1/*
2 * Copyright (c) 2006 Damien Bergamini <damien.bergamini@free.fr>
3 * Copyright (c) 2006 Sam Leffler, Errno Consulting
4 * Copyright (c) 2007 Christoph Hellwig <hch@lst.de>
5 * Copyright (c) 2008-2009 Weongyo Jeong <weongyo@freebsd.org>
6 * Copyright (c) 2012 Pontus Fuchs <pontus.fuchs@gmail.com>
7 *
8 * Permission to use, copy, modify, and/or distribute this software for any
9 * purpose with or without fee is hereby granted, provided that the above
10 * copyright notice and this permission notice appear in all copies.
11 *
12 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
13 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
14 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
15 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
16 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19 */
20
21/*
22 * This driver is based on the uath driver written by Damien Bergamini for
23 * OpenBSD, who did black-box analysis of the Windows binary driver to find
24 * out how the hardware works.  It contains a lot magic numbers because of
25 * that and only has minimal functionality.
26 */
27#include <linux/compiler.h>
28#include <linux/kernel.h>
29#include <linux/module.h>
30#include <linux/list.h>
31#include <linux/completion.h>
32#include <linux/firmware.h>
33#include <linux/skbuff.h>
34#include <linux/usb.h>
35#include <net/mac80211.h>
36
37#include "ar5523.h"
38#include "ar5523_hw.h"
39
40/*
41 * Various supported device vendors/products.
42 * UB51: AR5005UG 802.11b/g, UB52: AR5005UX 802.11a/b/g
43 */
44
45static int ar5523_submit_rx_cmd(struct ar5523 *ar);
46static void ar5523_data_tx_pkt_put(struct ar5523 *ar);
47
48static void ar5523_read_reply(struct ar5523 *ar, struct ar5523_cmd_hdr *hdr,
49			      struct ar5523_tx_cmd *cmd)
50{
51	int dlen, olen;
52	__be32 *rp;
53
54	dlen = be32_to_cpu(hdr->len) - sizeof(*hdr);
55
56	if (dlen < 0) {
57		WARN_ON(1);
58		goto out;
59	}
60
61	ar5523_dbg(ar, "Code = %d len = %d\n", be32_to_cpu(hdr->code) & 0xff,
62		   dlen);
63
64	rp = (__be32 *)(hdr + 1);
65	if (dlen >= sizeof(u32)) {
66		olen = be32_to_cpu(rp[0]);
67		dlen -= sizeof(u32);
68		if (olen == 0) {
69			/* convention is 0 =>'s one word */
70			olen = sizeof(u32);
71		}
72	} else
73		olen = 0;
74
75	if (cmd->odata) {
76		if (cmd->olen < olen) {
77			ar5523_err(ar, "olen to small %d < %d\n",
78				   cmd->olen, olen);
79			cmd->olen = 0;
80			cmd->res = -EOVERFLOW;
81		} else {
82			cmd->olen = olen;
83			memcpy(cmd->odata, &rp[1], olen);
84			cmd->res = 0;
85		}
86	}
87
88out:
89	complete(&cmd->done);
90}
91
92static void ar5523_cmd_rx_cb(struct urb *urb)
93{
94	struct ar5523 *ar = urb->context;
95	struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
96	struct ar5523_cmd_hdr *hdr = ar->rx_cmd_buf;
97	int dlen;
98	u32 code, hdrlen;
99
100	if (urb->status) {
101		if (urb->status != -ESHUTDOWN)
102			ar5523_err(ar, "RX USB error %d.\n", urb->status);
103		goto skip;
104	}
105
106	if (urb->actual_length < sizeof(struct ar5523_cmd_hdr)) {
107		ar5523_err(ar, "RX USB to short.\n");
108		goto skip;
109	}
110
111	ar5523_dbg(ar, "%s code %02x priv %d\n", __func__,
112		   be32_to_cpu(hdr->code) & 0xff, hdr->priv);
113
114	code = be32_to_cpu(hdr->code);
115	hdrlen = be32_to_cpu(hdr->len);
116
117	switch (code & 0xff) {
118	default:
119		/* reply to a read command */
120		if (hdr->priv != AR5523_CMD_ID) {
121			ar5523_err(ar, "Unexpected command id: %02x\n",
122				   code & 0xff);
123			goto skip;
124		}
125		ar5523_read_reply(ar, hdr, cmd);
126		break;
127
128	case WDCMSG_DEVICE_AVAIL:
129		ar5523_dbg(ar, "WDCMSG_DEVICE_AVAIL\n");
130		cmd->res = 0;
131		cmd->olen = 0;
132		complete(&cmd->done);
133		break;
134
135	case WDCMSG_SEND_COMPLETE:
136		ar5523_dbg(ar, "WDCMSG_SEND_COMPLETE: %d pending\n",
137			atomic_read(&ar->tx_nr_pending));
138		if (!test_bit(AR5523_HW_UP, &ar->flags))
139			ar5523_dbg(ar, "Unexpected WDCMSG_SEND_COMPLETE\n");
140		else {
141			mod_timer(&ar->tx_wd_timer,
142				  jiffies + AR5523_TX_WD_TIMEOUT);
143			ar5523_data_tx_pkt_put(ar);
144
145		}
146		break;
147
148	case WDCMSG_TARGET_START:
149		/* This command returns a bogus id so it needs special
150		   handling */
151		dlen = hdrlen - sizeof(*hdr);
152		if (dlen != (int)sizeof(u32)) {
153			ar5523_err(ar, "Invalid reply to WDCMSG_TARGET_START");
154			return;
155		}
156		memcpy(cmd->odata, hdr + 1, sizeof(u32));
157		cmd->olen = sizeof(u32);
158		cmd->res = 0;
159		complete(&cmd->done);
160		break;
161
162	case WDCMSG_STATS_UPDATE:
163		ar5523_dbg(ar, "WDCMSG_STATS_UPDATE\n");
164		break;
165	}
166
167skip:
168	ar5523_submit_rx_cmd(ar);
169}
170
171static int ar5523_alloc_rx_cmd(struct ar5523 *ar)
172{
173	ar->rx_cmd_urb = usb_alloc_urb(0, GFP_KERNEL);
174	if (!ar->rx_cmd_urb)
175		return -ENOMEM;
176
177	ar->rx_cmd_buf = usb_alloc_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
178					    GFP_KERNEL,
179					    &ar->rx_cmd_urb->transfer_dma);
180	if (!ar->rx_cmd_buf) {
181		usb_free_urb(ar->rx_cmd_urb);
182		return -ENOMEM;
183	}
184	return 0;
185}
186
187static void ar5523_cancel_rx_cmd(struct ar5523 *ar)
188{
189	usb_kill_urb(ar->rx_cmd_urb);
190}
191
192static void ar5523_free_rx_cmd(struct ar5523 *ar)
193{
194	usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ,
195			  ar->rx_cmd_buf, ar->rx_cmd_urb->transfer_dma);
196	usb_free_urb(ar->rx_cmd_urb);
197}
198
199static int ar5523_submit_rx_cmd(struct ar5523 *ar)
200{
201	int error;
202
203	usb_fill_bulk_urb(ar->rx_cmd_urb, ar->dev,
204			  ar5523_cmd_rx_pipe(ar->dev), ar->rx_cmd_buf,
205			  AR5523_MAX_RXCMDSZ, ar5523_cmd_rx_cb, ar);
206	ar->rx_cmd_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
207
208	error = usb_submit_urb(ar->rx_cmd_urb, GFP_ATOMIC);
209	if (error) {
210		if (error != -ENODEV)
211			ar5523_err(ar, "error %d when submitting rx urb\n",
212				   error);
213		return error;
214	}
215	return 0;
216}
217
218/*
219 * Command submitted cb
220 */
221static void ar5523_cmd_tx_cb(struct urb *urb)
222{
223	struct ar5523_tx_cmd *cmd = urb->context;
224	struct ar5523 *ar = cmd->ar;
225
226	if (urb->status) {
227		ar5523_err(ar, "Failed to TX command. Status = %d\n",
228			   urb->status);
229		cmd->res = urb->status;
230		complete(&cmd->done);
231		return;
232	}
233
234	if (!(cmd->flags & AR5523_CMD_FLAG_READ)) {
235		cmd->res = 0;
236		complete(&cmd->done);
237	}
238}
239
240static int ar5523_cmd(struct ar5523 *ar, u32 code, const void *idata,
241		      int ilen, void *odata, int olen, int flags)
242{
243	struct ar5523_cmd_hdr *hdr;
244	struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
245	int xferlen, error;
246
247	/* always bulk-out a multiple of 4 bytes */
248	xferlen = (sizeof(struct ar5523_cmd_hdr) + ilen + 3) & ~3;
249
250	hdr = (struct ar5523_cmd_hdr *)cmd->buf_tx;
251	memset(hdr, 0, sizeof(struct ar5523_cmd_hdr));
252	hdr->len  = cpu_to_be32(xferlen);
253	hdr->code = cpu_to_be32(code);
254	hdr->priv = AR5523_CMD_ID;
255
256	if (flags & AR5523_CMD_FLAG_MAGIC)
257		hdr->magic = cpu_to_be32(1 << 24);
258	memcpy(hdr + 1, idata, ilen);
259
260	cmd->odata = odata;
261	cmd->olen = olen;
262	cmd->flags = flags;
263
264	ar5523_dbg(ar, "do cmd %02x\n", code);
265
266	usb_fill_bulk_urb(cmd->urb_tx, ar->dev, ar5523_cmd_tx_pipe(ar->dev),
267			  cmd->buf_tx, xferlen, ar5523_cmd_tx_cb, cmd);
268	cmd->urb_tx->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
269
270	error = usb_submit_urb(cmd->urb_tx, GFP_KERNEL);
271	if (error) {
272		ar5523_err(ar, "could not send command 0x%x, error=%d\n",
273			   code, error);
274		return error;
275	}
276
277	if (!wait_for_completion_timeout(&cmd->done, 2 * HZ)) {
278		cmd->odata = NULL;
279		ar5523_err(ar, "timeout waiting for command %02x reply\n",
280			   code);
281		cmd->res = -ETIMEDOUT;
282	}
283	return cmd->res;
284}
285
286static int ar5523_cmd_write(struct ar5523 *ar, u32 code, const void *data,
287			    int len, int flags)
288{
289	flags &= ~AR5523_CMD_FLAG_READ;
290	return ar5523_cmd(ar, code, data, len, NULL, 0, flags);
291}
292
293static int ar5523_cmd_read(struct ar5523 *ar, u32 code, const void *idata,
294			   int ilen, void *odata, int olen, int flags)
295{
296	flags |= AR5523_CMD_FLAG_READ;
297	return ar5523_cmd(ar, code, idata, ilen, odata, olen, flags);
298}
299
300static int ar5523_config(struct ar5523 *ar, u32 reg, u32 val)
301{
302	struct ar5523_write_mac write;
303	int error;
304
305	write.reg = cpu_to_be32(reg);
306	write.len = cpu_to_be32(0);	/* 0 = single write */
307	*(__be32 *)write.data = cpu_to_be32(val);
308
309	error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
310				 3 * sizeof(u32), 0);
311	if (error != 0)
312		ar5523_err(ar, "could not write register 0x%02x\n", reg);
313	return error;
314}
315
316static int ar5523_config_multi(struct ar5523 *ar, u32 reg, const void *data,
317			       int len)
318{
319	struct ar5523_write_mac write;
320	int error;
321
322	write.reg = cpu_to_be32(reg);
323	write.len = cpu_to_be32(len);
324	memcpy(write.data, data, len);
325
326	/* properly handle the case where len is zero (reset) */
327	error = ar5523_cmd_write(ar, WDCMSG_TARGET_SET_CONFIG, &write,
328	    (len == 0) ? sizeof(u32) : 2 * sizeof(u32) + len, 0);
329	if (error != 0)
330		ar5523_err(ar, "could not write %d bytes to register 0x%02x\n",
331			   len, reg);
332	return error;
333}
334
335static int ar5523_get_status(struct ar5523 *ar, u32 which, void *odata,
336			     int olen)
337{
338	int error;
339	__be32 which_be;
340
341	which_be = cpu_to_be32(which);
342	error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_STATUS,
343	    &which_be, sizeof(which_be), odata, olen, AR5523_CMD_FLAG_MAGIC);
344	if (error != 0)
345		ar5523_err(ar, "could not read EEPROM offset 0x%02x\n", which);
346	return error;
347}
348
349static int ar5523_get_capability(struct ar5523 *ar, u32 cap, u32 *val)
350{
351	int error;
352	__be32 cap_be, val_be;
353
354	cap_be = cpu_to_be32(cap);
355	error = ar5523_cmd_read(ar, WDCMSG_TARGET_GET_CAPABILITY, &cap_be,
356				sizeof(cap_be), &val_be, sizeof(__be32),
357				AR5523_CMD_FLAG_MAGIC);
358	if (error != 0) {
359		ar5523_err(ar, "could not read capability %u\n", cap);
360		return error;
361	}
362	*val = be32_to_cpu(val_be);
363	return error;
364}
365
366static int ar5523_get_devcap(struct ar5523 *ar)
367{
368#define	GETCAP(x) do {				\
369	error = ar5523_get_capability(ar, x, &cap);		\
370	if (error != 0)					\
371		return error;				\
372	ar5523_info(ar, "Cap: "			\
373	    "%s=0x%08x\n", #x, cap);	\
374} while (0)
375	int error;
376	u32 cap;
377
378	/* collect device capabilities */
379	GETCAP(CAP_TARGET_VERSION);
380	GETCAP(CAP_TARGET_REVISION);
381	GETCAP(CAP_MAC_VERSION);
382	GETCAP(CAP_MAC_REVISION);
383	GETCAP(CAP_PHY_REVISION);
384	GETCAP(CAP_ANALOG_5GHz_REVISION);
385	GETCAP(CAP_ANALOG_2GHz_REVISION);
386
387	GETCAP(CAP_REG_DOMAIN);
388	GETCAP(CAP_REG_CAP_BITS);
389	GETCAP(CAP_WIRELESS_MODES);
390	GETCAP(CAP_CHAN_SPREAD_SUPPORT);
391	GETCAP(CAP_COMPRESS_SUPPORT);
392	GETCAP(CAP_BURST_SUPPORT);
393	GETCAP(CAP_FAST_FRAMES_SUPPORT);
394	GETCAP(CAP_CHAP_TUNING_SUPPORT);
395	GETCAP(CAP_TURBOG_SUPPORT);
396	GETCAP(CAP_TURBO_PRIME_SUPPORT);
397	GETCAP(CAP_DEVICE_TYPE);
398	GETCAP(CAP_WME_SUPPORT);
399	GETCAP(CAP_TOTAL_QUEUES);
400	GETCAP(CAP_CONNECTION_ID_MAX);
401
402	GETCAP(CAP_LOW_5GHZ_CHAN);
403	GETCAP(CAP_HIGH_5GHZ_CHAN);
404	GETCAP(CAP_LOW_2GHZ_CHAN);
405	GETCAP(CAP_HIGH_2GHZ_CHAN);
406	GETCAP(CAP_TWICE_ANTENNAGAIN_5G);
407	GETCAP(CAP_TWICE_ANTENNAGAIN_2G);
408
409	GETCAP(CAP_CIPHER_AES_CCM);
410	GETCAP(CAP_CIPHER_TKIP);
411	GETCAP(CAP_MIC_TKIP);
412	return 0;
413}
414
415static int ar5523_set_ledsteady(struct ar5523 *ar, int lednum, int ledmode)
416{
417	struct ar5523_cmd_ledsteady led;
418
419	led.lednum = cpu_to_be32(lednum);
420	led.ledmode = cpu_to_be32(ledmode);
421
422	ar5523_dbg(ar, "set %s led %s (steady)\n",
423		   (lednum == UATH_LED_LINK) ? "link" : "activity",
424		   ledmode ? "on" : "off");
425	return ar5523_cmd_write(ar, WDCMSG_SET_LED_STEADY, &led, sizeof(led),
426				 0);
427}
428
429static int ar5523_set_rxfilter(struct ar5523 *ar, u32 bits, u32 op)
430{
431	struct ar5523_cmd_rx_filter rxfilter;
432
433	rxfilter.bits = cpu_to_be32(bits);
434	rxfilter.op = cpu_to_be32(op);
435
436	ar5523_dbg(ar, "setting Rx filter=0x%x flags=0x%x\n", bits, op);
437	return ar5523_cmd_write(ar, WDCMSG_RX_FILTER, &rxfilter,
438				 sizeof(rxfilter), 0);
439}
440
441static int ar5523_reset_tx_queues(struct ar5523 *ar)
442{
443	__be32 qid = cpu_to_be32(0);
444
445	ar5523_dbg(ar, "resetting Tx queue\n");
446	return ar5523_cmd_write(ar, WDCMSG_RELEASE_TX_QUEUE,
447				 &qid, sizeof(qid), 0);
448}
449
450static int ar5523_set_chan(struct ar5523 *ar)
451{
452	struct ieee80211_conf *conf = &ar->hw->conf;
453
454	struct ar5523_cmd_reset reset;
455
456	memset(&reset, 0, sizeof(reset));
457	reset.flags |= cpu_to_be32(UATH_CHAN_2GHZ);
458	reset.flags |= cpu_to_be32(UATH_CHAN_OFDM);
459	reset.freq = cpu_to_be32(conf->chandef.chan->center_freq);
460	reset.maxrdpower = cpu_to_be32(50);	/* XXX */
461	reset.channelchange = cpu_to_be32(1);
462	reset.keeprccontent = cpu_to_be32(0);
463
464	ar5523_dbg(ar, "set chan flags 0x%x freq %d\n",
465		   be32_to_cpu(reset.flags),
466		   conf->chandef.chan->center_freq);
467	return ar5523_cmd_write(ar, WDCMSG_RESET, &reset, sizeof(reset), 0);
468}
469
470static int ar5523_queue_init(struct ar5523 *ar)
471{
472	struct ar5523_cmd_txq_setup qinfo;
473
474	ar5523_dbg(ar, "setting up Tx queue\n");
475	qinfo.qid	     = cpu_to_be32(0);
476	qinfo.len	     = cpu_to_be32(sizeof(qinfo.attr));
477	qinfo.attr.priority  = cpu_to_be32(0);	/* XXX */
478	qinfo.attr.aifs	     = cpu_to_be32(3);
479	qinfo.attr.logcwmin  = cpu_to_be32(4);
480	qinfo.attr.logcwmax  = cpu_to_be32(10);
481	qinfo.attr.bursttime = cpu_to_be32(0);
482	qinfo.attr.mode	     = cpu_to_be32(0);
483	qinfo.attr.qflags    = cpu_to_be32(1);	/* XXX? */
484	return ar5523_cmd_write(ar, WDCMSG_SETUP_TX_QUEUE, &qinfo,
485				 sizeof(qinfo), 0);
486}
487
488static int ar5523_switch_chan(struct ar5523 *ar)
489{
490	int error;
491
492	error = ar5523_set_chan(ar);
493	if (error) {
494		ar5523_err(ar, "could not set chan, error %d\n", error);
495		goto out_err;
496	}
497
498	/* reset Tx rings */
499	error = ar5523_reset_tx_queues(ar);
500	if (error) {
501		ar5523_err(ar, "could not reset Tx queues, error %d\n",
502			   error);
503		goto out_err;
504	}
505	/* set Tx rings WME properties */
506	error = ar5523_queue_init(ar);
507	if (error)
508		ar5523_err(ar, "could not init wme, error %d\n", error);
509
510out_err:
511	return error;
512}
513
514static void ar5523_rx_data_put(struct ar5523 *ar,
515				struct ar5523_rx_data *data)
516{
517	unsigned long flags;
518	spin_lock_irqsave(&ar->rx_data_list_lock, flags);
519	list_move(&data->list, &ar->rx_data_free);
520	spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
521}
522
523static void ar5523_data_rx_cb(struct urb *urb)
524{
525	struct ar5523_rx_data *data = urb->context;
526	struct ar5523 *ar = data->ar;
527	struct ar5523_rx_desc *desc;
528	struct ar5523_chunk *chunk;
529	struct ieee80211_hw *hw = ar->hw;
530	struct ieee80211_rx_status *rx_status;
531	u32 rxlen;
532	int usblen = urb->actual_length;
533	int hdrlen, pad;
534
535	ar5523_dbg(ar, "%s\n", __func__);
536	/* sync/async unlink faults aren't errors */
537	if (urb->status) {
538		if (urb->status != -ESHUTDOWN)
539			ar5523_err(ar, "%s: USB err: %d\n", __func__,
540				   urb->status);
541		goto skip;
542	}
543
544	if (usblen < AR5523_MIN_RXBUFSZ) {
545		ar5523_err(ar, "RX: wrong xfer size (usblen=%d)\n", usblen);
546		goto skip;
547	}
548
549	chunk = (struct ar5523_chunk *) data->skb->data;
550
551	if (((chunk->flags & UATH_CFLAGS_FINAL) == 0) ||
552		chunk->seqnum != 0) {
553		ar5523_dbg(ar, "RX: No final flag. s: %d f: %02x l: %d\n",
554			   chunk->seqnum, chunk->flags,
555			   be16_to_cpu(chunk->length));
556		goto skip;
557	}
558
559	/* Rx descriptor is located at the end, 32-bit aligned */
560	desc = (struct ar5523_rx_desc *)
561		(data->skb->data + usblen - sizeof(struct ar5523_rx_desc));
562
563	rxlen = be32_to_cpu(desc->len);
564	if (rxlen > ar->rxbufsz) {
565		ar5523_dbg(ar, "RX: Bad descriptor (len=%d)\n",
566			   be32_to_cpu(desc->len));
567		goto skip;
568	}
569
570	if (!rxlen) {
571		ar5523_dbg(ar, "RX: rxlen is 0\n");
572		goto skip;
573	}
574
575	if (be32_to_cpu(desc->status) != 0) {
576		ar5523_dbg(ar, "Bad RX status (0x%x len = %d). Skip\n",
577			   be32_to_cpu(desc->status), be32_to_cpu(desc->len));
578		goto skip;
579	}
580
581	skb_reserve(data->skb, sizeof(*chunk));
582	skb_put(data->skb, rxlen - sizeof(struct ar5523_rx_desc));
583
584	hdrlen = ieee80211_get_hdrlen_from_skb(data->skb);
585	if (!IS_ALIGNED(hdrlen, 4)) {
586		ar5523_dbg(ar, "eek, alignment workaround activated\n");
587		pad = ALIGN(hdrlen, 4) - hdrlen;
588		memmove(data->skb->data + pad, data->skb->data, hdrlen);
589		skb_pull(data->skb, pad);
590		skb_put(data->skb, pad);
591	}
592
593	rx_status = IEEE80211_SKB_RXCB(data->skb);
594	memset(rx_status, 0, sizeof(*rx_status));
595	rx_status->freq = be32_to_cpu(desc->channel);
596	rx_status->band = hw->conf.chandef.chan->band;
597	rx_status->signal = -95 + be32_to_cpu(desc->rssi);
598
599	ieee80211_rx_irqsafe(hw, data->skb);
600	data->skb = NULL;
601
602skip:
603	if (data->skb) {
604		dev_kfree_skb_irq(data->skb);
605		data->skb = NULL;
606	}
607
608	ar5523_rx_data_put(ar, data);
609	if (atomic_inc_return(&ar->rx_data_free_cnt) >=
610	    AR5523_RX_DATA_REFILL_COUNT &&
611	    test_bit(AR5523_HW_UP, &ar->flags))
612		queue_work(ar->wq, &ar->rx_refill_work);
613}
614
615static void ar5523_rx_refill_work(struct work_struct *work)
616{
617	struct ar5523 *ar = container_of(work, struct ar5523, rx_refill_work);
618	struct ar5523_rx_data *data;
619	unsigned long flags;
620	int error;
621
622	ar5523_dbg(ar, "%s\n", __func__);
623	do {
624		spin_lock_irqsave(&ar->rx_data_list_lock, flags);
625
626		if (!list_empty(&ar->rx_data_free))
627			data = (struct ar5523_rx_data *) ar->rx_data_free.next;
628		else
629			data = NULL;
630		spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
631
632		if (!data)
633			goto done;
634
635		data->skb = alloc_skb(ar->rxbufsz, GFP_KERNEL);
636		if (!data->skb) {
637			ar5523_err(ar, "could not allocate rx skbuff\n");
638			return;
639		}
640
641		usb_fill_bulk_urb(data->urb, ar->dev,
642				  ar5523_data_rx_pipe(ar->dev), data->skb->data,
643				  ar->rxbufsz, ar5523_data_rx_cb, data);
644
645		spin_lock_irqsave(&ar->rx_data_list_lock, flags);
646		list_move(&data->list, &ar->rx_data_used);
647		spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
648		atomic_dec(&ar->rx_data_free_cnt);
649
650		error = usb_submit_urb(data->urb, GFP_KERNEL);
651		if (error) {
652			kfree_skb(data->skb);
653			if (error != -ENODEV)
654				ar5523_err(ar, "Err sending rx data urb %d\n",
655					   error);
656			ar5523_rx_data_put(ar, data);
657			atomic_inc(&ar->rx_data_free_cnt);
658			return;
659		}
660
661	} while (true);
662done:
663	return;
664}
665
666static void ar5523_cancel_rx_bufs(struct ar5523 *ar)
667{
668	struct ar5523_rx_data *data;
669	unsigned long flags;
670
671	do {
672		spin_lock_irqsave(&ar->rx_data_list_lock, flags);
673		if (!list_empty(&ar->rx_data_used))
674			data = (struct ar5523_rx_data *) ar->rx_data_used.next;
675		else
676			data = NULL;
677		spin_unlock_irqrestore(&ar->rx_data_list_lock, flags);
678
679		if (!data)
680			break;
681
682		usb_kill_urb(data->urb);
683		list_move(&data->list, &ar->rx_data_free);
684		atomic_inc(&ar->rx_data_free_cnt);
685	} while (data);
686}
687
688static void ar5523_free_rx_bufs(struct ar5523 *ar)
689{
690	struct ar5523_rx_data *data;
691
692	ar5523_cancel_rx_bufs(ar);
693	while (!list_empty(&ar->rx_data_free)) {
694		data = (struct ar5523_rx_data *) ar->rx_data_free.next;
695		list_del(&data->list);
696		usb_free_urb(data->urb);
697	}
698}
699
700static int ar5523_alloc_rx_bufs(struct ar5523 *ar)
701{
702	int i;
703
704	for (i = 0; i < AR5523_RX_DATA_COUNT; i++) {
705		struct ar5523_rx_data *data = &ar->rx_data[i];
706
707		data->ar = ar;
708		data->urb = usb_alloc_urb(0, GFP_KERNEL);
709		if (!data->urb) {
710			ar5523_err(ar, "could not allocate rx data urb\n");
711			goto err;
712		}
713		list_add_tail(&data->list, &ar->rx_data_free);
714		atomic_inc(&ar->rx_data_free_cnt);
715	}
716	return 0;
717
718err:
719	ar5523_free_rx_bufs(ar);
720	return -ENOMEM;
721}
722
723static void ar5523_data_tx_pkt_put(struct ar5523 *ar)
724{
725	atomic_dec(&ar->tx_nr_total);
726	if (!atomic_dec_return(&ar->tx_nr_pending)) {
727		del_timer(&ar->tx_wd_timer);
728		wake_up(&ar->tx_flush_waitq);
729	}
730
731	if (atomic_read(&ar->tx_nr_total) < AR5523_TX_DATA_RESTART_COUNT) {
732		ar5523_dbg(ar, "restart tx queue\n");
733		ieee80211_wake_queues(ar->hw);
734	}
735}
736
737static void ar5523_data_tx_cb(struct urb *urb)
738{
739	struct sk_buff *skb = urb->context;
740	struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
741	struct ar5523_tx_data *data = (struct ar5523_tx_data *)
742				       txi->driver_data;
743	struct ar5523 *ar = data->ar;
744	unsigned long flags;
745
746	ar5523_dbg(ar, "data tx urb completed: %d\n", urb->status);
747
748	spin_lock_irqsave(&ar->tx_data_list_lock, flags);
749	list_del(&data->list);
750	spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
751
752	if (urb->status) {
753		ar5523_dbg(ar, "%s: urb status: %d\n", __func__, urb->status);
754		ar5523_data_tx_pkt_put(ar);
755		ieee80211_free_txskb(ar->hw, skb);
756	} else {
757		skb_pull(skb, sizeof(struct ar5523_tx_desc) + sizeof(__be32));
758		ieee80211_tx_status_irqsafe(ar->hw, skb);
759	}
760	usb_free_urb(urb);
761}
762
763static void ar5523_tx(struct ieee80211_hw *hw,
764		       struct ieee80211_tx_control *control,
765		       struct sk_buff *skb)
766{
767	struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
768	struct ar5523_tx_data *data = (struct ar5523_tx_data *)
769					txi->driver_data;
770	struct ar5523 *ar = hw->priv;
771	unsigned long flags;
772
773	ar5523_dbg(ar, "tx called\n");
774	if (atomic_inc_return(&ar->tx_nr_total) >= AR5523_TX_DATA_COUNT) {
775		ar5523_dbg(ar, "tx queue full\n");
776		ar5523_dbg(ar, "stop queues (tot %d pend %d)\n",
777			   atomic_read(&ar->tx_nr_total),
778			   atomic_read(&ar->tx_nr_pending));
779		ieee80211_stop_queues(hw);
780	}
781
782	spin_lock_irqsave(&ar->tx_data_list_lock, flags);
783	list_add_tail(&data->list, &ar->tx_queue_pending);
784	spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
785
786	ieee80211_queue_work(ar->hw, &ar->tx_work);
787}
788
789static void ar5523_tx_work_locked(struct ar5523 *ar)
790{
791	struct ar5523_tx_data *data;
792	struct ar5523_tx_desc *desc;
793	struct ar5523_chunk *chunk;
794	struct ieee80211_tx_info *txi;
795	struct urb *urb;
796	struct sk_buff *skb;
797	int error = 0, paylen;
798	u32 txqid;
799	unsigned long flags;
800
801	BUILD_BUG_ON(sizeof(struct ar5523_tx_data) >
802		     IEEE80211_TX_INFO_DRIVER_DATA_SIZE);
803
804	ar5523_dbg(ar, "%s\n", __func__);
805	do {
806		spin_lock_irqsave(&ar->tx_data_list_lock, flags);
807		if (!list_empty(&ar->tx_queue_pending)) {
808			data = (struct ar5523_tx_data *)
809				ar->tx_queue_pending.next;
810			list_del(&data->list);
811		} else
812			data = NULL;
813		spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
814
815		if (!data)
816			break;
817
818		txi = container_of((void *)data, struct ieee80211_tx_info,
819				   driver_data);
820		txqid = 0;
821
822		skb = container_of((void *)txi, struct sk_buff, cb);
823		paylen = skb->len;
824
825		urb = usb_alloc_urb(0, GFP_KERNEL);
826		if (!urb) {
827			ar5523_err(ar, "Failed to allocate TX urb\n");
828			ieee80211_free_txskb(ar->hw, skb);
829			continue;
830		}
831
832		data->ar = ar;
833		data->urb = urb;
834
835		desc = (struct ar5523_tx_desc *)skb_push(skb, sizeof(*desc));
836		chunk = (struct ar5523_chunk *)skb_push(skb, sizeof(*chunk));
837
838		chunk->seqnum = 0;
839		chunk->flags = UATH_CFLAGS_FINAL;
840		chunk->length = cpu_to_be16(skb->len);
841
842		desc->msglen = cpu_to_be32(skb->len);
843		desc->msgid  = AR5523_DATA_ID;
844		desc->buflen = cpu_to_be32(paylen);
845		desc->type   = cpu_to_be32(WDCMSG_SEND);
846		desc->flags  = cpu_to_be32(UATH_TX_NOTIFY);
847
848		if (test_bit(AR5523_CONNECTED, &ar->flags))
849			desc->connid = cpu_to_be32(AR5523_ID_BSS);
850		else
851			desc->connid = cpu_to_be32(AR5523_ID_BROADCAST);
852
853		if (txi->flags & IEEE80211_TX_CTL_USE_MINRATE)
854			txqid |= UATH_TXQID_MINRATE;
855
856		desc->txqid = cpu_to_be32(txqid);
857
858		urb->transfer_flags = URB_ZERO_PACKET;
859		usb_fill_bulk_urb(urb, ar->dev, ar5523_data_tx_pipe(ar->dev),
860				  skb->data, skb->len, ar5523_data_tx_cb, skb);
861
862		spin_lock_irqsave(&ar->tx_data_list_lock, flags);
863		list_add_tail(&data->list, &ar->tx_queue_submitted);
864		spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
865		mod_timer(&ar->tx_wd_timer, jiffies + AR5523_TX_WD_TIMEOUT);
866		atomic_inc(&ar->tx_nr_pending);
867
868		ar5523_dbg(ar, "TX Frame (%d pending)\n",
869			   atomic_read(&ar->tx_nr_pending));
870		error = usb_submit_urb(urb, GFP_KERNEL);
871		if (error) {
872			ar5523_err(ar, "error %d when submitting tx urb\n",
873				   error);
874			spin_lock_irqsave(&ar->tx_data_list_lock, flags);
875			list_del(&data->list);
876			spin_unlock_irqrestore(&ar->tx_data_list_lock, flags);
877			atomic_dec(&ar->tx_nr_pending);
878			ar5523_data_tx_pkt_put(ar);
879			usb_free_urb(urb);
880			ieee80211_free_txskb(ar->hw, skb);
881		}
882	} while (true);
883}
884
885static void ar5523_tx_work(struct work_struct *work)
886{
887	struct ar5523 *ar = container_of(work, struct ar5523, tx_work);
888
889	ar5523_dbg(ar, "%s\n", __func__);
890	mutex_lock(&ar->mutex);
891	ar5523_tx_work_locked(ar);
892	mutex_unlock(&ar->mutex);
893}
894
895static void ar5523_tx_wd_timer(unsigned long arg)
896{
897	struct ar5523 *ar = (struct ar5523 *) arg;
898
899	ar5523_dbg(ar, "TX watchdog timer triggered\n");
900	ieee80211_queue_work(ar->hw, &ar->tx_wd_work);
901}
902
903static void ar5523_tx_wd_work(struct work_struct *work)
904{
905	struct ar5523 *ar = container_of(work, struct ar5523, tx_wd_work);
906
907	/* Occasionally the TX queues stop responding. The only way to
908	 * recover seems to be to reset the dongle.
909	 */
910
911	mutex_lock(&ar->mutex);
912	ar5523_err(ar, "TX queue stuck (tot %d pend %d)\n",
913		   atomic_read(&ar->tx_nr_total),
914		   atomic_read(&ar->tx_nr_pending));
915
916	ar5523_err(ar, "Will restart dongle.\n");
917	ar5523_cmd_write(ar, WDCMSG_TARGET_RESET, NULL, 0, 0);
918	mutex_unlock(&ar->mutex);
919}
920
921static void ar5523_flush_tx(struct ar5523 *ar)
922{
923	ar5523_tx_work_locked(ar);
924
925	/* Don't waste time trying to flush if USB is disconnected */
926	if (test_bit(AR5523_USB_DISCONNECTED, &ar->flags))
927		return;
928	if (!wait_event_timeout(ar->tx_flush_waitq,
929	    !atomic_read(&ar->tx_nr_pending), AR5523_FLUSH_TIMEOUT))
930		ar5523_err(ar, "flush timeout (tot %d pend %d)\n",
931			   atomic_read(&ar->tx_nr_total),
932			   atomic_read(&ar->tx_nr_pending));
933}
934
935static void ar5523_free_tx_cmd(struct ar5523 *ar)
936{
937	struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
938
939	usb_free_coherent(ar->dev, AR5523_MAX_RXCMDSZ, cmd->buf_tx,
940			  cmd->urb_tx->transfer_dma);
941	usb_free_urb(cmd->urb_tx);
942}
943
944static int ar5523_alloc_tx_cmd(struct ar5523 *ar)
945{
946	struct ar5523_tx_cmd *cmd = &ar->tx_cmd;
947
948	cmd->ar = ar;
949	init_completion(&cmd->done);
950
951	cmd->urb_tx = usb_alloc_urb(0, GFP_KERNEL);
952	if (!cmd->urb_tx) {
953		ar5523_err(ar, "could not allocate urb\n");
954		return -ENOMEM;
955	}
956	cmd->buf_tx = usb_alloc_coherent(ar->dev, AR5523_MAX_TXCMDSZ,
957					 GFP_KERNEL,
958					 &cmd->urb_tx->transfer_dma);
959	if (!cmd->buf_tx) {
960		usb_free_urb(cmd->urb_tx);
961		return -ENOMEM;
962	}
963	return 0;
964}
965
966/*
967 * This function is called periodically (every second) when associated to
968 * query device statistics.
969 */
970static void ar5523_stat_work(struct work_struct *work)
971{
972	struct ar5523 *ar = container_of(work, struct ar5523, stat_work.work);
973	int error;
974
975	ar5523_dbg(ar, "%s\n", __func__);
976	mutex_lock(&ar->mutex);
977
978	/*
979	 * Send request for statistics asynchronously once a second. This
980	 * seems to be important. Throughput is a lot better if this is done.
981	 */
982	error = ar5523_cmd_write(ar, WDCMSG_TARGET_GET_STATS, NULL, 0, 0);
983	if (error)
984		ar5523_err(ar, "could not query stats, error %d\n", error);
985	mutex_unlock(&ar->mutex);
986	ieee80211_queue_delayed_work(ar->hw, &ar->stat_work, HZ);
987}
988
989/*
990 * Interface routines to the mac80211 stack.
991 */
992static int ar5523_start(struct ieee80211_hw *hw)
993{
994	struct ar5523 *ar = hw->priv;
995	int error;
996	__be32 val;
997
998	ar5523_dbg(ar, "start called\n");
999
1000	mutex_lock(&ar->mutex);
1001	val = cpu_to_be32(0);
1002	ar5523_cmd_write(ar, WDCMSG_BIND, &val, sizeof(val), 0);
1003
1004	/* set MAC address */
1005	ar5523_config_multi(ar, CFG_MAC_ADDR, &ar->hw->wiphy->perm_addr,
1006			    ETH_ALEN);
1007
1008	/* XXX honor net80211 state */
1009	ar5523_config(ar, CFG_RATE_CONTROL_ENABLE, 0x00000001);
1010	ar5523_config(ar, CFG_DIVERSITY_CTL, 0x00000001);
1011	ar5523_config(ar, CFG_ABOLT, 0x0000003f);
1012	ar5523_config(ar, CFG_WME_ENABLED, 0x00000000);
1013
1014	ar5523_config(ar, CFG_SERVICE_TYPE, 1);
1015	ar5523_config(ar, CFG_TP_SCALE, 0x00000000);
1016	ar5523_config(ar, CFG_TPC_HALF_DBM5, 0x0000003c);
1017	ar5523_config(ar, CFG_TPC_HALF_DBM2, 0x0000003c);
1018	ar5523_config(ar, CFG_OVERRD_TX_POWER, 0x00000000);
1019	ar5523_config(ar, CFG_GMODE_PROTECTION, 0x00000000);
1020	ar5523_config(ar, CFG_GMODE_PROTECT_RATE_INDEX, 0x00000003);
1021	ar5523_config(ar, CFG_PROTECTION_TYPE, 0x00000000);
1022	ar5523_config(ar, CFG_MODE_CTS, 0x00000002);
1023
1024	error = ar5523_cmd_read(ar, WDCMSG_TARGET_START, NULL, 0,
1025	    &val, sizeof(val), AR5523_CMD_FLAG_MAGIC);
1026	if (error) {
1027		ar5523_dbg(ar, "could not start target, error %d\n", error);
1028		goto err;
1029	}
1030	ar5523_dbg(ar, "WDCMSG_TARGET_START returns handle: 0x%x\n",
1031		   be32_to_cpu(val));
1032
1033	ar5523_switch_chan(ar);
1034
1035	val = cpu_to_be32(TARGET_DEVICE_AWAKE);
1036	ar5523_cmd_write(ar, WDCMSG_SET_PWR_MODE, &val, sizeof(val), 0);
1037	/* XXX? check */
1038	ar5523_cmd_write(ar, WDCMSG_RESET_KEY_CACHE, NULL, 0, 0);
1039
1040	set_bit(AR5523_HW_UP, &ar->flags);
1041	queue_work(ar->wq, &ar->rx_refill_work);
1042
1043	/* enable Rx */
1044	ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1045	ar5523_set_rxfilter(ar,
1046			    UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1047			    UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON,
1048			    UATH_FILTER_OP_SET);
1049
1050	ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_ON);
1051	ar5523_dbg(ar, "start OK\n");
1052
1053err:
1054	mutex_unlock(&ar->mutex);
1055	return error;
1056}
1057
1058static void ar5523_stop(struct ieee80211_hw *hw)
1059{
1060	struct ar5523 *ar = hw->priv;
1061
1062	ar5523_dbg(ar, "stop called\n");
1063
1064	cancel_delayed_work_sync(&ar->stat_work);
1065	mutex_lock(&ar->mutex);
1066	clear_bit(AR5523_HW_UP, &ar->flags);
1067
1068	ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1069	ar5523_set_ledsteady(ar, UATH_LED_ACTIVITY, UATH_LED_OFF);
1070
1071	ar5523_cmd_write(ar, WDCMSG_TARGET_STOP, NULL, 0, 0);
1072
1073	del_timer_sync(&ar->tx_wd_timer);
1074	cancel_work_sync(&ar->tx_wd_work);
1075	cancel_work_sync(&ar->rx_refill_work);
1076	ar5523_cancel_rx_bufs(ar);
1077	mutex_unlock(&ar->mutex);
1078}
1079
1080static int ar5523_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1081{
1082	struct ar5523 *ar = hw->priv;
1083	int ret;
1084
1085	ar5523_dbg(ar, "set_rts_threshold called\n");
1086	mutex_lock(&ar->mutex);
1087
1088	ret = ar5523_config(ar, CFG_USER_RTS_THRESHOLD, value);
1089
1090	mutex_unlock(&ar->mutex);
1091	return ret;
1092}
1093
1094static void ar5523_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1095			 u32 queues, bool drop)
1096{
1097	struct ar5523 *ar = hw->priv;
1098
1099	ar5523_dbg(ar, "flush called\n");
1100	ar5523_flush_tx(ar);
1101}
1102
1103static int ar5523_add_interface(struct ieee80211_hw *hw,
1104				struct ieee80211_vif *vif)
1105{
1106	struct ar5523 *ar = hw->priv;
1107
1108	ar5523_dbg(ar, "add interface called\n");
1109
1110	if (ar->vif) {
1111		ar5523_dbg(ar, "invalid add_interface\n");
1112		return -EOPNOTSUPP;
1113	}
1114
1115	switch (vif->type) {
1116	case NL80211_IFTYPE_STATION:
1117		ar->vif = vif;
1118		break;
1119	default:
1120		return -EOPNOTSUPP;
1121	}
1122	return 0;
1123}
1124
1125static void ar5523_remove_interface(struct ieee80211_hw *hw,
1126				    struct ieee80211_vif *vif)
1127{
1128	struct ar5523 *ar = hw->priv;
1129
1130	ar5523_dbg(ar, "remove interface called\n");
1131	ar->vif = NULL;
1132}
1133
1134static int ar5523_hwconfig(struct ieee80211_hw *hw, u32 changed)
1135{
1136	struct ar5523 *ar = hw->priv;
1137
1138	ar5523_dbg(ar, "config called\n");
1139	mutex_lock(&ar->mutex);
1140	if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
1141		ar5523_dbg(ar, "Do channel switch\n");
1142		ar5523_flush_tx(ar);
1143		ar5523_switch_chan(ar);
1144	}
1145	mutex_unlock(&ar->mutex);
1146	return 0;
1147}
1148
1149static int ar5523_get_wlan_mode(struct ar5523 *ar,
1150				struct ieee80211_bss_conf *bss_conf)
1151{
1152	struct ieee80211_supported_band *band;
1153	int bit;
1154	struct ieee80211_sta *sta;
1155	u32 sta_rate_set;
1156
1157	band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1158	sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1159	if (!sta) {
1160		ar5523_info(ar, "STA not found!\n");
1161		return WLAN_MODE_11b;
1162	}
1163	sta_rate_set = sta->supp_rates[ar->hw->conf.chandef.chan->band];
1164
1165	for (bit = 0; bit < band->n_bitrates; bit++) {
1166		if (sta_rate_set & 1) {
1167			int rate = band->bitrates[bit].bitrate;
1168			switch (rate) {
1169			case 60:
1170			case 90:
1171			case 120:
1172			case 180:
1173			case 240:
1174			case 360:
1175			case 480:
1176			case 540:
1177				return WLAN_MODE_11g;
1178			}
1179		}
1180		sta_rate_set >>= 1;
1181	}
1182	return WLAN_MODE_11b;
1183}
1184
1185static void ar5523_create_rateset(struct ar5523 *ar,
1186				  struct ieee80211_bss_conf *bss_conf,
1187				  struct ar5523_cmd_rateset *rs,
1188				  bool basic)
1189{
1190	struct ieee80211_supported_band *band;
1191	struct ieee80211_sta *sta;
1192	int bit, i = 0;
1193	u32 sta_rate_set, basic_rate_set;
1194
1195	sta = ieee80211_find_sta(ar->vif, bss_conf->bssid);
1196	basic_rate_set = bss_conf->basic_rates;
1197	if (!sta) {
1198		ar5523_info(ar, "STA not found. Cannot set rates\n");
1199		sta_rate_set = bss_conf->basic_rates;
1200	} else
1201		sta_rate_set = sta->supp_rates[ar->hw->conf.chandef.chan->band];
1202
1203	ar5523_dbg(ar, "sta rate_set = %08x\n", sta_rate_set);
1204
1205	band = ar->hw->wiphy->bands[ar->hw->conf.chandef.chan->band];
1206	for (bit = 0; bit < band->n_bitrates; bit++) {
1207		BUG_ON(i >= AR5523_MAX_NRATES);
1208		ar5523_dbg(ar, "Considering rate %d : %d\n",
1209			   band->bitrates[bit].hw_value, sta_rate_set & 1);
1210		if (sta_rate_set & 1) {
1211			rs->set[i] = band->bitrates[bit].hw_value;
1212			if (basic_rate_set & 1 && basic)
1213				rs->set[i] |= 0x80;
1214			i++;
1215		}
1216		sta_rate_set >>= 1;
1217		basic_rate_set >>= 1;
1218	}
1219
1220	rs->length = i;
1221}
1222
1223static int ar5523_set_basic_rates(struct ar5523 *ar,
1224				  struct ieee80211_bss_conf *bss)
1225{
1226	struct ar5523_cmd_rates rates;
1227
1228	memset(&rates, 0, sizeof(rates));
1229	rates.connid = cpu_to_be32(2);		/* XXX */
1230	rates.size   = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1231	ar5523_create_rateset(ar, bss, &rates.rateset, true);
1232
1233	return ar5523_cmd_write(ar, WDCMSG_SET_BASIC_RATE, &rates,
1234				sizeof(rates), 0);
1235}
1236
1237static int ar5523_create_connection(struct ar5523 *ar,
1238				    struct ieee80211_vif *vif,
1239				    struct ieee80211_bss_conf *bss)
1240{
1241	struct ar5523_cmd_create_connection create;
1242	int wlan_mode;
1243
1244	memset(&create, 0, sizeof(create));
1245	create.connid = cpu_to_be32(2);
1246	create.bssid = cpu_to_be32(0);
1247	/* XXX packed or not?  */
1248	create.size = cpu_to_be32(sizeof(struct ar5523_cmd_rateset));
1249
1250	ar5523_create_rateset(ar, bss, &create.connattr.rateset, false);
1251
1252	wlan_mode = ar5523_get_wlan_mode(ar, bss);
1253	create.connattr.wlanmode = cpu_to_be32(wlan_mode);
1254
1255	return ar5523_cmd_write(ar, WDCMSG_CREATE_CONNECTION, &create,
1256				sizeof(create), 0);
1257}
1258
1259static int ar5523_write_associd(struct ar5523 *ar,
1260				struct ieee80211_bss_conf *bss)
1261{
1262	struct ar5523_cmd_set_associd associd;
1263
1264	memset(&associd, 0, sizeof(associd));
1265	associd.defaultrateix = cpu_to_be32(0);	/* XXX */
1266	associd.associd = cpu_to_be32(bss->aid);
1267	associd.timoffset = cpu_to_be32(0x3b);	/* XXX */
1268	memcpy(associd.bssid, bss->bssid, ETH_ALEN);
1269	return ar5523_cmd_write(ar, WDCMSG_WRITE_ASSOCID, &associd,
1270				sizeof(associd), 0);
1271}
1272
1273static void ar5523_bss_info_changed(struct ieee80211_hw *hw,
1274				    struct ieee80211_vif *vif,
1275				    struct ieee80211_bss_conf *bss,
1276				    u32 changed)
1277{
1278	struct ar5523 *ar = hw->priv;
1279	int error;
1280
1281	ar5523_dbg(ar, "bss_info_changed called\n");
1282	mutex_lock(&ar->mutex);
1283
1284	if (!(changed & BSS_CHANGED_ASSOC))
1285		goto out_unlock;
1286
1287	if (bss->assoc) {
1288		error = ar5523_create_connection(ar, vif, bss);
1289		if (error) {
1290			ar5523_err(ar, "could not create connection\n");
1291			goto out_unlock;
1292		}
1293
1294		error = ar5523_set_basic_rates(ar, bss);
1295		if (error) {
1296			ar5523_err(ar, "could not set negotiated rate set\n");
1297			goto out_unlock;
1298		}
1299
1300		error = ar5523_write_associd(ar, bss);
1301		if (error) {
1302			ar5523_err(ar, "could not set association\n");
1303			goto out_unlock;
1304		}
1305
1306		/* turn link LED on */
1307		ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_ON);
1308		set_bit(AR5523_CONNECTED, &ar->flags);
1309		ieee80211_queue_delayed_work(hw, &ar->stat_work, HZ);
1310
1311	} else {
1312		cancel_delayed_work(&ar->stat_work);
1313		clear_bit(AR5523_CONNECTED, &ar->flags);
1314		ar5523_set_ledsteady(ar, UATH_LED_LINK, UATH_LED_OFF);
1315	}
1316
1317out_unlock:
1318	mutex_unlock(&ar->mutex);
1319
1320}
1321
1322#define AR5523_SUPPORTED_FILTERS (FIF_PROMISC_IN_BSS | \
1323				  FIF_ALLMULTI | \
1324				  FIF_FCSFAIL | \
1325				  FIF_OTHER_BSS)
1326
1327static void ar5523_configure_filter(struct ieee80211_hw *hw,
1328				    unsigned int changed_flags,
1329				    unsigned int *total_flags,
1330				    u64 multicast)
1331{
1332	struct ar5523 *ar = hw->priv;
1333	u32 filter = 0;
1334
1335	ar5523_dbg(ar, "configure_filter called\n");
1336	mutex_lock(&ar->mutex);
1337	ar5523_flush_tx(ar);
1338
1339	*total_flags &= AR5523_SUPPORTED_FILTERS;
1340
1341	/* The filters seems strange. UATH_FILTER_RX_BCAST and
1342	 * UATH_FILTER_RX_MCAST does not result in those frames being RXed.
1343	 * The only way I have found to get [mb]cast frames seems to be
1344	 * to set UATH_FILTER_RX_PROM. */
1345	filter |= UATH_FILTER_RX_UCAST | UATH_FILTER_RX_MCAST |
1346		  UATH_FILTER_RX_BCAST | UATH_FILTER_RX_BEACON |
1347		  UATH_FILTER_RX_PROM;
1348
1349	ar5523_set_rxfilter(ar, 0, UATH_FILTER_OP_INIT);
1350	ar5523_set_rxfilter(ar, filter, UATH_FILTER_OP_SET);
1351
1352	mutex_unlock(&ar->mutex);
1353}
1354
1355static const struct ieee80211_ops ar5523_ops = {
1356	.start			= ar5523_start,
1357	.stop			= ar5523_stop,
1358	.tx			= ar5523_tx,
1359	.set_rts_threshold	= ar5523_set_rts_threshold,
1360	.add_interface		= ar5523_add_interface,
1361	.remove_interface	= ar5523_remove_interface,
1362	.config			= ar5523_hwconfig,
1363	.bss_info_changed	= ar5523_bss_info_changed,
1364	.configure_filter	= ar5523_configure_filter,
1365	.flush			= ar5523_flush,
1366};
1367
1368static int ar5523_host_available(struct ar5523 *ar)
1369{
1370	struct ar5523_cmd_host_available setup;
1371
1372	/* inform target the host is available */
1373	setup.sw_ver_major = cpu_to_be32(ATH_SW_VER_MAJOR);
1374	setup.sw_ver_minor = cpu_to_be32(ATH_SW_VER_MINOR);
1375	setup.sw_ver_patch = cpu_to_be32(ATH_SW_VER_PATCH);
1376	setup.sw_ver_build = cpu_to_be32(ATH_SW_VER_BUILD);
1377	return ar5523_cmd_read(ar, WDCMSG_HOST_AVAILABLE,
1378			       &setup, sizeof(setup), NULL, 0, 0);
1379}
1380
1381static int ar5523_get_devstatus(struct ar5523 *ar)
1382{
1383	u8 macaddr[ETH_ALEN];
1384	int error;
1385
1386	/* retrieve MAC address */
1387	error = ar5523_get_status(ar, ST_MAC_ADDR, macaddr, ETH_ALEN);
1388	if (error) {
1389		ar5523_err(ar, "could not read MAC address\n");
1390		return error;
1391	}
1392
1393	SET_IEEE80211_PERM_ADDR(ar->hw, macaddr);
1394
1395	error = ar5523_get_status(ar, ST_SERIAL_NUMBER,
1396	    &ar->serial[0], sizeof(ar->serial));
1397	if (error) {
1398		ar5523_err(ar, "could not read device serial number\n");
1399		return error;
1400	}
1401	return 0;
1402}
1403
1404#define AR5523_SANE_RXBUFSZ 2000
1405
1406static int ar5523_get_max_rxsz(struct ar5523 *ar)
1407{
1408	int error;
1409	__be32 rxsize;
1410
1411	/* Get max rx size */
1412	error = ar5523_get_status(ar, ST_WDC_TRANSPORT_CHUNK_SIZE, &rxsize,
1413				  sizeof(rxsize));
1414	if (error != 0) {
1415		ar5523_err(ar, "could not read max RX size\n");
1416		return error;
1417	}
1418
1419	ar->rxbufsz = be32_to_cpu(rxsize);
1420
1421	if (!ar->rxbufsz || ar->rxbufsz > AR5523_SANE_RXBUFSZ) {
1422		ar5523_err(ar, "Bad rxbufsz from device. Using %d instead\n",
1423			   AR5523_SANE_RXBUFSZ);
1424		ar->rxbufsz = AR5523_SANE_RXBUFSZ;
1425	}
1426
1427	ar5523_dbg(ar, "Max RX buf size: %d\n", ar->rxbufsz);
1428	return 0;
1429}
1430
1431/*
1432 * This is copied from rtl818x, but we should probably move this
1433 * to common code as in OpenBSD.
1434 */
1435static const struct ieee80211_rate ar5523_rates[] = {
1436	{ .bitrate = 10, .hw_value = 2, },
1437	{ .bitrate = 20, .hw_value = 4 },
1438	{ .bitrate = 55, .hw_value = 11, },
1439	{ .bitrate = 110, .hw_value = 22, },
1440	{ .bitrate = 60, .hw_value = 12, },
1441	{ .bitrate = 90, .hw_value = 18, },
1442	{ .bitrate = 120, .hw_value = 24, },
1443	{ .bitrate = 180, .hw_value = 36, },
1444	{ .bitrate = 240, .hw_value = 48, },
1445	{ .bitrate = 360, .hw_value = 72, },
1446	{ .bitrate = 480, .hw_value = 96, },
1447	{ .bitrate = 540, .hw_value = 108, },
1448};
1449
1450static const struct ieee80211_channel ar5523_channels[] = {
1451	{ .center_freq = 2412 },
1452	{ .center_freq = 2417 },
1453	{ .center_freq = 2422 },
1454	{ .center_freq = 2427 },
1455	{ .center_freq = 2432 },
1456	{ .center_freq = 2437 },
1457	{ .center_freq = 2442 },
1458	{ .center_freq = 2447 },
1459	{ .center_freq = 2452 },
1460	{ .center_freq = 2457 },
1461	{ .center_freq = 2462 },
1462	{ .center_freq = 2467 },
1463	{ .center_freq = 2472 },
1464	{ .center_freq = 2484 },
1465};
1466
1467static int ar5523_init_modes(struct ar5523 *ar)
1468{
1469	BUILD_BUG_ON(sizeof(ar->channels) != sizeof(ar5523_channels));
1470	BUILD_BUG_ON(sizeof(ar->rates) != sizeof(ar5523_rates));
1471
1472	memcpy(ar->channels, ar5523_channels, sizeof(ar5523_channels));
1473	memcpy(ar->rates, ar5523_rates, sizeof(ar5523_rates));
1474
1475	ar->band.band = IEEE80211_BAND_2GHZ;
1476	ar->band.channels = ar->channels;
1477	ar->band.n_channels = ARRAY_SIZE(ar5523_channels);
1478	ar->band.bitrates = ar->rates;
1479	ar->band.n_bitrates = ARRAY_SIZE(ar5523_rates);
1480	ar->hw->wiphy->bands[IEEE80211_BAND_2GHZ] = &ar->band;
1481	return 0;
1482}
1483
1484/*
1485 * Load the MIPS R4000 microcode into the device.  Once the image is loaded,
1486 * the device will detach itself from the bus and reattach later with a new
1487 * product Id (a la ezusb).
1488 */
1489static int ar5523_load_firmware(struct usb_device *dev)
1490{
1491	struct ar5523_fwblock *txblock, *rxblock;
1492	const struct firmware *fw;
1493	void *fwbuf;
1494	int len, offset;
1495	int foolen; /* XXX(hch): handle short transfers */
1496	int error = -ENXIO;
1497
1498	if (request_firmware(&fw, AR5523_FIRMWARE_FILE, &dev->dev)) {
1499		dev_err(&dev->dev, "no firmware found: %s\n",
1500			AR5523_FIRMWARE_FILE);
1501		return -ENOENT;
1502	}
1503
1504	txblock = kmalloc(sizeof(*txblock), GFP_KERNEL);
1505	if (!txblock)
1506		goto out;
1507
1508	rxblock = kmalloc(sizeof(*rxblock), GFP_KERNEL);
1509	if (!rxblock)
1510		goto out_free_txblock;
1511
1512	fwbuf = kmalloc(AR5523_MAX_FWBLOCK_SIZE, GFP_KERNEL);
1513	if (!fwbuf)
1514		goto out_free_rxblock;
1515
1516	memset(txblock, 0, sizeof(struct ar5523_fwblock));
1517	txblock->flags = cpu_to_be32(AR5523_WRITE_BLOCK);
1518	txblock->total = cpu_to_be32(fw->size);
1519
1520	offset = 0;
1521	len = fw->size;
1522	while (len > 0) {
1523		int mlen = min(len, AR5523_MAX_FWBLOCK_SIZE);
1524
1525		txblock->remain = cpu_to_be32(len - mlen);
1526		txblock->len = cpu_to_be32(mlen);
1527
1528		/* send firmware block meta-data */
1529		error = usb_bulk_msg(dev, ar5523_cmd_tx_pipe(dev),
1530				     txblock, sizeof(*txblock), &foolen,
1531				     AR5523_CMD_TIMEOUT);
1532		if (error) {
1533			dev_err(&dev->dev,
1534				"could not send firmware block info\n");
1535			goto out_free_fwbuf;
1536		}
1537
1538		/* send firmware block data */
1539		memcpy(fwbuf, fw->data + offset, mlen);
1540		error = usb_bulk_msg(dev, ar5523_data_tx_pipe(dev),
1541				     fwbuf, mlen, &foolen,
1542				     AR5523_DATA_TIMEOUT);
1543		if (error) {
1544			dev_err(&dev->dev,
1545				"could not send firmware block data\n");
1546			goto out_free_fwbuf;
1547		}
1548
1549		/* wait for ack from firmware */
1550		error = usb_bulk_msg(dev, ar5523_cmd_rx_pipe(dev),
1551				     rxblock, sizeof(*rxblock), &foolen,
1552				     AR5523_CMD_TIMEOUT);
1553		if (error) {
1554			dev_err(&dev->dev,
1555				"could not read firmware answer\n");
1556			goto out_free_fwbuf;
1557		}
1558
1559		len -= mlen;
1560		offset += mlen;
1561	}
1562
1563	/*
1564	 * Set the error to -ENXIO to make sure we continue probing for
1565	 * a driver.
1566	 */
1567	error = -ENXIO;
1568
1569 out_free_fwbuf:
1570	kfree(fwbuf);
1571 out_free_rxblock:
1572	kfree(rxblock);
1573 out_free_txblock:
1574	kfree(txblock);
1575 out:
1576	release_firmware(fw);
1577	return error;
1578}
1579
1580static int ar5523_probe(struct usb_interface *intf,
1581			const struct usb_device_id *id)
1582{
1583	struct usb_device *dev = interface_to_usbdev(intf);
1584	struct ieee80211_hw *hw;
1585	struct ar5523 *ar;
1586	int error = -ENOMEM;
1587
1588	/*
1589	 * Load firmware if the device requires it.  This will return
1590	 * -ENXIO on success and we'll get called back afer the usb
1591	 * id changes to indicate that the firmware is present.
1592	 */
1593	if (id->driver_info & AR5523_FLAG_PRE_FIRMWARE)
1594		return ar5523_load_firmware(dev);
1595
1596
1597	hw = ieee80211_alloc_hw(sizeof(*ar), &ar5523_ops);
1598	if (!hw)
1599		goto out;
1600	SET_IEEE80211_DEV(hw, &intf->dev);
1601
1602	ar = hw->priv;
1603	ar->hw = hw;
1604	ar->dev = dev;
1605	mutex_init(&ar->mutex);
1606
1607	INIT_DELAYED_WORK(&ar->stat_work, ar5523_stat_work);
1608	init_timer(&ar->tx_wd_timer);
1609	setup_timer(&ar->tx_wd_timer, ar5523_tx_wd_timer, (unsigned long) ar);
1610	INIT_WORK(&ar->tx_wd_work, ar5523_tx_wd_work);
1611	INIT_WORK(&ar->tx_work, ar5523_tx_work);
1612	INIT_LIST_HEAD(&ar->tx_queue_pending);
1613	INIT_LIST_HEAD(&ar->tx_queue_submitted);
1614	spin_lock_init(&ar->tx_data_list_lock);
1615	atomic_set(&ar->tx_nr_total, 0);
1616	atomic_set(&ar->tx_nr_pending, 0);
1617	init_waitqueue_head(&ar->tx_flush_waitq);
1618
1619	atomic_set(&ar->rx_data_free_cnt, 0);
1620	INIT_WORK(&ar->rx_refill_work, ar5523_rx_refill_work);
1621	INIT_LIST_HEAD(&ar->rx_data_free);
1622	INIT_LIST_HEAD(&ar->rx_data_used);
1623	spin_lock_init(&ar->rx_data_list_lock);
1624
1625	ar->wq = create_singlethread_workqueue("ar5523");
1626	if (!ar->wq) {
1627		ar5523_err(ar, "Could not create wq\n");
1628		goto out_free_ar;
1629	}
1630
1631	error = ar5523_alloc_rx_bufs(ar);
1632	if (error) {
1633		ar5523_err(ar, "Could not allocate rx buffers\n");
1634		goto out_free_wq;
1635	}
1636
1637	error = ar5523_alloc_rx_cmd(ar);
1638	if (error) {
1639		ar5523_err(ar, "Could not allocate rx command buffers\n");
1640		goto out_free_rx_bufs;
1641	}
1642
1643	error = ar5523_alloc_tx_cmd(ar);
1644	if (error) {
1645		ar5523_err(ar, "Could not allocate tx command buffers\n");
1646		goto out_free_rx_cmd;
1647	}
1648
1649	error = ar5523_submit_rx_cmd(ar);
1650	if (error) {
1651		ar5523_err(ar, "Failed to submit rx cmd\n");
1652		goto out_free_tx_cmd;
1653	}
1654
1655	/*
1656	 * We're now ready to send/receive firmware commands.
1657	 */
1658	error = ar5523_host_available(ar);
1659	if (error) {
1660		ar5523_err(ar, "could not initialize adapter\n");
1661		goto out_cancel_rx_cmd;
1662	}
1663
1664	error = ar5523_get_max_rxsz(ar);
1665	if (error) {
1666		ar5523_err(ar, "could not get caps from adapter\n");
1667		goto out_cancel_rx_cmd;
1668	}
1669
1670	error = ar5523_get_devcap(ar);
1671	if (error) {
1672		ar5523_err(ar, "could not get caps from adapter\n");
1673		goto out_cancel_rx_cmd;
1674	}
1675
1676	error = ar5523_get_devstatus(ar);
1677	if (error != 0) {
1678		ar5523_err(ar, "could not get device status\n");
1679		goto out_cancel_rx_cmd;
1680	}
1681
1682	ar5523_info(ar, "MAC/BBP AR5523, RF AR%c112\n",
1683			(id->driver_info & AR5523_FLAG_ABG) ? '5' : '2');
1684
1685	ar->vif = NULL;
1686	hw->flags = IEEE80211_HW_RX_INCLUDES_FCS |
1687		    IEEE80211_HW_SIGNAL_DBM |
1688		    IEEE80211_HW_HAS_RATE_CONTROL;
1689	hw->extra_tx_headroom = sizeof(struct ar5523_tx_desc) +
1690				sizeof(struct ar5523_chunk);
1691	hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION);
1692	hw->queues = 1;
1693
1694	error = ar5523_init_modes(ar);
1695	if (error)
1696		goto out_cancel_rx_cmd;
1697
1698	usb_set_intfdata(intf, hw);
1699
1700	error = ieee80211_register_hw(hw);
1701	if (error) {
1702		ar5523_err(ar, "could not register device\n");
1703		goto out_cancel_rx_cmd;
1704	}
1705
1706	ar5523_info(ar, "Found and initialized AR5523 device\n");
1707	return 0;
1708
1709out_cancel_rx_cmd:
1710	ar5523_cancel_rx_cmd(ar);
1711out_free_tx_cmd:
1712	ar5523_free_tx_cmd(ar);
1713out_free_rx_cmd:
1714	ar5523_free_rx_cmd(ar);
1715out_free_rx_bufs:
1716	ar5523_free_rx_bufs(ar);
1717out_free_wq:
1718	destroy_workqueue(ar->wq);
1719out_free_ar:
1720	ieee80211_free_hw(hw);
1721out:
1722	return error;
1723}
1724
1725static void ar5523_disconnect(struct usb_interface *intf)
1726{
1727	struct ieee80211_hw *hw = usb_get_intfdata(intf);
1728	struct ar5523 *ar = hw->priv;
1729
1730	ar5523_dbg(ar, "detaching\n");
1731	set_bit(AR5523_USB_DISCONNECTED, &ar->flags);
1732
1733	ieee80211_unregister_hw(hw);
1734
1735	ar5523_cancel_rx_cmd(ar);
1736	ar5523_free_tx_cmd(ar);
1737	ar5523_free_rx_cmd(ar);
1738	ar5523_free_rx_bufs(ar);
1739
1740	destroy_workqueue(ar->wq);
1741
1742	ieee80211_free_hw(hw);
1743	usb_set_intfdata(intf, NULL);
1744}
1745
1746#define AR5523_DEVICE_UG(vendor, device) \
1747	{ USB_DEVICE((vendor), (device)) }, \
1748	{ USB_DEVICE((vendor), (device) + 1), \
1749		.driver_info = AR5523_FLAG_PRE_FIRMWARE }
1750#define AR5523_DEVICE_UX(vendor, device) \
1751	{ USB_DEVICE((vendor), (device)), \
1752		.driver_info = AR5523_FLAG_ABG }, \
1753	{ USB_DEVICE((vendor), (device) + 1), \
1754		.driver_info = AR5523_FLAG_ABG|AR5523_FLAG_PRE_FIRMWARE }
1755
1756static struct usb_device_id ar5523_id_table[] = {
1757	AR5523_DEVICE_UG(0x168c, 0x0001),	/* Atheros / AR5523 */
1758	AR5523_DEVICE_UG(0x0cf3, 0x0001),	/* Atheros2 / AR5523_1 */
1759	AR5523_DEVICE_UG(0x0cf3, 0x0003),	/* Atheros2 / AR5523_2 */
1760	AR5523_DEVICE_UX(0x0cf3, 0x0005),	/* Atheros2 / AR5523_3 */
1761	AR5523_DEVICE_UG(0x0d8e, 0x7801),	/* Conceptronic / AR5523_1 */
1762	AR5523_DEVICE_UX(0x0d8e, 0x7811),	/* Conceptronic / AR5523_2 */
1763	AR5523_DEVICE_UX(0x2001, 0x3a00),	/* Dlink / DWLAG132 */
1764	AR5523_DEVICE_UG(0x2001, 0x3a02),	/* Dlink / DWLG132 */
1765	AR5523_DEVICE_UX(0x2001, 0x3a04),	/* Dlink / DWLAG122 */
1766	AR5523_DEVICE_UG(0x07d1, 0x3a07),	/* D-Link / WUA-2340 rev A1 */
1767	AR5523_DEVICE_UG(0x1690, 0x0712),	/* Gigaset / AR5523 */
1768	AR5523_DEVICE_UG(0x1690, 0x0710),	/* Gigaset / SMCWUSBTG */
1769	AR5523_DEVICE_UG(0x129b, 0x160b),	/* Gigaset / USB stick 108
1770						   (CyberTAN Technology) */
1771	AR5523_DEVICE_UG(0x16ab, 0x7801),	/* Globalsun / AR5523_1 */
1772	AR5523_DEVICE_UX(0x16ab, 0x7811),	/* Globalsun / AR5523_2 */
1773	AR5523_DEVICE_UG(0x0d8e, 0x7802),	/* Globalsun / AR5523_3 */
1774	AR5523_DEVICE_UX(0x0846, 0x4300),	/* Netgear / WG111U */
1775	AR5523_DEVICE_UG(0x0846, 0x4250),	/* Netgear / WG111T */
1776	AR5523_DEVICE_UG(0x0846, 0x5f00),	/* Netgear / WPN111 */
1777	AR5523_DEVICE_UG(0x157e, 0x3006),	/* Umedia / AR5523_1 */
1778	AR5523_DEVICE_UX(0x157e, 0x3205),	/* Umedia / AR5523_2 */
1779	AR5523_DEVICE_UG(0x157e, 0x3006),	/* Umedia / TEW444UBEU */
1780	AR5523_DEVICE_UG(0x1435, 0x0826),	/* Wistronneweb / AR5523_1 */
1781	AR5523_DEVICE_UX(0x1435, 0x0828),	/* Wistronneweb / AR5523_2 */
1782	AR5523_DEVICE_UG(0x0cde, 0x0012),	/* Zcom / AR5523 */
1783	AR5523_DEVICE_UG(0x1385, 0x4250),	/* Netgear3 / WG111T (2) */
1784	AR5523_DEVICE_UG(0x1385, 0x5f00),	/* Netgear / WPN111 */
1785	AR5523_DEVICE_UG(0x1385, 0x5f02),	/* Netgear / WPN111 */
1786	{ }
1787};
1788MODULE_DEVICE_TABLE(usb, ar5523_id_table);
1789
1790static struct usb_driver ar5523_driver = {
1791	.name		= "ar5523",
1792	.id_table	= ar5523_id_table,
1793	.probe		= ar5523_probe,
1794	.disconnect	= ar5523_disconnect,
1795};
1796
1797module_usb_driver(ar5523_driver);
1798
1799MODULE_LICENSE("Dual BSD/GPL");
1800MODULE_FIRMWARE(AR5523_FIRMWARE_FILE);
1801