/*
 * This file is part of wl1271
 *
 * Copyright (C) 2008-2010 Nokia Corporation
 *
 * Contact: Luciano Coelho <luciano.coelho@nokia.com>
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * version 2 as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
 * 02110-1301 USA
 *
 */

#include <linux/module.h>
#include <linux/firmware.h>
#include <linux/delay.h>
#include <linux/spi/spi.h>
#include <linux/crc32.h>
#include <linux/etherdevice.h>
#include <linux/vmalloc.h>
#include <linux/platform_device.h>
#include <linux/slab.h>
#include <linux/wl12xx.h>
#include <linux/sched.h>
#include <linux/interrupt.h>

#include "wlcore.h"
#include "debug.h"
#include "wl12xx_80211.h"
#include "io.h"
#include "event.h"
#include "tx.h"
#include "rx.h"
#include "ps.h"
#include "init.h"
#include "debugfs.h"
#include "cmd.h"
#include "boot.h"
#include "testmode.h"
#include "scan.h"
#include "hw_ops.h"

#define WL1271_BOOT_RETRIES 3

#define WL1271_BOOT_RETRIES 3

static char *fwlog_param;
static bool bug_on_recovery;
static bool no_recovery;

static void __wl1271_op_remove_interface(struct wl1271 *wl,
                                         struct ieee80211_vif *vif,
                                         bool reset_tx_queues);
static void wl1271_op_stop(struct ieee80211_hw *hw);
static void wl1271_free_ap_keys(struct wl1271 *wl, struct wl12xx_vif *wlvif);

static int wl12xx_set_authorized(struct wl1271 *wl,
                                 struct wl12xx_vif *wlvif)
{
        int ret;

        if (WARN_ON(wlvif->bss_type != BSS_TYPE_STA_BSS))
                return -EINVAL;

        if (!test_bit(WLVIF_FLAG_STA_ASSOCIATED, &wlvif->flags))
                return 0;

        if (test_and_set_bit(WLVIF_FLAG_STA_STATE_SENT, &wlvif->flags))
                return 0;

        ret = wl12xx_cmd_set_peer_state(wl, wlvif->sta.hlid);
        if (ret < 0)
                return ret;

        wl12xx_croc(wl, wlvif->role_id);

        wl1271_info("Association completed.");
        return 0;
}

static int wl1271_reg_notify(struct wiphy *wiphy,
                             struct regulatory_request *request)
{
        struct ieee80211_supported_band *band;
        struct ieee80211_channel *ch;
        int i;

        band = wiphy->bands[IEEE80211_BAND_5GHZ];
        for (i = 0; i < band->n_channels; i++) {
                ch = &band->channels[i];
                if (ch->flags & IEEE80211_CHAN_DISABLED)
                        continue;

                if (ch->flags & IEEE80211_CHAN_RADAR)
                        ch->flags |= IEEE80211_CHAN_NO_IBSS |
                                     IEEE80211_CHAN_PASSIVE_SCAN;

        }

        return 0;
}

static int wl1271_set_rx_streaming(struct wl1271 *wl, struct wl12xx_vif *wlvif,
                                   bool enable)
{
        int ret = 0;

        /* we should hold wl->mutex */
        ret = wl1271_acx_ps_rx_streaming(wl, wlvif, enable);
        if (ret < 0)
                goto out;

        if (enable)
                set_bit(WLVIF_FLAG_RX_STREAMING_STARTED, &wlvif->flags);
        else
                clear_bit(WLVIF_FLAG_RX_STREAMING_STARTED, &wlvif->flags);
out:
        return ret;
}

/*
 * this function is being called when the rx_streaming interval
 * has beed changed or rx_streaming should be disabled
 */
int wl1271_recalc_rx_streaming(struct wl1271 *wl, struct wl12xx_vif *wlvif)
{
        int ret = 0;
        int period = wl->conf.rx_streaming.interval;

        /* don't reconfigure if rx_streaming is disabled */
        if (!test_bit(WLVIF_FLAG_RX_STREAMING_STARTED, &wlvif->flags))
                goto out;

        /* reconfigure/disable according to new streaming_period */
        if (period &&
            test_bit(WLVIF_FLAG_STA_ASSOCIATED, &wlvif->flags) &&
            (wl->conf.rx_streaming.always ||
             test_bit(WL1271_FLAG_SOFT_GEMINI, &wl->flags)))
                ret = wl1271_set_rx_streaming(wl, wlvif, true);
        else {
                ret = wl1271_set_rx_streaming(wl, wlvif, false);
                /* don't cancel_work_sync since we might deadlock */
                del_timer_sync(&wlvif->rx_streaming_timer);
        }
out:
        return ret;
}

static void wl1271_rx_streaming_enable_work(struct work_struct *work)
{
        int ret;
        struct wl12xx_vif *wlvif = container_of(work, struct wl12xx_vif,
                                                rx_streaming_enable_work);
        struct wl1271 *wl = wlvif->wl;

        mutex_lock(&wl->mutex);

        if (test_bit(WLVIF_FLAG_RX_STREAMING_STARTED, &wlvif->flags) ||
            !test_bit(WLVIF_FLAG_STA_ASSOCIATED, &wlvif->flags) ||
            (!wl->conf.rx_streaming.always &&
             !test_bit(WL1271_FLAG_SOFT_GEMINI, &wl->flags)))
                goto out;

        if (!wl->conf.rx_streaming.interval)
                goto out;

        ret = wl1271_ps_elp_wakeup(wl);
        if (ret < 0)
                goto out;

        ret = wl1271_set_rx_streaming(wl, wlvif, true);
        if (ret < 0)
                goto out_sleep;

        /* stop it after some time of inactivity */
        mod_timer(&wlvif->rx_streaming_timer,
                  jiffies + msecs_to_jiffies(wl->conf.rx_streaming.duration));

out_sleep:
        wl1271_ps_elp_sleep(wl);
out:
        mutex_unlock(&wl->mutex);
}

static void wl1271_rx_streaming_disable_work(struct work_struct *work)
{
        int ret;
        struct wl12xx_vif *wlvif = container_of(work, struct wl12xx_vif,
                                                rx_streaming_disable_work);
        struct wl1271 *wl = wlvif->wl;

        mutex_lock(&wl->mutex);

        if (!test_bit(WLVIF_FLAG_RX_STREAMING_STARTED, &wlvif->flags))
                goto out;

        ret = wl1271_ps_elp_wakeup(wl);
        if (ret < 0)
                goto out;

        ret = wl1271_set_rx_streaming(wl, wlvif, false);
        if (ret)
                goto out_sleep;

out_sleep:
        wl1271_ps_elp_sleep(wl);
out:
        mutex_unlock(&wl->mutex);
}

static void wl1271_rx_streaming_timer(unsigned long data)
{
        struct wl12xx_vif *wlvif = (struct wl12xx_vif *)data;
        struct wl1271 *wl = wlvif->wl;
        ieee80211_queue_work(wl->hw, &wlvif->rx_streaming_disable_work);
}

/* wl->mutex must be taken */
void wl12xx_rearm_tx_watchdog_locked(struct wl1271 *wl)
{
        /* if the watchdog is not armed, don't do anything */
        if (wl->tx_allocated_blocks == 0)
                return;

        cancel_delayed_work(&wl->tx_watchdog_work);
        ieee80211_queue_delayed_work(wl->hw, &wl->tx_watchdog_work,
                msecs_to_jiffies(wl->conf.tx.tx_watchdog_timeout));
}

static void wl12xx_tx_watchdog_work(struct work_struct *work)
{
        struct delayed_work *dwork;
        struct wl1271 *wl;

        dwork = container_of(work, struct delayed_work, work);
        wl = container_of(dwork, struct wl1271, tx_watchdog_work);

        mutex_lock(&wl->mutex);

        if (unlikely(wl->state == WL1271_STATE_OFF))
                goto out;

        /* Tx went out in the meantime - everything is ok */
        if (unlikely(wl->tx_allocated_blocks == 0))
                goto out;

        /*
         * if a ROC is in progress, we might not have any Tx for a long
         * time (e.g. pending Tx on the non-ROC channels)
         */
        if (find_first_bit(wl->roc_map, WL12XX_MAX_ROLES) < WL12XX_MAX_ROLES) {
                wl1271_debug(DEBUG_TX, "No Tx (in FW) for %d ms due to ROC",
                             wl->conf.tx.tx_watchdog_timeout);
                wl12xx_rearm_tx_watchdog_locked(wl);
                goto out;
        }

        /*
         * if a scan is in progress, we might not have any Tx for a long
         * time
         */
        if (wl->scan.state != WL1271_SCAN_STATE_IDLE) {
                wl1271_debug(DEBUG_TX, "No Tx (in FW) for %d ms due to scan",
                             wl->conf.tx.tx_watchdog_timeout);
                wl12xx_rearm_tx_watchdog_locked(wl);
                goto out;
        }

        /*
        * AP might cache a frame for a long time for a sleeping station,
        * so rearm the timer if there's an AP interface with stations. If
        * Tx is genuinely stuck we will most hopefully discover it when all
        * stations are removed due to inactivity.
        */
        if (wl->active_sta_count) {
                wl1271_debug(DEBUG_TX, "No Tx (in FW) for %d ms. AP has "
                             " %d stations",
                              wl->conf.tx.tx_watchdog_timeout,
                              wl->active_sta_count);
                wl12xx_rearm_tx_watchdog_locked(wl);
                goto out;
        }

        wl1271_error("Tx stuck (in FW) for %d ms. Starting recovery",
                     wl->conf.tx.tx_watchdog_timeout);
        wl12xx_queue_recovery_work(wl);

out:
        mutex_unlock(&wl->mutex);
}

static void wlcore_adjust_conf(struct wl1271 *wl)
{
        /* Adjust settings according to optional module parameters */
        if (fwlog_param) {
                if (!strcmp(fwlog_param, "continuous")) {
                        wl->conf.fwlog.mode = WL12XX_FWLOG_CONTINUOUS;
                } else if (!strcmp(fwlog_param, "ondemand")) {
                        wl->conf.fwlog.mode = WL12XX_FWLOG_ON_DEMAND;
                } else if (!strcmp(fwlog_param, "dbgpins")) {
                        wl->conf.fwlog.mode = WL12XX_FWLOG_CONTINUOUS;
                        wl->conf.fwlog.output = WL12XX_FWLOG_OUTPUT_DBG_PINS;
                } else if (!strcmp(fwlog_param, "disable")) {
                        wl->conf.fwlog.mem_blocks = 0;
                        wl->conf.fwlog.output = WL12XX_FWLOG_OUTPUT_NONE;
                } else {
                        wl1271_error("Unknown fwlog parameter %s", fwlog_param);
                }
        }
}

static int wl1271_plt_init(struct wl1271 *wl)
{
        int ret;

        ret = wl->ops->hw_init(wl);
        if (ret < 0)
                return ret;

        ret = wl1271_acx_init_mem_config(wl);
        if (ret < 0)
                return ret;

        ret = wl12xx_acx_mem_cfg(wl);
        if (ret < 0)
                goto out_free_memmap;

        /* Enable data path */
        ret = wl1271_cmd_data_path(wl, 1);
        if (ret < 0)
                goto out_free_memmap;

        /* Configure for CAM power saving (ie. always active) */
        ret = wl1271_acx_sleep_auth(wl, WL1271_PSM_CAM);
        if (ret < 0)
                goto out_free_memmap;

        /* configure PM */
        ret = wl1271_acx_pm_config(wl);
        if (ret < 0)
                goto out_free_memmap;

        return 0;

 out_free_memmap:
        kfree(wl->target_mem_map);
        wl->target_mem_map = NULL;

        return ret;
}

static void wl12xx_irq_ps_regulate_link(struct wl1271 *wl,
                                        struct wl12xx_vif *wlvif,
                                        u8 hlid, u8 tx_pkts)
{
        bool fw_ps, single_sta;

        fw_ps = test_bit(hlid, (unsigned long *)&wl->ap_fw_ps_map);
        single_sta = (wl->active_sta_count == 1);

        /*
         * Wake up from high level PS if the STA is asleep with too little
         * packets in FW or if the STA is awake.
         */
        if (!fw_ps || tx_pkts < WL1271_PS_STA_MAX_PACKETS)
                wl12xx_ps_link_end(wl, wlvif, hlid);

        /*
         * Start high-level PS if the STA is asleep with enough blocks in FW.
         * Make an exception if this is the only connected station. In this
         * case FW-memory congestion is not a problem.
         */
        else if (!single_sta && fw_ps && tx_pkts >= WL1271_PS_STA_MAX_PACKETS)
                wl12xx_ps_link_start(wl, wlvif, hlid, true);
}

static void wl12xx_irq_update_links_status(struct wl1271 *wl,
                                           struct wl12xx_vif *wlvif,
                                           struct wl_fw_status *status)
{
        struct wl1271_link *lnk;
        u32 cur_fw_ps_map;
        u8 hlid, cnt;

        /* TODO: also use link_fast_bitmap here */

        cur_fw_ps_map = le32_to_cpu(status->link_ps_bitmap);
        if (wl->ap_fw_ps_map != cur_fw_ps_map) {
                wl1271_debug(DEBUG_PSM,
                             "link ps prev 0x%x cur 0x%x changed 0x%x",
                             wl->ap_fw_ps_map, cur_fw_ps_map,
                             wl->ap_fw_ps_map ^ cur_fw_ps_map);

                wl->ap_fw_ps_map = cur_fw_ps_map;
        }

        for_each_set_bit(hlid, wlvif->ap.sta_hlid_map, WL12XX_MAX_LINKS) {
                lnk = &wl->links[hlid];
                cnt = status->counters.tx_lnk_free_pkts[hlid] -
                        lnk->prev_freed_pkts;

                lnk->prev_freed_pkts = status->counters.tx_lnk_free_pkts[hlid];
                lnk->allocated_pkts -= cnt;

                wl12xx_irq_ps_regulate_link(wl, wlvif, hlid,
                                            lnk->allocated_pkts);
        }
}

static void wl12xx_fw_status(struct wl1271 *wl,
                             struct wl_fw_status *status)
{
        struct wl12xx_vif *wlvif;
        struct timespec ts;
        u32 old_tx_blk_count = wl->tx_blocks_available;
        int avail, freed_blocks;
        int i;
        size_t status_len;

        status_len = sizeof(*status) + wl->fw_status_priv_len;

        wlcore_raw_read_data(wl, REG_RAW_FW_STATUS_ADDR, status,
                             status_len, false);

        wl1271_debug(DEBUG_IRQ, "intr: 0x%x (fw_rx_counter = %d, "
                     "drv_rx_counter = %d, tx_results_counter = %d)",
                     status->intr,
                     status->fw_rx_counter,
                     status->drv_rx_counter,
                     status->tx_results_counter);

        for (i = 0; i < NUM_TX_QUEUES; i++) {
                /* prevent wrap-around in freed-packets counter */
                wl->tx_allocated_pkts[i] -=
                                (status->counters.tx_released_pkts[i] -
                                wl->tx_pkts_freed[i]) & 0xff;

                wl->tx_pkts_freed[i] = status->counters.tx_released_pkts[i];
        }

        /* prevent wrap-around in total blocks counter */
        if (likely(wl->tx_blocks_freed <=
                   le32_to_cpu(status->total_released_blks)))
                freed_blocks = le32_to_cpu(status->total_released_blks) -
                               wl->tx_blocks_freed;
        else
                freed_blocks = 0x100000000LL - wl->tx_blocks_freed +
                               le32_to_cpu(status->total_released_blks);

        wl->tx_blocks_freed = le32_to_cpu(status->total_released_blks);

        wl->tx_allocated_blocks -= freed_blocks;

        /*
         * If the FW freed some blocks:
         * If we still have allocated blocks - re-arm the timer, Tx is
         * not stuck. Otherwise, cancel the timer (no Tx currently).
         */
        if (freed_blocks) {
                if (wl->tx_allocated_blocks)
                        wl12xx_rearm_tx_watchdog_locked(wl);
                else
                        cancel_delayed_work(&wl->tx_watchdog_work);
        }

        avail = le32_to_cpu(status->tx_total) - wl->tx_allocated_blocks;

        /*
         * The FW might change the total number of TX memblocks before
         * we get a notification about blocks being released. Thus, the
         * available blocks calculation might yield a temporary result
         * which is lower than the actual available blocks. Keeping in
         * mind that only blocks that were allocated can be moved from
         * TX to RX, tx_blocks_available should never decrease here.
         */
        wl->tx_blocks_available = max((int)wl->tx_blocks_available,
                                      avail);

        /* if more blocks are available now, tx work can be scheduled */
        if (wl->tx_blocks_available > old_tx_blk_count)
                clear_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags);

        /* for AP update num of allocated TX blocks per link and ps status */
        wl12xx_for_each_wlvif_ap(wl, wlvif) {
                wl12xx_irq_update_links_status(wl, wlvif, status);
        }

        /* update the host-chipset time offset */
        getnstimeofday(&ts);
        wl->time_offset = (timespec_to_ns(&ts) >> 10) -
                (s64)le32_to_cpu(status->fw_localtime);
}

static void wl1271_flush_deferred_work(struct wl1271 *wl)
{
        struct sk_buff *skb;

        /* Pass all received frames to the network stack */
        while ((skb = skb_dequeue(&wl->deferred_rx_queue)))
                ieee80211_rx_ni(wl->hw, skb);

        /* Return sent skbs to the network stack */
        while ((skb = skb_dequeue(&wl->deferred_tx_queue)))
                ieee80211_tx_status_ni(wl->hw, skb);
}

static void wl1271_netstack_work(struct work_struct *work)
{
        struct wl1271 *wl =
                container_of(work, struct wl1271, netstack_work);

        do {
                wl1271_flush_deferred_work(wl);
        } while (skb_queue_len(&wl->deferred_rx_queue));
}

#define WL1271_IRQ_MAX_LOOPS 256

static irqreturn_t wl1271_irq(int irq, void *cookie)
{
        int ret;
        u32 intr;
        int loopcount = WL1271_IRQ_MAX_LOOPS;
        struct wl1271 *wl = (struct wl1271 *)cookie;
        bool done = false;
        unsigned int defer_count;
        unsigned long flags;

        /* TX might be handled here, avoid redundant work */
        set_bit(WL1271_FLAG_TX_PENDING, &wl->flags);
        cancel_work_sync(&wl->tx_work);

        /*
         * In case edge triggered interrupt must be used, we cannot iterate
         * more than once without introducing race conditions with the hardirq.
         */
        if (wl->platform_quirks & WL12XX_PLATFORM_QUIRK_EDGE_IRQ)
                loopcount = 1;

        mutex_lock(&wl->mutex);

        wl1271_debug(DEBUG_IRQ, "IRQ work");

        if (unlikely(wl->state == WL1271_STATE_OFF))
                goto out;

        ret = wl1271_ps_elp_wakeup(wl);
        if (ret < 0)
                goto out;

        while (!done && loopcount--) {
                /*
                 * In order to avoid a race with the hardirq, clear the flag
                 * before acknowledging the chip. Since the mutex is held,
                 * wl1271_ps_elp_wakeup cannot be called concurrently.
                 */
                clear_bit(WL1271_FLAG_IRQ_RUNNING, &wl->flags);
                smp_mb__after_clear_bit();

                wl12xx_fw_status(wl, wl->fw_status);

                wlcore_hw_tx_immediate_compl(wl);

                intr = le32_to_cpu(wl->fw_status->intr);
                intr &= WL1271_INTR_MASK;
                if (!intr) {
                        done = true;
                        continue;
                }

                if (unlikely(intr & WL1271_ACX_INTR_WATCHDOG)) {
                        wl1271_error("watchdog interrupt received! "
                                     "starting recovery.");
                        wl12xx_queue_recovery_work(wl);

                        /* restarting the chip. ignore any other interrupt. */
                        goto out;
                }

                if (likely(intr & WL1271_ACX_INTR_DATA)) {
                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_DATA");

                        wl12xx_rx(wl, wl->fw_status);

                        /* Check if any tx blocks were freed */
                        spin_lock_irqsave(&wl->wl_lock, flags);
                        if (!test_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags) &&
                            wl1271_tx_total_queue_count(wl) > 0) {
                                spin_unlock_irqrestore(&wl->wl_lock, flags);
                                /*
                                 * In order to avoid starvation of the TX path,
                                 * call the work function directly.
                                 */
                                wl1271_tx_work_locked(wl);
                        } else {
                                spin_unlock_irqrestore(&wl->wl_lock, flags);
                        }

                        /* check for tx results */
                        wlcore_hw_tx_delayed_compl(wl);

                        /* Make sure the deferred queues don't get too long */
                        defer_count = skb_queue_len(&wl->deferred_tx_queue) +
                                      skb_queue_len(&wl->deferred_rx_queue);
                        if (defer_count > WL1271_DEFERRED_QUEUE_LIMIT)
                                wl1271_flush_deferred_work(wl);
                }

                if (intr & WL1271_ACX_INTR_EVENT_A) {
                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_EVENT_A");
                        wl1271_event_handle(wl, 0);
                }

                if (intr & WL1271_ACX_INTR_EVENT_B) {
                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_EVENT_B");
                        wl1271_event_handle(wl, 1);
                }

                if (intr & WL1271_ACX_INTR_INIT_COMPLETE)
                        wl1271_debug(DEBUG_IRQ,
                                     "WL1271_ACX_INTR_INIT_COMPLETE");

                if (intr & WL1271_ACX_INTR_HW_AVAILABLE)
                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_HW_AVAILABLE");
        }

        wl1271_ps_elp_sleep(wl);

out:
        spin_lock_irqsave(&wl->wl_lock, flags);
        /* In case TX was not handled here, queue TX work */
        clear_bit(WL1271_FLAG_TX_PENDING, &wl->flags);
        if (!test_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags) &&
            wl1271_tx_total_queue_count(wl) > 0)
                ieee80211_queue_work(wl->hw, &wl->tx_work);
        spin_unlock_irqrestore(&wl->wl_lock, flags);

        mutex_unlock(&wl->mutex);

        return IRQ_HANDLED;
}

struct vif_counter_data {
        u8 counter;

        struct ieee80211_vif *cur_vif;
        bool cur_vif_running;
};

static void wl12xx_vif_count_iter(void *data, u8 *mac,
                                  struct ieee80211_vif *vif)
{
        struct vif_counter_data *counter = data;

        counter->counter++;
        if (counter->cur_vif == vif)
                counter->cur_vif_running = true;
}

/* caller must not hold wl->mutex, as it might deadlock */
static void wl12xx_get_vif_count(struct ieee80211_hw *hw,
                               struct ieee80211_vif *cur_vif,
                               struct vif_counter_data *data)
{
        memset(data, 0, sizeof(*data));
        data->cur_vif = cur_vif;

        ieee80211_iterate_active_interfaces(hw,
                                            wl12xx_vif_count_iter, data);
}

static int wl12xx_fetch_firmware(struct wl1271 *wl, bool plt)
{
        const struct firmware *fw;
        const char *fw_name;
        enum wl12xx_fw_type fw_type;
        int ret;

        if (plt) {
                fw_type = WL12XX_FW_TYPE_PLT;
                fw_name = wl->plt_fw_name;
        } else {
                /*
                 * we can't call wl12xx_get_vif_count() here because
                 * wl->mutex is taken, so use the cached last_vif_count value
                 */
                if (wl->last_vif_count > 1) {
                        fw_type = WL12XX_FW_TYPE_MULTI;
                        fw_name = wl->mr_fw_name;
                } else {
                        fw_type = WL12XX_FW_TYPE_NORMAL;
                        fw_name = wl->sr_fw_name;
                }
        }

        if (wl->fw_type == fw_type)
                return 0;

        wl1271_debug(DEBUG_BOOT, "booting firmware %s", fw_name);

        ret = request_firmware(&fw, fw_name, wl->dev);

        if (ret < 0) {
                wl1271_error("could not get firmware %s: %d", fw_name, ret);
                return ret;
        }

        if (fw->size % 4) {
                wl1271_error("firmware size is not multiple of 32 bits: %zu",
                             fw->size);
                ret = -EILSEQ;
                goto out;
        }

        vfree(wl->fw);
        wl->fw_type = WL12XX_FW_TYPE_NONE;
        wl->fw_len = fw->size;
        wl->fw = vmalloc(wl->fw_len);

        if (!wl->fw) {
                wl1271_error("could not allocate memory for the firmware");
                ret = -ENOMEM;
                goto out;
        }

        memcpy(wl->fw, fw->data, wl->fw_len);
        ret = 0;
        wl->fw_type = fw_type;
out:
        release_firmware(fw);

        return ret;
}

static int wl1271_fetch_nvs(struct wl1271 *wl)
{
        const struct firmware *fw;
        int ret;

        ret = request_firmware(&fw, WL12XX_NVS_NAME, wl->dev);

        if (ret < 0) {
                wl1271_error("could not get nvs file %s: %d", WL12XX_NVS_NAME,
                             ret);
                return ret;
        }

        wl->nvs = kmemdup(fw->data, fw->size, GFP_KERNEL);

        if (!wl->nvs) {
                wl1271_error("could not allocate memory for the nvs file");
                ret = -ENOMEM;
                goto out;
        }

        wl->nvs_len = fw->size;

out:
        release_firmware(fw);

        return ret;
}

void wl12xx_queue_recovery_work(struct wl1271 *wl)
{
        if (!test_bit(WL1271_FLAG_RECOVERY_IN_PROGRESS, &wl->flags))
                ieee80211_queue_work(wl->hw, &wl->recovery_work);
}

size_t wl12xx_copy_fwlog(struct wl1271 *wl, u8 *memblock, size_t maxlen)
{
        size_t len = 0;

        /* The FW log is a length-value list, find where the log end */
        while (len < maxlen) {
                if (memblock[len] == 0)
                        break;
                if (len + memblock[len] + 1 > maxlen)
                        break;
                len += memblock[len] + 1;
        }

        /* Make sure we have enough room */
        len = min(len, (size_t)(PAGE_SIZE - wl->fwlog_size));

        /* Fill the FW log file, consumed by the sysfs fwlog entry */
        memcpy(wl->fwlog + wl->fwlog_size, memblock, len);
        wl->fwlog_size += len;

        return len;
}

static void wl12xx_read_fwlog_panic(struct wl1271 *wl)
{
        u32 addr;
        u32 first_addr;
        u8 *block;

        if ((wl->quirks & WLCORE_QUIRK_FWLOG_NOT_IMPLEMENTED) ||
            (wl->conf.fwlog.mode != WL12XX_FWLOG_ON_DEMAND) ||
            (wl->conf.fwlog.mem_blocks == 0))
                return;

        wl1271_info("Reading FW panic log");

        block = kmalloc(WL12XX_HW_BLOCK_SIZE, GFP_KERNEL);
        if (!block)
                return;

        /*
         * Make sure the chip is awake and the logger isn't active.
         * This might fail if the firmware hanged.
         */
        if (!wl1271_ps_elp_wakeup(wl))
                wl12xx_cmd_stop_fwlog(wl);

        /* Read the first memory block address */
        wl12xx_fw_status(wl, wl->fw_status);
        first_addr = le32_to_cpu(wl->fw_status->log_start_addr);
        if (!first_addr)
                goto out;

        /* Traverse the memory blocks linked list */
        addr = first_addr;
        do {
                memset(block, 0, WL12XX_HW_BLOCK_SIZE);
                wl1271_read_hwaddr(wl, addr, block, WL12XX_HW_BLOCK_SIZE,
                                   false);

                /*
                 * Memory blocks are linked to one another. The first 4 bytes
                 * of each memory block hold the hardware address of the next
                 * one. The last memory block points to the first one.
                 */
                addr = le32_to_cpup((__le32 *)block);
                if (!wl12xx_copy_fwlog(wl, block + sizeof(addr),
                                       WL12XX_HW_BLOCK_SIZE - sizeof(addr)))
                        break;
        } while (addr && (addr != first_addr));

        wake_up_interruptible(&wl->fwlog_waitq);

out:
        kfree(block);
}

static void wl1271_recovery_work(struct work_struct *work)
{
        struct wl1271 *wl =
                container_of(work, struct wl1271, recovery_work);
        struct wl12xx_vif *wlvif;
        struct ieee80211_vif *vif;

        mutex_lock(&wl->mutex);

        if (wl->state != WL1271_STATE_ON || wl->plt)
                goto out_unlock;

        /* Avoid a recursive recovery */
        set_bit(WL1271_FLAG_RECOVERY_IN_PROGRESS, &wl->flags);

        wl12xx_read_fwlog_panic(wl);

        wl1271_info("Hardware recovery in progress. FW ver: %s pc: 0x%x",
                    wl->chip.fw_ver_str,
                    wlcore_read_reg(wl, REG_PC_ON_RECOVERY));

        BUG_ON(bug_on_recovery &&
               !test_bit(WL1271_FLAG_INTENDED_FW_RECOVERY, &wl->flags));

        if (no_recovery) {
                wl1271_info("No recovery (chosen on module load). Fw will remain stuck.");
                clear_bit(WL1271_FLAG_RECOVERY_IN_PROGRESS, &wl->flags);
                goto out_unlock;
        }

        BUG_ON(bug_on_recovery);

        /*
         * Advance security sequence number to overcome potential progress
         * in the firmware during recovery. This doens't hurt if the network is
         * not encrypted.
         */
        wl12xx_for_each_wlvif(wl, wlvif) {
                if (test_bit(WLVIF_FLAG_STA_ASSOCIATED, &wlvif->flags) ||
                    test_bit(WLVIF_FLAG_AP_STARTED, &wlvif->flags))
                        wlvif->tx_security_seq +=
                                WL1271_TX_SQN_POST_RECOVERY_PADDING;
        }

        /* Prevent spurious TX during FW restart */
        ieee80211_stop_queues(wl->hw);

        if (wl->sched_scanning) {
                ieee80211_sched_scan_stopped(wl->hw);
                wl->sched_scanning = false;
        }

        /* reboot the chipset */
        while (!list_empty(&wl->wlvif_list)) {
                wlvif = list_first_entry(&wl->wlvif_list,
                                       struct wl12xx_vif, list);
                vif = wl12xx_wlvif_to_vif(wlvif);
                __wl1271_op_remove_interface(wl, vif, false);
        }
        mutex_unlock(&wl->mutex);
        wl1271_op_stop(wl->hw);

        clear_bit(WL1271_FLAG_RECOVERY_IN_PROGRESS, &wl->flags);

        ieee80211_restart_hw(wl->hw);

        /*
         * Its safe to enable TX now - the queues are stopped after a request
         * to restart the HW.
         */
        ieee80211_wake_queues(wl->hw);
        return;
out_unlock:
        mutex_unlock(&wl->mutex);
}

static void wl1271_fw_wakeup(struct wl1271 *wl)
{
        wl1271_raw_write32(wl, HW_ACCESS_ELP_CTRL_REG, ELPCTRL_WAKE_UP);
}

static int wl1271_setup(struct wl1271 *wl)
{
        wl->fw_status = kmalloc(sizeof(*wl->fw_status), GFP_KERNEL);
        if (!wl->fw_status)
                return -ENOMEM;

        wl->tx_res_if = kmalloc(sizeof(*wl->tx_res_if), GFP_KERNEL);
        if (!wl->tx_res_if) {
                kfree(wl->fw_status);
                return -ENOMEM;
        }

        return 0;
}

static int wl12xx_set_power_on(struct wl1271 *wl)
{
        int ret;

        msleep(WL1271_PRE_POWER_ON_SLEEP);
        ret = wl1271_power_on(wl);
        if (ret < 0)
                goto out;
        msleep(WL1271_POWER_ON_SLEEP);
        wl1271_io_reset(wl);
        wl1271_io_init(wl);

        wlcore_set_partition(wl, &wl->ptable[PART_BOOT]);

        /* ELP module wake up */
        wl1271_fw_wakeup(wl);

out:
        return ret;
}

static int wl12xx_chip_wakeup(struct wl1271 *wl, bool plt)
{
        int ret = 0;

        ret = wl12xx_set_power_on(wl);
        if (ret < 0)
                goto out;

        /*
         * For wl127x based devices we could use the default block
         * size (512 bytes), but due to a bug in the sdio driver, we
         * need to set it explicitly after the chip is powered on.  To
         * simplify the code and since the performance impact is
         * negligible, we use the same block size for all different
         * chip types.
         */
        if (wl1271_set_block_size(wl))
                wl->quirks |= WLCORE_QUIRK_TX_BLOCKSIZE_ALIGN;

        ret = wl->ops->identify_chip(wl);
        if (ret < 0)
                goto out;

        /* TODO: make sure the lower driver has set things up correctly */

        ret = wl1271_setup(wl);

        if (ret < 0)
                goto out;

        ret = wl12xx_fetch_firmware(wl, plt);
        if (ret < 0)
                goto out;

        /* No NVS from netlink, try to get it from the filesystem */
        if (wl->nvs == NULL) {
                ret = wl1271_fetch_nvs(wl);
                if (ret < 0)
                        goto out;
        }

out:
        return ret;
}

int wl1271_plt_start(struct wl1271 *wl)
{
        int retries = WL1271_BOOT_RETRIES;
        struct wiphy *wiphy = wl->hw->wiphy;
        int ret;

        mutex_lock(&wl->mutex);

        wl1271_notice("power up");

        if (wl->state != WL1271_STATE_OFF) {
                wl1271_error("cannot go into PLT state because not "
                             "in off state: %d", wl->state);
                ret = -EBUSY;
                goto out;
        }

        while (retries) {
                retries--;
                ret = wl12xx_chip_wakeup(wl, true);
                if (ret < 0)
                        goto power_off;

                ret = wl->ops->boot(wl);
                if (ret < 0)
                        goto power_off;

                ret = wl1271_plt_init(wl);
                if (ret < 0)
                        goto irq_disable;

                wl->plt = true;
                wl->state = WL1271_STATE_ON;
                wl1271_notice("firmware booted in PLT mode (%s)",
                              wl->chip.fw_ver_str);

                /* update hw/fw version info in wiphy struct */
                wiphy->hw_version = wl->chip.id;
                strncpy(wiphy->fw_version, wl->chip.fw_ver_str,
                        sizeof(wiphy->fw_version));

                goto out;

irq_disable:
                mutex_unlock(&wl->mutex);
                /* Unlocking the mutex in the middle of handling is
                   inherently unsafe. In this case we deem it safe to do,
                   because we need to let any possibly pending IRQ out of
                   the system (and while we are WL1271_STATE_OFF the IRQ
                   work function will not do anything.) Also, any other
                   possible concurrent operations will fail due to the
                   current state, hence the wl1271 struct should be safe. */
                wlcore_disable_interrupts(wl);
                wl1271_flush_deferred_work(wl);
                cancel_work_sync(&wl->netstack_work);
                mutex_lock(&wl->mutex);
power_off:
                wl1271_power_off(wl);
        }

        wl1271_error("firmware boot in PLT mode failed despite %d retries",
                     WL1271_BOOT_RETRIES);
out:
        mutex_unlock(&wl->mutex);

        return ret;
}

int wl1271_plt_stop(struct wl1271 *wl)
{
        int ret = 0;

        wl1271_notice("power down");

        /*
         * Interrupts must be disabled before setting the state to OFF.
         * Otherwise, the interrupt handler might be called and exit without
         * reading the interrupt status.
         */
        wlcore_disable_interrupts(wl);
        mutex_lock(&wl->mutex);
        if (!wl->plt) {
                mutex_unlock(&wl->mutex);

                /*
                 * This will not necessarily enable interrupts as interrupts
                 * may have been disabled when op_stop was called. It will,
                 * however, balance the above call to disable_interrupts().
                 */
                wlcore_enable_interrupts(wl);

                wl1271_error("cannot power down because not in PLT "
                             "state: %d", wl->state);
                ret = -EBUSY;
                goto out;
        }

        mutex_unlock(&wl->mutex);

        wl1271_flush_deferred_work(wl);
        cancel_work_sync(&wl->netstack_work);
        cancel_work_sync(&wl->recovery_work);
        cancel_delayed_work_sync(&wl->elp_work);
        cancel_delayed_work_sync(&wl->tx_watchdog_work);
        cancel_delayed_work_sync(&wl->connection_loss_work);

        mutex_lock(&wl->mutex);
        wl1271_power_off(wl);
        wl->flags = 0;
        wl->state = WL1271_STATE_OFF;
        wl->plt = false;
        wl->rx_counter = 0;
        mutex_unlock(&wl->mutex);

out:
        return ret;
}

static void wl1271_op_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
{
        struct wl1271 *wl = hw->priv;
        struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
        struct ieee80211_vif *vif = info->control.vif;
        struct wl12xx_vif *wlvif = NULL;
        unsigned long flags;
        int q, mapping;
        u8 hlid;

        if (vif)
                wlvif = wl12xx_vif_to_data(vif);

        mapping = skb_get_queue_mapping(skb);
        q = wl1271_tx_get_queue(mapping);

        hlid = wl12xx_tx_get_hlid(wl, wlvif, skb);

        spin_lock_irqsave(&wl->wl_lock, flags);

        /* queue the packet */
        if (hlid == WL12XX_INVALID_LINK_ID ||
            (wlvif && !test_bit(hlid, wlvif->links_map))) {
                wl1271_debug(DEBUG_TX, "DROP skb hlid %d q %d", hlid, q);
                ieee80211_free_txskb(hw, skb);
                goto out;
        }

        wl1271_debug(DEBUG_TX, "queue skb hlid %d q %d len %d",
                     hlid, q, skb->len);
        skb_queue_tail(&wl->links[hlid].tx_queue[q], skb);

        wl->tx_queue_count[q]++;

        /*
         * The workqueue is slow to process the tx_queue and we need stop
         * the queue here, otherwise the queue will get too long.
         */
        if (wl->tx_queue_count[q] >= WL1271_TX_QUEUE_HIGH_WATERMARK) {
                wl1271_debug(DEBUG_TX, "op_tx: stopping queues for q %d", q);
                ieee80211_stop_queue(wl->hw, mapping);
                set_bit(q, &wl->stopped_queues_map);
        }

        /*
         * The chip specific setup must run before the first TX packet -
         * before that, the tx_work will not be initialized!
         */

        if (!test_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags) &&
            !test_bit(WL1271_FLAG_TX_PENDING, &wl->flags))
                ieee80211_queue_work(wl->hw, &wl->tx_work);

out:
        spin_unlock_irqrestore(&wl->wl_lock, flags);
}

int wl1271_tx_dummy_packet(struct wl1271 *wl)
{
        unsigned long flags;
        int q;

        /* no need to queue a new dummy packet if one is already pending */
        if (test_bit(WL1271_FLAG_DUMMY_PACKET_PENDING, &wl->flags))
                return 0;

        q = wl1271_tx_get_queue(skb_get_queue_mapping(wl->dummy_packet));

        spin_lock_irqsave(&wl->wl_lock, flags);
        set_bit(WL1271_FLAG_DUMMY_PACKET_PENDING, &wl->flags);
        wl->tx_queue_count[q]++;
        spin_unlock_irqrestore(&wl->wl_lock, flags);

        /* The FW is low on RX memory blocks, so send the dummy packet asap */
        if (!test_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags))
                wl1271_tx_work_locked(wl);

        /*
         * If the FW TX is busy, TX work will be scheduled by the threaded
         * interrupt handler function
         */
        return 0;
}

/*
 * The size of the dummy packet should be at least 1400 bytes. However, in
 * order to minimize the number of bus transactions, aligning it to 512 bytes
 * boundaries could be beneficial, performance wise
 */
#define TOTAL_TX_DUMMY_PACKET_SIZE (ALIGN(1400, 512))

static struct sk_buff *wl12xx_alloc_dummy_packet(struct wl1271 *wl)
{
        struct sk_buff *skb;
        struct ieee80211_hdr_3addr *hdr;
        unsigned int dummy_packet_size;

        dummy_packet_size = TOTAL_TX_DUMMY_PACKET_SIZE -
                            sizeof(struct wl1271_tx_hw_descr) - sizeof(*hdr);

        skb = dev_alloc_skb(TOTAL_TX_DUMMY_PACKET_SIZE);
        if (!skb) {
                wl1271_warning("Failed to allocate a dummy packet skb");
                return NULL;
        }

        skb_reserve(skb, sizeof(struct wl1271_tx_hw_descr));

        hdr = (struct ieee80211_hdr_3addr *) skb_put(skb, sizeof(*hdr));
        memset(hdr, 0, sizeof(*hdr));
        hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
                                         IEEE80211_STYPE_NULLFUNC |
                                         IEEE80211_FCTL_TODS);

        memset(skb_put(skb, dummy_packet_size), 0, dummy_packet_size);

        /* Dummy packets require the TID to be management */
        skb->priority = WL1271_TID_MGMT;

        /* Initialize all fields that might be used */
        skb_set_queue_mapping(skb, 0);
        memset(IEEE80211_SKB_CB(skb), 0, sizeof(struct ieee80211_tx_info));

        return skb;
}


#ifdef CONFIG_PM
static int
wl1271_validate_wowlan_pattern(struct cfg80211_wowlan_trig_pkt_pattern *p)
{
        int num_fields = 0, in_field = 0, fields_size = 0;
        int i, pattern_len = 0;

        if (!p->mask) {
                wl1271_warning("No mask in WoWLAN pattern");
                return -EINVAL;
        }

        /*
         * The pattern is broken up into segments of bytes at different offsets
         * that need to be checked by the FW filter. Each segment is called
         * a field in the FW API. We verify that the total number of fields
         * required for this pattern won't exceed FW limits (8)
         * as well as the total fields buffer won't exceed the FW limit.
         * Note that if there's a pattern which crosses Ethernet/IP header
         * boundary a new field is required.
         */
        for (i = 0; i < p->pattern_len; i++) {
                if (test_bit(i, (unsigned long *)p->mask)) {
                        if (!in_field) {
                                in_field = 1;
                                pattern_len = 1;
                        } else {
                                if (i == WL1271_RX_FILTER_ETH_HEADER_SIZE) {
                                        num_fields++;
                                        fields_size += pattern_len +
                                                RX_FILTER_FIELD_OVERHEAD;
                                        pattern_len = 1;
                                } else
                                        pattern_len++;
                        }
                } else {
                        if (in_field) {
                                in_field = 0;
                                fields_size += pattern_len +
                                        RX_FILTER_FIELD_OVERHEAD;
                                num_fields++;
                        }
                }
        }

        if (in_field) {
                fields_size += pattern_len + RX_FILTER_FIELD_OVERHEAD;
                num_fields++;
        }

        if (num_fields > WL1271_RX_FILTER_MAX_FIELDS) {
                wl1271_warning("RX Filter too complex. Too many segments");
                return -EINVAL;
        }

        if (fields_size > WL1271_RX_FILTER_MAX_FIELDS_SIZE) {
                wl1271_warning("RX filter pattern is too big");
                return -E2BIG;
        }

        return 0;
}

struct wl12xx_rx_filter *wl1271_rx_filter_alloc(void)
{
        return kzalloc(sizeof(struct wl12xx_rx_filter), GFP_KERNEL);
}

void wl1271_rx_filter_free(struct wl12xx_rx_filter *filter)
{
        int i;

        if (filter == NULL)
                return;

        for (i = 0; i < filter->num_fields; i++)
                kfree(filter->fields[i].pattern);

        kfree(filter);
}

int wl1271_rx_filter_alloc_field(struct wl12xx_rx_filter *filter,
                                 u16 offset, u8 flags,
                                 u8 *pattern, u8 len)
{
        struct wl12xx_rx_filter_field *field;

        if (filter->num_fields == WL1271_RX_FILTER_MAX_FIELDS) {
                wl1271_warning("Max fields per RX filter. can't alloc another");
                return -EINVAL;
        }

        field = &filter->fields[filter->num_fields];

        field->pattern = kzalloc(len, GFP_KERNEL);
        if (!field->pattern) {
                wl1271_warning("Failed to allocate RX filter pattern");
                return -ENOMEM;
        }

        filter->num_fields++;

        field->offset = cpu_to_le16(offset);
        field->flags = flags;
        field->len = len;
        memcpy(field->pattern, pattern, len);

        return 0;
}

int wl1271_rx_filter_get_fields_size(struct wl12xx_rx_filter *filter)
{
        int i, fields_size = 0;

        for (i = 0; i < filter->num_fields; i++)
                fields_size += filter->fields[i].len +
                        sizeof(struct wl12xx_rx_filter_field) -
                        sizeof(u8 *);

        return fields_size;
}

void wl1271_rx_filter_flatten_fields(struct wl12xx_rx_filter *filter,
                                    u8 *buf)
{
        int i;
        struct wl12xx_rx_filter_field *field;

        for (i = 0; i < filter->num_fields; i++) {
                field = (struct wl12xx_rx_filter_field *)buf;

                field->offset = filter->fields[i].offset;
                field->flags = filter->fields[i].flags;
                field->len = filter->fields[i].len;

                memcpy(&field->pattern, filter->fields[i].pattern, field->len);
                buf += sizeof(struct wl12xx_rx_filter_field) -
                        sizeof(u8 *) + field->len;
        }
}

/*
 * Allocates an RX filter returned through f
 * which needs to be freed using rx_filter_free()
 */
static int wl1271_convert_wowlan_pattern_to_rx_filter(
        struct cfg80211_wowlan_trig_pkt_pattern *p,
        struct wl12xx_rx_filter **f)
{
        int i, j, ret = 0;
        struct wl12xx_rx_filter *filter;
        u16 offset;
        u8 flags, len;

        filter = wl1271_rx_filter_alloc();
        if (!filter) {
                wl1271_warning("Failed to alloc rx filter");
                ret = -ENOMEM;
                goto err;
        }

        i = 0;
        while (i < p->pattern_len) {
                if (!test_bit(i, (unsigned long *)p->mask)) {
                        i++;
                        continue;
                }

                for (j = i; j < p->pattern_len; j++) {
                        if (!test_bit(j, (unsigned long *)p->mask))
                                break;

                        if (i < WL1271_RX_FILTER_ETH_HEADER_SIZE &&
                            j >= WL1271_RX_FILTER_ETH_HEADER_SIZE)
                                break;
                }

                if (i < WL1271_RX_FILTER_ETH_HEADER_SIZE) {
                        offset = i;
                        flags = WL1271_RX_FILTER_FLAG_ETHERNET_HEADER;
                } else {
                        offset = i - WL1271_RX_FILTER_ETH_HEADER_SIZE;
                        flags = WL1271_RX_FILTER_FLAG_IP_HEADER;
                }

                len = j - i;

                ret = wl1271_rx_filter_alloc_field(filter,
                                                   offset,
                                                   flags,
                                                   &p->pattern[i], len);
                if (ret)
                        goto err;

                i = j;
        }

        filter->action = FILTER_SIGNAL;

        *f = filter;
        return 0;

err:
        wl1271_rx_filter_free(filter);
        *f = NULL;

        return ret;
}

static int wl1271_configure_wowlan(struct wl1271 *wl,
                                   struct cfg80211_wowlan *wow)
{
        int i, ret;

        if (!wow || wow->any || !wow->n_patterns) {
                wl1271_acx_default_rx_filter_enable(wl, 0, FILTER_SIGNAL);
                wl1271_rx_filter_clear_all(wl);
                return 0;
        }

        if (WARN_ON(wow->n_patterns > WL1271_MAX_RX_FILTERS))
                return -EINVAL;

        /* Validate all incoming patterns before clearing current FW state */
        for (i = 0; i < wow->n_patterns; i++) {
                ret = wl1271_validate_wowlan_pattern(&wow->patterns[i]);
                if (ret) {
                        wl1271_warning("Bad wowlan pattern %d", i);
                        return ret;
                }
        }

        wl1271_acx_default_rx_filter_enable(wl, 0, FILTER_SIGNAL);
        wl1271_rx_filter_clear_all(wl);

        /* Translate WoWLAN patterns into filters */
        for (i = 0; i < wow->n_patterns; i++) {
                struct cfg80211_wowlan_trig_pkt_pattern *p;
                struct wl12xx_rx_filter *filter = NULL;

                p = &wow->patterns[i];

                ret = wl1271_convert_wowlan_pattern_to_rx_filter(p, &filter);
                if (ret) {
                        wl1271_warning("Failed to create an RX filter from "
                                       "wowlan pattern %d", i);
                        goto out;
                }

                ret = wl1271_rx_filter_enable(wl, i, 1, filter);

                wl1271_rx_filter_free(filter);
                if (ret)
                        goto out;
        }

        ret = wl1271_acx_default_rx_filter_enable(wl, 1, FILTER_DROP);

out:
        return ret;
}

static int wl1271_configure_suspend_sta(struct wl1271 *wl,
                                        struct wl12xx_vif *wlvif,
                                        struct cfg80211_wowlan *wow)
{
        int ret = 0;

        if (!test_bit(WLVIF_FLAG_STA_ASSOCIATED, &wlvif->flags))
                goto out;

        ret = wl1271_ps_elp_wakeup(wl);
        if (ret < 0)
                goto out;

        wl1271_configure_wowlan(wl, wow);
        ret = wl1271_acx_wake_up_conditions(wl, wlvif,
                                    wl->conf.conn.suspend_wake_up_event,
                                    wl->conf.conn.suspend_listen_interval);

        if (ret < 0)
                wl1271_error("suspend: set wake up conditions failed: %d", ret);

        wl1271_ps_elp_sleep(wl);

out:
        return ret;

}

static int wl1271_configure_suspend_ap(struct wl1271 *wl,
                                       struct wl12xx_vif *wlvif)
{
        int ret = 0;

        if (!test_bit(WLVIF_FLAG_AP_STARTED, &wlvif->flags))
                goto out;

        ret = wl1271_ps_elp_wakeup(wl);
        if (ret < 0)
                goto out;

        ret = wl1271_acx_beacon_filter_opt(wl, wlvif, true);

        wl1271_ps_elp_sleep(wl);
out:
        return ret;

}

static int wl1271_configure_suspend(struct wl1271 *wl,
                                    struct wl12xx_vif *wlvif,
                                    struct cfg80211_wowlan *wow)
{
        if (wlvif->bss_type == BSS_TYPE_STA_BSS)
                return wl1271_configure_suspend_sta(wl, wlvif, wow);
        if (wlvif->bss_type == BSS_TYPE_AP_BSS)
                return wl1271_configure_suspend_ap(wl, wlvif);
        return 0;
}

static void wl1271_configure_resume(struct wl1271 *wl,
                                    struct wl12xx_vif *wlvif)
{
        int ret = 0;
        bool is_ap = wlvif->bss_type == BSS_TYPE_AP_BSS;
        bool is_sta = wlvif->bss_type == BSS_TYPE_STA_BSS;

        if ((!is_ap) && (!is_sta))
                return;

        ret = wl1271_ps_elp_wakeup(wl);
        if (ret < 0)
                return;

        if (is_sta) {
                wl1271_configure_wowlan(wl, NULL);

                ret = wl1271_acx_wake_up_conditions(wl, wlvif,
                                    wl->conf.conn.wake_up_event,
                                    wl->conf.conn.listen_interval);

                if (ret < 0)
                        wl1271_error("resume: wake up conditions failed: %d",
                                     ret);

        } else if (is_ap) {
                ret = wl1271_acx_beacon_filter_opt(wl, wlvif, false);
        }

        wl1271_ps_elp_sleep(wl);
}

static int wl1271_op_suspend(struct ieee80211_hw *hw,
                            struct cfg80211_wowlan *wow)
{
        struct wl1271 *wl = hw->priv;
        struct wl12xx_vif *wlvif;
        int ret;

        wl1271_debug(DEBUG_MAC80211, "mac80211 suspend wow=%d", !!wow);
        WARN_ON(!wow);

        wl1271_tx_flush(wl);

        mutex_lock(&wl->mutex);
        wl->wow_enabled = true;
        wl12xx_for_each_wlvif(wl, wlvif) {
                ret = wl1271_configure_suspend(wl, wlvif, wow);
                if (ret < 0) {
                        mutex_unlock(&wl->mutex);
                        wl1271_warning("couldn't prepare device to suspend");
                        return ret;
                }
        }
        mutex_unlock(&wl->mutex);
        /* flush any remaining work */
        wl1271_debug(DEBUG_MAC80211, "flushing remaining works");

        /*
         * disable and re-enable interrupts in order to flush
         * the threaded_irq
         */
        wlcore_disable_interrupts(wl);

        /*
         * set suspended flag to avoid triggering a new threaded_irq
         * work. no need for spinlock as interrupts are disabled.
         */
        set_bit(WL1271_FLAG_SUSPENDED, &wl->flags);

        wlcore_enable_interrupts(wl);
        flush_work(&wl->tx_work);
        flush_delayed_work(&wl->elp_work);

        return 0;
}

static int wl1271_op_resume(struct ieee80211_hw *hw)
{
        struct wl1271 *wl = hw->priv;
        struct wl12xx_vif *wlvif;
        unsigned long flags;
        bool run_irq_work = false;

        wl1271_debug(DEBUG_MAC80211, "mac80211 resume wow=%d",
                     wl->wow_enabled);
        WARN_ON(!wl->wow_enabled);

        /*
         * re-enable irq_work enqueuing, and call irq_work directly if
         * there is a pending work.
         */
        spin_lock_irqsave(&wl->wl_lock, flags);
        clear_bit(WL1271_FLAG_SUSPENDED, &wl->flags);
        if (test_and_clear_bit(WL1271_FLAG_PENDING_WORK, &wl->flags))
                run_irq_work = true;
        spin_unlock_irqrestore(&wl->wl_lock, flags);

        if (run_irq_work) {
                wl1271_debug(DEBUG_MAC80211,
                             "run postponed irq_work directly");
                wl1271_irq(0, wl);
                wlcore_enable_interrupts(wl);
        }

        mutex_lock(&wl->mutex);
        wl12xx_for_each_wlvif(wl, wlvif) {
                wl1271_configure_resume(wl, wlvif);
        }
        wl->wow_enabled = false;
        mutex_unlock(&wl->mutex);

        return 0;
}
#endif

static int wl1271_op_start(struct ieee80211_hw *hw)
{
        wl1271_debug(DEBUG_MAC80211, "mac80211 start");

        /*
         * We have to delay the booting of the hardware because
         * we need to know the local MAC address before downloading and
         * initializing the firmware. The MAC address cannot be changed
         * after boot, and without the proper MAC address, the firmware
         * will not function properly.
         *
         * The MAC address is first known when the corresponding interface
         * is added. That is where we will initialize the hardware.
         */

        return 0;
}

static void wl1271_op_stop(struct ieee80211_hw *hw)
{
        struct wl1271 *wl = hw->priv;
        int i;

        wl1271_debug(DEBUG_MAC80211, "mac80211 stop");

        /*
         * Interrupts must be disabled before setting the state to OFF.
         * Otherwise, the interrupt handler might be called and exit without
         * reading the interrupt status.
         */
        wlcore_disable_interrupts(wl);
        mutex_lock(&wl->mutex);
        if (wl->state == WL1271_STATE_OFF) {
                mutex_unlock(&wl->mutex);

                /*
                 * This will not necessarily enable interrupts as interrupts
                 * may have been disabled when op_stop was called. It will,
                 * however, balance the above call to disable_interrupts().
                 */
                wlcore_enable_interrupts(wl);
                return;
        }

        /*
         * this must be before the cancel_work calls below, so that the work
         * functions don't perform further work.
         */
        wl->state = WL1271_STATE_OFF;
        mutex_unlock(&wl->mutex);

        wl1271_flush_deferred_work(wl);
        cancel_delayed_work_sync(&wl->scan_complete_work);
        cancel_work_sync(&wl->netstack_work);
        cancel_work_sync(&wl->tx_work);
        cancel_delayed_work_sync(&wl->elp_work);
        cancel_delayed_work_sync(&wl->tx_watchdog_work);
        cancel_delayed_work_sync(&wl->connection_loss_work);

        /* let's notify MAC80211 about the remaining pending TX frames */
        wl12xx_tx_reset(wl, true);
        mutex_lock(&wl->mutex);

        wl1271_power_off(wl);

        wl->band = IEEE80211_BAND_2GHZ;

        wl->rx_counter = 0;
        wl->power_level = WL1271_DEFAULT_POWER_LEVEL;
        wl->tx_blocks_available = 0;
        wl->tx_allocated_blocks = 0;
        wl->tx_results_count = 0;
        wl->tx_packets_count = 0;
        wl->time_offset = 0;
        wl->ap_fw_ps_map = 0;
        wl->ap_ps_map = 0;
        wl->sched_scanning = false;
        memset(wl->roles_map, 0, sizeof(wl->roles_map));
        memset(wl->links_map, 0, sizeof(wl->links_map));
        memset(wl->roc_map, 0, sizeof(wl->roc_map));
        wl->active_sta_count = 0;

        /* The system link is always allocated */
        __set_bit(WL12XX_SYSTEM_HLID, wl->links_map);

        /*
         * this is performed after the cancel_work calls and the associated
         * mutex_lock, so that wl1271_op_add_interface does not accidentally
         * get executed before all these vars have been reset.
         */
        wl->flags = 0;

        wl->tx_blocks_freed = 0;

        for (i = 0; i < NUM_TX_QUEUES; i++) {
                wl->tx_pkts_freed[i] = 0;
                wl->tx_allocated_pkts[i] = 0;
        }

        wl1271_debugfs_reset(wl);

        kfree(wl->fw_status);
        wl->fw_status = NULL;
        kfree(wl->tx_res_if);
        wl->tx_res_if = NULL;
        kfree(wl->target_mem_map);
        wl->target_mem_map = NULL;

        mutex_unlock(&wl->mutex);
}

static int wl12xx_allocate_rate_policy(struct wl1271 *wl, u8 *idx)
{
        u8 policy = find_first_zero_bit(wl->rate_policies_map,
                                        WL12XX_MAX_RATE_POLICIES);
        if (policy >= WL12XX_MAX_RATE_POLICIES)
                return -EBUSY;

        __set_bit(policy, wl->rate_policies_map);
        *idx = policy;
        return 0;
}

static void wl12xx_free_rate_policy(struct wl1271 *wl, u8 *idx)
{
        if (WARN_ON(*idx >= WL12XX_MAX_RATE_POLICIES))
                return;

        __clear_bit(*idx, wl->rate_policies_map);
        *idx = WL12XX_MAX_RATE_POLICIES;
}

static u8 wl12xx_get_role_type(struct wl1271 *wl, struct wl12xx_vif *wlvif)
{
        switch (wlvif->bss_type) {
        case BSS_TYPE_AP_BSS:
                if (wlvif->p2p)
                        return WL1271_ROLE_P2P_GO;
                else
                        return WL1271_ROLE_AP;

        case BSS_TYPE_STA_BSS:
                if (wlvif->p2p)
                        return WL1271_ROLE_P2P_CL;
                else
                        return WL1271_ROLE_STA;

        case BSS_TYPE_IBSS:
                return WL1271_ROLE_IBSS;

        default:
                wl1271_error("invalid bss_type: %d", wlvif->bss_type);
        }
        return WL12XX_INVALID_ROLE_TYPE;
}

static int wl12xx_init_vif_data(struct wl1271 *wl, struct ieee80211_vif *vif)
{
        struct wl12xx_vif *wlvif = wl12xx_vif_to_data(vif);
        int i;

        /* clear everything but the persistent data */
        memset(wlvif, 0, offsetof(struct wl12xx_vif, persistent));

        switch (ieee80211_vif_type_p2p(vif)) {
        case NL80211_IFTYPE_P2P_CLIENT:
                wlvif->p2p = 1;
                /* fall-through */
        case NL80211_IFTYPE_STATION:
                wlvif->bss_type = BSS_TYPE_STA_BSS;
                break;
        case NL80211_IFTYPE_ADHOC:
                wlvif->bss_type = BSS_TYPE_IBSS;
                break;
        case NL80211_IFTYPE_P2P_GO:
                wlvif->p2p = 1;
                /* fall-through */
        case NL80211_IFTYPE_AP:
                wlvif->bss_type = BSS_TYPE_AP_BSS;
                break;
        default:
                wlvif->bss_type = MAX_BSS_TYPE;
                return -EOPNOTSUPP;
        }

        wlvif->role_id = WL12XX_INVALID_ROLE_ID;
        wlvif->dev_role_id = WL12XX_INVALID_ROLE_ID;
        wlvif->dev_hlid = WL12XX_INVALID_LINK_ID;

        if (wlvif->bss_type == BSS_TYPE_STA_BSS ||
            wlvif->bss_type == BSS_TYPE_IBSS) {
                /* init sta/ibss data */
                wlvif->sta.hlid = WL12XX_INVALID_LINK_ID;
                wl12xx_allocate_rate_policy(wl, &wlvif->sta.basic_rate_idx);
                wl12xx_allocate_rate_policy(wl, &wlvif->sta.ap_rate_idx);
                wl12xx_allocate_rate_policy(wl, &wlvif->sta.p2p_rate_idx);
        } else {
                /* init ap data */
                wlvif->ap.bcast_hlid = WL12XX_INVALID_LINK_ID;
                wlvif->ap.global_hlid = WL12XX_INVALID_LINK_ID;
                wl12xx_allocate_rate_policy(wl, &wlvif->ap.mgmt_rate_idx);
                wl12xx_allocate_rate_policy(wl, &wlvif->ap.bcast_rate_idx);
                for (i = 0; i < CONF_TX_MAX_AC_COUNT; i++)
                        wl12xx_allocate_rate_policy(wl,
                                                &wlvif->ap.ucast_rate_idx[i]);
        }

        wlvif->bitrate_masks[IEEE80211_BAND_2GHZ] = wl->conf.tx.basic_rate;
        wlvif->bitrate_masks[IEEE80211_BAND_5GHZ] = wl->conf.tx.basic_rate_5;
        wlvif->basic_rate_set = CONF_TX_RATE_MASK_BASIC;
        wlvif->basic_rate = CONF_TX_RATE_MASK_BASIC;
        wlvif->rate_set = CONF_TX_RATE_MASK_BASIC;
        wlvif->beacon_int = WL1271_DEFAULT_BEACON_INT;

        /*
         * mac80211 configures some values globally, while we treat them
         * per-interface. thus, on init, we have to copy them from wl
         */
        wlvif->band = wl->band;
        wlvif->channel = wl->channel;
        wlvif->power_level = wl->power_level;

        INIT_WORK(&wlvif->rx_streaming_enable_work,
                  wl1271_rx_streaming_enable_work);
        INIT_WORK(&wlvif->rx_streaming_disable_work,
                  wl1271_rx_streaming_disable_work);
        INIT_LIST_HEAD(&wlvif->list);

        setup_timer(&wlvif->rx_streaming_timer, wl1271_rx_streaming_timer,
                    (unsigned long) wlvif);
        return 0;
}

static bool wl12xx_init_fw(struct wl1271 *wl)
{
        int retries = WL1271_BOOT_RETRIES;
        bool booted = false;
        struct wiphy *wiphy = wl->hw->wiphy;
        int ret;

        while (retries) {
                retries--;
                ret = wl12xx_chip_wakeup(wl, false);
                if (ret < 0)
                        goto power_off;

                ret = wl->ops->boot(wl);
                if (ret < 0)
                        goto power_off;

                ret = wl1271_hw_init(wl);
                if (ret < 0)
                        goto irq_disable;

                booted = true;
                break;

irq_disable:
                mutex_unlock(&wl->mutex);
                /* Unlocking the mutex in the middle of handling is
                   inherently unsafe. In this case we deem it safe to do,
                   because we need to let any possibly pending IRQ out of
                   the system (and while we are WL1271_STATE_OFF the IRQ
                   work function will not do anything.) Also, any other
                   possible concurrent operations will fail due to the
                   current state, hence the wl1271 struct should be safe. */
                wlcore_disable_interrupts(wl);
                wl1271_flush_deferred_work(wl);
                cancel_work_sync(&wl->netstack_work);
                mutex_lock(&wl->mutex);
power_off:
                wl1271_power_off(wl);
        }

        if (!booted) {
                wl1271_error("firmware boot failed despite %d retries",
                             WL1271_BOOT_RETRIES);
                goto out;
        }

        wl1271_info("firmware booted (%s)", wl->chip.fw_ver_str);

        /* update hw/fw version info in wiphy struct */
        wiphy->hw_version = wl->chip.id;
        strncpy(wiphy->fw_version, wl->chip.fw_ver_str,
                sizeof(wiphy->fw_version));

        /*
         * Now we know if 11a is supported (info from the NVS), so disable
         * 11a channels if not supported
         */
        if (!wl->enable_11a)
                wiphy->bands[IEEE80211_BAND_5GHZ]->n_channels = 0;

        wl1271_debug(DEBUG_MAC80211, "11a is %ssupported",
                     wl->enable_11a ? "" : "not ");

        wl->state = WL1271_STATE_ON;
out:
        return booted;