diff options
Diffstat (limited to 'sys/dev/ray/if_ray.c')
| -rw-r--r-- | sys/dev/ray/if_ray.c | 3599 |
1 files changed, 3599 insertions, 0 deletions
diff --git a/sys/dev/ray/if_ray.c b/sys/dev/ray/if_ray.c new file mode 100644 index 0000000..afb0bfb --- /dev/null +++ b/sys/dev/ray/if_ray.c @@ -0,0 +1,3599 @@ +/* + * Copyright (C) 2000 + * Dr. Duncan McLennan Barclay, dmlb@ragnet.demon.co.uk. + * + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the author nor the names of any co-contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY DUNCAN BARCLAY AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL DUNCAN BARCLAY OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + * $Id: if_ray.c,v 1.39 2000/06/18 21:40:46 dmlb Exp $ + * + */ + +/* $NetBSD: if_ray.c,v 1.12 2000/02/07 09:36:27 augustss Exp $ */ +/* + * Copyright (c) 2000 Christian E. Hopps + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the author nor the names of any co-contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +/* + * Card configuration + * ================== + * + * This card is unusual in that it uses both common and attribute + * memory whilst working. It should use common memory and an IO port. + * + * The 3.x branch of FreeBSD has a real problem managing and setting + * up the correct memory maps. However, this driver should reset the + * memory maps correctly - it works around for the brain deadness of + * pccardd (where it reads the CIS for common memory, sets it all up + * and then throws it all away assuming the card is an ed driver...). + * Note that this could be dangerous (because it doesn't interact with + * pccardd) if you use other memory mapped cards at the same time. + * + * There is no support for running this driver on 4.0. + * + * For >4.1 and -cuurent things are a lot better. + * + * Ad-hoc and infra-structure modes + * ================================ + * + * At present only the ad-hoc mode is being worked on. + * + * I hope to start work on support for infrastructure when an AP arrives + * from FreeBSD Labs. + * + * The Linux driver also seems to have the capability to act as an AP. + * I wonder what facilities the "AP" can provide within a driver? We can + * probably use the BRIDGE code to form an ESS but I don't think + * power saving etc. is easy. + * + * + * Packet framing/encapsulation + * ================================ + * + * Currently we only support the Webgear encapsulation + * 802.11 header <net/if_ieee80211.h>struct ieee80211_header + * 802.3 header <net/ethernet.h>struct ether_header + * 802.2 LLC header + * 802.2 SNAP header + * + * We should support whatever packet types the following drivers have + * if_wi.c FreeBSD, RFC1042 + * if_ray.c NetBSD Webgear, RFC1042 + * rayctl.c Linux Webgear, RFC1042 + * also whatever we can divine from the NDC Access points and Kanda's boxes. + * + * Most drivers appear to have a RFC1042 framing. The incoming packet is + * 802.11 header <net/if_ieee80211.h>struct ieee80211_header + * 802.2 LLC header + * 802.2 SNAP header + * + * This is translated to + * 802.3 header <net/ethernet.h>struct ether_header + * 802.2 LLC header + * 802.2 SNAP header + * + * Linux seems to look at the SNAP org_code and do some framings + * for IPX and APPLEARP on that. This just may be how Linux does IPX + * and NETATALK. Need to see how FreeBSD does these. + * + * Translation should be selected via if_media stuff or link types. + * + * + * Authentication + * ============== + * + * 802.11 provides two authentication mechanisms. The first is a very + * simple host based mechanism (like xhost) called Open System and the + * second is a more complex challenge/response called Shared Key built + * ontop of WEP. + * + * This driver only supports Open System and does not implement any + * host based control lists. In otherwords authentication is always + * granted to hosts wanting to authenticate with this station. This is + * the only sensible behaviour as the Open System mechanism uses MAC + * addresses to identify hosts. Send me patches if you need it! + */ + +/* + * ***watchdog to catch screwed up removals? + * ***error handling of RAY_COM_RUNQ + * ***error handling of ECF command completions + * ***can't seem to create a n/w that Win95 wants to see. + * ***need decent association code + * use /sys/net/if_ieee80211.h and update it + * write up driver structure in comments above + * UPDATE_PARAMS seems to return via an interrupt - maybe the timeout + * is needed for wrong values? + * havenet needs checking again + * proper setting of mib_hop_seq_len with country code for v4 firmware + * best done with raycontrol? + * more translations + * spinning in ray_com_ecf + * countrycode setting is broken I think + * userupdate should trap and do via startjoin etc. + * fragmentation when rx level drops? + * + * infra mode stuff + * proper handling of the basic rate set - see the manual + * all ray_sj, ray_assoc sequencues need a "nicer" solution as we + * remember association and authentication + * need to consider WEP + * acting as ap - should be able to get working from the manual + * need to finish RAY_ECMD_REJOIN_DONE + * + * ray_nw_param + * promisc in here too? - done + * should be able to update the parameters before we download to the + * device. This means we must attach a desired struct to the + * runq entry and maybe have another big case statement to + * move these desired into current when not running. + * init must then use the current settings (pre-loaded + * in attach now!) and pass to download. But we can't access + * current nw params outside of the runq - ahhh + * differeniate between parameters set in attach and init + * sc_station_addr in here too (for changing mac address) + * move desired into the command structure? + * take downloaded MIB from a complete nw_param? + * longer term need to attach a desired nw params to the runq entry + * + * + * RAY_COM_RUNQ errors + * + * if sleeping in ccs_alloc with eintr/erestart/enxio/enodev + * erestart try again from the top + * XXX do not malloc more comqs + * XXX ccs allocation hard + * eintr clean up and return + * enxio clean up and return - done in macro + * + * if sleeping in runq_arr itself with eintr/erestart/enxio/enodev + * erestart try again from the top + * XXX do not malloc more comqs + * XXX ccs allocation hard + * XXX reinsert comqs at head of list + * eintr clean up and return + * enxio clean up and return - done in macro + */ + +#define XXX 0 +#define XXX_ACTING_AP 0 +#define XXX_INFRA 0 +#define XXX_8BIT 0 +#define RAY_DEBUG ( \ + /* RAY_DBG_SUBR | */ \ + RAY_DBG_BOOTPARAM | \ + /* RAY_DBG_STARTJOIN | */ \ + /* RAY_DBG_CCS | */ \ + /* RAY_DBG_IOCTL | */ \ + /* RAY_DBG_MBUF | */ \ + /* RAY_DBG_RX | */ \ + /* RAY_DBG_CM | */ \ + /* RAY_DBG_COM | */ \ + /* RAY_DBG_STOP | */ \ + /* RAY_DBG_CTL | */ \ + /* RAY_DBG_MGT | */ \ + /* RAY_DBG_TX | */ \ + /* RAY_DBG_DCOM | */ \ + 0 \ + ) + +/* + * XXX build options - move to LINT + */ +#define RAY_NEED_CM_REMAPPING 1 /* Needed until pccard maps more than one memory area */ +#define RAY_COM_TIMEOUT (hz/2) /* Timeout for CCS commands */ +#define RAY_TX_TIMEOUT (hz/2) /* Timeout for rescheduling TX */ +/* + * XXX build options - move to LINT + */ + +#ifndef RAY_DEBUG +#define RAY_DEBUG 0x0000 +#endif /* RAY_DEBUG */ + +#include "ray.h" +#include "opt_inet.h" + +#if NRAY > 0 + +#include <sys/param.h> +#include <sys/systm.h> +#include <sys/malloc.h> +#include <sys/kernel.h> + +#include <machine/bus.h> +#include <machine/resource.h> +#include <sys/bus.h> +#include <sys/rman.h> + +#include <sys/mbuf.h> +#include <sys/socket.h> +#include <sys/sockio.h> + +#include <net/bpf.h> +#include <net/ethernet.h> +#include <net/if.h> +#include <net/if_arp.h> +#include <net/if_dl.h> + +#ifdef INET +#include <netinet/in.h> +#include <netinet/in_var.h> +#include <netinet/if_ether.h> +#endif /* INET */ + +#include <machine/limits.h> + +#include <dev/pccard/pccardvar.h> +#include "card_if.h" + +#include <dev/ray/if_ieee80211.h> +#include <dev/ray/if_rayreg.h> +#include <dev/ray/if_raymib.h> +#include <dev/ray/if_raydbg.h> +#include <dev/ray/if_rayvar.h> + +/* + * Prototyping + */ +static int ray_attach (device_t); +static int ray_ccs_alloc (struct ray_softc *sc, size_t *ccsp, char *wmesg); +static void ray_ccs_fill (struct ray_softc *sc, size_t ccs, u_int cmd); +static void ray_ccs_free (struct ray_softc *sc, size_t ccs); +static int ray_ccs_tx (struct ray_softc *sc, size_t *ccsp, size_t *bufpp); +static void ray_com_ecf (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_com_ecf_done (struct ray_softc *sc); +static void ray_com_ecf_timo (void *xsc); +static struct ray_comq_entry * + ray_com_init (struct ray_comq_entry *com, ray_comqfn_t function, int flags, char *mesg); +static struct ray_comq_entry * + ray_com_malloc (ray_comqfn_t function, int flags, char *mesg); +static void ray_com_runq (struct ray_softc *sc); +static int ray_com_runq_add (struct ray_softc *sc, struct ray_comq_entry *com[], int ncom, char *wmesg); +static void ray_com_runq_done (struct ray_softc *sc); +static int ray_detach (device_t); +static int ray_init_user (struct ray_softc *sc); +static void ray_init_assoc (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_init_assoc_done (struct ray_softc *sc, size_t ccs); +static void ray_init_download (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_init_download_done (struct ray_softc *sc, size_t ccs); +static void ray_init_download_v4 (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_init_download_v5 (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_init_mcast (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_init_sj (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_init_sj_done (struct ray_softc *sc, size_t ccs); +static void ray_intr (void *xsc); +static void ray_intr_ccs (struct ray_softc *sc, u_int8_t cmd, size_t ccs); +static void ray_intr_rcs (struct ray_softc *sc, u_int8_t cmd, size_t ccs); +static void ray_intr_updt_errcntrs (struct ray_softc *sc); +static int ray_ioctl (struct ifnet *ifp, u_long command, caddr_t data); +static void ray_mcast (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_mcast_done (struct ray_softc *sc, size_t ccs); +static int ray_mcast_user (struct ray_softc *sc); +static int ray_probe (device_t); +static void ray_promisc (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_repparams (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_repparams_done (struct ray_softc *sc, size_t ccs); +static int ray_repparams_user (struct ray_softc *sc, struct ray_param_req *pr); +static int ray_repstats_user (struct ray_softc *sc, struct ray_stats_req *sr); +static int ray_res_alloc_am (struct ray_softc *sc); +static int ray_res_alloc_cm (struct ray_softc *sc); +static int ray_res_alloc_irq (struct ray_softc *sc); +static void ray_res_release (struct ray_softc *sc); +static void ray_rx (struct ray_softc *sc, size_t rcs); +static void ray_rx_ctl (struct ray_softc *sc, struct mbuf *m0); +static void ray_rx_data (struct ray_softc *sc, struct mbuf *m0, u_int8_t siglev, u_int8_t antenna); +static void ray_rx_mgt (struct ray_softc *sc, struct mbuf *m0); +static void ray_rx_mgt_auth (struct ray_softc *sc, struct mbuf *m0); +static void ray_rx_update_cache (struct ray_softc *sc, u_int8_t *src, u_int8_t siglev, u_int8_t antenna); +static void ray_stop (struct ray_softc *sc, struct ray_comq_entry *com); +static int ray_stop_user (struct ray_softc *sc); +static void ray_tx (struct ifnet *ifp); +static void ray_tx_done (struct ray_softc *sc, size_t ccs); +static void ray_tx_timo (void *xsc); +static int ray_tx_send (struct ray_softc *sc, size_t ccs, u_int8_t pktlen, u_int8_t *dst); +static size_t ray_tx_wrhdr (struct ray_softc *sc, size_t bufp, u_int8_t type, u_int8_t fc1, u_int8_t *addr1, u_int8_t *addr2, u_int8_t *addr3); +static void ray_upparams (struct ray_softc *sc, struct ray_comq_entry *com); +static void ray_upparams_done (struct ray_softc *sc, size_t ccs); +static int ray_upparams_user (struct ray_softc *sc, struct ray_param_req *pr); +static void ray_watchdog (struct ifnet *ifp); +static u_int8_t ray_tx_best_antenna (struct ray_softc *sc, u_int8_t *dst); + +#if RAY_DEBUG & RAY_DBG_COM +static void ray_com_ecf_check (struct ray_softc *sc, size_t ccs, char *mesg); +#endif /* RAY_DEBUG & RAY_DBG_COM */ +#if RAY_DEBUG & RAY_DBG_MBUF +static void ray_dump_mbuf (struct ray_softc *sc, struct mbuf *m, char *s); +#endif /* RAY_DEBUG & RAY_DBG_MBUF */ +#if RAY_NEED_CM_REMAPPING +static void ray_attr_mapam (struct ray_softc *sc); +static void ray_attr_mapcm (struct ray_softc *sc); +static u_int8_t ray_attr_read_1 (struct ray_softc *sc, off_t offset); +static void ray_attr_write_1 (struct ray_softc *sc, off_t offset, u_int8_t byte); +#endif /* RAY_NEED_CM_REMAPPING */ + +/* + * PC-Card (PCMCIA) driver definition + */ +static device_method_t ray_methods[] = { + /* Device interface */ + DEVMETHOD(device_probe, ray_probe), + DEVMETHOD(device_attach, ray_attach), + DEVMETHOD(device_detach, ray_detach), + + { 0, 0 } +}; + +static driver_t ray_driver = { + "ray", + ray_methods, + sizeof(struct ray_softc) +}; + +static devclass_t ray_devclass; + +DRIVER_MODULE(ray, pccard, ray_driver, ray_devclass, 0, 0); + +/* + * Probe for the card by checking its startup results. + * + * Fixup any bugs/quirks for different firmware. + */ +static int +ray_probe(device_t dev) +{ + struct ray_softc *sc = device_get_softc(dev); + struct ray_ecf_startup_v5 *ep = &sc->sc_ecf_startup; + int error; + + sc->dev = dev; + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + /* + * Read startup results from the card. + * Then return resouces to the pool. + */ + error = ray_res_alloc_cm(sc); + if (error) + return (error); + RAY_MAP_CM(sc); + SRAM_READ_REGION(sc, RAY_ECF_TO_HOST_BASE, ep, + sizeof(sc->sc_ecf_startup)); + ray_res_release(sc); + + /* + * Check the card is okay and work out what version we are using. + */ + if (ep->e_status != RAY_ECFS_CARD_OK) { + RAY_PRINTF(sc, "card failed self test 0x%b", + ep->e_status, RAY_ECFS_PRINTFB); + return (ENXIO); + } + if (sc->sc_version != RAY_ECFS_BUILD_4 && + sc->sc_version != RAY_ECFS_BUILD_5) { + RAY_PRINTF(sc, "unsupported firmware version 0x%0x", + ep->e_fw_build_string); + return (ENXIO); + } + RAY_DPRINTF(sc, RAY_DBG_BOOTPARAM, "found a card"); + sc->gone = 0; + + /* + * Fixup tib size to be correct - on build 4 it is garbage + */ + if (sc->sc_version == RAY_ECFS_BUILD_4 && sc->sc_tibsize == 0x55) + sc->sc_tibsize = sizeof(struct ray_tx_tib); + + return (0); +} + +/* + * Attach the card into the kernel + */ +static int +ray_attach(device_t dev) +{ + struct ray_softc *sc = device_get_softc(dev); + struct ray_ecf_startup_v5 *ep = &sc->sc_ecf_startup; + struct ifnet *ifp = &sc->arpcom.ac_if; + size_t ccs; + int i, error; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + if ((sc == NULL) || (sc->gone)) + return (ENXIO); + + /* + * Grab the resources I need + */ +#if RAY_DEBUG & (RAY_DBG_CM | RAY_DBG_BOOTPARAM) + { + u_long flags = 0xffff; + CARD_GET_RES_FLAGS(device_get_parent(dev), dev, SYS_RES_IOPORT, + 0, &flags); + RAY_PRINTF(sc, + "ioport start 0x%0lx count 0x%0lx flags 0x%0lx", + bus_get_resource_start(dev, SYS_RES_IOPORT, 0), + bus_get_resource_count(dev, SYS_RES_IOPORT, 0), + flags); + CARD_GET_RES_FLAGS(device_get_parent(dev), dev, SYS_RES_MEMORY, + 0, &flags); + RAY_PRINTF(sc, + "memory start 0x%0lx count 0x%0lx flags 0x%0lx", + bus_get_resource_start(dev, SYS_RES_MEMORY, 0), + bus_get_resource_count(dev, SYS_RES_MEMORY, 0), + flags); + RAY_PRINTF(sc, "irq start 0x%0lx count 0x%0lx", + bus_get_resource_start(dev, SYS_RES_IRQ, 0), + bus_get_resource_count(dev, SYS_RES_IRQ, 0)); + } +#endif /* RAY_DEBUG & (RAY_DBG_CM | RAY_DBG_BOOTPARAM) */ + error = ray_res_alloc_cm(sc); + if (error) + return (error); + error = ray_res_alloc_am(sc); + if (error) { + ray_res_release(sc); + return (error); + } + error = ray_res_alloc_irq(sc); + if (error) { + ray_res_release(sc); + return (error); + } + + /* + * Reset any pending interrupts + */ + RAY_HCS_CLEAR_INTR(sc); + + /* + * Set the parameters that will survive stop/init and + * reset a few things on the card. + * + * Do not update these in ray_init_download's parameter setup + * + * XXX see the ray_init_download section for stuff to move + */ + RAY_MAP_CM(sc); + bzero(&sc->sc_d, sizeof(struct ray_nw_param)); + bzero(&sc->sc_c, sizeof(struct ray_nw_param)); + + /* Clear statistics counters */ + sc->sc_rxoverflow = 0; + sc->sc_rxcksum = 0; + sc->sc_rxhcksum = 0; + sc->sc_rxnoise = 0; + + /* Clear signal and antenna cache */ + bzero(sc->sc_siglevs, sizeof(sc->sc_siglevs)); + + /* Set all ccs to be free */ + bzero(sc->sc_ccsinuse, sizeof(sc->sc_ccsinuse)); + ccs = RAY_CCS_ADDRESS(0); + for (i = 0; i < RAY_CCS_LAST; ccs += RAY_CCS_SIZE, i++) + RAY_CCS_FREE(sc, ccs); + + /* + * Initialise the network interface structure + */ + if (!ifp->if_name) { + bcopy((char *)&ep->e_station_addr, + (char *)&sc->arpcom.ac_enaddr, ETHER_ADDR_LEN); + ifp->if_softc = sc; + ifp->if_name = "ray"; + ifp->if_unit = device_get_unit(dev); + ifp->if_timer = 0; + ifp->if_flags = (IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST); + ifp->if_hdrlen = sizeof(struct ieee80211_header) + + sizeof(struct ether_header); + ifp->if_baudrate = 1000000; /* Is this baud or bps ;-) */ + ifp->if_output = ether_output; + ifp->if_start = ray_tx; + ifp->if_ioctl = ray_ioctl; + ifp->if_watchdog = ray_watchdog; + ifp->if_snd.ifq_maxlen = IFQ_MAXLEN; + + if_attach(ifp); + ether_ifattach(ifp); + } + + /* + * Initialise the timers and driver + */ + callout_handle_init(&sc->com_timerh); + callout_handle_init(&sc->tx_timerh); + TAILQ_INIT(&sc->sc_comq); + bpfattach(ifp, DLT_EN10MB, sizeof(struct ether_header)); + + /* + * Print out some useful information + */ + if (bootverbose || (RAY_DEBUG & RAY_DBG_BOOTPARAM)) { + RAY_PRINTF(sc, "start up results"); + if (sc->sc_version == RAY_ECFS_BUILD_4) + printf(". Firmware version 4\n"); + else + printf(". Firmware version 5\n"); + printf(". Status 0x%b\n", ep->e_status, RAY_ECFS_PRINTFB); + printf(". Ether address %6D\n", ep->e_station_addr, ":"); + if (sc->sc_version == RAY_ECFS_BUILD_4) { + printf(". Program checksum %0x\n", ep->e_resv0); + printf(". CIS checksum %0x\n", ep->e_rates[0]); + } else { + printf(". (reserved word) %0x\n", ep->e_resv0); + printf(". Supported rates %8D\n", ep->e_rates, ":"); + } + printf(". Japan call sign %12D\n", ep->e_japan_callsign, ":"); + if (sc->sc_version == RAY_ECFS_BUILD_5) { + printf(". Program checksum %0x\n", ep->e_prg_cksum); + printf(". CIS checksum %0x\n", ep->e_cis_cksum); + printf(". Firmware version %0x\n", + ep->e_fw_build_string); + printf(". Firmware revision %0x\n", ep->e_fw_build); + printf(". (reserved word) %0x\n", ep->e_fw_resv); + printf(". ASIC version %0x\n", ep->e_asic_version); + printf(". TIB size %0x\n", ep->e_tibsize); + } + } + + return (0); +} + +/* + * Detach the card + * + * This is usually called when the card is ejected, but + * can be caused by a modunload of a controller driver. + * The idea is to reset the driver's view of the device + * and ensure that any driver entry points such as + * read and write do not hang. + */ +static int +ray_detach(device_t dev) +{ + struct ray_softc *sc = device_get_softc(dev); + struct ifnet *ifp = &sc->arpcom.ac_if; + struct ray_comq_entry *com; + int s; + + s = splimp(); + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STOP, ""); + + if ((sc == NULL) || (sc->gone)) + return (0); + + /* + * Mark as not running and detach the interface. + * + * N.B. if_detach can trigger ioctls so we do it first and + * then clean the runq. + */ + sc->gone = 1; + sc->sc_havenet = 0; + ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE); + if_detach(ifp); + + /* + * Stop the runq and wake up anyone sleeping for us. + */ + untimeout(ray_com_ecf_timo, sc, sc->com_timerh); + untimeout(ray_tx_timo, sc, sc->tx_timerh); + com = TAILQ_FIRST(&sc->sc_comq); + for (com = TAILQ_FIRST(&sc->sc_comq); com != NULL; + com = TAILQ_NEXT(com, c_chain)) { + com->c_flags |= RAY_COM_FDETACHED; + com->c_retval = 0; + RAY_DPRINTF(sc, RAY_DBG_STOP, "looking at com %p %b", + com, com->c_flags, RAY_COM_FLAGS_PRINTFB); + if (com->c_flags & RAY_COM_FWOK) { + RAY_DPRINTF(sc, RAY_DBG_STOP, "waking com %p", com); + wakeup(com->c_wakeup); + } + } + + /* + * Release resources + */ + ray_res_release(sc); + RAY_DPRINTF(sc, RAY_DBG_STOP, "unloading complete"); + + splx(s); + + return (0); +} + +/* + * Network ioctl request. + */ +static int +ray_ioctl(register struct ifnet *ifp, u_long command, caddr_t data) +{ + struct ray_softc *sc = ifp->if_softc; + struct ray_param_req pr; + struct ray_stats_req sr; + struct ifreq *ifr = (struct ifreq *)data; + struct ifaddr *ifa = (struct ifaddr *)data; + int s, error, error2; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_IOCTL, ""); + + if ((sc == NULL) || (sc->gone)) + return (ENXIO); + + error = error2 = 0; + s = splimp(); + + switch (command) { + + case SIOCGIFADDR: + case SIOCSIFMTU: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GIFADDR/SIFMTU"); + error = ether_ioctl(ifp, command, data); + break; + + case SIOCSIFADDR: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "SIFADDR"); + ifp->if_flags |= IFF_UP; + switch (ifa->ifa_addr->sa_family) { +#ifdef INET + case AF_INET: + arp_ifinit((struct arpcom *)ifp, ifa); + break; +#endif + } + /* FALLTHROUGH */ + + case SIOCSIFFLAGS: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "SIFFLAGS 0x%0x", ifp->if_flags); + /* + * If the interface is marked up we call ray_init_user. + * This will deal with mcast and promisc flags as well as + * initialising the hardware if it needs it. + */ + if (ifp->if_flags & IFF_UP) + error = ray_init_user(sc); + else + error = ray_stop_user(sc); + break; + + case SIOCADDMULTI: + case SIOCDELMULTI: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "ADDMULTI/DELMULTI"); + error = ray_mcast_user(sc); + break; + + case SIOCSRAYPARAM: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "SRAYPARAM"); + if ((error = copyin(ifr->ifr_data, &pr, sizeof(pr)))) + break; + error = ray_upparams_user(sc, &pr); + error2 = copyout(&pr, ifr->ifr_data, sizeof(pr)); + error = error2 ? error2 : error; + break; + + case SIOCGRAYPARAM: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GRAYPARAM"); + if ((error = copyin(ifr->ifr_data, &pr, sizeof(pr)))) + break; + error = ray_repparams_user(sc, &pr); + error2 = copyout(&pr, ifr->ifr_data, sizeof(pr)); + error = error2 ? error2 : error; + break; + + case SIOCGRAYSTATS: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GRAYSTATS"); + error = ray_repstats_user(sc, &sr); + error2 = copyout(&sr, ifr->ifr_data, sizeof(sr)); + error = error2 ? error2 : error; + break; + + case SIOCGRAYSIGLEV: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GRAYSIGLEV"); + error = copyout(sc->sc_siglevs, ifr->ifr_data, + sizeof(sc->sc_siglevs)); + break; + + case SIOCGIFFLAGS: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GIFFLAGS"); + error = EINVAL; + break; + + case SIOCGIFMETRIC: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GIFMETRIC"); + error = EINVAL; + break; + + case SIOCGIFMTU: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GIFMTU"); + error = EINVAL; + break; + + case SIOCGIFPHYS: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GIFPYHS"); + error = EINVAL; + break; + + case SIOCSIFMEDIA: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "SIFMEDIA"); + error = EINVAL; + break; + + case SIOCGIFMEDIA: + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "GIFMEDIA"); + error = EINVAL; + break; + + default: + error = EINVAL; + + } + + splx(s); + + return (error); +} + +/* + * User land entry to network initialisation and changes in interface flags. + * + * We do a very little work here, just creating runq entries to + * processes the actions needed to cope with interface flags. We do it + * this way in case there are runq entries outstanding from earlier + * ioctls that modify the interface flags. + * + * Returns values are either 0 for success, a varity of resource allocation + * failures or errors in the command sent to the card. + * + * Note, IFF_RUNNING is eventually set by init_sj_done or init_assoc_done + */ +static int +ray_init_user(struct ray_softc *sc) +{ + struct ray_comq_entry *com[5]; + int error, ncom; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + + /* + * Create the following runq entries to bring the card up. + * + * init_download - download the network to the card + * init_mcast - reset multicast list + * init_sj - find or start a BSS + * init_assoc - associate with a ESSID if needed + * + * They are only actually executed if the card is not running + */ + ncom = 0; + com[ncom++] = RAY_COM_MALLOC(ray_init_download, RAY_COM_FCHKRUNNING); + com[ncom++] = RAY_COM_MALLOC(ray_init_mcast, RAY_COM_FCHKRUNNING); + com[ncom++] = RAY_COM_MALLOC(ray_init_sj, RAY_COM_FCHKRUNNING); + com[ncom++] = RAY_COM_MALLOC(ray_init_assoc, RAY_COM_FCHKRUNNING); + + /* + * Create runq entries to process flags + * + * promisc - set/reset PROMISC and ALLMULTI flags + * + * They are only actually executed if the card is running + */ + com[ncom++] = RAY_COM_MALLOC(ray_promisc, 0); + + RAY_COM_RUNQ(sc, com, ncom, "rayinit", error); + + /* XXX no real error processing from anything yet! */ + + RAY_COM_FREE(com, ncom); + + return (error); +} + +/* + * Runq entry for resetting driver and downloading start up structures to card + */ +static void +ray_init_download(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + + /* + * If card already running we don't need to download. + */ + if ((com->c_flags & RAY_COM_FCHKRUNNING) && + (ifp->if_flags & IFF_RUNNING)) { + ray_com_runq_done(sc); + return; + } + + /* + * Reset instance variables + * + * The first set are network parameters that are read back when + * the card starts or joins the network. + * + * The second set are network parameters that are downloaded to + * the card. + * + * The third set are driver parameters. + * + * All of the variables in these sets can be updated by the + * card or ioctls. + * + * XXX see the ray_attach section for stuff to move + */ + sc->sc_d.np_upd_param = 0; + bzero(sc->sc_d.np_bss_id, ETHER_ADDR_LEN); + sc->sc_d.np_inited = 0; + sc->sc_d.np_def_txrate = RAY_MIB_BASIC_RATE_SET_DEFAULT; + sc->sc_d.np_encrypt = 0; + + sc->sc_d.np_net_type = RAY_MIB_NET_TYPE_DEFAULT; + bzero(sc->sc_d.np_ssid, IEEE80211_NWID_LEN); + strncpy(sc->sc_d.np_ssid, RAY_MIB_SSID_DEFAULT, IEEE80211_NWID_LEN); + sc->sc_d.np_priv_start = RAY_MIB_PRIVACY_MUST_START_DEFAULT; + sc->sc_d.np_priv_join = RAY_MIB_PRIVACY_CAN_JOIN_DEFAULT; + + sc->sc_d.np_ap_status = RAY_MIB_AP_STATUS_DEFAULT; + sc->sc_d.np_promisc = !!(ifp->if_flags & (IFF_PROMISC | IFF_ALLMULTI)); + + sc->framing = SC_FRAMING_WEBGEAR; + +/* XXX this is a hack whilst I transition the code. The instance + * XXX variables above should be set somewhere else. This is needed for + * XXX start_join */ +bcopy(&sc->sc_d, &com->c_desired, sizeof(struct ray_nw_param)); + + /* + * Download the right firmware defaults + */ + if (sc->sc_version == RAY_ECFS_BUILD_4) + ray_init_download_v4(sc, com); + else + ray_init_download_v5(sc, com); + + /* + * Kick the card + */ + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_DOWNLOAD_PARAMS); + ray_com_ecf(sc, com); +} + +#define PUT2(p, v) \ + do { (p)[0] = ((v >> 8) & 0xff); (p)[1] = (v & 0xff); } while(0) +/* + * Firmware version 4 defaults - see if_raymib.h for details + */ +static void +ray_init_download_v4(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ray_mib_4 ray_mib_4_default; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + RAY_MAP_CM(sc); + +#define MIB4(m) ray_mib_4_default.##m + + MIB4(mib_net_type) = com->c_desired.np_net_type; + MIB4(mib_ap_status) = com->c_desired.np_ap_status; + bcopy(com->c_desired.np_ssid, MIB4(mib_ssid), IEEE80211_NWID_LEN); + MIB4(mib_scan_mode) = RAY_MIB_SCAN_MODE_DEFAULT; + MIB4(mib_apm_mode) = RAY_MIB_APM_MODE_DEFAULT; + bcopy(sc->sc_station_addr, MIB4(mib_mac_addr), ETHER_ADDR_LEN); + PUT2(MIB4(mib_frag_thresh), RAY_MIB_FRAG_THRESH_DEFAULT); + PUT2(MIB4(mib_dwell_time), RAY_MIB_DWELL_TIME_V4); + PUT2(MIB4(mib_beacon_period), RAY_MIB_BEACON_PERIOD_V4); + MIB4(mib_dtim_interval) = RAY_MIB_DTIM_INTERVAL_DEFAULT; + MIB4(mib_max_retry) = RAY_MIB_MAX_RETRY_DEFAULT; + MIB4(mib_ack_timo) = RAY_MIB_ACK_TIMO_DEFAULT; + MIB4(mib_sifs) = RAY_MIB_SIFS_DEFAULT; + MIB4(mib_difs) = RAY_MIB_DIFS_DEFAULT; + MIB4(mib_pifs) = RAY_MIB_PIFS_V4; + PUT2(MIB4(mib_rts_thresh), RAY_MIB_RTS_THRESH_DEFAULT); + PUT2(MIB4(mib_scan_dwell), RAY_MIB_SCAN_DWELL_V4); + PUT2(MIB4(mib_scan_max_dwell), RAY_MIB_SCAN_MAX_DWELL_V4); + MIB4(mib_assoc_timo) = RAY_MIB_ASSOC_TIMO_DEFAULT; + MIB4(mib_adhoc_scan_cycle) = RAY_MIB_ADHOC_SCAN_CYCLE_DEFAULT; + MIB4(mib_infra_scan_cycle) = RAY_MIB_INFRA_SCAN_CYCLE_DEFAULT; + MIB4(mib_infra_super_scan_cycle) + = RAY_MIB_INFRA_SUPER_SCAN_CYCLE_DEFAULT; + MIB4(mib_promisc) = com->c_desired.np_promisc; + PUT2(MIB4(mib_uniq_word), RAY_MIB_UNIQ_WORD_DEFAULT); + MIB4(mib_slot_time) = RAY_MIB_SLOT_TIME_V4; + MIB4(mib_roam_low_snr_thresh) = RAY_MIB_ROAM_LOW_SNR_THRESH_DEFAULT; + MIB4(mib_low_snr_count) = RAY_MIB_LOW_SNR_COUNT_DEFAULT; + MIB4(mib_infra_missed_beacon_count) + = RAY_MIB_INFRA_MISSED_BEACON_COUNT_DEFAULT; + MIB4(mib_adhoc_missed_beacon_count) + = RAY_MIB_ADHOC_MISSED_BEACON_COUNT_DEFAULT; + MIB4(mib_country_code) = RAY_MIB_COUNTRY_CODE_DEFAULT; + MIB4(mib_hop_seq) = RAY_MIB_HOP_SEQ_DEFAULT; + MIB4(mib_hop_seq_len) = RAY_MIB_HOP_SEQ_LEN_V4; + MIB4(mib_cw_max) = RAY_MIB_CW_MAX_V4; + MIB4(mib_cw_min) = RAY_MIB_CW_MIN_V4; + MIB4(mib_noise_filter_gain) = RAY_MIB_NOISE_FILTER_GAIN_DEFAULT; + MIB4(mib_noise_limit_offset) = RAY_MIB_NOISE_LIMIT_OFFSET_DEFAULT; + MIB4(mib_rssi_thresh_offset) = RAY_MIB_RSSI_THRESH_OFFSET_DEFAULT; + MIB4(mib_busy_thresh_offset) = RAY_MIB_BUSY_THRESH_OFFSET_DEFAULT; + MIB4(mib_sync_thresh) = RAY_MIB_SYNC_THRESH_DEFAULT; + MIB4(mib_test_mode) = RAY_MIB_TEST_MODE_DEFAULT; + MIB4(mib_test_min_chan) = RAY_MIB_TEST_MIN_CHAN_DEFAULT; + MIB4(mib_test_max_chan) = RAY_MIB_TEST_MAX_CHAN_DEFAULT; +#undef MIB4 + + SRAM_WRITE_REGION(sc, RAY_HOST_TO_ECF_BASE, + &ray_mib_4_default, sizeof(ray_mib_4_default)); +} + +/* + * Firmware version 5 defaults - see if_raymib.h for details + */ +static void +ray_init_download_v5(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ray_mib_5 ray_mib_5_default; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + RAY_MAP_CM(sc); + +#define MIB5(m) ray_mib_5_default.##m + MIB5(mib_net_type) = com->c_desired.np_net_type; + MIB5(mib_ap_status) = com->c_desired.np_ap_status; + bcopy(com->c_desired.np_ssid, MIB5(mib_ssid), IEEE80211_NWID_LEN); + MIB5(mib_scan_mode) = RAY_MIB_SCAN_MODE_DEFAULT; + MIB5(mib_apm_mode) = RAY_MIB_APM_MODE_DEFAULT; + bcopy(sc->sc_station_addr, MIB5(mib_mac_addr), ETHER_ADDR_LEN); + PUT2(MIB5(mib_frag_thresh), RAY_MIB_FRAG_THRESH_DEFAULT); + PUT2(MIB5(mib_dwell_time), RAY_MIB_DWELL_TIME_V5); + PUT2(MIB5(mib_beacon_period), RAY_MIB_BEACON_PERIOD_V5); + MIB5(mib_dtim_interval) = RAY_MIB_DTIM_INTERVAL_DEFAULT; + MIB5(mib_max_retry) = RAY_MIB_MAX_RETRY_DEFAULT; + MIB5(mib_ack_timo) = RAY_MIB_ACK_TIMO_DEFAULT; + MIB5(mib_sifs) = RAY_MIB_SIFS_DEFAULT; + MIB5(mib_difs) = RAY_MIB_DIFS_DEFAULT; + MIB5(mib_pifs) = RAY_MIB_PIFS_V5; + PUT2(MIB5(mib_rts_thresh), RAY_MIB_RTS_THRESH_DEFAULT); + PUT2(MIB5(mib_scan_dwell), RAY_MIB_SCAN_DWELL_V5); + PUT2(MIB5(mib_scan_max_dwell), RAY_MIB_SCAN_MAX_DWELL_V5); + MIB5(mib_assoc_timo) = RAY_MIB_ASSOC_TIMO_DEFAULT; + MIB5(mib_adhoc_scan_cycle) = RAY_MIB_ADHOC_SCAN_CYCLE_DEFAULT; + MIB5(mib_infra_scan_cycle) = RAY_MIB_INFRA_SCAN_CYCLE_DEFAULT; + MIB5(mib_infra_super_scan_cycle) + = RAY_MIB_INFRA_SUPER_SCAN_CYCLE_DEFAULT; + MIB5(mib_promisc) = com->c_desired.np_promisc; + PUT2(MIB5(mib_uniq_word), RAY_MIB_UNIQ_WORD_DEFAULT); + MIB5(mib_slot_time) = RAY_MIB_SLOT_TIME_V5; + MIB5(mib_roam_low_snr_thresh) = RAY_MIB_ROAM_LOW_SNR_THRESH_DEFAULT; + MIB5(mib_low_snr_count) = RAY_MIB_LOW_SNR_COUNT_DEFAULT; + MIB5(mib_infra_missed_beacon_count) + = RAY_MIB_INFRA_MISSED_BEACON_COUNT_DEFAULT; + MIB5(mib_adhoc_missed_beacon_count) + = RAY_MIB_ADHOC_MISSED_BEACON_COUNT_DEFAULT; + MIB5(mib_country_code) = RAY_MIB_COUNTRY_CODE_DEFAULT; + MIB5(mib_hop_seq) = RAY_MIB_HOP_SEQ_DEFAULT; + MIB5(mib_hop_seq_len) = RAY_MIB_HOP_SEQ_LEN_V5; + PUT2(MIB5(mib_cw_max), RAY_MIB_CW_MAX_V5); + PUT2(MIB5(mib_cw_min), RAY_MIB_CW_MIN_V5); + MIB5(mib_noise_filter_gain) = RAY_MIB_NOISE_FILTER_GAIN_DEFAULT; + MIB5(mib_noise_limit_offset) = RAY_MIB_NOISE_LIMIT_OFFSET_DEFAULT; + MIB5(mib_rssi_thresh_offset) = RAY_MIB_RSSI_THRESH_OFFSET_DEFAULT; + MIB5(mib_busy_thresh_offset) = RAY_MIB_BUSY_THRESH_OFFSET_DEFAULT; + MIB5(mib_sync_thresh) = RAY_MIB_SYNC_THRESH_DEFAULT; + MIB5(mib_test_mode) = RAY_MIB_TEST_MODE_DEFAULT; + MIB5(mib_test_min_chan) = RAY_MIB_TEST_MIN_CHAN_DEFAULT; + MIB5(mib_test_max_chan) = RAY_MIB_TEST_MAX_CHAN_DEFAULT; + MIB5(mib_allow_probe_resp) = RAY_MIB_ALLOW_PROBE_RESP_DEFAULT; + MIB5(mib_privacy_must_start) = com->c_desired.np_priv_start; + MIB5(mib_privacy_can_join) = com->c_desired.np_priv_join; + MIB5(mib_basic_rate_set[0]) = com->c_desired.np_def_txrate; +#undef MIB5 + + SRAM_WRITE_REGION(sc, RAY_HOST_TO_ECF_BASE, + &ray_mib_5_default, sizeof(ray_mib_5_default)); +} +#undef PUT2 + +/* + * Download completion routine + */ +static void +ray_init_download_done(struct ray_softc *sc, size_t ccs) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + RAY_COM_CHECK(sc, ccs); + + ray_com_ecf_done(sc); +} + +/* + * Runq entry to empty the multicast filter list + */ +static void +ray_init_mcast(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + RAY_MAP_CM(sc); + + /* + * If card is already running we don't need to reset the list + */ + if ((com->c_flags & RAY_COM_FCHKRUNNING) && + (ifp->if_flags & IFF_RUNNING)) { + ray_com_runq_done(sc); + return; + } + + /* + * Kick the card + */ + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_UPDATE_MCAST); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, ray_cmd_update_mcast, c_nmcast, 0); + + ray_com_ecf(sc, com); +} + +/* + * Runq entry to starting or joining a network + */ +static void +ray_init_sj(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + struct ray_net_params np; + int update; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + RAY_MAP_CM(sc); + + /* + * If card already running we don't need to start the n/w. + */ + if ((com->c_flags & RAY_COM_FCHKRUNNING) && + (ifp->if_flags & IFF_RUNNING)) { + ray_com_runq_done(sc); + return; + } + + sc->sc_havenet = 0; + if (sc->sc_d.np_net_type == RAY_MIB_NET_TYPE_ADHOC) + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_START_NET); + else + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_JOIN_NET); + + update = 0; + if (sc->sc_c.np_net_type != sc->sc_d.np_net_type) + update++; + if (bcmp(sc->sc_c.np_ssid, sc->sc_d.np_ssid, IEEE80211_NWID_LEN)) + update++; + if (sc->sc_c.np_priv_join != sc->sc_d.np_priv_join) + update++; + if (sc->sc_c.np_priv_start != sc->sc_d.np_priv_start) + update++; + RAY_DPRINTF(sc, RAY_DBG_STARTJOIN, + "%s updating nw params", update?"is":"not"); + if (update) { + bzero(&np, sizeof(np)); + np.p_net_type = sc->sc_d.np_net_type; + bcopy(sc->sc_d.np_ssid, np.p_ssid, IEEE80211_NWID_LEN); + np.p_privacy_must_start = sc->sc_d.np_priv_start; + np.p_privacy_can_join = sc->sc_d.np_priv_join; + SRAM_WRITE_REGION(sc, RAY_HOST_TO_ECF_BASE, &np, sizeof(np)); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, ray_cmd_net, c_upd_param, 1); + } else + SRAM_WRITE_FIELD_1(sc, com->c_ccs, ray_cmd_net, c_upd_param, 0); + + /* + * Kick the card + */ + ray_com_ecf(sc, com); +} + +/* + * Complete start command or intermediate step in assoc command + */ +static void +ray_init_sj_done(struct ray_softc *sc, size_t ccs) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + RAY_MAP_CM(sc); + RAY_COM_CHECK(sc, ccs); + + /* + * Read back network parameters that the ECF sets + */ + SRAM_READ_REGION(sc, ccs, &sc->sc_c.p_1, sizeof(struct ray_cmd_net)); + + /* Adjust values for buggy build 4 */ + if (sc->sc_c.np_def_txrate == 0x55) + sc->sc_c.np_def_txrate = sc->sc_d.np_def_txrate; + if (sc->sc_c.np_encrypt == 0x55) + sc->sc_c.np_encrypt = sc->sc_d.np_encrypt; + + /* + * Update our local state if we updated the network parameters + * when the START_NET or JOIN_NET was issued. + */ + if (sc->sc_c.np_upd_param) { + RAY_DPRINTF(sc, RAY_DBG_STARTJOIN, "updated parameters"); + SRAM_READ_REGION(sc, RAY_HOST_TO_ECF_BASE, + &sc->sc_c.p_2, sizeof(struct ray_net_params)); + } + + /* + * Hurrah! The network is now active. + * + * Clearing IFF_OACTIVE will ensure that the system will send us + * packets. Just before we return from the interrupt context + * we check to see if packets have been queued. + */ + if (SRAM_READ_FIELD_1(sc, ccs, ray_cmd, c_cmd) == RAY_CMD_START_NET) { + sc->sc_havenet = 1; + ifp->if_flags |= IFF_RUNNING; + ifp->if_flags &= ~IFF_OACTIVE; + } + + ray_com_ecf_done(sc); +} + +/* + * Runq entry to starting an association with an access point + */ +static void +ray_init_assoc(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + + /* + * Don't do anything if we are not in a managed network + */ + if (sc->sc_c.np_net_type != RAY_MIB_NET_TYPE_INFRA) { + ray_com_runq_done(sc); + return; + } + + /* + * If card already running we don't need to associate. + */ + if ((com->c_flags & RAY_COM_FCHKRUNNING) && + (ifp->if_flags & IFF_RUNNING)) { + ray_com_runq_done(sc); + return; + } + + /* + * Kick the card + */ + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_START_ASSOC); + ray_com_ecf(sc, com); +} + +/* + * Complete association + */ +static void +ray_init_assoc_done(struct ray_softc *sc, size_t ccs) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STARTJOIN, ""); + RAY_COM_CHECK(sc, ccs); + + /* + * Hurrah! The network is now active. + * + * Clearing IFF_OACTIVE will ensure that the system will send us + * packets. Just before we return from the interrupt context + * we check to see if packets have been queued. + */ + sc->sc_havenet = 1; + ifp->if_flags |= IFF_RUNNING; + ifp->if_flags &= ~IFF_OACTIVE; + + ray_com_ecf_done(sc); +} + +/* + * Network stop. + * + * Inhibit card - if we can't prevent reception then do not worry; + * stopping a NIC only guarantees no TX. + * + * The change to the interface flags is done via the runq so that any + * existing commands can execute normally. + */ +static int +ray_stop_user(struct ray_softc *sc) +{ + struct ray_comq_entry *com[1]; + int error, ncom; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STOP, ""); + + /* + * Schedule the real stop routine + */ + ncom = 0; + com[ncom++] = RAY_COM_MALLOC(ray_stop, 0); + + RAY_COM_RUNQ(sc, com, ncom, "raystop", error); + + /* XXX no real error processing from anything yet! */ + + RAY_COM_FREE(com, ncom); + + return (error); +} + +/* + * Runq entry for stopping the interface activity + */ +static void +ray_stop(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + struct mbuf *m; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_STOP, ""); + + /* + * Mark as not running and drain output queue + */ + ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE); + ifp->if_timer = 0; + for (;;) { + IF_DEQUEUE(&ifp->if_snd, m); + if (m == NULL) + break; + m_freem(m); + } + + ray_com_runq_done(sc); +} + +static void +ray_watchdog(struct ifnet *ifp) +{ + struct ray_softc *sc = ifp->if_softc; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + if ((sc == NULL) || (sc->gone)) + return; + + RAY_PRINTF(sc, "watchdog timeout"); +} + +/* + * Transmit packet handling + */ + +/* + * Send a packet. + * + * We make two assumptions here: + * 1) That the current priority is set to splimp _before_ this code + * is called *and* is returned to the appropriate priority after + * return + * 2) That the IFF_OACTIVE flag is checked before this code is called + * (i.e. that the output part of the interface is idle) + * + * A simple one packet at a time TX routine is used - we don't bother + * chaining TX buffers. Performance is sufficient to max out the + * wireless link on a P75. + * + * AST J30 Windows 95A (100MHz Pentium) to + * Libretto 50CT FreeBSD-3.1 (75MHz Pentium) 167.37kB/s + * Nonname box FreeBSD-3.4 (233MHz AMD K6) 161.82kB/s + * + * Libretto 50CT FreeBSD-3.1 (75MHz Pentium) to + * AST J30 Windows 95A (100MHz Pentium) 167.37kB/s + * Nonname box FreeBSD-3.4 (233MHz AMD K6) 161.38kB/s + * + * Given that 160kB/s is saturating the 2Mb/s wireless link we + * are about there. + * + * In short I'm happy that the added complexity of chaining TX + * packets together isn't worth it for my machines. + */ +static void +ray_tx(struct ifnet *ifp) +{ + struct ray_softc *sc = ifp->if_softc; + struct mbuf *m0, *m; + struct ether_header *eh; + size_t ccs, bufp; + int pktlen, len; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_TX, ""); + RAY_MAP_CM(sc); + + /* + * Some simple checks first - some are overkill + */ + if ((sc == NULL) || (sc->gone)) + return; + if (!(ifp->if_flags & IFF_RUNNING)) { + RAY_RECERR(sc, "cannot transmit - not running"); + return; + } + if (!sc->sc_havenet) { + RAY_RECERR(sc, "cannot transmit - no network"); + return; + } + if (!RAY_ECF_READY(sc)) { + /* Can't assume that the ECF is busy because of this driver */ + RAY_RECERR(sc, "cannot transmit - ECF busy"); + sc->tx_timerh = timeout(ray_tx_timo, sc, RAY_TX_TIMEOUT); + return; + } else + untimeout(ray_tx_timo, sc, sc->tx_timerh); + + /* + * We find a ccs before we process the mbuf so that we are sure it + * is worthwhile processing the packet. All errors in the mbuf + * processing are either errors in the mbuf or gross configuration + * errors and the packet wouldn't get through anyway. + */ + if (ray_ccs_tx(sc, &ccs, &bufp)) { + ifp->if_flags |= IFF_OACTIVE; + return; + } + + /* + * Get the mbuf and process it - we have to remember to free the + * ccs if there are any errors + */ + IF_DEQUEUE(&ifp->if_snd, m0); + if (m0 == NULL) { + RAY_CCS_FREE(sc, ccs); + return; + } + eh = mtod(m0, struct ether_header *); + + for (pktlen = 0, m = m0; m != NULL; m = m->m_next) { + pktlen += m->m_len; + } + if (pktlen > ETHER_MAX_LEN - ETHER_CRC_LEN) { + RAY_RECERR(sc, "mbuf too long %d", pktlen); + RAY_CCS_FREE(sc, ccs); + ifp->if_oerrors++; + m_freem(m0); + return; + } + + /* + * Write the header according to network type etc. + */ + if (sc->sc_c.np_net_type == RAY_MIB_NET_TYPE_ADHOC) + bufp = ray_tx_wrhdr(sc, bufp, + IEEE80211_FC0_TYPE_DATA, + IEEE80211_FC1_STA_TO_STA, + eh->ether_dhost, + eh->ether_shost, + sc->sc_c.np_bss_id); + else + if (sc->sc_c.np_ap_status == RAY_MIB_AP_STATUS_TERMINAL) + bufp = ray_tx_wrhdr(sc, bufp, + IEEE80211_FC0_TYPE_DATA, + IEEE80211_FC1_STA_TO_AP, + sc->sc_c.np_bss_id, + eh->ether_shost, + eh->ether_dhost); + else + bufp = ray_tx_wrhdr(sc, bufp, + IEEE80211_FC0_TYPE_DATA, + IEEE80211_FC1_AP_TO_STA, + eh->ether_dhost, + sc->sc_c.np_bss_id, + eh->ether_shost); + + /* + * Translation - capability as described earlier + * + * Remove/modify/addto the 802.3 and 802.2 headers as needed. + * + * We've pulled up the mbuf for you. + * + */ + if (m0->m_len < sizeof(struct ether_header)) + m = m_pullup(m, sizeof(struct ether_header)); + if (m0 == NULL) { + RAY_RECERR(sc, "could not pullup ether"); + RAY_CCS_FREE(sc, ccs); + ifp->if_oerrors++; + return; + } + switch (sc->framing) { + + case SC_FRAMING_WEBGEAR: + /* Nice and easy - nothing! (just add an 802.11 header) */ + break; + + default: + RAY_RECERR(sc, "unknown framing type %d", sc->framing); + RAY_CCS_FREE(sc, ccs); + ifp->if_oerrors++; + m_freem(m0); + return; + + } + if (m0 == NULL) { + RAY_RECERR(sc, "could not translate packet"); + RAY_CCS_FREE(sc, ccs); + ifp->if_oerrors++; + return; + } + + /* + * Copy the mbuf to the buffer in common memory + * + * We panic and don't bother wrapping as ethernet packets are 1518 + * bytes, we checked the mbuf earlier, and our TX buffers are 2048 + * bytes. We don't have 530 bytes of headers etc. so something + * must be fubar. + */ + pktlen = sizeof(struct ieee80211_header); + for (m = m0; m != NULL; m = m->m_next) { + pktlen += m->m_len; + if ((len = m->m_len) == 0) + continue; + if ((bufp + len) < RAY_TX_END) + SRAM_WRITE_REGION(sc, bufp, mtod(m, u_int8_t *), len); + else + RAY_PANIC(sc, "tx buffer overflow"); + bufp += len; + } + RAY_MBUF_DUMP(sc, RAY_DBG_TX, m0, "ray_tx"); + + /* + * Send it off + */ + if (ray_tx_send(sc, ccs, pktlen, eh->ether_dhost)) + ifp->if_oerrors++; + else + ifp->if_opackets++; + m_freem(m0); +} + +/* + * Start timeout routine. + * + * Used when card was busy but we needed to send a packet. + */ +static void +ray_tx_timo(void *xsc) +{ + struct ray_softc *sc = (struct ray_softc *)xsc; + struct ifnet *ifp = &sc->arpcom.ac_if; + int s; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + if (!(ifp->if_flags & IFF_OACTIVE) && (ifp->if_snd.ifq_head != NULL)) { + s = splimp(); + ray_tx(ifp); + splx(s); + } +} + +/* + * Write an 802.11 header into the Tx buffer space and return the + * adjusted buffer pointer. + */ +static size_t +ray_tx_wrhdr(struct ray_softc *sc, size_t bufp, u_int8_t type, u_int8_t fc1, u_int8_t *addr1, u_int8_t *addr2, u_int8_t *addr3) +{ + struct ieee80211_header header; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_TX, ""); + RAY_MAP_CM(sc); + + bzero(&header, sizeof(struct ieee80211_header)); + header.i_fc[0] = (IEEE80211_FC0_VERSION_0 | type); + header.i_fc[1] = fc1; + bcopy(addr1, header.i_addr1, ETHER_ADDR_LEN); + bcopy(addr2, header.i_addr2, ETHER_ADDR_LEN); + bcopy(addr3, header.i_addr3, ETHER_ADDR_LEN); + + SRAM_WRITE_REGION(sc, bufp, (u_int8_t *)&header, + sizeof(struct ieee80211_header)); + + return (bufp + sizeof(struct ieee80211_header)); +} + +/* + * Fill in a few loose ends and kick the card to send the packet + * + * Returns 0 on success, 1 on failure + */ +static int +ray_tx_send(struct ray_softc *sc, size_t ccs, u_int8_t pktlen, u_int8_t *dst) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_TX, ""); + RAY_MAP_CM(sc); + + if (!RAY_ECF_READY(sc)) { + /* + * XXX If this can really happen perhaps we need to save + * XXX the chain and use it later. + */ + RAY_RECERR(sc, "ECF busy, dropping packet"); + RAY_CCS_FREE(sc, ccs); + return (1); + } + SRAM_WRITE_FIELD_2(sc, ccs, ray_cmd_tx, c_len, pktlen); + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd_tx, c_antenna, + ray_tx_best_antenna(sc, dst)); + SRAM_WRITE_1(sc, RAY_SCB_CCSI, RAY_CCS_INDEX(ccs)); + RAY_ECF_START_CMD(sc); + + return (0); +} + +/* + * Determine best antenna to use from rx level and antenna cache + */ +static u_int8_t +ray_tx_best_antenna(struct ray_softc *sc, u_int8_t *dst) +{ + struct ray_siglev *sl; + int i; + u_int8_t antenna; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_TX, ""); + + if (sc->sc_version == RAY_ECFS_BUILD_4) + return (0); + + /* try to find host */ + for (i = 0; i < RAY_NSIGLEVRECS; i++) { + sl = &sc->sc_siglevs[i]; + if (bcmp(sl->rsl_host, dst, ETHER_ADDR_LEN) == 0) + goto found; + } + /* not found, return default setting */ + return (0); + +found: + /* This is a simple thresholding scheme that takes the mean + * of the best antenna history. This is okay but as it is a + * filter, it adds a bit of lag in situations where the + * best antenna swaps from one side to the other slowly. Don't know + * how likely this is given the horrible fading though. + */ + antenna = 0; + for (i = 0; i < RAY_NANTENNA; i++) { + antenna += sl->rsl_antennas[i]; + } + + return (antenna > (RAY_NANTENNA >> 1)); +} + +/* + * Transmit now complete so clear ccs and network flags. + */ +static void +ray_tx_done(struct ray_softc *sc, size_t ccs) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + char *ss[] = RAY_CCS_STATUS_STRINGS; + u_int8_t status; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_TX, ""); + RAY_MAP_CM(sc); + + status = SRAM_READ_FIELD_1(sc, ccs, ray_cmd, c_status); + if (status != RAY_CCS_STATUS_COMPLETE) { + RAY_RECERR(sc, "tx completed but status is %s", ss[status]); + ifp->if_oerrors++; + } + + RAY_CCS_FREE(sc, ccs); + ifp->if_timer = 0; + if (ifp->if_flags & IFF_OACTIVE) + ifp->if_flags &= ~IFF_OACTIVE; +} + +/* + * Receiver packet handling + */ + +/* + * Receive a packet from the card + */ +static void +ray_rx(struct ray_softc *sc, size_t rcs) +{ + struct ieee80211_header *header; + struct ifnet *ifp = &sc->arpcom.ac_if; + struct mbuf *m0; + size_t pktlen, fraglen, readlen, tmplen; + size_t bufp, ebufp; + u_int8_t siglev, antenna; + u_int first, ni, i; + u_int8_t *mp; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + RAY_DPRINTF(sc, RAY_DBG_CCS, "using rcs 0x%x", rcs); + + m0 = NULL; + readlen = 0; + + /* + * Get first part of packet and the length. Do some sanity checks + * and get a mbuf. + */ + first = RAY_CCS_INDEX(rcs); + pktlen = SRAM_READ_FIELD_2(sc, rcs, ray_cmd_rx, c_pktlen); + siglev = SRAM_READ_FIELD_1(sc, rcs, ray_cmd_rx, c_siglev); + antenna = SRAM_READ_FIELD_1(sc, rcs, ray_cmd_rx, c_antenna); + + if ((pktlen > MCLBYTES) || (pktlen < sizeof(struct ieee80211_header))) { + RAY_RECERR(sc, "packet too big or too small"); + ifp->if_ierrors++; + goto skip_read; + } + + MGETHDR(m0, M_DONTWAIT, MT_DATA); + if (m0 == NULL) { + RAY_RECERR(sc, "MGETHDR failed"); + ifp->if_ierrors++; + goto skip_read; + } + if (pktlen > MHLEN) { + MCLGET(m0, M_DONTWAIT); + if (!(m0->m_flags & M_EXT)) { + RAY_RECERR(sc, "MCLGET failed"); + ifp->if_ierrors++; + m_freem(m0); + m0 = NULL; + goto skip_read; + } + } + m0->m_pkthdr.rcvif = ifp; + m0->m_pkthdr.len = pktlen; + m0->m_len = pktlen; + mp = mtod(m0, u_int8_t *); + + /* + * Walk the fragment chain to build the complete packet. + * + * The use of two index variables removes a race with the + * hardware. If one index were used the clearing of the CCS would + * happen before reading the next pointer and the hardware can get in. + * Not my idea but verbatim from the NetBSD driver. + */ + i = ni = first; + while ((i = ni) && (i != RAY_CCS_LINK_NULL)) { + rcs = RAY_CCS_ADDRESS(i); + ni = SRAM_READ_FIELD_1(sc, rcs, ray_cmd_rx, c_nextfrag); + bufp = SRAM_READ_FIELD_2(sc, rcs, ray_cmd_rx, c_bufp); + fraglen = SRAM_READ_FIELD_2(sc, rcs, ray_cmd_rx, c_len); + RAY_DPRINTF(sc, RAY_DBG_RX, + "frag index %d len %d bufp 0x%x ni %d", + i, fraglen, (int)bufp, ni); + + if (fraglen + readlen > pktlen) { + RAY_RECERR(sc, "bad length current 0x%x pktlen 0x%x", + fraglen + readlen, pktlen); + ifp->if_ierrors++; + m_freem(m0); + m0 = NULL; + goto skip_read; + } + if ((i < RAY_RCS_FIRST) || (i > RAY_RCS_LAST)) { + RAY_RECERR(sc, "bad rcs index 0x%x", i); + ifp->if_ierrors++; + m_freem(m0); + m0 = NULL; + goto skip_read; + } + + ebufp = bufp + fraglen; + if (ebufp <= RAY_RX_END) + SRAM_READ_REGION(sc, bufp, mp, fraglen); + else { + SRAM_READ_REGION(sc, bufp, mp, + (tmplen = RAY_RX_END - bufp)); + SRAM_READ_REGION(sc, RAY_RX_BASE, mp + tmplen, + ebufp - RAY_RX_END); + } + mp += fraglen; + readlen += fraglen; + } + +skip_read: + + /* + * Walk the chain again to free the rcss. + */ + i = ni = first; + while ((i = ni) && (i != RAY_CCS_LINK_NULL)) { + rcs = RAY_CCS_ADDRESS(i); + ni = SRAM_READ_FIELD_1(sc, rcs, ray_cmd_rx, c_nextfrag); + RAY_CCS_FREE(sc, rcs); + } + + if (m0 == NULL) + return; + + /* + * Check the 802.11 packet type and hand off to + * appropriate functions. + */ + header = mtod(m0, struct ieee80211_header *); + if ((header->i_fc[0] & IEEE80211_FC0_VERSION_MASK) + != IEEE80211_FC0_VERSION_0) { + RAY_RECERR(sc, "header not version 0 fc0 0x%x", + header->i_fc[0]); + ifp->if_ierrors++; + m_freem(m0); + return; + } + switch (header->i_fc[0] & IEEE80211_FC0_TYPE_MASK) { + + case IEEE80211_FC0_TYPE_DATA: + ray_rx_data(sc, m0, siglev, antenna); + break; + + case IEEE80211_FC0_TYPE_MGT: + ray_rx_mgt(sc, m0); + break; + + case IEEE80211_FC0_TYPE_CTL: + ray_rx_ctl(sc, m0); + break; + + default: + RAY_RECERR(sc, "unknown packet fc0 0x%x", header->i_fc[0]); + ifp->if_ierrors++; + m_freem(m0); + } +} + +/* + * Deal with DATA packet types + */ +static void +ray_rx_data(struct ray_softc *sc, struct mbuf *m0, u_int8_t siglev, u_int8_t antenna) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + struct ieee80211_header *header = mtod(m0, struct ieee80211_header *); + struct ether_header *eh; + u_int8_t *sa, *da, *ra, *ta; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_MGT, ""); + + /* + * Check the the data packet subtype, some packets have + * nothing in them so we will drop them here. + */ + switch (header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) { + + case IEEE80211_FC0_SUBTYPE_DATA_DATA: + case IEEE80211_FC0_SUBTYPE_DATA_DATA_CFACK: + case IEEE80211_FC0_SUBTYPE_DATA_DATA_CFPOLL: + case IEEE80211_FC0_SUBTYPE_DATA_DATA_CFACPL: + RAY_DPRINTF(sc, RAY_DBG_RX, "DATA packet"); + break; + + case IEEE80211_FC0_SUBTYPE_DATA_NULL: + case IEEE80211_FC0_SUBTYPE_DATA_CFACK: + case IEEE80211_FC0_SUBTYPE_DATA_CFPOLL: + case IEEE80211_FC0_SUBTYPE_DATA_CFACK_CFACK: + RAY_DPRINTF(sc, RAY_DBG_RX, "NULL packet"); + m_freem(m0); + return; + break; + + default: + RAY_RECERR(sc, "reserved DATA packet subtype 0x%x", + header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK); + ifp->if_ierrors++; + m_freem(m0); + return; + } + + /* + * Obtain the .11 addresses. Packets may come via APs so the + * MAC addresses of the source/destination may be different + * from the node that actually sent us the packet. + * + * XXX At present this information is unused, although it is + * XXX available for translation routines to use. + */ + switch (header->i_fc[1] & IEEE80211_FC1_DS_MASK) { + + case IEEE80211_FC1_STA_TO_STA: + da = header->i_addr1; + sa = header->i_addr2; + ra = ta = NULL; + RAY_DPRINTF(sc, RAY_DBG_RX, "from %6D to %6D", + sa, ":", da, ":"); + break; + + case IEEE80211_FC1_AP_TO_STA: + da = header->i_addr1; + ta = header->i_addr2; + sa = header->i_addr3; + ra = NULL; + RAY_DPRINTF(sc, RAY_DBG_RX, "ap %6D from %6D to %6D", + ta, ":", sa, ":", da, ":"); + break; + + case IEEE80211_FC1_STA_TO_AP: + ra = header->i_addr1; + sa = header->i_addr2; + da = header->i_addr3; + ta = NULL; + RAY_DPRINTF(sc, RAY_DBG_RX, "from %6D to %6D ap %6D", + sa, ":", da, ":", ra, ":"); + break; + + case IEEE80211_FC1_AP_TO_AP: + ra = header->i_addr1; + ta = header->i_addr2; + da = header->i_addr3; + sa = (u_int8_t *)header+1; + RAY_DPRINTF(sc, RAY_DBG_RX, "from %6D to %6D ap %6D to %6D", + sa, ":", da, ":", ta, ":", ra, ":"); + break; + } + + /* + * Translation - capability as described earlier + * + * Each case must remove the 802.11 header and leave an 802.3 + * header in the mbuf copy addresses as needed. + */ + RAY_MBUF_DUMP(sc, RAY_DBG_RX, m0, "DATA packet before framing"); + switch (sc->framing) { + + case SC_FRAMING_WEBGEAR: + /* Nice and easy - just trim the 802.11 header */ + m_adj(m0, sizeof(struct ieee80211_header)); + break; + + default: + RAY_RECERR(sc, "unknown framing type %d", sc->framing); + ifp->if_ierrors++; + m_freem(m0); + return; + } + + /* + * Finally, do a bit of house keeping before sending the packet + * up the stack. + */ + ifp->if_ipackets++; + ray_rx_update_cache(sc, header->i_addr2, siglev, antenna); + eh = mtod(m0, struct ether_header *); + m_adj(m0, sizeof(struct ether_header)); + ether_input(ifp, eh, m0); +} + +/* + * Deal with MGT packet types + */ +static void +ray_rx_mgt(struct ray_softc *sc, struct mbuf *m0) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + struct ieee80211_header *header = mtod(m0, struct ieee80211_header *); + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_MGT, ""); + + if ((header->i_fc[1] & IEEE80211_FC1_DS_MASK) != + IEEE80211_FC1_STA_TO_STA) { + RAY_RECERR(sc, "MGT TODS/FROMDS wrong fc1 0x%x", + header->i_fc[1] & IEEE80211_FC1_DS_MASK); + ifp->if_ierrors++; + m_freem(m0); + return; + } + + /* + * Check the the mgt packet subtype, some packets should be + * dropped depending on the mode the station is in. See pg + * 52(60) of docs + * + * P - proccess, J - Junk, E - ECF deals with, I - Illegal + * ECF Proccesses + * AHDOC procces or junk + * INFRA STA process or junk + * INFRA AP process or jumk + * + * +PPP IEEE80211_FC0_SUBTYPE_MGT_BEACON + * +EEE IEEE80211_FC0_SUBTYPE_MGT_PROBE_REQ + * +EEE IEEE80211_FC0_SUBTYPE_MGT_PROBE_RESP + * PPP IEEE80211_FC0_SUBTYPE_MGT_AUTH + * PPP IEEE80211_FC0_SUBTYPE_MGT_DEAUTH + * JJP IEEE80211_FC0_SUBTYPE_MGT_ASSOC_REQ + * JPJ IEEE80211_FC0_SUBTYPE_MGT_ASSOC_RESP + * JPP IEEE80211_FC0_SUBTYPE_MGT_DISASSOC + * JJP IEEE80211_FC0_SUBTYPE_MGT_REASSOC_REQ + * JPJ IEEE80211_FC0_SUBTYPE_MGT_REASSOC_RESP + * +EEE IEEE80211_FC0_SUBTYPE_MGT_ATIM + */ + RAY_MBUF_DUMP(sc, RAY_DBG_RX, m0, "MGT packet"); + switch (header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) { + + case IEEE80211_FC0_SUBTYPE_MGT_BEACON: + RAY_DPRINTF(sc, RAY_DBG_MGT, "BEACON MGT packet"); + /* XXX furtle anything interesting out */ + /* XXX Note that there are rules governing what beacons to + read, see 8802 S7.2.3, S11.1.2.3 */ + break; + + case IEEE80211_FC0_SUBTYPE_MGT_AUTH: + RAY_DPRINTF(sc, RAY_DBG_MGT, "AUTH MGT packet"); + ray_rx_mgt_auth(sc, m0); + break; + + case IEEE80211_FC0_SUBTYPE_MGT_DEAUTH: + RAY_DPRINTF(sc, RAY_DBG_MGT, "DEAUTH MGT packet"); + /* XXX ray_rx_mgt_deauth(sc, m0); */ + break; + + case IEEE80211_FC0_SUBTYPE_MGT_ASSOC_REQ: + case IEEE80211_FC0_SUBTYPE_MGT_REASSOC_REQ: + RAY_DPRINTF(sc, RAY_DBG_MGT, "(RE)ASSOC_REQ MGT packet"); + if ((sc->sc_d.np_net_type == RAY_MIB_NET_TYPE_INFRA) && + (sc->sc_c.np_ap_status == RAY_MIB_AP_STATUS_AP)) + RAY_PANIC(sc, "can't be an AP yet"); /* XXX_ACTING_AP */ + break; + + case IEEE80211_FC0_SUBTYPE_MGT_ASSOC_RESP: + case IEEE80211_FC0_SUBTYPE_MGT_REASSOC_RESP: + RAY_DPRINTF(sc, RAY_DBG_MGT, "(RE)ASSOC_RESP MGT packet"); + if ((sc->sc_d.np_net_type == RAY_MIB_NET_TYPE_INFRA) && + (sc->sc_c.np_ap_status == RAY_MIB_AP_STATUS_TERMINAL)) + RAY_PANIC(sc, "can't be in INFRA yet"); /* XXX_INFRA */ + break; + + case IEEE80211_FC0_SUBTYPE_MGT_DISASSOC: + RAY_DPRINTF(sc, RAY_DBG_MGT, "DISASSOC MGT packet"); + if (sc->sc_d.np_net_type == RAY_MIB_NET_TYPE_INFRA) + RAY_PANIC(sc, "can't be in INFRA yet"); /* XXX_INFRA */ + break; + + case IEEE80211_FC0_SUBTYPE_MGT_PROBE_REQ: + case IEEE80211_FC0_SUBTYPE_MGT_PROBE_RESP: + case IEEE80211_FC0_SUBTYPE_MGT_ATIM: + RAY_RECERR(sc, "unexpected MGT packet subtype 0x%0x", + header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK); + ifp->if_ierrors++; + break; + + default: + RAY_RECERR(sc, "reserved MGT packet subtype 0x%x", + header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK); + ifp->if_ierrors++; + } + + m_freem(m0); +} + +/* + * Deal with AUTH management packet types + */ +static void +ray_rx_mgt_auth(struct ray_softc *sc, struct mbuf *m0) +{ + struct ieee80211_header *header = mtod(m0, struct ieee80211_header *); + ieee80211_mgt_auth_t auth = (u_int8_t *)(header+1); + size_t ccs, bufp; + int pktlen; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_MGT, ""); + RAY_MAP_CM(sc); + + switch (IEEE80211_AUTH_ALGORITHM(auth)) { + + case IEEE80211_AUTH_OPENSYSTEM: + RAY_RECERR(sc, "open system authentication request"); + if (IEEE80211_AUTH_TRANSACTION(auth) == 1) { + + /* XXX see sys/dev/awi/awk.c:awi_{recv|send}_auth */ + + /* + * Send authentication response if possible. If + * we are out of CCSs we don't to anything, the + * other end will try again. + */ + if (ray_ccs_tx(sc, &ccs, &bufp)) { + return; + } +RAY_DPRINTF(sc, RAY_DBG_MGT, "bufp %x", bufp); + + bufp = ray_tx_wrhdr(sc, bufp, + IEEE80211_FC0_TYPE_MGT | + IEEE80211_FC0_SUBTYPE_MGT_AUTH, + IEEE80211_FC1_STA_TO_STA, + header->i_addr2, + header->i_addr1, + header->i_addr3); + + for (pktlen = 0; pktlen < 6; pktlen++) + SRAM_WRITE_1(sc, bufp+pktlen, 0); + pktlen += sizeof(struct ieee80211_header); + SRAM_WRITE_1(sc, bufp+2, 2); + +RAY_DPRINTF(sc, RAY_DBG_MGT, "dump start %x", bufp-pktlen+6); +RAY_DHEX8(sc, RAY_DBG_MGT, bufp-pktlen+6, pktlen, "AUTH MGT response to Open System request"); + (void)ray_tx_send(sc, ccs, pktlen, header->i_addr2); + + } else if (IEEE80211_AUTH_TRANSACTION(auth) == 2) { + + /* + * XXX probably need a lot more than this + * XXX like initiating an auth sequence + */ + if (IEEE80211_AUTH_STATUS(auth) != + IEEE80211_STATUS_SUCCESS) + RAY_RECERR(sc, + "authentication failed with status %d", + IEEE80211_AUTH_STATUS(auth)); + + } + break; + + case IEEE80211_AUTH_SHAREDKEYS: + RAY_RECERR(sc, "shared key authentication request"); + break; + + default: + RAY_RECERR(sc, + "reserved authentication subtype 0x%04hx", + IEEE80211_AUTH_ALGORITHM(auth)); + break; + } +} + +/* + * Deal with CTL packet types + */ +static void +ray_rx_ctl(struct ray_softc *sc, struct mbuf *m0) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + struct ieee80211_header *header = mtod(m0, struct ieee80211_header *); + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_CTL, ""); + + if ((header->i_fc[1] & IEEE80211_FC1_DS_MASK) != + IEEE80211_FC1_STA_TO_STA) { + RAY_RECERR(sc, "CTL TODS/FROMDS wrong fc1 0x%x", + header->i_fc[1] & IEEE80211_FC1_DS_MASK); + ifp->if_ierrors++; + m_freem(m0); + return; + } + + /* + * Check the the ctl packet subtype, some packets should be + * dropped depending on the mode the station is in. The ECF + * should deal with everything but the power save poll to an + * AP. See pg 52(60) of docs. + */ + RAY_MBUF_DUMP(sc, RAY_DBG_CTL, m0, "CTL packet"); + switch (header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK) { + + case IEEE80211_FC0_SUBTYPE_CTL_PS_POLL: + RAY_DPRINTF(sc, RAY_DBG_CTL, "PS_POLL CTL packet"); + if ((sc->sc_d.np_net_type == RAY_MIB_NET_TYPE_INFRA) && + (sc->sc_c.np_ap_status == RAY_MIB_AP_STATUS_AP)) + RAY_PANIC(sc, "can't be an AP yet"); /* XXX_ACTING_AP */ + break; + + case IEEE80211_FC0_SUBTYPE_CTL_RTS: + case IEEE80211_FC0_SUBTYPE_CTL_CTS: + case IEEE80211_FC0_SUBTYPE_CTL_ACK: + case IEEE80211_FC0_SUBTYPE_CTL_CFEND: + case IEEE80211_FC0_SUBTYPE_CTL_CFEND_CFACK: + RAY_RECERR(sc, "unexpected CTL packet subtype 0x%0x", + header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK); + ifp->if_ierrors++; + break; + + default: + RAY_RECERR(sc, "reserved CTL packet subtype 0x%x", + header->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK); + ifp->if_ierrors++; + } + + m_freem(m0); +} + +/* + * Update rx level and antenna cache + */ +static void +ray_rx_update_cache(struct ray_softc *sc, u_int8_t *src, u_int8_t siglev, u_int8_t antenna) +{ + struct timeval mint; + struct ray_siglev *sl; + int i, mini; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + /* Try to find host */ + for (i = 0; i < RAY_NSIGLEVRECS; i++) { + sl = &sc->sc_siglevs[i]; + if (bcmp(sl->rsl_host, src, ETHER_ADDR_LEN) == 0) + goto found; + } + /* Not found, find oldest slot */ + mini = 0; + mint.tv_sec = LONG_MAX; + mint.tv_usec = 0; + for (i = 0; i < RAY_NSIGLEVRECS; i++) { + sl = &sc->sc_siglevs[i]; + if (timevalcmp(&sl->rsl_time, &mint, <)) { + mini = i; + mint = sl->rsl_time; + } + } + sl = &sc->sc_siglevs[mini]; + bzero(sl->rsl_siglevs, RAY_NSIGLEV); + bzero(sl->rsl_antennas, RAY_NANTENNA); + bcopy(src, sl->rsl_host, ETHER_ADDR_LEN); + +found: + microtime(&sl->rsl_time); + bcopy(sl->rsl_siglevs, &sl->rsl_siglevs[1], RAY_NSIGLEV-1); + sl->rsl_siglevs[0] = siglev; + if (sc->sc_version != RAY_ECFS_BUILD_4) { + bcopy(sl->rsl_antennas, &sl->rsl_antennas[1], RAY_NANTENNA-1); + sl->rsl_antennas[0] = antenna; + } +} + +/* + * Interrupt handling + */ + +/* + * Process an interrupt + */ +static void +ray_intr(void *xsc) +{ + struct ray_softc *sc = (struct ray_softc *)xsc; + struct ifnet *ifp = &sc->arpcom.ac_if; + size_t ccs; + u_int8_t cmd; + int ccsi, count; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + if ((sc == NULL) || (sc->gone)) + return; + + /* + * Check that the interrupt was for us, if so get the rcs/ccs + * and vector on the command contained within it. + */ + if (!RAY_HCS_INTR(sc)) + count = 0; + else { + count = 1; + ccsi = SRAM_READ_1(sc, RAY_SCB_RCSI); + ccs = RAY_CCS_ADDRESS(ccsi); + cmd = SRAM_READ_FIELD_1(sc, ccs, ray_cmd, c_cmd); + if (ccsi <= RAY_CCS_LAST) + ray_intr_ccs(sc, cmd, ccs); + else if (ccsi <= RAY_RCS_LAST) + ray_intr_rcs(sc, cmd, ccs); + else + RAY_RECERR(sc, "bad ccs index 0x%x", ccsi); + } + + if (count) + RAY_HCS_CLEAR_INTR(sc); + + RAY_DPRINTF(sc, RAY_DBG_RX, "interrupt %s handled", count?"was":"not"); + + /* Send any packets lying around and update error counters */ + if (!(ifp->if_flags & IFF_OACTIVE) && (ifp->if_snd.ifq_head != NULL)) + ray_tx(ifp); + + if ((++sc->sc_checkcounters % 32) == 0) + ray_intr_updt_errcntrs(sc); +} + +/* + * Read the error counters. + */ +static void +ray_intr_updt_errcntrs(struct ray_softc *sc) +{ + size_t csc; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + /* + * The card implements the following protocol to keep the + * values from being changed while read: It checks the `own' + * bit and if zero writes the current internal counter value, + * it then sets the `own' bit to 1. If the `own' bit was 1 it + * incremenets its internal counter. The user thus reads the + * counter if the `own' bit is one and then sets the own bit + * to 0. + */ + csc = RAY_STATUS_BASE; + if (SRAM_READ_FIELD_1(sc, csc, ray_csc, csc_mrxo_own)) { + sc->sc_rxoverflow += + SRAM_READ_FIELD_2(sc, csc, ray_csc, csc_mrx_overflow); + SRAM_WRITE_FIELD_1(sc, csc, ray_csc, csc_mrxo_own, 0); + } + if (SRAM_READ_FIELD_1(sc, csc, ray_csc, csc_mrxc_own)) { + sc->sc_rxcksum += + SRAM_READ_FIELD_2(sc, csc, ray_csc, csc_mrx_overflow); + SRAM_WRITE_FIELD_1(sc, csc, ray_csc, csc_mrxc_own, 0); + } + if (SRAM_READ_FIELD_1(sc, csc, ray_csc, csc_rxhc_own)) { + sc->sc_rxhcksum += + SRAM_READ_FIELD_2(sc, csc, ray_csc, csc_rx_hcksum); + SRAM_WRITE_FIELD_1(sc, csc, ray_csc, csc_rxhc_own, 0); + } + sc->sc_rxnoise = SRAM_READ_FIELD_1(sc, csc, ray_csc, csc_rx_noise); +} + +/* + * Process CCS command completion + */ +static void +ray_intr_ccs(struct ray_softc *sc, u_int8_t cmd, size_t ccs) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + switch (cmd) { + + case RAY_CMD_DOWNLOAD_PARAMS: + RAY_DPRINTF(sc, RAY_DBG_COM, "START_PARAMS"); + ray_init_download_done(sc, ccs); + break; + + case RAY_CMD_UPDATE_PARAMS: + RAY_DPRINTF(sc, RAY_DBG_COM, "UPDATE_PARAMS"); + ray_upparams_done(sc, ccs); + break; + + case RAY_CMD_REPORT_PARAMS: + RAY_DPRINTF(sc, RAY_DBG_COM, "REPORT_PARAMS"); + ray_repparams_done(sc, ccs); + break; + + case RAY_CMD_UPDATE_MCAST: + RAY_DPRINTF(sc, RAY_DBG_COM, "UPDATE_MCAST"); + ray_mcast_done(sc, ccs); + break; + + case RAY_CMD_START_NET: + case RAY_CMD_JOIN_NET: + RAY_DPRINTF(sc, RAY_DBG_COM, "START|JOIN_NET"); + ray_init_sj_done(sc, ccs); + break; + + case RAY_CMD_TX_REQ: + RAY_DPRINTF(sc, RAY_DBG_COM, "TX_REQ"); + ray_tx_done(sc, ccs); + break; + + case RAY_CMD_START_ASSOC: + RAY_DPRINTF(sc, RAY_DBG_COM, "START_ASSOC"); + ray_init_assoc_done(sc, ccs); + break; + + case RAY_CMD_UPDATE_APM: + RAY_RECERR(sc, "unexpected UPDATE_APM"); + break; + + case RAY_CMD_TEST_MEM: + RAY_RECERR(sc, "unexpected TEST_MEM"); + break; + + case RAY_CMD_SHUTDOWN: + RAY_RECERR(sc, "unexpected SHUTDOWN"); + break; + + case RAY_CMD_DUMP_MEM: + RAY_RECERR(sc, "unexpected DUMP_MEM"); + break; + + case RAY_CMD_START_TIMER: + RAY_RECERR(sc, "unexpected START_TIMER"); + break; + + default: + RAY_RECERR(sc, "unknown command 0x%x", cmd); + break; + } +} + +/* + * Process ECF command request + */ +static void +ray_intr_rcs(struct ray_softc *sc, u_int8_t cmd, size_t rcs) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + switch (cmd) { + + case RAY_ECMD_RX_DONE: + RAY_DPRINTF(sc, RAY_DBG_RX, "RX_DONE"); + ray_rx(sc, rcs); + break; + + case RAY_ECMD_REJOIN_DONE: + RAY_DPRINTF(sc, RAY_DBG_RX, "REJOIN_DONE"); + sc->sc_havenet = 1; /* XXX Should not be here but in function */ + break; + + case RAY_ECMD_ROAM_START: + RAY_DPRINTF(sc, RAY_DBG_RX, "ROAM_START"); + sc->sc_havenet = 0; /* XXX Should not be here but in function */ + break; + + case RAY_ECMD_JAPAN_CALL_SIGNAL: + RAY_RECERR(sc, "unexpected JAPAN_CALL_SIGNAL"); + break; + + default: + RAY_RECERR(sc, "unknown command 0x%x", cmd); + break; + } + + RAY_CCS_FREE(sc, rcs); +} + +/* + * User land entry to multicast list changes + */ +static int +ray_mcast_user(struct ray_softc *sc) +{ + struct ray_comq_entry *com[2]; + int error, ncom; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + /* + * Do all checking in the runq to preserve ordering. + * + * We run promisc to pick up changes to the ALL_MULTI + * interface flag. + */ + ncom = 0; + com[ncom++] = RAY_COM_MALLOC(ray_mcast, 0); + com[ncom++] = RAY_COM_MALLOC(ray_promisc, 0); + + RAY_COM_RUNQ(sc, com, ncom, "raymcast", error); + + /* XXX no real error processing from anything yet! */ + + RAY_COM_FREE(com, ncom); + + return (error); +} + +/* + * Runq entry to setting the multicast filter list + * + * MUST always be followed by a call to ray_promisc to pick up changes + * to promisc flag + */ +static void +ray_mcast(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + struct ifmultiaddr *ifma; + size_t bufp; + int count; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + /* + * If card is not running we don't need to update this. + */ + if (!(ifp->if_flags & IFF_RUNNING)) { + RAY_DPRINTF(sc, RAY_DBG_IOCTL, "not running"); + ray_com_runq_done(sc); + return; + } + + /* + * The multicast list is only 16 items long so use promiscuous + * mode and don't bother updating the multicast list. + */ + for (ifma = ifp->if_multiaddrs.lh_first, count = 0; ifma != NULL; + ifma = ifma->ifma_link.le_next, count++) + if (count == 0) { + ray_com_runq_done(sc); + return; + } else if (count > 16) { + ifp->if_flags |= IFF_ALLMULTI; + ray_com_runq_done(sc); + return; + } else if (ifp->if_flags & IFF_ALLMULTI) + ifp->if_flags &= ~IFF_ALLMULTI; + + /* + * Kick the card + */ + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_UPDATE_MCAST); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, + ray_cmd_update_mcast, c_nmcast, count); + bufp = RAY_HOST_TO_ECF_BASE; + for (ifma = ifp->if_multiaddrs.lh_first; ifma != NULL; + ifma = ifma->ifma_link.le_next) { + SRAM_WRITE_REGION( + sc, + bufp, + LLADDR((struct sockaddr_dl *)ifma->ifma_addr), + ETHER_ADDR_LEN + ); + bufp += ETHER_ADDR_LEN; + } + + ray_com_ecf(sc, com); +} + +/* + * Complete the multicast filter list update + */ +static void +ray_mcast_done(struct ray_softc *sc, size_t ccs) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_COM_CHECK(sc, ccs); + + ray_com_ecf_done(sc); +} + +/* + * Runq entry to set/reset promiscuous mode + */ +static void +ray_promisc(struct ray_softc *sc, struct ray_comq_entry *com) +{ + struct ifnet *ifp = &sc->arpcom.ac_if; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + /* + * If card not running or we already have the right flags + * we don't need to update this + */ + sc->sc_d.np_promisc = !!(ifp->if_flags & (IFF_PROMISC | IFF_ALLMULTI)); + if (!(ifp->if_flags & IFF_RUNNING) || + (sc->sc_c.np_promisc == sc->sc_d.np_promisc)) { + ray_com_runq_done(sc); + return; + } + + /* + * Kick the card + */ + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_UPDATE_PARAMS); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, + ray_cmd_update, c_paramid, RAY_MIB_PROMISC); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, ray_cmd_update, c_nparam, 1); + SRAM_WRITE_1(sc, RAY_HOST_TO_ECF_BASE, sc->sc_d.np_promisc); + + ray_com_ecf(sc, com); +} + +/* + * User land entry to parameter reporting + * + * As we by pass the runq to report current parameters this function + * only provides a snap shot of the driver's state. + */ +static int +ray_repparams_user(struct ray_softc *sc, struct ray_param_req *pr) +{ + struct ray_comq_entry *com[1]; + int error, ncom; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + /* + * Test for illegal values or immediate responses + */ + if (pr->r_paramid > RAY_MIB_MAX) + return (EINVAL); + if ((sc->sc_version == RAY_ECFS_BUILD_4) && + !(mib_info[pr->r_paramid][0] & RAY_V4)) + return (EINVAL); + if ((sc->sc_version == RAY_ECFS_BUILD_5) && + !(mib_info[pr->r_paramid][0] & RAY_V5)) + return (EINVAL); + if (pr->r_paramid > RAY_MIB_LASTUSER) { + switch (pr->r_paramid) { + + case RAY_MIB_VERSION: + if (sc->sc_version == RAY_ECFS_BUILD_4) + *pr->r_data = RAY_V4; + else + *pr->r_data = RAY_V5; + break; + case RAY_MIB_CUR_BSSID: + bcopy(sc->sc_c.np_bss_id, pr->r_data, ETHER_ADDR_LEN); + break; + case RAY_MIB_CUR_INITED: + *pr->r_data = sc->sc_c.np_inited; + break; + case RAY_MIB_CUR_DEF_TXRATE: + *pr->r_data = sc->sc_c.np_def_txrate; + break; + case RAY_MIB_CUR_ENCRYPT: + *pr->r_data = sc->sc_c.np_encrypt; + break; + case RAY_MIB_CUR_NET_TYPE: + *pr->r_data = sc->sc_c.np_net_type; + break; + case RAY_MIB_CUR_SSID: + bcopy(sc->sc_c.np_ssid, pr->r_data, IEEE80211_NWID_LEN); + break; + case RAY_MIB_CUR_PRIV_START: + *pr->r_data = sc->sc_c.np_priv_start; + break; + case RAY_MIB_CUR_PRIV_JOIN: + *pr->r_data = sc->sc_c.np_priv_join; + break; + case RAY_MIB_DES_BSSID: + bcopy(sc->sc_d.np_bss_id, pr->r_data, ETHER_ADDR_LEN); + break; + case RAY_MIB_DES_INITED: + *pr->r_data = sc->sc_d.np_inited; + break; + case RAY_MIB_DES_DEF_TXRATE: + *pr->r_data = sc->sc_d.np_def_txrate; + break; + case RAY_MIB_DES_ENCRYPT: + *pr->r_data = sc->sc_d.np_encrypt; + break; + case RAY_MIB_DES_NET_TYPE: + *pr->r_data = sc->sc_d.np_net_type; + break; + case RAY_MIB_DES_SSID: + bcopy(sc->sc_d.np_ssid, pr->r_data, IEEE80211_NWID_LEN); + break; + case RAY_MIB_DES_PRIV_START: + *pr->r_data = sc->sc_d.np_priv_start; + break; + case RAY_MIB_DES_PRIV_JOIN: + *pr->r_data = sc->sc_d.np_priv_join; + break; + case RAY_MIB_CUR_AP_STATUS: + *pr->r_data = sc->sc_c.np_ap_status; + break; + case RAY_MIB_CUR_PROMISC: + *pr->r_data = sc->sc_c.np_promisc; + break; + case RAY_MIB_DES_AP_STATUS: + *pr->r_data = sc->sc_d.np_ap_status; + break; + case RAY_MIB_DES_PROMISC: + *pr->r_data = sc->sc_d.np_promisc; + break; + + default: + return (EINVAL); + break; + } + pr->r_failcause = 0; + if (sc->sc_version == RAY_ECFS_BUILD_4) + pr->r_len = mib_info[pr->r_paramid][RAY_MIB_INFO_SIZ4]; + else if (sc->sc_version == RAY_ECFS_BUILD_5) + pr->r_len = mib_info[pr->r_paramid][RAY_MIB_INFO_SIZ5]; + return (0); + } + + pr->r_failcause = 0; + ncom = 0; + com[ncom++] = RAY_COM_MALLOC(ray_repparams, RAY_COM_FWOK); + com[ncom-1]->c_pr = pr; + + RAY_COM_RUNQ(sc, com, ncom, "rayrparm", error); + + /* XXX no real error processing from anything yet! */ + error = com[0]->c_retval; /*XXX wrong */ + if (!error && pr->r_failcause) + error = EINVAL; + + RAY_COM_FREE(com, ncom); + + return (error); +} + +/* + * Runq entry to read the required parameter + * + * The card and driver are happy for parameters to be read + * whenever the card is plugged in + */ +static void +ray_repparams(struct ray_softc *sc, struct ray_comq_entry *com) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + /* + * Kick the card + */ + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_REPORT_PARAMS); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, + ray_cmd_report, c_paramid, com->c_pr->r_paramid); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, ray_cmd_report, c_nparam, 1); + + ray_com_ecf(sc, com); +} + +/* + * Complete the parameter reporting + */ +static void +ray_repparams_done(struct ray_softc *sc, size_t ccs) +{ + struct ray_comq_entry *com; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + RAY_COM_CHECK(sc, ccs); + + com = TAILQ_FIRST(&sc->sc_comq); + com->c_pr->r_failcause = + SRAM_READ_FIELD_1(sc, ccs, ray_cmd_report, c_failcause); + com->c_pr->r_len = + SRAM_READ_FIELD_1(sc, ccs, ray_cmd_report, c_len); + SRAM_READ_REGION(sc, RAY_ECF_TO_HOST_BASE, + com->c_pr->r_data, com->c_pr->r_len); + + ray_com_ecf_done(sc); +} + +/* + * User land entry (and exit) to the error counters + */ +static int +ray_repstats_user(struct ray_softc *sc, struct ray_stats_req *sr) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + sr->rxoverflow = sc->sc_rxoverflow; + sr->rxcksum = sc->sc_rxcksum; + sr->rxhcksum = sc->sc_rxhcksum; + sr->rxnoise = sc->sc_rxnoise; + + return (0); +} + +/* + * User land entry to parameter update changes + * + * As a parameter change can cause the network parameters to be + * invalid we have to re-start/join. + */ +static int +ray_upparams_user(struct ray_softc *sc, struct ray_param_req *pr) +{ + struct ray_comq_entry *com[3]; + int error, ncom, todo; +#define RAY_UPP_SJ 0x1 +#define RAY_UPP_PARAMS 0x2 + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + /* + * Check that the parameter is available based on firmware version + */ + pr->r_failcause = 0; + if (pr->r_paramid > RAY_MIB_LASTUSER) + return (EINVAL); + if ((sc->sc_version == RAY_ECFS_BUILD_4) && + !(mib_info[pr->r_paramid][0] & RAY_V4)) + return (EINVAL); + if ((sc->sc_version == RAY_ECFS_BUILD_5) && + !(mib_info[pr->r_paramid][0] & RAY_V5)) + return (EINVAL); + + /* + * Handle certain parameters specially + */ + todo = 0; + switch (pr->r_paramid) { + case RAY_MIB_NET_TYPE: /* Updated via START_NET JOIN_NET */ + sc->sc_d.np_net_type = *pr->r_data; + todo |= RAY_UPP_SJ; + break; + + case RAY_MIB_SSID: /* Updated via START_NET JOIN_NET */ + bcopy(pr->r_data, sc->sc_d.np_ssid, IEEE80211_NWID_LEN); + todo |= RAY_UPP_SJ; + break; + + case RAY_MIB_PRIVACY_MUST_START:/* Updated via START_NET */ + if (sc->sc_c.np_net_type != RAY_MIB_NET_TYPE_ADHOC) + return (EINVAL); + sc->sc_d.np_priv_start = *pr->r_data; + todo |= RAY_UPP_SJ; + break; + + case RAY_MIB_PRIVACY_CAN_JOIN: /* Updated via START_NET JOIN_NET */ + sc->sc_d.np_priv_join = *pr->r_data; + todo |= RAY_UPP_SJ; + break; + + case RAY_MIB_BASIC_RATE_SET: + sc->sc_d.np_def_txrate = *pr->r_data; + todo |= RAY_UPP_PARAMS; + break; + + case RAY_MIB_AP_STATUS: /* Unsupported */ + case RAY_MIB_MAC_ADDR: /* XXX Need interface up but could be done */ + case RAY_MIB_PROMISC: /* BPF */ + return (EINVAL); + break; + + default: + todo |= RAY_UPP_PARAMS; + todo |= RAY_UPP_SJ; + break; + } + + /* + * Generate the runq entries as needed + */ + ncom = 0; + if (todo & RAY_UPP_PARAMS) { + com[ncom++] = RAY_COM_MALLOC(ray_upparams, 0); + com[ncom-1]->c_pr = pr; + } + if (todo & RAY_UPP_SJ) { + com[ncom++] = RAY_COM_MALLOC(ray_init_sj, 0); + com[ncom++] = RAY_COM_MALLOC(ray_init_assoc, 0); + } + + RAY_COM_RUNQ(sc, com, ncom, "rayuparam", error); + + /* XXX no real error processing from anything yet! */ + error = com[0]->c_retval; /* XXX wrong */ + if (!error && pr->r_failcause) + error = EINVAL; + + RAY_COM_FREE(com, ncom); + + return (error); +} + +/* + * Runq entry to update a parameter + * + * The card and driver are happy for parameters to be updated + * whenever the card is plugged in + * + * XXX the above is a little bit of a lie until _download is sorted out and we + * XXX keep local copies of things + */ +static void +ray_upparams(struct ray_softc *sc, struct ray_comq_entry *com) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + + ray_ccs_fill(sc, com->c_ccs, RAY_CMD_UPDATE_PARAMS); + + SRAM_WRITE_FIELD_1(sc, com->c_ccs, + ray_cmd_update, c_paramid, com->c_pr->r_paramid); + SRAM_WRITE_FIELD_1(sc, com->c_ccs, ray_cmd_update, c_nparam, 1); + SRAM_WRITE_REGION(sc, RAY_HOST_TO_ECF_BASE, + com->c_pr->r_data, com->c_pr->r_len); + + ray_com_ecf(sc, com); +} + +/* + * Complete the parameter update, note that promisc finishes up here too + */ +static void +ray_upparams_done(struct ray_softc *sc, size_t ccs) +{ + struct ray_comq_entry *com; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + RAY_MAP_CM(sc); + RAY_COM_CHECK(sc, ccs); + + com = TAILQ_FIRST(&sc->sc_comq); + + switch (SRAM_READ_FIELD_1(sc, ccs, ray_cmd_update, c_paramid)) { + + case RAY_MIB_PROMISC: + sc->sc_c.np_promisc = SRAM_READ_1(sc, RAY_HOST_TO_ECF_BASE); + RAY_DPRINTF(sc, RAY_DBG_IOCTL, + "promisc value %d", sc->sc_c.np_promisc); + break; + + default: + com->c_pr->r_failcause = + SRAM_READ_FIELD_1(sc, ccs, ray_cmd_update, c_failcause); + break; + + } + + ray_com_ecf_done(sc); +} + +/* + * Command queuing and execution + */ + +/* + * Set up a comq entry struct + */ +static struct ray_comq_entry * +ray_com_init(struct ray_comq_entry *com, ray_comqfn_t function, int flags, char *mesg) +{ + com->c_function = function; + com->c_flags = flags; + com->c_retval = 0; + com->c_ccs = NULL; + com->c_wakeup = NULL; + com->c_pr = NULL; + com->c_mesg = mesg; + + return (com); +} + +/* + * Malloc and set up a comq entry struct + */ +static struct ray_comq_entry * +ray_com_malloc(ray_comqfn_t function, int flags, char *mesg) +{ + struct ray_comq_entry *com; + + MALLOC(com, struct ray_comq_entry *, + sizeof(struct ray_comq_entry), M_RAYCOM, M_WAITOK); + + return (ray_com_init(com, function, flags, mesg)); +} + +/* + * Add an array of commands to the runq, get some ccs's for them and + * then run, waiting on the last command. + * + * We add the commands to the queue first to preserve ioctl ordering. + * + * On recoverable errors, this routine removes the entries from the + * runq. A caller can requeue the commands (and still preserve its own + * processes ioctl ordering) but doesn't have to. When the card is + * detached we get out quickly to prevent panics and don't bother + * about the runq. + */ +static int +ray_com_runq_add(struct ray_softc *sc, struct ray_comq_entry *com[], int ncom, char *wmesg) +{ + int i, error; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_COM, ""); + + error = 0; + /* + * Add the commands to the runq but don't let it run until + * the ccs's are allocated successfully + */ + com[0]->c_flags |= RAY_COM_FWAIT; + for (i = 0; i < ncom; i++) { + com[i]->c_wakeup = com[ncom-1]; + RAY_DPRINTF(sc, RAY_DBG_COM, "adding %p", com[i]); + RAY_DCOM(sc, RAY_DBG_DCOM, com[i], "adding"); + TAILQ_INSERT_TAIL(&sc->sc_comq, com[i], c_chain); + } + com[ncom-1]->c_flags |= RAY_COM_FWOK; + + /* + * Allocate ccs's for each command. + */ + for (i = 0; i < ncom; i++) { + error = ray_ccs_alloc(sc, &com[i]->c_ccs, wmesg); + if (error == ENXIO) + return (ENXIO); + else if (error) + goto cleanup; + } + + /* + * Allow the queue to run and sleep if needed. + * + * Iff the FDETACHED flag is set in the com entry we waited on + * the driver is in a zombie state! The softc structure has been + * freed by the generic bus detach methods - eek. We tread very + * carefully! + */ + com[0]->c_flags &= ~RAY_COM_FWAIT; + ray_com_runq(sc); + if (TAILQ_FIRST(&sc->sc_comq) != NULL) { + RAY_DPRINTF(sc, RAY_DBG_COM, "sleeping"); + error = tsleep(com[ncom-1], PCATCH | PRIBIO, wmesg, 0); + if (com[ncom-1]->c_flags & RAY_COM_FDETACHED) + return (ENXIO); + RAY_DPRINTF(sc, RAY_DBG_COM, + "awakened, tsleep returned 0x%x", error); + } else + error = 0; + +cleanup: + /* + * Only clean the queue on real errors - we don't care about it + * when we detach as the queue entries are freed by the callers. + */ + if (error && (error != ENXIO)) + for (i = 0; i < ncom; i++) + if (!(com[i]->c_flags & RAY_COM_FCOMPLETED)) { + RAY_DPRINTF(sc, RAY_DBG_COM, "removing %p", + com[i]); + RAY_DCOM(sc, RAY_DBG_DCOM, com[i], "removing"); + TAILQ_REMOVE(&sc->sc_comq, com[i], c_chain); + ray_ccs_free(sc, com[i]->c_ccs); + com[i]->c_ccs = NULL; + } + + return (error); +} + +/* + * Run the command at the head of the queue (if not already running) + */ +static void +ray_com_runq(struct ray_softc *sc) +{ + struct ray_comq_entry *com; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_COM, ""); + + com = TAILQ_FIRST(&sc->sc_comq); + if ((com == NULL) || + (com->c_flags & RAY_COM_FRUNNING) || + (com->c_flags & RAY_COM_FWAIT) || + (com->c_flags & RAY_COM_FDETACHED)) + return; + + com->c_flags |= RAY_COM_FRUNNING; + RAY_DPRINTF(sc, RAY_DBG_COM, "running %p", com); + RAY_DCOM(sc, RAY_DBG_DCOM, com, "running"); + com->c_function(sc, com); +} + +/* + * Remove run command, free ccs and wakeup caller. + * + * Minimal checks are done here as we ensure that the com and command + * handler were matched up earlier. Must be called at splnet or higher + * so that entries on the command queue are correctly removed. + * + * Remove the com from the comq, and wakeup the caller if it requested + * to be woken. This is used for ensuring a sequence of commands + * completes. Finally, re-run the queue. + */ +static void +ray_com_runq_done(struct ray_softc *sc) +{ + struct ray_comq_entry *com; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_COM, ""); + + com = TAILQ_FIRST(&sc->sc_comq); /* XXX shall we check this as below */ + RAY_DPRINTF(sc, RAY_DBG_COM, "removing %p", com); + RAY_DCOM(sc, RAY_DBG_DCOM, com, "removing"); + TAILQ_REMOVE(&sc->sc_comq, com, c_chain); + + com->c_flags &= ~RAY_COM_FRUNNING; + com->c_flags |= RAY_COM_FCOMPLETED; + com->c_retval = 0; + ray_ccs_free(sc, com->c_ccs); + com->c_ccs = NULL; + + if (com->c_flags & RAY_COM_FWOK) + wakeup(com->c_wakeup); + + ray_com_runq(sc); + + /* XXX what about error on completion then? deal with when i fix + * XXX the status checking + * + * XXX all the runq_done calls from IFF_RUNNING checks in runq + * XXX routines should return EIO but shouldn't abort the runq + */ +} + +/* + * Send a command to the ECF. + */ +static void +ray_com_ecf(struct ray_softc *sc, struct ray_comq_entry *com) +{ + u_int i; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_COM, ""); + RAY_MAP_CM(sc); + + /* + * XXX we probably want to call a timeout on ourself here... + * XXX why isn't this processed like the TX case + */ + i = 0; + while (!RAY_ECF_READY(sc)) + if (++i > 50) + RAY_PANIC(sc, "spun too long"); + else if (i == 1) + RAY_RECERR(sc, "spinning"); + + RAY_DPRINTF(sc, RAY_DBG_COM, "sending %p", com); + RAY_DCOM(sc, RAY_DBG_DCOM, com, "sending"); + SRAM_WRITE_1(sc, RAY_SCB_CCSI, RAY_CCS_INDEX(com->c_ccs)); + RAY_ECF_START_CMD(sc); + + if (RAY_COM_NEEDS_TIMO( + SRAM_READ_FIELD_1(sc, com->c_ccs, ray_cmd, c_cmd))) { + RAY_DPRINTF(sc, RAY_DBG_COM, "adding timeout"); + sc->com_timerh = timeout(ray_com_ecf_timo, sc, RAY_COM_TIMEOUT); + } +} + +/* + * Deal with commands that require a timeout to test completion. + * + * This routine is coded to only expect one outstanding request for the + * timed out requests at a time, but thats all that can be outstanding + * per hardware limitations and all that we issue anyway. + * + * We don't do any fancy testing of the command currently issued as we + * know it must be a timeout based one...unless I've got this wrong! + */ +static void +ray_com_ecf_timo(void *xsc) +{ + struct ray_softc *sc = (struct ray_softc *)xsc; + struct ray_comq_entry *com; + u_int8_t cmd; + int s; + + s = splnet(); + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_COM, ""); + RAY_MAP_CM(sc); + + com = TAILQ_FIRST(&sc->sc_comq); + + cmd = SRAM_READ_FIELD_1(sc, com->c_ccs, ray_cmd, c_cmd); + switch (SRAM_READ_FIELD_1(sc, com->c_ccs, ray_cmd, c_status)) { + + case RAY_CCS_STATUS_COMPLETE: + case RAY_CCS_STATUS_FREE: /* Buggy firmware */ + ray_intr_ccs(sc, cmd, com->c_ccs); + break; + + case RAY_CCS_STATUS_BUSY: + sc->com_timerh = timeout(ray_com_ecf_timo, sc, RAY_COM_TIMEOUT); + break; + + default: /* Replicates NetBSD */ + if (sc->sc_ccsinuse[RAY_CCS_INDEX(com->c_ccs)] == 1) { + /* give a chance for the interrupt to occur */ + sc->sc_ccsinuse[RAY_CCS_INDEX(com->c_ccs)] = 2; + sc->com_timerh = timeout(ray_com_ecf_timo, sc, + RAY_COM_TIMEOUT); + } else + ray_intr_ccs(sc, cmd, com->c_ccs); + break; + + } + + splx(s); +} + +/* + * Called when interrupt handler for the command has done all it + * needs to. Will be called at splnet. + */ +static void +ray_com_ecf_done(struct ray_softc *sc) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_COM, ""); + + untimeout(ray_com_ecf_timo, sc, sc->com_timerh); + + ray_com_runq_done(sc); +} + +#if RAY_DEBUG & RAY_DBG_COM +/* + * Process completed ECF commands that probably came from the command queue + * + * This routine is called after vectoring the completed ECF command + * to the appropriate _done routine. It helps check everything is okay. + */ +static void +ray_com_ecf_check(struct ray_softc *sc, size_t ccs, char *mesg) +{ + struct ray_comq_entry *com; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_COM, "%s", mesg); + + com = TAILQ_FIRST(&sc->sc_comq); + + if (com == NULL) + RAY_PANIC(sc, "no command queue"); + if (com->c_ccs != ccs) + RAY_PANIC(sc, "ccs's don't match"); +} +#endif /* RAY_DEBUG & RAY_DBG_COM */ + +/* + * CCS allocators + */ + +/* + * Obtain a ccs for a commmand + * + * Returns 0 and in `ccsp' the bus offset of the free ccs. Will block + * awaiting free ccs if needed - if the sleep is interrupted + * EINTR/ERESTART is returned, if the card is ejected we return ENXIO. + */ +static int +ray_ccs_alloc(struct ray_softc *sc, size_t *ccsp, char *wmesg) +{ + size_t ccs; + u_int i; + int error; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_CCS, ""); + RAY_MAP_CM(sc); + + for (;;) { + for (i = RAY_CCS_CMD_FIRST; i <= RAY_CCS_CMD_LAST; i++) { + /* we probe here to make the card go */ + (void)SRAM_READ_FIELD_1(sc, RAY_CCS_ADDRESS(i), ray_cmd, + c_status); + if (!sc->sc_ccsinuse[i]) + break; + } + if (i > RAY_CCS_CMD_LAST) { + RAY_DPRINTF(sc, RAY_DBG_CCS, "sleeping"); + error = tsleep(ray_ccs_alloc, PCATCH | PRIBIO, + wmesg, 0); + if ((sc == NULL) || (sc->gone)) + return (ENXIO); + RAY_DPRINTF(sc, RAY_DBG_CCS, + "awakened, tsleep returned 0x%x", error); + if (error) + return (error); + } else + break; + } + RAY_DPRINTF(sc, RAY_DBG_CCS, "allocated 0x%02x", i); + sc->sc_ccsinuse[i] = 1; + ccs = RAY_CCS_ADDRESS(i); + *ccsp = ccs; + + return (0); +} + +/* + * Fill the easy bits in of a pre-allocated CCS + */ +static void +ray_ccs_fill(struct ray_softc *sc, size_t ccs, u_int cmd) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_CCS, ""); + RAY_MAP_CM(sc); + + if (ccs == NULL) + RAY_PANIC(sc, "ccs not allocated"); + + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd, c_status, RAY_CCS_STATUS_BUSY); + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd, c_cmd, cmd); + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd, c_link, RAY_CCS_LINK_NULL); +} + +/* + * Free up a ccs allocated via ray_ccs_alloc + * + * Return the old status. This routine is only used for ccs allocated via + * ray_ccs_alloc (not tx, rx or ECF command requests). + */ +static void +ray_ccs_free(struct ray_softc *sc, size_t ccs) +{ + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_CCS, ""); + RAY_MAP_CM(sc); + +#if 1 | (RAY_DEBUG & RAY_DBG_CCS) + if (!sc->sc_ccsinuse[RAY_CCS_INDEX(ccs)]) + RAY_RECERR(sc, "freeing free ccs 0x%02x", RAY_CCS_INDEX(ccs)); +#endif /* RAY_DEBUG & RAY_DBG_CCS */ + if (!sc->gone) + RAY_CCS_FREE(sc, ccs); + sc->sc_ccsinuse[RAY_CCS_INDEX(ccs)] = 0; + RAY_DPRINTF(sc, RAY_DBG_CCS, "freed 0x%02x", RAY_CCS_INDEX(ccs)); + wakeup(ray_ccs_alloc); +} + +/* + * Obtain a ccs and tx buffer to transmit with and fill them in. + * + * Returns 0 and in `ccsp' the bus offset of the free ccs. Will not block + * and if none available and will returns EAGAIN. + * + * The caller must fill in the length later. + * The caller must clear the ccs on errors. + */ +static int +ray_ccs_tx(struct ray_softc *sc, size_t *ccsp, size_t *bufpp) +{ + size_t ccs, bufp; + int i; + u_int8_t status; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_CCS, ""); + RAY_MAP_CM(sc); + + i = RAY_CCS_TX_FIRST; + do { + status = SRAM_READ_FIELD_1(sc, RAY_CCS_ADDRESS(i), + ray_cmd, c_status); + if (status == RAY_CCS_STATUS_FREE) + break; + i++; + } while (i <= RAY_CCS_TX_LAST); + if (i > RAY_CCS_TX_LAST) { + return (EAGAIN); + } + RAY_DPRINTF(sc, RAY_DBG_CCS, "allocated 0x%02x", i); + + /* + * Reserve and fill the ccs - must do the length later. + * + * Even though build 4 and build 5 have different fields all these + * are common apart from tx_rate. Neither the NetBSD driver or Linux + * driver bother to overwrite this for build 4 cards. + * + * The start of the buffer must be aligned to a 256 byte boundary + * (least significant byte of address = 0x00). + */ + ccs = RAY_CCS_ADDRESS(i); + bufp = RAY_TX_BASE + i * RAY_TX_BUF_SIZE; + bufp += sc->sc_tibsize; + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd_tx, c_status, RAY_CCS_STATUS_BUSY); + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd_tx, c_cmd, RAY_CMD_TX_REQ); + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd_tx, c_link, RAY_CCS_LINK_NULL); + SRAM_WRITE_FIELD_2(sc, ccs, ray_cmd_tx, c_bufp, bufp); + SRAM_WRITE_FIELD_1(sc, + ccs, ray_cmd_tx, c_tx_rate, sc->sc_c.np_def_txrate); + SRAM_WRITE_FIELD_1(sc, ccs, ray_cmd_tx, c_apm_mode, 0); /* XXX */ + bufp += sizeof(struct ray_tx_phy_header); + + *ccsp = ccs; + *bufpp = bufp; + return (0); +} + +/* + * Routines to obtain resources for the card + */ + +/* + * Allocate the attribute memory on the card + */ +static int +ray_res_alloc_am(struct ray_softc *sc) +{ + int error; + + RAY_DPRINTF(sc, RAY_DBG_SUBR | RAY_DBG_CM, ""); + + sc->am_rid = 1; /* pccard uses 0 */ + sc->am_res = bus_alloc_resource(sc->dev, SYS_RES_MEMORY, &sc->am_rid, + 0, ~0, 0x1000, RF_ACTIVE); + if (!sc->am_res) { + RAY_PRINTF(sc, "Cannot allocate attribute memory"); + return (ENOMEM); + } + /* Ensure attribute memory settings */ + error = CARD_SET_RES_FLAGS(device_get_parent(sc->dev), sc->dev, + SYS_RES_MEMORY, sc->am_rid, PCCARD_A_MEM_ATTR); /* XXX card_set_res_flags */ + if (error) { + RAY_PRINTF(sc, "CARD_SET_RES_FLAGS returned 0x%0x", error); + return (error); + } + sc->am_bsh = rman_get_bushandle(sc->am_res); + sc->am_bst = rman_get_bustag(sc->am_res); +#if RAY_DEBUG & (RAY_DBG_CM | RAY_DBG_BOOTPARAM) + { + u_long flags = 0xffff; + CARD_GET_RES_FLAGS(device_get_parent(sc->dev), sc->dev, + SYS_RES_MEMORY, sc->am_rid, &flags); /* XXX card_get_res_flags */ + RAY_PRINTF(sc, "allocated attribute memory:\n" + ". start 0x%0lx count 0x%0lx flags 0x%0lx", + bus_get_resource_start(sc->dev, SYS_RES_MEMORY, sc->am_rid), + bus_get_resource_count(sc->dev, SYS_RES_MEMORY, sc->am_rid), + flags); + } +#endif /* RAY_DEBUG & (RAY_DBG_CM | RAY_DBG_BOOTPARAM) */ + + return (0); +} + +/* + * Allocate the common memory on the card + */ +static int +ray_res_alloc_cm(struct ray_softc *sc) +{ +#if XXX_8BIT + int error; +#endif /* XXX_8BIT */ + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + sc->cm_rid = 0; /* pccard uses 0 */ + sc->cm_res = bus_alloc_resource(sc->dev, SYS_RES_MEMORY, &sc->cm_rid, + 0, ~0, 0xc000, RF_ACTIVE); + if (!sc->cm_res) { + RAY_PRINTF(sc, "Cannot allocate common memory"); + return (ENOMEM); + } + /* XXX Ensure 8bit access somehow */ +#if XXX_8BIT + error = CARD_SET_RES_FLAGS(device_get_parent(sc->dev), sc->dev, + SYS_RES_MEMORY, sc->cm_rid, 2); /* XXX card_set_res_flags */ + if (error) { + RAY_PRINTF(sc, "CARD_SET_RES_FLAGS returned 0x%0x", error); + return (error); + } +#endif /* XXX_8BIT */ + sc->cm_bsh = rman_get_bushandle(sc->cm_res); + sc->cm_bst = rman_get_bustag(sc->cm_res); +#if RAY_DEBUG & (RAY_DBG_CM | RAY_DBG_BOOTPARAM) + { + u_long flags = 0xffff; + CARD_GET_RES_FLAGS(device_get_parent(sc->dev), sc->dev, + SYS_RES_MEMORY, sc->cm_rid, &flags); /* XXX card_get_res_flags */ + RAY_PRINTF(sc, "allocated common memory:\n" + ". start 0x%0lx count 0x%0lx flags 0x%0lx", + bus_get_resource_start(sc->dev, SYS_RES_MEMORY, sc->cm_rid), + bus_get_resource_count(sc->dev, SYS_RES_MEMORY, sc->cm_rid), + flags); + } +#endif /* RAY_DEBUG & (RAY_DBG_CM | RAY_DBG_BOOTPARAM) */ + + return (0); +} + +/* + * Get an irq and attach it to the bus + */ +static int +ray_res_alloc_irq(struct ray_softc *sc) +{ + int error; + + RAY_DPRINTF(sc, RAY_DBG_SUBR, ""); + + sc->irq_rid = 0; + sc->irq_res = bus_alloc_resource(sc->dev, SYS_RES_IRQ, &sc->irq_rid, + 0, ~0, 1, RF_ACTIVE); + if (!sc->irq_res) { + RAY_PRINTF(sc, "Cannot allocate irq"); + return (ENOMEM); + } + if ((error = bus_setup_intr(sc->dev, sc->irq_res, INTR_TYPE_NET, + ray_intr, sc, &sc->irq_handle)) != 0) { + RAY_PRINTF(sc, "Failed to setup irq"); + return (error); + } + RAY_DPRINTF(sc, RAY_DBG_CM | RAY_DBG_BOOTPARAM, "allocated irq:\n" + ". start 0x%0lx count 0x%0lx", + bus_get_resource_start(sc->dev, SYS_RES_IRQ, sc->irq_rid), + bus_get_resource_count(sc->dev, SYS_RES_IRQ, sc->irq_rid)); + + return (0); +} + +/* + * Release all of the card's resources + */ +static void +ray_res_release(struct ray_softc *sc) +{ + if (sc->irq_res != 0) { + bus_teardown_intr(sc->dev, sc->irq_res, sc->irq_handle); + bus_release_resource(sc->dev, SYS_RES_IRQ, + sc->irq_rid, sc->irq_res); + sc->irq_res = 0; + } + if (sc->am_res != 0) { + bus_release_resource(sc->dev, SYS_RES_MEMORY, + sc->am_rid, sc->am_res); + sc->am_res = 0; + } + if (sc->cm_res != 0) { + bus_release_resource(sc->dev, SYS_RES_MEMORY, + sc->cm_rid, sc->cm_res); + sc->cm_res = 0; + } +} + +/* + * Hacks for working around the PCCard layer problems. + * + * For NEWBUS kludge and OLDCARD. + * + * We just call the pccard layer to change and restore the mapping each + * time we use the attribute memory. + * + * XXX These could become marcos around bus_activate_resource, but + * XXX the functions do made hacking them around safer. + * + */ +#if RAY_NEED_CM_REMAPPING +static void +ray_attr_mapam(struct ray_softc *sc) +{ + bus_activate_resource(sc->dev, SYS_RES_MEMORY, sc->am_rid, sc->am_res); +#if RAY_DEBUG & RAY_DBG_CM + { + u_long flags = 0xffff; + CARD_GET_RES_FLAGS(device_get_parent(sc->dev), sc->dev, + SYS_RES_MEMORY, sc->am_rid, &flags); /* XXX card_get_res_flags */ + RAY_PRINTF(sc, "attribute memory\n" + ". start 0x%0lx count 0x%0lx flags 0x%0lx", + bus_get_resource_start(sc->dev, SYS_RES_MEMORY, sc->am_rid), + bus_get_resource_count(sc->dev, SYS_RES_MEMORY, sc->am_rid), + flags); + } +#endif /* RAY_DEBUG & RAY_DBG_CM */ +} + +static void +ray_attr_mapcm(struct ray_softc *sc) +{ + bus_activate_resource(sc->dev, SYS_RES_MEMORY, sc->cm_rid, sc->cm_res); +#if RAY_DEBUG & RAY_DBG_CM + { + u_long flags = 0xffff; + CARD_GET_RES_FLAGS(device_get_parent(sc->dev), sc->dev, + SYS_RES_MEMORY, sc->cm_rid, &flags); /* XXX card_get_res_flags */ + RAY_PRINTF(sc, "common memory\n" + ". start 0x%0lx count 0x%0lx flags 0x%0lx", + bus_get_resource_start(sc->dev, SYS_RES_MEMORY, sc->cm_rid), + bus_get_resource_count(sc->dev, SYS_RES_MEMORY, sc->cm_rid), + flags); + } +#endif /* RAY_DEBUG & RAY_DBG_CM */ +} + +static u_int8_t +ray_attr_read_1(struct ray_softc *sc, off_t offset) +{ + u_int8_t byte; + + ray_attr_mapam(sc); + byte = (u_int8_t)bus_space_read_1(sc->am_bst, sc->am_bsh, offset); + ray_attr_mapcm(sc); + + return (byte); +} + +static void +ray_attr_write_1(struct ray_softc *sc, off_t offset, u_int8_t byte) +{ + ray_attr_mapam(sc); + bus_space_write_1(sc->am_bst, sc->am_bsh, offset, byte); + ray_attr_mapcm(sc); +} +#endif /* RAY_NEED_CM_REMAPPING */ + +/* + * mbuf dump + */ +#if RAY_DEBUG & RAY_DBG_MBUF +static void +ray_dump_mbuf(struct ray_softc *sc, struct mbuf *m, char *s) +{ + u_int8_t *d, *ed; + u_int i; + char p[17]; + + RAY_PRINTF(sc, "%s", s); + i = 0; + bzero(p, 17); + for (; m; m = m->m_next) { + d = mtod(m, u_int8_t *); + ed = d + m->m_len; + + for (; d < ed; i++, d++) { + if ((i % 16) == 0) { + printf(" %s\n\t", p); + } else if ((i % 8) == 0) + printf(" "); + printf(" %02x", *d); + p[i % 16] = ((*d >= 0x20) && (*d < 0x80)) ? *d : '.'; + } + } + if ((i - 1) % 16) + printf(" %s\n", p); +} +#endif /* RAY_DEBUG & RAY_DBG_MBUF */ + +#endif /* NRAY */
\ No newline at end of file |
