drivers/net/wireless/iwlwifi/iwl-agn-lib.c

   1 /******************************************************************************
   2  *
   3  * GPL LICENSE SUMMARY
   4  *
   5  * Copyright(c) 2008 - 2011 Intel Corporation. All rights reserved.
   6  *
   7  * This program is free software; you can redistribute it and/or modify
   8  * it under the terms of version 2 of the GNU General Public License as
   9  * published by the Free Software Foundation.
  10  *
  11  * This program is distributed in the hope that it will be useful, but
  12  * WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * along with this program; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
  19  * USA
  20  *
  21  * The full GNU General Public License is included in this distribution
  22  * in the file called LICENSE.GPL.
  23  *
  24  * Contact Information:
  25  *  Intel Linux Wireless <ilw@linux.intel.com>
  26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  27  *
  28  *****************************************************************************/
  29 #include <linux/etherdevice.h>
  30 #include <linux/kernel.h>
  31 #include <linux/module.h>
  32 #include <linux/init.h>
  33 #include <linux/sched.h>
  34
  35 #include "iwl-dev.h"
  36 #include "iwl-core.h"
  37 #include "iwl-io.h"
  38 #include "iwl-helpers.h"
  39 #include "iwl-agn-hw.h"
  40 #include "iwl-agn.h"
  41 #include "iwl-sta.h"
  42 #include "iwl-trans.h"
  43 #include "iwl-shared.h"
  44
  45 int iwlagn_hw_valid_rtc_data_addr(u32 addr)
  46 {
  47         return (addr >= IWLAGN_RTC_DATA_LOWER_BOUND) &&
  48                 (addr < IWLAGN_RTC_DATA_UPPER_BOUND);
  49 }
  50
  51 int iwlagn_send_tx_power(struct iwl_priv *priv)
  52 {
  53         struct iwlagn_tx_power_dbm_cmd tx_power_cmd;
  54         u8 tx_ant_cfg_cmd;
  55
  56         if (WARN_ONCE(test_bit(STATUS_SCAN_HW, &priv->shrd->status),
  57                       "TX Power requested while scanning!\n"))
  58                 return -EAGAIN;
  59
  60         /* half dBm need to multiply */
  61         tx_power_cmd.global_lmt = (s8)(2 * priv->tx_power_user_lmt);
  62
  63         if (priv->tx_power_lmt_in_half_dbm &&
  64             priv->tx_power_lmt_in_half_dbm < tx_power_cmd.global_lmt) {
  65                 /*
  66                  * For the newer devices which using enhanced/extend tx power
  67                  * table in EEPROM, the format is in half dBm. driver need to
  68                  * convert to dBm format before report to mac80211.
  69                  * By doing so, there is a possibility of 1/2 dBm resolution
  70                  * lost. driver will perform "round-up" operation before
  71                  * reporting, but it will cause 1/2 dBm tx power over the
  72                  * regulatory limit. Perform the checking here, if the
  73                  * "tx_power_user_lmt" is higher than EEPROM value (in
  74                  * half-dBm format), lower the tx power based on EEPROM
  75                  */
  76                 tx_power_cmd.global_lmt = priv->tx_power_lmt_in_half_dbm;
  77         }
  78         tx_power_cmd.flags = IWLAGN_TX_POWER_NO_CLOSED;
  79         tx_power_cmd.srv_chan_lmt = IWLAGN_TX_POWER_AUTO;
  80
  81         if (IWL_UCODE_API(priv->ucode_ver) == 1)
  82                 tx_ant_cfg_cmd = REPLY_TX_POWER_DBM_CMD_V1;
  83         else
  84                 tx_ant_cfg_cmd = REPLY_TX_POWER_DBM_CMD;
  85
  86         return iwl_trans_send_cmd_pdu(trans(priv), tx_ant_cfg_cmd, CMD_SYNC,
  87                         sizeof(tx_power_cmd), &tx_power_cmd);
  88 }
  89
  90 void iwlagn_temperature(struct iwl_priv *priv)
  91 {
  92         /* store temperature from correct statistics (in Celsius) */
  93         priv->temperature = le32_to_cpu(priv->statistics.common.temperature);
  94         iwl_tt_handler(priv);
  95 }
  96
  97 u16 iwlagn_eeprom_calib_version(struct iwl_priv *priv)
  98 {
  99         struct iwl_eeprom_calib_hdr {
 100                 u8 version;
 101                 u8 pa_type;
 102                 u16 voltage;
 103         } *hdr;
 104
 105         hdr = (struct iwl_eeprom_calib_hdr *)iwl_eeprom_query_addr(priv,
 106                                                         EEPROM_CALIB_ALL);
 107         return hdr->version;
 108
 109 }
 110
 111 /*
 112  * EEPROM
 113  */
 114 static u32 eeprom_indirect_address(const struct iwl_priv *priv, u32 address)
 115 {
 116         u16 offset = 0;
 117
 118         if ((address & INDIRECT_ADDRESS) == 0)
 119                 return address;
 120
 121         switch (address & INDIRECT_TYPE_MSK) {
 122         case INDIRECT_HOST:
 123                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_HOST);
 124                 break;
 125         case INDIRECT_GENERAL:
 126                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_GENERAL);
 127                 break;
 128         case INDIRECT_REGULATORY:
 129                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_REGULATORY);
 130                 break;
 131         case INDIRECT_TXP_LIMIT:
 132                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_TXP_LIMIT);
 133                 break;
 134         case INDIRECT_TXP_LIMIT_SIZE:
 135                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_TXP_LIMIT_SIZE);
 136                 break;
 137         case INDIRECT_CALIBRATION:
 138                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_CALIBRATION);
 139                 break;
 140         case INDIRECT_PROCESS_ADJST:
 141                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_PROCESS_ADJST);
 142                 break;
 143         case INDIRECT_OTHERS:
 144                 offset = iwl_eeprom_query16(priv, EEPROM_LINK_OTHERS);
 145                 break;
 146         default:
 147                 IWL_ERR(priv, "illegal indirect type: 0x%X\n",
 148                 address & INDIRECT_TYPE_MSK);
 149                 break;
 150         }
 151
 152         /* translate the offset from words to byte */
 153         return (address & ADDRESS_MSK) + (offset << 1);
 154 }
 155
 156 const u8 *iwl_eeprom_query_addr(const struct iwl_priv *priv, size_t offset)
 157 {
 158         u32 address = eeprom_indirect_address(priv, offset);
 159         BUG_ON(address >= priv->cfg->base_params->eeprom_size);
 160         return &priv->eeprom[address];
 161 }
 162
 163 struct iwl_mod_params iwlagn_mod_params = {
 164         .amsdu_size_8K = 1,
 165         .restart_fw = 1,
 166         .plcp_check = true,
 167         .bt_coex_active = true,
 168         .no_sleep_autoadjust = true,
 169         .power_level = IWL_POWER_INDEX_1,
 170         .bt_ch_announce = true,
 171         .wanted_ucode_alternative = 1,
 172         .auto_agg = true,
 173         /* the rest are 0 by default */
 174 };
 175
 176 int iwlagn_hwrate_to_mac80211_idx(u32 rate_n_flags, enum ieee80211_band band)
 177 {
 178         int idx = 0;
 179         int band_offset = 0;
 180
 181         /* HT rate format: mac80211 wants an MCS number, which is just LSB */
 182         if (rate_n_flags & RATE_MCS_HT_MSK) {
 183                 idx = (rate_n_flags & 0xff);
 184                 return idx;
 185         /* Legacy rate format, search for match in table */
 186         } else {
 187                 if (band == IEEE80211_BAND_5GHZ)
 188                         band_offset = IWL_FIRST_OFDM_RATE;
 189                 for (idx = band_offset; idx < IWL_RATE_COUNT_LEGACY; idx++)
 190                         if (iwl_rates[idx].plcp == (rate_n_flags & 0xFF))
 191                                 return idx - band_offset;
 192         }
 193
 194         return -1;
 195 }
 196
 197 static int iwl_get_single_channel_for_scan(struct iwl_priv *priv,
 198                                            struct ieee80211_vif *vif,
 199                                            enum ieee80211_band band,
 200                                            struct iwl_scan_channel *scan_ch)
 201 {
 202         const struct ieee80211_supported_band *sband;
 203         u16 passive_dwell = 0;
 204         u16 active_dwell = 0;
 205         int added = 0;
 206         u16 channel = 0;
 207
 208         sband = iwl_get_hw_mode(priv, band);
 209         if (!sband) {
 210                 IWL_ERR(priv, "invalid band\n");
 211                 return added;
 212         }
 213
 214         active_dwell = iwl_get_active_dwell_time(priv, band, 0);
 215         passive_dwell = iwl_get_passive_dwell_time(priv, band, vif);
 216
 217         if (passive_dwell <= active_dwell)
 218                 passive_dwell = active_dwell + 1;
 219
 220         channel = iwl_get_single_channel_number(priv, band);
 221         if (channel) {
 222                 scan_ch->channel = cpu_to_le16(channel);
 223                 scan_ch->type = SCAN_CHANNEL_TYPE_PASSIVE;
 224                 scan_ch->active_dwell = cpu_to_le16(active_dwell);
 225                 scan_ch->passive_dwell = cpu_to_le16(passive_dwell);
 226                 /* Set txpower levels to defaults */
 227                 scan_ch->dsp_atten = 110;
 228                 if (band == IEEE80211_BAND_5GHZ)
 229                         scan_ch->tx_gain = ((1 << 5) | (3 << 3)) | 3;
 230                 else
 231                         scan_ch->tx_gain = ((1 << 5) | (5 << 3));
 232                 added++;
 233         } else
 234                 IWL_ERR(priv, "no valid channel found\n");
 235         return added;
 236 }
 237
 238 static int iwl_get_channels_for_scan(struct iwl_priv *priv,
 239                                      struct ieee80211_vif *vif,
 240                                      enum ieee80211_band band,
 241                                      u8 is_active, u8 n_probes,
 242                                      struct iwl_scan_channel *scan_ch)
 243 {
 244         struct ieee80211_channel *chan;
 245         const struct ieee80211_supported_band *sband;
 246         const struct iwl_channel_info *ch_info;
 247         u16 passive_dwell = 0;
 248         u16 active_dwell = 0;
 249         int added, i;
 250         u16 channel;
 251
 252         sband = iwl_get_hw_mode(priv, band);
 253         if (!sband)
 254                 return 0;
 255
 256         active_dwell = iwl_get_active_dwell_time(priv, band, n_probes);
 257         passive_dwell = iwl_get_passive_dwell_time(priv, band, vif);
 258
 259         if (passive_dwell <= active_dwell)
 260                 passive_dwell = active_dwell + 1;
 261
 262         for (i = 0, added = 0; i < priv->scan_request->n_channels; i++) {
 263                 chan = priv->scan_request->channels[i];
 264
 265                 if (chan->band != band)
 266                         continue;
 267
 268                 channel = chan->hw_value;
 269                 scan_ch->channel = cpu_to_le16(channel);
 270
 271                 ch_info = iwl_get_channel_info(priv, band, channel);
 272                 if (!is_channel_valid(ch_info)) {
 273                         IWL_DEBUG_SCAN(priv, "Channel %d is INVALID for this band.\n",
 274                                         channel);
 275                         continue;
 276                 }
 277
 278                 if (!is_active || is_channel_passive(ch_info) ||
 279                     (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN))
 280                         scan_ch->type = SCAN_CHANNEL_TYPE_PASSIVE;
 281                 else
 282                         scan_ch->type = SCAN_CHANNEL_TYPE_ACTIVE;
 283
 284                 if (n_probes)
 285                         scan_ch->type |= IWL_SCAN_PROBE_MASK(n_probes);
 286
 287                 scan_ch->active_dwell = cpu_to_le16(active_dwell);
 288                 scan_ch->passive_dwell = cpu_to_le16(passive_dwell);
 289
 290                 /* Set txpower levels to defaults */
 291                 scan_ch->dsp_atten = 110;
 292
 293                 /* NOTE: if we were doing 6Mb OFDM for scans we'd use
 294                  * power level:
 295                  * scan_ch->tx_gain = ((1 << 5) | (2 << 3)) | 3;
 296                  */
 297                 if (band == IEEE80211_BAND_5GHZ)
 298                         scan_ch->tx_gain = ((1 << 5) | (3 << 3)) | 3;
 299                 else
 300                         scan_ch->tx_gain = ((1 << 5) | (5 << 3));
 301
 302                 IWL_DEBUG_SCAN(priv, "Scanning ch=%d prob=0x%X [%s %d]\n",
 303                                channel, le32_to_cpu(scan_ch->type),
 304                                (scan_ch->type & SCAN_CHANNEL_TYPE_ACTIVE) ?
 305                                 "ACTIVE" : "PASSIVE",
 306                                (scan_ch->type & SCAN_CHANNEL_TYPE_ACTIVE) ?
 307                                active_dwell : passive_dwell);
 308
 309                 scan_ch++;
 310                 added++;
 311         }
 312
 313         IWL_DEBUG_SCAN(priv, "total channels to scan %d\n", added);
 314         return added;
 315 }
 316
 317 int iwlagn_request_scan(struct iwl_priv *priv, struct ieee80211_vif *vif)
 318 {
 319         struct iwl_host_cmd cmd = {
 320                 .id = REPLY_SCAN_CMD,
 321                 .len = { sizeof(struct iwl_scan_cmd), },
 322                 .flags = CMD_SYNC,
 323         };
 324         struct iwl_scan_cmd *scan;
 325         struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
 326         u32 rate_flags = 0;
 327         u16 cmd_len;
 328         u16 rx_chain = 0;
 329         enum ieee80211_band band;
 330         u8 n_probes = 0;
 331         u8 rx_ant = hw_params(priv).valid_rx_ant;
 332         u8 rate;
 333         bool is_active = false;
 334         int  chan_mod;
 335         u8 active_chains;
 336         u8 scan_tx_antennas = hw_params(priv).valid_tx_ant;
 337         int ret;
 338
 339         lockdep_assert_held(&priv->shrd->mutex);
 340
 341         if (vif)
 342                 ctx = iwl_rxon_ctx_from_vif(vif);
 343
 344         if (!priv->scan_cmd) {
 345                 priv->scan_cmd = kmalloc(sizeof(struct iwl_scan_cmd) +
 346                                          IWL_MAX_SCAN_SIZE, GFP_KERNEL);
 347                 if (!priv->scan_cmd) {
 348                         IWL_DEBUG_SCAN(priv,
 349                                        "fail to allocate memory for scan\n");
 350                         return -ENOMEM;
 351                 }
 352         }
 353         scan = priv->scan_cmd;
 354         memset(scan, 0, sizeof(struct iwl_scan_cmd) + IWL_MAX_SCAN_SIZE);
 355
 356         scan->quiet_plcp_th = IWL_PLCP_QUIET_THRESH;
 357         scan->quiet_time = IWL_ACTIVE_QUIET_TIME;
 358
 359         if (priv->scan_type != IWL_SCAN_ROC &&
 360             iwl_is_any_associated(priv)) {
 361                 u16 interval = 0;
 362                 u32 extra;
 363                 u32 suspend_time = 100;
 364                 u32 scan_suspend_time = 100;
 365
 366                 IWL_DEBUG_INFO(priv, "Scanning while associated...\n");
 367                 switch (priv->scan_type) {
 368                 case IWL_SCAN_ROC:
 369                         WARN_ON(1);
 370                         break;
 371                 case IWL_SCAN_RADIO_RESET:
 372                         interval = 0;
 373                         break;
 374                 case IWL_SCAN_NORMAL:
 375                         interval = vif->bss_conf.beacon_int;
 376                         break;
 377                 }
 378
 379                 scan->suspend_time = 0;
 380                 scan->max_out_time = cpu_to_le32(200 * 1024);
 381                 if (!interval)
 382                         interval = suspend_time;
 383
 384                 extra = (suspend_time / interval) << 22;
 385                 scan_suspend_time = (extra |
 386                     ((suspend_time % interval) * 1024));
 387                 scan->suspend_time = cpu_to_le32(scan_suspend_time);
 388                 IWL_DEBUG_SCAN(priv, "suspend_time 0x%X beacon interval %d\n",
 389                                scan_suspend_time, interval);
 390         } else if (priv->scan_type == IWL_SCAN_ROC) {
 391                 scan->suspend_time = 0;
 392                 scan->max_out_time = 0;
 393                 scan->quiet_time = 0;
 394                 scan->quiet_plcp_th = 0;
 395         }
 396
 397         switch (priv->scan_type) {
 398         case IWL_SCAN_RADIO_RESET:
 399                 IWL_DEBUG_SCAN(priv, "Start internal passive scan.\n");
 400                 break;
 401         case IWL_SCAN_NORMAL:
 402                 if (priv->scan_request->n_ssids) {
 403                         int i, p = 0;
 404                         IWL_DEBUG_SCAN(priv, "Kicking off active scan\n");
 405                         for (i = 0; i < priv->scan_request->n_ssids; i++) {
 406                                 /* always does wildcard anyway */
 407                                 if (!priv->scan_request->ssids[i].ssid_len)
 408                                         continue;
 409                                 scan->direct_scan[p].id = WLAN_EID_SSID;
 410                                 scan->direct_scan[p].len =
 411                                         priv->scan_request->ssids[i].ssid_len;
 412                                 memcpy(scan->direct_scan[p].ssid,
 413                                        priv->scan_request->ssids[i].ssid,
 414                                        priv->scan_request->ssids[i].ssid_len);
 415                                 n_probes++;
 416                                 p++;
 417                         }
 418                         is_active = true;
 419                 } else
 420                         IWL_DEBUG_SCAN(priv, "Start passive scan.\n");
 421                 break;
 422         case IWL_SCAN_ROC:
 423                 IWL_DEBUG_SCAN(priv, "Start ROC scan.\n");
 424                 break;
 425         }
 426
 427         scan->tx_cmd.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK;
 428         scan->tx_cmd.sta_id = ctx->bcast_sta_id;
 429         scan->tx_cmd.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
 430
 431         switch (priv->scan_band) {
 432         case IEEE80211_BAND_2GHZ:
 433                 scan->flags = RXON_FLG_BAND_24G_MSK | RXON_FLG_AUTO_DETECT_MSK;
 434                 chan_mod = le32_to_cpu(
 435                         priv->contexts[IWL_RXON_CTX_BSS].active.flags &
 436                                                 RXON_FLG_CHANNEL_MODE_MSK)
 437                                        >> RXON_FLG_CHANNEL_MODE_POS;
 438                 if (chan_mod == CHANNEL_MODE_PURE_40) {
 439                         rate = IWL_RATE_6M_PLCP;
 440                 } else {
 441                         rate = IWL_RATE_1M_PLCP;
 442                         rate_flags = RATE_MCS_CCK_MSK;
 443                 }
 444                 /*
 445                  * Internal scans are passive, so we can indiscriminately set
 446                  * the BT ignore flag on 2.4 GHz since it applies to TX only.
 447                  */
 448                 if (priv->cfg->bt_params &&
 449                     priv->cfg->bt_params->advanced_bt_coexist)
 450                         scan->tx_cmd.tx_flags |= TX_CMD_FLG_IGNORE_BT;
 451                 break;
 452         case IEEE80211_BAND_5GHZ:
 453                 rate = IWL_RATE_6M_PLCP;
 454                 break;
 455         default:
 456                 IWL_WARN(priv, "Invalid scan band\n");
 457                 return -EIO;
 458         }
 459
 460         /*
 461          * If active scanning is requested but a certain channel is
 462          * marked passive, we can do active scanning if we detect
 463          * transmissions.
 464          *
 465          * There is an issue with some firmware versions that triggers
 466          * a sysassert on a "good CRC threshold" of zero (== disabled),
 467          * on a radar channel even though this means that we should NOT
 468          * send probes.
 469          *
 470          * The "good CRC threshold" is the number of frames that we
 471          * need to receive during our dwell time on a channel before
 472          * sending out probes -- setting this to a huge value will
 473          * mean we never reach it, but at the same time work around
 474          * the aforementioned issue. Thus use IWL_GOOD_CRC_TH_NEVER
 475          * here instead of IWL_GOOD_CRC_TH_DISABLED.
 476          *
 477          * This was fixed in later versions along with some other
 478          * scan changes, and the threshold behaves as a flag in those
 479          * versions.
 480          */
 481         if (priv->new_scan_threshold_behaviour)
 482                 scan->good_CRC_th = is_active ? IWL_GOOD_CRC_TH_DEFAULT :
 483                                                 IWL_GOOD_CRC_TH_DISABLED;
 484         else
 485                 scan->good_CRC_th = is_active ? IWL_GOOD_CRC_TH_DEFAULT :
 486                                                 IWL_GOOD_CRC_TH_NEVER;
 487
 488         band = priv->scan_band;
 489
 490         if (priv->cfg->scan_rx_antennas[band])
 491                 rx_ant = priv->cfg->scan_rx_antennas[band];
 492
 493         if (band == IEEE80211_BAND_2GHZ &&
 494             priv->cfg->bt_params &&
 495             priv->cfg->bt_params->advanced_bt_coexist) {
 496                 /* transmit 2.4 GHz probes only on first antenna */
 497                 scan_tx_antennas = first_antenna(scan_tx_antennas);
 498         }
 499
 500         priv->scan_tx_ant[band] = iwl_toggle_tx_ant(priv, priv->scan_tx_ant[band],
 501                                                     scan_tx_antennas);
 502         rate_flags |= iwl_ant_idx_to_flags(priv->scan_tx_ant[band]);
 503         scan->tx_cmd.rate_n_flags = iwl_hw_set_rate_n_flags(rate, rate_flags);
 504
 505         /* In power save mode use one chain, otherwise use all chains */
 506         if (test_bit(STATUS_POWER_PMI, &priv->shrd->status)) {
 507                 /* rx_ant has been set to all valid chains previously */
 508                 active_chains = rx_ant &
 509                                 ((u8)(priv->chain_noise_data.active_chains));
 510                 if (!active_chains)
 511                         active_chains = rx_ant;
 512
 513                 IWL_DEBUG_SCAN(priv, "chain_noise_data.active_chains: %u\n",
 514                                 priv->chain_noise_data.active_chains);
 515
 516                 rx_ant = first_antenna(active_chains);
 517         }
 518         if (priv->cfg->bt_params &&
 519             priv->cfg->bt_params->advanced_bt_coexist &&
 520             priv->bt_full_concurrent) {
 521                 /* operated as 1x1 in full concurrency mode */
 522                 rx_ant = first_antenna(rx_ant);
 523         }
 524
 525         /* MIMO is not used here, but value is required */
 526         rx_chain |=
 527                 hw_params(priv).valid_rx_ant << RXON_RX_CHAIN_VALID_POS;
 528         rx_chain |= rx_ant << RXON_RX_CHAIN_FORCE_MIMO_SEL_POS;
 529         rx_chain |= rx_ant << RXON_RX_CHAIN_FORCE_SEL_POS;
 530         rx_chain |= 0x1 << RXON_RX_CHAIN_DRIVER_FORCE_POS;
 531         scan->rx_chain = cpu_to_le16(rx_chain);
 532         switch (priv->scan_type) {
 533         case IWL_SCAN_NORMAL:
 534                 cmd_len = iwl_fill_probe_req(priv,
 535                                         (struct ieee80211_mgmt *)scan->data,
 536                                         vif->addr,
 537                                         priv->scan_request->ie,
 538                                         priv->scan_request->ie_len,
 539                                         IWL_MAX_SCAN_SIZE - sizeof(*scan));
 540                 break;
 541         case IWL_SCAN_RADIO_RESET:
 542         case IWL_SCAN_ROC:
 543                 /* use bcast addr, will not be transmitted but must be valid */
 544                 cmd_len = iwl_fill_probe_req(priv,
 545                                         (struct ieee80211_mgmt *)scan->data,
 546                                         iwl_bcast_addr, NULL, 0,
 547                                         IWL_MAX_SCAN_SIZE - sizeof(*scan));
 548                 break;
 549         default:
 550                 BUG();
 551         }
 552         scan->tx_cmd.len = cpu_to_le16(cmd_len);
 553
 554         scan->filter_flags |= (RXON_FILTER_ACCEPT_GRP_MSK |
 555                                RXON_FILTER_BCON_AWARE_MSK);
 556
 557         switch (priv->scan_type) {
 558         case IWL_SCAN_RADIO_RESET:
 559                 scan->channel_count =
 560                         iwl_get_single_channel_for_scan(priv, vif, band,
 561                                 (void *)&scan->data[cmd_len]);
 562                 break;
 563         case IWL_SCAN_NORMAL:
 564                 scan->channel_count =
 565                         iwl_get_channels_for_scan(priv, vif, band,
 566                                 is_active, n_probes,
 567                                 (void *)&scan->data[cmd_len]);
 568                 break;
 569         case IWL_SCAN_ROC: {
 570                 struct iwl_scan_channel *scan_ch;
 571
 572                 scan->channel_count = 1;
 573
 574                 scan_ch = (void *)&scan->data[cmd_len];
 575                 scan_ch->type = SCAN_CHANNEL_TYPE_PASSIVE;
 576                 scan_ch->channel =
 577                         cpu_to_le16(priv->hw_roc_channel->hw_value);
 578                 scan_ch->active_dwell =
 579                 scan_ch->passive_dwell =
 580                         cpu_to_le16(priv->hw_roc_duration);
 581
 582                 /* Set txpower levels to defaults */
 583                 scan_ch->dsp_atten = 110;
 584
 585                 /* NOTE: if we were doing 6Mb OFDM for scans we'd use
 586                  * power level:
 587                  * scan_ch->tx_gain = ((1 << 5) | (2 << 3)) | 3;
 588                  */
 589                 if (priv->hw_roc_channel->band == IEEE80211_BAND_5GHZ)
 590                         scan_ch->tx_gain = ((1 << 5) | (3 << 3)) | 3;
 591                 else
 592                         scan_ch->tx_gain = ((1 << 5) | (5 << 3));
 593                 }
 594                 break;
 595         }
 596
 597         if (scan->channel_count == 0) {
 598                 IWL_DEBUG_SCAN(priv, "channel count %d\n", scan->channel_count);
 599                 return -EIO;
 600         }
 601
 602         cmd.len[0] += le16_to_cpu(scan->tx_cmd.len) +
 603             scan->channel_count * sizeof(struct iwl_scan_channel);
 604         cmd.data[0] = scan;
 605         cmd.dataflags[0] = IWL_HCMD_DFL_NOCOPY;
 606         scan->len = cpu_to_le16(cmd.len[0]);
 607
 608         /* set scan bit here for PAN params */
 609         set_bit(STATUS_SCAN_HW, &priv->shrd->status);
 610
 611         ret = iwlagn_set_pan_params(priv);
 612         if (ret)
 613                 return ret;
 614
 615         ret = iwl_trans_send_cmd(trans(priv), &cmd);
 616         if (ret) {
 617                 clear_bit(STATUS_SCAN_HW, &priv->shrd->status);
 618                 iwlagn_set_pan_params(priv);
 619         }
 620
 621         return ret;
 622 }
 623
 624 int iwlagn_manage_ibss_station(struct iwl_priv *priv,
 625                                struct ieee80211_vif *vif, bool add)
 626 {
 627         struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
 628
 629         if (add)
 630                 return iwlagn_add_bssid_station(priv, vif_priv->ctx,
 631                                                 vif->bss_conf.bssid,
 632                                                 &vif_priv->ibss_bssid_sta_id);
 633         return iwl_remove_station(priv, vif_priv->ibss_bssid_sta_id,
 634                                   vif->bss_conf.bssid);
 635 }
 636
 637 /**
 638  * iwlagn_txfifo_flush: send REPLY_TXFIFO_FLUSH command to uCode
 639  *
 640  * pre-requirements:
 641  *  1. acquire mutex before calling
 642  *  2. make sure rf is on and not in exit state
 643  */
 644 int iwlagn_txfifo_flush(struct iwl_priv *priv, u16 flush_control)
 645 {
 646         struct iwl_txfifo_flush_cmd flush_cmd;
 647         struct iwl_host_cmd cmd = {
 648                 .id = REPLY_TXFIFO_FLUSH,
 649                 .len = { sizeof(struct iwl_txfifo_flush_cmd), },
 650                 .flags = CMD_SYNC,
 651                 .data = { &flush_cmd, },
 652         };
 653
 654         might_sleep();
 655
 656         memset(&flush_cmd, 0, sizeof(flush_cmd));
 657         if (flush_control & BIT(IWL_RXON_CTX_BSS))
 658                 flush_cmd.fifo_control = IWL_SCD_VO_MSK | IWL_SCD_VI_MSK |
 659                                  IWL_SCD_BE_MSK | IWL_SCD_BK_MSK |
 660                                  IWL_SCD_MGMT_MSK;
 661         if ((flush_control & BIT(IWL_RXON_CTX_PAN)) &&
 662             (priv->valid_contexts != BIT(IWL_RXON_CTX_BSS)))
 663                 flush_cmd.fifo_control |= IWL_PAN_SCD_VO_MSK |
 664                                 IWL_PAN_SCD_VI_MSK | IWL_PAN_SCD_BE_MSK |
 665                                 IWL_PAN_SCD_BK_MSK | IWL_PAN_SCD_MGMT_MSK |
 666                                 IWL_PAN_SCD_MULTICAST_MSK;
 667
 668         if (priv->cfg->sku & EEPROM_SKU_CAP_11N_ENABLE)
 669                 flush_cmd.fifo_control |= IWL_AGG_TX_QUEUE_MSK;
 670
 671         IWL_DEBUG_INFO(priv, "fifo queue control: 0X%x\n",
 672                        flush_cmd.fifo_control);
 673         flush_cmd.flush_control = cpu_to_le16(flush_control);
 674
 675         return iwl_trans_send_cmd(trans(priv), &cmd);
 676 }
 677
 678 void iwlagn_dev_txfifo_flush(struct iwl_priv *priv, u16 flush_control)
 679 {
 680         mutex_lock(&priv->shrd->mutex);
 681         ieee80211_stop_queues(priv->hw);
 682         if (iwlagn_txfifo_flush(priv, IWL_DROP_ALL)) {
 683                 IWL_ERR(priv, "flush request fail\n");
 684                 goto done;
 685         }
 686         IWL_DEBUG_INFO(priv, "wait transmit/flush all frames\n");
 687         iwl_trans_wait_tx_queue_empty(trans(priv));
 688 done:
 689         ieee80211_wake_queues(priv->hw);
 690         mutex_unlock(&priv->shrd->mutex);
 691 }
 692
 693 /*
 694  * BT coex
 695  */
 696 /*
 697  * Macros to access the lookup table.
 698  *
 699  * The lookup table has 7 inputs: bt3_prio, bt3_txrx, bt_rf_act, wifi_req,
 700 * wifi_prio, wifi_txrx and wifi_sh_ant_req.
 701  *
 702  * It has three outputs: WLAN_ACTIVE, WLAN_KILL and ANT_SWITCH
 703  *
 704  * The format is that "registers" 8 through 11 contain the WLAN_ACTIVE bits
 705  * one after another in 32-bit registers, and "registers" 0 through 7 contain
 706  * the WLAN_KILL and ANT_SWITCH bits interleaved (in that order).
 707  *
 708  * These macros encode that format.
 709  */
 710 #define LUT_VALUE(bt3_prio, bt3_txrx, bt_rf_act, wifi_req, wifi_prio, \
 711                   wifi_txrx, wifi_sh_ant_req) \
 712         (bt3_prio | (bt3_txrx << 1) | (bt_rf_act << 2) | (wifi_req << 3) | \
 713         (wifi_prio << 4) | (wifi_txrx << 5) | (wifi_sh_ant_req << 6))
 714
 715 #define LUT_PTA_WLAN_ACTIVE_OP(lut, op, val) \
 716         lut[8 + ((val) >> 5)] op (cpu_to_le32(BIT((val) & 0x1f)))
 717 #define LUT_TEST_PTA_WLAN_ACTIVE(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 718                                  wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 719         (!!(LUT_PTA_WLAN_ACTIVE_OP(lut, &, LUT_VALUE(bt3_prio, bt3_txrx, \
 720                                    bt_rf_act, wifi_req, wifi_prio, wifi_txrx, \
 721                                    wifi_sh_ant_req))))
 722 #define LUT_SET_PTA_WLAN_ACTIVE(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 723                                 wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 724         LUT_PTA_WLAN_ACTIVE_OP(lut, |=, LUT_VALUE(bt3_prio, bt3_txrx, \
 725                                bt_rf_act, wifi_req, wifi_prio, wifi_txrx, \
 726                                wifi_sh_ant_req))
 727 #define LUT_CLEAR_PTA_WLAN_ACTIVE(lut, bt3_prio, bt3_txrx, bt_rf_act, \
 728                                   wifi_req, wifi_prio, wifi_txrx, \
 729                                   wifi_sh_ant_req) \
 730         LUT_PTA_WLAN_ACTIVE_OP(lut, &= ~, LUT_VALUE(bt3_prio, bt3_txrx, \
 731                                bt_rf_act, wifi_req, wifi_prio, wifi_txrx, \
 732                                wifi_sh_ant_req))
 733
 734 #define LUT_WLAN_KILL_OP(lut, op, val) \
 735         lut[(val) >> 4] op (cpu_to_le32(BIT(((val) << 1) & 0x1e)))
 736 #define LUT_TEST_WLAN_KILL(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 737                            wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 738         (!!(LUT_WLAN_KILL_OP(lut, &, LUT_VALUE(bt3_prio, bt3_txrx, bt_rf_act, \
 739                              wifi_req, wifi_prio, wifi_txrx, wifi_sh_ant_req))))
 740 #define LUT_SET_WLAN_KILL(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 741                           wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 742         LUT_WLAN_KILL_OP(lut, |=, LUT_VALUE(bt3_prio, bt3_txrx, bt_rf_act, \
 743                          wifi_req, wifi_prio, wifi_txrx, wifi_sh_ant_req))
 744 #define LUT_CLEAR_WLAN_KILL(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 745                             wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 746         LUT_WLAN_KILL_OP(lut, &= ~, LUT_VALUE(bt3_prio, bt3_txrx, bt_rf_act, \
 747                          wifi_req, wifi_prio, wifi_txrx, wifi_sh_ant_req))
 748
 749 #define LUT_ANT_SWITCH_OP(lut, op, val) \
 750         lut[(val) >> 4] op (cpu_to_le32(BIT((((val) << 1) & 0x1e) + 1)))
 751 #define LUT_TEST_ANT_SWITCH(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 752                             wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 753         (!!(LUT_ANT_SWITCH_OP(lut, &, LUT_VALUE(bt3_prio, bt3_txrx, bt_rf_act, \
 754                               wifi_req, wifi_prio, wifi_txrx, \
 755                               wifi_sh_ant_req))))
 756 #define LUT_SET_ANT_SWITCH(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 757                            wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 758         LUT_ANT_SWITCH_OP(lut, |=, LUT_VALUE(bt3_prio, bt3_txrx, bt_rf_act, \
 759                           wifi_req, wifi_prio, wifi_txrx, wifi_sh_ant_req))
 760 #define LUT_CLEAR_ANT_SWITCH(lut, bt3_prio, bt3_txrx, bt_rf_act, wifi_req, \
 761                              wifi_prio, wifi_txrx, wifi_sh_ant_req) \
 762         LUT_ANT_SWITCH_OP(lut, &= ~, LUT_VALUE(bt3_prio, bt3_txrx, bt_rf_act, \
 763                           wifi_req, wifi_prio, wifi_txrx, wifi_sh_ant_req))
 764
 765 static const __le32 iwlagn_def_3w_lookup[12] = {
 766         cpu_to_le32(0xaaaaaaaa),
 767         cpu_to_le32(0xaaaaaaaa),
 768         cpu_to_le32(0xaeaaaaaa),
 769         cpu_to_le32(0xaaaaaaaa),
 770         cpu_to_le32(0xcc00ff28),
 771         cpu_to_le32(0x0000aaaa),
 772         cpu_to_le32(0xcc00aaaa),
 773         cpu_to_le32(0x0000aaaa),
 774         cpu_to_le32(0xc0004000),
 775         cpu_to_le32(0x00004000),
 776         cpu_to_le32(0xf0005000),
 777         cpu_to_le32(0xf0005000),
 778 };
 779
 780 static const __le32 iwlagn_concurrent_lookup[12] = {
 781         cpu_to_le32(0xaaaaaaaa),
 782         cpu_to_le32(0xaaaaaaaa),
 783         cpu_to_le32(0xaaaaaaaa),
 784         cpu_to_le32(0xaaaaaaaa),
 785         cpu_to_le32(0xaaaaaaaa),
 786         cpu_to_le32(0xaaaaaaaa),
 787         cpu_to_le32(0xaaaaaaaa),
 788         cpu_to_le32(0xaaaaaaaa),
 789         cpu_to_le32(0x00000000),
 790         cpu_to_le32(0x00000000),
 791         cpu_to_le32(0x00000000),
 792         cpu_to_le32(0x00000000),
 793 };
 794
 795 void iwlagn_send_advance_bt_config(struct iwl_priv *priv)
 796 {
 797         struct iwl_basic_bt_cmd basic = {
 798                 .max_kill = IWLAGN_BT_MAX_KILL_DEFAULT,
 799                 .bt3_timer_t7_value = IWLAGN_BT3_T7_DEFAULT,
 800                 .bt3_prio_sample_time = IWLAGN_BT3_PRIO_SAMPLE_DEFAULT,
 801                 .bt3_timer_t2_value = IWLAGN_BT3_T2_DEFAULT,
 802         };
 803         struct iwl6000_bt_cmd bt_cmd_6000;
 804         struct iwl2000_bt_cmd bt_cmd_2000;
 805         int ret;
 806
 807         BUILD_BUG_ON(sizeof(iwlagn_def_3w_lookup) !=
 808                         sizeof(basic.bt3_lookup_table));
 809
 810         if (priv->cfg->bt_params) {
 811                 if (priv->cfg->bt_params->bt_session_2) {
 812                         bt_cmd_2000.prio_boost = cpu_to_le32(
 813                                 priv->cfg->bt_params->bt_prio_boost);
 814                         bt_cmd_2000.tx_prio_boost = 0;
 815                         bt_cmd_2000.rx_prio_boost = 0;
 816                 } else {
 817                         bt_cmd_6000.prio_boost =
 818                                 priv->cfg->bt_params->bt_prio_boost;
 819                         bt_cmd_6000.tx_prio_boost = 0;
 820                         bt_cmd_6000.rx_prio_boost = 0;
 821                 }
 822         } else {
 823                 IWL_ERR(priv, "failed to construct BT Coex Config\n");
 824                 return;
 825         }
 826
 827         basic.kill_ack_mask = priv->kill_ack_mask;
 828         basic.kill_cts_mask = priv->kill_cts_mask;
 829         basic.valid = priv->bt_valid;
 830
 831         /*
 832          * Configure BT coex mode to "no coexistence" when the
 833          * user disabled BT coexistence, we have no interface
 834          * (might be in monitor mode), or the interface is in
 835          * IBSS mode (no proper uCode support for coex then).
 836          */
 837         if (!iwlagn_mod_params.bt_coex_active ||
 838             priv->iw_mode == NL80211_IFTYPE_ADHOC) {
 839                 basic.flags = IWLAGN_BT_FLAG_COEX_MODE_DISABLED;
 840         } else {
 841                 basic.flags = IWLAGN_BT_FLAG_COEX_MODE_3W <<
 842                                         IWLAGN_BT_FLAG_COEX_MODE_SHIFT;
 843
 844                 if (!priv->bt_enable_pspoll)
 845                         basic.flags |= IWLAGN_BT_FLAG_SYNC_2_BT_DISABLE;
 846                 else
 847                         basic.flags &= ~IWLAGN_BT_FLAG_SYNC_2_BT_DISABLE;
 848
 849                 if (priv->bt_ch_announce)
 850                         basic.flags |= IWLAGN_BT_FLAG_CHANNEL_INHIBITION;
 851                 IWL_DEBUG_COEX(priv, "BT coex flag: 0X%x\n", basic.flags);
 852         }
 853         priv->bt_enable_flag = basic.flags;
 854         if (priv->bt_full_concurrent)
 855                 memcpy(basic.bt3_lookup_table, iwlagn_concurrent_lookup,
 856                         sizeof(iwlagn_concurrent_lookup));
 857         else
 858                 memcpy(basic.bt3_lookup_table, iwlagn_def_3w_lookup,
 859                         sizeof(iwlagn_def_3w_lookup));
 860
 861         IWL_DEBUG_COEX(priv, "BT coex %s in %s mode\n",
 862                        basic.flags ? "active" : "disabled",
 863                        priv->bt_full_concurrent ?
 864                        "full concurrency" : "3-wire");
 865
 866         if (priv->cfg->bt_params->bt_session_2) {
 867                 memcpy(&bt_cmd_2000.basic, &basic,
 868                         sizeof(basic));
 869                 ret = iwl_trans_send_cmd_pdu(trans(priv), REPLY_BT_CONFIG,
 870                         CMD_SYNC, sizeof(bt_cmd_2000), &bt_cmd_2000);
 871         } else {
 872                 memcpy(&bt_cmd_6000.basic, &basic,
 873                         sizeof(basic));
 874                 ret = iwl_trans_send_cmd_pdu(trans(priv), REPLY_BT_CONFIG,
 875                         CMD_SYNC, sizeof(bt_cmd_6000), &bt_cmd_6000);
 876         }
 877         if (ret)
 878                 IWL_ERR(priv, "failed to send BT Coex Config\n");
 879
 880 }
 881
 882 void iwlagn_bt_adjust_rssi_monitor(struct iwl_priv *priv, bool rssi_ena)
 883 {
 884         struct iwl_rxon_context *ctx, *found_ctx = NULL;
 885         bool found_ap = false;
 886
 887         lockdep_assert_held(&priv->shrd->mutex);
 888
 889         /* Check whether AP or GO mode is active. */
 890         if (rssi_ena) {
 891                 for_each_context(priv, ctx) {
 892                         if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_AP &&
 893                             iwl_is_associated_ctx(ctx)) {
 894                                 found_ap = true;
 895                                 break;
 896                         }
 897                 }
 898         }
 899
 900         /*
 901          * If disable was received or If GO/AP mode, disable RSSI
 902          * measurements.
 903          */
 904         if (!rssi_ena || found_ap) {
 905                 if (priv->cur_rssi_ctx) {
 906                         ctx = priv->cur_rssi_ctx;
 907                         ieee80211_disable_rssi_reports(ctx->vif);
 908                         priv->cur_rssi_ctx = NULL;
 909                 }
 910                 return;
 911         }
 912
 913         /*
 914          * If rssi measurements need to be enabled, consider all cases now.
 915          * Figure out how many contexts are active.
 916          */
 917         for_each_context(priv, ctx) {
 918                 if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_STATION &&
 919                     iwl_is_associated_ctx(ctx)) {
 920                         found_ctx = ctx;
 921                         break;
 922                 }
 923         }
 924
 925         /*
 926          * rssi monitor already enabled for the correct interface...nothing
 927          * to do.
 928          */
 929         if (found_ctx == priv->cur_rssi_ctx)
 930                 return;
 931
 932         /*
 933          * Figure out if rssi monitor is currently enabled, and needs
 934          * to be changed. If rssi monitor is already enabled, disable
 935          * it first else just enable rssi measurements on the
 936          * interface found above.
 937          */
 938         if (priv->cur_rssi_ctx) {
 939                 ctx = priv->cur_rssi_ctx;
 940                 if (ctx->vif)
 941                         ieee80211_disable_rssi_reports(ctx->vif);
 942         }
 943
 944         priv->cur_rssi_ctx = found_ctx;
 945
 946         if (!found_ctx)
 947                 return;
 948
 949         ieee80211_enable_rssi_reports(found_ctx->vif,
 950                         IWLAGN_BT_PSP_MIN_RSSI_THRESHOLD,
 951                         IWLAGN_BT_PSP_MAX_RSSI_THRESHOLD);
 952 }
 953
 954 static bool iwlagn_bt_traffic_is_sco(struct iwl_bt_uart_msg *uart_msg)
 955 {
 956         return BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3 >>
 957                         BT_UART_MSG_FRAME3SCOESCO_POS;
 958 }
 959
 960 static void iwlagn_bt_traffic_change_work(struct work_struct *work)
 961 {
 962         struct iwl_priv *priv =
 963                 container_of(work, struct iwl_priv, bt_traffic_change_work);
 964         struct iwl_rxon_context *ctx;
 965         int smps_request = -1;
 966
 967         if (priv->bt_enable_flag == IWLAGN_BT_FLAG_COEX_MODE_DISABLED) {
 968                 /* bt coex disabled */
 969                 return;
 970         }
 971
 972         /*
 973          * Note: bt_traffic_load can be overridden by scan complete and
 974          * coex profile notifications. Ignore that since only bad consequence
 975          * can be not matching debug print with actual state.
 976          */
 977         IWL_DEBUG_COEX(priv, "BT traffic load changes: %d\n",
 978                        priv->bt_traffic_load);
 979
 980         switch (priv->bt_traffic_load) {
 981         case IWL_BT_COEX_TRAFFIC_LOAD_NONE:
 982                 if (priv->bt_status)
 983                         smps_request = IEEE80211_SMPS_DYNAMIC;
 984                 else
 985                         smps_request = IEEE80211_SMPS_AUTOMATIC;
 986                 break;
 987         case IWL_BT_COEX_TRAFFIC_LOAD_LOW:
 988                 smps_request = IEEE80211_SMPS_DYNAMIC;
 989                 break;
 990         case IWL_BT_COEX_TRAFFIC_LOAD_HIGH:
 991         case IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS:
 992                 smps_request = IEEE80211_SMPS_STATIC;
 993                 break;
 994         default:
 995                 IWL_ERR(priv, "Invalid BT traffic load: %d\n",
 996                         priv->bt_traffic_load);
 997                 break;
 998         }
 999
1000         mutex_lock(&priv->shrd->mutex);
1001
1002         /*
1003          * We can not send command to firmware while scanning. When the scan
1004          * complete we will schedule this work again. We do check with mutex
1005          * locked to prevent new scan request to arrive. We do not check
1006          * STATUS_SCANNING to avoid race when queue_work two times from
1007          * different notifications, but quit and not perform any work at all.
1008          */
1009         if (test_bit(STATUS_SCAN_HW, &priv->shrd->status))
1010                 goto out;
1011
1012         iwl_update_chain_flags(priv);
1013
1014         if (smps_request != -1) {
1015                 priv->current_ht_config.smps = smps_request;
1016                 for_each_context(priv, ctx) {
1017                         if (ctx->vif && ctx->vif->type == NL80211_IFTYPE_STATION)
1018                                 ieee80211_request_smps(ctx->vif, smps_request);
1019                 }
1020         }
1021
1022         /*
1023          * Dynamic PS poll related functionality. Adjust RSSI measurements if
1024          * necessary.
1025          */
1026         iwlagn_bt_coex_rssi_monitor(priv);
1027 out:
1028         mutex_unlock(&priv->shrd->mutex);
1029 }
1030
1031 /*
1032  * If BT sco traffic, and RSSI monitor is enabled, move measurements to the
1033  * correct interface or disable it if this is the last interface to be
1034  * removed.
1035  */
1036 void iwlagn_bt_coex_rssi_monitor(struct iwl_priv *priv)
1037 {
1038         if (priv->bt_is_sco &&
1039             priv->bt_traffic_load == IWL_BT_COEX_TRAFFIC_LOAD_CONTINUOUS)
1040                 iwlagn_bt_adjust_rssi_monitor(priv, true);
1041         else
1042                 iwlagn_bt_adjust_rssi_monitor(priv, false);
1043 }
1044
1045 static void iwlagn_print_uartmsg(struct iwl_priv *priv,
1046                                 struct iwl_bt_uart_msg *uart_msg)
1047 {
1048         IWL_DEBUG_COEX(priv, "Message Type = 0x%X, SSN = 0x%X, "
1049                         "Update Req = 0x%X",
1050                 (BT_UART_MSG_FRAME1MSGTYPE_MSK & uart_msg->frame1) >>
1051                         BT_UART_MSG_FRAME1MSGTYPE_POS,
1052                 (BT_UART_MSG_FRAME1SSN_MSK & uart_msg->frame1) >>
1053                         BT_UART_MSG_FRAME1SSN_POS,
1054                 (BT_UART_MSG_FRAME1UPDATEREQ_MSK & uart_msg->frame1) >>
1055                         BT_UART_MSG_FRAME1UPDATEREQ_POS);
1056
1057         IWL_DEBUG_COEX(priv, "Open connections = 0x%X, Traffic load = 0x%X, "
1058                         "Chl_SeqN = 0x%X, In band = 0x%X",
1059                 (BT_UART_MSG_FRAME2OPENCONNECTIONS_MSK & uart_msg->frame2) >>
1060                         BT_UART_MSG_FRAME2OPENCONNECTIONS_POS,
1061                 (BT_UART_MSG_FRAME2TRAFFICLOAD_MSK & uart_msg->frame2) >>
1062                         BT_UART_MSG_FRAME2TRAFFICLOAD_POS,
1063                 (BT_UART_MSG_FRAME2CHLSEQN_MSK & uart_msg->frame2) >>
1064                         BT_UART_MSG_FRAME2CHLSEQN_POS,
1065                 (BT_UART_MSG_FRAME2INBAND_MSK & uart_msg->frame2) >>
1066                         BT_UART_MSG_FRAME2INBAND_POS);
1067
1068         IWL_DEBUG_COEX(priv, "SCO/eSCO = 0x%X, Sniff = 0x%X, A2DP = 0x%X, "
1069                         "ACL = 0x%X, Master = 0x%X, OBEX = 0x%X",
1070                 (BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3) >>
1071                         BT_UART_MSG_FRAME3SCOESCO_POS,
1072                 (BT_UART_MSG_FRAME3SNIFF_MSK & uart_msg->frame3) >>
1073                         BT_UART_MSG_FRAME3SNIFF_POS,
1074                 (BT_UART_MSG_FRAME3A2DP_MSK & uart_msg->frame3) >>
1075                         BT_UART_MSG_FRAME3A2DP_POS,
1076                 (BT_UART_MSG_FRAME3ACL_MSK & uart_msg->frame3) >>
1077                         BT_UART_MSG_FRAME3ACL_POS,
1078                 (BT_UART_MSG_FRAME3MASTER_MSK & uart_msg->frame3) >>
1079                         BT_UART_MSG_FRAME3MASTER_POS,
1080                 (BT_UART_MSG_FRAME3OBEX_MSK & uart_msg->frame3) >>
1081                         BT_UART_MSG_FRAME3OBEX_POS);
1082
1083         IWL_DEBUG_COEX(priv, "Idle duration = 0x%X",
1084                 (BT_UART_MSG_FRAME4IDLEDURATION_MSK & uart_msg->frame4) >>
1085                         BT_UART_MSG_FRAME4IDLEDURATION_POS);
1086
1087         IWL_DEBUG_COEX(priv, "Tx Activity = 0x%X, Rx Activity = 0x%X, "
1088                         "eSCO Retransmissions = 0x%X",
1089                 (BT_UART_MSG_FRAME5TXACTIVITY_MSK & uart_msg->frame5) >>
1090                         BT_UART_MSG_FRAME5TXACTIVITY_POS,
1091                 (BT_UART_MSG_FRAME5RXACTIVITY_MSK & uart_msg->frame5) >>
1092                         BT_UART_MSG_FRAME5RXACTIVITY_POS,
1093                 (BT_UART_MSG_FRAME5ESCORETRANSMIT_MSK & uart_msg->frame5) >>
1094                         BT_UART_MSG_FRAME5ESCORETRANSMIT_POS);
1095
1096         IWL_DEBUG_COEX(priv, "Sniff Interval = 0x%X, Discoverable = 0x%X",
1097                 (BT_UART_MSG_FRAME6SNIFFINTERVAL_MSK & uart_msg->frame6) >>
1098                         BT_UART_MSG_FRAME6SNIFFINTERVAL_POS,
1099                 (BT_UART_MSG_FRAME6DISCOVERABLE_MSK & uart_msg->frame6) >>
1100                         BT_UART_MSG_FRAME6DISCOVERABLE_POS);
1101
1102         IWL_DEBUG_COEX(priv, "Sniff Activity = 0x%X, Page = "
1103                         "0x%X, Inquiry = 0x%X, Connectable = 0x%X",
1104                 (BT_UART_MSG_FRAME7SNIFFACTIVITY_MSK & uart_msg->frame7) >>
1105                         BT_UART_MSG_FRAME7SNIFFACTIVITY_POS,
1106                 (BT_UART_MSG_FRAME7PAGE_MSK & uart_msg->frame7) >>
1107                         BT_UART_MSG_FRAME7PAGE_POS,
1108                 (BT_UART_MSG_FRAME7INQUIRY_MSK & uart_msg->frame7) >>
1109                         BT_UART_MSG_FRAME7INQUIRY_POS,
1110                 (BT_UART_MSG_FRAME7CONNECTABLE_MSK & uart_msg->frame7) >>
1111                         BT_UART_MSG_FRAME7CONNECTABLE_POS);
1112 }
1113
1114 static void iwlagn_set_kill_msk(struct iwl_priv *priv,
1115                                 struct iwl_bt_uart_msg *uart_msg)
1116 {
1117         u8 kill_msk;
1118         static const __le32 bt_kill_ack_msg[2] = {
1119                 IWLAGN_BT_KILL_ACK_MASK_DEFAULT,
1120                 IWLAGN_BT_KILL_ACK_CTS_MASK_SCO };
1121         static const __le32 bt_kill_cts_msg[2] = {
1122                 IWLAGN_BT_KILL_CTS_MASK_DEFAULT,
1123                 IWLAGN_BT_KILL_ACK_CTS_MASK_SCO };
1124
1125         kill_msk = (BT_UART_MSG_FRAME3SCOESCO_MSK & uart_msg->frame3)
1126                 ? 1 : 0;
1127         if (priv->kill_ack_mask != bt_kill_ack_msg[kill_msk] ||
1128             priv->kill_cts_mask != bt_kill_cts_msg[kill_msk]) {
1129                 priv->bt_valid |= IWLAGN_BT_VALID_KILL_ACK_MASK;
1130                 priv->kill_ack_mask = bt_kill_ack_msg[kill_msk];
1131                 priv->bt_valid |= IWLAGN_BT_VALID_KILL_CTS_MASK;
1132                 priv->kill_cts_mask = bt_kill_cts_msg[kill_msk];
1133
1134                 /* schedule to send runtime bt_config */
1135                 queue_work(priv->shrd->workqueue, &priv->bt_runtime_config);
1136         }
1137 }
1138
1139 void iwlagn_bt_coex_profile_notif(struct iwl_priv *priv,
1140                                              struct iwl_rx_mem_buffer *rxb)
1141 {
1142         unsigned long flags;
1143         struct iwl_rx_packet *pkt = rxb_addr(rxb);
1144         struct iwl_bt_coex_profile_notif *coex = &pkt->u.bt_coex_profile_notif;
1145         struct iwl_bt_uart_msg *uart_msg = &coex->last_bt_uart_msg;
1146
1147         if (priv->bt_enable_flag == IWLAGN_BT_FLAG_COEX_MODE_DISABLED) {
1148                 /* bt coex disabled */
1149                 return;
1150         }
1151
1152         IWL_DEBUG_COEX(priv, "BT Coex notification:\n");
1153         IWL_DEBUG_COEX(priv, "    status: %d\n", coex->bt_status);
1154         IWL_DEBUG_COEX(priv, "    traffic load: %d\n", coex->bt_traffic_load);
1155         IWL_DEBUG_COEX(priv, "    CI compliance: %d\n",
1156                         coex->bt_ci_compliance);
1157         iwlagn_print_uartmsg(priv, uart_msg);
1158
1159         priv->last_bt_traffic_load = priv->bt_traffic_load;
1160         priv->bt_is_sco = iwlagn_bt_traffic_is_sco(uart_msg);
1161
1162         if (priv->iw_mode != NL80211_IFTYPE_ADHOC) {
1163                 if (priv->bt_status != coex->bt_status ||
1164                     priv->last_bt_traffic_load != coex->bt_traffic_load) {
1165                         if (coex->bt_status) {
1166                                 /* BT on */
1167                                 if (!priv->bt_ch_announce)
1168                                         priv->bt_traffic_load =
1169                                                 IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1170                                 else
1171                                         priv->bt_traffic_load =
1172                                                 coex->bt_traffic_load;
1173                         } else {
1174                                 /* BT off */
1175                                 priv->bt_traffic_load =
1176                                         IWL_BT_COEX_TRAFFIC_LOAD_NONE;
1177                         }
1178                         priv->bt_status = coex->bt_status;
1179                         queue_work(priv->shrd->workqueue,
1180                                    &priv->bt_traffic_change_work);
1181                 }
1182         }
1183
1184         iwlagn_set_kill_msk(priv, uart_msg);
1185
1186         /* FIXME: based on notification, adjust the prio_boost */
1187
1188         spin_lock_irqsave(&priv->shrd->lock, flags);
1189         priv->bt_ci_compliance = coex->bt_ci_compliance;
1190         spin_unlock_irqrestore(&priv->shrd->lock, flags);
1191 }
1192
1193 void iwlagn_bt_rx_handler_setup(struct iwl_priv *priv)
1194 {
1195         priv->rx_handlers[REPLY_BT_COEX_PROFILE_NOTIF] =
1196                 iwlagn_bt_coex_profile_notif;
1197 }
1198
1199 void iwlagn_bt_setup_deferred_work(struct iwl_priv *priv)
1200 {
1201         INIT_WORK(&priv->bt_traffic_change_work,
1202                   iwlagn_bt_traffic_change_work);
1203 }
1204
1205 void iwlagn_bt_cancel_deferred_work(struct iwl_priv *priv)
1206 {
1207         cancel_work_sync(&priv->bt_traffic_change_work);
1208 }
1209
1210 static bool is_single_rx_stream(struct iwl_priv *priv)
1211 {
1212         return priv->current_ht_config.smps == IEEE80211_SMPS_STATIC ||
1213                priv->current_ht_config.single_chain_sufficient;
1214 }
1215
1216 #define IWL_NUM_RX_CHAINS_MULTIPLE      3
1217 #define IWL_NUM_RX_CHAINS_SINGLE        2
1218 #define IWL_NUM_IDLE_CHAINS_DUAL        2
1219 #define IWL_NUM_IDLE_CHAINS_SINGLE      1
1220
1221 /*
1222  * Determine how many receiver/antenna chains to use.
1223  *
1224  * More provides better reception via diversity.  Fewer saves power
1225  * at the expense of throughput, but only when not in powersave to
1226  * start with.
1227  *
1228  * MIMO (dual stream) requires at least 2, but works better with 3.
1229  * This does not determine *which* chains to use, just how many.
1230  */
1231 static int iwl_get_active_rx_chain_count(struct iwl_priv *priv)
1232 {
1233         if (priv->cfg->bt_params &&
1234             priv->cfg->bt_params->advanced_bt_coexist &&
1235             (priv->bt_full_concurrent ||
1236              priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)) {
1237                 /*
1238                  * only use chain 'A' in bt high traffic load or
1239                  * full concurrency mode
1240                  */
1241                 return IWL_NUM_RX_CHAINS_SINGLE;
1242         }
1243         /* # of Rx chains to use when expecting MIMO. */
1244         if (is_single_rx_stream(priv))
1245                 return IWL_NUM_RX_CHAINS_SINGLE;
1246         else
1247                 return IWL_NUM_RX_CHAINS_MULTIPLE;
1248 }
1249
1250 /*
1251  * When we are in power saving mode, unless device support spatial
1252  * multiplexing power save, use the active count for rx chain count.
1253  */
1254 static int iwl_get_idle_rx_chain_count(struct iwl_priv *priv, int active_cnt)
1255 {
1256         /* # Rx chains when idling, depending on SMPS mode */
1257         switch (priv->current_ht_config.smps) {
1258         case IEEE80211_SMPS_STATIC:
1259         case IEEE80211_SMPS_DYNAMIC:
1260                 return IWL_NUM_IDLE_CHAINS_SINGLE;
1261         case IEEE80211_SMPS_OFF:
1262                 return active_cnt;
1263         default:
1264                 WARN(1, "invalid SMPS mode %d",
1265                      priv->current_ht_config.smps);
1266                 return active_cnt;
1267         }
1268 }
1269
1270 /* up to 4 chains */
1271 static u8 iwl_count_chain_bitmap(u32 chain_bitmap)
1272 {
1273         u8 res;
1274         res = (chain_bitmap & BIT(0)) >> 0;
1275         res += (chain_bitmap & BIT(1)) >> 1;
1276         res += (chain_bitmap & BIT(2)) >> 2;
1277         res += (chain_bitmap & BIT(3)) >> 3;
1278         return res;
1279 }
1280
1281 /**
1282  * iwlagn_set_rxon_chain - Set up Rx chain usage in "staging" RXON image
1283  *
1284  * Selects how many and which Rx receivers/antennas/chains to use.
1285  * This should not be used for scan command ... it puts data in wrong place.
1286  */
1287 void iwlagn_set_rxon_chain(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1288 {
1289         bool is_single = is_single_rx_stream(priv);
1290         bool is_cam = !test_bit(STATUS_POWER_PMI, &priv->shrd->status);
1291         u8 idle_rx_cnt, active_rx_cnt, valid_rx_cnt;
1292         u32 active_chains;
1293         u16 rx_chain;
1294
1295         /* Tell uCode which antennas are actually connected.
1296          * Before first association, we assume all antennas are connected.
1297          * Just after first association, iwl_chain_noise_calibration()
1298          *    checks which antennas actually *are* connected. */
1299         if (priv->chain_noise_data.active_chains)
1300                 active_chains = priv->chain_noise_data.active_chains;
1301         else
1302                 active_chains = hw_params(priv).valid_rx_ant;
1303
1304         if (priv->cfg->bt_params &&
1305             priv->cfg->bt_params->advanced_bt_coexist &&
1306             (priv->bt_full_concurrent ||
1307              priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)) {
1308                 /*
1309                  * only use chain 'A' in bt high traffic load or
1310                  * full concurrency mode
1311                  */
1312                 active_chains = first_antenna(active_chains);
1313         }
1314
1315         rx_chain = active_chains << RXON_RX_CHAIN_VALID_POS;
1316
1317         /* How many receivers should we use? */
1318         active_rx_cnt = iwl_get_active_rx_chain_count(priv);
1319         idle_rx_cnt = iwl_get_idle_rx_chain_count(priv, active_rx_cnt);
1320
1321
1322         /* correct rx chain count according hw settings
1323          * and chain noise calibration
1324          */
1325         valid_rx_cnt = iwl_count_chain_bitmap(active_chains);
1326         if (valid_rx_cnt < active_rx_cnt)
1327                 active_rx_cnt = valid_rx_cnt;
1328
1329         if (valid_rx_cnt < idle_rx_cnt)
1330                 idle_rx_cnt = valid_rx_cnt;
1331
1332         rx_chain |= active_rx_cnt << RXON_RX_CHAIN_MIMO_CNT_POS;
1333         rx_chain |= idle_rx_cnt  << RXON_RX_CHAIN_CNT_POS;
1334
1335         ctx->staging.rx_chain = cpu_to_le16(rx_chain);
1336
1337         if (!is_single && (active_rx_cnt >= IWL_NUM_RX_CHAINS_SINGLE) && is_cam)
1338                 ctx->staging.rx_chain |= RXON_RX_CHAIN_MIMO_FORCE_MSK;
1339         else
1340                 ctx->staging.rx_chain &= ~RXON_RX_CHAIN_MIMO_FORCE_MSK;
1341
1342         IWL_DEBUG_ASSOC(priv, "rx_chain=0x%X active=%d idle=%d\n",
1343                         ctx->staging.rx_chain,
1344                         active_rx_cnt, idle_rx_cnt);
1345
1346         WARN_ON(active_rx_cnt == 0 || idle_rx_cnt == 0 ||
1347                 active_rx_cnt < idle_rx_cnt);
1348 }
1349
1350 u8 iwl_toggle_tx_ant(struct iwl_priv *priv, u8 ant, u8 valid)
1351 {
1352         int i;
1353         u8 ind = ant;
1354
1355         if (priv->band == IEEE80211_BAND_2GHZ &&
1356             priv->bt_traffic_load >= IWL_BT_COEX_TRAFFIC_LOAD_HIGH)
1357                 return 0;
1358
1359         for (i = 0; i < RATE_ANT_NUM - 1; i++) {
1360                 ind = (ind + 1) < RATE_ANT_NUM ?  ind + 1 : 0;
1361                 if (valid & BIT(ind))
1362                         return ind;
1363         }
1364         return ant;
1365 }
1366
1367 /* notification wait support */
1368 void iwlagn_init_notification_wait(struct iwl_priv *priv,
1369                                    struct iwl_notification_wait *wait_entry,
1370                                    u8 cmd,
1371                                    void (*fn)(struct iwl_priv *priv,
1372                                               struct iwl_rx_packet *pkt,
1373                                               void *data),
1374                                    void *fn_data)
1375 {
1376         wait_entry->fn = fn;
1377         wait_entry->fn_data = fn_data;
1378         wait_entry->cmd = cmd;
1379         wait_entry->triggered = false;
1380         wait_entry->aborted = false;
1381
1382         spin_lock_bh(&priv->notif_wait_lock);
1383         list_add(&wait_entry->list, &priv->notif_waits);
1384         spin_unlock_bh(&priv->notif_wait_lock);
1385 }
1386
1387 int iwlagn_wait_notification(struct iwl_priv *priv,
1388                              struct iwl_notification_wait *wait_entry,
1389                              unsigned long timeout)
1390 {
1391         int ret;
1392
1393         ret = wait_event_timeout(priv->notif_waitq,
1394                                  wait_entry->triggered || wait_entry->aborted,
1395                                  timeout);
1396
1397         spin_lock_bh(&priv->notif_wait_lock);
1398         list_del(&wait_entry->list);
1399         spin_unlock_bh(&priv->notif_wait_lock);
1400
1401         if (wait_entry->aborted)
1402                 return -EIO;
1403
1404         /* return value is always >= 0 */
1405         if (ret <= 0)
1406                 return -ETIMEDOUT;
1407         return 0;
1408 }
1409
1410 void iwlagn_remove_notification(struct iwl_priv *priv,
1411                                 struct iwl_notification_wait *wait_entry)
1412 {
1413         spin_lock_bh(&priv->notif_wait_lock);
1414         list_del(&wait_entry->list);
1415         spin_unlock_bh(&priv->notif_wait_lock);
1416 }