]> git.ipfire.org Git - people/arne_f/kernel.git/commitdiff
xradio wireless driver
authorImport from armbian <no@mail>
Thu, 1 Mar 2018 16:58:08 +0000 (17:58 +0100)
committerArne Fitzenreiter <arne_f@ipfire.org>
Fri, 14 May 2021 13:17:18 +0000 (15:17 +0200)
41 files changed:
drivers/net/wireless/Kconfig
drivers/net/wireless/Makefile
drivers/net/wireless/xradio/Kconfig [new file with mode: 0644]
drivers/net/wireless/xradio/LICENSE [new file with mode: 0644]
drivers/net/wireless/xradio/Makefile [new file with mode: 0644]
drivers/net/wireless/xradio/ap.c [new file with mode: 0644]
drivers/net/wireless/xradio/ap.h [new file with mode: 0644]
drivers/net/wireless/xradio/bh.c [new file with mode: 0644]
drivers/net/wireless/xradio/bh.h [new file with mode: 0644]
drivers/net/wireless/xradio/common.h [new file with mode: 0644]
drivers/net/wireless/xradio/debug.h [new file with mode: 0644]
drivers/net/wireless/xradio/fwio.c [new file with mode: 0644]
drivers/net/wireless/xradio/fwio.h [new file with mode: 0644]
drivers/net/wireless/xradio/ht.c [new file with mode: 0644]
drivers/net/wireless/xradio/ht.h [new file with mode: 0644]
drivers/net/wireless/xradio/hwio.c [new file with mode: 0644]
drivers/net/wireless/xradio/hwio.h [new file with mode: 0644]
drivers/net/wireless/xradio/keys.c [new file with mode: 0644]
drivers/net/wireless/xradio/keys.h [new file with mode: 0644]
drivers/net/wireless/xradio/main.c [new file with mode: 0644]
drivers/net/wireless/xradio/main.h [new file with mode: 0644]
drivers/net/wireless/xradio/module.c [new file with mode: 0644]
drivers/net/wireless/xradio/p2p.c [new file with mode: 0644]
drivers/net/wireless/xradio/p2p.h [new file with mode: 0644]
drivers/net/wireless/xradio/pm.c [new file with mode: 0644]
drivers/net/wireless/xradio/pm.h [new file with mode: 0644]
drivers/net/wireless/xradio/queue.c [new file with mode: 0644]
drivers/net/wireless/xradio/queue.h [new file with mode: 0644]
drivers/net/wireless/xradio/rx.c [new file with mode: 0644]
drivers/net/wireless/xradio/rx.h [new file with mode: 0644]
drivers/net/wireless/xradio/scan.c [new file with mode: 0644]
drivers/net/wireless/xradio/scan.h [new file with mode: 0644]
drivers/net/wireless/xradio/sdio.c [new file with mode: 0644]
drivers/net/wireless/xradio/sdio.h [new file with mode: 0644]
drivers/net/wireless/xradio/sta.c [new file with mode: 0644]
drivers/net/wireless/xradio/sta.h [new file with mode: 0644]
drivers/net/wireless/xradio/tx.c [new file with mode: 0644]
drivers/net/wireless/xradio/tx.h [new file with mode: 0644]
drivers/net/wireless/xradio/wsm.c [new file with mode: 0644]
drivers/net/wireless/xradio/wsm.h [new file with mode: 0644]
drivers/net/wireless/xradio/xradio.h [new file with mode: 0644]

index 166920ae23f8d0716c61cc4773bac691293622f9..a22b0c8a7989bc2587168b1c9a259e0d7683d7d3 100644 (file)
@@ -44,6 +44,7 @@ source "drivers/net/wireless/realtek/Kconfig"
 source "drivers/net/wireless/rsi/Kconfig"
 source "drivers/net/wireless/st/Kconfig"
 source "drivers/net/wireless/ti/Kconfig"
+source "drivers/net/wireless/xradio/Kconfig"
 source "drivers/net/wireless/zydas/Kconfig"
 source "drivers/net/wireless/quantenna/Kconfig"
 
index 7fc96306712ac745258f5b5eef63b81b0a24c0a3..069d67046d43071bdd741f38661cc5f6a81332cf 100644 (file)
@@ -17,6 +17,7 @@ obj-$(CONFIG_WLAN_VENDOR_REALTEK) += realtek/
 obj-$(CONFIG_WLAN_VENDOR_RSI) += rsi/
 obj-$(CONFIG_WLAN_VENDOR_ST) += st/
 obj-$(CONFIG_WLAN_VENDOR_TI) += ti/
+obj-$(CONFIG_WLAN_VENDOR_XRADIO) += xradio/
 obj-$(CONFIG_WLAN_VENDOR_ZYDAS) += zydas/
 obj-$(CONFIG_WLAN_VENDOR_QUANTENNA) += quantenna/
 
diff --git a/drivers/net/wireless/xradio/Kconfig b/drivers/net/wireless/xradio/Kconfig
new file mode 100644 (file)
index 0000000..dc73a39
--- /dev/null
@@ -0,0 +1,46 @@
+config WLAN_VENDOR_XRADIO
+       tristate "XRADIO WLAN support"
+       depends on MAC80211
+       default n
+       help
+
+         This is an experimental driver for the XRADIO chip-set.
+         Enabling this option enables the generic driver without
+         any platform support.
+         Please select the appropriate platform below.
+
+if WLAN_VENDOR_XRADIO
+
+config XRADIO_NON_POWER_OF_TWO_BLOCKSIZES
+       bool "Platform supports non-power-of-two SDIO transfer"
+       depends on WLAN_VENDOR_XRADIO
+       default y
+       ---help---
+         Say N here only if you are running the driver on a platform
+         which does not have support for non-power-of-two SDIO transfer.
+         If unsure, say Y.
+
+config XRADIO_5GHZ_SUPPORT
+       bool "5GHz band support"
+       depends on WLAN_VENDOR_XRADIO
+       default n
+       ---help---
+         Say Y if your device supports 5GHz band. If unsure, say N.
+
+config XRADIO_WAPI_SUPPORT
+       bool "WAPI support"
+       depends on WLAN_VENDOR_XRADIO
+       default n
+       ---help---
+         Say Y if your compat-wireless support WAPI.
+         If unsure, say N.
+
+config XRADIO_USE_EXTENSIONS
+       bool "Extensions for WFD and PS mode"
+       depends on WLAN_VENDOR_XRADIO
+       default y
+       ---help---
+         Say Y if you want to include XR extensions
+         If unsure, say Y.
+
+endif
diff --git a/drivers/net/wireless/xradio/LICENSE b/drivers/net/wireless/xradio/LICENSE
new file mode 100644 (file)
index 0000000..23cb790
--- /dev/null
@@ -0,0 +1,339 @@
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc., <http://fsf.org/>
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Lesser General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    {description}
+    Copyright (C) {year}  {fullname}
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License along
+    with this program; if not, write to the Free Software Foundation, Inc.,
+    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) year name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, the commands you use may
+be called something other than `show w' and `show c'; they could even be
+mouse-clicks or menu items--whatever suits your program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
+  `Gnomovision' (which makes passes at compilers) written by James Hacker.
+
+  {signature of Ty Coon}, 1 April 1989
+  Ty Coon, President of Vice
+
+This General Public License does not permit incorporating your program into
+proprietary programs.  If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.
diff --git a/drivers/net/wireless/xradio/Makefile b/drivers/net/wireless/xradio/Makefile
new file mode 100644 (file)
index 0000000..80a9a14
--- /dev/null
@@ -0,0 +1,54 @@
+# Standalone Makefile - uncomment for out-of-tree compilation
+#CONFIG_WLAN_VENDOR_XRADIO := m
+#CONFIG_XRADIO_USE_EXTENSIONS := y
+#CONFIG_XRADIO_WAPI_SUPPORT := n
+
+# Kernel part
+
+obj-$(CONFIG_WLAN_VENDOR_XRADIO) += xradio_wlan.o
+
+xradio_wlan-objs := \
+       fwio.o \
+       tx.o \
+       rx.o \
+       main.o \
+       queue.o \
+       hwio.o \
+       bh.o \
+       wsm.o \
+       sta.o \
+       ap.o \
+       keys.o \
+       scan.o \
+       module.o \
+       sdio.o \
+       pm.o \
+       ht.o \
+       p2p.o
+
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DMCAST_FWDING
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DXRADIO_SUSPEND_RESUME_FILTER_ENABLE
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DAP_AGGREGATE_FW_FIX
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DAP_HT_CAP_UPDATE
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DAP_HT_COMPAT_FIX
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DCONFIG_XRADIO_DUMP_ON_ERROR
+
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DCONFIG_XRADIO_SUSPEND_POWER_OFF
+
+# Extra IE for probe response from upper layer is needed in P2P GO
+# For offloading probe response to FW, the extra IE must be included
+# in the probe response template
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DPROBE_RESP_EXTRA_IE
+
+# Modified by wzw
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DTES_P2P_0002_ROC_RESTART
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DTES_P2P_000B_EXTEND_INACTIVITY_CNT
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DTES_P2P_000B_DISABLE_EAPOL_FILTER
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DXRADIO_USE_LONG_DTIM_PERIOD
+ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DXRADIO_USE_LONG_KEEP_ALIVE_PERIOD
+
+#ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DDEBUG
+#ccflags-$(CONFIG_WLAN_VENDOR_XRADIO) += -DXRADIO_DISABLE_HW_CRYPTO
+
+ldflags-$(CONFIG_WLAN_VENDOR_XRADIO) += --strip-debug
+
diff --git a/drivers/net/wireless/xradio/ap.c b/drivers/net/wireless/xradio/ap.c
new file mode 100644 (file)
index 0000000..6597fc9
--- /dev/null
@@ -0,0 +1,1624 @@
+/*
+ * STA and AP APIs for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include "xradio.h"
+#include "sta.h"
+#include "ap.h"
+#include "bh.h"
+#include "net/mac80211.h"
+
+#define XRADIO_LINK_ID_GC_TIMEOUT        ((unsigned long)(10 * HZ))
+#define XRADIO_ENABLE_ARP_FILTER_OFFLOAD  3
+
+#ifndef ERP_INFO_BYTE_OFFSET
+#define ERP_INFO_BYTE_OFFSET 2
+#endif
+
+static int xradio_upload_beacon(struct xradio_vif *priv);
+#ifdef PROBE_RESP_EXTRA_IE
+static int xradio_upload_proberesp(struct xradio_vif *priv);
+#endif
+static int xradio_upload_pspoll(struct xradio_vif *priv);
+static int xradio_upload_null(struct xradio_vif *priv);
+static int xradio_upload_qosnull(struct xradio_vif *priv);
+static int xradio_start_ap(struct xradio_vif *priv);
+static int xradio_update_beaconing(struct xradio_vif *priv);
+/*
+static int xradio_enable_beaconing(struct xradio_vif *priv,
+                                  bool enable);
+*/
+static void __xradio_sta_notify(struct xradio_vif *priv,
+                               enum sta_notify_cmd notify_cmd,
+                               int link_id);
+
+/* ******************************************************************** */
+/* AP API */
+int xradio_sta_add(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
+                   struct ieee80211_sta *sta)
+{
+       struct xradio_sta_priv *sta_priv = (struct xradio_sta_priv *)&sta->drv_priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       struct xradio_link_entry *entry;
+       struct sk_buff *skb;
+#ifdef AP_AGGREGATE_FW_FIX
+       struct xradio_common *hw_priv = hw->priv;
+#endif
+
+       if (priv->mode != NL80211_IFTYPE_AP) {
+               return 0;
+       }
+
+       sta_priv->priv = priv;
+       sta_priv->link_id = xradio_find_link_id(priv, sta->addr);
+       if (WARN_ON(!sta_priv->link_id)) {
+               /* Impossible error */
+               wiphy_debug(hw->wiphy, "No more link IDs available.\n");
+               return -ENOENT;
+       }
+
+       entry = &priv->link_id_db[sta_priv->link_id - 1];
+       spin_lock_bh(&priv->ps_state_lock);
+       if ((sta->uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK) ==
+            IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK) {
+               priv->sta_asleep_mask |= BIT(sta_priv->link_id);
+       }
+       entry->status = XRADIO_LINK_HARD;
+       while ((skb = skb_dequeue(&entry->rx_queue)))
+               ieee80211_rx_irqsafe(priv->hw, skb);
+       spin_unlock_bh(&priv->ps_state_lock);
+
+#ifdef AP_AGGREGATE_FW_FIX
+       hw_priv->connected_sta_cnt++;
+       if(hw_priv->connected_sta_cnt>1) {
+                       wsm_lock_tx(hw_priv);
+                       WARN_ON(wsm_set_block_ack_policy(hw_priv,
+                                       XRADIO_TX_BLOCK_ACK_DISABLED_FOR_ALL_TID,
+                                       XRADIO_RX_BLOCK_ACK_DISABLED_FOR_ALL_TID,
+                                       priv->if_id));
+                       wsm_unlock_tx(hw_priv);
+       }
+#endif
+
+       return 0;
+}
+
+int xradio_sta_remove(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
+                     struct ieee80211_sta *sta)
+{
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_sta_priv *sta_priv =
+                       (struct xradio_sta_priv *)&sta->drv_priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       struct xradio_link_entry *entry;
+
+       if (priv->mode != NL80211_IFTYPE_AP || !sta_priv->link_id) {
+               wiphy_warn(hw->wiphy, "no station to remove\n");
+               return 0;
+       }
+
+       entry = &priv->link_id_db[sta_priv->link_id - 1];
+       spin_lock_bh(&priv->ps_state_lock);
+       entry->status = XRADIO_LINK_RESERVE;
+       entry->timestamp = jiffies;
+       wsm_lock_tx_async(hw_priv);
+       if (queue_work(hw_priv->workqueue, &priv->link_id_work) <= 0)
+               wsm_unlock_tx(hw_priv);
+       spin_unlock_bh(&priv->ps_state_lock);
+       flush_workqueue(hw_priv->workqueue);
+
+#ifdef AP_AGGREGATE_FW_FIX
+       hw_priv->connected_sta_cnt--;
+       if(hw_priv->connected_sta_cnt <= 1) {
+               if ((priv->if_id != 1) ||
+                       ((priv->if_id == 1) && hw_priv->is_go_thru_go_neg)) {
+                       wsm_lock_tx(hw_priv);
+                       WARN_ON(wsm_set_block_ack_policy(hw_priv,
+                                               XRADIO_TX_BLOCK_ACK_ENABLED_FOR_ALL_TID,
+                                               XRADIO_RX_BLOCK_ACK_ENABLED_FOR_ALL_TID,
+                                               priv->if_id));
+                       wsm_unlock_tx(hw_priv);
+               }
+       }
+#endif
+
+       return 0;
+}
+
+static void __xradio_sta_notify(struct xradio_vif *priv,
+                               enum sta_notify_cmd notify_cmd,
+                               int link_id)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       u32 bit, prev;
+
+       /* Zero link id means "for all link IDs" */
+       if (link_id)
+               bit = BIT(link_id);
+       else if (WARN_ON_ONCE(notify_cmd != STA_NOTIFY_AWAKE))
+               bit = 0;
+       else
+               bit = priv->link_id_map;
+       prev = priv->sta_asleep_mask & bit;
+
+       switch (notify_cmd) {
+       case STA_NOTIFY_SLEEP:
+               if (!prev) {
+                       if (priv->buffered_multicasts &&
+                                       !priv->sta_asleep_mask)
+                               queue_work(hw_priv->workqueue,
+                                       &priv->multicast_start_work);
+                       priv->sta_asleep_mask |= bit;
+               }
+               break;
+       case STA_NOTIFY_AWAKE:
+               if (prev) {
+                       priv->sta_asleep_mask &= ~bit;
+                       priv->pspoll_mask &= ~bit;
+                       if (priv->tx_multicast && link_id &&
+                                       !priv->sta_asleep_mask)
+                               queue_work(hw_priv->workqueue,
+                                       &priv->multicast_stop_work);
+                       xradio_bh_wakeup(hw_priv);
+               }
+               break;
+       }
+}
+
+void xradio_sta_notify(struct ieee80211_hw *dev,
+                      struct ieee80211_vif *vif,
+                      enum sta_notify_cmd notify_cmd,
+                      struct ieee80211_sta *sta)
+{
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       struct xradio_sta_priv *sta_priv = (struct xradio_sta_priv *)&sta->drv_priv;
+
+       spin_lock_bh(&priv->ps_state_lock);
+       __xradio_sta_notify(priv, notify_cmd, sta_priv->link_id);
+       spin_unlock_bh(&priv->ps_state_lock);
+}
+
+static void xradio_ps_notify(struct xradio_vif *priv,
+                     int link_id, bool ps)
+{
+       if (link_id > MAX_STA_IN_AP_MODE) {
+               ap_printk(XRADIO_DBG_WARN,"link_id is invalid=%d\n", link_id);
+               return;
+       }
+
+       ap_printk(XRADIO_DBG_NIY, "%s for LinkId: %d. STAs asleep: %.8X\n",
+                 ps ? "Stop" : "Start", link_id, priv->sta_asleep_mask);
+
+       /* TODO:COMBO: __xradio_sta_notify changed. */
+       __xradio_sta_notify(priv, ps ? STA_NOTIFY_SLEEP : STA_NOTIFY_AWAKE, link_id);
+}
+
+static int xradio_set_tim_impl(struct xradio_vif *priv, bool aid0_bit_set)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct sk_buff *skb;
+       struct wsm_update_ie update_ie = {
+               .what = WSM_UPDATE_IE_BEACON,
+               .count = 1,
+       };
+       u16 tim_offset, tim_length;
+       ap_printk(XRADIO_DBG_TRC,"%s\n", __FUNCTION__);
+       ap_printk(XRADIO_DBG_MSG, "%s mcast: %s.\n", __func__, 
+                 aid0_bit_set ? "ena" : "dis");
+
+       skb = ieee80211_beacon_get_tim(priv->hw, priv->vif, &tim_offset, &tim_length);
+       if (!skb) {
+               __xradio_flush(hw_priv, true, priv->if_id);
+               return -ENOENT;
+       }
+
+       if (tim_offset && tim_length >= 6) {
+               /* Ignore DTIM count from mac80211:
+                * firmware handles DTIM internally. */
+               skb->data[tim_offset + 2] = 0;
+
+               /* Set/reset aid0 bit */
+               if (aid0_bit_set)
+                       skb->data[tim_offset + 4] |= 1;
+               else
+                       skb->data[tim_offset + 4] &= ~1;
+       }
+
+       update_ie.ies = &skb->data[tim_offset];
+       update_ie.length = tim_length;
+       //filter same tim info, yangfh
+       if(memcmp(priv->last_tim, update_ie.ies, tim_length)) {
+               WARN_ON(wsm_update_ie(hw_priv, &update_ie, priv->if_id));
+               memcpy(priv->last_tim, update_ie.ies, tim_length);
+               ap_printk(XRADIO_DBG_MSG,"%02x %02x %02x %02x %02x %02x\n", 
+                         update_ie.ies[0], update_ie.ies[1], update_ie.ies[2], 
+                         update_ie.ies[3], update_ie.ies[4], update_ie.ies[5]);
+       }
+
+       dev_kfree_skb(skb);
+
+       return 0;
+}
+
+void xradio_set_tim_work(struct work_struct *work)
+{
+       struct xradio_vif *priv = container_of(work, struct xradio_vif, set_tim_work);
+       xradio_set_tim_impl(priv, priv->aid0_bit_set);
+}
+
+int xradio_set_tim(struct ieee80211_hw *dev, struct ieee80211_sta *sta,
+                  bool set)
+{
+       struct xradio_sta_priv *sta_priv = (struct xradio_sta_priv *)&sta->drv_priv;
+       struct xradio_vif *priv = sta_priv->priv;
+
+       WARN_ON(priv->mode != NL80211_IFTYPE_AP);
+       queue_work(priv->hw_priv->workqueue, &priv->set_tim_work);
+       return 0;
+}
+
+void xradio_set_cts_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, set_cts_work.work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       u8 erp_ie[3] = {WLAN_EID_ERP_INFO, 0x1, 0};
+       struct wsm_update_ie update_ie = {
+               .what = WSM_UPDATE_IE_BEACON,
+               .count = 1,
+               .ies = erp_ie,
+               .length = 3,
+       };
+       u32 erp_info;
+       __le32 use_cts_prot;
+
+       mutex_lock(&hw_priv->conf_mutex);
+       erp_info = priv->erp_info;
+       mutex_unlock(&hw_priv->conf_mutex);
+       use_cts_prot = (erp_info & WLAN_ERP_USE_PROTECTION)? __cpu_to_le32(1) : 0;
+
+       erp_ie[ERP_INFO_BYTE_OFFSET] = erp_info;
+
+       ap_printk(XRADIO_DBG_MSG, "ERP information 0x%x\n", erp_info);
+
+       /* TODO:COMBO: If 2 interfaces are on the same channel they share
+       the same ERP values */
+       WARN_ON(wsm_write_mib(hw_priv, WSM_MIB_ID_NON_ERP_PROTECTION,
+                              &use_cts_prot, sizeof(use_cts_prot), priv->if_id));
+       /* If STA Mode update_ie is not required */
+       if (priv->mode != NL80211_IFTYPE_STATION) {
+               WARN_ON(wsm_update_ie(hw_priv, &update_ie, priv->if_id));
+       }
+
+       return;
+}
+
+static int xradio_set_btcoexinfo(struct xradio_vif *priv)
+{
+       struct wsm_override_internal_txrate arg;
+       int ret = 0;
+
+       if (priv->mode == NL80211_IFTYPE_STATION) {
+               /* Plumb PSPOLL and NULL template */
+               WARN_ON(xradio_upload_pspoll(priv));
+               WARN_ON(xradio_upload_null(priv));
+       } else {
+               return 0;
+       }
+
+       memset(&arg, 0, sizeof(struct wsm_override_internal_txrate));
+
+       if (!priv->vif->p2p) {
+               /* STATION mode */
+               if (priv->bss_params.operationalRateSet & ~0xF) {
+                       ap_printk(XRADIO_DBG_NIY, "STA has ERP rates\n");
+                       /* G or BG mode */
+                       arg.internalTxRate = (__ffs(
+                       priv->bss_params.operationalRateSet & ~0xF));
+               } else {
+                       ap_printk(XRADIO_DBG_NIY, "STA has non ERP rates\n");
+                       /* B only mode */
+                       arg.internalTxRate = (__ffs(
+                       priv->association_mode.basicRateSet));
+               }
+               arg.nonErpInternalTxRate = (__ffs(
+                       priv->association_mode.basicRateSet));
+       } else {
+               /* P2P mode */
+               arg.internalTxRate = (__ffs(
+                       priv->bss_params.operationalRateSet & ~0xF));
+               arg.nonErpInternalTxRate = (__ffs(
+                       priv->bss_params.operationalRateSet & ~0xF));
+       }
+
+       ap_printk(XRADIO_DBG_NIY, "BTCOEX_INFO" "MODE %d, internalTxRate : %x,"
+                 "nonErpInternalTxRate: %x\n", priv->mode, arg.internalTxRate,
+                 arg.nonErpInternalTxRate);
+
+       ret = WARN_ON(wsm_write_mib(xrwl_vifpriv_to_hwpriv(priv),
+                      WSM_MIB_ID_OVERRIDE_INTERNAL_TX_RATE, 
+                      &arg, sizeof(arg), priv->if_id));
+
+       return ret;
+}
+
+void xradio_bss_info_changed(struct ieee80211_hw *dev,
+                            struct ieee80211_vif *vif,
+                            struct ieee80211_bss_conf *info,
+                            u32 changed)
+{
+       struct xradio_common *hw_priv = dev->priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+
+       mutex_lock(&hw_priv->conf_mutex);
+       if (changed & BSS_CHANGED_BSSID) {
+               memcpy(priv->bssid, info->bssid, ETH_ALEN);
+               xradio_setup_mac_pvif(priv);
+       }
+
+       /* TODO: BSS_CHANGED_IBSS */
+       if (changed & BSS_CHANGED_ARP_FILTER) {
+               struct wsm_arp_ipv4_filter filter = {0};
+               int i;
+               ap_printk(XRADIO_DBG_MSG, "[STA] BSS_CHANGED_ARP_FILTER cnt: %d\n",
+                         info->arp_addr_cnt);
+
+               if (info->arp_addr_cnt){
+                       if (vif->type == NL80211_IFTYPE_STATION)
+                               filter.enable = (u32)XRADIO_ENABLE_ARP_FILTER_OFFLOAD;
+                       else if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+                               filter.enable = (u32)(1<<1);
+                       else
+                               filter.enable = 0;
+               }
+
+               /* Currently only one IP address is supported by firmware.
+                * In case of more IPs arp filtering will be disabled. */
+               if (info->arp_addr_cnt > 0 &&
+                   info->arp_addr_cnt <= WSM_MAX_ARP_IP_ADDRTABLE_ENTRIES) {
+                       for (i = 0; i < info->arp_addr_cnt; i++) {
+                               filter.ipv4Address[i] = info->arp_addr_list[i];
+                               ap_printk(XRADIO_DBG_NIY, "[STA]addr[%d]: 0x%X\n", i, filter.ipv4Address[i]);
+                       }
+               } else
+                       filter.enable = 0;
+
+               if (filter.enable)
+                       xradio_set_arpreply(dev, vif);
+
+               priv->filter4.enable = filter.enable;
+               ap_printk(XRADIO_DBG_NIY, "[STA]arp ip filter enable: %d\n", __le32_to_cpu(filter.enable));
+
+               if (wsm_set_arp_ipv4_filter(hw_priv, &filter, priv->if_id))
+                       WARN_ON(1);
+
+               if (filter.enable &&
+                       (priv->join_status == XRADIO_JOIN_STATUS_STA)) {
+                       /* Firmware requires that value for this 1-byte field must
+                        * be specified in units of 500us. Values above the 128ms
+                        * threshold are not supported. */
+                       //if (info->dynamic_ps_timeout >= 0x80)
+                       //      priv->powersave_mode.fastPsmIdlePeriod = 0xFF;
+                       //else
+                       //      priv->powersave_mode.fastPsmIdlePeriod = info->dynamic_ps_timeout << 1;
+
+                       priv->powersave_mode.fastPsmIdlePeriod = 200;//when connected,the dev->conf.dynamic_ps_timeout value is 0
+                       priv->powersave_mode.apPsmChangePeriod = 200; //100ms, add by yangfh
+                       ap_printk(XRADIO_DBG_NIY, "[STA]fastPsmIdle=%d, apPsmChange=%d\n", 
+                                 priv->powersave_mode.fastPsmIdlePeriod, 
+                                 priv->powersave_mode.apPsmChangePeriod);
+
+                       if (priv->setbssparams_done) {
+                               int ret = 0;
+                               struct wsm_set_pm pm = priv->powersave_mode;
+                               if (priv->user_power_set_true)
+                                       priv->powersave_mode.pmMode = priv->user_pm_mode;
+                               else if ((priv->power_set_true &&
+                                        ((priv->powersave_mode.pmMode == WSM_PSM_ACTIVE) ||
+                                        (priv->powersave_mode.pmMode == WSM_PSM_PS)))    ||
+                                        !priv->power_set_true)
+                                       priv->powersave_mode.pmMode = WSM_PSM_FAST_PS;
+
+                               ret = xradio_set_pm (priv, &priv->powersave_mode);
+                               if(ret)
+                                       priv->powersave_mode = pm;
+                       } else {
+                               priv->powersave_mode.pmMode = WSM_PSM_FAST_PS;
+                       }
+                       priv->power_set_true = 0;
+                       priv->user_power_set_true = 0;
+               }
+       }
+
+       if (changed & BSS_CHANGED_BEACON) {
+               ap_printk(XRADIO_DBG_NIY, "BSS_CHANGED_BEACON\n");
+#ifdef HIDDEN_SSID
+               if(priv->join_status != XRADIO_JOIN_STATUS_AP) {
+                       priv->hidden_ssid = info->hidden_ssid;
+                       priv->ssid_length = info->ssid_len;
+                       memcpy(priv->ssid, info->ssid, info->ssid_len);
+               } else
+                       ap_printk(XRADIO_DBG_NIY, "priv->join_status=%d\n", priv->join_status);
+#endif
+               WARN_ON(xradio_upload_beacon(priv));
+               WARN_ON(xradio_update_beaconing(priv));
+       }
+
+       if (changed & BSS_CHANGED_BEACON_ENABLED) {
+               ap_printk(XRADIO_DBG_NIY, "BSS_CHANGED_BEACON_ENABLED dummy\n");
+               priv->enable_beacon = info->enable_beacon;
+       }
+
+       if (changed & BSS_CHANGED_BEACON_INT) {
+               ap_printk(XRADIO_DBG_NIY, "CHANGED_BEACON_INT\n");
+               /* Restart AP only when connected */
+               if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+                       WARN_ON(xradio_update_beaconing(priv));
+       }
+
+
+       if (changed & BSS_CHANGED_ASSOC) {
+               wsm_lock_tx(hw_priv);
+               priv->wep_default_key_id = -1;
+               wsm_unlock_tx(hw_priv);
+
+               if (!info->assoc /* && !info->ibss_joined */) {
+                       priv->cqm_link_loss_count = XRADIO_LINK_LOSS_THOLD_DEF;
+                       priv->cqm_beacon_loss_count = XRADIO_BSS_LOSS_THOLD_DEF;
+                       priv->cqm_tx_failure_thold = 0;
+               }
+               priv->cqm_tx_failure_count = 0;
+       }
+
+       if (changed & 
+           (BSS_CHANGED_ASSOC        |
+            BSS_CHANGED_BASIC_RATES  |
+            BSS_CHANGED_ERP_PREAMBLE |
+            BSS_CHANGED_HT           |
+            BSS_CHANGED_ERP_SLOT)) {
+               int is_combo = 0;
+               int i;
+               struct xradio_vif *tmp_priv;
+               ap_printk(XRADIO_DBG_NIY, "BSS_CHANGED_ASSOC.\n");
+               if (info->assoc) { /* TODO: ibss_joined */
+                       struct ieee80211_sta *sta = NULL;
+                       if (info->dtim_period)
+                               priv->join_dtim_period = info->dtim_period;
+                       priv->beacon_int = info->beacon_int;
+
+                       /* Associated: kill join timeout */
+                       cancel_delayed_work_sync(&priv->join_timeout);
+
+                       rcu_read_lock();
+                       if (info->bssid)
+                               sta = ieee80211_find_sta(vif, info->bssid);
+                       if (sta) {
+                               /* TODO:COMBO:Change this once
+                               * mac80211 changes are available */
+                               BUG_ON(!hw_priv->channel);
+                               hw_priv->ht_oper.ht_cap = sta->ht_cap;
+                               priv->bss_params.operationalRateSet =__cpu_to_le32(
+                                 xradio_rate_mask_to_wsm(hw_priv, sta->supp_rates[hw_priv->channel->band]));
+                               /* TODO by Icenowy: I think this may lead to some problems. */
+//                             hw_priv->ht_oper.channel_type   = info->channel_type;
+                               hw_priv->ht_oper.operation_mode = info->ht_operation_mode;
+                       } else {
+                               memset(&hw_priv->ht_oper, 0, sizeof(hw_priv->ht_oper));
+                               priv->bss_params.operationalRateSet = -1;
+                       }
+                       rcu_read_unlock();
+                       priv->htcap = (sta && xradio_is_ht(&hw_priv->ht_oper));
+                       xradio_for_each_vif(hw_priv, tmp_priv, i) {
+                               if (!tmp_priv)
+                                       continue;
+                               if (tmp_priv->join_status >= XRADIO_JOIN_STATUS_STA)
+                                       is_combo++;
+                       }
+
+                       if (is_combo > 1) {
+                               hw_priv->vif0_throttle = XRWL_HOST_VIF0_11BG_THROTTLE;
+                               hw_priv->vif1_throttle = XRWL_HOST_VIF1_11BG_THROTTLE;
+                               ap_printk(XRADIO_DBG_WARN, "%sASSOC is_combo %d\n", 
+                                        (priv->join_status == XRADIO_JOIN_STATUS_STA)?"[STA] ":"",
+                                         hw_priv->vif0_throttle);
+                       } else if ((priv->join_status == XRADIO_JOIN_STATUS_STA) && priv->htcap) {
+                               hw_priv->vif0_throttle = XRWL_HOST_VIF0_11N_THROTTLE;
+                               hw_priv->vif1_throttle = XRWL_HOST_VIF1_11N_THROTTLE;
+                               ap_printk(XRADIO_DBG_WARN, "[STA] ASSOC HTCAP 11N %d\n",hw_priv->vif0_throttle);
+                       } else {
+                               hw_priv->vif0_throttle = XRWL_HOST_VIF0_11BG_THROTTLE;
+                               hw_priv->vif1_throttle = XRWL_HOST_VIF1_11BG_THROTTLE;
+                               ap_printk(XRADIO_DBG_WARN, "ASSOC not_combo 11BG %d\n",hw_priv->vif0_throttle);
+                       }
+
+                       if (sta) {
+                               __le32 val = 0;
+                               if (hw_priv->ht_oper.operation_mode & IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT) {
+                                       ap_printk(XRADIO_DBG_NIY,"[STA] Non-GF STA present\n");
+                                       /* Non Green field capable STA */
+                                       val = __cpu_to_le32(BIT(1));
+                               }
+                               WARN_ON(wsm_write_mib(hw_priv, WSM_MID_ID_SET_HT_PROTECTION,
+                                                      &val, sizeof(val), priv->if_id));
+                       }
+
+                       priv->association_mode.greenfieldMode = xradio_ht_greenfield(&hw_priv->ht_oper);
+                       priv->association_mode.flags =
+                         WSM_ASSOCIATION_MODE_SNOOP_ASSOC_FRAMES |
+                         WSM_ASSOCIATION_MODE_USE_PREAMBLE_TYPE  |
+                         WSM_ASSOCIATION_MODE_USE_HT_MODE        |
+                         WSM_ASSOCIATION_MODE_USE_BASIC_RATE_SET |
+                         WSM_ASSOCIATION_MODE_USE_MPDU_START_SPACING;
+
+                       priv->association_mode.preambleType =
+                         (info->use_short_preamble ? WSM_JOIN_PREAMBLE_SHORT : WSM_JOIN_PREAMBLE_LONG);
+                       priv->association_mode.basicRateSet = __cpu_to_le32(
+                         xradio_rate_mask_to_wsm(hw_priv,info->basic_rates));
+                       priv->association_mode.mpduStartSpacing =
+                         xradio_ht_ampdu_density(&hw_priv->ht_oper);
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+                       //priv->cqm_beacon_loss_count = info->cqm_beacon_miss_thold;
+                       //priv->cqm_tx_failure_thold  = info->cqm_tx_fail_thold;
+                       //priv->cqm_tx_failure_count  = 0;
+                       cancel_delayed_work_sync(&priv->bss_loss_work);
+                       cancel_delayed_work_sync(&priv->connection_loss_work);
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+
+                       priv->bss_params.beaconLostCount = (priv->cqm_beacon_loss_count ?
+                         priv->cqm_beacon_loss_count : priv->cqm_link_loss_count);
+
+                       priv->bss_params.aid = info->aid;
+
+                       if (priv->join_dtim_period < 1)
+                               priv->join_dtim_period = 1;
+
+                       ap_printk(XRADIO_DBG_MSG, "[STA] DTIM %d, interval: %d\n",
+                                 priv->join_dtim_period, priv->beacon_int);
+                       ap_printk(XRADIO_DBG_MSG, "[STA] Preamble: %d, " \
+                                 "Greenfield: %d, Aid: %d, Rates: 0x%.8X, Basic: 0x%.8X\n",
+                                 priv->association_mode.preambleType,
+                                 priv->association_mode.greenfieldMode,
+                                 priv->bss_params.aid,
+                                 priv->bss_params.operationalRateSet,
+                                 priv->association_mode.basicRateSet);
+                       WARN_ON(wsm_set_association_mode(hw_priv, &priv->association_mode, priv->if_id));
+                       WARN_ON(wsm_keep_alive_period(hw_priv, XRADIO_KEEP_ALIVE_PERIOD /* sec */,
+                                                      priv->if_id));
+                       WARN_ON(wsm_set_bss_params(hw_priv, &priv->bss_params, priv->if_id));
+                       priv->setbssparams_done = true;
+#ifdef XRADIO_USE_LONG_DTIM_PERIOD
+{
+                       int join_dtim_period_extend;
+                       if (priv->join_dtim_period <= 3) {
+                               join_dtim_period_extend = priv->join_dtim_period * 3;
+                       } else if (priv->join_dtim_period <= 5) {
+                               join_dtim_period_extend = priv->join_dtim_period * 2;
+                       } else {
+                               join_dtim_period_extend = priv->join_dtim_period;
+                       }
+                       WARN_ON(wsm_set_beacon_wakeup_period(hw_priv,
+                               ((priv->beacon_int * join_dtim_period_extend) > MAX_BEACON_SKIP_TIME_MS 
+                               ? 1 : join_dtim_period_extend) , 0, priv->if_id));
+}
+#else
+                       WARN_ON(wsm_set_beacon_wakeup_period(hw_priv,
+                               ((priv->beacon_int * priv->join_dtim_period) > MAX_BEACON_SKIP_TIME_MS 
+                               ? 1 : priv->join_dtim_period) , 0, priv->if_id));
+#endif
+                       if (priv->htcap) {
+                               wsm_lock_tx(hw_priv);
+                               /* Statically enabling block ack for TX/RX */
+                               WARN_ON(wsm_set_block_ack_policy(hw_priv, hw_priv->ba_tid_mask,
+                                                                 hw_priv->ba_tid_mask, priv->if_id));
+                               wsm_unlock_tx(hw_priv);
+                       }
+                       /*set ps active,avoid that when connecting process,the device sleeps,then can't receive pkts.*/
+                       if (changed & BSS_CHANGED_ASSOC) 
+                               priv->powersave_mode.pmMode = WSM_PSM_ACTIVE;
+                       xradio_set_pm(priv, &priv->powersave_mode);
+                       if (priv->vif->p2p) {
+                               ap_printk(XRADIO_DBG_NIY, "[STA] Setting p2p powersave configuration.\n");
+                               WARN_ON(wsm_set_p2p_ps_modeinfo(hw_priv, &priv->p2p_ps_modeinfo, priv->if_id));
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+                               //xradio_notify_noa(priv, XRADIO_NOA_NOTIFICATION_DELAY);
+#endif
+                       }
+
+                       if (priv->mode == NL80211_IFTYPE_STATION)
+                               WARN_ON(xradio_upload_qosnull(priv));
+
+                       if (hw_priv->is_BT_Present)
+                               WARN_ON(xradio_set_btcoexinfo(priv));
+#if 0
+                       /* It's better to override internal TX rete; otherwise
+                        * device sends RTS at too high rate. However device
+                        * can't receive CTS at 1 and 2 Mbps. Well, 5.5 is a
+                        * good choice for RTS/CTS, but that means PS poll
+                        * will be sent at the same rate - impact on link
+                        * budget. Not sure what is better.. */
+
+                       /* Update: internal rate selection algorythm is not
+                        * bad: if device is not receiving CTS at high rate,
+                        * it drops RTS rate.
+                        * So, conclusion: if-0 the code. Keep code just for
+                        * information:
+                        * Do not touch WSM_MIB_ID_OVERRIDE_INTERNAL_TX_RATE! */
+
+                       /* ~3 is a bug in device: RTS/CTS is not working at
+                        * low rates */
+                       __le32 internal_tx_rate = __cpu_to_le32(
+                                                 __ffs(priv->association_mode.basicRateSet & ~3));
+                       WARN_ON(wsm_write_mib(priv, WSM_MIB_ID_OVERRIDE_INTERNAL_TX_RATE,
+                                              &internal_tx_rate,sizeof(internal_tx_rate)));
+#endif
+               } else {
+                       memset(&priv->association_mode, 0, sizeof(priv->association_mode));
+                       memset(&priv->bss_params, 0, sizeof(priv->bss_params));
+               }
+       }
+       if (changed & (BSS_CHANGED_ASSOC | BSS_CHANGED_ERP_CTS_PROT)) {
+               u32 prev_erp_info = priv->erp_info;
+               if (priv->join_status == XRADIO_JOIN_STATUS_AP) {
+                       if (info->use_cts_prot)
+                               priv->erp_info |= WLAN_ERP_USE_PROTECTION;
+                       else if (!(prev_erp_info & WLAN_ERP_NON_ERP_PRESENT))
+                               priv->erp_info &= ~WLAN_ERP_USE_PROTECTION;
+
+                       if (prev_erp_info != priv->erp_info)
+                               queue_delayed_work(hw_priv->workqueue, &priv->set_cts_work, 0*HZ);
+               }
+       }
+
+       if (changed & (BSS_CHANGED_ASSOC | BSS_CHANGED_ERP_SLOT)) {
+               __le32 slot_time = info->use_short_slot ? __cpu_to_le32(9) : __cpu_to_le32(20);
+               ap_printk(XRADIO_DBG_MSG, "[STA] Slot time :%d us.\n", __le32_to_cpu(slot_time));
+               WARN_ON(wsm_write_mib(hw_priv, WSM_MIB_ID_DOT11_SLOT_TIME, &slot_time,
+                                      sizeof(slot_time), priv->if_id));
+       }
+       if (changed & (BSS_CHANGED_ASSOC | BSS_CHANGED_CQM)) {
+               struct wsm_rcpi_rssi_threshold threshold = {
+                       .rollingAverageCount = 8,
+               };
+
+#if 0
+               /* For verification purposes */
+               info->cqm_rssi_thold = -50;
+               info->cqm_rssi_hyst = 4;
+#endif /* 0 */
+
+               ap_printk(XRADIO_DBG_NIY, "[CQM] RSSI threshold subscribe: %d(+-%d)\n",
+                        info->cqm_rssi_thold, info->cqm_rssi_hyst);
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+               priv->cqm_rssi_thold = info->cqm_rssi_thold;
+               priv->cqm_rssi_hyst  = info->cqm_rssi_hyst;
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+
+               if (info->cqm_rssi_thold || info->cqm_rssi_hyst) {
+                       /* RSSI subscription enabled */
+                       /* TODO: It's not a correct way of setting threshold.
+                        * Upper and lower must be set equal here and adjusted
+                        * in callback. However current implementation is much
+                        * more relaible and stable. */
+                       if (priv->cqm_use_rssi) {
+                               threshold.upperThreshold = info->cqm_rssi_thold + info->cqm_rssi_hyst;
+                               threshold.lowerThreshold = info->cqm_rssi_thold;
+                       } else {
+                               /* convert RSSI to RCPI, RCPI = (RSSI + 110) * 2 */
+                               threshold.upperThreshold = (info->cqm_rssi_thold + info->cqm_rssi_hyst + 110)<<1;
+                               threshold.lowerThreshold = (info->cqm_rssi_thold + 110)<<1;
+                       }
+                       threshold.rssiRcpiMode |= WSM_RCPI_RSSI_THRESHOLD_ENABLE;
+               } else {
+                       /* There is a bug in FW, see sta.c. We have to enable
+                        * dummy subscription to get correct RSSI values. */
+                       threshold.rssiRcpiMode |= WSM_RCPI_RSSI_THRESHOLD_ENABLE |
+                                                 WSM_RCPI_RSSI_DONT_USE_UPPER   |
+                                                 WSM_RCPI_RSSI_DONT_USE_LOWER;
+               }
+               WARN_ON(wsm_set_rcpi_rssi_threshold(hw_priv, &threshold, priv->if_id));
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+               //priv->cqm_tx_failure_thold = info->cqm_tx_fail_thold;
+               //priv->cqm_tx_failure_count = 0;
+
+               //if (priv->cqm_beacon_loss_count != info->cqm_beacon_miss_thold) {
+               //      priv->cqm_beacon_loss_count = info->cqm_beacon_miss_thold;
+               //      priv->bss_params.beaconLostCount = (priv->cqm_beacon_loss_count?
+               //        priv->cqm_beacon_loss_count : priv->cqm_link_loss_count);
+                       /* Make sure we are associated before sending
+                        * set_bss_params to firmware */
+                       if (priv->bss_params.aid) {
+                               WARN_ON(wsm_set_bss_params(hw_priv, &priv->bss_params, priv->if_id));
+                               priv->setbssparams_done = true;
+                       }
+               //}
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+       }
+       /*
+        * in linux3.4 mac,the  enum ieee80211_bss_change variable doesn't have
+        * BSS_CHANGED_PS and BSS_CHANGED_RETRY_LIMITS enum value.
+        */
+#if 0
+       if (changed & BSS_CHANGED_PS) {
+               if (info->ps_enabled == false)
+                       priv->powersave_mode.pmMode = WSM_PSM_ACTIVE;
+               else if (info->dynamic_ps_timeout <= 0)
+                       priv->powersave_mode.pmMode = WSM_PSM_PS;
+               else
+                       priv->powersave_mode.pmMode = WSM_PSM_FAST_PS;
+
+               ap_printk(XRADIO_DBG_MSG, "[STA] Aid: %d, Joined: %s, Powersave: %s\n",
+                         priv->bss_params.aid,
+                         priv->join_status == XRADIO_JOIN_STATUS_STA ? "yes" : "no",
+                        (priv->powersave_mode.pmMode == WSM_PSM_ACTIVE ? "WSM_PSM_ACTIVE" :
+                         priv->powersave_mode.pmMode == WSM_PSM_PS ? "WSM_PSM_PS" :
+                         priv->powersave_mode.pmMode == WSM_PSM_FAST_PS ? "WSM_PSM_FAST_PS" :
+                         "UNKNOWN"));
+
+               /* Firmware requires that value for this 1-byte field must
+                * be specified in units of 500us. Values above the 128ms
+                * threshold are not supported. */
+               if (info->dynamic_ps_timeout >= 0x80)
+                       priv->powersave_mode.fastPsmIdlePeriod = 0xFF;
+               else
+                       priv->powersave_mode.fastPsmIdlePeriod = info->dynamic_ps_timeout << 1;
+               ap_printk(XRADIO_DBG_NIY, "[STA]CHANGED_PS fastPsmIdle=%d, apPsmChange=%d\n", 
+                         priv->powersave_mode.fastPsmIdlePeriod, 
+                         priv->powersave_mode.apPsmChangePeriod);
+
+               if (priv->join_status == XRADIO_JOIN_STATUS_STA && priv->bss_params.aid &&
+                         priv->setbssparams_done && priv->filter4.enable)
+                       xradio_set_pm(priv, &priv->powersave_mode);
+               else
+                       priv->power_set_true = 1;
+       }
+
+       if (changed & BSS_CHANGED_RETRY_LIMITS) {
+               ap_printk(XRADIO_DBG_NIY, "Retry limits: %d (long), %d (short).\n", 
+                         info->retry_long, info->retry_short);
+               spin_lock_bh(&hw_priv->tx_policy_cache.lock);
+               /*TODO:COMBO: for now it's still handled per hw and kept
+                * in xradio_common */
+               hw_priv->long_frame_max_tx_count  = info->retry_long;
+               hw_priv->short_frame_max_tx_count = 
+                 (info->retry_short < 0x0F ? info->retry_short : 0x0F);
+               hw_priv->hw->max_rate_tries = hw_priv->short_frame_max_tx_count;
+               spin_unlock_bh(&hw_priv->tx_policy_cache.lock);
+               /* TBD: I think we don't need tx_policy_force_upload().
+                * Outdated policies will leave cache in a normal way. */
+               /* WARN_ON(tx_policy_force_upload(priv)); */
+       }
+#endif
+       /*in linux3.4 mac,the  enum ieee80211_bss_change variable doesn't have BSS_CHANGED_P2P_PS enum value*/
+#if 0
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       if (changed & BSS_CHANGED_P2P_PS) {
+               struct wsm_p2p_ps_modeinfo *modeinfo;
+               modeinfo = &priv->p2p_ps_modeinfo;
+               ap_printk(XRADIO_DBG_NIY, "[AP] BSS_CHANGED_P2P_PS\n");
+               ap_printk(XRADIO_DBG_NIY, "[AP] Legacy PS: %d for AID %d in %d mode.\n",
+                         info->p2p_ps.legacy_ps, priv->bss_params.aid, priv->join_status);
+
+               if (info->p2p_ps.legacy_ps >= 0) {
+                       if (info->p2p_ps.legacy_ps > 0)
+                               priv->powersave_mode.pmMode = WSM_PSM_PS;
+                       else
+                               priv->powersave_mode.pmMode = WSM_PSM_ACTIVE;
+
+                       if(info->p2p_ps.ctwindow && info->p2p_ps.opp_ps)
+                               priv->powersave_mode.pmMode = WSM_PSM_PS;
+                       if (priv->join_status == XRADIO_JOIN_STATUS_STA)
+                               xradio_set_pm(priv, &priv->powersave_mode);
+               }
+
+               ap_printk(XRADIO_DBG_MSG, "[AP] CTWindow: %d\n", info->p2p_ps.ctwindow);
+               if (info->p2p_ps.ctwindow >= 128)
+                       modeinfo->oppPsCTWindow = 127;
+               else if (info->p2p_ps.ctwindow >= 0)
+                       modeinfo->oppPsCTWindow = info->p2p_ps.ctwindow;
+
+               ap_printk(XRADIO_DBG_MSG, "[AP] Opportunistic: %d\n", info->p2p_ps.opp_ps);
+               switch (info->p2p_ps.opp_ps) {
+               case 0:
+                       modeinfo->oppPsCTWindow &= ~(BIT(7));
+                       break;
+               case 1:
+                       modeinfo->oppPsCTWindow |= BIT(7);
+                       break;
+               default:
+                       break;
+               }
+
+               ap_printk(XRADIO_DBG_MSG, "[AP] NOA: %d, %d, %d, %d\n",
+                         info->p2p_ps.count, info->p2p_ps.start,
+                         info->p2p_ps.duration, info->p2p_ps.interval);
+               /* Notice of Absence */
+               modeinfo->count = info->p2p_ps.count;
+
+               if (info->p2p_ps.count) {
+                       /* In case P2P_GO we need some extra time to be sure
+                        * we will update beacon/probe_resp IEs correctly */
+#define NOA_DELAY_START_MS     300
+                       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+                               modeinfo->startTime = __cpu_to_le32(info->p2p_ps.start + NOA_DELAY_START_MS);
+                       else
+                               modeinfo->startTime = __cpu_to_le32(info->p2p_ps.start);
+                       modeinfo->duration    = __cpu_to_le32(info->p2p_ps.duration);
+                       modeinfo->interval    = __cpu_to_le32(info->p2p_ps.interval);
+                       modeinfo->dtimCount   = 1;
+                       modeinfo->reserved    = 0;
+               } else {
+                       modeinfo->dtimCount = 0;
+                       modeinfo->startTime = 0;
+                       modeinfo->reserved  = 0;
+                       modeinfo->duration  = 0;
+                       modeinfo->interval  = 0;
+               }
+
+#if defined(CONFIG_XRADIO_DEBUG)
+               print_hex_dump_bytes("p2p_set_ps_modeinfo: ", DUMP_PREFIX_NONE,
+                                    (u8 *)modeinfo, sizeof(*modeinfo));
+#endif /* CONFIG_XRADIO_DEBUG */
+
+               if (priv->join_status == XRADIO_JOIN_STATUS_STA ||
+                   priv->join_status == XRADIO_JOIN_STATUS_AP) {
+                       WARN_ON(wsm_set_p2p_ps_modeinfo(hw_priv, modeinfo, priv->if_id));
+               }
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+               /* Temporary solution while firmware don't support NOA change
+                * notification yet */
+               xradio_notify_noa(priv, 10);
+#endif
+       }
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+#endif
+       mutex_unlock(&hw_priv->conf_mutex);
+}
+
+void xradio_multicast_start_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+              container_of(work, struct xradio_vif, multicast_start_work);
+       long tmo = priv->join_dtim_period * (priv->beacon_int + 20) * HZ / 1024;
+
+       cancel_work_sync(&priv->multicast_stop_work);
+       if (!priv->aid0_bit_set) {
+               wsm_lock_tx(priv->hw_priv);
+               xradio_set_tim_impl(priv, true);
+               priv->aid0_bit_set = true;
+               mod_timer(&priv->mcast_timeout, jiffies + tmo);
+               wsm_unlock_tx(priv->hw_priv);
+       }
+}
+
+void xradio_multicast_stop_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, multicast_stop_work);
+
+       if (priv->aid0_bit_set) {
+               del_timer_sync(&priv->mcast_timeout);
+               wsm_lock_tx(priv->hw_priv);
+               priv->aid0_bit_set = false;
+               xradio_set_tim_impl(priv, false);
+               wsm_unlock_tx(priv->hw_priv);
+       }
+}
+
+void xradio_mcast_timeout(unsigned long arg)
+{
+       struct xradio_vif *priv = (struct xradio_vif *)arg;
+
+       ap_printk(XRADIO_DBG_WARN, "Multicast delivery timeout.\n");
+       spin_lock_bh(&priv->ps_state_lock);
+       priv->tx_multicast = priv->aid0_bit_set && priv->buffered_multicasts;
+       if (priv->tx_multicast)
+               xradio_bh_wakeup(xrwl_vifpriv_to_hwpriv(priv));
+       spin_unlock_bh(&priv->ps_state_lock);
+}
+
+int xradio_ampdu_action(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
+                        struct ieee80211_ampdu_params *params)
+{
+       /* Aggregation is implemented fully in firmware,
+        * including block ack negotiation.
+        * In case of AMPDU aggregation in RX direction
+        * re-ordering of packets takes place on host. mac80211
+        * needs the ADDBA Request to setup reodering.mac80211 also
+        * sends ADDBA Response which is discarded in the driver as
+        * FW generates the ADDBA Response on its own.*/
+       int ret;
+
+       switch (params->action) {
+       case IEEE80211_AMPDU_RX_START:
+       case IEEE80211_AMPDU_RX_STOP:
+               /* Just return OK to mac80211 */
+               ret = 0;
+               break;
+       default:
+               ret = -ENOTSUPP;
+       }
+       return ret;
+}
+
+/* ******************************************************************** */
+/* WSM callback                                                                */
+void xradio_suspend_resume(struct xradio_vif *priv, struct wsm_suspend_resume *arg)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+#if 0
+       ap_printk(XRADIO_DBG_MSG, "[AP] %s: %s\n", 
+                 arg->stop ? "stop" : "start",
+                 arg->multicast ? "broadcast" : "unicast");
+#endif
+       if (arg->multicast) {
+               bool cancel_tmo = false;
+               spin_lock_bh(&priv->ps_state_lock);
+               if (arg->stop) {
+                       priv->tx_multicast = false;
+               } else {
+                       /* Firmware sends this indication every DTIM if there
+                        * is a STA in powersave connected. There is no reason
+                        * to suspend, following wakeup will consume much more
+                        * power than it could be saved. */
+                       xradio_pm_stay_awake(&hw_priv->pm_state, (priv->join_dtim_period *
+                                            (priv->beacon_int + 20) * HZ / 1024));
+                       priv->tx_multicast = priv->aid0_bit_set && priv->buffered_multicasts;
+                       if (priv->tx_multicast) {
+                               cancel_tmo = true;
+                               xradio_bh_wakeup(hw_priv);
+                       }
+               }
+               spin_unlock_bh(&priv->ps_state_lock);
+               if (cancel_tmo)
+                       del_timer_sync(&priv->mcast_timeout);
+       } else {
+               spin_lock_bh(&priv->ps_state_lock);
+               xradio_ps_notify(priv, arg->link_id, arg->stop);
+               spin_unlock_bh(&priv->ps_state_lock);
+               if (!arg->stop)
+                       xradio_bh_wakeup(hw_priv);
+       }
+       return;
+}
+
+/* ******************************************************************** */
+/* AP privates                                                         */
+
+static int xradio_upload_beacon(struct xradio_vif *priv)
+{
+       int ret = 0;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_BEACON,
+       };
+       struct ieee80211_mgmt *mgmt;
+       u8 *erp_inf, *ies, *ht_oper;
+       u32 ies_len;
+
+       if (priv->vif->p2p || hw_priv->channel->band == NL80211_BAND_5GHZ)
+               frame.rate = WSM_TRANSMIT_RATE_6;
+
+       frame.skb = ieee80211_beacon_get(priv->hw, priv->vif);
+       if (WARN_ON(!frame.skb))
+               return -ENOMEM;
+
+       mgmt = (void *)frame.skb->data;
+       ies  = mgmt->u.beacon.variable;
+       ies_len = frame.skb->len - (u32)(ies - (u8 *)mgmt);
+
+       ht_oper = (u8 *)cfg80211_find_ie( WLAN_EID_HT_OPERATION, ies, ies_len);
+       if (ht_oper) {
+               /* Enable RIFS*/
+               ht_oper[3] |= 8;
+       }
+
+       erp_inf = (u8 *)cfg80211_find_ie(WLAN_EID_ERP_INFO, ies, ies_len);
+       if (erp_inf) {
+               if (erp_inf[ERP_INFO_BYTE_OFFSET]
+                               & WLAN_ERP_BARKER_PREAMBLE)
+                       priv->erp_info |= WLAN_ERP_BARKER_PREAMBLE;
+               else
+                       priv->erp_info &= ~WLAN_ERP_BARKER_PREAMBLE;
+
+               if (erp_inf[ERP_INFO_BYTE_OFFSET]
+                               & WLAN_ERP_NON_ERP_PRESENT) {
+                       priv->erp_info |= WLAN_ERP_USE_PROTECTION;
+                       priv->erp_info |= WLAN_ERP_NON_ERP_PRESENT;
+               } else {
+                       priv->erp_info &= ~WLAN_ERP_USE_PROTECTION;
+                       priv->erp_info &= ~WLAN_ERP_NON_ERP_PRESENT;
+               }
+       }
+
+#ifdef HIDDEN_SSID
+       if (priv->hidden_ssid) {
+               u8 *ssid_ie;
+               u8 ssid_len;
+
+               ap_printk(XRADIO_DBG_NIY, "%s: hidden_ssid set\n", __func__);
+               ssid_ie = (u8 *)cfg80211_find_ie(WLAN_EID_SSID, ies, ies_len);
+               WARN_ON(!ssid_ie);
+               ssid_len = ssid_ie[1];
+               if (ssid_len) {
+                       ap_printk(XRADIO_DBG_MSG, "hidden_ssid with zero content ssid\n");
+                       ssid_ie[1] = 0;
+                       memmove(ssid_ie + 2, ssid_ie + 2 + ssid_len,
+                                       (ies + ies_len -
+                                        (ssid_ie + 2 + ssid_len)));
+                       frame.skb->len -= ssid_len;
+               } else {
+                       ap_printk(XRADIO_DBG_WARN, "hidden ssid with ssid len 0 not supported");
+                       dev_kfree_skb(frame.skb);
+                       return -1;
+               }
+       }
+#endif
+
+       ret = wsm_set_template_frame(hw_priv, &frame, priv->if_id);
+       if (!ret) {
+#ifdef PROBE_RESP_EXTRA_IE
+               ret = xradio_upload_proberesp(priv);
+#else
+               /* TODO: Distille probe resp; remove TIM
+                * and other beacon-specific IEs */
+               *(__le16 *)frame.skb->data = __cpu_to_le16(
+                                            IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_RESP);
+               frame.frame_type = WSM_FRAME_TYPE_PROBE_RESPONSE;
+               /* TODO: Ideally probe response template should separately
+                  configured by supplicant through openmac. This is a
+                  temporary work-around known to fail p2p group info
+                  attribute related tests
+                  */
+               if (0 /* priv->vif->p2p */)
+                       ret = wsm_set_probe_responder(priv, true);
+               else {
+                       ret = wsm_set_template_frame(hw_priv, &frame, priv->if_id);
+                       WARN_ON(wsm_set_probe_responder(priv, false));
+               }
+#endif
+       }
+       dev_kfree_skb(frame.skb);
+
+       return ret;
+}
+
+#ifdef PROBE_RESP_EXTRA_IE
+static int xradio_upload_proberesp(struct xradio_vif *priv)
+{
+       int ret = 0;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_PROBE_RESPONSE,
+       };
+#ifdef HIDDEN_SSID
+       u8 *ssid_ie;
+#endif
+
+       if (priv->vif->p2p || hw_priv->channel->band == NL80211_BAND_5GHZ)
+               frame.rate = WSM_TRANSMIT_RATE_6;
+
+       frame.skb = ieee80211_proberesp_get(priv->hw, priv->vif);
+       if (WARN_ON(!frame.skb))
+               return -ENOMEM;
+
+#ifdef HIDDEN_SSID
+       if (priv->hidden_ssid) {
+               int offset;
+               u8 ssid_len;
+               /* we are assuming beacon from upper layer will always contain
+                  zero filled ssid for hidden ap. The beacon shall never have
+                  ssid len = 0.
+                 */
+
+               offset  = offsetof(struct ieee80211_mgmt, u.probe_resp.variable);
+               ssid_ie = (u8 *)cfg80211_find_ie(WLAN_EID_SSID, frame.skb->data + offset,
+                                          frame.skb->len - offset);
+               ssid_len = ssid_ie[1];
+               if (ssid_len && (ssid_len == priv->ssid_length)) {
+                       memcpy(ssid_ie + 2, priv->ssid, ssid_len);
+               } else {
+                       ap_printk(XRADIO_DBG_ERROR, "%s: hidden ssid with mismatched ssid_len %d\n",
+                                __func__, ssid_len);
+                       dev_kfree_skb(frame.skb);
+                       return -1;
+               }
+       }
+#endif
+       ret = wsm_set_template_frame(hw_priv, &frame,  priv->if_id);
+       WARN_ON(wsm_set_probe_responder(priv, false));
+
+       dev_kfree_skb(frame.skb);
+
+       return ret;
+}
+#endif
+
+static int xradio_upload_pspoll(struct xradio_vif *priv)
+{
+       int ret = 0;
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_PS_POLL,
+               .rate = 0xFF,
+       };
+
+       frame.skb = ieee80211_pspoll_get(priv->hw, priv->vif);
+       if (WARN_ON(!frame.skb))
+               return -ENOMEM;
+       ret = wsm_set_template_frame(xrwl_vifpriv_to_hwpriv(priv), &frame, priv->if_id);
+       dev_kfree_skb(frame.skb);
+       return ret;
+}
+
+static int xradio_upload_null(struct xradio_vif *priv)
+{
+       int ret = 0;
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_NULL,
+               .rate = 0xFF,
+       };
+
+       frame.skb = ieee80211_nullfunc_get(priv->hw, priv->vif, false);
+       if (WARN_ON(!frame.skb))
+               return -ENOMEM;
+
+       ret = wsm_set_template_frame(xrwl_vifpriv_to_hwpriv(priv), &frame, priv->if_id);
+       dev_kfree_skb(frame.skb);
+       return ret;
+}
+
+static int xradio_upload_qosnull(struct xradio_vif *priv)
+{
+       struct ieee80211_qos_hdr* qos_null_template;
+       struct sk_buff* skb;
+       int ret = 0;
+       struct xradio_common *hw_priv =xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_QOS_NULL,
+               .rate = 0xFF,
+       };
+       if (!hw_priv) 
+               ap_printk(XRADIO_DBG_ERROR,"%s: Cannot find xradio_common pointer!\n",__FUNCTION__);
+       /*set qos template*/
+       skb = dev_alloc_skb(hw_priv->hw->extra_tx_headroom + sizeof(struct ieee80211_qos_hdr));
+       if (!skb) {
+               ap_printk(XRADIO_DBG_ERROR,"%s: failed to allocate buffer for qos  nullfunc template!\n",__FUNCTION__);
+               return -1;
+       }
+       skb_reserve(skb, hw_priv->hw->extra_tx_headroom);
+       qos_null_template = (struct ieee80211_qos_hdr *)skb_put(skb,sizeof(struct ieee80211_qos_hdr));
+       memset(qos_null_template, 0, sizeof(struct ieee80211_qos_hdr));
+       memcpy(qos_null_template->addr1, priv->vif->bss_conf.bssid, ETH_ALEN);
+       memcpy(qos_null_template->addr2, priv->vif->addr, ETH_ALEN);
+       memcpy(qos_null_template->addr3, priv->vif->bss_conf.bssid, ETH_ALEN);
+       qos_null_template->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
+                                            IEEE80211_STYPE_QOS_NULLFUNC |
+                                            IEEE80211_FCTL_TODS);
+       frame.skb = skb;
+       ret = wsm_set_template_frame(hw_priv, &frame, priv->if_id);
+       dev_kfree_skb(frame.skb);
+       return ret;
+}
+
+/* This API is nolonegr present in WSC */
+#if 0
+static int xradio_enable_beaconing(struct xradio_vif *priv,
+                                  bool enable)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_beacon_transmit transmit = {
+               .enableBeaconing = enable,
+       };
+
+       return wsm_beacon_transmit(hw_priv, &transmit, priv->if_id);
+}
+#endif
+
+static int xradio_start_ap(struct xradio_vif *priv)
+{
+       int ret;
+#ifndef HIDDEN_SSID
+       const u8 *ssidie;
+       struct sk_buff *skb;
+       int offset;
+#endif
+       struct ieee80211_bss_conf *conf = &priv->vif->bss_conf;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_start start = {
+               .mode = priv->vif->p2p ? WSM_START_MODE_P2P_GO : WSM_START_MODE_AP,
+               /* TODO:COMBO:Change once mac80211 support is available */
+               .band = (hw_priv->channel->band == NL80211_BAND_5GHZ) ?
+                                    WSM_PHY_BAND_5G : WSM_PHY_BAND_2_4G,
+               .channelNumber = hw_priv->channel->hw_value,
+               .beaconInterval = conf->beacon_int,
+               .DTIMPeriod = conf->dtim_period,
+               .preambleType = conf->use_short_preamble ?
+                               WSM_JOIN_PREAMBLE_SHORT :WSM_JOIN_PREAMBLE_LONG,
+               .probeDelay = 100,
+               .basicRateSet = xradio_rate_mask_to_wsm(hw_priv, conf->basic_rates),
+       };
+
+#ifdef TES_P2P_000B_EXTEND_INACTIVITY_CNT
+       ///w, TES_P2P_000B WorkAround:
+       ///w, when inactivity count of a peer device is zero,
+       ///w, which will reset while receiving a peer device frame,
+       ///w, firmware will disconnect with it.
+       ///w, due to some reason, such as scan/phy error, we miss these frame.
+       ///w, then we can't keep connection with peer device.
+       ///w, we set the min_inactivity value to large as WorkAround.
+       //min_inactivity be modified to 20, yangfh.
+       struct wsm_inactivity inactivity = {
+               .min_inactivity = 20,
+               .max_inactivity = 10,
+       };
+#else
+       struct wsm_inactivity inactivity = {
+               .min_inactivity = 9,
+               .max_inactivity = 1,
+       };
+#endif
+
+       ap_printk(XRADIO_DBG_TRC,"%s\n", __FUNCTION__);
+
+       if (priv->if_id)
+               start.mode |= WSM_FLAG_MAC_INSTANCE_1;
+       else
+               start.mode &= ~WSM_FLAG_MAC_INSTANCE_1;
+
+       hw_priv->connected_sta_cnt = 0;
+
+#ifndef HIDDEN_SSID
+       /* Get SSID */
+       skb = ieee80211_beacon_get(priv->hw, priv->vif);
+       if (WARN_ON(!skb)) {
+               ap_printk(XRADIO_DBG_ERROR,"%s, ieee80211_beacon_get failed\n", __func__);
+               return -ENOMEM;
+       }
+
+       offset = offsetof(struct ieee80211_mgmt, u.beacon.variable);
+       ssidie = cfg80211_find_ie(WLAN_EID_SSID, skb->data + offset, skb->len - offset);
+
+       memset(priv->ssid, 0, sizeof(priv->ssid));
+       if (ssidie) {
+               priv->ssid_length = ssidie[1];
+               if (WARN_ON(priv->ssid_length > sizeof(priv->ssid)))
+                       priv->ssid_length = sizeof(priv->ssid);
+               memcpy(priv->ssid, &ssidie[2], priv->ssid_length);
+       } else {
+               priv->ssid_length = 0;
+       }
+       dev_kfree_skb(skb);
+#endif
+
+       priv->beacon_int = conf->beacon_int;
+       priv->join_dtim_period = conf->dtim_period;
+       memset(&priv->last_tim[0], 0, sizeof(priv->last_tim)); //yangfh
+
+       start.ssidLength = priv->ssid_length;
+       memcpy(&start.ssid[0], priv->ssid, start.ssidLength);
+
+       memset(&priv->link_id_db, 0, sizeof(priv->link_id_db));
+
+       ap_printk(XRADIO_DBG_NIY, "[AP] ch: %d(%d), bcn: %d(%d),"
+                 "bss_rate: 0x%.8X, ssid: %.*s.\n",
+                 start.channelNumber,  start.band,
+                 start.beaconInterval, start.DTIMPeriod, 
+                 start.basicRateSet, start.ssidLength, start.ssid);
+       ret = WARN_ON(wsm_start(hw_priv, &start, priv->if_id));
+
+       if (!ret && priv->vif->p2p) {
+               ap_printk(XRADIO_DBG_NIY,"[AP] Setting p2p powersave configuration.\n");
+               WARN_ON(wsm_set_p2p_ps_modeinfo(hw_priv,
+                       &priv->p2p_ps_modeinfo, priv->if_id));
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+               //xradio_notify_noa(priv, XRADIO_NOA_NOTIFICATION_DELAY);
+#endif
+       }
+
+       /*Set Inactivity time*/
+       if(!(strstr(&start.ssid[0], "6.1.12"))) {
+               wsm_set_inactivity(hw_priv, &inactivity, priv->if_id);
+       }
+       if (!ret) {
+#ifndef AP_AGGREGATE_FW_FIX
+               WARN_ON(wsm_set_block_ack_policy(hw_priv,
+                        XRADIO_TX_BLOCK_ACK_DISABLED_FOR_ALL_TID,
+                        XRADIO_RX_BLOCK_ACK_DISABLED_FOR_ALL_TID, priv->if_id));
+#else
+               if ((priv->if_id ==1) && !hw_priv->is_go_thru_go_neg)
+                       WARN_ON(wsm_set_block_ack_policy(hw_priv,
+                                XRADIO_TX_BLOCK_ACK_ENABLED_FOR_ALL_TID, //modified for WFD by yangfh
+                                XRADIO_RX_BLOCK_ACK_ENABLED_FOR_ALL_TID, priv->if_id));
+               else
+                       WARN_ON(wsm_set_block_ack_policy(hw_priv,
+                                XRADIO_TX_BLOCK_ACK_ENABLED_FOR_ALL_TID,
+                                XRADIO_RX_BLOCK_ACK_ENABLED_FOR_ALL_TID, priv->if_id));
+#endif
+               priv->join_status = XRADIO_JOIN_STATUS_AP;
+               /* xradio_update_filtering(priv); */
+       }
+       WARN_ON(wsm_set_operational_mode(hw_priv, &defaultoperationalmode, priv->if_id));
+       hw_priv->vif0_throttle = XRWL_HOST_VIF0_11BG_THROTTLE;
+       hw_priv->vif1_throttle = XRWL_HOST_VIF1_11BG_THROTTLE;
+       ap_printk(XRADIO_DBG_WARN, "vif%d, AP/GO mode THROTTLE=%d\n", priv->if_id,
+                 priv->if_id==0?hw_priv->vif0_throttle:hw_priv->vif1_throttle);
+       return ret;
+}
+
+static int xradio_update_beaconing(struct xradio_vif *priv)
+{
+       struct ieee80211_bss_conf *conf = &priv->vif->bss_conf;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_reset reset = {
+               .link_id = 0,
+               .reset_statistics = true,
+       };
+       ap_printk(XRADIO_DBG_TRC,"%s\n", __FUNCTION__);
+
+       if (priv->mode == NL80211_IFTYPE_AP) {
+               /* TODO: check if changed channel, band */
+               if (priv->join_status != XRADIO_JOIN_STATUS_AP ||
+                   priv->beacon_int  != conf->beacon_int) {
+                       ap_printk(XRADIO_DBG_WARN, "ap restarting!\n");
+                       wsm_lock_tx(hw_priv);
+                       if (priv->join_status != XRADIO_JOIN_STATUS_PASSIVE)
+                               WARN_ON(wsm_reset(hw_priv, &reset, priv->if_id));
+                       priv->join_status = XRADIO_JOIN_STATUS_PASSIVE;
+                       WARN_ON(xradio_start_ap(priv));
+                       wsm_unlock_tx(hw_priv);
+               } else
+                       ap_printk(XRADIO_DBG_NIY, "ap started join_status: %d\n", priv->join_status);
+       }
+       return 0;
+}
+
+int xradio_find_link_id(struct xradio_vif *priv, const u8 *mac)
+{
+       int i, ret = 0;
+       spin_lock_bh(&priv->ps_state_lock);
+       for (i = 0; i < MAX_STA_IN_AP_MODE; ++i) {
+               if (!memcmp(mac, priv->link_id_db[i].mac, ETH_ALEN) &&
+                         priv->link_id_db[i].status) {
+                       priv->link_id_db[i].timestamp = jiffies;
+                       ret = i + 1;
+                       break;
+               }
+       }
+       spin_unlock_bh(&priv->ps_state_lock);
+       return ret;
+}
+
+int xradio_alloc_link_id(struct xradio_vif *priv, const u8 *mac)
+{
+       int i, ret = 0;
+       unsigned long max_inactivity = 0;
+       unsigned long now = jiffies;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+       spin_lock_bh(&priv->ps_state_lock);
+       for (i = 0; i < MAX_STA_IN_AP_MODE; ++i) {
+               if (!priv->link_id_db[i].status) {
+                       ret = i + 1;
+                       break;
+               } else if (priv->link_id_db[i].status != XRADIO_LINK_HARD &&
+                          !hw_priv->tx_queue_stats.link_map_cache[i + 1]) {
+                       unsigned long inactivity = now - priv->link_id_db[i].timestamp;
+                       if (inactivity < max_inactivity)
+                               continue;
+                       max_inactivity = inactivity;
+                       ret = i + 1;
+               }
+       }
+       if (ret) {
+               struct xradio_link_entry *entry = &priv->link_id_db[ret - 1];
+               ap_printk(XRADIO_DBG_NIY, "STA added, link_id: %d\n", ret);
+               entry->status = XRADIO_LINK_RESERVE;
+               memcpy(&entry->mac, mac, ETH_ALEN);
+               memset(&entry->buffered, 0, XRADIO_MAX_TID);
+               skb_queue_head_init(&entry->rx_queue);
+               wsm_lock_tx_async(hw_priv);
+               if (queue_work(hw_priv->workqueue, &priv->link_id_work) <= 0)
+                       wsm_unlock_tx(hw_priv);
+       } else {
+               ap_printk(XRADIO_DBG_WARN, "Early: no more link IDs available.\n");
+       }
+
+       spin_unlock_bh(&priv->ps_state_lock);
+       return ret;
+}
+
+void xradio_link_id_work(struct work_struct *work)
+{
+       struct xradio_vif *priv = container_of(work, struct xradio_vif, link_id_work);
+       struct xradio_common *hw_priv = priv->hw_priv;
+
+       wsm_flush_tx(hw_priv);
+       xradio_link_id_gc_work(&priv->link_id_gc_work.work);
+       wsm_unlock_tx(hw_priv);
+}
+
+void xradio_link_id_gc_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, link_id_gc_work.work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_map_link map_link = {
+               .link_id = 0,
+       };
+       unsigned long now = jiffies;
+       unsigned long next_gc = -1;
+       long ttl;
+       bool need_reset;
+       u32 mask;
+       int i;
+
+       if (priv->join_status != XRADIO_JOIN_STATUS_AP)
+               return;
+
+       wsm_lock_tx(hw_priv);
+       spin_lock_bh(&priv->ps_state_lock);
+       for (i = 0; i < MAX_STA_IN_AP_MODE; ++i) {
+               need_reset = false;
+               mask = BIT(i + 1);
+               if (priv->link_id_db[i].status == XRADIO_LINK_RESERVE ||
+                         (priv->link_id_db[i].status == XRADIO_LINK_HARD && 
+                          !(priv->link_id_map & mask))) {
+                       if (priv->link_id_map & mask) {
+                               priv->sta_asleep_mask &= ~mask;
+                               priv->pspoll_mask &= ~mask;
+                               need_reset = true;
+                       }
+                       priv->link_id_map |= mask;
+                       if (priv->link_id_db[i].status != XRADIO_LINK_HARD)
+                               priv->link_id_db[i].status = XRADIO_LINK_SOFT;
+                       memcpy(map_link.mac_addr, priv->link_id_db[i].mac, ETH_ALEN);
+                       spin_unlock_bh(&priv->ps_state_lock);
+                       if (need_reset) {
+                               WARN_ON(xrwl_unmap_link(priv, i + 1));
+                       }
+                       map_link.link_id = i + 1;
+                       WARN_ON(wsm_map_link(hw_priv, &map_link, priv->if_id));
+                       next_gc = min(next_gc, XRADIO_LINK_ID_GC_TIMEOUT);
+                       spin_lock_bh(&priv->ps_state_lock);
+               } else if (priv->link_id_db[i].status == XRADIO_LINK_SOFT) {
+                       ttl = priv->link_id_db[i].timestamp - now + XRADIO_LINK_ID_GC_TIMEOUT;
+                       if (ttl <= 0) {
+                               need_reset = true;
+                               priv->link_id_db[i].status = XRADIO_LINK_OFF;
+                               priv->link_id_map &= ~mask;
+                               priv->sta_asleep_mask &= ~mask;
+                               priv->pspoll_mask &= ~mask;
+                               memset(map_link.mac_addr, 0, ETH_ALEN);
+                               spin_unlock_bh(&priv->ps_state_lock);
+                               WARN_ON(xrwl_unmap_link(priv, i + 1));
+                               spin_lock_bh(&priv->ps_state_lock);
+                       } else {
+                               next_gc = min_t(unsigned long, next_gc, ttl);
+                       }
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+               } else if (priv->link_id_db[i].status == XRADIO_LINK_RESET ||
+                          priv->link_id_db[i].status == XRADIO_LINK_RESET_REMAP) {
+                       int status = priv->link_id_db[i].status;
+                       priv->link_id_db[i].status = XRADIO_LINK_OFF;
+                       priv->link_id_db[i].timestamp = now;
+                       spin_unlock_bh(&priv->ps_state_lock);
+                       WARN_ON(xrwl_unmap_link(priv, i + 1));
+                       if (status == XRADIO_LINK_RESET_REMAP) {
+                               memcpy(map_link.mac_addr, priv->link_id_db[i].mac, ETH_ALEN);
+                               map_link.link_id = i + 1;
+                               WARN_ON(wsm_map_link(hw_priv, &map_link, priv->if_id));
+                               next_gc = min(next_gc, XRADIO_LINK_ID_GC_TIMEOUT);
+                               priv->link_id_db[i].status = priv->link_id_db[i].prev_status;
+                       }
+                       spin_lock_bh(&priv->ps_state_lock);
+#endif
+               }
+               if (need_reset) {
+                       skb_queue_purge(&priv->link_id_db[i].rx_queue);
+                       ap_printk(XRADIO_DBG_NIY, "STA removed, link_id: %d\n", i + 1);
+               }
+       }
+       spin_unlock_bh(&priv->ps_state_lock);
+       if (next_gc != -1)
+               queue_delayed_work(hw_priv->workqueue, &priv->link_id_gc_work, next_gc);
+       wsm_unlock_tx(hw_priv);
+}
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+#if 0
+void xradio_notify_noa(struct xradio_vif *priv, int delay)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct cfg80211_p2p_ps p2p_ps = {0};
+       struct wsm_p2p_ps_modeinfo *modeinfo;
+       modeinfo = &priv->p2p_ps_modeinfo;
+
+       if (priv->join_status != XRADIO_JOIN_STATUS_AP)
+               return;
+
+       if (delay)
+               msleep(delay);
+
+       if (!WARN_ON(wsm_get_p2p_ps_modeinfo(hw_priv, modeinfo))) {
+#if defined(CONFIG_XRADIO_DEBUG)
+               print_hex_dump_bytes("[AP] p2p_get_ps_modeinfo: ", DUMP_PREFIX_NONE,
+                                   (u8 *)modeinfo, sizeof(*modeinfo));
+#endif /* CONFIG_XRADIO_DEBUG */
+               p2p_ps.opp_ps = !!(modeinfo->oppPsCTWindow & BIT(7));
+               p2p_ps.ctwindow = modeinfo->oppPsCTWindow & (~BIT(7));
+               p2p_ps.count = modeinfo->count;
+               p2p_ps.start = __le32_to_cpu(modeinfo->startTime);
+               p2p_ps.duration = __le32_to_cpu(modeinfo->duration);
+               p2p_ps.interval = __le32_to_cpu(modeinfo->interval);
+               p2p_ps.index = modeinfo->reserved;
+
+               ieee80211_p2p_noa_notify(priv->vif, &p2p_ps, GFP_KERNEL);
+       }
+}
+#endif
+#endif
+int xrwl_unmap_link(struct xradio_vif *priv, int link_id)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       int ret = 0;
+
+       if (is_hardware_xradio(hw_priv)) {
+               struct wsm_map_link maplink = {
+                       .link_id = link_id,
+                       .unmap = true,
+               };
+               if (link_id)
+                       memcpy(&maplink.mac_addr[0], priv->link_id_db[link_id - 1].mac, ETH_ALEN);
+               return wsm_map_link(hw_priv, &maplink, priv->if_id);
+       } else {
+               struct wsm_reset reset = {
+                       .link_id = link_id,
+                       .reset_statistics = true,
+               };
+               ret = wsm_reset(hw_priv, &reset, priv->if_id);
+               WARN_ON(wsm_set_operational_mode(hw_priv, &defaultoperationalmode, priv->if_id));
+               return ret;
+       }
+}
+#ifdef AP_HT_CAP_UPDATE
+void xradio_ht_oper_update_work(struct work_struct *work)
+{
+       struct sk_buff *skb;
+       struct ieee80211_mgmt *mgmt;
+       u8 *ht_oper, *ies;
+       u32 ies_len;
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, ht_oper_update_work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_update_ie update_ie = {
+               .what = WSM_UPDATE_IE_BEACON,
+               .count = 1,
+       };
+
+       skb = ieee80211_beacon_get(priv->hw, priv->vif);
+       if (WARN_ON(!skb))
+               return;
+
+       mgmt = (void *)skb->data;
+       ies = mgmt->u.beacon.variable;
+       ies_len = skb->len - (u32)(ies - (u8 *)mgmt);
+       ht_oper= (u8 *)cfg80211_find_ie( WLAN_EID_HT_OPERATION, ies, ies_len);
+       if(ht_oper && priv->ht_oper == HT_INFO_MASK) {
+               ht_oper[HT_INFO_OFFSET] |= 0x11;
+               update_ie.ies = ht_oper;
+               update_ie.length = HT_INFO_IE_LEN;
+               WARN_ON(wsm_update_ie(hw_priv, &update_ie, priv->if_id));
+       }
+       dev_kfree_skb(skb);
+}
+#endif
diff --git a/drivers/net/wireless/xradio/ap.h b/drivers/net/wireless/xradio/ap.h
new file mode 100644 (file)
index 0000000..ca05bff
--- /dev/null
@@ -0,0 +1,63 @@
+/*
+ * STA and AP APIs for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#ifndef AP_H_INCLUDED
+#define AP_H_INCLUDED
+
+#define XRADIO_NOA_NOTIFICATION_DELAY 10
+
+#ifdef AP_HT_CAP_UPDATE
+#define HT_INFO_OFFSET 4
+#define HT_INFO_MASK 0x0011
+#define HT_INFO_IE_LEN 22
+#endif
+
+int xradio_set_tim(struct ieee80211_hw *dev, struct ieee80211_sta *sta,
+                  bool set);
+int xradio_sta_add(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
+                  struct ieee80211_sta *sta);
+int xradio_sta_remove(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
+                     struct ieee80211_sta *sta);
+void xradio_sta_notify(struct ieee80211_hw *dev, struct ieee80211_vif *vif,
+                      enum sta_notify_cmd notify_cmd,
+                      struct ieee80211_sta *sta);
+void xradio_bss_info_changed(struct ieee80211_hw *dev,
+                            struct ieee80211_vif *vif,
+                            struct ieee80211_bss_conf *info,
+                            u32 changed);
+int xradio_ampdu_action(struct ieee80211_hw *hw,
+                       struct ieee80211_vif *vif,
+                       struct ieee80211_ampdu_params *params);
+/*                     enum ieee80211_ampdu_mlme_action action,
+                       struct ieee80211_sta *sta, u16 tid, u16 *ssn,
+                       u8 buf_size);*/
+
+void xradio_suspend_resume(struct xradio_vif *priv,
+                         struct wsm_suspend_resume *arg);
+void xradio_set_tim_work(struct work_struct *work);
+void xradio_set_cts_work(struct work_struct *work);
+void xradio_multicast_start_work(struct work_struct *work);
+void xradio_multicast_stop_work(struct work_struct *work);
+void xradio_mcast_timeout(unsigned long arg);
+int xradio_find_link_id(struct xradio_vif *priv, const u8 *mac);
+int xradio_alloc_link_id(struct xradio_vif *priv, const u8 *mac);
+void xradio_link_id_work(struct work_struct *work);
+void xradio_link_id_gc_work(struct work_struct *work);
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+/*in linux3.4 mac,it does't have the noa pass*/
+//void xradio_notify_noa(struct xradio_vif *priv, int delay);
+#endif
+int xrwl_unmap_link(struct xradio_vif *priv, int link_id);
+#ifdef AP_HT_CAP_UPDATE
+void xradio_ht_oper_update_work(struct work_struct *work);
+#endif
+
+#endif
diff --git a/drivers/net/wireless/xradio/bh.c b/drivers/net/wireless/xradio/bh.c
new file mode 100644 (file)
index 0000000..5b53778
--- /dev/null
@@ -0,0 +1,836 @@
+/*
+ * Data Transmission thread implementation for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <net/mac80211.h>
+#include <linux/kthread.h>
+
+#include "xradio.h"
+#include "bh.h"
+#include "hwio.h"
+#include "wsm.h"
+#include "sdio.h"
+
+/* TODO: Verify these numbers with WSM specification. */
+#define DOWNLOAD_BLOCK_SIZE_WR (0x1000 - 4)
+/* an SPI message cannot be bigger than (2"12-1)*2 bytes
+ * "*2" to cvt to bytes */
+#define MAX_SZ_RD_WR_BUFFERS   (DOWNLOAD_BLOCK_SIZE_WR*2)
+#define PIGGYBACK_CTRL_REG     (2)
+#define EFFECTIVE_BUF_SIZE     (MAX_SZ_RD_WR_BUFFERS - PIGGYBACK_CTRL_REG)
+
+/* Suspend state privates */
+enum xradio_bh_pm_state {
+       XRADIO_BH_RESUMED = 0,
+       XRADIO_BH_SUSPEND,
+       XRADIO_BH_SUSPENDED,
+       XRADIO_BH_RESUME,
+};
+typedef int (*xradio_wsm_handler)(struct xradio_common *hw_priv, u8 *data, size_t size);
+
+#ifdef MCAST_FWDING
+int wsm_release_buffer_to_fw(struct xradio_vif *priv, int count);
+#endif
+static int xradio_bh(void *arg);
+
+int xradio_register_bh(struct xradio_common *hw_priv)
+{
+       int ret = 0;
+
+       atomic_set(&hw_priv->bh_tx, 0);
+       atomic_set(&hw_priv->bh_term, 0);
+       atomic_set(&hw_priv->bh_suspend, XRADIO_BH_RESUMED);
+       hw_priv->buf_id_tx = 0;
+       hw_priv->buf_id_rx = 0;
+       init_waitqueue_head(&hw_priv->bh_wq);
+       init_waitqueue_head(&hw_priv->bh_evt_wq);
+
+       hw_priv->bh_thread = kthread_run(&xradio_bh, hw_priv, XRADIO_BH_THREAD);
+       if (IS_ERR(hw_priv->bh_thread)) {
+               ret = PTR_ERR(hw_priv->bh_thread);
+               hw_priv->bh_thread = NULL;
+       }
+
+       return ret;
+}
+
+void xradio_unregister_bh(struct xradio_common *hw_priv)
+{
+       struct task_struct *thread = hw_priv->bh_thread;
+
+       if (WARN_ON(!thread))
+               return;
+
+       hw_priv->bh_thread = NULL;
+       kthread_stop(thread);
+#ifdef HAS_PUT_TASK_STRUCT
+       put_task_struct(thread);
+#endif
+       dev_dbg(hw_priv->pdev, "Unregister success.\n");
+}
+
+void xradio_irq_handler(struct xradio_common *hw_priv)
+{
+       xradio_bh_wakeup(hw_priv);
+}
+
+void xradio_bh_wakeup(struct xradio_common *hw_priv)
+{
+       atomic_set(&hw_priv->bh_tx, 1);
+       wake_up(&hw_priv->bh_wq);
+}
+
+int xradio_bh_suspend(struct xradio_common *hw_priv)
+{
+#ifdef MCAST_FWDING
+       int i =0;
+       struct xradio_vif *priv = NULL;
+#endif
+
+       if (hw_priv->bh_error) {
+               return -EINVAL;
+       }
+
+#ifdef MCAST_FWDING
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if (!priv)
+                       continue;       
+               if ( (priv->multicast_filter.enable)
+                       && (priv->join_status == XRADIO_JOIN_STATUS_AP) ) {
+                       wsm_release_buffer_to_fw(priv,
+                               (hw_priv->wsm_caps.numInpChBufs - 1));
+                       break;
+               }
+       }
+#endif
+
+       atomic_set(&hw_priv->bh_suspend, XRADIO_BH_SUSPEND);
+       wake_up(&hw_priv->bh_wq);
+       return wait_event_timeout(hw_priv->bh_evt_wq, (hw_priv->bh_error || 
+                                 XRADIO_BH_SUSPENDED == atomic_read(&hw_priv->bh_suspend)),
+                                 1 * HZ)?  0 : -ETIMEDOUT;
+}
+
+int xradio_bh_resume(struct xradio_common *hw_priv)
+{
+#ifdef MCAST_FWDING
+       int ret;
+       int i =0; 
+       struct xradio_vif *priv =NULL;
+#endif
+
+
+       if (hw_priv->bh_error) {
+               return -EINVAL;
+       }
+
+       atomic_set(&hw_priv->bh_suspend, XRADIO_BH_RESUME);
+       wake_up(&hw_priv->bh_wq);
+
+#ifdef MCAST_FWDING
+       ret = wait_event_timeout(hw_priv->bh_evt_wq, (hw_priv->bh_error ||
+                                XRADIO_BH_RESUMED == atomic_read(&hw_priv->bh_suspend))
+                                ,1 * HZ)? 0 : -ETIMEDOUT;
+
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if (!priv)
+                       continue;
+               if ((priv->join_status == XRADIO_JOIN_STATUS_AP) && 
+                         (priv->multicast_filter.enable)) {
+                       u8 count = 0;
+                       WARN_ON(wsm_request_buffer_request(priv, &count));
+                       dev_dbg(hw_priv->pdev, "Reclaim Buff %d \n",count);
+                       break;
+               }
+       }
+
+       return ret;
+#else
+       return wait_event_timeout(hw_priv->bh_evt_wq,hw_priv->bh_error ||
+               (XRADIO_BH_RESUMED == atomic_read(&hw_priv->bh_suspend)),
+               1 * HZ) ? 0 : -ETIMEDOUT;
+#endif
+
+}
+
+static inline void wsm_alloc_tx_buffer(struct xradio_common *hw_priv)
+{
+       ++hw_priv->hw_bufs_used;
+}
+
+int wsm_release_tx_buffer(struct xradio_common *hw_priv, int count)
+{
+       int ret = 0;
+       int hw_bufs_used = hw_priv->hw_bufs_used;
+
+       hw_priv->hw_bufs_used -= count;
+       if (WARN_ON(hw_priv->hw_bufs_used < 0)) {
+               /* Tx data patch stops when all but one hw buffers are used.
+                  So, re-start tx path in case we find hw_bufs_used equals
+                  numInputChBufs - 1.
+               */
+               dev_err(hw_priv->pdev, "hw_bufs_used=%d, count=%d.\n",
+                               hw_priv->hw_bufs_used, count);
+               ret = -1;
+       } else if (hw_bufs_used >= (hw_priv->wsm_caps.numInpChBufs - 1))
+               ret = 1;
+       if (!hw_priv->hw_bufs_used)
+               wake_up(&hw_priv->bh_evt_wq);
+       return ret;
+}
+
+int wsm_release_vif_tx_buffer(struct xradio_common *hw_priv, int if_id, int count)
+{
+       int ret = 0;
+
+       hw_priv->hw_bufs_used_vif[if_id] -= count;
+       if (!hw_priv->hw_bufs_used_vif[if_id])
+               wake_up(&hw_priv->bh_evt_wq);
+
+       if (WARN_ON(hw_priv->hw_bufs_used_vif[if_id] < 0))
+               ret = -1;
+       return ret;
+}
+#ifdef MCAST_FWDING
+int wsm_release_buffer_to_fw(struct xradio_vif *priv, int count)
+{
+       int i;
+       u8 flags;
+       struct wsm_buf *buf;
+       size_t buf_len;
+       struct wsm_hdr *wsm;
+       struct xradio_common *hw_priv = priv->hw_priv;
+
+       if (priv->join_status != XRADIO_JOIN_STATUS_AP) {
+               return 0;
+       }
+       dev_dbg(hw_priv->pdev, "Rel buffer to FW %d, %d\n", count, hw_priv->hw_bufs_used);
+
+       for (i = 0; i < count; i++) {
+               if ((hw_priv->hw_bufs_used + 1) < hw_priv->wsm_caps.numInpChBufs) {
+                       flags = i ? 0: 0x1;
+
+                       wsm_alloc_tx_buffer(hw_priv);
+                       buf = &hw_priv->wsm_release_buf[i];
+                       buf_len = buf->data - buf->begin;
+
+                       /* Add sequence number */
+                       wsm = (struct wsm_hdr *)buf->begin;
+                       BUG_ON(buf_len < sizeof(*wsm));
+
+                       wsm->id &= __cpu_to_le32(~WSM_TX_SEQ(WSM_TX_SEQ_MAX));
+                       wsm->id |= cpu_to_le32(WSM_TX_SEQ(hw_priv->wsm_tx_seq));
+
+                       dev_dbg(hw_priv->pdev, "REL %d\n", hw_priv->wsm_tx_seq);
+                       if (WARN_ON(xradio_data_write(hw_priv, buf->begin, buf_len))) {
+                               break;
+                       }
+                       hw_priv->buf_released = 1;
+                       hw_priv->wsm_tx_seq = (hw_priv->wsm_tx_seq + 1) & WSM_TX_SEQ_MAX;
+               } else
+                       break;
+       }
+
+       if (i == count) {
+               return 0;
+       }
+
+       /* Should not be here */
+       dev_dbg(hw_priv->pdev, "Error, Less HW buf %d,%d.\n",
+                 hw_priv->hw_bufs_used, hw_priv->wsm_caps.numInpChBufs);
+       WARN_ON(1);
+       return -1;
+}
+#endif
+
+/* reserve a packet for the case dev_alloc_skb failed in bh.*/
+int xradio_init_resv_skb(struct xradio_common *hw_priv)
+{
+       int len = (SDIO_BLOCK_SIZE<<2) + WSM_TX_EXTRA_HEADROOM + \
+                  8 + 12;      /* TKIP IV + ICV and MIC */
+
+       hw_priv->skb_reserved = dev_alloc_skb(len);
+       if (hw_priv->skb_reserved) {
+               hw_priv->skb_resv_len = len;
+       } else {
+               dev_warn(hw_priv->pdev, "xr_alloc_skb failed(%d)\n", len);
+       }
+       return 0;
+}
+
+void xradio_deinit_resv_skb(struct xradio_common *hw_priv)
+{
+       if (hw_priv->skb_reserved) {
+               dev_kfree_skb(hw_priv->skb_reserved);
+               hw_priv->skb_reserved = NULL;
+               hw_priv->skb_resv_len = 0;
+       }
+}
+
+int xradio_realloc_resv_skb(struct xradio_common *hw_priv,
+                                                       struct sk_buff *skb)
+{
+       if (!hw_priv->skb_reserved && hw_priv->skb_resv_len) {
+               hw_priv->skb_reserved = dev_alloc_skb(hw_priv->skb_resv_len);
+               if (!hw_priv->skb_reserved) {
+                       hw_priv->skb_reserved = skb;
+                       dev_warn(hw_priv->pdev, "xr_alloc_skb failed(%d)\n",
+                                       hw_priv->skb_resv_len);
+                       return -1;
+               }
+       }
+       return 0; /* realloc sbk success, deliver to upper.*/
+}
+
+static inline struct sk_buff *xradio_get_resv_skb(struct xradio_common *hw_priv,
+                                                                                                 size_t len)
+{      struct sk_buff *skb = NULL;
+       if (hw_priv->skb_reserved && len <= hw_priv->skb_resv_len) {
+               skb = hw_priv->skb_reserved;
+               hw_priv->skb_reserved = NULL;
+       }
+       return skb;
+}
+
+static inline int xradio_put_resv_skb(struct xradio_common *hw_priv,
+                                                                         struct sk_buff *skb)
+{
+       if (!hw_priv->skb_reserved && hw_priv->skb_resv_len) {
+               hw_priv->skb_reserved = skb;
+               return 0;
+       }
+       return 1; /* sbk not put to reserve*/
+}
+
+static struct sk_buff *xradio_get_skb(struct xradio_common *hw_priv, size_t len)
+{
+       struct sk_buff *skb = NULL;
+       size_t alloc_len = (len > SDIO_BLOCK_SIZE) ? len : SDIO_BLOCK_SIZE;
+
+       /* TKIP IV + TKIP ICV and MIC - Piggyback.*/
+       alloc_len += WSM_TX_EXTRA_HEADROOM + 8 + 12- 2;
+       if (len > SDIO_BLOCK_SIZE || !hw_priv->skb_cache) {
+               skb = dev_alloc_skb(alloc_len);
+               /* In AP mode RXed SKB can be looped back as a broadcast.
+                * Here we reserve enough space for headers. */
+               if (skb) {
+                       skb_reserve(skb, WSM_TX_EXTRA_HEADROOM + 8 /* TKIP IV */
+                                           - WSM_RX_EXTRA_HEADROOM);
+               } else {
+                       skb = xradio_get_resv_skb(hw_priv, alloc_len);
+                       if (skb) {
+                               dev_dbg(hw_priv->pdev, "get skb_reserved(%d)!\n", alloc_len);
+                               skb_reserve(skb, WSM_TX_EXTRA_HEADROOM + 8 /* TKIP IV */
+                                                   - WSM_RX_EXTRA_HEADROOM);
+                       } else {
+                               dev_dbg(hw_priv->pdev, "xr_alloc_skb failed(%d)!\n", alloc_len);
+                       }
+               }
+       } else {
+               skb = hw_priv->skb_cache;
+               hw_priv->skb_cache = NULL;
+       }
+       return skb;
+}
+
+static void xradio_put_skb(struct xradio_common *hw_priv, struct sk_buff *skb)
+{
+       if (hw_priv->skb_cache)
+               dev_kfree_skb(skb);
+       else
+               hw_priv->skb_cache = skb;
+}
+
+static int xradio_bh_read_ctrl_reg(struct xradio_common *hw_priv,
+                                         u16 *ctrl_reg)
+{
+       int ret;
+       ret = xradio_reg_read_16(hw_priv, HIF_CONTROL_REG_ID, ctrl_reg);
+       if (ret) {
+               ret = xradio_reg_read_16(hw_priv, HIF_CONTROL_REG_ID, ctrl_reg);
+               if (ret) {
+                       hw_priv->bh_error = 1;
+                       dev_err(hw_priv->pdev, "Failed to read control register.\n");
+               }
+       }
+
+       return ret;
+}
+
+static int xradio_device_wakeup(struct xradio_common *hw_priv)
+{
+       u16 ctrl_reg;
+       int ret, i=0;
+
+       /* To force the device to be always-on, the host sets WLAN_UP to 1 */
+       ret = xradio_reg_write_16(hw_priv, HIF_CONTROL_REG_ID, HIF_CTRL_WUP_BIT);
+       if (WARN_ON(ret))
+               return ret;
+
+       ret = xradio_bh_read_ctrl_reg(hw_priv, &ctrl_reg);
+       if (WARN_ON(ret))
+               return ret;
+
+       /* If the device returns WLAN_RDY as 1, the device is active and will
+        * remain active. */
+       while (!(ctrl_reg & HIF_CTRL_RDY_BIT) && i < 500) {
+               ret = xradio_bh_read_ctrl_reg(hw_priv, &ctrl_reg);
+               msleep(1);
+               i++;
+       }
+       if (unlikely(i >= 500)) {
+               dev_err(hw_priv->pdev, "Device cannot wakeup.\n");
+               return -1;
+       } else if (unlikely(i >= 50))
+               dev_warn(hw_priv->pdev, "Device wakeup time=%dms.\n", i);
+       dev_dbg(hw_priv->pdev, "Device awake, t=%dms.\n", i);
+       return 1;
+}
+
+/* Must be called from BH thraed. */
+void xradio_enable_powersave(struct xradio_vif *priv,
+                            bool enable)
+{
+       priv->powersave_enabled = enable;
+}
+
+static void xradio_bh_rx_dump(struct device *dev, u8 *data, size_t len){
+#ifdef DEBUG
+       static const char *msgnames[0xffff] = {
+                       // 0x4?? is a sync response to a command
+                       [0x0404] = "tx confirm",
+                       [0x0406] = "mib confirm",
+                       [0x0407] = "scan started",
+                       [0x0409] = "configuration confirm",
+                       [0x040a] = "reset confirm",
+                       [0x040b] = "join confirm",
+                       [0x040c] = "key added",
+                       [0x040d] = "key removed",
+                       [0x0410] = "pm confirm",
+                       [0x0411] = "set bss params",
+                       [0x0412] = "tx queue params",
+                       [0x0413] = "edca confirm",
+                       [0x0417] = "start confirm",
+                       [0x041b] = "update ie confirm",
+                       [0x041c] = "map link confirm",
+                       // 0x8?? seem to be async responses or events
+                       [0x0801] = "firmware startup complete",
+                       [0x0804] = "rx",
+                       [0x0805] = "event",
+                       [0x0806] = "scan complete",
+                       [0x0810] = "set pm indication"
+       };
+
+       u16 msgid, ifid;
+       u16 *p = (u16 *)data;
+       msgid = (*(p + 1)) & 0xC3F;
+       ifid  = (*(p + 1)) >> 6;
+       ifid &= 0xF;
+       const char *msgname = msgnames[msgid];
+       if(msgid == 0x804 && ifid == 2){
+               msgname = "scan result";
+       }
+
+       dev_dbg(dev, "vif %d: sdio rx, msgid %s(0x%.4X) len %d\n",
+                       ifid, msgname, msgid, *p);
+//     print_hex_dump_bytes("<-- ", DUMP_PREFIX_NONE,
+//                          data, min(len, (size_t) 64));
+#endif
+}
+
+#define READLEN(ctrl) ((ctrl & HIF_CTRL_NEXT_LEN_MASK) << 1) //read_len=ctrl_reg*2.
+
+static int xradio_bh_rx_availlen(struct xradio_common *hw_priv){
+       u16 ctrl_reg = 0;
+       if (xradio_bh_read_ctrl_reg(hw_priv, &ctrl_reg)) {
+               return -EIO;
+       }
+       return READLEN(ctrl_reg);
+}
+
+static int xradio_bh_rx(struct xradio_common *hw_priv, u16* nextlen) {
+       size_t read_len = 0;
+       struct sk_buff *skb_rx = NULL;
+       struct wsm_hdr *wsm;
+       size_t wsm_len;
+       int wsm_id;
+       u8 wsm_seq;
+       size_t alloc_len;
+       u8 *data;
+       int ret;
+
+       read_len = *nextlen > 0 ? *nextlen : xradio_bh_rx_availlen(hw_priv);
+       if(read_len <= 0)
+               return read_len;
+
+       if (read_len < sizeof(struct wsm_hdr) || (read_len > EFFECTIVE_BUF_SIZE)) {
+               dev_err(hw_priv->pdev, "Invalid read len: %d", read_len);
+               return -1;
+       }
+
+       /* Add SIZE of PIGGYBACK reg (CONTROL Reg)
+        * to the NEXT Message length + 2 Bytes for SKB */
+       read_len = read_len + 2;
+
+       alloc_len = sdio_align_len(hw_priv, read_len);
+       /* Check if not exceeding XRADIO capabilities */
+       if (WARN_ON_ONCE(alloc_len > EFFECTIVE_BUF_SIZE)) {
+               dev_err(hw_priv->pdev, "Read aligned len: %d\n", alloc_len);
+       }
+
+       /* Get skb buffer. */
+       skb_rx = xradio_get_skb(hw_priv, alloc_len);
+       if (!skb_rx) {
+               dev_err(hw_priv->pdev, "xradio_get_skb failed.\n");
+               return -ENOMEM;
+       }
+       skb_trim(skb_rx, 0);
+       skb_put(skb_rx, read_len);
+       data = skb_rx->data;
+       if (!data) {
+               dev_err(hw_priv->pdev, "skb data is NULL.\n");
+               ret = -ENOMEM;
+               goto out;
+       }
+
+       /* Read data from device. */
+       if (xradio_data_read(hw_priv, data, alloc_len)) {
+               ret = -EIO;
+               goto out;
+       }
+
+       /* the ctrl register is appened to the end of the wsm frame
+        * so we can use this to avoid reading the control register
+        * again for the next read .. but if this is invalid we'll
+        * do an invalid read and the firmware will crash so this
+        * probably needs some sort of validation */
+       *nextlen = READLEN(__le16_to_cpu(((__le16 *) data)[(alloc_len >> 1) - 1]));
+
+       /* check wsm length. */
+       wsm = (struct wsm_hdr *) data;
+       wsm_len = __le32_to_cpu(wsm->len);
+
+       if (WARN_ON(wsm_len > read_len)) {
+               dev_err(hw_priv->pdev, "wsm is bigger than data read, read %d but frame is %d\n",
+                               read_len, wsm_len);
+               ret = -1;
+               goto out;
+       }
+
+       /* dump rx data. */
+       xradio_bh_rx_dump(hw_priv->pdev, data, wsm_len);
+
+       /* extract wsm id and seq. */
+       wsm_id = __le32_to_cpu(wsm->id) & 0xFFF;
+       wsm_seq = (__le32_to_cpu(wsm->id) >> 13) & 7;
+       skb_trim(skb_rx, wsm_len);
+
+       /* process exceptions. */
+       if (wsm_id == 0) {
+               printk("wtf?\n");
+               ret = 0;
+               goto out;
+       } else if (unlikely(wsm_id == 0x0800)) {
+               dev_err(hw_priv->pdev, "firmware exception!\n");
+               wsm_handle_exception(hw_priv, &data[sizeof(*wsm)],
+                               wsm_len - sizeof(*wsm));
+               ret = -1;
+               goto out;
+       }
+
+       hw_priv->wsm_rx_seq = (wsm_seq + 1) & 7;
+
+       /* Process tx frames confirm. */
+       if (wsm_id & 0x0400) {
+               if (wsm_release_tx_buffer(hw_priv, 1) < 0) {
+                       dev_err(hw_priv->pdev, "tx buffer < 0.\n");
+                       ret  = -1;
+                       goto out;
+               }
+       }
+
+       /* WSM processing frames. */
+       if (wsm_handle_rx(hw_priv, wsm_id, wsm, &skb_rx)) {
+               dev_err(hw_priv->pdev, "wsm_handle_rx failed.\n");
+               ret = -1;
+               goto out;
+       }
+
+       ret = 1;
+
+out:
+       /* Reclaim the SKB buffer */
+       if (skb_rx) {
+               if (xradio_put_resv_skb(hw_priv, skb_rx))
+                       xradio_put_skb(hw_priv, skb_rx);
+       }
+
+       return ret;
+}
+
+static void xradio_bh_tx_dump(struct device *dev, u8 *data, size_t len){
+#ifdef DEBUG
+       static const char *msgnames[0xffff] = {
+                       [0x0004] = "tx",
+                       [0x0006] = "MIB",
+                       [0x0007] = "start scan",
+                       [0x0009] = "configure",
+                       [0x000A] = "reset",
+                       [0x000B] = "join",
+                       [0x000C] = "add key",
+                       [0x000D] = "remove key",
+                       [0x0010] = "set pm",
+                       [0x0011] = "set bss params",
+                       [0x0012] = "set tx queue params",
+                       [0x0013] = "set edca",
+                       [0x0017] = "start",
+                       [0x001b] = "update ie",
+                       [0x001c] = "map link",
+       };
+       static const char *mibnames[0xffff] = {
+                       [0x0003] = "DOT11_SLOT_TIME",
+                       [0x1002] = "TEMPLATE_FRAME",
+                       [0x1003] = "RX_FILTER",
+                       [0x1004] = "BEACON_FILTER_TABLE",
+                       [0x1005] = "BEACON_FILTER_ENABLE",
+                       [0x1006] = "OPERATIONAL POWER MODE",
+                       [0x1007] = "BEACON_WAKEUP_PERIOD",
+                       [0x1009] = "RCPI_RSSI_THRESHOLD",
+                       [0x1010] = "SET_ASSOCIATION_MODE",
+                       [0x100e] = "BLOCK_ACK_POLICY",
+                       [0x100f] = "OVERRIDE_INTERNAL_TX_RATE",
+                       [0x1013] = "SET_UAPSD_INFORMATION",
+                       [0x1016] = "SET_TX_RATE_RETRY_POLICY",
+                       [0x1020] = "PROTECTED_MGMT_POLICY",
+                       [0x1021] = "SET_HT_PROTECTION",
+                       [0x1024] = "USE_MULTI_TX_CONF",
+                       [0x1025] = "KEEP_ALIVE_PERIOD",
+                       [0x1026] = "DISABLE_BSSID_FILTER",
+                       [0x1035] = "SET_INACTIVITY",
+       };
+
+       u16 msgid, ifid, mib;
+       u16 *p = (u16 *)data;
+       msgid = (*(p + 1)) & 0x3F;
+       ifid  = (*(p + 1)) >> 6;
+       ifid &= 0xF;
+       mib = *(p + 2);
+
+       WARN_ON(msgnames[msgid] == NULL);
+
+       if (msgid == 0x0006) {
+               dev_dbg(dev, "vif %d: sdio tx, msgid %s(0x%.4X) len %d MIB %s(0x%.4X)\n",
+                               ifid, msgnames[msgid], msgid,*p, mibnames[mib], mib);
+       } else {
+               dev_dbg(dev, "vif %d: sdio tx, msgid %s(0x%.4X) len %d\n", ifid, msgnames[msgid], msgid, *p);
+       }
+
+//     print_hex_dump_bytes("--> ", DUMP_PREFIX_NONE, data,
+//                          min(len, (size_t) 64));
+#endif
+}
+
+static int xradio_bh_tx(struct xradio_common *hw_priv){
+       int txavailable;
+       int txburst;
+       int vif_selected;
+       struct wsm_hdr *wsm;
+       size_t tx_len;
+       int ret;
+       u8 *data;
+
+       BUG_ON(hw_priv->hw_bufs_used > hw_priv->wsm_caps.numInpChBufs);
+       txavailable = hw_priv->wsm_caps.numInpChBufs - hw_priv->hw_bufs_used;
+       if (txavailable) {
+               /* Wake up the devices */
+               if (hw_priv->device_can_sleep) {
+                       ret = xradio_device_wakeup(hw_priv);
+                       if (WARN_ON(ret < 0)) {
+                               return -1;
+                       } else if (ret) {
+                               hw_priv->device_can_sleep = false;
+                       } else { /* Wait for "awake" interrupt */
+                               dev_dbg(hw_priv->pdev,
+                                               "need to wait for device to wake before doing tx\n");
+                               return 0;
+                       }
+               }
+               /* Increase Tx buffer*/
+               wsm_alloc_tx_buffer(hw_priv);
+
+               /* Get data to send and send it. */
+               ret = wsm_get_tx(hw_priv, &data, &tx_len, &txburst, &vif_selected);
+               if (ret <= 0) {
+                       wsm_release_tx_buffer(hw_priv, 1);
+                       if (WARN_ON(ret < 0)) {
+                               dev_err(hw_priv->pdev, "wsm_get_tx=%d.\n", ret);
+                               return -ENOMEM;
+                       } else {
+                               return 0;
+                       }
+               } else {
+                       wsm = (struct wsm_hdr *) data;
+                       BUG_ON(tx_len < sizeof(*wsm));
+                       BUG_ON(__le32_to_cpu(wsm->len) != tx_len);
+
+                       /* Align tx length and check it. */
+                       if (tx_len <= 8)
+                       tx_len = 16;
+                       tx_len = sdio_align_len(hw_priv, tx_len);
+
+                       /* Check if not exceeding XRADIO capabilities */
+                       if (tx_len > EFFECTIVE_BUF_SIZE) {
+                               dev_warn(hw_priv->pdev, "Write aligned len: %d\n", tx_len);
+                       }
+
+                       /* Make sequence number. */
+                       wsm->id &= __cpu_to_le32(~WSM_TX_SEQ(WSM_TX_SEQ_MAX));
+                       wsm->id |= cpu_to_le32(WSM_TX_SEQ(hw_priv->wsm_tx_seq));
+
+                       /* Send the data to devices. */
+                       if (WARN_ON(xradio_data_write(hw_priv, data, tx_len))) {
+                               wsm_release_tx_buffer(hw_priv, 1);
+                               dev_err(hw_priv->pdev, "xradio_data_write failed\n");
+                               return -EIO;
+                       }
+
+                       xradio_bh_tx_dump(hw_priv->pdev, data, tx_len);
+
+                       /* Process after data have sent. */
+                       if (vif_selected != -1) {
+                               hw_priv->hw_bufs_used_vif[vif_selected]++;
+                       }
+                       wsm_txed(hw_priv, data);
+                       hw_priv->wsm_tx_seq = (hw_priv->wsm_tx_seq + 1) & WSM_TX_SEQ_MAX;
+
+                       return 1;
+               }
+       } else
+               return 0;
+}
+
+static int xradio_bh_exchange(struct xradio_common *hw_priv) {
+       int rxdone;
+       int txdone;
+       u16 nextlen = 0;
+
+       /* query stuck frames in firmware. */
+       if (atomic_xchg(&hw_priv->query_cnt, 0)) {
+               if (schedule_work(&hw_priv->query_work) <= 0)
+                       atomic_add(1, &hw_priv->query_cnt);
+       }
+
+       /* keep doing tx and rx until they both stop or we are told
+        * to terminate */
+       do {
+               txdone = xradio_bh_tx(hw_priv);
+               if (txdone < 0) {
+                       break;
+               }
+               rxdone = xradio_bh_rx(hw_priv, &nextlen);
+               if (rxdone < 0) {
+                       break;
+               }
+       } while ((txdone > 0 || rxdone > 0) && !kthread_should_stop());
+       return 0;
+}
+
+static int xradio_bh(void *arg)
+{
+       struct xradio_common *hw_priv = arg;
+       int term, suspend;
+       int wake = 0;
+       long timeout;
+       long status;
+
+       for (;;) {
+               timeout = HZ / 30;
+
+               // wait for something to happen or a timeout
+               status = wait_event_interruptible_timeout(hw_priv->bh_wq, ( {
+                                       wake = atomic_xchg(&hw_priv->bh_tx, 0);
+                                       term = kthread_should_stop();
+                                       suspend = atomic_read(&hw_priv->bh_suspend);
+                                       (wake || term || suspend);}), timeout);
+
+               if (wake) {
+                       if(xradio_bh_exchange(hw_priv) < 0){
+                               break;
+                       }
+               } else if (term) {
+                       dev_dbg(hw_priv->pdev, "xradio_bh exit!\n");
+                       break;
+               } else if (status < 0) {
+                       dev_err(hw_priv->pdev, "bh_error=%d, status=%ld\n",
+                                       hw_priv->bh_error, status);
+                       break;
+               } else if (!status) {
+                       /* check if there is data waiting but we missed the interrupt*/
+                       if (xradio_bh_rx_availlen(hw_priv) > 0) {
+                               dev_warn(hw_priv->pdev, "missed interrupt\n");
+                               if(xradio_bh_exchange(hw_priv) < 0){
+                                       break;
+                               }
+                       }
+                       /* There are some frames to be confirmed. */
+                       else if (hw_priv->hw_bufs_used) {
+                               long timeout = 0;
+                               bool pending = 0;
+                               dev_dbg(hw_priv->pdev, "Need confirm:%d!\n",
+                                               hw_priv->hw_bufs_used);
+                               /* Check if frame transmission is timed out. */
+                               pending = xradio_query_txpkt_timeout(hw_priv, XRWL_ALL_IFS,
+                                               hw_priv->pending_frame_id, &timeout);
+                               /* There are some frames confirm time out. */
+                               if (pending && timeout < 0) {
+                                       dev_err(hw_priv->pdev, "query_txpkt_timeout:%ld!\n",
+                                                       timeout);
+                                       break;
+                               }
+                       } //else if (!txpending){
+                         //if (hw_priv->powersave_enabled && !hw_priv->device_can_sleep && !atomic_read(&hw_priv->recent_scan)) {
+                         //    /* Device is idle, we can go to sleep. */
+                         //    dev_dbg(hw_priv->pdev, "Device idle(timeout), can sleep.\n");
+                         //    WARN_ON(xradio_reg_write_16(hw_priv, HIF_CONTROL_REG_ID, 0));
+                         //    hw_priv->device_can_sleep = true;
+                         //}
+                         //continue;
+                         //}
+               } else if (suspend) {
+                       dev_dbg(hw_priv->pdev, "Host suspend request.\n");
+                       /* Check powersave setting again. */
+                       if (hw_priv->powersave_enabled) {
+                               dev_dbg(hw_priv->pdev,
+                                               "Device idle(host suspend), can sleep.\n");
+                               WARN_ON(xradio_reg_write_16(hw_priv, HIF_CONTROL_REG_ID, 0));
+                               hw_priv->device_can_sleep = true;
+                       }
+
+                       /* bh thread go to suspend. */
+                       atomic_set(&hw_priv->bh_suspend, XRADIO_BH_SUSPENDED);
+                       wake_up(&hw_priv->bh_evt_wq);
+                       status = wait_event_interruptible(hw_priv->bh_wq,
+                                       XRADIO_BH_RESUME == atomic_read(&hw_priv->bh_suspend));
+
+                       if (status < 0) {
+                               dev_err(hw_priv->pdev, "Failed to wait for resume: %ld.\n",
+                                               status);
+                               break;
+                       }
+                       dev_dbg(hw_priv->pdev, "Host resume.\n");
+                       atomic_set(&hw_priv->bh_suspend, XRADIO_BH_RESUMED);
+                       wake_up(&hw_priv->bh_evt_wq);
+               }
+       } /* for (;;)*/
+
+       dev_err(hw_priv->pdev, "bh thread exiting\n");
+
+       return 0;
+}
diff --git a/drivers/net/wireless/xradio/bh.h b/drivers/net/wireless/xradio/bh.h
new file mode 100644 (file)
index 0000000..ca9187e
--- /dev/null
@@ -0,0 +1,36 @@
+/*
+ * Data Transmission thread for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#ifndef XRADIO_BH_H
+#define XRADIO_BH_H
+
+#define XRADIO_BH_THREAD   "xradio_bh"
+
+/* extern */ struct xradio_common;
+
+#define SDIO_BLOCK_SIZE (528)
+
+int xradio_register_bh(struct xradio_common *hw_priv);
+void xradio_unregister_bh(struct xradio_common *hw_priv);
+void xradio_irq_handler(struct xradio_common *hw_priv);
+void xradio_bh_wakeup(struct xradio_common *hw_priv);
+int xradio_bh_suspend(struct xradio_common *hw_priv);
+int xradio_bh_resume(struct xradio_common *hw_priv);
+/* Must be called from BH thread. */
+void xradio_enable_powersave(struct xradio_vif *priv, bool enable);
+int wsm_release_tx_buffer(struct xradio_common *hw_priv, int count);
+int wsm_release_vif_tx_buffer(struct xradio_common *hw_priv, int if_id,
+                              int count);
+int xradio_init_resv_skb(struct xradio_common *hw_priv);
+void xradio_deinit_resv_skb(struct xradio_common *hw_priv);
+int xradio_realloc_resv_skb(struct xradio_common *hw_priv,
+                                                       struct sk_buff *skb);
+#endif /* XRADIO_BH_H */
diff --git a/drivers/net/wireless/xradio/common.h b/drivers/net/wireless/xradio/common.h
new file mode 100644 (file)
index 0000000..1ce23de
--- /dev/null
@@ -0,0 +1,101 @@
+/*
+ * Common interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#ifndef XRADIO_COMMON_H
+#define XRADIO_COMMON_H
+
+/*******************************************************
+ interfaces for parse frame protocol info.
+********************************************************/
+#define LLC_LEN       8
+#define LLC_TYPE_OFF  6  //Ether type offset
+#define IP_PROTO_OFF  9  //protocol offset
+#define IP_S_ADD_OFF  12
+#define IP_D_ADD_OFF  16
+#define UDP_LEN       8
+//DHCP
+#define DHCP_BOOTP_C  68
+#define DHCP_BOOTP_S  67
+#define UDP_BOOTP_LEN 236  //exclude "Options:64"
+#define BOOTP_OPS_LEN 64
+#define DHCP_MAGIC    0x63825363
+#define DHCP_DISCOVER 0x01
+#define DHCP_OFFER    0x02
+#define DHCP_REQUEST  0x03
+#define DHCP_DECLINE  0x04
+#define DHCP_ACK      0x05
+#define DHCP_NACK     0x06
+#define DHCP_RELEASE  0x07
+
+//LLC layer.
+static inline bool is_SNAP(u8* llc_data)
+{
+       return (bool)(*(u16*)(llc_data) == 0xAAAA && llc_data[2] == 0x03);  //0xAA, 0xAA, 0x03.
+}
+
+static inline bool is_STP(u8* llc_data)
+{
+       return (bool)(*(u16*)(llc_data) == 0xAAAA && llc_data[2] == 0x03);  //0x42, 0x42, 0x03.
+}
+
+//IP/IPV6/ARP layer...
+static inline bool is_ip(u8* llc_data)
+{
+       return (bool)(*(u16*)(llc_data+LLC_TYPE_OFF) == cpu_to_be16(ETH_P_IP));   //0x0800
+}
+static inline bool is_ipv6(u8* llc_data)
+{
+       return (bool)(*(u16*)(llc_data+LLC_TYPE_OFF) == cpu_to_be16(ETH_P_IPV6)); //0x08dd
+}
+static inline bool is_arp(u8* llc_data)
+{
+       return (bool)(*(u16*)(llc_data+LLC_TYPE_OFF) == cpu_to_be16(ETH_P_ARP));  //0x0806
+}
+static inline bool is_8021x(u8* llc_data)
+{
+       return (bool)(*(u16*)(llc_data+LLC_TYPE_OFF) == cpu_to_be16(ETH_P_PAE));  //0x888E
+}
+
+//TCP/UDP layer...
+static inline bool is_tcp(u8* llc_data)
+{
+       return (bool)(llc_data[LLC_LEN+IP_PROTO_OFF] == IPPROTO_TCP);  //
+}
+
+static inline bool is_udp(u8* llc_data)
+{
+       return (bool)(llc_data[LLC_LEN+IP_PROTO_OFF] == IPPROTO_UDP);  //
+}
+
+static inline bool is_icmp(u8* llc_data)
+{
+       return (bool)(llc_data[LLC_LEN+IP_PROTO_OFF] == IPPROTO_ICMP);  //
+}
+
+static inline bool is_igmp(u8* llc_data)
+{
+       return (bool)(llc_data[LLC_LEN+IP_PROTO_OFF] == IPPROTO_IGMP);  //
+}
+
+static inline bool is_dhcp(u8* llc_data)
+{
+       u8* ip_hdr  = llc_data+LLC_LEN;
+       if(!is_ip(llc_data))
+               return (bool)0;
+       if(ip_hdr[IP_PROTO_OFF] == IPPROTO_UDP) {
+               u8* udp_hdr = ip_hdr+((ip_hdr[0]&0xf)<<2);  //ihl:words
+               return (bool)((((udp_hdr[0]<<8)|udp_hdr[1]) == DHCP_BOOTP_C) ||  //DHCP client
+                             (((udp_hdr[0]<<8)|udp_hdr[1]) == DHCP_BOOTP_S));   //DHCP server
+       }
+       return (bool)0;
+}
+
+#endif //XRADIO_COMMON_H
diff --git a/drivers/net/wireless/xradio/debug.h b/drivers/net/wireless/xradio/debug.h
new file mode 100644 (file)
index 0000000..30a59f3
--- /dev/null
@@ -0,0 +1,22 @@
+/*
+ * DebugFS code for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+#ifndef XRADIO_DEBUG_H_INCLUDED
+#define XRADIO_DEBUG_H_INCLUDED
+
+#define xradio_dbg(level, ...)
+#define txrx_printk(level, ...)
+#define wsm_printk(level, ...)
+#define sta_printk(level, ...)
+#define scan_printk(level, ...)
+#define ap_printk(level, ...)
+#define pm_printk(level, ...)
+
+#endif /* XRADIO_DEBUG_H_INCLUDED */
diff --git a/drivers/net/wireless/xradio/fwio.c b/drivers/net/wireless/xradio/fwio.c
new file mode 100644 (file)
index 0000000..cfb45eb
--- /dev/null
@@ -0,0 +1,560 @@
+/*
+ * Firmware I/O implementation for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <linux/init.h>
+#include <linux/vmalloc.h>
+#include <linux/sched.h>
+#include <linux/firmware.h>
+
+#include "xradio.h"
+#include "fwio.h"
+#include "hwio.h"
+#include "bh.h"
+#include "sdio.h"
+
+/* Macroses are local. */
+#define APB_WRITE(reg, val) \
+       do { \
+               ret = xradio_apb_write_32(hw_priv, APB_ADDR(reg), (val)); \
+               if (ret < 0) { \
+                       dev_err(hw_priv->pdev, \
+                               "%s: can't write %s at line %d.\n", \
+                               __func__, #reg, __LINE__); \
+                       goto error; \
+               } \
+       } while (0)
+#define APB_READ(reg, val) \
+       do { \
+               ret = xradio_apb_read_32(hw_priv, APB_ADDR(reg), &(val)); \
+               if (ret < 0) { \
+                       dev_err(hw_priv->pdev, \
+                               "%s: can't read %s at line %d.\n", \
+                               __func__, #reg, __LINE__); \
+                       goto error; \
+               } \
+       } while (0)
+#define REG_WRITE(reg, val) \
+       do { \
+               ret = xradio_reg_write_32(hw_priv, (reg), (val)); \
+               if (ret < 0) { \
+                       dev_err(hw_priv->pdev, \
+                               "%s: can't write %s at line %d.\n", \
+                               __func__, #reg, __LINE__); \
+                       goto error; \
+               } \
+       } while (0)
+#define REG_READ(reg, val) \
+       do { \
+               ret = xradio_reg_read_32(hw_priv, (reg), &(val)); \
+               if (ret < 0) { \
+                       dev_err(hw_priv->pdev, \
+                               "%s: can't read %s at line %d.\n", \
+                               __func__, #reg, __LINE__); \
+                       goto error; \
+               } \
+       } while (0)
+
+
+static int xradio_get_hw_type(u32 config_reg_val, int *major_revision)
+{
+       int hw_type  = -1;
+       u32 hif_type = (config_reg_val >> 24) & 0x4;
+       //u32 hif_vers = (config_reg_val >> 31) & 0x1;
+
+       /* Check if we have XRADIO*/
+  if (hif_type == 0x4) {
+               *major_revision = 0x4;
+               hw_type = HIF_HW_TYPE_XRADIO;
+       } else {
+               //hw type unknown.
+               *major_revision = 0x0;
+       }
+       return hw_type;
+}
+
+/*
+ * This function is called to Parse the SDD file
+ * to extract some informations
+ */
+static int xradio_parse_sdd(struct xradio_common *hw_priv, u32 *dpll)
+{
+       int ret = 0;
+       const char *sdd_path = NULL;
+       struct xradio_sdd *pElement = NULL;
+       int parsedLength = 0;
+
+       BUG_ON(hw_priv->sdd != NULL);
+
+       /* select and load sdd file depend on hardware version. */
+       switch (hw_priv->hw_revision) {
+       case XR819_HW_REV0:
+               sdd_path = XR819_SDD_FILE;
+               break;
+       default:
+               dev_dbg(hw_priv->pdev, "unknown hardware version.\n");
+               return ret;
+       }
+
+       ret = request_firmware(&hw_priv->sdd, sdd_path, hw_priv->pdev);
+       if (unlikely(ret)) {
+               dev_dbg(hw_priv->pdev, "can't load sdd file %s.\n",
+                               sdd_path);
+               return ret;
+       }
+
+       //parse SDD config.
+       hw_priv->is_BT_Present = false;
+       pElement = (struct xradio_sdd *)hw_priv->sdd->data;
+       parsedLength += (FIELD_OFFSET(struct xradio_sdd, data) + pElement->length);
+       pElement = FIND_NEXT_ELT(pElement);
+
+       while (parsedLength < hw_priv->sdd->size) {
+               switch (pElement->id) {
+               case SDD_PTA_CFG_ELT_ID:
+                       hw_priv->conf_listen_interval = (*((u16 *)pElement->data+1) >> 7) & 0x1F;
+                       hw_priv->is_BT_Present = true;
+                       xradio_dbg(XRADIO_DBG_NIY, "PTA element found.Listen Interval %d\n",
+                                  hw_priv->conf_listen_interval);
+                       break;
+               case SDD_REFERENCE_FREQUENCY_ELT_ID:
+                       switch(*((uint16_t*)pElement->data)) {
+                       case 0x32C8:
+                               *dpll = 0x1D89D241;
+                               break;
+                       case 0x3E80:
+                               *dpll = 0x1E1;
+                               break;
+                       case 0x41A0:
+                               *dpll = 0x124931C1;
+                               break;
+                       case 0x4B00:
+                               *dpll = 0x191;
+                               break;
+                       case 0x5DC0:
+                               *dpll = 0x141;
+                               break;
+                       case 0x6590:
+                               *dpll = 0x0EC4F121;
+                               break;
+                       case 0x8340:
+                               *dpll = 0x92490E1;
+                               break;
+                       case 0x9600:
+                               *dpll = 0x100010C1;
+                               break;
+                       case 0x9C40:
+                               *dpll = 0xC1;
+                               break;
+                       case 0xBB80:
+                               *dpll = 0xA1;
+                               break;
+                       case 0xCB20:
+                               *dpll = 0x7627091;
+                               break;
+                       default:
+                               *dpll = DPLL_INIT_VAL_XRADIO;
+                               xradio_dbg(XRADIO_DBG_WARN, "Unknown Reference clock frequency." 
+                                          "Use default DPLL value=0x%08x.", DPLL_INIT_VAL_XRADIO);
+                               break;
+                       }
+               default:
+                       break;
+               }
+               parsedLength += (FIELD_OFFSET(struct xradio_sdd, data) + pElement->length);
+               pElement = FIND_NEXT_ELT(pElement);
+       }
+       
+       dev_dbg(hw_priv->pdev, "sdd size=%d parse len=%d.\n",
+                  hw_priv->sdd->size, parsedLength);
+
+       //
+       if (hw_priv->is_BT_Present == false) {
+               hw_priv->conf_listen_interval = 0;
+               xradio_dbg(XRADIO_DBG_NIY, "PTA element NOT found.\n");
+       }
+       return ret;
+}
+
+static int xradio_firmware(struct xradio_common *hw_priv)
+{
+       int ret, block, num_blocks;
+       unsigned i;
+       u32 val32;
+       u32 put = 0, get = 0;
+       u8 *buf = NULL;
+       const char *fw_path;
+       const struct firmware *firmware = NULL;
+
+       switch (hw_priv->hw_revision) {
+       case XR819_HW_REV0:
+               fw_path = XR819_FIRMWARE;
+               break;
+       default:
+               dev_dbg(hw_priv->pdev, "invalid silicon revision %d.\n",
+                               hw_priv->hw_revision);
+               return -EINVAL;
+       }
+       /* Initialize common registers */
+       APB_WRITE(DOWNLOAD_IMAGE_SIZE_REG, DOWNLOAD_ARE_YOU_HERE);
+       APB_WRITE(DOWNLOAD_PUT_REG, 0);
+       APB_WRITE(DOWNLOAD_GET_REG, 0);
+       APB_WRITE(DOWNLOAD_STATUS_REG, DOWNLOAD_PENDING);
+       APB_WRITE(DOWNLOAD_FLAGS_REG, 0);
+
+       /* Release CPU from RESET */
+       REG_READ(HIF_CONFIG_REG_ID, val32);
+       val32 &= ~HIF_CONFIG_CPU_RESET_BIT;
+       REG_WRITE(HIF_CONFIG_REG_ID, val32);
+
+       /* Enable Clock */
+       val32 &= ~HIF_CONFIG_CPU_CLK_DIS_BIT;
+       REG_WRITE(HIF_CONFIG_REG_ID, val32);
+
+       /* Load a firmware file */
+       ret = request_firmware(&firmware, fw_path, hw_priv->pdev);
+       if (ret) {
+               dev_dbg(hw_priv->pdev, "can't load firmware file %s.\n",
+                               fw_path);
+               goto error;
+       }
+       BUG_ON(!firmware->data);
+
+       buf = kmalloc(DOWNLOAD_BLOCK_SIZE, GFP_KERNEL);
+       if (!buf) {
+               dev_dbg(hw_priv->pdev, "can't allocate firmware buffer.\n");
+               ret = -ENOMEM;
+               goto error;
+       }
+
+       /* Check if the bootloader is ready */
+       for (i = 0; i < 100; i++/*= 1 + i / 2*/) {
+               APB_READ(DOWNLOAD_IMAGE_SIZE_REG, val32);
+               if (val32 == DOWNLOAD_I_AM_HERE)
+                       break;
+               mdelay(10);
+       } /* End of for loop */
+       if (val32 != DOWNLOAD_I_AM_HERE) {
+               dev_dbg(hw_priv->pdev, "bootloader is not ready.\n");
+               ret = -ETIMEDOUT;
+               goto error;
+       }
+
+       /* Calculcate number of download blocks */
+       num_blocks = (firmware->size - 1) / DOWNLOAD_BLOCK_SIZE + 1;
+
+       /* Updating the length in Download Ctrl Area */
+       val32 = firmware->size; /* Explicit cast from size_t to u32 */
+       APB_WRITE(DOWNLOAD_IMAGE_SIZE_REG, val32);
+
+       /* Firmware downloading loop */
+       for (block = 0; block < num_blocks ; block++) {
+               size_t tx_size;
+               size_t block_size;
+
+               /* check the download status */
+               APB_READ(DOWNLOAD_STATUS_REG, val32);
+               if (val32 != DOWNLOAD_PENDING) {
+                       dev_dbg(hw_priv->pdev, "bootloader reported error %d.\n",
+                                       val32);
+                       ret = -EIO;
+                       goto error;
+               }
+
+               /* loop until put - get <= 24K */
+               for (i = 0; i < 100; i++) {
+                       APB_READ(DOWNLOAD_GET_REG, get);
+                       if ((put - get) <= (DOWNLOAD_FIFO_SIZE - DOWNLOAD_BLOCK_SIZE))
+                               break;
+                       mdelay(i);
+               }
+
+               if ((put - get) > (DOWNLOAD_FIFO_SIZE - DOWNLOAD_BLOCK_SIZE)) {
+                       dev_dbg(hw_priv->pdev, "Timeout waiting for FIFO.\n");
+                       ret = -ETIMEDOUT;
+                       goto error;
+               }
+
+               /* calculate the block size */
+               tx_size = block_size = min((size_t)(firmware->size - put), (size_t)DOWNLOAD_BLOCK_SIZE);
+               memcpy(buf, &firmware->data[put], block_size);
+
+               if (block_size < DOWNLOAD_BLOCK_SIZE) {
+                       memset(&buf[block_size], 0, DOWNLOAD_BLOCK_SIZE - block_size);
+                       tx_size = DOWNLOAD_BLOCK_SIZE;
+               }
+
+               /* send the block to sram */
+               ret = xradio_apb_write(hw_priv, APB_ADDR(DOWNLOAD_FIFO_OFFSET + (put & (DOWNLOAD_FIFO_SIZE - 1))), 
+                                      buf, tx_size);
+               if (ret < 0) {
+                       dev_err(hw_priv->pdev, "%s: can't write block at line %d.\n", __func__, __LINE__);
+                       goto error;
+               }
+
+               /* update the put register */
+               put += block_size;
+               APB_WRITE(DOWNLOAD_PUT_REG, put);
+       } /* End of firmware download loop */
+
+       /* Wait for the download completion */
+       for (i = 0; i < 300; i += 1 + i / 2) {
+               APB_READ(DOWNLOAD_STATUS_REG, val32);
+               if (val32 != DOWNLOAD_PENDING)
+                       break;
+               mdelay(i);
+       }
+       if (val32 != DOWNLOAD_SUCCESS) {
+               dev_dbg(hw_priv->pdev, "wait for download completion failed. " \
+                          "Read: 0x%.8X\n", val32);
+               ret = -ETIMEDOUT;
+               goto error;
+       } else {
+               dev_dbg(hw_priv->pdev, "Firmware completed.\n");
+               ret = 0;
+       }
+
+error:
+       if(buf)
+               kfree(buf);
+       if (firmware) {
+               release_firmware(firmware);
+       }
+       return ret;
+}
+
+static int xradio_bootloader(struct xradio_common *hw_priv)
+{
+       const char *bl_path = XR819_BOOTLOADER;
+       u32  addr = AHB_MEMORY_ADDRESS;
+       int ret;
+       u32 i;
+       u32 *data;
+       const struct firmware *bootloader;
+
+       /* Load a bootloader file */
+       ret = request_firmware(&bootloader, bl_path, hw_priv->pdev);
+       if (ret) {
+               dev_dbg(hw_priv->pdev, "can't load bootloader file %s.\n",
+                               bl_path);
+               goto error;
+       }
+
+       /* Down bootloader. */
+       data = (u32 *)bootloader->data;
+       for(i = 0; i < (bootloader->size)/4; i++, addr+=4) {
+               REG_WRITE(HIF_SRAM_BASE_ADDR_REG_ID, addr);
+               REG_WRITE(HIF_AHB_DPORT_REG_ID,data[i]);
+       }
+       dev_dbg(hw_priv->pdev, "Bootloader complete\n");
+
+error:
+       if(bootloader) {
+               release_firmware(bootloader);
+       }
+       return ret;  
+}
+
+bool test_retry = false;
+int xradio_load_firmware(struct xradio_common *hw_priv)
+{
+       int ret;
+       int i;
+       u32 val32;
+       u16 val16;
+       u32 dpll = 0;
+       int major_revision;
+
+       /* Read CONFIG Register Value - We will read 32 bits */
+       ret = xradio_reg_read_32(hw_priv, HIF_CONFIG_REG_ID, &val32);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "can't read config register, err=%d.\n",
+                               ret);
+               return ret;
+       }
+
+       //check hardware type and revision.
+       hw_priv->hw_type = xradio_get_hw_type(val32, &major_revision);
+       switch (hw_priv->hw_type) {
+       case HIF_HW_TYPE_XRADIO:
+               dev_dbg(hw_priv->pdev, "HW_TYPE_XRADIO detected.\n");
+               break;
+       default:
+               dev_dbg(hw_priv->pdev, "Unknown hardware: %d.\n",
+                               hw_priv->hw_type);
+               return -ENOTSUPP;
+       }
+       if (major_revision == 4) {
+               hw_priv->hw_revision = XR819_HW_REV0;
+               dev_dbg(hw_priv->pdev, "XRADIO_HW_REV 1.0 detected.\n");
+       } else {
+               dev_dbg(hw_priv->pdev, "Unsupported major revision %d.\n",
+                               major_revision);
+               return -ENOTSUPP;
+       }
+       
+       //load sdd file, and get config from it.
+       ret = xradio_parse_sdd(hw_priv, &dpll);
+       if (ret < 0) {
+               return ret;
+       }
+
+       //set dpll initial value and check.
+       ret = xradio_reg_write_32(hw_priv, HIF_TSET_GEN_R_W_REG_ID, dpll);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "can't write DPLL register.\n");
+               goto out;
+       }
+       msleep(5);
+       ret = xradio_reg_read_32(hw_priv, HIF_TSET_GEN_R_W_REG_ID, &val32);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "can't read DPLL register.\n");
+               goto out;
+       }
+       if (val32 != dpll) {
+               dev_dbg(hw_priv->pdev, "unable to initialise " \
+                          "DPLL register. Wrote 0x%.8X, read 0x%.8X.\n",
+                                  dpll, val32);
+               ret = -EIO;
+               goto out;
+       }
+
+       /* Set wakeup bit in device */
+       ret = xradio_reg_read_16(hw_priv, HIF_CONTROL_REG_ID, &val16);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "set_wakeup: can't read control register.\n");
+               goto out;
+       }
+       ret = xradio_reg_write_16(hw_priv, HIF_CONTROL_REG_ID, val16 | HIF_CTRL_WUP_BIT);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "set_wakeup: can't write control register.\n");
+               goto out;
+       }
+
+       /* Wait for wakeup */
+       for (i = 0 ; i < 300 ; i += 1 + i / 2) {
+               ret = xradio_reg_read_16(hw_priv, HIF_CONTROL_REG_ID, &val16);
+               if (ret < 0) {
+                       dev_dbg(hw_priv->pdev, "Wait_for_wakeup: "
+                                  "can't read control register.\n");
+                       goto out;
+               }
+               if (val16 & HIF_CTRL_RDY_BIT) {
+                       break;
+               }
+               msleep(i);
+       }
+       if ((val16 & HIF_CTRL_RDY_BIT) == 0) {
+               dev_dbg(hw_priv->pdev, "Wait for wakeup:"
+                          "device is not responding.\n");
+               ret = -ETIMEDOUT;
+               goto out;
+       } else {
+               dev_dbg(hw_priv->pdev, "WLAN device is ready.\n");
+       }
+
+       /* Checking for access mode and download firmware. */
+       ret = xradio_reg_read_32(hw_priv, HIF_CONFIG_REG_ID, &val32);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "check_access_mode: "
+                          "can't read config register.\n");
+               goto out;
+       }
+       if (val32 & HIF_CONFIG_ACCESS_MODE_BIT) {
+               /* Down bootloader. */
+               ret = xradio_bootloader(hw_priv);
+               if (ret < 0) {
+                       dev_dbg(hw_priv->pdev, "can't download bootloader.\n");
+                       goto out;
+               }
+               /* Down firmware. */
+               ret = xradio_firmware(hw_priv);
+               if (ret < 0) {
+                       dev_dbg(hw_priv->pdev, "can't download firmware.\n");
+                       goto out;
+               }
+       } else {
+               dev_dbg(hw_priv->pdev, "check_access_mode: "
+                          "device is already in QUEUE mode.\n");
+               /* TODO: verify this branch. Do we need something to do? */
+       }
+
+       if (HIF_HW_TYPE_XRADIO  == hw_priv->hw_type) {
+               /* If device is XRADIO the IRQ enable/disable bits
+                * are in CONFIG register */
+               ret = xradio_reg_read_32(hw_priv, HIF_CONFIG_REG_ID, &val32);
+               if (ret < 0) {
+                       dev_dbg(hw_priv->pdev, "enable_irq: can't read " \
+                                  "config register.\n");
+                       goto unsubscribe;
+               }
+               ret = xradio_reg_write_32(hw_priv, HIF_CONFIG_REG_ID,
+                       val32 | HIF_CONF_IRQ_RDY_ENABLE);
+               if (ret < 0) {
+                       dev_dbg(hw_priv->pdev, "enable_irq: can't write " \
+                                  "config register.\n");
+                       goto unsubscribe;
+               }
+       } else {
+               /* If device is XRADIO the IRQ enable/disable bits
+                * are in CONTROL register */
+               /* Enable device interrupts - Both DATA_RDY and WLAN_RDY */
+               ret = xradio_reg_read_16(hw_priv, HIF_CONFIG_REG_ID, &val16);
+               if (ret < 0) {
+                       dev_dbg(hw_priv->pdev, "enable_irq: can't read " \
+                                  "control register.\n");
+                       goto unsubscribe;
+               }
+               ret = xradio_reg_write_16(hw_priv, HIF_CONFIG_REG_ID, 
+                                         val16 | HIF_CTRL_IRQ_RDY_ENABLE);
+               if (ret < 0) {
+                       dev_dbg(hw_priv->pdev, "enable_irq: can't write " \
+                                  "control register.\n");
+                       goto unsubscribe;
+               }
+
+       }
+
+       /* Configure device for MESSSAGE MODE */
+       ret = xradio_reg_read_32(hw_priv, HIF_CONFIG_REG_ID, &val32);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "set_mode: can't read config register.\n");
+               goto unsubscribe;
+       }
+       ret = xradio_reg_write_32(hw_priv, HIF_CONFIG_REG_ID,
+                                 val32 & ~HIF_CONFIG_ACCESS_MODE_BIT);
+       if (ret < 0) {
+               dev_dbg(hw_priv->pdev, "set_mode: can't write config register.\n");
+               goto unsubscribe;
+       }
+
+       /* Unless we read the CONFIG Register we are
+        * not able to get an interrupt */
+       mdelay(10);
+       xradio_reg_read_32(hw_priv, HIF_CONFIG_REG_ID, &val32);
+       return 0;
+
+unsubscribe:
+out:
+       if (hw_priv->sdd) {
+               release_firmware(hw_priv->sdd);
+               hw_priv->sdd = NULL;
+       }
+       return ret;
+}
+
+int xradio_dev_deinit(struct xradio_common *hw_priv)
+{
+       if (hw_priv->sdd) {
+               release_firmware(hw_priv->sdd);
+               hw_priv->sdd = NULL;
+       }
+       return 0;
+}
diff --git a/drivers/net/wireless/xradio/fwio.h b/drivers/net/wireless/xradio/fwio.h
new file mode 100644 (file)
index 0000000..b5efeb1
--- /dev/null
@@ -0,0 +1,33 @@
+/*
+ * Firmware APIs for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+#ifndef FWIO_H_INCLUDED
+#define FWIO_H_INCLUDED
+
+#define XR819_HW_REV0       (8190)
+#define XR819_BOOTLOADER    ("xr819/boot_xr819.bin")
+#define XR819_FIRMWARE      ("xr819/fw_xr819.bin")
+#define XR819_SDD_FILE      ("xr819/sdd_xr819.bin")
+
+#define SDD_PTA_CFG_ELT_ID             0xEB
+#define SDD_REFERENCE_FREQUENCY_ELT_ID 0xC5
+#define FIELD_OFFSET(type, field) ((u8 *)&((type *)0)->field - (u8 *)0)
+#define FIND_NEXT_ELT(e) (struct xradio_sdd *)((u8 *)&e->data + e->length)
+struct xradio_sdd {
+       u8 id;
+       u8 length;
+       u8 data[];
+};
+
+struct xradio_common;
+int xradio_load_firmware(struct xradio_common *hw_priv);
+int xradio_dev_deinit(struct xradio_common *hw_priv);
+
+#endif
diff --git a/drivers/net/wireless/xradio/ht.c b/drivers/net/wireless/xradio/ht.c
new file mode 100644 (file)
index 0000000..a9b3630
--- /dev/null
@@ -0,0 +1,86 @@
+#include <net/mac80211.h>
+
+#include "xradio.h"
+#include "sta.h"
+
+#define AG_RATE_INDEX  6     //11a/g rate for important short frames in 5G.
+
+#ifdef AP_HT_COMPAT_FIX
+#define AP_COMPAT_THRESHOLD  2000
+#define AP_COMPAT_MIN_CNT    200
+u8 ap_compat_bssid[ETH_ALEN] = {0};
+int xradio_apcompat_detect(struct xradio_vif *priv, u8 rx_rate)
+{
+       if (rx_rate < AG_RATE_INDEX) {
+               priv->ht_compat_cnt++;
+               txrx_printk(XRADIO_DBG_MSG,"%s:rate=%d.\n", __func__, rx_rate);
+       } else {
+               priv->ht_compat_det |= 1;
+               priv->ht_compat_cnt = 0;
+               txrx_printk(XRADIO_DBG_NIY,"%s:HT compat detect\n", __func__);
+               return 0;
+       }
+
+       /* Enhance compatibility with some illegal APs.*/
+       if (priv->ht_compat_cnt  > AP_COMPAT_THRESHOLD ||
+               (priv->ht_compat_cnt > AP_COMPAT_MIN_CNT &&
+                priv->bssid[0] == 0xC8 &&
+                priv->bssid[1] == 0x3A &&
+                priv->bssid[2] == 0x35)) {
+               struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+               memcpy(ap_compat_bssid, priv->bssid, ETH_ALEN);
+               wms_send_disassoc_to_self(hw_priv, priv);
+               txrx_printk(XRADIO_DBG_WARN, "%s:SSID=%s, BSSID=" \
+                           "%02x:%02x:%02x:%02x:%02x:%02x\n", __func__, priv->ssid,
+                           ap_compat_bssid[0], ap_compat_bssid[1],
+                           ap_compat_bssid[2], ap_compat_bssid[3],
+                           ap_compat_bssid[4], ap_compat_bssid[5]);
+               return 1;
+       }
+       return 0;
+}
+
+void xradio_remove_ht_ie(struct xradio_vif *priv, struct sk_buff *skb)
+{
+       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)skb->data;
+       u8 *ies        = NULL;
+       size_t ies_len = 0;
+       u8 *ht_ie      = NULL;
+
+       if (!mgmt || memcmp(ap_compat_bssid, mgmt->bssid, ETH_ALEN))
+               return;
+
+       if (ieee80211_is_probe_resp(mgmt->frame_control))
+               ies = mgmt->u.probe_resp.variable;
+       else if (ieee80211_is_beacon(mgmt->frame_control))
+               ies = mgmt->u.beacon.variable;
+       else if (ieee80211_is_assoc_resp(mgmt->frame_control))
+               ies = mgmt->u.assoc_resp.variable;
+       else if (ieee80211_is_assoc_req(mgmt->frame_control))
+               ies = mgmt->u.assoc_req.variable;
+       else
+               return;
+
+       ies_len = skb->len - (ies - (u8 *)(skb->data));
+       ht_ie   = (u8 *)xradio_get_ie(ies, ies_len, WLAN_EID_HT_CAPABILITY);
+       if (ht_ie) {
+               u8 ht_len   = *(ht_ie + 1) + 2;
+               u8 move_len = (ies + ies_len) - (ht_ie + ht_len);
+               memmove(ht_ie, (ht_ie + ht_len), move_len);
+               skb_trim(skb, skb->len - ht_len);
+               ies_len = skb->len - (ies - (u8 *)(skb->data));
+               ht_ie = (u8 *)xradio_get_ie(ies, ies_len, WLAN_EID_HT_OPERATION);
+               if (ht_ie) {
+                       ht_len   = *(ht_ie + 1) + 2;
+                       move_len = (ies + ies_len) - (ht_ie + ht_len);
+                       memmove(ht_ie, (ht_ie + ht_len), move_len);
+                       skb_trim(skb, skb->len - ht_len);
+               }
+       }
+       txrx_printk(XRADIO_DBG_WARN, "%s: BSSID=%02x:%02x:%02x:%02x:%02x:%02x\n",
+                   __func__,
+                   mgmt->bssid[0], mgmt->bssid[1],
+                   mgmt->bssid[2], mgmt->bssid[3],
+                   mgmt->bssid[4], mgmt->bssid[5]);
+}
+#endif //AP_HT_COMPAT_FIX
\ No newline at end of file
diff --git a/drivers/net/wireless/xradio/ht.h b/drivers/net/wireless/xradio/ht.h
new file mode 100644 (file)
index 0000000..346b425
--- /dev/null
@@ -0,0 +1,44 @@
+/*
+ * HT-related code for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+#ifndef XRADIO_HT_H_INCLUDED
+#define XRADIO_HT_H_INCLUDED
+
+#include <net/mac80211.h>
+
+struct xradio_ht_oper {
+       struct ieee80211_sta_ht_cap  ht_cap;
+       enum nl80211_channel_type    channel_type;
+       u16                          operation_mode;
+};
+
+static inline int xradio_is_ht(const struct xradio_ht_oper *ht_oper)
+{
+       return ht_oper->channel_type != NL80211_CHAN_NO_HT;
+}
+
+static inline int xradio_ht_greenfield(const struct xradio_ht_oper *ht_oper)
+{
+       return (xradio_is_ht(ht_oper) &&
+              (ht_oper->ht_cap.cap      & IEEE80211_HT_CAP_GRN_FLD) &&
+              !(ht_oper->operation_mode & IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT));
+}
+
+static inline int xradio_ht_ampdu_density(const struct xradio_ht_oper *ht_oper)
+{
+       if (!xradio_is_ht(ht_oper))
+               return 0;
+       return ht_oper->ht_cap.ampdu_density;
+}
+
+int xradio_apcompat_detect(struct xradio_vif *priv, u8 rx_rate);
+void xradio_remove_ht_ie(struct xradio_vif *priv, struct sk_buff *skb);
+
+#endif /* XRADIO_HT_H_INCLUDED */
diff --git a/drivers/net/wireless/xradio/hwio.c b/drivers/net/wireless/xradio/hwio.c
new file mode 100644 (file)
index 0000000..b813333
--- /dev/null
@@ -0,0 +1,280 @@
+/*
+ * Hardware I/O implementation for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <linux/types.h>
+
+#include "xradio.h"
+#include "hwio.h"
+#include "sdio.h"
+
+#define CHECK_ADDR_LEN  1
+
+ /* Sdio addr is 4*spi_addr */
+#define SPI_REG_ADDR_TO_SDIO(spi_reg_addr) ((spi_reg_addr) << 2)
+#define SDIO_ADDR17BIT(buf_id, mpf, rfu, reg_id_ofs) \
+                               ((((buf_id)    & 0x1F) << 7) \
+                               | (((mpf)        & 1) << 6) \
+                               | (((rfu)        & 1) << 5) \
+                               | (((reg_id_ofs) & 0x1F) << 0))
+#define MAX_RETRY              3
+
+
+static int __xradio_read(struct xradio_common *hw_priv, u16 addr,
+                         void *buf, size_t buf_len, int buf_id)
+{
+       u16 addr_sdio;
+       u32 sdio_reg_addr_17bit ;
+
+#if (CHECK_ADDR_LEN)
+       /* Check if buffer is aligned to 4 byte boundary */
+       if (WARN_ON(((unsigned long)buf & 3) && (buf_len > 4))) {
+               dev_dbg(hw_priv->pdev, "buffer is not aligned.\n");
+               return -EINVAL;
+       }
+#endif
+
+       /* Convert to SDIO Register Address */
+       addr_sdio = SPI_REG_ADDR_TO_SDIO(addr);
+       sdio_reg_addr_17bit = SDIO_ADDR17BIT(buf_id, 0, 0, addr_sdio);
+       return sdio_data_read(hw_priv,
+                                                sdio_reg_addr_17bit,
+                                                buf, buf_len);
+}
+
+static int __xradio_write(struct xradio_common *hw_priv, u16 addr,
+                              const void *buf, size_t buf_len, int buf_id)
+{
+       u16 addr_sdio;
+       u32 sdio_reg_addr_17bit ;
+
+#if (CHECK_ADDR_LEN)
+       /* Check if buffer is aligned to 4 byte boundary */
+       if (WARN_ON(((unsigned long)buf & 3) && (buf_len > 4))) {
+               dev_err(hw_priv->pdev, "buffer is not aligned.\n");
+               return -EINVAL;
+       }
+#endif
+
+       /* Convert to SDIO Register Address */
+       addr_sdio = SPI_REG_ADDR_TO_SDIO(addr);
+       sdio_reg_addr_17bit = SDIO_ADDR17BIT(buf_id, 0, 0, addr_sdio);
+
+       return sdio_data_write(hw_priv,
+                                                 sdio_reg_addr_17bit,
+                                                 buf, buf_len);
+}
+
+static inline int __xradio_read_reg32(struct xradio_common *hw_priv,
+                                       u16 addr, u32 *val)
+{
+       return __xradio_read(hw_priv, addr, val, sizeof(val), 0);
+}
+
+static inline int __xradio_write_reg32(struct xradio_common *hw_priv,
+                                        u16 addr, u32 val)
+{
+       return __xradio_write(hw_priv, addr, &val, sizeof(val), 0);
+}
+
+int xradio_reg_read(struct xradio_common *hw_priv, u16 addr, 
+                    void *buf, size_t buf_len)
+{
+       int ret;
+       sdio_lock(hw_priv);
+       ret = __xradio_read(hw_priv, addr, buf, buf_len, 0);
+       sdio_unlock(hw_priv);
+       return ret;
+}
+
+int xradio_reg_write(struct xradio_common *hw_priv, u16 addr, 
+                     const void *buf, size_t buf_len)
+{
+       int ret;
+       sdio_lock(hw_priv);
+       ret = __xradio_write(hw_priv, addr, buf, buf_len, 0);
+       sdio_unlock(hw_priv);
+       return ret;
+}
+
+int xradio_data_read(struct xradio_common *hw_priv, void *buf, size_t buf_len)
+{
+       int ret, retry = 1;
+       sdio_lock(hw_priv);
+       {
+               int buf_id_rx = hw_priv->buf_id_rx;
+               while (retry <= MAX_RETRY) {
+                       ret = __xradio_read(hw_priv, HIF_IN_OUT_QUEUE_REG_ID, buf,
+                                           buf_len, buf_id_rx + 1);
+                       if (!ret) {
+                               buf_id_rx = (buf_id_rx + 1) & 3;
+                               hw_priv->buf_id_rx = buf_id_rx;
+                               break;
+                       } else {
+                               //~dgp this retrying stuff is silly as it can crash the fw if there is nothing to read
+                               dev_err(hw_priv->pdev, "data read error :%d - attempt %d of %d\n", ret, retry, MAX_RETRY);
+                               retry++;
+                               mdelay(1);
+                       }
+               }
+       }
+       sdio_unlock(hw_priv);
+       return ret;
+}
+
+int xradio_data_write(struct xradio_common *hw_priv, const void *buf,
+                      size_t buf_len)
+{
+       int ret, retry = 1;
+       sdio_lock(hw_priv);
+       {
+               int buf_id_tx = hw_priv->buf_id_tx;
+               while (retry <= MAX_RETRY) {
+                       ret = __xradio_write(hw_priv, HIF_IN_OUT_QUEUE_REG_ID, buf,
+                                            buf_len, buf_id_tx);
+                       if (!ret) {
+                               buf_id_tx = (buf_id_tx + 1) & 31;
+                               hw_priv->buf_id_tx = buf_id_tx;
+                               break;
+                       } else {
+                               dev_err(hw_priv->pdev, "data write error :%d - attempt %d - %d\n", ret, retry, MAX_RETRY);
+                               retry++;
+                               mdelay(1);
+                       }
+               }
+       }
+       sdio_unlock(hw_priv);
+       return ret;
+}
+
+int xradio_indirect_read(struct xradio_common *hw_priv, u32 addr, void *buf,
+                         size_t buf_len, u32 prefetch, u16 port_addr)
+{
+       u32 val32 = 0;
+       int i, ret;
+
+       if ((buf_len / 2) >= 0x1000) {
+               dev_err(hw_priv->pdev, "Can't read more than 0xfff words.\n");
+               return -EINVAL;
+               goto out;
+       }
+
+       sdio_lock(hw_priv);
+       /* Write address */
+       ret = __xradio_write_reg32(hw_priv, HIF_SRAM_BASE_ADDR_REG_ID, addr);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't write address register.\n");
+               goto out;
+       }
+
+       /* Read CONFIG Register Value - We will read 32 bits */
+       ret = __xradio_read_reg32(hw_priv, HIF_CONFIG_REG_ID, &val32);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't read config register.\n");
+               goto out;
+       }
+
+       /* Set PREFETCH bit */
+       ret = __xradio_write_reg32(hw_priv, HIF_CONFIG_REG_ID, val32 | prefetch);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't write prefetch bit.\n");
+               goto out;
+       }
+
+       /* Check for PRE-FETCH bit to be cleared */
+       for (i = 0; i < 20; i++) {
+               ret = __xradio_read_reg32(hw_priv, HIF_CONFIG_REG_ID, &val32);
+               if (ret < 0) {
+                       dev_err(hw_priv->pdev, "Can't check prefetch bit.\n");
+                       goto out;
+               }
+               if (!(val32 & prefetch))
+                       break;
+               mdelay(i);
+       }
+
+       if (val32 & prefetch) {
+               dev_err(hw_priv->pdev, "Prefetch bit is not cleared.\n");
+               goto out;
+       }
+
+       /* Read data port */
+       ret = __xradio_read(hw_priv, port_addr, buf, buf_len, 0);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't read data port.\n");
+               goto out;
+       }
+
+out:
+       sdio_unlock(hw_priv);
+       return ret;
+}
+
+int xradio_apb_write(struct xradio_common *hw_priv, u32 addr, const void *buf,
+                     size_t buf_len)
+{
+       int ret;
+
+       if ((buf_len / 2) >= 0x1000) {
+               dev_err(hw_priv->pdev, "Can't wrire more than 0xfff words.\n");
+               return -EINVAL;
+       }
+
+       sdio_lock(hw_priv);
+
+       /* Write address */
+       ret = __xradio_write_reg32(hw_priv, HIF_SRAM_BASE_ADDR_REG_ID, addr);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't write address register.\n");
+               goto out;
+       }
+
+       /* Write data port */
+       ret = __xradio_write(hw_priv, HIF_SRAM_DPORT_REG_ID, buf, buf_len, 0);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't write data port.\n");
+               goto out;
+       }
+
+out:
+       sdio_unlock(hw_priv);
+       return ret;
+}
+
+int xradio_ahb_write(struct xradio_common *hw_priv, u32 addr, const void *buf,
+                     size_t buf_len)
+{
+       int ret;
+
+       if ((buf_len / 2) >= 0x1000) {
+               dev_err(hw_priv->pdev, "Can't wrire more than 0xfff words.\n");
+               return -EINVAL;
+       }
+
+       sdio_lock(hw_priv);
+       
+       /* Write address */
+       ret = __xradio_write_reg32(hw_priv, HIF_SRAM_BASE_ADDR_REG_ID, addr);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't write address register.\n");
+               goto out;
+       }
+
+       /* Write data port */
+       ret = __xradio_write(hw_priv, HIF_AHB_DPORT_REG_ID, buf, buf_len, 0);
+       if (ret < 0) {
+               dev_err(hw_priv->pdev, "Can't write data port.\n");
+               goto out;
+       }
+
+out:
+       sdio_unlock(hw_priv);
+       return ret;
+}
diff --git a/drivers/net/wireless/xradio/hwio.h b/drivers/net/wireless/xradio/hwio.h
new file mode 100644 (file)
index 0000000..531c2b8
--- /dev/null
@@ -0,0 +1,229 @@
+/*
+ * hardware interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#ifndef XRADIO_HWIO_H_INCLUDED
+#define XRADIO_HWIO_H_INCLUDED
+
+/* extern */ struct xradio_common;
+
+/* DPLL initial values */
+#define DPLL_INIT_VAL_XRADIO      (0x0EC4F121)
+
+/* Hardware Type Definitions */
+#define HIF_HW_TYPE_XRADIO        (1)
+
+
+/* boot loader start address in SRAM */
+#define DOWNLOAD_BOOT_LOADER_OFFSET   (0x00000000)
+/* 32K, 0x4000 to 0xDFFF */
+#define DOWNLOAD_FIFO_OFFSET          (0x00004000)
+/* 32K */
+#define DOWNLOAD_FIFO_SIZE            (0x00008000)
+/* 128 bytes, 0xFF80 to 0xFFFF */
+#define DOWNLOAD_CTRL_OFFSET          (0x0000FF80)
+#define DOWNLOAD_CTRL_DATA_DWORDS     (32-6)
+
+/* Download control area */
+struct download_cntl_t {
+       /* size of whole firmware file (including Cheksum), host init */
+       u32 ImageSize;
+       /* downloading flags */
+       u32 Flags;
+       /* No. of bytes put into the download, init & updated by host */
+       u32 Put;
+       /* last traced program counter, last ARM reg_pc */
+       u32 TracePc;
+       /* No. of bytes read from the download, host init, device updates */
+       u32 Get;
+       /* r0, boot losader status, host init to pending, device updates */
+       u32 Status;
+       /* Extra debug info, r1 to r14 if status=r0=DOWNLOAD_EXCEPTION */
+       u32 DebugData[DOWNLOAD_CTRL_DATA_DWORDS];
+};
+
+#define        DOWNLOAD_IMAGE_SIZE_REG         \
+       (DOWNLOAD_CTRL_OFFSET + offsetof(struct download_cntl_t, ImageSize))
+#define        DOWNLOAD_FLAGS_REG              \
+       (DOWNLOAD_CTRL_OFFSET + offsetof(struct download_cntl_t, Flags))
+#define DOWNLOAD_PUT_REG               \
+       (DOWNLOAD_CTRL_OFFSET + offsetof(struct download_cntl_t, Put))
+#define DOWNLOAD_TRACE_PC_REG          \
+       (DOWNLOAD_CTRL_OFFSET + offsetof(struct download_cntl_t, TracePc))
+#define        DOWNLOAD_GET_REG                \
+       (DOWNLOAD_CTRL_OFFSET + offsetof(struct download_cntl_t, Get))
+#define        DOWNLOAD_STATUS_REG             \
+       (DOWNLOAD_CTRL_OFFSET + offsetof(struct download_cntl_t, Status))
+#define DOWNLOAD_DEBUG_DATA_REG                \
+       (DOWNLOAD_CTRL_OFFSET + offsetof(struct download_cntl_t, DebugData))
+       
+#define DOWNLOAD_DEBUG_DATA_LEN   (108)
+#define DOWNLOAD_BLOCK_SIZE       (1024)
+
+/* For boot loader detection */
+#define DOWNLOAD_ARE_YOU_HERE     (0x87654321)
+#define DOWNLOAD_I_AM_HERE        (0x12345678)
+
+/* Download error code */
+#define DOWNLOAD_PENDING        (0xFFFFFFFF)
+#define DOWNLOAD_SUCCESS        (0)
+#define DOWNLOAD_EXCEPTION      (1)
+#define DOWNLOAD_ERR_MEM_1      (2)
+#define DOWNLOAD_ERR_MEM_2      (3)
+#define DOWNLOAD_ERR_SOFTWARE   (4)
+#define DOWNLOAD_ERR_FILE_SIZE  (5)
+#define DOWNLOAD_ERR_CHECKSUM   (6)
+#define DOWNLOAD_ERR_OVERFLOW   (7)
+#define DOWNLOAD_ERR_IMAGE      (8)
+#define DOWNLOAD_ERR_HOST       (9)
+#define DOWNLOAD_ERR_ABORT      (10)
+
+#define SYS_BASE_ADDR_SILICON      (0)
+#define AHB_MEMORY_ADDRESS         (SYS_BASE_ADDR_SILICON + 0x08000000)
+#define PAC_BASE_ADDRESS_SILICON   (SYS_BASE_ADDR_SILICON + 0x09000000)
+#define PAC_SHARED_MEMORY_SILICON  (PAC_BASE_ADDRESS_SILICON)
+#define APB_ADDR(addr)             (PAC_SHARED_MEMORY_SILICON + (addr))
+
+/* ***************************************************************
+*Device register definitions
+*************************************************************** */
+/* WBF - SPI Register Addresses */
+#define HIF_ADDR_ID_BASE             (0x0000)
+/* 16/32 bits */
+#define HIF_CONFIG_REG_ID            (0x0000)
+/* 16/32 bits */
+#define HIF_CONTROL_REG_ID           (0x0001)
+/* 16 bits, Q mode W/R */
+#define HIF_IN_OUT_QUEUE_REG_ID      (0x0002)
+/* 32 bits, AHB bus R/W */
+#define HIF_AHB_DPORT_REG_ID         (0x0003)
+/* 16/32 bits */
+#define HIF_SRAM_BASE_ADDR_REG_ID    (0x0004)
+/* 32 bits, APB bus R/W */
+#define HIF_SRAM_DPORT_REG_ID        (0x0005)
+/* 32 bits, t_settle/general */
+#define HIF_TSET_GEN_R_W_REG_ID      (0x0006)
+/* 16 bits, Q mode read, no length */
+#define HIF_FRAME_OUT_REG_ID         (0x0007)
+#define HIF_ADDR_ID_MAX              (HIF_FRAME_OUT_REG_ID)
+
+/* WBF - Control register bit set */
+/* next o/p length, bit 11 to 0 */
+#define HIF_CTRL_NEXT_LEN_MASK     (0x0FFF)
+#define HIF_CTRL_WUP_BIT           (BIT(12))
+#define HIF_CTRL_RDY_BIT           (BIT(13))
+#define HIF_CTRL_IRQ_ENABLE        (BIT(14))
+#define HIF_CTRL_RDY_ENABLE        (BIT(15))
+#define HIF_CTRL_IRQ_RDY_ENABLE    (BIT(14)|BIT(15))
+
+/* SPI Config register bit set */
+#define HIF_CONFIG_FRAME_BIT       (BIT(2))
+#define HIF_CONFIG_WORD_MODE_BITS  (BIT(3)|BIT(4))
+#define HIF_CONFIG_WORD_MODE_1     (BIT(3))
+#define HIF_CONFIG_WORD_MODE_2     (BIT(4))
+#define HIF_CONFIG_ERROR_0_BIT     (BIT(5))
+#define HIF_CONFIG_ERROR_1_BIT     (BIT(6))
+#define HIF_CONFIG_ERROR_2_BIT     (BIT(7))
+/* TBD: Sure??? */
+#define HIF_CONFIG_CSN_FRAME_BIT   (BIT(7))
+#define HIF_CONFIG_ERROR_3_BIT     (BIT(8))
+#define HIF_CONFIG_ERROR_4_BIT     (BIT(9))
+/* QueueM */
+#define HIF_CONFIG_ACCESS_MODE_BIT (BIT(10))
+/* AHB bus */
+#define HIF_CONFIG_AHB_PFETCH_BIT  (BIT(11))
+#define HIF_CONFIG_CPU_CLK_DIS_BIT (BIT(12))
+/* APB bus */
+#define HIF_CONFIG_PFETCH_BIT      (BIT(13))
+/* cpu reset */
+#define HIF_CONFIG_CPU_RESET_BIT   (BIT(14))
+#define HIF_CONFIG_CLEAR_INT_BIT   (BIT(15))
+
+/* For XRADIO the IRQ Enable and Ready Bits are in CONFIG register */
+#define HIF_CONF_IRQ_RDY_ENABLE        (BIT(16)|BIT(17))
+
+int xradio_data_read(struct xradio_common *hw_priv, void *buf, size_t buf_len);
+int xradio_data_write(struct xradio_common *hw_priv, const void *buf, size_t buf_len);
+int xradio_reg_read(struct xradio_common *hw_priv, u16 addr, void *buf, size_t buf_len);
+int xradio_reg_write(struct xradio_common *hw_priv, u16 addr, const void *buf, size_t buf_len);
+int xradio_indirect_read(struct xradio_common *hw_priv, u32 addr, void *buf, 
+                         size_t buf_len, u32 prefetch, u16 port_addr);
+int xradio_apb_write(struct xradio_common *hw_priv, u32 addr, const void *buf, size_t buf_len);
+int xradio_ahb_write(struct xradio_common *hw_priv, u32 addr, const void *buf, size_t buf_len);
+
+
+static inline int xradio_reg_read_16(struct xradio_common *hw_priv,
+                                     u16 addr, u16 *val)
+{
+       int ret    = 0;
+       u32 bigVal = 0;
+       ret = xradio_reg_read(hw_priv, addr, &bigVal, sizeof(bigVal));
+       *val = (u16)bigVal;
+       return ret;
+}
+
+static inline int xradio_reg_write_16(struct xradio_common *hw_priv,
+                                      u16 addr, u16 val)
+{
+       u32 bigVal = (u32)val;
+       return xradio_reg_write(hw_priv, addr, &bigVal, sizeof(bigVal));
+}
+
+static inline int xradio_reg_read_32(struct xradio_common *hw_priv,
+                                      u16 addr, u32 *val)
+{
+       return xradio_reg_read(hw_priv, addr, val, sizeof(val));
+}
+
+static inline int xradio_reg_write_32(struct xradio_common *hw_priv,
+                                      u16 addr, u32 val)
+{
+       return xradio_reg_write(hw_priv, addr, &val, sizeof(val));
+}
+
+static inline int xradio_apb_read(struct xradio_common *hw_priv, u32 addr,
+                                  void *buf, size_t buf_len)
+{
+       return xradio_indirect_read(hw_priv, addr, buf, buf_len, HIF_CONFIG_PFETCH_BIT, 
+                                   HIF_SRAM_DPORT_REG_ID);
+}
+
+static inline int xradio_ahb_read(struct xradio_common *hw_priv, u32 addr,
+                                  void *buf, size_t buf_len)
+{
+       return xradio_indirect_read(hw_priv, addr, buf, buf_len, HIF_CONFIG_AHB_PFETCH_BIT, 
+                                   HIF_AHB_DPORT_REG_ID);
+}
+
+static inline int xradio_apb_read_32(struct xradio_common *hw_priv,
+                                      u32 addr, u32 *val)
+{
+       return xradio_apb_read(hw_priv, addr, val, sizeof(val));
+}
+
+static inline int xradio_apb_write_32(struct xradio_common *hw_priv,
+                                      u32 addr, u32 val)
+{
+       return xradio_apb_write(hw_priv, addr, &val, sizeof(val));
+}
+
+static inline int xradio_ahb_read_32(struct xradio_common *hw_priv,
+                                      u32 addr, u32 *val)
+{
+       return xradio_ahb_read(hw_priv, addr, val, sizeof(val));
+}
+
+static inline int xradio_ahb_write_32(struct xradio_common *hw_priv,
+                                      u32 addr, u32 val)
+{
+       return xradio_ahb_write(hw_priv, addr, &val, sizeof(val));
+}
+
+#endif /* XRADIO_HWIO_H_INCLUDED */
diff --git a/drivers/net/wireless/xradio/keys.c b/drivers/net/wireless/xradio/keys.c
new file mode 100644 (file)
index 0000000..20050e1
--- /dev/null
@@ -0,0 +1,193 @@
+#include <net/mac80211.h>
+
+#include "xradio.h"
+#include "sta.h"
+#include "keys.h"
+
+int xradio_alloc_key(struct xradio_common *hw_priv)
+{
+       int idx;
+
+       idx = ffs(~hw_priv->key_map) - 1;
+       if (idx < 0 || idx > WSM_KEY_MAX_INDEX)
+               return -1;
+
+       hw_priv->key_map |= BIT(idx);
+       hw_priv->keys[idx].entryIndex = idx;
+       return idx;
+}
+
+void xradio_free_key(struct xradio_common *hw_priv, int idx)
+{
+       BUG_ON(!(hw_priv->key_map & BIT(idx)));
+       memset(&hw_priv->keys[idx], 0, sizeof(hw_priv->keys[idx]));
+       hw_priv->key_map &= ~BIT(idx);
+}
+
+void xradio_free_keys(struct xradio_common *hw_priv)
+{
+       memset(&hw_priv->keys, 0, sizeof(hw_priv->keys));
+       hw_priv->key_map = 0;
+}
+
+int xradio_upload_keys(struct xradio_vif *priv)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       int idx, ret = 0;
+
+
+       for (idx = 0; idx <= WSM_KEY_MAX_IDX; ++idx)
+               if (hw_priv->key_map & BIT(idx)) {
+                       ret = wsm_add_key(hw_priv, &hw_priv->keys[idx], priv->if_id);
+                       if (ret < 0)
+                               break;
+               }
+       return ret;
+}
+
+int xradio_set_key(struct ieee80211_hw *dev, enum set_key_cmd cmd,
+                   struct ieee80211_vif *vif, struct ieee80211_sta *sta,
+                   struct ieee80211_key_conf *key)
+{
+#ifdef XRADIO_DISABLE_HW_CRYPTO
+       wiphy_info(dev->wiphy, "hw crypto is disabled, ignoring key request\n");
+       return -EOPNOTSUPP;
+#else
+       int ret = -EOPNOTSUPP;
+       struct xradio_common *hw_priv = dev->priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+
+       wiphy_dbg(dev->wiphy, "vif %d: set_key cmd %d\n", priv->if_id, (int) cmd);
+       
+       mutex_lock(&hw_priv->conf_mutex);
+
+       if (cmd == SET_KEY) {
+               u8 *peer_addr = NULL;
+               int pairwise = (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) ? 1 : 0;
+               int idx = xradio_alloc_key(hw_priv);
+               struct wsm_add_key *wsm_key = &hw_priv->keys[idx];
+
+               if (idx < 0) {
+                       wiphy_err(dev->wiphy, "xradio_alloc_key failed!\n");
+                       ret = -EINVAL;
+                       goto finally;
+               }
+
+               BUG_ON(pairwise && !sta);
+               if (sta)
+                       peer_addr = sta->addr;
+
+               key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
+
+               priv->cipherType = key->cipher;
+               switch (key->cipher) {
+               case WLAN_CIPHER_SUITE_WEP40:
+               case WLAN_CIPHER_SUITE_WEP104:
+                       if (key->keylen > 16) {
+                               xradio_free_key(hw_priv, idx);
+                               wiphy_err(dev->wiphy, "keylen too long=%d!\n", key->keylen);
+                               ret = -EINVAL;
+                               goto finally;
+                       }
+
+                       if (pairwise) {
+                               wsm_key->type = WSM_KEY_TYPE_WEP_PAIRWISE;
+                               memcpy(wsm_key->wepPairwiseKey.peerAddress, peer_addr, ETH_ALEN);
+                               memcpy(wsm_key->wepPairwiseKey.keyData, &key->key[0], key->keylen);
+                               wsm_key->wepPairwiseKey.keyLength = key->keylen;
+                       } else {
+                               wsm_key->type = WSM_KEY_TYPE_WEP_DEFAULT;
+                               memcpy(wsm_key->wepGroupKey.keyData, &key->key[0], key->keylen);
+                               wsm_key->wepGroupKey.keyLength = key->keylen;
+                               wsm_key->wepGroupKey.keyId     = key->keyidx;
+                       }
+                       break;
+               case WLAN_CIPHER_SUITE_TKIP:
+                       if (pairwise) {
+                               wsm_key->type = WSM_KEY_TYPE_TKIP_PAIRWISE;
+                               memcpy(wsm_key->tkipPairwiseKey.peerAddress, peer_addr, ETH_ALEN);
+                               memcpy(wsm_key->tkipPairwiseKey.tkipKeyData, &key->key[0], 16);
+                               memcpy(wsm_key->tkipPairwiseKey.txMicKey, &key->key[16], 8);
+                               memcpy(wsm_key->tkipPairwiseKey.rxMicKey, &key->key[24], 8);
+                       } else {
+                               size_t mic_offset = (priv->mode == NL80211_IFTYPE_AP) ? 16 : 24;
+                               wsm_key->type = WSM_KEY_TYPE_TKIP_GROUP;
+                               memcpy(wsm_key->tkipGroupKey.tkipKeyData,&key->key[0],  16);
+                               memcpy(wsm_key->tkipGroupKey.rxMicKey, &key->key[mic_offset], 8);
+
+                               /* TODO: Where can I find TKIP SEQ? */
+                               memset(wsm_key->tkipGroupKey.rxSeqCounter, 0, 8);
+                               wsm_key->tkipGroupKey.keyId = key->keyidx;
+                       }
+                       break;
+               case WLAN_CIPHER_SUITE_CCMP:
+                       if (pairwise) {
+                               wsm_key->type = WSM_KEY_TYPE_AES_PAIRWISE;
+                               memcpy(wsm_key->aesPairwiseKey.peerAddress, peer_addr, ETH_ALEN);
+                               memcpy(wsm_key->aesPairwiseKey.aesKeyData, &key->key[0], 16);
+                               wiphy_debug(dev->wiphy, "CCMP_PAIRWISE keylen=%d!\n",
+                                               key->keylen);
+                       } else {
+                               wsm_key->type = WSM_KEY_TYPE_AES_GROUP;
+                               memcpy(wsm_key->aesGroupKey.aesKeyData, &key->key[0], 16);
+                               /* TODO: Where can I find AES SEQ? */
+                               memset(wsm_key->aesGroupKey.rxSeqCounter, 0, 8);
+                               wsm_key->aesGroupKey.keyId = key->keyidx;
+                       }
+                       break;
+#ifdef CONFIG_XRADIO_WAPI_SUPPORT
+               case WLAN_CIPHER_SUITE_SMS4:
+                       if (pairwise) {
+                               wsm_key->type = WSM_KEY_TYPE_WAPI_PAIRWISE;
+                               memcpy(wsm_key->wapiPairwiseKey.peerAddress, peer_addr, ETH_ALEN);
+                               memcpy(wsm_key->wapiPairwiseKey.wapiKeyData, &key->key[0],  16);
+                               memcpy(wsm_key->wapiPairwiseKey.micKeyData, &key->key[16], 16);
+                               wsm_key->wapiPairwiseKey.keyId = key->keyidx;
+                               sta_printk(XRADIO_DBG_NIY,"%s: WAPI_PAIRWISE keylen=%d!\n",
+                                      __func__, key->keylen);
+                       } else {
+                               wsm_key->type = WSM_KEY_TYPE_WAPI_GROUP;
+                               memcpy(wsm_key->wapiGroupKey.wapiKeyData, &key->key[0],  16);
+                               memcpy(wsm_key->wapiGroupKey.micKeyData,  &key->key[16], 16);
+                               wsm_key->wapiGroupKey.keyId = key->keyidx;
+                               sta_printk(XRADIO_DBG_NIY,"%s: WAPI_GROUP keylen=%d!\n",
+                                      __func__, key->keylen);
+                       }
+                       break;
+#endif /* CONFIG_XRADIO_WAPI_SUPPORT */
+               default:
+                       wiphy_err(dev->wiphy, "key->cipher unknown(%d)!\n", key->cipher);
+                       xradio_free_key(hw_priv, idx);
+                       ret = -EOPNOTSUPP;
+                       goto finally;
+               }
+               ret = WARN_ON(wsm_add_key(hw_priv, wsm_key, priv->if_id));
+               if (!ret)
+                       key->hw_key_idx = idx;
+               else
+                       xradio_free_key(hw_priv, idx);
+
+               if (!ret && (pairwise || wsm_key->type == WSM_KEY_TYPE_WEP_DEFAULT) && 
+                   (priv->filter4.enable & 0x2))
+                       xradio_set_arpreply(dev, vif);
+       } else if (cmd == DISABLE_KEY) {
+               struct wsm_remove_key wsm_key = {
+                       .entryIndex = key->hw_key_idx,
+               };
+
+               if (wsm_key.entryIndex > WSM_KEY_MAX_IDX) {
+                       ret = -EINVAL;
+                       goto finally;
+               }
+
+               xradio_free_key(hw_priv, wsm_key.entryIndex);
+               ret = wsm_remove_key(hw_priv, &wsm_key, priv->if_id);
+       } else {
+               wiphy_err(dev->wiphy, "Unsupported command\n");
+       }
+
+finally:
+       mutex_unlock(&hw_priv->conf_mutex);
+       return ret;
+#endif // XRADIO_DISABLE_HW_CRYPTO
+}
diff --git a/drivers/net/wireless/xradio/keys.h b/drivers/net/wireless/xradio/keys.h
new file mode 100644 (file)
index 0000000..23c5880
--- /dev/null
@@ -0,0 +1,12 @@
+#ifndef __KEYS_H_
+#define __KEYS_H_INCLUDED
+
+int xradio_alloc_key(struct xradio_common *hw_priv);
+void xradio_free_key(struct xradio_common *hw_priv, int idx);
+void xradio_free_keys(struct xradio_common *hw_priv);
+int xradio_upload_keys(struct xradio_vif *priv);
+int xradio_set_key(struct ieee80211_hw *dev, enum set_key_cmd cmd,
+                   struct ieee80211_vif *vif, struct ieee80211_sta *sta,
+                   struct ieee80211_key_conf *key);
+
+#endif
\ No newline at end of file
diff --git a/drivers/net/wireless/xradio/main.c b/drivers/net/wireless/xradio/main.c
new file mode 100644 (file)
index 0000000..5ee4dd7
--- /dev/null
@@ -0,0 +1,611 @@
+/*
+ * Main code of XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+
+#include <linux/firmware.h>
+#include <net/cfg80211.h>
+#include <linux/of_net.h>
+#include <linux/mmc/sdio_func.h>
+
+#include "xradio.h"
+#include "fwio.h"
+#include "hwio.h"
+#include "bh.h"
+#include "sta.h"
+#include "ap.h"
+#include "keys.h"
+#include "scan.h"
+#include "pm.h"
+#include "sdio.h"
+
+/* TODO: use rates and channels from the device */
+#define RATETAB_ENT(_rate, _rateid, _flags)            \
+       {                                               \
+               .bitrate  = (_rate),    \
+               .hw_value = (_rateid),  \
+               .flags    = (_flags),   \
+       }
+
+static struct ieee80211_rate xradio_rates[] = {
+       RATETAB_ENT(10,  0,   0),
+       RATETAB_ENT(20,  1,   0),
+       RATETAB_ENT(55,  2,   0),
+       RATETAB_ENT(110, 3,   0),
+       RATETAB_ENT(60,  6,  0),
+       RATETAB_ENT(90,  7,  0),
+       RATETAB_ENT(120, 8,  0),
+       RATETAB_ENT(180, 9,  0),
+       RATETAB_ENT(240, 10, 0),
+       RATETAB_ENT(360, 11, 0),
+       RATETAB_ENT(480, 12, 0),
+       RATETAB_ENT(540, 13, 0),
+};
+
+static struct ieee80211_rate xradio_mcs_rates[] = {
+       RATETAB_ENT(65,  14, IEEE80211_TX_RC_MCS),
+       RATETAB_ENT(130, 15, IEEE80211_TX_RC_MCS),
+       RATETAB_ENT(195, 16, IEEE80211_TX_RC_MCS),
+       RATETAB_ENT(260, 17, IEEE80211_TX_RC_MCS),
+       RATETAB_ENT(390, 18, IEEE80211_TX_RC_MCS),
+       RATETAB_ENT(520, 19, IEEE80211_TX_RC_MCS),
+       RATETAB_ENT(585, 20, IEEE80211_TX_RC_MCS),
+       RATETAB_ENT(650, 21, IEEE80211_TX_RC_MCS),
+};
+
+#define xradio_g_rates      (xradio_rates + 0)
+#define xradio_a_rates      (xradio_rates + 4)
+#define xradio_n_rates      (xradio_mcs_rates)
+
+#define xradio_g_rates_size (ARRAY_SIZE(xradio_rates))
+#define xradio_a_rates_size (ARRAY_SIZE(xradio_rates) - 4)
+#define xradio_n_rates_size (ARRAY_SIZE(xradio_mcs_rates))
+
+#define CHAN2G(_channel, _freq, _flags) {   \
+       .band             = NL80211_BAND_2GHZ,  \
+       .center_freq      = (_freq),              \
+       .hw_value         = (_channel),           \
+       .flags            = (_flags),             \
+       .max_antenna_gain = 0,                    \
+       .max_power        = 30,                   \
+}
+
+#define CHAN5G(_channel, _flags) {   \
+       .band             = NL80211_BAND_5GHZ,     \
+       .center_freq      = 5000 + (5 * (_channel)), \
+       .hw_value         = (_channel),              \
+       .flags            = (_flags),                \
+       .max_antenna_gain = 0,                       \
+       .max_power        = 30,                      \
+}
+
+static struct ieee80211_channel xradio_2ghz_chantable[] = {
+       CHAN2G(1, 2412, 0),
+       CHAN2G(2, 2417, 0),
+       CHAN2G(3, 2422, 0),
+       CHAN2G(4, 2427, 0),
+       CHAN2G(5, 2432, 0),
+       CHAN2G(6, 2437, 0),
+       CHAN2G(7, 2442, 0),
+       CHAN2G(8, 2447, 0),
+       CHAN2G(9, 2452, 0),
+       CHAN2G(10, 2457, 0),
+       CHAN2G(11, 2462, 0),
+       CHAN2G(12, 2467, 0),
+       CHAN2G(13, 2472, 0),
+       CHAN2G(14, 2484, 0),
+};
+
+static struct ieee80211_supported_band xradio_band_2ghz = {
+       .channels = xradio_2ghz_chantable,
+       .n_channels = ARRAY_SIZE(xradio_2ghz_chantable),
+       .bitrates = xradio_g_rates,
+       .n_bitrates = xradio_g_rates_size,
+       .ht_cap = {
+               .cap = IEEE80211_HT_CAP_GRN_FLD |
+                      (1 << IEEE80211_HT_CAP_RX_STBC_SHIFT),
+               .ht_supported  = 1,
+               .ampdu_factor  = IEEE80211_HT_MAX_AMPDU_32K,
+               .ampdu_density = IEEE80211_HT_MPDU_DENSITY_NONE,
+               .mcs = {
+                       .rx_mask[0] = 0xFF,
+                       .rx_highest = __cpu_to_le16(0x41),
+                       .tx_params  = IEEE80211_HT_MCS_TX_DEFINED,
+               },
+       },
+};
+
+static const unsigned long xradio_ttl[] = {
+       1 * HZ, /* VO */
+       2 * HZ, /* VI */
+       5 * HZ, /* BE */
+       10 * HZ /* BK */
+};
+
+static const struct ieee80211_ops xradio_ops = {
+       .start             = xradio_start,
+       .stop              = xradio_stop,
+       .add_interface     = xradio_add_interface,
+       .remove_interface  = xradio_remove_interface,
+       .change_interface  = xradio_change_interface,
+       .tx                = xradio_tx,
+       .hw_scan           = xradio_hw_scan,
+#ifdef ROAM_OFFLOAD
+       .sched_scan_start  = xradio_hw_sched_scan_start,
+       .sched_scan_stop   = xradio_hw_sched_scan_stop,
+#endif /*ROAM_OFFLOAD*/
+       .set_tim           = xradio_set_tim,
+       .sta_notify        = xradio_sta_notify,
+       .sta_add           = xradio_sta_add,
+       .sta_remove        = xradio_sta_remove,
+       .set_key           = xradio_set_key,
+       .set_rts_threshold = xradio_set_rts_threshold,
+       .config            = xradio_config,
+       .bss_info_changed  = xradio_bss_info_changed,
+       .prepare_multicast = xradio_prepare_multicast,
+       .configure_filter  = xradio_configure_filter,
+       .conf_tx           = xradio_conf_tx,
+       .get_stats         = xradio_get_stats,
+       .ampdu_action      = xradio_ampdu_action,
+       .flush             = xradio_flush,
+#ifdef CONFIG_PM
+       .suspend           = xradio_wow_suspend,
+       .resume            = xradio_wow_resume,
+#endif /* CONFIG_PM */
+       /* Intentionally not offloaded:                                 */
+       /*.channel_switch        = xradio_channel_switch,               */
+       .remain_on_channel = xradio_remain_on_channel,
+       .cancel_remain_on_channel = xradio_cancel_remain_on_channel,
+};
+
+
+/*************************************** functions ***************************************/
+
+static void xradio_set_ifce_comb(struct xradio_common *hw_priv,
+                                struct ieee80211_hw *hw)
+{
+       hw_priv->if_limits1[0].max = 1;
+
+       hw_priv->if_limits1[0].types = BIT(NL80211_IFTYPE_STATION);
+       hw_priv->if_limits1[1].max = 1;
+       hw_priv->if_limits1[1].types = BIT(NL80211_IFTYPE_AP);
+
+       hw_priv->if_limits2[0].max = 2;
+       hw_priv->if_limits2[0].types = BIT(NL80211_IFTYPE_STATION);
+
+       hw_priv->if_limits3[0].max = 1;
+
+       hw_priv->if_limits3[0].types = BIT(NL80211_IFTYPE_STATION);
+       hw_priv->if_limits3[1].max = 1;
+       hw_priv->if_limits3[1].types = BIT(NL80211_IFTYPE_P2P_CLIENT) |
+                                     BIT(NL80211_IFTYPE_P2P_GO);
+
+       /* TODO:COMBO: mac80211 doesn't yet support more than 1
+        * different channel */
+       hw_priv->if_combs[0].num_different_channels = 1;
+       hw_priv->if_combs[0].max_interfaces = 2;
+       hw_priv->if_combs[0].limits = hw_priv->if_limits1;
+       hw_priv->if_combs[0].n_limits = 2;
+
+       hw_priv->if_combs[1].num_different_channels = 1;
+
+       hw_priv->if_combs[1].max_interfaces = 2;
+       hw_priv->if_combs[1].limits = hw_priv->if_limits2;
+       hw_priv->if_combs[1].n_limits = 1;
+
+       hw_priv->if_combs[2].num_different_channels = 1;
+       hw_priv->if_combs[2].max_interfaces = 2;
+       hw_priv->if_combs[2].limits = hw_priv->if_limits3;
+       hw_priv->if_combs[2].n_limits = 2;
+
+       hw->wiphy->iface_combinations = &hw_priv->if_combs[0];
+       hw->wiphy->n_iface_combinations = 3;
+}
+
+struct ieee80211_hw *xradio_init_common(size_t hw_priv_data_len)
+{
+       int i;
+       struct ieee80211_hw *hw;
+       struct xradio_common *hw_priv;
+       struct ieee80211_supported_band *sband;
+       int band;
+
+       /* Alloc ieee_802.11 hw and xradio_common struct. */
+       hw = ieee80211_alloc_hw(hw_priv_data_len, &xradio_ops);
+       if (!hw)
+               return NULL;
+       hw_priv = hw->priv;
+       memset(hw_priv, 0, sizeof(*hw_priv));
+
+       /* Initialize members of hw_priv. */
+       hw_priv->hw = hw;
+       hw_priv->if_id_slot = 0;
+       hw_priv->roc_if_id = -1;
+       atomic_set(&hw_priv->num_vifs, 0);
+       /* initial rates and channels TODO: fetch from FW */
+       hw_priv->rates = xradio_rates;    
+       hw_priv->mcs_rates = xradio_n_rates;
+#ifdef ROAM_OFFLOAD
+       hw_priv->auto_scanning = 0;
+       hw_priv->frame_rcvd = 0;
+       hw_priv->num_scanchannels = 0;
+       hw_priv->num_2g_channels = 0;
+       hw_priv->num_5g_channels = 0;
+#endif /*ROAM_OFFLOAD*/
+#ifdef AP_AGGREGATE_FW_FIX
+       /* Enable block ACK for 4 TID (BE,VI,VI,VO). */
+       hw_priv->ba_tid_mask = 0xB1;  /*due to HW limitations*/
+#else
+       /* Enable block ACK for every TID but voice. */
+       hw_priv->ba_tid_mask = 0x3F;
+#endif
+       hw_priv->noise = -94;
+       /* hw_priv->beacon_req_id = cpu_to_le32(0); */
+
+       /* Initialize members of ieee80211_hw, it works in UMAC. */
+       hw->sta_data_size = sizeof(struct xradio_sta_priv);
+       hw->vif_data_size = sizeof(struct xradio_vif);
+
+       ieee80211_hw_set(hw, SIGNAL_DBM);
+       ieee80211_hw_set(hw, SUPPORTS_PS);
+       ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
+       ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
+       ieee80211_hw_set(hw, CONNECTION_MONITOR);
+
+/*     hw->flags = IEEE80211_HW_SIGNAL_DBM            |
+                   IEEE80211_HW_SUPPORTS_PS           |
+                   IEEE80211_HW_SUPPORTS_DYNAMIC_PS   |
+                   IEEE80211_HW_REPORTS_TX_ACK_STATUS |
+                   IEEE80211_HW_CONNECTION_MONITOR;*/
+                   //IEEE80211_HW_SUPPORTS_CQM_RSSI     |
+                   /* Aggregation is fully controlled by firmware.
+                    * Do not need any support from the mac80211 stack */
+                   /* IEEE80211_HW_AMPDU_AGGREGATION  | */
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+                   //IEEE80211_HW_SUPPORTS_P2P_PS          |
+                   //IEEE80211_HW_SUPPORTS_CQM_BEACON_MISS |
+                 //  IEEE80211_HW_SUPPORTS_CQM_TX_FAIL     |
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+                   //IEEE80211_HW_BEACON_FILTER;
+
+       hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION)    |
+                                    BIT(NL80211_IFTYPE_ADHOC)      |
+                                    BIT(NL80211_IFTYPE_AP)         |
+                                    BIT(NL80211_IFTYPE_MESH_POINT) |
+                                    BIT(NL80211_IFTYPE_P2P_CLIENT) |
+                                    BIT(NL80211_IFTYPE_P2P_GO);
+
+       /* Support only for limited wowlan functionalities */
+       /* TODO by Icenowy: RESTORE THIS */
+/*     hw->wiphy->wowlan.flags = WIPHY_WOWLAN_ANY | WIPHY_WOWLAN_DISCONNECT;
+       hw->wiphy->wowlan.n_patterns = 0;*/
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       hw->wiphy->flags |= WIPHY_FLAG_AP_UAPSD;
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+       /* fix the problem that driver can not set pro-resp template frame to fw */
+       hw->wiphy->flags |= WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD;
+
+#if defined(CONFIG_XRADIO_DISABLE_BEACON_HINTS)
+       hw->wiphy->flags |= WIPHY_FLAG_DISABLE_BEACON_HINTS;
+#endif
+       hw->wiphy->n_addresses = XRWL_MAX_VIFS;
+       hw->wiphy->addresses   = hw_priv->addresses;
+       hw->wiphy->max_remain_on_channel_duration = 500;
+       hw->extra_tx_headroom = WSM_TX_EXTRA_HEADROOM +
+                               8  /* TKIP IV */      +
+                               12 /* TKIP ICV and MIC */;
+       hw->wiphy->bands[NL80211_BAND_2GHZ] = &xradio_band_2ghz;
+       hw->queues         = AC_QUEUE_NUM;
+       hw->max_rates      = MAX_RATES_STAGE;
+       hw->max_rate_tries = MAX_RATES_RETRY;
+       /* Channel params have to be cleared before registering wiphy again */
+       for (band = 0; band < NUM_NL80211_BANDS; band++) {
+               sband = hw->wiphy->bands[band];
+               if (!sband)
+                       continue;
+               for (i = 0; i < sband->n_channels; i++) {
+                       sband->channels[i].flags = 0;
+                       sband->channels[i].max_antenna_gain = 0;
+                       sband->channels[i].max_power = 30;
+               }
+       }
+       /* hw_priv->channel init value is the local->oper_channel init value;when transplanting,take care */
+       for (band = 0; band < NUM_NL80211_BANDS; band++) {
+               sband = hw->wiphy->bands[band];
+               if (!sband)
+                       continue;
+               if(!hw_priv->channel){
+                       hw_priv->channel = &sband->channels[2];
+               }       
+       }
+       hw->wiphy->max_scan_ssids = WSM_SCAN_MAX_NUM_OF_SSIDS;
+       hw->wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
+       SET_IEEE80211_PERM_ADDR(hw, hw_priv->addresses[0].addr);
+
+       /* Initialize locks. */
+       spin_lock_init(&hw_priv->vif_list_lock);
+       mutex_init(&hw_priv->wsm_cmd_mux);
+       mutex_init(&hw_priv->conf_mutex);
+       mutex_init(&hw_priv->wsm_oper_lock);
+       atomic_set(&hw_priv->tx_lock, 0);
+       sema_init(&hw_priv->tx_lock_sem, 1);
+
+       hw_priv->workqueue = create_singlethread_workqueue(XRADIO_WORKQUEUE);
+       sema_init(&hw_priv->scan.lock, 1);
+       sema_init(&hw_priv->scan.status_lock,1);
+       INIT_WORK(&hw_priv->scan.work, xradio_scan_work);
+#ifdef ROAM_OFFLOAD
+       INIT_WORK(&hw_priv->scan.swork, xradio_sched_scan_work);
+#endif /*ROAM_OFFLOAD*/
+       INIT_DELAYED_WORK(&hw_priv->scan.probe_work, xradio_probe_work);
+       INIT_DELAYED_WORK(&hw_priv->scan.timeout, xradio_scan_timeout);
+       INIT_DELAYED_WORK(&hw_priv->rem_chan_timeout, xradio_rem_chan_timeout);
+       INIT_WORK(&hw_priv->tx_policy_upload_work, tx_policy_upload_work);
+       atomic_set(&hw_priv->upload_count, 0);
+       memset(&hw_priv->connet_time, 0, sizeof(hw_priv->connet_time));
+
+       spin_lock_init(&hw_priv->event_queue_lock);
+       INIT_LIST_HEAD(&hw_priv->event_queue);
+       INIT_WORK(&hw_priv->event_handler, xradio_event_handler);
+       INIT_WORK(&hw_priv->ba_work, xradio_ba_work);
+       spin_lock_init(&hw_priv->ba_lock);
+       init_timer(&hw_priv->ba_timer);
+       hw_priv->ba_timer.data = (unsigned long)hw_priv;
+       hw_priv->ba_timer.function = xradio_ba_timer;
+
+       if (unlikely(xradio_queue_stats_init(&hw_priv->tx_queue_stats,
+                       WLAN_LINK_ID_MAX,xradio_skb_dtor, hw_priv))) {
+               ieee80211_free_hw(hw);
+               return NULL;
+       }
+       for (i = 0; i < AC_QUEUE_NUM; ++i) {
+               if (unlikely(xradio_queue_init(&hw_priv->tx_queue[i],
+                               &hw_priv->tx_queue_stats, i, XRWL_MAX_QUEUE_SZ, xradio_ttl[i]))) {
+                       for (; i > 0; i--)
+                               xradio_queue_deinit(&hw_priv->tx_queue[i - 1]);
+                       xradio_queue_stats_deinit(&hw_priv->tx_queue_stats);
+                       ieee80211_free_hw(hw);
+                       return NULL;
+               }
+       }
+
+       init_waitqueue_head(&hw_priv->channel_switch_done);
+       init_waitqueue_head(&hw_priv->wsm_cmd_wq);
+       init_waitqueue_head(&hw_priv->wsm_startup_done);
+       init_waitqueue_head(&hw_priv->offchannel_wq);
+       hw_priv->wsm_caps.firmwareReady = 0;
+       hw_priv->driver_ready = 0;
+       hw_priv->offchannel_done = 0;
+       wsm_buf_init(&hw_priv->wsm_cmd_buf);
+       spin_lock_init(&hw_priv->wsm_cmd.lock);
+       tx_policy_init(hw_priv);
+       xradio_init_resv_skb(hw_priv);
+       /* add for setting short_frame_max_tx_count(mean wdev->retry_short) to drv,init the max_rate_tries */
+       spin_lock_bh(&hw_priv->tx_policy_cache.lock);
+       hw_priv->long_frame_max_tx_count = hw->conf.long_frame_max_tx_count;
+       hw_priv->short_frame_max_tx_count =
+                       (hw->conf.short_frame_max_tx_count< 0x0F) ?
+                       hw->conf.short_frame_max_tx_count : 0x0F;
+       hw_priv->hw->max_rate_tries = hw->conf.short_frame_max_tx_count;
+       spin_unlock_bh(&hw_priv->tx_policy_cache.lock);
+
+       for (i = 0; i < XRWL_MAX_VIFS; i++)
+               hw_priv->hw_bufs_used_vif[i] = 0;
+
+#ifdef MCAST_FWDING
+       for (i = 0; i < WSM_MAX_BUF; i++)
+               wsm_init_release_buffer_request(hw_priv, i);
+       hw_priv->buf_released = 0;
+#endif
+       hw_priv->vif0_throttle = XRWL_HOST_VIF0_11BG_THROTTLE;
+       hw_priv->vif1_throttle = XRWL_HOST_VIF1_11BG_THROTTLE;
+
+       hw_priv->query_packetID = 0;
+       atomic_set(&hw_priv->query_cnt, 0);
+       INIT_WORK(&hw_priv->query_work, wsm_query_work);
+
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+       atomic_set(&hw_priv->suspend_state, XRADIO_RESUME);
+#endif
+
+       xradio_set_ifce_comb(hw_priv, hw_priv->hw);
+
+       return hw;
+}
+
+void xradio_free_common(struct ieee80211_hw *dev)
+{
+       int i;
+       struct xradio_common *hw_priv = dev->priv;
+
+       cancel_work_sync(&hw_priv->query_work);
+       del_timer_sync(&hw_priv->ba_timer);
+       mutex_destroy(&hw_priv->wsm_oper_lock);
+       mutex_destroy(&hw_priv->conf_mutex);
+       mutex_destroy(&hw_priv->wsm_cmd_mux);
+       wsm_buf_deinit(&hw_priv->wsm_cmd_buf);
+       flush_workqueue(hw_priv->workqueue);
+       destroy_workqueue(hw_priv->workqueue);
+       hw_priv->workqueue = NULL;
+
+       xradio_deinit_resv_skb(hw_priv);
+       if (hw_priv->skb_cache) {
+               dev_kfree_skb(hw_priv->skb_cache);
+               hw_priv->skb_cache = NULL;
+       }
+
+       for (i = 0; i < 4; ++i)
+               xradio_queue_deinit(&hw_priv->tx_queue[i]);
+       xradio_queue_stats_deinit(&hw_priv->tx_queue_stats);
+
+       for (i = 0; i < XRWL_MAX_VIFS; i++) {
+               kfree(hw_priv->vif_list[i]);
+               hw_priv->vif_list[i] = NULL;
+       }
+
+//fixed memory leakage by yangfh
+#ifdef MCAST_FWDING
+       wsm_deinit_release_buffer(hw_priv);
+#endif
+       /* unsigned int i; */
+       ieee80211_free_hw(dev);
+}
+
+int xradio_register_common(struct ieee80211_hw *dev)
+{
+       int err = 0;
+       struct xradio_common *hw_priv = dev->priv;
+
+       SET_IEEE80211_DEV(dev, hw_priv->pdev);
+       err = ieee80211_register_hw(dev);
+       if (err) {
+               dev_dbg(hw_priv->pdev, "Cannot register device (%d).\n", err);
+               return err;
+       }
+       dev_dbg(hw_priv->pdev, "is registered as '%s'\n",
+                  wiphy_name(dev->wiphy));
+
+       hw_priv->driver_ready = 1;
+       wake_up(&hw_priv->wsm_startup_done);
+       return 0;
+}
+
+void xradio_unregister_common(struct ieee80211_hw *dev)
+{
+       struct xradio_common *hw_priv = dev->priv;
+
+       if (wiphy_dev(dev->wiphy)) {
+       ieee80211_unregister_hw(dev);
+               SET_IEEE80211_DEV(dev, NULL);
+       }
+       hw_priv->driver_ready = 0;
+}
+
+int xradio_core_init(struct sdio_func* func)
+{
+       int err = -ENOMEM;
+       u16 ctrl_reg;
+       int if_id;
+       struct ieee80211_hw *dev;
+       struct xradio_common *hw_priv;
+       unsigned char randomaddr[ETH_ALEN];
+       const unsigned char *addr = NULL;
+
+       //init xradio_common
+       dev = xradio_init_common(sizeof(struct xradio_common));
+       if (!dev) {
+               dev_dbg(&func->dev, "xradio_init_common failed\n");
+               return err;
+       }
+       hw_priv = dev->priv;
+       hw_priv->pdev = &func->dev;
+       hw_priv->sdio_func = func;
+       sdio_set_drvdata(func, hw_priv);
+
+       // fill in mac addresses
+       if (hw_priv->pdev->of_node) {
+               addr = of_get_mac_address(hw_priv->pdev->of_node);
+       }
+       if (!addr) {
+               dev_warn(hw_priv->pdev, "no mac address provided, using random\n");
+               eth_random_addr(randomaddr);
+               addr = randomaddr;
+       }
+       memcpy(hw_priv->addresses[0].addr, addr, ETH_ALEN);
+       memcpy(hw_priv->addresses[1].addr, addr, ETH_ALEN);
+       hw_priv->addresses[1].addr[5] += 0x01;
+
+       /*init pm and wakelock. */
+#ifdef CONFIG_PM
+       err = xradio_pm_init(&hw_priv->pm_state, hw_priv);
+       if (err) {
+               dev_dbg(hw_priv->pdev, "xradio_pm_init failed(%d).\n", err);
+               goto err2;
+       }
+#endif
+       /* Register bh thread*/
+       err = xradio_register_bh(hw_priv);
+       if (err) {
+               dev_dbg(hw_priv->pdev, "xradio_register_bh failed(%d).\n", err);
+               goto err3;
+       }
+
+       /* Load firmware and register Interrupt Handler */
+       err = xradio_load_firmware(hw_priv);
+       if (err) {
+               dev_dbg(hw_priv->pdev, "xradio_load_firmware failed(%d).\n", err);
+               goto err4;
+       }
+
+       /* Set sdio blocksize. */
+       sdio_lock(hw_priv);
+       WARN_ON(sdio_set_blk_size(hw_priv,
+                       SDIO_BLOCK_SIZE));
+       sdio_unlock(hw_priv);
+
+       if (wait_event_interruptible_timeout(hw_priv->wsm_startup_done,
+                               hw_priv->wsm_caps.firmwareReady, 3*HZ) <= 0) {
+
+               /* TODO: Needs to find how to reset device */
+               /*       in QUEUE mode properly.           */
+               dev_dbg(hw_priv->pdev, "Firmware Startup Timeout!\n");
+               err = -ETIMEDOUT;
+               goto err5;
+       }
+       dev_dbg(hw_priv->pdev, "Firmware Startup Done.\n");
+
+       /* Keep device wake up. */
+       WARN_ON(xradio_reg_write_16(hw_priv, HIF_CONTROL_REG_ID, HIF_CTRL_WUP_BIT));
+       if (xradio_reg_read_16(hw_priv,HIF_CONTROL_REG_ID, &ctrl_reg))
+               WARN_ON(xradio_reg_read_16(hw_priv,HIF_CONTROL_REG_ID, &ctrl_reg));
+       WARN_ON(!(ctrl_reg & HIF_CTRL_RDY_BIT));
+
+       /* Set device mode parameter. */
+       for (if_id = 0; if_id < xrwl_get_nr_hw_ifaces(hw_priv); if_id++) {
+               /* Set low-power mode. */
+               WARN_ON(wsm_set_operational_mode(hw_priv, &defaultoperationalmode, if_id));
+               /* Enable multi-TX confirmation */
+               WARN_ON(wsm_use_multi_tx_conf(hw_priv, true, if_id));
+       }
+
+       /* Register wireless net device. */
+       err = xradio_register_common(dev);
+       if (err) {
+               dev_dbg(hw_priv->pdev, "xradio_register_common failed(%d)!\n", err);
+               goto err5;
+       }
+
+       return err;
+
+err5:
+       xradio_dev_deinit(hw_priv);
+err4:
+       xradio_unregister_bh(hw_priv);
+err3:
+       xradio_pm_deinit(&hw_priv->pm_state);
+err2:
+/* err1:       MRK: unused label*/
+       xradio_free_common(dev);
+       return err;
+}
+
+void xradio_core_deinit(struct sdio_func* func)
+{
+       struct xradio_common* hw_priv = sdio_get_drvdata(func);
+       if (hw_priv) {
+               xradio_unregister_common(hw_priv->hw);
+               xradio_dev_deinit(hw_priv);
+               xradio_unregister_bh(hw_priv);
+               xradio_pm_deinit(&hw_priv->pm_state);
+               xradio_free_common(hw_priv->hw);
+       }
+       return;
+}
diff --git a/drivers/net/wireless/xradio/main.h b/drivers/net/wireless/xradio/main.h
new file mode 100644 (file)
index 0000000..2238d75
--- /dev/null
@@ -0,0 +1,7 @@
+#ifndef __XRADIO_MAIN_H
+#define __XRADIO_MAIN_H
+
+int xradio_core_init(struct sdio_func* func);
+void xradio_core_deinit(struct sdio_func* func);
+
+#endif
\ No newline at end of file
diff --git a/drivers/net/wireless/xradio/module.c b/drivers/net/wireless/xradio/module.c
new file mode 100644 (file)
index 0000000..2a41c75
--- /dev/null
@@ -0,0 +1,27 @@
+#include <linux/module.h>
+
+#include "xradio.h"
+#include "debug.h"
+#include "sdio.h"
+
+MODULE_AUTHOR("XRadioTech");
+MODULE_DESCRIPTION("XRadioTech WLAN driver core");
+MODULE_LICENSE("GPL");
+MODULE_ALIAS("xradio_core");
+
+/* Init Module function -> Called by insmod */
+static int __init xradio_core_entry(void)
+{
+       int ret = 0;
+       ret = xradio_sdio_register();
+       return ret;
+}
+
+/* Called at Driver Unloading */
+static void __exit xradio_core_exit(void)
+{
+       xradio_sdio_unregister();
+}
+
+module_init(xradio_core_entry);
+module_exit(xradio_core_exit);
diff --git a/drivers/net/wireless/xradio/p2p.c b/drivers/net/wireless/xradio/p2p.c
new file mode 100644 (file)
index 0000000..f32fb43
--- /dev/null
@@ -0,0 +1,62 @@
+#include "xradio.h"
+
+#ifdef TES_P2P_0002_ROC_RESTART
+///w, TES_P2P_0002 WorkAround:
+///w, P2P GO Neg Process and P2P FIND may be collision.
+///w, When P2P Device is waiting for GO NEG CFM in 30ms,
+///w, P2P FIND may end with p2p listen, and then goes to p2p search.
+///w, Then xradio scan will occupy phy on other channel in 3+ seconds.
+///w, P2P Device will not be able to receive the GO NEG CFM.
+///w, We extend the roc period to remaind phy to receive GO NEG CFM as WorkAround.
+
+s32  TES_P2P_0002_roc_dur;
+s32  TES_P2P_0002_roc_sec;
+s32  TES_P2P_0002_roc_usec;
+u32  TES_P2P_0002_packet_id;
+u32  TES_P2P_0002_state =  TES_P2P_0002_STATE_IDLE;
+
+void xradio_frame_monitor(struct xradio_common *hw_priv, struct sk_buff *skb, bool tx) {
+       struct ieee80211_hdr *frame = (struct ieee80211_hdr *)skb->data;
+       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)skb->data;
+
+       u8 *action        = (u8*)&mgmt->u.action.category;
+       u8 *category_code = &(action[0]);
+       u8 *action_code   = &(action[1]);
+       u8 *oui                   = &(action[2]);
+       u8 *subtype       = &(action[5]);
+       u8 *oui_subtype   = &(action[6]);
+
+
+       if(ieee80211_is_action(frame->frame_control)) {
+               if( *category_code == WLAN_CATEGORY_PUBLIC) {
+                       if (*action_code == 0x09) {
+                               if((oui[0] == 0x50) && (oui[1] == 0x6F) &&
+                                  (oui[2] == 0x9A) && (*subtype == 0x09)) {
+                                       if ( *oui_subtype == 0x01 ) {  ///w, GO Negotiation Response
+                                               if((TES_P2P_0002_state == TES_P2P_0002_STATE_IDLE) &&
+                                                  (tx == true)) { ///w, p2p atturbute:status,id=0
+                                                       u8 *go_neg_resp_res = &(action[17]);
+                                                       if (*go_neg_resp_res == 0x0) {
+                                                               TES_P2P_0002_state = TES_P2P_0002_STATE_SEND_RESP;
+                                                               txrx_printk(XRADIO_DBG_WARN, "[ROC_RESTART_STATE_SEND_RESP]\n");
+                                                       }
+                                               }
+                                       } else if ( *oui_subtype == 0x02 ) { ///w, GO Negotiation Confirmation
+                                               if( tx == false ) {
+                                                       TES_P2P_0002_state = TES_P2P_0002_STATE_IDLE;
+                                                       txrx_printk(XRADIO_DBG_WARN, "[ROC_RESTART_STATE_IDLE]"
+                                                                   "[GO Negotiation Confirmation]\n");
+                                               }
+                                       } else if ( *oui_subtype == 0x08 ) { ///w, Provision Discovery Response
+                                               if(tx == false) {
+                                                       TES_P2P_0002_state = TES_P2P_0002_STATE_IDLE;
+                                                       txrx_printk(XRADIO_DBG_WARN, "[ROC_RESTART_STATE_IDLE]"
+                                                                   "[Provision Discovery Response]\n");
+                                               }
+                                       }
+                               }
+                       }
+               }
+       }
+}
+#endif
\ No newline at end of file
diff --git a/drivers/net/wireless/xradio/p2p.h b/drivers/net/wireless/xradio/p2p.h
new file mode 100644 (file)
index 0000000..d86686b
--- /dev/null
@@ -0,0 +1,6 @@
+#ifndef XRADIO_P2P_H
+#define XRADIO_P2P_H
+
+void xradio_frame_monitor(struct xradio_common *hw_priv, struct sk_buff *skb, bool tx);
+
+#endif
diff --git a/drivers/net/wireless/xradio/pm.c b/drivers/net/wireless/xradio/pm.c
new file mode 100644 (file)
index 0000000..c4a87c8
--- /dev/null
@@ -0,0 +1,800 @@
+/*
+ * PM implementation for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+#include <linux/platform_device.h>
+#include <linux/if_ether.h>
+#include "xradio.h"
+#include "pm.h"
+#include "sta.h"
+#include "bh.h"
+#include "sdio.h"
+
+#define XRADIO_BEACON_SKIPPING_MULTIPLIER 3
+
+struct xradio_udp_port_filter {
+       struct wsm_udp_port_filter_hdr hdr;
+       struct wsm_udp_port_filter dhcp;
+       struct wsm_udp_port_filter upnp;
+} __packed;
+
+struct xradio_ether_type_filter {
+       struct wsm_ether_type_filter_hdr hdr;
+       struct wsm_ether_type_filter ip;
+       struct wsm_ether_type_filter pae;
+       struct wsm_ether_type_filter wapi;
+} __packed;
+
+static struct xradio_udp_port_filter xradio_udp_port_filter_on = {
+       .hdr.nrFilters = 2,
+       .dhcp = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_OUT,
+               .portType = WSM_FILTER_PORT_TYPE_DST,
+               .udpPort = __cpu_to_le16(67),
+       },
+       .upnp = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_OUT,
+               .portType = WSM_FILTER_PORT_TYPE_DST,
+               .udpPort = __cpu_to_le16(1900),
+       },
+       /* Please add other known ports to be filtered out here and
+        * update nrFilters field in the header.
+        * Up to 4 filters are allowed. */
+};
+
+static struct wsm_udp_port_filter_hdr xradio_udp_port_filter_off = {
+       .nrFilters = 0,
+};
+
+#ifndef ETH_P_WAPI
+#define ETH_P_WAPI     0x88B4
+#endif
+
+#ifdef TES_P2P_000B_DISABLE_EAPOL_FILTER
+/* TES_P2P_000B WorkAround:
+ * when the link keep 10min more or less(i am not sure),
+ * wpa_s session maybe expired, and want to update group key.
+ * it will use eapol frame(802.1x,0x888E).
+ * if driver suspend, and discard eapol frame, then session end.
+ * i don't know why original code discards eapol frame in suspend.
+ * but now make this filter disable as WorkAround. wzw */
+static struct xradio_ether_type_filter xradio_ether_type_filter_on = {
+       .hdr.nrFilters = 1,
+/*     .ip = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_IN,
+               .etherType = __cpu_to_le16(ETH_P_IP),
+       },*/
+/*     .pae = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_IN,
+               .etherType = __cpu_to_le16(ETH_P_PAE),
+       },*/
+       .wapi = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_IN,
+               .etherType = __cpu_to_le16(ETH_P_WAPI),
+       },
+       /* Please add other known ether types to be filtered out here and
+        * update nrFilters field in the header.
+        * Up to 4 filters are allowed. */
+};
+#else
+static struct xradio_ether_type_filter xradio_ether_type_filter_on = {
+       .hdr.nrFilters = 2,
+/*     .ip = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_IN,
+               .etherType = __cpu_to_le16(ETH_P_IP),
+       },*/
+       .pae = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_IN,
+               .etherType = __cpu_to_le16(ETH_P_PAE),
+       },
+       .wapi = {
+               .filterAction = WSM_FILTER_ACTION_FILTER_IN,
+               .etherType = __cpu_to_le16(ETH_P_WAPI),
+       },
+       /* Please add other known ether types to be filtered out here and
+        * update nrFilters field in the header.
+        * Up to 4 filters are allowed. */
+};
+#endif
+
+static struct wsm_ether_type_filter_hdr xradio_ether_type_filter_off = {
+       .nrFilters = 0,
+};
+
+static int xradio_suspend_late(struct device *dev);
+static void xradio_pm_release(struct device *dev);
+static int xradio_pm_probe(struct platform_device *pdev);
+static int __xradio_wow_suspend(struct xradio_vif *priv,
+                                struct cfg80211_wowlan *wowlan);
+static int __xradio_wow_resume(struct xradio_vif *priv);
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+static int xradio_poweroff_suspend(struct xradio_common *hw_priv);
+static int xradio_poweroff_resume(struct xradio_common *hw_priv);
+#endif
+
+
+/* private */
+struct xradio_suspend_state {
+       unsigned long bss_loss_tmo;
+       unsigned long connection_loss_tmo;
+       unsigned long join_tmo;
+       unsigned long direct_probe;
+       unsigned long link_id_gc;
+       bool beacon_skipping;
+};
+
+static const struct dev_pm_ops xradio_pm_ops = {
+       .suspend_noirq = xradio_suspend_late,
+};
+
+static struct platform_driver xradio_power_driver = {
+       .probe = xradio_pm_probe,
+       .driver = {
+               .name = XRADIO_PM_DEVICE,
+               .pm = &xradio_pm_ops,
+       },
+};
+
+static int xradio_pm_init_common(struct xradio_pm_state *pm,
+                                 struct xradio_common *hw_priv)
+{
+       int ret;
+       pm_printk(XRADIO_DBG_TRC,"%s\n", __FUNCTION__);
+
+       spin_lock_init(&pm->lock);
+       /* Register pm driver. */
+       ret = platform_driver_register(&xradio_power_driver);
+       if (ret) {
+               pm_printk(XRADIO_DBG_ERROR, "%s:platform_driver_register failed(%d)!\n",
+                          __FUNCTION__, ret);
+               return ret;
+       }
+
+       /* Add pm device. */
+       pm->pm_dev = platform_device_alloc(XRADIO_PM_DEVICE, 0);
+       if (!pm->pm_dev) {
+               pm_printk(XRADIO_DBG_ERROR, "%s:platform_device_alloc failed!\n",
+                          __FUNCTION__);
+               platform_driver_unregister(&xradio_power_driver);
+               return -ENOMEM;
+       }
+       pm->pm_dev->dev.platform_data = hw_priv;
+       ret = platform_device_add(pm->pm_dev);
+       if (ret) {
+               pm_printk(XRADIO_DBG_ERROR, "%s:platform_device_add failed(%d)!\n",
+                          __FUNCTION__, ret);
+               platform_driver_unregister(&xradio_power_driver);
+               kfree(pm->pm_dev);
+               pm->pm_dev = NULL;
+       }
+
+       return ret;
+}
+
+static void xradio_pm_deinit_common(struct xradio_pm_state *pm)
+{
+       pm_printk(XRADIO_DBG_TRC,"%s\n", __FUNCTION__);
+       platform_driver_unregister(&xradio_power_driver);
+       if (pm->pm_dev) {
+               pm->pm_dev->dev.platform_data = NULL;
+               platform_device_unregister(pm->pm_dev); /* kfree is already do */
+               pm->pm_dev = NULL;
+       }
+}
+
+#ifdef CONFIG_WAKELOCK
+
+int xradio_pm_init(struct xradio_pm_state *pm,
+                  struct xradio_common *hw_priv)
+{
+       int ret = 0;
+       pm_printk(XRADIO_DBG_TRC,"%s\n", __FUNCTION__);
+
+       ret = xradio_pm_init_common(pm, hw_priv);
+       if (!ret)
+               wake_lock_init(&pm->wakelock, WAKE_LOCK_SUSPEND, XRADIO_WAKE_LOCK);
+       else
+               pm_printk(XRADIO_DBG_ERROR,"xradio_pm_init_common failed!\n");
+       return ret;
+}
+
+void xradio_pm_deinit(struct xradio_pm_state *pm)
+{
+       pm_printk(XRADIO_DBG_TRC,"%s\n", __FUNCTION__);
+       if (wake_lock_active(&pm->wakelock))
+               wake_unlock(&pm->wakelock);
+       wake_lock_destroy(&pm->wakelock);
+       xradio_pm_deinit_common(pm);
+}
+
+void xradio_pm_stay_awake(struct xradio_pm_state *pm,
+                         unsigned long tmo)
+{
+       long cur_tmo;
+       pm_printk(XRADIO_DBG_MSG,"%s\n", __FUNCTION__);
+
+       spin_lock_bh(&pm->lock);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 10, 0))
+       cur_tmo = pm->wakelock.ws.timer.expires - jiffies;
+#else
+       cur_tmo = pm->wakelock.expires - jiffies;
+#endif
+       if (!wake_lock_active(&pm->wakelock) || cur_tmo < (long)tmo)
+               wake_lock_timeout(&pm->wakelock, tmo);
+       spin_unlock_bh(&pm->lock);
+}
+void xradio_pm_lock_awake(struct xradio_pm_state *pm)
+{
+
+       spin_lock_bh(&pm->lock);
+#if (LINUX_VERSION_CODE >= KERNEL_VERSION(3, 10, 0))
+       pm->expires_save = pm->wakelock.ws.timer.expires;
+#else
+       pm->expires_save = pm->wakelock.expires;
+#endif
+       wake_lock_timeout(&pm->wakelock, LONG_MAX);
+       spin_unlock_bh(&pm->lock);
+}
+void xradio_pm_unlock_awake(struct xradio_pm_state *pm)
+{
+
+       spin_lock_bh(&pm->lock);
+       pm->expires_save -= jiffies;
+       if (pm->expires_save)
+               wake_lock_timeout(&pm->wakelock, pm->expires_save);
+       else
+               wake_lock_timeout(&pm->wakelock, 1);
+       spin_unlock_bh(&pm->lock);
+}
+
+#else /* CONFIG_WAKELOCK */
+
+static void xradio_pm_stay_awake_tmo(unsigned long arg)
+{
+}
+
+int xradio_pm_init(struct xradio_pm_state *pm,
+                  struct xradio_common *hw_priv)
+{
+       int ret = 0;
+       pm_printk(XRADIO_DBG_MSG,"%s\n", __FUNCTION__);
+
+       ret = xradio_pm_init_common(pm, hw_priv);
+       if (!ret) {
+               init_timer(&pm->stay_awake);
+               pm->stay_awake.data = (unsigned long)pm;
+               pm->stay_awake.function = xradio_pm_stay_awake_tmo;
+       } else 
+               pm_printk(XRADIO_DBG_ERROR,"xradio_pm_init_common failed!\n");
+       return ret;
+}
+
+void xradio_pm_deinit(struct xradio_pm_state *pm)
+{
+       del_timer_sync(&pm->stay_awake);
+       xradio_pm_deinit_common(pm);
+}
+
+void xradio_pm_stay_awake(struct xradio_pm_state *pm,
+                         unsigned long tmo)
+{
+       long cur_tmo;
+
+       spin_lock_bh(&pm->lock);
+       cur_tmo = pm->stay_awake.expires - jiffies;
+       if (!timer_pending(&pm->stay_awake) || cur_tmo < (long)tmo)
+               mod_timer(&pm->stay_awake, jiffies + tmo);
+       spin_unlock_bh(&pm->lock);
+}
+void xradio_pm_lock_awake(struct xradio_pm_state *pm)
+{
+
+       spin_lock_bh(&pm->lock);
+       pm->expires_save = pm->stay_awake.expires;
+       mod_timer(&pm->stay_awake, jiffies + LONG_MAX);
+       spin_unlock_bh(&pm->lock);
+}
+void xradio_pm_unlock_awake(struct xradio_pm_state *pm)
+{
+
+       spin_lock_bh(&pm->lock);
+       if (time_before(jiffies, pm->expires_save))
+               mod_timer(&pm->stay_awake, pm->expires_save);
+       else
+               mod_timer(&pm->stay_awake, jiffies + 1);
+       spin_unlock_bh(&pm->lock);
+}
+#endif /* CONFIG_WAKELOCK */
+
+static long xradio_suspend_work(struct delayed_work *work)
+{
+       int ret = cancel_delayed_work(work);
+       long tmo;
+       pm_printk(XRADIO_DBG_TRC, "%s\n", __func__);
+
+       if (ret > 0) {
+               /* Timer is pending */
+               tmo = work->timer.expires - jiffies;
+               if (tmo < 0)
+                       tmo = 0;
+       } else {
+               tmo = -1;
+       }
+       return tmo;
+}
+
+static int xradio_resume_work(struct xradio_common *hw_priv,
+                              struct delayed_work *work,
+                              unsigned long tmo)
+{
+       pm_printk(XRADIO_DBG_TRC, "%s\n", __func__);
+       if ((long)tmo < 0)
+               return 1;
+
+       return queue_delayed_work(hw_priv->workqueue, work, tmo);
+}
+
+static int xradio_suspend_late(struct device *dev)
+{
+       struct xradio_common *hw_priv = dev->platform_data;
+
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+       if (XRADIO_POWEROFF_SUSP == atomic_read(&hw_priv->suspend_state)) {
+               return 0; /* we don't rx data when power down wifi.*/
+       }
+#endif
+
+       //if (atomic_read(&hw_priv->bh_rx)) {
+       //      pm_printk(XRADIO_DBG_WARN, "%s: Suspend interrupted.\n", __func__);
+       //      return -EAGAIN;
+       //}
+       return 0;
+}
+
+static void xradio_pm_release(struct device *dev)
+{
+       pm_printk(XRADIO_DBG_TRC, "%s\n", __func__);
+}
+
+static int xradio_pm_probe(struct platform_device *pdev)
+{
+       pm_printk(XRADIO_DBG_TRC, "%s\n", __func__);
+       pdev->dev.release = xradio_pm_release;
+       return 0;
+}
+
+int xradio_wow_suspend(struct ieee80211_hw *hw, struct cfg80211_wowlan *wowlan)
+{
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_vif *priv;
+       int i, ret = 0;
+
+
+       if(hw_priv->bh_error) return -EBUSY;
+       WARN_ON(!atomic_read(&hw_priv->num_vifs));
+
+       if (work_pending(&hw_priv->query_work))
+               return -EBUSY;
+
+#ifdef ROAM_OFFLOAD
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if (!priv)
+                       continue;
+               if((priv->vif->type == NL80211_IFTYPE_STATION)
+               && (priv->join_status == XRADIO_JOIN_STATUS_STA)) {
+                       down(&hw_priv->scan.lock);
+                       hw_priv->scan.if_id = priv->if_id;
+                       xradio_sched_scan_work(&hw_priv->scan.swork);
+               }
+       }
+#endif /*ROAM_OFFLOAD*/
+
+       /* Do not suspend when datapath is not idle */
+       if (hw_priv->tx_queue_stats.num_queued[0] + 
+                 hw_priv->tx_queue_stats.num_queued[1]) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                          "because of tx_queue is not empty.\n");
+               return -EBUSY;
+       }
+
+       /* Make sure there is no configuration requests in progress. */
+       if (!mutex_trylock(&hw_priv->conf_mutex)) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                          "because of configuration requests.\n");
+               return -EBUSY;
+       }
+
+       /* Make sure there is no wsm_oper_lock in progress. */
+       if (!mutex_trylock(&hw_priv->wsm_oper_lock)) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                          "because of wsm_oper_lock.\n");
+               mutex_unlock(&hw_priv->conf_mutex);
+               return -EBUSY;
+       }
+
+       /* Do not suspend when scanning or ROC*/
+       if (down_trylock(&hw_priv->scan.lock)) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                          "because of scan requests.\n");
+               goto revert1;
+       }
+
+       if (delayed_work_pending(&hw_priv->scan.probe_work)) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                          "because of probe frames tx in progress.\n");
+               goto revert2;
+       }
+
+       /* Lock TX. */
+       wsm_lock_tx_async(hw_priv);
+
+       /* Wait to avoid possible race with bh code.
+        * But do not wait too long... */
+       if (wait_event_timeout(hw_priv->bh_evt_wq, 
+                              !hw_priv->hw_bufs_used, HZ / 10) <= 0) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                          "because of there are frames not confirm.\n");
+               goto revert3;
+       }
+               
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+//     if (STANDBY_WITH_POWER_OFF == standby_level) {
+       if (1) {
+               return xradio_poweroff_suspend(hw_priv);
+       }
+#endif
+       
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if (!priv)
+                       continue;
+
+               ret = __xradio_wow_suspend(priv, wowlan);
+               if (ret) {
+                       for (; i >= 0; i--) {
+                               if (!hw_priv->vif_list[i])
+                                       continue;
+                               priv = (struct xradio_vif *)hw_priv->vif_list[i]->drv_priv;
+                               __xradio_wow_resume(priv);
+                       }
+                       pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                                  "because of __xradio_wow_suspend failed!\n");
+                       goto revert3;
+               }
+       }
+
+       /* Stop serving thread */
+       if (xradio_bh_suspend(hw_priv)) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+                          "because of xradio_bh_suspend failed!\n");
+               xradio_wow_resume(hw);
+               return -EBUSY;
+       }
+
+       /* Enable IRQ wake */
+       ret = sdio_pm(hw_priv, true);
+       if (ret) {
+               pm_printk(XRADIO_DBG_WARN, "Don't suspend sbus pm failed\n");
+               xradio_wow_resume(hw);
+               return -EBUSY;
+       }
+
+       /* Force resume if event is coming from the device. */
+       //if (atomic_read(&hw_priv->bh_rx)) {
+       //      pm_printk(XRADIO_DBG_WARN, "Don't suspend "
+       //                 "because of recieved rx event!\n");
+       //      xradio_wow_resume(hw);
+       //      return -EAGAIN;
+       //}
+       return 0;
+
+revert3:
+       wsm_unlock_tx(hw_priv);
+revert2:
+       up(&hw_priv->scan.lock);
+revert1:
+       mutex_unlock(&hw_priv->conf_mutex);
+       mutex_unlock(&hw_priv->wsm_oper_lock);
+       return -EBUSY;
+}
+
+static int __xradio_wow_suspend(struct xradio_vif *priv,
+                               struct cfg80211_wowlan *wowlan)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct xradio_pm_state_vif *pm_state_vif = &priv->pm_state_vif;
+       struct xradio_suspend_state *state;
+       int ret;
+#ifdef MCAST_FWDING
+       struct wsm_forwarding_offload fwdoffload = {
+               .fwenable = 0x1,
+               .flags    = 0x1,
+       };
+#endif
+
+
+       /* Do not suspend when join work is scheduled */
+       if (work_pending(&priv->join_work)) {
+               pm_printk(XRADIO_DBG_WARN, "%s:Do not suspend "
+                          "when join work is scheduled\n", __func__);
+               goto revert1;
+       }
+
+       /* Set UDP filter */
+       wsm_set_udp_port_filter(hw_priv, &xradio_udp_port_filter_on.hdr,
+                               priv->if_id);
+
+       /* Set ethernet frame type filter */
+       wsm_set_ether_type_filter(hw_priv, &xradio_ether_type_filter_on.hdr,
+                                 priv->if_id);
+
+       /* Set IP multicast filter */
+    wsm_set_host_sleep(hw_priv, 1, priv->if_id);
+    
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               WARN_ON(wsm_set_keepalive_filter(priv, true));
+
+#ifdef XRADIO_SUSPEND_RESUME_FILTER_ENABLE
+       /* Set Multicast Address Filter */
+       if (priv->multicast_filter.numOfAddresses) {
+               priv->multicast_filter.enable = 1;
+               wsm_set_multicast_filter(hw_priv, &priv->multicast_filter, priv->if_id);
+       }
+
+       /* Set Enable Broadcast Address Filter */
+       priv->broadcast_filter.action_mode = 1;
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               priv->broadcast_filter.address_mode = 3;
+
+       xradio_set_macaddrfilter(hw_priv, priv, (u8 *)&priv->broadcast_filter);
+#endif
+
+#ifdef MCAST_FWDING
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               WARN_ON(wsm_set_forwarding_offlad(hw_priv, &fwdoffload,priv->if_id));
+#endif
+
+       /* Allocate state */
+       state = kzalloc(sizeof(struct xradio_suspend_state), GFP_KERNEL);
+       if (!state) {
+               pm_printk(XRADIO_DBG_WARN, "%s:Do not suspend "
+                          "alloc xradio_suspend_state failed.\n", __func__);
+               goto revert2;
+       }
+       /* Store delayed work states. */
+       state->bss_loss_tmo        = xradio_suspend_work(&priv->bss_loss_work);
+       state->connection_loss_tmo = xradio_suspend_work(&priv->connection_loss_work);
+       state->join_tmo   = xradio_suspend_work(&priv->join_timeout);
+       state->link_id_gc = xradio_suspend_work(&priv->link_id_gc_work);
+
+       /* Enable beacon skipping */
+       if (priv->join_status == XRADIO_JOIN_STATUS_STA && 
+                 priv->join_dtim_period &&  !priv->has_multicast_subscription) {
+               state->beacon_skipping = true;
+               wsm_set_beacon_wakeup_period(hw_priv, priv->join_dtim_period,
+                                            XRADIO_BEACON_SKIPPING_MULTIPLIER * \
+                                            priv->join_dtim_period, priv->if_id);
+       }
+
+       ret = timer_pending(&priv->mcast_timeout);
+       if (ret) {
+               pm_printk(XRADIO_DBG_WARN, "%s:Do not suspend "
+                          "mcast timeout timer_pending failed.\n", __func__);
+               goto revert3;
+       }
+
+       /* Store suspend state */
+       pm_state_vif->suspend_state = state;
+
+       return 0;
+
+revert3:
+       xradio_resume_work(hw_priv, &priv->bss_loss_work, state->bss_loss_tmo);
+       xradio_resume_work(hw_priv, &priv->connection_loss_work, 
+                          state->connection_loss_tmo);
+       xradio_resume_work(hw_priv, &priv->join_timeout, state->join_tmo);
+       xradio_resume_work(hw_priv, &priv->link_id_gc_work, state->link_id_gc);
+       kfree(state);
+
+revert2:
+       wsm_set_udp_port_filter(hw_priv, &xradio_udp_port_filter_off, priv->if_id);
+       wsm_set_ether_type_filter(hw_priv, &xradio_ether_type_filter_off, priv->if_id);
+    wsm_set_host_sleep(hw_priv, 0, priv->if_id);
+
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               WARN_ON(wsm_set_keepalive_filter(priv, false));
+
+#ifdef XRADIO_SUSPEND_RESUME_FILTER_ENABLE
+       /* Set Multicast Address Filter */
+       if (priv->multicast_filter.numOfAddresses) {
+               priv->multicast_filter.enable = 0;
+               wsm_set_multicast_filter(hw_priv, &priv->multicast_filter, priv->if_id);
+       }
+
+       /* Set Enable Broadcast Address Filter */
+       priv->broadcast_filter.action_mode = 0;
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               priv->broadcast_filter.address_mode = 0;
+       xradio_set_macaddrfilter(hw_priv, priv, (u8 *)&priv->broadcast_filter);
+#endif
+
+#ifdef MCAST_FWDING
+       fwdoffload.flags = 0x0; 
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               WARN_ON(wsm_set_forwarding_offlad(hw_priv, &fwdoffload,priv->if_id));
+#endif
+
+revert1:
+       /* mutex_unlock(&hw_priv->conf_mutex); */
+       return -EBUSY;
+}
+
+int xradio_wow_resume(struct ieee80211_hw *hw)
+{
+
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_vif *priv;
+       int i, ret = 0;
+
+
+       WARN_ON(!atomic_read(&hw_priv->num_vifs));
+       if(hw_priv->bh_error) return 0;
+
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+       if (XRADIO_POWEROFF_SUSP == atomic_read(&hw_priv->suspend_state)) {
+               return xradio_poweroff_resume(hw_priv);
+       }
+#endif
+
+       /* Disable IRQ wake */
+       sdio_pm(hw_priv, false);
+
+       up(&hw_priv->scan.lock);
+
+       /* Resume BH thread */
+       WARN_ON(xradio_bh_resume(hw_priv));
+
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if (!priv)
+                       continue;
+               ret = __xradio_wow_resume(priv);
+               if (ret) {
+                       pm_printk(XRADIO_DBG_ERROR, "%s:__xradio_wow_resume failed!\n", __func__);
+                       break;
+               }
+       }
+
+       wsm_unlock_tx(hw_priv);
+
+       /* Unlock configuration mutex */
+       mutex_unlock(&hw_priv->conf_mutex);
+       mutex_unlock(&hw_priv->wsm_oper_lock);
+
+       return ret;
+}
+
+static int __xradio_wow_resume(struct xradio_vif *priv)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct xradio_pm_state_vif *pm_state_vif = &priv->pm_state_vif;
+       struct xradio_suspend_state *state;
+#ifdef MCAST_FWDING
+       struct wsm_forwarding_offload fwdoffload = {
+               .fwenable = 0x1,
+               .flags = 0x0,
+       };
+#endif
+
+
+       /* Restore suspend state */
+       state = pm_state_vif->suspend_state;
+       pm_state_vif->suspend_state = NULL;
+
+#ifdef ROAM_OFFLOAD
+       if((priv->vif->type == NL80211_IFTYPE_STATION)
+       && (priv->join_status == XRADIO_JOIN_STATUS_STA))
+               xradio_hw_sched_scan_stop(hw_priv);
+#endif /*ROAM_OFFLOAD*/
+
+       if (state->beacon_skipping) {
+#ifdef XRADIO_USE_LONG_DTIM_PERIOD
+               int join_dtim_period_extend;
+               if (priv->join_dtim_period <= 3) {
+                       join_dtim_period_extend = priv->join_dtim_period * 3;
+               } else if (priv->join_dtim_period <= 5) {
+                       join_dtim_period_extend = priv->join_dtim_period * 2;
+               } else {
+                       join_dtim_period_extend = priv->join_dtim_period;
+               }
+               wsm_set_beacon_wakeup_period(hw_priv,
+                       ((priv->beacon_int * join_dtim_period_extend) > MAX_BEACON_SKIP_TIME_MS ?
+                        1 : join_dtim_period_extend) , 0, priv->if_id);
+#else
+               wsm_set_beacon_wakeup_period(hw_priv, priv->beacon_int *
+                       (priv->join_dtim_period > MAX_BEACON_SKIP_TIME_MS ? 1 : priv->join_dtim_period), 
+                       0, priv->if_id);
+#endif
+               state->beacon_skipping = false;
+       }
+
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               WARN_ON(wsm_set_keepalive_filter(priv, false));
+
+#ifdef XRADIO_SUSPEND_RESUME_FILTER_ENABLE
+       /* Set Multicast Address Filter */
+       if (priv->multicast_filter.numOfAddresses) {
+               priv->multicast_filter.enable = 0;
+               wsm_set_multicast_filter(hw_priv, &priv->multicast_filter, priv->if_id);
+       }
+       /* Set Enable Broadcast Address Filter */
+       priv->broadcast_filter.action_mode = 0;
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               priv->broadcast_filter.address_mode = 0;
+       xradio_set_macaddrfilter(hw_priv, priv, (u8 *)&priv->broadcast_filter);
+#endif
+
+#ifdef MCAST_FWDING
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP)
+               WARN_ON(wsm_set_forwarding_offlad(hw_priv, &fwdoffload,priv->if_id));
+#endif
+
+       /* Resume delayed work */
+       xradio_resume_work(hw_priv, &priv->bss_loss_work, state->bss_loss_tmo);
+       xradio_resume_work(hw_priv, &priv->connection_loss_work,
+                          state->connection_loss_tmo);
+       xradio_resume_work(hw_priv, &priv->join_timeout, state->join_tmo);
+       xradio_resume_work(hw_priv, &priv->link_id_gc_work, state->link_id_gc);
+
+       /* Remove UDP port filter */
+       wsm_set_udp_port_filter(hw_priv, &xradio_udp_port_filter_off, priv->if_id);
+
+       /* Remove ethernet frame type filter */
+       wsm_set_ether_type_filter(hw_priv, &xradio_ether_type_filter_off, priv->if_id);
+       
+       /* Remove IP multicast filter */
+    wsm_set_host_sleep(hw_priv, 0, priv->if_id);
+       /* Free memory */
+       kfree(state);
+
+       return 0;
+}
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+static int xradio_poweroff_suspend(struct xradio_common *hw_priv)
+{
+
+       //flush all work.
+       cancel_work_sync(&hw_priv->query_work);
+       flush_workqueue(hw_priv->workqueue);
+       /* Schedule hardware restart, ensure no cmds in progress.*/
+       mutex_lock(&hw_priv->wsm_cmd_mux);
+       atomic_set(&hw_priv->suspend_state, XRADIO_POWEROFF_SUSP);
+       //hw_priv->hw_restart = true;
+       mutex_unlock(&hw_priv->wsm_cmd_mux);
+       /* Stop serving thread */
+       if (xradio_bh_suspend(hw_priv)) {
+               pm_printk(XRADIO_DBG_WARN, "%s, xradio_bh_suspend failed!\n", __func__);
+               return -EBUSY;
+       }
+
+       return 0;
+}
+
+static int xradio_poweroff_resume(struct xradio_common *hw_priv)
+{
+
+       /* Revert locks */
+       wsm_unlock_tx(hw_priv);
+       up(&hw_priv->scan.lock);
+       mutex_unlock(&hw_priv->conf_mutex);
+       mutex_unlock(&hw_priv->wsm_oper_lock);
+       //if (schedule_work(&hw_priv->hw_restart_work) <= 0)
+       //      pm_printk(XRADIO_DBG_ERROR, "%s restart_work failed!\n", __func__);
+       return 0;
+}
+#endif
diff --git a/drivers/net/wireless/xradio/pm.h b/drivers/net/wireless/xradio/pm.h
new file mode 100644 (file)
index 0000000..6443cbc
--- /dev/null
@@ -0,0 +1,64 @@
+/*
+ * power management interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+
+#ifndef PM_H_INCLUDED
+#define PM_H_INCLUDED
+
+#ifdef CONFIG_WAKELOCK
+#include <linux/wakelock.h>
+#endif
+
+/* ******************************************************************** */
+/* mac80211 API */
+
+#ifdef CONFIG_PM
+
+#define XRADIO_PM_DEVICE   "xradio_pm"
+#define XRADIO_WAKE_LOCK   "xradio_wlan"
+
+/* extern */   struct xradio_common; 
+ /* private */ struct xradio_suspend_state;
+
+struct xradio_pm_state {
+#ifdef CONFIG_WAKELOCK
+       struct wake_lock wakelock;
+#else
+       struct timer_list stay_awake;
+#endif
+       struct platform_device *pm_dev;
+       spinlock_t lock;
+       unsigned long expires_save;
+};
+
+struct xradio_pm_state_vif {
+       struct xradio_suspend_state *suspend_state;
+};
+
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+enum suspend_state {
+       XRADIO_RESUME = 0,
+       XRADIO_CONNECT_SUSP,
+       XRADIO_DISCONNECT_SUSP,
+       XRADIO_POWEROFF_SUSP
+};
+#endif
+int xradio_pm_init(struct xradio_pm_state *pm, struct xradio_common *priv);
+void xradio_pm_deinit(struct xradio_pm_state *pm);
+void xradio_pm_stay_awake(struct xradio_pm_state *pm, unsigned long tmo);
+void xradio_pm_lock_awake(struct xradio_pm_state *pm);
+void xradio_pm_unlock_awake(struct xradio_pm_state *pm);
+int xradio_wow_suspend(struct ieee80211_hw *hw, struct cfg80211_wowlan *wowlan);
+int xradio_wow_resume(struct ieee80211_hw *hw);
+
+#endif /* CONFIG_PM */
+
+#endif
diff --git a/drivers/net/wireless/xradio/queue.c b/drivers/net/wireless/xradio/queue.c
new file mode 100644 (file)
index 0000000..159206b
--- /dev/null
@@ -0,0 +1,822 @@
+/*
+ * Queue implementation for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <net/mac80211.h>
+#include <linux/sched.h>
+#include "xradio.h"
+#include "queue.h"
+
+/* private */ struct xradio_queue_item
+{
+       struct list_head        head;
+       struct sk_buff          *skb;
+       u32                     packetID;
+       unsigned long           queue_timestamp;
+       unsigned long           xmit_timestamp;
+       struct xradio_txpriv    txpriv;
+       u8                      generation;
+       u8                      pack_stk_wr;
+};
+
+static inline void __xradio_queue_lock(struct xradio_queue *queue)
+{
+       struct xradio_queue_stats *stats = queue->stats;
+       if (queue->tx_locked_cnt++ == 0) {
+               txrx_printk(XRADIO_DBG_MSG, "[TX] Queue %d is locked.\n",
+                               queue->queue_id);
+               ieee80211_stop_queue(stats->hw_priv->hw, queue->queue_id);
+       }
+}
+
+static inline void __xradio_queue_unlock(struct xradio_queue *queue)
+{
+       struct xradio_queue_stats *stats = queue->stats;
+       BUG_ON(!queue->tx_locked_cnt);
+       if (--queue->tx_locked_cnt == 0) {
+               txrx_printk(XRADIO_DBG_MSG, "[TX] Queue %d is unlocked.\n",
+                               queue->queue_id);
+               ieee80211_wake_queue(stats->hw_priv->hw, queue->queue_id);
+       }
+}
+
+static inline void xradio_queue_parse_id(u32 packetID, u8 *queue_generation,
+                                               u8 *queue_id,
+                                               u8 *item_generation,
+                                               u8 *item_id,
+                                               u8 *if_id,
+                                               u8 *link_id)
+{
+       *item_id                = (packetID >>  0) & 0xFF;
+       *item_generation        = (packetID >>  8) & 0xFF;
+       *queue_id               = (packetID >> 16) & 0xF;
+       *if_id                  = (packetID >> 20) & 0xF;
+       *link_id                = (packetID >> 24) & 0xF;
+       *queue_generation       = (packetID >> 28) & 0xF;
+}
+
+static inline u32 xradio_queue_make_packet_id(u8 queue_generation, u8 queue_id,
+                                               u8 item_generation, u8 item_id,
+                                               u8 if_id, u8 link_id)
+{
+       /*TODO:COMBO: Add interfaceID to the packetID */
+       return ((u32)item_id << 0) |
+               ((u32)item_generation << 8) |
+               ((u32)queue_id << 16) |
+               ((u32)if_id << 20) |
+               ((u32)link_id << 24) |
+               ((u32)queue_generation << 28);
+}
+
+static void xradio_queue_post_gc(struct xradio_queue_stats *stats,
+                                struct list_head *gc_list)
+{
+       struct xradio_queue_item *item;
+
+       while (!list_empty(gc_list)) {
+               item = list_first_entry(
+                       gc_list, struct xradio_queue_item, head);
+               list_del(&item->head);
+               stats->skb_dtor(stats->hw_priv, item->skb, &item->txpriv);
+               kfree(item);
+       }
+}
+
+static void xradio_queue_register_post_gc(struct list_head *gc_list,
+                                    struct xradio_queue_item *item)
+{
+       struct xradio_queue_item *gc_item;
+       gc_item = kmalloc(sizeof(struct xradio_queue_item), GFP_KERNEL);
+       BUG_ON(!gc_item);
+       memcpy(gc_item, item, sizeof(struct xradio_queue_item));
+       list_add_tail(&gc_item->head, gc_list);
+}
+
+static void __xradio_queue_gc(struct xradio_queue *queue,
+                             struct list_head *head,
+                             bool unlock)
+{
+       struct xradio_queue_stats *stats = queue->stats;
+       struct xradio_queue_item *item = NULL;
+       //struct xradio_vif *priv;
+       int if_id;
+       bool wakeup_stats = false;
+
+       while (!list_empty(&queue->queue)) {
+               struct xradio_txpriv *txpriv;
+               item = list_first_entry(
+                       &queue->queue, struct xradio_queue_item, head);
+               if (time_before(jiffies, item->queue_timestamp+queue->ttl))
+                       break;
+
+               txpriv = &item->txpriv;
+               if_id = txpriv->if_id;
+               --queue->num_queued;
+               --queue->num_queued_vif[if_id];
+               --queue->link_map_cache[if_id][txpriv->link_id];
+               spin_lock_bh(&stats->lock);
+               --stats->num_queued[if_id];
+               if (!--stats->link_map_cache[if_id][txpriv->link_id])
+                       wakeup_stats = true;
+               spin_unlock_bh(&stats->lock);
+               //priv = xrwl_hwpriv_to_vifpriv(stats->hw_priv, if_id);
+               //if (priv) {
+               //      xradio_debug_tx_ttl(priv);
+               //      spin_unlock(&priv->vif_lock);
+               //}
+               xradio_queue_register_post_gc(head, item);
+               item->skb = NULL;
+               list_move_tail(&item->head, &queue->free_pool);
+       }
+
+       if (wakeup_stats)
+               wake_up(&stats->wait_link_id_empty);
+       
+       //modified by yangfh for test WFD
+       if (queue->overfull) {
+               if (queue->num_queued <= ((stats->hw_priv->vif0_throttle +
+                                               stats->hw_priv->vif1_throttle+2)>>1)) {
+                       queue->overfull = false;
+                       if (unlock) {
+                               __xradio_queue_unlock(queue);
+                       }
+               } else if (item) {
+                       unsigned long tmo = item->queue_timestamp + queue->ttl;
+                       mod_timer(&queue->gc, tmo);
+                       xradio_pm_stay_awake(&stats->hw_priv->pm_state,
+                                       tmo - jiffies);
+               }
+       }
+}
+
+static void xradio_queue_gc(unsigned long arg)
+{
+       LIST_HEAD(list);
+       struct xradio_queue *queue =
+               (struct xradio_queue *)arg;
+
+       spin_lock_bh(&queue->lock);
+       __xradio_queue_gc(queue, &list, true);
+       spin_unlock_bh(&queue->lock);
+       xradio_queue_post_gc(queue->stats, &list);
+}
+
+int xradio_queue_stats_init(struct xradio_queue_stats *stats,
+                           size_t map_capacity,
+                           xradio_queue_skb_dtor_t skb_dtor,
+                           struct xradio_common *hw_priv)
+{
+       int i;
+
+       memset(stats, 0, sizeof(*stats));
+       stats->map_capacity = map_capacity;
+       stats->skb_dtor = skb_dtor;
+       stats->hw_priv = hw_priv;
+       spin_lock_init(&stats->lock);
+       init_waitqueue_head(&stats->wait_link_id_empty);
+       for (i = 0; i < XRWL_MAX_VIFS; i++) {
+               stats->link_map_cache[i] = kzalloc(sizeof(int[map_capacity]), GFP_KERNEL);
+               if (!stats->link_map_cache[i]) {
+                       for (; i >= 0; i--)
+                               kfree(stats->link_map_cache[i]);
+                       return -ENOMEM;
+               }
+       }
+
+       return 0;
+}
+
+int xradio_queue_init(struct xradio_queue *queue,
+                     struct xradio_queue_stats *stats,
+                     u8 queue_id,
+                     size_t capacity,
+                     unsigned long ttl)
+{
+       int i;
+
+       memset(queue, 0, sizeof(*queue));
+       queue->stats = stats;
+       queue->capacity = capacity;
+       queue->queue_id = queue_id;
+       queue->ttl = ttl;
+       INIT_LIST_HEAD(&queue->queue);
+       INIT_LIST_HEAD(&queue->pending);
+       INIT_LIST_HEAD(&queue->free_pool);
+       spin_lock_init(&queue->lock);
+       init_timer(&queue->gc);
+       queue->gc.data = (unsigned long)queue;
+       queue->gc.function = xradio_queue_gc;
+
+       queue->pool = kzalloc(sizeof(struct xradio_queue_item) * capacity,
+                                GFP_KERNEL);
+       if (!queue->pool)
+               return -ENOMEM;
+
+       for (i = 0; i < XRWL_MAX_VIFS; i++) {
+               queue->link_map_cache[i] =
+                               kzalloc(sizeof(int[stats->map_capacity]), GFP_KERNEL);
+               if (!queue->link_map_cache[i]) {
+                       for (; i >= 0; i--)
+                               kfree(queue->link_map_cache[i]);
+                       kfree(queue->pool);
+                       queue->pool = NULL;
+                       return -ENOMEM;
+               }
+       }
+
+       for (i = 0; i < capacity; ++i)
+               list_add_tail(&queue->pool[i].head, &queue->free_pool);
+
+       return 0;
+}
+
+/* TODO:COMBO: Flush only a particular interface specific parts */
+int xradio_queue_clear(struct xradio_queue *queue, int if_id)
+{
+       int i, cnt, iter;
+       struct xradio_queue_stats *stats = queue->stats;
+       LIST_HEAD(gc_list);
+
+       cnt = 0;
+       spin_lock_bh(&queue->lock);
+       queue->generation++;
+       queue->generation &= 0xf;
+       list_splice_tail_init(&queue->queue, &queue->pending);
+       while (!list_empty(&queue->pending)) {
+               struct xradio_queue_item *item = list_first_entry(
+                       &queue->pending, struct xradio_queue_item, head);
+               WARN_ON(!item->skb);
+               if (XRWL_ALL_IFS == if_id || item->txpriv.if_id == if_id) {
+                       xradio_queue_register_post_gc(&gc_list, item);
+                       item->skb = NULL;
+                       list_move_tail(&item->head, &queue->free_pool);
+                       cnt++;
+               }
+       }
+       queue->num_queued -= cnt;
+       queue->num_pending = 0;
+       if (XRWL_ALL_IFS != if_id) {
+               queue->num_queued_vif[if_id] = 0;
+               queue->num_pending_vif[if_id] = 0;
+       } else {
+               for (iter = 0; iter < XRWL_MAX_VIFS; iter++) {
+                       queue->num_queued_vif[iter] = 0;
+                       queue->num_pending_vif[iter] = 0;
+               }
+       }
+       spin_lock_bh(&stats->lock);
+       if (XRWL_ALL_IFS != if_id) {
+               for (i = 0; i < stats->map_capacity; ++i) {
+                       stats->num_queued[if_id] -=
+                               queue->link_map_cache[if_id][i];
+                       stats->link_map_cache[if_id][i] -=
+                               queue->link_map_cache[if_id][i];
+                       queue->link_map_cache[if_id][i] = 0;
+               }
+       } else {
+               for (iter = 0; iter < XRWL_MAX_VIFS; iter++) {
+                       for (i = 0; i < stats->map_capacity; ++i) {
+                               stats->num_queued[iter] -=
+                                       queue->link_map_cache[iter][i];
+                               stats->link_map_cache[iter][i] -=
+                                       queue->link_map_cache[iter][i];
+                               queue->link_map_cache[iter][i] = 0;
+                       }
+               }
+       }
+       spin_unlock_bh(&stats->lock);
+       if (unlikely(queue->overfull)) {
+               queue->overfull = false;
+               __xradio_queue_unlock(queue);
+       }
+       spin_unlock_bh(&queue->lock);
+       wake_up(&stats->wait_link_id_empty);
+       xradio_queue_post_gc(stats, &gc_list);
+       return 0;
+}
+
+void xradio_queue_stats_deinit(struct xradio_queue_stats *stats)
+{
+       int i;
+
+       for (i = 0; i < XRWL_MAX_VIFS ; i++) {
+               kfree(stats->link_map_cache[i]);
+               stats->link_map_cache[i] = NULL;
+       }
+}
+
+void xradio_queue_deinit(struct xradio_queue *queue)
+{
+       int i;
+
+       xradio_queue_clear(queue, XRWL_ALL_IFS);
+       del_timer_sync(&queue->gc);
+       INIT_LIST_HEAD(&queue->free_pool);
+       kfree(queue->pool);
+       for (i = 0; i < XRWL_MAX_VIFS; i++) {
+               kfree(queue->link_map_cache[i]);
+               queue->link_map_cache[i] = NULL;
+       }
+       queue->pool = NULL;
+       queue->capacity = 0;
+}
+
+size_t xradio_queue_get_num_queued(struct xradio_vif *priv,
+                                  struct xradio_queue *queue,
+                                  u32 link_id_map)
+{
+       size_t ret;
+       int i, bit;
+       size_t map_capacity = queue->stats->map_capacity;
+
+       if (!link_id_map)
+               return 0;
+
+       spin_lock_bh(&queue->lock);
+       if (likely(link_id_map == (u32) -1)) {
+               ret = queue->num_queued_vif[priv->if_id] -
+                       queue->num_pending_vif[priv->if_id];
+       } else {
+               ret = 0;
+               for (i = 0, bit = 1; i < map_capacity; ++i, bit <<= 1) {
+                       if (link_id_map & bit)
+                               ret +=
+                               queue->link_map_cache[priv->if_id][i];
+               }
+       }
+       spin_unlock_bh(&queue->lock);
+       return ret;
+}
+
+int xradio_queue_put(struct xradio_queue *queue, struct sk_buff *skb,
+                     struct xradio_txpriv *txpriv)
+{
+       int ret = 0;
+       LIST_HEAD(gc_list);
+       struct xradio_queue_stats *stats = queue->stats;
+       /* TODO:COMBO: Add interface ID info to queue item */
+
+       if (txpriv->link_id >= queue->stats->map_capacity)
+               return -EINVAL;
+
+       spin_lock_bh(&queue->lock);
+       if (!WARN_ON(list_empty(&queue->free_pool))) {
+               struct xradio_queue_item *item = list_first_entry(
+                       &queue->free_pool, struct xradio_queue_item, head);
+               BUG_ON(item->skb);
+
+               list_move_tail(&item->head, &queue->queue);
+               item->skb = skb;
+               item->txpriv = *txpriv;
+               item->generation  = 1; /* avoid packet ID is 0.*/
+               item->pack_stk_wr = 0;
+               item->packetID = xradio_queue_make_packet_id(
+                       queue->generation, queue->queue_id,
+                       item->generation, item - queue->pool,
+                       txpriv->if_id, txpriv->raw_link_id);
+               item->queue_timestamp = jiffies;
+
+#ifdef TES_P2P_0002_ROC_RESTART
+               if (TES_P2P_0002_state == TES_P2P_0002_STATE_SEND_RESP) {
+                       TES_P2P_0002_packet_id = item->packetID;
+                       TES_P2P_0002_state = TES_P2P_0002_STATE_GET_PKTID;
+                       txrx_printk(XRADIO_DBG_WARN, "[ROC_RESTART_STATE_GET_PKTID]\n");
+               }
+#endif
+
+               ++queue->num_queued;
+               ++queue->num_queued_vif[txpriv->if_id];
+               ++queue->link_map_cache[txpriv->if_id][txpriv->link_id];
+
+               spin_lock_bh(&stats->lock);
+               ++stats->num_queued[txpriv->if_id];
+               ++stats->link_map_cache[txpriv->if_id][txpriv->link_id];
+               spin_unlock_bh(&stats->lock);
+
+               /*
+                * TX may happen in parallel sometimes.
+                * Leave extra queue slots so we don't overflow.
+                */
+               if (queue->overfull == false &&
+                               queue->num_queued >=
+               ((stats->hw_priv->vif0_throttle +stats->hw_priv->vif1_throttle)
+                               - (num_present_cpus() - 1))) {
+                       queue->overfull = true;
+                       __xradio_queue_lock(queue);
+                       mod_timer(&queue->gc, jiffies);
+                       txrx_printk(XRADIO_DBG_NIY,"!lock queue\n");
+               }
+       } else {
+               ret = -ENOENT;
+       }
+#if 0
+       txrx_printk(XRADIO_DBG_ERROR, "queue_put queue %d, %d, %d\n",
+               queue->num_queued,
+               queue->link_map_cache[txpriv->if_id][txpriv->link_id],
+               queue->num_pending);
+       txrx_printk(XRADIO_DBG_ERROR, "queue_put stats %d, %d\n", stats->num_queued,
+               stats->link_map_cache[txpriv->if_id][txpriv->link_id]);
+#endif
+       spin_unlock_bh(&queue->lock);
+       return ret;
+}
+
+int xradio_queue_get(struct xradio_queue *queue,
+                       int if_id,
+                    u32 link_id_map,
+                    struct wsm_tx **tx,
+                    struct ieee80211_tx_info **tx_info,
+                    struct xradio_txpriv **txpriv)
+{
+       int ret = -ENOENT;
+       struct xradio_queue_item *item;
+       struct xradio_queue_stats *stats = queue->stats;
+       bool wakeup_stats = false;
+
+       spin_lock_bh(&queue->lock);
+       list_for_each_entry(item, &queue->queue, head) {
+               if ((item->txpriv.if_id == if_id) &&
+                       (link_id_map & BIT(item->txpriv.link_id))) {
+                       ret = 0;
+                       break;
+               }
+       }
+
+       if (!WARN_ON(ret)) {
+               *tx = (struct wsm_tx *)item->skb->data;
+               *tx_info = IEEE80211_SKB_CB(item->skb);
+               *txpriv = &item->txpriv;
+               (*tx)->packetID = __cpu_to_le32(item->packetID);
+               list_move_tail(&item->head, &queue->pending);
+               ++queue->num_pending;
+               ++queue->num_pending_vif[item->txpriv.if_id];
+               --queue->link_map_cache[item->txpriv.if_id]
+                               [item->txpriv.link_id];
+               item->xmit_timestamp = jiffies;
+
+               spin_lock_bh(&stats->lock);
+               --stats->num_queued[item->txpriv.if_id];
+               if (!--stats->link_map_cache[item->txpriv.if_id]
+                                       [item->txpriv.link_id])
+                       wakeup_stats = true;
+
+               spin_unlock_bh(&stats->lock);
+#if 0
+               txrx_printk(XRADIO_DBG_ERROR, "queue_get queue %d, %d, %d\n",
+               queue->num_queued,
+               queue->link_map_cache[item->txpriv.if_id][item->txpriv.link_id],
+               queue->num_pending);
+               txrx_printk(XRADIO_DBG_ERROR, "queue_get stats %d, %d\n", stats->num_queued,
+               stats->link_map_cache[item->txpriv.if_id]
+               [item->txpriv.link_id]);
+#endif
+       }
+       spin_unlock_bh(&queue->lock);
+       if (wakeup_stats)
+               wake_up(&stats->wait_link_id_empty);
+
+       return ret;
+}
+
+int xradio_queue_requeue(struct xradio_queue *queue, u32 packetID, bool check)
+{
+       int ret = 0;
+       u8 queue_generation, queue_id, item_generation, item_id, if_id, link_id;
+       struct xradio_queue_item *item;
+       struct xradio_queue_stats *stats = queue->stats;
+
+       xradio_queue_parse_id(packetID, &queue_generation, &queue_id,
+                               &item_generation, &item_id, &if_id, &link_id);
+
+       item = &queue->pool[item_id];
+       if (check && item->txpriv.offchannel_if_id == XRWL_GENERIC_IF_ID) {
+               txrx_printk(XRADIO_DBG_MSG, "Requeued frame dropped for "
+                                               "generic interface id.\n");
+               xradio_queue_remove(queue, packetID);
+               return 0;
+       }
+
+       if (!check)
+               item->txpriv.offchannel_if_id = XRWL_GENERIC_IF_ID;
+
+       /*if_id = item->txpriv.if_id;*/
+
+       spin_lock_bh(&queue->lock);
+       BUG_ON(queue_id != queue->queue_id);
+       if (unlikely(queue_generation != queue->generation)) {
+               ret = -ENOENT;
+       } else if (unlikely(item_id >= (unsigned) queue->capacity)) {
+               WARN_ON(1);
+               ret = -EINVAL;
+       } else if (unlikely(item->generation != item_generation)) {
+               WARN_ON(1);
+               ret = -ENOENT;
+       } else {
+               --queue->num_pending;
+               --queue->num_pending_vif[if_id];
+               ++queue->link_map_cache[if_id][item->txpriv.link_id];
+
+               spin_lock_bh(&stats->lock);
+               ++stats->num_queued[item->txpriv.if_id];
+               ++stats->link_map_cache[if_id][item->txpriv.link_id];
+               spin_unlock_bh(&stats->lock);
+
+               item->generation = ++item_generation;
+               item->packetID = xradio_queue_make_packet_id(
+                       queue_generation, queue_id, item_generation, item_id,
+                       if_id, link_id);
+               list_move(&item->head, &queue->queue);
+#if 0
+               txrx_printk(XRADIO_DBG_ERROR, "queue_requeue queue %d, %d, %d\n",
+               queue->num_queued,
+               queue->link_map_cache[if_id][item->txpriv.link_id],
+               queue->num_pending);
+               txrx_printk(XRADIO_DBG_ERROR, "queue_requeue stats %d, %d\n",
+               stats->num_queued,
+               stats->link_map_cache[if_id][item->txpriv.link_id]);
+#endif
+       }
+       spin_unlock_bh(&queue->lock);
+       return ret;
+}
+
+int xradio_queue_requeue_all(struct xradio_queue *queue)
+{
+       struct xradio_queue_stats *stats = queue->stats;
+       spin_lock_bh(&queue->lock);
+       while (!list_empty(&queue->pending)) {
+               struct xradio_queue_item *item = list_entry(
+                       queue->pending.prev, struct xradio_queue_item, head);
+
+               --queue->num_pending;
+               --queue->num_pending_vif[item->txpriv.if_id];
+               ++queue->link_map_cache[item->txpriv.if_id]
+                               [item->txpriv.link_id];
+
+               spin_lock_bh(&stats->lock);
+               ++stats->num_queued[item->txpriv.if_id];
+               ++stats->link_map_cache[item->txpriv.if_id]
+                               [item->txpriv.link_id];
+               spin_unlock_bh(&stats->lock);
+
+               ++item->generation;
+               item->packetID = xradio_queue_make_packet_id(
+                       queue->generation, queue->queue_id,
+                       item->generation, item - queue->pool,
+                       item->txpriv.if_id, item->txpriv.raw_link_id);
+               list_move(&item->head, &queue->queue);
+       }
+       spin_unlock_bh(&queue->lock);
+
+       return 0;
+}
+
+int xradio_queue_remove(struct xradio_queue *queue, u32 packetID)
+{
+       int ret = 0;
+       u8 queue_generation, queue_id, item_generation, item_id, if_id, link_id;
+       struct xradio_queue_item *item;
+       struct xradio_queue_stats *stats = queue->stats;
+       struct sk_buff *gc_skb = NULL;
+       struct xradio_txpriv gc_txpriv;
+
+       xradio_queue_parse_id(packetID, &queue_generation, &queue_id,
+                               &item_generation, &item_id, &if_id, &link_id);
+
+       item = &queue->pool[item_id];
+
+       spin_lock_bh(&queue->lock);
+       BUG_ON(queue_id != queue->queue_id);
+       /*TODO:COMBO:Add check for interface ID also */
+       if (unlikely(queue_generation != queue->generation)) {
+               ret = -ENOENT;
+       } else if (unlikely(item_id >= (unsigned) queue->capacity)) {
+               WARN_ON(1);
+               ret = -EINVAL;
+       } else if (unlikely(item->generation != item_generation)) {
+               WARN_ON(1);
+               ret = -ENOENT;
+       } else {
+               gc_txpriv = item->txpriv;
+               gc_skb = item->skb;
+               item->skb = NULL;
+               --queue->num_pending;
+               --queue->num_pending_vif[if_id];
+               --queue->num_queued;
+               --queue->num_queued_vif[if_id];
+               ++queue->num_sent;
+               ++item->generation;
+
+               /* Do not use list_move_tail here, but list_move:
+                * try to utilize cache row.
+                */
+               list_move(&item->head, &queue->free_pool);
+
+               if (unlikely(queue->overfull) &&
+                   (queue->num_queued <= ((stats->hw_priv->vif0_throttle + stats->hw_priv->vif1_throttle + 2)>>1))) {
+                       queue->overfull = false;
+                       __xradio_queue_unlock(queue);
+               }
+       }
+       spin_unlock_bh(&queue->lock);
+
+#if 0
+       txrx_printk(XRADIO_DBG_ERROR, "queue_drop queue %d, %d, %d\n",
+               queue->num_queued, queue->link_map_cache[if_id][0],
+               queue->num_pending);
+       txrx_printk(XRADIO_DBG_ERROR, "queue_drop stats %d, %d\n", stats->num_queued,
+               stats->link_map_cache[if_id][0]);
+#endif
+       if (gc_skb)
+               stats->skb_dtor(stats->hw_priv, gc_skb, &gc_txpriv);
+
+       return ret;
+}
+
+int xradio_queue_get_skb(struct xradio_queue *queue, u32 packetID,
+                        struct sk_buff **skb,
+                        const struct xradio_txpriv **txpriv)
+{
+       int ret = 0;
+       u8 queue_generation, queue_id, item_generation, item_id, if_id, link_id;
+       struct xradio_queue_item *item;
+
+       xradio_queue_parse_id(packetID, &queue_generation, &queue_id,
+                               &item_generation, &item_id, &if_id, &link_id);
+
+       item = &queue->pool[item_id];
+
+       spin_lock_bh(&queue->lock);
+       BUG_ON(queue_id != queue->queue_id);
+       /* TODO:COMBO: Add check for interface ID here */
+       if (unlikely(queue_generation != queue->generation)) {
+               ret = -ENOENT;
+       } else if (unlikely(item_id >= (unsigned) queue->capacity)) {
+               WARN_ON(1);
+               ret = -EINVAL;
+       } else if (unlikely(item->generation != item_generation)) {
+               WARN_ON(1);
+               ret = -ENOENT;
+       } else {
+               *skb = item->skb;
+               *txpriv = &item->txpriv;
+       }
+       spin_unlock_bh(&queue->lock);
+       return ret;
+}
+
+void xradio_queue_lock(struct xradio_queue *queue)
+{
+       spin_lock_bh(&queue->lock);
+       __xradio_queue_lock(queue);
+       spin_unlock_bh(&queue->lock);
+}
+
+void xradio_queue_unlock(struct xradio_queue *queue)
+{
+       spin_lock_bh(&queue->lock);
+       __xradio_queue_unlock(queue);
+       spin_unlock_bh(&queue->lock);
+}
+
+bool xradio_queue_get_xmit_timestamp(struct xradio_queue *queue,
+                                    unsigned long *timestamp, int if_id,
+                                    u32 pending_frameID, u32 *Old_frame_ID)
+{
+       struct xradio_queue_item *item;
+       bool ret;
+
+       spin_lock_bh(&queue->lock);
+       ret = !list_empty(&queue->pending);
+       if (ret) {
+               list_for_each_entry(item, &queue->pending, head) {
+                       if (((if_id == XRWL_GENERIC_IF_ID) ||
+                               (if_id == XRWL_ALL_IFS) ||
+                                       (item->txpriv.if_id == if_id)) &&
+                                       (item->packetID != pending_frameID)) {
+                               if (time_before(item->xmit_timestamp,
+                                                       *timestamp)) {
+                                       *timestamp = item->xmit_timestamp;
+                                       *Old_frame_ID = item->packetID;
+                               }
+                       }
+               }
+       }
+       spin_unlock_bh(&queue->lock);
+       return ret;
+}
+
+bool xradio_queue_stats_is_empty(struct xradio_queue_stats *stats,
+                                u32 link_id_map, int if_id)
+{
+       bool empty = true;
+
+       spin_lock_bh(&stats->lock);
+       if (link_id_map == (u32)-1)
+               empty = stats->num_queued[if_id] == 0;
+       else {
+               int i, if_id;
+               for (if_id = 0; if_id < XRWL_MAX_VIFS; if_id++) {
+                       for (i = 0; i < stats->map_capacity; ++i) {
+                               if (link_id_map & BIT(i)) {
+                                       if (stats->link_map_cache[if_id][i]) {
+                                               empty = false;
+                                               break;
+                                       }
+                               }
+                       }
+               }
+       }
+       spin_unlock_bh(&stats->lock);
+
+       return empty;
+}
+
+bool xradio_query_txpkt_timeout(struct xradio_common *hw_priv, int if_id,
+                                u32 pending_pkt_id, long *timeout)
+{
+       int i;
+       bool pending = false;
+       unsigned long timestamp = jiffies;
+       struct xradio_queue      *queue = NULL;
+       struct xradio_queue_item *item  = NULL;
+       struct xradio_queue      *old_queue = NULL;
+       struct xradio_queue_item *old_item  = NULL;
+       u8 pack_stk_wr = 0;
+
+       /* Get oldest frame.*/
+       for (i = 0; i < AC_QUEUE_NUM; ++i) {
+               queue = &hw_priv->tx_queue[i];
+               spin_lock_bh(&queue->lock);
+               if (!list_empty(&queue->pending)) {
+                       list_for_each_entry(item, &queue->pending, head) {
+                               if (((if_id == XRWL_GENERIC_IF_ID) ||
+                                        (if_id == XRWL_ALL_IFS) ||
+                                        (item->txpriv.if_id == if_id)) &&
+                                        (item->packetID != pending_pkt_id)) {
+                                       if (time_before(item->xmit_timestamp, timestamp)) {
+                                               timestamp   = item->xmit_timestamp;
+                                               pack_stk_wr = item->pack_stk_wr;
+                                               old_queue   = queue;
+                                               old_item    = item;
+                                       }
+                               }
+                       }
+                       pending = true;
+               }
+               spin_unlock_bh(&queue->lock);
+       }
+       if (!pending)
+               return false;
+
+       /* Check if frame transmission is timed out.
+        * add (WSM_CMD_LAST_CHANCE_TIMEOUT>>1) for stuck workaround.*/
+       *timeout = timestamp + WSM_CMD_LAST_CHANCE_TIMEOUT - jiffies;
+       if (unlikely(*timeout < 0) && !pack_stk_wr) {
+               struct ieee80211_hdr *frame = NULL;
+               const struct xradio_txpriv *txpriv = NULL;
+               u16 fctl = 0x0;
+               u32 len  = 0x0;
+               u8 if_id = 0, link_id = 0, tid = 0;
+
+               /* query the timeout frame. */
+               spin_lock_bh(&old_queue->lock);
+               if (likely(old_item->skb && !hw_priv->query_packetID)) {
+                       hw_priv->query_packetID = old_item->packetID;
+                       old_item->pack_stk_wr = 1;
+                       atomic_add(1, &hw_priv->query_cnt);
+
+                       /* Info of stuck frames for debug.*/
+                       txpriv = &old_item->txpriv;
+                       frame  = (struct ieee80211_hdr *)(&old_item->skb->data[txpriv->offset]);
+                       fctl   = frame->frame_control;
+                       len    = old_item->skb->len;
+                       if_id  = txpriv->if_id;
+                       link_id = txpriv->link_id;
+                       tid = txpriv->tid;
+               }
+               spin_unlock_bh(&old_queue->lock);
+               /* Dump Info of stuck frames. */
+               if (frame) {
+                       txrx_printk(XRADIO_DBG_ERROR, "TX confirm timeout(%ds).\n", 
+                                   WSM_CMD_LAST_CHANCE_TIMEOUT/HZ);
+                       txrx_printk(XRADIO_DBG_ERROR, "if=%d, linkid=%d, tid=%d, " \
+                                   "old_packetID=0x%08x, fctl=0x%04x, len=%d, wr=%d\n", 
+                                   if_id, link_id, tid,  hw_priv->query_packetID, fctl, len, 
+                                   pack_stk_wr);
+               }
+               /* Return half of timeout for query packet. */
+               *timeout = (WSM_CMD_LAST_CHANCE_TIMEOUT>>1);
+       } else if (unlikely(pack_stk_wr)){
+               *timeout = *timeout + (WSM_CMD_LAST_CHANCE_TIMEOUT>>1);
+               txrx_printk(XRADIO_DBG_MSG,"%s, wr and timeout=%ld\n", __func__, *timeout);
+       }
+       return pending;
+}
diff --git a/drivers/net/wireless/xradio/queue.h b/drivers/net/wireless/xradio/queue.h
new file mode 100644 (file)
index 0000000..d6b64ce
--- /dev/null
@@ -0,0 +1,139 @@
+/*
+ * queue operations for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+
+#ifndef XRADIO_QUEUE_H_INCLUDED
+#define XRADIO_QUEUE_H_INCLUDED
+
+/* private */ struct xradio_queue_item;
+
+/* extern */ struct sk_buff;
+/* extern */ struct wsm_tx;
+/* extern */ struct xradio_common;
+/* extern */ struct xradio_vif;
+/* extern */ struct ieee80211_tx_queue_stats;
+/* extern */ struct xradio_txpriv;
+
+/* forward */ struct xradio_queue_stats;
+
+typedef void (*xradio_queue_skb_dtor_t)(struct xradio_common *priv,
+                                        struct sk_buff *skb,
+                                        const struct xradio_txpriv *txpriv);
+
+struct xradio_queue {
+       struct                    xradio_queue_stats *stats;
+       size_t                    capacity;
+       size_t                    num_queued;
+       size_t                    num_queued_vif[XRWL_MAX_VIFS];
+       size_t                    num_pending;
+       size_t                    num_pending_vif[XRWL_MAX_VIFS];
+       size_t                    num_sent;
+       struct xradio_queue_item *pool;
+       struct list_head          queue;
+       struct list_head          free_pool;
+       struct list_head          pending;
+       int                       tx_locked_cnt;
+       int                      *link_map_cache[XRWL_MAX_VIFS];
+       bool                      overfull;
+       spinlock_t                lock;
+       u8                        queue_id;
+       u8                        generation;
+       struct timer_list               gc;
+       unsigned long             ttl;
+};
+
+struct xradio_queue_stats {
+       spinlock_t              lock;
+       int                    *link_map_cache[XRWL_MAX_VIFS];
+       int                     num_queued[XRWL_MAX_VIFS];
+       size_t                  map_capacity;
+       wait_queue_head_t       wait_link_id_empty;
+       xradio_queue_skb_dtor_t skb_dtor;
+       struct xradio_common   *hw_priv;
+};
+
+struct xradio_txpriv {
+       u8 link_id;
+       u8 raw_link_id;
+       u8 tid;
+       u8 rate_id;
+       u8 offset;
+       u8 if_id;
+       u8 offchannel_if_id;
+       u8 use_bg_rate;
+};
+
+int xradio_queue_stats_init(struct xradio_queue_stats *stats,
+                            size_t map_capacity,
+                            xradio_queue_skb_dtor_t skb_dtor,
+                            struct xradio_common *priv);
+int xradio_queue_init(struct xradio_queue *queue,
+                      struct xradio_queue_stats *stats,
+                      u8 queue_id,
+                      size_t capacity,
+                      unsigned long ttl);
+int xradio_queue_clear(struct xradio_queue *queue, int if_id);
+void xradio_queue_stats_deinit(struct xradio_queue_stats *stats);
+void xradio_queue_deinit(struct xradio_queue *queue);
+
+size_t xradio_queue_get_num_queued(struct xradio_vif *priv,
+                                   struct xradio_queue *queue,
+                                   u32 link_id_map);
+int xradio_queue_put(struct xradio_queue *queue,
+                     struct sk_buff *skb, struct xradio_txpriv *txpriv);
+int xradio_queue_get(struct xradio_queue *queue,
+                     int if_id, u32 link_id_map,
+                     struct wsm_tx **tx,
+                     struct ieee80211_tx_info **tx_info,
+                     struct xradio_txpriv **txpriv);
+
+int xradio_queue_requeue(struct xradio_queue *queue, u32 packetID, bool check);
+
+int xradio_queue_requeue_all(struct xradio_queue *queue);
+int xradio_queue_remove(struct xradio_queue *queue,
+                        u32 packetID);
+
+int xradio_queue_get_skb(struct xradio_queue *queue, u32 packetID,
+                         struct sk_buff **skb,
+                         const struct xradio_txpriv **txpriv);
+void xradio_queue_lock(struct xradio_queue *queue);
+void xradio_queue_unlock(struct xradio_queue *queue);
+bool xradio_queue_get_xmit_timestamp(struct xradio_queue *queue,
+                                     unsigned long *timestamp, int if_id,
+                                     u32 pending_frameID, u32 *Old_frame_ID);
+bool xradio_query_txpkt_timeout(struct xradio_common *hw_priv, int if_id,
+                                u32 pending_pkt_id, long *timeout);
+
+
+bool xradio_queue_stats_is_empty(struct xradio_queue_stats *stats,
+                                 u32 link_id_map, int if_id);
+
+static inline u8 xradio_queue_get_queue_id(u32 packetID)
+{
+       return (packetID >> 16) & 0xF;
+}
+
+static inline u8 xradio_queue_get_if_id(u32 packetID)
+{
+       return (packetID >> 20) & 0xF;
+}
+
+static inline u8 xradio_queue_get_link_id(u32 packetID)
+{
+       return (packetID >> 24) & 0xF;
+}
+
+static inline u8 xradio_queue_get_generation(u32 packetID)
+{
+       return (packetID >>  8) & 0xFF;
+}
+
+#endif /* XRADIO_QUEUE_H_INCLUDED */
diff --git a/drivers/net/wireless/xradio/rx.c b/drivers/net/wireless/xradio/rx.c
new file mode 100644 (file)
index 0000000..fb8be92
--- /dev/null
@@ -0,0 +1,414 @@
+#include <net/mac80211.h>
+
+#include "xradio.h"
+#include "rx.h"
+#include "ht.h"
+#include "p2p.h"
+#include "sta.h"
+#include "bh.h"
+#include "ap.h"
+
+       // MRK: added copy of this tx.c function here for testing, renamed _rx
+
+static void xradio_check_go_neg_conf_success_rx(struct xradio_common *hw_priv,
+                                               u8 *action)
+{
+       if (action[2] == 0x50 && action[3] == 0x6F && action[4] == 0x9A &&
+               action[5] == 0x09 && action[6] == 0x02) {
+               if(action[17] == 0) {
+                       hw_priv->is_go_thru_go_neg = true;
+               }
+               else {
+                       hw_priv->is_go_thru_go_neg = false;
+               }
+       }
+}
+
+
+static int xradio_handle_pspoll(struct xradio_vif *priv,
+                               struct sk_buff *skb)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct ieee80211_sta *sta;
+       struct ieee80211_pspoll *pspoll =
+               (struct ieee80211_pspoll *) skb->data;
+       int link_id = 0;
+       u32 pspoll_mask = 0;
+       int drop = 1;
+       int i;
+
+
+       if (priv->join_status != XRADIO_JOIN_STATUS_AP)
+               goto done;
+       if (memcmp(priv->vif->addr, pspoll->bssid, ETH_ALEN))
+               goto done;
+
+       rcu_read_lock();
+       sta = ieee80211_find_sta(priv->vif, pspoll->ta);
+       if (sta) {
+               struct xradio_sta_priv *sta_priv;
+               sta_priv = (struct xradio_sta_priv *)&sta->drv_priv;
+               link_id = sta_priv->link_id;
+               pspoll_mask = BIT(sta_priv->link_id);
+       }
+       rcu_read_unlock();
+       if (!link_id)
+               goto done;
+
+       priv->pspoll_mask |= pspoll_mask;
+       drop = 0;
+
+       /* Do not report pspols if data for given link id is
+        * queued already. */
+       for (i = 0; i < 4; ++i) {
+               if (xradio_queue_get_num_queued(priv,
+                               &hw_priv->tx_queue[i],
+                               pspoll_mask)) {
+                       xradio_bh_wakeup(hw_priv);
+                       drop = 1;
+                       break;
+               }
+       }
+       txrx_printk(XRADIO_DBG_NIY, "[RX] PSPOLL: %s\n", drop ? "local" : "fwd");
+done:
+       return drop;
+}
+
+
+static void
+xradio_rx_h_ba_stat(struct xradio_vif *priv,
+                   size_t hdrlen, size_t skb_len )
+{
+       struct xradio_common *hw_priv = priv->hw_priv;
+
+
+       if (priv->join_status != XRADIO_JOIN_STATUS_STA)
+               return;
+       if (!xradio_is_ht(&hw_priv->ht_oper))
+               return;
+       if (!priv->setbssparams_done)
+               return;
+
+       spin_lock_bh(&hw_priv->ba_lock);
+       hw_priv->ba_acc_rx += skb_len - hdrlen;
+       if (!(hw_priv->ba_cnt_rx || hw_priv->ba_cnt)) {
+               mod_timer(&hw_priv->ba_timer,
+                       jiffies + XRADIO_BLOCK_ACK_INTERVAL);
+       }
+       hw_priv->ba_cnt_rx++;
+       spin_unlock_bh(&hw_priv->ba_lock);
+}
+
+void xradio_rx_cb(struct xradio_vif *priv,
+                 struct wsm_rx *arg,
+                 struct sk_buff **skb_p)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct sk_buff *skb = *skb_p;
+       struct ieee80211_rx_status *hdr = IEEE80211_SKB_RXCB(skb);
+       struct ieee80211_hdr *frame = (struct ieee80211_hdr *)skb->data;
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)skb->data;
+#endif
+       struct xradio_link_entry *entry = NULL;
+       unsigned long grace_period;
+       bool early_data = false;
+       size_t hdrlen = 0;
+       u8   parse_iv_len = 0;
+
+       dev_dbg(hw_priv->pdev, "vif %d: rx, status %u flags 0x%.8x",
+                       priv->if_id, arg->status, arg->flags);
+       if(ieee80211_is_deauth(frame->frame_control))
+               dev_dbg(hw_priv->pdev, "vif %d: deauth\n", priv->if_id);
+
+       hdr->flag = 0;
+
+       if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED)) {
+               /* STA is stopped. */
+               goto drop;
+       }
+       
+#ifdef TES_P2P_0002_ROC_RESTART
+       xradio_frame_monitor(hw_priv,skb,false);
+#endif
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       if ((ieee80211_is_action(frame->frame_control))
+           && (mgmt->u.action.category == WLAN_CATEGORY_PUBLIC)) {
+               u8 *action = (u8*)&mgmt->u.action.category;
+               xradio_check_go_neg_conf_success_rx(hw_priv, action);
+       }
+#endif
+
+       if (arg->link_id && (arg->link_id != XRADIO_LINK_ID_UNMAPPED)
+                       && (arg->link_id <= XRADIO_MAX_STA_IN_AP_MODE)) {
+               entry = &priv->link_id_db[arg->link_id - 1];
+               if (entry->status == XRADIO_LINK_SOFT &&
+                               ieee80211_is_data(frame->frame_control))
+                       early_data = true;
+               entry->timestamp = jiffies;
+       }
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       else if ((arg->link_id == XRADIO_LINK_ID_UNMAPPED)
+                       && (priv->vif->p2p == WSM_START_MODE_P2P_GO)
+                       && ieee80211_is_action(frame->frame_control)
+                       && (mgmt->u.action.category == WLAN_CATEGORY_PUBLIC)) {
+               txrx_printk(XRADIO_DBG_NIY, "[RX] Going to MAP&RESET link ID\n");
+
+               if (work_pending(&priv->linkid_reset_work))
+                       WARN_ON(1);
+
+               memcpy(&priv->action_frame_sa[0],
+                               ieee80211_get_SA(frame), ETH_ALEN);
+               priv->action_linkid = 0;
+               schedule_work(&priv->linkid_reset_work);
+       }
+
+       if (arg->link_id && (arg->link_id != XRADIO_LINK_ID_UNMAPPED)
+                       && (priv->vif->p2p == WSM_START_MODE_P2P_GO)
+                       && ieee80211_is_action(frame->frame_control)
+                       && (mgmt->u.action.category == WLAN_CATEGORY_PUBLIC)) {
+               /* Link ID already exists for the ACTION frame.
+                * Reset and Remap */
+               if (work_pending(&priv->linkid_reset_work))
+                       WARN_ON(1);
+               memcpy(&priv->action_frame_sa[0],
+                               ieee80211_get_SA(frame), ETH_ALEN);
+               priv->action_linkid = arg->link_id;
+               schedule_work(&priv->linkid_reset_work);
+       }
+#endif
+       if (unlikely(arg->status)) {
+               if (arg->status == WSM_STATUS_MICFAILURE) {
+                       dev_err(priv->hw_priv->pdev, "[RX] IF=%d, MIC failure.\n",
+                                   priv->if_id);
+                       hdr->flag |= RX_FLAG_MMIC_ERROR;
+               } else if (arg->status == WSM_STATUS_NO_KEY_FOUND) {
+                       dev_warn(priv->hw_priv->pdev, "received frame has no key status\n");
+                       //goto drop;
+               } else {
+                       dev_err(priv->hw_priv->pdev, "[RX] IF=%d, Receive failure: %d.\n",
+                               priv->if_id, arg->status);
+                       goto drop;
+               }
+       }
+
+       if (skb->len < sizeof(struct ieee80211_pspoll)) {
+               dev_err(priv->hw_priv->pdev, "Malformed SDU rx'ed. "
+                           "Size is lesser than IEEE header.\n");
+               goto drop;
+       }
+
+       if (unlikely(ieee80211_is_pspoll(frame->frame_control)))
+               if (xradio_handle_pspoll(priv, skb))
+                       goto drop;
+
+       hdr->mactime = 0; /* Not supported by WSM */
+       hdr->band = (arg->channelNumber > 14) ?
+                       NL80211_BAND_5GHZ : NL80211_BAND_2GHZ;
+       hdr->freq = ieee80211_channel_to_frequency(
+                       arg->channelNumber,
+                       hdr->band);
+
+#ifdef AP_HT_COMPAT_FIX
+       if (!priv->ht_compat_det && priv->htcap &&
+               ieee80211_is_data_qos(frame->frame_control)) {
+               if(xradio_apcompat_detect(priv, arg->rxedRate))
+                       goto drop;
+       }
+#endif
+       
+       if (arg->rxedRate >= 14) {
+               hdr->encoding = RX_ENC_HT;
+               hdr->rate_idx = arg->rxedRate - 14;
+       } else if (arg->rxedRate >= 4) {
+               if (hdr->band == NL80211_BAND_5GHZ)
+                       hdr->rate_idx = arg->rxedRate - 6;
+               else
+                       hdr->rate_idx = arg->rxedRate - 2;
+       } else {
+               hdr->rate_idx = arg->rxedRate;
+       }
+
+       hdr->signal = (s8)arg->rcpiRssi;
+       hdr->antenna = 0;
+
+       hdrlen = ieee80211_hdrlen(frame->frame_control);
+
+       if (WSM_RX_STATUS_ENCRYPTION(arg->flags)) {
+               size_t iv_len = 0, icv_len = 0;
+
+               hdr->flag |= RX_FLAG_DECRYPTED;
+
+               /* Oops... There is no fast way to ask mac80211 about
+                * IV/ICV lengths. Even defines are not exposed.*/
+               switch (WSM_RX_STATUS_ENCRYPTION(arg->flags)) {
+               case WSM_RX_STATUS_WEP:
+                       iv_len = 4 /* WEP_IV_LEN */;
+                       icv_len = 4 /* WEP_ICV_LEN */;
+                       break;
+               case WSM_RX_STATUS_TKIP:
+                       iv_len = 8 /* TKIP_IV_LEN */;
+                       icv_len = 4 /* TKIP_ICV_LEN */
+                               + 8 /*MICHAEL_MIC_LEN*/;
+                       break;
+               case WSM_RX_STATUS_AES:
+                       iv_len = 8 /* CCMP_HDR_LEN */;
+                       icv_len = 8 /* CCMP_MIC_LEN */;
+                       break;
+               case WSM_RX_STATUS_WAPI:
+                       iv_len = 18 /* WAPI_HDR_LEN */;
+                       icv_len = 16 /* WAPI_MIC_LEN */;
+                       hdr->flag |= RX_FLAG_IV_STRIPPED;
+                       break;
+               default:
+                       WARN_ON("Unknown encryption type");
+                       goto drop;
+               }
+
+               /* Firmware strips ICV in case of MIC failure. */
+               if (arg->status == WSM_STATUS_MICFAILURE) {
+                       icv_len = 0;
+                       hdr->flag |= RX_FLAG_IV_STRIPPED;
+               }
+
+               if (skb->len < hdrlen + iv_len + icv_len) {
+                       dev_err(priv->hw_priv->pdev, "Mailformed SDU rx'ed. "
+                               "Size is lesser than crypto headers.\n");
+                       goto drop;
+               }
+
+               if (WSM_RX_STATUS_ENCRYPTION(arg->flags) ==
+                   WSM_RX_STATUS_TKIP) {
+                       /* Remove TKIP MIC 8 bytes*/
+                       memmove(skb->data + skb->len-icv_len, 
+                               skb->data + skb->len-icv_len+8, 4);
+                       skb_trim(skb, skb->len - 8);
+                       hdr->flag |= RX_FLAG_MMIC_STRIPPED;
+               } else if (unlikely(WSM_RX_STATUS_ENCRYPTION(arg->flags) ==
+                          WSM_RX_STATUS_WAPI)) {
+                       /* Protocols not defined in mac80211 should be
+                          stripped/crypted in driver/firmware */
+                       /* Remove IV, ICV and MIC */
+                       skb_trim(skb, skb->len - icv_len);
+                       memmove(skb->data + iv_len, skb->data, hdrlen);
+                       skb_pull(skb, iv_len);
+               }
+               parse_iv_len = iv_len;
+       }
+
+       if (ieee80211_is_beacon(frame->frame_control) &&
+               !arg->status &&
+               !memcmp(ieee80211_get_SA(frame), priv->join_bssid,ETH_ALEN)) {
+               const u8 *tim_ie;
+               u8 *ies;
+               size_t ies_len;
+               priv->disable_beacon_filter = false;
+               queue_work(hw_priv->workqueue, &priv->update_filtering_work);
+               ies = ((struct ieee80211_mgmt *)
+                         (skb->data))->u.beacon.variable;
+               ies_len = skb->len - (ies - (u8 *)(skb->data));
+
+               tim_ie = xradio_get_ie(ies, ies_len, WLAN_EID_TIM);
+               if (tim_ie) {
+                       struct ieee80211_tim_ie *tim =
+                               (struct ieee80211_tim_ie *)&tim_ie[2];
+
+                       if (priv->join_dtim_period != tim->dtim_period) {
+                               priv->join_dtim_period = tim->dtim_period;
+                               queue_work(hw_priv->workqueue,
+                                       &priv->set_beacon_wakeup_period_work);
+                       }
+               }
+               if (unlikely(priv->disable_beacon_filter)) {
+                       priv->disable_beacon_filter = false;
+                       queue_work(hw_priv->workqueue,
+                               &priv->update_filtering_work);
+               }
+       }
+#ifdef AP_HT_CAP_UPDATE
+    if (priv->mode == NL80211_IFTYPE_AP           &&
+        ieee80211_is_beacon(frame->frame_control) &&
+        ((priv->ht_oper&HT_INFO_MASK) != 0x0011)  &&
+        !arg->status){
+        u8 *ies;
+        size_t ies_len;
+        const u8 *ht_cap;
+        ies = ((struct ieee80211_mgmt *)(skb->data))->u.beacon.variable;
+        ies_len = skb->len - (ies - (u8 *)(skb->data));
+        ht_cap = xradio_get_ie(ies, ies_len, WLAN_EID_HT_CAPABILITY);
+        if(!ht_cap) {
+            priv->ht_oper |= 0x0011;
+            queue_work(hw_priv->workqueue, &priv->ht_oper_update_work);
+        }
+    }
+#endif
+
+#ifdef AP_HT_COMPAT_FIX
+       if (ieee80211_is_mgmt(frame->frame_control) && 
+               priv->if_id == 0 && !(priv->ht_compat_det & 0x10)) {
+               xradio_remove_ht_ie(priv, skb);
+       }
+#endif
+
+#ifdef ROAM_OFFLOAD
+       if ((ieee80211_is_beacon(frame->frame_control)||ieee80211_is_probe_resp(frame->frame_control)) &&
+                       !arg->status ) {
+               if (hw_priv->auto_scanning && !atomic_read(&hw_priv->scan.in_progress))
+                       hw_priv->frame_rcvd = 1;
+
+               if (!memcmp(ieee80211_get_SA(frame), priv->join_bssid, ETH_ALEN)) {
+                       if (hw_priv->beacon)
+                               dev_kfree_skb(hw_priv->beacon);
+                       hw_priv->beacon = skb_copy(skb, GFP_ATOMIC);
+                       if (!hw_priv->beacon)
+                               txrx_printk(XRADIO_DBG_ERROR, "sched_scan: own beacon storing failed\n");
+               }
+       }
+#endif /*ROAM_OFFLOAD*/
+
+       //don't delay scan before next connect, yangfh.
+       if (ieee80211_is_deauth(frame->frame_control) ||
+           ieee80211_is_disassoc(frame->frame_control))
+               hw_priv->connet_time[priv->if_id] = 0;
+
+       /* Stay awake for 1sec. after frame is received to give
+        * userspace chance to react and acquire appropriate
+        * wakelock. */
+       if (ieee80211_is_auth(frame->frame_control))
+               grace_period = 5 * HZ;
+       else if (ieee80211_is_deauth(frame->frame_control))
+               grace_period = 5 * HZ;
+       else
+               grace_period = HZ;
+
+       if (ieee80211_is_data(frame->frame_control))
+               xradio_rx_h_ba_stat(priv, hdrlen, skb->len);
+
+       xradio_pm_stay_awake(&hw_priv->pm_state, grace_period);
+
+       if(xradio_realloc_resv_skb(hw_priv, *skb_p)) {
+               *skb_p = NULL;
+               return;
+       }
+       /* Try to  a packet for the case dev_alloc_skb failed in bh.*/
+       if (unlikely(early_data)) {
+               spin_lock_bh(&priv->ps_state_lock);
+               /* Double-check status with lock held */
+               if (entry->status == XRADIO_LINK_SOFT) {
+                       skb_queue_tail(&entry->rx_queue, skb);
+                       dev_warn(priv->hw_priv->pdev, "***skb_queue_tail\n");
+               } else
+                       ieee80211_rx_irqsafe(priv->hw, skb);
+               spin_unlock_bh(&priv->ps_state_lock);
+       } else {
+               ieee80211_rx_irqsafe(priv->hw, skb);
+       }
+       *skb_p = NULL;
+
+       return;
+
+drop:
+       dev_warn(priv->hw_priv->pdev, "dropped received frame\n");
+       return;
+}
diff --git a/drivers/net/wireless/xradio/rx.h b/drivers/net/wireless/xradio/rx.h
new file mode 100644 (file)
index 0000000..0c02b23
--- /dev/null
@@ -0,0 +1,8 @@
+#ifndef XRADIO_RX_H
+#define XRADIO_RX_H
+
+void xradio_rx_cb(struct xradio_vif *priv,
+                 struct wsm_rx *arg,
+                 struct sk_buff **skb_p);
+
+#endif
diff --git a/drivers/net/wireless/xradio/scan.c b/drivers/net/wireless/xradio/scan.c
new file mode 100644 (file)
index 0000000..a8829c0
--- /dev/null
@@ -0,0 +1,897 @@
+/*
+ * Scan implementation for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <linux/sched.h>
+#include "xradio.h"
+#include "scan.h"
+#include "sta.h"
+#include "pm.h"
+
+static void xradio_scan_restart_delayed(struct xradio_vif *priv);
+
+static void xradio_remove_wps_p2p_ie(struct wsm_template_frame *frame)
+{
+       u8 *ies;
+       u32 ies_len;
+       u32 ie_len;
+       u32 p2p_ie_len = 0;
+       u32 wps_ie_len = 0;
+
+
+       ies = &frame->skb->data[sizeof(struct ieee80211_hdr_3addr)];
+       ies_len = frame->skb->len - sizeof(struct ieee80211_hdr_3addr);
+       while (ies_len >= 6) {
+               ie_len = ies[1] + 2;
+               ies_len -= ie_len;
+               if ((ies[0] == WLAN_EID_VENDOR_SPECIFIC) && 
+                         (ies[2] == 0x00 && ies[3] == 0x50 && 
+                          ies[4] == 0xf2 && ies[5] == 0x04)) {
+                       wps_ie_len = ie_len;
+                       memmove(ies, ies + ie_len, ies_len);
+               } else if ((ies[0] == WLAN_EID_VENDOR_SPECIFIC) &&
+                          (ies[2] == 0x50 && ies[3] == 0x6f && 
+                           ies[4] == 0x9a && ies[5] == 0x09)) {
+                       p2p_ie_len = ie_len;
+                       memmove(ies, ies + ie_len, ies_len);
+               } else {
+                       ies += ie_len;
+               }
+       }
+
+       if (p2p_ie_len || wps_ie_len) {
+               skb_trim(frame->skb, frame->skb->len - (p2p_ie_len + wps_ie_len));
+       }
+}
+
+static int xradio_scan_start(struct xradio_vif *priv, struct wsm_scan *scan)
+{
+       int ret, i;
+#ifdef FPGA_SETUP
+       int tmo = 5000;
+#else
+       int tmo = 5000;
+#endif
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+
+       for (i = 0; i < scan->numOfChannels; ++i)
+               tmo += scan->ch[i].maxChannelTime + 10;
+
+       atomic_set(&hw_priv->scan.in_progress, 1);
+       atomic_set(&hw_priv->recent_scan, 1);
+       xradio_pm_stay_awake(&hw_priv->pm_state, tmo * HZ / 1000);
+       ret = wsm_scan(hw_priv, scan, priv->if_id);
+       if (unlikely(ret)) {
+               scan_printk(XRADIO_DBG_WARN, "%s,wsm_scan failed!\n", __func__);
+               atomic_set(&hw_priv->scan.in_progress, 0);
+               xradio_scan_restart_delayed(priv);
+       } else {
+               queue_delayed_work(hw_priv->workqueue, &hw_priv->scan.timeout,
+                                               tmo * HZ / 1000);
+       }
+       return ret;
+}
+
+#ifdef ROAM_OFFLOAD
+static int xradio_sched_scan_start(struct xradio_vif *priv, struct wsm_scan *scan)
+{
+       int ret;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+
+       ret = wsm_scan(hw_priv, scan, priv->if_id);
+       if (unlikely(ret)) {
+               atomic_set(&hw_priv->scan.in_progress, 0);
+               scan_printk(XRADIO_DBG_WARN,"%s,wsm_scan failed!\n", __func__);
+       }
+       return ret;
+}
+#endif /*ROAM_OFFLOAD*/
+
+int xradio_hw_scan(struct ieee80211_hw *hw,
+                  struct ieee80211_vif *vif,
+                  struct ieee80211_scan_request *hw_req)
+{
+       struct cfg80211_scan_request *req = &hw_req->req;
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_PROBE_REQUEST,
+       };
+       int i;
+
+       /* Scan when P2P_GO corrupt firmware MiniAP mode */
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP) {
+               scan_printk(XRADIO_DBG_WARN,"%s, can't scan in AP mode!\n", __func__);
+               return -EOPNOTSUPP;
+       }
+
+       if (hw_priv->bh_error) {
+               scan_printk(XRADIO_DBG_NIY, "Ignoring scan bh error occur!\n");
+               return -EBUSY;
+       }
+
+       if (work_pending(&priv->offchannel_work) ||
+                       (hw_priv->roc_if_id != -1)) {
+               scan_printk(XRADIO_DBG_WARN, "Offchannel work pending, "
+                           "ignoring scan work %d\n",  hw_priv->roc_if_id);
+               return -EBUSY;
+       }
+
+       if (req->n_ssids == 1 && !req->ssids[0].ssid_len)
+               req->n_ssids = 0;
+
+       scan_printk(XRADIO_DBG_NIY, "vif%d Scan request(%s-%dchs) for %d SSIDs.\n",
+                   priv->if_id, (req->channels[0]->band==NL80211_BAND_2GHZ)?"2.4G":"5G", 
+                   req->n_channels, req->n_ssids);
+       
+       /*delay multiple ssids scan of vif0 for 3s when connnetting to a node*/
+       if(hw_priv->connet_time[0] > 0 && req->n_ssids == 0 && priv->if_id == 0) {
+               long timeleft0 = hw_priv->connet_time[0] + SCAN_MAX_DELAY - jiffies;
+               if(jiffies >= hw_priv->connet_time[0] && timeleft0 > 0) {
+                       scan_printk(XRADIO_DBG_NIY, "vif0 connetting, scan delay %ldms\n", 
+                                   timeleft0*1000/HZ);
+                       return -EBUSY;
+               }
+               hw_priv->connet_time[0] = 0;
+       }
+
+       if (req->n_ssids > hw->wiphy->max_scan_ssids){
+               scan_printk(XRADIO_DBG_ERROR, "%s: ssids is too much(%d)\n", 
+                           __func__, req->n_ssids);
+               return -EINVAL;
+       }
+
+       /* TODO by Icenowy: so strange function call */
+       frame.skb = ieee80211_probereq_get(hw, vif->addr, NULL, 0, 0);
+       if (!frame.skb) {
+               scan_printk(XRADIO_DBG_ERROR, "%s: ieee80211_probereq_get failed!\n", 
+                           __func__);
+               return -ENOMEM;
+       }
+
+#ifdef ROAM_OFFLOAD
+       if (priv->join_status != XRADIO_JOIN_STATUS_STA) {
+               if (req->channels[0]->band == NL80211_BAND_2GHZ)
+                       hw_priv->num_scanchannels = 0;
+               else
+                       hw_priv->num_scanchannels = hw_priv->num_2g_channels;
+
+               for (i=0; i < req->n_channels; i++) {
+                       hw_priv->scan_channels[hw_priv->num_scanchannels + i].number = \
+                               req->channels[i]->hw_value;
+                       if (req->channels[i]->flags & IEEE80211_CHAN_NO_IR) {
+                               hw_priv->scan_channels[hw_priv->num_scanchannels + i].minChannelTime = 50;
+                               hw_priv->scan_channels[hw_priv->num_scanchannels + i].maxChannelTime = 110;
+                       }
+                       else {
+                               hw_priv->scan_channels[hw_priv->num_scanchannels + i].minChannelTime = 10;
+                               hw_priv->scan_channels[hw_priv->num_scanchannels + i].maxChannelTime = 40;
+                               hw_priv->scan_channels[hw_priv->num_scanchannels + i].number |= \
+                                       XRADIO_SCAN_TYPE_ACTIVE;
+                       }
+                       hw_priv->scan_channels[hw_priv->num_scanchannels + i].txPowerLevel = \
+                               req->channels[i]->max_power;
+                       if (req->channels[0]->band == NL80211_BAND_5GHZ)
+                               hw_priv->scan_channels[hw_priv->num_scanchannels + i].number |= \
+                                       XRADIO_SCAN_BAND_5G;
+               }
+               if (req->channels[0]->band == NL80211_BAND_2GHZ)
+                       hw_priv->num_2g_channels = req->n_channels;
+               else
+                       hw_priv->num_5g_channels = req->n_channels;
+       }
+       hw_priv->num_scanchannels = hw_priv->num_2g_channels + hw_priv->num_5g_channels;
+#endif /*ROAM_OFFLOAD*/
+
+       /* will be unlocked in xradio_scan_work() */
+       down(&hw_priv->scan.lock);
+       mutex_lock(&hw_priv->conf_mutex);
+
+               if (frame.skb) {
+                       int ret = 0;
+                       if (priv->if_id == 0)
+                               xradio_remove_wps_p2p_ie(&frame);
+                       ret = wsm_set_template_frame(hw_priv, &frame, priv->if_id);
+                       if (ret) {
+                               mutex_unlock(&hw_priv->conf_mutex);
+                               up(&hw_priv->scan.lock);
+                               dev_kfree_skb(frame.skb);
+                               scan_printk(XRADIO_DBG_ERROR, "%s: wsm_set_template_frame failed: %d.\n",
+                                            __func__, ret);
+                               return ret;
+                       }
+               }
+
+               wsm_vif_lock_tx(priv);
+
+               BUG_ON(hw_priv->scan.req);
+               hw_priv->scan.req     = req;
+               hw_priv->scan.n_ssids = 0;
+               hw_priv->scan.status  = 0;
+               hw_priv->scan.begin   = &req->channels[0];
+               hw_priv->scan.curr    = hw_priv->scan.begin;
+               hw_priv->scan.end     = &req->channels[req->n_channels];
+               hw_priv->scan.output_power = hw_priv->output_power;
+               hw_priv->scan.if_id = priv->if_id;
+               /* TODO:COMBO: Populate BIT4 in scanflags to decide on which MAC
+                * address the SCAN request will be sent */
+
+               for (i = 0; i < req->n_ssids; ++i) {
+                       struct wsm_ssid *dst = &hw_priv->scan.ssids[hw_priv->scan.n_ssids];
+                       BUG_ON(req->ssids[i].ssid_len > sizeof(dst->ssid));
+                       memcpy(&dst->ssid[0], req->ssids[i].ssid, sizeof(dst->ssid));
+                       dst->length = req->ssids[i].ssid_len;
+                       ++hw_priv->scan.n_ssids;
+               }
+
+               mutex_unlock(&hw_priv->conf_mutex);
+
+               if (frame.skb)
+                       dev_kfree_skb(frame.skb);
+               queue_work(hw_priv->workqueue, &hw_priv->scan.work);
+
+       return 0;
+}
+
+#ifdef ROAM_OFFLOAD
+int xradio_hw_sched_scan_start(struct ieee80211_hw *hw,
+                  struct ieee80211_vif *vif,
+                  struct cfg80211_sched_scan_request *req,
+                  struct ieee80211_sched_scan_ies *ies)
+{
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_PROBE_REQUEST,
+       };
+       int i;
+       
+
+       scan_printk(XRADIO_DBG_WARN, "Scheduled scan request-->.\n");
+       if (!priv->vif)
+               return -EINVAL;
+
+       /* Scan when P2P_GO corrupt firmware MiniAP mode */
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP) {
+               scan_printk(XRADIO_DBG_WARN,"%s, can't scan in AP mode!\n", __func__);
+               return -EOPNOTSUPP;
+       }
+
+       scan_printk(XRADIO_DBG_WARN, "Scheduled scan: n_ssids %d, ssid[0].len = %d\n", 
+                   req->n_ssids, req->ssids[0].ssid_len);
+       if (req->n_ssids == 1 && !req->ssids[0].ssid_len)
+               req->n_ssids = 0;
+
+       scan_printk(XRADIO_DBG_NIY, "[SCAN] Scan request for %d SSIDs.\n", 
+                   req->n_ssids);
+
+       if (req->n_ssids > hw->wiphy->max_scan_ssids) [
+               scan_printk(XRADIO_DBG_ERROR, "%s: ssids is too much(%d)\n", 
+                           __func__, req->n_ssids);
+               return -EINVAL;
+       }
+
+       frame.skb = ieee80211_probereq_get(hw, priv->vif, NULL, 0,
+                                          ies->ie[0], ies->len[0]);
+       if (!frame.skb) {
+               scan_printk(XRADIO_DBG_ERROR, "%s: ieee80211_probereq_get failed!\n", 
+                           __func__);
+               return -ENOMEM;
+       }
+
+       /* will be unlocked in xradio_scan_work() */
+       down(&hw_priv->scan.lock);
+       mutex_lock(&hw_priv->conf_mutex);
+       if (frame.skb) {
+               int ret;
+               if (priv->if_id == 0)
+                       xradio_remove_wps_p2p_ie(&frame);
+               ret = wsm_set_template_frame(hw_priv, &frame, priv->if_id);
+               if (0 == ret) {
+                       /* Host want to be the probe responder. */
+                       ret = wsm_set_probe_responder(priv, true);
+               }
+               if (ret) {
+                       mutex_unlock(&hw_priv->conf_mutex);
+                       up(&hw_priv->scan.lock);
+                       dev_kfree_skb(frame.skb);
+                       scan_printk(XRADIO_DBG_ERROR, "%s: wsm_set_probe_responder failed: %d.\n",
+                                            __func__, ret);
+                       return ret;
+               }
+       }
+
+       wsm_lock_tx(hw_priv);
+       BUG_ON(hw_priv->scan.req);
+       hw_priv->scan.sched_req = req;
+       hw_priv->scan.n_ssids = 0;
+       hw_priv->scan.status = 0;
+       hw_priv->scan.begin = &req->channels[0];
+       hw_priv->scan.curr = hw_priv->scan.begin;
+       hw_priv->scan.end = &req->channels[req->n_channels];
+       hw_priv->scan.output_power = hw_priv->output_power;
+
+       for (i = 0; i < req->n_ssids; ++i) {
+               u8 j;
+               struct wsm_ssid *dst = &hw_priv->scan.ssids[hw_priv->scan.n_ssids];
+               BUG_ON(req->ssids[i].ssid_len > sizeof(dst->ssid));
+               memcpy(&dst->ssid[0], req->ssids[i].ssid, sizeof(dst->ssid));
+               dst->length = req->ssids[i].ssid_len;
+               ++hw_priv->scan.n_ssids;
+               scan_printk(XRADIO_DBG_NIY, "SSID %d\n",i);
+               for(j=0; j<req->ssids[i].ssid_len; j++)
+                       scan_printk(XRADIO_DBG_NIY, "0x%x\n", req->ssids[i].ssid[j]);
+       }
+       mutex_unlock(&hw_priv->conf_mutex);
+
+       if (frame.skb)
+               dev_kfree_skb(frame.skb);
+       queue_work(hw_priv->workqueue, &hw_priv->scan.swork);
+       scan_printk(XRADIO_DBG_NIY, "<-- Scheduled scan request.\n");
+       return 0;
+}
+#endif /*ROAM_OFFLOAD*/
+
+void xradio_scan_work(struct work_struct *work)
+{
+       struct xradio_common *hw_priv = container_of(work,
+                                               struct xradio_common,
+                                               scan.work);
+       struct xradio_vif *priv;
+       struct ieee80211_channel **it;
+       struct wsm_scan scan = {
+               .scanType = WSM_SCAN_TYPE_FOREGROUND,
+               .scanFlags = 0, /* TODO:COMBO */
+               //.scanFlags = WSM_SCAN_FLAG_SPLIT_METHOD, /* TODO:COMBO */
+       };
+       bool first_run;
+       int i;
+       const u32 ProbeRequestTime  = 2;
+       const u32 ChannelRemainTime = 15;
+       u32 maxChannelTime;
+       struct cfg80211_scan_info scan_info;
+
+
+       priv = __xrwl_hwpriv_to_vifpriv(hw_priv, hw_priv->scan.if_id);
+
+       /*TODO: COMBO: introduce locking so vif is not removed in meanwhile */
+       if (!priv) {
+               scan_printk(XRADIO_DBG_WARN, "interface removed, "
+                           "ignoring scan work\n");
+               return;
+       }
+
+       if (priv->if_id)
+               scan.scanFlags |= WSM_FLAG_MAC_INSTANCE_1;
+       else
+               scan.scanFlags &= ~WSM_FLAG_MAC_INSTANCE_1;
+
+       /* No need to set WSM_SCAN_FLAG_FORCE_BACKGROUND in BSS_LOSS work. 
+        * yangfh 2015-11-11 18:45:02 */
+       //xradio_for_each_vif(hw_priv, vif, i) {
+       //      if (!vif)
+       //              continue;
+       //      if (vif->bss_loss_status > XRADIO_BSS_LOSS_NONE)
+       //              scan.scanFlags |= WSM_SCAN_FLAG_FORCE_BACKGROUND;
+       //}
+
+       first_run = (hw_priv->scan.begin == hw_priv->scan.curr &&
+                    hw_priv->scan.begin != hw_priv->scan.end);
+       if (first_run) {
+               /* Firmware gets crazy if scan request is sent
+                * when STA is joined but not yet associated.
+                * Force unjoin in this case. */
+               if (cancel_delayed_work_sync(&priv->join_timeout) > 0)
+                       xradio_join_timeout(&priv->join_timeout.work);
+       }
+
+       mutex_lock(&hw_priv->conf_mutex);
+       if (first_run) {
+#if 0
+                       if (priv->join_status == XRADIO_JOIN_STATUS_STA &&
+                           !(priv->powersave_mode.pmMode & WSM_PSM_PS)) {
+                               struct wsm_set_pm pm = priv->powersave_mode;
+                               pm.pmMode = WSM_PSM_PS;
+                               xradio_set_pm(priv, &pm);
+                       } else
+#endif
+                       if (priv->join_status == XRADIO_JOIN_STATUS_MONITOR) {
+                               /* FW bug: driver has to restart p2p-dev mode
+                                * after scan */
+                               xradio_disable_listening(priv);
+                       }
+       }
+
+       if (!hw_priv->scan.req || (hw_priv->scan.curr == hw_priv->scan.end)) {
+                       if (hw_priv->scan.output_power != hw_priv->output_power) {
+                       /* TODO:COMBO: Change when mac80211 implementation
+                        * is available for output power also */
+                                       WARN_ON(wsm_set_output_power(hw_priv, hw_priv->output_power * 10,
+                                                                    priv->if_id));
+                       }
+
+#if 0
+               if (priv->join_status == XRADIO_JOIN_STATUS_STA &&
+                   !(priv->powersave_mode.pmMode & WSM_PSM_PS))
+                       xradio_set_pm(priv, &priv->powersave_mode);
+#endif
+
+               if (hw_priv->scan.status < 0)
+                       scan_printk(XRADIO_DBG_ERROR, "Scan failed (%d).\n", hw_priv->scan.status);
+               else if (hw_priv->scan.req)
+                       scan_printk(XRADIO_DBG_NIY, "Scan completed.\n");
+               else
+                       scan_printk(XRADIO_DBG_NIY, "Scan canceled.\n");
+
+               hw_priv->scan.req = NULL;
+               xradio_scan_restart_delayed(priv);
+               wsm_unlock_tx(hw_priv);
+               mutex_unlock(&hw_priv->conf_mutex);
+               memset(&scan_info, 0, sizeof(scan_info));
+               scan_info.aborted = hw_priv->scan.status ? 1 : 0;
+               ieee80211_scan_completed(hw_priv->hw, &scan_info);
+               up(&hw_priv->scan.lock);
+               return;
+
+       } else {
+               struct ieee80211_channel *first = *hw_priv->scan.curr;
+               for (it = hw_priv->scan.curr + 1, i = 1;
+                    it != hw_priv->scan.end && i < WSM_SCAN_MAX_NUM_OF_CHANNELS;
+                    ++it, ++i) {
+                       if ((*it)->band != first->band)
+                               break;
+                       if (((*it)->flags ^ first->flags) & IEEE80211_CHAN_NO_IR)
+                               break;
+                       if (!(first->flags & IEEE80211_CHAN_NO_IR) &&
+                           (*it)->max_power != first->max_power)
+                               break;
+               }
+               scan.band = first->band;
+
+               if (hw_priv->scan.req->no_cck)
+                       scan.maxTransmitRate = WSM_TRANSMIT_RATE_6;
+               else
+                       scan.maxTransmitRate = WSM_TRANSMIT_RATE_1;
+
+               /* TODO: Is it optimal? */
+               scan.numOfProbeRequests = (first->flags & IEEE80211_CHAN_NO_IR) ? 0 : 2;
+
+               scan.numOfSSIDs = hw_priv->scan.n_ssids;
+               scan.ssids = &hw_priv->scan.ssids[0];
+               scan.numOfChannels = it - hw_priv->scan.curr;
+               /* TODO: Is it optimal? */
+               scan.probeDelay = 100;
+               /* It is not stated in WSM specification, however
+                * FW team says that driver may not use FG scan
+                * when joined. */
+               if (priv->join_status == XRADIO_JOIN_STATUS_STA) {
+                       scan.scanType = WSM_SCAN_TYPE_BACKGROUND;
+                       scan.scanFlags = WSM_SCAN_FLAG_FORCE_BACKGROUND;
+               }
+               scan.ch = kzalloc(sizeof(struct wsm_scan_ch[it - hw_priv->scan.curr]), GFP_KERNEL);
+               if (!scan.ch) {
+                       hw_priv->scan.status = -ENOMEM;
+                       scan_printk(XRADIO_DBG_ERROR, "xr_kzalloc wsm_scan_ch failed.\n");
+                       goto fail;
+               }
+               maxChannelTime = (scan.numOfSSIDs * scan.numOfProbeRequests *ProbeRequestTime) + 
+                                 ChannelRemainTime;
+               maxChannelTime = (maxChannelTime < 35) ? 35 : maxChannelTime;
+               for (i = 0; i < scan.numOfChannels; ++i) {
+                       scan.ch[i].number = hw_priv->scan.curr[i]->hw_value;
+
+
+                               if (hw_priv->scan.curr[i]->flags & IEEE80211_CHAN_NO_IR) {
+                                       scan.ch[i].minChannelTime = 50;
+                                       scan.ch[i].maxChannelTime = 110;
+                               } else {
+                                       scan.ch[i].minChannelTime = 15;
+                                       scan.ch[i].maxChannelTime = maxChannelTime;
+                               }
+
+
+               }
+
+                       if (!(first->flags & IEEE80211_CHAN_NO_IR) &&
+                           hw_priv->scan.output_power != first->max_power) {
+                           hw_priv->scan.output_power = first->max_power;
+                               /* TODO:COMBO: Change after mac80211 implementation
+                               * complete */
+                               WARN_ON(wsm_set_output_power(hw_priv, hw_priv->scan.output_power * 10,
+                                                            priv->if_id));
+                       }
+
+                       down(&hw_priv->scan.status_lock);
+                       hw_priv->scan.status = xradio_scan_start(priv, &scan);
+
+               kfree(scan.ch);
+               if (WARN_ON(hw_priv->scan.status)) {
+                       scan_printk(XRADIO_DBG_ERROR, "scan failed, status=%d.\n",
+                                   hw_priv->scan.status);
+                       up(&hw_priv->scan.status_lock);
+                       goto fail;
+               }
+               up(&hw_priv->scan.status_lock);
+               hw_priv->scan.curr = it;
+       }
+       mutex_unlock(&hw_priv->conf_mutex);
+       return;
+
+fail:
+       hw_priv->scan.curr = hw_priv->scan.end;
+       mutex_unlock(&hw_priv->conf_mutex);
+       queue_work(hw_priv->workqueue, &hw_priv->scan.work);
+       return;
+}
+
+#ifdef ROAM_OFFLOAD
+void xradio_sched_scan_work(struct work_struct *work)
+{
+       struct xradio_common *hw_priv = container_of(work, struct xradio_common,
+               scan.swork);
+       struct wsm_scan scan;
+       struct wsm_ssid scan_ssid;
+       int i;
+       struct xradio_vif *priv = NULL;
+
+
+       priv = xrwl_hwpriv_to_vifpriv(hw_priv, hw_priv->scan.if_id);
+       if (unlikely(!priv)) {
+               WARN_ON(1);
+               return;
+       }
+
+       spin_unlock(&priv->vif_lock);
+       /* Firmware gets crazy if scan request is sent
+        * when STA is joined but not yet associated.
+        * Force unjoin in this case. */
+       if (cancel_delayed_work_sync(&priv->join_timeout) > 0) {
+               xradio_join_timeout(&priv->join_timeout.work);
+       }
+       mutex_lock(&hw_priv->conf_mutex);
+       hw_priv->auto_scanning = 1;
+       scan.band = 0;
+
+       if (priv->join_status == XRADIO_JOIN_STATUS_STA)
+               scan.scanType = 3; /* auto background */
+       else
+               scan.scanType = 2; /* auto foreground */
+
+       scan.scanFlags = 0x01; /* bit 0 set => forced background scan */
+       scan.maxTransmitRate = WSM_TRANSMIT_RATE_6;
+       scan.autoScanInterval = (0xba << 24)|(30 * 1024); /* 30 seconds, -70 rssi */
+       scan.numOfProbeRequests = 1;
+       //scan.numOfChannels = 11;
+       scan.numOfChannels = hw_priv->num_scanchannels;
+       scan.numOfSSIDs = 1;
+       scan.probeDelay = 100;
+       scan_ssid.length = priv->ssid_length;
+       memcpy(scan_ssid.ssid, priv->ssid, priv->ssid_length);
+       scan.ssids = &scan_ssid;
+
+       scan.ch = xr_kzalloc(sizeof(struct wsm_scan_ch[scan.numOfChannels]), false);
+       if (!scan.ch) {
+               scan_printk(XRADIO_DBG_ERROR, "xr_kzalloc wsm_scan_ch failed.\n");
+               hw_priv->scan.status = -ENOMEM;
+               goto fail;
+       }
+
+       for (i = 0; i < scan.numOfChannels; i++) {
+               scan.ch[i].number = hw_priv->scan_channels[i].number;
+               scan.ch[i].minChannelTime = hw_priv->scan_channels[i].minChannelTime;
+               scan.ch[i].maxChannelTime = hw_priv->scan_channels[i].maxChannelTime;
+               scan.ch[i].txPowerLevel = hw_priv->scan_channels[i].txPowerLevel;
+       }
+
+#if 0
+       for (i = 1; i <= scan.numOfChannels; i++) {
+               scan.ch[i-1].number = i;
+               scan.ch[i-1].minChannelTime = 10;
+               scan.ch[i-1].maxChannelTime = 40;
+       }
+#endif
+
+       hw_priv->scan.status = xradio_sched_scan_start(priv, &scan);
+       kfree(scan.ch);
+       if (hw_priv->scan.status) {
+               scan_printk(XRADIO_DBG_ERROR, "scan failed, status=%d.\n",
+                                   hw_priv->scan.status);
+               goto fail;
+       }
+       mutex_unlock(&hw_priv->conf_mutex);
+       return;
+
+fail:
+       mutex_unlock(&hw_priv->conf_mutex);
+       queue_work(hw_priv->workqueue, &hw_priv->scan.swork);
+       return;
+}
+
+void xradio_hw_sched_scan_stop(struct xradio_common *hw_priv)
+{
+       struct xradio_vif *priv = NULL;
+
+       priv = xrwl_hwpriv_to_vifpriv(hw_priv,hw_priv->scan.if_id);
+       if (unlikely(!priv))
+               return;
+
+       spin_unlock(&priv->vif_lock);
+       wsm_stop_scan(hw_priv, priv->if_id);
+
+       return;
+}
+#endif /*ROAM_OFFLOAD*/
+
+
+static void xradio_scan_restart_delayed(struct xradio_vif *priv)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+
+       if (priv->delayed_link_loss) {
+               int tmo = hw_priv->scan.direct_probe ? 0 : priv->cqm_beacon_loss_count;
+
+               priv->delayed_link_loss = 0;
+               /* Restart beacon loss timer and requeue
+                  BSS loss work. */
+               scan_printk(XRADIO_DBG_WARN, "[CQM] Requeue BSS loss in %d "
+                          "beacons.\n", tmo);
+               cancel_delayed_work_sync(&priv->bss_loss_work);
+               queue_delayed_work(hw_priv->workqueue, &priv->bss_loss_work,
+                                  tmo * HZ / 10);
+               
+       }
+
+       /* FW bug: driver has to restart p2p-dev mode after scan. */
+       if (priv->join_status == XRADIO_JOIN_STATUS_MONITOR) {
+               /*xradio_enable_listening(priv);*/
+               WARN_ON(1);
+               xradio_update_filtering(priv);
+               scan_printk(XRADIO_DBG_WARN, "driver has to restart "
+                           "p2p-dev mode after scan");
+       }
+
+       if (atomic_xchg(&priv->delayed_unjoin, 0)) {
+               if (queue_work(hw_priv->workqueue, &priv->unjoin_work) <= 0)
+                       wsm_unlock_tx(hw_priv);
+       }
+}
+
+static void xradio_scan_complete(struct xradio_common *hw_priv, int if_id)
+{
+       struct xradio_vif *priv;
+       atomic_xchg(&hw_priv->recent_scan, 0);
+
+
+       if (hw_priv->scan.direct_probe) {
+               mutex_lock(&hw_priv->conf_mutex);
+               priv = __xrwl_hwpriv_to_vifpriv(hw_priv, if_id);
+               if (priv) {
+                       scan_printk(XRADIO_DBG_MSG, "Direct probe complete.\n");
+                       xradio_scan_restart_delayed(priv);
+               } else {
+                       scan_printk(XRADIO_DBG_MSG, "Direct probe complete without interface!\n");
+               }
+               mutex_unlock(&hw_priv->conf_mutex);
+               hw_priv->scan.direct_probe = 0;
+               up(&hw_priv->scan.lock);
+               wsm_unlock_tx(hw_priv);
+       } else {
+               xradio_scan_work(&hw_priv->scan.work);
+       }
+}
+
+void xradio_scan_complete_cb(struct xradio_common *hw_priv,
+                             struct wsm_scan_complete *arg)
+{
+       struct xradio_vif *priv = xrwl_hwpriv_to_vifpriv(hw_priv,
+                                       hw_priv->scan.if_id);
+
+
+       if (unlikely(!priv))
+               return;
+
+#ifdef ROAM_OFFLOAD
+       if (hw_priv->auto_scanning)
+               queue_delayed_work(hw_priv->workqueue, &hw_priv->scan.timeout, 0);
+#endif /*ROAM_OFFLOAD*/
+
+       if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED)) {
+               /* STA is stopped. */
+               spin_unlock(&priv->vif_lock);
+               scan_printk(XRADIO_DBG_WARN, "%s: priv->mode UNSPECIFIED.\n", __func__);
+               return;
+       }
+       spin_unlock(&priv->vif_lock);
+
+       /*
+       if(hw_priv->scan.status == -ETIMEDOUT)
+               scan_printk(XRADIO_DBG_WARN, "Scan timeout already occured. "
+                           "Don't cancel work");
+       if ((hw_priv->scan.status != -ETIMEDOUT) &&
+               (cancel_delayed_work_sync(&hw_priv->scan.timeout) > 0)) {
+               hw_priv->scan.status = 1;
+               queue_delayed_work(hw_priv->workqueue, &hw_priv->scan.timeout, 0);
+       }
+       */  // should not involve status as a condition
+
+       if (cancel_delayed_work_sync(&hw_priv->scan.timeout) > 0) {
+               down(&hw_priv->scan.status_lock);
+               hw_priv->scan.status = 1;
+               up(&hw_priv->scan.status_lock);
+               queue_delayed_work(hw_priv->workqueue, &hw_priv->scan.timeout, 0);
+       }
+}
+
+void xradio_scan_timeout(struct work_struct *work)
+{
+       struct xradio_common *hw_priv =
+               container_of(work, struct xradio_common, scan.timeout.work);
+
+
+       if (likely(atomic_xchg(&hw_priv->scan.in_progress, 0))) {
+               if (hw_priv->scan.status > 0)
+                       hw_priv->scan.status = 0;
+               else if (!hw_priv->scan.status) {
+                       scan_printk(XRADIO_DBG_WARN, "Timeout waiting for scan "
+                                   "complete notification.\n");
+                       hw_priv->scan.status = -ETIMEDOUT;
+                       hw_priv->scan.curr   = hw_priv->scan.end;
+                       WARN_ON(wsm_stop_scan(hw_priv, hw_priv->scan.if_id ? 1 : 0));
+               }
+               xradio_scan_complete(hw_priv, hw_priv->scan.if_id);
+#ifdef ROAM_OFFLOAD
+       } else if (hw_priv->auto_scanning) {
+               hw_priv->auto_scanning = 0;
+               ieee80211_sched_scan_results(hw_priv->hw);
+#endif /*ROAM_OFFLOAD*/
+       }
+}
+
+void xradio_probe_work(struct work_struct *work)
+{
+       struct xradio_common *hw_priv =
+               container_of(work, struct xradio_common, scan.probe_work.work);
+       struct xradio_vif *priv;
+       u8 queueId = xradio_queue_get_queue_id(hw_priv->pending_frame_id);
+       struct xradio_queue *queue = &hw_priv->tx_queue[queueId];
+       const struct xradio_txpriv *txpriv;
+       struct wsm_tx *wsm;
+       struct wsm_template_frame frame = {
+               .frame_type = WSM_FRAME_TYPE_PROBE_REQUEST,
+       };
+       struct wsm_ssid ssids[1] = {{
+               .length = 0,
+       } };
+       struct wsm_scan_ch ch[1] = {{
+               .minChannelTime = 0,
+               .maxChannelTime = 10,
+       } };
+       struct wsm_scan scan = {
+               .scanType = WSM_SCAN_TYPE_FOREGROUND,
+               .numOfProbeRequests = 1,
+               .probeDelay = 0,
+               .numOfChannels = 1,
+               .ssids = ssids,
+               .ch = ch,
+       };
+       u8 *ies;
+       size_t ies_len;
+       int ret = 1;
+       scan_printk(XRADIO_DBG_MSG, "%s:Direct probe.\n", __func__);
+
+       BUG_ON(queueId >= 4);
+       BUG_ON(!hw_priv->channel);
+
+       mutex_lock(&hw_priv->conf_mutex);
+       if (unlikely(down_trylock(&hw_priv->scan.lock))) {
+               /* Scan is already in progress. Requeue self. */
+               schedule();
+               queue_delayed_work(hw_priv->workqueue, &hw_priv->scan.probe_work, 
+                                  HZ / 10);
+               mutex_unlock(&hw_priv->conf_mutex);
+               return;
+       }
+
+       if (xradio_queue_get_skb(queue, hw_priv->pending_frame_id, &frame.skb, &txpriv)) {
+               up(&hw_priv->scan.lock);
+               mutex_unlock(&hw_priv->conf_mutex);
+               wsm_unlock_tx(hw_priv);
+               scan_printk(XRADIO_DBG_ERROR, "%s:xradio_queue_get_skb error!\n", __func__);
+               return;
+       }
+       priv = __xrwl_hwpriv_to_vifpriv(hw_priv, txpriv->if_id);
+       if (!priv) {
+               up(&hw_priv->scan.lock);
+               mutex_unlock(&hw_priv->conf_mutex);
+               scan_printk(XRADIO_DBG_ERROR, "%s:priv error!\n", __func__);
+               return;
+       }
+       wsm = (struct wsm_tx *)frame.skb->data;
+       scan.maxTransmitRate = wsm->maxTxRate;
+       scan.band = (hw_priv->channel->band == NL80211_BAND_5GHZ) ?
+                    WSM_PHY_BAND_5G : WSM_PHY_BAND_2_4G;
+       if (priv->join_status == XRADIO_JOIN_STATUS_STA) {
+               scan.scanType  = WSM_SCAN_TYPE_BACKGROUND;
+               scan.scanFlags = WSM_SCAN_FLAG_FORCE_BACKGROUND;
+               if (priv->if_id)
+                       scan.scanFlags |= WSM_FLAG_MAC_INSTANCE_1;
+               else
+                       scan.scanFlags &= ~WSM_FLAG_MAC_INSTANCE_1;
+       }
+
+       /* No need to set WSM_SCAN_FLAG_FORCE_BACKGROUND in BSS_LOSS work. 
+        * yangfh 2015-11-11 18:45:02 */
+       //xradio_for_each_vif(hw_priv, vif, i) {
+       //      if (!vif)
+       //              continue;
+       //      if (vif->bss_loss_status > XRADIO_BSS_LOSS_NONE)
+       //              scan.scanFlags |= WSM_SCAN_FLAG_FORCE_BACKGROUND;
+       //}
+       
+       ch[0].number = hw_priv->channel->hw_value;
+       skb_pull(frame.skb, txpriv->offset);
+       ies = &frame.skb->data[sizeof(struct ieee80211_hdr_3addr)];
+       ies_len = frame.skb->len - sizeof(struct ieee80211_hdr_3addr);
+
+       if (ies_len) {
+               u8 *ssidie = (u8 *)cfg80211_find_ie(WLAN_EID_SSID, ies, ies_len);
+               if (ssidie && ssidie[1] && ssidie[1] <= sizeof(ssids[0].ssid)) {
+                       u8 *nextie = &ssidie[2 + ssidie[1]];
+                       /* Remove SSID from the IE list. It has to be provided
+                        * as a separate argument in xradio_scan_start call */
+
+                       /* Store SSID localy */
+                       ssids[0].length = ssidie[1];
+                       memcpy(ssids[0].ssid, &ssidie[2], ssids[0].length);
+                       scan.numOfSSIDs = 1;
+
+                       /* Remove SSID from IE list */
+                       ssidie[1] = 0;
+                       memmove(&ssidie[2], nextie, &ies[ies_len] - nextie);
+                       skb_trim(frame.skb, frame.skb->len - ssids[0].length);
+               }
+       }
+
+       if (priv->if_id == 0)
+               xradio_remove_wps_p2p_ie(&frame);
+
+       /* FW bug: driver has to restart p2p-dev mode after scan */
+       if (priv->join_status == XRADIO_JOIN_STATUS_MONITOR) {
+               WARN_ON(1);
+               /*xradio_disable_listening(priv);*/
+       }
+       ret = WARN_ON(wsm_set_template_frame(hw_priv, &frame,
+                               priv->if_id));
+
+       hw_priv->scan.direct_probe = 1;
+       hw_priv->scan.if_id = priv->if_id;
+       if (!ret) {
+               wsm_flush_tx(hw_priv);
+               ret = WARN_ON(xradio_scan_start(priv, &scan));
+       }
+       mutex_unlock(&hw_priv->conf_mutex);
+
+       skb_push(frame.skb, txpriv->offset);
+       if (!ret)
+               IEEE80211_SKB_CB(frame.skb)->flags |= IEEE80211_TX_STAT_ACK;
+
+               BUG_ON(xradio_queue_remove(queue, hw_priv->pending_frame_id));
+
+       if (ret) {
+               hw_priv->scan.direct_probe = 0;
+               up(&hw_priv->scan.lock);
+               wsm_unlock_tx(hw_priv);
+       }
+
+       return;
+}
diff --git a/drivers/net/wireless/xradio/scan.h b/drivers/net/wireless/xradio/scan.h
new file mode 100644 (file)
index 0000000..5c520ed
--- /dev/null
@@ -0,0 +1,71 @@
+/*
+ * Scan interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+
+#ifndef SCAN_H_INCLUDED
+#define SCAN_H_INCLUDED
+
+#include <linux/semaphore.h>
+#include "wsm.h"
+
+/* external */ struct sk_buff;
+/* external */ struct cfg80211_scan_request;
+/* external */ struct ieee80211_channel;
+/* external */ struct ieee80211_hw;
+/* external */ struct work_struct;
+
+#define SCAN_MAX_DELAY      (3*HZ)   //3s, add by yangfh for connect
+
+struct xradio_scan {
+       struct semaphore lock;
+       struct work_struct work;
+#ifdef ROAM_OFFLOAD
+       struct work_struct swork; /* scheduled scan work */
+       struct cfg80211_sched_scan_request *sched_req;
+#endif /*ROAM_OFFLOAD*/
+       struct delayed_work timeout;
+       struct cfg80211_scan_request *req;
+       struct ieee80211_channel **begin;
+       struct ieee80211_channel **curr;
+       struct ieee80211_channel **end;
+       struct wsm_ssid ssids[WSM_SCAN_MAX_NUM_OF_SSIDS];
+       int output_power;
+       int n_ssids;
+       //add by liwei, for h64 ping WS550 BUG
+       struct semaphore status_lock;
+       int status;
+       atomic_t in_progress;
+       /* Direct probe requests workaround */
+       struct delayed_work probe_work;
+       int direct_probe;
+       u8 if_id;
+};
+
+int xradio_hw_scan(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
+                   struct ieee80211_scan_request *req);
+#ifdef ROAM_OFFLOAD
+int xradio_hw_sched_scan_start(struct ieee80211_hw *hw,
+                               struct ieee80211_vif *vif,
+                               struct cfg80211_sched_scan_request *req,
+                               struct ieee80211_sched_scan_ies *ies);
+void xradio_hw_sched_scan_stop(struct xradio_common *priv);
+void xradio_sched_scan_work(struct work_struct *work);
+#endif /*ROAM_OFFLOAD*/
+void xradio_scan_work(struct work_struct *work);
+void xradio_scan_timeout(struct work_struct *work);
+void xradio_scan_complete_cb(struct xradio_common *priv,
+                             struct wsm_scan_complete *arg);
+
+/* ******************************************************************** */
+/* Raw probe requests TX workaround                                    */
+void xradio_probe_work(struct work_struct *work);
+
+#endif
diff --git a/drivers/net/wireless/xradio/sdio.c b/drivers/net/wireless/xradio/sdio.c
new file mode 100644 (file)
index 0000000..506105e
--- /dev/null
@@ -0,0 +1,241 @@
+/*
+ * SDIO driver for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <linux/module.h>
+#include <linux/mmc/host.h>
+#include <linux/mmc/sdio_func.h>
+#include <linux/mmc/card.h>
+#include <linux/mmc/sdio.h>
+#include <asm/mach-types.h>
+#include <linux/of.h>
+#include <linux/of_irq.h>
+#include <linux/interrupt.h>
+
+#include "xradio.h"
+#include "sdio.h"
+#include "main.h"
+
+/* sdio vendor id and device id*/
+#define SDIO_VENDOR_ID_XRADIO 0x0020
+#define SDIO_DEVICE_ID_XRADIO 0x2281
+static const struct sdio_device_id xradio_sdio_ids[] = {
+       { SDIO_DEVICE(SDIO_VENDOR_ID_XRADIO, SDIO_DEVICE_ID_XRADIO) },
+       //{ SDIO_DEVICE(SDIO_ANY_ID, SDIO_ANY_ID) },
+       { /* end: all zeroes */                 },
+};
+
+/* sbus_ops implemetation */
+int sdio_data_read(struct xradio_common* self, unsigned int addr,
+                          void *dst, int count)
+{
+       int ret = sdio_memcpy_fromio(self->sdio_func, dst, addr, count);
+//     printk("sdio_memcpy_fromio 0x%x:%d ret %d\n", addr, count, ret);
+//     print_hex_dump_bytes("sdio read ", 0, dst, min(count,32));
+       return ret;
+}
+
+int sdio_data_write(struct xradio_common* self, unsigned int addr,
+                           const void *src, int count)
+{
+       int ret = sdio_memcpy_toio(self->sdio_func, addr, (void *)src, count);
+//     printk("sdio_memcpy_toio 0x%x:%d ret %d\n", addr, count, ret);
+//     print_hex_dump_bytes("sdio write", 0, src, min(count,32));
+       return ret;
+}
+
+void sdio_lock(struct xradio_common* self)
+{
+       sdio_claim_host(self->sdio_func);
+}
+
+void sdio_unlock(struct xradio_common *self)
+{
+       sdio_release_host(self->sdio_func);
+}
+
+size_t sdio_align_len(struct xradio_common *self, size_t size)
+{
+       return sdio_align_size(self->sdio_func, size);
+}
+
+int sdio_set_blk_size(struct xradio_common *self, size_t size)
+{
+       return sdio_set_block_size(self->sdio_func, size);
+}
+
+extern void xradio_irq_handler(struct xradio_common*);
+
+static irqreturn_t sdio_irq_handler(int irq, void *dev_id)
+{
+       struct sdio_func *func = (struct sdio_func*) dev_id;
+       struct xradio_common *self = sdio_get_drvdata(func);
+       if (self != NULL)
+               xradio_irq_handler(self);
+       return IRQ_HANDLED;
+}
+
+static int sdio_enableint(struct sdio_func* func)
+{
+       int ret = 0;
+       u8 cccr;
+       int func_num;
+
+       sdio_claim_host(func);
+
+       /* Hack to access Fuction-0 */
+       func_num = func->num;
+       func->num = 0;
+       cccr = sdio_readb(func, SDIO_CCCR_IENx, &ret);
+       cccr |= BIT(0); /* Master interrupt enable ... */
+       cccr |= BIT(func_num); /* ... for our function */
+       sdio_writeb(func, cccr, SDIO_CCCR_IENx, &ret);
+
+       /* Restore the WLAN function number */
+       func->num = func_num;
+
+       sdio_release_host(func);
+
+       return ret;
+}
+
+int sdio_pm(struct xradio_common *self, bool  suspend)
+{
+       int ret = 0;
+       if (suspend) {
+               /* Notify SDIO that XRADIO will remain powered during suspend */
+               ret = sdio_set_host_pm_flags(self->sdio_func, MMC_PM_KEEP_POWER);
+               if (ret)
+                       dev_dbg(&self->sdio_func->dev, "Error setting SDIO pm flags: %i\n", ret);
+       }
+
+       return ret;
+}
+
+static const struct of_device_id xradio_sdio_of_match_table[] = {
+       { .compatible = "xradio,xr819" },
+       { }
+};
+
+static int xradio_probe_of(struct sdio_func *func)
+{
+       struct device *dev = &func->dev;
+       struct device_node *np = dev->of_node;
+       const struct of_device_id *of_id;
+       int irq;
+
+       of_id = of_match_node(xradio_sdio_of_match_table, np);
+       if (!of_id)
+               return -ENODEV;
+
+       //pdev_data->family = of_id->data;
+
+       irq = irq_of_parse_and_map(np, 0);
+       if (!irq) {
+               dev_err(dev, "No irq in platform data\n");
+               return -EINVAL;
+       }
+
+       devm_request_irq(dev, irq, sdio_irq_handler, 0, "xradio", func);
+
+       return 0;
+}
+
+/* Probe Function to be called by SDIO stack when device is discovered */
+static int sdio_probe(struct sdio_func *func,
+                      const struct sdio_device_id *id)
+{
+       dev_dbg(&func->dev, "XRadio Device:sdio clk=%d\n",
+                   func->card->host->ios.clock);
+       dev_dbg(&func->dev, "sdio func->class=%x\n", func->class);
+       dev_dbg(&func->dev, "sdio_vendor: 0x%04x\n", func->vendor);
+       dev_dbg(&func->dev, "sdio_device: 0x%04x\n", func->device);
+       dev_dbg(&func->dev, "Function#: 0x%04x\n",   func->num);
+
+#if 0  //for odly and sdly debug.
+{
+       u32 sdio_param = 0;
+       sdio_param = readl(__io_address(0x01c20088));
+       sdio_param &= ~(0xf<<8);
+       sdio_param |= 3<<8;
+       sdio_param &= ~(0xf<<20);
+       sdio_param |= s_dly<<20;
+       writel(sdio_param, __io_address(0x01c20088));
+       sbus_printk(XRADIO_DBG_ALWY, "%s: 0x01c20088=0x%08x\n", __func__, sdio_param);
+}
+#endif
+
+       xradio_probe_of(func);
+
+       func->card->quirks |= MMC_QUIRK_BROKEN_BYTE_MODE_512;
+       sdio_claim_host(func);
+       sdio_enable_func(func);
+       sdio_release_host(func);
+
+       sdio_enableint(func);
+
+       xradio_core_init(func);
+
+       try_module_get(func->dev.driver->owner);
+       return 0;
+}
+/* Disconnect Function to be called by SDIO stack when
+ * device is disconnected */
+static void sdio_remove(struct sdio_func *func)
+{
+       sdio_claim_host(func);
+       sdio_disable_func(func);
+       sdio_release_host(func);
+       module_put(func->dev.driver->owner);
+}
+
+static int sdio_suspend(struct device *dev)
+{
+       int ret = 0;
+       /*
+       struct sdio_func *func = dev_to_sdio_func(dev);
+       ret = sdio_set_host_pm_flags(func, MMC_PM_KEEP_POWER);
+       if (ret)
+               sbus_printk(XRADIO_DBG_ERROR, "set MMC_PM_KEEP_POWER error\n");
+       */
+       return ret;
+}
+
+static int sdio_resume(struct device *dev)
+{
+       return 0;
+}
+
+static const struct dev_pm_ops sdio_pm_ops = {
+       .suspend = sdio_suspend,
+       .resume  = sdio_resume,
+};
+
+static struct sdio_driver sdio_driver = {
+       .name     = "xradio_wlan",
+       .id_table = xradio_sdio_ids,
+       .probe    = sdio_probe,
+       .remove   = sdio_remove,
+       .drv = {
+                       .owner = THIS_MODULE,
+                       .pm = &sdio_pm_ops,
+       }
+};
+
+
+int xradio_sdio_register(){
+       return sdio_register_driver(&sdio_driver);
+}
+
+void xradio_sdio_unregister(){
+       sdio_unregister_driver(&sdio_driver);
+}
+
+MODULE_DEVICE_TABLE(sdio, xradio_sdio_ids);
diff --git a/drivers/net/wireless/xradio/sdio.h b/drivers/net/wireless/xradio/sdio.h
new file mode 100644 (file)
index 0000000..ea3c45a
--- /dev/null
@@ -0,0 +1,17 @@
+#ifndef __XRADIO_SDIO_H
+#define __XRADIO_SDIO_H
+
+size_t sdio_align_len(struct xradio_common *self, size_t size);
+void sdio_lock(struct xradio_common *self);
+void sdio_unlock(struct xradio_common *self);
+int sdio_set_blk_size(struct xradio_common *self, size_t size);
+int sdio_data_read(struct xradio_common *self, unsigned int addr, void *dst,
+               int count);
+int sdio_data_write(struct xradio_common *self, unsigned int addr, const void *src,
+               int count);
+int sdio_pm(struct xradio_common *self, bool  suspend);
+
+int xradio_sdio_register(void);
+void xradio_sdio_unregister(void);
+
+#endif
diff --git a/drivers/net/wireless/xradio/sta.c b/drivers/net/wireless/xradio/sta.c
new file mode 100644 (file)
index 0000000..a1cb6ae
--- /dev/null
@@ -0,0 +1,2201 @@
+/*
+ * STA APIs for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <linux/vmalloc.h>
+#include <linux/sched.h>
+#include <linux/firmware.h>
+#include <linux/if_arp.h>
+#include <linux/ipv6.h>
+#include <linux/icmpv6.h>
+#include <net/ndisc.h>
+
+#include "xradio.h"
+#include "sta.h"
+#include "ap.h"
+#include "keys.h"
+#include "fwio.h"
+#include "bh.h"
+#include "wsm.h"
+#ifdef ROAM_OFFLOAD
+#include <net/netlink.h>
+#endif /*ROAM_OFFLOAD*/
+
+#include "net/mac80211.h"
+
+#ifdef TES_P2P_0002_ROC_RESTART
+#include <linux/time.h>
+#endif
+
+#define WEP_ENCRYPT_HDR_SIZE    4
+#define WEP_ENCRYPT_TAIL_SIZE   4
+#define WPA_ENCRYPT_HDR_SIZE    8
+#define WPA_ENCRYPT_TAIL_SIZE   12
+#define WPA2_ENCRYPT_HDR_SIZE   8
+#define WPA2_ENCRYPT_TAIL_SIZE  8
+#define WAPI_ENCRYPT_HDR_SIZE   18
+#define WAPI_ENCRYPT_TAIL_SIZE  16
+#define MAX_ARP_REPLY_TEMPLATE_SIZE     120
+
+static inline void __xradio_free_event_queue(struct list_head *list)
+{
+       while (!list_empty(list)) {
+               struct xradio_wsm_event *event =
+                       list_first_entry(list, struct xradio_wsm_event,link);
+               list_del(&event->link);
+               kfree(event);
+       }
+}
+
+static inline void __xradio_bf_configure(struct xradio_vif *priv)
+{
+       priv->bf_table.numOfIEs = __cpu_to_le32(3);
+       priv->bf_table.entry[0].ieId = WLAN_EID_VENDOR_SPECIFIC;
+       priv->bf_table.entry[0].actionFlags = 
+                               WSM_BEACON_FILTER_IE_HAS_CHANGED       |
+                               WSM_BEACON_FILTER_IE_NO_LONGER_PRESENT |
+                               WSM_BEACON_FILTER_IE_HAS_APPEARED;
+
+       priv->bf_table.entry[0].oui[0] = 0x50;
+       priv->bf_table.entry[0].oui[1] = 0x6F;
+       priv->bf_table.entry[0].oui[2] = 0x9A;
+
+       priv->bf_table.entry[1].ieId = WLAN_EID_ERP_INFO;
+       priv->bf_table.entry[1].actionFlags = 
+                               WSM_BEACON_FILTER_IE_HAS_CHANGED       |
+                               WSM_BEACON_FILTER_IE_NO_LONGER_PRESENT |
+                               WSM_BEACON_FILTER_IE_HAS_APPEARED;
+
+       priv->bf_table.entry[2].ieId = WLAN_EID_HT_OPERATION;
+       priv->bf_table.entry[2].actionFlags = 
+                               WSM_BEACON_FILTER_IE_HAS_CHANGED       |
+                               WSM_BEACON_FILTER_IE_NO_LONGER_PRESENT |
+                               WSM_BEACON_FILTER_IE_HAS_APPEARED;
+
+       priv->bf_control.enabled = WSM_BEACON_FILTER_ENABLE;
+}
+
+/* ******************************************************************** */
+/* STA API                                                             */
+
+int xradio_start(struct ieee80211_hw *dev)
+{
+       struct xradio_common *hw_priv = dev->priv;
+       int ret = 0;
+
+
+       if (wait_event_interruptible_timeout(hw_priv->wsm_startup_done,
+                               hw_priv->driver_ready, 3*HZ) <= 0) {
+               wiphy_err(dev->wiphy, "driver is not ready!\n");
+               return -ETIMEDOUT;
+       }
+
+       mutex_lock(&hw_priv->conf_mutex);
+
+       memcpy(hw_priv->mac_addr, dev->wiphy->perm_addr, ETH_ALEN);
+       hw_priv->softled_state = 0;
+
+       ret = xradio_setup_mac(hw_priv);
+       if (WARN_ON(ret)) {
+               wiphy_err(dev->wiphy, "xradio_setup_mac failed(%d)\n", ret);
+               goto out;
+       }
+
+out:
+       mutex_unlock(&hw_priv->conf_mutex);
+       return ret;
+}
+
+void xradio_stop(struct ieee80211_hw *dev)
+{
+       struct xradio_common *hw_priv = dev->priv;
+       struct xradio_vif *priv = NULL;
+       LIST_HEAD(list);
+       int i;
+
+       wsm_lock_tx(hw_priv);
+       while (down_trylock(&hw_priv->scan.lock)) {
+               /* Scan is in progress. Force it to stop. */
+               hw_priv->scan.req = NULL;
+               schedule();
+       }
+       up(&hw_priv->scan.lock);
+
+       cancel_delayed_work_sync(&hw_priv->scan.probe_work);
+       cancel_delayed_work_sync(&hw_priv->scan.timeout);
+       flush_workqueue(hw_priv->workqueue);
+       del_timer_sync(&hw_priv->ba_timer);
+
+       mutex_lock(&hw_priv->conf_mutex);
+
+       hw_priv->softled_state = 0;
+       /* xradio_set_leds(hw_priv); */
+
+       spin_lock(&hw_priv->event_queue_lock);
+       list_splice_init(&hw_priv->event_queue, &list);
+       spin_unlock(&hw_priv->event_queue_lock);
+       __xradio_free_event_queue(&list);
+
+       for (i = 0; i < 4; i++)
+               xradio_queue_clear(&hw_priv->tx_queue[i], XRWL_ALL_IFS);
+
+       /* HACK! */
+       if (atomic_xchg(&hw_priv->tx_lock, 1) != 1)
+               wiphy_debug(dev->wiphy, "TX is force-unlocked due to stop request.\n");
+
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if (!priv)
+                       continue;
+               priv->mode = NL80211_IFTYPE_UNSPECIFIED;
+               priv->listening = false;
+               priv->delayed_link_loss = 0;
+               priv->join_status = XRADIO_JOIN_STATUS_PASSIVE;
+               cancel_delayed_work_sync(&priv->join_timeout);
+               cancel_delayed_work_sync(&priv->bss_loss_work);
+               cancel_delayed_work_sync(&priv->connection_loss_work);
+               cancel_delayed_work_sync(&priv->link_id_gc_work);
+               del_timer_sync(&priv->mcast_timeout);
+       }
+
+       wsm_unlock_tx(hw_priv);
+
+       mutex_unlock(&hw_priv->conf_mutex);
+}
+
+int xradio_add_interface(struct ieee80211_hw *dev,
+                        struct ieee80211_vif *vif)
+{
+       int ret;
+       struct xradio_common *hw_priv = dev->priv;
+       struct xradio_vif *priv;
+       struct xradio_vif **drv_priv = (void *)vif->drv_priv;
+       int i;
+       if (atomic_read(&hw_priv->num_vifs) >= XRWL_MAX_VIFS)
+               return -EOPNOTSUPP;
+
+       if (wait_event_interruptible_timeout(hw_priv->wsm_startup_done,
+                               hw_priv->driver_ready, 3*HZ) <= 0) {
+               wiphy_err(dev->wiphy, "driver is not ready!\n");
+               return -ETIMEDOUT;
+       }
+
+       /* fix the problem that when connected,then deauth */
+       vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER;
+       vif->driver_flags |= IEEE80211_VIF_SUPPORTS_UAPSD;
+
+       priv = xrwl_get_vif_from_ieee80211(vif);
+       atomic_set(&priv->enabled, 0);
+
+       *drv_priv = priv;
+       /* __le32 auto_calibration_mode = __cpu_to_le32(1); */
+
+       mutex_lock(&hw_priv->conf_mutex);
+
+       priv->mode = vif->type;
+
+       spin_lock(&hw_priv->vif_list_lock);
+       if (atomic_read(&hw_priv->num_vifs) < XRWL_MAX_VIFS) {
+               for (i = 0; i < XRWL_MAX_VIFS; i++)
+                       if (!memcmp(vif->addr, hw_priv->addresses[i].addr, ETH_ALEN))
+                               break;
+               if (i == XRWL_MAX_VIFS) {
+                       spin_unlock(&hw_priv->vif_list_lock);
+                       mutex_unlock(&hw_priv->conf_mutex);
+                       return -EINVAL;
+               }
+               priv->if_id = i;
+
+               hw_priv->if_id_slot |= BIT(priv->if_id);
+               priv->hw_priv = hw_priv;
+               priv->hw      = dev;
+               priv->vif     = vif;
+               hw_priv->vif_list[priv->if_id] = vif;
+               atomic_inc(&hw_priv->num_vifs);
+       } else {
+               spin_unlock(&hw_priv->vif_list_lock);
+               mutex_unlock(&hw_priv->conf_mutex);
+               return -EOPNOTSUPP;
+       }
+       spin_unlock(&hw_priv->vif_list_lock);
+       /* TODO:COMBO :Check if MAC address matches the one expected by FW */
+       memcpy(hw_priv->mac_addr, vif->addr, ETH_ALEN);
+
+       /* Enable auto-calibration */
+       /* Exception in subsequent channel switch; disabled.
+       WARN_ON(wsm_write_mib(hw_priv, WSM_MIB_ID_SET_AUTO_CALIBRATION_MODE,
+               &auto_calibration_mode, sizeof(auto_calibration_mode)));
+       */
+       wiphy_debug(dev->wiphy, "Interface ID:%d of type:%d added\n", priv->if_id, priv->mode);
+       mutex_unlock(&hw_priv->conf_mutex);
+
+       xradio_vif_setup(priv);
+
+       ret = WARN_ON(xradio_setup_mac_pvif(priv));
+
+       return ret;
+}
+
+void xradio_remove_interface(struct ieee80211_hw *dev,
+                            struct ieee80211_vif *vif)
+{
+       struct xradio_common *hw_priv = dev->priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       struct wsm_reset reset = {
+               .reset_statistics = true,
+       };
+       int i;
+       bool is_htcapie = false;
+       struct xradio_vif *tmp_priv;
+
+       wiphy_warn(dev->wiphy, "!!! vif_id=%d\n", priv->if_id);
+       atomic_set(&priv->enabled, 0);
+       down(&hw_priv->scan.lock);
+       if(priv->join_status == XRADIO_JOIN_STATUS_STA){
+               if (atomic_xchg(&priv->delayed_unjoin, 0)) {
+                       wsm_unlock_tx(hw_priv);
+                       wiphy_err(dev->wiphy, "delayed_unjoin exist!\n");
+               }
+               cancel_work_sync(&priv->unjoin_work);
+               wsm_lock_tx(hw_priv);
+               xradio_unjoin_work(&priv->unjoin_work);
+       }
+       mutex_lock(&hw_priv->conf_mutex);
+       xradio_tx_queues_lock(hw_priv);
+       wsm_lock_tx(hw_priv);
+       switch (priv->join_status) {
+       case XRADIO_JOIN_STATUS_AP:
+               for (i = 0; priv->link_id_map; ++i) {
+                       if (priv->link_id_map & BIT(i)) {
+                               xrwl_unmap_link(priv, i);
+                               priv->link_id_map &= ~BIT(i);
+                       }
+               }
+               memset(priv->link_id_db, 0,
+                               sizeof(priv->link_id_db));
+               priv->sta_asleep_mask = 0;
+               priv->enable_beacon = false;
+               priv->tx_multicast = false;
+               priv->aid0_bit_set = false;
+               priv->buffered_multicasts = false;
+               priv->pspoll_mask = 0;
+               reset.link_id = 0;
+               wsm_reset(hw_priv, &reset, priv->if_id);
+               WARN_ON(wsm_set_operational_mode(hw_priv, &defaultoperationalmode, priv->if_id));
+               xradio_for_each_vif(hw_priv, tmp_priv, i) {
+                       if (!tmp_priv)
+                               continue;
+                       if ((tmp_priv->join_status == XRADIO_JOIN_STATUS_STA) && tmp_priv->htcap)
+                               is_htcapie = true;
+               }
+
+               if (is_htcapie) {
+                       hw_priv->vif0_throttle = XRWL_HOST_VIF0_11N_THROTTLE;
+                       hw_priv->vif1_throttle = XRWL_HOST_VIF1_11N_THROTTLE;
+                       sta_printk(XRADIO_DBG_NIY, "AP REMOVE HTCAP 11N %d\n",hw_priv->vif0_throttle);
+               } else {
+                       hw_priv->vif0_throttle = XRWL_HOST_VIF0_11BG_THROTTLE;
+                       hw_priv->vif1_throttle = XRWL_HOST_VIF1_11BG_THROTTLE;
+                       sta_printk(XRADIO_DBG_NIY, "AP REMOVE 11BG %d\n",hw_priv->vif0_throttle);
+               }
+               break;
+       case XRADIO_JOIN_STATUS_MONITOR:
+               xradio_disable_listening(priv);
+               break;
+       default:
+               break;
+       }
+       /* TODO:COMBO: Change Queue Module */
+       __xradio_flush(hw_priv, false, priv->if_id);
+
+       cancel_delayed_work_sync(&priv->bss_loss_work);
+       cancel_delayed_work_sync(&priv->connection_loss_work);
+       cancel_delayed_work_sync(&priv->link_id_gc_work);
+       cancel_delayed_work_sync(&priv->join_timeout);
+       cancel_delayed_work_sync(&priv->set_cts_work);
+       cancel_delayed_work_sync(&priv->pending_offchanneltx_work);
+
+       del_timer_sync(&priv->mcast_timeout);
+       /* TODO:COMBO: May be reset of these variables "delayed_link_loss and
+        * join_status to default can be removed as dev_priv will be freed by
+        * mac80211 */
+       priv->delayed_link_loss = 0;
+       priv->join_status = XRADIO_JOIN_STATUS_PASSIVE;
+       wsm_unlock_tx(hw_priv);
+
+       if ((priv->if_id ==1) && (priv->mode == NL80211_IFTYPE_AP
+               || priv->mode == NL80211_IFTYPE_P2P_GO)) {
+               hw_priv->is_go_thru_go_neg = false;
+       }
+       spin_lock(&hw_priv->vif_list_lock);
+       spin_lock(&priv->vif_lock);
+       hw_priv->vif_list[priv->if_id] = NULL;
+       hw_priv->if_id_slot &= (~BIT(priv->if_id));
+       atomic_dec(&hw_priv->num_vifs);
+       if (atomic_read(&hw_priv->num_vifs) == 0) {
+               xradio_free_keys(hw_priv);
+               memset(hw_priv->mac_addr, 0, ETH_ALEN);
+       }
+       spin_unlock(&priv->vif_lock);
+       spin_unlock(&hw_priv->vif_list_lock);
+       priv->listening = false;
+
+       xradio_tx_queues_unlock(hw_priv);
+       mutex_unlock(&hw_priv->conf_mutex);
+
+       if (atomic_read(&hw_priv->num_vifs) == 0)
+               flush_workqueue(hw_priv->workqueue);
+       memset(priv, 0, sizeof(struct xradio_vif));
+       up(&hw_priv->scan.lock);
+}
+
+int xradio_change_interface(struct ieee80211_hw *dev,
+                               struct ieee80211_vif *vif,
+                               enum nl80211_iftype new_type,
+                               bool p2p)
+{
+       int ret = 0;
+       wiphy_debug(dev->wiphy, "changing interface type; new type=%d(%d), p2p=%d(%d)\n",
+                       new_type, vif->type, p2p, vif->p2p);
+       if (new_type != vif->type || vif->p2p != p2p) {
+               xradio_remove_interface(dev, vif);
+               vif->type = new_type;
+               vif->p2p = p2p;
+               ret = xradio_add_interface(dev, vif);
+       }
+
+       return ret;
+}
+
+int xradio_config(struct ieee80211_hw *dev, u32 changed)
+{
+       int ret = 0;
+       struct xradio_common *hw_priv = dev->priv;
+       struct ieee80211_conf *conf = &dev->conf;
+       /* TODO:COMBO: adjust to multi vif interface
+        * IEEE80211_CONF_CHANGE_IDLE is still handled per xradio_vif*/
+       int if_id = 0;
+       struct xradio_vif *priv;
+
+
+       if (changed &
+               (IEEE80211_CONF_CHANGE_MONITOR|IEEE80211_CONF_CHANGE_IDLE)) {
+               /* TBD: It looks like it's transparent
+                * there's a monitor interface present -- use this
+                * to determine for example whether to calculate
+                * timestamps for packets or not, do not use instead
+                * of filter flags! */
+               wiphy_debug(dev->wiphy, "ignore IEEE80211_CONF_CHANGE_MONITOR (%d)"
+                          "IEEE80211_CONF_CHANGE_IDLE (%d)\n",
+                          (changed & IEEE80211_CONF_CHANGE_MONITOR) ? 1 : 0,
+                          (changed & IEEE80211_CONF_CHANGE_IDLE) ? 1 : 0);
+               return ret;
+       }
+
+       down(&hw_priv->scan.lock);
+       mutex_lock(&hw_priv->conf_mutex);
+       priv = __xrwl_hwpriv_to_vifpriv(hw_priv, hw_priv->scan.if_id);
+       /* TODO: IEEE80211_CONF_CHANGE_QOS */
+       /* TODO:COMBO:Change when support is available mac80211*/
+       if (changed & IEEE80211_CONF_CHANGE_POWER) {
+               /*hw_priv->output_power = conf->power_level;*/
+               hw_priv->output_power = 20;
+               wiphy_debug(dev->wiphy, "Config Tx power=%d, but real=%d\n",
+                          conf->power_level, hw_priv->output_power);
+               WARN_ON(wsm_set_output_power(hw_priv, hw_priv->output_power * 10, if_id));
+       }
+
+       if ((changed & IEEE80211_CONF_CHANGE_CHANNEL) &&
+           (hw_priv->channel != conf->chandef.chan)) {
+               /* Switch Channel commented for CC Mode */
+               struct ieee80211_channel *ch = conf->chandef.chan;
+               wiphy_debug(dev->wiphy, "Freq %d (wsm ch: %d).\n",
+                          ch->center_freq, ch->hw_value);
+               /* Earlier there was a call to __xradio_flush().
+                  Removed as deemed unnecessary */
+                       hw_priv->channel = ch;
+                       hw_priv->channel_changed = 1;
+       }
+
+       mutex_unlock(&hw_priv->conf_mutex);
+       up(&hw_priv->scan.lock);
+       return ret;
+}
+
+void xradio_update_filtering(struct xradio_vif *priv)
+{
+       int ret;
+       bool bssid_filtering = !priv->rx_filter.bssid;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       static struct wsm_beacon_filter_control bf_disabled = {
+               .enabled = 0,
+               .bcn_count = 1,
+       };
+       bool ap_mode = 0;
+       static struct wsm_beacon_filter_table bf_table_auto = {
+               .numOfIEs = __cpu_to_le32(2),
+               .entry[0].ieId = WLAN_EID_VENDOR_SPECIFIC,
+               .entry[0].actionFlags = WSM_BEACON_FILTER_IE_HAS_CHANGED |
+                                       WSM_BEACON_FILTER_IE_NO_LONGER_PRESENT |
+                                       WSM_BEACON_FILTER_IE_HAS_APPEARED,
+               .entry[0].oui[0] = 0x50,
+               .entry[0].oui[1] = 0x6F,
+               .entry[0].oui[2] = 0x9A,
+
+               .entry[1].ieId = WLAN_EID_HT_OPERATION,
+               .entry[1].actionFlags = WSM_BEACON_FILTER_IE_HAS_CHANGED |
+                                       WSM_BEACON_FILTER_IE_NO_LONGER_PRESENT |
+                                       WSM_BEACON_FILTER_IE_HAS_APPEARED,
+       };
+       static struct wsm_beacon_filter_control bf_auto = {
+               .enabled = WSM_BEACON_FILTER_ENABLE |
+                       WSM_BEACON_FILTER_AUTO_ERP,
+               .bcn_count = 1,
+       };
+
+
+       bf_auto.bcn_count = priv->bf_control.bcn_count;
+
+       if (priv->join_status == XRADIO_JOIN_STATUS_PASSIVE)
+               return;
+       else if (priv->join_status == XRADIO_JOIN_STATUS_MONITOR)
+               bssid_filtering = false;
+
+       if (priv->vif && (priv->vif->type == NL80211_IFTYPE_AP))
+               ap_mode = true;
+       /*
+       * When acting as p2p client being connected to p2p GO, in order to
+       * receive frames from a different p2p device, turn off bssid filter.
+       *
+       * WARNING: FW dependency!
+       * This can only be used with FW WSM371 and its successors.
+       * In that FW version even with bssid filter turned off,
+       * device will block most of the unwanted frames.
+       */
+       if (priv->vif && priv->vif->p2p)
+               bssid_filtering = false;
+
+       ret = wsm_set_rx_filter(hw_priv, &priv->rx_filter, priv->if_id);
+       if (!ret && !ap_mode) {
+               if (priv->vif) {
+                       if (priv->vif->p2p || NL80211_IFTYPE_STATION != priv->vif->type)
+                               ret = wsm_set_beacon_filter_table(hw_priv, &priv->bf_table, priv->if_id);
+                       else
+                               ret = wsm_set_beacon_filter_table(hw_priv, &bf_table_auto, priv->if_id);
+               } else
+                       WARN_ON(1);
+       }
+       if (!ret && !ap_mode) {
+               if (priv->disable_beacon_filter)
+                       ret = wsm_beacon_filter_control(hw_priv, &bf_disabled, priv->if_id);
+               else {
+                       if (priv->vif) {
+                               if (priv->vif->p2p || NL80211_IFTYPE_STATION != priv->vif->type)
+                                       ret = wsm_beacon_filter_control(hw_priv, &priv->bf_control,
+                                                                        priv->if_id);
+                               else
+                                       ret = wsm_beacon_filter_control(hw_priv, &bf_auto, priv->if_id);
+                       } else
+                               WARN_ON(1);
+               }
+       }
+
+       if (!ret)
+               ret = wsm_set_bssid_filtering(hw_priv, bssid_filtering, priv->if_id);
+#if 0
+       if (!ret) {
+               ret = wsm_set_multicast_filter(hw_priv, &priv->multicast_filter, priv->if_id);
+       }
+#endif
+       if (ret)
+               wiphy_debug(priv->hw_priv->hw->wiphy, "Update filtering failed: %d.\n", ret);
+       return;
+}
+
+void xradio_update_filtering_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif,
+               update_filtering_work);
+
+       xradio_update_filtering(priv);
+}
+
+void xradio_set_beacon_wakeup_period_work(struct work_struct *work)
+{
+       
+       struct xradio_vif *priv = 
+              container_of(work, struct xradio_vif, set_beacon_wakeup_period_work);
+
+
+#ifdef XRADIO_USE_LONG_DTIM_PERIOD
+{
+       int join_dtim_period_extend;
+       if (priv->join_dtim_period <= 3) {
+               join_dtim_period_extend = priv->join_dtim_period * 3;
+       } else if (priv->join_dtim_period <= 5) {
+               join_dtim_period_extend = priv->join_dtim_period * 2;
+       } else {
+               join_dtim_period_extend = priv->join_dtim_period;
+       }
+       WARN_ON(wsm_set_beacon_wakeup_period(priv->hw_priv,
+                priv->beacon_int * join_dtim_period_extend >
+                MAX_BEACON_SKIP_TIME_MS ? 1 : join_dtim_period_extend, 
+                0, priv->if_id));
+}
+#else
+       WARN_ON(wsm_set_beacon_wakeup_period(priv->hw_priv,
+                priv->beacon_int * priv->join_dtim_period >
+                MAX_BEACON_SKIP_TIME_MS ? 1 :priv->join_dtim_period, 
+                0, priv->if_id));
+#endif
+}
+
+u64 xradio_prepare_multicast(struct ieee80211_hw *hw,
+                                                       struct netdev_hw_addr_list *mc_list)
+{
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_vif *priv = NULL;
+       static u8 broadcast_ipv6[ETH_ALEN] = {
+               0x33, 0x33, 0x00, 0x00, 0x00, 0x01
+       };
+       static u8 broadcast_ipv4[ETH_ALEN] = {
+               0x01, 0x00, 0x5e, 0x00, 0x00, 0x01
+       };
+       
+       int i= 0;
+       xradio_for_each_vif(hw_priv,priv,i) {
+               struct netdev_hw_addr *ha = NULL;
+               int count = 0;
+               if ((!priv))
+                       continue;
+
+               /* Disable multicast filtering */
+               priv->has_multicast_subscription = false;
+               memset(&priv->multicast_filter, 0x00, sizeof(priv->multicast_filter));
+               if (netdev_hw_addr_list_count(mc_list) > WSM_MAX_GRP_ADDRTABLE_ENTRIES)
+                       return 0;
+
+               /* Enable if requested */
+               netdev_hw_addr_list_for_each(ha, mc_list) {
+                       sta_printk(XRADIO_DBG_MSG, "multicast: %pM\n", ha->addr);
+                       memcpy(&priv->multicast_filter.macAddress[count], ha->addr, ETH_ALEN);
+                       if (memcmp(ha->addr, broadcast_ipv4, ETH_ALEN) &&
+                       memcmp(ha->addr, broadcast_ipv6, ETH_ALEN))
+                               priv->has_multicast_subscription = true;
+                       count++;
+               }
+               if (count) {
+                       priv->multicast_filter.enable = __cpu_to_le32(1);
+                       priv->multicast_filter.numOfAddresses = __cpu_to_le32(count);
+               }
+       }
+       return netdev_hw_addr_list_count(mc_list);
+}
+
+void xradio_configure_filter(struct ieee80211_hw *hw,
+                             unsigned int changed_flags,
+                             unsigned int *total_flags,
+                             u64 multicast)
+{
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_vif *priv = NULL;
+       int i = 0;
+
+       /* delete umac warning */
+       if (hw_priv->vif_list[0] == NULL && hw_priv->vif_list[1] == NULL)
+
+               *total_flags &= ~(1<<31);
+               
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if(NULL == priv)
+                       continue;
+
+#if 0
+               bool listening = !!(*total_flags &
+                               (FIF_PROMISC_IN_BSS      |
+                               FIF_OTHER_BSS           |
+                               FIF_BCN_PRBRESP_PROMISC |
+                               FIF_PROBE_REQ));
+#endif
+
+               *total_flags &= FIF_OTHER_BSS      |
+                               FIF_FCSFAIL        |
+                               FIF_BCN_PRBRESP_PROMISC |
+                               FIF_PROBE_REQ;
+
+               down(&hw_priv->scan.lock);
+               mutex_lock(&hw_priv->conf_mutex);
+
+               priv->rx_filter.promiscuous = 0;
+               priv->rx_filter.bssid = (*total_flags & 
+                                       (FIF_OTHER_BSS | FIF_PROBE_REQ)) ? 1 : 0;
+               priv->rx_filter.fcs = (*total_flags & FIF_FCSFAIL) ? 1 : 0;
+               priv->bf_control.bcn_count = (*total_flags &
+                                       (FIF_BCN_PRBRESP_PROMISC |
+                                       FIF_PROBE_REQ)) ? 1 : 0;
+
+               /*add for handle ap FIF_PROBE_REQ message,*/
+               priv->rx_filter.promiscuous = 0;
+               priv->rx_filter.fcs = 0;
+               if(NL80211_IFTYPE_AP == priv->vif->type){
+                       priv->bf_control.bcn_count = 1;
+                       priv->rx_filter.bssid = 1;      
+               }else{
+                       priv->bf_control.bcn_count = 0;
+                       priv->rx_filter.bssid = 0; 
+               }
+#if 0
+               if (priv->listening ^ listening) {
+                       priv->listening = listening;
+                       wsm_lock_tx(hw_priv);
+                       xradio_update_listening(priv, listening);
+                       wsm_unlock_tx(hw_priv);
+               }
+#endif
+               xradio_update_filtering(priv);
+               mutex_unlock(&hw_priv->conf_mutex);
+               up(&hw_priv->scan.lock);
+       }
+}
+
+int xradio_conf_tx(struct ieee80211_hw *dev, struct ieee80211_vif *vif,
+                   u16 queue, const struct ieee80211_tx_queue_params *params)
+{
+       struct xradio_common *hw_priv = dev->priv;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       int ret = 0;
+       /* To prevent re-applying PM request OID again and again*/
+       bool old_uapsdFlags;
+
+       wiphy_debug(dev->wiphy, "vif %d, configuring tx\n", priv->if_id);
+
+       if (WARN_ON(!priv))
+               return -EOPNOTSUPP;
+
+       mutex_lock(&hw_priv->conf_mutex);
+
+       if (queue < dev->queues) {
+               old_uapsdFlags = priv->uapsd_info.uapsdFlags;
+
+               WSM_TX_QUEUE_SET(&priv->tx_queue_params, queue, 0, 0, 0);
+               ret = wsm_set_tx_queue_params(hw_priv,
+                                             &priv->tx_queue_params.params[queue],
+                                             queue, priv->if_id);
+               if (ret) {
+                       wiphy_err(dev->wiphy, "wsm_set_tx_queue_params failed!\n");
+                       ret = -EINVAL;
+                       goto out;
+               }
+
+               WSM_EDCA_SET(&priv->edca, queue, params->aifs, 
+                             params->cw_min, params->cw_max, 
+                             params->txop, 0xc8, params->uapsd);
+               /* sta role is not support  the uapsd */ 
+               if (priv->mode == NL80211_IFTYPE_STATION || 
+                               priv->mode == NL80211_IFTYPE_P2P_CLIENT)
+                       priv->edca.params[queue].uapsdEnable = 0;
+
+               ret = wsm_set_edca_params(hw_priv, &priv->edca, priv->if_id);
+               if (ret) {
+                       wiphy_err(dev->wiphy, "wsm_set_edca_params failed!\n");
+                       ret = -EINVAL;
+                       goto out;
+               }
+
+               if (priv->mode == NL80211_IFTYPE_STATION) {
+                       ret = xradio_set_uapsd_param(priv, &priv->edca);
+                       if (!ret && priv->setbssparams_done &&
+                           (priv->join_status == XRADIO_JOIN_STATUS_STA) &&
+                           (old_uapsdFlags != priv->uapsd_info.uapsdFlags))
+                               xradio_set_pm(priv, &priv->powersave_mode);
+               }
+       } else {
+               wiphy_err(dev->wiphy, "queue is to large!\n");
+               ret = -EINVAL;
+       }
+
+out:
+       mutex_unlock(&hw_priv->conf_mutex);
+       return ret;
+}
+
+int xradio_get_stats(struct ieee80211_hw *dev,
+                    struct ieee80211_low_level_stats *stats)
+{
+       struct xradio_common *hw_priv = dev->priv;
+
+       memcpy(stats, &hw_priv->stats, sizeof(*stats));
+       return 0;
+}
+
+/*
+int xradio_get_tx_stats(struct ieee80211_hw *dev,
+                       struct ieee80211_tx_queue_stats *stats)
+{
+       int i;
+       struct xradio_common *priv = dev->priv;
+
+       for (i = 0; i < dev->queues; ++i)
+               xradio_queue_get_stats(&priv->tx_queue[i], &stats[i]);
+
+       return 0;
+}
+*/
+
+int xradio_set_pm(struct xradio_vif *priv, const struct wsm_set_pm *arg)
+{
+       struct wsm_set_pm pm = *arg;
+
+       if (priv->uapsd_info.uapsdFlags != 0)
+               pm.pmMode &= ~WSM_PSM_FAST_PS_FLAG;
+
+       if (memcmp(&pm, &priv->firmware_ps_mode, sizeof(struct wsm_set_pm))) {
+               priv->firmware_ps_mode = pm;
+               return wsm_set_pm(priv->hw_priv, &pm, priv->if_id);
+       } else {
+               return 0;
+       }
+}
+
+void xradio_wep_key_work(struct work_struct *work)
+{
+       struct xradio_vif *priv = container_of(work, struct xradio_vif , wep_key_work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       u8 queueId = xradio_queue_get_queue_id(hw_priv->pending_frame_id);
+       struct xradio_queue *queue = &hw_priv->tx_queue[queueId];
+       __le32 wep_default_key_id = __cpu_to_le32(priv->wep_default_key_id);
+
+
+       BUG_ON(queueId >= 4);
+
+       sta_printk(XRADIO_DBG_MSG, "Setting default WEP key: %d\n", 
+                  priv->wep_default_key_id);
+
+       wsm_flush_tx(hw_priv);
+       WARN_ON(wsm_write_mib(hw_priv, WSM_MIB_ID_DOT11_WEP_DEFAULT_KEY_ID,
+                              &wep_default_key_id, sizeof(wep_default_key_id),
+                              priv->if_id));
+
+       xradio_queue_requeue(queue, hw_priv->pending_frame_id, true);
+
+       wsm_unlock_tx(hw_priv);
+}
+
+int xradio_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
+{
+       struct xradio_common *hw_priv = hw->priv;
+       int ret = 0;
+       __le32 val32;
+       struct xradio_vif *priv = NULL;
+       int i =0;
+       int if_id;
+
+
+       xradio_for_each_vif(hw_priv,priv,i) {
+               if (!priv)
+                       continue;
+               if_id = priv->if_id;
+
+               if (value != (u32) -1)
+                       val32 = __cpu_to_le32(value);
+               else
+                       val32 = 0; /* disabled */
+
+               /* mutex_lock(&priv->conf_mutex); */
+               ret = WARN_ON(wsm_write_mib(hw_priv, WSM_MIB_ID_DOT11_RTS_THRESHOLD,
+                       &val32, sizeof(val32), if_id));
+               /* mutex_unlock(&priv->conf_mutex); */
+       }
+       return ret;
+}
+
+/* TODO: COMBO: Flush only a particular interface specific parts */
+int __xradio_flush(struct xradio_common *hw_priv, bool drop, int if_id)
+{
+       int i, ret;
+       struct xradio_vif *priv =
+               __xrwl_hwpriv_to_vifpriv(hw_priv, if_id);
+
+
+       for (;;) {
+               /* TODO: correct flush handling is required when dev_stop.
+                * Temporary workaround: 2s
+                */
+               if (drop) {
+                       for (i = 0; i < 4; ++i)
+                               xradio_queue_clear(&hw_priv->tx_queue[i],if_id);
+               } else if(!hw_priv->bh_error){
+                       ret = wait_event_timeout(
+                               hw_priv->tx_queue_stats.wait_link_id_empty,
+                               xradio_queue_stats_is_empty(&hw_priv->tx_queue_stats, -1, if_id),
+                               2 * HZ);
+               } else { //add by yangfh, don't wait when bh error
+                       sta_printk(XRADIO_DBG_ERROR, " %s:bh_error occur.\n", __func__);
+                       ret = -1;
+                       break;
+               }
+
+               if (!drop && unlikely(ret <= 0)) {
+                       sta_printk(XRADIO_DBG_ERROR, " %s: timeout...\n", __func__);
+                       ret = -ETIMEDOUT;
+                       break;
+               } else {
+                       ret = 0;
+               }
+
+               wsm_vif_lock_tx(priv);
+               if (unlikely(!xradio_queue_stats_is_empty(&hw_priv->tx_queue_stats,
+                                 -1, if_id))) {
+                       /* Highly unlekely: WSM requeued frames. */
+                       wsm_unlock_tx(hw_priv);
+                       continue;
+               }
+               wsm_unlock_tx(hw_priv);
+               break;
+       }
+       return ret;
+}
+
+void xradio_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif, u32 queues, bool drop)
+{
+       //struct xradio_vif *priv = NULL;
+       struct xradio_common *hw_priv = hw->priv;
+       int i = 0;
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+
+       /*TODO:COMBO: reenable this part of code when flush callback
+        * is implemented per vif */
+       /*switch (hw_priv->mode) {
+       case NL80211_IFTYPE_MONITOR:
+               drop = true;
+               break;
+       case NL80211_IFTYPE_AP:
+               if (!hw_priv->enable_beacon)
+                       drop = true;
+               break;
+       }*/
+
+       //if (!(hw_priv->if_id_slot & BIT(priv->if_id)))
+       //      return;
+
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if(NULL == priv)
+                       continue;
+               if ((hw_priv->if_id_slot & BIT(priv->if_id)))
+                       __xradio_flush(hw_priv, drop, priv->if_id);
+       }
+       return;
+}
+
+int xradio_remain_on_channel(struct ieee80211_hw *hw,
+                            struct ieee80211_vif *vif,
+                            struct ieee80211_channel *chan,
+                            int duration, enum ieee80211_roc_type type)
+{
+       int ret = 0;
+       struct xradio_common *hw_priv = hw->priv;
+       struct xradio_vif *priv = NULL;
+       int i = 0;
+       int if_id;
+#ifdef TES_P2P_0002_ROC_RESTART
+       struct timeval TES_P2P_0002_tmval;
+#endif
+
+
+#ifdef TES_P2P_0002_ROC_RESTART
+       do_gettimeofday(&TES_P2P_0002_tmval);
+       TES_P2P_0002_roc_dur  = (s32)duration;
+       TES_P2P_0002_roc_sec  = (s32)TES_P2P_0002_tmval.tv_sec;
+       TES_P2P_0002_roc_usec = (s32)TES_P2P_0002_tmval.tv_usec;
+#endif
+
+       down(&hw_priv->scan.lock);
+       mutex_lock(&hw_priv->conf_mutex);
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if(NULL == priv)
+                       continue;
+               if_id = priv->if_id;
+
+#ifdef ROC_DEBUG
+               sta_printk(XRADIO_DBG_WARN, "ROC IN %d ch %d\n", 
+                          priv->if_id, chan->hw_value);
+#endif
+               /* default only p2p interface if_id can remain on */
+               if((priv->if_id == 0) || (priv->if_id == 1))
+                       continue;
+               hw_priv->roc_if_id = priv->if_id;
+               ret = WARN_ON(__xradio_flush(hw_priv, false, if_id));
+               xradio_enable_listening(priv, chan);
+
+               if (!ret) {
+                       atomic_set(&hw_priv->remain_on_channel, 1);
+                       queue_delayed_work(hw_priv->workqueue, &hw_priv->rem_chan_timeout,
+                                          duration * HZ / 1000);
+                       priv->join_status = XRADIO_JOIN_STATUS_MONITOR;
+                       ieee80211_ready_on_channel(hw);
+               } else {
+                       hw_priv->roc_if_id = -1;
+                       up(&hw_priv->scan.lock);
+               }
+
+#ifdef ROC_DEBUG
+               sta_printk(XRADIO_DBG_WARN, "ROC OUT %d\n", priv->if_id);
+#endif
+                       }
+               /* set the channel to supplied ieee80211_channel pointer, if it
+               is not set. This is to remove the crash while sending a probe res
+               in listen state. Later channel will updated on
+               IEEE80211_CONF_CHANGE_CHANNEL event*/
+               if(!hw_priv->channel) {
+                       hw_priv->channel = chan;
+               }
+               mutex_unlock(&hw_priv->conf_mutex);
+       return ret;
+}
+
+int xradio_cancel_remain_on_channel(struct ieee80211_hw *hw)
+{
+       struct xradio_common *hw_priv = hw->priv;
+
+
+       sta_printk(XRADIO_DBG_NIY, "Cancel remain on channel\n");
+#ifdef TES_P2P_0002_ROC_RESTART
+       if (TES_P2P_0002_state == TES_P2P_0002_STATE_GET_PKTID) {
+               TES_P2P_0002_state = TES_P2P_0002_STATE_IDLE;
+               sta_printk(XRADIO_DBG_WARN, "[ROC_RESTART_STATE_IDLE][Cancel ROC]\n");
+       }
+#endif
+
+       if (atomic_read(&hw_priv->remain_on_channel))
+               cancel_delayed_work_sync(&hw_priv->rem_chan_timeout);
+
+       if (atomic_read(&hw_priv->remain_on_channel))
+               xradio_rem_chan_timeout(&hw_priv->rem_chan_timeout.work);
+
+       return 0;
+}
+
+/* ******************************************************************** */
+/* WSM callbacks                                                       */
+
+void xradio_channel_switch_cb(struct xradio_common *hw_priv)
+{
+       wsm_unlock_tx(hw_priv);
+}
+
+void xradio_free_event_queue(struct xradio_common *hw_priv)
+{
+       LIST_HEAD(list);
+
+
+       spin_lock(&hw_priv->event_queue_lock);
+       list_splice_init(&hw_priv->event_queue, &list);
+       spin_unlock(&hw_priv->event_queue_lock);
+
+       __xradio_free_event_queue(&list);
+}
+
+void xradio_event_handler(struct work_struct *work)
+{
+       struct xradio_common *hw_priv =
+               container_of(work, struct xradio_common, event_handler);
+       struct xradio_vif *priv;
+       struct xradio_wsm_event *event;
+       LIST_HEAD(list);
+
+
+       spin_lock(&hw_priv->event_queue_lock);
+       list_splice_init(&hw_priv->event_queue, &list);
+       spin_unlock(&hw_priv->event_queue_lock);
+
+       mutex_lock(&hw_priv->conf_mutex);
+       list_for_each_entry(event, &list, link) {
+               priv = __xrwl_hwpriv_to_vifpriv(hw_priv, event->if_id);
+               if (!priv) {
+                       sta_printk(XRADIO_DBG_WARN, "[CQM] Event for non existing "
+                                  "interface, ignoring.\n");
+                       continue;
+               }
+               switch (event->evt.eventId) {
+                       case WSM_EVENT_ERROR:
+                               /* I even don't know what is it about.. */
+                               //STUB();
+                               break;
+                       case WSM_EVENT_BSS_LOST:
+                       {
+                               spin_lock(&priv->bss_loss_lock);
+                               if (priv->bss_loss_status > XRADIO_BSS_LOSS_NONE) {
+                                       spin_unlock(&priv->bss_loss_lock);
+                                       break;
+                               }
+                               priv->bss_loss_status = XRADIO_BSS_LOSS_CHECKING;
+                               spin_unlock(&priv->bss_loss_lock);
+                               sta_printk(XRADIO_DBG_WARN, "[CQM] BSS lost, Beacon miss=%d, event=%x.\n",
+                                          (event->evt.eventData>>8)&0xff, event->evt.eventData&0xff);
+
+                               cancel_delayed_work_sync(&priv->bss_loss_work);
+                               cancel_delayed_work_sync(&priv->connection_loss_work);
+                               if (!down_trylock(&hw_priv->scan.lock)) {
+                                       up(&hw_priv->scan.lock);
+                                       priv->delayed_link_loss = 0;
+                                       queue_delayed_work(hw_priv->workqueue,
+                                                       &priv->bss_loss_work, HZ/10); //100ms
+                               } else {
+                                       /* Scan is in progress. Delay reporting. */
+                                       /* Scan complete will trigger bss_loss_work */
+                                       priv->delayed_link_loss = 1;
+                                       /* Also we're starting watchdog. */
+                                       queue_delayed_work(hw_priv->workqueue,
+                                                       &priv->bss_loss_work, 10 * HZ);
+                               }
+                               break;
+                       }
+                       case WSM_EVENT_BSS_REGAINED:
+                       {
+                               sta_printk(XRADIO_DBG_WARN, "[CQM] BSS regained.\n");
+                               priv->delayed_link_loss = 0;
+                               spin_lock(&priv->bss_loss_lock);
+                               priv->bss_loss_status = XRADIO_BSS_LOSS_NONE;
+                               spin_unlock(&priv->bss_loss_lock);
+                               cancel_delayed_work_sync(&priv->bss_loss_work);
+                               cancel_delayed_work_sync(&priv->connection_loss_work);
+                               break;
+                       }
+                       case WSM_EVENT_RADAR_DETECTED:
+                               //STUB();
+                               break;
+                       case WSM_EVENT_RCPI_RSSI:
+                       {
+                               /* RSSI: signed Q8.0, RCPI: unsigned Q7.1
+                                * RSSI = RCPI / 2 - 110 */
+                               int rcpiRssi = (int)(event->evt.eventData & 0xFF);
+                               int cqm_evt;
+                               if (priv->cqm_use_rssi)
+                                       rcpiRssi = (s8)rcpiRssi;
+                               else
+                                       rcpiRssi =  rcpiRssi / 2 - 110;
+
+                               cqm_evt = (rcpiRssi <= priv->cqm_rssi_thold) ?
+                                       NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW :
+                                       NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH;
+                               sta_printk(XRADIO_DBG_NIY, "[CQM] RSSI event: %d", rcpiRssi);
+                               ieee80211_cqm_rssi_notify(priv->vif,
+                                       cqm_evt,
+                                       0,
+                                       GFP_KERNEL);
+                               break;
+                       }
+                       case WSM_EVENT_BT_INACTIVE:
+                               //STUB();
+                               break;
+                       case WSM_EVENT_BT_ACTIVE:
+                               //STUB();
+                               break;
+                       case WSM_EVENT_INACTIVITY:
+                       {
+                               int link_id = ffs((u32)(event->evt.eventData)) - 1;
+                               struct sk_buff *skb;
+                               struct ieee80211_mgmt *deauth;
+                               struct xradio_link_entry *entry = NULL;
+
+                               sta_printk(XRADIO_DBG_WARN, "Inactivity Event Recieved for "
+                                               "link_id %d\n", link_id);
+                               skb = dev_alloc_skb(sizeof(struct ieee80211_mgmt) + 64);
+                               if (!skb)
+                                       break;
+                               skb_reserve(skb, 64);
+                               xrwl_unmap_link(priv, link_id);
+                               deauth = (struct ieee80211_mgmt *)skb_put(skb, sizeof(struct ieee80211_mgmt));
+                               WARN_ON(!deauth);
+                               entry = &priv->link_id_db[link_id - 1];
+                               deauth->duration = 0;
+                               memcpy(deauth->da, priv->vif->addr, ETH_ALEN);
+                               memcpy(deauth->sa, entry->mac/*priv->link_id_db[i].mac*/, ETH_ALEN);
+                               memcpy(deauth->bssid, priv->vif->addr, ETH_ALEN);
+                               deauth->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
+                                                                           IEEE80211_STYPE_DEAUTH |
+                                                                           IEEE80211_FCTL_TODS);
+                               deauth->u.deauth.reason_code = WLAN_REASON_DEAUTH_LEAVING;
+                               deauth->seq_ctrl = 0;
+                               ieee80211_rx_irqsafe(priv->hw, skb);
+                               sta_printk(XRADIO_DBG_WARN, " Inactivity Deauth Frame sent for MAC SA %pM \t and DA %pM\n", deauth->sa, deauth->da);
+                               queue_work(priv->hw_priv->workqueue, &priv->set_tim_work);
+                               break;
+                       }
+               case WSM_EVENT_PS_MODE_ERROR:
+                       {
+                               if (!priv->uapsd_info.uapsdFlags &&
+                                       (priv->user_pm_mode != WSM_PSM_PS))
+                               {
+                                       struct wsm_set_pm pm = priv->powersave_mode;
+                                       int ret = 0;
+
+                                       priv->powersave_mode.pmMode = WSM_PSM_ACTIVE;
+                                       ret = xradio_set_pm (priv, &priv->powersave_mode);
+                                       if(ret)
+                                               priv->powersave_mode = pm;
+                               }
+                                break;
+                       }
+               }
+       }
+       mutex_unlock(&hw_priv->conf_mutex);
+       __xradio_free_event_queue(&list);
+}
+
+void xradio_bss_loss_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, bss_loss_work.work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       int timeout; /* in beacons */
+
+
+       timeout = priv->cqm_link_loss_count - priv->cqm_beacon_loss_count;
+       /* Skip the confimration procedure in P2P case */
+       if (priv->vif->p2p)
+               goto report;
+
+       spin_lock(&priv->bss_loss_lock);
+       if (priv->bss_loss_status == XRADIO_BSS_LOSS_CONFIRMING) {
+               //do loss report next time.
+               priv->bss_loss_status = XRADIO_BSS_LOSS_CONFIRMED;
+               spin_unlock(&priv->bss_loss_lock);
+               //wait for more 1s to loss confirm.
+               queue_delayed_work(hw_priv->workqueue, &priv->bss_loss_work, 1 * HZ);
+               return;
+       } else if (priv->bss_loss_status == XRADIO_BSS_LOSS_NONE) {
+               spin_unlock(&priv->bss_loss_lock);
+               //link is alive.
+               cancel_delayed_work_sync(&priv->connection_loss_work);
+               return; 
+       } else if (priv->bss_loss_status == XRADIO_BSS_LOSS_CHECKING) {
+               /* it mean no confirming packets, just report loss. */
+       }
+       spin_unlock(&priv->bss_loss_lock);
+
+report:
+       if (priv->cqm_beacon_loss_count) {
+               sta_printk(XRADIO_DBG_WARN, "[CQM] Beacon loss.\n");
+               if (timeout <= 0)
+                       timeout = 0;
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+               //ieee80211_cqm_beacon_miss_notify(priv->vif, GFP_KERNEL);
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+       } else {
+               timeout = 0;
+       }
+
+       cancel_delayed_work_sync(&priv->connection_loss_work);
+       queue_delayed_work(hw_priv->workqueue, &priv->connection_loss_work,
+                          timeout * HZ / 10);
+
+       spin_lock(&priv->bss_loss_lock);
+       priv->bss_loss_status = XRADIO_BSS_LOSS_NONE;
+       spin_unlock(&priv->bss_loss_lock);
+}
+
+void xradio_connection_loss_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+         container_of(work, struct xradio_vif, connection_loss_work.work);
+       sta_printk(XRADIO_DBG_ERROR, "[CQM] if%d Reporting connection loss.\n", 
+                  priv->if_id);
+       ieee80211_connection_loss(priv->vif);
+}
+
+void xradio_tx_failure_work(struct work_struct *work)
+{
+       //struct xradio_vif *priv =
+       //      container_of(work, struct xradio_vif, tx_failure_work);
+       sta_printk(XRADIO_DBG_WARN, "[CQM] Reporting TX failure.\n");
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       //ieee80211_cqm_tx_fail_notify(priv->vif, GFP_KERNEL);
+#else /* CONFIG_XRADIO_USE_EXTENSIONS */
+       //(void)priv;
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+}
+
+/* Internal API                                                                */
+int xradio_setup_mac(struct xradio_common *hw_priv)
+{
+       int ret = 0, if_id;
+
+
+       if (hw_priv->sdd) {
+               struct wsm_configuration cfg = {
+                       .dot11StationId = &hw_priv->mac_addr[0],
+                       .dpdData      = hw_priv->sdd->data,
+                       .dpdData_size = hw_priv->sdd->size,
+               };
+               for (if_id = 0; if_id < xrwl_get_nr_hw_ifaces(hw_priv);
+                    if_id++) {
+                       /* Set low-power mode. */
+                       ret |= WARN_ON(wsm_configuration(hw_priv, &cfg,
+                                      if_id));
+               }
+               /* wsm_configuration only once, so release it */
+               release_firmware(hw_priv->sdd);
+               hw_priv->sdd = NULL;
+       }
+
+       /* BUG:TX output power is not set untill config_xradio is called.
+        * This would lead to 0 power set in fw and would effect scan & p2p-find
+        * Setting to default value here from sdd which would be overwritten when
+        * we make connection to AP.This value is used only during scan & p2p-ops
+        * untill AP connection is made */
+       /*BUG:TX output power: Hardcoding to 20dbm if CCX is not enabled*/
+       /*TODO: This might change*/
+       if (!hw_priv->output_power)
+               hw_priv->output_power=20;
+       sta_printk(XRADIO_DBG_MSG, "%s output power %d\n",__func__,hw_priv->output_power);
+
+       return ret;
+}
+
+void xradio_pending_offchanneltx_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+       container_of(work, struct xradio_vif, pending_offchanneltx_work.work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+
+       mutex_lock(&hw_priv->conf_mutex);
+#ifdef ROC_DEBUG
+       sta_printk(XRADIO_DBG_WARN, "OFFCHAN PEND IN\n");
+#endif
+       xradio_disable_listening(priv);
+       hw_priv->roc_if_id = -1;
+#ifdef ROC_DEBUG
+       sta_printk(XRADIO_DBG_WARN, "OFFCHAN PEND OUT\n");
+#endif
+       up(&hw_priv->scan.lock);
+       mutex_unlock(&hw_priv->conf_mutex);
+}
+
+void xradio_offchannel_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, offchannel_work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       u8 queueId = xradio_queue_get_queue_id(hw_priv->pending_frame_id);
+       struct xradio_queue *queue = &hw_priv->tx_queue[queueId];
+
+
+       BUG_ON(queueId >= 4);
+       BUG_ON(!hw_priv->channel);
+
+       if (unlikely(down_trylock(&hw_priv->scan.lock))) {
+               int ret;
+               sta_printk(XRADIO_DBG_ERROR, "xradio_offchannel_work***** drop frame\n");
+               ret = xradio_queue_remove(queue, hw_priv->pending_frame_id);
+               if (ret)
+                       sta_printk(XRADIO_DBG_ERROR, "xradio_offchannel_work: "
+                                      "queue_remove failed %d\n", ret);
+               wsm_unlock_tx(hw_priv);
+               //workaround by yangfh
+               up(&hw_priv->scan.lock);
+               ieee80211_connection_loss(priv->vif);
+               sta_printk(XRADIO_DBG_ERROR,"lock %d\n", hw_priv->scan.lock.count);
+               
+               return;
+       }
+       mutex_lock(&hw_priv->conf_mutex);
+#ifdef ROC_DEBUG
+       sta_printk(XRADIO_DBG_WARN, "OFFCHAN WORK IN %d\n", priv->if_id);
+#endif
+       hw_priv->roc_if_id = priv->if_id;
+       if (likely(!priv->join_status)) {
+               wsm_vif_flush_tx(priv);
+               xradio_enable_listening(priv, hw_priv->channel);
+               /* xradio_update_filtering(priv); */
+       }
+       if (unlikely(!priv->join_status))
+               xradio_queue_remove(queue, hw_priv->pending_frame_id);
+       else
+               xradio_queue_requeue(queue, hw_priv->pending_frame_id, false);
+
+       queue_delayed_work(hw_priv->workqueue,
+                       &priv->pending_offchanneltx_work, 204 * HZ/1000);
+#ifdef ROC_DEBUG
+       sta_printk(XRADIO_DBG_WARN, "OFFCHAN WORK OUT %d\n", priv->if_id);
+#endif
+       mutex_unlock(&hw_priv->conf_mutex);
+       wsm_unlock_tx(hw_priv);
+}
+
+void xradio_join_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, join_work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       u8 queueId = xradio_queue_get_queue_id(hw_priv->pending_frame_id);
+       struct xradio_queue *queue = &hw_priv->tx_queue[queueId];
+       const struct xradio_txpriv *txpriv = NULL;
+       struct sk_buff *skb = NULL;
+       const struct wsm_tx *wsm;
+       const struct ieee80211_hdr *frame;
+       const u8 *bssid;
+       struct cfg80211_bss *bss;
+       const u8 *ssidie;
+       const u8 *dtimie;
+       const struct ieee80211_tim_ie *tim = NULL;
+       struct wsm_protected_mgmt_policy mgmt_policy;
+       //struct wsm_reset reset = {
+       //      .reset_statistics = true,
+       //};
+
+
+
+       BUG_ON(queueId >= 4);
+       if (xradio_queue_get_skb(queue, hw_priv->pending_frame_id,
+                       &skb, &txpriv)) {
+               wsm_unlock_tx(hw_priv);
+               return;
+       }
+       wsm = (struct wsm_tx *)&skb->data[0];
+       frame = (struct ieee80211_hdr *)&skb->data[txpriv->offset];
+       bssid = &frame->addr1[0]; /* AP SSID in a 802.11 frame */
+
+       BUG_ON(!wsm);
+       BUG_ON(!hw_priv->channel);
+
+       if (unlikely(priv->join_status)) {
+               sta_printk(XRADIO_DBG_WARN, "%s, pre join_status=%d.\n",
+                         __func__, priv->join_status);
+               wsm_lock_tx(hw_priv);
+               xradio_unjoin_work(&priv->unjoin_work);
+       }
+
+       cancel_delayed_work_sync(&priv->join_timeout);
+
+       bss = cfg80211_get_bss(hw_priv->hw->wiphy, hw_priv->channel,
+                       bssid, NULL, 0, 0, 0);
+       if (!bss) {
+               xradio_queue_remove(queue, hw_priv->pending_frame_id);
+               wsm_unlock_tx(hw_priv);
+               return;
+       }
+       ssidie = cfg80211_find_ie(WLAN_EID_SSID,
+               bss->ies->data,
+               bss->ies->len);
+       dtimie = cfg80211_find_ie(WLAN_EID_TIM,
+               bss->ies->data,
+               bss->ies->len);
+       if (dtimie)
+               tim = (struct ieee80211_tim_ie *)&dtimie[2];
+
+       mutex_lock(&hw_priv->conf_mutex);
+       {
+               struct wsm_join join = {
+                       .mode = (bss->capability & WLAN_CAPABILITY_IBSS) ?
+                               WSM_JOIN_MODE_IBSS : WSM_JOIN_MODE_BSS,
+                       /* default changed to LONG, by HuangLu, fix 2/5.5/11m tx fail*/
+                       .preambleType = WSM_JOIN_PREAMBLE_LONG,
+                       .probeForJoin = 1,
+                       /* dtimPeriod will be updated after association */
+                       .dtimPeriod = 1,
+                       .beaconInterval = bss->beacon_interval,
+               };
+
+               if (priv->if_id)
+                       join.flags |= WSM_FLAG_MAC_INSTANCE_1;
+               else
+                       join.flags &= ~WSM_FLAG_MAC_INSTANCE_1;
+
+               /* BT Coex related changes */
+               if (hw_priv->is_BT_Present) {
+                       if (((hw_priv->conf_listen_interval * 100) %
+                                       bss->beacon_interval) == 0)
+                               priv->listen_interval =
+                                       ((hw_priv->conf_listen_interval * 100) /
+                                       bss->beacon_interval);
+                       else
+                               priv->listen_interval =
+                                       ((hw_priv->conf_listen_interval * 100) /
+                                       bss->beacon_interval + 1);
+               }
+
+               if (tim && tim->dtim_period > 1) {
+                       join.dtimPeriod = tim->dtim_period;
+                       priv->join_dtim_period = tim->dtim_period;
+               }
+               priv->beacon_int = bss->beacon_interval;
+               sta_printk(XRADIO_DBG_NIY, "Join DTIM: %d, interval: %d\n",
+                               join.dtimPeriod, priv->beacon_int);
+
+               hw_priv->is_go_thru_go_neg = false;
+               join.channelNumber = hw_priv->channel->hw_value;
+
+               /* basicRateSet will be updated after association.
+               Currently these values are hardcoded */
+               if (hw_priv->channel->band == NL80211_BAND_5GHZ) {
+                       join.band = WSM_PHY_BAND_5G;
+                       join.basicRateSet = 64; /*6 mbps*/
+               }else{
+                       join.band = WSM_PHY_BAND_2_4G;
+                       join.basicRateSet = 7; /*1, 2, 5.5 mbps*/
+               }
+               memcpy(&join.bssid[0], bssid, sizeof(join.bssid));
+               memcpy(&priv->join_bssid[0], bssid, sizeof(priv->join_bssid));
+
+               if (ssidie) {
+                       join.ssidLength = ssidie[1];
+                       if (WARN_ON(join.ssidLength > sizeof(join.ssid)))
+                               join.ssidLength = sizeof(join.ssid);
+                       memcpy(&join.ssid[0], &ssidie[2], join.ssidLength);
+                       if(strstr(&join.ssid[0],"5.1.4"))
+                               msleep(200);
+#ifdef ROAM_OFFLOAD
+                       if((priv->vif->type == NL80211_IFTYPE_STATION)) {
+                               priv->ssid_length = join.ssidLength;
+                               memcpy(priv->ssid, &join.ssid[0], priv->ssid_length);
+                       }
+#endif /*ROAM_OFFLOAD*/
+               }
+
+               if (priv->vif->p2p) {
+                       join.flags |= WSM_JOIN_FLAGS_P2P_GO;
+                       join.basicRateSet =
+                               xradio_rate_mask_to_wsm(hw_priv, 0xFF0);
+               }
+
+               wsm_flush_tx(hw_priv);
+
+               /* Queue unjoin if not associated in 3 sec. */
+               queue_delayed_work(hw_priv->workqueue,
+                       &priv->join_timeout, 3 * HZ);
+               /*Stay Awake for Join Timeout*/
+               xradio_pm_stay_awake(&hw_priv->pm_state, 3 * HZ);
+
+               xradio_disable_listening(priv);
+
+               //WARN_ON(wsm_reset(hw_priv, &reset, priv->if_id));
+               WARN_ON(wsm_set_operational_mode(hw_priv, &defaultoperationalmode, priv->if_id));
+               WARN_ON(wsm_set_block_ack_policy(hw_priv,
+                       0, hw_priv->ba_tid_mask, priv->if_id));
+               spin_lock_bh(&hw_priv->ba_lock);
+               hw_priv->ba_ena = false;
+               hw_priv->ba_cnt = 0;
+               hw_priv->ba_acc = 0;
+               hw_priv->ba_hist = 0;
+               hw_priv->ba_cnt_rx = 0;
+               hw_priv->ba_acc_rx = 0;
+               spin_unlock_bh(&hw_priv->ba_lock);
+
+               mgmt_policy.protectedMgmtEnable = 0;
+               mgmt_policy.unprotectedMgmtFramesAllowed = 1;
+               mgmt_policy.encryptionForAuthFrame = 1;
+               wsm_set_protected_mgmt_policy(hw_priv, &mgmt_policy, priv->if_id);
+
+               if (wsm_join(hw_priv, &join, priv->if_id)) {
+                       memset(&priv->join_bssid[0],
+                               0, sizeof(priv->join_bssid));
+                       xradio_queue_remove(queue, hw_priv->pending_frame_id);
+                       cancel_delayed_work_sync(&priv->join_timeout);
+               } else {
+                       /* Upload keys */
+                       xradio_queue_requeue(queue, hw_priv->pending_frame_id,
+                                               true);
+                       priv->join_status = XRADIO_JOIN_STATUS_STA;
+
+                       /* Due to beacon filtering it is possible that the
+                        * AP's beacon is not known for the mac80211 stack.
+                        * Disable filtering temporary to make sure the stack
+                        * receives at least one */
+                       priv->disable_beacon_filter = true;
+
+               }
+               xradio_update_filtering(priv);
+       }
+       mutex_unlock(&hw_priv->conf_mutex);
+       cfg80211_put_bss(hw_priv->hw->wiphy,bss);
+       wsm_unlock_tx(hw_priv);
+}
+
+void xradio_join_timeout(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, join_timeout.work);
+       sta_printk(XRADIO_DBG_WARN, "[WSM] Issue unjoin command (TMO).\n");
+       wsm_lock_tx(priv->hw_priv);
+       xradio_unjoin_work(&priv->unjoin_work);
+}
+
+void xradio_unjoin_work(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, unjoin_work);
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       
+       struct wsm_reset reset = {
+               .reset_statistics = true,
+       };
+       bool is_htcapie = false;
+       int i;
+       struct xradio_vif *tmp_priv;
+
+       //add by yangfh.
+       hw_priv->connet_time[priv->if_id] = 0;
+#ifdef AP_HT_COMPAT_FIX
+       priv->ht_compat_det &= ~1;
+       priv->ht_compat_cnt = 0;
+#endif
+
+       del_timer_sync(&hw_priv->ba_timer);
+       mutex_lock(&hw_priv->conf_mutex);
+       if (unlikely(atomic_read(&hw_priv->scan.in_progress))) {
+               if (atomic_xchg(&priv->delayed_unjoin, 1)) {
+                       sta_printk(XRADIO_DBG_NIY, 
+                               "%s: Delayed unjoin "
+                               "is already scheduled.\n",
+                               __func__);
+                       wsm_unlock_tx(hw_priv);
+               }
+               mutex_unlock(&hw_priv->conf_mutex);
+               return;
+       }
+
+       if (priv->join_status &&
+                       priv->join_status > XRADIO_JOIN_STATUS_STA) {
+               sta_printk(XRADIO_DBG_ERROR, 
+                               "%s: Unexpected: join status: %d\n",
+                               __func__, priv->join_status);
+               BUG_ON(1);
+       }
+       if (priv->join_status) {
+               cancel_work_sync(&priv->update_filtering_work);
+               cancel_work_sync(&priv->set_beacon_wakeup_period_work);
+               memset(&priv->join_bssid[0], 0, sizeof(priv->join_bssid));
+               priv->join_status = XRADIO_JOIN_STATUS_PASSIVE;
+
+               /* Unjoin is a reset. */
+               wsm_flush_tx(hw_priv);
+               WARN_ON(wsm_keep_alive_period(hw_priv, 0, priv->if_id));
+               WARN_ON(wsm_reset(hw_priv, &reset, priv->if_id));
+               WARN_ON(wsm_set_operational_mode(hw_priv, &defaultoperationalmode, priv->if_id));
+               WARN_ON(wsm_set_output_power(hw_priv,
+                       hw_priv->output_power * 10, priv->if_id));
+               priv->join_dtim_period = 0;
+               priv->cipherType = 0;
+               WARN_ON(xradio_setup_mac_pvif(priv));
+               xradio_free_event_queue(hw_priv);
+               cancel_work_sync(&hw_priv->event_handler);
+               cancel_delayed_work_sync(&priv->connection_loss_work);
+               WARN_ON(wsm_set_block_ack_policy(hw_priv,
+                       0, hw_priv->ba_tid_mask, priv->if_id));
+               priv->disable_beacon_filter = false;
+               xradio_update_filtering(priv);
+               priv->setbssparams_done = false;
+               memset(&priv->association_mode, 0,
+                       sizeof(priv->association_mode));
+               memset(&priv->bss_params, 0, sizeof(priv->bss_params));
+               memset(&priv->firmware_ps_mode, 0,
+                       sizeof(priv->firmware_ps_mode));
+               priv->htcap = false;
+               xradio_for_each_vif(hw_priv, tmp_priv, i) {
+                       if (!tmp_priv)
+                               continue;
+                       if ((tmp_priv->join_status == XRADIO_JOIN_STATUS_STA) && tmp_priv->htcap)
+                               is_htcapie = true;
+               }
+
+               if (is_htcapie) {
+                       hw_priv->vif0_throttle = XRWL_HOST_VIF0_11N_THROTTLE;
+                       hw_priv->vif1_throttle = XRWL_HOST_VIF1_11N_THROTTLE;
+                       sta_printk(XRADIO_DBG_NIY, "UNJOIN HTCAP 11N %d\n",hw_priv->vif0_throttle);
+               } else {
+                       hw_priv->vif0_throttle = XRWL_HOST_VIF0_11BG_THROTTLE;
+                       hw_priv->vif1_throttle = XRWL_HOST_VIF1_11BG_THROTTLE;
+                       sta_printk(XRADIO_DBG_NIY, "UNJOIN 11BG %d\n",hw_priv->vif0_throttle);
+               }
+               sta_printk(XRADIO_DBG_NIY, "Unjoin.\n");
+       }
+       mutex_unlock(&hw_priv->conf_mutex);
+       wsm_unlock_tx(hw_priv);
+}
+
+int xradio_enable_listening(struct xradio_vif *priv,
+                               struct ieee80211_channel *chan)
+{
+       /* TODO:COMBO: Channel is common to HW currently in mac80211.
+       Change the code below once channel is made per VIF */
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       struct wsm_start start = {
+               .mode = WSM_START_MODE_P2P_DEV | (priv->if_id << 4),
+               .band = (chan->band == NL80211_BAND_5GHZ) ?
+                               WSM_PHY_BAND_5G : WSM_PHY_BAND_2_4G,
+               .channelNumber = chan->hw_value,
+               .beaconInterval = 100,
+               .DTIMPeriod = 1,
+               .probeDelay = 0,
+               .basicRateSet = 0x0F,
+       };
+
+
+       if(priv->if_id != 2) {
+               WARN_ON(priv->join_status > XRADIO_JOIN_STATUS_MONITOR);
+               return 0;
+       }
+       if (priv->join_status == XRADIO_JOIN_STATUS_MONITOR)
+               return 0;
+       if (priv->join_status == XRADIO_JOIN_STATUS_PASSIVE)
+               priv->join_status = XRADIO_JOIN_STATUS_MONITOR;
+
+       WARN_ON(priv->join_status > XRADIO_JOIN_STATUS_MONITOR);
+
+       return wsm_start(hw_priv, &start, XRWL_GENERIC_IF_ID);
+}
+
+int xradio_disable_listening(struct xradio_vif *priv)
+{
+       int ret;
+       struct wsm_reset reset = {
+               .reset_statistics = true,
+       };
+
+
+       if(priv->if_id != 2) {
+               WARN_ON(priv->join_status > XRADIO_JOIN_STATUS_MONITOR);
+        return 0;
+       }
+       priv->join_status = XRADIO_JOIN_STATUS_PASSIVE;
+
+       WARN_ON(priv->join_status > XRADIO_JOIN_STATUS_MONITOR);
+
+       if (priv->hw_priv->roc_if_id == -1)
+               return 0;
+
+       ret = wsm_reset(priv->hw_priv, &reset, XRWL_GENERIC_IF_ID);
+       return ret;
+}
+
+/* TODO:COMBO:UAPSD will be supported only on one interface */
+int xradio_set_uapsd_param(struct xradio_vif *priv,
+                               const struct wsm_edca_params *arg)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       int ret;
+       u16 uapsdFlags = 0;
+
+
+       /* Here's the mapping AC [queue, bit]
+       VO [0,3], VI [1, 2], BE [2, 1], BK [3, 0]*/
+
+       if (arg->params[0].uapsdEnable)
+               uapsdFlags |= 1 << 3;
+
+       if (arg->params[1].uapsdEnable)
+               uapsdFlags |= 1 << 2;
+
+       if (arg->params[2].uapsdEnable)
+               uapsdFlags |= 1 << 1;
+
+       if (arg->params[3].uapsdEnable)
+               uapsdFlags |= 1;
+
+       /* Currently pseudo U-APSD operation is not supported, so setting
+       * MinAutoTriggerInterval, MaxAutoTriggerInterval and
+       * AutoTriggerStep to 0 */
+
+       priv->uapsd_info.uapsdFlags = cpu_to_le16(uapsdFlags);
+       priv->uapsd_info.minAutoTriggerInterval = 0;
+       priv->uapsd_info.maxAutoTriggerInterval = 0;
+       priv->uapsd_info.autoTriggerStep = 0;
+
+       ret = wsm_set_uapsd_info(hw_priv, &priv->uapsd_info,
+                                priv->if_id);
+       return ret;
+}
+
+void xradio_ba_work(struct work_struct *work)
+{
+       struct xradio_common *hw_priv =
+               container_of(work, struct xradio_common, ba_work);
+       u8 tx_ba_tid_mask;
+
+
+       /* TODO:COMBO: reenable this part of code */
+/*     if (priv->join_status != XRADIO_JOIN_STATUS_STA)
+               return;
+       if (!priv->setbssparams_done)
+               return;*/
+
+       sta_printk(XRADIO_DBG_WARN, "BA work****\n");
+       spin_lock_bh(&hw_priv->ba_lock);
+//     tx_ba_tid_mask = hw_priv->ba_ena ? hw_priv->ba_tid_mask : 0;
+       tx_ba_tid_mask = hw_priv->ba_tid_mask;
+       spin_unlock_bh(&hw_priv->ba_lock);
+
+       wsm_lock_tx(hw_priv);
+
+       WARN_ON(wsm_set_block_ack_policy(hw_priv,
+               tx_ba_tid_mask, hw_priv->ba_tid_mask, -1)); /*TODO:COMBO*/
+
+       wsm_unlock_tx(hw_priv);
+}
+
+void xradio_ba_timer(unsigned long arg)
+{
+       bool ba_ena;
+       struct xradio_common *hw_priv = (struct xradio_common *)arg;
+
+
+       spin_lock_bh(&hw_priv->ba_lock);
+
+       if (atomic_read(&hw_priv->scan.in_progress)) {
+               hw_priv->ba_cnt = 0;
+               hw_priv->ba_acc = 0;
+               hw_priv->ba_cnt_rx = 0;
+               hw_priv->ba_acc_rx = 0;
+               goto skip_statistic_update;
+       }
+
+       if (hw_priv->ba_cnt >= XRADIO_BLOCK_ACK_CNT &&
+               (hw_priv->ba_acc / hw_priv->ba_cnt >= XRADIO_BLOCK_ACK_THLD ||
+               (hw_priv->ba_cnt_rx >= XRADIO_BLOCK_ACK_CNT &&
+               hw_priv->ba_acc_rx / hw_priv->ba_cnt_rx >=
+                       XRADIO_BLOCK_ACK_THLD)))
+               ba_ena = true;
+       else
+               ba_ena = false;
+
+       hw_priv->ba_cnt = 0;
+       hw_priv->ba_acc = 0;
+       hw_priv->ba_cnt_rx = 0;
+       hw_priv->ba_acc_rx = 0;
+
+       if (ba_ena != hw_priv->ba_ena) {
+               if (ba_ena || ++hw_priv->ba_hist >= XRADIO_BLOCK_ACK_HIST) {
+                       hw_priv->ba_ena = ba_ena;
+                       hw_priv->ba_hist = 0;
+#if 0
+                       sta_printk(XRADIO_DBG_NIY, "%s block ACK:\n",
+                               ba_ena ? "enable" : "disable");
+                       queue_work(hw_priv->workqueue, &hw_priv->ba_work);
+#endif
+               }
+       } else if (hw_priv->ba_hist)
+               --hw_priv->ba_hist;
+
+skip_statistic_update:
+       spin_unlock_bh(&hw_priv->ba_lock);
+}
+
+int xradio_vif_setup(struct xradio_vif *priv)
+{
+       struct xradio_common *hw_priv = priv->hw_priv;
+       int ret = 0;
+
+
+       //reset channel change flag, yangfh 2015-5-15 17:12:14
+       hw_priv->channel_changed  = 0;
+       /* Setup per vif workitems and locks */
+       spin_lock_init(&priv->vif_lock);
+       INIT_WORK(&priv->join_work, xradio_join_work);
+       INIT_DELAYED_WORK(&priv->join_timeout, xradio_join_timeout);
+       INIT_WORK(&priv->unjoin_work, xradio_unjoin_work);
+       INIT_WORK(&priv->wep_key_work, xradio_wep_key_work);
+       INIT_WORK(&priv->offchannel_work, xradio_offchannel_work);
+       INIT_DELAYED_WORK(&priv->bss_loss_work, xradio_bss_loss_work);
+       INIT_DELAYED_WORK(&priv->connection_loss_work, xradio_connection_loss_work);
+       priv->bss_loss_status = XRADIO_BSS_LOSS_NONE;
+       spin_lock_init(&priv->bss_loss_lock);
+       INIT_WORK(&priv->tx_failure_work, xradio_tx_failure_work);
+       spin_lock_init(&priv->ps_state_lock);
+       INIT_DELAYED_WORK(&priv->set_cts_work, xradio_set_cts_work);
+       INIT_WORK(&priv->set_tim_work, xradio_set_tim_work);
+       INIT_WORK(&priv->multicast_start_work, xradio_multicast_start_work);
+       INIT_WORK(&priv->multicast_stop_work, xradio_multicast_stop_work);
+       INIT_WORK(&priv->link_id_work, xradio_link_id_work);
+       INIT_DELAYED_WORK(&priv->link_id_gc_work, xradio_link_id_gc_work);
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       INIT_WORK(&priv->linkid_reset_work, xradio_link_id_reset);
+#endif
+       INIT_WORK(&priv->update_filtering_work, xradio_update_filtering_work);
+       INIT_DELAYED_WORK(&priv->pending_offchanneltx_work,
+                       xradio_pending_offchanneltx_work);
+       INIT_WORK(&priv->set_beacon_wakeup_period_work,
+               xradio_set_beacon_wakeup_period_work);
+#ifdef AP_HT_CAP_UPDATE
+        INIT_WORK(&priv->ht_oper_update_work, xradio_ht_oper_update_work);
+#endif
+       init_timer(&priv->mcast_timeout);
+       priv->mcast_timeout.data = (unsigned long)priv;
+       priv->mcast_timeout.function = xradio_mcast_timeout;
+       priv->setbssparams_done = false;
+       priv->power_set_true = 0;
+       priv->user_power_set_true = 0;
+       priv->user_pm_mode = 0;
+
+       /* Initialising the broadcast filter */
+       memset(priv->broadcast_filter.MacAddr, 0xFF, ETH_ALEN);
+       priv->broadcast_filter.nummacaddr = 1;
+       priv->broadcast_filter.address_mode = 1;
+       priv->broadcast_filter.filter_mode = 1;
+       priv->htcap = false;
+#ifdef AP_HT_COMPAT_FIX
+       priv->ht_compat_det = 0;
+       priv->ht_compat_cnt = 0;
+#endif
+
+       sta_printk(XRADIO_DBG_ALWY, "!!!%s: id=%d, type=%d, p2p=%d\n",
+                       __func__, priv->if_id, priv->vif->type, priv->vif->p2p);
+
+       atomic_set(&priv->enabled, 1);
+
+               /* default EDCA */
+               WSM_EDCA_SET(&priv->edca, 0, 0x0002, 0x0003, 0x0007,
+                               47, 0xc8, false);
+               WSM_EDCA_SET(&priv->edca, 1, 0x0002, 0x0007, 0x000f,
+                               94, 0xc8, false);
+
+//             if(priv->vif->p2p == true) {
+                       WSM_EDCA_SET(&priv->edca, 2, 0x0002, 0x0003, 0x0007,
+                               0, 0xc8, false);
+                       sta_printk(XRADIO_DBG_MSG, "EDCA params Best effort for sta/p2p is " \
+                                "aifs=%u, cw_min=%u, cw_max=%u \n",
+                               priv->edca.params[2].aifns, priv->edca.params[2].cwMin,
+                                priv->edca.params[2].cwMax);
+#if 0                                   
+               }else {
+                       WSM_EDCA_SET(&priv->edca, 2, 0x0003, 0x000f, 0x03ff,
+                               0, 0xc8, false);
+                       sta_printk(XRADIO_DBG_MSG, "EDCA params Best effort for sta is " \
+                                "aifs=%u, cw_min=%u, cw_max=%u \n",
+                               priv->edca.params[2].aifns, priv->edca.params[2].cwMin,
+                                priv->edca.params[2].cwMax);
+               }
+#endif
+               WSM_EDCA_SET(&priv->edca, 3, 0x0007, 0x000f, 0x03ff,
+                               0, 0xc8, false);
+
+               ret = wsm_set_edca_params(hw_priv, &priv->edca, priv->if_id);
+               if (WARN_ON(ret))
+                       goto out;
+
+               ret = xradio_set_uapsd_param(priv, &priv->edca);
+               if (WARN_ON(ret))
+                       goto out;
+
+               memset(priv->bssid, ~0, ETH_ALEN);
+               priv->wep_default_key_id = -1;
+               priv->cipherType = 0;
+               priv->cqm_link_loss_count   = XRADIO_LINK_LOSS_THOLD_DEF;
+               priv->cqm_beacon_loss_count = XRADIO_BSS_LOSS_THOLD_DEF;
+
+               /* Temporary configuration - beacon filter table */
+               __xradio_bf_configure(priv);
+
+out:
+       return ret;
+}
+
+int xradio_setup_mac_pvif(struct xradio_vif *priv)
+{
+       int ret = 0;
+       /* NOTE: There is a bug in FW: it reports signal
+       * as RSSI if RSSI subscription is enabled.
+       * It's not enough to set WSM_RCPI_RSSI_USE_RSSI. */
+       /* NOTE2: RSSI based reports have been switched to RCPI, since
+       * FW has a bug and RSSI reported values are not stable,
+       * what can leads to signal level oscilations in user-end applications */
+       struct wsm_rcpi_rssi_threshold threshold = {
+               .rssiRcpiMode = WSM_RCPI_RSSI_THRESHOLD_ENABLE |
+               WSM_RCPI_RSSI_DONT_USE_UPPER |
+               WSM_RCPI_RSSI_DONT_USE_LOWER,
+               .rollingAverageCount = 16,
+       };
+
+
+       /* Remember the decission here to make sure, we will handle
+        * the RCPI/RSSI value correctly on WSM_EVENT_RCPI_RSS */
+       if (threshold.rssiRcpiMode & WSM_RCPI_RSSI_USE_RSSI)
+               priv->cqm_use_rssi = true;
+
+
+       /* Configure RSSI/SCPI reporting as RSSI. */
+       ret = wsm_set_rcpi_rssi_threshold(priv->hw_priv, &threshold, priv->if_id);
+       return ret;
+}
+
+void xradio_rem_chan_timeout(struct work_struct *work)
+{
+       struct xradio_common *hw_priv =
+               container_of(work, struct xradio_common, rem_chan_timeout.work);
+       int ret, if_id;
+       struct xradio_vif *priv;
+
+
+#ifdef TES_P2P_0002_ROC_RESTART
+       if(TES_P2P_0002_state == TES_P2P_0002_STATE_GET_PKTID) {
+               sta_printk(XRADIO_DBG_WARN, "[Restart rem_chan_timeout:Timeout]\n");
+               return;
+       }
+#endif
+
+       if (atomic_read(&hw_priv->remain_on_channel) == 0) {
+               return;
+       }
+       ieee80211_remain_on_channel_expired(hw_priv->hw);
+
+       mutex_lock(&hw_priv->conf_mutex);
+       if_id = hw_priv->roc_if_id;
+#ifdef ROC_DEBUG
+       sta_printk(XRADIO_DBG_ERROR, "ROC TO IN %d\n", if_id);
+#endif
+       priv = __xrwl_hwpriv_to_vifpriv(hw_priv, if_id);
+       ret = WARN_ON(__xradio_flush(hw_priv, false, if_id));
+       if (!ret) {
+               xradio_disable_listening(priv);
+       }
+       atomic_set(&hw_priv->remain_on_channel, 0);
+       hw_priv->roc_if_id = -1;
+
+#ifdef ROC_DEBUG
+       sta_printk(XRADIO_DBG_ERROR, "ROC TO OUT %d\n", if_id);
+#endif
+
+       mutex_unlock(&hw_priv->conf_mutex);
+       up(&hw_priv->scan.lock);
+}
+const u8 *xradio_get_ie(u8 *start, size_t len, u8 ie)
+{
+       u8 *end, *pos;
+
+
+       pos = start;
+       if (pos == NULL)
+               return NULL;
+       end = pos + len;
+
+       while (pos + 1 < end) {
+               if (pos + 2 + pos[1] > end)
+                       break;
+               if (pos[0] == ie)
+                       return pos;
+               pos += 2 + pos[1];
+       }
+
+       return NULL;
+}
+
+/**
+ * xradio_set_macaddrfilter -called when tesmode command
+ * is for setting mac address filter
+ *
+ * @hw: the hardware
+ * @data: incoming data
+ *
+ * Returns: 0 on success or non zero value on failure
+ */
+int xradio_set_macaddrfilter(struct xradio_common *hw_priv, struct xradio_vif *priv, u8 *data)
+{
+       struct wsm_mac_addr_filter *mac_addr_filter =  NULL;
+       struct wsm_mac_addr_info *addr_info = NULL;
+       u8 action_mode = 0, no_of_mac_addr = 0, i = 0;
+       int ret = 0;
+       u16 macaddrfiltersize = 0;
+
+
+       /* Retrieving Action Mode */
+       action_mode = data[0];
+       /* Retrieving number of address entries */
+       no_of_mac_addr = data[1];
+
+       addr_info = (struct wsm_mac_addr_info *)&data[2];
+
+       /* Computing sizeof Mac addr filter */
+       macaddrfiltersize =  sizeof(*mac_addr_filter) + \
+                       (no_of_mac_addr * sizeof(struct wsm_mac_addr_info));
+
+       mac_addr_filter = kzalloc(macaddrfiltersize, GFP_KERNEL);
+       if (!mac_addr_filter) {
+               ret = -ENOMEM;
+               goto exit_p;
+       }
+       mac_addr_filter->action_mode = action_mode;
+       mac_addr_filter->numfilter = no_of_mac_addr;
+
+       for (i = 0; i < no_of_mac_addr; i++) {
+               mac_addr_filter->macaddrfilter[i].address_mode = \
+                                               addr_info[i].address_mode;
+               memcpy(mac_addr_filter->macaddrfilter[i].MacAddr, \
+                               addr_info[i].MacAddr , ETH_ALEN);
+               mac_addr_filter->macaddrfilter[i].filter_mode = \
+                                               addr_info[i].filter_mode;
+       }
+       ret = WARN_ON(wsm_write_mib(hw_priv, WSM_MIB_ID_MAC_ADDR_FILTER, \
+                                        mac_addr_filter, macaddrfiltersize, priv->if_id));
+
+       kfree(mac_addr_filter);
+exit_p:
+       return ret;
+}
+
+/**
+ * xradio_set_arpreply -called for creating and
+ * configuring arp response template frame
+ *
+ * @hw: the hardware
+ *
+ * Returns: 0 on success or non zero value on failure
+ */
+int xradio_set_arpreply(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
+{
+       struct xradio_vif *priv = xrwl_get_vif_from_ieee80211(vif);
+       struct xradio_common *hw_priv = (struct xradio_common *)hw->priv;
+       u32 framehdrlen, encrypthdr, encrypttailsize, framebdylen = 0;
+       bool encrypt = false;
+       int ret = 0;
+       u8 *template_frame = NULL;
+       struct ieee80211_hdr_3addr *dot11hdr = NULL;
+       struct ieee80211_snap_hdr *snaphdr = NULL;
+       struct arphdr *arp_hdr = NULL;
+
+
+       template_frame = kzalloc(MAX_ARP_REPLY_TEMPLATE_SIZE, GFP_KERNEL);
+       if (!template_frame) {
+               sta_printk(XRADIO_DBG_ERROR, "Template frame memory failed\n");
+               ret = -ENOMEM;
+               goto exit_p;
+       }
+       dot11hdr = (struct ieee80211_hdr_3addr *)&template_frame[4];
+       
+       framehdrlen = sizeof(*dot11hdr);
+       if ((priv->vif->type == NL80211_IFTYPE_AP) && priv->vif->p2p)
+               priv->cipherType = WLAN_CIPHER_SUITE_CCMP;
+       switch (priv->cipherType) {
+       
+       case WLAN_CIPHER_SUITE_WEP40:
+       case WLAN_CIPHER_SUITE_WEP104:
+               sta_printk(XRADIO_DBG_NIY, "WEP\n");
+               encrypthdr = WEP_ENCRYPT_HDR_SIZE;
+               encrypttailsize = WEP_ENCRYPT_TAIL_SIZE;
+               encrypt = 1;
+               break;
+       
+       
+       case WLAN_CIPHER_SUITE_TKIP:
+               sta_printk(XRADIO_DBG_NIY, "WPA\n");
+               encrypthdr = WPA_ENCRYPT_HDR_SIZE;
+               encrypttailsize = WPA_ENCRYPT_TAIL_SIZE;
+               encrypt = 1;
+               break;
+       
+       case WLAN_CIPHER_SUITE_CCMP:
+               sta_printk(XRADIO_DBG_NIY, "WPA2\n");
+               encrypthdr = WPA2_ENCRYPT_HDR_SIZE;
+               encrypttailsize = WPA2_ENCRYPT_TAIL_SIZE;
+               encrypt = 1;
+               break;
+       
+       case WLAN_CIPHER_SUITE_SMS4:
+               sta_printk(XRADIO_DBG_NIY, "WAPI\n");
+               encrypthdr = WAPI_ENCRYPT_HDR_SIZE;
+               encrypttailsize = WAPI_ENCRYPT_TAIL_SIZE;
+               encrypt = 1;
+               break;
+       
+       default:
+               encrypthdr = 0;
+               encrypttailsize = 0;
+               encrypt = 0;
+               break;
+       }
+
+       framehdrlen += encrypthdr;
+       /* Filling the 802.11 Hdr */
+       dot11hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA);
+       if (priv->vif->type == NL80211_IFTYPE_STATION)
+               dot11hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_TODS);
+       else
+               dot11hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_FROMDS);
+       
+       if (encrypt)
+               dot11hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_WEP);
+       
+       if (priv->vif->bss_conf.qos) {
+               sta_printk(XRADIO_DBG_NIY, "QOS Enabled\n");
+               dot11hdr->frame_control |= cpu_to_le16(IEEE80211_QOS_DATAGRP);
+               *(u16 *)(dot11hdr + 1) = 0x0;
+               framehdrlen += 2;
+       } else {
+               dot11hdr->frame_control |= cpu_to_le16(IEEE80211_STYPE_DATA);
+       }
+       
+       memcpy(dot11hdr->addr1, priv->vif->bss_conf.bssid, ETH_ALEN);
+       memcpy(dot11hdr->addr2, priv->vif->addr, ETH_ALEN);
+       memcpy(dot11hdr->addr3, priv->vif->bss_conf.bssid, ETH_ALEN);
+       
+       /* Filling the LLC/SNAP Hdr */
+       snaphdr = (struct ieee80211_snap_hdr *)((u8 *)dot11hdr + framehdrlen);
+       memcpy(snaphdr, (struct ieee80211_snap_hdr *)rfc1042_header, \
+               sizeof(*snaphdr));
+       *(u16 *)(++snaphdr) = cpu_to_be16(ETH_P_ARP);
+       /* Updating the framebdylen with snaphdr and LLC hdr size */
+       framebdylen = sizeof(*snaphdr) + 2;
+       
+       /* Filling the ARP Reply Payload */
+       arp_hdr = (struct arphdr *)((u8 *)dot11hdr + framehdrlen + framebdylen);
+       arp_hdr->ar_hrd = cpu_to_be16(ARPHRD_ETHER);
+       arp_hdr->ar_pro = cpu_to_be16(ETH_P_IP);
+       arp_hdr->ar_hln = ETH_ALEN;
+       arp_hdr->ar_pln = 4;
+       arp_hdr->ar_op = cpu_to_be16(ARPOP_REPLY);
+       
+       /* Updating the frmbdylen with Arp Reply Hdr and Arp payload size(20) */
+       framebdylen += sizeof(*arp_hdr) + 20;
+       
+       /* Updating the framebdylen with Encryption Tail Size */
+       framebdylen += encrypttailsize;
+       
+       /* Filling the Template Frame Hdr */
+       template_frame[0] = WSM_FRAME_TYPE_ARP_REPLY; /* Template frame type */
+       template_frame[1] = 0xFF; /* Rate to be fixed */
+       ((u16 *)&template_frame[2])[0] = framehdrlen + framebdylen;
+       
+       ret = WARN_ON(wsm_write_mib(hw_priv, WSM_MIB_ID_TEMPLATE_FRAME, \
+                                     template_frame, (framehdrlen+framebdylen+4), 
+                                     priv->if_id));
+       kfree(template_frame);
+exit_p:
+       return ret;
+}
+
+#ifdef ROAM_OFFLOAD
+/**
+ * xradio_testmode_event -send asynchronous event
+ * to userspace
+ *
+ * @wiphy: the wiphy
+ * @msg_id: XR msg ID
+ * @data: data to be sent
+ * @len: data length
+ * @gfp: allocation flag
+ *
+ * Returns: 0 on success or non zero value on failure
+ */
+int xradio_testmode_event(struct wiphy *wiphy, const u32 msg_id,
+                          const void *data, int len, gfp_t gfp)
+{
+       struct sk_buff *skb = NULL;
+
+
+       skb = cfg80211_testmode_alloc_event_skb(wiphy, 
+             nla_total_size(len+sizeof(msg_id)), gfp);
+
+       if (!skb)
+               return -ENOMEM;
+
+       cfg80211_testmode_event(skb, gfp);
+       return 0;
+}
+#endif /*ROAM_OFFLOAD*/
diff --git a/drivers/net/wireless/xradio/sta.h b/drivers/net/wireless/xradio/sta.h
new file mode 100644 (file)
index 0000000..7ceed61
--- /dev/null
@@ -0,0 +1,122 @@
+/*
+ * sta interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+#ifndef STA_H_INCLUDED
+#define STA_H_INCLUDED
+
+
+#ifdef XRADIO_USE_LONG_KEEP_ALIVE_PERIOD
+#define XRADIO_KEEP_ALIVE_PERIOD         (28)
+#else
+/*For Samsung, it is defined as 4*/
+#define XRADIO_KEEP_ALIVE_PERIOD         (4)
+#endif
+
+#ifdef XRADIO_USE_LONG_DTIM_PERIOD
+#define XRADIO_BSS_LOSS_THOLD_DEF  30
+#define XRADIO_LINK_LOSS_THOLD_DEF 50
+#else
+#define XRADIO_BSS_LOSS_THOLD_DEF  20
+#define XRADIO_LINK_LOSS_THOLD_DEF 40
+#endif
+
+/* ******************************************************************** */
+/* mac80211 API                                                                */
+
+int xradio_start(struct ieee80211_hw *dev);
+void xradio_stop(struct ieee80211_hw *dev);
+int xradio_add_interface(struct ieee80211_hw *dev, struct ieee80211_vif *vif);
+void xradio_remove_interface(struct ieee80211_hw *dev, struct ieee80211_vif *vif);
+int xradio_change_interface(struct ieee80211_hw *dev,
+                            struct ieee80211_vif *vif,
+                            enum nl80211_iftype new_type,
+                            bool p2p);
+int xradio_config(struct ieee80211_hw *dev, u32 changed);
+int xradio_change_interface(struct ieee80211_hw *dev,
+                            struct ieee80211_vif *vif,
+                            enum nl80211_iftype new_type,
+                            bool p2p);
+void xradio_configure_filter(struct ieee80211_hw *dev,
+                             unsigned int changed_flags,
+                             unsigned int *total_flags,
+                             u64 multicast);
+int xradio_conf_tx(struct ieee80211_hw *dev, struct ieee80211_vif *vif,
+                   u16 queue, const struct ieee80211_tx_queue_params *params);
+int xradio_get_stats(struct ieee80211_hw *dev,
+                     struct ieee80211_low_level_stats *stats);
+/* Not more a part of interface?
+int xradio_get_tx_stats(struct ieee80211_hw *dev,
+                       struct ieee80211_tx_queue_stats *stats);
+*/
+int xradio_set_rts_threshold(struct ieee80211_hw *hw, u32 value);
+
+void xradio_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif, u32 queues, bool drop);
+
+
+int xradio_remain_on_channel(struct ieee80211_hw *hw,
+                            struct ieee80211_vif *vif,
+                             struct ieee80211_channel *chan,
+                             int duration, enum ieee80211_roc_type type);
+int xradio_cancel_remain_on_channel(struct ieee80211_hw *hw);
+int xradio_set_arpreply(struct ieee80211_hw *hw, struct ieee80211_vif *vif);
+u64 xradio_prepare_multicast(struct ieee80211_hw *hw,
+                             struct netdev_hw_addr_list *mc_list);
+int xradio_set_pm(struct xradio_vif *priv, const struct wsm_set_pm *arg);
+void xradio_set_data_filter(struct ieee80211_hw *hw,
+                            struct ieee80211_vif *vif,
+                            void *data,
+                            int len);
+
+/* ******************************************************************** */
+/* WSM callbacks                                                       */
+
+/* void xradio_set_pm_complete_cb(struct xradio_common *hw_priv,
+       struct wsm_set_pm_complete *arg); */
+void xradio_channel_switch_cb(struct xradio_common *hw_priv);
+
+/* ******************************************************************** */
+/* WSM events                                                          */
+
+void xradio_free_event_queue(struct xradio_common *hw_priv);
+void xradio_event_handler(struct work_struct *work);
+void xradio_bss_loss_work(struct work_struct *work);
+void xradio_connection_loss_work(struct work_struct *work);
+void xradio_keep_alive_work(struct work_struct *work);
+void xradio_tx_failure_work(struct work_struct *work);
+
+/* ******************************************************************** */
+/* Internal API                                                                */
+
+int xradio_setup_mac(struct xradio_common *hw_priv);
+void xradio_join_work(struct work_struct *work);
+void xradio_join_timeout(struct work_struct *work);
+void xradio_unjoin_work(struct work_struct *work);
+void xradio_offchannel_work(struct work_struct *work);
+void xradio_wep_key_work(struct work_struct *work);
+void xradio_update_filtering(struct xradio_vif *priv);
+void xradio_update_filtering_work(struct work_struct *work);
+int __xradio_flush(struct xradio_common *hw_priv, bool drop, int if_id);
+void xradio_set_beacon_wakeup_period_work(struct work_struct *work);
+int xradio_enable_listening(struct xradio_vif *priv, struct ieee80211_channel *chan);
+int xradio_disable_listening(struct xradio_vif *priv);
+int xradio_set_uapsd_param(struct xradio_vif *priv, const struct wsm_edca_params *arg);
+void xradio_ba_work(struct work_struct *work);
+void xradio_ba_timer(unsigned long arg);
+const u8 *xradio_get_ie(u8 *start, size_t len, u8 ie);
+int xradio_vif_setup(struct xradio_vif *priv);
+int xradio_setup_mac_pvif(struct xradio_vif *priv);
+void xradio_iterate_vifs(void *data, u8 *mac, struct ieee80211_vif *vif);
+void xradio_rem_chan_timeout(struct work_struct *work);
+int xradio_set_macaddrfilter(struct xradio_common *hw_priv, struct xradio_vif *priv, u8 *data);
+#ifdef ROAM_OFFLOAD
+int xradio_testmode_event(struct wiphy *wiphy, const u32 msg_id,
+                          const void *data, int len, gfp_t gfp);
+#endif /*ROAM_OFFLOAD*/
+#endif
diff --git a/drivers/net/wireless/xradio/tx.c b/drivers/net/wireless/xradio/tx.c
new file mode 100644 (file)
index 0000000..72c04ef
--- /dev/null
@@ -0,0 +1,1455 @@
+/*
+ * Datapath implementation for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <net/mac80211.h>
+#include <linux/etherdevice.h>
+#include <linux/skbuff.h>
+
+#include "xradio.h"
+#include "wsm.h"
+#include "bh.h"
+#include "ap.h"
+#include "sta.h"
+#include "sdio.h"
+#include "common.h"
+#include "p2p.h"
+
+#define B_RATE_INDEX   0     //11b rate for important short frames in 2.4G.
+#define AG_RATE_INDEX  6     //11a/g rate for important short frames in 5G.
+#define XRADIO_INVALID_RATE_ID (0xFF)
+
+/* rate should fall quickly to avoid dropping frames by aps.
+ * Add by yangfh 2014-9-22 13:39:57
+ */
+#define HIGH_RATE_MAX_RETRY  7
+
+#ifdef TES_P2P_0002_ROC_RESTART
+#include <linux/time.h>
+#endif
+
+//for test yangfh
+extern u32 tx_retrylimit;
+extern u32 tx_over_limit;
+extern u32 tx_lower_limit;
+extern int retry_mis;
+
+static const struct ieee80211_rate *
+xradio_get_tx_rate(const struct xradio_common *hw_priv,
+                  const struct ieee80211_tx_rate *rate);
+
+/* ******************************************************************** */
+/* TX policy cache implementation                                      */
+
+static void tx_policy_dump(struct tx_policy *policy)
+{
+       txrx_printk(XRADIO_DBG_MSG, "[TX policy] "
+               "%.1X%.1X%.1X%.1X%.1X%.1X%.1X%.1X"
+               "%.1X%.1X%.1X%.1X%.1X%.1X%.1X%.1X"
+               "%.1X%.1X%.1X%.1X%.1X%.1X%.1X%.1X: %d\n",
+               policy->raw[0] & 0x0F,  policy->raw[0] >> 4,
+               policy->raw[1] & 0x0F,  policy->raw[1] >> 4,
+               policy->raw[2] & 0x0F,  policy->raw[2] >> 4,
+               policy->raw[3] & 0x0F,  policy->raw[3] >> 4,
+               policy->raw[4] & 0x0F,  policy->raw[4] >> 4,
+               policy->raw[5] & 0x0F,  policy->raw[5] >> 4,
+               policy->raw[6] & 0x0F,  policy->raw[6] >> 4,
+               policy->raw[7] & 0x0F,  policy->raw[7] >> 4,
+               policy->raw[8] & 0x0F,  policy->raw[8] >> 4,
+               policy->raw[9] & 0x0F,  policy->raw[9] >> 4,
+               policy->raw[10] & 0x0F,  policy->raw[10] >> 4,
+               policy->raw[11] & 0x0F,  policy->raw[11] >> 4,
+               policy->defined);
+}
+
+static void xradio_check_go_neg_conf_success(struct xradio_common *hw_priv,
+                                               u8 *action)
+{
+       if (action[2] == 0x50 && action[3] == 0x6F && action[4] == 0x9A &&
+               action[5] == 0x09 && action[6] == 0x02) {
+               if(action[17] == 0) {
+                       hw_priv->is_go_thru_go_neg = true;
+               }
+               else {
+                       hw_priv->is_go_thru_go_neg = false;
+               }
+       }
+}
+
+static void xradio_check_prov_desc_req(struct xradio_common *hw_priv,
+                                                u8 *action)
+{
+       if (action[2] == 0x50 && action[3] == 0x6F && action[4] == 0x9A &&
+           action[5] == 0x09 && action[6] == 0x07) {
+               hw_priv->is_go_thru_go_neg = false;
+       }
+}
+
+//modified by yangfh
+static void tx_policy_build(const struct xradio_common *hw_priv,
+       /* [out] */ struct tx_policy *policy,
+       struct ieee80211_tx_rate *rates, size_t count)
+{
+       int i, j;
+       struct ieee80211_rate * tmp_rate = NULL;
+       unsigned limit = hw_priv->short_frame_max_tx_count;
+       unsigned max_rates_cnt = count;
+       unsigned total = 0;
+       BUG_ON(rates[0].idx < 0);
+       memset(policy, 0, sizeof(*policy));
+
+
+       txrx_printk(XRADIO_DBG_NIY,"============================");
+#if 0
+       //debug yangfh
+       for (i = 0; i < count; ++i) {
+               if(rates[i].idx>=0) {
+                       tmp_rate = xradio_get_tx_rate(hw_priv, &rates[i]);
+                       txrx_printk(XRADIO_DBG_NIY,"[TX policy] Org %d.%dMps=%d", 
+                           tmp_rate->bitrate/10, tmp_rate->bitrate%10, rates[i].count);
+               }
+       }
+       txrx_printk(XRADIO_DBG_NIY,"----------------------------");
+#endif
+       
+       /* minstrel is buggy a little bit, so distille
+        * incoming rates first.
+        */
+       /* Sort rates in descending order. */
+       total = rates[0].count;
+       for (i = 1; i < count; ++i) {
+               if (rates[i].idx > rates[i-1].idx) {
+                       rates[i].idx = rates[i-1].idx>0?(rates[i-1].idx-1):-1;
+               }
+               if (rates[i].idx < 0 || i>=limit) {
+                       count = i;
+                       break;
+               } else {
+                       total += rates[i].count;
+               }
+       }
+
+       /* Add lowest rate to the end when 11a/n. 
+        * Don't apply in 11b/g because p2p unsupport 1Mbps.
+        * TODO: it's better to do this in rate control of mac80211.
+        */
+       if (((rates[0].flags & IEEE80211_TX_RC_MCS) || 
+                  hw_priv->channel->band == NL80211_BAND_5GHZ) && 
+                 count < max_rates_cnt && rates[count-1].idx != 0) {
+               rates[count].idx   = 0;
+               rates[count].count = rates[0].count;
+               rates[count].flags = rates[0].flags;
+               total += rates[count].count;
+               count++;
+       }
+
+       /* adjust tx count to limit, rates should fall quickly 
+        * and lower rates should be more retry, because reorder 
+        * buffer of reciever will be timeout and clear probably.
+        */
+       if (count < 2) {
+               rates[0].count = limit;
+               total = limit;
+       } else {
+               u8 end_retry = 0;  //the retry should be add to last rate.
+               if (limit > HIGH_RATE_MAX_RETRY) {
+                       end_retry = limit - HIGH_RATE_MAX_RETRY;
+                       limit     = HIGH_RATE_MAX_RETRY;
+               }
+               for (i = 0; (limit != total) && (i < 100); ++i) {  //i<100 to avoid dead loop
+                       j = i % count;
+                       if(limit < total) {
+                               total += (rates[j].count > 1? -1 : 0);
+                               rates[j].count += (rates[j].count > 1? -1 : 0);
+                       } else {
+                               j = count - 1 - j;
+                               if (rates[j].count > 0) {
+                                       total++;
+                                       rates[j].count++;
+                               }
+                       }
+               }
+               if (end_retry) {
+                       rates[count-1].count += end_retry;
+                       limit += end_retry;
+               }
+       }
+       
+       /* Eliminate duplicates. */
+       total = rates[0].count;
+       for (i = 0, j = 1; j < count; ++j) {
+               if (rates[j].idx == rates[i].idx) {
+                       rates[i].count += rates[j].count;
+               } else if (rates[j].idx > rates[i].idx) {
+                       break;
+               } else {
+                       ++i;
+                       if (i != j)
+                               rates[i] = rates[j];
+               }
+               total += rates[j].count;
+       }
+       count = i + 1;
+
+       /* Re-fill policy trying to keep every requested rate and with
+        * respect to the global max tx retransmission count. 
+        */
+       if (limit < count)
+               limit = count;
+       if (total > limit) {
+               for (i = 0; i < count; ++i) {
+                       int left = count - i - 1;
+                       if (rates[i].count > limit - left)
+                               rates[i].count = limit - left;
+                       limit -= rates[i].count;
+               }
+       }
+
+       /* HACK!!! Device has problems (at least) switching from
+        * 54Mbps CTS to 1Mbps. This switch takes enormous amount
+        * of time (100-200 ms), leading to valuable throughput drop.
+        * As a workaround, additional g-rates are injected to the
+        * policy.
+        */
+       if (count == 2 && !(rates[0].flags & IEEE80211_TX_RC_MCS) &&
+                       rates[0].idx > 4 && rates[0].count > 2 &&
+                       rates[1].idx < 2) {
+               /* ">> 1" is an equivalent of "/ 2", but faster */
+               int mid_rate = (rates[0].idx + 4) >> 1;
+
+               /* Decrease number of retries for the initial rate */
+               rates[0].count -= 2;
+
+               if (mid_rate != 4) {
+                       /* Keep fallback rate at 1Mbps. */
+                       rates[3] = rates[1];
+
+                       /* Inject 1 transmission on lowest g-rate */
+                       rates[2].idx = 4;
+                       rates[2].count = 1;
+                       rates[2].flags = rates[1].flags;
+
+                       /* Inject 1 transmission on mid-rate */
+                       rates[1].idx = mid_rate;
+                       rates[1].count = 1;
+
+                       /* Fallback to 1 Mbps is a really bad thing,
+                        * so let's try to increase probability of
+                        * successful transmission on the lowest g rate
+                        * even more */
+                       if (rates[0].count >= 3) {
+                               --rates[0].count;
+                               ++rates[2].count;
+                       }
+
+                       /* Adjust amount of rates defined */
+                       count += 2;
+               } else {
+                       /* Keep fallback rate at 1Mbps. */
+                       rates[2] = rates[1];
+
+                       /* Inject 2 transmissions on lowest g-rate */
+                       rates[1].idx = 4;
+                       rates[1].count = 2;
+
+                       /* Adjust amount of rates defined */
+                       count += 1;
+               }
+       }
+       
+       tmp_rate = (struct ieee80211_rate *)xradio_get_tx_rate(hw_priv, &rates[0]);
+       if(tmp_rate)
+               policy->defined = tmp_rate->hw_value + 1;
+
+       for (i = 0; i < count; ++i) {
+               register unsigned rateid, off, shift, retries;
+               
+               tmp_rate = (struct ieee80211_rate *)xradio_get_tx_rate(hw_priv, &rates[i]);
+               if(tmp_rate) {
+                       rateid = tmp_rate->hw_value;
+               } else {
+                       break;
+               }
+               off = rateid >> 3;              /* eq. rateid / 8 */
+               shift = (rateid & 0x07) << 2;   /* eq. (rateid % 8) * 4 */
+
+               retries = rates[i].count;
+               if (unlikely(retries > 0x0F))
+                       rates[i].count = retries = 0x0F;
+               policy->tbl[off] |= __cpu_to_le32(retries << shift);
+               policy->retry_count += retries;
+               txrx_printk(XRADIO_DBG_NIY,"[TX policy] %d.%dMps=%d", 
+                           tmp_rate->bitrate/10, tmp_rate->bitrate%10, retries);
+       }
+       
+       txrx_printk(XRADIO_DBG_MSG, "[TX policy] Dst Policy (%d): " \
+               "%d:%d, %d:%d, %d:%d, %d:%d, %d:%d\n",
+               count,
+               rates[0].idx, rates[0].count,
+               rates[1].idx, rates[1].count,
+               rates[2].idx, rates[2].count,
+               rates[3].idx, rates[3].count,
+               rates[4].idx, rates[4].count);
+}
+
+static inline bool tx_policy_is_equal(const struct tx_policy *wanted,
+                                       const struct tx_policy *cached)
+{
+       size_t count = wanted->defined >> 1;
+
+       if (wanted->defined > cached->defined)
+               return false;
+       if (count) {
+               if (memcmp(wanted->raw, cached->raw, count))
+                       return false;
+       }
+       if (wanted->defined & 1) {
+               if ((wanted->raw[count] & 0x0F) != (cached->raw[count] & 0x0F))
+                       return false;
+       }
+       return true;
+}
+
+static int tx_policy_find(struct tx_policy_cache *cache,
+                               const struct tx_policy *wanted)
+{
+       /* O(n) complexity. Not so good, but there's only 8 entries in
+        * the cache.
+        * Also lru helps to reduce search time. */
+       struct tx_policy_cache_entry *it;
+       /* Search for policy in "used" list */
+       list_for_each_entry(it, &cache->used, link) {
+               if (tx_policy_is_equal(wanted, &it->policy))
+                       return it - cache->cache;
+       }
+       /* Then - in "free list" */
+       list_for_each_entry(it, &cache->free, link) {
+               if (tx_policy_is_equal(wanted, &it->policy))
+                       return it - cache->cache;
+       }
+       return -1;
+}
+
+static inline void tx_policy_use(struct tx_policy_cache *cache,
+                                struct tx_policy_cache_entry *entry)
+{
+       ++entry->policy.usage_count;
+       list_move(&entry->link, &cache->used);
+}
+
+static inline int tx_policy_release(struct tx_policy_cache *cache,
+                                   struct tx_policy_cache_entry *entry)
+{
+       int ret = --entry->policy.usage_count;
+       if (!ret)
+               list_move(&entry->link, &cache->free);
+       return ret;
+}
+
+/* ******************************************************************** */
+/* External TX policy cache API                                                */
+
+void tx_policy_init(struct xradio_common *hw_priv)
+{
+       struct tx_policy_cache *cache = &hw_priv->tx_policy_cache;
+       int i;
+
+       memset(cache, 0, sizeof(*cache));
+
+       spin_lock_init(&cache->lock);
+       INIT_LIST_HEAD(&cache->used);
+       INIT_LIST_HEAD(&cache->free);
+
+       for (i = 0; i < TX_POLICY_CACHE_SIZE; ++i)
+               list_add(&cache->cache[i].link, &cache->free);
+}
+
+static int tx_policy_get(struct xradio_common *hw_priv,
+                 struct ieee80211_tx_rate *rates,
+                 u8 use_bg_rate, bool *renew)
+{
+       int idx;
+       struct tx_policy_cache *cache = &hw_priv->tx_policy_cache;
+       struct tx_policy wanted;
+
+
+       if(use_bg_rate) {
+               u8 rate  = (u8)(use_bg_rate & 0x3f);
+               u8 shitf = ((rate&0x7)<<2);
+               u8 off   = (rate>>3);
+               memset(&wanted, 0, sizeof(wanted));
+               wanted.defined = rate + 1;
+               wanted.retry_count = (hw_priv->short_frame_max_tx_count&0xf);
+               wanted.tbl[off] = wanted.retry_count<<shitf;
+               txrx_printk(XRADIO_DBG_NIY, "[TX policy] robust rate=%d\n", rate);
+       } else
+               tx_policy_build(hw_priv, &wanted, rates, IEEE80211_TX_MAX_RATES);
+
+       spin_lock_bh(&cache->lock);
+       idx = tx_policy_find(cache, &wanted);
+       if (idx >= 0) {
+               txrx_printk(XRADIO_DBG_MSG, "[TX policy] Used TX policy: %d\n",
+                                       idx);
+               *renew = false;
+       } else {
+               struct tx_policy_cache_entry *entry;
+               if (WARN_ON_ONCE(list_empty(&cache->free))) {
+                       spin_unlock_bh(&cache->lock);
+                       txrx_printk(XRADIO_DBG_ERROR, "[TX policy] no policy cache\n");
+                       return XRADIO_INVALID_RATE_ID;
+               }
+               /* If policy is not found create a new one
+                * using the oldest entry in "free" list */
+               *renew = true;
+               entry = list_entry(cache->free.prev,
+                       struct tx_policy_cache_entry, link);
+               entry->policy = wanted;
+               idx = entry - cache->cache;
+               txrx_printk(XRADIO_DBG_MSG, "[TX policy] New TX policy: %d\n",
+                                       idx);
+               tx_policy_dump(&entry->policy);
+       }
+       tx_policy_use(cache, &cache->cache[idx]);
+       if (unlikely(list_empty(&cache->free))) {
+               /* Lock TX queues. */
+               txrx_printk(XRADIO_DBG_WARN, "[TX policy] policy cache used up\n");
+               xradio_tx_queues_lock(hw_priv);
+       }
+       spin_unlock_bh(&cache->lock);
+
+       return idx;
+}
+
+static void tx_policy_put(struct xradio_common *hw_priv, int idx)
+{
+       int usage, locked;
+       struct tx_policy_cache *cache = &hw_priv->tx_policy_cache;
+
+       spin_lock_bh(&cache->lock);
+       locked = list_empty(&cache->free);
+       usage = tx_policy_release(cache, &cache->cache[idx]);
+       if (unlikely(locked) && !usage) {
+               /* Unlock TX queues. */
+               xradio_tx_queues_unlock(hw_priv);
+       }
+       spin_unlock_bh(&cache->lock);
+}
+
+/*
+bool tx_policy_cache_full(struct xradio_common *hw_priv)
+{
+       bool ret;
+       struct tx_policy_cache *cache = &hw_priv->tx_policy_cache;
+       spin_lock_bh(&cache->lock);
+       ret = list_empty(&cache->free);
+       spin_unlock_bh(&cache->lock);
+       return ret;
+}
+*/
+extern u32 policy_upload;
+extern u32 policy_num;
+static int tx_policy_upload(struct xradio_common *hw_priv)
+{
+       struct tx_policy_cache *cache = &hw_priv->tx_policy_cache;
+       int i;
+       struct wsm_set_tx_rate_retry_policy arg = {
+               .hdr = {
+                       .numTxRatePolicies = 0,
+               }
+       };
+       int if_id = 0;
+
+       spin_lock_bh(&cache->lock);
+       /* Upload only modified entries. */
+       for (i = 0; i < TX_POLICY_CACHE_SIZE; ++i) {
+               struct tx_policy *src = &cache->cache[i].policy;
+               if (src->retry_count && !src->uploaded) {
+                       struct wsm_set_tx_rate_retry_policy_policy *dst =
+                               &arg.tbl[arg.hdr.numTxRatePolicies];
+                       dst->policyIndex = i;
+                       dst->shortRetryCount = hw_priv->short_frame_max_tx_count-1;
+                       //only RTS need use longRetryCount, should be short_frame.
+                       dst->longRetryCount = hw_priv->short_frame_max_tx_count-1;
+                       
+                       /* BIT(2) - Terminate retries when Tx rate retry policy
+                        *          finishes.
+                        * BIT(3) - Count initial frame transmission as part of
+                        *          rate retry counting but not as a retry
+                        *          attempt */
+                       dst->policyFlags = BIT(2) | BIT(3);
+                       memcpy(dst->rateCountIndices, src->tbl,
+                                       sizeof(dst->rateCountIndices));
+                       src->uploaded = 1;
+                       ++arg.hdr.numTxRatePolicies;
+               }
+       }
+       spin_unlock_bh(&cache->lock);
+       atomic_set(&hw_priv->upload_count, 0);
+       
+       txrx_printk(XRADIO_DBG_MSG, "[TX policy] Upload %d policies\n",
+                               arg.hdr.numTxRatePolicies);
+
+       /*TODO: COMBO*/
+       return wsm_set_tx_rate_retry_policy(hw_priv, &arg, if_id);
+}
+
+void tx_policy_upload_work(struct work_struct *work)
+{
+       struct xradio_common *hw_priv =
+               container_of(work, struct xradio_common, tx_policy_upload_work);
+
+       WARN_ON(tx_policy_upload(hw_priv));
+       wsm_unlock_tx(hw_priv);
+}
+
+/* ******************************************************************** */
+/* xradio TX implementation                                            */
+
+struct xradio_txinfo {
+       struct sk_buff *skb;
+       unsigned queue;
+       struct ieee80211_tx_info *tx_info;
+       const struct ieee80211_rate *rate;
+       struct ieee80211_hdr *hdr;
+       size_t hdrlen;
+       const u8 *da;
+       struct xradio_sta_priv *sta_priv;
+       struct xradio_txpriv txpriv;
+};
+
+u32 xradio_rate_mask_to_wsm(struct xradio_common *hw_priv, u32 rates)
+{
+       u32 ret = 0;
+       int i;
+       u32 n_bitrates = 
+                 hw_priv->hw->wiphy->bands[hw_priv->channel->band]->n_bitrates;
+       struct ieee80211_rate * bitrates = 
+                 hw_priv->hw->wiphy->bands[hw_priv->channel->band]->bitrates;
+
+       for (i = 0; i < n_bitrates; ++i) {
+               if (rates & BIT(i))
+                       ret |= BIT(bitrates[i].hw_value);
+       }
+       return ret;
+}
+
+static const struct ieee80211_rate *
+xradio_get_tx_rate(const struct xradio_common *hw_priv,
+                  const struct ieee80211_tx_rate *rate)
+{
+       if (rate->idx < 0)
+               return NULL;
+       if (rate->flags & IEEE80211_TX_RC_MCS)
+               return &hw_priv->mcs_rates[rate->idx];
+       return &hw_priv->hw->wiphy->bands[hw_priv->channel->band]->
+               bitrates[rate->idx];
+}
+
+inline static s8
+xradio_get_rate_idx(const struct xradio_common *hw_priv, u8 flag, u16 hw_value)
+{
+       s16 ret = (s16)hw_value;
+       if(flag & IEEE80211_TX_RC_MCS) {  //11n
+               if(hw_value <= hw_priv->mcs_rates[7].hw_value && 
+                        hw_value >= hw_priv->mcs_rates[0].hw_value)
+                       ret -= hw_priv->mcs_rates[0].hw_value;
+               else 
+                       ret = -1;
+       } else {  //11b/g
+               if(hw_value>5 && hw_value<hw_priv->mcs_rates[0].hw_value) {
+                       ret -= hw_priv->hw->wiphy->bands[hw_priv->channel->band]->bitrates[0].hw_value;
+                       if(hw_priv->hw->wiphy->bands[hw_priv->channel->band]->bitrates[0].hw_value<5)  //11a
+                               ret -= 2;
+               } else if(hw_value<4) {
+                       ret -= hw_priv->hw->wiphy->bands[hw_priv->channel->band]->bitrates[0].hw_value;
+               } else {
+                       ret = -1;
+               }
+       }
+       return (s8)ret;
+}
+
+static int
+xradio_tx_h_calc_link_ids(struct xradio_vif *priv,
+                         struct ieee80211_tx_control *control,
+                         struct xradio_txinfo *t)
+{
+
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+       if ((t->tx_info->flags & IEEE80211_TX_CTL_TX_OFFCHAN) ||
+                       (hw_priv->roc_if_id == priv->if_id))
+               t->txpriv.offchannel_if_id = 2;
+       else
+               t->txpriv.offchannel_if_id = 0;
+
+       if (likely(control->sta && t->sta_priv->link_id))
+               t->txpriv.raw_link_id =
+                               t->txpriv.link_id =
+                               t->sta_priv->link_id;
+       else if (priv->mode != NL80211_IFTYPE_AP)
+               t->txpriv.raw_link_id =
+                               t->txpriv.link_id = 0;
+       else if (is_multicast_ether_addr(t->da)) {
+               if (priv->enable_beacon) {
+                       t->txpriv.raw_link_id = 0;
+                       t->txpriv.link_id = priv->link_id_after_dtim;
+               } else {
+                       t->txpriv.raw_link_id = 0;
+                       t->txpriv.link_id = 0;
+               }
+       } else {
+               t->txpriv.link_id =
+                       xradio_find_link_id(priv, t->da);
+               /* Do not assign valid link id for deauth/disassoc frame being
+               transmitted to an unassociated STA */
+               if (!(t->txpriv.link_id) &&
+                       (ieee80211_is_deauth(t->hdr->frame_control) ||
+                       ieee80211_is_disassoc(t->hdr->frame_control))) {
+                                       t->txpriv.link_id = 0;
+               } else {
+                       if (!t->txpriv.link_id)
+                               t->txpriv.link_id = xradio_alloc_link_id(priv, t->da);
+                       if (!t->txpriv.link_id) {
+                               txrx_printk(XRADIO_DBG_ERROR,
+                                           "%s: No more link IDs available.\n", __func__);
+                               return -ENOENT;
+                       }
+               }
+               t->txpriv.raw_link_id = t->txpriv.link_id;
+       }
+       if (t->txpriv.raw_link_id)
+               priv->link_id_db[t->txpriv.raw_link_id - 1].timestamp =
+                               jiffies;
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       if (control->sta &&
+                       (control->sta->uapsd_queues & BIT(t->queue)))
+               t->txpriv.link_id = priv->link_id_uapsd;
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+       return 0;
+}
+
+static void
+xradio_tx_h_pm(struct xradio_vif *priv,
+              struct xradio_txinfo *t)
+{
+       if (unlikely(ieee80211_is_auth(t->hdr->frame_control))) {
+               u32 mask = ~BIT(t->txpriv.raw_link_id);
+               spin_lock_bh(&priv->ps_state_lock);
+               priv->sta_asleep_mask &= mask;
+               priv->pspoll_mask &= mask;
+               spin_unlock_bh(&priv->ps_state_lock);
+       }
+}
+
+static void
+xradio_tx_h_calc_tid(struct xradio_vif *priv,
+                    struct xradio_txinfo *t)
+{
+       if (ieee80211_is_data_qos(t->hdr->frame_control)) {
+               u8 *qos = ieee80211_get_qos_ctl(t->hdr);
+               t->txpriv.tid = qos[0] & IEEE80211_QOS_CTL_TID_MASK;
+       } else if (ieee80211_is_data(t->hdr->frame_control)) {
+               t->txpriv.tid = 0;
+       }
+}
+
+/* IV/ICV injection. */
+/* TODO: Quite unoptimal. It's better co modify mac80211
+ * to reserve space for IV */
+static int
+xradio_tx_h_crypt(struct xradio_vif *priv,
+                 struct xradio_txinfo *t)
+{
+       size_t iv_len;
+       size_t icv_len;
+       u8 *icv;
+
+       if (!t->tx_info->control.hw_key ||
+           !(t->hdr->frame_control &
+            __cpu_to_le32(IEEE80211_FCTL_PROTECTED)))
+               return 0;
+
+       iv_len = t->tx_info->control.hw_key->iv_len;
+       icv_len = t->tx_info->control.hw_key->icv_len;
+
+       if (t->tx_info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP)
+               icv_len += 8; /* MIC */
+
+       if (unlikely((skb_headroom(t->skb) + skb_tailroom(t->skb) <
+                        iv_len + icv_len + WSM_TX_EXTRA_HEADROOM) ||
+                       (skb_headroom(t->skb) <
+                        iv_len + WSM_TX_EXTRA_HEADROOM))) {
+               dev_dbg(priv->hw_priv->pdev,
+                       "no space allocated for crypto headers.\n"
+                       "headroom: %d, tailroom: %d, "
+                       "req_headroom: %d, req_tailroom: %d\n"
+                       "Please fix it in xradio_get_skb().\n",
+                       skb_headroom(t->skb), skb_tailroom(t->skb),
+                       iv_len + WSM_TX_EXTRA_HEADROOM, icv_len);
+               return -ENOMEM;
+       } else if (unlikely(skb_tailroom(t->skb) < icv_len)) {
+               size_t offset = icv_len - skb_tailroom(t->skb);
+               u8 *p;
+               dev_dbg(priv->hw_priv->pdev,
+                       "Slowpath: tailroom is not big enough. "
+                       "Req: %d, got: %d.\n",
+                       icv_len, skb_tailroom(t->skb));
+
+               p = skb_push(t->skb, offset);
+               memmove(p, &p[offset], t->skb->len - offset);
+               skb_trim(t->skb, t->skb->len - offset);
+       }
+       /* ccmp pkt from umac to driver,it has iv room,,so ccmp pkt do not add iv room */
+       if (t->tx_info->control.hw_key->cipher != WLAN_CIPHER_SUITE_CCMP){
+               u8 *newhdr;
+               newhdr = skb_push(t->skb, iv_len);
+               memmove(newhdr, newhdr + iv_len, t->hdrlen);
+               t->hdr = (struct ieee80211_hdr *) newhdr;
+       }
+       t->hdrlen += iv_len;
+       icv = skb_put(t->skb, icv_len);
+
+       return 0;
+}
+
+static int
+xradio_tx_h_align(struct xradio_vif *priv, struct xradio_txinfo *t,
+                  u8 *flags)
+{
+       size_t offset = (size_t)t->skb->data & 3;
+       u8 *newhdr;//add by dingxh
+
+
+       if (!offset)
+               return 0;
+
+       if (skb_headroom(t->skb) < offset) {
+               txrx_printk(XRADIO_DBG_ERROR,
+                       "Bug: no space allocated "
+                       "for DMA alignment.\n"
+                       "headroom: %d\n",
+                       skb_headroom(t->skb));
+               return -ENOMEM;
+       }
+    //offset = 1or3 process   add by dingxh
+       if (offset & 1) {
+               newhdr = skb_push(t->skb, offset);
+               memmove(newhdr, newhdr + offset, t->skb->len-offset);
+               skb_trim(t->skb, t->skb->len-offset);
+               t->hdr = (struct ieee80211_hdr *) newhdr;
+               return 0;
+       }
+  //add by dingxh
+       //offset=2 process
+       skb_push(t->skb, offset);
+       t->hdrlen += offset;
+       t->txpriv.offset += offset;
+       *flags |= WSM_TX_2BYTES_SHIFT;
+       return 0;
+}
+
+static int
+xradio_tx_h_action(struct xradio_vif *priv, struct xradio_txinfo *t)
+{
+       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)t->hdr;
+
+       if (ieee80211_is_action(t->hdr->frame_control) &&
+                       mgmt->u.action.category == WLAN_CATEGORY_BACK)
+               return 1;
+       else
+               return 0;
+}
+
+/* Add WSM header */
+static struct wsm_tx *
+xradio_tx_h_wsm(struct xradio_vif *priv, struct xradio_txinfo *t)
+{
+       struct wsm_tx *wsm;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+       if (skb_headroom(t->skb) < sizeof(struct wsm_tx)) {
+               txrx_printk(XRADIO_DBG_ERROR,
+                       "Bug: no space allocated "
+                       "for WSM header.\n"
+                       "headroom: %d\n",
+                       skb_headroom(t->skb));
+               return NULL;
+       }
+
+       wsm = (struct wsm_tx *)skb_push(t->skb, sizeof(struct wsm_tx));
+       t->txpriv.offset += sizeof(struct wsm_tx);
+       memset(wsm, 0, sizeof(*wsm));
+       wsm->hdr.len = __cpu_to_le16(t->skb->len);
+       wsm->hdr.id  = __cpu_to_le16(0x0004);
+       wsm->queueId = (t->txpriv.raw_link_id << 2) | wsm_queue_id_to_wsm(t->queue);
+       if (wsm->hdr.len > hw_priv->wsm_caps.sizeInpChBuf) {
+               txrx_printk(XRADIO_DBG_ERROR,"%s,msg length too big=%d\n",
+                           __func__, wsm->hdr.len);
+               wsm = NULL;
+       }
+
+       return wsm;
+}
+
+/* BT Coex specific handling */
+static void
+xradio_tx_h_bt(struct xradio_vif *priv, struct xradio_txinfo *t, struct wsm_tx *wsm)
+{
+       u8 priority = 0;
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+       if (!hw_priv->is_BT_Present)
+               return;
+
+       if (unlikely(ieee80211_is_nullfunc(t->hdr->frame_control)))
+               priority = WSM_EPTA_PRIORITY_MGT;
+       else if (ieee80211_is_data(t->hdr->frame_control)) {
+               /* Skip LLC SNAP header (+6) */
+               u8 *payload = &t->skb->data[t->hdrlen];
+               u16 *ethertype = (u16 *) &payload[6];
+               if (unlikely(*ethertype == __be16_to_cpu(ETH_P_PAE)))
+                       priority = WSM_EPTA_PRIORITY_EAPOL;
+       } else if (unlikely(ieee80211_is_assoc_req(t->hdr->frame_control) ||
+               ieee80211_is_reassoc_req(t->hdr->frame_control))) {
+               struct ieee80211_mgmt *mgt_frame =
+                               (struct ieee80211_mgmt *)t->hdr;
+
+               if (mgt_frame->u.assoc_req.listen_interval <
+                                               priv->listen_interval) {
+                       txrx_printk(XRADIO_DBG_MSG,
+                               "Modified Listen Interval to %d from %d\n",
+                               priv->listen_interval,
+                               mgt_frame->u.assoc_req.listen_interval);
+                       /* Replace listen interval derieved from
+                        * the one read from SDD */
+                       mgt_frame->u.assoc_req.listen_interval =
+                               priv->listen_interval;
+               }
+       }
+
+       if (likely(!priority)) {
+               if (ieee80211_is_action(t->hdr->frame_control))
+                       priority = WSM_EPTA_PRIORITY_ACTION;
+               else if (ieee80211_is_mgmt(t->hdr->frame_control))
+                       priority = WSM_EPTA_PRIORITY_MGT;
+               else if ((wsm->queueId == WSM_QUEUE_VOICE))
+                       priority = WSM_EPTA_PRIORITY_VOICE;
+               else if ((wsm->queueId == WSM_QUEUE_VIDEO))
+                       priority = WSM_EPTA_PRIORITY_VIDEO;
+               else
+                       priority = WSM_EPTA_PRIORITY_DATA;
+       }
+
+       txrx_printk(XRADIO_DBG_MSG, "[TX] EPTA priority %d.\n",
+               priority);
+
+       wsm->flags |= priority << 1;
+}
+
+static int
+xradio_tx_h_rate_policy(struct xradio_common *hw_priv, struct xradio_txinfo *t,
+                        struct wsm_tx *wsm)
+{
+       bool tx_policy_renew = false;
+       struct xradio_vif *priv =
+                               xrwl_get_vif_from_ieee80211(t->tx_info->control.vif);
+
+       t->txpriv.rate_id = tx_policy_get(hw_priv,
+               t->tx_info->control.rates, t->txpriv.use_bg_rate,
+               &tx_policy_renew);
+       if (t->txpriv.rate_id == XRADIO_INVALID_RATE_ID)
+               return -EFAULT;
+
+       wsm->flags |= t->txpriv.rate_id << 4;
+       t->rate = xradio_get_tx_rate(hw_priv, &t->tx_info->control.rates[0]);
+       if (t->txpriv.use_bg_rate)
+               wsm->maxTxRate = (u8)(t->txpriv.use_bg_rate & 0x3f);
+       else
+               wsm->maxTxRate = t->rate->hw_value;
+
+       if (t->rate->flags & IEEE80211_TX_RC_MCS) {
+               if (priv->association_mode.greenfieldMode)
+                       wsm->htTxParameters |=
+                               __cpu_to_le32(WSM_HT_TX_GREENFIELD);
+               else
+                       wsm->htTxParameters |=
+                               __cpu_to_le32(WSM_HT_TX_MIXED);
+       }
+
+       if (tx_policy_renew) {
+               txrx_printk(XRADIO_DBG_MSG, "[TX] TX policy renew.\n");
+               /* It's not so optimal to stop TX queues every now and then.
+                * Maybe it's better to reimplement task scheduling with
+                * a counter. */
+               /* xradio_tx_queues_lock(priv); */
+               /* Definetly better. TODO. */
+               if (atomic_add_return(1, &hw_priv->upload_count) == 1) {
+                       wsm_lock_tx_async(hw_priv);
+                       if (queue_work(hw_priv->workqueue,
+                                 &hw_priv->tx_policy_upload_work) <= 0) {
+                               atomic_set(&hw_priv->upload_count, 0);
+                               wsm_unlock_tx(hw_priv);
+                       }
+               }
+       }
+       return 0;
+}
+
+static bool
+xradio_tx_h_pm_state(struct xradio_vif *priv, struct xradio_txinfo *t)
+{
+       int was_buffered = 1;
+
+
+       if (t->txpriv.link_id == priv->link_id_after_dtim &&
+                       !priv->buffered_multicasts) {
+               priv->buffered_multicasts = true;
+               if (priv->sta_asleep_mask)
+                       queue_work(priv->hw_priv->workqueue,
+                               &priv->multicast_start_work);
+       }
+
+       if (t->txpriv.raw_link_id && t->txpriv.tid < XRADIO_MAX_TID)
+               was_buffered = priv->link_id_db[t->txpriv.raw_link_id - 1]
+                               .buffered[t->txpriv.tid]++;
+
+       return !was_buffered;
+}
+
+static void
+xradio_tx_h_ba_stat(struct xradio_vif *priv,
+                   struct xradio_txinfo *t)
+{
+       struct xradio_common *hw_priv = priv->hw_priv;
+
+
+       if (priv->join_status != XRADIO_JOIN_STATUS_STA)
+               return;
+       if (!xradio_is_ht(&hw_priv->ht_oper))
+               return;
+       if (!priv->setbssparams_done)
+               return;
+       if (!ieee80211_is_data(t->hdr->frame_control))
+               return;
+
+       spin_lock_bh(&hw_priv->ba_lock);
+       hw_priv->ba_acc += t->skb->len - t->hdrlen;
+       if (!(hw_priv->ba_cnt_rx || hw_priv->ba_cnt)) {
+               mod_timer(&hw_priv->ba_timer,
+                       jiffies + XRADIO_BLOCK_ACK_INTERVAL);
+       }
+       hw_priv->ba_cnt++;
+       spin_unlock_bh(&hw_priv->ba_lock);
+}
+
+static int
+xradio_tx_h_skb_pad(struct xradio_common *priv,
+                   struct wsm_tx *wsm,
+                   struct sk_buff *skb)
+{
+       size_t len = __le16_to_cpu(wsm->hdr.len);
+       size_t padded_len = sdio_align_len(priv, len);
+
+
+       if (WARN_ON(skb_padto(skb, padded_len) != 0)) {
+               return -EINVAL;
+       }
+       return 0;
+}
+
+void xradio_tx(struct ieee80211_hw *dev, struct ieee80211_tx_control *control, struct sk_buff *skb)
+{
+       struct xradio_common *hw_priv = dev->priv;
+       struct xradio_txinfo t = {
+               .skb = skb,
+               .queue = skb_get_queue_mapping(skb),
+               .tx_info = IEEE80211_SKB_CB(skb),
+               .hdr = (struct ieee80211_hdr *)skb->data,
+               .txpriv.tid = XRADIO_MAX_TID,
+               .txpriv.rate_id = XRADIO_INVALID_RATE_ID,
+               .txpriv.use_bg_rate = 0,
+       };
+       struct ieee80211_sta *sta;
+       struct wsm_tx *wsm;
+       bool tid_update = 0;
+       u8 flags = 0;
+       int ret = 0;
+       struct xradio_vif *priv;
+       struct ieee80211_hdr *frame = (struct ieee80211_hdr *)skb->data;
+       struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)skb->data;
+
+       if (!skb->data)
+               BUG_ON(1);
+
+       if (!(t.tx_info->control.vif)) {
+               ret = __LINE__;
+               goto drop;
+       }
+       priv = xrwl_get_vif_from_ieee80211(t.tx_info->control.vif);
+       if (!priv) {
+               ret = __LINE__;
+               goto drop;
+       }
+
+       if (atomic_read(&priv->enabled) == 0) {
+               ret = __LINE__;
+               goto drop;
+       }
+
+       //dhcp and 80211 frames are important, use b/g rate and delay scan.
+       //it can make sense, such as accelerate connect.
+       if (ieee80211_is_auth(frame->frame_control)) {
+               hw_priv->connet_time[priv->if_id] = jiffies;
+       } else if (ieee80211_is_data_present(frame->frame_control)) {
+               /* since Umac had already alloc IV space in ccmp skb, so we need to add this iv_len as the new offset to LLC */
+               u8* llc = NULL;
+               if(t.tx_info->control.hw_key && 
+                       (t.hdr->frame_control & __cpu_to_le32(IEEE80211_FCTL_PROTECTED)) &&
+                               (t.tx_info->control.hw_key->cipher == WLAN_CIPHER_SUITE_CCMP))
+                       llc = skb->data+ieee80211_hdrlen(frame->frame_control) + t.tx_info->control.hw_key->iv_len;
+               else
+                       llc = skb->data+ieee80211_hdrlen(frame->frame_control);
+               if (is_dhcp(llc) || is_8021x(llc)) {
+                       t.txpriv.use_bg_rate = 
+                       hw_priv->hw->wiphy->bands[hw_priv->channel->band]->bitrates[0].hw_value;
+                       if (priv->vif->p2p)
+                               t.txpriv.use_bg_rate = AG_RATE_INDEX;
+                       t.txpriv.use_bg_rate |= 0x80;
+               }
+               if (t.txpriv.use_bg_rate){
+                       hw_priv->connet_time[priv->if_id] = jiffies;
+               }
+       } else if (ieee80211_is_deauth(frame->frame_control) ||
+                  ieee80211_is_disassoc(frame->frame_control)) {
+               hw_priv->connet_time[priv->if_id] = 0;
+       }
+
+#ifdef AP_HT_COMPAT_FIX
+       if (ieee80211_is_assoc_req(frame->frame_control) && 
+               priv->if_id == 0 && !(priv->ht_compat_det & 0x10)) {
+               xradio_remove_ht_ie(priv, skb);
+       }
+#endif
+
+#ifdef TES_P2P_0002_ROC_RESTART
+       xradio_frame_monitor(hw_priv,skb,true);
+#endif
+
+       if (ieee80211_is_action(frame->frame_control) && 
+               mgmt->u.action.category == WLAN_CATEGORY_PUBLIC) {
+               u8 *action = (u8*)&mgmt->u.action.category;
+               xradio_check_go_neg_conf_success(hw_priv, action);
+               xradio_check_prov_desc_req(hw_priv, action);
+       }
+
+       t.txpriv.if_id = priv->if_id;
+       t.hdrlen = ieee80211_hdrlen(t.hdr->frame_control);
+       t.da = ieee80211_get_DA(t.hdr);
+       t.sta_priv =
+               (struct xradio_sta_priv *)&control->sta->drv_priv;
+
+       if (WARN_ON(t.queue >= 4)) {
+               ret = __LINE__;
+               goto drop;
+       }
+
+       //spin_lock_bh(&hw_priv->tx_queue[t.queue].lock);
+       //if ((priv->if_id == 0) &&
+       //      (hw_priv->tx_queue[t.queue].num_queued_vif[0] >=
+       //              hw_priv->vif0_throttle)) {
+       //      spin_unlock_bh(&hw_priv->tx_queue[t.queue].lock);
+       //      
+       //      ret = __LINE__;
+       //      goto drop;
+       //} else if ((priv->if_id == 1) &&
+       //      (hw_priv->tx_queue[t.queue].num_queued_vif[1] >=
+       //              hw_priv->vif1_throttle)) {
+       //      spin_unlock_bh(&hw_priv->tx_queue[t.queue].lock);
+       //      
+       //      ret = __LINE__;
+       //      goto drop;
+       //}
+       //spin_unlock_bh(&hw_priv->tx_queue[t.queue].lock);
+
+       ret = xradio_tx_h_calc_link_ids(priv, control, &t);
+       if (ret) {
+               ret = __LINE__;
+               goto drop;
+       }
+
+       dev_dbg(hw_priv->pdev, "vif %d: tx, %d bytes queue %d, link_id %d(%d).\n",
+                       priv->if_id, skb->len, t.queue, t.txpriv.link_id, t.txpriv.raw_link_id);
+       if(ieee80211_is_assoc_resp(frame->frame_control)){
+               dev_dbg(hw_priv->pdev, "vif %d: association response\n", priv->if_id);
+       }
+
+       xradio_tx_h_pm(priv, &t);
+       xradio_tx_h_calc_tid(priv, &t);
+       ret = xradio_tx_h_crypt(priv, &t);
+       if (ret) {
+               ret = __LINE__;
+               goto drop;
+       }
+       ret = xradio_tx_h_align(priv, &t, &flags);
+       if (ret) {
+               ret = __LINE__;
+               goto drop;
+       }
+       ret = xradio_tx_h_action(priv, &t);
+       if (ret) {
+               ret = __LINE__;
+               goto drop;
+       }
+       wsm = xradio_tx_h_wsm(priv, &t);
+       if (!wsm) {
+               ret = __LINE__;
+               goto drop;
+       }
+
+       wsm->flags |= flags;
+       xradio_tx_h_bt(priv, &t, wsm);
+       ret = xradio_tx_h_rate_policy(hw_priv, &t, wsm);
+       if (ret) {
+               ret = __LINE__;
+               goto drop;
+       }
+
+       ret = xradio_tx_h_skb_pad(hw_priv, wsm, skb);
+       if (ret) {
+               ret = __LINE__;
+               goto drop;
+       }
+
+       rcu_read_lock();
+       sta = rcu_dereference(control->sta);
+
+       xradio_tx_h_ba_stat(priv, &t);
+       spin_lock_bh(&priv->ps_state_lock);
+       {
+               tid_update = xradio_tx_h_pm_state(priv, &t);
+               BUG_ON(xradio_queue_put(&hw_priv->tx_queue[t.queue],
+                               t.skb, &t.txpriv));
+#ifdef ROC_DEBUG
+               txrx_printk(XRADIO_DBG_ERROR, "QPUT %x, %pM, if_id - %d\n",
+                       t.hdr->frame_control, t.da, priv->if_id);
+#endif
+       }
+       spin_unlock_bh(&priv->ps_state_lock);
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       if (tid_update && sta)
+               ieee80211_sta_set_buffered(sta,
+                               t.txpriv.tid, true);
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+
+       rcu_read_unlock();
+
+       xradio_bh_wakeup(hw_priv);
+
+       return;
+
+drop:
+       dev_dbg(hw_priv->pdev, "dropped tx at line %d, fctl=0x%04x.\n", ret, frame->frame_control);
+       xradio_skb_dtor(hw_priv, skb, &t.txpriv);
+       return;
+}
+
+void xradio_tx_confirm_cb(struct xradio_common *hw_priv,
+                         struct wsm_tx_confirm *arg)
+{
+       u8 queue_id = xradio_queue_get_queue_id(arg->packetID);
+       struct xradio_queue *queue = &hw_priv->tx_queue[queue_id];
+       struct sk_buff *skb;
+       const struct xradio_txpriv *txpriv;
+       struct xradio_vif *priv;
+       u32    feedback_retry = 0;
+
+       priv = xrwl_hwpriv_to_vifpriv(hw_priv, arg->if_id);
+       if (unlikely(!priv))
+               return;
+
+       if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED)) {
+               /* STA is stopped. */
+               spin_unlock(&priv->vif_lock);
+               return;
+       }
+
+       if (WARN_ON(queue_id >= 4)) {
+               spin_unlock(&priv->vif_lock);
+               return;
+       }
+
+       dev_dbg(hw_priv->pdev, "vif %d: tx confirm status=%d, retry=%d, lastRate=%d\n",
+                       priv->if_id, arg->status, arg->ackFailures, arg->txedRate);
+
+       if ((arg->status == WSM_REQUEUE) &&
+           (arg->flags & WSM_TX_STATUS_REQUEUE)) {
+               /* "Requeue" means "implicit suspend" */
+               struct wsm_suspend_resume suspend = {
+                       .link_id = arg->link_id,
+                       .stop = 1,
+                       .multicast = !arg->link_id,
+                       .if_id = arg->if_id,
+               };
+               xradio_suspend_resume(priv, &suspend);
+               txrx_printk(XRADIO_DBG_WARN, "Requeue for link_id %d (try %d)."
+                       " STAs asleep: 0x%.8X\n",
+                       arg->link_id,
+                       xradio_queue_get_generation(arg->packetID) + 1,
+                       priv->sta_asleep_mask);
+
+               WARN_ON(xradio_queue_requeue(queue,
+                               arg->packetID, true));
+
+               spin_lock_bh(&priv->ps_state_lock);
+               if (!arg->link_id) {
+                       priv->buffered_multicasts = true;
+                       if (priv->sta_asleep_mask) {
+                               queue_work(hw_priv->workqueue,
+                                       &priv->multicast_start_work);
+                       }
+               }
+               spin_unlock_bh(&priv->ps_state_lock);
+               spin_unlock(&priv->vif_lock);
+       } else if (!WARN_ON(xradio_queue_get_skb(
+                       queue, arg->packetID, &skb, &txpriv))) {
+               struct ieee80211_tx_info *tx = IEEE80211_SKB_CB(skb);
+               struct ieee80211_hdr *frame = (struct ieee80211_hdr *)&skb->data[txpriv->offset];
+               int tx_count = arg->ackFailures;
+               u8 ht_flags = 0;
+               int i;
+
+               //yangfh add to reset if_0 in firmware when STA-unjoined,
+               //fix the errors when switch APs in combo mode.
+               if (unlikely(ieee80211_is_disassoc(frame->frame_control) ||
+                         ieee80211_is_deauth(frame->frame_control))) {
+                       if (priv->join_status == XRADIO_JOIN_STATUS_STA) {
+                               wms_send_deauth_to_self(hw_priv, priv);
+                               /* Shedule unjoin work */
+                               txrx_printk(XRADIO_DBG_WARN, "Issue unjoin command(TX) by self.\n");
+                               wsm_lock_tx_async(hw_priv);
+                               if (queue_work(hw_priv->workqueue, &priv->unjoin_work) <= 0)
+                                       wsm_unlock_tx(hw_priv);
+                       }
+               }
+
+               if (priv->association_mode.greenfieldMode)
+                       ht_flags |= IEEE80211_TX_RC_GREEN_FIELD;
+
+               //bss loss confirm.
+               if (unlikely(priv->bss_loss_status == XRADIO_BSS_LOSS_CONFIRMING &&
+                   priv->bss_loss_confirm_id == arg->packetID)) {
+                       spin_lock(&priv->bss_loss_lock);
+                       priv->bss_loss_status = arg->status?
+                                               XRADIO_BSS_LOSS_CONFIRMED : XRADIO_BSS_LOSS_NONE;
+                       spin_unlock(&priv->bss_loss_lock);
+               }
+
+               if (likely(!arg->status)) {
+                       tx->flags |= IEEE80211_TX_STAT_ACK;
+                       priv->cqm_tx_failure_count = 0;
+                       ++tx_count;
+
+                       if (arg->flags & WSM_TX_STATUS_AGGREGATION) {
+                               /* Do not report aggregation to mac80211:
+                                * it confuses minstrel a lot. */
+                               /* tx->flags |= IEEE80211_TX_STAT_AMPDU; */
+                       }
+               } else {
+                       /* TODO: Update TX failure counters */
+                       if (unlikely(priv->cqm_tx_failure_thold &&
+                            (++priv->cqm_tx_failure_count >
+                             priv->cqm_tx_failure_thold))) {
+                               priv->cqm_tx_failure_thold = 0;
+                               queue_work(hw_priv->workqueue,
+                                               &priv->tx_failure_work);
+                       }
+                       if (tx_count)
+                               ++tx_count;
+               }
+               spin_unlock(&priv->vif_lock);
+
+               tx->status.ampdu_len = 1;
+               tx->status.ampdu_ack_len = 1;
+
+               txrx_printk(XRADIO_DBG_NIY,"feedback:%08x, %08x, %08x.\n", 
+                                        arg->rate_try[2], arg->rate_try[1], arg->rate_try[0]);
+               if(txpriv->use_bg_rate) {   //bg rates
+                       tx->status.rates[0].count = arg->ackFailures+1;
+                 tx->status.rates[0].idx   = 0;
+                 tx->status.rates[1].idx   = -1;
+                 tx->status.rates[2].idx   = -1;
+                 tx->status.rates[3].idx   = -1;
+               } else {
+                       int j;
+                       s8  txed_idx;
+                       register u8 rate_num=0, shift=0, retries=0;
+                       u8  flag = tx->status.rates[0].flags;
+                       
+                       //get retry rate idx.
+                       for(i=2; i>=0;i--) {
+                               if(arg->rate_try[i]) {
+                                       for(j=7; j>=0;j--) {
+                                               shift   = j<<2;
+                                               retries = (arg->rate_try[i]>>shift)&0xf;
+                                               if(retries) {
+                                                       feedback_retry += retries;
+                                                       txed_idx = xradio_get_rate_idx(hw_priv,flag,((i<<3)+j));
+                                                       txrx_printk(XRADIO_DBG_NIY, "rate_num=%d, hw=%d, idx=%d, "
+                                                                   "retries=%d, flag=%d", rate_num, ((i<<3)+j), 
+                                                                   txed_idx, retries, flag);
+                                                       if(likely(txed_idx>=0)) {
+                                                               tx->status.rates[rate_num].idx   = txed_idx;
+                                                               tx->status.rates[rate_num].count = retries;
+                                                               if (tx->status.rates[rate_num].flags & IEEE80211_TX_RC_MCS)
+                                                                       tx->status.rates[rate_num].flags |= ht_flags;
+                                                               rate_num++;
+                                                               if(rate_num>=IEEE80211_TX_MAX_RATES) {
+                                                                       i = -1;
+                                                                       break;
+                                                               }
+                                                       }
+                                               }
+                                       }
+                               }
+                       }
+                       //clear other rate.
+                       for (i=rate_num; i < IEEE80211_TX_MAX_RATES; ++i) {
+                               tx->status.rates[i].count = 0;
+                               tx->status.rates[i].idx = -1;
+                       }
+                       //get successful rate idx.
+                       if(!arg->status) {
+                               txed_idx = xradio_get_rate_idx(hw_priv, flag, arg->txedRate);
+                               if(rate_num == 0) {
+                                       tx->status.rates[0].idx = txed_idx;
+                                       tx->status.rates[0].count = 1;
+                               } else if(rate_num <= IEEE80211_TX_MAX_RATES){
+                                       --rate_num;
+                                       if(txed_idx == tx->status.rates[rate_num].idx) {
+                                               tx->status.rates[rate_num].count += 1;
+                                       } else if(rate_num<(IEEE80211_TX_MAX_RATES-1)){
+                                               ++rate_num;
+                                               tx->status.rates[rate_num].idx   = txed_idx;
+                                               tx->status.rates[rate_num].count = 1;
+                                       } else if(txed_idx >=0) {
+                                               tx->status.rates[rate_num].idx   = txed_idx;
+                                               tx->status.rates[rate_num].count = 1;
+                                       }
+                               }
+                       } 
+               }
+
+               dev_dbg(hw_priv->pdev, "[TX policy] Ack: " \
+               "%d:%d, %d:%d, %d:%d, %d:%d\n",
+               tx->status.rates[0].idx, tx->status.rates[0].count,
+               tx->status.rates[1].idx, tx->status.rates[1].count,
+               tx->status.rates[2].idx, tx->status.rates[2].count,
+               tx->status.rates[3].idx, tx->status.rates[3].count);
+               
+
+               xradio_queue_remove(queue, arg->packetID);
+       }
+}
+
+static void xradio_notify_buffered_tx(struct xradio_vif *priv,
+                              struct sk_buff *skb, int link_id, int tid)
+{
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       struct ieee80211_sta *sta;
+       struct ieee80211_hdr *hdr;
+       u8 *buffered;
+       u8 still_buffered = 0;
+
+
+       if (link_id && tid < XRADIO_MAX_TID) {
+               buffered = priv->link_id_db
+                               [link_id - 1].buffered;
+
+               spin_lock_bh(&priv->ps_state_lock);
+               if (!WARN_ON(!buffered[tid]))
+                       still_buffered = --buffered[tid];
+               spin_unlock_bh(&priv->ps_state_lock);
+
+               if (!still_buffered && tid < XRADIO_MAX_TID) {
+                       hdr = (struct ieee80211_hdr *) skb->data;
+                       rcu_read_lock();
+                       sta = ieee80211_find_sta(priv->vif, hdr->addr1);
+                       if (sta)
+                               ieee80211_sta_set_buffered(sta, tid, false);
+                       rcu_read_unlock();
+               }
+       }
+#endif /* CONFIG_XRADIO_USE_EXTENSIONS */
+}
+
+void xradio_skb_dtor(struct xradio_common *hw_priv,
+                    struct sk_buff *skb,
+                    const struct xradio_txpriv *txpriv)
+{
+       struct xradio_vif *priv =
+               __xrwl_hwpriv_to_vifpriv(hw_priv, txpriv->if_id);
+
+
+       skb_pull(skb, txpriv->offset);
+       if (priv && txpriv->rate_id != XRADIO_INVALID_RATE_ID) {
+               xradio_notify_buffered_tx(priv, skb,
+                               txpriv->raw_link_id, txpriv->tid);
+               tx_policy_put(hw_priv, txpriv->rate_id);
+       }
+       ieee80211_tx_status(hw_priv->hw, skb);
+}
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+/* Workaround for WFD test case 6.1.10 */
+void xradio_link_id_reset(struct work_struct *work)
+{
+       struct xradio_vif *priv =
+               container_of(work, struct xradio_vif, linkid_reset_work);
+       struct xradio_common *hw_priv = priv->hw_priv;
+       int temp_linkid;
+
+
+       if (!priv->action_linkid) {
+               /* In GO mode we can receive ACTION frames without a linkID */
+               temp_linkid = xradio_alloc_link_id(priv,
+                               &priv->action_frame_sa[0]);
+               WARN_ON(!temp_linkid);
+               if (temp_linkid) {
+                       /* Make sure we execute the WQ */
+                       flush_workqueue(hw_priv->workqueue);
+                       /* Release the link ID */
+                       spin_lock_bh(&priv->ps_state_lock);
+                       priv->link_id_db[temp_linkid - 1].prev_status =
+                               priv->link_id_db[temp_linkid - 1].status;
+                       priv->link_id_db[temp_linkid - 1].status =
+                               XRADIO_LINK_RESET;
+                       spin_unlock_bh(&priv->ps_state_lock);
+                       wsm_lock_tx_async(hw_priv);
+                       if (queue_work(hw_priv->workqueue,
+                                      &priv->link_id_work) <= 0)
+                               wsm_unlock_tx(hw_priv);
+               }
+       } else {
+               spin_lock_bh(&priv->ps_state_lock);
+               priv->link_id_db[priv->action_linkid - 1].prev_status =
+                       priv->link_id_db[priv->action_linkid - 1].status;
+               priv->link_id_db[priv->action_linkid - 1].status =
+                       XRADIO_LINK_RESET_REMAP;
+               spin_unlock_bh(&priv->ps_state_lock);
+               wsm_lock_tx_async(hw_priv);
+               if (queue_work(hw_priv->workqueue, &priv->link_id_work) <= 0)
+                               wsm_unlock_tx(hw_priv);
+               flush_workqueue(hw_priv->workqueue);
+       }
+}
+#endif
diff --git a/drivers/net/wireless/xradio/tx.h b/drivers/net/wireless/xradio/tx.h
new file mode 100644 (file)
index 0000000..e08bb71
--- /dev/null
@@ -0,0 +1,86 @@
+/*
+ * txrx interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#ifndef XRADIO_TXRX_H
+#define XRADIO_TXRX_H
+
+#include <linux/list.h>
+
+/* extern */ struct ieee80211_hw;
+/* extern */ struct sk_buff;
+/* extern */ struct wsm_tx;
+/* extern */ struct wsm_rx;
+/* extern */ struct wsm_tx_confirm;
+/* extern */ struct xradio_txpriv;
+/* extern */ struct xradio_vif;
+
+struct tx_policy {
+       union {
+               __le32 tbl[3];
+               u8 raw[12];
+       };
+       u8  defined;            /* TODO: u32 or u8, profile and select best */
+       u8  usage_count;        /* --// -- */
+       u8  retry_count;        /* --// -- */
+       u8  uploaded;
+};
+
+struct tx_policy_cache_entry {
+       struct tx_policy policy;
+       struct list_head link;
+};
+
+#define TX_POLICY_CACHE_SIZE   (8)
+struct tx_policy_cache {
+       struct tx_policy_cache_entry cache[TX_POLICY_CACHE_SIZE];
+       struct list_head used;
+       struct list_head free;
+       spinlock_t lock;
+};
+
+/* ******************************************************************** */
+/* TX policy cache                                                     */
+/* Intention of TX policy cache is an overcomplicated WSM API.
+ * Device does not accept per-PDU tx retry sequence.
+ * It uses "tx retry policy id" instead, so driver code has to sync
+ * linux tx retry sequences with a retry policy table in the device.
+ */
+void tx_policy_init(struct xradio_common *hw_priv);
+void tx_policy_upload_work(struct work_struct *work);
+
+/* ******************************************************************** */
+/* TX implementation                                                   */
+
+u32 xradio_rate_mask_to_wsm(struct xradio_common *hw_priv,
+                              u32 rates);
+void xradio_tx(struct ieee80211_hw *dev, struct ieee80211_tx_control *control, struct sk_buff *skb);
+void xradio_skb_dtor(struct xradio_common *hw_priv,
+                    struct sk_buff *skb,
+                    const struct xradio_txpriv *txpriv);
+
+/* ******************************************************************** */
+/* WSM callbacks                                                       */
+
+void xradio_tx_confirm_cb(struct xradio_common *hw_priv,
+                         struct wsm_tx_confirm *arg);
+
+/* ******************************************************************** */
+/* Timeout                                                             */
+
+void xradio_tx_timeout(struct work_struct *work);
+
+/* ******************************************************************** */
+/* Workaround for WFD test case 6.1.10                                 */
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+void xradio_link_id_reset(struct work_struct *work);
+#endif
+
+#endif /* XRADIO_TXRX_H */
diff --git a/drivers/net/wireless/xradio/wsm.c b/drivers/net/wireless/xradio/wsm.c
new file mode 100644 (file)
index 0000000..4a3153b
--- /dev/null
@@ -0,0 +1,3004 @@
+/*
+ * WSM host interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#include <linux/skbuff.h>
+#include <linux/wait.h>
+#include <linux/skbuff.h>
+#include <linux/delay.h>
+#include <linux/sched.h>
+#include <linux/random.h>
+
+#include "xradio.h"
+#include "wsm.h"
+#include "bh.h"
+#include "ap.h"
+#include "sta.h"
+#include "rx.h"
+
+#define WSM_CMD_TIMEOUT                (2 * HZ) /* With respect to interrupt loss */
+#define WSM_CMD_JOIN_TIMEOUT   (7 * HZ) /* Join timeout is 5 sec. in FW   */
+#define WSM_CMD_START_TIMEOUT  (7 * HZ)
+#define WSM_CMD_RESET_TIMEOUT  (3 * HZ) /* 2 sec. timeout was observed.   */
+#define WSM_CMD_DEFAULT_TIMEOUT        (3 * HZ)
+#define WSM_SKIP(buf, size)                                            \
+       do {                                                            \
+               if (unlikely((buf)->data + size > (buf)->end))          \
+                       goto underflow;                                 \
+               (buf)->data += size;                                    \
+       } while (0)
+
+#define WSM_GET(buf, ptr, size)                                                \
+       do {                                                            \
+               if (unlikely((buf)->data + size > (buf)->end))          \
+                       goto underflow;                                 \
+               memcpy(ptr, (buf)->data, size);                         \
+               (buf)->data += size;                                    \
+       } while (0)
+
+#define __WSM_GET(buf, type, cvt)                                      \
+       ({                                                              \
+               type val;                                               \
+               if (unlikely((buf)->data + sizeof(type) > (buf)->end))  \
+                       goto underflow;                                 \
+               val = cvt(*(type *)(buf)->data);                        \
+               (buf)->data += sizeof(type);                            \
+               val;                                                    \
+       })
+
+#define WSM_GET8(buf)  __WSM_GET(buf, u8, (u8))
+#define WSM_GET16(buf) __WSM_GET(buf, u16, __le16_to_cpu)
+#define WSM_GET32(buf) __WSM_GET(buf, u32, __le32_to_cpu)
+
+#define WSM_PUT(buf, ptr, size)                                                \
+       do {                                                            \
+               if (unlikely((buf)->data + size > (buf)->end))          \
+                       if (unlikely(wsm_buf_reserve((buf), size)))     \
+                               goto nomem;                             \
+               memcpy((buf)->data, ptr, size);                         \
+               (buf)->data += size;                                    \
+       } while (0)
+
+#define __WSM_PUT(buf, val, type, cvt)                                 \
+       do {                                                            \
+               if (unlikely((buf)->data + sizeof(type) > (buf)->end))  \
+                       if (unlikely(wsm_buf_reserve((buf), sizeof(type)))) \
+                               goto nomem;                             \
+               *(type *)(buf)->data = cvt(val);                        \
+               (buf)->data += sizeof(type);                            \
+       } while (0)
+
+#define WSM_PUT8(buf, val)  __WSM_PUT(buf, val, u8, (u8))
+#define WSM_PUT16(buf, val) __WSM_PUT(buf, val, u16, __cpu_to_le16)
+#define WSM_PUT32(buf, val) __WSM_PUT(buf, val, u32, __cpu_to_le32)
+
+static void wsm_buf_reset(struct wsm_buf *buf);
+static int wsm_buf_reserve(struct wsm_buf *buf, size_t extra_size);
+static int get_interface_id_scanning(struct xradio_common *hw_priv);
+
+static int wsm_cmd_send(struct xradio_common *hw_priv,
+                       struct wsm_buf *buf,
+                       void *arg, u16 cmd, long tmo, int if_id);
+
+static struct xradio_vif
+       *wsm_get_interface_for_tx(struct xradio_common *hw_priv);
+
+static inline void wsm_cmd_lock(struct xradio_common *hw_priv)
+{
+       mutex_lock(&hw_priv->wsm_cmd_mux);
+}
+
+static inline void wsm_cmd_unlock(struct xradio_common *hw_priv)
+{
+       mutex_unlock(&hw_priv->wsm_cmd_mux);
+}
+
+static inline void wsm_oper_lock(struct xradio_common *hw_priv)
+{
+       mutex_lock(&hw_priv->wsm_oper_lock);
+}
+
+static inline void wsm_oper_unlock(struct xradio_common *hw_priv)
+{
+       mutex_unlock(&hw_priv->wsm_oper_lock);
+}
+
+/* ******************************************************************** */
+/* WSM API implementation                                              */
+
+static int wsm_generic_confirm(struct xradio_common *hw_priv,
+                            void *arg,
+                            struct wsm_buf *buf)
+{
+       u32 status = WSM_GET32(buf);
+       if (status != WSM_STATUS_SUCCESS)
+               return -EINVAL;
+       return 0;
+
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+#ifdef XR_RRM//RadioResourceMeasurement
+static int wsm_start_measure_requset(struct xradio_common *hw_priv,
+                                               MEASUREMENT_PARAMETERS *arg,
+                                                             int  if_id)
+{
+               int ret;
+               struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+               wsm_cmd_lock(hw_priv);
+
+        WSM_PUT(buf, arg, sizeof(*arg));
+               ret = wsm_cmd_send(hw_priv, buf, arg, 0x000E, WSM_CMD_TIMEOUT, if_id);
+
+               wsm_cmd_unlock(hw_priv);
+               return ret;
+
+       nomem:
+               wsm_cmd_unlock(hw_priv);
+               return -ENOMEM;
+
+}
+
+int wsm_11k_measure_requset(struct xradio_common  *hw_priv,
+                                               u8  measure_type,
+                                              u16  ChannelNum,
+                                              u16  Duration)
+{
+    int ret;
+    u8 type, sub_type;
+    MEASUREMENT_PARAMETERS rrm_paras;
+    LMAC_MEAS_REQUEST *rrm_req = &rrm_paras.MeasurementRequest;
+//    LMAC_MEAS_CHANNEL_LOAD_PARAMS *rrm_req = &rrm_paras.MeasurementRequest;
+    rrm_paras.TxPowerLevel = 0x11;
+    rrm_paras.DurationMandatory = 0x22;
+    rrm_paras.MeasurementRequestLength = 0x33;
+    
+    type     = (measure_type&0xf0)>>4;
+    sub_type =  measure_type&0xf;
+    rrm_paras.MeasurementType = type;
+//    if (measure_type == ChannelLoadMeasurement) {
+    if (type == ChannelLoadMeasurement) {
+        rrm_req->ChannelLoadParams.Reserved = 0;
+        rrm_req->ChannelLoadParams.ChannelLoadCCA = sub_type;
+        rrm_req->ChannelLoadParams.ChannelNum = ChannelNum;
+        //valid when channelload measure, interval bettween request&start
+        rrm_req->ChannelLoadParams.RandomInterval = 0;
+        //unit:1TU=1024us
+        rrm_req->ChannelLoadParams.MeasurementDuration = Duration;
+        rrm_req->ChannelLoadParams.MeasurementStartTimel = 0;
+        rrm_req->ChannelLoadParams.MeasurementStartTimeh = 0;
+    } else if (type == NoiseHistrogramMeasurement) {
+        rrm_req->NoisHistogramParams.Reserved = 0;
+        rrm_req->NoisHistogramParams.IpiRpi = sub_type;
+        rrm_req->NoisHistogramParams.ChannelNum = ChannelNum;
+        rrm_req->NoisHistogramParams.RandomInterval = 0;
+        rrm_req->NoisHistogramParams.MeasurementDuration = Duration;
+        rrm_req->NoisHistogramParams.MeasurementStartTimel = 0;
+        rrm_req->NoisHistogramParams.MeasurementStartTimeh = 0;
+    }
+    ret = wsm_start_measure_requset(hw_priv, &rrm_paras, 0);
+    
+    return ret;
+}
+
+
+#endif//RadioResourceMeasurement
+int wsm_configuration(struct xradio_common *hw_priv,
+                     struct wsm_configuration *arg,
+                     int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT32(buf, arg->dot11MaxTransmitMsduLifeTime);
+       WSM_PUT32(buf, arg->dot11MaxReceiveLifeTime);
+       WSM_PUT32(buf, arg->dot11RtsThreshold);
+
+       /* DPD block. */
+       WSM_PUT16(buf, arg->dpdData_size + 12);
+       WSM_PUT16(buf, 1); /* DPD version */
+       WSM_PUT(buf, arg->dot11StationId, ETH_ALEN);
+       WSM_PUT16(buf, 5); /* DPD flags */
+       WSM_PUT(buf, arg->dpdData, arg->dpdData_size);
+
+       ret = wsm_cmd_send(hw_priv, buf, arg, 0x0009, WSM_CMD_TIMEOUT, if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+static int wsm_configuration_confirm(struct xradio_common *hw_priv,
+                                    struct wsm_configuration *arg,
+                                    struct wsm_buf *buf)
+{
+       int i;
+       int status;
+
+       status = WSM_GET32(buf);
+       if (WARN_ON(status != WSM_STATUS_SUCCESS))
+               return -EINVAL;
+
+       WSM_GET(buf, arg->dot11StationId, ETH_ALEN);
+       arg->dot11FrequencyBandsSupported = WSM_GET8(buf);
+       WSM_SKIP(buf, 1);
+       arg->supportedRateMask = WSM_GET32(buf);
+       for (i = 0; i < 2; ++i) {
+               arg->txPowerRange[i].min_power_level = WSM_GET32(buf);
+               arg->txPowerRange[i].max_power_level = WSM_GET32(buf);
+               arg->txPowerRange[i].stepping = WSM_GET32(buf);
+       }
+       return 0;
+
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+void wsm_query_work(struct work_struct *work)
+{
+       struct xradio_common *hw_priv =
+               container_of(work, struct xradio_common, query_work);
+       u8 ret[100] = {0};
+
+
+       *(u32*)&ret[0] = hw_priv->query_packetID;
+       wsm_read_mib(hw_priv, WSM_MIB_ID_REQ_PKT_STATUS, (void*)&ret[0], sizeof(ret), 4);
+       if(!ret[4]) {
+               wsm_printk(XRADIO_DBG_ERROR,"QuerypktID=0x%08x, status=0x%x, retry=%d, flags=0x%x, PktDebug=0x%x\n" \
+                          "pktqueue=0x%x, ext1=%d, ext2=%d, ext3=%d, ext4=0x%x, ext5=0x%x\n",
+                          *(u32*)&ret[0], ret[6], ret[7], *(u32*)&ret[8], *(u32*)&ret[12],
+                          ret[44], ret[45], ret[46], ret[47], ret[48], ret[49]);
+               wsm_printk(XRADIO_DBG_ERROR,"interdebug=0x%x, 0x%x, 0x%x, Soure=0x%x, 0x%x, 0x%x\n" \
+                          "interuse=%d, external=%d, TxOutstanding=%d, QueueStatus=0x%x, BA0=0x%x, BA1=0x%x\n" \
+                          "ScanStatus=0x%x, scanNULL=0x%x, wr_state=0x%x,0x%x,0x%x,0x%x," \
+                          "wr_cnt=%d, %d, %d, %d\n",
+                          *(u32*)&ret[16], *(u32*)&ret[20], *(u32*)&ret[24], ret[28], ret[29], ret[30],
+                          ret[32], ret[33], ret[34], ret[35], *(u32*)&ret[36], *(u32*)&ret[40],
+                          ret[50], ret[51], ret[52], ret[53], ret[54], ret[55],
+                          *(u16*)&ret[56], *(u16*)&ret[58], *(u16*)&ret[60], *(u16*)&ret[62]);
+       } else {
+               ret[5] = 0;
+               wsm_printk(XRADIO_DBG_ERROR,"No req packid=0x%08x!\n", *(u32*)&ret[0]);
+       }
+       //hardware error occurs, try to restart wifi.
+       if(ret[5] & 0x4) {
+               wsm_printk(XRADIO_DBG_ERROR,"Hardware need to reset 0x%x.\n", ret[5]);
+               hw_priv->bh_error = 1;
+               wake_up(&hw_priv->bh_wq);
+       }
+       hw_priv->query_packetID = 0;
+}
+
+/* ******************************************************************** */
+
+int wsm_reset(struct xradio_common *hw_priv, const struct wsm_reset *arg,
+               int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+       u16 cmd = 0x000A | WSM_TX_LINK_ID(arg->link_id);
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT32(buf, arg->reset_statistics ? 0 : 1);
+       ret = wsm_cmd_send(hw_priv, buf, NULL, cmd, WSM_CMD_RESET_TIMEOUT,
+                               if_id);
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+struct wsm_mib {
+       u16 mibId;
+       void *buf;
+       size_t buf_size;
+};
+
+int wsm_read_mib(struct xradio_common *hw_priv, u16 mibId, void *_buf,
+                       size_t buf_size, size_t arg_size)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+       struct wsm_mib mib_buf = {
+               .mibId = mibId,
+               .buf = _buf,
+               .buf_size = buf_size,
+       };
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT16(buf, mibId);
+       WSM_PUT16(buf, arg_size);
+       WSM_PUT(buf, _buf, arg_size);
+
+       ret = wsm_cmd_send(hw_priv, buf, &mib_buf, 0x0005, WSM_CMD_TIMEOUT, -1);
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+static int wsm_read_mib_confirm(struct xradio_common *hw_priv,
+                               struct wsm_mib *arg,
+                               struct wsm_buf *buf)
+{
+       u16 size;
+       if (WARN_ON(WSM_GET32(buf) != WSM_STATUS_SUCCESS))
+               return -EINVAL;
+
+       if (WARN_ON(WSM_GET16(buf) != arg->mibId))
+               return -EINVAL;
+
+       size = WSM_GET16(buf);
+       if (size > arg->buf_size)
+               size = arg->buf_size;
+
+       WSM_GET(buf, arg->buf, size);
+       arg->buf_size = size;
+       return 0;
+
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+/* ******************************************************************** */
+
+int wsm_write_mib(struct xradio_common *hw_priv, u16 mibId, void *_buf,
+                       size_t buf_size, int if_id)
+{
+       int ret = 0;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+       struct wsm_mib mib_buf = {
+               .mibId = mibId,
+               .buf = _buf,
+               .buf_size = buf_size,
+       };
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT16(buf, mibId);
+       WSM_PUT16(buf, buf_size);
+       WSM_PUT(buf, _buf, buf_size);
+
+       ret = wsm_cmd_send(hw_priv, buf, &mib_buf, 0x0006, WSM_CMD_TIMEOUT,
+                       if_id);
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+static int wsm_write_mib_confirm(struct xradio_common *hw_priv,
+                               struct wsm_mib *arg,
+                               struct wsm_buf *buf,
+                               int interface_link_id)
+{
+       int ret;
+       int i;
+       struct xradio_vif *priv;
+       ret = wsm_generic_confirm(hw_priv, arg, buf);
+       if (ret)
+               return ret;
+
+       /*wsm_set_operational_mode confirm.*/
+       if (arg->mibId == 0x1006) {
+               const char *p = arg->buf;
+               bool powersave_enabled = (p[0] & 0x0F) ? true : false;
+
+               /* update vif PM status. */
+               priv = xrwl_hwpriv_to_vifpriv(hw_priv, interface_link_id);
+               if (priv) {
+                       xradio_enable_powersave(priv, powersave_enabled);
+                       spin_unlock(&priv->vif_lock);
+               }
+
+               /* HW powersave base on vif except for generic vif. */
+               spin_lock(&hw_priv->vif_list_lock);
+               xradio_for_each_vif(hw_priv, priv, i) {
+                       if (!priv)
+                               continue;
+                       powersave_enabled &= !!priv->powersave_enabled;
+               }
+               hw_priv->powersave_enabled = powersave_enabled;
+               spin_unlock(&hw_priv->vif_list_lock);
+
+       }
+       return 0;
+}
+
+/* ******************************************************************** */
+
+int wsm_scan(struct xradio_common *hw_priv, const struct wsm_scan *arg,
+               int if_id)
+{
+       int i;
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       if (unlikely(arg->numOfChannels > 48))
+               return -EINVAL;
+
+       if (unlikely(arg->numOfSSIDs > WSM_SCAN_MAX_NUM_OF_SSIDS))
+               return -EINVAL;
+
+       if (unlikely(arg->band > 1))
+               return -EINVAL;
+
+       wsm_oper_lock(hw_priv);
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, arg->band);
+       WSM_PUT8(buf, arg->scanType);
+       WSM_PUT8(buf, arg->scanFlags);
+       WSM_PUT8(buf, arg->maxTransmitRate);
+       WSM_PUT32(buf, arg->autoScanInterval);
+       WSM_PUT8(buf, arg->numOfProbeRequests);
+       WSM_PUT8(buf, arg->numOfChannels);
+       WSM_PUT8(buf, arg->numOfSSIDs);
+       WSM_PUT8(buf, arg->probeDelay);
+
+       for (i = 0; i < arg->numOfChannels; ++i) {
+               WSM_PUT16(buf, arg->ch[i].number);
+               WSM_PUT16(buf, 0);
+               WSM_PUT32(buf, arg->ch[i].minChannelTime);
+               WSM_PUT32(buf, arg->ch[i].maxChannelTime);
+               WSM_PUT32(buf, 0);
+       }
+
+       for (i = 0; i < arg->numOfSSIDs; ++i) {
+               WSM_PUT32(buf, arg->ssids[i].length);
+               WSM_PUT(buf, &arg->ssids[i].ssid[0],
+                               sizeof(arg->ssids[i].ssid));
+       }
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0007, WSM_CMD_TIMEOUT,
+                          if_id);
+       wsm_cmd_unlock(hw_priv);
+       if (ret)
+               wsm_oper_unlock(hw_priv);
+
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       wsm_oper_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_stop_scan(struct xradio_common *hw_priv, int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+       wsm_cmd_lock(hw_priv);
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0008, WSM_CMD_TIMEOUT,
+                          if_id);
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+}
+
+
+static int wsm_tx_confirm(struct xradio_common *hw_priv,
+                         struct wsm_buf *buf,
+                         int interface_link_id)
+{
+       struct wsm_tx_confirm tx_confirm;
+
+       tx_confirm.packetID = WSM_GET32(buf);
+       tx_confirm.status = WSM_GET32(buf);
+       tx_confirm.txedRate = WSM_GET8(buf);
+       tx_confirm.ackFailures = WSM_GET8(buf);
+       tx_confirm.flags = WSM_GET16(buf);
+       tx_confirm.rate_try[0] = WSM_GET32(buf);
+       tx_confirm.rate_try[1] = WSM_GET32(buf);
+       tx_confirm.rate_try[2] = WSM_GET32(buf);
+       tx_confirm.mediaDelay = WSM_GET32(buf);
+       tx_confirm.txQueueDelay = WSM_GET32(buf);
+
+       if (is_hardware_xradio(hw_priv)) {
+               /* TODO:COMBO:linkID will be stored in packetID*/
+               /* TODO:COMBO: Extract traffic resumption map */
+               tx_confirm.if_id = xradio_queue_get_if_id(tx_confirm.packetID);
+               tx_confirm.link_id = xradio_queue_get_link_id(
+                               tx_confirm.packetID);
+       } else {
+               tx_confirm.link_id = interface_link_id;
+               tx_confirm.if_id = 0;
+       }
+
+       wsm_release_vif_tx_buffer(hw_priv, tx_confirm.if_id, 1);
+
+       xradio_tx_confirm_cb(hw_priv, &tx_confirm);
+       return 0;
+
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+static int wsm_multi_tx_confirm(struct xradio_common *hw_priv,
+                               struct wsm_buf *buf, int interface_link_id)
+{
+       struct xradio_vif *priv;
+       int ret;
+       int count;
+       int i;
+
+       count = WSM_GET32(buf);
+       if (WARN_ON(count <= 0))
+               return -EINVAL;
+       else if (count > 1) {
+               ret = wsm_release_tx_buffer(hw_priv, count - 1);
+               if (ret < 0)
+                       return ret;
+               else if (ret > 0)
+                       xradio_bh_wakeup(hw_priv);
+       }
+       priv = xrwl_hwpriv_to_vifpriv(hw_priv, interface_link_id);
+       if (priv) {
+               spin_unlock(&priv->vif_lock);
+       }
+       for (i = 0; i < count; ++i) {
+               ret = wsm_tx_confirm(hw_priv, buf, interface_link_id);
+               if (ret)
+                       return ret;
+       }
+       return ret;
+
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+/* ******************************************************************** */
+
+static int wsm_join_confirm(struct xradio_common *hw_priv,
+                           struct wsm_join *arg,
+                           struct wsm_buf *buf)
+{
+       if (WSM_GET32(buf) != WSM_STATUS_SUCCESS)
+               return -EINVAL;
+       arg->minPowerLevel = WSM_GET32(buf);
+       arg->maxPowerLevel = WSM_GET32(buf);
+
+       return 0;
+
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+int wsm_join(struct xradio_common *hw_priv, struct wsm_join *arg,
+            int if_id)
+/*TODO: combo: make it work per vif.*/
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_oper_lock(hw_priv);
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, arg->mode);
+       WSM_PUT8(buf, arg->band);
+       WSM_PUT16(buf, arg->channelNumber);
+       WSM_PUT(buf, &arg->bssid[0], sizeof(arg->bssid));
+       WSM_PUT16(buf, arg->atimWindow);
+       WSM_PUT8(buf, arg->preambleType);
+       WSM_PUT8(buf, arg->probeForJoin);
+       WSM_PUT8(buf, arg->dtimPeriod);
+       WSM_PUT8(buf, arg->flags);
+       WSM_PUT32(buf, arg->ssidLength);
+       WSM_PUT(buf, &arg->ssid[0], sizeof(arg->ssid));
+       WSM_PUT32(buf, arg->beaconInterval);
+       WSM_PUT32(buf, arg->basicRateSet);
+
+       hw_priv->tx_burst_idx = -1;
+       ret = wsm_cmd_send(hw_priv, buf, arg, 0x000B, WSM_CMD_JOIN_TIMEOUT,
+                          if_id);
+       wsm_cmd_unlock(hw_priv);
+       wsm_oper_unlock(hw_priv); /*confirm, not indcation.*/
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       wsm_oper_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_set_bss_params(struct xradio_common *hw_priv,
+                       const struct wsm_set_bss_params *arg,
+                       int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, 0);
+       WSM_PUT8(buf, arg->beaconLostCount);
+       WSM_PUT16(buf, arg->aid);
+       WSM_PUT32(buf, arg->operationalRateSet);
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0011, WSM_CMD_TIMEOUT,
+                       if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_add_key(struct xradio_common *hw_priv, const struct wsm_add_key *arg,
+                       int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT(buf, arg, sizeof(*arg));
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x000C, WSM_CMD_TIMEOUT,
+                               if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_remove_key(struct xradio_common *hw_priv,
+                  const struct wsm_remove_key *arg, int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, arg->entryIndex);
+       WSM_PUT8(buf, 0);
+       WSM_PUT16(buf, 0);
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x000D, WSM_CMD_TIMEOUT,
+                          if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_set_tx_queue_params(struct xradio_common *hw_priv,
+                               const struct wsm_set_tx_queue_params *arg,
+                               u8 id, int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+       u8 queue_id_to_wmm_aci[] = {3, 2, 0, 1};
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, queue_id_to_wmm_aci[id]);
+       WSM_PUT8(buf, 0);
+       WSM_PUT8(buf, arg->ackPolicy);
+       WSM_PUT8(buf, 0);
+       WSM_PUT32(buf, arg->maxTransmitLifetime);
+       WSM_PUT16(buf, arg->allowedMediumTime);
+       WSM_PUT16(buf, 0);
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0012, WSM_CMD_TIMEOUT, if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_set_edca_params(struct xradio_common *hw_priv,
+                               const struct wsm_edca_params *arg,
+                               int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       /* Implemented according to specification. */
+
+       WSM_PUT16(buf, arg->params[3].cwMin);
+       WSM_PUT16(buf, arg->params[2].cwMin);
+       WSM_PUT16(buf, arg->params[1].cwMin);
+       WSM_PUT16(buf, arg->params[0].cwMin);
+
+       WSM_PUT16(buf, arg->params[3].cwMax);
+       WSM_PUT16(buf, arg->params[2].cwMax);
+       WSM_PUT16(buf, arg->params[1].cwMax);
+       WSM_PUT16(buf, arg->params[0].cwMax);
+
+       WSM_PUT8(buf, arg->params[3].aifns);
+       WSM_PUT8(buf, arg->params[2].aifns);
+       WSM_PUT8(buf, arg->params[1].aifns);
+       WSM_PUT8(buf, arg->params[0].aifns);
+
+       WSM_PUT16(buf, arg->params[3].txOpLimit);
+       WSM_PUT16(buf, arg->params[2].txOpLimit);
+       WSM_PUT16(buf, arg->params[1].txOpLimit);
+       WSM_PUT16(buf, arg->params[0].txOpLimit);
+
+       WSM_PUT32(buf, arg->params[3].maxReceiveLifetime);
+       WSM_PUT32(buf, arg->params[2].maxReceiveLifetime);
+       WSM_PUT32(buf, arg->params[1].maxReceiveLifetime);
+       WSM_PUT32(buf, arg->params[0].maxReceiveLifetime);
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0013, WSM_CMD_TIMEOUT, if_id);
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_switch_channel(struct xradio_common *hw_priv,
+                      const struct wsm_switch_channel *arg,
+                      int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_lock_tx(hw_priv);
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, arg->channelMode);
+       WSM_PUT8(buf, arg->channelSwitchCount);
+       WSM_PUT16(buf, arg->newChannelNumber);
+
+       hw_priv->channel_switch_in_progress = 1;
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0016, WSM_CMD_TIMEOUT, if_id);
+       wsm_cmd_unlock(hw_priv);
+       if (ret) {
+               wsm_unlock_tx(hw_priv);
+               hw_priv->channel_switch_in_progress = 0;
+       }
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       wsm_unlock_tx(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_set_pm(struct xradio_common *hw_priv, const struct wsm_set_pm *arg,
+               int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_oper_lock(hw_priv);
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, arg->pmMode);
+       WSM_PUT8(buf, arg->fastPsmIdlePeriod);
+       WSM_PUT8(buf, arg->apPsmChangePeriod);
+       WSM_PUT8(buf, arg->minAutoPsPollPeriod);
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0010, WSM_CMD_TIMEOUT, if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       if (ret)
+               wsm_oper_unlock(hw_priv);
+
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       wsm_oper_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_start(struct xradio_common *hw_priv, const struct wsm_start *arg,
+               int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT8(buf, arg->mode);
+       WSM_PUT8(buf, arg->band);
+       WSM_PUT16(buf, arg->channelNumber);
+       WSM_PUT32(buf, arg->CTWindow);
+       WSM_PUT32(buf, arg->beaconInterval);
+       WSM_PUT8(buf, arg->DTIMPeriod);
+       WSM_PUT8(buf, arg->preambleType);
+       WSM_PUT8(buf, arg->probeDelay);
+       WSM_PUT8(buf, arg->ssidLength);
+       WSM_PUT(buf, arg->ssid, sizeof(arg->ssid));
+       WSM_PUT32(buf, arg->basicRateSet);
+
+       hw_priv->tx_burst_idx = -1;
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0017, WSM_CMD_START_TIMEOUT,
+                       if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+#if 0
+/* This API is no longer present in WSC */
+/* ******************************************************************** */
+
+int wsm_beacon_transmit(struct xradio_common *hw_priv,
+                       const struct wsm_beacon_transmit *arg,
+                       int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT32(buf, arg->enableBeaconing ? 1 : 0);
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0018, WSM_CMD_TIMEOUT, if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+#endif
+
+/* ******************************************************************** */
+
+int wsm_start_find(struct xradio_common *hw_priv, int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x0019, WSM_CMD_TIMEOUT, if_id);
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+}
+
+/* ******************************************************************** */
+
+int wsm_stop_find(struct xradio_common *hw_priv, int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x001A, WSM_CMD_TIMEOUT, if_id);
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+}
+
+/* ******************************************************************** */
+
+int wsm_map_link(struct xradio_common *hw_priv, const struct wsm_map_link *arg,
+               int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+       u16 cmd = 0x001C;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT(buf, &arg->mac_addr[0], sizeof(arg->mac_addr));
+
+       if (is_hardware_xradio(hw_priv)) {
+               WSM_PUT8(buf, arg->unmap);
+               WSM_PUT8(buf, arg->link_id);
+       } else {
+               cmd |= WSM_TX_LINK_ID(arg->link_id);
+               WSM_PUT16(buf, 0);
+       }
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, cmd, WSM_CMD_TIMEOUT, if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+}
+
+/* ******************************************************************** */
+
+int wsm_update_ie(struct xradio_common *hw_priv,
+                 const struct wsm_update_ie *arg, int if_id)
+{
+       int ret;
+       struct wsm_buf *buf = &hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(hw_priv);
+
+       WSM_PUT16(buf, arg->what);
+       WSM_PUT16(buf, arg->count);
+       WSM_PUT(buf, arg->ies, arg->length);
+
+       ret = wsm_cmd_send(hw_priv, buf, NULL, 0x001B, WSM_CMD_TIMEOUT, if_id);
+
+       wsm_cmd_unlock(hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(hw_priv);
+       return -ENOMEM;
+
+}
+/* ******************************************************************** */
+#ifdef MCAST_FWDING
+/* 3.66 */
+static int wsm_give_buffer_confirm(struct xradio_common *hw_priv,
+                            struct wsm_buf *buf)
+{
+       wsm_printk(XRADIO_DBG_MSG, "HW Buf count %d\n", hw_priv->hw_bufs_used);
+       if (!hw_priv->hw_bufs_used)
+               wake_up(&hw_priv->bh_evt_wq);
+
+       return 0;
+}
+
+/* 3.65 */
+int wsm_init_release_buffer_request(struct xradio_common *hw_priv, u8 index)
+{
+       struct wsm_buf *buf = &hw_priv->wsm_release_buf[index];
+       u16 cmd = 0x0022; /* Buffer Request */
+       u8 flags;
+       size_t buf_len;
+
+       wsm_buf_init(buf);
+
+       flags = index ? 0: 0x1;
+
+       WSM_PUT8(buf, flags);
+       WSM_PUT8(buf, 0);
+       WSM_PUT16(buf, 0);
+
+       buf_len = buf->data - buf->begin;
+
+       /* Fill HI message header */
+       ((__le16 *)buf->begin)[0] = __cpu_to_le16(buf_len);
+       ((__le16 *)buf->begin)[1] = __cpu_to_le16(cmd);
+
+       return 0;
+nomem:
+       return -ENOMEM;
+}
+
+/* 3.65 fixed memory leakage by yangfh*/
+int wsm_deinit_release_buffer(struct xradio_common *hw_priv)
+{
+       struct wsm_buf *buf = NULL;
+       int i, err = 0;
+       
+       for (i = 0; i < WSM_MAX_BUF; i++) {
+               buf = &hw_priv->wsm_release_buf[i];
+               if(likely(buf)) {
+                       if(likely(buf->begin))
+                               kfree(buf->begin);
+                       buf->begin = buf->data = buf->end = NULL;
+               } else {
+                       err++;
+               }
+       }
+       if(err) wsm_printk(XRADIO_DBG_ERROR, "%s, NULL buf=%d!\n", __func__, err);
+       return 0;
+}
+
+/* 3.68 */
+static int wsm_request_buffer_confirm(struct xradio_vif *priv,
+                            u8 *arg,
+                            struct wsm_buf *buf)
+{
+       u8 count;
+       u32 sta_asleep_mask = 0;
+       int i;
+       u32 mask = 0;
+       u32 change_mask = 0;
+       struct xradio_common *hw_priv = priv->hw_priv;
+
+       /* There is no status field in this message */
+       sta_asleep_mask = WSM_GET32(buf);
+       count = WSM_GET8(buf);
+       count -= 1; /* Current workaround for FW issue */
+
+       spin_lock_bh(&priv->ps_state_lock);
+       change_mask = (priv->sta_asleep_mask ^ sta_asleep_mask);
+       wsm_printk(XRADIO_DBG_MSG, "CM %x, HM %x, FWM %x\n", change_mask,priv->sta_asleep_mask, sta_asleep_mask);
+       spin_unlock_bh(&priv->ps_state_lock);
+
+       if (change_mask) {
+               struct ieee80211_sta *sta;
+               int ret = 0;
+
+
+               for (i = 0; i < MAX_STA_IN_AP_MODE ; ++i) {
+
+                       if(XRADIO_LINK_HARD != priv->link_id_db[i].status)
+                               continue;
+
+                       mask = BIT(i + 1);
+
+                       /* If FW state and host state for this link are different then notify OMAC */
+                       if(change_mask & mask) {
+                               wsm_printk(XRADIO_DBG_MSG, "PS State Changed %d for sta %pM\n", (sta_asleep_mask & mask) ? 1:0, priv->link_id_db[i].mac);
+                               rcu_read_lock();
+                               sta = ieee80211_find_sta(priv->vif, priv->link_id_db[i].mac);
+                               if (!sta) {
+                                       wsm_printk(XRADIO_DBG_MSG, "WRBC - could not find sta %pM\n",
+                                                       priv->link_id_db[i].mac);
+                               } else {
+                                       ret = ieee80211_sta_ps_transition_ni(sta, (sta_asleep_mask & mask) ? true: false);
+                                       wsm_printk(XRADIO_DBG_MSG, "PS State NOTIFIED %d\n", ret);
+                                       WARN_ON(ret);
+                               }
+                               rcu_read_unlock();                      
+                       }
+               }
+               /* Replace STA mask with one reported by FW */
+               spin_lock_bh(&priv->ps_state_lock);
+               priv->sta_asleep_mask = sta_asleep_mask;
+               spin_unlock_bh(&priv->ps_state_lock);
+       }
+
+       wsm_printk(XRADIO_DBG_MSG, "WRBC - HW Buf count %d SleepMask %d\n",
+                                       hw_priv->hw_bufs_used, sta_asleep_mask);
+       hw_priv->buf_released = 0;
+       WARN_ON(count != (hw_priv->wsm_caps.numInpChBufs - 1));
+
+    return 0;
+
+underflow:
+    WARN_ON(1);
+    return -EINVAL;
+}
+
+/* 3.67 */
+int wsm_request_buffer_request(struct xradio_vif *priv,
+                               u8 *arg)
+{
+       int ret;
+       struct wsm_buf *buf = &priv->hw_priv->wsm_cmd_buf;
+
+       wsm_cmd_lock(priv->hw_priv);
+
+       WSM_PUT8(buf, (*arg));
+       WSM_PUT8(buf, 0);
+       WSM_PUT16(buf, 0);
+
+       ret = wsm_cmd_send(priv->hw_priv, buf, arg, 0x0023, WSM_CMD_JOIN_TIMEOUT,priv->if_id);
+
+       wsm_cmd_unlock(priv->hw_priv);
+       return ret;
+
+nomem:
+       wsm_cmd_unlock(priv->hw_priv);
+       return -ENOMEM;
+}
+
+#endif
+
+int wsm_set_keepalive_filter(struct xradio_vif *priv, bool enable)
+{
+        struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+        priv->rx_filter.keepalive = enable;
+        return wsm_set_rx_filter(hw_priv, &priv->rx_filter, priv->if_id);
+}
+
+int wsm_set_probe_responder(struct xradio_vif *priv, bool enable)
+{
+        struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+
+        priv->rx_filter.probeResponder = enable;
+        return wsm_set_rx_filter(hw_priv, &priv->rx_filter, priv->if_id);
+}
+/* ******************************************************************** */
+/* WSM indication events implementation                                        */
+
+static int wsm_startup_indication(struct xradio_common *hw_priv,
+                                       struct wsm_buf *buf)
+{
+       u16 status;
+       static const char * const fw_types[] = {
+                       "ETF",
+                       "WFM",
+                       "WSM",
+                       "HI test",
+                       "Platform test"
+       };
+
+       hw_priv->wsm_caps.numInpChBufs  = WSM_GET16(buf);
+       hw_priv->wsm_caps.sizeInpChBuf  = WSM_GET16(buf);
+       hw_priv->wsm_caps.hardwareId    = WSM_GET16(buf);
+       hw_priv->wsm_caps.hardwareSubId = WSM_GET16(buf);
+       status                          = WSM_GET16(buf);
+       hw_priv->wsm_caps.firmwareCap   = WSM_GET16(buf);
+       hw_priv->wsm_caps.firmwareType  = WSM_GET16(buf);
+       hw_priv->wsm_caps.firmwareApiVer        = WSM_GET16(buf);
+       hw_priv->wsm_caps.firmwareBuildNumber = WSM_GET16(buf);
+       hw_priv->wsm_caps.firmwareVersion       = WSM_GET16(buf);
+       WSM_GET(buf, &hw_priv->wsm_caps.fw_label[0], WSM_FW_LABEL);
+       hw_priv->wsm_caps.fw_label[WSM_FW_LABEL+1] = 0; /* Do not trust FW too much. */
+
+       if (WARN_ON(status))
+               return -EINVAL;
+
+       if (WARN_ON(hw_priv->wsm_caps.firmwareType > 4))
+               return -EINVAL;
+
+       dev_info(hw_priv->pdev,
+               "   Input buffers: %d x %d bytes\n"
+               "   Hardware: %d.%d\n"
+               "   %s firmware ver: %d, build: %d,"
+                   " api: %d, cap: 0x%.4X\n",
+               hw_priv->wsm_caps.numInpChBufs,
+               hw_priv->wsm_caps.sizeInpChBuf,
+               hw_priv->wsm_caps.hardwareId,
+               hw_priv->wsm_caps.hardwareSubId,
+               fw_types[hw_priv->wsm_caps.firmwareType],
+               hw_priv->wsm_caps.firmwareVersion,
+               hw_priv->wsm_caps.firmwareBuildNumber,
+               hw_priv->wsm_caps.firmwareApiVer,
+               hw_priv->wsm_caps.firmwareCap);
+       
+       dev_info(hw_priv->pdev, "Firmware Label:%s\n", &hw_priv->wsm_caps.fw_label[0]);
+
+       hw_priv->wsm_caps.firmwareReady = 1;
+
+       wake_up(&hw_priv->wsm_startup_done);
+       return 0;
+
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+//add by yangfh 2014-10-31 16:58:53
+void wms_send_deauth_to_self(struct xradio_common *hw_priv, struct xradio_vif *priv)
+{
+       struct sk_buff *skb = NULL;
+       struct ieee80211_mgmt *deauth = NULL;
+
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP) {
+               int i = 0;
+               wsm_printk(XRADIO_DBG_WARN, "AP mode, send_deauth_to_self\n");
+               for (i = 0; i<MAX_STA_IN_AP_MODE; i++) {
+                       if (priv->link_id_db[i].status == XRADIO_LINK_HARD) {
+                               skb = dev_alloc_skb(sizeof(struct ieee80211_mgmt) + 64);
+                               if (!skb)
+                                       return;
+                               skb_reserve(skb, 64);
+                               deauth = (struct ieee80211_mgmt *)skb_put(skb, sizeof(struct ieee80211_mgmt));
+                               if(!deauth) {
+                                       WARN_ON(1);
+                                       return;
+                               }
+                               deauth->frame_control =
+                                   cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_DEAUTH);
+                               deauth->duration = 0;
+                               memcpy(deauth->da, priv->vif->addr, ETH_ALEN);
+                               memcpy(deauth->sa, priv->link_id_db[i].mac, ETH_ALEN);
+                               memcpy(deauth->bssid, priv->vif->addr, ETH_ALEN);
+                               deauth->seq_ctrl = 0;
+                               deauth->u.deauth.reason_code = WLAN_REASON_DEAUTH_LEAVING;
+                               ieee80211_rx_irqsafe(priv->hw, skb);
+                       }
+               }
+       } else if (priv->join_status == XRADIO_JOIN_STATUS_STA) {
+               wsm_printk(XRADIO_DBG_WARN, "STA mode, send_deauth_to_self\n");
+               skb = dev_alloc_skb(sizeof(struct ieee80211_mgmt) + 64);
+               if (!skb)
+                       return;
+               skb_reserve(skb, 64);
+               deauth = (struct ieee80211_mgmt *)skb_put(skb, sizeof(struct ieee80211_mgmt));
+               if(!deauth) {
+                       WARN_ON(1);
+                       return;
+               }
+               deauth->frame_control =
+                   cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_DEAUTH);
+               deauth->duration = 0;
+               memcpy(deauth->da, priv->vif->addr, ETH_ALEN);
+               memcpy(deauth->sa, priv->join_bssid, ETH_ALEN);
+               memcpy(deauth->bssid, priv->join_bssid, ETH_ALEN);
+               deauth->seq_ctrl = 0;
+               deauth->u.deauth.reason_code = WLAN_REASON_DEAUTH_LEAVING;
+               ieee80211_rx_irqsafe(priv->hw, skb);
+       }
+}
+
+void wms_send_disassoc_to_self(struct xradio_common *hw_priv, struct xradio_vif *priv)
+{
+       struct sk_buff *skb = NULL;
+       struct ieee80211_mgmt *disassoc = NULL;
+       if (priv->join_status == XRADIO_JOIN_STATUS_AP) {
+               int i = 0;
+               wsm_printk(XRADIO_DBG_WARN, "AP mode, wms_send_disassoc_to_self\n");
+               for (i = 0; i<MAX_STA_IN_AP_MODE; i++) {
+                       if (priv->link_id_db[i].status == XRADIO_LINK_HARD) {
+                               skb = dev_alloc_skb(sizeof(struct ieee80211_mgmt) + 64);
+                               if (!skb)
+                                       return;
+                               skb_reserve(skb, 64);
+                               disassoc = (struct ieee80211_mgmt *)skb_put(skb, sizeof(struct ieee80211_mgmt));
+                               if(!disassoc) {
+                                       WARN_ON(1);
+                                       return;
+                               }
+                               disassoc->frame_control =
+                                       cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_DISASSOC);
+                               disassoc->duration = 0;
+                               memcpy(disassoc->da, priv->vif->addr, ETH_ALEN);
+                               memcpy(disassoc->sa, priv->link_id_db[i].mac, ETH_ALEN);
+                               memcpy(disassoc->bssid, priv->vif->addr, ETH_ALEN);
+                               disassoc->seq_ctrl = 0;
+                               disassoc->u.disassoc.reason_code = WLAN_REASON_DISASSOC_STA_HAS_LEFT;
+                               ieee80211_rx_irqsafe(priv->hw, skb);
+                       }
+               }
+       } else if (priv->join_status == XRADIO_JOIN_STATUS_STA) {
+               wsm_printk(XRADIO_DBG_WARN, "STA mode, wms_send_disassoc_to_self\n");
+               skb = dev_alloc_skb(sizeof(struct ieee80211_mgmt) + 64);
+               if (!skb)
+                       return;
+               skb_reserve(skb, 64);
+               disassoc = (struct ieee80211_mgmt *)skb_put(skb, sizeof(struct ieee80211_mgmt));
+               if(!disassoc) {
+                       WARN_ON(1);
+                       return;
+               }
+               disassoc->frame_control =
+                    cpu_to_le16(IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_DISASSOC);
+               disassoc->duration = 0;
+               memcpy(disassoc->da, priv->vif->addr, ETH_ALEN);
+               memcpy(disassoc->sa, priv->join_bssid, ETH_ALEN);
+               memcpy(disassoc->bssid, priv->join_bssid, ETH_ALEN);
+               disassoc->seq_ctrl = 0;
+               disassoc->u.disassoc.reason_code = WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY;
+               ieee80211_rx_irqsafe(priv->hw, skb);
+       }
+}
+
+static int wsm_receive_indication(struct xradio_common *hw_priv,
+                                       int interface_link_id,
+                                       struct wsm_buf *buf,
+                                       struct sk_buff **skb_p)
+{
+       struct xradio_vif *priv;
+       struct wsm_rx rx;
+       struct ieee80211_hdr *hdr;
+       size_t hdr_len;
+
+       hw_priv->rx_timestamp = jiffies;
+
+               rx.status = WSM_GET32(buf);
+               rx.channelNumber = WSM_GET16(buf);
+               rx.rxedRate = WSM_GET8(buf);
+               rx.rcpiRssi = WSM_GET8(buf);
+               rx.flags = WSM_GET32(buf);
+
+               /* TODO:COMBO: Frames received from scanning are received
+               * with interface ID == 2 */
+               if (is_hardware_xradio(hw_priv)) {
+                       if (interface_link_id == XRWL_GENERIC_IF_ID) {
+                               /* Frames received in response to SCAN
+                                * Request */
+                               interface_link_id =
+                                       get_interface_id_scanning(hw_priv);
+                               if (interface_link_id == -1) {
+                                       interface_link_id = hw_priv->roc_if_id;
+                               }
+#ifdef ROAM_OFFLOAD
+                               if (hw_priv->auto_scanning) {
+                                       interface_link_id = hw_priv->scan.if_id;
+                               }
+#endif/*ROAM_OFFLOAD*/
+                       }
+                       /* linkid (peer sta id is encoded in bit 25-28 of
+                          flags field */
+                       rx.link_id = ((rx.flags & (0xf << 25)) >> 25);
+                       rx.if_id = interface_link_id;
+               } else {
+                       rx.link_id = interface_link_id;
+                       rx.if_id = 0;
+               }
+               priv = xrwl_hwpriv_to_vifpriv(hw_priv, rx.if_id);
+               if (!priv) {
+                       dev_dbg(hw_priv->pdev, "got frame on a vif we don't have, dropped\n");
+                       return 0;
+               }
+               //remove wsm hdr of skb
+               hdr_len = buf->data - buf->begin;
+               skb_pull(*skb_p, hdr_len);
+               
+               /* FW Workaround: Drop probe resp or
+               beacon when RSSI is 0 */
+               hdr = (struct ieee80211_hdr *) (*skb_p)->data;
+
+               if (!rx.rcpiRssi &&
+                   (ieee80211_is_probe_resp(hdr->frame_control) ||
+                   ieee80211_is_beacon(hdr->frame_control))) {
+                       spin_unlock(&priv->vif_lock);
+                       return 0;
+               }
+
+               /* If no RSSI subscription has been made,
+               * convert RCPI to RSSI here */
+               if (!priv->cqm_use_rssi)
+                       rx.rcpiRssi = rx.rcpiRssi / 2 - 110;
+
+               if (!rx.status && unlikely(ieee80211_is_deauth(hdr->frame_control))) {
+                       if (priv->join_status == XRADIO_JOIN_STATUS_STA) {
+                               /* Shedule unjoin work */
+                               dev_dbg(hw_priv->pdev,
+                                       "Issue unjoin command (RX).\n");
+                               wsm_lock_tx_async(hw_priv);
+                               if (queue_work(hw_priv->workqueue,
+                                               &priv->unjoin_work) <= 0)
+                                       wsm_unlock_tx(hw_priv);
+                       }
+               }
+               xradio_rx_cb(priv, &rx, skb_p);
+               if (*skb_p)
+                       skb_push(*skb_p, hdr_len);
+               spin_unlock(&priv->vif_lock);
+
+       return 0;
+
+underflow:
+       return -EINVAL;
+}
+
+static int wsm_event_indication(struct xradio_common *hw_priv,
+                               struct wsm_buf *buf,
+                               int interface_link_id)
+{
+       int first;
+       struct xradio_wsm_event *event = NULL;
+       struct xradio_vif *priv;
+
+       if (!is_hardware_xradio(hw_priv))
+               interface_link_id = 0;
+
+       priv = xrwl_hwpriv_to_vifpriv(hw_priv, interface_link_id);
+
+       if (unlikely(!priv)) {
+               dev_warn(hw_priv->pdev, "Event: %d(%d) for removed "
+                          "interface, ignoring\n", __le32_to_cpu(WSM_GET32(buf)),
+                          __le32_to_cpu(WSM_GET32(buf)));
+               return 0;
+       }
+
+       if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED)) {
+               /* STA is stopped. */
+               return 0;
+       }
+       spin_unlock(&priv->vif_lock);
+
+       event = kzalloc(sizeof(struct xradio_wsm_event), GFP_KERNEL);
+       if (event == NULL) {
+               dev_err(hw_priv->pdev, "xr_kzalloc failed!");
+               return -EINVAL;
+       }
+
+       event->evt.eventId = __le32_to_cpu(WSM_GET32(buf));
+       event->evt.eventData = __le32_to_cpu(WSM_GET32(buf));
+       event->if_id = interface_link_id;
+
+       dev_dbg(hw_priv->pdev, "Event: %d(%d)\n",
+               event->evt.eventId, event->evt.eventData);
+
+       spin_lock(&hw_priv->event_queue_lock);
+       first = list_empty(&hw_priv->event_queue);
+       list_add_tail(&event->link, &hw_priv->event_queue);
+       spin_unlock(&hw_priv->event_queue_lock);
+
+       if (first)
+               queue_work(hw_priv->workqueue, &hw_priv->event_handler);
+
+       return 0;
+
+underflow:
+       kfree(event);
+       return -EINVAL;
+}
+
+#define PRINT_11K_MEASRURE 1
+static int wsm_measure_cmpl_indication(struct xradio_common *hw_priv,
+                                                      struct wsm_buf *buf)
+{
+    MEASUREMENT_COMPLETE measure_cmpl;
+    u8 cca_chanload;
+    u32 buf_len = 0;
+    u32 *data;
+       
+    LMAC_MEAS_CHANNEL_LOAD_RESULTS *chanload_res;
+    LMAC_MEAS_NOISE_HISTOGRAM_RESULTS *noise_res;
+       WSM_GET(buf, &measure_cmpl, 12);
+
+    switch (measure_cmpl.MeasurementType) {
+           case ChannelLoadMeasurement:
+               buf_len = sizeof(LMAC_MEAS_CHANNEL_LOAD_RESULTS);
+               break;
+           case NoiseHistrogramMeasurement:
+               buf_len = sizeof(LMAC_MEAS_NOISE_HISTOGRAM_RESULTS);
+               break;
+           case BeaconReport:
+               buf_len = sizeof(LMAC_MEAS_BEACON_RESULTS);
+               break;
+           case STAstatisticsReport:
+               buf_len = sizeof(LMAC_MEAS_STA_STATS_RESULTS);
+               break;
+           case LinkMeasurement:
+               buf_len = sizeof(LMAC_MEAS_LINK_MEASUREMENT_RESULTS);
+               break;
+       }
+       wsm_printk(XRADIO_DBG_ERROR, "[11K]buf_len = %d\n", buf_len);
+    WSM_GET(buf, &measure_cmpl.MeasurementReport, buf_len);
+       
+       data = (u32 *)(&measure_cmpl);
+//     wsm_printk(XRADIO_DBG_ERROR, "[***HL***]data[0]=%08x\n", data[0]);
+//     wsm_printk(XRADIO_DBG_ERROR, "[***HL***]data[1]=%08x\n", data[1]);
+//     wsm_printk(XRADIO_DBG_ERROR, "[***HL***]data[2]=%08x\n", data[2]);
+//     wsm_printk(XRADIO_DBG_ERROR, "[***HL***]data[3]=%08x\n", data[3]);
+//     wsm_printk(XRADIO_DBG_ERROR, "[***HL***]data[4]=%08x\n", data[4]);
+//     wsm_printk(XRADIO_DBG_ERROR, "[***HL***]data[5]=%08x\n", data[5]);
+//     wsm_printk(XRADIO_DBG_ERROR, "[***HL***]data[6]=%08x\n", data[6]);
+       wsm_printk(XRADIO_DBG_ERROR, "[***HL***]MeasurementType=%0d\n", measure_cmpl.MeasurementType);
+       
+       if (measure_cmpl.Status == WSM_STATUS_SUCCESS){
+           switch (measure_cmpl.MeasurementType) {
+               case ChannelLoadMeasurement:
+                   chanload_res = &measure_cmpl.MeasurementReport.ChannelLoadResults;
+                   cca_chanload = (chanload_res->ChannelLoadCCA == MEAS_CCA) ? 
+                                   chanload_res->CCAbusyFraction : 
+                                   chanload_res->ChannelLoad;
+                   #ifdef PRINT_11K_MEASRURE
+                       wsm_printk(XRADIO_DBG_ERROR, "[11K] ChannelLoadMeasurement Result:\n"\
+                                                    "ChannelLoadCCA = %d\n"\
+                                                    "ChannelNum     = %d\n"\
+                                                    "Duration       = %d\n"\
+                                                    "Fraction       = %d\n", \
+                              chanload_res->ChannelLoadCCA,\
+                              chanload_res->ChannelNum,\
+                              chanload_res->MeasurementDuration,\
+                              cca_chanload
+                              );
+                   #endif
+                   break;
+               case NoiseHistrogramMeasurement:
+                   noise_res = &measure_cmpl.MeasurementReport.NoiseHistogramResults;
+//                 IpiRpi = (noise_res->IpiRpi == MEAS_RPI) ? 
+//                                 chanload_res->CCAbusyFraction : 
+//                                 chanload_res->ChannelLoad;
+                   #ifdef PRINT_11K_MEASRURE
+                       wsm_printk(XRADIO_DBG_ERROR, "[11K] NoiseHistogramResults:\n"\
+                                                    "IpiRpi = %d\n"\
+                                                    "ChannelNum = %d\n"\
+                                                    "PI_0__Density = %d\n"\
+                                                    "PI_1__Density = %d\n"\
+                                                    "PI_2__Density = %d\n"\
+                                                    "PI_3__Density = %d\n"\
+                                                    "PI_4__Density = %d\n"\
+                                                    "PI_5__Density = %d\n"\
+                                                    "PI_6__Density = %d\n"\
+                                                    "PI_7__Density = %d\n"\
+                                                    "PI_8__Density = %d\n"\
+                                                    "PI_9__Density = %d\n"\
+                                                    "PI_10_Density = %d\n", \
+                              noise_res->IpiRpi,\
+                              noise_res->ChannelNum,\
+                              noise_res->PI_0_Density,\
+                              noise_res->PI_1_Density,\
+                              noise_res->PI_2_Density,\
+                              noise_res->PI_3_Density,\
+                              noise_res->PI_4_Density,\
+                              noise_res->PI_5_Density,\
+                              noise_res->PI_6_Density,\
+                              noise_res->PI_7_Density,\
+                              noise_res->PI_8_Density,\
+                              noise_res->PI_9_Density,\
+                              noise_res->PI_10_Density
+                              );
+                   #endif
+                   break;
+               case BeaconReport:
+                   break;
+               case STAstatisticsReport:
+                   break;
+               case LinkMeasurement:
+                   break;
+           }
+       } else {
+           wsm_printk(XRADIO_DBG_ERROR, "11K Measure(type=%d) Fail\n", measure_cmpl.MeasurementType);
+       }
+
+       return 0;
+
+underflow:
+       return -EINVAL;
+}
+/* TODO:COMBO:Make this perVIFF once mac80211 support is available */
+static int wsm_channel_switch_indication(struct xradio_common *hw_priv,
+                                               struct wsm_buf *buf)
+{
+       wsm_unlock_tx(hw_priv); /* Re-enable datapath */
+       WARN_ON(WSM_GET32(buf));
+
+       hw_priv->channel_switch_in_progress = 0;
+       wake_up(&hw_priv->channel_switch_done);
+
+
+       xradio_channel_switch_cb(hw_priv);
+       return 0;
+
+underflow:
+       return -EINVAL;
+}
+
+static int wsm_set_pm_indication(struct xradio_common *hw_priv,
+                                       struct wsm_buf *buf)
+{
+       wsm_oper_unlock(hw_priv);
+       return 0;
+}
+
+static int wsm_scan_complete_indication(struct xradio_common *hw_priv,
+                                       struct wsm_buf *buf)
+{
+       struct wsm_scan_complete arg;
+#ifdef ROAM_OFFLOAD
+       if(hw_priv->auto_scanning == 0)
+               wsm_oper_unlock(hw_priv);
+#else
+       wsm_oper_unlock(hw_priv);
+#endif /*ROAM_OFFLOAD*/
+
+       arg.status = WSM_GET32(buf);
+       arg.psm = WSM_GET8(buf);
+       arg.numChannels = WSM_GET8(buf);
+       xradio_scan_complete_cb(hw_priv, &arg);
+
+       return 0;
+
+underflow:
+       return -EINVAL;
+}
+
+static int wsm_find_complete_indication(struct xradio_common *hw_priv,
+                                       struct wsm_buf *buf)
+{
+       /* TODO: Implement me. */
+       //STUB();
+       return 0;
+}
+
+static int wsm_suspend_resume_indication(struct xradio_common *hw_priv,
+                                        int interface_link_id,
+                                        struct wsm_buf *buf)
+{
+               u32 flags;
+               struct wsm_suspend_resume arg;
+               struct xradio_vif *priv;
+
+               if (is_hardware_xradio(hw_priv)) {
+                       int i;
+                       arg.if_id = interface_link_id;
+                       /* TODO:COMBO: Extract bitmap from suspend-resume
+                       * TX indication */
+                       xradio_for_each_vif(hw_priv, priv, i) {
+                               if (!priv)
+                                       continue;
+                               if (priv->join_status ==
+                                               XRADIO_JOIN_STATUS_AP) {
+                                        arg.if_id = priv->if_id;
+                                        break;
+                               }
+                               arg.link_id = 0;
+                       }
+               } else {
+                       arg.if_id = 0;
+                       arg.link_id = interface_link_id;
+               }
+
+               flags = WSM_GET32(buf);
+               arg.stop = !(flags & 1);
+               arg.multicast = !!(flags & 8);
+               arg.queue = (flags >> 1) & 3;
+
+               priv = xrwl_hwpriv_to_vifpriv(hw_priv, arg.if_id);
+               if (unlikely(!priv)) {
+                       wsm_printk(XRADIO_DBG_MSG, "suspend-resume indication"
+                                  " for removed interface!\n");
+                       return 0;
+               }
+               xradio_suspend_resume(priv, &arg);
+               spin_unlock(&priv->vif_lock);
+
+       return 0;
+
+underflow:
+       return -EINVAL;
+}
+
+
+/* ******************************************************************** */
+/* WSM TX                                                              */
+
+int wsm_cmd_send(struct xradio_common *hw_priv,
+                struct wsm_buf *buf,
+                void *arg, u16 cmd, long tmo, int if_id)
+{
+       size_t buf_len = buf->data - buf->begin;
+       int ret;
+
+       if (cmd == 0x0006 || cmd == 0x0005) /* Write/Read MIB */
+               wsm_printk(XRADIO_DBG_MSG, ">>> 0x%.4X [MIB: 0x%.4X] (%d)\n",
+                       cmd, __le16_to_cpu(((__le16 *)buf->begin)[2]),
+                       buf_len);
+       else
+               wsm_printk(XRADIO_DBG_MSG, ">>> 0x%.4X (%d)\n", cmd, buf_len);
+
+       if (unlikely(hw_priv->bh_error)) {
+               wsm_buf_reset(buf);
+               wsm_printk(XRADIO_DBG_ERROR, "bh error!>>> 0x%.4X (%d)\n", cmd, buf_len);
+               return -ETIMEDOUT;
+       }
+
+       /* Fill HI message header */
+       /* BH will add sequence number */
+
+       /* TODO:COMBO: Add if_id from  to the WSM header */
+       /* if_id == -1 indicates that command is HW specific,
+        * eg. wsm_configuration which is called during driver initialzation
+        *  (mac80211 .start callback called when first ifce is created. )*/
+
+       /* send hw specific commands on if 0 */
+       if (if_id == -1)
+               if_id = 0;
+
+       ((__le16 *)buf->begin)[0] = __cpu_to_le16(buf_len);
+       ((__le16 *)buf->begin)[1] = __cpu_to_le16(cmd |
+                                       ((is_hardware_xradio(hw_priv)) ? (if_id << 6) : 0));
+
+       spin_lock(&hw_priv->wsm_cmd.lock);
+       BUG_ON(hw_priv->wsm_cmd.ptr);
+       hw_priv->wsm_cmd.done = 0;
+       hw_priv->wsm_cmd.ptr = buf->begin;
+       hw_priv->wsm_cmd.len = buf_len;
+       hw_priv->wsm_cmd.arg = arg;
+       hw_priv->wsm_cmd.cmd = cmd;
+       spin_unlock(&hw_priv->wsm_cmd.lock);
+
+       xradio_bh_wakeup(hw_priv);
+
+       if (unlikely(hw_priv->bh_error)) {
+               /* Do not wait for timeout if BH is dead. Exit immediately. */
+               ret = 0;
+       } else {
+               unsigned long wsm_cmd_max_tmo; 
+
+               /* Give start cmd a little more time */
+               if (unlikely(tmo == WSM_CMD_START_TIMEOUT))
+                       wsm_cmd_max_tmo = WSM_CMD_START_TIMEOUT;
+               else
+                       wsm_cmd_max_tmo = WSM_CMD_DEFAULT_TIMEOUT;
+
+               /*Set max timeout.*/
+               wsm_cmd_max_tmo = jiffies + wsm_cmd_max_tmo;
+
+               /* Firmware prioritizes data traffic over control confirm.
+                * Loop below checks if data was RXed and increases timeout
+                * accordingly. */
+               do {
+                       /* It's safe to use unprotected access to wsm_cmd.done here */
+                       ret = wait_event_timeout(hw_priv->wsm_cmd_wq, hw_priv->wsm_cmd.done, tmo);
+
+                       /* check time since last rxed and max timeout.*/
+               } while (!ret && 
+                        time_before_eq(jiffies, hw_priv->rx_timestamp+tmo) && 
+                        time_before(jiffies, wsm_cmd_max_tmo));
+
+       }
+
+       if (unlikely(ret == 0)) {
+               u16 raceCheck;
+
+               spin_lock(&hw_priv->wsm_cmd.lock);
+               raceCheck = hw_priv->wsm_cmd.cmd;
+               hw_priv->wsm_cmd.arg = NULL;
+               hw_priv->wsm_cmd.ptr = NULL;
+               spin_unlock(&hw_priv->wsm_cmd.lock);
+
+               dev_err(hw_priv->pdev, "***CMD timeout!>>> 0x%.4X (%d), buf_use=%d, bh_state=%d\n",
+                          cmd, buf_len, hw_priv->hw_bufs_used, hw_priv->bh_error);
+               /* Race condition check to make sure _confirm is not called
+                * after exit of _send */
+               if (raceCheck == 0xFFFF) {
+                       /* If wsm_handle_rx got stuck in _confirm we will hang
+                        * system there. It's better than silently currupt
+                        * stack or heap, isn't it? */
+                       BUG_ON(wait_event_timeout(
+                                       hw_priv->wsm_cmd_wq,
+                                       hw_priv->wsm_cmd.done,
+                                       WSM_CMD_LAST_CHANCE_TIMEOUT) <= 0);
+               }
+
+               /* Kill BH thread to report the error to the top layer. */
+               hw_priv->bh_error = 1;
+#ifdef BH_USE_SEMAPHORE
+               up(&hw_priv->bh_sem);
+#else
+               wake_up(&hw_priv->bh_wq);
+#endif
+               ret = -ETIMEDOUT;
+       } else {
+               spin_lock(&hw_priv->wsm_cmd.lock);
+               BUG_ON(!hw_priv->wsm_cmd.done);
+               ret = hw_priv->wsm_cmd.ret;
+               spin_unlock(&hw_priv->wsm_cmd.lock);
+       }
+       wsm_buf_reset(buf);
+       return ret;
+}
+
+/* ******************************************************************** */
+/* WSM TX port control                                                 */
+
+void wsm_lock_tx(struct xradio_common *hw_priv)
+{
+       down(&hw_priv->tx_lock_sem);
+       atomic_add(1, &hw_priv->tx_lock);
+       /* always check event if wsm_vif_lock_tx.*/
+       if (wsm_flush_tx(hw_priv)) 
+               wsm_printk(XRADIO_DBG_MSG, "TX is locked.\n");
+       up(&hw_priv->tx_lock_sem);
+}
+
+void wsm_vif_lock_tx(struct xradio_vif *priv)
+{
+       struct xradio_common *hw_priv = priv->hw_priv;
+       down(&hw_priv->tx_lock_sem);
+       if (atomic_add_return(1, &hw_priv->tx_lock) == 1) {
+               if (wsm_vif_flush_tx(priv))
+                       wsm_printk(XRADIO_DBG_MSG, "TX is locked for"
+                                       " if_id %d.\n", priv->if_id);
+       }
+       up(&hw_priv->tx_lock_sem);
+}
+
+void wsm_lock_tx_async(struct xradio_common *hw_priv)
+{
+       if (atomic_add_return(1, &hw_priv->tx_lock) == 1)
+               wsm_printk(XRADIO_DBG_MSG, "TX is locked (async).\n");
+}
+
+bool wsm_flush_tx(struct xradio_common *hw_priv)
+{
+       long timeout = WSM_CMD_LAST_CHANCE_TIMEOUT;
+
+       /* Flush must be called with TX lock held. */
+       BUG_ON(!atomic_read(&hw_priv->tx_lock));
+
+       /* First check if we really need to do something.
+        * It is safe to use unprotected access, as hw_bufs_used
+        * can only decrements. */
+       if (!hw_priv->hw_bufs_used)
+               return true;
+
+       if (hw_priv->bh_error) {
+               /* In case of failure do not wait for magic. */
+               wsm_printk(XRADIO_DBG_ERROR, "Fatal error occured, "
+                               "will not flush TX.\n");
+               return false;
+       } else {
+               /* Get "oldest" frame, if any frames stuck in firmware, 
+                  query all of them until max timeout. */
+               int num = hw_priv->hw_bufs_used + 1;
+               while (xradio_query_txpkt_timeout(hw_priv, XRWL_ALL_IFS, 
+                                                 0xffffffff, &timeout)) {
+                       if (timeout < 0 || !num) {
+                               /* Hmmm... Not good. Frame had stuck in firmware. */
+                               wsm_printk(XRADIO_DBG_ERROR,
+                                                  "%s:hw_bufs_used=%d, num=%d, timeout=%ld\n",
+                                                  __func__, hw_priv->hw_bufs_used, num, timeout);
+                               hw_priv->bh_error = 1;
+#ifdef BH_USE_SEMAPHORE
+                               up(&hw_priv->bh_sem);
+#else
+                               wake_up(&hw_priv->bh_wq);
+#endif
+                               return false;
+                       } else if (wait_event_timeout(hw_priv->bh_evt_wq, 
+                                              !hw_priv->hw_bufs_used, timeout) > 0) {
+                               return true;
+                       }
+                       --num;
+               }
+               if (hw_priv->hw_bufs_used)
+                       wsm_printk(XRADIO_DBG_ERROR, "%s:No pengding, but hw_bufs_used=%d\n",
+                                  __func__, hw_priv->hw_bufs_used);
+               /* Ok, everything is flushed. */
+               return true;
+       }
+}
+
+bool wsm_vif_flush_tx(struct xradio_vif *priv)
+{
+       struct xradio_common *hw_priv = priv->hw_priv;
+       long timeout = WSM_CMD_LAST_CHANCE_TIMEOUT;
+       int if_id = priv->if_id;
+
+       /* Flush must be called with TX lock held. */
+       BUG_ON(!atomic_read(&hw_priv->tx_lock));
+
+       /* First check if we really need to do something.
+        * It is safe to use unprotected access, as hw_bufs_used
+        * can only decrements. */
+       if (!hw_priv->hw_bufs_used_vif[if_id])
+               return true;
+
+       if (hw_priv->bh_error) {
+               /* In case of failure do not wait for magic. */
+               wsm_printk(XRADIO_DBG_ERROR, "Fatal error occured, "
+                               "will not flush TX.\n");
+               return false;
+       } else {
+               /* Get "oldest" frame, if any frames stuck in firmware, 
+                  query all of them until max timeout. */
+               int num = hw_priv->hw_bufs_used_vif[if_id] + 1;
+               while (xradio_query_txpkt_timeout(hw_priv, if_id, 0xffffffff, &timeout)) {
+                       if (timeout < 0 || !num) {
+                               /* Hmmm... Not good. Frame had stuck in firmware. */
+                               wsm_printk(XRADIO_DBG_ERROR, "%s: if_id=%d, hw_bufs_used_vif=%d, num=%d\n", 
+                                          __func__, if_id, hw_priv->hw_bufs_used_vif[priv->if_id],
+                                          num);
+                               hw_priv->bh_error = 1; 
+       #ifdef BH_USE_SEMAPHORE
+                               up(&hw_priv->bh_sem);
+       #else
+                               wake_up(&hw_priv->bh_wq);
+       #endif
+                               return false;
+                       } else if (wait_event_timeout(hw_priv->bh_evt_wq, 
+                                     !hw_priv->hw_bufs_used_vif[if_id], timeout) > 0) {
+                               return true;
+                       }
+                       --num;
+               }
+               if (hw_priv->hw_bufs_used_vif[if_id])
+                       wsm_printk(XRADIO_DBG_ERROR, "%s:No pengding, but hw_bufs_used_vif=%d\n",
+                                  __func__, hw_priv->hw_bufs_used_vif[priv->if_id]);
+               /* Ok, everything is flushed. */
+               return true;
+       }
+}
+
+
+void wsm_unlock_tx(struct xradio_common *hw_priv)
+{
+       int tx_lock;
+       if (hw_priv->bh_error)
+               wsm_printk(XRADIO_DBG_ERROR, "bh_error=%d, wsm_unlock_tx is unsafe\n",
+                          hw_priv->bh_error);
+       else {
+               tx_lock = atomic_sub_return(1, &hw_priv->tx_lock);
+               if (tx_lock < 0) {
+                       BUG_ON(1);
+               } else if (tx_lock == 0) {
+                       xradio_bh_wakeup(hw_priv);
+                       wsm_printk(XRADIO_DBG_MSG, "TX is unlocked.\n");
+               }
+       }
+}
+
+/* ******************************************************************** */
+/* WSM RX                                                              */
+
+int wsm_handle_exception(struct xradio_common *hw_priv, u8 *data, size_t len)
+{
+       struct wsm_buf buf;
+       u32 reason;
+       u32 reg[18];
+       char fname[48];
+       int i = 0;
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       struct xradio_vif *priv = NULL;
+#endif
+
+       static const char * const reason_str[] = {
+               "undefined instruction",
+               "prefetch abort",
+               "data abort",
+               "unknown error",
+       };
+
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       /* Send the event upwards on the FW exception */
+       xradio_pm_stay_awake(&hw_priv->pm_state, 3*HZ);
+
+       spin_lock(&hw_priv->vif_list_lock);
+       xradio_for_each_vif(hw_priv, priv, i) {
+               if (!priv)
+                       continue;
+               //ieee80211_driver_hang_notify(priv->vif, GFP_KERNEL);
+       }
+       spin_unlock(&hw_priv->vif_list_lock);
+#endif
+
+       buf.begin = buf.data = data;
+       buf.end = &buf.begin[len];
+
+       reason = WSM_GET32(&buf);
+       for (i = 0; i < ARRAY_SIZE(reg); ++i)
+               reg[i] = WSM_GET32(&buf);
+       WSM_GET(&buf, fname, sizeof(fname));
+
+       if (reason < 4) {
+               dev_err(hw_priv->pdev, "Firmware exception: %s.\n",
+                          reason_str[reason]);
+       } else {
+               dev_err(hw_priv->pdev, "Firmware assert at %.*s, line %d, reason=0x%x\n",
+                              sizeof(fname), fname, reg[1], reg[2]);
+       }
+
+       for (i = 0; i < 12; i += 4) {
+               dev_err(hw_priv->pdev, "Firmware:" \
+                          "R%d: 0x%.8X, R%d: 0x%.8X, R%d: 0x%.8X, R%d: 0x%.8X,\n",
+                          i + 0, reg[i + 0], i + 1, reg[i + 1],
+                          i + 2, reg[i + 2], i + 3, reg[i + 3]);
+       }
+       dev_err(hw_priv->pdev, "Firmware:" \
+                  "R12: 0x%.8X, SP: 0x%.8X, LR: 0x%.8X, PC: 0x%.8X,\n",
+                  reg[i + 0], reg[i + 1], reg[i + 2], reg[i + 3]);
+       i += 4;
+       dev_err(hw_priv->pdev, "Firmware:CPSR: 0x%.8X, SPSR: 0x%.8X\n",
+                  reg[i + 0], reg[i + 1]);
+       
+       return 0;
+
+underflow:
+       dev_err(hw_priv->pdev, "Firmware exception.\n");
+       print_hex_dump_bytes("Exception: ", DUMP_PREFIX_NONE, data, len);
+       return -EINVAL;
+}
+
+static int wsm_debug_indication(struct xradio_common *hw_priv,
+                                               struct wsm_buf       *buf)
+{
+    //for only one debug item.
+    u32 dbg_id, buf_data=0; 
+    u16 dbg_buf_len; 
+    u8  dbg_len;
+    u8 *dbg_buf;
+    dbg_id = WSM_GET32(buf);
+
+    dbg_buf_len = buf->end - buf->data;
+    
+    if (dbg_id == 5) {
+           do {
+               dbg_buf_len = buf->end - buf->data;
+               dbg_len = WSM_GET8(buf);
+               if (dbg_len > dbg_buf_len - sizeof(dbg_len)) {
+                   wsm_printk(XRADIO_DBG_ERROR, "[FW]dbg_len     = %d\n", dbg_len);
+                   wsm_printk(XRADIO_DBG_ERROR, "[FW]dbg_buf_len = %d\n", dbg_buf_len);
+                   wsm_printk(XRADIO_DBG_ERROR, "[FW]debug ind err\n");
+                   //ret = -EINVAL;
+                   //return ret;
+                   
+                   
+                   break;
+               }
+        
+        dbg_buf = buf->data;
+        //print it;
+        wsm_printk(XRADIO_DBG_ALWY,  "[FW-LOG] %s", dbg_buf);
+        //
+        buf->data += dbg_len;
+        
+    } while (buf->data < buf->end);
+       } else {
+               if (dbg_buf_len >= 4) {
+                       buf_data = WSM_GET32(buf);
+                       wsm_printk(XRADIO_DBG_ALWY,  "[FW-DEBUG] DbgId = %d, data = %d", dbg_id, buf_data);
+               } else {
+                       wsm_printk(XRADIO_DBG_ALWY,  "[FW-DEBUG] DbgId = %d", dbg_id);
+               }
+       }
+
+    return 0;
+    
+underflow:
+       WARN_ON(1);
+       return -EINVAL;
+}
+
+int wsm_handle_rx(struct xradio_common *hw_priv, int id,
+                 struct wsm_hdr *wsm, struct sk_buff **skb_p)
+{
+       int ret = 0;
+       struct wsm_buf wsm_buf;
+       /* struct xradio_vif *priv = NULL;      MRK: unused variable, see if 0 below */
+       /* int i = 0;                           MRK: unused variable, see if 0 below */
+       int interface_link_id = (id >> 6) & 0x0F;
+#ifdef ROAM_OFFLOAD
+#if 0
+       struct xradio_vif *priv;
+       priv = xrwl_hwpriv_to_vifpriv(hw_priv, interface_link_id);
+       if (unlikely(!priv)) {
+               WARN_ON(1);
+               return 0;
+       }
+       spin_unlock(&priv->vif_lock);
+#endif
+#endif/*ROAM_OFFLOAD*/
+
+       /* Strip link id. */
+       id &= ~WSM_TX_LINK_ID(WSM_TX_LINK_ID_MAX);
+
+       wsm_buf.begin = (u8 *)&wsm[0];
+       wsm_buf.data = (u8 *)&wsm[1];
+       wsm_buf.end = &wsm_buf.begin[__le32_to_cpu(wsm->len)];
+
+       wsm_printk(XRADIO_DBG_MSG, "<<< 0x%.4X (%d)\n", id,
+                       wsm_buf.end - wsm_buf.begin);
+
+#if defined(DGB_XRADIO_HWT)
+/***************************for HWT ********************************/
+       if (id == 0x0424) {
+               u16 TestID = *(u16 *)(wsm_buf.data);
+               if (TestID == 1)  //test frame confirm.
+                       wsm_hwt_tx_confirm(hw_priv, &wsm_buf);
+               else {
+                       spin_lock(&hw_priv->wsm_cmd.lock);
+                       hw_priv->wsm_cmd.ret = *((u16 *)(wsm_buf.data) + 1);
+                       hw_priv->wsm_cmd.done = 1;
+                       spin_unlock(&hw_priv->wsm_cmd.lock);
+                       wake_up(&hw_priv->wsm_cmd_wq);
+                       wsm_printk(XRADIO_DBG_ALWY, "HWT TestID=0x%x Confirm ret=%d\n", 
+                                  *(u16 *)(wsm_buf.data), hw_priv->wsm_cmd.ret);
+               }
+               return 0;
+       } else if (id == 0x0824) {
+               u16 TestID = *(u16 *)(wsm_buf.data);
+               switch (TestID) {
+               case 2:  //recieve a test frame.
+                       wsm_hwt_rx_frames(hw_priv, &wsm_buf);
+                       break;
+               case 3:  //enc test result.
+                       wsm_hwt_enc_results(hw_priv, &wsm_buf);
+                       break;
+               case 4:  //mic test result.
+                       wsm_hwt_mic_results(hw_priv, &wsm_buf);
+                       break;
+               default:
+                       wsm_printk(XRADIO_DBG_ERROR, "HWT ERROR Indication TestID=0x%x\n", TestID);
+                       break;
+               }
+               return 0;
+       }
+/***************************for HWT ********************************/
+#endif //DGB_XRADIO_HWT
+
+       if (id == 0x404) {
+               ret = wsm_tx_confirm(hw_priv, &wsm_buf, interface_link_id);
+#ifdef MCAST_FWDING
+#if 1 
+       } else if (id == 0x422) {
+               ret = wsm_give_buffer_confirm(hw_priv, &wsm_buf);
+#endif
+#endif
+
+       } else if (id == 0x41E) {
+               ret = wsm_multi_tx_confirm(hw_priv, &wsm_buf,
+                                          interface_link_id);
+       } else if (id & 0x0400) {
+               void *wsm_arg;
+               u16 wsm_cmd;
+
+               /* Do not trust FW too much. Protection against repeated
+                * response and race condition removal (see above). */
+               spin_lock(&hw_priv->wsm_cmd.lock);
+               wsm_arg = hw_priv->wsm_cmd.arg;
+               wsm_cmd = hw_priv->wsm_cmd.cmd &
+                               ~WSM_TX_LINK_ID(WSM_TX_LINK_ID_MAX);
+               hw_priv->wsm_cmd.cmd = 0xFFFF;
+               spin_unlock(&hw_priv->wsm_cmd.lock);
+
+               if (WARN_ON((id & ~0x0400) != wsm_cmd)) {
+                       /* Note that any non-zero is a fatal retcode. */
+                       ret = -EINVAL;
+                       goto out;
+               }
+
+               switch (id) {
+               case 0x0409:
+                       /* Note that wsm_arg can be NULL in case of timeout in
+                        * wsm_cmd_send(). */
+                       if (likely(wsm_arg))
+                               ret = wsm_configuration_confirm(hw_priv,
+                                                               wsm_arg,
+                                                               &wsm_buf);
+                       break;
+               case 0x0405:
+                       if (likely(wsm_arg))
+                               ret = wsm_read_mib_confirm(hw_priv, wsm_arg,
+                                                               &wsm_buf);
+                       break;
+               case 0x0406:
+                       if (likely(wsm_arg))
+                               ret = wsm_write_mib_confirm(hw_priv, wsm_arg,
+                                                           &wsm_buf,
+                                                           interface_link_id);
+                       break;
+               case 0x040B:
+                       if (likely(wsm_arg))
+                               ret = wsm_join_confirm(hw_priv, wsm_arg, &wsm_buf);
+                       if (ret) 
+                               wsm_printk(XRADIO_DBG_WARN, "Join confirm Failed!\n");
+                       break;
+               case 0x040E: /* 11K measure*/
+                       if (likely(wsm_arg))
+                               ret = wsm_generic_confirm(hw_priv, wsm_arg, &wsm_buf);
+                       if (ret) 
+                               wsm_printk(XRADIO_DBG_ERROR, "[***HL***]11K Confirm Error\n");
+
+                       break;
+
+#ifdef MCAST_FWDING
+               case 0x0423: /* req buffer cfm*/
+                       if (likely(wsm_arg)){
+                               xradio_for_each_vif(hw_priv, priv, i) {
+                                       if (priv && (priv->join_status == XRADIO_JOIN_STATUS_AP))
+                                               ret = wsm_request_buffer_confirm(priv,
+                                                               wsm_arg, &wsm_buf);
+                               }
+                       }
+                       break;
+#endif
+               case 0x0407: /* start-scan */
+#ifdef ROAM_OFFLOAD
+                       if (hw_priv->auto_scanning) {
+                               if (atomic_read(&hw_priv->scan.in_progress)) {
+                                       hw_priv->auto_scanning = 0;
+                               }
+                               else {
+                                       wsm_oper_unlock(hw_priv);
+                                       up(&hw_priv->scan.lock);
+                               }
+                       }
+#endif /*ROAM_OFFLOAD*/
+               case 0x0408: /* stop-scan */
+               case 0x040A: /* wsm_reset */
+               case 0x040C: /* add_key */
+               case 0x040D: /* remove_key */
+               case 0x0410: /* wsm_set_pm */
+               case 0x0411: /* set_bss_params */
+               case 0x0412: /* set_tx_queue_params */
+               case 0x0413: /* set_edca_params */
+               case 0x0416: /* switch_channel */
+               case 0x0417: /* start */
+               case 0x0418: /* beacon_transmit */
+               case 0x0419: /* start_find */
+               case 0x041A: /* stop_find */
+               case 0x041B: /* update_ie */
+               case 0x041C: /* map_link */
+                       WARN_ON(wsm_arg != NULL);
+                       ret = wsm_generic_confirm(hw_priv, wsm_arg, &wsm_buf);
+                       if (ret)
+                               wsm_printk(XRADIO_DBG_ERROR, 
+                                       "wsm_generic_confirm "
+                                       "failed for request 0x%.4X.\n",
+                                       id & ~0x0400);
+                       break;
+               default:
+                       BUG_ON(1);
+               }
+
+               spin_lock(&hw_priv->wsm_cmd.lock);
+               hw_priv->wsm_cmd.ret = ret;
+               hw_priv->wsm_cmd.done = 1;
+               spin_unlock(&hw_priv->wsm_cmd.lock);
+               ret = 0; /* Error response from device should ne stop BH. */
+
+               wake_up(&hw_priv->wsm_cmd_wq);
+       } else if (id & 0x0800) {
+               switch (id) {
+               case 0x0801:
+                       ret = wsm_startup_indication(hw_priv, &wsm_buf);
+                       break;
+               case 0x0804:
+                       ret = wsm_receive_indication(hw_priv, interface_link_id,
+                                       &wsm_buf, skb_p);
+                       break;
+               case 0x0805:
+                       ret = wsm_event_indication(hw_priv, &wsm_buf,
+                                       interface_link_id);
+                       break;
+               case 0x0807:
+                   wsm_printk(XRADIO_DBG_ERROR, "[11K]wsm_measure_cmpl_indication\n");
+//                 wsm_printk(XRADIO_DBG_ERROR, "[11K]wsm->len = %d\n",wsm->len);
+                       
+                       ret = wsm_measure_cmpl_indication(hw_priv, &wsm_buf);
+                       break;
+               case 0x080A:
+                       ret = wsm_channel_switch_indication(hw_priv, &wsm_buf);
+                       break;
+               case 0x0809:
+                       ret = wsm_set_pm_indication(hw_priv, &wsm_buf);
+                       break;
+               case 0x0806:
+#ifdef ROAM_OFFLOAD
+                       if(hw_priv->auto_scanning && hw_priv->frame_rcvd) {
+                               struct xradio_vif *priv;
+                               hw_priv->frame_rcvd = 0;
+                               priv = xrwl_hwpriv_to_vifpriv(hw_priv, hw_priv->scan.if_id);
+                               if (unlikely(!priv)) {
+                                       WARN_ON(1);
+                                       return 0;
+                               }
+                                       spin_unlock(&priv->vif_lock);
+                               if (hw_priv->beacon) {
+                                       struct wsm_scan_complete *scan_cmpl = \
+                                               (struct wsm_scan_complete *) \
+                                               ((u8 *)wsm + sizeof(struct wsm_hdr));
+                                       struct ieee80211_rx_status *rhdr = \
+                                               IEEE80211_SKB_RXCB(hw_priv->beacon);
+                                       rhdr->signal = (s8)scan_cmpl->reserved;
+                                       if (!priv->cqm_use_rssi) {
+                                               rhdr->signal = rhdr->signal / 2 - 110;
+                                       }
+                                       if (!hw_priv->beacon_bkp)
+                                               hw_priv->beacon_bkp = \
+                                               skb_copy(hw_priv->beacon, GFP_ATOMIC);
+                                       ieee80211_rx_irqsafe(hw_priv->hw, hw_priv->beacon);
+                                       hw_priv->beacon = hw_priv->beacon_bkp;
+
+                                       hw_priv->beacon_bkp = NULL;
+                               }
+                               wsm_printk(XRADIO_DBG_MSG, \
+                               "Send Testmode Event.\n");
+                               xradio_testmode_event(priv->hw->wiphy,
+                                       NL80211_CMD_NEW_SCAN_RESULTS, 0,
+                                       0, GFP_KERNEL);
+
+                       }
+#endif /*ROAM_OFFLOAD*/
+                       ret = wsm_scan_complete_indication(hw_priv, &wsm_buf);
+                       break;
+               case 0x080B:
+                       ret = wsm_find_complete_indication(hw_priv, &wsm_buf);
+                       break;
+               case 0x080C:
+                       ret = wsm_suspend_resume_indication(hw_priv,
+                                       interface_link_id, &wsm_buf);
+                       break;
+               case 0x080E:
+                       wsm_printk(XRADIO_DBG_MSG,  "wsm_debug_indication");
+                       ret = wsm_debug_indication(hw_priv, &wsm_buf);
+                       break;
+
+               default:
+                       wsm_printk(XRADIO_DBG_ERROR,  "unknown Indmsg ID=0x%04x,len=%d\n", 
+                                  wsm->id, wsm->len);
+                       break;
+               }
+       } else {
+               WARN_ON(1);
+               ret = -EINVAL;
+       }
+out:
+       return ret;
+}
+
+static bool wsm_handle_tx_data(struct xradio_vif *priv,
+                              const struct wsm_tx *wsm,
+                              const struct ieee80211_tx_info *tx_info,
+                              struct xradio_txpriv *txpriv,
+                              struct xradio_queue *queue)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       bool handled = false;
+       const struct ieee80211_hdr *frame =
+               (struct ieee80211_hdr *) &((u8 *)wsm)[txpriv->offset];
+       __le16 fctl = frame->frame_control;
+       enum {
+               doProbe,
+               doDrop,
+               doJoin,
+               doOffchannel,
+               doWep,
+               doTx,
+       } action = doTx;
+
+       hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       frame =  (struct ieee80211_hdr *) &((u8 *)wsm)[txpriv->offset];
+       fctl  = frame->frame_control;
+
+       switch (priv->mode) {
+       case NL80211_IFTYPE_STATION:
+               if (unlikely(priv->bss_loss_status == XRADIO_BSS_LOSS_CHECKING && 
+                                priv->join_status     == XRADIO_JOIN_STATUS_STA) &&
+                                ieee80211_is_data(fctl)) {
+                       spin_lock(&priv->bss_loss_lock);
+                       priv->bss_loss_confirm_id = wsm->packetID;
+                       priv->bss_loss_status = XRADIO_BSS_LOSS_CONFIRMING;
+                       spin_unlock(&priv->bss_loss_lock);
+               } else if (unlikely((priv->join_status <= XRADIO_JOIN_STATUS_MONITOR) ||
+                          memcmp(frame->addr1, priv->join_bssid,sizeof(priv->join_bssid)))) {
+                       if (ieee80211_is_auth(fctl))
+                               action = doJoin;
+                       else if ((ieee80211_is_deauth(fctl) || ieee80211_is_disassoc(fctl))&&
+                                priv->join_status < XRADIO_JOIN_STATUS_MONITOR)
+                               action = doDrop;  //no need to send deauth when STA-unjoined, yangfh 2014-10-31 16:32:16.
+                       else if (ieee80211_is_probe_req(fctl))
+                               action = doTx;
+                       else if (memcmp(frame->addr1, priv->join_bssid,
+                                       sizeof(priv->join_bssid)) &&
+                                       (priv->join_status ==
+                                       XRADIO_JOIN_STATUS_STA) &&
+                                       (ieee80211_is_data(fctl))) {
+                               action = doDrop;
+                       }
+                       else if (priv->join_status >=
+                                       XRADIO_JOIN_STATUS_MONITOR)
+                               action = doTx;
+                       else if (get_interface_id_scanning(hw_priv) != -1) {
+                               wsm_printk(XRADIO_DBG_WARN, "Scan ONGOING dropping"
+                                          " offchannel eligible frame.\n");
+                               action = doDrop;
+                       } else {
+                               if (ieee80211_is_probe_resp(fctl))
+                                       action = doDrop;
+                               else
+                                       action = doOffchannel;
+                               wsm_printk(XRADIO_DBG_WARN, "Offchannel fctl=0x%04x", fctl);
+                       }
+               }
+               break;
+       case NL80211_IFTYPE_AP:
+               if (unlikely(!priv->join_status))
+                       action = doDrop;
+               else if (unlikely(!(BIT(txpriv->raw_link_id) &
+                               (BIT(0) | priv->link_id_map)))) {
+                       wsm_printk(XRADIO_DBG_WARN, 
+                                       "A frame with expired link id "
+                                       "is dropped.\n");
+                       action = doDrop;
+               }
+               if (xradio_queue_get_generation(wsm->packetID) >
+                               XRADIO_MAX_REQUEUE_ATTEMPTS) {
+                       /* HACK!!! WSM324 firmware has tendency to requeue
+                        * multicast frames in a loop, causing performance
+                        * drop and high power consumption of the driver.
+                        * In this situation it is better just to drop
+                        * the problematic frame. */
+                       wsm_printk(XRADIO_DBG_WARN, 
+                                       "Too many attempts "
+                                       "to requeue a frame. "
+                                       "Frame is dropped, fctl=0x%04x.\n", fctl);
+                       action = doDrop;
+               }
+               break;
+       case NL80211_IFTYPE_ADHOC:
+       case NL80211_IFTYPE_MESH_POINT:
+               //STUB();
+       case NL80211_IFTYPE_MONITOR:
+       default:
+               action = doDrop;
+               break;
+       }
+
+       if (action == doTx) {
+               if (unlikely(ieee80211_is_probe_req(fctl))) {
+                       action = doProbe;
+               } else if ((fctl & __cpu_to_le32(IEEE80211_FCTL_PROTECTED)) &&
+                       tx_info->control.hw_key &&
+                       unlikely(tx_info->control.hw_key->keyidx !=
+                                       priv->wep_default_key_id) &&
+                       (tx_info->control.hw_key->cipher ==
+                                       WLAN_CIPHER_SUITE_WEP40 ||
+                        tx_info->control.hw_key->cipher ==
+                                       WLAN_CIPHER_SUITE_WEP104)) {
+                       action = doWep;
+               }
+       }
+
+       switch (action) {
+       case doProbe:
+       {
+               /* An interesting FW "feature". Device filters
+                * probe responses.
+                * The easiest way to get it back is to convert
+                * probe request into WSM start_scan command. */
+               wsm_printk(XRADIO_DBG_MSG, \
+                       "Convert probe request to scan.\n");
+               wsm_lock_tx_async(hw_priv);
+               hw_priv->pending_frame_id = __le32_to_cpu(wsm->packetID);
+               queue_delayed_work(hw_priv->workqueue,
+                               &hw_priv->scan.probe_work, 0);
+               handled = true;
+       }
+       break;
+       case doDrop:
+       {
+               /* See detailed description of "join" below.
+                * We are dropping everything except AUTH in non-joined mode. */
+               wsm_printk(XRADIO_DBG_MSG, "Drop frame (0x%.4X).\n", fctl);
+               BUG_ON(xradio_queue_remove(queue,
+                       __le32_to_cpu(wsm->packetID)));
+               handled = true;
+       }
+       break;
+       case doJoin:
+       {
+               /* p2p should disconnect when sta try to join a different channel AP, 
+                * because no good performance in this case.
+                */
+               struct xradio_vif *p2p_tmp_vif = __xrwl_hwpriv_to_vifpriv(hw_priv, 1);
+               if (priv->if_id == 0 && p2p_tmp_vif) {
+                       if (p2p_tmp_vif->join_status >= XRADIO_JOIN_STATUS_STA && 
+                           hw_priv->channel_changed) {
+                               wsm_printk(XRADIO_DBG_WARN, "combo with different channels, p2p disconnect.\n");
+                               wms_send_disassoc_to_self(hw_priv, p2p_tmp_vif);
+                       }
+               }
+
+               /* There is one more interesting "feature"
+                * in FW: it can't do RX/TX before "join".
+                * "Join" here is not an association,
+                * but just a syncronization between AP and STA.
+                * priv->join_status is used only in bh thread and does
+                * not require protection */
+               wsm_printk(XRADIO_DBG_NIY, "Issue join command.\n");
+               wsm_lock_tx_async(hw_priv);
+               hw_priv->pending_frame_id = __le32_to_cpu(wsm->packetID);
+               if (queue_work(hw_priv->workqueue, &priv->join_work) <= 0)
+                       wsm_unlock_tx(hw_priv);
+               handled = true;
+       }
+       break;
+       case doOffchannel:
+       {
+               wsm_printk(XRADIO_DBG_MSG, "Offchannel TX request.\n");
+               wsm_lock_tx_async(hw_priv);
+               hw_priv->pending_frame_id = __le32_to_cpu(wsm->packetID);
+               if (queue_work(hw_priv->workqueue, &priv->offchannel_work) <= 0)
+                       wsm_unlock_tx(hw_priv);
+               handled = true;
+       }
+       break;
+       case doWep:
+       {
+               wsm_printk(XRADIO_DBG_MSG, "Issue set_default_wep_key.\n");
+               wsm_lock_tx_async(hw_priv);
+               priv->wep_default_key_id = tx_info->control.hw_key->keyidx;
+               hw_priv->pending_frame_id = __le32_to_cpu(wsm->packetID);
+               if (queue_work(hw_priv->workqueue, &priv->wep_key_work) <= 0)
+                       wsm_unlock_tx(hw_priv);
+               handled = true;
+       }
+       break;
+       case doTx:
+       {
+#if 0
+               /* Kept for history. If you want to implement wsm->more,
+                * make sure you are able to send a frame after that. */
+               wsm->more = (count > 1) ? 1 : 0;
+               if (wsm->more) {
+                       /* HACK!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+                        * It's undocumented in WSM spec, but XRADIO hangs
+                        * if 'more' is set and no TX is performed due to TX
+                        * buffers limitation. */
+                       if (priv->hw_bufs_used + 1 ==
+                                       priv->wsm_caps.numInpChBufs)
+                               wsm->more = 0;
+               }
+
+               /* BUG!!! FIXME: we can't use 'more' at all: we don't know
+                * future. It could be a request from upper layer with TX lock
+                * requirements (scan, for example). If "more" is set device
+                * will not send data and wsm_tx_lock() will fail...
+                * It's not obvious how to fix this deadlock. Any ideas?
+                * As a workaround more is set to 0. */
+               wsm->more = 0;
+#endif /* 0 */
+
+               if (ieee80211_is_deauth(fctl) &&
+                               priv->mode != NL80211_IFTYPE_AP) {
+                       /* Shedule unjoin work */
+                       wsm_printk(XRADIO_DBG_WARN, "Issue unjoin command(TX).\n");
+#if 0
+                       wsm->more = 0;
+#endif /* 0 */
+                       wsm_lock_tx_async(hw_priv);
+                       if (queue_work(hw_priv->workqueue, &priv->unjoin_work) <= 0)
+                               wsm_unlock_tx(hw_priv);
+               }
+       }
+       break;
+       }
+       return handled;
+}
+
+static int xradio_get_prio_queue(struct xradio_vif *priv,
+                                u32 link_id_map, int *total)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       static u32 urgent;
+       struct wsm_edca_queue_params *edca;
+       unsigned score, best = -1;
+       int winner = -1;
+       int queued;
+       int i;
+       urgent = BIT(priv->link_id_after_dtim) | BIT(priv->link_id_uapsd);
+
+       /* search for a winner using edca params */
+       for (i = 0; i < 4; ++i) {
+               queued = xradio_queue_get_num_queued(priv,
+                               &hw_priv->tx_queue[i],
+                               link_id_map);
+               if (!queued)
+                       continue;
+               *total += queued;
+               edca = &priv->edca.params[i];
+               score = ((edca->aifns + edca->cwMin) << 16) +
+                               (edca->cwMax - edca->cwMin) *
+                               (prandom_u32() & 0xFFFF);
+               if (score < best && (winner < 0 || i != 3)) {
+                       best = score;
+                       winner = i;
+               }
+       }
+
+       /* override winner if bursting */
+       if (winner >= 0 && hw_priv->tx_burst_idx >= 0 &&
+                       winner != hw_priv->tx_burst_idx &&
+                       !xradio_queue_get_num_queued(priv,
+                               &hw_priv->tx_queue[winner],
+                               link_id_map & urgent) &&
+                       xradio_queue_get_num_queued(priv,
+                               &hw_priv->tx_queue[hw_priv->tx_burst_idx],
+                               link_id_map))
+               winner = hw_priv->tx_burst_idx;
+
+       return winner;
+}
+
+static int wsm_get_tx_queue_and_mask(struct xradio_vif *priv,
+                                    struct xradio_queue **queue_p,
+                                    u32 *tx_allowed_mask_p,
+                                    bool *more)
+{
+       struct xradio_common *hw_priv = xrwl_vifpriv_to_hwpriv(priv);
+       int idx;
+       u32 tx_allowed_mask;
+       int total = 0;
+
+       /* Search for a queue with multicast frames buffered */
+       if (priv->tx_multicast) {
+               tx_allowed_mask = BIT(priv->link_id_after_dtim);
+               idx = xradio_get_prio_queue(priv,
+                               tx_allowed_mask, &total);
+               if (idx >= 0) {
+                       *more = total > 1;
+                       goto found;
+               }
+       }
+
+       /* Search for unicast traffic */
+       tx_allowed_mask = ~priv->sta_asleep_mask;
+       tx_allowed_mask |= BIT(priv->link_id_uapsd);
+       if (priv->sta_asleep_mask) {
+               tx_allowed_mask |= priv->pspoll_mask;
+               tx_allowed_mask &= ~BIT(priv->link_id_after_dtim);
+       } else {
+               tx_allowed_mask |= BIT(priv->link_id_after_dtim);
+       }
+       idx = xradio_get_prio_queue(priv,
+                       tx_allowed_mask, &total);
+       if (idx < 0)
+               return -ENOENT;
+
+found:
+       *queue_p = &hw_priv->tx_queue[idx];
+       *tx_allowed_mask_p = tx_allowed_mask;
+       return 0;
+}
+
+int wsm_get_tx(struct xradio_common *hw_priv, u8 **data,
+              size_t *tx_len, int *burst, int *vif_selected)
+{
+       struct wsm_tx *wsm = NULL;
+       struct ieee80211_tx_info *tx_info;
+       struct xradio_queue *queue = NULL;
+       int queue_num;
+       u32 tx_allowed_mask = 0;
+       struct xradio_txpriv *txpriv = NULL;
+       /*
+        * Count was intended as an input for wsm->more flag.
+        * During implementation it was found that wsm->more
+        * is not usable, see details above. It is kept just
+        * in case you would like to try to implement it again.
+        */
+       int count = 0;
+       int if_pending = 1;
+
+       /* More is used only for broadcasts. */
+       bool more = false;
+
+       if (hw_priv->wsm_cmd.ptr) {
+               ++count;
+               spin_lock(&hw_priv->wsm_cmd.lock);
+               BUG_ON(!hw_priv->wsm_cmd.ptr);
+               *data = hw_priv->wsm_cmd.ptr;
+               *tx_len = hw_priv->wsm_cmd.len;
+               *burst = 1;
+               *vif_selected = -1;
+               spin_unlock(&hw_priv->wsm_cmd.lock);
+       } else {
+               for (;;) {
+                       int ret;
+                       struct xradio_vif *priv;
+#if 0
+                       int num_pending_vif0, num_pending_vif1;
+#endif
+                       if (atomic_add_return(0, &hw_priv->tx_lock))
+                               break;
+                       /* Keep one buffer reserved for commands. Note
+                          that, hw_bufs_used has already been incremented
+                          before reaching here. */
+                       if (hw_priv->hw_bufs_used >=
+                                       hw_priv->wsm_caps.numInpChBufs)
+                               break;
+                       priv = wsm_get_interface_for_tx(hw_priv);
+                       /* go to next interface ID to select next packet */
+                               hw_priv->if_id_selected ^= 1;
+
+                       /* There might be no interface before add_interface
+                        * call */
+                       if (!priv) {
+                               if (if_pending) {
+                                       if_pending = 0;
+                                       continue;
+                               }
+                               break;
+                       }
+
+#if 0
+                       if (((priv->if_id == 0) &&
+                       (hw_priv->hw_bufs_used_vif[0] >=
+                                               XRWL_FW_VIF0_THROTTLE)) ||
+                       ((priv->if_id == 1) &&
+                       (hw_priv->hw_bufs_used_vif[1] >=
+                                               XRWL_FW_VIF1_THROTTLE))) {
+                               spin_unlock(&priv->vif_lock);
+                               if (if_pending) {
+                                       if_pending = 0;
+                                       continue;
+                               }
+                               break;
+                       }
+#endif
+
+                       /* This can be removed probably: xradio_vif will not
+                        * be in hw_priv->vif_list (as returned from
+                        * wsm_get_interface_for_tx) until it's fully
+                        * enabled, so statement above will take case of that*/
+                       if (!atomic_read(&priv->enabled)) {
+                               spin_unlock(&priv->vif_lock);
+                               break;
+                       }
+
+                       /* TODO:COMBO: Find the next interface for which
+                       * packet needs to be found */
+                       spin_lock_bh(&priv->ps_state_lock);
+                       ret = wsm_get_tx_queue_and_mask(priv, &queue,
+                                       &tx_allowed_mask, &more);
+                       queue_num = queue - hw_priv->tx_queue;
+
+                       if (priv->buffered_multicasts &&
+                                       (ret || !more) &&
+                                       (priv->tx_multicast ||
+                                        !priv->sta_asleep_mask)) {
+                               priv->buffered_multicasts = false;
+                               if (priv->tx_multicast) {
+                                       priv->tx_multicast = false;
+                                       queue_work(hw_priv->workqueue,
+                                               &priv->multicast_stop_work);
+                               }
+                       }
+
+                       spin_unlock_bh(&priv->ps_state_lock);
+
+                       if (ret) {
+                               spin_unlock(&priv->vif_lock);
+                               if (if_pending == 1) {
+                                       if_pending = 0;
+                                       continue;
+                               }
+                               break;
+                       }
+
+                       if (xradio_queue_get(queue,
+                                       priv->if_id,
+                                       tx_allowed_mask,
+                                       &wsm, &tx_info, &txpriv)) {
+                               spin_unlock(&priv->vif_lock);
+                               if_pending = 0;
+                               continue;
+                       }
+
+#ifdef ROC_DEBUG
+                       {
+                               struct ieee80211_hdr *hdr =
+                               (struct ieee80211_hdr *)
+                                       &((u8 *)wsm)[txpriv->offset];
+
+                               wsm_printk(XRADIO_DBG_ERROR, "QGET-1 %x, off_id %d,"
+                                              " if_id %d\n",
+                                               hdr->frame_control,
+                                               txpriv->offchannel_if_id,
+                                               priv->if_id);
+                       }
+#else
+                       {
+                               struct ieee80211_hdr *hdr =
+                               (struct ieee80211_hdr *)
+                                       &((u8 *)wsm)[txpriv->offset];
+
+                               wsm_printk(XRADIO_DBG_ERROR, "QGET-1 %x, off_id %d,"
+                                                  " if_id %d\n",
+                                               hdr->frame_control,
+                                               txpriv->raw_if_id,
+                                               priv->if_id);
+                       }
+#endif
+
+                       if (wsm_handle_tx_data(priv, wsm,
+                                       tx_info, txpriv, queue)) {
+                               spin_unlock(&priv->vif_lock);
+                               if_pending = 0;
+                               continue;  /* Handled by WSM */
+                       }
+
+                       wsm->hdr.id &= __cpu_to_le16(
+                                       ~WSM_TX_IF_ID(WSM_TX_IF_ID_MAX));
+                       if (txpriv->offchannel_if_id)
+                               wsm->hdr.id |= cpu_to_le16(
+                                       WSM_TX_IF_ID(txpriv->offchannel_if_id));
+                       else
+                               wsm->hdr.id |= cpu_to_le16(
+                                       WSM_TX_IF_ID(priv->if_id));
+
+                       *vif_selected = priv->if_id;
+#ifdef ROC_DEBUG
+/* remand the roc debug. */
+                       {
+                               struct ieee80211_hdr *hdr =
+                               (struct ieee80211_hdr *)
+                                       &((u8 *)wsm)[txpriv->offset];
+
+                               wsm_printk(XRADIO_DBG_ERROR, "QGET-2 %x, off_id %d,"
+                                              " if_id %d\n",
+                                               hdr->frame_control,
+                                               txpriv->offchannel_if_id,
+                                               priv->if_id);
+                       }
+#else
+                       {
+                               struct ieee80211_hdr *hdr =
+                               (struct ieee80211_hdr *)
+                                       &((u8 *)wsm)[txpriv->offset];
+
+                               wsm_printk(XRADIO_DBG_ERROR, "QGET-2 %x, off_id %d,"
+                                                  " if_id %d\n",
+                                               hdr->frame_control,
+                                               txpriv->raw_if_id,
+                                               priv->if_id);
+                       }
+#endif
+
+                       priv->pspoll_mask &= ~BIT(txpriv->raw_link_id);
+
+                       *data = (u8 *)wsm;
+                       *tx_len = __le16_to_cpu(wsm->hdr.len);
+
+                       /* allow bursting if txop is set */
+                       if (priv->edca.params[queue_num].txOpLimit)
+                               *burst = min(*burst,
+                                       (int)xradio_queue_get_num_queued(priv,
+                                               queue, tx_allowed_mask) + 1);
+                       else
+                               *burst = 1;
+
+                       /* store index of bursting queue */
+                       if (*burst > 1)
+                               hw_priv->tx_burst_idx = queue_num;
+                       else
+                               hw_priv->tx_burst_idx = -1;
+
+                       if (more) {
+                               struct ieee80211_hdr *hdr =
+                                       (struct ieee80211_hdr *)
+                                       &((u8 *)wsm)[txpriv->offset];
+                               if(strstr(&priv->ssid[0], "6.1.12")) {
+                                       if(hdr->addr1[0] & 0x01 ) {
+                                               hdr->frame_control |=
+                                               cpu_to_le16(IEEE80211_FCTL_MOREDATA);
+                                       }
+                               }
+                               else {
+                                       /* more buffered multicast/broadcast frames
+                                       *  ==> set MoreData flag in IEEE 802.11 header
+                                       *  to inform PS STAs */
+                                       hdr->frame_control |=
+                                       cpu_to_le16(IEEE80211_FCTL_MOREDATA);
+                               }
+                       }
+                       wsm_printk(XRADIO_DBG_MSG, ">>> 0x%.4X (%d) %p %c\n",
+                               0x0004, *tx_len, *data,
+                               wsm->more ? 'M' : ' ');
+                       ++count;
+                       spin_unlock(&priv->vif_lock);
+                       break;
+               }
+       }
+
+       return count;
+}
+
+void wsm_txed(struct xradio_common *hw_priv, u8 *data)
+{
+       if (data == hw_priv->wsm_cmd.ptr) {
+               spin_lock(&hw_priv->wsm_cmd.lock);
+               hw_priv->wsm_cmd.ptr = NULL;
+               spin_unlock(&hw_priv->wsm_cmd.lock);
+       }
+}
+
+/* ******************************************************************** */
+/* WSM buffer                                                          */
+
+void wsm_buf_init(struct wsm_buf *buf)
+{
+       int size = (SDIO_BLOCK_SIZE<<1); //for sdd file big than SDIO_BLOCK_SIZE
+       BUG_ON(buf->begin);
+       buf->begin = kmalloc(size, GFP_KERNEL);
+       buf->end = buf->begin ? &buf->begin[size] : buf->begin;
+       wsm_buf_reset(buf);
+}
+
+void wsm_buf_deinit(struct wsm_buf *buf)
+{
+       if(buf->begin)
+               kfree(buf->begin);
+       buf->begin = buf->data = buf->end = NULL;
+}
+
+static void wsm_buf_reset(struct wsm_buf *buf)
+{
+       if (buf->begin) {
+               buf->data = &buf->begin[4];
+               *(u32 *)buf->begin = 0;
+       } else
+               buf->data = buf->begin;
+}
+
+static int wsm_buf_reserve(struct wsm_buf *buf, size_t extra_size)
+{
+       size_t pos = buf->data - buf->begin;
+       size_t size = pos + extra_size;
+
+
+       if (size & (SDIO_BLOCK_SIZE - 1)) {
+               size &= SDIO_BLOCK_SIZE;
+               size += SDIO_BLOCK_SIZE;
+       }
+
+       buf->begin = krealloc(buf->begin, size, GFP_KERNEL);
+       if (buf->begin) {
+               buf->data = &buf->begin[pos];
+               buf->end = &buf->begin[size];
+               return 0;
+       } else {
+               buf->end = buf->data = buf->begin;
+               return -ENOMEM;
+       }
+}
+
+static struct xradio_vif 
+       *wsm_get_interface_for_tx(struct xradio_common *hw_priv)
+{
+       struct xradio_vif *priv = NULL, *i_priv;
+       int i = hw_priv->if_id_selected;
+
+       if ( 1 /*TODO:COMBO*/) {
+               spin_lock(&hw_priv->vif_list_lock);
+               i_priv = hw_priv->vif_list[i] ? 
+                        xrwl_get_vif_from_ieee80211(hw_priv->vif_list[i]) : NULL;
+               if (i_priv) {
+                       priv = i_priv;
+                       spin_lock(&priv->vif_lock);
+               }
+               /* TODO:COMBO:
+               * Find next interface based on TX bitmap announced by the FW
+               * Find next interface based on load balancing */
+               spin_unlock(&hw_priv->vif_list_lock);
+       } else {
+               priv = xrwl_hwpriv_to_vifpriv(hw_priv, 0);
+       }
+
+       return priv;
+}
+
+static inline int get_interface_id_scanning(struct xradio_common *hw_priv)
+{
+       if (hw_priv->scan.req || hw_priv->scan.direct_probe)
+               return hw_priv->scan.if_id;
+       else
+               return -1;
+}
diff --git a/drivers/net/wireless/xradio/wsm.h b/drivers/net/wireless/xradio/wsm.h
new file mode 100644 (file)
index 0000000..8056abc
--- /dev/null
@@ -0,0 +1,2354 @@
+/*
+ * wsm interfaces for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#ifndef XRADIO_WSM_H_INCLUDED
+#define XRADIO_WSM_H_INCLUDED
+
+#include <linux/spinlock.h>
+
+struct xradio_common;
+
+/* Bands */
+/* Radio band 2.412 -2.484 GHz. */
+#define WSM_PHY_BAND_2_4G              (0)
+
+/* Radio band 4.9375-5.8250 GHz. */
+#define WSM_PHY_BAND_5G                        (1)
+
+/* Transmit rates */
+/* 1   Mbps            ERP-DSSS */
+#define WSM_TRANSMIT_RATE_1            (0)
+
+/* 2   Mbps            ERP-DSSS */
+#define WSM_TRANSMIT_RATE_2            (1)
+
+/* 5.5 Mbps            ERP-CCK, ERP-PBCC (Not supported) */
+/* #define WSM_TRANSMIT_RATE_5         (2) */
+
+/* 11  Mbps            ERP-CCK, ERP-PBCC (Not supported) */
+/* #define WSM_TRANSMIT_RATE_11                (3) */
+
+/* 22  Mbps            ERP-PBCC (Not supported) */
+/* #define WSM_TRANSMIT_RATE_22                (4) */
+
+/* 33  Mbps            ERP-PBCC (Not supported) */
+/* #define WSM_TRANSMIT_RATE_33                (5) */
+
+/* 6   Mbps   (3 Mbps) ERP-OFDM, BPSK coding rate 1/2 */
+#define WSM_TRANSMIT_RATE_6            (6)
+
+/* 9   Mbps (4.5 Mbps) ERP-OFDM, BPSK coding rate 3/4 */
+#define WSM_TRANSMIT_RATE_9            (7)
+
+/* 12  Mbps  (6 Mbps)  ERP-OFDM, QPSK coding rate 1/2 */
+#define WSM_TRANSMIT_RATE_12           (8)
+
+/* 18  Mbps  (9 Mbps)  ERP-OFDM, QPSK coding rate 3/4 */
+#define WSM_TRANSMIT_RATE_18           (9)
+
+/* 24  Mbps (12 Mbps)  ERP-OFDM, 16QAM coding rate 1/2 */
+#define WSM_TRANSMIT_RATE_24           (10)
+
+/* 36  Mbps (18 Mbps)  ERP-OFDM, 16QAM coding rate 3/4 */
+#define WSM_TRANSMIT_RATE_36           (11)
+
+/* 48  Mbps (24 Mbps)  ERP-OFDM, 64QAM coding rate 1/2 */
+#define WSM_TRANSMIT_RATE_48           (12)
+
+/* 54  Mbps (27 Mbps)  ERP-OFDM, 64QAM coding rate 3/4 */
+#define WSM_TRANSMIT_RATE_54           (13)
+
+/* 6.5 Mbps            HT-OFDM, BPSK coding rate 1/2 */
+#define WSM_TRANSMIT_RATE_HT_6         (14)
+
+/* 13  Mbps            HT-OFDM, QPSK coding rate 1/2 */
+#define WSM_TRANSMIT_RATE_HT_13                (15)
+
+/* 19.5 Mbps           HT-OFDM, QPSK coding rate 3/4 */
+#define WSM_TRANSMIT_RATE_HT_19                (16)
+
+/* 26  Mbps            HT-OFDM, 16QAM coding rate 1/2 */
+#define WSM_TRANSMIT_RATE_HT_26                (17)
+
+/* 39  Mbps            HT-OFDM, 16QAM coding rate 3/4 */
+#define WSM_TRANSMIT_RATE_HT_39                (18)
+
+/* 52  Mbps            HT-OFDM, 64QAM coding rate 2/3 */
+#define WSM_TRANSMIT_RATE_HT_52                (19)
+
+/* 58.5 Mbps           HT-OFDM, 64QAM coding rate 3/4 */
+#define WSM_TRANSMIT_RATE_HT_58                (20)
+
+/* 65  Mbps            HT-OFDM, 64QAM coding rate 5/6 */
+#define WSM_TRANSMIT_RATE_HT_65                (21)
+
+/* Scan types */
+/* Foreground scan */
+#define WSM_SCAN_TYPE_FOREGROUND       (0)
+
+/* Background scan */
+#define WSM_SCAN_TYPE_BACKGROUND       (1)
+
+/* Auto scan */
+#define WSM_SCAN_TYPE_AUTO             (2)
+
+/* Scan flags */
+/* Forced background scan means if the station cannot */
+/* enter the power-save mode, it shall force to perform a */
+/* background scan. Only valid when ScanType is */
+/* background scan. */
+#define WSM_SCAN_FLAG_FORCE_BACKGROUND (BIT(0))
+
+/* The WLAN device scans one channel at a time so */
+/* that disturbance to the data traffic is minimized. */
+#define WSM_SCAN_FLAG_SPLIT_METHOD     (BIT(1))
+
+/* Preamble Type. Long if not set. */
+#define WSM_SCAN_FLAG_SHORT_PREAMBLE   (BIT(2))
+
+/* 11n Tx Mode. Mixed if not set. */
+#define WSM_SCAN_FLAG_11N_GREENFIELD   (BIT(3))
+
+#define WSM_FLAG_MAC_INSTANCE_1        (BIT(4))
+
+#define WSM_FLAG_MAC_INSTANCE_0        (~(BIT(4)))
+
+/* Scan constraints */
+/* Maximum number of channels to be scanned. */
+#define WSM_SCAN_MAX_NUM_OF_CHANNELS   (48)
+
+/* The maximum number of SSIDs that the device can scan for. */
+#define WSM_SCAN_MAX_NUM_OF_SSIDS      (2)
+
+/* Power management modes */
+/* 802.11 Active mode */
+#define WSM_PSM_ACTIVE                 (0)
+
+/* 802.11 PS mode */
+#define WSM_PSM_PS                     BIT(0)
+
+/* Fast Power Save bit */
+#define WSM_PSM_FAST_PS_FLAG           BIT(7)
+
+/* Dynamic aka Fast power save */
+#define WSM_PSM_FAST_PS                        (BIT(0) | BIT(7))
+
+/* Undetermined */
+/* Note : Undetermined status is reported when the */
+/* NULL data frame used to advertise the PM mode to */
+/* the AP at Pre or Post Background Scan is not Acknowledged */
+#define WSM_PSM_UNKNOWN                        BIT(1)
+
+/* Queue IDs */
+/* best effort/legacy */
+#define WSM_QUEUE_BEST_EFFORT          (0)
+
+/* background */
+#define WSM_QUEUE_BACKGROUND           (1)
+
+/* video */
+#define WSM_QUEUE_VIDEO                        (2)
+
+/* voice */
+#define WSM_QUEUE_VOICE                        (3)
+
+/* HT TX parameters */
+/* Non-HT */
+#define WSM_HT_TX_NON_HT               (0)
+
+/* Mixed format */
+#define WSM_HT_TX_MIXED                        (1)
+
+/* Greenfield format */
+#define WSM_HT_TX_GREENFIELD           (2)
+
+/* STBC allowed */
+#define WSM_HT_TX_STBC                 (BIT(7))
+
+/* EPTA prioirty flags for BT Coex */
+/* default epta priority */
+#define WSM_EPTA_PRIORITY_DEFAULT      4
+/* use for normal data */
+#define WSM_EPTA_PRIORITY_DATA         4
+/* use for connect/disconnect/roaming*/
+#define WSM_EPTA_PRIORITY_MGT          5
+/* use for action frames */
+#define WSM_EPTA_PRIORITY_ACTION       5
+/* use for AC_VI data */
+#define WSM_EPTA_PRIORITY_VIDEO                5
+/* use for AC_VO data */
+#define WSM_EPTA_PRIORITY_VOICE                6
+/* use for EAPOL exchange */
+#define WSM_EPTA_PRIORITY_EAPOL                7
+
+/* TX status */
+/* Frame was sent aggregated */
+/* Only valid for WSM_SUCCESS status. */
+#define WSM_TX_STATUS_AGGREGATION      (BIT(0))
+
+/* Host should requeue this frame later. */
+/* Valid only when status is WSM_REQUEUE. */
+#define WSM_TX_STATUS_REQUEUE          (BIT(1))
+
+/* Normal Ack */
+#define WSM_TX_STATUS_NORMAL_ACK       (0<<2)
+
+/* No Ack */
+#define WSM_TX_STATUS_NO_ACK           (1<<2)
+
+/* No explicit acknowledgement */
+#define WSM_TX_STATUS_NO_EXPLICIT_ACK  (2<<2)
+
+/* Block Ack */
+/* Only valid for WSM_SUCCESS status. */
+#define WSM_TX_STATUS_BLOCK_ACK                (3<<2)
+
+/* RX status */
+/* Unencrypted */
+#define WSM_RX_STATUS_UNENCRYPTED      (0<<0)
+
+/* WEP */
+#define WSM_RX_STATUS_WEP              (1<<0)
+
+/* TKIP */
+#define WSM_RX_STATUS_TKIP             (2<<0)
+
+/* AES */
+#define WSM_RX_STATUS_AES              (3<<0)
+
+/* WAPI */
+#define WSM_RX_STATUS_WAPI             (4<<0)
+
+/* Macro to fetch encryption subfield. */
+#define WSM_RX_STATUS_ENCRYPTION(status) ((status) & 0x07)
+
+/* Frame was part of an aggregation */
+#define WSM_RX_STATUS_AGGREGATE                (BIT(3))
+
+/* Frame was first in the aggregation */
+#define WSM_RX_STATUS_AGGREGATE_FIRST  (BIT(4))
+
+/* Frame was last in the aggregation */
+#define WSM_RX_STATUS_AGGREGATE_LAST   (BIT(5))
+
+/* Indicates a defragmented frame */
+#define WSM_RX_STATUS_DEFRAGMENTED     (BIT(6))
+
+/* Indicates a Beacon frame */
+#define WSM_RX_STATUS_BEACON           (BIT(7))
+
+/* Indicates STA bit beacon TIM field */
+#define WSM_RX_STATUS_TIM              (BIT(8))
+
+/* Indicates Beacon frame's virtual bitmap contains multicast bit */
+#define WSM_RX_STATUS_MULTICAST                (BIT(9))
+
+/* Indicates frame contains a matching SSID */
+#define WSM_RX_STATUS_MATCHING_SSID    (BIT(10))
+
+/* Indicates frame contains a matching BSSI */
+#define WSM_RX_STATUS_MATCHING_BSSI    (BIT(11))
+
+/* Indicates More bit set in Framectl field */
+#define WSM_RX_STATUS_MORE_DATA                (BIT(12))
+
+/* Indicates frame received during a measurement process */
+#define WSM_RX_STATUS_MEASUREMENT      (BIT(13))
+
+/* Indicates frame received as an HT packet */
+#define WSM_RX_STATUS_HT               (BIT(14))
+
+/* Indicates frame received with STBC */
+#define WSM_RX_STATUS_STBC             (BIT(15))
+
+/* Indicates Address 1 field matches dot11StationId */
+#define WSM_RX_STATUS_ADDRESS1         (BIT(16))
+
+/* Indicates Group address present in the Address 1 field */
+#define WSM_RX_STATUS_GROUP            (BIT(17))
+
+/* Indicates Broadcast address present in the Address 1 field */
+#define WSM_RX_STATUS_BROADCAST                (BIT(18))
+
+/* Indicates group key used with encrypted frames */
+#define WSM_RX_STATUS_GROUP_KEY                (BIT(19))
+
+/* Macro to fetch encryption key index. */
+#define WSM_RX_STATUS_KEY_IDX(status)  (((status >> 20)) & 0x0F)
+
+/* Frame Control field starts at Frame offset + 2 */
+#define WSM_TX_2BYTES_SHIFT            (BIT(7))
+
+/* Join mode */
+/* IBSS */
+#define WSM_JOIN_MODE_IBSS             (0)
+
+/* BSS */
+#define WSM_JOIN_MODE_BSS              (1)
+
+/* PLCP preamble type */
+/* For long preamble */
+#define WSM_JOIN_PREAMBLE_LONG         (0)
+
+/* For short preamble (Long for 1Mbps) */
+#define WSM_JOIN_PREAMBLE_SHORT                (1)
+
+/* For short preamble (Long for 1 and 2Mbps) */
+#define WSM_JOIN_PREAMBLE_SHORT_2      (2)
+
+/* Join flags */
+/* Unsynchronized */
+#define WSM_JOIN_FLAGS_UNSYNCRONIZED   BIT(0)
+/* The BSS owner is a P2P GO */
+#define WSM_JOIN_FLAGS_P2P_GO          BIT(1)
+/* Force to join BSS with the BSSID and the
+ * SSID specified without waiting for beacons. The
+ * ProbeForJoin parameter is ignored. */
+#define WSM_JOIN_FLAGS_FORCE           BIT(2)
+/* Give probe request/response higher
+ * priority over the BT traffic */
+#define WSM_JOIN_FLAGS_PRIO            BIT(3)
+
+/* Key types */
+#define WSM_KEY_TYPE_WEP_DEFAULT       (0)
+#define WSM_KEY_TYPE_WEP_PAIRWISE      (1)
+#define WSM_KEY_TYPE_TKIP_GROUP                (2)
+#define WSM_KEY_TYPE_TKIP_PAIRWISE     (3)
+#define WSM_KEY_TYPE_AES_GROUP         (4)
+#define WSM_KEY_TYPE_AES_PAIRWISE      (5)
+#define WSM_KEY_TYPE_WAPI_GROUP                (6)
+#define WSM_KEY_TYPE_WAPI_PAIRWISE     (7)
+
+/* Key indexes */
+#define WSM_KEY_MAX_INDEX              (10)
+
+/* ACK policy */
+#define WSM_ACK_POLICY_NORMAL          (0)
+#define WSM_ACK_POLICY_NO_ACK          (1)
+
+/* Start modes */
+#define WSM_START_MODE_AP              (0)     /* Mini AP */
+#define WSM_START_MODE_P2P_GO          (1)     /* P2P GO */
+#define WSM_START_MODE_P2P_DEV         (2)     /* P2P device */
+
+/* SetAssociationMode MIB flags */
+#define WSM_ASSOCIATION_MODE_USE_PREAMBLE_TYPE         (BIT(0))
+#define WSM_ASSOCIATION_MODE_USE_HT_MODE               (BIT(1))
+#define WSM_ASSOCIATION_MODE_USE_BASIC_RATE_SET                (BIT(2))
+#define WSM_ASSOCIATION_MODE_USE_MPDU_START_SPACING    (BIT(3))
+#define WSM_ASSOCIATION_MODE_SNOOP_ASSOC_FRAMES                (BIT(4))
+
+/* RcpiRssiThreshold MIB flags */
+#define WSM_RCPI_RSSI_THRESHOLD_ENABLE (BIT(0))
+#define WSM_RCPI_RSSI_USE_RSSI         (BIT(1))
+#define WSM_RCPI_RSSI_DONT_USE_UPPER   (BIT(2))
+#define WSM_RCPI_RSSI_DONT_USE_LOWER   (BIT(3))
+
+/* Update-ie constants */
+#define WSM_UPDATE_IE_BEACON           (BIT(0))
+#define WSM_UPDATE_IE_PROBE_RESP       (BIT(1))
+#define WSM_UPDATE_IE_PROBE_REQ                (BIT(2))
+
+/* WSM events */
+/* Error */
+#define WSM_EVENT_ERROR                        (0)
+
+/* BSS lost */
+#define WSM_EVENT_BSS_LOST             (1)
+
+/* BSS regained */
+#define WSM_EVENT_BSS_REGAINED         (2)
+
+/* Radar detected */
+#define WSM_EVENT_RADAR_DETECTED       (3)
+
+/* RCPI or RSSI threshold triggered */
+#define WSM_EVENT_RCPI_RSSI            (4)
+
+/* BT inactive */
+#define WSM_EVENT_BT_INACTIVE          (5)
+
+/* BT active */
+#define WSM_EVENT_BT_ACTIVE            (6)
+
+#define WSM_EVENT_PS_MODE_ERROR         (7)
+
+#define WSM_EVENT_INACTIVITY           (9)
+
+/* MAC Addr Filter */
+#define WSM_MIB_ID_MAC_ADDR_FILTER     0x1030
+
+/* MIB IDs */
+/* 4.1  dot11StationId */
+#define WSM_MIB_ID_DOT11_STATION_ID            0x0000
+
+/* 4.2  dot11MaxtransmitMsduLifeTime */
+#define WSM_MIB_ID_DOT11_MAX_TRANSMIT_LIFTIME  0x0001
+
+/* 4.3  dot11MaxReceiveLifeTime */
+#define WSM_MIB_ID_DOT11_MAX_RECEIVE_LIFETIME  0x0002
+
+/* 4.4  dot11SlotTime */
+#define WSM_MIB_ID_DOT11_SLOT_TIME             0x0003
+
+/* 4.5  dot11GroupAddressesTable */
+#define WSM_MIB_ID_DOT11_GROUP_ADDRESSES_TABLE 0x0004
+#define WSM_MAX_GRP_ADDRTABLE_ENTRIES          8
+
+/* 4.6  dot11WepDefaultKeyId */
+#define WSM_MIB_ID_DOT11_WEP_DEFAULT_KEY_ID    0x0005
+
+/* 4.7  dot11CurrentTxPowerLevel */
+#define WSM_MIB_ID_DOT11_CURRENT_TX_POWER_LEVEL        0x0006
+
+/* 4.8  dot11RTSThreshold */
+#define WSM_MIB_ID_DOT11_RTS_THRESHOLD         0x0007
+
+/* Huanglu add for firmware debug control */
+#define WSM_MIB_ID_FW_DEBUG_CONTROL            0x0008
+
+/* yangfh add for read/write registers from firmware*/
+#define WSM_MIB_ID_RW_FW_REG           0x0009
+
+/* yangfh add for Set max number of mpdus in a-mpdu*/
+#define WSM_MIB_ID_SET_AMPDU_NUM               0x000a
+
+/* Huanglu add for tx-ampdu-len-adaption */
+#define WSM_MIB_ID_SET_TALA_PARA               0x000b
+
+/* yangfh add for set TPA param */
+#define WSM_MIB_ID_SET_TPA_PARAM               0x000c
+
+/* 4.9  NonErpProtection */
+#define WSM_MIB_ID_NON_ERP_PROTECTION          0x1000
+
+/* 4.10 ArpIpAddressesTable */
+#define WSM_MIB_ID_ARP_IP_ADDRESSES_TABLE      0x1001
+#define WSM_MAX_ARP_IP_ADDRTABLE_ENTRIES       1
+
+/* 4.11 TemplateFrame */
+#define WSM_MIB_ID_TEMPLATE_FRAME              0x1002
+
+/* 4.12 RxFilter */
+#define WSM_MIB_ID_RX_FILTER                   0x1003
+
+/* 4.13 BeaconFilterTable */
+#define WSM_MIB_ID_BEACON_FILTER_TABLE         0x1004
+
+/* 4.14 BeaconFilterEnable */
+#define WSM_MIB_ID_BEACON_FILTER_ENABLE                0x1005
+
+/* 4.15 OperationalPowerMode */
+#define WSM_MIB_ID_OPERATIONAL_POWER_MODE      0x1006
+
+/* 4.16 BeaconWakeUpPeriod */
+#define WSM_MIB_ID_BEACON_WAKEUP_PERIOD                0x1007
+
+/* 4.17 RcpiRssiThreshold */
+#define WSM_MIB_ID_RCPI_RSSI_THRESHOLD         0x1009
+
+/* 4.18 StatisticsTable */
+#define WSM_MIB_ID_STATISTICS_TABLE            0x100A
+
+/* 4.19 IbssPsConfig */
+#define WSM_MIB_ID_IBSS_PS_CONFIG              0x100B
+
+/* 4.20 CountersTable */
+#define WSM_MIB_ID_COUNTERS_TABLE              0x100C
+#define WSM_MIB_ID_AMPDUCOUNTERS_TABLE         0x1036
+#define WSM_MIB_ID_TXPIPE_TABLE                0x1037
+#define WSM_MIB_ID_BACKOFF_DBG         0x1038
+#define WSM_MIB_ID_BACKOFF_CTRL                0x1039
+
+//add yangfh for requery packet status
+#define WSM_MIB_ID_REQ_PKT_STATUS      0x1040
+
+//add yangfh for TPA debug informations
+#define WSM_MIB_ID_TPA_DEBUG_INFO      0x1041
+
+//add yangfh for tx power informations
+#define WSM_MIB_ID_TX_POWER_INFO       0x1042
+
+//add yangfh for some hardware information
+#define WSM_MIB_ID_HW_INFO             0x1043
+
+/* 4.21 BlockAckPolicy */
+#define WSM_MIB_ID_BLOCK_ACK_POLICY            0x100E
+
+/* 4.22 OverrideInternalTxRate */
+#define WSM_MIB_ID_OVERRIDE_INTERNAL_TX_RATE   0x100F
+
+/* 4.23 SetAssociationMode */
+#define WSM_MIB_ID_SET_ASSOCIATION_MODE                0x1010
+
+/* 4.24 UpdateEptaConfigData */
+#define WSM_MIB_ID_UPDATE_EPTA_CONFIG_DATA     0x1011
+
+/* 4.25 SelectCcaMethod */
+#define WSM_MIB_ID_SELECT_CCA_METHOD           0x1012
+
+/* 4.26 SetUpasdInformation */
+#define WSM_MIB_ID_SET_UAPSD_INFORMATION       0x1013
+
+/* 4.27 SetAutoCalibrationMode  WBF00004073 */
+#define WSM_MIB_ID_SET_AUTO_CALIBRATION_MODE   0x1015
+
+/* 4.28 SetTxRateRetryPolicy */
+#define WSM_MIB_ID_SET_TX_RATE_RETRY_POLICY    0x1016
+
+/* 4.29 SetHostMessageTypeFilter */
+#define WSM_MIB_ID_SET_HOST_MSG_TYPE_FILTER    0x1017
+
+/* 4.30 P2PFindInfo */
+#define WSM_MIB_ID_P2P_FIND_INFO               0x1018
+
+/* 4.31 P2PPsModeInfo */
+#define WSM_MIB_ID_P2P_PS_MODE_INFO            0x1019
+
+/* 4.32 SetEtherTypeDataFrameFilter */
+#define WSM_MIB_ID_SET_ETHERTYPE_DATAFRAME_FILTER 0x101A
+
+/* 4.33 SetUDPPortDataFrameFilter */
+#define WSM_MIB_ID_SET_UDPPORT_DATAFRAME_FILTER        0x101B
+
+/* 4.34 SetMagicDataFrameFilter */
+#define WSM_MIB_ID_SET_MAGIC_DATAFRAME_FILTER  0x101C
+#define WSM_MIB_ID_SET_HOST_SLEEP      0x1050
+
+/* This is the end of specification. */
+
+/* 4.35 P2PDeviceInfo */
+#define WSM_MIB_ID_P2P_DEVICE_INFO             0x101D
+
+/* 4.36 SetWCDMABand */
+#define WSM_MIB_ID_SET_WCDMA_BAND              0x101E
+
+/* 4.37 GroupTxSequenceCounter */
+#define WSM_MIB_ID_GRP_SEQ_COUNTER             0x101F
+
+/* 4.38 ProtectedMgmtPolicy */
+#define WSM_MIB_ID_PROTECTED_MGMT_POLICY       0x1020
+
+/* 4.39 SetHtProtection */
+#define WSM_MID_ID_SET_HT_PROTECTION           0x1021
+
+/* 4.40 GPIO Command */
+#define WSM_MIB_ID_GPIO_COMMAND                        0x1022
+
+/* 4.41 TSF Counter Value */
+#define WSM_MIB_ID_TSF_COUNTER                 0x1023
+
+/* Test Purposes Only */
+#define WSM_MIB_ID_BLOCK_ACK_INFO              0x100D
+
+/* 4.42 UseMultiTxConfMessage */
+#define WSM_MIB_USE_MULTI_TX_CONF              0x1024
+
+/* 4.43 Keep-alive period */
+#define WSM_MIB_ID_KEEP_ALIVE_PERIOD           0x1025
+
+/* 4.44 Disable BSSID filter */
+#define WSM_MIB_ID_DISABLE_BSSID_FILTER                0x1026
+
+/* Inactivity */
+#define WSM_MIB_ID_SET_INACTIVITY              0x1035
+
+/* MAC Addr Filter */
+#define WSM_MIB_ID_MAC_ADDR_FILTER             0x1030
+
+#ifdef MCAST_FWDING
+/* 4.51 Set Forwarding Offload */
+#define WSM_MIB_ID_FORWARDING_OFFLOAD          0x1033
+#endif
+
+/* Frame template types */
+#define WSM_FRAME_TYPE_PROBE_REQUEST   (0)
+#define WSM_FRAME_TYPE_BEACON          (1)
+#define WSM_FRAME_TYPE_NULL            (2)
+#define WSM_FRAME_TYPE_QOS_NULL                (3)
+#define WSM_FRAME_TYPE_PS_POLL         (4)
+#define WSM_FRAME_TYPE_PROBE_RESPONSE  (5)
+#define WSM_FRAME_TYPE_ARP_REPLY        (6)
+
+#define WSM_FRAME_GREENFIELD           (0x80)  /* See 4.11 */
+
+/* Status */
+/* The WSM firmware has completed a request */
+/* successfully. */
+#define WSM_STATUS_SUCCESS              (0)
+
+/* This is a generic failure code if other error codes do */
+/* not apply. */
+#define WSM_STATUS_FAILURE              (1)
+
+/* A request contains one or more invalid parameters. */
+#define WSM_INVALID_PARAMETER           (2)
+
+/* The request cannot perform because the device is in */
+/* an inappropriate mode. */
+#define WSM_ACCESS_DENIED               (3)
+
+/* The frame received includes a decryption error. */
+#define WSM_STATUS_DECRYPTFAILURE       (4)
+
+/* A MIC failure is detected in the received packets. */
+#define WSM_STATUS_MICFAILURE           (5)
+
+/* The transmit request failed due to retry limit being */
+/* exceeded. */
+#define WSM_STATUS_RETRY_EXCEEDED       (6)
+
+/* The transmit request failed due to MSDU life time */
+/* being exceeded. */
+#define WSM_STATUS_TX_LIFETIME_EXCEEDED (7)
+
+/* The link to the AP is lost. */
+#define WSM_STATUS_LINK_LOST            (8)
+
+/* No key was found for the encrypted frame */
+#define WSM_STATUS_NO_KEY_FOUND         (9)
+
+/* Jammer was detected when transmitting this frame */
+#define WSM_STATUS_JAMMER_DETECTED      (10)
+
+/* The message should be requeued later. */
+/* This is applicable only to Transmit */
+#define WSM_REQUEUE                     (11)
+
+/* Advanced filtering options */
+#define WSM_MAX_FILTER_ELEMENTS                (4)
+
+#define WSM_FILTER_ACTION_IGNORE       (0)
+#define WSM_FILTER_ACTION_FILTER_IN    (1)
+#define WSM_FILTER_ACTION_FILTER_OUT   (2)
+
+#define WSM_FILTER_PORT_TYPE_DST       (0)
+#define WSM_FILTER_PORT_TYPE_SRC       (1)
+
+
+
+struct wsm_hdr {
+       __le16 len;
+       __le16 id;
+};
+
+#define WSM_TX_SEQ_MAX                 (7)
+#define WSM_TX_SEQ(seq)                        \
+               ((seq & WSM_TX_SEQ_MAX) << 13)
+#define WSM_TX_LINK_ID_MAX             (0x0F)
+#define WSM_TX_LINK_ID(link_id)                \
+               ((link_id & WSM_TX_LINK_ID_MAX) << 6)
+
+#define WSM_TX_IF_ID_MAX               (0x0F)
+#define WSM_TX_IF_ID(if_id)            \
+               ((if_id & WSM_TX_IF_ID_MAX) << 6)
+
+#define MAX_BEACON_SKIP_TIME_MS 1000
+
+#ifdef FPGA_SETUP
+#define WSM_CMD_LAST_CHANCE_TIMEOUT (HZ * 9 / 2)
+#else
+#define WSM_CMD_LAST_CHANCE_TIMEOUT (HZ * 20 / 2)
+#endif
+#define WSM_CMD_EXTENDED_TIMEOUT (HZ * 20 / 2)
+
+#define WSM_RI_GET_PEER_ID_FROM_FLAGS(_f)         (((_f)&(0xF<<25)>>25))
+
+
+/* ******************************************************************** */
+/* WSM capcbility                                                      */
+#define WSM_FW_LABEL 128
+struct wsm_caps {
+       u16 numInpChBufs;
+       u16 sizeInpChBuf;
+       u16 hardwareId;
+       u16 hardwareSubId;
+       u16 firmwareCap;
+       u16 firmwareType;
+       u16 firmwareApiVer;
+       u16 firmwareBuildNumber;
+       u16 firmwareVersion;
+       char fw_label[WSM_FW_LABEL+2];
+       int firmwareReady;
+};
+
+/* ******************************************************************** */
+/* WSM commands                                                                */
+
+struct wsm_tx_power_range {
+       int min_power_level;
+       int max_power_level;
+       u32 stepping;
+};
+
+/* 3.1 */
+struct wsm_configuration {
+       /* [in] */ u32 dot11MaxTransmitMsduLifeTime;
+       /* [in] */ u32 dot11MaxReceiveLifeTime;
+       /* [in] */ u32 dot11RtsThreshold;
+       /* [in, out] */ u8 *dot11StationId;
+       /* [in] */ const void *dpdData;
+       /* [in] */ size_t dpdData_size;
+       /* [out] */ u8 dot11FrequencyBandsSupported;
+       /* [out] */ u32 supportedRateMask;
+       /* [out] */ struct wsm_tx_power_range txPowerRange[2];
+};
+
+int wsm_configuration(struct xradio_common *hw_priv,
+                     struct wsm_configuration *arg,
+                     int if_id);
+
+/* 3.3 */
+struct wsm_reset {
+       /* [in] */ int link_id;
+       /* [in] */ bool reset_statistics;
+};
+
+int wsm_reset(struct xradio_common *hw_priv, const struct wsm_reset *arg,
+             int if_id);
+
+//add by yangfh
+void wsm_query_work(struct work_struct *work);
+
+/* 3.5 */
+int wsm_read_mib(struct xradio_common *hw_priv, u16 mibId, void *buf,
+                size_t buf_size, size_t arg_size);
+
+/* 3.7 */
+int wsm_write_mib(struct xradio_common *hw_priv, u16 mibId, void *buf,
+                 size_t buf_size, int if_id);
+
+/* 3.9 */
+struct wsm_ssid {
+       u8 ssid[32];
+       u32 length;
+};
+
+struct wsm_scan_ch {
+       u16 number;
+       u32 minChannelTime;
+       u32 maxChannelTime;
+       u32 txPowerLevel;
+};
+
+/* 3.13 */
+struct wsm_scan_complete {
+       /* WSM_STATUS_... */
+       u32 status;
+
+       /* WSM_PSM_... */
+       u8 psm;
+
+       /* Number of channels that the scan operation completed. */
+       u8 numChannels;
+#ifdef ROAM_OFFLOAD
+       u16 reserved;
+#endif /*ROAM_OFFLOAD*/
+};
+
+/* 3.9 */
+struct wsm_scan {
+       /* WSM_PHY_BAND_... */
+       /* [in] */ u8 band;
+
+       /* WSM_SCAN_TYPE_... */
+       /* [in] */ u8 scanType;
+
+       /* WSM_SCAN_FLAG_... */
+       /* [in] */ u8 scanFlags;
+
+       /* WSM_TRANSMIT_RATE_... */
+       /* [in] */ u8 maxTransmitRate;
+
+       /* Interval period in TUs that the device shall the re- */
+       /* execute the requested scan. Max value supported by the device */
+       /* is 256s. */
+       /* [in] */ u32 autoScanInterval;
+
+       /* Number of probe requests (per SSID) sent to one (1) */
+       /* channel. Zero (0) means that none is send, which */
+       /* means that a passive scan is to be done. Value */
+       /* greater than zero (0) means that an active scan is to */
+       /* be done. */
+       /* [in] */ u32 numOfProbeRequests;
+
+       /* Number of channels to be scanned. */
+       /* Maximum value is WSM_SCAN_MAX_NUM_OF_CHANNELS. */
+       /* [in] */ u8 numOfChannels;
+
+       /* Number of SSID provided in the scan command (this */
+       /* is zero (0) in broadcast scan) */
+       /* The maximum number of SSIDs is WSM_SCAN_MAX_NUM_OF_SSIDS. */
+       /* [in] */ u8 numOfSSIDs;
+
+       /* The delay time (in microseconds) period */
+       /* before sending a probe-request. */
+       /* [in] */ u8 probeDelay;
+
+       /* SSIDs to be scanned [numOfSSIDs]; */
+       /* [in] */ struct wsm_ssid *ssids;
+
+       /* Channels to be scanned [numOfChannels]; */
+       /* [in] */ struct wsm_scan_ch *ch;
+};
+
+int wsm_scan(struct xradio_common *hw_priv, const struct wsm_scan *arg,
+                       int if_id);
+
+/* 3.11 */
+int wsm_stop_scan(struct xradio_common *hw_priv, int if_id);
+
+/* 3.14 */
+struct wsm_tx_confirm {
+       /* Packet identifier used in wsm_tx. */
+       /* [out] */ u32 packetID;
+
+       /* WSM_STATUS_... */
+       /* [out] */ u32 status;
+
+       /* WSM_TRANSMIT_RATE_... */
+       /* [out] */ u8 txedRate;
+
+       /* The number of times the frame was transmitted */
+       /* without receiving an acknowledgement. */
+       /* [out] */ u8 ackFailures;
+
+       /* WSM_TX_STATUS_... */
+       /* [out] */ u16 flags;
+       
+       //rate feed back, add by yangfh
+       /* [out] */ u32 rate_try[3];
+
+       /* The total time in microseconds that the frame spent in */
+       /* the WLAN device before transmission as completed. */
+       /* [out] */ u32 mediaDelay;
+
+       /* The total time in microseconds that the frame spent in */
+       /* the WLAN device before transmission was started. */
+       /* [out] */ u32 txQueueDelay;
+
+       /* [out]*/ u32 link_id;
+
+       /*[out]*/ int if_id;
+};
+
+/* 3.15 */
+
+/* Note that ideology of wsm_tx struct is different against the rest of
+ * WSM API. wsm_hdr is /not/ a caller-adapted struct to be used as an input
+ * argument for WSM call, but a prepared bytestream to be sent to firmware.
+ * It is filled partly in xradio_tx, partly in low-level WSM code.
+ * Please pay attention once again: ideology is different.
+ *
+ * Legend:
+ * - [in]: xradio_tx must fill this field.
+ * - [wsm]: the field is filled by low-level WSM.
+ */
+struct wsm_tx {
+       /* common WSM header */
+       /* [in/wsm] */ struct wsm_hdr hdr;
+
+       /* Packet identifier that meant to be used in completion. */
+       /* [in] */ __le32 packetID;
+
+       /* WSM_TRANSMIT_RATE_... */
+       /* [in] */ u8 maxTxRate;
+
+       /* WSM_QUEUE_... */
+       /* [in] */ u8 queueId;
+
+       /* True: another packet is pending on the host for transmission. */
+       /* [wsm] */ u8 more;
+
+       /* Bit 0 = 0 - Start expiry time from first Tx attempt (default) */
+       /* Bit 0 = 1 - Start expiry time from receipt of Tx Request */
+       /* Bits 3:1  - PTA Priority */
+       /* Bits 6:4  - Tx Rate Retry Policy */
+       /* Bit 7 - Reserved */
+       /* [in] */ u8 flags;
+
+       /* Should be 0. */
+       /* [in] */ __le32 reserved;
+
+       /* The elapsed time in TUs, after the initial transmission */
+       /* of an MSDU, after which further attempts to transmit */
+       /* the MSDU shall be terminated. Overrides the global */
+       /* dot11MaxTransmitMsduLifeTime setting [optional] */
+       /* Device will set the default value if this is 0. */
+       /* [wsm] */ __le32 expireTime;
+
+       /* WSM_HT_TX_... */
+       /* [in] */ __le32 htTxParameters;
+};
+
+/* = sizeof(generic hi hdr) + sizeof(wsm hdr) + sizeof(alignment) */
+#define WSM_TX_EXTRA_HEADROOM (28)
+
+/* 3.16 */
+struct wsm_rx {
+       /* WSM_STATUS_... */
+       /* [out] */ u32 status;
+
+       /* Specifies the channel of the received packet. */
+       /* [out] */ u16 channelNumber;
+
+       /* WSM_TRANSMIT_RATE_... */
+       /* [out] */ u8 rxedRate;
+
+       /* This value is expressed in signed Q8.0 format for */
+       /* RSSI and unsigned Q7.1 format for RCPI. */
+       /* [out] */ u8 rcpiRssi;
+
+       /* WSM_RX_STATUS_... */
+       /* [out] */ u32 flags;
+
+       /* An 802.11 frame. */
+       /* [out] */ void *frame;
+
+       /* Size of the frame */
+       /* [out] */ size_t frame_size;
+
+       /* Link ID */
+       /* [out] */ int link_id;
+       /* [out] */ int if_id;
+};
+
+/* = sizeof(generic hi hdr) + sizeof(wsm hdr) */
+#define WSM_RX_EXTRA_HEADROOM (16)
+
+/* 3.17 */
+struct wsm_event {
+       /* WSM_STATUS_... */
+       /* [out] */ u32 eventId;
+
+       /* Indication parameters. */
+       /* For error indication, this shall be a 32-bit WSM status. */
+       /* For RCPI or RSSI indication, this should be an 8-bit */
+       /* RCPI or RSSI value. */
+       /* [out] */ u32 eventData;
+};
+
+struct xradio_wsm_event {
+       struct list_head link;
+       struct wsm_event evt;
+       u8 if_id;
+};
+
+/* 3.18 - 3.22 */
+/* Measurement. Skipped for now. Irrelevent. */
+
+
+/* 3.23 */
+struct wsm_join {
+       /* WSM_JOIN_MODE_... */
+       /* [in] */ u8 mode;
+
+       /* WSM_PHY_BAND_... */
+       /* [in] */ u8 band;
+
+       /* Specifies the channel number to join. The channel */
+       /* number will be mapped to an actual frequency */
+       /* according to the band */
+       /* [in] */ u16 channelNumber;
+
+       /* Specifies the BSSID of the BSS or IBSS to be joined */
+       /* or the IBSS to be started. */
+       /* [in] */ u8 bssid[6];
+
+       /* ATIM window of IBSS */
+       /* When ATIM window is zero the initiated IBSS does */
+       /* not support power saving. */
+       /* [in] */ u16 atimWindow;
+
+       /* WSM_JOIN_PREAMBLE_... */
+       /* [in] */ u8 preambleType;
+
+       /* Specifies if a probe request should be send with the */
+       /* specified SSID when joining to the network. */
+       /* [in] */ u8 probeForJoin;
+
+       /* DTIM Period (In multiples of beacon interval) */
+       /* [in] */ u8 dtimPeriod;
+
+       /* WSM_JOIN_FLAGS_... */
+       /* [in] */ u8 flags;
+
+       /* Length of the SSID */
+       /* [in] */ u32 ssidLength;
+
+       /* Specifies the SSID of the IBSS to join or start */
+       /* [in] */ u8 ssid[32];
+
+       /* Specifies the time between TBTTs in TUs */
+       /* [in] */ u32 beaconInterval;
+
+       /* A bit mask that defines the BSS basic rate set. */
+       /* [in] */ u32 basicRateSet;
+
+       /* Minimum transmission power level in units of 0.1dBm */
+       /* [out] */ int minPowerLevel;
+
+       /* Maximum transmission power level in units of 0.1dBm */
+       /* [out] */ int maxPowerLevel;
+};
+
+int wsm_join(struct xradio_common *hw_priv, struct wsm_join *arg, int if_id);
+
+/* 3.25 */
+struct wsm_set_pm {
+       /* WSM_PSM_... */
+       /* [in] */ u8 pmMode;
+
+       /* in unit of 500us; 0 to use default */
+       /* [in] */ u8 fastPsmIdlePeriod;
+
+       /* in unit of 500us; 0 to use default */
+       /* [in] */ u8 apPsmChangePeriod;
+
+       /* in unit of 500us; 0 to disable auto-pspoll */
+       /* [in] */ u8 minAutoPsPollPeriod;
+};
+
+int wsm_set_pm(struct xradio_common *hw_priv, const struct wsm_set_pm *arg,
+              int if_id);
+
+/* 3.27 */
+struct wsm_set_pm_complete {
+       u8 psm;                 /* WSM_PSM_... */
+};
+
+/* 3.28 */
+struct wsm_set_bss_params {
+       /* The number of lost consecutive beacons after which */
+       /* the WLAN device should indicate the BSS-Lost event */
+       /* to the WLAN host driver. */
+       u8 beaconLostCount;
+
+       /* The AID received during the association process. */
+       u16 aid;
+
+       /* The operational rate set mask */
+       u32 operationalRateSet;
+};
+
+int wsm_set_bss_params(struct xradio_common *hw_priv,
+                      const struct wsm_set_bss_params *arg, int if_id);
+
+/* 3.30 */
+struct wsm_add_key {
+       u8 type;                /* WSM_KEY_TYPE_... */
+       u8 entryIndex;          /* Key entry index: 0 -- WSM_KEY_MAX_INDEX */
+       u16 reserved;
+       union {
+               struct {
+                       u8 peerAddress[6];      /* MAC address of the
+                                                * peer station */
+                       u8 reserved;
+                       u8 keyLength;           /* Key length in bytes */
+                       u8 keyData[16];         /* Key data */
+               } __packed wepPairwiseKey;
+               struct {
+                       u8 keyId;               /* Unique per key identifier
+                                                * (0..3) */
+                       u8 keyLength;           /* Key length in bytes */
+                       u16 reserved;
+                       u8 keyData[16];         /* Key data */
+               } __packed wepGroupKey;
+               struct {
+                       u8 peerAddress[6];      /* MAC address of the
+                                                * peer station */
+                       u8 reserved[2];
+                       u8 tkipKeyData[16];     /* TKIP key data */
+                       u8 rxMicKey[8];         /* Rx MIC key */
+                       u8 txMicKey[8];         /* Tx MIC key */
+               } __packed tkipPairwiseKey;
+               struct {
+                       u8 tkipKeyData[16];     /* TKIP key data */
+                       u8 rxMicKey[8];         /* Rx MIC key */
+                       u8 keyId;               /* Key ID */
+                       u8 reserved[3];
+                       u8 rxSeqCounter[8];     /* Receive Sequence Counter */
+               } __packed tkipGroupKey;
+               struct {
+                       u8 peerAddress[6];      /* MAC address of the
+                                                * peer station */
+                       u16 reserved;
+                       u8 aesKeyData[16];      /* AES key data */
+               } __packed aesPairwiseKey;
+               struct {
+                       u8 aesKeyData[16];      /* AES key data */
+                       u8 keyId;               /* Key ID */
+                       u8 reserved[3];
+                       u8 rxSeqCounter[8];     /* Receive Sequence Counter */
+               } __packed aesGroupKey;
+               struct {
+                       u8 peerAddress[6];      /* MAC address of the
+                                                * peer station */
+                       u8 keyId;               /* Key ID */
+                       u8 reserved;
+                       u8 wapiKeyData[16];     /* WAPI key data */
+                       u8 micKeyData[16];      /* MIC key data */
+               } __packed wapiPairwiseKey;
+               struct {
+                       u8 wapiKeyData[16];     /* WAPI key data */
+                       u8 micKeyData[16];      /* MIC key data */
+                       u8 keyId;               /* Key ID */
+                       u8 reserved[3];
+               } __packed wapiGroupKey;
+       } __packed;
+} __packed;
+
+int wsm_add_key(struct xradio_common *hw_priv, const struct wsm_add_key *arg,
+                       int if_id);
+
+/* 3.32 */
+struct wsm_remove_key {
+       /* Key entry index : 0-10 */
+       u8 entryIndex;
+};
+
+int wsm_remove_key(struct xradio_common *hw_priv,
+                  const struct wsm_remove_key *arg, int if_id);
+
+/* 3.34 */
+struct wsm_set_tx_queue_params {
+       /* WSM_ACK_POLICY_... */
+       u8 ackPolicy;
+
+       /* Medium Time of TSPEC (in 32us units) allowed per */
+       /* One Second Averaging Period for this queue. */
+       u16 allowedMediumTime;
+
+       /* dot11MaxTransmitMsduLifetime to be used for the */
+       /* specified queue. */
+       u32 maxTransmitLifetime;
+};
+
+struct wsm_tx_queue_params {
+       /* NOTE: index is a linux queue id. */
+       struct wsm_set_tx_queue_params params[4];
+};
+
+#define WSM_TX_QUEUE_SET(queue_params, queue, ack_policy, allowed_time,     \
+                        max_life_time)                                     \
+do {                                                                       \
+       struct wsm_set_tx_queue_params *p = &(queue_params)->params[queue]; \
+       p->ackPolicy = (ack_policy);                            \
+       p->allowedMediumTime = (allowed_time);                          \
+       p->maxTransmitLifetime = (max_life_time);                       \
+} while (0)
+
+int wsm_set_tx_queue_params(struct xradio_common *hw_priv,
+                           const struct wsm_set_tx_queue_params *arg,
+                           u8 id, int if_id);
+
+/* 3.36 */
+struct wsm_edca_queue_params {
+       /* CWmin (in slots) for the access class. */
+       /* [in] */ u16 cwMin;
+
+       /* CWmax (in slots) for the access class. */
+       /* [in] */ u16 cwMax;
+
+       /* AIFS (in slots) for the access class. */
+       /* [in] */ u8 aifns;
+
+       /* TX OP Limit (in microseconds) for the access class. */
+       /* [in] */ u16 txOpLimit;
+
+       /* dot11MaxReceiveLifetime to be used for the specified */
+       /* the access class. Overrides the global */
+       /* dot11MaxReceiveLifetime value */
+       /* [in] */ u32 maxReceiveLifetime;
+
+       /* UAPSD trigger support for the access class. */
+       /* [in] */ bool uapsdEnable;
+};
+
+struct wsm_edca_params {
+       /* NOTE: index is a linux queue id. */
+       struct wsm_edca_queue_params params[4];
+};
+
+#define TXOP_UNIT 32
+#define WSM_EDCA_SET(edca, queue, aifs, cw_min, cw_max, txop, life_time,\
+               uapsd)  \
+       do {                                                    \
+               struct wsm_edca_queue_params *p = &(edca)->params[queue]; \
+               p->cwMin = (cw_min);                            \
+               p->cwMax = (cw_max);                            \
+               p->aifns = (aifs);                              \
+               p->txOpLimit = ((txop) * TXOP_UNIT);            \
+               p->maxReceiveLifetime = (life_time);            \
+               p->uapsdEnable = (uapsd);                       \
+       } while (0)
+
+int wsm_set_edca_params(struct xradio_common *hw_priv,
+                       const struct wsm_edca_params *arg, int if_id);
+
+int wsm_set_uapsd_param(struct xradio_common *hw_priv,
+                       const struct wsm_edca_params *arg);
+
+/* 3.38 */
+/* Set-System info. Skipped for now. Irrelevent. */
+
+/* 3.40 */
+struct wsm_switch_channel {
+       /* 1 - means the STA shall not transmit any further */
+       /* frames until the channel switch has completed */
+       /* [in] */ u8 channelMode;
+
+       /* Number of TBTTs until channel switch occurs. */
+       /* 0 - indicates switch shall occur at any time */
+       /* 1 - occurs immediately before the next TBTT */
+       /* [in] */ u8 channelSwitchCount;
+
+       /* The new channel number to switch to. */
+       /* Note this is defined as per section 2.7. */
+       /* [in] */ u16 newChannelNumber;
+};
+
+int wsm_switch_channel(struct xradio_common *hw_priv,
+                      const struct wsm_switch_channel *arg, int if_id);
+
+struct wsm_start {
+       /* WSM_START_MODE_... */
+       /* [in] */ u8 mode;
+
+       /* WSM_PHY_BAND_... */
+       /* [in] */ u8 band;
+
+       /* Channel number */
+       /* [in] */ u16 channelNumber;
+
+       /* Client Traffic window in units of TU */
+       /* Valid only when mode == ..._P2P */
+       /* [in] */ u32 CTWindow;
+
+       /* Interval between two consecutive */
+       /* beacon transmissions in TU. */
+       /* [in] */ u32 beaconInterval;
+
+       /* DTIM period in terms of beacon intervals */
+       /* [in] */ u8 DTIMPeriod;
+
+       /* WSM_JOIN_PREAMBLE_... */
+       /* [in] */ u8 preambleType;
+
+       /* The delay time (in microseconds) period */
+       /* before sending a probe-request. */
+       /* [in] */ u8 probeDelay;
+
+       /* Length of the SSID */
+       /* [in] */ u8 ssidLength;
+
+       /* SSID of the BSS or P2P_GO to be started now. */
+       /* [in] */ u8 ssid[32];
+
+       /* The basic supported rates for the MiniAP. */
+       /* [in] */ u32 basicRateSet;
+};
+
+int wsm_start(struct xradio_common *hw_priv, const struct wsm_start *arg,
+               int if_id);
+
+#if 0
+struct wsm_beacon_transmit {
+       /* 1: enable; 0: disable */
+       /* [in] */ u8 enableBeaconing;
+};
+
+int wsm_beacon_transmit(struct xradio_common *hw_priv,
+                       const struct wsm_beacon_transmit *arg,
+                       int if_id);
+#endif
+
+int wsm_start_find(struct xradio_common *hw_priv, int if_id);
+
+int wsm_stop_find(struct xradio_common *hw_priv, int if_id);
+
+struct wsm_suspend_resume {
+       /* See 3.52 */
+       /* Link ID */
+       /* [out] */ int link_id;
+       /* Stop sending further Tx requests down to device for this link */
+       /* [out] */ bool stop;
+       /* Transmit multicast Frames */
+       /* [out] */ bool multicast;
+       /* The AC on which Tx to be suspended /resumed. */
+       /* This is applicable only for U-APSD */
+       /* WSM_QUEUE_... */
+       /* [out] */ int queue;
+       /* [out] */ int if_id;
+};
+
+/* 3.54 Update-IE request. */
+struct wsm_update_ie {
+       /* WSM_UPDATE_IE_... */
+       /* [in] */ u16 what;
+       /* [in] */ u16 count;
+       /* [in] */ u8 *ies;
+       /* [in] */ size_t length;
+};
+
+int wsm_update_ie(struct xradio_common *hw_priv,
+                 const struct wsm_update_ie *arg, int if_id);
+
+/* 3.56 */
+struct wsm_map_link {
+       /* MAC address of the remote device */
+       /* [in] */ u8 mac_addr[6];
+       /* [in] */ u8 unmap;
+       /* [in] */ u8 link_id;
+};
+
+int wsm_map_link(struct xradio_common *hw_priv, const struct wsm_map_link *arg,
+               int if_id);
+
+#ifdef MCAST_FWDING
+
+/* 3.65        Give Buffer Request */
+int wsm_init_release_buffer_request(struct xradio_common *priv, u8 index);
+
+/* 3.65 fixed memory leakage by yangfh*/
+int wsm_deinit_release_buffer(struct xradio_common *hw_priv);
+
+/* 3.67        Request Buffer Request */
+int wsm_request_buffer_request(struct xradio_vif *priv,
+                                u8 *arg);
+#endif
+/* ******************************************************************** */
+/* MIB shortcats                                                       */
+#define XR_RRM 1
+#ifdef XR_RRM//RadioResourceMeasurement
+/* RadioResourceMeasurement Request*/
+#define MEAS_CCA         0
+#define MEAS_CHANNELLOAD 1
+typedef struct LMAC_MEAS_CHANNEL_LOAD_PARAMS_S
+{
+    u8    Reserved;
+    u8    ChannelLoadCCA;
+    u16   ChannelNum;
+    u16   RandomInterval;
+    u16   MeasurementDuration;
+    u32   MeasurementStartTimel;
+    u32   MeasurementStartTimeh;
+}LMAC_MEAS_CHANNEL_LOAD_PARAMS;
+
+#define MEAS_RPI 0
+#define MEAS_IPI 1
+
+typedef struct LMAC_MEAS_NOISE_HISTOGRAM_PARAMS_S
+{
+    u8    Reserved;
+    u8    IpiRpi;
+    u16   ChannelNum;
+    u16   RandomInterval;
+    u16   MeasurementDuration;
+    u32   MeasurementStartTimel;
+    u32   MeasurementStartTimeh;
+}LMAC_MEAS_NOISE_HISTOGRAM_PARAMS;
+
+#define LMAC_MAX_SSIDS       16 
+#define LMAC_MAX_SSID_LENGTH 32
+typedef struct LMAC_CHANNELS_S
+{
+    u32  ChannelNum;
+    u32  MinChannelTime;
+    u32  MaxChannelTime;
+    s32  TxPowerLevel;
+}LMAC_CHANNELS;
+
+typedef struct LMAC_SSIDS_S
+{
+    u32  SSIDLength;
+    u8   SSID[LMAC_MAX_SSID_LENGTH];
+}LMAC_SSIDS;
+
+typedef struct LMAC_MEAS_BEACON_PARAMS_S
+{
+    //u8    RegulatoryClass;
+    //u8    MeasurementMode;
+    //u16   ChannelNum;
+    u16   RandomInterval;
+    //u16   MeasurementDuration;
+    //u8    Bssid[6];
+    u16   Reserved;
+    //SCAN_PARAMETERS ScanParameters;
+    u8   Band;
+    u8   ScanType;
+    u8   ScanFlags;
+    u8   MaxTransmitRate;
+    u32  AutoScanInterval;
+    u8   NumOfProbeRequests;
+    u8   NumOfChannels;
+    u8   NumOfSSIDs;
+    u8   ProbeDelay;
+    LMAC_CHANNELS Channels;
+    LMAC_SSIDS    Ssids; // here for SCAN_PARAMETER sizing purposes
+}LMAC_MEAS_BEACON_PARAMS;
+
+typedef struct LMAC_MEAS_STA_STATS_PARAMS_S
+{
+    u8    PeerMacAddress[6];
+    u16   RandomInterval;
+    u16   MeasurementDuration;
+    u8    GroupId;
+    u8    Reserved;
+}LMAC_MEAS_STA_STATS_PARAMS;
+
+typedef struct LMAC_MEAS_LINK_MEASUREMENT_PARAMS_S
+{
+    u8    Reserved[4];
+}LMAC_MEAS_LINK_MEASUREMENT_PARAMS;
+
+typedef union LMAC_MEAS_REQUEST_U
+{
+    LMAC_MEAS_CHANNEL_LOAD_PARAMS     ChannelLoadParams;
+    LMAC_MEAS_NOISE_HISTOGRAM_PARAMS  NoisHistogramParams;
+    LMAC_MEAS_BEACON_PARAMS           BeaconParams;
+    LMAC_MEAS_STA_STATS_PARAMS        StaStatsParams;
+   LMAC_MEAS_LINK_MEASUREMENT_PARAMS LinkMeasurementParams;
+} LMAC_MEAS_REQUEST;
+
+// This struct is a copy of WSM_HI_START_MEASUREMENT_REQ, except that MsgLen and MsgId is not included
+typedef struct MEASUREMENT_PARAMETERS_S
+{
+//    u16           MsgLen;
+//    u16           MsgId;
+    s32           TxPowerLevel;
+    u8            DurationMandatory;
+    u8            MeasurementType;
+    u8            MeasurementRequestLength;
+    u8            Reserved[5];
+    LMAC_MEAS_REQUEST MeasurementRequest;
+}MEASUREMENT_PARAMETERS;
+
+/* RadioResourceMeasurement Result*/
+ typedef struct LMAC_MEAS_CHANNEL_LOAD_RESULTS_S
+{
+    u8   Reserved;
+    u8   ChannelLoadCCA;
+    u16  ChannelNum;
+    u32  ActualMeasurementStartTimel;
+    u32  ActualMeasurementStartTimeh;
+    u16  MeasurementDuration;
+    u8   CCAbusyFraction;
+    u8   ChannelLoad;
+}LMAC_MEAS_CHANNEL_LOAD_RESULTS;
+
+typedef struct LMAC_MEAS_NOISE_HISTOGRAM_RESULTS_S
+{
+    u16  Reserved;
+    u16  ChannelNum;
+    u32  ActualMeasurementStartTimel;
+    u32  ActualMeasurementStartTimeh;
+    u16  MeasurementDuration;
+    u8   AntennaID;
+    u8   IpiRpi;
+    u8   PI_0_Density;
+    u8   PI_1_Density;
+    u8   PI_2_Density;
+    u8   PI_3_Density;
+    u8   PI_4_Density;
+    u8   PI_5_Density;
+    u8   PI_6_Density;
+    u8   PI_7_Density;
+    u8   PI_8_Density;
+    u8   PI_9_Density;
+    u8   PI_10_Density;
+    u8   Reserved2;
+}LMAC_MEAS_NOISE_HISTOGRAM_RESULTS;
+
+typedef struct LMAC_MEAS_BEACON_RESULTS_S
+{
+    u16  MeasurementDuration;
+    u16  Reserved;
+    u32  StartTsfl;
+    u32  StartTsfh;
+    u32  Durationl;
+    u32  Durationh;
+    //SCAN_PARAMETERS ScanParameters;
+    u8   Band;
+    u8   ScanType;
+    u8   ScanFlags;
+    u8   MaxTransmitRate;
+    u32  AutoScanInterval;
+    u8   NumOfProbeRequests;
+    u8   NumOfChannels;
+    u8   NumOfSSIDs;
+    u8   ProbeDelay;
+    LMAC_CHANNELS Channels;
+    LMAC_SSIDS    Ssids;
+}LMAC_MEAS_BEACON_RESULTS;
+
+typedef struct LMAC_MEAS_STA_STATS_RESULTS_S
+{
+    u16  MeasurementDuration;
+    u8   GroupId;
+    u8   StatisticsGroupDataLength;
+    u8   StatisticsGroupData[52];
+}LMAC_MEAS_STA_STATS_RESULTS;
+
+typedef struct LMAC_MEAS_LINK_MEASUREMENT_RESULTS_S
+{
+    s16  TransmitPower;
+    u8   RxAntennaID;
+    u8   TxAntennaID;
+    s32  NoiseLeveldBm;
+    s8   LatestRssi;
+    u8   Reserved1;
+    u8   Reserved2;
+    u8   Reserved3;
+}LMAC_MEAS_LINK_MEASUREMENT_RESULTS;
+
+typedef union LMAC_MEAS_REPORT_U
+{
+    LMAC_MEAS_CHANNEL_LOAD_RESULTS     ChannelLoadResults;
+    LMAC_MEAS_NOISE_HISTOGRAM_RESULTS  NoiseHistogramResults;
+    LMAC_MEAS_BEACON_RESULTS           BeaconResults;
+    LMAC_MEAS_STA_STATS_RESULTS        StaStatsResults;
+    LMAC_MEAS_LINK_MEASUREMENT_RESULTS LinkMeasurementResults;
+}LMAC_MEAS_REPORT;
+
+// Note: eMeasurementTypes MUST match the #define WSM_MEASURE_TYPE_XXX from wsm_api.h
+typedef enum {
+    ChannelLoadMeasurement=0,
+    NoiseHistrogramMeasurement,
+    BeaconReport,
+    STAstatisticsReport,
+    LinkMeasurement
+}eMeasurementTypes;
+
+typedef struct MEASUREMENT_COMPLETE_S
+{
+//    u16          RandomInterval;      
+//    u16          Reserved0;          
+    u8           Dot11PowerMgmtMode;  // From here WSM_HI_MEASURE_CMPL_IND and MEASUREMENT_COMPLETE_S must be identical
+    u8           MeasurementType;
+    u16          MoreInd;   // Set to 1 if more indications are to follow for this measurement, otherwise 0;
+    u32          Status;
+    u8           MeasurementReportLength;
+    u8           Reserved2[3];
+    LMAC_MEAS_REPORT MeasurementReport;
+}MEASUREMENT_COMPLETE; // Note: must be 32 bit aligned
+
+#endif
+int wsm_11k_measure_requset(struct xradio_common  *hw_priv,
+                                               u8  measure_type,
+                                              u16  ChannelNum,
+                                              u16  Duration);
+
+
+static inline int wsm_set_fw_debug_control(struct xradio_common *hw_priv,
+                                      int debug_control, int if_id)
+{
+       __le32 val = __cpu_to_le32(debug_control);
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_FW_DEBUG_CONTROL,
+                            &val, sizeof(val), if_id);
+}
+
+static inline int wsm_set_host_sleep(struct xradio_common *hw_priv,
+                                      u8 host_sleep, int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_HOST_SLEEP,
+                            &host_sleep, sizeof(host_sleep), if_id);
+}
+
+static inline int wsm_set_output_power(struct xradio_common *hw_priv,
+                                      int power_level, int if_id)
+{
+       __le32 val = __cpu_to_le32(power_level);
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_DOT11_CURRENT_TX_POWER_LEVEL,
+                            &val, sizeof(val), if_id);
+}
+
+static inline int wsm_set_beacon_wakeup_period(struct xradio_common *hw_priv,
+                                              unsigned dtim_interval,
+                                              unsigned listen_interval,
+                                              int if_id)
+{
+       struct {
+               u8 numBeaconPeriods;
+               u8 reserved;
+               __le16 listenInterval;
+       } val = {
+       dtim_interval, 0, __cpu_to_le16(listen_interval)};
+       if (dtim_interval > 0xFF || listen_interval > 0xFFFF)
+               return -EINVAL;
+       else
+               return wsm_write_mib(hw_priv, WSM_MIB_ID_BEACON_WAKEUP_PERIOD,
+                                    &val, sizeof(val), if_id);
+}
+
+struct wsm_rcpi_rssi_threshold {
+       u8 rssiRcpiMode;        /* WSM_RCPI_RSSI_... */
+       u8 lowerThreshold;
+       u8 upperThreshold;
+       u8 rollingAverageCount;
+};
+
+static inline int wsm_set_rcpi_rssi_threshold(struct xradio_common *hw_priv,
+                                       struct wsm_rcpi_rssi_threshold *arg,
+                                       int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_RCPI_RSSI_THRESHOLD, arg,
+                            sizeof(*arg), if_id);
+}
+
+struct wsm_counters_table {
+       __le32 countPlcpErrors;
+       __le32 countFcsErrors;
+       __le32 countTxPackets;
+       __le32 countRxPackets;
+       __le32 countRxPacketErrors;
+       __le32 countRtsSuccess;
+       __le32 countRtsFailures;
+       __le32 countRxFramesSuccess;
+       __le32 countRxDecryptionFailures;
+       __le32 countRxMicFailures;
+       __le32 countRxNoKeyFailures;
+       __le32 countTxMulticastFrames;
+       __le32 countTxFramesSuccess;
+       __le32 countTxFrameFailures;
+       __le32 countTxFramesRetried;
+       __le32 countTxFramesMultiRetried;
+       __le32 countRxFrameDuplicates;
+       __le32 countAckFailures;
+       __le32 countRxMulticastFrames;
+       __le32 countRxCMACICVErrors;
+       __le32 countRxCMACReplays;
+       __le32 countRxMgmtCCMPReplays;
+       __le32 countRxBIPMICErrors;
+};
+
+
+struct wsm_ampducounters_table {
+       u32 countTxAMPDUs;
+       u32 countTxMPDUsInAMPDUs;
+       u32 countTxOctetsInAMPDUs_l32;
+       u32 countTxOctetsInAMPDUs_h32;
+       u32 countRxAMPDUs;
+       u32 countRxMPDUsInAMPDUs;
+       u32 countRxOctetsInAMPDUs_l32;
+       u32 countRxOctetsInAMPDUs_h32;
+       u32 countRxDelimeterCRCErrorCount;
+       u32 countImplictBARFailures;
+       u32 countExplictBARFailures;
+};
+
+struct wsm_txpipe_counter {
+    u32 count1;
+    u32 count2;
+    u32 count3;
+    u32 count4;
+    u32 count5;
+    u32 count6;
+    u32 count7;
+    u32 count8;
+    u32 count9;
+    u32 counta;
+};
+
+struct wsm_backoff_counter {
+    u32 count0;
+    u32 count1;
+    u32 count2;
+    u32 count3;
+    u32 count4;
+    u32 count5;
+    u32 count6;
+    u32 count7;
+    u32 count8;
+    u32 count9;
+};
+//add by yangfh for read/write fw registers
+#define WSM_REG_RW_F   BIT(0)  //0:read, 1:write
+#define WSM_REG_RET_F   BIT(1)  //results is valid.
+#define WSM_REG_BK_F   BIT(4)  //operate in block mode.
+
+struct reg_data {
+       u32 reg_addr;
+       u32 reg_val;
+};
+
+typedef struct tag_wsm_reg_w {
+       u16 flag;
+       u16 data_size;
+       struct reg_data arg[16];
+} WSM_REG_W;
+
+typedef struct tag_wsm_reg_r {
+       u16 flag;
+       u16 data_size;
+       u32 arg[16];
+} WSM_REG_R;
+
+struct wsm_backoff_ctrl {
+    u32 enable;
+    u32 min;
+    u32 max;
+};
+struct wsm_tala_para {
+    u32 para;
+    u32 thresh;
+};
+static inline int wsm_get_counters_table(struct xradio_common *hw_priv,
+                                        struct wsm_counters_table *arg)
+{
+       return wsm_read_mib(hw_priv, WSM_MIB_ID_COUNTERS_TABLE,
+                       arg, sizeof(*arg), 0);
+}
+
+static inline int wsm_get_ampducounters_table(struct xradio_common *hw_priv,
+                                        struct wsm_ampducounters_table *arg)
+{
+       return wsm_read_mib(hw_priv, WSM_MIB_ID_AMPDUCOUNTERS_TABLE,
+                       arg, sizeof(*arg), 0);
+}
+
+static inline int wsm_get_txpipe_table(struct xradio_common *hw_priv,
+                                        struct wsm_txpipe_counter *arg)
+{
+       return wsm_read_mib(hw_priv, WSM_MIB_ID_TXPIPE_TABLE,
+                       arg, sizeof(*arg), 0);
+}
+
+static inline int wsm_get_backoff_dbg(struct xradio_common *hw_priv,
+                                        struct wsm_backoff_counter *arg)
+{
+       return wsm_read_mib(hw_priv, WSM_MIB_ID_BACKOFF_DBG,
+                       arg, sizeof(*arg), 0);
+}
+
+static inline int wsm_set_backoff_ctrl(struct xradio_common *hw_priv,
+                                        struct wsm_backoff_ctrl *arg)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_BACKOFF_CTRL,
+                       arg, sizeof(*arg), 0);
+}
+
+static inline int wsm_set_tala(struct xradio_common *hw_priv,
+                                        struct wsm_tala_para *arg)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_TALA_PARA,
+                       arg, sizeof(*arg), 0);
+}
+static inline int wsm_get_station_id(struct xradio_common *hw_priv, u8 *mac)
+{
+       return wsm_read_mib(hw_priv, WSM_MIB_ID_DOT11_STATION_ID, mac,
+                           ETH_ALEN, 0);
+}
+
+struct wsm_rx_filter {
+       bool promiscuous;
+       bool bssid;
+       bool fcs;
+       bool probeResponder;
+       bool keepalive;
+};
+
+static inline int wsm_set_rx_filter(struct xradio_common *hw_priv,
+                                   const struct wsm_rx_filter *arg,
+                                   int if_id)
+{
+       __le32 val = 0;
+       if (arg->promiscuous)
+               val |= __cpu_to_le32(BIT(0));
+       if (arg->bssid)
+               val |= __cpu_to_le32(BIT(1));
+       if (arg->fcs)
+               val |= __cpu_to_le32(BIT(2));
+       if (arg->probeResponder)
+               val |= __cpu_to_le32(BIT(3));
+       if (arg->keepalive)
+               val |= __cpu_to_le32(BIT(4));
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_RX_FILTER, &val, sizeof(val),
+                       if_id);
+}
+
+int wsm_set_probe_responder(struct xradio_vif *priv, bool enable);
+int wsm_set_keepalive_filter(struct xradio_vif *priv, bool enable);
+
+#define WSM_BEACON_FILTER_IE_HAS_CHANGED       BIT(0)
+#define WSM_BEACON_FILTER_IE_NO_LONGER_PRESENT BIT(1)
+#define WSM_BEACON_FILTER_IE_HAS_APPEARED      BIT(2)
+
+struct wsm_beacon_filter_table_entry {
+       u8      ieId;
+       u8      actionFlags;
+       u8      oui[3];
+       u8      matchData[3];
+} __packed;
+
+struct wsm_beacon_filter_table {
+       __le32 numOfIEs;
+       struct wsm_beacon_filter_table_entry entry[10];
+} __packed;
+
+static inline int wsm_set_beacon_filter_table(struct xradio_common *hw_priv,
+                                       struct wsm_beacon_filter_table *ft,
+                                       int if_id)
+{
+       size_t size = __le32_to_cpu(ft->numOfIEs) *
+                    sizeof(struct wsm_beacon_filter_table_entry) +
+                    sizeof(__le32);
+
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_BEACON_FILTER_TABLE, ft, size,
+                       if_id);
+}
+
+#define WSM_BEACON_FILTER_ENABLE       BIT(0) /* Enable/disable beacon filtering */
+#define WSM_BEACON_FILTER_AUTO_ERP     BIT(1) /* If 1 FW will handle ERP IE changes internally */
+
+struct wsm_beacon_filter_control {
+       int enabled;
+       int bcn_count;
+};
+
+static inline int wsm_beacon_filter_control(struct xradio_common *hw_priv,
+                                       struct wsm_beacon_filter_control *arg,
+                                       int if_id)
+{
+       struct {
+               __le32 enabled;
+               __le32 bcn_count;
+       } val;
+       val.enabled = __cpu_to_le32(arg->enabled);
+       val.bcn_count = __cpu_to_le32(arg->bcn_count);
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_BEACON_FILTER_ENABLE, &val,
+                            sizeof(val), if_id);
+}
+
+enum wsm_power_mode {
+       wsm_power_mode_active = 0,
+       wsm_power_mode_doze = 1,
+       wsm_power_mode_quiescent = 2,
+};
+
+struct wsm_operational_mode {
+       enum wsm_power_mode power_mode;
+       int disableMoreFlagUsage;
+       int performAntDiversity;
+};
+
+static const struct wsm_operational_mode defaultoperationalmode = {
+       .power_mode = wsm_power_mode_active,
+       .disableMoreFlagUsage = true,
+};
+
+static inline int wsm_set_operational_mode(struct xradio_common *hw_priv,
+                                       const struct wsm_operational_mode *arg,
+                                       int if_id)
+{
+       u32 val = arg->power_mode;
+       
+       if (arg->disableMoreFlagUsage)
+               val |= BIT(4);
+       if (arg->performAntDiversity)
+               val |= BIT(5);
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_OPERATIONAL_POWER_MODE, &val,
+                            sizeof(val), if_id);
+}
+
+struct wsm_inactivity {
+       u8 max_inactivity;
+       u8 min_inactivity;
+};
+
+static inline int wsm_set_inactivity(struct xradio_common *hw_priv,
+                                       const struct wsm_inactivity *arg,
+                                       int if_id)
+{
+       struct {
+              u8       min_inactive;
+              u8       max_inactive;
+              u16      reserved;
+       } val;
+
+       val.max_inactive = arg->max_inactivity;
+       val.min_inactive = arg->min_inactivity;
+       val.reserved = 0;
+
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_INACTIVITY, &val,
+                            sizeof(val), if_id);
+}
+
+struct wsm_template_frame {
+       u8 frame_type;
+       u8 rate;
+       bool disable;
+       struct sk_buff *skb;
+};
+
+static inline int wsm_set_template_frame(struct xradio_common *hw_priv,
+                                        struct wsm_template_frame *arg,
+                                        int if_id)
+{
+       int ret;
+       u8 *p = skb_push(arg->skb, 4);
+       p[0] = arg->frame_type;
+       p[1] = arg->rate;
+       if (arg->disable)
+               ((u16 *) p)[1] = 0;
+       else
+               ((u16 *) p)[1] = __cpu_to_le16(arg->skb->len - 4);
+       ret = wsm_write_mib(hw_priv, WSM_MIB_ID_TEMPLATE_FRAME, p,
+                           arg->skb->len, if_id);
+       skb_pull(arg->skb, 4);
+       return ret;
+}
+
+
+struct wsm_protected_mgmt_policy {
+       bool protectedMgmtEnable;
+       bool unprotectedMgmtFramesAllowed;
+       bool encryptionForAuthFrame;
+};
+
+static inline int
+wsm_set_protected_mgmt_policy(struct xradio_common *hw_priv,
+                             struct wsm_protected_mgmt_policy *arg,
+                             int if_id)
+{
+       __le32 val = 0;
+       int ret;
+       if (arg->protectedMgmtEnable)
+               val |= __cpu_to_le32(BIT(0));
+       if (arg->unprotectedMgmtFramesAllowed)
+               val |= __cpu_to_le32(BIT(1));
+       if (arg->encryptionForAuthFrame)
+               val |= __cpu_to_le32(BIT(2));
+       ret = wsm_write_mib(hw_priv, WSM_MIB_ID_PROTECTED_MGMT_POLICY, &val,
+                           sizeof(val), if_id);
+       return ret;
+}
+
+static inline int wsm_set_block_ack_policy(struct xradio_common *hw_priv,
+                                          u8 blockAckTxTidPolicy,
+                                          u8 blockAckRxTidPolicy,
+                                          int if_id)
+{
+       struct {
+               u8 blockAckTxTidPolicy;
+               u8 reserved1;
+               u8 blockAckRxTidPolicy;
+               u8 reserved2;
+       } val = {
+               .blockAckTxTidPolicy = blockAckTxTidPolicy,
+               .blockAckRxTidPolicy = blockAckRxTidPolicy,
+       };
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_BLOCK_ACK_POLICY, &val,
+                            sizeof(val), if_id);
+}
+
+struct wsm_association_mode {
+       u8 flags;               /* WSM_ASSOCIATION_MODE_... */
+       u8 preambleType;        /* WSM_JOIN_PREAMBLE_... */
+       u8 greenfieldMode;      /* 1 for greenfield */
+       u8 mpduStartSpacing;
+       __le32 basicRateSet;
+};
+
+static inline int wsm_set_association_mode(struct xradio_common *hw_priv,
+                                          struct wsm_association_mode *arg,
+                                          int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_ASSOCIATION_MODE, arg,
+                            sizeof(*arg), if_id);
+}
+
+struct wsm_set_tx_rate_retry_policy_header {
+       u8 numTxRatePolicies;
+       u8 reserved[3];
+} __packed;
+
+struct wsm_set_tx_rate_retry_policy_policy {
+       u8 policyIndex;
+       u8 shortRetryCount;
+       u8 longRetryCount;
+       u8 policyFlags;
+       u8 rateRecoveryCount;
+       u8 reserved[3];
+       __le32 rateCountIndices[3];
+} __packed;
+
+struct wsm_set_tx_rate_retry_policy {
+       struct wsm_set_tx_rate_retry_policy_header hdr;
+       struct wsm_set_tx_rate_retry_policy_policy tbl[8];
+} __packed;
+
+static inline int wsm_set_tx_rate_retry_policy(struct xradio_common *hw_priv,
+                               struct wsm_set_tx_rate_retry_policy *arg,
+                               int if_id)
+{
+       size_t size = sizeof(struct wsm_set_tx_rate_retry_policy_header) +
+           arg->hdr.numTxRatePolicies *
+           sizeof(struct wsm_set_tx_rate_retry_policy_policy);
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_TX_RATE_RETRY_POLICY, arg,
+                            size, if_id);
+}
+
+/* 4.32 SetEtherTypeDataFrameFilter */
+struct wsm_ether_type_filter_hdr {
+       u8 nrFilters;           /* Up to WSM_MAX_FILTER_ELEMENTS */
+       u8 reserved[3];
+} __packed;
+
+struct wsm_ether_type_filter {
+       u8 filterAction;        /* WSM_FILTER_ACTION_XXX */
+       u8 reserved;
+       __le16 etherType;       /* Type of ethernet frame */
+} __packed;
+
+static inline int wsm_set_ether_type_filter(struct xradio_common *hw_priv,
+                               struct wsm_ether_type_filter_hdr *arg,
+                               int if_id)
+{
+       size_t size = sizeof(struct wsm_ether_type_filter_hdr) +
+               arg->nrFilters * sizeof(struct wsm_ether_type_filter);
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_ETHERTYPE_DATAFRAME_FILTER,
+               arg, size, if_id);
+}
+
+
+/* 4.33 SetUDPPortDataFrameFilter */
+struct wsm_udp_port_filter_hdr {
+       u8 nrFilters;           /* Up to WSM_MAX_FILTER_ELEMENTS */
+       u8 reserved[3];
+} __packed;
+
+struct wsm_udp_port_filter {
+       u8 filterAction;        /* WSM_FILTER_ACTION_XXX */
+       u8 portType;            /* WSM_FILTER_PORT_TYPE_XXX */
+       __le16 udpPort;         /* Port number */
+} __packed;
+
+static inline int wsm_set_udp_port_filter(struct xradio_common *hw_priv,
+                               struct wsm_udp_port_filter_hdr *arg,
+                               int if_id)
+{
+       size_t size = sizeof(struct wsm_udp_port_filter_hdr) +
+               arg->nrFilters * sizeof(struct wsm_udp_port_filter);
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_UDPPORT_DATAFRAME_FILTER,
+               arg, size, if_id);
+}
+
+/* Undocumented MIBs: */
+/* 4.35 P2PDeviceInfo */
+#define D11_MAX_SSID_LEN               (32)
+
+struct wsm_p2p_device_type {
+       __le16 categoryId;
+       u8 oui[4];
+       __le16 subCategoryId;
+} __packed;
+
+struct wsm_p2p_device_info {
+       struct wsm_p2p_device_type primaryDevice;
+       u8 reserved1[3];
+       u8 devNameSize;
+       u8 localDevName[D11_MAX_SSID_LEN];
+       u8 reserved2[3];
+       u8 numSecDevSupported;
+       struct wsm_p2p_device_type secondaryDevices[0];
+} __packed;
+
+/* 4.36 SetWCDMABand - WO */
+struct wsm_cdma_band {
+       u8 WCDMA_Band;
+       u8 reserved[3];
+} __packed;
+
+/* 4.37 GroupTxSequenceCounter - RO */
+struct wsm_group_tx_seq {
+       __le32 bits_47_16;
+       __le16 bits_15_00;
+       __le16 reserved;
+} __packed;
+
+/* 4.39 SetHtProtection - WO */
+#define WSM_DUAL_CTS_PROT_ENB          (1 << 0)
+#define WSM_NON_GREENFIELD_STA         PRESENT(1 << 1)
+#define WSM_HT_PROT_MODE__NO_PROT      (0 << 2)
+#define WSM_HT_PROT_MODE__NON_MEMBER   (1 << 2)
+#define WSM_HT_PROT_MODE__20_MHZ       (2 << 2)
+#define WSM_HT_PROT_MODE__NON_HT_MIXED (3 << 2)
+#define WSM_LSIG_TXOP_PROT_FULL                (1 << 4)
+#define WSM_LARGE_L_LENGTH_PROT                (1 << 5)
+
+struct wsm_ht_protection {
+       __le32 flags;
+} __packed;
+
+/* 4.40 GPIO Command - R/W */
+#define WSM_GPIO_COMMAND_SETUP 0
+#define WSM_GPIO_COMMAND_READ  1
+#define WSM_GPIO_COMMAND_WRITE 2
+#define WSM_GPIO_COMMAND_RESET 3
+#define WSM_GPIO_ALL_PINS      0xFF
+
+struct wsm_gpio_command {
+       u8 GPIO_Command;
+       u8 pin;
+       __le16 config;
+} __packed;
+
+/* 4.41 TSFCounter - RO */
+struct wsm_tsf_counter {
+       __le64 TSF_Counter;
+} __packed;
+
+/* 4.43 Keep alive period */
+struct wsm_keep_alive_period {
+       __le16 keepAlivePeriod;
+       u8 reserved[2];
+} __packed;
+
+static inline int wsm_keep_alive_period(struct xradio_common *hw_priv,
+                                       int period, int if_id)
+{
+       struct wsm_keep_alive_period arg = {
+               .keepAlivePeriod = __cpu_to_le16(period),
+       };
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_KEEP_ALIVE_PERIOD,
+                       &arg, sizeof(arg), if_id);
+};
+
+/* BSSID filtering */
+struct wsm_set_bssid_filtering {
+       u8 filter;
+       u8 reserved[3];
+} __packed;
+
+static inline int wsm_set_bssid_filtering(struct xradio_common *hw_priv,
+                                         bool enabled, int if_id)
+{
+       struct wsm_set_bssid_filtering arg = {
+               .filter = !enabled,
+       };
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_DISABLE_BSSID_FILTER,
+                       &arg, sizeof(arg), if_id);
+}
+
+/* Multicat filtering - 4.5 */
+struct wsm_multicast_filter {
+       __le32 enable;
+       __le32 numOfAddresses;
+       u8 macAddress[WSM_MAX_GRP_ADDRTABLE_ENTRIES][ETH_ALEN];
+} __packed;
+
+/* Mac Addr Filter Info */
+struct wsm_mac_addr_info {
+       u8 filter_mode;
+       u8 address_mode;
+       u8 MacAddr[6];
+} __packed;
+
+/* Mac Addr Filter */
+struct wsm_mac_addr_filter {
+       u8 numfilter;
+       u8 action_mode;
+       u8 Reserved[2];
+       struct wsm_mac_addr_info macaddrfilter[0];
+} __packed;
+
+/* Broadcast Addr Filter */
+struct wsm_broadcast_addr_filter {
+       u8 action_mode;
+       u8 nummacaddr;
+       u8 filter_mode;
+       u8 address_mode;
+       u8 MacAddr[6];
+} __packed;
+
+static inline int wsm_set_multicast_filter(struct xradio_common *hw_priv,
+                                          struct wsm_multicast_filter *fp,
+                                          int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_DOT11_GROUP_ADDRESSES_TABLE,
+                            fp, sizeof(*fp), if_id);
+}
+
+/* ARP IPv4 filtering - 4.10 */
+struct wsm_arp_ipv4_filter {
+       __le32 enable;
+       __be32 ipv4Address[WSM_MAX_ARP_IP_ADDRTABLE_ENTRIES];
+} __packed;
+
+
+static inline int wsm_set_arp_ipv4_filter(struct xradio_common *hw_priv,
+                                         struct wsm_arp_ipv4_filter *fp,
+                                         int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_ARP_IP_ADDRESSES_TABLE,
+                           fp, sizeof(*fp), if_id);
+}
+
+/* P2P Power Save Mode Info - 4.31 */
+struct wsm_p2p_ps_modeinfo {
+       u8      oppPsCTWindow;
+       u8      count;
+       u8      reserved;
+       u8      dtimCount;
+       __le32  duration;
+       __le32  interval;
+       __le32  startTime;
+} __packed;
+
+static inline int wsm_set_p2p_ps_modeinfo(struct xradio_common *hw_priv,
+                                         struct wsm_p2p_ps_modeinfo *mi,
+                                         int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_P2P_PS_MODE_INFO,
+                            mi, sizeof(*mi), if_id);
+}
+
+static inline int wsm_get_p2p_ps_modeinfo(struct xradio_common *hw_priv,
+                                         struct wsm_p2p_ps_modeinfo *mi)
+{
+       return wsm_read_mib(hw_priv, WSM_MIB_ID_P2P_PS_MODE_INFO,
+                           mi, sizeof(*mi), 0);
+}
+
+/* UseMultiTxConfMessage */
+
+static inline int wsm_use_multi_tx_conf(struct xradio_common *hw_priv,
+                                       bool enabled, int if_id)
+{
+       __le32 arg = enabled ? __cpu_to_le32(1) : 0;
+
+       return wsm_write_mib(hw_priv, WSM_MIB_USE_MULTI_TX_CONF,
+                       &arg, sizeof(arg), if_id);
+}
+
+
+/* 4.26 SetUpasdInformation */
+struct wsm_uapsd_info {
+       __le16 uapsdFlags;
+       __le16 minAutoTriggerInterval;
+       __le16 maxAutoTriggerInterval;
+       __le16 autoTriggerStep;
+};
+
+static inline int wsm_set_uapsd_info(struct xradio_common *hw_priv,
+                                    struct wsm_uapsd_info *arg,
+                                    int if_id)
+{
+       /* TODO:COMBO:UAPSD will be supported only on one interface */
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_SET_UAPSD_INFORMATION,
+                               arg, sizeof(*arg), if_id);
+}
+
+/* 4.22 OverrideInternalTxRate */
+struct wsm_override_internal_txrate {
+       u8 internalTxRate;
+       u8 nonErpInternalTxRate;
+       u8 reserved[2];
+} __packed;
+
+static inline int
+wsm_set_override_internal_txrate(struct xradio_common *hw_priv,
+                                    struct wsm_override_internal_txrate *arg,
+                                    int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_OVERRIDE_INTERNAL_TX_RATE,
+                               arg, sizeof(*arg), if_id);
+}
+#ifdef MCAST_FWDING
+/* 4.51 SetForwardingOffload */
+struct wsm_forwarding_offload {
+       u8 fwenable;
+       u8 flags;
+       u8 reserved[2];
+} __packed;
+
+static inline int wsm_set_forwarding_offlad(struct xradio_common *hw_priv,
+                                    struct wsm_forwarding_offload *arg,int if_id)
+{
+       return wsm_write_mib(hw_priv, WSM_MIB_ID_FORWARDING_OFFLOAD,
+                               arg, sizeof(*arg),if_id);
+}
+
+#endif
+/* ******************************************************************** */
+/* WSM TX port control                                                 */
+
+void wsm_lock_tx(struct xradio_common *hw_priv);
+void wsm_vif_lock_tx(struct xradio_vif *priv);
+void wsm_lock_tx_async(struct xradio_common *hw_priv);
+bool wsm_flush_tx(struct xradio_common *hw_priv);
+bool wsm_vif_flush_tx(struct xradio_vif *priv);
+void wsm_unlock_tx(struct xradio_common *hw_priv);
+
+/* ******************************************************************** */
+/* WSM / BH API                                                                */
+
+int wsm_handle_exception(struct xradio_common *hw_priv, u8 * data, size_t len);
+int wsm_handle_rx(struct xradio_common *hw_priv, int id, struct wsm_hdr *wsm,
+                 struct sk_buff **skb_p);
+void wms_send_deauth_to_self(struct xradio_common *hw_priv, struct xradio_vif *priv);
+void wms_send_disassoc_to_self(struct xradio_common *hw_priv, struct xradio_vif *priv);
+
+/* ******************************************************************** */
+/* wsm_buf API                                                         */
+
+struct wsm_buf {
+       u8 *begin;
+       u8 *data;
+       u8 *end;
+};
+
+void wsm_buf_init(struct wsm_buf *buf);
+void wsm_buf_deinit(struct wsm_buf *buf);
+
+/* ******************************************************************** */
+/* wsm_cmd API                                                         */
+
+struct wsm_cmd {
+       spinlock_t lock;
+       int done;
+       u8 *ptr;
+       size_t len;
+       void *arg;
+       int ret;
+       u16 cmd;
+};
+
+/* ******************************************************************** */
+/* WSM TX buffer access                                                        */
+
+int wsm_get_tx(struct xradio_common *hw_priv, u8 **data,
+              size_t *tx_len, int *burst, int *vif_selected);
+void wsm_txed(struct xradio_common *hw_priv, u8 *data);
+
+/* ******************************************************************** */
+/* Queue mapping: WSM <---> linux                                      */
+/* Linux: VO VI BE BK                                                  */
+/* WSM:   BE BK VI VO                                                  */
+
+static inline u8 wsm_queue_id_to_linux(u8 queueId)
+{
+       static const u8 queue_mapping[] = {
+               2, 3, 1, 0
+       };
+       return queue_mapping[queueId];
+}
+
+static inline u8 wsm_queue_id_to_wsm(u8 queueId)
+{
+       static const u8 queue_mapping[] = {
+               3, 2, 0, 1
+       };
+       return queue_mapping[queueId];
+}
+
+#endif /* XRADIO_HWIO_H_INCLUDED */
diff --git a/drivers/net/wireless/xradio/xradio.h b/drivers/net/wireless/xradio/xradio.h
new file mode 100644 (file)
index 0000000..d565db0
--- /dev/null
@@ -0,0 +1,577 @@
+/*
+ * Common define of private data for XRadio drivers
+ *
+ * Copyright (c) 2013, XRadio
+ * Author: XRadio
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+#ifndef XRADIO_H
+#define XRADIO_H
+
+#include <linux/wait.h>
+#include <linux/mutex.h>
+#include <linux/workqueue.h>
+#include <linux/sched.h>
+#include <linux/atomic.h>
+#include <net/mac80211.h>
+
+//Macroses for Driver parameters.
+#define XRWL_MAX_QUEUE_SZ    (128)
+#define AC_QUEUE_NUM           4
+
+#define XRWL_MAX_VIFS        (2)
+#define XRWL_GENERIC_IF_ID   (2)
+#define XRWL_HOST_VIF0_11N_THROTTLE   (58)  //(XRWL_MAX_QUEUE_SZ/(XRWL_MAX_VIFS-1))*0.9
+#define XRWL_HOST_VIF1_11N_THROTTLE   (58)  //(XRWL_MAX_QUEUE_SZ/(XRWL_MAX_VIFS-1))*0.9
+#define XRWL_HOST_VIF0_11BG_THROTTLE  (35)  //XRWL_HOST_VIF0_11N_THROTTLE*0.6 = 35
+#define XRWL_HOST_VIF1_11BG_THROTTLE  (35)  //XRWL_HOST_VIF0_11N_THROTTLE*0.6 = 35
+#if 0
+#define XRWL_FW_VIF0_THROTTLE         (15)
+#define XRWL_FW_VIF1_THROTTLE         (15)
+#endif
+
+#define IEEE80211_FCTL_WEP      0x4000
+#define IEEE80211_QOS_DATAGRP   0x0080
+#define WSM_KEY_MAX_IDX         20
+
+#include "queue.h"
+#include "wsm.h"
+#include "scan.h"
+#include "tx.h"
+#include "ht.h"
+#include "pm.h"
+#include "fwio.h"
+
+/* #define ROC_DEBUG */
+/* hidden ssid is only supported when separate probe resp IE
+   configuration is supported */
+#ifdef PROBE_RESP_EXTRA_IE
+#define HIDDEN_SSID   1
+#endif
+
+#define XRADIO_MAX_CTRL_FRAME_LEN  (0x1000)
+
+#define MAX_STA_IN_AP_MODE         (14)
+#define WLAN_LINK_ID_MAX           (MAX_STA_IN_AP_MODE + 3)
+
+#define XRADIO_MAX_STA_IN_AP_MODE   (5)
+#define XRADIO_MAX_REQUEUE_ATTEMPTS (5)
+#define XRADIO_LINK_ID_UNMAPPED     (15)
+#define XRADIO_MAX_TID              (8)
+
+#define XRADIO_TX_BLOCK_ACK_ENABLED_FOR_ALL_TID    (0x3F)
+#define XRADIO_RX_BLOCK_ACK_ENABLED_FOR_ALL_TID    (0x3F)
+#define XRADIO_RX_BLOCK_ACK_ENABLED_FOR_BE_TID \
+       (XRADIO_TX_BLOCK_ACK_ENABLED_FOR_ALL_TID & 0x01)
+#define XRADIO_TX_BLOCK_ACK_DISABLED_FOR_ALL_TID   (0)
+#define XRADIO_RX_BLOCK_ACK_DISABLED_FOR_ALL_TID   (0)
+
+#define XRADIO_BLOCK_ACK_CNT    (30)
+#define XRADIO_BLOCK_ACK_THLD   (800)
+#define XRADIO_BLOCK_ACK_HIST   (3)
+#define XRADIO_BLOCK_ACK_INTERVAL      (1 * HZ / XRADIO_BLOCK_ACK_HIST)
+#define XRWL_ALL_IFS           (-1)
+
+#ifdef ROAM_OFFLOAD
+#define XRADIO_SCAN_TYPE_ACTIVE 0x1000
+#define XRADIO_SCAN_BAND_5G     0x2000
+#endif /*ROAM_OFFLOAD*/
+
+#define IEEE80211_FCTL_WEP      0x4000
+#define IEEE80211_QOS_DATAGRP   0x0080
+
+#ifdef MCAST_FWDING
+#define WSM_MAX_BUF            30
+#endif
+
+#define MAX_RATES_STAGE   8   //
+#define MAX_RATES_RETRY   15
+
+#define XRADIO_WORKQUEUE   "xradio_wq"
+#define WIFI_CONF_PATH    "/data/xr_wifi.conf"
+
+/* extern */ struct task_struct;
+/* extern */ struct xradio_debug_priv;
+/* extern */ struct xradio_debug_common;
+/* extern */ struct firmware;
+
+/* Please keep order */
+enum xradio_join_status {
+       XRADIO_JOIN_STATUS_PASSIVE = 0,
+       XRADIO_JOIN_STATUS_MONITOR,
+       XRADIO_JOIN_STATUS_STA,
+       XRADIO_JOIN_STATUS_AP,
+};
+
+enum xradio_link_status {
+       XRADIO_LINK_OFF,
+       XRADIO_LINK_RESERVE,
+       XRADIO_LINK_SOFT,
+       XRADIO_LINK_HARD,
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       XRADIO_LINK_RESET,
+       XRADIO_LINK_RESET_REMAP,
+#endif
+};
+
+enum xradio_bss_loss_status {
+       XRADIO_BSS_LOSS_NONE,
+       XRADIO_BSS_LOSS_CHECKING,
+       XRADIO_BSS_LOSS_CONFIRMING,
+       XRADIO_BSS_LOSS_CONFIRMED,
+};
+
+struct xradio_link_entry {
+       unsigned long                   timestamp;
+       enum xradio_link_status         status;
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       enum xradio_link_status         prev_status;
+#endif
+       u8                              mac[ETH_ALEN];
+       u8                              buffered[XRADIO_MAX_TID];
+       struct sk_buff_head             rx_queue;
+};
+
+#if defined(ROAM_OFFLOAD)
+struct xradio_testframe {
+       u8 len;
+       u8 *data;
+};
+#endif
+
+struct xradio_common {
+       struct xradio_debug_common      *debug;
+       struct xradio_queue             tx_queue[AC_QUEUE_NUM];
+       struct xradio_queue_stats       tx_queue_stats;
+
+       struct ieee80211_hw             *hw;
+       struct mac_address              addresses[XRWL_MAX_VIFS];
+
+       /*Will be a pointer to a list of VIFs - Dynamically allocated */
+       struct ieee80211_vif            *vif_list[XRWL_MAX_VIFS];
+       atomic_t                        num_vifs;
+       spinlock_t                      vif_list_lock;
+       u32                             if_id_slot;
+       struct device                   *pdev;
+       struct workqueue_struct         *workqueue;
+
+       struct mutex                    conf_mutex;
+
+       struct sdio_func                *sdio_func;
+       int                     driver_ready;
+
+       /* HW/FW type (HIF_...) */
+       int                             hw_type;
+       int                             hw_revision;
+       int                             fw_revision;
+
+       /* firmware/hardware info */
+       unsigned int tx_hdr_len;
+
+       /* Radio data */
+       int output_power;
+       int noise;
+
+       /* calibration, output power limit and rssi<->dBm conversation data */
+
+       /* BBP/MAC state */
+       const struct firmware           *sdd;
+       struct ieee80211_rate           *rates;
+       struct ieee80211_rate           *mcs_rates;
+       u8 mac_addr[ETH_ALEN];
+       /*TODO:COMBO: To be made per VIFF after mac80211 support */
+       struct ieee80211_channel        *channel;
+       int                             channel_switch_in_progress;
+       wait_queue_head_t               channel_switch_done;
+       u8        channel_changed;   //add by yangfh 2015-5-15 16:57:38.
+       u8                              long_frame_max_tx_count;
+       u8                              short_frame_max_tx_count;
+       /* TODO:COMBO: According to Hong aggregation will happen per VIFF.
+       * Keeping in common structure for the time being. Will be moved to VIFF
+       * after the mechanism is clear */
+       u8                              ba_tid_mask;
+       int                             ba_acc; /*TODO: Same as above */
+       int                             ba_cnt; /*TODO: Same as above */
+       int                             ba_cnt_rx; /*TODO: Same as above */
+       int                             ba_acc_rx; /*TODO: Same as above */
+       int                             ba_hist; /*TODO: Same as above */
+       struct timer_list               ba_timer;/*TODO: Same as above */
+       spinlock_t                      ba_lock; /*TODO: Same as above */
+       bool                            ba_ena; /*TODO: Same as above */
+       struct work_struct              ba_work; /*TODO: Same as above */
+       struct xradio_pm_state          pm_state;
+       bool                            is_BT_Present;
+       bool                            is_go_thru_go_neg;
+       u8                              conf_listen_interval;
+
+       /* BH */
+       atomic_t                        bh_tx;
+       atomic_t                        bh_term;
+       atomic_t                        bh_suspend;
+       struct task_struct              *bh_thread;
+       int                             bh_error;
+       wait_queue_head_t               bh_wq;
+       wait_queue_head_t               bh_evt_wq;
+
+
+       int                             buf_id_tx;      /* byte */
+       int                             buf_id_rx;      /* byte */
+       int                             wsm_rx_seq;     /* byte */
+       int                             wsm_tx_seq;     /* byte */
+       int                             hw_bufs_used;
+       int                             hw_bufs_used_vif[XRWL_MAX_VIFS];
+       struct sk_buff                  *skb_cache;
+       struct sk_buff                  *skb_reserved;
+       int                                              skb_resv_len;
+       bool                            powersave_enabled;
+       bool                            device_can_sleep;
+       /* Keep xradio awake (WUP = 1) 1 second after each scan to avoid
+        * FW issue with sleeping/waking up. */
+       atomic_t                        recent_scan;
+       long                    connet_time[XRWL_MAX_VIFS];
+#ifdef CONFIG_XRADIO_SUSPEND_POWER_OFF
+       atomic_t            suspend_state;
+#endif
+
+       /* WSM */
+       struct wsm_caps                 wsm_caps;
+       struct mutex                    wsm_cmd_mux;
+       struct wsm_buf                  wsm_cmd_buf;
+       struct wsm_cmd                  wsm_cmd;
+       wait_queue_head_t               wsm_cmd_wq;
+       wait_queue_head_t               wsm_startup_done;
+       struct semaphore                tx_lock_sem;
+       atomic_t                                tx_lock;
+       u32                             pending_frame_id;
+
+       /* WSM debug */
+       u32                 query_packetID;
+       atomic_t            query_cnt;
+       struct work_struct  query_work; /* for query packet */
+
+       /* Scan status */
+       struct xradio_scan scan;
+
+       /* TX/RX */
+       unsigned long           rx_timestamp;
+
+       /* WSM events */
+       spinlock_t              event_queue_lock;
+       struct list_head        event_queue;
+       struct work_struct      event_handler;
+
+       /* TX rate policy cache */
+       struct tx_policy_cache tx_policy_cache;
+       struct work_struct tx_policy_upload_work;
+       atomic_t upload_count;
+
+       /* cryptographic engine information */
+
+       /* bit field of glowing LEDs */
+       u16 softled_state;
+
+       /* statistics */
+       struct ieee80211_low_level_stats stats;
+
+       struct xradio_ht_oper           ht_oper;
+       int                             tx_burst_idx;
+
+       struct ieee80211_iface_limit            if_limits1[2];
+       struct ieee80211_iface_limit            if_limits2[2];
+       struct ieee80211_iface_limit            if_limits3[2];
+       struct ieee80211_iface_combination      if_combs[3];
+
+       struct mutex                    wsm_oper_lock;
+       struct delayed_work             rem_chan_timeout;
+       atomic_t                        remain_on_channel;
+       int                             roc_if_id;
+       u64                             roc_cookie;
+       wait_queue_head_t               offchannel_wq;
+       u16                             offchannel_done;
+       u16                             prev_channel;
+       int       if_id_selected;
+       u32                             key_map;
+       struct wsm_add_key              keys[WSM_KEY_MAX_INDEX + 1];
+#ifdef MCAST_FWDING
+       struct wsm_buf          wsm_release_buf[WSM_MAX_BUF];
+       u8                      buf_released;
+#endif 
+#ifdef ROAM_OFFLOAD
+       u8                              auto_scanning;
+       u8                              frame_rcvd;
+       u8                              num_scanchannels;
+       u8                              num_2g_channels;
+       u8                              num_5g_channels;
+       struct wsm_scan_ch              scan_channels[48];
+       struct sk_buff                  *beacon;
+       struct sk_buff                  *beacon_bkp;
+       struct xradio_testframe         testframe;
+#endif /*ROAM_OFFLOAD*/
+
+       u8          connected_sta_cnt;
+       u16                     vif0_throttle;
+       u16                     vif1_throttle;
+};
+
+/* Virtual Interface State. One copy per VIF */
+struct xradio_vif {
+       atomic_t                        enabled;
+       spinlock_t                      vif_lock;
+       int                             if_id;
+       /*TODO: Split into Common and VIF parts */
+       struct xradio_debug_priv        *debug;
+       /* BBP/MAC state */
+       u8 bssid[ETH_ALEN];
+       struct wsm_edca_params          edca;
+       struct wsm_tx_queue_params      tx_queue_params;
+       struct wsm_association_mode     association_mode;
+       struct wsm_set_bss_params       bss_params;
+       struct wsm_set_pm               powersave_mode;
+       struct wsm_set_pm               firmware_ps_mode;
+       int                             power_set_true;
+       int                             user_power_set_true;
+       u8                              user_pm_mode;
+       int                             cqm_rssi_thold;
+       unsigned                        cqm_rssi_hyst;
+       unsigned                        cqm_tx_failure_thold;
+       unsigned                        cqm_tx_failure_count;
+       bool                            cqm_use_rssi;
+       int                             cqm_link_loss_count;
+       int                             cqm_beacon_loss_count;
+       int                             mode;
+       bool                            enable_beacon;
+       int                             beacon_int;
+       size_t                          ssid_length;
+       u8                              ssid[IEEE80211_MAX_SSID_LEN];
+#ifdef HIDDEN_SSID
+       bool                            hidden_ssid;
+#endif
+       bool                            listening;
+       struct wsm_rx_filter            rx_filter;
+       struct wsm_beacon_filter_table  bf_table;
+       struct wsm_beacon_filter_control bf_control;
+       struct wsm_multicast_filter     multicast_filter;
+       bool                            has_multicast_subscription;
+       struct wsm_broadcast_addr_filter        broadcast_filter;
+       bool                            disable_beacon_filter;
+       struct wsm_arp_ipv4_filter      filter4;
+       struct work_struct              update_filtering_work;
+       struct work_struct              set_beacon_wakeup_period_work;
+       struct xradio_pm_state_vif      pm_state_vif;
+       /*TODO: Add support in mac80211 for psmode info per VIF */
+       struct wsm_p2p_ps_modeinfo      p2p_ps_modeinfo;
+       struct wsm_uapsd_info           uapsd_info;
+       bool                            setbssparams_done;
+       u32                             listen_interval;
+       u32                             erp_info;
+       bool                            powersave_enabled;
+
+       /* WSM Join */
+       enum xradio_join_status join_status;
+       u8                      join_bssid[ETH_ALEN];
+       struct work_struct      join_work;
+       struct delayed_work     join_timeout;
+       struct work_struct      unjoin_work;
+       struct work_struct      offchannel_work;
+       int                     join_dtim_period;
+       atomic_t        delayed_unjoin;
+
+       /* Security */
+       s8                      wep_default_key_id;
+       struct work_struct      wep_key_work;
+        unsigned long           rx_timestamp;
+        u32                     cipherType;
+
+
+       /* AP powersave */
+       u32                     link_id_map;
+       u32                     max_sta_ap_mode;
+       u32                     link_id_after_dtim;
+       u32                     link_id_uapsd;
+       u32                     link_id_max;
+       u32                     wsm_key_max_idx;
+       struct xradio_link_entry link_id_db[MAX_STA_IN_AP_MODE];
+       struct work_struct      link_id_work;
+       struct delayed_work     link_id_gc_work;
+       u32                     sta_asleep_mask;
+       u32                     pspoll_mask;
+       bool                    aid0_bit_set;
+       spinlock_t              ps_state_lock;
+       bool                    buffered_multicasts;
+       bool                    tx_multicast;
+       u8     last_tim[8];   //for softap dtim, add by yangfh
+       struct work_struct      set_tim_work;
+       struct delayed_work     set_cts_work;
+       struct work_struct      multicast_start_work;
+       struct work_struct      multicast_stop_work;
+       struct timer_list       mcast_timeout;
+
+       /* CQM Implementation */
+       struct delayed_work     bss_loss_work;
+       struct delayed_work     connection_loss_work;
+       struct work_struct      tx_failure_work;
+       int                     delayed_link_loss;
+       spinlock_t              bss_loss_lock;
+       int                     bss_loss_status;
+       int                     bss_loss_confirm_id;
+
+       struct ieee80211_vif    *vif;
+       struct xradio_common    *hw_priv;
+       struct ieee80211_hw     *hw;
+
+       /* ROC implementation */
+       struct delayed_work             pending_offchanneltx_work;
+#if defined(CONFIG_XRADIO_USE_EXTENSIONS)
+       /* Workaround for WFD testcase 6.1.10*/
+       struct work_struct      linkid_reset_work;
+       u8                      action_frame_sa[ETH_ALEN];
+       u8                      action_linkid;
+#endif
+       bool                    htcap;
+#ifdef  AP_HT_CAP_UPDATE
+        u16                     ht_oper;
+        struct work_struct      ht_oper_update_work;
+#endif
+
+#ifdef AP_HT_COMPAT_FIX
+       u16    ht_compat_cnt;
+       u16    ht_compat_det;
+#endif
+};
+struct xradio_sta_priv {
+       int link_id;
+       struct xradio_vif *priv;
+};
+enum xradio_data_filterid {
+       IPV4ADDR_FILTER_ID = 0,
+};
+
+/* Datastructure for LLC-SNAP HDR */
+#define P80211_OUI_LEN  3
+struct ieee80211_snap_hdr {
+        u8    dsap;   /* always 0xAA */
+        u8    ssap;   /* always 0xAA */
+        u8    ctrl;   /* always 0x03 */
+        u8    oui[P80211_OUI_LEN];    /* organizational universal id */
+} __packed;
+
+
+#ifdef TES_P2P_0002_ROC_RESTART
+extern s32  TES_P2P_0002_roc_dur;
+extern s32  TES_P2P_0002_roc_sec;
+extern s32  TES_P2P_0002_roc_usec;
+extern u32  TES_P2P_0002_packet_id;
+extern u32  TES_P2P_0002_state;
+
+#define TES_P2P_0002_STATE_IDLE       0x00
+#define TES_P2P_0002_STATE_SEND_RESP  0x01
+#define TES_P2P_0002_STATE_GET_PKTID  0x02
+#endif
+
+/* debug.h must be here because refer to struct xradio_vif and 
+   struct xradio_common.*/
+#include "debug.h"
+
+/*******************************************************
+ interfaces for operations of vif.
+********************************************************/
+static inline
+struct xradio_common *xrwl_vifpriv_to_hwpriv(struct xradio_vif *priv)
+{
+       return priv->hw_priv;
+}
+static inline
+struct xradio_vif *xrwl_get_vif_from_ieee80211(struct ieee80211_vif *vif)
+{
+       return  (struct xradio_vif *)vif->drv_priv;
+}
+
+static inline
+struct xradio_vif *xrwl_hwpriv_to_vifpriv(struct xradio_common *hw_priv,
+                                               int if_id)
+{
+       struct xradio_vif *vif;
+
+       if (WARN_ON((-1 == if_id) || (if_id > XRWL_MAX_VIFS)))
+               return NULL;
+       /* TODO:COMBO: During scanning frames can be received
+        * on interface ID 3 */
+       spin_lock(&hw_priv->vif_list_lock);
+       if (!hw_priv->vif_list[if_id]) {
+               spin_unlock(&hw_priv->vif_list_lock);
+               return NULL;
+       }
+
+       vif = xrwl_get_vif_from_ieee80211(hw_priv->vif_list[if_id]);
+       WARN_ON(!vif);
+       if (vif)
+               spin_lock(&vif->vif_lock);
+       spin_unlock(&hw_priv->vif_list_lock);
+       return vif;
+}
+
+static inline
+struct xradio_vif *__xrwl_hwpriv_to_vifpriv(struct xradio_common *hw_priv,
+                                             int if_id)
+{
+       WARN_ON((-1 == if_id) || (if_id > XRWL_MAX_VIFS));
+       /* TODO:COMBO: During scanning frames can be received
+        * on interface ID 3 */
+       if (!hw_priv->vif_list[if_id]) {
+               return NULL;
+       }
+
+       return xrwl_get_vif_from_ieee80211(hw_priv->vif_list[if_id]);
+}
+
+static inline
+struct xradio_vif *xrwl_get_activevif(struct xradio_common *hw_priv)
+{
+       return xrwl_hwpriv_to_vifpriv(hw_priv, ffs(hw_priv->if_id_slot)-1);
+}
+
+static inline bool is_hardware_xradio(struct xradio_common *hw_priv)
+{
+       return (hw_priv->hw_revision == XR819_HW_REV0);
+}
+
+static inline int xrwl_get_nr_hw_ifaces(struct xradio_common *hw_priv)
+{
+       switch(hw_priv->hw_revision) {
+               case XR819_HW_REV0:
+               default:
+                       return 1;
+       }
+}
+
+#define xradio_for_each_vif(_hw_priv, _priv, _i)                       \
+       for(            \
+               _i = 0;                                                          \
+               (_i < XRWL_MAX_VIFS)                              \
+               && ((_priv = _hw_priv->vif_list[_i] ?                    \
+               xrwl_get_vif_from_ieee80211(_hw_priv->vif_list[_i]) : NULL),1);  \
+               _i++             \
+       )
+
+/*******************************************************
+ interfaces for operations of queue.
+********************************************************/
+static inline void xradio_tx_queues_lock(struct xradio_common *hw_priv)
+{
+       int i;
+       for (i = 0; i < 4; ++i)
+               xradio_queue_lock(&hw_priv->tx_queue[i]);
+}
+
+static inline void xradio_tx_queues_unlock(struct xradio_common *hw_priv)
+{
+       int i;
+       for (i = 0; i < 4; ++i)
+               xradio_queue_unlock(&hw_priv->tx_queue[i]);
+}
+
+#endif /* XRADIO_H */