3")); +		   desc += sprintf(buff+desc, " %s", +		   (tbl->is_ht40) ? "40MHz" : "20MHz"); +		   desc += sprintf(buff+desc, " %s %s %s\n", (tbl->is_SGI) ? "SGI" : "", +		   (lq_sta->is_green) ? "GF enabled" : "", +		   (lq_sta->is_agg) ? "AGG on" : ""); +	} +	desc += sprintf(buff+desc, "last tx rate=0x%X\n", +		lq_sta->last_rate_n_flags); +	desc += sprintf(buff+desc, "general:" +		"flags=0x%X mimo-d=%d s-ant0x%x d-ant=0x%x\n", +		lq_sta->lq.general_params.flags, +		lq_sta->lq.general_params.mimo_delimiter, +		lq_sta->lq.general_params.single_stream_ant_msk, +		lq_sta->lq.general_params.dual_stream_ant_msk); + +	desc += sprintf(buff+desc, "agg:" +			"time_limit=%d dist_start_th=%d frame_cnt_limit=%d\n", +			le16_to_cpu(lq_sta->lq.agg_params.agg_time_limit), +			lq_sta->lq.agg_params.agg_dis_start_th, +			lq_sta->lq.agg_params.agg_frame_cnt_limit); + +	desc += sprintf(buff+desc, +			"Start idx [0]=0x%x [1]=0x%x [2]=0x%x [3]=0x%x\n", +			lq_sta->lq.general_params.start_rate_index[0], +			lq_sta->lq.general_params.start_rate_index[1], +			lq_sta->lq.general_params.start_rate_index[2], +			lq_sta->lq.general_params.start_rate_index[3]); + +	for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) { +		index = iwl_hwrate_to_plcp_idx( +			le32_to_cpu(lq_sta->lq.rs_table[i].rate_n_flags)); +		if (is_legacy(tbl->lq_type)) { +			desc += sprintf(buff+desc, " rate[%d] 0x%X %smbps\n", +				i, le32_to_cpu(lq_sta->lq.rs_table[i].rate_n_flags), +				iwl_rate_mcs[index].mbps); +		} else { +			desc += sprintf(buff+desc, " rate[%d] 0x%X %smbps (%s)\n", +				i, le32_to_cpu(lq_sta->lq.rs_table[i].rate_n_flags), +				iwl_rate_mcs[index].mbps, iwl_rate_mcs[index].mcs); +		} +	} + +	ret = simple_read_from_buffer(user_buf, count, ppos, buff, desc); +	kfree(buff); +	return ret; +} + +static const struct file_operations rs_sta_dbgfs_scale_table_ops = { +	.write = rs_sta_dbgfs_scale_table_write, +	.read = rs_sta_dbgfs_scale_table_read, +	.open = simple_open, +	.llseek = default_llseek, +}; +static ssize_t rs_sta_dbgfs_stats_table_read(struct file *file, +			char __user *user_buf, size_t count, loff_t *ppos) +{ +	char *buff; +	int desc = 0; +	int i, j; +	ssize_t ret; + +	struct iwl_lq_sta *lq_sta = file->private_data; + +	buff = kmalloc(1024, GFP_KERNEL); +	if (!buff) +		return -ENOMEM; + +	for (i = 0; i < LQ_SIZE; i++) { +		desc += sprintf(buff+desc, +				"%s type=%d SGI=%d HT40=%d DUP=%d GF=%d\n" +				"rate=0x%X\n", +				lq_sta->active_tbl == i ? "*" : "x", +				lq_sta->lq_info[i].lq_type, +				lq_sta->lq_info[i].is_SGI, +				lq_sta->lq_info[i].is_ht40, +				lq_sta->lq_info[i].is_dup, +				lq_sta->is_green, +				lq_sta->lq_info[i].current_rate); +		for (j = 0; j < IWL_RATE_COUNT; j++) { +			desc += sprintf(buff+desc, +				"counter=%d success=%d %%=%d\n", +				lq_sta->lq_info[i].win[j].counter, +				lq_sta->lq_info[i].win[j].success_counter, +				lq_sta->lq_info[i].win[j].success_ratio); +		} +	} +	ret = simple_read_from_buffer(user_buf, count, ppos, buff, desc); +	kfree(buff); +	return ret; +} + +static const struct file_operations rs_sta_dbgfs_stats_table_ops = { +	.read = rs_sta_dbgfs_stats_table_read, +	.open = simple_open, +	.llseek = default_llseek, +}; + +static ssize_t rs_sta_dbgfs_rate_scale_data_read(struct file *file, +			char __user *user_buf, size_t count, loff_t *ppos) +{ +	struct iwl_lq_sta *lq_sta = file->private_data; +	struct iwl_scale_tbl_info *tbl = &lq_sta->lq_info[lq_sta->active_tbl]; +	char buff[120]; +	int desc = 0; + +	if (is_Ht(tbl->lq_type)) +		desc += sprintf(buff+desc, +				"Bit Rate= %d Mb/s\n", +				tbl->expected_tpt[lq_sta->last_txrate_idx]); +	else +		desc += sprintf(buff+desc, +				"Bit Rate= %d Mb/s\n", +				iwl_rates[lq_sta->last_txrate_idx].ieee >> 1); + +	return simple_read_from_buffer(user_buf, count, ppos, buff, desc); +} + +static const struct file_operations rs_sta_dbgfs_rate_scale_data_ops = { +	.read = rs_sta_dbgfs_rate_scale_data_read, +	.open = simple_open, +	.llseek = default_llseek, +}; + +static void rs_add_debugfs(void *priv, void *priv_sta, +					struct dentry *dir) +{ +	struct iwl_lq_sta *lq_sta = priv_sta; +	lq_sta->rs_sta_dbgfs_scale_table_file = +		debugfs_create_file("rate_scale_table", S_IRUSR | S_IWUSR, dir, +				lq_sta, &rs_sta_dbgfs_scale_table_ops); +	lq_sta->rs_sta_dbgfs_stats_table_file = +		debugfs_create_file("rate_stats_table", S_IRUSR, dir, +			lq_sta, &rs_sta_dbgfs_stats_table_ops); +	lq_sta->rs_sta_dbgfs_rate_scale_data_file = +		debugfs_create_file("rate_scale_data", S_IRUSR, dir, +			lq_sta, &rs_sta_dbgfs_rate_scale_data_ops); +	lq_sta->rs_sta_dbgfs_tx_agg_tid_en_file = +		debugfs_create_u8("tx_agg_tid_enable", S_IRUSR | S_IWUSR, dir, +		&lq_sta->tx_agg_tid_en); + +} + +static void rs_remove_debugfs(void *priv, void *priv_sta) +{ +	struct iwl_lq_sta *lq_sta = priv_sta; +	debugfs_remove(lq_sta->rs_sta_dbgfs_scale_table_file); +	debugfs_remove(lq_sta->rs_sta_dbgfs_stats_table_file); +	debugfs_remove(lq_sta->rs_sta_dbgfs_rate_scale_data_file); +	debugfs_remove(lq_sta->rs_sta_dbgfs_tx_agg_tid_en_file); +} +#endif + +/* + * Initialization of rate scaling information is done by driver after + * the station is added. Since mac80211 calls this function before a + * station is added we ignore it. + */ +static void rs_rate_init_stub(void *priv_r, struct ieee80211_supported_band *sband, +			      struct cfg80211_chan_def *chandef, +			      struct ieee80211_sta *sta, void *priv_sta) +{ +} + +static const struct rate_control_ops rs_ops = { +	.name = RS_NAME, +	.tx_status = rs_tx_status, +	.get_rate = rs_get_rate, +	.rate_init = rs_rate_init_stub, +	.alloc = rs_alloc, +	.free = rs_free, +	.alloc_sta = rs_alloc_sta, +	.free_sta = rs_free_sta, +#ifdef CONFIG_MAC80211_DEBUGFS +	.add_sta_debugfs = rs_add_debugfs, +	.remove_sta_debugfs = rs_remove_debugfs, +#endif +}; + +int iwlagn_rate_control_register(void) +{ +	return ieee80211_rate_control_register(&rs_ops); +} + +void iwlagn_rate_control_unregister(void) +{ +	ieee80211_rate_control_unregister(&rs_ops); +} + diff --git a/drivers/net/wireless/iwlwifi/dvm/rs.h b/drivers/net/wireless/iwlwifi/dvm/rs.h new file mode 100644 index 00000000000..f6bd25cad20 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/rs.h @@ -0,0 +1,426 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +#ifndef __iwl_agn_rs_h__ +#define __iwl_agn_rs_h__ + +#include <net/mac80211.h> + +#include "iwl-config.h" + +#include "commands.h" + +struct iwl_rate_info { +	u8 plcp;	/* uCode API:  IWL_RATE_6M_PLCP, etc. */ +	u8 plcp_siso;	/* uCode API:  IWL_RATE_SISO_6M_PLCP, etc. */ +	u8 plcp_mimo2;	/* uCode API:  IWL_RATE_MIMO2_6M_PLCP, etc. */ +	u8 plcp_mimo3;  /* uCode API:  IWL_RATE_MIMO3_6M_PLCP, etc. */ +	u8 ieee;	/* MAC header:  IWL_RATE_6M_IEEE, etc. */ +	u8 prev_ieee;    /* previous rate in IEEE speeds */ +	u8 next_ieee;    /* next rate in IEEE speeds */ +	u8 prev_rs;      /* previous rate used in rs algo */ +	u8 next_rs;      /* next rate used in rs algo */ +	u8 prev_rs_tgg;  /* previous rate used in TGG rs algo */ +	u8 next_rs_tgg;  /* next rate used in TGG rs algo */ +}; + +/* + * These serve as indexes into + * struct iwl_rate_info iwl_rates[IWL_RATE_COUNT]; + */ +enum { +	IWL_RATE_1M_INDEX = 0, +	IWL_RATE_2M_INDEX, +	IWL_RATE_5M_INDEX, +	IWL_RATE_11M_INDEX, +	IWL_RATE_6M_INDEX, +	IWL_RATE_9M_INDEX, +	IWL_RATE_12M_INDEX, +	IWL_RATE_18M_INDEX, +	IWL_RATE_24M_INDEX, +	IWL_RATE_36M_INDEX, +	IWL_RATE_48M_INDEX, +	IWL_RATE_54M_INDEX, +	IWL_RATE_60M_INDEX, +	IWL_RATE_COUNT, /*FIXME:RS:change to IWL_RATE_INDEX_COUNT,*/ +	IWL_RATE_COUNT_LEGACY = IWL_RATE_COUNT - 1,	/* Excluding 60M */ +	IWL_RATE_INVM_INDEX = IWL_RATE_COUNT, +	IWL_RATE_INVALID = IWL_RATE_COUNT, +}; + +enum { +	IWL_RATE_6M_INDEX_TABLE = 0, +	IWL_RATE_9M_INDEX_TABLE, +	IWL_RATE_12M_INDEX_TABLE, +	IWL_RATE_18M_INDEX_TABLE, +	IWL_RATE_24M_INDEX_TABLE, +	IWL_RATE_36M_INDEX_TABLE, +	IWL_RATE_48M_INDEX_TABLE, +	IWL_RATE_54M_INDEX_TABLE, +	IWL_RATE_1M_INDEX_TABLE, +	IWL_RATE_2M_INDEX_TABLE, +	IWL_RATE_5M_INDEX_TABLE, +	IWL_RATE_11M_INDEX_TABLE, +	IWL_RATE_INVM_INDEX_TABLE = IWL_RATE_INVM_INDEX - 1, +}; + +enum { +	IWL_FIRST_OFDM_RATE = IWL_RATE_6M_INDEX, +	IWL_LAST_OFDM_RATE = IWL_RATE_60M_INDEX, +	IWL_FIRST_CCK_RATE = IWL_RATE_1M_INDEX, +	IWL_LAST_CCK_RATE = IWL_RATE_11M_INDEX, +}; + +/* #define vs. enum to keep from defaulting to 'large integer' */ +#define	IWL_RATE_6M_MASK   (1 << IWL_RATE_6M_INDEX) +#define	IWL_RATE_9M_MASK   (1 << IWL_RATE_9M_INDEX) +#define	IWL_RATE_12M_MASK  (1 << IWL_RATE_12M_INDEX) +#define	IWL_RATE_18M_MASK  (1 << IWL_RATE_18M_INDEX) +#define	IWL_RATE_24M_MASK  (1 << IWL_RATE_24M_INDEX) +#define	IWL_RATE_36M_MASK  (1 << IWL_RATE_36M_INDEX) +#define	IWL_RATE_48M_MASK  (1 << IWL_RATE_48M_INDEX) +#define	IWL_RATE_54M_MASK  (1 << IWL_RATE_54M_INDEX) +#define IWL_RATE_60M_MASK  (1 << IWL_RATE_60M_INDEX) +#define	IWL_RATE_1M_MASK   (1 << IWL_RATE_1M_INDEX) +#define	IWL_RATE_2M_MASK   (1 << IWL_RATE_2M_INDEX) +#define	IWL_RATE_5M_MASK   (1 << IWL_RATE_5M_INDEX) +#define	IWL_RATE_11M_MASK  (1 << IWL_RATE_11M_INDEX) + +/* uCode API values for legacy bit rates, both OFDM and CCK */ +enum { +	IWL_RATE_6M_PLCP  = 13, +	IWL_RATE_9M_PLCP  = 15, +	IWL_RATE_12M_PLCP = 5, +	IWL_RATE_18M_PLCP = 7, +	IWL_RATE_24M_PLCP = 9, +	IWL_RATE_36M_PLCP = 11, +	IWL_RATE_48M_PLCP = 1, +	IWL_RATE_54M_PLCP = 3, +	IWL_RATE_60M_PLCP = 3,/*FIXME:RS:should be removed*/ +	IWL_RATE_1M_PLCP  = 10, +	IWL_RATE_2M_PLCP  = 20, +	IWL_RATE_5M_PLCP  = 55, +	IWL_RATE_11M_PLCP = 110, +	/*FIXME:RS:change to IWL_RATE_LEGACY_??M_PLCP */ +	/*FIXME:RS:add IWL_RATE_LEGACY_INVM_PLCP = 0,*/ +}; + +/* uCode API values for OFDM high-throughput (HT) bit rates */ +enum { +	IWL_RATE_SISO_6M_PLCP = 0, +	IWL_RATE_SISO_12M_PLCP = 1, +	IWL_RATE_SISO_18M_PLCP = 2, +	IWL_RATE_SISO_24M_PLCP = 3, +	IWL_RATE_SISO_36M_PLCP = 4, +	IWL_RATE_SISO_48M_PLCP = 5, +	IWL_RATE_SISO_54M_PLCP = 6, +	IWL_RATE_SISO_60M_PLCP = 7, +	IWL_RATE_MIMO2_6M_PLCP  = 0x8, +	IWL_RATE_MIMO2_12M_PLCP = 0x9, +	IWL_RATE_MIMO2_18M_PLCP = 0xa, +	IWL_RATE_MIMO2_24M_PLCP = 0xb, +	IWL_RATE_MIMO2_36M_PLCP = 0xc, +	IWL_RATE_MIMO2_48M_PLCP = 0xd, +	IWL_RATE_MIMO2_54M_PLCP = 0xe, +	IWL_RATE_MIMO2_60M_PLCP = 0xf, +	IWL_RATE_MIMO3_6M_PLCP  = 0x10, +	IWL_RATE_MIMO3_12M_PLCP = 0x11, +	IWL_RATE_MIMO3_18M_PLCP = 0x12, +	IWL_RATE_MIMO3_24M_PLCP = 0x13, +	IWL_RATE_MIMO3_36M_PLCP = 0x14, +	IWL_RATE_MIMO3_48M_PLCP = 0x15, +	IWL_RATE_MIMO3_54M_PLCP = 0x16, +	IWL_RATE_MIMO3_60M_PLCP = 0x17, +	IWL_RATE_SISO_INVM_PLCP, +	IWL_RATE_MIMO2_INVM_PLCP = IWL_RATE_SISO_INVM_PLCP, +	IWL_RATE_MIMO3_INVM_PLCP = IWL_RATE_SISO_INVM_PLCP, +}; + +/* MAC header values for bit rates */ +enum { +	IWL_RATE_6M_IEEE  = 12, +	IWL_RATE_9M_IEEE  = 18, +	IWL_RATE_12M_IEEE = 24, +	IWL_RATE_18M_IEEE = 36, +	IWL_RATE_24M_IEEE = 48, +	IWL_RATE_36M_IEEE = 72, +	IWL_RATE_48M_IEEE = 96, +	IWL_RATE_54M_IEEE = 108, +	IWL_RATE_60M_IEEE = 120, +	IWL_RATE_1M_IEEE  = 2, +	IWL_RATE_2M_IEEE  = 4, +	IWL_RATE_5M_IEEE  = 11, +	IWL_RATE_11M_IEEE = 22, +}; + +#define IWL_RATES_MASK ((1 << IWL_RATE_COUNT) - 1) + +#define IWL_INVALID_VALUE    -1 + +#define IWL_MIN_RSSI_VAL                 -100 +#define IWL_MAX_RSSI_VAL                    0 + +/* These values specify how many Tx frame attempts before + * searching for a new modulation mode */ +#define IWL_LEGACY_FAILURE_LIMIT	160 +#define IWL_LEGACY_SUCCESS_LIMIT	480 +#define IWL_LEGACY_TABLE_COUNT		160 + +#define IWL_NONE_LEGACY_FAILURE_LIMIT	400 +#define IWL_NONE_LEGACY_SUCCESS_LIMIT	4500 +#define IWL_NONE_LEGACY_TABLE_COUNT	1500 + +/* Success ratio (ACKed / attempted tx frames) values (perfect is 128 * 100) */ +#define IWL_RS_GOOD_RATIO		12800	/* 100% */ +#define IWL_RATE_SCALE_SWITCH		10880	/*  85% */ +#define IWL_RATE_HIGH_TH		10880	/*  85% */ +#define IWL_RATE_INCREASE_TH		6400	/*  50% */ +#define IWL_RATE_DECREASE_TH		1920	/*  15% */ + +/* possible actions when in legacy mode */ +#define IWL_LEGACY_SWITCH_ANTENNA1      0 +#define IWL_LEGACY_SWITCH_ANTENNA2      1 +#define IWL_LEGACY_SWITCH_SISO          2 +#define IWL_LEGACY_SWITCH_MIMO2_AB      3 +#define IWL_LEGACY_SWITCH_MIMO2_AC      4 +#define IWL_LEGACY_SWITCH_MIMO2_BC      5 +#define IWL_LEGACY_SWITCH_MIMO3_ABC     6 + +/* possible actions when in siso mode */ +#define IWL_SISO_SWITCH_ANTENNA1        0 +#define IWL_SISO_SWITCH_ANTENNA2        1 +#define IWL_SISO_SWITCH_MIMO2_AB        2 +#define IWL_SISO_SWITCH_MIMO2_AC        3 +#define IWL_SISO_SWITCH_MIMO2_BC        4 +#define IWL_SISO_SWITCH_GI              5 +#define IWL_SISO_SWITCH_MIMO3_ABC       6 + + +/* possible actions when in mimo mode */ +#define IWL_MIMO2_SWITCH_ANTENNA1       0 +#define IWL_MIMO2_SWITCH_ANTENNA2       1 +#define IWL_MIMO2_SWITCH_SISO_A         2 +#define IWL_MIMO2_SWITCH_SISO_B         3 +#define IWL_MIMO2_SWITCH_SISO_C         4 +#define IWL_MIMO2_SWITCH_GI             5 +#define IWL_MIMO2_SWITCH_MIMO3_ABC      6 + + +/* possible actions when in mimo3 mode */ +#define IWL_MIMO3_SWITCH_ANTENNA1       0 +#define IWL_MIMO3_SWITCH_ANTENNA2       1 +#define IWL_MIMO3_SWITCH_SISO_A         2 +#define IWL_MIMO3_SWITCH_SISO_B         3 +#define IWL_MIMO3_SWITCH_SISO_C         4 +#define IWL_MIMO3_SWITCH_MIMO2_AB       5 +#define IWL_MIMO3_SWITCH_MIMO2_AC       6 +#define IWL_MIMO3_SWITCH_MIMO2_BC       7 +#define IWL_MIMO3_SWITCH_GI             8 + + +#define IWL_MAX_11N_MIMO3_SEARCH IWL_MIMO3_SWITCH_GI +#define IWL_MAX_SEARCH IWL_MIMO2_SWITCH_MIMO3_ABC + +/*FIXME:RS:add possible actions for MIMO3*/ + +#define IWL_ACTION_LIMIT		3	/* # possible actions */ + +#define LQ_SIZE		2	/* 2 mode tables:  "Active" and "Search" */ + +/* load per tid defines for A-MPDU activation */ +#define IWL_AGG_TPT_THREHOLD	0 +#define IWL_AGG_LOAD_THRESHOLD	10 +#define IWL_AGG_ALL_TID		0xff +#define TID_QUEUE_CELL_SPACING	50	/*mS */ +#define TID_QUEUE_MAX_SIZE	20 +#define TID_ROUND_VALUE		5	/* mS */ + +#define TID_MAX_TIME_DIFF ((TID_QUEUE_MAX_SIZE - 1) * TID_QUEUE_CELL_SPACING) +#define TIME_WRAP_AROUND(x, y) (((y) > (x)) ? (y) - (x) : (0-(x)) + (y)) + +extern const struct iwl_rate_info iwl_rates[IWL_RATE_COUNT]; + +enum iwl_table_type { +	LQ_NONE, +	LQ_G,		/* legacy types */ +	LQ_A, +	LQ_SISO,	/* high-throughput types */ +	LQ_MIMO2, +	LQ_MIMO3, +	LQ_MAX, +}; + +#define is_legacy(tbl) (((tbl) == LQ_G) || ((tbl) == LQ_A)) +#define is_siso(tbl) ((tbl) == LQ_SISO) +#define is_mimo2(tbl) ((tbl) == LQ_MIMO2) +#define is_mimo3(tbl) ((tbl) == LQ_MIMO3) +#define is_mimo(tbl) (is_mimo2(tbl) || is_mimo3(tbl)) +#define is_Ht(tbl) (is_siso(tbl) || is_mimo(tbl)) +#define is_a_band(tbl) ((tbl) == LQ_A) +#define is_g_and(tbl) ((tbl) == LQ_G) + +#define IWL_MAX_MCS_DISPLAY_SIZE	12 + +struct iwl_rate_mcs_info { +	char	mbps[IWL_MAX_MCS_DISPLAY_SIZE]; +	char	mcs[IWL_MAX_MCS_DISPLAY_SIZE]; +}; + +/** + * struct iwl_rate_scale_data -- tx success history for one rate + */ +struct iwl_rate_scale_data { +	u64 data;		/* bitmap of successful frames */ +	s32 success_counter;	/* number of frames successful */ +	s32 success_ratio;	/* per-cent * 128  */ +	s32 counter;		/* number of frames attempted */ +	s32 average_tpt;	/* success ratio * expected throughput */ +	unsigned long stamp; +}; + +/** + * struct iwl_scale_tbl_info -- tx params and success history for all rates + * + * There are two of these in struct iwl_lq_sta, + * one for "active", and one for "search". + */ +struct iwl_scale_tbl_info { +	enum iwl_table_type lq_type; +	u8 ant_type; +	u8 is_SGI;	/* 1 = short guard interval */ +	u8 is_ht40;	/* 1 = 40 MHz channel width */ +	u8 is_dup;	/* 1 = duplicated data streams */ +	u8 action;	/* change modulation; IWL_[LEGACY/SISO/MIMO]_SWITCH_* */ +	u8 max_search;	/* maximun number of tables we can search */ +	const u16 *expected_tpt;	/* throughput metrics; expected_tpt_G, etc. */ +	u32 current_rate;  /* rate_n_flags, uCode API format */ +	struct iwl_rate_scale_data win[IWL_RATE_COUNT]; /* rate histories */ +}; + +struct iwl_traffic_load { +	unsigned long time_stamp;	/* age of the oldest statistics */ +	u32 packet_count[TID_QUEUE_MAX_SIZE];   /* packet count in this time +						 * slice */ +	u32 total;			/* total num of packets during the +					 * last TID_MAX_TIME_DIFF */ +	u8 queue_count;			/* number of queues that has +					 * been used since the last cleanup */ +	u8 head;			/* start of the circular buffer */ +}; + +/** + * struct iwl_lq_sta -- driver's rate scaling private structure + * + * Pointer to this gets passed back and forth between driver and mac80211. + */ +struct iwl_lq_sta { +	u8 active_tbl;		/* index of active table, range 0-1 */ +	u8 enable_counter;	/* indicates HT mode */ +	u8 stay_in_tbl;		/* 1: disallow, 0: allow search for new mode */ +	u8 search_better_tbl;	/* 1: currently trying alternate mode */ +	s32 last_tpt; + +	/* The following determine when to search for a new mode */ +	u32 table_count_limit; +	u32 max_failure_limit;	/* # failed frames before new search */ +	u32 max_success_limit;	/* # successful frames before new search */ +	u32 table_count; +	u32 total_failed;	/* total failed frames, any/all rates */ +	u32 total_success;	/* total successful frames, any/all rates */ +	u64 flush_timer;	/* time staying in mode before new search */ + +	u8 action_counter;	/* # mode-switch actions tried */ +	u8 is_green; +	u8 is_dup; +	enum ieee80211_band band; + +	/* The following are bitmaps of rates; IWL_RATE_6M_MASK, etc. */ +	u32 supp_rates; +	u16 active_legacy_rate; +	u16 active_siso_rate; +	u16 active_mimo2_rate; +	u16 active_mimo3_rate; +	s8 max_rate_idx;     /* Max rate set by user */ +	u8 missed_rate_counter; + +	struct iwl_link_quality_cmd lq; +	struct iwl_scale_tbl_info lq_info[LQ_SIZE]; /* "active", "search" */ +	struct iwl_traffic_load load[IWL_MAX_TID_COUNT]; +	u8 tx_agg_tid_en; +#ifdef CONFIG_MAC80211_DEBUGFS +	struct dentry *rs_sta_dbgfs_scale_table_file; +	struct dentry *rs_sta_dbgfs_stats_table_file; +	struct dentry *rs_sta_dbgfs_rate_scale_data_file; +	struct dentry *rs_sta_dbgfs_tx_agg_tid_en_file; +	u32 dbg_fixed_rate; +#endif +	struct iwl_priv *drv; + +	/* used to be in sta_info */ +	int last_txrate_idx; +	/* last tx rate_n_flags */ +	u32 last_rate_n_flags; +	/* packets destined for this STA are aggregated */ +	u8 is_agg; +	/* BT traffic this sta was last updated in */ +	u8 last_bt_traffic; +}; + +static inline u8 first_antenna(u8 mask) +{ +	if (mask & ANT_A) +		return ANT_A; +	if (mask & ANT_B) +		return ANT_B; +	return ANT_C; +} + + +/* Initialize station's rate scaling information after adding station */ +void iwl_rs_rate_init(struct iwl_priv *priv, struct ieee80211_sta *sta, +		      u8 sta_id); + +/** + * iwl_rate_control_register - Register the rate control algorithm callbacks + * + * Since the rate control algorithm is hardware specific, there is no need + * or reason to place it as a stand alone module.  The driver can call + * iwl_rate_control_register in order to register the rate control callbacks + * with the mac80211 subsystem.  This should be performed prior to calling + * ieee80211_register_hw + * + */ +int iwlagn_rate_control_register(void); + +/** + * iwl_rate_control_unregister - Unregister the rate control callbacks + * + * This should be called after calling ieee80211_unregister_hw, but before + * the driver is unloaded. + */ +void iwlagn_rate_control_unregister(void); + +#endif /* __iwl_agn__rs__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/rx.c b/drivers/net/wireless/iwlwifi/dvm/rx.c new file mode 100644 index 00000000000..debec963c61 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/rx.c @@ -0,0 +1,1132 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portionhelp of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +#include <linux/etherdevice.h> +#include <linux/slab.h> +#include <linux/sched.h> +#include <net/mac80211.h> +#include <asm/unaligned.h> +#include "iwl-io.h" +#include "dev.h" +#include "calib.h" +#include "agn.h" + +#define IWL_CMD_ENTRY(x) [x] = #x + +const char *const iwl_dvm_cmd_strings[REPLY_MAX] = { +	IWL_CMD_ENTRY(REPLY_ALIVE), +	IWL_CMD_ENTRY(REPLY_ERROR), +	IWL_CMD_ENTRY(REPLY_ECHO), +	IWL_CMD_ENTRY(REPLY_RXON), +	IWL_CMD_ENTRY(REPLY_RXON_ASSOC), +	IWL_CMD_ENTRY(REPLY_QOS_PARAM), +	IWL_CMD_ENTRY(REPLY_RXON_TIMING), +	IWL_CMD_ENTRY(REPLY_ADD_STA), +	IWL_CMD_ENTRY(REPLY_REMOVE_STA), +	IWL_CMD_ENTRY(REPLY_REMOVE_ALL_STA), +	IWL_CMD_ENTRY(REPLY_TXFIFO_FLUSH), +	IWL_CMD_ENTRY(REPLY_WEPKEY), +	IWL_CMD_ENTRY(REPLY_TX), +	IWL_CMD_ENTRY(REPLY_LEDS_CMD), +	IWL_CMD_ENTRY(REPLY_TX_LINK_QUALITY_CMD), +	IWL_CMD_ENTRY(COEX_PRIORITY_TABLE_CMD), +	IWL_CMD_ENTRY(COEX_MEDIUM_NOTIFICATION), +	IWL_CMD_ENTRY(COEX_EVENT_CMD), +	IWL_CMD_ENTRY(REPLY_QUIET_CMD), +	IWL_CMD_ENTRY(REPLY_CHANNEL_SWITCH), +	IWL_CMD_ENTRY(CHANNEL_SWITCH_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_SPECTRUM_MEASUREMENT_CMD), +	IWL_CMD_ENTRY(SPECTRUM_MEASURE_NOTIFICATION), +	IWL_CMD_ENTRY(POWER_TABLE_CMD), +	IWL_CMD_ENTRY(PM_SLEEP_NOTIFICATION), +	IWL_CMD_ENTRY(PM_DEBUG_STATISTIC_NOTIFIC), +	IWL_CMD_ENTRY(REPLY_SCAN_CMD), +	IWL_CMD_ENTRY(REPLY_SCAN_ABORT_CMD), +	IWL_CMD_ENTRY(SCAN_START_NOTIFICATION), +	IWL_CMD_ENTRY(SCAN_RESULTS_NOTIFICATION), +	IWL_CMD_ENTRY(SCAN_COMPLETE_NOTIFICATION), +	IWL_CMD_ENTRY(BEACON_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_TX_BEACON), +	IWL_CMD_ENTRY(WHO_IS_AWAKE_NOTIFICATION), +	IWL_CMD_ENTRY(QUIET_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_TX_PWR_TABLE_CMD), +	IWL_CMD_ENTRY(MEASURE_ABORT_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_BT_CONFIG), +	IWL_CMD_ENTRY(REPLY_STATISTICS_CMD), +	IWL_CMD_ENTRY(STATISTICS_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_CARD_STATE_CMD), +	IWL_CMD_ENTRY(CARD_STATE_NOTIFICATION), +	IWL_CMD_ENTRY(MISSED_BEACONS_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_CT_KILL_CONFIG_CMD), +	IWL_CMD_ENTRY(SENSITIVITY_CMD), +	IWL_CMD_ENTRY(REPLY_PHY_CALIBRATION_CMD), +	IWL_CMD_ENTRY(REPLY_RX_PHY_CMD), +	IWL_CMD_ENTRY(REPLY_RX_MPDU_CMD), +	IWL_CMD_ENTRY(REPLY_COMPRESSED_BA), +	IWL_CMD_ENTRY(CALIBRATION_CFG_CMD), +	IWL_CMD_ENTRY(CALIBRATION_RES_NOTIFICATION), +	IWL_CMD_ENTRY(CALIBRATION_COMPLETE_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_TX_POWER_DBM_CMD), +	IWL_CMD_ENTRY(TEMPERATURE_NOTIFICATION), +	IWL_CMD_ENTRY(TX_ANT_CONFIGURATION_CMD), +	IWL_CMD_ENTRY(REPLY_BT_COEX_PROFILE_NOTIF), +	IWL_CMD_ENTRY(REPLY_BT_COEX_PRIO_TABLE), +	IWL_CMD_ENTRY(REPLY_BT_COEX_PROT_ENV), +	IWL_CMD_ENTRY(REPLY_WIPAN_PARAMS), +	IWL_CMD_ENTRY(REPLY_WIPAN_RXON), +	IWL_CMD_ENTRY(REPLY_WIPAN_RXON_TIMING), +	IWL_CMD_ENTRY(REPLY_WIPAN_RXON_ASSOC), +	IWL_CMD_ENTRY(REPLY_WIPAN_QOS_PARAM), +	IWL_CMD_ENTRY(REPLY_WIPAN_WEPKEY), +	IWL_CMD_ENTRY(REPLY_WIPAN_P2P_CHANNEL_SWITCH), +	IWL_CMD_ENTRY(REPLY_WIPAN_NOA_NOTIFICATION), +	IWL_CMD_ENTRY(REPLY_WIPAN_DEACTIVATION_COMPLETE), +	IWL_CMD_ENTRY(REPLY_WOWLAN_PATTERNS), +	IWL_CMD_ENTRY(REPLY_WOWLAN_WAKEUP_FILTER), +	IWL_CMD_ENTRY(REPLY_WOWLAN_TSC_RSC_PARAMS), +	IWL_CMD_ENTRY(REPLY_WOWLAN_TKIP_PARAMS), +	IWL_CMD_ENTRY(REPLY_WOWLAN_KEK_KCK_MATERIAL), +	IWL_CMD_ENTRY(REPLY_WOWLAN_GET_STATUS), +	IWL_CMD_ENTRY(REPLY_D3_CONFIG), +}; +#undef IWL_CMD_ENTRY + +/****************************************************************************** + * + * Generic RX handler implementations + * + ******************************************************************************/ + +static int iwlagn_rx_reply_error(struct iwl_priv *priv, +			       struct iwl_rx_cmd_buffer *rxb, +			       struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_error_resp *err_resp = (void *)pkt->data; + +	IWL_ERR(priv, "Error Reply type 0x%08X cmd REPLY_ERROR (0x%02X) " +		"seq 0x%04X ser 0x%08X\n", +		le32_to_cpu(err_resp->error_type), +		err_resp->cmd_id, +		le16_to_cpu(err_resp->bad_cmd_seq_num), +		le32_to_cpu(err_resp->error_info)); +	return 0; +} + +static int iwlagn_rx_csa(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb, +			       struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_csa_notification *csa = (void *)pkt->data; +	/* +	 * MULTI-FIXME +	 * See iwlagn_mac_channel_switch. +	 */ +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	struct iwl_rxon_cmd *rxon = (void *)&ctx->active; + +	if (!test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status)) +		return 0; + +	if (!le32_to_cpu(csa->status) && csa->channel == priv->switch_channel) { +		rxon->channel = csa->channel; +		ctx->staging.channel = csa->channel; +		IWL_DEBUG_11H(priv, "CSA notif: channel %d\n", +			      le16_to_cpu(csa->channel)); +		iwl_chswitch_done(priv, true); +	} else { +		IWL_ERR(priv, "CSA notif (fail) : channel %d\n", +			le16_to_cpu(csa->channel)); +		iwl_chswitch_done(priv, false); +	} +	return 0; +} + + +static int iwlagn_rx_spectrum_measure_notif(struct iwl_priv *priv, +					  struct iwl_rx_cmd_buffer *rxb, +					  struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_spectrum_notification *report = (void *)pkt->data; + +	if (!report->state) { +		IWL_DEBUG_11H(priv, +			"Spectrum Measure Notification: Start\n"); +		return 0; +	} + +	memcpy(&priv->measure_report, report, sizeof(*report)); +	priv->measurement_status |= MEASUREMENT_READY; +	return 0; +} + +static int iwlagn_rx_pm_sleep_notif(struct iwl_priv *priv, +				  struct iwl_rx_cmd_buffer *rxb, +				  struct iwl_device_cmd *cmd) +{ +#ifdef CONFIG_IWLWIFI_DEBUG +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_sleep_notification *sleep = (void *)pkt->data; +	IWL_DEBUG_RX(priv, "sleep mode: %d, src: %d\n", +		     sleep->pm_sleep_mode, sleep->pm_wakeup_src); +#endif +	return 0; +} + +static int iwlagn_rx_pm_debug_statistics_notif(struct iwl_priv *priv, +					     struct iwl_rx_cmd_buffer *rxb, +					     struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	u32 __maybe_unused len = iwl_rx_packet_len(pkt); +	IWL_DEBUG_RADIO(priv, "Dumping %d bytes of unhandled " +			"notification for PM_DEBUG_STATISTIC_NOTIFIC:\n", len); +	iwl_print_hex_dump(priv, IWL_DL_RADIO, pkt->data, len); +	return 0; +} + +static int iwlagn_rx_beacon_notif(struct iwl_priv *priv, +				struct iwl_rx_cmd_buffer *rxb, +				struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwlagn_beacon_notif *beacon = (void *)pkt->data; +#ifdef CONFIG_IWLWIFI_DEBUG +	u16 status = le16_to_cpu(beacon->beacon_notify_hdr.status.status); +	u8 rate = iwl_hw_get_rate(beacon->beacon_notify_hdr.rate_n_flags); + +	IWL_DEBUG_RX(priv, "beacon status %#x, retries:%d ibssmgr:%d " +		"tsf:0x%.8x%.8x rate:%d\n", +		status & TX_STATUS_MSK, +		beacon->beacon_notify_hdr.failure_frame, +		le32_to_cpu(beacon->ibss_mgr_status), +		le32_to_cpu(beacon->high_tsf), +		le32_to_cpu(beacon->low_tsf), rate); +#endif + +	priv->ibss_manager = le32_to_cpu(beacon->ibss_mgr_status); + +	return 0; +} + +/** + * iwl_good_plcp_health - checks for plcp error. + * + * When the plcp error is exceeding the thresholds, reset the radio + * to improve the throughput. + */ +static bool iwlagn_good_plcp_health(struct iwl_priv *priv, +				 struct statistics_rx_phy *cur_ofdm, +				 struct statistics_rx_ht_phy *cur_ofdm_ht, +				 unsigned int msecs) +{ +	int delta; +	int threshold = priv->plcp_delta_threshold; + +	if (threshold == IWL_MAX_PLCP_ERR_THRESHOLD_DISABLE) { +		IWL_DEBUG_RADIO(priv, "plcp_err check disabled\n"); +		return true; +	} + +	delta = le32_to_cpu(cur_ofdm->plcp_err) - +		le32_to_cpu(priv->statistics.rx_ofdm.plcp_err) + +		le32_to_cpu(cur_ofdm_ht->plcp_err) - +		le32_to_cpu(priv->statistics.rx_ofdm_ht.plcp_err); + +	/* Can be negative if firmware reset statistics */ +	if (delta <= 0) +		return true; + +	if ((delta * 100 / msecs) > threshold) { +		IWL_DEBUG_RADIO(priv, +				"plcp health threshold %u delta %d msecs %u\n", +				threshold, delta, msecs); +		return false; +	} + +	return true; +} + +int iwl_force_rf_reset(struct iwl_priv *priv, bool external) +{ +	struct iwl_rf_reset *rf_reset; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return -EAGAIN; + +	if (!iwl_is_any_associated(priv)) { +		IWL_DEBUG_SCAN(priv, "force reset rejected: not associated\n"); +		return -ENOLINK; +	} + +	rf_reset = &priv->rf_reset; +	rf_reset->reset_request_count++; +	if (!external && rf_reset->last_reset_jiffies && +	    time_after(rf_reset->last_reset_jiffies + +		       IWL_DELAY_NEXT_FORCE_RF_RESET, jiffies)) { +		IWL_DEBUG_INFO(priv, "RF reset rejected\n"); +		rf_reset->reset_reject_count++; +		return -EAGAIN; +	} +	rf_reset->reset_success_count++; +	rf_reset->last_reset_jiffies = jiffies; + +	/* +	 * There is no easy and better way to force reset the radio, +	 * the only known method is switching channel which will force to +	 * reset and tune the radio. +	 * Use internal short scan (single channel) operation to should +	 * achieve this objective. +	 * Driver should reset the radio when number of consecutive missed +	 * beacon, or any other uCode error condition detected. +	 */ +	IWL_DEBUG_INFO(priv, "perform radio reset.\n"); +	iwl_internal_short_hw_scan(priv); +	return 0; +} + + +static void iwlagn_recover_from_statistics(struct iwl_priv *priv, +				struct statistics_rx_phy *cur_ofdm, +				struct statistics_rx_ht_phy *cur_ofdm_ht, +				struct statistics_tx *tx, +				unsigned long stamp) +{ +	unsigned int msecs; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	msecs = jiffies_to_msecs(stamp - priv->rx_statistics_jiffies); + +	/* Only gather statistics and update time stamp when not associated */ +	if (!iwl_is_any_associated(priv)) +		return; + +	/* Do not check/recover when do not have enough statistics data */ +	if (msecs < 99) +		return; + +	if (!iwlagn_good_plcp_health(priv, cur_ofdm, cur_ofdm_ht, msecs)) +		iwl_force_rf_reset(priv, false); +} + +/* Calculate noise level, based on measurements during network silence just + *   before arriving beacon.  This measurement can be done only if we know + *   exactly when to expect beacons, therefore only when we're associated. */ +static void iwlagn_rx_calc_noise(struct iwl_priv *priv) +{ +	struct statistics_rx_non_phy *rx_info; +	int num_active_rx = 0; +	int total_silence = 0; +	int bcn_silence_a, bcn_silence_b, bcn_silence_c; +	int last_rx_noise; + +	rx_info = &priv->statistics.rx_non_phy; + +	bcn_silence_a = +		le32_to_cpu(rx_info->beacon_silence_rssi_a) & IN_BAND_FILTER; +	bcn_silence_b = +		le32_to_cpu(rx_info->beacon_silence_rssi_b) & IN_BAND_FILTER; +	bcn_silence_c = +		le32_to_cpu(rx_info->beacon_silence_rssi_c) & IN_BAND_FILTER; + +	if (bcn_silence_a) { +		total_silence += bcn_silence_a; +		num_active_rx++; +	} +	if (bcn_silence_b) { +		total_silence += bcn_silence_b; +		num_active_rx++; +	} +	if (bcn_silence_c) { +		total_silence += bcn_silence_c; +		num_active_rx++; +	} + +	/* Average among active antennas */ +	if (num_active_rx) +		last_rx_noise = (total_silence / num_active_rx) - 107; +	else +		last_rx_noise = IWL_NOISE_MEAS_NOT_AVAILABLE; + +	IWL_DEBUG_CALIB(priv, "inband silence a %u, b %u, c %u, dBm %d\n", +			bcn_silence_a, bcn_silence_b, bcn_silence_c, +			last_rx_noise); +} + +#ifdef CONFIG_IWLWIFI_DEBUGFS +/* + *  based on the assumption of all statistics counter are in DWORD + *  FIXME: This function is for debugging, do not deal with + *  the case of counters roll-over. + */ +static void accum_stats(__le32 *prev, __le32 *cur, __le32 *delta, +			__le32 *max_delta, __le32 *accum, int size) +{ +	int i; + +	for (i = 0; +	     i < size / sizeof(__le32); +	     i++, prev++, cur++, delta++, max_delta++, accum++) { +		if (le32_to_cpu(*cur) > le32_to_cpu(*prev)) { +			*delta = cpu_to_le32( +				le32_to_cpu(*cur) - le32_to_cpu(*prev)); +			le32_add_cpu(accum, le32_to_cpu(*delta)); +			if (le32_to_cpu(*delta) > le32_to_cpu(*max_delta)) +				*max_delta = *delta; +		} +	} +} + +static void +iwlagn_accumulative_statistics(struct iwl_priv *priv, +			    struct statistics_general_common *common, +			    struct statistics_rx_non_phy *rx_non_phy, +			    struct statistics_rx_phy *rx_ofdm, +			    struct statistics_rx_ht_phy *rx_ofdm_ht, +			    struct statistics_rx_phy *rx_cck, +			    struct statistics_tx *tx, +			    struct statistics_bt_activity *bt_activity) +{ +#define ACCUM(_name)	\ +	accum_stats((__le32 *)&priv->statistics._name,		\ +		    (__le32 *)_name,				\ +		    (__le32 *)&priv->delta_stats._name,		\ +		    (__le32 *)&priv->max_delta_stats._name,	\ +		    (__le32 *)&priv->accum_stats._name,		\ +		    sizeof(*_name)); + +	ACCUM(common); +	ACCUM(rx_non_phy); +	ACCUM(rx_ofdm); +	ACCUM(rx_ofdm_ht); +	ACCUM(rx_cck); +	ACCUM(tx); +	if (bt_activity) +		ACCUM(bt_activity); +#undef ACCUM +} +#else +static inline void +iwlagn_accumulative_statistics(struct iwl_priv *priv, +			    struct statistics_general_common *common, +			    struct statistics_rx_non_phy *rx_non_phy, +			    struct statistics_rx_phy *rx_ofdm, +			    struct statistics_rx_ht_phy *rx_ofdm_ht, +			    struct statistics_rx_phy *rx_cck, +			    struct statistics_tx *tx, +			    struct statistics_bt_activity *bt_activity) +{ +} +#endif + +static int iwlagn_rx_statistics(struct iwl_priv *priv, +			      struct iwl_rx_cmd_buffer *rxb, +			      struct iwl_device_cmd *cmd) +{ +	unsigned long stamp = jiffies; +	const int reg_recalib_period = 60; +	int change; +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	u32 len = iwl_rx_packet_payload_len(pkt); +	__le32 *flag; +	struct statistics_general_common *common; +	struct statistics_rx_non_phy *rx_non_phy; +	struct statistics_rx_phy *rx_ofdm; +	struct statistics_rx_ht_phy *rx_ofdm_ht; +	struct statistics_rx_phy *rx_cck; +	struct statistics_tx *tx; +	struct statistics_bt_activity *bt_activity; + +	IWL_DEBUG_RX(priv, "Statistics notification received (%d bytes).\n", +		     len); + +	spin_lock(&priv->statistics.lock); + +	if (len == sizeof(struct iwl_bt_notif_statistics)) { +		struct iwl_bt_notif_statistics *stats; +		stats = (void *)&pkt->data; +		flag = &stats->flag; +		common = &stats->general.common; +		rx_non_phy = &stats->rx.general.common; +		rx_ofdm = &stats->rx.ofdm; +		rx_ofdm_ht = &stats->rx.ofdm_ht; +		rx_cck = &stats->rx.cck; +		tx = &stats->tx; +		bt_activity = &stats->general.activity; + +#ifdef CONFIG_IWLWIFI_DEBUGFS +		/* handle this exception directly */ +		priv->statistics.num_bt_kills = stats->rx.general.num_bt_kills; +		le32_add_cpu(&priv->statistics.accum_num_bt_kills, +			     le32_to_cpu(stats->rx.general.num_bt_kills)); +#endif +	} else if (len == sizeof(struct iwl_notif_statistics)) { +		struct iwl_notif_statistics *stats; +		stats = (void *)&pkt->data; +		flag = &stats->flag; +		common = &stats->general.common; +		rx_non_phy = &stats->rx.general; +		rx_ofdm = &stats->rx.ofdm; +		rx_ofdm_ht = &stats->rx.ofdm_ht; +		rx_cck = &stats->rx.cck; +		tx = &stats->tx; +		bt_activity = NULL; +	} else { +		WARN_ONCE(1, "len %d doesn't match BT (%zu) or normal (%zu)\n", +			  len, sizeof(struct iwl_bt_notif_statistics), +			  sizeof(struct iwl_notif_statistics)); +		spin_unlock(&priv->statistics.lock); +		return 0; +	} + +	change = common->temperature != priv->statistics.common.temperature || +		 (*flag & STATISTICS_REPLY_FLG_HT40_MODE_MSK) != +		 (priv->statistics.flag & STATISTICS_REPLY_FLG_HT40_MODE_MSK); + +	iwlagn_accumulative_statistics(priv, common, rx_non_phy, rx_ofdm, +				    rx_ofdm_ht, rx_cck, tx, bt_activity); + +	iwlagn_recover_from_statistics(priv, rx_ofdm, rx_ofdm_ht, tx, stamp); + +	priv->statistics.flag = *flag; +	memcpy(&priv->statistics.common, common, sizeof(*common)); +	memcpy(&priv->statistics.rx_non_phy, rx_non_phy, sizeof(*rx_non_phy)); +	memcpy(&priv->statistics.rx_ofdm, rx_ofdm, sizeof(*rx_ofdm)); +	memcpy(&priv->statistics.rx_ofdm_ht, rx_ofdm_ht, sizeof(*rx_ofdm_ht)); +	memcpy(&priv->statistics.rx_cck, rx_cck, sizeof(*rx_cck)); +	memcpy(&priv->statistics.tx, tx, sizeof(*tx)); +#ifdef CONFIG_IWLWIFI_DEBUGFS +	if (bt_activity) +		memcpy(&priv->statistics.bt_activity, bt_activity, +			sizeof(*bt_activity)); +#endif + +	priv->rx_statistics_jiffies = stamp; + +	set_bit(STATUS_STATISTICS, &priv->status); + +	/* Reschedule the statistics timer to occur in +	 * reg_recalib_period seconds to ensure we get a +	 * thermal update even if the uCode doesn't give +	 * us one */ +	mod_timer(&priv->statistics_periodic, jiffies + +		  msecs_to_jiffies(reg_recalib_period * 1000)); + +	if (unlikely(!test_bit(STATUS_SCANNING, &priv->status)) && +	    (pkt->hdr.cmd == STATISTICS_NOTIFICATION)) { +		iwlagn_rx_calc_noise(priv); +		queue_work(priv->workqueue, &priv->run_time_calib_work); +	} +	if (priv->lib->temperature && change) +		priv->lib->temperature(priv); + +	spin_unlock(&priv->statistics.lock); + +	return 0; +} + +static int iwlagn_rx_reply_statistics(struct iwl_priv *priv, +				    struct iwl_rx_cmd_buffer *rxb, +				    struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_notif_statistics *stats = (void *)pkt->data; + +	if (le32_to_cpu(stats->flag) & UCODE_STATISTICS_CLEAR_MSK) { +#ifdef CONFIG_IWLWIFI_DEBUGFS +		memset(&priv->accum_stats, 0, +			sizeof(priv->accum_stats)); +		memset(&priv->delta_stats, 0, +			sizeof(priv->delta_stats)); +		memset(&priv->max_delta_stats, 0, +			sizeof(priv->max_delta_stats)); +#endif +		IWL_DEBUG_RX(priv, "Statistics have been cleared\n"); +	} +	iwlagn_rx_statistics(priv, rxb, cmd); +	return 0; +} + +/* Handle notification from uCode that card's power state is changing + * due to software, hardware, or critical temperature RFKILL */ +static int iwlagn_rx_card_state_notif(struct iwl_priv *priv, +				    struct iwl_rx_cmd_buffer *rxb, +				    struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_card_state_notif *card_state_notif = (void *)pkt->data; +	u32 flags = le32_to_cpu(card_state_notif->flags); +	unsigned long status = priv->status; + +	IWL_DEBUG_RF_KILL(priv, "Card state received: HW:%s SW:%s CT:%s\n", +			  (flags & HW_CARD_DISABLED) ? "Kill" : "On", +			  (flags & SW_CARD_DISABLED) ? "Kill" : "On", +			  (flags & CT_CARD_DISABLED) ? +			  "Reached" : "Not reached"); + +	if (flags & (SW_CARD_DISABLED | HW_CARD_DISABLED | +		     CT_CARD_DISABLED)) { + +		iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET, +			    CSR_UCODE_DRV_GP1_BIT_CMD_BLOCKED); + +		iwl_write_direct32(priv->trans, HBUS_TARG_MBX_C, +					HBUS_TARG_MBX_C_REG_BIT_CMD_BLOCKED); + +		if (!(flags & RXON_CARD_DISABLED)) { +			iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR, +				    CSR_UCODE_DRV_GP1_BIT_CMD_BLOCKED); +			iwl_write_direct32(priv->trans, HBUS_TARG_MBX_C, +					HBUS_TARG_MBX_C_REG_BIT_CMD_BLOCKED); +		} +		if (flags & CT_CARD_DISABLED) +			iwl_tt_enter_ct_kill(priv); +	} +	if (!(flags & CT_CARD_DISABLED)) +		iwl_tt_exit_ct_kill(priv); + +	if (flags & HW_CARD_DISABLED) +		set_bit(STATUS_RF_KILL_HW, &priv->status); +	else +		clear_bit(STATUS_RF_KILL_HW, &priv->status); + + +	if (!(flags & RXON_CARD_DISABLED)) +		iwl_scan_cancel(priv); + +	if ((test_bit(STATUS_RF_KILL_HW, &status) != +	     test_bit(STATUS_RF_KILL_HW, &priv->status))) +		wiphy_rfkill_set_hw_state(priv->hw->wiphy, +			test_bit(STATUS_RF_KILL_HW, &priv->status)); +	return 0; +} + +static int iwlagn_rx_missed_beacon_notif(struct iwl_priv *priv, +				       struct iwl_rx_cmd_buffer *rxb, +				       struct iwl_device_cmd *cmd) + +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_missed_beacon_notif *missed_beacon = (void *)pkt->data; + +	if (le32_to_cpu(missed_beacon->consecutive_missed_beacons) > +	    priv->missed_beacon_threshold) { +		IWL_DEBUG_CALIB(priv, +		    "missed bcn cnsq %d totl %d rcd %d expctd %d\n", +		    le32_to_cpu(missed_beacon->consecutive_missed_beacons), +		    le32_to_cpu(missed_beacon->total_missed_becons), +		    le32_to_cpu(missed_beacon->num_recvd_beacons), +		    le32_to_cpu(missed_beacon->num_expected_beacons)); +		if (!test_bit(STATUS_SCANNING, &priv->status)) +			iwl_init_sensitivity(priv); +	} +	return 0; +} + +/* Cache phy data (Rx signal strength, etc) for HT frame (REPLY_RX_PHY_CMD). + * This will be used later in iwl_rx_reply_rx() for REPLY_RX_MPDU_CMD. */ +static int iwlagn_rx_reply_rx_phy(struct iwl_priv *priv, +				struct iwl_rx_cmd_buffer *rxb, +				struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); + +	priv->last_phy_res_valid = true; +	priv->ampdu_ref++; +	memcpy(&priv->last_phy_res, pkt->data, +	       sizeof(struct iwl_rx_phy_res)); +	return 0; +} + +/* + * returns non-zero if packet should be dropped + */ +static int iwlagn_set_decrypted_flag(struct iwl_priv *priv, +				  struct ieee80211_hdr *hdr, +				  u32 decrypt_res, +				  struct ieee80211_rx_status *stats) +{ +	u16 fc = le16_to_cpu(hdr->frame_control); + +	/* +	 * All contexts have the same setting here due to it being +	 * a module parameter, so OK to check any context. +	 */ +	if (priv->contexts[IWL_RXON_CTX_BSS].active.filter_flags & +						RXON_FILTER_DIS_DECRYPT_MSK) +		return 0; + +	if (!(fc & IEEE80211_FCTL_PROTECTED)) +		return 0; + +	IWL_DEBUG_RX(priv, "decrypt_res:0x%x\n", decrypt_res); +	switch (decrypt_res & RX_RES_STATUS_SEC_TYPE_MSK) { +	case RX_RES_STATUS_SEC_TYPE_TKIP: +		/* The uCode has got a bad phase 1 Key, pushes the packet. +		 * Decryption will be done in SW. */ +		if ((decrypt_res & RX_RES_STATUS_DECRYPT_TYPE_MSK) == +		    RX_RES_STATUS_BAD_KEY_TTAK) +			break; + +	case RX_RES_STATUS_SEC_TYPE_WEP: +		if ((decrypt_res & RX_RES_STATUS_DECRYPT_TYPE_MSK) == +		    RX_RES_STATUS_BAD_ICV_MIC) { +			/* bad ICV, the packet is destroyed since the +			 * decryption is inplace, drop it */ +			IWL_DEBUG_RX(priv, "Packet destroyed\n"); +			return -1; +		} +	case RX_RES_STATUS_SEC_TYPE_CCMP: +		if ((decrypt_res & RX_RES_STATUS_DECRYPT_TYPE_MSK) == +		    RX_RES_STATUS_DECRYPT_OK) { +			IWL_DEBUG_RX(priv, "hw decrypt successfully!!!\n"); +			stats->flag |= RX_FLAG_DECRYPTED; +		} +		break; + +	default: +		break; +	} +	return 0; +} + +static void iwlagn_pass_packet_to_mac80211(struct iwl_priv *priv, +					struct ieee80211_hdr *hdr, +					u16 len, +					u32 ampdu_status, +					struct iwl_rx_cmd_buffer *rxb, +					struct ieee80211_rx_status *stats) +{ +	struct sk_buff *skb; +	__le16 fc = hdr->frame_control; +	struct iwl_rxon_context *ctx; +	unsigned int hdrlen, fraglen; + +	/* We only process data packets if the interface is open */ +	if (unlikely(!priv->is_open)) { +		IWL_DEBUG_DROP_LIMIT(priv, +		    "Dropping packet while interface is not open.\n"); +		return; +	} + +	/* In case of HW accelerated crypto and bad decryption, drop */ +	if (!iwlwifi_mod_params.sw_crypto && +	    iwlagn_set_decrypted_flag(priv, hdr, ampdu_status, stats)) +		return; + +	/* Dont use dev_alloc_skb(), we'll have enough headroom once +	 * ieee80211_hdr pulled. +	 */ +	skb = alloc_skb(128, GFP_ATOMIC); +	if (!skb) { +		IWL_ERR(priv, "alloc_skb failed\n"); +		return; +	} +	/* If frame is small enough to fit in skb->head, pull it completely. +	 * If not, only pull ieee80211_hdr so that splice() or TCP coalesce +	 * are more efficient. +	 */ +	hdrlen = (len <= skb_tailroom(skb)) ? len : sizeof(*hdr); + +	memcpy(skb_put(skb, hdrlen), hdr, hdrlen); +	fraglen = len - hdrlen; + +	if (fraglen) { +		int offset = (void *)hdr + hdrlen - +			     rxb_addr(rxb) + rxb_offset(rxb); + +		skb_add_rx_frag(skb, 0, rxb_steal_page(rxb), offset, +				fraglen, rxb->truesize); +	} + +	/* +	* Wake any queues that were stopped due to a passive channel tx +	* failure. This can happen because the regulatory enforcement in +	* the device waits for a beacon before allowing transmission, +	* sometimes even after already having transmitted frames for the +	* association because the new RXON may reset the information. +	*/ +	if (unlikely(ieee80211_is_beacon(fc) && priv->passive_no_rx)) { +		for_each_context(priv, ctx) { +			if (!ether_addr_equal(hdr->addr3, +					      ctx->active.bssid_addr)) +				continue; +			iwlagn_lift_passive_no_rx(priv); +		} +	} + +	memcpy(IEEE80211_SKB_RXCB(skb), stats, sizeof(*stats)); + +	ieee80211_rx(priv->hw, skb); +} + +static u32 iwlagn_translate_rx_status(struct iwl_priv *priv, u32 decrypt_in) +{ +	u32 decrypt_out = 0; + +	if ((decrypt_in & RX_RES_STATUS_STATION_FOUND) == +					RX_RES_STATUS_STATION_FOUND) +		decrypt_out |= (RX_RES_STATUS_STATION_FOUND | +				RX_RES_STATUS_NO_STATION_INFO_MISMATCH); + +	decrypt_out |= (decrypt_in & RX_RES_STATUS_SEC_TYPE_MSK); + +	/* packet was not encrypted */ +	if ((decrypt_in & RX_RES_STATUS_SEC_TYPE_MSK) == +					RX_RES_STATUS_SEC_TYPE_NONE) +		return decrypt_out; + +	/* packet was encrypted with unknown alg */ +	if ((decrypt_in & RX_RES_STATUS_SEC_TYPE_MSK) == +					RX_RES_STATUS_SEC_TYPE_ERR) +		return decrypt_out; + +	/* decryption was not done in HW */ +	if ((decrypt_in & RX_MPDU_RES_STATUS_DEC_DONE_MSK) != +					RX_MPDU_RES_STATUS_DEC_DONE_MSK) +		return decrypt_out; + +	switch (decrypt_in & RX_RES_STATUS_SEC_TYPE_MSK) { + +	case RX_RES_STATUS_SEC_TYPE_CCMP: +		/* alg is CCM: check MIC only */ +		if (!(decrypt_in & RX_MPDU_RES_STATUS_MIC_OK)) +			/* Bad MIC */ +			decrypt_out |= RX_RES_STATUS_BAD_ICV_MIC; +		else +			decrypt_out |= RX_RES_STATUS_DECRYPT_OK; + +		break; + +	case RX_RES_STATUS_SEC_TYPE_TKIP: +		if (!(decrypt_in & RX_MPDU_RES_STATUS_TTAK_OK)) { +			/* Bad TTAK */ +			decrypt_out |= RX_RES_STATUS_BAD_KEY_TTAK; +			break; +		} +		/* fall through if TTAK OK */ +	default: +		if (!(decrypt_in & RX_MPDU_RES_STATUS_ICV_OK)) +			decrypt_out |= RX_RES_STATUS_BAD_ICV_MIC; +		else +			decrypt_out |= RX_RES_STATUS_DECRYPT_OK; +		break; +	} + +	IWL_DEBUG_RX(priv, "decrypt_in:0x%x  decrypt_out = 0x%x\n", +					decrypt_in, decrypt_out); + +	return decrypt_out; +} + +/* Calc max signal level (dBm) among 3 possible receivers */ +static int iwlagn_calc_rssi(struct iwl_priv *priv, +			     struct iwl_rx_phy_res *rx_resp) +{ +	/* data from PHY/DSP regarding signal strength, etc., +	 *   contents are always there, not configurable by host +	 */ +	struct iwlagn_non_cfg_phy *ncphy = +		(struct iwlagn_non_cfg_phy *)rx_resp->non_cfg_phy_buf; +	u32 val, rssi_a, rssi_b, rssi_c, max_rssi; +	u8 agc; + +	val  = le32_to_cpu(ncphy->non_cfg_phy[IWLAGN_RX_RES_AGC_IDX]); +	agc = (val & IWLAGN_OFDM_AGC_MSK) >> IWLAGN_OFDM_AGC_BIT_POS; + +	/* Find max rssi among 3 possible receivers. +	 * These values are measured by the digital signal processor (DSP). +	 * They should stay fairly constant even as the signal strength varies, +	 *   if the radio's automatic gain control (AGC) is working right. +	 * AGC value (see below) will provide the "interesting" info. +	 */ +	val = le32_to_cpu(ncphy->non_cfg_phy[IWLAGN_RX_RES_RSSI_AB_IDX]); +	rssi_a = (val & IWLAGN_OFDM_RSSI_INBAND_A_BITMSK) >> +		IWLAGN_OFDM_RSSI_A_BIT_POS; +	rssi_b = (val & IWLAGN_OFDM_RSSI_INBAND_B_BITMSK) >> +		IWLAGN_OFDM_RSSI_B_BIT_POS; +	val = le32_to_cpu(ncphy->non_cfg_phy[IWLAGN_RX_RES_RSSI_C_IDX]); +	rssi_c = (val & IWLAGN_OFDM_RSSI_INBAND_C_BITMSK) >> +		IWLAGN_OFDM_RSSI_C_BIT_POS; + +	max_rssi = max_t(u32, rssi_a, rssi_b); +	max_rssi = max_t(u32, max_rssi, rssi_c); + +	IWL_DEBUG_STATS(priv, "Rssi In A %d B %d C %d Max %d AGC dB %d\n", +		rssi_a, rssi_b, rssi_c, max_rssi, agc); + +	/* dBm = max_rssi dB - agc dB - constant. +	 * Higher AGC (higher radio gain) means lower signal. */ +	return max_rssi - agc - IWLAGN_RSSI_OFFSET; +} + +/* Called for REPLY_RX_MPDU_CMD */ +static int iwlagn_rx_reply_rx(struct iwl_priv *priv, +			    struct iwl_rx_cmd_buffer *rxb, +			    struct iwl_device_cmd *cmd) +{ +	struct ieee80211_hdr *header; +	struct ieee80211_rx_status rx_status = {}; +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_rx_phy_res *phy_res; +	__le32 rx_pkt_status; +	struct iwl_rx_mpdu_res_start *amsdu; +	u32 len; +	u32 ampdu_status; +	u32 rate_n_flags; + +	if (!priv->last_phy_res_valid) { +		IWL_ERR(priv, "MPDU frame without cached PHY data\n"); +		return 0; +	} +	phy_res = &priv->last_phy_res; +	amsdu = (struct iwl_rx_mpdu_res_start *)pkt->data; +	header = (struct ieee80211_hdr *)(pkt->data + sizeof(*amsdu)); +	len = le16_to_cpu(amsdu->byte_count); +	rx_pkt_status = *(__le32 *)(pkt->data + sizeof(*amsdu) + len); +	ampdu_status = iwlagn_translate_rx_status(priv, +						  le32_to_cpu(rx_pkt_status)); + +	if ((unlikely(phy_res->cfg_phy_cnt > 20))) { +		IWL_DEBUG_DROP(priv, "dsp size out of range [0,20]: %d\n", +				phy_res->cfg_phy_cnt); +		return 0; +	} + +	if (!(rx_pkt_status & RX_RES_STATUS_NO_CRC32_ERROR) || +	    !(rx_pkt_status & RX_RES_STATUS_NO_RXE_OVERFLOW)) { +		IWL_DEBUG_RX(priv, "Bad CRC or FIFO: 0x%08X.\n", +				le32_to_cpu(rx_pkt_status)); +		return 0; +	} + +	/* This will be used in several places later */ +	rate_n_flags = le32_to_cpu(phy_res->rate_n_flags); + +	/* rx_status carries information about the packet to mac80211 */ +	rx_status.mactime = le64_to_cpu(phy_res->timestamp); +	rx_status.band = (phy_res->phy_flags & RX_RES_PHY_FLAGS_BAND_24_MSK) ? +				IEEE80211_BAND_2GHZ : IEEE80211_BAND_5GHZ; +	rx_status.freq = +		ieee80211_channel_to_frequency(le16_to_cpu(phy_res->channel), +					       rx_status.band); +	rx_status.rate_idx = +		iwlagn_hwrate_to_mac80211_idx(rate_n_flags, rx_status.band); +	rx_status.flag = 0; + +	/* TSF isn't reliable. In order to allow smooth user experience, +	 * this W/A doesn't propagate it to the mac80211 */ +	/*rx_status.flag |= RX_FLAG_MACTIME_START;*/ + +	priv->ucode_beacon_time = le32_to_cpu(phy_res->beacon_time_stamp); + +	/* Find max signal strength (dBm) among 3 antenna/receiver chains */ +	rx_status.signal = iwlagn_calc_rssi(priv, phy_res); + +	IWL_DEBUG_STATS_LIMIT(priv, "Rssi %d, TSF %llu\n", +		rx_status.signal, (unsigned long long)rx_status.mactime); + +	/* +	 * "antenna number" +	 * +	 * It seems that the antenna field in the phy flags value +	 * is actually a bit field. This is undefined by radiotap, +	 * it wants an actual antenna number but I always get "7" +	 * for most legacy frames I receive indicating that the +	 * same frame was received on all three RX chains. +	 * +	 * I think this field should be removed in favor of a +	 * new 802.11n radiotap field "RX chains" that is defined +	 * as a bitmask. +	 */ +	rx_status.antenna = +		(le16_to_cpu(phy_res->phy_flags) & RX_RES_PHY_FLAGS_ANTENNA_MSK) +		>> RX_RES_PHY_FLAGS_ANTENNA_POS; + +	/* set the preamble flag if appropriate */ +	if (phy_res->phy_flags & RX_RES_PHY_FLAGS_SHORT_PREAMBLE_MSK) +		rx_status.flag |= RX_FLAG_SHORTPRE; + +	if (phy_res->phy_flags & RX_RES_PHY_FLAGS_AGG_MSK) { +		/* +		 * We know which subframes of an A-MPDU belong +		 * together since we get a single PHY response +		 * from the firmware for all of them +		 */ +		rx_status.flag |= RX_FLAG_AMPDU_DETAILS; +		rx_status.ampdu_reference = priv->ampdu_ref; +	} + +	/* Set up the HT phy flags */ +	if (rate_n_flags & RATE_MCS_HT_MSK) +		rx_status.flag |= RX_FLAG_HT; +	if (rate_n_flags & RATE_MCS_HT40_MSK) +		rx_status.flag |= RX_FLAG_40MHZ; +	if (rate_n_flags & RATE_MCS_SGI_MSK) +		rx_status.flag |= RX_FLAG_SHORT_GI; +	if (rate_n_flags & RATE_MCS_GF_MSK) +		rx_status.flag |= RX_FLAG_HT_GF; + +	iwlagn_pass_packet_to_mac80211(priv, header, len, ampdu_status, +				    rxb, &rx_status); +	return 0; +} + +static int iwlagn_rx_noa_notification(struct iwl_priv *priv, +				      struct iwl_rx_cmd_buffer *rxb, +				      struct iwl_device_cmd *cmd) +{ +	struct iwl_wipan_noa_data *new_data, *old_data; +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_wipan_noa_notification *noa_notif = (void *)pkt->data; + +	/* no condition -- we're in softirq */ +	old_data = rcu_dereference_protected(priv->noa_data, true); + +	if (noa_notif->noa_active) { +		u32 len = le16_to_cpu(noa_notif->noa_attribute.length); +		u32 copylen = len; + +		/* EID, len, OUI, subtype */ +		len += 1 + 1 + 3 + 1; +		/* P2P id, P2P length */ +		len += 1 + 2; +		copylen += 1 + 2; + +		new_data = kmalloc(sizeof(*new_data) + len, GFP_ATOMIC); +		if (new_data) { +			new_data->length = len; +			new_data->data[0] = WLAN_EID_VENDOR_SPECIFIC; +			new_data->data[1] = len - 2; /* not counting EID, len */ +			new_data->data[2] = (WLAN_OUI_WFA >> 16) & 0xff; +			new_data->data[3] = (WLAN_OUI_WFA >> 8) & 0xff; +			new_data->data[4] = (WLAN_OUI_WFA >> 0) & 0xff; +			new_data->data[5] = WLAN_OUI_TYPE_WFA_P2P; +			memcpy(&new_data->data[6], &noa_notif->noa_attribute, +			       copylen); +		} +	} else +		new_data = NULL; + +	rcu_assign_pointer(priv->noa_data, new_data); + +	if (old_data) +		kfree_rcu(old_data, rcu_head); + +	return 0; +} + +/** + * iwl_setup_rx_handlers - Initialize Rx handler callbacks + * + * Setup the RX handlers for each of the reply types sent from the uCode + * to the host. + */ +void iwl_setup_rx_handlers(struct iwl_priv *priv) +{ +	int (**handlers)(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb, +			       struct iwl_device_cmd *cmd); + +	handlers = priv->rx_handlers; + +	handlers[REPLY_ERROR]			= iwlagn_rx_reply_error; +	handlers[CHANNEL_SWITCH_NOTIFICATION]	= iwlagn_rx_csa; +	handlers[SPECTRUM_MEASURE_NOTIFICATION]	= +		iwlagn_rx_spectrum_measure_notif; +	handlers[PM_SLEEP_NOTIFICATION]		= iwlagn_rx_pm_sleep_notif; +	handlers[PM_DEBUG_STATISTIC_NOTIFIC]	= +		iwlagn_rx_pm_debug_statistics_notif; +	handlers[BEACON_NOTIFICATION]		= iwlagn_rx_beacon_notif; +	handlers[REPLY_ADD_STA]			= iwl_add_sta_callback; + +	handlers[REPLY_WIPAN_NOA_NOTIFICATION]	= iwlagn_rx_noa_notification; + +	/* +	 * The same handler is used for both the REPLY to a discrete +	 * statistics request from the host as well as for the periodic +	 * statistics notifications (after received beacons) from the uCode. +	 */ +	handlers[REPLY_STATISTICS_CMD]		= iwlagn_rx_reply_statistics; +	handlers[STATISTICS_NOTIFICATION]	= iwlagn_rx_statistics; + +	iwl_setup_rx_scan_handlers(priv); + +	handlers[CARD_STATE_NOTIFICATION]	= iwlagn_rx_card_state_notif; +	handlers[MISSED_BEACONS_NOTIFICATION]	= +		iwlagn_rx_missed_beacon_notif; + +	/* Rx handlers */ +	handlers[REPLY_RX_PHY_CMD]		= iwlagn_rx_reply_rx_phy; +	handlers[REPLY_RX_MPDU_CMD]		= iwlagn_rx_reply_rx; + +	/* block ack */ +	handlers[REPLY_COMPRESSED_BA]		= +		iwlagn_rx_reply_compressed_ba; + +	priv->rx_handlers[REPLY_TX] = iwlagn_rx_reply_tx; + +	/* set up notification wait support */ +	iwl_notification_wait_init(&priv->notif_wait); + +	/* Set up BT Rx handlers */ +	if (priv->lib->bt_params) +		iwlagn_bt_rx_handler_setup(priv); +} + +int iwl_rx_dispatch(struct iwl_op_mode *op_mode, struct iwl_rx_cmd_buffer *rxb, +		    struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_priv *priv = IWL_OP_MODE_GET_DVM(op_mode); +	int err = 0; + +	/* +	 * Do the notification wait before RX handlers so +	 * even if the RX handler consumes the RXB we have +	 * access to it in the notification wait entry. +	 */ +	iwl_notification_wait_notify(&priv->notif_wait, pkt); + +	/* Based on type of command response or notification, +	 *   handle those that need handling via function in +	 *   rx_handlers table.  See iwl_setup_rx_handlers() */ +	if (priv->rx_handlers[pkt->hdr.cmd]) { +		priv->rx_handlers_stats[pkt->hdr.cmd]++; +		err = priv->rx_handlers[pkt->hdr.cmd] (priv, rxb, cmd); +	} else { +		/* No handling needed */ +		IWL_DEBUG_RX(priv, "No handler needed for %s, 0x%02x\n", +			     iwl_dvm_get_cmd_string(pkt->hdr.cmd), +			     pkt->hdr.cmd); +	} +	return err; +} diff --git a/drivers/net/wireless/iwlwifi/dvm/rxon.c b/drivers/net/wireless/iwlwifi/dvm/rxon.c new file mode 100644 index 00000000000..6dc5dd3ced4 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/rxon.c @@ -0,0 +1,1559 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + * Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +#include <linux/etherdevice.h> +#include "iwl-trans.h" +#include "iwl-modparams.h" +#include "dev.h" +#include "agn.h" +#include "calib.h" + +/* + * initialize rxon structure with default values from eeprom + */ +void iwl_connection_init_rx_config(struct iwl_priv *priv, +				   struct iwl_rxon_context *ctx) +{ +	memset(&ctx->staging, 0, sizeof(ctx->staging)); + +	if (!ctx->vif) { +		ctx->staging.dev_type = ctx->unused_devtype; +	} else +	switch (ctx->vif->type) { +	case NL80211_IFTYPE_AP: +		ctx->staging.dev_type = ctx->ap_devtype; +		break; + +	case NL80211_IFTYPE_STATION: +		ctx->staging.dev_type = ctx->station_devtype; +		ctx->staging.filter_flags = RXON_FILTER_ACCEPT_GRP_MSK; +		break; + +	case NL80211_IFTYPE_ADHOC: +		ctx->staging.dev_type = ctx->ibss_devtype; +		ctx->staging.flags = RXON_FLG_SHORT_PREAMBLE_MSK; +		ctx->staging.filter_flags = RXON_FILTER_BCON_AWARE_MSK | +						  RXON_FILTER_ACCEPT_GRP_MSK; +		break; + +	case NL80211_IFTYPE_MONITOR: +		ctx->staging.dev_type = RXON_DEV_TYPE_SNIFFER; +		break; + +	default: +		IWL_ERR(priv, "Unsupported interface type %d\n", +			ctx->vif->type); +		break; +	} + +#if 0 +	/* TODO:  Figure out when short_preamble would be set and cache from +	 * that */ +	if (!hw_to_local(priv->hw)->short_preamble) +		ctx->staging.flags &= ~RXON_FLG_SHORT_PREAMBLE_MSK; +	else +		ctx->staging.flags |= RXON_FLG_SHORT_PREAMBLE_MSK; +#endif + +	ctx->staging.channel = +		cpu_to_le16(priv->hw->conf.chandef.chan->hw_value); +	priv->band = priv->hw->conf.chandef.chan->band; + +	iwl_set_flags_for_band(priv, ctx, priv->band, ctx->vif); + +	/* clear both MIX and PURE40 mode flag */ +	ctx->staging.flags &= ~(RXON_FLG_CHANNEL_MODE_MIXED | +					RXON_FLG_CHANNEL_MODE_PURE_40); +	if (ctx->vif) +		memcpy(ctx->staging.node_addr, ctx->vif->addr, ETH_ALEN); + +	ctx->staging.ofdm_ht_single_stream_basic_rates = 0xff; +	ctx->staging.ofdm_ht_dual_stream_basic_rates = 0xff; +	ctx->staging.ofdm_ht_triple_stream_basic_rates = 0xff; +} + +static int iwlagn_disable_bss(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx, +			      struct iwl_rxon_cmd *send) +{ +	__le32 old_filter = send->filter_flags; +	int ret; + +	send->filter_flags &= ~RXON_FILTER_ASSOC_MSK; +	ret = iwl_dvm_send_cmd_pdu(priv, ctx->rxon_cmd, +				0, sizeof(*send), send); + +	send->filter_flags = old_filter; + +	if (ret) +		IWL_DEBUG_QUIET_RFKILL(priv, +			"Error clearing ASSOC_MSK on BSS (%d)\n", ret); + +	return ret; +} + +static int iwlagn_disable_pan(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx, +			      struct iwl_rxon_cmd *send) +{ +	struct iwl_notification_wait disable_wait; +	__le32 old_filter = send->filter_flags; +	u8 old_dev_type = send->dev_type; +	int ret; +	static const u8 deactivate_cmd[] = { +		REPLY_WIPAN_DEACTIVATION_COMPLETE +	}; + +	iwl_init_notification_wait(&priv->notif_wait, &disable_wait, +				   deactivate_cmd, ARRAY_SIZE(deactivate_cmd), +				   NULL, NULL); + +	send->filter_flags &= ~RXON_FILTER_ASSOC_MSK; +	send->dev_type = RXON_DEV_TYPE_P2P; +	ret = iwl_dvm_send_cmd_pdu(priv, ctx->rxon_cmd, +				0, sizeof(*send), send); + +	send->filter_flags = old_filter; +	send->dev_type = old_dev_type; + +	if (ret) { +		IWL_ERR(priv, "Error disabling PAN (%d)\n", ret); +		iwl_remove_notification(&priv->notif_wait, &disable_wait); +	} else { +		ret = iwl_wait_notification(&priv->notif_wait, +					    &disable_wait, HZ); +		if (ret) +			IWL_ERR(priv, "Timed out waiting for PAN disable\n"); +	} + +	return ret; +} + +static int iwlagn_disconn_pan(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx, +			      struct iwl_rxon_cmd *send) +{ +	__le32 old_filter = send->filter_flags; +	int ret; + +	send->filter_flags &= ~RXON_FILTER_ASSOC_MSK; +	ret = iwl_dvm_send_cmd_pdu(priv, ctx->rxon_cmd, 0, +				sizeof(*send), send); + +	send->filter_flags = old_filter; + +	return ret; +} + +static void iwlagn_update_qos(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx) +{ +	int ret; + +	if (!ctx->is_active) +		return; + +	ctx->qos_data.def_qos_parm.qos_flags = 0; + +	if (ctx->qos_data.qos_active) +		ctx->qos_data.def_qos_parm.qos_flags |= +			QOS_PARAM_FLG_UPDATE_EDCA_MSK; + +	if (ctx->ht.enabled) +		ctx->qos_data.def_qos_parm.qos_flags |= QOS_PARAM_FLG_TGN_MSK; + +	IWL_DEBUG_INFO(priv, "send QoS cmd with Qos active=%d FLAGS=0x%X\n", +		      ctx->qos_data.qos_active, +		      ctx->qos_data.def_qos_parm.qos_flags); + +	ret = iwl_dvm_send_cmd_pdu(priv, ctx->qos_cmd, 0, +			       sizeof(struct iwl_qosparam_cmd), +			       &ctx->qos_data.def_qos_parm); +	if (ret) +		IWL_DEBUG_QUIET_RFKILL(priv, "Failed to update QoS\n"); +} + +static int iwlagn_update_beacon(struct iwl_priv *priv, +				struct ieee80211_vif *vif) +{ +	lockdep_assert_held(&priv->mutex); + +	dev_kfree_skb(priv->beacon_skb); +	priv->beacon_skb = ieee80211_beacon_get(priv->hw, vif); +	if (!priv->beacon_skb) +		return -ENOMEM; +	return iwlagn_send_beacon_cmd(priv); +} + +static int iwlagn_send_rxon_assoc(struct iwl_priv *priv, +				  struct iwl_rxon_context *ctx) +{ +	int ret = 0; +	struct iwl_rxon_assoc_cmd rxon_assoc; +	const struct iwl_rxon_cmd *rxon1 = &ctx->staging; +	const struct iwl_rxon_cmd *rxon2 = &ctx->active; + +	if ((rxon1->flags == rxon2->flags) && +	    (rxon1->filter_flags == rxon2->filter_flags) && +	    (rxon1->cck_basic_rates == rxon2->cck_basic_rates) && +	    (rxon1->ofdm_ht_single_stream_basic_rates == +	     rxon2->ofdm_ht_single_stream_basic_rates) && +	    (rxon1->ofdm_ht_dual_stream_basic_rates == +	     rxon2->ofdm_ht_dual_stream_basic_rates) && +	    (rxon1->ofdm_ht_triple_stream_basic_rates == +	     rxon2->ofdm_ht_triple_stream_basic_rates) && +	    (rxon1->acquisition_data == rxon2->acquisition_data) && +	    (rxon1->rx_chain == rxon2->rx_chain) && +	    (rxon1->ofdm_basic_rates == rxon2->ofdm_basic_rates)) { +		IWL_DEBUG_INFO(priv, "Using current RXON_ASSOC.  Not resending.\n"); +		return 0; +	} + +	rxon_assoc.flags = ctx->staging.flags; +	rxon_assoc.filter_flags = ctx->staging.filter_flags; +	rxon_assoc.ofdm_basic_rates = ctx->staging.ofdm_basic_rates; +	rxon_assoc.cck_basic_rates = ctx->staging.cck_basic_rates; +	rxon_assoc.reserved1 = 0; +	rxon_assoc.reserved2 = 0; +	rxon_assoc.reserved3 = 0; +	rxon_assoc.ofdm_ht_single_stream_basic_rates = +	    ctx->staging.ofdm_ht_single_stream_basic_rates; +	rxon_assoc.ofdm_ht_dual_stream_basic_rates = +	    ctx->staging.ofdm_ht_dual_stream_basic_rates; +	rxon_assoc.rx_chain_select_flags = ctx->staging.rx_chain; +	rxon_assoc.ofdm_ht_triple_stream_basic_rates = +		 ctx->staging.ofdm_ht_triple_stream_basic_rates; +	rxon_assoc.acquisition_data = ctx->staging.acquisition_data; + +	ret = iwl_dvm_send_cmd_pdu(priv, ctx->rxon_assoc_cmd, +				CMD_ASYNC, sizeof(rxon_assoc), &rxon_assoc); +	return ret; +} + +static u16 iwl_adjust_beacon_interval(u16 beacon_val, u16 max_beacon_val) +{ +	u16 new_val; +	u16 beacon_factor; + +	/* +	 * If mac80211 hasn't given us a beacon interval, program +	 * the default into the device (not checking this here +	 * would cause the adjustment below to return the maximum +	 * value, which may break PAN.) +	 */ +	if (!beacon_val) +		return DEFAULT_BEACON_INTERVAL; + +	/* +	 * If the beacon interval we obtained from the peer +	 * is too large, we'll have to wake up more often +	 * (and in IBSS case, we'll beacon too much) +	 * +	 * For example, if max_beacon_val is 4096, and the +	 * requested beacon interval is 7000, we'll have to +	 * use 3500 to be able to wake up on the beacons. +	 * +	 * This could badly influence beacon detection stats. +	 */ + +	beacon_factor = (beacon_val + max_beacon_val) / max_beacon_val; +	new_val = beacon_val / beacon_factor; + +	if (!new_val) +		new_val = max_beacon_val; + +	return new_val; +} + +static int iwl_send_rxon_timing(struct iwl_priv *priv, +				struct iwl_rxon_context *ctx) +{ +	u64 tsf; +	s32 interval_tm, rem; +	struct ieee80211_conf *conf = NULL; +	u16 beacon_int; +	struct ieee80211_vif *vif = ctx->vif; + +	conf = &priv->hw->conf; + +	lockdep_assert_held(&priv->mutex); + +	memset(&ctx->timing, 0, sizeof(struct iwl_rxon_time_cmd)); + +	ctx->timing.timestamp = cpu_to_le64(priv->timestamp); +	ctx->timing.listen_interval = cpu_to_le16(conf->listen_interval); + +	beacon_int = vif ? vif->bss_conf.beacon_int : 0; + +	/* +	 * TODO: For IBSS we need to get atim_window from mac80211, +	 *	 for now just always use 0 +	 */ +	ctx->timing.atim_window = 0; + +	if (ctx->ctxid == IWL_RXON_CTX_PAN && +	    (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION) && +	    iwl_is_associated(priv, IWL_RXON_CTX_BSS) && +	    priv->contexts[IWL_RXON_CTX_BSS].vif && +	    priv->contexts[IWL_RXON_CTX_BSS].vif->bss_conf.beacon_int) { +		ctx->timing.beacon_interval = +			priv->contexts[IWL_RXON_CTX_BSS].timing.beacon_interval; +		beacon_int = le16_to_cpu(ctx->timing.beacon_interval); +	} else if (ctx->ctxid == IWL_RXON_CTX_BSS && +		   iwl_is_associated(priv, IWL_RXON_CTX_PAN) && +		   priv->contexts[IWL_RXON_CTX_PAN].vif && +		   priv->contexts[IWL_RXON_CTX_PAN].vif->bss_conf.beacon_int && +		   (!iwl_is_associated_ctx(ctx) || !ctx->vif || +		    !ctx->vif->bss_conf.beacon_int)) { +		ctx->timing.beacon_interval = +			priv->contexts[IWL_RXON_CTX_PAN].timing.beacon_interval; +		beacon_int = le16_to_cpu(ctx->timing.beacon_interval); +	} else { +		beacon_int = iwl_adjust_beacon_interval(beacon_int, +			IWL_MAX_UCODE_BEACON_INTERVAL * TIME_UNIT); +		ctx->timing.beacon_interval = cpu_to_le16(beacon_int); +	} + +	ctx->beacon_int = beacon_int; + +	tsf = priv->timestamp; /* tsf is modifed by do_div: copy it */ +	interval_tm = beacon_int * TIME_UNIT; +	rem = do_div(tsf, interval_tm); +	ctx->timing.beacon_init_val = cpu_to_le32(interval_tm - rem); + +	ctx->timing.dtim_period = vif ? (vif->bss_conf.dtim_period ?: 1) : 1; + +	IWL_DEBUG_ASSOC(priv, +			"beacon interval %d beacon timer %d beacon tim %d\n", +			le16_to_cpu(ctx->timing.beacon_interval), +			le32_to_cpu(ctx->timing.beacon_init_val), +			le16_to_cpu(ctx->timing.atim_window)); + +	return iwl_dvm_send_cmd_pdu(priv, ctx->rxon_timing_cmd, +				0, sizeof(ctx->timing), &ctx->timing); +} + +static int iwlagn_rxon_disconn(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx) +{ +	int ret; +	struct iwl_rxon_cmd *active = (void *)&ctx->active; + +	if (ctx->ctxid == IWL_RXON_CTX_BSS) { +		ret = iwlagn_disable_bss(priv, ctx, &ctx->staging); +	} else { +		ret = iwlagn_disable_pan(priv, ctx, &ctx->staging); +		if (ret) +			return ret; +		if (ctx->vif) { +			ret = iwl_send_rxon_timing(priv, ctx); +			if (ret) { +				IWL_ERR(priv, "Failed to send timing (%d)!\n", ret); +				return ret; +			} +			ret = iwlagn_disconn_pan(priv, ctx, &ctx->staging); +		} +	} +	if (ret) +		return ret; + +	/* +	 * Un-assoc RXON clears the station table and WEP +	 * keys, so we have to restore those afterwards. +	 */ +	iwl_clear_ucode_stations(priv, ctx); +	/* update -- might need P2P now */ +	iwl_update_bcast_station(priv, ctx); +	iwl_restore_stations(priv, ctx); +	ret = iwl_restore_default_wep_keys(priv, ctx); +	if (ret) { +		IWL_ERR(priv, "Failed to restore WEP keys (%d)\n", ret); +		return ret; +	} + +	memcpy(active, &ctx->staging, sizeof(*active)); +	return 0; +} + +static int iwl_set_tx_power(struct iwl_priv *priv, s8 tx_power, bool force) +{ +	int ret; +	s8 prev_tx_power; +	bool defer; +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; + +	if (priv->calib_disabled & IWL_TX_POWER_CALIB_DISABLED) +		return 0; + +	lockdep_assert_held(&priv->mutex); + +	if (priv->tx_power_user_lmt == tx_power && !force) +		return 0; + +	if (tx_power < IWLAGN_TX_POWER_TARGET_POWER_MIN) { +		IWL_WARN(priv, +			 "Requested user TXPOWER %d below lower limit %d.\n", +			 tx_power, +			 IWLAGN_TX_POWER_TARGET_POWER_MIN); +		return -EINVAL; +	} + +	if (tx_power > DIV_ROUND_UP(priv->nvm_data->max_tx_pwr_half_dbm, 2)) { +		IWL_WARN(priv, +			"Requested user TXPOWER %d above upper limit %d.\n", +			 tx_power, priv->nvm_data->max_tx_pwr_half_dbm); +		return -EINVAL; +	} + +	if (!iwl_is_ready_rf(priv)) +		return -EIO; + +	/* scan complete and commit_rxon use tx_power_next value, +	 * it always need to be updated for newest request */ +	priv->tx_power_next = tx_power; + +	/* do not set tx power when scanning or channel changing */ +	defer = test_bit(STATUS_SCANNING, &priv->status) || +		memcmp(&ctx->active, &ctx->staging, sizeof(ctx->staging)); +	if (defer && !force) { +		IWL_DEBUG_INFO(priv, "Deferring tx power set\n"); +		return 0; +	} + +	prev_tx_power = priv->tx_power_user_lmt; +	priv->tx_power_user_lmt = tx_power; + +	ret = iwlagn_send_tx_power(priv); + +	/* if fail to set tx_power, restore the orig. tx power */ +	if (ret) { +		priv->tx_power_user_lmt = prev_tx_power; +		priv->tx_power_next = prev_tx_power; +	} +	return ret; +} + +static int iwlagn_rxon_connect(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx) +{ +	int ret; +	struct iwl_rxon_cmd *active = (void *)&ctx->active; + +	/* RXON timing must be before associated RXON */ +	if (ctx->ctxid == IWL_RXON_CTX_BSS) { +		ret = iwl_send_rxon_timing(priv, ctx); +		if (ret) { +			IWL_ERR(priv, "Failed to send timing (%d)!\n", ret); +			return ret; +		} +	} +	/* QoS info may be cleared by previous un-assoc RXON */ +	iwlagn_update_qos(priv, ctx); + +	/* +	 * We'll run into this code path when beaconing is +	 * enabled, but then we also need to send the beacon +	 * to the device. +	 */ +	if (ctx->vif && (ctx->vif->type == NL80211_IFTYPE_AP)) { +		ret = iwlagn_update_beacon(priv, ctx->vif); +		if (ret) { +			IWL_ERR(priv, +				"Error sending required beacon (%d)!\n", +				ret); +			return ret; +		} +	} + +	priv->start_calib = 0; +	/* +	 * Apply the new configuration. +	 * +	 * Associated RXON doesn't clear the station table in uCode, +	 * so we don't need to restore stations etc. after this. +	 */ +	ret = iwl_dvm_send_cmd_pdu(priv, ctx->rxon_cmd, 0, +		      sizeof(struct iwl_rxon_cmd), &ctx->staging); +	if (ret) { +		IWL_ERR(priv, "Error setting new RXON (%d)\n", ret); +		return ret; +	} +	memcpy(active, &ctx->staging, sizeof(*active)); + +	/* IBSS beacon needs to be sent after setting assoc */ +	if (ctx->vif && (ctx->vif->type == NL80211_IFTYPE_ADHOC)) +		if (iwlagn_update_beacon(priv, ctx->vif)) +			IWL_ERR(priv, "Error sending IBSS beacon\n"); +	iwl_init_sensitivity(priv); + +	/* +	 * If we issue a new RXON command which required a tune then +	 * we must send a new TXPOWER command or we won't be able to +	 * Tx any frames. +	 * +	 * It's expected we set power here if channel is changing. +	 */ +	ret = iwl_set_tx_power(priv, priv->tx_power_next, true); +	if (ret) { +		IWL_ERR(priv, "Error sending TX power (%d)\n", ret); +		return ret; +	} + +	if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_STATION && +	    priv->cfg->ht_params && priv->cfg->ht_params->smps_mode) +		ieee80211_request_smps(ctx->vif, +				       priv->cfg->ht_params->smps_mode); + +	return 0; +} + +int iwlagn_set_pan_params(struct iwl_priv *priv) +{ +	struct iwl_wipan_params_cmd cmd; +	struct iwl_rxon_context *ctx_bss, *ctx_pan; +	int slot0 = 300, slot1 = 0; +	int ret; + +	if (priv->valid_contexts == BIT(IWL_RXON_CTX_BSS)) +		return 0; + +	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2); + +	lockdep_assert_held(&priv->mutex); + +	ctx_bss = &priv->contexts[IWL_RXON_CTX_BSS]; +	ctx_pan = &priv->contexts[IWL_RXON_CTX_PAN]; + +	/* +	 * If the PAN context is inactive, then we don't need +	 * to update the PAN parameters, the last thing we'll +	 * have done before it goes inactive is making the PAN +	 * parameters be WLAN-only. +	 */ +	if (!ctx_pan->is_active) +		return 0; + +	memset(&cmd, 0, sizeof(cmd)); + +	/* only 2 slots are currently allowed */ +	cmd.num_slots = 2; + +	cmd.slots[0].type = 0; /* BSS */ +	cmd.slots[1].type = 1; /* PAN */ + +	if (ctx_bss->vif && ctx_pan->vif) { +		int bcnint = ctx_pan->beacon_int; +		int dtim = ctx_pan->vif->bss_conf.dtim_period ?: 1; + +		/* should be set, but seems unused?? */ +		cmd.flags |= cpu_to_le16(IWL_WIPAN_PARAMS_FLG_SLOTTED_MODE); + +		if (ctx_pan->vif->type == NL80211_IFTYPE_AP && +		    bcnint && +		    bcnint != ctx_bss->beacon_int) { +			IWL_ERR(priv, +				"beacon intervals don't match (%d, %d)\n", +				ctx_bss->beacon_int, ctx_pan->beacon_int); +		} else +			bcnint = max_t(int, bcnint, +				       ctx_bss->beacon_int); +		if (!bcnint) +			bcnint = DEFAULT_BEACON_INTERVAL; +		slot0 = bcnint / 2; +		slot1 = bcnint - slot0; + +		if (test_bit(STATUS_SCAN_HW, &priv->status) || +		    (!ctx_bss->vif->bss_conf.idle && +		     !ctx_bss->vif->bss_conf.assoc)) { +			slot0 = dtim * bcnint * 3 - IWL_MIN_SLOT_TIME; +			slot1 = IWL_MIN_SLOT_TIME; +		} else if (!ctx_pan->vif->bss_conf.idle && +			   !ctx_pan->vif->bss_conf.assoc) { +			slot1 = dtim * bcnint * 3 - IWL_MIN_SLOT_TIME; +			slot0 = IWL_MIN_SLOT_TIME; +		} +	} else if (ctx_pan->vif) { +		slot0 = 0; +		slot1 = max_t(int, 1, ctx_pan->vif->bss_conf.dtim_period) * +					ctx_pan->beacon_int; +		slot1 = max_t(int, DEFAULT_BEACON_INTERVAL, slot1); + +		if (test_bit(STATUS_SCAN_HW, &priv->status)) { +			slot0 = slot1 * 3 - IWL_MIN_SLOT_TIME; +			slot1 = IWL_MIN_SLOT_TIME; +		} +	} + +	cmd.slots[0].width = cpu_to_le16(slot0); +	cmd.slots[1].width = cpu_to_le16(slot1); + +	ret = iwl_dvm_send_cmd_pdu(priv, REPLY_WIPAN_PARAMS, 0, +			sizeof(cmd), &cmd); +	if (ret) +		IWL_ERR(priv, "Error setting PAN parameters (%d)\n", ret); + +	return ret; +} + +static void _iwl_set_rxon_ht(struct iwl_priv *priv, +			     struct iwl_ht_config *ht_conf, +			     struct iwl_rxon_context *ctx) +{ +	struct iwl_rxon_cmd *rxon = &ctx->staging; + +	if (!ctx->ht.enabled) { +		rxon->flags &= ~(RXON_FLG_CHANNEL_MODE_MSK | +			RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK | +			RXON_FLG_HT40_PROT_MSK | +			RXON_FLG_HT_PROT_MSK); +		return; +	} + +	/* FIXME: if the definition of ht.protection changed, the "translation" +	 * will be needed for rxon->flags +	 */ +	rxon->flags |= cpu_to_le32(ctx->ht.protection << +				   RXON_FLG_HT_OPERATING_MODE_POS); + +	/* Set up channel bandwidth: +	 * 20 MHz only, 20/40 mixed or pure 40 if ht40 ok */ +	/* clear the HT channel mode before set the mode */ +	rxon->flags &= ~(RXON_FLG_CHANNEL_MODE_MSK | +			 RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK); +	if (iwl_is_ht40_tx_allowed(priv, ctx, NULL)) { +		/* pure ht40 */ +		if (ctx->ht.protection == +		    IEEE80211_HT_OP_MODE_PROTECTION_20MHZ) { +			rxon->flags |= RXON_FLG_CHANNEL_MODE_PURE_40; +			/* +			 * Note: control channel is opposite of extension +			 * channel +			 */ +			switch (ctx->ht.extension_chan_offset) { +			case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: +				rxon->flags &= +					~RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK; +				break; +			case IEEE80211_HT_PARAM_CHA_SEC_BELOW: +				rxon->flags |= +					RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK; +				break; +			} +		} else { +			/* +			 * Note: control channel is opposite of extension +			 * channel +			 */ +			switch (ctx->ht.extension_chan_offset) { +			case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: +				rxon->flags &= +					~(RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK); +				rxon->flags |= RXON_FLG_CHANNEL_MODE_MIXED; +				break; +			case IEEE80211_HT_PARAM_CHA_SEC_BELOW: +				rxon->flags |= RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK; +				rxon->flags |= RXON_FLG_CHANNEL_MODE_MIXED; +				break; +			case IEEE80211_HT_PARAM_CHA_SEC_NONE: +			default: +				/* +				 * channel location only valid if in Mixed +				 * mode +				 */ +				IWL_ERR(priv, +					"invalid extension channel offset\n"); +				break; +			} +		} +	} else { +		rxon->flags |= RXON_FLG_CHANNEL_MODE_LEGACY; +	} + +	iwlagn_set_rxon_chain(priv, ctx); + +	IWL_DEBUG_ASSOC(priv, "rxon flags 0x%X operation mode :0x%X " +			"extension channel offset 0x%x\n", +			le32_to_cpu(rxon->flags), ctx->ht.protection, +			ctx->ht.extension_chan_offset); +} + +void iwl_set_rxon_ht(struct iwl_priv *priv, struct iwl_ht_config *ht_conf) +{ +	struct iwl_rxon_context *ctx; + +	for_each_context(priv, ctx) +		_iwl_set_rxon_ht(priv, ht_conf, ctx); +} + +/** + * iwl_set_rxon_channel - Set the band and channel values in staging RXON + * @ch: requested channel as a pointer to struct ieee80211_channel + + * NOTE:  Does not commit to the hardware; it sets appropriate bit fields + * in the staging RXON flag structure based on the ch->band + */ +void iwl_set_rxon_channel(struct iwl_priv *priv, struct ieee80211_channel *ch, +			 struct iwl_rxon_context *ctx) +{ +	enum ieee80211_band band = ch->band; +	u16 channel = ch->hw_value; + +	if ((le16_to_cpu(ctx->staging.channel) == channel) && +	    (priv->band == band)) +		return; + +	ctx->staging.channel = cpu_to_le16(channel); +	if (band == IEEE80211_BAND_5GHZ) +		ctx->staging.flags &= ~RXON_FLG_BAND_24G_MSK; +	else +		ctx->staging.flags |= RXON_FLG_BAND_24G_MSK; + +	priv->band = band; + +	IWL_DEBUG_INFO(priv, "Staging channel set to %d [%d]\n", channel, band); + +} + +void iwl_set_flags_for_band(struct iwl_priv *priv, +			    struct iwl_rxon_context *ctx, +			    enum ieee80211_band band, +			    struct ieee80211_vif *vif) +{ +	if (band == IEEE80211_BAND_5GHZ) { +		ctx->staging.flags &= +		    ~(RXON_FLG_BAND_24G_MSK | RXON_FLG_AUTO_DETECT_MSK +		      | RXON_FLG_CCK_MSK); +		ctx->staging.flags |= RXON_FLG_SHORT_SLOT_MSK; +	} else { +		/* Copied from iwl_post_associate() */ +		if (vif && vif->bss_conf.use_short_slot) +			ctx->staging.flags |= RXON_FLG_SHORT_SLOT_MSK; +		else +			ctx->staging.flags &= ~RXON_FLG_SHORT_SLOT_MSK; + +		ctx->staging.flags |= RXON_FLG_BAND_24G_MSK; +		ctx->staging.flags |= RXON_FLG_AUTO_DETECT_MSK; +		ctx->staging.flags &= ~RXON_FLG_CCK_MSK; +	} +} + +static void iwl_set_rxon_hwcrypto(struct iwl_priv *priv, +				  struct iwl_rxon_context *ctx, int hw_decrypt) +{ +	struct iwl_rxon_cmd *rxon = &ctx->staging; + +	if (hw_decrypt) +		rxon->filter_flags &= ~RXON_FILTER_DIS_DECRYPT_MSK; +	else +		rxon->filter_flags |= RXON_FILTER_DIS_DECRYPT_MSK; + +} + +/* validate RXON structure is valid */ +static int iwl_check_rxon_cmd(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx) +{ +	struct iwl_rxon_cmd *rxon = &ctx->staging; +	u32 errors = 0; + +	if (rxon->flags & RXON_FLG_BAND_24G_MSK) { +		if (rxon->flags & RXON_FLG_TGJ_NARROW_BAND_MSK) { +			IWL_WARN(priv, "check 2.4G: wrong narrow\n"); +			errors |= BIT(0); +		} +		if (rxon->flags & RXON_FLG_RADAR_DETECT_MSK) { +			IWL_WARN(priv, "check 2.4G: wrong radar\n"); +			errors |= BIT(1); +		} +	} else { +		if (!(rxon->flags & RXON_FLG_SHORT_SLOT_MSK)) { +			IWL_WARN(priv, "check 5.2G: not short slot!\n"); +			errors |= BIT(2); +		} +		if (rxon->flags & RXON_FLG_CCK_MSK) { +			IWL_WARN(priv, "check 5.2G: CCK!\n"); +			errors |= BIT(3); +		} +	} +	if ((rxon->node_addr[0] | rxon->bssid_addr[0]) & 0x1) { +		IWL_WARN(priv, "mac/bssid mcast!\n"); +		errors |= BIT(4); +	} + +	/* make sure basic rates 6Mbps and 1Mbps are supported */ +	if ((rxon->ofdm_basic_rates & IWL_RATE_6M_MASK) == 0 && +	    (rxon->cck_basic_rates & IWL_RATE_1M_MASK) == 0) { +		IWL_WARN(priv, "neither 1 nor 6 are basic\n"); +		errors |= BIT(5); +	} + +	if (le16_to_cpu(rxon->assoc_id) > 2007) { +		IWL_WARN(priv, "aid > 2007\n"); +		errors |= BIT(6); +	} + +	if ((rxon->flags & (RXON_FLG_CCK_MSK | RXON_FLG_SHORT_SLOT_MSK)) +			== (RXON_FLG_CCK_MSK | RXON_FLG_SHORT_SLOT_MSK)) { +		IWL_WARN(priv, "CCK and short slot\n"); +		errors |= BIT(7); +	} + +	if ((rxon->flags & (RXON_FLG_CCK_MSK | RXON_FLG_AUTO_DETECT_MSK)) +			== (RXON_FLG_CCK_MSK | RXON_FLG_AUTO_DETECT_MSK)) { +		IWL_WARN(priv, "CCK and auto detect\n"); +		errors |= BIT(8); +	} + +	if ((rxon->flags & (RXON_FLG_AUTO_DETECT_MSK | +			    RXON_FLG_TGG_PROTECT_MSK)) == +			    RXON_FLG_TGG_PROTECT_MSK) { +		IWL_WARN(priv, "TGg but no auto-detect\n"); +		errors |= BIT(9); +	} + +	if (rxon->channel == 0) { +		IWL_WARN(priv, "zero channel is invalid\n"); +		errors |= BIT(10); +	} + +	WARN(errors, "Invalid RXON (%#x), channel %d", +	     errors, le16_to_cpu(rxon->channel)); + +	return errors ? -EINVAL : 0; +} + +/** + * iwl_full_rxon_required - check if full RXON (vs RXON_ASSOC) cmd is needed + * @priv: staging_rxon is compared to active_rxon + * + * If the RXON structure is changing enough to require a new tune, + * or is clearing the RXON_FILTER_ASSOC_MSK, then return 1 to indicate that + * a new tune (full RXON command, rather than RXON_ASSOC cmd) is required. + */ +static int iwl_full_rxon_required(struct iwl_priv *priv, +				  struct iwl_rxon_context *ctx) +{ +	const struct iwl_rxon_cmd *staging = &ctx->staging; +	const struct iwl_rxon_cmd *active = &ctx->active; + +#define CHK(cond)							\ +	if ((cond)) {							\ +		IWL_DEBUG_INFO(priv, "need full RXON - " #cond "\n");	\ +		return 1;						\ +	} + +#define CHK_NEQ(c1, c2)						\ +	if ((c1) != (c2)) {					\ +		IWL_DEBUG_INFO(priv, "need full RXON - "	\ +			       #c1 " != " #c2 " - %d != %d\n",	\ +			       (c1), (c2));			\ +		return 1;					\ +	} + +	/* These items are only settable from the full RXON command */ +	CHK(!iwl_is_associated_ctx(ctx)); +	CHK(!ether_addr_equal(staging->bssid_addr, active->bssid_addr)); +	CHK(!ether_addr_equal(staging->node_addr, active->node_addr)); +	CHK(!ether_addr_equal(staging->wlap_bssid_addr, +			      active->wlap_bssid_addr)); +	CHK_NEQ(staging->dev_type, active->dev_type); +	CHK_NEQ(staging->channel, active->channel); +	CHK_NEQ(staging->air_propagation, active->air_propagation); +	CHK_NEQ(staging->ofdm_ht_single_stream_basic_rates, +		active->ofdm_ht_single_stream_basic_rates); +	CHK_NEQ(staging->ofdm_ht_dual_stream_basic_rates, +		active->ofdm_ht_dual_stream_basic_rates); +	CHK_NEQ(staging->ofdm_ht_triple_stream_basic_rates, +		active->ofdm_ht_triple_stream_basic_rates); +	CHK_NEQ(staging->assoc_id, active->assoc_id); + +	/* flags, filter_flags, ofdm_basic_rates, and cck_basic_rates can +	 * be updated with the RXON_ASSOC command -- however only some +	 * flag transitions are allowed using RXON_ASSOC */ + +	/* Check if we are not switching bands */ +	CHK_NEQ(staging->flags & RXON_FLG_BAND_24G_MSK, +		active->flags & RXON_FLG_BAND_24G_MSK); + +	/* Check if we are switching association toggle */ +	CHK_NEQ(staging->filter_flags & RXON_FILTER_ASSOC_MSK, +		active->filter_flags & RXON_FILTER_ASSOC_MSK); + +#undef CHK +#undef CHK_NEQ + +	return 0; +} + +#ifdef CONFIG_IWLWIFI_DEBUG +void iwl_print_rx_config_cmd(struct iwl_priv *priv, +			     enum iwl_rxon_context_id ctxid) +{ +	struct iwl_rxon_context *ctx = &priv->contexts[ctxid]; +	struct iwl_rxon_cmd *rxon = &ctx->staging; + +	IWL_DEBUG_RADIO(priv, "RX CONFIG:\n"); +	iwl_print_hex_dump(priv, IWL_DL_RADIO, (u8 *) rxon, sizeof(*rxon)); +	IWL_DEBUG_RADIO(priv, "u16 channel: 0x%x\n", +			le16_to_cpu(rxon->channel)); +	IWL_DEBUG_RADIO(priv, "u32 flags: 0x%08X\n", +			le32_to_cpu(rxon->flags)); +	IWL_DEBUG_RADIO(priv, "u32 filter_flags: 0x%08x\n", +			le32_to_cpu(rxon->filter_flags)); +	IWL_DEBUG_RADIO(priv, "u8 dev_type: 0x%x\n", rxon->dev_type); +	IWL_DEBUG_RADIO(priv, "u8 ofdm_basic_rates: 0x%02x\n", +			rxon->ofdm_basic_rates); +	IWL_DEBUG_RADIO(priv, "u8 cck_basic_rates: 0x%02x\n", +			rxon->cck_basic_rates); +	IWL_DEBUG_RADIO(priv, "u8[6] node_addr: %pM\n", rxon->node_addr); +	IWL_DEBUG_RADIO(priv, "u8[6] bssid_addr: %pM\n", rxon->bssid_addr); +	IWL_DEBUG_RADIO(priv, "u16 assoc_id: 0x%x\n", +			le16_to_cpu(rxon->assoc_id)); +} +#endif + +static void iwl_calc_basic_rates(struct iwl_priv *priv, +				 struct iwl_rxon_context *ctx) +{ +	int lowest_present_ofdm = 100; +	int lowest_present_cck = 100; +	u8 cck = 0; +	u8 ofdm = 0; + +	if (ctx->vif) { +		struct ieee80211_supported_band *sband; +		unsigned long basic = ctx->vif->bss_conf.basic_rates; +		int i; + +		sband = priv->hw->wiphy->bands[priv->hw->conf.chandef.chan->band]; + +		for_each_set_bit(i, &basic, BITS_PER_LONG) { +			int hw = sband->bitrates[i].hw_value; +			if (hw >= IWL_FIRST_OFDM_RATE) { +				ofdm |= BIT(hw - IWL_FIRST_OFDM_RATE); +				if (lowest_present_ofdm > hw) +					lowest_present_ofdm = hw; +			} else { +				BUILD_BUG_ON(IWL_FIRST_CCK_RATE != 0); + +				cck |= BIT(hw); +				if (lowest_present_cck > hw) +					lowest_present_cck = hw; +			} +		} +	} + +	/* +	 * Now we've got the basic rates as bitmaps in the ofdm and cck +	 * variables. This isn't sufficient though, as there might not +	 * be all the right rates in the bitmap. E.g. if the only basic +	 * rates are 5.5 Mbps and 11 Mbps, we still need to add 1 Mbps +	 * and 6 Mbps because the 802.11-2007 standard says in 9.6: +	 * +	 *    [...] a STA responding to a received frame shall transmit +	 *    its Control Response frame [...] at the highest rate in the +	 *    BSSBasicRateSet parameter that is less than or equal to the +	 *    rate of the immediately previous frame in the frame exchange +	 *    sequence ([...]) and that is of the same modulation class +	 *    ([...]) as the received frame. If no rate contained in the +	 *    BSSBasicRateSet parameter meets these conditions, then the +	 *    control frame sent in response to a received frame shall be +	 *    transmitted at the highest mandatory rate of the PHY that is +	 *    less than or equal to the rate of the received frame, and +	 *    that is of the same modulation class as the received frame. +	 * +	 * As a consequence, we need to add all mandatory rates that are +	 * lower than all of the basic rates to these bitmaps. +	 */ + +	if (IWL_RATE_24M_INDEX < lowest_present_ofdm) +		ofdm |= IWL_RATE_24M_MASK >> IWL_FIRST_OFDM_RATE; +	if (IWL_RATE_12M_INDEX < lowest_present_ofdm) +		ofdm |= IWL_RATE_12M_MASK >> IWL_FIRST_OFDM_RATE; +	/* 6M already there or needed so always add */ +	ofdm |= IWL_RATE_6M_MASK >> IWL_FIRST_OFDM_RATE; + +	/* +	 * CCK is a bit more complex with DSSS vs. HR/DSSS vs. ERP. +	 * Note, however: +	 *  - if no CCK rates are basic, it must be ERP since there must +	 *    be some basic rates at all, so they're OFDM => ERP PHY +	 *    (or we're in 5 GHz, and the cck bitmap will never be used) +	 *  - if 11M is a basic rate, it must be ERP as well, so add 5.5M +	 *  - if 5.5M is basic, 1M and 2M are mandatory +	 *  - if 2M is basic, 1M is mandatory +	 *  - if 1M is basic, that's the only valid ACK rate. +	 * As a consequence, it's not as complicated as it sounds, just add +	 * any lower rates to the ACK rate bitmap. +	 */ +	if (IWL_RATE_11M_INDEX < lowest_present_cck) +		cck |= IWL_RATE_11M_MASK >> IWL_FIRST_CCK_RATE; +	if (IWL_RATE_5M_INDEX < lowest_present_cck) +		cck |= IWL_RATE_5M_MASK >> IWL_FIRST_CCK_RATE; +	if (IWL_RATE_2M_INDEX < lowest_present_cck) +		cck |= IWL_RATE_2M_MASK >> IWL_FIRST_CCK_RATE; +	/* 1M already there or needed so always add */ +	cck |= IWL_RATE_1M_MASK >> IWL_FIRST_CCK_RATE; + +	IWL_DEBUG_RATE(priv, "Set basic rates cck:0x%.2x ofdm:0x%.2x\n", +		       cck, ofdm); + +	/* "basic_rates" is a misnomer here -- should be called ACK rates */ +	ctx->staging.cck_basic_rates = cck; +	ctx->staging.ofdm_basic_rates = ofdm; +} + +/** + * iwlagn_commit_rxon - commit staging_rxon to hardware + * + * The RXON command in staging_rxon is committed to the hardware and + * the active_rxon structure is updated with the new data.  This + * function correctly transitions out of the RXON_ASSOC_MSK state if + * a HW tune is required based on the RXON structure changes. + * + * The connect/disconnect flow should be as the following: + * + * 1. make sure send RXON command with association bit unset if not connect + *	this should include the channel and the band for the candidate + *	to be connected to + * 2. Add Station before RXON association with the AP + * 3. RXON_timing has to send before RXON for connection + * 4. full RXON command - associated bit set + * 5. use RXON_ASSOC command to update any flags changes + */ +int iwlagn_commit_rxon(struct iwl_priv *priv, struct iwl_rxon_context *ctx) +{ +	/* cast away the const for active_rxon in this function */ +	struct iwl_rxon_cmd *active = (void *)&ctx->active; +	bool new_assoc = !!(ctx->staging.filter_flags & RXON_FILTER_ASSOC_MSK); +	int ret; + +	lockdep_assert_held(&priv->mutex); + +	if (!iwl_is_alive(priv)) +		return -EBUSY; + +	/* This function hardcodes a bunch of dual-mode assumptions */ +	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2); + +	if (!ctx->is_active) +		return 0; + +	/* always get timestamp with Rx frame */ +	ctx->staging.flags |= RXON_FLG_TSF2HOST_MSK; + +	/* recalculate basic rates */ +	iwl_calc_basic_rates(priv, ctx); + +	if ((ctx->vif && ctx->vif->bss_conf.use_short_slot) || +	    !(ctx->staging.flags & RXON_FLG_BAND_24G_MSK)) +		ctx->staging.flags |= RXON_FLG_SHORT_SLOT_MSK; +	else +		ctx->staging.flags &= ~RXON_FLG_SHORT_SLOT_MSK; + +	iwl_print_rx_config_cmd(priv, ctx->ctxid); +	ret = iwl_check_rxon_cmd(priv, ctx); +	if (ret) { +		IWL_ERR(priv, "Invalid RXON configuration. Not committing.\n"); +		return -EINVAL; +	} + +	/* +	 * receive commit_rxon request +	 * abort any previous channel switch if still in process +	 */ +	if (test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status) && +	    (priv->switch_channel != ctx->staging.channel)) { +		IWL_DEBUG_11H(priv, "abort channel switch on %d\n", +			      le16_to_cpu(priv->switch_channel)); +		iwl_chswitch_done(priv, false); +	} + +	/* +	 * If we don't need to send a full RXON, we can use +	 * iwl_rxon_assoc_cmd which is used to reconfigure filter +	 * and other flags for the current radio configuration. +	 */ +	if (!iwl_full_rxon_required(priv, ctx)) { +		ret = iwlagn_send_rxon_assoc(priv, ctx); +		if (ret) { +			IWL_ERR(priv, "Error setting RXON_ASSOC (%d)\n", ret); +			return ret; +		} + +		memcpy(active, &ctx->staging, sizeof(*active)); +		/* +		 * We do not commit tx power settings while channel changing, +		 * do it now if after settings changed. +		 */ +		iwl_set_tx_power(priv, priv->tx_power_next, false); + +		/* make sure we are in the right PS state */ +		iwl_power_update_mode(priv, true); + +		return 0; +	} + +	iwl_set_rxon_hwcrypto(priv, ctx, !iwlwifi_mod_params.sw_crypto); + +	IWL_DEBUG_INFO(priv, +		       "Going to commit RXON\n" +		       "  * with%s RXON_FILTER_ASSOC_MSK\n" +		       "  * channel = %d\n" +		       "  * bssid = %pM\n", +		       (new_assoc ? "" : "out"), +		       le16_to_cpu(ctx->staging.channel), +		       ctx->staging.bssid_addr); + +	/* +	 * Always clear associated first, but with the correct config. +	 * This is required as for example station addition for the +	 * AP station must be done after the BSSID is set to correctly +	 * set up filters in the device. +	 */ +	ret = iwlagn_rxon_disconn(priv, ctx); +	if (ret) +		return ret; + +	ret = iwlagn_set_pan_params(priv); +	if (ret) +		return ret; + +	if (new_assoc) +		return iwlagn_rxon_connect(priv, ctx); + +	return 0; +} + +void iwlagn_config_ht40(struct ieee80211_conf *conf, +			struct iwl_rxon_context *ctx) +{ +	if (conf_is_ht40_minus(conf)) { +		ctx->ht.extension_chan_offset = +			IEEE80211_HT_PARAM_CHA_SEC_BELOW; +		ctx->ht.is_40mhz = true; +	} else if (conf_is_ht40_plus(conf)) { +		ctx->ht.extension_chan_offset = +			IEEE80211_HT_PARAM_CHA_SEC_ABOVE; +		ctx->ht.is_40mhz = true; +	} else { +		ctx->ht.extension_chan_offset = +			IEEE80211_HT_PARAM_CHA_SEC_NONE; +		ctx->ht.is_40mhz = false; +	} +} + +int iwlagn_mac_config(struct ieee80211_hw *hw, u32 changed) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_rxon_context *ctx; +	struct ieee80211_conf *conf = &hw->conf; +	struct ieee80211_channel *channel = conf->chandef.chan; +	int ret = 0; + +	IWL_DEBUG_MAC80211(priv, "enter: changed %#x\n", changed); + +	mutex_lock(&priv->mutex); + +	if (unlikely(test_bit(STATUS_SCANNING, &priv->status))) { +		IWL_DEBUG_MAC80211(priv, "leave - scanning\n"); +		goto out; +	} + +	if (!iwl_is_ready(priv)) { +		IWL_DEBUG_MAC80211(priv, "leave - not ready\n"); +		goto out; +	} + +	if (changed & (IEEE80211_CONF_CHANGE_SMPS | +		       IEEE80211_CONF_CHANGE_CHANNEL)) { +		/* mac80211 uses static for non-HT which is what we want */ +		priv->current_ht_config.smps = conf->smps_mode; + +		/* +		 * Recalculate chain counts. +		 * +		 * If monitor mode is enabled then mac80211 will +		 * set up the SM PS mode to OFF if an HT channel is +		 * configured. +		 */ +		for_each_context(priv, ctx) +			iwlagn_set_rxon_chain(priv, ctx); +	} + +	if (changed & IEEE80211_CONF_CHANGE_CHANNEL) { +		for_each_context(priv, ctx) { +			/* Configure HT40 channels */ +			if (ctx->ht.enabled != conf_is_ht(conf)) +				ctx->ht.enabled = conf_is_ht(conf); + +			if (ctx->ht.enabled) { +				/* if HT40 is used, it should not change +				 * after associated except channel switch */ +				if (!ctx->ht.is_40mhz || +						!iwl_is_associated_ctx(ctx)) +					iwlagn_config_ht40(conf, ctx); +			} else +				ctx->ht.is_40mhz = false; + +			/* +			 * Default to no protection. Protection mode will +			 * later be set from BSS config in iwl_ht_conf +			 */ +			ctx->ht.protection = IEEE80211_HT_OP_MODE_PROTECTION_NONE; + +			/* if we are switching from ht to 2.4 clear flags +			 * from any ht related info since 2.4 does not +			 * support ht */ +			if (le16_to_cpu(ctx->staging.channel) != +			    channel->hw_value) +				ctx->staging.flags = 0; + +			iwl_set_rxon_channel(priv, channel, ctx); +			iwl_set_rxon_ht(priv, &priv->current_ht_config); + +			iwl_set_flags_for_band(priv, ctx, channel->band, +					       ctx->vif); +		} + +		iwl_update_bcast_stations(priv); +	} + +	if (changed & (IEEE80211_CONF_CHANGE_PS | +			IEEE80211_CONF_CHANGE_IDLE)) { +		ret = iwl_power_update_mode(priv, false); +		if (ret) +			IWL_DEBUG_MAC80211(priv, "Error setting sleep level\n"); +	} + +	if (changed & IEEE80211_CONF_CHANGE_POWER) { +		IWL_DEBUG_MAC80211(priv, "TX Power old=%d new=%d\n", +			priv->tx_power_user_lmt, conf->power_level); + +		iwl_set_tx_power(priv, conf->power_level, false); +	} + +	for_each_context(priv, ctx) { +		if (!memcmp(&ctx->staging, &ctx->active, sizeof(ctx->staging))) +			continue; +		iwlagn_commit_rxon(priv, ctx); +	} + out: +	mutex_unlock(&priv->mutex); +	IWL_DEBUG_MAC80211(priv, "leave\n"); + +	return ret; +} + +static void iwlagn_check_needed_chains(struct iwl_priv *priv, +				       struct iwl_rxon_context *ctx, +				       struct ieee80211_bss_conf *bss_conf) +{ +	struct ieee80211_vif *vif = ctx->vif; +	struct iwl_rxon_context *tmp; +	struct ieee80211_sta *sta; +	struct iwl_ht_config *ht_conf = &priv->current_ht_config; +	struct ieee80211_sta_ht_cap *ht_cap; +	bool need_multiple; + +	lockdep_assert_held(&priv->mutex); + +	switch (vif->type) { +	case NL80211_IFTYPE_STATION: +		rcu_read_lock(); +		sta = ieee80211_find_sta(vif, bss_conf->bssid); +		if (!sta) { +			/* +			 * If at all, this can only happen through a race +			 * when the AP disconnects us while we're still +			 * setting up the connection, in that case mac80211 +			 * will soon tell us about that. +			 */ +			need_multiple = false; +			rcu_read_unlock(); +			break; +		} + +		ht_cap = &sta->ht_cap; + +		need_multiple = true; + +		/* +		 * If the peer advertises no support for receiving 2 and 3 +		 * stream MCS rates, it can't be transmitting them either. +		 */ +		if (ht_cap->mcs.rx_mask[1] == 0 && +		    ht_cap->mcs.rx_mask[2] == 0) { +			need_multiple = false; +		} else if (!(ht_cap->mcs.tx_params & +						IEEE80211_HT_MCS_TX_DEFINED)) { +			/* If it can't TX MCS at all ... */ +			need_multiple = false; +		} else if (ht_cap->mcs.tx_params & +						IEEE80211_HT_MCS_TX_RX_DIFF) { +			int maxstreams; + +			/* +			 * But if it can receive them, it might still not +			 * be able to transmit them, which is what we need +			 * to check here -- so check the number of streams +			 * it advertises for TX (if different from RX). +			 */ + +			maxstreams = (ht_cap->mcs.tx_params & +				 IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK); +			maxstreams >>= +				IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT; +			maxstreams += 1; + +			if (maxstreams <= 1) +				need_multiple = false; +		} + +		rcu_read_unlock(); +		break; +	case NL80211_IFTYPE_ADHOC: +		/* currently */ +		need_multiple = false; +		break; +	default: +		/* only AP really */ +		need_multiple = true; +		break; +	} + +	ctx->ht_need_multiple_chains = need_multiple; + +	if (!need_multiple) { +		/* check all contexts */ +		for_each_context(priv, tmp) { +			if (!tmp->vif) +				continue; +			if (tmp->ht_need_multiple_chains) { +				need_multiple = true; +				break; +			} +		} +	} + +	ht_conf->single_chain_sufficient = !need_multiple; +} + +static void iwlagn_chain_noise_reset(struct iwl_priv *priv) +{ +	struct iwl_chain_noise_data *data = &priv->chain_noise_data; +	int ret; + +	if (priv->calib_disabled & IWL_CHAIN_NOISE_CALIB_DISABLED) +		return; + +	if ((data->state == IWL_CHAIN_NOISE_ALIVE) && +	    iwl_is_any_associated(priv)) { +		struct iwl_calib_chain_noise_reset_cmd cmd; + +		/* clear data for chain noise calibration algorithm */ +		data->chain_noise_a = 0; +		data->chain_noise_b = 0; +		data->chain_noise_c = 0; +		data->chain_signal_a = 0; +		data->chain_signal_b = 0; +		data->chain_signal_c = 0; +		data->beacon_count = 0; + +		memset(&cmd, 0, sizeof(cmd)); +		iwl_set_calib_hdr(&cmd.hdr, +			priv->phy_calib_chain_noise_reset_cmd); +		ret = iwl_dvm_send_cmd_pdu(priv, +					REPLY_PHY_CALIBRATION_CMD, +					0, sizeof(cmd), &cmd); +		if (ret) +			IWL_ERR(priv, +				"Could not send REPLY_PHY_CALIBRATION_CMD\n"); +		data->state = IWL_CHAIN_NOISE_ACCUMULATE; +		IWL_DEBUG_CALIB(priv, "Run chain_noise_calibrate\n"); +	} +} + +void iwlagn_bss_info_changed(struct ieee80211_hw *hw, +			     struct ieee80211_vif *vif, +			     struct ieee80211_bss_conf *bss_conf, +			     u32 changes) +{ +	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw); +	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif); +	int ret; +	bool force = false; + +	mutex_lock(&priv->mutex); + +	if (changes & BSS_CHANGED_IDLE && bss_conf->idle) { +		/* +		 * If we go idle, then clearly no "passive-no-rx" +		 * workaround is needed any more, this is a reset. +		 */ +		iwlagn_lift_passive_no_rx(priv); +	} + +	if (unlikely(!iwl_is_ready(priv))) { +		IWL_DEBUG_MAC80211(priv, "leave - not ready\n"); +		mutex_unlock(&priv->mutex); +		return; +        } + +	if (unlikely(!ctx->vif)) { +		IWL_DEBUG_MAC80211(priv, "leave - vif is NULL\n"); +		mutex_unlock(&priv->mutex); +		return; +	} + +	if (changes & BSS_CHANGED_BEACON_INT) +		force = true; + +	if (changes & BSS_CHANGED_QOS) { +		ctx->qos_data.qos_active = bss_conf->qos; +		iwlagn_update_qos(priv, ctx); +	} + +	ctx->staging.assoc_id = cpu_to_le16(vif->bss_conf.aid); +	if (vif->bss_conf.use_short_preamble) +		ctx->staging.flags |= RXON_FLG_SHORT_PREAMBLE_MSK; +	else +		ctx->staging.flags &= ~RXON_FLG_SHORT_PREAMBLE_MSK; + +	if (changes & BSS_CHANGED_ASSOC) { +		if (bss_conf->assoc) { +			priv->timestamp = bss_conf->sync_tsf; +			ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK; +		} else { +			ctx->staging.filter_flags &= ~RXON_FILTER_ASSOC_MSK; + +			if (ctx->ctxid == IWL_RXON_CTX_BSS) +				priv->have_rekey_data = false; +		} + +		iwlagn_bt_coex_rssi_monitor(priv); +	} + +	if (ctx->ht.enabled) { +		ctx->ht.protection = bss_conf->ht_operation_mode & +					IEEE80211_HT_OP_MODE_PROTECTION; +		ctx->ht.non_gf_sta_present = !!(bss_conf->ht_operation_mode & +					IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT); +		iwlagn_check_needed_chains(priv, ctx, bss_conf); +		iwl_set_rxon_ht(priv, &priv->current_ht_config); +	} + +	iwlagn_set_rxon_chain(priv, ctx); + +	if (bss_conf->use_cts_prot && (priv->band != IEEE80211_BAND_5GHZ)) +		ctx->staging.flags |= RXON_FLG_TGG_PROTECT_MSK; +	else +		ctx->staging.flags &= ~RXON_FLG_TGG_PROTECT_MSK; + +	memcpy(ctx->staging.bssid_addr, bss_conf->bssid, ETH_ALEN); + +	if (vif->type == NL80211_IFTYPE_AP || +	    vif->type == NL80211_IFTYPE_ADHOC) { +		if (vif->bss_conf.enable_beacon) { +			ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK; +			priv->beacon_ctx = ctx; +		} else { +			ctx->staging.filter_flags &= ~RXON_FILTER_ASSOC_MSK; +			priv->beacon_ctx = NULL; +		} +	} + +	/* +	 * If the ucode decides to do beacon filtering before +	 * association, it will lose beacons that are needed +	 * before sending frames out on passive channels. This +	 * causes association failures on those channels. Enable +	 * receiving beacons in such cases. +	 */ + +	if (vif->type == NL80211_IFTYPE_STATION) { +		if (!bss_conf->assoc) +			ctx->staging.filter_flags |= RXON_FILTER_BCON_AWARE_MSK; +		else +			ctx->staging.filter_flags &= +						    ~RXON_FILTER_BCON_AWARE_MSK; +	} + +	if (force || memcmp(&ctx->staging, &ctx->active, sizeof(ctx->staging))) +		iwlagn_commit_rxon(priv, ctx); + +	if (changes & BSS_CHANGED_ASSOC && bss_conf->assoc) { +		/* +		 * The chain noise calibration will enable PM upon +		 * completion. If calibration has already been run +		 * then we need to enable power management here. +		 */ +		if (priv->chain_noise_data.state == IWL_CHAIN_NOISE_DONE) +			iwl_power_update_mode(priv, false); + +		/* Enable RX differential gain and sensitivity calibrations */ +		iwlagn_chain_noise_reset(priv); +		priv->start_calib = 1; +	} + +	if (changes & BSS_CHANGED_IBSS) { +		ret = iwlagn_manage_ibss_station(priv, vif, +						 bss_conf->ibss_joined); +		if (ret) +			IWL_ERR(priv, "failed to %s IBSS station %pM\n", +				bss_conf->ibss_joined ? "add" : "remove", +				bss_conf->bssid); +	} + +	if (changes & BSS_CHANGED_BEACON && priv->beacon_ctx == ctx) { +		if (iwlagn_update_beacon(priv, vif)) +			IWL_ERR(priv, "Error updating beacon\n"); +	} + +	mutex_unlock(&priv->mutex); +} + +void iwlagn_post_scan(struct iwl_priv *priv) +{ +	struct iwl_rxon_context *ctx; + +	/* +	 * We do not commit power settings while scan is pending, +	 * do it now if the settings changed. +	 */ +	iwl_power_set_mode(priv, &priv->power_data.sleep_cmd_next, false); +	iwl_set_tx_power(priv, priv->tx_power_next, false); + +	/* +	 * Since setting the RXON may have been deferred while +	 * performing the scan, fire one off if needed +	 */ +	for_each_context(priv, ctx) +		if (memcmp(&ctx->staging, &ctx->active, sizeof(ctx->staging))) +			iwlagn_commit_rxon(priv, ctx); + +	iwlagn_set_pan_params(priv); +} diff --git a/drivers/net/wireless/iwlwifi/dvm/scan.c b/drivers/net/wireless/iwlwifi/dvm/scan.c new file mode 100644 index 00000000000..43bef901e8f --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/scan.c @@ -0,0 +1,1084 @@ +/****************************************************************************** + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + *****************************************************************************/ +#include <linux/slab.h> +#include <linux/types.h> +#include <linux/etherdevice.h> +#include <net/mac80211.h> + +#include "dev.h" +#include "agn.h" + +/* For active scan, listen ACTIVE_DWELL_TIME (msec) on each channel after + * sending probe req.  This should be set long enough to hear probe responses + * from more than one AP.  */ +#define IWL_ACTIVE_DWELL_TIME_24    (30)       /* all times in msec */ +#define IWL_ACTIVE_DWELL_TIME_52    (20) + +#define IWL_ACTIVE_DWELL_FACTOR_24GHZ (3) +#define IWL_ACTIVE_DWELL_FACTOR_52GHZ (2) + +/* For passive scan, listen PASSIVE_DWELL_TIME (msec) on each channel. + * Must be set longer than active dwell time. + * For the most reliable scan, set > AP beacon interval (typically 100msec). */ +#define IWL_PASSIVE_DWELL_TIME_24   (20)       /* all times in msec */ +#define IWL_PASSIVE_DWELL_TIME_52   (10) +#define IWL_PASSIVE_DWELL_BASE      (100) +#define IWL_CHANNEL_TUNE_TIME       5 +#define MAX_SCAN_CHANNEL	    50 + +/* For reset radio, need minimal dwell time only */ +#define IWL_RADIO_RESET_DWELL_TIME	5 + +static int iwl_send_scan_abort(struct iwl_priv *priv) +{ +	int ret; +	struct iwl_host_cmd cmd = { +		.id = REPLY_SCAN_ABORT_CMD, +		.flags = CMD_WANT_SKB, +	}; +	__le32 *status; + +	/* Exit instantly with error when device is not ready +	 * to receive scan abort command or it does not perform +	 * hardware scan currently */ +	if (!test_bit(STATUS_READY, &priv->status) || +	    !test_bit(STATUS_SCAN_HW, &priv->status) || +	    test_bit(STATUS_FW_ERROR, &priv->status)) +		return -EIO; + +	ret = iwl_dvm_send_cmd(priv, &cmd); +	if (ret) +		return ret; + +	status = (void *)cmd.resp_pkt->data; +	if (*status != CAN_ABORT_STATUS) { +		/* The scan abort will return 1 for success or +		 * 2 for "failure".  A failure condition can be +		 * due to simply not being in an active scan which +		 * can occur if we send the scan abort before we +		 * the microcode has notified us that a scan is +		 * completed. */ +		IWL_DEBUG_SCAN(priv, "SCAN_ABORT ret %d.\n", +			       le32_to_cpu(*status)); +		ret = -EIO; +	} + +	iwl_free_resp(&cmd); +	return ret; +} + +static void iwl_complete_scan(struct iwl_priv *priv, bool aborted) +{ +	/* check if scan was requested from mac80211 */ +	if (priv->scan_request) { +		IWL_DEBUG_SCAN(priv, "Complete scan in mac80211\n"); +		ieee80211_scan_completed(priv->hw, aborted); +	} + +	priv->scan_type = IWL_SCAN_NORMAL; +	priv->scan_vif = NULL; +	priv->scan_request = NULL; +} + +static void iwl_process_scan_complete(struct iwl_priv *priv) +{ +	bool aborted; + +	lockdep_assert_held(&priv->mutex); + +	if (!test_and_clear_bit(STATUS_SCAN_COMPLETE, &priv->status)) +		return; + +	IWL_DEBUG_SCAN(priv, "Completed scan.\n"); + +	cancel_delayed_work(&priv->scan_check); + +	aborted = test_and_clear_bit(STATUS_SCAN_ABORTING, &priv->status); +	if (aborted) +		IWL_DEBUG_SCAN(priv, "Aborted scan completed.\n"); + +	if (!test_and_clear_bit(STATUS_SCANNING, &priv->status)) { +		IWL_DEBUG_SCAN(priv, "Scan already completed.\n"); +		goto out_settings; +	} + +	if (priv->scan_type != IWL_SCAN_NORMAL && !aborted) { +		int err; + +		/* Check if mac80211 requested scan during our internal scan */ +		if (priv->scan_request == NULL) +			goto out_complete; + +		/* If so request a new scan */ +		err = iwl_scan_initiate(priv, priv->scan_vif, IWL_SCAN_NORMAL, +					priv->scan_request->channels[0]->band); +		if (err) { +			IWL_DEBUG_SCAN(priv, +				"failed to initiate pending scan: %d\n", err); +			aborted = true; +			goto out_complete; +		} + +		return; +	} + +out_complete: +	iwl_complete_scan(priv, aborted); + +out_settings: +	/* Can we still talk to firmware ? */ +	if (!iwl_is_ready_rf(priv)) +		return; + +	iwlagn_post_scan(priv); +} + +void iwl_force_scan_end(struct iwl_priv *priv) +{ +	lockdep_assert_held(&priv->mutex); + +	if (!test_bit(STATUS_SCANNING, &priv->status)) { +		IWL_DEBUG_SCAN(priv, "Forcing scan end while not scanning\n"); +		return; +	} + +	IWL_DEBUG_SCAN(priv, "Forcing scan end\n"); +	clear_bit(STATUS_SCANNING, &priv->status); +	clear_bit(STATUS_SCAN_HW, &priv->status); +	clear_bit(STATUS_SCAN_ABORTING, &priv->status); +	clear_bit(STATUS_SCAN_COMPLETE, &priv->status); +	iwl_complete_scan(priv, true); +} + +static void iwl_do_scan_abort(struct iwl_priv *priv) +{ +	int ret; + +	lockdep_assert_held(&priv->mutex); + +	if (!test_bit(STATUS_SCANNING, &priv->status)) { +		IWL_DEBUG_SCAN(priv, "Not performing scan to abort\n"); +		return; +	} + +	if (test_and_set_bit(STATUS_SCAN_ABORTING, &priv->status)) { +		IWL_DEBUG_SCAN(priv, "Scan abort in progress\n"); +		return; +	} + +	ret = iwl_send_scan_abort(priv); +	if (ret) { +		IWL_DEBUG_SCAN(priv, "Send scan abort failed %d\n", ret); +		iwl_force_scan_end(priv); +	} else +		IWL_DEBUG_SCAN(priv, "Successfully send scan abort\n"); +} + +/** + * iwl_scan_cancel - Cancel any currently executing HW scan + */ +int iwl_scan_cancel(struct iwl_priv *priv) +{ +	IWL_DEBUG_SCAN(priv, "Queuing abort scan\n"); +	queue_work(priv->workqueue, &priv->abort_scan); +	return 0; +} + +/** + * iwl_scan_cancel_timeout - Cancel any currently executing HW scan + * @ms: amount of time to wait (in milliseconds) for scan to abort + * + */ +void iwl_scan_cancel_timeout(struct iwl_priv *priv, unsigned long ms) +{ +	unsigned long timeout = jiffies + msecs_to_jiffies(ms); + +	lockdep_assert_held(&priv->mutex); + +	IWL_DEBUG_SCAN(priv, "Scan cancel timeout\n"); + +	iwl_do_scan_abort(priv); + +	while (time_before_eq(jiffies, timeout)) { +		if (!test_bit(STATUS_SCAN_HW, &priv->status)) +			goto finished; +		msleep(20); +	} + +	return; + + finished: +	/* +	 * Now STATUS_SCAN_HW is clear. This means that the +	 * device finished, but the background work is going +	 * to execute at best as soon as we release the mutex. +	 * Since we need to be able to issue a new scan right +	 * after this function returns, run the complete here. +	 * The STATUS_SCAN_COMPLETE bit will then be cleared +	 * and prevent the background work from "completing" +	 * a possible new scan. +	 */ +	iwl_process_scan_complete(priv); +} + +/* Service response to REPLY_SCAN_CMD (0x80) */ +static int iwl_rx_reply_scan(struct iwl_priv *priv, +			      struct iwl_rx_cmd_buffer *rxb, +			      struct iwl_device_cmd *cmd) +{ +#ifdef CONFIG_IWLWIFI_DEBUG +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_scanreq_notification *notif = (void *)pkt->data; + +	IWL_DEBUG_SCAN(priv, "Scan request status = 0x%x\n", notif->status); +#endif +	return 0; +} + +/* Service SCAN_START_NOTIFICATION (0x82) */ +static int iwl_rx_scan_start_notif(struct iwl_priv *priv, +				    struct iwl_rx_cmd_buffer *rxb, +				    struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_scanstart_notification *notif = (void *)pkt->data; + +	priv->scan_start_tsf = le32_to_cpu(notif->tsf_low); +	IWL_DEBUG_SCAN(priv, "Scan start: " +		       "%d [802.11%s] " +		       "(TSF: 0x%08X:%08X) - %d (beacon timer %u)\n", +		       notif->channel, +		       notif->band ? "bg" : "a", +		       le32_to_cpu(notif->tsf_high), +		       le32_to_cpu(notif->tsf_low), +		       notif->status, notif->beacon_timer); + +	return 0; +} + +/* Service SCAN_RESULTS_NOTIFICATION (0x83) */ +static int iwl_rx_scan_results_notif(struct iwl_priv *priv, +				      struct iwl_rx_cmd_buffer *rxb, +				      struct iwl_device_cmd *cmd) +{ +#ifdef CONFIG_IWLWIFI_DEBUG +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_scanresults_notification *notif = (void *)pkt->data; + +	IWL_DEBUG_SCAN(priv, "Scan ch.res: " +		       "%d [802.11%s] " +		       "probe status: %u:%u " +		       "(TSF: 0x%08X:%08X) - %d " +		       "elapsed=%lu usec\n", +		       notif->channel, +		       notif->band ? "bg" : "a", +		       notif->probe_status, notif->num_probe_not_sent, +		       le32_to_cpu(notif->tsf_high), +		       le32_to_cpu(notif->tsf_low), +		       le32_to_cpu(notif->statistics[0]), +		       le32_to_cpu(notif->tsf_low) - priv->scan_start_tsf); +#endif +	return 0; +} + +/* Service SCAN_COMPLETE_NOTIFICATION (0x84) */ +static int iwl_rx_scan_complete_notif(struct iwl_priv *priv, +				       struct iwl_rx_cmd_buffer *rxb, +				       struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_scancomplete_notification *scan_notif = (void *)pkt->data; + +	IWL_DEBUG_SCAN(priv, "Scan complete: %d channels (TSF 0x%08X:%08X) - %d\n", +		       scan_notif->scanned_channels, +		       scan_notif->tsf_low, +		       scan_notif->tsf_high, scan_notif->status); + +	IWL_DEBUG_SCAN(priv, "Scan on %sGHz took %dms\n", +		       (priv->scan_band == IEEE80211_BAND_2GHZ) ? "2.4" : "5.2", +		       jiffies_to_msecs(jiffies - priv->scan_start)); + +	/* +	 * When aborting, we run the scan completed background work inline +	 * and the background work must then do nothing. The SCAN_COMPLETE +	 * bit helps implement that logic and thus needs to be set before +	 * queueing the work. Also, since the scan abort waits for SCAN_HW +	 * to clear, we need to set SCAN_COMPLETE before clearing SCAN_HW +	 * to avoid a race there. +	 */ +	set_bit(STATUS_SCAN_COMPLETE, &priv->status); +	clear_bit(STATUS_SCAN_HW, &priv->status); +	queue_work(priv->workqueue, &priv->scan_completed); + +	if (priv->iw_mode != NL80211_IFTYPE_ADHOC && +	    iwl_advanced_bt_coexist(priv) && +	    priv->bt_status != scan_notif->bt_status) { +		if (scan_notif->bt_status) { +			/* BT on */ +			if (!priv->bt_ch_announce) +				priv->bt_traffic_load = +					IWL_BT_COEX_TRAFFIC_LOAD_HIGH; +			/* +			 * otherwise, no traffic load information provided +			 * no changes made +			 */ +		} else { +			/* BT off */ +			priv->bt_traffic_load = +				IWL_BT_COEX_TRAFFIC_LOAD_NONE; +		} +		priv->bt_status = scan_notif->bt_status; +		queue_work(priv->workqueue, +			   &priv->bt_traffic_change_work); +	} +	return 0; +} + +void iwl_setup_rx_scan_handlers(struct iwl_priv *priv) +{ +	/* scan handlers */ +	priv->rx_handlers[REPLY_SCAN_CMD] = iwl_rx_reply_scan; +	priv->rx_handlers[SCAN_START_NOTIFICATION] = iwl_rx_scan_start_notif; +	priv->rx_handlers[SCAN_RESULTS_NOTIFICATION] = +					iwl_rx_scan_results_notif; +	priv->rx_handlers[SCAN_COMPLETE_NOTIFICATION] = +					iwl_rx_scan_complete_notif; +} + +static u16 iwl_get_active_dwell_time(struct iwl_priv *priv, +				     enum ieee80211_band band, u8 n_probes) +{ +	if (band == IEEE80211_BAND_5GHZ) +		return IWL_ACTIVE_DWELL_TIME_52 + +			IWL_ACTIVE_DWELL_FACTOR_52GHZ * (n_probes + 1); +	else +		return IWL_ACTIVE_DWELL_TIME_24 + +			IWL_ACTIVE_DWELL_FACTOR_24GHZ * (n_probes + 1); +} + +static u16 iwl_limit_dwell(struct iwl_priv *priv, u16 dwell_time) +{ +	struct iwl_rxon_context *ctx; +	int limits[NUM_IWL_RXON_CTX] = {}; +	int n_active = 0; +	u16 limit; + +	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2); + +	/* +	 * If we're associated, we clamp the dwell time 98% +	 * of the beacon interval (minus 2 * channel tune time) +	 * If both contexts are active, we have to restrict to +	 * 1/2 of the minimum of them, because they might be in +	 * lock-step with the time inbetween only half of what +	 * time we'd have in each of them. +	 */ +	for_each_context(priv, ctx) { +		switch (ctx->staging.dev_type) { +		case RXON_DEV_TYPE_P2P: +			/* no timing constraints */ +			continue; +		case RXON_DEV_TYPE_ESS: +		default: +			/* timing constraints if associated */ +			if (!iwl_is_associated_ctx(ctx)) +				continue; +			break; +		case RXON_DEV_TYPE_CP: +		case RXON_DEV_TYPE_2STA: +			/* +			 * These seem to always have timers for TBTT +			 * active in uCode even when not associated yet. +			 */ +			break; +		} + +		limits[n_active++] = ctx->beacon_int ?: IWL_PASSIVE_DWELL_BASE; +	} + +	switch (n_active) { +	case 0: +		return dwell_time; +	case 2: +		limit = (limits[1] * 98) / 100 - IWL_CHANNEL_TUNE_TIME * 2; +		limit /= 2; +		dwell_time = min(limit, dwell_time); +		/* fall through to limit further */ +	case 1: +		limit = (limits[0] * 98) / 100 - IWL_CHANNEL_TUNE_TIME * 2; +		limit /= n_active; +		return min(limit, dwell_time); +	default: +		WARN_ON_ONCE(1); +		return dwell_time; +	} +} + +static u16 iwl_get_passive_dwell_time(struct iwl_priv *priv, +				      enum ieee80211_band band) +{ +	u16 passive = (band == IEEE80211_BAND_2GHZ) ? +	    IWL_PASSIVE_DWELL_BASE + IWL_PASSIVE_DWELL_TIME_24 : +	    IWL_PASSIVE_DWELL_BASE + IWL_PASSIVE_DWELL_TIME_52; + +	return iwl_limit_dwell(priv, passive); +} + +/* Return valid, unused, channel for a passive scan to reset the RF */ +static u8 iwl_get_single_channel_number(struct iwl_priv *priv, +					enum ieee80211_band band) +{ +	struct ieee80211_supported_band *sband = priv->hw->wiphy->bands[band]; +	struct iwl_rxon_context *ctx; +	int i; + +	for (i = 0; i < sband->n_channels; i++) { +		bool busy = false; + +		for_each_context(priv, ctx) { +			busy = sband->channels[i].hw_value == +				le16_to_cpu(ctx->staging.channel); +			if (busy) +				break; +		} + +		if (busy) +			continue; + +		if (!(sband->channels[i].flags & IEEE80211_CHAN_DISABLED)) +			return sband->channels[i].hw_value; +	} + +	return 0; +} + +static int iwl_get_channel_for_reset_scan(struct iwl_priv *priv, +					  struct ieee80211_vif *vif, +					  enum ieee80211_band band, +					  struct iwl_scan_channel *scan_ch) +{ +	const struct ieee80211_supported_band *sband; +	u16 channel; + +	sband = iwl_get_hw_mode(priv, band); +	if (!sband) { +		IWL_ERR(priv, "invalid band\n"); +		return 0; +	} + +	channel = iwl_get_single_channel_number(priv, band); +	if (channel) { +		scan_ch->channel = cpu_to_le16(channel); +		scan_ch->type = SCAN_CHANNEL_TYPE_PASSIVE; +		scan_ch->active_dwell = +			cpu_to_le16(IWL_RADIO_RESET_DWELL_TIME); +		scan_ch->passive_dwell = +			cpu_to_le16(IWL_RADIO_RESET_DWELL_TIME); +		/* Set txpower levels to defaults */ +		scan_ch->dsp_atten = 110; +		if (band == IEEE80211_BAND_5GHZ) +			scan_ch->tx_gain = ((1 << 5) | (3 << 3)) | 3; +		else +			scan_ch->tx_gain = ((1 << 5) | (5 << 3)); +		return 1; +	} + +	IWL_ERR(priv, "no valid channel found\n"); +	return 0; +} + +static int iwl_get_channels_for_scan(struct iwl_priv *priv, +				     struct ieee80211_vif *vif, +				     enum ieee80211_band band, +				     u8 is_active, u8 n_probes, +				     struct iwl_scan_channel *scan_ch) +{ +	struct ieee80211_channel *chan; +	const struct ieee80211_supported_band *sband; +	u16 passive_dwell = 0; +	u16 active_dwell = 0; +	int added, i; +	u16 channel; + +	sband = iwl_get_hw_mode(priv, band); +	if (!sband) +		return 0; + +	active_dwell = iwl_get_active_dwell_time(priv, band, n_probes); +	passive_dwell = iwl_get_passive_dwell_time(priv, band); + +	if (passive_dwell <= active_dwell) +		passive_dwell = active_dwell + 1; + +	for (i = 0, added = 0; i < priv->scan_request->n_channels; i++) { +		chan = priv->scan_request->channels[i]; + +		if (chan->band != band) +			continue; + +		channel = chan->hw_value; +		scan_ch->channel = cpu_to_le16(channel); + +		if (!is_active || (chan->flags & IEEE80211_CHAN_NO_IR)) +			scan_ch->type = SCAN_CHANNEL_TYPE_PASSIVE; +		else +			scan_ch->type = SCAN_CHANNEL_TYPE_ACTIVE; + +		if (n_probes) +			scan_ch->type |= IWL_SCAN_PROBE_MASK(n_probes); + +		scan_ch->active_dwell = cpu_to_le16(active_dwell); +		scan_ch->passive_dwell = cpu_to_le16(passive_dwell); + +		/* Set txpower levels to defaults */ +		scan_ch->dsp_atten = 110; + +		/* NOTE: if we were doing 6Mb OFDM for scans we'd use +		 * power level: +		 * scan_ch->tx_gain = ((1 << 5) | (2 << 3)) | 3; +		 */ +		if (band == IEEE80211_BAND_5GHZ) +			scan_ch->tx_gain = ((1 << 5) | (3 << 3)) | 3; +		else +			scan_ch->tx_gain = ((1 << 5) | (5 << 3)); + +		IWL_DEBUG_SCAN(priv, "Scanning ch=%d prob=0x%X [%s %d]\n", +			       channel, le32_to_cpu(scan_ch->type), +			       (scan_ch->type & SCAN_CHANNEL_TYPE_ACTIVE) ? +				"ACTIVE" : "PASSIVE", +			       (scan_ch->type & SCAN_CHANNEL_TYPE_ACTIVE) ? +			       active_dwell : passive_dwell); + +		scan_ch++; +		added++; +	} + +	IWL_DEBUG_SCAN(priv, "total channels to scan %d\n", added); +	return added; +} + +/** + * iwl_fill_probe_req - fill in all required fields and IE for probe request + */ + +static u16 iwl_fill_probe_req(struct ieee80211_mgmt *frame, const u8 *ta, +			      const u8 *ies, int ie_len, const u8 *ssid, +			      u8 ssid_len, int left) +{ +	int len = 0; +	u8 *pos = NULL; + +	/* Make sure there is enough space for the probe request, +	 * two mandatory IEs and the data */ +	left -= 24; +	if (left < 0) +		return 0; + +	frame->frame_control = cpu_to_le16(IEEE80211_STYPE_PROBE_REQ); +	eth_broadcast_addr(frame->da); +	memcpy(frame->sa, ta, ETH_ALEN); +	eth_broadcast_addr(frame->bssid); +	frame->seq_ctrl = 0; + +	len += 24; + +	/* ...next IE... */ +	pos = &frame->u.probe_req.variable[0]; + +	/* fill in our SSID IE */ +	left -= ssid_len + 2; +	if (left < 0) +		return 0; +	*pos++ = WLAN_EID_SSID; +	*pos++ = ssid_len; +	if (ssid && ssid_len) { +		memcpy(pos, ssid, ssid_len); +		pos += ssid_len; +	} + +	len += ssid_len + 2; + +	if (WARN_ON(left < ie_len)) +		return len; + +	if (ies && ie_len) { +		memcpy(pos, ies, ie_len); +		len += ie_len; +	} + +	return (u16)len; +} + +static int iwlagn_request_scan(struct iwl_priv *priv, struct ieee80211_vif *vif) +{ +	struct iwl_host_cmd cmd = { +		.id = REPLY_SCAN_CMD, +		.len = { sizeof(struct iwl_scan_cmd), }, +	}; +	struct iwl_scan_cmd *scan; +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	u32 rate_flags = 0; +	u16 cmd_len = 0; +	u16 rx_chain = 0; +	enum ieee80211_band band; +	u8 n_probes = 0; +	u8 rx_ant = priv->nvm_data->valid_rx_ant; +	u8 rate; +	bool is_active = false; +	int  chan_mod; +	u8 active_chains; +	u8 scan_tx_antennas = priv->nvm_data->valid_tx_ant; +	int ret; +	int scan_cmd_size = sizeof(struct iwl_scan_cmd) + +			    MAX_SCAN_CHANNEL * sizeof(struct iwl_scan_channel) + +			    priv->fw->ucode_capa.max_probe_length; +	const u8 *ssid = NULL; +	u8 ssid_len = 0; + +	if (WARN_ON(priv->scan_type == IWL_SCAN_NORMAL && +		    (!priv->scan_request || +		     priv->scan_request->n_channels > MAX_SCAN_CHANNEL))) +		return -EINVAL; + +	lockdep_assert_held(&priv->mutex); + +	if (vif) +		ctx = iwl_rxon_ctx_from_vif(vif); + +	if (!priv->scan_cmd) { +		priv->scan_cmd = kmalloc(scan_cmd_size, GFP_KERNEL); +		if (!priv->scan_cmd) { +			IWL_DEBUG_SCAN(priv, +				       "fail to allocate memory for scan\n"); +			return -ENOMEM; +		} +	} +	scan = priv->scan_cmd; +	memset(scan, 0, scan_cmd_size); + +	scan->quiet_plcp_th = IWL_PLCP_QUIET_THRESH; +	scan->quiet_time = IWL_ACTIVE_QUIET_TIME; + +	if (iwl_is_any_associated(priv)) { +		u16 interval = 0; +		u32 extra; +		u32 suspend_time = 100; +		u32 scan_suspend_time = 100; + +		IWL_DEBUG_INFO(priv, "Scanning while associated...\n"); +		switch (priv->scan_type) { +		case IWL_SCAN_RADIO_RESET: +			interval = 0; +			break; +		case IWL_SCAN_NORMAL: +			interval = vif->bss_conf.beacon_int; +			break; +		} + +		scan->suspend_time = 0; +		scan->max_out_time = cpu_to_le32(200 * 1024); +		if (!interval) +			interval = suspend_time; + +		extra = (suspend_time / interval) << 22; +		scan_suspend_time = (extra | +		    ((suspend_time % interval) * 1024)); +		scan->suspend_time = cpu_to_le32(scan_suspend_time); +		IWL_DEBUG_SCAN(priv, "suspend_time 0x%X beacon interval %d\n", +			       scan_suspend_time, interval); +	} + +	switch (priv->scan_type) { +	case IWL_SCAN_RADIO_RESET: +		IWL_DEBUG_SCAN(priv, "Start internal passive scan.\n"); +		/* +		 * Override quiet time as firmware checks that active +		 * dwell is >= quiet; since we use passive scan it'll +		 * not actually be used. +		 */ +		scan->quiet_time = cpu_to_le16(IWL_RADIO_RESET_DWELL_TIME); +		break; +	case IWL_SCAN_NORMAL: +		if (priv->scan_request->n_ssids) { +			int i, p = 0; +			IWL_DEBUG_SCAN(priv, "Kicking off active scan\n"); +			/* +			 * The highest priority SSID is inserted to the +			 * probe request template. +			 */ +			ssid_len = priv->scan_request->ssids[0].ssid_len; +			ssid = priv->scan_request->ssids[0].ssid; + +			/* +			 * Invert the order of ssids, the firmware will invert +			 * it back. +			 */ +			for (i = priv->scan_request->n_ssids - 1; i >= 1; i--) { +				scan->direct_scan[p].id = WLAN_EID_SSID; +				scan->direct_scan[p].len = +					priv->scan_request->ssids[i].ssid_len; +				memcpy(scan->direct_scan[p].ssid, +				       priv->scan_request->ssids[i].ssid, +				       priv->scan_request->ssids[i].ssid_len); +				n_probes++; +				p++; +			} +			is_active = true; +		} else +			IWL_DEBUG_SCAN(priv, "Start passive scan.\n"); +		break; +	} + +	scan->tx_cmd.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK; +	scan->tx_cmd.sta_id = ctx->bcast_sta_id; +	scan->tx_cmd.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE; + +	switch (priv->scan_band) { +	case IEEE80211_BAND_2GHZ: +		scan->flags = RXON_FLG_BAND_24G_MSK | RXON_FLG_AUTO_DETECT_MSK; +		chan_mod = le32_to_cpu( +			priv->contexts[IWL_RXON_CTX_BSS].active.flags & +						RXON_FLG_CHANNEL_MODE_MSK) +				       >> RXON_FLG_CHANNEL_MODE_POS; +		if ((priv->scan_request && priv->scan_request->no_cck) || +		    chan_mod == CHANNEL_MODE_PURE_40) { +			rate = IWL_RATE_6M_PLCP; +		} else { +			rate = IWL_RATE_1M_PLCP; +			rate_flags = RATE_MCS_CCK_MSK; +		} +		/* +		 * Internal scans are passive, so we can indiscriminately set +		 * the BT ignore flag on 2.4 GHz since it applies to TX only. +		 */ +		if (priv->lib->bt_params && +		    priv->lib->bt_params->advanced_bt_coexist) +			scan->tx_cmd.tx_flags |= TX_CMD_FLG_IGNORE_BT; +		break; +	case IEEE80211_BAND_5GHZ: +		rate = IWL_RATE_6M_PLCP; +		break; +	default: +		IWL_WARN(priv, "Invalid scan band\n"); +		return -EIO; +	} + +	/* +	 * If active scanning is requested but a certain channel is +	 * marked passive, we can do active scanning if we detect +	 * transmissions. +	 * +	 * There is an issue with some firmware versions that triggers +	 * a sysassert on a "good CRC threshold" of zero (== disabled), +	 * on a radar channel even though this means that we should NOT +	 * send probes. +	 * +	 * The "good CRC threshold" is the number of frames that we +	 * need to receive during our dwell time on a channel before +	 * sending out probes -- setting this to a huge value will +	 * mean we never reach it, but at the same time work around +	 * the aforementioned issue. Thus use IWL_GOOD_CRC_TH_NEVER +	 * here instead of IWL_GOOD_CRC_TH_DISABLED. +	 * +	 * This was fixed in later versions along with some other +	 * scan changes, and the threshold behaves as a flag in those +	 * versions. +	 */ +	if (priv->new_scan_threshold_behaviour) +		scan->good_CRC_th = is_active ? IWL_GOOD_CRC_TH_DEFAULT : +						IWL_GOOD_CRC_TH_DISABLED; +	else +		scan->good_CRC_th = is_active ? IWL_GOOD_CRC_TH_DEFAULT : +						IWL_GOOD_CRC_TH_NEVER; + +	band = priv->scan_band; + +	if (band == IEEE80211_BAND_2GHZ && +	    priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist) { +		/* transmit 2.4 GHz probes only on first antenna */ +		scan_tx_antennas = first_antenna(scan_tx_antennas); +	} + +	priv->scan_tx_ant[band] = iwl_toggle_tx_ant(priv, +						    priv->scan_tx_ant[band], +						    scan_tx_antennas); +	rate_flags |= iwl_ant_idx_to_flags(priv->scan_tx_ant[band]); +	scan->tx_cmd.rate_n_flags = iwl_hw_set_rate_n_flags(rate, rate_flags); + +	/* +	 * In power save mode while associated use one chain, +	 * otherwise use all chains +	 */ +	if (test_bit(STATUS_POWER_PMI, &priv->status) && +	    !(priv->hw->conf.flags & IEEE80211_CONF_IDLE)) { +		/* rx_ant has been set to all valid chains previously */ +		active_chains = rx_ant & +				((u8)(priv->chain_noise_data.active_chains)); +		if (!active_chains) +			active_chains = rx_ant; + +		IWL_DEBUG_SCAN(priv, "chain_noise_data.active_chains: %u\n", +				priv->chain_noise_data.active_chains); + +		rx_ant = first_antenna(active_chains); +	} +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist && +	    priv->bt_full_concurrent) { +		/* operated as 1x1 in full concurrency mode */ +		rx_ant = first_antenna(rx_ant); +	} + +	/* MIMO is not used here, but value is required */ +	rx_chain |= +		priv->nvm_data->valid_rx_ant << RXON_RX_CHAIN_VALID_POS; +	rx_chain |= rx_ant << RXON_RX_CHAIN_FORCE_MIMO_SEL_POS; +	rx_chain |= rx_ant << RXON_RX_CHAIN_FORCE_SEL_POS; +	rx_chain |= 0x1 << RXON_RX_CHAIN_DRIVER_FORCE_POS; +	scan->rx_chain = cpu_to_le16(rx_chain); +	switch (priv->scan_type) { +	case IWL_SCAN_NORMAL: +		cmd_len = iwl_fill_probe_req( +					(struct ieee80211_mgmt *)scan->data, +					vif->addr, +					priv->scan_request->ie, +					priv->scan_request->ie_len, +					ssid, ssid_len, +					scan_cmd_size - sizeof(*scan)); +		break; +	case IWL_SCAN_RADIO_RESET: +		/* use bcast addr, will not be transmitted but must be valid */ +		cmd_len = iwl_fill_probe_req( +					(struct ieee80211_mgmt *)scan->data, +					iwl_bcast_addr, NULL, 0, +					NULL, 0, +					scan_cmd_size - sizeof(*scan)); +		break; +	default: +		BUG(); +	} +	scan->tx_cmd.len = cpu_to_le16(cmd_len); + +	scan->filter_flags |= (RXON_FILTER_ACCEPT_GRP_MSK | +			       RXON_FILTER_BCON_AWARE_MSK); + +	switch (priv->scan_type) { +	case IWL_SCAN_RADIO_RESET: +		scan->channel_count = +			iwl_get_channel_for_reset_scan(priv, vif, band, +				(void *)&scan->data[cmd_len]); +		break; +	case IWL_SCAN_NORMAL: +		scan->channel_count = +			iwl_get_channels_for_scan(priv, vif, band, +				is_active, n_probes, +				(void *)&scan->data[cmd_len]); +		break; +	} + +	if (scan->channel_count == 0) { +		IWL_DEBUG_SCAN(priv, "channel count %d\n", scan->channel_count); +		return -EIO; +	} + +	cmd.len[0] += le16_to_cpu(scan->tx_cmd.len) + +	    scan->channel_count * sizeof(struct iwl_scan_channel); +	cmd.data[0] = scan; +	cmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY; +	scan->len = cpu_to_le16(cmd.len[0]); + +	/* set scan bit here for PAN params */ +	set_bit(STATUS_SCAN_HW, &priv->status); + +	ret = iwlagn_set_pan_params(priv); +	if (ret) { +		clear_bit(STATUS_SCAN_HW, &priv->status); +		return ret; +	} + +	ret = iwl_dvm_send_cmd(priv, &cmd); +	if (ret) { +		clear_bit(STATUS_SCAN_HW, &priv->status); +		iwlagn_set_pan_params(priv); +	} + +	return ret; +} + +void iwl_init_scan_params(struct iwl_priv *priv) +{ +	u8 ant_idx = fls(priv->nvm_data->valid_tx_ant) - 1; +	if (!priv->scan_tx_ant[IEEE80211_BAND_5GHZ]) +		priv->scan_tx_ant[IEEE80211_BAND_5GHZ] = ant_idx; +	if (!priv->scan_tx_ant[IEEE80211_BAND_2GHZ]) +		priv->scan_tx_ant[IEEE80211_BAND_2GHZ] = ant_idx; +} + +int __must_check iwl_scan_initiate(struct iwl_priv *priv, +				   struct ieee80211_vif *vif, +				   enum iwl_scan_type scan_type, +				   enum ieee80211_band band) +{ +	int ret; + +	lockdep_assert_held(&priv->mutex); + +	cancel_delayed_work(&priv->scan_check); + +	if (!iwl_is_ready_rf(priv)) { +		IWL_WARN(priv, "Request scan called when driver not ready.\n"); +		return -EIO; +	} + +	if (test_bit(STATUS_SCAN_HW, &priv->status)) { +		IWL_DEBUG_SCAN(priv, +			"Multiple concurrent scan requests in parallel.\n"); +		return -EBUSY; +	} + +	if (test_bit(STATUS_SCAN_ABORTING, &priv->status)) { +		IWL_DEBUG_SCAN(priv, "Scan request while abort pending.\n"); +		return -EBUSY; +	} + +	IWL_DEBUG_SCAN(priv, "Starting %sscan...\n", +			scan_type == IWL_SCAN_NORMAL ? "" : +			"internal short "); + +	set_bit(STATUS_SCANNING, &priv->status); +	priv->scan_type = scan_type; +	priv->scan_start = jiffies; +	priv->scan_band = band; + +	ret = iwlagn_request_scan(priv, vif); +	if (ret) { +		clear_bit(STATUS_SCANNING, &priv->status); +		priv->scan_type = IWL_SCAN_NORMAL; +		return ret; +	} + +	queue_delayed_work(priv->workqueue, &priv->scan_check, +			   IWL_SCAN_CHECK_WATCHDOG); + +	return 0; +} + + +/* + * internal short scan, this function should only been called while associated. + * It will reset and tune the radio to prevent possible RF related problem + */ +void iwl_internal_short_hw_scan(struct iwl_priv *priv) +{ +	queue_work(priv->workqueue, &priv->start_internal_scan); +} + +static void iwl_bg_start_internal_scan(struct work_struct *work) +{ +	struct iwl_priv *priv = +		container_of(work, struct iwl_priv, start_internal_scan); + +	IWL_DEBUG_SCAN(priv, "Start internal scan\n"); + +	mutex_lock(&priv->mutex); + +	if (priv->scan_type == IWL_SCAN_RADIO_RESET) { +		IWL_DEBUG_SCAN(priv, "Internal scan already in progress\n"); +		goto unlock; +	} + +	if (test_bit(STATUS_SCANNING, &priv->status)) { +		IWL_DEBUG_SCAN(priv, "Scan already in progress.\n"); +		goto unlock; +	} + +	if (iwl_scan_initiate(priv, NULL, IWL_SCAN_RADIO_RESET, priv->band)) +		IWL_DEBUG_SCAN(priv, "failed to start internal short scan\n"); + unlock: +	mutex_unlock(&priv->mutex); +} + +static void iwl_bg_scan_check(struct work_struct *data) +{ +	struct iwl_priv *priv = +	    container_of(data, struct iwl_priv, scan_check.work); + +	IWL_DEBUG_SCAN(priv, "Scan check work\n"); + +	/* Since we are here firmware does not finish scan and +	 * most likely is in bad shape, so we don't bother to +	 * send abort command, just force scan complete to mac80211 */ +	mutex_lock(&priv->mutex); +	iwl_force_scan_end(priv); +	mutex_unlock(&priv->mutex); +} + +static void iwl_bg_abort_scan(struct work_struct *work) +{ +	struct iwl_priv *priv = container_of(work, struct iwl_priv, abort_scan); + +	IWL_DEBUG_SCAN(priv, "Abort scan work\n"); + +	/* We keep scan_check work queued in case when firmware will not +	 * report back scan completed notification */ +	mutex_lock(&priv->mutex); +	iwl_scan_cancel_timeout(priv, 200); +	mutex_unlock(&priv->mutex); +} + +static void iwl_bg_scan_completed(struct work_struct *work) +{ +	struct iwl_priv *priv = +		container_of(work, struct iwl_priv, scan_completed); + +	mutex_lock(&priv->mutex); +	iwl_process_scan_complete(priv); +	mutex_unlock(&priv->mutex); +} + +void iwl_setup_scan_deferred_work(struct iwl_priv *priv) +{ +	INIT_WORK(&priv->scan_completed, iwl_bg_scan_completed); +	INIT_WORK(&priv->abort_scan, iwl_bg_abort_scan); +	INIT_WORK(&priv->start_internal_scan, iwl_bg_start_internal_scan); +	INIT_DELAYED_WORK(&priv->scan_check, iwl_bg_scan_check); +} + +void iwl_cancel_scan_deferred_work(struct iwl_priv *priv) +{ +	cancel_work_sync(&priv->start_internal_scan); +	cancel_work_sync(&priv->abort_scan); +	cancel_work_sync(&priv->scan_completed); + +	if (cancel_delayed_work_sync(&priv->scan_check)) { +		mutex_lock(&priv->mutex); +		iwl_force_scan_end(priv); +		mutex_unlock(&priv->mutex); +	} +} diff --git a/drivers/net/wireless/iwlwifi/dvm/sta.c b/drivers/net/wireless/iwlwifi/dvm/sta.c new file mode 100644 index 00000000000..6ec86adbe4a --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/sta.c @@ -0,0 +1,1475 @@ +/****************************************************************************** + * + * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portions of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ +#include <linux/etherdevice.h> +#include <net/mac80211.h> +#include "iwl-trans.h" +#include "dev.h" +#include "agn.h" + +const u8 iwl_bcast_addr[ETH_ALEN] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }; + +static int iwl_sta_ucode_activate(struct iwl_priv *priv, u8 sta_id) +{ +	lockdep_assert_held(&priv->sta_lock); + +	if (sta_id >= IWLAGN_STATION_COUNT) { +		IWL_ERR(priv, "invalid sta_id %u\n", sta_id); +		return -EINVAL; +	} +	if (!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE)) +		IWL_ERR(priv, "ACTIVATE a non DRIVER active station id %u " +			"addr %pM\n", +			sta_id, priv->stations[sta_id].sta.sta.addr); + +	if (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE) { +		IWL_DEBUG_ASSOC(priv, +				"STA id %u addr %pM already present in uCode " +				"(according to driver)\n", +				sta_id, priv->stations[sta_id].sta.sta.addr); +	} else { +		priv->stations[sta_id].used |= IWL_STA_UCODE_ACTIVE; +		IWL_DEBUG_ASSOC(priv, "Added STA id %u addr %pM to uCode\n", +				sta_id, priv->stations[sta_id].sta.sta.addr); +	} +	return 0; +} + +static int iwl_process_add_sta_resp(struct iwl_priv *priv, +				    struct iwl_addsta_cmd *addsta, +				    struct iwl_rx_packet *pkt) +{ +	struct iwl_add_sta_resp *add_sta_resp = (void *)pkt->data; +	u8 sta_id = addsta->sta.sta_id; +	int ret = -EIO; + +	if (pkt->hdr.flags & IWL_CMD_FAILED_MSK) { +		IWL_ERR(priv, "Bad return from REPLY_ADD_STA (0x%08X)\n", +			pkt->hdr.flags); +		return ret; +	} + +	IWL_DEBUG_INFO(priv, "Processing response for adding station %u\n", +		       sta_id); + +	spin_lock_bh(&priv->sta_lock); + +	switch (add_sta_resp->status) { +	case ADD_STA_SUCCESS_MSK: +		IWL_DEBUG_INFO(priv, "REPLY_ADD_STA PASSED\n"); +		ret = iwl_sta_ucode_activate(priv, sta_id); +		break; +	case ADD_STA_NO_ROOM_IN_TABLE: +		IWL_ERR(priv, "Adding station %d failed, no room in table.\n", +			sta_id); +		break; +	case ADD_STA_NO_BLOCK_ACK_RESOURCE: +		IWL_ERR(priv, "Adding station %d failed, no block ack " +			"resource.\n", sta_id); +		break; +	case ADD_STA_MODIFY_NON_EXIST_STA: +		IWL_ERR(priv, "Attempting to modify non-existing station %d\n", +			sta_id); +		break; +	default: +		IWL_DEBUG_ASSOC(priv, "Received REPLY_ADD_STA:(0x%08X)\n", +				add_sta_resp->status); +		break; +	} + +	IWL_DEBUG_INFO(priv, "%s station id %u addr %pM\n", +		       priv->stations[sta_id].sta.mode == +		       STA_CONTROL_MODIFY_MSK ?  "Modified" : "Added", +		       sta_id, priv->stations[sta_id].sta.sta.addr); + +	/* +	 * XXX: The MAC address in the command buffer is often changed from +	 * the original sent to the device. That is, the MAC address +	 * written to the command buffer often is not the same MAC address +	 * read from the command buffer when the command returns. This +	 * issue has not yet been resolved and this debugging is left to +	 * observe the problem. +	 */ +	IWL_DEBUG_INFO(priv, "%s station according to cmd buffer %pM\n", +		       priv->stations[sta_id].sta.mode == +		       STA_CONTROL_MODIFY_MSK ? "Modified" : "Added", +		       addsta->sta.addr); +	spin_unlock_bh(&priv->sta_lock); + +	return ret; +} + +int iwl_add_sta_callback(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb, +			       struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); + +	if (!cmd) +		return 0; + +	return iwl_process_add_sta_resp(priv, (void *)cmd->payload, pkt); +} + +int iwl_send_add_sta(struct iwl_priv *priv, +		     struct iwl_addsta_cmd *sta, u8 flags) +{ +	int ret = 0; +	struct iwl_host_cmd cmd = { +		.id = REPLY_ADD_STA, +		.flags = flags, +		.data = { sta, }, +		.len = { sizeof(*sta), }, +	}; +	u8 sta_id __maybe_unused = sta->sta.sta_id; + +	IWL_DEBUG_INFO(priv, "Adding sta %u (%pM) %ssynchronously\n", +		       sta_id, sta->sta.addr, flags & CMD_ASYNC ?  "a" : ""); + +	if (!(flags & CMD_ASYNC)) { +		cmd.flags |= CMD_WANT_SKB; +		might_sleep(); +	} + +	ret = iwl_dvm_send_cmd(priv, &cmd); + +	if (ret || (flags & CMD_ASYNC)) +		return ret; +	/*else the command was successfully sent in SYNC mode, need to free +	 * the reply page */ + +	iwl_free_resp(&cmd); + +	if (cmd.handler_status) +		IWL_ERR(priv, "%s - error in the CMD response %d\n", __func__, +			cmd.handler_status); + +	return cmd.handler_status; +} + +bool iwl_is_ht40_tx_allowed(struct iwl_priv *priv, +			    struct iwl_rxon_context *ctx, +			    struct ieee80211_sta *sta) +{ +	if (!ctx->ht.enabled || !ctx->ht.is_40mhz) +		return false; + +#ifdef CONFIG_IWLWIFI_DEBUGFS +	if (priv->disable_ht40) +		return false; +#endif + +	/* special case for RXON */ +	if (!sta) +		return true; + +	return sta->bandwidth >= IEEE80211_STA_RX_BW_40; +} + +static void iwl_sta_calc_ht_flags(struct iwl_priv *priv, +				  struct ieee80211_sta *sta, +				  struct iwl_rxon_context *ctx, +				  __le32 *flags, __le32 *mask) +{ +	struct ieee80211_sta_ht_cap *sta_ht_inf = &sta->ht_cap; + +	*mask = STA_FLG_RTS_MIMO_PROT_MSK | +		STA_FLG_MIMO_DIS_MSK | +		STA_FLG_HT40_EN_MSK | +		STA_FLG_MAX_AGG_SIZE_MSK | +		STA_FLG_AGG_MPDU_DENSITY_MSK; +	*flags = 0; + +	if (!sta || !sta_ht_inf->ht_supported) +		return; + +	IWL_DEBUG_INFO(priv, "STA %pM SM PS mode: %s\n", +			sta->addr, +			(sta->smps_mode == IEEE80211_SMPS_STATIC) ? +			"static" : +			(sta->smps_mode == IEEE80211_SMPS_DYNAMIC) ? +			"dynamic" : "disabled"); + +	switch (sta->smps_mode) { +	case IEEE80211_SMPS_STATIC: +		*flags |= STA_FLG_MIMO_DIS_MSK; +		break; +	case IEEE80211_SMPS_DYNAMIC: +		*flags |= STA_FLG_RTS_MIMO_PROT_MSK; +		break; +	case IEEE80211_SMPS_OFF: +		break; +	default: +		IWL_WARN(priv, "Invalid MIMO PS mode %d\n", sta->smps_mode); +		break; +	} + +	*flags |= cpu_to_le32( +		(u32)sta_ht_inf->ampdu_factor << STA_FLG_MAX_AGG_SIZE_POS); + +	*flags |= cpu_to_le32( +		(u32)sta_ht_inf->ampdu_density << STA_FLG_AGG_MPDU_DENSITY_POS); + +	if (iwl_is_ht40_tx_allowed(priv, ctx, sta)) +		*flags |= STA_FLG_HT40_EN_MSK; +} + +int iwl_sta_update_ht(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +		      struct ieee80211_sta *sta) +{ +	u8 sta_id = iwl_sta_id(sta); +	__le32 flags, mask; +	struct iwl_addsta_cmd cmd; + +	if (WARN_ON_ONCE(sta_id == IWL_INVALID_STATION)) +		return -EINVAL; + +	iwl_sta_calc_ht_flags(priv, sta, ctx, &flags, &mask); + +	spin_lock_bh(&priv->sta_lock); +	priv->stations[sta_id].sta.station_flags &= ~mask; +	priv->stations[sta_id].sta.station_flags |= flags; +	spin_unlock_bh(&priv->sta_lock); + +	memset(&cmd, 0, sizeof(cmd)); +	cmd.mode = STA_CONTROL_MODIFY_MSK; +	cmd.station_flags_msk = mask; +	cmd.station_flags = flags; +	cmd.sta.sta_id = sta_id; + +	return iwl_send_add_sta(priv, &cmd, 0); +} + +static void iwl_set_ht_add_station(struct iwl_priv *priv, u8 index, +				   struct ieee80211_sta *sta, +				   struct iwl_rxon_context *ctx) +{ +	__le32 flags, mask; + +	iwl_sta_calc_ht_flags(priv, sta, ctx, &flags, &mask); + +	lockdep_assert_held(&priv->sta_lock); +	priv->stations[index].sta.station_flags &= ~mask; +	priv->stations[index].sta.station_flags |= flags; +} + +/** + * iwl_prep_station - Prepare station information for addition + * + * should be called with sta_lock held + */ +u8 iwl_prep_station(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +		    const u8 *addr, bool is_ap, struct ieee80211_sta *sta) +{ +	struct iwl_station_entry *station; +	int i; +	u8 sta_id = IWL_INVALID_STATION; + +	if (is_ap) +		sta_id = ctx->ap_sta_id; +	else if (is_broadcast_ether_addr(addr)) +		sta_id = ctx->bcast_sta_id; +	else +		for (i = IWL_STA_ID; i < IWLAGN_STATION_COUNT; i++) { +			if (ether_addr_equal(priv->stations[i].sta.sta.addr, +					     addr)) { +				sta_id = i; +				break; +			} + +			if (!priv->stations[i].used && +			    sta_id == IWL_INVALID_STATION) +				sta_id = i; +		} + +	/* +	 * These two conditions have the same outcome, but keep them +	 * separate +	 */ +	if (unlikely(sta_id == IWL_INVALID_STATION)) +		return sta_id; + +	/* +	 * uCode is not able to deal with multiple requests to add a +	 * station. Keep track if one is in progress so that we do not send +	 * another. +	 */ +	if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) { +		IWL_DEBUG_INFO(priv, "STA %d already in process of being " +			       "added.\n", sta_id); +		return sta_id; +	} + +	if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) && +	    (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE) && +	    ether_addr_equal(priv->stations[sta_id].sta.sta.addr, addr)) { +		IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not " +				"adding again.\n", sta_id, addr); +		return sta_id; +	} + +	station = &priv->stations[sta_id]; +	station->used = IWL_STA_DRIVER_ACTIVE; +	IWL_DEBUG_ASSOC(priv, "Add STA to driver ID %d: %pM\n", +			sta_id, addr); +	priv->num_stations++; + +	/* Set up the REPLY_ADD_STA command to send to device */ +	memset(&station->sta, 0, sizeof(struct iwl_addsta_cmd)); +	memcpy(station->sta.sta.addr, addr, ETH_ALEN); +	station->sta.mode = 0; +	station->sta.sta.sta_id = sta_id; +	station->sta.station_flags = ctx->station_flags; +	station->ctxid = ctx->ctxid; + +	if (sta) { +		struct iwl_station_priv *sta_priv; + +		sta_priv = (void *)sta->drv_priv; +		sta_priv->ctx = ctx; +	} + +	/* +	 * OK to call unconditionally, since local stations (IBSS BSSID +	 * STA and broadcast STA) pass in a NULL sta, and mac80211 +	 * doesn't allow HT IBSS. +	 */ +	iwl_set_ht_add_station(priv, sta_id, sta, ctx); + +	return sta_id; + +} + +#define STA_WAIT_TIMEOUT (HZ/2) + +/** + * iwl_add_station_common - + */ +int iwl_add_station_common(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +			   const u8 *addr, bool is_ap, +			   struct ieee80211_sta *sta, u8 *sta_id_r) +{ +	int ret = 0; +	u8 sta_id; +	struct iwl_addsta_cmd sta_cmd; + +	*sta_id_r = 0; +	spin_lock_bh(&priv->sta_lock); +	sta_id = iwl_prep_station(priv, ctx, addr, is_ap, sta); +	if (sta_id == IWL_INVALID_STATION) { +		IWL_ERR(priv, "Unable to prepare station %pM for addition\n", +			addr); +		spin_unlock_bh(&priv->sta_lock); +		return -EINVAL; +	} + +	/* +	 * uCode is not able to deal with multiple requests to add a +	 * station. Keep track if one is in progress so that we do not send +	 * another. +	 */ +	if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) { +		IWL_DEBUG_INFO(priv, "STA %d already in process of being " +			       "added.\n", sta_id); +		spin_unlock_bh(&priv->sta_lock); +		return -EEXIST; +	} + +	if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) && +	    (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) { +		IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not " +				"adding again.\n", sta_id, addr); +		spin_unlock_bh(&priv->sta_lock); +		return -EEXIST; +	} + +	priv->stations[sta_id].used |= IWL_STA_UCODE_INPROGRESS; +	memcpy(&sta_cmd, &priv->stations[sta_id].sta, +	       sizeof(struct iwl_addsta_cmd)); +	spin_unlock_bh(&priv->sta_lock); + +	/* Add station to device's station table */ +	ret = iwl_send_add_sta(priv, &sta_cmd, 0); +	if (ret) { +		spin_lock_bh(&priv->sta_lock); +		IWL_ERR(priv, "Adding station %pM failed.\n", +			priv->stations[sta_id].sta.sta.addr); +		priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE; +		priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS; +		spin_unlock_bh(&priv->sta_lock); +	} +	*sta_id_r = sta_id; +	return ret; +} + +/** + * iwl_sta_ucode_deactivate - deactivate ucode status for a station + */ +static void iwl_sta_ucode_deactivate(struct iwl_priv *priv, u8 sta_id) +{ +	lockdep_assert_held(&priv->sta_lock); + +	/* Ucode must be active and driver must be non active */ +	if ((priv->stations[sta_id].used & +	     (IWL_STA_UCODE_ACTIVE | IWL_STA_DRIVER_ACTIVE)) != +	      IWL_STA_UCODE_ACTIVE) +		IWL_ERR(priv, "removed non active STA %u\n", sta_id); + +	priv->stations[sta_id].used &= ~IWL_STA_UCODE_ACTIVE; + +	memset(&priv->stations[sta_id], 0, sizeof(struct iwl_station_entry)); +	IWL_DEBUG_ASSOC(priv, "Removed STA %u\n", sta_id); +} + +static int iwl_send_remove_station(struct iwl_priv *priv, +				   const u8 *addr, int sta_id, +				   bool temporary) +{ +	struct iwl_rx_packet *pkt; +	int ret; +	struct iwl_rem_sta_cmd rm_sta_cmd; + +	struct iwl_host_cmd cmd = { +		.id = REPLY_REMOVE_STA, +		.len = { sizeof(struct iwl_rem_sta_cmd), }, +		.data = { &rm_sta_cmd, }, +	}; + +	memset(&rm_sta_cmd, 0, sizeof(rm_sta_cmd)); +	rm_sta_cmd.num_sta = 1; +	memcpy(&rm_sta_cmd.addr, addr, ETH_ALEN); + +	cmd.flags |= CMD_WANT_SKB; + +	ret = iwl_dvm_send_cmd(priv, &cmd); + +	if (ret) +		return ret; + +	pkt = cmd.resp_pkt; +	if (pkt->hdr.flags & IWL_CMD_FAILED_MSK) { +		IWL_ERR(priv, "Bad return from REPLY_REMOVE_STA (0x%08X)\n", +			  pkt->hdr.flags); +		ret = -EIO; +	} + +	if (!ret) { +		struct iwl_rem_sta_resp *rem_sta_resp = (void *)pkt->data; +		switch (rem_sta_resp->status) { +		case REM_STA_SUCCESS_MSK: +			if (!temporary) { +				spin_lock_bh(&priv->sta_lock); +				iwl_sta_ucode_deactivate(priv, sta_id); +				spin_unlock_bh(&priv->sta_lock); +			} +			IWL_DEBUG_ASSOC(priv, "REPLY_REMOVE_STA PASSED\n"); +			break; +		default: +			ret = -EIO; +			IWL_ERR(priv, "REPLY_REMOVE_STA failed\n"); +			break; +		} +	} +	iwl_free_resp(&cmd); + +	return ret; +} + +/** + * iwl_remove_station - Remove driver's knowledge of station. + */ +int iwl_remove_station(struct iwl_priv *priv, const u8 sta_id, +		       const u8 *addr) +{ +	u8 tid; + +	if (!iwl_is_ready(priv)) { +		IWL_DEBUG_INFO(priv, +			"Unable to remove station %pM, device not ready.\n", +			addr); +		/* +		 * It is typical for stations to be removed when we are +		 * going down. Return success since device will be down +		 * soon anyway +		 */ +		return 0; +	} + +	IWL_DEBUG_ASSOC(priv, "Removing STA from driver:%d  %pM\n", +			sta_id, addr); + +	if (WARN_ON(sta_id == IWL_INVALID_STATION)) +		return -EINVAL; + +	spin_lock_bh(&priv->sta_lock); + +	if (!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE)) { +		IWL_DEBUG_INFO(priv, "Removing %pM but non DRIVER active\n", +				addr); +		goto out_err; +	} + +	if (!(priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) { +		IWL_DEBUG_INFO(priv, "Removing %pM but non UCODE active\n", +				addr); +		goto out_err; +	} + +	if (priv->stations[sta_id].used & IWL_STA_LOCAL) { +		kfree(priv->stations[sta_id].lq); +		priv->stations[sta_id].lq = NULL; +	} + +	for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) +		memset(&priv->tid_data[sta_id][tid], 0, +			sizeof(priv->tid_data[sta_id][tid])); + +	priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE; + +	priv->num_stations--; + +	if (WARN_ON(priv->num_stations < 0)) +		priv->num_stations = 0; + +	spin_unlock_bh(&priv->sta_lock); + +	return iwl_send_remove_station(priv, addr, sta_id, false); +out_err: +	spin_unlock_bh(&priv->sta_lock); +	return -EINVAL; +} + +void iwl_deactivate_station(struct iwl_priv *priv, const u8 sta_id, +			    const u8 *addr) +{ +	u8 tid; + +	if (!iwl_is_ready(priv)) { +		IWL_DEBUG_INFO(priv, +			"Unable to remove station %pM, device not ready.\n", +			addr); +		return; +	} + +	IWL_DEBUG_ASSOC(priv, "Deactivating STA: %pM (%d)\n", addr, sta_id); + +	if (WARN_ON_ONCE(sta_id == IWL_INVALID_STATION)) +		return; + +	spin_lock_bh(&priv->sta_lock); + +	WARN_ON_ONCE(!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE)); + +	for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) +		memset(&priv->tid_data[sta_id][tid], 0, +			sizeof(priv->tid_data[sta_id][tid])); + +	priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE; +	priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS; + +	priv->num_stations--; + +	if (WARN_ON_ONCE(priv->num_stations < 0)) +		priv->num_stations = 0; + +	spin_unlock_bh(&priv->sta_lock); +} + +static void iwl_sta_fill_lq(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +			    u8 sta_id, struct iwl_link_quality_cmd *link_cmd) +{ +	int i, r; +	u32 rate_flags = 0; +	__le32 rate_n_flags; + +	lockdep_assert_held(&priv->mutex); + +	memset(link_cmd, 0, sizeof(*link_cmd)); + +	/* Set up the rate scaling to start at selected rate, fall back +	 * all the way down to 1M in IEEE order, and then spin on 1M */ +	if (priv->band == IEEE80211_BAND_5GHZ) +		r = IWL_RATE_6M_INDEX; +	else if (ctx && ctx->vif && ctx->vif->p2p) +		r = IWL_RATE_6M_INDEX; +	else +		r = IWL_RATE_1M_INDEX; + +	if (r >= IWL_FIRST_CCK_RATE && r <= IWL_LAST_CCK_RATE) +		rate_flags |= RATE_MCS_CCK_MSK; + +	rate_flags |= first_antenna(priv->nvm_data->valid_tx_ant) << +				RATE_MCS_ANT_POS; +	rate_n_flags = iwl_hw_set_rate_n_flags(iwl_rates[r].plcp, rate_flags); +	for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) +		link_cmd->rs_table[i].rate_n_flags = rate_n_flags; + +	link_cmd->general_params.single_stream_ant_msk = +			first_antenna(priv->nvm_data->valid_tx_ant); + +	link_cmd->general_params.dual_stream_ant_msk = +		priv->nvm_data->valid_tx_ant & +		~first_antenna(priv->nvm_data->valid_tx_ant); +	if (!link_cmd->general_params.dual_stream_ant_msk) { +		link_cmd->general_params.dual_stream_ant_msk = ANT_AB; +	} else if (num_of_ant(priv->nvm_data->valid_tx_ant) == 2) { +		link_cmd->general_params.dual_stream_ant_msk = +			priv->nvm_data->valid_tx_ant; +	} + +	link_cmd->agg_params.agg_dis_start_th = +		LINK_QUAL_AGG_DISABLE_START_DEF; +	link_cmd->agg_params.agg_time_limit = +		cpu_to_le16(LINK_QUAL_AGG_TIME_LIMIT_DEF); + +	link_cmd->sta_id = sta_id; +} + +/** + * iwl_clear_ucode_stations - clear ucode station table bits + * + * This function clears all the bits in the driver indicating + * which stations are active in the ucode. Call when something + * other than explicit station management would cause this in + * the ucode, e.g. unassociated RXON. + */ +void iwl_clear_ucode_stations(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx) +{ +	int i; +	bool cleared = false; + +	IWL_DEBUG_INFO(priv, "Clearing ucode stations in driver\n"); + +	spin_lock_bh(&priv->sta_lock); +	for (i = 0; i < IWLAGN_STATION_COUNT; i++) { +		if (ctx && ctx->ctxid != priv->stations[i].ctxid) +			continue; + +		if (priv->stations[i].used & IWL_STA_UCODE_ACTIVE) { +			IWL_DEBUG_INFO(priv, +				"Clearing ucode active for station %d\n", i); +			priv->stations[i].used &= ~IWL_STA_UCODE_ACTIVE; +			cleared = true; +		} +	} +	spin_unlock_bh(&priv->sta_lock); + +	if (!cleared) +		IWL_DEBUG_INFO(priv, +			       "No active stations found to be cleared\n"); +} + +/** + * iwl_restore_stations() - Restore driver known stations to device + * + * All stations considered active by driver, but not present in ucode, is + * restored. + * + * Function sleeps. + */ +void iwl_restore_stations(struct iwl_priv *priv, struct iwl_rxon_context *ctx) +{ +	struct iwl_addsta_cmd sta_cmd; +	static const struct iwl_link_quality_cmd zero_lq = {}; +	struct iwl_link_quality_cmd lq; +	int i; +	bool found = false; +	int ret; +	bool send_lq; + +	if (!iwl_is_ready(priv)) { +		IWL_DEBUG_INFO(priv, +			       "Not ready yet, not restoring any stations.\n"); +		return; +	} + +	IWL_DEBUG_ASSOC(priv, "Restoring all known stations ... start.\n"); +	spin_lock_bh(&priv->sta_lock); +	for (i = 0; i < IWLAGN_STATION_COUNT; i++) { +		if (ctx->ctxid != priv->stations[i].ctxid) +			continue; +		if ((priv->stations[i].used & IWL_STA_DRIVER_ACTIVE) && +			    !(priv->stations[i].used & IWL_STA_UCODE_ACTIVE)) { +			IWL_DEBUG_ASSOC(priv, "Restoring sta %pM\n", +					priv->stations[i].sta.sta.addr); +			priv->stations[i].sta.mode = 0; +			priv->stations[i].used |= IWL_STA_UCODE_INPROGRESS; +			found = true; +		} +	} + +	for (i = 0; i < IWLAGN_STATION_COUNT; i++) { +		if ((priv->stations[i].used & IWL_STA_UCODE_INPROGRESS)) { +			memcpy(&sta_cmd, &priv->stations[i].sta, +			       sizeof(struct iwl_addsta_cmd)); +			send_lq = false; +			if (priv->stations[i].lq) { +				if (priv->wowlan) +					iwl_sta_fill_lq(priv, ctx, i, &lq); +				else +					memcpy(&lq, priv->stations[i].lq, +					       sizeof(struct iwl_link_quality_cmd)); + +				if (memcmp(&lq, &zero_lq, sizeof(lq))) +					send_lq = true; +			} +			spin_unlock_bh(&priv->sta_lock); +			ret = iwl_send_add_sta(priv, &sta_cmd, 0); +			if (ret) { +				spin_lock_bh(&priv->sta_lock); +				IWL_ERR(priv, "Adding station %pM failed.\n", +					priv->stations[i].sta.sta.addr); +				priv->stations[i].used &= +						~IWL_STA_DRIVER_ACTIVE; +				priv->stations[i].used &= +						~IWL_STA_UCODE_INPROGRESS; +				continue; +			} +			/* +			 * Rate scaling has already been initialized, send +			 * current LQ command +			 */ +			if (send_lq) +				iwl_send_lq_cmd(priv, ctx, &lq, 0, true); +			spin_lock_bh(&priv->sta_lock); +			priv->stations[i].used &= ~IWL_STA_UCODE_INPROGRESS; +		} +	} + +	spin_unlock_bh(&priv->sta_lock); +	if (!found) +		IWL_DEBUG_INFO(priv, "Restoring all known stations .... " +			"no stations to be restored.\n"); +	else +		IWL_DEBUG_INFO(priv, "Restoring all known stations .... " +			"complete.\n"); +} + +int iwl_get_free_ucode_key_offset(struct iwl_priv *priv) +{ +	int i; + +	for (i = 0; i < priv->sta_key_max_num; i++) +		if (!test_and_set_bit(i, &priv->ucode_key_table)) +			return i; + +	return WEP_INVALID_OFFSET; +} + +void iwl_dealloc_bcast_stations(struct iwl_priv *priv) +{ +	int i; + +	spin_lock_bh(&priv->sta_lock); +	for (i = 0; i < IWLAGN_STATION_COUNT; i++) { +		if (!(priv->stations[i].used & IWL_STA_BCAST)) +			continue; + +		priv->stations[i].used &= ~IWL_STA_UCODE_ACTIVE; +		priv->num_stations--; +		if (WARN_ON(priv->num_stations < 0)) +			priv->num_stations = 0; +		kfree(priv->stations[i].lq); +		priv->stations[i].lq = NULL; +	} +	spin_unlock_bh(&priv->sta_lock); +} + +#ifdef CONFIG_IWLWIFI_DEBUG +static void iwl_dump_lq_cmd(struct iwl_priv *priv, +			   struct iwl_link_quality_cmd *lq) +{ +	int i; +	IWL_DEBUG_RATE(priv, "lq station id 0x%x\n", lq->sta_id); +	IWL_DEBUG_RATE(priv, "lq ant 0x%X 0x%X\n", +		       lq->general_params.single_stream_ant_msk, +		       lq->general_params.dual_stream_ant_msk); + +	for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) +		IWL_DEBUG_RATE(priv, "lq index %d 0x%X\n", +			       i, lq->rs_table[i].rate_n_flags); +} +#else +static inline void iwl_dump_lq_cmd(struct iwl_priv *priv, +				   struct iwl_link_quality_cmd *lq) +{ +} +#endif + +/** + * is_lq_table_valid() - Test one aspect of LQ cmd for validity + * + * It sometimes happens when a HT rate has been in use and we + * loose connectivity with AP then mac80211 will first tell us that the + * current channel is not HT anymore before removing the station. In such a + * scenario the RXON flags will be updated to indicate we are not + * communicating HT anymore, but the LQ command may still contain HT rates. + * Test for this to prevent driver from sending LQ command between the time + * RXON flags are updated and when LQ command is updated. + */ +static bool is_lq_table_valid(struct iwl_priv *priv, +			      struct iwl_rxon_context *ctx, +			      struct iwl_link_quality_cmd *lq) +{ +	int i; + +	if (ctx->ht.enabled) +		return true; + +	IWL_DEBUG_INFO(priv, "Channel %u is not an HT channel\n", +		       ctx->active.channel); +	for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) { +		if (le32_to_cpu(lq->rs_table[i].rate_n_flags) & +		    RATE_MCS_HT_MSK) { +			IWL_DEBUG_INFO(priv, +				       "index %d of LQ expects HT channel\n", +				       i); +			return false; +		} +	} +	return true; +} + +/** + * iwl_send_lq_cmd() - Send link quality command + * @init: This command is sent as part of station initialization right + *        after station has been added. + * + * The link quality command is sent as the last step of station creation. + * This is the special case in which init is set and we call a callback in + * this case to clear the state indicating that station creation is in + * progress. + */ +int iwl_send_lq_cmd(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +		    struct iwl_link_quality_cmd *lq, u8 flags, bool init) +{ +	int ret = 0; +	struct iwl_host_cmd cmd = { +		.id = REPLY_TX_LINK_QUALITY_CMD, +		.len = { sizeof(struct iwl_link_quality_cmd), }, +		.flags = flags, +		.data = { lq, }, +	}; + +	if (WARN_ON(lq->sta_id == IWL_INVALID_STATION)) +		return -EINVAL; + + +	spin_lock_bh(&priv->sta_lock); +	if (!(priv->stations[lq->sta_id].used & IWL_STA_DRIVER_ACTIVE)) { +		spin_unlock_bh(&priv->sta_lock); +		return -EINVAL; +	} +	spin_unlock_bh(&priv->sta_lock); + +	iwl_dump_lq_cmd(priv, lq); +	if (WARN_ON(init && (cmd.flags & CMD_ASYNC))) +		return -EINVAL; + +	if (is_lq_table_valid(priv, ctx, lq)) +		ret = iwl_dvm_send_cmd(priv, &cmd); +	else +		ret = -EINVAL; + +	if (cmd.flags & CMD_ASYNC) +		return ret; + +	if (init) { +		IWL_DEBUG_INFO(priv, "init LQ command complete, " +			       "clearing sta addition status for sta %d\n", +			       lq->sta_id); +		spin_lock_bh(&priv->sta_lock); +		priv->stations[lq->sta_id].used &= ~IWL_STA_UCODE_INPROGRESS; +		spin_unlock_bh(&priv->sta_lock); +	} +	return ret; +} + + +static struct iwl_link_quality_cmd * +iwl_sta_alloc_lq(struct iwl_priv *priv, struct iwl_rxon_context *ctx, +		 u8 sta_id) +{ +	struct iwl_link_quality_cmd *link_cmd; + +	link_cmd = kzalloc(sizeof(struct iwl_link_quality_cmd), GFP_KERNEL); +	if (!link_cmd) { +		IWL_ERR(priv, "Unable to allocate memory for LQ cmd.\n"); +		return NULL; +	} + +	iwl_sta_fill_lq(priv, ctx, sta_id, link_cmd); + +	return link_cmd; +} + +/* + * iwlagn_add_bssid_station - Add the special IBSS BSSID station + * + * Function sleeps. + */ +int iwlagn_add_bssid_station(struct iwl_priv *priv, +			     struct iwl_rxon_context *ctx, +			     const u8 *addr, u8 *sta_id_r) +{ +	int ret; +	u8 sta_id; +	struct iwl_link_quality_cmd *link_cmd; + +	if (sta_id_r) +		*sta_id_r = IWL_INVALID_STATION; + +	ret = iwl_add_station_common(priv, ctx, addr, 0, NULL, &sta_id); +	if (ret) { +		IWL_ERR(priv, "Unable to add station %pM\n", addr); +		return ret; +	} + +	if (sta_id_r) +		*sta_id_r = sta_id; + +	spin_lock_bh(&priv->sta_lock); +	priv->stations[sta_id].used |= IWL_STA_LOCAL; +	spin_unlock_bh(&priv->sta_lock); + +	/* Set up default rate scaling table in device's station table */ +	link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id); +	if (!link_cmd) { +		IWL_ERR(priv, +			"Unable to initialize rate scaling for station %pM.\n", +			addr); +		return -ENOMEM; +	} + +	ret = iwl_send_lq_cmd(priv, ctx, link_cmd, 0, true); +	if (ret) +		IWL_ERR(priv, "Link quality command failed (%d)\n", ret); + +	spin_lock_bh(&priv->sta_lock); +	priv->stations[sta_id].lq = link_cmd; +	spin_unlock_bh(&priv->sta_lock); + +	return 0; +} + +/* + * static WEP keys + * + * For each context, the device has a table of 4 static WEP keys + * (one for each key index) that is updated with the following + * commands. + */ + +static int iwl_send_static_wepkey_cmd(struct iwl_priv *priv, +				      struct iwl_rxon_context *ctx, +				      bool send_if_empty) +{ +	int i, not_empty = 0; +	u8 buff[sizeof(struct iwl_wep_cmd) + +		sizeof(struct iwl_wep_key) * WEP_KEYS_MAX]; +	struct iwl_wep_cmd *wep_cmd = (struct iwl_wep_cmd *)buff; +	size_t cmd_size  = sizeof(struct iwl_wep_cmd); +	struct iwl_host_cmd cmd = { +		.id = ctx->wep_key_cmd, +		.data = { wep_cmd, }, +	}; + +	might_sleep(); + +	memset(wep_cmd, 0, cmd_size + +			(sizeof(struct iwl_wep_key) * WEP_KEYS_MAX)); + +	for (i = 0; i < WEP_KEYS_MAX ; i++) { +		wep_cmd->key[i].key_index = i; +		if (ctx->wep_keys[i].key_size) { +			wep_cmd->key[i].key_offset = i; +			not_empty = 1; +		} else { +			wep_cmd->key[i].key_offset = WEP_INVALID_OFFSET; +		} + +		wep_cmd->key[i].key_size = ctx->wep_keys[i].key_size; +		memcpy(&wep_cmd->key[i].key[3], ctx->wep_keys[i].key, +				ctx->wep_keys[i].key_size); +	} + +	wep_cmd->global_key_type = WEP_KEY_WEP_TYPE; +	wep_cmd->num_keys = WEP_KEYS_MAX; + +	cmd_size += sizeof(struct iwl_wep_key) * WEP_KEYS_MAX; + +	cmd.len[0] = cmd_size; + +	if (not_empty || send_if_empty) +		return iwl_dvm_send_cmd(priv, &cmd); +	else +		return 0; +} + +int iwl_restore_default_wep_keys(struct iwl_priv *priv, +				 struct iwl_rxon_context *ctx) +{ +	lockdep_assert_held(&priv->mutex); + +	return iwl_send_static_wepkey_cmd(priv, ctx, false); +} + +int iwl_remove_default_wep_key(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx, +			       struct ieee80211_key_conf *keyconf) +{ +	int ret; + +	lockdep_assert_held(&priv->mutex); + +	IWL_DEBUG_WEP(priv, "Removing default WEP key: idx=%d\n", +		      keyconf->keyidx); + +	memset(&ctx->wep_keys[keyconf->keyidx], 0, sizeof(ctx->wep_keys[0])); +	if (iwl_is_rfkill(priv)) { +		IWL_DEBUG_WEP(priv, +			"Not sending REPLY_WEPKEY command due to RFKILL.\n"); +		/* but keys in device are clear anyway so return success */ +		return 0; +	} +	ret = iwl_send_static_wepkey_cmd(priv, ctx, 1); +	IWL_DEBUG_WEP(priv, "Remove default WEP key: idx=%d ret=%d\n", +		      keyconf->keyidx, ret); + +	return ret; +} + +int iwl_set_default_wep_key(struct iwl_priv *priv, +			    struct iwl_rxon_context *ctx, +			    struct ieee80211_key_conf *keyconf) +{ +	int ret; + +	lockdep_assert_held(&priv->mutex); + +	if (keyconf->keylen != WEP_KEY_LEN_128 && +	    keyconf->keylen != WEP_KEY_LEN_64) { +		IWL_DEBUG_WEP(priv, +			      "Bad WEP key length %d\n", keyconf->keylen); +		return -EINVAL; +	} + +	keyconf->hw_key_idx = IWLAGN_HW_KEY_DEFAULT; + +	ctx->wep_keys[keyconf->keyidx].key_size = keyconf->keylen; +	memcpy(&ctx->wep_keys[keyconf->keyidx].key, &keyconf->key, +							keyconf->keylen); + +	ret = iwl_send_static_wepkey_cmd(priv, ctx, false); +	IWL_DEBUG_WEP(priv, "Set default WEP key: len=%d idx=%d ret=%d\n", +		keyconf->keylen, keyconf->keyidx, ret); + +	return ret; +} + +/* + * dynamic (per-station) keys + * + * The dynamic keys are a little more complicated. The device has + * a key cache of up to STA_KEY_MAX_NUM/STA_KEY_MAX_NUM_PAN keys. + * These are linked to stations by a table that contains an index + * into the key table for each station/key index/{mcast,unicast}, + * i.e. it's basically an array of pointers like this: + *	key_offset_t key_mapping[NUM_STATIONS][4][2]; + * (it really works differently, but you can think of it as such) + * + * The key uploading and linking happens in the same command, the + * add station command with STA_MODIFY_KEY_MASK. + */ + +static u8 iwlagn_key_sta_id(struct iwl_priv *priv, +			    struct ieee80211_vif *vif, +			    struct ieee80211_sta *sta) +{ +	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv; + +	if (sta) +		return iwl_sta_id(sta); + +	/* +	 * The device expects GTKs for station interfaces to be +	 * installed as GTKs for the AP station. If we have no +	 * station ID, then use the ap_sta_id in that case. +	 */ +	if (vif->type == NL80211_IFTYPE_STATION && vif_priv->ctx) +		return vif_priv->ctx->ap_sta_id; + +	return IWL_INVALID_STATION; +} + +static int iwlagn_send_sta_key(struct iwl_priv *priv, +			       struct ieee80211_key_conf *keyconf, +			       u8 sta_id, u32 tkip_iv32, u16 *tkip_p1k, +			       u32 cmd_flags) +{ +	__le16 key_flags; +	struct iwl_addsta_cmd sta_cmd; +	int i; + +	spin_lock_bh(&priv->sta_lock); +	memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(sta_cmd)); +	spin_unlock_bh(&priv->sta_lock); + +	key_flags = cpu_to_le16(keyconf->keyidx << STA_KEY_FLG_KEYID_POS); +	key_flags |= STA_KEY_FLG_MAP_KEY_MSK; + +	switch (keyconf->cipher) { +	case WLAN_CIPHER_SUITE_CCMP: +		key_flags |= STA_KEY_FLG_CCMP; +		memcpy(sta_cmd.key.key, keyconf->key, keyconf->keylen); +		break; +	case WLAN_CIPHER_SUITE_TKIP: +		key_flags |= STA_KEY_FLG_TKIP; +		sta_cmd.key.tkip_rx_tsc_byte2 = tkip_iv32; +		for (i = 0; i < 5; i++) +			sta_cmd.key.tkip_rx_ttak[i] = cpu_to_le16(tkip_p1k[i]); +		memcpy(sta_cmd.key.key, keyconf->key, keyconf->keylen); +		break; +	case WLAN_CIPHER_SUITE_WEP104: +		key_flags |= STA_KEY_FLG_KEY_SIZE_MSK; +		/* fall through */ +	case WLAN_CIPHER_SUITE_WEP40: +		key_flags |= STA_KEY_FLG_WEP; +		memcpy(&sta_cmd.key.key[3], keyconf->key, keyconf->keylen); +		break; +	default: +		WARN_ON(1); +		return -EINVAL; +	} + +	if (!(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE)) +		key_flags |= STA_KEY_MULTICAST_MSK; + +	/* key pointer (offset) */ +	sta_cmd.key.key_offset = keyconf->hw_key_idx; + +	sta_cmd.key.key_flags = key_flags; +	sta_cmd.mode = STA_CONTROL_MODIFY_MSK; +	sta_cmd.sta.modify_mask = STA_MODIFY_KEY_MASK; + +	return iwl_send_add_sta(priv, &sta_cmd, cmd_flags); +} + +void iwl_update_tkip_key(struct iwl_priv *priv, +			 struct ieee80211_vif *vif, +			 struct ieee80211_key_conf *keyconf, +			 struct ieee80211_sta *sta, u32 iv32, u16 *phase1key) +{ +	u8 sta_id = iwlagn_key_sta_id(priv, vif, sta); + +	if (sta_id == IWL_INVALID_STATION) +		return; + +	if (iwl_scan_cancel(priv)) { +		/* cancel scan failed, just live w/ bad key and rely +		   briefly on SW decryption */ +		return; +	} + +	iwlagn_send_sta_key(priv, keyconf, sta_id, +			    iv32, phase1key, CMD_ASYNC); +} + +int iwl_remove_dynamic_key(struct iwl_priv *priv, +			   struct iwl_rxon_context *ctx, +			   struct ieee80211_key_conf *keyconf, +			   struct ieee80211_sta *sta) +{ +	struct iwl_addsta_cmd sta_cmd; +	u8 sta_id = iwlagn_key_sta_id(priv, ctx->vif, sta); +	__le16 key_flags; + +	/* if station isn't there, neither is the key */ +	if (sta_id == IWL_INVALID_STATION) +		return -ENOENT; + +	spin_lock_bh(&priv->sta_lock); +	memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(sta_cmd)); +	if (!(priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) +		sta_id = IWL_INVALID_STATION; +	spin_unlock_bh(&priv->sta_lock); + +	if (sta_id == IWL_INVALID_STATION) +		return 0; + +	lockdep_assert_held(&priv->mutex); + +	ctx->key_mapping_keys--; + +	IWL_DEBUG_WEP(priv, "Remove dynamic key: idx=%d sta=%d\n", +		      keyconf->keyidx, sta_id); + +	if (!test_and_clear_bit(keyconf->hw_key_idx, &priv->ucode_key_table)) +		IWL_ERR(priv, "offset %d not used in uCode key table.\n", +			keyconf->hw_key_idx); + +	key_flags = cpu_to_le16(keyconf->keyidx << STA_KEY_FLG_KEYID_POS); +	key_flags |= STA_KEY_FLG_MAP_KEY_MSK | STA_KEY_FLG_NO_ENC | +		     STA_KEY_FLG_INVALID; + +	if (!(keyconf->flags & IEEE80211_KEY_FLAG_PAIRWISE)) +		key_flags |= STA_KEY_MULTICAST_MSK; + +	sta_cmd.key.key_flags = key_flags; +	sta_cmd.key.key_offset = keyconf->hw_key_idx; +	sta_cmd.sta.modify_mask = STA_MODIFY_KEY_MASK; +	sta_cmd.mode = STA_CONTROL_MODIFY_MSK; + +	return iwl_send_add_sta(priv, &sta_cmd, 0); +} + +int iwl_set_dynamic_key(struct iwl_priv *priv, +			struct iwl_rxon_context *ctx, +			struct ieee80211_key_conf *keyconf, +			struct ieee80211_sta *sta) +{ +	struct ieee80211_key_seq seq; +	u16 p1k[5]; +	int ret; +	u8 sta_id = iwlagn_key_sta_id(priv, ctx->vif, sta); +	const u8 *addr; + +	if (sta_id == IWL_INVALID_STATION) +		return -EINVAL; + +	lockdep_assert_held(&priv->mutex); + +	keyconf->hw_key_idx = iwl_get_free_ucode_key_offset(priv); +	if (keyconf->hw_key_idx == WEP_INVALID_OFFSET) +		return -ENOSPC; + +	ctx->key_mapping_keys++; + +	switch (keyconf->cipher) { +	case WLAN_CIPHER_SUITE_TKIP: +		if (sta) +			addr = sta->addr; +		else /* station mode case only */ +			addr = ctx->active.bssid_addr; + +		/* pre-fill phase 1 key into device cache */ +		ieee80211_get_key_rx_seq(keyconf, 0, &seq); +		ieee80211_get_tkip_rx_p1k(keyconf, addr, seq.tkip.iv32, p1k); +		ret = iwlagn_send_sta_key(priv, keyconf, sta_id, +					  seq.tkip.iv32, p1k, 0); +		break; +	case WLAN_CIPHER_SUITE_CCMP: +	case WLAN_CIPHER_SUITE_WEP40: +	case WLAN_CIPHER_SUITE_WEP104: +		ret = iwlagn_send_sta_key(priv, keyconf, sta_id, +					  0, NULL, 0); +		break; +	default: +		IWL_ERR(priv, "Unknown cipher %x\n", keyconf->cipher); +		ret = -EINVAL; +	} + +	if (ret) { +		ctx->key_mapping_keys--; +		clear_bit(keyconf->hw_key_idx, &priv->ucode_key_table); +	} + +	IWL_DEBUG_WEP(priv, "Set dynamic key: cipher=%x len=%d idx=%d sta=%pM ret=%d\n", +		      keyconf->cipher, keyconf->keylen, keyconf->keyidx, +		      sta ? sta->addr : NULL, ret); + +	return ret; +} + +/** + * iwlagn_alloc_bcast_station - add broadcast station into driver's station table. + * + * This adds the broadcast station into the driver's station table + * and marks it driver active, so that it will be restored to the + * device at the next best time. + */ +int iwlagn_alloc_bcast_station(struct iwl_priv *priv, +			       struct iwl_rxon_context *ctx) +{ +	struct iwl_link_quality_cmd *link_cmd; +	u8 sta_id; + +	spin_lock_bh(&priv->sta_lock); +	sta_id = iwl_prep_station(priv, ctx, iwl_bcast_addr, false, NULL); +	if (sta_id == IWL_INVALID_STATION) { +		IWL_ERR(priv, "Unable to prepare broadcast station\n"); +		spin_unlock_bh(&priv->sta_lock); + +		return -EINVAL; +	} + +	priv->stations[sta_id].used |= IWL_STA_DRIVER_ACTIVE; +	priv->stations[sta_id].used |= IWL_STA_BCAST; +	spin_unlock_bh(&priv->sta_lock); + +	link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id); +	if (!link_cmd) { +		IWL_ERR(priv, +			"Unable to initialize rate scaling for bcast station.\n"); +		return -ENOMEM; +	} + +	spin_lock_bh(&priv->sta_lock); +	priv->stations[sta_id].lq = link_cmd; +	spin_unlock_bh(&priv->sta_lock); + +	return 0; +} + +/** + * iwl_update_bcast_station - update broadcast station's LQ command + * + * Only used by iwlagn. Placed here to have all bcast station management + * code together. + */ +int iwl_update_bcast_station(struct iwl_priv *priv, +			     struct iwl_rxon_context *ctx) +{ +	struct iwl_link_quality_cmd *link_cmd; +	u8 sta_id = ctx->bcast_sta_id; + +	link_cmd = iwl_sta_alloc_lq(priv, ctx, sta_id); +	if (!link_cmd) { +		IWL_ERR(priv, "Unable to initialize rate scaling for bcast station.\n"); +		return -ENOMEM; +	} + +	spin_lock_bh(&priv->sta_lock); +	if (priv->stations[sta_id].lq) +		kfree(priv->stations[sta_id].lq); +	else +		IWL_DEBUG_INFO(priv, "Bcast station rate scaling has not been initialized yet.\n"); +	priv->stations[sta_id].lq = link_cmd; +	spin_unlock_bh(&priv->sta_lock); + +	return 0; +} + +int iwl_update_bcast_stations(struct iwl_priv *priv) +{ +	struct iwl_rxon_context *ctx; +	int ret = 0; + +	for_each_context(priv, ctx) { +		ret = iwl_update_bcast_station(priv, ctx); +		if (ret) +			break; +	} + +	return ret; +} + +/** + * iwl_sta_tx_modify_enable_tid - Enable Tx for this TID in station table + */ +int iwl_sta_tx_modify_enable_tid(struct iwl_priv *priv, int sta_id, int tid) +{ +	struct iwl_addsta_cmd sta_cmd; + +	lockdep_assert_held(&priv->mutex); + +	/* Remove "disable" flag, to enable Tx for this TID */ +	spin_lock_bh(&priv->sta_lock); +	priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_TID_DISABLE_TX; +	priv->stations[sta_id].sta.tid_disable_tx &= cpu_to_le16(~(1 << tid)); +	priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK; +	memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd)); +	spin_unlock_bh(&priv->sta_lock); + +	return iwl_send_add_sta(priv, &sta_cmd, 0); +} + +int iwl_sta_rx_agg_start(struct iwl_priv *priv, struct ieee80211_sta *sta, +			 int tid, u16 ssn) +{ +	int sta_id; +	struct iwl_addsta_cmd sta_cmd; + +	lockdep_assert_held(&priv->mutex); + +	sta_id = iwl_sta_id(sta); +	if (sta_id == IWL_INVALID_STATION) +		return -ENXIO; + +	spin_lock_bh(&priv->sta_lock); +	priv->stations[sta_id].sta.station_flags_msk = 0; +	priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_ADDBA_TID_MSK; +	priv->stations[sta_id].sta.add_immediate_ba_tid = (u8)tid; +	priv->stations[sta_id].sta.add_immediate_ba_ssn = cpu_to_le16(ssn); +	priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK; +	memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd)); +	spin_unlock_bh(&priv->sta_lock); + +	return iwl_send_add_sta(priv, &sta_cmd, 0); +} + +int iwl_sta_rx_agg_stop(struct iwl_priv *priv, struct ieee80211_sta *sta, +			int tid) +{ +	int sta_id; +	struct iwl_addsta_cmd sta_cmd; + +	lockdep_assert_held(&priv->mutex); + +	sta_id = iwl_sta_id(sta); +	if (sta_id == IWL_INVALID_STATION) { +		IWL_ERR(priv, "Invalid station for AGG tid %d\n", tid); +		return -ENXIO; +	} + +	spin_lock_bh(&priv->sta_lock); +	priv->stations[sta_id].sta.station_flags_msk = 0; +	priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_DELBA_TID_MSK; +	priv->stations[sta_id].sta.remove_immediate_ba_tid = (u8)tid; +	priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK; +	memcpy(&sta_cmd, &priv->stations[sta_id].sta, sizeof(struct iwl_addsta_cmd)); +	spin_unlock_bh(&priv->sta_lock); + +	return iwl_send_add_sta(priv, &sta_cmd, 0); +} + + + +void iwl_sta_modify_sleep_tx_count(struct iwl_priv *priv, int sta_id, int cnt) +{ +	struct iwl_addsta_cmd cmd = { +		.mode = STA_CONTROL_MODIFY_MSK, +		.station_flags = STA_FLG_PWR_SAVE_MSK, +		.station_flags_msk = STA_FLG_PWR_SAVE_MSK, +		.sta.sta_id = sta_id, +		.sta.modify_mask = STA_MODIFY_SLEEP_TX_COUNT_MSK, +		.sleep_tx_count = cpu_to_le16(cnt), +	}; + +	iwl_send_add_sta(priv, &cmd, CMD_ASYNC); +} diff --git a/drivers/net/wireless/iwlwifi/dvm/tt.c b/drivers/net/wireless/iwlwifi/dvm/tt.c new file mode 100644 index 00000000000..acb981a0a0a --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/tt.c @@ -0,0 +1,690 @@ +/****************************************************************************** + * + * Copyright(c) 2007 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portions of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + *****************************************************************************/ + + +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/slab.h> +#include <net/mac80211.h> +#include "iwl-io.h" +#include "iwl-modparams.h" +#include "iwl-debug.h" +#include "agn.h" +#include "dev.h" +#include "commands.h" +#include "tt.h" + +/* default Thermal Throttling transaction table + * Current state   |         Throttling Down               |  Throttling Up + *============================================================================= + *                 Condition Nxt State  Condition Nxt State Condition Nxt State + *----------------------------------------------------------------------------- + *     IWL_TI_0     T >= 114   CT_KILL  114>T>=105   TI_1      N/A      N/A + *     IWL_TI_1     T >= 114   CT_KILL  114>T>=110   TI_2     T<=95     TI_0 + *     IWL_TI_2     T >= 114   CT_KILL                        T<=100    TI_1 + *    IWL_CT_KILL      N/A       N/A       N/A        N/A     T<=95     TI_0 + *============================================================================= + */ +static const struct iwl_tt_trans tt_range_0[IWL_TI_STATE_MAX - 1] = { +	{IWL_TI_0, IWL_ABSOLUTE_ZERO, 104}, +	{IWL_TI_1, 105, CT_KILL_THRESHOLD - 1}, +	{IWL_TI_CT_KILL, CT_KILL_THRESHOLD, IWL_ABSOLUTE_MAX} +}; +static const struct iwl_tt_trans tt_range_1[IWL_TI_STATE_MAX - 1] = { +	{IWL_TI_0, IWL_ABSOLUTE_ZERO, 95}, +	{IWL_TI_2, 110, CT_KILL_THRESHOLD - 1}, +	{IWL_TI_CT_KILL, CT_KILL_THRESHOLD, IWL_ABSOLUTE_MAX} +}; +static const struct iwl_tt_trans tt_range_2[IWL_TI_STATE_MAX - 1] = { +	{IWL_TI_1, IWL_ABSOLUTE_ZERO, 100}, +	{IWL_TI_CT_KILL, CT_KILL_THRESHOLD, IWL_ABSOLUTE_MAX}, +	{IWL_TI_CT_KILL, CT_KILL_THRESHOLD, IWL_ABSOLUTE_MAX} +}; +static const struct iwl_tt_trans tt_range_3[IWL_TI_STATE_MAX - 1] = { +	{IWL_TI_0, IWL_ABSOLUTE_ZERO, CT_KILL_EXIT_THRESHOLD}, +	{IWL_TI_CT_KILL, CT_KILL_EXIT_THRESHOLD + 1, IWL_ABSOLUTE_MAX}, +	{IWL_TI_CT_KILL, CT_KILL_EXIT_THRESHOLD + 1, IWL_ABSOLUTE_MAX} +}; + +/* Advance Thermal Throttling default restriction table */ +static const struct iwl_tt_restriction restriction_range[IWL_TI_STATE_MAX] = { +	{IWL_ANT_OK_MULTI, IWL_ANT_OK_MULTI, true }, +	{IWL_ANT_OK_SINGLE, IWL_ANT_OK_MULTI, true }, +	{IWL_ANT_OK_SINGLE, IWL_ANT_OK_SINGLE, false }, +	{IWL_ANT_OK_NONE, IWL_ANT_OK_NONE, false } +}; + +bool iwl_tt_is_low_power_state(struct iwl_priv *priv) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; + +	if (tt->state >= IWL_TI_1) +		return true; +	return false; +} + +u8 iwl_tt_current_power_mode(struct iwl_priv *priv) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; + +	return tt->tt_power_mode; +} + +bool iwl_ht_enabled(struct iwl_priv *priv) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	struct iwl_tt_restriction *restriction; + +	if (!priv->thermal_throttle.advanced_tt) +		return true; +	restriction = tt->restriction + tt->state; +	return restriction->is_ht; +} + +static bool iwl_within_ct_kill_margin(struct iwl_priv *priv) +{ +	s32 temp = priv->temperature; /* degrees CELSIUS except specified */ +	bool within_margin = false; + +	if (!priv->thermal_throttle.advanced_tt) +		within_margin = ((temp + IWL_TT_CT_KILL_MARGIN) >= +				CT_KILL_THRESHOLD_LEGACY) ? true : false; +	else +		within_margin = ((temp + IWL_TT_CT_KILL_MARGIN) >= +				CT_KILL_THRESHOLD) ? true : false; +	return within_margin; +} + +bool iwl_check_for_ct_kill(struct iwl_priv *priv) +{ +	bool is_ct_kill = false; + +	if (iwl_within_ct_kill_margin(priv)) { +		iwl_tt_enter_ct_kill(priv); +		is_ct_kill = true; +	} +	return is_ct_kill; +} + +enum iwl_antenna_ok iwl_tx_ant_restriction(struct iwl_priv *priv) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	struct iwl_tt_restriction *restriction; + +	if (!priv->thermal_throttle.advanced_tt) +		return IWL_ANT_OK_MULTI; +	restriction = tt->restriction + tt->state; +	return restriction->tx_stream; +} + +enum iwl_antenna_ok iwl_rx_ant_restriction(struct iwl_priv *priv) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	struct iwl_tt_restriction *restriction; + +	if (!priv->thermal_throttle.advanced_tt) +		return IWL_ANT_OK_MULTI; +	restriction = tt->restriction + tt->state; +	return restriction->rx_stream; +} + +#define CT_KILL_EXIT_DURATION (5)	/* 5 seconds duration */ +#define CT_KILL_WAITING_DURATION (300)	/* 300ms duration */ + +/* + * toggle the bit to wake up uCode and check the temperature + * if the temperature is below CT, uCode will stay awake and send card + * state notification with CT_KILL bit clear to inform Thermal Throttling + * Management to change state. Otherwise, uCode will go back to sleep + * without doing anything, driver should continue the 5 seconds timer + * to wake up uCode for temperature check until temperature drop below CT + */ +static void iwl_tt_check_exit_ct_kill(unsigned long data) +{ +	struct iwl_priv *priv = (struct iwl_priv *)data; +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	unsigned long flags; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	if (tt->state == IWL_TI_CT_KILL) { +		if (priv->thermal_throttle.ct_kill_toggle) { +			iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR, +				    CSR_UCODE_DRV_GP1_REG_BIT_CT_KILL_EXIT); +			priv->thermal_throttle.ct_kill_toggle = false; +		} else { +			iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET, +				    CSR_UCODE_DRV_GP1_REG_BIT_CT_KILL_EXIT); +			priv->thermal_throttle.ct_kill_toggle = true; +		} +		iwl_read32(priv->trans, CSR_UCODE_DRV_GP1); +		if (iwl_trans_grab_nic_access(priv->trans, false, &flags)) +			iwl_trans_release_nic_access(priv->trans, &flags); + +		/* Reschedule the ct_kill timer to occur in +		 * CT_KILL_EXIT_DURATION seconds to ensure we get a +		 * thermal update */ +		IWL_DEBUG_TEMP(priv, "schedule ct_kill exit timer\n"); +		mod_timer(&priv->thermal_throttle.ct_kill_exit_tm, +			  jiffies + CT_KILL_EXIT_DURATION * HZ); +	} +} + +static void iwl_perform_ct_kill_task(struct iwl_priv *priv, +			   bool stop) +{ +	if (stop) { +		IWL_DEBUG_TEMP(priv, "Stop all queues\n"); +		if (priv->mac80211_registered) +			ieee80211_stop_queues(priv->hw); +		IWL_DEBUG_TEMP(priv, +				"Schedule 5 seconds CT_KILL Timer\n"); +		mod_timer(&priv->thermal_throttle.ct_kill_exit_tm, +			  jiffies + CT_KILL_EXIT_DURATION * HZ); +	} else { +		IWL_DEBUG_TEMP(priv, "Wake all queues\n"); +		if (priv->mac80211_registered) +			ieee80211_wake_queues(priv->hw); +	} +} + +static void iwl_tt_ready_for_ct_kill(unsigned long data) +{ +	struct iwl_priv *priv = (struct iwl_priv *)data; +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	/* temperature timer expired, ready to go into CT_KILL state */ +	if (tt->state != IWL_TI_CT_KILL) { +		IWL_DEBUG_TEMP(priv, "entering CT_KILL state when " +				"temperature timer expired\n"); +		tt->state = IWL_TI_CT_KILL; +		set_bit(STATUS_CT_KILL, &priv->status); +		iwl_perform_ct_kill_task(priv, true); +	} +} + +static void iwl_prepare_ct_kill_task(struct iwl_priv *priv) +{ +	IWL_DEBUG_TEMP(priv, "Prepare to enter IWL_TI_CT_KILL\n"); +	/* make request to retrieve statistics information */ +	iwl_send_statistics_request(priv, 0, false); +	/* Reschedule the ct_kill wait timer */ +	mod_timer(&priv->thermal_throttle.ct_kill_waiting_tm, +		 jiffies + msecs_to_jiffies(CT_KILL_WAITING_DURATION)); +} + +#define IWL_MINIMAL_POWER_THRESHOLD		(CT_KILL_THRESHOLD_LEGACY) +#define IWL_REDUCED_PERFORMANCE_THRESHOLD_2	(100) +#define IWL_REDUCED_PERFORMANCE_THRESHOLD_1	(90) + +/* + * Legacy thermal throttling + * 1) Avoid NIC destruction due to high temperatures + *	Chip will identify dangerously high temperatures that can + *	harm the device and will power down + * 2) Avoid the NIC power down due to high temperature + *	Throttle early enough to lower the power consumption before + *	drastic steps are needed + */ +static void iwl_legacy_tt_handler(struct iwl_priv *priv, s32 temp, bool force) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	enum iwl_tt_state old_state; + +#ifdef CONFIG_IWLWIFI_DEBUG +	if ((tt->tt_previous_temp) && +	    (temp > tt->tt_previous_temp) && +	    ((temp - tt->tt_previous_temp) > +	    IWL_TT_INCREASE_MARGIN)) { +		IWL_DEBUG_TEMP(priv, +			"Temperature increase %d degree Celsius\n", +			(temp - tt->tt_previous_temp)); +	} +#endif +	old_state = tt->state; +	/* in Celsius */ +	if (temp >= IWL_MINIMAL_POWER_THRESHOLD) +		tt->state = IWL_TI_CT_KILL; +	else if (temp >= IWL_REDUCED_PERFORMANCE_THRESHOLD_2) +		tt->state = IWL_TI_2; +	else if (temp >= IWL_REDUCED_PERFORMANCE_THRESHOLD_1) +		tt->state = IWL_TI_1; +	else +		tt->state = IWL_TI_0; + +#ifdef CONFIG_IWLWIFI_DEBUG +	tt->tt_previous_temp = temp; +#endif +	/* stop ct_kill_waiting_tm timer */ +	del_timer_sync(&priv->thermal_throttle.ct_kill_waiting_tm); +	if (tt->state != old_state) { +		switch (tt->state) { +		case IWL_TI_0: +			/* +			 * When the system is ready to go back to IWL_TI_0 +			 * we only have to call iwl_power_update_mode() to +			 * do so. +			 */ +			break; +		case IWL_TI_1: +			tt->tt_power_mode = IWL_POWER_INDEX_3; +			break; +		case IWL_TI_2: +			tt->tt_power_mode = IWL_POWER_INDEX_4; +			break; +		default: +			tt->tt_power_mode = IWL_POWER_INDEX_5; +			break; +		} +		mutex_lock(&priv->mutex); +		if (old_state == IWL_TI_CT_KILL) +			clear_bit(STATUS_CT_KILL, &priv->status); +		if (tt->state != IWL_TI_CT_KILL && +		    iwl_power_update_mode(priv, true)) { +			/* TT state not updated +			 * try again during next temperature read +			 */ +			if (old_state == IWL_TI_CT_KILL) +				set_bit(STATUS_CT_KILL, &priv->status); +			tt->state = old_state; +			IWL_ERR(priv, "Cannot update power mode, " +					"TT state not updated\n"); +		} else { +			if (tt->state == IWL_TI_CT_KILL) { +				if (force) { +					set_bit(STATUS_CT_KILL, &priv->status); +					iwl_perform_ct_kill_task(priv, true); +				} else { +					iwl_prepare_ct_kill_task(priv); +					tt->state = old_state; +				} +			} else if (old_state == IWL_TI_CT_KILL && +				 tt->state != IWL_TI_CT_KILL) +				iwl_perform_ct_kill_task(priv, false); +			IWL_DEBUG_TEMP(priv, "Temperature state changed %u\n", +					tt->state); +			IWL_DEBUG_TEMP(priv, "Power Index change to %u\n", +					tt->tt_power_mode); +		} +		mutex_unlock(&priv->mutex); +	} +} + +/* + * Advance thermal throttling + * 1) Avoid NIC destruction due to high temperatures + *	Chip will identify dangerously high temperatures that can + *	harm the device and will power down + * 2) Avoid the NIC power down due to high temperature + *	Throttle early enough to lower the power consumption before + *	drastic steps are needed + *	Actions include relaxing the power down sleep thresholds and + *	decreasing the number of TX streams + * 3) Avoid throughput performance impact as much as possible + * + *============================================================================= + *                 Condition Nxt State  Condition Nxt State Condition Nxt State + *----------------------------------------------------------------------------- + *     IWL_TI_0     T >= 114   CT_KILL  114>T>=105   TI_1      N/A      N/A + *     IWL_TI_1     T >= 114   CT_KILL  114>T>=110   TI_2     T<=95     TI_0 + *     IWL_TI_2     T >= 114   CT_KILL                        T<=100    TI_1 + *    IWL_CT_KILL      N/A       N/A       N/A        N/A     T<=95     TI_0 + *============================================================================= + */ +static void iwl_advance_tt_handler(struct iwl_priv *priv, s32 temp, bool force) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	int i; +	bool changed = false; +	enum iwl_tt_state old_state; +	struct iwl_tt_trans *transaction; + +	old_state = tt->state; +	for (i = 0; i < IWL_TI_STATE_MAX - 1; i++) { +		/* based on the current TT state, +		 * find the curresponding transaction table +		 * each table has (IWL_TI_STATE_MAX - 1) entries +		 * tt->transaction + ((old_state * (IWL_TI_STATE_MAX - 1)) +		 * will advance to the correct table. +		 * then based on the current temperature +		 * find the next state need to transaction to +		 * go through all the possible (IWL_TI_STATE_MAX - 1) entries +		 * in the current table to see if transaction is needed +		 */ +		transaction = tt->transaction + +			((old_state * (IWL_TI_STATE_MAX - 1)) + i); +		if (temp >= transaction->tt_low && +		    temp <= transaction->tt_high) { +#ifdef CONFIG_IWLWIFI_DEBUG +			if ((tt->tt_previous_temp) && +			    (temp > tt->tt_previous_temp) && +			    ((temp - tt->tt_previous_temp) > +			    IWL_TT_INCREASE_MARGIN)) { +				IWL_DEBUG_TEMP(priv, +					"Temperature increase %d " +					"degree Celsius\n", +					(temp - tt->tt_previous_temp)); +			} +			tt->tt_previous_temp = temp; +#endif +			if (old_state != +			    transaction->next_state) { +				changed = true; +				tt->state = +					transaction->next_state; +			} +			break; +		} +	} +	/* stop ct_kill_waiting_tm timer */ +	del_timer_sync(&priv->thermal_throttle.ct_kill_waiting_tm); +	if (changed) { +		if (tt->state >= IWL_TI_1) { +			/* force PI = IWL_POWER_INDEX_5 in the case of TI > 0 */ +			tt->tt_power_mode = IWL_POWER_INDEX_5; + +			if (!iwl_ht_enabled(priv)) { +				struct iwl_rxon_context *ctx; + +				for_each_context(priv, ctx) { +					struct iwl_rxon_cmd *rxon; + +					rxon = &ctx->staging; + +					/* disable HT */ +					rxon->flags &= ~( +						RXON_FLG_CHANNEL_MODE_MSK | +						RXON_FLG_CTRL_CHANNEL_LOC_HI_MSK | +						RXON_FLG_HT40_PROT_MSK | +						RXON_FLG_HT_PROT_MSK); +				} +			} else { +				/* check HT capability and set +				 * according to the system HT capability +				 * in case get disabled before */ +				iwl_set_rxon_ht(priv, &priv->current_ht_config); +			} + +		} else { +			/* +			 * restore system power setting -- it will be +			 * recalculated automatically. +			 */ + +			/* check HT capability and set +			 * according to the system HT capability +			 * in case get disabled before */ +			iwl_set_rxon_ht(priv, &priv->current_ht_config); +		} +		mutex_lock(&priv->mutex); +		if (old_state == IWL_TI_CT_KILL) +			clear_bit(STATUS_CT_KILL, &priv->status); +		if (tt->state != IWL_TI_CT_KILL && +		    iwl_power_update_mode(priv, true)) { +			/* TT state not updated +			 * try again during next temperature read +			 */ +			IWL_ERR(priv, "Cannot update power mode, " +					"TT state not updated\n"); +			if (old_state == IWL_TI_CT_KILL) +				set_bit(STATUS_CT_KILL, &priv->status); +			tt->state = old_state; +		} else { +			IWL_DEBUG_TEMP(priv, +					"Thermal Throttling to new state: %u\n", +					tt->state); +			if (old_state != IWL_TI_CT_KILL && +			    tt->state == IWL_TI_CT_KILL) { +				if (force) { +					IWL_DEBUG_TEMP(priv, +						"Enter IWL_TI_CT_KILL\n"); +					set_bit(STATUS_CT_KILL, &priv->status); +					iwl_perform_ct_kill_task(priv, true); +				} else { +					tt->state = old_state; +					iwl_prepare_ct_kill_task(priv); +				} +			} else if (old_state == IWL_TI_CT_KILL && +				  tt->state != IWL_TI_CT_KILL) { +				IWL_DEBUG_TEMP(priv, "Exit IWL_TI_CT_KILL\n"); +				iwl_perform_ct_kill_task(priv, false); +			} +		} +		mutex_unlock(&priv->mutex); +	} +} + +/* Card State Notification indicated reach critical temperature + * if PSP not enable, no Thermal Throttling function will be performed + * just set the GP1 bit to acknowledge the event + * otherwise, go into IWL_TI_CT_KILL state + * since Card State Notification will not provide any temperature reading + * for Legacy mode + * so just pass the CT_KILL temperature to iwl_legacy_tt_handler() + * for advance mode + * pass CT_KILL_THRESHOLD+1 to make sure move into IWL_TI_CT_KILL state + */ +static void iwl_bg_ct_enter(struct work_struct *work) +{ +	struct iwl_priv *priv = container_of(work, struct iwl_priv, ct_enter); +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	if (!iwl_is_ready(priv)) +		return; + +	if (tt->state != IWL_TI_CT_KILL) { +		IWL_ERR(priv, "Device reached critical temperature " +			      "- ucode going to sleep!\n"); +		if (!priv->thermal_throttle.advanced_tt) +			iwl_legacy_tt_handler(priv, +					      IWL_MINIMAL_POWER_THRESHOLD, +					      true); +		else +			iwl_advance_tt_handler(priv, +					       CT_KILL_THRESHOLD + 1, true); +	} +} + +/* Card State Notification indicated out of critical temperature + * since Card State Notification will not provide any temperature reading + * so pass the IWL_REDUCED_PERFORMANCE_THRESHOLD_2 temperature + * to iwl_legacy_tt_handler() to get out of IWL_CT_KILL state + */ +static void iwl_bg_ct_exit(struct work_struct *work) +{ +	struct iwl_priv *priv = container_of(work, struct iwl_priv, ct_exit); +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	if (!iwl_is_ready(priv)) +		return; + +	/* stop ct_kill_exit_tm timer */ +	del_timer_sync(&priv->thermal_throttle.ct_kill_exit_tm); + +	if (tt->state == IWL_TI_CT_KILL) { +		IWL_ERR(priv, +			"Device temperature below critical" +			"- ucode awake!\n"); +		/* +		 * exit from CT_KILL state +		 * reset the current temperature reading +		 */ +		priv->temperature = 0; +		if (!priv->thermal_throttle.advanced_tt) +			iwl_legacy_tt_handler(priv, +				      IWL_REDUCED_PERFORMANCE_THRESHOLD_2, +				      true); +		else +			iwl_advance_tt_handler(priv, CT_KILL_EXIT_THRESHOLD, +					       true); +	} +} + +void iwl_tt_enter_ct_kill(struct iwl_priv *priv) +{ +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	IWL_DEBUG_TEMP(priv, "Queueing critical temperature enter.\n"); +	queue_work(priv->workqueue, &priv->ct_enter); +} + +void iwl_tt_exit_ct_kill(struct iwl_priv *priv) +{ +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	IWL_DEBUG_TEMP(priv, "Queueing critical temperature exit.\n"); +	queue_work(priv->workqueue, &priv->ct_exit); +} + +static void iwl_bg_tt_work(struct work_struct *work) +{ +	struct iwl_priv *priv = container_of(work, struct iwl_priv, tt_work); +	s32 temp = priv->temperature; /* degrees CELSIUS except specified */ + +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	if (!priv->thermal_throttle.advanced_tt) +		iwl_legacy_tt_handler(priv, temp, false); +	else +		iwl_advance_tt_handler(priv, temp, false); +} + +void iwl_tt_handler(struct iwl_priv *priv) +{ +	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) +		return; + +	IWL_DEBUG_TEMP(priv, "Queueing thermal throttling work.\n"); +	queue_work(priv->workqueue, &priv->tt_work); +} + +/* Thermal throttling initialization + * For advance thermal throttling: + *     Initialize Thermal Index and temperature threshold table + *     Initialize thermal throttling restriction table + */ +void iwl_tt_initialize(struct iwl_priv *priv) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; +	int size = sizeof(struct iwl_tt_trans) * (IWL_TI_STATE_MAX - 1); +	struct iwl_tt_trans *transaction; + +	IWL_DEBUG_TEMP(priv, "Initialize Thermal Throttling\n"); + +	memset(tt, 0, sizeof(struct iwl_tt_mgmt)); + +	tt->state = IWL_TI_0; +	init_timer(&priv->thermal_throttle.ct_kill_exit_tm); +	priv->thermal_throttle.ct_kill_exit_tm.data = (unsigned long)priv; +	priv->thermal_throttle.ct_kill_exit_tm.function = +		iwl_tt_check_exit_ct_kill; +	init_timer(&priv->thermal_throttle.ct_kill_waiting_tm); +	priv->thermal_throttle.ct_kill_waiting_tm.data = +		(unsigned long)priv; +	priv->thermal_throttle.ct_kill_waiting_tm.function = +		iwl_tt_ready_for_ct_kill; +	/* setup deferred ct kill work */ +	INIT_WORK(&priv->tt_work, iwl_bg_tt_work); +	INIT_WORK(&priv->ct_enter, iwl_bg_ct_enter); +	INIT_WORK(&priv->ct_exit, iwl_bg_ct_exit); + +	if (priv->lib->adv_thermal_throttle) { +		IWL_DEBUG_TEMP(priv, "Advanced Thermal Throttling\n"); +		tt->restriction = kcalloc(IWL_TI_STATE_MAX, +					  sizeof(struct iwl_tt_restriction), +					  GFP_KERNEL); +		tt->transaction = kcalloc(IWL_TI_STATE_MAX * +					  (IWL_TI_STATE_MAX - 1), +					  sizeof(struct iwl_tt_trans), +					  GFP_KERNEL); +		if (!tt->restriction || !tt->transaction) { +			IWL_ERR(priv, "Fallback to Legacy Throttling\n"); +			priv->thermal_throttle.advanced_tt = false; +			kfree(tt->restriction); +			tt->restriction = NULL; +			kfree(tt->transaction); +			tt->transaction = NULL; +		} else { +			transaction = tt->transaction + +				(IWL_TI_0 * (IWL_TI_STATE_MAX - 1)); +			memcpy(transaction, &tt_range_0[0], size); +			transaction = tt->transaction + +				(IWL_TI_1 * (IWL_TI_STATE_MAX - 1)); +			memcpy(transaction, &tt_range_1[0], size); +			transaction = tt->transaction + +				(IWL_TI_2 * (IWL_TI_STATE_MAX - 1)); +			memcpy(transaction, &tt_range_2[0], size); +			transaction = tt->transaction + +				(IWL_TI_CT_KILL * (IWL_TI_STATE_MAX - 1)); +			memcpy(transaction, &tt_range_3[0], size); +			size = sizeof(struct iwl_tt_restriction) * +				IWL_TI_STATE_MAX; +			memcpy(tt->restriction, +				&restriction_range[0], size); +			priv->thermal_throttle.advanced_tt = true; +		} +	} else { +		IWL_DEBUG_TEMP(priv, "Legacy Thermal Throttling\n"); +		priv->thermal_throttle.advanced_tt = false; +	} +} + +/* cleanup thermal throttling management related memory and timer */ +void iwl_tt_exit(struct iwl_priv *priv) +{ +	struct iwl_tt_mgmt *tt = &priv->thermal_throttle; + +	/* stop ct_kill_exit_tm timer if activated */ +	del_timer_sync(&priv->thermal_throttle.ct_kill_exit_tm); +	/* stop ct_kill_waiting_tm timer if activated */ +	del_timer_sync(&priv->thermal_throttle.ct_kill_waiting_tm); +	cancel_work_sync(&priv->tt_work); +	cancel_work_sync(&priv->ct_enter); +	cancel_work_sync(&priv->ct_exit); + +	if (priv->thermal_throttle.advanced_tt) { +		/* free advance thermal throttling memory */ +		kfree(tt->restriction); +		tt->restriction = NULL; +		kfree(tt->transaction); +		tt->transaction = NULL; +	} +} diff --git a/drivers/net/wireless/iwlwifi/dvm/tt.h b/drivers/net/wireless/iwlwifi/dvm/tt.h new file mode 100644 index 00000000000..507726534b8 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/tt.h @@ -0,0 +1,128 @@ +/****************************************************************************** + * + * Copyright(c) 2007 - 2014 Intel Corporation. All rights reserved. + * + * Portions of this file are derived from the ipw3945 project, as well + * as portions of the ieee80211 subsystem header files. + * + * This program is free software; you can redistribute it and/or modify it + * under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for + * more details. + * + * You should have received a copy of the GNU General Public License along with + * this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA + * + * The full GNU General Public License is included in this distribution in the + * file called LICENSE. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + *****************************************************************************/ +#ifndef __iwl_tt_setting_h__ +#define __iwl_tt_setting_h__ + +#include "commands.h" + +#define IWL_ABSOLUTE_ZERO		0 +#define IWL_ABSOLUTE_MAX		0xFFFFFFFF +#define IWL_TT_INCREASE_MARGIN	5 +#define IWL_TT_CT_KILL_MARGIN	3 + +enum iwl_antenna_ok { +	IWL_ANT_OK_NONE, +	IWL_ANT_OK_SINGLE, +	IWL_ANT_OK_MULTI, +}; + +/* Thermal Throttling State Machine states */ +enum  iwl_tt_state { +	IWL_TI_0,	/* normal temperature, system power state */ +	IWL_TI_1,	/* high temperature detect, low power state */ +	IWL_TI_2,	/* higher temperature detected, lower power state */ +	IWL_TI_CT_KILL, /* critical temperature detected, lowest power state */ +	IWL_TI_STATE_MAX +}; + +/** + * struct iwl_tt_restriction - Thermal Throttling restriction table + * @tx_stream: number of tx stream allowed + * @is_ht: ht enable/disable + * @rx_stream: number of rx stream allowed + * + * This table is used by advance thermal throttling management + * based on the current thermal throttling state, and determines + * the number of tx/rx streams and the status of HT operation. + */ +struct iwl_tt_restriction { +	enum iwl_antenna_ok tx_stream; +	enum iwl_antenna_ok rx_stream; +	bool is_ht; +}; + +/** + * struct iwl_tt_trans - Thermal Throttling transaction table + * @next_state:  next thermal throttling mode + * @tt_low: low temperature threshold to change state + * @tt_high: high temperature threshold to change state + * + * This is used by the advanced thermal throttling algorithm + * to determine the next thermal state to go based on the + * current temperature. + */ +struct iwl_tt_trans { +	enum iwl_tt_state next_state; +	u32 tt_low; +	u32 tt_high; +}; + +/** + * struct iwl_tt_mgnt - Thermal Throttling Management structure + * @advanced_tt:    advanced thermal throttle required + * @state:          current Thermal Throttling state + * @tt_power_mode:  Thermal Throttling power mode index + *		    being used to set power level when + *		    when thermal throttling state != IWL_TI_0 + *		    the tt_power_mode should set to different + *		    power mode based on the current tt state + * @tt_previous_temperature: last measured temperature + * @iwl_tt_restriction: ptr to restriction tbl, used by advance + *		    thermal throttling to determine how many tx/rx streams + *		    should be used in tt state; and can HT be enabled or not + * @iwl_tt_trans: ptr to adv trans table, used by advance thermal throttling + *		    state transaction + * @ct_kill_toggle: used to toggle the CSR bit when checking uCode temperature + * @ct_kill_exit_tm: timer to exit thermal kill + */ +struct iwl_tt_mgmt { +	enum iwl_tt_state state; +	bool advanced_tt; +	u8 tt_power_mode; +	bool ct_kill_toggle; +#ifdef CONFIG_IWLWIFI_DEBUG +	s32 tt_previous_temp; +#endif +	struct iwl_tt_restriction *restriction; +	struct iwl_tt_trans *transaction; +	struct timer_list ct_kill_exit_tm; +	struct timer_list ct_kill_waiting_tm; +}; + +u8 iwl_tt_current_power_mode(struct iwl_priv *priv); +bool iwl_tt_is_low_power_state(struct iwl_priv *priv); +bool iwl_ht_enabled(struct iwl_priv *priv); +enum iwl_antenna_ok iwl_tx_ant_restriction(struct iwl_priv *priv); +enum iwl_antenna_ok iwl_rx_ant_restriction(struct iwl_priv *priv); +void iwl_tt_enter_ct_kill(struct iwl_priv *priv); +void iwl_tt_exit_ct_kill(struct iwl_priv *priv); +void iwl_tt_handler(struct iwl_priv *priv); +void iwl_tt_initialize(struct iwl_priv *priv); +void iwl_tt_exit(struct iwl_priv *priv); + +#endif  /* __iwl_tt_setting_h__ */ diff --git a/drivers/net/wireless/iwlwifi/dvm/tx.c b/drivers/net/wireless/iwlwifi/dvm/tx.c new file mode 100644 index 00000000000..3255a1723d1 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/tx.c @@ -0,0 +1,1418 @@ +/****************************************************************************** + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +#include <linux/kernel.h> +#include <linux/module.h> +#include <linux/sched.h> +#include <linux/ieee80211.h> +#include "iwl-io.h" +#include "iwl-trans.h" +#include "iwl-agn-hw.h" +#include "dev.h" +#include "agn.h" + +static const u8 tid_to_ac[] = { +	IEEE80211_AC_BE, +	IEEE80211_AC_BK, +	IEEE80211_AC_BK, +	IEEE80211_AC_BE, +	IEEE80211_AC_VI, +	IEEE80211_AC_VI, +	IEEE80211_AC_VO, +	IEEE80211_AC_VO, +}; + +static void iwlagn_tx_cmd_protection(struct iwl_priv *priv, +				     struct ieee80211_tx_info *info, +				     __le16 fc, __le32 *tx_flags) +{ +	if (info->control.rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS || +	    info->control.rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT || +	    info->flags & IEEE80211_TX_CTL_AMPDU) +		*tx_flags |= TX_CMD_FLG_PROT_REQUIRE_MSK; +} + +/* + * handle build REPLY_TX command notification. + */ +static void iwlagn_tx_cmd_build_basic(struct iwl_priv *priv, +				      struct sk_buff *skb, +				      struct iwl_tx_cmd *tx_cmd, +				      struct ieee80211_tx_info *info, +				      struct ieee80211_hdr *hdr, u8 sta_id) +{ +	__le16 fc = hdr->frame_control; +	__le32 tx_flags = tx_cmd->tx_flags; + +	tx_cmd->stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE; + +	if (!(info->flags & IEEE80211_TX_CTL_NO_ACK)) +		tx_flags |= TX_CMD_FLG_ACK_MSK; +	else +		tx_flags &= ~TX_CMD_FLG_ACK_MSK; + +	if (ieee80211_is_probe_resp(fc)) +		tx_flags |= TX_CMD_FLG_TSF_MSK; +	else if (ieee80211_is_back_req(fc)) +		tx_flags |= TX_CMD_FLG_ACK_MSK | TX_CMD_FLG_IMM_BA_RSP_MASK; +	else if (info->band == IEEE80211_BAND_2GHZ && +		 priv->lib->bt_params && +		 priv->lib->bt_params->advanced_bt_coexist && +		 (ieee80211_is_auth(fc) || ieee80211_is_assoc_req(fc) || +		 ieee80211_is_reassoc_req(fc) || +		 info->control.flags & IEEE80211_TX_CTRL_PORT_CTRL_PROTO)) +		tx_flags |= TX_CMD_FLG_IGNORE_BT; + + +	tx_cmd->sta_id = sta_id; +	if (ieee80211_has_morefrags(fc)) +		tx_flags |= TX_CMD_FLG_MORE_FRAG_MSK; + +	if (ieee80211_is_data_qos(fc)) { +		u8 *qc = ieee80211_get_qos_ctl(hdr); +		tx_cmd->tid_tspec = qc[0] & 0xf; +		tx_flags &= ~TX_CMD_FLG_SEQ_CTL_MSK; +	} else { +		tx_cmd->tid_tspec = IWL_TID_NON_QOS; +		if (info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ) +			tx_flags |= TX_CMD_FLG_SEQ_CTL_MSK; +		else +			tx_flags &= ~TX_CMD_FLG_SEQ_CTL_MSK; +	} + +	iwlagn_tx_cmd_protection(priv, info, fc, &tx_flags); + +	tx_flags &= ~(TX_CMD_FLG_ANT_SEL_MSK); +	if (ieee80211_is_mgmt(fc)) { +		if (ieee80211_is_assoc_req(fc) || ieee80211_is_reassoc_req(fc)) +			tx_cmd->timeout.pm_frame_timeout = cpu_to_le16(3); +		else +			tx_cmd->timeout.pm_frame_timeout = cpu_to_le16(2); +	} else { +		tx_cmd->timeout.pm_frame_timeout = 0; +	} + +	tx_cmd->driver_txop = 0; +	tx_cmd->tx_flags = tx_flags; +	tx_cmd->next_frame_len = 0; +} + +static void iwlagn_tx_cmd_build_rate(struct iwl_priv *priv, +				     struct iwl_tx_cmd *tx_cmd, +				     struct ieee80211_tx_info *info, +				     struct ieee80211_sta *sta, +				     __le16 fc) +{ +	u32 rate_flags; +	int rate_idx; +	u8 rts_retry_limit; +	u8 data_retry_limit; +	u8 rate_plcp; + +	if (priv->wowlan) { +		rts_retry_limit = IWLAGN_LOW_RETRY_LIMIT; +		data_retry_limit = IWLAGN_LOW_RETRY_LIMIT; +	} else { +		/* Set retry limit on RTS packets */ +		rts_retry_limit = IWLAGN_RTS_DFAULT_RETRY_LIMIT; + +		/* Set retry limit on DATA packets and Probe Responses*/ +		if (ieee80211_is_probe_resp(fc)) { +			data_retry_limit = IWLAGN_MGMT_DFAULT_RETRY_LIMIT; +			rts_retry_limit = +				min(data_retry_limit, rts_retry_limit); +		} else if (ieee80211_is_back_req(fc)) +			data_retry_limit = IWLAGN_BAR_DFAULT_RETRY_LIMIT; +		else +			data_retry_limit = IWLAGN_DEFAULT_TX_RETRY; +	} + +	tx_cmd->data_retry_limit = data_retry_limit; +	tx_cmd->rts_retry_limit = rts_retry_limit; + +	/* DATA packets will use the uCode station table for rate/antenna +	 * selection */ +	if (ieee80211_is_data(fc)) { +		tx_cmd->initial_rate_index = 0; +		tx_cmd->tx_flags |= TX_CMD_FLG_STA_RATE_MSK; +		return; +	} else if (ieee80211_is_back_req(fc)) +		tx_cmd->tx_flags |= TX_CMD_FLG_STA_RATE_MSK; + +	/** +	 * If the current TX rate stored in mac80211 has the MCS bit set, it's +	 * not really a TX rate.  Thus, we use the lowest supported rate for +	 * this band.  Also use the lowest supported rate if the stored rate +	 * index is invalid. +	 */ +	rate_idx = info->control.rates[0].idx; +	if (info->control.rates[0].flags & IEEE80211_TX_RC_MCS || +			(rate_idx < 0) || (rate_idx > IWL_RATE_COUNT_LEGACY)) +		rate_idx = rate_lowest_index( +				&priv->nvm_data->bands[info->band], sta); +	/* For 5 GHZ band, remap mac80211 rate indices into driver indices */ +	if (info->band == IEEE80211_BAND_5GHZ) +		rate_idx += IWL_FIRST_OFDM_RATE; +	/* Get PLCP rate for tx_cmd->rate_n_flags */ +	rate_plcp = iwl_rates[rate_idx].plcp; +	/* Zero out flags for this packet */ +	rate_flags = 0; + +	/* Set CCK flag as needed */ +	if ((rate_idx >= IWL_FIRST_CCK_RATE) && (rate_idx <= IWL_LAST_CCK_RATE)) +		rate_flags |= RATE_MCS_CCK_MSK; + +	/* Set up antennas */ +	 if (priv->lib->bt_params && +	     priv->lib->bt_params->advanced_bt_coexist && +	     priv->bt_full_concurrent) { +		/* operated as 1x1 in full concurrency mode */ +		priv->mgmt_tx_ant = iwl_toggle_tx_ant(priv, priv->mgmt_tx_ant, +				first_antenna(priv->nvm_data->valid_tx_ant)); +	} else +		priv->mgmt_tx_ant = iwl_toggle_tx_ant( +					priv, priv->mgmt_tx_ant, +					priv->nvm_data->valid_tx_ant); +	rate_flags |= iwl_ant_idx_to_flags(priv->mgmt_tx_ant); + +	/* Set the rate in the TX cmd */ +	tx_cmd->rate_n_flags = iwl_hw_set_rate_n_flags(rate_plcp, rate_flags); +} + +static void iwlagn_tx_cmd_build_hwcrypto(struct iwl_priv *priv, +					 struct ieee80211_tx_info *info, +					 struct iwl_tx_cmd *tx_cmd, +					 struct sk_buff *skb_frag) +{ +	struct ieee80211_key_conf *keyconf = info->control.hw_key; + +	switch (keyconf->cipher) { +	case WLAN_CIPHER_SUITE_CCMP: +		tx_cmd->sec_ctl = TX_CMD_SEC_CCM; +		memcpy(tx_cmd->key, keyconf->key, keyconf->keylen); +		if (info->flags & IEEE80211_TX_CTL_AMPDU) +			tx_cmd->tx_flags |= TX_CMD_FLG_AGG_CCMP_MSK; +		break; + +	case WLAN_CIPHER_SUITE_TKIP: +		tx_cmd->sec_ctl = TX_CMD_SEC_TKIP; +		ieee80211_get_tkip_p2k(keyconf, skb_frag, tx_cmd->key); +		break; + +	case WLAN_CIPHER_SUITE_WEP104: +		tx_cmd->sec_ctl |= TX_CMD_SEC_KEY128; +		/* fall through */ +	case WLAN_CIPHER_SUITE_WEP40: +		tx_cmd->sec_ctl |= (TX_CMD_SEC_WEP | +			(keyconf->keyidx & TX_CMD_SEC_MSK) << TX_CMD_SEC_SHIFT); + +		memcpy(&tx_cmd->key[3], keyconf->key, keyconf->keylen); + +		IWL_DEBUG_TX(priv, "Configuring packet for WEP encryption " +			     "with key %d\n", keyconf->keyidx); +		break; + +	default: +		IWL_ERR(priv, "Unknown encode cipher %x\n", keyconf->cipher); +		break; +	} +} + +/** + * iwl_sta_id_or_broadcast - return sta_id or broadcast sta + * @context: the current context + * @sta: mac80211 station + * + * In certain circumstances mac80211 passes a station pointer + * that may be %NULL, for example during TX or key setup. In + * that case, we need to use the broadcast station, so this + * inline wraps that pattern. + */ +static int iwl_sta_id_or_broadcast(struct iwl_rxon_context *context, +				   struct ieee80211_sta *sta) +{ +	int sta_id; + +	if (!sta) +		return context->bcast_sta_id; + +	sta_id = iwl_sta_id(sta); + +	/* +	 * mac80211 should not be passing a partially +	 * initialised station! +	 */ +	WARN_ON(sta_id == IWL_INVALID_STATION); + +	return sta_id; +} + +/* + * start REPLY_TX command process + */ +int iwlagn_tx_skb(struct iwl_priv *priv, +		  struct ieee80211_sta *sta, +		  struct sk_buff *skb) +{ +	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data; +	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); +	struct iwl_station_priv *sta_priv = NULL; +	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS]; +	struct iwl_device_cmd *dev_cmd; +	struct iwl_tx_cmd *tx_cmd; +	__le16 fc; +	u8 hdr_len; +	u16 len, seq_number = 0; +	u8 sta_id, tid = IWL_MAX_TID_COUNT; +	bool is_agg = false, is_data_qos = false; +	int txq_id; + +	if (info->control.vif) +		ctx = iwl_rxon_ctx_from_vif(info->control.vif); + +	if (iwl_is_rfkill(priv)) { +		IWL_DEBUG_DROP(priv, "Dropping - RF KILL\n"); +		goto drop_unlock_priv; +	} + +	fc = hdr->frame_control; + +#ifdef CONFIG_IWLWIFI_DEBUG +	if (ieee80211_is_auth(fc)) +		IWL_DEBUG_TX(priv, "Sending AUTH frame\n"); +	else if (ieee80211_is_assoc_req(fc)) +		IWL_DEBUG_TX(priv, "Sending ASSOC frame\n"); +	else if (ieee80211_is_reassoc_req(fc)) +		IWL_DEBUG_TX(priv, "Sending REASSOC frame\n"); +#endif + +	if (unlikely(ieee80211_is_probe_resp(fc))) { +		struct iwl_wipan_noa_data *noa_data = +			rcu_dereference(priv->noa_data); + +		if (noa_data && +		    pskb_expand_head(skb, 0, noa_data->length, +				     GFP_ATOMIC) == 0) { +			memcpy(skb_put(skb, noa_data->length), +			       noa_data->data, noa_data->length); +			hdr = (struct ieee80211_hdr *)skb->data; +		} +	} + +	hdr_len = ieee80211_hdrlen(fc); + +	/* For management frames use broadcast id to do not break aggregation */ +	if (!ieee80211_is_data(fc)) +		sta_id = ctx->bcast_sta_id; +	else { +		/* Find index into station table for destination station */ +		sta_id = iwl_sta_id_or_broadcast(ctx, sta); +		if (sta_id == IWL_INVALID_STATION) { +			IWL_DEBUG_DROP(priv, "Dropping - INVALID STATION: %pM\n", +				       hdr->addr1); +			goto drop_unlock_priv; +		} +	} + +	if (sta) +		sta_priv = (void *)sta->drv_priv; + +	if (sta_priv && sta_priv->asleep && +	    (info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER)) { +		/* +		 * This sends an asynchronous command to the device, +		 * but we can rely on it being processed before the +		 * next frame is processed -- and the next frame to +		 * this station is the one that will consume this +		 * counter. +		 * For now set the counter to just 1 since we do not +		 * support uAPSD yet. +		 * +		 * FIXME: If we get two non-bufferable frames one +		 * after the other, we might only send out one of +		 * them because this is racy. +		 */ +		iwl_sta_modify_sleep_tx_count(priv, sta_id, 1); +	} + +	dev_cmd = iwl_trans_alloc_tx_cmd(priv->trans); + +	if (unlikely(!dev_cmd)) +		goto drop_unlock_priv; + +	memset(dev_cmd, 0, sizeof(*dev_cmd)); +	dev_cmd->hdr.cmd = REPLY_TX; +	tx_cmd = (struct iwl_tx_cmd *) dev_cmd->payload; + +	/* Total # bytes to be transmitted */ +	len = (u16)skb->len; +	tx_cmd->len = cpu_to_le16(len); + +	if (info->control.hw_key) +		iwlagn_tx_cmd_build_hwcrypto(priv, info, tx_cmd, skb); + +	/* TODO need this for burst mode later on */ +	iwlagn_tx_cmd_build_basic(priv, skb, tx_cmd, info, hdr, sta_id); + +	iwlagn_tx_cmd_build_rate(priv, tx_cmd, info, sta, fc); + +	memset(&info->status, 0, sizeof(info->status)); + +	info->driver_data[0] = ctx; +	info->driver_data[1] = dev_cmd; +	/* From now on, we cannot access info->control */ + +	spin_lock(&priv->sta_lock); + +	if (ieee80211_is_data_qos(fc) && !ieee80211_is_qos_nullfunc(fc)) { +		u8 *qc = NULL; +		struct iwl_tid_data *tid_data; +		qc = ieee80211_get_qos_ctl(hdr); +		tid = qc[0] & IEEE80211_QOS_CTL_TID_MASK; +		if (WARN_ON_ONCE(tid >= IWL_MAX_TID_COUNT)) +			goto drop_unlock_sta; +		tid_data = &priv->tid_data[sta_id][tid]; + +		/* aggregation is on for this <sta,tid> */ +		if (info->flags & IEEE80211_TX_CTL_AMPDU && +		    tid_data->agg.state != IWL_AGG_ON) { +			IWL_ERR(priv, +				"TX_CTL_AMPDU while not in AGG: Tx flags = 0x%08x, agg.state = %d\n", +				info->flags, tid_data->agg.state); +			IWL_ERR(priv, "sta_id = %d, tid = %d seq_num = %d\n", +				sta_id, tid, +				IEEE80211_SEQ_TO_SN(tid_data->seq_number)); +			goto drop_unlock_sta; +		} + +		/* We can receive packets from the stack in IWL_AGG_{ON,OFF} +		 * only. Check this here. +		 */ +		if (WARN_ONCE(tid_data->agg.state != IWL_AGG_ON && +			      tid_data->agg.state != IWL_AGG_OFF, +			      "Tx while agg.state = %d\n", tid_data->agg.state)) +			goto drop_unlock_sta; + +		seq_number = tid_data->seq_number; +		seq_number &= IEEE80211_SCTL_SEQ; +		hdr->seq_ctrl &= cpu_to_le16(IEEE80211_SCTL_FRAG); +		hdr->seq_ctrl |= cpu_to_le16(seq_number); +		seq_number += 0x10; + +		if (info->flags & IEEE80211_TX_CTL_AMPDU) +			is_agg = true; +		is_data_qos = true; +	} + +	/* Copy MAC header from skb into command buffer */ +	memcpy(tx_cmd->hdr, hdr, hdr_len); + +	txq_id = info->hw_queue; + +	if (is_agg) +		txq_id = priv->tid_data[sta_id][tid].agg.txq_id; +	else if (info->flags & IEEE80211_TX_CTL_SEND_AFTER_DTIM) { +		/* +		 * The microcode will clear the more data +		 * bit in the last frame it transmits. +		 */ +		hdr->frame_control |= +			cpu_to_le16(IEEE80211_FCTL_MOREDATA); +	} + +	WARN_ON_ONCE(is_agg && +		     priv->queue_to_mac80211[txq_id] != info->hw_queue); + +	IWL_DEBUG_TX(priv, "TX to [%d|%d] Q:%d - seq: 0x%x\n", sta_id, tid, +		     txq_id, seq_number); + +	if (iwl_trans_tx(priv->trans, skb, dev_cmd, txq_id)) +		goto drop_unlock_sta; + +	if (is_data_qos && !ieee80211_has_morefrags(fc)) +		priv->tid_data[sta_id][tid].seq_number = seq_number; + +	spin_unlock(&priv->sta_lock); + +	/* +	 * Avoid atomic ops if it isn't an associated client. +	 * Also, if this is a packet for aggregation, don't +	 * increase the counter because the ucode will stop +	 * aggregation queues when their respective station +	 * goes to sleep. +	 */ +	if (sta_priv && sta_priv->client && !is_agg) +		atomic_inc(&sta_priv->pending_frames); + +	return 0; + +drop_unlock_sta: +	if (dev_cmd) +		iwl_trans_free_tx_cmd(priv->trans, dev_cmd); +	spin_unlock(&priv->sta_lock); +drop_unlock_priv: +	return -1; +} + +static int iwlagn_alloc_agg_txq(struct iwl_priv *priv, int mq) +{ +	int q; + +	for (q = IWLAGN_FIRST_AMPDU_QUEUE; +	     q < priv->cfg->base_params->num_of_queues; q++) { +		if (!test_and_set_bit(q, priv->agg_q_alloc)) { +			priv->queue_to_mac80211[q] = mq; +			return q; +		} +	} + +	return -ENOSPC; +} + +static void iwlagn_dealloc_agg_txq(struct iwl_priv *priv, int q) +{ +	clear_bit(q, priv->agg_q_alloc); +	priv->queue_to_mac80211[q] = IWL_INVALID_MAC80211_QUEUE; +} + +int iwlagn_tx_agg_stop(struct iwl_priv *priv, struct ieee80211_vif *vif, +			struct ieee80211_sta *sta, u16 tid) +{ +	struct iwl_tid_data *tid_data; +	int sta_id, txq_id; +	enum iwl_agg_state agg_state; + +	sta_id = iwl_sta_id(sta); + +	if (sta_id == IWL_INVALID_STATION) { +		IWL_ERR(priv, "Invalid station for AGG tid %d\n", tid); +		return -ENXIO; +	} + +	spin_lock_bh(&priv->sta_lock); + +	tid_data = &priv->tid_data[sta_id][tid]; +	txq_id = tid_data->agg.txq_id; + +	switch (tid_data->agg.state) { +	case IWL_EMPTYING_HW_QUEUE_ADDBA: +		/* +		* This can happen if the peer stops aggregation +		* again before we've had a chance to drain the +		* queue we selected previously, i.e. before the +		* session was really started completely. +		*/ +		IWL_DEBUG_HT(priv, "AGG stop before setup done\n"); +		goto turn_off; +	case IWL_AGG_STARTING: +		/* +		 * This can happen when the session is stopped before +		 * we receive ADDBA response +		 */ +		IWL_DEBUG_HT(priv, "AGG stop before AGG became operational\n"); +		goto turn_off; +	case IWL_AGG_ON: +		break; +	default: +		IWL_WARN(priv, +			 "Stopping AGG while state not ON or starting for %d on %d (%d)\n", +			 sta_id, tid, tid_data->agg.state); +		spin_unlock_bh(&priv->sta_lock); +		return 0; +	} + +	tid_data->agg.ssn = IEEE80211_SEQ_TO_SN(tid_data->seq_number); + +	/* There are still packets for this RA / TID in the HW */ +	if (!test_bit(txq_id, priv->agg_q_alloc)) { +		IWL_DEBUG_TX_QUEUES(priv, +			"stopping AGG on STA/TID %d/%d but hwq %d not used\n", +			sta_id, tid, txq_id); +	} else if (tid_data->agg.ssn != tid_data->next_reclaimed) { +		IWL_DEBUG_TX_QUEUES(priv, +				    "Can't proceed: ssn %d, next_recl = %d\n", +				    tid_data->agg.ssn, +				    tid_data->next_reclaimed); +		tid_data->agg.state = IWL_EMPTYING_HW_QUEUE_DELBA; +		spin_unlock_bh(&priv->sta_lock); +		return 0; +	} + +	IWL_DEBUG_TX_QUEUES(priv, "Can proceed: ssn = next_recl = %d\n", +			    tid_data->agg.ssn); +turn_off: +	agg_state = tid_data->agg.state; +	tid_data->agg.state = IWL_AGG_OFF; + +	spin_unlock_bh(&priv->sta_lock); + +	if (test_bit(txq_id, priv->agg_q_alloc)) { +		/* +		 * If the transport didn't know that we wanted to start +		 * agreggation, don't tell it that we want to stop them. +		 * This can happen when we don't get the addBA response on +		 * time, or we hadn't time to drain the AC queues. +		 */ +		if (agg_state == IWL_AGG_ON) +			iwl_trans_txq_disable(priv->trans, txq_id); +		else +			IWL_DEBUG_TX_QUEUES(priv, "Don't disable tx agg: %d\n", +					    agg_state); +		iwlagn_dealloc_agg_txq(priv, txq_id); +	} + +	ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid); + +	return 0; +} + +int iwlagn_tx_agg_start(struct iwl_priv *priv, struct ieee80211_vif *vif, +			struct ieee80211_sta *sta, u16 tid, u16 *ssn) +{ +	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif); +	struct iwl_tid_data *tid_data; +	int sta_id, txq_id, ret; + +	IWL_DEBUG_HT(priv, "TX AGG request on ra = %pM tid = %d\n", +		     sta->addr, tid); + +	sta_id = iwl_sta_id(sta); +	if (sta_id == IWL_INVALID_STATION) { +		IWL_ERR(priv, "Start AGG on invalid station\n"); +		return -ENXIO; +	} +	if (unlikely(tid >= IWL_MAX_TID_COUNT)) +		return -EINVAL; + +	if (priv->tid_data[sta_id][tid].agg.state != IWL_AGG_OFF) { +		IWL_ERR(priv, "Start AGG when state is not IWL_AGG_OFF !\n"); +		return -ENXIO; +	} + +	txq_id = iwlagn_alloc_agg_txq(priv, ctx->ac_to_queue[tid_to_ac[tid]]); +	if (txq_id < 0) { +		IWL_DEBUG_TX_QUEUES(priv, +			"No free aggregation queue for %pM/%d\n", +			sta->addr, tid); +		return txq_id; +	} + +	ret = iwl_sta_tx_modify_enable_tid(priv, sta_id, tid); +	if (ret) +		return ret; + +	spin_lock_bh(&priv->sta_lock); +	tid_data = &priv->tid_data[sta_id][tid]; +	tid_data->agg.ssn = IEEE80211_SEQ_TO_SN(tid_data->seq_number); +	tid_data->agg.txq_id = txq_id; + +	*ssn = tid_data->agg.ssn; + +	if (*ssn == tid_data->next_reclaimed) { +		IWL_DEBUG_TX_QUEUES(priv, "Can proceed: ssn = next_recl = %d\n", +				    tid_data->agg.ssn); +		tid_data->agg.state = IWL_AGG_STARTING; +		ieee80211_start_tx_ba_cb_irqsafe(vif, sta->addr, tid); +	} else { +		IWL_DEBUG_TX_QUEUES(priv, "Can't proceed: ssn %d, " +				    "next_reclaimed = %d\n", +				    tid_data->agg.ssn, +				    tid_data->next_reclaimed); +		tid_data->agg.state = IWL_EMPTYING_HW_QUEUE_ADDBA; +	} +	spin_unlock_bh(&priv->sta_lock); + +	return ret; +} + +int iwlagn_tx_agg_flush(struct iwl_priv *priv, struct ieee80211_vif *vif, +			struct ieee80211_sta *sta, u16 tid) +{ +	struct iwl_tid_data *tid_data; +	enum iwl_agg_state agg_state; +	int sta_id, txq_id; +	sta_id = iwl_sta_id(sta); + +	/* +	 * First set the agg state to OFF to avoid calling +	 * ieee80211_stop_tx_ba_cb in iwlagn_check_ratid_empty. +	 */ +	spin_lock_bh(&priv->sta_lock); + +	tid_data = &priv->tid_data[sta_id][tid]; +	txq_id = tid_data->agg.txq_id; +	agg_state = tid_data->agg.state; +	IWL_DEBUG_TX_QUEUES(priv, "Flush AGG: sta %d tid %d q %d state %d\n", +			    sta_id, tid, txq_id, tid_data->agg.state); + +	tid_data->agg.state = IWL_AGG_OFF; + +	spin_unlock_bh(&priv->sta_lock); + +	if (iwlagn_txfifo_flush(priv, BIT(txq_id))) +		IWL_ERR(priv, "Couldn't flush the AGG queue\n"); + +	if (test_bit(txq_id, priv->agg_q_alloc)) { +		/* +		 * If the transport didn't know that we wanted to start +		 * agreggation, don't tell it that we want to stop them. +		 * This can happen when we don't get the addBA response on +		 * time, or we hadn't time to drain the AC queues. +		 */ +		if (agg_state == IWL_AGG_ON) +			iwl_trans_txq_disable(priv->trans, txq_id); +		else +			IWL_DEBUG_TX_QUEUES(priv, "Don't disable tx agg: %d\n", +					    agg_state); +		iwlagn_dealloc_agg_txq(priv, txq_id); +	} + +	return 0; +} + +int iwlagn_tx_agg_oper(struct iwl_priv *priv, struct ieee80211_vif *vif, +			struct ieee80211_sta *sta, u16 tid, u8 buf_size) +{ +	struct iwl_station_priv *sta_priv = (void *) sta->drv_priv; +	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif); +	int q, fifo; +	u16 ssn; + +	buf_size = min_t(int, buf_size, LINK_QUAL_AGG_FRAME_LIMIT_DEF); + +	spin_lock_bh(&priv->sta_lock); +	ssn = priv->tid_data[sta_priv->sta_id][tid].agg.ssn; +	q = priv->tid_data[sta_priv->sta_id][tid].agg.txq_id; +	priv->tid_data[sta_priv->sta_id][tid].agg.state = IWL_AGG_ON; +	spin_unlock_bh(&priv->sta_lock); + +	fifo = ctx->ac_to_fifo[tid_to_ac[tid]]; + +	iwl_trans_txq_enable(priv->trans, q, fifo, sta_priv->sta_id, tid, +			     buf_size, ssn); + +	/* +	 * If the limit is 0, then it wasn't initialised yet, +	 * use the default. We can do that since we take the +	 * minimum below, and we don't want to go above our +	 * default due to hardware restrictions. +	 */ +	if (sta_priv->max_agg_bufsize == 0) +		sta_priv->max_agg_bufsize = +			LINK_QUAL_AGG_FRAME_LIMIT_DEF; + +	/* +	 * Even though in theory the peer could have different +	 * aggregation reorder buffer sizes for different sessions, +	 * our ucode doesn't allow for that and has a global limit +	 * for each station. Therefore, use the minimum of all the +	 * aggregation sessions and our default value. +	 */ +	sta_priv->max_agg_bufsize = +		min(sta_priv->max_agg_bufsize, buf_size); + +	if (priv->hw_params.use_rts_for_aggregation) { +		/* +		 * switch to RTS/CTS if it is the prefer protection +		 * method for HT traffic +		 */ + +		sta_priv->lq_sta.lq.general_params.flags |= +			LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK; +	} +	priv->agg_tids_count++; +	IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n", +		     priv->agg_tids_count); + +	sta_priv->lq_sta.lq.agg_params.agg_frame_cnt_limit = +		sta_priv->max_agg_bufsize; + +	IWL_DEBUG_HT(priv, "Tx aggregation enabled on ra = %pM tid = %d\n", +		 sta->addr, tid); + +	return iwl_send_lq_cmd(priv, ctx, +			&sta_priv->lq_sta.lq, CMD_ASYNC, false); +} + +static void iwlagn_check_ratid_empty(struct iwl_priv *priv, int sta_id, u8 tid) +{ +	struct iwl_tid_data *tid_data = &priv->tid_data[sta_id][tid]; +	enum iwl_rxon_context_id ctx; +	struct ieee80211_vif *vif; +	u8 *addr; + +	lockdep_assert_held(&priv->sta_lock); + +	addr = priv->stations[sta_id].sta.sta.addr; +	ctx = priv->stations[sta_id].ctxid; +	vif = priv->contexts[ctx].vif; + +	switch (priv->tid_data[sta_id][tid].agg.state) { +	case IWL_EMPTYING_HW_QUEUE_DELBA: +		/* There are no packets for this RA / TID in the HW any more */ +		if (tid_data->agg.ssn == tid_data->next_reclaimed) { +			IWL_DEBUG_TX_QUEUES(priv, +				"Can continue DELBA flow ssn = next_recl = %d\n", +				tid_data->next_reclaimed); +			iwl_trans_txq_disable(priv->trans, +					      tid_data->agg.txq_id); +			iwlagn_dealloc_agg_txq(priv, tid_data->agg.txq_id); +			tid_data->agg.state = IWL_AGG_OFF; +			ieee80211_stop_tx_ba_cb_irqsafe(vif, addr, tid); +		} +		break; +	case IWL_EMPTYING_HW_QUEUE_ADDBA: +		/* There are no packets for this RA / TID in the HW any more */ +		if (tid_data->agg.ssn == tid_data->next_reclaimed) { +			IWL_DEBUG_TX_QUEUES(priv, +				"Can continue ADDBA flow ssn = next_recl = %d\n", +				tid_data->next_reclaimed); +			tid_data->agg.state = IWL_AGG_STARTING; +			ieee80211_start_tx_ba_cb_irqsafe(vif, addr, tid); +		} +		break; +	default: +		break; +	} +} + +static void iwlagn_non_agg_tx_status(struct iwl_priv *priv, +				     struct iwl_rxon_context *ctx, +				     const u8 *addr1) +{ +	struct ieee80211_sta *sta; +	struct iwl_station_priv *sta_priv; + +	rcu_read_lock(); +	sta = ieee80211_find_sta(ctx->vif, addr1); +	if (sta) { +		sta_priv = (void *)sta->drv_priv; +		/* avoid atomic ops if this isn't a client */ +		if (sta_priv->client && +		    atomic_dec_return(&sta_priv->pending_frames) == 0) +			ieee80211_sta_block_awake(priv->hw, sta, false); +	} +	rcu_read_unlock(); +} + +/** + * translate ucode response to mac80211 tx status control values + */ +static void iwlagn_hwrate_to_tx_control(struct iwl_priv *priv, u32 rate_n_flags, +				  struct ieee80211_tx_info *info) +{ +	struct ieee80211_tx_rate *r = &info->status.rates[0]; + +	info->status.antenna = +		((rate_n_flags & RATE_MCS_ANT_ABC_MSK) >> RATE_MCS_ANT_POS); +	if (rate_n_flags & RATE_MCS_HT_MSK) +		r->flags |= IEEE80211_TX_RC_MCS; +	if (rate_n_flags & RATE_MCS_GF_MSK) +		r->flags |= IEEE80211_TX_RC_GREEN_FIELD; +	if (rate_n_flags & RATE_MCS_HT40_MSK) +		r->flags |= IEEE80211_TX_RC_40_MHZ_WIDTH; +	if (rate_n_flags & RATE_MCS_DUP_MSK) +		r->flags |= IEEE80211_TX_RC_DUP_DATA; +	if (rate_n_flags & RATE_MCS_SGI_MSK) +		r->flags |= IEEE80211_TX_RC_SHORT_GI; +	r->idx = iwlagn_hwrate_to_mac80211_idx(rate_n_flags, info->band); +} + +#ifdef CONFIG_IWLWIFI_DEBUG +const char *iwl_get_tx_fail_reason(u32 status) +{ +#define TX_STATUS_FAIL(x) case TX_STATUS_FAIL_ ## x: return #x +#define TX_STATUS_POSTPONE(x) case TX_STATUS_POSTPONE_ ## x: return #x + +	switch (status & TX_STATUS_MSK) { +	case TX_STATUS_SUCCESS: +		return "SUCCESS"; +	TX_STATUS_POSTPONE(DELAY); +	TX_STATUS_POSTPONE(FEW_BYTES); +	TX_STATUS_POSTPONE(BT_PRIO); +	TX_STATUS_POSTPONE(QUIET_PERIOD); +	TX_STATUS_POSTPONE(CALC_TTAK); +	TX_STATUS_FAIL(INTERNAL_CROSSED_RETRY); +	TX_STATUS_FAIL(SHORT_LIMIT); +	TX_STATUS_FAIL(LONG_LIMIT); +	TX_STATUS_FAIL(FIFO_UNDERRUN); +	TX_STATUS_FAIL(DRAIN_FLOW); +	TX_STATUS_FAIL(RFKILL_FLUSH); +	TX_STATUS_FAIL(LIFE_EXPIRE); +	TX_STATUS_FAIL(DEST_PS); +	TX_STATUS_FAIL(HOST_ABORTED); +	TX_STATUS_FAIL(BT_RETRY); +	TX_STATUS_FAIL(STA_INVALID); +	TX_STATUS_FAIL(FRAG_DROPPED); +	TX_STATUS_FAIL(TID_DISABLE); +	TX_STATUS_FAIL(FIFO_FLUSHED); +	TX_STATUS_FAIL(INSUFFICIENT_CF_POLL); +	TX_STATUS_FAIL(PASSIVE_NO_RX); +	TX_STATUS_FAIL(NO_BEACON_ON_RADAR); +	} + +	return "UNKNOWN"; + +#undef TX_STATUS_FAIL +#undef TX_STATUS_POSTPONE +} +#endif /* CONFIG_IWLWIFI_DEBUG */ + +static void iwlagn_count_agg_tx_err_status(struct iwl_priv *priv, u16 status) +{ +	status &= AGG_TX_STATUS_MSK; + +	switch (status) { +	case AGG_TX_STATE_UNDERRUN_MSK: +		priv->reply_agg_tx_stats.underrun++; +		break; +	case AGG_TX_STATE_BT_PRIO_MSK: +		priv->reply_agg_tx_stats.bt_prio++; +		break; +	case AGG_TX_STATE_FEW_BYTES_MSK: +		priv->reply_agg_tx_stats.few_bytes++; +		break; +	case AGG_TX_STATE_ABORT_MSK: +		priv->reply_agg_tx_stats.abort++; +		break; +	case AGG_TX_STATE_LAST_SENT_TTL_MSK: +		priv->reply_agg_tx_stats.last_sent_ttl++; +		break; +	case AGG_TX_STATE_LAST_SENT_TRY_CNT_MSK: +		priv->reply_agg_tx_stats.last_sent_try++; +		break; +	case AGG_TX_STATE_LAST_SENT_BT_KILL_MSK: +		priv->reply_agg_tx_stats.last_sent_bt_kill++; +		break; +	case AGG_TX_STATE_SCD_QUERY_MSK: +		priv->reply_agg_tx_stats.scd_query++; +		break; +	case AGG_TX_STATE_TEST_BAD_CRC32_MSK: +		priv->reply_agg_tx_stats.bad_crc32++; +		break; +	case AGG_TX_STATE_RESPONSE_MSK: +		priv->reply_agg_tx_stats.response++; +		break; +	case AGG_TX_STATE_DUMP_TX_MSK: +		priv->reply_agg_tx_stats.dump_tx++; +		break; +	case AGG_TX_STATE_DELAY_TX_MSK: +		priv->reply_agg_tx_stats.delay_tx++; +		break; +	default: +		priv->reply_agg_tx_stats.unknown++; +		break; +	} +} + +static inline u32 iwlagn_get_scd_ssn(struct iwlagn_tx_resp *tx_resp) +{ +	return le32_to_cpup((__le32 *)&tx_resp->status + +			    tx_resp->frame_count) & IEEE80211_MAX_SN; +} + +static void iwl_rx_reply_tx_agg(struct iwl_priv *priv, +				struct iwlagn_tx_resp *tx_resp) +{ +	struct agg_tx_status *frame_status = &tx_resp->status; +	int tid = (tx_resp->ra_tid & IWLAGN_TX_RES_TID_MSK) >> +		IWLAGN_TX_RES_TID_POS; +	int sta_id = (tx_resp->ra_tid & IWLAGN_TX_RES_RA_MSK) >> +		IWLAGN_TX_RES_RA_POS; +	struct iwl_ht_agg *agg = &priv->tid_data[sta_id][tid].agg; +	u32 status = le16_to_cpu(tx_resp->status.status); +	int i; + +	WARN_ON(tid == IWL_TID_NON_QOS); + +	if (agg->wait_for_ba) +		IWL_DEBUG_TX_REPLY(priv, +			"got tx response w/o block-ack\n"); + +	agg->rate_n_flags = le32_to_cpu(tx_resp->rate_n_flags); +	agg->wait_for_ba = (tx_resp->frame_count > 1); + +	/* +	 * If the BT kill count is non-zero, we'll get this +	 * notification again. +	 */ +	if (tx_resp->bt_kill_count && tx_resp->frame_count == 1 && +	    priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist) { +		IWL_DEBUG_COEX(priv, "receive reply tx w/ bt_kill\n"); +	} + +	if (tx_resp->frame_count == 1) +		return; + +	IWL_DEBUG_TX_REPLY(priv, "TXQ %d initial_rate 0x%x ssn %d frm_cnt %d\n", +			   agg->txq_id, +			   le32_to_cpu(tx_resp->rate_n_flags), +			   iwlagn_get_scd_ssn(tx_resp), tx_resp->frame_count); + +	/* Construct bit-map of pending frames within Tx window */ +	for (i = 0; i < tx_resp->frame_count; i++) { +		u16 fstatus = le16_to_cpu(frame_status[i].status); +		u8 retry_cnt = (fstatus & AGG_TX_TRY_MSK) >> AGG_TX_TRY_POS; + +		if (status & AGG_TX_STATUS_MSK) +			iwlagn_count_agg_tx_err_status(priv, fstatus); + +		if (status & (AGG_TX_STATE_FEW_BYTES_MSK | +			      AGG_TX_STATE_ABORT_MSK)) +			continue; + +		if (status & AGG_TX_STATUS_MSK || retry_cnt > 1) +			IWL_DEBUG_TX_REPLY(priv, +					   "%d: status %s (0x%04x), try-count (0x%01x)\n", +					   i, +					   iwl_get_agg_tx_fail_reason(fstatus), +					   fstatus & AGG_TX_STATUS_MSK, +					   retry_cnt); +	} +} + +#ifdef CONFIG_IWLWIFI_DEBUG +#define AGG_TX_STATE_FAIL(x) case AGG_TX_STATE_ ## x: return #x + +const char *iwl_get_agg_tx_fail_reason(u16 status) +{ +	status &= AGG_TX_STATUS_MSK; +	switch (status) { +	case AGG_TX_STATE_TRANSMITTED: +		return "SUCCESS"; +		AGG_TX_STATE_FAIL(UNDERRUN_MSK); +		AGG_TX_STATE_FAIL(BT_PRIO_MSK); +		AGG_TX_STATE_FAIL(FEW_BYTES_MSK); +		AGG_TX_STATE_FAIL(ABORT_MSK); +		AGG_TX_STATE_FAIL(LAST_SENT_TTL_MSK); +		AGG_TX_STATE_FAIL(LAST_SENT_TRY_CNT_MSK); +		AGG_TX_STATE_FAIL(LAST_SENT_BT_KILL_MSK); +		AGG_TX_STATE_FAIL(SCD_QUERY_MSK); +		AGG_TX_STATE_FAIL(TEST_BAD_CRC32_MSK); +		AGG_TX_STATE_FAIL(RESPONSE_MSK); +		AGG_TX_STATE_FAIL(DUMP_TX_MSK); +		AGG_TX_STATE_FAIL(DELAY_TX_MSK); +	} + +	return "UNKNOWN"; +} +#endif /* CONFIG_IWLWIFI_DEBUG */ + +static void iwlagn_count_tx_err_status(struct iwl_priv *priv, u16 status) +{ +	status &= TX_STATUS_MSK; + +	switch (status) { +	case TX_STATUS_POSTPONE_DELAY: +		priv->reply_tx_stats.pp_delay++; +		break; +	case TX_STATUS_POSTPONE_FEW_BYTES: +		priv->reply_tx_stats.pp_few_bytes++; +		break; +	case TX_STATUS_POSTPONE_BT_PRIO: +		priv->reply_tx_stats.pp_bt_prio++; +		break; +	case TX_STATUS_POSTPONE_QUIET_PERIOD: +		priv->reply_tx_stats.pp_quiet_period++; +		break; +	case TX_STATUS_POSTPONE_CALC_TTAK: +		priv->reply_tx_stats.pp_calc_ttak++; +		break; +	case TX_STATUS_FAIL_INTERNAL_CROSSED_RETRY: +		priv->reply_tx_stats.int_crossed_retry++; +		break; +	case TX_STATUS_FAIL_SHORT_LIMIT: +		priv->reply_tx_stats.short_limit++; +		break; +	case TX_STATUS_FAIL_LONG_LIMIT: +		priv->reply_tx_stats.long_limit++; +		break; +	case TX_STATUS_FAIL_FIFO_UNDERRUN: +		priv->reply_tx_stats.fifo_underrun++; +		break; +	case TX_STATUS_FAIL_DRAIN_FLOW: +		priv->reply_tx_stats.drain_flow++; +		break; +	case TX_STATUS_FAIL_RFKILL_FLUSH: +		priv->reply_tx_stats.rfkill_flush++; +		break; +	case TX_STATUS_FAIL_LIFE_EXPIRE: +		priv->reply_tx_stats.life_expire++; +		break; +	case TX_STATUS_FAIL_DEST_PS: +		priv->reply_tx_stats.dest_ps++; +		break; +	case TX_STATUS_FAIL_HOST_ABORTED: +		priv->reply_tx_stats.host_abort++; +		break; +	case TX_STATUS_FAIL_BT_RETRY: +		priv->reply_tx_stats.bt_retry++; +		break; +	case TX_STATUS_FAIL_STA_INVALID: +		priv->reply_tx_stats.sta_invalid++; +		break; +	case TX_STATUS_FAIL_FRAG_DROPPED: +		priv->reply_tx_stats.frag_drop++; +		break; +	case TX_STATUS_FAIL_TID_DISABLE: +		priv->reply_tx_stats.tid_disable++; +		break; +	case TX_STATUS_FAIL_FIFO_FLUSHED: +		priv->reply_tx_stats.fifo_flush++; +		break; +	case TX_STATUS_FAIL_INSUFFICIENT_CF_POLL: +		priv->reply_tx_stats.insuff_cf_poll++; +		break; +	case TX_STATUS_FAIL_PASSIVE_NO_RX: +		priv->reply_tx_stats.fail_hw_drop++; +		break; +	case TX_STATUS_FAIL_NO_BEACON_ON_RADAR: +		priv->reply_tx_stats.sta_color_mismatch++; +		break; +	default: +		priv->reply_tx_stats.unknown++; +		break; +	} +} + +static void iwlagn_set_tx_status(struct iwl_priv *priv, +				 struct ieee80211_tx_info *info, +				 struct iwlagn_tx_resp *tx_resp) +{ +	u16 status = le16_to_cpu(tx_resp->status.status); + +	info->flags &= ~IEEE80211_TX_CTL_AMPDU; + +	info->status.rates[0].count = tx_resp->failure_frame + 1; +	info->flags |= iwl_tx_status_to_mac80211(status); +	iwlagn_hwrate_to_tx_control(priv, le32_to_cpu(tx_resp->rate_n_flags), +				    info); +	if (!iwl_is_tx_success(status)) +		iwlagn_count_tx_err_status(priv, status); +} + +static void iwl_check_abort_status(struct iwl_priv *priv, +			    u8 frame_count, u32 status) +{ +	if (frame_count == 1 && status == TX_STATUS_FAIL_RFKILL_FLUSH) { +		IWL_ERR(priv, "Tx flush command to flush out all frames\n"); +		if (!test_bit(STATUS_EXIT_PENDING, &priv->status)) +			queue_work(priv->workqueue, &priv->tx_flush); +	} +} + +int iwlagn_rx_reply_tx(struct iwl_priv *priv, struct iwl_rx_cmd_buffer *rxb, +			       struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	u16 sequence = le16_to_cpu(pkt->hdr.sequence); +	int txq_id = SEQ_TO_QUEUE(sequence); +	int cmd_index __maybe_unused = SEQ_TO_INDEX(sequence); +	struct iwlagn_tx_resp *tx_resp = (void *)pkt->data; +	struct ieee80211_hdr *hdr; +	u32 status = le16_to_cpu(tx_resp->status.status); +	u16 ssn = iwlagn_get_scd_ssn(tx_resp); +	int tid; +	int sta_id; +	int freed; +	struct ieee80211_tx_info *info; +	struct sk_buff_head skbs; +	struct sk_buff *skb; +	struct iwl_rxon_context *ctx; +	bool is_agg = (txq_id >= IWLAGN_FIRST_AMPDU_QUEUE); + +	tid = (tx_resp->ra_tid & IWLAGN_TX_RES_TID_MSK) >> +		IWLAGN_TX_RES_TID_POS; +	sta_id = (tx_resp->ra_tid & IWLAGN_TX_RES_RA_MSK) >> +		IWLAGN_TX_RES_RA_POS; + +	spin_lock_bh(&priv->sta_lock); + +	if (is_agg) { +		WARN_ON_ONCE(sta_id >= IWLAGN_STATION_COUNT || +			     tid >= IWL_MAX_TID_COUNT); +		if (txq_id != priv->tid_data[sta_id][tid].agg.txq_id) +			IWL_ERR(priv, "txq_id mismatch: %d %d\n", txq_id, +				priv->tid_data[sta_id][tid].agg.txq_id); +		iwl_rx_reply_tx_agg(priv, tx_resp); +	} + +	__skb_queue_head_init(&skbs); + +	if (tx_resp->frame_count == 1) { +		u16 next_reclaimed = le16_to_cpu(tx_resp->seq_ctl); +		next_reclaimed = IEEE80211_SEQ_TO_SN(next_reclaimed + 0x10); + +		if (is_agg) { +			/* If this is an aggregation queue, we can rely on the +			 * ssn since the wifi sequence number corresponds to +			 * the index in the TFD ring (%256). +			 * The seq_ctl is the sequence control of the packet +			 * to which this Tx response relates. But if there is a +			 * hole in the bitmap of the BA we received, this Tx +			 * response may allow to reclaim the hole and all the +			 * subsequent packets that were already acked. +			 * In that case, seq_ctl != ssn, and the next packet +			 * to be reclaimed will be ssn and not seq_ctl. +			 */ +			next_reclaimed = ssn; +		} + +		if (tid != IWL_TID_NON_QOS) { +			priv->tid_data[sta_id][tid].next_reclaimed = +				next_reclaimed; +			IWL_DEBUG_TX_REPLY(priv, "Next reclaimed packet:%d\n", +						  next_reclaimed); +		} + +		iwl_trans_reclaim(priv->trans, txq_id, ssn, &skbs); + +		iwlagn_check_ratid_empty(priv, sta_id, tid); +		freed = 0; + +		/* process frames */ +		skb_queue_walk(&skbs, skb) { +			hdr = (struct ieee80211_hdr *)skb->data; + +			if (!ieee80211_is_data_qos(hdr->frame_control)) +				priv->last_seq_ctl = tx_resp->seq_ctl; + +			info = IEEE80211_SKB_CB(skb); +			ctx = info->driver_data[0]; +			iwl_trans_free_tx_cmd(priv->trans, +					      info->driver_data[1]); + +			memset(&info->status, 0, sizeof(info->status)); + +			if (status == TX_STATUS_FAIL_PASSIVE_NO_RX && +			    ctx->vif && +			    ctx->vif->type == NL80211_IFTYPE_STATION) { +				/* block and stop all queues */ +				priv->passive_no_rx = true; +				IWL_DEBUG_TX_QUEUES(priv, +					"stop all queues: passive channel\n"); +				ieee80211_stop_queues(priv->hw); + +				IWL_DEBUG_TX_REPLY(priv, +					   "TXQ %d status %s (0x%08x) " +					   "rate_n_flags 0x%x retries %d\n", +					   txq_id, +					   iwl_get_tx_fail_reason(status), +					   status, +					   le32_to_cpu(tx_resp->rate_n_flags), +					   tx_resp->failure_frame); + +				IWL_DEBUG_TX_REPLY(priv, +					   "FrameCnt = %d, idx=%d\n", +					   tx_resp->frame_count, cmd_index); +			} + +			/* check if BAR is needed */ +			if (is_agg && !iwl_is_tx_success(status)) +				info->flags |= IEEE80211_TX_STAT_AMPDU_NO_BACK; +			iwlagn_set_tx_status(priv, IEEE80211_SKB_CB(skb), +				     tx_resp); +			if (!is_agg) +				iwlagn_non_agg_tx_status(priv, ctx, hdr->addr1); + +			freed++; +		} + +		if (tid != IWL_TID_NON_QOS) { +			priv->tid_data[sta_id][tid].next_reclaimed = +				next_reclaimed; +			IWL_DEBUG_TX_REPLY(priv, "Next reclaimed packet:%d\n", +					   next_reclaimed); +		} + +		if (!is_agg && freed != 1) +			IWL_ERR(priv, "Q: %d, freed %d\n", txq_id, freed); + +		IWL_DEBUG_TX_REPLY(priv, "TXQ %d status %s (0x%08x)\n", txq_id, +				   iwl_get_tx_fail_reason(status), status); + +		IWL_DEBUG_TX_REPLY(priv, +				   "\t\t\t\tinitial_rate 0x%x retries %d, idx=%d ssn=%d seq_ctl=0x%x\n", +				   le32_to_cpu(tx_resp->rate_n_flags), +				   tx_resp->failure_frame, +				   SEQ_TO_INDEX(sequence), ssn, +				   le16_to_cpu(tx_resp->seq_ctl)); +	} + +	iwl_check_abort_status(priv, tx_resp->frame_count, status); +	spin_unlock_bh(&priv->sta_lock); + +	while (!skb_queue_empty(&skbs)) { +		skb = __skb_dequeue(&skbs); +		ieee80211_tx_status(priv->hw, skb); +	} + +	return 0; +} + +/** + * iwlagn_rx_reply_compressed_ba - Handler for REPLY_COMPRESSED_BA + * + * Handles block-acknowledge notification from device, which reports success + * of frames sent via aggregation. + */ +int iwlagn_rx_reply_compressed_ba(struct iwl_priv *priv, +				   struct iwl_rx_cmd_buffer *rxb, +				   struct iwl_device_cmd *cmd) +{ +	struct iwl_rx_packet *pkt = rxb_addr(rxb); +	struct iwl_compressed_ba_resp *ba_resp = (void *)pkt->data; +	struct iwl_ht_agg *agg; +	struct sk_buff_head reclaimed_skbs; +	struct sk_buff *skb; +	int sta_id; +	int tid; +	int freed; + +	/* "flow" corresponds to Tx queue */ +	u16 scd_flow = le16_to_cpu(ba_resp->scd_flow); + +	/* "ssn" is start of block-ack Tx window, corresponds to index +	 * (in Tx queue's circular buffer) of first TFD/frame in window */ +	u16 ba_resp_scd_ssn = le16_to_cpu(ba_resp->scd_ssn); + +	if (scd_flow >= priv->cfg->base_params->num_of_queues) { +		IWL_ERR(priv, +			"BUG_ON scd_flow is bigger than number of queues\n"); +		return 0; +	} + +	sta_id = ba_resp->sta_id; +	tid = ba_resp->tid; +	agg = &priv->tid_data[sta_id][tid].agg; + +	spin_lock_bh(&priv->sta_lock); + +	if (unlikely(!agg->wait_for_ba)) { +		if (unlikely(ba_resp->bitmap)) +			IWL_ERR(priv, "Received BA when not expected\n"); +		spin_unlock_bh(&priv->sta_lock); +		return 0; +	} + +	if (unlikely(scd_flow != agg->txq_id)) { +		/* +		 * FIXME: this is a uCode bug which need to be addressed, +		 * log the information and return for now. +		 * Since it is can possibly happen very often and in order +		 * not to fill the syslog, don't use IWL_ERR or IWL_WARN +		 */ +		IWL_DEBUG_TX_QUEUES(priv, +				    "Bad queue mapping txq_id=%d, agg_txq[sta:%d,tid:%d]=%d\n", +				    scd_flow, sta_id, tid, agg->txq_id); +		spin_unlock_bh(&priv->sta_lock); +		return 0; +	} + +	__skb_queue_head_init(&reclaimed_skbs); + +	/* Release all TFDs before the SSN, i.e. all TFDs in front of +	 * block-ack window (we assume that they've been successfully +	 * transmitted ... if not, it's too late anyway). */ +	iwl_trans_reclaim(priv->trans, scd_flow, ba_resp_scd_ssn, +			  &reclaimed_skbs); + +	IWL_DEBUG_TX_REPLY(priv, "REPLY_COMPRESSED_BA [%d] Received from %pM, " +			   "sta_id = %d\n", +			   agg->wait_for_ba, +			   (u8 *) &ba_resp->sta_addr_lo32, +			   ba_resp->sta_id); +	IWL_DEBUG_TX_REPLY(priv, "TID = %d, SeqCtl = %d, bitmap = 0x%llx, " +			   "scd_flow = %d, scd_ssn = %d sent:%d, acked:%d\n", +			   ba_resp->tid, le16_to_cpu(ba_resp->seq_ctl), +			   (unsigned long long)le64_to_cpu(ba_resp->bitmap), +			   scd_flow, ba_resp_scd_ssn, ba_resp->txed, +			   ba_resp->txed_2_done); + +	/* Mark that the expected block-ack response arrived */ +	agg->wait_for_ba = false; + +	/* Sanity check values reported by uCode */ +	if (ba_resp->txed_2_done > ba_resp->txed) { +		IWL_DEBUG_TX_REPLY(priv, +			"bogus sent(%d) and ack(%d) count\n", +			ba_resp->txed, ba_resp->txed_2_done); +		/* +		 * set txed_2_done = txed, +		 * so it won't impact rate scale +		 */ +		ba_resp->txed = ba_resp->txed_2_done; +	} + +	priv->tid_data[sta_id][tid].next_reclaimed = ba_resp_scd_ssn; + +	iwlagn_check_ratid_empty(priv, sta_id, tid); +	freed = 0; + +	skb_queue_walk(&reclaimed_skbs, skb) { +		struct ieee80211_hdr *hdr = (void *)skb->data; +		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); + +		if (ieee80211_is_data_qos(hdr->frame_control)) +			freed++; +		else +			WARN_ON_ONCE(1); + +		iwl_trans_free_tx_cmd(priv->trans, info->driver_data[1]); + +		memset(&info->status, 0, sizeof(info->status)); +		/* Packet was transmitted successfully, failures come as single +		 * frames because before failing a frame the firmware transmits +		 * it without aggregation at least once. +		 */ +		info->flags |= IEEE80211_TX_STAT_ACK; + +		if (freed == 1) { +			/* this is the first skb we deliver in this batch */ +			/* put the rate scaling data there */ +			info = IEEE80211_SKB_CB(skb); +			memset(&info->status, 0, sizeof(info->status)); +			info->flags |= IEEE80211_TX_STAT_AMPDU; +			info->status.ampdu_ack_len = ba_resp->txed_2_done; +			info->status.ampdu_len = ba_resp->txed; +			iwlagn_hwrate_to_tx_control(priv, agg->rate_n_flags, +						    info); +		} +	} + +	spin_unlock_bh(&priv->sta_lock); + +	while (!skb_queue_empty(&reclaimed_skbs)) { +		skb = __skb_dequeue(&reclaimed_skbs); +		ieee80211_tx_status(priv->hw, skb); +	} + +	return 0; +} diff --git a/drivers/net/wireless/iwlwifi/dvm/ucode.c b/drivers/net/wireless/iwlwifi/dvm/ucode.c new file mode 100644 index 00000000000..d5cee153059 --- /dev/null +++ b/drivers/net/wireless/iwlwifi/dvm/ucode.c @@ -0,0 +1,456 @@ +/****************************************************************************** + * + * GPL LICENSE SUMMARY + * + * Copyright(c) 2008 - 2014 Intel Corporation. All rights reserved. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of version 2 of the GNU General Public License as + * published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, + * USA + * + * The full GNU General Public License is included in this distribution + * in the file called COPYING. + * + * Contact Information: + *  Intel Linux Wireless <ilw@linux.intel.com> + * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 + * + *****************************************************************************/ + +#include <linux/kernel.h> + +#include "iwl-io.h" +#include "iwl-agn-hw.h" +#include "iwl-trans.h" +#include "iwl-fh.h" +#include "iwl-op-mode.h" + +#include "dev.h" +#include "agn.h" +#include "calib.h" + +/****************************************************************************** + * + * uCode download functions + * + ******************************************************************************/ + +static inline const struct fw_img * +iwl_get_ucode_image(struct iwl_priv *priv, enum iwl_ucode_type ucode_type) +{ +	if (ucode_type >= IWL_UCODE_TYPE_MAX) +		return NULL; + +	return &priv->fw->img[ucode_type]; +} + +/* + *  Calibration + */ +static int iwl_set_Xtal_calib(struct iwl_priv *priv) +{ +	struct iwl_calib_xtal_freq_cmd cmd; +	__le16 *xtal_calib = priv->nvm_data->xtal_calib; + +	iwl_set_calib_hdr(&cmd.hdr, IWL_PHY_CALIBRATE_CRYSTAL_FRQ_CMD); +	cmd.cap_pin1 = le16_to_cpu(xtal_calib[0]); +	cmd.cap_pin2 = le16_to_cpu(xtal_calib[1]); +	return iwl_calib_set(priv, (void *)&cmd, sizeof(cmd)); +} + +static int iwl_set_temperature_offset_calib(struct iwl_priv *priv) +{ +	struct iwl_calib_temperature_offset_cmd cmd; + +	memset(&cmd, 0, sizeof(cmd)); +	iwl_set_calib_hdr(&cmd.hdr, IWL_PHY_CALIBRATE_TEMP_OFFSET_CMD); +	cmd.radio_sensor_offset = priv->nvm_data->raw_temperature; +	if (!(cmd.radio_sensor_offset)) +		cmd.radio_sensor_offset = DEFAULT_RADIO_SENSOR_OFFSET; + +	IWL_DEBUG_CALIB(priv, "Radio sensor offset: %d\n", +			le16_to_cpu(cmd.radio_sensor_offset)); +	return iwl_calib_set(priv, (void *)&cmd, sizeof(cmd)); +} + +static int iwl_set_temperature_offset_calib_v2(struct iwl_priv *priv) +{ +	struct iwl_calib_temperature_offset_v2_cmd cmd; + +	memset(&cmd, 0, sizeof(cmd)); +	iwl_set_calib_hdr(&cmd.hdr, IWL_PHY_CALIBRATE_TEMP_OFFSET_CMD); +	cmd.radio_sensor_offset_high = priv->nvm_data->kelvin_temperature; +	cmd.radio_sensor_offset_low = priv->nvm_data->raw_temperature; +	if (!cmd.radio_sensor_offset_low) { +		IWL_DEBUG_CALIB(priv, "no info in EEPROM, use default\n"); +		cmd.radio_sensor_offset_low = DEFAULT_RADIO_SENSOR_OFFSET; +		cmd.radio_sensor_offset_high = DEFAULT_RADIO_SENSOR_OFFSET; +	} +	cmd.burntVoltageRef = priv->nvm_data->calib_voltage; + +	IWL_DEBUG_CALIB(priv, "Radio sensor offset high: %d\n", +			le16_to_cpu(cmd.radio_sensor_offset_high)); +	IWL_DEBUG_CALIB(priv, "Radio sensor offset low: %d\n", +			le16_to_cpu(cmd.radio_sensor_offset_low)); +	IWL_DEBUG_CALIB(priv, "Voltage Ref: %d\n", +			le16_to_cpu(cmd.burntVoltageRef)); + +	return iwl_calib_set(priv, (void *)&cmd, sizeof(cmd)); +} + +static int iwl_send_calib_cfg(struct iwl_priv *priv) +{ +	struct iwl_calib_cfg_cmd calib_cfg_cmd; +	struct iwl_host_cmd cmd = { +		.id = CALIBRATION_CFG_CMD, +		.len = { sizeof(struct iwl_calib_cfg_cmd), }, +		.data = { &calib_cfg_cmd, }, +	}; + +	memset(&calib_cfg_cmd, 0, sizeof(calib_cfg_cmd)); +	calib_cfg_cmd.ucd_calib_cfg.once.is_enable = IWL_CALIB_INIT_CFG_ALL; +	calib_cfg_cmd.ucd_calib_cfg.once.start = IWL_CALIB_INIT_CFG_ALL; +	calib_cfg_cmd.ucd_calib_cfg.once.send_res = IWL_CALIB_INIT_CFG_ALL; +	calib_cfg_cmd.ucd_calib_cfg.flags = +		IWL_CALIB_CFG_FLAG_SEND_COMPLETE_NTFY_MSK; + +	return iwl_dvm_send_cmd(priv, &cmd); +} + +int iwl_init_alive_start(struct iwl_priv *priv) +{ +	int ret; + +	if (priv->lib->bt_params && +	    priv->lib->bt_params->advanced_bt_coexist) { +		/* +		 * Tell uCode we are ready to perform calibration +		 * need to perform this before any calibration +		 * no need to close the envlope since we are going +		 * to load the runtime uCode later. +		 */ +		ret = iwl_send_bt_env(priv, IWL_BT_COEX_ENV_OPEN, +			BT_COEX_PRIO_TBL_EVT_INIT_CALIB2); +		if (ret) +			return ret; + +	} + +	ret = iwl_send_calib_cfg(priv); +	if (ret) +		return ret; + +	/** +	 * temperature offset calibration is only needed for runtime ucode, +	 * so prepare the value now. +	 */ +	if (priv->lib->need_temp_offset_calib) { +		if (priv->lib->temp_offset_v2) +			return iwl_set_temperature_offset_calib_v2(priv); +		else +			return iwl_set_temperature_offset_calib(priv); +	} + +	return 0; +} + +static int iwl_send_wimax_coex(struct iwl_priv *priv) +{ +	struct iwl_wimax_coex_cmd coex_cmd; + +	/* coexistence is disabled */ +	memset(&coex_cmd, 0, sizeof(coex_cmd)); + +	return iwl_dvm_send_cmd_pdu(priv, +				COEX_PRIORITY_TABLE_CMD, 0, +				sizeof(coex_cmd), &coex_cmd); +} + +static const u8 iwl_bt_prio_tbl[BT_COEX_PRIO_TBL_EVT_MAX] = { +	((BT_COEX_PRIO_TBL_PRIO_BYPASS << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(0 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_BYPASS << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(1 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_LOW << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(0 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_LOW << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(1 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_HIGH << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(0 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_HIGH << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(1 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_BYPASS << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(0 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_COEX_OFF << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(0 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	((BT_COEX_PRIO_TBL_PRIO_COEX_ON << IWL_BT_COEX_PRIO_TBL_PRIO_POS) | +		(0 << IWL_BT_COEX_PRIO_TBL_SHARED_ANTENNA_POS)), +	0, 0, 0, 0, 0, 0, 0 +}; + +void iwl_send_prio_tbl(struct iwl_priv *priv) +{ +	struct iwl_bt_coex_prio_table_cmd prio_tbl_cmd; + +	memcpy(prio_tbl_cmd.prio_tbl, iwl_bt_prio_tbl, +		sizeof(iwl_bt_prio_tbl)); +	if (iwl_dvm_send_cmd_pdu(priv, +				REPLY_BT_COEX_PRIO_TABLE, 0, +				sizeof(prio_tbl_cmd), &prio_tbl_cmd)) +		IWL_ERR(priv, "failed to send BT prio tbl command\n"); +} + +int iwl_send_bt_env(struct iwl_priv *priv, u8 action, u8 type) +{ +	struct iwl_bt_coex_prot_env_cmd env_cmd; +	int ret; + +	env_cmd.action = action; +	env_cmd.type = type; +	ret = iwl_dvm_send_cmd_pdu(priv, +			       REPLY_BT_COEX_PROT_ENV, 0, +			       sizeof(env_cmd), &env_cmd); +	if (ret) +		IWL_ERR(priv, "failed to send BT env command\n"); +	return ret; +} + +static const u8 iwlagn_default_queue_to_tx_fifo[] = { +	IWL_TX_FIFO_VO, +	IWL_TX_FIFO_VI, +	IWL_TX_FIFO_BE, +	IWL_TX_FIFO_BK, +}; + +static const u8 iwlagn_ipan_queue_to_tx_fifo[] = { +	IWL_TX_FIFO_VO, +	IWL_TX_FIFO_VI, +	IWL_TX_FIFO_BE, +	IWL_TX_FIFO_BK, +	IWL_TX_FIFO_BK_IPAN, +	IWL_TX_FIFO_BE_IPAN, +	IWL_TX_FIFO_VI_IPAN, +	IWL_TX_FIFO_VO_IPAN, +	IWL_TX_FIFO_BE_IPAN, +	IWL_TX_FIFO_UNUSED, +	IWL_TX_FIFO_AUX, +}; + +static int iwl_alive_notify(struct iwl_priv *priv) +{ +	const u8 *queue_to_txf; +	u8 n_queues; +	int ret; +	int i; + +	iwl_trans_fw_alive(priv->trans, 0); + +	if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_PAN && +	    priv->nvm_data->sku_cap_ipan_enable) { +		n_queues = ARRAY_SIZE(iwlagn_ipan_queue_to_tx_fifo); +		queue_to_txf = iwlagn_ipan_queue_to_tx_fifo; +	} else { +		n_queues = ARRAY_SIZE(iwlagn_default_queue_to_tx_fifo); +		queue_to_txf = iwlagn_default_queue_to_tx_fifo; +	} + +	for (i = 0; i < n_queues; i++) +		if (queue_to_txf[i] != IWL_TX_FIFO_UNUSED) +			iwl_trans_ac_txq_enable(priv->trans, i, +						queue_to_txf[i]); + +	priv->passive_no_rx = false; +	priv->transport_queue_stop = 0; + +	ret = iwl_send_wimax_coex(priv); +	if (ret) +		return ret; + +	if (!priv->lib->no_xtal_calib) { +		ret = iwl_set_Xtal_calib(priv); +		if (ret) +			return ret; +	} + +	return iwl_send_calib_results(priv); +} + +struct iwl_alive_data { +	bool valid; +	u8 subtype; +}; + +static bool iwl_alive_fn(struct iwl_notif_wait_data *notif_wait, +			 struct iwl_rx_packet *pkt, void *data) +{ +	struct iwl_priv *priv = +		container_of(notif_wait, struct iwl_priv, notif_wait); +	struct iwl_alive_data *alive_data = data; +	struct iwl_alive_resp *palive; + +	palive = (void *)pkt->data; + +	IWL_DEBUG_FW(priv, "Alive ucode status 0x%08X revision " +		       "0x%01X 0x%01X\n", +		       palive->is_valid, palive->ver_type, +		       palive->ver_subtype); + +	priv->device_pointers.error_event_table = +		le32_to_cpu(palive->error_event_table_ptr); +	priv->device_pointers.log_event_table = +		le32_to_cpu(palive->log_event_table_ptr); + +	alive_data->subtype = palive->ver_subtype; +	alive_data->valid = palive->is_valid == UCODE_VALID_OK; + +	return true; +} + +#define UCODE_ALIVE_TIMEOUT	HZ +#define UCODE_CALIB_TIMEOUT	(2*HZ) + +int iwl_load_ucode_wait_alive(struct iwl_priv *priv, +				 enum iwl_ucode_type ucode_type) +{ +	struct iwl_notification_wait alive_wait; +	struct iwl_alive_data alive_data; +	const struct fw_img *fw; +	int ret; +	enum iwl_ucode_type old_type; +	static const u8 alive_cmd[] = { REPLY_ALIVE }; + +	fw = iwl_get_ucode_image(priv, ucode_type); +	if (WARN_ON(!fw)) +		return -EINVAL; + +	old_type = priv->cur_ucode; +	priv->cur_ucode = ucode_type; +	priv->ucode_loaded = false; + +	iwl_init_notification_wait(&priv->notif_wait, &alive_wait, +				   alive_cmd, ARRAY_SIZE(alive_cmd), +				   iwl_alive_fn, &alive_data); + +	ret = iwl_trans_start_fw(priv->trans, fw, false); +	if (ret) { +		priv->cur_ucode = old_type; +		iwl_remove_notification(&priv->notif_wait, &alive_wait); +		return ret; +	} + +	/* +	 * Some things may run in the background now, but we +	 * just wait for the ALIVE notification here. +	 */ +	ret = iwl_wait_notification(&priv->notif_wait, &alive_wait, +					UCODE_ALIVE_TIMEOUT); +	if (ret) { +		priv->cur_ucode = old_type; +		return ret; +	} + +	if (!alive_data.valid) { +		IWL_ERR(priv, "Loaded ucode is not valid!\n"); +		priv->cur_ucode = old_type; +		return -EIO; +	} + +	priv->ucode_loaded = true; + +	if (ucode_type != IWL_UCODE_WOWLAN) { +		/* delay a bit to give rfkill time to run */ +		msleep(5); +	} + +	ret = iwl_alive_notify(priv); +	if (ret) { +		IWL_WARN(priv, +			"Could not complete ALIVE transition: %d\n", ret); +		priv->cur_ucode = old_type; +		return ret; +	} + +	return 0; +} + +static bool iwlagn_wait_calib(struct iwl_notif_wait_data *notif_wait, +			      struct iwl_rx_packet *pkt, void *data) +{ +	struct iwl_priv *priv = data; +	struct iwl_calib_hdr *hdr; + +	if (pkt->hdr.cmd != CALIBRATION_RES_NOTIFICATION) { +		WARN_ON(pkt->hdr.cmd != CALIBRATION_COMPLETE_NOTIFICATION); +		return true; +	} + +	hdr = (struct iwl_calib_hdr *)pkt->data; + +	if (iwl_calib_set(priv, hdr, iwl_rx_packet_payload_len(pkt))) +		IWL_ERR(priv, "Failed to record calibration data %d\n", +			hdr->op_code); + +	return false; +} + +int iwl_run_init_ucode(struct iwl_priv *priv) +{ +	struct iwl_notification_wait calib_wait; +	static const u8 calib_complete[] = { +		CALIBRATION_RES_NOTIFICATION, +		CALIBRATION_COMPLETE_NOTIFICATION +	}; +	int ret; + +	lockdep_assert_held(&priv->mutex); + +	/* No init ucode required? Curious, but maybe ok */ +	if (!priv->fw->img[IWL_UCODE_INIT].sec[0].len) +		return 0; + +	if (priv->init_ucode_run) +		return 0; + +	iwl_init_notification_wait(&priv->notif_wait, &calib_wait, +				   calib_complete, ARRAY_SIZE(calib_complete), +				   iwlagn_wait_calib, priv); + +	/* Will also start the device */ +	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_INIT); +	if (ret) +		goto error; + +	ret = iwl_init_alive_start(priv); +	if (ret) +		goto error; + +	/* +	 * Some things may run in the background now, but we +	 * just wait for the calibration complete notification. +	 */ +	ret = iwl_wait_notification(&priv->notif_wait, &calib_wait, +					UCODE_CALIB_TIMEOUT); +	if (!ret) +		priv->init_ucode_run = true; + +	goto out; + + error: +	iwl_remove_notification(&priv->notif_wait, &calib_wait); + out: +	/* Whatever happened, stop the device */ +	iwl_trans_stop_device(priv->trans); +	priv->ucode_loaded = false; + +	return ret; +}  | 
