The Design and Implementation of the FreeBSD Operating System, Second Edition
Now available: The Design and Implementation of the FreeBSD Operating System (Second Edition)


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

FreeBSD/Linux Kernel Cross Reference
sys/dev/wi/if_wi.c

Version: -  FREEBSD  -  FREEBSD-13-STABLE  -  FREEBSD-13-0  -  FREEBSD-12-STABLE  -  FREEBSD-12-0  -  FREEBSD-11-STABLE  -  FREEBSD-11-0  -  FREEBSD-10-STABLE  -  FREEBSD-10-0  -  FREEBSD-9-STABLE  -  FREEBSD-9-0  -  FREEBSD-8-STABLE  -  FREEBSD-8-0  -  FREEBSD-7-STABLE  -  FREEBSD-7-0  -  FREEBSD-6-STABLE  -  FREEBSD-6-0  -  FREEBSD-5-STABLE  -  FREEBSD-5-0  -  FREEBSD-4-STABLE  -  FREEBSD-3-STABLE  -  FREEBSD22  -  l41  -  OPENBSD  -  linux-2.6  -  MK84  -  PLAN9  -  xnu-8792 
SearchContext: -  none  -  3  -  10 

    1 /*-
    2  * Copyright (c) 1997, 1998, 1999
    3  *      Bill Paul <wpaul@ctr.columbia.edu>.  All rights reserved.
    4  *
    5  * Redistribution and use in source and binary forms, with or without
    6  * modification, are permitted provided that the following conditions
    7  * are met:
    8  * 1. Redistributions of source code must retain the above copyright
    9  *    notice, this list of conditions and the following disclaimer.
   10  * 2. Redistributions in binary form must reproduce the above copyright
   11  *    notice, this list of conditions and the following disclaimer in the
   12  *    documentation and/or other materials provided with the distribution.
   13  * 3. All advertising materials mentioning features or use of this software
   14  *    must display the following acknowledgement:
   15  *      This product includes software developed by Bill Paul.
   16  * 4. Neither the name of the author nor the names of any co-contributors
   17  *    may be used to endorse or promote products derived from this software
   18  *    without specific prior written permission.
   19  *
   20  * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
   21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
   22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
   23  * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR THE VOICES IN HIS HEAD
   24  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
   25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
   26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
   27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
   28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
   29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
   30  * THE POSSIBILITY OF SUCH DAMAGE.
   31  */
   32 
   33 /*
   34  * Lucent WaveLAN/IEEE 802.11 PCMCIA driver.
   35  *
   36  * Original FreeBSD driver written by Bill Paul <wpaul@ctr.columbia.edu>
   37  * Electrical Engineering Department
   38  * Columbia University, New York City
   39  */
   40 
   41 /*
   42  * The WaveLAN/IEEE adapter is the second generation of the WaveLAN
   43  * from Lucent. Unlike the older cards, the new ones are programmed
   44  * entirely via a firmware-driven controller called the Hermes.
   45  * Unfortunately, Lucent will not release the Hermes programming manual
   46  * without an NDA (if at all). What they do release is an API library
   47  * called the HCF (Hardware Control Functions) which is supposed to
   48  * do the device-specific operations of a device driver for you. The
   49  * publicly available version of the HCF library (the 'HCF Light') is 
   50  * a) extremely gross, b) lacks certain features, particularly support
   51  * for 802.11 frames, and c) is contaminated by the GNU Public License.
   52  *
   53  * This driver does not use the HCF or HCF Light at all. Instead, it
   54  * programs the Hermes controller directly, using information gleaned
   55  * from the HCF Light code and corresponding documentation.
   56  *
   57  * This driver supports the ISA, PCMCIA and PCI versions of the Lucent
   58  * WaveLan cards (based on the Hermes chipset), as well as the newer
   59  * Prism 2 chipsets with firmware from Intersil and Symbol.
   60  */
   61 
   62 #include <sys/cdefs.h>
   63 __FBSDID("$FreeBSD: releng/11.0/sys/dev/wi/if_wi.c 300292 2016-05-20 08:58:06Z avos $");
   64 
   65 #include "opt_wlan.h"
   66 
   67 #define WI_HERMES_STATS_WAR     /* Work around stats counter bug. */
   68 
   69 #include <sys/param.h>
   70 #include <sys/systm.h>
   71 #include <sys/endian.h>
   72 #include <sys/sockio.h>
   73 #include <sys/mbuf.h>
   74 #include <sys/priv.h>
   75 #include <sys/proc.h>
   76 #include <sys/kernel.h>
   77 #include <sys/malloc.h>
   78 #include <sys/socket.h>
   79 #include <sys/module.h>
   80 #include <sys/bus.h>
   81 #include <sys/random.h>
   82 #include <sys/syslog.h>
   83 #include <sys/sysctl.h>
   84 
   85 #include <machine/bus.h>
   86 #include <machine/resource.h>
   87 #include <machine/atomic.h>
   88 #include <sys/rman.h>
   89 
   90 #include <net/if.h>
   91 #include <net/if_var.h>
   92 #include <net/if_arp.h>
   93 #include <net/ethernet.h>
   94 #include <net/if_dl.h>
   95 #include <net/if_llc.h>
   96 #include <net/if_media.h>
   97 #include <net/if_types.h>
   98 
   99 #include <net80211/ieee80211_var.h>
  100 #include <net80211/ieee80211_ioctl.h>
  101 #include <net80211/ieee80211_radiotap.h>
  102 
  103 #include <netinet/in.h>
  104 #include <netinet/in_systm.h>
  105 #include <netinet/in_var.h>
  106 #include <netinet/ip.h>
  107 #include <netinet/if_ether.h>
  108 
  109 #include <net/bpf.h>
  110 
  111 #include <dev/wi/if_wavelan_ieee.h>
  112 #include <dev/wi/if_wireg.h>
  113 #include <dev/wi/if_wivar.h>
  114 
  115 static struct ieee80211vap *wi_vap_create(struct ieee80211com *,
  116                     const char [IFNAMSIZ], int, enum ieee80211_opmode, int,
  117                     const uint8_t [IEEE80211_ADDR_LEN],
  118                     const uint8_t [IEEE80211_ADDR_LEN]);
  119 static void wi_vap_delete(struct ieee80211vap *vap);
  120 static int  wi_transmit(struct ieee80211com *, struct mbuf *);
  121 static void wi_start(struct wi_softc *);
  122 static int  wi_start_tx(struct wi_softc *, struct wi_frame *, struct mbuf *);
  123 static int  wi_raw_xmit(struct ieee80211_node *, struct mbuf *,
  124                 const struct ieee80211_bpf_params *);
  125 static int  wi_newstate_sta(struct ieee80211vap *, enum ieee80211_state, int);
  126 static int  wi_newstate_hostap(struct ieee80211vap *, enum ieee80211_state,
  127                 int);
  128 static void wi_recv_mgmt(struct ieee80211_node *ni, struct mbuf *m,
  129                 int subtype, const struct ieee80211_rx_stats *rxs,
  130                 int rssi, int nf);
  131 static int  wi_reset(struct wi_softc *);
  132 static void wi_watchdog(void *);
  133 static void wi_parent(struct ieee80211com *);
  134 static void wi_media_status(struct ifnet *, struct ifmediareq *);
  135 static void wi_rx_intr(struct wi_softc *);
  136 static void wi_tx_intr(struct wi_softc *);
  137 static void wi_tx_ex_intr(struct wi_softc *);
  138 
  139 static void wi_info_intr(struct wi_softc *);
  140 
  141 static int  wi_write_txrate(struct wi_softc *, struct ieee80211vap *);
  142 static int  wi_write_wep(struct wi_softc *, struct ieee80211vap *);
  143 static int  wi_write_multi(struct wi_softc *);
  144 static void wi_update_mcast(struct ieee80211com *);
  145 static void wi_update_promisc(struct ieee80211com *);
  146 static int  wi_alloc_fid(struct wi_softc *, int, int *);
  147 static void wi_read_nicid(struct wi_softc *);
  148 static int  wi_write_ssid(struct wi_softc *, int, u_int8_t *, int);
  149 
  150 static int  wi_cmd(struct wi_softc *, int, int, int, int);
  151 static int  wi_seek_bap(struct wi_softc *, int, int);
  152 static int  wi_read_bap(struct wi_softc *, int, int, void *, int);
  153 static int  wi_write_bap(struct wi_softc *, int, int, const void *, int);
  154 static int  wi_mwrite_bap(struct wi_softc *, int, int, struct mbuf *, int);
  155 static int  wi_read_rid(struct wi_softc *, int, void *, int *);
  156 static int  wi_write_rid(struct wi_softc *, int, const void *, int);
  157 static int  wi_write_appie(struct wi_softc *, int, const struct ieee80211_appie *);
  158 static u_int16_t wi_read_chanmask(struct wi_softc *);
  159 
  160 static void wi_scan_start(struct ieee80211com *);
  161 static void wi_scan_end(struct ieee80211com *);
  162 static void wi_getradiocaps(struct ieee80211com *, int, int *,
  163                 struct ieee80211_channel[]);
  164 static void wi_set_channel(struct ieee80211com *);
  165         
  166 static __inline int
  167 wi_write_val(struct wi_softc *sc, int rid, u_int16_t val)
  168 {
  169 
  170         val = htole16(val);
  171         return wi_write_rid(sc, rid, &val, sizeof(val));
  172 }
  173 
  174 static SYSCTL_NODE(_hw, OID_AUTO, wi, CTLFLAG_RD, 0,
  175             "Wireless driver parameters");
  176 
  177 static  struct timeval lasttxerror;     /* time of last tx error msg */
  178 static  int curtxeps;                   /* current tx error msgs/sec */
  179 static  int wi_txerate = 0;             /* tx error rate: max msgs/sec */
  180 SYSCTL_INT(_hw_wi, OID_AUTO, txerate, CTLFLAG_RW, &wi_txerate,
  181             0, "max tx error msgs/sec; 0 to disable msgs");
  182 
  183 #define WI_DEBUG
  184 #ifdef WI_DEBUG
  185 static  int wi_debug = 0;
  186 SYSCTL_INT(_hw_wi, OID_AUTO, debug, CTLFLAG_RW, &wi_debug,
  187             0, "control debugging printfs");
  188 #define DPRINTF(X)      if (wi_debug) printf X
  189 #else
  190 #define DPRINTF(X)
  191 #endif
  192 
  193 #define WI_INTRS        (WI_EV_RX | WI_EV_ALLOC | WI_EV_INFO)
  194 
  195 struct wi_card_ident wi_card_ident[] = {
  196         /* CARD_ID                      CARD_NAME               FIRM_TYPE */
  197         { WI_NIC_LUCENT_ID,             WI_NIC_LUCENT_STR,      WI_LUCENT },
  198         { WI_NIC_SONY_ID,               WI_NIC_SONY_STR,        WI_LUCENT },
  199         { WI_NIC_LUCENT_EMB_ID,         WI_NIC_LUCENT_EMB_STR,  WI_LUCENT },
  200         { WI_NIC_EVB2_ID,               WI_NIC_EVB2_STR,        WI_INTERSIL },
  201         { WI_NIC_HWB3763_ID,            WI_NIC_HWB3763_STR,     WI_INTERSIL },
  202         { WI_NIC_HWB3163_ID,            WI_NIC_HWB3163_STR,     WI_INTERSIL },
  203         { WI_NIC_HWB3163B_ID,           WI_NIC_HWB3163B_STR,    WI_INTERSIL },
  204         { WI_NIC_EVB3_ID,               WI_NIC_EVB3_STR,        WI_INTERSIL },
  205         { WI_NIC_HWB1153_ID,            WI_NIC_HWB1153_STR,     WI_INTERSIL },
  206         { WI_NIC_P2_SST_ID,             WI_NIC_P2_SST_STR,      WI_INTERSIL },
  207         { WI_NIC_EVB2_SST_ID,           WI_NIC_EVB2_SST_STR,    WI_INTERSIL },
  208         { WI_NIC_3842_EVA_ID,           WI_NIC_3842_EVA_STR,    WI_INTERSIL },
  209         { WI_NIC_3842_PCMCIA_AMD_ID,    WI_NIC_3842_PCMCIA_STR, WI_INTERSIL },
  210         { WI_NIC_3842_PCMCIA_SST_ID,    WI_NIC_3842_PCMCIA_STR, WI_INTERSIL },
  211         { WI_NIC_3842_PCMCIA_ATL_ID,    WI_NIC_3842_PCMCIA_STR, WI_INTERSIL },
  212         { WI_NIC_3842_PCMCIA_ATS_ID,    WI_NIC_3842_PCMCIA_STR, WI_INTERSIL },
  213         { WI_NIC_3842_MINI_AMD_ID,      WI_NIC_3842_MINI_STR,   WI_INTERSIL },
  214         { WI_NIC_3842_MINI_SST_ID,      WI_NIC_3842_MINI_STR,   WI_INTERSIL },
  215         { WI_NIC_3842_MINI_ATL_ID,      WI_NIC_3842_MINI_STR,   WI_INTERSIL },
  216         { WI_NIC_3842_MINI_ATS_ID,      WI_NIC_3842_MINI_STR,   WI_INTERSIL },
  217         { WI_NIC_3842_PCI_AMD_ID,       WI_NIC_3842_PCI_STR,    WI_INTERSIL },
  218         { WI_NIC_3842_PCI_SST_ID,       WI_NIC_3842_PCI_STR,    WI_INTERSIL },
  219         { WI_NIC_3842_PCI_ATS_ID,       WI_NIC_3842_PCI_STR,    WI_INTERSIL },
  220         { WI_NIC_3842_PCI_ATL_ID,       WI_NIC_3842_PCI_STR,    WI_INTERSIL },
  221         { WI_NIC_P3_PCMCIA_AMD_ID,      WI_NIC_P3_PCMCIA_STR,   WI_INTERSIL },
  222         { WI_NIC_P3_PCMCIA_SST_ID,      WI_NIC_P3_PCMCIA_STR,   WI_INTERSIL },
  223         { WI_NIC_P3_PCMCIA_ATL_ID,      WI_NIC_P3_PCMCIA_STR,   WI_INTERSIL },
  224         { WI_NIC_P3_PCMCIA_ATS_ID,      WI_NIC_P3_PCMCIA_STR,   WI_INTERSIL },
  225         { WI_NIC_P3_MINI_AMD_ID,        WI_NIC_P3_MINI_STR,     WI_INTERSIL },
  226         { WI_NIC_P3_MINI_SST_ID,        WI_NIC_P3_MINI_STR,     WI_INTERSIL },
  227         { WI_NIC_P3_MINI_ATL_ID,        WI_NIC_P3_MINI_STR,     WI_INTERSIL },
  228         { WI_NIC_P3_MINI_ATS_ID,        WI_NIC_P3_MINI_STR,     WI_INTERSIL },
  229         { 0,    NULL,   0 },
  230 };
  231 
  232 static char *wi_firmware_names[] = { "none", "Hermes", "Intersil", "Symbol" };
  233 
  234 devclass_t wi_devclass;
  235 
  236 int
  237 wi_attach(device_t dev)
  238 {
  239         struct wi_softc *sc = device_get_softc(dev);
  240         struct ieee80211com *ic = &sc->sc_ic;
  241         int i, nrates, buflen;
  242         u_int16_t val;
  243         u_int8_t ratebuf[2 + IEEE80211_RATE_SIZE];
  244         struct ieee80211_rateset *rs;
  245         struct sysctl_ctx_list *sctx;
  246         struct sysctl_oid *soid;
  247         static const u_int8_t empty_macaddr[IEEE80211_ADDR_LEN] = {
  248                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
  249         };
  250         int error;
  251 
  252         sc->sc_firmware_type = WI_NOTYPE;
  253         sc->wi_cmd_count = 500;
  254         /* Reset the NIC. */
  255         if (wi_reset(sc) != 0) {
  256                 wi_free(dev);
  257                 return ENXIO;           /* XXX */
  258         }
  259 
  260         /* Read NIC identification */
  261         wi_read_nicid(sc);
  262         switch (sc->sc_firmware_type) {
  263         case WI_LUCENT:
  264                 if (sc->sc_sta_firmware_ver < 60006)
  265                         goto reject;
  266                 break;
  267         case WI_INTERSIL:
  268                 if (sc->sc_sta_firmware_ver < 800)
  269                         goto reject;
  270                 break;
  271         default:
  272         reject:
  273                 device_printf(dev, "Sorry, this card is not supported "
  274                     "(type %d, firmware ver %d)\n",
  275                     sc->sc_firmware_type, sc->sc_sta_firmware_ver);
  276                 wi_free(dev);
  277                 return EOPNOTSUPP; 
  278         }
  279 
  280         /* Export info about the device via sysctl */
  281         sctx = device_get_sysctl_ctx(dev);
  282         soid = device_get_sysctl_tree(dev);
  283         SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO,
  284             "firmware_type", CTLFLAG_RD,
  285             wi_firmware_names[sc->sc_firmware_type], 0,
  286             "Firmware type string");
  287         SYSCTL_ADD_INT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "sta_version",
  288             CTLFLAG_RD, &sc->sc_sta_firmware_ver, 0,
  289             "Station Firmware version");
  290         if (sc->sc_firmware_type == WI_INTERSIL)
  291                 SYSCTL_ADD_INT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO,
  292                     "pri_version", CTLFLAG_RD, &sc->sc_pri_firmware_ver, 0,
  293                     "Primary Firmware version");
  294         SYSCTL_ADD_UINT(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "nic_id",
  295             CTLFLAG_RD, &sc->sc_nic_id, 0, "NIC id");
  296         SYSCTL_ADD_STRING(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "nic_name",
  297             CTLFLAG_RD, sc->sc_nic_name, 0, "NIC name");
  298 
  299         mtx_init(&sc->sc_mtx, device_get_nameunit(dev), MTX_NETWORK_LOCK,
  300             MTX_DEF | MTX_RECURSE);
  301         callout_init_mtx(&sc->sc_watchdog, &sc->sc_mtx, 0);
  302         mbufq_init(&sc->sc_snd, ifqmaxlen);
  303 
  304         /*
  305          * Read the station address.
  306          * And do it twice. I've seen PRISM-based cards that return
  307          * an error when trying to read it the first time, which causes
  308          * the probe to fail.
  309          */
  310         buflen = IEEE80211_ADDR_LEN;
  311         error = wi_read_rid(sc, WI_RID_MAC_NODE, &ic->ic_macaddr, &buflen);
  312         if (error != 0) {
  313                 buflen = IEEE80211_ADDR_LEN;
  314                 error = wi_read_rid(sc, WI_RID_MAC_NODE, &ic->ic_macaddr,
  315                     &buflen);
  316         }
  317         if (error || IEEE80211_ADDR_EQ(&ic->ic_macaddr, empty_macaddr)) {
  318                 if (error != 0)
  319                         device_printf(dev, "mac read failed %d\n", error);
  320                 else {
  321                         device_printf(dev, "mac read failed (all zeros)\n");
  322                         error = ENXIO;
  323                 }
  324                 wi_free(dev);
  325                 return (error);
  326         }
  327 
  328         ic->ic_softc = sc;
  329         ic->ic_name = device_get_nameunit(dev);
  330         ic->ic_phytype = IEEE80211_T_DS;
  331         ic->ic_opmode = IEEE80211_M_STA;
  332         ic->ic_caps = IEEE80211_C_STA
  333                     | IEEE80211_C_PMGT
  334                     | IEEE80211_C_MONITOR
  335                     ;
  336 
  337         /*
  338          * Query the card for available channels and setup the
  339          * channel table.  We assume these are all 11b channels.
  340          */
  341         sc->sc_chanmask = wi_read_chanmask(sc);
  342         wi_getradiocaps(ic, IEEE80211_CHAN_MAX, &ic->ic_nchans,
  343             ic->ic_channels);
  344 
  345         /*
  346          * Set flags based on firmware version.
  347          */
  348         switch (sc->sc_firmware_type) {
  349         case WI_LUCENT:
  350                 sc->sc_ntxbuf = 1;
  351                 ic->ic_caps |= IEEE80211_C_IBSS;
  352 
  353                 sc->sc_ibss_port = WI_PORTTYPE_BSS;
  354                 sc->sc_monitor_port = WI_PORTTYPE_ADHOC;
  355                 sc->sc_min_rssi = WI_LUCENT_MIN_RSSI;
  356                 sc->sc_max_rssi = WI_LUCENT_MAX_RSSI;
  357                 sc->sc_dbm_offset = WI_LUCENT_DBM_OFFSET;
  358                 break;
  359         case WI_INTERSIL:
  360                 sc->sc_ntxbuf = WI_NTXBUF;
  361                 sc->sc_flags |= WI_FLAGS_HAS_FRAGTHR
  362                              |  WI_FLAGS_HAS_ROAMING;
  363                 /*
  364                  * Old firmware are slow, so give peace a chance.
  365                  */
  366                 if (sc->sc_sta_firmware_ver < 10000)
  367                         sc->wi_cmd_count = 5000;
  368                 if (sc->sc_sta_firmware_ver > 10101)
  369                         sc->sc_flags |= WI_FLAGS_HAS_DBMADJUST;
  370                 ic->ic_caps |= IEEE80211_C_IBSS;
  371                 /*
  372                  * version 0.8.3 and newer are the only ones that are known
  373                  * to currently work.  Earlier versions can be made to work,
  374                  * at least according to the Linux driver but we require
  375                  * monitor mode so this is irrelevant.
  376                  */
  377                 ic->ic_caps |= IEEE80211_C_HOSTAP;
  378                 if (sc->sc_sta_firmware_ver >= 10603)
  379                         sc->sc_flags |= WI_FLAGS_HAS_ENHSECURITY;
  380                 if (sc->sc_sta_firmware_ver >= 10700) {
  381                         /*
  382                          * 1.7.0+ have the necessary support for sta mode WPA.
  383                          */
  384                         sc->sc_flags |= WI_FLAGS_HAS_WPASUPPORT;
  385                         ic->ic_caps |= IEEE80211_C_WPA;
  386                 }
  387 
  388                 sc->sc_ibss_port = WI_PORTTYPE_IBSS;
  389                 sc->sc_monitor_port = WI_PORTTYPE_APSILENT;
  390                 sc->sc_min_rssi = WI_PRISM_MIN_RSSI;
  391                 sc->sc_max_rssi = WI_PRISM_MAX_RSSI;
  392                 sc->sc_dbm_offset = WI_PRISM_DBM_OFFSET;
  393                 break;
  394         }
  395 
  396         /*
  397          * Find out if we support WEP on this card.
  398          */
  399         buflen = sizeof(val);
  400         if (wi_read_rid(sc, WI_RID_WEP_AVAIL, &val, &buflen) == 0 &&
  401             val != htole16(0))
  402                 ic->ic_cryptocaps |= IEEE80211_CRYPTO_WEP;
  403 
  404         /* Find supported rates. */
  405         buflen = sizeof(ratebuf);
  406         rs = &ic->ic_sup_rates[IEEE80211_MODE_11B];
  407         if (wi_read_rid(sc, WI_RID_DATA_RATES, ratebuf, &buflen) == 0) {
  408                 nrates = le16toh(*(u_int16_t *)ratebuf);
  409                 if (nrates > IEEE80211_RATE_MAXSIZE)
  410                         nrates = IEEE80211_RATE_MAXSIZE;
  411                 rs->rs_nrates = 0;
  412                 for (i = 0; i < nrates; i++)
  413                         if (ratebuf[2+i])
  414                                 rs->rs_rates[rs->rs_nrates++] = ratebuf[2+i];
  415         } else {
  416                 /* XXX fallback on error? */
  417         }
  418 
  419         buflen = sizeof(val);
  420         if ((sc->sc_flags & WI_FLAGS_HAS_DBMADJUST) &&
  421             wi_read_rid(sc, WI_RID_DBM_ADJUST, &val, &buflen) == 0) {
  422                 sc->sc_dbm_offset = le16toh(val);
  423         }
  424 
  425         sc->sc_portnum = WI_DEFAULT_PORT;
  426 
  427         ieee80211_ifattach(ic);
  428         ic->ic_raw_xmit = wi_raw_xmit;
  429         ic->ic_scan_start = wi_scan_start;
  430         ic->ic_scan_end = wi_scan_end;
  431         ic->ic_getradiocaps = wi_getradiocaps;
  432         ic->ic_set_channel = wi_set_channel;
  433         ic->ic_vap_create = wi_vap_create;
  434         ic->ic_vap_delete = wi_vap_delete;
  435         ic->ic_update_mcast = wi_update_mcast;
  436         ic->ic_update_promisc = wi_update_promisc;
  437         ic->ic_transmit = wi_transmit;
  438         ic->ic_parent = wi_parent;
  439 
  440         ieee80211_radiotap_attach(ic,
  441             &sc->sc_tx_th.wt_ihdr, sizeof(sc->sc_tx_th),
  442                 WI_TX_RADIOTAP_PRESENT,
  443             &sc->sc_rx_th.wr_ihdr, sizeof(sc->sc_rx_th),
  444                 WI_RX_RADIOTAP_PRESENT);
  445 
  446         if (bootverbose)
  447                 ieee80211_announce(ic);
  448 
  449         error = bus_setup_intr(dev, sc->irq, INTR_TYPE_NET | INTR_MPSAFE,
  450             NULL, wi_intr, sc, &sc->wi_intrhand);
  451         if (error) {
  452                 device_printf(dev, "bus_setup_intr() failed! (%d)\n", error);
  453                 ieee80211_ifdetach(ic);
  454                 wi_free(dev);
  455                 return error;
  456         }
  457 
  458         return (0);
  459 }
  460 
  461 int
  462 wi_detach(device_t dev)
  463 {
  464         struct wi_softc *sc = device_get_softc(dev);
  465         struct ieee80211com *ic = &sc->sc_ic;
  466 
  467         WI_LOCK(sc);
  468 
  469         /* check if device was removed */
  470         sc->wi_gone |= !bus_child_present(dev);
  471 
  472         wi_stop(sc, 0);
  473         WI_UNLOCK(sc);
  474         ieee80211_ifdetach(ic);
  475 
  476         bus_teardown_intr(dev, sc->irq, sc->wi_intrhand);
  477         wi_free(dev);
  478         mbufq_drain(&sc->sc_snd);
  479         mtx_destroy(&sc->sc_mtx);
  480         return (0);
  481 }
  482 
  483 static struct ieee80211vap *
  484 wi_vap_create(struct ieee80211com *ic, const char name[IFNAMSIZ], int unit,
  485     enum ieee80211_opmode opmode, int flags,
  486     const uint8_t bssid[IEEE80211_ADDR_LEN],
  487     const uint8_t mac[IEEE80211_ADDR_LEN])
  488 {
  489         struct wi_softc *sc = ic->ic_softc;
  490         struct wi_vap *wvp;
  491         struct ieee80211vap *vap;
  492 
  493         if (!TAILQ_EMPTY(&ic->ic_vaps))         /* only one at a time */
  494                 return NULL;
  495         wvp = malloc(sizeof(struct wi_vap), M_80211_VAP, M_WAITOK | M_ZERO);
  496 
  497         vap = &wvp->wv_vap;
  498         ieee80211_vap_setup(ic, vap, name, unit, opmode, flags, bssid);
  499 
  500         vap->iv_max_aid = WI_MAX_AID;
  501 
  502         switch (opmode) {
  503         case IEEE80211_M_STA:
  504                 sc->sc_porttype = WI_PORTTYPE_BSS;
  505                 wvp->wv_newstate = vap->iv_newstate;
  506                 vap->iv_newstate = wi_newstate_sta;
  507                 /* need to filter mgt frames to avoid confusing state machine */
  508                 wvp->wv_recv_mgmt = vap->iv_recv_mgmt;
  509                 vap->iv_recv_mgmt = wi_recv_mgmt;
  510                 break;
  511         case IEEE80211_M_IBSS:
  512                 sc->sc_porttype = sc->sc_ibss_port;
  513                 wvp->wv_newstate = vap->iv_newstate;
  514                 vap->iv_newstate = wi_newstate_sta;
  515                 break;
  516         case IEEE80211_M_AHDEMO:
  517                 sc->sc_porttype = WI_PORTTYPE_ADHOC;
  518                 break;
  519         case IEEE80211_M_HOSTAP:
  520                 sc->sc_porttype = WI_PORTTYPE_HOSTAP;
  521                 wvp->wv_newstate = vap->iv_newstate;
  522                 vap->iv_newstate = wi_newstate_hostap;
  523                 break;
  524         case IEEE80211_M_MONITOR:
  525                 sc->sc_porttype = sc->sc_monitor_port;
  526                 break;
  527         default:
  528                 break;
  529         }
  530 
  531         /* complete setup */
  532         ieee80211_vap_attach(vap, ieee80211_media_change, wi_media_status, mac);
  533         ic->ic_opmode = opmode;
  534         return vap;
  535 }
  536 
  537 static void
  538 wi_vap_delete(struct ieee80211vap *vap)
  539 {
  540         struct wi_vap *wvp = WI_VAP(vap);
  541 
  542         ieee80211_vap_detach(vap);
  543         free(wvp, M_80211_VAP);
  544 }
  545 
  546 int
  547 wi_shutdown(device_t dev)
  548 {
  549         struct wi_softc *sc = device_get_softc(dev);
  550 
  551         WI_LOCK(sc);
  552         wi_stop(sc, 1);
  553         WI_UNLOCK(sc);
  554         return (0);
  555 }
  556 
  557 void
  558 wi_intr(void *arg)
  559 {
  560         struct wi_softc *sc = arg;
  561         u_int16_t status;
  562 
  563         WI_LOCK(sc);
  564 
  565         if (sc->wi_gone || !sc->sc_enabled ||
  566             (sc->sc_flags & WI_FLAGS_RUNNING) == 0) {
  567                 CSR_WRITE_2(sc, WI_INT_EN, 0);
  568                 CSR_WRITE_2(sc, WI_EVENT_ACK, 0xFFFF);
  569                 WI_UNLOCK(sc);
  570                 return;
  571         }
  572 
  573         /* Disable interrupts. */
  574         CSR_WRITE_2(sc, WI_INT_EN, 0);
  575 
  576         status = CSR_READ_2(sc, WI_EVENT_STAT);
  577         if (status & WI_EV_RX)
  578                 wi_rx_intr(sc);
  579         if (status & WI_EV_ALLOC)
  580                 wi_tx_intr(sc);
  581         if (status & WI_EV_TX_EXC)
  582                 wi_tx_ex_intr(sc);
  583         if (status & WI_EV_INFO)
  584                 wi_info_intr(sc);
  585         if (mbufq_first(&sc->sc_snd) != NULL)
  586                 wi_start(sc);
  587 
  588         /* Re-enable interrupts. */
  589         CSR_WRITE_2(sc, WI_INT_EN, WI_INTRS);
  590 
  591         WI_UNLOCK(sc);
  592 
  593         return;
  594 }
  595 
  596 static void
  597 wi_enable(struct wi_softc *sc)
  598 {
  599         /* Enable interrupts */
  600         CSR_WRITE_2(sc, WI_INT_EN, WI_INTRS);
  601 
  602         /* enable port */
  603         wi_cmd(sc, WI_CMD_ENABLE | sc->sc_portnum, 0, 0, 0);
  604         sc->sc_enabled = 1;
  605 }
  606 
  607 static int
  608 wi_setup_locked(struct wi_softc *sc, int porttype, int mode,
  609         const uint8_t mac[IEEE80211_ADDR_LEN])
  610 {
  611         int i;
  612 
  613         wi_reset(sc);
  614 
  615         wi_write_val(sc, WI_RID_PORTTYPE, porttype);
  616         wi_write_val(sc, WI_RID_CREATE_IBSS, mode);
  617         wi_write_val(sc, WI_RID_MAX_DATALEN, 2304);
  618         /* XXX IEEE80211_BPF_NOACK wants 0 */
  619         wi_write_val(sc, WI_RID_ALT_RETRY_CNT, 2);
  620         if (sc->sc_flags & WI_FLAGS_HAS_ROAMING)
  621                 wi_write_val(sc, WI_RID_ROAMING_MODE, 3); /* NB: disabled */
  622 
  623         wi_write_rid(sc, WI_RID_MAC_NODE, mac, IEEE80211_ADDR_LEN);
  624 
  625         /* Allocate fids for the card */
  626         sc->sc_buflen = IEEE80211_MAX_LEN + sizeof(struct wi_frame);
  627         for (i = 0; i < sc->sc_ntxbuf; i++) {
  628                 int error = wi_alloc_fid(sc, sc->sc_buflen,
  629                     &sc->sc_txd[i].d_fid);
  630                 if (error) {
  631                         device_printf(sc->sc_dev,
  632                             "tx buffer allocation failed (error %u)\n",
  633                             error);
  634                         return error;
  635                 }
  636                 sc->sc_txd[i].d_len = 0;
  637         }
  638         sc->sc_txcur = sc->sc_txnext = 0;
  639 
  640         return 0;
  641 }
  642 
  643 void
  644 wi_init(struct wi_softc *sc)
  645 {
  646         int wasenabled;
  647 
  648         WI_LOCK_ASSERT(sc);
  649 
  650         wasenabled = sc->sc_enabled;
  651         if (wasenabled)
  652                 wi_stop(sc, 1);
  653 
  654         if (wi_setup_locked(sc, sc->sc_porttype, 3,
  655             sc->sc_ic.ic_macaddr) != 0) {
  656                 device_printf(sc->sc_dev, "interface not running\n");
  657                 wi_stop(sc, 1);
  658                 return;
  659         }
  660 
  661         sc->sc_flags |= WI_FLAGS_RUNNING;
  662 
  663         callout_reset(&sc->sc_watchdog, hz, wi_watchdog, sc);
  664 
  665         wi_enable(sc);                  /* Enable desired port */
  666 }
  667 
  668 void
  669 wi_stop(struct wi_softc *sc, int disable)
  670 {
  671 
  672         WI_LOCK_ASSERT(sc);
  673 
  674         if (sc->sc_enabled && !sc->wi_gone) {
  675                 CSR_WRITE_2(sc, WI_INT_EN, 0);
  676                 wi_cmd(sc, WI_CMD_DISABLE | sc->sc_portnum, 0, 0, 0);
  677                 if (disable)
  678                         sc->sc_enabled = 0;
  679         } else if (sc->wi_gone && disable)      /* gone --> not enabled */
  680                 sc->sc_enabled = 0;
  681 
  682         callout_stop(&sc->sc_watchdog);
  683         sc->sc_tx_timer = 0;
  684         sc->sc_false_syns = 0;
  685 
  686         sc->sc_flags &= ~WI_FLAGS_RUNNING;
  687 }
  688 
  689 static void
  690 wi_getradiocaps(struct ieee80211com *ic,
  691     int maxchans, int *nchans, struct ieee80211_channel chans[])
  692 {
  693         struct wi_softc *sc = ic->ic_softc;
  694         u_int8_t bands[IEEE80211_MODE_BYTES];
  695         int i;
  696 
  697         memset(bands, 0, sizeof(bands));
  698         setbit(bands, IEEE80211_MODE_11B);
  699 
  700         for (i = 1; i < 16; i++) {
  701                 if (sc->sc_chanmask & (1 << i)) {
  702                         /* XXX txpowers? */
  703                         ieee80211_add_channel(chans, maxchans, nchans,
  704                             i, 0, 0, 0, bands);
  705                 }
  706         }
  707 }
  708 
  709 static void
  710 wi_set_channel(struct ieee80211com *ic)
  711 {
  712         struct wi_softc *sc = ic->ic_softc;
  713 
  714         DPRINTF(("%s: channel %d, %sscanning\n", __func__,
  715             ieee80211_chan2ieee(ic, ic->ic_curchan),
  716             ic->ic_flags & IEEE80211_F_SCAN ? "" : "!"));
  717 
  718         WI_LOCK(sc);
  719         wi_write_val(sc, WI_RID_OWN_CHNL,
  720             ieee80211_chan2ieee(ic, ic->ic_curchan));
  721         WI_UNLOCK(sc);
  722 }
  723 
  724 static void
  725 wi_scan_start(struct ieee80211com *ic)
  726 {
  727         struct wi_softc *sc = ic->ic_softc;
  728         struct ieee80211_scan_state *ss = ic->ic_scan;
  729 
  730         DPRINTF(("%s\n", __func__));
  731 
  732         WI_LOCK(sc);
  733         /*
  734          * Switch device to monitor mode.
  735          */
  736         wi_write_val(sc, WI_RID_PORTTYPE, sc->sc_monitor_port);
  737         if (sc->sc_firmware_type == WI_INTERSIL) {
  738                 wi_cmd(sc, WI_CMD_DISABLE | WI_PORT0, 0, 0, 0);
  739                 wi_cmd(sc, WI_CMD_ENABLE | WI_PORT0, 0, 0, 0);
  740         }
  741         /* force full dwell time to compensate for firmware overhead */
  742         ss->ss_mindwell = ss->ss_maxdwell = msecs_to_ticks(400);
  743         WI_UNLOCK(sc);
  744 
  745 }
  746 
  747 static void
  748 wi_scan_end(struct ieee80211com *ic)
  749 {
  750         struct wi_softc *sc = ic->ic_softc;
  751 
  752         DPRINTF(("%s: restore port type %d\n", __func__, sc->sc_porttype));
  753 
  754         WI_LOCK(sc);
  755         wi_write_val(sc, WI_RID_PORTTYPE, sc->sc_porttype);
  756         if (sc->sc_firmware_type == WI_INTERSIL) {
  757                 wi_cmd(sc, WI_CMD_DISABLE | WI_PORT0, 0, 0, 0);
  758                 wi_cmd(sc, WI_CMD_ENABLE | WI_PORT0, 0, 0, 0);
  759         }
  760         WI_UNLOCK(sc);
  761 }
  762 
  763 static void
  764 wi_recv_mgmt(struct ieee80211_node *ni, struct mbuf *m,
  765         int subtype, const struct ieee80211_rx_stats *rxs, int rssi, int nf)
  766 {
  767         struct ieee80211vap *vap = ni->ni_vap;
  768 
  769         switch (subtype) {
  770         case IEEE80211_FC0_SUBTYPE_AUTH:
  771         case IEEE80211_FC0_SUBTYPE_ASSOC_RESP:
  772         case IEEE80211_FC0_SUBTYPE_REASSOC_RESP:
  773                 /* NB: filter frames that trigger state changes */
  774                 return;
  775         }
  776         WI_VAP(vap)->wv_recv_mgmt(ni, m, subtype, rxs, rssi, nf);
  777 }
  778 
  779 static int
  780 wi_newstate_sta(struct ieee80211vap *vap, enum ieee80211_state nstate, int arg)
  781 {
  782         struct ieee80211com *ic = vap->iv_ic;
  783         struct ieee80211_node *bss;
  784         struct wi_softc *sc = ic->ic_softc;
  785 
  786         DPRINTF(("%s: %s -> %s\n", __func__,
  787                 ieee80211_state_name[vap->iv_state],
  788                 ieee80211_state_name[nstate]));
  789 
  790         if (nstate == IEEE80211_S_AUTH) {
  791                 WI_LOCK(sc);
  792                 wi_setup_locked(sc, WI_PORTTYPE_BSS, 3, vap->iv_myaddr);
  793 
  794                 if (vap->iv_flags & IEEE80211_F_PMGTON) {
  795                         wi_write_val(sc, WI_RID_MAX_SLEEP, ic->ic_lintval);
  796                         wi_write_val(sc, WI_RID_PM_ENABLED, 1);
  797                 }
  798                 wi_write_val(sc, WI_RID_RTS_THRESH, vap->iv_rtsthreshold);
  799                 if (sc->sc_flags & WI_FLAGS_HAS_FRAGTHR)
  800                         wi_write_val(sc, WI_RID_FRAG_THRESH,
  801                             vap->iv_fragthreshold);
  802                 wi_write_txrate(sc, vap);
  803 
  804                 bss = vap->iv_bss;
  805                 wi_write_ssid(sc, WI_RID_DESIRED_SSID, bss->ni_essid, bss->ni_esslen);
  806                 wi_write_val(sc, WI_RID_OWN_CHNL,
  807                     ieee80211_chan2ieee(ic, bss->ni_chan));
  808 
  809                 /* Configure WEP. */
  810                 if (ic->ic_cryptocaps & IEEE80211_CRYPTO_WEP)
  811                         wi_write_wep(sc, vap);
  812                 else
  813                         sc->sc_encryption = 0;
  814 
  815                 if ((sc->sc_flags & WI_FLAGS_HAS_WPASUPPORT) &&
  816                     (vap->iv_flags & IEEE80211_F_WPA)) {
  817                         wi_write_val(sc, WI_RID_WPA_HANDLING, 1);
  818                         if (vap->iv_appie_wpa != NULL)
  819                                 wi_write_appie(sc, WI_RID_WPA_DATA,
  820                                     vap->iv_appie_wpa);
  821                 }
  822 
  823                 wi_enable(sc);          /* enable port */
  824 
  825                 /* Lucent firmware does not support the JOIN RID. */
  826                 if (sc->sc_firmware_type == WI_INTERSIL) {
  827                         struct wi_joinreq join;
  828 
  829                         memset(&join, 0, sizeof(join));
  830                         IEEE80211_ADDR_COPY(&join.wi_bssid, bss->ni_bssid);
  831                         join.wi_chan = htole16(
  832                             ieee80211_chan2ieee(ic, bss->ni_chan));
  833                         wi_write_rid(sc, WI_RID_JOIN_REQ, &join, sizeof(join));
  834                 }
  835                 WI_UNLOCK(sc);
  836 
  837                 /*
  838                  * NB: don't go through 802.11 layer, it'll send auth frame;
  839                  * instead we drive the state machine from the link status
  840                  * notification we get on association.
  841                  */
  842                 vap->iv_state = nstate;
  843                 return (0);
  844         }
  845         return WI_VAP(vap)->wv_newstate(vap, nstate, arg);
  846 }
  847 
  848 static int
  849 wi_newstate_hostap(struct ieee80211vap *vap, enum ieee80211_state nstate, int arg)
  850 {
  851         struct ieee80211com *ic = vap->iv_ic;
  852         struct ieee80211_node *bss;
  853         struct wi_softc *sc = ic->ic_softc;
  854         int error;
  855 
  856         DPRINTF(("%s: %s -> %s\n", __func__,
  857                 ieee80211_state_name[vap->iv_state],
  858                 ieee80211_state_name[nstate]));
  859 
  860         error = WI_VAP(vap)->wv_newstate(vap, nstate, arg);
  861         if (error == 0 && nstate == IEEE80211_S_RUN) {
  862                 WI_LOCK(sc);
  863                 wi_setup_locked(sc, WI_PORTTYPE_HOSTAP, 0, vap->iv_myaddr);
  864 
  865                 bss = vap->iv_bss;
  866                 wi_write_ssid(sc, WI_RID_OWN_SSID,
  867                     bss->ni_essid, bss->ni_esslen);
  868                 wi_write_val(sc, WI_RID_OWN_CHNL,
  869                     ieee80211_chan2ieee(ic, bss->ni_chan));
  870                 wi_write_val(sc, WI_RID_BASIC_RATE, 0x3);
  871                 wi_write_val(sc, WI_RID_SUPPORT_RATE, 0xf);
  872                 wi_write_txrate(sc, vap);
  873 
  874                 wi_write_val(sc, WI_RID_OWN_BEACON_INT, bss->ni_intval);
  875                 wi_write_val(sc, WI_RID_DTIM_PERIOD, vap->iv_dtim_period);
  876 
  877                 wi_write_val(sc, WI_RID_RTS_THRESH, vap->iv_rtsthreshold);
  878                 if (sc->sc_flags & WI_FLAGS_HAS_FRAGTHR)
  879                         wi_write_val(sc, WI_RID_FRAG_THRESH,
  880                             vap->iv_fragthreshold);
  881 
  882                 if ((sc->sc_flags & WI_FLAGS_HAS_ENHSECURITY) &&
  883                     (vap->iv_flags & IEEE80211_F_HIDESSID)) {
  884                         /*
  885                          * bit 0 means hide SSID in beacons,
  886                          * bit 1 means don't respond to bcast probe req
  887                          */
  888                         wi_write_val(sc, WI_RID_ENH_SECURITY, 0x3);
  889                 }
  890 
  891                 if ((sc->sc_flags & WI_FLAGS_HAS_WPASUPPORT) &&
  892                     (vap->iv_flags & IEEE80211_F_WPA) && 
  893                     vap->iv_appie_wpa != NULL)
  894                         wi_write_appie(sc, WI_RID_WPA_DATA, vap->iv_appie_wpa);
  895 
  896                 wi_write_val(sc, WI_RID_PROMISC, 0);
  897 
  898                 /* Configure WEP. */
  899                 if (ic->ic_cryptocaps & IEEE80211_CRYPTO_WEP)
  900                         wi_write_wep(sc, vap);
  901                 else
  902                         sc->sc_encryption = 0;
  903 
  904                 wi_enable(sc);          /* enable port */
  905                 WI_UNLOCK(sc);
  906         }
  907         return error;
  908 }
  909 
  910 static int
  911 wi_transmit(struct ieee80211com *ic, struct mbuf *m)
  912 {
  913         struct wi_softc *sc = ic->ic_softc;
  914         int error;
  915 
  916         WI_LOCK(sc);
  917         if ((sc->sc_flags & WI_FLAGS_RUNNING) == 0) {
  918                 WI_UNLOCK(sc);
  919                 return (ENXIO);
  920         }
  921         error = mbufq_enqueue(&sc->sc_snd, m);
  922         if (error) {
  923                 WI_UNLOCK(sc);
  924                 return (error);
  925         }
  926         wi_start(sc);
  927         WI_UNLOCK(sc);
  928         return (0);
  929 }
  930 
  931 static void
  932 wi_start(struct wi_softc *sc)
  933 {
  934         struct ieee80211_node *ni;
  935         struct ieee80211_frame *wh;
  936         struct mbuf *m0;
  937         struct ieee80211_key *k;
  938         struct wi_frame frmhdr;
  939         const struct llc *llc;
  940         int cur;
  941 
  942         WI_LOCK_ASSERT(sc);
  943 
  944         if (sc->wi_gone)
  945                 return;
  946 
  947         memset(&frmhdr, 0, sizeof(frmhdr));
  948         cur = sc->sc_txnext;
  949         while (sc->sc_txd[cur].d_len == 0 &&
  950             (m0 = mbufq_dequeue(&sc->sc_snd)) != NULL) {
  951                 ni = (struct ieee80211_node *) m0->m_pkthdr.rcvif;
  952 
  953                 /* reconstruct 802.3 header */
  954                 wh = mtod(m0, struct ieee80211_frame *);
  955                 switch (wh->i_fc[1]) {
  956                 case IEEE80211_FC1_DIR_TODS:
  957                         IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_shost,
  958                             wh->i_addr2);
  959                         IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_dhost,
  960                             wh->i_addr3);
  961                         break;
  962                 case IEEE80211_FC1_DIR_NODS:
  963                         IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_shost,
  964                             wh->i_addr2);
  965                         IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_dhost,
  966                             wh->i_addr1);
  967                         break;
  968                 case IEEE80211_FC1_DIR_FROMDS:
  969                         IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_shost,
  970                             wh->i_addr3);
  971                         IEEE80211_ADDR_COPY(frmhdr.wi_ehdr.ether_dhost,
  972                             wh->i_addr1);
  973                         break;
  974                 }
  975                 llc = (const struct llc *)(
  976                     mtod(m0, const uint8_t *) + ieee80211_hdrsize(wh));
  977                 frmhdr.wi_ehdr.ether_type = llc->llc_snap.ether_type;
  978                 frmhdr.wi_tx_ctl = htole16(WI_ENC_TX_802_11|WI_TXCNTL_TX_EX);
  979                 if (wh->i_fc[1] & IEEE80211_FC1_PROTECTED) {
  980                         k = ieee80211_crypto_encap(ni, m0);
  981                         if (k == NULL) {
  982                                 ieee80211_free_node(ni);
  983                                 m_freem(m0);
  984                                 continue;
  985                         }
  986                         frmhdr.wi_tx_ctl |= htole16(WI_TXCNTL_NOCRYPT);
  987                 }
  988 
  989                 if (ieee80211_radiotap_active_vap(ni->ni_vap)) {
  990                         sc->sc_tx_th.wt_rate = ni->ni_txrate;
  991                         ieee80211_radiotap_tx(ni->ni_vap, m0);
  992                 }
  993 
  994                 m_copydata(m0, 0, sizeof(struct ieee80211_frame),
  995                     (caddr_t)&frmhdr.wi_whdr);
  996                 m_adj(m0, sizeof(struct ieee80211_frame));
  997                 frmhdr.wi_dat_len = htole16(m0->m_pkthdr.len);
  998                 ieee80211_free_node(ni);
  999                 if (wi_start_tx(sc, &frmhdr, m0))
 1000                         continue;
 1001 
 1002                 sc->sc_txnext = cur = (cur + 1) % sc->sc_ntxbuf;
 1003         }
 1004 }
 1005 
 1006 static int
 1007 wi_start_tx(struct wi_softc *sc, struct wi_frame *frmhdr, struct mbuf *m0)
 1008 {
 1009         int cur = sc->sc_txnext;
 1010         int fid, off, error;
 1011 
 1012         fid = sc->sc_txd[cur].d_fid;
 1013         off = sizeof(*frmhdr);
 1014         error = wi_write_bap(sc, fid, 0, frmhdr, sizeof(*frmhdr)) != 0
 1015              || wi_mwrite_bap(sc, fid, off, m0, m0->m_pkthdr.len) != 0;
 1016         m_freem(m0);
 1017         if (error) {
 1018                 counter_u64_add(sc->sc_ic.ic_oerrors, 1);
 1019                 return -1;
 1020         }
 1021         sc->sc_txd[cur].d_len = off;
 1022         if (sc->sc_txcur == cur) {
 1023                 if (wi_cmd(sc, WI_CMD_TX | WI_RECLAIM, fid, 0, 0)) {
 1024                         device_printf(sc->sc_dev, "xmit failed\n");
 1025                         sc->sc_txd[cur].d_len = 0;
 1026                         return -1;
 1027                 }
 1028                 sc->sc_tx_timer = 5;
 1029         }
 1030         return 0;
 1031 }
 1032 
 1033 static int
 1034 wi_raw_xmit(struct ieee80211_node *ni, struct mbuf *m0,
 1035             const struct ieee80211_bpf_params *params)
 1036 {
 1037         struct ieee80211com *ic = ni->ni_ic;
 1038         struct ieee80211vap *vap = ni->ni_vap;
 1039         struct wi_softc *sc = ic->ic_softc;
 1040         struct ieee80211_key *k;
 1041         struct ieee80211_frame *wh;
 1042         struct wi_frame frmhdr;
 1043         int cur;
 1044         int rc = 0;
 1045 
 1046         WI_LOCK(sc);
 1047 
 1048         if (sc->wi_gone) {
 1049                 rc = ENETDOWN;
 1050                 goto out;
 1051         }
 1052         memset(&frmhdr, 0, sizeof(frmhdr));
 1053         cur = sc->sc_txnext;
 1054         if (sc->sc_txd[cur].d_len != 0) {
 1055                 rc = ENOBUFS;
 1056                 goto out;
 1057         }
 1058         m0->m_pkthdr.rcvif = NULL;
 1059 
 1060         m_copydata(m0, 4, ETHER_ADDR_LEN * 2,
 1061             (caddr_t)&frmhdr.wi_ehdr);
 1062         frmhdr.wi_ehdr.ether_type = 0;
 1063         wh = mtod(m0, struct ieee80211_frame *);
 1064                         
 1065         frmhdr.wi_tx_ctl = htole16(WI_ENC_TX_802_11|WI_TXCNTL_TX_EX);
 1066         if (params && (params->ibp_flags & IEEE80211_BPF_NOACK))
 1067                 frmhdr.wi_tx_ctl |= htole16(WI_TXCNTL_ALTRTRY);
 1068         if ((wh->i_fc[1] & IEEE80211_FC1_PROTECTED) &&
 1069             (!params || (params && (params->ibp_flags & IEEE80211_BPF_CRYPTO)))) {
 1070                 k = ieee80211_crypto_encap(ni, m0);
 1071                 if (k == NULL) {
 1072                         rc = ENOMEM;
 1073                         goto out;
 1074                 }
 1075                 frmhdr.wi_tx_ctl |= htole16(WI_TXCNTL_NOCRYPT);
 1076         }
 1077         if (ieee80211_radiotap_active_vap(vap)) {
 1078                 sc->sc_tx_th.wt_rate = ni->ni_txrate;
 1079                 ieee80211_radiotap_tx(vap, m0);
 1080         }
 1081         m_copydata(m0, 0, sizeof(struct ieee80211_frame),
 1082             (caddr_t)&frmhdr.wi_whdr);
 1083         m_adj(m0, sizeof(struct ieee80211_frame));
 1084         frmhdr.wi_dat_len = htole16(m0->m_pkthdr.len);
 1085         if (wi_start_tx(sc, &frmhdr, m0) < 0) {
 1086                 m0 = NULL;
 1087                 rc = EIO;
 1088                 goto out;
 1089         }
 1090         m0 = NULL;
 1091         ieee80211_free_node(ni);
 1092 
 1093         sc->sc_txnext = cur = (cur + 1) % sc->sc_ntxbuf;
 1094 out:
 1095         WI_UNLOCK(sc);
 1096 
 1097         if (m0 != NULL)
 1098                 m_freem(m0);
 1099         return rc;
 1100 }
 1101 
 1102 static int
 1103 wi_reset(struct wi_softc *sc)
 1104 {
 1105 #define WI_INIT_TRIES 3
 1106         int i, error = 0;
 1107 
 1108         for (i = 0; i < WI_INIT_TRIES; i++) {
 1109                 error = wi_cmd(sc, WI_CMD_INI, 0, 0, 0);
 1110                 if (error == 0)
 1111                         break;
 1112                 DELAY(WI_DELAY * 1000);
 1113         }
 1114         sc->sc_reset = 1;
 1115         if (i == WI_INIT_TRIES) {
 1116                 device_printf(sc->sc_dev, "reset failed\n");
 1117                 return error;
 1118         }
 1119 
 1120         CSR_WRITE_2(sc, WI_INT_EN, 0);
 1121         CSR_WRITE_2(sc, WI_EVENT_ACK, 0xFFFF);
 1122 
 1123         /* Calibrate timer. */
 1124         wi_write_val(sc, WI_RID_TICK_TIME, 8);
 1125 
 1126         return 0;
 1127 #undef WI_INIT_TRIES
 1128 }
 1129 
 1130 static void
 1131 wi_watchdog(void *arg)
 1132 {
 1133         struct wi_softc *sc = arg;
 1134 
 1135         WI_LOCK_ASSERT(sc);
 1136 
 1137         if (!sc->sc_enabled)
 1138                 return;
 1139 
 1140         if (sc->sc_tx_timer && --sc->sc_tx_timer == 0) {
 1141                 device_printf(sc->sc_dev, "device timeout\n");
 1142                 counter_u64_add(sc->sc_ic.ic_oerrors, 1);
 1143                 wi_init(sc);
 1144                 return;
 1145         }
 1146         callout_reset(&sc->sc_watchdog, hz, wi_watchdog, sc);
 1147 }
 1148 
 1149 static void
 1150 wi_parent(struct ieee80211com *ic)
 1151 {
 1152         struct wi_softc *sc = ic->ic_softc;
 1153         int startall = 0;
 1154 
 1155         WI_LOCK(sc);
 1156         /*
 1157          * Can't do promisc and hostap at the same time.  If all that's
 1158          * changing is the promisc flag, try to short-circuit a call to
 1159          * wi_init() by just setting PROMISC in the hardware.
 1160          */
 1161         if (ic->ic_nrunning > 0) {
 1162                 if (ic->ic_opmode != IEEE80211_M_HOSTAP &&
 1163                     sc->sc_flags & WI_FLAGS_RUNNING) {
 1164                         if (ic->ic_promisc > 0 &&
 1165                             (sc->sc_flags & WI_FLAGS_PROMISC) == 0) {
 1166                                 wi_write_val(sc, WI_RID_PROMISC, 1);
 1167                                 sc->sc_flags |= WI_FLAGS_PROMISC;
 1168                         } else if (ic->ic_promisc == 0 &&
 1169                             (sc->sc_flags & WI_FLAGS_PROMISC) != 0) {
 1170                                 wi_write_val(sc, WI_RID_PROMISC, 0);
 1171                                 sc->sc_flags &= ~WI_FLAGS_PROMISC;
 1172                         } else {
 1173                                 wi_init(sc);
 1174                                 startall = 1;
 1175                         }
 1176                 } else {
 1177                         wi_init(sc);
 1178                         startall = 1;
 1179                 }
 1180         } else if (sc->sc_flags & WI_FLAGS_RUNNING) {
 1181                 wi_stop(sc, 1);
 1182                 sc->wi_gone = 0;
 1183         }
 1184         WI_UNLOCK(sc);
 1185         if (startall)
 1186                 ieee80211_start_all(ic);
 1187 }
 1188 
 1189 static void
 1190 wi_media_status(struct ifnet *ifp, struct ifmediareq *imr)
 1191 {
 1192         struct ieee80211vap *vap = ifp->if_softc;
 1193         struct ieee80211com *ic = vap->iv_ic;
 1194         struct wi_softc *sc = ic->ic_softc;
 1195         u_int16_t val;
 1196         int rate, len;
 1197 
 1198         len = sizeof(val);
 1199         if (sc->sc_enabled &&
 1200             wi_read_rid(sc, WI_RID_CUR_TX_RATE, &val, &len) == 0 &&
 1201             len == sizeof(val)) {
 1202                 /* convert to 802.11 rate */
 1203                 val = le16toh(val);
 1204                 rate = val * 2;
 1205                 if (sc->sc_firmware_type == WI_LUCENT) {
 1206                         if (rate == 10)
 1207                                 rate = 11;      /* 5.5Mbps */
 1208                 } else {
 1209                         if (rate == 4*2)
 1210                                 rate = 11;      /* 5.5Mbps */
 1211                         else if (rate == 8*2)
 1212                                 rate = 22;      /* 11Mbps */
 1213                 }
 1214                 vap->iv_bss->ni_txrate = rate;
 1215         }
 1216         ieee80211_media_status(ifp, imr);
 1217 }
 1218 
 1219 static void
 1220 wi_sync_bssid(struct wi_softc *sc, u_int8_t new_bssid[IEEE80211_ADDR_LEN])
 1221 {
 1222         struct ieee80211com *ic = &sc->sc_ic;
 1223         struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps);
 1224         struct ieee80211_node *ni = vap->iv_bss;
 1225 
 1226         if (IEEE80211_ADDR_EQ(new_bssid, ni->ni_bssid))
 1227                 return;
 1228 
 1229         DPRINTF(("wi_sync_bssid: bssid %s -> ", ether_sprintf(ni->ni_bssid)));
 1230         DPRINTF(("%s ?\n", ether_sprintf(new_bssid)));
 1231 
 1232         /* In promiscuous mode, the BSSID field is not a reliable
 1233          * indicator of the firmware's BSSID. Damp spurious
 1234          * change-of-BSSID indications.
 1235          */
 1236         if (ic->ic_promisc > 0 &&
 1237             !ppsratecheck(&sc->sc_last_syn, &sc->sc_false_syns,
 1238                          WI_MAX_FALSE_SYNS))
 1239                 return;
 1240 
 1241         sc->sc_false_syns = MAX(0, sc->sc_false_syns - 1);
 1242 #if 0
 1243         /*
 1244          * XXX hack; we should create a new node with the new bssid
 1245          * and replace the existing ic_bss with it but since we don't
 1246          * process management frames to collect state we cheat by
 1247          * reusing the existing node as we know wi_newstate will be
 1248          * called and it will overwrite the node state.
 1249          */
 1250         ieee80211_sta_join(ic, ieee80211_ref_node(ni));
 1251 #endif
 1252 }
 1253 
 1254 static __noinline void
 1255 wi_rx_intr(struct wi_softc *sc)
 1256 {
 1257         struct ieee80211com *ic = &sc->sc_ic;
 1258         struct wi_frame frmhdr;
 1259         struct mbuf *m;
 1260         struct ieee80211_frame *wh;
 1261         struct ieee80211_node *ni;
 1262         int fid, len, off;
 1263         u_int8_t dir;
 1264         u_int16_t status;
 1265         int8_t rssi, nf;
 1266 
 1267         fid = CSR_READ_2(sc, WI_RX_FID);
 1268 
 1269         /* First read in the frame header */
 1270         if (wi_read_bap(sc, fid, 0, &frmhdr, sizeof(frmhdr))) {
 1271                 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX);
 1272                 counter_u64_add(ic->ic_ierrors, 1);
 1273                 DPRINTF(("wi_rx_intr: read fid %x failed\n", fid));
 1274                 return;
 1275         }
 1276 
 1277         /*
 1278          * Drop undecryptable or packets with receive errors here
 1279          */
 1280         status = le16toh(frmhdr.wi_status);
 1281         if (status & WI_STAT_ERRSTAT) {
 1282                 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX);
 1283                 counter_u64_add(ic->ic_ierrors, 1);
 1284                 DPRINTF(("wi_rx_intr: fid %x error status %x\n", fid, status));
 1285                 return;
 1286         }
 1287 
 1288         len = le16toh(frmhdr.wi_dat_len);
 1289         off = ALIGN(sizeof(struct ieee80211_frame));
 1290 
 1291         /*
 1292          * Sometimes the PRISM2.x returns bogusly large frames. Except
 1293          * in monitor mode, just throw them away.
 1294          */
 1295         if (off + len > MCLBYTES) {
 1296                 if (ic->ic_opmode != IEEE80211_M_MONITOR) {
 1297                         CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX);
 1298                         counter_u64_add(ic->ic_ierrors, 1);
 1299                         DPRINTF(("wi_rx_intr: oversized packet\n"));
 1300                         return;
 1301                 } else
 1302                         len = 0;
 1303         }
 1304 
 1305         if (off + len > MHLEN)
 1306                 m = m_getcl(M_NOWAIT, MT_DATA, M_PKTHDR);
 1307         else
 1308                 m = m_gethdr(M_NOWAIT, MT_DATA);
 1309         if (m == NULL) {
 1310                 CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX);
 1311                 counter_u64_add(ic->ic_ierrors, 1);
 1312                 DPRINTF(("wi_rx_intr: MGET failed\n"));
 1313                 return;
 1314         }
 1315         m->m_data += off - sizeof(struct ieee80211_frame);
 1316         memcpy(m->m_data, &frmhdr.wi_whdr, sizeof(struct ieee80211_frame));
 1317         wi_read_bap(sc, fid, sizeof(frmhdr),
 1318             m->m_data + sizeof(struct ieee80211_frame), len);
 1319         m->m_pkthdr.len = m->m_len = sizeof(struct ieee80211_frame) + len;
 1320 
 1321         CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_RX);
 1322 
 1323         rssi = frmhdr.wi_rx_signal;
 1324         nf = frmhdr.wi_rx_silence;
 1325         if (ieee80211_radiotap_active(ic)) {
 1326                 struct wi_rx_radiotap_header *tap = &sc->sc_rx_th;
 1327                 uint32_t rstamp;
 1328 
 1329                 rstamp = (le16toh(frmhdr.wi_rx_tstamp0) << 16) |
 1330                     le16toh(frmhdr.wi_rx_tstamp1);
 1331                 tap->wr_tsf = htole64((uint64_t)rstamp);
 1332                 /* XXX replace divide by table */
 1333                 tap->wr_rate = frmhdr.wi_rx_rate / 5;
 1334                 tap->wr_flags = 0;
 1335                 if (frmhdr.wi_status & WI_STAT_PCF)
 1336                         tap->wr_flags |= IEEE80211_RADIOTAP_F_CFP;
 1337                 if (m->m_flags & M_WEP)
 1338                         tap->wr_flags |= IEEE80211_RADIOTAP_F_WEP;
 1339                 tap->wr_antsignal = rssi;
 1340                 tap->wr_antnoise = nf;
 1341         }
 1342 
 1343         /* synchronize driver's BSSID with firmware's BSSID */
 1344         wh = mtod(m, struct ieee80211_frame *);
 1345         dir = wh->i_fc[1] & IEEE80211_FC1_DIR_MASK;
 1346         if (ic->ic_opmode == IEEE80211_M_IBSS && dir == IEEE80211_FC1_DIR_NODS)
 1347                 wi_sync_bssid(sc, wh->i_addr3);
 1348 
 1349         WI_UNLOCK(sc);
 1350 
 1351         ni = ieee80211_find_rxnode(ic, mtod(m, struct ieee80211_frame_min *));
 1352         if (ni != NULL) {
 1353                 (void) ieee80211_input(ni, m, rssi, nf);
 1354                 ieee80211_free_node(ni);
 1355         } else
 1356                 (void) ieee80211_input_all(ic, m, rssi, nf);
 1357 
 1358         WI_LOCK(sc);
 1359 }
 1360 
 1361 static __noinline void
 1362 wi_tx_ex_intr(struct wi_softc *sc)
 1363 {
 1364         struct wi_frame frmhdr;
 1365         int fid;
 1366 
 1367         fid = CSR_READ_2(sc, WI_TX_CMP_FID);
 1368         /* Read in the frame header */
 1369         if (wi_read_bap(sc, fid, 0, &frmhdr, sizeof(frmhdr)) == 0) {
 1370                 u_int16_t status = le16toh(frmhdr.wi_status);
 1371                 /*
 1372                  * Spontaneous station disconnects appear as xmit
 1373                  * errors.  Don't announce them and/or count them
 1374                  * as an output error.
 1375                  */
 1376                 if ((status & WI_TXSTAT_DISCONNECT) == 0) {
 1377                         if (ppsratecheck(&lasttxerror, &curtxeps, wi_txerate)) {
 1378                                 device_printf(sc->sc_dev, "tx failed");
 1379                                 if (status & WI_TXSTAT_RET_ERR)
 1380                                         printf(", retry limit exceeded");
 1381                                 if (status & WI_TXSTAT_AGED_ERR)
 1382                                         printf(", max transmit lifetime exceeded");
 1383                                 if (status & WI_TXSTAT_DISCONNECT)
 1384                                         printf(", port disconnected");
 1385                                 if (status & WI_TXSTAT_FORM_ERR)
 1386                                         printf(", invalid format (data len %u src %6D)",
 1387                                                 le16toh(frmhdr.wi_dat_len),
 1388                                                 frmhdr.wi_ehdr.ether_shost, ":");
 1389                                 if (status & ~0xf)
 1390                                         printf(", status=0x%x", status);
 1391                                 printf("\n");
 1392                         }
 1393                         counter_u64_add(sc->sc_ic.ic_oerrors, 1);
 1394                 } else
 1395                         DPRINTF(("port disconnected\n"));
 1396         } else
 1397                 DPRINTF(("wi_tx_ex_intr: read fid %x failed\n", fid));
 1398         CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_TX_EXC);
 1399 }
 1400 
 1401 static __noinline void
 1402 wi_tx_intr(struct wi_softc *sc)
 1403 {
 1404         int fid, cur;
 1405 
 1406         if (sc->wi_gone)
 1407                 return;
 1408 
 1409         fid = CSR_READ_2(sc, WI_ALLOC_FID);
 1410         CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_ALLOC);
 1411 
 1412         cur = sc->sc_txcur;
 1413         if (sc->sc_txd[cur].d_fid != fid) {
 1414                 device_printf(sc->sc_dev, "bad alloc %x != %x, cur %d nxt %d\n",
 1415                     fid, sc->sc_txd[cur].d_fid, cur, sc->sc_txnext);
 1416                 return;
 1417         }
 1418         sc->sc_tx_timer = 0;
 1419         sc->sc_txd[cur].d_len = 0;
 1420         sc->sc_txcur = cur = (cur + 1) % sc->sc_ntxbuf;
 1421         if (sc->sc_txd[cur].d_len != 0) {
 1422                 if (wi_cmd(sc, WI_CMD_TX | WI_RECLAIM, sc->sc_txd[cur].d_fid,
 1423                     0, 0)) {
 1424                         device_printf(sc->sc_dev, "xmit failed\n");
 1425                         sc->sc_txd[cur].d_len = 0;
 1426                 } else {
 1427                         sc->sc_tx_timer = 5;
 1428                 }
 1429         }
 1430 }
 1431 
 1432 static __noinline void
 1433 wi_info_intr(struct wi_softc *sc)
 1434 {
 1435         struct ieee80211com *ic = &sc->sc_ic;
 1436         struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps);
 1437         int i, fid, len, off;
 1438         u_int16_t ltbuf[2];
 1439         u_int16_t stat;
 1440         u_int32_t *ptr;
 1441 
 1442         fid = CSR_READ_2(sc, WI_INFO_FID);
 1443         wi_read_bap(sc, fid, 0, ltbuf, sizeof(ltbuf));
 1444 
 1445         switch (le16toh(ltbuf[1])) {
 1446         case WI_INFO_LINK_STAT:
 1447                 wi_read_bap(sc, fid, sizeof(ltbuf), &stat, sizeof(stat));
 1448                 DPRINTF(("wi_info_intr: LINK_STAT 0x%x\n", le16toh(stat)));
 1449 
 1450                 if (vap == NULL)
 1451                         goto finish;
 1452 
 1453                 switch (le16toh(stat)) {
 1454                 case WI_INFO_LINK_STAT_CONNECTED:
 1455                         if (vap->iv_state == IEEE80211_S_RUN &&
 1456                             vap->iv_opmode != IEEE80211_M_IBSS)
 1457                                 break;
 1458                         /* fall thru... */
 1459                 case WI_INFO_LINK_STAT_AP_CHG:
 1460                         IEEE80211_LOCK(ic);
 1461                         vap->iv_bss->ni_associd = 1 | 0xc000;   /* NB: anything will do */
 1462                         ieee80211_new_state(vap, IEEE80211_S_RUN, 0);
 1463                         IEEE80211_UNLOCK(ic);
 1464                         break;
 1465                 case WI_INFO_LINK_STAT_AP_INR:
 1466                         break;
 1467                 case WI_INFO_LINK_STAT_DISCONNECTED:
 1468                         /* we dropped off the net; e.g. due to deauth/disassoc */
 1469                         IEEE80211_LOCK(ic);
 1470                         vap->iv_bss->ni_associd = 0;
 1471                         vap->iv_stats.is_rx_deauth++;
 1472                         ieee80211_new_state(vap, IEEE80211_S_SCAN, 0);
 1473                         IEEE80211_UNLOCK(ic);
 1474                         break;
 1475                 case WI_INFO_LINK_STAT_AP_OOR:
 1476                         /* XXX does this need to be per-vap? */
 1477                         ieee80211_beacon_miss(ic);
 1478                         break;
 1479                 case WI_INFO_LINK_STAT_ASSOC_FAILED:
 1480                         if (vap->iv_opmode == IEEE80211_M_STA)
 1481                                 ieee80211_new_state(vap, IEEE80211_S_SCAN,
 1482                                     IEEE80211_SCAN_FAIL_TIMEOUT);
 1483                         break;
 1484                 }
 1485                 break;
 1486         case WI_INFO_COUNTERS:
 1487                 /* some card versions have a larger stats structure */
 1488                 len = min(le16toh(ltbuf[0]) - 1, sizeof(sc->sc_stats) / 4);
 1489                 ptr = (u_int32_t *)&sc->sc_stats;
 1490                 off = sizeof(ltbuf);
 1491                 for (i = 0; i < len; i++, off += 2, ptr++) {
 1492                         wi_read_bap(sc, fid, off, &stat, sizeof(stat));
 1493 #ifdef WI_HERMES_STATS_WAR
 1494                         if (stat & 0xf000)
 1495                                 stat = ~stat;
 1496 #endif
 1497                         *ptr += stat;
 1498                 }
 1499                 break;
 1500         default:
 1501                 DPRINTF(("wi_info_intr: got fid %x type %x len %d\n", fid,
 1502                     le16toh(ltbuf[1]), le16toh(ltbuf[0])));
 1503                 break;
 1504         }
 1505 finish:
 1506         CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_INFO);
 1507 }
 1508 
 1509 static int
 1510 wi_write_multi(struct wi_softc *sc)
 1511 {
 1512         struct ieee80211com *ic = &sc->sc_ic;
 1513         struct ieee80211vap *vap;
 1514         struct wi_mcast mlist;
 1515         int n;
 1516 
 1517         if (ic->ic_allmulti > 0 || ic->ic_promisc > 0) {
 1518 allmulti:
 1519                 memset(&mlist, 0, sizeof(mlist));
 1520                 return wi_write_rid(sc, WI_RID_MCAST_LIST, &mlist,
 1521                     sizeof(mlist));
 1522         }
 1523 
 1524         n = 0;
 1525         TAILQ_FOREACH(vap, &ic->ic_vaps, iv_next) {
 1526                 struct ifnet *ifp;
 1527                 struct ifmultiaddr *ifma;
 1528 
 1529                 ifp = vap->iv_ifp;
 1530                 if_maddr_rlock(ifp);
 1531                 TAILQ_FOREACH(ifma, &ifp->if_multiaddrs, ifma_link) {
 1532                         if (ifma->ifma_addr->sa_family != AF_LINK)
 1533                                 continue;
 1534                         if (n >= 16)
 1535                                 goto allmulti;
 1536                         IEEE80211_ADDR_COPY(&mlist.wi_mcast[n],
 1537                             (LLADDR((struct sockaddr_dl *)ifma->ifma_addr)));
 1538                         n++;
 1539                 }
 1540                 if_maddr_runlock(ifp);
 1541         }
 1542         return wi_write_rid(sc, WI_RID_MCAST_LIST, &mlist,
 1543             IEEE80211_ADDR_LEN * n);
 1544 }
 1545 
 1546 static void
 1547 wi_update_mcast(struct ieee80211com *ic)
 1548 {
 1549 
 1550         wi_write_multi(ic->ic_softc);
 1551 }
 1552 
 1553 static void
 1554 wi_update_promisc(struct ieee80211com *ic)
 1555 {
 1556         struct wi_softc *sc = ic->ic_softc;
 1557 
 1558         WI_LOCK(sc);
 1559         /* XXX handle WEP special case handling? */
 1560         wi_write_val(sc, WI_RID_PROMISC, 
 1561             (ic->ic_opmode == IEEE80211_M_MONITOR ||
 1562              (ic->ic_promisc > 0)));
 1563         WI_UNLOCK(sc);
 1564 }
 1565 
 1566 static void
 1567 wi_read_nicid(struct wi_softc *sc)
 1568 {
 1569         struct wi_card_ident *id;
 1570         char *p;
 1571         int len;
 1572         u_int16_t ver[4];
 1573 
 1574         /* getting chip identity */
 1575         memset(ver, 0, sizeof(ver));
 1576         len = sizeof(ver);
 1577         wi_read_rid(sc, WI_RID_CARD_ID, ver, &len);
 1578 
 1579         sc->sc_firmware_type = WI_NOTYPE;
 1580         sc->sc_nic_id = le16toh(ver[0]);
 1581         for (id = wi_card_ident; id->card_name != NULL; id++) {
 1582                 if (sc->sc_nic_id == id->card_id) {
 1583                         sc->sc_nic_name = id->card_name;
 1584                         sc->sc_firmware_type = id->firm_type;
 1585                         break;
 1586                 }
 1587         }
 1588         if (sc->sc_firmware_type == WI_NOTYPE) {
 1589                 if (sc->sc_nic_id & 0x8000) {
 1590                         sc->sc_firmware_type = WI_INTERSIL;
 1591                         sc->sc_nic_name = "Unknown Prism chip";
 1592                 } else {
 1593                         sc->sc_firmware_type = WI_LUCENT;
 1594                         sc->sc_nic_name = "Unknown Lucent chip";
 1595                 }
 1596         }
 1597         if (bootverbose)
 1598                 device_printf(sc->sc_dev, "using %s\n", sc->sc_nic_name);
 1599 
 1600         /* get primary firmware version (Only Prism chips) */
 1601         if (sc->sc_firmware_type != WI_LUCENT) {
 1602                 memset(ver, 0, sizeof(ver));
 1603                 len = sizeof(ver);
 1604                 wi_read_rid(sc, WI_RID_PRI_IDENTITY, ver, &len);
 1605                 sc->sc_pri_firmware_ver = le16toh(ver[2]) * 10000 +
 1606                     le16toh(ver[3]) * 100 + le16toh(ver[1]);
 1607         }
 1608 
 1609         /* get station firmware version */
 1610         memset(ver, 0, sizeof(ver));
 1611         len = sizeof(ver);
 1612         wi_read_rid(sc, WI_RID_STA_IDENTITY, ver, &len);
 1613         sc->sc_sta_firmware_ver = le16toh(ver[2]) * 10000 +
 1614             le16toh(ver[3]) * 100 + le16toh(ver[1]);
 1615         if (sc->sc_firmware_type == WI_INTERSIL &&
 1616             (sc->sc_sta_firmware_ver == 10102 ||
 1617              sc->sc_sta_firmware_ver == 20102)) {
 1618                 char ident[12];
 1619                 memset(ident, 0, sizeof(ident));
 1620                 len = sizeof(ident);
 1621                 /* value should be the format like "V2.00-11" */
 1622                 if (wi_read_rid(sc, WI_RID_SYMBOL_IDENTITY, ident, &len) == 0 &&
 1623                     *(p = (char *)ident) >= 'A' &&
 1624                     p[2] == '.' && p[5] == '-' && p[8] == '\0') {
 1625                         sc->sc_firmware_type = WI_SYMBOL;
 1626                         sc->sc_sta_firmware_ver = (p[1] - '') * 10000 +
 1627                             (p[3] - '') * 1000 + (p[4] - '') * 100 +
 1628                             (p[6] - '') * 10 + (p[7] - '');
 1629                 }
 1630         }
 1631         if (bootverbose) {
 1632                 device_printf(sc->sc_dev, "%s Firmware: ",
 1633                     wi_firmware_names[sc->sc_firmware_type]);
 1634                 if (sc->sc_firmware_type != WI_LUCENT)  /* XXX */
 1635                         printf("Primary (%u.%u.%u), ",
 1636                             sc->sc_pri_firmware_ver / 10000,
 1637                             (sc->sc_pri_firmware_ver % 10000) / 100,
 1638                             sc->sc_pri_firmware_ver % 100);
 1639                 printf("Station (%u.%u.%u)\n",
 1640                     sc->sc_sta_firmware_ver / 10000,
 1641                     (sc->sc_sta_firmware_ver % 10000) / 100,
 1642                     sc->sc_sta_firmware_ver % 100);
 1643         }
 1644 }
 1645 
 1646 static int
 1647 wi_write_ssid(struct wi_softc *sc, int rid, u_int8_t *buf, int buflen)
 1648 {
 1649         struct wi_ssid ssid;
 1650 
 1651         if (buflen > IEEE80211_NWID_LEN)
 1652                 return ENOBUFS;
 1653         memset(&ssid, 0, sizeof(ssid));
 1654         ssid.wi_len = htole16(buflen);
 1655         memcpy(ssid.wi_ssid, buf, buflen);
 1656         return wi_write_rid(sc, rid, &ssid, sizeof(ssid));
 1657 }
 1658 
 1659 static int
 1660 wi_write_txrate(struct wi_softc *sc, struct ieee80211vap *vap)
 1661 {
 1662         static const uint16_t lucent_rates[12] = {
 1663             [ 0] = 3,   /* auto */
 1664             [ 1] = 1,   /* 1Mb/s */
 1665             [ 2] = 2,   /* 2Mb/s */
 1666             [ 5] = 4,   /* 5.5Mb/s */
 1667             [11] = 5    /* 11Mb/s */
 1668         };
 1669         static const uint16_t intersil_rates[12] = {
 1670             [ 0] = 0xf, /* auto */
 1671             [ 1] = 0,   /* 1Mb/s */
 1672             [ 2] = 1,   /* 2Mb/s */
 1673             [ 5] = 2,   /* 5.5Mb/s */
 1674             [11] = 3,   /* 11Mb/s */
 1675         };
 1676         const uint16_t *rates = sc->sc_firmware_type == WI_LUCENT ?
 1677             lucent_rates : intersil_rates;
 1678         struct ieee80211com *ic = vap->iv_ic;
 1679         const struct ieee80211_txparam *tp;
 1680 
 1681         tp = &vap->iv_txparms[ieee80211_chan2mode(ic->ic_bsschan)];
 1682         return wi_write_val(sc, WI_RID_TX_RATE,
 1683             (tp->ucastrate == IEEE80211_FIXED_RATE_NONE ?
 1684                 rates[0] : rates[tp->ucastrate / 2]));
 1685 }
 1686 
 1687 static int
 1688 wi_write_wep(struct wi_softc *sc, struct ieee80211vap *vap)
 1689 {
 1690         int error = 0;
 1691         int i, keylen;
 1692         u_int16_t val;
 1693         struct wi_key wkey[IEEE80211_WEP_NKID];
 1694 
 1695         switch (sc->sc_firmware_type) {
 1696         case WI_LUCENT:
 1697                 val = (vap->iv_flags & IEEE80211_F_PRIVACY) ? 1 : 0;
 1698                 error = wi_write_val(sc, WI_RID_ENCRYPTION, val);
 1699                 if (error)
 1700                         break;
 1701                 if ((vap->iv_flags & IEEE80211_F_PRIVACY) == 0)
 1702                         break;
 1703                 error = wi_write_val(sc, WI_RID_TX_CRYPT_KEY, vap->iv_def_txkey);
 1704                 if (error)
 1705                         break;
 1706                 memset(wkey, 0, sizeof(wkey));
 1707                 for (i = 0; i < IEEE80211_WEP_NKID; i++) {
 1708                         keylen = vap->iv_nw_keys[i].wk_keylen;
 1709                         wkey[i].wi_keylen = htole16(keylen);
 1710                         memcpy(wkey[i].wi_keydat, vap->iv_nw_keys[i].wk_key,
 1711                             keylen);
 1712                 }
 1713                 error = wi_write_rid(sc, WI_RID_DEFLT_CRYPT_KEYS,
 1714                     wkey, sizeof(wkey));
 1715                 sc->sc_encryption = 0;
 1716                 break;
 1717 
 1718         case WI_INTERSIL:
 1719                 val = HOST_ENCRYPT | HOST_DECRYPT;
 1720                 if (vap->iv_flags & IEEE80211_F_PRIVACY) {
 1721                         /*
 1722                          * ONLY HWB3163 EVAL-CARD Firmware version
 1723                          * less than 0.8 variant2
 1724                          *
 1725                          *   If promiscuous mode disable, Prism2 chip
 1726                          *  does not work with WEP .
 1727                          * It is under investigation for details.
 1728                          * (ichiro@netbsd.org)
 1729                          */
 1730                         if (sc->sc_sta_firmware_ver < 802 ) {
 1731                                 /* firm ver < 0.8 variant 2 */
 1732                                 wi_write_val(sc, WI_RID_PROMISC, 1);
 1733                         }
 1734                         wi_write_val(sc, WI_RID_CNFAUTHMODE,
 1735                             vap->iv_bss->ni_authmode);
 1736                         val |= PRIVACY_INVOKED;
 1737                 } else {
 1738                         wi_write_val(sc, WI_RID_CNFAUTHMODE, IEEE80211_AUTH_OPEN);
 1739                 }
 1740                 error = wi_write_val(sc, WI_RID_P2_ENCRYPTION, val);
 1741                 if (error)
 1742                         break;
 1743                 sc->sc_encryption = val;
 1744                 if ((val & PRIVACY_INVOKED) == 0)
 1745                         break;
 1746                 error = wi_write_val(sc, WI_RID_P2_TX_CRYPT_KEY, vap->iv_def_txkey);
 1747                 break;
 1748         }
 1749         return error;
 1750 }
 1751 
 1752 static int
 1753 wi_cmd(struct wi_softc *sc, int cmd, int val0, int val1, int val2)
 1754 {
 1755         int i, s = 0;
 1756 
 1757         if (sc->wi_gone)
 1758                 return (ENODEV);
 1759 
 1760         /* wait for the busy bit to clear */
 1761         for (i = sc->wi_cmd_count; i > 0; i--) {        /* 500ms */
 1762                 if (!(CSR_READ_2(sc, WI_COMMAND) & WI_CMD_BUSY))
 1763                         break;
 1764                 DELAY(1*1000);  /* 1ms */
 1765         }
 1766         if (i == 0) {
 1767                 device_printf(sc->sc_dev, "%s: busy bit won't clear, cmd 0x%x\n",
 1768                    __func__, cmd);
 1769                 sc->wi_gone = 1;
 1770                 return(ETIMEDOUT);
 1771         }
 1772 
 1773         CSR_WRITE_2(sc, WI_PARAM0, val0);
 1774         CSR_WRITE_2(sc, WI_PARAM1, val1);
 1775         CSR_WRITE_2(sc, WI_PARAM2, val2);
 1776         CSR_WRITE_2(sc, WI_COMMAND, cmd);
 1777 
 1778         if (cmd == WI_CMD_INI) {
 1779                 /* XXX: should sleep here. */
 1780                 DELAY(100*1000);                /* 100ms delay for init */
 1781         }
 1782         for (i = 0; i < WI_TIMEOUT; i++) {
 1783                 /*
 1784                  * Wait for 'command complete' bit to be
 1785                  * set in the event status register.
 1786                  */
 1787                 s = CSR_READ_2(sc, WI_EVENT_STAT);
 1788                 if (s & WI_EV_CMD) {
 1789                         /* Ack the event and read result code. */
 1790                         s = CSR_READ_2(sc, WI_STATUS);
 1791                         CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_CMD);
 1792                         if (s & WI_STAT_CMD_RESULT) {
 1793                                 return(EIO);
 1794                         }
 1795                         break;
 1796                 }
 1797                 DELAY(WI_DELAY);
 1798         }
 1799 
 1800         if (i == WI_TIMEOUT) {
 1801                 device_printf(sc->sc_dev, "%s: timeout on cmd 0x%04x; "
 1802                     "event status 0x%04x\n", __func__, cmd, s);
 1803                 if (s == 0xffff)
 1804                         sc->wi_gone = 1;
 1805                 return(ETIMEDOUT);
 1806         }
 1807         return (0);
 1808 }
 1809 
 1810 static int
 1811 wi_seek_bap(struct wi_softc *sc, int id, int off)
 1812 {
 1813         int i, status;
 1814 
 1815         CSR_WRITE_2(sc, WI_SEL0, id);
 1816         CSR_WRITE_2(sc, WI_OFF0, off);
 1817 
 1818         for (i = 0; ; i++) {
 1819                 status = CSR_READ_2(sc, WI_OFF0);
 1820                 if ((status & WI_OFF_BUSY) == 0)
 1821                         break;
 1822                 if (i == WI_TIMEOUT) {
 1823                         device_printf(sc->sc_dev, "%s: timeout, id %x off %x\n",
 1824                             __func__, id, off);
 1825                         sc->sc_bap_off = WI_OFF_ERR;    /* invalidate */
 1826                         if (status == 0xffff)
 1827                                 sc->wi_gone = 1;
 1828                         return ETIMEDOUT;
 1829                 }
 1830                 DELAY(1);
 1831         }
 1832         if (status & WI_OFF_ERR) {
 1833                 device_printf(sc->sc_dev, "%s: error, id %x off %x\n",
 1834                     __func__, id, off);
 1835                 sc->sc_bap_off = WI_OFF_ERR;    /* invalidate */
 1836                 return EIO;
 1837         }
 1838         sc->sc_bap_id = id;
 1839         sc->sc_bap_off = off;
 1840         return 0;
 1841 }
 1842 
 1843 static int
 1844 wi_read_bap(struct wi_softc *sc, int id, int off, void *buf, int buflen)
 1845 {
 1846         int error, cnt;
 1847 
 1848         if (buflen == 0)
 1849                 return 0;
 1850         if (id != sc->sc_bap_id || off != sc->sc_bap_off) {
 1851                 if ((error = wi_seek_bap(sc, id, off)) != 0)
 1852                         return error;
 1853         }
 1854         cnt = (buflen + 1) / 2;
 1855         CSR_READ_MULTI_STREAM_2(sc, WI_DATA0, (u_int16_t *)buf, cnt);
 1856         sc->sc_bap_off += cnt * 2;
 1857         return 0;
 1858 }
 1859 
 1860 static int
 1861 wi_write_bap(struct wi_softc *sc, int id, int off, const void *buf, int buflen)
 1862 {
 1863         int error, cnt;
 1864 
 1865         if (buflen == 0)
 1866                 return 0;
 1867 
 1868         if (id != sc->sc_bap_id || off != sc->sc_bap_off) {
 1869                 if ((error = wi_seek_bap(sc, id, off)) != 0)
 1870                         return error;
 1871         }
 1872         cnt = (buflen + 1) / 2;
 1873         CSR_WRITE_MULTI_STREAM_2(sc, WI_DATA0, (const uint16_t *)buf, cnt);
 1874         sc->sc_bap_off += cnt * 2;
 1875 
 1876         return 0;
 1877 }
 1878 
 1879 static int
 1880 wi_mwrite_bap(struct wi_softc *sc, int id, int off, struct mbuf *m0, int totlen)
 1881 {
 1882         int error, len;
 1883         struct mbuf *m;
 1884 
 1885         for (m = m0; m != NULL && totlen > 0; m = m->m_next) {
 1886                 if (m->m_len == 0)
 1887                         continue;
 1888 
 1889                 len = min(m->m_len, totlen);
 1890 
 1891                 if (((u_long)m->m_data) % 2 != 0 || len % 2 != 0) {
 1892                         m_copydata(m, 0, totlen, (caddr_t)&sc->sc_txbuf);
 1893                         return wi_write_bap(sc, id, off, (caddr_t)&sc->sc_txbuf,
 1894                             totlen);
 1895                 }
 1896 
 1897                 if ((error = wi_write_bap(sc, id, off, m->m_data, len)) != 0)
 1898                         return error;
 1899 
 1900                 off += m->m_len;
 1901                 totlen -= len;
 1902         }
 1903         return 0;
 1904 }
 1905 
 1906 static int
 1907 wi_alloc_fid(struct wi_softc *sc, int len, int *idp)
 1908 {
 1909         int i;
 1910 
 1911         if (wi_cmd(sc, WI_CMD_ALLOC_MEM, len, 0, 0)) {
 1912                 device_printf(sc->sc_dev, "%s: failed to allocate %d bytes on NIC\n",
 1913                     __func__, len);
 1914                 return ENOMEM;
 1915         }
 1916 
 1917         for (i = 0; i < WI_TIMEOUT; i++) {
 1918                 if (CSR_READ_2(sc, WI_EVENT_STAT) & WI_EV_ALLOC)
 1919                         break;
 1920                 DELAY(1);
 1921         }
 1922         if (i == WI_TIMEOUT) {
 1923                 device_printf(sc->sc_dev, "%s: timeout in alloc\n", __func__);
 1924                 return ETIMEDOUT;
 1925         }
 1926         *idp = CSR_READ_2(sc, WI_ALLOC_FID);
 1927         CSR_WRITE_2(sc, WI_EVENT_ACK, WI_EV_ALLOC);
 1928         return 0;
 1929 }
 1930 
 1931 static int
 1932 wi_read_rid(struct wi_softc *sc, int rid, void *buf, int *buflenp)
 1933 {
 1934         int error, len;
 1935         u_int16_t ltbuf[2];
 1936 
 1937         /* Tell the NIC to enter record read mode. */
 1938         error = wi_cmd(sc, WI_CMD_ACCESS | WI_ACCESS_READ, rid, 0, 0);
 1939         if (error)
 1940                 return error;
 1941 
 1942         error = wi_read_bap(sc, rid, 0, ltbuf, sizeof(ltbuf));
 1943         if (error)
 1944                 return error;
 1945 
 1946         if (le16toh(ltbuf[1]) != rid) {
 1947                 device_printf(sc->sc_dev, "record read mismatch, rid=%x, got=%x\n",
 1948                     rid, le16toh(ltbuf[1]));
 1949                 return EIO;
 1950         }
 1951         len = (le16toh(ltbuf[0]) - 1) * 2;       /* already got rid */
 1952         if (*buflenp < len) {
 1953                 device_printf(sc->sc_dev, "record buffer is too small, "
 1954                     "rid=%x, size=%d, len=%d\n",
 1955                     rid, *buflenp, len);
 1956                 return ENOSPC;
 1957         }
 1958         *buflenp = len;
 1959         return wi_read_bap(sc, rid, sizeof(ltbuf), buf, len);
 1960 }
 1961 
 1962 static int
 1963 wi_write_rid(struct wi_softc *sc, int rid, const void *buf, int buflen)
 1964 {
 1965         int error;
 1966         u_int16_t ltbuf[2];
 1967 
 1968         ltbuf[0] = htole16((buflen + 1) / 2 + 1);        /* includes rid */
 1969         ltbuf[1] = htole16(rid);
 1970 
 1971         error = wi_write_bap(sc, rid, 0, ltbuf, sizeof(ltbuf));
 1972         if (error) {
 1973                 device_printf(sc->sc_dev, "%s: bap0 write failure, rid 0x%x\n",
 1974                     __func__, rid);
 1975                 return error;
 1976         }
 1977         error = wi_write_bap(sc, rid, sizeof(ltbuf), buf, buflen);
 1978         if (error) {
 1979                 device_printf(sc->sc_dev, "%s: bap1 write failure, rid 0x%x\n",
 1980                     __func__, rid);
 1981                 return error;
 1982         }
 1983 
 1984         return wi_cmd(sc, WI_CMD_ACCESS | WI_ACCESS_WRITE, rid, 0, 0);
 1985 }
 1986 
 1987 static int
 1988 wi_write_appie(struct wi_softc *sc, int rid, const struct ieee80211_appie *ie)
 1989 {
 1990         /* NB: 42 bytes is probably ok to have on the stack */
 1991         char buf[sizeof(uint16_t) + 40];
 1992 
 1993         if (ie->ie_len > 40)
 1994                 return EINVAL;
 1995         /* NB: firmware requires 16-bit ie length before ie data */
 1996         *(uint16_t *) buf = htole16(ie->ie_len);
 1997         memcpy(buf + sizeof(uint16_t), ie->ie_data, ie->ie_len);
 1998         return wi_write_rid(sc, rid, buf, ie->ie_len + sizeof(uint16_t));
 1999 }
 2000 
 2001 static u_int16_t
 2002 wi_read_chanmask(struct wi_softc *sc)
 2003 {
 2004         u_int16_t val;
 2005         int buflen;
 2006 
 2007         buflen = sizeof(val);
 2008         if (wi_read_rid(sc, WI_RID_CHANNEL_LIST, &val, &buflen) != 0)
 2009                 val = htole16(0x1fff);  /* assume 1-13 */
 2010         KASSERT(val != 0, ("%s: no available channels listed!", __func__));
 2011 
 2012         val <<= 1;                      /* shift for base 1 indices */
 2013 
 2014         return (val);
 2015 }
 2016 
 2017 int
 2018 wi_alloc(device_t dev, int rid)
 2019 {
 2020         struct wi_softc *sc = device_get_softc(dev);
 2021 
 2022         if (sc->wi_bus_type != WI_BUS_PCI_NATIVE) {
 2023                 sc->iobase_rid = rid;
 2024                 sc->iobase = bus_alloc_resource_anywhere(dev, SYS_RES_IOPORT,
 2025                     &sc->iobase_rid, (1 << 6),
 2026                     rman_make_alignment_flags(1 << 6) | RF_ACTIVE);
 2027                 if (sc->iobase == NULL) {
 2028                         device_printf(dev, "No I/O space?!\n");
 2029                         return ENXIO;
 2030                 }
 2031 
 2032                 sc->wi_io_addr = rman_get_start(sc->iobase);
 2033                 sc->wi_btag = rman_get_bustag(sc->iobase);
 2034                 sc->wi_bhandle = rman_get_bushandle(sc->iobase);
 2035         } else {
 2036                 sc->mem_rid = rid;
 2037                 sc->mem = bus_alloc_resource_any(dev, SYS_RES_MEMORY,
 2038                     &sc->mem_rid, RF_ACTIVE);
 2039                 if (sc->mem == NULL) {
 2040                         device_printf(dev, "No Mem space on prism2.5?\n");
 2041                         return ENXIO;
 2042                 }
 2043 
 2044                 sc->wi_btag = rman_get_bustag(sc->mem);
 2045                 sc->wi_bhandle = rman_get_bushandle(sc->mem);
 2046         }
 2047 
 2048         sc->irq_rid = 0;
 2049         sc->irq = bus_alloc_resource_any(dev, SYS_RES_IRQ, &sc->irq_rid,
 2050             RF_ACTIVE |
 2051             ((sc->wi_bus_type == WI_BUS_PCCARD) ? 0 : RF_SHAREABLE));
 2052         if (sc->irq == NULL) {
 2053                 wi_free(dev);
 2054                 device_printf(dev, "No irq?!\n");
 2055                 return ENXIO;
 2056         }
 2057 
 2058         sc->sc_dev = dev;
 2059         sc->sc_unit = device_get_unit(dev);
 2060         return 0;
 2061 }
 2062 
 2063 void
 2064 wi_free(device_t dev)
 2065 {
 2066         struct wi_softc *sc = device_get_softc(dev);
 2067 
 2068         if (sc->iobase != NULL) {
 2069                 bus_release_resource(dev, SYS_RES_IOPORT, sc->iobase_rid, sc->iobase);
 2070                 sc->iobase = NULL;
 2071         }
 2072         if (sc->irq != NULL) {
 2073                 bus_release_resource(dev, SYS_RES_IRQ, sc->irq_rid, sc->irq);
 2074                 sc->irq = NULL;
 2075         }
 2076         if (sc->mem != NULL) {
 2077                 bus_release_resource(dev, SYS_RES_MEMORY, sc->mem_rid, sc->mem);
 2078                 sc->mem = NULL;
 2079         }
 2080 }

Cache object: d1f5614465f98de10a8317cc20586106


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]


This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.