cmdresp.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495
  1. /**
  2. * This file contains the handling of command
  3. * responses as well as events generated by firmware.
  4. */
  5. #include <linux/slab.h>
  6. #include <linux/delay.h>
  7. #include <linux/sched.h>
  8. #include <linux/if_arp.h>
  9. #include <linux/netdevice.h>
  10. #include <asm/unaligned.h>
  11. #include <net/iw_handler.h>
  12. #include "host.h"
  13. #include "decl.h"
  14. #include "cmd.h"
  15. #include "defs.h"
  16. #include "dev.h"
  17. #include "assoc.h"
  18. #include "wext.h"
  19. /**
  20. * @brief This function handles disconnect event. it
  21. * reports disconnect to upper layer, clean tx/rx packets,
  22. * reset link state etc.
  23. *
  24. * @param priv A pointer to struct lbs_private structure
  25. * @return n/a
  26. */
  27. void lbs_mac_event_disconnected(struct lbs_private *priv)
  28. {
  29. if (priv->connect_status != LBS_CONNECTED)
  30. return;
  31. lbs_deb_enter(LBS_DEB_ASSOC);
  32. /*
  33. * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
  34. * It causes problem in the Supplicant
  35. */
  36. msleep_interruptible(1000);
  37. lbs_send_disconnect_notification(priv);
  38. /* report disconnect to upper layer */
  39. netif_stop_queue(priv->dev);
  40. netif_carrier_off(priv->dev);
  41. /* Free Tx and Rx packets */
  42. kfree_skb(priv->currenttxskb);
  43. priv->currenttxskb = NULL;
  44. priv->tx_pending_len = 0;
  45. /* reset SNR/NF/RSSI values */
  46. memset(priv->SNR, 0x00, sizeof(priv->SNR));
  47. memset(priv->NF, 0x00, sizeof(priv->NF));
  48. memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
  49. memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
  50. memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
  51. priv->nextSNRNF = 0;
  52. priv->numSNRNF = 0;
  53. priv->connect_status = LBS_DISCONNECTED;
  54. /* Clear out associated SSID and BSSID since connection is
  55. * no longer valid.
  56. */
  57. memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
  58. memset(&priv->curbssparams.ssid, 0, IEEE80211_MAX_SSID_LEN);
  59. priv->curbssparams.ssid_len = 0;
  60. if (priv->psstate != PS_STATE_FULL_POWER) {
  61. /* make firmware to exit PS mode */
  62. lbs_deb_cmd("disconnected, so exit PS mode\n");
  63. lbs_ps_wakeup(priv, 0);
  64. }
  65. lbs_deb_leave(LBS_DEB_ASSOC);
  66. }
  67. static int lbs_ret_reg_access(struct lbs_private *priv,
  68. u16 type, struct cmd_ds_command *resp)
  69. {
  70. int ret = 0;
  71. lbs_deb_enter(LBS_DEB_CMD);
  72. switch (type) {
  73. case CMD_RET(CMD_MAC_REG_ACCESS):
  74. {
  75. struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
  76. priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  77. priv->offsetvalue.value = le32_to_cpu(reg->value);
  78. break;
  79. }
  80. case CMD_RET(CMD_BBP_REG_ACCESS):
  81. {
  82. struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
  83. priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  84. priv->offsetvalue.value = reg->value;
  85. break;
  86. }
  87. case CMD_RET(CMD_RF_REG_ACCESS):
  88. {
  89. struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
  90. priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  91. priv->offsetvalue.value = reg->value;
  92. break;
  93. }
  94. default:
  95. ret = -1;
  96. }
  97. lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
  98. return ret;
  99. }
  100. static inline int handle_cmd_response(struct lbs_private *priv,
  101. struct cmd_header *cmd_response)
  102. {
  103. struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
  104. int ret = 0;
  105. unsigned long flags;
  106. uint16_t respcmd = le16_to_cpu(resp->command);
  107. lbs_deb_enter(LBS_DEB_HOST);
  108. switch (respcmd) {
  109. case CMD_RET(CMD_MAC_REG_ACCESS):
  110. case CMD_RET(CMD_BBP_REG_ACCESS):
  111. case CMD_RET(CMD_RF_REG_ACCESS):
  112. ret = lbs_ret_reg_access(priv, respcmd, resp);
  113. break;
  114. case CMD_RET(CMD_802_11_SET_AFC):
  115. case CMD_RET(CMD_802_11_GET_AFC):
  116. spin_lock_irqsave(&priv->driver_lock, flags);
  117. memmove((void *)priv->cur_cmd->callback_arg, &resp->params.afc,
  118. sizeof(struct cmd_ds_802_11_afc));
  119. spin_unlock_irqrestore(&priv->driver_lock, flags);
  120. break;
  121. case CMD_RET(CMD_802_11_BEACON_STOP):
  122. break;
  123. case CMD_RET(CMD_802_11_RSSI):
  124. ret = lbs_ret_802_11_rssi(priv, resp);
  125. break;
  126. case CMD_RET(CMD_802_11_TPC_CFG):
  127. spin_lock_irqsave(&priv->driver_lock, flags);
  128. memmove((void *)priv->cur_cmd->callback_arg, &resp->params.tpccfg,
  129. sizeof(struct cmd_ds_802_11_tpc_cfg));
  130. spin_unlock_irqrestore(&priv->driver_lock, flags);
  131. break;
  132. case CMD_RET(CMD_BT_ACCESS):
  133. spin_lock_irqsave(&priv->driver_lock, flags);
  134. if (priv->cur_cmd->callback_arg)
  135. memcpy((void *)priv->cur_cmd->callback_arg,
  136. &resp->params.bt.addr1, 2 * ETH_ALEN);
  137. spin_unlock_irqrestore(&priv->driver_lock, flags);
  138. break;
  139. case CMD_RET(CMD_FWT_ACCESS):
  140. spin_lock_irqsave(&priv->driver_lock, flags);
  141. if (priv->cur_cmd->callback_arg)
  142. memcpy((void *)priv->cur_cmd->callback_arg, &resp->params.fwt,
  143. sizeof(resp->params.fwt));
  144. spin_unlock_irqrestore(&priv->driver_lock, flags);
  145. break;
  146. case CMD_RET(CMD_802_11_BEACON_CTRL):
  147. ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
  148. break;
  149. default:
  150. lbs_pr_err("CMD_RESP: unknown cmd response 0x%04x\n",
  151. le16_to_cpu(resp->command));
  152. break;
  153. }
  154. lbs_deb_leave(LBS_DEB_HOST);
  155. return ret;
  156. }
  157. int lbs_process_command_response(struct lbs_private *priv, u8 *data, u32 len)
  158. {
  159. uint16_t respcmd, curcmd;
  160. struct cmd_header *resp;
  161. int ret = 0;
  162. unsigned long flags;
  163. uint16_t result;
  164. lbs_deb_enter(LBS_DEB_HOST);
  165. mutex_lock(&priv->lock);
  166. spin_lock_irqsave(&priv->driver_lock, flags);
  167. if (!priv->cur_cmd) {
  168. lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
  169. ret = -1;
  170. spin_unlock_irqrestore(&priv->driver_lock, flags);
  171. goto done;
  172. }
  173. resp = (void *)data;
  174. curcmd = le16_to_cpu(priv->cur_cmd->cmdbuf->command);
  175. respcmd = le16_to_cpu(resp->command);
  176. result = le16_to_cpu(resp->result);
  177. lbs_deb_cmd("CMD_RESP: response 0x%04x, seq %d, size %d\n",
  178. respcmd, le16_to_cpu(resp->seqnum), len);
  179. lbs_deb_hex(LBS_DEB_CMD, "CMD_RESP", (void *) resp, len);
  180. if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
  181. lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
  182. le16_to_cpu(resp->seqnum), le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
  183. spin_unlock_irqrestore(&priv->driver_lock, flags);
  184. ret = -1;
  185. goto done;
  186. }
  187. if (respcmd != CMD_RET(curcmd) &&
  188. respcmd != CMD_RET_802_11_ASSOCIATE && curcmd != CMD_802_11_ASSOCIATE) {
  189. lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
  190. spin_unlock_irqrestore(&priv->driver_lock, flags);
  191. ret = -1;
  192. goto done;
  193. }
  194. if (resp->result == cpu_to_le16(0x0004)) {
  195. /* 0x0004 means -EAGAIN. Drop the response, let it time out
  196. and be resubmitted */
  197. lbs_pr_info("Firmware returns DEFER to command %x. Will let it time out...\n",
  198. le16_to_cpu(resp->command));
  199. spin_unlock_irqrestore(&priv->driver_lock, flags);
  200. ret = -1;
  201. goto done;
  202. }
  203. /* Now we got response from FW, cancel the command timer */
  204. del_timer(&priv->command_timer);
  205. priv->cmd_timed_out = 0;
  206. /* Store the response code to cur_cmd_retcode. */
  207. priv->cur_cmd_retcode = result;
  208. if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
  209. struct cmd_ds_802_11_ps_mode *psmode = (void *) &resp[1];
  210. u16 action = le16_to_cpu(psmode->action);
  211. lbs_deb_host(
  212. "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
  213. result, action);
  214. if (result) {
  215. lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
  216. result);
  217. /*
  218. * We should not re-try enter-ps command in
  219. * ad-hoc mode. It takes place in
  220. * lbs_execute_next_command().
  221. */
  222. if (priv->mode == IW_MODE_ADHOC &&
  223. action == CMD_SUBCMD_ENTER_PS)
  224. priv->psmode = LBS802_11POWERMODECAM;
  225. } else if (action == CMD_SUBCMD_ENTER_PS) {
  226. priv->needtowakeup = 0;
  227. priv->psstate = PS_STATE_AWAKE;
  228. lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
  229. if (priv->connect_status != LBS_CONNECTED) {
  230. /*
  231. * When Deauth Event received before Enter_PS command
  232. * response, We need to wake up the firmware.
  233. */
  234. lbs_deb_host(
  235. "disconnected, invoking lbs_ps_wakeup\n");
  236. spin_unlock_irqrestore(&priv->driver_lock, flags);
  237. mutex_unlock(&priv->lock);
  238. lbs_ps_wakeup(priv, 0);
  239. mutex_lock(&priv->lock);
  240. spin_lock_irqsave(&priv->driver_lock, flags);
  241. }
  242. } else if (action == CMD_SUBCMD_EXIT_PS) {
  243. priv->needtowakeup = 0;
  244. priv->psstate = PS_STATE_FULL_POWER;
  245. lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
  246. } else {
  247. lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
  248. }
  249. lbs_complete_command(priv, priv->cur_cmd, result);
  250. spin_unlock_irqrestore(&priv->driver_lock, flags);
  251. ret = 0;
  252. goto done;
  253. }
  254. /* If the command is not successful, cleanup and return failure */
  255. if ((result != 0 || !(respcmd & 0x8000))) {
  256. lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
  257. result, respcmd);
  258. /*
  259. * Handling errors here
  260. */
  261. switch (respcmd) {
  262. case CMD_RET(CMD_GET_HW_SPEC):
  263. case CMD_RET(CMD_802_11_RESET):
  264. lbs_deb_host("CMD_RESP: reset failed\n");
  265. break;
  266. }
  267. lbs_complete_command(priv, priv->cur_cmd, result);
  268. spin_unlock_irqrestore(&priv->driver_lock, flags);
  269. ret = -1;
  270. goto done;
  271. }
  272. spin_unlock_irqrestore(&priv->driver_lock, flags);
  273. if (priv->cur_cmd && priv->cur_cmd->callback) {
  274. ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
  275. resp);
  276. } else
  277. ret = handle_cmd_response(priv, resp);
  278. spin_lock_irqsave(&priv->driver_lock, flags);
  279. if (priv->cur_cmd) {
  280. /* Clean up and Put current command back to cmdfreeq */
  281. lbs_complete_command(priv, priv->cur_cmd, result);
  282. }
  283. spin_unlock_irqrestore(&priv->driver_lock, flags);
  284. done:
  285. mutex_unlock(&priv->lock);
  286. lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
  287. return ret;
  288. }
  289. static int lbs_send_confirmwake(struct lbs_private *priv)
  290. {
  291. struct cmd_header cmd;
  292. int ret = 0;
  293. lbs_deb_enter(LBS_DEB_HOST);
  294. cmd.command = cpu_to_le16(CMD_802_11_WAKEUP_CONFIRM);
  295. cmd.size = cpu_to_le16(sizeof(cmd));
  296. cmd.seqnum = cpu_to_le16(++priv->seqnum);
  297. cmd.result = 0;
  298. lbs_deb_hex(LBS_DEB_HOST, "wake confirm", (u8 *) &cmd,
  299. sizeof(cmd));
  300. ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) &cmd, sizeof(cmd));
  301. if (ret)
  302. lbs_pr_alert("SEND_WAKEC_CMD: Host to Card failed for Confirm Wake\n");
  303. lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
  304. return ret;
  305. }
  306. int lbs_process_event(struct lbs_private *priv, u32 event)
  307. {
  308. int ret = 0;
  309. lbs_deb_enter(LBS_DEB_CMD);
  310. switch (event) {
  311. case MACREG_INT_CODE_LINK_SENSED:
  312. lbs_deb_cmd("EVENT: link sensed\n");
  313. break;
  314. case MACREG_INT_CODE_DEAUTHENTICATED:
  315. lbs_deb_cmd("EVENT: deauthenticated\n");
  316. lbs_mac_event_disconnected(priv);
  317. break;
  318. case MACREG_INT_CODE_DISASSOCIATED:
  319. lbs_deb_cmd("EVENT: disassociated\n");
  320. lbs_mac_event_disconnected(priv);
  321. break;
  322. case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
  323. lbs_deb_cmd("EVENT: link lost\n");
  324. lbs_mac_event_disconnected(priv);
  325. break;
  326. case MACREG_INT_CODE_PS_SLEEP:
  327. lbs_deb_cmd("EVENT: ps sleep\n");
  328. /* handle unexpected PS SLEEP event */
  329. if (priv->psstate == PS_STATE_FULL_POWER) {
  330. lbs_deb_cmd(
  331. "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
  332. break;
  333. }
  334. priv->psstate = PS_STATE_PRE_SLEEP;
  335. lbs_ps_confirm_sleep(priv);
  336. break;
  337. case MACREG_INT_CODE_HOST_AWAKE:
  338. lbs_deb_cmd("EVENT: host awake\n");
  339. if (priv->reset_deep_sleep_wakeup)
  340. priv->reset_deep_sleep_wakeup(priv);
  341. priv->is_deep_sleep = 0;
  342. lbs_send_confirmwake(priv);
  343. break;
  344. case MACREG_INT_CODE_DEEP_SLEEP_AWAKE:
  345. if (priv->reset_deep_sleep_wakeup)
  346. priv->reset_deep_sleep_wakeup(priv);
  347. lbs_deb_cmd("EVENT: ds awake\n");
  348. priv->is_deep_sleep = 0;
  349. priv->wakeup_dev_required = 0;
  350. wake_up_interruptible(&priv->ds_awake_q);
  351. break;
  352. case MACREG_INT_CODE_PS_AWAKE:
  353. lbs_deb_cmd("EVENT: ps awake\n");
  354. /* handle unexpected PS AWAKE event */
  355. if (priv->psstate == PS_STATE_FULL_POWER) {
  356. lbs_deb_cmd(
  357. "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
  358. break;
  359. }
  360. priv->psstate = PS_STATE_AWAKE;
  361. if (priv->needtowakeup) {
  362. /*
  363. * wait for the command processing to finish
  364. * before resuming sending
  365. * priv->needtowakeup will be set to FALSE
  366. * in lbs_ps_wakeup()
  367. */
  368. lbs_deb_cmd("waking up ...\n");
  369. lbs_ps_wakeup(priv, 0);
  370. }
  371. break;
  372. case MACREG_INT_CODE_MIC_ERR_UNICAST:
  373. lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
  374. lbs_send_mic_failureevent(priv, event);
  375. break;
  376. case MACREG_INT_CODE_MIC_ERR_MULTICAST:
  377. lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
  378. lbs_send_mic_failureevent(priv, event);
  379. break;
  380. case MACREG_INT_CODE_MIB_CHANGED:
  381. lbs_deb_cmd("EVENT: MIB CHANGED\n");
  382. break;
  383. case MACREG_INT_CODE_INIT_DONE:
  384. lbs_deb_cmd("EVENT: INIT DONE\n");
  385. break;
  386. case MACREG_INT_CODE_ADHOC_BCN_LOST:
  387. lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
  388. break;
  389. case MACREG_INT_CODE_RSSI_LOW:
  390. lbs_pr_alert("EVENT: rssi low\n");
  391. break;
  392. case MACREG_INT_CODE_SNR_LOW:
  393. lbs_pr_alert("EVENT: snr low\n");
  394. break;
  395. case MACREG_INT_CODE_MAX_FAIL:
  396. lbs_pr_alert("EVENT: max fail\n");
  397. break;
  398. case MACREG_INT_CODE_RSSI_HIGH:
  399. lbs_pr_alert("EVENT: rssi high\n");
  400. break;
  401. case MACREG_INT_CODE_SNR_HIGH:
  402. lbs_pr_alert("EVENT: snr high\n");
  403. break;
  404. case MACREG_INT_CODE_MESH_AUTO_STARTED:
  405. /* Ignore spurious autostart events */
  406. lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
  407. break;
  408. default:
  409. lbs_pr_alert("EVENT: unknown event id %d\n", event);
  410. break;
  411. }
  412. lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
  413. return ret;
  414. }