1/*
2 * Marvell Wireless LAN device driver: functions for station ioctl
3 *
4 * Copyright (C) 2011, Marvell International Ltd.
5 *
6 * This software file (the "File") is distributed by Marvell International
7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8 * (the "License").  You may use, redistribute and/or modify this File in
9 * accordance with the terms and conditions of the License, a copy of which
10 * is available by writing to the Free Software Foundation, Inc.,
11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13 *
14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16 * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17 * this warranty disclaimer.
18 */
19
20#include "decl.h"
21#include "ioctl.h"
22#include "util.h"
23#include "fw.h"
24#include "main.h"
25#include "wmm.h"
26#include "11n.h"
27#include "cfg80211.h"
28
29/*
30 * Copies the multicast address list from device to driver.
31 *
32 * This function does not validate the destination memory for
33 * size, and the calling function must ensure enough memory is
34 * available.
35 */
36int mwifiex_copy_mcast_addr(struct mwifiex_multicast_list *mlist,
37			    struct net_device *dev)
38{
39	int i = 0;
40	struct netdev_hw_addr *ha;
41
42	netdev_for_each_mc_addr(ha, dev)
43		memcpy(&mlist->mac_list[i++], ha->addr, ETH_ALEN);
44
45	return i;
46}
47
48/*
49 * Wait queue completion handler.
50 *
51 * This function waits on a cmd wait queue. It also cancels the pending
52 * request after waking up, in case of errors.
53 */
54int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter)
55{
56	bool cancel_flag = false;
57	int status;
58	struct cmd_ctrl_node *cmd_queued;
59
60	if (!adapter->cmd_queued)
61		return 0;
62
63	cmd_queued = adapter->cmd_queued;
64	adapter->cmd_queued = NULL;
65
66	dev_dbg(adapter->dev, "cmd pending\n");
67	atomic_inc(&adapter->cmd_pending);
68
69	/* Status pending, wake up main process */
70	queue_work(adapter->workqueue, &adapter->main_work);
71
72	/* Wait for completion */
73	wait_event_interruptible(adapter->cmd_wait_q.wait,
74				 *(cmd_queued->condition));
75	if (!*(cmd_queued->condition))
76		cancel_flag = true;
77
78	if (cancel_flag) {
79		mwifiex_cancel_pending_ioctl(adapter);
80		dev_dbg(adapter->dev, "cmd cancel\n");
81	}
82
83	status = adapter->cmd_wait_q.status;
84	adapter->cmd_wait_q.status = 0;
85
86	return status;
87}
88
89/*
90 * This function prepares the correct firmware command and
91 * issues it to set the multicast list.
92 *
93 * This function can be used to enable promiscuous mode, or enable all
94 * multicast packets, or to enable selective multicast.
95 */
96int mwifiex_request_set_multicast_list(struct mwifiex_private *priv,
97				struct mwifiex_multicast_list *mcast_list)
98{
99	int ret = 0;
100	u16 old_pkt_filter;
101
102	old_pkt_filter = priv->curr_pkt_filter;
103
104	if (mcast_list->mode == MWIFIEX_PROMISC_MODE) {
105		dev_dbg(priv->adapter->dev, "info: Enable Promiscuous mode\n");
106		priv->curr_pkt_filter |= HostCmd_ACT_MAC_PROMISCUOUS_ENABLE;
107		priv->curr_pkt_filter &=
108			~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
109	} else {
110		/* Multicast */
111		priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_PROMISCUOUS_ENABLE;
112		if (mcast_list->mode == MWIFIEX_MULTICAST_MODE) {
113			dev_dbg(priv->adapter->dev,
114				"info: Enabling All Multicast!\n");
115			priv->curr_pkt_filter |=
116				HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
117		} else {
118			priv->curr_pkt_filter &=
119				~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
120			if (mcast_list->num_multicast_addr) {
121				dev_dbg(priv->adapter->dev,
122					"info: Set multicast list=%d\n",
123				       mcast_list->num_multicast_addr);
124				/* Set multicast addresses to firmware */
125				if (old_pkt_filter == priv->curr_pkt_filter) {
126					/* Send request to firmware */
127					ret = mwifiex_send_cmd_async(priv,
128						HostCmd_CMD_MAC_MULTICAST_ADR,
129						HostCmd_ACT_GEN_SET, 0,
130						mcast_list);
131				} else {
132					/* Send request to firmware */
133					ret = mwifiex_send_cmd_async(priv,
134						HostCmd_CMD_MAC_MULTICAST_ADR,
135						HostCmd_ACT_GEN_SET, 0,
136						mcast_list);
137				}
138			}
139		}
140	}
141	dev_dbg(priv->adapter->dev,
142		"info: old_pkt_filter=%#x, curr_pkt_filter=%#x\n",
143	       old_pkt_filter, priv->curr_pkt_filter);
144	if (old_pkt_filter != priv->curr_pkt_filter) {
145		ret = mwifiex_send_cmd_async(priv, HostCmd_CMD_MAC_CONTROL,
146					     HostCmd_ACT_GEN_SET,
147					     0, &priv->curr_pkt_filter);
148	}
149
150	return ret;
151}
152
153/*
154 * This function fills bss descriptor structure using provided
155 * information.
156 */
157int mwifiex_fill_new_bss_desc(struct mwifiex_private *priv,
158			      u8 *bssid, s32 rssi, u8 *ie_buf,
159			      size_t ie_len, u16 beacon_period,
160			      u16 cap_info_bitmap, u8 band,
161			      struct mwifiex_bssdescriptor *bss_desc)
162{
163	int ret;
164
165	memcpy(bss_desc->mac_address, bssid, ETH_ALEN);
166	bss_desc->rssi = rssi;
167	bss_desc->beacon_buf = ie_buf;
168	bss_desc->beacon_buf_size = ie_len;
169	bss_desc->beacon_period = beacon_period;
170	bss_desc->cap_info_bitmap = cap_info_bitmap;
171	bss_desc->bss_band = band;
172	if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_PRIVACY) {
173		dev_dbg(priv->adapter->dev, "info: InterpretIE: AP WEP enabled\n");
174		bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_8021X_WEP;
175	} else {
176		bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_ACCEPT_ALL;
177	}
178	if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_IBSS)
179		bss_desc->bss_mode = NL80211_IFTYPE_ADHOC;
180	else
181		bss_desc->bss_mode = NL80211_IFTYPE_STATION;
182
183	ret = mwifiex_update_bss_desc_with_ie(priv->adapter, bss_desc,
184					      ie_buf, ie_len);
185
186	return ret;
187}
188
189/*
190 * In Ad-Hoc mode, the IBSS is created if not found in scan list.
191 * In both Ad-Hoc and infra mode, an deauthentication is performed
192 * first.
193 */
194int mwifiex_bss_start(struct mwifiex_private *priv, struct cfg80211_bss *bss,
195		      struct cfg80211_ssid *req_ssid)
196{
197	int ret;
198	struct mwifiex_adapter *adapter = priv->adapter;
199	struct mwifiex_bssdescriptor *bss_desc = NULL;
200	u8 *beacon_ie = NULL;
201
202	priv->scan_block = false;
203
204	if (bss) {
205		/* Allocate and fill new bss descriptor */
206		bss_desc = kzalloc(sizeof(struct mwifiex_bssdescriptor),
207				GFP_KERNEL);
208		if (!bss_desc) {
209			dev_err(priv->adapter->dev, " failed to alloc bss_desc\n");
210			return -ENOMEM;
211		}
212
213		beacon_ie = kmemdup(bss->information_elements,
214					bss->len_beacon_ies, GFP_KERNEL);
215		if (!beacon_ie) {
216			kfree(bss_desc);
217			dev_err(priv->adapter->dev, " failed to alloc beacon_ie\n");
218			return -ENOMEM;
219		}
220
221		ret = mwifiex_fill_new_bss_desc(priv, bss->bssid, bss->signal,
222						beacon_ie, bss->len_beacon_ies,
223						bss->beacon_interval,
224						bss->capability,
225						*(u8 *)bss->priv, bss_desc);
226		if (ret)
227			goto done;
228	}
229
230	if (priv->bss_mode == NL80211_IFTYPE_STATION) {
231		/* Infra mode */
232		ret = mwifiex_deauthenticate(priv, NULL);
233		if (ret)
234			goto done;
235
236		ret = mwifiex_check_network_compatibility(priv, bss_desc);
237		if (ret)
238			goto done;
239
240		dev_dbg(adapter->dev, "info: SSID found in scan list ... "
241				      "associating...\n");
242
243		if (!netif_queue_stopped(priv->netdev))
244			mwifiex_stop_net_dev_queue(priv->netdev, adapter);
245		if (netif_carrier_ok(priv->netdev))
246			netif_carrier_off(priv->netdev);
247
248		/* Clear any past association response stored for
249		 * application retrieval */
250		priv->assoc_rsp_size = 0;
251		ret = mwifiex_associate(priv, bss_desc);
252
253		/* If auth type is auto and association fails using open mode,
254		 * try to connect using shared mode */
255		if (ret == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG &&
256		    priv->sec_info.is_authtype_auto &&
257		    priv->sec_info.wep_enabled) {
258			priv->sec_info.authentication_mode =
259						NL80211_AUTHTYPE_SHARED_KEY;
260			ret = mwifiex_associate(priv, bss_desc);
261		}
262
263		if (bss)
264			cfg80211_put_bss(bss);
265	} else {
266		/* Adhoc mode */
267		/* If the requested SSID matches current SSID, return */
268		if (bss_desc && bss_desc->ssid.ssid_len &&
269		    (!mwifiex_ssid_cmp(&priv->curr_bss_params.bss_descriptor.
270				       ssid, &bss_desc->ssid))) {
271			kfree(bss_desc);
272			kfree(beacon_ie);
273			return 0;
274		}
275
276		/* Exit Adhoc mode first */
277		dev_dbg(adapter->dev, "info: Sending Adhoc Stop\n");
278		ret = mwifiex_deauthenticate(priv, NULL);
279		if (ret)
280			goto done;
281
282		priv->adhoc_is_link_sensed = false;
283
284		ret = mwifiex_check_network_compatibility(priv, bss_desc);
285
286		if (!netif_queue_stopped(priv->netdev))
287			mwifiex_stop_net_dev_queue(priv->netdev, adapter);
288		if (netif_carrier_ok(priv->netdev))
289			netif_carrier_off(priv->netdev);
290
291		if (!ret) {
292			dev_dbg(adapter->dev, "info: network found in scan"
293							" list. Joining...\n");
294			ret = mwifiex_adhoc_join(priv, bss_desc);
295			if (bss)
296				cfg80211_put_bss(bss);
297		} else {
298			dev_dbg(adapter->dev, "info: Network not found in "
299				"the list, creating adhoc with ssid = %s\n",
300				req_ssid->ssid);
301			ret = mwifiex_adhoc_start(priv, req_ssid);
302		}
303	}
304
305done:
306	kfree(bss_desc);
307	kfree(beacon_ie);
308	return ret;
309}
310
311/*
312 * IOCTL request handler to set host sleep configuration.
313 *
314 * This function prepares the correct firmware command and
315 * issues it.
316 */
317static int mwifiex_set_hs_params(struct mwifiex_private *priv, u16 action,
318				 int cmd_type, struct mwifiex_ds_hs_cfg *hs_cfg)
319
320{
321	struct mwifiex_adapter *adapter = priv->adapter;
322	int status = 0;
323	u32 prev_cond = 0;
324
325	if (!hs_cfg)
326		return -ENOMEM;
327
328	switch (action) {
329	case HostCmd_ACT_GEN_SET:
330		if (adapter->pps_uapsd_mode) {
331			dev_dbg(adapter->dev, "info: Host Sleep IOCTL"
332				" is blocked in UAPSD/PPS mode\n");
333			status = -1;
334			break;
335		}
336		if (hs_cfg->is_invoke_hostcmd) {
337			if (hs_cfg->conditions == HOST_SLEEP_CFG_CANCEL) {
338				if (!adapter->is_hs_configured)
339					/* Already cancelled */
340					break;
341				/* Save previous condition */
342				prev_cond = le32_to_cpu(adapter->hs_cfg
343							.conditions);
344				adapter->hs_cfg.conditions =
345						cpu_to_le32(hs_cfg->conditions);
346			} else if (hs_cfg->conditions) {
347				adapter->hs_cfg.conditions =
348						cpu_to_le32(hs_cfg->conditions);
349				adapter->hs_cfg.gpio = (u8)hs_cfg->gpio;
350				if (hs_cfg->gap)
351					adapter->hs_cfg.gap = (u8)hs_cfg->gap;
352			} else if (adapter->hs_cfg.conditions
353				   == cpu_to_le32(HOST_SLEEP_CFG_CANCEL)) {
354				/* Return failure if no parameters for HS
355				   enable */
356				status = -1;
357				break;
358			}
359			if (cmd_type == MWIFIEX_SYNC_CMD)
360				status = mwifiex_send_cmd_sync(priv,
361						HostCmd_CMD_802_11_HS_CFG_ENH,
362						HostCmd_ACT_GEN_SET, 0,
363						&adapter->hs_cfg);
364			else
365				status = mwifiex_send_cmd_async(priv,
366						HostCmd_CMD_802_11_HS_CFG_ENH,
367						HostCmd_ACT_GEN_SET, 0,
368						&adapter->hs_cfg);
369			if (hs_cfg->conditions == HOST_SLEEP_CFG_CANCEL)
370				/* Restore previous condition */
371				adapter->hs_cfg.conditions =
372						cpu_to_le32(prev_cond);
373		} else {
374			adapter->hs_cfg.conditions =
375						cpu_to_le32(hs_cfg->conditions);
376			adapter->hs_cfg.gpio = (u8)hs_cfg->gpio;
377			adapter->hs_cfg.gap = (u8)hs_cfg->gap;
378		}
379		break;
380	case HostCmd_ACT_GEN_GET:
381		hs_cfg->conditions = le32_to_cpu(adapter->hs_cfg.conditions);
382		hs_cfg->gpio = adapter->hs_cfg.gpio;
383		hs_cfg->gap = adapter->hs_cfg.gap;
384		break;
385	default:
386		status = -1;
387		break;
388	}
389
390	return status;
391}
392
393/*
394 * Sends IOCTL request to cancel the existing Host Sleep configuration.
395 *
396 * This function allocates the IOCTL request buffer, fills it
397 * with requisite parameters and calls the IOCTL handler.
398 */
399int mwifiex_cancel_hs(struct mwifiex_private *priv, int cmd_type)
400{
401	struct mwifiex_ds_hs_cfg hscfg;
402
403	hscfg.conditions = HOST_SLEEP_CFG_CANCEL;
404	hscfg.is_invoke_hostcmd = true;
405
406	return mwifiex_set_hs_params(priv, HostCmd_ACT_GEN_SET,
407				    cmd_type, &hscfg);
408}
409EXPORT_SYMBOL_GPL(mwifiex_cancel_hs);
410
411/*
412 * Sends IOCTL request to cancel the existing Host Sleep configuration.
413 *
414 * This function allocates the IOCTL request buffer, fills it
415 * with requisite parameters and calls the IOCTL handler.
416 */
417int mwifiex_enable_hs(struct mwifiex_adapter *adapter)
418{
419	struct mwifiex_ds_hs_cfg hscfg;
420
421	if (adapter->hs_activated) {
422		dev_dbg(adapter->dev, "cmd: HS Already actived\n");
423		return true;
424	}
425
426	adapter->hs_activate_wait_q_woken = false;
427
428	memset(&hscfg, 0, sizeof(struct mwifiex_ds_hs_cfg));
429	hscfg.is_invoke_hostcmd = true;
430
431	if (mwifiex_set_hs_params(mwifiex_get_priv(adapter,
432						   MWIFIEX_BSS_ROLE_STA),
433				  HostCmd_ACT_GEN_SET, MWIFIEX_SYNC_CMD,
434				  &hscfg)) {
435		dev_err(adapter->dev, "IOCTL request HS enable failed\n");
436		return false;
437	}
438
439	wait_event_interruptible(adapter->hs_activate_wait_q,
440				 adapter->hs_activate_wait_q_woken);
441
442	return true;
443}
444EXPORT_SYMBOL_GPL(mwifiex_enable_hs);
445
446/*
447 * IOCTL request handler to get BSS information.
448 *
449 * This function collates the information from different driver structures
450 * to send to the user.
451 */
452int mwifiex_get_bss_info(struct mwifiex_private *priv,
453			 struct mwifiex_bss_info *info)
454{
455	struct mwifiex_adapter *adapter = priv->adapter;
456	struct mwifiex_bssdescriptor *bss_desc;
457
458	if (!info)
459		return -1;
460
461	bss_desc = &priv->curr_bss_params.bss_descriptor;
462
463	info->bss_mode = priv->bss_mode;
464
465	memcpy(&info->ssid, &bss_desc->ssid, sizeof(struct cfg80211_ssid));
466
467	memcpy(&info->bssid, &bss_desc->mac_address, ETH_ALEN);
468
469	info->bss_chan = bss_desc->channel;
470
471	info->region_code = adapter->region_code;
472
473	info->media_connected = priv->media_connected;
474
475	info->max_power_level = priv->max_tx_power_level;
476	info->min_power_level = priv->min_tx_power_level;
477
478	info->adhoc_state = priv->adhoc_state;
479
480	info->bcn_nf_last = priv->bcn_nf_last;
481
482	if (priv->sec_info.wep_enabled)
483		info->wep_status = true;
484	else
485		info->wep_status = false;
486
487	info->is_hs_configured = adapter->is_hs_configured;
488	info->is_deep_sleep = adapter->is_deep_sleep;
489
490	return 0;
491}
492
493/*
494 * The function disables auto deep sleep mode.
495 */
496int mwifiex_disable_auto_ds(struct mwifiex_private *priv)
497{
498	struct mwifiex_ds_auto_ds auto_ds;
499
500	auto_ds.auto_ds = DEEP_SLEEP_OFF;
501
502	return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
503				     DIS_AUTO_PS, BITMAP_AUTO_DS, &auto_ds);
504}
505EXPORT_SYMBOL_GPL(mwifiex_disable_auto_ds);
506
507/*
508 * IOCTL request handler to set/get active channel.
509 *
510 * This function performs validity checking on channel/frequency
511 * compatibility and returns failure if not valid.
512 */
513int mwifiex_bss_set_channel(struct mwifiex_private *priv,
514			    struct mwifiex_chan_freq_power *chan)
515{
516	struct mwifiex_adapter *adapter = priv->adapter;
517	struct mwifiex_chan_freq_power *cfp = NULL;
518
519	if (!chan)
520		return -1;
521
522	if (!chan->channel && !chan->freq)
523		return -1;
524	if (adapter->adhoc_start_band & BAND_AN)
525		adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
526	else if (adapter->adhoc_start_band & BAND_A)
527		adapter->adhoc_start_band = BAND_G | BAND_B;
528	if (chan->channel) {
529		if (chan->channel <= MAX_CHANNEL_BAND_BG)
530			cfp = mwifiex_get_cfp(priv, 0, (u16) chan->channel, 0);
531		if (!cfp) {
532			cfp = mwifiex_get_cfp(priv, BAND_A,
533					      (u16) chan->channel, 0);
534			if (cfp) {
535				if (adapter->adhoc_11n_enabled)
536					adapter->adhoc_start_band = BAND_A
537								    | BAND_AN;
538				else
539					adapter->adhoc_start_band = BAND_A;
540			}
541		}
542	} else {
543		if (chan->freq <= MAX_FREQUENCY_BAND_BG)
544			cfp = mwifiex_get_cfp(priv, 0, 0, chan->freq);
545		if (!cfp) {
546			cfp = mwifiex_get_cfp(priv, BAND_A, 0, chan->freq);
547			if (cfp) {
548				if (adapter->adhoc_11n_enabled)
549					adapter->adhoc_start_band = BAND_A
550								    | BAND_AN;
551				else
552					adapter->adhoc_start_band = BAND_A;
553			}
554		}
555	}
556	if (!cfp || !cfp->channel) {
557		dev_err(adapter->dev, "invalid channel/freq\n");
558		return -1;
559	}
560	priv->adhoc_channel = (u8) cfp->channel;
561	chan->channel = cfp->channel;
562	chan->freq = cfp->freq;
563
564	return 0;
565}
566
567/*
568 * IOCTL request handler to set/get Ad-Hoc channel.
569 *
570 * This function prepares the correct firmware command and
571 * issues it to set or get the ad-hoc channel.
572 */
573static int mwifiex_bss_ioctl_ibss_channel(struct mwifiex_private *priv,
574					  u16 action, u16 *channel)
575{
576	if (action == HostCmd_ACT_GEN_GET) {
577		if (!priv->media_connected) {
578			*channel = priv->adhoc_channel;
579			return 0;
580		}
581	} else {
582		priv->adhoc_channel = (u8) *channel;
583	}
584
585	return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_RF_CHANNEL,
586				     action, 0, channel);
587}
588
589/*
590 * IOCTL request handler to change Ad-Hoc channel.
591 *
592 * This function allocates the IOCTL request buffer, fills it
593 * with requisite parameters and calls the IOCTL handler.
594 *
595 * The function follows the following steps to perform the change -
596 *      - Get current IBSS information
597 *      - Get current channel
598 *      - If no change is required, return
599 *      - If not connected, change channel and return
600 *      - If connected,
601 *          - Disconnect
602 *          - Change channel
603 *          - Perform specific SSID scan with same SSID
604 *          - Start/Join the IBSS
605 */
606int
607mwifiex_drv_change_adhoc_chan(struct mwifiex_private *priv, u16 channel)
608{
609	int ret;
610	struct mwifiex_bss_info bss_info;
611	struct mwifiex_ssid_bssid ssid_bssid;
612	u16 curr_chan = 0;
613	struct cfg80211_bss *bss = NULL;
614	struct ieee80211_channel *chan;
615	enum ieee80211_band band;
616
617	memset(&bss_info, 0, sizeof(bss_info));
618
619	/* Get BSS information */
620	if (mwifiex_get_bss_info(priv, &bss_info))
621		return -1;
622
623	/* Get current channel */
624	ret = mwifiex_bss_ioctl_ibss_channel(priv, HostCmd_ACT_GEN_GET,
625					     &curr_chan);
626
627	if (curr_chan == channel) {
628		ret = 0;
629		goto done;
630	}
631	dev_dbg(priv->adapter->dev, "cmd: updating channel from %d to %d\n",
632		curr_chan, channel);
633
634	if (!bss_info.media_connected) {
635		ret = 0;
636		goto done;
637	}
638
639	/* Do disonnect */
640	memset(&ssid_bssid, 0, ETH_ALEN);
641	ret = mwifiex_deauthenticate(priv, ssid_bssid.bssid);
642
643	ret = mwifiex_bss_ioctl_ibss_channel(priv, HostCmd_ACT_GEN_SET,
644					     &channel);
645
646	/* Do specific SSID scanning */
647	if (mwifiex_request_scan(priv, &bss_info.ssid)) {
648		ret = -1;
649		goto done;
650	}
651
652	band = mwifiex_band_to_radio_type(priv->curr_bss_params.band);
653	chan = __ieee80211_get_channel(priv->wdev->wiphy,
654				       ieee80211_channel_to_frequency(channel,
655								      band));
656
657	/* Find the BSS we want using available scan results */
658	bss = cfg80211_get_bss(priv->wdev->wiphy, chan, bss_info.bssid,
659			       bss_info.ssid.ssid, bss_info.ssid.ssid_len,
660			       WLAN_CAPABILITY_ESS, WLAN_CAPABILITY_ESS);
661	if (!bss)
662		wiphy_warn(priv->wdev->wiphy, "assoc: bss %pM not in scan results\n",
663			   bss_info.bssid);
664
665	ret = mwifiex_bss_start(priv, bss, &bss_info.ssid);
666done:
667	return ret;
668}
669
670/*
671 * IOCTL request handler to get rate.
672 *
673 * This function prepares the correct firmware command and
674 * issues it to get the current rate if it is connected,
675 * otherwise, the function returns the lowest supported rate
676 * for the band.
677 */
678static int mwifiex_rate_ioctl_get_rate_value(struct mwifiex_private *priv,
679					     struct mwifiex_rate_cfg *rate_cfg)
680{
681	rate_cfg->is_rate_auto = priv->is_data_rate_auto;
682	return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_TX_RATE_QUERY,
683				     HostCmd_ACT_GEN_GET, 0, NULL);
684}
685
686/*
687 * IOCTL request handler to set rate.
688 *
689 * This function prepares the correct firmware command and
690 * issues it to set the current rate.
691 *
692 * The function also performs validation checking on the supplied value.
693 */
694static int mwifiex_rate_ioctl_set_rate_value(struct mwifiex_private *priv,
695					     struct mwifiex_rate_cfg *rate_cfg)
696{
697	u8 rates[MWIFIEX_SUPPORTED_RATES];
698	u8 *rate;
699	int rate_index, ret;
700	u16 bitmap_rates[MAX_BITMAP_RATES_SIZE];
701	u32 i;
702	struct mwifiex_adapter *adapter = priv->adapter;
703
704	if (rate_cfg->is_rate_auto) {
705		memset(bitmap_rates, 0, sizeof(bitmap_rates));
706		/* Support all HR/DSSS rates */
707		bitmap_rates[0] = 0x000F;
708		/* Support all OFDM rates */
709		bitmap_rates[1] = 0x00FF;
710		/* Support all HT-MCSs rate */
711		for (i = 0; i < ARRAY_SIZE(priv->bitmap_rates) - 3; i++)
712			bitmap_rates[i + 2] = 0xFFFF;
713		bitmap_rates[9] = 0x3FFF;
714	} else {
715		memset(rates, 0, sizeof(rates));
716		mwifiex_get_active_data_rates(priv, rates);
717		rate = rates;
718		for (i = 0; (rate[i] && i < MWIFIEX_SUPPORTED_RATES); i++) {
719			dev_dbg(adapter->dev, "info: rate=%#x wanted=%#x\n",
720				rate[i], rate_cfg->rate);
721			if ((rate[i] & 0x7f) == (rate_cfg->rate & 0x7f))
722				break;
723		}
724		if ((i == MWIFIEX_SUPPORTED_RATES) || !rate[i]) {
725			dev_err(adapter->dev, "fixed data rate %#x is out "
726			       "of range\n", rate_cfg->rate);
727			return -1;
728		}
729		memset(bitmap_rates, 0, sizeof(bitmap_rates));
730
731		rate_index = mwifiex_data_rate_to_index(rate_cfg->rate);
732
733		/* Only allow b/g rates to be set */
734		if (rate_index >= MWIFIEX_RATE_INDEX_HRDSSS0 &&
735		    rate_index <= MWIFIEX_RATE_INDEX_HRDSSS3) {
736			bitmap_rates[0] = 1 << rate_index;
737		} else {
738			rate_index -= 1; /* There is a 0x00 in the table */
739			if (rate_index >= MWIFIEX_RATE_INDEX_OFDM0 &&
740			    rate_index <= MWIFIEX_RATE_INDEX_OFDM7)
741				bitmap_rates[1] = 1 << (rate_index -
742						   MWIFIEX_RATE_INDEX_OFDM0);
743		}
744	}
745
746	ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_TX_RATE_CFG,
747				    HostCmd_ACT_GEN_SET, 0, bitmap_rates);
748
749	return ret;
750}
751
752/*
753 * IOCTL request handler to set/get rate.
754 *
755 * This function can be used to set/get either the rate value or the
756 * rate index.
757 */
758static int mwifiex_rate_ioctl_cfg(struct mwifiex_private *priv,
759				  struct mwifiex_rate_cfg *rate_cfg)
760{
761	int status;
762
763	if (!rate_cfg)
764		return -1;
765
766	if (rate_cfg->action == HostCmd_ACT_GEN_GET)
767		status = mwifiex_rate_ioctl_get_rate_value(priv, rate_cfg);
768	else
769		status = mwifiex_rate_ioctl_set_rate_value(priv, rate_cfg);
770
771	return status;
772}
773
774/*
775 * Sends IOCTL request to get the data rate.
776 *
777 * This function allocates the IOCTL request buffer, fills it
778 * with requisite parameters and calls the IOCTL handler.
779 */
780int mwifiex_drv_get_data_rate(struct mwifiex_private *priv,
781			      struct mwifiex_rate_cfg *rate)
782{
783	int ret;
784
785	memset(rate, 0, sizeof(struct mwifiex_rate_cfg));
786	rate->action = HostCmd_ACT_GEN_GET;
787	ret = mwifiex_rate_ioctl_cfg(priv, rate);
788
789	if (!ret) {
790		if (rate->is_rate_auto)
791			rate->rate = mwifiex_index_to_data_rate(priv,
792								priv->tx_rate,
793								priv->tx_htinfo
794								);
795		else
796			rate->rate = priv->data_rate;
797	} else {
798		ret = -1;
799	}
800
801	return ret;
802}
803
804/*
805 * IOCTL request handler to set tx power configuration.
806 *
807 * This function prepares the correct firmware command and
808 * issues it.
809 *
810 * For non-auto power mode, all the following power groups are set -
811 *      - Modulation class HR/DSSS
812 *      - Modulation class OFDM
813 *      - Modulation class HTBW20
814 *      - Modulation class HTBW40
815 */
816int mwifiex_set_tx_power(struct mwifiex_private *priv,
817			 struct mwifiex_power_cfg *power_cfg)
818{
819	int ret;
820	struct host_cmd_ds_txpwr_cfg *txp_cfg;
821	struct mwifiex_types_power_group *pg_tlv;
822	struct mwifiex_power_group *pg;
823	u8 *buf;
824	u16 dbm = 0;
825
826	if (!power_cfg->is_power_auto) {
827		dbm = (u16) power_cfg->power_level;
828		if ((dbm < priv->min_tx_power_level) ||
829		    (dbm > priv->max_tx_power_level)) {
830			dev_err(priv->adapter->dev, "txpower value %d dBm"
831				" is out of range (%d dBm-%d dBm)\n",
832				dbm, priv->min_tx_power_level,
833				priv->max_tx_power_level);
834			return -1;
835		}
836	}
837	buf = kzalloc(MWIFIEX_SIZE_OF_CMD_BUFFER, GFP_KERNEL);
838	if (!buf) {
839		dev_err(priv->adapter->dev, "%s: failed to alloc cmd buffer\n",
840			__func__);
841		return -ENOMEM;
842	}
843
844	txp_cfg = (struct host_cmd_ds_txpwr_cfg *) buf;
845	txp_cfg->action = cpu_to_le16(HostCmd_ACT_GEN_SET);
846	if (!power_cfg->is_power_auto) {
847		txp_cfg->mode = cpu_to_le32(1);
848		pg_tlv = (struct mwifiex_types_power_group *)
849			 (buf + sizeof(struct host_cmd_ds_txpwr_cfg));
850		pg_tlv->type = TLV_TYPE_POWER_GROUP;
851		pg_tlv->length = 4 * sizeof(struct mwifiex_power_group);
852		pg = (struct mwifiex_power_group *)
853		     (buf + sizeof(struct host_cmd_ds_txpwr_cfg)
854		      + sizeof(struct mwifiex_types_power_group));
855		/* Power group for modulation class HR/DSSS */
856		pg->first_rate_code = 0x00;
857		pg->last_rate_code = 0x03;
858		pg->modulation_class = MOD_CLASS_HR_DSSS;
859		pg->power_step = 0;
860		pg->power_min = (s8) dbm;
861		pg->power_max = (s8) dbm;
862		pg++;
863		/* Power group for modulation class OFDM */
864		pg->first_rate_code = 0x00;
865		pg->last_rate_code = 0x07;
866		pg->modulation_class = MOD_CLASS_OFDM;
867		pg->power_step = 0;
868		pg->power_min = (s8) dbm;
869		pg->power_max = (s8) dbm;
870		pg++;
871		/* Power group for modulation class HTBW20 */
872		pg->first_rate_code = 0x00;
873		pg->last_rate_code = 0x20;
874		pg->modulation_class = MOD_CLASS_HT;
875		pg->power_step = 0;
876		pg->power_min = (s8) dbm;
877		pg->power_max = (s8) dbm;
878		pg->ht_bandwidth = HT_BW_20;
879		pg++;
880		/* Power group for modulation class HTBW40 */
881		pg->first_rate_code = 0x00;
882		pg->last_rate_code = 0x20;
883		pg->modulation_class = MOD_CLASS_HT;
884		pg->power_step = 0;
885		pg->power_min = (s8) dbm;
886		pg->power_max = (s8) dbm;
887		pg->ht_bandwidth = HT_BW_40;
888	}
889	ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_TXPWR_CFG,
890				    HostCmd_ACT_GEN_SET, 0, buf);
891
892	kfree(buf);
893	return ret;
894}
895
896/*
897 * IOCTL request handler to get power save mode.
898 *
899 * This function prepares the correct firmware command and
900 * issues it.
901 */
902int mwifiex_drv_set_power(struct mwifiex_private *priv, u32 *ps_mode)
903{
904	int ret;
905	struct mwifiex_adapter *adapter = priv->adapter;
906	u16 sub_cmd;
907
908	if (*ps_mode)
909		adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
910	else
911		adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
912	sub_cmd = (*ps_mode) ? EN_AUTO_PS : DIS_AUTO_PS;
913	ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
914				    sub_cmd, BITMAP_STA_PS, NULL);
915	if ((!ret) && (sub_cmd == DIS_AUTO_PS))
916		ret = mwifiex_send_cmd_async(priv,
917					     HostCmd_CMD_802_11_PS_MODE_ENH,
918					     GET_PS, 0, NULL);
919
920	return ret;
921}
922
923/*
924 * IOCTL request handler to set/reset WPA IE.
925 *
926 * The supplied WPA IE is treated as a opaque buffer. Only the first field
927 * is checked to determine WPA version. If buffer length is zero, the existing
928 * WPA IE is reset.
929 */
930static int mwifiex_set_wpa_ie_helper(struct mwifiex_private *priv,
931				     u8 *ie_data_ptr, u16 ie_len)
932{
933	if (ie_len) {
934		if (ie_len > sizeof(priv->wpa_ie)) {
935			dev_err(priv->adapter->dev,
936				"failed to copy WPA IE, too big\n");
937			return -1;
938		}
939		memcpy(priv->wpa_ie, ie_data_ptr, ie_len);
940		priv->wpa_ie_len = (u8) ie_len;
941		dev_dbg(priv->adapter->dev, "cmd: Set Wpa_ie_len=%d IE=%#x\n",
942			priv->wpa_ie_len, priv->wpa_ie[0]);
943
944		if (priv->wpa_ie[0] == WLAN_EID_WPA) {
945			priv->sec_info.wpa_enabled = true;
946		} else if (priv->wpa_ie[0] == WLAN_EID_RSN) {
947			priv->sec_info.wpa2_enabled = true;
948		} else {
949			priv->sec_info.wpa_enabled = false;
950			priv->sec_info.wpa2_enabled = false;
951		}
952	} else {
953		memset(priv->wpa_ie, 0, sizeof(priv->wpa_ie));
954		priv->wpa_ie_len = 0;
955		dev_dbg(priv->adapter->dev, "info: reset wpa_ie_len=%d IE=%#x\n",
956			priv->wpa_ie_len, priv->wpa_ie[0]);
957		priv->sec_info.wpa_enabled = false;
958		priv->sec_info.wpa2_enabled = false;
959	}
960
961	return 0;
962}
963
964/*
965 * IOCTL request handler to set/reset WAPI IE.
966 *
967 * The supplied WAPI IE is treated as a opaque buffer. Only the first field
968 * is checked to internally enable WAPI. If buffer length is zero, the existing
969 * WAPI IE is reset.
970 */
971static int mwifiex_set_wapi_ie(struct mwifiex_private *priv,
972			       u8 *ie_data_ptr, u16 ie_len)
973{
974	if (ie_len) {
975		if (ie_len > sizeof(priv->wapi_ie)) {
976			dev_dbg(priv->adapter->dev,
977				"info: failed to copy WAPI IE, too big\n");
978			return -1;
979		}
980		memcpy(priv->wapi_ie, ie_data_ptr, ie_len);
981		priv->wapi_ie_len = ie_len;
982		dev_dbg(priv->adapter->dev, "cmd: Set wapi_ie_len=%d IE=%#x\n",
983			priv->wapi_ie_len, priv->wapi_ie[0]);
984
985		if (priv->wapi_ie[0] == WLAN_EID_BSS_AC_ACCESS_DELAY)
986			priv->sec_info.wapi_enabled = true;
987	} else {
988		memset(priv->wapi_ie, 0, sizeof(priv->wapi_ie));
989		priv->wapi_ie_len = ie_len;
990		dev_dbg(priv->adapter->dev,
991			"info: Reset wapi_ie_len=%d IE=%#x\n",
992		       priv->wapi_ie_len, priv->wapi_ie[0]);
993		priv->sec_info.wapi_enabled = false;
994	}
995	return 0;
996}
997
998/*
999 * IOCTL request handler to set WAPI key.
1000 *
1001 * This function prepares the correct firmware command and
1002 * issues it.
1003 */
1004static int mwifiex_sec_ioctl_set_wapi_key(struct mwifiex_private *priv,
1005			       struct mwifiex_ds_encrypt_key *encrypt_key)
1006{
1007
1008	return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_KEY_MATERIAL,
1009				     HostCmd_ACT_GEN_SET, KEY_INFO_ENABLED,
1010				     encrypt_key);
1011}
1012
1013/*
1014 * IOCTL request handler to set WEP network key.
1015 *
1016 * This function prepares the correct firmware command and
1017 * issues it, after validation checks.
1018 */
1019static int mwifiex_sec_ioctl_set_wep_key(struct mwifiex_private *priv,
1020			      struct mwifiex_ds_encrypt_key *encrypt_key)
1021{
1022	int ret;
1023	struct mwifiex_wep_key *wep_key;
1024	int index;
1025
1026	if (priv->wep_key_curr_index >= NUM_WEP_KEYS)
1027		priv->wep_key_curr_index = 0;
1028	wep_key = &priv->wep_key[priv->wep_key_curr_index];
1029	index = encrypt_key->key_index;
1030	if (encrypt_key->key_disable) {
1031		priv->sec_info.wep_enabled = 0;
1032	} else if (!encrypt_key->key_len) {
1033		/* Copy the required key as the current key */
1034		wep_key = &priv->wep_key[index];
1035		if (!wep_key->key_length) {
1036			dev_err(priv->adapter->dev,
1037				"key not set, so cannot enable it\n");
1038			return -1;
1039		}
1040		priv->wep_key_curr_index = (u16) index;
1041		priv->sec_info.wep_enabled = 1;
1042	} else {
1043		wep_key = &priv->wep_key[index];
1044		memset(wep_key, 0, sizeof(struct mwifiex_wep_key));
1045		/* Copy the key in the driver */
1046		memcpy(wep_key->key_material,
1047		       encrypt_key->key_material,
1048		       encrypt_key->key_len);
1049		wep_key->key_index = index;
1050		wep_key->key_length = encrypt_key->key_len;
1051		priv->sec_info.wep_enabled = 1;
1052	}
1053	if (wep_key->key_length) {
1054		/* Send request to firmware */
1055		ret = mwifiex_send_cmd_async(priv,
1056					     HostCmd_CMD_802_11_KEY_MATERIAL,
1057					     HostCmd_ACT_GEN_SET, 0, NULL);
1058		if (ret)
1059			return ret;
1060	}
1061	if (priv->sec_info.wep_enabled)
1062		priv->curr_pkt_filter |= HostCmd_ACT_MAC_WEP_ENABLE;
1063	else
1064		priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_WEP_ENABLE;
1065
1066	ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_MAC_CONTROL,
1067				    HostCmd_ACT_GEN_SET, 0,
1068				    &priv->curr_pkt_filter);
1069
1070	return ret;
1071}
1072
1073/*
1074 * IOCTL request handler to set WPA key.
1075 *
1076 * This function prepares the correct firmware command and
1077 * issues it, after validation checks.
1078 *
1079 * Current driver only supports key length of up to 32 bytes.
1080 *
1081 * This function can also be used to disable a currently set key.
1082 */
1083static int mwifiex_sec_ioctl_set_wpa_key(struct mwifiex_private *priv,
1084			      struct mwifiex_ds_encrypt_key *encrypt_key)
1085{
1086	int ret;
1087	u8 remove_key = false;
1088	struct host_cmd_ds_802_11_key_material *ibss_key;
1089
1090	/* Current driver only supports key length of up to 32 bytes */
1091	if (encrypt_key->key_len > WLAN_MAX_KEY_LEN) {
1092		dev_err(priv->adapter->dev, "key length too long\n");
1093		return -1;
1094	}
1095
1096	if (priv->bss_mode == NL80211_IFTYPE_ADHOC) {
1097		/*
1098		 * IBSS/WPA-None uses only one key (Group) for both receiving
1099		 * and sending unicast and multicast packets.
1100		 */
1101		/* Send the key as PTK to firmware */
1102		encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST;
1103		ret = mwifiex_send_cmd_async(priv,
1104					     HostCmd_CMD_802_11_KEY_MATERIAL,
1105					     HostCmd_ACT_GEN_SET,
1106					     KEY_INFO_ENABLED, encrypt_key);
1107		if (ret)
1108			return ret;
1109
1110		ibss_key = &priv->aes_key;
1111		memset(ibss_key, 0,
1112		       sizeof(struct host_cmd_ds_802_11_key_material));
1113		/* Copy the key in the driver */
1114		memcpy(ibss_key->key_param_set.key, encrypt_key->key_material,
1115		       encrypt_key->key_len);
1116		memcpy(&ibss_key->key_param_set.key_len, &encrypt_key->key_len,
1117		       sizeof(ibss_key->key_param_set.key_len));
1118		ibss_key->key_param_set.key_type_id
1119			= cpu_to_le16(KEY_TYPE_ID_TKIP);
1120		ibss_key->key_param_set.key_info = cpu_to_le16(KEY_ENABLED);
1121
1122		/* Send the key as GTK to firmware */
1123		encrypt_key->key_index = ~MWIFIEX_KEY_INDEX_UNICAST;
1124	}
1125
1126	if (!encrypt_key->key_index)
1127		encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST;
1128
1129	if (remove_key)
1130		ret = mwifiex_send_cmd_sync(priv,
1131					    HostCmd_CMD_802_11_KEY_MATERIAL,
1132					    HostCmd_ACT_GEN_SET,
1133					    !KEY_INFO_ENABLED, encrypt_key);
1134	else
1135		ret = mwifiex_send_cmd_sync(priv,
1136					    HostCmd_CMD_802_11_KEY_MATERIAL,
1137					    HostCmd_ACT_GEN_SET,
1138					    KEY_INFO_ENABLED, encrypt_key);
1139
1140	return ret;
1141}
1142
1143/*
1144 * IOCTL request handler to set/get network keys.
1145 *
1146 * This is a generic key handling function which supports WEP, WPA
1147 * and WAPI.
1148 */
1149static int
1150mwifiex_sec_ioctl_encrypt_key(struct mwifiex_private *priv,
1151			      struct mwifiex_ds_encrypt_key *encrypt_key)
1152{
1153	int status;
1154
1155	if (encrypt_key->is_wapi_key)
1156		status = mwifiex_sec_ioctl_set_wapi_key(priv, encrypt_key);
1157	else if (encrypt_key->key_len > WLAN_KEY_LEN_WEP104)
1158		status = mwifiex_sec_ioctl_set_wpa_key(priv, encrypt_key);
1159	else
1160		status = mwifiex_sec_ioctl_set_wep_key(priv, encrypt_key);
1161	return status;
1162}
1163
1164/*
1165 * This function returns the driver version.
1166 */
1167int
1168mwifiex_drv_get_driver_version(struct mwifiex_adapter *adapter, char *version,
1169			       int max_len)
1170{
1171	union {
1172		u32 l;
1173		u8 c[4];
1174	} ver;
1175	char fw_ver[32];
1176
1177	ver.l = adapter->fw_release_number;
1178	sprintf(fw_ver, "%u.%u.%u.p%u", ver.c[2], ver.c[1], ver.c[0], ver.c[3]);
1179
1180	snprintf(version, max_len, driver_version, fw_ver);
1181
1182	dev_dbg(adapter->dev, "info: MWIFIEX VERSION: %s\n", version);
1183
1184	return 0;
1185}
1186
1187/*
1188 * Sends IOCTL request to get signal information.
1189 *
1190 * This function allocates the IOCTL request buffer, fills it
1191 * with requisite parameters and calls the IOCTL handler.
1192 */
1193int mwifiex_get_signal_info(struct mwifiex_private *priv,
1194			    struct mwifiex_ds_get_signal *signal)
1195{
1196	int status;
1197
1198	signal->selector = ALL_RSSI_INFO_MASK;
1199
1200	/* Signal info can be obtained only if connected */
1201	if (!priv->media_connected) {
1202		dev_dbg(priv->adapter->dev,
1203			"info: Can not get signal in disconnected state\n");
1204		return -1;
1205	}
1206
1207	status = mwifiex_send_cmd_sync(priv, HostCmd_CMD_RSSI_INFO,
1208				       HostCmd_ACT_GEN_GET, 0, signal);
1209
1210	if (!status) {
1211		if (signal->selector & BCN_RSSI_AVG_MASK)
1212			priv->qual_level = signal->bcn_rssi_avg;
1213		if (signal->selector & BCN_NF_AVG_MASK)
1214			priv->qual_noise = signal->bcn_nf_avg;
1215	}
1216
1217	return status;
1218}
1219
1220/*
1221 * Sends IOCTL request to set encoding parameters.
1222 *
1223 * This function allocates the IOCTL request buffer, fills it
1224 * with requisite parameters and calls the IOCTL handler.
1225 */
1226int mwifiex_set_encode(struct mwifiex_private *priv, const u8 *key,
1227			int key_len, u8 key_index, int disable)
1228{
1229	struct mwifiex_ds_encrypt_key encrypt_key;
1230
1231	memset(&encrypt_key, 0, sizeof(struct mwifiex_ds_encrypt_key));
1232	encrypt_key.key_len = key_len;
1233	if (!disable) {
1234		encrypt_key.key_index = key_index;
1235		if (key_len)
1236			memcpy(encrypt_key.key_material, key, key_len);
1237	} else {
1238		encrypt_key.key_disable = true;
1239	}
1240
1241	return mwifiex_sec_ioctl_encrypt_key(priv, &encrypt_key);
1242}
1243
1244/*
1245 * Sends IOCTL request to get extended version.
1246 *
1247 * This function allocates the IOCTL request buffer, fills it
1248 * with requisite parameters and calls the IOCTL handler.
1249 */
1250int
1251mwifiex_get_ver_ext(struct mwifiex_private *priv)
1252{
1253	struct mwifiex_ver_ext ver_ext;
1254
1255	memset(&ver_ext, 0, sizeof(struct host_cmd_ds_version_ext));
1256	if (mwifiex_send_cmd_sync(priv, HostCmd_CMD_VERSION_EXT,
1257				  HostCmd_ACT_GEN_GET, 0, &ver_ext))
1258		return -1;
1259
1260	return 0;
1261}
1262
1263/*
1264 * Sends IOCTL request to get statistics information.
1265 *
1266 * This function allocates the IOCTL request buffer, fills it
1267 * with requisite parameters and calls the IOCTL handler.
1268 */
1269int
1270mwifiex_get_stats_info(struct mwifiex_private *priv,
1271		       struct mwifiex_ds_get_stats *log)
1272{
1273	return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_GET_LOG,
1274				     HostCmd_ACT_GEN_GET, 0, log);
1275}
1276
1277/*
1278 * IOCTL request handler to read/write register.
1279 *
1280 * This function prepares the correct firmware command and
1281 * issues it.
1282 *
1283 * Access to the following registers are supported -
1284 *      - MAC
1285 *      - BBP
1286 *      - RF
1287 *      - PMIC
1288 *      - CAU
1289 */
1290static int mwifiex_reg_mem_ioctl_reg_rw(struct mwifiex_private *priv,
1291					struct mwifiex_ds_reg_rw *reg_rw,
1292					u16 action)
1293{
1294	u16 cmd_no;
1295
1296	switch (le32_to_cpu(reg_rw->type)) {
1297	case MWIFIEX_REG_MAC:
1298		cmd_no = HostCmd_CMD_MAC_REG_ACCESS;
1299		break;
1300	case MWIFIEX_REG_BBP:
1301		cmd_no = HostCmd_CMD_BBP_REG_ACCESS;
1302		break;
1303	case MWIFIEX_REG_RF:
1304		cmd_no = HostCmd_CMD_RF_REG_ACCESS;
1305		break;
1306	case MWIFIEX_REG_PMIC:
1307		cmd_no = HostCmd_CMD_PMIC_REG_ACCESS;
1308		break;
1309	case MWIFIEX_REG_CAU:
1310		cmd_no = HostCmd_CMD_CAU_REG_ACCESS;
1311		break;
1312	default:
1313		return -1;
1314	}
1315
1316	return mwifiex_send_cmd_sync(priv, cmd_no, action, 0, reg_rw);
1317
1318}
1319
1320/*
1321 * Sends IOCTL request to write to a register.
1322 *
1323 * This function allocates the IOCTL request buffer, fills it
1324 * with requisite parameters and calls the IOCTL handler.
1325 */
1326int
1327mwifiex_reg_write(struct mwifiex_private *priv, u32 reg_type,
1328		  u32 reg_offset, u32 reg_value)
1329{
1330	struct mwifiex_ds_reg_rw reg_rw;
1331
1332	reg_rw.type = cpu_to_le32(reg_type);
1333	reg_rw.offset = cpu_to_le32(reg_offset);
1334	reg_rw.value = cpu_to_le32(reg_value);
1335
1336	return mwifiex_reg_mem_ioctl_reg_rw(priv, &reg_rw, HostCmd_ACT_GEN_SET);
1337}
1338
1339/*
1340 * Sends IOCTL request to read from a register.
1341 *
1342 * This function allocates the IOCTL request buffer, fills it
1343 * with requisite parameters and calls the IOCTL handler.
1344 */
1345int
1346mwifiex_reg_read(struct mwifiex_private *priv, u32 reg_type,
1347		 u32 reg_offset, u32 *value)
1348{
1349	int ret;
1350	struct mwifiex_ds_reg_rw reg_rw;
1351
1352	reg_rw.type = cpu_to_le32(reg_type);
1353	reg_rw.offset = cpu_to_le32(reg_offset);
1354	ret = mwifiex_reg_mem_ioctl_reg_rw(priv, &reg_rw, HostCmd_ACT_GEN_GET);
1355
1356	if (ret)
1357		goto done;
1358
1359	*value = le32_to_cpu(reg_rw.value);
1360
1361done:
1362	return ret;
1363}
1364
1365/*
1366 * Sends IOCTL request to read from EEPROM.
1367 *
1368 * This function allocates the IOCTL request buffer, fills it
1369 * with requisite parameters and calls the IOCTL handler.
1370 */
1371int
1372mwifiex_eeprom_read(struct mwifiex_private *priv, u16 offset, u16 bytes,
1373		    u8 *value)
1374{
1375	int ret;
1376	struct mwifiex_ds_read_eeprom rd_eeprom;
1377
1378	rd_eeprom.offset = cpu_to_le16((u16) offset);
1379	rd_eeprom.byte_count = cpu_to_le16((u16) bytes);
1380
1381	/* Send request to firmware */
1382	ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_EEPROM_ACCESS,
1383				    HostCmd_ACT_GEN_GET, 0, &rd_eeprom);
1384
1385	if (!ret)
1386		memcpy(value, rd_eeprom.value, MAX_EEPROM_DATA);
1387	return ret;
1388}
1389
1390/*
1391 * This function sets a generic IE. In addition to generic IE, it can
1392 * also handle WPA, WPA2 and WAPI IEs.
1393 */
1394static int
1395mwifiex_set_gen_ie_helper(struct mwifiex_private *priv, u8 *ie_data_ptr,
1396			  u16 ie_len)
1397{
1398	int ret = 0;
1399	struct ieee_types_vendor_header *pvendor_ie;
1400	const u8 wpa_oui[] = { 0x00, 0x50, 0xf2, 0x01 };
1401	const u8 wps_oui[] = { 0x00, 0x50, 0xf2, 0x04 };
1402
1403	/* If the passed length is zero, reset the buffer */
1404	if (!ie_len) {
1405		priv->gen_ie_buf_len = 0;
1406		priv->wps.session_enable = false;
1407
1408		return 0;
1409	} else if (!ie_data_ptr) {
1410		return -1;
1411	}
1412	pvendor_ie = (struct ieee_types_vendor_header *) ie_data_ptr;
1413	/* Test to see if it is a WPA IE, if not, then it is a gen IE */
1414	if (((pvendor_ie->element_id == WLAN_EID_WPA) &&
1415	     (!memcmp(pvendor_ie->oui, wpa_oui, sizeof(wpa_oui)))) ||
1416	    (pvendor_ie->element_id == WLAN_EID_RSN)) {
1417
1418		/* IE is a WPA/WPA2 IE so call set_wpa function */
1419		ret = mwifiex_set_wpa_ie_helper(priv, ie_data_ptr, ie_len);
1420		priv->wps.session_enable = false;
1421
1422		return ret;
1423	} else if (pvendor_ie->element_id == WLAN_EID_BSS_AC_ACCESS_DELAY) {
1424		/* IE is a WAPI IE so call set_wapi function */
1425		ret = mwifiex_set_wapi_ie(priv, ie_data_ptr, ie_len);
1426
1427		return ret;
1428	}
1429	/*
1430	 * Verify that the passed length is not larger than the
1431	 * available space remaining in the buffer
1432	 */
1433	if (ie_len < (sizeof(priv->gen_ie_buf) - priv->gen_ie_buf_len)) {
1434
1435		/* Test to see if it is a WPS IE, if so, enable
1436		 * wps session flag
1437		 */
1438		pvendor_ie = (struct ieee_types_vendor_header *) ie_data_ptr;
1439		if ((pvendor_ie->element_id == WLAN_EID_VENDOR_SPECIFIC) &&
1440		    (!memcmp(pvendor_ie->oui, wps_oui, sizeof(wps_oui)))) {
1441			priv->wps.session_enable = true;
1442			dev_dbg(priv->adapter->dev,
1443				"info: WPS Session Enabled.\n");
1444		}
1445
1446		/* Append the passed data to the end of the
1447		   genIeBuffer */
1448		memcpy(priv->gen_ie_buf + priv->gen_ie_buf_len, ie_data_ptr,
1449		       ie_len);
1450		/* Increment the stored buffer length by the
1451		   size passed */
1452		priv->gen_ie_buf_len += ie_len;
1453	} else {
1454		/* Passed data does not fit in the remaining
1455		   buffer space */
1456		ret = -1;
1457	}
1458
1459	/* Return 0, or -1 for error case */
1460	return ret;
1461}
1462
1463/*
1464 * IOCTL request handler to set/get generic IE.
1465 *
1466 * In addition to various generic IEs, this function can also be
1467 * used to set the ARP filter.
1468 */
1469static int mwifiex_misc_ioctl_gen_ie(struct mwifiex_private *priv,
1470				     struct mwifiex_ds_misc_gen_ie *gen_ie,
1471				     u16 action)
1472{
1473	struct mwifiex_adapter *adapter = priv->adapter;
1474
1475	switch (gen_ie->type) {
1476	case MWIFIEX_IE_TYPE_GEN_IE:
1477		if (action == HostCmd_ACT_GEN_GET) {
1478			gen_ie->len = priv->wpa_ie_len;
1479			memcpy(gen_ie->ie_data, priv->wpa_ie, gen_ie->len);
1480		} else {
1481			mwifiex_set_gen_ie_helper(priv, gen_ie->ie_data,
1482						  (u16) gen_ie->len);
1483		}
1484		break;
1485	case MWIFIEX_IE_TYPE_ARP_FILTER:
1486		memset(adapter->arp_filter, 0, sizeof(adapter->arp_filter));
1487		if (gen_ie->len > ARP_FILTER_MAX_BUF_SIZE) {
1488			adapter->arp_filter_size = 0;
1489			dev_err(adapter->dev, "invalid ARP filter size\n");
1490			return -1;
1491		} else {
1492			memcpy(adapter->arp_filter, gen_ie->ie_data,
1493			       gen_ie->len);
1494			adapter->arp_filter_size = gen_ie->len;
1495		}
1496		break;
1497	default:
1498		dev_err(adapter->dev, "invalid IE type\n");
1499		return -1;
1500	}
1501	return 0;
1502}
1503
1504/*
1505 * Sends IOCTL request to set a generic IE.
1506 *
1507 * This function allocates the IOCTL request buffer, fills it
1508 * with requisite parameters and calls the IOCTL handler.
1509 */
1510int
1511mwifiex_set_gen_ie(struct mwifiex_private *priv, u8 *ie, int ie_len)
1512{
1513	struct mwifiex_ds_misc_gen_ie gen_ie;
1514
1515	if (ie_len > IEEE_MAX_IE_SIZE)
1516		return -EFAULT;
1517
1518	gen_ie.type = MWIFIEX_IE_TYPE_GEN_IE;
1519	gen_ie.len = ie_len;
1520	memcpy(gen_ie.ie_data, ie, ie_len);
1521	if (mwifiex_misc_ioctl_gen_ie(priv, &gen_ie, HostCmd_ACT_GEN_SET))
1522		return -EFAULT;
1523
1524	return 0;
1525}
1526