1 /*
2  * EEPROM parser code for mac80211 Prism54 drivers
3  *
4  * Copyright (c) 2006, Michael Wu <flamingice@sourmilk.net>
5  * Copyright (c) 2007-2009, Christian Lamparter <chunkeey@web.de>
6  * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
7  *
8  * Based on:
9  * - the islsm (softmac prism54) driver, which is:
10  *   Copyright 2004-2006 Jean-Baptiste Note <jbnote@gmail.com>, et al.
11  * - stlc45xx driver
12  *   Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies).
13  *
14  * This program is free software; you can redistribute it and/or modify
15  * it under the terms of the GNU General Public License version 2 as
16  * published by the Free Software Foundation.
17  */
18 
19 #include <linux/init.h>
20 #include <linux/firmware.h>
21 #include <linux/etherdevice.h>
22 #include <linux/sort.h>
23 #include <linux/slab.h>
24 
25 #include <net/mac80211.h>
26 #include <linux/crc-ccitt.h>
27 #include <linux/export.h>
28 
29 #include "p54.h"
30 #include "eeprom.h"
31 #include "lmac.h"
32 
33 static struct ieee80211_rate p54_bgrates[] = {
34 	{ .bitrate = 10, .hw_value = 0, },
35 	{ .bitrate = 20, .hw_value = 1, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
36 	{ .bitrate = 55, .hw_value = 2, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
37 	{ .bitrate = 110, .hw_value = 3, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
38 	{ .bitrate = 60, .hw_value = 4, },
39 	{ .bitrate = 90, .hw_value = 5, },
40 	{ .bitrate = 120, .hw_value = 6, },
41 	{ .bitrate = 180, .hw_value = 7, },
42 	{ .bitrate = 240, .hw_value = 8, },
43 	{ .bitrate = 360, .hw_value = 9, },
44 	{ .bitrate = 480, .hw_value = 10, },
45 	{ .bitrate = 540, .hw_value = 11, },
46 };
47 
48 static struct ieee80211_rate p54_arates[] = {
49 	{ .bitrate = 60, .hw_value = 4, },
50 	{ .bitrate = 90, .hw_value = 5, },
51 	{ .bitrate = 120, .hw_value = 6, },
52 	{ .bitrate = 180, .hw_value = 7, },
53 	{ .bitrate = 240, .hw_value = 8, },
54 	{ .bitrate = 360, .hw_value = 9, },
55 	{ .bitrate = 480, .hw_value = 10, },
56 	{ .bitrate = 540, .hw_value = 11, },
57 };
58 
59 static struct p54_rssi_db_entry p54_rssi_default = {
60 	/*
61 	 * The defaults are taken from usb-logs of the
62 	 * vendor driver. So, they should be safe to
63 	 * use in case we can't get a match from the
64 	 * rssi <-> dBm conversion database.
65 	 */
66 	.mul = 130,
67 	.add = -398,
68 };
69 
70 #define CHAN_HAS_CAL		BIT(0)
71 #define CHAN_HAS_LIMIT		BIT(1)
72 #define CHAN_HAS_CURVE		BIT(2)
73 #define CHAN_HAS_ALL		(CHAN_HAS_CAL | CHAN_HAS_LIMIT | CHAN_HAS_CURVE)
74 
75 struct p54_channel_entry {
76 	u16 freq;
77 	u16 data;
78 	int index;
79 	enum ieee80211_band band;
80 };
81 
82 struct p54_channel_list {
83 	struct p54_channel_entry *channels;
84 	size_t entries;
85 	size_t max_entries;
86 	size_t band_channel_num[IEEE80211_NUM_BANDS];
87 };
88 
p54_get_band_from_freq(u16 freq)89 static int p54_get_band_from_freq(u16 freq)
90 {
91 	/* FIXME: sync these values with the 802.11 spec */
92 
93 	if ((freq >= 2412) && (freq <= 2484))
94 		return IEEE80211_BAND_2GHZ;
95 
96 	if ((freq >= 4920) && (freq <= 5825))
97 		return IEEE80211_BAND_5GHZ;
98 
99 	return -1;
100 }
101 
same_band(u16 freq,u16 freq2)102 static int same_band(u16 freq, u16 freq2)
103 {
104 	return p54_get_band_from_freq(freq) == p54_get_band_from_freq(freq2);
105 }
106 
p54_compare_channels(const void * _a,const void * _b)107 static int p54_compare_channels(const void *_a,
108 				const void *_b)
109 {
110 	const struct p54_channel_entry *a = _a;
111 	const struct p54_channel_entry *b = _b;
112 
113 	return a->freq - b->freq;
114 }
115 
p54_compare_rssichan(const void * _a,const void * _b)116 static int p54_compare_rssichan(const void *_a,
117 				const void *_b)
118 {
119 	const struct p54_rssi_db_entry *a = _a;
120 	const struct p54_rssi_db_entry *b = _b;
121 
122 	return a->freq - b->freq;
123 }
124 
p54_fill_band_bitrates(struct ieee80211_hw * dev,struct ieee80211_supported_band * band_entry,enum ieee80211_band band)125 static int p54_fill_band_bitrates(struct ieee80211_hw *dev,
126 				  struct ieee80211_supported_band *band_entry,
127 				  enum ieee80211_band band)
128 {
129 	/* TODO: generate rate array dynamically */
130 
131 	switch (band) {
132 	case IEEE80211_BAND_2GHZ:
133 		band_entry->bitrates = p54_bgrates;
134 		band_entry->n_bitrates = ARRAY_SIZE(p54_bgrates);
135 		break;
136 	case IEEE80211_BAND_5GHZ:
137 		band_entry->bitrates = p54_arates;
138 		band_entry->n_bitrates = ARRAY_SIZE(p54_arates);
139 		break;
140 	default:
141 		return -EINVAL;
142 	}
143 
144 	return 0;
145 }
146 
p54_generate_band(struct ieee80211_hw * dev,struct p54_channel_list * list,unsigned int * chan_num,enum ieee80211_band band)147 static int p54_generate_band(struct ieee80211_hw *dev,
148 			     struct p54_channel_list *list,
149 			     unsigned int *chan_num,
150 			     enum ieee80211_band band)
151 {
152 	struct p54_common *priv = dev->priv;
153 	struct ieee80211_supported_band *tmp, *old;
154 	unsigned int i, j;
155 	int ret = -ENOMEM;
156 
157 	if ((!list->entries) || (!list->band_channel_num[band]))
158 		return -EINVAL;
159 
160 	tmp = kzalloc(sizeof(*tmp), GFP_KERNEL);
161 	if (!tmp)
162 		goto err_out;
163 
164 	tmp->channels = kzalloc(sizeof(struct ieee80211_channel) *
165 				list->band_channel_num[band], GFP_KERNEL);
166 	if (!tmp->channels)
167 		goto err_out;
168 
169 	ret = p54_fill_band_bitrates(dev, tmp, band);
170 	if (ret)
171 		goto err_out;
172 
173 	for (i = 0, j = 0; (j < list->band_channel_num[band]) &&
174 			   (i < list->entries); i++) {
175 		struct p54_channel_entry *chan = &list->channels[i];
176 
177 		if (chan->band != band)
178 			continue;
179 
180 		if (chan->data != CHAN_HAS_ALL) {
181 			wiphy_err(dev->wiphy, "%s%s%s is/are missing for "
182 				  "channel:%d [%d MHz].\n",
183 				  (chan->data & CHAN_HAS_CAL ? "" :
184 				   " [iqauto calibration data]"),
185 				  (chan->data & CHAN_HAS_LIMIT ? "" :
186 				   " [output power limits]"),
187 				  (chan->data & CHAN_HAS_CURVE ? "" :
188 				   " [curve data]"),
189 				  chan->index, chan->freq);
190 			continue;
191 		}
192 
193 		tmp->channels[j].band = chan->band;
194 		tmp->channels[j].center_freq = chan->freq;
195 		priv->survey[*chan_num].channel = &tmp->channels[j];
196 		priv->survey[*chan_num].filled = SURVEY_INFO_NOISE_DBM |
197 			SURVEY_INFO_CHANNEL_TIME |
198 			SURVEY_INFO_CHANNEL_TIME_BUSY |
199 			SURVEY_INFO_CHANNEL_TIME_TX;
200 		tmp->channels[j].hw_value = (*chan_num);
201 		j++;
202 		(*chan_num)++;
203 	}
204 
205 	if (j == 0) {
206 		wiphy_err(dev->wiphy, "Disabling totally damaged %d GHz band\n",
207 			  (band == IEEE80211_BAND_2GHZ) ? 2 : 5);
208 
209 		ret = -ENODATA;
210 		goto err_out;
211 	}
212 
213 	tmp->n_channels = j;
214 	old = priv->band_table[band];
215 	priv->band_table[band] = tmp;
216 	if (old) {
217 		kfree(old->channels);
218 		kfree(old);
219 	}
220 
221 	return 0;
222 
223 err_out:
224 	if (tmp) {
225 		kfree(tmp->channels);
226 		kfree(tmp);
227 	}
228 
229 	return ret;
230 }
231 
p54_update_channel_param(struct p54_channel_list * list,u16 freq,u16 data)232 static void p54_update_channel_param(struct p54_channel_list *list,
233 				     u16 freq, u16 data)
234 {
235 	int band, i;
236 
237 	/*
238 	 * usually all lists in the eeprom are mostly sorted.
239 	 * so it's very likely that the entry we are looking for
240 	 * is right at the end of the list
241 	 */
242 	for (i = list->entries; i >= 0; i--) {
243 		if (freq == list->channels[i].freq) {
244 			list->channels[i].data |= data;
245 			break;
246 		}
247 	}
248 
249 	if ((i < 0) && (list->entries < list->max_entries)) {
250 		/* entry does not exist yet. Initialize a new one. */
251 		band = p54_get_band_from_freq(freq);
252 
253 		/*
254 		 * filter out frequencies which don't belong into
255 		 * any supported band.
256 		 */
257 		if (band < 0)
258 			return ;
259 
260 		i = list->entries++;
261 		list->band_channel_num[band]++;
262 
263 		list->channels[i].freq = freq;
264 		list->channels[i].data = data;
265 		list->channels[i].band = band;
266 		list->channels[i].index = ieee80211_frequency_to_channel(freq);
267 		/* TODO: parse output_limit and fill max_power */
268 	}
269 }
270 
p54_generate_channel_lists(struct ieee80211_hw * dev)271 static int p54_generate_channel_lists(struct ieee80211_hw *dev)
272 {
273 	struct p54_common *priv = dev->priv;
274 	struct p54_channel_list *list;
275 	unsigned int i, j, k, max_channel_num;
276 	int ret = 0;
277 	u16 freq;
278 
279 	if ((priv->iq_autocal_len != priv->curve_data->entries) ||
280 	    (priv->iq_autocal_len != priv->output_limit->entries))
281 		wiphy_err(dev->wiphy,
282 			  "Unsupported or damaged EEPROM detected. "
283 			  "You may not be able to use all channels.\n");
284 
285 	max_channel_num = max_t(unsigned int, priv->output_limit->entries,
286 				priv->iq_autocal_len);
287 	max_channel_num = max_t(unsigned int, max_channel_num,
288 				priv->curve_data->entries);
289 
290 	list = kzalloc(sizeof(*list), GFP_KERNEL);
291 	if (!list) {
292 		ret = -ENOMEM;
293 		goto free;
294 	}
295 	priv->chan_num = max_channel_num;
296 	priv->survey = kzalloc(sizeof(struct survey_info) * max_channel_num,
297 			       GFP_KERNEL);
298 	if (!priv->survey) {
299 		ret = -ENOMEM;
300 		goto free;
301 	}
302 
303 	list->max_entries = max_channel_num;
304 	list->channels = kzalloc(sizeof(struct p54_channel_entry) *
305 				 max_channel_num, GFP_KERNEL);
306 	if (!list->channels) {
307 		ret = -ENOMEM;
308 		goto free;
309 	}
310 
311 	for (i = 0; i < max_channel_num; i++) {
312 		if (i < priv->iq_autocal_len) {
313 			freq = le16_to_cpu(priv->iq_autocal[i].freq);
314 			p54_update_channel_param(list, freq, CHAN_HAS_CAL);
315 		}
316 
317 		if (i < priv->output_limit->entries) {
318 			freq = le16_to_cpup((__le16 *) (i *
319 					    priv->output_limit->entry_size +
320 					    priv->output_limit->offset +
321 					    priv->output_limit->data));
322 
323 			p54_update_channel_param(list, freq, CHAN_HAS_LIMIT);
324 		}
325 
326 		if (i < priv->curve_data->entries) {
327 			freq = le16_to_cpup((__le16 *) (i *
328 					    priv->curve_data->entry_size +
329 					    priv->curve_data->offset +
330 					    priv->curve_data->data));
331 
332 			p54_update_channel_param(list, freq, CHAN_HAS_CURVE);
333 		}
334 	}
335 
336 	/* sort the channel list by frequency */
337 	sort(list->channels, list->entries, sizeof(struct p54_channel_entry),
338 	     p54_compare_channels, NULL);
339 
340 	k = 0;
341 	for (i = 0, j = 0; i < IEEE80211_NUM_BANDS; i++) {
342 		if (p54_generate_band(dev, list, &k, i) == 0)
343 			j++;
344 	}
345 	if (j == 0) {
346 		/* no useable band available. */
347 		ret = -EINVAL;
348 	}
349 
350 free:
351 	if (list) {
352 		kfree(list->channels);
353 		kfree(list);
354 	}
355 	if (ret) {
356 		kfree(priv->survey);
357 		priv->survey = NULL;
358 	}
359 
360 	return ret;
361 }
362 
p54_convert_rev0(struct ieee80211_hw * dev,struct pda_pa_curve_data * curve_data)363 static int p54_convert_rev0(struct ieee80211_hw *dev,
364 			    struct pda_pa_curve_data *curve_data)
365 {
366 	struct p54_common *priv = dev->priv;
367 	struct p54_pa_curve_data_sample *dst;
368 	struct pda_pa_curve_data_sample_rev0 *src;
369 	size_t cd_len = sizeof(*curve_data) +
370 		(curve_data->points_per_channel*sizeof(*dst) + 2) *
371 		 curve_data->channels;
372 	unsigned int i, j;
373 	void *source, *target;
374 
375 	priv->curve_data = kmalloc(sizeof(*priv->curve_data) + cd_len,
376 				   GFP_KERNEL);
377 	if (!priv->curve_data)
378 		return -ENOMEM;
379 
380 	priv->curve_data->entries = curve_data->channels;
381 	priv->curve_data->entry_size = sizeof(__le16) +
382 		sizeof(*dst) * curve_data->points_per_channel;
383 	priv->curve_data->offset = offsetof(struct pda_pa_curve_data, data);
384 	priv->curve_data->len = cd_len;
385 	memcpy(priv->curve_data->data, curve_data, sizeof(*curve_data));
386 	source = curve_data->data;
387 	target = ((struct pda_pa_curve_data *) priv->curve_data->data)->data;
388 	for (i = 0; i < curve_data->channels; i++) {
389 		__le16 *freq = source;
390 		source += sizeof(__le16);
391 		*((__le16 *)target) = *freq;
392 		target += sizeof(__le16);
393 		for (j = 0; j < curve_data->points_per_channel; j++) {
394 			dst = target;
395 			src = source;
396 
397 			dst->rf_power = src->rf_power;
398 			dst->pa_detector = src->pa_detector;
399 			dst->data_64qam = src->pcv;
400 			/* "invent" the points for the other modulations */
401 #define SUB(x, y) (u8)(((x) - (y)) > (x) ? 0 : (x) - (y))
402 			dst->data_16qam = SUB(src->pcv, 12);
403 			dst->data_qpsk = SUB(dst->data_16qam, 12);
404 			dst->data_bpsk = SUB(dst->data_qpsk, 12);
405 			dst->data_barker = SUB(dst->data_bpsk, 14);
406 #undef SUB
407 			target += sizeof(*dst);
408 			source += sizeof(*src);
409 		}
410 	}
411 
412 	return 0;
413 }
414 
p54_convert_rev1(struct ieee80211_hw * dev,struct pda_pa_curve_data * curve_data)415 static int p54_convert_rev1(struct ieee80211_hw *dev,
416 			    struct pda_pa_curve_data *curve_data)
417 {
418 	struct p54_common *priv = dev->priv;
419 	struct p54_pa_curve_data_sample *dst;
420 	struct pda_pa_curve_data_sample_rev1 *src;
421 	size_t cd_len = sizeof(*curve_data) +
422 		(curve_data->points_per_channel*sizeof(*dst) + 2) *
423 		 curve_data->channels;
424 	unsigned int i, j;
425 	void *source, *target;
426 
427 	priv->curve_data = kzalloc(cd_len + sizeof(*priv->curve_data),
428 				   GFP_KERNEL);
429 	if (!priv->curve_data)
430 		return -ENOMEM;
431 
432 	priv->curve_data->entries = curve_data->channels;
433 	priv->curve_data->entry_size = sizeof(__le16) +
434 		sizeof(*dst) * curve_data->points_per_channel;
435 	priv->curve_data->offset = offsetof(struct pda_pa_curve_data, data);
436 	priv->curve_data->len = cd_len;
437 	memcpy(priv->curve_data->data, curve_data, sizeof(*curve_data));
438 	source = curve_data->data;
439 	target = ((struct pda_pa_curve_data *) priv->curve_data->data)->data;
440 	for (i = 0; i < curve_data->channels; i++) {
441 		__le16 *freq = source;
442 		source += sizeof(__le16);
443 		*((__le16 *)target) = *freq;
444 		target += sizeof(__le16);
445 		for (j = 0; j < curve_data->points_per_channel; j++) {
446 			memcpy(target, source, sizeof(*src));
447 
448 			target += sizeof(*dst);
449 			source += sizeof(*src);
450 		}
451 		source++;
452 	}
453 
454 	return 0;
455 }
456 
457 static const char *p54_rf_chips[] = { "INVALID-0", "Duette3", "Duette2",
458 	"Frisbee", "Xbow", "Longbow", "INVALID-6", "INVALID-7" };
459 
p54_parse_rssical(struct ieee80211_hw * dev,u8 * data,int len,u16 type)460 static int p54_parse_rssical(struct ieee80211_hw *dev,
461 			     u8 *data, int len, u16 type)
462 {
463 	struct p54_common *priv = dev->priv;
464 	struct p54_rssi_db_entry *entry;
465 	size_t db_len, entries;
466 	int offset = 0, i;
467 
468 	if (type != PDR_RSSI_LINEAR_APPROXIMATION_EXTENDED) {
469 		entries = (type == PDR_RSSI_LINEAR_APPROXIMATION) ? 1 : 2;
470 		if (len != sizeof(struct pda_rssi_cal_entry) * entries) {
471 			wiphy_err(dev->wiphy, "rssical size mismatch.\n");
472 			goto err_data;
473 		}
474 	} else {
475 		/*
476 		 * Some devices (Dell 1450 USB, Xbow 5GHz card, etc...)
477 		 * have an empty two byte header.
478 		 */
479 		if (*((__le16 *)&data[offset]) == cpu_to_le16(0))
480 			offset += 2;
481 
482 		entries = (len - offset) /
483 			sizeof(struct pda_rssi_cal_ext_entry);
484 
485 		if ((len - offset) % sizeof(struct pda_rssi_cal_ext_entry) ||
486 		    entries <= 0) {
487 			wiphy_err(dev->wiphy, "invalid rssi database.\n");
488 			goto err_data;
489 		}
490 	}
491 
492 	db_len = sizeof(*entry) * entries;
493 	priv->rssi_db = kzalloc(db_len + sizeof(*priv->rssi_db), GFP_KERNEL);
494 	if (!priv->rssi_db)
495 		return -ENOMEM;
496 
497 	priv->rssi_db->offset = 0;
498 	priv->rssi_db->entries = entries;
499 	priv->rssi_db->entry_size = sizeof(*entry);
500 	priv->rssi_db->len = db_len;
501 
502 	entry = (void *)((unsigned long)priv->rssi_db->data + priv->rssi_db->offset);
503 	if (type == PDR_RSSI_LINEAR_APPROXIMATION_EXTENDED) {
504 		struct pda_rssi_cal_ext_entry *cal = (void *) &data[offset];
505 
506 		for (i = 0; i < entries; i++) {
507 			entry[i].freq = le16_to_cpu(cal[i].freq);
508 			entry[i].mul = (s16) le16_to_cpu(cal[i].mul);
509 			entry[i].add = (s16) le16_to_cpu(cal[i].add);
510 		}
511 	} else {
512 		struct pda_rssi_cal_entry *cal = (void *) &data[offset];
513 
514 		for (i = 0; i < entries; i++) {
515 			u16 freq = 0;
516 			switch (i) {
517 			case IEEE80211_BAND_2GHZ:
518 				freq = 2437;
519 				break;
520 			case IEEE80211_BAND_5GHZ:
521 				freq = 5240;
522 				break;
523 			}
524 
525 			entry[i].freq = freq;
526 			entry[i].mul = (s16) le16_to_cpu(cal[i].mul);
527 			entry[i].add = (s16) le16_to_cpu(cal[i].add);
528 		}
529 	}
530 
531 	/* sort the list by channel frequency */
532 	sort(entry, entries, sizeof(*entry), p54_compare_rssichan, NULL);
533 	return 0;
534 
535 err_data:
536 	wiphy_err(dev->wiphy,
537 		  "rssi calibration data packing type:(%x) len:%d.\n",
538 		  type, len);
539 
540 	print_hex_dump_bytes("rssical:", DUMP_PREFIX_NONE, data, len);
541 
542 	wiphy_err(dev->wiphy, "please report this issue.\n");
543 	return -EINVAL;
544 }
545 
p54_rssi_find(struct p54_common * priv,const u16 freq)546 struct p54_rssi_db_entry *p54_rssi_find(struct p54_common *priv, const u16 freq)
547 {
548 	struct p54_rssi_db_entry *entry;
549 	int i, found = -1;
550 
551 	if (!priv->rssi_db)
552 		return &p54_rssi_default;
553 
554 	entry = (void *)(priv->rssi_db->data + priv->rssi_db->offset);
555 	for (i = 0; i < priv->rssi_db->entries; i++) {
556 		if (!same_band(freq, entry[i].freq))
557 			continue;
558 
559 		if (found == -1) {
560 			found = i;
561 			continue;
562 		}
563 
564 		/* nearest match */
565 		if (abs(freq - entry[i].freq) <
566 		    abs(freq - entry[found].freq)) {
567 			found = i;
568 			continue;
569 		} else {
570 			break;
571 		}
572 	}
573 
574 	return found < 0 ? &p54_rssi_default : &entry[found];
575 }
576 
p54_parse_default_country(struct ieee80211_hw * dev,void * data,int len)577 static void p54_parse_default_country(struct ieee80211_hw *dev,
578 				      void *data, int len)
579 {
580 	struct pda_country *country;
581 
582 	if (len != sizeof(*country)) {
583 		wiphy_err(dev->wiphy,
584 			  "found possible invalid default country eeprom entry. (entry size: %d)\n",
585 			  len);
586 
587 		print_hex_dump_bytes("country:", DUMP_PREFIX_NONE,
588 				     data, len);
589 
590 		wiphy_err(dev->wiphy, "please report this issue.\n");
591 		return;
592 	}
593 
594 	country = (struct pda_country *) data;
595 	if (country->flags == PDR_COUNTRY_CERT_CODE_PSEUDO)
596 		regulatory_hint(dev->wiphy, country->alpha2);
597 	else {
598 		/* TODO:
599 		 * write a shared/common function that converts
600 		 * "Regulatory domain codes" (802.11-2007 14.8.2.2)
601 		 * into ISO/IEC 3166-1 alpha2 for regulatory_hint.
602 		 */
603 	}
604 }
605 
p54_convert_output_limits(struct ieee80211_hw * dev,u8 * data,size_t len)606 static int p54_convert_output_limits(struct ieee80211_hw *dev,
607 				     u8 *data, size_t len)
608 {
609 	struct p54_common *priv = dev->priv;
610 
611 	if (len < 2)
612 		return -EINVAL;
613 
614 	if (data[0] != 0) {
615 		wiphy_err(dev->wiphy, "unknown output power db revision:%x\n",
616 			  data[0]);
617 		return -EINVAL;
618 	}
619 
620 	if (2 + data[1] * sizeof(struct pda_channel_output_limit) > len)
621 		return -EINVAL;
622 
623 	priv->output_limit = kmalloc(data[1] *
624 		sizeof(struct pda_channel_output_limit) +
625 		sizeof(*priv->output_limit), GFP_KERNEL);
626 
627 	if (!priv->output_limit)
628 		return -ENOMEM;
629 
630 	priv->output_limit->offset = 0;
631 	priv->output_limit->entries = data[1];
632 	priv->output_limit->entry_size =
633 		sizeof(struct pda_channel_output_limit);
634 	priv->output_limit->len = priv->output_limit->entry_size *
635 				  priv->output_limit->entries +
636 				  priv->output_limit->offset;
637 
638 	memcpy(priv->output_limit->data, &data[2],
639 	       data[1] * sizeof(struct pda_channel_output_limit));
640 
641 	return 0;
642 }
643 
p54_convert_db(struct pda_custom_wrapper * src,size_t total_len)644 static struct p54_cal_database *p54_convert_db(struct pda_custom_wrapper *src,
645 					       size_t total_len)
646 {
647 	struct p54_cal_database *dst;
648 	size_t payload_len, entries, entry_size, offset;
649 
650 	payload_len = le16_to_cpu(src->len);
651 	entries = le16_to_cpu(src->entries);
652 	entry_size = le16_to_cpu(src->entry_size);
653 	offset = le16_to_cpu(src->offset);
654 	if (((entries * entry_size + offset) != payload_len) ||
655 	     (payload_len + sizeof(*src) != total_len))
656 		return NULL;
657 
658 	dst = kmalloc(sizeof(*dst) + payload_len, GFP_KERNEL);
659 	if (!dst)
660 		return NULL;
661 
662 	dst->entries = entries;
663 	dst->entry_size = entry_size;
664 	dst->offset = offset;
665 	dst->len = payload_len;
666 
667 	memcpy(dst->data, src->data, payload_len);
668 	return dst;
669 }
670 
p54_parse_eeprom(struct ieee80211_hw * dev,void * eeprom,int len)671 int p54_parse_eeprom(struct ieee80211_hw *dev, void *eeprom, int len)
672 {
673 	struct p54_common *priv = dev->priv;
674 	struct eeprom_pda_wrap *wrap;
675 	struct pda_entry *entry;
676 	unsigned int data_len, entry_len;
677 	void *tmp;
678 	int err;
679 	u8 *end = (u8 *)eeprom + len;
680 	u16 synth = 0;
681 	u16 crc16 = ~0;
682 
683 	wrap = (struct eeprom_pda_wrap *) eeprom;
684 	entry = (void *)wrap->data + le16_to_cpu(wrap->len);
685 
686 	/* verify that at least the entry length/code fits */
687 	while ((u8 *)entry <= end - sizeof(*entry)) {
688 		entry_len = le16_to_cpu(entry->len);
689 		data_len = ((entry_len - 1) << 1);
690 
691 		/* abort if entry exceeds whole structure */
692 		if ((u8 *)entry + sizeof(*entry) + data_len > end)
693 			break;
694 
695 		switch (le16_to_cpu(entry->code)) {
696 		case PDR_MAC_ADDRESS:
697 			if (data_len != ETH_ALEN)
698 				break;
699 			SET_IEEE80211_PERM_ADDR(dev, entry->data);
700 			break;
701 		case PDR_PRISM_PA_CAL_OUTPUT_POWER_LIMITS:
702 			if (priv->output_limit)
703 				break;
704 			err = p54_convert_output_limits(dev, entry->data,
705 							data_len);
706 			if (err)
707 				goto err;
708 			break;
709 		case PDR_PRISM_PA_CAL_CURVE_DATA: {
710 			struct pda_pa_curve_data *curve_data =
711 				(struct pda_pa_curve_data *)entry->data;
712 			if (data_len < sizeof(*curve_data)) {
713 				err = -EINVAL;
714 				goto err;
715 			}
716 
717 			switch (curve_data->cal_method_rev) {
718 			case 0:
719 				err = p54_convert_rev0(dev, curve_data);
720 				break;
721 			case 1:
722 				err = p54_convert_rev1(dev, curve_data);
723 				break;
724 			default:
725 				wiphy_err(dev->wiphy,
726 					  "unknown curve data revision %d\n",
727 					  curve_data->cal_method_rev);
728 				err = -ENODEV;
729 				break;
730 			}
731 			if (err)
732 				goto err;
733 			}
734 			break;
735 		case PDR_PRISM_ZIF_TX_IQ_CALIBRATION:
736 			priv->iq_autocal = kmemdup(entry->data, data_len,
737 						   GFP_KERNEL);
738 			if (!priv->iq_autocal) {
739 				err = -ENOMEM;
740 				goto err;
741 			}
742 
743 			priv->iq_autocal_len = data_len / sizeof(struct pda_iq_autocal_entry);
744 			break;
745 		case PDR_DEFAULT_COUNTRY:
746 			p54_parse_default_country(dev, entry->data, data_len);
747 			break;
748 		case PDR_INTERFACE_LIST:
749 			tmp = entry->data;
750 			while ((u8 *)tmp < entry->data + data_len) {
751 				struct exp_if *exp_if = tmp;
752 				if (exp_if->if_id == cpu_to_le16(IF_ID_ISL39000))
753 					synth = le16_to_cpu(exp_if->variant);
754 				tmp += sizeof(*exp_if);
755 			}
756 			break;
757 		case PDR_HARDWARE_PLATFORM_COMPONENT_ID:
758 			if (data_len < 2)
759 				break;
760 			priv->version = *(u8 *)(entry->data + 1);
761 			break;
762 		case PDR_RSSI_LINEAR_APPROXIMATION:
763 		case PDR_RSSI_LINEAR_APPROXIMATION_DUAL_BAND:
764 		case PDR_RSSI_LINEAR_APPROXIMATION_EXTENDED:
765 			err = p54_parse_rssical(dev, entry->data, data_len,
766 						le16_to_cpu(entry->code));
767 			if (err)
768 				goto err;
769 			break;
770 		case PDR_RSSI_LINEAR_APPROXIMATION_CUSTOMV2: {
771 			struct pda_custom_wrapper *pda = (void *) entry->data;
772 			__le16 *src;
773 			u16 *dst;
774 			int i;
775 
776 			if (priv->rssi_db || data_len < sizeof(*pda))
777 				break;
778 
779 			priv->rssi_db = p54_convert_db(pda, data_len);
780 			if (!priv->rssi_db)
781 				break;
782 
783 			src = (void *) priv->rssi_db->data;
784 			dst = (void *) priv->rssi_db->data;
785 
786 			for (i = 0; i < priv->rssi_db->entries; i++)
787 				*(dst++) = (s16) le16_to_cpu(*(src++));
788 
789 			}
790 			break;
791 		case PDR_PRISM_PA_CAL_OUTPUT_POWER_LIMITS_CUSTOM: {
792 			struct pda_custom_wrapper *pda = (void *) entry->data;
793 			if (priv->output_limit || data_len < sizeof(*pda))
794 				break;
795 			priv->output_limit = p54_convert_db(pda, data_len);
796 			}
797 			break;
798 		case PDR_PRISM_PA_CAL_CURVE_DATA_CUSTOM: {
799 			struct pda_custom_wrapper *pda = (void *) entry->data;
800 			if (priv->curve_data || data_len < sizeof(*pda))
801 				break;
802 			priv->curve_data = p54_convert_db(pda, data_len);
803 			}
804 			break;
805 		case PDR_END:
806 			crc16 = ~crc_ccitt(crc16, (u8 *) entry, sizeof(*entry));
807 			if (crc16 != le16_to_cpup((__le16 *)entry->data)) {
808 				wiphy_err(dev->wiphy, "eeprom failed checksum "
809 					 "test!\n");
810 				err = -ENOMSG;
811 				goto err;
812 			} else {
813 				goto good_eeprom;
814 			}
815 			break;
816 		default:
817 			break;
818 		}
819 
820 		crc16 = crc_ccitt(crc16, (u8 *)entry, (entry_len + 1) * 2);
821 		entry = (void *)entry + (entry_len + 1) * 2;
822 	}
823 
824 	wiphy_err(dev->wiphy, "unexpected end of eeprom data.\n");
825 	err = -ENODATA;
826 	goto err;
827 
828 good_eeprom:
829 	if (!synth || !priv->iq_autocal || !priv->output_limit ||
830 	    !priv->curve_data) {
831 		wiphy_err(dev->wiphy,
832 			  "not all required entries found in eeprom!\n");
833 		err = -EINVAL;
834 		goto err;
835 	}
836 
837 	err = p54_generate_channel_lists(dev);
838 	if (err)
839 		goto err;
840 
841 	priv->rxhw = synth & PDR_SYNTH_FRONTEND_MASK;
842 	if (priv->rxhw == PDR_SYNTH_FRONTEND_XBOW)
843 		p54_init_xbow_synth(priv);
844 	if (!(synth & PDR_SYNTH_24_GHZ_DISABLED))
845 		dev->wiphy->bands[IEEE80211_BAND_2GHZ] =
846 			priv->band_table[IEEE80211_BAND_2GHZ];
847 	if (!(synth & PDR_SYNTH_5_GHZ_DISABLED))
848 		dev->wiphy->bands[IEEE80211_BAND_5GHZ] =
849 			priv->band_table[IEEE80211_BAND_5GHZ];
850 	if ((synth & PDR_SYNTH_RX_DIV_MASK) == PDR_SYNTH_RX_DIV_SUPPORTED)
851 		priv->rx_diversity_mask = 3;
852 	if ((synth & PDR_SYNTH_TX_DIV_MASK) == PDR_SYNTH_TX_DIV_SUPPORTED)
853 		priv->tx_diversity_mask = 3;
854 
855 	if (!is_valid_ether_addr(dev->wiphy->perm_addr)) {
856 		u8 perm_addr[ETH_ALEN];
857 
858 		wiphy_warn(dev->wiphy,
859 			   "Invalid hwaddr! Using randomly generated MAC addr\n");
860 		random_ether_addr(perm_addr);
861 		SET_IEEE80211_PERM_ADDR(dev, perm_addr);
862 	}
863 
864 	priv->cur_rssi = &p54_rssi_default;
865 
866 	wiphy_info(dev->wiphy, "hwaddr %pM, MAC:isl38%02x RF:%s\n",
867 		   dev->wiphy->perm_addr, priv->version,
868 		   p54_rf_chips[priv->rxhw]);
869 
870 	return 0;
871 
872 err:
873 	kfree(priv->iq_autocal);
874 	kfree(priv->output_limit);
875 	kfree(priv->curve_data);
876 	kfree(priv->rssi_db);
877 	kfree(priv->survey);
878 	priv->iq_autocal = NULL;
879 	priv->output_limit = NULL;
880 	priv->curve_data = NULL;
881 	priv->rssi_db = NULL;
882 	priv->survey = NULL;
883 
884 	wiphy_err(dev->wiphy, "eeprom parse failed!\n");
885 	return err;
886 }
887 EXPORT_SYMBOL_GPL(p54_parse_eeprom);
888 
p54_read_eeprom(struct ieee80211_hw * dev)889 int p54_read_eeprom(struct ieee80211_hw *dev)
890 {
891 	struct p54_common *priv = dev->priv;
892 	size_t eeprom_size = 0x2020, offset = 0, blocksize, maxblocksize;
893 	int ret = -ENOMEM;
894 	void *eeprom;
895 
896 	maxblocksize = EEPROM_READBACK_LEN;
897 	if (priv->fw_var >= 0x509)
898 		maxblocksize -= 0xc;
899 	else
900 		maxblocksize -= 0x4;
901 
902 	eeprom = kzalloc(eeprom_size, GFP_KERNEL);
903 	if (unlikely(!eeprom))
904 		goto free;
905 
906 	while (eeprom_size) {
907 		blocksize = min(eeprom_size, maxblocksize);
908 		ret = p54_download_eeprom(priv, (void *) (eeprom + offset),
909 					  offset, blocksize);
910 		if (unlikely(ret))
911 			goto free;
912 
913 		offset += blocksize;
914 		eeprom_size -= blocksize;
915 	}
916 
917 	ret = p54_parse_eeprom(dev, eeprom, offset);
918 free:
919 	kfree(eeprom);
920 	return ret;
921 }
922 EXPORT_SYMBOL_GPL(p54_read_eeprom);
923