1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun #include "cmd.h"
3*4882a593Smuzhiyun
4*4882a593Smuzhiyun #include <linux/module.h>
5*4882a593Smuzhiyun #include <linux/slab.h>
6*4882a593Smuzhiyun #include <linux/etherdevice.h>
7*4882a593Smuzhiyun
8*4882a593Smuzhiyun #include "wl1251.h"
9*4882a593Smuzhiyun #include "reg.h"
10*4882a593Smuzhiyun #include "io.h"
11*4882a593Smuzhiyun #include "ps.h"
12*4882a593Smuzhiyun #include "acx.h"
13*4882a593Smuzhiyun
14*4882a593Smuzhiyun /**
15*4882a593Smuzhiyun * send command to firmware
16*4882a593Smuzhiyun *
17*4882a593Smuzhiyun * @wl: wl struct
18*4882a593Smuzhiyun * @id: command id
19*4882a593Smuzhiyun * @buf: buffer containing the command, must work with dma
20*4882a593Smuzhiyun * @len: length of the buffer
21*4882a593Smuzhiyun */
wl1251_cmd_send(struct wl1251 * wl,u16 id,void * buf,size_t len)22*4882a593Smuzhiyun int wl1251_cmd_send(struct wl1251 *wl, u16 id, void *buf, size_t len)
23*4882a593Smuzhiyun {
24*4882a593Smuzhiyun struct wl1251_cmd_header *cmd;
25*4882a593Smuzhiyun unsigned long timeout;
26*4882a593Smuzhiyun u32 intr;
27*4882a593Smuzhiyun int ret = 0;
28*4882a593Smuzhiyun
29*4882a593Smuzhiyun cmd = buf;
30*4882a593Smuzhiyun cmd->id = id;
31*4882a593Smuzhiyun cmd->status = 0;
32*4882a593Smuzhiyun
33*4882a593Smuzhiyun WARN_ON(len % 4 != 0);
34*4882a593Smuzhiyun
35*4882a593Smuzhiyun wl1251_mem_write(wl, wl->cmd_box_addr, buf, len);
36*4882a593Smuzhiyun
37*4882a593Smuzhiyun wl1251_reg_write32(wl, ACX_REG_INTERRUPT_TRIG, INTR_TRIG_CMD);
38*4882a593Smuzhiyun
39*4882a593Smuzhiyun timeout = jiffies + msecs_to_jiffies(WL1251_COMMAND_TIMEOUT);
40*4882a593Smuzhiyun
41*4882a593Smuzhiyun intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_NO_CLEAR);
42*4882a593Smuzhiyun while (!(intr & WL1251_ACX_INTR_CMD_COMPLETE)) {
43*4882a593Smuzhiyun if (time_after(jiffies, timeout)) {
44*4882a593Smuzhiyun wl1251_error("command complete timeout");
45*4882a593Smuzhiyun ret = -ETIMEDOUT;
46*4882a593Smuzhiyun goto out;
47*4882a593Smuzhiyun }
48*4882a593Smuzhiyun
49*4882a593Smuzhiyun msleep(1);
50*4882a593Smuzhiyun
51*4882a593Smuzhiyun intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_NO_CLEAR);
52*4882a593Smuzhiyun }
53*4882a593Smuzhiyun
54*4882a593Smuzhiyun wl1251_reg_write32(wl, ACX_REG_INTERRUPT_ACK,
55*4882a593Smuzhiyun WL1251_ACX_INTR_CMD_COMPLETE);
56*4882a593Smuzhiyun
57*4882a593Smuzhiyun out:
58*4882a593Smuzhiyun return ret;
59*4882a593Smuzhiyun }
60*4882a593Smuzhiyun
61*4882a593Smuzhiyun /**
62*4882a593Smuzhiyun * send test command to firmware
63*4882a593Smuzhiyun *
64*4882a593Smuzhiyun * @wl: wl struct
65*4882a593Smuzhiyun * @buf: buffer containing the command, with all headers, must work with dma
66*4882a593Smuzhiyun * @len: length of the buffer
67*4882a593Smuzhiyun * @answer: is answer needed
68*4882a593Smuzhiyun */
wl1251_cmd_test(struct wl1251 * wl,void * buf,size_t buf_len,u8 answer)69*4882a593Smuzhiyun int wl1251_cmd_test(struct wl1251 *wl, void *buf, size_t buf_len, u8 answer)
70*4882a593Smuzhiyun {
71*4882a593Smuzhiyun int ret;
72*4882a593Smuzhiyun
73*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd test");
74*4882a593Smuzhiyun
75*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_TEST, buf, buf_len);
76*4882a593Smuzhiyun
77*4882a593Smuzhiyun if (ret < 0) {
78*4882a593Smuzhiyun wl1251_warning("TEST command failed");
79*4882a593Smuzhiyun return ret;
80*4882a593Smuzhiyun }
81*4882a593Smuzhiyun
82*4882a593Smuzhiyun if (answer) {
83*4882a593Smuzhiyun struct wl1251_command *cmd_answer;
84*4882a593Smuzhiyun
85*4882a593Smuzhiyun /*
86*4882a593Smuzhiyun * The test command got in, we can read the answer.
87*4882a593Smuzhiyun * The answer would be a wl1251_command, where the
88*4882a593Smuzhiyun * parameter array contains the actual answer.
89*4882a593Smuzhiyun */
90*4882a593Smuzhiyun wl1251_mem_read(wl, wl->cmd_box_addr, buf, buf_len);
91*4882a593Smuzhiyun
92*4882a593Smuzhiyun cmd_answer = buf;
93*4882a593Smuzhiyun
94*4882a593Smuzhiyun if (cmd_answer->header.status != CMD_STATUS_SUCCESS)
95*4882a593Smuzhiyun wl1251_error("TEST command answer error: %d",
96*4882a593Smuzhiyun cmd_answer->header.status);
97*4882a593Smuzhiyun }
98*4882a593Smuzhiyun
99*4882a593Smuzhiyun return 0;
100*4882a593Smuzhiyun }
101*4882a593Smuzhiyun
102*4882a593Smuzhiyun /**
103*4882a593Smuzhiyun * read acx from firmware
104*4882a593Smuzhiyun *
105*4882a593Smuzhiyun * @wl: wl struct
106*4882a593Smuzhiyun * @id: acx id
107*4882a593Smuzhiyun * @buf: buffer for the response, including all headers, must work with dma
108*4882a593Smuzhiyun * @len: length of buf
109*4882a593Smuzhiyun */
wl1251_cmd_interrogate(struct wl1251 * wl,u16 id,void * buf,size_t len)110*4882a593Smuzhiyun int wl1251_cmd_interrogate(struct wl1251 *wl, u16 id, void *buf, size_t len)
111*4882a593Smuzhiyun {
112*4882a593Smuzhiyun struct acx_header *acx = buf;
113*4882a593Smuzhiyun int ret;
114*4882a593Smuzhiyun
115*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd interrogate");
116*4882a593Smuzhiyun
117*4882a593Smuzhiyun acx->id = id;
118*4882a593Smuzhiyun
119*4882a593Smuzhiyun /* payload length, does not include any headers */
120*4882a593Smuzhiyun acx->len = len - sizeof(*acx);
121*4882a593Smuzhiyun
122*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_INTERROGATE, acx, sizeof(*acx));
123*4882a593Smuzhiyun if (ret < 0) {
124*4882a593Smuzhiyun wl1251_error("INTERROGATE command failed");
125*4882a593Smuzhiyun goto out;
126*4882a593Smuzhiyun }
127*4882a593Smuzhiyun
128*4882a593Smuzhiyun /* the interrogate command got in, we can read the answer */
129*4882a593Smuzhiyun wl1251_mem_read(wl, wl->cmd_box_addr, buf, len);
130*4882a593Smuzhiyun
131*4882a593Smuzhiyun acx = buf;
132*4882a593Smuzhiyun if (acx->cmd.status != CMD_STATUS_SUCCESS)
133*4882a593Smuzhiyun wl1251_error("INTERROGATE command error: %d",
134*4882a593Smuzhiyun acx->cmd.status);
135*4882a593Smuzhiyun
136*4882a593Smuzhiyun out:
137*4882a593Smuzhiyun return ret;
138*4882a593Smuzhiyun }
139*4882a593Smuzhiyun
140*4882a593Smuzhiyun /**
141*4882a593Smuzhiyun * write acx value to firmware
142*4882a593Smuzhiyun *
143*4882a593Smuzhiyun * @wl: wl struct
144*4882a593Smuzhiyun * @id: acx id
145*4882a593Smuzhiyun * @buf: buffer containing acx, including all headers, must work with dma
146*4882a593Smuzhiyun * @len: length of buf
147*4882a593Smuzhiyun */
wl1251_cmd_configure(struct wl1251 * wl,u16 id,void * buf,size_t len)148*4882a593Smuzhiyun int wl1251_cmd_configure(struct wl1251 *wl, u16 id, void *buf, size_t len)
149*4882a593Smuzhiyun {
150*4882a593Smuzhiyun struct acx_header *acx = buf;
151*4882a593Smuzhiyun int ret;
152*4882a593Smuzhiyun
153*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd configure");
154*4882a593Smuzhiyun
155*4882a593Smuzhiyun acx->id = id;
156*4882a593Smuzhiyun
157*4882a593Smuzhiyun /* payload length, does not include any headers */
158*4882a593Smuzhiyun acx->len = len - sizeof(*acx);
159*4882a593Smuzhiyun
160*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_CONFIGURE, acx, len);
161*4882a593Smuzhiyun if (ret < 0) {
162*4882a593Smuzhiyun wl1251_warning("CONFIGURE command NOK");
163*4882a593Smuzhiyun return ret;
164*4882a593Smuzhiyun }
165*4882a593Smuzhiyun
166*4882a593Smuzhiyun return 0;
167*4882a593Smuzhiyun }
168*4882a593Smuzhiyun
wl1251_cmd_vbm(struct wl1251 * wl,u8 identity,void * bitmap,u16 bitmap_len,u8 bitmap_control)169*4882a593Smuzhiyun int wl1251_cmd_vbm(struct wl1251 *wl, u8 identity,
170*4882a593Smuzhiyun void *bitmap, u16 bitmap_len, u8 bitmap_control)
171*4882a593Smuzhiyun {
172*4882a593Smuzhiyun struct wl1251_cmd_vbm_update *vbm;
173*4882a593Smuzhiyun int ret;
174*4882a593Smuzhiyun
175*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd vbm");
176*4882a593Smuzhiyun
177*4882a593Smuzhiyun vbm = kzalloc(sizeof(*vbm), GFP_KERNEL);
178*4882a593Smuzhiyun if (!vbm) {
179*4882a593Smuzhiyun ret = -ENOMEM;
180*4882a593Smuzhiyun goto out;
181*4882a593Smuzhiyun }
182*4882a593Smuzhiyun
183*4882a593Smuzhiyun /* Count and period will be filled by the target */
184*4882a593Smuzhiyun vbm->tim.bitmap_ctrl = bitmap_control;
185*4882a593Smuzhiyun if (bitmap_len > PARTIAL_VBM_MAX) {
186*4882a593Smuzhiyun wl1251_warning("cmd vbm len is %d B, truncating to %d",
187*4882a593Smuzhiyun bitmap_len, PARTIAL_VBM_MAX);
188*4882a593Smuzhiyun bitmap_len = PARTIAL_VBM_MAX;
189*4882a593Smuzhiyun }
190*4882a593Smuzhiyun memcpy(vbm->tim.pvb_field, bitmap, bitmap_len);
191*4882a593Smuzhiyun vbm->tim.identity = identity;
192*4882a593Smuzhiyun vbm->tim.length = bitmap_len + 3;
193*4882a593Smuzhiyun
194*4882a593Smuzhiyun vbm->len = cpu_to_le16(bitmap_len + 5);
195*4882a593Smuzhiyun
196*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_VBM, vbm, sizeof(*vbm));
197*4882a593Smuzhiyun if (ret < 0) {
198*4882a593Smuzhiyun wl1251_error("VBM command failed");
199*4882a593Smuzhiyun goto out;
200*4882a593Smuzhiyun }
201*4882a593Smuzhiyun
202*4882a593Smuzhiyun out:
203*4882a593Smuzhiyun kfree(vbm);
204*4882a593Smuzhiyun return ret;
205*4882a593Smuzhiyun }
206*4882a593Smuzhiyun
wl1251_cmd_data_path_rx(struct wl1251 * wl,u8 channel,bool enable)207*4882a593Smuzhiyun int wl1251_cmd_data_path_rx(struct wl1251 *wl, u8 channel, bool enable)
208*4882a593Smuzhiyun {
209*4882a593Smuzhiyun struct cmd_enabledisable_path *cmd;
210*4882a593Smuzhiyun int ret;
211*4882a593Smuzhiyun u16 cmd_rx;
212*4882a593Smuzhiyun
213*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd data path");
214*4882a593Smuzhiyun
215*4882a593Smuzhiyun cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
216*4882a593Smuzhiyun if (!cmd) {
217*4882a593Smuzhiyun ret = -ENOMEM;
218*4882a593Smuzhiyun goto out;
219*4882a593Smuzhiyun }
220*4882a593Smuzhiyun
221*4882a593Smuzhiyun cmd->channel = channel;
222*4882a593Smuzhiyun
223*4882a593Smuzhiyun if (enable)
224*4882a593Smuzhiyun cmd_rx = CMD_ENABLE_RX;
225*4882a593Smuzhiyun else
226*4882a593Smuzhiyun cmd_rx = CMD_DISABLE_RX;
227*4882a593Smuzhiyun
228*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, cmd_rx, cmd, sizeof(*cmd));
229*4882a593Smuzhiyun if (ret < 0) {
230*4882a593Smuzhiyun wl1251_error("rx %s cmd for channel %d failed",
231*4882a593Smuzhiyun enable ? "start" : "stop", channel);
232*4882a593Smuzhiyun goto out;
233*4882a593Smuzhiyun }
234*4882a593Smuzhiyun
235*4882a593Smuzhiyun wl1251_debug(DEBUG_BOOT, "rx %s cmd channel %d",
236*4882a593Smuzhiyun enable ? "start" : "stop", channel);
237*4882a593Smuzhiyun
238*4882a593Smuzhiyun out:
239*4882a593Smuzhiyun kfree(cmd);
240*4882a593Smuzhiyun return ret;
241*4882a593Smuzhiyun }
242*4882a593Smuzhiyun
wl1251_cmd_data_path_tx(struct wl1251 * wl,u8 channel,bool enable)243*4882a593Smuzhiyun int wl1251_cmd_data_path_tx(struct wl1251 *wl, u8 channel, bool enable)
244*4882a593Smuzhiyun {
245*4882a593Smuzhiyun struct cmd_enabledisable_path *cmd;
246*4882a593Smuzhiyun int ret;
247*4882a593Smuzhiyun u16 cmd_tx;
248*4882a593Smuzhiyun
249*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd data path");
250*4882a593Smuzhiyun
251*4882a593Smuzhiyun cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
252*4882a593Smuzhiyun if (!cmd)
253*4882a593Smuzhiyun return -ENOMEM;
254*4882a593Smuzhiyun
255*4882a593Smuzhiyun cmd->channel = channel;
256*4882a593Smuzhiyun
257*4882a593Smuzhiyun if (enable)
258*4882a593Smuzhiyun cmd_tx = CMD_ENABLE_TX;
259*4882a593Smuzhiyun else
260*4882a593Smuzhiyun cmd_tx = CMD_DISABLE_TX;
261*4882a593Smuzhiyun
262*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, cmd_tx, cmd, sizeof(*cmd));
263*4882a593Smuzhiyun if (ret < 0)
264*4882a593Smuzhiyun wl1251_error("tx %s cmd for channel %d failed",
265*4882a593Smuzhiyun enable ? "start" : "stop", channel);
266*4882a593Smuzhiyun else
267*4882a593Smuzhiyun wl1251_debug(DEBUG_BOOT, "tx %s cmd channel %d",
268*4882a593Smuzhiyun enable ? "start" : "stop", channel);
269*4882a593Smuzhiyun
270*4882a593Smuzhiyun kfree(cmd);
271*4882a593Smuzhiyun return ret;
272*4882a593Smuzhiyun }
273*4882a593Smuzhiyun
wl1251_cmd_join(struct wl1251 * wl,u8 bss_type,u8 channel,u16 beacon_interval,u8 dtim_interval)274*4882a593Smuzhiyun int wl1251_cmd_join(struct wl1251 *wl, u8 bss_type, u8 channel,
275*4882a593Smuzhiyun u16 beacon_interval, u8 dtim_interval)
276*4882a593Smuzhiyun {
277*4882a593Smuzhiyun struct cmd_join *join;
278*4882a593Smuzhiyun int ret, i;
279*4882a593Smuzhiyun u8 *bssid;
280*4882a593Smuzhiyun
281*4882a593Smuzhiyun join = kzalloc(sizeof(*join), GFP_KERNEL);
282*4882a593Smuzhiyun if (!join) {
283*4882a593Smuzhiyun ret = -ENOMEM;
284*4882a593Smuzhiyun goto out;
285*4882a593Smuzhiyun }
286*4882a593Smuzhiyun
287*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd join%s ch %d %d/%d",
288*4882a593Smuzhiyun bss_type == BSS_TYPE_IBSS ? " ibss" : "",
289*4882a593Smuzhiyun channel, beacon_interval, dtim_interval);
290*4882a593Smuzhiyun
291*4882a593Smuzhiyun /* Reverse order BSSID */
292*4882a593Smuzhiyun bssid = (u8 *) &join->bssid_lsb;
293*4882a593Smuzhiyun for (i = 0; i < ETH_ALEN; i++)
294*4882a593Smuzhiyun bssid[i] = wl->bssid[ETH_ALEN - i - 1];
295*4882a593Smuzhiyun
296*4882a593Smuzhiyun join->rx_config_options = wl->rx_config;
297*4882a593Smuzhiyun join->rx_filter_options = wl->rx_filter;
298*4882a593Smuzhiyun
299*4882a593Smuzhiyun join->basic_rate_set = RATE_MASK_1MBPS | RATE_MASK_2MBPS |
300*4882a593Smuzhiyun RATE_MASK_5_5MBPS | RATE_MASK_11MBPS;
301*4882a593Smuzhiyun
302*4882a593Smuzhiyun join->beacon_interval = beacon_interval;
303*4882a593Smuzhiyun join->dtim_interval = dtim_interval;
304*4882a593Smuzhiyun join->bss_type = bss_type;
305*4882a593Smuzhiyun join->channel = channel;
306*4882a593Smuzhiyun join->ctrl = JOIN_CMD_CTRL_TX_FLUSH;
307*4882a593Smuzhiyun
308*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_START_JOIN, join, sizeof(*join));
309*4882a593Smuzhiyun if (ret < 0) {
310*4882a593Smuzhiyun wl1251_error("failed to initiate cmd join");
311*4882a593Smuzhiyun goto out;
312*4882a593Smuzhiyun }
313*4882a593Smuzhiyun
314*4882a593Smuzhiyun out:
315*4882a593Smuzhiyun kfree(join);
316*4882a593Smuzhiyun return ret;
317*4882a593Smuzhiyun }
318*4882a593Smuzhiyun
wl1251_cmd_ps_mode(struct wl1251 * wl,u8 ps_mode)319*4882a593Smuzhiyun int wl1251_cmd_ps_mode(struct wl1251 *wl, u8 ps_mode)
320*4882a593Smuzhiyun {
321*4882a593Smuzhiyun struct wl1251_cmd_ps_params *ps_params = NULL;
322*4882a593Smuzhiyun int ret = 0;
323*4882a593Smuzhiyun
324*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd set ps mode");
325*4882a593Smuzhiyun
326*4882a593Smuzhiyun ps_params = kzalloc(sizeof(*ps_params), GFP_KERNEL);
327*4882a593Smuzhiyun if (!ps_params) {
328*4882a593Smuzhiyun ret = -ENOMEM;
329*4882a593Smuzhiyun goto out;
330*4882a593Smuzhiyun }
331*4882a593Smuzhiyun
332*4882a593Smuzhiyun ps_params->ps_mode = ps_mode;
333*4882a593Smuzhiyun ps_params->send_null_data = 1;
334*4882a593Smuzhiyun ps_params->retries = 5;
335*4882a593Smuzhiyun ps_params->hang_over_period = 128;
336*4882a593Smuzhiyun ps_params->null_data_rate = 1; /* 1 Mbps */
337*4882a593Smuzhiyun
338*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_SET_PS_MODE, ps_params,
339*4882a593Smuzhiyun sizeof(*ps_params));
340*4882a593Smuzhiyun if (ret < 0) {
341*4882a593Smuzhiyun wl1251_error("cmd set_ps_mode failed");
342*4882a593Smuzhiyun goto out;
343*4882a593Smuzhiyun }
344*4882a593Smuzhiyun
345*4882a593Smuzhiyun out:
346*4882a593Smuzhiyun kfree(ps_params);
347*4882a593Smuzhiyun return ret;
348*4882a593Smuzhiyun }
349*4882a593Smuzhiyun
wl1251_cmd_read_memory(struct wl1251 * wl,u32 addr,void * answer,size_t len)350*4882a593Smuzhiyun int wl1251_cmd_read_memory(struct wl1251 *wl, u32 addr, void *answer,
351*4882a593Smuzhiyun size_t len)
352*4882a593Smuzhiyun {
353*4882a593Smuzhiyun struct cmd_read_write_memory *cmd;
354*4882a593Smuzhiyun int ret = 0;
355*4882a593Smuzhiyun
356*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd read memory");
357*4882a593Smuzhiyun
358*4882a593Smuzhiyun cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
359*4882a593Smuzhiyun if (!cmd) {
360*4882a593Smuzhiyun ret = -ENOMEM;
361*4882a593Smuzhiyun goto out;
362*4882a593Smuzhiyun }
363*4882a593Smuzhiyun
364*4882a593Smuzhiyun WARN_ON(len > MAX_READ_SIZE);
365*4882a593Smuzhiyun len = min_t(size_t, len, MAX_READ_SIZE);
366*4882a593Smuzhiyun
367*4882a593Smuzhiyun cmd->addr = addr;
368*4882a593Smuzhiyun cmd->size = len;
369*4882a593Smuzhiyun
370*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_READ_MEMORY, cmd, sizeof(*cmd));
371*4882a593Smuzhiyun if (ret < 0) {
372*4882a593Smuzhiyun wl1251_error("read memory command failed: %d", ret);
373*4882a593Smuzhiyun goto out;
374*4882a593Smuzhiyun }
375*4882a593Smuzhiyun
376*4882a593Smuzhiyun /* the read command got in, we can now read the answer */
377*4882a593Smuzhiyun wl1251_mem_read(wl, wl->cmd_box_addr, cmd, sizeof(*cmd));
378*4882a593Smuzhiyun
379*4882a593Smuzhiyun if (cmd->header.status != CMD_STATUS_SUCCESS)
380*4882a593Smuzhiyun wl1251_error("error in read command result: %d",
381*4882a593Smuzhiyun cmd->header.status);
382*4882a593Smuzhiyun
383*4882a593Smuzhiyun memcpy(answer, cmd->value, len);
384*4882a593Smuzhiyun
385*4882a593Smuzhiyun out:
386*4882a593Smuzhiyun kfree(cmd);
387*4882a593Smuzhiyun return ret;
388*4882a593Smuzhiyun }
389*4882a593Smuzhiyun
wl1251_cmd_template_set(struct wl1251 * wl,u16 cmd_id,void * buf,size_t buf_len)390*4882a593Smuzhiyun int wl1251_cmd_template_set(struct wl1251 *wl, u16 cmd_id,
391*4882a593Smuzhiyun void *buf, size_t buf_len)
392*4882a593Smuzhiyun {
393*4882a593Smuzhiyun struct wl1251_cmd_packet_template *cmd;
394*4882a593Smuzhiyun size_t cmd_len;
395*4882a593Smuzhiyun int ret = 0;
396*4882a593Smuzhiyun
397*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd template %d", cmd_id);
398*4882a593Smuzhiyun
399*4882a593Smuzhiyun WARN_ON(buf_len > WL1251_MAX_TEMPLATE_SIZE);
400*4882a593Smuzhiyun buf_len = min_t(size_t, buf_len, WL1251_MAX_TEMPLATE_SIZE);
401*4882a593Smuzhiyun cmd_len = ALIGN(sizeof(*cmd) + buf_len, 4);
402*4882a593Smuzhiyun
403*4882a593Smuzhiyun cmd = kzalloc(cmd_len, GFP_KERNEL);
404*4882a593Smuzhiyun if (!cmd) {
405*4882a593Smuzhiyun ret = -ENOMEM;
406*4882a593Smuzhiyun goto out;
407*4882a593Smuzhiyun }
408*4882a593Smuzhiyun
409*4882a593Smuzhiyun cmd->size = cpu_to_le16(buf_len);
410*4882a593Smuzhiyun
411*4882a593Smuzhiyun if (buf)
412*4882a593Smuzhiyun memcpy(cmd->data, buf, buf_len);
413*4882a593Smuzhiyun
414*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, cmd_id, cmd, cmd_len);
415*4882a593Smuzhiyun if (ret < 0) {
416*4882a593Smuzhiyun wl1251_warning("cmd set_template failed: %d", ret);
417*4882a593Smuzhiyun goto out;
418*4882a593Smuzhiyun }
419*4882a593Smuzhiyun
420*4882a593Smuzhiyun out:
421*4882a593Smuzhiyun kfree(cmd);
422*4882a593Smuzhiyun return ret;
423*4882a593Smuzhiyun }
424*4882a593Smuzhiyun
wl1251_cmd_scan(struct wl1251 * wl,u8 * ssid,size_t ssid_len,struct ieee80211_channel * channels[],unsigned int n_channels,unsigned int n_probes)425*4882a593Smuzhiyun int wl1251_cmd_scan(struct wl1251 *wl, u8 *ssid, size_t ssid_len,
426*4882a593Smuzhiyun struct ieee80211_channel *channels[],
427*4882a593Smuzhiyun unsigned int n_channels, unsigned int n_probes)
428*4882a593Smuzhiyun {
429*4882a593Smuzhiyun struct wl1251_cmd_scan *cmd;
430*4882a593Smuzhiyun int i, ret = 0;
431*4882a593Smuzhiyun
432*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd scan channels %d", n_channels);
433*4882a593Smuzhiyun
434*4882a593Smuzhiyun WARN_ON(n_channels > SCAN_MAX_NUM_OF_CHANNELS);
435*4882a593Smuzhiyun
436*4882a593Smuzhiyun cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
437*4882a593Smuzhiyun if (!cmd)
438*4882a593Smuzhiyun return -ENOMEM;
439*4882a593Smuzhiyun
440*4882a593Smuzhiyun cmd->params.rx_config_options = cpu_to_le32(CFG_RX_ALL_GOOD);
441*4882a593Smuzhiyun cmd->params.rx_filter_options = cpu_to_le32(CFG_RX_PRSP_EN |
442*4882a593Smuzhiyun CFG_RX_MGMT_EN |
443*4882a593Smuzhiyun CFG_RX_BCN_EN);
444*4882a593Smuzhiyun cmd->params.scan_options = 0;
445*4882a593Smuzhiyun /*
446*4882a593Smuzhiyun * Use high priority scan when not associated to prevent fw issue
447*4882a593Smuzhiyun * causing never-ending scans (sometimes 20+ minutes).
448*4882a593Smuzhiyun * Note: This bug may be caused by the fw's DTIM handling.
449*4882a593Smuzhiyun */
450*4882a593Smuzhiyun if (is_zero_ether_addr(wl->bssid))
451*4882a593Smuzhiyun cmd->params.scan_options |= cpu_to_le16(WL1251_SCAN_OPT_PRIORITY_HIGH);
452*4882a593Smuzhiyun cmd->params.num_channels = n_channels;
453*4882a593Smuzhiyun cmd->params.num_probe_requests = n_probes;
454*4882a593Smuzhiyun cmd->params.tx_rate = cpu_to_le16(1 << 1); /* 2 Mbps */
455*4882a593Smuzhiyun cmd->params.tid_trigger = 0;
456*4882a593Smuzhiyun
457*4882a593Smuzhiyun for (i = 0; i < n_channels; i++) {
458*4882a593Smuzhiyun cmd->channels[i].min_duration =
459*4882a593Smuzhiyun cpu_to_le32(WL1251_SCAN_MIN_DURATION);
460*4882a593Smuzhiyun cmd->channels[i].max_duration =
461*4882a593Smuzhiyun cpu_to_le32(WL1251_SCAN_MAX_DURATION);
462*4882a593Smuzhiyun memset(&cmd->channels[i].bssid_lsb, 0xff, 4);
463*4882a593Smuzhiyun memset(&cmd->channels[i].bssid_msb, 0xff, 2);
464*4882a593Smuzhiyun cmd->channels[i].early_termination = 0;
465*4882a593Smuzhiyun cmd->channels[i].tx_power_att = 0;
466*4882a593Smuzhiyun cmd->channels[i].channel = channels[i]->hw_value;
467*4882a593Smuzhiyun }
468*4882a593Smuzhiyun
469*4882a593Smuzhiyun if (ssid) {
470*4882a593Smuzhiyun int len = clamp_val(ssid_len, 0, IEEE80211_MAX_SSID_LEN);
471*4882a593Smuzhiyun
472*4882a593Smuzhiyun cmd->params.ssid_len = len;
473*4882a593Smuzhiyun memcpy(cmd->params.ssid, ssid, len);
474*4882a593Smuzhiyun }
475*4882a593Smuzhiyun
476*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_SCAN, cmd, sizeof(*cmd));
477*4882a593Smuzhiyun if (ret < 0) {
478*4882a593Smuzhiyun wl1251_error("cmd scan failed: %d", ret);
479*4882a593Smuzhiyun goto out;
480*4882a593Smuzhiyun }
481*4882a593Smuzhiyun
482*4882a593Smuzhiyun wl1251_mem_read(wl, wl->cmd_box_addr, cmd, sizeof(*cmd));
483*4882a593Smuzhiyun
484*4882a593Smuzhiyun if (cmd->header.status != CMD_STATUS_SUCCESS) {
485*4882a593Smuzhiyun wl1251_error("cmd scan status wasn't success: %d",
486*4882a593Smuzhiyun cmd->header.status);
487*4882a593Smuzhiyun ret = -EIO;
488*4882a593Smuzhiyun goto out;
489*4882a593Smuzhiyun }
490*4882a593Smuzhiyun
491*4882a593Smuzhiyun out:
492*4882a593Smuzhiyun kfree(cmd);
493*4882a593Smuzhiyun return ret;
494*4882a593Smuzhiyun }
495*4882a593Smuzhiyun
wl1251_cmd_trigger_scan_to(struct wl1251 * wl,u32 timeout)496*4882a593Smuzhiyun int wl1251_cmd_trigger_scan_to(struct wl1251 *wl, u32 timeout)
497*4882a593Smuzhiyun {
498*4882a593Smuzhiyun struct wl1251_cmd_trigger_scan_to *cmd;
499*4882a593Smuzhiyun int ret;
500*4882a593Smuzhiyun
501*4882a593Smuzhiyun wl1251_debug(DEBUG_CMD, "cmd trigger scan to");
502*4882a593Smuzhiyun
503*4882a593Smuzhiyun cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
504*4882a593Smuzhiyun if (!cmd)
505*4882a593Smuzhiyun return -ENOMEM;
506*4882a593Smuzhiyun
507*4882a593Smuzhiyun cmd->timeout = timeout;
508*4882a593Smuzhiyun
509*4882a593Smuzhiyun ret = wl1251_cmd_send(wl, CMD_TRIGGER_SCAN_TO, cmd, sizeof(*cmd));
510*4882a593Smuzhiyun if (ret < 0) {
511*4882a593Smuzhiyun wl1251_error("cmd trigger scan to failed: %d", ret);
512*4882a593Smuzhiyun goto out;
513*4882a593Smuzhiyun }
514*4882a593Smuzhiyun
515*4882a593Smuzhiyun out:
516*4882a593Smuzhiyun kfree(cmd);
517*4882a593Smuzhiyun return ret;
518*4882a593Smuzhiyun }
519