1 /*
2  * Marvell Wireless LAN device driver: functions for station ioctl
3  *
4  * Copyright (C) 2011-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27 #include "cfg80211.h"
28 
29 static int disconnect_on_suspend;
30 module_param(disconnect_on_suspend, int, 0644);
31 
32 /*
33  * Copies the multicast address list from device to driver.
34  *
35  * This function does not validate the destination memory for
36  * size, and the calling function must ensure enough memory is
37  * available.
38  */
mwifiex_copy_mcast_addr(struct mwifiex_multicast_list * mlist,struct net_device * dev)39 int mwifiex_copy_mcast_addr(struct mwifiex_multicast_list *mlist,
40 			    struct net_device *dev)
41 {
42 	int i = 0;
43 	struct netdev_hw_addr *ha;
44 
45 	netdev_for_each_mc_addr(ha, dev)
46 		memcpy(&mlist->mac_list[i++], ha->addr, ETH_ALEN);
47 
48 	return i;
49 }
50 
51 /*
52  * Wait queue completion handler.
53  *
54  * This function waits on a cmd wait queue. It also cancels the pending
55  * request after waking up, in case of errors.
56  */
mwifiex_wait_queue_complete(struct mwifiex_adapter * adapter,struct cmd_ctrl_node * cmd_queued)57 int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter,
58 				struct cmd_ctrl_node *cmd_queued)
59 {
60 	int status;
61 
62 	/* Wait for completion */
63 	status = wait_event_interruptible_timeout(adapter->cmd_wait_q.wait,
64 						  *(cmd_queued->condition),
65 						  (12 * HZ));
66 	if (status <= 0) {
67 		if (status == 0)
68 			status = -ETIMEDOUT;
69 		mwifiex_dbg(adapter, ERROR, "cmd_wait_q terminated: %d\n",
70 			    status);
71 		mwifiex_cancel_all_pending_cmd(adapter);
72 		return status;
73 	}
74 
75 	status = adapter->cmd_wait_q.status;
76 	adapter->cmd_wait_q.status = 0;
77 
78 	return status;
79 }
80 
81 /*
82  * This function prepares the correct firmware command and
83  * issues it to set the multicast list.
84  *
85  * This function can be used to enable promiscuous mode, or enable all
86  * multicast packets, or to enable selective multicast.
87  */
mwifiex_request_set_multicast_list(struct mwifiex_private * priv,struct mwifiex_multicast_list * mcast_list)88 int mwifiex_request_set_multicast_list(struct mwifiex_private *priv,
89 				struct mwifiex_multicast_list *mcast_list)
90 {
91 	int ret = 0;
92 	u16 old_pkt_filter;
93 
94 	old_pkt_filter = priv->curr_pkt_filter;
95 
96 	if (mcast_list->mode == MWIFIEX_PROMISC_MODE) {
97 		mwifiex_dbg(priv->adapter, INFO,
98 			    "info: Enable Promiscuous mode\n");
99 		priv->curr_pkt_filter |= HostCmd_ACT_MAC_PROMISCUOUS_ENABLE;
100 		priv->curr_pkt_filter &=
101 			~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
102 	} else {
103 		/* Multicast */
104 		priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_PROMISCUOUS_ENABLE;
105 		if (mcast_list->mode == MWIFIEX_ALL_MULTI_MODE) {
106 			mwifiex_dbg(priv->adapter, INFO,
107 				    "info: Enabling All Multicast!\n");
108 			priv->curr_pkt_filter |=
109 				HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
110 		} else {
111 			priv->curr_pkt_filter &=
112 				~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
113 			mwifiex_dbg(priv->adapter, INFO,
114 				    "info: Set multicast list=%d\n",
115 				    mcast_list->num_multicast_addr);
116 			/* Send multicast addresses to firmware */
117 			ret = mwifiex_send_cmd(priv,
118 					       HostCmd_CMD_MAC_MULTICAST_ADR,
119 					       HostCmd_ACT_GEN_SET, 0,
120 					       mcast_list, false);
121 		}
122 	}
123 	mwifiex_dbg(priv->adapter, INFO,
124 		    "info: old_pkt_filter=%#x, curr_pkt_filter=%#x\n",
125 		    old_pkt_filter, priv->curr_pkt_filter);
126 	if (old_pkt_filter != priv->curr_pkt_filter) {
127 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_MAC_CONTROL,
128 				       HostCmd_ACT_GEN_SET,
129 				       0, &priv->curr_pkt_filter, false);
130 	}
131 
132 	return ret;
133 }
134 
135 /*
136  * This function fills bss descriptor structure using provided
137  * information.
138  * beacon_ie buffer is allocated in this function. It is caller's
139  * responsibility to free the memory.
140  */
mwifiex_fill_new_bss_desc(struct mwifiex_private * priv,struct cfg80211_bss * bss,struct mwifiex_bssdescriptor * bss_desc)141 int mwifiex_fill_new_bss_desc(struct mwifiex_private *priv,
142 			      struct cfg80211_bss *bss,
143 			      struct mwifiex_bssdescriptor *bss_desc)
144 {
145 	u8 *beacon_ie;
146 	size_t beacon_ie_len;
147 	struct mwifiex_bss_priv *bss_priv = (void *)bss->priv;
148 	const struct cfg80211_bss_ies *ies;
149 
150 	rcu_read_lock();
151 	ies = rcu_dereference(bss->ies);
152 	beacon_ie = kmemdup(ies->data, ies->len, GFP_ATOMIC);
153 	beacon_ie_len = ies->len;
154 	bss_desc->timestamp = ies->tsf;
155 	rcu_read_unlock();
156 
157 	if (!beacon_ie) {
158 		mwifiex_dbg(priv->adapter, ERROR,
159 			    " failed to alloc beacon_ie\n");
160 		return -ENOMEM;
161 	}
162 
163 	memcpy(bss_desc->mac_address, bss->bssid, ETH_ALEN);
164 	bss_desc->rssi = bss->signal;
165 	/* The caller of this function will free beacon_ie */
166 	bss_desc->beacon_buf = beacon_ie;
167 	bss_desc->beacon_buf_size = beacon_ie_len;
168 	bss_desc->beacon_period = bss->beacon_interval;
169 	bss_desc->cap_info_bitmap = bss->capability;
170 	bss_desc->bss_band = bss_priv->band;
171 	bss_desc->fw_tsf = bss_priv->fw_tsf;
172 	if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_PRIVACY) {
173 		mwifiex_dbg(priv->adapter, INFO,
174 			    "info: InterpretIE: AP WEP enabled\n");
175 		bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_8021X_WEP;
176 	} else {
177 		bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_ACCEPT_ALL;
178 	}
179 	if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_IBSS)
180 		bss_desc->bss_mode = NL80211_IFTYPE_ADHOC;
181 	else
182 		bss_desc->bss_mode = NL80211_IFTYPE_STATION;
183 
184 	/* Disable 11ac by default. Enable it only where there
185 	 * exist VHT_CAP IE in AP beacon
186 	 */
187 	bss_desc->disable_11ac = true;
188 
189 	if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_SPECTRUM_MGMT)
190 		bss_desc->sensed_11h = true;
191 
192 	return mwifiex_update_bss_desc_with_ie(priv->adapter, bss_desc);
193 }
194 
mwifiex_dnld_txpwr_table(struct mwifiex_private * priv)195 void mwifiex_dnld_txpwr_table(struct mwifiex_private *priv)
196 {
197 	if (priv->adapter->dt_node) {
198 		char txpwr[] = {"marvell,00_txpwrlimit"};
199 
200 		memcpy(&txpwr[8], priv->adapter->country_code, 2);
201 		mwifiex_dnld_dt_cfgdata(priv, priv->adapter->dt_node, txpwr);
202 	}
203 }
204 
mwifiex_process_country_ie(struct mwifiex_private * priv,struct cfg80211_bss * bss)205 static int mwifiex_process_country_ie(struct mwifiex_private *priv,
206 				      struct cfg80211_bss *bss)
207 {
208 	const u8 *country_ie;
209 	u8 country_ie_len;
210 	struct mwifiex_802_11d_domain_reg *domain_info =
211 					&priv->adapter->domain_reg;
212 
213 	rcu_read_lock();
214 	country_ie = ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY);
215 	if (!country_ie) {
216 		rcu_read_unlock();
217 		return 0;
218 	}
219 
220 	country_ie_len = country_ie[1];
221 	if (country_ie_len < IEEE80211_COUNTRY_IE_MIN_LEN) {
222 		rcu_read_unlock();
223 		return 0;
224 	}
225 
226 	if (!strncmp(priv->adapter->country_code, &country_ie[2], 2)) {
227 		rcu_read_unlock();
228 		mwifiex_dbg(priv->adapter, INFO,
229 			    "11D: skip setting domain info in FW\n");
230 		return 0;
231 	}
232 	memcpy(priv->adapter->country_code, &country_ie[2], 2);
233 
234 	domain_info->country_code[0] = country_ie[2];
235 	domain_info->country_code[1] = country_ie[3];
236 	domain_info->country_code[2] = ' ';
237 
238 	country_ie_len -= IEEE80211_COUNTRY_STRING_LEN;
239 
240 	domain_info->no_of_triplet =
241 		country_ie_len / sizeof(struct ieee80211_country_ie_triplet);
242 
243 	memcpy((u8 *)domain_info->triplet,
244 	       &country_ie[2] + IEEE80211_COUNTRY_STRING_LEN, country_ie_len);
245 
246 	rcu_read_unlock();
247 
248 	if (mwifiex_send_cmd(priv, HostCmd_CMD_802_11D_DOMAIN_INFO,
249 			     HostCmd_ACT_GEN_SET, 0, NULL, false)) {
250 		mwifiex_dbg(priv->adapter, ERROR,
251 			    "11D: setting domain info in FW fail\n");
252 		return -1;
253 	}
254 
255 	mwifiex_dnld_txpwr_table(priv);
256 
257 	return 0;
258 }
259 
260 /*
261  * In Ad-Hoc mode, the IBSS is created if not found in scan list.
262  * In both Ad-Hoc and infra mode, an deauthentication is performed
263  * first.
264  */
mwifiex_bss_start(struct mwifiex_private * priv,struct cfg80211_bss * bss,struct cfg80211_ssid * req_ssid)265 int mwifiex_bss_start(struct mwifiex_private *priv, struct cfg80211_bss *bss,
266 		      struct cfg80211_ssid *req_ssid)
267 {
268 	int ret;
269 	struct mwifiex_adapter *adapter = priv->adapter;
270 	struct mwifiex_bssdescriptor *bss_desc = NULL;
271 
272 	priv->scan_block = false;
273 
274 	if (bss) {
275 		mwifiex_process_country_ie(priv, bss);
276 
277 		/* Allocate and fill new bss descriptor */
278 		bss_desc = kzalloc(sizeof(struct mwifiex_bssdescriptor),
279 				   GFP_KERNEL);
280 		if (!bss_desc)
281 			return -ENOMEM;
282 
283 		ret = mwifiex_fill_new_bss_desc(priv, bss, bss_desc);
284 		if (ret)
285 			goto done;
286 	}
287 
288 	if (priv->bss_mode == NL80211_IFTYPE_STATION ||
289 	    priv->bss_mode == NL80211_IFTYPE_P2P_CLIENT) {
290 		u8 config_bands;
291 
292 		if (!bss_desc)
293 			return -1;
294 
295 		if (mwifiex_band_to_radio_type(bss_desc->bss_band) ==
296 						HostCmd_SCAN_RADIO_TYPE_BG) {
297 			config_bands = BAND_B | BAND_G | BAND_GN;
298 		} else {
299 			config_bands = BAND_A | BAND_AN;
300 			if (adapter->fw_bands & BAND_AAC)
301 				config_bands |= BAND_AAC;
302 		}
303 
304 		if (!((config_bands | adapter->fw_bands) & ~adapter->fw_bands))
305 			adapter->config_bands = config_bands;
306 
307 		ret = mwifiex_check_network_compatibility(priv, bss_desc);
308 		if (ret)
309 			goto done;
310 
311 		if (mwifiex_11h_get_csa_closed_channel(priv) ==
312 							(u8)bss_desc->channel) {
313 			mwifiex_dbg(adapter, ERROR,
314 				    "Attempt to reconnect on csa closed chan(%d)\n",
315 				    bss_desc->channel);
316 			ret = -1;
317 			goto done;
318 		}
319 
320 		mwifiex_dbg(adapter, INFO,
321 			    "info: SSID found in scan list ...\t"
322 			    "associating...\n");
323 
324 		mwifiex_stop_net_dev_queue(priv->netdev, adapter);
325 		if (netif_carrier_ok(priv->netdev))
326 			netif_carrier_off(priv->netdev);
327 
328 		/* Clear any past association response stored for
329 		 * application retrieval */
330 		priv->assoc_rsp_size = 0;
331 		ret = mwifiex_associate(priv, bss_desc);
332 
333 		/* If auth type is auto and association fails using open mode,
334 		 * try to connect using shared mode */
335 		if (ret == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG &&
336 		    priv->sec_info.is_authtype_auto &&
337 		    priv->sec_info.wep_enabled) {
338 			priv->sec_info.authentication_mode =
339 						NL80211_AUTHTYPE_SHARED_KEY;
340 			ret = mwifiex_associate(priv, bss_desc);
341 		}
342 
343 		if (bss)
344 			cfg80211_put_bss(priv->adapter->wiphy, bss);
345 	} else {
346 		/* Adhoc mode */
347 		/* If the requested SSID matches current SSID, return */
348 		if (bss_desc && bss_desc->ssid.ssid_len &&
349 		    (!mwifiex_ssid_cmp(&priv->curr_bss_params.bss_descriptor.
350 				       ssid, &bss_desc->ssid))) {
351 			ret = 0;
352 			goto done;
353 		}
354 
355 		priv->adhoc_is_link_sensed = false;
356 
357 		ret = mwifiex_check_network_compatibility(priv, bss_desc);
358 
359 		mwifiex_stop_net_dev_queue(priv->netdev, adapter);
360 		if (netif_carrier_ok(priv->netdev))
361 			netif_carrier_off(priv->netdev);
362 
363 		if (!ret) {
364 			mwifiex_dbg(adapter, INFO,
365 				    "info: network found in scan\t"
366 				    " list. Joining...\n");
367 			ret = mwifiex_adhoc_join(priv, bss_desc);
368 			if (bss)
369 				cfg80211_put_bss(priv->adapter->wiphy, bss);
370 		} else {
371 			mwifiex_dbg(adapter, INFO,
372 				    "info: Network not found in\t"
373 				    "the list, creating adhoc with ssid = %s\n",
374 				    req_ssid->ssid);
375 			ret = mwifiex_adhoc_start(priv, req_ssid);
376 		}
377 	}
378 
379 done:
380 	/* beacon_ie buffer was allocated in function
381 	 * mwifiex_fill_new_bss_desc(). Free it now.
382 	 */
383 	if (bss_desc)
384 		kfree(bss_desc->beacon_buf);
385 	kfree(bss_desc);
386 	return ret;
387 }
388 
389 /*
390  * IOCTL request handler to set host sleep configuration.
391  *
392  * This function prepares the correct firmware command and
393  * issues it.
394  */
mwifiex_set_hs_params(struct mwifiex_private * priv,u16 action,int cmd_type,struct mwifiex_ds_hs_cfg * hs_cfg)395 int mwifiex_set_hs_params(struct mwifiex_private *priv, u16 action,
396 			  int cmd_type, struct mwifiex_ds_hs_cfg *hs_cfg)
397 
398 {
399 	struct mwifiex_adapter *adapter = priv->adapter;
400 	int status = 0;
401 	u32 prev_cond = 0;
402 
403 	if (!hs_cfg)
404 		return -ENOMEM;
405 
406 	switch (action) {
407 	case HostCmd_ACT_GEN_SET:
408 		if (adapter->pps_uapsd_mode) {
409 			mwifiex_dbg(adapter, INFO,
410 				    "info: Host Sleep IOCTL\t"
411 				    "is blocked in UAPSD/PPS mode\n");
412 			status = -1;
413 			break;
414 		}
415 		if (hs_cfg->is_invoke_hostcmd) {
416 			if (hs_cfg->conditions == HS_CFG_CANCEL) {
417 				if (!adapter->is_hs_configured)
418 					/* Already cancelled */
419 					break;
420 				/* Save previous condition */
421 				prev_cond = le32_to_cpu(adapter->hs_cfg
422 							.conditions);
423 				adapter->hs_cfg.conditions =
424 						cpu_to_le32(hs_cfg->conditions);
425 			} else if (hs_cfg->conditions) {
426 				adapter->hs_cfg.conditions =
427 						cpu_to_le32(hs_cfg->conditions);
428 				adapter->hs_cfg.gpio = (u8)hs_cfg->gpio;
429 				if (hs_cfg->gap)
430 					adapter->hs_cfg.gap = (u8)hs_cfg->gap;
431 			} else if (adapter->hs_cfg.conditions ==
432 				   cpu_to_le32(HS_CFG_CANCEL)) {
433 				/* Return failure if no parameters for HS
434 				   enable */
435 				status = -1;
436 				break;
437 			}
438 
439 			status = mwifiex_send_cmd(priv,
440 						  HostCmd_CMD_802_11_HS_CFG_ENH,
441 						  HostCmd_ACT_GEN_SET, 0,
442 						  &adapter->hs_cfg,
443 						  cmd_type == MWIFIEX_SYNC_CMD);
444 
445 			if (hs_cfg->conditions == HS_CFG_CANCEL)
446 				/* Restore previous condition */
447 				adapter->hs_cfg.conditions =
448 						cpu_to_le32(prev_cond);
449 		} else {
450 			adapter->hs_cfg.conditions =
451 						cpu_to_le32(hs_cfg->conditions);
452 			adapter->hs_cfg.gpio = (u8)hs_cfg->gpio;
453 			adapter->hs_cfg.gap = (u8)hs_cfg->gap;
454 		}
455 		break;
456 	case HostCmd_ACT_GEN_GET:
457 		hs_cfg->conditions = le32_to_cpu(adapter->hs_cfg.conditions);
458 		hs_cfg->gpio = adapter->hs_cfg.gpio;
459 		hs_cfg->gap = adapter->hs_cfg.gap;
460 		break;
461 	default:
462 		status = -1;
463 		break;
464 	}
465 
466 	return status;
467 }
468 
469 /*
470  * Sends IOCTL request to cancel the existing Host Sleep configuration.
471  *
472  * This function allocates the IOCTL request buffer, fills it
473  * with requisite parameters and calls the IOCTL handler.
474  */
mwifiex_cancel_hs(struct mwifiex_private * priv,int cmd_type)475 int mwifiex_cancel_hs(struct mwifiex_private *priv, int cmd_type)
476 {
477 	struct mwifiex_ds_hs_cfg hscfg;
478 
479 	hscfg.conditions = HS_CFG_CANCEL;
480 	hscfg.is_invoke_hostcmd = true;
481 
482 	return mwifiex_set_hs_params(priv, HostCmd_ACT_GEN_SET,
483 				    cmd_type, &hscfg);
484 }
485 EXPORT_SYMBOL_GPL(mwifiex_cancel_hs);
486 
487 /*
488  * Sends IOCTL request to cancel the existing Host Sleep configuration.
489  *
490  * This function allocates the IOCTL request buffer, fills it
491  * with requisite parameters and calls the IOCTL handler.
492  */
mwifiex_enable_hs(struct mwifiex_adapter * adapter)493 int mwifiex_enable_hs(struct mwifiex_adapter *adapter)
494 {
495 	struct mwifiex_ds_hs_cfg hscfg;
496 	struct mwifiex_private *priv;
497 	int i;
498 
499 	if (disconnect_on_suspend) {
500 		for (i = 0; i < adapter->priv_num; i++) {
501 			priv = adapter->priv[i];
502 			if (priv)
503 				mwifiex_deauthenticate(priv, NULL);
504 		}
505 	}
506 
507 	if (adapter->hs_activated) {
508 		mwifiex_dbg(adapter, CMD,
509 			    "cmd: HS Already activated\n");
510 		return true;
511 	}
512 
513 	adapter->hs_activate_wait_q_woken = false;
514 
515 	memset(&hscfg, 0, sizeof(struct mwifiex_ds_hs_cfg));
516 	hscfg.is_invoke_hostcmd = true;
517 
518 	adapter->hs_enabling = true;
519 	mwifiex_cancel_all_pending_cmd(adapter);
520 
521 	if (mwifiex_set_hs_params(mwifiex_get_priv(adapter,
522 						   MWIFIEX_BSS_ROLE_STA),
523 				  HostCmd_ACT_GEN_SET, MWIFIEX_SYNC_CMD,
524 				  &hscfg)) {
525 		mwifiex_dbg(adapter, ERROR,
526 			    "IOCTL request HS enable failed\n");
527 		return false;
528 	}
529 
530 	if (wait_event_interruptible_timeout(adapter->hs_activate_wait_q,
531 					     adapter->hs_activate_wait_q_woken,
532 					     (10 * HZ)) <= 0) {
533 		mwifiex_dbg(adapter, ERROR,
534 			    "hs_activate_wait_q terminated\n");
535 		return false;
536 	}
537 
538 	return true;
539 }
540 EXPORT_SYMBOL_GPL(mwifiex_enable_hs);
541 
542 /*
543  * IOCTL request handler to get BSS information.
544  *
545  * This function collates the information from different driver structures
546  * to send to the user.
547  */
mwifiex_get_bss_info(struct mwifiex_private * priv,struct mwifiex_bss_info * info)548 int mwifiex_get_bss_info(struct mwifiex_private *priv,
549 			 struct mwifiex_bss_info *info)
550 {
551 	struct mwifiex_adapter *adapter = priv->adapter;
552 	struct mwifiex_bssdescriptor *bss_desc;
553 
554 	if (!info)
555 		return -1;
556 
557 	bss_desc = &priv->curr_bss_params.bss_descriptor;
558 
559 	info->bss_mode = priv->bss_mode;
560 
561 	memcpy(&info->ssid, &bss_desc->ssid, sizeof(struct cfg80211_ssid));
562 
563 	memcpy(&info->bssid, &bss_desc->mac_address, ETH_ALEN);
564 
565 	info->bss_chan = bss_desc->channel;
566 
567 	memcpy(info->country_code, adapter->country_code,
568 	       IEEE80211_COUNTRY_STRING_LEN);
569 
570 	info->media_connected = priv->media_connected;
571 
572 	info->max_power_level = priv->max_tx_power_level;
573 	info->min_power_level = priv->min_tx_power_level;
574 
575 	info->adhoc_state = priv->adhoc_state;
576 
577 	info->bcn_nf_last = priv->bcn_nf_last;
578 
579 	if (priv->sec_info.wep_enabled)
580 		info->wep_status = true;
581 	else
582 		info->wep_status = false;
583 
584 	info->is_hs_configured = adapter->is_hs_configured;
585 	info->is_deep_sleep = adapter->is_deep_sleep;
586 
587 	return 0;
588 }
589 
590 /*
591  * The function disables auto deep sleep mode.
592  */
mwifiex_disable_auto_ds(struct mwifiex_private * priv)593 int mwifiex_disable_auto_ds(struct mwifiex_private *priv)
594 {
595 	struct mwifiex_ds_auto_ds auto_ds;
596 
597 	auto_ds.auto_ds = DEEP_SLEEP_OFF;
598 
599 	return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
600 				DIS_AUTO_PS, BITMAP_AUTO_DS, &auto_ds, true);
601 }
602 EXPORT_SYMBOL_GPL(mwifiex_disable_auto_ds);
603 
604 /*
605  * Sends IOCTL request to get the data rate.
606  *
607  * This function allocates the IOCTL request buffer, fills it
608  * with requisite parameters and calls the IOCTL handler.
609  */
mwifiex_drv_get_data_rate(struct mwifiex_private * priv,u32 * rate)610 int mwifiex_drv_get_data_rate(struct mwifiex_private *priv, u32 *rate)
611 {
612 	int ret;
613 
614 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_TX_RATE_QUERY,
615 			       HostCmd_ACT_GEN_GET, 0, NULL, true);
616 
617 	if (!ret) {
618 		if (priv->is_data_rate_auto)
619 			*rate = mwifiex_index_to_data_rate(priv, priv->tx_rate,
620 							   priv->tx_htinfo);
621 		else
622 			*rate = priv->data_rate;
623 	}
624 
625 	return ret;
626 }
627 
628 /*
629  * IOCTL request handler to set tx power configuration.
630  *
631  * This function prepares the correct firmware command and
632  * issues it.
633  *
634  * For non-auto power mode, all the following power groups are set -
635  *      - Modulation class HR/DSSS
636  *      - Modulation class OFDM
637  *      - Modulation class HTBW20
638  *      - Modulation class HTBW40
639  */
mwifiex_set_tx_power(struct mwifiex_private * priv,struct mwifiex_power_cfg * power_cfg)640 int mwifiex_set_tx_power(struct mwifiex_private *priv,
641 			 struct mwifiex_power_cfg *power_cfg)
642 {
643 	int ret;
644 	struct host_cmd_ds_txpwr_cfg *txp_cfg;
645 	struct mwifiex_types_power_group *pg_tlv;
646 	struct mwifiex_power_group *pg;
647 	u8 *buf;
648 	u16 dbm = 0;
649 
650 	if (!power_cfg->is_power_auto) {
651 		dbm = (u16) power_cfg->power_level;
652 		if ((dbm < priv->min_tx_power_level) ||
653 		    (dbm > priv->max_tx_power_level)) {
654 			mwifiex_dbg(priv->adapter, ERROR,
655 				    "txpower value %d dBm\t"
656 				    "is out of range (%d dBm-%d dBm)\n",
657 				    dbm, priv->min_tx_power_level,
658 				    priv->max_tx_power_level);
659 			return -1;
660 		}
661 	}
662 	buf = kzalloc(MWIFIEX_SIZE_OF_CMD_BUFFER, GFP_KERNEL);
663 	if (!buf)
664 		return -ENOMEM;
665 
666 	txp_cfg = (struct host_cmd_ds_txpwr_cfg *) buf;
667 	txp_cfg->action = cpu_to_le16(HostCmd_ACT_GEN_SET);
668 	if (!power_cfg->is_power_auto) {
669 		txp_cfg->mode = cpu_to_le32(1);
670 		pg_tlv = (struct mwifiex_types_power_group *)
671 			 (buf + sizeof(struct host_cmd_ds_txpwr_cfg));
672 		pg_tlv->type = cpu_to_le16(TLV_TYPE_POWER_GROUP);
673 		pg_tlv->length =
674 			cpu_to_le16(4 * sizeof(struct mwifiex_power_group));
675 		pg = (struct mwifiex_power_group *)
676 		     (buf + sizeof(struct host_cmd_ds_txpwr_cfg)
677 		      + sizeof(struct mwifiex_types_power_group));
678 		/* Power group for modulation class HR/DSSS */
679 		pg->first_rate_code = 0x00;
680 		pg->last_rate_code = 0x03;
681 		pg->modulation_class = MOD_CLASS_HR_DSSS;
682 		pg->power_step = 0;
683 		pg->power_min = (s8) dbm;
684 		pg->power_max = (s8) dbm;
685 		pg++;
686 		/* Power group for modulation class OFDM */
687 		pg->first_rate_code = 0x00;
688 		pg->last_rate_code = 0x07;
689 		pg->modulation_class = MOD_CLASS_OFDM;
690 		pg->power_step = 0;
691 		pg->power_min = (s8) dbm;
692 		pg->power_max = (s8) dbm;
693 		pg++;
694 		/* Power group for modulation class HTBW20 */
695 		pg->first_rate_code = 0x00;
696 		pg->last_rate_code = 0x20;
697 		pg->modulation_class = MOD_CLASS_HT;
698 		pg->power_step = 0;
699 		pg->power_min = (s8) dbm;
700 		pg->power_max = (s8) dbm;
701 		pg->ht_bandwidth = HT_BW_20;
702 		pg++;
703 		/* Power group for modulation class HTBW40 */
704 		pg->first_rate_code = 0x00;
705 		pg->last_rate_code = 0x20;
706 		pg->modulation_class = MOD_CLASS_HT;
707 		pg->power_step = 0;
708 		pg->power_min = (s8) dbm;
709 		pg->power_max = (s8) dbm;
710 		pg->ht_bandwidth = HT_BW_40;
711 	}
712 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_TXPWR_CFG,
713 			       HostCmd_ACT_GEN_SET, 0, buf, true);
714 
715 	kfree(buf);
716 	return ret;
717 }
718 
719 /*
720  * IOCTL request handler to get power save mode.
721  *
722  * This function prepares the correct firmware command and
723  * issues it.
724  */
mwifiex_drv_set_power(struct mwifiex_private * priv,u32 * ps_mode)725 int mwifiex_drv_set_power(struct mwifiex_private *priv, u32 *ps_mode)
726 {
727 	int ret;
728 	struct mwifiex_adapter *adapter = priv->adapter;
729 	u16 sub_cmd;
730 
731 	if (*ps_mode)
732 		adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
733 	else
734 		adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
735 	sub_cmd = (*ps_mode) ? EN_AUTO_PS : DIS_AUTO_PS;
736 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
737 			       sub_cmd, BITMAP_STA_PS, NULL, true);
738 	if ((!ret) && (sub_cmd == DIS_AUTO_PS))
739 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
740 				       GET_PS, 0, NULL, false);
741 
742 	return ret;
743 }
744 
745 /*
746  * IOCTL request handler to set/reset WPA IE.
747  *
748  * The supplied WPA IE is treated as a opaque buffer. Only the first field
749  * is checked to determine WPA version. If buffer length is zero, the existing
750  * WPA IE is reset.
751  */
mwifiex_set_wpa_ie_helper(struct mwifiex_private * priv,u8 * ie_data_ptr,u16 ie_len)752 static int mwifiex_set_wpa_ie_helper(struct mwifiex_private *priv,
753 				     u8 *ie_data_ptr, u16 ie_len)
754 {
755 	if (ie_len) {
756 		if (ie_len > sizeof(priv->wpa_ie)) {
757 			mwifiex_dbg(priv->adapter, ERROR,
758 				    "failed to copy WPA IE, too big\n");
759 			return -1;
760 		}
761 		memcpy(priv->wpa_ie, ie_data_ptr, ie_len);
762 		priv->wpa_ie_len = (u8) ie_len;
763 		mwifiex_dbg(priv->adapter, CMD,
764 			    "cmd: Set Wpa_ie_len=%d IE=%#x\n",
765 			    priv->wpa_ie_len, priv->wpa_ie[0]);
766 
767 		if (priv->wpa_ie[0] == WLAN_EID_VENDOR_SPECIFIC) {
768 			priv->sec_info.wpa_enabled = true;
769 		} else if (priv->wpa_ie[0] == WLAN_EID_RSN) {
770 			priv->sec_info.wpa2_enabled = true;
771 		} else {
772 			priv->sec_info.wpa_enabled = false;
773 			priv->sec_info.wpa2_enabled = false;
774 		}
775 	} else {
776 		memset(priv->wpa_ie, 0, sizeof(priv->wpa_ie));
777 		priv->wpa_ie_len = 0;
778 		mwifiex_dbg(priv->adapter, INFO,
779 			    "info: reset wpa_ie_len=%d IE=%#x\n",
780 			    priv->wpa_ie_len, priv->wpa_ie[0]);
781 		priv->sec_info.wpa_enabled = false;
782 		priv->sec_info.wpa2_enabled = false;
783 	}
784 
785 	return 0;
786 }
787 
788 /*
789  * IOCTL request handler to set/reset WAPI IE.
790  *
791  * The supplied WAPI IE is treated as a opaque buffer. Only the first field
792  * is checked to internally enable WAPI. If buffer length is zero, the existing
793  * WAPI IE is reset.
794  */
mwifiex_set_wapi_ie(struct mwifiex_private * priv,u8 * ie_data_ptr,u16 ie_len)795 static int mwifiex_set_wapi_ie(struct mwifiex_private *priv,
796 			       u8 *ie_data_ptr, u16 ie_len)
797 {
798 	if (ie_len) {
799 		if (ie_len > sizeof(priv->wapi_ie)) {
800 			mwifiex_dbg(priv->adapter, ERROR,
801 				    "info: failed to copy WAPI IE, too big\n");
802 			return -1;
803 		}
804 		memcpy(priv->wapi_ie, ie_data_ptr, ie_len);
805 		priv->wapi_ie_len = ie_len;
806 		mwifiex_dbg(priv->adapter, CMD,
807 			    "cmd: Set wapi_ie_len=%d IE=%#x\n",
808 			    priv->wapi_ie_len, priv->wapi_ie[0]);
809 
810 		if (priv->wapi_ie[0] == WLAN_EID_BSS_AC_ACCESS_DELAY)
811 			priv->sec_info.wapi_enabled = true;
812 	} else {
813 		memset(priv->wapi_ie, 0, sizeof(priv->wapi_ie));
814 		priv->wapi_ie_len = ie_len;
815 		mwifiex_dbg(priv->adapter, INFO,
816 			    "info: Reset wapi_ie_len=%d IE=%#x\n",
817 			    priv->wapi_ie_len, priv->wapi_ie[0]);
818 		priv->sec_info.wapi_enabled = false;
819 	}
820 	return 0;
821 }
822 
823 /*
824  * IOCTL request handler to set/reset WPS IE.
825  *
826  * The supplied WPS IE is treated as a opaque buffer. Only the first field
827  * is checked to internally enable WPS. If buffer length is zero, the existing
828  * WPS IE is reset.
829  */
mwifiex_set_wps_ie(struct mwifiex_private * priv,u8 * ie_data_ptr,u16 ie_len)830 static int mwifiex_set_wps_ie(struct mwifiex_private *priv,
831 			       u8 *ie_data_ptr, u16 ie_len)
832 {
833 	if (ie_len) {
834 		if (ie_len > MWIFIEX_MAX_VSIE_LEN) {
835 			mwifiex_dbg(priv->adapter, ERROR,
836 				    "info: failed to copy WPS IE, too big\n");
837 			return -1;
838 		}
839 
840 		priv->wps_ie = kzalloc(MWIFIEX_MAX_VSIE_LEN, GFP_KERNEL);
841 		if (!priv->wps_ie)
842 			return -ENOMEM;
843 
844 		memcpy(priv->wps_ie, ie_data_ptr, ie_len);
845 		priv->wps_ie_len = ie_len;
846 		mwifiex_dbg(priv->adapter, CMD,
847 			    "cmd: Set wps_ie_len=%d IE=%#x\n",
848 			    priv->wps_ie_len, priv->wps_ie[0]);
849 	} else {
850 		kfree(priv->wps_ie);
851 		priv->wps_ie_len = ie_len;
852 		mwifiex_dbg(priv->adapter, INFO,
853 			    "info: Reset wps_ie_len=%d\n", priv->wps_ie_len);
854 	}
855 	return 0;
856 }
857 
858 /*
859  * IOCTL request handler to set WAPI key.
860  *
861  * This function prepares the correct firmware command and
862  * issues it.
863  */
mwifiex_sec_ioctl_set_wapi_key(struct mwifiex_private * priv,struct mwifiex_ds_encrypt_key * encrypt_key)864 static int mwifiex_sec_ioctl_set_wapi_key(struct mwifiex_private *priv,
865 			       struct mwifiex_ds_encrypt_key *encrypt_key)
866 {
867 
868 	return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL,
869 				HostCmd_ACT_GEN_SET, KEY_INFO_ENABLED,
870 				encrypt_key, true);
871 }
872 
873 /*
874  * IOCTL request handler to set WEP network key.
875  *
876  * This function prepares the correct firmware command and
877  * issues it, after validation checks.
878  */
mwifiex_sec_ioctl_set_wep_key(struct mwifiex_private * priv,struct mwifiex_ds_encrypt_key * encrypt_key)879 static int mwifiex_sec_ioctl_set_wep_key(struct mwifiex_private *priv,
880 			      struct mwifiex_ds_encrypt_key *encrypt_key)
881 {
882 	struct mwifiex_adapter *adapter = priv->adapter;
883 	int ret;
884 	struct mwifiex_wep_key *wep_key;
885 	int index;
886 
887 	if (priv->wep_key_curr_index >= NUM_WEP_KEYS)
888 		priv->wep_key_curr_index = 0;
889 	wep_key = &priv->wep_key[priv->wep_key_curr_index];
890 	index = encrypt_key->key_index;
891 	if (encrypt_key->key_disable) {
892 		priv->sec_info.wep_enabled = 0;
893 	} else if (!encrypt_key->key_len) {
894 		/* Copy the required key as the current key */
895 		wep_key = &priv->wep_key[index];
896 		if (!wep_key->key_length) {
897 			mwifiex_dbg(adapter, ERROR,
898 				    "key not set, so cannot enable it\n");
899 			return -1;
900 		}
901 
902 		if (adapter->key_api_major_ver == KEY_API_VER_MAJOR_V2) {
903 			memcpy(encrypt_key->key_material,
904 			       wep_key->key_material, wep_key->key_length);
905 			encrypt_key->key_len = wep_key->key_length;
906 		}
907 
908 		priv->wep_key_curr_index = (u16) index;
909 		priv->sec_info.wep_enabled = 1;
910 	} else {
911 		wep_key = &priv->wep_key[index];
912 		memset(wep_key, 0, sizeof(struct mwifiex_wep_key));
913 		/* Copy the key in the driver */
914 		memcpy(wep_key->key_material,
915 		       encrypt_key->key_material,
916 		       encrypt_key->key_len);
917 		wep_key->key_index = index;
918 		wep_key->key_length = encrypt_key->key_len;
919 		priv->sec_info.wep_enabled = 1;
920 	}
921 	if (wep_key->key_length) {
922 		void *enc_key;
923 
924 		if (encrypt_key->key_disable) {
925 			memset(&priv->wep_key[index], 0,
926 			       sizeof(struct mwifiex_wep_key));
927 			if (wep_key->key_length)
928 				goto done;
929 			}
930 
931 		if (adapter->key_api_major_ver == KEY_API_VER_MAJOR_V2)
932 			enc_key = encrypt_key;
933 		else
934 			enc_key = NULL;
935 
936 		/* Send request to firmware */
937 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL,
938 				       HostCmd_ACT_GEN_SET, 0, enc_key, false);
939 		if (ret)
940 			return ret;
941 	}
942 
943 done:
944 	if (priv->sec_info.wep_enabled)
945 		priv->curr_pkt_filter |= HostCmd_ACT_MAC_WEP_ENABLE;
946 	else
947 		priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_WEP_ENABLE;
948 
949 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_MAC_CONTROL,
950 			       HostCmd_ACT_GEN_SET, 0,
951 			       &priv->curr_pkt_filter, true);
952 
953 	return ret;
954 }
955 
956 /*
957  * IOCTL request handler to set WPA key.
958  *
959  * This function prepares the correct firmware command and
960  * issues it, after validation checks.
961  *
962  * Current driver only supports key length of up to 32 bytes.
963  *
964  * This function can also be used to disable a currently set key.
965  */
mwifiex_sec_ioctl_set_wpa_key(struct mwifiex_private * priv,struct mwifiex_ds_encrypt_key * encrypt_key)966 static int mwifiex_sec_ioctl_set_wpa_key(struct mwifiex_private *priv,
967 			      struct mwifiex_ds_encrypt_key *encrypt_key)
968 {
969 	int ret;
970 	u8 remove_key = false;
971 	struct host_cmd_ds_802_11_key_material *ibss_key;
972 
973 	/* Current driver only supports key length of up to 32 bytes */
974 	if (encrypt_key->key_len > WLAN_MAX_KEY_LEN) {
975 		mwifiex_dbg(priv->adapter, ERROR,
976 			    "key length too long\n");
977 		return -1;
978 	}
979 
980 	if (priv->bss_mode == NL80211_IFTYPE_ADHOC) {
981 		/*
982 		 * IBSS/WPA-None uses only one key (Group) for both receiving
983 		 * and sending unicast and multicast packets.
984 		 */
985 		/* Send the key as PTK to firmware */
986 		encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST;
987 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL,
988 				       HostCmd_ACT_GEN_SET,
989 				       KEY_INFO_ENABLED, encrypt_key, false);
990 		if (ret)
991 			return ret;
992 
993 		ibss_key = &priv->aes_key;
994 		memset(ibss_key, 0,
995 		       sizeof(struct host_cmd_ds_802_11_key_material));
996 		/* Copy the key in the driver */
997 		memcpy(ibss_key->key_param_set.key, encrypt_key->key_material,
998 		       encrypt_key->key_len);
999 		memcpy(&ibss_key->key_param_set.key_len, &encrypt_key->key_len,
1000 		       sizeof(ibss_key->key_param_set.key_len));
1001 		ibss_key->key_param_set.key_type_id
1002 			= cpu_to_le16(KEY_TYPE_ID_TKIP);
1003 		ibss_key->key_param_set.key_info = cpu_to_le16(KEY_ENABLED);
1004 
1005 		/* Send the key as GTK to firmware */
1006 		encrypt_key->key_index = ~MWIFIEX_KEY_INDEX_UNICAST;
1007 	}
1008 
1009 	if (!encrypt_key->key_index)
1010 		encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST;
1011 
1012 	if (remove_key)
1013 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL,
1014 				       HostCmd_ACT_GEN_SET,
1015 				       !KEY_INFO_ENABLED, encrypt_key, true);
1016 	else
1017 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL,
1018 				       HostCmd_ACT_GEN_SET,
1019 				       KEY_INFO_ENABLED, encrypt_key, true);
1020 
1021 	return ret;
1022 }
1023 
1024 /*
1025  * IOCTL request handler to set/get network keys.
1026  *
1027  * This is a generic key handling function which supports WEP, WPA
1028  * and WAPI.
1029  */
1030 static int
mwifiex_sec_ioctl_encrypt_key(struct mwifiex_private * priv,struct mwifiex_ds_encrypt_key * encrypt_key)1031 mwifiex_sec_ioctl_encrypt_key(struct mwifiex_private *priv,
1032 			      struct mwifiex_ds_encrypt_key *encrypt_key)
1033 {
1034 	int status;
1035 
1036 	if (encrypt_key->is_wapi_key)
1037 		status = mwifiex_sec_ioctl_set_wapi_key(priv, encrypt_key);
1038 	else if (encrypt_key->key_len > WLAN_KEY_LEN_WEP104)
1039 		status = mwifiex_sec_ioctl_set_wpa_key(priv, encrypt_key);
1040 	else
1041 		status = mwifiex_sec_ioctl_set_wep_key(priv, encrypt_key);
1042 	return status;
1043 }
1044 
1045 /*
1046  * This function returns the driver version.
1047  */
1048 int
mwifiex_drv_get_driver_version(struct mwifiex_adapter * adapter,char * version,int max_len)1049 mwifiex_drv_get_driver_version(struct mwifiex_adapter *adapter, char *version,
1050 			       int max_len)
1051 {
1052 	union {
1053 		__le32 l;
1054 		u8 c[4];
1055 	} ver;
1056 	char fw_ver[32];
1057 
1058 	ver.l = cpu_to_le32(adapter->fw_release_number);
1059 	sprintf(fw_ver, "%u.%u.%u.p%u", ver.c[2], ver.c[1], ver.c[0], ver.c[3]);
1060 
1061 	snprintf(version, max_len, driver_version, fw_ver);
1062 
1063 	mwifiex_dbg(adapter, MSG, "info: MWIFIEX VERSION: %s\n", version);
1064 
1065 	return 0;
1066 }
1067 
1068 /*
1069  * Sends IOCTL request to set encoding parameters.
1070  *
1071  * This function allocates the IOCTL request buffer, fills it
1072  * with requisite parameters and calls the IOCTL handler.
1073  */
mwifiex_set_encode(struct mwifiex_private * priv,struct key_params * kp,const u8 * key,int key_len,u8 key_index,const u8 * mac_addr,int disable)1074 int mwifiex_set_encode(struct mwifiex_private *priv, struct key_params *kp,
1075 		       const u8 *key, int key_len, u8 key_index,
1076 		       const u8 *mac_addr, int disable)
1077 {
1078 	struct mwifiex_ds_encrypt_key encrypt_key;
1079 
1080 	memset(&encrypt_key, 0, sizeof(struct mwifiex_ds_encrypt_key));
1081 	encrypt_key.key_len = key_len;
1082 	encrypt_key.key_index = key_index;
1083 
1084 	if (kp && kp->cipher == WLAN_CIPHER_SUITE_AES_CMAC)
1085 		encrypt_key.is_igtk_key = true;
1086 
1087 	if (!disable) {
1088 		if (key_len)
1089 			memcpy(encrypt_key.key_material, key, key_len);
1090 		else
1091 			encrypt_key.is_current_wep_key = true;
1092 
1093 		if (mac_addr)
1094 			memcpy(encrypt_key.mac_addr, mac_addr, ETH_ALEN);
1095 		if (kp && kp->seq && kp->seq_len) {
1096 			memcpy(encrypt_key.pn, kp->seq, kp->seq_len);
1097 			encrypt_key.pn_len = kp->seq_len;
1098 			encrypt_key.is_rx_seq_valid = true;
1099 		}
1100 	} else {
1101 		if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP)
1102 			return 0;
1103 		encrypt_key.key_disable = true;
1104 		if (mac_addr)
1105 			memcpy(encrypt_key.mac_addr, mac_addr, ETH_ALEN);
1106 	}
1107 
1108 	return mwifiex_sec_ioctl_encrypt_key(priv, &encrypt_key);
1109 }
1110 
1111 /*
1112  * Sends IOCTL request to get extended version.
1113  *
1114  * This function allocates the IOCTL request buffer, fills it
1115  * with requisite parameters and calls the IOCTL handler.
1116  */
1117 int
mwifiex_get_ver_ext(struct mwifiex_private * priv)1118 mwifiex_get_ver_ext(struct mwifiex_private *priv)
1119 {
1120 	struct mwifiex_ver_ext ver_ext;
1121 
1122 	memset(&ver_ext, 0, sizeof(struct host_cmd_ds_version_ext));
1123 	if (mwifiex_send_cmd(priv, HostCmd_CMD_VERSION_EXT,
1124 			     HostCmd_ACT_GEN_GET, 0, &ver_ext, true))
1125 		return -1;
1126 
1127 	return 0;
1128 }
1129 
1130 int
mwifiex_remain_on_chan_cfg(struct mwifiex_private * priv,u16 action,struct ieee80211_channel * chan,unsigned int duration)1131 mwifiex_remain_on_chan_cfg(struct mwifiex_private *priv, u16 action,
1132 			   struct ieee80211_channel *chan,
1133 			   unsigned int duration)
1134 {
1135 	struct host_cmd_ds_remain_on_chan roc_cfg;
1136 	u8 sc;
1137 
1138 	memset(&roc_cfg, 0, sizeof(roc_cfg));
1139 	roc_cfg.action = cpu_to_le16(action);
1140 	if (action == HostCmd_ACT_GEN_SET) {
1141 		roc_cfg.band_cfg = chan->band;
1142 		sc = mwifiex_chan_type_to_sec_chan_offset(NL80211_CHAN_NO_HT);
1143 		roc_cfg.band_cfg |= (sc << 2);
1144 
1145 		roc_cfg.channel =
1146 			ieee80211_frequency_to_channel(chan->center_freq);
1147 		roc_cfg.duration = cpu_to_le32(duration);
1148 	}
1149 	if (mwifiex_send_cmd(priv, HostCmd_CMD_REMAIN_ON_CHAN,
1150 			     action, 0, &roc_cfg, true)) {
1151 		mwifiex_dbg(priv->adapter, ERROR,
1152 			    "failed to remain on channel\n");
1153 		return -1;
1154 	}
1155 
1156 	return roc_cfg.status;
1157 }
1158 
1159 /*
1160  * Sends IOCTL request to get statistics information.
1161  *
1162  * This function allocates the IOCTL request buffer, fills it
1163  * with requisite parameters and calls the IOCTL handler.
1164  */
1165 int
mwifiex_get_stats_info(struct mwifiex_private * priv,struct mwifiex_ds_get_stats * log)1166 mwifiex_get_stats_info(struct mwifiex_private *priv,
1167 		       struct mwifiex_ds_get_stats *log)
1168 {
1169 	return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_GET_LOG,
1170 				HostCmd_ACT_GEN_GET, 0, log, true);
1171 }
1172 
1173 /*
1174  * IOCTL request handler to read/write register.
1175  *
1176  * This function prepares the correct firmware command and
1177  * issues it.
1178  *
1179  * Access to the following registers are supported -
1180  *      - MAC
1181  *      - BBP
1182  *      - RF
1183  *      - PMIC
1184  *      - CAU
1185  */
mwifiex_reg_mem_ioctl_reg_rw(struct mwifiex_private * priv,struct mwifiex_ds_reg_rw * reg_rw,u16 action)1186 static int mwifiex_reg_mem_ioctl_reg_rw(struct mwifiex_private *priv,
1187 					struct mwifiex_ds_reg_rw *reg_rw,
1188 					u16 action)
1189 {
1190 	u16 cmd_no;
1191 
1192 	switch (le32_to_cpu(reg_rw->type)) {
1193 	case MWIFIEX_REG_MAC:
1194 		cmd_no = HostCmd_CMD_MAC_REG_ACCESS;
1195 		break;
1196 	case MWIFIEX_REG_BBP:
1197 		cmd_no = HostCmd_CMD_BBP_REG_ACCESS;
1198 		break;
1199 	case MWIFIEX_REG_RF:
1200 		cmd_no = HostCmd_CMD_RF_REG_ACCESS;
1201 		break;
1202 	case MWIFIEX_REG_PMIC:
1203 		cmd_no = HostCmd_CMD_PMIC_REG_ACCESS;
1204 		break;
1205 	case MWIFIEX_REG_CAU:
1206 		cmd_no = HostCmd_CMD_CAU_REG_ACCESS;
1207 		break;
1208 	default:
1209 		return -1;
1210 	}
1211 
1212 	return mwifiex_send_cmd(priv, cmd_no, action, 0, reg_rw, true);
1213 }
1214 
1215 /*
1216  * Sends IOCTL request to write to a register.
1217  *
1218  * This function allocates the IOCTL request buffer, fills it
1219  * with requisite parameters and calls the IOCTL handler.
1220  */
1221 int
mwifiex_reg_write(struct mwifiex_private * priv,u32 reg_type,u32 reg_offset,u32 reg_value)1222 mwifiex_reg_write(struct mwifiex_private *priv, u32 reg_type,
1223 		  u32 reg_offset, u32 reg_value)
1224 {
1225 	struct mwifiex_ds_reg_rw reg_rw;
1226 
1227 	reg_rw.type = cpu_to_le32(reg_type);
1228 	reg_rw.offset = cpu_to_le32(reg_offset);
1229 	reg_rw.value = cpu_to_le32(reg_value);
1230 
1231 	return mwifiex_reg_mem_ioctl_reg_rw(priv, &reg_rw, HostCmd_ACT_GEN_SET);
1232 }
1233 
1234 /*
1235  * Sends IOCTL request to read from a register.
1236  *
1237  * This function allocates the IOCTL request buffer, fills it
1238  * with requisite parameters and calls the IOCTL handler.
1239  */
1240 int
mwifiex_reg_read(struct mwifiex_private * priv,u32 reg_type,u32 reg_offset,u32 * value)1241 mwifiex_reg_read(struct mwifiex_private *priv, u32 reg_type,
1242 		 u32 reg_offset, u32 *value)
1243 {
1244 	int ret;
1245 	struct mwifiex_ds_reg_rw reg_rw;
1246 
1247 	reg_rw.type = cpu_to_le32(reg_type);
1248 	reg_rw.offset = cpu_to_le32(reg_offset);
1249 	ret = mwifiex_reg_mem_ioctl_reg_rw(priv, &reg_rw, HostCmd_ACT_GEN_GET);
1250 
1251 	if (ret)
1252 		goto done;
1253 
1254 	*value = le32_to_cpu(reg_rw.value);
1255 
1256 done:
1257 	return ret;
1258 }
1259 
1260 /*
1261  * Sends IOCTL request to read from EEPROM.
1262  *
1263  * This function allocates the IOCTL request buffer, fills it
1264  * with requisite parameters and calls the IOCTL handler.
1265  */
1266 int
mwifiex_eeprom_read(struct mwifiex_private * priv,u16 offset,u16 bytes,u8 * value)1267 mwifiex_eeprom_read(struct mwifiex_private *priv, u16 offset, u16 bytes,
1268 		    u8 *value)
1269 {
1270 	int ret;
1271 	struct mwifiex_ds_read_eeprom rd_eeprom;
1272 
1273 	rd_eeprom.offset = cpu_to_le16((u16) offset);
1274 	rd_eeprom.byte_count = cpu_to_le16((u16) bytes);
1275 
1276 	/* Send request to firmware */
1277 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_EEPROM_ACCESS,
1278 			       HostCmd_ACT_GEN_GET, 0, &rd_eeprom, true);
1279 
1280 	if (!ret)
1281 		memcpy(value, rd_eeprom.value, MAX_EEPROM_DATA);
1282 	return ret;
1283 }
1284 
1285 /*
1286  * This function sets a generic IE. In addition to generic IE, it can
1287  * also handle WPA, WPA2 and WAPI IEs.
1288  */
1289 static int
mwifiex_set_gen_ie_helper(struct mwifiex_private * priv,u8 * ie_data_ptr,u16 ie_len)1290 mwifiex_set_gen_ie_helper(struct mwifiex_private *priv, u8 *ie_data_ptr,
1291 			  u16 ie_len)
1292 {
1293 	int ret = 0;
1294 	struct ieee_types_vendor_header *pvendor_ie;
1295 	const u8 wpa_oui[] = { 0x00, 0x50, 0xf2, 0x01 };
1296 	const u8 wps_oui[] = { 0x00, 0x50, 0xf2, 0x04 };
1297 
1298 	/* If the passed length is zero, reset the buffer */
1299 	if (!ie_len) {
1300 		priv->gen_ie_buf_len = 0;
1301 		priv->wps.session_enable = false;
1302 
1303 		return 0;
1304 	} else if (!ie_data_ptr) {
1305 		return -1;
1306 	}
1307 	pvendor_ie = (struct ieee_types_vendor_header *) ie_data_ptr;
1308 	/* Test to see if it is a WPA IE, if not, then it is a gen IE */
1309 	if (((pvendor_ie->element_id == WLAN_EID_VENDOR_SPECIFIC) &&
1310 	     (!memcmp(pvendor_ie->oui, wpa_oui, sizeof(wpa_oui)))) ||
1311 	    (pvendor_ie->element_id == WLAN_EID_RSN)) {
1312 
1313 		/* IE is a WPA/WPA2 IE so call set_wpa function */
1314 		ret = mwifiex_set_wpa_ie_helper(priv, ie_data_ptr, ie_len);
1315 		priv->wps.session_enable = false;
1316 
1317 		return ret;
1318 	} else if (pvendor_ie->element_id == WLAN_EID_BSS_AC_ACCESS_DELAY) {
1319 		/* IE is a WAPI IE so call set_wapi function */
1320 		ret = mwifiex_set_wapi_ie(priv, ie_data_ptr, ie_len);
1321 
1322 		return ret;
1323 	}
1324 	/*
1325 	 * Verify that the passed length is not larger than the
1326 	 * available space remaining in the buffer
1327 	 */
1328 	if (ie_len < (sizeof(priv->gen_ie_buf) - priv->gen_ie_buf_len)) {
1329 
1330 		/* Test to see if it is a WPS IE, if so, enable
1331 		 * wps session flag
1332 		 */
1333 		pvendor_ie = (struct ieee_types_vendor_header *) ie_data_ptr;
1334 		if ((pvendor_ie->element_id == WLAN_EID_VENDOR_SPECIFIC) &&
1335 		    (!memcmp(pvendor_ie->oui, wps_oui, sizeof(wps_oui)))) {
1336 			priv->wps.session_enable = true;
1337 			mwifiex_dbg(priv->adapter, INFO,
1338 				    "info: WPS Session Enabled.\n");
1339 			ret = mwifiex_set_wps_ie(priv, ie_data_ptr, ie_len);
1340 		}
1341 
1342 		/* Append the passed data to the end of the
1343 		   genIeBuffer */
1344 		memcpy(priv->gen_ie_buf + priv->gen_ie_buf_len, ie_data_ptr,
1345 		       ie_len);
1346 		/* Increment the stored buffer length by the
1347 		   size passed */
1348 		priv->gen_ie_buf_len += ie_len;
1349 	} else {
1350 		/* Passed data does not fit in the remaining
1351 		   buffer space */
1352 		ret = -1;
1353 	}
1354 
1355 	/* Return 0, or -1 for error case */
1356 	return ret;
1357 }
1358 
1359 /*
1360  * IOCTL request handler to set/get generic IE.
1361  *
1362  * In addition to various generic IEs, this function can also be
1363  * used to set the ARP filter.
1364  */
mwifiex_misc_ioctl_gen_ie(struct mwifiex_private * priv,struct mwifiex_ds_misc_gen_ie * gen_ie,u16 action)1365 static int mwifiex_misc_ioctl_gen_ie(struct mwifiex_private *priv,
1366 				     struct mwifiex_ds_misc_gen_ie *gen_ie,
1367 				     u16 action)
1368 {
1369 	struct mwifiex_adapter *adapter = priv->adapter;
1370 
1371 	switch (gen_ie->type) {
1372 	case MWIFIEX_IE_TYPE_GEN_IE:
1373 		if (action == HostCmd_ACT_GEN_GET) {
1374 			gen_ie->len = priv->wpa_ie_len;
1375 			memcpy(gen_ie->ie_data, priv->wpa_ie, gen_ie->len);
1376 		} else {
1377 			mwifiex_set_gen_ie_helper(priv, gen_ie->ie_data,
1378 						  (u16) gen_ie->len);
1379 		}
1380 		break;
1381 	case MWIFIEX_IE_TYPE_ARP_FILTER:
1382 		memset(adapter->arp_filter, 0, sizeof(adapter->arp_filter));
1383 		if (gen_ie->len > ARP_FILTER_MAX_BUF_SIZE) {
1384 			adapter->arp_filter_size = 0;
1385 			mwifiex_dbg(adapter, ERROR,
1386 				    "invalid ARP filter size\n");
1387 			return -1;
1388 		} else {
1389 			memcpy(adapter->arp_filter, gen_ie->ie_data,
1390 			       gen_ie->len);
1391 			adapter->arp_filter_size = gen_ie->len;
1392 		}
1393 		break;
1394 	default:
1395 		mwifiex_dbg(adapter, ERROR, "invalid IE type\n");
1396 		return -1;
1397 	}
1398 	return 0;
1399 }
1400 
1401 /*
1402  * Sends IOCTL request to set a generic IE.
1403  *
1404  * This function allocates the IOCTL request buffer, fills it
1405  * with requisite parameters and calls the IOCTL handler.
1406  */
1407 int
mwifiex_set_gen_ie(struct mwifiex_private * priv,const u8 * ie,int ie_len)1408 mwifiex_set_gen_ie(struct mwifiex_private *priv, const u8 *ie, int ie_len)
1409 {
1410 	struct mwifiex_ds_misc_gen_ie gen_ie;
1411 
1412 	if (ie_len > IEEE_MAX_IE_SIZE)
1413 		return -EFAULT;
1414 
1415 	gen_ie.type = MWIFIEX_IE_TYPE_GEN_IE;
1416 	gen_ie.len = ie_len;
1417 	memcpy(gen_ie.ie_data, ie, ie_len);
1418 	if (mwifiex_misc_ioctl_gen_ie(priv, &gen_ie, HostCmd_ACT_GEN_SET))
1419 		return -EFAULT;
1420 
1421 	return 0;
1422 }
1423