drivers/net/wireless/iwlwifi/dvm/lib.c

   1 /******************************************************************************
   2  *
   3  * GPL LICENSE SUMMARY
   4  *
   5  * Copyright(c) 2008 - 2012 Intel Corporation. All rights reserved.
   6  *
   7  * This program is free software; you can redistribute it and/or modify
   8  * it under the terms of version 2 of the GNU General Public License as
   9  * published by the Free Software Foundation.
  10  *
  11  * This program is distributed in the hope that it will be useful, but
  12  * WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * along with this program; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
  19  * USA
  20  *
  21  * The full GNU General Public License is included in this distribution
  22  * in the file called LICENSE.GPL.
  23  *
  24  * Contact Information:
  25  *  Intel Linux Wireless <ilw@linux.intel.com>
  26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  27  *
  28  *****************************************************************************/
  29 #include <linux/etherdevice.h>
  30 #include <linux/kernel.h>
  31 #include <linux/module.h>
  32 #include <linux/init.h>
  33 #include <linux/sched.h>
  34 #include <net/mac80211.h>
  35
  36 #include "iwl-io.h"
  37 #include "iwl-agn-hw.h"
  38 #include "iwl-trans.h"
  39 #include "iwl-modparams.h"
  40
  41 #include "dev.h"
  42 #include "agn.h"
  43
  44 int iwlagn_hw_valid_rtc_data_addr(u32 addr)
  45 {
  46         return (addr >= IWLAGN_RTC_DATA_LOWER_BOUND) &&
  47                 (addr < IWLAGN_RTC_DATA_UPPER_BOUND);
  48 }
  49
  50 int iwlagn_send_tx_power(struct iwl_priv *priv)
  51 {
  52         struct iwlagn_tx_power_dbm_cmd tx_power_cmd;
  53         u8 tx_ant_cfg_cmd;
  54
  55         if (WARN_ONCE(test_bit(STATUS_SCAN_HW, &priv->status),
  56                       "TX Power requested while scanning!\n"))
  57                 return -EAGAIN;
  58
  59         /* half dBm need to multiply */
  60         tx_power_cmd.global_lmt = (s8)(2 * priv->tx_power_user_lmt);
  61
  62         if (tx_power_cmd.global_lmt > priv->eeprom_data->max_tx_pwr_half_dbm) {
  63                 /*
  64                  * For the newer devices which using enhanced/extend tx power
  65                  * table in EEPROM, the format is in half dBm. driver need to
  66                  * convert to dBm format before report to mac80211.
  67                  * By doing so, there is a possibility of 1/2 dBm resolution
  68                  * lost. driver will perform "round-up" operation before
  69                  * reporting, but it will cause 1/2 dBm tx power over the
  70                  * regulatory limit. Perform the checking here, if the
  71                  * "tx_power_user_lmt" is higher than EEPROM value (in
  72                  * half-dBm format), lower the tx power based on EEPROM
  73                  */
  74                 tx_power_cmd.global_lmt =
  75                         priv->eeprom_data->max_tx_pwr_half_dbm;
  76         }
  77         tx_power_cmd.flags = IWLAGN_TX_POWER_NO_CLOSED;
  78         tx_power_cmd.srv_chan_lmt = IWLAGN_TX_POWER_AUTO;
  79
  80         if (IWL_UCODE_API(priv->fw->ucode_ver) == 1)
  81                 tx_ant_cfg_cmd = REPLY_TX_POWER_DBM_CMD_V1;
  82         else
  83                 tx_ant_cfg_cmd = REPLY_TX_POWER_DBM_CMD;
  84
  85         return iwl_dvm_send_cmd_pdu(priv, tx_ant_cfg_cmd, CMD_SYNC,
  86                         sizeof(tx_power_cmd), &tx_power_cmd);
  87 }
  88
  89 void iwlagn_temperature(struct iwl_priv *priv)
  90 {
  91         lockdep_assert_held(&priv->statistics.lock);
  92
  93         /* store temperature from correct statistics (in Celsius) */
  94         priv->temperature = le32_to_cpu(priv->statistics.common.temperature);
  95         iwl_tt_handler(priv);
  96 }
  97
  98 int iwlagn_hwrate_to_mac80211_idx(u32 rate_n_flags, enum ieee80211_band band)
  99 {
 100         int idx = 0;
 101         int band_offset = 0;
 102
 103         /* HT rate format: mac80211 wants an MCS number, which is just LSB */
 104         if (rate_n_flags & RATE_MCS_HT_MSK) {
 105                 idx = (rate_n_flags & 0xff);
 106                 return idx;
 107         /* Legacy rate format, search for match in table */
 108         } else {
 109                 if (band == IEEE80211_BAND_5GHZ)
 110                         band_offset = IWL_FIRST_OFDM_RATE;
 111                 for (idx = band_offset; idx < IWL_RATE_COUNT_LEGACY; idx++)
 112                         if (iwl_rates[idx].plcp == (rate_n_flags & 0xFF))
 113                                 return idx - band_offset;
 114         }
 115
 116         return -1;
 117 }
 118
 119 int iwlagn_manage_ibss_station(struct iwl_priv *priv,
 120                                struct ieee80211_vif *vif, bool add)
 121 {
 122         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
 123
 124         if (add)
 125                 return iwlagn_add_bssid_station(priv, vif_priv->ctx,
 126                                                 vif->bss_conf.bssid,
 127                                                 &vif_priv->ibss_bssid_sta_id);
 128         return iwl_remove_station(priv, vif_priv->ibss_bssid_sta_id,
 129                                   vif->bss_conf.bssid);
 130 }
 131
 132 /**
 133  * iwlagn_txfifo_flush: send REPLY_TXFIFO_FLUSH command to uCode
 134  *
 135  * pre-requirements:
 136  *  1. acquire mutex before calling
 137  *  2. make sure rf is on and not in exit state
 138  */
 139 int iwlagn_txfifo_flush(struct iwl_priv *priv, u16 flush_control)
 140 {
 141         struct iwl_txfifo_flush_cmd flush_cmd;
 142         struct iwl_host_cmd cmd = {
 143                 .id = REPLY_TXFIFO_FLUSH,
 144                 .len = { sizeof(struct iwl_txfifo_flush_cmd), },
 145                 .flags = CMD_SYNC,
 146                 .data = { &flush_cmd, },
 147         };
 148
 149         might_sleep();
 150
 151         memset(&flush_cmd, 0, sizeof(flush_cmd));
 152         if (flush_control & BIT(IWL_RXON_CTX_BSS))
 153                 flush_cmd.fifo_control = IWL_SCD_VO_MSK | IWL_SCD_VI_MSK |
 154                                  IWL_SCD_BE_MSK | IWL_SCD_BK_MSK |
 155                                  IWL_SCD_MGMT_MSK;
 156         if ((flush_control & BIT(IWL_RXON_CTX_PAN)) &&
 157             (priv->valid_contexts != BIT(IWL_RXON_CTX_BSS)))
 158                 flush_cmd.fifo_control |= IWL_PAN_SCD_VO_MSK |
 159                                 IWL_PAN_SCD_VI_MSK | IWL_PAN_SCD_BE_MSK |
 160                                 IWL_PAN_SCD_BK_MSK | IWL_PAN_SCD_MGMT_MSK |
 161                                 IWL_PAN_SCD_MULTICAST_MSK;
 162
 163         if (priv->hw_params.sku & EEPROM_SKU_CAP_11N_ENABLE)
 164                 flush_cmd.fifo_control |= IWL_AGG_TX_QUEUE_MSK;
 165
 166         IWL_DEBUG_INFO(priv, "fifo queue control: 0X%x\n",
 167                        flush_cmd.fifo_control);
 168         flush_cmd.flush_control = cpu_to_le16(flush_control);
 169
 170         return iwl_dvm_send_cmd(priv, &cmd);
 171 }
 172
 173 void iwlagn_dev_txfifo_flush(struct iwl_priv *priv, u16 flush_control)
 174 {
 175         mutex_lock(&priv->mutex);
 176         ieee80211_stop_queues(priv->hw);
 177         if (iwlagn_txfifo_flush(priv, IWL_DROP_ALL)) {
 178                 IWL_ERR(priv, "flush request fail\n");
 179                 goto done;
 180         }
 181         IWL_DEBUG_INFO(priv, "wait transmit/flush all frames\n");
 182         iwl_trans_wait_tx_queue_empty(priv->trans);
 183 done:
 184         ieee80211_wake_queues(priv->hw);
 185         mutex_unlock(&priv->mutex);
 186 }
 187
 188 /*
 189  * BT coex
 190  */
 191 /* Notmal TDM */
 192 static const __le32 iwlagn_def_3w_lookup[IWLAGN_BT_DECISION_LUT_SIZE] = {
 193         cpu_to_le32(0xaaaaaaaa),
 194         cpu_to_le32(0xaaaaaaaa),
 195         cpu_to_le32(0xaeaaaaaa),
 196         cpu_to_le32(0xaaaaaaaa),
 197         cpu_to_le32(0xcc00ff28),
 198         cpu_to_le32(0x0000aaaa),
 199         cpu_to_le32(0xcc00aaaa),
 200         cpu_to_le32(0x0000aaaa),
 201         cpu_to_le32(0xc0004000),
 202         cpu_to_le32(0x00004000),
 203         cpu_to_le32(0xf0005000),
 204         cpu_to_le32(0xf0005000),
 205 };
 206
 207
 208 /* Loose Coex */
 209 static const __le32 iwlagn_loose_lookup[IWLAGN_BT_DECISION_LUT_SIZE] = {
 210         cpu_to_le32(0xaaaaaaaa),
 211         cpu_to_le32(0xaaaaaaaa),
 212         cpu_to_le32(0xaeaaaaaa),
 213         cpu_to_le32(0xaaaaaaaa),
 214         cpu_to_le32(0xcc00ff28),
 215         cpu_to_le32(0x0000aaaa),
 216         cpu_to_le32(0xcc00aaaa),
 217         cpu_to_le32(0x0000aaaa),
 218         cpu_to_le32(0x00000000),
 219         cpu_to_le32(0x00000000),
 220         cpu_to_le32(0xf0005000),
 221         cpu_to_le32(0xf0005000),
 222 };
 223
 224 /* Full concurrency */
 225 static const __le32 iwlagn_concurrent_lookup[IWLAGN_BT_DECISION_LUT_SIZE] = {
 226         cpu_to_le32(0xaaaaaaaa),
 227         cpu_to_le32(0xaaaaaaaa),
 228         cpu_to_le32(0xaaaaaaaa),
 229         cpu_to_le32(0xaaaaaaaa),
 230         cpu_to_le32(0xaaaaaaaa),
 231         cpu_to_le32(0xaaaaaaaa),
 232         cpu_to_le32(0xaaaaaaaa),
 233         cpu_to_le32(0xaaaaaaaa),
 234         cpu_to_le32(0x00000000),
 235         cpu_to_le32(0x00000000),
 236         cpu_to_le32(0x00000000),
 237         cpu_to_le32(0x00000000),
 238 };
 239
 240 void iwlagn_send_advance_bt_config(struct iwl_priv *priv)
 241 {
 242         struct iwl_basic_bt_cmd basic = {
 243                 .max_kill = IWLAGN_BT_MAX_KILL_DEFAULT,
 244                 .bt3_timer_t7_value = IWLAGN_BT3_T7_DEFAULT,
 245                 .bt3_prio_sample_time = IWLAGN_BT3_PRIO_SAMPLE_DEFAULT,
 246                 .bt3_timer_t2_value = IWLAGN_BT3_T2_DEFAULT,
 247         };
 248         struct iwl_bt_cmd_v1 bt_cmd_v1;
 249         struct iwl_bt_cmd_v2 bt_cmd_v2;
 250         int ret;
 251
 252         BUILD_BUG_ON(sizeof(iwlagn_def_3w_lookup) !=
 253                         sizeof(basic.bt3_lookup_table));
 254
 255         if (priv->cfg->bt_params) {
 256                 /*
 257                  * newer generation of devices (2000 series and newer)
 258                  * use the version 2 of the bt command
 259                  * we need to make sure sending the host command
 260                  * with correct data structure to avoid uCode assert
 261                  */
 262                 if (priv->cfg->bt_params->bt_session_2) {
 263                         bt_cmd_v2.prio_boost = cpu_to_le32(
 264                                 priv->cfg->bt_params->bt_prio_boost);
 265                         bt_cmd_v2.tx_prio_boost = 0;
 266                         bt_cmd_v2.rx_prio_boost = 0;
 267                 } else {
 268                         bt_cmd_v1.prio_boost =
 269                                 priv->cfg->bt_params->bt_prio_boost;
 270                         bt_cmd_v1.tx_prio_boost = 0;
 271                         bt_cmd_v1.rx_prio_boost = 0;
 272                 }
 273         } else {
 274                 IWL_ERR(priv, "failed to construct BT Coex Config\n");
 275                 return;
 276         }
 277
 278         /*
 279          * Possible situations when BT needs to take over for receive,
 280          * at the same time where STA needs to response to AP's frame(s),
 281          * reduce the tx power of the required response frames, by that,
 282          * allow the concurrent BT receive & WiFi transmit
 283          * (BT - ANT A, WiFi -ANT B), without interference to one another
 284          *
 285          * Reduced tx power apply to control frames only (ACK/Back/CTS)
 286          * when indicated by the BT config command
 287          */
 288         basic.kill_ack_mask = priv->kill_ack_mask;
 289         basic.kill_cts_mask = priv->kill_cts_mask;
 290         if (priv->reduced_txpower)
 291                 basic.reduce_txpower = IWLAGN_BT_REDUCED_TX_PWR;
 292         basic.valid = priv->bt_valid;
 293
 294         /*
 295          * Configure BT coex mode to "no coexistence" when the
 296          * user disabled BT coexistence, we have no interface
 297          * (might be in monitor mode), or the interface is in
 298          * IBSS mode (no proper uCode support for coex then).
 299          */
 300         if (!iwlwifi_mod_params.bt_coex_active ||
 301             priv->iw_mode == NL80211_IFTYPE_ADHOC) {
 302                 basic.flags = IWLAGN_BT_FLAG_COEX_MODE_DISABLED;
 303         } else {
 304                 basic.flags = IWLAGN_BT_FLAG_COEX_MODE_3W <<
 305                                         IWLAGN_BT_FLAG_COEX_MODE_SHIFT;
 306
 307                 if (!priv->bt_enable_pspoll)
 308                         basic.flags |= IWLAGN_BT_FLAG_SYNC_2_BT_DISABLE;
 309                 else
 310                         basic.flags &= ~IWLAGN_BT_FLAG_SYNC_2_BT_DISABLE;
 311
 312                 if (priv->bt_ch_announce)
 313                         basic.flags |= IWLAGN_BT_FLAG_CHANNEL_INHIBITION;
 314                 IWL_DEBUG_COEX(priv, "BT coex flag: 0X%x\n", basic.flags);
 315         }
 316         priv->bt_enable_flag = basic.flags;
 317         if (priv->bt_full_concurrent)
 318                 memcpy(basic.bt3_lookup_table, iwlagn_concurrent_lookup,
 319                         sizeof(iwlagn_concurrent_lookup));
 320         else
 321                 memcpy(basic.bt3_lookup_table, iwlagn_def_3w_lookup,
 322                         sizeof(iwlagn_def_3w_lookup));
 323
 324         IWL_DEBUG_COEX(priv, "BT coex %s in %s mode\n",
 325                        basic.flags ? "active" : "disabled",
 326                        priv->bt_full_concurrent ?
 327                        "full concurrency" : "3-wire");
 328
 329         if (priv->cfg->bt_params->bt_session_2) {
 330                 memcpy(&bt_cmd_v2.basic, &basic,
 331                         sizeof(basic));
 332                 ret = iwl_dvm_send_cmd_pdu(priv, REPLY_BT_CONFIG,
 333                         CMD_SYNC, sizeof(bt_cmd_v2), &bt_cmd_v2);
 334         } else {
 335                 memcpy(&bt_cmd_v1.basic, &basic,
 336                         sizeof(basic));
 337                 ret = iwl_dvm_send_cmd_pdu(priv, REPLY_BT_CONFIG,
 338                         CMD_SYNC, sizeof(bt_cmd_v1), &bt_cmd_v1);
 339         }
 340         if (ret)
 341                 IWL_ERR(priv, "failed to send BT Coex Config\n");
 342
 343 }
 344
 345 void iwlagn_bt_adjust_rssi_monitor(struct iwl_priv *priv, bool rssi_ena)
 346 {
 347         struct iwl_rxon_context *ctx, *found_ctx = NULL;
 348         bool found_ap = false;
 349
 350         lockdep_assert_held(&priv->mutex);
 351
 352         /* Check whether AP or GO mode is active. */
 353         if (rssi_ena) {
 354                 for_each_context(priv, ctx) {
 355                         if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_AP &&
 356                             iwl_is_associated_ctx(ctx)) {
 357                                 found_ap = true;
 358                                 break;
 359                         }
 360                 }
 361         }
 362
 363         /*
 364          * If disable was received or If GO/AP mode, disable RSSI
 365          * measurements.
 366          */
 367         if (!rssi_ena || found_ap) {
 368                 if (priv->cur_rssi_ctx) {
 369                         ctx = priv->cur_rssi_ctx;
 370                         ieee80211_disable_rssi_reports(ctx->vif);
 371                         priv->cur_rssi_ctx = NULL;
 372                 }
 373                 return;
 374         }
 375
 376         /*
 377          * If rssi measurements need to be enabled, consider all cases now.
 378          * Figure out how many contexts are active.
 379          */
 380         for_each_context(priv, ctx) {
 381                 if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_STATION &&
 382                     iwl_is_associated_ctx(ctx)) {
 383                         found_ctx = ctx;
 384                         break;
 385                 }
 386         }
 387
 388         /*
 389          * rssi monitor already enabled for the correct interface...nothing
 390          * to do.
 391          */
 392         if (found_ctx == priv->cur_rssi_ctx)
 393                 return;
 394
 395         /*
 396          * Figure out if rssi monitor is currently enabled, and needs
 397          * to be changed. If rssi monitor is already enabled, disable
 398          * it first else just enable rssi measurements on the
 399          * interface found above.
 400          */
 401         if (priv->cur_rssi_ctx) {
 402                 ctx = priv->cur_rssi_ctx;
 403                 if (ctx->vif)
 404                         ieee80211_disable_rssi_reports(ctx->vif);
 405         }
 406
 407         priv->cur_rssi_ctx = found_ctx;
 408
 409         if (!found_ctx)
 410                 return;
 411
 412         ieee80211_enable_rssi_reports(found_ctx->vif,
 413                         IWLAGN_BT_PSP_MIN_RSSI_THRESHOLD,
 414                         IWLAGN_BT_PSP_MAX_RSSI_THRESHOLD);
 415 }
 416
 417 static bool iwlagn_bt_traffic_is_sco(struct iwl_bt_uart_msg *uart_msg)
 418 {
 419         return BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3 >>
 420                         BT_UART_MSG_FRAME3SCOESCO_POS;
 421 }
 422
 423 static void iwlagn_bt_traffic_change_work(struct work_struct *work)
 424 {
 425         struct iwl_priv *priv =
 426                 container_of(work, struct iwl_priv, bt_traffic_change_work);
 427         struct iwl_rxon_context *ctx;
 428         int smps_request = -1;
 429
 430         if (priv->bt_enable_flag == IWLAGN_BT_FLAG_COEX_MODE_DISABLED) {
 431                 /* bt coex disabled */
 432                 return;
 433         }
 434
 435         /*
 436          * Note: bt_traffic_load can be overridden by scan complete and
 437          * coex profile notifications. Ignore that since only bad consequence
 438          * can be not matching debug print with actual state.
 439          */
 440         IWL_DEBUG_COEX(priv, "BT traffic load changes: %d\n",
 441                        priv->bt_traffic_load);
 442
 443         switch (priv->bt_traffic_load) {
 444         case IWL_BT_COEX_TRAFFIC_LOAD_NONE:
 445                 if (priv->bt_status)
 446                         smps_request = IEEE80211_SMPS_DYNAMIC;
 447                 else
 448                         smps_request = IEEE80211_SMPS_AUTOMATIC;
 449                 break;
 450         case IWL_BT_COEX_TRAFFIC_LOAD_LOW:
 451                 smps_request = IEEE80211_SMPS_DYNAMIC;
 452                 break;
 453         case IWL_BT_COEX_TRAFFIC_LOAD_HIGH:
 454         case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS:
 455                 smps_request = IEEE80211_SMPS_STATIC;
 456                 break;
 457         default:
 458                 IWL_ERR(priv, "Invalid BT traffic load: %d\n",
 459                         priv->bt_traffic_load);
 460                 break;
 461         }
 462
 463         mutex_lock(&priv->mutex);
 464
 465         /*
 466          * We can not send command to firmware while scanning. When the scan
 467          * complete we will schedule this work again. We do check with mutex
 468          * locked to prevent new scan request to arrive. We do not check
 469          * STATUS_SCANNING to avoid race when queue_work two times from
 470          * different notifications, but quit and not perform any work at all.
 471          */
 472         if (test_bit(STATUS_SCAN_HW, &priv->status))
 473                 goto out;
 474
 475         iwl_update_chain_flags(priv);
 476
 477         if (smps_request != -1) {
 478                 priv->current_ht_config.smps = smps_request;
 479                 for_each_context(priv, ctx) {
 480                         if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_STATION)
 481                                 ieee80211_request_smps(ctx->vif, smps_request);
 482                 }
 483         }
 484
 485         /*
 486          * Dynamic PS poll related functionality. Adjust RSSI measurements if
 487          * necessary.
 488          */
 489         iwlagn_bt_coex_rssi_monitor(priv);
 490 out:
 491         mutex_unlock(&priv->mutex);
 492 }
 493
 494 /*
 495  * If BT sco traffic, and RSSI monitor is enabled, move measurements to the
 496  * correct interface or disable it if this is the last interface to be
 497  * removed.
 498  */
 499 void iwlagn_bt_coex_rssi_monitor(struct iwl_priv *priv)
 500 {
 501         if (priv->bt_is_sco &&
 502             priv->bt_traffic_load == IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS)
 503                 iwlagn_bt_adjust_rssi_monitor(priv, true);
 504         else
 505                 iwlagn_bt_adjust_rssi_monitor(priv, false);
 506 }
 507
 508 static void iwlagn_print_uartmsg(struct iwl_priv *priv,
 509                                 struct iwl_bt_uart_msg *uart_msg)
 510 {
 511         IWL_DEBUG_COEX(priv, "Message Type = 0x%X, SSN = 0x%X, "
 512                         "Update Req = 0x%X\n",
 513                 (BT_UART_MSG_FRAME1MSGTYPE_MSK & uart_msg->frame1) >>
 514                         BT_UART_MSG_FRAME1MSGTYPE_POS,
 515                 (BT_UART_MSG_FRAME1SSN_MSK & uart_msg->frame1) >>
 516                         BT_UART_MSG_FRAME1SSN_POS,
 517                 (BT_UART_MSG_FRAME1UPDATEREQ_MSK & uart_msg->frame1) >>
 518                         BT_UART_MSG_FRAME1UPDATEREQ_POS);
 519
 520         IWL_DEBUG_COEX(priv, "Open connections = 0x%X, Traffic load = 0x%X, "
 521                         "Chl_SeqN = 0x%X, In band = 0x%X\n",
 522                 (BT_UART_MSG_FRAME2OPENCONNECTIONS_MSK & uart_msg->frame2) >>
 523                         BT_UART_MSG_FRAME2OPENCONNECTIONS_POS,
 524                 (BT_UART_MSG_FRAME2TRAFFICLOAD_MSK & uart_msg->frame2) >>
 525                         BT_UART_MSG_FRAME2TRAFFICLOAD_POS,
 526                 (BT_UART_MSG_FRAME2CHLSEQN_MSK & uart_msg->frame2) >>
 527                         BT_UART_MSG_FRAME2CHLSEQN_POS,
 528                 (BT_UART_MSG_FRAME2INBAND_MSK & uart_msg->frame2) >>
 529                         BT_UART_MSG_FRAME2INBAND_POS);
 530
 531         IWL_DEBUG_COEX(priv, "SCO/eSCO = 0x%X, Sniff = 0x%X, A2DP = 0x%X, "
 532                         "ACL = 0x%X, Master = 0x%X, OBEX = 0x%X\n",
 533                 (BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3) >>
 534                         BT_UART_MSG_FRAME3SCOESCO_POS,
 535                 (BT_UART_MSG_FRAME3SNIFF_MSK & uart_msg->frame3) >>
 536                         BT_UART_MSG_FRAME3SNIFF_POS,
 537                 (BT_UART_MSG_FRAME3A2DP_MSK & uart_msg->frame3) >>
 538                         BT_UART_MSG_FRAME3A2DP_POS,
 539                 (BT_UART_MSG_FRAME3ACL_MSK & uart_msg->frame3) >>
 540                         BT_UART_MSG_FRAME3ACL_POS,
 541                 (BT_UART_MSG_FRAME3MASTER_MSK & uart_msg->frame3) >>
 542                         BT_UART_MSG_FRAME3MASTER_POS,
 543                 (BT_UART_MSG_FRAME3OBEX_MSK & uart_msg->frame3) >>
 544                         BT_UART_MSG_FRAME3OBEX_POS);
 545
 546         IWL_DEBUG_COEX(priv, "Idle duration = 0x%X\n",
 547                 (BT_UART_MSG_FRAME4IDLEDURATION_MSK & uart_msg->frame4) >>
 548                         BT_UART_MSG_FRAME4IDLEDURATION_POS);
 549
 550         IWL_DEBUG_COEX(priv, "Tx Activity = 0x%X, Rx Activity = 0x%X, "
 551                         "eSCO Retransmissions = 0x%X\n",
 552                 (BT_UART_MSG_FRAME5TXACTIVITY_MSK & uart_msg->frame5) >>
 553                         BT_UART_MSG_FRAME5TXACTIVITY_POS,
 554                 (BT_UART_MSG_FRAME5RXACTIVITY_MSK & uart_msg->frame5) >>
 555                         BT_UART_MSG_FRAME5RXACTIVITY_POS,
 556                 (BT_UART_MSG_FRAME5ESCORETRANSMIT_MSK & uart_msg->frame5) >>
 557                         BT_UART_MSG_FRAME5ESCORETRANSMIT_POS);
 558
 559         IWL_DEBUG_COEX(priv, "Sniff Interval = 0x%X, Discoverable = 0x%X\n",
 560                 (BT_UART_MSG_FRAME6SNIFFINTERVAL_MSK & uart_msg->frame6) >>
 561                         BT_UART_MSG_FRAME6SNIFFINTERVAL_POS,
 562                 (BT_UART_MSG_FRAME6DISCOVERABLE_MSK & uart_msg->frame6) >>
 563                         BT_UART_MSG_FRAME6DISCOVERABLE_POS);
 564
 565         IWL_DEBUG_COEX(priv, "Sniff Activity = 0x%X, Page = "
 566                         "0x%X, Inquiry = 0x%X, Connectable = 0x%X\n",
 567                 (BT_UART_MSG_FRAME7SNIFFACTIVITY_MSK & uart_msg->frame7) >>
 568                         BT_UART_MSG_FRAME7SNIFFACTIVITY_POS,
 569                 (BT_UART_MSG_FRAME7PAGE_MSK & uart_msg->frame7) >>
 570                         BT_UART_MSG_FRAME7PAGE_POS,
 571                 (BT_UART_MSG_FRAME7INQUIRY_MSK & uart_msg->frame7) >>
 572                         BT_UART_MSG_FRAME7INQUIRY_POS,
 573                 (BT_UART_MSG_FRAME7CONNECTABLE_MSK & uart_msg->frame7) >>
 574                         BT_UART_MSG_FRAME7CONNECTABLE_POS);
 575 }
 576
 577 static bool iwlagn_set_kill_msk(struct iwl_priv *priv,
 578                                 struct iwl_bt_uart_msg *uart_msg)
 579 {
 580         bool need_update = false;
 581         u8 kill_msk = IWL_BT_KILL_REDUCE;
 582         static const __le32 bt_kill_ack_msg[3] = {
 583                 IWLAGN_BT_KILL_ACK_MASK_DEFAULT,
 584                 IWLAGN_BT_KILL_ACK_CTS_MASK_SCO,
 585                 IWLAGN_BT_KILL_ACK_CTS_MASK_REDUCE};
 586         static const __le32 bt_kill_cts_msg[3] = {
 587                 IWLAGN_BT_KILL_CTS_MASK_DEFAULT,
 588                 IWLAGN_BT_KILL_ACK_CTS_MASK_SCO,
 589                 IWLAGN_BT_KILL_ACK_CTS_MASK_REDUCE};
 590
 591         if (!priv->reduced_txpower)
 592                 kill_msk = (BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3)
 593                         ? IWL_BT_KILL_OVERRIDE : IWL_BT_KILL_DEFAULT;
 594         if (priv->kill_ack_mask != bt_kill_ack_msg[kill_msk] ||
 595             priv->kill_cts_mask != bt_kill_cts_msg[kill_msk]) {
 596                 priv->bt_valid |= IWLAGN_BT_VALID_KILL_ACK_MASK;
 597                 priv->kill_ack_mask = bt_kill_ack_msg[kill_msk];
 598                 priv->bt_valid |= IWLAGN_BT_VALID_KILL_CTS_MASK;
 599                 priv->kill_cts_mask = bt_kill_cts_msg[kill_msk];
 600                 need_update = true;
 601         }
 602         return need_update;
 603 }
 604
 605 /*
 606  * Upon RSSI changes, sends a bt config command with following changes
 607  *  1. enable/disable "reduced control frames tx power
 608  *  2. update the "kill)ack_mask" and "kill_cts_mask"
 609  *
 610  * If "reduced tx power" is enabled, uCode shall
 611  *  1. ACK/Back/CTS rate shall reduced to 6Mbps
 612  *  2. not use duplciate 20/40MHz mode
 613  */
 614 static bool iwlagn_fill_txpower_mode(struct iwl_priv *priv,
 615                                 struct iwl_bt_uart_msg *uart_msg)
 616 {
 617         bool need_update = false;
 618         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
 619         int ave_rssi;
 620
 621         if (!ctx->vif || (ctx->vif->type != NL80211_IFTYPE_STATION)) {
 622                 IWL_DEBUG_INFO(priv, "BSS ctx not active or not in sta mode\n");
 623                 return false;
 624         }
 625
 626         ave_rssi = ieee80211_ave_rssi(ctx->vif);
 627         if (!ave_rssi) {
 628                 /* no rssi data, no changes to reduce tx power */
 629                 IWL_DEBUG_COEX(priv, "no rssi data available\n");
 630                 return need_update;
 631         }
 632         if (!priv->reduced_txpower &&
 633             !iwl_is_associated(priv, IWL_RXON_CTX_PAN) &&
 634             (ave_rssi > BT_ENABLE_REDUCED_TXPOWER_THRESHOLD) &&
 635             (uart_msg->frame3 & (BT_UART_MSG_FRAME3ACL_MSK |
 636             BT_UART_MSG_FRAME3OBEX_MSK)) &&
 637             !(uart_msg->frame3 & (BT_UART_MSG_FRAME3SCOESCO_MSK |
 638             BT_UART_MSG_FRAME3SNIFF_MSK | BT_UART_MSG_FRAME3A2DP_MSK))) {
 639                 /* enabling reduced tx power */
 640                 priv->reduced_txpower = true;
 641                 priv->bt_valid |= IWLAGN_BT_VALID_REDUCED_TX_PWR;
 642                 need_update = true;
 643         } else if (priv->reduced_txpower &&
 644                    (iwl_is_associated(priv, IWL_RXON_CTX_PAN) ||
 645                    (ave_rssi < BT_DISABLE_REDUCED_TXPOWER_THRESHOLD) ||
 646                    (uart_msg->frame3 & (BT_UART_MSG_FRAME3SCOESCO_MSK |
 647                    BT_UART_MSG_FRAME3SNIFF_MSK | BT_UART_MSG_FRAME3A2DP_MSK)) ||
 648                    !(uart_msg->frame3 & (BT_UART_MSG_FRAME3ACL_MSK |
 649                    BT_UART_MSG_FRAME3OBEX_MSK)))) {
 650                 /* disable reduced tx power */
 651                 priv->reduced_txpower = false;
 652                 priv->bt_valid |= IWLAGN_BT_VALID_REDUCED_TX_PWR;
 653                 need_update = true;
 654         }
 655
 656         return need_update;
 657 }
 658
 659 int iwlagn_bt_coex_profile_notif(struct iwl_priv *priv,
 660                                   struct iwl_rx_cmd_buffer *rxb,
 661                                   struct iwl_device_cmd *cmd)
 662 {
 663         struct iwl_rx_packet *pkt = rxb_addr(rxb);
 664         struct iwl_bt_coex_profile_notif *coex = (void *)pkt->data;
 665         struct iwl_bt_uart_msg *uart_msg = &coex->last_bt_uart_msg;
 666
 667         if (priv->bt_enable_flag == IWLAGN_BT_FLAG_COEX_MODE_DISABLED) {
 668                 /* bt coex disabled */
 669                 return 0;
 670         }
 671
 672         IWL_DEBUG_COEX(priv, "BT Coex notification:\n");
 673         IWL_DEBUG_COEX(priv, "    status: %d\n", coex->bt_status);
 674         IWL_DEBUG_COEX(priv, "    traffic load: %d\n", coex->bt_traffic_load);
 675         IWL_DEBUG_COEX(priv, "    CI compliance: %d\n",
 676                         coex->bt_ci_compliance);
 677         iwlagn_print_uartmsg(priv, uart_msg);
 678
 679         priv->last_bt_traffic_load = priv->bt_traffic_load;
 680         priv->bt_is_sco = iwlagn_bt_traffic_is_sco(uart_msg);
 681
 682         if (priv->iw_mode != NL80211_IFTYPE_ADHOC) {
 683                 if (priv->bt_status != coex->bt_status ||
 684                     priv->last_bt_traffic_load != coex->bt_traffic_load) {
 685                         if (coex->bt_status) {
 686                                 /* BT on */
 687                                 if (!priv->bt_ch_announce)
 688                                         priv->bt_traffic_load =
 689                                                 IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
 690                                 else
 691                                         priv->bt_traffic_load =
 692                                                 coex->bt_traffic_load;
 693                         } else {
 694                                 /* BT off */
 695                                 priv->bt_traffic_load =
 696                                         IWL_BT_COEX_TRAFFIC_LOAD_NONE;
 697                         }
 698                         priv->bt_status = coex->bt_status;
 699                         queue_work(priv->workqueue,
 700                                    &priv->bt_traffic_change_work);
 701                 }
 702         }
 703
 704         /* schedule to send runtime bt_config */
 705         /* check reduce power before change ack/cts kill mask */
 706         if (iwlagn_fill_txpower_mode(priv, uart_msg) ||
 707             iwlagn_set_kill_msk(priv, uart_msg))
 708                 queue_work(priv->workqueue, &priv->bt_runtime_config);
 709
 710
 711         /* FIXME: based on notification, adjust the prio_boost */
 712
 713         priv->bt_ci_compliance = coex->bt_ci_compliance;
 714         return 0;
 715 }
 716
 717 void iwlagn_bt_rx_handler_setup(struct iwl_priv *priv)
 718 {
 719         priv->rx_handlers[REPLY_BT_COEX_PROFILE_NOTIF] =
 720                 iwlagn_bt_coex_profile_notif;
 721 }
 722
 723 void iwlagn_bt_setup_deferred_work(struct iwl_priv *priv)
 724 {
 725         INIT_WORK(&priv->bt_traffic_change_work,
 726                   iwlagn_bt_traffic_change_work);
 727 }
 728
 729 void iwlagn_bt_cancel_deferred_work(struct iwl_priv *priv)
 730 {
 731         cancel_work_sync(&priv->bt_traffic_change_work);
 732 }
 733
 734 static bool is_single_rx_stream(struct iwl_priv *priv)
 735 {
 736         return priv->current_ht_config.smps == IEEE80211_SMPS_STATIC ||
 737                priv->current_ht_config.single_chain_sufficient;
 738 }
 739
 740 #define IWL_NUM_RX_CHAINS_MULTIPLE      3
 741 #define IWL_NUM_RX_CHAINS_SINGLE        2
 742 #define IWL_NUM_IDLE_CHAINS_DUAL        2
 743 #define IWL_NUM_IDLE_CHAINS_SINGLE      1
 744
 745 /*
 746  * Determine how many receiver/antenna chains to use.
 747  *
 748  * More provides better reception via diversity.  Fewer saves power
 749  * at the expense of throughput, but only when not in powersave to
 750  * start with.
 751  *
 752  * MIMO (dual stream) requires at least 2, but works better with 3.
 753  * This does not determine *which* chains to use, just how many.
 754  */
 755 static int iwl_get_active_rx_chain_count(struct iwl_priv *priv)
 756 {
 757         if (priv->cfg->bt_params &&
 758             priv->cfg->bt_params->advanced_bt_coexist &&
 759             (priv->bt_full_concurrent ||
 760              priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)) {
 761                 /*
 762                  * only use chain 'A' in bt high traffic load or
 763                  * full concurrency mode
 764                  */
 765                 return IWL_NUM_RX_CHAINS_SINGLE;
 766         }
 767         /* # of Rx chains to use when expecting MIMO. */
 768         if (is_single_rx_stream(priv))
 769                 return IWL_NUM_RX_CHAINS_SINGLE;
 770         else
 771                 return IWL_NUM_RX_CHAINS_MULTIPLE;
 772 }
 773
 774 /*
 775  * When we are in power saving mode, unless device support spatial
 776  * multiplexing power save, use the active count for rx chain count.
 777  */
 778 static int iwl_get_idle_rx_chain_count(struct iwl_priv *priv, int active_cnt)
 779 {
 780         /* # Rx chains when idling, depending on SMPS mode */
 781         switch (priv->current_ht_config.smps) {
 782         case IEEE80211_SMPS_STATIC:
 783         case IEEE80211_SMPS_DYNAMIC:
 784                 return IWL_NUM_IDLE_CHAINS_SINGLE;
 785         case IEEE80211_SMPS_AUTOMATIC:
 786         case IEEE80211_SMPS_OFF:
 787                 return active_cnt;
 788         default:
 789                 WARN(1, "invalid SMPS mode %d",
 790                      priv->current_ht_config.smps);
 791                 return active_cnt;
 792         }
 793 }
 794
 795 /* up to 4 chains */
 796 static u8 iwl_count_chain_bitmap(u32 chain_bitmap)
 797 {
 798         u8 res;
 799         res = (chain_bitmap & BIT(0)) >> 0;
 800         res += (chain_bitmap & BIT(1)) >> 1;
 801         res += (chain_bitmap & BIT(2)) >> 2;
 802         res += (chain_bitmap & BIT(3)) >> 3;
 803         return res;
 804 }
 805
 806 /**
 807  * iwlagn_set_rxon_chain - Set up Rx chain usage in "staging" RXON image
 808  *
 809  * Selects how many and which Rx receivers/antennas/chains to use.
 810  * This should not be used for scan command ... it puts data in wrong place.
 811  */
 812 void iwlagn_set_rxon_chain(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
 813 {
 814         bool is_single = is_single_rx_stream(priv);
 815         bool is_cam = !test_bit(STATUS_POWER_PMI, &priv->status);
 816         u8 idle_rx_cnt, active_rx_cnt, valid_rx_cnt;
 817         u32 active_chains;
 818         u16 rx_chain;
 819
 820         /* Tell uCode which antennas are actually connected.
 821          * Before first association, we assume all antennas are connected.
 822          * Just after first association, iwl_chain_noise_calibration()
 823          *    checks which antennas actually *are* connected. */
 824         if (priv->chain_noise_data.active_chains)
 825                 active_chains = priv->chain_noise_data.active_chains;
 826         else
 827                 active_chains = priv->eeprom_data->valid_rx_ant;
 828
 829         if (priv->cfg->bt_params &&
 830             priv->cfg->bt_params->advanced_bt_coexist &&
 831             (priv->bt_full_concurrent ||
 832              priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)) {
 833                 /*
 834                  * only use chain 'A' in bt high traffic load or
 835                  * full concurrency mode
 836                  */
 837                 active_chains = first_antenna(active_chains);
 838         }
 839
 840         rx_chain = active_chains << RXON_RX_CHAIN_VALID_POS;
 841
 842         /* How many receivers should we use? */
 843         active_rx_cnt = iwl_get_active_rx_chain_count(priv);
 844         idle_rx_cnt = iwl_get_idle_rx_chain_count(priv, active_rx_cnt);
 845
 846
 847         /* correct rx chain count according hw settings
 848          * and chain noise calibration
 849          */
 850         valid_rx_cnt = iwl_count_chain_bitmap(active_chains);
 851         if (valid_rx_cnt < active_rx_cnt)
 852                 active_rx_cnt = valid_rx_cnt;
 853
 854         if (valid_rx_cnt < idle_rx_cnt)
 855                 idle_rx_cnt = valid_rx_cnt;
 856
 857         rx_chain |= active_rx_cnt << RXON_RX_CHAIN_MIMO_CNT_POS;
 858         rx_chain |= idle_rx_cnt  << RXON_RX_CHAIN_CNT_POS;
 859
 860         ctx->staging.rx_chain = cpu_to_le16(rx_chain);
 861
 862         if (!is_single && (active_rx_cnt >= IWL_NUM_RX_CHAINS_SINGLE) && is_cam)
 863                 ctx->staging.rx_chain |= RXON_RX_CHAIN_MIMO_FORCE_MSK;
 864         else
 865                 ctx->staging.rx_chain &= ~RXON_RX_CHAIN_MIMO_FORCE_MSK;
 866
 867         IWL_DEBUG_ASSOC(priv, "rx_chain=0x%X active=%d idle=%d\n",
 868                         ctx->staging.rx_chain,
 869                         active_rx_cnt, idle_rx_cnt);
 870
 871         WARN_ON(active_rx_cnt == 0 || idle_rx_cnt == 0 ||
 872                 active_rx_cnt < idle_rx_cnt);
 873 }
 874
 875 u8 iwl_toggle_tx_ant(struct iwl_priv *priv, u8 ant, u8 valid)
 876 {
 877         int i;
 878         u8 ind = ant;
 879
 880         if (priv->band == IEEE80211_BAND_2GHZ &&
 881             priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)
 882                 return 0;
 883
 884         for (i = 0; i < RATE_ANT_NUM - 1; i++) {
 885                 ind = (ind + 1) < RATE_ANT_NUM ?  ind + 1 : 0;
 886                 if (valid & BIT(ind))
 887                         return ind;
 888         }
 889         return ant;
 890 }
 891
 892 #ifdef CONFIG_PM_SLEEP
 893 static void iwlagn_convert_p1k(u16 *p1k, __le16 *out)
 894 {
 895         int i;
 896
 897         for (i = 0; i < IWLAGN_P1K_SIZE; i++)
 898                 out[i] = cpu_to_le16(p1k[i]);
 899 }
 900
 901 struct wowlan_key_data {
 902         struct iwl_rxon_context *ctx;
 903         struct iwlagn_wowlan_rsc_tsc_params_cmd *rsc_tsc;
 904         struct iwlagn_wowlan_tkip_params_cmd *tkip;
 905         const u8 *bssid;
 906         bool error, use_rsc_tsc, use_tkip;
 907 };
 908
 909
 910 static void iwlagn_wowlan_program_keys(struct ieee80211_hw *hw,
 911                                struct ieee80211_vif *vif,
 912                                struct ieee80211_sta *sta,
 913                                struct ieee80211_key_conf *key,
 914                                void *_data)
 915 {
 916         struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
 917         struct wowlan_key_data *data = _data;
 918         struct iwl_rxon_context *ctx = data->ctx;
 919         struct aes_sc *aes_sc, *aes_tx_sc = NULL;
 920         struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL;
 921         struct iwlagn_p1k_cache *rx_p1ks;
 922         u8 *rx_mic_key;
 923         struct ieee80211_key_seq seq;
 924         u32 cur_rx_iv32 = 0;
 925         u16 p1k[IWLAGN_P1K_SIZE];
 926         int ret, i;
 927
 928         mutex_lock(&priv->mutex);
 929
 930         if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
 931              key->cipher == WLAN_CIPHER_SUITE_WEP104) &&
 932              !sta && !ctx->key_mapping_keys)
 933                 ret = iwl_set_default_wep_key(priv, ctx, key);
 934         else
 935                 ret = iwl_set_dynamic_key(priv, ctx, key, sta);
 936
 937         if (ret) {
 938                 IWL_ERR(priv, "Error setting key during suspend!\n");
 939                 data->error = true;
 940         }
 941
 942         switch (key->cipher) {
 943         case WLAN_CIPHER_SUITE_TKIP:
 944                 if (sta) {
 945                         tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.unicast_rsc;
 946                         tkip_tx_sc = &data->rsc_tsc->all_tsc_rsc.tkip.tsc;
 947
 948                         rx_p1ks = data->tkip->rx_uni;
 949
 950                         ieee80211_get_key_tx_seq(key, &seq);
 951                         tkip_tx_sc->iv16 = cpu_to_le16(seq.tkip.iv16);
 952                         tkip_tx_sc->iv32 = cpu_to_le32(seq.tkip.iv32);
 953
 954                         ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
 955                         iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
 956
 957                         memcpy(data->tkip->mic_keys.tx,
 958                                &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY],
 959                                IWLAGN_MIC_KEY_SIZE);
 960
 961                         rx_mic_key = data->tkip->mic_keys.rx_unicast;
 962                 } else {
 963                         tkip_sc =
 964                                 data->rsc_tsc->all_tsc_rsc.tkip.multicast_rsc;
 965                         rx_p1ks = data->tkip->rx_multi;
 966                         rx_mic_key = data->tkip->mic_keys.rx_mcast;
 967                 }
 968
 969                 /*
 970                  * For non-QoS this relies on the fact that both the uCode and
 971                  * mac80211 use TID 0 (as they need to to avoid replay attacks)
 972                  * for checking the IV in the frames.
 973                  */
 974                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
 975                         ieee80211_get_key_rx_seq(key, i, &seq);
 976                         tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16);
 977                         tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32);
 978                         /* wrapping isn't allowed, AP must rekey */
 979                         if (seq.tkip.iv32 > cur_rx_iv32)
 980                                 cur_rx_iv32 = seq.tkip.iv32;
 981                 }
 982
 983                 ieee80211_get_tkip_rx_p1k(key, data->bssid, cur_rx_iv32, p1k);
 984                 iwlagn_convert_p1k(p1k, rx_p1ks[0].p1k);
 985                 ieee80211_get_tkip_rx_p1k(key, data->bssid,
 986                                           cur_rx_iv32 + 1, p1k);
 987                 iwlagn_convert_p1k(p1k, rx_p1ks[1].p1k);
 988
 989                 memcpy(rx_mic_key,
 990                        &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY],
 991                        IWLAGN_MIC_KEY_SIZE);
 992
 993                 data->use_tkip = true;
 994                 data->use_rsc_tsc = true;
 995                 break;
 996         case WLAN_CIPHER_SUITE_CCMP:
 997                 if (sta) {
 998                         u8 *pn = seq.ccmp.pn;
 999
1000                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.unicast_rsc;
1001                         aes_tx_sc = &data->rsc_tsc->all_tsc_rsc.aes.tsc;
1002
1003                         ieee80211_get_key_tx_seq(key, &seq);
1004                         aes_tx_sc->pn = cpu_to_le64(
1005                                         (u64)pn[5] |
1006                                         ((u64)pn[4] << 8) |
1007                                         ((u64)pn[3] << 16) |
1008                                         ((u64)pn[2] << 24) |
1009                                         ((u64)pn[1] << 32) |
1010                                         ((u64)pn[0] << 40));
1011                 } else
1012                         aes_sc = data->rsc_tsc->all_tsc_rsc.aes.multicast_rsc;
1013
1014                 /*
1015                  * For non-QoS this relies on the fact that both the uCode and
1016                  * mac80211 use TID 0 for checking the IV in the frames.
1017                  */
1018                 for (i = 0; i < IWLAGN_NUM_RSC; i++) {
1019                         u8 *pn = seq.ccmp.pn;
1020
1021                         ieee80211_get_key_rx_seq(key, i, &seq);
1022                         aes_sc->pn = cpu_to_le64(
1023                                         (u64)pn[5] |
1024                                         ((u64)pn[4] << 8) |
1025                                         ((u64)pn[3] << 16) |
1026                                         ((u64)pn[2] << 24) |
1027                                         ((u64)pn[1] << 32) |
1028                                         ((u64)pn[0] << 40));
1029                 }
1030                 data->use_rsc_tsc = true;
1031                 break;
1032         }
1033
1034         mutex_unlock(&priv->mutex);
1035 }
1036
1037 int iwlagn_send_patterns(struct iwl_priv *priv,
1038                         struct cfg80211_wowlan *wowlan)
1039 {
1040         struct iwlagn_wowlan_patterns_cmd *pattern_cmd;
1041         struct iwl_host_cmd cmd = {
1042                 .id = REPLY_WOWLAN_PATTERNS,
1043                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
1044                 .flags = CMD_SYNC,
1045         };
1046         int i, err;
1047
1048         if (!wowlan->n_patterns)
1049                 return 0;
1050
1051         cmd.len[0] = sizeof(*pattern_cmd) +
1052                 wowlan->n_patterns * sizeof(struct iwlagn_wowlan_pattern);
1053
1054         pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL);
1055         if (!pattern_cmd)
1056                 return -ENOMEM;
1057
1058         pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns);
1059
1060         for (i = 0; i < wowlan->n_patterns; i++) {
1061                 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8);
1062
1063                 memcpy(&pattern_cmd->patterns[i].mask,
1064                         wowlan->patterns[i].mask, mask_len);
1065                 memcpy(&pattern_cmd->patterns[i].pattern,
1066                         wowlan->patterns[i].pattern,
1067                         wowlan->patterns[i].pattern_len);
1068                 pattern_cmd->patterns[i].mask_size = mask_len;
1069                 pattern_cmd->patterns[i].pattern_size =
1070                         wowlan->patterns[i].pattern_len;
1071         }
1072
1073         cmd.data[0] = pattern_cmd;
1074         err = iwl_dvm_send_cmd(priv, &cmd);
1075         kfree(pattern_cmd);
1076         return err;
1077 }
1078
1079 int iwlagn_suspend(struct iwl_priv *priv, struct cfg80211_wowlan *wowlan)
1080 {
1081         struct iwlagn_wowlan_wakeup_filter_cmd wakeup_filter_cmd;
1082         struct iwl_rxon_cmd rxon;
1083         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1084         struct iwlagn_wowlan_kek_kck_material_cmd kek_kck_cmd;
1085         struct iwlagn_wowlan_tkip_params_cmd tkip_cmd = {};
1086         struct iwlagn_d3_config_cmd d3_cfg_cmd = {};
1087         struct wowlan_key_data key_data = {
1088                 .ctx = ctx,
1089                 .bssid = ctx->active.bssid_addr,
1090                 .use_rsc_tsc = false,
1091                 .tkip = &tkip_cmd,
1092                 .use_tkip = false,
1093         };
1094         int ret, i;
1095         u16 seq;
1096
1097         key_data.rsc_tsc = kzalloc(sizeof(*key_data.rsc_tsc), GFP_KERNEL);
1098         if (!key_data.rsc_tsc)
1099                 return -ENOMEM;
1100
1101         memset(&wakeup_filter_cmd, 0, sizeof(wakeup_filter_cmd));
1102
1103         /*
1104          * We know the last used seqno, and the uCode expects to know that
1105          * one, it will increment before TX.
1106          */
1107         seq = le16_to_cpu(priv->last_seq_ctl) & IEEE80211_SCTL_SEQ;
1108         wakeup_filter_cmd.non_qos_seq = cpu_to_le16(seq);
1109
1110         /*
1111          * For QoS counters, we store the one to use next, so subtract 0x10
1112          * since the uCode will add 0x10 before using the value.
1113          */
1114         for (i = 0; i < IWL_MAX_TID_COUNT; i++) {
1115                 seq = priv->tid_data[IWL_AP_ID][i].seq_number;
1116                 seq -= 0x10;
1117                 wakeup_filter_cmd.qos_seq[i] = cpu_to_le16(seq);
1118         }
1119
1120         if (wowlan->disconnect)
1121                 wakeup_filter_cmd.enabled |=
1122                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
1123                                     IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE);
1124         if (wowlan->magic_pkt)
1125                 wakeup_filter_cmd.enabled |=
1126                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET);
1127         if (wowlan->gtk_rekey_failure)
1128                 wakeup_filter_cmd.enabled |=
1129                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL);
1130         if (wowlan->eap_identity_req)
1131                 wakeup_filter_cmd.enabled |=
1132                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ);
1133         if (wowlan->four_way_handshake)
1134                 wakeup_filter_cmd.enabled |=
1135                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE);
1136         if (wowlan->n_patterns)
1137                 wakeup_filter_cmd.enabled |=
1138                         cpu_to_le32(IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH);
1139
1140         if (wowlan->rfkill_release)
1141                 d3_cfg_cmd.wakeup_flags |=
1142                         cpu_to_le32(IWLAGN_D3_WAKEUP_RFKILL);
1143
1144         iwl_scan_cancel_timeout(priv, 200);
1145
1146         memcpy(&rxon, &ctx->active, sizeof(rxon));
1147
1148         priv->ucode_loaded = false;
1149         iwl_trans_stop_device(priv->trans);
1150
1151         priv->wowlan = true;
1152
1153         ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_WOWLAN);
1154         if (ret)
1155                 goto out;
1156
1157         /* now configure WoWLAN ucode */
1158         ret = iwl_alive_start(priv);
1159         if (ret)
1160                 goto out;
1161
1162         memcpy(&ctx->staging, &rxon, sizeof(rxon));
1163         ret = iwlagn_commit_rxon(priv, ctx);
1164         if (ret)
1165                 goto out;
1166
1167         ret = iwl_power_update_mode(priv, true);
1168         if (ret)
1169                 goto out;
1170
1171         if (!iwlwifi_mod_params.sw_crypto) {
1172                 /* mark all keys clear */
1173                 priv->ucode_key_table = 0;
1174                 ctx->key_mapping_keys = 0;
1175
1176                 /*
1177                  * This needs to be unlocked due to lock ordering
1178                  * constraints. Since we're in the suspend path
1179                  * that isn't really a problem though.
1180                  */
1181                 mutex_unlock(&priv->mutex);
1182                 ieee80211_iter_keys(priv->hw, ctx->vif,
1183                                     iwlagn_wowlan_program_keys,
1184                                     &key_data);
1185                 mutex_lock(&priv->mutex);
1186                 if (key_data.error) {
1187                         ret = -EIO;
1188                         goto out;
1189                 }
1190
1191                 if (key_data.use_rsc_tsc) {
1192                         struct iwl_host_cmd rsc_tsc_cmd = {
1193                                 .id = REPLY_WOWLAN_TSC_RSC_PARAMS,
1194                                 .flags = CMD_SYNC,
1195                                 .data[0] = key_data.rsc_tsc,
1196                                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
1197                                 .len[0] = sizeof(*key_data.rsc_tsc),
1198                         };
1199
1200                         ret = iwl_dvm_send_cmd(priv, &rsc_tsc_cmd);
1201                         if (ret)
1202                                 goto out;
1203                 }
1204
1205                 if (key_data.use_tkip) {
1206                         ret = iwl_dvm_send_cmd_pdu(priv,
1207                                                  REPLY_WOWLAN_TKIP_PARAMS,
1208                                                  CMD_SYNC, sizeof(tkip_cmd),
1209                                                  &tkip_cmd);
1210                         if (ret)
1211                                 goto out;
1212                 }
1213
1214                 if (priv->have_rekey_data) {
1215                         memset(&kek_kck_cmd, 0, sizeof(kek_kck_cmd));
1216                         memcpy(kek_kck_cmd.kck, priv->kck, NL80211_KCK_LEN);
1217                         kek_kck_cmd.kck_len = cpu_to_le16(NL80211_KCK_LEN);
1218                         memcpy(kek_kck_cmd.kek, priv->kek, NL80211_KEK_LEN);
1219                         kek_kck_cmd.kek_len = cpu_to_le16(NL80211_KEK_LEN);
1220                         kek_kck_cmd.replay_ctr = priv->replay_ctr;
1221
1222                         ret = iwl_dvm_send_cmd_pdu(priv,
1223                                                  REPLY_WOWLAN_KEK_KCK_MATERIAL,
1224                                                  CMD_SYNC, sizeof(kek_kck_cmd),
1225                                                  &kek_kck_cmd);
1226                         if (ret)
1227                                 goto out;
1228                 }
1229         }
1230
1231         ret = iwl_dvm_send_cmd_pdu(priv, REPLY_D3_CONFIG, CMD_SYNC,
1232                                      sizeof(d3_cfg_cmd), &d3_cfg_cmd);
1233         if (ret)
1234                 goto out;
1235
1236         ret = iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_WAKEUP_FILTER,
1237                                  CMD_SYNC, sizeof(wakeup_filter_cmd),
1238                                  &wakeup_filter_cmd);
1239         if (ret)
1240                 goto out;
1241
1242         ret = iwlagn_send_patterns(priv, wowlan);
1243  out:
1244         kfree(key_data.rsc_tsc);
1245         return ret;
1246 }
1247 #endif
1248
1249 int iwl_dvm_send_cmd(struct iwl_priv *priv, struct iwl_host_cmd *cmd)
1250 {
1251         if (iwl_is_rfkill(priv) || iwl_is_ctkill(priv)) {
1252                 IWL_WARN(priv, "Not sending command - %s KILL\n",
1253                          iwl_is_rfkill(priv) ? "RF" : "CT");
1254                 return -EIO;
1255         }
1256
1257         if (test_bit(STATUS_FW_ERROR, &priv->status)) {
1258                 IWL_ERR(priv, "Command %s failed: FW Error\n",
1259                         iwl_dvm_get_cmd_string(cmd->id));
1260                 return -EIO;
1261         }
1262
1263         /*
1264          * Synchronous commands from this op-mode must hold
1265          * the mutex, this ensures we don't try to send two
1266          * (or more) synchronous commands at a time.
1267          */
1268         if (!(cmd->flags & CMD_ASYNC))
1269                 lockdep_assert_held(&priv->mutex);
1270
1271         if (priv->ucode_owner == IWL_OWNERSHIP_TM &&
1272             !(cmd->flags & CMD_ON_DEMAND)) {
1273                 IWL_DEBUG_HC(priv, "tm own the uCode, no regular hcmd send\n");
1274                 return -EIO;
1275         }
1276
1277         return iwl_trans_send_cmd(priv->trans, cmd);
1278 }
1279
1280 int iwl_dvm_send_cmd_pdu(struct iwl_priv *priv, u8 id,
1281                          u32 flags, u16 len, const void *data)
1282 {
1283         struct iwl_host_cmd cmd = {
1284                 .id = id,
1285                 .len = { len, },
1286                 .data = { data, },
1287                 .flags = flags,
1288         };
1289
1290         return iwl_dvm_send_cmd(priv, &cmd);
1291 }