1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * This file contains the handling of command
4*4882a593Smuzhiyun * responses as well as events generated by firmware.
5*4882a593Smuzhiyun */
6*4882a593Smuzhiyun
7*4882a593Smuzhiyun #include <linux/hardirq.h>
8*4882a593Smuzhiyun #include <linux/slab.h>
9*4882a593Smuzhiyun #include <linux/delay.h>
10*4882a593Smuzhiyun #include <linux/sched.h>
11*4882a593Smuzhiyun #include <asm/unaligned.h>
12*4882a593Smuzhiyun #include <net/cfg80211.h>
13*4882a593Smuzhiyun
14*4882a593Smuzhiyun #include "cfg.h"
15*4882a593Smuzhiyun #include "cmd.h"
16*4882a593Smuzhiyun
17*4882a593Smuzhiyun /**
18*4882a593Smuzhiyun * lbs_mac_event_disconnected - handles disconnect event. It
19*4882a593Smuzhiyun * reports disconnect to upper layer, clean tx/rx packets,
20*4882a593Smuzhiyun * reset link state etc.
21*4882a593Smuzhiyun *
22*4882a593Smuzhiyun * @priv: A pointer to struct lbs_private structure
23*4882a593Smuzhiyun * @locally_generated: indicates disconnect was requested locally
24*4882a593Smuzhiyun * (usually by userspace)
25*4882a593Smuzhiyun *
26*4882a593Smuzhiyun * returns: n/a
27*4882a593Smuzhiyun */
lbs_mac_event_disconnected(struct lbs_private * priv,bool locally_generated)28*4882a593Smuzhiyun void lbs_mac_event_disconnected(struct lbs_private *priv,
29*4882a593Smuzhiyun bool locally_generated)
30*4882a593Smuzhiyun {
31*4882a593Smuzhiyun unsigned long flags;
32*4882a593Smuzhiyun
33*4882a593Smuzhiyun if (priv->connect_status != LBS_CONNECTED)
34*4882a593Smuzhiyun return;
35*4882a593Smuzhiyun
36*4882a593Smuzhiyun /*
37*4882a593Smuzhiyun * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
38*4882a593Smuzhiyun * It causes problem in the Supplicant
39*4882a593Smuzhiyun */
40*4882a593Smuzhiyun msleep_interruptible(1000);
41*4882a593Smuzhiyun
42*4882a593Smuzhiyun if (priv->wdev->iftype == NL80211_IFTYPE_STATION)
43*4882a593Smuzhiyun lbs_send_disconnect_notification(priv, locally_generated);
44*4882a593Smuzhiyun
45*4882a593Smuzhiyun /* report disconnect to upper layer */
46*4882a593Smuzhiyun netif_stop_queue(priv->dev);
47*4882a593Smuzhiyun netif_carrier_off(priv->dev);
48*4882a593Smuzhiyun
49*4882a593Smuzhiyun /* Free Tx and Rx packets */
50*4882a593Smuzhiyun spin_lock_irqsave(&priv->driver_lock, flags);
51*4882a593Smuzhiyun kfree_skb(priv->currenttxskb);
52*4882a593Smuzhiyun priv->currenttxskb = NULL;
53*4882a593Smuzhiyun priv->tx_pending_len = 0;
54*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
55*4882a593Smuzhiyun
56*4882a593Smuzhiyun priv->connect_status = LBS_DISCONNECTED;
57*4882a593Smuzhiyun
58*4882a593Smuzhiyun if (priv->psstate != PS_STATE_FULL_POWER) {
59*4882a593Smuzhiyun /* make firmware to exit PS mode */
60*4882a593Smuzhiyun lbs_deb_cmd("disconnected, so exit PS mode\n");
61*4882a593Smuzhiyun lbs_set_ps_mode(priv, PS_MODE_ACTION_EXIT_PS, false);
62*4882a593Smuzhiyun }
63*4882a593Smuzhiyun }
64*4882a593Smuzhiyun
lbs_process_command_response(struct lbs_private * priv,u8 * data,u32 len)65*4882a593Smuzhiyun int lbs_process_command_response(struct lbs_private *priv, u8 *data, u32 len)
66*4882a593Smuzhiyun {
67*4882a593Smuzhiyun uint16_t respcmd, curcmd;
68*4882a593Smuzhiyun struct cmd_header *resp;
69*4882a593Smuzhiyun int ret = 0;
70*4882a593Smuzhiyun unsigned long flags;
71*4882a593Smuzhiyun uint16_t result;
72*4882a593Smuzhiyun
73*4882a593Smuzhiyun mutex_lock(&priv->lock);
74*4882a593Smuzhiyun spin_lock_irqsave(&priv->driver_lock, flags);
75*4882a593Smuzhiyun
76*4882a593Smuzhiyun if (!priv->cur_cmd) {
77*4882a593Smuzhiyun lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
78*4882a593Smuzhiyun ret = -1;
79*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
80*4882a593Smuzhiyun goto done;
81*4882a593Smuzhiyun }
82*4882a593Smuzhiyun
83*4882a593Smuzhiyun resp = (void *)data;
84*4882a593Smuzhiyun curcmd = le16_to_cpu(priv->cur_cmd->cmdbuf->command);
85*4882a593Smuzhiyun respcmd = le16_to_cpu(resp->command);
86*4882a593Smuzhiyun result = le16_to_cpu(resp->result);
87*4882a593Smuzhiyun
88*4882a593Smuzhiyun lbs_deb_cmd("CMD_RESP: response 0x%04x, seq %d, size %d\n",
89*4882a593Smuzhiyun respcmd, le16_to_cpu(resp->seqnum), len);
90*4882a593Smuzhiyun lbs_deb_hex(LBS_DEB_CMD, "CMD_RESP", (void *) resp, len);
91*4882a593Smuzhiyun
92*4882a593Smuzhiyun if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
93*4882a593Smuzhiyun netdev_info(priv->dev,
94*4882a593Smuzhiyun "Received CMD_RESP with invalid sequence %d (expected %d)\n",
95*4882a593Smuzhiyun le16_to_cpu(resp->seqnum),
96*4882a593Smuzhiyun le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
97*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
98*4882a593Smuzhiyun ret = -1;
99*4882a593Smuzhiyun goto done;
100*4882a593Smuzhiyun }
101*4882a593Smuzhiyun if (respcmd != CMD_RET(curcmd) &&
102*4882a593Smuzhiyun respcmd != CMD_RET_802_11_ASSOCIATE && curcmd != CMD_802_11_ASSOCIATE) {
103*4882a593Smuzhiyun netdev_info(priv->dev, "Invalid CMD_RESP %x to command %x!\n",
104*4882a593Smuzhiyun respcmd, curcmd);
105*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
106*4882a593Smuzhiyun ret = -1;
107*4882a593Smuzhiyun goto done;
108*4882a593Smuzhiyun }
109*4882a593Smuzhiyun
110*4882a593Smuzhiyun if (resp->result == cpu_to_le16(0x0004)) {
111*4882a593Smuzhiyun /* 0x0004 means -EAGAIN. Drop the response, let it time out
112*4882a593Smuzhiyun and be resubmitted */
113*4882a593Smuzhiyun netdev_info(priv->dev,
114*4882a593Smuzhiyun "Firmware returns DEFER to command %x. Will let it time out...\n",
115*4882a593Smuzhiyun le16_to_cpu(resp->command));
116*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
117*4882a593Smuzhiyun ret = -1;
118*4882a593Smuzhiyun goto done;
119*4882a593Smuzhiyun }
120*4882a593Smuzhiyun
121*4882a593Smuzhiyun /* Now we got response from FW, cancel the command timer */
122*4882a593Smuzhiyun del_timer(&priv->command_timer);
123*4882a593Smuzhiyun priv->cmd_timed_out = 0;
124*4882a593Smuzhiyun
125*4882a593Smuzhiyun if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
126*4882a593Smuzhiyun /* struct cmd_ds_802_11_ps_mode also contains
127*4882a593Smuzhiyun * the header
128*4882a593Smuzhiyun */
129*4882a593Smuzhiyun struct cmd_ds_802_11_ps_mode *psmode = (void *)resp;
130*4882a593Smuzhiyun u16 action = le16_to_cpu(psmode->action);
131*4882a593Smuzhiyun
132*4882a593Smuzhiyun lbs_deb_host(
133*4882a593Smuzhiyun "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
134*4882a593Smuzhiyun result, action);
135*4882a593Smuzhiyun
136*4882a593Smuzhiyun if (result) {
137*4882a593Smuzhiyun lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
138*4882a593Smuzhiyun result);
139*4882a593Smuzhiyun /*
140*4882a593Smuzhiyun * We should not re-try enter-ps command in
141*4882a593Smuzhiyun * ad-hoc mode. It takes place in
142*4882a593Smuzhiyun * lbs_execute_next_command().
143*4882a593Smuzhiyun */
144*4882a593Smuzhiyun if (priv->wdev->iftype == NL80211_IFTYPE_MONITOR &&
145*4882a593Smuzhiyun action == PS_MODE_ACTION_ENTER_PS)
146*4882a593Smuzhiyun priv->psmode = LBS802_11POWERMODECAM;
147*4882a593Smuzhiyun } else if (action == PS_MODE_ACTION_ENTER_PS) {
148*4882a593Smuzhiyun priv->needtowakeup = 0;
149*4882a593Smuzhiyun priv->psstate = PS_STATE_AWAKE;
150*4882a593Smuzhiyun
151*4882a593Smuzhiyun lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
152*4882a593Smuzhiyun if (priv->connect_status != LBS_CONNECTED) {
153*4882a593Smuzhiyun /*
154*4882a593Smuzhiyun * When Deauth Event received before Enter_PS command
155*4882a593Smuzhiyun * response, We need to wake up the firmware.
156*4882a593Smuzhiyun */
157*4882a593Smuzhiyun lbs_deb_host(
158*4882a593Smuzhiyun "disconnected, invoking lbs_ps_wakeup\n");
159*4882a593Smuzhiyun
160*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
161*4882a593Smuzhiyun mutex_unlock(&priv->lock);
162*4882a593Smuzhiyun lbs_set_ps_mode(priv, PS_MODE_ACTION_EXIT_PS,
163*4882a593Smuzhiyun false);
164*4882a593Smuzhiyun mutex_lock(&priv->lock);
165*4882a593Smuzhiyun spin_lock_irqsave(&priv->driver_lock, flags);
166*4882a593Smuzhiyun }
167*4882a593Smuzhiyun } else if (action == PS_MODE_ACTION_EXIT_PS) {
168*4882a593Smuzhiyun priv->needtowakeup = 0;
169*4882a593Smuzhiyun priv->psstate = PS_STATE_FULL_POWER;
170*4882a593Smuzhiyun lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
171*4882a593Smuzhiyun } else {
172*4882a593Smuzhiyun lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
173*4882a593Smuzhiyun }
174*4882a593Smuzhiyun
175*4882a593Smuzhiyun __lbs_complete_command(priv, priv->cur_cmd, result);
176*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
177*4882a593Smuzhiyun
178*4882a593Smuzhiyun ret = 0;
179*4882a593Smuzhiyun goto done;
180*4882a593Smuzhiyun }
181*4882a593Smuzhiyun
182*4882a593Smuzhiyun /* If the command is not successful, cleanup and return failure */
183*4882a593Smuzhiyun if ((result != 0 || !(respcmd & 0x8000))) {
184*4882a593Smuzhiyun lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
185*4882a593Smuzhiyun result, respcmd);
186*4882a593Smuzhiyun /*
187*4882a593Smuzhiyun * Handling errors here
188*4882a593Smuzhiyun */
189*4882a593Smuzhiyun switch (respcmd) {
190*4882a593Smuzhiyun case CMD_RET(CMD_GET_HW_SPEC):
191*4882a593Smuzhiyun case CMD_RET(CMD_802_11_RESET):
192*4882a593Smuzhiyun lbs_deb_host("CMD_RESP: reset failed\n");
193*4882a593Smuzhiyun break;
194*4882a593Smuzhiyun
195*4882a593Smuzhiyun }
196*4882a593Smuzhiyun __lbs_complete_command(priv, priv->cur_cmd, result);
197*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
198*4882a593Smuzhiyun
199*4882a593Smuzhiyun ret = -1;
200*4882a593Smuzhiyun goto done;
201*4882a593Smuzhiyun }
202*4882a593Smuzhiyun
203*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
204*4882a593Smuzhiyun
205*4882a593Smuzhiyun if (priv->cur_cmd && priv->cur_cmd->callback) {
206*4882a593Smuzhiyun ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
207*4882a593Smuzhiyun resp);
208*4882a593Smuzhiyun }
209*4882a593Smuzhiyun
210*4882a593Smuzhiyun spin_lock_irqsave(&priv->driver_lock, flags);
211*4882a593Smuzhiyun
212*4882a593Smuzhiyun if (priv->cur_cmd) {
213*4882a593Smuzhiyun /* Clean up and Put current command back to cmdfreeq */
214*4882a593Smuzhiyun __lbs_complete_command(priv, priv->cur_cmd, result);
215*4882a593Smuzhiyun }
216*4882a593Smuzhiyun spin_unlock_irqrestore(&priv->driver_lock, flags);
217*4882a593Smuzhiyun
218*4882a593Smuzhiyun done:
219*4882a593Smuzhiyun mutex_unlock(&priv->lock);
220*4882a593Smuzhiyun return ret;
221*4882a593Smuzhiyun }
222*4882a593Smuzhiyun
lbs_process_event(struct lbs_private * priv,u32 event)223*4882a593Smuzhiyun void lbs_process_event(struct lbs_private *priv, u32 event)
224*4882a593Smuzhiyun {
225*4882a593Smuzhiyun struct cmd_header cmd;
226*4882a593Smuzhiyun
227*4882a593Smuzhiyun switch (event) {
228*4882a593Smuzhiyun case MACREG_INT_CODE_LINK_SENSED:
229*4882a593Smuzhiyun lbs_deb_cmd("EVENT: link sensed\n");
230*4882a593Smuzhiyun break;
231*4882a593Smuzhiyun
232*4882a593Smuzhiyun case MACREG_INT_CODE_DEAUTHENTICATED:
233*4882a593Smuzhiyun lbs_deb_cmd("EVENT: deauthenticated\n");
234*4882a593Smuzhiyun lbs_mac_event_disconnected(priv, false);
235*4882a593Smuzhiyun break;
236*4882a593Smuzhiyun
237*4882a593Smuzhiyun case MACREG_INT_CODE_DISASSOCIATED:
238*4882a593Smuzhiyun lbs_deb_cmd("EVENT: disassociated\n");
239*4882a593Smuzhiyun lbs_mac_event_disconnected(priv, false);
240*4882a593Smuzhiyun break;
241*4882a593Smuzhiyun
242*4882a593Smuzhiyun case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
243*4882a593Smuzhiyun lbs_deb_cmd("EVENT: link lost\n");
244*4882a593Smuzhiyun lbs_mac_event_disconnected(priv, true);
245*4882a593Smuzhiyun break;
246*4882a593Smuzhiyun
247*4882a593Smuzhiyun case MACREG_INT_CODE_PS_SLEEP:
248*4882a593Smuzhiyun lbs_deb_cmd("EVENT: ps sleep\n");
249*4882a593Smuzhiyun
250*4882a593Smuzhiyun /* handle unexpected PS SLEEP event */
251*4882a593Smuzhiyun if (priv->psstate == PS_STATE_FULL_POWER) {
252*4882a593Smuzhiyun lbs_deb_cmd(
253*4882a593Smuzhiyun "EVENT: in FULL POWER mode, ignoring PS_SLEEP\n");
254*4882a593Smuzhiyun break;
255*4882a593Smuzhiyun }
256*4882a593Smuzhiyun if (!list_empty(&priv->cmdpendingq)) {
257*4882a593Smuzhiyun lbs_deb_cmd("EVENT: commands in queue, do not sleep\n");
258*4882a593Smuzhiyun break;
259*4882a593Smuzhiyun }
260*4882a593Smuzhiyun priv->psstate = PS_STATE_PRE_SLEEP;
261*4882a593Smuzhiyun
262*4882a593Smuzhiyun lbs_ps_confirm_sleep(priv);
263*4882a593Smuzhiyun
264*4882a593Smuzhiyun break;
265*4882a593Smuzhiyun
266*4882a593Smuzhiyun case MACREG_INT_CODE_HOST_AWAKE:
267*4882a593Smuzhiyun lbs_deb_cmd("EVENT: host awake\n");
268*4882a593Smuzhiyun if (priv->reset_deep_sleep_wakeup)
269*4882a593Smuzhiyun priv->reset_deep_sleep_wakeup(priv);
270*4882a593Smuzhiyun priv->is_deep_sleep = 0;
271*4882a593Smuzhiyun lbs_cmd_async(priv, CMD_802_11_WAKEUP_CONFIRM, &cmd,
272*4882a593Smuzhiyun sizeof(cmd));
273*4882a593Smuzhiyun priv->is_host_sleep_activated = 0;
274*4882a593Smuzhiyun wake_up_interruptible(&priv->host_sleep_q);
275*4882a593Smuzhiyun break;
276*4882a593Smuzhiyun
277*4882a593Smuzhiyun case MACREG_INT_CODE_DEEP_SLEEP_AWAKE:
278*4882a593Smuzhiyun if (priv->reset_deep_sleep_wakeup)
279*4882a593Smuzhiyun priv->reset_deep_sleep_wakeup(priv);
280*4882a593Smuzhiyun lbs_deb_cmd("EVENT: ds awake\n");
281*4882a593Smuzhiyun priv->is_deep_sleep = 0;
282*4882a593Smuzhiyun priv->wakeup_dev_required = 0;
283*4882a593Smuzhiyun wake_up_interruptible(&priv->ds_awake_q);
284*4882a593Smuzhiyun break;
285*4882a593Smuzhiyun
286*4882a593Smuzhiyun case MACREG_INT_CODE_PS_AWAKE:
287*4882a593Smuzhiyun lbs_deb_cmd("EVENT: ps awake\n");
288*4882a593Smuzhiyun /* handle unexpected PS AWAKE event */
289*4882a593Smuzhiyun if (priv->psstate == PS_STATE_FULL_POWER) {
290*4882a593Smuzhiyun lbs_deb_cmd(
291*4882a593Smuzhiyun "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
292*4882a593Smuzhiyun break;
293*4882a593Smuzhiyun }
294*4882a593Smuzhiyun
295*4882a593Smuzhiyun priv->psstate = PS_STATE_AWAKE;
296*4882a593Smuzhiyun
297*4882a593Smuzhiyun if (priv->needtowakeup) {
298*4882a593Smuzhiyun /*
299*4882a593Smuzhiyun * wait for the command processing to finish
300*4882a593Smuzhiyun * before resuming sending
301*4882a593Smuzhiyun * priv->needtowakeup will be set to FALSE
302*4882a593Smuzhiyun * in lbs_ps_wakeup()
303*4882a593Smuzhiyun */
304*4882a593Smuzhiyun lbs_deb_cmd("waking up ...\n");
305*4882a593Smuzhiyun lbs_set_ps_mode(priv, PS_MODE_ACTION_EXIT_PS, false);
306*4882a593Smuzhiyun }
307*4882a593Smuzhiyun break;
308*4882a593Smuzhiyun
309*4882a593Smuzhiyun case MACREG_INT_CODE_MIC_ERR_UNICAST:
310*4882a593Smuzhiyun lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
311*4882a593Smuzhiyun lbs_send_mic_failureevent(priv, event);
312*4882a593Smuzhiyun break;
313*4882a593Smuzhiyun
314*4882a593Smuzhiyun case MACREG_INT_CODE_MIC_ERR_MULTICAST:
315*4882a593Smuzhiyun lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
316*4882a593Smuzhiyun lbs_send_mic_failureevent(priv, event);
317*4882a593Smuzhiyun break;
318*4882a593Smuzhiyun
319*4882a593Smuzhiyun case MACREG_INT_CODE_MIB_CHANGED:
320*4882a593Smuzhiyun lbs_deb_cmd("EVENT: MIB CHANGED\n");
321*4882a593Smuzhiyun break;
322*4882a593Smuzhiyun case MACREG_INT_CODE_INIT_DONE:
323*4882a593Smuzhiyun lbs_deb_cmd("EVENT: INIT DONE\n");
324*4882a593Smuzhiyun break;
325*4882a593Smuzhiyun case MACREG_INT_CODE_ADHOC_BCN_LOST:
326*4882a593Smuzhiyun lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
327*4882a593Smuzhiyun break;
328*4882a593Smuzhiyun case MACREG_INT_CODE_RSSI_LOW:
329*4882a593Smuzhiyun netdev_alert(priv->dev, "EVENT: rssi low\n");
330*4882a593Smuzhiyun break;
331*4882a593Smuzhiyun case MACREG_INT_CODE_SNR_LOW:
332*4882a593Smuzhiyun netdev_alert(priv->dev, "EVENT: snr low\n");
333*4882a593Smuzhiyun break;
334*4882a593Smuzhiyun case MACREG_INT_CODE_MAX_FAIL:
335*4882a593Smuzhiyun netdev_alert(priv->dev, "EVENT: max fail\n");
336*4882a593Smuzhiyun break;
337*4882a593Smuzhiyun case MACREG_INT_CODE_RSSI_HIGH:
338*4882a593Smuzhiyun netdev_alert(priv->dev, "EVENT: rssi high\n");
339*4882a593Smuzhiyun break;
340*4882a593Smuzhiyun case MACREG_INT_CODE_SNR_HIGH:
341*4882a593Smuzhiyun netdev_alert(priv->dev, "EVENT: snr high\n");
342*4882a593Smuzhiyun break;
343*4882a593Smuzhiyun
344*4882a593Smuzhiyun case MACREG_INT_CODE_MESH_AUTO_STARTED:
345*4882a593Smuzhiyun /* Ignore spurious autostart events */
346*4882a593Smuzhiyun netdev_info(priv->dev, "EVENT: MESH_AUTO_STARTED (ignoring)\n");
347*4882a593Smuzhiyun break;
348*4882a593Smuzhiyun
349*4882a593Smuzhiyun default:
350*4882a593Smuzhiyun netdev_alert(priv->dev, "EVENT: unknown event id %d\n", event);
351*4882a593Smuzhiyun break;
352*4882a593Smuzhiyun }
353*4882a593Smuzhiyun }
354