• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /* Encapsulate basic setting changes and retrieval on Hermes hardware
2  *
3  * See copyright notice in main.c
4  */
5 #include <linux/kernel.h>
6 #include <linux/device.h>
7 #include <linux/if_arp.h>
8 #include <linux/ieee80211.h>
9 #include <linux/wireless.h>
10 #include <net/cfg80211.h>
11 #include "hermes.h"
12 #include "hermes_rid.h"
13 #include "orinoco.h"
14 
15 #include "hw.h"
16 
17 #define SYMBOL_MAX_VER_LEN	(14)
18 
19 /* Symbol firmware has a bug allocating buffers larger than this */
20 #define TX_NICBUF_SIZE_BUG	1585
21 
22 /********************************************************************/
23 /* Data tables                                                      */
24 /********************************************************************/
25 
26 /* This tables gives the actual meanings of the bitrate IDs returned
27  * by the firmware. */
28 static const struct {
29 	int bitrate; /* in 100s of kilobits */
30 	int automatic;
31 	u16 agere_txratectrl;
32 	u16 intersil_txratectrl;
33 } bitrate_table[] = {
34 	{110, 1,  3, 15}, /* Entry 0 is the default */
35 	{10,  0,  1,  1},
36 	{10,  1,  1,  1},
37 	{20,  0,  2,  2},
38 	{20,  1,  6,  3},
39 	{55,  0,  4,  4},
40 	{55,  1,  7,  7},
41 	{110, 0,  5,  8},
42 };
43 #define BITRATE_TABLE_SIZE ARRAY_SIZE(bitrate_table)
44 
45 /* Firmware version encoding */
46 struct comp_id {
47 	u16 id, variant, major, minor;
48 } __packed;
49 
determine_firmware_type(struct comp_id * nic_id)50 static inline enum fwtype determine_firmware_type(struct comp_id *nic_id)
51 {
52 	if (nic_id->id < 0x8000)
53 		return FIRMWARE_TYPE_AGERE;
54 	else if (nic_id->id == 0x8000 && nic_id->major == 0)
55 		return FIRMWARE_TYPE_SYMBOL;
56 	else
57 		return FIRMWARE_TYPE_INTERSIL;
58 }
59 
60 /* Set priv->firmware type, determine firmware properties
61  * This function can be called before we have registerred with netdev,
62  * so all errors go out with dev_* rather than printk
63  *
64  * If non-NULL stores a firmware description in fw_name.
65  * If non-NULL stores a HW version in hw_ver
66  *
67  * These are output via generic cfg80211 ethtool support.
68  */
determine_fw_capabilities(struct orinoco_private * priv,char * fw_name,size_t fw_name_len,u32 * hw_ver)69 int determine_fw_capabilities(struct orinoco_private *priv,
70 			      char *fw_name, size_t fw_name_len,
71 			      u32 *hw_ver)
72 {
73 	struct device *dev = priv->dev;
74 	struct hermes *hw = &priv->hw;
75 	int err;
76 	struct comp_id nic_id, sta_id;
77 	unsigned int firmver;
78 	char tmp[SYMBOL_MAX_VER_LEN + 1] __attribute__((aligned(2)));
79 
80 	/* Get the hardware version */
81 	err = HERMES_READ_RECORD(hw, USER_BAP, HERMES_RID_NICID, &nic_id);
82 	if (err) {
83 		dev_err(dev, "Cannot read hardware identity: error %d\n",
84 			err);
85 		return err;
86 	}
87 
88 	le16_to_cpus(&nic_id.id);
89 	le16_to_cpus(&nic_id.variant);
90 	le16_to_cpus(&nic_id.major);
91 	le16_to_cpus(&nic_id.minor);
92 	dev_info(dev, "Hardware identity %04x:%04x:%04x:%04x\n",
93 		 nic_id.id, nic_id.variant, nic_id.major, nic_id.minor);
94 
95 	if (hw_ver)
96 		*hw_ver = (((nic_id.id & 0xff) << 24) |
97 			   ((nic_id.variant & 0xff) << 16) |
98 			   ((nic_id.major & 0xff) << 8) |
99 			   (nic_id.minor & 0xff));
100 
101 	priv->firmware_type = determine_firmware_type(&nic_id);
102 
103 	/* Get the firmware version */
104 	err = HERMES_READ_RECORD(hw, USER_BAP, HERMES_RID_STAID, &sta_id);
105 	if (err) {
106 		dev_err(dev, "Cannot read station identity: error %d\n",
107 			err);
108 		return err;
109 	}
110 
111 	le16_to_cpus(&sta_id.id);
112 	le16_to_cpus(&sta_id.variant);
113 	le16_to_cpus(&sta_id.major);
114 	le16_to_cpus(&sta_id.minor);
115 	dev_info(dev, "Station identity  %04x:%04x:%04x:%04x\n",
116 		 sta_id.id, sta_id.variant, sta_id.major, sta_id.minor);
117 
118 	switch (sta_id.id) {
119 	case 0x15:
120 		dev_err(dev, "Primary firmware is active\n");
121 		return -ENODEV;
122 	case 0x14b:
123 		dev_err(dev, "Tertiary firmware is active\n");
124 		return -ENODEV;
125 	case 0x1f:	/* Intersil, Agere, Symbol Spectrum24 */
126 	case 0x21:	/* Symbol Spectrum24 Trilogy */
127 		break;
128 	default:
129 		dev_notice(dev, "Unknown station ID, please report\n");
130 		break;
131 	}
132 
133 	/* Default capabilities */
134 	priv->has_sensitivity = 1;
135 	priv->has_mwo = 0;
136 	priv->has_preamble = 0;
137 	priv->has_port3 = 1;
138 	priv->has_ibss = 1;
139 	priv->has_wep = 0;
140 	priv->has_big_wep = 0;
141 	priv->has_alt_txcntl = 0;
142 	priv->has_ext_scan = 0;
143 	priv->has_wpa = 0;
144 	priv->do_fw_download = 0;
145 
146 	/* Determine capabilities from the firmware version */
147 	switch (priv->firmware_type) {
148 	case FIRMWARE_TYPE_AGERE:
149 		/* Lucent Wavelan IEEE, Lucent Orinoco, Cabletron RoamAbout,
150 		   ELSA, Melco, HP, IBM, Dell 1150, Compaq 110/210 */
151 		if (fw_name)
152 			snprintf(fw_name, fw_name_len, "Lucent/Agere %d.%02d",
153 				 sta_id.major, sta_id.minor);
154 
155 		firmver = ((unsigned long)sta_id.major << 16) | sta_id.minor;
156 
157 		priv->has_ibss = (firmver >= 0x60006);
158 		priv->has_wep = (firmver >= 0x40020);
159 		priv->has_big_wep = 1; /* FIXME: this is wrong - how do we tell
160 					  Gold cards from the others? */
161 		priv->has_mwo = (firmver >= 0x60000);
162 		priv->has_pm = (firmver >= 0x40020); /* Don't work in 7.52 ? */
163 		priv->ibss_port = 1;
164 		priv->has_hostscan = (firmver >= 0x8000a);
165 		priv->do_fw_download = 1;
166 		priv->broken_monitor = (firmver >= 0x80000);
167 		priv->has_alt_txcntl = (firmver >= 0x90000); /* All 9.x ? */
168 		priv->has_ext_scan = (firmver >= 0x90000); /* All 9.x ? */
169 		priv->has_wpa = (firmver >= 0x9002a);
170 		/* Tested with Agere firmware :
171 		 *	1.16 ; 4.08 ; 4.52 ; 6.04 ; 6.16 ; 7.28 => Jean II
172 		 * Tested CableTron firmware : 4.32 => Anton */
173 		break;
174 	case FIRMWARE_TYPE_SYMBOL:
175 		/* Symbol , 3Com AirConnect, Intel, Ericsson WLAN */
176 		/* Intel MAC : 00:02:B3:* */
177 		/* 3Com MAC : 00:50:DA:* */
178 		memset(tmp, 0, sizeof(tmp));
179 		/* Get the Symbol firmware version */
180 		err = hw->ops->read_ltv(hw, USER_BAP,
181 					HERMES_RID_SECONDARYVERSION_SYMBOL,
182 					SYMBOL_MAX_VER_LEN, NULL, &tmp);
183 		if (err) {
184 			dev_warn(dev, "Error %d reading Symbol firmware info. "
185 				 "Wildly guessing capabilities...\n", err);
186 			firmver = 0;
187 			tmp[0] = '\0';
188 		} else {
189 			/* The firmware revision is a string, the format is
190 			 * something like : "V2.20-01".
191 			 * Quick and dirty parsing... - Jean II
192 			 */
193 			firmver = ((tmp[1] - '0') << 16)
194 				| ((tmp[3] - '0') << 12)
195 				| ((tmp[4] - '0') << 8)
196 				| ((tmp[6] - '0') << 4)
197 				| (tmp[7] - '0');
198 
199 			tmp[SYMBOL_MAX_VER_LEN] = '\0';
200 		}
201 
202 		if (fw_name)
203 			snprintf(fw_name, fw_name_len, "Symbol %s", tmp);
204 
205 		priv->has_ibss = (firmver >= 0x20000);
206 		priv->has_wep = (firmver >= 0x15012);
207 		priv->has_big_wep = (firmver >= 0x20000);
208 		priv->has_pm = (firmver >= 0x20000 && firmver < 0x22000) ||
209 			       (firmver >= 0x29000 && firmver < 0x30000) ||
210 			       firmver >= 0x31000;
211 		priv->has_preamble = (firmver >= 0x20000);
212 		priv->ibss_port = 4;
213 
214 		/* Symbol firmware is found on various cards, but
215 		 * there has been no attempt to check firmware
216 		 * download on non-spectrum_cs based cards.
217 		 *
218 		 * Given that the Agere firmware download works
219 		 * differently, we should avoid doing a firmware
220 		 * download with the Symbol algorithm on non-spectrum
221 		 * cards.
222 		 *
223 		 * For now we can identify a spectrum_cs based card
224 		 * because it has a firmware reset function.
225 		 */
226 		priv->do_fw_download = (priv->stop_fw != NULL);
227 
228 		priv->broken_disableport = (firmver == 0x25013) ||
229 				(firmver >= 0x30000 && firmver <= 0x31000);
230 		priv->has_hostscan = (firmver >= 0x31001) ||
231 				     (firmver >= 0x29057 && firmver < 0x30000);
232 		/* Tested with Intel firmware : 0x20015 => Jean II */
233 		/* Tested with 3Com firmware : 0x15012 & 0x22001 => Jean II */
234 		break;
235 	case FIRMWARE_TYPE_INTERSIL:
236 		/* D-Link, Linksys, Adtron, ZoomAir, and many others...
237 		 * Samsung, Compaq 100/200 and Proxim are slightly
238 		 * different and less well tested */
239 		/* D-Link MAC : 00:40:05:* */
240 		/* Addtron MAC : 00:90:D1:* */
241 		if (fw_name)
242 			snprintf(fw_name, fw_name_len, "Intersil %d.%d.%d",
243 				 sta_id.major, sta_id.minor, sta_id.variant);
244 
245 		firmver = ((unsigned long)sta_id.major << 16) |
246 			((unsigned long)sta_id.minor << 8) | sta_id.variant;
247 
248 		priv->has_ibss = (firmver >= 0x000700); /* FIXME */
249 		priv->has_big_wep = priv->has_wep = (firmver >= 0x000800);
250 		priv->has_pm = (firmver >= 0x000700);
251 		priv->has_hostscan = (firmver >= 0x010301);
252 
253 		if (firmver >= 0x000800)
254 			priv->ibss_port = 0;
255 		else {
256 			dev_notice(dev, "Intersil firmware earlier than v0.8.x"
257 				   " - several features not supported\n");
258 			priv->ibss_port = 1;
259 		}
260 		break;
261 	}
262 	if (fw_name)
263 		dev_info(dev, "Firmware determined as %s\n", fw_name);
264 
265 #ifndef CONFIG_HERMES_PRISM
266 	if (priv->firmware_type == FIRMWARE_TYPE_INTERSIL) {
267 		dev_err(dev, "Support for Prism chipset is not enabled\n");
268 		return -ENODEV;
269 	}
270 #endif
271 
272 	return 0;
273 }
274 
275 /* Read settings from EEPROM into our private structure.
276  * MAC address gets dropped into callers buffer
277  * Can be called before netdev registration.
278  */
orinoco_hw_read_card_settings(struct orinoco_private * priv,u8 * dev_addr)279 int orinoco_hw_read_card_settings(struct orinoco_private *priv, u8 *dev_addr)
280 {
281 	struct device *dev = priv->dev;
282 	struct hermes_idstring nickbuf;
283 	struct hermes *hw = &priv->hw;
284 	int len;
285 	int err;
286 	u16 reclen;
287 
288 	/* Get the MAC address */
289 	err = hw->ops->read_ltv(hw, USER_BAP, HERMES_RID_CNFOWNMACADDR,
290 				ETH_ALEN, NULL, dev_addr);
291 	if (err) {
292 		dev_warn(dev, "Failed to read MAC address!\n");
293 		goto out;
294 	}
295 
296 	dev_dbg(dev, "MAC address %pM\n", dev_addr);
297 
298 	/* Get the station name */
299 	err = hw->ops->read_ltv(hw, USER_BAP, HERMES_RID_CNFOWNNAME,
300 				sizeof(nickbuf), &reclen, &nickbuf);
301 	if (err) {
302 		dev_err(dev, "failed to read station name\n");
303 		goto out;
304 	}
305 	if (nickbuf.len)
306 		len = min(IW_ESSID_MAX_SIZE, (int)le16_to_cpu(nickbuf.len));
307 	else
308 		len = min(IW_ESSID_MAX_SIZE, 2 * reclen);
309 	memcpy(priv->nick, &nickbuf.val, len);
310 	priv->nick[len] = '\0';
311 
312 	dev_dbg(dev, "Station name \"%s\"\n", priv->nick);
313 
314 	/* Get allowed channels */
315 	err = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_CHANNELLIST,
316 				  &priv->channel_mask);
317 	if (err) {
318 		dev_err(dev, "Failed to read channel list!\n");
319 		goto out;
320 	}
321 
322 	/* Get initial AP density */
323 	err = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_CNFSYSTEMSCALE,
324 				  &priv->ap_density);
325 	if (err || priv->ap_density < 1 || priv->ap_density > 3)
326 		priv->has_sensitivity = 0;
327 
328 	/* Get initial RTS threshold */
329 	err = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_CNFRTSTHRESHOLD,
330 				  &priv->rts_thresh);
331 	if (err) {
332 		dev_err(dev, "Failed to read RTS threshold!\n");
333 		goto out;
334 	}
335 
336 	/* Get initial fragmentation settings */
337 	if (priv->has_mwo)
338 		err = hermes_read_wordrec(hw, USER_BAP,
339 					  HERMES_RID_CNFMWOROBUST_AGERE,
340 					  &priv->mwo_robust);
341 	else
342 		err = hermes_read_wordrec(hw, USER_BAP,
343 					  HERMES_RID_CNFFRAGMENTATIONTHRESHOLD,
344 					  &priv->frag_thresh);
345 	if (err) {
346 		dev_err(dev, "Failed to read fragmentation settings!\n");
347 		goto out;
348 	}
349 
350 	/* Power management setup */
351 	if (priv->has_pm) {
352 		priv->pm_on = 0;
353 		priv->pm_mcast = 1;
354 		err = hermes_read_wordrec(hw, USER_BAP,
355 					  HERMES_RID_CNFMAXSLEEPDURATION,
356 					  &priv->pm_period);
357 		if (err) {
358 			dev_err(dev, "Failed to read power management "
359 				"period!\n");
360 			goto out;
361 		}
362 		err = hermes_read_wordrec(hw, USER_BAP,
363 					  HERMES_RID_CNFPMHOLDOVERDURATION,
364 					  &priv->pm_timeout);
365 		if (err) {
366 			dev_err(dev, "Failed to read power management "
367 				"timeout!\n");
368 			goto out;
369 		}
370 	}
371 
372 	/* Preamble setup */
373 	if (priv->has_preamble) {
374 		err = hermes_read_wordrec(hw, USER_BAP,
375 					  HERMES_RID_CNFPREAMBLE_SYMBOL,
376 					  &priv->preamble);
377 		if (err) {
378 			dev_err(dev, "Failed to read preamble setup\n");
379 			goto out;
380 		}
381 	}
382 
383 	/* Retry settings */
384 	err = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_SHORTRETRYLIMIT,
385 				  &priv->short_retry_limit);
386 	if (err) {
387 		dev_err(dev, "Failed to read short retry limit\n");
388 		goto out;
389 	}
390 
391 	err = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_LONGRETRYLIMIT,
392 				  &priv->long_retry_limit);
393 	if (err) {
394 		dev_err(dev, "Failed to read long retry limit\n");
395 		goto out;
396 	}
397 
398 	err = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_MAXTRANSMITLIFETIME,
399 				  &priv->retry_lifetime);
400 	if (err) {
401 		dev_err(dev, "Failed to read max retry lifetime\n");
402 		goto out;
403 	}
404 
405 out:
406 	return err;
407 }
408 
409 /* Can be called before netdev registration */
orinoco_hw_allocate_fid(struct orinoco_private * priv)410 int orinoco_hw_allocate_fid(struct orinoco_private *priv)
411 {
412 	struct device *dev = priv->dev;
413 	struct hermes *hw = &priv->hw;
414 	int err;
415 
416 	err = hw->ops->allocate(hw, priv->nicbuf_size, &priv->txfid);
417 	if (err == -EIO && priv->nicbuf_size > TX_NICBUF_SIZE_BUG) {
418 		/* Try workaround for old Symbol firmware bug */
419 		priv->nicbuf_size = TX_NICBUF_SIZE_BUG;
420 		err = hw->ops->allocate(hw, priv->nicbuf_size, &priv->txfid);
421 
422 		dev_warn(dev, "Firmware ALLOC bug detected "
423 			 "(old Symbol firmware?). Work around %s\n",
424 			 err ? "failed!" : "ok.");
425 	}
426 
427 	return err;
428 }
429 
orinoco_get_bitratemode(int bitrate,int automatic)430 int orinoco_get_bitratemode(int bitrate, int automatic)
431 {
432 	int ratemode = -1;
433 	int i;
434 
435 	if ((bitrate != 10) && (bitrate != 20) &&
436 	    (bitrate != 55) && (bitrate != 110))
437 		return ratemode;
438 
439 	for (i = 0; i < BITRATE_TABLE_SIZE; i++) {
440 		if ((bitrate_table[i].bitrate == bitrate) &&
441 		    (bitrate_table[i].automatic == automatic)) {
442 			ratemode = i;
443 			break;
444 		}
445 	}
446 	return ratemode;
447 }
448 
orinoco_get_ratemode_cfg(int ratemode,int * bitrate,int * automatic)449 void orinoco_get_ratemode_cfg(int ratemode, int *bitrate, int *automatic)
450 {
451 	BUG_ON((ratemode < 0) || (ratemode >= BITRATE_TABLE_SIZE));
452 
453 	*bitrate = bitrate_table[ratemode].bitrate * 100000;
454 	*automatic = bitrate_table[ratemode].automatic;
455 }
456 
orinoco_hw_program_rids(struct orinoco_private * priv)457 int orinoco_hw_program_rids(struct orinoco_private *priv)
458 {
459 	struct net_device *dev = priv->ndev;
460 	struct wireless_dev *wdev = netdev_priv(dev);
461 	struct hermes *hw = &priv->hw;
462 	int err;
463 	struct hermes_idstring idbuf;
464 
465 	/* Set the MAC address */
466 	err = hw->ops->write_ltv(hw, USER_BAP, HERMES_RID_CNFOWNMACADDR,
467 				 HERMES_BYTES_TO_RECLEN(ETH_ALEN),
468 				 dev->dev_addr);
469 	if (err) {
470 		printk(KERN_ERR "%s: Error %d setting MAC address\n",
471 		       dev->name, err);
472 		return err;
473 	}
474 
475 	/* Set up the link mode */
476 	err = hermes_write_wordrec(hw, USER_BAP, HERMES_RID_CNFPORTTYPE,
477 				   priv->port_type);
478 	if (err) {
479 		printk(KERN_ERR "%s: Error %d setting port type\n",
480 		       dev->name, err);
481 		return err;
482 	}
483 	/* Set the channel/frequency */
484 	if (priv->channel != 0 && priv->iw_mode != NL80211_IFTYPE_STATION) {
485 		err = hermes_write_wordrec(hw, USER_BAP,
486 					   HERMES_RID_CNFOWNCHANNEL,
487 					   priv->channel);
488 		if (err) {
489 			printk(KERN_ERR "%s: Error %d setting channel %d\n",
490 			       dev->name, err, priv->channel);
491 			return err;
492 		}
493 	}
494 
495 	if (priv->has_ibss) {
496 		u16 createibss;
497 
498 		if ((strlen(priv->desired_essid) == 0) && (priv->createibss)) {
499 			printk(KERN_WARNING "%s: This firmware requires an "
500 			       "ESSID in IBSS-Ad-Hoc mode.\n", dev->name);
501 			/* With wvlan_cs, in this case, we would crash.
502 			 * hopefully, this driver will behave better...
503 			 * Jean II */
504 			createibss = 0;
505 		} else {
506 			createibss = priv->createibss;
507 		}
508 
509 		err = hermes_write_wordrec(hw, USER_BAP,
510 					   HERMES_RID_CNFCREATEIBSS,
511 					   createibss);
512 		if (err) {
513 			printk(KERN_ERR "%s: Error %d setting CREATEIBSS\n",
514 			       dev->name, err);
515 			return err;
516 		}
517 	}
518 
519 	/* Set the desired BSSID */
520 	err = __orinoco_hw_set_wap(priv);
521 	if (err) {
522 		printk(KERN_ERR "%s: Error %d setting AP address\n",
523 		       dev->name, err);
524 		return err;
525 	}
526 
527 	/* Set the desired ESSID */
528 	idbuf.len = cpu_to_le16(strlen(priv->desired_essid));
529 	memcpy(&idbuf.val, priv->desired_essid, sizeof(idbuf.val));
530 	/* WinXP wants partner to configure OWNSSID even in IBSS mode. (jimc) */
531 	err = hw->ops->write_ltv(hw, USER_BAP, HERMES_RID_CNFOWNSSID,
532 			HERMES_BYTES_TO_RECLEN(strlen(priv->desired_essid) + 2),
533 			&idbuf);
534 	if (err) {
535 		printk(KERN_ERR "%s: Error %d setting OWNSSID\n",
536 		       dev->name, err);
537 		return err;
538 	}
539 	err = hw->ops->write_ltv(hw, USER_BAP, HERMES_RID_CNFDESIREDSSID,
540 			HERMES_BYTES_TO_RECLEN(strlen(priv->desired_essid) + 2),
541 			&idbuf);
542 	if (err) {
543 		printk(KERN_ERR "%s: Error %d setting DESIREDSSID\n",
544 		       dev->name, err);
545 		return err;
546 	}
547 
548 	/* Set the station name */
549 	idbuf.len = cpu_to_le16(strlen(priv->nick));
550 	memcpy(&idbuf.val, priv->nick, sizeof(idbuf.val));
551 	err = hw->ops->write_ltv(hw, USER_BAP, HERMES_RID_CNFOWNNAME,
552 				 HERMES_BYTES_TO_RECLEN(strlen(priv->nick) + 2),
553 				 &idbuf);
554 	if (err) {
555 		printk(KERN_ERR "%s: Error %d setting nickname\n",
556 		       dev->name, err);
557 		return err;
558 	}
559 
560 	/* Set AP density */
561 	if (priv->has_sensitivity) {
562 		err = hermes_write_wordrec(hw, USER_BAP,
563 					   HERMES_RID_CNFSYSTEMSCALE,
564 					   priv->ap_density);
565 		if (err) {
566 			printk(KERN_WARNING "%s: Error %d setting SYSTEMSCALE. "
567 			       "Disabling sensitivity control\n",
568 			       dev->name, err);
569 
570 			priv->has_sensitivity = 0;
571 		}
572 	}
573 
574 	/* Set RTS threshold */
575 	err = hermes_write_wordrec(hw, USER_BAP, HERMES_RID_CNFRTSTHRESHOLD,
576 				   priv->rts_thresh);
577 	if (err) {
578 		printk(KERN_ERR "%s: Error %d setting RTS threshold\n",
579 		       dev->name, err);
580 		return err;
581 	}
582 
583 	/* Set fragmentation threshold or MWO robustness */
584 	if (priv->has_mwo)
585 		err = hermes_write_wordrec(hw, USER_BAP,
586 					   HERMES_RID_CNFMWOROBUST_AGERE,
587 					   priv->mwo_robust);
588 	else
589 		err = hermes_write_wordrec(hw, USER_BAP,
590 					   HERMES_RID_CNFFRAGMENTATIONTHRESHOLD,
591 					   priv->frag_thresh);
592 	if (err) {
593 		printk(KERN_ERR "%s: Error %d setting fragmentation\n",
594 		       dev->name, err);
595 		return err;
596 	}
597 
598 	/* Set bitrate */
599 	err = __orinoco_hw_set_bitrate(priv);
600 	if (err) {
601 		printk(KERN_ERR "%s: Error %d setting bitrate\n",
602 		       dev->name, err);
603 		return err;
604 	}
605 
606 	/* Set power management */
607 	if (priv->has_pm) {
608 		err = hermes_write_wordrec(hw, USER_BAP,
609 					   HERMES_RID_CNFPMENABLED,
610 					   priv->pm_on);
611 		if (err) {
612 			printk(KERN_ERR "%s: Error %d setting up PM\n",
613 			       dev->name, err);
614 			return err;
615 		}
616 
617 		err = hermes_write_wordrec(hw, USER_BAP,
618 					   HERMES_RID_CNFMULTICASTRECEIVE,
619 					   priv->pm_mcast);
620 		if (err) {
621 			printk(KERN_ERR "%s: Error %d setting up PM\n",
622 			       dev->name, err);
623 			return err;
624 		}
625 		err = hermes_write_wordrec(hw, USER_BAP,
626 					   HERMES_RID_CNFMAXSLEEPDURATION,
627 					   priv->pm_period);
628 		if (err) {
629 			printk(KERN_ERR "%s: Error %d setting up PM\n",
630 			       dev->name, err);
631 			return err;
632 		}
633 		err = hermes_write_wordrec(hw, USER_BAP,
634 					   HERMES_RID_CNFPMHOLDOVERDURATION,
635 					   priv->pm_timeout);
636 		if (err) {
637 			printk(KERN_ERR "%s: Error %d setting up PM\n",
638 			       dev->name, err);
639 			return err;
640 		}
641 	}
642 
643 	/* Set preamble - only for Symbol so far... */
644 	if (priv->has_preamble) {
645 		err = hermes_write_wordrec(hw, USER_BAP,
646 					   HERMES_RID_CNFPREAMBLE_SYMBOL,
647 					   priv->preamble);
648 		if (err) {
649 			printk(KERN_ERR "%s: Error %d setting preamble\n",
650 			       dev->name, err);
651 			return err;
652 		}
653 	}
654 
655 	/* Set up encryption */
656 	if (priv->has_wep || priv->has_wpa) {
657 		err = __orinoco_hw_setup_enc(priv);
658 		if (err) {
659 			printk(KERN_ERR "%s: Error %d activating encryption\n",
660 			       dev->name, err);
661 			return err;
662 		}
663 	}
664 
665 	if (priv->iw_mode == NL80211_IFTYPE_MONITOR) {
666 		/* Enable monitor mode */
667 		dev->type = ARPHRD_IEEE80211;
668 		err = hw->ops->cmd_wait(hw, HERMES_CMD_TEST |
669 					    HERMES_TEST_MONITOR, 0, NULL);
670 	} else {
671 		/* Disable monitor mode */
672 		dev->type = ARPHRD_ETHER;
673 		err = hw->ops->cmd_wait(hw, HERMES_CMD_TEST |
674 					    HERMES_TEST_STOP, 0, NULL);
675 	}
676 	if (err)
677 		return err;
678 
679 	/* Reset promiscuity / multicast*/
680 	priv->promiscuous = 0;
681 	priv->mc_count = 0;
682 
683 	/* Record mode change */
684 	wdev->iftype = priv->iw_mode;
685 
686 	return 0;
687 }
688 
689 /* Get tsc from the firmware */
orinoco_hw_get_tkip_iv(struct orinoco_private * priv,int key,u8 * tsc)690 int orinoco_hw_get_tkip_iv(struct orinoco_private *priv, int key, u8 *tsc)
691 {
692 	struct hermes *hw = &priv->hw;
693 	int err = 0;
694 	u8 tsc_arr[4][ORINOCO_SEQ_LEN];
695 
696 	if ((key < 0) || (key >= 4))
697 		return -EINVAL;
698 
699 	err = hw->ops->read_ltv(hw, USER_BAP, HERMES_RID_CURRENT_TKIP_IV,
700 				sizeof(tsc_arr), NULL, &tsc_arr);
701 	if (!err)
702 		memcpy(tsc, &tsc_arr[key][0], sizeof(tsc_arr[0]));
703 
704 	return err;
705 }
706 
__orinoco_hw_set_bitrate(struct orinoco_private * priv)707 int __orinoco_hw_set_bitrate(struct orinoco_private *priv)
708 {
709 	struct hermes *hw = &priv->hw;
710 	int ratemode = priv->bitratemode;
711 	int err = 0;
712 
713 	if (ratemode >= BITRATE_TABLE_SIZE) {
714 		printk(KERN_ERR "%s: BUG: Invalid bitrate mode %d\n",
715 		       priv->ndev->name, ratemode);
716 		return -EINVAL;
717 	}
718 
719 	switch (priv->firmware_type) {
720 	case FIRMWARE_TYPE_AGERE:
721 		err = hermes_write_wordrec(hw, USER_BAP,
722 				HERMES_RID_CNFTXRATECONTROL,
723 				bitrate_table[ratemode].agere_txratectrl);
724 		break;
725 	case FIRMWARE_TYPE_INTERSIL:
726 	case FIRMWARE_TYPE_SYMBOL:
727 		err = hermes_write_wordrec(hw, USER_BAP,
728 				HERMES_RID_CNFTXRATECONTROL,
729 				bitrate_table[ratemode].intersil_txratectrl);
730 		break;
731 	default:
732 		BUG();
733 	}
734 
735 	return err;
736 }
737 
orinoco_hw_get_act_bitrate(struct orinoco_private * priv,int * bitrate)738 int orinoco_hw_get_act_bitrate(struct orinoco_private *priv, int *bitrate)
739 {
740 	struct hermes *hw = &priv->hw;
741 	int i;
742 	int err = 0;
743 	u16 val;
744 
745 	err = hermes_read_wordrec(hw, USER_BAP,
746 				  HERMES_RID_CURRENTTXRATE, &val);
747 	if (err)
748 		return err;
749 
750 	switch (priv->firmware_type) {
751 	case FIRMWARE_TYPE_AGERE: /* Lucent style rate */
752 		/* Note : in Lucent firmware, the return value of
753 		 * HERMES_RID_CURRENTTXRATE is the bitrate in Mb/s,
754 		 * and therefore is totally different from the
755 		 * encoding of HERMES_RID_CNFTXRATECONTROL.
756 		 * Don't forget that 6Mb/s is really 5.5Mb/s */
757 		if (val == 6)
758 			*bitrate = 5500000;
759 		else
760 			*bitrate = val * 1000000;
761 		break;
762 	case FIRMWARE_TYPE_INTERSIL: /* Intersil style rate */
763 	case FIRMWARE_TYPE_SYMBOL: /* Symbol style rate */
764 		for (i = 0; i < BITRATE_TABLE_SIZE; i++)
765 			if (bitrate_table[i].intersil_txratectrl == val) {
766 				*bitrate = bitrate_table[i].bitrate * 100000;
767 				break;
768 			}
769 
770 		if (i >= BITRATE_TABLE_SIZE) {
771 			printk(KERN_INFO "%s: Unable to determine current bitrate (0x%04hx)\n",
772 			       priv->ndev->name, val);
773 			err = -EIO;
774 		}
775 
776 		break;
777 	default:
778 		BUG();
779 	}
780 
781 	return err;
782 }
783 
784 /* Set fixed AP address */
__orinoco_hw_set_wap(struct orinoco_private * priv)785 int __orinoco_hw_set_wap(struct orinoco_private *priv)
786 {
787 	int roaming_flag;
788 	int err = 0;
789 	struct hermes *hw = &priv->hw;
790 
791 	switch (priv->firmware_type) {
792 	case FIRMWARE_TYPE_AGERE:
793 		/* not supported */
794 		break;
795 	case FIRMWARE_TYPE_INTERSIL:
796 		if (priv->bssid_fixed)
797 			roaming_flag = 2;
798 		else
799 			roaming_flag = 1;
800 
801 		err = hermes_write_wordrec(hw, USER_BAP,
802 					   HERMES_RID_CNFROAMINGMODE,
803 					   roaming_flag);
804 		break;
805 	case FIRMWARE_TYPE_SYMBOL:
806 		err = HERMES_WRITE_RECORD(hw, USER_BAP,
807 					  HERMES_RID_CNFMANDATORYBSSID_SYMBOL,
808 					  &priv->desired_bssid);
809 		break;
810 	}
811 	return err;
812 }
813 
814 /* Change the WEP keys and/or the current keys.  Can be called
815  * either from __orinoco_hw_setup_enc() or directly from
816  * orinoco_ioctl_setiwencode().  In the later case the association
817  * with the AP is not broken (if the firmware can handle it),
818  * which is needed for 802.1x implementations. */
__orinoco_hw_setup_wepkeys(struct orinoco_private * priv)819 int __orinoco_hw_setup_wepkeys(struct orinoco_private *priv)
820 {
821 	struct hermes *hw = &priv->hw;
822 	int err = 0;
823 	int i;
824 
825 	switch (priv->firmware_type) {
826 	case FIRMWARE_TYPE_AGERE:
827 	{
828 		struct orinoco_key keys[ORINOCO_MAX_KEYS];
829 
830 		memset(&keys, 0, sizeof(keys));
831 		for (i = 0; i < ORINOCO_MAX_KEYS; i++) {
832 			int len = min(priv->keys[i].key_len,
833 				      ORINOCO_MAX_KEY_SIZE);
834 			memcpy(&keys[i].data, priv->keys[i].key, len);
835 			if (len > SMALL_KEY_SIZE)
836 				keys[i].len = cpu_to_le16(LARGE_KEY_SIZE);
837 			else if (len > 0)
838 				keys[i].len = cpu_to_le16(SMALL_KEY_SIZE);
839 			else
840 				keys[i].len = cpu_to_le16(0);
841 		}
842 
843 		err = HERMES_WRITE_RECORD(hw, USER_BAP,
844 					  HERMES_RID_CNFWEPKEYS_AGERE,
845 					  &keys);
846 		if (err)
847 			return err;
848 		err = hermes_write_wordrec(hw, USER_BAP,
849 					   HERMES_RID_CNFTXKEY_AGERE,
850 					   priv->tx_key);
851 		if (err)
852 			return err;
853 		break;
854 	}
855 	case FIRMWARE_TYPE_INTERSIL:
856 	case FIRMWARE_TYPE_SYMBOL:
857 		{
858 			int keylen;
859 
860 			/* Force uniform key length to work around
861 			 * firmware bugs */
862 			keylen = priv->keys[priv->tx_key].key_len;
863 
864 			if (keylen > LARGE_KEY_SIZE) {
865 				printk(KERN_ERR "%s: BUG: Key %d has oversize length %d.\n",
866 				       priv->ndev->name, priv->tx_key, keylen);
867 				return -E2BIG;
868 			} else if (keylen > SMALL_KEY_SIZE)
869 				keylen = LARGE_KEY_SIZE;
870 			else if (keylen > 0)
871 				keylen = SMALL_KEY_SIZE;
872 			else
873 				keylen = 0;
874 
875 			/* Write all 4 keys */
876 			for (i = 0; i < ORINOCO_MAX_KEYS; i++) {
877 				u8 key[LARGE_KEY_SIZE] = { 0 };
878 
879 				memcpy(key, priv->keys[i].key,
880 				       priv->keys[i].key_len);
881 
882 				err = hw->ops->write_ltv(hw, USER_BAP,
883 						HERMES_RID_CNFDEFAULTKEY0 + i,
884 						HERMES_BYTES_TO_RECLEN(keylen),
885 						key);
886 				if (err)
887 					return err;
888 			}
889 
890 			/* Write the index of the key used in transmission */
891 			err = hermes_write_wordrec(hw, USER_BAP,
892 						HERMES_RID_CNFWEPDEFAULTKEYID,
893 						priv->tx_key);
894 			if (err)
895 				return err;
896 		}
897 		break;
898 	}
899 
900 	return 0;
901 }
902 
__orinoco_hw_setup_enc(struct orinoco_private * priv)903 int __orinoco_hw_setup_enc(struct orinoco_private *priv)
904 {
905 	struct hermes *hw = &priv->hw;
906 	int err = 0;
907 	int master_wep_flag;
908 	int auth_flag;
909 	int enc_flag;
910 
911 	/* Setup WEP keys */
912 	if (priv->encode_alg == ORINOCO_ALG_WEP)
913 		__orinoco_hw_setup_wepkeys(priv);
914 
915 	if (priv->wep_restrict)
916 		auth_flag = HERMES_AUTH_SHARED_KEY;
917 	else
918 		auth_flag = HERMES_AUTH_OPEN;
919 
920 	if (priv->wpa_enabled)
921 		enc_flag = 2;
922 	else if (priv->encode_alg == ORINOCO_ALG_WEP)
923 		enc_flag = 1;
924 	else
925 		enc_flag = 0;
926 
927 	switch (priv->firmware_type) {
928 	case FIRMWARE_TYPE_AGERE: /* Agere style WEP */
929 		if (priv->encode_alg == ORINOCO_ALG_WEP) {
930 			/* Enable the shared-key authentication. */
931 			err = hermes_write_wordrec(hw, USER_BAP,
932 					HERMES_RID_CNFAUTHENTICATION_AGERE,
933 					auth_flag);
934 			if (err)
935 				return err;
936 		}
937 		err = hermes_write_wordrec(hw, USER_BAP,
938 					   HERMES_RID_CNFWEPENABLED_AGERE,
939 					   enc_flag);
940 		if (err)
941 			return err;
942 
943 		if (priv->has_wpa) {
944 			/* Set WPA key management */
945 			err = hermes_write_wordrec(hw, USER_BAP,
946 				  HERMES_RID_CNFSETWPAAUTHMGMTSUITE_AGERE,
947 				  priv->key_mgmt);
948 			if (err)
949 				return err;
950 		}
951 
952 		break;
953 
954 	case FIRMWARE_TYPE_INTERSIL: /* Intersil style WEP */
955 	case FIRMWARE_TYPE_SYMBOL: /* Symbol style WEP */
956 		if (priv->encode_alg == ORINOCO_ALG_WEP) {
957 			if (priv->wep_restrict ||
958 			    (priv->firmware_type == FIRMWARE_TYPE_SYMBOL))
959 				master_wep_flag = HERMES_WEP_PRIVACY_INVOKED |
960 						  HERMES_WEP_EXCL_UNENCRYPTED;
961 			else
962 				master_wep_flag = HERMES_WEP_PRIVACY_INVOKED;
963 
964 			err = hermes_write_wordrec(hw, USER_BAP,
965 						   HERMES_RID_CNFAUTHENTICATION,
966 						   auth_flag);
967 			if (err)
968 				return err;
969 		} else
970 			master_wep_flag = 0;
971 
972 		if (priv->iw_mode == NL80211_IFTYPE_MONITOR)
973 			master_wep_flag |= HERMES_WEP_HOST_DECRYPT;
974 
975 		/* Master WEP setting : on/off */
976 		err = hermes_write_wordrec(hw, USER_BAP,
977 					   HERMES_RID_CNFWEPFLAGS_INTERSIL,
978 					   master_wep_flag);
979 		if (err)
980 			return err;
981 
982 		break;
983 	}
984 
985 	return 0;
986 }
987 
988 /* key must be 32 bytes, including the tx and rx MIC keys.
989  * rsc must be NULL or up to 8 bytes
990  * tsc must be NULL or up to 8 bytes
991  */
__orinoco_hw_set_tkip_key(struct orinoco_private * priv,int key_idx,int set_tx,const u8 * key,const u8 * rsc,size_t rsc_len,const u8 * tsc,size_t tsc_len)992 int __orinoco_hw_set_tkip_key(struct orinoco_private *priv, int key_idx,
993 			      int set_tx, const u8 *key, const u8 *rsc,
994 			      size_t rsc_len, const u8 *tsc, size_t tsc_len)
995 {
996 	struct {
997 		__le16 idx;
998 		u8 rsc[ORINOCO_SEQ_LEN];
999 		u8 key[TKIP_KEYLEN];
1000 		u8 tx_mic[MIC_KEYLEN];
1001 		u8 rx_mic[MIC_KEYLEN];
1002 		u8 tsc[ORINOCO_SEQ_LEN];
1003 	} __packed buf;
1004 	struct hermes *hw = &priv->hw;
1005 	int ret;
1006 	int err;
1007 	int k;
1008 	u16 xmitting;
1009 
1010 	key_idx &= 0x3;
1011 
1012 	if (set_tx)
1013 		key_idx |= 0x8000;
1014 
1015 	buf.idx = cpu_to_le16(key_idx);
1016 	memcpy(buf.key, key,
1017 	       sizeof(buf.key) + sizeof(buf.tx_mic) + sizeof(buf.rx_mic));
1018 
1019 	if (rsc_len > sizeof(buf.rsc))
1020 		rsc_len = sizeof(buf.rsc);
1021 
1022 	if (tsc_len > sizeof(buf.tsc))
1023 		tsc_len = sizeof(buf.tsc);
1024 
1025 	memset(buf.rsc, 0, sizeof(buf.rsc));
1026 	memset(buf.tsc, 0, sizeof(buf.tsc));
1027 
1028 	if (rsc != NULL)
1029 		memcpy(buf.rsc, rsc, rsc_len);
1030 
1031 	if (tsc != NULL)
1032 		memcpy(buf.tsc, tsc, tsc_len);
1033 	else
1034 		buf.tsc[4] = 0x10;
1035 
1036 	/* Wait up to 100ms for tx queue to empty */
1037 	for (k = 100; k > 0; k--) {
1038 		udelay(1000);
1039 		ret = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_TXQUEUEEMPTY,
1040 					  &xmitting);
1041 		if (ret || !xmitting)
1042 			break;
1043 	}
1044 
1045 	if (k == 0)
1046 		ret = -ETIMEDOUT;
1047 
1048 	err = HERMES_WRITE_RECORD(hw, USER_BAP,
1049 				  HERMES_RID_CNFADDDEFAULTTKIPKEY_AGERE,
1050 				  &buf);
1051 
1052 	return ret ? ret : err;
1053 }
1054 
orinoco_clear_tkip_key(struct orinoco_private * priv,int key_idx)1055 int orinoco_clear_tkip_key(struct orinoco_private *priv, int key_idx)
1056 {
1057 	struct hermes *hw = &priv->hw;
1058 	int err;
1059 
1060 	err = hermes_write_wordrec(hw, USER_BAP,
1061 				   HERMES_RID_CNFREMDEFAULTTKIPKEY_AGERE,
1062 				   key_idx);
1063 	if (err)
1064 		printk(KERN_WARNING "%s: Error %d clearing TKIP key %d\n",
1065 		       priv->ndev->name, err, key_idx);
1066 	return err;
1067 }
1068 
__orinoco_hw_set_multicast_list(struct orinoco_private * priv,struct net_device * dev,int mc_count,int promisc)1069 int __orinoco_hw_set_multicast_list(struct orinoco_private *priv,
1070 				    struct net_device *dev,
1071 				    int mc_count, int promisc)
1072 {
1073 	struct hermes *hw = &priv->hw;
1074 	int err = 0;
1075 
1076 	if (promisc != priv->promiscuous) {
1077 		err = hermes_write_wordrec(hw, USER_BAP,
1078 					   HERMES_RID_CNFPROMISCUOUSMODE,
1079 					   promisc);
1080 		if (err) {
1081 			printk(KERN_ERR "%s: Error %d setting PROMISCUOUSMODE to 1.\n",
1082 			       priv->ndev->name, err);
1083 		} else
1084 			priv->promiscuous = promisc;
1085 	}
1086 
1087 	/* If we're not in promiscuous mode, then we need to set the
1088 	 * group address if either we want to multicast, or if we were
1089 	 * multicasting and want to stop */
1090 	if (!promisc && (mc_count || priv->mc_count)) {
1091 		struct netdev_hw_addr *ha;
1092 		struct hermes_multicast mclist;
1093 		int i = 0;
1094 
1095 		netdev_for_each_mc_addr(ha, dev) {
1096 			if (i == mc_count)
1097 				break;
1098 			memcpy(mclist.addr[i++], ha->addr, ETH_ALEN);
1099 		}
1100 
1101 		err = hw->ops->write_ltv(hw, USER_BAP,
1102 				   HERMES_RID_CNFGROUPADDRESSES,
1103 				   HERMES_BYTES_TO_RECLEN(mc_count * ETH_ALEN),
1104 				   &mclist);
1105 		if (err)
1106 			printk(KERN_ERR "%s: Error %d setting multicast list.\n",
1107 			       priv->ndev->name, err);
1108 		else
1109 			priv->mc_count = mc_count;
1110 	}
1111 	return err;
1112 }
1113 
1114 /* Return : < 0 -> error code ; >= 0 -> length */
orinoco_hw_get_essid(struct orinoco_private * priv,int * active,char buf[IW_ESSID_MAX_SIZE+1])1115 int orinoco_hw_get_essid(struct orinoco_private *priv, int *active,
1116 			 char buf[IW_ESSID_MAX_SIZE + 1])
1117 {
1118 	struct hermes *hw = &priv->hw;
1119 	int err = 0;
1120 	struct hermes_idstring essidbuf;
1121 	char *p = (char *)(&essidbuf.val);
1122 	int len;
1123 	unsigned long flags;
1124 
1125 	if (orinoco_lock(priv, &flags) != 0)
1126 		return -EBUSY;
1127 
1128 	if (strlen(priv->desired_essid) > 0) {
1129 		/* We read the desired SSID from the hardware rather
1130 		   than from priv->desired_essid, just in case the
1131 		   firmware is allowed to change it on us. I'm not
1132 		   sure about this */
1133 		/* My guess is that the OWNSSID should always be whatever
1134 		 * we set to the card, whereas CURRENT_SSID is the one that
1135 		 * may change... - Jean II */
1136 		u16 rid;
1137 
1138 		*active = 1;
1139 
1140 		rid = (priv->port_type == 3) ? HERMES_RID_CNFOWNSSID :
1141 			HERMES_RID_CNFDESIREDSSID;
1142 
1143 		err = hw->ops->read_ltv(hw, USER_BAP, rid, sizeof(essidbuf),
1144 					NULL, &essidbuf);
1145 		if (err)
1146 			goto fail_unlock;
1147 	} else {
1148 		*active = 0;
1149 
1150 		err = hw->ops->read_ltv(hw, USER_BAP, HERMES_RID_CURRENTSSID,
1151 					sizeof(essidbuf), NULL, &essidbuf);
1152 		if (err)
1153 			goto fail_unlock;
1154 	}
1155 
1156 	len = le16_to_cpu(essidbuf.len);
1157 	BUG_ON(len > IW_ESSID_MAX_SIZE);
1158 
1159 	memset(buf, 0, IW_ESSID_MAX_SIZE);
1160 	memcpy(buf, p, len);
1161 	err = len;
1162 
1163  fail_unlock:
1164 	orinoco_unlock(priv, &flags);
1165 
1166 	return err;
1167 }
1168 
orinoco_hw_get_freq(struct orinoco_private * priv)1169 int orinoco_hw_get_freq(struct orinoco_private *priv)
1170 {
1171 	struct hermes *hw = &priv->hw;
1172 	int err = 0;
1173 	u16 channel;
1174 	int freq = 0;
1175 	unsigned long flags;
1176 
1177 	if (orinoco_lock(priv, &flags) != 0)
1178 		return -EBUSY;
1179 
1180 	err = hermes_read_wordrec(hw, USER_BAP, HERMES_RID_CURRENTCHANNEL,
1181 				  &channel);
1182 	if (err)
1183 		goto out;
1184 
1185 	/* Intersil firmware 1.3.5 returns 0 when the interface is down */
1186 	if (channel == 0) {
1187 		err = -EBUSY;
1188 		goto out;
1189 	}
1190 
1191 	if ((channel < 1) || (channel > NUM_CHANNELS)) {
1192 		printk(KERN_WARNING "%s: Channel out of range (%d)!\n",
1193 		       priv->ndev->name, channel);
1194 		err = -EBUSY;
1195 		goto out;
1196 
1197 	}
1198 	freq = ieee80211_channel_to_frequency(channel, NL80211_BAND_2GHZ);
1199 
1200  out:
1201 	orinoco_unlock(priv, &flags);
1202 
1203 	if (err > 0)
1204 		err = -EBUSY;
1205 	return err ? err : freq;
1206 }
1207 
orinoco_hw_get_bitratelist(struct orinoco_private * priv,int * numrates,s32 * rates,int max)1208 int orinoco_hw_get_bitratelist(struct orinoco_private *priv,
1209 			       int *numrates, s32 *rates, int max)
1210 {
1211 	struct hermes *hw = &priv->hw;
1212 	struct hermes_idstring list;
1213 	unsigned char *p = (unsigned char *)&list.val;
1214 	int err = 0;
1215 	int num;
1216 	int i;
1217 	unsigned long flags;
1218 
1219 	if (orinoco_lock(priv, &flags) != 0)
1220 		return -EBUSY;
1221 
1222 	err = hw->ops->read_ltv(hw, USER_BAP, HERMES_RID_SUPPORTEDDATARATES,
1223 				sizeof(list), NULL, &list);
1224 	orinoco_unlock(priv, &flags);
1225 
1226 	if (err)
1227 		return err;
1228 
1229 	num = le16_to_cpu(list.len);
1230 	*numrates = num;
1231 	num = min(num, max);
1232 
1233 	for (i = 0; i < num; i++)
1234 		rates[i] = (p[i] & 0x7f) * 500000; /* convert to bps */
1235 
1236 	return 0;
1237 }
1238 
orinoco_hw_trigger_scan(struct orinoco_private * priv,const struct cfg80211_ssid * ssid)1239 int orinoco_hw_trigger_scan(struct orinoco_private *priv,
1240 			    const struct cfg80211_ssid *ssid)
1241 {
1242 	struct net_device *dev = priv->ndev;
1243 	struct hermes *hw = &priv->hw;
1244 	unsigned long flags;
1245 	int err = 0;
1246 
1247 	if (orinoco_lock(priv, &flags) != 0)
1248 		return -EBUSY;
1249 
1250 	/* Scanning with port 0 disabled would fail */
1251 	if (!netif_running(dev)) {
1252 		err = -ENETDOWN;
1253 		goto out;
1254 	}
1255 
1256 	/* In monitor mode, the scan results are always empty.
1257 	 * Probe responses are passed to the driver as received
1258 	 * frames and could be processed in software. */
1259 	if (priv->iw_mode == NL80211_IFTYPE_MONITOR) {
1260 		err = -EOPNOTSUPP;
1261 		goto out;
1262 	}
1263 
1264 	if (priv->has_hostscan) {
1265 		switch (priv->firmware_type) {
1266 		case FIRMWARE_TYPE_SYMBOL:
1267 			err = hermes_write_wordrec(hw, USER_BAP,
1268 						HERMES_RID_CNFHOSTSCAN_SYMBOL,
1269 						HERMES_HOSTSCAN_SYMBOL_ONCE |
1270 						HERMES_HOSTSCAN_SYMBOL_BCAST);
1271 			break;
1272 		case FIRMWARE_TYPE_INTERSIL: {
1273 			__le16 req[3];
1274 
1275 			req[0] = cpu_to_le16(0x3fff);	/* All channels */
1276 			req[1] = cpu_to_le16(0x0001);	/* rate 1 Mbps */
1277 			req[2] = 0;			/* Any ESSID */
1278 			err = HERMES_WRITE_RECORD(hw, USER_BAP,
1279 						  HERMES_RID_CNFHOSTSCAN, &req);
1280 			break;
1281 		}
1282 		case FIRMWARE_TYPE_AGERE:
1283 			if (ssid->ssid_len > 0) {
1284 				struct hermes_idstring idbuf;
1285 				size_t len = ssid->ssid_len;
1286 
1287 				idbuf.len = cpu_to_le16(len);
1288 				memcpy(idbuf.val, ssid->ssid, len);
1289 
1290 				err = hw->ops->write_ltv(hw, USER_BAP,
1291 					       HERMES_RID_CNFSCANSSID_AGERE,
1292 					       HERMES_BYTES_TO_RECLEN(len + 2),
1293 					       &idbuf);
1294 			} else
1295 				err = hermes_write_wordrec(hw, USER_BAP,
1296 						   HERMES_RID_CNFSCANSSID_AGERE,
1297 						   0);	/* Any ESSID */
1298 			if (err)
1299 				break;
1300 
1301 			if (priv->has_ext_scan) {
1302 				err = hermes_write_wordrec(hw, USER_BAP,
1303 						HERMES_RID_CNFSCANCHANNELS2GHZ,
1304 						0x7FFF);
1305 				if (err)
1306 					goto out;
1307 
1308 				err = hermes_inquire(hw,
1309 						     HERMES_INQ_CHANNELINFO);
1310 			} else
1311 				err = hermes_inquire(hw, HERMES_INQ_SCAN);
1312 
1313 			break;
1314 		}
1315 	} else
1316 		err = hermes_inquire(hw, HERMES_INQ_SCAN);
1317 
1318  out:
1319 	orinoco_unlock(priv, &flags);
1320 
1321 	return err;
1322 }
1323 
1324 /* Disassociate from node with BSSID addr */
orinoco_hw_disassociate(struct orinoco_private * priv,u8 * addr,u16 reason_code)1325 int orinoco_hw_disassociate(struct orinoco_private *priv,
1326 			    u8 *addr, u16 reason_code)
1327 {
1328 	struct hermes *hw = &priv->hw;
1329 	int err;
1330 
1331 	struct {
1332 		u8 addr[ETH_ALEN];
1333 		__le16 reason_code;
1334 	} __packed buf;
1335 
1336 	/* Currently only supported by WPA enabled Agere fw */
1337 	if (!priv->has_wpa)
1338 		return -EOPNOTSUPP;
1339 
1340 	memcpy(buf.addr, addr, ETH_ALEN);
1341 	buf.reason_code = cpu_to_le16(reason_code);
1342 	err = HERMES_WRITE_RECORD(hw, USER_BAP,
1343 				  HERMES_RID_CNFDISASSOCIATE,
1344 				  &buf);
1345 	return err;
1346 }
1347 
orinoco_hw_get_current_bssid(struct orinoco_private * priv,u8 * addr)1348 int orinoco_hw_get_current_bssid(struct orinoco_private *priv,
1349 				 u8 *addr)
1350 {
1351 	struct hermes *hw = &priv->hw;
1352 	int err;
1353 
1354 	err = hw->ops->read_ltv(hw, USER_BAP, HERMES_RID_CURRENTBSSID,
1355 				ETH_ALEN, NULL, addr);
1356 
1357 	return err;
1358 }
1359