drivers/net/wireless/iwlwifi/iwl-agn.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2003 - 2011 Intel Corporation. All rights reserved.
   4  *
   5  * Portions of this file are derived from the ipw3945 project, as well
   6  * as portions of the ieee80211 subsystem header files.
   7  *
   8  * This program is free software; you can redistribute it and/or modify it
   9  * under the terms of version 2 of the GNU General Public License as
  10  * published by the Free Software Foundation.
  11  *
  12  * This program is distributed in the hope that it will be useful, but WITHOUT
  13  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  14  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  15  * more details.
  16  *
  17  * You should have received a copy of the GNU General Public License along with
  18  * this program; if not, write to the Free Software Foundation, Inc.,
  19  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  20  *
  21  * The full GNU General Public License is included in this distribution in the
  22  * file called LICENSE.
  23  *
  24  * Contact Information:
  25  *  Intel Linux Wireless <ilw@linux.intel.com>
  26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  27  *
  28  *****************************************************************************/
  29 #include <linux/kernel.h>
  30 #include <linux/module.h>
  31 #include <linux/init.h>
  32 #include <linux/slab.h>
  33 #include <linux/dma-mapping.h>
  34 #include <linux/delay.h>
  35 #include <linux/sched.h>
  36 #include <linux/skbuff.h>
  37 #include <linux/netdevice.h>
  38 #include <linux/firmware.h>
  39 #include <linux/etherdevice.h>
  40 #include <linux/if_arp.h>
  41
  42 #include <net/mac80211.h>
  43
  44 #include <asm/div64.h>
  45
  46 #include "iwl-eeprom.h"
  47 #include "iwl-dev.h"
  48 #include "iwl-core.h"
  49 #include "iwl-io.h"
  50 #include "iwl-helpers.h"
  51 #include "iwl-sta.h"
  52 #include "iwl-agn-calib.h"
  53 #include "iwl-agn.h"
  54 #include "iwl-shared.h"
  55 #include "iwl-bus.h"
  56 #include "iwl-trans.h"
  57
  58 /******************************************************************************
  59  *
  60  * module boiler plate
  61  *
  62  ******************************************************************************/
  63
  64 /*
  65  * module name, copyright, version, etc.
  66  */
  67 #define DRV_DESCRIPTION "Intel(R) Wireless WiFi Link AGN driver for Linux"
  68
  69 #ifdef CONFIG_IWLWIFI_DEBUG
  70 #define VD "d"
  71 #else
  72 #define VD
  73 #endif
  74
  75 #define DRV_VERSION     IWLWIFI_VERSION VD
  76
  77
  78 MODULE_DESCRIPTION(DRV_DESCRIPTION);
  79 MODULE_VERSION(DRV_VERSION);
  80 MODULE_AUTHOR(DRV_COPYRIGHT " " DRV_AUTHOR);
  81 MODULE_LICENSE("GPL");
  82 MODULE_ALIAS("iwlagn");
  83
  84 void iwl_update_chain_flags(struct iwl_priv *priv)
  85 {
  86         struct iwl_rxon_context *ctx;
  87
  88         for_each_context(priv, ctx) {
  89                 iwlagn_set_rxon_chain(priv, ctx);
  90                 if (ctx->active.rx_chain != ctx->staging.rx_chain)
  91                         iwlagn_commit_rxon(priv, ctx);
  92         }
  93 }
  94
  95 /* Parse the beacon frame to find the TIM element and set tim_idx & tim_size */
  96 static void iwl_set_beacon_tim(struct iwl_priv *priv,
  97                                struct iwl_tx_beacon_cmd *tx_beacon_cmd,
  98                                u8 *beacon, u32 frame_size)
  99 {
 100         u16 tim_idx;
 101         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)beacon;
 102
 103         /*
 104          * The index is relative to frame start but we start looking at the
 105          * variable-length part of the beacon.
 106          */
 107         tim_idx = mgmt->u.beacon.variable - beacon;
 108
 109         /* Parse variable-length elements of beacon to find WLAN_EID_TIM */
 110         while ((tim_idx < (frame_size - 2)) &&
 111                         (beacon[tim_idx] != WLAN_EID_TIM))
 112                 tim_idx += beacon[tim_idx+1] + 2;
 113
 114         /* If TIM field was found, set variables */
 115         if ((tim_idx < (frame_size - 1)) && (beacon[tim_idx] == WLAN_EID_TIM)) {
 116                 tx_beacon_cmd->tim_idx = cpu_to_le16(tim_idx);
 117                 tx_beacon_cmd->tim_size = beacon[tim_idx+1];
 118         } else
 119                 IWL_WARN(priv, "Unable to find TIM Element in beacon\n");
 120 }
 121
 122 int iwlagn_send_beacon_cmd(struct iwl_priv *priv)
 123 {
 124         struct iwl_tx_beacon_cmd *tx_beacon_cmd;
 125         struct iwl_host_cmd cmd = {
 126                 .id = REPLY_TX_BEACON,
 127                 .flags = CMD_SYNC,
 128         };
 129         struct ieee80211_tx_info *info;
 130         u32 frame_size;
 131         u32 rate_flags;
 132         u32 rate;
 133
 134         /*
 135          * We have to set up the TX command, the TX Beacon command, and the
 136          * beacon contents.
 137          */
 138
 139         lockdep_assert_held(&priv->shrd->mutex);
 140
 141         if (!priv->beacon_ctx) {
 142                 IWL_ERR(priv, "trying to build beacon w/o beacon context!\n");
 143                 return 0;
 144         }
 145
 146         if (WARN_ON(!priv->beacon_skb))
 147                 return -EINVAL;
 148
 149         /* Allocate beacon command */
 150         if (!priv->beacon_cmd)
 151                 priv->beacon_cmd = kzalloc(sizeof(*tx_beacon_cmd), GFP_KERNEL);
 152         tx_beacon_cmd = priv->beacon_cmd;
 153         if (!tx_beacon_cmd)
 154                 return -ENOMEM;
 155
 156         frame_size = priv->beacon_skb->len;
 157
 158         /* Set up TX command fields */
 159         tx_beacon_cmd->tx.len = cpu_to_le16((u16)frame_size);
 160         tx_beacon_cmd->tx.sta_id = priv->beacon_ctx->bcast_sta_id;
 161         tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
 162         tx_beacon_cmd->tx.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK |
 163                 TX_CMD_FLG_TSF_MSK | TX_CMD_FLG_STA_RATE_MSK;
 164
 165         /* Set up TX beacon command fields */
 166         iwl_set_beacon_tim(priv, tx_beacon_cmd, priv->beacon_skb->data,
 167                            frame_size);
 168
 169         /* Set up packet rate and flags */
 170         info = IEEE80211_SKB_CB(priv->beacon_skb);
 171
 172         /*
 173          * Let's set up the rate at least somewhat correctly;
 174          * it will currently not actually be used by the uCode,
 175          * it uses the broadcast station's rate instead.
 176          */
 177         if (info->control.rates[0].idx < 0 ||
 178             info->control.rates[0].flags & IEEE80211_TX_RC_MCS)
 179                 rate = 0;
 180         else
 181                 rate = info->control.rates[0].idx;
 182
 183         priv->mgmt_tx_ant = iwl_toggle_tx_ant(priv, priv->mgmt_tx_ant,
 184                                               hw_params(priv).valid_tx_ant);
 185         rate_flags = iwl_ant_idx_to_flags(priv->mgmt_tx_ant);
 186
 187         /* In mac80211, rates for 5 GHz start at 0 */
 188         if (info->band == IEEE80211_BAND_5GHZ)
 189                 rate += IWL_FIRST_OFDM_RATE;
 190         else if (rate >= IWL_FIRST_CCK_RATE && rate <= IWL_LAST_CCK_RATE)
 191                 rate_flags |= RATE_MCS_CCK_MSK;
 192
 193         tx_beacon_cmd->tx.rate_n_flags =
 194                         iwl_hw_set_rate_n_flags(rate, rate_flags);
 195
 196         /* Submit command */
 197         cmd.len[0] = sizeof(*tx_beacon_cmd);
 198         cmd.data[0] = tx_beacon_cmd;
 199         cmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY;
 200         cmd.len[1] = frame_size;
 201         cmd.data[1] = priv->beacon_skb->data;
 202         cmd.dataflags[1] = IWL_HCMD_DFL_NOCOPY;
 203
 204         return iwl_trans_send_cmd(trans(priv), &cmd);
 205 }
 206
 207 static void iwl_bg_beacon_update(struct work_struct *work)
 208 {
 209         struct iwl_priv *priv =
 210                 container_of(work, struct iwl_priv, beacon_update);
 211         struct sk_buff *beacon;
 212
 213         mutex_lock(&priv->shrd->mutex);
 214         if (!priv->beacon_ctx) {
 215                 IWL_ERR(priv, "updating beacon w/o beacon context!\n");
 216                 goto out;
 217         }
 218
 219         if (priv->beacon_ctx->vif->type != NL80211_IFTYPE_AP) {
 220                 /*
 221                  * The ucode will send beacon notifications even in
 222                  * IBSS mode, but we don't want to process them. But
 223                  * we need to defer the type check to here due to
 224                  * requiring locking around the beacon_ctx access.
 225                  */
 226                 goto out;
 227         }
 228
 229         /* Pull updated AP beacon from mac80211. will fail if not in AP mode */
 230         beacon = ieee80211_beacon_get(priv->hw, priv->beacon_ctx->vif);
 231         if (!beacon) {
 232                 IWL_ERR(priv, "update beacon failed -- keeping old\n");
 233                 goto out;
 234         }
 235
 236         /* new beacon skb is allocated every time; dispose previous.*/
 237         dev_kfree_skb(priv->beacon_skb);
 238
 239         priv->beacon_skb = beacon;
 240
 241         iwlagn_send_beacon_cmd(priv);
 242  out:
 243         mutex_unlock(&priv->shrd->mutex);
 244 }
 245
 246 static void iwl_bg_bt_runtime_config(struct work_struct *work)
 247 {
 248         struct iwl_priv *priv =
 249                 container_of(work, struct iwl_priv, bt_runtime_config);
 250
 251         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 252                 return;
 253
 254         /* dont send host command if rf-kill is on */
 255         if (!iwl_is_ready_rf(priv->shrd))
 256                 return;
 257         iwlagn_send_advance_bt_config(priv);
 258 }
 259
 260 static void iwl_bg_bt_full_concurrency(struct work_struct *work)
 261 {
 262         struct iwl_priv *priv =
 263                 container_of(work, struct iwl_priv, bt_full_concurrency);
 264         struct iwl_rxon_context *ctx;
 265
 266         mutex_lock(&priv->shrd->mutex);
 267
 268         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 269                 goto out;
 270
 271         /* dont send host command if rf-kill is on */
 272         if (!iwl_is_ready_rf(priv->shrd))
 273                 goto out;
 274
 275         IWL_DEBUG_INFO(priv, "BT coex in %s mode\n",
 276                        priv->bt_full_concurrent ?
 277                        "full concurrency" : "3-wire");
 278
 279         /*
 280          * LQ & RXON updated cmds must be sent before BT Config cmd
 281          * to avoid 3-wire collisions
 282          */
 283         for_each_context(priv, ctx) {
 284                 iwlagn_set_rxon_chain(priv, ctx);
 285                 iwlagn_commit_rxon(priv, ctx);
 286         }
 287
 288         iwlagn_send_advance_bt_config(priv);
 289 out:
 290         mutex_unlock(&priv->shrd->mutex);
 291 }
 292
 293 /**
 294  * iwl_bg_statistics_periodic - Timer callback to queue statistics
 295  *
 296  * This callback is provided in order to send a statistics request.
 297  *
 298  * This timer function is continually reset to execute within
 299  * REG_RECALIB_PERIOD seconds since the last STATISTICS_NOTIFICATION
 300  * was received.  We need to ensure we receive the statistics in order
 301  * to update the temperature used for calibrating the TXPOWER.
 302  */
 303 static void iwl_bg_statistics_periodic(unsigned long data)
 304 {
 305         struct iwl_priv *priv = (struct iwl_priv *)data;
 306
 307         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 308                 return;
 309
 310         /* dont send host command if rf-kill is on */
 311         if (!iwl_is_ready_rf(priv->shrd))
 312                 return;
 313
 314         iwl_send_statistics_request(priv, CMD_ASYNC, false);
 315 }
 316
 317
 318 static void iwl_print_cont_event_trace(struct iwl_priv *priv, u32 base,
 319                                         u32 start_idx, u32 num_events,
 320                                         u32 mode)
 321 {
 322         u32 i;
 323         u32 ptr;        /* SRAM byte address of log data */
 324         u32 ev, time, data; /* event log data */
 325         unsigned long reg_flags;
 326
 327         if (mode == 0)
 328                 ptr = base + (4 * sizeof(u32)) + (start_idx * 2 * sizeof(u32));
 329         else
 330                 ptr = base + (4 * sizeof(u32)) + (start_idx * 3 * sizeof(u32));
 331
 332         /* Make sure device is powered up for SRAM reads */
 333         spin_lock_irqsave(&bus(priv)->reg_lock, reg_flags);
 334         if (iwl_grab_nic_access(bus(priv))) {
 335                 spin_unlock_irqrestore(&bus(priv)->reg_lock, reg_flags);
 336                 return;
 337         }
 338
 339         /* Set starting address; reads will auto-increment */
 340         iwl_write32(bus(priv), HBUS_TARG_MEM_RADDR, ptr);
 341         rmb();
 342
 343         /*
 344          * "time" is actually "data" for mode 0 (no timestamp).
 345          * place event id # at far right for easier visual parsing.
 346          */
 347         for (i = 0; i < num_events; i++) {
 348                 ev = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 349                 time = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 350                 if (mode == 0) {
 351                         trace_iwlwifi_dev_ucode_cont_event(priv,
 352                                                         0, time, ev);
 353                 } else {
 354                         data = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
 355                         trace_iwlwifi_dev_ucode_cont_event(priv,
 356                                                 time, data, ev);
 357                 }
 358         }
 359         /* Allow device to power down */
 360         iwl_release_nic_access(bus(priv));
 361         spin_unlock_irqrestore(&bus(priv)->reg_lock, reg_flags);
 362 }
 363
 364 static void iwl_continuous_event_trace(struct iwl_priv *priv)
 365 {
 366         u32 capacity;   /* event log capacity in # entries */
 367         u32 base;       /* SRAM byte address of event log header */
 368         u32 mode;       /* 0 - no timestamp, 1 - timestamp recorded */
 369         u32 num_wraps;  /* # times uCode wrapped to top of log */
 370         u32 next_entry; /* index of next entry to be written by uCode */
 371
 372         base = priv->device_pointers.error_event_table;
 373         if (iwlagn_hw_valid_rtc_data_addr(base)) {
 374                 capacity = iwl_read_targ_mem(bus(priv), base);
 375                 num_wraps = iwl_read_targ_mem(bus(priv),
 376                                                 base + (2 * sizeof(u32)));
 377                 mode = iwl_read_targ_mem(bus(priv), base + (1 * sizeof(u32)));
 378                 next_entry = iwl_read_targ_mem(bus(priv),
 379                                                 base + (3 * sizeof(u32)));
 380         } else
 381                 return;
 382
 383         if (num_wraps == priv->event_log.num_wraps) {
 384                 iwl_print_cont_event_trace(priv,
 385                                        base, priv->event_log.next_entry,
 386                                        next_entry - priv->event_log.next_entry,
 387                                        mode);
 388                 priv->event_log.non_wraps_count++;
 389         } else {
 390                 if ((num_wraps - priv->event_log.num_wraps) > 1)
 391                         priv->event_log.wraps_more_count++;
 392                 else
 393                         priv->event_log.wraps_once_count++;
 394                 trace_iwlwifi_dev_ucode_wrap_event(priv,
 395                                 num_wraps - priv->event_log.num_wraps,
 396                                 next_entry, priv->event_log.next_entry);
 397                 if (next_entry < priv->event_log.next_entry) {
 398                         iwl_print_cont_event_trace(priv, base,
 399                                priv->event_log.next_entry,
 400                                capacity - priv->event_log.next_entry,
 401                                mode);
 402
 403                         iwl_print_cont_event_trace(priv, base, 0,
 404                                 next_entry, mode);
 405                 } else {
 406                         iwl_print_cont_event_trace(priv, base,
 407                                next_entry, capacity - next_entry,
 408                                mode);
 409
 410                         iwl_print_cont_event_trace(priv, base, 0,
 411                                 next_entry, mode);
 412                 }
 413         }
 414         priv->event_log.num_wraps = num_wraps;
 415         priv->event_log.next_entry = next_entry;
 416 }
 417
 418 /**
 419  * iwl_bg_ucode_trace - Timer callback to log ucode event
 420  *
 421  * The timer is continually set to execute every
 422  * UCODE_TRACE_PERIOD milliseconds after the last timer expired
 423  * this function is to perform continuous uCode event logging operation
 424  * if enabled
 425  */
 426 static void iwl_bg_ucode_trace(unsigned long data)
 427 {
 428         struct iwl_priv *priv = (struct iwl_priv *)data;
 429
 430         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 431                 return;
 432
 433         if (priv->event_log.ucode_trace) {
 434                 iwl_continuous_event_trace(priv);
 435                 /* Reschedule the timer to occur in UCODE_TRACE_PERIOD */
 436                 mod_timer(&priv->ucode_trace,
 437                          jiffies + msecs_to_jiffies(UCODE_TRACE_PERIOD));
 438         }
 439 }
 440
 441 static void iwl_bg_tx_flush(struct work_struct *work)
 442 {
 443         struct iwl_priv *priv =
 444                 container_of(work, struct iwl_priv, tx_flush);
 445
 446         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
 447                 return;
 448
 449         /* do nothing if rf-kill is on */
 450         if (!iwl_is_ready_rf(priv->shrd))
 451                 return;
 452
 453         IWL_DEBUG_INFO(priv, "device request: flush all tx frames\n");
 454         iwlagn_dev_txfifo_flush(priv, IWL_DROP_ALL);
 455 }
 456
 457 /******************************************************************************
 458  *
 459  * uCode download functions
 460  *
 461  ******************************************************************************/
 462
 463 static void iwl_free_fw_desc(struct iwl_priv *priv, struct fw_desc *desc)
 464 {
 465         if (desc->v_addr)
 466                 dma_free_coherent(bus(priv)->dev, desc->len,
 467                                   desc->v_addr, desc->p_addr);
 468         desc->v_addr = NULL;
 469         desc->len = 0;
 470 }
 471
 472 static void iwl_free_fw_img(struct iwl_priv *priv, struct fw_img *img)
 473 {
 474         iwl_free_fw_desc(priv, &img->code);
 475         iwl_free_fw_desc(priv, &img->data);
 476 }
 477
 478 static void iwl_dealloc_ucode(struct iwl_priv *priv)
 479 {
 480         iwl_free_fw_img(priv, &priv->ucode_rt);
 481         iwl_free_fw_img(priv, &priv->ucode_init);
 482         iwl_free_fw_img(priv, &priv->ucode_wowlan);
 483 }
 484
 485 static int iwl_alloc_fw_desc(struct iwl_priv *priv, struct fw_desc *desc,
 486                              const void *data, size_t len)
 487 {
 488         if (!len) {
 489                 desc->v_addr = NULL;
 490                 return -EINVAL;
 491         }
 492
 493         desc->v_addr = dma_alloc_coherent(bus(priv)->dev, len,
 494                                           &desc->p_addr, GFP_KERNEL);
 495         if (!desc->v_addr)
 496                 return -ENOMEM;
 497
 498         desc->len = len;
 499         memcpy(desc->v_addr, data, len);
 500         return 0;
 501 }
 502
 503 static void iwl_init_context(struct iwl_priv *priv, u32 ucode_flags)
 504 {
 505         int i;
 506
 507         /*
 508          * The default context is always valid,
 509          * the PAN context depends on uCode.
 510          */
 511         priv->shrd->valid_contexts = BIT(IWL_RXON_CTX_BSS);
 512         if (ucode_flags & IWL_UCODE_TLV_FLAGS_PAN)
 513                 priv->shrd->valid_contexts |= BIT(IWL_RXON_CTX_PAN);
 514
 515         for (i = 0; i < NUM_IWL_RXON_CTX; i++)
 516                 priv->contexts[i].ctxid = i;
 517
 518         priv->contexts[IWL_RXON_CTX_BSS].always_active = true;
 519         priv->contexts[IWL_RXON_CTX_BSS].is_active = true;
 520         priv->contexts[IWL_RXON_CTX_BSS].rxon_cmd = REPLY_RXON;
 521         priv->contexts[IWL_RXON_CTX_BSS].rxon_timing_cmd = REPLY_RXON_TIMING;
 522         priv->contexts[IWL_RXON_CTX_BSS].rxon_assoc_cmd = REPLY_RXON_ASSOC;
 523         priv->contexts[IWL_RXON_CTX_BSS].qos_cmd = REPLY_QOS_PARAM;
 524         priv->contexts[IWL_RXON_CTX_BSS].ap_sta_id = IWL_AP_ID;
 525         priv->contexts[IWL_RXON_CTX_BSS].wep_key_cmd = REPLY_WEPKEY;
 526         priv->contexts[IWL_RXON_CTX_BSS].exclusive_interface_modes =
 527                 BIT(NL80211_IFTYPE_ADHOC);
 528         priv->contexts[IWL_RXON_CTX_BSS].interface_modes =
 529                 BIT(NL80211_IFTYPE_STATION);
 530         priv->contexts[IWL_RXON_CTX_BSS].ap_devtype = RXON_DEV_TYPE_AP;
 531         priv->contexts[IWL_RXON_CTX_BSS].ibss_devtype = RXON_DEV_TYPE_IBSS;
 532         priv->contexts[IWL_RXON_CTX_BSS].station_devtype = RXON_DEV_TYPE_ESS;
 533         priv->contexts[IWL_RXON_CTX_BSS].unused_devtype = RXON_DEV_TYPE_ESS;
 534
 535         priv->contexts[IWL_RXON_CTX_PAN].rxon_cmd = REPLY_WIPAN_RXON;
 536         priv->contexts[IWL_RXON_CTX_PAN].rxon_timing_cmd =
 537                 REPLY_WIPAN_RXON_TIMING;
 538         priv->contexts[IWL_RXON_CTX_PAN].rxon_assoc_cmd =
 539                 REPLY_WIPAN_RXON_ASSOC;
 540         priv->contexts[IWL_RXON_CTX_PAN].qos_cmd = REPLY_WIPAN_QOS_PARAM;
 541         priv->contexts[IWL_RXON_CTX_PAN].ap_sta_id = IWL_AP_ID_PAN;
 542         priv->contexts[IWL_RXON_CTX_PAN].wep_key_cmd = REPLY_WIPAN_WEPKEY;
 543         priv->contexts[IWL_RXON_CTX_PAN].bcast_sta_id = IWLAGN_PAN_BCAST_ID;
 544         priv->contexts[IWL_RXON_CTX_PAN].station_flags = STA_FLG_PAN_STATION;
 545         priv->contexts[IWL_RXON_CTX_PAN].interface_modes =
 546                 BIT(NL80211_IFTYPE_STATION) | BIT(NL80211_IFTYPE_AP);
 547
 548         if (ucode_flags & IWL_UCODE_TLV_FLAGS_P2P)
 549                 priv->contexts[IWL_RXON_CTX_PAN].interface_modes |=
 550                         BIT(NL80211_IFTYPE_P2P_CLIENT) |
 551                         BIT(NL80211_IFTYPE_P2P_GO);
 552
 553         priv->contexts[IWL_RXON_CTX_PAN].ap_devtype = RXON_DEV_TYPE_CP;
 554         priv->contexts[IWL_RXON_CTX_PAN].station_devtype = RXON_DEV_TYPE_2STA;
 555         priv->contexts[IWL_RXON_CTX_PAN].unused_devtype = RXON_DEV_TYPE_P2P;
 556
 557         BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
 558 }
 559
 560
 561 struct iwlagn_ucode_capabilities {
 562         u32 max_probe_length;
 563         u32 standard_phy_calibration_size;
 564         u32 flags;
 565 };
 566
 567 static void iwl_ucode_callback(const struct firmware *ucode_raw, void *context);
 568 static int iwl_mac_setup_register(struct iwl_priv *priv,
 569                                   struct iwlagn_ucode_capabilities *capa);
 570
 571 #define UCODE_EXPERIMENTAL_INDEX        100
 572 #define UCODE_EXPERIMENTAL_TAG          "exp"
 573
 574 static int __must_check iwl_request_firmware(struct iwl_priv *priv, bool first)
 575 {
 576         const char *name_pre = priv->cfg->fw_name_pre;
 577         char tag[8];
 578
 579         if (first) {
 580 #ifdef CONFIG_IWLWIFI_DEBUG_EXPERIMENTAL_UCODE
 581                 priv->fw_index = UCODE_EXPERIMENTAL_INDEX;
 582                 strcpy(tag, UCODE_EXPERIMENTAL_TAG);
 583         } else if (priv->fw_index == UCODE_EXPERIMENTAL_INDEX) {
 584 #endif
 585                 priv->fw_index = priv->cfg->ucode_api_max;
 586                 sprintf(tag, "%d", priv->fw_index);
 587         } else {
 588                 priv->fw_index--;
 589                 sprintf(tag, "%d", priv->fw_index);
 590         }
 591
 592         if (priv->fw_index < priv->cfg->ucode_api_min) {
 593                 IWL_ERR(priv, "no suitable firmware found!\n");
 594                 return -ENOENT;
 595         }
 596
 597         sprintf(priv->firmware_name, "%s%s%s", name_pre, tag, ".ucode");
 598
 599         IWL_DEBUG_INFO(priv, "attempting to load firmware %s'%s'\n",
 600                        (priv->fw_index == UCODE_EXPERIMENTAL_INDEX)
 601                                 ? "EXPERIMENTAL " : "",
 602                        priv->firmware_name);
 603
 604         return request_firmware_nowait(THIS_MODULE, 1, priv->firmware_name,
 605                                        bus(priv)->dev,
 606                                        GFP_KERNEL, priv, iwl_ucode_callback);
 607 }
 608
 609 struct iwlagn_firmware_pieces {
 610         const void *inst, *data, *init, *init_data, *wowlan_inst, *wowlan_data;
 611         size_t inst_size, data_size, init_size, init_data_size,
 612                wowlan_inst_size, wowlan_data_size;
 613
 614         u32 build;
 615
 616         u32 init_evtlog_ptr, init_evtlog_size, init_errlog_ptr;
 617         u32 inst_evtlog_ptr, inst_evtlog_size, inst_errlog_ptr;
 618 };
 619
 620 static int iwlagn_load_legacy_firmware(struct iwl_priv *priv,
 621                                        const struct firmware *ucode_raw,
 622                                        struct iwlagn_firmware_pieces *pieces)
 623 {
 624         struct iwl_ucode_header *ucode = (void *)ucode_raw->data;
 625         u32 api_ver, hdr_size;
 626         const u8 *src;
 627
 628         priv->ucode_ver = le32_to_cpu(ucode->ver);
 629         api_ver = IWL_UCODE_API(priv->ucode_ver);
 630
 631         switch (api_ver) {
 632         default:
 633                 hdr_size = 28;
 634                 if (ucode_raw->size < hdr_size) {
 635                         IWL_ERR(priv, "File size too small!\n");
 636                         return -EINVAL;
 637                 }
 638                 pieces->build = le32_to_cpu(ucode->u.v2.build);
 639                 pieces->inst_size = le32_to_cpu(ucode->u.v2.inst_size);
 640                 pieces->data_size = le32_to_cpu(ucode->u.v2.data_size);
 641                 pieces->init_size = le32_to_cpu(ucode->u.v2.init_size);
 642                 pieces->init_data_size = le32_to_cpu(ucode->u.v2.init_data_size);
 643                 src = ucode->u.v2.data;
 644                 break;
 645         case 0:
 646         case 1:
 647         case 2:
 648                 hdr_size = 24;
 649                 if (ucode_raw->size < hdr_size) {
 650                         IWL_ERR(priv, "File size too small!\n");
 651                         return -EINVAL;
 652                 }
 653                 pieces->build = 0;
 654                 pieces->inst_size = le32_to_cpu(ucode->u.v1.inst_size);
 655                 pieces->data_size = le32_to_cpu(ucode->u.v1.data_size);
 656                 pieces->init_size = le32_to_cpu(ucode->u.v1.init_size);
 657                 pieces->init_data_size = le32_to_cpu(ucode->u.v1.init_data_size);
 658                 src = ucode->u.v1.data;
 659                 break;
 660         }
 661
 662         /* Verify size of file vs. image size info in file's header */
 663         if (ucode_raw->size != hdr_size + pieces->inst_size +
 664                                 pieces->data_size + pieces->init_size +
 665                                 pieces->init_data_size) {
 666
 667                 IWL_ERR(priv,
 668                         "uCode file size %d does not match expected size\n",
 669                         (int)ucode_raw->size);
 670                 return -EINVAL;
 671         }
 672
 673         pieces->inst = src;
 674         src += pieces->inst_size;
 675         pieces->data = src;
 676         src += pieces->data_size;
 677         pieces->init = src;
 678         src += pieces->init_size;
 679         pieces->init_data = src;
 680         src += pieces->init_data_size;
 681
 682         return 0;
 683 }
 684
 685 static int iwlagn_load_firmware(struct iwl_priv *priv,
 686                                 const struct firmware *ucode_raw,
 687                                 struct iwlagn_firmware_pieces *pieces,
 688                                 struct iwlagn_ucode_capabilities *capa)
 689 {
 690         struct iwl_tlv_ucode_header *ucode = (void *)ucode_raw->data;
 691         struct iwl_ucode_tlv *tlv;
 692         size_t len = ucode_raw->size;
 693         const u8 *data;
 694         int wanted_alternative = iwlagn_mod_params.wanted_ucode_alternative;
 695         int tmp;
 696         u64 alternatives;
 697         u32 tlv_len;
 698         enum iwl_ucode_tlv_type tlv_type;
 699         const u8 *tlv_data;
 700
 701         if (len < sizeof(*ucode)) {
 702                 IWL_ERR(priv, "uCode has invalid length: %zd\n", len);
 703                 return -EINVAL;
 704         }
 705
 706         if (ucode->magic != cpu_to_le32(IWL_TLV_UCODE_MAGIC)) {
 707                 IWL_ERR(priv, "invalid uCode magic: 0X%x\n",
 708                         le32_to_cpu(ucode->magic));
 709                 return -EINVAL;
 710         }
 711
 712         /*
 713          * Check which alternatives are present, and "downgrade"
 714          * when the chosen alternative is not present, warning
 715          * the user when that happens. Some files may not have
 716          * any alternatives, so don't warn in that case.
 717          */
 718         alternatives = le64_to_cpu(ucode->alternatives);
 719         tmp = wanted_alternative;
 720         if (wanted_alternative > 63)
 721                 wanted_alternative = 63;
 722         while (wanted_alternative && !(alternatives & BIT(wanted_alternative)))
 723                 wanted_alternative--;
 724         if (wanted_alternative && wanted_alternative != tmp)
 725                 IWL_WARN(priv,
 726                          "uCode alternative %d not available, choosing %d\n",
 727                          tmp, wanted_alternative);
 728
 729         priv->ucode_ver = le32_to_cpu(ucode->ver);
 730         pieces->build = le32_to_cpu(ucode->build);
 731         data = ucode->data;
 732
 733         len -= sizeof(*ucode);
 734
 735         while (len >= sizeof(*tlv)) {
 736                 u16 tlv_alt;
 737
 738                 len -= sizeof(*tlv);
 739                 tlv = (void *)data;
 740
 741                 tlv_len = le32_to_cpu(tlv->length);
 742                 tlv_type = le16_to_cpu(tlv->type);
 743                 tlv_alt = le16_to_cpu(tlv->alternative);
 744                 tlv_data = tlv->data;
 745
 746                 if (len < tlv_len) {
 747                         IWL_ERR(priv, "invalid TLV len: %zd/%u\n",
 748                                 len, tlv_len);
 749                         return -EINVAL;
 750                 }
 751                 len -= ALIGN(tlv_len, 4);
 752                 data += sizeof(*tlv) + ALIGN(tlv_len, 4);
 753
 754                 /*
 755                  * Alternative 0 is always valid.
 756                  *
 757                  * Skip alternative TLVs that are not selected.
 758                  */
 759                 if (tlv_alt != 0 && tlv_alt != wanted_alternative)
 760                         continue;
 761
 762                 switch (tlv_type) {
 763                 case IWL_UCODE_TLV_INST:
 764                         pieces->inst = tlv_data;
 765                         pieces->inst_size = tlv_len;
 766                         break;
 767                 case IWL_UCODE_TLV_DATA:
 768                         pieces->data = tlv_data;
 769                         pieces->data_size = tlv_len;
 770                         break;
 771                 case IWL_UCODE_TLV_INIT:
 772                         pieces->init = tlv_data;
 773                         pieces->init_size = tlv_len;
 774                         break;
 775                 case IWL_UCODE_TLV_INIT_DATA:
 776                         pieces->init_data = tlv_data;
 777                         pieces->init_data_size = tlv_len;
 778                         break;
 779                 case IWL_UCODE_TLV_BOOT:
 780                         IWL_ERR(priv, "Found unexpected BOOT ucode\n");
 781                         break;
 782                 case IWL_UCODE_TLV_PROBE_MAX_LEN:
 783                         if (tlv_len != sizeof(u32))
 784                                 goto invalid_tlv_len;
 785                         capa->max_probe_length =
 786                                         le32_to_cpup((__le32 *)tlv_data);
 787                         break;
 788                 case IWL_UCODE_TLV_PAN:
 789                         if (tlv_len)
 790                                 goto invalid_tlv_len;
 791                         capa->flags |= IWL_UCODE_TLV_FLAGS_PAN;
 792                         break;
 793                 case IWL_UCODE_TLV_FLAGS:
 794                         /* must be at least one u32 */
 795                         if (tlv_len < sizeof(u32))
 796                                 goto invalid_tlv_len;
 797                         /* and a proper number of u32s */
 798                         if (tlv_len % sizeof(u32))
 799                                 goto invalid_tlv_len;
 800                         /*
 801                          * This driver only reads the first u32 as
 802                          * right now no more features are defined,
 803                          * if that changes then either the driver
 804                          * will not work with the new firmware, or
 805                          * it'll not take advantage of new features.
 806                          */
 807                         capa->flags = le32_to_cpup((__le32 *)tlv_data);
 808                         break;
 809                 case IWL_UCODE_TLV_INIT_EVTLOG_PTR:
 810                         if (tlv_len != sizeof(u32))
 811                                 goto invalid_tlv_len;
 812                         pieces->init_evtlog_ptr =
 813                                         le32_to_cpup((__le32 *)tlv_data);
 814                         break;
 815                 case IWL_UCODE_TLV_INIT_EVTLOG_SIZE:
 816                         if (tlv_len != sizeof(u32))
 817                                 goto invalid_tlv_len;
 818                         pieces->init_evtlog_size =
 819                                         le32_to_cpup((__le32 *)tlv_data);
 820                         break;
 821                 case IWL_UCODE_TLV_INIT_ERRLOG_PTR:
 822                         if (tlv_len != sizeof(u32))
 823                                 goto invalid_tlv_len;
 824                         pieces->init_errlog_ptr =
 825                                         le32_to_cpup((__le32 *)tlv_data);
 826                         break;
 827                 case IWL_UCODE_TLV_RUNT_EVTLOG_PTR:
 828                         if (tlv_len != sizeof(u32))
 829                                 goto invalid_tlv_len;
 830                         pieces->inst_evtlog_ptr =
 831                                         le32_to_cpup((__le32 *)tlv_data);
 832                         break;
 833                 case IWL_UCODE_TLV_RUNT_EVTLOG_SIZE:
 834                         if (tlv_len != sizeof(u32))
 835                                 goto invalid_tlv_len;
 836                         pieces->inst_evtlog_size =
 837                                         le32_to_cpup((__le32 *)tlv_data);
 838                         break;
 839                 case IWL_UCODE_TLV_RUNT_ERRLOG_PTR:
 840                         if (tlv_len != sizeof(u32))
 841                                 goto invalid_tlv_len;
 842                         pieces->inst_errlog_ptr =
 843                                         le32_to_cpup((__le32 *)tlv_data);
 844                         break;
 845                 case IWL_UCODE_TLV_ENHANCE_SENS_TBL:
 846                         if (tlv_len)
 847                                 goto invalid_tlv_len;
 848                         priv->enhance_sensitivity_table = true;
 849                         break;
 850                 case IWL_UCODE_TLV_WOWLAN_INST:
 851                         pieces->wowlan_inst = tlv_data;
 852                         pieces->wowlan_inst_size = tlv_len;
 853                         break;
 854                 case IWL_UCODE_TLV_WOWLAN_DATA:
 855                         pieces->wowlan_data = tlv_data;
 856                         pieces->wowlan_data_size = tlv_len;
 857                         break;
 858                 case IWL_UCODE_TLV_PHY_CALIBRATION_SIZE:
 859                         if (tlv_len != sizeof(u32))
 860                                 goto invalid_tlv_len;
 861                         capa->standard_phy_calibration_size =
 862                                         le32_to_cpup((__le32 *)tlv_data);
 863                         break;
 864                 default:
 865                         IWL_DEBUG_INFO(priv, "unknown TLV: %d\n", tlv_type);
 866                         break;
 867                 }
 868         }
 869
 870         if (len) {
 871                 IWL_ERR(priv, "invalid TLV after parsing: %zd\n", len);
 872                 iwl_print_hex_dump(priv, IWL_DL_FW, (u8 *)data, len);
 873                 return -EINVAL;
 874         }
 875
 876         return 0;
 877
 878  invalid_tlv_len:
 879         IWL_ERR(priv, "TLV %d has invalid size: %u\n", tlv_type, tlv_len);
 880         iwl_print_hex_dump(priv, IWL_DL_FW, tlv_data, tlv_len);
 881
 882         return -EINVAL;
 883 }
 884
 885 /**
 886  * iwl_ucode_callback - callback when firmware was loaded
 887  *
 888  * If loaded successfully, copies the firmware into buffers
 889  * for the card to fetch (via DMA).
 890  */
 891 static void iwl_ucode_callback(const struct firmware *ucode_raw, void *context)
 892 {
 893         struct iwl_priv *priv = context;
 894         struct iwl_ucode_header *ucode;
 895         int err;
 896         struct iwlagn_firmware_pieces pieces;
 897         const unsigned int api_max = priv->cfg->ucode_api_max;
 898         unsigned int api_ok = priv->cfg->ucode_api_ok;
 899         const unsigned int api_min = priv->cfg->ucode_api_min;
 900         u32 api_ver;
 901         char buildstr[25];
 902         u32 build;
 903         struct iwlagn_ucode_capabilities ucode_capa = {
 904                 .max_probe_length = 200,
 905                 .standard_phy_calibration_size =
 906                         IWL_DEFAULT_STANDARD_PHY_CALIBRATE_TBL_SIZE,
 907         };
 908
 909         if (!api_ok)
 910                 api_ok = api_max;
 911
 912         memset(&pieces, 0, sizeof(pieces));
 913
 914         if (!ucode_raw) {
 915                 if (priv->fw_index <= api_ok)
 916                         IWL_ERR(priv,
 917                                 "request for firmware file '%s' failed.\n",
 918                                 priv->firmware_name);
 919                 goto try_again;
 920         }
 921
 922         IWL_DEBUG_INFO(priv, "Loaded firmware file '%s' (%zd bytes).\n",
 923                        priv->firmware_name, ucode_raw->size);
 924
 925         /* Make sure that we got at least the API version number */
 926         if (ucode_raw->size < 4) {
 927                 IWL_ERR(priv, "File size way too small!\n");
 928                 goto try_again;
 929         }
 930
 931         /* Data from ucode file:  header followed by uCode images */
 932         ucode = (struct iwl_ucode_header *)ucode_raw->data;
 933
 934         if (ucode->ver)
 935                 err = iwlagn_load_legacy_firmware(priv, ucode_raw, &pieces);
 936         else
 937                 err = iwlagn_load_firmware(priv, ucode_raw, &pieces,
 938                                            &ucode_capa);
 939
 940         if (err)
 941                 goto try_again;
 942
 943         api_ver = IWL_UCODE_API(priv->ucode_ver);
 944         build = pieces.build;
 945
 946         /*
 947          * api_ver should match the api version forming part of the
 948          * firmware filename ... but we don't check for that and only rely
 949          * on the API version read from firmware header from here on forward
 950          */
 951         /* no api version check required for experimental uCode */
 952         if (priv->fw_index != UCODE_EXPERIMENTAL_INDEX) {
 953                 if (api_ver < api_min || api_ver > api_max) {
 954                         IWL_ERR(priv,
 955                                 "Driver unable to support your firmware API. "
 956                                 "Driver supports v%u, firmware is v%u.\n",
 957                                 api_max, api_ver);
 958                         goto try_again;
 959                 }
 960
 961                 if (api_ver < api_ok) {
 962                         if (api_ok != api_max)
 963                                 IWL_ERR(priv, "Firmware has old API version, "
 964                                         "expected v%u through v%u, got v%u.\n",
 965                                         api_ok, api_max, api_ver);
 966                         else
 967                                 IWL_ERR(priv, "Firmware has old API version, "
 968                                         "expected v%u, got v%u.\n",
 969                                         api_max, api_ver);
 970                         IWL_ERR(priv, "New firmware can be obtained from "
 971                                       "http://www.intellinuxwireless.org/.\n");
 972                 }
 973         }
 974
 975         if (build)
 976                 sprintf(buildstr, " build %u%s", build,
 977                        (priv->fw_index == UCODE_EXPERIMENTAL_INDEX)
 978                                 ? " (EXP)" : "");
 979         else
 980                 buildstr[0] = '\0';
 981
 982         IWL_INFO(priv, "loaded firmware version %u.%u.%u.%u%s\n",
 983                  IWL_UCODE_MAJOR(priv->ucode_ver),
 984                  IWL_UCODE_MINOR(priv->ucode_ver),
 985                  IWL_UCODE_API(priv->ucode_ver),
 986                  IWL_UCODE_SERIAL(priv->ucode_ver),
 987                  buildstr);
 988
 989         snprintf(priv->hw->wiphy->fw_version,
 990                  sizeof(priv->hw->wiphy->fw_version),
 991                  "%u.%u.%u.%u%s",
 992                  IWL_UCODE_MAJOR(priv->ucode_ver),
 993                  IWL_UCODE_MINOR(priv->ucode_ver),
 994                  IWL_UCODE_API(priv->ucode_ver),
 995                  IWL_UCODE_SERIAL(priv->ucode_ver),
 996                  buildstr);
 997
 998         /*
 999          * For any of the failures below (before allocating pci memory)
1000          * we will try to load a version with a smaller API -- maybe the
1001          * user just got a corrupted version of the latest API.
1002          */
1003
1004         IWL_DEBUG_INFO(priv, "f/w package hdr ucode version raw = 0x%x\n",
1005                        priv->ucode_ver);
1006         IWL_DEBUG_INFO(priv, "f/w package hdr runtime inst size = %Zd\n",
1007                        pieces.inst_size);
1008         IWL_DEBUG_INFO(priv, "f/w package hdr runtime data size = %Zd\n",
1009                        pieces.data_size);
1010         IWL_DEBUG_INFO(priv, "f/w package hdr init inst size = %Zd\n",
1011                        pieces.init_size);
1012         IWL_DEBUG_INFO(priv, "f/w package hdr init data size = %Zd\n",
1013                        pieces.init_data_size);
1014
1015         /* Verify that uCode images will fit in card's SRAM */
1016         if (pieces.inst_size > hw_params(priv).max_inst_size) {
1017                 IWL_ERR(priv, "uCode instr len %Zd too large to fit in\n",
1018                         pieces.inst_size);
1019                 goto try_again;
1020         }
1021
1022         if (pieces.data_size > hw_params(priv).max_data_size) {
1023                 IWL_ERR(priv, "uCode data len %Zd too large to fit in\n",
1024                         pieces.data_size);
1025                 goto try_again;
1026         }
1027
1028         if (pieces.init_size > hw_params(priv).max_inst_size) {
1029                 IWL_ERR(priv, "uCode init instr len %Zd too large to fit in\n",
1030                         pieces.init_size);
1031                 goto try_again;
1032         }
1033
1034         if (pieces.init_data_size > hw_params(priv).max_data_size) {
1035                 IWL_ERR(priv, "uCode init data len %Zd too large to fit in\n",
1036                         pieces.init_data_size);
1037                 goto try_again;
1038         }
1039
1040         /* Allocate ucode buffers for card's bus-master loading ... */
1041
1042         /* Runtime instructions and 2 copies of data:
1043          * 1) unmodified from disk
1044          * 2) backup cache for save/restore during power-downs */
1045         if (iwl_alloc_fw_desc(priv, &priv->ucode_rt.code,
1046                               pieces.inst, pieces.inst_size))
1047                 goto err_pci_alloc;
1048         if (iwl_alloc_fw_desc(priv, &priv->ucode_rt.data,
1049                               pieces.data, pieces.data_size))
1050                 goto err_pci_alloc;
1051
1052         /* Initialization instructions and data */
1053         if (pieces.init_size && pieces.init_data_size) {
1054                 if (iwl_alloc_fw_desc(priv, &priv->ucode_init.code,
1055                                       pieces.init, pieces.init_size))
1056                         goto err_pci_alloc;
1057                 if (iwl_alloc_fw_desc(priv, &priv->ucode_init.data,
1058                                       pieces.init_data, pieces.init_data_size))
1059                         goto err_pci_alloc;
1060         }
1061
1062         /* WoWLAN instructions and data */
1063         if (pieces.wowlan_inst_size && pieces.wowlan_data_size) {
1064                 if (iwl_alloc_fw_desc(priv, &priv->ucode_wowlan.code,
1065                                       pieces.wowlan_inst,
1066                                       pieces.wowlan_inst_size))
1067                         goto err_pci_alloc;
1068                 if (iwl_alloc_fw_desc(priv, &priv->ucode_wowlan.data,
1069                                       pieces.wowlan_data,
1070                                       pieces.wowlan_data_size))
1071                         goto err_pci_alloc;
1072         }
1073
1074         /* Now that we can no longer fail, copy information */
1075
1076         /*
1077          * The (size - 16) / 12 formula is based on the information recorded
1078          * for each event, which is of mode 1 (including timestamp) for all
1079          * new microcodes that include this information.
1080          */
1081         priv->init_evtlog_ptr = pieces.init_evtlog_ptr;
1082         if (pieces.init_evtlog_size)
1083                 priv->init_evtlog_size = (pieces.init_evtlog_size - 16)/12;
1084         else
1085                 priv->init_evtlog_size =
1086                         priv->cfg->base_params->max_event_log_size;
1087         priv->init_errlog_ptr = pieces.init_errlog_ptr;
1088         priv->inst_evtlog_ptr = pieces.inst_evtlog_ptr;
1089         if (pieces.inst_evtlog_size)
1090                 priv->inst_evtlog_size = (pieces.inst_evtlog_size - 16)/12;
1091         else
1092                 priv->inst_evtlog_size =
1093                         priv->cfg->base_params->max_event_log_size;
1094         priv->inst_errlog_ptr = pieces.inst_errlog_ptr;
1095
1096         priv->new_scan_threshold_behaviour =
1097                 !!(ucode_capa.flags & IWL_UCODE_TLV_FLAGS_NEWSCAN);
1098
1099         if (!(priv->cfg->sku & EEPROM_SKU_CAP_IPAN_ENABLE))
1100                 ucode_capa.flags &= ~IWL_UCODE_TLV_FLAGS_PAN;
1101
1102         /*
1103          * if not PAN, then don't support P2P -- might be a uCode
1104          * packaging bug or due to the eeprom check above
1105          */
1106         if (!(ucode_capa.flags & IWL_UCODE_TLV_FLAGS_PAN))
1107                 ucode_capa.flags &= ~IWL_UCODE_TLV_FLAGS_P2P;
1108
1109         if (ucode_capa.flags & IWL_UCODE_TLV_FLAGS_PAN) {
1110                 priv->sta_key_max_num = STA_KEY_MAX_NUM_PAN;
1111                 priv->shrd->cmd_queue = IWL_IPAN_CMD_QUEUE_NUM;
1112         } else {
1113                 priv->sta_key_max_num = STA_KEY_MAX_NUM;
1114                 priv->shrd->cmd_queue = IWL_DEFAULT_CMD_QUEUE_NUM;
1115         }
1116
1117         /*
1118          * figure out the offset of chain noise reset and gain commands
1119          * base on the size of standard phy calibration commands table size
1120          */
1121         if (ucode_capa.standard_phy_calibration_size >
1122             IWL_MAX_PHY_CALIBRATE_TBL_SIZE)
1123                 ucode_capa.standard_phy_calibration_size =
1124                         IWL_MAX_STANDARD_PHY_CALIBRATE_TBL_SIZE;
1125
1126         priv->phy_calib_chain_noise_reset_cmd =
1127                 ucode_capa.standard_phy_calibration_size;
1128         priv->phy_calib_chain_noise_gain_cmd =
1129                 ucode_capa.standard_phy_calibration_size + 1;
1130
1131         /* initialize all valid contexts */
1132         iwl_init_context(priv, ucode_capa.flags);
1133
1134         /**************************************************
1135          * This is still part of probe() in a sense...
1136          *
1137          * 9. Setup and register with mac80211 and debugfs
1138          **************************************************/
1139         err = iwl_mac_setup_register(priv, &ucode_capa);
1140         if (err)
1141                 goto out_unbind;
1142
1143         err = iwl_dbgfs_register(priv, DRV_NAME);
1144         if (err)
1145                 IWL_ERR(priv, "failed to create debugfs files. Ignoring error: %d\n", err);
1146
1147         /* We have our copies now, allow OS release its copies */
1148         release_firmware(ucode_raw);
1149         complete(&priv->firmware_loading_complete);
1150         return;
1151
1152  try_again:
1153         /* try next, if any */
1154         if (iwl_request_firmware(priv, false))
1155                 goto out_unbind;
1156         release_firmware(ucode_raw);
1157         return;
1158
1159  err_pci_alloc:
1160         IWL_ERR(priv, "failed to allocate pci memory\n");
1161         iwl_dealloc_ucode(priv);
1162  out_unbind:
1163         complete(&priv->firmware_loading_complete);
1164         device_release_driver(bus(priv)->dev);
1165         release_firmware(ucode_raw);
1166 }
1167
1168 static void iwl_rf_kill_ct_config(struct iwl_priv *priv)
1169 {
1170         struct iwl_ct_kill_config cmd;
1171         struct iwl_ct_kill_throttling_config adv_cmd;
1172         unsigned long flags;
1173         int ret = 0;
1174
1175         spin_lock_irqsave(&priv->shrd->lock, flags);
1176         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_CLR,
1177                     CSR_UCODE_DRV_GP1_REG_BIT_CT_KILL_EXIT);
1178         spin_unlock_irqrestore(&priv->shrd->lock, flags);
1179         priv->thermal_throttle.ct_kill_toggle = false;
1180
1181         if (priv->cfg->base_params->support_ct_kill_exit) {
1182                 adv_cmd.critical_temperature_enter =
1183                         cpu_to_le32(hw_params(priv).ct_kill_threshold);
1184                 adv_cmd.critical_temperature_exit =
1185                         cpu_to_le32(hw_params(priv).ct_kill_exit_threshold);
1186
1187                 ret = iwl_trans_send_cmd_pdu(trans(priv),
1188                                        REPLY_CT_KILL_CONFIG_CMD,
1189                                        CMD_SYNC, sizeof(adv_cmd), &adv_cmd);
1190                 if (ret)
1191                         IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n");
1192                 else
1193                         IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD "
1194                                 "succeeded, critical temperature enter is %d,"
1195                                 "exit is %d\n",
1196                                 hw_params(priv).ct_kill_threshold,
1197                                 hw_params(priv).ct_kill_exit_threshold);
1198         } else {
1199                 cmd.critical_temperature_R =
1200                         cpu_to_le32(hw_params(priv).ct_kill_threshold);
1201
1202                 ret = iwl_trans_send_cmd_pdu(trans(priv),
1203                                        REPLY_CT_KILL_CONFIG_CMD,
1204                                        CMD_SYNC, sizeof(cmd), &cmd);
1205                 if (ret)
1206                         IWL_ERR(priv, "REPLY_CT_KILL_CONFIG_CMD failed\n");
1207                 else
1208                         IWL_DEBUG_INFO(priv, "REPLY_CT_KILL_CONFIG_CMD "
1209                                 "succeeded, "
1210                                 "critical temperature is %d\n",
1211                                 hw_params(priv).ct_kill_threshold);
1212         }
1213 }
1214
1215 static int iwlagn_send_calib_cfg_rt(struct iwl_priv *priv, u32 cfg)
1216 {
1217         struct iwl_calib_cfg_cmd calib_cfg_cmd;
1218         struct iwl_host_cmd cmd = {
1219                 .id = CALIBRATION_CFG_CMD,
1220                 .len = { sizeof(struct iwl_calib_cfg_cmd), },
1221                 .data = { &calib_cfg_cmd, },
1222         };
1223
1224         memset(&calib_cfg_cmd, 0, sizeof(calib_cfg_cmd));
1225         calib_cfg_cmd.ucd_calib_cfg.once.is_enable = IWL_CALIB_RT_CFG_ALL;
1226         calib_cfg_cmd.ucd_calib_cfg.once.start = cpu_to_le32(cfg);
1227
1228         return iwl_trans_send_cmd(trans(priv), &cmd);
1229 }
1230
1231
1232 static int iwlagn_send_tx_ant_config(struct iwl_priv *priv, u8 valid_tx_ant)
1233 {
1234         struct iwl_tx_ant_config_cmd tx_ant_cmd = {
1235           .valid = cpu_to_le32(valid_tx_ant),
1236         };
1237
1238         if (IWL_UCODE_API(priv->ucode_ver) > 1) {
1239                 IWL_DEBUG_HC(priv, "select valid tx ant: %u\n", valid_tx_ant);
1240                 return iwl_trans_send_cmd_pdu(trans(priv),
1241                                         TX_ANT_CONFIGURATION_CMD,
1242                                         CMD_SYNC,
1243                                         sizeof(struct iwl_tx_ant_config_cmd),
1244                                         &tx_ant_cmd);
1245         } else {
1246                 IWL_DEBUG_HC(priv, "TX_ANT_CONFIGURATION_CMD not supported\n");
1247                 return -EOPNOTSUPP;
1248         }
1249 }
1250
1251 /**
1252  * iwl_alive_start - called after REPLY_ALIVE notification received
1253  *                   from protocol/runtime uCode (initialization uCode's
1254  *                   Alive gets handled by iwl_init_alive_start()).
1255  */
1256 int iwl_alive_start(struct iwl_priv *priv)
1257 {
1258         int ret = 0;
1259         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1260
1261         /*TODO: this should go to the transport layer */
1262         iwl_reset_ict(trans(priv));
1263
1264         IWL_DEBUG_INFO(priv, "Runtime Alive received.\n");
1265
1266         /* After the ALIVE response, we can send host commands to the uCode */
1267         set_bit(STATUS_ALIVE, &priv->shrd->status);
1268
1269         /* Enable watchdog to monitor the driver tx queues */
1270         iwl_setup_watchdog(priv);
1271
1272         if (iwl_is_rfkill(priv->shrd))
1273                 return -ERFKILL;
1274
1275         /* download priority table before any calibration request */
1276         if (priv->cfg->bt_params &&
1277             priv->cfg->bt_params->advanced_bt_coexist) {
1278                 /* Configure Bluetooth device coexistence support */
1279                 if (priv->cfg->bt_params->bt_sco_disable)
1280                         priv->bt_enable_pspoll = false;
1281                 else
1282                         priv->bt_enable_pspoll = true;
1283
1284                 priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK;
1285                 priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT;
1286                 priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT;
1287                 iwlagn_send_advance_bt_config(priv);
1288                 priv->bt_valid = IWLAGN_BT_VALID_ENABLE_FLAGS;
1289                 priv->cur_rssi_ctx = NULL;
1290
1291                 iwlagn_send_prio_tbl(priv);
1292
1293                 /* FIXME: w/a to force change uCode BT state machine */
1294                 ret = iwlagn_send_bt_env(priv, IWL_BT_COEX_ENV_OPEN,
1295                                          BT_COEX_PRIO_TBL_EVT_INIT_CALIB2);
1296                 if (ret)
1297                         return ret;
1298                 ret = iwlagn_send_bt_env(priv, IWL_BT_COEX_ENV_CLOSE,
1299                                          BT_COEX_PRIO_TBL_EVT_INIT_CALIB2);
1300                 if (ret)
1301                         return ret;
1302         } else {
1303                 /*
1304                  * default is 2-wire BT coexexistence support
1305                  */
1306                 iwl_send_bt_config(priv);
1307         }
1308
1309         if (hw_params(priv).calib_rt_cfg)
1310                 iwlagn_send_calib_cfg_rt(priv,
1311                                          hw_params(priv).calib_rt_cfg);
1312
1313         ieee80211_wake_queues(priv->hw);
1314
1315         priv->active_rate = IWL_RATES_MASK;
1316
1317         /* Configure Tx antenna selection based on H/W config */
1318         iwlagn_send_tx_ant_config(priv, priv->cfg->valid_tx_ant);
1319
1320         if (iwl_is_associated_ctx(ctx) && !priv->shrd->wowlan) {
1321                 struct iwl_rxon_cmd *active_rxon =
1322                                 (struct iwl_rxon_cmd *)&ctx->active;
1323                 /* apply any changes in staging */
1324                 ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK;
1325                 active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
1326         } else {
1327                 struct iwl_rxon_context *tmp;
1328                 /* Initialize our rx_config data */
1329                 for_each_context(priv, tmp)
1330                         iwl_connection_init_rx_config(priv, tmp);
1331
1332                 iwlagn_set_rxon_chain(priv, ctx);
1333         }
1334
1335         if (!priv->shrd->wowlan) {
1336                 /* WoWLAN ucode will not reply in the same way, skip it */
1337                 iwl_reset_run_time_calib(priv);
1338         }
1339
1340         set_bit(STATUS_READY, &priv->shrd->status);
1341
1342         /* Configure the adapter for unassociated operation */
1343         ret = iwlagn_commit_rxon(priv, ctx);
1344         if (ret)
1345                 return ret;
1346
1347         /* At this point, the NIC is initialized and operational */
1348         iwl_rf_kill_ct_config(priv);
1349
1350         IWL_DEBUG_INFO(priv, "ALIVE processing complete.\n");
1351
1352         return iwl_power_update_mode(priv, true);
1353 }
1354
1355 static void iwl_cancel_deferred_work(struct iwl_priv *priv);
1356
1357 static void __iwl_down(struct iwl_priv *priv)
1358 {
1359         int exit_pending;
1360
1361         IWL_DEBUG_INFO(priv, DRV_NAME " is going down\n");
1362
1363         iwl_scan_cancel_timeout(priv, 200);
1364
1365         /*
1366          * If active, scanning won't cancel it, so say it expired.
1367          * No race since we hold the mutex here and a new one
1368          * can't come in at this time.
1369          */
1370         ieee80211_remain_on_channel_expired(priv->hw);
1371
1372         exit_pending =
1373                 test_and_set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1374
1375         /* Stop TX queues watchdog. We need to have STATUS_EXIT_PENDING bit set
1376          * to prevent rearm timer */
1377         del_timer_sync(&priv->watchdog);
1378
1379         iwl_clear_ucode_stations(priv, NULL);
1380         iwl_dealloc_bcast_stations(priv);
1381         iwl_clear_driver_stations(priv);
1382
1383         /* reset BT coex data */
1384         priv->bt_status = 0;
1385         priv->cur_rssi_ctx = NULL;
1386         priv->bt_is_sco = 0;
1387         if (priv->cfg->bt_params)
1388                 priv->bt_traffic_load =
1389                          priv->cfg->bt_params->bt_init_traffic_load;
1390         else
1391                 priv->bt_traffic_load = 0;
1392         priv->bt_full_concurrent = false;
1393         priv->bt_ci_compliance = 0;
1394
1395         /* Wipe out the EXIT_PENDING status bit if we are not actually
1396          * exiting the module */
1397         if (!exit_pending)
1398                 clear_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1399
1400         if (priv->mac80211_registered)
1401                 ieee80211_stop_queues(priv->hw);
1402
1403         iwl_trans_stop_device(trans(priv));
1404
1405         /* Clear out all status bits but a few that are stable across reset */
1406         priv->shrd->status &=
1407                         test_bit(STATUS_RF_KILL_HW, &priv->shrd->status) <<
1408                                 STATUS_RF_KILL_HW |
1409                         test_bit(STATUS_GEO_CONFIGURED, &priv->shrd->status) <<
1410                                 STATUS_GEO_CONFIGURED |
1411                         test_bit(STATUS_FW_ERROR, &priv->shrd->status) <<
1412                                 STATUS_FW_ERROR |
1413                         test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) <<
1414                                 STATUS_EXIT_PENDING;
1415
1416         dev_kfree_skb(priv->beacon_skb);
1417         priv->beacon_skb = NULL;
1418 }
1419
1420 static void iwl_down(struct iwl_priv *priv)
1421 {
1422         mutex_lock(&priv->shrd->mutex);
1423         __iwl_down(priv);
1424         mutex_unlock(&priv->shrd->mutex);
1425
1426         iwl_cancel_deferred_work(priv);
1427 }
1428
1429 #define MAX_HW_RESTARTS 5
1430
1431 static int __iwl_up(struct iwl_priv *priv)
1432 {
1433         struct iwl_rxon_context *ctx;
1434         int ret;
1435
1436         lockdep_assert_held(&priv->shrd->mutex);
1437
1438         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status)) {
1439                 IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
1440                 return -EIO;
1441         }
1442
1443         for_each_context(priv, ctx) {
1444                 ret = iwlagn_alloc_bcast_station(priv, ctx);
1445                 if (ret) {
1446                         iwl_dealloc_bcast_stations(priv);
1447                         return ret;
1448                 }
1449         }
1450
1451         ret = iwlagn_run_init_ucode(priv);
1452         if (ret) {
1453                 IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
1454                 goto error;
1455         }
1456
1457         ret = iwlagn_load_ucode_wait_alive(priv,
1458                                            &priv->ucode_rt,
1459                                            IWL_UCODE_REGULAR);
1460         if (ret) {
1461                 IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
1462                 goto error;
1463         }
1464
1465         ret = iwl_alive_start(priv);
1466         if (ret)
1467                 goto error;
1468         return 0;
1469
1470  error:
1471         set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1472         __iwl_down(priv);
1473         clear_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
1474
1475         IWL_ERR(priv, "Unable to initialize device.\n");
1476         return ret;
1477 }
1478
1479
1480 /*****************************************************************************
1481  *
1482  * Workqueue callbacks
1483  *
1484  *****************************************************************************/
1485
1486 static void iwl_bg_run_time_calib_work(struct work_struct *work)
1487 {
1488         struct iwl_priv *priv = container_of(work, struct iwl_priv,
1489                         run_time_calib_work);
1490
1491         mutex_lock(&priv->shrd->mutex);
1492
1493         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) ||
1494             test_bit(STATUS_SCANNING, &priv->shrd->status)) {
1495                 mutex_unlock(&priv->shrd->mutex);
1496                 return;
1497         }
1498
1499         if (priv->start_calib) {
1500                 iwl_chain_noise_calibration(priv);
1501                 iwl_sensitivity_calibration(priv);
1502         }
1503
1504         mutex_unlock(&priv->shrd->mutex);
1505 }
1506
1507 static void iwlagn_prepare_restart(struct iwl_priv *priv)
1508 {
1509         struct iwl_rxon_context *ctx;
1510         bool bt_full_concurrent;
1511         u8 bt_ci_compliance;
1512         u8 bt_load;
1513         u8 bt_status;
1514         bool bt_is_sco;
1515
1516         lockdep_assert_held(&priv->shrd->mutex);
1517
1518         for_each_context(priv, ctx)
1519                 ctx->vif = NULL;
1520         priv->is_open = 0;
1521
1522         /*
1523          * __iwl_down() will clear the BT status variables,
1524          * which is correct, but when we restart we really
1525          * want to keep them so restore them afterwards.
1526          *
1527          * The restart process will later pick them up and
1528          * re-configure the hw when we reconfigure the BT
1529          * command.
1530          */
1531         bt_full_concurrent = priv->bt_full_concurrent;
1532         bt_ci_compliance = priv->bt_ci_compliance;
1533         bt_load = priv->bt_traffic_load;
1534         bt_status = priv->bt_status;
1535         bt_is_sco = priv->bt_is_sco;
1536
1537         __iwl_down(priv);
1538
1539         priv->bt_full_concurrent = bt_full_concurrent;
1540         priv->bt_ci_compliance = bt_ci_compliance;
1541         priv->bt_traffic_load = bt_load;
1542         priv->bt_status = bt_status;
1543         priv->bt_is_sco = bt_is_sco;
1544 }
1545
1546 static void iwl_bg_restart(struct work_struct *data)
1547 {
1548         struct iwl_priv *priv = container_of(data, struct iwl_priv, restart);
1549
1550         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
1551                 return;
1552
1553         if (test_and_clear_bit(STATUS_FW_ERROR, &priv->shrd->status)) {
1554                 mutex_lock(&priv->shrd->mutex);
1555                 iwlagn_prepare_restart(priv);
1556                 mutex_unlock(&priv->shrd->mutex);
1557                 iwl_cancel_deferred_work(priv);
1558                 ieee80211_restart_hw(priv->hw);
1559         } else {
1560                 WARN_ON(1);
1561         }
1562 }
1563
1564 /*****************************************************************************
1565  *
1566  * mac80211 entry point functions
1567  *
1568  *****************************************************************************/
1569
1570 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
1571         {
1572                 .max = 1,
1573                 .types = BIT(NL80211_IFTYPE_STATION),
1574         },
1575         {
1576                 .max = 1,
1577                 .types = BIT(NL80211_IFTYPE_AP),
1578         },
1579 };
1580
1581 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
1582         {
1583                 .max = 2,
1584                 .types = BIT(NL80211_IFTYPE_STATION),
1585         },
1586 };
1587
1588 static const struct ieee80211_iface_limit iwlagn_p2p_sta_go_limits[] = {
1589         {
1590                 .max = 1,
1591                 .types = BIT(NL80211_IFTYPE_STATION),
1592         },
1593         {
1594                 .max = 1,
1595                 .types = BIT(NL80211_IFTYPE_P2P_GO) |
1596                          BIT(NL80211_IFTYPE_AP),
1597         },
1598 };
1599
1600 static const struct ieee80211_iface_limit iwlagn_p2p_2sta_limits[] = {
1601         {
1602                 .max = 2,
1603                 .types = BIT(NL80211_IFTYPE_STATION),
1604         },
1605         {
1606                 .max = 1,
1607                 .types = BIT(NL80211_IFTYPE_P2P_CLIENT),
1608         },
1609 };
1610
1611 static const struct ieee80211_iface_combination
1612 iwlagn_iface_combinations_dualmode[] = {
1613         { .num_different_channels = 1,
1614           .max_interfaces = 2,
1615           .beacon_int_infra_match = true,
1616           .limits = iwlagn_sta_ap_limits,
1617           .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
1618         },
1619         { .num_different_channels = 1,
1620           .max_interfaces = 2,
1621           .limits = iwlagn_2sta_limits,
1622           .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
1623         },
1624 };
1625
1626 static const struct ieee80211_iface_combination
1627 iwlagn_iface_combinations_p2p[] = {
1628         { .num_different_channels = 1,
1629           .max_interfaces = 2,
1630           .beacon_int_infra_match = true,
1631           .limits = iwlagn_p2p_sta_go_limits,
1632           .n_limits = ARRAY_SIZE(iwlagn_p2p_sta_go_limits),
1633         },
1634         { .num_different_channels = 1,
1635           .max_interfaces = 2,
1636           .limits = iwlagn_p2p_2sta_limits,
1637           .n_limits = ARRAY_SIZE(iwlagn_p2p_2sta_limits),
1638         },
1639 };
1640
1641 /*
1642  * Not a mac80211 entry point function, but it fits in with all the
1643  * other mac80211 functions grouped here.
1644  */
1645 static int iwl_mac_setup_register(struct iwl_priv *priv,
1646                                   struct iwlagn_ucode_capabilities *capa)
1647 {
1648         int ret;
1649         struct ieee80211_hw *hw = priv->hw;
1650         struct iwl_rxon_context *ctx;
1651
1652         hw->rate_control_algorithm = "iwl-agn-rs";
1653
1654         /* Tell mac80211 our characteristics */
1655         hw->flags = IEEE80211_HW_SIGNAL_DBM |
1656                     IEEE80211_HW_AMPDU_AGGREGATION |
1657                     IEEE80211_HW_NEED_DTIM_PERIOD |
1658                     IEEE80211_HW_SPECTRUM_MGMT |
1659                     IEEE80211_HW_REPORTS_TX_ACK_STATUS;
1660
1661         /*
1662          * Including the following line will crash some AP's.  This
1663          * workaround removes the stimulus which causes the crash until
1664          * the AP software can be fixed.
1665         hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
1666          */
1667
1668         hw->flags |= IEEE80211_HW_SUPPORTS_PS |
1669                      IEEE80211_HW_SUPPORTS_DYNAMIC_PS;
1670
1671         if (priv->cfg->sku & EEPROM_SKU_CAP_11N_ENABLE)
1672                 hw->flags |= IEEE80211_HW_SUPPORTS_DYNAMIC_SMPS |
1673                              IEEE80211_HW_SUPPORTS_STATIC_SMPS;
1674
1675         if (capa->flags & IWL_UCODE_TLV_FLAGS_MFP)
1676                 hw->flags |= IEEE80211_HW_MFP_CAPABLE;
1677
1678         hw->sta_data_size = sizeof(struct iwl_station_priv);
1679         hw->vif_data_size = sizeof(struct iwl_vif_priv);
1680
1681         for_each_context(priv, ctx) {
1682                 hw->wiphy->interface_modes |= ctx->interface_modes;
1683                 hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
1684         }
1685
1686         BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
1687
1688         if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)) {
1689                 hw->wiphy->iface_combinations = iwlagn_iface_combinations_p2p;
1690                 hw->wiphy->n_iface_combinations =
1691                         ARRAY_SIZE(iwlagn_iface_combinations_p2p);
1692         } else if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
1693                 hw->wiphy->iface_combinations = iwlagn_iface_combinations_dualmode;
1694                 hw->wiphy->n_iface_combinations =
1695                         ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
1696         }
1697
1698         hw->wiphy->max_remain_on_channel_duration = 1000;
1699
1700         hw->wiphy->flags |= WIPHY_FLAG_CUSTOM_REGULATORY |
1701                             WIPHY_FLAG_DISABLE_BEACON_HINTS |
1702                             WIPHY_FLAG_IBSS_RSN;
1703
1704         if (priv->ucode_wowlan.code.len && device_can_wakeup(bus(priv)->dev)) {
1705                 hw->wiphy->wowlan.flags = WIPHY_WOWLAN_MAGIC_PKT |
1706                                           WIPHY_WOWLAN_DISCONNECT |
1707                                           WIPHY_WOWLAN_EAP_IDENTITY_REQ |
1708                                           WIPHY_WOWLAN_RFKILL_RELEASE;
1709                 if (!iwlagn_mod_params.sw_crypto)
1710                         hw->wiphy->wowlan.flags |=
1711                                 WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
1712                                 WIPHY_WOWLAN_GTK_REKEY_FAILURE;
1713
1714                 hw->wiphy->wowlan.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
1715                 hw->wiphy->wowlan.pattern_min_len =
1716                                         IWLAGN_WOWLAN_MIN_PATTERN_LEN;
1717                 hw->wiphy->wowlan.pattern_max_len =
1718                                         IWLAGN_WOWLAN_MAX_PATTERN_LEN;
1719         }
1720
1721         if (iwlagn_mod_params.power_save)
1722                 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
1723         else
1724                 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
1725
1726         hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
1727         /* we create the 802.11 header and a zero-length SSID element */
1728         hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 2;
1729
1730         /* Default value; 4 EDCA QOS priorities */
1731         hw->queues = 4;
1732
1733         hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
1734
1735         if (priv->bands[IEEE80211_BAND_2GHZ].n_channels)
1736                 priv->hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
1737                         &priv->bands[IEEE80211_BAND_2GHZ];
1738         if (priv->bands[IEEE80211_BAND_5GHZ].n_channels)
1739                 priv->hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
1740                         &priv->bands[IEEE80211_BAND_5GHZ];
1741
1742         iwl_leds_init(priv);
1743
1744         ret = ieee80211_register_hw(priv->hw);
1745         if (ret) {
1746                 IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
1747                 return ret;
1748         }
1749         priv->mac80211_registered = 1;
1750
1751         return 0;
1752 }
1753
1754
1755 static int iwlagn_mac_start(struct ieee80211_hw *hw)
1756 {
1757         struct iwl_priv *priv = hw->priv;
1758         int ret;
1759
1760         IWL_DEBUG_MAC80211(priv, "enter\n");
1761
1762         /* we should be verifying the device is ready to be opened */
1763         mutex_lock(&priv->shrd->mutex);
1764         ret = __iwl_up(priv);
1765         mutex_unlock(&priv->shrd->mutex);
1766         if (ret)
1767                 return ret;
1768
1769         IWL_DEBUG_INFO(priv, "Start UP work done.\n");
1770
1771         /* Now we should be done, and the READY bit should be set. */
1772         if (WARN_ON(!test_bit(STATUS_READY, &priv->shrd->status)))
1773                 ret = -EIO;
1774
1775         iwlagn_led_enable(priv);
1776
1777         priv->is_open = 1;
1778         IWL_DEBUG_MAC80211(priv, "leave\n");
1779         return 0;
1780 }
1781
1782 static void iwlagn_mac_stop(struct ieee80211_hw *hw)
1783 {
1784         struct iwl_priv *priv = hw->priv;
1785
1786         IWL_DEBUG_MAC80211(priv, "enter\n");
1787
1788         if (!priv->is_open)
1789                 return;
1790
1791         priv->is_open = 0;
1792
1793         iwl_down(priv);
1794
1795         flush_workqueue(priv->shrd->workqueue);
1796
1797         /* User space software may expect getting rfkill changes
1798          * even if interface is down */
1799         iwl_write32(bus(priv), CSR_INT, 0xFFFFFFFF);
1800         iwl_enable_rfkill_int(priv);
1801
1802         IWL_DEBUG_MAC80211(priv, "leave\n");
1803 }
1804
1805 #ifdef CONFIG_PM_SLEEP
1806 static int iwlagn_send_patterns(struct iwl_priv *priv,
1807                                 struct cfg80211_wowlan *wowlan)
1808 {
1809         struct iwlagn_wowlan_patterns_cmd *pattern_cmd;
1810         struct iwl_host_cmd cmd = {
1811                 .id = REPLY_WOWLAN_PATTERNS,
1812                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
1813                 .flags = CMD_SYNC,
1814         };
1815         int i, err;
1816
1817         if (!wowlan->n_patterns)
1818                 return 0;
1819
1820         cmd.len[0] = sizeof(*pattern_cmd) +
1821                         wowlan->n_patterns * sizeof(struct iwlagn_wowlan_pattern);
1822
1823         pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL);
1824         if (!pattern_cmd)
1825                 return -ENOMEM;
1826
1827         pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns);
1828
1829         for (i = 0; i < wowlan->n_patterns; i++) {
1830                 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8);
1831
1832                 memcpy(&pattern_cmd->patterns[i].mask,
1833                         wowlan->patterns[i].mask, mask_len);
1834                 memcpy(&pattern_cmd->patterns[i].pattern,
1835                         wowlan->patterns[i].pattern,
1836                         wowlan->patterns[i].pattern_len);
1837                 pattern_cmd->patterns[i].mask_size = mask_len;
1838                 pattern_cmd->patterns[i].pattern_size =
1839                         wowlan->patterns[i].pattern_len;
1840         }
1841
1842         cmd.data[0] = pattern_cmd;
1843         err = iwl_trans_send_cmd(trans(priv), &cmd);
1844         kfree(pattern_cmd);
1845         return err;
1846 }
1847 #endif
1848
1849 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
1850                                       struct ieee80211_vif *vif,
1851                                       struct cfg80211_gtk_rekey_data *data)
1852 {
1853         struct iwl_priv *priv = hw->priv;
1854
1855         if (iwlagn_mod_params.sw_crypto)
1856                 return;
1857
1858         mutex_lock(&priv->shrd->mutex);
1859
1860         if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
1861                 goto out;
1862
1863         memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
1864         memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
1865         priv->replay_ctr = cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
1866         priv->have_rekey_data = true;
1867
1868  out:
1869         mutex_unlock(&priv->shrd->mutex);
1870 }
1871
1872 struct wowlan_key_data {
1873         struct iwl_rxon_context *ctx;
1874         struct iwlagn_wowlan_rsc_tsc_params_cmd *rsc_tsc;
1875         struct iwlagn_wowlan_tkip_params_cmd *tkip;
1876         const u8 *bssid;
1877         bool error, use_rsc_tsc, use_tkip;
1878 };
1879
1880 #ifdef CONFIG_PM_SLEEP
1881 static void iwlagn_convert_p1k(u16 *p1k, __le16 *out)
1882 {
1883         int i;
1884
1885         for (i = 0; i < IWLAGN_P1K_SIZE; i++)
1886                 out[i] = cpu_to_le16(p1k[i]);
1887 }
1888
1889 static void iwlagn_wowlan_program_keys(struct ieee80211_hw *hw,
1890                                        struct ieee80211_vif *vif,
1891                                        struct ieee80211_sta *sta,
1892                                        struct ieee80211_key_conf *key,
1893                                        void *_data)
1894 {
1895         struct iwl_priv *priv = hw->priv;
1896         struct wowlan_key_data *data = _data;
1897         struct iwl_rxon_context *ctx = data->ctx;
1898         struct aes_sc *aes_sc, *aes_tx_sc = NULL;
1899         struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL;
1900         struct iwlagn_p1k_cache *rx_p1ks;
1901         u8 *rx_mic_key;
1902         struct ieee80211_key_seq seq;
1903         u32 cur_rx_iv32 = 0;
1904         u16 p1k[IWLAGN_P1K_SIZE];
1905         int ret, i;
1906
1907         mutex_lock(&priv->shrd->mutex);
1908
1909         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
1910              key->cipher == WLAN_CIPHER_SUITE_WEP104) &&
1911              !sta && !ctx->key_mapping_keys)
1912                 ret = iwl_set_default_wep_key(priv, ctx, key);
1913         else
1914                 ret = iwl_set_dynamic_key(priv, ctx, key, sta);
1915
1916         if (ret) {
1917                 IWL_ERR(priv, "Error setting key during suspend!\n");
1918                 data->error = true;
1919         }
1920
1921         switch (key->cipher) {
1922         case WLAN_CIPHER_SUITE_TKIP:
1923                 if (sta) {
1924                         tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.unicast_rsc;
1925                         tkip_tx_sc = &data->rsc_tsc->all_tsc_rsc.tkip.tsc;
1926
1927                         rx_p1ks = data->tkip->rx_uni;
1928
1929                         ieee80211_get_key_tx_seq(key, &seq);
1930                         tkip_tx_sc->iv16 = cpu_to_le16(seq.tkip.iv16);
1931                         tkip_tx_sc->iv32 = cpu_to_le32(seq.tkip.iv32);
1932
1933                         ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
1934                         iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
1935
1936                         memcpy(data->tkip->mic_keys.tx,
1937                                &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY],
1938                                IWLAGN_MIC_KEY_SIZE);
1939
1940                         rx_mic_key = data->tkip->mic_keys.rx_unicast;
1941                 } else {
1942                         tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.multicast_rsc;
1943                         rx_p1ks = data->tkip->rx_multi;
1944                         rx_mic_key = data->tkip->mic_keys.rx_mcast;
1945                 }
1946
1947                 /*
1948                  * For non-QoS this relies on the fact that both the uCode and
1949                  * mac80211 use TID 0 (as they need to to avoid replay attacks)
1950                  * for checking the IV in the frames.
1951                  */
1952                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
1953                         ieee80211_get_key_rx_seq(key, i, &seq);
1954                         tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16);
1955                         tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32);
1956                         /* wrapping isn't allowed, AP must rekey */
1957                         if (seq.tkip.iv32 > cur_rx_iv32)
1958                                 cur_rx_iv32 = seq.tkip.iv32;
1959                 }
1960
1961                 ieee80211_get_tkip_rx_p1k(key, data->bssid, cur_rx_iv32, p1k);
1962                 iwlagn_convert_p1k(p1k, rx_p1ks[0].p1k);
1963                 ieee80211_get_tkip_rx_p1k(key, data->bssid,
1964                                           cur_rx_iv32 + 1, p1k);
1965                 iwlagn_convert_p1k(p1k, rx_p1ks[1].p1k);
1966
1967                 memcpy(rx_mic_key,
1968                        &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY],
1969                        IWLAGN_MIC_KEY_SIZE);
1970
1971                 data->use_tkip = true;
1972                 data->use_rsc_tsc = true;
1973                 break;
1974         case WLAN_CIPHER_SUITE_CCMP:
1975                 if (sta) {
1976                         u8 *pn = seq.ccmp.pn;
1977
1978                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.unicast_rsc;
1979                         aes_tx_sc = &data->rsc_tsc->all_tsc_rsc.aes.tsc;
1980
1981                         ieee80211_get_key_tx_seq(key, &seq);
1982                         aes_tx_sc->pn = cpu_to_le64(
1983                                         (u64)pn[5] |
1984                                         ((u64)pn[4] << 8) |
1985                                         ((u64)pn[3] << 16) |
1986                                         ((u64)pn[2] << 24) |
1987                                         ((u64)pn[1] << 32) |
1988                                         ((u64)pn[0] << 40));
1989                 } else
1990                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.multicast_rsc;
1991
1992                 /*
1993                  * For non-QoS this relies on the fact that both the uCode and
1994                  * mac80211 use TID 0 for checking the IV in the frames.
1995                  */
1996                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
1997                         u8 *pn = seq.ccmp.pn;
1998
1999                         ieee80211_get_key_rx_seq(key, i, &seq);
2000                         aes_sc->pn = cpu_to_le64(
2001                                         (u64)pn[5] |
2002                                         ((u64)pn[4] << 8) |
2003                                         ((u64)pn[3] << 16) |
2004                                         ((u64)pn[2] << 24) |
2005                                         ((u64)pn[1] << 32) |
2006                                         ((u64)pn[0] << 40));
2007                 }
2008                 data->use_rsc_tsc = true;
2009                 break;
2010         }
2011
2012         mutex_unlock(&priv->shrd->mutex);
2013 }
2014
2015 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
2016                               struct cfg80211_wowlan *wowlan)
2017 {
2018         struct iwl_priv *priv = hw->priv;
2019         struct iwlagn_wowlan_wakeup_filter_cmd wakeup_filter_cmd;
2020         struct iwl_rxon_cmd rxon;
2021         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2022         struct iwlagn_wowlan_kek_kck_material_cmd kek_kck_cmd;
2023         struct iwlagn_wowlan_tkip_params_cmd tkip_cmd = {};
2024         struct wowlan_key_data key_data = {
2025                 .ctx = ctx,
2026                 .bssid = ctx->active.bssid_addr,
2027                 .use_rsc_tsc = false,
2028                 .tkip = &tkip_cmd,
2029                 .use_tkip = false,
2030         };
2031         int ret, i;
2032         u16 seq;
2033
2034         if (WARN_ON(!wowlan))
2035                 return -EINVAL;
2036
2037         mutex_lock(&priv->shrd->mutex);
2038
2039         /* Don't attempt WoWLAN when not associated, tear down instead. */
2040         if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
2041             !iwl_is_associated_ctx(ctx)) {
2042                 ret = 1;
2043                 goto out;
2044         }
2045
2046         key_data.rsc_tsc = kzalloc(sizeof(*key_data.rsc_tsc), GFP_KERNEL);
2047         if (!key_data.rsc_tsc) {
2048                 ret = -ENOMEM;
2049                 goto out;
2050         }
2051
2052         memset(&wakeup_filter_cmd, 0, sizeof(wakeup_filter_cmd));
2053
2054         /*
2055          * We know the last used seqno, and the uCode expects to know that
2056          * one, it will increment before TX.
2057          */
2058         seq = le16_to_cpu(priv->last_seq_ctl) & IEEE80211_SCTL_SEQ;
2059         wakeup_filter_cmd.non_qos_seq = cpu_to_le16(seq);
2060
2061         /*
2062          * For QoS counters, we store the one to use next, so subtract 0x10
2063          * since the uCode will add 0x10 before using the value.
2064          */
2065         for (i = 0; i < 8; i++) {
2066                 seq = priv->shrd->tid_data[IWL_AP_ID][i].seq_number;
2067                 seq -= 0x10;
2068                 wakeup_filter_cmd.qos_seq[i] = cpu_to_le16(seq);
2069         }
2070
2071         if (wowlan->disconnect)
2072                 wakeup_filter_cmd.enabled |=
2073                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
2074                                     IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE);
2075         if (wowlan->magic_pkt)
2076                 wakeup_filter_cmd.enabled |=
2077                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET);
2078         if (wowlan->gtk_rekey_failure)
2079                 wakeup_filter_cmd.enabled |=
2080                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL);
2081         if (wowlan->eap_identity_req)
2082                 wakeup_filter_cmd.enabled |=
2083                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ);
2084         if (wowlan->four_way_handshake)
2085                 wakeup_filter_cmd.enabled |=
2086                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE);
2087         if (wowlan->rfkill_release)
2088                 wakeup_filter_cmd.enabled |=
2089                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_RFKILL);
2090         if (wowlan->n_patterns)
2091                 wakeup_filter_cmd.enabled |=
2092                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH);
2093
2094         iwl_scan_cancel_timeout(priv, 200);
2095
2096         memcpy(&rxon, &ctx->active, sizeof(rxon));
2097
2098         iwl_trans_stop_device(trans(priv));
2099
2100         priv->shrd->wowlan = true;
2101
2102         ret = iwlagn_load_ucode_wait_alive(priv, &priv->ucode_wowlan,
2103                                            IWL_UCODE_WOWLAN);
2104         if (ret)
2105                 goto error;
2106
2107         /* now configure WoWLAN ucode */
2108         ret = iwl_alive_start(priv);
2109         if (ret)
2110                 goto error;
2111
2112         memcpy(&ctx->staging, &rxon, sizeof(rxon));
2113         ret = iwlagn_commit_rxon(priv, ctx);
2114         if (ret)
2115                 goto error;
2116
2117         ret = iwl_power_update_mode(priv, true);
2118         if (ret)
2119                 goto error;
2120
2121         if (!iwlagn_mod_params.sw_crypto) {
2122                 /* mark all keys clear */
2123                 priv->ucode_key_table = 0;
2124                 ctx->key_mapping_keys = 0;
2125
2126                 /*
2127                  * This needs to be unlocked due to lock ordering
2128                  * constraints. Since we're in the suspend path
2129                  * that isn't really a problem though.
2130                  */
2131                 mutex_unlock(&priv->shrd->mutex);
2132                 ieee80211_iter_keys(priv->hw, ctx->vif,
2133                                     iwlagn_wowlan_program_keys,
2134                                     &key_data);
2135                 mutex_lock(&priv->shrd->mutex);
2136                 if (key_data.error) {
2137                         ret = -EIO;
2138                         goto error;
2139                 }
2140
2141                 if (key_data.use_rsc_tsc) {
2142                         struct iwl_host_cmd rsc_tsc_cmd = {
2143                                 .id = REPLY_WOWLAN_TSC_RSC_PARAMS,
2144                                 .flags = CMD_SYNC,
2145                                 .data[0] = key_data.rsc_tsc,
2146                                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
2147                                 .len[0] = sizeof(*key_data.rsc_tsc),
2148                         };
2149
2150                         ret = iwl_trans_send_cmd(trans(priv), &rsc_tsc_cmd);
2151                         if (ret)
2152                                 goto error;
2153                 }
2154
2155                 if (key_data.use_tkip) {
2156                         ret = iwl_trans_send_cmd_pdu(trans(priv),
2157                                                  REPLY_WOWLAN_TKIP_PARAMS,
2158                                                  CMD_SYNC, sizeof(tkip_cmd),
2159                                                  &tkip_cmd);
2160                         if (ret)
2161                                 goto error;
2162                 }
2163
2164                 if (priv->have_rekey_data) {
2165                         memset(&kek_kck_cmd, 0, sizeof(kek_kck_cmd));
2166                         memcpy(kek_kck_cmd.kck, priv->kck, NL80211_KCK_LEN);
2167                         kek_kck_cmd.kck_len = cpu_to_le16(NL80211_KCK_LEN);
2168                         memcpy(kek_kck_cmd.kek, priv->kek, NL80211_KEK_LEN);
2169                         kek_kck_cmd.kek_len = cpu_to_le16(NL80211_KEK_LEN);
2170                         kek_kck_cmd.replay_ctr = priv->replay_ctr;
2171
2172                         ret = iwl_trans_send_cmd_pdu(trans(priv),
2173                                                  REPLY_WOWLAN_KEK_KCK_MATERIAL,
2174                                                  CMD_SYNC, sizeof(kek_kck_cmd),
2175                                                  &kek_kck_cmd);
2176                         if (ret)
2177                                 goto error;
2178                 }
2179         }
2180
2181         ret = iwl_trans_send_cmd_pdu(trans(priv), REPLY_WOWLAN_WAKEUP_FILTER,
2182                                  CMD_SYNC, sizeof(wakeup_filter_cmd),
2183                                  &wakeup_filter_cmd);
2184         if (ret)
2185                 goto error;
2186
2187         ret = iwlagn_send_patterns(priv, wowlan);
2188         if (ret)
2189                 goto error;
2190
2191         device_set_wakeup_enable(bus(priv)->dev, true);
2192
2193         /* Now let the ucode operate on its own */
2194         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_SET,
2195                           CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
2196
2197         goto out;
2198
2199  error:
2200         priv->shrd->wowlan = false;
2201         iwlagn_prepare_restart(priv);
2202         ieee80211_restart_hw(priv->hw);
2203  out:
2204         mutex_unlock(&priv->shrd->mutex);
2205         kfree(key_data.rsc_tsc);
2206         return ret;
2207 }
2208
2209 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
2210 {
2211         struct iwl_priv *priv = hw->priv;
2212         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2213         struct ieee80211_vif *vif;
2214         unsigned long flags;
2215         u32 base, status = 0xffffffff;
2216         int ret = -EIO;
2217
2218         mutex_lock(&priv->shrd->mutex);
2219
2220         iwl_write32(bus(priv), CSR_UCODE_DRV_GP1_CLR,
2221                           CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
2222
2223         base = priv->device_pointers.error_event_table;
2224         if (iwlagn_hw_valid_rtc_data_addr(base)) {
2225                 spin_lock_irqsave(&bus(priv)->reg_lock, flags);
2226                 ret = iwl_grab_nic_access_silent(bus(priv));
2227                 if (ret == 0) {
2228                         iwl_write32(bus(priv), HBUS_TARG_MEM_RADDR, base);
2229                         status = iwl_read32(bus(priv), HBUS_TARG_MEM_RDAT);
2230                         iwl_release_nic_access(bus(priv));
2231                 }
2232                 spin_unlock_irqrestore(&bus(priv)->reg_lock, flags);
2233
2234 #ifdef CONFIG_IWLWIFI_DEBUGFS
2235                 if (ret == 0) {
2236                         if (!priv->wowlan_sram)
2237                                 priv->wowlan_sram =
2238                                         kzalloc(priv->ucode_wowlan.data.len,
2239                                                 GFP_KERNEL);
2240
2241                         if (priv->wowlan_sram)
2242                                 _iwl_read_targ_mem_words(
2243                                         bus(priv), 0x800000, priv->wowlan_sram,
2244                                         priv->ucode_wowlan.data.len / 4);
2245                 }
2246 #endif
2247         }
2248
2249         /* we'll clear ctx->vif during iwlagn_prepare_restart() */
2250         vif = ctx->vif;
2251
2252         priv->shrd->wowlan = false;
2253
2254         device_set_wakeup_enable(bus(priv)->dev, false);
2255
2256         iwlagn_prepare_restart(priv);
2257
2258         memset((void *)&ctx->active, 0, sizeof(ctx->active));
2259         iwl_connection_init_rx_config(priv, ctx);
2260         iwlagn_set_rxon_chain(priv, ctx);
2261
2262         mutex_unlock(&priv->shrd->mutex);
2263
2264         ieee80211_resume_disconnect(vif);
2265
2266         return 1;
2267 }
2268 #endif
2269
2270 static void iwlagn_mac_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
2271 {
2272         struct iwl_priv *priv = hw->priv;
2273
2274         IWL_DEBUG_MACDUMP(priv, "enter\n");
2275
2276         IWL_DEBUG_TX(priv, "dev->xmit(%d bytes) at rate 0x%02x\n", skb->len,
2277                      ieee80211_get_tx_rate(hw, IEEE80211_SKB_CB(skb))->bitrate);
2278
2279         if (iwlagn_tx_skb(priv, skb))
2280                 dev_kfree_skb_any(skb);
2281
2282         IWL_DEBUG_MACDUMP(priv, "leave\n");
2283 }
2284
2285 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
2286                                        struct ieee80211_vif *vif,
2287                                        struct ieee80211_key_conf *keyconf,
2288                                        struct ieee80211_sta *sta,
2289                                        u32 iv32, u16 *phase1key)
2290 {
2291         struct iwl_priv *priv = hw->priv;
2292
2293         iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
2294 }
2295
2296 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
2297                               struct ieee80211_vif *vif,
2298                               struct ieee80211_sta *sta,
2299                               struct ieee80211_key_conf *key)
2300 {
2301         struct iwl_priv *priv = hw->priv;
2302         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2303         struct iwl_rxon_context *ctx = vif_priv->ctx;
2304         int ret;
2305         bool is_default_wep_key = false;
2306
2307         IWL_DEBUG_MAC80211(priv, "enter\n");
2308
2309         if (iwlagn_mod_params.sw_crypto) {
2310                 IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
2311                 return -EOPNOTSUPP;
2312         }
2313
2314         /*
2315          * We could program these keys into the hardware as well, but we
2316          * don't expect much multicast traffic in IBSS and having keys
2317          * for more stations is probably more useful.
2318          *
2319          * Mark key TX-only and return 0.
2320          */
2321         if (vif->type == NL80211_IFTYPE_ADHOC &&
2322             !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
2323                 key->hw_key_idx = WEP_INVALID_OFFSET;
2324                 return 0;
2325         }
2326
2327         /* If they key was TX-only, accept deletion */
2328         if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
2329                 return 0;
2330
2331         mutex_lock(&priv->shrd->mutex);
2332         iwl_scan_cancel_timeout(priv, 100);
2333
2334         BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
2335
2336         /*
2337          * If we are getting WEP group key and we didn't receive any key mapping
2338          * so far, we are in legacy wep mode (group key only), otherwise we are
2339          * in 1X mode.
2340          * In legacy wep mode, we use another host command to the uCode.
2341          */
2342         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
2343              key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
2344                 if (cmd == SET_KEY)
2345                         is_default_wep_key = !ctx->key_mapping_keys;
2346                 else
2347                         is_default_wep_key =
2348                                 key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
2349         }
2350
2351
2352         switch (cmd) {
2353         case SET_KEY:
2354                 if (is_default_wep_key) {
2355                         ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
2356                         break;
2357                 }
2358                 ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
2359                 if (ret) {
2360                         /*
2361                          * can't add key for RX, but we don't need it
2362                          * in the device for TX so still return 0
2363                          */
2364                         ret = 0;
2365                         key->hw_key_idx = WEP_INVALID_OFFSET;
2366                 }
2367
2368                 IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
2369                 break;
2370         case DISABLE_KEY:
2371                 if (is_default_wep_key)
2372                         ret = iwl_remove_default_wep_key(priv, ctx, key);
2373                 else
2374                         ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
2375
2376                 IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
2377                 break;
2378         default:
2379                 ret = -EINVAL;
2380         }
2381
2382         mutex_unlock(&priv->shrd->mutex);
2383         IWL_DEBUG_MAC80211(priv, "leave\n");
2384
2385         return ret;
2386 }
2387
2388 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
2389                                    struct ieee80211_vif *vif,
2390                                    enum ieee80211_ampdu_mlme_action action,
2391                                    struct ieee80211_sta *sta, u16 tid, u16 *ssn,
2392                                    u8 buf_size)
2393 {
2394         struct iwl_priv *priv = hw->priv;
2395         int ret = -EINVAL;
2396         struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
2397         struct iwl_rxon_context *ctx =  iwl_rxon_ctx_from_vif(vif);
2398
2399         IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
2400                      sta->addr, tid);
2401
2402         if (!(priv->cfg->sku & EEPROM_SKU_CAP_11N_ENABLE))
2403                 return -EACCES;
2404
2405         mutex_lock(&priv->shrd->mutex);
2406
2407         switch (action) {
2408         case IEEE80211_AMPDU_RX_START:
2409                 IWL_DEBUG_HT(priv, "start Rx\n");
2410                 ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
2411                 break;
2412         case IEEE80211_AMPDU_RX_STOP:
2413                 IWL_DEBUG_HT(priv, "stop Rx\n");
2414                 ret = iwl_sta_rx_agg_stop(priv, sta, tid);
2415                 if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
2416                         ret = 0;
2417                 break;
2418         case IEEE80211_AMPDU_TX_START:
2419                 IWL_DEBUG_HT(priv, "start Tx\n");
2420                 ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
2421                 if (ret == 0) {
2422                         priv->agg_tids_count++;
2423                         IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
2424                                      priv->agg_tids_count);
2425                 }
2426                 break;
2427         case IEEE80211_AMPDU_TX_STOP:
2428                 IWL_DEBUG_HT(priv, "stop Tx\n");
2429                 ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
2430                 if ((ret == 0) && (priv->agg_tids_count > 0)) {
2431                         priv->agg_tids_count--;
2432                         IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
2433                                      priv->agg_tids_count);
2434                 }
2435                 if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status))
2436                         ret = 0;
2437                 if (priv->cfg->ht_params &&
2438                     priv->cfg->ht_params->use_rts_for_aggregation) {
2439                         /*
2440                          * switch off RTS/CTS if it was previously enabled
2441                          */
2442                         sta_priv->lq_sta.lq.general_params.flags &=
2443                                 ~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
2444                         iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
2445                                         &sta_priv->lq_sta.lq, CMD_ASYNC, false);
2446                 }
2447                 break;
2448         case IEEE80211_AMPDU_TX_OPERATIONAL:
2449                 buf_size = min_t(int, buf_size, LINK_QUAL_AGG_FRAME_LIMIT_DEF);
2450
2451                 iwl_trans_tx_agg_setup(trans(priv), ctx->ctxid, iwl_sta_id(sta),
2452                                 tid, buf_size);
2453
2454                 /*
2455                  * If the limit is 0, then it wasn't initialised yet,
2456                  * use the default. We can do that since we take the
2457                  * minimum below, and we don't want to go above our
2458                  * default due to hardware restrictions.
2459                  */
2460                 if (sta_priv->max_agg_bufsize == 0)
2461                         sta_priv->max_agg_bufsize =
2462                                 LINK_QUAL_AGG_FRAME_LIMIT_DEF;
2463
2464                 /*
2465                  * Even though in theory the peer could have different
2466                  * aggregation reorder buffer sizes for different sessions,
2467                  * our ucode doesn't allow for that and has a global limit
2468                  * for each station. Therefore, use the minimum of all the
2469                  * aggregation sessions and our default value.
2470                  */
2471                 sta_priv->max_agg_bufsize =
2472                         min(sta_priv->max_agg_bufsize, buf_size);
2473
2474                 if (priv->cfg->ht_params &&
2475                     priv->cfg->ht_params->use_rts_for_aggregation) {
2476                         /*
2477                          * switch to RTS/CTS if it is the prefer protection
2478                          * method for HT traffic
2479                          */
2480
2481                         sta_priv->lq_sta.lq.general_params.flags |=
2482                                 LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
2483                 }
2484
2485                 sta_priv->lq_sta.lq.agg_params.agg_frame_cnt_limit =
2486                         sta_priv->max_agg_bufsize;
2487
2488                 iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
2489                                 &sta_priv->lq_sta.lq, CMD_ASYNC, false);
2490
2491                 IWL_INFO(priv, "Tx aggregation enabled on ra = %pM tid = %d\n",
2492                          sta->addr, tid);
2493                 ret = 0;
2494                 break;
2495         }
2496         mutex_unlock(&priv->shrd->mutex);
2497
2498         return ret;
2499 }
2500
2501 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
2502                               struct ieee80211_vif *vif,
2503                               struct ieee80211_sta *sta)
2504 {
2505         struct iwl_priv *priv = hw->priv;
2506         struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
2507         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2508         bool is_ap = vif->type == NL80211_IFTYPE_STATION;
2509         int ret;
2510         u8 sta_id;
2511
2512         IWL_DEBUG_INFO(priv, "received request to add station %pM\n",
2513                         sta->addr);
2514         mutex_lock(&priv->shrd->mutex);
2515         IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
2516                         sta->addr);
2517         sta_priv->sta_id = IWL_INVALID_STATION;
2518
2519         atomic_set(&sta_priv->pending_frames, 0);
2520         if (vif->type == NL80211_IFTYPE_AP)
2521                 sta_priv->client = true;
2522
2523         ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
2524                                      is_ap, sta, &sta_id);
2525         if (ret) {
2526                 IWL_ERR(priv, "Unable to add station %pM (%d)\n",
2527                         sta->addr, ret);
2528                 /* Should we return success if return code is EEXIST ? */
2529                 mutex_unlock(&priv->shrd->mutex);
2530                 return ret;
2531         }
2532
2533         sta_priv->sta_id = sta_id;
2534
2535         /* Initialize rate scaling */
2536         IWL_DEBUG_INFO(priv, "Initializing rate scaling for station %pM\n",
2537                        sta->addr);
2538         iwl_rs_rate_init(priv, sta, sta_id);
2539         mutex_unlock(&priv->shrd->mutex);
2540
2541         return 0;
2542 }
2543
2544 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
2545                                 struct ieee80211_channel_switch *ch_switch)
2546 {
2547         struct iwl_priv *priv = hw->priv;
2548         const struct iwl_channel_info *ch_info;
2549         struct ieee80211_conf *conf = &hw->conf;
2550         struct ieee80211_channel *channel = ch_switch->channel;
2551         struct iwl_ht_config *ht_conf = &priv->current_ht_config;
2552         /*
2553          * MULTI-FIXME
2554          * When we add support for multiple interfaces, we need to
2555          * revisit this. The channel switch command in the device
2556          * only affects the BSS context, but what does that really
2557          * mean? And what if we get a CSA on the second interface?
2558          * This needs a lot of work.
2559          */
2560         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
2561         u16 ch;
2562
2563         IWL_DEBUG_MAC80211(priv, "enter\n");
2564
2565         mutex_lock(&priv->shrd->mutex);
2566
2567         if (iwl_is_rfkill(priv->shrd))
2568                 goto out;
2569
2570         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status) ||
2571             test_bit(STATUS_SCANNING, &priv->shrd->status) ||
2572             test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status))
2573                 goto out;
2574
2575         if (!iwl_is_associated_ctx(ctx))
2576                 goto out;
2577
2578         if (!priv->cfg->lib->set_channel_switch)
2579                 goto out;
2580
2581         ch = channel->hw_value;
2582         if (le16_to_cpu(ctx->active.channel) == ch)
2583                 goto out;
2584
2585         ch_info = iwl_get_channel_info(priv, channel->band, ch);
2586         if (!is_channel_valid(ch_info)) {
2587                 IWL_DEBUG_MAC80211(priv, "invalid channel\n");
2588                 goto out;
2589         }
2590
2591         spin_lock_irq(&priv->shrd->lock);
2592
2593         priv->current_ht_config.smps = conf->smps_mode;
2594
2595         /* Configure HT40 channels */
2596         ctx->ht.enabled = conf_is_ht(conf);
2597         if (ctx->ht.enabled) {
2598                 if (conf_is_ht40_minus(conf)) {
2599                         ctx->ht.extension_chan_offset =
2600                                 IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2601                         ctx->ht.is_40mhz = true;
2602                 } else if (conf_is_ht40_plus(conf)) {
2603                         ctx->ht.extension_chan_offset =
2604                                 IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2605                         ctx->ht.is_40mhz = true;
2606                 } else {
2607                         ctx->ht.extension_chan_offset =
2608                                 IEEE80211_HT_PARAM_CHA_SEC_NONE;
2609                         ctx->ht.is_40mhz = false;
2610                 }
2611         } else
2612                 ctx->ht.is_40mhz = false;
2613
2614         if ((le16_to_cpu(ctx->staging.channel) != ch))
2615                 ctx->staging.flags = 0;
2616
2617         iwl_set_rxon_channel(priv, channel, ctx);
2618         iwl_set_rxon_ht(priv, ht_conf);
2619         iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
2620
2621         spin_unlock_irq(&priv->shrd->lock);
2622
2623         iwl_set_rate(priv);
2624         /*
2625          * at this point, staging_rxon has the
2626          * configuration for channel switch
2627          */
2628         set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status);
2629         priv->switch_channel = cpu_to_le16(ch);
2630         if (priv->cfg->lib->set_channel_switch(priv, ch_switch)) {
2631                 clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->shrd->status);
2632                 priv->switch_channel = 0;
2633                 ieee80211_chswitch_done(ctx->vif, false);
2634         }
2635
2636 out:
2637         mutex_unlock(&priv->shrd->mutex);
2638         IWL_DEBUG_MAC80211(priv, "leave\n");
2639 }
2640
2641 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
2642                                     unsigned int changed_flags,
2643                                     unsigned int *total_flags,
2644                                     u64 multicast)
2645 {
2646         struct iwl_priv *priv = hw->priv;
2647         __le32 filter_or = 0, filter_nand = 0;
2648         struct iwl_rxon_context *ctx;
2649
2650 #define CHK(test, flag) do { \
2651         if (*total_flags & (test))              \
2652                 filter_or |= (flag);            \
2653         else                                    \
2654                 filter_nand |= (flag);          \
2655         } while (0)
2656
2657         IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
2658                         changed_flags, *total_flags);
2659
2660         CHK(FIF_OTHER_BSS | FIF_PROMISC_IN_BSS, RXON_FILTER_PROMISC_MSK);
2661         /* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
2662         CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
2663         CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
2664
2665 #undef CHK
2666
2667         mutex_lock(&priv->shrd->mutex);
2668
2669         for_each_context(priv, ctx) {
2670                 ctx->staging.filter_flags &= ~filter_nand;
2671                 ctx->staging.filter_flags |= filter_or;
2672
2673                 /*
2674                  * Not committing directly because hardware can perform a scan,
2675                  * but we'll eventually commit the filter flags change anyway.
2676                  */
2677         }
2678
2679         mutex_unlock(&priv->shrd->mutex);
2680
2681         /*
2682          * Receiving all multicast frames is always enabled by the
2683          * default flags setup in iwl_connection_init_rx_config()
2684          * since we currently do not support programming multicast
2685          * filters into the device.
2686          */
2687         *total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI | FIF_PROMISC_IN_BSS |
2688                         FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
2689 }
2690
2691 static void iwlagn_mac_flush(struct ieee80211_hw *hw, bool drop)
2692 {
2693         struct iwl_priv *priv = hw->priv;
2694
2695         mutex_lock(&priv->shrd->mutex);
2696         IWL_DEBUG_MAC80211(priv, "enter\n");
2697
2698         if (test_bit(STATUS_EXIT_PENDING, &priv->shrd->status)) {
2699                 IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
2700                 goto done;
2701         }
2702         if (iwl_is_rfkill(priv->shrd)) {
2703                 IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
2704                 goto done;
2705         }
2706
2707         /*
2708          * mac80211 will not push any more frames for transmit
2709          * until the flush is completed
2710          */
2711         if (drop) {
2712                 IWL_DEBUG_MAC80211(priv, "send flush command\n");
2713                 if (iwlagn_txfifo_flush(priv, IWL_DROP_ALL)) {
2714                         IWL_ERR(priv, "flush request fail\n");
2715                         goto done;
2716                 }
2717         }
2718         IWL_DEBUG_MAC80211(priv, "wait transmit/flush all frames\n");
2719         iwl_trans_wait_tx_queue_empty(trans(priv));
2720 done:
2721         mutex_unlock(&priv->shrd->mutex);
2722         IWL_DEBUG_MAC80211(priv, "leave\n");
2723 }
2724
2725 void iwlagn_disable_roc(struct iwl_priv *priv)
2726 {
2727         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_PAN];
2728
2729         lockdep_assert_held(&priv->shrd->mutex);
2730
2731         if (!priv->hw_roc_setup)
2732                 return;
2733
2734         ctx->staging.dev_type = RXON_DEV_TYPE_P2P;
2735         ctx->staging.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
2736
2737         priv->hw_roc_channel = NULL;
2738
2739         memset(ctx->staging.node_addr, 0, ETH_ALEN);
2740
2741         iwlagn_commit_rxon(priv, ctx);
2742
2743         ctx->is_active = false;
2744         priv->hw_roc_setup = false;
2745 }
2746
2747 static void iwlagn_disable_roc_work(struct work_struct *work)
2748 {
2749         struct iwl_priv *priv = container_of(work, struct iwl_priv,
2750                                              hw_roc_disable_work.work);
2751
2752         mutex_lock(&priv->shrd->mutex);
2753         iwlagn_disable_roc(priv);
2754         mutex_unlock(&priv->shrd->mutex);
2755 }
2756
2757 static int iwl_mac_remain_on_channel(struct ieee80211_hw *hw,
2758                                      struct ieee80211_channel *channel,
2759                                      enum nl80211_channel_type channel_type,
2760                                      int duration)
2761 {
2762         struct iwl_priv *priv = hw->priv;
2763         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_PAN];
2764         int err = 0;
2765
2766         if (!(priv->shrd->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
2767                 return -EOPNOTSUPP;
2768
2769         if (!(ctx->interface_modes & BIT(NL80211_IFTYPE_P2P_CLIENT)))
2770                 return -EOPNOTSUPP;
2771
2772         mutex_lock(&priv->shrd->mutex);
2773
2774         if (test_bit(STATUS_SCAN_HW, &priv->shrd->status)) {
2775                 err = -EBUSY;
2776                 goto out;
2777         }
2778
2779         priv->hw_roc_channel = channel;
2780         priv->hw_roc_chantype = channel_type;
2781         priv->hw_roc_duration = duration;
2782         priv->hw_roc_start_notified = false;
2783         cancel_delayed_work(&priv->hw_roc_disable_work);
2784
2785         if (!ctx->is_active) {
2786                 ctx->is_active = true;
2787                 ctx->staging.dev_type = RXON_DEV_TYPE_P2P;
2788                 memcpy(ctx->staging.node_addr,
2789                        priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
2790                        ETH_ALEN);
2791                 memcpy(ctx->staging.bssid_addr,
2792                        priv->contexts[IWL_RXON_CTX_BSS].staging.node_addr,
2793                        ETH_ALEN);
2794                 err = iwlagn_commit_rxon(priv, ctx);
2795                 if (err)
2796                         goto out;
2797                 ctx->staging.filter_flags |= RXON_FILTER_ASSOC_MSK |
2798                                              RXON_FILTER_PROMISC_MSK |
2799                                              RXON_FILTER_CTL2HOST_MSK;
2800
2801                 err = iwlagn_commit_rxon(priv, ctx);
2802                 if (err) {
2803                         iwlagn_disable_roc(priv);
2804                         goto out;
2805                 }
2806                 priv->hw_roc_setup = true;
2807         }
2808
2809         err = iwl_scan_initiate(priv, ctx->vif, IWL_SCAN_ROC, channel->band);
2810         if (err)
2811                 iwlagn_disable_roc(priv);
2812
2813  out:
2814         mutex_unlock(&priv->shrd->mutex);
2815
2816         return err;
2817 }
2818
2819 static int iwl_mac_cancel_remain_on_channel(struct ieee80211_hw *hw)
2820 {
2821         struct iwl_priv *priv = hw->priv;
2822
2823         if (!(priv->shrd->valid_contexts & BIT(IWL_RXON_CTX_PAN)))
2824                 return -EOPNOTSUPP;
2825
2826         mutex_lock(&priv->shrd->mutex);
2827         iwl_scan_cancel_timeout(priv, priv->hw_roc_duration);
2828         iwlagn_disable_roc(priv);
2829         mutex_unlock(&priv->shrd->mutex);
2830
2831         return 0;
2832 }
2833
2834 static int iwl_mac_tx_sync(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
2835                            const u8 *bssid, enum ieee80211_tx_sync_type type)
2836 {
2837         struct iwl_priv *priv = hw->priv;
2838         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2839         struct iwl_rxon_context *ctx = vif_priv->ctx;
2840         int ret;
2841         u8 sta_id;
2842
2843         mutex_lock(&priv->shrd->mutex);
2844
2845         if (iwl_is_associated_ctx(ctx)) {
2846                 ret = 0;
2847                 goto out;
2848         }
2849
2850         if (ctx->preauth_bssid || test_bit(STATUS_SCAN_HW, &priv->shrd->status)) {
2851                 ret = -EBUSY;
2852                 goto out;
2853         }
2854
2855         ret = iwl_add_station_common(priv, ctx, bssid, true, NULL, &sta_id);
2856         if (ret)
2857                 goto out;
2858
2859         if (WARN_ON(sta_id != ctx->ap_sta_id)) {
2860                 ret = -EIO;
2861                 goto out_remove_sta;
2862         }
2863
2864         memcpy(ctx->bssid, bssid, ETH_ALEN);
2865         ctx->preauth_bssid = true;
2866
2867         ret = iwlagn_commit_rxon(priv, ctx);
2868
2869         if (ret == 0)
2870                 goto out;
2871
2872  out_remove_sta:
2873         iwl_remove_station(priv, sta_id, bssid);
2874  out:
2875         mutex_unlock(&priv->shrd->mutex);
2876         return ret;
2877 }
2878
2879 static void iwl_mac_finish_tx_sync(struct ieee80211_hw *hw,
2880                                    struct ieee80211_vif *vif,
2881                                    const u8 *bssid,
2882                                    enum ieee80211_tx_sync_type type)
2883 {
2884         struct iwl_priv *priv = hw->priv;
2885         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
2886         struct iwl_rxon_context *ctx = vif_priv->ctx;
2887
2888         mutex_lock(&priv->shrd->mutex);
2889
2890         if (iwl_is_associated_ctx(ctx))
2891                 goto out;
2892
2893         iwl_remove_station(priv, ctx->ap_sta_id, bssid);
2894         ctx->preauth_bssid = false;
2895         /* no need to commit */
2896  out:
2897         mutex_unlock(&priv->shrd->mutex);
2898 }
2899
2900 /*****************************************************************************
2901  *
2902  * driver setup and teardown
2903  *
2904  *****************************************************************************/
2905
2906 static void iwl_setup_deferred_work(struct iwl_priv *priv)
2907 {
2908         priv->shrd->workqueue = create_singlethread_workqueue(DRV_NAME);
2909
2910         init_waitqueue_head(&priv->shrd->wait_command_queue);
2911
2912         INIT_WORK(&priv->restart, iwl_bg_restart);
2913         INIT_WORK(&priv->beacon_update, iwl_bg_beacon_update);
2914         INIT_WORK(&priv->run_time_calib_work, iwl_bg_run_time_calib_work);
2915         INIT_WORK(&priv->tx_flush, iwl_bg_tx_flush);
2916         INIT_WORK(&priv->bt_full_concurrency, iwl_bg_bt_full_concurrency);
2917         INIT_WORK(&priv->bt_runtime_config, iwl_bg_bt_runtime_config);
2918         INIT_DELAYED_WORK(&priv->hw_roc_disable_work,
2919                           iwlagn_disable_roc_work);
2920
2921         iwl_setup_scan_deferred_work(priv);
2922
2923         if (priv->cfg->lib->bt_setup_deferred_work)
2924                 priv->cfg->lib->bt_setup_deferred_work(priv);
2925
2926         init_timer(&priv->statistics_periodic);
2927         priv->statistics_periodic.data = (unsigned long)priv;
2928         priv->statistics_periodic.function = iwl_bg_statistics_periodic;
2929
2930         init_timer(&priv->ucode_trace);
2931         priv->ucode_trace.data = (unsigned long)priv;
2932         priv->ucode_trace.function = iwl_bg_ucode_trace;
2933
2934         init_timer(&priv->watchdog);
2935         priv->watchdog.data = (unsigned long)priv;
2936         priv->watchdog.function = iwl_bg_watchdog;
2937 }
2938
2939 static void iwl_cancel_deferred_work(struct iwl_priv *priv)
2940 {
2941         if (priv->cfg->lib->cancel_deferred_work)
2942                 priv->cfg->lib->cancel_deferred_work(priv);
2943
2944         cancel_work_sync(&priv->run_time_calib_work);
2945         cancel_work_sync(&priv->beacon_update);
2946
2947         iwl_cancel_scan_deferred_work(priv);
2948
2949         cancel_work_sync(&priv->bt_full_concurrency);
2950         cancel_work_sync(&priv->bt_runtime_config);
2951         cancel_delayed_work_sync(&priv->hw_roc_disable_work);
2952
2953         del_timer_sync(&priv->statistics_periodic);
2954         del_timer_sync(&priv->ucode_trace);
2955 }
2956
2957 static void iwl_init_hw_rates(struct iwl_priv *priv,
2958                               struct ieee80211_rate *rates)
2959 {
2960         int i;
2961
2962         for (i = 0; i < IWL_RATE_COUNT_LEGACY; i++) {
2963                 rates[i].bitrate = iwl_rates[i].ieee * 5;
2964                 rates[i].hw_value = i; /* Rate scaling will work on indexes */
2965                 rates[i].hw_value_short = i;
2966                 rates[i].flags = 0;
2967                 if ((i >= IWL_FIRST_CCK_RATE) && (i <= IWL_LAST_CCK_RATE)) {
2968                         /*
2969                          * If CCK != 1M then set short preamble rate flag.
2970                          */
2971                         rates[i].flags |=
2972                                 (iwl_rates[i].plcp == IWL_RATE_1M_PLCP) ?
2973                                         0 : IEEE80211_RATE_SHORT_PREAMBLE;
2974                 }
2975         }
2976 }
2977
2978 static int iwl_init_drv(struct iwl_priv *priv)
2979 {
2980         int ret;
2981
2982         spin_lock_init(&priv->shrd->sta_lock);
2983
2984         mutex_init(&priv->shrd->mutex);
2985
2986         priv->ieee_channels = NULL;
2987         priv->ieee_rates = NULL;
2988         priv->band = IEEE80211_BAND_2GHZ;
2989
2990         priv->iw_mode = NL80211_IFTYPE_STATION;
2991         priv->current_ht_config.smps = IEEE80211_SMPS_STATIC;
2992         priv->missed_beacon_threshold = IWL_MISSED_BEACON_THRESHOLD_DEF;
2993         priv->agg_tids_count = 0;
2994
2995         /* initialize force reset */
2996         priv->force_reset[IWL_RF_RESET].reset_duration =
2997                 IWL_DELAY_NEXT_FORCE_RF_RESET;
2998         priv->force_reset[IWL_FW_RESET].reset_duration =
2999                 IWL_DELAY_NEXT_FORCE_FW_RELOAD;
3000
3001         priv->rx_statistics_jiffies = jiffies;
3002
3003         /* Choose which receivers/antennas to use */
3004         iwlagn_set_rxon_chain(priv, &priv->contexts[IWL_RXON_CTX_BSS]);
3005
3006         iwl_init_scan_params(priv);
3007
3008         /* init bt coex */
3009         if (priv->cfg->bt_params &&
3010             priv->cfg->bt_params->advanced_bt_coexist) {
3011                 priv->kill_ack_mask = IWLAGN_BT_KILL_ACK_MASK_DEFAULT;
3012                 priv->kill_cts_mask = IWLAGN_BT_KILL_CTS_MASK_DEFAULT;
3013                 priv->bt_valid = IWLAGN_BT_ALL_VALID_MSK;
3014                 priv->bt_on_thresh = BT_ON_THRESHOLD_DEF;
3015                 priv->bt_duration = BT_DURATION_LIMIT_DEF;
3016                 priv->dynamic_frag_thresh = BT_FRAG_THRESHOLD_DEF;
3017         }
3018
3019         ret = iwl_init_channel_map(priv);
3020         if (ret) {
3021                 IWL_ERR(priv, "initializing regulatory failed: %d\n", ret);
3022                 goto err;
3023         }
3024
3025         ret = iwl_init_geos(priv);
3026         if (ret) {
3027                 IWL_ERR(priv, "initializing geos failed: %d\n", ret);
3028                 goto err_free_channel_map;
3029         }
3030         iwl_init_hw_rates(priv, priv->ieee_rates);
3031
3032         return 0;
3033
3034 err_free_channel_map:
3035         iwl_free_channel_map(priv);
3036 err:
3037         return ret;
3038 }
3039
3040 static void iwl_uninit_drv(struct iwl_priv *priv)
3041 {
3042         iwl_calib_free_results(priv);
3043         iwl_free_geos(priv);
3044         iwl_free_channel_map(priv);
3045         if (priv->tx_cmd_pool)
3046                 kmem_cache_destroy(priv->tx_cmd_pool);
3047         kfree(priv->scan_cmd);
3048         kfree(priv->beacon_cmd);
3049 #ifdef CONFIG_IWLWIFI_DEBUGFS
3050         kfree(priv->wowlan_sram);
3051 #endif
3052 }
3053
3054 static void iwl_mac_rssi_callback(struct ieee80211_hw *hw,
3055                            enum ieee80211_rssi_event rssi_event)
3056 {
3057         struct iwl_priv *priv = hw->priv;
3058
3059         mutex_lock(&priv->shrd->mutex);
3060
3061         if (priv->cfg->bt_params &&
3062                         priv->cfg->bt_params->advanced_bt_coexist) {
3063                 if (rssi_event == RSSI_EVENT_LOW)
3064                         priv->bt_enable_pspoll = true;
3065                 else if (rssi_event == RSSI_EVENT_HIGH)
3066                         priv->bt_enable_pspoll = false;
3067
3068                 iwlagn_send_advance_bt_config(priv);
3069         } else {
3070                 IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
3071                                 "ignoring RSSI callback\n");
3072         }
3073
3074         mutex_unlock(&priv->shrd->mutex);
3075 }
3076
3077 static int iwl_mac_set_tim(struct ieee80211_hw *hw,
3078                            struct ieee80211_sta *sta, bool set)
3079 {
3080         struct iwl_priv *priv = hw->priv;
3081
3082         queue_work(priv->shrd->workqueue, &priv->beacon_update);
3083
3084         return 0;
3085 }
3086
3087 struct ieee80211_ops iwlagn_hw_ops = {
3088         .tx = iwlagn_mac_tx,
3089         .start = iwlagn_mac_start,
3090         .stop = iwlagn_mac_stop,
3091 #ifdef CONFIG_PM_SLEEP
3092         .suspend = iwlagn_mac_suspend,
3093         .resume = iwlagn_mac_resume,
3094 #endif
3095         .add_interface = iwl_mac_add_interface,
3096         .remove_interface = iwl_mac_remove_interface,
3097         .change_interface = iwl_mac_change_interface,
3098         .config = iwlagn_mac_config,
3099         .configure_filter = iwlagn_configure_filter,
3100         .set_key = iwlagn_mac_set_key,
3101         .update_tkip_key = iwlagn_mac_update_tkip_key,
3102         .set_rekey_data = iwlagn_mac_set_rekey_data,
3103         .conf_tx = iwl_mac_conf_tx,
3104         .bss_info_changed = iwlagn_bss_info_changed,
3105         .ampdu_action = iwlagn_mac_ampdu_action,
3106         .hw_scan = iwl_mac_hw_scan,
3107         .sta_notify = iwlagn_mac_sta_notify,
3108         .sta_add = iwlagn_mac_sta_add,
3109         .sta_remove = iwl_mac_sta_remove,
3110         .channel_switch = iwlagn_mac_channel_switch,
3111         .flush = iwlagn_mac_flush,
3112         .tx_last_beacon = iwl_mac_tx_last_beacon,
3113         .remain_on_channel = iwl_mac_remain_on_channel,
3114         .cancel_remain_on_channel = iwl_mac_cancel_remain_on_channel,
3115         .rssi_callback = iwl_mac_rssi_callback,
3116         CFG80211_TESTMODE_CMD(iwl_testmode_cmd)
3117         CFG80211_TESTMODE_DUMP(iwl_testmode_dump)
3118         .tx_sync = iwl_mac_tx_sync,
3119         .finish_tx_sync = iwl_mac_finish_tx_sync,
3120         .set_tim = iwl_mac_set_tim,
3121 };
3122
3123 static u32 iwl_hw_detect(struct iwl_priv *priv)
3124 {
3125         return iwl_read32(bus(priv), CSR_HW_REV);
3126 }
3127
3128 /* Size of one Rx buffer in host DRAM */
3129 #define IWL_RX_BUF_SIZE_4K (4 * 1024)
3130 #define IWL_RX_BUF_SIZE_8K (8 * 1024)
3131
3132 static int iwl_set_hw_params(struct iwl_priv *priv)
3133 {
3134         if (iwlagn_mod_params.amsdu_size_8K)
3135                 hw_params(priv).rx_page_order =
3136                         get_order(IWL_RX_BUF_SIZE_8K);
3137         else
3138                 hw_params(priv).rx_page_order =
3139                         get_order(IWL_RX_BUF_SIZE_4K);
3140
3141         if (iwlagn_mod_params.disable_11n)
3142                 priv->cfg->sku &= ~EEPROM_SKU_CAP_11N_ENABLE;
3143
3144         hw_params(priv).num_ampdu_queues =
3145                 priv->cfg->base_params->num_of_ampdu_queues;
3146         hw_params(priv).shadow_reg_enable =
3147                 priv->cfg->base_params->shadow_reg_enable;
3148         hw_params(priv).sku = priv->cfg->sku;
3149         hw_params(priv).wd_timeout = priv->cfg->base_params->wd_timeout;
3150
3151         /* Device-specific setup */
3152         return priv->cfg->lib->set_hw_params(priv);
3153 }
3154
3155 /* This function both allocates and initializes hw and priv. */
3156 static struct ieee80211_hw *iwl_alloc_all(struct iwl_cfg *cfg)
3157 {
3158         struct iwl_priv *priv;
3159         /* mac80211 allocates memory for this device instance, including
3160          *   space for this driver's private structure */
3161         struct ieee80211_hw *hw;
3162
3163         hw = ieee80211_alloc_hw(sizeof(struct iwl_priv), &iwlagn_hw_ops);
3164         if (hw == NULL) {
3165                 pr_err("%s: Can not allocate network device\n",
3166                        cfg->name);
3167                 goto out;
3168         }
3169
3170         priv = hw->priv;
3171         priv->hw = hw;
3172
3173 out:
3174         return hw;
3175 }
3176
3177 int iwl_probe(struct iwl_bus *bus, const struct iwl_trans_ops *trans_ops,
3178                 struct iwl_cfg *cfg)
3179 {
3180         int err = 0;
3181         struct iwl_priv *priv;
3182         struct ieee80211_hw *hw;
3183         u16 num_mac;
3184         u32 hw_rev;
3185
3186         /************************
3187          * 1. Allocating HW data
3188          ************************/
3189         hw = iwl_alloc_all(cfg);
3190         if (!hw) {
3191                 err = -ENOMEM;
3192                 goto out;
3193         }
3194
3195         priv = hw->priv;
3196         priv->shrd = &priv->_shrd;
3197         bus->shrd = priv->shrd;
3198         priv->shrd->bus = bus;
3199         priv->shrd->priv = priv;
3200
3201         priv->shrd->trans = trans_ops->alloc(priv->shrd);
3202         if (priv->shrd->trans == NULL) {
3203                 err = -ENOMEM;
3204                 goto out_free_traffic_mem;
3205         }
3206
3207         /* At this point both hw and priv are allocated. */
3208
3209         SET_IEEE80211_DEV(hw, bus(priv)->dev);
3210
3211         IWL_DEBUG_INFO(priv, "*** LOAD DRIVER ***\n");
3212         priv->cfg = cfg;
3213
3214         /* is antenna coupling more than 35dB ? */
3215         priv->bt_ant_couple_ok =
3216                 (iwlagn_mod_params.ant_coupling >
3217                         IWL_BT_ANTENNA_COUPLING_THRESHOLD) ?
3218                         true : false;
3219
3220         /* enable/disable bt channel inhibition */
3221         priv->bt_ch_announce = iwlagn_mod_params.bt_ch_announce;
3222         IWL_DEBUG_INFO(priv, "BT channel inhibition is %s\n",
3223                        (priv->bt_ch_announce) ? "On" : "Off");
3224
3225         if (iwl_alloc_traffic_mem(priv))
3226                 IWL_ERR(priv, "Not enough memory to generate traffic log\n");
3227
3228         /* these spin locks will be used in apm_ops.init and EEPROM access
3229          * we should init now
3230          */
3231         spin_lock_init(&bus(priv)->reg_lock);
3232         spin_lock_init(&priv->shrd->lock);
3233
3234         /*
3235          * stop and reset the on-board processor just in case it is in a
3236          * strange state ... like being left stranded by a primary kernel
3237          * and this is now the kdump kernel trying to start up
3238          */
3239         iwl_write32(bus(priv), CSR_RESET, CSR_RESET_REG_FLAG_NEVO_RESET);
3240
3241         /***********************
3242          * 3. Read REV register
3243          ***********************/
3244         hw_rev = iwl_hw_detect(priv);
3245         IWL_INFO(priv, "Detected %s, REV=0x%X\n",
3246                 priv->cfg->name, hw_rev);
3247
3248         err = iwl_trans_request_irq(trans(priv));
3249         if (err)
3250                 goto out_free_trans;
3251
3252         if (iwl_trans_prepare_card_hw(trans(priv))) {
3253                 err = -EIO;
3254                 IWL_WARN(priv, "Failed, HW not ready\n");
3255                 goto out_free_trans;
3256         }
3257
3258         /*****************
3259          * 4. Read EEPROM
3260          *****************/
3261         /* Read the EEPROM */
3262         err = iwl_eeprom_init(priv, hw_rev);
3263         if (err) {
3264                 IWL_ERR(priv, "Unable to init EEPROM\n");
3265                 goto out_free_trans;
3266         }
3267         err = iwl_eeprom_check_version(priv);
3268         if (err)
3269                 goto out_free_eeprom;
3270
3271         err = iwl_eeprom_check_sku(priv);
3272         if (err)
3273                 goto out_free_eeprom;
3274
3275         /* extract MAC Address */
3276         iwl_eeprom_get_mac(priv, priv->addresses[0].addr);
3277         IWL_DEBUG_INFO(priv, "MAC address: %pM\n", priv->addresses[0].addr);
3278         priv->hw->wiphy->addresses = priv->addresses;
3279         priv->hw->wiphy->n_addresses = 1;
3280         num_mac = iwl_eeprom_query16(priv, EEPROM_NUM_MAC_ADDRESS);
3281         if (num_mac > 1) {
3282                 memcpy(priv->addresses[1].addr, priv->addresses[0].addr,
3283                        ETH_ALEN);
3284                 priv->addresses[1].addr[5]++;
3285                 priv->hw->wiphy->n_addresses++;
3286         }
3287
3288         /************************
3289          * 5. Setup HW constants
3290          ************************/
3291         if (iwl_set_hw_params(priv)) {
3292                 err = -ENOENT;
3293                 IWL_ERR(priv, "failed to set hw parameters\n");
3294                 goto out_free_eeprom;
3295         }
3296
3297         /*******************
3298          * 6. Setup priv
3299          *******************/
3300
3301         err = iwl_init_drv(priv);
3302         if (err)
3303                 goto out_free_eeprom;
3304         /* At this point both hw and priv are initialized. */
3305
3306         /********************
3307          * 7. Setup services
3308          ********************/
3309         iwl_setup_deferred_work(priv);
3310         iwl_setup_rx_handlers(priv);
3311         iwl_testmode_init(priv);
3312
3313         /*********************************************
3314          * 8. Enable interrupts
3315          *********************************************/
3316
3317         iwl_enable_rfkill_int(priv);
3318
3319         /* If platform's RF_KILL switch is NOT set to KILL */
3320         if (iwl_read32(bus(priv),
3321                         CSR_GP_CNTRL) & CSR_GP_CNTRL_REG_FLAG_HW_RF_KILL_SW)
3322                 clear_bit(STATUS_RF_KILL_HW, &priv->shrd->status);
3323         else
3324                 set_bit(STATUS_RF_KILL_HW, &priv->shrd->status);
3325
3326         wiphy_rfkill_set_hw_state(priv->hw->wiphy,
3327                 test_bit(STATUS_RF_KILL_HW, &priv->shrd->status));
3328
3329         iwl_power_initialize(priv);
3330         iwl_tt_initialize(priv);
3331
3332         init_completion(&priv->firmware_loading_complete);
3333
3334         err = iwl_request_firmware(priv, true);
3335         if (err)
3336                 goto out_destroy_workqueue;
3337
3338         return 0;
3339
3340 out_destroy_workqueue:
3341         destroy_workqueue(priv->shrd->workqueue);
3342         priv->shrd->workqueue = NULL;
3343         iwl_uninit_drv(priv);
3344 out_free_eeprom:
3345         iwl_eeprom_free(priv);
3346 out_free_trans:
3347         iwl_trans_free(trans(priv));
3348 out_free_traffic_mem:
3349         iwl_free_traffic_mem(priv);
3350         ieee80211_free_hw(priv->hw);
3351 out:
3352         return err;
3353 }
3354
3355 void __devexit iwl_remove(struct iwl_priv * priv)
3356 {
3357         wait_for_completion(&priv->firmware_loading_complete);
3358
3359         IWL_DEBUG_INFO(priv, "*** UNLOAD DRIVER ***\n");
3360
3361         iwl_dbgfs_unregister(priv);
3362
3363         /* ieee80211_unregister_hw call wil cause iwl_mac_stop to
3364          * to be called and iwl_down since we are removing the device
3365          * we need to set STATUS_EXIT_PENDING bit.
3366          */
3367         set_bit(STATUS_EXIT_PENDING, &priv->shrd->status);
3368
3369         iwl_testmode_cleanup(priv);
3370         iwl_leds_exit(priv);
3371
3372         if (priv->mac80211_registered) {
3373                 ieee80211_unregister_hw(priv->hw);
3374                 priv->mac80211_registered = 0;
3375         }
3376
3377         iwl_tt_exit(priv);
3378
3379         /*This will stop the queues, move the device to low power state */
3380         iwl_trans_stop_device(trans(priv));
3381
3382         iwl_dealloc_ucode(priv);
3383
3384         iwl_eeprom_free(priv);
3385
3386         /*netif_stop_queue(dev); */
3387         flush_workqueue(priv->shrd->workqueue);
3388
3389         /* ieee80211_unregister_hw calls iwl_mac_stop, which flushes
3390          * priv->shrd->workqueue... so we can't take down the workqueue
3391          * until now... */
3392         destroy_workqueue(priv->shrd->workqueue);
3393         priv->shrd->workqueue = NULL;
3394         iwl_free_traffic_mem(priv);
3395
3396         iwl_trans_free(trans(priv));
3397
3398         iwl_uninit_drv(priv);
3399
3400         dev_kfree_skb(priv->beacon_skb);
3401
3402         ieee80211_free_hw(priv->hw);
3403 }
3404
3405
3406 /*****************************************************************************
3407  *
3408  * driver and module entry point
3409  *
3410  *****************************************************************************/
3411 static int __init iwl_init(void)
3412 {
3413
3414         int ret;
3415         pr_info(DRV_DESCRIPTION ", " DRV_VERSION "\n");
3416         pr_info(DRV_COPYRIGHT "\n");
3417
3418         ret = iwlagn_rate_control_register();
3419         if (ret) {
3420                 pr_err("Unable to register rate control algorithm: %d\n", ret);
3421                 return ret;
3422         }
3423
3424         ret = iwl_pci_register_driver();
3425
3426         if (ret)
3427                 goto error_register;
3428         return ret;
3429
3430 error_register:
3431         iwlagn_rate_control_unregister();
3432         return ret;
3433 }
3434
3435 static void __exit iwl_exit(void)
3436 {
3437         iwl_pci_unregister_driver();
3438         iwlagn_rate_control_unregister();
3439 }
3440
3441 module_exit(iwl_exit);
3442 module_init(iwl_init);
3443
3444 #ifdef CONFIG_IWLWIFI_DEBUG
3445 module_param_named(debug, iwlagn_mod_params.debug_level, uint,
3446                    S_IRUGO | S_IWUSR);
3447 MODULE_PARM_DESC(debug, "debug output mask");
3448 #endif
3449
3450 module_param_named(swcrypto, iwlagn_mod_params.sw_crypto, int, S_IRUGO);
3451 MODULE_PARM_DESC(swcrypto, "using crypto in software (default 0 [hardware])");
3452 module_param_named(queues_num, iwlagn_mod_params.num_of_queues, int, S_IRUGO);
3453 MODULE_PARM_DESC(queues_num, "number of hw queues.");
3454 module_param_named(11n_disable, iwlagn_mod_params.disable_11n, int, S_IRUGO);
3455 MODULE_PARM_DESC(11n_disable, "disable 11n functionality");
3456 module_param_named(amsdu_size_8K, iwlagn_mod_params.amsdu_size_8K,
3457                    int, S_IRUGO);
3458 MODULE_PARM_DESC(amsdu_size_8K, "enable 8K amsdu size");
3459 module_param_named(fw_restart, iwlagn_mod_params.restart_fw, int, S_IRUGO);
3460 MODULE_PARM_DESC(fw_restart, "restart firmware in case of error");
3461
3462 module_param_named(ucode_alternative,
3463                    iwlagn_mod_params.wanted_ucode_alternative,
3464                    int, S_IRUGO);
3465 MODULE_PARM_DESC(ucode_alternative,
3466                  "specify ucode alternative to use from ucode file");
3467
3468 module_param_named(antenna_coupling, iwlagn_mod_params.ant_coupling,
3469                    int, S_IRUGO);
3470 MODULE_PARM_DESC(antenna_coupling,
3471                  "specify antenna coupling in dB (defualt: 0 dB)");
3472
3473 module_param_named(bt_ch_inhibition, iwlagn_mod_params.bt_ch_announce,
3474                    bool, S_IRUGO);
3475 MODULE_PARM_DESC(bt_ch_inhibition,
3476                  "Enable BT channel inhibition (default: enable)");
3477
3478 module_param_named(plcp_check, iwlagn_mod_params.plcp_check, bool, S_IRUGO);
3479 MODULE_PARM_DESC(plcp_check, "Check plcp health (default: 1 [enabled])");
3480
3481 module_param_named(ack_check, iwlagn_mod_params.ack_check, bool, S_IRUGO);
3482 MODULE_PARM_DESC(ack_check, "Check ack health (default: 0 [disabled])");
3483
3484 module_param_named(wd_disable, iwlagn_mod_params.wd_disable, bool, S_IRUGO);
3485 MODULE_PARM_DESC(wd_disable,
3486                 "Disable stuck queue watchdog timer (default: 0 [enabled])");
3487
3488 /*
3489  * set bt_coex_active to true, uCode will do kill/defer
3490  * every time the priority line is asserted (BT is sending signals on the
3491  * priority line in the PCIx).
3492  * set bt_coex_active to false, uCode will ignore the BT activity and
3493  * perform the normal operation
3494  *
3495  * User might experience transmit issue on some platform due to WiFi/BT
3496  * co-exist problem. The possible behaviors are:
3497  *   Able to scan and finding all the available AP
3498  *   Not able to associate with any AP
3499  * On those platforms, WiFi communication can be restored by set
3500  * "bt_coex_active" module parameter to "false"
3501  *
3502  * default: bt_coex_active = true (BT_COEX_ENABLE)
3503  */
3504 module_param_named(bt_coex_active, iwlagn_mod_params.bt_coex_active,
3505                 bool, S_IRUGO);
3506 MODULE_PARM_DESC(bt_coex_active, "enable wifi/bt co-exist (default: enable)");
3507
3508 module_param_named(led_mode, iwlagn_mod_params.led_mode, int, S_IRUGO);
3509 MODULE_PARM_DESC(led_mode, "0=system default, "
3510                 "1=On(RF On)/Off(RF Off), 2=blinking (default: 0)");
3511
3512 module_param_named(power_save, iwlagn_mod_params.power_save,
3513                 bool, S_IRUGO);
3514 MODULE_PARM_DESC(power_save,
3515                  "enable WiFi power management (default: disable)");
3516
3517 module_param_named(power_level, iwlagn_mod_params.power_level,
3518                 int, S_IRUGO);
3519 MODULE_PARM_DESC(power_level,
3520                  "default power save level (range from 1 - 5, default: 1)");
3521
3522 module_param_named(auto_agg, iwlagn_mod_params.auto_agg,
3523                 bool, S_IRUGO);
3524 MODULE_PARM_DESC(auto_agg,
3525                  "enable agg w/o check traffic load (default: enable)");
3526
3527 /*
3528  * For now, keep using power level 1 instead of automatically
3529  * adjusting ...
3530  */
3531 module_param_named(no_sleep_autoadjust, iwlagn_mod_params.no_sleep_autoadjust,
3532                 bool, S_IRUGO);
3533 MODULE_PARM_DESC(no_sleep_autoadjust,
3534                  "don't automatically adjust sleep level "
3535                  "according to maximum network latency (default: true)");