xmit.c revision 5b346f3eb4b59e00fbaca51637f2cf1df3f47f9d
1/*
2
3  Broadcom B43 wireless driver
4
5  Transmission (TX/RX) related functions.
6
7  Copyright (C) 2005 Martin Langer <martin-langer@gmx.de>
8  Copyright (C) 2005 Stefano Brivio <stefano.brivio@polimi.it>
9  Copyright (C) 2005, 2006 Michael Buesch <m@bues.ch>
10  Copyright (C) 2005 Danny van Dyk <kugelfang@gentoo.org>
11  Copyright (C) 2005 Andreas Jaggi <andreas.jaggi@waterwave.ch>
12
13  This program is free software; you can redistribute it and/or modify
14  it under the terms of the GNU General Public License as published by
15  the Free Software Foundation; either version 2 of the License, or
16  (at your option) any later version.
17
18  This program is distributed in the hope that it will be useful,
19  but WITHOUT ANY WARRANTY; without even the implied warranty of
20  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
21  GNU General Public License for more details.
22
23  You should have received a copy of the GNU General Public License
24  along with this program; see the file COPYING.  If not, write to
25  the Free Software Foundation, Inc., 51 Franklin Steet, Fifth Floor,
26  Boston, MA 02110-1301, USA.
27
28*/
29
30#include "xmit.h"
31#include "phy_common.h"
32#include "dma.h"
33#include "pio.h"
34
35static const struct b43_tx_legacy_rate_phy_ctl_entry b43_tx_legacy_rate_phy_ctl[] = {
36	{ B43_CCK_RATE_1MB,	0x0,			0x0 },
37	{ B43_CCK_RATE_2MB,	0x0,			0x1 },
38	{ B43_CCK_RATE_5MB,	0x0,			0x2 },
39	{ B43_CCK_RATE_11MB,	0x0,			0x3 },
40	{ B43_OFDM_RATE_6MB,	B43_TXH_PHY1_CRATE_1_2,	B43_TXH_PHY1_MODUL_BPSK },
41	{ B43_OFDM_RATE_9MB,	B43_TXH_PHY1_CRATE_3_4,	B43_TXH_PHY1_MODUL_BPSK },
42	{ B43_OFDM_RATE_12MB,	B43_TXH_PHY1_CRATE_1_2,	B43_TXH_PHY1_MODUL_QPSK },
43	{ B43_OFDM_RATE_18MB,	B43_TXH_PHY1_CRATE_3_4,	B43_TXH_PHY1_MODUL_QPSK },
44	{ B43_OFDM_RATE_24MB,	B43_TXH_PHY1_CRATE_1_2,	B43_TXH_PHY1_MODUL_QAM16 },
45	{ B43_OFDM_RATE_36MB,	B43_TXH_PHY1_CRATE_3_4,	B43_TXH_PHY1_MODUL_QAM16 },
46	{ B43_OFDM_RATE_48MB,	B43_TXH_PHY1_CRATE_2_3,	B43_TXH_PHY1_MODUL_QAM64 },
47	{ B43_OFDM_RATE_54MB,	B43_TXH_PHY1_CRATE_3_4,	B43_TXH_PHY1_MODUL_QAM64 },
48};
49
50static const struct b43_tx_legacy_rate_phy_ctl_entry *
51b43_tx_legacy_rate_phy_ctl_ent(u8 bitrate)
52{
53	const struct b43_tx_legacy_rate_phy_ctl_entry *e;
54	unsigned int i;
55
56	for (i = 0; i < ARRAY_SIZE(b43_tx_legacy_rate_phy_ctl); i++) {
57		e = &(b43_tx_legacy_rate_phy_ctl[i]);
58		if (e->bitrate == bitrate)
59			return e;
60	}
61
62	B43_WARN_ON(1);
63	return NULL;
64}
65
66/* Extract the bitrate index out of a CCK PLCP header. */
67static int b43_plcp_get_bitrate_idx_cck(struct b43_plcp_hdr6 *plcp)
68{
69	switch (plcp->raw[0]) {
70	case 0x0A:
71		return 0;
72	case 0x14:
73		return 1;
74	case 0x37:
75		return 2;
76	case 0x6E:
77		return 3;
78	}
79	return -1;
80}
81
82/* Extract the bitrate index out of an OFDM PLCP header. */
83static int b43_plcp_get_bitrate_idx_ofdm(struct b43_plcp_hdr6 *plcp, bool aphy)
84{
85	int base = aphy ? 0 : 4;
86
87	switch (plcp->raw[0] & 0xF) {
88	case 0xB:
89		return base + 0;
90	case 0xF:
91		return base + 1;
92	case 0xA:
93		return base + 2;
94	case 0xE:
95		return base + 3;
96	case 0x9:
97		return base + 4;
98	case 0xD:
99		return base + 5;
100	case 0x8:
101		return base + 6;
102	case 0xC:
103		return base + 7;
104	}
105	return -1;
106}
107
108u8 b43_plcp_get_ratecode_cck(const u8 bitrate)
109{
110	switch (bitrate) {
111	case B43_CCK_RATE_1MB:
112		return 0x0A;
113	case B43_CCK_RATE_2MB:
114		return 0x14;
115	case B43_CCK_RATE_5MB:
116		return 0x37;
117	case B43_CCK_RATE_11MB:
118		return 0x6E;
119	}
120	B43_WARN_ON(1);
121	return 0;
122}
123
124u8 b43_plcp_get_ratecode_ofdm(const u8 bitrate)
125{
126	switch (bitrate) {
127	case B43_OFDM_RATE_6MB:
128		return 0xB;
129	case B43_OFDM_RATE_9MB:
130		return 0xF;
131	case B43_OFDM_RATE_12MB:
132		return 0xA;
133	case B43_OFDM_RATE_18MB:
134		return 0xE;
135	case B43_OFDM_RATE_24MB:
136		return 0x9;
137	case B43_OFDM_RATE_36MB:
138		return 0xD;
139	case B43_OFDM_RATE_48MB:
140		return 0x8;
141	case B43_OFDM_RATE_54MB:
142		return 0xC;
143	}
144	B43_WARN_ON(1);
145	return 0;
146}
147
148void b43_generate_plcp_hdr(struct b43_plcp_hdr4 *plcp,
149			   const u16 octets, const u8 bitrate)
150{
151	__u8 *raw = plcp->raw;
152
153	if (b43_is_ofdm_rate(bitrate)) {
154		u32 d;
155
156		d = b43_plcp_get_ratecode_ofdm(bitrate);
157		B43_WARN_ON(octets & 0xF000);
158		d |= (octets << 5);
159		plcp->data = cpu_to_le32(d);
160	} else {
161		u32 plen;
162
163		plen = octets * 16 / bitrate;
164		if ((octets * 16 % bitrate) > 0) {
165			plen++;
166			if ((bitrate == B43_CCK_RATE_11MB)
167			    && ((octets * 8 % 11) < 4)) {
168				raw[1] = 0x84;
169			} else
170				raw[1] = 0x04;
171		} else
172			raw[1] = 0x04;
173		plcp->data |= cpu_to_le32(plen << 16);
174		raw[0] = b43_plcp_get_ratecode_cck(bitrate);
175	}
176}
177
178static u16 b43_generate_tx_phy_ctl1(struct b43_wldev *dev, u8 bitrate)
179{
180	const struct b43_phy *phy = &dev->phy;
181	const struct b43_tx_legacy_rate_phy_ctl_entry *e;
182	u16 control = 0;
183	u16 bw;
184
185	if (phy->type == B43_PHYTYPE_LP)
186		bw = B43_TXH_PHY1_BW_20;
187	else /* FIXME */
188		bw = B43_TXH_PHY1_BW_20;
189
190	if (0) { /* FIXME: MIMO */
191	} else if (b43_is_cck_rate(bitrate) && phy->type != B43_PHYTYPE_LP) {
192		control = bw;
193	} else {
194		control = bw;
195		e = b43_tx_legacy_rate_phy_ctl_ent(bitrate);
196		if (e) {
197			control |= e->coding_rate;
198			control |= e->modulation;
199		}
200		control |= B43_TXH_PHY1_MODE_SISO;
201	}
202
203	return control;
204}
205
206static u8 b43_calc_fallback_rate(u8 bitrate)
207{
208	switch (bitrate) {
209	case B43_CCK_RATE_1MB:
210		return B43_CCK_RATE_1MB;
211	case B43_CCK_RATE_2MB:
212		return B43_CCK_RATE_1MB;
213	case B43_CCK_RATE_5MB:
214		return B43_CCK_RATE_2MB;
215	case B43_CCK_RATE_11MB:
216		return B43_CCK_RATE_5MB;
217	case B43_OFDM_RATE_6MB:
218		return B43_CCK_RATE_5MB;
219	case B43_OFDM_RATE_9MB:
220		return B43_OFDM_RATE_6MB;
221	case B43_OFDM_RATE_12MB:
222		return B43_OFDM_RATE_9MB;
223	case B43_OFDM_RATE_18MB:
224		return B43_OFDM_RATE_12MB;
225	case B43_OFDM_RATE_24MB:
226		return B43_OFDM_RATE_18MB;
227	case B43_OFDM_RATE_36MB:
228		return B43_OFDM_RATE_24MB;
229	case B43_OFDM_RATE_48MB:
230		return B43_OFDM_RATE_36MB;
231	case B43_OFDM_RATE_54MB:
232		return B43_OFDM_RATE_48MB;
233	}
234	B43_WARN_ON(1);
235	return 0;
236}
237
238/* Generate a TX data header. */
239int b43_generate_txhdr(struct b43_wldev *dev,
240		       u8 *_txhdr,
241		       struct sk_buff *skb_frag,
242		       struct ieee80211_tx_info *info,
243		       u16 cookie)
244{
245	const unsigned char *fragment_data = skb_frag->data;
246	unsigned int fragment_len = skb_frag->len;
247	struct b43_txhdr *txhdr = (struct b43_txhdr *)_txhdr;
248	const struct b43_phy *phy = &dev->phy;
249	const struct ieee80211_hdr *wlhdr =
250	    (const struct ieee80211_hdr *)fragment_data;
251	int use_encryption = !!info->control.hw_key;
252	__le16 fctl = wlhdr->frame_control;
253	struct ieee80211_rate *fbrate;
254	u8 rate, rate_fb;
255	int rate_ofdm, rate_fb_ofdm;
256	unsigned int plcp_fragment_len;
257	u32 mac_ctl = 0;
258	u16 phy_ctl = 0;
259	u8 extra_ft = 0;
260	struct ieee80211_rate *txrate;
261	struct ieee80211_tx_rate *rates;
262
263	memset(txhdr, 0, sizeof(*txhdr));
264
265	txrate = ieee80211_get_tx_rate(dev->wl->hw, info);
266	rate = txrate ? txrate->hw_value : B43_CCK_RATE_1MB;
267	rate_ofdm = b43_is_ofdm_rate(rate);
268	fbrate = ieee80211_get_alt_retry_rate(dev->wl->hw, info, 0) ? : txrate;
269	rate_fb = fbrate->hw_value;
270	rate_fb_ofdm = b43_is_ofdm_rate(rate_fb);
271
272	if (rate_ofdm)
273		txhdr->phy_rate = b43_plcp_get_ratecode_ofdm(rate);
274	else
275		txhdr->phy_rate = b43_plcp_get_ratecode_cck(rate);
276	txhdr->mac_frame_ctl = wlhdr->frame_control;
277	memcpy(txhdr->tx_receiver, wlhdr->addr1, 6);
278
279	/* Calculate duration for fallback rate */
280	if ((rate_fb == rate) ||
281	    (wlhdr->duration_id & cpu_to_le16(0x8000)) ||
282	    (wlhdr->duration_id == cpu_to_le16(0))) {
283		/* If the fallback rate equals the normal rate or the
284		 * dur_id field contains an AID, CFP magic or 0,
285		 * use the original dur_id field. */
286		txhdr->dur_fb = wlhdr->duration_id;
287	} else {
288		txhdr->dur_fb = ieee80211_generic_frame_duration(
289			dev->wl->hw, info->control.vif, fragment_len, fbrate);
290	}
291
292	plcp_fragment_len = fragment_len + FCS_LEN;
293	if (use_encryption) {
294		u8 key_idx = info->control.hw_key->hw_key_idx;
295		struct b43_key *key;
296		int wlhdr_len;
297		size_t iv_len;
298
299		B43_WARN_ON(key_idx >= ARRAY_SIZE(dev->key));
300		key = &(dev->key[key_idx]);
301
302		if (unlikely(!key->keyconf)) {
303			/* This key is invalid. This might only happen
304			 * in a short timeframe after machine resume before
305			 * we were able to reconfigure keys.
306			 * Drop this packet completely. Do not transmit it
307			 * unencrypted to avoid leaking information. */
308			return -ENOKEY;
309		}
310
311		/* Hardware appends ICV. */
312		plcp_fragment_len += info->control.hw_key->icv_len;
313
314		key_idx = b43_kidx_to_fw(dev, key_idx);
315		mac_ctl |= (key_idx << B43_TXH_MAC_KEYIDX_SHIFT) &
316			   B43_TXH_MAC_KEYIDX;
317		mac_ctl |= (key->algorithm << B43_TXH_MAC_KEYALG_SHIFT) &
318			   B43_TXH_MAC_KEYALG;
319		wlhdr_len = ieee80211_hdrlen(fctl);
320		if (key->algorithm == B43_SEC_ALGO_TKIP) {
321			u16 phase1key[5];
322			int i;
323			/* we give the phase1key and iv16 here, the key is stored in
324			 * shm. With that the hardware can do phase 2 and encryption.
325			 */
326			ieee80211_get_tkip_p1k(info->control.hw_key, skb_frag, phase1key);
327			/* phase1key is in host endian. Copy to little-endian txhdr->iv. */
328			for (i = 0; i < 5; i++) {
329				txhdr->iv[i * 2 + 0] = phase1key[i];
330				txhdr->iv[i * 2 + 1] = phase1key[i] >> 8;
331			}
332			/* iv16 */
333			memcpy(txhdr->iv + 10, ((u8 *) wlhdr) + wlhdr_len, 3);
334		} else {
335			iv_len = min((size_t) info->control.hw_key->iv_len,
336				     ARRAY_SIZE(txhdr->iv));
337			memcpy(txhdr->iv, ((u8 *) wlhdr) + wlhdr_len, iv_len);
338		}
339	}
340	switch (dev->fw.hdr_format) {
341	case B43_FW_HDR_598:
342		b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->format_598.plcp),
343				      plcp_fragment_len, rate);
344		break;
345	case B43_FW_HDR_351:
346		b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->format_351.plcp),
347				      plcp_fragment_len, rate);
348		break;
349	case B43_FW_HDR_410:
350		b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->format_410.plcp),
351				      plcp_fragment_len, rate);
352		break;
353	}
354	b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)(&txhdr->plcp_fb),
355			      plcp_fragment_len, rate_fb);
356
357	/* Extra Frame Types */
358	if (rate_fb_ofdm)
359		extra_ft |= B43_TXH_EFT_FB_OFDM;
360	else
361		extra_ft |= B43_TXH_EFT_FB_CCK;
362
363	/* Set channel radio code. Note that the micrcode ORs 0x100 to
364	 * this value before comparing it to the value in SHM, if this
365	 * is a 5Ghz packet.
366	 */
367	txhdr->chan_radio_code = phy->channel;
368
369	/* PHY TX Control word */
370	if (rate_ofdm)
371		phy_ctl |= B43_TXH_PHY_ENC_OFDM;
372	else
373		phy_ctl |= B43_TXH_PHY_ENC_CCK;
374	if (info->control.rates[0].flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE)
375		phy_ctl |= B43_TXH_PHY_SHORTPRMBL;
376
377	switch (b43_ieee80211_antenna_sanitize(dev, info->antenna_sel_tx)) {
378	case 0: /* Default */
379		phy_ctl |= B43_TXH_PHY_ANT01AUTO;
380		break;
381	case 1: /* Antenna 0 */
382		phy_ctl |= B43_TXH_PHY_ANT0;
383		break;
384	case 2: /* Antenna 1 */
385		phy_ctl |= B43_TXH_PHY_ANT1;
386		break;
387	case 3: /* Antenna 2 */
388		phy_ctl |= B43_TXH_PHY_ANT2;
389		break;
390	case 4: /* Antenna 3 */
391		phy_ctl |= B43_TXH_PHY_ANT3;
392		break;
393	default:
394		B43_WARN_ON(1);
395	}
396
397	rates = info->control.rates;
398	/* MAC control */
399	if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
400		mac_ctl |= B43_TXH_MAC_ACK;
401	/* use hardware sequence counter as the non-TID counter */
402	if (info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ)
403		mac_ctl |= B43_TXH_MAC_HWSEQ;
404	if (info->flags & IEEE80211_TX_CTL_FIRST_FRAGMENT)
405		mac_ctl |= B43_TXH_MAC_STMSDU;
406	if (phy->type == B43_PHYTYPE_A)
407		mac_ctl |= B43_TXH_MAC_5GHZ;
408
409	/* Overwrite rates[0].count to make the retry calculation
410	 * in the tx status easier. need the actual retry limit to
411	 * detect whether the fallback rate was used.
412	 */
413	if ((rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
414	    (rates[0].count <= dev->wl->hw->conf.long_frame_max_tx_count)) {
415		rates[0].count = dev->wl->hw->conf.long_frame_max_tx_count;
416		mac_ctl |= B43_TXH_MAC_LONGFRAME;
417	} else {
418		rates[0].count = dev->wl->hw->conf.short_frame_max_tx_count;
419	}
420
421	/* Generate the RTS or CTS-to-self frame */
422	if ((rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
423	    (rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT)) {
424		unsigned int len;
425		struct ieee80211_hdr *uninitialized_var(hdr);
426		int rts_rate, rts_rate_fb;
427		int rts_rate_ofdm, rts_rate_fb_ofdm;
428		struct b43_plcp_hdr6 *uninitialized_var(plcp);
429		struct ieee80211_rate *rts_cts_rate;
430
431		rts_cts_rate = ieee80211_get_rts_cts_rate(dev->wl->hw, info);
432
433		rts_rate = rts_cts_rate ? rts_cts_rate->hw_value : B43_CCK_RATE_1MB;
434		rts_rate_ofdm = b43_is_ofdm_rate(rts_rate);
435		rts_rate_fb = b43_calc_fallback_rate(rts_rate);
436		rts_rate_fb_ofdm = b43_is_ofdm_rate(rts_rate_fb);
437
438		if (rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT) {
439			struct ieee80211_cts *uninitialized_var(cts);
440
441			switch (dev->fw.hdr_format) {
442			case B43_FW_HDR_598:
443				cts = (struct ieee80211_cts *)
444					(txhdr->format_598.rts_frame);
445				break;
446			case B43_FW_HDR_351:
447				cts = (struct ieee80211_cts *)
448					(txhdr->format_351.rts_frame);
449				break;
450			case B43_FW_HDR_410:
451				cts = (struct ieee80211_cts *)
452					(txhdr->format_410.rts_frame);
453				break;
454			}
455			ieee80211_ctstoself_get(dev->wl->hw, info->control.vif,
456						fragment_data, fragment_len,
457						info, cts);
458			mac_ctl |= B43_TXH_MAC_SENDCTS;
459			len = sizeof(struct ieee80211_cts);
460		} else {
461			struct ieee80211_rts *uninitialized_var(rts);
462
463			switch (dev->fw.hdr_format) {
464			case B43_FW_HDR_598:
465				rts = (struct ieee80211_rts *)
466					(txhdr->format_598.rts_frame);
467				break;
468			case B43_FW_HDR_351:
469				rts = (struct ieee80211_rts *)
470					(txhdr->format_351.rts_frame);
471				break;
472			case B43_FW_HDR_410:
473				rts = (struct ieee80211_rts *)
474					(txhdr->format_410.rts_frame);
475				break;
476			}
477			ieee80211_rts_get(dev->wl->hw, info->control.vif,
478					  fragment_data, fragment_len,
479					  info, rts);
480			mac_ctl |= B43_TXH_MAC_SENDRTS;
481			len = sizeof(struct ieee80211_rts);
482		}
483		len += FCS_LEN;
484
485		/* Generate the PLCP headers for the RTS/CTS frame */
486		switch (dev->fw.hdr_format) {
487		case B43_FW_HDR_598:
488			plcp = &txhdr->format_598.rts_plcp;
489			break;
490		case B43_FW_HDR_351:
491			plcp = &txhdr->format_351.rts_plcp;
492			break;
493		case B43_FW_HDR_410:
494			plcp = &txhdr->format_410.rts_plcp;
495			break;
496		}
497		b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)plcp,
498				      len, rts_rate);
499		plcp = &txhdr->rts_plcp_fb;
500		b43_generate_plcp_hdr((struct b43_plcp_hdr4 *)plcp,
501				      len, rts_rate_fb);
502
503		switch (dev->fw.hdr_format) {
504		case B43_FW_HDR_598:
505			hdr = (struct ieee80211_hdr *)
506				(&txhdr->format_598.rts_frame);
507			break;
508		case B43_FW_HDR_351:
509			hdr = (struct ieee80211_hdr *)
510				(&txhdr->format_351.rts_frame);
511			break;
512		case B43_FW_HDR_410:
513			hdr = (struct ieee80211_hdr *)
514				(&txhdr->format_410.rts_frame);
515			break;
516		}
517		txhdr->rts_dur_fb = hdr->duration_id;
518
519		if (rts_rate_ofdm) {
520			extra_ft |= B43_TXH_EFT_RTS_OFDM;
521			txhdr->phy_rate_rts =
522			    b43_plcp_get_ratecode_ofdm(rts_rate);
523		} else {
524			extra_ft |= B43_TXH_EFT_RTS_CCK;
525			txhdr->phy_rate_rts =
526			    b43_plcp_get_ratecode_cck(rts_rate);
527		}
528		if (rts_rate_fb_ofdm)
529			extra_ft |= B43_TXH_EFT_RTSFB_OFDM;
530		else
531			extra_ft |= B43_TXH_EFT_RTSFB_CCK;
532
533		if (rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS &&
534		    phy->type == B43_PHYTYPE_N) {
535			txhdr->phy_ctl1_rts = cpu_to_le16(
536				b43_generate_tx_phy_ctl1(dev, rts_rate));
537			txhdr->phy_ctl1_rts_fb = cpu_to_le16(
538				b43_generate_tx_phy_ctl1(dev, rts_rate_fb));
539		}
540	}
541
542	/* Magic cookie */
543	switch (dev->fw.hdr_format) {
544	case B43_FW_HDR_598:
545		txhdr->format_598.cookie = cpu_to_le16(cookie);
546		break;
547	case B43_FW_HDR_351:
548		txhdr->format_351.cookie = cpu_to_le16(cookie);
549		break;
550	case B43_FW_HDR_410:
551		txhdr->format_410.cookie = cpu_to_le16(cookie);
552		break;
553	}
554
555	if (phy->type == B43_PHYTYPE_N) {
556		txhdr->phy_ctl1 =
557			cpu_to_le16(b43_generate_tx_phy_ctl1(dev, rate));
558		txhdr->phy_ctl1_fb =
559			cpu_to_le16(b43_generate_tx_phy_ctl1(dev, rate_fb));
560	}
561
562	/* Apply the bitfields */
563	txhdr->mac_ctl = cpu_to_le32(mac_ctl);
564	txhdr->phy_ctl = cpu_to_le16(phy_ctl);
565	txhdr->extra_ft = extra_ft;
566
567	return 0;
568}
569
570static s8 b43_rssi_postprocess(struct b43_wldev *dev,
571			       u8 in_rssi, int ofdm,
572			       int adjust_2053, int adjust_2050)
573{
574	struct b43_phy *phy = &dev->phy;
575	struct b43_phy_g *gphy = phy->g;
576	s32 tmp;
577
578	switch (phy->radio_ver) {
579	case 0x2050:
580		if (ofdm) {
581			tmp = in_rssi;
582			if (tmp > 127)
583				tmp -= 256;
584			tmp *= 73;
585			tmp /= 64;
586			if (adjust_2050)
587				tmp += 25;
588			else
589				tmp -= 3;
590		} else {
591			if (dev->dev->bus_sprom->
592			    boardflags_lo & B43_BFL_RSSI) {
593				if (in_rssi > 63)
594					in_rssi = 63;
595				B43_WARN_ON(phy->type != B43_PHYTYPE_G);
596				tmp = gphy->nrssi_lt[in_rssi];
597				tmp = 31 - tmp;
598				tmp *= -131;
599				tmp /= 128;
600				tmp -= 57;
601			} else {
602				tmp = in_rssi;
603				tmp = 31 - tmp;
604				tmp *= -149;
605				tmp /= 128;
606				tmp -= 68;
607			}
608			if (phy->type == B43_PHYTYPE_G && adjust_2050)
609				tmp += 25;
610		}
611		break;
612	case 0x2060:
613		if (in_rssi > 127)
614			tmp = in_rssi - 256;
615		else
616			tmp = in_rssi;
617		break;
618	default:
619		tmp = in_rssi;
620		tmp -= 11;
621		tmp *= 103;
622		tmp /= 64;
623		if (adjust_2053)
624			tmp -= 109;
625		else
626			tmp -= 83;
627	}
628
629	return (s8) tmp;
630}
631
632//TODO
633#if 0
634static s8 b43_rssinoise_postprocess(struct b43_wldev *dev, u8 in_rssi)
635{
636	struct b43_phy *phy = &dev->phy;
637	s8 ret;
638
639	if (phy->type == B43_PHYTYPE_A) {
640		//TODO: Incomplete specs.
641		ret = 0;
642	} else
643		ret = b43_rssi_postprocess(dev, in_rssi, 0, 1, 1);
644
645	return ret;
646}
647#endif
648
649void b43_rx(struct b43_wldev *dev, struct sk_buff *skb, const void *_rxhdr)
650{
651	struct ieee80211_rx_status status;
652	struct b43_plcp_hdr6 *plcp;
653	struct ieee80211_hdr *wlhdr;
654	const struct b43_rxhdr_fw4 *rxhdr = _rxhdr;
655	__le16 fctl;
656	u16 phystat0, phystat3;
657	u16 uninitialized_var(chanstat), uninitialized_var(mactime);
658	u32 uninitialized_var(macstat);
659	u16 chanid;
660	u16 phytype;
661	int padding;
662
663	memset(&status, 0, sizeof(status));
664
665	/* Get metadata about the frame from the header. */
666	phystat0 = le16_to_cpu(rxhdr->phy_status0);
667	phystat3 = le16_to_cpu(rxhdr->phy_status3);
668	switch (dev->fw.hdr_format) {
669	case B43_FW_HDR_598:
670		macstat = le32_to_cpu(rxhdr->format_598.mac_status);
671		mactime = le16_to_cpu(rxhdr->format_598.mac_time);
672		chanstat = le16_to_cpu(rxhdr->format_598.channel);
673		break;
674	case B43_FW_HDR_410:
675	case B43_FW_HDR_351:
676		macstat = le32_to_cpu(rxhdr->format_351.mac_status);
677		mactime = le16_to_cpu(rxhdr->format_351.mac_time);
678		chanstat = le16_to_cpu(rxhdr->format_351.channel);
679		break;
680	}
681	phytype = chanstat & B43_RX_CHAN_PHYTYPE;
682
683	if (unlikely(macstat & B43_RX_MAC_FCSERR)) {
684		dev->wl->ieee_stats.dot11FCSErrorCount++;
685		status.flag |= RX_FLAG_FAILED_FCS_CRC;
686	}
687	if (unlikely(phystat0 & (B43_RX_PHYST0_PLCPHCF | B43_RX_PHYST0_PLCPFV)))
688		status.flag |= RX_FLAG_FAILED_PLCP_CRC;
689	if (phystat0 & B43_RX_PHYST0_SHORTPRMBL)
690		status.flag |= RX_FLAG_SHORTPRE;
691	if (macstat & B43_RX_MAC_DECERR) {
692		/* Decryption with the given key failed.
693		 * Drop the packet. We also won't be able to decrypt it with
694		 * the key in software. */
695		goto drop;
696	}
697
698	/* Skip PLCP and padding */
699	padding = (macstat & B43_RX_MAC_PADDING) ? 2 : 0;
700	if (unlikely(skb->len < (sizeof(struct b43_plcp_hdr6) + padding))) {
701		b43dbg(dev->wl, "RX: Packet size underrun (1)\n");
702		goto drop;
703	}
704	plcp = (struct b43_plcp_hdr6 *)(skb->data + padding);
705	skb_pull(skb, sizeof(struct b43_plcp_hdr6) + padding);
706	/* The skb contains the Wireless Header + payload data now */
707	if (unlikely(skb->len < (2 + 2 + 6 /*minimum hdr */  + FCS_LEN))) {
708		b43dbg(dev->wl, "RX: Packet size underrun (2)\n");
709		goto drop;
710	}
711	wlhdr = (struct ieee80211_hdr *)(skb->data);
712	fctl = wlhdr->frame_control;
713
714	if (macstat & B43_RX_MAC_DEC) {
715		unsigned int keyidx;
716		int wlhdr_len;
717
718		keyidx = ((macstat & B43_RX_MAC_KEYIDX)
719			  >> B43_RX_MAC_KEYIDX_SHIFT);
720		/* We must adjust the key index here. We want the "physical"
721		 * key index, but the ucode passed it slightly different.
722		 */
723		keyidx = b43_kidx_to_raw(dev, keyidx);
724		B43_WARN_ON(keyidx >= ARRAY_SIZE(dev->key));
725
726		if (dev->key[keyidx].algorithm != B43_SEC_ALGO_NONE) {
727			wlhdr_len = ieee80211_hdrlen(fctl);
728			if (unlikely(skb->len < (wlhdr_len + 3))) {
729				b43dbg(dev->wl,
730				       "RX: Packet size underrun (3)\n");
731				goto drop;
732			}
733			status.flag |= RX_FLAG_DECRYPTED;
734		}
735	}
736
737	/* Link quality statistics */
738	if ((chanstat & B43_RX_CHAN_PHYTYPE) == B43_PHYTYPE_N) {
739//		s8 rssi = max(rxhdr->power0, rxhdr->power1);
740		//TODO: Find out what the rssi value is (dBm or percentage?)
741		//      and also find out what the maximum possible value is.
742		//      Fill status.ssi and status.signal fields.
743	} else {
744		status.signal = b43_rssi_postprocess(dev, rxhdr->jssi,
745						  (phystat0 & B43_RX_PHYST0_OFDM),
746						  (phystat0 & B43_RX_PHYST0_GAINCTL),
747						  (phystat3 & B43_RX_PHYST3_TRSTATE));
748	}
749
750	if (phystat0 & B43_RX_PHYST0_OFDM)
751		status.rate_idx = b43_plcp_get_bitrate_idx_ofdm(plcp,
752						phytype == B43_PHYTYPE_A);
753	else
754		status.rate_idx = b43_plcp_get_bitrate_idx_cck(plcp);
755	if (unlikely(status.rate_idx == -1)) {
756		/* PLCP seems to be corrupted.
757		 * Drop the frame, if we are not interested in corrupted frames. */
758		if (!(dev->wl->filter_flags & FIF_PLCPFAIL))
759			goto drop;
760	}
761	status.antenna = !!(phystat0 & B43_RX_PHYST0_ANT);
762
763	/*
764	 * All frames on monitor interfaces and beacons always need a full
765	 * 64-bit timestamp. Monitor interfaces need it for diagnostic
766	 * purposes and beacons for IBSS merging.
767	 * This code assumes we get to process the packet within 16 bits
768	 * of timestamp, i.e. about 65 milliseconds after the PHY received
769	 * the first symbol.
770	 */
771	if (ieee80211_is_beacon(fctl) || dev->wl->radiotap_enabled) {
772		u16 low_mactime_now;
773
774		b43_tsf_read(dev, &status.mactime);
775		low_mactime_now = status.mactime;
776		status.mactime = status.mactime & ~0xFFFFULL;
777		status.mactime += mactime;
778		if (low_mactime_now <= mactime)
779			status.mactime -= 0x10000;
780		status.flag |= RX_FLAG_MACTIME_MPDU;
781	}
782
783	chanid = (chanstat & B43_RX_CHAN_ID) >> B43_RX_CHAN_ID_SHIFT;
784	switch (chanstat & B43_RX_CHAN_PHYTYPE) {
785	case B43_PHYTYPE_A:
786		status.band = IEEE80211_BAND_5GHZ;
787		B43_WARN_ON(1);
788		/* FIXME: We don't really know which value the "chanid" contains.
789		 *        So the following assignment might be wrong. */
790		status.freq = b43_channel_to_freq_5ghz(chanid);
791		break;
792	case B43_PHYTYPE_G:
793		status.band = IEEE80211_BAND_2GHZ;
794		/* chanid is the radio channel cookie value as used
795		 * to tune the radio. */
796		status.freq = chanid + 2400;
797		break;
798	case B43_PHYTYPE_N:
799	case B43_PHYTYPE_LP:
800	case B43_PHYTYPE_HT:
801		/* chanid is the SHM channel cookie. Which is the plain
802		 * channel number in b43. */
803		if (chanstat & B43_RX_CHAN_5GHZ) {
804			status.band = IEEE80211_BAND_5GHZ;
805			status.freq = b43_freq_to_channel_5ghz(chanid);
806		} else {
807			status.band = IEEE80211_BAND_2GHZ;
808			status.freq = b43_freq_to_channel_2ghz(chanid);
809		}
810		break;
811	default:
812		B43_WARN_ON(1);
813		goto drop;
814	}
815
816	memcpy(IEEE80211_SKB_RXCB(skb), &status, sizeof(status));
817	ieee80211_rx_ni(dev->wl->hw, skb);
818
819#if B43_DEBUG
820	dev->rx_count++;
821#endif
822	return;
823drop:
824	b43dbg(dev->wl, "RX: Packet dropped\n");
825	dev_kfree_skb_any(skb);
826}
827
828void b43_handle_txstatus(struct b43_wldev *dev,
829			 const struct b43_txstatus *status)
830{
831	b43_debugfs_log_txstat(dev, status);
832
833	if (status->intermediate)
834		return;
835	if (status->for_ampdu)
836		return;
837	if (!status->acked)
838		dev->wl->ieee_stats.dot11ACKFailureCount++;
839	if (status->rts_count) {
840		if (status->rts_count == 0xF)	//FIXME
841			dev->wl->ieee_stats.dot11RTSFailureCount++;
842		else
843			dev->wl->ieee_stats.dot11RTSSuccessCount++;
844	}
845
846	if (b43_using_pio_transfers(dev))
847		b43_pio_handle_txstatus(dev, status);
848	else
849		b43_dma_handle_txstatus(dev, status);
850
851	b43_phy_txpower_check(dev, 0);
852}
853
854/* Fill out the mac80211 TXstatus report based on the b43-specific
855 * txstatus report data. This returns a boolean whether the frame was
856 * successfully transmitted. */
857bool b43_fill_txstatus_report(struct b43_wldev *dev,
858			      struct ieee80211_tx_info *report,
859			      const struct b43_txstatus *status)
860{
861	bool frame_success = 1;
862	int retry_limit;
863
864	/* preserve the confiured retry limit before clearing the status
865	 * The xmit function has overwritten the rc's value with the actual
866	 * retry limit done by the hardware */
867	retry_limit = report->status.rates[0].count;
868	ieee80211_tx_info_clear_status(report);
869
870	if (status->acked) {
871		/* The frame was ACKed. */
872		report->flags |= IEEE80211_TX_STAT_ACK;
873	} else {
874		/* The frame was not ACKed... */
875		if (!(report->flags & IEEE80211_TX_CTL_NO_ACK)) {
876			/* ...but we expected an ACK. */
877			frame_success = 0;
878		}
879	}
880	if (status->frame_count == 0) {
881		/* The frame was not transmitted at all. */
882		report->status.rates[0].count = 0;
883	} else if (status->rts_count > dev->wl->hw->conf.short_frame_max_tx_count) {
884		/*
885		 * If the short retries (RTS, not data frame) have exceeded
886		 * the limit, the hw will not have tried the selected rate,
887		 * but will have used the fallback rate instead.
888		 * Don't let the rate control count attempts for the selected
889		 * rate in this case, otherwise the statistics will be off.
890		 */
891		report->status.rates[0].count = 0;
892		report->status.rates[1].count = status->frame_count;
893	} else {
894		if (status->frame_count > retry_limit) {
895			report->status.rates[0].count = retry_limit;
896			report->status.rates[1].count = status->frame_count -
897					retry_limit;
898
899		} else {
900			report->status.rates[0].count = status->frame_count;
901			report->status.rates[1].idx = -1;
902		}
903	}
904
905	return frame_success;
906}
907
908/* Stop any TX operation on the device (suspend the hardware queues) */
909void b43_tx_suspend(struct b43_wldev *dev)
910{
911	if (b43_using_pio_transfers(dev))
912		b43_pio_tx_suspend(dev);
913	else
914		b43_dma_tx_suspend(dev);
915}
916
917/* Resume any TX operation on the device (resume the hardware queues) */
918void b43_tx_resume(struct b43_wldev *dev)
919{
920	if (b43_using_pio_transfers(dev))
921		b43_pio_tx_resume(dev);
922	else
923		b43_dma_tx_resume(dev);
924}
925