if_rum.c revision 185948
1/*-
2 * Copyright (c) 2005-2007 Damien Bergamini <damien.bergamini@free.fr>
3 * Copyright (c) 2006 Niall O'Higgins <niallo@openbsd.org>
4 * Copyright (c) 2007-2008 Hans Petter Selasky <hselasky@freebsd.org>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 */
18
19/*
20 * NOTE: all function names beginning like "rum_cfg_" can only
21 * be called from within the config thread function !
22 */
23
24#include <sys/cdefs.h>
25__FBSDID("$FreeBSD: head/sys/dev/usb2/wlan/if_rum2.c 185948 2008-12-11 23:13:02Z thompsa $");
26
27/*-
28 * Ralink Technology RT2501USB/RT2601USB chipset driver
29 * http://www.ralinktech.com.tw/
30 */
31
32#include <dev/usb2/include/usb2_devid.h>
33#include <dev/usb2/include/usb2_standard.h>
34#include <dev/usb2/include/usb2_mfunc.h>
35#include <dev/usb2/include/usb2_error.h>
36
37#define	usb2_config_td_cc rum_config_copy
38#define	usb2_config_td_softc rum_softc
39
40#define	USB_DEBUG_VAR rum_debug
41
42#include <dev/usb2/core/usb2_core.h>
43#include <dev/usb2/core/usb2_lookup.h>
44#include <dev/usb2/core/usb2_process.h>
45#include <dev/usb2/core/usb2_config_td.h>
46#include <dev/usb2/core/usb2_debug.h>
47#include <dev/usb2/core/usb2_request.h>
48#include <dev/usb2/core/usb2_busdma.h>
49#include <dev/usb2/core/usb2_util.h>
50
51#include <dev/usb2/wlan/usb2_wlan.h>
52#include <dev/usb2/wlan/if_rum2_reg.h>
53#include <dev/usb2/wlan/if_rum2_var.h>
54#include <dev/usb2/wlan/if_rum2_fw.h>
55
56#if USB_DEBUG
57static int rum_debug = 0;
58
59SYSCTL_NODE(_hw_usb2, OID_AUTO, rum, CTLFLAG_RW, 0, "USB rum");
60SYSCTL_INT(_hw_usb2_rum, OID_AUTO, debug, CTLFLAG_RW, &rum_debug, 0,
61    "Debug level");
62#endif
63
64/* prototypes */
65
66static device_probe_t rum_probe;
67static device_attach_t rum_attach;
68static device_detach_t rum_detach;
69
70static usb2_callback_t rum_bulk_read_callback;
71static usb2_callback_t rum_bulk_read_clear_stall_callback;
72static usb2_callback_t rum_bulk_write_callback;
73static usb2_callback_t rum_bulk_write_clear_stall_callback;
74
75static usb2_config_td_command_t rum_cfg_first_time_setup;
76static usb2_config_td_command_t rum_config_copy;
77static usb2_config_td_command_t rum_cfg_scan_start;
78static usb2_config_td_command_t rum_cfg_scan_end;
79static usb2_config_td_command_t rum_cfg_select_band;
80static usb2_config_td_command_t rum_cfg_set_chan;
81static usb2_config_td_command_t rum_cfg_enable_tsf_sync;
82static usb2_config_td_command_t rum_cfg_enable_mrr;
83static usb2_config_td_command_t rum_cfg_update_slot;
84static usb2_config_td_command_t rum_cfg_select_antenna;
85static usb2_config_td_command_t rum_cfg_set_txpreamble;
86static usb2_config_td_command_t rum_cfg_update_promisc;
87static usb2_config_td_command_t rum_cfg_pre_init;
88static usb2_config_td_command_t rum_cfg_init;
89static usb2_config_td_command_t rum_cfg_pre_stop;
90static usb2_config_td_command_t rum_cfg_stop;
91static usb2_config_td_command_t rum_cfg_amrr_timeout;
92static usb2_config_td_command_t rum_cfg_prepare_beacon;
93static usb2_config_td_command_t rum_cfg_newstate;
94
95static const char *rum_get_rf(uint32_t);
96static int	rum_ioctl_cb(struct ifnet *, u_long, caddr_t);
97static void	rum_std_command(struct ieee80211com *, usb2_config_td_command_t *);
98static void	rum_scan_start_cb(struct ieee80211com *);
99static void	rum_scan_end_cb(struct ieee80211com *);
100static void	rum_set_channel_cb(struct ieee80211com *);
101static uint16_t	rum_cfg_eeprom_read_2(struct rum_softc *, uint16_t);
102static uint32_t	rum_cfg_bbp_disbusy(struct rum_softc *);
103static uint32_t	rum_cfg_read(struct rum_softc *, uint16_t);
104static uint8_t	rum_cfg_bbp_init(struct rum_softc *);
105static uint8_t	rum_cfg_bbp_read(struct rum_softc *, uint8_t);
106static void	rum_cfg_amrr_start(struct rum_softc *);
107static void	rum_cfg_bbp_write(struct rum_softc *, uint8_t, uint8_t);
108static void	rum_cfg_do_request(struct rum_softc *,
109		    struct usb2_device_request *, void *);
110static void	rum_cfg_eeprom_read(struct rum_softc *, uint16_t, void *,
111		    uint16_t);
112static void	rum_cfg_load_microcode(struct rum_softc *, const uint8_t *,
113		    uint16_t);
114static void	rum_cfg_read_eeprom(struct rum_softc *);
115static void	rum_cfg_read_multi(struct rum_softc *, uint16_t, void *,
116		    uint16_t);
117static void	rum_cfg_rf_write(struct rum_softc *, uint8_t, uint32_t);
118static void	rum_cfg_set_bssid(struct rum_softc *, uint8_t *);
119static void	rum_cfg_set_macaddr(struct rum_softc *, uint8_t *);
120static void	rum_cfg_write(struct rum_softc *, uint16_t, uint32_t);
121static void	rum_cfg_write_multi(struct rum_softc *, uint16_t, void *,
122		    uint16_t);
123static void	rum_end_of_commands(struct rum_softc *);
124static void	rum_init_cb(void *);
125static void	rum_start_cb(struct ifnet *);
126static void	rum_watchdog(void *);
127static uint8_t	rum_get_rssi(struct rum_softc *, uint8_t);
128static struct ieee80211vap *rum_vap_create(struct ieee80211com *,
129		    const char[], int, int, int, const uint8_t[],
130		    const uint8_t[]);
131static void	rum_vap_delete(struct ieee80211vap *);
132static struct ieee80211_node *rum_node_alloc(struct ieee80211vap *,
133		    const uint8_t[]);
134static void	rum_newassoc(struct ieee80211_node *, int);
135static void	rum_cfg_disable_tsf_sync(struct rum_softc *);
136static void	rum_cfg_set_run(struct rum_softc *, struct rum_config_copy *);
137static void	rum_fill_write_queue(struct rum_softc *);
138static void	rum_tx_clean_queue(struct rum_softc *);
139static void	rum_tx_freem(struct mbuf *);
140static void	rum_tx_mgt(struct rum_softc *, struct mbuf *,
141		    struct ieee80211_node *);
142static struct ieee80211vap *rum_get_vap(struct rum_softc *);
143static void	rum_tx_data(struct rum_softc *, struct mbuf *,
144		    struct ieee80211_node *);
145static void	rum_tx_prot(struct rum_softc *, const struct mbuf *,
146		    struct ieee80211_node *, uint8_t, uint16_t);
147static void	rum_tx_raw(struct rum_softc *, struct mbuf *,
148		    struct ieee80211_node *,
149		    const struct ieee80211_bpf_params *);
150static int	rum_raw_xmit_cb(struct ieee80211_node *, struct mbuf *,
151		    const struct ieee80211_bpf_params *);
152static void	rum_setup_desc_and_tx(struct rum_softc *, struct mbuf *,
153		    uint32_t, uint16_t, uint16_t);
154static int	rum_newstate_cb(struct ieee80211vap *,
155		    enum ieee80211_state nstate, int arg);
156static void	rum_update_mcast_cb(struct ifnet *);
157static void	rum_update_promisc_cb(struct ifnet *);
158
159/* various supported device vendors/products */
160static const struct usb2_device_id rum_devs[] = {
161	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_HWU54DM, 0)},
162	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_RT2573_2, 0)},
163	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_RT2573_3, 0)},
164	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_RT2573_4, 0)},
165	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_WUG2700, 0)},
166	{USB_VPI(USB_VENDOR_AMIT, USB_PRODUCT_AMIT_CGWLUSB2GO, 0)},
167	{USB_VPI(USB_VENDOR_ASUS, USB_PRODUCT_ASUS_RT2573_1, 0)},
168	{USB_VPI(USB_VENDOR_ASUS, USB_PRODUCT_ASUS_RT2573_2, 0)},
169	{USB_VPI(USB_VENDOR_BELKIN, USB_PRODUCT_BELKIN_F5D7050A, 0)},
170	{USB_VPI(USB_VENDOR_BELKIN, USB_PRODUCT_BELKIN_F5D9050V3, 0)},
171	{USB_VPI(USB_VENDOR_CISCOLINKSYS, USB_PRODUCT_CISCOLINKSYS_WUSB54GC, 0)},
172	{USB_VPI(USB_VENDOR_CISCOLINKSYS, USB_PRODUCT_CISCOLINKSYS_WUSB54GR, 0)},
173	{USB_VPI(USB_VENDOR_CONCEPTRONIC2, USB_PRODUCT_CONCEPTRONIC2_C54RU2, 0)},
174	{USB_VPI(USB_VENDOR_COREGA, USB_PRODUCT_COREGA_CGWLUSB2GL, 0)},
175	{USB_VPI(USB_VENDOR_COREGA, USB_PRODUCT_COREGA_CGWLUSB2GPX, 0)},
176	{USB_VPI(USB_VENDOR_DICKSMITH, USB_PRODUCT_DICKSMITH_CWD854F, 0)},
177	{USB_VPI(USB_VENDOR_DICKSMITH, USB_PRODUCT_DICKSMITH_RT2573, 0)},
178	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_DWLG122C1, 0)},
179	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_WUA1340, 0)},
180	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_DWA111, 0)},
181	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_DWA110, 0)},
182	{USB_VPI(USB_VENDOR_GIGABYTE, USB_PRODUCT_GIGABYTE_GNWB01GS, 0)},
183	{USB_VPI(USB_VENDOR_GIGABYTE, USB_PRODUCT_GIGABYTE_GNWI05GS, 0)},
184	{USB_VPI(USB_VENDOR_GIGASET, USB_PRODUCT_GIGASET_RT2573, 0)},
185	{USB_VPI(USB_VENDOR_GOODWAY, USB_PRODUCT_GOODWAY_RT2573, 0)},
186	{USB_VPI(USB_VENDOR_GUILLEMOT, USB_PRODUCT_GUILLEMOT_HWGUSB254LB, 0)},
187	{USB_VPI(USB_VENDOR_GUILLEMOT, USB_PRODUCT_GUILLEMOT_HWGUSB254V2AP, 0)},
188	{USB_VPI(USB_VENDOR_HUAWEI3COM, USB_PRODUCT_HUAWEI3COM_WUB320G, 0)},
189	{USB_VPI(USB_VENDOR_MELCO, USB_PRODUCT_MELCO_G54HP, 0)},
190	{USB_VPI(USB_VENDOR_MELCO, USB_PRODUCT_MELCO_SG54HP, 0)},
191	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_1, 0)},
192	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_2, 0)},
193	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_3, 0)},
194	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_4, 0)},
195	{USB_VPI(USB_VENDOR_NOVATECH, USB_PRODUCT_NOVATECH_RT2573, 0)},
196	{USB_VPI(USB_VENDOR_PLANEX2, USB_PRODUCT_PLANEX2_GWUS54HP, 0)},
197	{USB_VPI(USB_VENDOR_PLANEX2, USB_PRODUCT_PLANEX2_GWUS54MINI2, 0)},
198	{USB_VPI(USB_VENDOR_PLANEX2, USB_PRODUCT_PLANEX2_GWUSMM, 0)},
199	{USB_VPI(USB_VENDOR_QCOM, USB_PRODUCT_QCOM_RT2573, 0)},
200	{USB_VPI(USB_VENDOR_QCOM, USB_PRODUCT_QCOM_RT2573_2, 0)},
201	{USB_VPI(USB_VENDOR_RALINK, USB_PRODUCT_RALINK_RT2573, 0)},
202	{USB_VPI(USB_VENDOR_RALINK, USB_PRODUCT_RALINK_RT2573_2, 0)},
203	{USB_VPI(USB_VENDOR_RALINK, USB_PRODUCT_RALINK_RT2671, 0)},
204	{USB_VPI(USB_VENDOR_SITECOMEU, USB_PRODUCT_SITECOMEU_WL113R2, 0)},
205	{USB_VPI(USB_VENDOR_SITECOMEU, USB_PRODUCT_SITECOMEU_WL172, 0)},
206	{USB_VPI(USB_VENDOR_SPARKLAN, USB_PRODUCT_SPARKLAN_RT2573, 0)},
207	{USB_VPI(USB_VENDOR_SURECOM, USB_PRODUCT_SURECOM_RT2573, 0)},
208};
209
210struct rum_def_mac {
211	uint32_t reg;
212	uint32_t val;
213};
214
215static const struct rum_def_mac rum_def_mac[] = {
216	{RT2573_TXRX_CSR0, 0x025fb032},
217	{RT2573_TXRX_CSR1, 0x9eaa9eaf},
218	{RT2573_TXRX_CSR2, 0x8a8b8c8d},
219	{RT2573_TXRX_CSR3, 0x00858687},
220	{RT2573_TXRX_CSR7, 0x2e31353b},
221	{RT2573_TXRX_CSR8, 0x2a2a2a2c},
222	{RT2573_TXRX_CSR15, 0x0000000f},
223	{RT2573_MAC_CSR6, 0x00000fff},
224	{RT2573_MAC_CSR8, 0x016c030a},
225	{RT2573_MAC_CSR10, 0x00000718},
226	{RT2573_MAC_CSR12, 0x00000004},
227	{RT2573_MAC_CSR13, 0x00007f00},
228	{RT2573_SEC_CSR0, 0x00000000},
229	{RT2573_SEC_CSR1, 0x00000000},
230	{RT2573_SEC_CSR5, 0x00000000},
231	{RT2573_PHY_CSR1, 0x000023b0},
232	{RT2573_PHY_CSR5, 0x00040a06},
233	{RT2573_PHY_CSR6, 0x00080606},
234	{RT2573_PHY_CSR7, 0x00000408},
235	{RT2573_AIFSN_CSR, 0x00002273},
236	{RT2573_CWMIN_CSR, 0x00002344},
237	{RT2573_CWMAX_CSR, 0x000034aa}
238};
239
240struct rum_def_bbp {
241	uint8_t	reg;
242	uint8_t	val;
243};
244
245static const struct rum_def_bbp rum_def_bbp[] = {
246	{3, 0x80},
247	{15, 0x30},
248	{17, 0x20},
249	{21, 0xc8},
250	{22, 0x38},
251	{23, 0x06},
252	{24, 0xfe},
253	{25, 0x0a},
254	{26, 0x0d},
255	{32, 0x0b},
256	{34, 0x12},
257	{37, 0x07},
258	{39, 0xf8},
259	{41, 0x60},
260	{53, 0x10},
261	{54, 0x18},
262	{60, 0x10},
263	{61, 0x04},
264	{62, 0x04},
265	{75, 0xfe},
266	{86, 0xfe},
267	{88, 0xfe},
268	{90, 0x0f},
269	{99, 0x00},
270	{102, 0x16},
271	{107, 0x04}
272};
273
274struct rfprog {
275	uint8_t	chan;
276	uint32_t r1, r2, r3, r4;
277};
278
279static const struct rfprog rum_rf5226[] = {
280	{1, 0x00b03, 0x001e1, 0x1a014, 0x30282},
281	{2, 0x00b03, 0x001e1, 0x1a014, 0x30287},
282	{3, 0x00b03, 0x001e2, 0x1a014, 0x30282},
283	{4, 0x00b03, 0x001e2, 0x1a014, 0x30287},
284	{5, 0x00b03, 0x001e3, 0x1a014, 0x30282},
285	{6, 0x00b03, 0x001e3, 0x1a014, 0x30287},
286	{7, 0x00b03, 0x001e4, 0x1a014, 0x30282},
287	{8, 0x00b03, 0x001e4, 0x1a014, 0x30287},
288	{9, 0x00b03, 0x001e5, 0x1a014, 0x30282},
289	{10, 0x00b03, 0x001e5, 0x1a014, 0x30287},
290	{11, 0x00b03, 0x001e6, 0x1a014, 0x30282},
291	{12, 0x00b03, 0x001e6, 0x1a014, 0x30287},
292	{13, 0x00b03, 0x001e7, 0x1a014, 0x30282},
293	{14, 0x00b03, 0x001e8, 0x1a014, 0x30284},
294
295	{34, 0x00b03, 0x20266, 0x36014, 0x30282},
296	{38, 0x00b03, 0x20267, 0x36014, 0x30284},
297	{42, 0x00b03, 0x20268, 0x36014, 0x30286},
298	{46, 0x00b03, 0x20269, 0x36014, 0x30288},
299
300	{36, 0x00b03, 0x00266, 0x26014, 0x30288},
301	{40, 0x00b03, 0x00268, 0x26014, 0x30280},
302	{44, 0x00b03, 0x00269, 0x26014, 0x30282},
303	{48, 0x00b03, 0x0026a, 0x26014, 0x30284},
304	{52, 0x00b03, 0x0026b, 0x26014, 0x30286},
305	{56, 0x00b03, 0x0026c, 0x26014, 0x30288},
306	{60, 0x00b03, 0x0026e, 0x26014, 0x30280},
307	{64, 0x00b03, 0x0026f, 0x26014, 0x30282},
308
309	{100, 0x00b03, 0x0028a, 0x2e014, 0x30280},
310	{104, 0x00b03, 0x0028b, 0x2e014, 0x30282},
311	{108, 0x00b03, 0x0028c, 0x2e014, 0x30284},
312	{112, 0x00b03, 0x0028d, 0x2e014, 0x30286},
313	{116, 0x00b03, 0x0028e, 0x2e014, 0x30288},
314	{120, 0x00b03, 0x002a0, 0x2e014, 0x30280},
315	{124, 0x00b03, 0x002a1, 0x2e014, 0x30282},
316	{128, 0x00b03, 0x002a2, 0x2e014, 0x30284},
317	{132, 0x00b03, 0x002a3, 0x2e014, 0x30286},
318	{136, 0x00b03, 0x002a4, 0x2e014, 0x30288},
319	{140, 0x00b03, 0x002a6, 0x2e014, 0x30280},
320
321	{149, 0x00b03, 0x002a8, 0x2e014, 0x30287},
322	{153, 0x00b03, 0x002a9, 0x2e014, 0x30289},
323	{157, 0x00b03, 0x002ab, 0x2e014, 0x30281},
324	{161, 0x00b03, 0x002ac, 0x2e014, 0x30283},
325	{165, 0x00b03, 0x002ad, 0x2e014, 0x30285}
326};
327
328static const struct rfprog rum_rf5225[] = {
329	{1, 0x00b33, 0x011e1, 0x1a014, 0x30282},
330	{2, 0x00b33, 0x011e1, 0x1a014, 0x30287},
331	{3, 0x00b33, 0x011e2, 0x1a014, 0x30282},
332	{4, 0x00b33, 0x011e2, 0x1a014, 0x30287},
333	{5, 0x00b33, 0x011e3, 0x1a014, 0x30282},
334	{6, 0x00b33, 0x011e3, 0x1a014, 0x30287},
335	{7, 0x00b33, 0x011e4, 0x1a014, 0x30282},
336	{8, 0x00b33, 0x011e4, 0x1a014, 0x30287},
337	{9, 0x00b33, 0x011e5, 0x1a014, 0x30282},
338	{10, 0x00b33, 0x011e5, 0x1a014, 0x30287},
339	{11, 0x00b33, 0x011e6, 0x1a014, 0x30282},
340	{12, 0x00b33, 0x011e6, 0x1a014, 0x30287},
341	{13, 0x00b33, 0x011e7, 0x1a014, 0x30282},
342	{14, 0x00b33, 0x011e8, 0x1a014, 0x30284},
343
344	{34, 0x00b33, 0x01266, 0x26014, 0x30282},
345	{38, 0x00b33, 0x01267, 0x26014, 0x30284},
346	{42, 0x00b33, 0x01268, 0x26014, 0x30286},
347	{46, 0x00b33, 0x01269, 0x26014, 0x30288},
348
349	{36, 0x00b33, 0x01266, 0x26014, 0x30288},
350	{40, 0x00b33, 0x01268, 0x26014, 0x30280},
351	{44, 0x00b33, 0x01269, 0x26014, 0x30282},
352	{48, 0x00b33, 0x0126a, 0x26014, 0x30284},
353	{52, 0x00b33, 0x0126b, 0x26014, 0x30286},
354	{56, 0x00b33, 0x0126c, 0x26014, 0x30288},
355	{60, 0x00b33, 0x0126e, 0x26014, 0x30280},
356	{64, 0x00b33, 0x0126f, 0x26014, 0x30282},
357
358	{100, 0x00b33, 0x0128a, 0x2e014, 0x30280},
359	{104, 0x00b33, 0x0128b, 0x2e014, 0x30282},
360	{108, 0x00b33, 0x0128c, 0x2e014, 0x30284},
361	{112, 0x00b33, 0x0128d, 0x2e014, 0x30286},
362	{116, 0x00b33, 0x0128e, 0x2e014, 0x30288},
363	{120, 0x00b33, 0x012a0, 0x2e014, 0x30280},
364	{124, 0x00b33, 0x012a1, 0x2e014, 0x30282},
365	{128, 0x00b33, 0x012a2, 0x2e014, 0x30284},
366	{132, 0x00b33, 0x012a3, 0x2e014, 0x30286},
367	{136, 0x00b33, 0x012a4, 0x2e014, 0x30288},
368	{140, 0x00b33, 0x012a6, 0x2e014, 0x30280},
369
370	{149, 0x00b33, 0x012a8, 0x2e014, 0x30287},
371	{153, 0x00b33, 0x012a9, 0x2e014, 0x30289},
372	{157, 0x00b33, 0x012ab, 0x2e014, 0x30281},
373	{161, 0x00b33, 0x012ac, 0x2e014, 0x30283},
374	{165, 0x00b33, 0x012ad, 0x2e014, 0x30285}
375};
376
377static const struct usb2_config rum_config[RUM_N_TRANSFER] = {
378	[0] = {
379		.type = UE_BULK,
380		.endpoint = UE_ADDR_ANY,
381		.direction = UE_DIR_OUT,
382		.mh.bufsize = (MCLBYTES + RT2573_TX_DESC_SIZE + 8),
383		.mh.flags = {.pipe_bof = 1,.force_short_xfer = 1,},
384		.mh.callback = &rum_bulk_write_callback,
385		.mh.timeout = 5000,	/* ms */
386	},
387
388	[1] = {
389		.type = UE_BULK,
390		.endpoint = UE_ADDR_ANY,
391		.direction = UE_DIR_IN,
392		.mh.bufsize = (MCLBYTES + RT2573_RX_DESC_SIZE),
393		.mh.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
394		.mh.callback = &rum_bulk_read_callback,
395	},
396
397	[2] = {
398		.type = UE_CONTROL,
399		.endpoint = 0x00,	/* Control pipe */
400		.direction = UE_DIR_ANY,
401		.mh.bufsize = sizeof(struct usb2_device_request),
402		.mh.callback = &rum_bulk_write_clear_stall_callback,
403		.mh.timeout = 1000,	/* 1 second */
404		.mh.interval = 50,	/* 50ms */
405	},
406
407	[3] = {
408		.type = UE_CONTROL,
409		.endpoint = 0x00,	/* Control pipe */
410		.direction = UE_DIR_ANY,
411		.mh.bufsize = sizeof(struct usb2_device_request),
412		.mh.callback = &rum_bulk_read_clear_stall_callback,
413		.mh.timeout = 1000,	/* 1 second */
414		.mh.interval = 50,	/* 50ms */
415	},
416};
417
418static devclass_t rum_devclass;
419
420static device_method_t rum_methods[] = {
421	DEVMETHOD(device_probe, rum_probe),
422	DEVMETHOD(device_attach, rum_attach),
423	DEVMETHOD(device_detach, rum_detach),
424	{0, 0}
425};
426
427static driver_t rum_driver = {
428	.name = "rum",
429	.methods = rum_methods,
430	.size = sizeof(struct rum_softc),
431};
432
433DRIVER_MODULE(rum, ushub, rum_driver, rum_devclass, NULL, 0);
434MODULE_DEPEND(rum, usb2_wlan, 1, 1, 1);
435MODULE_DEPEND(rum, usb2_core, 1, 1, 1);
436MODULE_DEPEND(rum, wlan, 1, 1, 1);
437MODULE_DEPEND(rum, wlan_amrr, 1, 1, 1);
438
439static int
440rum_probe(device_t dev)
441{
442	struct usb2_attach_arg *uaa = device_get_ivars(dev);
443
444	if (uaa->usb2_mode != USB_MODE_HOST) {
445		return (ENXIO);
446	}
447	if (uaa->info.bConfigIndex != 0) {
448		return (ENXIO);
449	}
450	if (uaa->info.bIfaceIndex != RT2573_IFACE_INDEX) {
451		return (ENXIO);
452	}
453	return (usb2_lookup_id_by_uaa(rum_devs, sizeof(rum_devs), uaa));
454}
455
456static int
457rum_attach(device_t dev)
458{
459	struct usb2_attach_arg *uaa = device_get_ivars(dev);
460	struct rum_softc *sc = device_get_softc(dev);
461	int error;
462	uint8_t iface_index;
463
464	if (sc == NULL) {
465		return (ENOMEM);
466	}
467	device_set_usb2_desc(dev);
468
469	mtx_init(&sc->sc_mtx, "rum lock", MTX_NETWORK_LOCK,
470	    MTX_DEF | MTX_RECURSE);
471
472	snprintf(sc->sc_name, sizeof(sc->sc_name), "%s",
473	    device_get_nameunit(dev));
474
475	sc->sc_udev = uaa->device;
476	sc->sc_unit = device_get_unit(dev);
477
478	usb2_callout_init_mtx(&sc->sc_watchdog,
479	    &sc->sc_mtx, CALLOUT_RETURNUNLOCKED);
480
481	iface_index = RT2573_IFACE_INDEX;
482	error = usb2_transfer_setup(uaa->device, &iface_index,
483	    sc->sc_xfer, rum_config, RUM_N_TRANSFER, sc, &sc->sc_mtx);
484	if (error) {
485		device_printf(dev, "could not allocate USB transfers, "
486		    "err=%s\n", usb2_errstr(error));
487		goto detach;
488	}
489	error = usb2_config_td_setup(&sc->sc_config_td, sc, &sc->sc_mtx,
490	    &rum_end_of_commands,
491	    sizeof(struct usb2_config_td_cc), 24);
492	if (error) {
493		device_printf(dev, "could not setup config "
494		    "thread!\n");
495		goto detach;
496	}
497	mtx_lock(&sc->sc_mtx);
498
499	/* start setup */
500
501	usb2_config_td_queue_command
502	    (&sc->sc_config_td, NULL, &rum_cfg_first_time_setup, 0, 0);
503
504	/* start watchdog (will exit mutex) */
505
506	rum_watchdog(sc);
507
508	return (0);			/* success */
509
510detach:
511	rum_detach(dev);
512	return (ENXIO);			/* failure */
513}
514
515static int
516rum_detach(device_t dev)
517{
518	struct rum_softc *sc = device_get_softc(dev);
519	struct ieee80211com *ic;
520	struct ifnet *ifp;
521
522	usb2_config_td_drain(&sc->sc_config_td);
523
524	mtx_lock(&sc->sc_mtx);
525
526	usb2_callout_stop(&sc->sc_watchdog);
527
528	rum_cfg_pre_stop(sc, NULL, 0);
529
530	ifp = sc->sc_ifp;
531	ic = ifp->if_l2com;
532
533	mtx_unlock(&sc->sc_mtx);
534
535	/* stop all USB transfers first */
536	usb2_transfer_unsetup(sc->sc_xfer, RUM_N_TRANSFER);
537
538	/* get rid of any late children */
539	bus_generic_detach(dev);
540
541	if (ifp) {
542		bpfdetach(ifp);
543		ieee80211_ifdetach(ic);
544		if_free(ifp);
545	}
546	usb2_config_td_unsetup(&sc->sc_config_td);
547
548	usb2_callout_drain(&sc->sc_watchdog);
549
550	mtx_destroy(&sc->sc_mtx);
551
552	return (0);
553}
554
555static void
556rum_cfg_do_request(struct rum_softc *sc, struct usb2_device_request *req,
557    void *data)
558{
559	uint16_t length;
560	usb2_error_t err;
561
562repeat:
563
564	if (usb2_config_td_is_gone(&sc->sc_config_td)) {
565		goto error;
566	}
567	err = usb2_do_request_flags
568	    (sc->sc_udev, &sc->sc_mtx, req, data, 0, NULL, 1000);
569
570	if (err) {
571
572		DPRINTF("device request failed, err=%s "
573		    "(ignored)\n", usb2_errstr(err));
574
575		/* wait a little before next try */
576		if (usb2_config_td_sleep(&sc->sc_config_td, hz / 4)) {
577			goto error;
578		}
579		/* try until we are detached */
580		goto repeat;
581
582error:
583		/* the device has been detached */
584		length = UGETW(req->wLength);
585
586		if ((req->bmRequestType & UT_READ) && length) {
587			bzero(data, length);
588		}
589	}
590	return;
591}
592
593static void
594rum_cfg_eeprom_read(struct rum_softc *sc, uint16_t addr, void *buf, uint16_t len)
595{
596	struct usb2_device_request req;
597
598	req.bmRequestType = UT_READ_VENDOR_DEVICE;
599	req.bRequest = RT2573_READ_EEPROM;
600	USETW(req.wValue, 0);
601	USETW(req.wIndex, addr);
602	USETW(req.wLength, len);
603
604	rum_cfg_do_request(sc, &req, buf);
605	return;
606}
607
608static uint16_t
609rum_cfg_eeprom_read_2(struct rum_softc *sc, uint16_t addr)
610{
611	uint16_t tmp;
612
613	rum_cfg_eeprom_read(sc, addr, &tmp, sizeof(tmp));
614	return (le16toh(tmp));
615}
616
617static uint32_t
618rum_cfg_read(struct rum_softc *sc, uint16_t reg)
619{
620	uint32_t val;
621
622	rum_cfg_read_multi(sc, reg, &val, sizeof(val));
623	return (le32toh(val));
624}
625
626static void
627rum_cfg_read_multi(struct rum_softc *sc, uint16_t reg, void *buf, uint16_t len)
628{
629	struct usb2_device_request req;
630
631	req.bmRequestType = UT_READ_VENDOR_DEVICE;
632	req.bRequest = RT2573_READ_MULTI_MAC;
633	USETW(req.wValue, 0);
634	USETW(req.wIndex, reg);
635	USETW(req.wLength, len);
636
637	rum_cfg_do_request(sc, &req, buf);
638	return;
639}
640
641static void
642rum_cfg_write(struct rum_softc *sc, uint16_t reg, uint32_t val)
643{
644	uint32_t tmp = htole32(val);
645
646	rum_cfg_write_multi(sc, reg, &tmp, sizeof(tmp));
647	return;
648}
649
650static void
651rum_cfg_write_multi(struct rum_softc *sc, uint16_t reg, void *buf, uint16_t len)
652{
653	struct usb2_device_request req;
654
655	req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
656	req.bRequest = RT2573_WRITE_MULTI_MAC;
657	USETW(req.wValue, 0);
658	USETW(req.wIndex, reg);
659	USETW(req.wLength, len);
660
661	rum_cfg_do_request(sc, &req, buf);
662	return;
663}
664
665static uint32_t
666rum_cfg_bbp_disbusy(struct rum_softc *sc)
667{
668	uint32_t tmp;
669	uint8_t to;
670
671	for (to = 0;; to++) {
672		if (to < 100) {
673			tmp = rum_cfg_read(sc, RT2573_PHY_CSR3);
674
675			if ((tmp & RT2573_BBP_BUSY) == 0) {
676				return (tmp);
677			}
678			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
679				break;
680			}
681		} else {
682			break;
683		}
684	}
685	DPRINTF("could not disbusy BBP\n");
686	return (RT2573_BBP_BUSY);	/* failure */
687}
688
689static void
690rum_cfg_bbp_write(struct rum_softc *sc, uint8_t reg, uint8_t val)
691{
692	uint32_t tmp;
693
694	if (rum_cfg_bbp_disbusy(sc) & RT2573_BBP_BUSY) {
695		return;
696	}
697	tmp = RT2573_BBP_BUSY | ((reg & 0x7f) << 8) | val;
698	rum_cfg_write(sc, RT2573_PHY_CSR3, tmp);
699	return;
700}
701
702static uint8_t
703rum_cfg_bbp_read(struct rum_softc *sc, uint8_t reg)
704{
705	uint32_t val;
706
707	if (rum_cfg_bbp_disbusy(sc) & RT2573_BBP_BUSY) {
708		return (0);
709	}
710	val = RT2573_BBP_BUSY | RT2573_BBP_READ | (reg << 8);
711	rum_cfg_write(sc, RT2573_PHY_CSR3, val);
712
713	val = rum_cfg_bbp_disbusy(sc);
714	return (val & 0xff);
715}
716
717static void
718rum_cfg_rf_write(struct rum_softc *sc, uint8_t reg, uint32_t val)
719{
720	uint32_t tmp;
721	uint8_t to;
722
723	reg &= 3;
724
725	for (to = 0;; to++) {
726		if (to < 100) {
727			tmp = rum_cfg_read(sc, RT2573_PHY_CSR4);
728			if (!(tmp & RT2573_RF_BUSY)) {
729				break;
730			}
731			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
732				return;
733			}
734		} else {
735			DPRINTF("could not write to RF\n");
736			return;
737		}
738	}
739
740	tmp = RT2573_RF_BUSY | RT2573_RF_20BIT | ((val & 0xfffff) << 2) | reg;
741	rum_cfg_write(sc, RT2573_PHY_CSR4, tmp);
742
743	DPRINTFN(16, "RF R[%u] <- 0x%05x\n", reg, val & 0xfffff);
744	return;
745}
746
747static void
748rum_cfg_first_time_setup(struct rum_softc *sc,
749    struct usb2_config_td_cc *cc, uint16_t refcount)
750{
751	struct ieee80211com *ic;
752	struct ifnet *ifp;
753	uint32_t tmp;
754	uint16_t i;
755	uint8_t bands;
756
757	/* setup RX tap header */
758	sc->sc_rxtap_len = sizeof(sc->sc_rxtap);
759	sc->sc_rxtap.wr_ihdr.it_len = htole16(sc->sc_rxtap_len);
760	sc->sc_rxtap.wr_ihdr.it_present = htole32(RT2573_RX_RADIOTAP_PRESENT);
761
762	/* setup TX tap header */
763	sc->sc_txtap_len = sizeof(sc->sc_txtap);
764	sc->sc_txtap.wt_ihdr.it_len = htole16(sc->sc_txtap_len);
765	sc->sc_txtap.wt_ihdr.it_present = htole32(RT2573_TX_RADIOTAP_PRESENT);
766
767	/* retrieve RT2573 rev. no */
768	for (i = 0; i < 100; i++) {
769
770		tmp = rum_cfg_read(sc, RT2573_MAC_CSR0);
771		if (tmp != 0) {
772			break;
773		}
774		/* wait a little */
775		if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
776			/* device detached */
777			goto done;
778		}
779	}
780
781	if (tmp == 0) {
782		DPRINTF("chip is maybe not ready\n");
783	}
784	/* retrieve MAC address and various other things from EEPROM */
785	rum_cfg_read_eeprom(sc);
786
787	printf("%s: MAC/BBP RT2573 (rev 0x%05x), RF %s\n",
788	    sc->sc_name, tmp, rum_get_rf(sc->sc_rf_rev));
789
790	rum_cfg_load_microcode(sc, rt2573_ucode, sizeof(rt2573_ucode));
791
792	mtx_unlock(&sc->sc_mtx);
793
794	ifp = if_alloc(IFT_IEEE80211);
795
796	mtx_lock(&sc->sc_mtx);
797
798	if (ifp == NULL) {
799		DPRINTFN(0, "could not if_alloc()!\n");
800		goto done;
801	}
802	sc->sc_evilhack = ifp;
803	sc->sc_ifp = ifp;
804	ic = ifp->if_l2com;
805
806	ifp->if_softc = sc;
807	if_initname(ifp, "rum", sc->sc_unit);
808	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
809	ifp->if_init = &rum_init_cb;
810	ifp->if_ioctl = &rum_ioctl_cb;
811	ifp->if_start = &rum_start_cb;
812	ifp->if_watchdog = NULL;
813	IFQ_SET_MAXLEN(&ifp->if_snd, IFQ_MAXLEN);
814	ifp->if_snd.ifq_drv_maxlen = IFQ_MAXLEN;
815	IFQ_SET_READY(&ifp->if_snd);
816
817	bcopy(sc->sc_myaddr, ic->ic_myaddr, sizeof(ic->ic_myaddr));
818
819	ic->ic_ifp = ifp;
820	ic->ic_phytype = IEEE80211_T_OFDM;	/* not only, but not used */
821	ic->ic_opmode = IEEE80211_M_STA;
822
823	/* set device capabilities */
824	ic->ic_caps =
825	    IEEE80211_C_STA		/* station mode supported */
826	    | IEEE80211_C_IBSS		/* IBSS mode supported */
827	    | IEEE80211_C_MONITOR	/* monitor mode supported */
828	    | IEEE80211_C_HOSTAP	/* HostAp mode supported */
829	    | IEEE80211_C_TXPMGT	/* tx power management */
830	    | IEEE80211_C_SHPREAMBLE	/* short preamble supported */
831	    | IEEE80211_C_SHSLOT	/* short slot time supported */
832	    | IEEE80211_C_BGSCAN	/* bg scanning supported */
833	    | IEEE80211_C_WPA		/* 802.11i */
834	    ;
835
836	bands = 0;
837	setbit(&bands, IEEE80211_MODE_11B);
838	setbit(&bands, IEEE80211_MODE_11G);
839	ieee80211_init_channels(ic, NULL, &bands);
840
841	if ((sc->sc_rf_rev == RT2573_RF_5225) ||
842	    (sc->sc_rf_rev == RT2573_RF_5226)) {
843
844		struct ieee80211_channel *c;
845
846		/* set supported .11a channels */
847		for (i = 34; i <= 46; i += 4) {
848			c = ic->ic_channels + (ic->ic_nchans++);
849			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
850			c->ic_flags = IEEE80211_CHAN_A;
851			c->ic_ieee = i;
852		}
853		for (i = 36; i <= 64; i += 4) {
854			c = ic->ic_channels + (ic->ic_nchans++);
855			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
856			c->ic_flags = IEEE80211_CHAN_A;
857			c->ic_ieee = i;
858		}
859		for (i = 100; i <= 140; i += 4) {
860			c = ic->ic_channels + (ic->ic_nchans++);
861			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
862			c->ic_flags = IEEE80211_CHAN_A;
863			c->ic_ieee = i;
864		}
865		for (i = 149; i <= 165; i += 4) {
866			c = ic->ic_channels + (ic->ic_nchans++);
867			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
868			c->ic_flags = IEEE80211_CHAN_A;
869			c->ic_ieee = i;
870		}
871	}
872	mtx_unlock(&sc->sc_mtx);
873
874	ieee80211_ifattach(ic);
875
876	mtx_lock(&sc->sc_mtx);
877
878	ic->ic_newassoc = &rum_newassoc;
879	ic->ic_raw_xmit = &rum_raw_xmit_cb;
880	ic->ic_node_alloc = &rum_node_alloc;
881	ic->ic_update_mcast = &rum_update_mcast_cb;
882	ic->ic_update_promisc = &rum_update_promisc_cb;
883	ic->ic_scan_start = &rum_scan_start_cb;
884	ic->ic_scan_end = &rum_scan_end_cb;
885	ic->ic_set_channel = &rum_set_channel_cb;
886	ic->ic_vap_create = &rum_vap_create;
887	ic->ic_vap_delete = &rum_vap_delete;
888
889	sc->sc_rates = ieee80211_get_ratetable(ic->ic_curchan);
890
891	mtx_unlock(&sc->sc_mtx);
892
893	bpfattach(ifp, DLT_IEEE802_11_RADIO,
894	    sizeof(struct ieee80211_frame) + sizeof(sc->sc_txtap));
895
896	if (bootverbose) {
897		ieee80211_announce(ic);
898	}
899	mtx_lock(&sc->sc_mtx);
900done:
901	return;
902}
903
904static void
905rum_end_of_commands(struct rum_softc *sc)
906{
907	sc->sc_flags &= ~RUM_FLAG_WAIT_COMMAND;
908
909	/* start write transfer, if not started */
910	usb2_transfer_start(sc->sc_xfer[0]);
911	return;
912}
913
914static void
915rum_config_copy_chan(struct rum_config_copy_chan *cc,
916    struct ieee80211com *ic, struct ieee80211_channel *c)
917{
918	if (!c)
919		return;
920	cc->chan_to_ieee =
921	    ieee80211_chan2ieee(ic, c);
922	if (c != IEEE80211_CHAN_ANYC) {
923		cc->chan_to_mode =
924		    ieee80211_chan2mode(c);
925		if (IEEE80211_IS_CHAN_B(c))
926			cc->chan_is_b = 1;
927		if (IEEE80211_IS_CHAN_A(c))
928			cc->chan_is_a = 1;
929		if (IEEE80211_IS_CHAN_2GHZ(c))
930			cc->chan_is_2ghz = 1;
931		if (IEEE80211_IS_CHAN_5GHZ(c))
932			cc->chan_is_5ghz = 1;
933		if (IEEE80211_IS_CHAN_ANYG(c))
934			cc->chan_is_g = 1;
935	}
936	return;
937}
938
939static void
940rum_config_copy(struct rum_softc *sc,
941    struct usb2_config_td_cc *cc, uint16_t refcount)
942{
943	struct ifnet *ifp;
944	struct ieee80211com *ic;
945	struct ieee80211_node *ni;
946	struct ieee80211vap *vap;
947	const struct ieee80211_txparam *tp;
948
949	bzero(cc, sizeof(*cc));
950
951	ifp = sc->sc_ifp;
952	if (ifp) {
953		cc->if_flags = ifp->if_flags;
954		bcopy(ifp->if_broadcastaddr, cc->if_broadcastaddr,
955		    sizeof(cc->if_broadcastaddr));
956
957		ic = ifp->if_l2com;
958		if (ic) {
959			rum_config_copy_chan(&cc->ic_curchan, ic, ic->ic_curchan);
960			rum_config_copy_chan(&cc->ic_bsschan, ic, ic->ic_bsschan);
961			vap = TAILQ_FIRST(&ic->ic_vaps);
962			if (vap) {
963				ni = vap->iv_bss;
964				if (ni) {
965					cc->iv_bss.ni_intval = ni->ni_intval;
966					bcopy(ni->ni_bssid, cc->iv_bss.ni_bssid,
967					    sizeof(cc->iv_bss.ni_bssid));
968				}
969				tp = vap->iv_txparms + cc->ic_bsschan.chan_to_mode;
970				if (tp->ucastrate == IEEE80211_FIXED_RATE_NONE) {
971					cc->iv_bss.fixed_rate_none = 1;
972				}
973			}
974			cc->ic_opmode = ic->ic_opmode;
975			cc->ic_flags = ic->ic_flags;
976			cc->ic_txpowlimit = ic->ic_txpowlimit;
977			cc->ic_curmode = ic->ic_curmode;
978
979			bcopy(ic->ic_myaddr, cc->ic_myaddr,
980			    sizeof(cc->ic_myaddr));
981		}
982	}
983	sc->sc_flags |= RUM_FLAG_WAIT_COMMAND;
984	return;
985}
986
987static const char *
988rum_get_rf(uint32_t rev)
989{
990	;				/* indent fix */
991	switch (rev) {
992	case RT2573_RF_2527:
993		return "RT2527 (MIMO XR)";
994	case RT2573_RF_2528:
995		return "RT2528";
996	case RT2573_RF_5225:
997		return "RT5225 (MIMO XR)";
998	case RT2573_RF_5226:
999		return "RT5226";
1000	default:
1001		return "unknown";
1002	}
1003}
1004
1005static void
1006rum_bulk_read_callback(struct usb2_xfer *xfer)
1007{
1008	struct rum_softc *sc = xfer->priv_sc;
1009	struct ifnet *ifp = sc->sc_ifp;
1010	struct ieee80211com *ic = ifp->if_l2com;
1011	struct ieee80211_node *ni;
1012
1013	struct mbuf *m = NULL;
1014	uint32_t flags;
1015	uint32_t max_len;
1016	uint8_t rssi = 0;
1017
1018	switch (USB_GET_STATE(xfer)) {
1019	case USB_ST_TRANSFERRED:
1020
1021		DPRINTFN(15, "rx done, actlen=%d\n", xfer->actlen);
1022
1023		if (xfer->actlen < (RT2573_RX_DESC_SIZE + IEEE80211_MIN_LEN)) {
1024			DPRINTF("too short transfer, "
1025			    "%d bytes\n", xfer->actlen);
1026			ifp->if_ierrors++;
1027			goto tr_setup;
1028		}
1029		usb2_copy_out(xfer->frbuffers, 0,
1030		    &sc->sc_rx_desc, RT2573_RX_DESC_SIZE);
1031
1032		flags = le32toh(sc->sc_rx_desc.flags);
1033
1034		if (flags & RT2573_RX_CRC_ERROR) {
1035			/*
1036		         * This should not happen since we did not
1037		         * request to receive those frames when we
1038		         * filled RAL_TXRX_CSR2:
1039		         */
1040			DPRINTFN(6, "PHY or CRC error\n");
1041			ifp->if_ierrors++;
1042			goto tr_setup;
1043		}
1044		m = m_getcl(M_DONTWAIT, MT_DATA, M_PKTHDR);
1045
1046		if (m == NULL) {
1047			DPRINTF("could not allocate mbuf\n");
1048			ifp->if_ierrors++;
1049			goto tr_setup;
1050		}
1051		max_len = (xfer->actlen - RT2573_RX_DESC_SIZE);
1052
1053		usb2_copy_out(xfer->frbuffers, RT2573_RX_DESC_SIZE,
1054		    m->m_data, max_len);
1055
1056		/* finalize mbuf */
1057		m->m_pkthdr.rcvif = ifp;
1058		m->m_pkthdr.len = m->m_len = (flags >> 16) & 0xfff;
1059
1060		if (m->m_len > max_len) {
1061			DPRINTF("invalid length in RX "
1062			    "descriptor, %u bytes, received %u bytes\n",
1063			    m->m_len, max_len);
1064			ifp->if_ierrors++;
1065			m_freem(m);
1066			m = NULL;
1067			goto tr_setup;
1068		}
1069		rssi = rum_get_rssi(sc, sc->sc_rx_desc.rssi);
1070
1071		DPRINTF("real length=%d bytes, rssi=%d\n", m->m_len, rssi);
1072
1073		if (bpf_peers_present(ifp->if_bpf)) {
1074			struct rum_rx_radiotap_header *tap = &sc->sc_rxtap;
1075
1076			tap->wr_flags = IEEE80211_RADIOTAP_F_FCS;
1077			tap->wr_rate = ieee80211_plcp2rate(sc->sc_rx_desc.rate,
1078			    (sc->sc_rx_desc.flags & htole32(RT2573_RX_OFDM)) ?
1079			    IEEE80211_T_OFDM : IEEE80211_T_CCK);
1080			tap->wr_chan_freq = htole16(ic->ic_curchan->ic_freq);
1081			tap->wr_chan_flags = htole16(ic->ic_curchan->ic_flags);
1082			tap->wr_antenna = sc->sc_rx_ant;
1083			tap->wr_antsignal = rssi;
1084
1085			bpf_mtap2(ifp->if_bpf, tap, sc->sc_rxtap_len, m);
1086		}
1087	case USB_ST_SETUP:
1088tr_setup:
1089
1090		if (sc->sc_flags & RUM_FLAG_READ_STALL) {
1091			usb2_transfer_start(sc->sc_xfer[3]);
1092		} else {
1093			xfer->frlengths[0] = xfer->max_data_length;
1094			usb2_start_hardware(xfer);
1095		}
1096
1097		/*
1098		 * At the end of a USB callback it is always safe to unlock
1099		 * the private mutex of a device! That is why we do the
1100		 * "ieee80211_input" here, and not some lines up!
1101		 */
1102		if (m) {
1103			mtx_unlock(&sc->sc_mtx);
1104
1105			ni = ieee80211_find_rxnode(ic, mtod(m, struct ieee80211_frame_min *));
1106			if (ni != NULL) {
1107				if (ieee80211_input(ni, m, rssi, RT2573_NOISE_FLOOR, 0)) {
1108					/* ignore */
1109				}
1110				/* node is no longer needed */
1111				ieee80211_free_node(ni);
1112			} else {
1113				if (ieee80211_input_all(ic, m, rssi, RT2573_NOISE_FLOOR, 0)) {
1114					/* ignore */
1115				}
1116			}
1117
1118			mtx_lock(&sc->sc_mtx);
1119		}
1120		return;
1121
1122	default:			/* Error */
1123		if (xfer->error != USB_ERR_CANCELLED) {
1124			/* try to clear stall first */
1125			sc->sc_flags |= RUM_FLAG_READ_STALL;
1126			usb2_transfer_start(sc->sc_xfer[3]);
1127		}
1128		return;
1129
1130	}
1131}
1132
1133static void
1134rum_bulk_read_clear_stall_callback(struct usb2_xfer *xfer)
1135{
1136	struct rum_softc *sc = xfer->priv_sc;
1137	struct usb2_xfer *xfer_other = sc->sc_xfer[1];
1138
1139	if (usb2_clear_stall_callback(xfer, xfer_other)) {
1140		DPRINTF("stall cleared\n");
1141		sc->sc_flags &= ~RUM_FLAG_READ_STALL;
1142		usb2_transfer_start(xfer_other);
1143	}
1144	return;
1145}
1146
1147static uint8_t
1148rum_plcp_signal(uint16_t rate)
1149{
1150	;				/* indent fix */
1151	switch (rate) {
1152		/* CCK rates (NB: not IEEE std, device-specific) */
1153	case 2:
1154		return (0x0);
1155	case 4:
1156		return (0x1);
1157	case 11:
1158		return (0x2);
1159	case 22:
1160		return (0x3);
1161
1162		/* OFDM rates (cf IEEE Std 802.11a-1999, pp. 14 Table 80) */
1163	case 12:
1164		return (0xb);
1165	case 18:
1166		return (0xf);
1167	case 24:
1168		return (0xa);
1169	case 36:
1170		return (0xe);
1171	case 48:
1172		return (0x9);
1173	case 72:
1174		return (0xd);
1175	case 96:
1176		return (0x8);
1177	case 108:
1178		return (0xc);
1179
1180		/* XXX unsupported/unknown rate */
1181	default:
1182		return (0xff);
1183	}
1184}
1185
1186/*
1187 * We assume that "m->m_pkthdr.rcvif" is pointing to the "ni" that
1188 * should be freed, when "rum_setup_desc_and_tx" is called.
1189 */
1190
1191static void
1192rum_setup_desc_and_tx(struct rum_softc *sc, struct mbuf *m, uint32_t flags,
1193    uint16_t xflags, uint16_t rate)
1194{
1195	struct ifnet *ifp = sc->sc_ifp;
1196	struct ieee80211com *ic = ifp->if_l2com;
1197	struct mbuf *mm;
1198	enum ieee80211_phytype phytype;
1199	uint16_t plcp_length;
1200	uint16_t len;
1201	uint8_t remainder;
1202	uint8_t is_beacon;
1203
1204	if (xflags & RT2573_TX_BEACON) {
1205		xflags &= ~RT2573_TX_BEACON;
1206		is_beacon = 1;
1207	} else {
1208		is_beacon = 0;
1209	}
1210
1211	if (sc->sc_tx_queue.ifq_len >= IFQ_MAXLEN) {
1212		/* free packet */
1213		rum_tx_freem(m);
1214		ifp->if_oerrors++;
1215		return;
1216	}
1217	if (!((sc->sc_flags & RUM_FLAG_LL_READY) &&
1218	    (sc->sc_flags & RUM_FLAG_HL_READY))) {
1219		/* free packet */
1220		rum_tx_freem(m);
1221		ifp->if_oerrors++;
1222		return;
1223	}
1224	if (rate < 2) {
1225		DPRINTF("rate < 2!\n");
1226
1227		/* avoid division by zero */
1228		rate = 2;
1229	}
1230	ic->ic_lastdata = ticks;
1231	if (bpf_peers_present(ifp->if_bpf)) {
1232		struct rum_tx_radiotap_header *tap = &sc->sc_txtap;
1233
1234		tap->wt_flags = 0;
1235		tap->wt_rate = rate;
1236		tap->wt_chan_freq = htole16(ic->ic_curchan->ic_freq);
1237		tap->wt_chan_flags = htole16(ic->ic_curchan->ic_flags);
1238		tap->wt_antenna = sc->sc_tx_ant;
1239
1240		bpf_mtap2(ifp->if_bpf, tap, sc->sc_txtap_len, m);
1241	}
1242	len = m->m_pkthdr.len;
1243
1244	flags |= RT2573_TX_VALID;
1245	flags |= (len << 16);
1246
1247	sc->sc_tx_desc.flags = htole32(flags);
1248	sc->sc_tx_desc.xflags = htole16(xflags);
1249
1250	sc->sc_tx_desc.wme = htole16(RT2573_QID(0) | RT2573_AIFSN(2) |
1251	    RT2573_LOGCWMIN(4) | RT2573_LOGCWMAX(10));
1252
1253	/* setup PLCP fields */
1254	sc->sc_tx_desc.plcp_signal = rum_plcp_signal(rate);
1255	sc->sc_tx_desc.plcp_service = 4;
1256
1257	len += IEEE80211_CRC_LEN;
1258
1259	phytype = ieee80211_rate2phytype(sc->sc_rates, rate);
1260
1261	if (phytype == IEEE80211_T_OFDM) {
1262		sc->sc_tx_desc.flags |= htole32(RT2573_TX_OFDM);
1263
1264		plcp_length = (len & 0xfff);
1265		sc->sc_tx_desc.plcp_length_hi = plcp_length >> 6;
1266		sc->sc_tx_desc.plcp_length_lo = plcp_length & 0x3f;
1267	} else {
1268		plcp_length = ((16 * len) + rate - 1) / rate;
1269		if (rate == 22) {
1270			remainder = (16 * len) % 22;
1271			if ((remainder != 0) && (remainder < 7)) {
1272				sc->sc_tx_desc.plcp_service |=
1273				    RT2573_PLCP_LENGEXT;
1274			}
1275		}
1276		sc->sc_tx_desc.plcp_length_hi = plcp_length >> 8;
1277		sc->sc_tx_desc.plcp_length_lo = plcp_length & 0xff;
1278
1279		if ((rate != 2) && (ic->ic_flags & IEEE80211_F_SHPREAMBLE)) {
1280			sc->sc_tx_desc.plcp_signal |= 0x08;
1281		}
1282	}
1283
1284	if (sizeof(sc->sc_tx_desc) > MHLEN) {
1285		DPRINTF("No room for header structure!\n");
1286		rum_tx_freem(m);
1287		return;
1288	}
1289	mm = m_gethdr(M_NOWAIT, MT_DATA);
1290	if (mm == NULL) {
1291		DPRINTF("Could not allocate header mbuf!\n");
1292		rum_tx_freem(m);
1293		return;
1294	}
1295	bcopy(&sc->sc_tx_desc, mm->m_data, sizeof(sc->sc_tx_desc));
1296	mm->m_len = sizeof(sc->sc_tx_desc);
1297	mm->m_next = m;
1298	mm->m_pkthdr.len = mm->m_len + m->m_pkthdr.len;
1299	mm->m_pkthdr.rcvif = NULL;
1300
1301	if (is_beacon) {
1302
1303		if (mm->m_pkthdr.len > sizeof(sc->sc_beacon_buf)) {
1304			DPRINTFN(0, "Truncating beacon"
1305			    ", %u bytes!\n", mm->m_pkthdr.len);
1306			mm->m_pkthdr.len = sizeof(sc->sc_beacon_buf);
1307		}
1308		m_copydata(mm, 0, mm->m_pkthdr.len, sc->sc_beacon_buf);
1309
1310		/* copy the first 24 bytes of Tx descriptor into NIC memory */
1311		rum_cfg_write_multi(sc, RT2573_HW_BEACON_BASE0,
1312		    sc->sc_beacon_buf, mm->m_pkthdr.len);
1313		rum_tx_freem(mm);
1314		return;
1315	}
1316	/* start write transfer, if not started */
1317	_IF_ENQUEUE(&sc->sc_tx_queue, mm);
1318
1319	usb2_transfer_start(sc->sc_xfer[0]);
1320	return;
1321}
1322
1323static void
1324rum_bulk_write_callback(struct usb2_xfer *xfer)
1325{
1326	struct rum_softc *sc = xfer->priv_sc;
1327	struct ifnet *ifp = sc->sc_ifp;
1328	struct mbuf *m;
1329	uint16_t temp_len;
1330	uint8_t align;
1331
1332	switch (USB_GET_STATE(xfer)) {
1333	case USB_ST_TRANSFERRED:
1334		DPRINTFN(11, "transfer complete\n");
1335
1336		ifp->if_opackets++;
1337
1338	case USB_ST_SETUP:
1339		if (sc->sc_flags & RUM_FLAG_WRITE_STALL) {
1340			usb2_transfer_start(sc->sc_xfer[2]);
1341			break;
1342		}
1343		if (sc->sc_flags & RUM_FLAG_WAIT_COMMAND) {
1344			/*
1345			 * don't send anything while a command is pending !
1346			 */
1347			break;
1348		}
1349		rum_fill_write_queue(sc);
1350
1351		_IF_DEQUEUE(&sc->sc_tx_queue, m);
1352
1353		if (m) {
1354
1355			if (m->m_pkthdr.len > (MCLBYTES + RT2573_TX_DESC_SIZE)) {
1356				DPRINTFN(0, "data overflow, %u bytes\n",
1357				    m->m_pkthdr.len);
1358				m->m_pkthdr.len = (MCLBYTES + RT2573_TX_DESC_SIZE);
1359			}
1360			usb2_m_copy_in(xfer->frbuffers, 0,
1361			    m, 0, m->m_pkthdr.len);
1362
1363			/* compute transfer length */
1364			temp_len = m->m_pkthdr.len;
1365
1366			/* make transfer length 32-bit aligned */
1367			align = (-(temp_len)) & 3;
1368
1369			/* check if we need to add four extra bytes */
1370			if (((temp_len + align) % 64) == 0) {
1371				align += 4;
1372			}
1373			/* check if we need to align length */
1374			if (align != 0) {
1375				/* zero the extra bytes */
1376				usb2_bzero(xfer->frbuffers, temp_len, align);
1377				temp_len += align;
1378			}
1379			DPRINTFN(11, "sending frame len=%u ferlen=%u\n",
1380			    m->m_pkthdr.len, temp_len);
1381
1382			xfer->frlengths[0] = temp_len;
1383			usb2_start_hardware(xfer);
1384
1385			/* free mbuf and node */
1386			rum_tx_freem(m);
1387
1388		}
1389		break;
1390
1391	default:			/* Error */
1392		DPRINTFN(11, "transfer error, %s\n",
1393		    usb2_errstr(xfer->error));
1394
1395		if (xfer->error != USB_ERR_CANCELLED) {
1396			/* try to clear stall first */
1397			sc->sc_flags |= RUM_FLAG_WRITE_STALL;
1398			usb2_transfer_start(sc->sc_xfer[2]);
1399		}
1400		ifp->if_oerrors++;
1401		break;
1402	}
1403	return;
1404}
1405
1406static void
1407rum_bulk_write_clear_stall_callback(struct usb2_xfer *xfer)
1408{
1409	struct rum_softc *sc = xfer->priv_sc;
1410	struct usb2_xfer *xfer_other = sc->sc_xfer[0];
1411
1412	if (usb2_clear_stall_callback(xfer, xfer_other)) {
1413		DPRINTF("stall cleared\n");
1414		sc->sc_flags &= ~RUM_FLAG_WRITE_STALL;
1415		usb2_transfer_start(xfer_other);
1416	}
1417	return;
1418}
1419
1420static void
1421rum_watchdog(void *arg)
1422{
1423	struct rum_softc *sc = arg;
1424
1425	mtx_assert(&sc->sc_mtx, MA_OWNED);
1426
1427	if (sc->sc_amrr_timer) {
1428		usb2_config_td_queue_command
1429		    (&sc->sc_config_td, NULL,
1430		    &rum_cfg_amrr_timeout, 0, 0);
1431	}
1432	usb2_callout_reset(&sc->sc_watchdog,
1433	    hz, &rum_watchdog, sc);
1434
1435	mtx_unlock(&sc->sc_mtx);
1436
1437	return;
1438}
1439
1440static void
1441rum_init_cb(void *arg)
1442{
1443	struct rum_softc *sc = arg;
1444
1445	mtx_lock(&sc->sc_mtx);
1446	usb2_config_td_queue_command
1447	    (&sc->sc_config_td, &rum_cfg_pre_init,
1448	    &rum_cfg_init, 0, 0);
1449	mtx_unlock(&sc->sc_mtx);
1450
1451	return;
1452}
1453
1454static int
1455rum_ioctl_cb(struct ifnet *ifp, u_long cmd, caddr_t data)
1456{
1457	struct rum_softc *sc = ifp->if_softc;
1458	struct ieee80211com *ic = ifp->if_l2com;
1459	int error;
1460
1461	switch (cmd) {
1462	case SIOCSIFFLAGS:
1463		mtx_lock(&sc->sc_mtx);
1464		if (ifp->if_flags & IFF_UP) {
1465			if (!(ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1466				usb2_config_td_queue_command
1467				    (&sc->sc_config_td, &rum_cfg_pre_init,
1468				    &rum_cfg_init, 0, 0);
1469			}
1470		} else {
1471			if (ifp->if_drv_flags & IFF_DRV_RUNNING) {
1472				usb2_config_td_queue_command
1473				    (&sc->sc_config_td, &rum_cfg_pre_stop,
1474				    &rum_cfg_stop, 0, 0);
1475			}
1476		}
1477		mtx_unlock(&sc->sc_mtx);
1478		error = 0;
1479		break;
1480
1481	case SIOCGIFMEDIA:
1482	case SIOCSIFMEDIA:
1483		error = ifmedia_ioctl(ifp, (void *)data, &ic->ic_media, cmd);
1484		break;
1485
1486	default:
1487		error = ether_ioctl(ifp, cmd, data);
1488	}
1489	return (error);
1490}
1491
1492static void
1493rum_start_cb(struct ifnet *ifp)
1494{
1495	struct rum_softc *sc = ifp->if_softc;
1496
1497	mtx_lock(&sc->sc_mtx);
1498	/* start write transfer, if not started */
1499	usb2_transfer_start(sc->sc_xfer[0]);
1500	mtx_unlock(&sc->sc_mtx);
1501
1502	return;
1503}
1504
1505static void
1506rum_cfg_newstate(struct rum_softc *sc,
1507    struct usb2_config_td_cc *cc, uint16_t refcount)
1508{
1509	struct ifnet *ifp = sc->sc_ifp;
1510	struct ieee80211com *ic = ifp->if_l2com;
1511	struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps);
1512	struct rum_vap *uvp = RUM_VAP(vap);
1513	enum ieee80211_state ostate;
1514	enum ieee80211_state nstate;
1515	int arg;
1516
1517	ostate = vap->iv_state;
1518	nstate = sc->sc_ns_state;
1519	arg = sc->sc_ns_arg;
1520
1521	if (ostate == IEEE80211_S_INIT) {
1522		/* We are leaving INIT. TSF sync should be off. */
1523		rum_cfg_disable_tsf_sync(sc);
1524	}
1525	switch (nstate) {
1526	case IEEE80211_S_INIT:
1527		break;
1528
1529	case IEEE80211_S_RUN:
1530		rum_cfg_set_run(sc, cc);
1531		break;
1532
1533	default:
1534		break;
1535	}
1536
1537	mtx_unlock(&sc->sc_mtx);
1538	IEEE80211_LOCK(ic);
1539	uvp->newstate(vap, nstate, arg);
1540	if (vap->iv_newstate_cb != NULL)
1541		vap->iv_newstate_cb(vap, nstate, arg);
1542	IEEE80211_UNLOCK(ic);
1543	mtx_lock(&sc->sc_mtx);
1544	return;
1545}
1546
1547static int
1548rum_newstate_cb(struct ieee80211vap *vap, enum ieee80211_state nstate, int arg)
1549{
1550	struct rum_vap *uvp = RUM_VAP(vap);
1551	struct ieee80211com *ic = vap->iv_ic;
1552	struct rum_softc *sc = ic->ic_ifp->if_softc;
1553
1554	DPRINTF("setting new state: %d\n", nstate);
1555
1556	/* Special case - cannot defer this call and cannot block ! */
1557	if (nstate == IEEE80211_S_INIT) {
1558		/* stop timers */
1559		mtx_lock(&sc->sc_mtx);
1560		sc->sc_amrr_timer = 0;
1561		mtx_unlock(&sc->sc_mtx);
1562		return (uvp->newstate(vap, nstate, arg));
1563	}
1564	mtx_lock(&sc->sc_mtx);
1565	if (usb2_config_td_is_gone(&sc->sc_config_td)) {
1566		mtx_unlock(&sc->sc_mtx);
1567		return (0);		/* nothing to do */
1568	}
1569	/* store next state */
1570	sc->sc_ns_state = nstate;
1571	sc->sc_ns_arg = arg;
1572
1573	/* stop timers */
1574	sc->sc_amrr_timer = 0;
1575
1576	/*
1577	 * USB configuration can only be done from the USB configuration
1578	 * thread:
1579	 */
1580	usb2_config_td_queue_command
1581	    (&sc->sc_config_td, &rum_config_copy,
1582	    &rum_cfg_newstate, 0, 0);
1583
1584	mtx_unlock(&sc->sc_mtx);
1585
1586	return (EINPROGRESS);
1587}
1588
1589static void
1590rum_std_command(struct ieee80211com *ic, usb2_config_td_command_t *func)
1591{
1592	struct rum_softc *sc = ic->ic_ifp->if_softc;
1593
1594	mtx_lock(&sc->sc_mtx);
1595
1596	sc->sc_rates = ieee80211_get_ratetable(ic->ic_curchan);
1597
1598	usb2_config_td_queue_command
1599	    (&sc->sc_config_td, &rum_config_copy, func, 0, 0);
1600
1601	mtx_unlock(&sc->sc_mtx);
1602
1603	return;
1604}
1605
1606static void
1607rum_scan_start_cb(struct ieee80211com *ic)
1608{
1609	rum_std_command(ic, &rum_cfg_scan_start);
1610	return;
1611}
1612
1613static void
1614rum_scan_end_cb(struct ieee80211com *ic)
1615{
1616	rum_std_command(ic, &rum_cfg_scan_end);
1617	return;
1618}
1619
1620static void
1621rum_set_channel_cb(struct ieee80211com *ic)
1622{
1623	rum_std_command(ic, &rum_cfg_set_chan);
1624	return;
1625}
1626
1627static void
1628rum_cfg_scan_start(struct rum_softc *sc,
1629    struct usb2_config_td_cc *cc, uint16_t refcount)
1630{
1631	/* abort TSF synchronization */
1632	rum_cfg_disable_tsf_sync(sc);
1633	rum_cfg_set_bssid(sc, cc->if_broadcastaddr);
1634	return;
1635}
1636
1637static void
1638rum_cfg_scan_end(struct rum_softc *sc,
1639    struct usb2_config_td_cc *cc, uint16_t refcount)
1640{
1641	/* enable TSF synchronization */
1642	rum_cfg_enable_tsf_sync(sc, cc, 0);
1643	rum_cfg_set_bssid(sc, cc->iv_bss.ni_bssid);
1644	return;
1645}
1646
1647/*
1648 * Reprogram MAC/BBP to switch to a new band. Values taken from the reference
1649 * driver.
1650 */
1651static void
1652rum_cfg_select_band(struct rum_softc *sc,
1653    struct usb2_config_td_cc *cc, uint16_t refcount)
1654{
1655	uint32_t tmp;
1656	uint8_t bbp17, bbp35, bbp96, bbp97, bbp98, bbp104;
1657
1658	/* update all BBP registers that depend on the band */
1659	bbp17 = 0x20;
1660	bbp96 = 0x48;
1661	bbp104 = 0x2c;
1662	bbp35 = 0x50;
1663	bbp97 = 0x48;
1664	bbp98 = 0x48;
1665
1666	if (cc->ic_curchan.chan_is_5ghz) {
1667		bbp17 += 0x08;
1668		bbp96 += 0x10;
1669		bbp104 += 0x0c;
1670		bbp35 += 0x10;
1671		bbp97 += 0x10;
1672		bbp98 += 0x10;
1673	}
1674	if ((cc->ic_curchan.chan_is_2ghz && sc->sc_ext_2ghz_lna) ||
1675	    (cc->ic_curchan.chan_is_5ghz && sc->sc_ext_5ghz_lna)) {
1676		bbp17 += 0x10;
1677		bbp96 += 0x10;
1678		bbp104 += 0x10;
1679	}
1680	sc->sc_bbp17 = bbp17;
1681	rum_cfg_bbp_write(sc, 17, bbp17);
1682	rum_cfg_bbp_write(sc, 96, bbp96);
1683	rum_cfg_bbp_write(sc, 104, bbp104);
1684
1685	if ((cc->ic_curchan.chan_is_2ghz && sc->sc_ext_2ghz_lna) ||
1686	    (cc->ic_curchan.chan_is_5ghz && sc->sc_ext_5ghz_lna)) {
1687		rum_cfg_bbp_write(sc, 75, 0x80);
1688		rum_cfg_bbp_write(sc, 86, 0x80);
1689		rum_cfg_bbp_write(sc, 88, 0x80);
1690	}
1691	rum_cfg_bbp_write(sc, 35, bbp35);
1692	rum_cfg_bbp_write(sc, 97, bbp97);
1693	rum_cfg_bbp_write(sc, 98, bbp98);
1694
1695	tmp = rum_cfg_read(sc, RT2573_PHY_CSR0);
1696	tmp &= ~(RT2573_PA_PE_2GHZ | RT2573_PA_PE_5GHZ);
1697	if (cc->ic_curchan.chan_is_2ghz)
1698		tmp |= RT2573_PA_PE_2GHZ;
1699	else
1700		tmp |= RT2573_PA_PE_5GHZ;
1701	rum_cfg_write(sc, RT2573_PHY_CSR0, tmp);
1702
1703	/* 802.11a uses a 16 microseconds short interframe space */
1704	sc->sc_sifs = cc->ic_curchan.chan_is_5ghz ? 16 : 10;
1705
1706	return;
1707}
1708
1709static void
1710rum_cfg_set_chan(struct rum_softc *sc,
1711    struct usb2_config_td_cc *cc, uint16_t refcount)
1712{
1713	enum {
1714	N_RF5225 = (sizeof(rum_rf5225) / sizeof(rum_rf5225[0]))};
1715	const struct rfprog *rfprog;
1716	uint32_t chan;
1717	uint16_t i;
1718	uint8_t bbp3;
1719	uint8_t bbp94 = RT2573_BBPR94_DEFAULT;
1720	int8_t power;
1721
1722	chan = cc->ic_curchan.chan_to_ieee;
1723
1724	if ((chan == 0) ||
1725	    (chan == IEEE80211_CHAN_ANY)) {
1726		/* nothing to do */
1727		return;
1728	}
1729	if (chan == sc->sc_last_chan) {
1730		return;
1731	}
1732	sc->sc_last_chan = chan;
1733
1734	/* select the appropriate RF settings based on what EEPROM says */
1735	rfprog = ((sc->sc_rf_rev == RT2573_RF_5225) ||
1736	    (sc->sc_rf_rev == RT2573_RF_2527)) ? rum_rf5225 : rum_rf5226;
1737
1738	/* find the settings for this channel */
1739	for (i = 0;; i++) {
1740		if (i == (N_RF5225 - 1))
1741			break;
1742		if (rfprog[i].chan == chan)
1743			break;
1744	}
1745
1746	DPRINTF("chan=%d, i=%d\n", chan, i);
1747
1748	power = sc->sc_txpow[i];
1749	if (power < 0) {
1750		bbp94 += power;
1751		power = 0;
1752	} else if (power > 31) {
1753		bbp94 += power - 31;
1754		power = 31;
1755	}
1756	/*
1757	 * If we are switching from the 2GHz band to the 5GHz band or
1758	 * vice-versa, BBP registers need to be reprogrammed.
1759	 */
1760	rum_cfg_select_band(sc, cc, 0);
1761	rum_cfg_select_antenna(sc, cc, 0);
1762
1763	rum_cfg_rf_write(sc, RT2573_RF1, rfprog[i].r1);
1764	rum_cfg_rf_write(sc, RT2573_RF2, rfprog[i].r2);
1765	rum_cfg_rf_write(sc, RT2573_RF3, rfprog[i].r3 | (power << 7));
1766	rum_cfg_rf_write(sc, RT2573_RF4, rfprog[i].r4 | (sc->sc_rffreq << 10));
1767
1768	rum_cfg_rf_write(sc, RT2573_RF1, rfprog[i].r1);
1769	rum_cfg_rf_write(sc, RT2573_RF2, rfprog[i].r2);
1770	rum_cfg_rf_write(sc, RT2573_RF3, rfprog[i].r3 | (power << 7) | 1);
1771	rum_cfg_rf_write(sc, RT2573_RF4, rfprog[i].r4 | (sc->sc_rffreq << 10));
1772
1773	rum_cfg_rf_write(sc, RT2573_RF1, rfprog[i].r1);
1774	rum_cfg_rf_write(sc, RT2573_RF2, rfprog[i].r2);
1775	rum_cfg_rf_write(sc, RT2573_RF3, rfprog[i].r3 | (power << 7));
1776	rum_cfg_rf_write(sc, RT2573_RF4, rfprog[i].r4 | (sc->sc_rffreq << 10));
1777
1778	if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
1779		return;
1780	}
1781	/* enable smart mode for MIMO-capable RFs */
1782	bbp3 = rum_cfg_bbp_read(sc, 3);
1783
1784	if ((sc->sc_rf_rev == RT2573_RF_5225) ||
1785	    (sc->sc_rf_rev == RT2573_RF_2527))
1786		bbp3 &= ~RT2573_SMART_MODE;
1787	else
1788		bbp3 |= RT2573_SMART_MODE;
1789
1790	rum_cfg_bbp_write(sc, 3, bbp3);
1791
1792	rum_cfg_bbp_write(sc, 94, bbp94);
1793
1794	/* update basic rate set */
1795
1796	if (cc->ic_curchan.chan_is_b) {
1797		/* 11b basic rates: 1, 2Mbps */
1798		rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x3);
1799	} else if (cc->ic_curchan.chan_is_a) {
1800		/* 11a basic rates: 6, 12, 24Mbps */
1801		rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x150);
1802	} else {
1803		/* 11b/g basic rates: 1, 2, 5.5, 11Mbps */
1804		rum_cfg_write(sc, RT2573_TXRX_CSR5, 0xf);
1805	}
1806
1807	if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
1808		return;
1809	}
1810	return;
1811}
1812
1813static void
1814rum_cfg_set_run(struct rum_softc *sc,
1815    struct usb2_config_td_cc *cc)
1816{
1817
1818	if (cc->ic_opmode != IEEE80211_M_MONITOR) {
1819		rum_cfg_update_slot(sc, cc, 0);
1820		rum_cfg_enable_mrr(sc, cc, 0);
1821		rum_cfg_set_txpreamble(sc, cc, 0);
1822
1823		/* update basic rate set */
1824
1825		if (cc->ic_bsschan.chan_is_5ghz) {
1826			/* 11a basic rates: 6, 12, 24Mbps */
1827			rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x150);
1828		} else if (cc->ic_bsschan.chan_is_g) {
1829			/* 11b/g basic rates: 1, 2, 5.5, 11Mbps */
1830			rum_cfg_write(sc, RT2573_TXRX_CSR5, 0xf);
1831		} else {
1832			/* 11b basic rates: 1, 2Mbps */
1833			rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x3);
1834		}
1835		rum_cfg_set_bssid(sc, cc->iv_bss.ni_bssid);
1836	}
1837	if ((cc->ic_opmode == IEEE80211_M_HOSTAP) ||
1838	    (cc->ic_opmode == IEEE80211_M_IBSS)) {
1839		rum_cfg_prepare_beacon(sc, cc, 0);
1840	}
1841	if (cc->ic_opmode != IEEE80211_M_MONITOR) {
1842		rum_cfg_enable_tsf_sync(sc, cc, 0);
1843	}
1844	if (cc->iv_bss.fixed_rate_none) {
1845		/* enable automatic rate adaptation */
1846		rum_cfg_amrr_start(sc);
1847	}
1848	return;
1849}
1850
1851static void
1852rum_cfg_enable_tsf_sync(struct rum_softc *sc,
1853    struct usb2_config_td_cc *cc, uint16_t refcount)
1854{
1855	uint32_t tmp;
1856
1857	if (cc->ic_opmode != IEEE80211_M_STA) {
1858		/*
1859		 * Change default 16ms TBTT adjustment to 8ms.
1860		 * Must be done before enabling beacon generation.
1861		 */
1862		rum_cfg_write(sc, RT2573_TXRX_CSR10, (1 << 12) | 8);
1863	}
1864	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR9) & 0xff000000;
1865
1866	/* set beacon interval (in 1/16ms unit) */
1867	tmp |= cc->iv_bss.ni_intval * 16;
1868
1869	tmp |= RT2573_TSF_TICKING | RT2573_ENABLE_TBTT;
1870	if (cc->ic_opmode == IEEE80211_M_STA)
1871		tmp |= RT2573_TSF_MODE(1);
1872	else
1873		tmp |= RT2573_TSF_MODE(2) | RT2573_GENERATE_BEACON;
1874
1875	rum_cfg_write(sc, RT2573_TXRX_CSR9, tmp);
1876
1877	return;
1878}
1879
1880static void
1881rum_cfg_disable_tsf_sync(struct rum_softc *sc)
1882{
1883	uint32_t tmp;
1884
1885	/* abort TSF synchronization */
1886	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR9);
1887	rum_cfg_write(sc, RT2573_TXRX_CSR9, tmp & ~0x00ffffff);
1888	return;
1889}
1890
1891/*
1892 * Enable multi-rate retries for frames sent at OFDM rates.
1893 * In 802.11b/g mode, allow fallback to CCK rates.
1894 */
1895static void
1896rum_cfg_enable_mrr(struct rum_softc *sc,
1897    struct usb2_config_td_cc *cc, uint16_t refcount)
1898{
1899	uint32_t tmp;
1900
1901	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR4);
1902
1903	if (cc->ic_curchan.chan_is_5ghz)
1904		tmp &= ~RT2573_MRR_CCK_FALLBACK;
1905	else
1906		tmp |= RT2573_MRR_CCK_FALLBACK;
1907
1908	tmp |= RT2573_MRR_ENABLED;
1909
1910	rum_cfg_write(sc, RT2573_TXRX_CSR4, tmp);
1911
1912	return;
1913}
1914
1915static void
1916rum_cfg_update_slot(struct rum_softc *sc,
1917    struct usb2_config_td_cc *cc, uint16_t refcount)
1918{
1919	uint32_t tmp;
1920	uint8_t slottime;
1921
1922	slottime = (cc->ic_flags & IEEE80211_F_SHSLOT) ? 9 : 20;
1923
1924	tmp = rum_cfg_read(sc, RT2573_MAC_CSR9);
1925	tmp = (tmp & ~0xff) | slottime;
1926	rum_cfg_write(sc, RT2573_MAC_CSR9, tmp);
1927
1928	DPRINTF("setting slot time to %u us\n", slottime);
1929
1930	return;
1931}
1932
1933static void
1934rum_cfg_set_txpreamble(struct rum_softc *sc,
1935    struct usb2_config_td_cc *cc, uint16_t refcount)
1936{
1937	uint32_t tmp;
1938
1939	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR4);
1940
1941	if (cc->ic_flags & IEEE80211_F_SHPREAMBLE)
1942		tmp |= RT2573_SHORT_PREAMBLE;
1943	else
1944		tmp &= ~RT2573_SHORT_PREAMBLE;
1945
1946	rum_cfg_write(sc, RT2573_TXRX_CSR4, tmp);
1947
1948	return;
1949}
1950
1951static void
1952rum_cfg_set_bssid(struct rum_softc *sc, uint8_t *bssid)
1953{
1954	uint32_t tmp;
1955
1956	tmp = bssid[0] | (bssid[1] << 8) | (bssid[2] << 16) | (bssid[3] << 24);
1957	rum_cfg_write(sc, RT2573_MAC_CSR4, tmp);
1958
1959	tmp = (bssid[4]) | (bssid[5] << 8) | (RT2573_ONE_BSSID << 16);
1960	rum_cfg_write(sc, RT2573_MAC_CSR5, tmp);
1961
1962	return;
1963}
1964
1965static void
1966rum_cfg_set_macaddr(struct rum_softc *sc, uint8_t *addr)
1967{
1968	uint32_t tmp;
1969
1970	tmp = addr[0] | (addr[1] << 8) | (addr[2] << 16) | (addr[3] << 24);
1971	rum_cfg_write(sc, RT2573_MAC_CSR2, tmp);
1972
1973	tmp = addr[4] | (addr[5] << 8) | (0xff << 16);
1974	rum_cfg_write(sc, RT2573_MAC_CSR3, tmp);
1975
1976	return;
1977}
1978
1979static void
1980rum_cfg_update_promisc(struct rum_softc *sc,
1981    struct usb2_config_td_cc *cc, uint16_t refcount)
1982{
1983	uint32_t tmp;
1984
1985	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0);
1986
1987	if (cc->if_flags & IFF_PROMISC)
1988		tmp &= ~RT2573_DROP_NOT_TO_ME;
1989	else
1990		tmp |= RT2573_DROP_NOT_TO_ME;
1991
1992	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp);
1993
1994	DPRINTF("%s promiscuous mode\n",
1995	    (cc->if_flags & IFF_PROMISC) ?
1996	    "entering" : "leaving");
1997	return;
1998}
1999
2000static void
2001rum_cfg_select_antenna(struct rum_softc *sc,
2002    struct usb2_config_td_cc *cc, uint16_t refcount)
2003{
2004	uint32_t tmp;
2005	uint8_t bbp3;
2006	uint8_t bbp4;
2007	uint8_t bbp77;
2008	uint8_t rx_ant;
2009	uint8_t is_5ghz;
2010
2011	bbp3 = rum_cfg_bbp_read(sc, 3);
2012	bbp4 = rum_cfg_bbp_read(sc, 4);
2013	bbp77 = rum_cfg_bbp_read(sc, 77);
2014
2015	bbp3 &= ~0x01;
2016	bbp4 &= ~0x23;
2017
2018	rx_ant = sc->sc_rx_ant;
2019	is_5ghz = cc->ic_curchan.chan_is_5ghz;
2020
2021	switch (sc->sc_rf_rev) {
2022	case RT2573_RF_5226:
2023	case RT2573_RF_5225:
2024		if (rx_ant == 0) {
2025			/* Diversity */
2026			bbp4 |= 0x02;
2027			if (is_5ghz == 0)
2028				bbp4 |= 0x20;
2029		} else if (rx_ant == 1) {
2030			/* RX: Antenna A */
2031			bbp4 |= 0x01;
2032			if (is_5ghz)
2033				bbp77 &= ~0x03;
2034			else
2035				bbp77 |= 0x03;
2036		} else if (rx_ant == 2) {
2037			/* RX: Antenna B */
2038			bbp4 |= 0x01;
2039			if (is_5ghz)
2040				bbp77 |= 0x03;
2041			else
2042				bbp77 &= ~0x03;
2043		}
2044		break;
2045
2046	case RT2573_RF_2528:
2047	case RT2573_RF_2527:
2048		if (rx_ant == 0) {
2049			/* Diversity */
2050			bbp4 |= 0x22;
2051		} else if (rx_ant == 1) {
2052			/* RX: Antenna A */
2053			bbp4 |= 0x21;
2054			bbp77 |= 0x03;
2055		} else if (rx_ant == 2) {
2056			/* RX: Antenna B */
2057			bbp4 |= 0x21;
2058			bbp77 &= ~0x03;
2059		}
2060		break;
2061	default:
2062		break;
2063	}
2064	bbp4 &= ~(sc->sc_ftype << 5);
2065
2066	/* make sure Rx is disabled before switching antenna */
2067	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0);
2068	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp | RT2573_DISABLE_RX);
2069
2070	rum_cfg_bbp_write(sc, 3, bbp3);
2071	rum_cfg_bbp_write(sc, 4, bbp4);
2072	rum_cfg_bbp_write(sc, 77, bbp77);
2073
2074	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp);
2075
2076	return;
2077}
2078
2079static void
2080rum_cfg_read_eeprom(struct rum_softc *sc)
2081{
2082	uint16_t val;
2083
2084	/* read MAC address */
2085	rum_cfg_eeprom_read(sc, RT2573_EEPROM_ADDRESS, sc->sc_myaddr, 6);
2086
2087	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_ANTENNA);
2088	sc->sc_rf_rev = (val >> 11) & 0x1f;
2089	sc->sc_hw_radio = (val >> 10) & 0x1;
2090	sc->sc_ftype = (val >> 6) & 0x1;
2091	sc->sc_rx_ant = (val >> 4) & 0x3;
2092	sc->sc_tx_ant = (val >> 2) & 0x3;
2093	sc->sc_nb_ant = (val & 0x3);
2094
2095	DPRINTF("RF revision=%d\n", sc->sc_rf_rev);
2096
2097	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_CONFIG2);
2098	sc->sc_ext_5ghz_lna = (val >> 6) & 0x1;
2099	sc->sc_ext_2ghz_lna = (val >> 4) & 0x1;
2100
2101	DPRINTF("External 2GHz LNA=%d, External 5GHz LNA=%d\n",
2102	    sc->sc_ext_2ghz_lna, sc->sc_ext_5ghz_lna);
2103
2104	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_RSSI_2GHZ_OFFSET);
2105	if ((val & 0xff) != 0xff)
2106		sc->sc_rssi_2ghz_corr = (int8_t)(val & 0xff);	/* signed */
2107	else
2108		sc->sc_rssi_2ghz_corr = 0;
2109
2110	/* range check */
2111	if ((sc->sc_rssi_2ghz_corr < -10) ||
2112	    (sc->sc_rssi_2ghz_corr > 10)) {
2113		sc->sc_rssi_2ghz_corr = 0;
2114	}
2115	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_RSSI_5GHZ_OFFSET);
2116	if ((val & 0xff) != 0xff)
2117		sc->sc_rssi_5ghz_corr = (int8_t)(val & 0xff);	/* signed */
2118	else
2119		sc->sc_rssi_5ghz_corr = 0;
2120
2121	/* range check */
2122	if ((sc->sc_rssi_5ghz_corr < -10) ||
2123	    (sc->sc_rssi_5ghz_corr > 10)) {
2124		sc->sc_rssi_5ghz_corr = 0;
2125	}
2126	if (sc->sc_ext_2ghz_lna) {
2127		sc->sc_rssi_2ghz_corr -= 14;
2128	}
2129	if (sc->sc_ext_5ghz_lna) {
2130		sc->sc_rssi_5ghz_corr -= 14;
2131	}
2132	DPRINTF("RSSI 2GHz corr=%d, RSSI 5GHz corr=%d\n",
2133	    sc->sc_rssi_2ghz_corr, sc->sc_rssi_5ghz_corr);
2134
2135	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_FREQ_OFFSET);
2136	if ((val & 0xff) != 0xff)
2137		sc->sc_rffreq = (val & 0xff);
2138	else
2139		sc->sc_rffreq = 0;
2140
2141	DPRINTF("RF freq=%d\n", sc->sc_rffreq);
2142
2143	/* read Tx power for all a/b/g channels */
2144	rum_cfg_eeprom_read(sc, RT2573_EEPROM_TXPOWER, sc->sc_txpow, 14);
2145
2146	/* XXX default Tx power for 802.11a channels */
2147	memset(sc->sc_txpow + 14, 24, sizeof(sc->sc_txpow) - 14);
2148
2149	/* read default values for BBP registers */
2150	rum_cfg_eeprom_read(sc, RT2573_EEPROM_BBP_BASE, sc->sc_bbp_prom, 2 * 16);
2151
2152	return;
2153}
2154
2155static uint8_t
2156rum_cfg_bbp_init(struct rum_softc *sc)
2157{
2158	enum {
2159		N_DEF_BBP = (sizeof(rum_def_bbp) / sizeof(rum_def_bbp[0])),
2160	};
2161	uint16_t i;
2162	uint8_t to;
2163	uint8_t tmp;
2164
2165	/* wait for BBP to become ready */
2166	for (to = 0;; to++) {
2167		if (to < 100) {
2168			tmp = rum_cfg_bbp_read(sc, 0);
2169			if ((tmp != 0x00) &&
2170			    (tmp != 0xff)) {
2171				break;
2172			}
2173			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
2174				return (1);	/* failure */
2175			}
2176		} else {
2177			DPRINTF("timeout waiting for BBP\n");
2178			return (1);	/* failure */
2179		}
2180	}
2181
2182	/* initialize BBP registers to default values */
2183	for (i = 0; i < N_DEF_BBP; i++) {
2184		rum_cfg_bbp_write(sc, rum_def_bbp[i].reg, rum_def_bbp[i].val);
2185	}
2186
2187	/* write vendor-specific BBP values (from EEPROM) */
2188	for (i = 0; i < 16; i++) {
2189		if ((sc->sc_bbp_prom[i].reg == 0) ||
2190		    (sc->sc_bbp_prom[i].reg == 0xff)) {
2191			continue;
2192		}
2193		rum_cfg_bbp_write(sc, sc->sc_bbp_prom[i].reg, sc->sc_bbp_prom[i].val);
2194	}
2195	return (0);
2196}
2197
2198static void
2199rum_cfg_pre_init(struct rum_softc *sc,
2200    struct usb2_config_td_cc *cc, uint16_t refcount)
2201{
2202	struct ifnet *ifp = sc->sc_ifp;
2203	struct ieee80211com *ic = ifp->if_l2com;
2204
2205	/* immediate configuration */
2206
2207	rum_cfg_pre_stop(sc, cc, 0);
2208
2209	ifp->if_drv_flags |= IFF_DRV_RUNNING;
2210
2211	sc->sc_flags |= RUM_FLAG_HL_READY;
2212
2213	IEEE80211_ADDR_COPY(ic->ic_myaddr, IF_LLADDR(ifp));
2214	return;
2215}
2216
2217static void
2218rum_cfg_init(struct rum_softc *sc,
2219    struct usb2_config_td_cc *cc, uint16_t refcount)
2220{
2221	enum {
2222		N_DEF_MAC = (sizeof(rum_def_mac) / sizeof(rum_def_mac[0])),
2223	};
2224
2225	uint32_t tmp;
2226	uint16_t i;
2227	uint8_t to;
2228
2229	/* delayed configuration */
2230
2231	rum_cfg_stop(sc, cc, 0);
2232
2233	/* initialize MAC registers to default values */
2234	for (i = 0; i < N_DEF_MAC; i++) {
2235		rum_cfg_write(sc, rum_def_mac[i].reg, rum_def_mac[i].val);
2236	}
2237
2238	/* set host ready */
2239	rum_cfg_write(sc, RT2573_MAC_CSR1, 3);
2240	rum_cfg_write(sc, RT2573_MAC_CSR1, 0);
2241
2242	/* wait for BBP/RF to wakeup */
2243	for (to = 0;; to++) {
2244		if (to < 100) {
2245			if (rum_cfg_read(sc, RT2573_MAC_CSR12) & 8) {
2246				break;
2247			}
2248			rum_cfg_write(sc, RT2573_MAC_CSR12, 4);	/* force wakeup */
2249
2250			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
2251				goto fail;
2252			}
2253		} else {
2254			DPRINTF("timeout waiting for "
2255			    "BBP/RF to wakeup\n");
2256			goto fail;
2257		}
2258	}
2259
2260	if (rum_cfg_bbp_init(sc)) {
2261		goto fail;
2262	}
2263	/* select default channel */
2264
2265	sc->sc_last_chan = 0;
2266
2267	rum_cfg_set_chan(sc, cc, 0);
2268
2269	/* clear STA registers */
2270	rum_cfg_read_multi(sc, RT2573_STA_CSR0, sc->sc_sta, sizeof(sc->sc_sta));
2271	/* set MAC address */
2272	rum_cfg_set_macaddr(sc, cc->ic_myaddr);
2273
2274	/* initialize ASIC */
2275	rum_cfg_write(sc, RT2573_MAC_CSR1, 4);
2276
2277	/*
2278	 * make sure that the first transaction
2279	 * clears the stall:
2280	 */
2281	sc->sc_flags |= (RUM_FLAG_READ_STALL |
2282	    RUM_FLAG_WRITE_STALL |
2283	    RUM_FLAG_LL_READY);
2284
2285	if ((sc->sc_flags & RUM_FLAG_LL_READY) &&
2286	    (sc->sc_flags & RUM_FLAG_HL_READY)) {
2287		struct ifnet *ifp = sc->sc_ifp;
2288		struct ieee80211com *ic = ifp->if_l2com;
2289
2290		/*
2291		 * start the USB transfers, if not already started:
2292		 */
2293		usb2_transfer_start(sc->sc_xfer[1]);
2294		usb2_transfer_start(sc->sc_xfer[0]);
2295
2296		/*
2297		 * start IEEE802.11 layer
2298		 */
2299		mtx_unlock(&sc->sc_mtx);
2300		ieee80211_start_all(ic);
2301		mtx_lock(&sc->sc_mtx);
2302	}
2303	/* update Rx filter */
2304	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0) & 0xffff;
2305
2306	tmp |= RT2573_DROP_PHY_ERROR | RT2573_DROP_CRC_ERROR;
2307
2308	if (cc->ic_opmode != IEEE80211_M_MONITOR) {
2309		tmp |= RT2573_DROP_CTL | RT2573_DROP_VER_ERROR |
2310		    RT2573_DROP_ACKCTS;
2311		if (cc->ic_opmode != IEEE80211_M_HOSTAP) {
2312			tmp |= RT2573_DROP_TODS;
2313		}
2314		if (!(cc->if_flags & IFF_PROMISC)) {
2315			tmp |= RT2573_DROP_NOT_TO_ME;
2316		}
2317	}
2318	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp);
2319
2320	return;
2321
2322fail:
2323	rum_cfg_pre_stop(sc, NULL, 0);
2324
2325	if (cc) {
2326		rum_cfg_stop(sc, cc, 0);
2327	}
2328	return;
2329}
2330
2331static void
2332rum_cfg_pre_stop(struct rum_softc *sc,
2333    struct usb2_config_td_cc *cc, uint16_t refcount)
2334{
2335	struct ifnet *ifp = sc->sc_ifp;
2336
2337	if (cc) {
2338		/* copy the needed configuration */
2339		rum_config_copy(sc, cc, refcount);
2340	}
2341	/* immediate configuration */
2342
2343	if (ifp) {
2344		/* clear flags */
2345		ifp->if_drv_flags &= ~IFF_DRV_RUNNING;
2346	}
2347	sc->sc_flags &= ~(RUM_FLAG_HL_READY |
2348	    RUM_FLAG_LL_READY);
2349
2350	/*
2351	 * stop all the transfers, if not already stopped:
2352	 */
2353	usb2_transfer_stop(sc->sc_xfer[0]);
2354	usb2_transfer_stop(sc->sc_xfer[1]);
2355	usb2_transfer_stop(sc->sc_xfer[2]);
2356	usb2_transfer_stop(sc->sc_xfer[3]);
2357
2358	/* clean up transmission */
2359	rum_tx_clean_queue(sc);
2360	return;
2361}
2362
2363static void
2364rum_cfg_stop(struct rum_softc *sc,
2365    struct usb2_config_td_cc *cc, uint16_t refcount)
2366{
2367	uint32_t tmp;
2368
2369	/* disable Rx */
2370	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0);
2371	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp | RT2573_DISABLE_RX);
2372
2373	/* reset ASIC */
2374	rum_cfg_write(sc, RT2573_MAC_CSR1, 3);
2375
2376	/* wait a little */
2377	usb2_config_td_sleep(&sc->sc_config_td, hz / 10);
2378
2379	rum_cfg_write(sc, RT2573_MAC_CSR1, 0);
2380
2381	/* wait a little */
2382	usb2_config_td_sleep(&sc->sc_config_td, hz / 10);
2383
2384	return;
2385}
2386
2387static void
2388rum_cfg_amrr_start(struct rum_softc *sc)
2389{
2390	struct ieee80211vap *vap;
2391	struct ieee80211_node *ni;
2392
2393	vap = rum_get_vap(sc);
2394
2395	if (vap == NULL) {
2396		return;
2397	}
2398	ni = vap->iv_bss;
2399	if (ni == NULL) {
2400		return;
2401	}
2402	/* init AMRR */
2403
2404	ieee80211_amrr_node_init(&RUM_VAP(vap)->amrr, &RUM_NODE(ni)->amn, ni);
2405
2406	/* enable AMRR timer */
2407
2408	sc->sc_amrr_timer = 1;
2409	return;
2410}
2411
2412static void
2413rum_cfg_amrr_timeout(struct rum_softc *sc,
2414    struct usb2_config_td_cc *cc, uint16_t refcount)
2415{
2416	struct ifnet *ifp = sc->sc_ifp;
2417	struct ieee80211vap *vap;
2418	struct ieee80211_node *ni;
2419	uint32_t ok;
2420	uint32_t fail;
2421
2422	/* clear statistic registers (STA_CSR0 to STA_CSR5) */
2423	rum_cfg_read_multi(sc, RT2573_STA_CSR0, sc->sc_sta, sizeof(sc->sc_sta));
2424
2425	vap = rum_get_vap(sc);
2426	if (vap == NULL) {
2427		return;
2428	}
2429	ni = vap->iv_bss;
2430	if (ni == NULL) {
2431		return;
2432	}
2433	if ((sc->sc_flags & RUM_FLAG_LL_READY) &&
2434	    (sc->sc_flags & RUM_FLAG_HL_READY)) {
2435
2436		ok = (le32toh(sc->sc_sta[4]) >> 16) +	/* TX ok w/o retry */
2437		    (le32toh(sc->sc_sta[5]) & 0xffff);	/* TX ok w/ retry */
2438		fail = (le32toh(sc->sc_sta[5]) >> 16);	/* TX retry-fail count */
2439
2440		if (sc->sc_amrr_timer) {
2441			ieee80211_amrr_tx_update(&RUM_NODE(vap->iv_bss)->amn,
2442			    ok + fail, ok, (le32toh(sc->sc_sta[5]) & 0xffff) + fail);
2443
2444			if (ieee80211_amrr_choose(ni, &RUM_NODE(ni)->amn)) {
2445				/* ignore */
2446			}
2447		}
2448		ifp->if_oerrors += fail;/* count TX retry-fail as Tx errors */
2449	}
2450	return;
2451}
2452
2453static void
2454rum_cfg_load_microcode(struct rum_softc *sc, const uint8_t *ucode, uint16_t size)
2455{
2456	struct usb2_device_request req;
2457	uint16_t reg = RT2573_MCU_CODE_BASE;
2458
2459	/* copy firmware image into NIC */
2460	while (size >= 4) {
2461		rum_cfg_write(sc, reg, UGETDW(ucode));
2462		reg += 4;
2463		ucode += 4;
2464		size -= 4;
2465	}
2466
2467	if (size != 0) {
2468		DPRINTF("possibly invalid firmware\n");
2469	}
2470	req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
2471	req.bRequest = RT2573_MCU_CNTL;
2472	USETW(req.wValue, RT2573_MCU_RUN);
2473	USETW(req.wIndex, 0);
2474	USETW(req.wLength, 0);
2475
2476	rum_cfg_do_request(sc, &req, NULL);
2477
2478	return;
2479}
2480
2481static void
2482rum_cfg_prepare_beacon(struct rum_softc *sc,
2483    struct usb2_config_td_cc *cc, uint16_t refcount)
2484{
2485	struct ieee80211_node *ni;
2486	struct ieee80211vap *vap;
2487	struct ieee80211com *ic;
2488	const struct ieee80211_txparam *tp;
2489	struct mbuf *m;
2490
2491	vap = rum_get_vap(sc);
2492	if (vap == NULL) {
2493		return;
2494	}
2495	ni = vap->iv_bss;
2496	if (ni == NULL) {
2497		return;
2498	}
2499	ic = vap->iv_ic;
2500	if (ic == NULL) {
2501		return;
2502	}
2503	DPRINTFN(11, "Sending beacon frame.\n");
2504
2505	m = ieee80211_beacon_alloc(ni, &RUM_VAP(vap)->bo);
2506	if (m == NULL) {
2507		DPRINTFN(0, "could not allocate beacon\n");
2508		return;
2509	}
2510	tp = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_bsschan)];
2511
2512	m->m_pkthdr.rcvif = (void *)ieee80211_ref_node(ni);
2513	rum_setup_desc_and_tx(sc, m, RT2573_TX_TIMESTAMP, RT2573_TX_HWSEQ | RT2573_TX_BEACON, tp->mgmtrate);
2514	return;
2515}
2516
2517static uint8_t
2518rum_get_rssi(struct rum_softc *sc, uint8_t raw)
2519{
2520	struct ifnet *ifp = sc->sc_ifp;
2521	struct ieee80211com *ic = ifp->if_l2com;
2522	int16_t rssi;
2523	uint8_t lna;
2524	uint8_t agc;
2525
2526	lna = (raw >> 5) & 0x3;
2527	agc = raw & 0x1f;
2528
2529	if (lna == 0) {
2530		/*
2531                 * No RSSI mapping
2532                 *
2533                 * NB: Since RSSI is relative to noise floor, -1 is
2534                 *     adequate for caller to know error happened.
2535                 */
2536		return (0);
2537	}
2538	rssi = (2 * agc) - RT2573_NOISE_FLOOR;
2539
2540	if (IEEE80211_IS_CHAN_2GHZ(ic->ic_curchan)) {
2541
2542		rssi += sc->sc_rssi_2ghz_corr;
2543
2544		if (lna == 1)
2545			rssi -= 64;
2546		else if (lna == 2)
2547			rssi -= 74;
2548		else if (lna == 3)
2549			rssi -= 90;
2550	} else {
2551
2552		rssi += sc->sc_rssi_5ghz_corr;
2553
2554		if ((!sc->sc_ext_5ghz_lna) && (lna != 1))
2555			rssi += 4;
2556
2557		if (lna == 1)
2558			rssi -= 64;
2559		else if (lna == 2)
2560			rssi -= 86;
2561		else if (lna == 3)
2562			rssi -= 100;
2563	}
2564
2565	/* range check */
2566
2567	if (rssi < 0)
2568		rssi = 0;
2569	else if (rssi > 255)
2570		rssi = 255;
2571
2572	return (rssi);
2573}
2574
2575static struct ieee80211vap *
2576rum_vap_create(struct ieee80211com *ic,
2577    const char name[IFNAMSIZ], int unit, int opmode, int flags,
2578    const uint8_t bssid[IEEE80211_ADDR_LEN],
2579    const uint8_t mac[IEEE80211_ADDR_LEN])
2580{
2581	struct rum_vap *rvp;
2582	struct ieee80211vap *vap;
2583	struct rum_softc *sc = ic->ic_ifp->if_softc;
2584
2585	DPRINTF("\n");
2586
2587	/* Need to sync with config thread: */
2588	mtx_lock(&sc->sc_mtx);
2589	if (usb2_config_td_sync(&sc->sc_config_td)) {
2590		mtx_unlock(&sc->sc_mtx);
2591		/* config thread is gone */
2592		return (NULL);
2593	}
2594	mtx_unlock(&sc->sc_mtx);
2595
2596	if (!TAILQ_EMPTY(&ic->ic_vaps))	/* only one at a time */
2597		return NULL;
2598	rvp = (struct rum_vap *)malloc(sizeof(struct rum_vap),
2599	    M_80211_VAP, M_NOWAIT | M_ZERO);
2600	if (rvp == NULL)
2601		return NULL;
2602	vap = &rvp->vap;
2603	/* enable s/w bmiss handling for sta mode */
2604	ieee80211_vap_setup(ic, vap, name, unit, opmode,
2605	    flags | IEEE80211_CLONE_NOBEACONS, bssid, mac);
2606
2607	/* override state transition machine */
2608	rvp->newstate = vap->iv_newstate;
2609	vap->iv_newstate = &rum_newstate_cb;
2610
2611	ieee80211_amrr_init(&rvp->amrr, vap,
2612	    IEEE80211_AMRR_MIN_SUCCESS_THRESHOLD,
2613	    IEEE80211_AMRR_MAX_SUCCESS_THRESHOLD,
2614	    1000 /* 1 sec */ );
2615
2616	/* complete setup */
2617	ieee80211_vap_attach(vap, ieee80211_media_change, ieee80211_media_status);
2618
2619	/* store current operation mode */
2620	ic->ic_opmode = opmode;
2621
2622	return (vap);
2623}
2624
2625static void
2626rum_vap_delete(struct ieee80211vap *vap)
2627{
2628	struct rum_vap *rvp = RUM_VAP(vap);
2629	struct rum_softc *sc = vap->iv_ic->ic_ifp->if_softc;
2630
2631	DPRINTF("\n");
2632
2633	/* Need to sync with config thread: */
2634	mtx_lock(&sc->sc_mtx);
2635	if (usb2_config_td_sync(&sc->sc_config_td)) {
2636		/* ignore */
2637	}
2638	mtx_unlock(&sc->sc_mtx);
2639
2640	ieee80211_amrr_cleanup(&rvp->amrr);
2641	ieee80211_vap_detach(vap);
2642	free(rvp, M_80211_VAP);
2643	return;
2644}
2645
2646/* ARGUSED */
2647static struct ieee80211_node *
2648rum_node_alloc(struct ieee80211vap *vap __unused,
2649    const uint8_t mac[IEEE80211_ADDR_LEN] __unused)
2650{
2651	struct rum_node *rn;
2652
2653	rn = malloc(sizeof(struct rum_node), M_80211_NODE, M_NOWAIT | M_ZERO);
2654	return ((rn != NULL) ? &rn->ni : NULL);
2655}
2656
2657static void
2658rum_newassoc(struct ieee80211_node *ni, int isnew)
2659{
2660	struct ieee80211vap *vap = ni->ni_vap;
2661
2662	ieee80211_amrr_node_init(&RUM_VAP(vap)->amrr, &RUM_NODE(ni)->amn, ni);
2663	return;
2664}
2665
2666static void
2667rum_fill_write_queue(struct rum_softc *sc)
2668{
2669	struct ifnet *ifp = sc->sc_ifp;
2670	struct ieee80211_node *ni;
2671	struct mbuf *m;
2672
2673	/*
2674	 * We only fill up half of the queue with data frames. The rest is
2675	 * reserved for other kinds of frames.
2676	 */
2677
2678	while (sc->sc_tx_queue.ifq_len < (IFQ_MAXLEN / 2)) {
2679
2680		IFQ_DRV_DEQUEUE(&ifp->if_snd, m);
2681		if (m == NULL)
2682			break;
2683
2684		ni = (void *)(m->m_pkthdr.rcvif);
2685		m = ieee80211_encap(ni, m);
2686		if (m == NULL) {
2687			ieee80211_free_node(ni);
2688			continue;
2689		}
2690		rum_tx_data(sc, m, ni);
2691	}
2692	return;
2693}
2694
2695static void
2696rum_tx_clean_queue(struct rum_softc *sc)
2697{
2698	struct mbuf *m;
2699
2700	for (;;) {
2701		_IF_DEQUEUE(&sc->sc_tx_queue, m);
2702
2703		if (!m) {
2704			break;
2705		}
2706		rum_tx_freem(m);
2707	}
2708	return;
2709}
2710
2711static void
2712rum_tx_freem(struct mbuf *m)
2713{
2714	struct ieee80211_node *ni;
2715
2716	while (m) {
2717		ni = (void *)(m->m_pkthdr.rcvif);
2718		if (!ni) {
2719			m = m_free(m);
2720			continue;
2721		}
2722		if (m->m_flags & M_TXCB) {
2723			ieee80211_process_callback(ni, m, 0);
2724		}
2725		m_freem(m);
2726		ieee80211_free_node(ni);
2727
2728		break;
2729	}
2730	return;
2731}
2732
2733static void
2734rum_tx_mgt(struct rum_softc *sc, struct mbuf *m, struct ieee80211_node *ni)
2735{
2736	struct ieee80211vap *vap = ni->ni_vap;
2737	struct ieee80211com *ic = ni->ni_ic;
2738	const struct ieee80211_txparam *tp;
2739	struct ieee80211_frame *wh;
2740	struct ieee80211_key *k;
2741	uint32_t flags;
2742	uint16_t dur;
2743
2744	tp = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_curchan)];
2745
2746	wh = mtod(m, struct ieee80211_frame *);
2747	if (wh->i_fc[1] & IEEE80211_FC1_WEP) {
2748		k = ieee80211_crypto_encap(ni, m);
2749		if (k == NULL) {
2750			m_freem(m);
2751			ieee80211_free_node(ni);
2752			return;
2753		}
2754		wh = mtod(m, struct ieee80211_frame *);
2755	}
2756	flags = 0;
2757	if (!IEEE80211_IS_MULTICAST(wh->i_addr1)) {
2758		flags |= RT2573_TX_NEED_ACK;
2759
2760		dur = ieee80211_ack_duration(sc->sc_rates, tp->mgmtrate,
2761		    ic->ic_flags & IEEE80211_F_SHPREAMBLE);
2762		USETW(wh->i_dur, dur);
2763
2764		/* tell hardware to add timestamp for probe responses */
2765		if ((wh->i_fc[0] &
2766		    (IEEE80211_FC0_TYPE_MASK | IEEE80211_FC0_SUBTYPE_MASK)) ==
2767		    (IEEE80211_FC0_TYPE_MGT | IEEE80211_FC0_SUBTYPE_PROBE_RESP))
2768			flags |= RT2573_TX_TIMESTAMP;
2769	}
2770	m->m_pkthdr.rcvif = (void *)ni;
2771	rum_setup_desc_and_tx(sc, m, flags, 0, tp->mgmtrate);
2772	return;
2773}
2774
2775static struct ieee80211vap *
2776rum_get_vap(struct rum_softc *sc)
2777{
2778	struct ifnet *ifp;
2779	struct ieee80211com *ic;
2780
2781	if (sc == NULL) {
2782		return NULL;
2783	}
2784	ifp = sc->sc_ifp;
2785	if (ifp == NULL) {
2786		return NULL;
2787	}
2788	ic = ifp->if_l2com;
2789	if (ic == NULL) {
2790		return NULL;
2791	}
2792	return TAILQ_FIRST(&ic->ic_vaps);
2793}
2794
2795static void
2796rum_tx_data(struct rum_softc *sc, struct mbuf *m,
2797    struct ieee80211_node *ni)
2798{
2799	struct ieee80211vap *vap = ni->ni_vap;
2800	struct ieee80211com *ic = ni->ni_ic;
2801	const struct ieee80211_txparam *tp;
2802	struct ieee80211_frame *wh;
2803	struct ieee80211_key *k;
2804	uint32_t flags = 0;
2805	uint16_t dur;
2806	uint16_t rate;
2807
2808	DPRINTFN(11, "Sending data.\n");
2809
2810	wh = mtod(m, struct ieee80211_frame *);
2811
2812	tp = &vap->iv_txparms[ieee80211_chan2mode(ni->ni_chan)];
2813	if (IEEE80211_IS_MULTICAST(wh->i_addr1))
2814		rate = tp->mcastrate;
2815	else if (tp->ucastrate != IEEE80211_FIXED_RATE_NONE)
2816		rate = tp->ucastrate;
2817	else
2818		rate = ni->ni_txrate;
2819
2820	if (wh->i_fc[1] & IEEE80211_FC1_WEP) {
2821		k = ieee80211_crypto_encap(ni, m);
2822		if (k == NULL) {
2823			m_freem(m);
2824			ieee80211_free_node(ni);
2825			return;
2826		}
2827		/* packet header may have moved, reset our local pointer */
2828		wh = mtod(m, struct ieee80211_frame *);
2829	}
2830	if (!IEEE80211_IS_MULTICAST(wh->i_addr1)) {
2831		uint8_t prot = IEEE80211_PROT_NONE;
2832
2833		if (m->m_pkthdr.len + IEEE80211_CRC_LEN > vap->iv_rtsthreshold)
2834			prot = IEEE80211_PROT_RTSCTS;
2835		else if ((ic->ic_flags & IEEE80211_F_USEPROT) &&
2836		    ieee80211_rate2phytype(sc->sc_rates, rate) == IEEE80211_T_OFDM)
2837			prot = ic->ic_protmode;
2838		if (prot != IEEE80211_PROT_NONE) {
2839			rum_tx_prot(sc, m, ni, prot, rate);
2840			flags |= RT2573_TX_LONG_RETRY | RT2573_TX_IFS_SIFS;
2841		}
2842		flags |= RT2573_TX_NEED_ACK;
2843		flags |= RT2573_TX_MORE_FRAG;
2844
2845		dur = ieee80211_ack_duration(sc->sc_rates, rate,
2846		    ic->ic_flags & IEEE80211_F_SHPREAMBLE);
2847		USETW(wh->i_dur, dur);
2848	}
2849	m->m_pkthdr.rcvif = (void *)ni;
2850	rum_setup_desc_and_tx(sc, m, flags, 0, rate);
2851	return;
2852}
2853
2854static void
2855rum_tx_prot(struct rum_softc *sc,
2856    const struct mbuf *m, struct ieee80211_node *ni,
2857    uint8_t prot, uint16_t rate)
2858{
2859	struct ieee80211com *ic = ni->ni_ic;
2860	const struct ieee80211_frame *wh;
2861	struct mbuf *mprot;
2862	uint32_t flags;
2863	uint16_t protrate;
2864	uint16_t ackrate;
2865	uint16_t pktlen;
2866	uint16_t dur;
2867	uint8_t isshort;
2868
2869	KASSERT((prot == IEEE80211_PROT_RTSCTS) ||
2870	    (prot == IEEE80211_PROT_CTSONLY),
2871	    ("protection %u", prot));
2872
2873	DPRINTFN(11, "Sending protection frame.\n");
2874
2875	wh = mtod(m, const struct ieee80211_frame *);
2876	pktlen = m->m_pkthdr.len + IEEE80211_CRC_LEN;
2877
2878	protrate = ieee80211_ctl_rate(sc->sc_rates, rate);
2879	ackrate = ieee80211_ack_rate(sc->sc_rates, rate);
2880
2881	isshort = (ic->ic_flags & IEEE80211_F_SHPREAMBLE) != 0;
2882	dur = ieee80211_compute_duration(sc->sc_rates, pktlen, rate, isshort);
2883	+ieee80211_ack_duration(sc->sc_rates, rate, isshort);
2884	flags = RT2573_TX_MORE_FRAG;
2885	if (prot == IEEE80211_PROT_RTSCTS) {
2886		/* NB: CTS is the same size as an ACK */
2887		dur += ieee80211_ack_duration(sc->sc_rates, rate, isshort);
2888		flags |= RT2573_TX_NEED_ACK;
2889		mprot = ieee80211_alloc_rts(ic, wh->i_addr1, wh->i_addr2, dur);
2890	} else {
2891		mprot = ieee80211_alloc_cts(ic, ni->ni_vap->iv_myaddr, dur);
2892	}
2893	if (mprot == NULL) {
2894		return;
2895	}
2896	mprot->m_pkthdr.rcvif = (void *)ieee80211_ref_node(ni);
2897	rum_setup_desc_and_tx(sc, mprot, flags, 0, protrate);
2898	return;
2899}
2900
2901static void
2902rum_tx_raw(struct rum_softc *sc, struct mbuf *m, struct ieee80211_node *ni,
2903    const struct ieee80211_bpf_params *params)
2904{
2905	uint32_t flags;
2906	uint16_t rate;
2907
2908	DPRINTFN(11, "Sending raw frame.\n");
2909
2910	rate = params->ibp_rate0 & IEEE80211_RATE_VAL;
2911
2912	/* XXX validate */
2913	if (rate == 0) {
2914		m_freem(m);
2915		ieee80211_free_node(ni);
2916		return;
2917	}
2918	flags = 0;
2919	if ((params->ibp_flags & IEEE80211_BPF_NOACK) == 0)
2920		flags |= RT2573_TX_NEED_ACK;
2921	if (params->ibp_flags & (IEEE80211_BPF_RTS | IEEE80211_BPF_CTS)) {
2922		rum_tx_prot(sc, m, ni,
2923		    params->ibp_flags & IEEE80211_BPF_RTS ?
2924		    IEEE80211_PROT_RTSCTS : IEEE80211_PROT_CTSONLY,
2925		    rate);
2926		flags |= RT2573_TX_LONG_RETRY | RT2573_TX_IFS_SIFS;
2927	}
2928	m->m_pkthdr.rcvif = (void *)ni;
2929	rum_setup_desc_and_tx(sc, m, flags, 0, rate);
2930	return;
2931}
2932
2933static int
2934rum_raw_xmit_cb(struct ieee80211_node *ni, struct mbuf *m,
2935    const struct ieee80211_bpf_params *params)
2936{
2937	struct ieee80211com *ic = ni->ni_ic;
2938	struct ifnet *ifp = ic->ic_ifp;
2939	struct rum_softc *sc = ifp->if_softc;
2940
2941	mtx_lock(&sc->sc_mtx);
2942	if (params == NULL) {
2943		/*
2944		 * Legacy path; interpret frame contents to decide
2945		 * precisely how to send the frame.
2946		 */
2947		rum_tx_mgt(sc, m, ni);
2948	} else {
2949		/*
2950		 * Caller supplied explicit parameters to use in
2951		 * sending the frame.
2952		 */
2953		rum_tx_raw(sc, m, ni, params);
2954	}
2955	mtx_unlock(&sc->sc_mtx);
2956	return (0);
2957}
2958
2959static void
2960rum_update_mcast_cb(struct ifnet *ifp)
2961{
2962	/* not supported */
2963	return;
2964}
2965
2966static void
2967rum_update_promisc_cb(struct ifnet *ifp)
2968{
2969	struct rum_softc *sc = ifp->if_softc;
2970
2971	mtx_lock(&sc->sc_mtx);
2972	usb2_config_td_queue_command
2973	    (&sc->sc_config_td, &rum_config_copy,
2974	    &rum_cfg_update_promisc, 0, 0);
2975	mtx_unlock(&sc->sc_mtx);
2976	return;
2977}
2978