Merge remote-tracking branch 'lsk/v3.10/topic/gator' into linux-linaro-lsk
[firefly-linux-kernel-4.4.55.git] / drivers / net / wireless / mwifiex / sta_ioctl.c
1 /*
2  * Marvell Wireless LAN device driver: functions for station ioctl
3  *
4  * Copyright (C) 2011, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27 #include "cfg80211.h"
28
29 static int disconnect_on_suspend = 1;
30 module_param(disconnect_on_suspend, int, 0644);
31
32 /*
33  * Copies the multicast address list from device to driver.
34  *
35  * This function does not validate the destination memory for
36  * size, and the calling function must ensure enough memory is
37  * available.
38  */
39 int mwifiex_copy_mcast_addr(struct mwifiex_multicast_list *mlist,
40                             struct net_device *dev)
41 {
42         int i = 0;
43         struct netdev_hw_addr *ha;
44
45         netdev_for_each_mc_addr(ha, dev)
46                 memcpy(&mlist->mac_list[i++], ha->addr, ETH_ALEN);
47
48         return i;
49 }
50
51 /*
52  * Wait queue completion handler.
53  *
54  * This function waits on a cmd wait queue. It also cancels the pending
55  * request after waking up, in case of errors.
56  */
57 int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter,
58                                 struct cmd_ctrl_node *cmd_queued)
59 {
60         int status;
61
62         /* Wait for completion */
63         status = wait_event_interruptible(adapter->cmd_wait_q.wait,
64                                           *(cmd_queued->condition));
65         if (status) {
66                 dev_err(adapter->dev, "cmd_wait_q terminated: %d\n", status);
67                 return status;
68         }
69
70         status = adapter->cmd_wait_q.status;
71         adapter->cmd_wait_q.status = 0;
72
73         return status;
74 }
75
76 /*
77  * This function prepares the correct firmware command and
78  * issues it to set the multicast list.
79  *
80  * This function can be used to enable promiscuous mode, or enable all
81  * multicast packets, or to enable selective multicast.
82  */
83 int mwifiex_request_set_multicast_list(struct mwifiex_private *priv,
84                                 struct mwifiex_multicast_list *mcast_list)
85 {
86         int ret = 0;
87         u16 old_pkt_filter;
88
89         old_pkt_filter = priv->curr_pkt_filter;
90
91         if (mcast_list->mode == MWIFIEX_PROMISC_MODE) {
92                 dev_dbg(priv->adapter->dev, "info: Enable Promiscuous mode\n");
93                 priv->curr_pkt_filter |= HostCmd_ACT_MAC_PROMISCUOUS_ENABLE;
94                 priv->curr_pkt_filter &=
95                         ~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
96         } else {
97                 /* Multicast */
98                 priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_PROMISCUOUS_ENABLE;
99                 if (mcast_list->mode == MWIFIEX_ALL_MULTI_MODE) {
100                         dev_dbg(priv->adapter->dev,
101                                 "info: Enabling All Multicast!\n");
102                         priv->curr_pkt_filter |=
103                                 HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
104                 } else {
105                         priv->curr_pkt_filter &=
106                                 ~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE;
107                         dev_dbg(priv->adapter->dev,
108                                 "info: Set multicast list=%d\n",
109                                 mcast_list->num_multicast_addr);
110                         /* Send multicast addresses to firmware */
111                         ret = mwifiex_send_cmd_async(priv,
112                                 HostCmd_CMD_MAC_MULTICAST_ADR,
113                                 HostCmd_ACT_GEN_SET, 0,
114                                 mcast_list);
115                 }
116         }
117         dev_dbg(priv->adapter->dev,
118                 "info: old_pkt_filter=%#x, curr_pkt_filter=%#x\n",
119                old_pkt_filter, priv->curr_pkt_filter);
120         if (old_pkt_filter != priv->curr_pkt_filter) {
121                 ret = mwifiex_send_cmd_async(priv, HostCmd_CMD_MAC_CONTROL,
122                                              HostCmd_ACT_GEN_SET,
123                                              0, &priv->curr_pkt_filter);
124         }
125
126         return ret;
127 }
128
129 /*
130  * This function fills bss descriptor structure using provided
131  * information.
132  * beacon_ie buffer is allocated in this function. It is caller's
133  * responsibility to free the memory.
134  */
135 int mwifiex_fill_new_bss_desc(struct mwifiex_private *priv,
136                               struct cfg80211_bss *bss,
137                               struct mwifiex_bssdescriptor *bss_desc)
138 {
139         u8 *beacon_ie;
140         size_t beacon_ie_len;
141         struct mwifiex_bss_priv *bss_priv = (void *)bss->priv;
142         const struct cfg80211_bss_ies *ies;
143
144         rcu_read_lock();
145         ies = rcu_dereference(bss->ies);
146         beacon_ie = kmemdup(ies->data, ies->len, GFP_ATOMIC);
147         beacon_ie_len = ies->len;
148         bss_desc->timestamp = ies->tsf;
149         rcu_read_unlock();
150
151         if (!beacon_ie) {
152                 dev_err(priv->adapter->dev, " failed to alloc beacon_ie\n");
153                 return -ENOMEM;
154         }
155
156         memcpy(bss_desc->mac_address, bss->bssid, ETH_ALEN);
157         bss_desc->rssi = bss->signal;
158         /* The caller of this function will free beacon_ie */
159         bss_desc->beacon_buf = beacon_ie;
160         bss_desc->beacon_buf_size = beacon_ie_len;
161         bss_desc->beacon_period = bss->beacon_interval;
162         bss_desc->cap_info_bitmap = bss->capability;
163         bss_desc->bss_band = bss_priv->band;
164         bss_desc->fw_tsf = bss_priv->fw_tsf;
165         if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_PRIVACY) {
166                 dev_dbg(priv->adapter->dev, "info: InterpretIE: AP WEP enabled\n");
167                 bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_8021X_WEP;
168         } else {
169                 bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_ACCEPT_ALL;
170         }
171         if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_IBSS)
172                 bss_desc->bss_mode = NL80211_IFTYPE_ADHOC;
173         else
174                 bss_desc->bss_mode = NL80211_IFTYPE_STATION;
175
176         /* Disable 11ac by default. Enable it only where there
177          * exist VHT_CAP IE in AP beacon
178          */
179         bss_desc->disable_11ac = true;
180
181         return mwifiex_update_bss_desc_with_ie(priv->adapter, bss_desc);
182 }
183
184 static int mwifiex_process_country_ie(struct mwifiex_private *priv,
185                                       struct cfg80211_bss *bss)
186 {
187         const u8 *country_ie;
188         u8 country_ie_len;
189         struct mwifiex_802_11d_domain_reg *domain_info =
190                                         &priv->adapter->domain_reg;
191
192         rcu_read_lock();
193         country_ie = ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY);
194         if (!country_ie) {
195                 rcu_read_unlock();
196                 return 0;
197         }
198
199         country_ie_len = country_ie[1];
200         if (country_ie_len < IEEE80211_COUNTRY_IE_MIN_LEN) {
201                 rcu_read_unlock();
202                 return 0;
203         }
204
205         domain_info->country_code[0] = country_ie[2];
206         domain_info->country_code[1] = country_ie[3];
207         domain_info->country_code[2] = ' ';
208
209         country_ie_len -= IEEE80211_COUNTRY_STRING_LEN;
210
211         domain_info->no_of_triplet =
212                 country_ie_len / sizeof(struct ieee80211_country_ie_triplet);
213
214         memcpy((u8 *)domain_info->triplet,
215                &country_ie[2] + IEEE80211_COUNTRY_STRING_LEN, country_ie_len);
216
217         rcu_read_unlock();
218
219         if (mwifiex_send_cmd_async(priv, HostCmd_CMD_802_11D_DOMAIN_INFO,
220                                    HostCmd_ACT_GEN_SET, 0, NULL)) {
221                 wiphy_err(priv->adapter->wiphy,
222                           "11D: setting domain info in FW\n");
223                 return -1;
224         }
225
226         return 0;
227 }
228
229 /*
230  * In Ad-Hoc mode, the IBSS is created if not found in scan list.
231  * In both Ad-Hoc and infra mode, an deauthentication is performed
232  * first.
233  */
234 int mwifiex_bss_start(struct mwifiex_private *priv, struct cfg80211_bss *bss,
235                       struct cfg80211_ssid *req_ssid)
236 {
237         int ret;
238         struct mwifiex_adapter *adapter = priv->adapter;
239         struct mwifiex_bssdescriptor *bss_desc = NULL;
240
241         priv->scan_block = false;
242
243         if (bss) {
244                 mwifiex_process_country_ie(priv, bss);
245
246                 /* Allocate and fill new bss descriptor */
247                 bss_desc = kzalloc(sizeof(struct mwifiex_bssdescriptor),
248                                    GFP_KERNEL);
249                 if (!bss_desc)
250                         return -ENOMEM;
251
252                 ret = mwifiex_fill_new_bss_desc(priv, bss, bss_desc);
253                 if (ret)
254                         goto done;
255         }
256
257         if (priv->bss_mode == NL80211_IFTYPE_STATION) {
258                 /* Infra mode */
259                 ret = mwifiex_deauthenticate(priv, NULL);
260                 if (ret)
261                         goto done;
262
263                 if (bss_desc) {
264                         u8 config_bands = 0;
265
266                         if (mwifiex_band_to_radio_type((u8) bss_desc->bss_band)
267                             == HostCmd_SCAN_RADIO_TYPE_BG)
268                                 config_bands = BAND_B | BAND_G | BAND_GN |
269                                                BAND_GAC;
270                         else
271                                 config_bands = BAND_A | BAND_AN | BAND_AAC;
272
273                         if (!((config_bands | adapter->fw_bands) &
274                               ~adapter->fw_bands))
275                                 adapter->config_bands = config_bands;
276                 }
277
278                 ret = mwifiex_check_network_compatibility(priv, bss_desc);
279                 if (ret)
280                         goto done;
281
282                 dev_dbg(adapter->dev, "info: SSID found in scan list ... "
283                                       "associating...\n");
284
285                 mwifiex_stop_net_dev_queue(priv->netdev, adapter);
286                 if (netif_carrier_ok(priv->netdev))
287                         netif_carrier_off(priv->netdev);
288
289                 /* Clear any past association response stored for
290                  * application retrieval */
291                 priv->assoc_rsp_size = 0;
292                 ret = mwifiex_associate(priv, bss_desc);
293
294                 /* If auth type is auto and association fails using open mode,
295                  * try to connect using shared mode */
296                 if (ret == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG &&
297                     priv->sec_info.is_authtype_auto &&
298                     priv->sec_info.wep_enabled) {
299                         priv->sec_info.authentication_mode =
300                                                 NL80211_AUTHTYPE_SHARED_KEY;
301                         ret = mwifiex_associate(priv, bss_desc);
302                 }
303
304                 if (bss)
305                         cfg80211_put_bss(priv->adapter->wiphy, bss);
306         } else {
307                 /* Adhoc mode */
308                 /* If the requested SSID matches current SSID, return */
309                 if (bss_desc && bss_desc->ssid.ssid_len &&
310                     (!mwifiex_ssid_cmp(&priv->curr_bss_params.bss_descriptor.
311                                        ssid, &bss_desc->ssid))) {
312                         ret = 0;
313                         goto done;
314                 }
315
316                 /* Exit Adhoc mode first */
317                 dev_dbg(adapter->dev, "info: Sending Adhoc Stop\n");
318                 ret = mwifiex_deauthenticate(priv, NULL);
319                 if (ret)
320                         goto done;
321
322                 priv->adhoc_is_link_sensed = false;
323
324                 ret = mwifiex_check_network_compatibility(priv, bss_desc);
325
326                 mwifiex_stop_net_dev_queue(priv->netdev, adapter);
327                 if (netif_carrier_ok(priv->netdev))
328                         netif_carrier_off(priv->netdev);
329
330                 if (!ret) {
331                         dev_dbg(adapter->dev, "info: network found in scan"
332                                                         " list. Joining...\n");
333                         ret = mwifiex_adhoc_join(priv, bss_desc);
334                         if (bss)
335                                 cfg80211_put_bss(priv->adapter->wiphy, bss);
336                 } else {
337                         dev_dbg(adapter->dev, "info: Network not found in "
338                                 "the list, creating adhoc with ssid = %s\n",
339                                 req_ssid->ssid);
340                         ret = mwifiex_adhoc_start(priv, req_ssid);
341                 }
342         }
343
344 done:
345         /* beacon_ie buffer was allocated in function
346          * mwifiex_fill_new_bss_desc(). Free it now.
347          */
348         if (bss_desc)
349                 kfree(bss_desc->beacon_buf);
350         kfree(bss_desc);
351         return ret;
352 }
353
354 /*
355  * IOCTL request handler to set host sleep configuration.
356  *
357  * This function prepares the correct firmware command and
358  * issues it.
359  */
360 static int mwifiex_set_hs_params(struct mwifiex_private *priv, u16 action,
361                                  int cmd_type, struct mwifiex_ds_hs_cfg *hs_cfg)
362
363 {
364         struct mwifiex_adapter *adapter = priv->adapter;
365         int status = 0;
366         u32 prev_cond = 0;
367
368         if (!hs_cfg)
369                 return -ENOMEM;
370
371         switch (action) {
372         case HostCmd_ACT_GEN_SET:
373                 if (adapter->pps_uapsd_mode) {
374                         dev_dbg(adapter->dev, "info: Host Sleep IOCTL"
375                                 " is blocked in UAPSD/PPS mode\n");
376                         status = -1;
377                         break;
378                 }
379                 if (hs_cfg->is_invoke_hostcmd) {
380                         if (hs_cfg->conditions == HS_CFG_CANCEL) {
381                                 if (!adapter->is_hs_configured)
382                                         /* Already cancelled */
383                                         break;
384                                 /* Save previous condition */
385                                 prev_cond = le32_to_cpu(adapter->hs_cfg
386                                                         .conditions);
387                                 adapter->hs_cfg.conditions =
388                                                 cpu_to_le32(hs_cfg->conditions);
389                         } else if (hs_cfg->conditions) {
390                                 adapter->hs_cfg.conditions =
391                                                 cpu_to_le32(hs_cfg->conditions);
392                                 adapter->hs_cfg.gpio = (u8)hs_cfg->gpio;
393                                 if (hs_cfg->gap)
394                                         adapter->hs_cfg.gap = (u8)hs_cfg->gap;
395                         } else if (adapter->hs_cfg.conditions ==
396                                    cpu_to_le32(HS_CFG_CANCEL)) {
397                                 /* Return failure if no parameters for HS
398                                    enable */
399                                 status = -1;
400                                 break;
401                         }
402                         if (cmd_type == MWIFIEX_SYNC_CMD)
403                                 status = mwifiex_send_cmd_sync(priv,
404                                                 HostCmd_CMD_802_11_HS_CFG_ENH,
405                                                 HostCmd_ACT_GEN_SET, 0,
406                                                 &adapter->hs_cfg);
407                         else
408                                 status = mwifiex_send_cmd_async(priv,
409                                                 HostCmd_CMD_802_11_HS_CFG_ENH,
410                                                 HostCmd_ACT_GEN_SET, 0,
411                                                 &adapter->hs_cfg);
412                         if (hs_cfg->conditions == HS_CFG_CANCEL)
413                                 /* Restore previous condition */
414                                 adapter->hs_cfg.conditions =
415                                                 cpu_to_le32(prev_cond);
416                 } else {
417                         adapter->hs_cfg.conditions =
418                                                 cpu_to_le32(hs_cfg->conditions);
419                         adapter->hs_cfg.gpio = (u8)hs_cfg->gpio;
420                         adapter->hs_cfg.gap = (u8)hs_cfg->gap;
421                 }
422                 break;
423         case HostCmd_ACT_GEN_GET:
424                 hs_cfg->conditions = le32_to_cpu(adapter->hs_cfg.conditions);
425                 hs_cfg->gpio = adapter->hs_cfg.gpio;
426                 hs_cfg->gap = adapter->hs_cfg.gap;
427                 break;
428         default:
429                 status = -1;
430                 break;
431         }
432
433         return status;
434 }
435
436 /*
437  * Sends IOCTL request to cancel the existing Host Sleep configuration.
438  *
439  * This function allocates the IOCTL request buffer, fills it
440  * with requisite parameters and calls the IOCTL handler.
441  */
442 int mwifiex_cancel_hs(struct mwifiex_private *priv, int cmd_type)
443 {
444         struct mwifiex_ds_hs_cfg hscfg;
445
446         hscfg.conditions = HS_CFG_CANCEL;
447         hscfg.is_invoke_hostcmd = true;
448
449         return mwifiex_set_hs_params(priv, HostCmd_ACT_GEN_SET,
450                                     cmd_type, &hscfg);
451 }
452 EXPORT_SYMBOL_GPL(mwifiex_cancel_hs);
453
454 /*
455  * Sends IOCTL request to cancel the existing Host Sleep configuration.
456  *
457  * This function allocates the IOCTL request buffer, fills it
458  * with requisite parameters and calls the IOCTL handler.
459  */
460 int mwifiex_enable_hs(struct mwifiex_adapter *adapter)
461 {
462         struct mwifiex_ds_hs_cfg hscfg;
463         struct mwifiex_private *priv;
464         int i;
465
466         if (disconnect_on_suspend) {
467                 for (i = 0; i < adapter->priv_num; i++) {
468                         priv = adapter->priv[i];
469                         if (priv)
470                                 mwifiex_deauthenticate(priv, NULL);
471                 }
472         }
473
474         if (adapter->hs_activated) {
475                 dev_dbg(adapter->dev, "cmd: HS Already activated\n");
476                 return true;
477         }
478
479         adapter->hs_activate_wait_q_woken = false;
480
481         memset(&hscfg, 0, sizeof(struct mwifiex_ds_hs_cfg));
482         hscfg.is_invoke_hostcmd = true;
483
484         if (mwifiex_set_hs_params(mwifiex_get_priv(adapter,
485                                                    MWIFIEX_BSS_ROLE_STA),
486                                   HostCmd_ACT_GEN_SET, MWIFIEX_SYNC_CMD,
487                                   &hscfg)) {
488                 dev_err(adapter->dev, "IOCTL request HS enable failed\n");
489                 return false;
490         }
491
492         if (wait_event_interruptible(adapter->hs_activate_wait_q,
493                                      adapter->hs_activate_wait_q_woken)) {
494                 dev_err(adapter->dev, "hs_activate_wait_q terminated\n");
495                 return false;
496         }
497
498         return true;
499 }
500 EXPORT_SYMBOL_GPL(mwifiex_enable_hs);
501
502 /*
503  * IOCTL request handler to get BSS information.
504  *
505  * This function collates the information from different driver structures
506  * to send to the user.
507  */
508 int mwifiex_get_bss_info(struct mwifiex_private *priv,
509                          struct mwifiex_bss_info *info)
510 {
511         struct mwifiex_adapter *adapter = priv->adapter;
512         struct mwifiex_bssdescriptor *bss_desc;
513
514         if (!info)
515                 return -1;
516
517         bss_desc = &priv->curr_bss_params.bss_descriptor;
518
519         info->bss_mode = priv->bss_mode;
520
521         memcpy(&info->ssid, &bss_desc->ssid, sizeof(struct cfg80211_ssid));
522
523         memcpy(&info->bssid, &bss_desc->mac_address, ETH_ALEN);
524
525         info->bss_chan = bss_desc->channel;
526
527         memcpy(info->country_code, adapter->country_code,
528                IEEE80211_COUNTRY_STRING_LEN);
529
530         info->media_connected = priv->media_connected;
531
532         info->max_power_level = priv->max_tx_power_level;
533         info->min_power_level = priv->min_tx_power_level;
534
535         info->adhoc_state = priv->adhoc_state;
536
537         info->bcn_nf_last = priv->bcn_nf_last;
538
539         if (priv->sec_info.wep_enabled)
540                 info->wep_status = true;
541         else
542                 info->wep_status = false;
543
544         info->is_hs_configured = adapter->is_hs_configured;
545         info->is_deep_sleep = adapter->is_deep_sleep;
546
547         return 0;
548 }
549
550 /*
551  * The function disables auto deep sleep mode.
552  */
553 int mwifiex_disable_auto_ds(struct mwifiex_private *priv)
554 {
555         struct mwifiex_ds_auto_ds auto_ds;
556
557         auto_ds.auto_ds = DEEP_SLEEP_OFF;
558
559         return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
560                                      DIS_AUTO_PS, BITMAP_AUTO_DS, &auto_ds);
561 }
562 EXPORT_SYMBOL_GPL(mwifiex_disable_auto_ds);
563
564 /*
565  * Sends IOCTL request to get the data rate.
566  *
567  * This function allocates the IOCTL request buffer, fills it
568  * with requisite parameters and calls the IOCTL handler.
569  */
570 int mwifiex_drv_get_data_rate(struct mwifiex_private *priv, u32 *rate)
571 {
572         int ret;
573
574         ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_TX_RATE_QUERY,
575                                     HostCmd_ACT_GEN_GET, 0, NULL);
576
577         if (!ret) {
578                 if (priv->is_data_rate_auto)
579                         *rate = mwifiex_index_to_data_rate(priv, priv->tx_rate,
580                                                            priv->tx_htinfo);
581                 else
582                         *rate = priv->data_rate;
583         }
584
585         return ret;
586 }
587
588 /*
589  * IOCTL request handler to set tx power configuration.
590  *
591  * This function prepares the correct firmware command and
592  * issues it.
593  *
594  * For non-auto power mode, all the following power groups are set -
595  *      - Modulation class HR/DSSS
596  *      - Modulation class OFDM
597  *      - Modulation class HTBW20
598  *      - Modulation class HTBW40
599  */
600 int mwifiex_set_tx_power(struct mwifiex_private *priv,
601                          struct mwifiex_power_cfg *power_cfg)
602 {
603         int ret;
604         struct host_cmd_ds_txpwr_cfg *txp_cfg;
605         struct mwifiex_types_power_group *pg_tlv;
606         struct mwifiex_power_group *pg;
607         u8 *buf;
608         u16 dbm = 0;
609
610         if (!power_cfg->is_power_auto) {
611                 dbm = (u16) power_cfg->power_level;
612                 if ((dbm < priv->min_tx_power_level) ||
613                     (dbm > priv->max_tx_power_level)) {
614                         dev_err(priv->adapter->dev, "txpower value %d dBm"
615                                 " is out of range (%d dBm-%d dBm)\n",
616                                 dbm, priv->min_tx_power_level,
617                                 priv->max_tx_power_level);
618                         return -1;
619                 }
620         }
621         buf = kzalloc(MWIFIEX_SIZE_OF_CMD_BUFFER, GFP_KERNEL);
622         if (!buf)
623                 return -ENOMEM;
624
625         txp_cfg = (struct host_cmd_ds_txpwr_cfg *) buf;
626         txp_cfg->action = cpu_to_le16(HostCmd_ACT_GEN_SET);
627         if (!power_cfg->is_power_auto) {
628                 txp_cfg->mode = cpu_to_le32(1);
629                 pg_tlv = (struct mwifiex_types_power_group *)
630                          (buf + sizeof(struct host_cmd_ds_txpwr_cfg));
631                 pg_tlv->type = TLV_TYPE_POWER_GROUP;
632                 pg_tlv->length = 4 * sizeof(struct mwifiex_power_group);
633                 pg = (struct mwifiex_power_group *)
634                      (buf + sizeof(struct host_cmd_ds_txpwr_cfg)
635                       + sizeof(struct mwifiex_types_power_group));
636                 /* Power group for modulation class HR/DSSS */
637                 pg->first_rate_code = 0x00;
638                 pg->last_rate_code = 0x03;
639                 pg->modulation_class = MOD_CLASS_HR_DSSS;
640                 pg->power_step = 0;
641                 pg->power_min = (s8) dbm;
642                 pg->power_max = (s8) dbm;
643                 pg++;
644                 /* Power group for modulation class OFDM */
645                 pg->first_rate_code = 0x00;
646                 pg->last_rate_code = 0x07;
647                 pg->modulation_class = MOD_CLASS_OFDM;
648                 pg->power_step = 0;
649                 pg->power_min = (s8) dbm;
650                 pg->power_max = (s8) dbm;
651                 pg++;
652                 /* Power group for modulation class HTBW20 */
653                 pg->first_rate_code = 0x00;
654                 pg->last_rate_code = 0x20;
655                 pg->modulation_class = MOD_CLASS_HT;
656                 pg->power_step = 0;
657                 pg->power_min = (s8) dbm;
658                 pg->power_max = (s8) dbm;
659                 pg->ht_bandwidth = HT_BW_20;
660                 pg++;
661                 /* Power group for modulation class HTBW40 */
662                 pg->first_rate_code = 0x00;
663                 pg->last_rate_code = 0x20;
664                 pg->modulation_class = MOD_CLASS_HT;
665                 pg->power_step = 0;
666                 pg->power_min = (s8) dbm;
667                 pg->power_max = (s8) dbm;
668                 pg->ht_bandwidth = HT_BW_40;
669         }
670         ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_TXPWR_CFG,
671                                     HostCmd_ACT_GEN_SET, 0, buf);
672
673         kfree(buf);
674         return ret;
675 }
676
677 /*
678  * IOCTL request handler to get power save mode.
679  *
680  * This function prepares the correct firmware command and
681  * issues it.
682  */
683 int mwifiex_drv_set_power(struct mwifiex_private *priv, u32 *ps_mode)
684 {
685         int ret;
686         struct mwifiex_adapter *adapter = priv->adapter;
687         u16 sub_cmd;
688
689         if (*ps_mode)
690                 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
691         else
692                 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
693         sub_cmd = (*ps_mode) ? EN_AUTO_PS : DIS_AUTO_PS;
694         ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
695                                     sub_cmd, BITMAP_STA_PS, NULL);
696         if ((!ret) && (sub_cmd == DIS_AUTO_PS))
697                 ret = mwifiex_send_cmd_async(priv,
698                                              HostCmd_CMD_802_11_PS_MODE_ENH,
699                                              GET_PS, 0, NULL);
700
701         return ret;
702 }
703
704 /*
705  * IOCTL request handler to set/reset WPA IE.
706  *
707  * The supplied WPA IE is treated as a opaque buffer. Only the first field
708  * is checked to determine WPA version. If buffer length is zero, the existing
709  * WPA IE is reset.
710  */
711 static int mwifiex_set_wpa_ie_helper(struct mwifiex_private *priv,
712                                      u8 *ie_data_ptr, u16 ie_len)
713 {
714         if (ie_len) {
715                 if (ie_len > sizeof(priv->wpa_ie)) {
716                         dev_err(priv->adapter->dev,
717                                 "failed to copy WPA IE, too big\n");
718                         return -1;
719                 }
720                 memcpy(priv->wpa_ie, ie_data_ptr, ie_len);
721                 priv->wpa_ie_len = (u8) ie_len;
722                 dev_dbg(priv->adapter->dev, "cmd: Set Wpa_ie_len=%d IE=%#x\n",
723                         priv->wpa_ie_len, priv->wpa_ie[0]);
724
725                 if (priv->wpa_ie[0] == WLAN_EID_VENDOR_SPECIFIC) {
726                         priv->sec_info.wpa_enabled = true;
727                 } else if (priv->wpa_ie[0] == WLAN_EID_RSN) {
728                         priv->sec_info.wpa2_enabled = true;
729                 } else {
730                         priv->sec_info.wpa_enabled = false;
731                         priv->sec_info.wpa2_enabled = false;
732                 }
733         } else {
734                 memset(priv->wpa_ie, 0, sizeof(priv->wpa_ie));
735                 priv->wpa_ie_len = 0;
736                 dev_dbg(priv->adapter->dev, "info: reset wpa_ie_len=%d IE=%#x\n",
737                         priv->wpa_ie_len, priv->wpa_ie[0]);
738                 priv->sec_info.wpa_enabled = false;
739                 priv->sec_info.wpa2_enabled = false;
740         }
741
742         return 0;
743 }
744
745 /*
746  * IOCTL request handler to set/reset WAPI IE.
747  *
748  * The supplied WAPI IE is treated as a opaque buffer. Only the first field
749  * is checked to internally enable WAPI. If buffer length is zero, the existing
750  * WAPI IE is reset.
751  */
752 static int mwifiex_set_wapi_ie(struct mwifiex_private *priv,
753                                u8 *ie_data_ptr, u16 ie_len)
754 {
755         if (ie_len) {
756                 if (ie_len > sizeof(priv->wapi_ie)) {
757                         dev_dbg(priv->adapter->dev,
758                                 "info: failed to copy WAPI IE, too big\n");
759                         return -1;
760                 }
761                 memcpy(priv->wapi_ie, ie_data_ptr, ie_len);
762                 priv->wapi_ie_len = ie_len;
763                 dev_dbg(priv->adapter->dev, "cmd: Set wapi_ie_len=%d IE=%#x\n",
764                         priv->wapi_ie_len, priv->wapi_ie[0]);
765
766                 if (priv->wapi_ie[0] == WLAN_EID_BSS_AC_ACCESS_DELAY)
767                         priv->sec_info.wapi_enabled = true;
768         } else {
769                 memset(priv->wapi_ie, 0, sizeof(priv->wapi_ie));
770                 priv->wapi_ie_len = ie_len;
771                 dev_dbg(priv->adapter->dev,
772                         "info: Reset wapi_ie_len=%d IE=%#x\n",
773                        priv->wapi_ie_len, priv->wapi_ie[0]);
774                 priv->sec_info.wapi_enabled = false;
775         }
776         return 0;
777 }
778
779 /*
780  * IOCTL request handler to set/reset WPS IE.
781  *
782  * The supplied WPS IE is treated as a opaque buffer. Only the first field
783  * is checked to internally enable WPS. If buffer length is zero, the existing
784  * WPS IE is reset.
785  */
786 static int mwifiex_set_wps_ie(struct mwifiex_private *priv,
787                                u8 *ie_data_ptr, u16 ie_len)
788 {
789         if (ie_len) {
790                 priv->wps_ie = kzalloc(MWIFIEX_MAX_VSIE_LEN, GFP_KERNEL);
791                 if (!priv->wps_ie)
792                         return -ENOMEM;
793                 if (ie_len > sizeof(priv->wps_ie)) {
794                         dev_dbg(priv->adapter->dev,
795                                 "info: failed to copy WPS IE, too big\n");
796                         kfree(priv->wps_ie);
797                         return -1;
798                 }
799                 memcpy(priv->wps_ie, ie_data_ptr, ie_len);
800                 priv->wps_ie_len = ie_len;
801                 dev_dbg(priv->adapter->dev, "cmd: Set wps_ie_len=%d IE=%#x\n",
802                         priv->wps_ie_len, priv->wps_ie[0]);
803         } else {
804                 kfree(priv->wps_ie);
805                 priv->wps_ie_len = ie_len;
806                 dev_dbg(priv->adapter->dev,
807                         "info: Reset wps_ie_len=%d\n", priv->wps_ie_len);
808         }
809         return 0;
810 }
811
812 /*
813  * IOCTL request handler to set WAPI key.
814  *
815  * This function prepares the correct firmware command and
816  * issues it.
817  */
818 static int mwifiex_sec_ioctl_set_wapi_key(struct mwifiex_private *priv,
819                                struct mwifiex_ds_encrypt_key *encrypt_key)
820 {
821
822         return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_KEY_MATERIAL,
823                                      HostCmd_ACT_GEN_SET, KEY_INFO_ENABLED,
824                                      encrypt_key);
825 }
826
827 /*
828  * IOCTL request handler to set WEP network key.
829  *
830  * This function prepares the correct firmware command and
831  * issues it, after validation checks.
832  */
833 static int mwifiex_sec_ioctl_set_wep_key(struct mwifiex_private *priv,
834                               struct mwifiex_ds_encrypt_key *encrypt_key)
835 {
836         int ret;
837         struct mwifiex_wep_key *wep_key;
838         int index;
839
840         if (priv->wep_key_curr_index >= NUM_WEP_KEYS)
841                 priv->wep_key_curr_index = 0;
842         wep_key = &priv->wep_key[priv->wep_key_curr_index];
843         index = encrypt_key->key_index;
844         if (encrypt_key->key_disable) {
845                 priv->sec_info.wep_enabled = 0;
846         } else if (!encrypt_key->key_len) {
847                 /* Copy the required key as the current key */
848                 wep_key = &priv->wep_key[index];
849                 if (!wep_key->key_length) {
850                         dev_err(priv->adapter->dev,
851                                 "key not set, so cannot enable it\n");
852                         return -1;
853                 }
854                 priv->wep_key_curr_index = (u16) index;
855                 priv->sec_info.wep_enabled = 1;
856         } else {
857                 wep_key = &priv->wep_key[index];
858                 memset(wep_key, 0, sizeof(struct mwifiex_wep_key));
859                 /* Copy the key in the driver */
860                 memcpy(wep_key->key_material,
861                        encrypt_key->key_material,
862                        encrypt_key->key_len);
863                 wep_key->key_index = index;
864                 wep_key->key_length = encrypt_key->key_len;
865                 priv->sec_info.wep_enabled = 1;
866         }
867         if (wep_key->key_length) {
868                 /* Send request to firmware */
869                 ret = mwifiex_send_cmd_async(priv,
870                                              HostCmd_CMD_802_11_KEY_MATERIAL,
871                                              HostCmd_ACT_GEN_SET, 0, NULL);
872                 if (ret)
873                         return ret;
874         }
875         if (priv->sec_info.wep_enabled)
876                 priv->curr_pkt_filter |= HostCmd_ACT_MAC_WEP_ENABLE;
877         else
878                 priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_WEP_ENABLE;
879
880         ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_MAC_CONTROL,
881                                     HostCmd_ACT_GEN_SET, 0,
882                                     &priv->curr_pkt_filter);
883
884         return ret;
885 }
886
887 /*
888  * IOCTL request handler to set WPA key.
889  *
890  * This function prepares the correct firmware command and
891  * issues it, after validation checks.
892  *
893  * Current driver only supports key length of up to 32 bytes.
894  *
895  * This function can also be used to disable a currently set key.
896  */
897 static int mwifiex_sec_ioctl_set_wpa_key(struct mwifiex_private *priv,
898                               struct mwifiex_ds_encrypt_key *encrypt_key)
899 {
900         int ret;
901         u8 remove_key = false;
902         struct host_cmd_ds_802_11_key_material *ibss_key;
903
904         /* Current driver only supports key length of up to 32 bytes */
905         if (encrypt_key->key_len > WLAN_MAX_KEY_LEN) {
906                 dev_err(priv->adapter->dev, "key length too long\n");
907                 return -1;
908         }
909
910         if (priv->bss_mode == NL80211_IFTYPE_ADHOC) {
911                 /*
912                  * IBSS/WPA-None uses only one key (Group) for both receiving
913                  * and sending unicast and multicast packets.
914                  */
915                 /* Send the key as PTK to firmware */
916                 encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST;
917                 ret = mwifiex_send_cmd_async(priv,
918                                              HostCmd_CMD_802_11_KEY_MATERIAL,
919                                              HostCmd_ACT_GEN_SET,
920                                              KEY_INFO_ENABLED, encrypt_key);
921                 if (ret)
922                         return ret;
923
924                 ibss_key = &priv->aes_key;
925                 memset(ibss_key, 0,
926                        sizeof(struct host_cmd_ds_802_11_key_material));
927                 /* Copy the key in the driver */
928                 memcpy(ibss_key->key_param_set.key, encrypt_key->key_material,
929                        encrypt_key->key_len);
930                 memcpy(&ibss_key->key_param_set.key_len, &encrypt_key->key_len,
931                        sizeof(ibss_key->key_param_set.key_len));
932                 ibss_key->key_param_set.key_type_id
933                         = cpu_to_le16(KEY_TYPE_ID_TKIP);
934                 ibss_key->key_param_set.key_info = cpu_to_le16(KEY_ENABLED);
935
936                 /* Send the key as GTK to firmware */
937                 encrypt_key->key_index = ~MWIFIEX_KEY_INDEX_UNICAST;
938         }
939
940         if (!encrypt_key->key_index)
941                 encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST;
942
943         if (remove_key)
944                 ret = mwifiex_send_cmd_sync(priv,
945                                             HostCmd_CMD_802_11_KEY_MATERIAL,
946                                             HostCmd_ACT_GEN_SET,
947                                             !KEY_INFO_ENABLED, encrypt_key);
948         else
949                 ret = mwifiex_send_cmd_sync(priv,
950                                             HostCmd_CMD_802_11_KEY_MATERIAL,
951                                             HostCmd_ACT_GEN_SET,
952                                             KEY_INFO_ENABLED, encrypt_key);
953
954         return ret;
955 }
956
957 /*
958  * IOCTL request handler to set/get network keys.
959  *
960  * This is a generic key handling function which supports WEP, WPA
961  * and WAPI.
962  */
963 static int
964 mwifiex_sec_ioctl_encrypt_key(struct mwifiex_private *priv,
965                               struct mwifiex_ds_encrypt_key *encrypt_key)
966 {
967         int status;
968
969         if (encrypt_key->is_wapi_key)
970                 status = mwifiex_sec_ioctl_set_wapi_key(priv, encrypt_key);
971         else if (encrypt_key->key_len > WLAN_KEY_LEN_WEP104)
972                 status = mwifiex_sec_ioctl_set_wpa_key(priv, encrypt_key);
973         else
974                 status = mwifiex_sec_ioctl_set_wep_key(priv, encrypt_key);
975         return status;
976 }
977
978 /*
979  * This function returns the driver version.
980  */
981 int
982 mwifiex_drv_get_driver_version(struct mwifiex_adapter *adapter, char *version,
983                                int max_len)
984 {
985         union {
986                 u32 l;
987                 u8 c[4];
988         } ver;
989         char fw_ver[32];
990
991         ver.l = adapter->fw_release_number;
992         sprintf(fw_ver, "%u.%u.%u.p%u", ver.c[2], ver.c[1], ver.c[0], ver.c[3]);
993
994         snprintf(version, max_len, driver_version, fw_ver);
995
996         dev_dbg(adapter->dev, "info: MWIFIEX VERSION: %s\n", version);
997
998         return 0;
999 }
1000
1001 /*
1002  * Sends IOCTL request to set encoding parameters.
1003  *
1004  * This function allocates the IOCTL request buffer, fills it
1005  * with requisite parameters and calls the IOCTL handler.
1006  */
1007 int mwifiex_set_encode(struct mwifiex_private *priv, struct key_params *kp,
1008                        const u8 *key, int key_len, u8 key_index,
1009                        const u8 *mac_addr, int disable)
1010 {
1011         struct mwifiex_ds_encrypt_key encrypt_key;
1012
1013         memset(&encrypt_key, 0, sizeof(struct mwifiex_ds_encrypt_key));
1014         encrypt_key.key_len = key_len;
1015
1016         if (kp && kp->cipher == WLAN_CIPHER_SUITE_AES_CMAC)
1017                 encrypt_key.is_igtk_key = true;
1018
1019         if (!disable) {
1020                 encrypt_key.key_index = key_index;
1021                 if (key_len)
1022                         memcpy(encrypt_key.key_material, key, key_len);
1023                 if (mac_addr)
1024                         memcpy(encrypt_key.mac_addr, mac_addr, ETH_ALEN);
1025                 if (kp && kp->seq && kp->seq_len)
1026                         memcpy(encrypt_key.pn, kp->seq, kp->seq_len);
1027         } else {
1028                 encrypt_key.key_disable = true;
1029                 if (mac_addr)
1030                         memcpy(encrypt_key.mac_addr, mac_addr, ETH_ALEN);
1031         }
1032
1033         return mwifiex_sec_ioctl_encrypt_key(priv, &encrypt_key);
1034 }
1035
1036 /*
1037  * Sends IOCTL request to get extended version.
1038  *
1039  * This function allocates the IOCTL request buffer, fills it
1040  * with requisite parameters and calls the IOCTL handler.
1041  */
1042 int
1043 mwifiex_get_ver_ext(struct mwifiex_private *priv)
1044 {
1045         struct mwifiex_ver_ext ver_ext;
1046
1047         memset(&ver_ext, 0, sizeof(struct host_cmd_ds_version_ext));
1048         if (mwifiex_send_cmd_sync(priv, HostCmd_CMD_VERSION_EXT,
1049                                   HostCmd_ACT_GEN_GET, 0, &ver_ext))
1050                 return -1;
1051
1052         return 0;
1053 }
1054
1055 int
1056 mwifiex_remain_on_chan_cfg(struct mwifiex_private *priv, u16 action,
1057                            struct ieee80211_channel *chan,
1058                            unsigned int duration)
1059 {
1060         struct host_cmd_ds_remain_on_chan roc_cfg;
1061         u8 sc;
1062
1063         memset(&roc_cfg, 0, sizeof(roc_cfg));
1064         roc_cfg.action = cpu_to_le16(action);
1065         if (action == HostCmd_ACT_GEN_SET) {
1066                 roc_cfg.band_cfg = chan->band;
1067                 sc = mwifiex_chan_type_to_sec_chan_offset(NL80211_CHAN_NO_HT);
1068                 roc_cfg.band_cfg |= (sc << 2);
1069
1070                 roc_cfg.channel =
1071                         ieee80211_frequency_to_channel(chan->center_freq);
1072                 roc_cfg.duration = cpu_to_le32(duration);
1073         }
1074         if (mwifiex_send_cmd_sync(priv, HostCmd_CMD_REMAIN_ON_CHAN,
1075                                   action, 0, &roc_cfg)) {
1076                 dev_err(priv->adapter->dev, "failed to remain on channel\n");
1077                 return -1;
1078         }
1079
1080         return roc_cfg.status;
1081 }
1082
1083 int
1084 mwifiex_set_bss_role(struct mwifiex_private *priv, u8 bss_role)
1085 {
1086         if (GET_BSS_ROLE(priv) == bss_role) {
1087                 dev_dbg(priv->adapter->dev,
1088                         "info: already in the desired role.\n");
1089                 return 0;
1090         }
1091
1092         mwifiex_free_priv(priv);
1093         mwifiex_init_priv(priv);
1094
1095         priv->bss_role = bss_role;
1096         switch (bss_role) {
1097         case MWIFIEX_BSS_ROLE_UAP:
1098                 priv->bss_mode = NL80211_IFTYPE_AP;
1099                 break;
1100         case MWIFIEX_BSS_ROLE_STA:
1101         case MWIFIEX_BSS_ROLE_ANY:
1102         default:
1103                 priv->bss_mode = NL80211_IFTYPE_STATION;
1104                 break;
1105         }
1106
1107         mwifiex_send_cmd_sync(priv, HostCmd_CMD_SET_BSS_MODE,
1108                               HostCmd_ACT_GEN_SET, 0, NULL);
1109
1110         return mwifiex_sta_init_cmd(priv, false);
1111 }
1112
1113 /*
1114  * Sends IOCTL request to get statistics information.
1115  *
1116  * This function allocates the IOCTL request buffer, fills it
1117  * with requisite parameters and calls the IOCTL handler.
1118  */
1119 int
1120 mwifiex_get_stats_info(struct mwifiex_private *priv,
1121                        struct mwifiex_ds_get_stats *log)
1122 {
1123         return mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_GET_LOG,
1124                                      HostCmd_ACT_GEN_GET, 0, log);
1125 }
1126
1127 /*
1128  * IOCTL request handler to read/write register.
1129  *
1130  * This function prepares the correct firmware command and
1131  * issues it.
1132  *
1133  * Access to the following registers are supported -
1134  *      - MAC
1135  *      - BBP
1136  *      - RF
1137  *      - PMIC
1138  *      - CAU
1139  */
1140 static int mwifiex_reg_mem_ioctl_reg_rw(struct mwifiex_private *priv,
1141                                         struct mwifiex_ds_reg_rw *reg_rw,
1142                                         u16 action)
1143 {
1144         u16 cmd_no;
1145
1146         switch (le32_to_cpu(reg_rw->type)) {
1147         case MWIFIEX_REG_MAC:
1148                 cmd_no = HostCmd_CMD_MAC_REG_ACCESS;
1149                 break;
1150         case MWIFIEX_REG_BBP:
1151                 cmd_no = HostCmd_CMD_BBP_REG_ACCESS;
1152                 break;
1153         case MWIFIEX_REG_RF:
1154                 cmd_no = HostCmd_CMD_RF_REG_ACCESS;
1155                 break;
1156         case MWIFIEX_REG_PMIC:
1157                 cmd_no = HostCmd_CMD_PMIC_REG_ACCESS;
1158                 break;
1159         case MWIFIEX_REG_CAU:
1160                 cmd_no = HostCmd_CMD_CAU_REG_ACCESS;
1161                 break;
1162         default:
1163                 return -1;
1164         }
1165
1166         return mwifiex_send_cmd_sync(priv, cmd_no, action, 0, reg_rw);
1167
1168 }
1169
1170 /*
1171  * Sends IOCTL request to write to a register.
1172  *
1173  * This function allocates the IOCTL request buffer, fills it
1174  * with requisite parameters and calls the IOCTL handler.
1175  */
1176 int
1177 mwifiex_reg_write(struct mwifiex_private *priv, u32 reg_type,
1178                   u32 reg_offset, u32 reg_value)
1179 {
1180         struct mwifiex_ds_reg_rw reg_rw;
1181
1182         reg_rw.type = cpu_to_le32(reg_type);
1183         reg_rw.offset = cpu_to_le32(reg_offset);
1184         reg_rw.value = cpu_to_le32(reg_value);
1185
1186         return mwifiex_reg_mem_ioctl_reg_rw(priv, &reg_rw, HostCmd_ACT_GEN_SET);
1187 }
1188
1189 /*
1190  * Sends IOCTL request to read from a register.
1191  *
1192  * This function allocates the IOCTL request buffer, fills it
1193  * with requisite parameters and calls the IOCTL handler.
1194  */
1195 int
1196 mwifiex_reg_read(struct mwifiex_private *priv, u32 reg_type,
1197                  u32 reg_offset, u32 *value)
1198 {
1199         int ret;
1200         struct mwifiex_ds_reg_rw reg_rw;
1201
1202         reg_rw.type = cpu_to_le32(reg_type);
1203         reg_rw.offset = cpu_to_le32(reg_offset);
1204         ret = mwifiex_reg_mem_ioctl_reg_rw(priv, &reg_rw, HostCmd_ACT_GEN_GET);
1205
1206         if (ret)
1207                 goto done;
1208
1209         *value = le32_to_cpu(reg_rw.value);
1210
1211 done:
1212         return ret;
1213 }
1214
1215 /*
1216  * Sends IOCTL request to read from EEPROM.
1217  *
1218  * This function allocates the IOCTL request buffer, fills it
1219  * with requisite parameters and calls the IOCTL handler.
1220  */
1221 int
1222 mwifiex_eeprom_read(struct mwifiex_private *priv, u16 offset, u16 bytes,
1223                     u8 *value)
1224 {
1225         int ret;
1226         struct mwifiex_ds_read_eeprom rd_eeprom;
1227
1228         rd_eeprom.offset = cpu_to_le16((u16) offset);
1229         rd_eeprom.byte_count = cpu_to_le16((u16) bytes);
1230
1231         /* Send request to firmware */
1232         ret = mwifiex_send_cmd_sync(priv, HostCmd_CMD_802_11_EEPROM_ACCESS,
1233                                     HostCmd_ACT_GEN_GET, 0, &rd_eeprom);
1234
1235         if (!ret)
1236                 memcpy(value, rd_eeprom.value, MAX_EEPROM_DATA);
1237         return ret;
1238 }
1239
1240 /*
1241  * This function sets a generic IE. In addition to generic IE, it can
1242  * also handle WPA, WPA2 and WAPI IEs.
1243  */
1244 static int
1245 mwifiex_set_gen_ie_helper(struct mwifiex_private *priv, u8 *ie_data_ptr,
1246                           u16 ie_len)
1247 {
1248         int ret = 0;
1249         struct ieee_types_vendor_header *pvendor_ie;
1250         const u8 wpa_oui[] = { 0x00, 0x50, 0xf2, 0x01 };
1251         const u8 wps_oui[] = { 0x00, 0x50, 0xf2, 0x04 };
1252
1253         /* If the passed length is zero, reset the buffer */
1254         if (!ie_len) {
1255                 priv->gen_ie_buf_len = 0;
1256                 priv->wps.session_enable = false;
1257
1258                 return 0;
1259         } else if (!ie_data_ptr) {
1260                 return -1;
1261         }
1262         pvendor_ie = (struct ieee_types_vendor_header *) ie_data_ptr;
1263         /* Test to see if it is a WPA IE, if not, then it is a gen IE */
1264         if (((pvendor_ie->element_id == WLAN_EID_VENDOR_SPECIFIC) &&
1265              (!memcmp(pvendor_ie->oui, wpa_oui, sizeof(wpa_oui)))) ||
1266             (pvendor_ie->element_id == WLAN_EID_RSN)) {
1267
1268                 /* IE is a WPA/WPA2 IE so call set_wpa function */
1269                 ret = mwifiex_set_wpa_ie_helper(priv, ie_data_ptr, ie_len);
1270                 priv->wps.session_enable = false;
1271
1272                 return ret;
1273         } else if (pvendor_ie->element_id == WLAN_EID_BSS_AC_ACCESS_DELAY) {
1274                 /* IE is a WAPI IE so call set_wapi function */
1275                 ret = mwifiex_set_wapi_ie(priv, ie_data_ptr, ie_len);
1276
1277                 return ret;
1278         }
1279         /*
1280          * Verify that the passed length is not larger than the
1281          * available space remaining in the buffer
1282          */
1283         if (ie_len < (sizeof(priv->gen_ie_buf) - priv->gen_ie_buf_len)) {
1284
1285                 /* Test to see if it is a WPS IE, if so, enable
1286                  * wps session flag
1287                  */
1288                 pvendor_ie = (struct ieee_types_vendor_header *) ie_data_ptr;
1289                 if ((pvendor_ie->element_id == WLAN_EID_VENDOR_SPECIFIC) &&
1290                     (!memcmp(pvendor_ie->oui, wps_oui, sizeof(wps_oui)))) {
1291                         priv->wps.session_enable = true;
1292                         dev_dbg(priv->adapter->dev,
1293                                 "info: WPS Session Enabled.\n");
1294                         ret = mwifiex_set_wps_ie(priv, ie_data_ptr, ie_len);
1295                 }
1296
1297                 /* Append the passed data to the end of the
1298                    genIeBuffer */
1299                 memcpy(priv->gen_ie_buf + priv->gen_ie_buf_len, ie_data_ptr,
1300                        ie_len);
1301                 /* Increment the stored buffer length by the
1302                    size passed */
1303                 priv->gen_ie_buf_len += ie_len;
1304         } else {
1305                 /* Passed data does not fit in the remaining
1306                    buffer space */
1307                 ret = -1;
1308         }
1309
1310         /* Return 0, or -1 for error case */
1311         return ret;
1312 }
1313
1314 /*
1315  * IOCTL request handler to set/get generic IE.
1316  *
1317  * In addition to various generic IEs, this function can also be
1318  * used to set the ARP filter.
1319  */
1320 static int mwifiex_misc_ioctl_gen_ie(struct mwifiex_private *priv,
1321                                      struct mwifiex_ds_misc_gen_ie *gen_ie,
1322                                      u16 action)
1323 {
1324         struct mwifiex_adapter *adapter = priv->adapter;
1325
1326         switch (gen_ie->type) {
1327         case MWIFIEX_IE_TYPE_GEN_IE:
1328                 if (action == HostCmd_ACT_GEN_GET) {
1329                         gen_ie->len = priv->wpa_ie_len;
1330                         memcpy(gen_ie->ie_data, priv->wpa_ie, gen_ie->len);
1331                 } else {
1332                         mwifiex_set_gen_ie_helper(priv, gen_ie->ie_data,
1333                                                   (u16) gen_ie->len);
1334                 }
1335                 break;
1336         case MWIFIEX_IE_TYPE_ARP_FILTER:
1337                 memset(adapter->arp_filter, 0, sizeof(adapter->arp_filter));
1338                 if (gen_ie->len > ARP_FILTER_MAX_BUF_SIZE) {
1339                         adapter->arp_filter_size = 0;
1340                         dev_err(adapter->dev, "invalid ARP filter size\n");
1341                         return -1;
1342                 } else {
1343                         memcpy(adapter->arp_filter, gen_ie->ie_data,
1344                                gen_ie->len);
1345                         adapter->arp_filter_size = gen_ie->len;
1346                 }
1347                 break;
1348         default:
1349                 dev_err(adapter->dev, "invalid IE type\n");
1350                 return -1;
1351         }
1352         return 0;
1353 }
1354
1355 /*
1356  * Sends IOCTL request to set a generic IE.
1357  *
1358  * This function allocates the IOCTL request buffer, fills it
1359  * with requisite parameters and calls the IOCTL handler.
1360  */
1361 int
1362 mwifiex_set_gen_ie(struct mwifiex_private *priv, u8 *ie, int ie_len)
1363 {
1364         struct mwifiex_ds_misc_gen_ie gen_ie;
1365
1366         if (ie_len > IEEE_MAX_IE_SIZE)
1367                 return -EFAULT;
1368
1369         gen_ie.type = MWIFIEX_IE_TYPE_GEN_IE;
1370         gen_ie.len = ie_len;
1371         memcpy(gen_ie.ie_data, ie, ie_len);
1372         if (mwifiex_misc_ioctl_gen_ie(priv, &gen_ie, HostCmd_ACT_GEN_SET))
1373                 return -EFAULT;
1374
1375         return 0;
1376 }