1/*
2 *	Driver for ZyDAS zd1201 based wireless USB devices.
3 *
4 *	Copyright (c) 2004, 2005 Jeroen Vreeken (pe1rxq@amsat.org)
5 *
6 *	This program is free software; you can redistribute it and/or
7 *	modify it under the terms of the GNU General Public License
8 *	version 2 as published by the Free Software Foundation.
9 *
10 *	Parts of this driver have been derived from a wlan-ng version
11 *	modified by ZyDAS. They also made documentation available, thanks!
12 *	Copyright (C) 1999 AbsoluteValue Systems, Inc.  All Rights Reserved.
13 */
14
15#include <linux/module.h>
16#include <linux/usb.h>
17#include <linux/slab.h>
18#include <linux/netdevice.h>
19#include <linux/etherdevice.h>
20#include <linux/wireless.h>
21#include <net/cfg80211.h>
22#include <net/iw_handler.h>
23#include <linux/string.h>
24#include <linux/if_arp.h>
25#include <linux/firmware.h>
26#include "zd1201.h"
27
28static struct usb_device_id zd1201_table[] = {
29	{USB_DEVICE(0x0586, 0x3400)}, /* Peabird Wireless USB Adapter */
30	{USB_DEVICE(0x0ace, 0x1201)}, /* ZyDAS ZD1201 Wireless USB Adapter */
31	{USB_DEVICE(0x050d, 0x6051)}, /* Belkin F5D6051 usb  adapter */
32	{USB_DEVICE(0x0db0, 0x6823)}, /* MSI UB11B usb  adapter */
33	{USB_DEVICE(0x1044, 0x8004)}, /* Gigabyte GN-WLBZ101 */
34	{USB_DEVICE(0x1044, 0x8005)}, /* GIGABYTE GN-WLBZ201 usb adapter */
35	{}
36};
37
38static int ap;	/* Are we an AP or a normal station? */
39
40#define ZD1201_VERSION	"0.15"
41
42MODULE_AUTHOR("Jeroen Vreeken <pe1rxq@amsat.org>");
43MODULE_DESCRIPTION("Driver for ZyDAS ZD1201 based USB Wireless adapters");
44MODULE_VERSION(ZD1201_VERSION);
45MODULE_LICENSE("GPL");
46module_param(ap, int, 0);
47MODULE_PARM_DESC(ap, "If non-zero Access Point firmware will be loaded");
48MODULE_DEVICE_TABLE(usb, zd1201_table);
49
50
51static int zd1201_fw_upload(struct usb_device *dev, int apfw)
52{
53	const struct firmware *fw_entry;
54	const char *data;
55	unsigned long len;
56	int err;
57	unsigned char ret;
58	char *buf;
59	char *fwfile;
60
61	if (apfw)
62		fwfile = "zd1201-ap.fw";
63	else
64		fwfile = "zd1201.fw";
65
66	err = request_firmware(&fw_entry, fwfile, &dev->dev);
67	if (err) {
68		dev_err(&dev->dev, "Failed to load %s firmware file!\n", fwfile);
69		dev_err(&dev->dev, "Make sure the hotplug firmware loader is installed.\n");
70		dev_err(&dev->dev, "Goto http://linux-lc100020.sourceforge.net for more info.\n");
71		return err;
72	}
73
74	data = fw_entry->data;
75        len = fw_entry->size;
76
77	buf = kmalloc(1024, GFP_ATOMIC);
78	if (!buf) {
79		err = -ENOMEM;
80		goto exit;
81	}
82
83	while (len > 0) {
84		int translen = (len > 1024) ? 1024 : len;
85		memcpy(buf, data, translen);
86
87		err = usb_control_msg(dev, usb_sndctrlpipe(dev, 0), 0,
88		    USB_DIR_OUT | 0x40, 0, 0, buf, translen,
89		    ZD1201_FW_TIMEOUT);
90		if (err < 0)
91			goto exit;
92
93		len -= translen;
94		data += translen;
95	}
96
97	err = usb_control_msg(dev, usb_sndctrlpipe(dev, 0), 0x2,
98	    USB_DIR_OUT | 0x40, 0, 0, NULL, 0, ZD1201_FW_TIMEOUT);
99	if (err < 0)
100		goto exit;
101
102	err = usb_control_msg(dev, usb_rcvctrlpipe(dev, 0), 0x4,
103	    USB_DIR_IN | 0x40, 0, 0, buf, sizeof(ret), ZD1201_FW_TIMEOUT);
104	if (err < 0)
105		goto exit;
106
107	memcpy(&ret, buf, sizeof(ret));
108
109	if (ret & 0x80) {
110		err = -EIO;
111		goto exit;
112	}
113
114	err = 0;
115exit:
116	kfree(buf);
117	release_firmware(fw_entry);
118	return err;
119}
120
121MODULE_FIRMWARE("zd1201-ap.fw");
122MODULE_FIRMWARE("zd1201.fw");
123
124static void zd1201_usbfree(struct urb *urb)
125{
126	struct zd1201 *zd = urb->context;
127
128	switch(urb->status) {
129		case -EILSEQ:
130		case -ENODEV:
131		case -ETIME:
132		case -ENOENT:
133		case -EPIPE:
134		case -EOVERFLOW:
135		case -ESHUTDOWN:
136			dev_warn(&zd->usb->dev, "%s: urb failed: %d\n",
137			    zd->dev->name, urb->status);
138	}
139
140	kfree(urb->transfer_buffer);
141	usb_free_urb(urb);
142}
143
144/* cmdreq message:
145	u32 type
146	u16 cmd
147	u16 parm0
148	u16 parm1
149	u16 parm2
150	u8  pad[4]
151
152	total: 4 + 2 + 2 + 2 + 2 + 4 = 16
153*/
154static int zd1201_docmd(struct zd1201 *zd, int cmd, int parm0,
155			int parm1, int parm2)
156{
157	unsigned char *command;
158	int ret;
159	struct urb *urb;
160
161	command = kmalloc(16, GFP_ATOMIC);
162	if (!command)
163		return -ENOMEM;
164
165	*((__le32*)command) = cpu_to_le32(ZD1201_USB_CMDREQ);
166	*((__le16*)&command[4]) = cpu_to_le16(cmd);
167	*((__le16*)&command[6]) = cpu_to_le16(parm0);
168	*((__le16*)&command[8]) = cpu_to_le16(parm1);
169	*((__le16*)&command[10])= cpu_to_le16(parm2);
170
171	urb = usb_alloc_urb(0, GFP_ATOMIC);
172	if (!urb) {
173		kfree(command);
174		return -ENOMEM;
175	}
176	usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb, zd->endp_out2),
177			  command, 16, zd1201_usbfree, zd);
178	ret = usb_submit_urb(urb, GFP_ATOMIC);
179	if (ret) {
180		kfree(command);
181		usb_free_urb(urb);
182	}
183
184	return ret;
185}
186
187/* Callback after sending out a packet */
188static void zd1201_usbtx(struct urb *urb)
189{
190	struct zd1201 *zd = urb->context;
191	netif_wake_queue(zd->dev);
192}
193
194/* Incoming data */
195static void zd1201_usbrx(struct urb *urb)
196{
197	struct zd1201 *zd = urb->context;
198	int free = 0;
199	unsigned char *data = urb->transfer_buffer;
200	struct sk_buff *skb;
201	unsigned char type;
202
203	if (!zd)
204		return;
205
206	switch(urb->status) {
207		case -EILSEQ:
208		case -ENODEV:
209		case -ETIME:
210		case -ENOENT:
211		case -EPIPE:
212		case -EOVERFLOW:
213		case -ESHUTDOWN:
214			dev_warn(&zd->usb->dev, "%s: rx urb failed: %d\n",
215			    zd->dev->name, urb->status);
216			free = 1;
217			goto exit;
218	}
219
220	if (urb->status != 0 || urb->actual_length == 0)
221		goto resubmit;
222
223	type = data[0];
224	if (type == ZD1201_PACKET_EVENTSTAT || type == ZD1201_PACKET_RESOURCE) {
225		memcpy(zd->rxdata, data, urb->actual_length);
226		zd->rxlen = urb->actual_length;
227		zd->rxdatas = 1;
228		wake_up(&zd->rxdataq);
229	}
230	/* Info frame */
231	if (type == ZD1201_PACKET_INQUIRE) {
232		int i = 0;
233		unsigned short infotype, framelen, copylen;
234		framelen = le16_to_cpu(*(__le16*)&data[4]);
235		infotype = le16_to_cpu(*(__le16*)&data[6]);
236
237		if (infotype == ZD1201_INF_LINKSTATUS) {
238			short linkstatus;
239
240			linkstatus = le16_to_cpu(*(__le16*)&data[8]);
241			switch(linkstatus) {
242				case 1:
243					netif_carrier_on(zd->dev);
244					break;
245				case 2:
246					netif_carrier_off(zd->dev);
247					break;
248				case 3:
249					netif_carrier_off(zd->dev);
250					break;
251				case 4:
252					netif_carrier_on(zd->dev);
253					break;
254				default:
255					netif_carrier_off(zd->dev);
256			}
257			goto resubmit;
258		}
259		if (infotype == ZD1201_INF_ASSOCSTATUS) {
260			short status = le16_to_cpu(*(__le16*)(data+8));
261			int event;
262			union iwreq_data wrqu;
263
264			switch (status) {
265				case ZD1201_ASSOCSTATUS_STAASSOC:
266				case ZD1201_ASSOCSTATUS_REASSOC:
267					event = IWEVREGISTERED;
268					break;
269				case ZD1201_ASSOCSTATUS_DISASSOC:
270				case ZD1201_ASSOCSTATUS_ASSOCFAIL:
271				case ZD1201_ASSOCSTATUS_AUTHFAIL:
272				default:
273					event = IWEVEXPIRED;
274			}
275			memcpy(wrqu.addr.sa_data, data+10, ETH_ALEN);
276			wrqu.addr.sa_family = ARPHRD_ETHER;
277
278			/* Send event to user space */
279			wireless_send_event(zd->dev, event, &wrqu, NULL);
280
281			goto resubmit;
282		}
283		if (infotype == ZD1201_INF_AUTHREQ) {
284			union iwreq_data wrqu;
285
286			memcpy(wrqu.addr.sa_data, data+8, ETH_ALEN);
287			wrqu.addr.sa_family = ARPHRD_ETHER;
288			/* There isn't a event that trully fits this request.
289			   We assume that userspace will be smart enough to
290			   see a new station being expired and sends back a
291			   authstation ioctl to authorize it. */
292			wireless_send_event(zd->dev, IWEVEXPIRED, &wrqu, NULL);
293			goto resubmit;
294		}
295		/* Other infotypes are handled outside this handler */
296		zd->rxlen = 0;
297		while (i < urb->actual_length) {
298			copylen = le16_to_cpu(*(__le16*)&data[i+2]);
299			/* Sanity check, sometimes we get junk */
300			if (copylen+zd->rxlen > sizeof(zd->rxdata))
301				break;
302			memcpy(zd->rxdata+zd->rxlen, data+i+4, copylen);
303			zd->rxlen += copylen;
304			i += 64;
305		}
306		if (i >= urb->actual_length) {
307			zd->rxdatas = 1;
308			wake_up(&zd->rxdataq);
309		}
310		goto  resubmit;
311	}
312	/* Actual data */
313	if (data[urb->actual_length-1] == ZD1201_PACKET_RXDATA) {
314		int datalen = urb->actual_length-1;
315		unsigned short len, fc, seq;
316
317		len = ntohs(*(__be16 *)&data[datalen-2]);
318		if (len>datalen)
319			len=datalen;
320		fc = le16_to_cpu(*(__le16 *)&data[datalen-16]);
321		seq = le16_to_cpu(*(__le16 *)&data[datalen-24]);
322
323		if (zd->monitor) {
324			if (datalen < 24)
325				goto resubmit;
326			if (!(skb = dev_alloc_skb(datalen+24)))
327				goto resubmit;
328
329			memcpy(skb_put(skb, 2), &data[datalen-16], 2);
330			memcpy(skb_put(skb, 2), &data[datalen-2], 2);
331			memcpy(skb_put(skb, 6), &data[datalen-14], 6);
332			memcpy(skb_put(skb, 6), &data[datalen-22], 6);
333			memcpy(skb_put(skb, 6), &data[datalen-8], 6);
334			memcpy(skb_put(skb, 2), &data[datalen-24], 2);
335			memcpy(skb_put(skb, len), data, len);
336			skb->protocol = eth_type_trans(skb, zd->dev);
337			zd->dev->stats.rx_packets++;
338			zd->dev->stats.rx_bytes += skb->len;
339			netif_rx(skb);
340			goto resubmit;
341		}
342
343		if ((seq & IEEE80211_SCTL_FRAG) ||
344		    (fc & IEEE80211_FCTL_MOREFRAGS)) {
345			struct zd1201_frag *frag = NULL;
346			char *ptr;
347
348			if (datalen<14)
349				goto resubmit;
350			if ((seq & IEEE80211_SCTL_FRAG) == 0) {
351				frag = kmalloc(sizeof(*frag), GFP_ATOMIC);
352				if (!frag)
353					goto resubmit;
354				skb = dev_alloc_skb(IEEE80211_MAX_DATA_LEN +14+2);
355				if (!skb) {
356					kfree(frag);
357					goto resubmit;
358				}
359				frag->skb = skb;
360				frag->seq = seq & IEEE80211_SCTL_SEQ;
361				skb_reserve(skb, 2);
362				memcpy(skb_put(skb, 12), &data[datalen-14], 12);
363				memcpy(skb_put(skb, 2), &data[6], 2);
364				memcpy(skb_put(skb, len), data+8, len);
365				hlist_add_head(&frag->fnode, &zd->fraglist);
366				goto resubmit;
367			}
368			hlist_for_each_entry(frag, &zd->fraglist, fnode)
369				if (frag->seq == (seq&IEEE80211_SCTL_SEQ))
370					break;
371			if (!frag)
372				goto resubmit;
373			skb = frag->skb;
374			ptr = skb_put(skb, len);
375			if (ptr)
376				memcpy(ptr, data+8, len);
377			if (fc & IEEE80211_FCTL_MOREFRAGS)
378				goto resubmit;
379			hlist_del_init(&frag->fnode);
380			kfree(frag);
381		} else {
382			if (datalen<14)
383				goto resubmit;
384			skb = dev_alloc_skb(len + 14 + 2);
385			if (!skb)
386				goto resubmit;
387			skb_reserve(skb, 2);
388			memcpy(skb_put(skb, 12), &data[datalen-14], 12);
389			memcpy(skb_put(skb, 2), &data[6], 2);
390			memcpy(skb_put(skb, len), data+8, len);
391		}
392		skb->protocol = eth_type_trans(skb, zd->dev);
393		zd->dev->stats.rx_packets++;
394		zd->dev->stats.rx_bytes += skb->len;
395		netif_rx(skb);
396	}
397resubmit:
398	memset(data, 0, ZD1201_RXSIZE);
399
400	urb->status = 0;
401	urb->dev = zd->usb;
402	if(usb_submit_urb(urb, GFP_ATOMIC))
403		free = 1;
404
405exit:
406	if (free) {
407		zd->rxlen = 0;
408		zd->rxdatas = 1;
409		wake_up(&zd->rxdataq);
410		kfree(urb->transfer_buffer);
411	}
412}
413
414static int zd1201_getconfig(struct zd1201 *zd, int rid, void *riddata,
415	unsigned int riddatalen)
416{
417	int err;
418	int i = 0;
419	int code;
420	int rid_fid;
421	int length;
422	unsigned char *pdata;
423
424	zd->rxdatas = 0;
425	err = zd1201_docmd(zd, ZD1201_CMDCODE_ACCESS, rid, 0, 0);
426	if (err)
427		return err;
428
429	wait_event_interruptible(zd->rxdataq, zd->rxdatas);
430	if (!zd->rxlen)
431		return -EIO;
432
433	code = le16_to_cpu(*(__le16*)(&zd->rxdata[4]));
434	rid_fid = le16_to_cpu(*(__le16*)(&zd->rxdata[6]));
435	length = le16_to_cpu(*(__le16*)(&zd->rxdata[8]));
436	if (length > zd->rxlen)
437		length = zd->rxlen-6;
438
439	/* If access bit is not on, then error */
440	if ((code & ZD1201_ACCESSBIT) != ZD1201_ACCESSBIT || rid_fid != rid )
441		return -EINVAL;
442
443	/* Not enough buffer for allocating data */
444	if (riddatalen != (length - 4)) {
445		dev_dbg(&zd->usb->dev, "riddatalen mismatches, expected=%u, (packet=%u) length=%u, rid=0x%04X, rid_fid=0x%04X\n",
446		    riddatalen, zd->rxlen, length, rid, rid_fid);
447		return -ENODATA;
448	}
449
450	zd->rxdatas = 0;
451	/* Issue SetRxRid commnd */
452	err = zd1201_docmd(zd, ZD1201_CMDCODE_SETRXRID, rid, 0, length);
453	if (err)
454		return err;
455
456	/* Receive RID record from resource packets */
457	wait_event_interruptible(zd->rxdataq, zd->rxdatas);
458	if (!zd->rxlen)
459		return -EIO;
460
461	if (zd->rxdata[zd->rxlen - 1] != ZD1201_PACKET_RESOURCE) {
462		dev_dbg(&zd->usb->dev, "Packet type mismatch: 0x%x not 0x3\n",
463		    zd->rxdata[zd->rxlen-1]);
464		return -EINVAL;
465	}
466
467	/* Set the data pointer and received data length */
468	pdata = zd->rxdata;
469	length = zd->rxlen;
470
471	do {
472		int actual_length;
473
474		actual_length = (length > 64) ? 64 : length;
475
476		if (pdata[0] != 0x3) {
477			dev_dbg(&zd->usb->dev, "Rx Resource packet type error: %02X\n",
478			    pdata[0]);
479			return -EINVAL;
480		}
481
482		if (actual_length != 64) {
483			/* Trim the last packet type byte */
484			actual_length--;
485		}
486
487		/* Skip the 4 bytes header (RID length and RID) */
488		if (i == 0) {
489			pdata += 8;
490			actual_length -= 8;
491		} else {
492			pdata += 4;
493			actual_length -= 4;
494		}
495
496		memcpy(riddata, pdata, actual_length);
497		riddata += actual_length;
498		pdata += actual_length;
499		length -= 64;
500		i++;
501	} while (length > 0);
502
503	return 0;
504}
505
506/*
507 *	resreq:
508 *		byte	type
509 *		byte	sequence
510 *		u16	reserved
511 *		byte	data[12]
512 *	total: 16
513 */
514static int zd1201_setconfig(struct zd1201 *zd, int rid, void *buf, int len, int wait)
515{
516	int err;
517	unsigned char *request;
518	int reqlen;
519	char seq=0;
520	struct urb *urb;
521	gfp_t gfp_mask = wait ? GFP_NOIO : GFP_ATOMIC;
522
523	len += 4;			/* first 4 are for header */
524
525	zd->rxdatas = 0;
526	zd->rxlen = 0;
527	for (seq=0; len > 0; seq++) {
528		request = kmalloc(16, gfp_mask);
529		if (!request)
530			return -ENOMEM;
531		urb = usb_alloc_urb(0, gfp_mask);
532		if (!urb) {
533			kfree(request);
534			return -ENOMEM;
535		}
536		memset(request, 0, 16);
537		reqlen = len>12 ? 12 : len;
538		request[0] = ZD1201_USB_RESREQ;
539		request[1] = seq;
540		request[2] = 0;
541		request[3] = 0;
542		if (request[1] == 0) {
543			/* add header */
544			*(__le16*)&request[4] = cpu_to_le16((len-2+1)/2);
545			*(__le16*)&request[6] = cpu_to_le16(rid);
546			memcpy(request+8, buf, reqlen-4);
547			buf += reqlen-4;
548		} else {
549			memcpy(request+4, buf, reqlen);
550			buf += reqlen;
551		}
552
553		len -= reqlen;
554
555		usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb,
556		    zd->endp_out2), request, 16, zd1201_usbfree, zd);
557		err = usb_submit_urb(urb, gfp_mask);
558		if (err)
559			goto err;
560	}
561
562	request = kmalloc(16, gfp_mask);
563	if (!request)
564		return -ENOMEM;
565	urb = usb_alloc_urb(0, gfp_mask);
566	if (!urb) {
567		kfree(request);
568		return -ENOMEM;
569	}
570	*((__le32*)request) = cpu_to_le32(ZD1201_USB_CMDREQ);
571	*((__le16*)&request[4]) =
572	    cpu_to_le16(ZD1201_CMDCODE_ACCESS|ZD1201_ACCESSBIT);
573	*((__le16*)&request[6]) = cpu_to_le16(rid);
574	*((__le16*)&request[8]) = cpu_to_le16(0);
575	*((__le16*)&request[10]) = cpu_to_le16(0);
576	usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb, zd->endp_out2),
577	     request, 16, zd1201_usbfree, zd);
578	err = usb_submit_urb(urb, gfp_mask);
579	if (err)
580		goto err;
581
582	if (wait) {
583		wait_event_interruptible(zd->rxdataq, zd->rxdatas);
584		if (!zd->rxlen || le16_to_cpu(*(__le16*)&zd->rxdata[6]) != rid) {
585			dev_dbg(&zd->usb->dev, "wrong or no RID received\n");
586		}
587	}
588
589	return 0;
590err:
591	kfree(request);
592	usb_free_urb(urb);
593	return err;
594}
595
596static inline int zd1201_getconfig16(struct zd1201 *zd, int rid, short *val)
597{
598	int err;
599	__le16 zdval;
600
601	err = zd1201_getconfig(zd, rid, &zdval, sizeof(__le16));
602	if (err)
603		return err;
604	*val = le16_to_cpu(zdval);
605	return 0;
606}
607
608static inline int zd1201_setconfig16(struct zd1201 *zd, int rid, short val)
609{
610	__le16 zdval = cpu_to_le16(val);
611	return (zd1201_setconfig(zd, rid, &zdval, sizeof(__le16), 1));
612}
613
614static int zd1201_drvr_start(struct zd1201 *zd)
615{
616	int err, i;
617	short max;
618	__le16 zdmax;
619	unsigned char *buffer;
620
621	buffer = kzalloc(ZD1201_RXSIZE, GFP_KERNEL);
622	if (!buffer)
623		return -ENOMEM;
624
625	usb_fill_bulk_urb(zd->rx_urb, zd->usb,
626	    usb_rcvbulkpipe(zd->usb, zd->endp_in), buffer, ZD1201_RXSIZE,
627	    zd1201_usbrx, zd);
628
629	err = usb_submit_urb(zd->rx_urb, GFP_KERNEL);
630	if (err)
631		goto err_buffer;
632
633	err = zd1201_docmd(zd, ZD1201_CMDCODE_INIT, 0, 0, 0);
634	if (err)
635		goto err_urb;
636
637	err = zd1201_getconfig(zd, ZD1201_RID_CNFMAXTXBUFFERNUMBER, &zdmax,
638	    sizeof(__le16));
639	if (err)
640		goto err_urb;
641
642	max = le16_to_cpu(zdmax);
643	for (i=0; i<max; i++) {
644		err = zd1201_docmd(zd, ZD1201_CMDCODE_ALLOC, 1514, 0, 0);
645		if (err)
646			goto err_urb;
647	}
648
649	return 0;
650
651err_urb:
652	usb_kill_urb(zd->rx_urb);
653	return err;
654err_buffer:
655	kfree(buffer);
656	return err;
657}
658
659/*	Magic alert: The firmware doesn't seem to like the MAC state being
660 *	toggled in promisc (aka monitor) mode.
661 *	(It works a number of times, but will halt eventually)
662 *	So we turn it of before disabling and on after enabling if needed.
663 */
664static int zd1201_enable(struct zd1201 *zd)
665{
666	int err;
667
668	if (zd->mac_enabled)
669		return 0;
670
671	err = zd1201_docmd(zd, ZD1201_CMDCODE_ENABLE, 0, 0, 0);
672	if (!err)
673		zd->mac_enabled = 1;
674
675	if (zd->monitor)
676		err = zd1201_setconfig16(zd, ZD1201_RID_PROMISCUOUSMODE, 1);
677
678	return err;
679}
680
681static int zd1201_disable(struct zd1201 *zd)
682{
683	int err;
684
685	if (!zd->mac_enabled)
686		return 0;
687	if (zd->monitor) {
688		err = zd1201_setconfig16(zd, ZD1201_RID_PROMISCUOUSMODE, 0);
689		if (err)
690			return err;
691	}
692
693	err = zd1201_docmd(zd, ZD1201_CMDCODE_DISABLE, 0, 0, 0);
694	if (!err)
695		zd->mac_enabled = 0;
696	return err;
697}
698
699static int zd1201_mac_reset(struct zd1201 *zd)
700{
701	if (!zd->mac_enabled)
702		return 0;
703	zd1201_disable(zd);
704	return zd1201_enable(zd);
705}
706
707static int zd1201_join(struct zd1201 *zd, char *essid, int essidlen)
708{
709	int err, val;
710	char buf[IW_ESSID_MAX_SIZE+2];
711
712	err = zd1201_disable(zd);
713	if (err)
714		return err;
715
716	val = ZD1201_CNFAUTHENTICATION_OPENSYSTEM;
717	val |= ZD1201_CNFAUTHENTICATION_SHAREDKEY;
718	err = zd1201_setconfig16(zd, ZD1201_RID_CNFAUTHENTICATION, val);
719	if (err)
720		return err;
721
722	*(__le16 *)buf = cpu_to_le16(essidlen);
723	memcpy(buf+2, essid, essidlen);
724	if (!zd->ap) {	/* Normal station */
725		err = zd1201_setconfig(zd, ZD1201_RID_CNFDESIREDSSID, buf,
726		    IW_ESSID_MAX_SIZE+2, 1);
727		if (err)
728			return err;
729	} else {	/* AP */
730		err = zd1201_setconfig(zd, ZD1201_RID_CNFOWNSSID, buf,
731		    IW_ESSID_MAX_SIZE+2, 1);
732		if (err)
733			return err;
734	}
735
736	err = zd1201_setconfig(zd, ZD1201_RID_CNFOWNMACADDR,
737	    zd->dev->dev_addr, zd->dev->addr_len, 1);
738	if (err)
739		return err;
740
741	err = zd1201_enable(zd);
742	if (err)
743		return err;
744
745	msleep(100);
746	return 0;
747}
748
749static int zd1201_net_open(struct net_device *dev)
750{
751	struct zd1201 *zd = netdev_priv(dev);
752
753	/* Start MAC with wildcard if no essid set */
754	if (!zd->mac_enabled)
755		zd1201_join(zd, zd->essid, zd->essidlen);
756	netif_start_queue(dev);
757
758	return 0;
759}
760
761static int zd1201_net_stop(struct net_device *dev)
762{
763	netif_stop_queue(dev);
764	return 0;
765}
766
767/*
768	RFC 1042 encapsulates Ethernet frames in 802.11 frames
769	by prefixing them with 0xaa, 0xaa, 0x03) followed by a SNAP OID of 0
770	(0x00, 0x00, 0x00). Zd requires an additional padding, copy
771	of ethernet addresses, length of the standard RFC 1042 packet
772	and a command byte (which is nul for tx).
773
774	tx frame (from Wlan NG):
775	RFC 1042:
776		llc		0xAA 0xAA 0x03 (802.2 LLC)
777		snap		0x00 0x00 0x00 (Ethernet encapsulated)
778		type		2 bytes, Ethernet type field
779		payload		(minus eth header)
780	Zydas specific:
781		padding		1B if (skb->len+8+1)%64==0
782		Eth MAC addr	12 bytes, Ethernet MAC addresses
783		length		2 bytes, RFC 1042 packet length
784				(llc+snap+type+payload)
785		zd		1 null byte, zd1201 packet type
786 */
787static netdev_tx_t zd1201_hard_start_xmit(struct sk_buff *skb,
788						struct net_device *dev)
789{
790	struct zd1201 *zd = netdev_priv(dev);
791	unsigned char *txbuf = zd->txdata;
792	int txbuflen, pad = 0, err;
793	struct urb *urb = zd->tx_urb;
794
795	if (!zd->mac_enabled || zd->monitor) {
796		dev->stats.tx_dropped++;
797		kfree_skb(skb);
798		return NETDEV_TX_OK;
799	}
800	netif_stop_queue(dev);
801
802	txbuflen = skb->len + 8 + 1;
803	if (txbuflen%64 == 0) {
804		pad = 1;
805		txbuflen++;
806	}
807	txbuf[0] = 0xAA;
808	txbuf[1] = 0xAA;
809	txbuf[2] = 0x03;
810	txbuf[3] = 0x00;	/* rfc1042 */
811	txbuf[4] = 0x00;
812	txbuf[5] = 0x00;
813
814	skb_copy_from_linear_data_offset(skb, 12, txbuf + 6, skb->len - 12);
815	if (pad)
816		txbuf[skb->len-12+6]=0;
817	skb_copy_from_linear_data(skb, txbuf + skb->len - 12 + 6 + pad, 12);
818	*(__be16*)&txbuf[skb->len+6+pad] = htons(skb->len-12+6);
819	txbuf[txbuflen-1] = 0;
820
821	usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb, zd->endp_out),
822	    txbuf, txbuflen, zd1201_usbtx, zd);
823
824	err = usb_submit_urb(zd->tx_urb, GFP_ATOMIC);
825	if (err) {
826		dev->stats.tx_errors++;
827		netif_start_queue(dev);
828	} else {
829		dev->stats.tx_packets++;
830		dev->stats.tx_bytes += skb->len;
831	}
832	kfree_skb(skb);
833
834	return NETDEV_TX_OK;
835}
836
837static void zd1201_tx_timeout(struct net_device *dev)
838{
839	struct zd1201 *zd = netdev_priv(dev);
840
841	if (!zd)
842		return;
843	dev_warn(&zd->usb->dev, "%s: TX timeout, shooting down urb\n",
844	    dev->name);
845	usb_unlink_urb(zd->tx_urb);
846	dev->stats.tx_errors++;
847	/* Restart the timeout to quiet the watchdog: */
848	dev->trans_start = jiffies; /* prevent tx timeout */
849}
850
851static int zd1201_set_mac_address(struct net_device *dev, void *p)
852{
853	struct sockaddr *addr = p;
854	struct zd1201 *zd = netdev_priv(dev);
855	int err;
856
857	if (!zd)
858		return -ENODEV;
859
860	err = zd1201_setconfig(zd, ZD1201_RID_CNFOWNMACADDR,
861	    addr->sa_data, dev->addr_len, 1);
862	if (err)
863		return err;
864	memcpy(dev->dev_addr, addr->sa_data, dev->addr_len);
865
866	return zd1201_mac_reset(zd);
867}
868
869static struct iw_statistics *zd1201_get_wireless_stats(struct net_device *dev)
870{
871	struct zd1201 *zd = netdev_priv(dev);
872
873	return &zd->iwstats;
874}
875
876static void zd1201_set_multicast(struct net_device *dev)
877{
878	struct zd1201 *zd = netdev_priv(dev);
879	struct netdev_hw_addr *ha;
880	unsigned char reqbuf[ETH_ALEN*ZD1201_MAXMULTI];
881	int i;
882
883	if (netdev_mc_count(dev) > ZD1201_MAXMULTI)
884		return;
885
886	i = 0;
887	netdev_for_each_mc_addr(ha, dev)
888		memcpy(reqbuf + i++ * ETH_ALEN, ha->addr, ETH_ALEN);
889	zd1201_setconfig(zd, ZD1201_RID_CNFGROUPADDRESS, reqbuf,
890			 netdev_mc_count(dev) * ETH_ALEN, 0);
891}
892
893static int zd1201_config_commit(struct net_device *dev,
894    struct iw_request_info *info, struct iw_point *data, char *essid)
895{
896	struct zd1201 *zd = netdev_priv(dev);
897
898	return zd1201_mac_reset(zd);
899}
900
901static int zd1201_get_name(struct net_device *dev,
902    struct iw_request_info *info, char *name, char *extra)
903{
904	strcpy(name, "IEEE 802.11b");
905	return 0;
906}
907
908static int zd1201_set_freq(struct net_device *dev,
909    struct iw_request_info *info, struct iw_freq *freq, char *extra)
910{
911	struct zd1201 *zd = netdev_priv(dev);
912	short channel = 0;
913	int err;
914
915	if (freq->e == 0)
916		channel = freq->m;
917	else
918		channel = ieee80211_frequency_to_channel(freq->m);
919
920	err = zd1201_setconfig16(zd, ZD1201_RID_CNFOWNCHANNEL, channel);
921	if (err)
922		return err;
923
924	zd1201_mac_reset(zd);
925
926	return 0;
927}
928
929static int zd1201_get_freq(struct net_device *dev,
930    struct iw_request_info *info, struct iw_freq *freq, char *extra)
931{
932	struct zd1201 *zd = netdev_priv(dev);
933	short channel;
934	int err;
935
936	err = zd1201_getconfig16(zd, ZD1201_RID_CNFOWNCHANNEL, &channel);
937	if (err)
938		return err;
939	freq->e = 0;
940	freq->m = channel;
941
942	return 0;
943}
944
945static int zd1201_set_mode(struct net_device *dev,
946    struct iw_request_info *info, __u32 *mode, char *extra)
947{
948	struct zd1201 *zd = netdev_priv(dev);
949	short porttype, monitor = 0;
950	unsigned char buffer[IW_ESSID_MAX_SIZE+2];
951	int err;
952
953	if (zd->ap) {
954		if (*mode != IW_MODE_MASTER)
955			return -EINVAL;
956		return 0;
957	}
958
959	err = zd1201_setconfig16(zd, ZD1201_RID_PROMISCUOUSMODE, 0);
960	if (err)
961		return err;
962	zd->dev->type = ARPHRD_ETHER;
963	switch(*mode) {
964		case IW_MODE_MONITOR:
965			monitor = 1;
966			zd->dev->type = ARPHRD_IEEE80211;
967			/* Make sure we are no longer associated with by
968			   setting an 'impossible' essid.
969			   (otherwise we mess up firmware)
970			 */
971			zd1201_join(zd, "\0-*#\0", 5);
972			/* Put port in pIBSS */
973		case 8: /* No pseudo-IBSS in wireless extensions (yet) */
974			porttype = ZD1201_PORTTYPE_PSEUDOIBSS;
975			break;
976		case IW_MODE_ADHOC:
977			porttype = ZD1201_PORTTYPE_IBSS;
978			break;
979		case IW_MODE_INFRA:
980			porttype = ZD1201_PORTTYPE_BSS;
981			break;
982		default:
983			return -EINVAL;
984	}
985
986	err = zd1201_setconfig16(zd, ZD1201_RID_CNFPORTTYPE, porttype);
987	if (err)
988		return err;
989	if (zd->monitor && !monitor) {
990			zd1201_disable(zd);
991			*(__le16 *)buffer = cpu_to_le16(zd->essidlen);
992			memcpy(buffer+2, zd->essid, zd->essidlen);
993			err = zd1201_setconfig(zd, ZD1201_RID_CNFDESIREDSSID,
994			    buffer, IW_ESSID_MAX_SIZE+2, 1);
995			if (err)
996				return err;
997	}
998	zd->monitor = monitor;
999	/* If monitor mode is set we don't actually turn it on here since it
1000	 * is done during mac reset anyway (see zd1201_mac_enable).
1001	 */
1002	zd1201_mac_reset(zd);
1003
1004	return 0;
1005}
1006
1007static int zd1201_get_mode(struct net_device *dev,
1008    struct iw_request_info *info, __u32 *mode, char *extra)
1009{
1010	struct zd1201 *zd = netdev_priv(dev);
1011	short porttype;
1012	int err;
1013
1014	err = zd1201_getconfig16(zd, ZD1201_RID_CNFPORTTYPE, &porttype);
1015	if (err)
1016		return err;
1017	switch(porttype) {
1018		case ZD1201_PORTTYPE_IBSS:
1019			*mode = IW_MODE_ADHOC;
1020			break;
1021		case ZD1201_PORTTYPE_BSS:
1022			*mode = IW_MODE_INFRA;
1023			break;
1024		case ZD1201_PORTTYPE_WDS:
1025			*mode = IW_MODE_REPEAT;
1026			break;
1027		case ZD1201_PORTTYPE_PSEUDOIBSS:
1028			*mode = 8;/* No Pseudo-IBSS... */
1029			break;
1030		case ZD1201_PORTTYPE_AP:
1031			*mode = IW_MODE_MASTER;
1032			break;
1033		default:
1034			dev_dbg(&zd->usb->dev, "Unknown porttype: %d\n",
1035			    porttype);
1036			*mode = IW_MODE_AUTO;
1037	}
1038	if (zd->monitor)
1039		*mode = IW_MODE_MONITOR;
1040
1041	return 0;
1042}
1043
1044static int zd1201_get_range(struct net_device *dev,
1045    struct iw_request_info *info, struct iw_point *wrq, char *extra)
1046{
1047	struct iw_range *range = (struct iw_range *)extra;
1048
1049	wrq->length = sizeof(struct iw_range);
1050	memset(range, 0, sizeof(struct iw_range));
1051	range->we_version_compiled = WIRELESS_EXT;
1052	range->we_version_source = WIRELESS_EXT;
1053
1054	range->max_qual.qual = 128;
1055	range->max_qual.level = 128;
1056	range->max_qual.noise = 128;
1057	range->max_qual.updated = 7;
1058
1059	range->encoding_size[0] = 5;
1060	range->encoding_size[1] = 13;
1061	range->num_encoding_sizes = 2;
1062	range->max_encoding_tokens = ZD1201_NUMKEYS;
1063
1064	range->num_bitrates = 4;
1065	range->bitrate[0] = 1000000;
1066	range->bitrate[1] = 2000000;
1067	range->bitrate[2] = 5500000;
1068	range->bitrate[3] = 11000000;
1069
1070	range->min_rts = 0;
1071	range->min_frag = ZD1201_FRAGMIN;
1072	range->max_rts = ZD1201_RTSMAX;
1073	range->min_frag = ZD1201_FRAGMAX;
1074
1075	return 0;
1076}
1077
1078/*	Little bit of magic here: we only get the quality if we poll
1079 *	for it, and we never get an actual request to trigger such
1080 *	a poll. Therefore we 'assume' that the user will soon ask for
1081 *	the stats after asking the bssid.
1082 */
1083static int zd1201_get_wap(struct net_device *dev,
1084    struct iw_request_info *info, struct sockaddr *ap_addr, char *extra)
1085{
1086	struct zd1201 *zd = netdev_priv(dev);
1087	unsigned char buffer[6];
1088
1089	if (!zd1201_getconfig(zd, ZD1201_RID_COMMSQUALITY, buffer, 6)) {
1090		/* Unfortunately the quality and noise reported is useless.
1091		   they seem to be accumulators that increase until you
1092		   read them, unless we poll on a fixed interval we can't
1093		   use them
1094		 */
1095		/*zd->iwstats.qual.qual = le16_to_cpu(((__le16 *)buffer)[0]);*/
1096		zd->iwstats.qual.level = le16_to_cpu(((__le16 *)buffer)[1]);
1097		/*zd->iwstats.qual.noise = le16_to_cpu(((__le16 *)buffer)[2]);*/
1098		zd->iwstats.qual.updated = 2;
1099	}
1100
1101	return zd1201_getconfig(zd, ZD1201_RID_CURRENTBSSID, ap_addr->sa_data, 6);
1102}
1103
1104static int zd1201_set_scan(struct net_device *dev,
1105    struct iw_request_info *info, struct iw_point *srq, char *extra)
1106{
1107	/* We do everything in get_scan */
1108	return 0;
1109}
1110
1111static int zd1201_get_scan(struct net_device *dev,
1112    struct iw_request_info *info, struct iw_point *srq, char *extra)
1113{
1114	struct zd1201 *zd = netdev_priv(dev);
1115	int err, i, j, enabled_save;
1116	struct iw_event iwe;
1117	char *cev = extra;
1118	char *end_buf = extra + IW_SCAN_MAX_DATA;
1119
1120	/* No scanning in AP mode */
1121	if (zd->ap)
1122		return -EOPNOTSUPP;
1123
1124	/* Scan doesn't seem to work if disabled */
1125	enabled_save = zd->mac_enabled;
1126	zd1201_enable(zd);
1127
1128	zd->rxdatas = 0;
1129	err = zd1201_docmd(zd, ZD1201_CMDCODE_INQUIRE,
1130	     ZD1201_INQ_SCANRESULTS, 0, 0);
1131	if (err)
1132		return err;
1133
1134	wait_event_interruptible(zd->rxdataq, zd->rxdatas);
1135	if (!zd->rxlen)
1136		return -EIO;
1137
1138	if (le16_to_cpu(*(__le16*)&zd->rxdata[2]) != ZD1201_INQ_SCANRESULTS)
1139		return -EIO;
1140
1141	for(i=8; i<zd->rxlen; i+=62) {
1142		iwe.cmd = SIOCGIWAP;
1143		iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
1144		memcpy(iwe.u.ap_addr.sa_data, zd->rxdata+i+6, 6);
1145		cev = iwe_stream_add_event(info, cev, end_buf,
1146					   &iwe, IW_EV_ADDR_LEN);
1147
1148		iwe.cmd = SIOCGIWESSID;
1149		iwe.u.data.length = zd->rxdata[i+16];
1150		iwe.u.data.flags = 1;
1151		cev = iwe_stream_add_point(info, cev, end_buf,
1152					   &iwe, zd->rxdata+i+18);
1153
1154		iwe.cmd = SIOCGIWMODE;
1155		if (zd->rxdata[i+14]&0x01)
1156			iwe.u.mode = IW_MODE_MASTER;
1157		else
1158			iwe.u.mode = IW_MODE_ADHOC;
1159		cev = iwe_stream_add_event(info, cev, end_buf,
1160					   &iwe, IW_EV_UINT_LEN);
1161
1162		iwe.cmd = SIOCGIWFREQ;
1163		iwe.u.freq.m = zd->rxdata[i+0];
1164		iwe.u.freq.e = 0;
1165		cev = iwe_stream_add_event(info, cev, end_buf,
1166					   &iwe, IW_EV_FREQ_LEN);
1167
1168		iwe.cmd = SIOCGIWRATE;
1169		iwe.u.bitrate.fixed = 0;
1170		iwe.u.bitrate.disabled = 0;
1171		for (j=0; j<10; j++) if (zd->rxdata[i+50+j]) {
1172			iwe.u.bitrate.value = (zd->rxdata[i+50+j]&0x7f)*500000;
1173			cev = iwe_stream_add_event(info, cev, end_buf,
1174						   &iwe, IW_EV_PARAM_LEN);
1175		}
1176
1177		iwe.cmd = SIOCGIWENCODE;
1178		iwe.u.data.length = 0;
1179		if (zd->rxdata[i+14]&0x10)
1180			iwe.u.data.flags = IW_ENCODE_ENABLED;
1181		else
1182			iwe.u.data.flags = IW_ENCODE_DISABLED;
1183		cev = iwe_stream_add_point(info, cev, end_buf, &iwe, NULL);
1184
1185		iwe.cmd = IWEVQUAL;
1186		iwe.u.qual.qual = zd->rxdata[i+4];
1187		iwe.u.qual.noise= zd->rxdata[i+2]/10-100;
1188		iwe.u.qual.level = (256+zd->rxdata[i+4]*100)/255-100;
1189		iwe.u.qual.updated = 7;
1190		cev = iwe_stream_add_event(info, cev, end_buf,
1191					   &iwe, IW_EV_QUAL_LEN);
1192	}
1193
1194	if (!enabled_save)
1195		zd1201_disable(zd);
1196
1197	srq->length = cev - extra;
1198	srq->flags = 0;
1199
1200	return 0;
1201}
1202
1203static int zd1201_set_essid(struct net_device *dev,
1204    struct iw_request_info *info, struct iw_point *data, char *essid)
1205{
1206	struct zd1201 *zd = netdev_priv(dev);
1207
1208	if (data->length > IW_ESSID_MAX_SIZE)
1209		return -EINVAL;
1210	if (data->length < 1)
1211		data->length = 1;
1212	zd->essidlen = data->length;
1213	memset(zd->essid, 0, IW_ESSID_MAX_SIZE+1);
1214	memcpy(zd->essid, essid, data->length);
1215	return zd1201_join(zd, zd->essid, zd->essidlen);
1216}
1217
1218static int zd1201_get_essid(struct net_device *dev,
1219    struct iw_request_info *info, struct iw_point *data, char *essid)
1220{
1221	struct zd1201 *zd = netdev_priv(dev);
1222
1223	memcpy(essid, zd->essid, zd->essidlen);
1224	data->flags = 1;
1225	data->length = zd->essidlen;
1226
1227	return 0;
1228}
1229
1230static int zd1201_get_nick(struct net_device *dev, struct iw_request_info *info,
1231    struct iw_point *data, char *nick)
1232{
1233	strcpy(nick, "zd1201");
1234	data->flags = 1;
1235	data->length = strlen(nick);
1236	return 0;
1237}
1238
1239static int zd1201_set_rate(struct net_device *dev,
1240    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1241{
1242	struct zd1201 *zd = netdev_priv(dev);
1243	short rate;
1244	int err;
1245
1246	switch (rrq->value) {
1247		case 1000000:
1248			rate = ZD1201_RATEB1;
1249			break;
1250		case 2000000:
1251			rate = ZD1201_RATEB2;
1252			break;
1253		case 5500000:
1254			rate = ZD1201_RATEB5;
1255			break;
1256		case 11000000:
1257		default:
1258			rate = ZD1201_RATEB11;
1259			break;
1260	}
1261	if (!rrq->fixed) { /* Also enable all lower bitrates */
1262		rate |= rate-1;
1263	}
1264
1265	err = zd1201_setconfig16(zd, ZD1201_RID_TXRATECNTL, rate);
1266	if (err)
1267		return err;
1268
1269	return zd1201_mac_reset(zd);
1270}
1271
1272static int zd1201_get_rate(struct net_device *dev,
1273    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1274{
1275	struct zd1201 *zd = netdev_priv(dev);
1276	short rate;
1277	int err;
1278
1279	err = zd1201_getconfig16(zd, ZD1201_RID_CURRENTTXRATE, &rate);
1280	if (err)
1281		return err;
1282
1283	switch(rate) {
1284		case 1:
1285			rrq->value = 1000000;
1286			break;
1287		case 2:
1288			rrq->value = 2000000;
1289			break;
1290		case 5:
1291			rrq->value = 5500000;
1292			break;
1293		case 11:
1294			rrq->value = 11000000;
1295			break;
1296		default:
1297			rrq->value = 0;
1298	}
1299	rrq->fixed = 0;
1300	rrq->disabled = 0;
1301
1302	return 0;
1303}
1304
1305static int zd1201_set_rts(struct net_device *dev, struct iw_request_info *info,
1306    struct iw_param *rts, char *extra)
1307{
1308	struct zd1201 *zd = netdev_priv(dev);
1309	int err;
1310	short val = rts->value;
1311
1312	if (rts->disabled || !rts->fixed)
1313		val = ZD1201_RTSMAX;
1314	if (val > ZD1201_RTSMAX)
1315		return -EINVAL;
1316	if (val < 0)
1317		return -EINVAL;
1318
1319	err = zd1201_setconfig16(zd, ZD1201_RID_CNFRTSTHRESHOLD, val);
1320	if (err)
1321		return err;
1322	return zd1201_mac_reset(zd);
1323}
1324
1325static int zd1201_get_rts(struct net_device *dev, struct iw_request_info *info,
1326    struct iw_param *rts, char *extra)
1327{
1328	struct zd1201 *zd = netdev_priv(dev);
1329	short rtst;
1330	int err;
1331
1332	err = zd1201_getconfig16(zd, ZD1201_RID_CNFRTSTHRESHOLD, &rtst);
1333	if (err)
1334		return err;
1335	rts->value = rtst;
1336	rts->disabled = (rts->value == ZD1201_RTSMAX);
1337	rts->fixed = 1;
1338
1339	return 0;
1340}
1341
1342static int zd1201_set_frag(struct net_device *dev, struct iw_request_info *info,
1343    struct iw_param *frag, char *extra)
1344{
1345	struct zd1201 *zd = netdev_priv(dev);
1346	int err;
1347	short val = frag->value;
1348
1349	if (frag->disabled || !frag->fixed)
1350		val = ZD1201_FRAGMAX;
1351	if (val > ZD1201_FRAGMAX)
1352		return -EINVAL;
1353	if (val < ZD1201_FRAGMIN)
1354		return -EINVAL;
1355	if (val & 1)
1356		return -EINVAL;
1357	err = zd1201_setconfig16(zd, ZD1201_RID_CNFFRAGTHRESHOLD, val);
1358	if (err)
1359		return err;
1360	return zd1201_mac_reset(zd);
1361}
1362
1363static int zd1201_get_frag(struct net_device *dev, struct iw_request_info *info,
1364    struct iw_param *frag, char *extra)
1365{
1366	struct zd1201 *zd = netdev_priv(dev);
1367	short fragt;
1368	int err;
1369
1370	err = zd1201_getconfig16(zd, ZD1201_RID_CNFFRAGTHRESHOLD, &fragt);
1371	if (err)
1372		return err;
1373	frag->value = fragt;
1374	frag->disabled = (frag->value == ZD1201_FRAGMAX);
1375	frag->fixed = 1;
1376
1377	return 0;
1378}
1379
1380static int zd1201_set_retry(struct net_device *dev,
1381    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1382{
1383	return 0;
1384}
1385
1386static int zd1201_get_retry(struct net_device *dev,
1387    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1388{
1389	return 0;
1390}
1391
1392static int zd1201_set_encode(struct net_device *dev,
1393    struct iw_request_info *info, struct iw_point *erq, char *key)
1394{
1395	struct zd1201 *zd = netdev_priv(dev);
1396	short i;
1397	int err, rid;
1398
1399	if (erq->length > ZD1201_MAXKEYLEN)
1400		return -EINVAL;
1401
1402	i = (erq->flags & IW_ENCODE_INDEX)-1;
1403	if (i == -1) {
1404		err = zd1201_getconfig16(zd,ZD1201_RID_CNFDEFAULTKEYID,&i);
1405		if (err)
1406			return err;
1407	} else {
1408		err = zd1201_setconfig16(zd, ZD1201_RID_CNFDEFAULTKEYID, i);
1409		if (err)
1410			return err;
1411	}
1412
1413	if (i < 0 || i >= ZD1201_NUMKEYS)
1414		return -EINVAL;
1415
1416	rid = ZD1201_RID_CNFDEFAULTKEY0 + i;
1417	err = zd1201_setconfig(zd, rid, key, erq->length, 1);
1418	if (err)
1419		return err;
1420	zd->encode_keylen[i] = erq->length;
1421	memcpy(zd->encode_keys[i], key, erq->length);
1422
1423	i=0;
1424	if (!(erq->flags & IW_ENCODE_DISABLED & IW_ENCODE_MODE)) {
1425		i |= 0x01;
1426		zd->encode_enabled = 1;
1427	} else
1428		zd->encode_enabled = 0;
1429	if (erq->flags & IW_ENCODE_RESTRICTED & IW_ENCODE_MODE) {
1430		i |= 0x02;
1431		zd->encode_restricted = 1;
1432	} else
1433		zd->encode_restricted = 0;
1434	err = zd1201_setconfig16(zd, ZD1201_RID_CNFWEBFLAGS, i);
1435	if (err)
1436		return err;
1437
1438	if (zd->encode_enabled)
1439		i = ZD1201_CNFAUTHENTICATION_SHAREDKEY;
1440	else
1441		i = ZD1201_CNFAUTHENTICATION_OPENSYSTEM;
1442	err = zd1201_setconfig16(zd, ZD1201_RID_CNFAUTHENTICATION, i);
1443	if (err)
1444		return err;
1445
1446	return zd1201_mac_reset(zd);
1447}
1448
1449static int zd1201_get_encode(struct net_device *dev,
1450    struct iw_request_info *info, struct iw_point *erq, char *key)
1451{
1452	struct zd1201 *zd = netdev_priv(dev);
1453	short i;
1454	int err;
1455
1456	if (zd->encode_enabled)
1457		erq->flags = IW_ENCODE_ENABLED;
1458	else
1459		erq->flags = IW_ENCODE_DISABLED;
1460	if (zd->encode_restricted)
1461		erq->flags |= IW_ENCODE_RESTRICTED;
1462	else
1463		erq->flags |= IW_ENCODE_OPEN;
1464
1465	i = (erq->flags & IW_ENCODE_INDEX) -1;
1466	if (i == -1) {
1467		err = zd1201_getconfig16(zd, ZD1201_RID_CNFDEFAULTKEYID, &i);
1468		if (err)
1469			return err;
1470	}
1471	if (i<0 || i>= ZD1201_NUMKEYS)
1472		return -EINVAL;
1473
1474	erq->flags |= i+1;
1475
1476	erq->length = zd->encode_keylen[i];
1477	memcpy(key, zd->encode_keys[i], erq->length);
1478
1479	return 0;
1480}
1481
1482static int zd1201_set_power(struct net_device *dev,
1483    struct iw_request_info *info, struct iw_param *vwrq, char *extra)
1484{
1485	struct zd1201 *zd = netdev_priv(dev);
1486	short enabled, duration, level;
1487	int err;
1488
1489	enabled = vwrq->disabled ? 0 : 1;
1490	if (enabled) {
1491		if (vwrq->flags & IW_POWER_PERIOD) {
1492			duration = vwrq->value;
1493			err = zd1201_setconfig16(zd,
1494			    ZD1201_RID_CNFMAXSLEEPDURATION, duration);
1495			if (err)
1496				return err;
1497			goto out;
1498		}
1499		if (vwrq->flags & IW_POWER_TIMEOUT) {
1500			err = zd1201_getconfig16(zd,
1501			    ZD1201_RID_CNFMAXSLEEPDURATION, &duration);
1502			if (err)
1503				return err;
1504			level = vwrq->value * 4 / duration;
1505			if (level > 4)
1506				level = 4;
1507			if (level < 0)
1508				level = 0;
1509			err = zd1201_setconfig16(zd, ZD1201_RID_CNFPMEPS,
1510			    level);
1511			if (err)
1512				return err;
1513			goto out;
1514		}
1515		return -EINVAL;
1516	}
1517out:
1518	return zd1201_setconfig16(zd, ZD1201_RID_CNFPMENABLED, enabled);
1519}
1520
1521static int zd1201_get_power(struct net_device *dev,
1522    struct iw_request_info *info, struct iw_param *vwrq, char *extra)
1523{
1524	struct zd1201 *zd = netdev_priv(dev);
1525	short enabled, level, duration;
1526	int err;
1527
1528	err = zd1201_getconfig16(zd, ZD1201_RID_CNFPMENABLED, &enabled);
1529	if (err)
1530		return err;
1531	err = zd1201_getconfig16(zd, ZD1201_RID_CNFPMEPS, &level);
1532	if (err)
1533		return err;
1534	err = zd1201_getconfig16(zd, ZD1201_RID_CNFMAXSLEEPDURATION, &duration);
1535	if (err)
1536		return err;
1537	vwrq->disabled = enabled ? 0 : 1;
1538	if (vwrq->flags & IW_POWER_TYPE) {
1539		if (vwrq->flags & IW_POWER_PERIOD) {
1540			vwrq->value = duration;
1541			vwrq->flags = IW_POWER_PERIOD;
1542		} else {
1543			vwrq->value = duration * level / 4;
1544			vwrq->flags = IW_POWER_TIMEOUT;
1545		}
1546	}
1547	if (vwrq->flags & IW_POWER_MODE) {
1548		if (enabled && level)
1549			vwrq->flags = IW_POWER_UNICAST_R;
1550		else
1551			vwrq->flags = IW_POWER_ALL_R;
1552	}
1553
1554	return 0;
1555}
1556
1557
1558static const iw_handler zd1201_iw_handler[] =
1559{
1560	(iw_handler) zd1201_config_commit,	/* SIOCSIWCOMMIT */
1561	(iw_handler) zd1201_get_name,    	/* SIOCGIWNAME */
1562	(iw_handler) NULL,			/* SIOCSIWNWID */
1563	(iw_handler) NULL,			/* SIOCGIWNWID */
1564	(iw_handler) zd1201_set_freq,		/* SIOCSIWFREQ */
1565	(iw_handler) zd1201_get_freq,		/* SIOCGIWFREQ */
1566	(iw_handler) zd1201_set_mode,		/* SIOCSIWMODE */
1567	(iw_handler) zd1201_get_mode,		/* SIOCGIWMODE */
1568	(iw_handler) NULL,                  	/* SIOCSIWSENS */
1569	(iw_handler) NULL,           		/* SIOCGIWSENS */
1570	(iw_handler) NULL,			/* SIOCSIWRANGE */
1571	(iw_handler) zd1201_get_range,           /* SIOCGIWRANGE */
1572	(iw_handler) NULL,			/* SIOCSIWPRIV */
1573	(iw_handler) NULL,			/* SIOCGIWPRIV */
1574	(iw_handler) NULL,			/* SIOCSIWSTATS */
1575	(iw_handler) NULL,			/* SIOCGIWSTATS */
1576	(iw_handler) NULL,			/* SIOCSIWSPY */
1577	(iw_handler) NULL,			/* SIOCGIWSPY */
1578	(iw_handler) NULL,			/* -- hole -- */
1579	(iw_handler) NULL,			/* -- hole -- */
1580	(iw_handler) NULL/*zd1201_set_wap*/,		/* SIOCSIWAP */
1581	(iw_handler) zd1201_get_wap,		/* SIOCGIWAP */
1582	(iw_handler) NULL,			/* -- hole -- */
1583	(iw_handler) NULL,       		/* SIOCGIWAPLIST */
1584	(iw_handler) zd1201_set_scan,		/* SIOCSIWSCAN */
1585	(iw_handler) zd1201_get_scan,		/* SIOCGIWSCAN */
1586	(iw_handler) zd1201_set_essid,		/* SIOCSIWESSID */
1587	(iw_handler) zd1201_get_essid,		/* SIOCGIWESSID */
1588	(iw_handler) NULL,         		/* SIOCSIWNICKN */
1589	(iw_handler) zd1201_get_nick, 		/* SIOCGIWNICKN */
1590	(iw_handler) NULL,			/* -- hole -- */
1591	(iw_handler) NULL,			/* -- hole -- */
1592	(iw_handler) zd1201_set_rate,		/* SIOCSIWRATE */
1593	(iw_handler) zd1201_get_rate,		/* SIOCGIWRATE */
1594	(iw_handler) zd1201_set_rts,		/* SIOCSIWRTS */
1595	(iw_handler) zd1201_get_rts,		/* SIOCGIWRTS */
1596	(iw_handler) zd1201_set_frag,		/* SIOCSIWFRAG */
1597	(iw_handler) zd1201_get_frag,		/* SIOCGIWFRAG */
1598	(iw_handler) NULL,         		/* SIOCSIWTXPOW */
1599	(iw_handler) NULL,          		/* SIOCGIWTXPOW */
1600	(iw_handler) zd1201_set_retry,		/* SIOCSIWRETRY */
1601	(iw_handler) zd1201_get_retry,		/* SIOCGIWRETRY */
1602	(iw_handler) zd1201_set_encode,		/* SIOCSIWENCODE */
1603	(iw_handler) zd1201_get_encode,		/* SIOCGIWENCODE */
1604	(iw_handler) zd1201_set_power,		/* SIOCSIWPOWER */
1605	(iw_handler) zd1201_get_power,		/* SIOCGIWPOWER */
1606};
1607
1608static int zd1201_set_hostauth(struct net_device *dev,
1609    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1610{
1611	struct zd1201 *zd = netdev_priv(dev);
1612
1613	if (!zd->ap)
1614		return -EOPNOTSUPP;
1615
1616	return zd1201_setconfig16(zd, ZD1201_RID_CNFHOSTAUTH, rrq->value);
1617}
1618
1619static int zd1201_get_hostauth(struct net_device *dev,
1620    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1621{
1622	struct zd1201 *zd = netdev_priv(dev);
1623	short hostauth;
1624	int err;
1625
1626	if (!zd->ap)
1627		return -EOPNOTSUPP;
1628
1629	err = zd1201_getconfig16(zd, ZD1201_RID_CNFHOSTAUTH, &hostauth);
1630	if (err)
1631		return err;
1632	rrq->value = hostauth;
1633	rrq->fixed = 1;
1634
1635	return 0;
1636}
1637
1638static int zd1201_auth_sta(struct net_device *dev,
1639    struct iw_request_info *info, struct sockaddr *sta, char *extra)
1640{
1641	struct zd1201 *zd = netdev_priv(dev);
1642	unsigned char buffer[10];
1643
1644	if (!zd->ap)
1645		return -EOPNOTSUPP;
1646
1647	memcpy(buffer, sta->sa_data, ETH_ALEN);
1648	*(short*)(buffer+6) = 0;	/* 0==success, 1==failure */
1649	*(short*)(buffer+8) = 0;
1650
1651	return zd1201_setconfig(zd, ZD1201_RID_AUTHENTICATESTA, buffer, 10, 1);
1652}
1653
1654static int zd1201_set_maxassoc(struct net_device *dev,
1655    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1656{
1657	struct zd1201 *zd = netdev_priv(dev);
1658	int err;
1659
1660	if (!zd->ap)
1661		return -EOPNOTSUPP;
1662
1663	err = zd1201_setconfig16(zd, ZD1201_RID_CNFMAXASSOCSTATIONS, rrq->value);
1664	if (err)
1665		return err;
1666	return 0;
1667}
1668
1669static int zd1201_get_maxassoc(struct net_device *dev,
1670    struct iw_request_info *info, struct iw_param *rrq, char *extra)
1671{
1672	struct zd1201 *zd = netdev_priv(dev);
1673	short maxassoc;
1674	int err;
1675
1676	if (!zd->ap)
1677		return -EOPNOTSUPP;
1678
1679	err = zd1201_getconfig16(zd, ZD1201_RID_CNFMAXASSOCSTATIONS, &maxassoc);
1680	if (err)
1681		return err;
1682	rrq->value = maxassoc;
1683	rrq->fixed = 1;
1684
1685	return 0;
1686}
1687
1688static const iw_handler zd1201_private_handler[] = {
1689	(iw_handler) zd1201_set_hostauth,	/* ZD1201SIWHOSTAUTH */
1690	(iw_handler) zd1201_get_hostauth,	/* ZD1201GIWHOSTAUTH */
1691	(iw_handler) zd1201_auth_sta,		/* ZD1201SIWAUTHSTA */
1692	(iw_handler) NULL,			/* nothing to get */
1693	(iw_handler) zd1201_set_maxassoc,	/* ZD1201SIMAXASSOC */
1694	(iw_handler) zd1201_get_maxassoc,	/* ZD1201GIMAXASSOC */
1695};
1696
1697static const struct iw_priv_args zd1201_private_args[] = {
1698	{ ZD1201SIWHOSTAUTH, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
1699	    IW_PRIV_TYPE_NONE, "sethostauth" },
1700	{ ZD1201GIWHOSTAUTH, IW_PRIV_TYPE_NONE,
1701	    IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethostauth" },
1702	{ ZD1201SIWAUTHSTA, IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1,
1703	    IW_PRIV_TYPE_NONE, "authstation" },
1704	{ ZD1201SIWMAXASSOC, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
1705	    IW_PRIV_TYPE_NONE, "setmaxassoc" },
1706	{ ZD1201GIWMAXASSOC, IW_PRIV_TYPE_NONE,
1707	    IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getmaxassoc" },
1708};
1709
1710static const struct iw_handler_def zd1201_iw_handlers = {
1711	.num_standard 		= ARRAY_SIZE(zd1201_iw_handler),
1712	.num_private 		= ARRAY_SIZE(zd1201_private_handler),
1713	.num_private_args 	= ARRAY_SIZE(zd1201_private_args),
1714	.standard 		= (iw_handler *)zd1201_iw_handler,
1715	.private 		= (iw_handler *)zd1201_private_handler,
1716	.private_args 		= (struct iw_priv_args *) zd1201_private_args,
1717	.get_wireless_stats	= zd1201_get_wireless_stats,
1718};
1719
1720static const struct net_device_ops zd1201_netdev_ops = {
1721	.ndo_open		= zd1201_net_open,
1722	.ndo_stop		= zd1201_net_stop,
1723	.ndo_start_xmit		= zd1201_hard_start_xmit,
1724	.ndo_tx_timeout		= zd1201_tx_timeout,
1725	.ndo_set_rx_mode	= zd1201_set_multicast,
1726	.ndo_set_mac_address	= zd1201_set_mac_address,
1727	.ndo_change_mtu		= eth_change_mtu,
1728	.ndo_validate_addr	= eth_validate_addr,
1729};
1730
1731static int zd1201_probe(struct usb_interface *interface,
1732			const struct usb_device_id *id)
1733{
1734	struct zd1201 *zd;
1735	struct net_device *dev;
1736	struct usb_device *usb;
1737	int err;
1738	short porttype;
1739	char buf[IW_ESSID_MAX_SIZE+2];
1740
1741	usb = interface_to_usbdev(interface);
1742
1743	dev = alloc_etherdev(sizeof(*zd));
1744	if (!dev)
1745		return -ENOMEM;
1746	zd = netdev_priv(dev);
1747	zd->dev = dev;
1748
1749	zd->ap = ap;
1750	zd->usb = usb;
1751	zd->removed = 0;
1752	init_waitqueue_head(&zd->rxdataq);
1753	INIT_HLIST_HEAD(&zd->fraglist);
1754
1755	err = zd1201_fw_upload(usb, zd->ap);
1756	if (err) {
1757		dev_err(&usb->dev, "zd1201 firmware upload failed: %d\n", err);
1758		goto err_zd;
1759	}
1760
1761	zd->endp_in = 1;
1762	zd->endp_out = 1;
1763	zd->endp_out2 = 2;
1764	zd->rx_urb = usb_alloc_urb(0, GFP_KERNEL);
1765	zd->tx_urb = usb_alloc_urb(0, GFP_KERNEL);
1766	if (!zd->rx_urb || !zd->tx_urb) {
1767		err = -ENOMEM;
1768		goto err_zd;
1769	}
1770
1771	mdelay(100);
1772	err = zd1201_drvr_start(zd);
1773	if (err)
1774		goto err_zd;
1775
1776	err = zd1201_setconfig16(zd, ZD1201_RID_CNFMAXDATALEN, 2312);
1777	if (err)
1778		goto err_start;
1779
1780	err = zd1201_setconfig16(zd, ZD1201_RID_TXRATECNTL,
1781	    ZD1201_RATEB1 | ZD1201_RATEB2 | ZD1201_RATEB5 | ZD1201_RATEB11);
1782	if (err)
1783		goto err_start;
1784
1785	dev->netdev_ops = &zd1201_netdev_ops;
1786	dev->wireless_handlers = &zd1201_iw_handlers;
1787	dev->watchdog_timeo = ZD1201_TX_TIMEOUT;
1788	strcpy(dev->name, "wlan%d");
1789
1790	err = zd1201_getconfig(zd, ZD1201_RID_CNFOWNMACADDR,
1791	    dev->dev_addr, dev->addr_len);
1792	if (err)
1793		goto err_start;
1794
1795	/* Set wildcard essid to match zd->essid */
1796	*(__le16 *)buf = cpu_to_le16(0);
1797	err = zd1201_setconfig(zd, ZD1201_RID_CNFDESIREDSSID, buf,
1798	    IW_ESSID_MAX_SIZE+2, 1);
1799	if (err)
1800		goto err_start;
1801
1802	if (zd->ap)
1803		porttype = ZD1201_PORTTYPE_AP;
1804	else
1805		porttype = ZD1201_PORTTYPE_BSS;
1806	err = zd1201_setconfig16(zd, ZD1201_RID_CNFPORTTYPE, porttype);
1807	if (err)
1808		goto err_start;
1809
1810	SET_NETDEV_DEV(dev, &usb->dev);
1811
1812	err = register_netdev(dev);
1813	if (err)
1814		goto err_start;
1815	dev_info(&usb->dev, "%s: ZD1201 USB Wireless interface\n",
1816	    dev->name);
1817
1818	usb_set_intfdata(interface, zd);
1819	zd1201_enable(zd);	/* zd1201 likes to startup enabled, */
1820	zd1201_disable(zd);	/* interfering with all the wifis in range */
1821	return 0;
1822
1823err_start:
1824	/* Leave the device in reset state */
1825	zd1201_docmd(zd, ZD1201_CMDCODE_INIT, 0, 0, 0);
1826err_zd:
1827	usb_free_urb(zd->tx_urb);
1828	usb_free_urb(zd->rx_urb);
1829	free_netdev(dev);
1830	return err;
1831}
1832
1833static void zd1201_disconnect(struct usb_interface *interface)
1834{
1835	struct zd1201 *zd = usb_get_intfdata(interface);
1836	struct hlist_node *node2;
1837	struct zd1201_frag *frag;
1838
1839	if (!zd)
1840		return;
1841	usb_set_intfdata(interface, NULL);
1842
1843	hlist_for_each_entry_safe(frag, node2, &zd->fraglist, fnode) {
1844		hlist_del_init(&frag->fnode);
1845		kfree_skb(frag->skb);
1846		kfree(frag);
1847	}
1848
1849	if (zd->tx_urb) {
1850		usb_kill_urb(zd->tx_urb);
1851		usb_free_urb(zd->tx_urb);
1852	}
1853	if (zd->rx_urb) {
1854		usb_kill_urb(zd->rx_urb);
1855		usb_free_urb(zd->rx_urb);
1856	}
1857
1858	if (zd->dev) {
1859		unregister_netdev(zd->dev);
1860		free_netdev(zd->dev);
1861	}
1862}
1863
1864#ifdef CONFIG_PM
1865
1866static int zd1201_suspend(struct usb_interface *interface,
1867			   pm_message_t message)
1868{
1869	struct zd1201 *zd = usb_get_intfdata(interface);
1870
1871	netif_device_detach(zd->dev);
1872
1873	zd->was_enabled = zd->mac_enabled;
1874
1875	if (zd->was_enabled)
1876		return zd1201_disable(zd);
1877	else
1878		return 0;
1879}
1880
1881static int zd1201_resume(struct usb_interface *interface)
1882{
1883	struct zd1201 *zd = usb_get_intfdata(interface);
1884
1885	if (!zd || !zd->dev)
1886		return -ENODEV;
1887
1888	netif_device_attach(zd->dev);
1889
1890	if (zd->was_enabled)
1891		return zd1201_enable(zd);
1892	else
1893		return 0;
1894}
1895
1896#else
1897
1898#define zd1201_suspend NULL
1899#define zd1201_resume  NULL
1900
1901#endif
1902
1903static struct usb_driver zd1201_usb = {
1904	.name = "zd1201",
1905	.probe = zd1201_probe,
1906	.disconnect = zd1201_disconnect,
1907	.id_table = zd1201_table,
1908	.suspend = zd1201_suspend,
1909	.resume = zd1201_resume,
1910	.disable_hub_initiated_lpm = 1,
1911};
1912
1913module_usb_driver(zd1201_usb);
1914