drivers/net/wireless/ath/ath6kl/cfg80211.c

   1 /*
   2  * Copyright (c) 2004-2011 Atheros Communications Inc.
   3  * Copyright (c) 2011-2012 Qualcomm Atheros, Inc.
   4  *
   5  * Permission to use, copy, modify, and/or distribute this software for any
   6  * purpose with or without fee is hereby granted, provided that the above
   7  * copyright notice and this permission notice appear in all copies.
   8  *
   9  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16  */
  17
  18 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  19
  20 #include <linux/moduleparam.h>
  21 #include <linux/inetdevice.h>
  22 #include <linux/export.h>
  23
  24 #include "core.h"
  25 #include "cfg80211.h"
  26 #include "debug.h"
  27 #include "hif-ops.h"
  28 #include "testmode.h"
  29
  30 #define RATETAB_ENT(_rate, _rateid, _flags) {   \
  31         .bitrate    = (_rate),                  \
  32         .flags      = (_flags),                 \
  33         .hw_value   = (_rateid),                \
  34 }
  35
  36 #define CHAN2G(_channel, _freq, _flags) {   \
  37         .band           = IEEE80211_BAND_2GHZ,  \
  38         .hw_value       = (_channel),           \
  39         .center_freq    = (_freq),              \
  40         .flags          = (_flags),             \
  41         .max_antenna_gain   = 0,                \
  42         .max_power      = 30,                   \
  43 }
  44
  45 #define CHAN5G(_channel, _flags) {                  \
  46         .band           = IEEE80211_BAND_5GHZ,      \
  47         .hw_value       = (_channel),               \
  48         .center_freq    = 5000 + (5 * (_channel)),  \
  49         .flags          = (_flags),                 \
  50         .max_antenna_gain   = 0,                    \
  51         .max_power      = 30,                       \
  52 }
  53
  54 #define DEFAULT_BG_SCAN_PERIOD 60
  55
  56 struct ath6kl_cfg80211_match_probe_ssid {
  57         struct cfg80211_ssid ssid;
  58         u8 flag;
  59 };
  60
  61 static struct ieee80211_rate ath6kl_rates[] = {
  62         RATETAB_ENT(10, 0x1, 0),
  63         RATETAB_ENT(20, 0x2, 0),
  64         RATETAB_ENT(55, 0x4, 0),
  65         RATETAB_ENT(110, 0x8, 0),
  66         RATETAB_ENT(60, 0x10, 0),
  67         RATETAB_ENT(90, 0x20, 0),
  68         RATETAB_ENT(120, 0x40, 0),
  69         RATETAB_ENT(180, 0x80, 0),
  70         RATETAB_ENT(240, 0x100, 0),
  71         RATETAB_ENT(360, 0x200, 0),
  72         RATETAB_ENT(480, 0x400, 0),
  73         RATETAB_ENT(540, 0x800, 0),
  74 };
  75
  76 #define ath6kl_a_rates     (ath6kl_rates + 4)
  77 #define ath6kl_a_rates_size    8
  78 #define ath6kl_g_rates     (ath6kl_rates + 0)
  79 #define ath6kl_g_rates_size    12
  80
  81 #define ath6kl_g_htcap IEEE80211_HT_CAP_SGI_20
  82 #define ath6kl_a_htcap (IEEE80211_HT_CAP_SUP_WIDTH_20_40 | \
  83                         IEEE80211_HT_CAP_SGI_20          | \
  84                         IEEE80211_HT_CAP_SGI_40)
  85
  86 static struct ieee80211_channel ath6kl_2ghz_channels[] = {
  87         CHAN2G(1, 2412, 0),
  88         CHAN2G(2, 2417, 0),
  89         CHAN2G(3, 2422, 0),
  90         CHAN2G(4, 2427, 0),
  91         CHAN2G(5, 2432, 0),
  92         CHAN2G(6, 2437, 0),
  93         CHAN2G(7, 2442, 0),
  94         CHAN2G(8, 2447, 0),
  95         CHAN2G(9, 2452, 0),
  96         CHAN2G(10, 2457, 0),
  97         CHAN2G(11, 2462, 0),
  98         CHAN2G(12, 2467, 0),
  99         CHAN2G(13, 2472, 0),
 100         CHAN2G(14, 2484, 0),
 101 };
 102
 103 static struct ieee80211_channel ath6kl_5ghz_a_channels[] = {
 104         CHAN5G(34, 0), CHAN5G(36, 0),
 105         CHAN5G(38, 0), CHAN5G(40, 0),
 106         CHAN5G(42, 0), CHAN5G(44, 0),
 107         CHAN5G(46, 0), CHAN5G(48, 0),
 108         CHAN5G(52, 0), CHAN5G(56, 0),
 109         CHAN5G(60, 0), CHAN5G(64, 0),
 110         CHAN5G(100, 0), CHAN5G(104, 0),
 111         CHAN5G(108, 0), CHAN5G(112, 0),
 112         CHAN5G(116, 0), CHAN5G(120, 0),
 113         CHAN5G(124, 0), CHAN5G(128, 0),
 114         CHAN5G(132, 0), CHAN5G(136, 0),
 115         CHAN5G(140, 0), CHAN5G(149, 0),
 116         CHAN5G(153, 0), CHAN5G(157, 0),
 117         CHAN5G(161, 0), CHAN5G(165, 0),
 118         CHAN5G(184, 0), CHAN5G(188, 0),
 119         CHAN5G(192, 0), CHAN5G(196, 0),
 120         CHAN5G(200, 0), CHAN5G(204, 0),
 121         CHAN5G(208, 0), CHAN5G(212, 0),
 122         CHAN5G(216, 0),
 123 };
 124
 125 static struct ieee80211_supported_band ath6kl_band_2ghz = {
 126         .n_channels = ARRAY_SIZE(ath6kl_2ghz_channels),
 127         .channels = ath6kl_2ghz_channels,
 128         .n_bitrates = ath6kl_g_rates_size,
 129         .bitrates = ath6kl_g_rates,
 130         .ht_cap.cap = ath6kl_g_htcap,
 131         .ht_cap.ht_supported = true,
 132 };
 133
 134 static struct ieee80211_supported_band ath6kl_band_5ghz = {
 135         .n_channels = ARRAY_SIZE(ath6kl_5ghz_a_channels),
 136         .channels = ath6kl_5ghz_a_channels,
 137         .n_bitrates = ath6kl_a_rates_size,
 138         .bitrates = ath6kl_a_rates,
 139         .ht_cap.cap = ath6kl_a_htcap,
 140         .ht_cap.ht_supported = true,
 141 };
 142
 143 #define CCKM_KRK_CIPHER_SUITE 0x004096ff /* use for KRK */
 144
 145 /* returns true if scheduled scan was stopped */
 146 static bool __ath6kl_cfg80211_sscan_stop(struct ath6kl_vif *vif)
 147 {
 148         struct ath6kl *ar = vif->ar;
 149
 150         if (!test_and_clear_bit(SCHED_SCANNING, &vif->flags))
 151                 return false;
 152
 153         del_timer_sync(&vif->sched_scan_timer);
 154
 155         if (ar->state == ATH6KL_STATE_RECOVERY)
 156                 return true;
 157
 158         ath6kl_wmi_enable_sched_scan_cmd(ar->wmi, vif->fw_vif_idx, false);
 159
 160         return true;
 161 }
 162
 163 static void ath6kl_cfg80211_sscan_disable(struct ath6kl_vif *vif)
 164 {
 165         struct ath6kl *ar = vif->ar;
 166         bool stopped;
 167
 168         stopped = __ath6kl_cfg80211_sscan_stop(vif);
 169
 170         if (!stopped)
 171                 return;
 172
 173         cfg80211_sched_scan_stopped(ar->wiphy);
 174 }
 175
 176 static int ath6kl_set_wpa_version(struct ath6kl_vif *vif,
 177                                   enum nl80211_wpa_versions wpa_version)
 178 {
 179         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: %u\n", __func__, wpa_version);
 180
 181         if (!wpa_version) {
 182                 vif->auth_mode = NONE_AUTH;
 183         } else if (wpa_version & NL80211_WPA_VERSION_2) {
 184                 vif->auth_mode = WPA2_AUTH;
 185         } else if (wpa_version & NL80211_WPA_VERSION_1) {
 186                 vif->auth_mode = WPA_AUTH;
 187         } else {
 188                 ath6kl_err("%s: %u not supported\n", __func__, wpa_version);
 189                 return -ENOTSUPP;
 190         }
 191
 192         return 0;
 193 }
 194
 195 static int ath6kl_set_auth_type(struct ath6kl_vif *vif,
 196                                 enum nl80211_auth_type auth_type)
 197 {
 198         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, auth_type);
 199
 200         switch (auth_type) {
 201         case NL80211_AUTHTYPE_OPEN_SYSTEM:
 202                 vif->dot11_auth_mode = OPEN_AUTH;
 203                 break;
 204         case NL80211_AUTHTYPE_SHARED_KEY:
 205                 vif->dot11_auth_mode = SHARED_AUTH;
 206                 break;
 207         case NL80211_AUTHTYPE_NETWORK_EAP:
 208                 vif->dot11_auth_mode = LEAP_AUTH;
 209                 break;
 210
 211         case NL80211_AUTHTYPE_AUTOMATIC:
 212                 vif->dot11_auth_mode = OPEN_AUTH | SHARED_AUTH;
 213                 break;
 214
 215         default:
 216                 ath6kl_err("%s: 0x%x not supported\n", __func__, auth_type);
 217                 return -ENOTSUPP;
 218         }
 219
 220         return 0;
 221 }
 222
 223 static int ath6kl_set_cipher(struct ath6kl_vif *vif, u32 cipher, bool ucast)
 224 {
 225         u8 *ar_cipher = ucast ? &vif->prwise_crypto : &vif->grp_crypto;
 226         u8 *ar_cipher_len = ucast ? &vif->prwise_crypto_len :
 227                 &vif->grp_crypto_len;
 228
 229         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: cipher 0x%x, ucast %u\n",
 230                    __func__, cipher, ucast);
 231
 232         switch (cipher) {
 233         case 0:
 234                 /* our own hack to use value 0 as no crypto used */
 235                 *ar_cipher = NONE_CRYPT;
 236                 *ar_cipher_len = 0;
 237                 break;
 238         case WLAN_CIPHER_SUITE_WEP40:
 239                 *ar_cipher = WEP_CRYPT;
 240                 *ar_cipher_len = 5;
 241                 break;
 242         case WLAN_CIPHER_SUITE_WEP104:
 243                 *ar_cipher = WEP_CRYPT;
 244                 *ar_cipher_len = 13;
 245                 break;
 246         case WLAN_CIPHER_SUITE_TKIP:
 247                 *ar_cipher = TKIP_CRYPT;
 248                 *ar_cipher_len = 0;
 249                 break;
 250         case WLAN_CIPHER_SUITE_CCMP:
 251                 *ar_cipher = AES_CRYPT;
 252                 *ar_cipher_len = 0;
 253                 break;
 254         case WLAN_CIPHER_SUITE_SMS4:
 255                 *ar_cipher = WAPI_CRYPT;
 256                 *ar_cipher_len = 0;
 257                 break;
 258         default:
 259                 ath6kl_err("cipher 0x%x not supported\n", cipher);
 260                 return -ENOTSUPP;
 261         }
 262
 263         return 0;
 264 }
 265
 266 static void ath6kl_set_key_mgmt(struct ath6kl_vif *vif, u32 key_mgmt)
 267 {
 268         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, key_mgmt);
 269
 270         if (key_mgmt == WLAN_AKM_SUITE_PSK) {
 271                 if (vif->auth_mode == WPA_AUTH)
 272                         vif->auth_mode = WPA_PSK_AUTH;
 273                 else if (vif->auth_mode == WPA2_AUTH)
 274                         vif->auth_mode = WPA2_PSK_AUTH;
 275         } else if (key_mgmt == 0x00409600) {
 276                 if (vif->auth_mode == WPA_AUTH)
 277                         vif->auth_mode = WPA_AUTH_CCKM;
 278                 else if (vif->auth_mode == WPA2_AUTH)
 279                         vif->auth_mode = WPA2_AUTH_CCKM;
 280         } else if (key_mgmt != WLAN_AKM_SUITE_8021X) {
 281                 vif->auth_mode = NONE_AUTH;
 282         }
 283 }
 284
 285 static bool ath6kl_cfg80211_ready(struct ath6kl_vif *vif)
 286 {
 287         struct ath6kl *ar = vif->ar;
 288
 289         if (!test_bit(WMI_READY, &ar->flag)) {
 290                 ath6kl_err("wmi is not ready\n");
 291                 return false;
 292         }
 293
 294         if (!test_bit(WLAN_ENABLED, &vif->flags)) {
 295                 ath6kl_err("wlan disabled\n");
 296                 return false;
 297         }
 298
 299         return true;
 300 }
 301
 302 static bool ath6kl_is_wpa_ie(const u8 *pos)
 303 {
 304         return pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 &&
 305                 pos[2] == 0x00 && pos[3] == 0x50 &&
 306                 pos[4] == 0xf2 && pos[5] == 0x01;
 307 }
 308
 309 static bool ath6kl_is_rsn_ie(const u8 *pos)
 310 {
 311         return pos[0] == WLAN_EID_RSN;
 312 }
 313
 314 static bool ath6kl_is_wps_ie(const u8 *pos)
 315 {
 316         return (pos[0] == WLAN_EID_VENDOR_SPECIFIC &&
 317                 pos[1] >= 4 &&
 318                 pos[2] == 0x00 && pos[3] == 0x50 && pos[4] == 0xf2 &&
 319                 pos[5] == 0x04);
 320 }
 321
 322 static int ath6kl_set_assoc_req_ies(struct ath6kl_vif *vif, const u8 *ies,
 323                                     size_t ies_len)
 324 {
 325         struct ath6kl *ar = vif->ar;
 326         const u8 *pos;
 327         u8 *buf = NULL;
 328         size_t len = 0;
 329         int ret;
 330
 331         /*
 332          * Clear previously set flag
 333          */
 334
 335         ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
 336
 337         /*
 338          * Filter out RSN/WPA IE(s)
 339          */
 340
 341         if (ies && ies_len) {
 342                 buf = kmalloc(ies_len, GFP_KERNEL);
 343                 if (buf == NULL)
 344                         return -ENOMEM;
 345                 pos = ies;
 346
 347                 while (pos + 1 < ies + ies_len) {
 348                         if (pos + 2 + pos[1] > ies + ies_len)
 349                                 break;
 350                         if (!(ath6kl_is_wpa_ie(pos) || ath6kl_is_rsn_ie(pos))) {
 351                                 memcpy(buf + len, pos, 2 + pos[1]);
 352                                 len += 2 + pos[1];
 353                         }
 354
 355                         if (ath6kl_is_wps_ie(pos))
 356                                 ar->connect_ctrl_flags |= CONNECT_WPS_FLAG;
 357
 358                         pos += 2 + pos[1];
 359                 }
 360         }
 361
 362         ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
 363                                        WMI_FRAME_ASSOC_REQ, buf, len);
 364         kfree(buf);
 365         return ret;
 366 }
 367
 368 static int ath6kl_nliftype_to_drv_iftype(enum nl80211_iftype type, u8 *nw_type)
 369 {
 370         switch (type) {
 371         case NL80211_IFTYPE_STATION:
 372         case NL80211_IFTYPE_P2P_CLIENT:
 373                 *nw_type = INFRA_NETWORK;
 374                 break;
 375         case NL80211_IFTYPE_ADHOC:
 376                 *nw_type = ADHOC_NETWORK;
 377                 break;
 378         case NL80211_IFTYPE_AP:
 379         case NL80211_IFTYPE_P2P_GO:
 380                 *nw_type = AP_NETWORK;
 381                 break;
 382         default:
 383                 ath6kl_err("invalid interface type %u\n", type);
 384                 return -ENOTSUPP;
 385         }
 386
 387         return 0;
 388 }
 389
 390 static bool ath6kl_is_valid_iftype(struct ath6kl *ar, enum nl80211_iftype type,
 391                                    u8 *if_idx, u8 *nw_type)
 392 {
 393         int i;
 394
 395         if (ath6kl_nliftype_to_drv_iftype(type, nw_type))
 396                 return false;
 397
 398         if (ar->ibss_if_active || ((type == NL80211_IFTYPE_ADHOC) &&
 399                                    ar->num_vif))
 400                 return false;
 401
 402         if (type == NL80211_IFTYPE_STATION ||
 403             type == NL80211_IFTYPE_AP || type == NL80211_IFTYPE_ADHOC) {
 404                 for (i = 0; i < ar->vif_max; i++) {
 405                         if ((ar->avail_idx_map) & BIT(i)) {
 406                                 *if_idx = i;
 407                                 return true;
 408                         }
 409                 }
 410         }
 411
 412         if (type == NL80211_IFTYPE_P2P_CLIENT ||
 413             type == NL80211_IFTYPE_P2P_GO) {
 414                 for (i = ar->max_norm_iface; i < ar->vif_max; i++) {
 415                         if ((ar->avail_idx_map) & BIT(i)) {
 416                                 *if_idx = i;
 417                                 return true;
 418                         }
 419                 }
 420         }
 421
 422         return false;
 423 }
 424
 425 static bool ath6kl_is_tx_pending(struct ath6kl *ar)
 426 {
 427         return ar->tx_pending[ath6kl_wmi_get_control_ep(ar->wmi)] == 0;
 428 }
 429
 430 static void ath6kl_cfg80211_sta_bmiss_enhance(struct ath6kl_vif *vif,
 431                                               bool enable)
 432 {
 433         int err;
 434
 435         if (WARN_ON(!test_bit(WMI_READY, &vif->ar->flag)))
 436                 return;
 437
 438         if (vif->nw_type != INFRA_NETWORK)
 439                 return;
 440
 441         if (!test_bit(ATH6KL_FW_CAPABILITY_BMISS_ENHANCE,
 442                       vif->ar->fw_capabilities))
 443                 return;
 444
 445         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s fw bmiss enhance\n",
 446                    enable ? "enable" : "disable");
 447
 448         err = ath6kl_wmi_sta_bmiss_enhance_cmd(vif->ar->wmi,
 449                                                vif->fw_vif_idx, enable);
 450         if (err)
 451                 ath6kl_err("failed to %s enhanced bmiss detection: %d\n",
 452                            enable ? "enable" : "disable", err);
 453 }
 454
 455 static int ath6kl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
 456                                    struct cfg80211_connect_params *sme)
 457 {
 458         struct ath6kl *ar = ath6kl_priv(dev);
 459         struct ath6kl_vif *vif = netdev_priv(dev);
 460         int status;
 461         u8 nw_subtype = (ar->p2p) ? SUBTYPE_P2PDEV : SUBTYPE_NONE;
 462         u16 interval;
 463
 464         ath6kl_cfg80211_sscan_disable(vif);
 465
 466         vif->sme_state = SME_CONNECTING;
 467
 468         if (!ath6kl_cfg80211_ready(vif))
 469                 return -EIO;
 470
 471         if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
 472                 ath6kl_err("destroy in progress\n");
 473                 return -EBUSY;
 474         }
 475
 476         if (test_bit(SKIP_SCAN, &ar->flag) &&
 477             ((sme->channel && sme->channel->center_freq == 0) ||
 478              (sme->bssid && is_zero_ether_addr(sme->bssid)))) {
 479                 ath6kl_err("SkipScan: channel or bssid invalid\n");
 480                 return -EINVAL;
 481         }
 482
 483         if (down_interruptible(&ar->sem)) {
 484                 ath6kl_err("busy, couldn't get access\n");
 485                 return -ERESTARTSYS;
 486         }
 487
 488         if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
 489                 ath6kl_err("busy, destroy in progress\n");
 490                 up(&ar->sem);
 491                 return -EBUSY;
 492         }
 493
 494         if (ar->tx_pending[ath6kl_wmi_get_control_ep(ar->wmi)]) {
 495                 /*
 496                  * sleep until the command queue drains
 497                  */
 498                 wait_event_interruptible_timeout(ar->event_wq,
 499                                                  ath6kl_is_tx_pending(ar),
 500                                                  WMI_TIMEOUT);
 501                 if (signal_pending(current)) {
 502                         ath6kl_err("cmd queue drain timeout\n");
 503                         up(&ar->sem);
 504                         return -EINTR;
 505                 }
 506         }
 507
 508         status = ath6kl_set_assoc_req_ies(vif, sme->ie, sme->ie_len);
 509         if (status) {
 510                 up(&ar->sem);
 511                 return status;
 512         }
 513
 514         if (sme->ie == NULL || sme->ie_len == 0)
 515                 ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
 516
 517         if (test_bit(CONNECTED, &vif->flags) &&
 518             vif->ssid_len == sme->ssid_len &&
 519             !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
 520                 vif->reconnect_flag = true;
 521                 status = ath6kl_wmi_reconnect_cmd(ar->wmi, vif->fw_vif_idx,
 522                                                   vif->req_bssid,
 523                                                   vif->ch_hint);
 524
 525                 up(&ar->sem);
 526                 if (status) {
 527                         ath6kl_err("wmi_reconnect_cmd failed\n");
 528                         return -EIO;
 529                 }
 530                 return 0;
 531         } else if (vif->ssid_len == sme->ssid_len &&
 532                    !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
 533                 ath6kl_disconnect(vif);
 534         }
 535
 536         memset(vif->ssid, 0, sizeof(vif->ssid));
 537         vif->ssid_len = sme->ssid_len;
 538         memcpy(vif->ssid, sme->ssid, sme->ssid_len);
 539
 540         if (sme->channel)
 541                 vif->ch_hint = sme->channel->center_freq;
 542
 543         memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
 544         if (sme->bssid && !is_broadcast_ether_addr(sme->bssid))
 545                 memcpy(vif->req_bssid, sme->bssid, sizeof(vif->req_bssid));
 546
 547         ath6kl_set_wpa_version(vif, sme->crypto.wpa_versions);
 548
 549         status = ath6kl_set_auth_type(vif, sme->auth_type);
 550         if (status) {
 551                 up(&ar->sem);
 552                 return status;
 553         }
 554
 555         if (sme->crypto.n_ciphers_pairwise)
 556                 ath6kl_set_cipher(vif, sme->crypto.ciphers_pairwise[0], true);
 557         else
 558                 ath6kl_set_cipher(vif, 0, true);
 559
 560         ath6kl_set_cipher(vif, sme->crypto.cipher_group, false);
 561
 562         if (sme->crypto.n_akm_suites)
 563                 ath6kl_set_key_mgmt(vif, sme->crypto.akm_suites[0]);
 564
 565         if ((sme->key_len) &&
 566             (vif->auth_mode == NONE_AUTH) &&
 567             (vif->prwise_crypto == WEP_CRYPT)) {
 568                 struct ath6kl_key *key = NULL;
 569
 570                 if (sme->key_idx > WMI_MAX_KEY_INDEX) {
 571                         ath6kl_err("key index %d out of bounds\n",
 572                                    sme->key_idx);
 573                         up(&ar->sem);
 574                         return -ENOENT;
 575                 }
 576
 577                 key = &vif->keys[sme->key_idx];
 578                 key->key_len = sme->key_len;
 579                 memcpy(key->key, sme->key, key->key_len);
 580                 key->cipher = vif->prwise_crypto;
 581                 vif->def_txkey_index = sme->key_idx;
 582
 583                 ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, sme->key_idx,
 584                                       vif->prwise_crypto,
 585                                       GROUP_USAGE | TX_USAGE,
 586                                       key->key_len,
 587                                       NULL, 0,
 588                                       key->key, KEY_OP_INIT_VAL, NULL,
 589                                       NO_SYNC_WMIFLAG);
 590         }
 591
 592         if (!ar->usr_bss_filter) {
 593                 clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
 594                 if (ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
 595                                              ALL_BSS_FILTER, 0) != 0) {
 596                         ath6kl_err("couldn't set bss filtering\n");
 597                         up(&ar->sem);
 598                         return -EIO;
 599                 }
 600         }
 601
 602         vif->nw_type = vif->next_mode;
 603
 604         /* enable enhanced bmiss detection if applicable */
 605         ath6kl_cfg80211_sta_bmiss_enhance(vif, true);
 606
 607         if (vif->wdev.iftype == NL80211_IFTYPE_P2P_CLIENT)
 608                 nw_subtype = SUBTYPE_P2PCLIENT;
 609
 610         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
 611                    "%s: connect called with authmode %d dot11 auth %d"
 612                    " PW crypto %d PW crypto len %d GRP crypto %d"
 613                    " GRP crypto len %d channel hint %u\n",
 614                    __func__,
 615                    vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
 616                    vif->prwise_crypto_len, vif->grp_crypto,
 617                    vif->grp_crypto_len, vif->ch_hint);
 618
 619         vif->reconnect_flag = 0;
 620
 621         if (vif->nw_type == INFRA_NETWORK) {
 622                 interval = max_t(u16, vif->listen_intvl_t,
 623                                  ATH6KL_MAX_WOW_LISTEN_INTL);
 624                 status = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
 625                                                        interval,
 626                                                        0);
 627                 if (status) {
 628                         ath6kl_err("couldn't set listen intervel\n");
 629                         up(&ar->sem);
 630                         return status;
 631                 }
 632         }
 633
 634         status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
 635                                         vif->dot11_auth_mode, vif->auth_mode,
 636                                         vif->prwise_crypto,
 637                                         vif->prwise_crypto_len,
 638                                         vif->grp_crypto, vif->grp_crypto_len,
 639                                         vif->ssid_len, vif->ssid,
 640                                         vif->req_bssid, vif->ch_hint,
 641                                         ar->connect_ctrl_flags, nw_subtype);
 642
 643         if (sme->bg_scan_period == 0) {
 644                 /* disable background scan if period is 0 */
 645                 sme->bg_scan_period = 0xffff;
 646         } else if (sme->bg_scan_period == -1) {
 647                 /* configure default value if not specified */
 648                 sme->bg_scan_period = DEFAULT_BG_SCAN_PERIOD;
 649         }
 650
 651         ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx, 0, 0,
 652                                   sme->bg_scan_period, 0, 0, 0, 3, 0, 0, 0);
 653
 654         up(&ar->sem);
 655
 656         if (status == -EINVAL) {
 657                 memset(vif->ssid, 0, sizeof(vif->ssid));
 658                 vif->ssid_len = 0;
 659                 ath6kl_err("invalid request\n");
 660                 return -ENOENT;
 661         } else if (status) {
 662                 ath6kl_err("ath6kl_wmi_connect_cmd failed\n");
 663                 return -EIO;
 664         }
 665
 666         if ((!(ar->connect_ctrl_flags & CONNECT_DO_WPA_OFFLOAD)) &&
 667             ((vif->auth_mode == WPA_PSK_AUTH) ||
 668              (vif->auth_mode == WPA2_PSK_AUTH))) {
 669                 mod_timer(&vif->disconnect_timer,
 670                           jiffies + msecs_to_jiffies(DISCON_TIMER_INTVAL));
 671         }
 672
 673         ar->connect_ctrl_flags &= ~CONNECT_DO_WPA_OFFLOAD;
 674         set_bit(CONNECT_PEND, &vif->flags);
 675
 676         return 0;
 677 }
 678
 679 static struct cfg80211_bss *
 680 ath6kl_add_bss_if_needed(struct ath6kl_vif *vif,
 681                          enum network_type nw_type,
 682                          const u8 *bssid,
 683                          struct ieee80211_channel *chan,
 684                          const u8 *beacon_ie,
 685                          size_t beacon_ie_len)
 686 {
 687         struct ath6kl *ar = vif->ar;
 688         struct cfg80211_bss *bss;
 689         u16 cap_mask, cap_val;
 690         u8 *ie;
 691
 692         if (nw_type & ADHOC_NETWORK) {
 693                 cap_mask = WLAN_CAPABILITY_IBSS;
 694                 cap_val = WLAN_CAPABILITY_IBSS;
 695         } else {
 696                 cap_mask = WLAN_CAPABILITY_ESS;
 697                 cap_val = WLAN_CAPABILITY_ESS;
 698         }
 699
 700         bss = cfg80211_get_bss(ar->wiphy, chan, bssid,
 701                                vif->ssid, vif->ssid_len,
 702                                cap_mask, cap_val);
 703         if (bss == NULL) {
 704                 /*
 705                  * Since cfg80211 may not yet know about the BSS,
 706                  * generate a partial entry until the first BSS info
 707                  * event becomes available.
 708                  *
 709                  * Prepend SSID element since it is not included in the Beacon
 710                  * IEs from the target.
 711                  */
 712                 ie = kmalloc(2 + vif->ssid_len + beacon_ie_len, GFP_KERNEL);
 713                 if (ie == NULL)
 714                         return NULL;
 715                 ie[0] = WLAN_EID_SSID;
 716                 ie[1] = vif->ssid_len;
 717                 memcpy(ie + 2, vif->ssid, vif->ssid_len);
 718                 memcpy(ie + 2 + vif->ssid_len, beacon_ie, beacon_ie_len);
 719                 bss = cfg80211_inform_bss(ar->wiphy, chan,
 720                                           CFG80211_BSS_FTYPE_UNKNOWN,
 721                                           bssid, 0, cap_val, 100,
 722                                           ie, 2 + vif->ssid_len + beacon_ie_len,
 723                                           0, GFP_KERNEL);
 724                 if (bss)
 725                         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
 726                                    "added bss %pM to cfg80211\n", bssid);
 727                 kfree(ie);
 728         } else {
 729                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "cfg80211 already has a bss\n");
 730         }
 731
 732         return bss;
 733 }
 734
 735 void ath6kl_cfg80211_connect_event(struct ath6kl_vif *vif, u16 channel,
 736                                    u8 *bssid, u16 listen_intvl,
 737                                    u16 beacon_intvl,
 738                                    enum network_type nw_type,
 739                                    u8 beacon_ie_len, u8 assoc_req_len,
 740                                    u8 assoc_resp_len, u8 *assoc_info)
 741 {
 742         struct ieee80211_channel *chan;
 743         struct ath6kl *ar = vif->ar;
 744         struct cfg80211_bss *bss;
 745
 746         /* capinfo + listen interval */
 747         u8 assoc_req_ie_offset = sizeof(u16) + sizeof(u16);
 748
 749         /* capinfo + status code +  associd */
 750         u8 assoc_resp_ie_offset = sizeof(u16) + sizeof(u16) + sizeof(u16);
 751
 752         u8 *assoc_req_ie = assoc_info + beacon_ie_len + assoc_req_ie_offset;
 753         u8 *assoc_resp_ie = assoc_info + beacon_ie_len + assoc_req_len +
 754             assoc_resp_ie_offset;
 755
 756         assoc_req_len -= assoc_req_ie_offset;
 757         assoc_resp_len -= assoc_resp_ie_offset;
 758
 759         /*
 760          * Store Beacon interval here; DTIM period will be available only once
 761          * a Beacon frame from the AP is seen.
 762          */
 763         vif->assoc_bss_beacon_int = beacon_intvl;
 764         clear_bit(DTIM_PERIOD_AVAIL, &vif->flags);
 765
 766         if (nw_type & ADHOC_NETWORK) {
 767                 if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC) {
 768                         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
 769                                    "%s: ath6k not in ibss mode\n", __func__);
 770                         return;
 771                 }
 772         }
 773
 774         if (nw_type & INFRA_NETWORK) {
 775                 if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
 776                     vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
 777                         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
 778                                    "%s: ath6k not in station mode\n", __func__);
 779                         return;
 780                 }
 781         }
 782
 783         chan = ieee80211_get_channel(ar->wiphy, (int) channel);
 784
 785         bss = ath6kl_add_bss_if_needed(vif, nw_type, bssid, chan,
 786                                        assoc_info, beacon_ie_len);
 787         if (!bss) {
 788                 ath6kl_err("could not add cfg80211 bss entry\n");
 789                 return;
 790         }
 791
 792         if (nw_type & ADHOC_NETWORK) {
 793                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "ad-hoc %s selected\n",
 794                            nw_type & ADHOC_CREATOR ? "creator" : "joiner");
 795                 cfg80211_ibss_joined(vif->ndev, bssid, chan, GFP_KERNEL);
 796                 cfg80211_put_bss(ar->wiphy, bss);
 797                 return;
 798         }
 799
 800         if (vif->sme_state == SME_CONNECTING) {
 801                 /* inform connect result to cfg80211 */
 802                 vif->sme_state = SME_CONNECTED;
 803                 cfg80211_connect_result(vif->ndev, bssid,
 804                                         assoc_req_ie, assoc_req_len,
 805                                         assoc_resp_ie, assoc_resp_len,
 806                                         WLAN_STATUS_SUCCESS, GFP_KERNEL);
 807                 cfg80211_put_bss(ar->wiphy, bss);
 808         } else if (vif->sme_state == SME_CONNECTED) {
 809                 /* inform roam event to cfg80211 */
 810                 cfg80211_roamed_bss(vif->ndev, bss, assoc_req_ie, assoc_req_len,
 811                                     assoc_resp_ie, assoc_resp_len, GFP_KERNEL);
 812         }
 813 }
 814
 815 static int ath6kl_cfg80211_disconnect(struct wiphy *wiphy,
 816                                       struct net_device *dev, u16 reason_code)
 817 {
 818         struct ath6kl *ar = ath6kl_priv(dev);
 819         struct ath6kl_vif *vif = netdev_priv(dev);
 820
 821         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: reason=%u\n", __func__,
 822                    reason_code);
 823
 824         ath6kl_cfg80211_sscan_disable(vif);
 825
 826         if (!ath6kl_cfg80211_ready(vif))
 827                 return -EIO;
 828
 829         if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
 830                 ath6kl_err("busy, destroy in progress\n");
 831                 return -EBUSY;
 832         }
 833
 834         if (down_interruptible(&ar->sem)) {
 835                 ath6kl_err("busy, couldn't get access\n");
 836                 return -ERESTARTSYS;
 837         }
 838
 839         vif->reconnect_flag = 0;
 840         ath6kl_disconnect(vif);
 841         memset(vif->ssid, 0, sizeof(vif->ssid));
 842         vif->ssid_len = 0;
 843
 844         if (!test_bit(SKIP_SCAN, &ar->flag))
 845                 memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
 846
 847         up(&ar->sem);
 848
 849         vif->sme_state = SME_DISCONNECTED;
 850
 851         return 0;
 852 }
 853
 854 void ath6kl_cfg80211_disconnect_event(struct ath6kl_vif *vif, u8 reason,
 855                                       u8 *bssid, u8 assoc_resp_len,
 856                                       u8 *assoc_info, u16 proto_reason)
 857 {
 858         struct ath6kl *ar = vif->ar;
 859
 860         if (vif->scan_req) {
 861                 cfg80211_scan_done(vif->scan_req, true);
 862                 vif->scan_req = NULL;
 863         }
 864
 865         if (vif->nw_type & ADHOC_NETWORK) {
 866                 if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC)
 867                         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
 868                                    "%s: ath6k not in ibss mode\n", __func__);
 869                 return;
 870         }
 871
 872         if (vif->nw_type & INFRA_NETWORK) {
 873                 if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
 874                     vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
 875                         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
 876                                    "%s: ath6k not in station mode\n", __func__);
 877                         return;
 878                 }
 879         }
 880
 881         clear_bit(CONNECT_PEND, &vif->flags);
 882
 883         if (vif->sme_state == SME_CONNECTING) {
 884                 cfg80211_connect_result(vif->ndev,
 885                                         bssid, NULL, 0,
 886                                         NULL, 0,
 887                                         WLAN_STATUS_UNSPECIFIED_FAILURE,
 888                                         GFP_KERNEL);
 889         } else if (vif->sme_state == SME_CONNECTED) {
 890                 cfg80211_disconnected(vif->ndev, proto_reason,
 891                                       NULL, 0, GFP_KERNEL);
 892         }
 893
 894         vif->sme_state = SME_DISCONNECTED;
 895
 896         /*
 897          * Send a disconnect command to target when a disconnect event is
 898          * received with reason code other than 3 (DISCONNECT_CMD - disconnect
 899          * request from host) to make the firmware stop trying to connect even
 900          * after giving disconnect event. There will be one more disconnect
 901          * event for this disconnect command with reason code DISCONNECT_CMD
 902          * which won't be notified to cfg80211.
 903          */
 904         if (reason != DISCONNECT_CMD)
 905                 ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
 906 }
 907
 908 static int ath6kl_set_probed_ssids(struct ath6kl *ar,
 909                                    struct ath6kl_vif *vif,
 910                                    struct cfg80211_ssid *ssids, int n_ssids,
 911                                    struct cfg80211_match_set *match_set,
 912                                    int n_match_ssid)
 913 {
 914         u8 i, j, index_to_add, ssid_found = false;
 915         struct ath6kl_cfg80211_match_probe_ssid ssid_list[MAX_PROBED_SSIDS];
 916
 917         memset(ssid_list, 0, sizeof(ssid_list));
 918
 919         if (n_ssids > MAX_PROBED_SSIDS ||
 920             n_match_ssid > MAX_PROBED_SSIDS)
 921                 return -EINVAL;
 922
 923         for (i = 0; i < n_ssids; i++) {
 924                 memcpy(ssid_list[i].ssid.ssid,
 925                        ssids[i].ssid,
 926                        ssids[i].ssid_len);
 927                 ssid_list[i].ssid.ssid_len = ssids[i].ssid_len;
 928
 929                 if (ssids[i].ssid_len)
 930                         ssid_list[i].flag = SPECIFIC_SSID_FLAG;
 931                 else
 932                         ssid_list[i].flag = ANY_SSID_FLAG;
 933
 934                 if (n_match_ssid == 0)
 935                         ssid_list[i].flag |= MATCH_SSID_FLAG;
 936         }
 937
 938         index_to_add = i;
 939
 940         for (i = 0; i < n_match_ssid; i++) {
 941                 ssid_found = false;
 942
 943                 for (j = 0; j < n_ssids; j++) {
 944                         if ((match_set[i].ssid.ssid_len ==
 945                              ssid_list[j].ssid.ssid_len) &&
 946                             (!memcmp(ssid_list[j].ssid.ssid,
 947                                      match_set[i].ssid.ssid,
 948                                      match_set[i].ssid.ssid_len))) {
 949                                 ssid_list[j].flag |= MATCH_SSID_FLAG;
 950                                 ssid_found = true;
 951                                 break;
 952                         }
 953                 }
 954
 955                 if (ssid_found)
 956                         continue;
 957
 958                 if (index_to_add >= MAX_PROBED_SSIDS)
 959                         continue;
 960
 961                 ssid_list[index_to_add].ssid.ssid_len =
 962                         match_set[i].ssid.ssid_len;
 963                 memcpy(ssid_list[index_to_add].ssid.ssid,
 964                        match_set[i].ssid.ssid,
 965                        match_set[i].ssid.ssid_len);
 966                 ssid_list[index_to_add].flag |= MATCH_SSID_FLAG;
 967                 index_to_add++;
 968         }
 969
 970         for (i = 0; i < index_to_add; i++) {
 971                 ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx, i,
 972                                           ssid_list[i].flag,
 973                                           ssid_list[i].ssid.ssid_len,
 974                                           ssid_list[i].ssid.ssid);
 975         }
 976
 977         /* Make sure no old entries are left behind */
 978         for (i = index_to_add; i < MAX_PROBED_SSIDS; i++) {
 979                 ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx, i,
 980                                           DISABLE_SSID_FLAG, 0, NULL);
 981         }
 982
 983         return 0;
 984 }
 985
 986 static int ath6kl_cfg80211_scan(struct wiphy *wiphy,
 987                                 struct cfg80211_scan_request *request)
 988 {
 989         struct ath6kl_vif *vif = ath6kl_vif_from_wdev(request->wdev);
 990         struct ath6kl *ar = ath6kl_priv(vif->ndev);
 991         s8 n_channels = 0;
 992         u16 *channels = NULL;
 993         int ret = 0;
 994         u32 force_fg_scan = 0;
 995
 996         if (!ath6kl_cfg80211_ready(vif))
 997                 return -EIO;
 998
 999         ath6kl_cfg80211_sscan_disable(vif);
1000
1001         if (!ar->usr_bss_filter) {
1002                 clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
1003                 ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
1004                                                ALL_BSS_FILTER, 0);
1005                 if (ret) {
1006                         ath6kl_err("couldn't set bss filtering\n");
1007                         return ret;
1008                 }
1009         }
1010
1011         ret = ath6kl_set_probed_ssids(ar, vif, request->ssids,
1012                                       request->n_ssids, NULL, 0);
1013         if (ret < 0)
1014                 return ret;
1015
1016         /* this also clears IE in fw if it's not set */
1017         ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
1018                                        WMI_FRAME_PROBE_REQ,
1019                                        request->ie, request->ie_len);
1020         if (ret) {
1021                 ath6kl_err("failed to set Probe Request appie for scan\n");
1022                 return ret;
1023         }
1024
1025         /*
1026          * Scan only the requested channels if the request specifies a set of
1027          * channels. If the list is longer than the target supports, do not
1028          * configure the list and instead, scan all available channels.
1029          */
1030         if (request->n_channels > 0 &&
1031             request->n_channels <= WMI_MAX_CHANNELS) {
1032                 u8 i;
1033
1034                 n_channels = request->n_channels;
1035
1036                 channels = kzalloc(n_channels * sizeof(u16), GFP_KERNEL);
1037                 if (channels == NULL) {
1038                         ath6kl_warn("failed to set scan channels, scan all channels");
1039                         n_channels = 0;
1040                 }
1041
1042                 for (i = 0; i < n_channels; i++)
1043                         channels[i] = request->channels[i]->center_freq;
1044         }
1045
1046         if (test_bit(CONNECTED, &vif->flags))
1047                 force_fg_scan = 1;
1048
1049         vif->scan_req = request;
1050
1051         ret = ath6kl_wmi_beginscan_cmd(ar->wmi, vif->fw_vif_idx,
1052                                        WMI_LONG_SCAN, force_fg_scan,
1053                                        false, 0,
1054                                        ATH6KL_FG_SCAN_INTERVAL,
1055                                        n_channels, channels,
1056                                        request->no_cck,
1057                                        request->rates);
1058         if (ret) {
1059                 ath6kl_err("failed to start scan: %d\n", ret);
1060                 vif->scan_req = NULL;
1061         }
1062
1063         kfree(channels);
1064
1065         return ret;
1066 }
1067
1068 void ath6kl_cfg80211_scan_complete_event(struct ath6kl_vif *vif, bool aborted)
1069 {
1070         struct ath6kl *ar = vif->ar;
1071         int i;
1072
1073         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: status%s\n", __func__,
1074                    aborted ? " aborted" : "");
1075
1076         if (!vif->scan_req)
1077                 return;
1078
1079         if (aborted)
1080                 goto out;
1081
1082         if (vif->scan_req->n_ssids && vif->scan_req->ssids[0].ssid_len) {
1083                 for (i = 0; i < vif->scan_req->n_ssids; i++) {
1084                         ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx,
1085                                                   i + 1, DISABLE_SSID_FLAG,
1086                                                   0, NULL);
1087                 }
1088         }
1089
1090 out:
1091         cfg80211_scan_done(vif->scan_req, aborted);
1092         vif->scan_req = NULL;
1093 }
1094
1095 void ath6kl_cfg80211_ch_switch_notify(struct ath6kl_vif *vif, int freq,
1096                                       enum wmi_phy_mode mode)
1097 {
1098         struct cfg80211_chan_def chandef;
1099
1100         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1101                    "channel switch notify nw_type %d freq %d mode %d\n",
1102                    vif->nw_type, freq, mode);
1103
1104         cfg80211_chandef_create(&chandef,
1105                                 ieee80211_get_channel(vif->ar->wiphy, freq),
1106                                 (mode == WMI_11G_HT20) ?
1107                                         NL80211_CHAN_HT20 : NL80211_CHAN_NO_HT);
1108
1109         mutex_lock(&vif->wdev.mtx);
1110         cfg80211_ch_switch_notify(vif->ndev, &chandef);
1111         mutex_unlock(&vif->wdev.mtx);
1112 }
1113
1114 static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
1115                                    u8 key_index, bool pairwise,
1116                                    const u8 *mac_addr,
1117                                    struct key_params *params)
1118 {
1119         struct ath6kl *ar = ath6kl_priv(ndev);
1120         struct ath6kl_vif *vif = netdev_priv(ndev);
1121         struct ath6kl_key *key = NULL;
1122         int seq_len;
1123         u8 key_usage;
1124         u8 key_type;
1125
1126         if (!ath6kl_cfg80211_ready(vif))
1127                 return -EIO;
1128
1129         if (params->cipher == CCKM_KRK_CIPHER_SUITE) {
1130                 if (params->key_len != WMI_KRK_LEN)
1131                         return -EINVAL;
1132                 return ath6kl_wmi_add_krk_cmd(ar->wmi, vif->fw_vif_idx,
1133                                               params->key);
1134         }
1135
1136         if (key_index > WMI_MAX_KEY_INDEX) {
1137                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1138                            "%s: key index %d out of bounds\n", __func__,
1139                            key_index);
1140                 return -ENOENT;
1141         }
1142
1143         key = &vif->keys[key_index];
1144         memset(key, 0, sizeof(struct ath6kl_key));
1145
1146         if (pairwise)
1147                 key_usage = PAIRWISE_USAGE;
1148         else
1149                 key_usage = GROUP_USAGE;
1150
1151         seq_len = params->seq_len;
1152         if (params->cipher == WLAN_CIPHER_SUITE_SMS4 &&
1153             seq_len > ATH6KL_KEY_SEQ_LEN) {
1154                 /* Only first half of the WPI PN is configured */
1155                 seq_len = ATH6KL_KEY_SEQ_LEN;
1156         }
1157         if (params->key_len > WLAN_MAX_KEY_LEN ||
1158             seq_len > sizeof(key->seq))
1159                 return -EINVAL;
1160
1161         key->key_len = params->key_len;
1162         memcpy(key->key, params->key, key->key_len);
1163         key->seq_len = seq_len;
1164         memcpy(key->seq, params->seq, key->seq_len);
1165         key->cipher = params->cipher;
1166
1167         switch (key->cipher) {
1168         case WLAN_CIPHER_SUITE_WEP40:
1169         case WLAN_CIPHER_SUITE_WEP104:
1170                 key_type = WEP_CRYPT;
1171                 break;
1172
1173         case WLAN_CIPHER_SUITE_TKIP:
1174                 key_type = TKIP_CRYPT;
1175                 break;
1176
1177         case WLAN_CIPHER_SUITE_CCMP:
1178                 key_type = AES_CRYPT;
1179                 break;
1180         case WLAN_CIPHER_SUITE_SMS4:
1181                 key_type = WAPI_CRYPT;
1182                 break;
1183
1184         default:
1185                 return -ENOTSUPP;
1186         }
1187
1188         if (((vif->auth_mode == WPA_PSK_AUTH) ||
1189              (vif->auth_mode == WPA2_PSK_AUTH)) &&
1190             (key_usage & GROUP_USAGE))
1191                 del_timer(&vif->disconnect_timer);
1192
1193         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1194                    "%s: index %d, key_len %d, key_type 0x%x, key_usage 0x%x, seq_len %d\n",
1195                    __func__, key_index, key->key_len, key_type,
1196                    key_usage, key->seq_len);
1197
1198         if (vif->nw_type == AP_NETWORK && !pairwise &&
1199             (key_type == TKIP_CRYPT || key_type == AES_CRYPT ||
1200              key_type == WAPI_CRYPT)) {
1201                 ar->ap_mode_bkey.valid = true;
1202                 ar->ap_mode_bkey.key_index = key_index;
1203                 ar->ap_mode_bkey.key_type = key_type;
1204                 ar->ap_mode_bkey.key_len = key->key_len;
1205                 memcpy(ar->ap_mode_bkey.key, key->key, key->key_len);
1206                 if (!test_bit(CONNECTED, &vif->flags)) {
1207                         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1208                                    "Delay initial group key configuration until AP mode has been started\n");
1209                         /*
1210                          * The key will be set in ath6kl_connect_ap_mode() once
1211                          * the connected event is received from the target.
1212                          */
1213                         return 0;
1214                 }
1215         }
1216
1217         if (vif->next_mode == AP_NETWORK && key_type == WEP_CRYPT &&
1218             !test_bit(CONNECTED, &vif->flags)) {
1219                 /*
1220                  * Store the key locally so that it can be re-configured after
1221                  * the AP mode has properly started
1222                  * (ath6kl_install_statioc_wep_keys).
1223                  */
1224                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1225                            "Delay WEP key configuration until AP mode has been started\n");
1226                 vif->wep_key_list[key_index].key_len = key->key_len;
1227                 memcpy(vif->wep_key_list[key_index].key, key->key,
1228                        key->key_len);
1229                 return 0;
1230         }
1231
1232         return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, key_index,
1233                                      key_type, key_usage, key->key_len,
1234                                      key->seq, key->seq_len, key->key,
1235                                      KEY_OP_INIT_VAL,
1236                                      (u8 *) mac_addr, SYNC_BOTH_WMIFLAG);
1237 }
1238
1239 static int ath6kl_cfg80211_del_key(struct wiphy *wiphy, struct net_device *ndev,
1240                                    u8 key_index, bool pairwise,
1241                                    const u8 *mac_addr)
1242 {
1243         struct ath6kl *ar = ath6kl_priv(ndev);
1244         struct ath6kl_vif *vif = netdev_priv(ndev);
1245
1246         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1247
1248         if (!ath6kl_cfg80211_ready(vif))
1249                 return -EIO;
1250
1251         if (key_index > WMI_MAX_KEY_INDEX) {
1252                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1253                            "%s: key index %d out of bounds\n", __func__,
1254                            key_index);
1255                 return -ENOENT;
1256         }
1257
1258         if (!vif->keys[key_index].key_len) {
1259                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1260                            "%s: index %d is empty\n", __func__, key_index);
1261                 return 0;
1262         }
1263
1264         vif->keys[key_index].key_len = 0;
1265
1266         return ath6kl_wmi_deletekey_cmd(ar->wmi, vif->fw_vif_idx, key_index);
1267 }
1268
1269 static int ath6kl_cfg80211_get_key(struct wiphy *wiphy, struct net_device *ndev,
1270                                    u8 key_index, bool pairwise,
1271                                    const u8 *mac_addr, void *cookie,
1272                                    void (*callback) (void *cookie,
1273                                                      struct key_params *))
1274 {
1275         struct ath6kl_vif *vif = netdev_priv(ndev);
1276         struct ath6kl_key *key = NULL;
1277         struct key_params params;
1278
1279         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1280
1281         if (!ath6kl_cfg80211_ready(vif))
1282                 return -EIO;
1283
1284         if (key_index > WMI_MAX_KEY_INDEX) {
1285                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1286                            "%s: key index %d out of bounds\n", __func__,
1287                            key_index);
1288                 return -ENOENT;
1289         }
1290
1291         key = &vif->keys[key_index];
1292         memset(&params, 0, sizeof(params));
1293         params.cipher = key->cipher;
1294         params.key_len = key->key_len;
1295         params.seq_len = key->seq_len;
1296         params.seq = key->seq;
1297         params.key = key->key;
1298
1299         callback(cookie, &params);
1300
1301         return key->key_len ? 0 : -ENOENT;
1302 }
1303
1304 static int ath6kl_cfg80211_set_default_key(struct wiphy *wiphy,
1305                                            struct net_device *ndev,
1306                                            u8 key_index, bool unicast,
1307                                            bool multicast)
1308 {
1309         struct ath6kl *ar = ath6kl_priv(ndev);
1310         struct ath6kl_vif *vif = netdev_priv(ndev);
1311         struct ath6kl_key *key = NULL;
1312         u8 key_usage;
1313         enum crypto_type key_type = NONE_CRYPT;
1314
1315         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1316
1317         if (!ath6kl_cfg80211_ready(vif))
1318                 return -EIO;
1319
1320         if (key_index > WMI_MAX_KEY_INDEX) {
1321                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1322                            "%s: key index %d out of bounds\n",
1323                            __func__, key_index);
1324                 return -ENOENT;
1325         }
1326
1327         if (!vif->keys[key_index].key_len) {
1328                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: invalid key index %d\n",
1329                            __func__, key_index);
1330                 return -EINVAL;
1331         }
1332
1333         vif->def_txkey_index = key_index;
1334         key = &vif->keys[vif->def_txkey_index];
1335         key_usage = GROUP_USAGE;
1336         if (vif->prwise_crypto == WEP_CRYPT)
1337                 key_usage |= TX_USAGE;
1338         if (unicast)
1339                 key_type = vif->prwise_crypto;
1340         if (multicast)
1341                 key_type = vif->grp_crypto;
1342
1343         if (vif->next_mode == AP_NETWORK && !test_bit(CONNECTED, &vif->flags))
1344                 return 0; /* Delay until AP mode has been started */
1345
1346         return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx,
1347                                      vif->def_txkey_index,
1348                                      key_type, key_usage,
1349                                      key->key_len, key->seq, key->seq_len,
1350                                      key->key,
1351                                      KEY_OP_INIT_VAL, NULL,
1352                                      SYNC_BOTH_WMIFLAG);
1353 }
1354
1355 void ath6kl_cfg80211_tkip_micerr_event(struct ath6kl_vif *vif, u8 keyid,
1356                                        bool ismcast)
1357 {
1358         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1359                    "%s: keyid %d, ismcast %d\n", __func__, keyid, ismcast);
1360
1361         cfg80211_michael_mic_failure(vif->ndev, vif->bssid,
1362                                      (ismcast ? NL80211_KEYTYPE_GROUP :
1363                                       NL80211_KEYTYPE_PAIRWISE), keyid, NULL,
1364                                      GFP_KERNEL);
1365 }
1366
1367 static int ath6kl_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
1368 {
1369         struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1370         struct ath6kl_vif *vif;
1371         int ret;
1372
1373         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: changed 0x%x\n", __func__,
1374                    changed);
1375
1376         vif = ath6kl_vif_first(ar);
1377         if (!vif)
1378                 return -EIO;
1379
1380         if (!ath6kl_cfg80211_ready(vif))
1381                 return -EIO;
1382
1383         if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
1384                 ret = ath6kl_wmi_set_rts_cmd(ar->wmi, wiphy->rts_threshold);
1385                 if (ret != 0) {
1386                         ath6kl_err("ath6kl_wmi_set_rts_cmd failed\n");
1387                         return -EIO;
1388                 }
1389         }
1390
1391         return 0;
1392 }
1393
1394 static int ath6kl_cfg80211_set_txpower(struct wiphy *wiphy,
1395                                        struct wireless_dev *wdev,
1396                                        enum nl80211_tx_power_setting type,
1397                                        int mbm)
1398 {
1399         struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1400         struct ath6kl_vif *vif;
1401         int dbm = MBM_TO_DBM(mbm);
1402
1403         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type 0x%x, dbm %d\n", __func__,
1404                    type, dbm);
1405
1406         vif = ath6kl_vif_first(ar);
1407         if (!vif)
1408                 return -EIO;
1409
1410         if (!ath6kl_cfg80211_ready(vif))
1411                 return -EIO;
1412
1413         switch (type) {
1414         case NL80211_TX_POWER_AUTOMATIC:
1415                 return 0;
1416         case NL80211_TX_POWER_LIMITED:
1417                 ar->tx_pwr = dbm;
1418                 break;
1419         default:
1420                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type 0x%x not supported\n",
1421                            __func__, type);
1422                 return -EOPNOTSUPP;
1423         }
1424
1425         ath6kl_wmi_set_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx, dbm);
1426
1427         return 0;
1428 }
1429
1430 static int ath6kl_cfg80211_get_txpower(struct wiphy *wiphy,
1431                                        struct wireless_dev *wdev,
1432                                        int *dbm)
1433 {
1434         struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1435         struct ath6kl_vif *vif;
1436
1437         vif = ath6kl_vif_first(ar);
1438         if (!vif)
1439                 return -EIO;
1440
1441         if (!ath6kl_cfg80211_ready(vif))
1442                 return -EIO;
1443
1444         if (test_bit(CONNECTED, &vif->flags)) {
1445                 ar->tx_pwr = 0;
1446
1447                 if (ath6kl_wmi_get_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx) != 0) {
1448                         ath6kl_err("ath6kl_wmi_get_tx_pwr_cmd failed\n");
1449                         return -EIO;
1450                 }
1451
1452                 wait_event_interruptible_timeout(ar->event_wq, ar->tx_pwr != 0,
1453                                                  5 * HZ);
1454
1455                 if (signal_pending(current)) {
1456                         ath6kl_err("target did not respond\n");
1457                         return -EINTR;
1458                 }
1459         }
1460
1461         *dbm = ar->tx_pwr;
1462         return 0;
1463 }
1464
1465 static int ath6kl_cfg80211_set_power_mgmt(struct wiphy *wiphy,
1466                                           struct net_device *dev,
1467                                           bool pmgmt, int timeout)
1468 {
1469         struct ath6kl *ar = ath6kl_priv(dev);
1470         struct wmi_power_mode_cmd mode;
1471         struct ath6kl_vif *vif = netdev_priv(dev);
1472
1473         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: pmgmt %d, timeout %d\n",
1474                    __func__, pmgmt, timeout);
1475
1476         if (!ath6kl_cfg80211_ready(vif))
1477                 return -EIO;
1478
1479         if (pmgmt) {
1480                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: rec power\n", __func__);
1481                 mode.pwr_mode = REC_POWER;
1482         } else {
1483                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: max perf\n", __func__);
1484                 mode.pwr_mode = MAX_PERF_POWER;
1485         }
1486
1487         if (ath6kl_wmi_powermode_cmd(ar->wmi, vif->fw_vif_idx,
1488                                      mode.pwr_mode) != 0) {
1489                 ath6kl_err("wmi_powermode_cmd failed\n");
1490                 return -EIO;
1491         }
1492
1493         return 0;
1494 }
1495
1496 static struct wireless_dev *ath6kl_cfg80211_add_iface(struct wiphy *wiphy,
1497                                                       const char *name,
1498                                                       enum nl80211_iftype type,
1499                                                       u32 *flags,
1500                                                       struct vif_params *params)
1501 {
1502         struct ath6kl *ar = wiphy_priv(wiphy);
1503         struct wireless_dev *wdev;
1504         u8 if_idx, nw_type;
1505
1506         if (ar->num_vif == ar->vif_max) {
1507                 ath6kl_err("Reached maximum number of supported vif\n");
1508                 return ERR_PTR(-EINVAL);
1509         }
1510
1511         if (!ath6kl_is_valid_iftype(ar, type, &if_idx, &nw_type)) {
1512                 ath6kl_err("Not a supported interface type\n");
1513                 return ERR_PTR(-EINVAL);
1514         }
1515
1516         wdev = ath6kl_interface_add(ar, name, type, if_idx, nw_type);
1517         if (!wdev)
1518                 return ERR_PTR(-ENOMEM);
1519
1520         ar->num_vif++;
1521
1522         return wdev;
1523 }
1524
1525 static int ath6kl_cfg80211_del_iface(struct wiphy *wiphy,
1526                                      struct wireless_dev *wdev)
1527 {
1528         struct ath6kl *ar = wiphy_priv(wiphy);
1529         struct ath6kl_vif *vif = netdev_priv(wdev->netdev);
1530
1531         spin_lock_bh(&ar->list_lock);
1532         list_del(&vif->list);
1533         spin_unlock_bh(&ar->list_lock);
1534
1535         ath6kl_cfg80211_vif_stop(vif, test_bit(WMI_READY, &ar->flag));
1536
1537         rtnl_lock();
1538         ath6kl_cfg80211_vif_cleanup(vif);
1539         rtnl_unlock();
1540
1541         return 0;
1542 }
1543
1544 static int ath6kl_cfg80211_change_iface(struct wiphy *wiphy,
1545                                         struct net_device *ndev,
1546                                         enum nl80211_iftype type, u32 *flags,
1547                                         struct vif_params *params)
1548 {
1549         struct ath6kl_vif *vif = netdev_priv(ndev);
1550         int i;
1551
1552         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type %u\n", __func__, type);
1553
1554         /*
1555          * Don't bring up p2p on an interface which is not initialized
1556          * for p2p operation where fw does not have capability to switch
1557          * dynamically between non-p2p and p2p type interface.
1558          */
1559         if (!test_bit(ATH6KL_FW_CAPABILITY_STA_P2PDEV_DUPLEX,
1560                       vif->ar->fw_capabilities) &&
1561             (type == NL80211_IFTYPE_P2P_CLIENT ||
1562              type == NL80211_IFTYPE_P2P_GO)) {
1563                 if (vif->ar->vif_max == 1) {
1564                         if (vif->fw_vif_idx != 0)
1565                                 return -EINVAL;
1566                         else
1567                                 goto set_iface_type;
1568                 }
1569
1570                 for (i = vif->ar->max_norm_iface; i < vif->ar->vif_max; i++) {
1571                         if (i == vif->fw_vif_idx)
1572                                 break;
1573                 }
1574
1575                 if (i == vif->ar->vif_max) {
1576                         ath6kl_err("Invalid interface to bring up P2P\n");
1577                         return -EINVAL;
1578                 }
1579         }
1580
1581         /* need to clean up enhanced bmiss detection fw state */
1582         ath6kl_cfg80211_sta_bmiss_enhance(vif, false);
1583
1584 set_iface_type:
1585         switch (type) {
1586         case NL80211_IFTYPE_STATION:
1587         case NL80211_IFTYPE_P2P_CLIENT:
1588                 vif->next_mode = INFRA_NETWORK;
1589                 break;
1590         case NL80211_IFTYPE_ADHOC:
1591                 vif->next_mode = ADHOC_NETWORK;
1592                 break;
1593         case NL80211_IFTYPE_AP:
1594         case NL80211_IFTYPE_P2P_GO:
1595                 vif->next_mode = AP_NETWORK;
1596                 break;
1597         default:
1598                 ath6kl_err("invalid interface type %u\n", type);
1599                 return -EOPNOTSUPP;
1600         }
1601
1602         vif->wdev.iftype = type;
1603
1604         return 0;
1605 }
1606
1607 static int ath6kl_cfg80211_join_ibss(struct wiphy *wiphy,
1608                                      struct net_device *dev,
1609                                      struct cfg80211_ibss_params *ibss_param)
1610 {
1611         struct ath6kl *ar = ath6kl_priv(dev);
1612         struct ath6kl_vif *vif = netdev_priv(dev);
1613         int status;
1614
1615         if (!ath6kl_cfg80211_ready(vif))
1616                 return -EIO;
1617
1618         vif->ssid_len = ibss_param->ssid_len;
1619         memcpy(vif->ssid, ibss_param->ssid, vif->ssid_len);
1620
1621         if (ibss_param->chandef.chan)
1622                 vif->ch_hint = ibss_param->chandef.chan->center_freq;
1623
1624         if (ibss_param->channel_fixed) {
1625                 /*
1626                  * TODO: channel_fixed: The channel should be fixed, do not
1627                  * search for IBSSs to join on other channels. Target
1628                  * firmware does not support this feature, needs to be
1629                  * updated.
1630                  */
1631                 return -EOPNOTSUPP;
1632         }
1633
1634         memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
1635         if (ibss_param->bssid && !is_broadcast_ether_addr(ibss_param->bssid))
1636                 memcpy(vif->req_bssid, ibss_param->bssid,
1637                        sizeof(vif->req_bssid));
1638
1639         ath6kl_set_wpa_version(vif, 0);
1640
1641         status = ath6kl_set_auth_type(vif, NL80211_AUTHTYPE_OPEN_SYSTEM);
1642         if (status)
1643                 return status;
1644
1645         if (ibss_param->privacy) {
1646                 ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, true);
1647                 ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, false);
1648         } else {
1649                 ath6kl_set_cipher(vif, 0, true);
1650                 ath6kl_set_cipher(vif, 0, false);
1651         }
1652
1653         vif->nw_type = vif->next_mode;
1654
1655         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1656                    "%s: connect called with authmode %d dot11 auth %d"
1657                    " PW crypto %d PW crypto len %d GRP crypto %d"
1658                    " GRP crypto len %d channel hint %u\n",
1659                    __func__,
1660                    vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
1661                    vif->prwise_crypto_len, vif->grp_crypto,
1662                    vif->grp_crypto_len, vif->ch_hint);
1663
1664         status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
1665                                         vif->dot11_auth_mode, vif->auth_mode,
1666                                         vif->prwise_crypto,
1667                                         vif->prwise_crypto_len,
1668                                         vif->grp_crypto, vif->grp_crypto_len,
1669                                         vif->ssid_len, vif->ssid,
1670                                         vif->req_bssid, vif->ch_hint,
1671                                         ar->connect_ctrl_flags, SUBTYPE_NONE);
1672         set_bit(CONNECT_PEND, &vif->flags);
1673
1674         return 0;
1675 }
1676
1677 static int ath6kl_cfg80211_leave_ibss(struct wiphy *wiphy,
1678                                       struct net_device *dev)
1679 {
1680         struct ath6kl_vif *vif = netdev_priv(dev);
1681
1682         if (!ath6kl_cfg80211_ready(vif))
1683                 return -EIO;
1684
1685         ath6kl_disconnect(vif);
1686         memset(vif->ssid, 0, sizeof(vif->ssid));
1687         vif->ssid_len = 0;
1688
1689         return 0;
1690 }
1691
1692 static const u32 cipher_suites[] = {
1693         WLAN_CIPHER_SUITE_WEP40,
1694         WLAN_CIPHER_SUITE_WEP104,
1695         WLAN_CIPHER_SUITE_TKIP,
1696         WLAN_CIPHER_SUITE_CCMP,
1697         CCKM_KRK_CIPHER_SUITE,
1698         WLAN_CIPHER_SUITE_SMS4,
1699 };
1700
1701 static bool is_rate_legacy(s32 rate)
1702 {
1703         static const s32 legacy[] = { 1000, 2000, 5500, 11000,
1704                 6000, 9000, 12000, 18000, 24000,
1705                 36000, 48000, 54000
1706         };
1707         u8 i;
1708
1709         for (i = 0; i < ARRAY_SIZE(legacy); i++)
1710                 if (rate == legacy[i])
1711                         return true;
1712
1713         return false;
1714 }
1715
1716 static bool is_rate_ht20(s32 rate, u8 *mcs, bool *sgi)
1717 {
1718         static const s32 ht20[] = { 6500, 13000, 19500, 26000, 39000,
1719                 52000, 58500, 65000, 72200
1720         };
1721         u8 i;
1722
1723         for (i = 0; i < ARRAY_SIZE(ht20); i++) {
1724                 if (rate == ht20[i]) {
1725                         if (i == ARRAY_SIZE(ht20) - 1)
1726                                 /* last rate uses sgi */
1727                                 *sgi = true;
1728                         else
1729                                 *sgi = false;
1730
1731                         *mcs = i;
1732                         return true;
1733                 }
1734         }
1735         return false;
1736 }
1737
1738 static bool is_rate_ht40(s32 rate, u8 *mcs, bool *sgi)
1739 {
1740         static const s32 ht40[] = { 13500, 27000, 40500, 54000,
1741                 81000, 108000, 121500, 135000,
1742                 150000
1743         };
1744         u8 i;
1745
1746         for (i = 0; i < ARRAY_SIZE(ht40); i++) {
1747                 if (rate == ht40[i]) {
1748                         if (i == ARRAY_SIZE(ht40) - 1)
1749                                 /* last rate uses sgi */
1750                                 *sgi = true;
1751                         else
1752                                 *sgi = false;
1753
1754                         *mcs = i;
1755                         return true;
1756                 }
1757         }
1758
1759         return false;
1760 }
1761
1762 static int ath6kl_get_station(struct wiphy *wiphy, struct net_device *dev,
1763                               const u8 *mac, struct station_info *sinfo)
1764 {
1765         struct ath6kl *ar = ath6kl_priv(dev);
1766         struct ath6kl_vif *vif = netdev_priv(dev);
1767         long left;
1768         bool sgi;
1769         s32 rate;
1770         int ret;
1771         u8 mcs;
1772
1773         if (memcmp(mac, vif->bssid, ETH_ALEN) != 0)
1774                 return -ENOENT;
1775
1776         if (down_interruptible(&ar->sem))
1777                 return -EBUSY;
1778
1779         set_bit(STATS_UPDATE_PEND, &vif->flags);
1780
1781         ret = ath6kl_wmi_get_stats_cmd(ar->wmi, vif->fw_vif_idx);
1782
1783         if (ret != 0) {
1784                 up(&ar->sem);
1785                 return -EIO;
1786         }
1787
1788         left = wait_event_interruptible_timeout(ar->event_wq,
1789                                                 !test_bit(STATS_UPDATE_PEND,
1790                                                           &vif->flags),
1791                                                 WMI_TIMEOUT);
1792
1793         up(&ar->sem);
1794
1795         if (left == 0)
1796                 return -ETIMEDOUT;
1797         else if (left < 0)
1798                 return left;
1799
1800         if (vif->target_stats.rx_byte) {
1801                 sinfo->rx_bytes = vif->target_stats.rx_byte;
1802                 sinfo->filled |= STATION_INFO_RX_BYTES64;
1803                 sinfo->rx_packets = vif->target_stats.rx_pkt;
1804                 sinfo->filled |= STATION_INFO_RX_PACKETS;
1805         }
1806
1807         if (vif->target_stats.tx_byte) {
1808                 sinfo->tx_bytes = vif->target_stats.tx_byte;
1809                 sinfo->filled |= STATION_INFO_TX_BYTES64;
1810                 sinfo->tx_packets = vif->target_stats.tx_pkt;
1811                 sinfo->filled |= STATION_INFO_TX_PACKETS;
1812         }
1813
1814         sinfo->signal = vif->target_stats.cs_rssi;
1815         sinfo->filled |= STATION_INFO_SIGNAL;
1816
1817         rate = vif->target_stats.tx_ucast_rate;
1818
1819         if (is_rate_legacy(rate)) {
1820                 sinfo->txrate.legacy = rate / 100;
1821         } else if (is_rate_ht20(rate, &mcs, &sgi)) {
1822                 if (sgi) {
1823                         sinfo->txrate.flags |= RATE_INFO_FLAGS_SHORT_GI;
1824                         sinfo->txrate.mcs = mcs - 1;
1825                 } else {
1826                         sinfo->txrate.mcs = mcs;
1827                 }
1828
1829                 sinfo->txrate.flags |= RATE_INFO_FLAGS_MCS;
1830         } else if (is_rate_ht40(rate, &mcs, &sgi)) {
1831                 if (sgi) {
1832                         sinfo->txrate.flags |= RATE_INFO_FLAGS_SHORT_GI;
1833                         sinfo->txrate.mcs = mcs - 1;
1834                 } else {
1835                         sinfo->txrate.mcs = mcs;
1836                 }
1837
1838                 sinfo->txrate.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
1839                 sinfo->txrate.flags |= RATE_INFO_FLAGS_MCS;
1840         } else {
1841                 ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1842                            "invalid rate from stats: %d\n", rate);
1843                 ath6kl_debug_war(ar, ATH6KL_WAR_INVALID_RATE);
1844                 return 0;
1845         }
1846
1847         sinfo->filled |= STATION_INFO_TX_BITRATE;
1848
1849         if (test_bit(CONNECTED, &vif->flags) &&
1850             test_bit(DTIM_PERIOD_AVAIL, &vif->flags) &&
1851             vif->nw_type == INFRA_NETWORK) {
1852                 sinfo->filled |= STATION_INFO_BSS_PARAM;
1853                 sinfo->bss_param.flags = 0;
1854                 sinfo->bss_param.dtim_period = vif->assoc_bss_dtim_period;
1855                 sinfo->bss_param.beacon_interval = vif->assoc_bss_beacon_int;
1856         }
1857
1858         return 0;
1859 }
1860
1861 static int ath6kl_set_pmksa(struct wiphy *wiphy, struct net_device *netdev,
1862                             struct cfg80211_pmksa *pmksa)
1863 {
1864         struct ath6kl *ar = ath6kl_priv(netdev);
1865         struct ath6kl_vif *vif = netdev_priv(netdev);
1866
1867         return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
1868                                        pmksa->pmkid, true);
1869 }
1870
1871 static int ath6kl_del_pmksa(struct wiphy *wiphy, struct net_device *netdev,
1872                             struct cfg80211_pmksa *pmksa)
1873 {
1874         struct ath6kl *ar = ath6kl_priv(netdev);
1875         struct ath6kl_vif *vif = netdev_priv(netdev);
1876
1877         return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
1878                                        pmksa->pmkid, false);
1879 }
1880
1881 static int ath6kl_flush_pmksa(struct wiphy *wiphy, struct net_device *netdev)
1882 {
1883         struct ath6kl *ar = ath6kl_priv(netdev);
1884         struct ath6kl_vif *vif = netdev_priv(netdev);
1885
1886         if (test_bit(CONNECTED, &vif->flags))
1887                 return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx,
1888                                                vif->bssid, NULL, false);
1889         return 0;
1890 }
1891
1892 static int ath6kl_wow_usr(struct ath6kl *ar, struct ath6kl_vif *vif,
1893                           struct cfg80211_wowlan *wow, u32 *filter)
1894 {
1895         int ret, pos;
1896         u8 mask[WOW_PATTERN_SIZE];
1897         u16 i;
1898
1899         /* Configure the patterns that we received from the user. */
1900         for (i = 0; i < wow->n_patterns; i++) {
1901                 /*
1902                  * Convert given nl80211 specific mask value to equivalent
1903                  * driver specific mask value and send it to the chip along
1904                  * with patterns. For example, If the mask value defined in
1905                  * struct cfg80211_wowlan is 0xA (equivalent binary is 1010),
1906                  * then equivalent driver specific mask value is
1907                  * "0xFF 0x00 0xFF 0x00".
1908                  */
1909                 memset(&mask, 0, sizeof(mask));
1910                 for (pos = 0; pos < wow->patterns[i].pattern_len; pos++) {
1911                         if (wow->patterns[i].mask[pos / 8] & (0x1 << (pos % 8)))
1912                                 mask[pos] = 0xFF;
1913                 }
1914                 /*
1915                  * Note: Pattern's offset is not passed as part of wowlan
1916                  * parameter from CFG layer. So it's always passed as ZERO
1917                  * to the firmware. It means, given WOW patterns are always
1918                  * matched from the first byte of received pkt in the firmware.
1919                  */
1920                 ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1921                                 vif->fw_vif_idx, WOW_LIST_ID,
1922                                 wow->patterns[i].pattern_len,
1923                                 0 /* pattern offset */,
1924                                 wow->patterns[i].pattern, mask);
1925                 if (ret)
1926                         return ret;
1927         }
1928
1929         if (wow->disconnect)
1930                 *filter |= WOW_FILTER_OPTION_NWK_DISASSOC;
1931
1932         if (wow->magic_pkt)
1933                 *filter |= WOW_FILTER_OPTION_MAGIC_PACKET;
1934
1935         if (wow->gtk_rekey_failure)
1936                 *filter |= WOW_FILTER_OPTION_GTK_ERROR;
1937
1938         if (wow->eap_identity_req)
1939                 *filter |= WOW_FILTER_OPTION_EAP_REQ;
1940
1941         if (wow->four_way_handshake)
1942                 *filter |= WOW_FILTER_OPTION_8021X_4WAYHS;
1943
1944         return 0;
1945 }
1946
1947 static int ath6kl_wow_ap(struct ath6kl *ar, struct ath6kl_vif *vif)
1948 {
1949         static const u8 unicst_pattern[] = { 0x00, 0x00, 0x00,
1950                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1951                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1952                 0x00, 0x08 };
1953         static const u8 unicst_mask[] = { 0x01, 0x00, 0x00,
1954                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1955                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1956                 0x00, 0x7f };
1957         u8 unicst_offset = 0;
1958         static const u8 arp_pattern[] = { 0x08, 0x06 };
1959         static const u8 arp_mask[] = { 0xff, 0xff };
1960         u8 arp_offset = 20;
1961         static const u8 discvr_pattern[] = { 0xe0, 0x00, 0x00, 0xf8 };
1962         static const u8 discvr_mask[] = { 0xf0, 0x00, 0x00, 0xf8 };
1963         u8 discvr_offset = 38;
1964         static const u8 dhcp_pattern[] = { 0xff, 0xff, 0xff, 0xff,
1965                 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1966                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00,
1967                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1968                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1969                 0x00, 0x00, 0x00, 0x00, 0x00, 0x43 /* port 67 */ };
1970         static const u8 dhcp_mask[] = { 0xff, 0xff, 0xff, 0xff,
1971                 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1972                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xff, 0xff,
1973                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1974                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1975                 0x00, 0x00, 0x00, 0x00, 0xff, 0xff /* port 67 */ };
1976         u8 dhcp_offset = 0;
1977         int ret;
1978
1979         /* Setup unicast IP, EAPOL-like and ARP pkt pattern */
1980         ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1981                         vif->fw_vif_idx, WOW_LIST_ID,
1982                         sizeof(unicst_pattern), unicst_offset,
1983                         unicst_pattern, unicst_mask);
1984         if (ret) {
1985                 ath6kl_err("failed to add WOW unicast IP pattern\n");
1986                 return ret;
1987         }
1988
1989         /* Setup all ARP pkt pattern */
1990         ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1991                         vif->fw_vif_idx, WOW_LIST_ID,
1992                         sizeof(arp_pattern), arp_offset,
1993                         arp_pattern, arp_mask);
1994         if (ret) {
1995                 ath6kl_err("failed to add WOW ARP pattern\n");
1996                 return ret;
1997         }
1998
1999         /*
2000          * Setup multicast pattern for mDNS 224.0.0.251,
2001          * SSDP 239.255.255.250 and LLMNR  224.0.0.252
2002          */
2003         ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2004                         vif->fw_vif_idx, WOW_LIST_ID,
2005                         sizeof(discvr_pattern), discvr_offset,
2006                         discvr_pattern, discvr_mask);
2007         if (ret) {
2008                 ath6kl_err("failed to add WOW mDNS/SSDP/LLMNR pattern\n");
2009                 return ret;
2010         }
2011
2012         /* Setup all DHCP broadcast pkt pattern */
2013         ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2014                         vif->fw_vif_idx, WOW_LIST_ID,
2015                         sizeof(dhcp_pattern), dhcp_offset,
2016                         dhcp_pattern, dhcp_mask);
2017         if (ret) {
2018                 ath6kl_err("failed to add WOW DHCP broadcast pattern\n");
2019                 return ret;
2020         }
2021
2022         return 0;
2023 }
2024
2025 static int ath6kl_wow_sta(struct ath6kl *ar, struct ath6kl_vif *vif)
2026 {
2027         struct net_device *ndev = vif->ndev;
2028         static const u8 discvr_pattern[] = { 0xe0, 0x00, 0x00, 0xf8 };
2029         static const u8 discvr_mask[] = { 0xf0, 0x00, 0x00, 0xf8 };
2030         u8 discvr_offset = 38;
2031         u8 mac_mask[ETH_ALEN];
2032         int ret;
2033
2034         /* Setup unicast pkt pattern */
2035         memset(mac_mask, 0xff, ETH_ALEN);
2036         ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2037                                 vif->fw_vif_idx, WOW_LIST_ID,
2038                                 ETH_ALEN, 0, ndev->dev_addr,
2039                                 mac_mask);
2040         if (ret) {
2041                 ath6kl_err("failed to add WOW unicast pattern\n");
2042                 return ret;
2043         }
2044
2045         /*
2046          * Setup multicast pattern for mDNS 224.0.0.251,
2047          * SSDP 239.255.255.250 and LLMNR 224.0.0.252
2048          */
2049         if ((ndev->flags & IFF_ALLMULTI) ||
2050             (ndev->flags & IFF_MULTICAST && netdev_mc_count(ndev) > 0)) {
2051                 ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2052                                 vif->fw_vif_idx, WOW_LIST_ID,
2053                                 sizeof(discvr_pattern), discvr_offset,
2054                                 discvr_pattern, discvr_mask);
2055                 if (ret) {
2056                         ath6kl_err("failed to add WOW mDNS/SSDP/LLMNR pattern\n");
2057                         return ret;
2058                 }
2059         }
2060
2061         return 0;
2062 }
2063
2064 static int is_hsleep_mode_procsed(struct ath6kl_vif *vif)
2065 {
2066         return test_bit(HOST_SLEEP_MODE_CMD_PROCESSED, &vif->flags);
2067 }
2068
2069 static bool is_ctrl_ep_empty(struct ath6kl *ar)
2070 {
2071         return !ar->tx_pending[ar->ctrl_ep];
2072 }
2073
2074 static int ath6kl_cfg80211_host_sleep(struct ath6kl *ar, struct ath6kl_vif *vif)
2075 {
2076         int ret, left;
2077
2078         clear_bit(HOST_SLEEP_MODE_CMD_PROCESSED, &vif->flags);
2079
2080         ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2081                                                  ATH6KL_HOST_MODE_ASLEEP);
2082         if (ret)
2083                 return ret;
2084
2085         left = wait_event_interruptible_timeout(ar->event_wq,
2086                                                 is_hsleep_mode_procsed(vif),
2087                                                 WMI_TIMEOUT);
2088         if (left == 0) {
2089                 ath6kl_warn("timeout, didn't get host sleep cmd processed event\n");
2090                 ret = -ETIMEDOUT;
2091         } else if (left < 0) {
2092                 ath6kl_warn("error while waiting for host sleep cmd processed event %d\n",
2093                             left);
2094                 ret = left;
2095         }
2096
2097         if (ar->tx_pending[ar->ctrl_ep]) {
2098                 left = wait_event_interruptible_timeout(ar->event_wq,
2099                                                         is_ctrl_ep_empty(ar),
2100                                                         WMI_TIMEOUT);
2101                 if (left == 0) {
2102                         ath6kl_warn("clear wmi ctrl data timeout\n");
2103                         ret = -ETIMEDOUT;
2104                 } else if (left < 0) {
2105                         ath6kl_warn("clear wmi ctrl data failed: %d\n", left);
2106                         ret = left;
2107                 }
2108         }
2109
2110         return ret;
2111 }
2112
2113 static int ath6kl_wow_suspend_vif(struct ath6kl_vif *vif,
2114                                   struct cfg80211_wowlan *wow, u32 *filter)
2115 {
2116         struct ath6kl *ar = vif->ar;
2117         struct in_device *in_dev;
2118         struct in_ifaddr *ifa;
2119         int ret;
2120         u16 i, bmiss_time;
2121         __be32 ips[MAX_IP_ADDRS];
2122         u8 index = 0;
2123
2124         if (!test_bit(NETDEV_MCAST_ALL_ON, &vif->flags) &&
2125             test_bit(ATH6KL_FW_CAPABILITY_WOW_MULTICAST_FILTER,
2126                      ar->fw_capabilities)) {
2127                 ret = ath6kl_wmi_mcast_filter_cmd(vif->ar->wmi,
2128                                                 vif->fw_vif_idx, false);
2129                 if (ret)
2130                         return ret;
2131         }
2132
2133         /* Clear existing WOW patterns */
2134         for (i = 0; i < WOW_MAX_FILTERS_PER_LIST; i++)
2135                 ath6kl_wmi_del_wow_pattern_cmd(ar->wmi, vif->fw_vif_idx,
2136                                                WOW_LIST_ID, i);
2137
2138         /*
2139          * Skip the default WOW pattern configuration
2140          * if the driver receives any WOW patterns from
2141          * the user.
2142          */
2143         if (wow)
2144                 ret = ath6kl_wow_usr(ar, vif, wow, filter);
2145         else if (vif->nw_type == AP_NETWORK)
2146                 ret = ath6kl_wow_ap(ar, vif);
2147         else
2148                 ret = ath6kl_wow_sta(ar, vif);
2149
2150         if (ret)
2151                 return ret;
2152
2153         netif_stop_queue(vif->ndev);
2154
2155         if (vif->nw_type != AP_NETWORK) {
2156                 ret = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
2157                                                     ATH6KL_MAX_WOW_LISTEN_INTL,
2158                                                     0);
2159                 if (ret)
2160                         return ret;
2161
2162                 /* Set listen interval x 15 times as bmiss time */
2163                 bmiss_time = ATH6KL_MAX_WOW_LISTEN_INTL * 15;
2164                 if (bmiss_time > ATH6KL_MAX_BMISS_TIME)
2165                         bmiss_time = ATH6KL_MAX_BMISS_TIME;
2166
2167                 ret = ath6kl_wmi_bmisstime_cmd(ar->wmi, vif->fw_vif_idx,
2168                                                bmiss_time, 0);
2169                 if (ret)
2170                         return ret;
2171
2172                 ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2173                                                 0xFFFF, 0, 0xFFFF, 0, 0, 0,
2174                                                 0, 0, 0, 0);
2175                 if (ret)
2176                         return ret;
2177         }
2178
2179         /* Setup own IP addr for ARP agent. */
2180         in_dev = __in_dev_get_rtnl(vif->ndev);
2181         if (!in_dev)
2182                 return 0;
2183
2184         ifa = in_dev->ifa_list;
2185         memset(&ips, 0, sizeof(ips));
2186
2187         /* Configure IP addr only if IP address count < MAX_IP_ADDRS */
2188         while (index < MAX_IP_ADDRS && ifa) {
2189                 ips[index] = ifa->ifa_local;
2190                 ifa = ifa->ifa_next;
2191                 index++;
2192         }
2193
2194         if (ifa) {
2195                 ath6kl_err("total IP addr count is exceeding fw limit\n");
2196                 return -EINVAL;
2197         }
2198
2199         ret = ath6kl_wmi_set_ip_cmd(ar->wmi, vif->fw_vif_idx, ips[0], ips[1]);
2200         if (ret) {
2201                 ath6kl_err("fail to setup ip for arp agent\n");
2202                 return ret;
2203         }
2204
2205         return ret;
2206 }
2207
2208 static int ath6kl_wow_suspend(struct ath6kl *ar, struct cfg80211_wowlan *wow)
2209 {
2210         struct ath6kl_vif *first_vif, *vif;
2211         int ret = 0;
2212         u32 filter = 0;
2213         bool connected = false;
2214
2215         /* enter / leave wow suspend on first vif always */
2216         first_vif = ath6kl_vif_first(ar);
2217         if (WARN_ON(unlikely(!first_vif)) ||
2218             !ath6kl_cfg80211_ready(first_vif))
2219                 return -EIO;
2220
2221         if (wow && (wow->n_patterns > WOW_MAX_FILTERS_PER_LIST))
2222                 return -EINVAL;
2223
2224         /* install filters for each connected vif */
2225         spin_lock_bh(&ar->list_lock);
2226         list_for_each_entry(vif, &ar->vif_list, list) {
2227                 if (!test_bit(CONNECTED, &vif->flags) ||
2228                     !ath6kl_cfg80211_ready(vif))
2229                         continue;
2230                 connected = true;
2231
2232                 ret = ath6kl_wow_suspend_vif(vif, wow, &filter);
2233                 if (ret)
2234                         break;
2235         }
2236         spin_unlock_bh(&ar->list_lock);
2237
2238         if (!connected)
2239                 return -ENOTCONN;
2240         else if (ret)
2241                 return ret;
2242
2243         ar->state = ATH6KL_STATE_SUSPENDING;
2244
2245         ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, first_vif->fw_vif_idx,
2246                                           ATH6KL_WOW_MODE_ENABLE,
2247                                           filter,
2248                                           WOW_HOST_REQ_DELAY);
2249         if (ret)
2250                 return ret;
2251
2252         return ath6kl_cfg80211_host_sleep(ar, first_vif);
2253 }
2254
2255 static int ath6kl_wow_resume_vif(struct ath6kl_vif *vif)
2256 {
2257         struct ath6kl *ar = vif->ar;
2258         int ret;
2259
2260         if (vif->nw_type != AP_NETWORK) {
2261                 ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2262                                                 0, 0, 0, 0, 0, 0, 3, 0, 0, 0);
2263                 if (ret)
2264                         return ret;
2265
2266                 ret = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
2267                                                     vif->listen_intvl_t, 0);
2268                 if (ret)
2269                         return ret;
2270
2271                 ret = ath6kl_wmi_bmisstime_cmd(ar->wmi, vif->fw_vif_idx,
2272                                                vif->bmiss_time_t, 0);
2273                 if (ret)
2274                         return ret;
2275         }
2276
2277         if (!test_bit(NETDEV_MCAST_ALL_OFF, &vif->flags) &&
2278             test_bit(ATH6KL_FW_CAPABILITY_WOW_MULTICAST_FILTER,
2279                      ar->fw_capabilities)) {
2280                 ret = ath6kl_wmi_mcast_filter_cmd(vif->ar->wmi,
2281                                                   vif->fw_vif_idx, true);
2282                 if (ret)
2283                         return ret;
2284         }
2285
2286         netif_wake_queue(vif->ndev);
2287
2288         return 0;
2289 }
2290
2291 static int ath6kl_wow_resume(struct ath6kl *ar)
2292 {
2293         struct ath6kl_vif *vif;
2294         int ret;
2295
2296         vif = ath6kl_vif_first(ar);
2297         if (WARN_ON(unlikely(!vif)) ||
2298             !ath6kl_cfg80211_ready(vif))
2299                 return -EIO;
2300
2301         ar->state = ATH6KL_STATE_RESUMING;
2302
2303         ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2304                                                  ATH6KL_HOST_MODE_AWAKE);
2305         if (ret) {
2306                 ath6kl_warn("Failed to configure host sleep mode for wow resume: %d\n",
2307                             ret);
2308                 goto cleanup;
2309         }
2310
2311         spin_lock_bh(&ar->list_lock);
2312         list_for_each_entry(vif, &ar->vif_list, list) {
2313                 if (!test_bit(CONNECTED, &vif->flags) ||
2314                     !ath6kl_cfg80211_ready(vif))
2315                         continue;
2316                 ret = ath6kl_wow_resume_vif(vif);
2317                 if (ret)
2318                         break;
2319         }
2320         spin_unlock_bh(&ar->list_lock);
2321
2322         if (ret)
2323                 goto cleanup;
2324
2325         ar->state = ATH6KL_STATE_ON;
2326         return 0;
2327
2328 cleanup:
2329         ar->state = ATH6KL_STATE_WOW;
2330         return ret;
2331 }
2332
2333 static int ath6kl_cfg80211_deepsleep_suspend(struct ath6kl *ar)
2334 {
2335         struct ath6kl_vif *vif;
2336         int ret;
2337
2338         vif = ath6kl_vif_first(ar);
2339         if (!vif)
2340                 return -EIO;
2341
2342         if (!test_bit(WMI_READY, &ar->flag)) {
2343                 ath6kl_err("deepsleep failed as wmi is not ready\n");
2344                 return -EIO;
2345         }
2346
2347         ath6kl_cfg80211_stop_all(ar);
2348
2349         /* Save the current power mode before enabling power save */
2350         ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
2351
2352         ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER);
2353         if (ret)
2354                 return ret;
2355
2356         /* Disable WOW mode */
2357         ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, vif->fw_vif_idx,
2358                                           ATH6KL_WOW_MODE_DISABLE,
2359                                           0, 0);
2360         if (ret)
2361                 return ret;
2362
2363         /* Flush all non control pkts in TX path */
2364         ath6kl_tx_data_cleanup(ar);
2365
2366         ret = ath6kl_cfg80211_host_sleep(ar, vif);
2367         if (ret)
2368                 return ret;
2369
2370         return 0;
2371 }
2372
2373 static int ath6kl_cfg80211_deepsleep_resume(struct ath6kl *ar)
2374 {
2375         struct ath6kl_vif *vif;
2376         int ret;
2377
2378         vif = ath6kl_vif_first(ar);
2379
2380         if (!vif)
2381                 return -EIO;
2382
2383         if (ar->wmi->pwr_mode != ar->wmi->saved_pwr_mode) {
2384                 ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0,
2385                                                ar->wmi->saved_pwr_mode);
2386                 if (ret)
2387                         return ret;
2388         }
2389
2390         ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2391                                                  ATH6KL_HOST_MODE_AWAKE);
2392         if (ret)
2393                 return ret;
2394
2395         ar->state = ATH6KL_STATE_ON;
2396
2397         /* Reset scan parameter to default values */
2398         ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2399                                         0, 0, 0, 0, 0, 0, 3, 0, 0, 0);
2400         if (ret)
2401                 return ret;
2402
2403         return 0;
2404 }
2405
2406 int ath6kl_cfg80211_suspend(struct ath6kl *ar,
2407                             enum ath6kl_cfg_suspend_mode mode,
2408                             struct cfg80211_wowlan *wow)
2409 {
2410         struct ath6kl_vif *vif;
2411         enum ath6kl_state prev_state;
2412         int ret;
2413
2414         switch (mode) {
2415         case ATH6KL_CFG_SUSPEND_WOW:
2416
2417                 ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode suspend\n");
2418
2419                 /* Flush all non control pkts in TX path */
2420                 ath6kl_tx_data_cleanup(ar);
2421
2422                 prev_state = ar->state;
2423
2424                 ret = ath6kl_wow_suspend(ar, wow);
2425                 if (ret) {
2426                         ar->state = prev_state;
2427                         return ret;
2428                 }
2429
2430                 ar->state = ATH6KL_STATE_WOW;
2431                 break;
2432
2433         case ATH6KL_CFG_SUSPEND_DEEPSLEEP:
2434
2435                 ath6kl_dbg(ATH6KL_DBG_SUSPEND, "deep sleep suspend\n");
2436
2437                 ret = ath6kl_cfg80211_deepsleep_suspend(ar);
2438                 if (ret) {
2439                         ath6kl_err("deepsleep suspend failed: %d\n", ret);
2440                         return ret;
2441                 }
2442
2443                 ar->state = ATH6KL_STATE_DEEPSLEEP;
2444
2445                 break;
2446
2447         case ATH6KL_CFG_SUSPEND_CUTPOWER:
2448
2449                 ath6kl_cfg80211_stop_all(ar);
2450
2451                 if (ar->state == ATH6KL_STATE_OFF) {
2452                         ath6kl_dbg(ATH6KL_DBG_SUSPEND,
2453                                    "suspend hw off, no action for cutpower\n");
2454                         break;
2455                 }
2456
2457                 ath6kl_dbg(ATH6KL_DBG_SUSPEND, "suspend cutting power\n");
2458
2459                 ret = ath6kl_init_hw_stop(ar);
2460                 if (ret) {
2461                         ath6kl_warn("failed to stop hw during suspend: %d\n",
2462                                     ret);
2463                 }
2464
2465                 ar->state = ATH6KL_STATE_CUTPOWER;
2466
2467                 break;
2468
2469         default:
2470                 break;
2471         }
2472
2473         list_for_each_entry(vif, &ar->vif_list, list)
2474                 ath6kl_cfg80211_scan_complete_event(vif, true);
2475
2476         return 0;
2477 }
2478 EXPORT_SYMBOL(ath6kl_cfg80211_suspend);
2479
2480 int ath6kl_cfg80211_resume(struct ath6kl *ar)
2481 {
2482         int ret;
2483
2484         switch (ar->state) {
2485         case  ATH6KL_STATE_WOW:
2486                 ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode resume\n");
2487
2488                 ret = ath6kl_wow_resume(ar);
2489                 if (ret) {
2490                         ath6kl_warn("wow mode resume failed: %d\n", ret);
2491                         return ret;
2492                 }
2493
2494                 break;
2495
2496         case ATH6KL_STATE_DEEPSLEEP:
2497                 ath6kl_dbg(ATH6KL_DBG_SUSPEND, "deep sleep resume\n");
2498
2499                 ret = ath6kl_cfg80211_deepsleep_resume(ar);
2500                 if (ret) {
2501                         ath6kl_warn("deep sleep resume failed: %d\n", ret);
2502                         return ret;
2503                 }
2504                 break;
2505
2506         case ATH6KL_STATE_CUTPOWER:
2507                 ath6kl_dbg(ATH6KL_DBG_SUSPEND, "resume restoring power\n");
2508
2509                 ret = ath6kl_init_hw_start(ar);
2510                 if (ret) {
2511                         ath6kl_warn("Failed to boot hw in resume: %d\n", ret);
2512                         return ret;
2513                 }
2514                 break;
2515
2516         default:
2517                 break;
2518         }
2519
2520         return 0;
2521 }
2522 EXPORT_SYMBOL(ath6kl_cfg80211_resume);
2523
2524 #ifdef CONFIG_PM
2525
2526 /* hif layer decides what suspend mode to use */
2527 static int __ath6kl_cfg80211_suspend(struct wiphy *wiphy,
2528                                  struct cfg80211_wowlan *wow)
2529 {
2530         struct ath6kl *ar = wiphy_priv(wiphy);
2531
2532         ath6kl_recovery_suspend(ar);
2533
2534         return ath6kl_hif_suspend(ar, wow);
2535 }
2536
2537 static int __ath6kl_cfg80211_resume(struct wiphy *wiphy)
2538 {
2539         struct ath6kl *ar = wiphy_priv(wiphy);
2540         int err;
2541
2542         err = ath6kl_hif_resume(ar);
2543         if (err)
2544                 return err;
2545
2546         ath6kl_recovery_resume(ar);
2547
2548         return 0;
2549 }
2550
2551 /*
2552  * FIXME: WOW suspend mode is selected if the host sdio controller supports
2553  * both sdio irq wake up and keep power. The target pulls sdio data line to
2554  * wake up the host when WOW pattern matches. This causes sdio irq handler
2555  * is being called in the host side which internally hits ath6kl's RX path.
2556  *
2557  * Since sdio interrupt is not disabled, RX path executes even before
2558  * the host executes the actual resume operation from PM module.
2559  *
2560  * In the current scenario, WOW resume should happen before start processing
2561  * any data from the target. So It's required to perform WOW resume in RX path.
2562  * Ideally we should perform WOW resume only in the actual platform
2563  * resume path. This area needs bit rework to avoid WOW resume in RX path.
2564  *
2565  * ath6kl_check_wow_status() is called from ath6kl_rx().
2566  */
2567 void ath6kl_check_wow_status(struct ath6kl *ar)
2568 {
2569         if (ar->state == ATH6KL_STATE_SUSPENDING)
2570                 return;
2571
2572         if (ar->state == ATH6KL_STATE_WOW)
2573                 ath6kl_cfg80211_resume(ar);
2574 }
2575
2576 #else
2577
2578 void ath6kl_check_wow_status(struct ath6kl *ar)
2579 {
2580 }
2581 #endif
2582
2583 static int ath6kl_set_htcap(struct ath6kl_vif *vif, enum ieee80211_band band,
2584                             bool ht_enable)
2585 {
2586         struct ath6kl_htcap *htcap = &vif->htcap[band];
2587
2588         if (htcap->ht_enable == ht_enable)
2589                 return 0;
2590
2591         if (ht_enable) {
2592                 /* Set default ht capabilities */
2593                 htcap->ht_enable = true;
2594                 htcap->cap_info = (band == IEEE80211_BAND_2GHZ) ?
2595                                    ath6kl_g_htcap : ath6kl_a_htcap;
2596                 htcap->ampdu_factor = IEEE80211_HT_MAX_AMPDU_16K;
2597         } else /* Disable ht */
2598                 memset(htcap, 0, sizeof(*htcap));
2599
2600         return ath6kl_wmi_set_htcap_cmd(vif->ar->wmi, vif->fw_vif_idx,
2601                                         band, htcap);
2602 }
2603
2604 static int ath6kl_restore_htcap(struct ath6kl_vif *vif)
2605 {
2606         struct wiphy *wiphy = vif->ar->wiphy;
2607         int band, ret = 0;
2608
2609         for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
2610                 if (!wiphy->bands[band])
2611                         continue;
2612
2613                 ret = ath6kl_set_htcap(vif, band,
2614                                 wiphy->bands[band]->ht_cap.ht_supported);
2615                 if (ret)
2616                         return ret;
2617         }
2618
2619         return ret;
2620 }
2621
2622 static bool ath6kl_is_p2p_ie(const u8 *pos)
2623 {
2624         return pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 &&
2625                 pos[2] == 0x50 && pos[3] == 0x6f &&
2626                 pos[4] == 0x9a && pos[5] == 0x09;
2627 }
2628
2629 static int ath6kl_set_ap_probe_resp_ies(struct ath6kl_vif *vif,
2630                                         const u8 *ies, size_t ies_len)
2631 {
2632         struct ath6kl *ar = vif->ar;
2633         const u8 *pos;
2634         u8 *buf = NULL;
2635         size_t len = 0;
2636         int ret;
2637
2638         /*
2639          * Filter out P2P IE(s) since they will be included depending on
2640          * the Probe Request frame in ath6kl_send_go_probe_resp().
2641          */
2642
2643         if (ies && ies_len) {
2644                 buf = kmalloc(ies_len, GFP_KERNEL);
2645                 if (buf == NULL)
2646                         return -ENOMEM;
2647                 pos = ies;
2648                 while (pos + 1 < ies + ies_len) {
2649                         if (pos + 2 + pos[1] > ies + ies_len)
2650                                 break;
2651                         if (!ath6kl_is_p2p_ie(pos)) {
2652                                 memcpy(buf + len, pos, 2 + pos[1]);
2653                                 len += 2 + pos[1];
2654                         }
2655                         pos += 2 + pos[1];
2656                 }
2657         }
2658
2659         ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2660                                        WMI_FRAME_PROBE_RESP, buf, len);
2661         kfree(buf);
2662         return ret;
2663 }
2664
2665 static int ath6kl_set_ies(struct ath6kl_vif *vif,
2666                           struct cfg80211_beacon_data *info)
2667 {
2668         struct ath6kl *ar = vif->ar;
2669         int res;
2670
2671         /* this also clears IE in fw if it's not set */
2672         res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2673                                        WMI_FRAME_BEACON,
2674                                        info->beacon_ies,
2675                                        info->beacon_ies_len);
2676         if (res)
2677                 return res;
2678
2679         /* this also clears IE in fw if it's not set */
2680         res = ath6kl_set_ap_probe_resp_ies(vif, info->proberesp_ies,
2681                                            info->proberesp_ies_len);
2682         if (res)
2683                 return res;
2684
2685         /* this also clears IE in fw if it's not set */
2686         res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2687                                        WMI_FRAME_ASSOC_RESP,
2688                                        info->assocresp_ies,
2689                                        info->assocresp_ies_len);
2690         if (res)
2691                 return res;
2692
2693         return 0;
2694 }
2695
2696 static int ath6kl_get_rsn_capab(struct cfg80211_beacon_data *beacon,
2697                                 u8 *rsn_capab)
2698 {
2699         const u8 *rsn_ie;
2700         size_t rsn_ie_len;
2701         u16 cnt;
2702
2703         if (!beacon->tail)
2704                 return -EINVAL;
2705
2706         rsn_ie = cfg80211_find_ie(WLAN_EID_RSN, beacon->tail, beacon->tail_len);
2707         if (!rsn_ie)
2708                 return -EINVAL;
2709
2710         rsn_ie_len = *(rsn_ie + 1);
2711         /* skip element id and length */
2712         rsn_ie += 2;
2713
2714         /* skip version */
2715         if (rsn_ie_len < 2)
2716                 return -EINVAL;
2717         rsn_ie +=  2;
2718         rsn_ie_len -= 2;
2719
2720         /* skip group cipher suite */
2721         if (rsn_ie_len < 4)
2722                 return 0;
2723         rsn_ie +=  4;
2724         rsn_ie_len -= 4;
2725
2726         /* skip pairwise cipher suite */
2727         if (rsn_ie_len < 2)
2728                 return 0;
2729         cnt = get_unaligned_le16(rsn_ie);
2730         rsn_ie += (2 + cnt * 4);
2731         rsn_ie_len -= (2 + cnt * 4);
2732
2733         /* skip akm suite */
2734         if (rsn_ie_len < 2)
2735                 return 0;
2736         cnt = get_unaligned_le16(rsn_ie);
2737         rsn_ie += (2 + cnt * 4);
2738         rsn_ie_len -= (2 + cnt * 4);
2739
2740         if (rsn_ie_len < 2)
2741                 return 0;
2742
2743         memcpy(rsn_capab, rsn_ie, 2);
2744
2745         return 0;
2746 }
2747
2748 static int ath6kl_start_ap(struct wiphy *wiphy, struct net_device *dev,
2749                            struct cfg80211_ap_settings *info)
2750 {
2751         struct ath6kl *ar = ath6kl_priv(dev);
2752         struct ath6kl_vif *vif = netdev_priv(dev);
2753         struct ieee80211_mgmt *mgmt;
2754         bool hidden = false;
2755         u8 *ies;
2756         int ies_len;
2757         struct wmi_connect_cmd p;
2758         int res;
2759         int i, ret;
2760         u16 rsn_capab = 0;
2761         int inactivity_timeout = 0;
2762
2763         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s:\n", __func__);
2764
2765         if (!ath6kl_cfg80211_ready(vif))
2766                 return -EIO;
2767
2768         if (vif->next_mode != AP_NETWORK)
2769                 return -EOPNOTSUPP;
2770
2771         res = ath6kl_set_ies(vif, &info->beacon);
2772
2773         ar->ap_mode_bkey.valid = false;
2774
2775         ret = ath6kl_wmi_ap_set_beacon_intvl_cmd(ar->wmi, vif->fw_vif_idx,
2776                                                  info->beacon_interval);
2777
2778         if (ret)
2779                 ath6kl_warn("Failed to set beacon interval: %d\n", ret);
2780
2781         ret = ath6kl_wmi_ap_set_dtim_cmd(ar->wmi, vif->fw_vif_idx,
2782                                          info->dtim_period);
2783
2784         /* ignore error, just print a warning and continue normally */
2785         if (ret)
2786                 ath6kl_warn("Failed to set dtim_period in beacon: %d\n", ret);
2787
2788         if (info->beacon.head == NULL)
2789                 return -EINVAL;
2790         mgmt = (struct ieee80211_mgmt *) info->beacon.head;
2791         ies = mgmt->u.beacon.variable;
2792         if (ies > info->beacon.head + info->beacon.head_len)
2793                 return -EINVAL;
2794         ies_len = info->beacon.head + info->beacon.head_len - ies;
2795
2796         if (info->ssid == NULL)
2797                 return -EINVAL;
2798         memcpy(vif->ssid, info->ssid, info->ssid_len);
2799         vif->ssid_len = info->ssid_len;
2800         if (info->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE)
2801                 hidden = true;
2802
2803         res = ath6kl_wmi_ap_hidden_ssid(ar->wmi, vif->fw_vif_idx, hidden);
2804         if (res)
2805                 return res;
2806
2807         ret = ath6kl_set_auth_type(vif, info->auth_type);
2808         if (ret)
2809                 return ret;
2810
2811         memset(&p, 0, sizeof(p));
2812
2813         for (i = 0; i < info->crypto.n_akm_suites; i++) {
2814                 switch (info->crypto.akm_suites[i]) {
2815                 case WLAN_AKM_SUITE_8021X:
2816                         if (info->crypto.wpa_versions & NL80211_WPA_VERSION_1)
2817                                 p.auth_mode |= WPA_AUTH;
2818                         if (info->crypto.wpa_versions & NL80211_WPA_VERSION_2)
2819                                 p.auth_mode |= WPA2_AUTH;
2820                         break;
2821                 case WLAN_AKM_SUITE_PSK:
2822                         if (info->crypto.wpa_versions & NL80211_WPA_VERSION_1)
2823                                 p.auth_mode |= WPA_PSK_AUTH;
2824                         if (info->crypto.wpa_versions & NL80211_WPA_VERSION_2)
2825                                 p.auth_mode |= WPA2_PSK_AUTH;
2826                         break;
2827                 }
2828         }
2829         if (p.auth_mode == 0)
2830                 p.auth_mode = NONE_AUTH;
2831         vif->auth_mode = p.auth_mode;
2832
2833         for (i = 0; i < info->crypto.n_ciphers_pairwise; i++) {
2834                 switch (info->crypto.ciphers_pairwise[i]) {
2835                 case WLAN_CIPHER_SUITE_WEP40:
2836                 case WLAN_CIPHER_SUITE_WEP104:
2837                         p.prwise_crypto_type |= WEP_CRYPT;
2838                         break;
2839                 case WLAN_CIPHER_SUITE_TKIP:
2840                         p.prwise_crypto_type |= TKIP_CRYPT;
2841                         break;
2842                 case WLAN_CIPHER_SUITE_CCMP:
2843                         p.prwise_crypto_type |= AES_CRYPT;
2844                         break;
2845                 case WLAN_CIPHER_SUITE_SMS4:
2846                         p.prwise_crypto_type |= WAPI_CRYPT;
2847                         break;
2848                 }
2849         }
2850         if (p.prwise_crypto_type == 0) {
2851                 p.prwise_crypto_type = NONE_CRYPT;
2852                 ath6kl_set_cipher(vif, 0, true);
2853         } else if (info->crypto.n_ciphers_pairwise == 1) {
2854                 ath6kl_set_cipher(vif, info->crypto.ciphers_pairwise[0], true);
2855         }
2856
2857         switch (info->crypto.cipher_group) {
2858         case WLAN_CIPHER_SUITE_WEP40:
2859         case WLAN_CIPHER_SUITE_WEP104:
2860                 p.grp_crypto_type = WEP_CRYPT;
2861                 break;
2862         case WLAN_CIPHER_SUITE_TKIP:
2863                 p.grp_crypto_type = TKIP_CRYPT;
2864                 break;
2865         case WLAN_CIPHER_SUITE_CCMP:
2866                 p.grp_crypto_type = AES_CRYPT;
2867                 break;
2868         case WLAN_CIPHER_SUITE_SMS4:
2869                 p.grp_crypto_type = WAPI_CRYPT;
2870                 break;
2871         default:
2872                 p.grp_crypto_type = NONE_CRYPT;
2873                 break;
2874         }
2875         ath6kl_set_cipher(vif, info->crypto.cipher_group, false);
2876
2877         p.nw_type = AP_NETWORK;
2878         vif->nw_type = vif->next_mode;
2879
2880         p.ssid_len = vif->ssid_len;
2881         memcpy(p.ssid, vif->ssid, vif->ssid_len);
2882         p.dot11_auth_mode = vif->dot11_auth_mode;
2883         p.ch = cpu_to_le16(info->chandef.chan->center_freq);
2884
2885         /* Enable uAPSD support by default */
2886         res = ath6kl_wmi_ap_set_apsd(ar->wmi, vif->fw_vif_idx, true);
2887         if (res < 0)
2888                 return res;
2889
2890         if (vif->wdev.iftype == NL80211_IFTYPE_P2P_GO) {
2891                 p.nw_subtype = SUBTYPE_P2PGO;
2892         } else {
2893                 /*
2894                  * Due to firmware limitation, it is not possible to
2895                  * do P2P mgmt operations in AP mode
2896                  */
2897                 p.nw_subtype = SUBTYPE_NONE;
2898         }
2899
2900         if (info->inactivity_timeout) {
2901                 inactivity_timeout = info->inactivity_timeout;
2902
2903                 if (test_bit(ATH6KL_FW_CAPABILITY_AP_INACTIVITY_MINS,
2904                              ar->fw_capabilities))
2905                         inactivity_timeout = DIV_ROUND_UP(inactivity_timeout,
2906                                                           60);
2907
2908                 res = ath6kl_wmi_set_inact_period(ar->wmi, vif->fw_vif_idx,
2909                                                   inactivity_timeout);
2910                 if (res < 0)
2911                         return res;
2912         }
2913
2914         if (ath6kl_set_htcap(vif, info->chandef.chan->band,
2915                              cfg80211_get_chandef_type(&info->chandef)
2916                                         != NL80211_CHAN_NO_HT))
2917                 return -EIO;
2918
2919         /*
2920          * Get the PTKSA replay counter in the RSN IE. Supplicant
2921          * will use the RSN IE in M3 message and firmware has to
2922          * advertise the same in beacon/probe response. Send
2923          * the complete RSN IE capability field to firmware
2924          */
2925         if (!ath6kl_get_rsn_capab(&info->beacon, (u8 *) &rsn_capab) &&
2926             test_bit(ATH6KL_FW_CAPABILITY_RSN_CAP_OVERRIDE,
2927                      ar->fw_capabilities)) {
2928                 res = ath6kl_wmi_set_ie_cmd(ar->wmi, vif->fw_vif_idx,
2929                                             WLAN_EID_RSN, WMI_RSN_IE_CAPB,
2930                                             (const u8 *) &rsn_capab,
2931                                             sizeof(rsn_capab));
2932                 vif->rsn_capab = rsn_capab;
2933                 if (res < 0)
2934                         return res;
2935         }
2936
2937         memcpy(&vif->profile, &p, sizeof(p));
2938         res = ath6kl_wmi_ap_profile_commit(ar->wmi, vif->fw_vif_idx, &p);
2939         if (res < 0)
2940                 return res;
2941
2942         return 0;
2943 }
2944
2945 static int ath6kl_change_beacon(struct wiphy *wiphy, struct net_device *dev,
2946                                 struct cfg80211_beacon_data *beacon)
2947 {
2948         struct ath6kl_vif *vif = netdev_priv(dev);
2949
2950         if (!ath6kl_cfg80211_ready(vif))
2951                 return -EIO;
2952
2953         if (vif->next_mode != AP_NETWORK)
2954                 return -EOPNOTSUPP;
2955
2956         return ath6kl_set_ies(vif, beacon);
2957 }
2958
2959 static int ath6kl_stop_ap(struct wiphy *wiphy, struct net_device *dev)
2960 {
2961         struct ath6kl *ar = ath6kl_priv(dev);
2962         struct ath6kl_vif *vif = netdev_priv(dev);
2963
2964         if (vif->nw_type != AP_NETWORK)
2965                 return -EOPNOTSUPP;
2966         if (!test_bit(CONNECTED, &vif->flags))
2967                 return -ENOTCONN;
2968
2969         ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
2970         clear_bit(CONNECTED, &vif->flags);
2971
2972         /* Restore ht setting in firmware */
2973         return ath6kl_restore_htcap(vif);
2974 }
2975
2976 static const u8 bcast_addr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
2977
2978 static int ath6kl_del_station(struct wiphy *wiphy, struct net_device *dev,
2979                               struct station_del_parameters *params)
2980 {
2981         struct ath6kl *ar = ath6kl_priv(dev);
2982         struct ath6kl_vif *vif = netdev_priv(dev);
2983         const u8 *addr = params->mac ? params->mac : bcast_addr;
2984
2985         return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx, WMI_AP_DEAUTH,
2986                                       addr, WLAN_REASON_PREV_AUTH_NOT_VALID);
2987 }
2988
2989 static int ath6kl_change_station(struct wiphy *wiphy, struct net_device *dev,
2990                                  const u8 *mac,
2991                                  struct station_parameters *params)
2992 {
2993         struct ath6kl *ar = ath6kl_priv(dev);
2994         struct ath6kl_vif *vif = netdev_priv(dev);
2995         int err;
2996
2997         if (vif->nw_type != AP_NETWORK)
2998                 return -EOPNOTSUPP;
2999
3000         err = cfg80211_check_station_change(wiphy, params,
3001                                             CFG80211_STA_AP_MLME_CLIENT);
3002         if (err)
3003                 return err;
3004
3005         if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED))
3006                 return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
3007                                               WMI_AP_MLME_AUTHORIZE, mac, 0);
3008         return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
3009                                       WMI_AP_MLME_UNAUTHORIZE, mac, 0);
3010 }
3011
3012 static int ath6kl_remain_on_channel(struct wiphy *wiphy,
3013                                     struct wireless_dev *wdev,
3014                                     struct ieee80211_channel *chan,
3015                                     unsigned int duration,
3016                                     u64 *cookie)
3017 {
3018         struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3019         struct ath6kl *ar = ath6kl_priv(vif->ndev);
3020         u32 id;
3021
3022         /* TODO: if already pending or ongoing remain-on-channel,
3023          * return -EBUSY */
3024         id = ++vif->last_roc_id;
3025         if (id == 0) {
3026                 /* Do not use 0 as the cookie value */
3027                 id = ++vif->last_roc_id;
3028         }
3029         *cookie = id;
3030
3031         return ath6kl_wmi_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx,
3032                                              chan->center_freq, duration);
3033 }
3034
3035 static int ath6kl_cancel_remain_on_channel(struct wiphy *wiphy,
3036                                            struct wireless_dev *wdev,
3037                                            u64 cookie)
3038 {
3039         struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3040         struct ath6kl *ar = ath6kl_priv(vif->ndev);
3041
3042         if (cookie != vif->last_roc_id)
3043                 return -ENOENT;
3044         vif->last_cancel_roc_id = cookie;
3045
3046         return ath6kl_wmi_cancel_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx);
3047 }
3048
3049 static int ath6kl_send_go_probe_resp(struct ath6kl_vif *vif,
3050                                      const u8 *buf, size_t len,
3051                                      unsigned int freq)
3052 {
3053         struct ath6kl *ar = vif->ar;
3054         const u8 *pos;
3055         u8 *p2p;
3056         int p2p_len;
3057         int ret;
3058         const struct ieee80211_mgmt *mgmt;
3059
3060         mgmt = (const struct ieee80211_mgmt *) buf;
3061
3062         /* Include P2P IE(s) from the frame generated in user space. */
3063
3064         p2p = kmalloc(len, GFP_KERNEL);
3065         if (p2p == NULL)
3066                 return -ENOMEM;
3067         p2p_len = 0;
3068
3069         pos = mgmt->u.probe_resp.variable;
3070         while (pos + 1 < buf + len) {
3071                 if (pos + 2 + pos[1] > buf + len)
3072                         break;
3073                 if (ath6kl_is_p2p_ie(pos)) {
3074                         memcpy(p2p + p2p_len, pos, 2 + pos[1]);
3075                         p2p_len += 2 + pos[1];
3076                 }
3077                 pos += 2 + pos[1];
3078         }
3079
3080         ret = ath6kl_wmi_send_probe_response_cmd(ar->wmi, vif->fw_vif_idx, freq,
3081                                                  mgmt->da, p2p, p2p_len);
3082         kfree(p2p);
3083         return ret;
3084 }
3085
3086 static bool ath6kl_mgmt_powersave_ap(struct ath6kl_vif *vif,
3087                                      u32 id,
3088                                      u32 freq,
3089                                      u32 wait,
3090                                      const u8 *buf,
3091                                      size_t len,
3092                                      bool *more_data,
3093                                      bool no_cck)
3094 {
3095         struct ieee80211_mgmt *mgmt;
3096         struct ath6kl_sta *conn;
3097         bool is_psq_empty = false;
3098         struct ath6kl_mgmt_buff *mgmt_buf;
3099         size_t mgmt_buf_size;
3100         struct ath6kl *ar = vif->ar;
3101
3102         mgmt = (struct ieee80211_mgmt *) buf;
3103         if (is_multicast_ether_addr(mgmt->da))
3104                 return false;
3105
3106         conn = ath6kl_find_sta(vif, mgmt->da);
3107         if (!conn)
3108                 return false;
3109
3110         if (conn->sta_flags & STA_PS_SLEEP) {
3111                 if (!(conn->sta_flags & STA_PS_POLLED)) {
3112                         /* Queue the frames if the STA is sleeping */
3113                         mgmt_buf_size = len + sizeof(struct ath6kl_mgmt_buff);
3114                         mgmt_buf = kmalloc(mgmt_buf_size, GFP_KERNEL);
3115                         if (!mgmt_buf)
3116                                 return false;
3117
3118                         INIT_LIST_HEAD(&mgmt_buf->list);
3119                         mgmt_buf->id = id;
3120                         mgmt_buf->freq = freq;
3121                         mgmt_buf->wait = wait;
3122                         mgmt_buf->len = len;
3123                         mgmt_buf->no_cck = no_cck;
3124                         memcpy(mgmt_buf->buf, buf, len);
3125                         spin_lock_bh(&conn->psq_lock);
3126                         is_psq_empty = skb_queue_empty(&conn->psq) &&
3127                                         (conn->mgmt_psq_len == 0);
3128                         list_add_tail(&mgmt_buf->list, &conn->mgmt_psq);
3129                         conn->mgmt_psq_len++;
3130                         spin_unlock_bh(&conn->psq_lock);
3131
3132                         /*
3133                          * If this is the first pkt getting queued
3134                          * for this STA, update the PVB for this
3135                          * STA.
3136                          */
3137                         if (is_psq_empty)
3138                                 ath6kl_wmi_set_pvb_cmd(ar->wmi, vif->fw_vif_idx,
3139                                                        conn->aid, 1);
3140                         return true;
3141                 }
3142
3143                 /*
3144                  * This tx is because of a PsPoll.
3145                  * Determine if MoreData bit has to be set.
3146                  */
3147                 spin_lock_bh(&conn->psq_lock);
3148                 if (!skb_queue_empty(&conn->psq) || (conn->mgmt_psq_len != 0))
3149                         *more_data = true;
3150                 spin_unlock_bh(&conn->psq_lock);
3151         }
3152
3153         return false;
3154 }
3155
3156 /* Check if SSID length is greater than DIRECT- */
3157 static bool ath6kl_is_p2p_go_ssid(const u8 *buf, size_t len)
3158 {
3159         const struct ieee80211_mgmt *mgmt;
3160         mgmt = (const struct ieee80211_mgmt *) buf;
3161
3162         /* variable[1] contains the SSID tag length */
3163         if (buf + len >= &mgmt->u.probe_resp.variable[1] &&
3164             (mgmt->u.probe_resp.variable[1] > P2P_WILDCARD_SSID_LEN)) {
3165                 return true;
3166         }
3167
3168         return false;
3169 }
3170
3171 static int ath6kl_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
3172                           struct cfg80211_mgmt_tx_params *params, u64 *cookie)
3173 {
3174         struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3175         struct ath6kl *ar = ath6kl_priv(vif->ndev);
3176         struct ieee80211_channel *chan = params->chan;
3177         const u8 *buf = params->buf;
3178         size_t len = params->len;
3179         unsigned int wait = params->wait;
3180         bool no_cck = params->no_cck;
3181         u32 id, freq;
3182         const struct ieee80211_mgmt *mgmt;
3183         bool more_data, queued;
3184
3185         /* default to the current channel, but use the one specified as argument
3186          * if any
3187          */
3188         freq = vif->ch_hint;
3189         if (chan)
3190                 freq = chan->center_freq;
3191
3192         /* never send freq zero to the firmware */
3193         if (WARN_ON(freq == 0))
3194                 return -EINVAL;
3195
3196         mgmt = (const struct ieee80211_mgmt *) buf;
3197         if (vif->nw_type == AP_NETWORK && test_bit(CONNECTED, &vif->flags) &&
3198             ieee80211_is_probe_resp(mgmt->frame_control) &&
3199             ath6kl_is_p2p_go_ssid(buf, len)) {
3200                 /*
3201                  * Send Probe Response frame in GO mode using a separate WMI
3202                  * command to allow the target to fill in the generic IEs.
3203                  */
3204                 *cookie = 0; /* TX status not supported */
3205                 return ath6kl_send_go_probe_resp(vif, buf, len, freq);
3206         }
3207
3208         id = vif->send_action_id++;
3209         if (id == 0) {
3210                 /*
3211                  * 0 is a reserved value in the WMI command and shall not be
3212                  * used for the command.
3213                  */
3214                 id = vif->send_action_id++;
3215         }
3216
3217         *cookie = id;
3218
3219         /* AP mode Power saving processing */
3220         if (vif->nw_type == AP_NETWORK) {
3221                 queued = ath6kl_mgmt_powersave_ap(vif, id, freq, wait, buf, len,
3222                                                   &more_data, no_cck);
3223                 if (queued)
3224                         return 0;
3225         }
3226
3227         return ath6kl_wmi_send_mgmt_cmd(ar->wmi, vif->fw_vif_idx, id, freq,
3228                                         wait, buf, len, no_cck);
3229 }
3230
3231 static void ath6kl_mgmt_frame_register(struct wiphy *wiphy,
3232                                        struct wireless_dev *wdev,
3233                                        u16 frame_type, bool reg)
3234 {
3235         struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3236
3237         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: frame_type=0x%x reg=%d\n",
3238                    __func__, frame_type, reg);
3239         if (frame_type == IEEE80211_STYPE_PROBE_REQ) {
3240                 /*
3241                  * Note: This notification callback is not allowed to sleep, so
3242                  * we cannot send WMI_PROBE_REQ_REPORT_CMD here. Instead, we
3243                  * hardcode target to report Probe Request frames all the time.
3244                  */
3245                 vif->probe_req_report = reg;
3246         }
3247 }
3248
3249 static int ath6kl_cfg80211_sscan_start(struct wiphy *wiphy,
3250                         struct net_device *dev,
3251                         struct cfg80211_sched_scan_request *request)
3252 {
3253         struct ath6kl *ar = ath6kl_priv(dev);
3254         struct ath6kl_vif *vif = netdev_priv(dev);
3255         u16 interval;
3256         int ret, rssi_thold;
3257         int n_match_sets = request->n_match_sets;
3258
3259         /*
3260          * If there's a matchset w/o an SSID, then assume it's just for
3261          * the RSSI (nothing else is currently supported) and ignore it.
3262          * The device only supports a global RSSI filter that we set below.
3263          */
3264         if (n_match_sets == 1 && !request->match_sets[0].ssid.ssid_len)
3265                 n_match_sets = 0;
3266
3267         if (ar->state != ATH6KL_STATE_ON)
3268                 return -EIO;
3269
3270         if (vif->sme_state != SME_DISCONNECTED)
3271                 return -EBUSY;
3272
3273         ath6kl_cfg80211_scan_complete_event(vif, true);
3274
3275         ret = ath6kl_set_probed_ssids(ar, vif, request->ssids,
3276                                       request->n_ssids,
3277                                       request->match_sets,
3278                                       n_match_sets);
3279         if (ret < 0)
3280                 return ret;
3281
3282         if (!n_match_sets) {
3283                 ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
3284                                                ALL_BSS_FILTER, 0);
3285                 if (ret < 0)
3286                         return ret;
3287         } else {
3288                  ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
3289                                                 MATCHED_SSID_FILTER, 0);
3290                 if (ret < 0)
3291                         return ret;
3292         }
3293
3294         if (test_bit(ATH6KL_FW_CAPABILITY_RSSI_SCAN_THOLD,
3295                      ar->fw_capabilities)) {
3296                 if (request->min_rssi_thold <= NL80211_SCAN_RSSI_THOLD_OFF)
3297                         rssi_thold = 0;
3298                 else if (request->min_rssi_thold < -127)
3299                         rssi_thold = -127;
3300                 else
3301                         rssi_thold = request->min_rssi_thold;
3302
3303                 ret = ath6kl_wmi_set_rssi_filter_cmd(ar->wmi, vif->fw_vif_idx,
3304                                                      rssi_thold);
3305                 if (ret) {
3306                         ath6kl_err("failed to set RSSI threshold for scan\n");
3307                         return ret;
3308                 }
3309         }
3310
3311         /* fw uses seconds, also make sure that it's >0 */
3312         interval = max_t(u16, 1, request->interval / 1000);
3313
3314         ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
3315                                   interval, interval,
3316                                   vif->bg_scan_period, 0, 0, 0, 3, 0, 0, 0);
3317
3318         /* this also clears IE in fw if it's not set */
3319         ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
3320                                        WMI_FRAME_PROBE_REQ,
3321                                        request->ie, request->ie_len);
3322         if (ret) {
3323                 ath6kl_warn("Failed to set probe request IE for scheduled scan: %d\n",
3324                             ret);
3325                 return ret;
3326         }
3327
3328         ret = ath6kl_wmi_enable_sched_scan_cmd(ar->wmi, vif->fw_vif_idx, true);
3329         if (ret)
3330                 return ret;
3331
3332         set_bit(SCHED_SCANNING, &vif->flags);
3333
3334         return 0;
3335 }
3336
3337 static int ath6kl_cfg80211_sscan_stop(struct wiphy *wiphy,
3338                                       struct net_device *dev)
3339 {
3340         struct ath6kl_vif *vif = netdev_priv(dev);
3341         bool stopped;
3342
3343         stopped = __ath6kl_cfg80211_sscan_stop(vif);
3344
3345         if (!stopped)
3346                 return -EIO;
3347
3348         return 0;
3349 }
3350
3351 static int ath6kl_cfg80211_set_bitrate(struct wiphy *wiphy,
3352                                        struct net_device *dev,
3353                                        const u8 *addr,
3354                                        const struct cfg80211_bitrate_mask *mask)
3355 {
3356         struct ath6kl *ar = ath6kl_priv(dev);
3357         struct ath6kl_vif *vif = netdev_priv(dev);
3358
3359         return ath6kl_wmi_set_bitrate_mask(ar->wmi, vif->fw_vif_idx,
3360                                            mask);
3361 }
3362
3363 static int ath6kl_cfg80211_set_txe_config(struct wiphy *wiphy,
3364                                           struct net_device *dev,
3365                                           u32 rate, u32 pkts, u32 intvl)
3366 {
3367         struct ath6kl *ar = ath6kl_priv(dev);
3368         struct ath6kl_vif *vif = netdev_priv(dev);
3369
3370         if (vif->nw_type != INFRA_NETWORK ||
3371             !test_bit(ATH6KL_FW_CAPABILITY_TX_ERR_NOTIFY, ar->fw_capabilities))
3372                 return -EOPNOTSUPP;
3373
3374         if (vif->sme_state != SME_CONNECTED)
3375                 return -ENOTCONN;
3376
3377         /* save this since the firmware won't report the interval */
3378         vif->txe_intvl = intvl;
3379
3380         return ath6kl_wmi_set_txe_notify(ar->wmi, vif->fw_vif_idx,
3381                                          rate, pkts, intvl);
3382 }
3383
3384 static const struct ieee80211_txrx_stypes
3385 ath6kl_mgmt_stypes[NUM_NL80211_IFTYPES] = {
3386         [NL80211_IFTYPE_STATION] = {
3387                 .tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3388                 BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3389                 .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3390                 BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3391         },
3392         [NL80211_IFTYPE_AP] = {
3393                 .tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3394                 BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3395                 .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3396                 BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3397         },
3398         [NL80211_IFTYPE_P2P_CLIENT] = {
3399                 .tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3400                 BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3401                 .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3402                 BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3403         },
3404         [NL80211_IFTYPE_P2P_GO] = {
3405                 .tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3406                 BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3407                 .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3408                 BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3409         },
3410 };
3411
3412 static struct cfg80211_ops ath6kl_cfg80211_ops = {
3413         .add_virtual_intf = ath6kl_cfg80211_add_iface,
3414         .del_virtual_intf = ath6kl_cfg80211_del_iface,
3415         .change_virtual_intf = ath6kl_cfg80211_change_iface,
3416         .scan = ath6kl_cfg80211_scan,
3417         .connect = ath6kl_cfg80211_connect,
3418         .disconnect = ath6kl_cfg80211_disconnect,
3419         .add_key = ath6kl_cfg80211_add_key,
3420         .get_key = ath6kl_cfg80211_get_key,
3421         .del_key = ath6kl_cfg80211_del_key,
3422         .set_default_key = ath6kl_cfg80211_set_default_key,
3423         .set_wiphy_params = ath6kl_cfg80211_set_wiphy_params,
3424         .set_tx_power = ath6kl_cfg80211_set_txpower,
3425         .get_tx_power = ath6kl_cfg80211_get_txpower,
3426         .set_power_mgmt = ath6kl_cfg80211_set_power_mgmt,
3427         .join_ibss = ath6kl_cfg80211_join_ibss,
3428         .leave_ibss = ath6kl_cfg80211_leave_ibss,
3429         .get_station = ath6kl_get_station,
3430         .set_pmksa = ath6kl_set_pmksa,
3431         .del_pmksa = ath6kl_del_pmksa,
3432         .flush_pmksa = ath6kl_flush_pmksa,
3433         CFG80211_TESTMODE_CMD(ath6kl_tm_cmd)
3434 #ifdef CONFIG_PM
3435         .suspend = __ath6kl_cfg80211_suspend,
3436         .resume = __ath6kl_cfg80211_resume,
3437 #endif
3438         .start_ap = ath6kl_start_ap,
3439         .change_beacon = ath6kl_change_beacon,
3440         .stop_ap = ath6kl_stop_ap,
3441         .del_station = ath6kl_del_station,
3442         .change_station = ath6kl_change_station,
3443         .remain_on_channel = ath6kl_remain_on_channel,
3444         .cancel_remain_on_channel = ath6kl_cancel_remain_on_channel,
3445         .mgmt_tx = ath6kl_mgmt_tx,
3446         .mgmt_frame_register = ath6kl_mgmt_frame_register,
3447         .sched_scan_start = ath6kl_cfg80211_sscan_start,
3448         .sched_scan_stop = ath6kl_cfg80211_sscan_stop,
3449         .set_bitrate_mask = ath6kl_cfg80211_set_bitrate,
3450         .set_cqm_txe_config = ath6kl_cfg80211_set_txe_config,
3451 };
3452
3453 void ath6kl_cfg80211_stop(struct ath6kl_vif *vif)
3454 {
3455         ath6kl_cfg80211_sscan_disable(vif);
3456
3457         switch (vif->sme_state) {
3458         case SME_DISCONNECTED:
3459                 break;
3460         case SME_CONNECTING:
3461                 cfg80211_connect_result(vif->ndev, vif->bssid, NULL, 0,
3462                                         NULL, 0,
3463                                         WLAN_STATUS_UNSPECIFIED_FAILURE,
3464                                         GFP_KERNEL);
3465                 break;
3466         case SME_CONNECTED:
3467                 cfg80211_disconnected(vif->ndev, 0, NULL, 0, GFP_KERNEL);
3468                 break;
3469         }
3470
3471         if (vif->ar->state != ATH6KL_STATE_RECOVERY &&
3472             (test_bit(CONNECTED, &vif->flags) ||
3473             test_bit(CONNECT_PEND, &vif->flags)))
3474                 ath6kl_wmi_disconnect_cmd(vif->ar->wmi, vif->fw_vif_idx);
3475
3476         vif->sme_state = SME_DISCONNECTED;
3477         clear_bit(CONNECTED, &vif->flags);
3478         clear_bit(CONNECT_PEND, &vif->flags);
3479
3480         /* Stop netdev queues, needed during recovery */
3481         netif_stop_queue(vif->ndev);
3482         netif_carrier_off(vif->ndev);
3483
3484         /* disable scanning */
3485         if (vif->ar->state != ATH6KL_STATE_RECOVERY &&
3486             ath6kl_wmi_scanparams_cmd(vif->ar->wmi, vif->fw_vif_idx, 0xFFFF,
3487                                       0, 0, 0, 0, 0, 0, 0, 0, 0) != 0)
3488                 ath6kl_warn("failed to disable scan during stop\n");
3489
3490         ath6kl_cfg80211_scan_complete_event(vif, true);
3491 }
3492
3493 void ath6kl_cfg80211_stop_all(struct ath6kl *ar)
3494 {
3495         struct ath6kl_vif *vif;
3496
3497         vif = ath6kl_vif_first(ar);
3498         if (!vif && ar->state != ATH6KL_STATE_RECOVERY) {
3499                 /* save the current power mode before enabling power save */
3500                 ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
3501
3502                 if (ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER) != 0)
3503                         ath6kl_warn("ath6kl_deep_sleep_enable: wmi_powermode_cmd failed\n");
3504                 return;
3505         }
3506
3507         /*
3508          * FIXME: we should take ar->list_lock to protect changes in the
3509          * vif_list, but that's not trivial to do as ath6kl_cfg80211_stop()
3510          * sleeps.
3511          */
3512         list_for_each_entry(vif, &ar->vif_list, list)
3513                 ath6kl_cfg80211_stop(vif);
3514 }
3515
3516 static void ath6kl_cfg80211_reg_notify(struct wiphy *wiphy,
3517                                        struct regulatory_request *request)
3518 {
3519         struct ath6kl *ar = wiphy_priv(wiphy);
3520         u32 rates[IEEE80211_NUM_BANDS];
3521         int ret, i;
3522
3523         ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
3524                    "cfg reg_notify %c%c%s%s initiator %d hint_type %d\n",
3525                    request->alpha2[0], request->alpha2[1],
3526                    request->intersect ? " intersect" : "",
3527                    request->processed ? " processed" : "",
3528                    request->initiator, request->user_reg_hint_type);
3529
3530         if (request->user_reg_hint_type != NL80211_USER_REG_HINT_CELL_BASE)
3531                 return;
3532
3533         ret = ath6kl_wmi_set_regdomain_cmd(ar->wmi, request->alpha2);
3534         if (ret) {
3535                 ath6kl_err("failed to set regdomain: %d\n", ret);
3536                 return;
3537         }
3538
3539         /*
3540          * Firmware will apply the regdomain change only after a scan is
3541          * issued and it will send a WMI_REGDOMAIN_EVENTID when it has been
3542          * changed.
3543          */
3544
3545         for (i = 0; i < IEEE80211_NUM_BANDS; i++)
3546                 if (wiphy->bands[i])
3547                         rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1;
3548
3549
3550         ret = ath6kl_wmi_beginscan_cmd(ar->wmi, 0, WMI_LONG_SCAN, false,
3551                                        false, 0, ATH6KL_FG_SCAN_INTERVAL,
3552                                        0, NULL, false, rates);
3553         if (ret) {
3554                 ath6kl_err("failed to start scan for a regdomain change: %d\n",
3555                            ret);
3556                 return;
3557         }
3558 }
3559
3560 static int ath6kl_cfg80211_vif_init(struct ath6kl_vif *vif)
3561 {
3562         vif->aggr_cntxt = aggr_init(vif);
3563         if (!vif->aggr_cntxt) {
3564                 ath6kl_err("failed to initialize aggr\n");
3565                 return -ENOMEM;
3566         }
3567
3568         setup_timer(&vif->disconnect_timer, disconnect_timer_handler,
3569                     (unsigned long) vif->ndev);
3570         setup_timer(&vif->sched_scan_timer, ath6kl_wmi_sscan_timer,
3571                     (unsigned long) vif);
3572
3573         set_bit(WMM_ENABLED, &vif->flags);
3574         spin_lock_init(&vif->if_lock);
3575
3576         INIT_LIST_HEAD(&vif->mc_filter);
3577
3578         return 0;
3579 }
3580
3581 void ath6kl_cfg80211_vif_stop(struct ath6kl_vif *vif, bool wmi_ready)
3582 {
3583         static u8 bcast_mac[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
3584         bool discon_issued;
3585
3586         netif_stop_queue(vif->ndev);
3587
3588         clear_bit(WLAN_ENABLED, &vif->flags);
3589
3590         if (wmi_ready) {
3591                 discon_issued = test_bit(CONNECTED, &vif->flags) ||
3592                                 test_bit(CONNECT_PEND, &vif->flags);
3593                 ath6kl_disconnect(vif);
3594                 del_timer(&vif->disconnect_timer);
3595
3596                 if (discon_issued)
3597                         ath6kl_disconnect_event(vif, DISCONNECT_CMD,
3598                                                 (vif->nw_type & AP_NETWORK) ?
3599                                                 bcast_mac : vif->bssid,
3600                                                 0, NULL, 0);
3601         }
3602
3603         if (vif->scan_req) {
3604                 cfg80211_scan_done(vif->scan_req, true);
3605                 vif->scan_req = NULL;
3606         }
3607
3608         /* need to clean up enhanced bmiss detection fw state */
3609         ath6kl_cfg80211_sta_bmiss_enhance(vif, false);
3610 }
3611
3612 void ath6kl_cfg80211_vif_cleanup(struct ath6kl_vif *vif)
3613 {
3614         struct ath6kl *ar = vif->ar;
3615         struct ath6kl_mc_filter *mc_filter, *tmp;
3616
3617         aggr_module_destroy(vif->aggr_cntxt);
3618
3619         ar->avail_idx_map |= BIT(vif->fw_vif_idx);
3620
3621         if (vif->nw_type == ADHOC_NETWORK)
3622                 ar->ibss_if_active = false;
3623
3624         list_for_each_entry_safe(mc_filter, tmp, &vif->mc_filter, list) {
3625                 list_del(&mc_filter->list);
3626                 kfree(mc_filter);
3627         }
3628
3629         unregister_netdevice(vif->ndev);
3630
3631         ar->num_vif--;
3632 }
3633
3634 struct wireless_dev *ath6kl_interface_add(struct ath6kl *ar, const char *name,
3635                                           enum nl80211_iftype type,
3636                                           u8 fw_vif_idx, u8 nw_type)
3637 {
3638         struct net_device *ndev;
3639         struct ath6kl_vif *vif;
3640
3641         ndev = alloc_netdev(sizeof(*vif), name, NET_NAME_UNKNOWN, ether_setup);
3642         if (!ndev)
3643                 return NULL;
3644
3645         vif = netdev_priv(ndev);
3646         ndev->ieee80211_ptr = &vif->wdev;
3647         vif->wdev.wiphy = ar->wiphy;
3648         vif->ar = ar;
3649         vif->ndev = ndev;
3650         SET_NETDEV_DEV(ndev, wiphy_dev(vif->wdev.wiphy));
3651         vif->wdev.netdev = ndev;
3652         vif->wdev.iftype = type;
3653         vif->fw_vif_idx = fw_vif_idx;
3654         vif->nw_type = nw_type;
3655         vif->next_mode = nw_type;
3656         vif->listen_intvl_t = ATH6KL_DEFAULT_LISTEN_INTVAL;
3657         vif->bmiss_time_t = ATH6KL_DEFAULT_BMISS_TIME;
3658         vif->bg_scan_period = 0;
3659         vif->htcap[IEEE80211_BAND_2GHZ].ht_enable = true;
3660         vif->htcap[IEEE80211_BAND_5GHZ].ht_enable = true;
3661
3662         memcpy(ndev->dev_addr, ar->mac_addr, ETH_ALEN);
3663         if (fw_vif_idx != 0) {
3664                 ndev->dev_addr[0] = (ndev->dev_addr[0] ^ (1 << fw_vif_idx)) |
3665                                      0x2;
3666                 if (test_bit(ATH6KL_FW_CAPABILITY_CUSTOM_MAC_ADDR,
3667                              ar->fw_capabilities))
3668                         ndev->dev_addr[4] ^= 0x80;
3669         }
3670
3671         init_netdev(ndev);
3672
3673         ath6kl_init_control_info(vif);
3674
3675         if (ath6kl_cfg80211_vif_init(vif))
3676                 goto err;
3677
3678         if (register_netdevice(ndev))
3679                 goto err;
3680
3681         ar->avail_idx_map &= ~BIT(fw_vif_idx);
3682         vif->sme_state = SME_DISCONNECTED;
3683         set_bit(WLAN_ENABLED, &vif->flags);
3684         ar->wlan_pwr_state = WLAN_POWER_STATE_ON;
3685
3686         if (type == NL80211_IFTYPE_ADHOC)
3687                 ar->ibss_if_active = true;
3688
3689         spin_lock_bh(&ar->list_lock);
3690         list_add_tail(&vif->list, &ar->vif_list);
3691         spin_unlock_bh(&ar->list_lock);
3692
3693         return &vif->wdev;
3694
3695 err:
3696         aggr_module_destroy(vif->aggr_cntxt);
3697         free_netdev(ndev);
3698         return NULL;
3699 }
3700
3701 #ifdef CONFIG_PM
3702 static const struct wiphy_wowlan_support ath6kl_wowlan_support = {
3703         .flags = WIPHY_WOWLAN_MAGIC_PKT |
3704                  WIPHY_WOWLAN_DISCONNECT |
3705                  WIPHY_WOWLAN_GTK_REKEY_FAILURE  |
3706                  WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
3707                  WIPHY_WOWLAN_EAP_IDENTITY_REQ   |
3708                  WIPHY_WOWLAN_4WAY_HANDSHAKE,
3709         .n_patterns = WOW_MAX_FILTERS_PER_LIST,
3710         .pattern_min_len = 1,
3711         .pattern_max_len = WOW_PATTERN_SIZE,
3712 };
3713 #endif
3714
3715 int ath6kl_cfg80211_init(struct ath6kl *ar)
3716 {
3717         struct wiphy *wiphy = ar->wiphy;
3718         bool band_2gig = false, band_5gig = false, ht = false;
3719         int ret;
3720
3721         wiphy->mgmt_stypes = ath6kl_mgmt_stypes;
3722
3723         wiphy->max_remain_on_channel_duration = 5000;
3724
3725         /* set device pointer for wiphy */
3726         set_wiphy_dev(wiphy, ar->dev);
3727
3728         wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
3729                                  BIT(NL80211_IFTYPE_ADHOC) |
3730                                  BIT(NL80211_IFTYPE_AP);
3731         if (ar->p2p) {
3732                 wiphy->interface_modes |= BIT(NL80211_IFTYPE_P2P_GO) |
3733                                           BIT(NL80211_IFTYPE_P2P_CLIENT);
3734         }
3735
3736         if (config_enabled(CONFIG_ATH6KL_REGDOMAIN) &&
3737             test_bit(ATH6KL_FW_CAPABILITY_REGDOMAIN, ar->fw_capabilities)) {
3738                 wiphy->reg_notifier = ath6kl_cfg80211_reg_notify;
3739                 ar->wiphy->features |= NL80211_FEATURE_CELL_BASE_REG_HINTS;
3740         }
3741
3742         /* max num of ssids that can be probed during scanning */
3743         wiphy->max_scan_ssids = MAX_PROBED_SSIDS;
3744
3745         /* max num of ssids that can be matched after scan */
3746         if (test_bit(ATH6KL_FW_CAPABILITY_SCHED_SCAN_MATCH_LIST,
3747                      ar->fw_capabilities))
3748                 wiphy->max_match_sets = MAX_PROBED_SSIDS;
3749
3750         wiphy->max_scan_ie_len = 1000; /* FIX: what is correct limit? */
3751         switch (ar->hw.cap) {
3752         case WMI_11AN_CAP:
3753                 ht = true;
3754         case WMI_11A_CAP:
3755                 band_5gig = true;
3756                 break;
3757         case WMI_11GN_CAP:
3758                 ht = true;
3759         case WMI_11G_CAP:
3760                 band_2gig = true;
3761                 break;
3762         case WMI_11AGN_CAP:
3763                 ht = true;
3764         case WMI_11AG_CAP:
3765                 band_2gig = true;
3766                 band_5gig = true;
3767                 break;
3768         default:
3769                 ath6kl_err("invalid phy capability!\n");
3770                 return -EINVAL;
3771         }
3772
3773         /*
3774          * Even if the fw has HT support, advertise HT cap only when
3775          * the firmware has support to override RSN capability, otherwise
3776          * 4-way handshake would fail.
3777          */
3778         if (!(ht &&
3779               test_bit(ATH6KL_FW_CAPABILITY_RSN_CAP_OVERRIDE,
3780                        ar->fw_capabilities))) {
3781                 ath6kl_band_2ghz.ht_cap.cap = 0;
3782                 ath6kl_band_2ghz.ht_cap.ht_supported = false;
3783                 ath6kl_band_5ghz.ht_cap.cap = 0;
3784                 ath6kl_band_5ghz.ht_cap.ht_supported = false;
3785         }
3786
3787         if (test_bit(ATH6KL_FW_CAPABILITY_64BIT_RATES,
3788                      ar->fw_capabilities)) {
3789                 ath6kl_band_2ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3790                 ath6kl_band_5ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3791                 ath6kl_band_2ghz.ht_cap.mcs.rx_mask[1] = 0xff;
3792                 ath6kl_band_5ghz.ht_cap.mcs.rx_mask[1] = 0xff;
3793         } else {
3794                 ath6kl_band_2ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3795                 ath6kl_band_5ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3796         }
3797
3798         if (band_2gig)
3799                 wiphy->bands[IEEE80211_BAND_2GHZ] = &ath6kl_band_2ghz;
3800         if (band_5gig)
3801                 wiphy->bands[IEEE80211_BAND_5GHZ] = &ath6kl_band_5ghz;
3802
3803         wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
3804
3805         wiphy->cipher_suites = cipher_suites;
3806         wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
3807
3808 #ifdef CONFIG_PM
3809         wiphy->wowlan = &ath6kl_wowlan_support;
3810 #endif
3811
3812         wiphy->max_sched_scan_ssids = MAX_PROBED_SSIDS;
3813
3814         ar->wiphy->flags |= WIPHY_FLAG_SUPPORTS_FW_ROAM |
3815                             WIPHY_FLAG_HAVE_AP_SME |
3816                             WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL |
3817                             WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD;
3818
3819         if (test_bit(ATH6KL_FW_CAPABILITY_SCHED_SCAN_V2, ar->fw_capabilities))
3820                 ar->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
3821
3822         if (test_bit(ATH6KL_FW_CAPABILITY_INACTIVITY_TIMEOUT,
3823                      ar->fw_capabilities))
3824                 ar->wiphy->features |= NL80211_FEATURE_INACTIVITY_TIMER;
3825
3826         ar->wiphy->probe_resp_offload =
3827                 NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS |
3828                 NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS2 |
3829                 NL80211_PROBE_RESP_OFFLOAD_SUPPORT_P2P;
3830
3831         ret = wiphy_register(wiphy);
3832         if (ret < 0) {
3833                 ath6kl_err("couldn't register wiphy device\n");
3834                 return ret;
3835         }
3836
3837         ar->wiphy_registered = true;
3838
3839         return 0;
3840 }
3841
3842 void ath6kl_cfg80211_cleanup(struct ath6kl *ar)
3843 {
3844         wiphy_unregister(ar->wiphy);
3845
3846         ar->wiphy_registered = false;
3847 }
3848
3849 struct ath6kl *ath6kl_cfg80211_create(void)
3850 {
3851         struct ath6kl *ar;
3852         struct wiphy *wiphy;
3853
3854         /* create a new wiphy for use with cfg80211 */
3855         wiphy = wiphy_new(&ath6kl_cfg80211_ops, sizeof(struct ath6kl));
3856
3857         if (!wiphy) {
3858                 ath6kl_err("couldn't allocate wiphy device\n");
3859                 return NULL;
3860         }
3861
3862         ar = wiphy_priv(wiphy);
3863         ar->wiphy = wiphy;
3864
3865         return ar;
3866 }
3867
3868 /* Note: ar variable must not be accessed after calling this! */
3869 void ath6kl_cfg80211_destroy(struct ath6kl *ar)
3870 {
3871         int i;
3872
3873         for (i = 0; i < AP_MAX_NUM_STA; i++)
3874                 kfree(ar->sta_list[i].aggr_conn);
3875
3876         wiphy_free(ar->wiphy);
3877 }
3878