1 /*
2 
3   Broadcom B43legacy wireless driver
4 
5   Transmission (TX/RX) related functions.
6 
7   Copyright (C) 2005 Martin Langer <martin-langer@gmx.de>
8   Copyright (C) 2005 Stefano Brivio <stefano.brivio@polimi.it>
9   Copyright (C) 2005, 2006 Michael Buesch <m@bues.ch>
10   Copyright (C) 2005 Danny van Dyk <kugelfang@gentoo.org>
11   Copyright (C) 2005 Andreas Jaggi <andreas.jaggi@waterwave.ch>
12   Copyright (C) 2007 Larry Finger <Larry.Finger@lwfinger.net>
13 
14   This program is free software; you can redistribute it and/or modify
15   it under the terms of the GNU General Public License as published by
16   the Free Software Foundation; either version 2 of the License, or
17   (at your option) any later version.
18 
19   This program is distributed in the hope that it will be useful,
20   but WITHOUT ANY WARRANTY; without even the implied warranty of
21   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
22   GNU General Public License for more details.
23 
24   You should have received a copy of the GNU General Public License
25   along with this program; see the file COPYING.  If not, write to
26   the Free Software Foundation, Inc., 51 Franklin Steet, Fifth Floor,
27   Boston, MA 02110-1301, USA.
28 
29 */
30 
31 #include <net/dst.h>
32 
33 #include "xmit.h"
34 #include "phy.h"
35 #include "dma.h"
36 #include "pio.h"
37 
38 
39 /* Extract the bitrate out of a CCK PLCP header. */
b43legacy_plcp_get_bitrate_idx_cck(struct b43legacy_plcp_hdr6 * plcp)40 static u8 b43legacy_plcp_get_bitrate_idx_cck(struct b43legacy_plcp_hdr6 *plcp)
41 {
42 	switch (plcp->raw[0]) {
43 	case 0x0A:
44 		return 0;
45 	case 0x14:
46 		return 1;
47 	case 0x37:
48 		return 2;
49 	case 0x6E:
50 		return 3;
51 	}
52 	B43legacy_BUG_ON(1);
53 	return -1;
54 }
55 
56 /* Extract the bitrate out of an OFDM PLCP header. */
b43legacy_plcp_get_bitrate_idx_ofdm(struct b43legacy_plcp_hdr6 * plcp,bool aphy)57 static u8 b43legacy_plcp_get_bitrate_idx_ofdm(struct b43legacy_plcp_hdr6 *plcp,
58 					      bool aphy)
59 {
60 	int base = aphy ? 0 : 4;
61 
62 	switch (plcp->raw[0] & 0xF) {
63 	case 0xB:
64 		return base + 0;
65 	case 0xF:
66 		return base + 1;
67 	case 0xA:
68 		return base + 2;
69 	case 0xE:
70 		return base + 3;
71 	case 0x9:
72 		return base + 4;
73 	case 0xD:
74 		return base + 5;
75 	case 0x8:
76 		return base + 6;
77 	case 0xC:
78 		return base + 7;
79 	}
80 	B43legacy_BUG_ON(1);
81 	return -1;
82 }
83 
b43legacy_plcp_get_ratecode_cck(const u8 bitrate)84 u8 b43legacy_plcp_get_ratecode_cck(const u8 bitrate)
85 {
86 	switch (bitrate) {
87 	case B43legacy_CCK_RATE_1MB:
88 		return 0x0A;
89 	case B43legacy_CCK_RATE_2MB:
90 		return 0x14;
91 	case B43legacy_CCK_RATE_5MB:
92 		return 0x37;
93 	case B43legacy_CCK_RATE_11MB:
94 		return 0x6E;
95 	}
96 	B43legacy_BUG_ON(1);
97 	return 0;
98 }
99 
b43legacy_plcp_get_ratecode_ofdm(const u8 bitrate)100 u8 b43legacy_plcp_get_ratecode_ofdm(const u8 bitrate)
101 {
102 	switch (bitrate) {
103 	case B43legacy_OFDM_RATE_6MB:
104 		return 0xB;
105 	case B43legacy_OFDM_RATE_9MB:
106 		return 0xF;
107 	case B43legacy_OFDM_RATE_12MB:
108 		return 0xA;
109 	case B43legacy_OFDM_RATE_18MB:
110 		return 0xE;
111 	case B43legacy_OFDM_RATE_24MB:
112 		return 0x9;
113 	case B43legacy_OFDM_RATE_36MB:
114 		return 0xD;
115 	case B43legacy_OFDM_RATE_48MB:
116 		return 0x8;
117 	case B43legacy_OFDM_RATE_54MB:
118 		return 0xC;
119 	}
120 	B43legacy_BUG_ON(1);
121 	return 0;
122 }
123 
b43legacy_generate_plcp_hdr(struct b43legacy_plcp_hdr4 * plcp,const u16 octets,const u8 bitrate)124 void b43legacy_generate_plcp_hdr(struct b43legacy_plcp_hdr4 *plcp,
125 				 const u16 octets, const u8 bitrate)
126 {
127 	__le32 *data = &(plcp->data);
128 	__u8 *raw = plcp->raw;
129 
130 	if (b43legacy_is_ofdm_rate(bitrate)) {
131 		u16 d;
132 
133 		d = b43legacy_plcp_get_ratecode_ofdm(bitrate);
134 		B43legacy_WARN_ON(octets & 0xF000);
135 		d |= (octets << 5);
136 		*data = cpu_to_le32(d);
137 	} else {
138 		u32 plen;
139 
140 		plen = octets * 16 / bitrate;
141 		if ((octets * 16 % bitrate) > 0) {
142 			plen++;
143 			if ((bitrate == B43legacy_CCK_RATE_11MB)
144 			    && ((octets * 8 % 11) < 4))
145 				raw[1] = 0x84;
146 			else
147 				raw[1] = 0x04;
148 		} else
149 			raw[1] = 0x04;
150 		*data |= cpu_to_le32(plen << 16);
151 		raw[0] = b43legacy_plcp_get_ratecode_cck(bitrate);
152 	}
153 }
154 
b43legacy_calc_fallback_rate(u8 bitrate)155 static u8 b43legacy_calc_fallback_rate(u8 bitrate)
156 {
157 	switch (bitrate) {
158 	case B43legacy_CCK_RATE_1MB:
159 		return B43legacy_CCK_RATE_1MB;
160 	case B43legacy_CCK_RATE_2MB:
161 		return B43legacy_CCK_RATE_1MB;
162 	case B43legacy_CCK_RATE_5MB:
163 		return B43legacy_CCK_RATE_2MB;
164 	case B43legacy_CCK_RATE_11MB:
165 		return B43legacy_CCK_RATE_5MB;
166 	case B43legacy_OFDM_RATE_6MB:
167 		return B43legacy_CCK_RATE_5MB;
168 	case B43legacy_OFDM_RATE_9MB:
169 		return B43legacy_OFDM_RATE_6MB;
170 	case B43legacy_OFDM_RATE_12MB:
171 		return B43legacy_OFDM_RATE_9MB;
172 	case B43legacy_OFDM_RATE_18MB:
173 		return B43legacy_OFDM_RATE_12MB;
174 	case B43legacy_OFDM_RATE_24MB:
175 		return B43legacy_OFDM_RATE_18MB;
176 	case B43legacy_OFDM_RATE_36MB:
177 		return B43legacy_OFDM_RATE_24MB;
178 	case B43legacy_OFDM_RATE_48MB:
179 		return B43legacy_OFDM_RATE_36MB;
180 	case B43legacy_OFDM_RATE_54MB:
181 		return B43legacy_OFDM_RATE_48MB;
182 	}
183 	B43legacy_BUG_ON(1);
184 	return 0;
185 }
186 
generate_txhdr_fw3(struct b43legacy_wldev * dev,struct b43legacy_txhdr_fw3 * txhdr,const unsigned char * fragment_data,unsigned int fragment_len,struct ieee80211_tx_info * info,u16 cookie)187 static int generate_txhdr_fw3(struct b43legacy_wldev *dev,
188 			       struct b43legacy_txhdr_fw3 *txhdr,
189 			       const unsigned char *fragment_data,
190 			       unsigned int fragment_len,
191 			       struct ieee80211_tx_info *info,
192 			       u16 cookie)
193 {
194 	const struct ieee80211_hdr *wlhdr;
195 	int use_encryption = !!info->control.hw_key;
196 	u8 rate;
197 	struct ieee80211_rate *rate_fb;
198 	int rate_ofdm;
199 	int rate_fb_ofdm;
200 	unsigned int plcp_fragment_len;
201 	u32 mac_ctl = 0;
202 	u16 phy_ctl = 0;
203 	struct ieee80211_rate *tx_rate;
204 	struct ieee80211_tx_rate *rates;
205 
206 	wlhdr = (const struct ieee80211_hdr *)fragment_data;
207 
208 	memset(txhdr, 0, sizeof(*txhdr));
209 
210 	tx_rate = ieee80211_get_tx_rate(dev->wl->hw, info);
211 
212 	rate = tx_rate->hw_value;
213 	rate_ofdm = b43legacy_is_ofdm_rate(rate);
214 	rate_fb = ieee80211_get_alt_retry_rate(dev->wl->hw, info, 0) ? : tx_rate;
215 	rate_fb_ofdm = b43legacy_is_ofdm_rate(rate_fb->hw_value);
216 
217 	txhdr->mac_frame_ctl = wlhdr->frame_control;
218 	memcpy(txhdr->tx_receiver, wlhdr->addr1, 6);
219 
220 	/* Calculate duration for fallback rate */
221 	if ((rate_fb->hw_value == rate) ||
222 	    (wlhdr->duration_id & cpu_to_le16(0x8000)) ||
223 	    (wlhdr->duration_id == cpu_to_le16(0))) {
224 		/* If the fallback rate equals the normal rate or the
225 		 * dur_id field contains an AID, CFP magic or 0,
226 		 * use the original dur_id field. */
227 		txhdr->dur_fb = wlhdr->duration_id;
228 	} else {
229 		txhdr->dur_fb = ieee80211_generic_frame_duration(dev->wl->hw,
230 							 info->control.vif,
231 							 fragment_len,
232 							 rate_fb);
233 	}
234 
235 	plcp_fragment_len = fragment_len + FCS_LEN;
236 	if (use_encryption) {
237 		u8 key_idx = info->control.hw_key->hw_key_idx;
238 		struct b43legacy_key *key;
239 		int wlhdr_len;
240 		size_t iv_len;
241 
242 		B43legacy_WARN_ON(key_idx >= dev->max_nr_keys);
243 		key = &(dev->key[key_idx]);
244 
245 		if (key->enabled) {
246 			/* Hardware appends ICV. */
247 			plcp_fragment_len += info->control.hw_key->icv_len;
248 
249 			key_idx = b43legacy_kidx_to_fw(dev, key_idx);
250 			mac_ctl |= (key_idx << B43legacy_TX4_MAC_KEYIDX_SHIFT) &
251 				   B43legacy_TX4_MAC_KEYIDX;
252 			mac_ctl |= (key->algorithm <<
253 				   B43legacy_TX4_MAC_KEYALG_SHIFT) &
254 				   B43legacy_TX4_MAC_KEYALG;
255 			wlhdr_len = ieee80211_hdrlen(wlhdr->frame_control);
256 			iv_len = min((size_t)info->control.hw_key->iv_len,
257 				     ARRAY_SIZE(txhdr->iv));
258 			memcpy(txhdr->iv, ((u8 *)wlhdr) + wlhdr_len, iv_len);
259 		} else {
260 			/* This key is invalid. This might only happen
261 			 * in a short timeframe after machine resume before
262 			 * we were able to reconfigure keys.
263 			 * Drop this packet completely. Do not transmit it
264 			 * unencrypted to avoid leaking information. */
265 			return -ENOKEY;
266 		}
267 	}
268 	b43legacy_generate_plcp_hdr((struct b43legacy_plcp_hdr4 *)
269 				    (&txhdr->plcp), plcp_fragment_len,
270 				    rate);
271 	b43legacy_generate_plcp_hdr((struct b43legacy_plcp_hdr4 *)
272 				    (&txhdr->plcp_fb), plcp_fragment_len,
273 				    rate_fb->hw_value);
274 
275 	/* PHY TX Control word */
276 	if (rate_ofdm)
277 		phy_ctl |= B43legacy_TX4_PHY_ENC_OFDM;
278 	if (info->control.rates[0].flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE)
279 		phy_ctl |= B43legacy_TX4_PHY_SHORTPRMBL;
280 	switch (info->antenna_sel_tx) {
281 	case 0:
282 		phy_ctl |= B43legacy_TX4_PHY_ANTLAST;
283 		break;
284 	case 1:
285 		phy_ctl |= B43legacy_TX4_PHY_ANT0;
286 		break;
287 	case 2:
288 		phy_ctl |= B43legacy_TX4_PHY_ANT1;
289 		break;
290 	default:
291 		B43legacy_BUG_ON(1);
292 	}
293 
294 	/* MAC control */
295 	rates = info->control.rates;
296 	if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
297 		mac_ctl |= B43legacy_TX4_MAC_ACK;
298 	if (info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ)
299 		mac_ctl |= B43legacy_TX4_MAC_HWSEQ;
300 	if (info->flags & IEEE80211_TX_CTL_FIRST_FRAGMENT)
301 		mac_ctl |= B43legacy_TX4_MAC_STMSDU;
302 	if (rate_fb_ofdm)
303 		mac_ctl |= B43legacy_TX4_MAC_FALLBACKOFDM;
304 
305 	/* Overwrite rates[0].count to make the retry calculation
306 	 * in the tx status easier. need the actual retry limit to
307 	 * detect whether the fallback rate was used.
308 	 */
309 	if ((rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
310 	    (rates[0].count <= dev->wl->hw->conf.long_frame_max_tx_count)) {
311 		rates[0].count = dev->wl->hw->conf.long_frame_max_tx_count;
312 		mac_ctl |= B43legacy_TX4_MAC_LONGFRAME;
313 	} else {
314 		rates[0].count = dev->wl->hw->conf.short_frame_max_tx_count;
315 	}
316 
317 	/* Generate the RTS or CTS-to-self frame */
318 	if ((rates[0].flags & IEEE80211_TX_RC_USE_RTS_CTS) ||
319 	    (rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT)) {
320 		unsigned int len;
321 		struct ieee80211_hdr *hdr;
322 		int rts_rate;
323 		int rts_rate_fb;
324 		int rts_rate_fb_ofdm;
325 
326 		rts_rate = ieee80211_get_rts_cts_rate(dev->wl->hw, info)->hw_value;
327 		rts_rate_fb = b43legacy_calc_fallback_rate(rts_rate);
328 		rts_rate_fb_ofdm = b43legacy_is_ofdm_rate(rts_rate_fb);
329 		if (rts_rate_fb_ofdm)
330 			mac_ctl |= B43legacy_TX4_MAC_CTSFALLBACKOFDM;
331 
332 		if (rates[0].flags & IEEE80211_TX_RC_USE_CTS_PROTECT) {
333 			ieee80211_ctstoself_get(dev->wl->hw,
334 						info->control.vif,
335 						fragment_data,
336 						fragment_len, info,
337 						(struct ieee80211_cts *)
338 						(txhdr->rts_frame));
339 			mac_ctl |= B43legacy_TX4_MAC_SENDCTS;
340 			len = sizeof(struct ieee80211_cts);
341 		} else {
342 			ieee80211_rts_get(dev->wl->hw,
343 					  info->control.vif,
344 					  fragment_data, fragment_len, info,
345 					  (struct ieee80211_rts *)
346 					  (txhdr->rts_frame));
347 			mac_ctl |= B43legacy_TX4_MAC_SENDRTS;
348 			len = sizeof(struct ieee80211_rts);
349 		}
350 		len += FCS_LEN;
351 		b43legacy_generate_plcp_hdr((struct b43legacy_plcp_hdr4 *)
352 					    (&txhdr->rts_plcp),
353 					    len, rts_rate);
354 		b43legacy_generate_plcp_hdr((struct b43legacy_plcp_hdr4 *)
355 					    (&txhdr->rts_plcp_fb),
356 					    len, rts_rate_fb);
357 		hdr = (struct ieee80211_hdr *)(&txhdr->rts_frame);
358 		txhdr->rts_dur_fb = hdr->duration_id;
359 	}
360 
361 	/* Magic cookie */
362 	txhdr->cookie = cpu_to_le16(cookie);
363 
364 	/* Apply the bitfields */
365 	txhdr->mac_ctl = cpu_to_le32(mac_ctl);
366 	txhdr->phy_ctl = cpu_to_le16(phy_ctl);
367 
368 	return 0;
369 }
370 
b43legacy_generate_txhdr(struct b43legacy_wldev * dev,u8 * txhdr,const unsigned char * fragment_data,unsigned int fragment_len,struct ieee80211_tx_info * info,u16 cookie)371 int b43legacy_generate_txhdr(struct b43legacy_wldev *dev,
372 			      u8 *txhdr,
373 			      const unsigned char *fragment_data,
374 			      unsigned int fragment_len,
375 			      struct ieee80211_tx_info *info,
376 			      u16 cookie)
377 {
378 	return generate_txhdr_fw3(dev, (struct b43legacy_txhdr_fw3 *)txhdr,
379 			   fragment_data, fragment_len,
380 			   info, cookie);
381 }
382 
b43legacy_rssi_postprocess(struct b43legacy_wldev * dev,u8 in_rssi,int ofdm,int adjust_2053,int adjust_2050)383 static s8 b43legacy_rssi_postprocess(struct b43legacy_wldev *dev,
384 				     u8 in_rssi, int ofdm,
385 				     int adjust_2053, int adjust_2050)
386 {
387 	struct b43legacy_phy *phy = &dev->phy;
388 	s32 tmp;
389 
390 	switch (phy->radio_ver) {
391 	case 0x2050:
392 		if (ofdm) {
393 			tmp = in_rssi;
394 			if (tmp > 127)
395 				tmp -= 256;
396 			tmp *= 73;
397 			tmp /= 64;
398 			if (adjust_2050)
399 				tmp += 25;
400 			else
401 				tmp -= 3;
402 		} else {
403 			if (dev->dev->bus->sprom.boardflags_lo
404 			    & B43legacy_BFL_RSSI) {
405 				if (in_rssi > 63)
406 					in_rssi = 63;
407 				tmp = phy->nrssi_lt[in_rssi];
408 				tmp = 31 - tmp;
409 				tmp *= -131;
410 				tmp /= 128;
411 				tmp -= 57;
412 			} else {
413 				tmp = in_rssi;
414 				tmp = 31 - tmp;
415 				tmp *= -149;
416 				tmp /= 128;
417 				tmp -= 68;
418 			}
419 			if (phy->type == B43legacy_PHYTYPE_G &&
420 			    adjust_2050)
421 				tmp += 25;
422 		}
423 		break;
424 	case 0x2060:
425 		if (in_rssi > 127)
426 			tmp = in_rssi - 256;
427 		else
428 			tmp = in_rssi;
429 		break;
430 	default:
431 		tmp = in_rssi;
432 		tmp -= 11;
433 		tmp *= 103;
434 		tmp /= 64;
435 		if (adjust_2053)
436 			tmp -= 109;
437 		else
438 			tmp -= 83;
439 	}
440 
441 	return (s8)tmp;
442 }
443 
b43legacy_rx(struct b43legacy_wldev * dev,struct sk_buff * skb,const void * _rxhdr)444 void b43legacy_rx(struct b43legacy_wldev *dev,
445 		  struct sk_buff *skb,
446 		  const void *_rxhdr)
447 {
448 	struct ieee80211_rx_status status;
449 	struct b43legacy_plcp_hdr6 *plcp;
450 	struct ieee80211_hdr *wlhdr;
451 	const struct b43legacy_rxhdr_fw3 *rxhdr = _rxhdr;
452 	__le16 fctl;
453 	u16 phystat0;
454 	u16 phystat3;
455 	u16 chanstat;
456 	u16 mactime;
457 	u32 macstat;
458 	u16 chanid;
459 	u8 jssi;
460 	int padding;
461 
462 	memset(&status, 0, sizeof(status));
463 
464 	/* Get metadata about the frame from the header. */
465 	phystat0 = le16_to_cpu(rxhdr->phy_status0);
466 	phystat3 = le16_to_cpu(rxhdr->phy_status3);
467 	jssi = rxhdr->jssi;
468 	macstat = le16_to_cpu(rxhdr->mac_status);
469 	mactime = le16_to_cpu(rxhdr->mac_time);
470 	chanstat = le16_to_cpu(rxhdr->channel);
471 
472 	if (macstat & B43legacy_RX_MAC_FCSERR)
473 		dev->wl->ieee_stats.dot11FCSErrorCount++;
474 
475 	/* Skip PLCP and padding */
476 	padding = (macstat & B43legacy_RX_MAC_PADDING) ? 2 : 0;
477 	if (unlikely(skb->len < (sizeof(struct b43legacy_plcp_hdr6) +
478 	    padding))) {
479 		b43legacydbg(dev->wl, "RX: Packet size underrun (1)\n");
480 		goto drop;
481 	}
482 	plcp = (struct b43legacy_plcp_hdr6 *)(skb->data + padding);
483 	skb_pull(skb, sizeof(struct b43legacy_plcp_hdr6) + padding);
484 	/* The skb contains the Wireless Header + payload data now */
485 	if (unlikely(skb->len < (2+2+6/*minimum hdr*/ + FCS_LEN))) {
486 		b43legacydbg(dev->wl, "RX: Packet size underrun (2)\n");
487 		goto drop;
488 	}
489 	wlhdr = (struct ieee80211_hdr *)(skb->data);
490 	fctl = wlhdr->frame_control;
491 
492 	if ((macstat & B43legacy_RX_MAC_DEC) &&
493 	    !(macstat & B43legacy_RX_MAC_DECERR)) {
494 		unsigned int keyidx;
495 		int wlhdr_len;
496 		int iv_len;
497 		int icv_len;
498 
499 		keyidx = ((macstat & B43legacy_RX_MAC_KEYIDX)
500 			  >> B43legacy_RX_MAC_KEYIDX_SHIFT);
501 		/* We must adjust the key index here. We want the "physical"
502 		 * key index, but the ucode passed it slightly different.
503 		 */
504 		keyidx = b43legacy_kidx_to_raw(dev, keyidx);
505 		B43legacy_WARN_ON(keyidx >= dev->max_nr_keys);
506 
507 		if (dev->key[keyidx].algorithm != B43legacy_SEC_ALGO_NONE) {
508 			/* Remove PROTECTED flag to mark it as decrypted. */
509 			B43legacy_WARN_ON(!ieee80211_has_protected(fctl));
510 			fctl &= ~cpu_to_le16(IEEE80211_FCTL_PROTECTED);
511 			wlhdr->frame_control = fctl;
512 
513 			wlhdr_len = ieee80211_hdrlen(fctl);
514 			if (unlikely(skb->len < (wlhdr_len + 3))) {
515 				b43legacydbg(dev->wl, "RX: Packet size"
516 					     " underrun3\n");
517 				goto drop;
518 			}
519 			if (skb->data[wlhdr_len + 3] & (1 << 5)) {
520 				/* The Ext-IV Bit is set in the "KeyID"
521 				 * octet of the IV.
522 				 */
523 				iv_len = 8;
524 				icv_len = 8;
525 			} else {
526 				iv_len = 4;
527 				icv_len = 4;
528 			}
529 			if (unlikely(skb->len < (wlhdr_len + iv_len +
530 			    icv_len))) {
531 				b43legacydbg(dev->wl, "RX: Packet size"
532 					     " underrun4\n");
533 				goto drop;
534 			}
535 			/* Remove the IV */
536 			memmove(skb->data + iv_len, skb->data, wlhdr_len);
537 			skb_pull(skb, iv_len);
538 			/* Remove the ICV */
539 			skb_trim(skb, skb->len - icv_len);
540 
541 			status.flag |= RX_FLAG_DECRYPTED;
542 		}
543 	}
544 
545 	status.signal = b43legacy_rssi_postprocess(dev, jssi,
546 				      (phystat0 & B43legacy_RX_PHYST0_OFDM),
547 				      (phystat0 & B43legacy_RX_PHYST0_GAINCTL),
548 				      (phystat3 & B43legacy_RX_PHYST3_TRSTATE));
549 	/* change to support A PHY */
550 	if (phystat0 & B43legacy_RX_PHYST0_OFDM)
551 		status.rate_idx = b43legacy_plcp_get_bitrate_idx_ofdm(plcp, false);
552 	else
553 		status.rate_idx = b43legacy_plcp_get_bitrate_idx_cck(plcp);
554 	status.antenna = !!(phystat0 & B43legacy_RX_PHYST0_ANT);
555 
556 	/*
557 	 * All frames on monitor interfaces and beacons always need a full
558 	 * 64-bit timestamp. Monitor interfaces need it for diagnostic
559 	 * purposes and beacons for IBSS merging.
560 	 * This code assumes we get to process the packet within 16 bits
561 	 * of timestamp, i.e. about 65 milliseconds after the PHY received
562 	 * the first symbol.
563 	 */
564 	if (ieee80211_is_beacon(fctl) || dev->wl->radiotap_enabled) {
565 		u16 low_mactime_now;
566 
567 		b43legacy_tsf_read(dev, &status.mactime);
568 		low_mactime_now = status.mactime;
569 		status.mactime = status.mactime & ~0xFFFFULL;
570 		status.mactime += mactime;
571 		if (low_mactime_now <= mactime)
572 			status.mactime -= 0x10000;
573 		status.flag |= RX_FLAG_MACTIME_MPDU;
574 	}
575 
576 	chanid = (chanstat & B43legacy_RX_CHAN_ID) >>
577 		  B43legacy_RX_CHAN_ID_SHIFT;
578 	switch (chanstat & B43legacy_RX_CHAN_PHYTYPE) {
579 	case B43legacy_PHYTYPE_B:
580 	case B43legacy_PHYTYPE_G:
581 		status.band = IEEE80211_BAND_2GHZ;
582 		status.freq = chanid + 2400;
583 		break;
584 	default:
585 		b43legacywarn(dev->wl, "Unexpected value for chanstat (0x%X)\n",
586 		       chanstat);
587 	}
588 
589 	memcpy(IEEE80211_SKB_RXCB(skb), &status, sizeof(status));
590 	ieee80211_rx_irqsafe(dev->wl->hw, skb);
591 
592 	return;
593 drop:
594 	b43legacydbg(dev->wl, "RX: Packet dropped\n");
595 	dev_kfree_skb_any(skb);
596 }
597 
b43legacy_handle_txstatus(struct b43legacy_wldev * dev,const struct b43legacy_txstatus * status)598 void b43legacy_handle_txstatus(struct b43legacy_wldev *dev,
599 			     const struct b43legacy_txstatus *status)
600 {
601 	b43legacy_debugfs_log_txstat(dev, status);
602 
603 	if (status->intermediate)
604 		return;
605 	if (status->for_ampdu)
606 		return;
607 	if (!status->acked)
608 		dev->wl->ieee_stats.dot11ACKFailureCount++;
609 	if (status->rts_count) {
610 		if (status->rts_count == 0xF) /* FIXME */
611 			dev->wl->ieee_stats.dot11RTSFailureCount++;
612 		else
613 			dev->wl->ieee_stats.dot11RTSSuccessCount++;
614 	}
615 
616 	if (b43legacy_using_pio(dev))
617 		b43legacy_pio_handle_txstatus(dev, status);
618 	else
619 		b43legacy_dma_handle_txstatus(dev, status);
620 }
621 
622 /* Handle TX status report as received through DMA/PIO queues */
b43legacy_handle_hwtxstatus(struct b43legacy_wldev * dev,const struct b43legacy_hwtxstatus * hw)623 void b43legacy_handle_hwtxstatus(struct b43legacy_wldev *dev,
624 				 const struct b43legacy_hwtxstatus *hw)
625 {
626 	struct b43legacy_txstatus status;
627 	u8 tmp;
628 
629 	status.cookie = le16_to_cpu(hw->cookie);
630 	status.seq = le16_to_cpu(hw->seq);
631 	status.phy_stat = hw->phy_stat;
632 	tmp = hw->count;
633 	status.frame_count = (tmp >> 4);
634 	status.rts_count = (tmp & 0x0F);
635 	tmp = hw->flags << 1;
636 	status.supp_reason = ((tmp & 0x1C) >> 2);
637 	status.pm_indicated = !!(tmp & 0x80);
638 	status.intermediate = !!(tmp & 0x40);
639 	status.for_ampdu = !!(tmp & 0x20);
640 	status.acked = !!(tmp & 0x02);
641 
642 	b43legacy_handle_txstatus(dev, &status);
643 }
644 
645 /* Stop any TX operation on the device (suspend the hardware queues) */
b43legacy_tx_suspend(struct b43legacy_wldev * dev)646 void b43legacy_tx_suspend(struct b43legacy_wldev *dev)
647 {
648 	if (b43legacy_using_pio(dev))
649 		b43legacy_pio_freeze_txqueues(dev);
650 	else
651 		b43legacy_dma_tx_suspend(dev);
652 }
653 
654 /* Resume any TX operation on the device (resume the hardware queues) */
b43legacy_tx_resume(struct b43legacy_wldev * dev)655 void b43legacy_tx_resume(struct b43legacy_wldev *dev)
656 {
657 	if (b43legacy_using_pio(dev))
658 		b43legacy_pio_thaw_txqueues(dev);
659 	else
660 		b43legacy_dma_tx_resume(dev);
661 }
662 
663 /* Initialize the QoS parameters */
b43legacy_qos_init(struct b43legacy_wldev * dev)664 void b43legacy_qos_init(struct b43legacy_wldev *dev)
665 {
666 	/* FIXME: This function must probably be called from the mac80211
667 	 * config callback. */
668 return;
669 
670 	b43legacy_hf_write(dev, b43legacy_hf_read(dev) | B43legacy_HF_EDCF);
671 	/* FIXME kill magic */
672 	b43legacy_write16(dev, 0x688,
673 			  b43legacy_read16(dev, 0x688) | 0x4);
674 
675 
676 	/*TODO: We might need some stack support here to get the values. */
677 }
678