if_rum.c revision 187378
1/*-
2 * Copyright (c) 2005-2007 Damien Bergamini <damien.bergamini@free.fr>
3 * Copyright (c) 2006 Niall O'Higgins <niallo@openbsd.org>
4 * Copyright (c) 2007-2008 Hans Petter Selasky <hselasky@freebsd.org>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 */
18
19/*
20 * NOTE: all function names beginning like "rum_cfg_" can only
21 * be called from within the config thread function !
22 */
23
24#include <sys/cdefs.h>
25__FBSDID("$FreeBSD: head/sys/dev/usb2/wlan/if_rum2.c 187378 2009-01-18 05:35:58Z thompsa $");
26
27/*-
28 * Ralink Technology RT2501USB/RT2601USB chipset driver
29 * http://www.ralinktech.com.tw/
30 */
31
32#include <dev/usb2/include/usb2_devid.h>
33#include <dev/usb2/include/usb2_standard.h>
34#include <dev/usb2/include/usb2_mfunc.h>
35#include <dev/usb2/include/usb2_error.h>
36
37#define	usb2_config_td_cc rum_config_copy
38#define	usb2_config_td_softc rum_softc
39
40#define	USB_DEBUG_VAR rum_debug
41
42#include <dev/usb2/core/usb2_core.h>
43#include <dev/usb2/core/usb2_lookup.h>
44#include <dev/usb2/core/usb2_process.h>
45#include <dev/usb2/core/usb2_config_td.h>
46#include <dev/usb2/core/usb2_debug.h>
47#include <dev/usb2/core/usb2_request.h>
48#include <dev/usb2/core/usb2_busdma.h>
49#include <dev/usb2/core/usb2_util.h>
50
51#include <dev/usb2/wlan/usb2_wlan.h>
52#include <dev/usb2/wlan/if_rumreg.h>
53#include <dev/usb2/wlan/if_rumvar.h>
54#include <dev/usb2/wlan/if_rumfw.h>
55
56#if USB_DEBUG
57static int rum_debug = 0;
58
59SYSCTL_NODE(_hw_usb2, OID_AUTO, rum, CTLFLAG_RW, 0, "USB rum");
60SYSCTL_INT(_hw_usb2_rum, OID_AUTO, debug, CTLFLAG_RW, &rum_debug, 0,
61    "Debug level");
62#endif
63
64/* prototypes */
65
66static device_probe_t rum_probe;
67static device_attach_t rum_attach;
68static device_detach_t rum_detach;
69
70static usb2_callback_t rum_bulk_read_callback;
71static usb2_callback_t rum_bulk_read_clear_stall_callback;
72static usb2_callback_t rum_bulk_write_callback;
73static usb2_callback_t rum_bulk_write_clear_stall_callback;
74
75static usb2_config_td_command_t rum_cfg_first_time_setup;
76static usb2_config_td_command_t rum_config_copy;
77static usb2_config_td_command_t rum_cfg_scan_start;
78static usb2_config_td_command_t rum_cfg_scan_end;
79static usb2_config_td_command_t rum_cfg_select_band;
80static usb2_config_td_command_t rum_cfg_set_chan;
81static usb2_config_td_command_t rum_cfg_enable_tsf_sync;
82static usb2_config_td_command_t rum_cfg_enable_mrr;
83static usb2_config_td_command_t rum_cfg_update_slot;
84static usb2_config_td_command_t rum_cfg_select_antenna;
85static usb2_config_td_command_t rum_cfg_set_txpreamble;
86static usb2_config_td_command_t rum_cfg_update_promisc;
87static usb2_config_td_command_t rum_cfg_pre_init;
88static usb2_config_td_command_t rum_cfg_init;
89static usb2_config_td_command_t rum_cfg_pre_stop;
90static usb2_config_td_command_t rum_cfg_stop;
91static usb2_config_td_command_t rum_cfg_amrr_timeout;
92static usb2_config_td_command_t rum_cfg_prepare_beacon;
93static usb2_config_td_command_t rum_cfg_newstate;
94
95static const char *rum_get_rf(uint32_t);
96static int	rum_ioctl_cb(struct ifnet *, u_long, caddr_t);
97static void	rum_std_command(struct ieee80211com *, usb2_config_td_command_t *);
98static void	rum_scan_start_cb(struct ieee80211com *);
99static void	rum_scan_end_cb(struct ieee80211com *);
100static void	rum_set_channel_cb(struct ieee80211com *);
101static uint16_t	rum_cfg_eeprom_read_2(struct rum_softc *, uint16_t);
102static uint32_t	rum_cfg_bbp_disbusy(struct rum_softc *);
103static uint32_t	rum_cfg_read(struct rum_softc *, uint16_t);
104static uint8_t	rum_cfg_bbp_init(struct rum_softc *);
105static uint8_t	rum_cfg_bbp_read(struct rum_softc *, uint8_t);
106static void	rum_cfg_amrr_start(struct rum_softc *);
107static void	rum_cfg_bbp_write(struct rum_softc *, uint8_t, uint8_t);
108static void	rum_cfg_do_request(struct rum_softc *,
109		    struct usb2_device_request *, void *);
110static void	rum_cfg_eeprom_read(struct rum_softc *, uint16_t, void *,
111		    uint16_t);
112static void	rum_cfg_load_microcode(struct rum_softc *, const uint8_t *,
113		    uint16_t);
114static void	rum_cfg_read_eeprom(struct rum_softc *);
115static void	rum_cfg_read_multi(struct rum_softc *, uint16_t, void *,
116		    uint16_t);
117static void	rum_cfg_rf_write(struct rum_softc *, uint8_t, uint32_t);
118static void	rum_cfg_set_bssid(struct rum_softc *, uint8_t *);
119static void	rum_cfg_set_macaddr(struct rum_softc *, uint8_t *);
120static void	rum_cfg_write(struct rum_softc *, uint16_t, uint32_t);
121static void	rum_cfg_write_multi(struct rum_softc *, uint16_t, void *,
122		    uint16_t);
123static void	rum_end_of_commands(struct rum_softc *);
124static void	rum_init_cb(void *);
125static void	rum_start_cb(struct ifnet *);
126static void	rum_watchdog(void *);
127static uint8_t	rum_get_rssi(struct rum_softc *, uint8_t);
128static struct ieee80211vap *rum_vap_create(struct ieee80211com *,
129		    const char[], int, int, int, const uint8_t[],
130		    const uint8_t[]);
131static void	rum_vap_delete(struct ieee80211vap *);
132static struct ieee80211_node *rum_node_alloc(struct ieee80211vap *,
133		    const uint8_t[]);
134static void	rum_newassoc(struct ieee80211_node *, int);
135static void	rum_cfg_disable_tsf_sync(struct rum_softc *);
136static void	rum_cfg_set_run(struct rum_softc *, struct rum_config_copy *);
137static void	rum_fill_write_queue(struct rum_softc *);
138static void	rum_tx_clean_queue(struct rum_softc *);
139static void	rum_tx_freem(struct mbuf *);
140static void	rum_tx_mgt(struct rum_softc *, struct mbuf *,
141		    struct ieee80211_node *);
142static struct ieee80211vap *rum_get_vap(struct rum_softc *);
143static void	rum_tx_data(struct rum_softc *, struct mbuf *,
144		    struct ieee80211_node *);
145static void	rum_tx_prot(struct rum_softc *, const struct mbuf *,
146		    struct ieee80211_node *, uint8_t, uint16_t);
147static void	rum_tx_raw(struct rum_softc *, struct mbuf *,
148		    struct ieee80211_node *,
149		    const struct ieee80211_bpf_params *);
150static int	rum_raw_xmit_cb(struct ieee80211_node *, struct mbuf *,
151		    const struct ieee80211_bpf_params *);
152static void	rum_setup_desc_and_tx(struct rum_softc *, struct mbuf *,
153		    uint32_t, uint16_t, uint16_t);
154static int	rum_newstate_cb(struct ieee80211vap *,
155		    enum ieee80211_state nstate, int arg);
156static void	rum_update_mcast_cb(struct ifnet *);
157static void	rum_update_promisc_cb(struct ifnet *);
158
159/* various supported device vendors/products */
160static const struct usb2_device_id rum_devs[] = {
161	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_HWU54DM, 0)},
162	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_RT2573_2, 0)},
163	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_RT2573_3, 0)},
164	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_RT2573_4, 0)},
165	{USB_VPI(USB_VENDOR_ABOCOM, USB_PRODUCT_ABOCOM_WUG2700, 0)},
166	{USB_VPI(USB_VENDOR_AMIT, USB_PRODUCT_AMIT_CGWLUSB2GO, 0)},
167	{USB_VPI(USB_VENDOR_ASUS, USB_PRODUCT_ASUS_RT2573_1, 0)},
168	{USB_VPI(USB_VENDOR_ASUS, USB_PRODUCT_ASUS_RT2573_2, 0)},
169	{USB_VPI(USB_VENDOR_BELKIN, USB_PRODUCT_BELKIN_F5D7050A, 0)},
170	{USB_VPI(USB_VENDOR_BELKIN, USB_PRODUCT_BELKIN_F5D9050V3, 0)},
171	{USB_VPI(USB_VENDOR_CISCOLINKSYS, USB_PRODUCT_CISCOLINKSYS_WUSB54GC, 0)},
172	{USB_VPI(USB_VENDOR_CISCOLINKSYS, USB_PRODUCT_CISCOLINKSYS_WUSB54GR, 0)},
173	{USB_VPI(USB_VENDOR_CONCEPTRONIC2, USB_PRODUCT_CONCEPTRONIC2_C54RU2, 0)},
174	{USB_VPI(USB_VENDOR_COREGA, USB_PRODUCT_COREGA_CGWLUSB2GL, 0)},
175	{USB_VPI(USB_VENDOR_COREGA, USB_PRODUCT_COREGA_CGWLUSB2GPX, 0)},
176	{USB_VPI(USB_VENDOR_DICKSMITH, USB_PRODUCT_DICKSMITH_CWD854F, 0)},
177	{USB_VPI(USB_VENDOR_DICKSMITH, USB_PRODUCT_DICKSMITH_RT2573, 0)},
178	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_DWLG122C1, 0)},
179	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_WUA1340, 0)},
180	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_DWA111, 0)},
181	{USB_VPI(USB_VENDOR_DLINK2, USB_PRODUCT_DLINK2_DWA110, 0)},
182	{USB_VPI(USB_VENDOR_GIGABYTE, USB_PRODUCT_GIGABYTE_GNWB01GS, 0)},
183	{USB_VPI(USB_VENDOR_GIGABYTE, USB_PRODUCT_GIGABYTE_GNWI05GS, 0)},
184	{USB_VPI(USB_VENDOR_GIGASET, USB_PRODUCT_GIGASET_RT2573, 0)},
185	{USB_VPI(USB_VENDOR_GOODWAY, USB_PRODUCT_GOODWAY_RT2573, 0)},
186	{USB_VPI(USB_VENDOR_GUILLEMOT, USB_PRODUCT_GUILLEMOT_HWGUSB254LB, 0)},
187	{USB_VPI(USB_VENDOR_GUILLEMOT, USB_PRODUCT_GUILLEMOT_HWGUSB254V2AP, 0)},
188	{USB_VPI(USB_VENDOR_HUAWEI3COM, USB_PRODUCT_HUAWEI3COM_WUB320G, 0)},
189	{USB_VPI(USB_VENDOR_MELCO, USB_PRODUCT_MELCO_G54HP, 0)},
190	{USB_VPI(USB_VENDOR_MELCO, USB_PRODUCT_MELCO_SG54HP, 0)},
191	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_1, 0)},
192	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_2, 0)},
193	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_3, 0)},
194	{USB_VPI(USB_VENDOR_MSI, USB_PRODUCT_MSI_RT2573_4, 0)},
195	{USB_VPI(USB_VENDOR_NOVATECH, USB_PRODUCT_NOVATECH_RT2573, 0)},
196	{USB_VPI(USB_VENDOR_PLANEX2, USB_PRODUCT_PLANEX2_GWUS54HP, 0)},
197	{USB_VPI(USB_VENDOR_PLANEX2, USB_PRODUCT_PLANEX2_GWUS54MINI2, 0)},
198	{USB_VPI(USB_VENDOR_PLANEX2, USB_PRODUCT_PLANEX2_GWUSMM, 0)},
199	{USB_VPI(USB_VENDOR_QCOM, USB_PRODUCT_QCOM_RT2573, 0)},
200	{USB_VPI(USB_VENDOR_QCOM, USB_PRODUCT_QCOM_RT2573_2, 0)},
201	{USB_VPI(USB_VENDOR_RALINK, USB_PRODUCT_RALINK_RT2573, 0)},
202	{USB_VPI(USB_VENDOR_RALINK, USB_PRODUCT_RALINK_RT2573_2, 0)},
203	{USB_VPI(USB_VENDOR_RALINK, USB_PRODUCT_RALINK_RT2671, 0)},
204	{USB_VPI(USB_VENDOR_SITECOMEU, USB_PRODUCT_SITECOMEU_WL113R2, 0)},
205	{USB_VPI(USB_VENDOR_SITECOMEU, USB_PRODUCT_SITECOMEU_WL172, 0)},
206	{USB_VPI(USB_VENDOR_SPARKLAN, USB_PRODUCT_SPARKLAN_RT2573, 0)},
207	{USB_VPI(USB_VENDOR_SURECOM, USB_PRODUCT_SURECOM_RT2573, 0)},
208};
209
210struct rum_def_mac {
211	uint32_t reg;
212	uint32_t val;
213};
214
215static const struct rum_def_mac rum_def_mac[] = {
216	{RT2573_TXRX_CSR0, 0x025fb032},
217	{RT2573_TXRX_CSR1, 0x9eaa9eaf},
218	{RT2573_TXRX_CSR2, 0x8a8b8c8d},
219	{RT2573_TXRX_CSR3, 0x00858687},
220	{RT2573_TXRX_CSR7, 0x2e31353b},
221	{RT2573_TXRX_CSR8, 0x2a2a2a2c},
222	{RT2573_TXRX_CSR15, 0x0000000f},
223	{RT2573_MAC_CSR6, 0x00000fff},
224	{RT2573_MAC_CSR8, 0x016c030a},
225	{RT2573_MAC_CSR10, 0x00000718},
226	{RT2573_MAC_CSR12, 0x00000004},
227	{RT2573_MAC_CSR13, 0x00007f00},
228	{RT2573_SEC_CSR0, 0x00000000},
229	{RT2573_SEC_CSR1, 0x00000000},
230	{RT2573_SEC_CSR5, 0x00000000},
231	{RT2573_PHY_CSR1, 0x000023b0},
232	{RT2573_PHY_CSR5, 0x00040a06},
233	{RT2573_PHY_CSR6, 0x00080606},
234	{RT2573_PHY_CSR7, 0x00000408},
235	{RT2573_AIFSN_CSR, 0x00002273},
236	{RT2573_CWMIN_CSR, 0x00002344},
237	{RT2573_CWMAX_CSR, 0x000034aa}
238};
239
240struct rum_def_bbp {
241	uint8_t	reg;
242	uint8_t	val;
243};
244
245static const struct rum_def_bbp rum_def_bbp[] = {
246	{3, 0x80},
247	{15, 0x30},
248	{17, 0x20},
249	{21, 0xc8},
250	{22, 0x38},
251	{23, 0x06},
252	{24, 0xfe},
253	{25, 0x0a},
254	{26, 0x0d},
255	{32, 0x0b},
256	{34, 0x12},
257	{37, 0x07},
258	{39, 0xf8},
259	{41, 0x60},
260	{53, 0x10},
261	{54, 0x18},
262	{60, 0x10},
263	{61, 0x04},
264	{62, 0x04},
265	{75, 0xfe},
266	{86, 0xfe},
267	{88, 0xfe},
268	{90, 0x0f},
269	{99, 0x00},
270	{102, 0x16},
271	{107, 0x04}
272};
273
274struct rfprog {
275	uint8_t	chan;
276	uint32_t r1, r2, r3, r4;
277};
278
279static const struct rfprog rum_rf5226[] = {
280	{1, 0x00b03, 0x001e1, 0x1a014, 0x30282},
281	{2, 0x00b03, 0x001e1, 0x1a014, 0x30287},
282	{3, 0x00b03, 0x001e2, 0x1a014, 0x30282},
283	{4, 0x00b03, 0x001e2, 0x1a014, 0x30287},
284	{5, 0x00b03, 0x001e3, 0x1a014, 0x30282},
285	{6, 0x00b03, 0x001e3, 0x1a014, 0x30287},
286	{7, 0x00b03, 0x001e4, 0x1a014, 0x30282},
287	{8, 0x00b03, 0x001e4, 0x1a014, 0x30287},
288	{9, 0x00b03, 0x001e5, 0x1a014, 0x30282},
289	{10, 0x00b03, 0x001e5, 0x1a014, 0x30287},
290	{11, 0x00b03, 0x001e6, 0x1a014, 0x30282},
291	{12, 0x00b03, 0x001e6, 0x1a014, 0x30287},
292	{13, 0x00b03, 0x001e7, 0x1a014, 0x30282},
293	{14, 0x00b03, 0x001e8, 0x1a014, 0x30284},
294
295	{34, 0x00b03, 0x20266, 0x36014, 0x30282},
296	{38, 0x00b03, 0x20267, 0x36014, 0x30284},
297	{42, 0x00b03, 0x20268, 0x36014, 0x30286},
298	{46, 0x00b03, 0x20269, 0x36014, 0x30288},
299
300	{36, 0x00b03, 0x00266, 0x26014, 0x30288},
301	{40, 0x00b03, 0x00268, 0x26014, 0x30280},
302	{44, 0x00b03, 0x00269, 0x26014, 0x30282},
303	{48, 0x00b03, 0x0026a, 0x26014, 0x30284},
304	{52, 0x00b03, 0x0026b, 0x26014, 0x30286},
305	{56, 0x00b03, 0x0026c, 0x26014, 0x30288},
306	{60, 0x00b03, 0x0026e, 0x26014, 0x30280},
307	{64, 0x00b03, 0x0026f, 0x26014, 0x30282},
308
309	{100, 0x00b03, 0x0028a, 0x2e014, 0x30280},
310	{104, 0x00b03, 0x0028b, 0x2e014, 0x30282},
311	{108, 0x00b03, 0x0028c, 0x2e014, 0x30284},
312	{112, 0x00b03, 0x0028d, 0x2e014, 0x30286},
313	{116, 0x00b03, 0x0028e, 0x2e014, 0x30288},
314	{120, 0x00b03, 0x002a0, 0x2e014, 0x30280},
315	{124, 0x00b03, 0x002a1, 0x2e014, 0x30282},
316	{128, 0x00b03, 0x002a2, 0x2e014, 0x30284},
317	{132, 0x00b03, 0x002a3, 0x2e014, 0x30286},
318	{136, 0x00b03, 0x002a4, 0x2e014, 0x30288},
319	{140, 0x00b03, 0x002a6, 0x2e014, 0x30280},
320
321	{149, 0x00b03, 0x002a8, 0x2e014, 0x30287},
322	{153, 0x00b03, 0x002a9, 0x2e014, 0x30289},
323	{157, 0x00b03, 0x002ab, 0x2e014, 0x30281},
324	{161, 0x00b03, 0x002ac, 0x2e014, 0x30283},
325	{165, 0x00b03, 0x002ad, 0x2e014, 0x30285}
326};
327
328static const struct rfprog rum_rf5225[] = {
329	{1, 0x00b33, 0x011e1, 0x1a014, 0x30282},
330	{2, 0x00b33, 0x011e1, 0x1a014, 0x30287},
331	{3, 0x00b33, 0x011e2, 0x1a014, 0x30282},
332	{4, 0x00b33, 0x011e2, 0x1a014, 0x30287},
333	{5, 0x00b33, 0x011e3, 0x1a014, 0x30282},
334	{6, 0x00b33, 0x011e3, 0x1a014, 0x30287},
335	{7, 0x00b33, 0x011e4, 0x1a014, 0x30282},
336	{8, 0x00b33, 0x011e4, 0x1a014, 0x30287},
337	{9, 0x00b33, 0x011e5, 0x1a014, 0x30282},
338	{10, 0x00b33, 0x011e5, 0x1a014, 0x30287},
339	{11, 0x00b33, 0x011e6, 0x1a014, 0x30282},
340	{12, 0x00b33, 0x011e6, 0x1a014, 0x30287},
341	{13, 0x00b33, 0x011e7, 0x1a014, 0x30282},
342	{14, 0x00b33, 0x011e8, 0x1a014, 0x30284},
343
344	{34, 0x00b33, 0x01266, 0x26014, 0x30282},
345	{38, 0x00b33, 0x01267, 0x26014, 0x30284},
346	{42, 0x00b33, 0x01268, 0x26014, 0x30286},
347	{46, 0x00b33, 0x01269, 0x26014, 0x30288},
348
349	{36, 0x00b33, 0x01266, 0x26014, 0x30288},
350	{40, 0x00b33, 0x01268, 0x26014, 0x30280},
351	{44, 0x00b33, 0x01269, 0x26014, 0x30282},
352	{48, 0x00b33, 0x0126a, 0x26014, 0x30284},
353	{52, 0x00b33, 0x0126b, 0x26014, 0x30286},
354	{56, 0x00b33, 0x0126c, 0x26014, 0x30288},
355	{60, 0x00b33, 0x0126e, 0x26014, 0x30280},
356	{64, 0x00b33, 0x0126f, 0x26014, 0x30282},
357
358	{100, 0x00b33, 0x0128a, 0x2e014, 0x30280},
359	{104, 0x00b33, 0x0128b, 0x2e014, 0x30282},
360	{108, 0x00b33, 0x0128c, 0x2e014, 0x30284},
361	{112, 0x00b33, 0x0128d, 0x2e014, 0x30286},
362	{116, 0x00b33, 0x0128e, 0x2e014, 0x30288},
363	{120, 0x00b33, 0x012a0, 0x2e014, 0x30280},
364	{124, 0x00b33, 0x012a1, 0x2e014, 0x30282},
365	{128, 0x00b33, 0x012a2, 0x2e014, 0x30284},
366	{132, 0x00b33, 0x012a3, 0x2e014, 0x30286},
367	{136, 0x00b33, 0x012a4, 0x2e014, 0x30288},
368	{140, 0x00b33, 0x012a6, 0x2e014, 0x30280},
369
370	{149, 0x00b33, 0x012a8, 0x2e014, 0x30287},
371	{153, 0x00b33, 0x012a9, 0x2e014, 0x30289},
372	{157, 0x00b33, 0x012ab, 0x2e014, 0x30281},
373	{161, 0x00b33, 0x012ac, 0x2e014, 0x30283},
374	{165, 0x00b33, 0x012ad, 0x2e014, 0x30285}
375};
376
377static const struct usb2_config rum_config[RUM_N_TRANSFER] = {
378	[RUM_BULK_DT_WR] = {
379		.type = UE_BULK,
380		.endpoint = UE_ADDR_ANY,
381		.direction = UE_DIR_OUT,
382		.mh.bufsize = (MCLBYTES + RT2573_TX_DESC_SIZE + 8),
383		.mh.flags = {.pipe_bof = 1,.force_short_xfer = 1,},
384		.mh.callback = &rum_bulk_write_callback,
385		.mh.timeout = 5000,	/* ms */
386	},
387
388	[RUM_BULK_DT_RD] = {
389		.type = UE_BULK,
390		.endpoint = UE_ADDR_ANY,
391		.direction = UE_DIR_IN,
392		.mh.bufsize = (MCLBYTES + RT2573_RX_DESC_SIZE),
393		.mh.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
394		.mh.callback = &rum_bulk_read_callback,
395	},
396
397	[RUM_BULK_CS_WR] = {
398		.type = UE_CONTROL,
399		.endpoint = 0x00,	/* Control pipe */
400		.direction = UE_DIR_ANY,
401		.mh.bufsize = sizeof(struct usb2_device_request),
402		.mh.callback = &rum_bulk_write_clear_stall_callback,
403		.mh.timeout = 1000,	/* 1 second */
404		.mh.interval = 50,	/* 50ms */
405	},
406
407	[RUM_BULK_CS_RD] = {
408		.type = UE_CONTROL,
409		.endpoint = 0x00,	/* Control pipe */
410		.direction = UE_DIR_ANY,
411		.mh.bufsize = sizeof(struct usb2_device_request),
412		.mh.callback = &rum_bulk_read_clear_stall_callback,
413		.mh.timeout = 1000,	/* 1 second */
414		.mh.interval = 50,	/* 50ms */
415	},
416};
417
418static devclass_t rum_devclass;
419
420static device_method_t rum_methods[] = {
421	DEVMETHOD(device_probe, rum_probe),
422	DEVMETHOD(device_attach, rum_attach),
423	DEVMETHOD(device_detach, rum_detach),
424	{0, 0}
425};
426
427static driver_t rum_driver = {
428	.name = "rum",
429	.methods = rum_methods,
430	.size = sizeof(struct rum_softc),
431};
432
433DRIVER_MODULE(rum, ushub, rum_driver, rum_devclass, NULL, 0);
434MODULE_DEPEND(rum, usb2_wlan, 1, 1, 1);
435MODULE_DEPEND(rum, usb2_core, 1, 1, 1);
436MODULE_DEPEND(rum, wlan, 1, 1, 1);
437MODULE_DEPEND(rum, wlan_amrr, 1, 1, 1);
438
439static int
440rum_probe(device_t dev)
441{
442	struct usb2_attach_arg *uaa = device_get_ivars(dev);
443
444	if (uaa->usb2_mode != USB_MODE_HOST) {
445		return (ENXIO);
446	}
447	if (uaa->info.bConfigIndex != 0) {
448		return (ENXIO);
449	}
450	if (uaa->info.bIfaceIndex != RT2573_IFACE_INDEX) {
451		return (ENXIO);
452	}
453	return (usb2_lookup_id_by_uaa(rum_devs, sizeof(rum_devs), uaa));
454}
455
456static int
457rum_attach(device_t dev)
458{
459	struct usb2_attach_arg *uaa = device_get_ivars(dev);
460	struct rum_softc *sc = device_get_softc(dev);
461	int error;
462	uint8_t iface_index;
463
464	if (sc == NULL) {
465		return (ENOMEM);
466	}
467	device_set_usb2_desc(dev);
468
469	mtx_init(&sc->sc_mtx, "rum lock", MTX_NETWORK_LOCK,
470	    MTX_DEF | MTX_RECURSE);
471
472	snprintf(sc->sc_name, sizeof(sc->sc_name), "%s",
473	    device_get_nameunit(dev));
474
475	sc->sc_udev = uaa->device;
476	sc->sc_unit = device_get_unit(dev);
477
478	usb2_callout_init_mtx(&sc->sc_watchdog, &sc->sc_mtx, 0);
479
480	iface_index = RT2573_IFACE_INDEX;
481	error = usb2_transfer_setup(uaa->device, &iface_index,
482	    sc->sc_xfer, rum_config, RUM_N_TRANSFER, sc, &sc->sc_mtx);
483	if (error) {
484		device_printf(dev, "could not allocate USB transfers, "
485		    "err=%s\n", usb2_errstr(error));
486		goto detach;
487	}
488	error = usb2_config_td_setup(&sc->sc_config_td, sc, &sc->sc_mtx,
489	    &rum_end_of_commands,
490	    sizeof(struct usb2_config_td_cc), 24);
491	if (error) {
492		device_printf(dev, "could not setup config "
493		    "thread!\n");
494		goto detach;
495	}
496	mtx_lock(&sc->sc_mtx);
497
498	/* start setup */
499
500	usb2_config_td_queue_command
501	    (&sc->sc_config_td, NULL, &rum_cfg_first_time_setup, 0, 0);
502
503	rum_watchdog(sc);
504	mtx_unlock(&sc->sc_mtx);
505	return (0);			/* success */
506
507detach:
508	rum_detach(dev);
509	return (ENXIO);			/* failure */
510}
511
512static int
513rum_detach(device_t dev)
514{
515	struct rum_softc *sc = device_get_softc(dev);
516	struct ieee80211com *ic;
517	struct ifnet *ifp;
518
519	usb2_config_td_drain(&sc->sc_config_td);
520
521	mtx_lock(&sc->sc_mtx);
522
523	usb2_callout_stop(&sc->sc_watchdog);
524
525	rum_cfg_pre_stop(sc, NULL, 0);
526
527	ifp = sc->sc_ifp;
528	ic = ifp->if_l2com;
529
530	mtx_unlock(&sc->sc_mtx);
531
532	/* stop all USB transfers first */
533	usb2_transfer_unsetup(sc->sc_xfer, RUM_N_TRANSFER);
534
535	/* get rid of any late children */
536	bus_generic_detach(dev);
537
538	if (ifp) {
539		bpfdetach(ifp);
540		ieee80211_ifdetach(ic);
541		if_free(ifp);
542	}
543	usb2_config_td_unsetup(&sc->sc_config_td);
544
545	usb2_callout_drain(&sc->sc_watchdog);
546
547	mtx_destroy(&sc->sc_mtx);
548
549	return (0);
550}
551
552static void
553rum_cfg_do_request(struct rum_softc *sc, struct usb2_device_request *req,
554    void *data)
555{
556	uint16_t length;
557	usb2_error_t err;
558
559repeat:
560
561	if (usb2_config_td_is_gone(&sc->sc_config_td)) {
562		goto error;
563	}
564	err = usb2_do_request_flags
565	    (sc->sc_udev, &sc->sc_mtx, req, data, 0, NULL, 1000);
566
567	if (err) {
568
569		DPRINTF("device request failed, err=%s "
570		    "(ignored)\n", usb2_errstr(err));
571
572		/* wait a little before next try */
573		if (usb2_config_td_sleep(&sc->sc_config_td, hz / 4)) {
574			goto error;
575		}
576		/* try until we are detached */
577		goto repeat;
578
579error:
580		/* the device has been detached */
581		length = UGETW(req->wLength);
582
583		if ((req->bmRequestType & UT_READ) && length) {
584			bzero(data, length);
585		}
586	}
587}
588
589static void
590rum_cfg_eeprom_read(struct rum_softc *sc, uint16_t addr, void *buf, uint16_t len)
591{
592	struct usb2_device_request req;
593
594	req.bmRequestType = UT_READ_VENDOR_DEVICE;
595	req.bRequest = RT2573_READ_EEPROM;
596	USETW(req.wValue, 0);
597	USETW(req.wIndex, addr);
598	USETW(req.wLength, len);
599
600	rum_cfg_do_request(sc, &req, buf);
601}
602
603static uint16_t
604rum_cfg_eeprom_read_2(struct rum_softc *sc, uint16_t addr)
605{
606	uint16_t tmp;
607
608	rum_cfg_eeprom_read(sc, addr, &tmp, sizeof(tmp));
609	return (le16toh(tmp));
610}
611
612static uint32_t
613rum_cfg_read(struct rum_softc *sc, uint16_t reg)
614{
615	uint32_t val;
616
617	rum_cfg_read_multi(sc, reg, &val, sizeof(val));
618	return (le32toh(val));
619}
620
621static void
622rum_cfg_read_multi(struct rum_softc *sc, uint16_t reg, void *buf, uint16_t len)
623{
624	struct usb2_device_request req;
625
626	req.bmRequestType = UT_READ_VENDOR_DEVICE;
627	req.bRequest = RT2573_READ_MULTI_MAC;
628	USETW(req.wValue, 0);
629	USETW(req.wIndex, reg);
630	USETW(req.wLength, len);
631
632	rum_cfg_do_request(sc, &req, buf);
633}
634
635static void
636rum_cfg_write(struct rum_softc *sc, uint16_t reg, uint32_t val)
637{
638	uint32_t tmp = htole32(val);
639
640	rum_cfg_write_multi(sc, reg, &tmp, sizeof(tmp));
641}
642
643static void
644rum_cfg_write_multi(struct rum_softc *sc, uint16_t reg, void *buf, uint16_t len)
645{
646	struct usb2_device_request req;
647
648	req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
649	req.bRequest = RT2573_WRITE_MULTI_MAC;
650	USETW(req.wValue, 0);
651	USETW(req.wIndex, reg);
652	USETW(req.wLength, len);
653
654	rum_cfg_do_request(sc, &req, buf);
655}
656
657static uint32_t
658rum_cfg_bbp_disbusy(struct rum_softc *sc)
659{
660	uint32_t tmp;
661	uint8_t to;
662
663	for (to = 0;; to++) {
664		if (to < 100) {
665			tmp = rum_cfg_read(sc, RT2573_PHY_CSR3);
666
667			if ((tmp & RT2573_BBP_BUSY) == 0) {
668				return (tmp);
669			}
670			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
671				break;
672			}
673		} else {
674			break;
675		}
676	}
677	DPRINTF("could not disbusy BBP\n");
678	return (RT2573_BBP_BUSY);	/* failure */
679}
680
681static void
682rum_cfg_bbp_write(struct rum_softc *sc, uint8_t reg, uint8_t val)
683{
684	uint32_t tmp;
685
686	if (rum_cfg_bbp_disbusy(sc) & RT2573_BBP_BUSY) {
687		return;
688	}
689	tmp = RT2573_BBP_BUSY | ((reg & 0x7f) << 8) | val;
690	rum_cfg_write(sc, RT2573_PHY_CSR3, tmp);
691}
692
693static uint8_t
694rum_cfg_bbp_read(struct rum_softc *sc, uint8_t reg)
695{
696	uint32_t val;
697
698	if (rum_cfg_bbp_disbusy(sc) & RT2573_BBP_BUSY) {
699		return (0);
700	}
701	val = RT2573_BBP_BUSY | RT2573_BBP_READ | (reg << 8);
702	rum_cfg_write(sc, RT2573_PHY_CSR3, val);
703
704	val = rum_cfg_bbp_disbusy(sc);
705	return (val & 0xff);
706}
707
708static void
709rum_cfg_rf_write(struct rum_softc *sc, uint8_t reg, uint32_t val)
710{
711	uint32_t tmp;
712	uint8_t to;
713
714	reg &= 3;
715
716	for (to = 0;; to++) {
717		if (to < 100) {
718			tmp = rum_cfg_read(sc, RT2573_PHY_CSR4);
719			if (!(tmp & RT2573_RF_BUSY)) {
720				break;
721			}
722			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
723				return;
724			}
725		} else {
726			DPRINTF("could not write to RF\n");
727			return;
728		}
729	}
730
731	tmp = RT2573_RF_BUSY | RT2573_RF_20BIT | ((val & 0xfffff) << 2) | reg;
732	rum_cfg_write(sc, RT2573_PHY_CSR4, tmp);
733
734	DPRINTFN(16, "RF R[%u] <- 0x%05x\n", reg, val & 0xfffff);
735}
736
737static void
738rum_cfg_first_time_setup(struct rum_softc *sc,
739    struct usb2_config_td_cc *cc, uint16_t refcount)
740{
741	struct ieee80211com *ic;
742	struct ifnet *ifp;
743	uint32_t tmp;
744	uint16_t i;
745	uint8_t bands;
746
747	/* setup RX tap header */
748	sc->sc_rxtap_len = sizeof(sc->sc_rxtap);
749	sc->sc_rxtap.wr_ihdr.it_len = htole16(sc->sc_rxtap_len);
750	sc->sc_rxtap.wr_ihdr.it_present = htole32(RT2573_RX_RADIOTAP_PRESENT);
751
752	/* setup TX tap header */
753	sc->sc_txtap_len = sizeof(sc->sc_txtap);
754	sc->sc_txtap.wt_ihdr.it_len = htole16(sc->sc_txtap_len);
755	sc->sc_txtap.wt_ihdr.it_present = htole32(RT2573_TX_RADIOTAP_PRESENT);
756
757	/* retrieve RT2573 rev. no */
758	for (i = 0; i < 100; i++) {
759
760		tmp = rum_cfg_read(sc, RT2573_MAC_CSR0);
761		if (tmp != 0) {
762			break;
763		}
764		/* wait a little */
765		if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
766			/* device detached */
767			goto done;
768		}
769	}
770
771	if (tmp == 0) {
772		DPRINTF("chip is maybe not ready\n");
773	}
774	/* retrieve MAC address and various other things from EEPROM */
775	rum_cfg_read_eeprom(sc);
776
777	printf("%s: MAC/BBP RT2573 (rev 0x%05x), RF %s\n",
778	    sc->sc_name, tmp, rum_get_rf(sc->sc_rf_rev));
779
780	rum_cfg_load_microcode(sc, rt2573_ucode, sizeof(rt2573_ucode));
781
782	mtx_unlock(&sc->sc_mtx);
783
784	ifp = if_alloc(IFT_IEEE80211);
785
786	mtx_lock(&sc->sc_mtx);
787
788	if (ifp == NULL) {
789		DPRINTFN(0, "could not if_alloc()!\n");
790		goto done;
791	}
792	sc->sc_ifp = ifp;
793	ic = ifp->if_l2com;
794
795	ifp->if_softc = sc;
796	if_initname(ifp, "rum", sc->sc_unit);
797	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
798	ifp->if_init = &rum_init_cb;
799	ifp->if_ioctl = &rum_ioctl_cb;
800	ifp->if_start = &rum_start_cb;
801	ifp->if_watchdog = NULL;
802	IFQ_SET_MAXLEN(&ifp->if_snd, IFQ_MAXLEN);
803	ifp->if_snd.ifq_drv_maxlen = IFQ_MAXLEN;
804	IFQ_SET_READY(&ifp->if_snd);
805
806	bcopy(sc->sc_myaddr, ic->ic_myaddr, sizeof(ic->ic_myaddr));
807
808	ic->ic_ifp = ifp;
809	ic->ic_phytype = IEEE80211_T_OFDM;	/* not only, but not used */
810	ic->ic_opmode = IEEE80211_M_STA;
811
812	/* set device capabilities */
813	ic->ic_caps =
814	    IEEE80211_C_STA		/* station mode supported */
815	    | IEEE80211_C_IBSS		/* IBSS mode supported */
816	    | IEEE80211_C_MONITOR	/* monitor mode supported */
817	    | IEEE80211_C_HOSTAP	/* HostAp mode supported */
818	    | IEEE80211_C_TXPMGT	/* tx power management */
819	    | IEEE80211_C_SHPREAMBLE	/* short preamble supported */
820	    | IEEE80211_C_SHSLOT	/* short slot time supported */
821	    | IEEE80211_C_BGSCAN	/* bg scanning supported */
822	    | IEEE80211_C_WPA		/* 802.11i */
823	    ;
824
825	bands = 0;
826	setbit(&bands, IEEE80211_MODE_11B);
827	setbit(&bands, IEEE80211_MODE_11G);
828	ieee80211_init_channels(ic, NULL, &bands);
829
830	if ((sc->sc_rf_rev == RT2573_RF_5225) ||
831	    (sc->sc_rf_rev == RT2573_RF_5226)) {
832
833		struct ieee80211_channel *c;
834
835		/* set supported .11a channels */
836		for (i = 34; i <= 46; i += 4) {
837			c = ic->ic_channels + (ic->ic_nchans++);
838			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
839			c->ic_flags = IEEE80211_CHAN_A;
840			c->ic_ieee = i;
841		}
842		for (i = 36; i <= 64; i += 4) {
843			c = ic->ic_channels + (ic->ic_nchans++);
844			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
845			c->ic_flags = IEEE80211_CHAN_A;
846			c->ic_ieee = i;
847		}
848		for (i = 100; i <= 140; i += 4) {
849			c = ic->ic_channels + (ic->ic_nchans++);
850			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
851			c->ic_flags = IEEE80211_CHAN_A;
852			c->ic_ieee = i;
853		}
854		for (i = 149; i <= 165; i += 4) {
855			c = ic->ic_channels + (ic->ic_nchans++);
856			c->ic_freq = ieee80211_ieee2mhz(i, IEEE80211_CHAN_5GHZ);
857			c->ic_flags = IEEE80211_CHAN_A;
858			c->ic_ieee = i;
859		}
860	}
861	mtx_unlock(&sc->sc_mtx);
862
863	ieee80211_ifattach(ic);
864
865	mtx_lock(&sc->sc_mtx);
866
867	ic->ic_newassoc = &rum_newassoc;
868	ic->ic_raw_xmit = &rum_raw_xmit_cb;
869	ic->ic_node_alloc = &rum_node_alloc;
870	ic->ic_update_mcast = &rum_update_mcast_cb;
871	ic->ic_update_promisc = &rum_update_promisc_cb;
872	ic->ic_scan_start = &rum_scan_start_cb;
873	ic->ic_scan_end = &rum_scan_end_cb;
874	ic->ic_set_channel = &rum_set_channel_cb;
875	ic->ic_vap_create = &rum_vap_create;
876	ic->ic_vap_delete = &rum_vap_delete;
877
878	sc->sc_rates = ieee80211_get_ratetable(ic->ic_curchan);
879
880	mtx_unlock(&sc->sc_mtx);
881
882	bpfattach(ifp, DLT_IEEE802_11_RADIO,
883	    sizeof(struct ieee80211_frame) + sizeof(sc->sc_txtap));
884
885	if (bootverbose) {
886		ieee80211_announce(ic);
887	}
888	mtx_lock(&sc->sc_mtx);
889done:
890	return;
891}
892
893static void
894rum_end_of_commands(struct rum_softc *sc)
895{
896	sc->sc_flags &= ~RUM_FLAG_WAIT_COMMAND;
897
898	/* start write transfer, if not started */
899	usb2_transfer_start(sc->sc_xfer[RUM_BULK_DT_WR]);
900}
901
902static void
903rum_config_copy_chan(struct rum_config_copy_chan *cc,
904    struct ieee80211com *ic, struct ieee80211_channel *c)
905{
906	if (!c)
907		return;
908	cc->chan_to_ieee =
909	    ieee80211_chan2ieee(ic, c);
910	if (c != IEEE80211_CHAN_ANYC) {
911		cc->chan_to_mode =
912		    ieee80211_chan2mode(c);
913		if (IEEE80211_IS_CHAN_B(c))
914			cc->chan_is_b = 1;
915		if (IEEE80211_IS_CHAN_A(c))
916			cc->chan_is_a = 1;
917		if (IEEE80211_IS_CHAN_2GHZ(c))
918			cc->chan_is_2ghz = 1;
919		if (IEEE80211_IS_CHAN_5GHZ(c))
920			cc->chan_is_5ghz = 1;
921		if (IEEE80211_IS_CHAN_ANYG(c))
922			cc->chan_is_g = 1;
923	}
924}
925
926static void
927rum_config_copy(struct rum_softc *sc,
928    struct usb2_config_td_cc *cc, uint16_t refcount)
929{
930	struct ifnet *ifp;
931	struct ieee80211com *ic;
932	struct ieee80211_node *ni;
933	struct ieee80211vap *vap;
934	const struct ieee80211_txparam *tp;
935
936	bzero(cc, sizeof(*cc));
937
938	ifp = sc->sc_ifp;
939	if (ifp) {
940		cc->if_flags = ifp->if_flags;
941		bcopy(ifp->if_broadcastaddr, cc->if_broadcastaddr,
942		    sizeof(cc->if_broadcastaddr));
943
944		ic = ifp->if_l2com;
945		if (ic) {
946			rum_config_copy_chan(&cc->ic_curchan, ic, ic->ic_curchan);
947			rum_config_copy_chan(&cc->ic_bsschan, ic, ic->ic_bsschan);
948			vap = TAILQ_FIRST(&ic->ic_vaps);
949			if (vap) {
950				ni = vap->iv_bss;
951				if (ni) {
952					cc->iv_bss.ni_intval = ni->ni_intval;
953					bcopy(ni->ni_bssid, cc->iv_bss.ni_bssid,
954					    sizeof(cc->iv_bss.ni_bssid));
955				}
956				tp = vap->iv_txparms + cc->ic_bsschan.chan_to_mode;
957				if (tp->ucastrate == IEEE80211_FIXED_RATE_NONE) {
958					cc->iv_bss.fixed_rate_none = 1;
959				}
960			}
961			cc->ic_opmode = ic->ic_opmode;
962			cc->ic_flags = ic->ic_flags;
963			cc->ic_txpowlimit = ic->ic_txpowlimit;
964			cc->ic_curmode = ic->ic_curmode;
965
966			bcopy(ic->ic_myaddr, cc->ic_myaddr,
967			    sizeof(cc->ic_myaddr));
968		}
969	}
970	sc->sc_flags |= RUM_FLAG_WAIT_COMMAND;
971}
972
973static const char *
974rum_get_rf(uint32_t rev)
975{
976	;				/* indent fix */
977	switch (rev) {
978	case RT2573_RF_2527:
979		return "RT2527 (MIMO XR)";
980	case RT2573_RF_2528:
981		return "RT2528";
982	case RT2573_RF_5225:
983		return "RT5225 (MIMO XR)";
984	case RT2573_RF_5226:
985		return "RT5226";
986	default:
987		return "unknown";
988	}
989}
990
991static void
992rum_bulk_read_callback(struct usb2_xfer *xfer)
993{
994	struct rum_softc *sc = xfer->priv_sc;
995	struct ifnet *ifp = sc->sc_ifp;
996	struct ieee80211com *ic = ifp->if_l2com;
997	struct ieee80211_node *ni;
998
999	struct mbuf *m = NULL;
1000	uint32_t flags;
1001	uint32_t max_len;
1002	uint8_t rssi = 0;
1003
1004	switch (USB_GET_STATE(xfer)) {
1005	case USB_ST_TRANSFERRED:
1006
1007		DPRINTFN(15, "rx done, actlen=%d\n", xfer->actlen);
1008
1009		if (xfer->actlen < (RT2573_RX_DESC_SIZE + IEEE80211_MIN_LEN)) {
1010			DPRINTF("too short transfer, "
1011			    "%d bytes\n", xfer->actlen);
1012			ifp->if_ierrors++;
1013			goto tr_setup;
1014		}
1015		usb2_copy_out(xfer->frbuffers, 0,
1016		    &sc->sc_rx_desc, RT2573_RX_DESC_SIZE);
1017
1018		flags = le32toh(sc->sc_rx_desc.flags);
1019
1020		if (flags & RT2573_RX_CRC_ERROR) {
1021			/*
1022		         * This should not happen since we did not
1023		         * request to receive those frames when we
1024		         * filled RAL_TXRX_CSR2:
1025		         */
1026			DPRINTFN(6, "PHY or CRC error\n");
1027			ifp->if_ierrors++;
1028			goto tr_setup;
1029		}
1030		m = m_getcl(M_DONTWAIT, MT_DATA, M_PKTHDR);
1031
1032		if (m == NULL) {
1033			DPRINTF("could not allocate mbuf\n");
1034			ifp->if_ierrors++;
1035			goto tr_setup;
1036		}
1037		max_len = (xfer->actlen - RT2573_RX_DESC_SIZE);
1038
1039		usb2_copy_out(xfer->frbuffers, RT2573_RX_DESC_SIZE,
1040		    m->m_data, max_len);
1041
1042		/* finalize mbuf */
1043		m->m_pkthdr.rcvif = ifp;
1044		m->m_pkthdr.len = m->m_len = (flags >> 16) & 0xfff;
1045
1046		if (m->m_len > max_len) {
1047			DPRINTF("invalid length in RX "
1048			    "descriptor, %u bytes, received %u bytes\n",
1049			    m->m_len, max_len);
1050			ifp->if_ierrors++;
1051			m_freem(m);
1052			m = NULL;
1053			goto tr_setup;
1054		}
1055		rssi = rum_get_rssi(sc, sc->sc_rx_desc.rssi);
1056
1057		DPRINTF("real length=%d bytes, rssi=%d\n", m->m_len, rssi);
1058
1059		if (bpf_peers_present(ifp->if_bpf)) {
1060			struct rum_rx_radiotap_header *tap = &sc->sc_rxtap;
1061
1062			tap->wr_flags = IEEE80211_RADIOTAP_F_FCS;
1063			tap->wr_rate = ieee80211_plcp2rate(sc->sc_rx_desc.rate,
1064			    (sc->sc_rx_desc.flags & htole32(RT2573_RX_OFDM)) ?
1065			    IEEE80211_T_OFDM : IEEE80211_T_CCK);
1066			tap->wr_chan_freq = htole16(ic->ic_curchan->ic_freq);
1067			tap->wr_chan_flags = htole16(ic->ic_curchan->ic_flags);
1068			tap->wr_antenna = sc->sc_rx_ant;
1069			tap->wr_antsignal = rssi;
1070
1071			bpf_mtap2(ifp->if_bpf, tap, sc->sc_rxtap_len, m);
1072		}
1073	case USB_ST_SETUP:
1074tr_setup:
1075
1076		if (sc->sc_flags & RUM_FLAG_READ_STALL) {
1077			usb2_transfer_start(sc->sc_xfer[RUM_BULK_CS_RD]);
1078		} else {
1079			xfer->frlengths[0] = xfer->max_data_length;
1080			usb2_start_hardware(xfer);
1081		}
1082
1083		/*
1084		 * At the end of a USB callback it is always safe to unlock
1085		 * the private mutex of a device! That is why we do the
1086		 * "ieee80211_input" here, and not some lines up!
1087		 */
1088		if (m) {
1089			mtx_unlock(&sc->sc_mtx);
1090
1091			ni = ieee80211_find_rxnode(ic, mtod(m, struct ieee80211_frame_min *));
1092			if (ni != NULL) {
1093				if (ieee80211_input(ni, m, rssi, RT2573_NOISE_FLOOR, 0)) {
1094					/* ignore */
1095				}
1096				/* node is no longer needed */
1097				ieee80211_free_node(ni);
1098			} else {
1099				if (ieee80211_input_all(ic, m, rssi, RT2573_NOISE_FLOOR, 0)) {
1100					/* ignore */
1101				}
1102			}
1103
1104			mtx_lock(&sc->sc_mtx);
1105		}
1106		return;
1107
1108	default:			/* Error */
1109		if (xfer->error != USB_ERR_CANCELLED) {
1110			/* try to clear stall first */
1111			sc->sc_flags |= RUM_FLAG_READ_STALL;
1112			usb2_transfer_start(sc->sc_xfer[RUM_BULK_CS_RD]);
1113		}
1114		return;
1115
1116	}
1117}
1118
1119static void
1120rum_bulk_read_clear_stall_callback(struct usb2_xfer *xfer)
1121{
1122	struct rum_softc *sc = xfer->priv_sc;
1123	struct usb2_xfer *xfer_other = sc->sc_xfer[RUM_BULK_DT_RD];
1124
1125	if (usb2_clear_stall_callback(xfer, xfer_other)) {
1126		DPRINTF("stall cleared\n");
1127		sc->sc_flags &= ~RUM_FLAG_READ_STALL;
1128		usb2_transfer_start(xfer_other);
1129	}
1130}
1131
1132static uint8_t
1133rum_plcp_signal(uint16_t rate)
1134{
1135	;				/* indent fix */
1136	switch (rate) {
1137		/* CCK rates (NB: not IEEE std, device-specific) */
1138	case 2:
1139		return (0x0);
1140	case 4:
1141		return (0x1);
1142	case 11:
1143		return (0x2);
1144	case 22:
1145		return (0x3);
1146
1147		/* OFDM rates (cf IEEE Std 802.11a-1999, pp. 14 Table 80) */
1148	case 12:
1149		return (0xb);
1150	case 18:
1151		return (0xf);
1152	case 24:
1153		return (0xa);
1154	case 36:
1155		return (0xe);
1156	case 48:
1157		return (0x9);
1158	case 72:
1159		return (0xd);
1160	case 96:
1161		return (0x8);
1162	case 108:
1163		return (0xc);
1164
1165		/* XXX unsupported/unknown rate */
1166	default:
1167		return (0xff);
1168	}
1169}
1170
1171/*
1172 * We assume that "m->m_pkthdr.rcvif" is pointing to the "ni" that
1173 * should be freed, when "rum_setup_desc_and_tx" is called.
1174 */
1175
1176static void
1177rum_setup_desc_and_tx(struct rum_softc *sc, struct mbuf *m, uint32_t flags,
1178    uint16_t xflags, uint16_t rate)
1179{
1180	struct ifnet *ifp = sc->sc_ifp;
1181	struct ieee80211com *ic = ifp->if_l2com;
1182	struct mbuf *mm;
1183	enum ieee80211_phytype phytype;
1184	uint16_t plcp_length;
1185	uint16_t len;
1186	uint8_t remainder;
1187	uint8_t is_beacon;
1188
1189	if (xflags & RT2573_TX_BEACON) {
1190		xflags &= ~RT2573_TX_BEACON;
1191		is_beacon = 1;
1192	} else {
1193		is_beacon = 0;
1194	}
1195
1196	if (sc->sc_tx_queue.ifq_len >= IFQ_MAXLEN) {
1197		/* free packet */
1198		rum_tx_freem(m);
1199		ifp->if_oerrors++;
1200		return;
1201	}
1202	if (!((sc->sc_flags & RUM_FLAG_LL_READY) &&
1203	    (sc->sc_flags & RUM_FLAG_HL_READY))) {
1204		/* free packet */
1205		rum_tx_freem(m);
1206		ifp->if_oerrors++;
1207		return;
1208	}
1209	if (rate < 2) {
1210		DPRINTF("rate < 2!\n");
1211
1212		/* avoid division by zero */
1213		rate = 2;
1214	}
1215	ic->ic_lastdata = ticks;
1216	if (bpf_peers_present(ifp->if_bpf)) {
1217		struct rum_tx_radiotap_header *tap = &sc->sc_txtap;
1218
1219		tap->wt_flags = 0;
1220		tap->wt_rate = rate;
1221		tap->wt_chan_freq = htole16(ic->ic_curchan->ic_freq);
1222		tap->wt_chan_flags = htole16(ic->ic_curchan->ic_flags);
1223		tap->wt_antenna = sc->sc_tx_ant;
1224
1225		bpf_mtap2(ifp->if_bpf, tap, sc->sc_txtap_len, m);
1226	}
1227	len = m->m_pkthdr.len;
1228
1229	flags |= RT2573_TX_VALID;
1230	flags |= (len << 16);
1231
1232	sc->sc_tx_desc.flags = htole32(flags);
1233	sc->sc_tx_desc.xflags = htole16(xflags);
1234
1235	sc->sc_tx_desc.wme = htole16(RT2573_QID(0) | RT2573_AIFSN(2) |
1236	    RT2573_LOGCWMIN(4) | RT2573_LOGCWMAX(10));
1237
1238	/* setup PLCP fields */
1239	sc->sc_tx_desc.plcp_signal = rum_plcp_signal(rate);
1240	sc->sc_tx_desc.plcp_service = 4;
1241
1242	len += IEEE80211_CRC_LEN;
1243
1244	phytype = ieee80211_rate2phytype(sc->sc_rates, rate);
1245
1246	if (phytype == IEEE80211_T_OFDM) {
1247		sc->sc_tx_desc.flags |= htole32(RT2573_TX_OFDM);
1248
1249		plcp_length = (len & 0xfff);
1250		sc->sc_tx_desc.plcp_length_hi = plcp_length >> 6;
1251		sc->sc_tx_desc.plcp_length_lo = plcp_length & 0x3f;
1252	} else {
1253		plcp_length = ((16 * len) + rate - 1) / rate;
1254		if (rate == 22) {
1255			remainder = (16 * len) % 22;
1256			if ((remainder != 0) && (remainder < 7)) {
1257				sc->sc_tx_desc.plcp_service |=
1258				    RT2573_PLCP_LENGEXT;
1259			}
1260		}
1261		sc->sc_tx_desc.plcp_length_hi = plcp_length >> 8;
1262		sc->sc_tx_desc.plcp_length_lo = plcp_length & 0xff;
1263
1264		if ((rate != 2) && (ic->ic_flags & IEEE80211_F_SHPREAMBLE)) {
1265			sc->sc_tx_desc.plcp_signal |= 0x08;
1266		}
1267	}
1268
1269	if (sizeof(sc->sc_tx_desc) > MHLEN) {
1270		DPRINTF("No room for header structure!\n");
1271		rum_tx_freem(m);
1272		return;
1273	}
1274	mm = m_gethdr(M_NOWAIT, MT_DATA);
1275	if (mm == NULL) {
1276		DPRINTF("Could not allocate header mbuf!\n");
1277		rum_tx_freem(m);
1278		return;
1279	}
1280	bcopy(&sc->sc_tx_desc, mm->m_data, sizeof(sc->sc_tx_desc));
1281	mm->m_len = sizeof(sc->sc_tx_desc);
1282	mm->m_next = m;
1283	mm->m_pkthdr.len = mm->m_len + m->m_pkthdr.len;
1284	mm->m_pkthdr.rcvif = NULL;
1285
1286	if (is_beacon) {
1287
1288		if (mm->m_pkthdr.len > sizeof(sc->sc_beacon_buf)) {
1289			DPRINTFN(0, "Truncating beacon"
1290			    ", %u bytes!\n", mm->m_pkthdr.len);
1291			mm->m_pkthdr.len = sizeof(sc->sc_beacon_buf);
1292		}
1293		m_copydata(mm, 0, mm->m_pkthdr.len, sc->sc_beacon_buf);
1294
1295		/* copy the first 24 bytes of Tx descriptor into NIC memory */
1296		rum_cfg_write_multi(sc, RT2573_HW_BEACON_BASE0,
1297		    sc->sc_beacon_buf, mm->m_pkthdr.len);
1298		rum_tx_freem(mm);
1299		return;
1300	}
1301	/* start write transfer, if not started */
1302	_IF_ENQUEUE(&sc->sc_tx_queue, mm);
1303
1304	usb2_transfer_start(sc->sc_xfer[RUM_BULK_DT_WR]);
1305}
1306
1307static void
1308rum_bulk_write_callback(struct usb2_xfer *xfer)
1309{
1310	struct rum_softc *sc = xfer->priv_sc;
1311	struct ifnet *ifp = sc->sc_ifp;
1312	struct mbuf *m;
1313	uint16_t temp_len;
1314	uint8_t align;
1315
1316	switch (USB_GET_STATE(xfer)) {
1317	case USB_ST_TRANSFERRED:
1318		DPRINTFN(11, "transfer complete\n");
1319
1320		ifp->if_opackets++;
1321
1322	case USB_ST_SETUP:
1323		if (sc->sc_flags & RUM_FLAG_WRITE_STALL) {
1324			usb2_transfer_start(sc->sc_xfer[RUM_BULK_CS_WR]);
1325			break;
1326		}
1327		if (sc->sc_flags & RUM_FLAG_WAIT_COMMAND) {
1328			/*
1329			 * don't send anything while a command is pending !
1330			 */
1331			break;
1332		}
1333		rum_fill_write_queue(sc);
1334
1335		_IF_DEQUEUE(&sc->sc_tx_queue, m);
1336
1337		if (m) {
1338
1339			if (m->m_pkthdr.len > (MCLBYTES + RT2573_TX_DESC_SIZE)) {
1340				DPRINTFN(0, "data overflow, %u bytes\n",
1341				    m->m_pkthdr.len);
1342				m->m_pkthdr.len = (MCLBYTES + RT2573_TX_DESC_SIZE);
1343			}
1344			usb2_m_copy_in(xfer->frbuffers, 0,
1345			    m, 0, m->m_pkthdr.len);
1346
1347			/* compute transfer length */
1348			temp_len = m->m_pkthdr.len;
1349
1350			/* make transfer length 32-bit aligned */
1351			align = (-(temp_len)) & 3;
1352
1353			/* check if we need to add four extra bytes */
1354			if (((temp_len + align) % 64) == 0) {
1355				align += 4;
1356			}
1357			/* check if we need to align length */
1358			if (align != 0) {
1359				/* zero the extra bytes */
1360				usb2_bzero(xfer->frbuffers, temp_len, align);
1361				temp_len += align;
1362			}
1363			DPRINTFN(11, "sending frame len=%u ferlen=%u\n",
1364			    m->m_pkthdr.len, temp_len);
1365
1366			xfer->frlengths[0] = temp_len;
1367			usb2_start_hardware(xfer);
1368
1369			/* free mbuf and node */
1370			rum_tx_freem(m);
1371
1372		}
1373		break;
1374
1375	default:			/* Error */
1376		DPRINTFN(11, "transfer error, %s\n",
1377		    usb2_errstr(xfer->error));
1378
1379		if (xfer->error != USB_ERR_CANCELLED) {
1380			/* try to clear stall first */
1381			sc->sc_flags |= RUM_FLAG_WRITE_STALL;
1382			usb2_transfer_start(sc->sc_xfer[RUM_BULK_CS_WR]);
1383		}
1384		ifp->if_oerrors++;
1385		break;
1386	}
1387}
1388
1389static void
1390rum_bulk_write_clear_stall_callback(struct usb2_xfer *xfer)
1391{
1392	struct rum_softc *sc = xfer->priv_sc;
1393	struct usb2_xfer *xfer_other = sc->sc_xfer[RUM_BULK_DT_WR];
1394
1395	if (usb2_clear_stall_callback(xfer, xfer_other)) {
1396		DPRINTF("stall cleared\n");
1397		sc->sc_flags &= ~RUM_FLAG_WRITE_STALL;
1398		usb2_transfer_start(xfer_other);
1399	}
1400}
1401
1402static void
1403rum_watchdog(void *arg)
1404{
1405	struct rum_softc *sc = arg;
1406
1407	mtx_assert(&sc->sc_mtx, MA_OWNED);
1408
1409	if (sc->sc_amrr_timer) {
1410		usb2_config_td_queue_command
1411		    (&sc->sc_config_td, NULL,
1412		    &rum_cfg_amrr_timeout, 0, 0);
1413	}
1414	usb2_callout_reset(&sc->sc_watchdog,
1415	    hz, &rum_watchdog, sc);
1416}
1417
1418static void
1419rum_init_cb(void *arg)
1420{
1421	struct rum_softc *sc = arg;
1422
1423	mtx_lock(&sc->sc_mtx);
1424	usb2_config_td_queue_command
1425	    (&sc->sc_config_td, &rum_cfg_pre_init,
1426	    &rum_cfg_init, 0, 0);
1427	mtx_unlock(&sc->sc_mtx);
1428}
1429
1430static int
1431rum_ioctl_cb(struct ifnet *ifp, u_long cmd, caddr_t data)
1432{
1433	struct rum_softc *sc = ifp->if_softc;
1434	struct ieee80211com *ic = ifp->if_l2com;
1435	int error;
1436
1437	switch (cmd) {
1438	case SIOCSIFFLAGS:
1439		mtx_lock(&sc->sc_mtx);
1440		if (ifp->if_flags & IFF_UP) {
1441			if (!(ifp->if_drv_flags & IFF_DRV_RUNNING)) {
1442				usb2_config_td_queue_command
1443				    (&sc->sc_config_td, &rum_cfg_pre_init,
1444				    &rum_cfg_init, 0, 0);
1445			}
1446		} else {
1447			if (ifp->if_drv_flags & IFF_DRV_RUNNING) {
1448				usb2_config_td_queue_command
1449				    (&sc->sc_config_td, &rum_cfg_pre_stop,
1450				    &rum_cfg_stop, 0, 0);
1451			}
1452		}
1453		mtx_unlock(&sc->sc_mtx);
1454		error = 0;
1455		break;
1456
1457	case SIOCGIFMEDIA:
1458	case SIOCSIFMEDIA:
1459		error = ifmedia_ioctl(ifp, (void *)data, &ic->ic_media, cmd);
1460		break;
1461
1462	default:
1463		error = ether_ioctl(ifp, cmd, data);
1464	}
1465	return (error);
1466}
1467
1468static void
1469rum_start_cb(struct ifnet *ifp)
1470{
1471	struct rum_softc *sc = ifp->if_softc;
1472
1473	mtx_lock(&sc->sc_mtx);
1474	/* start write transfer, if not started */
1475	usb2_transfer_start(sc->sc_xfer[RUM_BULK_DT_WR]);
1476	mtx_unlock(&sc->sc_mtx);
1477}
1478
1479static void
1480rum_cfg_newstate(struct rum_softc *sc,
1481    struct usb2_config_td_cc *cc, uint16_t refcount)
1482{
1483	struct ifnet *ifp = sc->sc_ifp;
1484	struct ieee80211com *ic = ifp->if_l2com;
1485	struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps);
1486	struct rum_vap *uvp = RUM_VAP(vap);
1487	enum ieee80211_state ostate;
1488	enum ieee80211_state nstate;
1489	int arg;
1490
1491	ostate = vap->iv_state;
1492	nstate = sc->sc_ns_state;
1493	arg = sc->sc_ns_arg;
1494
1495	if (ostate == IEEE80211_S_INIT) {
1496		/* We are leaving INIT. TSF sync should be off. */
1497		rum_cfg_disable_tsf_sync(sc);
1498	}
1499	switch (nstate) {
1500	case IEEE80211_S_INIT:
1501		break;
1502
1503	case IEEE80211_S_RUN:
1504		rum_cfg_set_run(sc, cc);
1505		break;
1506
1507	default:
1508		break;
1509	}
1510
1511	mtx_unlock(&sc->sc_mtx);
1512	IEEE80211_LOCK(ic);
1513	uvp->newstate(vap, nstate, arg);
1514	if (vap->iv_newstate_cb != NULL)
1515		vap->iv_newstate_cb(vap, nstate, arg);
1516	IEEE80211_UNLOCK(ic);
1517	mtx_lock(&sc->sc_mtx);
1518}
1519
1520static int
1521rum_newstate_cb(struct ieee80211vap *vap, enum ieee80211_state nstate, int arg)
1522{
1523	struct rum_vap *uvp = RUM_VAP(vap);
1524	struct ieee80211com *ic = vap->iv_ic;
1525	struct rum_softc *sc = ic->ic_ifp->if_softc;
1526
1527	DPRINTF("setting new state: %d\n", nstate);
1528
1529	/* Special case - cannot defer this call and cannot block ! */
1530	if (nstate == IEEE80211_S_INIT) {
1531		/* stop timers */
1532		mtx_lock(&sc->sc_mtx);
1533		sc->sc_amrr_timer = 0;
1534		mtx_unlock(&sc->sc_mtx);
1535		return (uvp->newstate(vap, nstate, arg));
1536	}
1537	mtx_lock(&sc->sc_mtx);
1538	if (usb2_config_td_is_gone(&sc->sc_config_td)) {
1539		mtx_unlock(&sc->sc_mtx);
1540		return (0);		/* nothing to do */
1541	}
1542	/* store next state */
1543	sc->sc_ns_state = nstate;
1544	sc->sc_ns_arg = arg;
1545
1546	/* stop timers */
1547	sc->sc_amrr_timer = 0;
1548
1549	/*
1550	 * USB configuration can only be done from the USB configuration
1551	 * thread:
1552	 */
1553	usb2_config_td_queue_command
1554	    (&sc->sc_config_td, &rum_config_copy,
1555	    &rum_cfg_newstate, 0, 0);
1556
1557	mtx_unlock(&sc->sc_mtx);
1558
1559	return (EINPROGRESS);
1560}
1561
1562static void
1563rum_std_command(struct ieee80211com *ic, usb2_config_td_command_t *func)
1564{
1565	struct rum_softc *sc = ic->ic_ifp->if_softc;
1566
1567	mtx_lock(&sc->sc_mtx);
1568
1569	sc->sc_rates = ieee80211_get_ratetable(ic->ic_curchan);
1570
1571	usb2_config_td_queue_command
1572	    (&sc->sc_config_td, &rum_config_copy, func, 0, 0);
1573
1574	mtx_unlock(&sc->sc_mtx);
1575}
1576
1577static void
1578rum_scan_start_cb(struct ieee80211com *ic)
1579{
1580	rum_std_command(ic, &rum_cfg_scan_start);
1581}
1582
1583static void
1584rum_scan_end_cb(struct ieee80211com *ic)
1585{
1586	rum_std_command(ic, &rum_cfg_scan_end);
1587}
1588
1589static void
1590rum_set_channel_cb(struct ieee80211com *ic)
1591{
1592	rum_std_command(ic, &rum_cfg_set_chan);
1593}
1594
1595static void
1596rum_cfg_scan_start(struct rum_softc *sc,
1597    struct usb2_config_td_cc *cc, uint16_t refcount)
1598{
1599	/* abort TSF synchronization */
1600	rum_cfg_disable_tsf_sync(sc);
1601	rum_cfg_set_bssid(sc, cc->if_broadcastaddr);
1602}
1603
1604static void
1605rum_cfg_scan_end(struct rum_softc *sc,
1606    struct usb2_config_td_cc *cc, uint16_t refcount)
1607{
1608	/* enable TSF synchronization */
1609	rum_cfg_enable_tsf_sync(sc, cc, 0);
1610	rum_cfg_set_bssid(sc, cc->iv_bss.ni_bssid);
1611}
1612
1613/*
1614 * Reprogram MAC/BBP to switch to a new band. Values taken from the reference
1615 * driver.
1616 */
1617static void
1618rum_cfg_select_band(struct rum_softc *sc,
1619    struct usb2_config_td_cc *cc, uint16_t refcount)
1620{
1621	uint32_t tmp;
1622	uint8_t bbp17, bbp35, bbp96, bbp97, bbp98, bbp104;
1623
1624	/* update all BBP registers that depend on the band */
1625	bbp17 = 0x20;
1626	bbp96 = 0x48;
1627	bbp104 = 0x2c;
1628	bbp35 = 0x50;
1629	bbp97 = 0x48;
1630	bbp98 = 0x48;
1631
1632	if (cc->ic_curchan.chan_is_5ghz) {
1633		bbp17 += 0x08;
1634		bbp96 += 0x10;
1635		bbp104 += 0x0c;
1636		bbp35 += 0x10;
1637		bbp97 += 0x10;
1638		bbp98 += 0x10;
1639	}
1640	if ((cc->ic_curchan.chan_is_2ghz && sc->sc_ext_2ghz_lna) ||
1641	    (cc->ic_curchan.chan_is_5ghz && sc->sc_ext_5ghz_lna)) {
1642		bbp17 += 0x10;
1643		bbp96 += 0x10;
1644		bbp104 += 0x10;
1645	}
1646	sc->sc_bbp17 = bbp17;
1647	rum_cfg_bbp_write(sc, 17, bbp17);
1648	rum_cfg_bbp_write(sc, 96, bbp96);
1649	rum_cfg_bbp_write(sc, 104, bbp104);
1650
1651	if ((cc->ic_curchan.chan_is_2ghz && sc->sc_ext_2ghz_lna) ||
1652	    (cc->ic_curchan.chan_is_5ghz && sc->sc_ext_5ghz_lna)) {
1653		rum_cfg_bbp_write(sc, 75, 0x80);
1654		rum_cfg_bbp_write(sc, 86, 0x80);
1655		rum_cfg_bbp_write(sc, 88, 0x80);
1656	}
1657	rum_cfg_bbp_write(sc, 35, bbp35);
1658	rum_cfg_bbp_write(sc, 97, bbp97);
1659	rum_cfg_bbp_write(sc, 98, bbp98);
1660
1661	tmp = rum_cfg_read(sc, RT2573_PHY_CSR0);
1662	tmp &= ~(RT2573_PA_PE_2GHZ | RT2573_PA_PE_5GHZ);
1663	if (cc->ic_curchan.chan_is_2ghz)
1664		tmp |= RT2573_PA_PE_2GHZ;
1665	else
1666		tmp |= RT2573_PA_PE_5GHZ;
1667	rum_cfg_write(sc, RT2573_PHY_CSR0, tmp);
1668
1669	/* 802.11a uses a 16 microseconds short interframe space */
1670	sc->sc_sifs = cc->ic_curchan.chan_is_5ghz ? 16 : 10;
1671}
1672
1673static void
1674rum_cfg_set_chan(struct rum_softc *sc,
1675    struct usb2_config_td_cc *cc, uint16_t refcount)
1676{
1677	enum {
1678	N_RF5225 = (sizeof(rum_rf5225) / sizeof(rum_rf5225[0]))};
1679	const struct rfprog *rfprog;
1680	uint32_t chan;
1681	uint16_t i;
1682	uint8_t bbp3;
1683	uint8_t bbp94 = RT2573_BBPR94_DEFAULT;
1684	int8_t power;
1685
1686	chan = cc->ic_curchan.chan_to_ieee;
1687
1688	if ((chan == 0) ||
1689	    (chan == IEEE80211_CHAN_ANY)) {
1690		/* nothing to do */
1691		return;
1692	}
1693	if (chan == sc->sc_last_chan) {
1694		return;
1695	}
1696	sc->sc_last_chan = chan;
1697
1698	/* select the appropriate RF settings based on what EEPROM says */
1699	rfprog = ((sc->sc_rf_rev == RT2573_RF_5225) ||
1700	    (sc->sc_rf_rev == RT2573_RF_2527)) ? rum_rf5225 : rum_rf5226;
1701
1702	/* find the settings for this channel */
1703	for (i = 0;; i++) {
1704		if (i == (N_RF5225 - 1))
1705			break;
1706		if (rfprog[i].chan == chan)
1707			break;
1708	}
1709
1710	DPRINTF("chan=%d, i=%d\n", chan, i);
1711
1712	power = sc->sc_txpow[i];
1713	if (power < 0) {
1714		bbp94 += power;
1715		power = 0;
1716	} else if (power > 31) {
1717		bbp94 += power - 31;
1718		power = 31;
1719	}
1720	/*
1721	 * If we are switching from the 2GHz band to the 5GHz band or
1722	 * vice-versa, BBP registers need to be reprogrammed.
1723	 */
1724	rum_cfg_select_band(sc, cc, 0);
1725	rum_cfg_select_antenna(sc, cc, 0);
1726
1727	rum_cfg_rf_write(sc, RT2573_RF1, rfprog[i].r1);
1728	rum_cfg_rf_write(sc, RT2573_RF2, rfprog[i].r2);
1729	rum_cfg_rf_write(sc, RT2573_RF3, rfprog[i].r3 | (power << 7));
1730	rum_cfg_rf_write(sc, RT2573_RF4, rfprog[i].r4 | (sc->sc_rffreq << 10));
1731
1732	rum_cfg_rf_write(sc, RT2573_RF1, rfprog[i].r1);
1733	rum_cfg_rf_write(sc, RT2573_RF2, rfprog[i].r2);
1734	rum_cfg_rf_write(sc, RT2573_RF3, rfprog[i].r3 | (power << 7) | 1);
1735	rum_cfg_rf_write(sc, RT2573_RF4, rfprog[i].r4 | (sc->sc_rffreq << 10));
1736
1737	rum_cfg_rf_write(sc, RT2573_RF1, rfprog[i].r1);
1738	rum_cfg_rf_write(sc, RT2573_RF2, rfprog[i].r2);
1739	rum_cfg_rf_write(sc, RT2573_RF3, rfprog[i].r3 | (power << 7));
1740	rum_cfg_rf_write(sc, RT2573_RF4, rfprog[i].r4 | (sc->sc_rffreq << 10));
1741
1742	if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
1743		return;
1744	}
1745	/* enable smart mode for MIMO-capable RFs */
1746	bbp3 = rum_cfg_bbp_read(sc, 3);
1747
1748	if ((sc->sc_rf_rev == RT2573_RF_5225) ||
1749	    (sc->sc_rf_rev == RT2573_RF_2527))
1750		bbp3 &= ~RT2573_SMART_MODE;
1751	else
1752		bbp3 |= RT2573_SMART_MODE;
1753
1754	rum_cfg_bbp_write(sc, 3, bbp3);
1755
1756	rum_cfg_bbp_write(sc, 94, bbp94);
1757
1758	/* update basic rate set */
1759
1760	if (cc->ic_curchan.chan_is_b) {
1761		/* 11b basic rates: 1, 2Mbps */
1762		rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x3);
1763	} else if (cc->ic_curchan.chan_is_a) {
1764		/* 11a basic rates: 6, 12, 24Mbps */
1765		rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x150);
1766	} else {
1767		/* 11b/g basic rates: 1, 2, 5.5, 11Mbps */
1768		rum_cfg_write(sc, RT2573_TXRX_CSR5, 0xf);
1769	}
1770
1771	if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
1772		return;
1773	}
1774}
1775
1776static void
1777rum_cfg_set_run(struct rum_softc *sc,
1778    struct usb2_config_td_cc *cc)
1779{
1780
1781	if (cc->ic_opmode != IEEE80211_M_MONITOR) {
1782		rum_cfg_update_slot(sc, cc, 0);
1783		rum_cfg_enable_mrr(sc, cc, 0);
1784		rum_cfg_set_txpreamble(sc, cc, 0);
1785
1786		/* update basic rate set */
1787
1788		if (cc->ic_bsschan.chan_is_5ghz) {
1789			/* 11a basic rates: 6, 12, 24Mbps */
1790			rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x150);
1791		} else if (cc->ic_bsschan.chan_is_g) {
1792			/* 11b/g basic rates: 1, 2, 5.5, 11Mbps */
1793			rum_cfg_write(sc, RT2573_TXRX_CSR5, 0xf);
1794		} else {
1795			/* 11b basic rates: 1, 2Mbps */
1796			rum_cfg_write(sc, RT2573_TXRX_CSR5, 0x3);
1797		}
1798		rum_cfg_set_bssid(sc, cc->iv_bss.ni_bssid);
1799	}
1800	if ((cc->ic_opmode == IEEE80211_M_HOSTAP) ||
1801	    (cc->ic_opmode == IEEE80211_M_IBSS)) {
1802		rum_cfg_prepare_beacon(sc, cc, 0);
1803	}
1804	if (cc->ic_opmode != IEEE80211_M_MONITOR) {
1805		rum_cfg_enable_tsf_sync(sc, cc, 0);
1806	}
1807	if (cc->iv_bss.fixed_rate_none) {
1808		/* enable automatic rate adaptation */
1809		rum_cfg_amrr_start(sc);
1810	}
1811}
1812
1813static void
1814rum_cfg_enable_tsf_sync(struct rum_softc *sc,
1815    struct usb2_config_td_cc *cc, uint16_t refcount)
1816{
1817	uint32_t tmp;
1818
1819	if (cc->ic_opmode != IEEE80211_M_STA) {
1820		/*
1821		 * Change default 16ms TBTT adjustment to 8ms.
1822		 * Must be done before enabling beacon generation.
1823		 */
1824		rum_cfg_write(sc, RT2573_TXRX_CSR10, (1 << 12) | 8);
1825	}
1826	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR9) & 0xff000000;
1827
1828	/* set beacon interval (in 1/16ms unit) */
1829	tmp |= cc->iv_bss.ni_intval * 16;
1830
1831	tmp |= RT2573_TSF_TICKING | RT2573_ENABLE_TBTT;
1832	if (cc->ic_opmode == IEEE80211_M_STA)
1833		tmp |= RT2573_TSF_MODE(1);
1834	else
1835		tmp |= RT2573_TSF_MODE(2) | RT2573_GENERATE_BEACON;
1836
1837	rum_cfg_write(sc, RT2573_TXRX_CSR9, tmp);
1838}
1839
1840static void
1841rum_cfg_disable_tsf_sync(struct rum_softc *sc)
1842{
1843	uint32_t tmp;
1844
1845	/* abort TSF synchronization */
1846	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR9);
1847	rum_cfg_write(sc, RT2573_TXRX_CSR9, tmp & ~0x00ffffff);
1848}
1849
1850/*
1851 * Enable multi-rate retries for frames sent at OFDM rates.
1852 * In 802.11b/g mode, allow fallback to CCK rates.
1853 */
1854static void
1855rum_cfg_enable_mrr(struct rum_softc *sc,
1856    struct usb2_config_td_cc *cc, uint16_t refcount)
1857{
1858	uint32_t tmp;
1859
1860	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR4);
1861
1862	if (cc->ic_curchan.chan_is_5ghz)
1863		tmp &= ~RT2573_MRR_CCK_FALLBACK;
1864	else
1865		tmp |= RT2573_MRR_CCK_FALLBACK;
1866
1867	tmp |= RT2573_MRR_ENABLED;
1868
1869	rum_cfg_write(sc, RT2573_TXRX_CSR4, tmp);
1870}
1871
1872static void
1873rum_cfg_update_slot(struct rum_softc *sc,
1874    struct usb2_config_td_cc *cc, uint16_t refcount)
1875{
1876	uint32_t tmp;
1877	uint8_t slottime;
1878
1879	slottime = (cc->ic_flags & IEEE80211_F_SHSLOT) ? 9 : 20;
1880
1881	tmp = rum_cfg_read(sc, RT2573_MAC_CSR9);
1882	tmp = (tmp & ~0xff) | slottime;
1883	rum_cfg_write(sc, RT2573_MAC_CSR9, tmp);
1884
1885	DPRINTF("setting slot time to %u us\n", slottime);
1886}
1887
1888static void
1889rum_cfg_set_txpreamble(struct rum_softc *sc,
1890    struct usb2_config_td_cc *cc, uint16_t refcount)
1891{
1892	uint32_t tmp;
1893
1894	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR4);
1895
1896	if (cc->ic_flags & IEEE80211_F_SHPREAMBLE)
1897		tmp |= RT2573_SHORT_PREAMBLE;
1898	else
1899		tmp &= ~RT2573_SHORT_PREAMBLE;
1900
1901	rum_cfg_write(sc, RT2573_TXRX_CSR4, tmp);
1902}
1903
1904static void
1905rum_cfg_set_bssid(struct rum_softc *sc, uint8_t *bssid)
1906{
1907	uint32_t tmp;
1908
1909	tmp = bssid[0] | (bssid[1] << 8) | (bssid[2] << 16) | (bssid[3] << 24);
1910	rum_cfg_write(sc, RT2573_MAC_CSR4, tmp);
1911
1912	tmp = (bssid[4]) | (bssid[5] << 8) | (RT2573_ONE_BSSID << 16);
1913	rum_cfg_write(sc, RT2573_MAC_CSR5, tmp);
1914}
1915
1916static void
1917rum_cfg_set_macaddr(struct rum_softc *sc, uint8_t *addr)
1918{
1919	uint32_t tmp;
1920
1921	tmp = addr[0] | (addr[1] << 8) | (addr[2] << 16) | (addr[3] << 24);
1922	rum_cfg_write(sc, RT2573_MAC_CSR2, tmp);
1923
1924	tmp = addr[4] | (addr[5] << 8) | (0xff << 16);
1925	rum_cfg_write(sc, RT2573_MAC_CSR3, tmp);
1926}
1927
1928static void
1929rum_cfg_update_promisc(struct rum_softc *sc,
1930    struct usb2_config_td_cc *cc, uint16_t refcount)
1931{
1932	uint32_t tmp;
1933
1934	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0);
1935
1936	if (cc->if_flags & IFF_PROMISC)
1937		tmp &= ~RT2573_DROP_NOT_TO_ME;
1938	else
1939		tmp |= RT2573_DROP_NOT_TO_ME;
1940
1941	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp);
1942
1943	DPRINTF("%s promiscuous mode\n",
1944	    (cc->if_flags & IFF_PROMISC) ?
1945	    "entering" : "leaving");
1946}
1947
1948static void
1949rum_cfg_select_antenna(struct rum_softc *sc,
1950    struct usb2_config_td_cc *cc, uint16_t refcount)
1951{
1952	uint32_t tmp;
1953	uint8_t bbp3;
1954	uint8_t bbp4;
1955	uint8_t bbp77;
1956	uint8_t rx_ant;
1957	uint8_t is_5ghz;
1958
1959	bbp3 = rum_cfg_bbp_read(sc, 3);
1960	bbp4 = rum_cfg_bbp_read(sc, 4);
1961	bbp77 = rum_cfg_bbp_read(sc, 77);
1962
1963	bbp3 &= ~0x01;
1964	bbp4 &= ~0x23;
1965
1966	rx_ant = sc->sc_rx_ant;
1967	is_5ghz = cc->ic_curchan.chan_is_5ghz;
1968
1969	switch (sc->sc_rf_rev) {
1970	case RT2573_RF_5226:
1971	case RT2573_RF_5225:
1972		if (rx_ant == 0) {
1973			/* Diversity */
1974			bbp4 |= 0x02;
1975			if (is_5ghz == 0)
1976				bbp4 |= 0x20;
1977		} else if (rx_ant == 1) {
1978			/* RX: Antenna A */
1979			bbp4 |= 0x01;
1980			if (is_5ghz)
1981				bbp77 &= ~0x03;
1982			else
1983				bbp77 |= 0x03;
1984		} else if (rx_ant == 2) {
1985			/* RX: Antenna B */
1986			bbp4 |= 0x01;
1987			if (is_5ghz)
1988				bbp77 |= 0x03;
1989			else
1990				bbp77 &= ~0x03;
1991		}
1992		break;
1993
1994	case RT2573_RF_2528:
1995	case RT2573_RF_2527:
1996		if (rx_ant == 0) {
1997			/* Diversity */
1998			bbp4 |= 0x22;
1999		} else if (rx_ant == 1) {
2000			/* RX: Antenna A */
2001			bbp4 |= 0x21;
2002			bbp77 |= 0x03;
2003		} else if (rx_ant == 2) {
2004			/* RX: Antenna B */
2005			bbp4 |= 0x21;
2006			bbp77 &= ~0x03;
2007		}
2008		break;
2009	default:
2010		break;
2011	}
2012	bbp4 &= ~(sc->sc_ftype << 5);
2013
2014	/* make sure Rx is disabled before switching antenna */
2015	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0);
2016	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp | RT2573_DISABLE_RX);
2017
2018	rum_cfg_bbp_write(sc, 3, bbp3);
2019	rum_cfg_bbp_write(sc, 4, bbp4);
2020	rum_cfg_bbp_write(sc, 77, bbp77);
2021
2022	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp);
2023}
2024
2025static void
2026rum_cfg_read_eeprom(struct rum_softc *sc)
2027{
2028	uint16_t val;
2029
2030	/* read MAC address */
2031	rum_cfg_eeprom_read(sc, RT2573_EEPROM_ADDRESS, sc->sc_myaddr, 6);
2032
2033	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_ANTENNA);
2034	sc->sc_rf_rev = (val >> 11) & 0x1f;
2035	sc->sc_hw_radio = (val >> 10) & 0x1;
2036	sc->sc_ftype = (val >> 6) & 0x1;
2037	sc->sc_rx_ant = (val >> 4) & 0x3;
2038	sc->sc_tx_ant = (val >> 2) & 0x3;
2039	sc->sc_nb_ant = (val & 0x3);
2040
2041	DPRINTF("RF revision=%d\n", sc->sc_rf_rev);
2042
2043	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_CONFIG2);
2044	sc->sc_ext_5ghz_lna = (val >> 6) & 0x1;
2045	sc->sc_ext_2ghz_lna = (val >> 4) & 0x1;
2046
2047	DPRINTF("External 2GHz LNA=%d, External 5GHz LNA=%d\n",
2048	    sc->sc_ext_2ghz_lna, sc->sc_ext_5ghz_lna);
2049
2050	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_RSSI_2GHZ_OFFSET);
2051	if ((val & 0xff) != 0xff)
2052		sc->sc_rssi_2ghz_corr = (int8_t)(val & 0xff);	/* signed */
2053	else
2054		sc->sc_rssi_2ghz_corr = 0;
2055
2056	/* range check */
2057	if ((sc->sc_rssi_2ghz_corr < -10) ||
2058	    (sc->sc_rssi_2ghz_corr > 10)) {
2059		sc->sc_rssi_2ghz_corr = 0;
2060	}
2061	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_RSSI_5GHZ_OFFSET);
2062	if ((val & 0xff) != 0xff)
2063		sc->sc_rssi_5ghz_corr = (int8_t)(val & 0xff);	/* signed */
2064	else
2065		sc->sc_rssi_5ghz_corr = 0;
2066
2067	/* range check */
2068	if ((sc->sc_rssi_5ghz_corr < -10) ||
2069	    (sc->sc_rssi_5ghz_corr > 10)) {
2070		sc->sc_rssi_5ghz_corr = 0;
2071	}
2072	if (sc->sc_ext_2ghz_lna) {
2073		sc->sc_rssi_2ghz_corr -= 14;
2074	}
2075	if (sc->sc_ext_5ghz_lna) {
2076		sc->sc_rssi_5ghz_corr -= 14;
2077	}
2078	DPRINTF("RSSI 2GHz corr=%d, RSSI 5GHz corr=%d\n",
2079	    sc->sc_rssi_2ghz_corr, sc->sc_rssi_5ghz_corr);
2080
2081	val = rum_cfg_eeprom_read_2(sc, RT2573_EEPROM_FREQ_OFFSET);
2082	if ((val & 0xff) != 0xff)
2083		sc->sc_rffreq = (val & 0xff);
2084	else
2085		sc->sc_rffreq = 0;
2086
2087	DPRINTF("RF freq=%d\n", sc->sc_rffreq);
2088
2089	/* read Tx power for all a/b/g channels */
2090	rum_cfg_eeprom_read(sc, RT2573_EEPROM_TXPOWER, sc->sc_txpow, 14);
2091
2092	/* XXX default Tx power for 802.11a channels */
2093	memset(sc->sc_txpow + 14, 24, sizeof(sc->sc_txpow) - 14);
2094
2095	/* read default values for BBP registers */
2096	rum_cfg_eeprom_read(sc, RT2573_EEPROM_BBP_BASE, sc->sc_bbp_prom, 2 * 16);
2097}
2098
2099static uint8_t
2100rum_cfg_bbp_init(struct rum_softc *sc)
2101{
2102	enum {
2103		N_DEF_BBP = (sizeof(rum_def_bbp) / sizeof(rum_def_bbp[0])),
2104	};
2105	uint16_t i;
2106	uint8_t to;
2107	uint8_t tmp;
2108
2109	/* wait for BBP to become ready */
2110	for (to = 0;; to++) {
2111		if (to < 100) {
2112			tmp = rum_cfg_bbp_read(sc, 0);
2113			if ((tmp != 0x00) &&
2114			    (tmp != 0xff)) {
2115				break;
2116			}
2117			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
2118				return (1);	/* failure */
2119			}
2120		} else {
2121			DPRINTF("timeout waiting for BBP\n");
2122			return (1);	/* failure */
2123		}
2124	}
2125
2126	/* initialize BBP registers to default values */
2127	for (i = 0; i < N_DEF_BBP; i++) {
2128		rum_cfg_bbp_write(sc, rum_def_bbp[i].reg, rum_def_bbp[i].val);
2129	}
2130
2131	/* write vendor-specific BBP values (from EEPROM) */
2132	for (i = 0; i < 16; i++) {
2133		if ((sc->sc_bbp_prom[i].reg == 0) ||
2134		    (sc->sc_bbp_prom[i].reg == 0xff)) {
2135			continue;
2136		}
2137		rum_cfg_bbp_write(sc, sc->sc_bbp_prom[i].reg, sc->sc_bbp_prom[i].val);
2138	}
2139	return (0);
2140}
2141
2142static void
2143rum_cfg_pre_init(struct rum_softc *sc,
2144    struct usb2_config_td_cc *cc, uint16_t refcount)
2145{
2146	struct ifnet *ifp = sc->sc_ifp;
2147	struct ieee80211com *ic = ifp->if_l2com;
2148
2149	/* immediate configuration */
2150
2151	rum_cfg_pre_stop(sc, cc, 0);
2152
2153	ifp->if_drv_flags |= IFF_DRV_RUNNING;
2154
2155	sc->sc_flags |= RUM_FLAG_HL_READY;
2156
2157	IEEE80211_ADDR_COPY(ic->ic_myaddr, IF_LLADDR(ifp));
2158}
2159
2160static void
2161rum_cfg_init(struct rum_softc *sc,
2162    struct usb2_config_td_cc *cc, uint16_t refcount)
2163{
2164	enum {
2165		N_DEF_MAC = (sizeof(rum_def_mac) / sizeof(rum_def_mac[0])),
2166	};
2167
2168	uint32_t tmp;
2169	uint16_t i;
2170	uint8_t to;
2171
2172	/* delayed configuration */
2173
2174	rum_cfg_stop(sc, cc, 0);
2175
2176	/* initialize MAC registers to default values */
2177	for (i = 0; i < N_DEF_MAC; i++) {
2178		rum_cfg_write(sc, rum_def_mac[i].reg, rum_def_mac[i].val);
2179	}
2180
2181	/* set host ready */
2182	rum_cfg_write(sc, RT2573_MAC_CSR1, 3);
2183	rum_cfg_write(sc, RT2573_MAC_CSR1, 0);
2184
2185	/* wait for BBP/RF to wakeup */
2186	for (to = 0;; to++) {
2187		if (to < 100) {
2188			if (rum_cfg_read(sc, RT2573_MAC_CSR12) & 8) {
2189				break;
2190			}
2191			rum_cfg_write(sc, RT2573_MAC_CSR12, 4);	/* force wakeup */
2192
2193			if (usb2_config_td_sleep(&sc->sc_config_td, hz / 100)) {
2194				goto fail;
2195			}
2196		} else {
2197			DPRINTF("timeout waiting for "
2198			    "BBP/RF to wakeup\n");
2199			goto fail;
2200		}
2201	}
2202
2203	if (rum_cfg_bbp_init(sc)) {
2204		goto fail;
2205	}
2206	/* select default channel */
2207
2208	sc->sc_last_chan = 0;
2209
2210	rum_cfg_set_chan(sc, cc, 0);
2211
2212	/* clear STA registers */
2213	rum_cfg_read_multi(sc, RT2573_STA_CSR0, sc->sc_sta, sizeof(sc->sc_sta));
2214	/* set MAC address */
2215	rum_cfg_set_macaddr(sc, cc->ic_myaddr);
2216
2217	/* initialize ASIC */
2218	rum_cfg_write(sc, RT2573_MAC_CSR1, 4);
2219
2220	/*
2221	 * make sure that the first transaction
2222	 * clears the stall:
2223	 */
2224	sc->sc_flags |= (RUM_FLAG_READ_STALL |
2225	    RUM_FLAG_WRITE_STALL |
2226	    RUM_FLAG_LL_READY);
2227
2228	if ((sc->sc_flags & RUM_FLAG_LL_READY) &&
2229	    (sc->sc_flags & RUM_FLAG_HL_READY)) {
2230		struct ifnet *ifp = sc->sc_ifp;
2231		struct ieee80211com *ic = ifp->if_l2com;
2232
2233		/*
2234		 * start the USB transfers, if not already started:
2235		 */
2236		usb2_transfer_start(sc->sc_xfer[RUM_BULK_DT_RD]);
2237		usb2_transfer_start(sc->sc_xfer[RUM_BULK_DT_WR]);
2238
2239		/*
2240		 * start IEEE802.11 layer
2241		 */
2242		mtx_unlock(&sc->sc_mtx);
2243		ieee80211_start_all(ic);
2244		mtx_lock(&sc->sc_mtx);
2245	}
2246	/* update Rx filter */
2247	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0) & 0xffff;
2248
2249	tmp |= RT2573_DROP_PHY_ERROR | RT2573_DROP_CRC_ERROR;
2250
2251	if (cc->ic_opmode != IEEE80211_M_MONITOR) {
2252		tmp |= RT2573_DROP_CTL | RT2573_DROP_VER_ERROR |
2253		    RT2573_DROP_ACKCTS;
2254		if (cc->ic_opmode != IEEE80211_M_HOSTAP) {
2255			tmp |= RT2573_DROP_TODS;
2256		}
2257		if (!(cc->if_flags & IFF_PROMISC)) {
2258			tmp |= RT2573_DROP_NOT_TO_ME;
2259		}
2260	}
2261	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp);
2262
2263	return;
2264
2265fail:
2266	rum_cfg_pre_stop(sc, NULL, 0);
2267
2268	if (cc) {
2269		rum_cfg_stop(sc, cc, 0);
2270	}
2271}
2272
2273static void
2274rum_cfg_pre_stop(struct rum_softc *sc,
2275    struct usb2_config_td_cc *cc, uint16_t refcount)
2276{
2277	struct ifnet *ifp = sc->sc_ifp;
2278
2279	if (cc) {
2280		/* copy the needed configuration */
2281		rum_config_copy(sc, cc, refcount);
2282	}
2283	/* immediate configuration */
2284
2285	if (ifp) {
2286		/* clear flags */
2287		ifp->if_drv_flags &= ~IFF_DRV_RUNNING;
2288	}
2289	sc->sc_flags &= ~(RUM_FLAG_HL_READY |
2290	    RUM_FLAG_LL_READY);
2291
2292	/*
2293	 * stop all the transfers, if not already stopped:
2294	 */
2295	usb2_transfer_stop(sc->sc_xfer[RUM_BULK_DT_WR]);
2296	usb2_transfer_stop(sc->sc_xfer[RUM_BULK_DT_RD]);
2297	usb2_transfer_stop(sc->sc_xfer[RUM_BULK_CS_WR]);
2298	usb2_transfer_stop(sc->sc_xfer[RUM_BULK_CS_RD]);
2299
2300	/* clean up transmission */
2301	rum_tx_clean_queue(sc);
2302}
2303
2304static void
2305rum_cfg_stop(struct rum_softc *sc,
2306    struct usb2_config_td_cc *cc, uint16_t refcount)
2307{
2308	uint32_t tmp;
2309
2310	/* disable Rx */
2311	tmp = rum_cfg_read(sc, RT2573_TXRX_CSR0);
2312	rum_cfg_write(sc, RT2573_TXRX_CSR0, tmp | RT2573_DISABLE_RX);
2313
2314	/* reset ASIC */
2315	rum_cfg_write(sc, RT2573_MAC_CSR1, 3);
2316
2317	/* wait a little */
2318	usb2_config_td_sleep(&sc->sc_config_td, hz / 10);
2319
2320	rum_cfg_write(sc, RT2573_MAC_CSR1, 0);
2321
2322	/* wait a little */
2323	usb2_config_td_sleep(&sc->sc_config_td, hz / 10);
2324}
2325
2326static void
2327rum_cfg_amrr_start(struct rum_softc *sc)
2328{
2329	struct ieee80211vap *vap;
2330	struct ieee80211_node *ni;
2331
2332	vap = rum_get_vap(sc);
2333
2334	if (vap == NULL) {
2335		return;
2336	}
2337	ni = vap->iv_bss;
2338	if (ni == NULL) {
2339		return;
2340	}
2341	/* init AMRR */
2342
2343	ieee80211_amrr_node_init(&RUM_VAP(vap)->amrr, &RUM_NODE(ni)->amn, ni);
2344
2345	/* enable AMRR timer */
2346
2347	sc->sc_amrr_timer = 1;
2348}
2349
2350static void
2351rum_cfg_amrr_timeout(struct rum_softc *sc,
2352    struct usb2_config_td_cc *cc, uint16_t refcount)
2353{
2354	struct ifnet *ifp = sc->sc_ifp;
2355	struct ieee80211vap *vap;
2356	struct ieee80211_node *ni;
2357	uint32_t ok;
2358	uint32_t fail;
2359
2360	/* clear statistic registers (STA_CSR0 to STA_CSR5) */
2361	rum_cfg_read_multi(sc, RT2573_STA_CSR0, sc->sc_sta, sizeof(sc->sc_sta));
2362
2363	vap = rum_get_vap(sc);
2364	if (vap == NULL) {
2365		return;
2366	}
2367	ni = vap->iv_bss;
2368	if (ni == NULL) {
2369		return;
2370	}
2371	if ((sc->sc_flags & RUM_FLAG_LL_READY) &&
2372	    (sc->sc_flags & RUM_FLAG_HL_READY)) {
2373
2374		ok = (le32toh(sc->sc_sta[4]) >> 16) +	/* TX ok w/o retry */
2375		    (le32toh(sc->sc_sta[5]) & 0xffff);	/* TX ok w/ retry */
2376		fail = (le32toh(sc->sc_sta[5]) >> 16);	/* TX retry-fail count */
2377
2378		if (sc->sc_amrr_timer) {
2379			ieee80211_amrr_tx_update(&RUM_NODE(vap->iv_bss)->amn,
2380			    ok + fail, ok, (le32toh(sc->sc_sta[5]) & 0xffff) + fail);
2381
2382			if (ieee80211_amrr_choose(ni, &RUM_NODE(ni)->amn)) {
2383				/* ignore */
2384			}
2385		}
2386		ifp->if_oerrors += fail;/* count TX retry-fail as Tx errors */
2387	}
2388}
2389
2390static void
2391rum_cfg_load_microcode(struct rum_softc *sc, const uint8_t *ucode, uint16_t size)
2392{
2393	struct usb2_device_request req;
2394	uint16_t reg = RT2573_MCU_CODE_BASE;
2395
2396	/* copy firmware image into NIC */
2397	while (size >= 4) {
2398		rum_cfg_write(sc, reg, UGETDW(ucode));
2399		reg += 4;
2400		ucode += 4;
2401		size -= 4;
2402	}
2403
2404	if (size != 0) {
2405		DPRINTF("possibly invalid firmware\n");
2406	}
2407	req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
2408	req.bRequest = RT2573_MCU_CNTL;
2409	USETW(req.wValue, RT2573_MCU_RUN);
2410	USETW(req.wIndex, 0);
2411	USETW(req.wLength, 0);
2412
2413	rum_cfg_do_request(sc, &req, NULL);
2414}
2415
2416static void
2417rum_cfg_prepare_beacon(struct rum_softc *sc,
2418    struct usb2_config_td_cc *cc, uint16_t refcount)
2419{
2420	struct ieee80211_node *ni;
2421	struct ieee80211vap *vap;
2422	struct ieee80211com *ic;
2423	const struct ieee80211_txparam *tp;
2424	struct mbuf *m;
2425
2426	vap = rum_get_vap(sc);
2427	if (vap == NULL) {
2428		return;
2429	}
2430	ni = vap->iv_bss;
2431	if (ni == NULL) {
2432		return;
2433	}
2434	ic = vap->iv_ic;
2435	if (ic == NULL) {
2436		return;
2437	}
2438	DPRINTFN(11, "Sending beacon frame.\n");
2439
2440	m = ieee80211_beacon_alloc(ni, &RUM_VAP(vap)->bo);
2441	if (m == NULL) {
2442		DPRINTFN(0, "could not allocate beacon\n");
2443		return;
2444	}
2445	tp = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_bsschan)];
2446
2447	m->m_pkthdr.rcvif = (void *)ieee80211_ref_node(ni);
2448	rum_setup_desc_and_tx(sc, m, RT2573_TX_TIMESTAMP, RT2573_TX_HWSEQ | RT2573_TX_BEACON, tp->mgmtrate);
2449}
2450
2451static uint8_t
2452rum_get_rssi(struct rum_softc *sc, uint8_t raw)
2453{
2454	struct ifnet *ifp = sc->sc_ifp;
2455	struct ieee80211com *ic = ifp->if_l2com;
2456	int16_t rssi;
2457	uint8_t lna;
2458	uint8_t agc;
2459
2460	lna = (raw >> 5) & 0x3;
2461	agc = raw & 0x1f;
2462
2463	if (lna == 0) {
2464		/*
2465                 * No RSSI mapping
2466                 *
2467                 * NB: Since RSSI is relative to noise floor, -1 is
2468                 *     adequate for caller to know error happened.
2469                 */
2470		return (0);
2471	}
2472	rssi = (2 * agc) - RT2573_NOISE_FLOOR;
2473
2474	if (IEEE80211_IS_CHAN_2GHZ(ic->ic_curchan)) {
2475
2476		rssi += sc->sc_rssi_2ghz_corr;
2477
2478		if (lna == 1)
2479			rssi -= 64;
2480		else if (lna == 2)
2481			rssi -= 74;
2482		else if (lna == 3)
2483			rssi -= 90;
2484	} else {
2485
2486		rssi += sc->sc_rssi_5ghz_corr;
2487
2488		if ((!sc->sc_ext_5ghz_lna) && (lna != 1))
2489			rssi += 4;
2490
2491		if (lna == 1)
2492			rssi -= 64;
2493		else if (lna == 2)
2494			rssi -= 86;
2495		else if (lna == 3)
2496			rssi -= 100;
2497	}
2498
2499	/* range check */
2500
2501	if (rssi < 0)
2502		rssi = 0;
2503	else if (rssi > 255)
2504		rssi = 255;
2505
2506	return (rssi);
2507}
2508
2509static struct ieee80211vap *
2510rum_vap_create(struct ieee80211com *ic,
2511    const char name[IFNAMSIZ], int unit, int opmode, int flags,
2512    const uint8_t bssid[IEEE80211_ADDR_LEN],
2513    const uint8_t mac[IEEE80211_ADDR_LEN])
2514{
2515	struct rum_vap *rvp;
2516	struct ieee80211vap *vap;
2517	struct rum_softc *sc = ic->ic_ifp->if_softc;
2518
2519	DPRINTF("\n");
2520
2521	/* Need to sync with config thread: */
2522	mtx_lock(&sc->sc_mtx);
2523	if (usb2_config_td_sync(&sc->sc_config_td)) {
2524		mtx_unlock(&sc->sc_mtx);
2525		/* config thread is gone */
2526		return (NULL);
2527	}
2528	mtx_unlock(&sc->sc_mtx);
2529
2530	if (!TAILQ_EMPTY(&ic->ic_vaps))	/* only one at a time */
2531		return NULL;
2532	rvp = (struct rum_vap *)malloc(sizeof(struct rum_vap),
2533	    M_80211_VAP, M_NOWAIT | M_ZERO);
2534	if (rvp == NULL)
2535		return NULL;
2536	vap = &rvp->vap;
2537	/* enable s/w bmiss handling for sta mode */
2538	ieee80211_vap_setup(ic, vap, name, unit, opmode,
2539	    flags | IEEE80211_CLONE_NOBEACONS, bssid, mac);
2540
2541	/* override state transition machine */
2542	rvp->newstate = vap->iv_newstate;
2543	vap->iv_newstate = &rum_newstate_cb;
2544
2545	ieee80211_amrr_init(&rvp->amrr, vap,
2546	    IEEE80211_AMRR_MIN_SUCCESS_THRESHOLD,
2547	    IEEE80211_AMRR_MAX_SUCCESS_THRESHOLD,
2548	    1000 /* 1 sec */ );
2549
2550	/* complete setup */
2551	ieee80211_vap_attach(vap, ieee80211_media_change, ieee80211_media_status);
2552
2553	/* store current operation mode */
2554	ic->ic_opmode = opmode;
2555
2556	return (vap);
2557}
2558
2559static void
2560rum_vap_delete(struct ieee80211vap *vap)
2561{
2562	struct rum_vap *rvp = RUM_VAP(vap);
2563	struct rum_softc *sc = vap->iv_ic->ic_ifp->if_softc;
2564
2565	DPRINTF("\n");
2566
2567	/* Need to sync with config thread: */
2568	mtx_lock(&sc->sc_mtx);
2569	if (usb2_config_td_sync(&sc->sc_config_td)) {
2570		/* ignore */
2571	}
2572	mtx_unlock(&sc->sc_mtx);
2573
2574	ieee80211_amrr_cleanup(&rvp->amrr);
2575	ieee80211_vap_detach(vap);
2576	free(rvp, M_80211_VAP);
2577}
2578
2579/* ARGUSED */
2580static struct ieee80211_node *
2581rum_node_alloc(struct ieee80211vap *vap __unused,
2582    const uint8_t mac[IEEE80211_ADDR_LEN] __unused)
2583{
2584	struct rum_node *rn;
2585
2586	rn = malloc(sizeof(struct rum_node), M_80211_NODE, M_NOWAIT | M_ZERO);
2587	return ((rn != NULL) ? &rn->ni : NULL);
2588}
2589
2590static void
2591rum_newassoc(struct ieee80211_node *ni, int isnew)
2592{
2593	struct ieee80211vap *vap = ni->ni_vap;
2594
2595	ieee80211_amrr_node_init(&RUM_VAP(vap)->amrr, &RUM_NODE(ni)->amn, ni);
2596}
2597
2598static void
2599rum_fill_write_queue(struct rum_softc *sc)
2600{
2601	struct ifnet *ifp = sc->sc_ifp;
2602	struct ieee80211_node *ni;
2603	struct mbuf *m;
2604
2605	/*
2606	 * We only fill up half of the queue with data frames. The rest is
2607	 * reserved for other kinds of frames.
2608	 */
2609
2610	while (sc->sc_tx_queue.ifq_len < (IFQ_MAXLEN / 2)) {
2611
2612		IFQ_DRV_DEQUEUE(&ifp->if_snd, m);
2613		if (m == NULL)
2614			break;
2615
2616		ni = (void *)(m->m_pkthdr.rcvif);
2617		m = ieee80211_encap(ni, m);
2618		if (m == NULL) {
2619			ieee80211_free_node(ni);
2620			continue;
2621		}
2622		rum_tx_data(sc, m, ni);
2623	}
2624}
2625
2626static void
2627rum_tx_clean_queue(struct rum_softc *sc)
2628{
2629	struct mbuf *m;
2630
2631	for (;;) {
2632		_IF_DEQUEUE(&sc->sc_tx_queue, m);
2633
2634		if (!m) {
2635			break;
2636		}
2637		rum_tx_freem(m);
2638	}
2639}
2640
2641static void
2642rum_tx_freem(struct mbuf *m)
2643{
2644	struct ieee80211_node *ni;
2645
2646	while (m) {
2647		ni = (void *)(m->m_pkthdr.rcvif);
2648		if (!ni) {
2649			m = m_free(m);
2650			continue;
2651		}
2652		if (m->m_flags & M_TXCB) {
2653			ieee80211_process_callback(ni, m, 0);
2654		}
2655		m_freem(m);
2656		ieee80211_free_node(ni);
2657
2658		break;
2659	}
2660}
2661
2662static void
2663rum_tx_mgt(struct rum_softc *sc, struct mbuf *m, struct ieee80211_node *ni)
2664{
2665	struct ieee80211vap *vap = ni->ni_vap;
2666	struct ieee80211com *ic = ni->ni_ic;
2667	const struct ieee80211_txparam *tp;
2668	struct ieee80211_frame *wh;
2669	struct ieee80211_key *k;
2670	uint32_t flags;
2671	uint16_t dur;
2672
2673	tp = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_curchan)];
2674
2675	wh = mtod(m, struct ieee80211_frame *);
2676	if (wh->i_fc[1] & IEEE80211_FC1_WEP) {
2677		k = ieee80211_crypto_encap(ni, m);
2678		if (k == NULL) {
2679			m_freem(m);
2680			ieee80211_free_node(ni);
2681			return;
2682		}
2683		wh = mtod(m, struct ieee80211_frame *);
2684	}
2685	flags = 0;
2686	if (!IEEE80211_IS_MULTICAST(wh->i_addr1)) {
2687		flags |= RT2573_TX_NEED_ACK;
2688
2689		dur = ieee80211_ack_duration(sc->sc_rates, tp->mgmtrate,
2690		    ic->ic_flags & IEEE80211_F_SHPREAMBLE);
2691		USETW(wh->i_dur, dur);
2692
2693		/* tell hardware to add timestamp for probe responses */
2694		if ((wh->i_fc[0] &
2695		    (IEEE80211_FC0_TYPE_MASK | IEEE80211_FC0_SUBTYPE_MASK)) ==
2696		    (IEEE80211_FC0_TYPE_MGT | IEEE80211_FC0_SUBTYPE_PROBE_RESP))
2697			flags |= RT2573_TX_TIMESTAMP;
2698	}
2699	m->m_pkthdr.rcvif = (void *)ni;
2700	rum_setup_desc_and_tx(sc, m, flags, 0, tp->mgmtrate);
2701}
2702
2703static struct ieee80211vap *
2704rum_get_vap(struct rum_softc *sc)
2705{
2706	struct ifnet *ifp;
2707	struct ieee80211com *ic;
2708
2709	if (sc == NULL) {
2710		return NULL;
2711	}
2712	ifp = sc->sc_ifp;
2713	if (ifp == NULL) {
2714		return NULL;
2715	}
2716	ic = ifp->if_l2com;
2717	if (ic == NULL) {
2718		return NULL;
2719	}
2720	return TAILQ_FIRST(&ic->ic_vaps);
2721}
2722
2723static void
2724rum_tx_data(struct rum_softc *sc, struct mbuf *m,
2725    struct ieee80211_node *ni)
2726{
2727	struct ieee80211vap *vap = ni->ni_vap;
2728	struct ieee80211com *ic = ni->ni_ic;
2729	const struct ieee80211_txparam *tp;
2730	struct ieee80211_frame *wh;
2731	struct ieee80211_key *k;
2732	uint32_t flags = 0;
2733	uint16_t dur;
2734	uint16_t rate;
2735
2736	DPRINTFN(11, "Sending data.\n");
2737
2738	wh = mtod(m, struct ieee80211_frame *);
2739
2740	tp = &vap->iv_txparms[ieee80211_chan2mode(ni->ni_chan)];
2741	if (IEEE80211_IS_MULTICAST(wh->i_addr1))
2742		rate = tp->mcastrate;
2743	else if (tp->ucastrate != IEEE80211_FIXED_RATE_NONE)
2744		rate = tp->ucastrate;
2745	else
2746		rate = ni->ni_txrate;
2747
2748	if (wh->i_fc[1] & IEEE80211_FC1_WEP) {
2749		k = ieee80211_crypto_encap(ni, m);
2750		if (k == NULL) {
2751			m_freem(m);
2752			ieee80211_free_node(ni);
2753			return;
2754		}
2755		/* packet header may have moved, reset our local pointer */
2756		wh = mtod(m, struct ieee80211_frame *);
2757	}
2758	if (!IEEE80211_IS_MULTICAST(wh->i_addr1)) {
2759		uint8_t prot = IEEE80211_PROT_NONE;
2760
2761		if (m->m_pkthdr.len + IEEE80211_CRC_LEN > vap->iv_rtsthreshold)
2762			prot = IEEE80211_PROT_RTSCTS;
2763		else if ((ic->ic_flags & IEEE80211_F_USEPROT) &&
2764		    ieee80211_rate2phytype(sc->sc_rates, rate) == IEEE80211_T_OFDM)
2765			prot = ic->ic_protmode;
2766		if (prot != IEEE80211_PROT_NONE) {
2767			rum_tx_prot(sc, m, ni, prot, rate);
2768			flags |= RT2573_TX_LONG_RETRY | RT2573_TX_IFS_SIFS;
2769		}
2770		flags |= RT2573_TX_NEED_ACK;
2771		flags |= RT2573_TX_MORE_FRAG;
2772
2773		dur = ieee80211_ack_duration(sc->sc_rates, rate,
2774		    ic->ic_flags & IEEE80211_F_SHPREAMBLE);
2775		USETW(wh->i_dur, dur);
2776	}
2777	m->m_pkthdr.rcvif = (void *)ni;
2778	rum_setup_desc_and_tx(sc, m, flags, 0, rate);
2779}
2780
2781static void
2782rum_tx_prot(struct rum_softc *sc,
2783    const struct mbuf *m, struct ieee80211_node *ni,
2784    uint8_t prot, uint16_t rate)
2785{
2786	struct ieee80211com *ic = ni->ni_ic;
2787	const struct ieee80211_frame *wh;
2788	struct mbuf *mprot;
2789	uint32_t flags;
2790	uint16_t protrate;
2791	uint16_t ackrate;
2792	uint16_t pktlen;
2793	uint16_t dur;
2794	uint8_t isshort;
2795
2796	KASSERT((prot == IEEE80211_PROT_RTSCTS) ||
2797	    (prot == IEEE80211_PROT_CTSONLY),
2798	    ("protection %u", prot));
2799
2800	DPRINTFN(11, "Sending protection frame.\n");
2801
2802	wh = mtod(m, const struct ieee80211_frame *);
2803	pktlen = m->m_pkthdr.len + IEEE80211_CRC_LEN;
2804
2805	protrate = ieee80211_ctl_rate(sc->sc_rates, rate);
2806	ackrate = ieee80211_ack_rate(sc->sc_rates, rate);
2807
2808	isshort = (ic->ic_flags & IEEE80211_F_SHPREAMBLE) != 0;
2809	dur = ieee80211_compute_duration(sc->sc_rates, pktlen, rate, isshort);
2810	+ieee80211_ack_duration(sc->sc_rates, rate, isshort);
2811	flags = RT2573_TX_MORE_FRAG;
2812	if (prot == IEEE80211_PROT_RTSCTS) {
2813		/* NB: CTS is the same size as an ACK */
2814		dur += ieee80211_ack_duration(sc->sc_rates, rate, isshort);
2815		flags |= RT2573_TX_NEED_ACK;
2816		mprot = ieee80211_alloc_rts(ic, wh->i_addr1, wh->i_addr2, dur);
2817	} else {
2818		mprot = ieee80211_alloc_cts(ic, ni->ni_vap->iv_myaddr, dur);
2819	}
2820	if (mprot == NULL) {
2821		return;
2822	}
2823	mprot->m_pkthdr.rcvif = (void *)ieee80211_ref_node(ni);
2824	rum_setup_desc_and_tx(sc, mprot, flags, 0, protrate);
2825}
2826
2827static void
2828rum_tx_raw(struct rum_softc *sc, struct mbuf *m, struct ieee80211_node *ni,
2829    const struct ieee80211_bpf_params *params)
2830{
2831	uint32_t flags;
2832	uint16_t rate;
2833
2834	DPRINTFN(11, "Sending raw frame.\n");
2835
2836	rate = params->ibp_rate0 & IEEE80211_RATE_VAL;
2837
2838	/* XXX validate */
2839	if (rate == 0) {
2840		m_freem(m);
2841		ieee80211_free_node(ni);
2842		return;
2843	}
2844	flags = 0;
2845	if ((params->ibp_flags & IEEE80211_BPF_NOACK) == 0)
2846		flags |= RT2573_TX_NEED_ACK;
2847	if (params->ibp_flags & (IEEE80211_BPF_RTS | IEEE80211_BPF_CTS)) {
2848		rum_tx_prot(sc, m, ni,
2849		    params->ibp_flags & IEEE80211_BPF_RTS ?
2850		    IEEE80211_PROT_RTSCTS : IEEE80211_PROT_CTSONLY,
2851		    rate);
2852		flags |= RT2573_TX_LONG_RETRY | RT2573_TX_IFS_SIFS;
2853	}
2854	m->m_pkthdr.rcvif = (void *)ni;
2855	rum_setup_desc_and_tx(sc, m, flags, 0, rate);
2856}
2857
2858static int
2859rum_raw_xmit_cb(struct ieee80211_node *ni, struct mbuf *m,
2860    const struct ieee80211_bpf_params *params)
2861{
2862	struct ieee80211com *ic = ni->ni_ic;
2863	struct ifnet *ifp = ic->ic_ifp;
2864	struct rum_softc *sc = ifp->if_softc;
2865
2866	mtx_lock(&sc->sc_mtx);
2867	if (params == NULL) {
2868		/*
2869		 * Legacy path; interpret frame contents to decide
2870		 * precisely how to send the frame.
2871		 */
2872		rum_tx_mgt(sc, m, ni);
2873	} else {
2874		/*
2875		 * Caller supplied explicit parameters to use in
2876		 * sending the frame.
2877		 */
2878		rum_tx_raw(sc, m, ni, params);
2879	}
2880	mtx_unlock(&sc->sc_mtx);
2881	return (0);
2882}
2883
2884static void
2885rum_update_mcast_cb(struct ifnet *ifp)
2886{
2887	/* not supported */
2888}
2889
2890static void
2891rum_update_promisc_cb(struct ifnet *ifp)
2892{
2893	struct rum_softc *sc = ifp->if_softc;
2894
2895	mtx_lock(&sc->sc_mtx);
2896	usb2_config_td_queue_command
2897	    (&sc->sc_config_td, &rum_config_copy,
2898	    &rum_cfg_update_promisc, 0, 0);
2899	mtx_unlock(&sc->sc_mtx);
2900}
2901