53f73c4abdd0a28b63b2d1686de9c8c6b43be853
[linux-3.10.git] / drivers / net / wireless / libertas / cmdresp.c
1 /**
2   * This file contains the handling of command
3   * responses as well as events generated by firmware.
4   */
5 #include <linux/delay.h>
6 #include <linux/if_arp.h>
7 #include <linux/netdevice.h>
8
9 #include <net/iw_handler.h>
10
11 #include "host.h"
12 #include "decl.h"
13 #include "defs.h"
14 #include "dev.h"
15 #include "join.h"
16 #include "wext.h"
17
18 /**
19  *  @brief This function handles disconnect event. it
20  *  reports disconnect to upper layer, clean tx/rx packets,
21  *  reset link state etc.
22  *
23  *  @param priv    A pointer to struct lbs_private structure
24  *  @return        n/a
25  */
26 void lbs_mac_event_disconnected(struct lbs_private *priv)
27 {
28         union iwreq_data wrqu;
29
30         if (priv->connect_status != LBS_CONNECTED)
31                 return;
32
33         lbs_deb_enter(LBS_DEB_ASSOC);
34
35         memset(wrqu.ap_addr.sa_data, 0x00, ETH_ALEN);
36         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
37
38         /*
39          * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
40          * It causes problem in the Supplicant
41          */
42
43         msleep_interruptible(1000);
44         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
45
46         /* Free Tx and Rx packets */
47         kfree_skb(priv->currenttxskb);
48         priv->currenttxskb = NULL;
49
50         /* report disconnect to upper layer */
51         netif_stop_queue(priv->dev);
52         netif_carrier_off(priv->dev);
53
54         /* reset SNR/NF/RSSI values */
55         memset(priv->SNR, 0x00, sizeof(priv->SNR));
56         memset(priv->NF, 0x00, sizeof(priv->NF));
57         memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
58         memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
59         memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
60         priv->nextSNRNF = 0;
61         priv->numSNRNF = 0;
62         priv->connect_status = LBS_DISCONNECTED;
63
64         /* Clear out associated SSID and BSSID since connection is
65          * no longer valid.
66          */
67         memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
68         memset(&priv->curbssparams.ssid, 0, IW_ESSID_MAX_SIZE);
69         priv->curbssparams.ssid_len = 0;
70
71         if (priv->psstate != PS_STATE_FULL_POWER) {
72                 /* make firmware to exit PS mode */
73                 lbs_deb_cmd("disconnected, so exit PS mode\n");
74                 lbs_ps_wakeup(priv, 0);
75         }
76         lbs_deb_leave(LBS_DEB_CMD);
77 }
78
79 /**
80  *  @brief This function handles MIC failure event.
81  *
82  *  @param priv    A pointer to struct lbs_private structure
83  *  @para  event   the event id
84  *  @return        n/a
85  */
86 static void handle_mic_failureevent(struct lbs_private *priv, u32 event)
87 {
88         char buf[50];
89
90         lbs_deb_enter(LBS_DEB_CMD);
91         memset(buf, 0, sizeof(buf));
92
93         sprintf(buf, "%s", "MLME-MICHAELMICFAILURE.indication ");
94
95         if (event == MACREG_INT_CODE_MIC_ERR_UNICAST) {
96                 strcat(buf, "unicast ");
97         } else {
98                 strcat(buf, "multicast ");
99         }
100
101         lbs_send_iwevcustom_event(priv, buf);
102         lbs_deb_leave(LBS_DEB_CMD);
103 }
104
105 static int lbs_ret_reg_access(struct lbs_private *priv,
106                                u16 type, struct cmd_ds_command *resp)
107 {
108         int ret = 0;
109
110         lbs_deb_enter(LBS_DEB_CMD);
111
112         switch (type) {
113         case CMD_RET(CMD_MAC_REG_ACCESS):
114                 {
115                         struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
116
117                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
118                         priv->offsetvalue.value = le32_to_cpu(reg->value);
119                         break;
120                 }
121
122         case CMD_RET(CMD_BBP_REG_ACCESS):
123                 {
124                         struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
125
126                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
127                         priv->offsetvalue.value = reg->value;
128                         break;
129                 }
130
131         case CMD_RET(CMD_RF_REG_ACCESS):
132                 {
133                         struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
134
135                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
136                         priv->offsetvalue.value = reg->value;
137                         break;
138                 }
139
140         default:
141                 ret = -1;
142         }
143
144         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
145         return ret;
146 }
147
148 static int lbs_ret_802_11_sleep_params(struct lbs_private *priv,
149                                         struct cmd_ds_command *resp)
150 {
151         struct cmd_ds_802_11_sleep_params *sp = &resp->params.sleep_params;
152
153         lbs_deb_enter(LBS_DEB_CMD);
154
155         lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, calcontrol 0x%x "
156                     "extsleepclk 0x%x\n", le16_to_cpu(sp->error),
157                     le16_to_cpu(sp->offset), le16_to_cpu(sp->stabletime),
158                     sp->calcontrol, sp->externalsleepclk);
159
160         priv->sp.sp_error = le16_to_cpu(sp->error);
161         priv->sp.sp_offset = le16_to_cpu(sp->offset);
162         priv->sp.sp_stabletime = le16_to_cpu(sp->stabletime);
163         priv->sp.sp_calcontrol = sp->calcontrol;
164         priv->sp.sp_extsleepclk = sp->externalsleepclk;
165         priv->sp.sp_reserved = le16_to_cpu(sp->reserved);
166
167         lbs_deb_enter(LBS_DEB_CMD);
168         return 0;
169 }
170
171 static int lbs_ret_802_11_stat(struct lbs_private *priv,
172                                 struct cmd_ds_command *resp)
173 {
174         lbs_deb_enter(LBS_DEB_CMD);
175 /*      currently priv->wlan802_11Stat is unused
176
177         struct cmd_ds_802_11_get_stat *p11Stat = &resp->params.gstat;
178
179         // TODO Convert it to Big endian befor copy
180         memcpy(&priv->wlan802_11Stat,
181                p11Stat, sizeof(struct cmd_ds_802_11_get_stat));
182 */
183         lbs_deb_leave(LBS_DEB_CMD);
184         return 0;
185 }
186
187 static int lbs_ret_802_11_snmp_mib(struct lbs_private *priv,
188                                     struct cmd_ds_command *resp)
189 {
190         struct cmd_ds_802_11_snmp_mib *smib = &resp->params.smib;
191         u16 oid = le16_to_cpu(smib->oid);
192         u16 querytype = le16_to_cpu(smib->querytype);
193
194         lbs_deb_enter(LBS_DEB_CMD);
195
196         lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid,
197                querytype);
198         lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib->bufsize));
199
200         if (querytype == CMD_ACT_GET) {
201                 switch (oid) {
202                 case FRAGTHRESH_I:
203                         priv->fragthsd =
204                                 le16_to_cpu(*((__le16 *)(smib->value)));
205                         lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
206                                     priv->fragthsd);
207                         break;
208                 case RTSTHRESH_I:
209                         priv->rtsthsd =
210                                 le16_to_cpu(*((__le16 *)(smib->value)));
211                         lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
212                                     priv->rtsthsd);
213                         break;
214                 case SHORT_RETRYLIM_I:
215                         priv->txretrycount =
216                                 le16_to_cpu(*((__le16 *)(smib->value)));
217                         lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
218                                     priv->rtsthsd);
219                         break;
220                 default:
221                         break;
222                 }
223         }
224
225         lbs_deb_enter(LBS_DEB_CMD);
226         return 0;
227 }
228
229 static int lbs_ret_802_11_key_material(struct lbs_private *priv,
230                                         struct cmd_ds_command *resp)
231 {
232         struct cmd_ds_802_11_key_material *pkeymaterial =
233             &resp->params.keymaterial;
234         u16 action = le16_to_cpu(pkeymaterial->action);
235
236         lbs_deb_enter(LBS_DEB_CMD);
237
238         /* Copy the returned key to driver private data */
239         if (action == CMD_ACT_GET) {
240                 u8 * buf_ptr = (u8 *) &pkeymaterial->keyParamSet;
241                 u8 * resp_end = (u8 *) (resp + le16_to_cpu(resp->size));
242
243                 while (buf_ptr < resp_end) {
244                         struct MrvlIEtype_keyParamSet * pkeyparamset =
245                             (struct MrvlIEtype_keyParamSet *) buf_ptr;
246                         struct enc_key * pkey;
247                         u16 param_set_len = le16_to_cpu(pkeyparamset->length);
248                         u16 key_len = le16_to_cpu(pkeyparamset->keylen);
249                         u16 key_flags = le16_to_cpu(pkeyparamset->keyinfo);
250                         u16 key_type = le16_to_cpu(pkeyparamset->keytypeid);
251                         u8 * end;
252
253                         end = (u8 *) pkeyparamset + sizeof (pkeyparamset->type)
254                                                   + sizeof (pkeyparamset->length)
255                                                   + param_set_len;
256                         /* Make sure we don't access past the end of the IEs */
257                         if (end > resp_end)
258                                 break;
259
260                         if (key_flags & KEY_INFO_WPA_UNICAST)
261                                 pkey = &priv->wpa_unicast_key;
262                         else if (key_flags & KEY_INFO_WPA_MCAST)
263                                 pkey = &priv->wpa_mcast_key;
264                         else
265                                 break;
266
267                         /* Copy returned key into driver */
268                         memset(pkey, 0, sizeof(struct enc_key));
269                         if (key_len > sizeof(pkey->key))
270                                 break;
271                         pkey->type = key_type;
272                         pkey->flags = key_flags;
273                         pkey->len = key_len;
274                         memcpy(pkey->key, pkeyparamset->key, pkey->len);
275
276                         buf_ptr = end + 1;
277                 }
278         }
279
280         lbs_deb_enter(LBS_DEB_CMD);
281         return 0;
282 }
283
284 static int lbs_ret_802_11_mac_address(struct lbs_private *priv,
285                                        struct cmd_ds_command *resp)
286 {
287         struct cmd_ds_802_11_mac_address *macadd = &resp->params.macadd;
288
289         lbs_deb_enter(LBS_DEB_CMD);
290
291         memcpy(priv->current_addr, macadd->macadd, ETH_ALEN);
292
293         lbs_deb_enter(LBS_DEB_CMD);
294         return 0;
295 }
296
297 static int lbs_ret_802_11_rf_tx_power(struct lbs_private *priv,
298                                        struct cmd_ds_command *resp)
299 {
300         struct cmd_ds_802_11_rf_tx_power *rtp = &resp->params.txp;
301
302         lbs_deb_enter(LBS_DEB_CMD);
303
304         priv->txpowerlevel = le16_to_cpu(rtp->currentlevel);
305
306         lbs_deb_cmd("TX power currently %d\n", priv->txpowerlevel);
307
308         lbs_deb_leave(LBS_DEB_CMD);
309         return 0;
310 }
311
312 static int lbs_ret_802_11_rate_adapt_rateset(struct lbs_private *priv,
313                                               struct cmd_ds_command *resp)
314 {
315         struct cmd_ds_802_11_rate_adapt_rateset *rates = &resp->params.rateset;
316
317         lbs_deb_enter(LBS_DEB_CMD);
318
319         if (rates->action == CMD_ACT_GET) {
320                 priv->enablehwauto = le16_to_cpu(rates->enablehwauto);
321                 priv->ratebitmap = le16_to_cpu(rates->bitmap);
322         }
323
324         lbs_deb_leave(LBS_DEB_CMD);
325         return 0;
326 }
327
328 static int lbs_ret_802_11_rssi(struct lbs_private *priv,
329                                 struct cmd_ds_command *resp)
330 {
331         struct cmd_ds_802_11_rssi_rsp *rssirsp = &resp->params.rssirsp;
332
333         lbs_deb_enter(LBS_DEB_CMD);
334
335         /* store the non average value */
336         priv->SNR[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->SNR);
337         priv->NF[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->noisefloor);
338
339         priv->SNR[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgSNR);
340         priv->NF[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgnoisefloor);
341
342         priv->RSSI[TYPE_BEACON][TYPE_NOAVG] =
343             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_NOAVG],
344                      priv->NF[TYPE_BEACON][TYPE_NOAVG]);
345
346         priv->RSSI[TYPE_BEACON][TYPE_AVG] =
347             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_AVG] / AVG_SCALE,
348                      priv->NF[TYPE_BEACON][TYPE_AVG] / AVG_SCALE);
349
350         lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
351                priv->RSSI[TYPE_BEACON][TYPE_NOAVG],
352                priv->RSSI[TYPE_BEACON][TYPE_AVG]);
353
354         lbs_deb_leave(LBS_DEB_CMD);
355         return 0;
356 }
357
358 static int lbs_ret_802_11_eeprom_access(struct lbs_private *priv,
359                                   struct cmd_ds_command *resp)
360 {
361         struct lbs_ioctl_regrdwr *pbuf;
362         pbuf = (struct lbs_ioctl_regrdwr *) priv->prdeeprom;
363
364         lbs_deb_enter_args(LBS_DEB_CMD, "len %d",
365                le16_to_cpu(resp->params.rdeeprom.bytecount));
366         if (pbuf->NOB < le16_to_cpu(resp->params.rdeeprom.bytecount)) {
367                 pbuf->NOB = 0;
368                 lbs_deb_cmd("EEPROM read length too big\n");
369                 return -1;
370         }
371         pbuf->NOB = le16_to_cpu(resp->params.rdeeprom.bytecount);
372         if (pbuf->NOB > 0) {
373
374                 memcpy(&pbuf->value, (u8 *) & resp->params.rdeeprom.value,
375                        le16_to_cpu(resp->params.rdeeprom.bytecount));
376                 lbs_deb_hex(LBS_DEB_CMD, "EEPROM", (char *)&pbuf->value,
377                         le16_to_cpu(resp->params.rdeeprom.bytecount));
378         }
379         lbs_deb_leave(LBS_DEB_CMD);
380         return 0;
381 }
382
383 static int lbs_ret_get_log(struct lbs_private *priv,
384                             struct cmd_ds_command *resp)
385 {
386         struct cmd_ds_802_11_get_log *logmessage = &resp->params.glog;
387
388         lbs_deb_enter(LBS_DEB_CMD);
389
390         /* Stored little-endian */
391         memcpy(&priv->logmsg, logmessage, sizeof(struct cmd_ds_802_11_get_log));
392
393         lbs_deb_leave(LBS_DEB_CMD);
394         return 0;
395 }
396
397 static int lbs_ret_802_11_enable_rsn(struct lbs_private *priv,
398                                           struct cmd_ds_command *resp)
399 {
400         struct cmd_ds_802_11_enable_rsn *enable_rsn = &resp->params.enbrsn;
401         u32 * pdata_buf = priv->cur_cmd->pdata_buf;
402
403         lbs_deb_enter(LBS_DEB_CMD);
404
405         if (enable_rsn->action == cpu_to_le16(CMD_ACT_GET)) {
406                 if (pdata_buf)
407                         *pdata_buf = (u32) le16_to_cpu(enable_rsn->enable);
408         }
409
410         lbs_deb_leave(LBS_DEB_CMD);
411         return 0;
412 }
413
414 static int lbs_ret_802_11_bcn_ctrl(struct lbs_private * priv,
415                                         struct cmd_ds_command *resp)
416 {
417         struct cmd_ds_802_11_beacon_control *bcn_ctrl =
418             &resp->params.bcn_ctrl;
419
420         lbs_deb_enter(LBS_DEB_CMD);
421
422         if (bcn_ctrl->action == CMD_ACT_GET) {
423                 priv->beacon_enable = (u8) le16_to_cpu(bcn_ctrl->beacon_enable);
424                 priv->beacon_period = le16_to_cpu(bcn_ctrl->beacon_period);
425         }
426
427         lbs_deb_enter(LBS_DEB_CMD);
428         return 0;
429 }
430
431 static int lbs_ret_802_11_subscribe_event(struct lbs_private *priv,
432         struct cmd_ds_command *resp)
433 {
434         struct cmd_ds_802_11_subscribe_event *cmd_event =
435                 &resp->params.subscribe_event;
436         struct cmd_ds_802_11_subscribe_event *dst_event =
437                 priv->cur_cmd->pdata_buf;
438
439         lbs_deb_enter(LBS_DEB_CMD);
440
441         if (dst_event->action == cpu_to_le16(CMD_ACT_GET)) {
442                 dst_event->events = cmd_event->events;
443                 memcpy(dst_event->tlv, cmd_event->tlv, sizeof(dst_event->tlv));
444         }
445
446         lbs_deb_leave(LBS_DEB_CMD);
447         return 0;
448 }
449
450 static inline int handle_cmd_response(struct lbs_private *priv,
451                                       unsigned long dummy,
452                                       struct cmd_header *cmd_response)
453 {
454         struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
455         int ret = 0;
456         unsigned long flags;
457         uint16_t respcmd = le16_to_cpu(resp->command);
458
459         lbs_deb_enter(LBS_DEB_HOST);
460
461         switch (respcmd) {
462         case CMD_RET(CMD_MAC_REG_ACCESS):
463         case CMD_RET(CMD_BBP_REG_ACCESS):
464         case CMD_RET(CMD_RF_REG_ACCESS):
465                 ret = lbs_ret_reg_access(priv, respcmd, resp);
466                 break;
467
468         case CMD_RET(CMD_802_11_SCAN):
469                 ret = lbs_ret_80211_scan(priv, resp);
470                 break;
471
472         case CMD_RET(CMD_802_11_GET_LOG):
473                 ret = lbs_ret_get_log(priv, resp);
474                 break;
475
476         case CMD_RET_802_11_ASSOCIATE:
477         case CMD_RET(CMD_802_11_ASSOCIATE):
478         case CMD_RET(CMD_802_11_REASSOCIATE):
479                 ret = lbs_ret_80211_associate(priv, resp);
480                 break;
481
482         case CMD_RET(CMD_802_11_DISASSOCIATE):
483         case CMD_RET(CMD_802_11_DEAUTHENTICATE):
484                 ret = lbs_ret_80211_disassociate(priv, resp);
485                 break;
486
487         case CMD_RET(CMD_802_11_AD_HOC_START):
488         case CMD_RET(CMD_802_11_AD_HOC_JOIN):
489                 ret = lbs_ret_80211_ad_hoc_start(priv, resp);
490                 break;
491
492         case CMD_RET(CMD_802_11_GET_STAT):
493                 ret = lbs_ret_802_11_stat(priv, resp);
494                 break;
495
496         case CMD_RET(CMD_802_11_SNMP_MIB):
497                 ret = lbs_ret_802_11_snmp_mib(priv, resp);
498                 break;
499
500         case CMD_RET(CMD_802_11_RF_TX_POWER):
501                 ret = lbs_ret_802_11_rf_tx_power(priv, resp);
502                 break;
503
504         case CMD_RET(CMD_802_11_SET_AFC):
505         case CMD_RET(CMD_802_11_GET_AFC):
506                 spin_lock_irqsave(&priv->driver_lock, flags);
507                 memmove(priv->cur_cmd->pdata_buf, &resp->params.afc,
508                         sizeof(struct cmd_ds_802_11_afc));
509                 spin_unlock_irqrestore(&priv->driver_lock, flags);
510
511                 break;
512
513         case CMD_RET(CMD_MAC_MULTICAST_ADR):
514         case CMD_RET(CMD_MAC_CONTROL):
515         case CMD_RET(CMD_802_11_SET_WEP):
516         case CMD_RET(CMD_802_11_RESET):
517         case CMD_RET(CMD_802_11_AUTHENTICATE):
518         case CMD_RET(CMD_802_11_RADIO_CONTROL):
519         case CMD_RET(CMD_802_11_BEACON_STOP):
520                 break;
521
522         case CMD_RET(CMD_802_11_ENABLE_RSN):
523                 ret = lbs_ret_802_11_enable_rsn(priv, resp);
524                 break;
525
526         case CMD_RET(CMD_802_11_RATE_ADAPT_RATESET):
527                 ret = lbs_ret_802_11_rate_adapt_rateset(priv, resp);
528                 break;
529
530         case CMD_RET(CMD_802_11_RSSI):
531                 ret = lbs_ret_802_11_rssi(priv, resp);
532                 break;
533
534         case CMD_RET(CMD_802_11_MAC_ADDRESS):
535                 ret = lbs_ret_802_11_mac_address(priv, resp);
536                 break;
537
538         case CMD_RET(CMD_802_11_AD_HOC_STOP):
539                 ret = lbs_ret_80211_ad_hoc_stop(priv, resp);
540                 break;
541
542         case CMD_RET(CMD_802_11_KEY_MATERIAL):
543                 ret = lbs_ret_802_11_key_material(priv, resp);
544                 break;
545
546         case CMD_RET(CMD_802_11_EEPROM_ACCESS):
547                 ret = lbs_ret_802_11_eeprom_access(priv, resp);
548                 break;
549
550         case CMD_RET(CMD_802_11D_DOMAIN_INFO):
551                 ret = lbs_ret_802_11d_domain_info(priv, resp);
552                 break;
553
554         case CMD_RET(CMD_802_11_SLEEP_PARAMS):
555                 ret = lbs_ret_802_11_sleep_params(priv, resp);
556                 break;
557         case CMD_RET(CMD_802_11_INACTIVITY_TIMEOUT):
558                 spin_lock_irqsave(&priv->driver_lock, flags);
559                 *((u16 *) priv->cur_cmd->pdata_buf) =
560                     le16_to_cpu(resp->params.inactivity_timeout.timeout);
561                 spin_unlock_irqrestore(&priv->driver_lock, flags);
562                 break;
563
564         case CMD_RET(CMD_802_11_TPC_CFG):
565                 spin_lock_irqsave(&priv->driver_lock, flags);
566                 memmove(priv->cur_cmd->pdata_buf, &resp->params.tpccfg,
567                         sizeof(struct cmd_ds_802_11_tpc_cfg));
568                 spin_unlock_irqrestore(&priv->driver_lock, flags);
569                 break;
570         case CMD_RET(CMD_802_11_LED_GPIO_CTRL):
571                 spin_lock_irqsave(&priv->driver_lock, flags);
572                 memmove(priv->cur_cmd->pdata_buf, &resp->params.ledgpio,
573                         sizeof(struct cmd_ds_802_11_led_ctrl));
574                 spin_unlock_irqrestore(&priv->driver_lock, flags);
575                 break;
576         case CMD_RET(CMD_802_11_SUBSCRIBE_EVENT):
577                 ret = lbs_ret_802_11_subscribe_event(priv, resp);
578                 break;
579
580         case CMD_RET(CMD_802_11_PWR_CFG):
581                 spin_lock_irqsave(&priv->driver_lock, flags);
582                 memmove(priv->cur_cmd->pdata_buf, &resp->params.pwrcfg,
583                         sizeof(struct cmd_ds_802_11_pwr_cfg));
584                 spin_unlock_irqrestore(&priv->driver_lock, flags);
585
586                 break;
587
588         case CMD_RET(CMD_GET_TSF):
589                 spin_lock_irqsave(&priv->driver_lock, flags);
590                 memcpy(priv->cur_cmd->pdata_buf,
591                        &resp->params.gettsf.tsfvalue, sizeof(u64));
592                 spin_unlock_irqrestore(&priv->driver_lock, flags);
593                 break;
594         case CMD_RET(CMD_BT_ACCESS):
595                 spin_lock_irqsave(&priv->driver_lock, flags);
596                 if (priv->cur_cmd->pdata_buf)
597                         memcpy(priv->cur_cmd->pdata_buf,
598                                &resp->params.bt.addr1, 2 * ETH_ALEN);
599                 spin_unlock_irqrestore(&priv->driver_lock, flags);
600                 break;
601         case CMD_RET(CMD_FWT_ACCESS):
602                 spin_lock_irqsave(&priv->driver_lock, flags);
603                 if (priv->cur_cmd->pdata_buf)
604                         memcpy(priv->cur_cmd->pdata_buf, &resp->params.fwt,
605                                sizeof(resp->params.fwt));
606                 spin_unlock_irqrestore(&priv->driver_lock, flags);
607                 break;
608         case CMD_RET(CMD_802_11_BEACON_CTRL):
609                 ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
610                 break;
611
612         default:
613                 lbs_deb_host("CMD_RESP: unknown cmd response 0x%04x\n",
614                              le16_to_cpu(resp->command));
615                 break;
616         }
617         lbs_deb_leave(LBS_DEB_HOST);
618         return ret;
619 }
620
621 int lbs_process_rx_command(struct lbs_private *priv)
622 {
623         uint16_t respcmd, curcmd;
624         struct cmd_header *resp;
625         int ret = 0;
626         unsigned long flags;
627         uint16_t result;
628
629         lbs_deb_enter(LBS_DEB_HOST);
630
631         mutex_lock(&priv->lock);
632         spin_lock_irqsave(&priv->driver_lock, flags);
633
634         if (!priv->cur_cmd) {
635                 lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
636                 ret = -1;
637                 spin_unlock_irqrestore(&priv->driver_lock, flags);
638                 goto done;
639         }
640
641         curcmd = le16_to_cpu(priv->cur_cmd->cmdbuf->command);
642
643         resp = priv->cur_cmd->cmdbuf;
644
645         respcmd = le16_to_cpu(resp->command);
646         result = le16_to_cpu(resp->result);
647
648         lbs_deb_host("CMD_RESP: response 0x%04x, seq %d, size %d, jiffies %lu\n",
649                      respcmd, le16_to_cpu(resp->seqnum), priv->upld_len, jiffies);
650         lbs_deb_hex(LBS_DEB_HOST, "CMD_RESP", (void *) resp, priv->upld_len);
651
652         if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
653                 lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
654                             le16_to_cpu(resp->seqnum), le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
655                 spin_unlock_irqrestore(&priv->driver_lock, flags);
656                 ret = -1;
657                 goto done;
658         }
659         if (respcmd != CMD_RET(curcmd) &&
660             respcmd != CMD_802_11_ASSOCIATE && curcmd != CMD_RET_802_11_ASSOCIATE) {
661                 lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
662                 spin_unlock_irqrestore(&priv->driver_lock, flags);
663                 ret = -1;
664                 goto done;
665         }
666
667         /* Now we got response from FW, cancel the command timer */
668         del_timer(&priv->command_timer);
669
670         /* Store the response code to cur_cmd_retcode. */
671         priv->cur_cmd_retcode = result;
672
673         if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
674                 struct cmd_ds_802_11_ps_mode *psmode = (void *) resp;
675                 u16 action = le16_to_cpu(psmode->action);
676
677                 lbs_deb_host(
678                        "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
679                        result, action);
680
681                 if (result) {
682                         lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
683                                     result);
684                         /*
685                          * We should not re-try enter-ps command in
686                          * ad-hoc mode. It takes place in
687                          * lbs_execute_next_command().
688                          */
689                         if (priv->mode == IW_MODE_ADHOC &&
690                             action == CMD_SUBCMD_ENTER_PS)
691                                 priv->psmode = LBS802_11POWERMODECAM;
692                 } else if (action == CMD_SUBCMD_ENTER_PS) {
693                         priv->needtowakeup = 0;
694                         priv->psstate = PS_STATE_AWAKE;
695
696                         lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
697                         if (priv->connect_status != LBS_CONNECTED) {
698                                 /*
699                                  * When Deauth Event received before Enter_PS command
700                                  * response, We need to wake up the firmware.
701                                  */
702                                 lbs_deb_host(
703                                        "disconnected, invoking lbs_ps_wakeup\n");
704
705                                 spin_unlock_irqrestore(&priv->driver_lock, flags);
706                                 mutex_unlock(&priv->lock);
707                                 lbs_ps_wakeup(priv, 0);
708                                 mutex_lock(&priv->lock);
709                                 spin_lock_irqsave(&priv->driver_lock, flags);
710                         }
711                 } else if (action == CMD_SUBCMD_EXIT_PS) {
712                         priv->needtowakeup = 0;
713                         priv->psstate = PS_STATE_FULL_POWER;
714                         lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
715                 } else {
716                         lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
717                 }
718
719                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
720                 priv->cur_cmd = NULL;
721                 spin_unlock_irqrestore(&priv->driver_lock, flags);
722
723                 ret = 0;
724                 goto done;
725         }
726
727         /* If the command is not successful, cleanup and return failure */
728         if ((result != 0 || !(respcmd & 0x8000))) {
729                 lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
730                        result, respcmd);
731                 /*
732                  * Handling errors here
733                  */
734                 switch (respcmd) {
735                 case CMD_RET(CMD_GET_HW_SPEC):
736                 case CMD_RET(CMD_802_11_RESET):
737                         lbs_deb_host("CMD_RESP: reset failed\n");
738                         break;
739
740                 }
741
742                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
743                 priv->cur_cmd = NULL;
744                 spin_unlock_irqrestore(&priv->driver_lock, flags);
745
746                 ret = -1;
747                 goto done;
748         }
749
750         spin_unlock_irqrestore(&priv->driver_lock, flags);
751
752         if (priv->cur_cmd && priv->cur_cmd->callback) {
753                 ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
754                                 resp);
755         } else
756                 ret = handle_cmd_response(priv, 0, resp);
757
758         spin_lock_irqsave(&priv->driver_lock, flags);
759
760         if (priv->cur_cmd) {
761                 /* Clean up and Put current command back to cmdfreeq */
762                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
763                 priv->cur_cmd = NULL;
764         }
765         spin_unlock_irqrestore(&priv->driver_lock, flags);
766
767 done:
768         mutex_unlock(&priv->lock);
769         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
770         return ret;
771 }
772
773 int lbs_process_event(struct lbs_private *priv)
774 {
775         int ret = 0;
776         u32 eventcause;
777
778         lbs_deb_enter(LBS_DEB_CMD);
779
780         spin_lock_irq(&priv->driver_lock);
781         eventcause = priv->eventcause >> SBI_EVENT_CAUSE_SHIFT;
782         spin_unlock_irq(&priv->driver_lock);
783
784         lbs_deb_cmd("event cause %d\n", eventcause);
785
786         switch (eventcause) {
787         case MACREG_INT_CODE_LINK_SENSED:
788                 lbs_deb_cmd("EVENT: MACREG_INT_CODE_LINK_SENSED\n");
789                 break;
790
791         case MACREG_INT_CODE_DEAUTHENTICATED:
792                 lbs_deb_cmd("EVENT: deauthenticated\n");
793                 lbs_mac_event_disconnected(priv);
794                 break;
795
796         case MACREG_INT_CODE_DISASSOCIATED:
797                 lbs_deb_cmd("EVENT: disassociated\n");
798                 lbs_mac_event_disconnected(priv);
799                 break;
800
801         case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
802                 lbs_deb_cmd("EVENT: link lost\n");
803                 lbs_mac_event_disconnected(priv);
804                 break;
805
806         case MACREG_INT_CODE_PS_SLEEP:
807                 lbs_deb_cmd("EVENT: sleep\n");
808
809                 /* handle unexpected PS SLEEP event */
810                 if (priv->psstate == PS_STATE_FULL_POWER) {
811                         lbs_deb_cmd(
812                                "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
813                         break;
814                 }
815                 priv->psstate = PS_STATE_PRE_SLEEP;
816
817                 lbs_ps_confirm_sleep(priv, (u16) priv->psmode);
818
819                 break;
820
821         case MACREG_INT_CODE_PS_AWAKE:
822                 lbs_deb_cmd("EVENT: awake\n");
823
824                 /* handle unexpected PS AWAKE event */
825                 if (priv->psstate == PS_STATE_FULL_POWER) {
826                         lbs_deb_cmd(
827                                "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
828                         break;
829                 }
830
831                 priv->psstate = PS_STATE_AWAKE;
832
833                 if (priv->needtowakeup) {
834                         /*
835                          * wait for the command processing to finish
836                          * before resuming sending
837                          * priv->needtowakeup will be set to FALSE
838                          * in lbs_ps_wakeup()
839                          */
840                         lbs_deb_cmd("waking up ...\n");
841                         lbs_ps_wakeup(priv, 0);
842                 }
843                 break;
844
845         case MACREG_INT_CODE_MIC_ERR_UNICAST:
846                 lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
847                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_UNICAST);
848                 break;
849
850         case MACREG_INT_CODE_MIC_ERR_MULTICAST:
851                 lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
852                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_MULTICAST);
853                 break;
854         case MACREG_INT_CODE_MIB_CHANGED:
855         case MACREG_INT_CODE_INIT_DONE:
856                 break;
857
858         case MACREG_INT_CODE_ADHOC_BCN_LOST:
859                 lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
860                 break;
861
862         case MACREG_INT_CODE_RSSI_LOW:
863                 lbs_pr_alert("EVENT: rssi low\n");
864                 break;
865         case MACREG_INT_CODE_SNR_LOW:
866                 lbs_pr_alert("EVENT: snr low\n");
867                 break;
868         case MACREG_INT_CODE_MAX_FAIL:
869                 lbs_pr_alert("EVENT: max fail\n");
870                 break;
871         case MACREG_INT_CODE_RSSI_HIGH:
872                 lbs_pr_alert("EVENT: rssi high\n");
873                 break;
874         case MACREG_INT_CODE_SNR_HIGH:
875                 lbs_pr_alert("EVENT: snr high\n");
876                 break;
877
878         case MACREG_INT_CODE_MESH_AUTO_STARTED:
879                 /* Ignore spurious autostart events if autostart is disabled */
880                 if (!priv->mesh_autostart_enabled) {
881                         lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
882                         break;
883                 }
884                 lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
885                 priv->mesh_connect_status = LBS_CONNECTED;
886                 if (priv->mesh_open == 1) {
887                         netif_wake_queue(priv->mesh_dev);
888                         netif_carrier_on(priv->mesh_dev);
889                 }
890                 priv->mode = IW_MODE_ADHOC;
891                 schedule_work(&priv->sync_channel);
892                 break;
893
894         default:
895                 lbs_pr_alert("EVENT: unknown event id %d\n", eventcause);
896                 break;
897         }
898
899         spin_lock_irq(&priv->driver_lock);
900         priv->eventcause = 0;
901         spin_unlock_irq(&priv->driver_lock);
902
903         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
904         return ret;
905 }