drivers/net/wireless/iwlegacy/3945.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2003 - 2011 Intel Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  * The full GNU General Public License is included in this distribution in the
  19  * file called LICENSE.
  20  *
  21  * Contact Information:
  22  *  Intel Linux Wireless <ilw@linux.intel.com>
  23  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  24  *
  25  *****************************************************************************/
  26
  27 #include <linux/kernel.h>
  28 #include <linux/module.h>
  29 #include <linux/init.h>
  30 #include <linux/slab.h>
  31 #include <linux/pci.h>
  32 #include <linux/dma-mapping.h>
  33 #include <linux/delay.h>
  34 #include <linux/sched.h>
  35 #include <linux/skbuff.h>
  36 #include <linux/netdevice.h>
  37 #include <linux/firmware.h>
  38 #include <linux/etherdevice.h>
  39 #include <asm/unaligned.h>
  40 #include <net/mac80211.h>
  41
  42 #include "common.h"
  43 #include "3945.h"
  44
  45 /* Send led command */
  46 static int
  47 il3945_send_led_cmd(struct il_priv *il, struct il_led_cmd *led_cmd)
  48 {
  49         struct il_host_cmd cmd = {
  50                 .id = C_LEDS,
  51                 .len = sizeof(struct il_led_cmd),
  52                 .data = led_cmd,
  53                 .flags = CMD_ASYNC,
  54                 .callback = NULL,
  55         };
  56
  57         return il_send_cmd(il, &cmd);
  58 }
  59
  60 #define IL_DECLARE_RATE_INFO(r, ip, in, rp, rn, pp, np)    \
  61         [RATE_##r##M_IDX] = { RATE_##r##M_PLCP,   \
  62                                     RATE_##r##M_IEEE,   \
  63                                     RATE_##ip##M_IDX, \
  64                                     RATE_##in##M_IDX, \
  65                                     RATE_##rp##M_IDX, \
  66                                     RATE_##rn##M_IDX, \
  67                                     RATE_##pp##M_IDX, \
  68                                     RATE_##np##M_IDX, \
  69                                     RATE_##r##M_IDX_TBL, \
  70                                     RATE_##ip##M_IDX_TBL }
  71
  72 /*
  73  * Parameter order:
  74  *   rate, prev rate, next rate, prev tgg rate, next tgg rate
  75  *
  76  * If there isn't a valid next or previous rate then INV is used which
  77  * maps to RATE_INVALID
  78  *
  79  */
  80 const struct il3945_rate_info il3945_rates[RATE_COUNT_3945] = {
  81         IL_DECLARE_RATE_INFO(1, INV, 2, INV, 2, INV, 2),        /*  1mbps */
  82         IL_DECLARE_RATE_INFO(2, 1, 5, 1, 5, 1, 5),      /*  2mbps */
  83         IL_DECLARE_RATE_INFO(5, 2, 6, 2, 11, 2, 11),    /*5.5mbps */
  84         IL_DECLARE_RATE_INFO(11, 9, 12, 5, 12, 5, 18),  /* 11mbps */
  85         IL_DECLARE_RATE_INFO(6, 5, 9, 5, 11, 5, 11),    /*  6mbps */
  86         IL_DECLARE_RATE_INFO(9, 6, 11, 5, 11, 5, 11),   /*  9mbps */
  87         IL_DECLARE_RATE_INFO(12, 11, 18, 11, 18, 11, 18),       /* 12mbps */
  88         IL_DECLARE_RATE_INFO(18, 12, 24, 12, 24, 11, 24),       /* 18mbps */
  89         IL_DECLARE_RATE_INFO(24, 18, 36, 18, 36, 18, 36),       /* 24mbps */
  90         IL_DECLARE_RATE_INFO(36, 24, 48, 24, 48, 24, 48),       /* 36mbps */
  91         IL_DECLARE_RATE_INFO(48, 36, 54, 36, 54, 36, 54),       /* 48mbps */
  92         IL_DECLARE_RATE_INFO(54, 48, INV, 48, INV, 48, INV),    /* 54mbps */
  93 };
  94
  95 static inline u8
  96 il3945_get_prev_ieee_rate(u8 rate_idx)
  97 {
  98         u8 rate = il3945_rates[rate_idx].prev_ieee;
  99
 100         if (rate == RATE_INVALID)
 101                 rate = rate_idx;
 102         return rate;
 103 }
 104
 105 /* 1 = enable the il3945_disable_events() function */
 106 #define IL_EVT_DISABLE (0)
 107 #define IL_EVT_DISABLE_SIZE (1532/32)
 108
 109 /**
 110  * il3945_disable_events - Disable selected events in uCode event log
 111  *
 112  * Disable an event by writing "1"s into "disable"
 113  *   bitmap in SRAM.  Bit position corresponds to Event # (id/type).
 114  *   Default values of 0 enable uCode events to be logged.
 115  * Use for only special debugging.  This function is just a placeholder as-is,
 116  *   you'll need to provide the special bits! ...
 117  *   ... and set IL_EVT_DISABLE to 1. */
 118 void
 119 il3945_disable_events(struct il_priv *il)
 120 {
 121         int i;
 122         u32 base;               /* SRAM address of event log header */
 123         u32 disable_ptr;        /* SRAM address of event-disable bitmap array */
 124         u32 array_size;         /* # of u32 entries in array */
 125         static const u32 evt_disable[IL_EVT_DISABLE_SIZE] = {
 126                 0x00000000,     /*   31 -    0  Event id numbers */
 127                 0x00000000,     /*   63 -   32 */
 128                 0x00000000,     /*   95 -   64 */
 129                 0x00000000,     /*  127 -   96 */
 130                 0x00000000,     /*  159 -  128 */
 131                 0x00000000,     /*  191 -  160 */
 132                 0x00000000,     /*  223 -  192 */
 133                 0x00000000,     /*  255 -  224 */
 134                 0x00000000,     /*  287 -  256 */
 135                 0x00000000,     /*  319 -  288 */
 136                 0x00000000,     /*  351 -  320 */
 137                 0x00000000,     /*  383 -  352 */
 138                 0x00000000,     /*  415 -  384 */
 139                 0x00000000,     /*  447 -  416 */
 140                 0x00000000,     /*  479 -  448 */
 141                 0x00000000,     /*  511 -  480 */
 142                 0x00000000,     /*  543 -  512 */
 143                 0x00000000,     /*  575 -  544 */
 144                 0x00000000,     /*  607 -  576 */
 145                 0x00000000,     /*  639 -  608 */
 146                 0x00000000,     /*  671 -  640 */
 147                 0x00000000,     /*  703 -  672 */
 148                 0x00000000,     /*  735 -  704 */
 149                 0x00000000,     /*  767 -  736 */
 150                 0x00000000,     /*  799 -  768 */
 151                 0x00000000,     /*  831 -  800 */
 152                 0x00000000,     /*  863 -  832 */
 153                 0x00000000,     /*  895 -  864 */
 154                 0x00000000,     /*  927 -  896 */
 155                 0x00000000,     /*  959 -  928 */
 156                 0x00000000,     /*  991 -  960 */
 157                 0x00000000,     /* 1023 -  992 */
 158                 0x00000000,     /* 1055 - 1024 */
 159                 0x00000000,     /* 1087 - 1056 */
 160                 0x00000000,     /* 1119 - 1088 */
 161                 0x00000000,     /* 1151 - 1120 */
 162                 0x00000000,     /* 1183 - 1152 */
 163                 0x00000000,     /* 1215 - 1184 */
 164                 0x00000000,     /* 1247 - 1216 */
 165                 0x00000000,     /* 1279 - 1248 */
 166                 0x00000000,     /* 1311 - 1280 */
 167                 0x00000000,     /* 1343 - 1312 */
 168                 0x00000000,     /* 1375 - 1344 */
 169                 0x00000000,     /* 1407 - 1376 */
 170                 0x00000000,     /* 1439 - 1408 */
 171                 0x00000000,     /* 1471 - 1440 */
 172                 0x00000000,     /* 1503 - 1472 */
 173         };
 174
 175         base = le32_to_cpu(il->card_alive.log_event_table_ptr);
 176         if (!il3945_hw_valid_rtc_data_addr(base)) {
 177                 IL_ERR("Invalid event log pointer 0x%08X\n", base);
 178                 return;
 179         }
 180
 181         disable_ptr = il_read_targ_mem(il, base + (4 * sizeof(u32)));
 182         array_size = il_read_targ_mem(il, base + (5 * sizeof(u32)));
 183
 184         if (IL_EVT_DISABLE && array_size == IL_EVT_DISABLE_SIZE) {
 185                 D_INFO("Disabling selected uCode log events at 0x%x\n",
 186                        disable_ptr);
 187                 for (i = 0; i < IL_EVT_DISABLE_SIZE; i++)
 188                         il_write_targ_mem(il, disable_ptr + (i * sizeof(u32)),
 189                                           evt_disable[i]);
 190
 191         } else {
 192                 D_INFO("Selected uCode log events may be disabled\n");
 193                 D_INFO("  by writing \"1\"s into disable bitmap\n");
 194                 D_INFO("  in SRAM at 0x%x, size %d u32s\n", disable_ptr,
 195                        array_size);
 196         }
 197
 198 }
 199
 200 static int
 201 il3945_hwrate_to_plcp_idx(u8 plcp)
 202 {
 203         int idx;
 204
 205         for (idx = 0; idx < RATE_COUNT_3945; idx++)
 206                 if (il3945_rates[idx].plcp == plcp)
 207                         return idx;
 208         return -1;
 209 }
 210
 211 #ifdef CONFIG_IWLEGACY_DEBUG
 212 #define TX_STATUS_ENTRY(x) case TX_3945_STATUS_FAIL_ ## x: return #x
 213
 214 static const char *
 215 il3945_get_tx_fail_reason(u32 status)
 216 {
 217         switch (status & TX_STATUS_MSK) {
 218         case TX_3945_STATUS_SUCCESS:
 219                 return "SUCCESS";
 220                 TX_STATUS_ENTRY(SHORT_LIMIT);
 221                 TX_STATUS_ENTRY(LONG_LIMIT);
 222                 TX_STATUS_ENTRY(FIFO_UNDERRUN);
 223                 TX_STATUS_ENTRY(MGMNT_ABORT);
 224                 TX_STATUS_ENTRY(NEXT_FRAG);
 225                 TX_STATUS_ENTRY(LIFE_EXPIRE);
 226                 TX_STATUS_ENTRY(DEST_PS);
 227                 TX_STATUS_ENTRY(ABORTED);
 228                 TX_STATUS_ENTRY(BT_RETRY);
 229                 TX_STATUS_ENTRY(STA_INVALID);
 230                 TX_STATUS_ENTRY(FRAG_DROPPED);
 231                 TX_STATUS_ENTRY(TID_DISABLE);
 232                 TX_STATUS_ENTRY(FRAME_FLUSHED);
 233                 TX_STATUS_ENTRY(INSUFFICIENT_CF_POLL);
 234                 TX_STATUS_ENTRY(TX_LOCKED);
 235                 TX_STATUS_ENTRY(NO_BEACON_ON_RADAR);
 236         }
 237
 238         return "UNKNOWN";
 239 }
 240 #else
 241 static inline const char *
 242 il3945_get_tx_fail_reason(u32 status)
 243 {
 244         return "";
 245 }
 246 #endif
 247
 248 /*
 249  * get ieee prev rate from rate scale table.
 250  * for A and B mode we need to overright prev
 251  * value
 252  */
 253 int
 254 il3945_rs_next_rate(struct il_priv *il, int rate)
 255 {
 256         int next_rate = il3945_get_prev_ieee_rate(rate);
 257
 258         switch (il->band) {
 259         case IEEE80211_BAND_5GHZ:
 260                 if (rate == RATE_12M_IDX)
 261                         next_rate = RATE_9M_IDX;
 262                 else if (rate == RATE_6M_IDX)
 263                         next_rate = RATE_6M_IDX;
 264                 break;
 265         case IEEE80211_BAND_2GHZ:
 266                 if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
 267                     il_is_associated(il)) {
 268                         if (rate == RATE_11M_IDX)
 269                                 next_rate = RATE_5M_IDX;
 270                 }
 271                 break;
 272
 273         default:
 274                 break;
 275         }
 276
 277         return next_rate;
 278 }
 279
 280 /**
 281  * il3945_tx_queue_reclaim - Reclaim Tx queue entries already Tx'd
 282  *
 283  * When FW advances 'R' idx, all entries between old and new 'R' idx
 284  * need to be reclaimed. As result, some free space forms. If there is
 285  * enough free space (> low mark), wake the stack that feeds us.
 286  */
 287 static void
 288 il3945_tx_queue_reclaim(struct il_priv *il, int txq_id, int idx)
 289 {
 290         struct il_tx_queue *txq = &il->txq[txq_id];
 291         struct il_queue *q = &txq->q;
 292         struct sk_buff *skb;
 293
 294         BUG_ON(txq_id == IL39_CMD_QUEUE_NUM);
 295
 296         for (idx = il_queue_inc_wrap(idx, q->n_bd); q->read_ptr != idx;
 297              q->read_ptr = il_queue_inc_wrap(q->read_ptr, q->n_bd)) {
 298
 299                 skb = txq->skbs[txq->q.read_ptr];
 300                 ieee80211_tx_status_irqsafe(il->hw, skb);
 301                 txq->skbs[txq->q.read_ptr] = NULL;
 302                 il->ops->txq_free_tfd(il, txq);
 303         }
 304
 305         if (il_queue_space(q) > q->low_mark && txq_id >= 0 &&
 306             txq_id != IL39_CMD_QUEUE_NUM && il->mac80211_registered)
 307                 il_wake_queue(il, txq);
 308 }
 309
 310 /**
 311  * il3945_hdl_tx - Handle Tx response
 312  */
 313 static void
 314 il3945_hdl_tx(struct il_priv *il, struct il_rx_buf *rxb)
 315 {
 316         struct il_rx_pkt *pkt = rxb_addr(rxb);
 317         u16 sequence = le16_to_cpu(pkt->hdr.sequence);
 318         int txq_id = SEQ_TO_QUEUE(sequence);
 319         int idx = SEQ_TO_IDX(sequence);
 320         struct il_tx_queue *txq = &il->txq[txq_id];
 321         struct ieee80211_tx_info *info;
 322         struct il3945_tx_resp *tx_resp = (void *)&pkt->u.raw[0];
 323         u32 status = le32_to_cpu(tx_resp->status);
 324         int rate_idx;
 325         int fail;
 326
 327         if (idx >= txq->q.n_bd || il_queue_used(&txq->q, idx) == 0) {
 328                 IL_ERR("Read idx for DMA queue txq_id (%d) idx %d "
 329                        "is out of range [0-%d] %d %d\n", txq_id, idx,
 330                        txq->q.n_bd, txq->q.write_ptr, txq->q.read_ptr);
 331                 return;
 332         }
 333
 334         /*
 335          * Firmware will not transmit frame on passive channel, if it not yet
 336          * received some valid frame on that channel. When this error happen
 337          * we have to wait until firmware will unblock itself i.e. when we
 338          * note received beacon or other frame. We unblock queues in
 339          * il3945_pass_packet_to_mac80211 or in il_mac_bss_info_changed.
 340          */
 341         if (unlikely((status & TX_STATUS_MSK) == TX_STATUS_FAIL_PASSIVE_NO_RX) &&
 342             il->iw_mode == NL80211_IFTYPE_STATION) {
 343                 il_stop_queues_by_reason(il, IL_STOP_REASON_PASSIVE);
 344                 D_INFO("Stopped queues - RX waiting on passive channel\n");
 345         }
 346
 347         txq->time_stamp = jiffies;
 348         info = IEEE80211_SKB_CB(txq->skbs[txq->q.read_ptr]);
 349         ieee80211_tx_info_clear_status(info);
 350
 351         /* Fill the MRR chain with some info about on-chip retransmissions */
 352         rate_idx = il3945_hwrate_to_plcp_idx(tx_resp->rate);
 353         if (info->band == IEEE80211_BAND_5GHZ)
 354                 rate_idx -= IL_FIRST_OFDM_RATE;
 355
 356         fail = tx_resp->failure_frame;
 357
 358         info->status.rates[0].idx = rate_idx;
 359         info->status.rates[0].count = fail + 1; /* add final attempt */
 360
 361         /* tx_status->rts_retry_count = tx_resp->failure_rts; */
 362         info->flags |=
 363             ((status & TX_STATUS_MSK) ==
 364              TX_STATUS_SUCCESS) ? IEEE80211_TX_STAT_ACK : 0;
 365
 366         D_TX("Tx queue %d Status %s (0x%08x) plcp rate %d retries %d\n", txq_id,
 367              il3945_get_tx_fail_reason(status), status, tx_resp->rate,
 368              tx_resp->failure_frame);
 369
 370         D_TX_REPLY("Tx queue reclaim %d\n", idx);
 371         il3945_tx_queue_reclaim(il, txq_id, idx);
 372
 373         if (status & TX_ABORT_REQUIRED_MSK)
 374                 IL_ERR("TODO:  Implement Tx ABORT REQUIRED!!!\n");
 375 }
 376
 377 /*****************************************************************************
 378  *
 379  * Intel PRO/Wireless 3945ABG/BG Network Connection
 380  *
 381  *  RX handler implementations
 382  *
 383  *****************************************************************************/
 384 #ifdef CONFIG_IWLEGACY_DEBUGFS
 385 static void
 386 il3945_accumulative_stats(struct il_priv *il, __le32 * stats)
 387 {
 388         int i;
 389         __le32 *prev_stats;
 390         u32 *accum_stats;
 391         u32 *delta, *max_delta;
 392
 393         prev_stats = (__le32 *) &il->_3945.stats;
 394         accum_stats = (u32 *) &il->_3945.accum_stats;
 395         delta = (u32 *) &il->_3945.delta_stats;
 396         max_delta = (u32 *) &il->_3945.max_delta;
 397
 398         for (i = sizeof(__le32); i < sizeof(struct il3945_notif_stats);
 399              i +=
 400              sizeof(__le32), stats++, prev_stats++, delta++, max_delta++,
 401              accum_stats++) {
 402                 if (le32_to_cpu(*stats) > le32_to_cpu(*prev_stats)) {
 403                         *delta =
 404                             (le32_to_cpu(*stats) - le32_to_cpu(*prev_stats));
 405                         *accum_stats += *delta;
 406                         if (*delta > *max_delta)
 407                                 *max_delta = *delta;
 408                 }
 409         }
 410
 411         /* reset accumulative stats for "no-counter" type stats */
 412         il->_3945.accum_stats.general.temperature =
 413             il->_3945.stats.general.temperature;
 414         il->_3945.accum_stats.general.ttl_timestamp =
 415             il->_3945.stats.general.ttl_timestamp;
 416 }
 417 #endif
 418
 419 void
 420 il3945_hdl_stats(struct il_priv *il, struct il_rx_buf *rxb)
 421 {
 422         struct il_rx_pkt *pkt = rxb_addr(rxb);
 423
 424         D_RX("Statistics notification received (%d vs %d).\n",
 425              (int)sizeof(struct il3945_notif_stats),
 426              le32_to_cpu(pkt->len_n_flags) & IL_RX_FRAME_SIZE_MSK);
 427 #ifdef CONFIG_IWLEGACY_DEBUGFS
 428         il3945_accumulative_stats(il, (__le32 *) &pkt->u.raw);
 429 #endif
 430
 431         memcpy(&il->_3945.stats, pkt->u.raw, sizeof(il->_3945.stats));
 432 }
 433
 434 void
 435 il3945_hdl_c_stats(struct il_priv *il, struct il_rx_buf *rxb)
 436 {
 437         struct il_rx_pkt *pkt = rxb_addr(rxb);
 438         __le32 *flag = (__le32 *) &pkt->u.raw;
 439
 440         if (le32_to_cpu(*flag) & UCODE_STATS_CLEAR_MSK) {
 441 #ifdef CONFIG_IWLEGACY_DEBUGFS
 442                 memset(&il->_3945.accum_stats, 0,
 443                        sizeof(struct il3945_notif_stats));
 444                 memset(&il->_3945.delta_stats, 0,
 445                        sizeof(struct il3945_notif_stats));
 446                 memset(&il->_3945.max_delta, 0,
 447                        sizeof(struct il3945_notif_stats));
 448 #endif
 449                 D_RX("Statistics have been cleared\n");
 450         }
 451         il3945_hdl_stats(il, rxb);
 452 }
 453
 454 /******************************************************************************
 455  *
 456  * Misc. internal state and helper functions
 457  *
 458  ******************************************************************************/
 459
 460 /* This is necessary only for a number of stats, see the caller. */
 461 static int
 462 il3945_is_network_packet(struct il_priv *il, struct ieee80211_hdr *header)
 463 {
 464         /* Filter incoming packets to determine if they are targeted toward
 465          * this network, discarding packets coming from ourselves */
 466         switch (il->iw_mode) {
 467         case NL80211_IFTYPE_ADHOC:      /* Header: Dest. | Source    | BSSID */
 468                 /* packets to our IBSS update information */
 469                 return ether_addr_equal(header->addr3, il->bssid);
 470         case NL80211_IFTYPE_STATION:    /* Header: Dest. | AP{BSSID} | Source */
 471                 /* packets to our IBSS update information */
 472                 return ether_addr_equal(header->addr2, il->bssid);
 473         default:
 474                 return 1;
 475         }
 476 }
 477
 478 static void
 479 il3945_pass_packet_to_mac80211(struct il_priv *il, struct il_rx_buf *rxb,
 480                                struct ieee80211_rx_status *stats)
 481 {
 482         struct il_rx_pkt *pkt = rxb_addr(rxb);
 483         struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
 484         struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
 485         struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
 486         u16 len = le16_to_cpu(rx_hdr->len);
 487         struct sk_buff *skb;
 488         __le16 fc = hdr->frame_control;
 489
 490         /* We received data from the HW, so stop the watchdog */
 491         if (unlikely
 492             (len + IL39_RX_FRAME_SIZE >
 493              PAGE_SIZE << il->hw_params.rx_page_order)) {
 494                 D_DROP("Corruption detected!\n");
 495                 return;
 496         }
 497
 498         /* We only process data packets if the interface is open */
 499         if (unlikely(!il->is_open)) {
 500                 D_DROP("Dropping packet while interface is not open.\n");
 501                 return;
 502         }
 503
 504         if (unlikely(test_bit(IL_STOP_REASON_PASSIVE, &il->stop_reason))) {
 505                 il_wake_queues_by_reason(il, IL_STOP_REASON_PASSIVE);
 506                 D_INFO("Woke queues - frame received on passive channel\n");
 507         }
 508
 509         skb = dev_alloc_skb(128);
 510         if (!skb) {
 511                 IL_ERR("dev_alloc_skb failed\n");
 512                 return;
 513         }
 514
 515         if (!il3945_mod_params.sw_crypto)
 516                 il_set_decrypted_flag(il, (struct ieee80211_hdr *)rxb_addr(rxb),
 517                                       le32_to_cpu(rx_end->status), stats);
 518
 519         skb_add_rx_frag(skb, 0, rxb->page,
 520                         (void *)rx_hdr->payload - (void *)pkt, len,
 521                         len);
 522
 523         il_update_stats(il, false, fc, len);
 524         memcpy(IEEE80211_SKB_RXCB(skb), stats, sizeof(*stats));
 525
 526         ieee80211_rx(il->hw, skb);
 527         il->alloc_rxb_page--;
 528         rxb->page = NULL;
 529 }
 530
 531 #define IL_DELAY_NEXT_SCAN_AFTER_ASSOC (HZ*6)
 532
 533 static void
 534 il3945_hdl_rx(struct il_priv *il, struct il_rx_buf *rxb)
 535 {
 536         struct ieee80211_hdr *header;
 537         struct ieee80211_rx_status rx_status = {};
 538         struct il_rx_pkt *pkt = rxb_addr(rxb);
 539         struct il3945_rx_frame_stats *rx_stats = IL_RX_STATS(pkt);
 540         struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
 541         struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
 542         u16 rx_stats_sig_avg __maybe_unused = le16_to_cpu(rx_stats->sig_avg);
 543         u16 rx_stats_noise_diff __maybe_unused =
 544             le16_to_cpu(rx_stats->noise_diff);
 545         u8 network_packet;
 546
 547         rx_status.flag = 0;
 548         rx_status.mactime = le64_to_cpu(rx_end->timestamp);
 549         rx_status.band =
 550             (rx_hdr->
 551              phy_flags & RX_RES_PHY_FLAGS_BAND_24_MSK) ? IEEE80211_BAND_2GHZ :
 552             IEEE80211_BAND_5GHZ;
 553         rx_status.freq =
 554             ieee80211_channel_to_frequency(le16_to_cpu(rx_hdr->channel),
 555                                            rx_status.band);
 556
 557         rx_status.rate_idx = il3945_hwrate_to_plcp_idx(rx_hdr->rate);
 558         if (rx_status.band == IEEE80211_BAND_5GHZ)
 559                 rx_status.rate_idx -= IL_FIRST_OFDM_RATE;
 560
 561         rx_status.antenna =
 562             (le16_to_cpu(rx_hdr->phy_flags) & RX_RES_PHY_FLAGS_ANTENNA_MSK) >>
 563             4;
 564
 565         /* set the preamble flag if appropriate */
 566         if (rx_hdr->phy_flags & RX_RES_PHY_FLAGS_SHORT_PREAMBLE_MSK)
 567                 rx_status.flag |= RX_FLAG_SHORTPRE;
 568
 569         if ((unlikely(rx_stats->phy_count > 20))) {
 570                 D_DROP("dsp size out of range [0,20]: %d/n",
 571                        rx_stats->phy_count);
 572                 return;
 573         }
 574
 575         if (!(rx_end->status & RX_RES_STATUS_NO_CRC32_ERROR) ||
 576             !(rx_end->status & RX_RES_STATUS_NO_RXE_OVERFLOW)) {
 577                 D_RX("Bad CRC or FIFO: 0x%08X.\n", rx_end->status);
 578                 return;
 579         }
 580
 581         /* Convert 3945's rssi indicator to dBm */
 582         rx_status.signal = rx_stats->rssi - IL39_RSSI_OFFSET;
 583
 584         D_STATS("Rssi %d sig_avg %d noise_diff %d\n", rx_status.signal,
 585                 rx_stats_sig_avg, rx_stats_noise_diff);
 586
 587         header = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
 588
 589         network_packet = il3945_is_network_packet(il, header);
 590
 591         D_STATS("[%c] %d RSSI:%d Signal:%u, Rate:%u\n",
 592                 network_packet ? '*' : ' ', le16_to_cpu(rx_hdr->channel),
 593                 rx_status.signal, rx_status.signal, rx_status.rate_idx);
 594
 595         if (network_packet) {
 596                 il->_3945.last_beacon_time =
 597                     le32_to_cpu(rx_end->beacon_timestamp);
 598                 il->_3945.last_tsf = le64_to_cpu(rx_end->timestamp);
 599                 il->_3945.last_rx_rssi = rx_status.signal;
 600         }
 601
 602         il3945_pass_packet_to_mac80211(il, rxb, &rx_status);
 603 }
 604
 605 int
 606 il3945_hw_txq_attach_buf_to_tfd(struct il_priv *il, struct il_tx_queue *txq,
 607                                 dma_addr_t addr, u16 len, u8 reset, u8 pad)
 608 {
 609         int count;
 610         struct il_queue *q;
 611         struct il3945_tfd *tfd, *tfd_tmp;
 612
 613         q = &txq->q;
 614         tfd_tmp = (struct il3945_tfd *)txq->tfds;
 615         tfd = &tfd_tmp[q->write_ptr];
 616
 617         if (reset)
 618                 memset(tfd, 0, sizeof(*tfd));
 619
 620         count = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
 621
 622         if (count >= NUM_TFD_CHUNKS || count < 0) {
 623                 IL_ERR("Error can not send more than %d chunks\n",
 624                        NUM_TFD_CHUNKS);
 625                 return -EINVAL;
 626         }
 627
 628         tfd->tbs[count].addr = cpu_to_le32(addr);
 629         tfd->tbs[count].len = cpu_to_le32(len);
 630
 631         count++;
 632
 633         tfd->control_flags =
 634             cpu_to_le32(TFD_CTL_COUNT_SET(count) | TFD_CTL_PAD_SET(pad));
 635
 636         return 0;
 637 }
 638
 639 /**
 640  * il3945_hw_txq_free_tfd - Free one TFD, those at idx [txq->q.read_ptr]
 641  *
 642  * Does NOT advance any idxes
 643  */
 644 void
 645 il3945_hw_txq_free_tfd(struct il_priv *il, struct il_tx_queue *txq)
 646 {
 647         struct il3945_tfd *tfd_tmp = (struct il3945_tfd *)txq->tfds;
 648         int idx = txq->q.read_ptr;
 649         struct il3945_tfd *tfd = &tfd_tmp[idx];
 650         struct pci_dev *dev = il->pci_dev;
 651         int i;
 652         int counter;
 653
 654         /* sanity check */
 655         counter = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
 656         if (counter > NUM_TFD_CHUNKS) {
 657                 IL_ERR("Too many chunks: %i\n", counter);
 658                 /* @todo issue fatal error, it is quite serious situation */
 659                 return;
 660         }
 661
 662         /* Unmap tx_cmd */
 663         if (counter)
 664                 pci_unmap_single(dev, dma_unmap_addr(&txq->meta[idx], mapping),
 665                                  dma_unmap_len(&txq->meta[idx], len),
 666                                  PCI_DMA_TODEVICE);
 667
 668         /* unmap chunks if any */
 669
 670         for (i = 1; i < counter; i++)
 671                 pci_unmap_single(dev, le32_to_cpu(tfd->tbs[i].addr),
 672                                  le32_to_cpu(tfd->tbs[i].len),
 673                                  PCI_DMA_TODEVICE);
 674
 675         /* free SKB */
 676         if (txq->skbs) {
 677                 struct sk_buff *skb = txq->skbs[txq->q.read_ptr];
 678
 679                 /* can be called from irqs-disabled context */
 680                 if (skb) {
 681                         dev_kfree_skb_any(skb);
 682                         txq->skbs[txq->q.read_ptr] = NULL;
 683                 }
 684         }
 685 }
 686
 687 /**
 688  * il3945_hw_build_tx_cmd_rate - Add rate portion to TX_CMD:
 689  *
 690 */
 691 void
 692 il3945_hw_build_tx_cmd_rate(struct il_priv *il, struct il_device_cmd *cmd,
 693                             struct ieee80211_tx_info *info,
 694                             struct ieee80211_hdr *hdr, int sta_id)
 695 {
 696         u16 hw_value = ieee80211_get_tx_rate(il->hw, info)->hw_value;
 697         u16 rate_idx = min(hw_value & 0xffff, RATE_COUNT_3945 - 1);
 698         u16 rate_mask;
 699         int rate;
 700         const u8 rts_retry_limit = 7;
 701         u8 data_retry_limit;
 702         __le32 tx_flags;
 703         __le16 fc = hdr->frame_control;
 704         struct il3945_tx_cmd *tx_cmd = (struct il3945_tx_cmd *)cmd->cmd.payload;
 705
 706         rate = il3945_rates[rate_idx].plcp;
 707         tx_flags = tx_cmd->tx_flags;
 708
 709         /* We need to figure out how to get the sta->supp_rates while
 710          * in this running context */
 711         rate_mask = RATES_MASK_3945;
 712
 713         /* Set retry limit on DATA packets and Probe Responses */
 714         if (ieee80211_is_probe_resp(fc))
 715                 data_retry_limit = 3;
 716         else
 717                 data_retry_limit = IL_DEFAULT_TX_RETRY;
 718         tx_cmd->data_retry_limit = data_retry_limit;
 719         /* Set retry limit on RTS packets */
 720         tx_cmd->rts_retry_limit = min(data_retry_limit, rts_retry_limit);
 721
 722         tx_cmd->rate = rate;
 723         tx_cmd->tx_flags = tx_flags;
 724
 725         /* OFDM */
 726         tx_cmd->supp_rates[0] =
 727             ((rate_mask & IL_OFDM_RATES_MASK) >> IL_FIRST_OFDM_RATE) & 0xFF;
 728
 729         /* CCK */
 730         tx_cmd->supp_rates[1] = (rate_mask & 0xF);
 731
 732         D_RATE("Tx sta id: %d, rate: %d (plcp), flags: 0x%4X "
 733                "cck/ofdm mask: 0x%x/0x%x\n", sta_id, tx_cmd->rate,
 734                le32_to_cpu(tx_cmd->tx_flags), tx_cmd->supp_rates[1],
 735                tx_cmd->supp_rates[0]);
 736 }
 737
 738 static u8
 739 il3945_sync_sta(struct il_priv *il, int sta_id, u16 tx_rate)
 740 {
 741         unsigned long flags_spin;
 742         struct il_station_entry *station;
 743
 744         if (sta_id == IL_INVALID_STATION)
 745                 return IL_INVALID_STATION;
 746
 747         spin_lock_irqsave(&il->sta_lock, flags_spin);
 748         station = &il->stations[sta_id];
 749
 750         station->sta.sta.modify_mask = STA_MODIFY_TX_RATE_MSK;
 751         station->sta.rate_n_flags = cpu_to_le16(tx_rate);
 752         station->sta.mode = STA_CONTROL_MODIFY_MSK;
 753         il_send_add_sta(il, &station->sta, CMD_ASYNC);
 754         spin_unlock_irqrestore(&il->sta_lock, flags_spin);
 755
 756         D_RATE("SCALE sync station %d to rate %d\n", sta_id, tx_rate);
 757         return sta_id;
 758 }
 759
 760 static void
 761 il3945_set_pwr_vmain(struct il_priv *il)
 762 {
 763 /*
 764  * (for documentation purposes)
 765  * to set power to V_AUX, do
 766
 767                 if (pci_pme_capable(il->pci_dev, PCI_D3cold)) {
 768                         il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
 769                                         APMG_PS_CTRL_VAL_PWR_SRC_VAUX,
 770                                         ~APMG_PS_CTRL_MSK_PWR_SRC);
 771
 772                         _il_poll_bit(il, CSR_GPIO_IN,
 773                                      CSR_GPIO_IN_VAL_VAUX_PWR_SRC,
 774                                      CSR_GPIO_IN_BIT_AUX_POWER, 5000);
 775                 }
 776  */
 777
 778         il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
 779                               APMG_PS_CTRL_VAL_PWR_SRC_VMAIN,
 780                               ~APMG_PS_CTRL_MSK_PWR_SRC);
 781
 782         _il_poll_bit(il, CSR_GPIO_IN, CSR_GPIO_IN_VAL_VMAIN_PWR_SRC,
 783                      CSR_GPIO_IN_BIT_AUX_POWER, 5000);
 784 }
 785
 786 static int
 787 il3945_rx_init(struct il_priv *il, struct il_rx_queue *rxq)
 788 {
 789         il_wr(il, FH39_RCSR_RBD_BASE(0), rxq->bd_dma);
 790         il_wr(il, FH39_RCSR_RPTR_ADDR(0), rxq->rb_stts_dma);
 791         il_wr(il, FH39_RCSR_WPTR(0), 0);
 792         il_wr(il, FH39_RCSR_CONFIG(0),
 793               FH39_RCSR_RX_CONFIG_REG_VAL_DMA_CHNL_EN_ENABLE |
 794               FH39_RCSR_RX_CONFIG_REG_VAL_RDRBD_EN_ENABLE |
 795               FH39_RCSR_RX_CONFIG_REG_BIT_WR_STTS_EN |
 796               FH39_RCSR_RX_CONFIG_REG_VAL_MAX_FRAG_SIZE_128 | (RX_QUEUE_SIZE_LOG
 797                                                                <<
 798                                                                FH39_RCSR_RX_CONFIG_REG_POS_RBDC_SIZE)
 799               | FH39_RCSR_RX_CONFIG_REG_VAL_IRQ_DEST_INT_HOST | (1 <<
 800                                                                  FH39_RCSR_RX_CONFIG_REG_POS_IRQ_RBTH)
 801               | FH39_RCSR_RX_CONFIG_REG_VAL_MSG_MODE_FH);
 802
 803         /* fake read to flush all prev I/O */
 804         il_rd(il, FH39_RSSR_CTRL);
 805
 806         return 0;
 807 }
 808
 809 static int
 810 il3945_tx_reset(struct il_priv *il)
 811 {
 812         /* bypass mode */
 813         il_wr_prph(il, ALM_SCD_MODE_REG, 0x2);
 814
 815         /* RA 0 is active */
 816         il_wr_prph(il, ALM_SCD_ARASTAT_REG, 0x01);
 817
 818         /* all 6 fifo are active */
 819         il_wr_prph(il, ALM_SCD_TXFACT_REG, 0x3f);
 820
 821         il_wr_prph(il, ALM_SCD_SBYP_MODE_1_REG, 0x010000);
 822         il_wr_prph(il, ALM_SCD_SBYP_MODE_2_REG, 0x030002);
 823         il_wr_prph(il, ALM_SCD_TXF4MF_REG, 0x000004);
 824         il_wr_prph(il, ALM_SCD_TXF5MF_REG, 0x000005);
 825
 826         il_wr(il, FH39_TSSR_CBB_BASE, il->_3945.shared_phys);
 827
 828         il_wr(il, FH39_TSSR_MSG_CONFIG,
 829               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TXPD_ON |
 830               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_TXPD_ON |
 831               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_MAX_FRAG_SIZE_128B |
 832               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TFD_ON |
 833               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_CBB_ON |
 834               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RSP_WAIT_TH |
 835               FH39_TSSR_TX_MSG_CONFIG_REG_VAL_RSP_WAIT_TH);
 836
 837         return 0;
 838 }
 839
 840 /**
 841  * il3945_txq_ctx_reset - Reset TX queue context
 842  *
 843  * Destroys all DMA structures and initialize them again
 844  */
 845 static int
 846 il3945_txq_ctx_reset(struct il_priv *il)
 847 {
 848         int rc, txq_id;
 849
 850         il3945_hw_txq_ctx_free(il);
 851
 852         /* allocate tx queue structure */
 853         rc = il_alloc_txq_mem(il);
 854         if (rc)
 855                 return rc;
 856
 857         /* Tx CMD queue */
 858         rc = il3945_tx_reset(il);
 859         if (rc)
 860                 goto error;
 861
 862         /* Tx queue(s) */
 863         for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
 864                 rc = il_tx_queue_init(il, txq_id);
 865                 if (rc) {
 866                         IL_ERR("Tx %d queue init failed\n", txq_id);
 867                         goto error;
 868                 }
 869         }
 870
 871         return rc;
 872
 873 error:
 874         il3945_hw_txq_ctx_free(il);
 875         return rc;
 876 }
 877
 878 /*
 879  * Start up 3945's basic functionality after it has been reset
 880  * (e.g. after platform boot, or shutdown via il_apm_stop())
 881  * NOTE:  This does not load uCode nor start the embedded processor
 882  */
 883 static int
 884 il3945_apm_init(struct il_priv *il)
 885 {
 886         int ret = il_apm_init(il);
 887
 888         /* Clear APMG (NIC's internal power management) interrupts */
 889         il_wr_prph(il, APMG_RTC_INT_MSK_REG, 0x0);
 890         il_wr_prph(il, APMG_RTC_INT_STT_REG, 0xFFFFFFFF);
 891
 892         /* Reset radio chip */
 893         il_set_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
 894         udelay(5);
 895         il_clear_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
 896
 897         return ret;
 898 }
 899
 900 static void
 901 il3945_nic_config(struct il_priv *il)
 902 {
 903         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
 904         unsigned long flags;
 905         u8 rev_id = il->pci_dev->revision;
 906
 907         spin_lock_irqsave(&il->lock, flags);
 908
 909         /* Determine HW type */
 910         D_INFO("HW Revision ID = 0x%X\n", rev_id);
 911
 912         if (rev_id & PCI_CFG_REV_ID_BIT_RTP)
 913                 D_INFO("RTP type\n");
 914         else if (rev_id & PCI_CFG_REV_ID_BIT_BASIC_SKU) {
 915                 D_INFO("3945 RADIO-MB type\n");
 916                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 917                            CSR39_HW_IF_CONFIG_REG_BIT_3945_MB);
 918         } else {
 919                 D_INFO("3945 RADIO-MM type\n");
 920                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 921                            CSR39_HW_IF_CONFIG_REG_BIT_3945_MM);
 922         }
 923
 924         if (EEPROM_SKU_CAP_OP_MODE_MRC == eeprom->sku_cap) {
 925                 D_INFO("SKU OP mode is mrc\n");
 926                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 927                            CSR39_HW_IF_CONFIG_REG_BIT_SKU_MRC);
 928         } else
 929                 D_INFO("SKU OP mode is basic\n");
 930
 931         if ((eeprom->board_revision & 0xF0) == 0xD0) {
 932                 D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
 933                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 934                            CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
 935         } else {
 936                 D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
 937                 il_clear_bit(il, CSR_HW_IF_CONFIG_REG,
 938                              CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
 939         }
 940
 941         if (eeprom->almgor_m_version <= 1) {
 942                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 943                            CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_A);
 944                 D_INFO("Card M type A version is 0x%X\n",
 945                        eeprom->almgor_m_version);
 946         } else {
 947                 D_INFO("Card M type B version is 0x%X\n",
 948                        eeprom->almgor_m_version);
 949                 il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 950                            CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_B);
 951         }
 952         spin_unlock_irqrestore(&il->lock, flags);
 953
 954         if (eeprom->sku_cap & EEPROM_SKU_CAP_SW_RF_KILL_ENABLE)
 955                 D_RF_KILL("SW RF KILL supported in EEPROM.\n");
 956
 957         if (eeprom->sku_cap & EEPROM_SKU_CAP_HW_RF_KILL_ENABLE)
 958                 D_RF_KILL("HW RF KILL supported in EEPROM.\n");
 959 }
 960
 961 int
 962 il3945_hw_nic_init(struct il_priv *il)
 963 {
 964         int rc;
 965         unsigned long flags;
 966         struct il_rx_queue *rxq = &il->rxq;
 967
 968         spin_lock_irqsave(&il->lock, flags);
 969         il3945_apm_init(il);
 970         spin_unlock_irqrestore(&il->lock, flags);
 971
 972         il3945_set_pwr_vmain(il);
 973         il3945_nic_config(il);
 974
 975         /* Allocate the RX queue, or reset if it is already allocated */
 976         if (!rxq->bd) {
 977                 rc = il_rx_queue_alloc(il);
 978                 if (rc) {
 979                         IL_ERR("Unable to initialize Rx queue\n");
 980                         return -ENOMEM;
 981                 }
 982         } else
 983                 il3945_rx_queue_reset(il, rxq);
 984
 985         il3945_rx_replenish(il);
 986
 987         il3945_rx_init(il, rxq);
 988
 989         /* Look at using this instead:
 990            rxq->need_update = 1;
 991            il_rx_queue_update_write_ptr(il, rxq);
 992          */
 993
 994         il_wr(il, FH39_RCSR_WPTR(0), rxq->write & ~7);
 995
 996         rc = il3945_txq_ctx_reset(il);
 997         if (rc)
 998                 return rc;
 999
1000         set_bit(S_INIT, &il->status);
1001
1002         return 0;
1003 }
1004
1005 /**
1006  * il3945_hw_txq_ctx_free - Free TXQ Context
1007  *
1008  * Destroy all TX DMA queues and structures
1009  */
1010 void
1011 il3945_hw_txq_ctx_free(struct il_priv *il)
1012 {
1013         int txq_id;
1014
1015         /* Tx queues */
1016         if (il->txq)
1017                 for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++)
1018                         if (txq_id == IL39_CMD_QUEUE_NUM)
1019                                 il_cmd_queue_free(il);
1020                         else
1021                                 il_tx_queue_free(il, txq_id);
1022
1023         /* free tx queue structure */
1024         il_free_txq_mem(il);
1025 }
1026
1027 void
1028 il3945_hw_txq_ctx_stop(struct il_priv *il)
1029 {
1030         int txq_id;
1031
1032         /* stop SCD */
1033         _il_wr_prph(il, ALM_SCD_MODE_REG, 0);
1034         _il_wr_prph(il, ALM_SCD_TXFACT_REG, 0);
1035
1036         /* reset TFD queues */
1037         for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
1038                 _il_wr(il, FH39_TCSR_CONFIG(txq_id), 0x0);
1039                 _il_poll_bit(il, FH39_TSSR_TX_STATUS,
1040                              FH39_TSSR_TX_STATUS_REG_MSK_CHNL_IDLE(txq_id),
1041                              FH39_TSSR_TX_STATUS_REG_MSK_CHNL_IDLE(txq_id),
1042                              1000);
1043         }
1044 }
1045
1046 /**
1047  * il3945_hw_reg_adjust_power_by_temp
1048  * return idx delta into power gain settings table
1049 */
1050 static int
1051 il3945_hw_reg_adjust_power_by_temp(int new_reading, int old_reading)
1052 {
1053         return (new_reading - old_reading) * (-11) / 100;
1054 }
1055
1056 /**
1057  * il3945_hw_reg_temp_out_of_range - Keep temperature in sane range
1058  */
1059 static inline int
1060 il3945_hw_reg_temp_out_of_range(int temperature)
1061 {
1062         return (temperature < -260 || temperature > 25) ? 1 : 0;
1063 }
1064
1065 int
1066 il3945_hw_get_temperature(struct il_priv *il)
1067 {
1068         return _il_rd(il, CSR_UCODE_DRV_GP2);
1069 }
1070
1071 /**
1072  * il3945_hw_reg_txpower_get_temperature
1073  * get the current temperature by reading from NIC
1074 */
1075 static int
1076 il3945_hw_reg_txpower_get_temperature(struct il_priv *il)
1077 {
1078         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1079         int temperature;
1080
1081         temperature = il3945_hw_get_temperature(il);
1082
1083         /* driver's okay range is -260 to +25.
1084          *   human readable okay range is 0 to +285 */
1085         D_INFO("Temperature: %d\n", temperature + IL_TEMP_CONVERT);
1086
1087         /* handle insane temp reading */
1088         if (il3945_hw_reg_temp_out_of_range(temperature)) {
1089                 IL_ERR("Error bad temperature value  %d\n", temperature);
1090
1091                 /* if really really hot(?),
1092                  *   substitute the 3rd band/group's temp measured at factory */
1093                 if (il->last_temperature > 100)
1094                         temperature = eeprom->groups[2].temperature;
1095                 else            /* else use most recent "sane" value from driver */
1096                         temperature = il->last_temperature;
1097         }
1098
1099         return temperature;     /* raw, not "human readable" */
1100 }
1101
1102 /* Adjust Txpower only if temperature variance is greater than threshold.
1103  *
1104  * Both are lower than older versions' 9 degrees */
1105 #define IL_TEMPERATURE_LIMIT_TIMER   6
1106
1107 /**
1108  * il3945_is_temp_calib_needed - determines if new calibration is needed
1109  *
1110  * records new temperature in tx_mgr->temperature.
1111  * replaces tx_mgr->last_temperature *only* if calib needed
1112  *    (assumes caller will actually do the calibration!). */
1113 static int
1114 il3945_is_temp_calib_needed(struct il_priv *il)
1115 {
1116         int temp_diff;
1117
1118         il->temperature = il3945_hw_reg_txpower_get_temperature(il);
1119         temp_diff = il->temperature - il->last_temperature;
1120
1121         /* get absolute value */
1122         if (temp_diff < 0) {
1123                 D_POWER("Getting cooler, delta %d,\n", temp_diff);
1124                 temp_diff = -temp_diff;
1125         } else if (temp_diff == 0)
1126                 D_POWER("Same temp,\n");
1127         else
1128                 D_POWER("Getting warmer, delta %d,\n", temp_diff);
1129
1130         /* if we don't need calibration, *don't* update last_temperature */
1131         if (temp_diff < IL_TEMPERATURE_LIMIT_TIMER) {
1132                 D_POWER("Timed thermal calib not needed\n");
1133                 return 0;
1134         }
1135
1136         D_POWER("Timed thermal calib needed\n");
1137
1138         /* assume that caller will actually do calib ...
1139          *   update the "last temperature" value */
1140         il->last_temperature = il->temperature;
1141         return 1;
1142 }
1143
1144 #define IL_MAX_GAIN_ENTRIES 78
1145 #define IL_CCK_FROM_OFDM_POWER_DIFF  -5
1146 #define IL_CCK_FROM_OFDM_IDX_DIFF (10)
1147
1148 /* radio and DSP power table, each step is 1/2 dB.
1149  * 1st number is for RF analog gain, 2nd number is for DSP pre-DAC gain. */
1150 static struct il3945_tx_power power_gain_table[2][IL_MAX_GAIN_ENTRIES] = {
1151         {
1152          {251, 127},            /* 2.4 GHz, highest power */
1153          {251, 127},
1154          {251, 127},
1155          {251, 127},
1156          {251, 125},
1157          {251, 110},
1158          {251, 105},
1159          {251, 98},
1160          {187, 125},
1161          {187, 115},
1162          {187, 108},
1163          {187, 99},
1164          {243, 119},
1165          {243, 111},
1166          {243, 105},
1167          {243, 97},
1168          {243, 92},
1169          {211, 106},
1170          {211, 100},
1171          {179, 120},
1172          {179, 113},
1173          {179, 107},
1174          {147, 125},
1175          {147, 119},
1176          {147, 112},
1177          {147, 106},
1178          {147, 101},
1179          {147, 97},
1180          {147, 91},
1181          {115, 107},
1182          {235, 121},
1183          {235, 115},
1184          {235, 109},
1185          {203, 127},
1186          {203, 121},
1187          {203, 115},
1188          {203, 108},
1189          {203, 102},
1190          {203, 96},
1191          {203, 92},
1192          {171, 110},
1193          {171, 104},
1194          {171, 98},
1195          {139, 116},
1196          {227, 125},
1197          {227, 119},
1198          {227, 113},
1199          {227, 107},
1200          {227, 101},
1201          {227, 96},
1202          {195, 113},
1203          {195, 106},
1204          {195, 102},
1205          {195, 95},
1206          {163, 113},
1207          {163, 106},
1208          {163, 102},
1209          {163, 95},
1210          {131, 113},
1211          {131, 106},
1212          {131, 102},
1213          {131, 95},
1214          {99, 113},
1215          {99, 106},
1216          {99, 102},
1217          {99, 95},
1218          {67, 113},
1219          {67, 106},
1220          {67, 102},
1221          {67, 95},
1222          {35, 113},
1223          {35, 106},
1224          {35, 102},
1225          {35, 95},
1226          {3, 113},
1227          {3, 106},
1228          {3, 102},
1229          {3, 95}                /* 2.4 GHz, lowest power */
1230         },
1231         {
1232          {251, 127},            /* 5.x GHz, highest power */
1233          {251, 120},
1234          {251, 114},
1235          {219, 119},
1236          {219, 101},
1237          {187, 113},
1238          {187, 102},
1239          {155, 114},
1240          {155, 103},
1241          {123, 117},
1242          {123, 107},
1243          {123, 99},
1244          {123, 92},
1245          {91, 108},
1246          {59, 125},
1247          {59, 118},
1248          {59, 109},
1249          {59, 102},
1250          {59, 96},
1251          {59, 90},
1252          {27, 104},
1253          {27, 98},
1254          {27, 92},
1255          {115, 118},
1256          {115, 111},
1257          {115, 104},
1258          {83, 126},
1259          {83, 121},
1260          {83, 113},
1261          {83, 105},
1262          {83, 99},
1263          {51, 118},
1264          {51, 111},
1265          {51, 104},
1266          {51, 98},
1267          {19, 116},
1268          {19, 109},
1269          {19, 102},
1270          {19, 98},
1271          {19, 93},
1272          {171, 113},
1273          {171, 107},
1274          {171, 99},
1275          {139, 120},
1276          {139, 113},
1277          {139, 107},
1278          {139, 99},
1279          {107, 120},
1280          {107, 113},
1281          {107, 107},
1282          {107, 99},
1283          {75, 120},
1284          {75, 113},
1285          {75, 107},
1286          {75, 99},
1287          {43, 120},
1288          {43, 113},
1289          {43, 107},
1290          {43, 99},
1291          {11, 120},
1292          {11, 113},
1293          {11, 107},
1294          {11, 99},
1295          {131, 107},
1296          {131, 99},
1297          {99, 120},
1298          {99, 113},
1299          {99, 107},
1300          {99, 99},
1301          {67, 120},
1302          {67, 113},
1303          {67, 107},
1304          {67, 99},
1305          {35, 120},
1306          {35, 113},
1307          {35, 107},
1308          {35, 99},
1309          {3, 120}               /* 5.x GHz, lowest power */
1310         }
1311 };
1312
1313 static inline u8
1314 il3945_hw_reg_fix_power_idx(int idx)
1315 {
1316         if (idx < 0)
1317                 return 0;
1318         if (idx >= IL_MAX_GAIN_ENTRIES)
1319                 return IL_MAX_GAIN_ENTRIES - 1;
1320         return (u8) idx;
1321 }
1322
1323 /* Kick off thermal recalibration check every 60 seconds */
1324 #define REG_RECALIB_PERIOD (60)
1325
1326 /**
1327  * il3945_hw_reg_set_scan_power - Set Tx power for scan probe requests
1328  *
1329  * Set (in our channel info database) the direct scan Tx power for 1 Mbit (CCK)
1330  * or 6 Mbit (OFDM) rates.
1331  */
1332 static void
1333 il3945_hw_reg_set_scan_power(struct il_priv *il, u32 scan_tbl_idx, s32 rate_idx,
1334                              const s8 *clip_pwrs,
1335                              struct il_channel_info *ch_info, int band_idx)
1336 {
1337         struct il3945_scan_power_info *scan_power_info;
1338         s8 power;
1339         u8 power_idx;
1340
1341         scan_power_info = &ch_info->scan_pwr_info[scan_tbl_idx];
1342
1343         /* use this channel group's 6Mbit clipping/saturation pwr,
1344          *   but cap at regulatory scan power restriction (set during init
1345          *   based on eeprom channel data) for this channel.  */
1346         power = min(ch_info->scan_power, clip_pwrs[RATE_6M_IDX_TBL]);
1347
1348         power = min(power, il->tx_power_user_lmt);
1349         scan_power_info->requested_power = power;
1350
1351         /* find difference between new scan *power* and current "normal"
1352          *   Tx *power* for 6Mb.  Use this difference (x2) to adjust the
1353          *   current "normal" temperature-compensated Tx power *idx* for
1354          *   this rate (1Mb or 6Mb) to yield new temp-compensated scan power
1355          *   *idx*. */
1356         power_idx =
1357             ch_info->power_info[rate_idx].power_table_idx - (power -
1358                                                              ch_info->
1359                                                              power_info
1360                                                              [RATE_6M_IDX_TBL].
1361                                                              requested_power) *
1362             2;
1363
1364         /* store reference idx that we use when adjusting *all* scan
1365          *   powers.  So we can accommodate user (all channel) or spectrum
1366          *   management (single channel) power changes "between" temperature
1367          *   feedback compensation procedures.
1368          * don't force fit this reference idx into gain table; it may be a
1369          *   negative number.  This will help avoid errors when we're at
1370          *   the lower bounds (highest gains, for warmest temperatures)
1371          *   of the table. */
1372
1373         /* don't exceed table bounds for "real" setting */
1374         power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1375
1376         scan_power_info->power_table_idx = power_idx;
1377         scan_power_info->tpc.tx_gain =
1378             power_gain_table[band_idx][power_idx].tx_gain;
1379         scan_power_info->tpc.dsp_atten =
1380             power_gain_table[band_idx][power_idx].dsp_atten;
1381 }
1382
1383 /**
1384  * il3945_send_tx_power - fill in Tx Power command with gain settings
1385  *
1386  * Configures power settings for all rates for the current channel,
1387  * using values from channel info struct, and send to NIC
1388  */
1389 static int
1390 il3945_send_tx_power(struct il_priv *il)
1391 {
1392         int rate_idx, i;
1393         const struct il_channel_info *ch_info = NULL;
1394         struct il3945_txpowertable_cmd txpower = {
1395                 .channel = il->active.channel,
1396         };
1397         u16 chan;
1398
1399         if (WARN_ONCE
1400             (test_bit(S_SCAN_HW, &il->status),
1401              "TX Power requested while scanning!\n"))
1402                 return -EAGAIN;
1403
1404         chan = le16_to_cpu(il->active.channel);
1405
1406         txpower.band = (il->band == IEEE80211_BAND_5GHZ) ? 0 : 1;
1407         ch_info = il_get_channel_info(il, il->band, chan);
1408         if (!ch_info) {
1409                 IL_ERR("Failed to get channel info for channel %d [%d]\n", chan,
1410                        il->band);
1411                 return -EINVAL;
1412         }
1413
1414         if (!il_is_channel_valid(ch_info)) {
1415                 D_POWER("Not calling TX_PWR_TBL_CMD on " "non-Tx channel.\n");
1416                 return 0;
1417         }
1418
1419         /* fill cmd with power settings for all rates for current channel */
1420         /* Fill OFDM rate */
1421         for (rate_idx = IL_FIRST_OFDM_RATE, i = 0;
1422              rate_idx <= IL39_LAST_OFDM_RATE; rate_idx++, i++) {
1423
1424                 txpower.power[i].tpc = ch_info->power_info[i].tpc;
1425                 txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1426
1427                 D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1428                         le16_to_cpu(txpower.channel), txpower.band,
1429                         txpower.power[i].tpc.tx_gain,
1430                         txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1431         }
1432         /* Fill CCK rates */
1433         for (rate_idx = IL_FIRST_CCK_RATE; rate_idx <= IL_LAST_CCK_RATE;
1434              rate_idx++, i++) {
1435                 txpower.power[i].tpc = ch_info->power_info[i].tpc;
1436                 txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1437
1438                 D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1439                         le16_to_cpu(txpower.channel), txpower.band,
1440                         txpower.power[i].tpc.tx_gain,
1441                         txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1442         }
1443
1444         return il_send_cmd_pdu(il, C_TX_PWR_TBL,
1445                                sizeof(struct il3945_txpowertable_cmd),
1446                                &txpower);
1447
1448 }
1449
1450 /**
1451  * il3945_hw_reg_set_new_power - Configures power tables at new levels
1452  * @ch_info: Channel to update.  Uses power_info.requested_power.
1453  *
1454  * Replace requested_power and base_power_idx ch_info fields for
1455  * one channel.
1456  *
1457  * Called if user or spectrum management changes power preferences.
1458  * Takes into account h/w and modulation limitations (clip power).
1459  *
1460  * This does *not* send anything to NIC, just sets up ch_info for one channel.
1461  *
1462  * NOTE: reg_compensate_for_temperature_dif() *must* be run after this to
1463  *       properly fill out the scan powers, and actual h/w gain settings,
1464  *       and send changes to NIC
1465  */
1466 static int
1467 il3945_hw_reg_set_new_power(struct il_priv *il, struct il_channel_info *ch_info)
1468 {
1469         struct il3945_channel_power_info *power_info;
1470         int power_changed = 0;
1471         int i;
1472         const s8 *clip_pwrs;
1473         int power;
1474
1475         /* Get this chnlgrp's rate-to-max/clip-powers table */
1476         clip_pwrs = il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1477
1478         /* Get this channel's rate-to-current-power settings table */
1479         power_info = ch_info->power_info;
1480
1481         /* update OFDM Txpower settings */
1482         for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++, ++power_info) {
1483                 int delta_idx;
1484
1485                 /* limit new power to be no more than h/w capability */
1486                 power = min(ch_info->curr_txpow, clip_pwrs[i]);
1487                 if (power == power_info->requested_power)
1488                         continue;
1489
1490                 /* find difference between old and new requested powers,
1491                  *    update base (non-temp-compensated) power idx */
1492                 delta_idx = (power - power_info->requested_power) * 2;
1493                 power_info->base_power_idx -= delta_idx;
1494
1495                 /* save new requested power value */
1496                 power_info->requested_power = power;
1497
1498                 power_changed = 1;
1499         }
1500
1501         /* update CCK Txpower settings, based on OFDM 12M setting ...
1502          *    ... all CCK power settings for a given channel are the *same*. */
1503         if (power_changed) {
1504                 power =
1505                     ch_info->power_info[RATE_12M_IDX_TBL].requested_power +
1506                     IL_CCK_FROM_OFDM_POWER_DIFF;
1507
1508                 /* do all CCK rates' il3945_channel_power_info structures */
1509                 for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++) {
1510                         power_info->requested_power = power;
1511                         power_info->base_power_idx =
1512                             ch_info->power_info[RATE_12M_IDX_TBL].
1513                             base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
1514                         ++power_info;
1515                 }
1516         }
1517
1518         return 0;
1519 }
1520
1521 /**
1522  * il3945_hw_reg_get_ch_txpower_limit - returns new power limit for channel
1523  *
1524  * NOTE: Returned power limit may be less (but not more) than requested,
1525  *       based strictly on regulatory (eeprom and spectrum mgt) limitations
1526  *       (no consideration for h/w clipping limitations).
1527  */
1528 static int
1529 il3945_hw_reg_get_ch_txpower_limit(struct il_channel_info *ch_info)
1530 {
1531         s8 max_power;
1532
1533 #if 0
1534         /* if we're using TGd limits, use lower of TGd or EEPROM */
1535         if (ch_info->tgd_data.max_power != 0)
1536                 max_power =
1537                     min(ch_info->tgd_data.max_power,
1538                         ch_info->eeprom.max_power_avg);
1539
1540         /* else just use EEPROM limits */
1541         else
1542 #endif
1543                 max_power = ch_info->eeprom.max_power_avg;
1544
1545         return min(max_power, ch_info->max_power_avg);
1546 }
1547
1548 /**
1549  * il3945_hw_reg_comp_txpower_temp - Compensate for temperature
1550  *
1551  * Compensate txpower settings of *all* channels for temperature.
1552  * This only accounts for the difference between current temperature
1553  *   and the factory calibration temperatures, and bases the new settings
1554  *   on the channel's base_power_idx.
1555  *
1556  * If RxOn is "associated", this sends the new Txpower to NIC!
1557  */
1558 static int
1559 il3945_hw_reg_comp_txpower_temp(struct il_priv *il)
1560 {
1561         struct il_channel_info *ch_info = NULL;
1562         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1563         int delta_idx;
1564         const s8 *clip_pwrs;    /* array of h/w max power levels for each rate */
1565         u8 a_band;
1566         u8 rate_idx;
1567         u8 scan_tbl_idx;
1568         u8 i;
1569         int ref_temp;
1570         int temperature = il->temperature;
1571
1572         if (il->disable_tx_power_cal || test_bit(S_SCANNING, &il->status)) {
1573                 /* do not perform tx power calibration */
1574                 return 0;
1575         }
1576         /* set up new Tx power info for each and every channel, 2.4 and 5.x */
1577         for (i = 0; i < il->channel_count; i++) {
1578                 ch_info = &il->channel_info[i];
1579                 a_band = il_is_channel_a_band(ch_info);
1580
1581                 /* Get this chnlgrp's factory calibration temperature */
1582                 ref_temp = (s16) eeprom->groups[ch_info->group_idx].temperature;
1583
1584                 /* get power idx adjustment based on current and factory
1585                  * temps */
1586                 delta_idx =
1587                     il3945_hw_reg_adjust_power_by_temp(temperature, ref_temp);
1588
1589                 /* set tx power value for all rates, OFDM and CCK */
1590                 for (rate_idx = 0; rate_idx < RATE_COUNT_3945; rate_idx++) {
1591                         int power_idx =
1592                             ch_info->power_info[rate_idx].base_power_idx;
1593
1594                         /* temperature compensate */
1595                         power_idx += delta_idx;
1596
1597                         /* stay within table range */
1598                         power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1599                         ch_info->power_info[rate_idx].power_table_idx =
1600                             (u8) power_idx;
1601                         ch_info->power_info[rate_idx].tpc =
1602                             power_gain_table[a_band][power_idx];
1603                 }
1604
1605                 /* Get this chnlgrp's rate-to-max/clip-powers table */
1606                 clip_pwrs =
1607                     il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1608
1609                 /* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
1610                 for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
1611                      scan_tbl_idx++) {
1612                         s32 actual_idx =
1613                             (scan_tbl_idx ==
1614                              0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
1615                         il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
1616                                                      actual_idx, clip_pwrs,
1617                                                      ch_info, a_band);
1618                 }
1619         }
1620
1621         /* send Txpower command for current channel to ucode */
1622         return il->ops->send_tx_power(il);
1623 }
1624
1625 int
1626 il3945_hw_reg_set_txpower(struct il_priv *il, s8 power)
1627 {
1628         struct il_channel_info *ch_info;
1629         s8 max_power;
1630         u8 a_band;
1631         u8 i;
1632
1633         if (il->tx_power_user_lmt == power) {
1634                 D_POWER("Requested Tx power same as current " "limit: %ddBm.\n",
1635                         power);
1636                 return 0;
1637         }
1638
1639         D_POWER("Setting upper limit clamp to %ddBm.\n", power);
1640         il->tx_power_user_lmt = power;
1641
1642         /* set up new Tx powers for each and every channel, 2.4 and 5.x */
1643
1644         for (i = 0; i < il->channel_count; i++) {
1645                 ch_info = &il->channel_info[i];
1646                 a_band = il_is_channel_a_band(ch_info);
1647
1648                 /* find minimum power of all user and regulatory constraints
1649                  *    (does not consider h/w clipping limitations) */
1650                 max_power = il3945_hw_reg_get_ch_txpower_limit(ch_info);
1651                 max_power = min(power, max_power);
1652                 if (max_power != ch_info->curr_txpow) {
1653                         ch_info->curr_txpow = max_power;
1654
1655                         /* this considers the h/w clipping limitations */
1656                         il3945_hw_reg_set_new_power(il, ch_info);
1657                 }
1658         }
1659
1660         /* update txpower settings for all channels,
1661          *   send to NIC if associated. */
1662         il3945_is_temp_calib_needed(il);
1663         il3945_hw_reg_comp_txpower_temp(il);
1664
1665         return 0;
1666 }
1667
1668 static int
1669 il3945_send_rxon_assoc(struct il_priv *il)
1670 {
1671         int rc = 0;
1672         struct il_rx_pkt *pkt;
1673         struct il3945_rxon_assoc_cmd rxon_assoc;
1674         struct il_host_cmd cmd = {
1675                 .id = C_RXON_ASSOC,
1676                 .len = sizeof(rxon_assoc),
1677                 .flags = CMD_WANT_SKB,
1678                 .data = &rxon_assoc,
1679         };
1680         const struct il_rxon_cmd *rxon1 = &il->staging;
1681         const struct il_rxon_cmd *rxon2 = &il->active;
1682
1683         if (rxon1->flags == rxon2->flags &&
1684             rxon1->filter_flags == rxon2->filter_flags &&
1685             rxon1->cck_basic_rates == rxon2->cck_basic_rates &&
1686             rxon1->ofdm_basic_rates == rxon2->ofdm_basic_rates) {
1687                 D_INFO("Using current RXON_ASSOC.  Not resending.\n");
1688                 return 0;
1689         }
1690
1691         rxon_assoc.flags = il->staging.flags;
1692         rxon_assoc.filter_flags = il->staging.filter_flags;
1693         rxon_assoc.ofdm_basic_rates = il->staging.ofdm_basic_rates;
1694         rxon_assoc.cck_basic_rates = il->staging.cck_basic_rates;
1695         rxon_assoc.reserved = 0;
1696
1697         rc = il_send_cmd_sync(il, &cmd);
1698         if (rc)
1699                 return rc;
1700
1701         pkt = (struct il_rx_pkt *)cmd.reply_page;
1702         if (pkt->hdr.flags & IL_CMD_FAILED_MSK) {
1703                 IL_ERR("Bad return from C_RXON_ASSOC command\n");
1704                 rc = -EIO;
1705         }
1706
1707         il_free_pages(il, cmd.reply_page);
1708
1709         return rc;
1710 }
1711
1712 /**
1713  * il3945_commit_rxon - commit staging_rxon to hardware
1714  *
1715  * The RXON command in staging_rxon is committed to the hardware and
1716  * the active_rxon structure is updated with the new data.  This
1717  * function correctly transitions out of the RXON_ASSOC_MSK state if
1718  * a HW tune is required based on the RXON structure changes.
1719  */
1720 int
1721 il3945_commit_rxon(struct il_priv *il)
1722 {
1723         /* cast away the const for active_rxon in this function */
1724         struct il3945_rxon_cmd *active_rxon = (void *)&il->active;
1725         struct il3945_rxon_cmd *staging_rxon = (void *)&il->staging;
1726         int rc = 0;
1727         bool new_assoc = !!(staging_rxon->filter_flags & RXON_FILTER_ASSOC_MSK);
1728
1729         if (test_bit(S_EXIT_PENDING, &il->status))
1730                 return -EINVAL;
1731
1732         if (!il_is_alive(il))
1733                 return -1;
1734
1735         /* always get timestamp with Rx frame */
1736         staging_rxon->flags |= RXON_FLG_TSF2HOST_MSK;
1737
1738         /* select antenna */
1739         staging_rxon->flags &= ~(RXON_FLG_DIS_DIV_MSK | RXON_FLG_ANT_SEL_MSK);
1740         staging_rxon->flags |= il3945_get_antenna_flags(il);
1741
1742         rc = il_check_rxon_cmd(il);
1743         if (rc) {
1744                 IL_ERR("Invalid RXON configuration.  Not committing.\n");
1745                 return -EINVAL;
1746         }
1747
1748         /* If we don't need to send a full RXON, we can use
1749          * il3945_rxon_assoc_cmd which is used to reconfigure filter
1750          * and other flags for the current radio configuration. */
1751         if (!il_full_rxon_required(il)) {
1752                 rc = il_send_rxon_assoc(il);
1753                 if (rc) {
1754                         IL_ERR("Error setting RXON_ASSOC "
1755                                "configuration (%d).\n", rc);
1756                         return rc;
1757                 }
1758
1759                 memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1760                 /*
1761                  * We do not commit tx power settings while channel changing,
1762                  * do it now if tx power changed.
1763                  */
1764                 il_set_tx_power(il, il->tx_power_next, false);
1765                 return 0;
1766         }
1767
1768         /* If we are currently associated and the new config requires
1769          * an RXON_ASSOC and the new config wants the associated mask enabled,
1770          * we must clear the associated from the active configuration
1771          * before we apply the new config */
1772         if (il_is_associated(il) && new_assoc) {
1773                 D_INFO("Toggling associated bit on current RXON\n");
1774                 active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
1775
1776                 /*
1777                  * reserved4 and 5 could have been filled by the iwlcore code.
1778                  * Let's clear them before pushing to the 3945.
1779                  */
1780                 active_rxon->reserved4 = 0;
1781                 active_rxon->reserved5 = 0;
1782                 rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1783                                      &il->active);
1784
1785                 /* If the mask clearing failed then we set
1786                  * active_rxon back to what it was previously */
1787                 if (rc) {
1788                         active_rxon->filter_flags |= RXON_FILTER_ASSOC_MSK;
1789                         IL_ERR("Error clearing ASSOC_MSK on current "
1790                                "configuration (%d).\n", rc);
1791                         return rc;
1792                 }
1793                 il_clear_ucode_stations(il);
1794                 il_restore_stations(il);
1795         }
1796
1797         D_INFO("Sending RXON\n" "* with%s RXON_FILTER_ASSOC_MSK\n"
1798                "* channel = %d\n" "* bssid = %pM\n", (new_assoc ? "" : "out"),
1799                le16_to_cpu(staging_rxon->channel), staging_rxon->bssid_addr);
1800
1801         /*
1802          * reserved4 and 5 could have been filled by the iwlcore code.
1803          * Let's clear them before pushing to the 3945.
1804          */
1805         staging_rxon->reserved4 = 0;
1806         staging_rxon->reserved5 = 0;
1807
1808         il_set_rxon_hwcrypto(il, !il3945_mod_params.sw_crypto);
1809
1810         /* Apply the new configuration */
1811         rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1812                              staging_rxon);
1813         if (rc) {
1814                 IL_ERR("Error setting new configuration (%d).\n", rc);
1815                 return rc;
1816         }
1817
1818         memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1819
1820         if (!new_assoc) {
1821                 il_clear_ucode_stations(il);
1822                 il_restore_stations(il);
1823         }
1824
1825         /* If we issue a new RXON command which required a tune then we must
1826          * send a new TXPOWER command or we won't be able to Tx any frames */
1827         rc = il_set_tx_power(il, il->tx_power_next, true);
1828         if (rc) {
1829                 IL_ERR("Error setting Tx power (%d).\n", rc);
1830                 return rc;
1831         }
1832
1833         /* Init the hardware's rate fallback order based on the band */
1834         rc = il3945_init_hw_rate_table(il);
1835         if (rc) {
1836                 IL_ERR("Error setting HW rate table: %02X\n", rc);
1837                 return -EIO;
1838         }
1839
1840         return 0;
1841 }
1842
1843 /**
1844  * il3945_reg_txpower_periodic -  called when time to check our temperature.
1845  *
1846  * -- reset periodic timer
1847  * -- see if temp has changed enough to warrant re-calibration ... if so:
1848  *     -- correct coeffs for temp (can reset temp timer)
1849  *     -- save this temp as "last",
1850  *     -- send new set of gain settings to NIC
1851  * NOTE:  This should continue working, even when we're not associated,
1852  *   so we can keep our internal table of scan powers current. */
1853 void
1854 il3945_reg_txpower_periodic(struct il_priv *il)
1855 {
1856         /* This will kick in the "brute force"
1857          * il3945_hw_reg_comp_txpower_temp() below */
1858         if (!il3945_is_temp_calib_needed(il))
1859                 goto reschedule;
1860
1861         /* Set up a new set of temp-adjusted TxPowers, send to NIC.
1862          * This is based *only* on current temperature,
1863          * ignoring any previous power measurements */
1864         il3945_hw_reg_comp_txpower_temp(il);
1865
1866 reschedule:
1867         queue_delayed_work(il->workqueue, &il->_3945.thermal_periodic,
1868                            REG_RECALIB_PERIOD * HZ);
1869 }
1870
1871 static void
1872 il3945_bg_reg_txpower_periodic(struct work_struct *work)
1873 {
1874         struct il_priv *il = container_of(work, struct il_priv,
1875                                           _3945.thermal_periodic.work);
1876
1877         mutex_lock(&il->mutex);
1878         if (test_bit(S_EXIT_PENDING, &il->status) || il->txq == NULL)
1879                 goto out;
1880
1881         il3945_reg_txpower_periodic(il);
1882 out:
1883         mutex_unlock(&il->mutex);
1884 }
1885
1886 /**
1887  * il3945_hw_reg_get_ch_grp_idx - find the channel-group idx (0-4) for channel.
1888  *
1889  * This function is used when initializing channel-info structs.
1890  *
1891  * NOTE: These channel groups do *NOT* match the bands above!
1892  *       These channel groups are based on factory-tested channels;
1893  *       on A-band, EEPROM's "group frequency" entries represent the top
1894  *       channel in each group 1-4.  Group 5 All B/G channels are in group 0.
1895  */
1896 static u16
1897 il3945_hw_reg_get_ch_grp_idx(struct il_priv *il,
1898                              const struct il_channel_info *ch_info)
1899 {
1900         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1901         struct il3945_eeprom_txpower_group *ch_grp = &eeprom->groups[0];
1902         u8 group;
1903         u16 group_idx = 0;      /* based on factory calib frequencies */
1904         u8 grp_channel;
1905
1906         /* Find the group idx for the channel ... don't use idx 1(?) */
1907         if (il_is_channel_a_band(ch_info)) {
1908                 for (group = 1; group < 5; group++) {
1909                         grp_channel = ch_grp[group].group_channel;
1910                         if (ch_info->channel <= grp_channel) {
1911                                 group_idx = group;
1912                                 break;
1913                         }
1914                 }
1915                 /* group 4 has a few channels *above* its factory cal freq */
1916                 if (group == 5)
1917                         group_idx = 4;
1918         } else
1919                 group_idx = 0;  /* 2.4 GHz, group 0 */
1920
1921         D_POWER("Chnl %d mapped to grp %d\n", ch_info->channel, group_idx);
1922         return group_idx;
1923 }
1924
1925 /**
1926  * il3945_hw_reg_get_matched_power_idx - Interpolate to get nominal idx
1927  *
1928  * Interpolate to get nominal (i.e. at factory calibration temperature) idx
1929  *   into radio/DSP gain settings table for requested power.
1930  */
1931 static int
1932 il3945_hw_reg_get_matched_power_idx(struct il_priv *il, s8 requested_power,
1933                                     s32 setting_idx, s32 *new_idx)
1934 {
1935         const struct il3945_eeprom_txpower_group *chnl_grp = NULL;
1936         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1937         s32 idx0, idx1;
1938         s32 power = 2 * requested_power;
1939         s32 i;
1940         const struct il3945_eeprom_txpower_sample *samples;
1941         s32 gains0, gains1;
1942         s32 res;
1943         s32 denominator;
1944
1945         chnl_grp = &eeprom->groups[setting_idx];
1946         samples = chnl_grp->samples;
1947         for (i = 0; i < 5; i++) {
1948                 if (power == samples[i].power) {
1949                         *new_idx = samples[i].gain_idx;
1950                         return 0;
1951                 }
1952         }
1953
1954         if (power > samples[1].power) {
1955                 idx0 = 0;
1956                 idx1 = 1;
1957         } else if (power > samples[2].power) {
1958                 idx0 = 1;
1959                 idx1 = 2;
1960         } else if (power > samples[3].power) {
1961                 idx0 = 2;
1962                 idx1 = 3;
1963         } else {
1964                 idx0 = 3;
1965                 idx1 = 4;
1966         }
1967
1968         denominator = (s32) samples[idx1].power - (s32) samples[idx0].power;
1969         if (denominator == 0)
1970                 return -EINVAL;
1971         gains0 = (s32) samples[idx0].gain_idx * (1 << 19);
1972         gains1 = (s32) samples[idx1].gain_idx * (1 << 19);
1973         res =
1974             gains0 + (gains1 - gains0) * ((s32) power -
1975                                           (s32) samples[idx0].power) /
1976             denominator + (1 << 18);
1977         *new_idx = res >> 19;
1978         return 0;
1979 }
1980
1981 static void
1982 il3945_hw_reg_init_channel_groups(struct il_priv *il)
1983 {
1984         u32 i;
1985         s32 rate_idx;
1986         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1987         const struct il3945_eeprom_txpower_group *group;
1988
1989         D_POWER("Initializing factory calib info from EEPROM\n");
1990
1991         for (i = 0; i < IL_NUM_TX_CALIB_GROUPS; i++) {
1992                 s8 *clip_pwrs;  /* table of power levels for each rate */
1993                 s8 satur_pwr;   /* saturation power for each chnl group */
1994                 group = &eeprom->groups[i];
1995
1996                 /* sanity check on factory saturation power value */
1997                 if (group->saturation_power < 40) {
1998                         IL_WARN("Error: saturation power is %d, "
1999                                 "less than minimum expected 40\n",
2000                                 group->saturation_power);
2001                         return;
2002                 }
2003
2004                 /*
2005                  * Derive requested power levels for each rate, based on
2006                  *   hardware capabilities (saturation power for band).
2007                  * Basic value is 3dB down from saturation, with further
2008                  *   power reductions for highest 3 data rates.  These
2009                  *   backoffs provide headroom for high rate modulation
2010                  *   power peaks, without too much distortion (clipping).
2011                  */
2012                 /* we'll fill in this array with h/w max power levels */
2013                 clip_pwrs = (s8 *) il->_3945.clip_groups[i].clip_powers;
2014
2015                 /* divide factory saturation power by 2 to find -3dB level */
2016                 satur_pwr = (s8) (group->saturation_power >> 1);
2017
2018                 /* fill in channel group's nominal powers for each rate */
2019                 for (rate_idx = 0; rate_idx < RATE_COUNT_3945;
2020                      rate_idx++, clip_pwrs++) {
2021                         switch (rate_idx) {
2022                         case RATE_36M_IDX_TBL:
2023                                 if (i == 0)     /* B/G */
2024                                         *clip_pwrs = satur_pwr;
2025                                 else    /* A */
2026                                         *clip_pwrs = satur_pwr - 5;
2027                                 break;
2028                         case RATE_48M_IDX_TBL:
2029                                 if (i == 0)
2030                                         *clip_pwrs = satur_pwr - 7;
2031                                 else
2032                                         *clip_pwrs = satur_pwr - 10;
2033                                 break;
2034                         case RATE_54M_IDX_TBL:
2035                                 if (i == 0)
2036                                         *clip_pwrs = satur_pwr - 9;
2037                                 else
2038                                         *clip_pwrs = satur_pwr - 12;
2039                                 break;
2040                         default:
2041                                 *clip_pwrs = satur_pwr;
2042                                 break;
2043                         }
2044                 }
2045         }
2046 }
2047
2048 /**
2049  * il3945_txpower_set_from_eeprom - Set channel power info based on EEPROM
2050  *
2051  * Second pass (during init) to set up il->channel_info
2052  *
2053  * Set up Tx-power settings in our channel info database for each VALID
2054  * (for this geo/SKU) channel, at all Tx data rates, based on eeprom values
2055  * and current temperature.
2056  *
2057  * Since this is based on current temperature (at init time), these values may
2058  * not be valid for very long, but it gives us a starting/default point,
2059  * and allows us to active (i.e. using Tx) scan.
2060  *
2061  * This does *not* write values to NIC, just sets up our internal table.
2062  */
2063 int
2064 il3945_txpower_set_from_eeprom(struct il_priv *il)
2065 {
2066         struct il_channel_info *ch_info = NULL;
2067         struct il3945_channel_power_info *pwr_info;
2068         struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
2069         int delta_idx;
2070         u8 rate_idx;
2071         u8 scan_tbl_idx;
2072         const s8 *clip_pwrs;    /* array of power levels for each rate */
2073         u8 gain, dsp_atten;
2074         s8 power;
2075         u8 pwr_idx, base_pwr_idx, a_band;
2076         u8 i;
2077         int temperature;
2078
2079         /* save temperature reference,
2080          *   so we can determine next time to calibrate */
2081         temperature = il3945_hw_reg_txpower_get_temperature(il);
2082         il->last_temperature = temperature;
2083
2084         il3945_hw_reg_init_channel_groups(il);
2085
2086         /* initialize Tx power info for each and every channel, 2.4 and 5.x */
2087         for (i = 0, ch_info = il->channel_info; i < il->channel_count;
2088              i++, ch_info++) {
2089                 a_band = il_is_channel_a_band(ch_info);
2090                 if (!il_is_channel_valid(ch_info))
2091                         continue;
2092
2093                 /* find this channel's channel group (*not* "band") idx */
2094                 ch_info->group_idx = il3945_hw_reg_get_ch_grp_idx(il, ch_info);
2095
2096                 /* Get this chnlgrp's rate->max/clip-powers table */
2097                 clip_pwrs =
2098                     il->_3945.clip_groups[ch_info->group_idx].clip_powers;
2099
2100                 /* calculate power idx *adjustment* value according to
2101                  *  diff between current temperature and factory temperature */
2102                 delta_idx =
2103                     il3945_hw_reg_adjust_power_by_temp(temperature,
2104                                                        eeprom->groups[ch_info->
2105                                                                       group_idx].
2106                                                        temperature);
2107
2108                 D_POWER("Delta idx for channel %d: %d [%d]\n", ch_info->channel,
2109                         delta_idx, temperature + IL_TEMP_CONVERT);
2110
2111                 /* set tx power value for all OFDM rates */
2112                 for (rate_idx = 0; rate_idx < IL_OFDM_RATES; rate_idx++) {
2113                         s32 uninitialized_var(power_idx);
2114                         int rc;
2115
2116                         /* use channel group's clip-power table,
2117                          *   but don't exceed channel's max power */
2118                         s8 pwr = min(ch_info->max_power_avg,
2119                                      clip_pwrs[rate_idx]);
2120
2121                         pwr_info = &ch_info->power_info[rate_idx];
2122
2123                         /* get base (i.e. at factory-measured temperature)
2124                          *    power table idx for this rate's power */
2125                         rc = il3945_hw_reg_get_matched_power_idx(il, pwr,
2126                                                                  ch_info->
2127                                                                  group_idx,
2128                                                                  &power_idx);
2129                         if (rc) {
2130                                 IL_ERR("Invalid power idx\n");
2131                                 return rc;
2132                         }
2133                         pwr_info->base_power_idx = (u8) power_idx;
2134
2135                         /* temperature compensate */
2136                         power_idx += delta_idx;
2137
2138                         /* stay within range of gain table */
2139                         power_idx = il3945_hw_reg_fix_power_idx(power_idx);
2140
2141                         /* fill 1 OFDM rate's il3945_channel_power_info struct */
2142                         pwr_info->requested_power = pwr;
2143                         pwr_info->power_table_idx = (u8) power_idx;
2144                         pwr_info->tpc.tx_gain =
2145                             power_gain_table[a_band][power_idx].tx_gain;
2146                         pwr_info->tpc.dsp_atten =
2147                             power_gain_table[a_band][power_idx].dsp_atten;
2148                 }
2149
2150                 /* set tx power for CCK rates, based on OFDM 12 Mbit settings */
2151                 pwr_info = &ch_info->power_info[RATE_12M_IDX_TBL];
2152                 power = pwr_info->requested_power + IL_CCK_FROM_OFDM_POWER_DIFF;
2153                 pwr_idx = pwr_info->power_table_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2154                 base_pwr_idx =
2155                     pwr_info->base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2156
2157                 /* stay within table range */
2158                 pwr_idx = il3945_hw_reg_fix_power_idx(pwr_idx);
2159                 gain = power_gain_table[a_band][pwr_idx].tx_gain;
2160                 dsp_atten = power_gain_table[a_band][pwr_idx].dsp_atten;
2161
2162                 /* fill each CCK rate's il3945_channel_power_info structure
2163                  * NOTE:  All CCK-rate Txpwrs are the same for a given chnl!
2164                  * NOTE:  CCK rates start at end of OFDM rates! */
2165                 for (rate_idx = 0; rate_idx < IL_CCK_RATES; rate_idx++) {
2166                         pwr_info =
2167                             &ch_info->power_info[rate_idx + IL_OFDM_RATES];
2168                         pwr_info->requested_power = power;
2169                         pwr_info->power_table_idx = pwr_idx;
2170                         pwr_info->base_power_idx = base_pwr_idx;
2171                         pwr_info->tpc.tx_gain = gain;
2172                         pwr_info->tpc.dsp_atten = dsp_atten;
2173                 }
2174
2175                 /* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
2176                 for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
2177                      scan_tbl_idx++) {
2178                         s32 actual_idx =
2179                             (scan_tbl_idx ==
2180                              0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
2181                         il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
2182                                                      actual_idx, clip_pwrs,
2183                                                      ch_info, a_band);
2184                 }
2185         }
2186
2187         return 0;
2188 }
2189
2190 int
2191 il3945_hw_rxq_stop(struct il_priv *il)
2192 {
2193         int ret;
2194
2195         _il_wr(il, FH39_RCSR_CONFIG(0), 0);
2196         ret = _il_poll_bit(il, FH39_RSSR_STATUS,
2197                            FH39_RSSR_CHNL0_RX_STATUS_CHNL_IDLE,
2198                            FH39_RSSR_CHNL0_RX_STATUS_CHNL_IDLE,
2199                            1000);
2200         if (ret < 0)
2201                 IL_ERR("Can't stop Rx DMA.\n");
2202
2203         return 0;
2204 }
2205
2206 int
2207 il3945_hw_tx_queue_init(struct il_priv *il, struct il_tx_queue *txq)
2208 {
2209         int txq_id = txq->q.id;
2210
2211         struct il3945_shared *shared_data = il->_3945.shared_virt;
2212
2213         shared_data->tx_base_ptr[txq_id] = cpu_to_le32((u32) txq->q.dma_addr);
2214
2215         il_wr(il, FH39_CBCC_CTRL(txq_id), 0);
2216         il_wr(il, FH39_CBCC_BASE(txq_id), 0);
2217
2218         il_wr(il, FH39_TCSR_CONFIG(txq_id),
2219               FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_RTC_NOINT |
2220               FH39_TCSR_TX_CONFIG_REG_VAL_MSG_MODE_TXF |
2221               FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_HOST_IFTFD |
2222               FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CREDIT_ENABLE_VAL |
2223               FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CHNL_ENABLE);
2224
2225         /* fake read to flush all prev. writes */
2226         _il_rd(il, FH39_TSSR_CBB_BASE);
2227
2228         return 0;
2229 }
2230
2231 /*
2232  * HCMD utils
2233  */
2234 static u16
2235 il3945_get_hcmd_size(u8 cmd_id, u16 len)
2236 {
2237         switch (cmd_id) {
2238         case C_RXON:
2239                 return sizeof(struct il3945_rxon_cmd);
2240         case C_POWER_TBL:
2241                 return sizeof(struct il3945_powertable_cmd);
2242         default:
2243                 return len;
2244         }
2245 }
2246
2247 static u16
2248 il3945_build_addsta_hcmd(const struct il_addsta_cmd *cmd, u8 * data)
2249 {
2250         struct il3945_addsta_cmd *addsta = (struct il3945_addsta_cmd *)data;
2251         addsta->mode = cmd->mode;
2252         memcpy(&addsta->sta, &cmd->sta, sizeof(struct sta_id_modify));
2253         memcpy(&addsta->key, &cmd->key, sizeof(struct il4965_keyinfo));
2254         addsta->station_flags = cmd->station_flags;
2255         addsta->station_flags_msk = cmd->station_flags_msk;
2256         addsta->tid_disable_tx = cpu_to_le16(0);
2257         addsta->rate_n_flags = cmd->rate_n_flags;
2258         addsta->add_immediate_ba_tid = cmd->add_immediate_ba_tid;
2259         addsta->remove_immediate_ba_tid = cmd->remove_immediate_ba_tid;
2260         addsta->add_immediate_ba_ssn = cmd->add_immediate_ba_ssn;
2261
2262         return (u16) sizeof(struct il3945_addsta_cmd);
2263 }
2264
2265 static int
2266 il3945_add_bssid_station(struct il_priv *il, const u8 * addr, u8 * sta_id_r)
2267 {
2268         int ret;
2269         u8 sta_id;
2270         unsigned long flags;
2271
2272         if (sta_id_r)
2273                 *sta_id_r = IL_INVALID_STATION;
2274
2275         ret = il_add_station_common(il, addr, 0, NULL, &sta_id);
2276         if (ret) {
2277                 IL_ERR("Unable to add station %pM\n", addr);
2278                 return ret;
2279         }
2280
2281         if (sta_id_r)
2282                 *sta_id_r = sta_id;
2283
2284         spin_lock_irqsave(&il->sta_lock, flags);
2285         il->stations[sta_id].used |= IL_STA_LOCAL;
2286         spin_unlock_irqrestore(&il->sta_lock, flags);
2287
2288         return 0;
2289 }
2290
2291 static int
2292 il3945_manage_ibss_station(struct il_priv *il, struct ieee80211_vif *vif,
2293                            bool add)
2294 {
2295         struct il_vif_priv *vif_priv = (void *)vif->drv_priv;
2296         int ret;
2297
2298         if (add) {
2299                 ret =
2300                     il3945_add_bssid_station(il, vif->bss_conf.bssid,
2301                                              &vif_priv->ibss_bssid_sta_id);
2302                 if (ret)
2303                         return ret;
2304
2305                 il3945_sync_sta(il, vif_priv->ibss_bssid_sta_id,
2306                                 (il->band ==
2307                                  IEEE80211_BAND_5GHZ) ? RATE_6M_PLCP :
2308                                 RATE_1M_PLCP);
2309                 il3945_rate_scale_init(il->hw, vif_priv->ibss_bssid_sta_id);
2310
2311                 return 0;
2312         }
2313
2314         return il_remove_station(il, vif_priv->ibss_bssid_sta_id,
2315                                  vif->bss_conf.bssid);
2316 }
2317
2318 /**
2319  * il3945_init_hw_rate_table - Initialize the hardware rate fallback table
2320  */
2321 int
2322 il3945_init_hw_rate_table(struct il_priv *il)
2323 {
2324         int rc, i, idx, prev_idx;
2325         struct il3945_rate_scaling_cmd rate_cmd = {
2326                 .reserved = {0, 0, 0},
2327         };
2328         struct il3945_rate_scaling_info *table = rate_cmd.table;
2329
2330         for (i = 0; i < ARRAY_SIZE(il3945_rates); i++) {
2331                 idx = il3945_rates[i].table_rs_idx;
2332
2333                 table[idx].rate_n_flags = cpu_to_le16(il3945_rates[i].plcp);
2334                 table[idx].try_cnt = il->retry_rate;
2335                 prev_idx = il3945_get_prev_ieee_rate(i);
2336                 table[idx].next_rate_idx = il3945_rates[prev_idx].table_rs_idx;
2337         }
2338
2339         switch (il->band) {
2340         case IEEE80211_BAND_5GHZ:
2341                 D_RATE("Select A mode rate scale\n");
2342                 /* If one of the following CCK rates is used,
2343                  * have it fall back to the 6M OFDM rate */
2344                 for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++)
2345                         table[i].next_rate_idx =
2346                             il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2347
2348                 /* Don't fall back to CCK rates */
2349                 table[RATE_12M_IDX_TBL].next_rate_idx = RATE_9M_IDX_TBL;
2350
2351                 /* Don't drop out of OFDM rates */
2352                 table[RATE_6M_IDX_TBL].next_rate_idx =
2353                     il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2354                 break;
2355
2356         case IEEE80211_BAND_2GHZ:
2357                 D_RATE("Select B/G mode rate scale\n");
2358                 /* If an OFDM rate is used, have it fall back to the
2359                  * 1M CCK rates */
2360
2361                 if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
2362                     il_is_associated(il)) {
2363
2364                         idx = IL_FIRST_CCK_RATE;
2365                         for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++)
2366                                 table[i].next_rate_idx =
2367                                     il3945_rates[idx].table_rs_idx;
2368
2369                         idx = RATE_11M_IDX_TBL;
2370                         /* CCK shouldn't fall back to OFDM... */
2371                         table[idx].next_rate_idx = RATE_5M_IDX_TBL;
2372                 }
2373                 break;
2374
2375         default:
2376                 WARN_ON(1);
2377                 break;
2378         }
2379
2380         /* Update the rate scaling for control frame Tx */
2381         rate_cmd.table_id = 0;
2382         rc = il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2383         if (rc)
2384                 return rc;
2385
2386         /* Update the rate scaling for data frame Tx */
2387         rate_cmd.table_id = 1;
2388         return il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2389 }
2390
2391 /* Called when initializing driver */
2392 int
2393 il3945_hw_set_hw_params(struct il_priv *il)
2394 {
2395         memset((void *)&il->hw_params, 0, sizeof(struct il_hw_params));
2396
2397         il->_3945.shared_virt =
2398             dma_alloc_coherent(&il->pci_dev->dev, sizeof(struct il3945_shared),
2399                                &il->_3945.shared_phys, GFP_KERNEL);
2400         if (!il->_3945.shared_virt)
2401                 return -ENOMEM;
2402
2403         il->hw_params.bcast_id = IL3945_BROADCAST_ID;
2404
2405         /* Assign number of Usable TX queues */
2406         il->hw_params.max_txq_num = il->cfg->num_of_queues;
2407
2408         il->hw_params.tfd_size = sizeof(struct il3945_tfd);
2409         il->hw_params.rx_page_order = get_order(IL_RX_BUF_SIZE_3K);
2410         il->hw_params.max_rxq_size = RX_QUEUE_SIZE;
2411         il->hw_params.max_rxq_log = RX_QUEUE_SIZE_LOG;
2412         il->hw_params.max_stations = IL3945_STATION_COUNT;
2413
2414         il->sta_key_max_num = STA_KEY_MAX_NUM;
2415
2416         il->hw_params.rx_wrt_ptr_reg = FH39_RSCSR_CHNL0_WPTR;
2417         il->hw_params.max_beacon_itrvl = IL39_MAX_UCODE_BEACON_INTERVAL;
2418         il->hw_params.beacon_time_tsf_bits = IL3945_EXT_BEACON_TIME_POS;
2419
2420         return 0;
2421 }
2422
2423 unsigned int
2424 il3945_hw_get_beacon_cmd(struct il_priv *il, struct il3945_frame *frame,
2425                          u8 rate)
2426 {
2427         struct il3945_tx_beacon_cmd *tx_beacon_cmd;
2428         unsigned int frame_size;
2429
2430         tx_beacon_cmd = (struct il3945_tx_beacon_cmd *)&frame->u;
2431         memset(tx_beacon_cmd, 0, sizeof(*tx_beacon_cmd));
2432
2433         tx_beacon_cmd->tx.sta_id = il->hw_params.bcast_id;
2434         tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
2435
2436         frame_size =
2437             il3945_fill_beacon_frame(il, tx_beacon_cmd->frame,
2438                                      sizeof(frame->u) - sizeof(*tx_beacon_cmd));
2439
2440         BUG_ON(frame_size > MAX_MPDU_SIZE);
2441         tx_beacon_cmd->tx.len = cpu_to_le16((u16) frame_size);
2442
2443         tx_beacon_cmd->tx.rate = rate;
2444         tx_beacon_cmd->tx.tx_flags =
2445             (TX_CMD_FLG_SEQ_CTL_MSK | TX_CMD_FLG_TSF_MSK);
2446
2447         /* supp_rates[0] == OFDM start at IL_FIRST_OFDM_RATE */
2448         tx_beacon_cmd->tx.supp_rates[0] =
2449             (IL_OFDM_BASIC_RATES_MASK >> IL_FIRST_OFDM_RATE) & 0xFF;
2450
2451         tx_beacon_cmd->tx.supp_rates[1] = (IL_CCK_BASIC_RATES_MASK & 0xF);
2452
2453         return sizeof(struct il3945_tx_beacon_cmd) + frame_size;
2454 }
2455
2456 void
2457 il3945_hw_handler_setup(struct il_priv *il)
2458 {
2459         il->handlers[C_TX] = il3945_hdl_tx;
2460         il->handlers[N_3945_RX] = il3945_hdl_rx;
2461 }
2462
2463 void
2464 il3945_hw_setup_deferred_work(struct il_priv *il)
2465 {
2466         INIT_DELAYED_WORK(&il->_3945.thermal_periodic,
2467                           il3945_bg_reg_txpower_periodic);
2468 }
2469
2470 void
2471 il3945_hw_cancel_deferred_work(struct il_priv *il)
2472 {
2473         cancel_delayed_work(&il->_3945.thermal_periodic);
2474 }
2475
2476 /* check contents of special bootstrap uCode SRAM */
2477 static int
2478 il3945_verify_bsm(struct il_priv *il)
2479 {
2480         __le32 *image = il->ucode_boot.v_addr;
2481         u32 len = il->ucode_boot.len;
2482         u32 reg;
2483         u32 val;
2484
2485         D_INFO("Begin verify bsm\n");
2486
2487         /* verify BSM SRAM contents */
2488         val = il_rd_prph(il, BSM_WR_DWCOUNT_REG);
2489         for (reg = BSM_SRAM_LOWER_BOUND; reg < BSM_SRAM_LOWER_BOUND + len;
2490              reg += sizeof(u32), image++) {
2491                 val = il_rd_prph(il, reg);
2492                 if (val != le32_to_cpu(*image)) {
2493                         IL_ERR("BSM uCode verification failed at "
2494                                "addr 0x%08X+%u (of %u), is 0x%x, s/b 0x%x\n",
2495                                BSM_SRAM_LOWER_BOUND, reg - BSM_SRAM_LOWER_BOUND,
2496                                len, val, le32_to_cpu(*image));
2497                         return -EIO;
2498                 }
2499         }
2500
2501         D_INFO("BSM bootstrap uCode image OK\n");
2502
2503         return 0;
2504 }
2505
2506 /******************************************************************************
2507  *
2508  * EEPROM related functions
2509  *
2510  ******************************************************************************/
2511
2512 /*
2513  * Clear the OWNER_MSK, to establish driver (instead of uCode running on
2514  * embedded controller) as EEPROM reader; each read is a series of pulses
2515  * to/from the EEPROM chip, not a single event, so even reads could conflict
2516  * if they weren't arbitrated by some ownership mechanism.  Here, the driver
2517  * simply claims ownership, which should be safe when this function is called
2518  * (i.e. before loading uCode!).
2519  */
2520 static int
2521 il3945_eeprom_acquire_semaphore(struct il_priv *il)
2522 {
2523         _il_clear_bit(il, CSR_EEPROM_GP, CSR_EEPROM_GP_IF_OWNER_MSK);
2524         return 0;
2525 }
2526
2527 static void
2528 il3945_eeprom_release_semaphore(struct il_priv *il)
2529 {
2530         return;
2531 }
2532
2533  /**
2534   * il3945_load_bsm - Load bootstrap instructions
2535   *
2536   * BSM operation:
2537   *
2538   * The Bootstrap State Machine (BSM) stores a short bootstrap uCode program
2539   * in special SRAM that does not power down during RFKILL.  When powering back
2540   * up after power-saving sleeps (or during initial uCode load), the BSM loads
2541   * the bootstrap program into the on-board processor, and starts it.
2542   *
2543   * The bootstrap program loads (via DMA) instructions and data for a new
2544   * program from host DRAM locations indicated by the host driver in the
2545   * BSM_DRAM_* registers.  Once the new program is loaded, it starts
2546   * automatically.
2547   *
2548   * When initializing the NIC, the host driver points the BSM to the
2549   * "initialize" uCode image.  This uCode sets up some internal data, then
2550   * notifies host via "initialize alive" that it is complete.
2551   *
2552   * The host then replaces the BSM_DRAM_* pointer values to point to the
2553   * normal runtime uCode instructions and a backup uCode data cache buffer
2554   * (filled initially with starting data values for the on-board processor),
2555   * then triggers the "initialize" uCode to load and launch the runtime uCode,
2556   * which begins normal operation.
2557   *
2558   * When doing a power-save shutdown, runtime uCode saves data SRAM into
2559   * the backup data cache in DRAM before SRAM is powered down.
2560   *
2561   * When powering back up, the BSM loads the bootstrap program.  This reloads
2562   * the runtime uCode instructions and the backup data cache into SRAM,
2563   * and re-launches the runtime uCode from where it left off.
2564   */
2565 static int
2566 il3945_load_bsm(struct il_priv *il)
2567 {
2568         __le32 *image = il->ucode_boot.v_addr;
2569         u32 len = il->ucode_boot.len;
2570         dma_addr_t pinst;
2571         dma_addr_t pdata;
2572         u32 inst_len;
2573         u32 data_len;
2574         int rc;
2575         int i;
2576         u32 done;
2577         u32 reg_offset;
2578
2579         D_INFO("Begin load bsm\n");
2580
2581         /* make sure bootstrap program is no larger than BSM's SRAM size */
2582         if (len > IL39_MAX_BSM_SIZE)
2583                 return -EINVAL;
2584
2585         /* Tell bootstrap uCode where to find the "Initialize" uCode
2586          *   in host DRAM ... host DRAM physical address bits 31:0 for 3945.
2587          * NOTE:  il3945_initialize_alive_start() will replace these values,
2588          *        after the "initialize" uCode has run, to point to
2589          *        runtime/protocol instructions and backup data cache. */
2590         pinst = il->ucode_init.p_addr;
2591         pdata = il->ucode_init_data.p_addr;
2592         inst_len = il->ucode_init.len;
2593         data_len = il->ucode_init_data.len;
2594
2595         il_wr_prph(il, BSM_DRAM_INST_PTR_REG, pinst);
2596         il_wr_prph(il, BSM_DRAM_DATA_PTR_REG, pdata);
2597         il_wr_prph(il, BSM_DRAM_INST_BYTECOUNT_REG, inst_len);
2598         il_wr_prph(il, BSM_DRAM_DATA_BYTECOUNT_REG, data_len);
2599
2600         /* Fill BSM memory with bootstrap instructions */
2601         for (reg_offset = BSM_SRAM_LOWER_BOUND;
2602              reg_offset < BSM_SRAM_LOWER_BOUND + len;
2603              reg_offset += sizeof(u32), image++)
2604                 _il_wr_prph(il, reg_offset, le32_to_cpu(*image));
2605
2606         rc = il3945_verify_bsm(il);
2607         if (rc)
2608                 return rc;
2609
2610         /* Tell BSM to copy from BSM SRAM into instruction SRAM, when asked */
2611         il_wr_prph(il, BSM_WR_MEM_SRC_REG, 0x0);
2612         il_wr_prph(il, BSM_WR_MEM_DST_REG, IL39_RTC_INST_LOWER_BOUND);
2613         il_wr_prph(il, BSM_WR_DWCOUNT_REG, len / sizeof(u32));
2614
2615         /* Load bootstrap code into instruction SRAM now,
2616          *   to prepare to load "initialize" uCode */
2617         il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START);
2618
2619         /* Wait for load of bootstrap uCode to finish */
2620         for (i = 0; i < 100; i++) {
2621                 done = il_rd_prph(il, BSM_WR_CTRL_REG);
2622                 if (!(done & BSM_WR_CTRL_REG_BIT_START))
2623                         break;
2624                 udelay(10);
2625         }
2626         if (i < 100)
2627                 D_INFO("BSM write complete, poll %d iterations\n", i);
2628         else {
2629                 IL_ERR("BSM write did not complete!\n");
2630                 return -EIO;
2631         }
2632
2633         /* Enable future boot loads whenever power management unit triggers it
2634          *   (e.g. when powering back up after power-save shutdown) */
2635         il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START_EN);
2636
2637         return 0;
2638 }
2639
2640 const struct il_ops il3945_ops = {
2641         .txq_attach_buf_to_tfd = il3945_hw_txq_attach_buf_to_tfd,
2642         .txq_free_tfd = il3945_hw_txq_free_tfd,
2643         .txq_init = il3945_hw_tx_queue_init,
2644         .load_ucode = il3945_load_bsm,
2645         .dump_nic_error_log = il3945_dump_nic_error_log,
2646         .apm_init = il3945_apm_init,
2647         .send_tx_power = il3945_send_tx_power,
2648         .is_valid_rtc_data_addr = il3945_hw_valid_rtc_data_addr,
2649         .eeprom_acquire_semaphore = il3945_eeprom_acquire_semaphore,
2650         .eeprom_release_semaphore = il3945_eeprom_release_semaphore,
2651
2652         .rxon_assoc = il3945_send_rxon_assoc,
2653         .commit_rxon = il3945_commit_rxon,
2654
2655         .get_hcmd_size = il3945_get_hcmd_size,
2656         .build_addsta_hcmd = il3945_build_addsta_hcmd,
2657         .request_scan = il3945_request_scan,
2658         .post_scan = il3945_post_scan,
2659
2660         .post_associate = il3945_post_associate,
2661         .config_ap = il3945_config_ap,
2662         .manage_ibss_station = il3945_manage_ibss_station,
2663
2664         .send_led_cmd = il3945_send_led_cmd,
2665 };
2666
2667 static struct il_cfg il3945_bg_cfg = {
2668         .name = "3945BG",
2669         .fw_name_pre = IL3945_FW_PRE,
2670         .ucode_api_max = IL3945_UCODE_API_MAX,
2671         .ucode_api_min = IL3945_UCODE_API_MIN,
2672         .sku = IL_SKU_G,
2673         .eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2674         .mod_params = &il3945_mod_params,
2675         .led_mode = IL_LED_BLINK,
2676
2677         .eeprom_size = IL3945_EEPROM_IMG_SIZE,
2678         .num_of_queues = IL39_NUM_QUEUES,
2679         .pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2680         .set_l0s = false,
2681         .use_bsm = true,
2682         .led_compensation = 64,
2683         .wd_timeout = IL_DEF_WD_TIMEOUT,
2684
2685         .regulatory_bands = {
2686                 EEPROM_REGULATORY_BAND_1_CHANNELS,
2687                 EEPROM_REGULATORY_BAND_2_CHANNELS,
2688                 EEPROM_REGULATORY_BAND_3_CHANNELS,
2689                 EEPROM_REGULATORY_BAND_4_CHANNELS,
2690                 EEPROM_REGULATORY_BAND_5_CHANNELS,
2691                 EEPROM_REGULATORY_BAND_NO_HT40,
2692                 EEPROM_REGULATORY_BAND_NO_HT40,
2693         },
2694 };
2695
2696 static struct il_cfg il3945_abg_cfg = {
2697         .name = "3945ABG",
2698         .fw_name_pre = IL3945_FW_PRE,
2699         .ucode_api_max = IL3945_UCODE_API_MAX,
2700         .ucode_api_min = IL3945_UCODE_API_MIN,
2701         .sku = IL_SKU_A | IL_SKU_G,
2702         .eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2703         .mod_params = &il3945_mod_params,
2704         .led_mode = IL_LED_BLINK,
2705
2706         .eeprom_size = IL3945_EEPROM_IMG_SIZE,
2707         .num_of_queues = IL39_NUM_QUEUES,
2708         .pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2709         .set_l0s = false,
2710         .use_bsm = true,
2711         .led_compensation = 64,
2712         .wd_timeout = IL_DEF_WD_TIMEOUT,
2713
2714         .regulatory_bands = {
2715                 EEPROM_REGULATORY_BAND_1_CHANNELS,
2716                 EEPROM_REGULATORY_BAND_2_CHANNELS,
2717                 EEPROM_REGULATORY_BAND_3_CHANNELS,
2718                 EEPROM_REGULATORY_BAND_4_CHANNELS,
2719                 EEPROM_REGULATORY_BAND_5_CHANNELS,
2720                 EEPROM_REGULATORY_BAND_NO_HT40,
2721                 EEPROM_REGULATORY_BAND_NO_HT40,
2722         },
2723 };
2724
2725 DEFINE_PCI_DEVICE_TABLE(il3945_hw_card_ids) = {
2726         {IL_PCI_DEVICE(0x4222, 0x1005, il3945_bg_cfg)},
2727         {IL_PCI_DEVICE(0x4222, 0x1034, il3945_bg_cfg)},
2728         {IL_PCI_DEVICE(0x4222, 0x1044, il3945_bg_cfg)},
2729         {IL_PCI_DEVICE(0x4227, 0x1014, il3945_bg_cfg)},
2730         {IL_PCI_DEVICE(0x4222, PCI_ANY_ID, il3945_abg_cfg)},
2731         {IL_PCI_DEVICE(0x4227, PCI_ANY_ID, il3945_abg_cfg)},
2732         {0}
2733 };
2734
2735 MODULE_DEVICE_TABLE(pci, il3945_hw_card_ids);