1/*- 2 * Copyright (c) 1997, 1998, 1999 3 * Bill Paul <wpaul@ctr.columbia.edu>. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. All advertising materials mentioning features or use of this software 14 * must display the following acknowledgement: 15 * This product includes software developed by Bill Paul. 16 * 4. Neither the name of the author nor the names of any co-contributors 17 * may be used to endorse or promote products derived from this software 18 * without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND 21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL Bill Paul OR THE VOICES IN HIS HEAD 24 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 25 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 26 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 27 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 28 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 29 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 30 * THE POSSIBILITY OF SUCH DAMAGE. 31 */ 32 33/* 34 * Lucent WaveLAN/IEEE 802.11 PCMCIA driver. 35 * 36 * Original FreeBSD driver written by Bill Paul <wpaul@ctr.columbia.edu> 37 * Electrical Engineering Department 38 * Columbia University, New York City 39 */ 40 41/* 42 * The WaveLAN/IEEE adapter is the second generation of the WaveLAN 43 * from Lucent. Unlike the older cards, the new ones are programmed 44 * entirely via a firmware-driven controller called the Hermes. 45 * Unfortunately, Lucent will not release the Hermes programming manual 46 * without an NDA (if at all). What they do release is an API library 47 * called the HCF (Hardware Control Functions) which is supposed to 48 * do the device-specific operations of a device driver for you. The 49 * publicly available version of the HCF library (the 'HCF Light') is 50 * a) extremely gross, b) lacks certain features, particularly support 51 * for 802.11 frames, and c) is contaminated by the GNU Public License. 52 * 53 * This driver does not use the HCF or HCF Light at all. Instead, it 54 * programs the Hermes controller directly, using information gleaned 55 * from the HCF Light code and corresponding documentation. 56 * 57 * This driver supports the ISA, PCMCIA and PCI versions of the Lucent 58 * WaveLan cards (based on the Hermes chipset), as well as the newer 59 * Prism 2 chipsets with firmware from Intersil and Symbol. 60 */ 61 62#include <sys/cdefs.h> 63__FBSDID("$FreeBSD$"); 64 65#include "opt_wlan.h" 66 67#define WI_HERMES_STATS_WAR /* Work around stats counter bug. */ 68 69#include <sys/param.h> 70#include <sys/systm.h> 71#include <sys/endian.h> 72#include <sys/sockio.h> 73#include <sys/mbuf.h> 74#include <sys/priv.h> 75#include <sys/proc.h> 76#include <sys/kernel.h> 77#include <sys/malloc.h> 78#include <sys/socket.h> 79#include <sys/module.h> 80#include <sys/bus.h> 81#include <sys/random.h> 82#include <sys/syslog.h> 83#include <sys/sysctl.h> 84 85#include <machine/bus.h> 86#include <machine/resource.h> 87#include <machine/atomic.h> 88#include <sys/rman.h> 89 90#include <net/if.h> 91#include <net/if_var.h> 92#include <net/if_arp.h> 93#include <net/ethernet.h> 94#include <net/if_dl.h> 95#include <net/if_llc.h> 96#include <net/if_media.h> 97#include <net/if_types.h> 98 99#include <net80211/ieee80211_var.h> 100#include <net80211/ieee80211_ioctl.h> 101#include <net80211/ieee80211_radiotap.h> 102 103#include <netinet/in.h> 104#include <netinet/in_systm.h> 105#include <netinet/in_var.h> 106#include <netinet/ip.h> 107#include <netinet/if_ether.h> 108 109#include <net/bpf.h> 110 111#include <dev/wi/if_wavelan_ieee.h> 112#include <dev/wi/if_wireg.h> 113#include <dev/wi/if_wivar.h> 114 115static struct ieee80211vap *wi_vap_create(struct ieee80211com *, 116 const char [IFNAMSIZ], int, enum ieee80211_opmode, int, 117 const uint8_t [IEEE80211_ADDR_LEN], 118 const uint8_t [IEEE80211_ADDR_LEN]); 119static void wi_vap_delete(struct ieee80211vap *vap); 120static int wi_transmit(struct ieee80211com *, struct mbuf *); 121static void wi_start(struct wi_softc *); 122static int wi_start_tx(struct wi_softc *, struct wi_frame *, struct mbuf *); 123static int wi_raw_xmit(struct ieee80211_node *, struct mbuf *, 124 const struct ieee80211_bpf_params *); 125static int wi_newstate_sta(struct ieee80211vap *, enum ieee80211_state, int); 126static int wi_newstate_hostap(struct ieee80211vap *, enum ieee80211_state, 127 int); 128static void wi_recv_mgmt(struct ieee80211_node *ni, struct mbuf *m, 129 int subtype, const struct ieee80211_rx_stats *rxs, 130 int rssi, int nf); 131static int wi_reset(struct wi_softc *); 132static void wi_watchdog(void *); 133static void wi_parent(struct ieee80211com *); 134static void wi_media_status(struct ifnet *, struct ifmediareq *); 135static void wi_rx_intr(struct wi_softc *); 136static void wi_tx_intr(struct wi_softc *); 137static void wi_tx_ex_intr(struct wi_softc *); 138 139static void wi_info_intr(struct wi_softc *); 140 141static int wi_write_txrate(struct wi_softc *, struct ieee80211vap *); 142static int wi_write_wep(struct wi_softc *, struct ieee80211vap *); 143static int wi_write_multi(struct wi_softc *); 144static void wi_update_mcast(struct ieee80211com *); 145static void wi_update_promisc(struct ieee80211com *); 146static int wi_alloc_fid(struct wi_softc *, int, int *); 147static void wi_read_nicid(struct wi_softc *); 148static int wi_write_ssid(struct wi_softc *, int, u_int8_t *, int); 149 150static int wi_cmd(struct wi_softc *, int, int, int, int); 151static int wi_seek_bap(struct wi_softc *, int, int); 152static int wi_read_bap(struct wi_softc *, int, int, void *, int); 153static int wi_write_bap(struct wi_softc *, int, int, const void *, int); 154static int wi_mwrite_bap(struct wi_softc *, int, int, struct mbuf *, int); 155static int wi_read_rid(struct wi_softc *, int, void *, int *); 156static int wi_write_rid(struct wi_softc *, int, const void *, int); 157static int wi_write_appie(struct wi_softc *, int, const struct ieee80211_appie *); 158static u_int16_t wi_read_chanmask(struct wi_softc *); 159 160static void wi_scan_start(struct ieee80211com *); 161static void wi_scan_end(struct ieee80211com *); 162static void wi_getradiocaps(struct ieee80211com *, int, int *, 163 struct ieee80211_channel[]); 164static void wi_set_channel(struct ieee80211com *); 165 166static __inline int 167wi_write_val(struct wi_softc *sc, int rid, u_int16_t val) 168{ 169 170 val = htole16(val); 171 return wi_write_rid(sc, rid, &val, sizeof(val)); 172} 173 174static SYSCTL_NODE(_hw, OID_AUTO, wi, CTLFLAG_RD, 0, 175 "Wireless driver parameters"); 176 177static struct timeval lasttxerror; /* time of last tx error msg */ 178static int curtxeps; /* current tx error msgs/sec */ 179static int wi_txerate = 0; /* tx error rate: max msgs/sec */ 180SYSCTL_INT(_hw_wi, OID_AUTO, txerate, CTLFLAG_RW, &wi_txerate, 181 0, "max tx error msgs/sec; 0 to disable msgs"); 182 183#define WI_DEBUG 184#ifdef WI_DEBUG 185static int wi_debug = 0; 186SYSCTL_INT(_hw_wi, OID_AUTO, debug, CTLFLAG_RW, &wi_debug, 187 0, "control debugging printfs"); 188#define DPRINTF(X) if (wi_debug) printf X 189#else 190#define DPRINTF(X) 191#endif 192 193#define WI_INTRS (WI_EV_RX | WI_EV_ALLOC | WI_EV_INFO) 194 195struct wi_card_ident wi_card_ident[] = { 196 /* CARD_ID CARD_NAME FIRM_TYPE */ 197 { WI_NIC_LUCENT_ID, WI_NIC_LUCENT_STR, WI_LUCENT }, 198 { WI_NIC_SONY_ID, WI_NIC_SONY_STR, WI_LUCENT }, 199 { WI_NIC_LUCENT_EMB_ID, WI_NIC_LUCENT_EMB_STR, WI_LUCENT }, 200 { WI_NIC_EVB2_ID, WI_NIC_EVB2_STR, WI_INTERSIL }, 201 { WI_NIC_HWB3763_ID, WI_NIC_HWB3763_STR, WI_INTERSIL }, 202 { WI_NIC_HWB3163_ID, WI_NIC_HWB3163_STR, WI_INTERSIL }, 203 { WI_NIC_HWB3163B_ID, WI_NIC_HWB3163B_STR, WI_INTERSIL }, 204 { WI_NIC_EVB3_ID, WI_NIC_EVB3_STR, WI_INTERSIL }, 205 { WI_NIC_HWB1153_ID, WI_NIC_HWB1153_STR, WI_INTERSIL }, 206 { WI_NIC_P2_SST_ID, WI_NIC_P2_SST_STR, WI_INTERSIL }, 207 { WI_NIC_EVB2_SST_ID, WI_NIC_EVB2_SST_STR, WI_INTERSIL }, 208 { WI_NIC_3842_EVA_ID, WI_NIC_3842_EVA_STR, WI_INTERSIL }, 209 { WI_NIC_3842_PCMCIA_AMD_ID, WI_NIC_3842_PCMCIA_STR, WI_INTERSIL }, 210 { WI_NIC_3842_PCMCIA_SST_ID, WI_NIC_3842_PCMCIA_STR, WI_INTERSIL }, 211 { WI_NIC_3842_PCMCIA_ATL_ID, WI_NIC_3842_PCMCIA_STR, WI_INTERSIL }, 212 { WI_NIC_3842_PCMCIA_ATS_ID, WI_NIC_3842_PCMCIA_STR, WI_INTERSIL }, 213 { WI_NIC_3842_MINI_AMD_ID, WI_NIC_3842_MINI_STR, WI_INTERSIL }, 214 { WI_NIC_3842_MINI_SST_ID, WI_NIC_3842_MINI_STR, WI_INTERSIL }, 215 { WI_NIC_3842_MINI_ATL_ID, WI_NIC_3842_MINI_STR, WI_INTERSIL }, 216 { WI_NIC_3842_MINI_ATS_ID, WI_NIC_3842_MINI_STR, WI_INTERSIL }, 217 { WI_NIC_3842_PCI_AMD_ID, WI_NIC_3842_PCI_STR, WI_INTERSIL }, 218 { WI_NIC_3842_PCI_SST_ID, WI_NIC_3842_PCI_STR, WI_INTERSIL }, 219 { WI_NIC_3842_PCI_ATS_ID, WI_NIC_3842_PCI_STR, WI_INTERSIL }, 220 { WI_NIC_3842_PCI_ATL_ID, WI_NIC_3842_PCI_STR, WI_INTERSIL }, 221 { WI_NIC_P3_PCMCIA_AMD_ID, WI_NIC_P3_PCMCIA_STR, WI_INTERSIL }, 222 { WI_NIC_P3_PCMCIA_SST_ID, WI_NIC_P3_PCMCIA_STR, WI_INTERSIL }, 223 { WI_NIC_P3_PCMCIA_ATL_ID, WI_NIC_P3_PCMCIA_STR, WI_INTERSIL }, 224 { WI_NIC_P3_PCMCIA_ATS_ID, WI_NIC_P3_PCMCIA_STR, WI_INTERSIL }, 225 { WI_NIC_P3_MINI_AMD_ID, WI_NIC_P3_MINI_STR, WI_INTERSIL }, 226 { WI_NIC_P3_MINI_SST_ID, WI_NIC_P3_MINI_STR, WI_INTERSIL }, 227 { WI_NIC_P3_MINI_ATL_ID, WI_NIC_P3_MINI_STR, WI_INTERSIL }, 228 { WI_NIC_P3_MINI_ATS_ID, WI_NIC_P3_MINI_STR, WI_INTERSIL }, 229 { 0, NULL, 0 }, 230}; 231 232static char *wi_firmware_names[] = { "none", "Hermes", "Intersil", "Symbol" }; 233 234devclass_t wi_devclass; 235 236int 237wi_attach(device_t dev) 238{ 239 struct wi_softc *sc = device_get_softc(dev); 240 struct ieee80211com *ic = &sc->sc_ic; 241 int i, nrates, buflen; 242 u_int16_t val; 243 u_int8_t ratebuf[2 + IEEE80211_RATE_SIZE]; 244 struct ieee80211_rateset *rs; 245 struct sysctl_ctx_list *sctx; 246 struct sysctl_oid *soid; 247 static const u_int8_t empty_macaddr[IEEE80211_ADDR_LEN] = { 248 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 249 }; 250 int error; 251 252 sc->sc_firmware_type = WI_NOTYPE; 253 sc->wi_cmd_count = 500; 254 /* Reset the NIC. */ 255 if (wi_reset(sc) != 0) { 256 wi_free(dev); 257 return ENXIO; /* XXX */ 258 } 259 260 /* Read NIC identification */ 261 wi_read_nicid(sc); 262 switch (sc->sc_firmware_type) { 263 case WI_LUCENT: 264 if (sc->sc_sta_firmware_ver < 60006) 265 goto reject; 266 break; 267 case WI_INTERSIL: 268 if (sc->sc_sta_firmware_ver < 800) 269 goto reject; 270 break; 271 default: 272 reject: 273 device_printf(dev, "Sorry, this card is not supported " 274 "(type %d, firmware ver %d)\n", 275 sc->sc_firmware_type, sc->sc_sta_firmware_ver); 276 wi_free(dev); 277 return EOPNOTSUPP; 278 } 279 280 /* Export info about the device via sysctl */ 281 sctx = device_get_sysctl_ctx(dev); 282 soid = device_get_sysctl_tree(dev); 283 SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, 284 "firmware_type", CTLFLAG_RD, 285 wi_firmware_names[sc->sc_firmware_type], 0, 286 "Firmware type string"); 287 SYSCTL_ADD_INT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "sta_version", 288 CTLFLAG_RD, &sc->sc_sta_firmware_ver, 0, 289 "Station Firmware version"); 290 if (sc->sc_firmware_type == WI_INTERSIL) 291 SYSCTL_ADD_INT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, 292 "pri_version", CTLFLAG_RD, &sc->sc_pri_firmware_ver, 0, 293 "Primary Firmware version"); 294 SYSCTL_ADD_UINT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "nic_id", 295 CTLFLAG_RD, &sc->sc_nic_id, 0, "NIC id"); 296 SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "nic_name", 297 CTLFLAG_RD, sc->sc_nic_name, 0, "NIC name"); 298 299 mtx_init(&sc->sc_mtx, device_get_nameunit(dev), MTX_NETWORK_LOCK, 300 MTX_DEF | MTX_RECURSE); 301 callout_init_mtx(&sc->sc_watchdog, &sc->sc_mtx, 0); 302 mbufq_init(&sc->sc_snd, ifqmaxlen); 303 304 /* 305 * Read the station address. 306 * And do it twice. I've seen PRISM-based cards that return 307 * an error when trying to read it the first time, which causes 308 * the probe to fail. 309 */ 310 buflen = IEEE80211_ADDR_LEN; 311 error = wi_read_rid(sc, WI_RID_MAC_NODE, &ic->ic_macaddr, &buflen); 312 if (error != 0) { 313 buflen = IEEE80211_ADDR_LEN; 314 error = wi_read_rid(sc, WI_RID_MAC_NODE, &ic->ic_macaddr, 315 &buflen); 316 } 317 if (error || IEEE80211_ADDR_EQ(&ic->ic_macaddr, empty_macaddr)) { 318 if (error != 0) 319 device_printf(dev, "mac read failed %d\n", error); 320 else { 321 device_printf(dev, "mac read failed (all zeros)\n"); 322 error = ENXIO; 323 } 324 wi_free(dev); 325 return (error); 326 } 327 328 ic->ic_softc = sc; 329 ic->ic_name = device_get_nameunit(dev); 330 ic->ic_phytype = IEEE80211_T_DS; 331 ic->ic_opmode = IEEE80211_M_STA; 332 ic->ic_caps = IEEE80211_C_STA 333 | IEEE80211_C_PMGT 334 | IEEE80211_C_MONITOR 335 ; 336 337 /* 338 * Query the card for available channels and setup the 339 * channel table. We assume these are all 11b channels. 340 */ 341 sc->sc_chanmask = wi_read_chanmask(sc); 342 wi_getradiocaps(ic, IEEE80211_CHAN_MAX, &ic->ic_nchans, 343 ic->ic_channels); 344 345 /* 346 * Set flags based on firmware version. 347 */ 348 switch (sc->sc_firmware_type) { 349 case WI_LUCENT: 350 sc->sc_ntxbuf = 1; 351 ic->ic_caps |= IEEE80211_C_IBSS; 352 353 sc->sc_ibss_port = WI_PORTTYPE_BSS; 354 sc->sc_monitor_port = WI_PORTTYPE_ADHOC; 355 sc->sc_min_rssi = WI_LUCENT_MIN_RSSI; 356 sc->sc_max_rssi = WI_LUCENT_MAX_RSSI; 357 sc->sc_dbm_offset = WI_LUCENT_DBM_OFFSET; 358 break; 359 case WI_INTERSIL: 360 sc->sc_ntxbuf = WI_NTXBUF; 361 sc->sc_flags |= WI_FLAGS_HAS_FRAGTHR 362 | WI_FLAGS_HAS_ROAMING; 363 /* 364 * Old firmware are slow, so give peace a chance. 365 */ 366 if (sc->sc_sta_firmware_ver < 10000) 367 sc->wi_cmd_count = 5000; 368 if (sc->sc_sta_firmware_ver > 10101) 369 sc->sc_flags |= WI_FLAGS_HAS_DBMADJUST; 370 ic->ic_caps |= IEEE80211_C_IBSS; 371 /* 372 * version 0.8.3 and newer are the only ones that are known 373 * to currently work. Earlier versions can be made to work, 374 * at least according to the Linux driver but we require 375 * monitor mode so this is irrelevant. 376 */ 377 ic->ic_caps |= IEEE80211_C_HOSTAP; 378 if (sc->sc_sta_firmware_ver >= 10603) 379 sc->sc_flags |= WI_FLAGS_HAS_ENHSECURITY; 380 if (sc->sc_sta_firmware_ver >= 10700) { 381 /* 382 * 1.7.0+ have the necessary support for sta mode WPA. 383 */ 384 sc->sc_flags |= WI_FLAGS_HAS_WPASUPPORT; 385 ic->ic_caps |= IEEE80211_C_WPA; 386 } 387 388 sc->sc_ibss_port = WI_PORTTYPE_IBSS; 389 sc->sc_monitor_port = WI_PORTTYPE_APSILENT; 390 sc->sc_min_rssi = WI_PRISM_MIN_RSSI; 391 sc->sc_max_rssi = WI_PRISM_MAX_RSSI; 392 sc->sc_dbm_offset = WI_PRISM_DBM_OFFSET; 393 break; 394 } 395 396 /* 397 * Find out if we support WEP on this card. 398 */ 399 buflen = sizeof(val); 400 if (wi_read_rid(sc, WI_RID_WEP_AVAIL, &val, &buflen) == 0 && 401 val != htole16(0)) 402 ic->ic_cryptocaps |= IEEE80211_CRYPTO_WEP; 403 404 /* Find supported rates. */ 405 buflen = sizeof(ratebuf); 406 rs = &ic->ic_sup_rates[IEEE80211_MODE_11B]; 407 if (wi_read_rid(sc, WI_RID_DATA_RATES, ratebuf, &buflen) == 0) { 408 nrates = le16toh(*(u_int16_t *)ratebuf); 409 if (nrates > IEEE80211_RATE_MAXSIZE) 410 nrates = IEEE80211_RATE_MAXSIZE; 411 rs->rs_nrates = 0; 412 for (i = 0; i < nrates; i++) 413 if (ratebuf[2+i]) 414 rs->rs_rates[rs->rs_nrates++] = ratebuf[2+i]; 415 } else { 416 /* XXX fallback on error? */ 417 } 418 419 buflen = sizeof(val); 420 if ((sc->sc_flags & WI_FLAGS_HAS_DBMADJUST) && 421 wi_read_rid(sc, WI_RID_DBM_ADJUST, &val, &buflen) == 0) { 422 sc->sc_dbm_offset = le16toh(val); 423 } 424 425 sc->sc_portnum = WI_DEFAULT_PORT; 426 427 ieee80211_ifattach(ic); 428 ic->ic_raw_xmit = wi_raw_xmit; 429 ic->ic_scan_start = wi_scan_start; 430 ic->ic_scan_end = wi_scan_end; 431 ic->ic_getradiocaps = wi_getradiocaps; 432 ic->ic_set_channel = wi_set_channel; 433 ic->ic_vap_create = wi_vap_create; 434 ic->ic_vap_delete = wi_vap_delete; 435 ic->ic_update_mcast = wi_update_mcast; 436 ic->ic_update_promisc = wi_update_promisc; 437 ic->ic_transmit = wi_transmit; 438 ic->ic_parent = wi_parent; 439 440 ieee80211_radiotap_attach(ic, 441 &sc->sc_tx_th.wt_ihdr, sizeof(sc->sc_tx_th), 442 WI_TX_RADIOTAP_PRESENT, 443 &sc->sc_rx_th.wr_ihdr, sizeof(sc->sc_rx_th), 444 WI_RX_RADIOTAP_PRESENT); 445 446 if (bootverbose) 447 ieee80211_announce(ic); 448 449 error = bus_setup_intr(dev, sc->irq, INTR_TYPE_NET | INTR_MPSAFE, 450 NULL, wi_intr, sc, &sc->wi_intrhand); 451 if (error) { 452 device_printf(dev, "bus_setup_intr() failed! (%d)\n", error); 453 ieee80211_ifdetach(ic); 454 wi_free(dev); 455 return error; 456 } 457 458 return (0); 459} 460 461int 462wi_detach(device_t dev) 463{ 464 struct wi_softc *sc = device_get_softc(dev); 465 struct ieee80211com *ic = &sc->sc_ic; 466 467 WI_LOCK(sc); 468 469 /* check if device was removed */ 470 sc->wi_gone |= !bus_child_present(dev); 471 472 wi_stop(sc, 0); 473 WI_UNLOCK(sc); 474 ieee80211_ifdetach(ic); 475 476 bus_teardown_intr(dev, sc->irq, sc->wi_intrhand); 477 wi_free(dev); 478 mbufq_drain(&sc->sc_snd); 479 mtx_destroy(&sc->sc_mtx); 480 return (0); 481} 482 483static struct ieee80211vap * 484wi_vap_create(struct ieee80211com *ic, const char name[IFNAMSIZ], int unit, 485 enum ieee80211_opmode opmode, int flags, 486 const uint8_t bssid[IEEE80211_ADDR_LEN], 487 const uint8_t mac[IEEE80211_ADDR_LEN]) 488{ 489 struct wi_softc *sc = ic->ic_softc; 490 struct wi_vap *wvp; 491 struct ieee80211vap *vap; 492 493 if (!TAILQ_EMPTY(&ic->ic_vaps)) /* only one at a time */ 494 return NULL; 495 wvp = malloc(sizeof(struct wi_vap), M_80211_VAP, M_WAITOK | M_ZERO); 496 497 vap = &wvp->wv_vap; 498 ieee80211_vap_setup(ic, vap, name, unit, opmode, flags, bssid); 499 500 vap->iv_max_aid = WI_MAX_AID; 501 502 switch (opmode) { 503 case IEEE80211_M_STA: 504 sc->sc_porttype = WI_PORTTYPE_BSS; 505 wvp->wv_newstate = vap->iv_newstate; 506 vap->iv_newstate = wi_newstate_sta; 507 /* need to filter mgt frames to avoid confusing state machine */ 508 wvp->wv_recv_mgmt = vap->iv_recv_mgmt; 509 vap->iv_recv_mgmt = wi_recv_mgmt; 510 break; 511 case IEEE80211_M_IBSS: 512 sc->sc_porttype = sc->sc_ibss_port; 513 wvp->wv_newstate = vap->iv_newstate; 514 vap->iv_newstate = wi_newstate_sta; 515 break; 516 case IEEE80211_M_AHDEMO: 517 sc->sc_porttype = WI_PORTTYPE_ADHOC; 518 break; 519 case IEEE80211_M_HOSTAP: 520 sc->sc_porttype = WI_PORTTYPE_HOSTAP; 521 wvp->wv_newstate = vap->iv_newstate; 522 vap->iv_newstate = wi_newstate_hostap; 523 break; 524 case IEEE80211_M_MONITOR: 525 sc->sc_porttype = sc->sc_monitor_port; 526 break; 527 default: 528 break; 529 } 530 531 /* complete setup */ 532 ieee80211_vap_attach(vap, ieee80211_media_change, wi_media_status, mac); 533 ic->ic_opmode = opmode; 534 return vap; 535} 536 537static void 538wi_vap_delete(struct ieee80211vap *vap) 539{ 540 struct wi_vap *wvp = WI_VAP(vap); 541 542 ieee80211_vap_detach(vap); 543 free(wvp, M_80211_VAP); 544} 545 546int 547wi_shutdown(device_t dev) 548{ 549 struct wi_softc *sc = device_get_softc(dev); 550 551 WI_LOCK(sc); 552 wi_stop(sc, 1); 553 WI_UNLOCK(sc); 554 return (0); 555} 556 557void 558wi_intr(void *arg) 559{ 560 struct wi_softc *sc = arg; 561 u_int16_t status; 562 563 WI_LOCK(sc); 564 565 if (sc->wi_gone || !sc->sc_enabled || 566 (sc->sc_flags & WI_FLAGS_RUNNING) == 0) { 567 CSR_WRITE_2(sc, WI_INT_EN, 0); 568 CSR_WRITE_2(sc, WI_EVENT_ACK, 0xFFFF); 569 WI_UNLOCK(sc); 570 return; 571 } 572 573 /* Disable interrupts. */ 574 CSR_WRITE_2(sc, WI_INT_EN, 0); 575 576 status = CSR_READ_2(sc, WI_EVENT_STAT); 577 if (status & WI_EV_RX) 578 wi_rx_intr(sc); 579 if (status & WI_EV_ALLOC) 580 wi_tx_intr(sc); 581 if (status & WI_EV_TX_EXC) 582 wi_tx_ex_intr(sc); 583 if (status & WI_EV_INFO) 584 wi_info_intr(sc); 585 if (mbufq_first(&sc->sc_snd) != NULL) 586 wi_start(sc); 587 588 /* Re-enable interrupts. */ 589 CSR_WRITE_2(sc, WI_INT_EN, WI_INTRS); 590 591 WI_UNLOCK(sc); 592 593 return; 594} 595 596static void 597wi_enable(struct wi_softc *sc) 598{ 599 /* Enable interrupts */ 600 CSR_WRITE_2(sc, WI_INT_EN, WI_INTRS); 601 602 /* enable port */ 603 wi_cmd(sc, WI_CMD_ENABLE | sc->sc_portnum, 0, 0, 0); 604 sc->sc_enabled = 1; 605} 606 607static int 608wi_setup_locked(struct wi_softc *sc, int porttype, int mode, 609 const uint8_t mac[IEEE80211_ADDR_LEN]) 610{ 611 int i; 612 613 wi_reset(sc); 614 615 wi_write_val(sc, WI_RID_PORTTYPE, porttype); 616 wi_write_val(sc, WI_RID_CREATE_IBSS, mode); 617 wi_write_val(sc, WI_RID_MAX_DATALEN, 2304); 618 /* XXX IEEE80211_BPF_NOACK wants 0 */ 619 wi_write_val(sc, WI_RID_ALT_RETRY_CNT, 2); 620 if (sc->sc_flags & WI_FLAGS_HAS_ROAMING) 621 wi_write_val(sc, WI_RID_ROAMING_MODE, 3); /* NB: disabled */ 622 623 wi_write_rid(sc, WI_RID_MAC_NODE, mac, IEEE80211_ADDR_LEN); 624 625 /* Allocate fids for the card */ 626 sc->sc_buflen = IEEE80211_MAX_LEN + sizeof(struct wi_frame); 627 for (i = 0; i < sc->sc_ntxbuf; i++) { 628 int error = wi_alloc_fid(sc, sc->sc_buflen, 629 &sc->sc_txd[i].d_fid); 630 if (error) { 631 device_printf(sc->sc_dev, 632 "tx buffer allocation failed (error %u)\n", 633 error); 634 return error; 635 } 636 sc->sc_txd[i].d_len = 0; 637 } 638 sc->sc_txcur = sc->sc_txnext = 0; 639 640 return 0; 641} 642 643void 644wi_init(struct wi_softc *sc) 645{ 646 int wasenabled; 647 648 WI_LOCK_ASSERT(sc); 649 650 wasenabled = sc->sc_enabled; 651 if (wasenabled) 652 wi_stop(sc, 1); 653 654 if (wi_setup_locked(sc, sc->sc_porttype, 3, 655 sc->sc_ic.ic_macaddr) != 0) { 656 device_printf(sc->sc_dev, "interface not running\n"); 657 wi_stop(sc, 1); 658 return; 659 } 660 661 sc->sc_flags |= WI_FLAGS_RUNNING; 662 663 callout_reset(&sc->sc_watchdog, hz, wi_watchdog, sc); 664 665 wi_enable(sc); /* Enable desired port */ 666} 667 668void 669wi_stop(struct wi_softc *sc, int disable) 670{ 671 672 WI_LOCK_ASSERT(sc); 673 674 if (sc->sc_enabled && !sc->wi_gone) { 675 CSR_WRITE_2(sc, WI_INT_EN, 0); 676 wi_cmd(sc, WI_CMD_DISABLE | sc->sc_portnum, 0, 0, 0); 677 if (disable) 678 sc->sc_enabled = 0; 679 } else if (sc->wi_gone && disable) /* gone --> not enabled */ 680 sc->sc_enabled = 0; 681 682 callout_stop(&sc->sc_watchdog); 683 sc->sc_tx_timer = 0; 684 sc->sc_false_syns = 0; 685 686 sc->sc_flags &= ~WI_FLAGS_RUNNING; 687} 688 689static void 690wi_getradiocaps(struct ieee80211com *ic, 691 int maxchans, int *nchans, struct ieee80211_channel chans[]) 692{ 693 struct wi_softc *sc = ic->ic_softc; 694 u_int8_t bands[IEEE80211_MODE_BYTES]; 695 int i; 696 697 memset(bands, 0, sizeof(bands)); 698 setbit(bands, IEEE80211_MODE_11B); 699 700 for (i = 1; i < 16; i++) { 701 if (sc->sc_chanmask & (1 << i)) { 702 /* XXX txpowers? */ 703 ieee80211_add_channel(chans, maxchans, nchans, 704 i, 0, 0, 0, bands); 705 } 706 } 707} 708 709static void 710wi_set_channel(struct ieee80211com *ic) 711{ 712 struct wi_softc *sc = ic->ic_softc; 713 714 DPRINTF(("%s: channel %d, %sscanning\n", __func__, 715 ieee80211_chan2ieee(ic, ic->ic_curchan), 716 ic->ic_flags & IEEE80211_F_SCAN ? "" : "!")); 717 718 WI_LOCK(sc); 719 wi_write_val(sc, WI_RID_OWN_CHNL, 720 ieee80211_chan2ieee(ic, ic->ic_curchan)); 721 WI_UNLOCK(sc); 722} 723 724static void 725wi_scan_start(struct ieee80211com *ic) 726{ 727 struct wi_softc *sc = ic->ic_softc; 728 struct ieee80211_scan_state *ss = ic->ic_scan; 729 730 DPRINTF(("%s\n", __func__)); 731 732 WI_LOCK(sc); 733 /* 734 * Switch device to monitor mode. 735 */ 736 wi_write_val(sc, WI_RID_PORTTYPE, sc->sc_monitor_port); 737 if (sc->sc_firmware_type == WI_INTERSIL) { 738 wi_cmd(sc, WI_CMD_DISABLE | WI_PORT0, 0, 0, 0); 739 wi_cmd(sc, WI_CMD_ENABLE | WI_PORT0, 0, 0, 0); 740 } 741 /* force full dwell time to compensate for firmware overhead */ 742 ss->ss_mindwell = ss->ss_maxdwell = msecs_to_ticks(400); 743 WI_UNLOCK(sc); 744 745} 746 747static void 748wi_scan_end(struct ieee80211com *ic) 749{ 750 struct wi_softc *sc = ic->ic_softc; 751 752 DPRINTF(("%s: restore port type %d\n", __func__, sc->sc_porttype)); 753 754 WI_LOCK(sc); 755 wi_write_val(sc, WI_RID_PORTTYPE, sc->sc_porttype); 756 if (sc->sc_firmware_type == WI_INTERSIL) { 757 wi_cmd(sc, WI_CMD_DISABLE | WI_PORT0, 0, 0, 0); 758 wi_cmd(sc, WI_CMD_ENABLE | WI_PORT0, 0, 0, 0); 759 } 760 WI_UNLOCK(sc); 761} 762 763static void 764wi_recv_mgmt(struct ieee80211_node *ni, struct mbuf *m, 765 int subtype, const struct ieee80211_rx_stats *rxs, int rssi, int nf) 766{ 767 struct ieee80211vap *vap = ni->ni_vap; 768 769 switch (subtype) { 770 case IEEE80211_FC0_SUBTYPE_AUTH: 771 case IEEE80211_FC0_SUBTYPE_ASSOC_RESP: 772 case IEEE80211_FC0_SUBTYPE_REASSOC_RESP: 773 /* NB: filter frames that trigger state changes */ 774 return; 775 } 776 WI_VAP(vap)->wv_recv_mgmt(ni, m, subtype, rxs, rssi, nf); 777} 778 779static int 780wi_newstate_sta(struct ieee80211vap *vap, enum ieee80211_state nstate, int arg) 781{ 782 struct ieee80211com *ic = vap->iv_ic; 783 struct ieee80211_node *bss; 784 struct wi_softc *sc = ic->ic_softc; 785 786 DPRINTF(("%s: %s -> %s\n", __func__, 787 ieee80211_state_name[vap->iv_state], 788 ieee80211_state_name[nstate])); 789 790 if (nstate == IEEE80211_S_AUTH) { 791 WI_LOCK(sc); 792 wi_setup_locked(sc, WI_PORTTYPE_BSS, 3, vap->iv_myaddr); 793 794 if (vap->iv_flags & IEEE80211_F_PMGTON) { 795 wi_write_val(sc, WI_RID_MAX_SLEEP, ic->ic_lintval); 796 wi_write_val(sc, WI_RID_PM_ENABLED, 1); 797 } 798 wi_write_val(sc, WI_RID_RTS_THRESH, vap->iv_rtsthreshold); 799 if (sc->sc_flags & WI_FLAGS_HAS_FRAGTHR) 800 wi_write_val(sc, WI_RID_FRAG_THRESH, 801 vap->iv_fragthreshold); 802 wi_write_txrate(sc, vap); 803 804 bss = vap->iv_bss; 805 wi_write_ssid(sc, WI_RID_DESIRED_SSID, bss->ni_essid, bss->ni_esslen); 806 wi_write_val(sc, WI_RID_OWN_CHNL, 807 ieee80211_chan2ieee(ic, bss->ni_chan)); 808 809 /* Configure WEP. */ 810 if (ic->ic_cryptocaps & IEEE80211_CRYPTO_WEP) 811 wi_write_wep(sc, vap); 812 else 813 sc->sc_encryption = 0; 814 815 if ((sc->sc_flags & WI_FLAGS_HAS_WPASUPPORT) && 816 (vap->iv_flags & IEEE80211_F_WPA)) { 817 wi_write_val(sc, WI_RID_WPA_HANDLING, 1); 818 if (vap->iv_appie_wpa != NULL) 819 wi_write_appie(sc, WI_RID_WPA_DATA, 820 vap->iv_appie_wpa); 821 } 822 823 wi_enable(sc); /* enable port */ 824 825 /* Lucent firmware does not support the JOIN RID. */ 826 if (sc->sc_firmware_type == WI_INTERSIL) { 827 struct wi_joinreq join; 828 829 memset(&join, 0, sizeof(join)); 830 IEEE80211_ADDR_COPY(&join.wi_bssid, bss->ni_bssid); 831 join.wi_chan = htole16( 832 ieee80211_chan2ieee(ic, bss->ni_chan)); 833 wi_write_rid(sc, WI_RID_JOIN_REQ, &join, sizeof(join)); 834 } 835 WI_UNLOCK(sc); 836 837 /* 838 * NB: don't go through 802.11 layer, it'll send auth frame; 839 * instead we drive the state machine from the link status 840 * notification we get on association. 841 */ 842 vap->iv_state = nstate; 843 return (0); 844 } 845 return WI_VAP(vap)->wv_newstate(vap, nstate, arg); 846} 847 848static int 849wi_newstate_hostap(struct ieee80211vap *vap, enum ieee80211_state nstate, int arg) 850{ 851 struct ieee80211com *ic = vap->iv_ic; 852 struct ieee80211_node *bss; 853 struct wi_softc *sc = ic->ic_softc; 854 int error; 855 856 DPRINTF(("%s: %s -> %s\n", __func__, 857 ieee80211_state_name[vap->iv_state], 858 ieee80211_state_name[nstate])); 859 860 error = WI_VAP(vap)->wv_newstate(vap, nstate, arg); 861 if (error == 0 && nstate == IEEE80211_S_RUN) { 862 WI_LOCK(sc); 863 wi_setup_locked(sc, WI_PORTTYPE_HOSTAP, 0, vap->iv_myaddr); 864 865 bss = vap->iv_bss; 866 wi_write_ssid(sc, WI_RID_OWN_SSID, 867 bss->ni_essid, bss->ni_esslen); 868 wi_write_val(sc, WI_RID_OWN_CHNL, 869 ieee80211_chan2ieee(ic, bss->ni_chan)); 870 wi_write_val(sc, WI_RID_BASIC_RATE, 0x3); 871 wi_write_val(sc, WI_RID_SUPPORT_RATE, 0xf); 872 wi_write_txrate(sc, vap); 873 874 wi_write_val(sc, WI_RID_OWN_BEACON_INT, bss->ni_intval); 875 wi_write_val(sc, WI_RID_DTIM_PERIOD, vap->iv_dtim_period); 876 877 wi_write_val(sc, WI_RID_RTS_THRESH, vap->iv_rtsthreshold); 878 if (sc->sc_flags & WI_FLAGS_HAS_FRAGTHR) 879 wi_write_val(sc, WI_RID_FRAG_THRESH, 880 vap->iv_fragthreshold); 881 882 if ((sc->sc_flags & WI_FLAGS_HAS_ENHSECURITY) && 883 (vap->iv_flags & IEEE80211_F_HIDESSID)) { 884 /* 885 * bit 0 means hide SSID in beacons, 886 * bit 1 means don't respond to bcast probe req 887 */ 888 wi_write_val(sc, WI_RID_ENH_SECURITY, 0x3); 889 } 890 891 if ((sc->sc_flags & WI_FLAGS_HAS_WPASUPPORT) && 892 (vap->iv_flags & IEEE80211_F_WPA) && 893 vap->iv_appie_wpa != NULL) 894 wi_write_appie(sc, WI_RID_WPA_DATA, vap->iv_appie_wpa); 895 896 wi_write_val(sc, WI_RID_PROMISC, 0); 897 898 /* Configure WEP. */ 899 if (ic->ic_cryptocaps & IEEE80211_CRYPTO_WEP) 900 wi_write_wep(sc, vap); 901 else 902 sc->sc_encryption = 0; 903 904 wi_enable(sc); /* enable port */ 905 WI_UNLOCK(sc); 906 } 907 return error; 908} 909 910static int 911wi_transmit(struct ieee80211com *ic, struct mbuf *m) 912{ 913 struct wi_softc *sc = ic->ic_softc; 914 int error; 915 916 WI_LOCK(sc); 917 if ((sc->sc_flags & WI_FLAGS_RUNNING) == 0) { 918 WI_UNLOCK(sc); 919 return (ENXIO); 920 } 921 error = mbufq_enqueue(&sc->sc_snd, m); 922 if (error) { 923 WI_UNLOCK(sc); 924 return (error); 925 } 926 wi_start(sc); 927 WI_UNLOCK(sc); 928 return (0); 929} 930 931static void 932wi_start(struct wi_softc *sc) 933{ 934 struct ieee80211_node *ni; 935 struct ieee80211_frame *wh; 936 struct mbuf *m0; 937 struct ieee80211_key *k; 938 struct wi_frame frmhdr; 939 const struct llc *llc; 940 int cur; 941 942 WI_LOCK_ASSERT(sc); 943 944 if (sc->wi_gone) 945 return; 946 947 memset(&frmhdr, 0, sizeof(frmhdr)); 948 cur = sc->sc_txnext; 949 while (sc->sc_txd[cur].d_len == 0 && 950 (m0 = mbufq_dequeue(&sc->sc_snd)) != NULL) { 951 ni = (struct ieee80211_node *) m0->m_pkthdr.rcvif; 952 953 /* reconstruct 802.3 header */ 954 wh = mtod(m0, struct ieee80211_frame *); 955 switch (wh->i_fc[1]) { 956 case IEEE80211_FC1_DIR_TODS: 957 IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_shost, 958 wh->i_addr2); 959 IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_dhost, 960 wh->i_addr3); 961 break; 962 case IEEE80211_FC1_DIR_NODS: 963 IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_shost, 964 wh->i_addr2); 965 IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_dhost, 966 wh->i_addr1); 967 break; 968 case IEEE80211_FC1_DIR_FROMDS: 969 IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_shost, 970 wh->i_addr3); 971 IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_dhost, 972 wh->i_addr1); 973 break; 974 } 975 llc = (const struct llc *)( 976 mtod(m0, const uint8_t *) + ieee80211_hdrsize(wh)); 977 frmhdr.wi_ehdr.ether_type = llc->llc_snap.ether_type; 978 frmhdr.wi_tx_ctl = htole16(WI_ENC_TX_802_11|WI_TXCNTL_TX_EX); 979 if (wh->i_fc[1] & IEEE80211_FC1_PROTECTED) { 980 k = ieee80211_crypto_encap(ni, m0); 981 if (k == NULL) { 982 ieee80211_free_node(ni); 983 m_freem(m0); 984 continue; 985 } 986 frmhdr.wi_tx_ctl |= htole16(WI_TXCNTL_NOCRYPT); 987 } 988 989 if (ieee80211_radiotap_active_vap(ni->ni_vap)) { 990 sc->sc_tx_th.wt_rate = ni->ni_txrate; 991 ieee80211_radiotap_tx(ni->ni_vap, m0); 992 } 993 994 m_copydata(m0, 0, sizeof(struct ieee80211_frame), 995 (caddr_t)&frmhdr.wi_whdr); 996 m_adj(m0, sizeof(struct ieee80211_frame)); 997 frmhdr.wi_dat_len = htole16(m0->m_pkthdr.len); 998 ieee80211_free_node(ni); 999 if (wi_start_tx(sc, &frmhdr, m0)) 1000 continue; 1001 1002 sc->sc_txnext = cur = (cur + 1) % sc->sc_ntxbuf; 1003 } 1004} 1005 1006static int 1007wi_start_tx(struct wi_softc *sc, struct wi_frame *frmhdr, struct mbuf *m0) 1008{ 1009 int cur = sc->sc_txnext; 1010 int fid, off, error; 1011 1012 fid = sc->sc_txd[cur].d_fid; 1013 off = sizeof(*frmhdr); 1014 error = wi_write_bap(sc, fid, 0, frmhdr, sizeof(*frmhdr)) != 0 1015 || wi_mwrite_bap(sc, fid, off, m0, m0->m_pkthdr.len) != 0; 1016 m_freem(m0); 1017 if (error) { 1018 counter_u64_add(sc->sc_ic.ic_oerrors, 1); 1019 return -1; 1020 } 1021 sc->sc_txd[cur].d_len = off; 1022 if (sc->sc_txcur == cur) { 1023 if (wi_cmd(sc, WI_CMD_TX | WI_RECLAIM, fid, 0, 0)) { 1024 device_printf(sc->sc_dev, "xmit failed\n"); 1025 sc->sc_txd[cur].d_len = 0; 1026 return -1; 1027 } 1028 sc->sc_tx_timer = 5; 1029 } 1030 return 0; 1031} 1032 1033static int 1034wi_raw_xmit(struct ieee80211_node *ni, struct mbuf *m0, 1035 const struct ieee80211_bpf_params *params) 1036{ 1037 struct ieee80211com *ic = ni->ni_ic; 1038 struct ieee80211vap *vap = ni->ni_vap; 1039 struct wi_softc *sc = ic->ic_softc; 1040 struct ieee80211_key *k; 1041 struct ieee80211_frame *wh; 1042 struct wi_frame frmhdr; 1043 int cur; 1044 int rc = 0; 1045 1046 WI_LOCK(sc); 1047 1048 if (sc->wi_gone) { 1049 rc = ENETDOWN; 1050 goto out; 1051 } 1052 memset(&frmhdr, 0, sizeof(frmhdr)); 1053 cur = sc->sc_txnext; 1054 if (sc->sc_txd[cur].d_len != 0) { 1055 rc = ENOBUFS; 1056 goto out; 1057 } 1058 m0->m_pkthdr.rcvif = NULL; 1059 1060 m_copydata(m0, 4, ETHER_ADDR_LEN * 2, 1061 (caddr_t)&frmhdr.wi_ehdr); 1062 frmhdr.wi_ehdr.ether_type = 0; 1063 wh = mtod(m0, struct ieee80211_frame *); 1064 1065 frmhdr.wi_tx_ctl = htole16(WI_ENC_TX_802_11|WI_TXCNTL_TX_EX); 1066 if (params && (params->ibp_flags & IEEE80211_BPF_NOACK)) 1067 frmhdr.wi_tx_ctl |= htole16(WI_TXCNTL_ALTRTRY); 1068 if ((wh->i_fc[1] & IEEE80211_FC1_PROTECTED) && 1069 (!params || (params && (params->ibp_flags & IEEE80211_BPF_CRYPTO)))) { 1070 k = ieee80211_crypto_encap(ni, m0); 1071 if (k == NULL) { 1072 rc = ENOMEM; 1073 goto out; 1074 } 1075 frmhdr.wi_tx_ctl |= htole16(WI_TXCNTL_NOCRYPT); 1076 } 1077 if (ieee80211_radiotap_active_vap(vap)) { 1078 sc->sc_tx_th.wt_rate = ni->ni_txrate; 1079 ieee80211_radiotap_tx(vap, m0); 1080 } 1081 m_copydata(m0, 0, sizeof(struct ieee80211_frame), 1082 (caddr_t)&frmhdr.wi_whdr); 1083 m_adj(m0, sizeof(struct ieee80211_frame)); 1084 frmhdr.wi_dat_len = htole16(m0->m_pkthdr.len); 1085 if (wi_start_tx(sc, &frmhdr, m0) < 0) { 1086 m0 = NULL; 1087 rc = EIO; 1088 goto out; 1089 } 1090 m0 = NULL; 1091 ieee80211_free_node(ni); 1092 1093 sc->sc_txnext = cur = (cur + 1) % sc->sc_ntxbuf; 1094out: 1095 WI_UNLOCK(sc); 1096 1097 if (m0 != NULL) 1098 m_freem(m0); 1099 return rc; 1100} 1101 1102static int 1103wi_reset(struct wi_softc *sc) 1104{ 1105#define WI_INIT_TRIES 3 1106 int i, error = 0; 1107 1108 for (i = 0; i < WI_INIT_TRIES; i++) { 1109 error = wi_cmd(sc, WI_CMD_INI, 0, 0, 0); 1110 if (error == 0) 1111 break; 1112 DELAY(WI_DELAY * 1000); 1113 } 1114 sc->sc_reset = 1; 1115 if (i == WI_INIT_TRIES) { 1116 device_printf(sc->sc_dev, "reset failed\n"); 1117 return error; 1118 } 1119 1120 CSR_WRITE_2(sc, WI_INT_EN, 0); 1121 CSR_WRITE_2(sc, WI_EVENT_ACK, 0xFFFF); 1122 1123 /* Calibrate timer. */ 1124 wi_write_val(sc, WI_RID_TICK_TIME, 8); 1125 1126 return 0; 1127#undef WI_INIT_TRIES 1128} 1129 1130static void 1131wi_watchdog(void *arg) 1132{ 1133 struct wi_softc *sc = arg; 1134 1135 WI_LOCK_ASSERT(sc); 1136 1137 if (!sc->sc_enabled) 1138 return; 1139 1140 if (sc->sc_tx_timer && --sc->sc_tx_timer == 0) { 1141 device_printf(sc->sc_dev, "device timeout\n"); 1142 counter_u64_add(sc->sc_ic.ic_oerrors, 1); 1143 wi_init(sc); 1144 return; 1145 } 1146 callout_reset(&sc->sc_watchdog, hz, wi_watchdog, sc); 1147} 1148 1149static void 1150wi_parent(struct ieee80211com *ic) 1151{ 1152 struct wi_softc *sc = ic->ic_softc; 1153 int startall = 0; 1154 1155 WI_LOCK(sc); 1156 /* 1157 * Can't do promisc and hostap at the same time. If all that's 1158 * changing is the promisc flag, try to short-circuit a call to 1159 * wi_init() by just setting PROMISC in the hardware. 1160 */ 1161 if (ic->ic_nrunning > 0) { 1162 if (ic->ic_opmode != IEEE80211_M_HOSTAP && 1163 sc->sc_flags & WI_FLAGS_RUNNING) { 1164 if (ic->ic_promisc > 0 && 1165 (sc->sc_flags & WI_FLAGS_PROMISC) == 0) { 1166 wi_write_val(sc, WI_RID_PROMISC, 1); 1167 sc->sc_flags |= WI_FLAGS_PROMISC; 1168 } else if (ic->ic_promisc == 0 && 1169 (sc->sc_flags & WI_FLAGS_PROMISC) != 0) { 1170 wi_write_val(sc, WI_RID_PROMISC, 0); 1171 sc->sc_flags &= ~WI_FLAGS_PROMISC; 1172 } else { 1173 wi_init(sc); 1174 startall = 1; 1175 } 1176 } else { 1177 wi_init(sc); 1178 startall = 1; 1179 } 1180 } else if (sc->sc_flags & WI_FLAGS_RUNNING) { 1181 wi_stop(sc, 1); 1182 sc->wi_gone = 0; 1183 } 1184 WI_UNLOCK(sc); 1185 if (startall) 1186 ieee80211_start_all(ic); 1187} 1188 1189static void 1190wi_media_status(struct ifnet *ifp, struct ifmediareq *imr) 1191{ 1192 struct ieee80211vap *vap = ifp->if_softc; 1193 struct ieee80211com *ic = vap->iv_ic; 1194 struct wi_softc *sc = ic->ic_softc; 1195 u_int16_t val; 1196 int rate, len; 1197 1198 len = sizeof(val); 1199 if (sc->sc_enabled && 1200 wi_read_rid(sc, WI_RID_CUR_TX_RATE, &val, &len) == 0 && 1201 len == sizeof(val)) { 1202 /* convert to 802.11 rate */ 1203 val = le16toh(val); 1204 rate = val * 2; 1205 if (sc->sc_firmware_type == WI_LUCENT) { 1206 if (rate == 10) 1207 rate = 11; /* 5.5Mbps */ 1208 } else { 1209 if (rate == 4*2) 1210 rate = 11; /* 5.5Mbps */ 1211 else if (rate == 8*2) 1212 rate = 22; /* 11Mbps */ 1213 } 1214 vap->iv_bss->ni_txrate = rate; 1215 } 1216 ieee80211_media_status(ifp, imr); 1217} 1218 1219static void 1220wi_sync_bssid(struct wi_softc *sc, u_int8_t new_bssid[IEEE80211_ADDR_LEN]) 1221{ 1222 struct ieee80211com *ic = &sc->sc_ic; 1223 struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 1224 struct ieee80211_node *ni = vap->iv_bss; 1225 1226 if (IEEE80211_ADDR_EQ(new_bssid, ni->ni_bssid)) 1227 return; 1228 1229 DPRINTF(("wi_sync_bssid: bssid %s -> ", ether_sprintf(ni->ni_bssid))); 1230 DPRINTF(("%s ?\n", ether_sprintf(new_bssid))); 1231 1232 /* In promiscuous mode, the BSSID field is not a reliable 1233 * indicator of the firmware's BSSID. Damp spurious 1234 * change-of-BSSID indications. 1235 */ 1236 if (ic->ic_promisc > 0 && 1237 !ppsratecheck(&sc->sc_last_syn, &sc->sc_false_syns, 1238 WI_MAX_FALSE_SYNS)) 1239 return; 1240 1241 sc->sc_false_syns = MAX(0, sc->sc_false_syns - 1); 1242#if 0 1243 /* 1244 * XXX hack; we should create a new node with the new bssid 1245 * and replace the existing ic_bss with it but since we don't 1246 * process management frames to collect state we cheat by 1247 * reusing the existing node as we know wi_newstate will be 1248 * called and it will overwrite the node state. 1249 */ 1250 ieee80211_sta_join(ic, ieee80211_ref_node(ni)); 1251#endif 1252} 1253 1254static __noinline void 1255wi_rx_intr(struct wi_softc *sc) 1256{ 1257 struct ieee80211com *ic = &sc->sc_ic; 1258 struct wi_frame frmhdr; 1259 struct mbuf *m; 1260 struct ieee80211_frame *wh; 1261 struct ieee80211_node *ni; 1262 int fid, len, off; 1263 u_int8_t dir; 1264 u_int16_t status; 1265 int8_t rssi, nf; 1266 1267 fid = CSR_READ_2(sc, WI_RX_FID); 1268 1269 /* First read in the frame header */ 1270 if (wi_read_bap(sc, fid, 0, &frmhdr, sizeof(frmhdr))) { 1271 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX); 1272 counter_u64_add(ic->ic_ierrors, 1); 1273 DPRINTF(("wi_rx_intr: read fid %x failed\n", fid)); 1274 return; 1275 } 1276 1277 /* 1278 * Drop undecryptable or packets with receive errors here 1279 */ 1280 status = le16toh(frmhdr.wi_status); 1281 if (status & WI_STAT_ERRSTAT) { 1282 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX); 1283 counter_u64_add(ic->ic_ierrors, 1); 1284 DPRINTF(("wi_rx_intr: fid %x error status %x\n", fid, status)); 1285 return; 1286 } 1287 1288 len = le16toh(frmhdr.wi_dat_len); 1289 off = ALIGN(sizeof(struct ieee80211_frame)); 1290 1291 /* 1292 * Sometimes the PRISM2.x returns bogusly large frames. Except 1293 * in monitor mode, just throw them away. 1294 */ 1295 if (off + len > MCLBYTES) { 1296 if (ic->ic_opmode != IEEE80211_M_MONITOR) { 1297 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX); 1298 counter_u64_add(ic->ic_ierrors, 1); 1299 DPRINTF(("wi_rx_intr: oversized packet\n")); 1300 return; 1301 } else 1302 len = 0; 1303 } 1304 1305 if (off + len > MHLEN) 1306 m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR); 1307 else 1308 m = m_gethdr(M_NOWAIT, MT_DATA); 1309 if (m == NULL) { 1310 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX); 1311 counter_u64_add(ic->ic_ierrors, 1); 1312 DPRINTF(("wi_rx_intr: MGET failed\n")); 1313 return; 1314 } 1315 m->m_data += off - sizeof(struct ieee80211_frame); 1316 memcpy(m->m_data, &frmhdr.wi_whdr, sizeof(struct ieee80211_frame)); 1317 wi_read_bap(sc, fid, sizeof(frmhdr), 1318 m->m_data + sizeof(struct ieee80211_frame), len); 1319 m->m_pkthdr.len = m->m_len = sizeof(struct ieee80211_frame) + len; 1320 1321 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX); 1322 1323 rssi = frmhdr.wi_rx_signal; 1324 nf = frmhdr.wi_rx_silence; 1325 if (ieee80211_radiotap_active(ic)) { 1326 struct wi_rx_radiotap_header *tap = &sc->sc_rx_th; 1327 uint32_t rstamp; 1328 1329 rstamp = (le16toh(frmhdr.wi_rx_tstamp0) << 16) | 1330 le16toh(frmhdr.wi_rx_tstamp1); 1331 tap->wr_tsf = htole64((uint64_t)rstamp); 1332 /* XXX replace divide by table */ 1333 tap->wr_rate = frmhdr.wi_rx_rate / 5; 1334 tap->wr_flags = 0; 1335 if (frmhdr.wi_status & WI_STAT_PCF) 1336 tap->wr_flags |= IEEE80211_RADIOTAP_F_CFP; 1337 if (m->m_flags & M_WEP) 1338 tap->wr_flags |= IEEE80211_RADIOTAP_F_WEP; 1339 tap->wr_antsignal = rssi; 1340 tap->wr_antnoise = nf; 1341 } 1342 1343 /* synchronize driver's BSSID with firmware's BSSID */ 1344 wh = mtod(m, struct ieee80211_frame *); 1345 dir = wh->i_fc[1] & IEEE80211_FC1_DIR_MASK; 1346 if (ic->ic_opmode == IEEE80211_M_IBSS && dir == IEEE80211_FC1_DIR_NODS) 1347 wi_sync_bssid(sc, wh->i_addr3); 1348 1349 WI_UNLOCK(sc); 1350 1351 ni = ieee80211_find_rxnode(ic, mtod(m, struct ieee80211_frame_min *)); 1352 if (ni != NULL) { 1353 (void) ieee80211_input(ni, m, rssi, nf); 1354 ieee80211_free_node(ni); 1355 } else 1356 (void) ieee80211_input_all(ic, m, rssi, nf); 1357 1358 WI_LOCK(sc); 1359} 1360 1361static __noinline void 1362wi_tx_ex_intr(struct wi_softc *sc) 1363{ 1364 struct wi_frame frmhdr; 1365 int fid; 1366 1367 fid = CSR_READ_2(sc, WI_TX_CMP_FID); 1368 /* Read in the frame header */ 1369 if (wi_read_bap(sc, fid, 0, &frmhdr, sizeof(frmhdr)) == 0) { 1370 u_int16_t status = le16toh(frmhdr.wi_status); 1371 /* 1372 * Spontaneous station disconnects appear as xmit 1373 * errors. Don't announce them and/or count them 1374 * as an output error. 1375 */ 1376 if ((status & WI_TXSTAT_DISCONNECT) == 0) { 1377 if (ppsratecheck(&lasttxerror, &curtxeps, wi_txerate)) { 1378 device_printf(sc->sc_dev, "tx failed"); 1379 if (status & WI_TXSTAT_RET_ERR) 1380 printf(", retry limit exceeded"); 1381 if (status & WI_TXSTAT_AGED_ERR) 1382 printf(", max transmit lifetime exceeded"); 1383 if (status & WI_TXSTAT_DISCONNECT) 1384 printf(", port disconnected"); 1385 if (status & WI_TXSTAT_FORM_ERR) 1386 printf(", invalid format (data len %u src %6D)", 1387 le16toh(frmhdr.wi_dat_len), 1388 frmhdr.wi_ehdr.ether_shost, ":"); 1389 if (status & ~0xf) 1390 printf(", status=0x%x", status); 1391 printf("\n"); 1392 } 1393 counter_u64_add(sc->sc_ic.ic_oerrors, 1); 1394 } else 1395 DPRINTF(("port disconnected\n")); 1396 } else 1397 DPRINTF(("wi_tx_ex_intr: read fid %x failed\n", fid)); 1398 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_TX_EXC); 1399} 1400 1401static __noinline void 1402wi_tx_intr(struct wi_softc *sc) 1403{ 1404 int fid, cur; 1405 1406 if (sc->wi_gone) 1407 return; 1408 1409 fid = CSR_READ_2(sc, WI_ALLOC_FID); 1410 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_ALLOC); 1411 1412 cur = sc->sc_txcur; 1413 if (sc->sc_txd[cur].d_fid != fid) { 1414 device_printf(sc->sc_dev, "bad alloc %x != %x, cur %d nxt %d\n", 1415 fid, sc->sc_txd[cur].d_fid, cur, sc->sc_txnext); 1416 return; 1417 } 1418 sc->sc_tx_timer = 0; 1419 sc->sc_txd[cur].d_len = 0; 1420 sc->sc_txcur = cur = (cur + 1) % sc->sc_ntxbuf; 1421 if (sc->sc_txd[cur].d_len != 0) { 1422 if (wi_cmd(sc, WI_CMD_TX | WI_RECLAIM, sc->sc_txd[cur].d_fid, 1423 0, 0)) { 1424 device_printf(sc->sc_dev, "xmit failed\n"); 1425 sc->sc_txd[cur].d_len = 0; 1426 } else { 1427 sc->sc_tx_timer = 5; 1428 } 1429 } 1430} 1431 1432static __noinline void 1433wi_info_intr(struct wi_softc *sc) 1434{ 1435 struct ieee80211com *ic = &sc->sc_ic; 1436 struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 1437 int i, fid, len, off; 1438 u_int16_t ltbuf[2]; 1439 u_int16_t stat; 1440 u_int32_t *ptr; 1441 1442 fid = CSR_READ_2(sc, WI_INFO_FID); 1443 wi_read_bap(sc, fid, 0, ltbuf, sizeof(ltbuf)); 1444 1445 switch (le16toh(ltbuf[1])) { 1446 case WI_INFO_LINK_STAT: 1447 wi_read_bap(sc, fid, sizeof(ltbuf), &stat, sizeof(stat)); 1448 DPRINTF(("wi_info_intr: LINK_STAT 0x%x\n", le16toh(stat))); 1449 1450 if (vap == NULL) 1451 goto finish; 1452 1453 switch (le16toh(stat)) { 1454 case WI_INFO_LINK_STAT_CONNECTED: 1455 if (vap->iv_state == IEEE80211_S_RUN && 1456 vap->iv_opmode != IEEE80211_M_IBSS) 1457 break; 1458 /* fall thru... */ 1459 case WI_INFO_LINK_STAT_AP_CHG: 1460 IEEE80211_LOCK(ic); 1461 vap->iv_bss->ni_associd = 1 | 0xc000; /* NB: anything will do */ 1462 ieee80211_new_state(vap, IEEE80211_S_RUN, 0); 1463 IEEE80211_UNLOCK(ic); 1464 break; 1465 case WI_INFO_LINK_STAT_AP_INR: 1466 break; 1467 case WI_INFO_LINK_STAT_DISCONNECTED: 1468 /* we dropped off the net; e.g. due to deauth/disassoc */ 1469 IEEE80211_LOCK(ic); 1470 vap->iv_bss->ni_associd = 0; 1471 vap->iv_stats.is_rx_deauth++; 1472 ieee80211_new_state(vap, IEEE80211_S_SCAN, 0); 1473 IEEE80211_UNLOCK(ic); 1474 break; 1475 case WI_INFO_LINK_STAT_AP_OOR: 1476 /* XXX does this need to be per-vap? */ 1477 ieee80211_beacon_miss(ic); 1478 break; 1479 case WI_INFO_LINK_STAT_ASSOC_FAILED: 1480 if (vap->iv_opmode == IEEE80211_M_STA) 1481 ieee80211_new_state(vap, IEEE80211_S_SCAN, 1482 IEEE80211_SCAN_FAIL_TIMEOUT); 1483 break; 1484 } 1485 break; 1486 case WI_INFO_COUNTERS: 1487 /* some card versions have a larger stats structure */ 1488 len = min(le16toh(ltbuf[0]) - 1, sizeof(sc->sc_stats) / 4); 1489 ptr = (u_int32_t *)&sc->sc_stats; 1490 off = sizeof(ltbuf); 1491 for (i = 0; i < len; i++, off += 2, ptr++) { 1492 wi_read_bap(sc, fid, off, &stat, sizeof(stat)); 1493#ifdef WI_HERMES_STATS_WAR 1494 if (stat & 0xf000) 1495 stat = ~stat; 1496#endif 1497 *ptr += stat; 1498 } 1499 break; 1500 default: 1501 DPRINTF(("wi_info_intr: got fid %x type %x len %d\n", fid, 1502 le16toh(ltbuf[1]), le16toh(ltbuf[0]))); 1503 break; 1504 } 1505finish: 1506 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_INFO); 1507} 1508 1509static int 1510wi_write_multi(struct wi_softc *sc) 1511{ 1512 struct ieee80211com *ic = &sc->sc_ic; 1513 struct ieee80211vap *vap; 1514 struct wi_mcast mlist; 1515 int n; 1516 1517 if (ic->ic_allmulti > 0 || ic->ic_promisc > 0) { 1518allmulti: 1519 memset(&mlist, 0, sizeof(mlist)); 1520 return wi_write_rid(sc, WI_RID_MCAST_LIST, &mlist, 1521 sizeof(mlist)); 1522 } 1523 1524 n = 0; 1525 TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) { 1526 struct ifnet *ifp; 1527 struct ifmultiaddr *ifma; 1528 1529 ifp = vap->iv_ifp; 1530 if_maddr_rlock(ifp); 1531 TAILQ_FOREACH(ifma, &ifp->if_multiaddrs, ifma_link) { 1532 if (ifma->ifma_addr->sa_family != AF_LINK) 1533 continue; 1534 if (n >= 16) 1535 goto allmulti; 1536 IEEE80211_ADDR_COPY(&mlist.wi_mcast[n], 1537 (LLADDR((struct sockaddr_dl *)ifma->ifma_addr))); 1538 n++; 1539 } 1540 if_maddr_runlock(ifp); 1541 } 1542 return wi_write_rid(sc, WI_RID_MCAST_LIST, &mlist, 1543 IEEE80211_ADDR_LEN * n); 1544} 1545 1546static void 1547wi_update_mcast(struct ieee80211com *ic) 1548{ 1549 1550 wi_write_multi(ic->ic_softc); 1551} 1552 1553static void 1554wi_update_promisc(struct ieee80211com *ic) 1555{ 1556 struct wi_softc *sc = ic->ic_softc; 1557 1558 WI_LOCK(sc); 1559 /* XXX handle WEP special case handling? */ 1560 wi_write_val(sc, WI_RID_PROMISC, 1561 (ic->ic_opmode == IEEE80211_M_MONITOR || 1562 (ic->ic_promisc > 0))); 1563 WI_UNLOCK(sc); 1564} 1565 1566static void 1567wi_read_nicid(struct wi_softc *sc) 1568{ 1569 struct wi_card_ident *id; 1570 char *p; 1571 int len; 1572 u_int16_t ver[4]; 1573 1574 /* getting chip identity */ 1575 memset(ver, 0, sizeof(ver)); 1576 len = sizeof(ver); 1577 wi_read_rid(sc, WI_RID_CARD_ID, ver, &len); 1578 1579 sc->sc_firmware_type = WI_NOTYPE; 1580 sc->sc_nic_id = le16toh(ver[0]); 1581 for (id = wi_card_ident; id->card_name != NULL; id++) { 1582 if (sc->sc_nic_id == id->card_id) { 1583 sc->sc_nic_name = id->card_name; 1584 sc->sc_firmware_type = id->firm_type; 1585 break; 1586 } 1587 } 1588 if (sc->sc_firmware_type == WI_NOTYPE) { 1589 if (sc->sc_nic_id & 0x8000) { 1590 sc->sc_firmware_type = WI_INTERSIL; 1591 sc->sc_nic_name = "Unknown Prism chip"; 1592 } else { 1593 sc->sc_firmware_type = WI_LUCENT; 1594 sc->sc_nic_name = "Unknown Lucent chip"; 1595 } 1596 } 1597 if (bootverbose) 1598 device_printf(sc->sc_dev, "using %s\n", sc->sc_nic_name); 1599 1600 /* get primary firmware version (Only Prism chips) */ 1601 if (sc->sc_firmware_type != WI_LUCENT) { 1602 memset(ver, 0, sizeof(ver)); 1603 len = sizeof(ver); 1604 wi_read_rid(sc, WI_RID_PRI_IDENTITY, ver, &len); 1605 sc->sc_pri_firmware_ver = le16toh(ver[2]) * 10000 + 1606 le16toh(ver[3]) * 100 + le16toh(ver[1]); 1607 } 1608 1609 /* get station firmware version */ 1610 memset(ver, 0, sizeof(ver)); 1611 len = sizeof(ver); 1612 wi_read_rid(sc, WI_RID_STA_IDENTITY, ver, &len); 1613 sc->sc_sta_firmware_ver = le16toh(ver[2]) * 10000 + 1614 le16toh(ver[3]) * 100 + le16toh(ver[1]); 1615 if (sc->sc_firmware_type == WI_INTERSIL && 1616 (sc->sc_sta_firmware_ver == 10102 || 1617 sc->sc_sta_firmware_ver == 20102)) { 1618 char ident[12]; 1619 memset(ident, 0, sizeof(ident)); 1620 len = sizeof(ident); 1621 /* value should be the format like "V2.00-11" */ 1622 if (wi_read_rid(sc, WI_RID_SYMBOL_IDENTITY, ident, &len) == 0 && 1623 *(p = (char *)ident) >= 'A' && 1624 p[2] == '.' && p[5] == '-' && p[8] == '\0') { 1625 sc->sc_firmware_type = WI_SYMBOL; 1626 sc->sc_sta_firmware_ver = (p[1] - '0') * 10000 + 1627 (p[3] - '0') * 1000 + (p[4] - '0') * 100 + 1628 (p[6] - '0') * 10 + (p[7] - '0'); 1629 } 1630 } 1631 if (bootverbose) { 1632 device_printf(sc->sc_dev, "%s Firmware: ", 1633 wi_firmware_names[sc->sc_firmware_type]); 1634 if (sc->sc_firmware_type != WI_LUCENT) /* XXX */ 1635 printf("Primary (%u.%u.%u), ", 1636 sc->sc_pri_firmware_ver / 10000, 1637 (sc->sc_pri_firmware_ver % 10000) / 100, 1638 sc->sc_pri_firmware_ver % 100); 1639 printf("Station (%u.%u.%u)\n", 1640 sc->sc_sta_firmware_ver / 10000, 1641 (sc->sc_sta_firmware_ver % 10000) / 100, 1642 sc->sc_sta_firmware_ver % 100); 1643 } 1644} 1645 1646static int 1647wi_write_ssid(struct wi_softc *sc, int rid, u_int8_t *buf, int buflen) 1648{ 1649 struct wi_ssid ssid; 1650 1651 if (buflen > IEEE80211_NWID_LEN) 1652 return ENOBUFS; 1653 memset(&ssid, 0, sizeof(ssid)); 1654 ssid.wi_len = htole16(buflen); 1655 memcpy(ssid.wi_ssid, buf, buflen); 1656 return wi_write_rid(sc, rid, &ssid, sizeof(ssid)); 1657} 1658 1659static int 1660wi_write_txrate(struct wi_softc *sc, struct ieee80211vap *vap) 1661{ 1662 static const uint16_t lucent_rates[12] = { 1663 [ 0] = 3, /* auto */ 1664 [ 1] = 1, /* 1Mb/s */ 1665 [ 2] = 2, /* 2Mb/s */ 1666 [ 5] = 4, /* 5.5Mb/s */ 1667 [11] = 5 /* 11Mb/s */ 1668 }; 1669 static const uint16_t intersil_rates[12] = { 1670 [ 0] = 0xf, /* auto */ 1671 [ 1] = 0, /* 1Mb/s */ 1672 [ 2] = 1, /* 2Mb/s */ 1673 [ 5] = 2, /* 5.5Mb/s */ 1674 [11] = 3, /* 11Mb/s */ 1675 }; 1676 const uint16_t *rates = sc->sc_firmware_type == WI_LUCENT ? 1677 lucent_rates : intersil_rates; 1678 struct ieee80211com *ic = vap->iv_ic; 1679 const struct ieee80211_txparam *tp; 1680 1681 tp = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_bsschan)]; 1682 return wi_write_val(sc, WI_RID_TX_RATE, 1683 (tp->ucastrate == IEEE80211_FIXED_RATE_NONE ? 1684 rates[0] : rates[tp->ucastrate / 2])); 1685} 1686 1687static int 1688wi_write_wep(struct wi_softc *sc, struct ieee80211vap *vap) 1689{ 1690 int error = 0; 1691 int i, keylen; 1692 u_int16_t val; 1693 struct wi_key wkey[IEEE80211_WEP_NKID]; 1694 1695 switch (sc->sc_firmware_type) { 1696 case WI_LUCENT: 1697 val = (vap->iv_flags & IEEE80211_F_PRIVACY) ? 1 : 0; 1698 error = wi_write_val(sc, WI_RID_ENCRYPTION, val); 1699 if (error) 1700 break; 1701 if ((vap->iv_flags & IEEE80211_F_PRIVACY) == 0) 1702 break; 1703 error = wi_write_val(sc, WI_RID_TX_CRYPT_KEY, vap->iv_def_txkey); 1704 if (error) 1705 break; 1706 memset(wkey, 0, sizeof(wkey)); 1707 for (i = 0; i < IEEE80211_WEP_NKID; i++) { 1708 keylen = vap->iv_nw_keys[i].wk_keylen; 1709 wkey[i].wi_keylen = htole16(keylen); 1710 memcpy(wkey[i].wi_keydat, vap->iv_nw_keys[i].wk_key, 1711 keylen); 1712 } 1713 error = wi_write_rid(sc, WI_RID_DEFLT_CRYPT_KEYS, 1714 wkey, sizeof(wkey)); 1715 sc->sc_encryption = 0; 1716 break; 1717 1718 case WI_INTERSIL: 1719 val = HOST_ENCRYPT | HOST_DECRYPT; 1720 if (vap->iv_flags & IEEE80211_F_PRIVACY) { 1721 /* 1722 * ONLY HWB3163 EVAL-CARD Firmware version 1723 * less than 0.8 variant2 1724 * 1725 * If promiscuous mode disable, Prism2 chip 1726 * does not work with WEP . 1727 * It is under investigation for details. 1728 * (ichiro@netbsd.org) 1729 */ 1730 if (sc->sc_sta_firmware_ver < 802 ) { 1731 /* firm ver < 0.8 variant 2 */ 1732 wi_write_val(sc, WI_RID_PROMISC, 1); 1733 } 1734 wi_write_val(sc, WI_RID_CNFAUTHMODE, 1735 vap->iv_bss->ni_authmode); 1736 val |= PRIVACY_INVOKED; 1737 } else { 1738 wi_write_val(sc, WI_RID_CNFAUTHMODE, IEEE80211_AUTH_OPEN); 1739 } 1740 error = wi_write_val(sc, WI_RID_P2_ENCRYPTION, val); 1741 if (error) 1742 break; 1743 sc->sc_encryption = val; 1744 if ((val & PRIVACY_INVOKED) == 0) 1745 break; 1746 error = wi_write_val(sc, WI_RID_P2_TX_CRYPT_KEY, vap->iv_def_txkey); 1747 break; 1748 } 1749 return error; 1750} 1751 1752static int 1753wi_cmd(struct wi_softc *sc, int cmd, int val0, int val1, int val2) 1754{ 1755 int i, s = 0; 1756 1757 if (sc->wi_gone) 1758 return (ENODEV); 1759 1760 /* wait for the busy bit to clear */ 1761 for (i = sc->wi_cmd_count; i > 0; i--) { /* 500ms */ 1762 if (!(CSR_READ_2(sc, WI_COMMAND) & WI_CMD_BUSY)) 1763 break; 1764 DELAY(1*1000); /* 1ms */ 1765 } 1766 if (i == 0) { 1767 device_printf(sc->sc_dev, "%s: busy bit won't clear, cmd 0x%x\n", 1768 __func__, cmd); 1769 sc->wi_gone = 1; 1770 return(ETIMEDOUT); 1771 } 1772 1773 CSR_WRITE_2(sc, WI_PARAM0, val0); 1774 CSR_WRITE_2(sc, WI_PARAM1, val1); 1775 CSR_WRITE_2(sc, WI_PARAM2, val2); 1776 CSR_WRITE_2(sc, WI_COMMAND, cmd); 1777 1778 if (cmd == WI_CMD_INI) { 1779 /* XXX: should sleep here. */ 1780 DELAY(100*1000); /* 100ms delay for init */ 1781 } 1782 for (i = 0; i < WI_TIMEOUT; i++) { 1783 /* 1784 * Wait for 'command complete' bit to be 1785 * set in the event status register. 1786 */ 1787 s = CSR_READ_2(sc, WI_EVENT_STAT); 1788 if (s & WI_EV_CMD) { 1789 /* Ack the event and read result code. */ 1790 s = CSR_READ_2(sc, WI_STATUS); 1791 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_CMD); 1792 if (s & WI_STAT_CMD_RESULT) { 1793 return(EIO); 1794 } 1795 break; 1796 } 1797 DELAY(WI_DELAY); 1798 } 1799 1800 if (i == WI_TIMEOUT) { 1801 device_printf(sc->sc_dev, "%s: timeout on cmd 0x%04x; " 1802 "event status 0x%04x\n", __func__, cmd, s); 1803 if (s == 0xffff) 1804 sc->wi_gone = 1; 1805 return(ETIMEDOUT); 1806 } 1807 return (0); 1808} 1809 1810static int 1811wi_seek_bap(struct wi_softc *sc, int id, int off) 1812{ 1813 int i, status; 1814 1815 CSR_WRITE_2(sc, WI_SEL0, id); 1816 CSR_WRITE_2(sc, WI_OFF0, off); 1817 1818 for (i = 0; ; i++) { 1819 status = CSR_READ_2(sc, WI_OFF0); 1820 if ((status & WI_OFF_BUSY) == 0) 1821 break; 1822 if (i == WI_TIMEOUT) { 1823 device_printf(sc->sc_dev, "%s: timeout, id %x off %x\n", 1824 __func__, id, off); 1825 sc->sc_bap_off = WI_OFF_ERR; /* invalidate */ 1826 if (status == 0xffff) 1827 sc->wi_gone = 1; 1828 return ETIMEDOUT; 1829 } 1830 DELAY(1); 1831 } 1832 if (status & WI_OFF_ERR) { 1833 device_printf(sc->sc_dev, "%s: error, id %x off %x\n", 1834 __func__, id, off); 1835 sc->sc_bap_off = WI_OFF_ERR; /* invalidate */ 1836 return EIO; 1837 } 1838 sc->sc_bap_id = id; 1839 sc->sc_bap_off = off; 1840 return 0; 1841} 1842 1843static int 1844wi_read_bap(struct wi_softc *sc, int id, int off, void *buf, int buflen) 1845{ 1846 int error, cnt; 1847 1848 if (buflen == 0) 1849 return 0; 1850 if (id != sc->sc_bap_id || off != sc->sc_bap_off) { 1851 if ((error = wi_seek_bap(sc, id, off)) != 0) 1852 return error; 1853 } 1854 cnt = (buflen + 1) / 2; 1855 CSR_READ_MULTI_STREAM_2(sc, WI_DATA0, (u_int16_t *)buf, cnt); 1856 sc->sc_bap_off += cnt * 2; 1857 return 0; 1858} 1859 1860static int 1861wi_write_bap(struct wi_softc *sc, int id, int off, const void *buf, int buflen) 1862{ 1863 int error, cnt; 1864 1865 if (buflen == 0) 1866 return 0; 1867 1868 if (id != sc->sc_bap_id || off != sc->sc_bap_off) { 1869 if ((error = wi_seek_bap(sc, id, off)) != 0) 1870 return error; 1871 } 1872 cnt = (buflen + 1) / 2; 1873 CSR_WRITE_MULTI_STREAM_2(sc, WI_DATA0, (const uint16_t *)buf, cnt); 1874 sc->sc_bap_off += cnt * 2; 1875 1876 return 0; 1877} 1878 1879static int 1880wi_mwrite_bap(struct wi_softc *sc, int id, int off, struct mbuf *m0, int totlen) 1881{ 1882 int error, len; 1883 struct mbuf *m; 1884 1885 for (m = m0; m != NULL && totlen > 0; m = m->m_next) { 1886 if (m->m_len == 0) 1887 continue; 1888 1889 len = min(m->m_len, totlen); 1890 1891 if (((u_long)m->m_data) % 2 != 0 || len % 2 != 0) { 1892 m_copydata(m, 0, totlen, (caddr_t)&sc->sc_txbuf); 1893 return wi_write_bap(sc, id, off, (caddr_t)&sc->sc_txbuf, 1894 totlen); 1895 } 1896 1897 if ((error = wi_write_bap(sc, id, off, m->m_data, len)) != 0) 1898 return error; 1899 1900 off += m->m_len; 1901 totlen -= len; 1902 } 1903 return 0; 1904} 1905 1906static int 1907wi_alloc_fid(struct wi_softc *sc, int len, int *idp) 1908{ 1909 int i; 1910 1911 if (wi_cmd(sc, WI_CMD_ALLOC_MEM, len, 0, 0)) { 1912 device_printf(sc->sc_dev, "%s: failed to allocate %d bytes on NIC\n", 1913 __func__, len); 1914 return ENOMEM; 1915 } 1916 1917 for (i = 0; i < WI_TIMEOUT; i++) { 1918 if (CSR_READ_2(sc, WI_EVENT_STAT) & WI_EV_ALLOC) 1919 break; 1920 DELAY(1); 1921 } 1922 if (i == WI_TIMEOUT) { 1923 device_printf(sc->sc_dev, "%s: timeout in alloc\n", __func__); 1924 return ETIMEDOUT; 1925 } 1926 *idp = CSR_READ_2(sc, WI_ALLOC_FID); 1927 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_ALLOC); 1928 return 0; 1929} 1930 1931static int 1932wi_read_rid(struct wi_softc *sc, int rid, void *buf, int *buflenp) 1933{ 1934 int error, len; 1935 u_int16_t ltbuf[2]; 1936 1937 /* Tell the NIC to enter record read mode. */ 1938 error = wi_cmd(sc, WI_CMD_ACCESS | WI_ACCESS_READ, rid, 0, 0); 1939 if (error) 1940 return error; 1941 1942 error = wi_read_bap(sc, rid, 0, ltbuf, sizeof(ltbuf)); 1943 if (error) 1944 return error; 1945 1946 if (le16toh(ltbuf[1]) != rid) { 1947 device_printf(sc->sc_dev, "record read mismatch, rid=%x, got=%x\n", 1948 rid, le16toh(ltbuf[1])); 1949 return EIO; 1950 } 1951 len = (le16toh(ltbuf[0]) - 1) * 2; /* already got rid */ 1952 if (*buflenp < len) { 1953 device_printf(sc->sc_dev, "record buffer is too small, " 1954 "rid=%x, size=%d, len=%d\n", 1955 rid, *buflenp, len); 1956 return ENOSPC; 1957 } 1958 *buflenp = len; 1959 return wi_read_bap(sc, rid, sizeof(ltbuf), buf, len); 1960} 1961 1962static int 1963wi_write_rid(struct wi_softc *sc, int rid, const void *buf, int buflen) 1964{ 1965 int error; 1966 u_int16_t ltbuf[2]; 1967 1968 ltbuf[0] = htole16((buflen + 1) / 2 + 1); /* includes rid */ 1969 ltbuf[1] = htole16(rid); 1970 1971 error = wi_write_bap(sc, rid, 0, ltbuf, sizeof(ltbuf)); 1972 if (error) { 1973 device_printf(sc->sc_dev, "%s: bap0 write failure, rid 0x%x\n", 1974 __func__, rid); 1975 return error; 1976 } 1977 error = wi_write_bap(sc, rid, sizeof(ltbuf), buf, buflen); 1978 if (error) { 1979 device_printf(sc->sc_dev, "%s: bap1 write failure, rid 0x%x\n", 1980 __func__, rid); 1981 return error; 1982 } 1983 1984 return wi_cmd(sc, WI_CMD_ACCESS | WI_ACCESS_WRITE, rid, 0, 0); 1985} 1986 1987static int 1988wi_write_appie(struct wi_softc *sc, int rid, const struct ieee80211_appie *ie) 1989{ 1990 /* NB: 42 bytes is probably ok to have on the stack */ 1991 char buf[sizeof(uint16_t) + 40]; 1992 1993 if (ie->ie_len > 40) 1994 return EINVAL; 1995 /* NB: firmware requires 16-bit ie length before ie data */ 1996 *(uint16_t *) buf = htole16(ie->ie_len); 1997 memcpy(buf + sizeof(uint16_t), ie->ie_data, ie->ie_len); 1998 return wi_write_rid(sc, rid, buf, ie->ie_len + sizeof(uint16_t)); 1999} 2000 2001static u_int16_t 2002wi_read_chanmask(struct wi_softc *sc) 2003{ 2004 u_int16_t val; 2005 int buflen; 2006 2007 buflen = sizeof(val); 2008 if (wi_read_rid(sc, WI_RID_CHANNEL_LIST, &val, &buflen) != 0) 2009 val = htole16(0x1fff); /* assume 1-13 */ 2010 KASSERT(val != 0, ("%s: no available channels listed!", __func__)); 2011 2012 val <<= 1; /* shift for base 1 indices */ 2013 2014 return (val); 2015} 2016 2017int 2018wi_alloc(device_t dev, int rid) 2019{ 2020 struct wi_softc *sc = device_get_softc(dev); 2021 2022 if (sc->wi_bus_type != WI_BUS_PCI_NATIVE) { 2023 sc->iobase_rid = rid; 2024 sc->iobase = bus_alloc_resource_anywhere(dev, SYS_RES_IOPORT, 2025 &sc->iobase_rid, (1 << 6), 2026 rman_make_alignment_flags(1 << 6) | RF_ACTIVE); 2027 if (sc->iobase == NULL) { 2028 device_printf(dev, "No I/O space?!\n"); 2029 return ENXIO; 2030 } 2031 2032 sc->wi_io_addr = rman_get_start(sc->iobase); 2033 sc->wi_btag = rman_get_bustag(sc->iobase); 2034 sc->wi_bhandle = rman_get_bushandle(sc->iobase); 2035 } else { 2036 sc->mem_rid = rid; 2037 sc->mem = bus_alloc_resource_any(dev, SYS_RES_MEMORY, 2038 &sc->mem_rid, RF_ACTIVE); 2039 if (sc->mem == NULL) { 2040 device_printf(dev, "No Mem space on prism2.5?\n"); 2041 return ENXIO; 2042 } 2043 2044 sc->wi_btag = rman_get_bustag(sc->mem); 2045 sc->wi_bhandle = rman_get_bushandle(sc->mem); 2046 } 2047 2048 sc->irq_rid = 0; 2049 sc->irq = bus_alloc_resource_any(dev, SYS_RES_IRQ, &sc->irq_rid, 2050 RF_ACTIVE | 2051 ((sc->wi_bus_type == WI_BUS_PCCARD) ? 0 : RF_SHAREABLE)); 2052 if (sc->irq == NULL) { 2053 wi_free(dev); 2054 device_printf(dev, "No irq?!\n"); 2055 return ENXIO; 2056 } 2057 2058 sc->sc_dev = dev; 2059 sc->sc_unit = device_get_unit(dev); 2060 return 0; 2061} 2062 2063void 2064wi_free(device_t dev) 2065{ 2066 struct wi_softc *sc = device_get_softc(dev); 2067 2068 if (sc->iobase != NULL) { 2069 bus_release_resource(dev, SYS_RES_IOPORT, sc->iobase_rid, sc->iobase); 2070 sc->iobase = NULL; 2071 } 2072 if (sc->irq != NULL) { 2073 bus_release_resource(dev, SYS_RES_IRQ, sc->irq_rid, sc->irq); 2074 sc->irq = NULL; 2075 } 2076 if (sc->mem != NULL) { 2077 bus_release_resource(dev, SYS_RES_MEMORY, sc->mem_rid, sc->mem); 2078 sc->mem = NULL; 2079 } 2080} 2081