if_rsu.c revision 288049
1253789Srpaulo/* $OpenBSD: if_rsu.c,v 1.17 2013/04/15 09:23:01 mglocker Exp $ */ 2253789Srpaulo 3253789Srpaulo/*- 4253789Srpaulo * Copyright (c) 2010 Damien Bergamini <damien.bergamini@free.fr> 5253789Srpaulo * 6253789Srpaulo * Permission to use, copy, modify, and distribute this software for any 7253789Srpaulo * purpose with or without fee is hereby granted, provided that the above 8253789Srpaulo * copyright notice and this permission notice appear in all copies. 9253789Srpaulo * 10253789Srpaulo * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 11253789Srpaulo * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 12253789Srpaulo * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 13253789Srpaulo * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 14253789Srpaulo * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 15253789Srpaulo * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 16253789Srpaulo * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 17253789Srpaulo */ 18253789Srpaulo#include <sys/cdefs.h> 19253789Srpaulo__FBSDID("$FreeBSD: head/sys/dev/usb/wlan/if_rsu.c 288049 2015-09-20 22:52:40Z adrian $"); 20253789Srpaulo 21253789Srpaulo/* 22253789Srpaulo * Driver for Realtek RTL8188SU/RTL8191SU/RTL8192SU. 23253789Srpaulo * 24253789Srpaulo * TODO: 25253789Srpaulo * o 11n support 26253789Srpaulo * o h/w crypto 27253789Srpaulo * o hostap / ibss / mesh 28253789Srpaulo */ 29287727Sadrian 30253789Srpaulo#include <sys/param.h> 31253789Srpaulo#include <sys/endian.h> 32253789Srpaulo#include <sys/sockio.h> 33253789Srpaulo#include <sys/mbuf.h> 34253789Srpaulo#include <sys/kernel.h> 35253789Srpaulo#include <sys/socket.h> 36253789Srpaulo#include <sys/systm.h> 37253789Srpaulo#include <sys/conf.h> 38253789Srpaulo#include <sys/bus.h> 39253789Srpaulo#include <sys/rman.h> 40253789Srpaulo#include <sys/firmware.h> 41253789Srpaulo#include <sys/module.h> 42253789Srpaulo 43253789Srpaulo#include <machine/bus.h> 44253789Srpaulo#include <machine/resource.h> 45253789Srpaulo 46253789Srpaulo#include <net/bpf.h> 47253789Srpaulo#include <net/if.h> 48257176Sglebius#include <net/if_var.h> 49253789Srpaulo#include <net/if_arp.h> 50253789Srpaulo#include <net/if_dl.h> 51253789Srpaulo#include <net/if_media.h> 52253789Srpaulo#include <net/if_types.h> 53253789Srpaulo 54253789Srpaulo#include <netinet/in.h> 55253789Srpaulo#include <netinet/in_systm.h> 56253789Srpaulo#include <netinet/in_var.h> 57253789Srpaulo#include <netinet/if_ether.h> 58253789Srpaulo#include <netinet/ip.h> 59253789Srpaulo 60253789Srpaulo#include <net80211/ieee80211_var.h> 61253789Srpaulo#include <net80211/ieee80211_regdomain.h> 62253789Srpaulo#include <net80211/ieee80211_radiotap.h> 63253789Srpaulo 64253789Srpaulo#include <dev/usb/usb.h> 65253789Srpaulo#include <dev/usb/usbdi.h> 66253789Srpaulo#include "usbdevs.h" 67253789Srpaulo 68253789Srpaulo#define USB_DEBUG_VAR rsu_debug 69253789Srpaulo#include <dev/usb/usb_debug.h> 70253789Srpaulo 71253789Srpaulo#include <dev/usb/wlan/if_rsureg.h> 72253789Srpaulo 73253789Srpaulo#ifdef USB_DEBUG 74253789Srpaulostatic int rsu_debug = 0; 75253789SrpauloSYSCTL_NODE(_hw_usb, OID_AUTO, rsu, CTLFLAG_RW, 0, "USB rsu"); 76276701ShselaskySYSCTL_INT(_hw_usb_rsu, OID_AUTO, debug, CTLFLAG_RWTUN, &rsu_debug, 0, 77253789Srpaulo "Debug level"); 78287727Sadrian#define RSU_DPRINTF(_sc, _flg, ...) \ 79287727Sadrian do \ 80287727Sadrian if (((_flg) == (RSU_DEBUG_ANY)) || (rsu_debug & (_flg))) \ 81287727Sadrian device_printf((_sc)->sc_dev, __VA_ARGS__); \ 82287727Sadrian while (0) 83287727Sadrian#else 84287727Sadrian#define RSU_DPRINTF(_sc, _flg, ...) 85253789Srpaulo#endif 86253789Srpaulo 87287947Sadrianstatic int rsu_enable_11n = 0; 88287947SadrianTUNABLE_INT("hw.usb.rsu.enable_11n", &rsu_enable_11n); 89287947Sadrian 90287727Sadrian#define RSU_DEBUG_ANY 0xffffffff 91287727Sadrian#define RSU_DEBUG_TX 0x00000001 92287727Sadrian#define RSU_DEBUG_RX 0x00000002 93287727Sadrian#define RSU_DEBUG_RESET 0x00000004 94287727Sadrian#define RSU_DEBUG_CALIB 0x00000008 95287727Sadrian#define RSU_DEBUG_STATE 0x00000010 96287727Sadrian#define RSU_DEBUG_SCAN 0x00000020 97287727Sadrian#define RSU_DEBUG_FWCMD 0x00000040 98287727Sadrian#define RSU_DEBUG_TXDONE 0x00000080 99287727Sadrian#define RSU_DEBUG_FW 0x00000100 100287727Sadrian#define RSU_DEBUG_FWDBG 0x00000200 101287727Sadrian 102253789Srpaulostatic const STRUCT_USB_HOST_ID rsu_devs[] = { 103253789Srpaulo#define RSU_HT_NOT_SUPPORTED 0 104253789Srpaulo#define RSU_HT_SUPPORTED 1 105253789Srpaulo#define RSU_DEV_HT(v,p) { USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, \ 106253789Srpaulo RSU_HT_SUPPORTED) } 107253789Srpaulo#define RSU_DEV(v,p) { USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, \ 108253789Srpaulo RSU_HT_NOT_SUPPORTED) } 109253789Srpaulo RSU_DEV(ASUS, RTL8192SU), 110253789Srpaulo RSU_DEV(AZUREWAVE, RTL8192SU_4), 111253789Srpaulo RSU_DEV_HT(ACCTON, RTL8192SU), 112253789Srpaulo RSU_DEV_HT(ASUS, USBN10), 113253789Srpaulo RSU_DEV_HT(AZUREWAVE, RTL8192SU_1), 114253789Srpaulo RSU_DEV_HT(AZUREWAVE, RTL8192SU_2), 115253789Srpaulo RSU_DEV_HT(AZUREWAVE, RTL8192SU_3), 116253789Srpaulo RSU_DEV_HT(AZUREWAVE, RTL8192SU_5), 117253789Srpaulo RSU_DEV_HT(BELKIN, RTL8192SU_1), 118253789Srpaulo RSU_DEV_HT(BELKIN, RTL8192SU_2), 119253789Srpaulo RSU_DEV_HT(BELKIN, RTL8192SU_3), 120253789Srpaulo RSU_DEV_HT(CONCEPTRONIC2, RTL8192SU_1), 121253789Srpaulo RSU_DEV_HT(CONCEPTRONIC2, RTL8192SU_2), 122253789Srpaulo RSU_DEV_HT(CONCEPTRONIC2, RTL8192SU_3), 123253789Srpaulo RSU_DEV_HT(COREGA, RTL8192SU), 124253789Srpaulo RSU_DEV_HT(DLINK2, DWA131A1), 125253789Srpaulo RSU_DEV_HT(DLINK2, RTL8192SU_1), 126253789Srpaulo RSU_DEV_HT(DLINK2, RTL8192SU_2), 127253789Srpaulo RSU_DEV_HT(EDIMAX, RTL8192SU_1), 128253789Srpaulo RSU_DEV_HT(EDIMAX, RTL8192SU_2), 129258028Skevlo RSU_DEV_HT(EDIMAX, EW7622UMN), 130253789Srpaulo RSU_DEV_HT(GUILLEMOT, HWGUN54), 131253789Srpaulo RSU_DEV_HT(GUILLEMOT, HWNUM300), 132253789Srpaulo RSU_DEV_HT(HAWKING, RTL8192SU_1), 133253789Srpaulo RSU_DEV_HT(HAWKING, RTL8192SU_2), 134253789Srpaulo RSU_DEV_HT(PLANEX2, GWUSNANO), 135253789Srpaulo RSU_DEV_HT(REALTEK, RTL8171), 136253789Srpaulo RSU_DEV_HT(REALTEK, RTL8172), 137253789Srpaulo RSU_DEV_HT(REALTEK, RTL8173), 138253789Srpaulo RSU_DEV_HT(REALTEK, RTL8174), 139253789Srpaulo RSU_DEV_HT(REALTEK, RTL8192SU), 140253789Srpaulo RSU_DEV_HT(REALTEK, RTL8712), 141253789Srpaulo RSU_DEV_HT(REALTEK, RTL8713), 142253789Srpaulo RSU_DEV_HT(SENAO, RTL8192SU_1), 143253789Srpaulo RSU_DEV_HT(SENAO, RTL8192SU_2), 144253789Srpaulo RSU_DEV_HT(SITECOMEU, WL349V1), 145253789Srpaulo RSU_DEV_HT(SITECOMEU, WL353), 146253789Srpaulo RSU_DEV_HT(SWEEX2, LW154), 147274684Skevlo RSU_DEV_HT(TRENDNET, TEW646UBH), 148253789Srpaulo#undef RSU_DEV_HT 149253789Srpaulo#undef RSU_DEV 150253789Srpaulo}; 151253789Srpaulo 152253789Srpaulostatic device_probe_t rsu_match; 153253789Srpaulostatic device_attach_t rsu_attach; 154253789Srpaulostatic device_detach_t rsu_detach; 155267041Shselaskystatic usb_callback_t rsu_bulk_tx_callback_be_bk; 156267041Shselaskystatic usb_callback_t rsu_bulk_tx_callback_vi_vo; 157287896Sadrianstatic usb_callback_t rsu_bulk_tx_callback_h2c; 158253789Srpaulostatic usb_callback_t rsu_bulk_rx_callback; 159253789Srpaulostatic usb_error_t rsu_do_request(struct rsu_softc *, 160253789Srpaulo struct usb_device_request *, void *); 161253789Srpaulostatic struct ieee80211vap * 162253789Srpaulo rsu_vap_create(struct ieee80211com *, const char name[], 163253789Srpaulo int, enum ieee80211_opmode, int, const uint8_t bssid[], 164253789Srpaulo const uint8_t mac[]); 165253789Srpaulostatic void rsu_vap_delete(struct ieee80211vap *); 166253789Srpaulostatic void rsu_scan_start(struct ieee80211com *); 167253789Srpaulostatic void rsu_scan_end(struct ieee80211com *); 168253789Srpaulostatic void rsu_set_channel(struct ieee80211com *); 169283540Sglebiusstatic void rsu_update_mcast(struct ieee80211com *); 170253789Srpaulostatic int rsu_alloc_rx_list(struct rsu_softc *); 171253789Srpaulostatic void rsu_free_rx_list(struct rsu_softc *); 172253789Srpaulostatic int rsu_alloc_tx_list(struct rsu_softc *); 173253789Srpaulostatic void rsu_free_tx_list(struct rsu_softc *); 174253789Srpaulostatic void rsu_free_list(struct rsu_softc *, struct rsu_data [], int); 175253789Srpaulostatic struct rsu_data *_rsu_getbuf(struct rsu_softc *); 176253789Srpaulostatic struct rsu_data *rsu_getbuf(struct rsu_softc *); 177287953Sadrianstatic void rsu_freebuf(struct rsu_softc *, struct rsu_data *); 178253789Srpaulostatic int rsu_write_region_1(struct rsu_softc *, uint16_t, uint8_t *, 179253789Srpaulo int); 180253789Srpaulostatic void rsu_write_1(struct rsu_softc *, uint16_t, uint8_t); 181253789Srpaulostatic void rsu_write_2(struct rsu_softc *, uint16_t, uint16_t); 182253789Srpaulostatic void rsu_write_4(struct rsu_softc *, uint16_t, uint32_t); 183253789Srpaulostatic int rsu_read_region_1(struct rsu_softc *, uint16_t, uint8_t *, 184253789Srpaulo int); 185253789Srpaulostatic uint8_t rsu_read_1(struct rsu_softc *, uint16_t); 186253789Srpaulostatic uint16_t rsu_read_2(struct rsu_softc *, uint16_t); 187253789Srpaulostatic uint32_t rsu_read_4(struct rsu_softc *, uint16_t); 188253789Srpaulostatic int rsu_fw_iocmd(struct rsu_softc *, uint32_t); 189253789Srpaulostatic uint8_t rsu_efuse_read_1(struct rsu_softc *, uint16_t); 190253789Srpaulostatic int rsu_read_rom(struct rsu_softc *); 191253789Srpaulostatic int rsu_fw_cmd(struct rsu_softc *, uint8_t, void *, int); 192253789Srpaulostatic void rsu_calib_task(void *, int); 193253789Srpaulostatic int rsu_newstate(struct ieee80211vap *, enum ieee80211_state, int); 194253789Srpaulo#ifdef notyet 195253789Srpaulostatic void rsu_set_key(struct rsu_softc *, const struct ieee80211_key *); 196253789Srpaulostatic void rsu_delete_key(struct rsu_softc *, const struct ieee80211_key *); 197253789Srpaulo#endif 198253789Srpaulostatic int rsu_site_survey(struct rsu_softc *, struct ieee80211vap *); 199253789Srpaulostatic int rsu_join_bss(struct rsu_softc *, struct ieee80211_node *); 200253789Srpaulostatic int rsu_disconnect(struct rsu_softc *); 201253789Srpaulostatic void rsu_event_survey(struct rsu_softc *, uint8_t *, int); 202253789Srpaulostatic void rsu_event_join_bss(struct rsu_softc *, uint8_t *, int); 203253789Srpaulostatic void rsu_rx_event(struct rsu_softc *, uint8_t, uint8_t *, int); 204253789Srpaulostatic void rsu_rx_multi_event(struct rsu_softc *, uint8_t *, int); 205253789Srpaulostatic int8_t rsu_get_rssi(struct rsu_softc *, int, void *); 206253789Srpaulostatic struct mbuf * 207253789Srpaulo rsu_rx_frame(struct rsu_softc *, uint8_t *, int, int *); 208253789Srpaulostatic struct mbuf * 209253789Srpaulo rsu_rx_multi_frame(struct rsu_softc *, uint8_t *, int, int *); 210253789Srpaulostatic struct mbuf * 211253789Srpaulo rsu_rxeof(struct usb_xfer *, struct rsu_data *, int *); 212253789Srpaulostatic void rsu_txeof(struct usb_xfer *, struct rsu_data *); 213253789Srpaulostatic int rsu_raw_xmit(struct ieee80211_node *, struct mbuf *, 214253789Srpaulo const struct ieee80211_bpf_params *); 215287197Sglebiusstatic void rsu_init(struct rsu_softc *); 216253789Srpaulostatic int rsu_tx_start(struct rsu_softc *, struct ieee80211_node *, 217266505Shselasky struct mbuf *, struct rsu_data *); 218287197Sglebiusstatic int rsu_transmit(struct ieee80211com *, struct mbuf *); 219287197Sglebiusstatic void rsu_start(struct rsu_softc *); 220287197Sglebiusstatic void rsu_parent(struct ieee80211com *); 221287197Sglebiusstatic void rsu_stop(struct rsu_softc *); 222287892Sadrianstatic void rsu_ms_delay(struct rsu_softc *, int); 223253789Srpaulo 224253789Srpaulostatic device_method_t rsu_methods[] = { 225253789Srpaulo DEVMETHOD(device_probe, rsu_match), 226253789Srpaulo DEVMETHOD(device_attach, rsu_attach), 227253789Srpaulo DEVMETHOD(device_detach, rsu_detach), 228253789Srpaulo 229253789Srpaulo DEVMETHOD_END 230253789Srpaulo}; 231253789Srpaulo 232253789Srpaulostatic driver_t rsu_driver = { 233253789Srpaulo .name = "rsu", 234253789Srpaulo .methods = rsu_methods, 235253789Srpaulo .size = sizeof(struct rsu_softc) 236253789Srpaulo}; 237253789Srpaulo 238253789Srpaulostatic devclass_t rsu_devclass; 239253789Srpaulo 240253789SrpauloDRIVER_MODULE(rsu, uhub, rsu_driver, rsu_devclass, NULL, 0); 241253789SrpauloMODULE_DEPEND(rsu, wlan, 1, 1, 1); 242253789SrpauloMODULE_DEPEND(rsu, usb, 1, 1, 1); 243253789SrpauloMODULE_DEPEND(rsu, firmware, 1, 1, 1); 244253789SrpauloMODULE_VERSION(rsu, 1); 245253789Srpaulo 246267041Shselaskystatic uint8_t rsu_wme_ac_xfer_map[4] = { 247267041Shselasky [WME_AC_BE] = RSU_BULK_TX_BE_BK, 248267041Shselasky [WME_AC_BK] = RSU_BULK_TX_BE_BK, 249267041Shselasky [WME_AC_VI] = RSU_BULK_TX_VI_VO, 250267041Shselasky [WME_AC_VO] = RSU_BULK_TX_VI_VO, 251267041Shselasky}; 252267041Shselasky 253287896Sadrian/* XXX hard-coded */ 254287896Sadrian#define RSU_H2C_ENDPOINT 3 255287896Sadrian 256253789Srpaulostatic const struct usb_config rsu_config[RSU_N_TRANSFER] = { 257253789Srpaulo [RSU_BULK_RX] = { 258253789Srpaulo .type = UE_BULK, 259253789Srpaulo .endpoint = UE_ADDR_ANY, 260253789Srpaulo .direction = UE_DIR_IN, 261253789Srpaulo .bufsize = RSU_RXBUFSZ, 262253789Srpaulo .flags = { 263253789Srpaulo .pipe_bof = 1, 264253789Srpaulo .short_xfer_ok = 1 265253789Srpaulo }, 266253789Srpaulo .callback = rsu_bulk_rx_callback 267253789Srpaulo }, 268267041Shselasky [RSU_BULK_TX_BE_BK] = { 269253789Srpaulo .type = UE_BULK, 270253789Srpaulo .endpoint = 0x06, 271253789Srpaulo .direction = UE_DIR_OUT, 272253789Srpaulo .bufsize = RSU_TXBUFSZ, 273253789Srpaulo .flags = { 274253789Srpaulo .ext_buffer = 1, 275253789Srpaulo .pipe_bof = 1, 276253789Srpaulo .force_short_xfer = 1 277253789Srpaulo }, 278267041Shselasky .callback = rsu_bulk_tx_callback_be_bk, 279253789Srpaulo .timeout = RSU_TX_TIMEOUT 280253789Srpaulo }, 281267041Shselasky [RSU_BULK_TX_VI_VO] = { 282253789Srpaulo .type = UE_BULK, 283253789Srpaulo .endpoint = 0x04, 284253789Srpaulo .direction = UE_DIR_OUT, 285253789Srpaulo .bufsize = RSU_TXBUFSZ, 286253789Srpaulo .flags = { 287253789Srpaulo .ext_buffer = 1, 288253789Srpaulo .pipe_bof = 1, 289253789Srpaulo .force_short_xfer = 1 290253789Srpaulo }, 291267041Shselasky .callback = rsu_bulk_tx_callback_vi_vo, 292253789Srpaulo .timeout = RSU_TX_TIMEOUT 293253789Srpaulo }, 294287896Sadrian [RSU_BULK_TX_H2C] = { 295287896Sadrian .type = UE_BULK, 296287896Sadrian .endpoint = 0x0d, 297287896Sadrian .direction = UE_DIR_OUT, 298287896Sadrian .bufsize = RSU_TXBUFSZ, 299287896Sadrian .flags = { 300287896Sadrian .ext_buffer = 1, 301287896Sadrian .pipe_bof = 1, 302287896Sadrian .short_xfer_ok = 1 303287896Sadrian }, 304287896Sadrian .callback = rsu_bulk_tx_callback_h2c, 305287896Sadrian .timeout = RSU_TX_TIMEOUT 306287896Sadrian }, 307253789Srpaulo}; 308253789Srpaulo 309253789Srpaulostatic int 310253789Srpaulorsu_match(device_t self) 311253789Srpaulo{ 312253789Srpaulo struct usb_attach_arg *uaa = device_get_ivars(self); 313253789Srpaulo 314253789Srpaulo if (uaa->usb_mode != USB_MODE_HOST || 315253789Srpaulo uaa->info.bIfaceIndex != 0 || 316253789Srpaulo uaa->info.bConfigIndex != 0) 317253789Srpaulo return (ENXIO); 318253789Srpaulo 319253789Srpaulo return (usbd_lookup_id_by_uaa(rsu_devs, sizeof(rsu_devs), uaa)); 320253789Srpaulo} 321253789Srpaulo 322253789Srpaulostatic int 323287763Sadrianrsu_send_mgmt(struct ieee80211_node *ni, int type, int arg) 324287763Sadrian{ 325287763Sadrian 326287763Sadrian return (ENOTSUP); 327287763Sadrian} 328287763Sadrian 329287895Sadrianstatic void 330287895Sadrianrsu_update_chw(struct ieee80211com *ic) 331287895Sadrian{ 332287895Sadrian 333287895Sadrian} 334287895Sadrian 335287763Sadrianstatic int 336287895Sadrianrsu_ampdu_enable(struct ieee80211_node *ni, struct ieee80211_tx_ampdu *tap) 337287895Sadrian{ 338287895Sadrian 339287895Sadrian /* Firmware handles this; not our problem */ 340287895Sadrian return (0); 341287895Sadrian} 342287895Sadrian 343287895Sadrianstatic int 344287895Sadrianrsu_wme_update(struct ieee80211com *ic) 345287895Sadrian{ 346287895Sadrian 347287895Sadrian /* Firmware handles this; not our problem */ 348287895Sadrian return (0); 349287895Sadrian} 350287895Sadrian 351287895Sadrianstatic int 352253789Srpaulorsu_attach(device_t self) 353253789Srpaulo{ 354253789Srpaulo struct usb_attach_arg *uaa = device_get_ivars(self); 355253789Srpaulo struct rsu_softc *sc = device_get_softc(self); 356287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 357253789Srpaulo int error; 358253789Srpaulo uint8_t iface_index, bands; 359287894Sadrian struct usb_interface *iface; 360253789Srpaulo 361253789Srpaulo device_set_usb_desc(self); 362253789Srpaulo sc->sc_udev = uaa->device; 363253789Srpaulo sc->sc_dev = self; 364287947Sadrian if (rsu_enable_11n) 365287947Sadrian sc->sc_ht = !! (USB_GET_DRIVER_INFO(uaa) & RSU_HT_SUPPORTED); 366253789Srpaulo 367287894Sadrian /* Get number of endpoints */ 368287894Sadrian iface = usbd_get_iface(sc->sc_udev, 0); 369287894Sadrian sc->sc_nendpoints = iface->idesc->bNumEndpoints; 370287894Sadrian 371287897Sadrian /* Endpoints are hard-coded for now, so enforce 4-endpoint only */ 372287897Sadrian if (sc->sc_nendpoints != 4) { 373287897Sadrian device_printf(sc->sc_dev, 374287897Sadrian "the driver currently only supports 4-endpoint devices\n"); 375287897Sadrian return (ENXIO); 376287897Sadrian } 377287897Sadrian 378253789Srpaulo mtx_init(&sc->sc_mtx, device_get_nameunit(self), MTX_NETWORK_LOCK, 379253789Srpaulo MTX_DEF); 380253789Srpaulo TIMEOUT_TASK_INIT(taskqueue_thread, &sc->calib_task, 0, 381253789Srpaulo rsu_calib_task, sc); 382287197Sglebius mbufq_init(&sc->sc_snd, ifqmaxlen); 383253789Srpaulo 384266535Shselasky /* Allocate Tx/Rx buffers. */ 385266535Shselasky error = rsu_alloc_rx_list(sc); 386266535Shselasky if (error != 0) { 387266535Shselasky device_printf(sc->sc_dev, "could not allocate Rx buffers\n"); 388266535Shselasky goto fail_usb; 389266535Shselasky } 390266535Shselasky 391266535Shselasky error = rsu_alloc_tx_list(sc); 392266535Shselasky if (error != 0) { 393266535Shselasky device_printf(sc->sc_dev, "could not allocate Tx buffers\n"); 394266535Shselasky rsu_free_rx_list(sc); 395266535Shselasky goto fail_usb; 396266535Shselasky } 397266535Shselasky 398253789Srpaulo iface_index = 0; 399253789Srpaulo error = usbd_transfer_setup(uaa->device, &iface_index, sc->sc_xfer, 400253789Srpaulo rsu_config, RSU_N_TRANSFER, sc, &sc->sc_mtx); 401253789Srpaulo if (error) { 402253789Srpaulo device_printf(sc->sc_dev, 403253789Srpaulo "could not allocate USB transfers, err=%s\n", 404253789Srpaulo usbd_errstr(error)); 405253831Srpaulo goto fail_usb; 406253789Srpaulo } 407253789Srpaulo RSU_LOCK(sc); 408253789Srpaulo /* Read chip revision. */ 409253789Srpaulo sc->cut = MS(rsu_read_4(sc, R92S_PMC_FSM), R92S_PMC_FSM_CUT); 410253789Srpaulo if (sc->cut != 3) 411253789Srpaulo sc->cut = (sc->cut >> 1) + 1; 412253789Srpaulo error = rsu_read_rom(sc); 413276611Shselasky RSU_UNLOCK(sc); 414253789Srpaulo if (error != 0) { 415253789Srpaulo device_printf(self, "could not read ROM\n"); 416253831Srpaulo goto fail_rom; 417253789Srpaulo } 418287197Sglebius IEEE80211_ADDR_COPY(ic->ic_macaddr, &sc->rom[0x12]); 419253789Srpaulo device_printf(self, "MAC/BB RTL8712 cut %d\n", sc->cut); 420253789Srpaulo 421283537Sglebius ic->ic_softc = sc; 422283527Sglebius ic->ic_name = device_get_nameunit(self); 423253789Srpaulo ic->ic_phytype = IEEE80211_T_OFDM; /* Not only, but not used. */ 424253789Srpaulo ic->ic_opmode = IEEE80211_M_STA; /* Default to BSS mode. */ 425253789Srpaulo 426253789Srpaulo /* Set device capabilities. */ 427253789Srpaulo ic->ic_caps = 428253789Srpaulo IEEE80211_C_STA | /* station mode */ 429287727Sadrian#if 0 430253789Srpaulo IEEE80211_C_BGSCAN | /* Background scan. */ 431287727Sadrian#endif 432253789Srpaulo IEEE80211_C_SHPREAMBLE | /* Short preamble supported. */ 433287901Sadrian IEEE80211_C_WME | /* WME/QoS */ 434253789Srpaulo IEEE80211_C_SHSLOT | /* Short slot time supported. */ 435253789Srpaulo IEEE80211_C_WPA; /* WPA/RSN. */ 436253789Srpaulo 437253789Srpaulo /* Check if HT support is present. */ 438287947Sadrian if (sc->sc_ht) { 439287947Sadrian device_printf(sc->sc_dev, "%s: enabling 11n\n", __func__); 440287947Sadrian 441287947Sadrian /* Enable basic HT */ 442287947Sadrian ic->ic_htcaps = IEEE80211_HTC_HT | 443287947Sadrian IEEE80211_HTC_AMPDU | 444287947Sadrian IEEE80211_HTC_AMSDU | 445287947Sadrian IEEE80211_HTCAP_MAXAMSDU_3839 | 446287947Sadrian IEEE80211_HTCAP_SMPS_OFF; 447287947Sadrian 448288049Sadrian /* 449288049Sadrian * XXX HT40 isn't working in this driver yet - there's 450288049Sadrian * something missing. Disable it for now. 451288049Sadrian */ 452288049Sadrian#if 0 453287947Sadrian ic->ic_htcaps |= IEEE80211_HTCAP_CHWIDTH40; 454288049Sadrian#endif 455287947Sadrian 456287947Sadrian /* set number of spatial streams */ 457287947Sadrian ic->ic_txstream = 1; 458287947Sadrian ic->ic_rxstream = 1; 459253789Srpaulo } 460253789Srpaulo 461253789Srpaulo /* Set supported .11b and .11g rates. */ 462253789Srpaulo bands = 0; 463253789Srpaulo setbit(&bands, IEEE80211_MODE_11B); 464253789Srpaulo setbit(&bands, IEEE80211_MODE_11G); 465287947Sadrian if (sc->sc_ht) 466287947Sadrian setbit(&bands, IEEE80211_MODE_11NG); 467253789Srpaulo ieee80211_init_channels(ic, NULL, &bands); 468253789Srpaulo 469287197Sglebius ieee80211_ifattach(ic); 470253789Srpaulo ic->ic_raw_xmit = rsu_raw_xmit; 471253789Srpaulo ic->ic_scan_start = rsu_scan_start; 472253789Srpaulo ic->ic_scan_end = rsu_scan_end; 473253789Srpaulo ic->ic_set_channel = rsu_set_channel; 474253789Srpaulo ic->ic_vap_create = rsu_vap_create; 475253789Srpaulo ic->ic_vap_delete = rsu_vap_delete; 476253789Srpaulo ic->ic_update_mcast = rsu_update_mcast; 477287197Sglebius ic->ic_parent = rsu_parent; 478287197Sglebius ic->ic_transmit = rsu_transmit; 479287763Sadrian ic->ic_send_mgmt = rsu_send_mgmt; 480287895Sadrian ic->ic_update_chw = rsu_update_chw; 481287895Sadrian ic->ic_ampdu_enable = rsu_ampdu_enable; 482287895Sadrian ic->ic_wme.wme_update = rsu_wme_update; 483253789Srpaulo 484253789Srpaulo ieee80211_radiotap_attach(ic, &sc->sc_txtap.wt_ihdr, 485253789Srpaulo sizeof(sc->sc_txtap), RSU_TX_RADIOTAP_PRESENT, 486253789Srpaulo &sc->sc_rxtap.wr_ihdr, sizeof(sc->sc_rxtap), 487253789Srpaulo RSU_RX_RADIOTAP_PRESENT); 488253789Srpaulo 489253789Srpaulo if (bootverbose) 490253789Srpaulo ieee80211_announce(ic); 491253789Srpaulo 492253789Srpaulo return (0); 493253789Srpaulo 494253831Srpaulofail_rom: 495253831Srpaulo usbd_transfer_unsetup(sc->sc_xfer, RSU_N_TRANSFER); 496253831Srpaulofail_usb: 497253831Srpaulo mtx_destroy(&sc->sc_mtx); 498253789Srpaulo return (ENXIO); 499253789Srpaulo} 500253789Srpaulo 501253789Srpaulostatic int 502253789Srpaulorsu_detach(device_t self) 503253789Srpaulo{ 504253789Srpaulo struct rsu_softc *sc = device_get_softc(self); 505287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 506253789Srpaulo 507287197Sglebius RSU_LOCK(sc); 508287197Sglebius rsu_stop(sc); 509287197Sglebius RSU_UNLOCK(sc); 510253789Srpaulo usbd_transfer_unsetup(sc->sc_xfer, RSU_N_TRANSFER); 511253789Srpaulo ieee80211_ifdetach(ic); 512253789Srpaulo 513253789Srpaulo taskqueue_drain_timeout(taskqueue_thread, &sc->calib_task); 514253789Srpaulo 515253789Srpaulo /* Free Tx/Rx buffers. */ 516253789Srpaulo rsu_free_tx_list(sc); 517253789Srpaulo rsu_free_rx_list(sc); 518253789Srpaulo 519287197Sglebius mbufq_drain(&sc->sc_snd); 520253789Srpaulo mtx_destroy(&sc->sc_mtx); 521253789Srpaulo 522253789Srpaulo return (0); 523253789Srpaulo} 524253789Srpaulo 525253789Srpaulostatic usb_error_t 526253789Srpaulorsu_do_request(struct rsu_softc *sc, struct usb_device_request *req, 527253789Srpaulo void *data) 528253789Srpaulo{ 529253789Srpaulo usb_error_t err; 530253789Srpaulo int ntries = 10; 531253789Srpaulo 532253789Srpaulo RSU_ASSERT_LOCKED(sc); 533253789Srpaulo 534253789Srpaulo while (ntries--) { 535253789Srpaulo err = usbd_do_request_flags(sc->sc_udev, &sc->sc_mtx, 536253789Srpaulo req, data, 0, NULL, 250 /* ms */); 537266466Shselasky if (err == 0 || err == USB_ERR_NOT_CONFIGURED) 538253789Srpaulo break; 539253789Srpaulo DPRINTFN(1, "Control request failed, %s (retrying)\n", 540253789Srpaulo usbd_errstr(err)); 541287892Sadrian rsu_ms_delay(sc, 10); 542253789Srpaulo } 543253789Srpaulo 544253789Srpaulo return (err); 545253789Srpaulo} 546253789Srpaulo 547253789Srpaulostatic struct ieee80211vap * 548253789Srpaulorsu_vap_create(struct ieee80211com *ic, const char name[IFNAMSIZ], int unit, 549253789Srpaulo enum ieee80211_opmode opmode, int flags, 550253789Srpaulo const uint8_t bssid[IEEE80211_ADDR_LEN], 551253789Srpaulo const uint8_t mac[IEEE80211_ADDR_LEN]) 552253789Srpaulo{ 553253789Srpaulo struct rsu_vap *uvp; 554253789Srpaulo struct ieee80211vap *vap; 555253789Srpaulo 556253789Srpaulo if (!TAILQ_EMPTY(&ic->ic_vaps)) /* only one at a time */ 557253789Srpaulo return (NULL); 558253789Srpaulo 559287197Sglebius uvp = malloc(sizeof(struct rsu_vap), M_80211_VAP, M_WAITOK | M_ZERO); 560253789Srpaulo vap = &uvp->vap; 561253789Srpaulo 562257743Shselasky if (ieee80211_vap_setup(ic, vap, name, unit, opmode, 563287197Sglebius flags, bssid) != 0) { 564257743Shselasky /* out of memory */ 565257743Shselasky free(uvp, M_80211_VAP); 566257743Shselasky return (NULL); 567257743Shselasky } 568257743Shselasky 569253789Srpaulo /* override state transition machine */ 570253789Srpaulo uvp->newstate = vap->iv_newstate; 571253789Srpaulo vap->iv_newstate = rsu_newstate; 572253789Srpaulo 573287950Sadrian /* Limits from the r92su driver */ 574287950Sadrian vap->iv_ampdu_density = IEEE80211_HTCAP_MPDUDENSITY_16; 575287950Sadrian vap->iv_ampdu_rxmax = IEEE80211_HTCAP_MAXRXAMPDU_32K; 576287950Sadrian 577253789Srpaulo /* complete setup */ 578253789Srpaulo ieee80211_vap_attach(vap, ieee80211_media_change, 579287197Sglebius ieee80211_media_status, mac); 580253789Srpaulo ic->ic_opmode = opmode; 581253789Srpaulo 582253789Srpaulo return (vap); 583253789Srpaulo} 584253789Srpaulo 585253789Srpaulostatic void 586253789Srpaulorsu_vap_delete(struct ieee80211vap *vap) 587253789Srpaulo{ 588253789Srpaulo struct rsu_vap *uvp = RSU_VAP(vap); 589253789Srpaulo 590253789Srpaulo ieee80211_vap_detach(vap); 591253789Srpaulo free(uvp, M_80211_VAP); 592253789Srpaulo} 593253789Srpaulo 594253789Srpaulostatic void 595253789Srpaulorsu_scan_start(struct ieee80211com *ic) 596253789Srpaulo{ 597287197Sglebius struct rsu_softc *sc = ic->ic_softc; 598253789Srpaulo int error; 599253789Srpaulo 600253789Srpaulo /* Scanning is done by the firmware. */ 601253789Srpaulo RSU_LOCK(sc); 602253789Srpaulo error = rsu_site_survey(sc, TAILQ_FIRST(&ic->ic_vaps)); 603253789Srpaulo RSU_UNLOCK(sc); 604253789Srpaulo if (error != 0) 605253789Srpaulo device_printf(sc->sc_dev, 606253789Srpaulo "could not send site survey command\n"); 607253789Srpaulo} 608253789Srpaulo 609253789Srpaulostatic void 610253789Srpaulorsu_scan_end(struct ieee80211com *ic) 611253789Srpaulo{ 612253789Srpaulo /* Nothing to do here. */ 613253789Srpaulo} 614253789Srpaulo 615253789Srpaulostatic void 616253789Srpaulorsu_set_channel(struct ieee80211com *ic __unused) 617253789Srpaulo{ 618253789Srpaulo /* We are unable to switch channels, yet. */ 619253789Srpaulo} 620253789Srpaulo 621253789Srpaulostatic void 622283540Sglebiusrsu_update_mcast(struct ieee80211com *ic) 623253789Srpaulo{ 624253789Srpaulo /* XXX do nothing? */ 625253789Srpaulo} 626253789Srpaulo 627253789Srpaulostatic int 628253789Srpaulorsu_alloc_list(struct rsu_softc *sc, struct rsu_data data[], 629253789Srpaulo int ndata, int maxsz) 630253789Srpaulo{ 631253789Srpaulo int i, error; 632253789Srpaulo 633253789Srpaulo for (i = 0; i < ndata; i++) { 634253789Srpaulo struct rsu_data *dp = &data[i]; 635253789Srpaulo dp->sc = sc; 636253789Srpaulo dp->m = NULL; 637253789Srpaulo dp->buf = malloc(maxsz, M_USBDEV, M_NOWAIT); 638253789Srpaulo if (dp->buf == NULL) { 639253789Srpaulo device_printf(sc->sc_dev, 640253789Srpaulo "could not allocate buffer\n"); 641253789Srpaulo error = ENOMEM; 642253789Srpaulo goto fail; 643253789Srpaulo } 644253789Srpaulo dp->ni = NULL; 645253789Srpaulo } 646253789Srpaulo 647253789Srpaulo return (0); 648253789Srpaulofail: 649253789Srpaulo rsu_free_list(sc, data, ndata); 650253789Srpaulo return (error); 651253789Srpaulo} 652253789Srpaulo 653253789Srpaulostatic int 654253789Srpaulorsu_alloc_rx_list(struct rsu_softc *sc) 655253789Srpaulo{ 656253789Srpaulo int error, i; 657253789Srpaulo 658253789Srpaulo error = rsu_alloc_list(sc, sc->sc_rx, RSU_RX_LIST_COUNT, 659253789Srpaulo RSU_RXBUFSZ); 660253789Srpaulo if (error != 0) 661253789Srpaulo return (error); 662253789Srpaulo 663253789Srpaulo STAILQ_INIT(&sc->sc_rx_active); 664253789Srpaulo STAILQ_INIT(&sc->sc_rx_inactive); 665253789Srpaulo 666253789Srpaulo for (i = 0; i < RSU_RX_LIST_COUNT; i++) 667253789Srpaulo STAILQ_INSERT_HEAD(&sc->sc_rx_inactive, &sc->sc_rx[i], next); 668253789Srpaulo 669253789Srpaulo return (0); 670253789Srpaulo} 671253789Srpaulo 672253789Srpaulostatic int 673253789Srpaulorsu_alloc_tx_list(struct rsu_softc *sc) 674253789Srpaulo{ 675253789Srpaulo int error, i; 676253789Srpaulo 677253789Srpaulo error = rsu_alloc_list(sc, sc->sc_tx, RSU_TX_LIST_COUNT, 678253789Srpaulo RSU_TXBUFSZ); 679253789Srpaulo if (error != 0) 680253789Srpaulo return (error); 681253789Srpaulo 682253789Srpaulo STAILQ_INIT(&sc->sc_tx_inactive); 683253789Srpaulo 684267041Shselasky for (i = 0; i != RSU_N_TRANSFER; i++) { 685266505Shselasky STAILQ_INIT(&sc->sc_tx_active[i]); 686266505Shselasky STAILQ_INIT(&sc->sc_tx_pending[i]); 687266505Shselasky } 688266505Shselasky 689253789Srpaulo for (i = 0; i < RSU_TX_LIST_COUNT; i++) { 690253789Srpaulo STAILQ_INSERT_HEAD(&sc->sc_tx_inactive, &sc->sc_tx[i], next); 691253789Srpaulo } 692253789Srpaulo 693253789Srpaulo return (0); 694253789Srpaulo} 695253789Srpaulo 696253789Srpaulostatic void 697253789Srpaulorsu_free_tx_list(struct rsu_softc *sc) 698253789Srpaulo{ 699266535Shselasky int i; 700266535Shselasky 701266535Shselasky /* prevent further allocations from TX list(s) */ 702266535Shselasky STAILQ_INIT(&sc->sc_tx_inactive); 703266535Shselasky 704267041Shselasky for (i = 0; i != RSU_N_TRANSFER; i++) { 705266535Shselasky STAILQ_INIT(&sc->sc_tx_active[i]); 706266535Shselasky STAILQ_INIT(&sc->sc_tx_pending[i]); 707266535Shselasky } 708266535Shselasky 709253789Srpaulo rsu_free_list(sc, sc->sc_tx, RSU_TX_LIST_COUNT); 710253789Srpaulo} 711253789Srpaulo 712253789Srpaulostatic void 713253789Srpaulorsu_free_rx_list(struct rsu_softc *sc) 714253789Srpaulo{ 715266535Shselasky /* prevent further allocations from RX list(s) */ 716266535Shselasky STAILQ_INIT(&sc->sc_rx_inactive); 717266535Shselasky STAILQ_INIT(&sc->sc_rx_active); 718266535Shselasky 719253789Srpaulo rsu_free_list(sc, sc->sc_rx, RSU_RX_LIST_COUNT); 720253789Srpaulo} 721253789Srpaulo 722253789Srpaulostatic void 723253789Srpaulorsu_free_list(struct rsu_softc *sc, struct rsu_data data[], int ndata) 724253789Srpaulo{ 725253789Srpaulo int i; 726253789Srpaulo 727253789Srpaulo for (i = 0; i < ndata; i++) { 728253789Srpaulo struct rsu_data *dp = &data[i]; 729253789Srpaulo 730253789Srpaulo if (dp->buf != NULL) { 731253789Srpaulo free(dp->buf, M_USBDEV); 732253789Srpaulo dp->buf = NULL; 733253789Srpaulo } 734253789Srpaulo if (dp->ni != NULL) { 735253789Srpaulo ieee80211_free_node(dp->ni); 736253789Srpaulo dp->ni = NULL; 737253789Srpaulo } 738253789Srpaulo } 739253789Srpaulo} 740253789Srpaulo 741253789Srpaulostatic struct rsu_data * 742253789Srpaulo_rsu_getbuf(struct rsu_softc *sc) 743253789Srpaulo{ 744253789Srpaulo struct rsu_data *bf; 745253789Srpaulo 746253789Srpaulo bf = STAILQ_FIRST(&sc->sc_tx_inactive); 747253789Srpaulo if (bf != NULL) 748253789Srpaulo STAILQ_REMOVE_HEAD(&sc->sc_tx_inactive, next); 749253789Srpaulo else 750253789Srpaulo bf = NULL; 751287954Sadrian return (bf); 752253789Srpaulo} 753253789Srpaulo 754253789Srpaulostatic struct rsu_data * 755253789Srpaulorsu_getbuf(struct rsu_softc *sc) 756253789Srpaulo{ 757253789Srpaulo struct rsu_data *bf; 758253789Srpaulo 759253789Srpaulo RSU_ASSERT_LOCKED(sc); 760253789Srpaulo 761253789Srpaulo bf = _rsu_getbuf(sc); 762253789Srpaulo return (bf); 763253789Srpaulo} 764253789Srpaulo 765287953Sadrianstatic void 766287953Sadrianrsu_freebuf(struct rsu_softc *sc, struct rsu_data *bf) 767287953Sadrian{ 768287953Sadrian 769287953Sadrian RSU_ASSERT_LOCKED(sc); 770287953Sadrian STAILQ_INSERT_TAIL(&sc->sc_tx_inactive, bf, next); 771287953Sadrian} 772287953Sadrian 773253789Srpaulostatic int 774253789Srpaulorsu_write_region_1(struct rsu_softc *sc, uint16_t addr, uint8_t *buf, 775253789Srpaulo int len) 776253789Srpaulo{ 777253789Srpaulo usb_device_request_t req; 778253789Srpaulo 779253789Srpaulo req.bmRequestType = UT_WRITE_VENDOR_DEVICE; 780253789Srpaulo req.bRequest = R92S_REQ_REGS; 781253789Srpaulo USETW(req.wValue, addr); 782253789Srpaulo USETW(req.wIndex, 0); 783253789Srpaulo USETW(req.wLength, len); 784253789Srpaulo 785253789Srpaulo return (rsu_do_request(sc, &req, buf)); 786253789Srpaulo} 787253789Srpaulo 788253789Srpaulostatic void 789253789Srpaulorsu_write_1(struct rsu_softc *sc, uint16_t addr, uint8_t val) 790253789Srpaulo{ 791253789Srpaulo rsu_write_region_1(sc, addr, &val, 1); 792253789Srpaulo} 793253789Srpaulo 794253789Srpaulostatic void 795253789Srpaulorsu_write_2(struct rsu_softc *sc, uint16_t addr, uint16_t val) 796253789Srpaulo{ 797253789Srpaulo val = htole16(val); 798253789Srpaulo rsu_write_region_1(sc, addr, (uint8_t *)&val, 2); 799253789Srpaulo} 800253789Srpaulo 801253789Srpaulostatic void 802253789Srpaulorsu_write_4(struct rsu_softc *sc, uint16_t addr, uint32_t val) 803253789Srpaulo{ 804253789Srpaulo val = htole32(val); 805253789Srpaulo rsu_write_region_1(sc, addr, (uint8_t *)&val, 4); 806253789Srpaulo} 807253789Srpaulo 808253789Srpaulostatic int 809253789Srpaulorsu_read_region_1(struct rsu_softc *sc, uint16_t addr, uint8_t *buf, 810253789Srpaulo int len) 811253789Srpaulo{ 812253789Srpaulo usb_device_request_t req; 813253789Srpaulo 814253789Srpaulo req.bmRequestType = UT_READ_VENDOR_DEVICE; 815253789Srpaulo req.bRequest = R92S_REQ_REGS; 816253789Srpaulo USETW(req.wValue, addr); 817253789Srpaulo USETW(req.wIndex, 0); 818253789Srpaulo USETW(req.wLength, len); 819253789Srpaulo 820253789Srpaulo return (rsu_do_request(sc, &req, buf)); 821253789Srpaulo} 822253789Srpaulo 823253789Srpaulostatic uint8_t 824253789Srpaulorsu_read_1(struct rsu_softc *sc, uint16_t addr) 825253789Srpaulo{ 826253789Srpaulo uint8_t val; 827253789Srpaulo 828253789Srpaulo if (rsu_read_region_1(sc, addr, &val, 1) != 0) 829253789Srpaulo return (0xff); 830253789Srpaulo return (val); 831253789Srpaulo} 832253789Srpaulo 833253789Srpaulostatic uint16_t 834253789Srpaulorsu_read_2(struct rsu_softc *sc, uint16_t addr) 835253789Srpaulo{ 836253789Srpaulo uint16_t val; 837253789Srpaulo 838253789Srpaulo if (rsu_read_region_1(sc, addr, (uint8_t *)&val, 2) != 0) 839253789Srpaulo return (0xffff); 840253789Srpaulo return (le16toh(val)); 841253789Srpaulo} 842253789Srpaulo 843253789Srpaulostatic uint32_t 844253789Srpaulorsu_read_4(struct rsu_softc *sc, uint16_t addr) 845253789Srpaulo{ 846253789Srpaulo uint32_t val; 847253789Srpaulo 848253789Srpaulo if (rsu_read_region_1(sc, addr, (uint8_t *)&val, 4) != 0) 849253789Srpaulo return (0xffffffff); 850253789Srpaulo return (le32toh(val)); 851253789Srpaulo} 852253789Srpaulo 853253789Srpaulostatic int 854253789Srpaulorsu_fw_iocmd(struct rsu_softc *sc, uint32_t iocmd) 855253789Srpaulo{ 856253789Srpaulo int ntries; 857253789Srpaulo 858253789Srpaulo rsu_write_4(sc, R92S_IOCMD_CTRL, iocmd); 859287892Sadrian rsu_ms_delay(sc, 1); 860253789Srpaulo for (ntries = 0; ntries < 50; ntries++) { 861253789Srpaulo if (rsu_read_4(sc, R92S_IOCMD_CTRL) == 0) 862253789Srpaulo return (0); 863287892Sadrian rsu_ms_delay(sc, 1); 864253789Srpaulo } 865253789Srpaulo return (ETIMEDOUT); 866253789Srpaulo} 867253789Srpaulo 868253789Srpaulostatic uint8_t 869253789Srpaulorsu_efuse_read_1(struct rsu_softc *sc, uint16_t addr) 870253789Srpaulo{ 871253789Srpaulo uint32_t reg; 872253789Srpaulo int ntries; 873253789Srpaulo 874253789Srpaulo reg = rsu_read_4(sc, R92S_EFUSE_CTRL); 875253789Srpaulo reg = RW(reg, R92S_EFUSE_CTRL_ADDR, addr); 876253789Srpaulo reg &= ~R92S_EFUSE_CTRL_VALID; 877253789Srpaulo rsu_write_4(sc, R92S_EFUSE_CTRL, reg); 878253789Srpaulo /* Wait for read operation to complete. */ 879253789Srpaulo for (ntries = 0; ntries < 100; ntries++) { 880253789Srpaulo reg = rsu_read_4(sc, R92S_EFUSE_CTRL); 881253789Srpaulo if (reg & R92S_EFUSE_CTRL_VALID) 882253789Srpaulo return (MS(reg, R92S_EFUSE_CTRL_DATA)); 883287892Sadrian rsu_ms_delay(sc, 1); 884253789Srpaulo } 885253789Srpaulo device_printf(sc->sc_dev, 886253789Srpaulo "could not read efuse byte at address 0x%x\n", addr); 887253789Srpaulo return (0xff); 888253789Srpaulo} 889253789Srpaulo 890253789Srpaulostatic int 891253789Srpaulorsu_read_rom(struct rsu_softc *sc) 892253789Srpaulo{ 893253789Srpaulo uint8_t *rom = sc->rom; 894253789Srpaulo uint16_t addr = 0; 895253789Srpaulo uint32_t reg; 896253789Srpaulo uint8_t off, msk; 897253789Srpaulo int i; 898253789Srpaulo 899253789Srpaulo /* Make sure that ROM type is eFuse and that autoload succeeded. */ 900253789Srpaulo reg = rsu_read_1(sc, R92S_EE_9346CR); 901253789Srpaulo if ((reg & (R92S_9356SEL | R92S_EEPROM_EN)) != R92S_EEPROM_EN) 902253789Srpaulo return (EIO); 903253789Srpaulo 904253789Srpaulo /* Turn on 2.5V to prevent eFuse leakage. */ 905253789Srpaulo reg = rsu_read_1(sc, R92S_EFUSE_TEST + 3); 906253789Srpaulo rsu_write_1(sc, R92S_EFUSE_TEST + 3, reg | 0x80); 907287892Sadrian rsu_ms_delay(sc, 1); 908253789Srpaulo rsu_write_1(sc, R92S_EFUSE_TEST + 3, reg & ~0x80); 909253789Srpaulo 910253789Srpaulo /* Read full ROM image. */ 911253789Srpaulo memset(&sc->rom, 0xff, sizeof(sc->rom)); 912253789Srpaulo while (addr < 512) { 913253789Srpaulo reg = rsu_efuse_read_1(sc, addr); 914253789Srpaulo if (reg == 0xff) 915253789Srpaulo break; 916253789Srpaulo addr++; 917253789Srpaulo off = reg >> 4; 918253789Srpaulo msk = reg & 0xf; 919253789Srpaulo for (i = 0; i < 4; i++) { 920253789Srpaulo if (msk & (1 << i)) 921253789Srpaulo continue; 922253789Srpaulo rom[off * 8 + i * 2 + 0] = 923253789Srpaulo rsu_efuse_read_1(sc, addr); 924253789Srpaulo addr++; 925253789Srpaulo rom[off * 8 + i * 2 + 1] = 926253789Srpaulo rsu_efuse_read_1(sc, addr); 927253789Srpaulo addr++; 928253789Srpaulo } 929253789Srpaulo } 930253789Srpaulo#ifdef USB_DEBUG 931253789Srpaulo if (rsu_debug >= 5) { 932253789Srpaulo /* Dump ROM content. */ 933253789Srpaulo printf("\n"); 934253789Srpaulo for (i = 0; i < sizeof(sc->rom); i++) 935253789Srpaulo printf("%02x:", rom[i]); 936253789Srpaulo printf("\n"); 937253789Srpaulo } 938253789Srpaulo#endif 939253789Srpaulo return (0); 940253789Srpaulo} 941253789Srpaulo 942253789Srpaulostatic int 943253789Srpaulorsu_fw_cmd(struct rsu_softc *sc, uint8_t code, void *buf, int len) 944253789Srpaulo{ 945287896Sadrian const uint8_t which = RSU_H2C_ENDPOINT; 946253789Srpaulo struct rsu_data *data; 947253789Srpaulo struct r92s_tx_desc *txd; 948253789Srpaulo struct r92s_fw_cmd_hdr *cmd; 949266505Shselasky int cmdsz; 950266505Shselasky int xferlen; 951253789Srpaulo 952287954Sadrian RSU_ASSERT_LOCKED(sc); 953287954Sadrian 954253789Srpaulo data = rsu_getbuf(sc); 955253789Srpaulo if (data == NULL) 956253789Srpaulo return (ENOMEM); 957253789Srpaulo 958253789Srpaulo /* Round-up command length to a multiple of 8 bytes. */ 959253789Srpaulo cmdsz = (len + 7) & ~7; 960253789Srpaulo 961253789Srpaulo xferlen = sizeof(*txd) + sizeof(*cmd) + cmdsz; 962253789Srpaulo KASSERT(xferlen <= RSU_TXBUFSZ, ("%s: invalid length", __func__)); 963253789Srpaulo memset(data->buf, 0, xferlen); 964253789Srpaulo 965253789Srpaulo /* Setup Tx descriptor. */ 966253789Srpaulo txd = (struct r92s_tx_desc *)data->buf; 967253789Srpaulo txd->txdw0 = htole32( 968253789Srpaulo SM(R92S_TXDW0_OFFSET, sizeof(*txd)) | 969253789Srpaulo SM(R92S_TXDW0_PKTLEN, sizeof(*cmd) + cmdsz) | 970253789Srpaulo R92S_TXDW0_OWN | R92S_TXDW0_FSG | R92S_TXDW0_LSG); 971253789Srpaulo txd->txdw1 = htole32(SM(R92S_TXDW1_QSEL, R92S_TXDW1_QSEL_H2C)); 972253789Srpaulo 973253789Srpaulo /* Setup command header. */ 974253789Srpaulo cmd = (struct r92s_fw_cmd_hdr *)&txd[1]; 975253789Srpaulo cmd->len = htole16(cmdsz); 976253789Srpaulo cmd->code = code; 977253789Srpaulo cmd->seq = sc->cmd_seq; 978253789Srpaulo sc->cmd_seq = (sc->cmd_seq + 1) & 0x7f; 979253789Srpaulo 980253789Srpaulo /* Copy command payload. */ 981253789Srpaulo memcpy(&cmd[1], buf, len); 982253789Srpaulo 983287740Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TX | RSU_DEBUG_FWCMD, 984287727Sadrian "%s: Tx cmd code=0x%x len=0x%x\n", 985287727Sadrian __func__, code, cmdsz); 986253789Srpaulo data->buflen = xferlen; 987266505Shselasky STAILQ_INSERT_TAIL(&sc->sc_tx_pending[which], data, next); 988267041Shselasky usbd_transfer_start(sc->sc_xfer[which]); 989253789Srpaulo 990253789Srpaulo return (0); 991253789Srpaulo} 992253789Srpaulo 993253789Srpaulo/* ARGSUSED */ 994253789Srpaulostatic void 995253789Srpaulorsu_calib_task(void *arg, int pending __unused) 996253789Srpaulo{ 997253789Srpaulo struct rsu_softc *sc = arg; 998253789Srpaulo uint32_t reg; 999253789Srpaulo 1000287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_CALIB, "%s: running calibration task\n", 1001287727Sadrian __func__); 1002267041Shselasky 1003253789Srpaulo RSU_LOCK(sc); 1004253789Srpaulo#ifdef notyet 1005253789Srpaulo /* Read WPS PBC status. */ 1006253789Srpaulo rsu_write_1(sc, R92S_MAC_PINMUX_CTRL, 1007253789Srpaulo R92S_GPIOMUX_EN | SM(R92S_GPIOSEL_GPIO, R92S_GPIOSEL_GPIO_JTAG)); 1008253789Srpaulo rsu_write_1(sc, R92S_GPIO_IO_SEL, 1009253789Srpaulo rsu_read_1(sc, R92S_GPIO_IO_SEL) & ~R92S_GPIO_WPS); 1010253789Srpaulo reg = rsu_read_1(sc, R92S_GPIO_CTRL); 1011253789Srpaulo if (reg != 0xff && (reg & R92S_GPIO_WPS)) 1012253789Srpaulo DPRINTF(("WPS PBC is pushed\n")); 1013253789Srpaulo#endif 1014253789Srpaulo /* Read current signal level. */ 1015253789Srpaulo if (rsu_fw_iocmd(sc, 0xf4000001) == 0) { 1016253789Srpaulo reg = rsu_read_4(sc, R92S_IOCMD_DATA); 1017287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_CALIB, "%s: RSSI=%d%%\n", 1018287727Sadrian __func__, reg >> 4); 1019253789Srpaulo } 1020267041Shselasky if (sc->sc_calibrating) 1021267041Shselasky taskqueue_enqueue_timeout(taskqueue_thread, &sc->calib_task, hz); 1022267041Shselasky RSU_UNLOCK(sc); 1023253789Srpaulo} 1024253789Srpaulo 1025253789Srpaulostatic int 1026253789Srpaulorsu_newstate(struct ieee80211vap *vap, enum ieee80211_state nstate, int arg) 1027253789Srpaulo{ 1028253789Srpaulo struct rsu_vap *uvp = RSU_VAP(vap); 1029253789Srpaulo struct ieee80211com *ic = vap->iv_ic; 1030286950Sadrian struct rsu_softc *sc = ic->ic_softc; 1031253789Srpaulo struct ieee80211_node *ni; 1032253789Srpaulo struct ieee80211_rateset *rs; 1033253789Srpaulo enum ieee80211_state ostate; 1034253789Srpaulo int error, startcal = 0; 1035253789Srpaulo 1036253789Srpaulo ostate = vap->iv_state; 1037287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_STATE, "%s: %s -> %s\n", 1038287727Sadrian __func__, 1039287727Sadrian ieee80211_state_name[ostate], 1040253789Srpaulo ieee80211_state_name[nstate]); 1041253789Srpaulo 1042253789Srpaulo IEEE80211_UNLOCK(ic); 1043253789Srpaulo if (ostate == IEEE80211_S_RUN) { 1044253789Srpaulo RSU_LOCK(sc); 1045253789Srpaulo /* Stop calibration. */ 1046253789Srpaulo sc->sc_calibrating = 0; 1047253789Srpaulo RSU_UNLOCK(sc); 1048253789Srpaulo taskqueue_drain_timeout(taskqueue_thread, &sc->calib_task); 1049253789Srpaulo /* Disassociate from our current BSS. */ 1050253789Srpaulo RSU_LOCK(sc); 1051253789Srpaulo rsu_disconnect(sc); 1052253789Srpaulo } else 1053253789Srpaulo RSU_LOCK(sc); 1054253789Srpaulo switch (nstate) { 1055253789Srpaulo case IEEE80211_S_INIT: 1056253789Srpaulo break; 1057253789Srpaulo case IEEE80211_S_AUTH: 1058253789Srpaulo ni = ieee80211_ref_node(vap->iv_bss); 1059253789Srpaulo error = rsu_join_bss(sc, ni); 1060253789Srpaulo ieee80211_free_node(ni); 1061253789Srpaulo if (error != 0) { 1062253789Srpaulo device_printf(sc->sc_dev, 1063253789Srpaulo "could not send join command\n"); 1064253789Srpaulo } 1065253789Srpaulo break; 1066253789Srpaulo case IEEE80211_S_RUN: 1067253789Srpaulo ni = ieee80211_ref_node(vap->iv_bss); 1068253789Srpaulo rs = &ni->ni_rates; 1069253789Srpaulo /* Indicate highest supported rate. */ 1070253789Srpaulo ni->ni_txrate = rs->rs_rates[rs->rs_nrates - 1]; 1071253789Srpaulo ieee80211_free_node(ni); 1072253789Srpaulo startcal = 1; 1073253789Srpaulo break; 1074253789Srpaulo default: 1075253789Srpaulo break; 1076253789Srpaulo } 1077253789Srpaulo sc->sc_calibrating = 1; 1078267041Shselasky /* Start periodic calibration. */ 1079267041Shselasky taskqueue_enqueue_timeout(taskqueue_thread, &sc->calib_task, hz); 1080253789Srpaulo RSU_UNLOCK(sc); 1081253789Srpaulo IEEE80211_LOCK(ic); 1082253789Srpaulo return (uvp->newstate(vap, nstate, arg)); 1083253789Srpaulo} 1084253789Srpaulo 1085253789Srpaulo#ifdef notyet 1086253789Srpaulostatic void 1087253789Srpaulorsu_set_key(struct rsu_softc *sc, const struct ieee80211_key *k) 1088253789Srpaulo{ 1089253789Srpaulo struct r92s_fw_cmd_set_key key; 1090253789Srpaulo 1091253789Srpaulo memset(&key, 0, sizeof(key)); 1092253789Srpaulo /* Map net80211 cipher to HW crypto algorithm. */ 1093253789Srpaulo switch (k->wk_cipher->ic_cipher) { 1094253789Srpaulo case IEEE80211_CIPHER_WEP: 1095253789Srpaulo if (k->wk_keylen < 8) 1096253789Srpaulo key.algo = R92S_KEY_ALGO_WEP40; 1097253789Srpaulo else 1098253789Srpaulo key.algo = R92S_KEY_ALGO_WEP104; 1099253789Srpaulo break; 1100253789Srpaulo case IEEE80211_CIPHER_TKIP: 1101253789Srpaulo key.algo = R92S_KEY_ALGO_TKIP; 1102253789Srpaulo break; 1103253789Srpaulo case IEEE80211_CIPHER_AES_CCM: 1104253789Srpaulo key.algo = R92S_KEY_ALGO_AES; 1105253789Srpaulo break; 1106253789Srpaulo default: 1107253789Srpaulo return; 1108253789Srpaulo } 1109253789Srpaulo key.id = k->wk_keyix; 1110253789Srpaulo key.grpkey = (k->wk_flags & IEEE80211_KEY_GROUP) != 0; 1111253789Srpaulo memcpy(key.key, k->wk_key, MIN(k->wk_keylen, sizeof(key.key))); 1112253789Srpaulo (void)rsu_fw_cmd(sc, R92S_CMD_SET_KEY, &key, sizeof(key)); 1113253789Srpaulo} 1114253789Srpaulo 1115253789Srpaulostatic void 1116253789Srpaulorsu_delete_key(struct rsu_softc *sc, const struct ieee80211_key *k) 1117253789Srpaulo{ 1118253789Srpaulo struct r92s_fw_cmd_set_key key; 1119253789Srpaulo 1120253789Srpaulo memset(&key, 0, sizeof(key)); 1121253789Srpaulo key.id = k->wk_keyix; 1122253789Srpaulo (void)rsu_fw_cmd(sc, R92S_CMD_SET_KEY, &key, sizeof(key)); 1123253789Srpaulo} 1124253789Srpaulo#endif 1125253789Srpaulo 1126253789Srpaulostatic int 1127253789Srpaulorsu_site_survey(struct rsu_softc *sc, struct ieee80211vap *vap) 1128253789Srpaulo{ 1129253789Srpaulo struct r92s_fw_cmd_sitesurvey cmd; 1130287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1131287954Sadrian int r; 1132253789Srpaulo 1133287954Sadrian RSU_ASSERT_LOCKED(sc); 1134287954Sadrian 1135253789Srpaulo memset(&cmd, 0, sizeof(cmd)); 1136287197Sglebius if ((ic->ic_flags & IEEE80211_F_ASCAN) || sc->sc_scan_pass == 1) 1137253789Srpaulo cmd.active = htole32(1); 1138253789Srpaulo cmd.limit = htole32(48); 1139287197Sglebius if (sc->sc_scan_pass == 1 && vap->iv_des_nssid > 0) { 1140253789Srpaulo /* Do a directed scan for second pass. */ 1141253789Srpaulo cmd.ssidlen = htole32(vap->iv_des_ssid[0].len); 1142253789Srpaulo memcpy(cmd.ssid, vap->iv_des_ssid[0].ssid, 1143253789Srpaulo vap->iv_des_ssid[0].len); 1144253789Srpaulo 1145253789Srpaulo } 1146287197Sglebius DPRINTF("sending site survey command, pass=%d\n", sc->sc_scan_pass); 1147287954Sadrian r = rsu_fw_cmd(sc, R92S_CMD_SITE_SURVEY, &cmd, sizeof(cmd)); 1148287954Sadrian if (r == 0) { 1149287954Sadrian sc->sc_scanning = 1; 1150287954Sadrian } 1151287954Sadrian return (r); 1152253789Srpaulo} 1153253789Srpaulo 1154253789Srpaulostatic int 1155253789Srpaulorsu_join_bss(struct rsu_softc *sc, struct ieee80211_node *ni) 1156253789Srpaulo{ 1157287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1158253789Srpaulo struct ieee80211vap *vap = ni->ni_vap; 1159253789Srpaulo struct ndis_wlan_bssid_ex *bss; 1160253789Srpaulo struct ndis_802_11_fixed_ies *fixed; 1161253789Srpaulo struct r92s_fw_cmd_auth auth; 1162267066Shselasky uint8_t buf[sizeof(*bss) + 128] __aligned(4); 1163267066Shselasky uint8_t *frm; 1164253789Srpaulo uint8_t opmode; 1165253789Srpaulo int error; 1166287954Sadrian int cnt; 1167287954Sadrian char *msg = "rsujoin"; 1168253789Srpaulo 1169287954Sadrian RSU_ASSERT_LOCKED(sc); 1170287954Sadrian 1171287954Sadrian /* 1172287954Sadrian * Until net80211 scanning doesn't automatically finish 1173287954Sadrian * before we tell it to, let's just wait until any pending 1174287954Sadrian * scan is done. 1175287954Sadrian * 1176287954Sadrian * XXX TODO: yes, this releases and re-acquires the lock. 1177287954Sadrian * We should re-verify the state whenever we re-attempt this! 1178287954Sadrian */ 1179287954Sadrian cnt = 0; 1180287954Sadrian while (sc->sc_scanning && cnt < 10) { 1181287954Sadrian device_printf(sc->sc_dev, 1182287954Sadrian "%s: still scanning! (attempt %d)\n", 1183287954Sadrian __func__, cnt); 1184287954Sadrian msleep(msg, &sc->sc_mtx, 0, msg, hz / 2); 1185287954Sadrian cnt++; 1186287954Sadrian } 1187287954Sadrian 1188253789Srpaulo /* Let the FW decide the opmode based on the capinfo field. */ 1189253789Srpaulo opmode = NDIS802_11AUTOUNKNOWN; 1190287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RESET, 1191287727Sadrian "%s: setting operating mode to %d\n", 1192287727Sadrian __func__, opmode); 1193253789Srpaulo error = rsu_fw_cmd(sc, R92S_CMD_SET_OPMODE, &opmode, sizeof(opmode)); 1194253789Srpaulo if (error != 0) 1195253789Srpaulo return (error); 1196253789Srpaulo 1197253789Srpaulo memset(&auth, 0, sizeof(auth)); 1198253789Srpaulo if (vap->iv_flags & IEEE80211_F_WPA) { 1199253789Srpaulo auth.mode = R92S_AUTHMODE_WPA; 1200267066Shselasky auth.dot1x = (ni->ni_authmode == IEEE80211_AUTH_8021X); 1201253789Srpaulo } else 1202253789Srpaulo auth.mode = R92S_AUTHMODE_OPEN; 1203287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RESET, 1204287727Sadrian "%s: setting auth mode to %d\n", 1205287727Sadrian __func__, auth.mode); 1206253789Srpaulo error = rsu_fw_cmd(sc, R92S_CMD_SET_AUTH, &auth, sizeof(auth)); 1207253789Srpaulo if (error != 0) 1208253789Srpaulo return (error); 1209253789Srpaulo 1210253789Srpaulo memset(buf, 0, sizeof(buf)); 1211253789Srpaulo bss = (struct ndis_wlan_bssid_ex *)buf; 1212253789Srpaulo IEEE80211_ADDR_COPY(bss->macaddr, ni->ni_bssid); 1213253789Srpaulo bss->ssid.ssidlen = htole32(ni->ni_esslen); 1214253789Srpaulo memcpy(bss->ssid.ssid, ni->ni_essid, ni->ni_esslen); 1215253789Srpaulo if (vap->iv_flags & (IEEE80211_F_PRIVACY | IEEE80211_F_WPA)) 1216253789Srpaulo bss->privacy = htole32(1); 1217253789Srpaulo bss->rssi = htole32(ni->ni_avgrssi); 1218253789Srpaulo if (ic->ic_curmode == IEEE80211_MODE_11B) 1219253789Srpaulo bss->networktype = htole32(NDIS802_11DS); 1220253789Srpaulo else 1221253789Srpaulo bss->networktype = htole32(NDIS802_11OFDM24); 1222253789Srpaulo bss->config.len = htole32(sizeof(bss->config)); 1223253789Srpaulo bss->config.bintval = htole32(ni->ni_intval); 1224253789Srpaulo bss->config.dsconfig = htole32(ieee80211_chan2ieee(ic, ni->ni_chan)); 1225253789Srpaulo bss->inframode = htole32(NDIS802_11INFRASTRUCTURE); 1226287727Sadrian /* XXX verify how this is supposed to look! */ 1227253789Srpaulo memcpy(bss->supprates, ni->ni_rates.rs_rates, 1228253789Srpaulo ni->ni_rates.rs_nrates); 1229253789Srpaulo /* Write the fixed fields of the beacon frame. */ 1230253789Srpaulo fixed = (struct ndis_802_11_fixed_ies *)&bss[1]; 1231253789Srpaulo memcpy(&fixed->tstamp, ni->ni_tstamp.data, 8); 1232253789Srpaulo fixed->bintval = htole16(ni->ni_intval); 1233253789Srpaulo fixed->capabilities = htole16(ni->ni_capinfo); 1234253789Srpaulo /* Write IEs to be included in the association request. */ 1235253789Srpaulo frm = (uint8_t *)&fixed[1]; 1236253789Srpaulo frm = ieee80211_add_rsn(frm, vap); 1237253789Srpaulo frm = ieee80211_add_wpa(frm, vap); 1238253789Srpaulo frm = ieee80211_add_qos(frm, ni); 1239287947Sadrian if ((ic->ic_flags & IEEE80211_F_WME) && 1240287947Sadrian (ni->ni_ies.wme_ie != NULL)) 1241287947Sadrian frm = ieee80211_add_wme_info(frm, &ic->ic_wme); 1242253789Srpaulo if (ni->ni_flags & IEEE80211_NODE_HT) 1243253789Srpaulo frm = ieee80211_add_htcap(frm, ni); 1244253789Srpaulo bss->ieslen = htole32(frm - (uint8_t *)fixed); 1245253789Srpaulo bss->len = htole32(((frm - buf) + 3) & ~3); 1246287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RESET | RSU_DEBUG_FWCMD, 1247287727Sadrian "%s: sending join bss command to %s chan %d\n", 1248287727Sadrian __func__, 1249253789Srpaulo ether_sprintf(bss->macaddr), le32toh(bss->config.dsconfig)); 1250253789Srpaulo return (rsu_fw_cmd(sc, R92S_CMD_JOIN_BSS, buf, sizeof(buf))); 1251253789Srpaulo} 1252253789Srpaulo 1253253789Srpaulostatic int 1254253789Srpaulorsu_disconnect(struct rsu_softc *sc) 1255253789Srpaulo{ 1256253789Srpaulo uint32_t zero = 0; /* :-) */ 1257253789Srpaulo 1258253789Srpaulo /* Disassociate from our current BSS. */ 1259287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_STATE | RSU_DEBUG_FWCMD, 1260287727Sadrian "%s: sending disconnect command\n", __func__); 1261253789Srpaulo return (rsu_fw_cmd(sc, R92S_CMD_DISCONNECT, &zero, sizeof(zero))); 1262253789Srpaulo} 1263253789Srpaulo 1264253789Srpaulostatic void 1265253789Srpaulorsu_event_survey(struct rsu_softc *sc, uint8_t *buf, int len) 1266253789Srpaulo{ 1267287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1268253789Srpaulo struct ieee80211_frame *wh; 1269253789Srpaulo struct ndis_wlan_bssid_ex *bss; 1270287804Sadrian struct ieee80211_rx_stats rxs; 1271253789Srpaulo struct mbuf *m; 1272253789Srpaulo int pktlen; 1273253789Srpaulo 1274253789Srpaulo if (__predict_false(len < sizeof(*bss))) 1275253789Srpaulo return; 1276253789Srpaulo bss = (struct ndis_wlan_bssid_ex *)buf; 1277253789Srpaulo if (__predict_false(len < sizeof(*bss) + le32toh(bss->ieslen))) 1278253789Srpaulo return; 1279253789Srpaulo 1280287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_SCAN, 1281287727Sadrian "%s: found BSS %s: len=%d chan=%d inframode=%d " 1282287742Sadrian "networktype=%d privacy=%d, RSSI=%d\n", 1283287727Sadrian __func__, 1284253789Srpaulo ether_sprintf(bss->macaddr), le32toh(bss->len), 1285253789Srpaulo le32toh(bss->config.dsconfig), le32toh(bss->inframode), 1286287742Sadrian le32toh(bss->networktype), le32toh(bss->privacy), 1287287742Sadrian le32toh(bss->rssi)); 1288253789Srpaulo 1289253789Srpaulo /* Build a fake beacon frame to let net80211 do all the parsing. */ 1290287727Sadrian /* XXX TODO: just call the new scan API methods! */ 1291253789Srpaulo pktlen = sizeof(*wh) + le32toh(bss->ieslen); 1292253789Srpaulo if (__predict_false(pktlen > MCLBYTES)) 1293253789Srpaulo return; 1294260513Skevlo m = m_get2(pktlen, M_NOWAIT, MT_DATA, M_PKTHDR); 1295253789Srpaulo if (__predict_false(m == NULL)) 1296253789Srpaulo return; 1297253789Srpaulo wh = mtod(m, struct ieee80211_frame *); 1298253789Srpaulo wh->i_fc[0] = IEEE80211_FC0_VERSION_0 | IEEE80211_FC0_TYPE_MGT | 1299253789Srpaulo IEEE80211_FC0_SUBTYPE_BEACON; 1300253789Srpaulo wh->i_fc[1] = IEEE80211_FC1_DIR_NODS; 1301258919Shselasky USETW(wh->i_dur, 0); 1302287197Sglebius IEEE80211_ADDR_COPY(wh->i_addr1, ieee80211broadcastaddr); 1303253789Srpaulo IEEE80211_ADDR_COPY(wh->i_addr2, bss->macaddr); 1304253789Srpaulo IEEE80211_ADDR_COPY(wh->i_addr3, bss->macaddr); 1305253789Srpaulo *(uint16_t *)wh->i_seq = 0; 1306253789Srpaulo memcpy(&wh[1], (uint8_t *)&bss[1], le32toh(bss->ieslen)); 1307253789Srpaulo 1308253789Srpaulo /* Finalize mbuf. */ 1309253789Srpaulo m->m_pkthdr.len = m->m_len = pktlen; 1310287804Sadrian 1311287804Sadrian /* Set channel flags for input path */ 1312287804Sadrian bzero(&rxs, sizeof(rxs)); 1313287804Sadrian rxs.r_flags |= IEEE80211_R_IEEE | IEEE80211_R_FREQ; 1314287804Sadrian rxs.r_flags |= IEEE80211_R_NF | IEEE80211_R_RSSI; 1315287804Sadrian rxs.c_ieee = le32toh(bss->config.dsconfig); 1316287804Sadrian rxs.c_freq = ieee80211_ieee2mhz(rxs.c_ieee, IEEE80211_CHAN_2GHZ); 1317287804Sadrian rxs.rssi = le32toh(bss->rssi); 1318287804Sadrian rxs.nf = 0; /* XXX */ 1319287804Sadrian 1320253789Srpaulo /* XXX avoid a LOR */ 1321253789Srpaulo RSU_UNLOCK(sc); 1322287804Sadrian ieee80211_input_mimo_all(ic, m, &rxs); 1323253789Srpaulo RSU_LOCK(sc); 1324253789Srpaulo} 1325253789Srpaulo 1326253789Srpaulostatic void 1327253789Srpaulorsu_event_join_bss(struct rsu_softc *sc, uint8_t *buf, int len) 1328253789Srpaulo{ 1329287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1330253789Srpaulo struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 1331253789Srpaulo struct ieee80211_node *ni = vap->iv_bss; 1332253789Srpaulo struct r92s_event_join_bss *rsp; 1333267066Shselasky uint32_t tmp; 1334253789Srpaulo int res; 1335253789Srpaulo 1336253789Srpaulo if (__predict_false(len < sizeof(*rsp))) 1337253789Srpaulo return; 1338253789Srpaulo rsp = (struct r92s_event_join_bss *)buf; 1339253789Srpaulo res = (int)le32toh(rsp->join_res); 1340253789Srpaulo 1341287740Sadrian RSU_DPRINTF(sc, RSU_DEBUG_STATE | RSU_DEBUG_FWCMD, 1342287740Sadrian "%s: Rx join BSS event len=%d res=%d\n", 1343287740Sadrian __func__, len, res); 1344287954Sadrian 1345287954Sadrian /* 1346287954Sadrian * XXX Don't do this; there's likely a better way to tell 1347287954Sadrian * the caller we failed. 1348287954Sadrian */ 1349253789Srpaulo if (res <= 0) { 1350253789Srpaulo RSU_UNLOCK(sc); 1351253789Srpaulo ieee80211_new_state(vap, IEEE80211_S_SCAN, -1); 1352253789Srpaulo RSU_LOCK(sc); 1353253789Srpaulo return; 1354253789Srpaulo } 1355287954Sadrian 1356267066Shselasky tmp = le32toh(rsp->associd); 1357267066Shselasky if (tmp >= vap->iv_max_aid) { 1358267066Shselasky DPRINTF("Assoc ID overflow\n"); 1359267066Shselasky tmp = 1; 1360267066Shselasky } 1361287740Sadrian RSU_DPRINTF(sc, RSU_DEBUG_STATE | RSU_DEBUG_FWCMD, 1362287740Sadrian "%s: associated with %s associd=%d\n", 1363287740Sadrian __func__, ether_sprintf(rsp->bss.macaddr), tmp); 1364287740Sadrian /* XXX is this required? What's the top two bits for again? */ 1365267066Shselasky ni->ni_associd = tmp | 0xc000; 1366253789Srpaulo RSU_UNLOCK(sc); 1367253789Srpaulo ieee80211_new_state(vap, IEEE80211_S_RUN, 1368253789Srpaulo IEEE80211_FC0_SUBTYPE_ASSOC_RESP); 1369253789Srpaulo RSU_LOCK(sc); 1370253789Srpaulo} 1371253789Srpaulo 1372253789Srpaulostatic void 1373287949Sadrianrsu_event_addba_req_report(struct rsu_softc *sc, uint8_t *buf, int len) 1374287949Sadrian{ 1375287949Sadrian struct ieee80211com *ic = &sc->sc_ic; 1376287949Sadrian struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 1377287949Sadrian struct r92s_add_ba_event *ba = (void *) buf; 1378287949Sadrian struct ieee80211_node *ni; 1379287949Sadrian 1380287949Sadrian if (len < sizeof(*ba)) { 1381287949Sadrian device_printf(sc->sc_dev, "%s: short read (%d)\n", __func__, len); 1382287949Sadrian return; 1383287949Sadrian } 1384287949Sadrian 1385287949Sadrian if (vap == NULL) 1386287949Sadrian return; 1387287949Sadrian 1388287949Sadrian device_printf(sc->sc_dev, "%s: mac=%s, tid=%d, ssn=%d\n", 1389287949Sadrian __func__, 1390287949Sadrian ether_sprintf(ba->mac_addr), 1391287949Sadrian (int) ba->tid, 1392287949Sadrian (int) le16toh(ba->ssn)); 1393287949Sadrian 1394287949Sadrian /* XXX do node lookup; this is STA specific */ 1395287949Sadrian 1396287949Sadrian ni = ieee80211_ref_node(vap->iv_bss); 1397287949Sadrian ieee80211_ampdu_rx_start_ext(ni, ba->tid, le16toh(ba->ssn) >> 4, 32); 1398287949Sadrian ieee80211_free_node(ni); 1399287949Sadrian} 1400287949Sadrian 1401287949Sadrianstatic void 1402253789Srpaulorsu_rx_event(struct rsu_softc *sc, uint8_t code, uint8_t *buf, int len) 1403253789Srpaulo{ 1404287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1405253789Srpaulo struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 1406253789Srpaulo 1407287740Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RX | RSU_DEBUG_FWCMD, 1408287727Sadrian "%s: Rx event code=%d len=%d\n", __func__, code, len); 1409253789Srpaulo switch (code) { 1410253789Srpaulo case R92S_EVT_SURVEY: 1411287947Sadrian rsu_event_survey(sc, buf, len); 1412253789Srpaulo break; 1413253789Srpaulo case R92S_EVT_SURVEY_DONE: 1414287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_SCAN, 1415287727Sadrian "%s: site survey pass %d done, found %d BSS\n", 1416287727Sadrian __func__, sc->sc_scan_pass, le32toh(*(uint32_t *)buf)); 1417287954Sadrian sc->sc_scanning = 0; 1418253789Srpaulo if (vap->iv_state != IEEE80211_S_SCAN) 1419253789Srpaulo break; /* Ignore if not scanning. */ 1420287954Sadrian 1421287954Sadrian /* 1422287954Sadrian * XXX TODO: This needs to be done without a transition to 1423287954Sadrian * the SCAN state again. Grr. 1424287954Sadrian */ 1425287197Sglebius if (sc->sc_scan_pass == 0 && vap->iv_des_nssid != 0) { 1426253789Srpaulo /* Schedule a directed scan for hidden APs. */ 1427287947Sadrian /* XXX bad! */ 1428287197Sglebius sc->sc_scan_pass = 1; 1429253789Srpaulo RSU_UNLOCK(sc); 1430253789Srpaulo ieee80211_new_state(vap, IEEE80211_S_SCAN, -1); 1431253789Srpaulo RSU_LOCK(sc); 1432253789Srpaulo break; 1433253789Srpaulo } 1434287197Sglebius sc->sc_scan_pass = 0; 1435253789Srpaulo break; 1436253789Srpaulo case R92S_EVT_JOIN_BSS: 1437253789Srpaulo if (vap->iv_state == IEEE80211_S_AUTH) 1438253789Srpaulo rsu_event_join_bss(sc, buf, len); 1439253789Srpaulo break; 1440253789Srpaulo case R92S_EVT_DEL_STA: 1441287740Sadrian RSU_DPRINTF(sc, RSU_DEBUG_FWCMD | RSU_DEBUG_STATE, 1442287740Sadrian "%s: disassociated from %s\n", __func__, 1443287740Sadrian ether_sprintf(buf)); 1444253789Srpaulo if (vap->iv_state == IEEE80211_S_RUN && 1445253789Srpaulo IEEE80211_ADDR_EQ(vap->iv_bss->ni_bssid, buf)) { 1446253789Srpaulo RSU_UNLOCK(sc); 1447253789Srpaulo ieee80211_new_state(vap, IEEE80211_S_SCAN, -1); 1448253789Srpaulo RSU_LOCK(sc); 1449253789Srpaulo } 1450253789Srpaulo break; 1451253789Srpaulo case R92S_EVT_WPS_PBC: 1452287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RX | RSU_DEBUG_FWCMD, 1453287727Sadrian "%s: WPS PBC pushed.\n", __func__); 1454253789Srpaulo break; 1455253789Srpaulo case R92S_EVT_FWDBG: 1456287727Sadrian buf[60] = '\0'; 1457287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_FWDBG, "FWDBG: %s\n", (char *)buf); 1458253789Srpaulo break; 1459287949Sadrian 1460287949Sadrian case R92S_EVT_ADDBA_REQ_REPORT: 1461287949Sadrian rsu_event_addba_req_report(sc, buf, len); 1462287949Sadrian break; 1463267041Shselasky default: 1464287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_ANY, "%s: unhandled code (%d)\n", 1465287727Sadrian __func__, code); 1466267041Shselasky break; 1467253789Srpaulo } 1468253789Srpaulo} 1469253789Srpaulo 1470253789Srpaulostatic void 1471253789Srpaulorsu_rx_multi_event(struct rsu_softc *sc, uint8_t *buf, int len) 1472253789Srpaulo{ 1473253789Srpaulo struct r92s_fw_cmd_hdr *cmd; 1474253789Srpaulo int cmdsz; 1475253789Srpaulo 1476287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RX, "%s: Rx events len=%d\n", __func__, len); 1477253789Srpaulo 1478253789Srpaulo /* Skip Rx status. */ 1479253789Srpaulo buf += sizeof(struct r92s_rx_stat); 1480253789Srpaulo len -= sizeof(struct r92s_rx_stat); 1481253789Srpaulo 1482253789Srpaulo /* Process all events. */ 1483253789Srpaulo for (;;) { 1484253789Srpaulo /* Check that command header fits. */ 1485253789Srpaulo if (__predict_false(len < sizeof(*cmd))) 1486253789Srpaulo break; 1487253789Srpaulo cmd = (struct r92s_fw_cmd_hdr *)buf; 1488253789Srpaulo /* Check that command payload fits. */ 1489253789Srpaulo cmdsz = le16toh(cmd->len); 1490253789Srpaulo if (__predict_false(len < sizeof(*cmd) + cmdsz)) 1491253789Srpaulo break; 1492253789Srpaulo 1493253789Srpaulo /* Process firmware event. */ 1494253789Srpaulo rsu_rx_event(sc, cmd->code, (uint8_t *)&cmd[1], cmdsz); 1495253789Srpaulo 1496253789Srpaulo if (!(cmd->seq & R92S_FW_CMD_MORE)) 1497253789Srpaulo break; 1498253789Srpaulo buf += sizeof(*cmd) + cmdsz; 1499253789Srpaulo len -= sizeof(*cmd) + cmdsz; 1500253789Srpaulo } 1501253789Srpaulo} 1502253789Srpaulo 1503253789Srpaulostatic int8_t 1504253789Srpaulorsu_get_rssi(struct rsu_softc *sc, int rate, void *physt) 1505253789Srpaulo{ 1506253789Srpaulo static const int8_t cckoff[] = { 14, -2, -20, -40 }; 1507253789Srpaulo struct r92s_rx_phystat *phy; 1508253789Srpaulo struct r92s_rx_cck *cck; 1509253789Srpaulo uint8_t rpt; 1510253789Srpaulo int8_t rssi; 1511253789Srpaulo 1512253789Srpaulo if (rate <= 3) { 1513253789Srpaulo cck = (struct r92s_rx_cck *)physt; 1514253789Srpaulo rpt = (cck->agc_rpt >> 6) & 0x3; 1515253789Srpaulo rssi = cck->agc_rpt & 0x3e; 1516253789Srpaulo rssi = cckoff[rpt] - rssi; 1517253789Srpaulo } else { /* OFDM/HT. */ 1518253789Srpaulo phy = (struct r92s_rx_phystat *)physt; 1519253789Srpaulo rssi = ((le32toh(phy->phydw1) >> 1) & 0x7f) - 106; 1520253789Srpaulo } 1521253789Srpaulo return (rssi); 1522253789Srpaulo} 1523253789Srpaulo 1524253789Srpaulostatic struct mbuf * 1525253789Srpaulorsu_rx_frame(struct rsu_softc *sc, uint8_t *buf, int pktlen, int *rssi) 1526253789Srpaulo{ 1527287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1528253789Srpaulo struct ieee80211_frame *wh; 1529253789Srpaulo struct r92s_rx_stat *stat; 1530253789Srpaulo uint32_t rxdw0, rxdw3; 1531253789Srpaulo struct mbuf *m; 1532253789Srpaulo uint8_t rate; 1533253789Srpaulo int infosz; 1534253789Srpaulo 1535253789Srpaulo stat = (struct r92s_rx_stat *)buf; 1536253789Srpaulo rxdw0 = le32toh(stat->rxdw0); 1537253789Srpaulo rxdw3 = le32toh(stat->rxdw3); 1538253789Srpaulo 1539253789Srpaulo if (__predict_false(rxdw0 & R92S_RXDW0_CRCERR)) { 1540287197Sglebius counter_u64_add(ic->ic_ierrors, 1); 1541253789Srpaulo return NULL; 1542253789Srpaulo } 1543253789Srpaulo if (__predict_false(pktlen < sizeof(*wh) || pktlen > MCLBYTES)) { 1544287197Sglebius counter_u64_add(ic->ic_ierrors, 1); 1545253789Srpaulo return NULL; 1546253789Srpaulo } 1547253789Srpaulo 1548253789Srpaulo rate = MS(rxdw3, R92S_RXDW3_RATE); 1549253789Srpaulo infosz = MS(rxdw0, R92S_RXDW0_INFOSZ) * 8; 1550253789Srpaulo 1551253789Srpaulo /* Get RSSI from PHY status descriptor if present. */ 1552253789Srpaulo if (infosz != 0) 1553253789Srpaulo *rssi = rsu_get_rssi(sc, rate, &stat[1]); 1554253789Srpaulo else 1555253789Srpaulo *rssi = 0; 1556253789Srpaulo 1557287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RX, 1558287727Sadrian "%s: Rx frame len=%d rate=%d infosz=%d rssi=%d\n", 1559287727Sadrian __func__, 1560253789Srpaulo pktlen, rate, infosz, *rssi); 1561253789Srpaulo 1562260513Skevlo m = m_get2(pktlen, M_NOWAIT, MT_DATA, M_PKTHDR); 1563253789Srpaulo if (__predict_false(m == NULL)) { 1564287197Sglebius counter_u64_add(ic->ic_ierrors, 1); 1565253789Srpaulo return NULL; 1566253789Srpaulo } 1567253789Srpaulo /* Hardware does Rx TCP checksum offload. */ 1568253789Srpaulo if (rxdw3 & R92S_RXDW3_TCPCHKVALID) { 1569253789Srpaulo if (__predict_true(rxdw3 & R92S_RXDW3_TCPCHKRPT)) 1570253789Srpaulo m->m_pkthdr.csum_flags |= CSUM_DATA_VALID; 1571253789Srpaulo } 1572253789Srpaulo wh = (struct ieee80211_frame *)((uint8_t *)&stat[1] + infosz); 1573253789Srpaulo memcpy(mtod(m, uint8_t *), wh, pktlen); 1574253789Srpaulo m->m_pkthdr.len = m->m_len = pktlen; 1575253789Srpaulo 1576253789Srpaulo if (ieee80211_radiotap_active(ic)) { 1577253789Srpaulo struct rsu_rx_radiotap_header *tap = &sc->sc_rxtap; 1578253789Srpaulo 1579253789Srpaulo /* Map HW rate index to 802.11 rate. */ 1580253789Srpaulo tap->wr_flags = 2; 1581253789Srpaulo if (!(rxdw3 & R92S_RXDW3_HTC)) { 1582253789Srpaulo switch (rate) { 1583253789Srpaulo /* CCK. */ 1584253789Srpaulo case 0: tap->wr_rate = 2; break; 1585253789Srpaulo case 1: tap->wr_rate = 4; break; 1586253789Srpaulo case 2: tap->wr_rate = 11; break; 1587253789Srpaulo case 3: tap->wr_rate = 22; break; 1588253789Srpaulo /* OFDM. */ 1589253789Srpaulo case 4: tap->wr_rate = 12; break; 1590253789Srpaulo case 5: tap->wr_rate = 18; break; 1591253789Srpaulo case 6: tap->wr_rate = 24; break; 1592253789Srpaulo case 7: tap->wr_rate = 36; break; 1593253789Srpaulo case 8: tap->wr_rate = 48; break; 1594253789Srpaulo case 9: tap->wr_rate = 72; break; 1595253789Srpaulo case 10: tap->wr_rate = 96; break; 1596253789Srpaulo case 11: tap->wr_rate = 108; break; 1597253789Srpaulo } 1598253789Srpaulo } else if (rate >= 12) { /* MCS0~15. */ 1599253789Srpaulo /* Bit 7 set means HT MCS instead of rate. */ 1600253789Srpaulo tap->wr_rate = 0x80 | (rate - 12); 1601253789Srpaulo } 1602253789Srpaulo tap->wr_dbm_antsignal = *rssi; 1603253789Srpaulo tap->wr_chan_freq = htole16(ic->ic_curchan->ic_freq); 1604253789Srpaulo tap->wr_chan_flags = htole16(ic->ic_curchan->ic_flags); 1605253789Srpaulo } 1606253789Srpaulo 1607253789Srpaulo return (m); 1608253789Srpaulo} 1609253789Srpaulo 1610253789Srpaulostatic struct mbuf * 1611253789Srpaulorsu_rx_multi_frame(struct rsu_softc *sc, uint8_t *buf, int len, int *rssi) 1612253789Srpaulo{ 1613253789Srpaulo struct r92s_rx_stat *stat; 1614253789Srpaulo uint32_t rxdw0; 1615253789Srpaulo int totlen, pktlen, infosz, npkts; 1616253789Srpaulo struct mbuf *m, *m0 = NULL, *prevm = NULL; 1617253789Srpaulo 1618253789Srpaulo /* Get the number of encapsulated frames. */ 1619253789Srpaulo stat = (struct r92s_rx_stat *)buf; 1620253789Srpaulo npkts = MS(le32toh(stat->rxdw2), R92S_RXDW2_PKTCNT); 1621287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RX, 1622287727Sadrian "%s: Rx %d frames in one chunk\n", __func__, npkts); 1623253789Srpaulo 1624253789Srpaulo /* Process all of them. */ 1625253789Srpaulo while (npkts-- > 0) { 1626253789Srpaulo if (__predict_false(len < sizeof(*stat))) 1627253789Srpaulo break; 1628253789Srpaulo stat = (struct r92s_rx_stat *)buf; 1629253789Srpaulo rxdw0 = le32toh(stat->rxdw0); 1630253789Srpaulo 1631253789Srpaulo pktlen = MS(rxdw0, R92S_RXDW0_PKTLEN); 1632253789Srpaulo if (__predict_false(pktlen == 0)) 1633253789Srpaulo break; 1634253789Srpaulo 1635253789Srpaulo infosz = MS(rxdw0, R92S_RXDW0_INFOSZ) * 8; 1636253789Srpaulo 1637253789Srpaulo /* Make sure everything fits in xfer. */ 1638253789Srpaulo totlen = sizeof(*stat) + infosz + pktlen; 1639253789Srpaulo if (__predict_false(totlen > len)) 1640253789Srpaulo break; 1641253789Srpaulo 1642253789Srpaulo /* Process 802.11 frame. */ 1643253789Srpaulo m = rsu_rx_frame(sc, buf, pktlen, rssi); 1644253789Srpaulo if (m0 == NULL) 1645253789Srpaulo m0 = m; 1646253789Srpaulo if (prevm == NULL) 1647253789Srpaulo prevm = m; 1648253789Srpaulo else { 1649253789Srpaulo prevm->m_next = m; 1650253789Srpaulo prevm = m; 1651253789Srpaulo } 1652253789Srpaulo /* Next chunk is 128-byte aligned. */ 1653253789Srpaulo totlen = (totlen + 127) & ~127; 1654253789Srpaulo buf += totlen; 1655253789Srpaulo len -= totlen; 1656253789Srpaulo } 1657253789Srpaulo 1658253789Srpaulo return (m0); 1659253789Srpaulo} 1660253789Srpaulo 1661253789Srpaulostatic struct mbuf * 1662253789Srpaulorsu_rxeof(struct usb_xfer *xfer, struct rsu_data *data, int *rssi) 1663253789Srpaulo{ 1664253789Srpaulo struct rsu_softc *sc = data->sc; 1665287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1666253789Srpaulo struct r92s_rx_stat *stat; 1667253789Srpaulo int len; 1668253789Srpaulo 1669253789Srpaulo usbd_xfer_status(xfer, &len, NULL, NULL, NULL); 1670253789Srpaulo 1671253789Srpaulo if (__predict_false(len < sizeof(*stat))) { 1672253789Srpaulo DPRINTF("xfer too short %d\n", len); 1673287197Sglebius counter_u64_add(ic->ic_ierrors, 1); 1674253789Srpaulo return (NULL); 1675253789Srpaulo } 1676253789Srpaulo /* Determine if it is a firmware C2H event or an 802.11 frame. */ 1677253789Srpaulo stat = (struct r92s_rx_stat *)data->buf; 1678253789Srpaulo if ((le32toh(stat->rxdw1) & 0x1ff) == 0x1ff) { 1679253789Srpaulo rsu_rx_multi_event(sc, data->buf, len); 1680253789Srpaulo /* No packets to process. */ 1681253789Srpaulo return (NULL); 1682253789Srpaulo } else 1683253789Srpaulo return (rsu_rx_multi_frame(sc, data->buf, len, rssi)); 1684253789Srpaulo} 1685253789Srpaulo 1686253789Srpaulostatic void 1687253789Srpaulorsu_bulk_rx_callback(struct usb_xfer *xfer, usb_error_t error) 1688253789Srpaulo{ 1689253789Srpaulo struct rsu_softc *sc = usbd_xfer_softc(xfer); 1690287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1691253789Srpaulo struct ieee80211_frame *wh; 1692253789Srpaulo struct ieee80211_node *ni; 1693253789Srpaulo struct mbuf *m = NULL, *next; 1694253789Srpaulo struct rsu_data *data; 1695253789Srpaulo int rssi = 1; 1696253789Srpaulo 1697253789Srpaulo RSU_ASSERT_LOCKED(sc); 1698253789Srpaulo 1699253789Srpaulo switch (USB_GET_STATE(xfer)) { 1700253789Srpaulo case USB_ST_TRANSFERRED: 1701253789Srpaulo data = STAILQ_FIRST(&sc->sc_rx_active); 1702253789Srpaulo if (data == NULL) 1703253789Srpaulo goto tr_setup; 1704253789Srpaulo STAILQ_REMOVE_HEAD(&sc->sc_rx_active, next); 1705253789Srpaulo m = rsu_rxeof(xfer, data, &rssi); 1706253789Srpaulo STAILQ_INSERT_TAIL(&sc->sc_rx_inactive, data, next); 1707253789Srpaulo /* FALLTHROUGH */ 1708253789Srpaulo case USB_ST_SETUP: 1709253789Srpaulotr_setup: 1710253789Srpaulo data = STAILQ_FIRST(&sc->sc_rx_inactive); 1711253789Srpaulo if (data == NULL) { 1712253789Srpaulo KASSERT(m == NULL, ("mbuf isn't NULL")); 1713253789Srpaulo return; 1714253789Srpaulo } 1715253789Srpaulo STAILQ_REMOVE_HEAD(&sc->sc_rx_inactive, next); 1716253789Srpaulo STAILQ_INSERT_TAIL(&sc->sc_rx_active, data, next); 1717253789Srpaulo usbd_xfer_set_frame_data(xfer, 0, data->buf, 1718253789Srpaulo usbd_xfer_max_len(xfer)); 1719253789Srpaulo usbd_transfer_submit(xfer); 1720253789Srpaulo /* 1721253789Srpaulo * To avoid LOR we should unlock our private mutex here to call 1722253789Srpaulo * ieee80211_input() because here is at the end of a USB 1723253789Srpaulo * callback and safe to unlock. 1724253789Srpaulo */ 1725253789Srpaulo RSU_UNLOCK(sc); 1726253789Srpaulo while (m != NULL) { 1727253789Srpaulo next = m->m_next; 1728253789Srpaulo m->m_next = NULL; 1729253789Srpaulo wh = mtod(m, struct ieee80211_frame *); 1730253789Srpaulo ni = ieee80211_find_rxnode(ic, 1731253789Srpaulo (struct ieee80211_frame_min *)wh); 1732253789Srpaulo if (ni != NULL) { 1733287949Sadrian if (ni->ni_flags & IEEE80211_NODE_HT) 1734287949Sadrian m->m_flags |= M_AMPDU; 1735253789Srpaulo (void)ieee80211_input(ni, m, rssi, 0); 1736253789Srpaulo ieee80211_free_node(ni); 1737253789Srpaulo } else 1738253789Srpaulo (void)ieee80211_input_all(ic, m, rssi, 0); 1739253789Srpaulo m = next; 1740253789Srpaulo } 1741253789Srpaulo RSU_LOCK(sc); 1742253789Srpaulo break; 1743253789Srpaulo default: 1744253789Srpaulo /* needs it to the inactive queue due to a error. */ 1745253789Srpaulo data = STAILQ_FIRST(&sc->sc_rx_active); 1746253789Srpaulo if (data != NULL) { 1747253789Srpaulo STAILQ_REMOVE_HEAD(&sc->sc_rx_active, next); 1748253789Srpaulo STAILQ_INSERT_TAIL(&sc->sc_rx_inactive, data, next); 1749253789Srpaulo } 1750253789Srpaulo if (error != USB_ERR_CANCELLED) { 1751253789Srpaulo usbd_xfer_set_stall(xfer); 1752287197Sglebius counter_u64_add(ic->ic_ierrors, 1); 1753253789Srpaulo goto tr_setup; 1754253789Srpaulo } 1755253789Srpaulo break; 1756253789Srpaulo } 1757253789Srpaulo 1758253789Srpaulo} 1759253789Srpaulo 1760253789Srpaulostatic void 1761253789Srpaulorsu_txeof(struct usb_xfer *xfer, struct rsu_data *data) 1762253789Srpaulo{ 1763287727Sadrian#ifdef USB_DEBUG 1764287727Sadrian struct rsu_softc *sc = usbd_xfer_softc(xfer); 1765287727Sadrian#endif 1766253789Srpaulo 1767287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TXDONE, "%s: called; data=%p\n", 1768287727Sadrian __func__, 1769287727Sadrian data); 1770287727Sadrian 1771253789Srpaulo if (data->m) { 1772287197Sglebius /* XXX status? */ 1773287197Sglebius ieee80211_tx_complete(data->ni, data->m, 0); 1774253789Srpaulo data->m = NULL; 1775253789Srpaulo data->ni = NULL; 1776253789Srpaulo } 1777253789Srpaulo} 1778253789Srpaulo 1779253789Srpaulostatic void 1780266505Shselaskyrsu_bulk_tx_callback_sub(struct usb_xfer *xfer, usb_error_t error, 1781266505Shselasky uint8_t which) 1782253789Srpaulo{ 1783253789Srpaulo struct rsu_softc *sc = usbd_xfer_softc(xfer); 1784287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1785253789Srpaulo struct rsu_data *data; 1786253789Srpaulo 1787253789Srpaulo RSU_ASSERT_LOCKED(sc); 1788253789Srpaulo 1789253789Srpaulo switch (USB_GET_STATE(xfer)) { 1790253789Srpaulo case USB_ST_TRANSFERRED: 1791266505Shselasky data = STAILQ_FIRST(&sc->sc_tx_active[which]); 1792253789Srpaulo if (data == NULL) 1793253789Srpaulo goto tr_setup; 1794287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TXDONE, "%s: transfer done %p\n", 1795287727Sadrian __func__, data); 1796266505Shselasky STAILQ_REMOVE_HEAD(&sc->sc_tx_active[which], next); 1797253789Srpaulo rsu_txeof(xfer, data); 1798287953Sadrian rsu_freebuf(sc, data); 1799253789Srpaulo /* FALLTHROUGH */ 1800253789Srpaulo case USB_ST_SETUP: 1801253789Srpaulotr_setup: 1802266505Shselasky data = STAILQ_FIRST(&sc->sc_tx_pending[which]); 1803253789Srpaulo if (data == NULL) { 1804287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TXDONE, 1805287727Sadrian "%s: empty pending queue sc %p\n", __func__, sc); 1806253789Srpaulo return; 1807253789Srpaulo } 1808266505Shselasky STAILQ_REMOVE_HEAD(&sc->sc_tx_pending[which], next); 1809266505Shselasky STAILQ_INSERT_TAIL(&sc->sc_tx_active[which], data, next); 1810253789Srpaulo usbd_xfer_set_frame_data(xfer, 0, data->buf, data->buflen); 1811287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TXDONE, 1812287727Sadrian "%s: submitting transfer %p\n", 1813287727Sadrian __func__, 1814287727Sadrian data); 1815253789Srpaulo usbd_transfer_submit(xfer); 1816253789Srpaulo break; 1817253789Srpaulo default: 1818266505Shselasky data = STAILQ_FIRST(&sc->sc_tx_active[which]); 1819266505Shselasky if (data != NULL) { 1820266505Shselasky STAILQ_REMOVE_HEAD(&sc->sc_tx_active[which], next); 1821266505Shselasky rsu_txeof(xfer, data); 1822287953Sadrian rsu_freebuf(sc, data); 1823253789Srpaulo } 1824287197Sglebius counter_u64_add(ic->ic_oerrors, 1); 1825266505Shselasky 1826253789Srpaulo if (error != USB_ERR_CANCELLED) { 1827253789Srpaulo usbd_xfer_set_stall(xfer); 1828253789Srpaulo goto tr_setup; 1829253789Srpaulo } 1830253789Srpaulo break; 1831253789Srpaulo } 1832253789Srpaulo} 1833253789Srpaulo 1834266505Shselaskystatic void 1835267041Shselaskyrsu_bulk_tx_callback_be_bk(struct usb_xfer *xfer, usb_error_t error) 1836266505Shselasky{ 1837267041Shselasky rsu_bulk_tx_callback_sub(xfer, error, RSU_BULK_TX_BE_BK); 1838266505Shselasky} 1839266505Shselasky 1840266505Shselaskystatic void 1841267041Shselaskyrsu_bulk_tx_callback_vi_vo(struct usb_xfer *xfer, usb_error_t error) 1842266505Shselasky{ 1843267041Shselasky rsu_bulk_tx_callback_sub(xfer, error, RSU_BULK_TX_VI_VO); 1844266505Shselasky} 1845266505Shselasky 1846287896Sadrianstatic void 1847287896Sadrianrsu_bulk_tx_callback_h2c(struct usb_xfer *xfer, usb_error_t error) 1848287896Sadrian{ 1849287896Sadrian rsu_bulk_tx_callback_sub(xfer, error, RSU_BULK_TX_H2C); 1850287896Sadrian} 1851287896Sadrian 1852253789Srpaulostatic int 1853253789Srpaulorsu_tx_start(struct rsu_softc *sc, struct ieee80211_node *ni, 1854266505Shselasky struct mbuf *m0, struct rsu_data *data) 1855253789Srpaulo{ 1856287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 1857253789Srpaulo struct ieee80211vap *vap = ni->ni_vap; 1858253789Srpaulo struct ieee80211_frame *wh; 1859253789Srpaulo struct ieee80211_key *k = NULL; 1860253789Srpaulo struct r92s_tx_desc *txd; 1861266505Shselasky uint8_t type; 1862287901Sadrian int prio = 0; 1863266505Shselasky uint8_t which; 1864266505Shselasky int hasqos; 1865266505Shselasky int xferlen; 1866287901Sadrian int qid; 1867253789Srpaulo 1868253789Srpaulo RSU_ASSERT_LOCKED(sc); 1869253789Srpaulo 1870253789Srpaulo wh = mtod(m0, struct ieee80211_frame *); 1871253789Srpaulo type = wh->i_fc[0] & IEEE80211_FC0_TYPE_MASK; 1872253789Srpaulo 1873287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TX, "%s: data=%p, m=%p\n", 1874287727Sadrian __func__, data, m0); 1875287727Sadrian 1876260444Skevlo if (wh->i_fc[1] & IEEE80211_FC1_PROTECTED) { 1877253789Srpaulo k = ieee80211_crypto_encap(ni, m0); 1878253789Srpaulo if (k == NULL) { 1879253789Srpaulo device_printf(sc->sc_dev, 1880253789Srpaulo "ieee80211_crypto_encap returns NULL.\n"); 1881253789Srpaulo /* XXX we don't expect the fragmented frames */ 1882253789Srpaulo m_freem(m0); 1883253789Srpaulo return (ENOBUFS); 1884253789Srpaulo } 1885253789Srpaulo wh = mtod(m0, struct ieee80211_frame *); 1886253789Srpaulo } 1887287901Sadrian /* If we have QoS then use it */ 1888287901Sadrian /* XXX TODO: mbuf WME/PRI versus TID? */ 1889287901Sadrian if (IEEE80211_QOS_HAS_SEQ(wh)) { 1890287901Sadrian /* Has QoS */ 1891287901Sadrian prio = M_WME_GETAC(m0); 1892287901Sadrian which = rsu_wme_ac_xfer_map[prio]; 1893287901Sadrian hasqos = 1; 1894287901Sadrian } else { 1895287901Sadrian /* Non-QoS TID */ 1896287901Sadrian /* XXX TODO: tid=0 for non-qos TID? */ 1897287901Sadrian which = rsu_wme_ac_xfer_map[WME_AC_BE]; 1898287901Sadrian hasqos = 0; 1899287901Sadrian prio = 0; 1900287901Sadrian } 1901287901Sadrian 1902287901Sadrian qid = rsu_ac2qid[prio]; 1903287901Sadrian#if 0 1904253789Srpaulo switch (type) { 1905253789Srpaulo case IEEE80211_FC0_TYPE_CTL: 1906253789Srpaulo case IEEE80211_FC0_TYPE_MGT: 1907267041Shselasky which = rsu_wme_ac_xfer_map[WME_AC_VO]; 1908253789Srpaulo break; 1909253789Srpaulo default: 1910267041Shselasky which = rsu_wme_ac_xfer_map[M_WME_GETAC(m0)]; 1911253789Srpaulo break; 1912253789Srpaulo } 1913253789Srpaulo hasqos = 0; 1914287901Sadrian#endif 1915287947Sadrian 1916287947Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TX, "%s: pri=%d, which=%d, hasqos=%d\n", 1917287947Sadrian __func__, 1918287947Sadrian prio, 1919287947Sadrian which, 1920287947Sadrian hasqos); 1921287947Sadrian 1922253789Srpaulo /* Fill Tx descriptor. */ 1923253789Srpaulo txd = (struct r92s_tx_desc *)data->buf; 1924253789Srpaulo memset(txd, 0, sizeof(*txd)); 1925253789Srpaulo 1926253789Srpaulo txd->txdw0 |= htole32( 1927253789Srpaulo SM(R92S_TXDW0_PKTLEN, m0->m_pkthdr.len) | 1928253789Srpaulo SM(R92S_TXDW0_OFFSET, sizeof(*txd)) | 1929253789Srpaulo R92S_TXDW0_OWN | R92S_TXDW0_FSG | R92S_TXDW0_LSG); 1930253789Srpaulo 1931253789Srpaulo txd->txdw1 |= htole32( 1932287901Sadrian SM(R92S_TXDW1_MACID, R92S_MACID_BSS) | SM(R92S_TXDW1_QSEL, qid)); 1933253789Srpaulo if (!hasqos) 1934253789Srpaulo txd->txdw1 |= htole32(R92S_TXDW1_NONQOS); 1935253789Srpaulo#ifdef notyet 1936253789Srpaulo if (k != NULL) { 1937253789Srpaulo switch (k->wk_cipher->ic_cipher) { 1938253789Srpaulo case IEEE80211_CIPHER_WEP: 1939253789Srpaulo cipher = R92S_TXDW1_CIPHER_WEP; 1940253789Srpaulo break; 1941253789Srpaulo case IEEE80211_CIPHER_TKIP: 1942253789Srpaulo cipher = R92S_TXDW1_CIPHER_TKIP; 1943253789Srpaulo break; 1944253789Srpaulo case IEEE80211_CIPHER_AES_CCM: 1945253789Srpaulo cipher = R92S_TXDW1_CIPHER_AES; 1946253789Srpaulo break; 1947253789Srpaulo default: 1948253789Srpaulo cipher = R92S_TXDW1_CIPHER_NONE; 1949253789Srpaulo } 1950253789Srpaulo txd->txdw1 |= htole32( 1951253789Srpaulo SM(R92S_TXDW1_CIPHER, cipher) | 1952253789Srpaulo SM(R92S_TXDW1_KEYIDX, k->k_id)); 1953253789Srpaulo } 1954253789Srpaulo#endif 1955287947Sadrian /* XXX todo: set AGGEN bit if appropriate? */ 1956253789Srpaulo txd->txdw2 |= htole32(R92S_TXDW2_BK); 1957253789Srpaulo if (IEEE80211_IS_MULTICAST(wh->i_addr1)) 1958253789Srpaulo txd->txdw2 |= htole32(R92S_TXDW2_BMCAST); 1959253789Srpaulo /* 1960253789Srpaulo * Firmware will use and increment the sequence number for the 1961287901Sadrian * specified priority. 1962253789Srpaulo */ 1963287901Sadrian txd->txdw3 |= htole32(SM(R92S_TXDW3_SEQ, prio)); 1964253789Srpaulo 1965253789Srpaulo if (ieee80211_radiotap_active_vap(vap)) { 1966253789Srpaulo struct rsu_tx_radiotap_header *tap = &sc->sc_txtap; 1967253789Srpaulo 1968253789Srpaulo tap->wt_flags = 0; 1969253789Srpaulo tap->wt_chan_freq = htole16(ic->ic_curchan->ic_freq); 1970253789Srpaulo tap->wt_chan_flags = htole16(ic->ic_curchan->ic_flags); 1971253789Srpaulo ieee80211_radiotap_tx(vap, m0); 1972253789Srpaulo } 1973287727Sadrian 1974253789Srpaulo xferlen = sizeof(*txd) + m0->m_pkthdr.len; 1975253789Srpaulo m_copydata(m0, 0, m0->m_pkthdr.len, (caddr_t)&txd[1]); 1976253789Srpaulo 1977253789Srpaulo data->buflen = xferlen; 1978253789Srpaulo data->ni = ni; 1979253789Srpaulo data->m = m0; 1980266505Shselasky STAILQ_INSERT_TAIL(&sc->sc_tx_pending[which], data, next); 1981253789Srpaulo 1982266505Shselasky /* start transfer, if any */ 1983267041Shselasky usbd_transfer_start(sc->sc_xfer[which]); 1984253789Srpaulo return (0); 1985253789Srpaulo} 1986253789Srpaulo 1987287197Sglebiusstatic int 1988287197Sglebiusrsu_transmit(struct ieee80211com *ic, struct mbuf *m) 1989253789Srpaulo{ 1990287197Sglebius struct rsu_softc *sc = ic->ic_softc; 1991287197Sglebius int error; 1992253789Srpaulo 1993253789Srpaulo RSU_LOCK(sc); 1994287197Sglebius if (!sc->sc_running) { 1995287197Sglebius RSU_UNLOCK(sc); 1996287197Sglebius return (ENXIO); 1997287197Sglebius } 1998287197Sglebius error = mbufq_enqueue(&sc->sc_snd, m); 1999287197Sglebius if (error) { 2000287197Sglebius RSU_UNLOCK(sc); 2001287197Sglebius return (error); 2002287197Sglebius } 2003287197Sglebius rsu_start(sc); 2004253789Srpaulo RSU_UNLOCK(sc); 2005287197Sglebius 2006287197Sglebius return (0); 2007253789Srpaulo} 2008253789Srpaulo 2009253789Srpaulostatic void 2010287197Sglebiusrsu_start(struct rsu_softc *sc) 2011253789Srpaulo{ 2012253789Srpaulo struct ieee80211_node *ni; 2013266505Shselasky struct rsu_data *bf; 2014253789Srpaulo struct mbuf *m; 2015253789Srpaulo 2016253789Srpaulo RSU_ASSERT_LOCKED(sc); 2017253789Srpaulo 2018287197Sglebius while ((m = mbufq_dequeue(&sc->sc_snd)) != NULL) { 2019287197Sglebius bf = rsu_getbuf(sc); 2020287197Sglebius if (bf == NULL) { 2021287197Sglebius mbufq_prepend(&sc->sc_snd, m); 2022253789Srpaulo break; 2023287197Sglebius } 2024287197Sglebius 2025253789Srpaulo ni = (struct ieee80211_node *)m->m_pkthdr.rcvif; 2026253789Srpaulo m->m_pkthdr.rcvif = NULL; 2027253789Srpaulo 2028287197Sglebius if (rsu_tx_start(sc, ni, m, bf) != 0) { 2029287197Sglebius if_inc_counter(ni->ni_vap->iv_ifp, 2030287197Sglebius IFCOUNTER_OERRORS, 1); 2031287953Sadrian rsu_freebuf(sc, bf); 2032253789Srpaulo ieee80211_free_node(ni); 2033287197Sglebius break; 2034253789Srpaulo } 2035253789Srpaulo } 2036253789Srpaulo} 2037253789Srpaulo 2038287197Sglebiusstatic void 2039287197Sglebiusrsu_parent(struct ieee80211com *ic) 2040253789Srpaulo{ 2041286950Sadrian struct rsu_softc *sc = ic->ic_softc; 2042287197Sglebius int startall = 0; 2043253789Srpaulo 2044287197Sglebius RSU_LOCK(sc); 2045287197Sglebius if (ic->ic_nrunning > 0) { 2046287197Sglebius if (!sc->sc_running) { 2047287197Sglebius rsu_init(sc); 2048287197Sglebius startall = 1; 2049253789Srpaulo } 2050287197Sglebius } else if (sc->sc_running) 2051287197Sglebius rsu_stop(sc); 2052287197Sglebius RSU_UNLOCK(sc); 2053253789Srpaulo 2054287197Sglebius if (startall) 2055287197Sglebius ieee80211_start_all(ic); 2056253789Srpaulo} 2057253789Srpaulo 2058253789Srpaulo/* 2059253789Srpaulo * Power on sequence for A-cut adapters. 2060253789Srpaulo */ 2061253789Srpaulostatic void 2062253789Srpaulorsu_power_on_acut(struct rsu_softc *sc) 2063253789Srpaulo{ 2064253789Srpaulo uint32_t reg; 2065253789Srpaulo 2066253789Srpaulo rsu_write_1(sc, R92S_SPS0_CTRL + 1, 0x53); 2067253789Srpaulo rsu_write_1(sc, R92S_SPS0_CTRL + 0, 0x57); 2068253789Srpaulo 2069253789Srpaulo /* Enable AFE macro block's bandgap and Mbias. */ 2070253789Srpaulo rsu_write_1(sc, R92S_AFE_MISC, 2071253789Srpaulo rsu_read_1(sc, R92S_AFE_MISC) | 2072253789Srpaulo R92S_AFE_MISC_BGEN | R92S_AFE_MISC_MBEN); 2073253789Srpaulo /* Enable LDOA15 block. */ 2074253789Srpaulo rsu_write_1(sc, R92S_LDOA15_CTRL, 2075253789Srpaulo rsu_read_1(sc, R92S_LDOA15_CTRL) | R92S_LDA15_EN); 2076253789Srpaulo 2077253789Srpaulo rsu_write_1(sc, R92S_SPS1_CTRL, 2078253789Srpaulo rsu_read_1(sc, R92S_SPS1_CTRL) | R92S_SPS1_LDEN); 2079287892Sadrian rsu_ms_delay(sc, 2000); 2080253789Srpaulo /* Enable switch regulator block. */ 2081253789Srpaulo rsu_write_1(sc, R92S_SPS1_CTRL, 2082253789Srpaulo rsu_read_1(sc, R92S_SPS1_CTRL) | R92S_SPS1_SWEN); 2083253789Srpaulo 2084253789Srpaulo rsu_write_4(sc, R92S_SPS1_CTRL, 0x00a7b267); 2085253789Srpaulo 2086253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL + 1, 2087253789Srpaulo rsu_read_1(sc, R92S_SYS_ISO_CTRL + 1) | 0x08); 2088253789Srpaulo 2089253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 2090253789Srpaulo rsu_read_1(sc, R92S_SYS_FUNC_EN + 1) | 0x20); 2091253789Srpaulo 2092253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL + 1, 2093253789Srpaulo rsu_read_1(sc, R92S_SYS_ISO_CTRL + 1) & ~0x90); 2094253789Srpaulo 2095253789Srpaulo /* Enable AFE clock. */ 2096253789Srpaulo rsu_write_1(sc, R92S_AFE_XTAL_CTRL + 1, 2097253789Srpaulo rsu_read_1(sc, R92S_AFE_XTAL_CTRL + 1) & ~0x04); 2098253789Srpaulo /* Enable AFE PLL macro block. */ 2099253789Srpaulo rsu_write_1(sc, R92S_AFE_PLL_CTRL, 2100253789Srpaulo rsu_read_1(sc, R92S_AFE_PLL_CTRL) | 0x11); 2101253789Srpaulo /* Attach AFE PLL to MACTOP/BB. */ 2102253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL, 2103253789Srpaulo rsu_read_1(sc, R92S_SYS_ISO_CTRL) & ~0x11); 2104253789Srpaulo 2105253789Srpaulo /* Switch to 40MHz clock instead of 80MHz. */ 2106253789Srpaulo rsu_write_2(sc, R92S_SYS_CLKR, 2107253789Srpaulo rsu_read_2(sc, R92S_SYS_CLKR) & ~R92S_SYS_CLKSEL); 2108253789Srpaulo 2109253789Srpaulo /* Enable MAC clock. */ 2110253789Srpaulo rsu_write_2(sc, R92S_SYS_CLKR, 2111253789Srpaulo rsu_read_2(sc, R92S_SYS_CLKR) | 2112253789Srpaulo R92S_MAC_CLK_EN | R92S_SYS_CLK_EN); 2113253789Srpaulo 2114253789Srpaulo rsu_write_1(sc, R92S_PMC_FSM, 0x02); 2115253789Srpaulo 2116253789Srpaulo /* Enable digital core and IOREG R/W. */ 2117253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 2118253789Srpaulo rsu_read_1(sc, R92S_SYS_FUNC_EN + 1) | 0x08); 2119253789Srpaulo 2120253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 2121253789Srpaulo rsu_read_1(sc, R92S_SYS_FUNC_EN + 1) | 0x80); 2122253789Srpaulo 2123253789Srpaulo /* Switch the control path to firmware. */ 2124253789Srpaulo reg = rsu_read_2(sc, R92S_SYS_CLKR); 2125253789Srpaulo reg = (reg & ~R92S_SWHW_SEL) | R92S_FWHW_SEL; 2126253789Srpaulo rsu_write_2(sc, R92S_SYS_CLKR, reg); 2127253789Srpaulo 2128253789Srpaulo rsu_write_2(sc, R92S_CR, 0x37fc); 2129253789Srpaulo 2130253789Srpaulo /* Fix USB RX FIFO issue. */ 2131253789Srpaulo rsu_write_1(sc, 0xfe5c, 2132253789Srpaulo rsu_read_1(sc, 0xfe5c) | 0x80); 2133253789Srpaulo rsu_write_1(sc, 0x00ab, 2134253789Srpaulo rsu_read_1(sc, 0x00ab) | 0xc0); 2135253789Srpaulo 2136253789Srpaulo rsu_write_1(sc, R92S_SYS_CLKR, 2137253789Srpaulo rsu_read_1(sc, R92S_SYS_CLKR) & ~R92S_SYS_CPU_CLKSEL); 2138253789Srpaulo} 2139253789Srpaulo 2140253789Srpaulo/* 2141253789Srpaulo * Power on sequence for B-cut and C-cut adapters. 2142253789Srpaulo */ 2143253789Srpaulostatic void 2144253789Srpaulorsu_power_on_bcut(struct rsu_softc *sc) 2145253789Srpaulo{ 2146253789Srpaulo uint32_t reg; 2147253789Srpaulo int ntries; 2148253789Srpaulo 2149253789Srpaulo /* Prevent eFuse leakage. */ 2150253789Srpaulo rsu_write_1(sc, 0x37, 0xb0); 2151287892Sadrian rsu_ms_delay(sc, 10); 2152253789Srpaulo rsu_write_1(sc, 0x37, 0x30); 2153253789Srpaulo 2154253789Srpaulo /* Switch the control path to hardware. */ 2155253789Srpaulo reg = rsu_read_2(sc, R92S_SYS_CLKR); 2156253789Srpaulo if (reg & R92S_FWHW_SEL) { 2157253789Srpaulo rsu_write_2(sc, R92S_SYS_CLKR, 2158253789Srpaulo reg & ~(R92S_SWHW_SEL | R92S_FWHW_SEL)); 2159253789Srpaulo } 2160253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 2161253789Srpaulo rsu_read_1(sc, R92S_SYS_FUNC_EN + 1) & ~0x8c); 2162287892Sadrian rsu_ms_delay(sc, 1); 2163253789Srpaulo 2164253789Srpaulo rsu_write_1(sc, R92S_SPS0_CTRL + 1, 0x53); 2165253789Srpaulo rsu_write_1(sc, R92S_SPS0_CTRL + 0, 0x57); 2166253789Srpaulo 2167253789Srpaulo reg = rsu_read_1(sc, R92S_AFE_MISC); 2168253789Srpaulo rsu_write_1(sc, R92S_AFE_MISC, reg | R92S_AFE_MISC_BGEN); 2169253789Srpaulo rsu_write_1(sc, R92S_AFE_MISC, reg | R92S_AFE_MISC_BGEN | 2170253789Srpaulo R92S_AFE_MISC_MBEN | R92S_AFE_MISC_I32_EN); 2171253789Srpaulo 2172253789Srpaulo /* Enable PLL. */ 2173253789Srpaulo rsu_write_1(sc, R92S_LDOA15_CTRL, 2174253789Srpaulo rsu_read_1(sc, R92S_LDOA15_CTRL) | R92S_LDA15_EN); 2175253789Srpaulo 2176253789Srpaulo rsu_write_1(sc, R92S_LDOV12D_CTRL, 2177253789Srpaulo rsu_read_1(sc, R92S_LDOV12D_CTRL) | R92S_LDV12_EN); 2178253789Srpaulo 2179253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL + 1, 2180253789Srpaulo rsu_read_1(sc, R92S_SYS_ISO_CTRL + 1) | 0x08); 2181253789Srpaulo 2182253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 2183253789Srpaulo rsu_read_1(sc, R92S_SYS_FUNC_EN + 1) | 0x20); 2184253789Srpaulo 2185253789Srpaulo /* Support 64KB IMEM. */ 2186253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL + 1, 2187253789Srpaulo rsu_read_1(sc, R92S_SYS_ISO_CTRL + 1) & ~0x97); 2188253789Srpaulo 2189253789Srpaulo /* Enable AFE clock. */ 2190253789Srpaulo rsu_write_1(sc, R92S_AFE_XTAL_CTRL + 1, 2191253789Srpaulo rsu_read_1(sc, R92S_AFE_XTAL_CTRL + 1) & ~0x04); 2192253789Srpaulo /* Enable AFE PLL macro block. */ 2193253789Srpaulo reg = rsu_read_1(sc, R92S_AFE_PLL_CTRL); 2194253789Srpaulo rsu_write_1(sc, R92S_AFE_PLL_CTRL, reg | 0x11); 2195287892Sadrian rsu_ms_delay(sc, 1); 2196253789Srpaulo rsu_write_1(sc, R92S_AFE_PLL_CTRL, reg | 0x51); 2197287892Sadrian rsu_ms_delay(sc, 1); 2198253789Srpaulo rsu_write_1(sc, R92S_AFE_PLL_CTRL, reg | 0x11); 2199287892Sadrian rsu_ms_delay(sc, 1); 2200253789Srpaulo 2201253789Srpaulo /* Attach AFE PLL to MACTOP/BB. */ 2202253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL, 2203253789Srpaulo rsu_read_1(sc, R92S_SYS_ISO_CTRL) & ~0x11); 2204253789Srpaulo 2205253789Srpaulo /* Switch to 40MHz clock. */ 2206253789Srpaulo rsu_write_1(sc, R92S_SYS_CLKR, 0x00); 2207253789Srpaulo /* Disable CPU clock and 80MHz SSC. */ 2208253789Srpaulo rsu_write_1(sc, R92S_SYS_CLKR, 2209253789Srpaulo rsu_read_1(sc, R92S_SYS_CLKR) | 0xa0); 2210253789Srpaulo /* Enable MAC clock. */ 2211253789Srpaulo rsu_write_2(sc, R92S_SYS_CLKR, 2212253789Srpaulo rsu_read_2(sc, R92S_SYS_CLKR) | 2213253789Srpaulo R92S_MAC_CLK_EN | R92S_SYS_CLK_EN); 2214253789Srpaulo 2215253789Srpaulo rsu_write_1(sc, R92S_PMC_FSM, 0x02); 2216253789Srpaulo 2217253789Srpaulo /* Enable digital core and IOREG R/W. */ 2218253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 2219253789Srpaulo rsu_read_1(sc, R92S_SYS_FUNC_EN + 1) | 0x08); 2220253789Srpaulo 2221253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 2222253789Srpaulo rsu_read_1(sc, R92S_SYS_FUNC_EN + 1) | 0x80); 2223253789Srpaulo 2224253789Srpaulo /* Switch the control path to firmware. */ 2225253789Srpaulo reg = rsu_read_2(sc, R92S_SYS_CLKR); 2226253789Srpaulo reg = (reg & ~R92S_SWHW_SEL) | R92S_FWHW_SEL; 2227253789Srpaulo rsu_write_2(sc, R92S_SYS_CLKR, reg); 2228253789Srpaulo 2229253789Srpaulo rsu_write_2(sc, R92S_CR, 0x37fc); 2230253789Srpaulo 2231253789Srpaulo /* Fix USB RX FIFO issue. */ 2232253789Srpaulo rsu_write_1(sc, 0xfe5c, 2233253789Srpaulo rsu_read_1(sc, 0xfe5c) | 0x80); 2234253789Srpaulo 2235253789Srpaulo rsu_write_1(sc, R92S_SYS_CLKR, 2236253789Srpaulo rsu_read_1(sc, R92S_SYS_CLKR) & ~R92S_SYS_CPU_CLKSEL); 2237253789Srpaulo 2238253789Srpaulo rsu_write_1(sc, 0xfe1c, 0x80); 2239253789Srpaulo 2240253789Srpaulo /* Make sure TxDMA is ready to download firmware. */ 2241253789Srpaulo for (ntries = 0; ntries < 20; ntries++) { 2242253789Srpaulo reg = rsu_read_1(sc, R92S_TCR); 2243253789Srpaulo if ((reg & (R92S_TCR_IMEM_CHK_RPT | R92S_TCR_EMEM_CHK_RPT)) == 2244253789Srpaulo (R92S_TCR_IMEM_CHK_RPT | R92S_TCR_EMEM_CHK_RPT)) 2245253789Srpaulo break; 2246287892Sadrian rsu_ms_delay(sc, 1); 2247253789Srpaulo } 2248253789Srpaulo if (ntries == 20) { 2249287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RESET | RSU_DEBUG_TX, 2250287727Sadrian "%s: TxDMA is not ready\n", 2251287727Sadrian __func__); 2252253789Srpaulo /* Reset TxDMA. */ 2253253789Srpaulo reg = rsu_read_1(sc, R92S_CR); 2254253789Srpaulo rsu_write_1(sc, R92S_CR, reg & ~R92S_CR_TXDMA_EN); 2255287892Sadrian rsu_ms_delay(sc, 1); 2256253789Srpaulo rsu_write_1(sc, R92S_CR, reg | R92S_CR_TXDMA_EN); 2257253789Srpaulo } 2258253789Srpaulo} 2259253789Srpaulo 2260253789Srpaulostatic void 2261253789Srpaulorsu_power_off(struct rsu_softc *sc) 2262253789Srpaulo{ 2263253789Srpaulo /* Turn RF off. */ 2264253789Srpaulo rsu_write_1(sc, R92S_RF_CTRL, 0x00); 2265287892Sadrian rsu_ms_delay(sc, 5); 2266253789Srpaulo 2267253789Srpaulo /* Turn MAC off. */ 2268253789Srpaulo /* Switch control path. */ 2269253789Srpaulo rsu_write_1(sc, R92S_SYS_CLKR + 1, 0x38); 2270253789Srpaulo /* Reset MACTOP. */ 2271253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 0x70); 2272253789Srpaulo rsu_write_1(sc, R92S_PMC_FSM, 0x06); 2273253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL + 0, 0xf9); 2274253789Srpaulo rsu_write_1(sc, R92S_SYS_ISO_CTRL + 1, 0xe8); 2275253789Srpaulo 2276253789Srpaulo /* Disable AFE PLL. */ 2277253789Srpaulo rsu_write_1(sc, R92S_AFE_PLL_CTRL, 0x00); 2278253789Srpaulo /* Disable A15V. */ 2279253789Srpaulo rsu_write_1(sc, R92S_LDOA15_CTRL, 0x54); 2280253789Srpaulo /* Disable eFuse 1.2V. */ 2281253789Srpaulo rsu_write_1(sc, R92S_SYS_FUNC_EN + 1, 0x50); 2282253789Srpaulo rsu_write_1(sc, R92S_LDOV12D_CTRL, 0x24); 2283253789Srpaulo /* Enable AFE macro block's bandgap and Mbias. */ 2284253789Srpaulo rsu_write_1(sc, R92S_AFE_MISC, 0x30); 2285253789Srpaulo /* Disable 1.6V LDO. */ 2286253789Srpaulo rsu_write_1(sc, R92S_SPS0_CTRL + 0, 0x56); 2287253789Srpaulo rsu_write_1(sc, R92S_SPS0_CTRL + 1, 0x43); 2288253789Srpaulo} 2289253789Srpaulo 2290253789Srpaulostatic int 2291253807Srpaulorsu_fw_loadsection(struct rsu_softc *sc, const uint8_t *buf, int len) 2292253789Srpaulo{ 2293267041Shselasky const uint8_t which = rsu_wme_ac_xfer_map[WME_AC_VO]; 2294253789Srpaulo struct rsu_data *data; 2295253789Srpaulo struct r92s_tx_desc *txd; 2296253789Srpaulo int mlen; 2297253789Srpaulo 2298253789Srpaulo while (len > 0) { 2299253789Srpaulo data = rsu_getbuf(sc); 2300253789Srpaulo if (data == NULL) 2301253789Srpaulo return (ENOMEM); 2302253789Srpaulo txd = (struct r92s_tx_desc *)data->buf; 2303253789Srpaulo memset(txd, 0, sizeof(*txd)); 2304253789Srpaulo if (len <= RSU_TXBUFSZ - sizeof(*txd)) { 2305253789Srpaulo /* Last chunk. */ 2306253789Srpaulo txd->txdw0 |= htole32(R92S_TXDW0_LINIP); 2307253789Srpaulo mlen = len; 2308253789Srpaulo } else 2309253789Srpaulo mlen = RSU_TXBUFSZ - sizeof(*txd); 2310253789Srpaulo txd->txdw0 |= htole32(SM(R92S_TXDW0_PKTLEN, mlen)); 2311253789Srpaulo memcpy(&txd[1], buf, mlen); 2312253789Srpaulo data->buflen = sizeof(*txd) + mlen; 2313287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_TX | RSU_DEBUG_FW | RSU_DEBUG_RESET, 2314287727Sadrian "%s: starting transfer %p\n", 2315287727Sadrian __func__, data); 2316266505Shselasky STAILQ_INSERT_TAIL(&sc->sc_tx_pending[which], data, next); 2317253789Srpaulo buf += mlen; 2318253789Srpaulo len -= mlen; 2319253789Srpaulo } 2320267041Shselasky usbd_transfer_start(sc->sc_xfer[which]); 2321253789Srpaulo return (0); 2322253789Srpaulo} 2323253789Srpaulo 2324253789Srpaulostatic int 2325253789Srpaulorsu_load_firmware(struct rsu_softc *sc) 2326253789Srpaulo{ 2327253807Srpaulo const struct r92s_fw_hdr *hdr; 2328253789Srpaulo struct r92s_fw_priv *dmem; 2329287947Sadrian struct ieee80211com *ic = &sc->sc_ic; 2330253807Srpaulo const uint8_t *imem, *emem; 2331253789Srpaulo int imemsz, ememsz; 2332253789Srpaulo const struct firmware *fw; 2333253789Srpaulo size_t size; 2334253789Srpaulo uint32_t reg; 2335253789Srpaulo int ntries, error; 2336253789Srpaulo 2337267041Shselasky if (rsu_read_1(sc, R92S_TCR) & R92S_TCR_FWRDY) { 2338287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_FW | RSU_DEBUG_RESET, 2339287727Sadrian "%s: Firmware already loaded\n", 2340287727Sadrian __func__); 2341267041Shselasky return (0); 2342267041Shselasky } 2343267041Shselasky 2344253789Srpaulo RSU_UNLOCK(sc); 2345253789Srpaulo /* Read firmware image from the filesystem. */ 2346253789Srpaulo if ((fw = firmware_get("rsu-rtl8712fw")) == NULL) { 2347253789Srpaulo device_printf(sc->sc_dev, 2348253789Srpaulo "%s: failed load firmware of file rsu-rtl8712fw\n", 2349253789Srpaulo __func__); 2350253789Srpaulo RSU_LOCK(sc); 2351253789Srpaulo return (ENXIO); 2352253789Srpaulo } 2353253789Srpaulo RSU_LOCK(sc); 2354253789Srpaulo size = fw->datasize; 2355253789Srpaulo if (size < sizeof(*hdr)) { 2356253789Srpaulo device_printf(sc->sc_dev, "firmware too short\n"); 2357253789Srpaulo error = EINVAL; 2358253789Srpaulo goto fail; 2359253789Srpaulo } 2360253807Srpaulo hdr = (const struct r92s_fw_hdr *)fw->data; 2361253789Srpaulo if (hdr->signature != htole16(0x8712) && 2362253789Srpaulo hdr->signature != htole16(0x8192)) { 2363253789Srpaulo device_printf(sc->sc_dev, 2364253789Srpaulo "invalid firmware signature 0x%x\n", 2365253789Srpaulo le16toh(hdr->signature)); 2366253789Srpaulo error = EINVAL; 2367253789Srpaulo goto fail; 2368253789Srpaulo } 2369253789Srpaulo DPRINTF("FW V%d %02x-%02x %02x:%02x\n", le16toh(hdr->version), 2370253789Srpaulo hdr->month, hdr->day, hdr->hour, hdr->minute); 2371253789Srpaulo 2372253789Srpaulo /* Make sure that driver and firmware are in sync. */ 2373253789Srpaulo if (hdr->privsz != htole32(sizeof(*dmem))) { 2374253789Srpaulo device_printf(sc->sc_dev, "unsupported firmware image\n"); 2375253789Srpaulo error = EINVAL; 2376253789Srpaulo goto fail; 2377253789Srpaulo } 2378253789Srpaulo /* Get FW sections sizes. */ 2379253789Srpaulo imemsz = le32toh(hdr->imemsz); 2380253789Srpaulo ememsz = le32toh(hdr->sramsz); 2381253789Srpaulo /* Check that all FW sections fit in image. */ 2382253789Srpaulo if (size < sizeof(*hdr) + imemsz + ememsz) { 2383253789Srpaulo device_printf(sc->sc_dev, "firmware too short\n"); 2384253789Srpaulo error = EINVAL; 2385253789Srpaulo goto fail; 2386253789Srpaulo } 2387253807Srpaulo imem = (const uint8_t *)&hdr[1]; 2388253789Srpaulo emem = imem + imemsz; 2389253789Srpaulo 2390253789Srpaulo /* Load IMEM section. */ 2391253789Srpaulo error = rsu_fw_loadsection(sc, imem, imemsz); 2392253789Srpaulo if (error != 0) { 2393253789Srpaulo device_printf(sc->sc_dev, 2394253789Srpaulo "could not load firmware section %s\n", "IMEM"); 2395253789Srpaulo goto fail; 2396253789Srpaulo } 2397253789Srpaulo /* Wait for load to complete. */ 2398266535Shselasky for (ntries = 0; ntries != 50; ntries++) { 2399287892Sadrian rsu_ms_delay(sc, 10); 2400267041Shselasky reg = rsu_read_1(sc, R92S_TCR); 2401253789Srpaulo if (reg & R92S_TCR_IMEM_CODE_DONE) 2402253789Srpaulo break; 2403253789Srpaulo } 2404266535Shselasky if (ntries == 50) { 2405266535Shselasky device_printf(sc->sc_dev, "timeout waiting for IMEM transfer\n"); 2406253789Srpaulo error = ETIMEDOUT; 2407253789Srpaulo goto fail; 2408253789Srpaulo } 2409253789Srpaulo /* Load EMEM section. */ 2410253789Srpaulo error = rsu_fw_loadsection(sc, emem, ememsz); 2411253789Srpaulo if (error != 0) { 2412253789Srpaulo device_printf(sc->sc_dev, 2413253789Srpaulo "could not load firmware section %s\n", "EMEM"); 2414253789Srpaulo goto fail; 2415253789Srpaulo } 2416253789Srpaulo /* Wait for load to complete. */ 2417266542Shselasky for (ntries = 0; ntries != 50; ntries++) { 2418287892Sadrian rsu_ms_delay(sc, 10); 2419253789Srpaulo reg = rsu_read_2(sc, R92S_TCR); 2420253789Srpaulo if (reg & R92S_TCR_EMEM_CODE_DONE) 2421253789Srpaulo break; 2422253789Srpaulo } 2423266542Shselasky if (ntries == 50) { 2424266535Shselasky device_printf(sc->sc_dev, "timeout waiting for EMEM transfer\n"); 2425253789Srpaulo error = ETIMEDOUT; 2426253789Srpaulo goto fail; 2427253789Srpaulo } 2428253789Srpaulo /* Enable CPU. */ 2429253789Srpaulo rsu_write_1(sc, R92S_SYS_CLKR, 2430253789Srpaulo rsu_read_1(sc, R92S_SYS_CLKR) | R92S_SYS_CPU_CLKSEL); 2431253789Srpaulo if (!(rsu_read_1(sc, R92S_SYS_CLKR) & R92S_SYS_CPU_CLKSEL)) { 2432253789Srpaulo device_printf(sc->sc_dev, "could not enable system clock\n"); 2433253789Srpaulo error = EIO; 2434253789Srpaulo goto fail; 2435253789Srpaulo } 2436253789Srpaulo rsu_write_2(sc, R92S_SYS_FUNC_EN, 2437253789Srpaulo rsu_read_2(sc, R92S_SYS_FUNC_EN) | R92S_FEN_CPUEN); 2438253789Srpaulo if (!(rsu_read_2(sc, R92S_SYS_FUNC_EN) & R92S_FEN_CPUEN)) { 2439253789Srpaulo device_printf(sc->sc_dev, 2440253789Srpaulo "could not enable microcontroller\n"); 2441253789Srpaulo error = EIO; 2442253789Srpaulo goto fail; 2443253789Srpaulo } 2444253789Srpaulo /* Wait for CPU to initialize. */ 2445253789Srpaulo for (ntries = 0; ntries < 100; ntries++) { 2446267041Shselasky if (rsu_read_1(sc, R92S_TCR) & R92S_TCR_IMEM_RDY) 2447253789Srpaulo break; 2448287892Sadrian rsu_ms_delay(sc, 1); 2449253789Srpaulo } 2450253789Srpaulo if (ntries == 100) { 2451253789Srpaulo device_printf(sc->sc_dev, 2452253789Srpaulo "timeout waiting for microcontroller\n"); 2453253789Srpaulo error = ETIMEDOUT; 2454253789Srpaulo goto fail; 2455253789Srpaulo } 2456253789Srpaulo 2457253789Srpaulo /* Update DMEM section before loading. */ 2458253807Srpaulo dmem = __DECONST(struct r92s_fw_priv *, &hdr->priv); 2459253789Srpaulo memset(dmem, 0, sizeof(*dmem)); 2460253789Srpaulo dmem->hci_sel = R92S_HCI_SEL_USB | R92S_HCI_SEL_8172; 2461287897Sadrian dmem->nendpoints = sc->sc_nendpoints; 2462287897Sadrian /* XXX TODO: rf_config should come from ROM */ 2463287897Sadrian dmem->rf_config = 0x11; /* 1T1R */ 2464253789Srpaulo dmem->vcs_type = R92S_VCS_TYPE_AUTO; 2465253789Srpaulo dmem->vcs_mode = R92S_VCS_MODE_RTS_CTS; 2466287897Sadrian dmem->turbo_mode = 0; 2467287947Sadrian dmem->bw40_en = !! (ic->ic_htcaps & IEEE80211_HTCAP_CHWIDTH40); 2468287947Sadrian dmem->amsdu2ampdu_en = !! (sc->sc_ht); 2469287947Sadrian dmem->ampdu_en = !! (sc->sc_ht); 2470287947Sadrian dmem->agg_offload = !! (sc->sc_ht); 2471287909Sadrian dmem->qos_en = 1; 2472253789Srpaulo /* Load DMEM section. */ 2473253789Srpaulo error = rsu_fw_loadsection(sc, (uint8_t *)dmem, sizeof(*dmem)); 2474253789Srpaulo if (error != 0) { 2475253789Srpaulo device_printf(sc->sc_dev, 2476253789Srpaulo "could not load firmware section %s\n", "DMEM"); 2477253789Srpaulo goto fail; 2478253789Srpaulo } 2479253789Srpaulo /* Wait for load to complete. */ 2480253789Srpaulo for (ntries = 0; ntries < 100; ntries++) { 2481267041Shselasky if (rsu_read_1(sc, R92S_TCR) & R92S_TCR_DMEM_CODE_DONE) 2482253789Srpaulo break; 2483287892Sadrian rsu_ms_delay(sc, 1); 2484253789Srpaulo } 2485253789Srpaulo if (ntries == 100) { 2486253789Srpaulo device_printf(sc->sc_dev, "timeout waiting for %s transfer\n", 2487253789Srpaulo "DMEM"); 2488253789Srpaulo error = ETIMEDOUT; 2489253789Srpaulo goto fail; 2490253789Srpaulo } 2491253789Srpaulo /* Wait for firmware readiness. */ 2492253789Srpaulo for (ntries = 0; ntries < 60; ntries++) { 2493267041Shselasky if (!(rsu_read_1(sc, R92S_TCR) & R92S_TCR_FWRDY)) 2494253789Srpaulo break; 2495287892Sadrian rsu_ms_delay(sc, 1); 2496253789Srpaulo } 2497253789Srpaulo if (ntries == 60) { 2498253789Srpaulo device_printf(sc->sc_dev, 2499253789Srpaulo "timeout waiting for firmware readiness\n"); 2500253789Srpaulo error = ETIMEDOUT; 2501253789Srpaulo goto fail; 2502253789Srpaulo } 2503253789Srpaulo fail: 2504253789Srpaulo firmware_put(fw, FIRMWARE_UNLOAD); 2505253789Srpaulo return (error); 2506253789Srpaulo} 2507253789Srpaulo 2508253789Srpaulo 2509253789Srpaulostatic int 2510253789Srpaulorsu_raw_xmit(struct ieee80211_node *ni, struct mbuf *m, 2511253789Srpaulo const struct ieee80211_bpf_params *params) 2512253789Srpaulo{ 2513253789Srpaulo struct ieee80211com *ic = ni->ni_ic; 2514286950Sadrian struct rsu_softc *sc = ic->ic_softc; 2515253789Srpaulo struct rsu_data *bf; 2516253789Srpaulo 2517253789Srpaulo /* prevent management frames from being sent if we're not ready */ 2518287197Sglebius if (!sc->sc_running) { 2519253789Srpaulo m_freem(m); 2520253789Srpaulo ieee80211_free_node(ni); 2521253789Srpaulo return (ENETDOWN); 2522253789Srpaulo } 2523253789Srpaulo RSU_LOCK(sc); 2524253789Srpaulo bf = rsu_getbuf(sc); 2525253789Srpaulo if (bf == NULL) { 2526253789Srpaulo ieee80211_free_node(ni); 2527253789Srpaulo m_freem(m); 2528253789Srpaulo RSU_UNLOCK(sc); 2529253789Srpaulo return (ENOBUFS); 2530253789Srpaulo } 2531266505Shselasky if (rsu_tx_start(sc, ni, m, bf) != 0) { 2532253789Srpaulo ieee80211_free_node(ni); 2533287953Sadrian rsu_freebuf(sc, bf); 2534253789Srpaulo RSU_UNLOCK(sc); 2535253789Srpaulo return (EIO); 2536253789Srpaulo } 2537253789Srpaulo RSU_UNLOCK(sc); 2538253789Srpaulo 2539253789Srpaulo return (0); 2540253789Srpaulo} 2541253789Srpaulo 2542253789Srpaulostatic void 2543287197Sglebiusrsu_init(struct rsu_softc *sc) 2544253789Srpaulo{ 2545287197Sglebius struct ieee80211com *ic = &sc->sc_ic; 2546287197Sglebius struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps); 2547287197Sglebius uint8_t macaddr[IEEE80211_ADDR_LEN]; 2548253789Srpaulo struct r92s_set_pwr_mode cmd; 2549253789Srpaulo int error; 2550266535Shselasky int i; 2551253789Srpaulo 2552287197Sglebius RSU_ASSERT_LOCKED(sc); 2553287197Sglebius 2554253789Srpaulo /* Init host async commands ring. */ 2555253789Srpaulo sc->cmdq.cur = sc->cmdq.next = sc->cmdq.queued = 0; 2556253789Srpaulo 2557253789Srpaulo /* Power on adapter. */ 2558253789Srpaulo if (sc->cut == 1) 2559253789Srpaulo rsu_power_on_acut(sc); 2560253789Srpaulo else 2561253789Srpaulo rsu_power_on_bcut(sc); 2562267041Shselasky 2563253789Srpaulo /* Load firmware. */ 2564253789Srpaulo error = rsu_load_firmware(sc); 2565253789Srpaulo if (error != 0) 2566253789Srpaulo goto fail; 2567253789Srpaulo 2568253789Srpaulo /* Enable Rx TCP checksum offload. */ 2569253789Srpaulo rsu_write_4(sc, R92S_RCR, 2570253789Srpaulo rsu_read_4(sc, R92S_RCR) | 0x04000000); 2571253789Srpaulo /* Append PHY status. */ 2572253789Srpaulo rsu_write_4(sc, R92S_RCR, 2573253789Srpaulo rsu_read_4(sc, R92S_RCR) | 0x02000000); 2574253789Srpaulo 2575253789Srpaulo rsu_write_4(sc, R92S_CR, 2576253789Srpaulo rsu_read_4(sc, R92S_CR) & ~0xff000000); 2577253789Srpaulo 2578253789Srpaulo /* Use 128 bytes pages. */ 2579253789Srpaulo rsu_write_1(sc, 0x00b5, 2580253789Srpaulo rsu_read_1(sc, 0x00b5) | 0x01); 2581253789Srpaulo /* Enable USB Rx aggregation. */ 2582253789Srpaulo rsu_write_1(sc, 0x00bd, 2583253789Srpaulo rsu_read_1(sc, 0x00bd) | 0x80); 2584253789Srpaulo /* Set USB Rx aggregation threshold. */ 2585253789Srpaulo rsu_write_1(sc, 0x00d9, 0x01); 2586253789Srpaulo /* Set USB Rx aggregation timeout (1.7ms/4). */ 2587253789Srpaulo rsu_write_1(sc, 0xfe5b, 0x04); 2588253789Srpaulo /* Fix USB Rx FIFO issue. */ 2589253789Srpaulo rsu_write_1(sc, 0xfe5c, 2590253789Srpaulo rsu_read_1(sc, 0xfe5c) | 0x80); 2591253789Srpaulo 2592253789Srpaulo /* Set MAC address. */ 2593287197Sglebius IEEE80211_ADDR_COPY(macaddr, vap ? vap->iv_myaddr : ic->ic_macaddr); 2594287197Sglebius rsu_write_region_1(sc, R92S_MACID, macaddr, IEEE80211_ADDR_LEN); 2595253789Srpaulo 2596266471Shselasky /* It really takes 1.5 seconds for the firmware to boot: */ 2597287892Sadrian rsu_ms_delay(sc, 2000); 2598253789Srpaulo 2599287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RESET, "%s: setting MAC address to %s\n", 2600287727Sadrian __func__, 2601287727Sadrian ether_sprintf(macaddr)); 2602287197Sglebius error = rsu_fw_cmd(sc, R92S_CMD_SET_MAC_ADDRESS, macaddr, 2603253789Srpaulo IEEE80211_ADDR_LEN); 2604253789Srpaulo if (error != 0) { 2605253789Srpaulo device_printf(sc->sc_dev, "could not set MAC address\n"); 2606253789Srpaulo goto fail; 2607253789Srpaulo } 2608253789Srpaulo 2609253789Srpaulo rsu_write_1(sc, R92S_USB_HRPWM, 2610253789Srpaulo R92S_USB_HRPWM_PS_ST_ACTIVE | R92S_USB_HRPWM_PS_ALL_ON); 2611253789Srpaulo 2612287741Sadrian /* Set PS mode fully active */ 2613253789Srpaulo memset(&cmd, 0, sizeof(cmd)); 2614253789Srpaulo cmd.mode = R92S_PS_MODE_ACTIVE; 2615287727Sadrian RSU_DPRINTF(sc, RSU_DEBUG_RESET, "%s: setting ps mode to %d\n", 2616287727Sadrian __func__, cmd.mode); 2617253789Srpaulo error = rsu_fw_cmd(sc, R92S_CMD_SET_PWR_MODE, &cmd, sizeof(cmd)); 2618253789Srpaulo if (error != 0) { 2619253789Srpaulo device_printf(sc->sc_dev, "could not set PS mode\n"); 2620253789Srpaulo goto fail; 2621253789Srpaulo } 2622253789Srpaulo 2623287947Sadrian if (ic->ic_htcaps & IEEE80211_HTCAP_CHWIDTH40) { 2624253789Srpaulo /* Enable 40MHz mode. */ 2625253789Srpaulo error = rsu_fw_iocmd(sc, 2626253789Srpaulo SM(R92S_IOCMD_CLASS, 0xf4) | 2627253789Srpaulo SM(R92S_IOCMD_INDEX, 0x00) | 2628253789Srpaulo SM(R92S_IOCMD_VALUE, 0x0007)); 2629253789Srpaulo if (error != 0) { 2630253789Srpaulo device_printf(sc->sc_dev, 2631253789Srpaulo "could not enable 40MHz mode\n"); 2632253789Srpaulo goto fail; 2633253789Srpaulo } 2634253789Srpaulo } 2635253789Srpaulo 2636287197Sglebius sc->sc_scan_pass = 0; 2637253789Srpaulo usbd_transfer_start(sc->sc_xfer[RSU_BULK_RX]); 2638253789Srpaulo 2639253789Srpaulo /* We're ready to go. */ 2640287197Sglebius sc->sc_running = 1; 2641287954Sadrian sc->sc_scanning = 0; 2642253789Srpaulo return; 2643253789Srpaulofail: 2644266535Shselasky /* Need to stop all failed transfers, if any */ 2645266535Shselasky for (i = 0; i != RSU_N_TRANSFER; i++) 2646266535Shselasky usbd_transfer_stop(sc->sc_xfer[i]); 2647253789Srpaulo} 2648253789Srpaulo 2649253789Srpaulostatic void 2650287197Sglebiusrsu_stop(struct rsu_softc *sc) 2651253789Srpaulo{ 2652253789Srpaulo int i; 2653253789Srpaulo 2654287197Sglebius sc->sc_running = 0; 2655253789Srpaulo sc->sc_calibrating = 0; 2656253789Srpaulo taskqueue_cancel_timeout(taskqueue_thread, &sc->calib_task, NULL); 2657253789Srpaulo 2658253789Srpaulo /* Power off adapter. */ 2659253789Srpaulo rsu_power_off(sc); 2660253789Srpaulo 2661253789Srpaulo for (i = 0; i < RSU_N_TRANSFER; i++) 2662253789Srpaulo usbd_transfer_stop(sc->sc_xfer[i]); 2663253789Srpaulo} 2664253789Srpaulo 2665287892Sadrian/* 2666287892Sadrian * Note: usb_pause_mtx() actually releases the mutex before calling pause(), 2667287892Sadrian * which breaks any kind of driver serialisation. 2668287892Sadrian */ 2669266471Shselaskystatic void 2670287892Sadrianrsu_ms_delay(struct rsu_softc *sc, int ms) 2671266471Shselasky{ 2672287892Sadrian 2673287892Sadrian //usb_pause_mtx(&sc->sc_mtx, hz / 1000); 2674287892Sadrian DELAY(ms * 1000); 2675266471Shselasky} 2676