drivers/staging/ks7010/ks_hostif.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  *   Driver for KeyStream wireless LAN cards.
   4  *
   5  *   Copyright (C) 2005-2008 KeyStream Corp.
   6  *   Copyright (C) 2009 Renesas Technology Corp.
   7  */
   8
   9 #include <crypto/hash.h>
  10 #include <linux/circ_buf.h>
  11 #include <linux/if_arp.h>
  12 #include <net/iw_handler.h>
  13 #include <uapi/linux/llc.h>
  14 #include "eap_packet.h"
  15 #include "ks_wlan.h"
  16 #include "ks_hostif.h"
  17
  18 #define MICHAEL_MIC_KEY_LEN 8
  19 #define MICHAEL_MIC_LEN     8
  20
  21 static inline void inc_smeqhead(struct ks_wlan_private *priv)
  22 {
  23         priv->sme_i.qhead = (priv->sme_i.qhead + 1) % SME_EVENT_BUFF_SIZE;
  24 }
  25
  26 static inline void inc_smeqtail(struct ks_wlan_private *priv)
  27 {
  28         priv->sme_i.qtail = (priv->sme_i.qtail + 1) % SME_EVENT_BUFF_SIZE;
  29 }
  30
  31 static inline unsigned int cnt_smeqbody(struct ks_wlan_private *priv)
  32 {
  33         return CIRC_CNT_TO_END(priv->sme_i.qhead, priv->sme_i.qtail,
  34                                SME_EVENT_BUFF_SIZE);
  35 }
  36
  37 static inline u8 get_byte(struct ks_wlan_private *priv)
  38 {
  39         u8 data;
  40
  41         data = *priv->rxp++;
  42         /* length check in advance ! */
  43         --(priv->rx_size);
  44         return data;
  45 }
  46
  47 static inline u16 get_word(struct ks_wlan_private *priv)
  48 {
  49         u16 data;
  50
  51         data = (get_byte(priv) & 0xff);
  52         data |= ((get_byte(priv) << 8) & 0xff00);
  53         return data;
  54 }
  55
  56 static inline u32 get_dword(struct ks_wlan_private *priv)
  57 {
  58         u32 data;
  59
  60         data = (get_byte(priv) & 0xff);
  61         data |= ((get_byte(priv) << 8) & 0x0000ff00);
  62         data |= ((get_byte(priv) << 16) & 0x00ff0000);
  63         data |= ((get_byte(priv) << 24) & 0xff000000);
  64         return data;
  65 }
  66
  67 static void ks_wlan_hw_wakeup_task(struct work_struct *work)
  68 {
  69         struct ks_wlan_private *priv;
  70         int ps_status;
  71         long time_left;
  72
  73         priv = container_of(work, struct ks_wlan_private, wakeup_work);
  74         ps_status = atomic_read(&priv->psstatus.status);
  75
  76         if (ps_status == PS_SNOOZE) {
  77                 ks_wlan_hw_wakeup_request(priv);
  78                 time_left = wait_for_completion_interruptible_timeout(&priv->psstatus.wakeup_wait,
  79                                                                       msecs_to_jiffies(20));
  80                 if (time_left <= 0) {
  81                         netdev_dbg(priv->net_dev, "wake up timeout or interrupted !!!\n");
  82                         schedule_work(&priv->wakeup_work);
  83                         return;
  84                 }
  85         }
  86 }
  87
  88 static void ks_wlan_do_power_save(struct ks_wlan_private *priv)
  89 {
  90         if (is_connect_status(priv->connect_status))
  91                 hostif_sme_enqueue(priv, SME_POW_MNGMT_REQUEST);
  92         else
  93                 priv->dev_state = DEVICE_STATE_READY;
  94 }
  95
  96 static
  97 int get_current_ap(struct ks_wlan_private *priv, struct link_ap_info *ap_info)
  98 {
  99         struct local_ap *ap;
 100         union iwreq_data wrqu;
 101         struct net_device *netdev = priv->net_dev;
 102         u8 size;
 103
 104         ap = &priv->current_ap;
 105
 106         if (is_disconnect_status(priv->connect_status)) {
 107                 memset(ap, 0, sizeof(struct local_ap));
 108                 return -EPERM;
 109         }
 110
 111         ether_addr_copy(ap->bssid, ap_info->bssid);
 112         memcpy(ap->ssid.body, priv->reg.ssid.body,
 113                priv->reg.ssid.size);
 114         ap->ssid.size = priv->reg.ssid.size;
 115         memcpy(ap->rate_set.body, ap_info->rate_set.body,
 116                ap_info->rate_set.size);
 117         ap->rate_set.size = ap_info->rate_set.size;
 118         if (ap_info->ext_rate_set.size != 0) {
 119                 memcpy(&ap->rate_set.body[ap->rate_set.size],
 120                        ap_info->ext_rate_set.body,
 121                        ap_info->ext_rate_set.size);
 122                 ap->rate_set.size += ap_info->ext_rate_set.size;
 123         }
 124         ap->channel = ap_info->ds_parameter.channel;
 125         ap->rssi = ap_info->rssi;
 126         ap->sq = ap_info->sq;
 127         ap->noise = ap_info->noise;
 128         ap->capability = le16_to_cpu(ap_info->capability);
 129         size = (ap_info->rsn.size <= RSN_IE_BODY_MAX) ?
 130                 ap_info->rsn.size : RSN_IE_BODY_MAX;
 131         if ((ap_info->rsn_mode & RSN_MODE_WPA2) &&
 132             (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2)) {
 133                 ap->rsn_ie.id = RSN_INFO_ELEM_ID;
 134                 ap->rsn_ie.size = size;
 135                 memcpy(ap->rsn_ie.body, ap_info->rsn.body, size);
 136         } else if ((ap_info->rsn_mode & RSN_MODE_WPA) &&
 137                    (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA)) {
 138                 ap->wpa_ie.id = WPA_INFO_ELEM_ID;
 139                 ap->wpa_ie.size = size;
 140                 memcpy(ap->wpa_ie.body, ap_info->rsn.body, size);
 141         } else {
 142                 ap->rsn_ie.id = 0;
 143                 ap->rsn_ie.size = 0;
 144                 ap->wpa_ie.id = 0;
 145                 ap->wpa_ie.size = 0;
 146         }
 147
 148         wrqu.data.length = 0;
 149         wrqu.data.flags = 0;
 150         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 151         if (is_connect_status(priv->connect_status)) {
 152                 ether_addr_copy(wrqu.ap_addr.sa_data, priv->current_ap.bssid);
 153                 netdev_dbg(priv->net_dev,
 154                            "IWEVENT: connect bssid=%pM\n",
 155                            wrqu.ap_addr.sa_data);
 156                 wireless_send_event(netdev, SIOCGIWAP, &wrqu, NULL);
 157         }
 158         netdev_dbg(priv->net_dev, "Link AP\n"
 159                    "- bssid=%pM\n"
 160                    "- essid=%s\n"
 161                    "- rate_set=%02X,%02X,%02X,%02X,%02X,%02X,%02X,%02X\n"
 162                    "- channel=%d\n"
 163                    "- rssi=%d\n"
 164                    "- sq=%d\n"
 165                    "- capability=%04X\n"
 166                    "- rsn.mode=%d\n"
 167                    "- rsn.size=%d\n"
 168                    "- ext_rate_set_size=%d\n"
 169                    "- rate_set_size=%d\n",
 170                    ap->bssid,
 171                    &ap->ssid.body[0],
 172                    ap->rate_set.body[0], ap->rate_set.body[1],
 173                    ap->rate_set.body[2], ap->rate_set.body[3],
 174                    ap->rate_set.body[4], ap->rate_set.body[5],
 175                    ap->rate_set.body[6], ap->rate_set.body[7],
 176                    ap->channel, ap->rssi, ap->sq, ap->capability,
 177                    ap_info->rsn_mode, ap_info->rsn.size,
 178                    ap_info->ext_rate_set.size, ap_info->rate_set.size);
 179
 180         return 0;
 181 }
 182
 183 static u8 read_ie(unsigned char *bp, u8 max, u8 *body)
 184 {
 185         u8 size = (*(bp + 1) <= max) ? *(bp + 1) : max;
 186
 187         memcpy(body, bp + 2, size);
 188         return size;
 189 }
 190
 191 static int
 192 michael_mic(u8 *key, u8 *data, unsigned int len, u8 priority, u8 *result)
 193 {
 194         u8 pad_data[4] = { priority, 0, 0, 0 };
 195         struct crypto_shash *tfm = NULL;
 196         struct shash_desc *desc = NULL;
 197         int ret;
 198
 199         tfm = crypto_alloc_shash("michael_mic", 0, 0);
 200         if (IS_ERR(tfm)) {
 201                 ret = PTR_ERR(tfm);
 202                 goto err;
 203         }
 204
 205         ret = crypto_shash_setkey(tfm, key, MICHAEL_MIC_KEY_LEN);
 206         if (ret < 0)
 207                 goto err_free_tfm;
 208
 209         desc = kmalloc(sizeof(*desc) + crypto_shash_descsize(tfm), GFP_KERNEL);
 210         if (!desc) {
 211                 ret = -ENOMEM;
 212                 goto err_free_tfm;
 213         }
 214
 215         desc->tfm = tfm;
 216
 217         ret = crypto_shash_init(desc);
 218         if (ret < 0)
 219                 goto err_free_desc;
 220
 221         // Compute the MIC value
 222         /*
 223          * IEEE802.11i  page 47
 224          * Figure 43g TKIP MIC processing format
 225          * +--+--+--------+--+----+--+--+--+--+--+--+--+--+
 226          * |6 |6 |1       |3 |M   |1 |1 |1 |1 |1 |1 |1 |1 | Octet
 227          * +--+--+--------+--+----+--+--+--+--+--+--+--+--+
 228          * |DA|SA|Priority|0 |Data|M0|M1|M2|M3|M4|M5|M6|M7|
 229          * +--+--+--------+--+----+--+--+--+--+--+--+--+--+
 230          */
 231
 232         ret = crypto_shash_update(desc, data, 12);
 233         if (ret < 0)
 234                 goto err_free_desc;
 235
 236         ret = crypto_shash_update(desc, pad_data, 4);
 237         if (ret < 0)
 238                 goto err_free_desc;
 239
 240         ret = crypto_shash_finup(desc, data + 12, len - 12, result);
 241
 242 err_free_desc:
 243         kfree_sensitive(desc);
 244
 245 err_free_tfm:
 246         crypto_free_shash(tfm);
 247
 248 err:
 249         return ret;
 250 }
 251
 252 static
 253 int get_ap_information(struct ks_wlan_private *priv, struct ap_info *ap_info,
 254                        struct local_ap *ap)
 255 {
 256         unsigned char *bp;
 257         int bsize, offset;
 258
 259         memset(ap, 0, sizeof(struct local_ap));
 260
 261         ether_addr_copy(ap->bssid, ap_info->bssid);
 262         ap->rssi = ap_info->rssi;
 263         ap->sq = ap_info->sq;
 264         ap->noise = ap_info->noise;
 265         ap->capability = le16_to_cpu(ap_info->capability);
 266         ap->channel = ap_info->ch_info;
 267
 268         bp = ap_info->body;
 269         bsize = le16_to_cpu(ap_info->body_size);
 270         offset = 0;
 271
 272         while (bsize > offset) {
 273                 switch (*bp) { /* Information Element ID */
 274                 case WLAN_EID_SSID:
 275                         ap->ssid.size = read_ie(bp, IEEE80211_MAX_SSID_LEN,
 276                                                 ap->ssid.body);
 277                         break;
 278                 case WLAN_EID_SUPP_RATES:
 279                 case WLAN_EID_EXT_SUPP_RATES:
 280                         if ((*(bp + 1) + ap->rate_set.size) <=
 281                             RATE_SET_MAX_SIZE) {
 282                                 memcpy(&ap->rate_set.body[ap->rate_set.size],
 283                                        bp + 2, *(bp + 1));
 284                                 ap->rate_set.size += *(bp + 1);
 285                         } else {
 286                                 memcpy(&ap->rate_set.body[ap->rate_set.size],
 287                                        bp + 2,
 288                                        RATE_SET_MAX_SIZE - ap->rate_set.size);
 289                                 ap->rate_set.size +=
 290                                     (RATE_SET_MAX_SIZE - ap->rate_set.size);
 291                         }
 292                         break;
 293                 case WLAN_EID_RSN:
 294                         ap->rsn_ie.id = *bp;
 295                         ap->rsn_ie.size = read_ie(bp, RSN_IE_BODY_MAX,
 296                                                   ap->rsn_ie.body);
 297                         break;
 298                 case WLAN_EID_VENDOR_SPECIFIC: /* WPA */
 299                         /* WPA OUI check */
 300                         if (memcmp(bp + 2, CIPHER_ID_WPA_WEP40, 4) == 0) {
 301                                 ap->wpa_ie.id = *bp;
 302                                 ap->wpa_ie.size = read_ie(bp, RSN_IE_BODY_MAX,
 303                                                           ap->wpa_ie.body);
 304                         }
 305                         break;
 306                 case WLAN_EID_DS_PARAMS:
 307                 case WLAN_EID_FH_PARAMS:
 308                 case WLAN_EID_CF_PARAMS:
 309                 case WLAN_EID_TIM:
 310                 case WLAN_EID_IBSS_PARAMS:
 311                 case WLAN_EID_COUNTRY:
 312                 case WLAN_EID_ERP_INFO:
 313                         break;
 314                 default:
 315                         netdev_err(priv->net_dev,
 316                                    "unknown Element ID=%d\n", *bp);
 317                         break;
 318                 }
 319
 320                 offset += 2;    /* id & size field */
 321                 offset += *(bp + 1);    /* +size offset */
 322                 bp += (*(bp + 1) + 2);  /* pointer update */
 323         }
 324
 325         return 0;
 326 }
 327
 328 static
 329 int hostif_data_indication_wpa(struct ks_wlan_private *priv,
 330                                unsigned short auth_type)
 331 {
 332         struct ether_hdr *eth_hdr;
 333         unsigned short eth_proto;
 334         unsigned char recv_mic[MICHAEL_MIC_LEN];
 335         char buf[128];
 336         unsigned long now;
 337         struct mic_failure *mic_failure;
 338         u8 mic[MICHAEL_MIC_LEN];
 339         union iwreq_data wrqu;
 340         unsigned int key_index = auth_type - 1;
 341         struct wpa_key *key = &priv->wpa.key[key_index];
 342
 343         eth_hdr = (struct ether_hdr *)(priv->rxp);
 344         eth_proto = ntohs(eth_hdr->h_proto);
 345
 346         if (eth_hdr->h_dest_snap != eth_hdr->h_source_snap) {
 347                 netdev_err(priv->net_dev, "invalid data format\n");
 348                 priv->nstats.rx_errors++;
 349                 return -EINVAL;
 350         }
 351         if (((auth_type == TYPE_PMK1 &&
 352               priv->wpa.pairwise_suite == IW_AUTH_CIPHER_TKIP) ||
 353              (auth_type == TYPE_GMK1 &&
 354               priv->wpa.group_suite == IW_AUTH_CIPHER_TKIP) ||
 355              (auth_type == TYPE_GMK2 &&
 356               priv->wpa.group_suite == IW_AUTH_CIPHER_TKIP)) &&
 357             key->key_len) {
 358                 int ret;
 359
 360                 netdev_dbg(priv->net_dev, "TKIP: protocol=%04X: size=%u\n",
 361                            eth_proto, priv->rx_size);
 362                 /* MIC save */
 363                 memcpy(&recv_mic[0],
 364                        (priv->rxp) + ((priv->rx_size) - sizeof(recv_mic)),
 365                        sizeof(recv_mic));
 366                 priv->rx_size = priv->rx_size - sizeof(recv_mic);
 367
 368                 ret = michael_mic(key->rx_mic_key, priv->rxp, priv->rx_size,
 369                                   0, mic);
 370                 if (ret < 0)
 371                         return ret;
 372                 if (memcmp(mic, recv_mic, sizeof(mic)) != 0) {
 373                         now = jiffies;
 374                         mic_failure = &priv->wpa.mic_failure;
 375                         /* MIC FAILURE */
 376                         if (mic_failure->last_failure_time &&
 377                             (now - mic_failure->last_failure_time) / HZ >= 60) {
 378                                 mic_failure->failure = 0;
 379                         }
 380                         netdev_err(priv->net_dev, "MIC FAILURE\n");
 381                         if (mic_failure->failure == 0) {
 382                                 mic_failure->failure = 1;
 383                                 mic_failure->counter = 0;
 384                         } else if (mic_failure->failure == 1) {
 385                                 mic_failure->failure = 2;
 386                                 mic_failure->counter =
 387                                         (u16)((now - mic_failure->last_failure_time) / HZ);
 388                                 /*  range 1-60 */
 389                                 if (!mic_failure->counter)
 390                                         mic_failure->counter = 1;
 391                         }
 392                         priv->wpa.mic_failure.last_failure_time = now;
 393
 394                         /*  needed parameters: count, keyid, key type, TSC */
 395                         sprintf(buf,
 396                                 "MLME-MICHAELMICFAILURE.indication(keyid=%d %scast addr=%pM)",
 397                                 key_index,
 398                                 eth_hdr->h_dest[0] & 0x01 ? "broad" : "uni",
 399                                 eth_hdr->h_source);
 400                         memset(&wrqu, 0, sizeof(wrqu));
 401                         wrqu.data.length = strlen(buf);
 402                         wireless_send_event(priv->net_dev, IWEVCUSTOM, &wrqu,
 403                                             buf);
 404                         return -EINVAL;
 405                 }
 406         }
 407         return 0;
 408 }
 409
 410 static
 411 void hostif_data_indication(struct ks_wlan_private *priv)
 412 {
 413         unsigned int rx_ind_size;       /* indicate data size */
 414         struct sk_buff *skb;
 415         u16 auth_type;
 416         unsigned char temp[256];
 417         struct ether_hdr *eth_hdr;
 418         struct ieee802_1x_hdr *aa1x_hdr;
 419         size_t size;
 420         int ret;
 421
 422         /* min length check */
 423         if (priv->rx_size <= ETH_HLEN) {
 424                 priv->nstats.rx_errors++;
 425                 return;
 426         }
 427
 428         auth_type = get_word(priv);     /* AuthType */
 429         get_word(priv); /* Reserve Area */
 430
 431         eth_hdr = (struct ether_hdr *)(priv->rxp);
 432
 433         /* source address check */
 434         if (ether_addr_equal(&priv->eth_addr[0], eth_hdr->h_source)) {
 435                 netdev_err(priv->net_dev, "invalid : source is own mac address !!\n");
 436                 netdev_err(priv->net_dev, "eth_hdrernet->h_dest=%pM\n", eth_hdr->h_source);
 437                 priv->nstats.rx_errors++;
 438                 return;
 439         }
 440
 441         /*  for WPA */
 442         if (auth_type != TYPE_DATA && priv->wpa.rsn_enabled) {
 443                 ret = hostif_data_indication_wpa(priv, auth_type);
 444                 if (ret)
 445                         return;
 446         }
 447
 448         if ((priv->connect_status & FORCE_DISCONNECT) ||
 449             priv->wpa.mic_failure.failure == 2) {
 450                 return;
 451         }
 452
 453         /* check 13th byte at rx data */
 454         switch (*(priv->rxp + 12)) {
 455         case LLC_SAP_SNAP:
 456                 rx_ind_size = priv->rx_size - 6;
 457                 skb = dev_alloc_skb(rx_ind_size);
 458                 if (!skb) {
 459                         priv->nstats.rx_dropped++;
 460                         return;
 461                 }
 462                 netdev_dbg(priv->net_dev, "SNAP, rx_ind_size = %d\n",
 463                            rx_ind_size);
 464
 465                 size = ETH_ALEN * 2;
 466                 skb_put_data(skb, priv->rxp, size);
 467
 468                 /* (SNAP+UI..) skip */
 469
 470                 size = rx_ind_size - (ETH_ALEN * 2);
 471                 skb_put_data(skb, &eth_hdr->h_proto, size);
 472
 473                 aa1x_hdr = (struct ieee802_1x_hdr *)(priv->rxp + ETHER_HDR_SIZE);
 474                 break;
 475         case LLC_SAP_NETBEUI:
 476                 rx_ind_size = (priv->rx_size + 2);
 477                 skb = dev_alloc_skb(rx_ind_size);
 478                 if (!skb) {
 479                         priv->nstats.rx_dropped++;
 480                         return;
 481                 }
 482                 netdev_dbg(priv->net_dev, "NETBEUI/NetBIOS rx_ind_size=%d\n",
 483                            rx_ind_size);
 484
 485                 /* 8802/FDDI MAC copy */
 486                 skb_put_data(skb, priv->rxp, 12);
 487
 488                 /* NETBEUI size add */
 489                 temp[0] = (((rx_ind_size - 12) >> 8) & 0xff);
 490                 temp[1] = ((rx_ind_size - 12) & 0xff);
 491                 skb_put_data(skb, temp, 2);
 492
 493                 /* copy after Type */
 494                 skb_put_data(skb, priv->rxp + 12, rx_ind_size - 14);
 495
 496                 aa1x_hdr = (struct ieee802_1x_hdr *)(priv->rxp + 14);
 497                 break;
 498         default:        /* other rx data */
 499                 netdev_err(priv->net_dev, "invalid data format\n");
 500                 priv->nstats.rx_errors++;
 501                 return;
 502         }
 503
 504         if (aa1x_hdr->type == IEEE802_1X_TYPE_EAPOL_KEY &&
 505             priv->wpa.rsn_enabled)
 506                 atomic_set(&priv->psstatus.snooze_guard, 1);
 507
 508         /* rx indication */
 509         skb->dev = priv->net_dev;
 510         skb->protocol = eth_type_trans(skb, skb->dev);
 511         priv->nstats.rx_packets++;
 512         priv->nstats.rx_bytes += rx_ind_size;
 513         netif_rx(skb);
 514 }
 515
 516 static
 517 void hostif_mib_get_confirm(struct ks_wlan_private *priv)
 518 {
 519         struct net_device *dev = priv->net_dev;
 520         u32 mib_status;
 521         u32 mib_attribute;
 522
 523         mib_status = get_dword(priv);
 524         mib_attribute = get_dword(priv);
 525         get_word(priv); /* mib_val_size */
 526         get_word(priv); /* mib_val_type */
 527
 528         if (mib_status) {
 529                 netdev_err(priv->net_dev, "attribute=%08X, status=%08X\n",
 530                            mib_attribute, mib_status);
 531                 return;
 532         }
 533
 534         switch (mib_attribute) {
 535         case DOT11_MAC_ADDRESS:
 536                 hostif_sme_enqueue(priv, SME_GET_MAC_ADDRESS);
 537                 ether_addr_copy(priv->eth_addr, priv->rxp);
 538                 priv->mac_address_valid = true;
 539                 eth_hw_addr_set(dev, priv->eth_addr);
 540                 netdev_info(dev, "MAC ADDRESS = %pM\n", priv->eth_addr);
 541                 break;
 542         case DOT11_PRODUCT_VERSION:
 543                 priv->version_size = priv->rx_size;
 544                 memcpy(priv->firmware_version, priv->rxp, priv->rx_size);
 545                 priv->firmware_version[priv->rx_size] = '\0';
 546                 netdev_info(dev, "firmware ver. = %s\n",
 547                             priv->firmware_version);
 548                 hostif_sme_enqueue(priv, SME_GET_PRODUCT_VERSION);
 549                 /* wake_up_interruptible_all(&priv->confirm_wait); */
 550                 complete(&priv->confirm_wait);
 551                 break;
 552         case LOCAL_GAIN:
 553                 memcpy(&priv->gain, priv->rxp, sizeof(priv->gain));
 554                 netdev_dbg(priv->net_dev, "tx_mode=%d, rx_mode=%d, tx_gain=%d, rx_gain=%d\n",
 555                            priv->gain.tx_mode, priv->gain.rx_mode,
 556                            priv->gain.tx_gain, priv->gain.rx_gain);
 557                 break;
 558         case LOCAL_EEPROM_SUM:
 559                 memcpy(&priv->eeprom_sum, priv->rxp, sizeof(priv->eeprom_sum));
 560                 if (priv->eeprom_sum.type != 0 &&
 561                     priv->eeprom_sum.type != 1) {
 562                         netdev_err(dev, "LOCAL_EEPROM_SUM error!\n");
 563                         return;
 564                 }
 565                 priv->eeprom_checksum = (priv->eeprom_sum.type == 0) ?
 566                                          EEPROM_CHECKSUM_NONE :
 567                                          (priv->eeprom_sum.result == 0) ?
 568                                          EEPROM_NG : EEPROM_OK;
 569                 break;
 570         default:
 571                 netdev_err(priv->net_dev, "mib_attribute=%08x\n",
 572                            (unsigned int)mib_attribute);
 573                 break;
 574         }
 575 }
 576
 577 static
 578 void hostif_mib_set_confirm(struct ks_wlan_private *priv)
 579 {
 580         u32 mib_status;
 581         u32 mib_attribute;
 582
 583         mib_status = get_dword(priv);
 584         mib_attribute = get_dword(priv);
 585
 586         if (mib_status) {
 587                 /* in case of error */
 588                 netdev_err(priv->net_dev, "error :: attribute=%08X, status=%08X\n",
 589                            mib_attribute, mib_status);
 590         }
 591
 592         switch (mib_attribute) {
 593         case DOT11_RTS_THRESHOLD:
 594                 hostif_sme_enqueue(priv, SME_RTS_THRESHOLD_CONFIRM);
 595                 break;
 596         case DOT11_FRAGMENTATION_THRESHOLD:
 597                 hostif_sme_enqueue(priv, SME_FRAGMENTATION_THRESHOLD_CONFIRM);
 598                 break;
 599         case DOT11_WEP_DEFAULT_KEY_ID:
 600                 if (!priv->wpa.wpa_enabled)
 601                         hostif_sme_enqueue(priv, SME_WEP_INDEX_CONFIRM);
 602                 break;
 603         case DOT11_WEP_DEFAULT_KEY_VALUE1:
 604                 if (priv->wpa.rsn_enabled)
 605                         hostif_sme_enqueue(priv, SME_SET_PMK_TSC);
 606                 else
 607                         hostif_sme_enqueue(priv, SME_WEP_KEY1_CONFIRM);
 608                 break;
 609         case DOT11_WEP_DEFAULT_KEY_VALUE2:
 610                 if (priv->wpa.rsn_enabled)
 611                         hostif_sme_enqueue(priv, SME_SET_GMK1_TSC);
 612                 else
 613                         hostif_sme_enqueue(priv, SME_WEP_KEY2_CONFIRM);
 614                 break;
 615         case DOT11_WEP_DEFAULT_KEY_VALUE3:
 616                 if (priv->wpa.rsn_enabled)
 617                         hostif_sme_enqueue(priv, SME_SET_GMK2_TSC);
 618                 else
 619                         hostif_sme_enqueue(priv, SME_WEP_KEY3_CONFIRM);
 620                 break;
 621         case DOT11_WEP_DEFAULT_KEY_VALUE4:
 622                 if (!priv->wpa.rsn_enabled)
 623                         hostif_sme_enqueue(priv, SME_WEP_KEY4_CONFIRM);
 624                 break;
 625         case DOT11_PRIVACY_INVOKED:
 626                 if (!priv->wpa.rsn_enabled)
 627                         hostif_sme_enqueue(priv, SME_WEP_FLAG_CONFIRM);
 628                 break;
 629         case DOT11_RSN_ENABLED:
 630                 hostif_sme_enqueue(priv, SME_RSN_ENABLED_CONFIRM);
 631                 break;
 632         case LOCAL_RSN_MODE:
 633                 hostif_sme_enqueue(priv, SME_RSN_MODE_CONFIRM);
 634                 break;
 635         case LOCAL_MULTICAST_ADDRESS:
 636                 hostif_sme_enqueue(priv, SME_MULTICAST_REQUEST);
 637                 break;
 638         case LOCAL_MULTICAST_FILTER:
 639                 hostif_sme_enqueue(priv, SME_MULTICAST_CONFIRM);
 640                 break;
 641         case LOCAL_CURRENTADDRESS:
 642                 priv->mac_address_valid = true;
 643                 break;
 644         case DOT11_RSN_CONFIG_MULTICAST_CIPHER:
 645                 hostif_sme_enqueue(priv, SME_RSN_MCAST_CONFIRM);
 646                 break;
 647         case DOT11_RSN_CONFIG_UNICAST_CIPHER:
 648                 hostif_sme_enqueue(priv, SME_RSN_UCAST_CONFIRM);
 649                 break;
 650         case DOT11_RSN_CONFIG_AUTH_SUITE:
 651                 hostif_sme_enqueue(priv, SME_RSN_AUTH_CONFIRM);
 652                 break;
 653         case DOT11_GMK1_TSC:
 654                 if (atomic_read(&priv->psstatus.snooze_guard))
 655                         atomic_set(&priv->psstatus.snooze_guard, 0);
 656                 break;
 657         case DOT11_GMK2_TSC:
 658                 if (atomic_read(&priv->psstatus.snooze_guard))
 659                         atomic_set(&priv->psstatus.snooze_guard, 0);
 660                 break;
 661         case DOT11_PMK_TSC:
 662         case LOCAL_PMK:
 663         case LOCAL_GAIN:
 664         case LOCAL_WPS_ENABLE:
 665         case LOCAL_WPS_PROBE_REQ:
 666         case LOCAL_REGION:
 667         default:
 668                 break;
 669         }
 670 }
 671
 672 static
 673 void hostif_power_mgmt_confirm(struct ks_wlan_private *priv)
 674 {
 675         if (priv->reg.power_mgmt > POWER_MGMT_ACTIVE &&
 676             priv->reg.operation_mode == MODE_INFRASTRUCTURE) {
 677                 atomic_set(&priv->psstatus.confirm_wait, 0);
 678                 priv->dev_state = DEVICE_STATE_SLEEP;
 679                 ks_wlan_hw_power_save(priv);
 680         } else {
 681                 priv->dev_state = DEVICE_STATE_READY;
 682         }
 683 }
 684
 685 static
 686 void hostif_sleep_confirm(struct ks_wlan_private *priv)
 687 {
 688         atomic_set(&priv->sleepstatus.doze_request, 1);
 689         queue_delayed_work(priv->wq, &priv->rw_dwork, 1);
 690 }
 691
 692 static
 693 void hostif_start_confirm(struct ks_wlan_private *priv)
 694 {
 695         union iwreq_data wrqu;
 696
 697         wrqu.data.length = 0;
 698         wrqu.data.flags = 0;
 699         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 700         if (is_connect_status(priv->connect_status)) {
 701                 eth_zero_addr(wrqu.ap_addr.sa_data);
 702                 wireless_send_event(priv->net_dev, SIOCGIWAP, &wrqu, NULL);
 703         }
 704         netdev_dbg(priv->net_dev, " scan_ind_count=%d\n", priv->scan_ind_count);
 705         hostif_sme_enqueue(priv, SME_START_CONFIRM);
 706 }
 707
 708 static
 709 void hostif_connect_indication(struct ks_wlan_private *priv)
 710 {
 711         u16 connect_code;
 712         unsigned int tmp = 0;
 713         unsigned int old_status = priv->connect_status;
 714         struct net_device *netdev = priv->net_dev;
 715         union iwreq_data wrqu0;
 716
 717         connect_code = get_word(priv);
 718
 719         switch (connect_code) {
 720         case RESULT_CONNECT:
 721                 if (!(priv->connect_status & FORCE_DISCONNECT))
 722                         netif_carrier_on(netdev);
 723                 tmp = FORCE_DISCONNECT & priv->connect_status;
 724                 priv->connect_status = tmp + CONNECT_STATUS;
 725                 break;
 726         case RESULT_DISCONNECT:
 727                 netif_carrier_off(netdev);
 728                 tmp = FORCE_DISCONNECT & priv->connect_status;
 729                 priv->connect_status = tmp + DISCONNECT_STATUS;
 730                 break;
 731         default:
 732                 netdev_dbg(priv->net_dev, "unknown connect_code=%d :: scan_ind_count=%d\n",
 733                            connect_code, priv->scan_ind_count);
 734                 netif_carrier_off(netdev);
 735                 tmp = FORCE_DISCONNECT & priv->connect_status;
 736                 priv->connect_status = tmp + DISCONNECT_STATUS;
 737                 break;
 738         }
 739
 740         get_current_ap(priv, (struct link_ap_info *)priv->rxp);
 741         if (is_connect_status(priv->connect_status) &&
 742             is_disconnect_status(old_status)) {
 743                 /* for power save */
 744                 atomic_set(&priv->psstatus.snooze_guard, 0);
 745                 atomic_set(&priv->psstatus.confirm_wait, 0);
 746         }
 747         ks_wlan_do_power_save(priv);
 748
 749         wrqu0.data.length = 0;
 750         wrqu0.data.flags = 0;
 751         wrqu0.ap_addr.sa_family = ARPHRD_ETHER;
 752         if (is_disconnect_status(priv->connect_status) &&
 753             is_connect_status(old_status)) {
 754                 eth_zero_addr(wrqu0.ap_addr.sa_data);
 755                 netdev_dbg(priv->net_dev, "disconnect :: scan_ind_count=%d\n",
 756                            priv->scan_ind_count);
 757                 wireless_send_event(netdev, SIOCGIWAP, &wrqu0, NULL);
 758         }
 759         priv->scan_ind_count = 0;
 760 }
 761
 762 static
 763 void hostif_scan_indication(struct ks_wlan_private *priv)
 764 {
 765         int i;
 766         struct ap_info *ap_info;
 767
 768         netdev_dbg(priv->net_dev,
 769                    "scan_ind_count = %d\n", priv->scan_ind_count);
 770         ap_info = (struct ap_info *)(priv->rxp);
 771
 772         if (priv->scan_ind_count) {
 773                 /* bssid check */
 774                 for (i = 0; i < priv->aplist.size; i++) {
 775                         u8 *bssid = priv->aplist.ap[i].bssid;
 776
 777                         if (ether_addr_equal(ap_info->bssid, bssid))
 778                                 continue;
 779
 780                         if (ap_info->frame_type == IEEE80211_STYPE_PROBE_RESP)
 781                                 get_ap_information(priv, ap_info,
 782                                                    &priv->aplist.ap[i]);
 783                         return;
 784                 }
 785         }
 786         priv->scan_ind_count++;
 787         if (priv->scan_ind_count < LOCAL_APLIST_MAX + 1) {
 788                 netdev_dbg(priv->net_dev, " scan_ind_count=%d :: aplist.size=%d\n",
 789                            priv->scan_ind_count, priv->aplist.size);
 790                 get_ap_information(priv, (struct ap_info *)(priv->rxp),
 791                                    &priv->aplist.ap[priv->scan_ind_count - 1]);
 792                 priv->aplist.size = priv->scan_ind_count;
 793         } else {
 794                 netdev_dbg(priv->net_dev, " count over :: scan_ind_count=%d\n",
 795                            priv->scan_ind_count);
 796         }
 797 }
 798
 799 static
 800 void hostif_stop_confirm(struct ks_wlan_private *priv)
 801 {
 802         unsigned int tmp = 0;
 803         unsigned int old_status = priv->connect_status;
 804         struct net_device *netdev = priv->net_dev;
 805         union iwreq_data wrqu0;
 806
 807         if (priv->dev_state == DEVICE_STATE_SLEEP)
 808                 priv->dev_state = DEVICE_STATE_READY;
 809
 810         /* disconnect indication */
 811         if (is_connect_status(priv->connect_status)) {
 812                 netif_carrier_off(netdev);
 813                 tmp = FORCE_DISCONNECT & priv->connect_status;
 814                 priv->connect_status = tmp | DISCONNECT_STATUS;
 815                 netdev_info(netdev, "IWEVENT: disconnect\n");
 816
 817                 wrqu0.data.length = 0;
 818                 wrqu0.data.flags = 0;
 819                 wrqu0.ap_addr.sa_family = ARPHRD_ETHER;
 820                 if (is_disconnect_status(priv->connect_status) &&
 821                     is_connect_status(old_status)) {
 822                         eth_zero_addr(wrqu0.ap_addr.sa_data);
 823                         netdev_info(netdev, "IWEVENT: disconnect\n");
 824                         wireless_send_event(netdev, SIOCGIWAP, &wrqu0, NULL);
 825                 }
 826                 priv->scan_ind_count = 0;
 827         }
 828
 829         hostif_sme_enqueue(priv, SME_STOP_CONFIRM);
 830 }
 831
 832 static
 833 void hostif_ps_adhoc_set_confirm(struct ks_wlan_private *priv)
 834 {
 835         priv->infra_status = 0; /* infrastructure mode cancel */
 836         hostif_sme_enqueue(priv, SME_MODE_SET_CONFIRM);
 837 }
 838
 839 static
 840 void hostif_infrastructure_set_confirm(struct ks_wlan_private *priv)
 841 {
 842         get_word(priv); /* result_code */
 843         priv->infra_status = 1; /* infrastructure mode set */
 844         hostif_sme_enqueue(priv, SME_MODE_SET_CONFIRM);
 845 }
 846
 847 static
 848 void hostif_adhoc_set_confirm(struct ks_wlan_private *priv)
 849 {
 850         priv->infra_status = 1; /* infrastructure mode set */
 851         hostif_sme_enqueue(priv, SME_MODE_SET_CONFIRM);
 852 }
 853
 854 static
 855 void hostif_associate_indication(struct ks_wlan_private *priv)
 856 {
 857         struct association_request *assoc_req;
 858         struct association_response *assoc_resp;
 859         unsigned char *pb;
 860         union iwreq_data wrqu;
 861         char buf[IW_CUSTOM_MAX];
 862         char *pbuf = &buf[0];
 863         int i;
 864
 865         static const char associnfo_leader0[] = "ASSOCINFO(ReqIEs=";
 866         static const char associnfo_leader1[] = " RespIEs=";
 867
 868         assoc_req = (struct association_request *)(priv->rxp);
 869         assoc_resp = (struct association_response *)(assoc_req + 1);
 870         pb = (unsigned char *)(assoc_resp + 1);
 871
 872         memset(&wrqu, 0, sizeof(wrqu));
 873         memcpy(pbuf, associnfo_leader0, sizeof(associnfo_leader0) - 1);
 874         wrqu.data.length += sizeof(associnfo_leader0) - 1;
 875         pbuf += sizeof(associnfo_leader0) - 1;
 876
 877         for (i = 0; i < le16_to_cpu(assoc_req->req_ies_size); i++)
 878                 pbuf += sprintf(pbuf, "%02x", *(pb + i));
 879         wrqu.data.length += (le16_to_cpu(assoc_req->req_ies_size)) * 2;
 880
 881         memcpy(pbuf, associnfo_leader1, sizeof(associnfo_leader1) - 1);
 882         wrqu.data.length += sizeof(associnfo_leader1) - 1;
 883         pbuf += sizeof(associnfo_leader1) - 1;
 884
 885         pb += le16_to_cpu(assoc_req->req_ies_size);
 886         for (i = 0; i < le16_to_cpu(assoc_resp->resp_ies_size); i++)
 887                 pbuf += sprintf(pbuf, "%02x", *(pb + i));
 888         wrqu.data.length += (le16_to_cpu(assoc_resp->resp_ies_size)) * 2;
 889
 890         pbuf += sprintf(pbuf, ")");
 891         wrqu.data.length += 1;
 892
 893         wireless_send_event(priv->net_dev, IWEVCUSTOM, &wrqu, buf);
 894 }
 895
 896 static
 897 void hostif_bss_scan_confirm(struct ks_wlan_private *priv)
 898 {
 899         u32 result_code;
 900         struct net_device *dev = priv->net_dev;
 901         union iwreq_data wrqu;
 902
 903         result_code = get_dword(priv);
 904         netdev_dbg(priv->net_dev, "result=%d :: scan_ind_count=%d\n",
 905                    result_code, priv->scan_ind_count);
 906
 907         priv->sme_i.sme_flag &= ~SME_AP_SCAN;
 908         hostif_sme_enqueue(priv, SME_BSS_SCAN_CONFIRM);
 909
 910         wrqu.data.length = 0;
 911         wrqu.data.flags = 0;
 912         wireless_send_event(dev, SIOCGIWSCAN, &wrqu, NULL);
 913         priv->scan_ind_count = 0;
 914 }
 915
 916 static
 917 void hostif_phy_information_confirm(struct ks_wlan_private *priv)
 918 {
 919         struct iw_statistics *wstats = &priv->wstats;
 920         u8 rssi, signal;
 921         u8 link_speed;
 922         u32 transmitted_frame_count, received_fragment_count;
 923         u32 failed_count, fcs_error_count;
 924
 925         rssi = get_byte(priv);
 926         signal = get_byte(priv);
 927         get_byte(priv); /* noise */
 928         link_speed = get_byte(priv);
 929         transmitted_frame_count = get_dword(priv);
 930         received_fragment_count = get_dword(priv);
 931         failed_count = get_dword(priv);
 932         fcs_error_count = get_dword(priv);
 933
 934         netdev_dbg(priv->net_dev, "phyinfo confirm rssi=%d signal=%d\n",
 935                    rssi, signal);
 936         priv->current_rate = (link_speed & RATE_MASK);
 937         wstats->qual.qual = signal;
 938         wstats->qual.level = 256 - rssi;
 939         wstats->qual.noise = 0; /* invalid noise value */
 940         wstats->qual.updated = IW_QUAL_ALL_UPDATED | IW_QUAL_DBM;
 941
 942         netdev_dbg(priv->net_dev, "\n    rssi=%u\n"
 943                    "    signal=%u\n"
 944                    "    link_speed=%ux500Kbps\n"
 945                    "    transmitted_frame_count=%u\n"
 946                    "    received_fragment_count=%u\n"
 947                    "    failed_count=%u\n"
 948                    "    fcs_error_count=%u\n",
 949                    rssi, signal, link_speed, transmitted_frame_count,
 950                    received_fragment_count, failed_count, fcs_error_count);
 951         /* wake_up_interruptible_all(&priv->confirm_wait); */
 952         complete(&priv->confirm_wait);
 953 }
 954
 955 static
 956 void hostif_mic_failure_confirm(struct ks_wlan_private *priv)
 957 {
 958         netdev_dbg(priv->net_dev, "mic_failure=%u\n",
 959                    priv->wpa.mic_failure.failure);
 960         hostif_sme_enqueue(priv, SME_MIC_FAILURE_CONFIRM);
 961 }
 962
 963 static
 964 void hostif_event_check(struct ks_wlan_private *priv)
 965 {
 966         u16 event;
 967
 968         event = get_word(priv);
 969         switch (event) {
 970         case HIF_DATA_IND:
 971                 hostif_data_indication(priv);
 972                 break;
 973         case HIF_MIB_GET_CONF:
 974                 hostif_mib_get_confirm(priv);
 975                 break;
 976         case HIF_MIB_SET_CONF:
 977                 hostif_mib_set_confirm(priv);
 978                 break;
 979         case HIF_POWER_MGMT_CONF:
 980                 hostif_power_mgmt_confirm(priv);
 981                 break;
 982         case HIF_SLEEP_CONF:
 983                 hostif_sleep_confirm(priv);
 984                 break;
 985         case HIF_START_CONF:
 986                 hostif_start_confirm(priv);
 987                 break;
 988         case HIF_CONNECT_IND:
 989                 hostif_connect_indication(priv);
 990                 break;
 991         case HIF_STOP_CONF:
 992                 hostif_stop_confirm(priv);
 993                 break;
 994         case HIF_PS_ADH_SET_CONF:
 995                 hostif_ps_adhoc_set_confirm(priv);
 996                 break;
 997         case HIF_INFRA_SET_CONF:
 998         case HIF_INFRA_SET2_CONF:
 999                 hostif_infrastructure_set_confirm(priv);
1000                 break;
1001         case HIF_ADH_SET_CONF:
1002         case HIF_ADH_SET2_CONF:
1003                 hostif_adhoc_set_confirm(priv);
1004                 break;
1005         case HIF_ASSOC_INFO_IND:
1006                 hostif_associate_indication(priv);
1007                 break;
1008         case HIF_MIC_FAILURE_CONF:
1009                 hostif_mic_failure_confirm(priv);
1010                 break;
1011         case HIF_SCAN_CONF:
1012                 hostif_bss_scan_confirm(priv);
1013                 break;
1014         case HIF_PHY_INFO_CONF:
1015         case HIF_PHY_INFO_IND:
1016                 hostif_phy_information_confirm(priv);
1017                 break;
1018         case HIF_SCAN_IND:
1019                 hostif_scan_indication(priv);
1020                 break;
1021         case HIF_AP_SET_CONF:
1022         default:
1023                 netdev_err(priv->net_dev, "undefined event[%04X]\n", event);
1024                 /* wake_up_all(&priv->confirm_wait); */
1025                 complete(&priv->confirm_wait);
1026                 break;
1027         }
1028
1029         /* add event to hostt buffer */
1030         priv->hostt.buff[priv->hostt.qtail] = event;
1031         priv->hostt.qtail = (priv->hostt.qtail + 1) % SME_EVENT_BUFF_SIZE;
1032 }
1033
1034 /* allocate size bytes, set header size and event */
1035 static void *hostif_generic_request(size_t size, int event)
1036 {
1037         struct hostif_hdr *p;
1038
1039         p = kzalloc(hif_align_size(size), GFP_ATOMIC);
1040         if (!p)
1041                 return NULL;
1042
1043         p->size = cpu_to_le16(size - sizeof(p->size));
1044         p->event = cpu_to_le16(event);
1045
1046         return p;
1047 }
1048
1049 int hostif_data_request(struct ks_wlan_private *priv, struct sk_buff *skb)
1050 {
1051         unsigned int skb_len = 0;
1052         unsigned char *buffer = NULL;
1053         unsigned int length = 0;
1054         struct hostif_data_request *pp;
1055         unsigned char *p;
1056         unsigned short eth_proto;
1057         struct ether_hdr *eth_hdr;
1058         unsigned short keyinfo = 0;
1059         struct ieee802_1x_hdr *aa1x_hdr;
1060         struct wpa_eapol_key *eap_key;
1061         struct ethhdr *eth;
1062         size_t size;
1063         int ret;
1064
1065         skb_len = skb->len;
1066         if (skb_len > ETH_FRAME_LEN) {
1067                 netdev_err(priv->net_dev, "bad length skb_len=%d\n", skb_len);
1068                 ret = -EOVERFLOW;
1069                 goto err_kfree_skb;
1070         }
1071
1072         if (is_disconnect_status(priv->connect_status) ||
1073             (priv->connect_status & FORCE_DISCONNECT) ||
1074             priv->wpa.mic_failure.stop) {
1075                 if (netif_queue_stopped(priv->net_dev))
1076                         netif_wake_queue(priv->net_dev);
1077
1078                 dev_kfree_skb(skb);
1079
1080                 return 0;
1081         }
1082
1083         /* power save wakeup */
1084         if (atomic_read(&priv->psstatus.status) == PS_SNOOZE) {
1085                 if (!netif_queue_stopped(priv->net_dev))
1086                         netif_stop_queue(priv->net_dev);
1087         }
1088
1089         size = sizeof(*pp) + 6 + skb_len + 8;
1090         pp = kmalloc(hif_align_size(size), GFP_ATOMIC);
1091         if (!pp) {
1092                 ret = -ENOMEM;
1093                 goto err_kfree_skb;
1094         }
1095
1096         p = (unsigned char *)pp->data;
1097
1098         buffer = skb->data;
1099         length = skb->len;
1100
1101         /* skb check */
1102         eth = (struct ethhdr *)skb->data;
1103         if (!ether_addr_equal(&priv->eth_addr[0], eth->h_source)) {
1104                 netdev_err(priv->net_dev,
1105                            "Invalid mac address: ethernet->h_source=%pM\n",
1106                            eth->h_source);
1107                 ret = -ENXIO;
1108                 goto err_kfree;
1109         }
1110
1111         /* dest and src MAC address copy */
1112         size = ETH_ALEN * 2;
1113         memcpy(p, buffer, size);
1114         p += size;
1115         buffer += size;
1116         length -= size;
1117
1118         /* EtherType/Length check */
1119         if (*(buffer + 1) + (*buffer << 8) > 1500) {
1120                 /* ProtocolEAP = *(buffer+1) + (*buffer << 8); */
1121                 /* SAP/CTL/OUI(6 byte) add */
1122                 *p++ = 0xAA;    /* DSAP */
1123                 *p++ = 0xAA;    /* SSAP */
1124                 *p++ = 0x03;    /* CTL */
1125                 *p++ = 0x00;    /* OUI ("000000") */
1126                 *p++ = 0x00;    /* OUI ("000000") */
1127                 *p++ = 0x00;    /* OUI ("000000") */
1128                 skb_len += 6;
1129         } else {
1130                 /* Length(2 byte) delete */
1131                 buffer += 2;
1132                 length -= 2;
1133                 skb_len -= 2;
1134         }
1135
1136         /* pp->data copy */
1137         memcpy(p, buffer, length);
1138
1139         p += length;
1140
1141         /* for WPA */
1142         eth_hdr = (struct ether_hdr *)&pp->data[0];
1143         eth_proto = ntohs(eth_hdr->h_proto);
1144
1145         /* for MIC FAILURE REPORT check */
1146         if (eth_proto == ETH_P_PAE &&
1147             priv->wpa.mic_failure.failure > 0) {
1148                 aa1x_hdr = (struct ieee802_1x_hdr *)(eth_hdr + 1);
1149                 if (aa1x_hdr->type == IEEE802_1X_TYPE_EAPOL_KEY) {
1150                         eap_key = (struct wpa_eapol_key *)(aa1x_hdr + 1);
1151                         keyinfo = ntohs(eap_key->key_info);
1152                 }
1153         }
1154
1155         if (priv->wpa.rsn_enabled && priv->wpa.key[0].key_len) {
1156                 /* no encryption */
1157                 if (eth_proto == ETH_P_PAE &&
1158                     priv->wpa.key[1].key_len == 0 &&
1159                     priv->wpa.key[2].key_len == 0 &&
1160                     priv->wpa.key[3].key_len == 0) {
1161                         pp->auth_type = cpu_to_le16(TYPE_AUTH);
1162                 } else {
1163                         if (priv->wpa.pairwise_suite == IW_AUTH_CIPHER_TKIP) {
1164                                 u8 mic[MICHAEL_MIC_LEN];
1165
1166                                 ret = michael_mic(priv->wpa.key[0].tx_mic_key,
1167                                                   &pp->data[0], skb_len,
1168                                                   0, mic);
1169                                 if (ret < 0)
1170                                         goto err_kfree;
1171
1172                                 memcpy(p, mic, sizeof(mic));
1173                                 length += sizeof(mic);
1174                                 skb_len += sizeof(mic);
1175                                 p += sizeof(mic);
1176                                 pp->auth_type =
1177                                     cpu_to_le16(TYPE_DATA);
1178                         } else if (priv->wpa.pairwise_suite ==
1179                                    IW_AUTH_CIPHER_CCMP) {
1180                                 pp->auth_type =
1181                                     cpu_to_le16(TYPE_DATA);
1182                         }
1183                 }
1184         } else {
1185                 if (eth_proto == ETH_P_PAE)
1186                         pp->auth_type = cpu_to_le16(TYPE_AUTH);
1187                 else
1188                         pp->auth_type = cpu_to_le16(TYPE_DATA);
1189         }
1190
1191         /* header value set */
1192         pp->header.size =
1193             cpu_to_le16((sizeof(*pp) - sizeof(pp->header.size) + skb_len));
1194         pp->header.event = cpu_to_le16(HIF_DATA_REQ);
1195
1196         /* tx request */
1197         ret = ks_wlan_hw_tx(priv, pp, hif_align_size(sizeof(*pp) + skb_len),
1198                             send_packet_complete, skb);
1199
1200         /* MIC FAILURE REPORT check */
1201         if (eth_proto == ETH_P_PAE &&
1202             priv->wpa.mic_failure.failure > 0) {
1203                 if (keyinfo & WPA_KEY_INFO_ERROR &&
1204                     keyinfo & WPA_KEY_INFO_REQUEST) {
1205                         netdev_err(priv->net_dev,
1206                                    "MIC ERROR Report SET : %04X\n", keyinfo);
1207                         hostif_sme_enqueue(priv, SME_MIC_FAILURE_REQUEST);
1208                 }
1209                 if (priv->wpa.mic_failure.failure == 2)
1210                         priv->wpa.mic_failure.stop = 1;
1211         }
1212
1213         return ret;
1214
1215 err_kfree:
1216         kfree(pp);
1217 err_kfree_skb:
1218         dev_kfree_skb(skb);
1219
1220         return ret;
1221 }
1222
1223 static inline void ps_confirm_wait_inc(struct ks_wlan_private *priv)
1224 {
1225         if (atomic_read(&priv->psstatus.status) > PS_ACTIVE_SET)
1226                 atomic_inc(&priv->psstatus.confirm_wait);
1227 }
1228
1229 static inline void send_request_to_device(struct ks_wlan_private *priv,
1230                                           void *data, size_t size)
1231 {
1232         ps_confirm_wait_inc(priv);
1233         ks_wlan_hw_tx(priv, data, size, NULL, NULL);
1234 }
1235
1236 static void hostif_mib_get_request(struct ks_wlan_private *priv,
1237                                    u32 mib_attribute)
1238 {
1239         struct hostif_mib_get_request *pp;
1240
1241         pp = hostif_generic_request(sizeof(*pp), HIF_MIB_GET_REQ);
1242         if (!pp)
1243                 return;
1244
1245         pp->mib_attribute = cpu_to_le32(mib_attribute);
1246
1247         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1248 }
1249
1250 static void hostif_mib_set_request(struct ks_wlan_private *priv,
1251                                    enum mib_attribute attr,
1252                                    enum mib_data_type type,
1253                                    void *data, size_t size)
1254 {
1255         struct hostif_mib_set_request_t *pp;
1256
1257         if (priv->dev_state < DEVICE_STATE_BOOT)
1258                 return;
1259
1260         pp = hostif_generic_request(sizeof(*pp), HIF_MIB_SET_REQ);
1261         if (!pp)
1262                 return;
1263
1264         pp->mib_attribute = cpu_to_le32(attr);
1265         pp->mib_value.size = cpu_to_le16(size);
1266         pp->mib_value.type = cpu_to_le16(type);
1267         memcpy(&pp->mib_value.body, data, size);
1268
1269         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp) + size));
1270 }
1271
1272 static inline void hostif_mib_set_request_int(struct ks_wlan_private *priv,
1273                                               enum mib_attribute attr, int val)
1274 {
1275         __le32 v = cpu_to_le32(val);
1276         size_t size = sizeof(v);
1277
1278         hostif_mib_set_request(priv, attr, MIB_VALUE_TYPE_INT, &v, size);
1279 }
1280
1281 static inline void hostif_mib_set_request_bool(struct ks_wlan_private *priv,
1282                                                enum mib_attribute attr,
1283                                                bool val)
1284 {
1285         __le32 v = cpu_to_le32(val);
1286         size_t size = sizeof(v);
1287
1288         hostif_mib_set_request(priv, attr, MIB_VALUE_TYPE_BOOL, &v, size);
1289 }
1290
1291 static inline void hostif_mib_set_request_ostring(struct ks_wlan_private *priv,
1292                                                   enum mib_attribute attr,
1293                                                   void *data, size_t size)
1294 {
1295         hostif_mib_set_request(priv, attr, MIB_VALUE_TYPE_OSTRING, data, size);
1296 }
1297
1298 static
1299 void hostif_start_request(struct ks_wlan_private *priv, unsigned char mode)
1300 {
1301         struct hostif_start_request *pp;
1302
1303         pp = hostif_generic_request(sizeof(*pp), HIF_START_REQ);
1304         if (!pp)
1305                 return;
1306
1307         pp->mode = cpu_to_le16(mode);
1308
1309         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1310
1311         priv->aplist.size = 0;
1312         priv->scan_ind_count = 0;
1313 }
1314
1315 static __le16 ks_wlan_cap(struct ks_wlan_private *priv)
1316 {
1317         u16 capability = 0x0000;
1318
1319         if (priv->reg.preamble == SHORT_PREAMBLE)
1320                 capability |= WLAN_CAPABILITY_SHORT_PREAMBLE;
1321
1322         capability &= ~(WLAN_CAPABILITY_PBCC);  /* pbcc not support */
1323
1324         if (priv->reg.phy_type != D_11B_ONLY_MODE) {
1325                 capability |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
1326                 capability &= ~(WLAN_CAPABILITY_DSSS_OFDM);
1327         }
1328
1329         return cpu_to_le16(capability);
1330 }
1331
1332 static void init_request(struct ks_wlan_private *priv,
1333                          struct hostif_request *req)
1334 {
1335         req->phy_type = cpu_to_le16(priv->reg.phy_type);
1336         req->cts_mode = cpu_to_le16(priv->reg.cts_mode);
1337         req->scan_type = cpu_to_le16(priv->reg.scan_type);
1338         req->rate_set.size = priv->reg.rate_set.size;
1339         req->capability = ks_wlan_cap(priv);
1340         memcpy(&req->rate_set.body[0], &priv->reg.rate_set.body[0],
1341                priv->reg.rate_set.size);
1342 }
1343
1344 static
1345 void hostif_ps_adhoc_set_request(struct ks_wlan_private *priv)
1346 {
1347         struct hostif_ps_adhoc_set_request *pp;
1348
1349         pp = hostif_generic_request(sizeof(*pp), HIF_PS_ADH_SET_REQ);
1350         if (!pp)
1351                 return;
1352
1353         init_request(priv, &pp->request);
1354         pp->channel = cpu_to_le16(priv->reg.channel);
1355
1356         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1357 }
1358
1359 static
1360 void hostif_infrastructure_set_request(struct ks_wlan_private *priv, int event)
1361 {
1362         struct hostif_infrastructure_set_request *pp;
1363
1364         pp = hostif_generic_request(sizeof(*pp), event);
1365         if (!pp)
1366                 return;
1367
1368         init_request(priv, &pp->request);
1369         pp->ssid.size = priv->reg.ssid.size;
1370         memcpy(&pp->ssid.body[0], &priv->reg.ssid.body[0], priv->reg.ssid.size);
1371         pp->beacon_lost_count =
1372             cpu_to_le16(priv->reg.beacon_lost_count);
1373         pp->auth_type = cpu_to_le16(priv->reg.authenticate_type);
1374
1375         pp->channel_list.body[0] = 1;
1376         pp->channel_list.body[1] = 8;
1377         pp->channel_list.body[2] = 2;
1378         pp->channel_list.body[3] = 9;
1379         pp->channel_list.body[4] = 3;
1380         pp->channel_list.body[5] = 10;
1381         pp->channel_list.body[6] = 4;
1382         pp->channel_list.body[7] = 11;
1383         pp->channel_list.body[8] = 5;
1384         pp->channel_list.body[9] = 12;
1385         pp->channel_list.body[10] = 6;
1386         pp->channel_list.body[11] = 13;
1387         pp->channel_list.body[12] = 7;
1388         if (priv->reg.phy_type == D_11G_ONLY_MODE) {
1389                 pp->channel_list.size = 13;
1390         } else {
1391                 pp->channel_list.body[13] = 14;
1392                 pp->channel_list.size = 14;
1393         }
1394
1395         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1396 }
1397
1398 static
1399 void hostif_adhoc_set_request(struct ks_wlan_private *priv)
1400 {
1401         struct hostif_adhoc_set_request *pp;
1402
1403         pp = hostif_generic_request(sizeof(*pp), HIF_ADH_SET_REQ);
1404         if (!pp)
1405                 return;
1406
1407         init_request(priv, &pp->request);
1408         pp->channel = cpu_to_le16(priv->reg.channel);
1409         pp->ssid.size = priv->reg.ssid.size;
1410         memcpy(&pp->ssid.body[0], &priv->reg.ssid.body[0], priv->reg.ssid.size);
1411
1412         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1413 }
1414
1415 static
1416 void hostif_adhoc_set2_request(struct ks_wlan_private *priv)
1417 {
1418         struct hostif_adhoc_set2_request *pp;
1419
1420         pp = hostif_generic_request(sizeof(*pp), HIF_ADH_SET_REQ);
1421         if (!pp)
1422                 return;
1423
1424         init_request(priv, &pp->request);
1425         pp->ssid.size = priv->reg.ssid.size;
1426         memcpy(&pp->ssid.body[0], &priv->reg.ssid.body[0], priv->reg.ssid.size);
1427
1428         pp->channel_list.body[0] = priv->reg.channel;
1429         pp->channel_list.size = 1;
1430         memcpy(pp->bssid, priv->reg.bssid, ETH_ALEN);
1431
1432         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1433 }
1434
1435 static
1436 void hostif_stop_request(struct ks_wlan_private *priv)
1437 {
1438         struct hostif_stop_request *pp;
1439
1440         pp = hostif_generic_request(sizeof(*pp), HIF_STOP_REQ);
1441         if (!pp)
1442                 return;
1443
1444         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1445 }
1446
1447 static
1448 void hostif_phy_information_request(struct ks_wlan_private *priv)
1449 {
1450         struct hostif_phy_information_request *pp;
1451
1452         pp = hostif_generic_request(sizeof(*pp), HIF_PHY_INFO_REQ);
1453         if (!pp)
1454                 return;
1455
1456         if (priv->reg.phy_info_timer) {
1457                 pp->type = cpu_to_le16(TIME_TYPE);
1458                 pp->time = cpu_to_le16(priv->reg.phy_info_timer);
1459         } else {
1460                 pp->type = cpu_to_le16(NORMAL_TYPE);
1461                 pp->time = cpu_to_le16(0);
1462         }
1463
1464         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1465 }
1466
1467 static
1468 void hostif_power_mgmt_request(struct ks_wlan_private *priv,
1469                                u32 mode, u32 wake_up, u32 receive_dtims)
1470 {
1471         struct hostif_power_mgmt_request *pp;
1472
1473         pp = hostif_generic_request(sizeof(*pp), HIF_POWER_MGMT_REQ);
1474         if (!pp)
1475                 return;
1476
1477         pp->mode = cpu_to_le32(mode);
1478         pp->wake_up = cpu_to_le32(wake_up);
1479         pp->receive_dtims = cpu_to_le32(receive_dtims);
1480
1481         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1482 }
1483
1484 static
1485 void hostif_sleep_request(struct ks_wlan_private *priv,
1486                           enum sleep_mode_type mode)
1487 {
1488         struct hostif_sleep_request *pp;
1489
1490         if (mode == SLP_SLEEP) {
1491                 pp = hostif_generic_request(sizeof(*pp), HIF_SLEEP_REQ);
1492                 if (!pp)
1493                         return;
1494
1495                 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1496         } else if (mode == SLP_ACTIVE) {
1497                 atomic_set(&priv->sleepstatus.wakeup_request, 1);
1498                 queue_delayed_work(priv->wq, &priv->rw_dwork, 1);
1499         } else {
1500                 netdev_err(priv->net_dev, "invalid mode %ld\n", (long)mode);
1501                 return;
1502         }
1503 }
1504
1505 static
1506 void hostif_bss_scan_request(struct ks_wlan_private *priv,
1507                              unsigned long scan_type, u8 *scan_ssid,
1508                              u8 scan_ssid_len)
1509 {
1510         struct hostif_bss_scan_request *pp;
1511
1512         pp = hostif_generic_request(sizeof(*pp), HIF_SCAN_REQ);
1513         if (!pp)
1514                 return;
1515
1516         pp->scan_type = scan_type;
1517
1518         pp->ch_time_min = cpu_to_le32(110);     /* default value */
1519         pp->ch_time_max = cpu_to_le32(130);     /* default value */
1520         pp->channel_list.body[0] = 1;
1521         pp->channel_list.body[1] = 8;
1522         pp->channel_list.body[2] = 2;
1523         pp->channel_list.body[3] = 9;
1524         pp->channel_list.body[4] = 3;
1525         pp->channel_list.body[5] = 10;
1526         pp->channel_list.body[6] = 4;
1527         pp->channel_list.body[7] = 11;
1528         pp->channel_list.body[8] = 5;
1529         pp->channel_list.body[9] = 12;
1530         pp->channel_list.body[10] = 6;
1531         pp->channel_list.body[11] = 13;
1532         pp->channel_list.body[12] = 7;
1533         if (priv->reg.phy_type == D_11G_ONLY_MODE) {
1534                 pp->channel_list.size = 13;
1535         } else {
1536                 pp->channel_list.body[13] = 14;
1537                 pp->channel_list.size = 14;
1538         }
1539         pp->ssid.size = 0;
1540
1541         /* specified SSID SCAN */
1542         if (scan_ssid_len > 0 && scan_ssid_len <= 32) {
1543                 pp->ssid.size = scan_ssid_len;
1544                 memcpy(&pp->ssid.body[0], scan_ssid, scan_ssid_len);
1545         }
1546
1547         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1548
1549         priv->aplist.size = 0;
1550         priv->scan_ind_count = 0;
1551 }
1552
1553 static
1554 void hostif_mic_failure_request(struct ks_wlan_private *priv,
1555                                 u16 failure_count, u16 timer)
1556 {
1557         struct hostif_mic_failure_request *pp;
1558
1559         pp = hostif_generic_request(sizeof(*pp), HIF_MIC_FAILURE_REQ);
1560         if (!pp)
1561                 return;
1562
1563         pp->failure_count = cpu_to_le16(failure_count);
1564         pp->timer = cpu_to_le16(timer);
1565
1566         send_request_to_device(priv, pp, hif_align_size(sizeof(*pp)));
1567 }
1568
1569 /* Device I/O Receive indicate */
1570 static void devio_rec_ind(struct ks_wlan_private *priv, unsigned char *p,
1571                           unsigned int size)
1572 {
1573         if (!priv->is_device_open)
1574                 return;
1575
1576         spin_lock(&priv->dev_read_lock);
1577         priv->dev_data[atomic_read(&priv->rec_count)] = p;
1578         priv->dev_size[atomic_read(&priv->rec_count)] = size;
1579
1580         if (atomic_read(&priv->event_count) != DEVICE_STOCK_COUNT) {
1581                 /* rx event count inc */
1582                 atomic_inc(&priv->event_count);
1583         }
1584         atomic_inc(&priv->rec_count);
1585         if (atomic_read(&priv->rec_count) == DEVICE_STOCK_COUNT)
1586                 atomic_set(&priv->rec_count, 0);
1587
1588         wake_up_interruptible_all(&priv->devread_wait);
1589
1590         spin_unlock(&priv->dev_read_lock);
1591 }
1592
1593 void hostif_receive(struct ks_wlan_private *priv, unsigned char *p,
1594                     unsigned int size)
1595 {
1596         devio_rec_ind(priv, p, size);
1597
1598         priv->rxp = p;
1599         priv->rx_size = size;
1600
1601         if (get_word(priv) == priv->rx_size)
1602                 hostif_event_check(priv);
1603 }
1604
1605 static void hostif_sme_set_wep(struct ks_wlan_private *priv, int type)
1606 {
1607         switch (type) {
1608         case SME_WEP_INDEX_REQUEST:
1609                 hostif_mib_set_request_int(priv, DOT11_WEP_DEFAULT_KEY_ID,
1610                                            priv->reg.wep_index);
1611                 break;
1612         case SME_WEP_KEY1_REQUEST:
1613                 if (priv->wpa.wpa_enabled)
1614                         return;
1615                 hostif_mib_set_request_ostring(priv,
1616                                                DOT11_WEP_DEFAULT_KEY_VALUE1,
1617                                                &priv->reg.wep_key[0].val[0],
1618                                                priv->reg.wep_key[0].size);
1619                 break;
1620         case SME_WEP_KEY2_REQUEST:
1621                 if (priv->wpa.wpa_enabled)
1622                         return;
1623                 hostif_mib_set_request_ostring(priv,
1624                                                DOT11_WEP_DEFAULT_KEY_VALUE2,
1625                                                &priv->reg.wep_key[1].val[0],
1626                                                priv->reg.wep_key[1].size);
1627                 break;
1628         case SME_WEP_KEY3_REQUEST:
1629                 if (priv->wpa.wpa_enabled)
1630                         return;
1631                 hostif_mib_set_request_ostring(priv,
1632                                                DOT11_WEP_DEFAULT_KEY_VALUE3,
1633                                                &priv->reg.wep_key[2].val[0],
1634                                                priv->reg.wep_key[2].size);
1635                 break;
1636         case SME_WEP_KEY4_REQUEST:
1637                 if (priv->wpa.wpa_enabled)
1638                         return;
1639                 hostif_mib_set_request_ostring(priv,
1640                                                DOT11_WEP_DEFAULT_KEY_VALUE4,
1641                                                &priv->reg.wep_key[3].val[0],
1642                                                priv->reg.wep_key[3].size);
1643                 break;
1644         case SME_WEP_FLAG_REQUEST:
1645                 hostif_mib_set_request_bool(priv, DOT11_PRIVACY_INVOKED,
1646                                             priv->reg.privacy_invoked);
1647                 break;
1648         }
1649 }
1650
1651 struct wpa_suite {
1652         __le16 size;
1653         unsigned char suite[4][CIPHER_ID_LEN];
1654 } __packed;
1655
1656 struct rsn_mode {
1657         __le32 rsn_mode;
1658         __le16 rsn_capability;
1659 } __packed;
1660
1661 static void hostif_sme_set_rsn(struct ks_wlan_private *priv, int type)
1662 {
1663         struct wpa_suite wpa_suite;
1664         struct rsn_mode rsn_mode;
1665         size_t size;
1666         u32 mode;
1667         const u8 *buf = NULL;
1668
1669         memset(&wpa_suite, 0, sizeof(wpa_suite));
1670
1671         switch (type) {
1672         case SME_RSN_UCAST_REQUEST:
1673                 wpa_suite.size = cpu_to_le16(1);
1674                 switch (priv->wpa.pairwise_suite) {
1675                 case IW_AUTH_CIPHER_NONE:
1676                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1677                                 CIPHER_ID_WPA2_NONE : CIPHER_ID_WPA_NONE;
1678                         break;
1679                 case IW_AUTH_CIPHER_WEP40:
1680                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1681                                 CIPHER_ID_WPA2_WEP40 : CIPHER_ID_WPA_WEP40;
1682                         break;
1683                 case IW_AUTH_CIPHER_TKIP:
1684                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1685                                 CIPHER_ID_WPA2_TKIP : CIPHER_ID_WPA_TKIP;
1686                         break;
1687                 case IW_AUTH_CIPHER_CCMP:
1688                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1689                                 CIPHER_ID_WPA2_CCMP : CIPHER_ID_WPA_CCMP;
1690                         break;
1691                 case IW_AUTH_CIPHER_WEP104:
1692                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1693                                 CIPHER_ID_WPA2_WEP104 : CIPHER_ID_WPA_WEP104;
1694                         break;
1695                 }
1696
1697                 if (buf)
1698                         memcpy(&wpa_suite.suite[0][0], buf, CIPHER_ID_LEN);
1699                 size = sizeof(wpa_suite.size) +
1700                        (CIPHER_ID_LEN * le16_to_cpu(wpa_suite.size));
1701                 hostif_mib_set_request_ostring(priv,
1702                                                DOT11_RSN_CONFIG_UNICAST_CIPHER,
1703                                                &wpa_suite, size);
1704                 break;
1705         case SME_RSN_MCAST_REQUEST:
1706                 switch (priv->wpa.group_suite) {
1707                 case IW_AUTH_CIPHER_NONE:
1708                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1709                                 CIPHER_ID_WPA2_NONE : CIPHER_ID_WPA_NONE;
1710                         break;
1711                 case IW_AUTH_CIPHER_WEP40:
1712                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1713                                 CIPHER_ID_WPA2_WEP40 : CIPHER_ID_WPA_WEP40;
1714                         break;
1715                 case IW_AUTH_CIPHER_TKIP:
1716                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1717                                 CIPHER_ID_WPA2_TKIP : CIPHER_ID_WPA_TKIP;
1718                         break;
1719                 case IW_AUTH_CIPHER_CCMP:
1720                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1721                                 CIPHER_ID_WPA2_CCMP : CIPHER_ID_WPA_CCMP;
1722                         break;
1723                 case IW_AUTH_CIPHER_WEP104:
1724                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1725                                 CIPHER_ID_WPA2_WEP104 : CIPHER_ID_WPA_WEP104;
1726                         break;
1727                 }
1728                 if (buf)
1729                         memcpy(&wpa_suite.suite[0][0], buf, CIPHER_ID_LEN);
1730                 hostif_mib_set_request_ostring(priv,
1731                                                DOT11_RSN_CONFIG_MULTICAST_CIPHER,
1732                                                &wpa_suite.suite[0][0],
1733                                                CIPHER_ID_LEN);
1734                 break;
1735         case SME_RSN_AUTH_REQUEST:
1736                 wpa_suite.size = cpu_to_le16(1);
1737                 switch (priv->wpa.key_mgmt_suite) {
1738                 case IW_AUTH_KEY_MGMT_802_1X:
1739                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1740                                 KEY_MGMT_ID_WPA2_1X : KEY_MGMT_ID_WPA_1X;
1741                         break;
1742                 case IW_AUTH_KEY_MGMT_PSK:
1743                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1744                                 KEY_MGMT_ID_WPA2_PSK : KEY_MGMT_ID_WPA_PSK;
1745                         break;
1746                 case 0:
1747                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1748                                 KEY_MGMT_ID_WPA2_NONE : KEY_MGMT_ID_WPA_NONE;
1749                         break;
1750                 case 4:
1751                         buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1752                                 KEY_MGMT_ID_WPA2_WPANONE :
1753                                 KEY_MGMT_ID_WPA_WPANONE;
1754                         break;
1755                 }
1756
1757                 if (buf)
1758                         memcpy(&wpa_suite.suite[0][0], buf, KEY_MGMT_ID_LEN);
1759                 size = sizeof(wpa_suite.size) +
1760                        (KEY_MGMT_ID_LEN * le16_to_cpu(wpa_suite.size));
1761                 hostif_mib_set_request_ostring(priv,
1762                                                DOT11_RSN_CONFIG_AUTH_SUITE,
1763                                                &wpa_suite, size);
1764                 break;
1765         case SME_RSN_ENABLED_REQUEST:
1766                 hostif_mib_set_request_bool(priv, DOT11_RSN_ENABLED,
1767                                             priv->wpa.rsn_enabled);
1768                 break;
1769         case SME_RSN_MODE_REQUEST:
1770                 mode = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ?
1771                         RSN_MODE_WPA2 :
1772                         (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA) ?
1773                          RSN_MODE_WPA : RSN_MODE_NONE;
1774                 rsn_mode.rsn_mode = cpu_to_le32(mode);
1775                 rsn_mode.rsn_capability = cpu_to_le16(0);
1776                 hostif_mib_set_request_ostring(priv, LOCAL_RSN_MODE,
1777                                                &rsn_mode, sizeof(rsn_mode));
1778                 break;
1779         }
1780 }
1781
1782 static
1783 void hostif_sme_mode_setup(struct ks_wlan_private *priv)
1784 {
1785         unsigned char rate_size;
1786         unsigned char rate_octet[RATE_SET_MAX_SIZE];
1787         int i = 0;
1788
1789         /* rate setting if rate segging is auto for changing phy_type (#94) */
1790         if (priv->reg.tx_rate == TX_RATE_FULL_AUTO) {
1791                 if (priv->reg.phy_type == D_11B_ONLY_MODE) {
1792                         priv->reg.rate_set.body[3] = TX_RATE_11M;
1793                         priv->reg.rate_set.body[2] = TX_RATE_5M;
1794                         priv->reg.rate_set.body[1] = TX_RATE_2M | BASIC_RATE;
1795                         priv->reg.rate_set.body[0] = TX_RATE_1M | BASIC_RATE;
1796                         priv->reg.rate_set.size = 4;
1797                 } else {        /* D_11G_ONLY_MODE or D_11BG_COMPATIBLE_MODE */
1798                         priv->reg.rate_set.body[11] = TX_RATE_54M;
1799                         priv->reg.rate_set.body[10] = TX_RATE_48M;
1800                         priv->reg.rate_set.body[9] = TX_RATE_36M;
1801                         priv->reg.rate_set.body[8] = TX_RATE_18M;
1802                         priv->reg.rate_set.body[7] = TX_RATE_9M;
1803                         priv->reg.rate_set.body[6] = TX_RATE_24M | BASIC_RATE;
1804                         priv->reg.rate_set.body[5] = TX_RATE_12M | BASIC_RATE;
1805                         priv->reg.rate_set.body[4] = TX_RATE_6M | BASIC_RATE;
1806                         priv->reg.rate_set.body[3] = TX_RATE_11M | BASIC_RATE;
1807                         priv->reg.rate_set.body[2] = TX_RATE_5M | BASIC_RATE;
1808                         priv->reg.rate_set.body[1] = TX_RATE_2M | BASIC_RATE;
1809                         priv->reg.rate_set.body[0] = TX_RATE_1M | BASIC_RATE;
1810                         priv->reg.rate_set.size = 12;
1811                 }
1812         }
1813
1814         /* rate mask by phy setting */
1815         if (priv->reg.phy_type == D_11B_ONLY_MODE) {
1816                 for (i = 0; i < priv->reg.rate_set.size; i++) {
1817                         if (!is_11b_rate(priv->reg.rate_set.body[i]))
1818                                 break;
1819
1820                         if ((priv->reg.rate_set.body[i] & RATE_MASK) >= TX_RATE_5M) {
1821                                 rate_octet[i] = priv->reg.rate_set.body[i] &
1822                                                 RATE_MASK;
1823                         } else {
1824                                 rate_octet[i] = priv->reg.rate_set.body[i];
1825                         }
1826                 }
1827
1828         } else {        /* D_11G_ONLY_MODE or D_11BG_COMPATIBLE_MODE */
1829                 for (i = 0; i < priv->reg.rate_set.size; i++) {
1830                         if (!is_11bg_rate(priv->reg.rate_set.body[i]))
1831                                 break;
1832
1833                         if (is_ofdm_ext_rate(priv->reg.rate_set.body[i])) {
1834                                 rate_octet[i] = priv->reg.rate_set.body[i] &
1835                                                 RATE_MASK;
1836                         } else {
1837                                 rate_octet[i] = priv->reg.rate_set.body[i];
1838                         }
1839                 }
1840         }
1841         rate_size = i;
1842         if (rate_size == 0) {
1843                 if (priv->reg.phy_type == D_11G_ONLY_MODE)
1844                         rate_octet[0] = TX_RATE_6M | BASIC_RATE;
1845                 else
1846                         rate_octet[0] = TX_RATE_2M | BASIC_RATE;
1847                 rate_size = 1;
1848         }
1849
1850         /* rate set update */
1851         priv->reg.rate_set.size = rate_size;
1852         memcpy(&priv->reg.rate_set.body[0], &rate_octet[0], rate_size);
1853
1854         switch (priv->reg.operation_mode) {
1855         case MODE_PSEUDO_ADHOC:
1856                 hostif_ps_adhoc_set_request(priv);
1857                 break;
1858         case MODE_INFRASTRUCTURE:
1859                 if (!is_valid_ether_addr((u8 *)priv->reg.bssid)) {
1860                         hostif_infrastructure_set_request(priv,
1861                                                           HIF_INFRA_SET_REQ);
1862                 } else {
1863                         hostif_infrastructure_set_request(priv,
1864                                                           HIF_INFRA_SET2_REQ);
1865                         netdev_dbg(priv->net_dev,
1866                                    "Infra bssid = %pM\n", priv->reg.bssid);
1867                 }
1868                 break;
1869         case MODE_ADHOC:
1870                 if (!is_valid_ether_addr((u8 *)priv->reg.bssid)) {
1871                         hostif_adhoc_set_request(priv);
1872                 } else {
1873                         hostif_adhoc_set2_request(priv);
1874                         netdev_dbg(priv->net_dev,
1875                                    "Adhoc bssid = %pM\n", priv->reg.bssid);
1876                 }
1877                 break;
1878         default:
1879                 break;
1880         }
1881 }
1882
1883 static
1884 void hostif_sme_multicast_set(struct ks_wlan_private *priv)
1885 {
1886         struct net_device *dev = priv->net_dev;
1887         int mc_count;
1888         struct netdev_hw_addr *ha;
1889         char set_address[NIC_MAX_MCAST_LIST * ETH_ALEN];
1890         int i = 0;
1891
1892         spin_lock(&priv->multicast_spin);
1893
1894         memset(set_address, 0, NIC_MAX_MCAST_LIST * ETH_ALEN);
1895
1896         if (dev->flags & IFF_PROMISC) {
1897                 hostif_mib_set_request_int(priv, LOCAL_MULTICAST_FILTER,
1898                                            MCAST_FILTER_PROMISC);
1899                 goto spin_unlock;
1900         }
1901
1902         if ((netdev_mc_count(dev) > NIC_MAX_MCAST_LIST) ||
1903             (dev->flags & IFF_ALLMULTI)) {
1904                 hostif_mib_set_request_int(priv, LOCAL_MULTICAST_FILTER,
1905                                            MCAST_FILTER_MCASTALL);
1906                 goto spin_unlock;
1907         }
1908
1909         if (priv->sme_i.sme_flag & SME_MULTICAST) {
1910                 mc_count = netdev_mc_count(dev);
1911                 netdev_for_each_mc_addr(ha, dev) {
1912                         ether_addr_copy(&set_address[i * ETH_ALEN], ha->addr);
1913                         i++;
1914                 }
1915                 priv->sme_i.sme_flag &= ~SME_MULTICAST;
1916                 hostif_mib_set_request_ostring(priv, LOCAL_MULTICAST_ADDRESS,
1917                                                &set_address[0],
1918                                                ETH_ALEN * mc_count);
1919         } else {
1920                 priv->sme_i.sme_flag |= SME_MULTICAST;
1921                 hostif_mib_set_request_int(priv, LOCAL_MULTICAST_FILTER,
1922                                            MCAST_FILTER_MCAST);
1923         }
1924
1925 spin_unlock:
1926         spin_unlock(&priv->multicast_spin);
1927 }
1928
1929 static void hostif_sme_power_mgmt_set(struct ks_wlan_private *priv)
1930 {
1931         u32 mode, wake_up, receive_dtims;
1932
1933         if (priv->reg.power_mgmt != POWER_MGMT_SAVE1 &&
1934             priv->reg.power_mgmt != POWER_MGMT_SAVE2) {
1935                 mode = POWER_ACTIVE;
1936                 wake_up = 0;
1937                 receive_dtims = 0;
1938         } else {
1939                 mode = (priv->reg.operation_mode == MODE_INFRASTRUCTURE) ?
1940                         POWER_SAVE : POWER_ACTIVE;
1941                 wake_up = 0;
1942                 receive_dtims = (priv->reg.operation_mode == MODE_INFRASTRUCTURE &&
1943                                  priv->reg.power_mgmt == POWER_MGMT_SAVE2);
1944         }
1945
1946         hostif_power_mgmt_request(priv, mode, wake_up, receive_dtims);
1947 }
1948
1949 static void hostif_sme_sleep_set(struct ks_wlan_private *priv)
1950 {
1951         if (priv->sleep_mode != SLP_SLEEP &&
1952             priv->sleep_mode != SLP_ACTIVE)
1953                 return;
1954
1955         hostif_sleep_request(priv, priv->sleep_mode);
1956 }
1957
1958 static
1959 void hostif_sme_set_key(struct ks_wlan_private *priv, int type)
1960 {
1961         switch (type) {
1962         case SME_SET_FLAG:
1963                 hostif_mib_set_request_bool(priv, DOT11_PRIVACY_INVOKED,
1964                                             priv->reg.privacy_invoked);
1965                 break;
1966         case SME_SET_TXKEY:
1967                 hostif_mib_set_request_int(priv, DOT11_WEP_DEFAULT_KEY_ID,
1968                                            priv->wpa.txkey);
1969                 break;
1970         case SME_SET_KEY1:
1971                 hostif_mib_set_request_ostring(priv,
1972                                                DOT11_WEP_DEFAULT_KEY_VALUE1,
1973                                                &priv->wpa.key[0].key_val[0],
1974                                                priv->wpa.key[0].key_len);
1975                 break;
1976         case SME_SET_KEY2:
1977                 hostif_mib_set_request_ostring(priv,
1978                                                DOT11_WEP_DEFAULT_KEY_VALUE2,
1979                                                &priv->wpa.key[1].key_val[0],
1980                                                priv->wpa.key[1].key_len);
1981                 break;
1982         case SME_SET_KEY3:
1983                 hostif_mib_set_request_ostring(priv,
1984                                                DOT11_WEP_DEFAULT_KEY_VALUE3,
1985                                                &priv->wpa.key[2].key_val[0],
1986                                                priv->wpa.key[2].key_len);
1987                 break;
1988         case SME_SET_KEY4:
1989                 hostif_mib_set_request_ostring(priv,
1990                                                DOT11_WEP_DEFAULT_KEY_VALUE4,
1991                                                &priv->wpa.key[3].key_val[0],
1992                                                priv->wpa.key[3].key_len);
1993                 break;
1994         case SME_SET_PMK_TSC:
1995                 hostif_mib_set_request_ostring(priv, DOT11_PMK_TSC,
1996                                                &priv->wpa.key[0].rx_seq[0],
1997                                                WPA_RX_SEQ_LEN);
1998                 break;
1999         case SME_SET_GMK1_TSC:
2000                 hostif_mib_set_request_ostring(priv, DOT11_GMK1_TSC,
2001                                                &priv->wpa.key[1].rx_seq[0],
2002                                                WPA_RX_SEQ_LEN);
2003                 break;
2004         case SME_SET_GMK2_TSC:
2005                 hostif_mib_set_request_ostring(priv, DOT11_GMK2_TSC,
2006                                                &priv->wpa.key[2].rx_seq[0],
2007                                                WPA_RX_SEQ_LEN);
2008                 break;
2009         }
2010 }
2011
2012 static
2013 void hostif_sme_set_pmksa(struct ks_wlan_private *priv)
2014 {
2015         struct pmk_cache {
2016                 __le16 size;
2017                 struct {
2018                         u8 bssid[ETH_ALEN];
2019                         u8 pmkid[IW_PMKID_LEN];
2020                 } __packed list[PMK_LIST_MAX];
2021         } __packed pmkcache;
2022         struct pmk *pmk;
2023         size_t size;
2024         int i = 0;
2025
2026         list_for_each_entry(pmk, &priv->pmklist.head, list) {
2027                 if (i >= PMK_LIST_MAX)
2028                         break;
2029                 ether_addr_copy(pmkcache.list[i].bssid, pmk->bssid);
2030                 memcpy(pmkcache.list[i].pmkid, pmk->pmkid, IW_PMKID_LEN);
2031                 i++;
2032         }
2033         pmkcache.size = cpu_to_le16(priv->pmklist.size);
2034         size = sizeof(priv->pmklist.size) +
2035                ((ETH_ALEN + IW_PMKID_LEN) * priv->pmklist.size);
2036         hostif_mib_set_request_ostring(priv, LOCAL_PMK, &pmkcache, size);
2037 }
2038
2039 /* execute sme */
2040 static void hostif_sme_execute(struct ks_wlan_private *priv, int event)
2041 {
2042         u16 failure;
2043
2044         switch (event) {
2045         case SME_START:
2046                 if (priv->dev_state == DEVICE_STATE_BOOT)
2047                         hostif_mib_get_request(priv, DOT11_MAC_ADDRESS);
2048                 break;
2049         case SME_MULTICAST_REQUEST:
2050                 hostif_sme_multicast_set(priv);
2051                 break;
2052         case SME_MACADDRESS_SET_REQUEST:
2053                 hostif_mib_set_request_ostring(priv, LOCAL_CURRENTADDRESS,
2054                                                &priv->eth_addr[0], ETH_ALEN);
2055                 break;
2056         case SME_BSS_SCAN_REQUEST:
2057                 hostif_bss_scan_request(priv, priv->reg.scan_type,
2058                                         priv->scan_ssid, priv->scan_ssid_len);
2059                 break;
2060         case SME_POW_MNGMT_REQUEST:
2061                 hostif_sme_power_mgmt_set(priv);
2062                 break;
2063         case SME_PHY_INFO_REQUEST:
2064                 hostif_phy_information_request(priv);
2065                 break;
2066         case SME_MIC_FAILURE_REQUEST:
2067                 failure = priv->wpa.mic_failure.failure;
2068                 if (failure != 1 && failure != 2) {
2069                         netdev_err(priv->net_dev,
2070                                    "SME_MIC_FAILURE_REQUEST: failure count=%u error?\n",
2071                                    failure);
2072                         return;
2073                 }
2074                 hostif_mic_failure_request(priv, failure - 1, (failure == 1) ?
2075                                             0 : priv->wpa.mic_failure.counter);
2076                 break;
2077         case SME_MIC_FAILURE_CONFIRM:
2078                 if (priv->wpa.mic_failure.failure == 2) {
2079                         if (priv->wpa.mic_failure.stop)
2080                                 priv->wpa.mic_failure.stop = 0;
2081                         priv->wpa.mic_failure.failure = 0;
2082                         hostif_start_request(priv, priv->reg.operation_mode);
2083                 }
2084                 break;
2085         case SME_GET_MAC_ADDRESS:
2086                 if (priv->dev_state == DEVICE_STATE_BOOT)
2087                         hostif_mib_get_request(priv, DOT11_PRODUCT_VERSION);
2088                 break;
2089         case SME_GET_PRODUCT_VERSION:
2090                 if (priv->dev_state == DEVICE_STATE_BOOT)
2091                         priv->dev_state = DEVICE_STATE_PREINIT;
2092                 break;
2093         case SME_STOP_REQUEST:
2094                 hostif_stop_request(priv);
2095                 break;
2096         case SME_RTS_THRESHOLD_REQUEST:
2097                 hostif_mib_set_request_int(priv, DOT11_RTS_THRESHOLD,
2098                                            priv->reg.rts);
2099                 break;
2100         case SME_FRAGMENTATION_THRESHOLD_REQUEST:
2101                 hostif_mib_set_request_int(priv, DOT11_FRAGMENTATION_THRESHOLD,
2102                                            priv->reg.fragment);
2103                 break;
2104         case SME_WEP_INDEX_REQUEST:
2105         case SME_WEP_KEY1_REQUEST:
2106         case SME_WEP_KEY2_REQUEST:
2107         case SME_WEP_KEY3_REQUEST:
2108         case SME_WEP_KEY4_REQUEST:
2109         case SME_WEP_FLAG_REQUEST:
2110                 hostif_sme_set_wep(priv, event);
2111                 break;
2112         case SME_RSN_UCAST_REQUEST:
2113         case SME_RSN_MCAST_REQUEST:
2114         case SME_RSN_AUTH_REQUEST:
2115         case SME_RSN_ENABLED_REQUEST:
2116         case SME_RSN_MODE_REQUEST:
2117                 hostif_sme_set_rsn(priv, event);
2118                 break;
2119         case SME_SET_FLAG:
2120         case SME_SET_TXKEY:
2121         case SME_SET_KEY1:
2122         case SME_SET_KEY2:
2123         case SME_SET_KEY3:
2124         case SME_SET_KEY4:
2125         case SME_SET_PMK_TSC:
2126         case SME_SET_GMK1_TSC:
2127         case SME_SET_GMK2_TSC:
2128                 hostif_sme_set_key(priv, event);
2129                 break;
2130         case SME_SET_PMKSA:
2131                 hostif_sme_set_pmksa(priv);
2132                 break;
2133         case SME_WPS_ENABLE_REQUEST:
2134                 hostif_mib_set_request_int(priv, LOCAL_WPS_ENABLE,
2135                                            priv->wps.wps_enabled);
2136                 break;
2137         case SME_WPS_PROBE_REQUEST:
2138                 hostif_mib_set_request_ostring(priv, LOCAL_WPS_PROBE_REQ,
2139                                                priv->wps.ie, priv->wps.ielen);
2140                 break;
2141         case SME_MODE_SET_REQUEST:
2142                 hostif_sme_mode_setup(priv);
2143                 break;
2144         case SME_SET_GAIN:
2145                 hostif_mib_set_request_ostring(priv, LOCAL_GAIN,
2146                                                &priv->gain, sizeof(priv->gain));
2147                 break;
2148         case SME_GET_GAIN:
2149                 hostif_mib_get_request(priv, LOCAL_GAIN);
2150                 break;
2151         case SME_GET_EEPROM_CKSUM:
2152                 priv->eeprom_checksum = EEPROM_FW_NOT_SUPPORT;  /* initialize */
2153                 hostif_mib_get_request(priv, LOCAL_EEPROM_SUM);
2154                 break;
2155         case SME_START_REQUEST:
2156                 hostif_start_request(priv, priv->reg.operation_mode);
2157                 break;
2158         case SME_START_CONFIRM:
2159                 /* for power save */
2160                 atomic_set(&priv->psstatus.snooze_guard, 0);
2161                 atomic_set(&priv->psstatus.confirm_wait, 0);
2162                 if (priv->dev_state == DEVICE_STATE_PREINIT)
2163                         priv->dev_state = DEVICE_STATE_INIT;
2164                 /* wake_up_interruptible_all(&priv->confirm_wait); */
2165                 complete(&priv->confirm_wait);
2166                 break;
2167         case SME_SLEEP_REQUEST:
2168                 hostif_sme_sleep_set(priv);
2169                 break;
2170         case SME_SET_REGION:
2171                 hostif_mib_set_request_int(priv, LOCAL_REGION, priv->region);
2172                 break;
2173         case SME_MULTICAST_CONFIRM:
2174         case SME_BSS_SCAN_CONFIRM:
2175         case SME_POW_MNGMT_CONFIRM:
2176         case SME_PHY_INFO_CONFIRM:
2177         case SME_STOP_CONFIRM:
2178         case SME_RTS_THRESHOLD_CONFIRM:
2179         case SME_FRAGMENTATION_THRESHOLD_CONFIRM:
2180         case SME_WEP_INDEX_CONFIRM:
2181         case SME_WEP_KEY1_CONFIRM:
2182         case SME_WEP_KEY2_CONFIRM:
2183         case SME_WEP_KEY3_CONFIRM:
2184         case SME_WEP_KEY4_CONFIRM:
2185         case SME_WEP_FLAG_CONFIRM:
2186         case SME_RSN_UCAST_CONFIRM:
2187         case SME_RSN_MCAST_CONFIRM:
2188         case SME_RSN_AUTH_CONFIRM:
2189         case SME_RSN_ENABLED_CONFIRM:
2190         case SME_RSN_MODE_CONFIRM:
2191         case SME_MODE_SET_CONFIRM:
2192         case SME_TERMINATE:
2193         default:
2194                 break;
2195         }
2196 }
2197
2198 static void hostif_sme_work(struct work_struct *work)
2199 {
2200         struct ks_wlan_private *priv;
2201
2202         priv = container_of(work, struct ks_wlan_private, sme_work);
2203
2204         if (priv->dev_state < DEVICE_STATE_BOOT)
2205                 return;
2206
2207         if (cnt_smeqbody(priv) <= 0)
2208                 return;
2209
2210         hostif_sme_execute(priv, priv->sme_i.event_buff[priv->sme_i.qhead]);
2211         inc_smeqhead(priv);
2212         if (cnt_smeqbody(priv) > 0)
2213                 schedule_work(&priv->sme_work);
2214 }
2215
2216 /* send to Station Management Entity module */
2217 void hostif_sme_enqueue(struct ks_wlan_private *priv, u16 event)
2218 {
2219         /* enqueue sme event */
2220         if (cnt_smeqbody(priv) < (SME_EVENT_BUFF_SIZE - 1)) {
2221                 priv->sme_i.event_buff[priv->sme_i.qtail] = event;
2222                 inc_smeqtail(priv);
2223         } else {
2224                 /* in case of buffer overflow */
2225                 netdev_err(priv->net_dev, "sme queue buffer overflow\n");
2226         }
2227
2228         schedule_work(&priv->sme_work);
2229 }
2230
2231 static inline void hostif_aplist_init(struct ks_wlan_private *priv)
2232 {
2233         size_t size = LOCAL_APLIST_MAX * sizeof(struct local_ap);
2234
2235         priv->aplist.size = 0;
2236         memset(&priv->aplist.ap[0], 0, size);
2237 }
2238
2239 static inline void hostif_status_init(struct ks_wlan_private *priv)
2240 {
2241         priv->infra_status = 0;
2242         priv->current_rate = 4;
2243         priv->connect_status = DISCONNECT_STATUS;
2244 }
2245
2246 static inline void hostif_sme_init(struct ks_wlan_private *priv)
2247 {
2248         priv->sme_i.sme_status = SME_IDLE;
2249         priv->sme_i.qhead = 0;
2250         priv->sme_i.qtail = 0;
2251         spin_lock_init(&priv->sme_i.sme_spin);
2252         priv->sme_i.sme_flag = 0;
2253         INIT_WORK(&priv->sme_work, hostif_sme_work);
2254 }
2255
2256 static inline void hostif_wpa_init(struct ks_wlan_private *priv)
2257 {
2258         memset(&priv->wpa, 0, sizeof(priv->wpa));
2259         priv->wpa.rsn_enabled = false;
2260         priv->wpa.mic_failure.failure = 0;
2261         priv->wpa.mic_failure.last_failure_time = 0;
2262         priv->wpa.mic_failure.stop = 0;
2263 }
2264
2265 static inline void hostif_power_save_init(struct ks_wlan_private *priv)
2266 {
2267         atomic_set(&priv->psstatus.status, PS_NONE);
2268         atomic_set(&priv->psstatus.confirm_wait, 0);
2269         atomic_set(&priv->psstatus.snooze_guard, 0);
2270         init_completion(&priv->psstatus.wakeup_wait);
2271         INIT_WORK(&priv->wakeup_work, ks_wlan_hw_wakeup_task);
2272 }
2273
2274 static inline void hostif_pmklist_init(struct ks_wlan_private *priv)
2275 {
2276         int i;
2277
2278         memset(&priv->pmklist, 0, sizeof(priv->pmklist));
2279         INIT_LIST_HEAD(&priv->pmklist.head);
2280         for (i = 0; i < PMK_LIST_MAX; i++)
2281                 INIT_LIST_HEAD(&priv->pmklist.pmk[i].list);
2282 }
2283
2284 static inline void hostif_counters_init(struct ks_wlan_private *priv)
2285 {
2286         priv->dev_count = 0;
2287         atomic_set(&priv->event_count, 0);
2288         atomic_set(&priv->rec_count, 0);
2289 }
2290
2291 int hostif_init(struct ks_wlan_private *priv)
2292 {
2293         hostif_aplist_init(priv);
2294         hostif_status_init(priv);
2295
2296         spin_lock_init(&priv->multicast_spin);
2297         spin_lock_init(&priv->dev_read_lock);
2298         init_waitqueue_head(&priv->devread_wait);
2299
2300         hostif_counters_init(priv);
2301         hostif_power_save_init(priv);
2302         hostif_wpa_init(priv);
2303         hostif_pmklist_init(priv);
2304         hostif_sme_init(priv);
2305
2306         return 0;
2307 }
2308
2309 void hostif_exit(struct ks_wlan_private *priv)
2310 {
2311         cancel_work_sync(&priv->sme_work);
2312 }