Showing error 1830

User: Jiri Slaby
Error type: Invalid Pointer Dereference
Error type description: A pointer which is invalid is being dereferenced
File location: drivers/net/wireless/hostap/hostap_ioctl.c
Line in file: 211
Project: Linux Kernel
Project version: 2.6.28
Tools: Smatch (1.59)
Entered: 2013-09-11 08:47:26 UTC


Source:

   1/* ioctl() (mostly Linux Wireless Extensions) routines for Host AP driver */
   2
   3#include <linux/types.h>
   4#include <linux/ethtool.h>
   5#include <net/ieee80211_crypt.h>
   6
   7#include "hostap_wlan.h"
   8#include "hostap.h"
   9#include "hostap_ap.h"
  10
  11static struct iw_statistics *hostap_get_wireless_stats(struct net_device *dev)
  12{
  13        struct hostap_interface *iface;
  14        local_info_t *local;
  15        struct iw_statistics *wstats;
  16
  17        iface = netdev_priv(dev);
  18        local = iface->local;
  19
  20        /* Why are we doing that ? Jean II */
  21        if (iface->type != HOSTAP_INTERFACE_MAIN)
  22                return NULL;
  23
  24        wstats = &local->wstats;
  25
  26        wstats->status = 0;
  27        wstats->discard.code =
  28                local->comm_tallies.rx_discards_wep_undecryptable;
  29        wstats->discard.misc =
  30                local->comm_tallies.rx_fcs_errors +
  31                local->comm_tallies.rx_discards_no_buffer +
  32                local->comm_tallies.tx_discards_wrong_sa;
  33
  34        wstats->discard.retries =
  35                local->comm_tallies.tx_retry_limit_exceeded;
  36        wstats->discard.fragment =
  37                local->comm_tallies.rx_message_in_bad_msg_fragments;
  38
  39        if (local->iw_mode != IW_MODE_MASTER &&
  40            local->iw_mode != IW_MODE_REPEAT) {
  41                int update = 1;
  42#ifdef in_atomic
  43                /* RID reading might sleep and it must not be called in
  44                 * interrupt context or while atomic. However, this
  45                 * function seems to be called while atomic (at least in Linux
  46                 * 2.5.59). Update signal quality values only if in suitable
  47                 * context. Otherwise, previous values read from tick timer
  48                 * will be used. */
  49                if (in_atomic())
  50                        update = 0;
  51#endif /* in_atomic */
  52
  53                if (update && prism2_update_comms_qual(dev) == 0)
  54                        wstats->qual.updated = IW_QUAL_ALL_UPDATED |
  55                                IW_QUAL_DBM;
  56
  57                wstats->qual.qual = local->comms_qual;
  58                wstats->qual.level = local->avg_signal;
  59                wstats->qual.noise = local->avg_noise;
  60        } else {
  61                wstats->qual.qual = 0;
  62                wstats->qual.level = 0;
  63                wstats->qual.noise = 0;
  64                wstats->qual.updated = IW_QUAL_ALL_INVALID;
  65        }
  66
  67        return wstats;
  68}
  69
  70
  71static int prism2_get_datarates(struct net_device *dev, u8 *rates)
  72{
  73        struct hostap_interface *iface;
  74        local_info_t *local;
  75        u8 buf[12];
  76        int len;
  77        u16 val;
  78
  79        iface = netdev_priv(dev);
  80        local = iface->local;
  81
  82        len = local->func->get_rid(dev, HFA384X_RID_SUPPORTEDDATARATES, buf,
  83                                   sizeof(buf), 0);
  84        if (len < 2)
  85                return 0;
  86
  87        val = le16_to_cpu(*(__le16 *) buf); /* string length */
  88
  89        if (len - 2 < val || val > 10)
  90                return 0;
  91
  92        memcpy(rates, buf + 2, val);
  93        return val;
  94}
  95
  96
  97static int prism2_get_name(struct net_device *dev,
  98                           struct iw_request_info *info,
  99                           char *name, char *extra)
 100{
 101        u8 rates[10];
 102        int len, i, over2 = 0;
 103
 104        len = prism2_get_datarates(dev, rates);
 105
 106        for (i = 0; i < len; i++) {
 107                if (rates[i] == 0x0b || rates[i] == 0x16) {
 108                        over2 = 1;
 109                        break;
 110                }
 111        }
 112
 113        strcpy(name, over2 ? "IEEE 802.11b" : "IEEE 802.11-DS");
 114
 115        return 0;
 116}
 117
 118
 119static void prism2_crypt_delayed_deinit(local_info_t *local,
 120                                        struct ieee80211_crypt_data **crypt)
 121{
 122        struct ieee80211_crypt_data *tmp;
 123        unsigned long flags;
 124
 125        tmp = *crypt;
 126        *crypt = NULL;
 127
 128        if (tmp == NULL)
 129                return;
 130
 131        /* must not run ops->deinit() while there may be pending encrypt or
 132         * decrypt operations. Use a list of delayed deinits to avoid needing
 133         * locking. */
 134
 135        spin_lock_irqsave(&local->lock, flags);
 136        list_add(&tmp->list, &local->crypt_deinit_list);
 137        if (!timer_pending(&local->crypt_deinit_timer)) {
 138                local->crypt_deinit_timer.expires = jiffies + HZ;
 139                add_timer(&local->crypt_deinit_timer);
 140        }
 141        spin_unlock_irqrestore(&local->lock, flags);
 142}
 143
 144
 145static int prism2_ioctl_siwencode(struct net_device *dev,
 146                                  struct iw_request_info *info,
 147                                  struct iw_point *erq, char *keybuf)
 148{
 149        struct hostap_interface *iface;
 150        local_info_t *local;
 151        int i;
 152        struct ieee80211_crypt_data **crypt;
 153
 154        iface = netdev_priv(dev);
 155        local = iface->local;
 156
 157        i = erq->flags & IW_ENCODE_INDEX;
 158        if (i < 1 || i > 4)
 159                i = local->tx_keyidx;
 160        else
 161                i--;
 162        if (i < 0 || i >= WEP_KEYS)
 163                return -EINVAL;
 164
 165        crypt = &local->crypt[i];
 166
 167        if (erq->flags & IW_ENCODE_DISABLED) {
 168                if (*crypt)
 169                        prism2_crypt_delayed_deinit(local, crypt);
 170                goto done;
 171        }
 172
 173        if (*crypt != NULL && (*crypt)->ops != NULL &&
 174            strcmp((*crypt)->ops->name, "WEP") != 0) {
 175                /* changing to use WEP; deinit previously used algorithm */
 176                prism2_crypt_delayed_deinit(local, crypt);
 177        }
 178
 179        if (*crypt == NULL) {
 180                struct ieee80211_crypt_data *new_crypt;
 181
 182                /* take WEP into use */
 183                new_crypt = kzalloc(sizeof(struct ieee80211_crypt_data),
 184                                GFP_KERNEL);
 185                if (new_crypt == NULL)
 186                        return -ENOMEM;
 187                new_crypt->ops = ieee80211_get_crypto_ops("WEP");
 188                if (!new_crypt->ops) {
 189                        request_module("ieee80211_crypt_wep");
 190                        new_crypt->ops = ieee80211_get_crypto_ops("WEP");
 191                }
 192                if (new_crypt->ops)
 193                        new_crypt->priv = new_crypt->ops->init(i);
 194                if (!new_crypt->ops || !new_crypt->priv) {
 195                        kfree(new_crypt);
 196                        new_crypt = NULL;
 197
 198                        printk(KERN_WARNING "%s: could not initialize WEP: "
 199                               "load module hostap_crypt_wep.o\n",
 200                               dev->name);
 201                        return -EOPNOTSUPP;
 202                }
 203                *crypt = new_crypt;
 204        }
 205
 206        if (erq->length > 0) {
 207                int len = erq->length <= 5 ? 5 : 13;
 208                int first = 1, j;
 209                if (len > erq->length)
 210                        memset(keybuf + erq->length, 0, len - erq->length);
 211                (*crypt)->ops->set_key(keybuf, len, NULL, (*crypt)->priv);
 212                for (j = 0; j < WEP_KEYS; j++) {
 213                        if (j != i && local->crypt[j]) {
 214                                first = 0;
 215                                break;
 216                        }
 217                }
 218                if (first)
 219                        local->tx_keyidx = i;
 220        } else {
 221                /* No key data - just set the default TX key index */
 222                local->tx_keyidx = i;
 223        }
 224
 225 done:
 226        local->open_wep = erq->flags & IW_ENCODE_OPEN;
 227
 228        if (hostap_set_encryption(local)) {
 229                printk(KERN_DEBUG "%s: set_encryption failed\n", dev->name);
 230                return -EINVAL;
 231        }
 232
 233        /* Do not reset port0 if card is in Managed mode since resetting will
 234         * generate new IEEE 802.11 authentication which may end up in looping
 235         * with IEEE 802.1X. Prism2 documentation seem to require port reset
 236         * after WEP configuration. However, keys are apparently changed at
 237         * least in Managed mode. */
 238        if (local->iw_mode != IW_MODE_INFRA && local->func->reset_port(dev)) {
 239                printk(KERN_DEBUG "%s: reset_port failed\n", dev->name);
 240                return -EINVAL;
 241        }
 242
 243        return 0;
 244}
 245
 246
 247static int prism2_ioctl_giwencode(struct net_device *dev,
 248                                  struct iw_request_info *info,
 249                                  struct iw_point *erq, char *key)
 250{
 251        struct hostap_interface *iface;
 252        local_info_t *local;
 253        int i, len;
 254        u16 val;
 255        struct ieee80211_crypt_data *crypt;
 256
 257        iface = netdev_priv(dev);
 258        local = iface->local;
 259
 260        i = erq->flags & IW_ENCODE_INDEX;
 261        if (i < 1 || i > 4)
 262                i = local->tx_keyidx;
 263        else
 264                i--;
 265        if (i < 0 || i >= WEP_KEYS)
 266                return -EINVAL;
 267
 268        crypt = local->crypt[i];
 269        erq->flags = i + 1;
 270
 271        if (crypt == NULL || crypt->ops == NULL) {
 272                erq->length = 0;
 273                erq->flags |= IW_ENCODE_DISABLED;
 274                return 0;
 275        }
 276
 277        if (strcmp(crypt->ops->name, "WEP") != 0) {
 278                /* only WEP is supported with wireless extensions, so just
 279                 * report that encryption is used */
 280                erq->length = 0;
 281                erq->flags |= IW_ENCODE_ENABLED;
 282                return 0;
 283        }
 284
 285        /* Reads from HFA384X_RID_CNFDEFAULTKEY* return bogus values, so show
 286         * the keys from driver buffer */
 287        len = crypt->ops->get_key(key, WEP_KEY_LEN, NULL, crypt->priv);
 288        erq->length = (len >= 0 ? len : 0);
 289
 290        if (local->func->get_rid(dev, HFA384X_RID_CNFWEPFLAGS, &val, 2, 1) < 0)
 291        {
 292                printk("CNFWEPFLAGS reading failed\n");
 293                return -EOPNOTSUPP;
 294        }
 295        le16_to_cpus(&val);
 296        if (val & HFA384X_WEPFLAGS_PRIVACYINVOKED)
 297                erq->flags |= IW_ENCODE_ENABLED;
 298        else
 299                erq->flags |= IW_ENCODE_DISABLED;
 300        if (val & HFA384X_WEPFLAGS_EXCLUDEUNENCRYPTED)
 301                erq->flags |= IW_ENCODE_RESTRICTED;
 302        else
 303                erq->flags |= IW_ENCODE_OPEN;
 304
 305        return 0;
 306}
 307
 308
 309static int hostap_set_rate(struct net_device *dev)
 310{
 311        struct hostap_interface *iface;
 312        local_info_t *local;
 313        int ret, basic_rates;
 314
 315        iface = netdev_priv(dev);
 316        local = iface->local;
 317
 318        basic_rates = local->basic_rates & local->tx_rate_control;
 319        if (!basic_rates || basic_rates != local->basic_rates) {
 320                printk(KERN_INFO "%s: updating basic rate set automatically "
 321                       "to match with the new supported rate set\n",
 322                       dev->name);
 323                if (!basic_rates)
 324                        basic_rates = local->tx_rate_control;
 325
 326                local->basic_rates = basic_rates;
 327                if (hostap_set_word(dev, HFA384X_RID_CNFBASICRATES,
 328                                    basic_rates))
 329                        printk(KERN_WARNING "%s: failed to set "
 330                               "cnfBasicRates\n", dev->name);
 331        }
 332
 333        ret = (hostap_set_word(dev, HFA384X_RID_TXRATECONTROL,
 334                               local->tx_rate_control) ||
 335               hostap_set_word(dev, HFA384X_RID_CNFSUPPORTEDRATES,
 336                               local->tx_rate_control) ||
 337               local->func->reset_port(dev));
 338
 339        if (ret) {
 340                printk(KERN_WARNING "%s: TXRateControl/cnfSupportedRates "
 341                       "setting to 0x%x failed\n",
 342                       dev->name, local->tx_rate_control);
 343        }
 344
 345        /* Update TX rate configuration for all STAs based on new operational
 346         * rate set. */
 347        hostap_update_rates(local);
 348
 349        return ret;
 350}
 351
 352
 353static int prism2_ioctl_siwrate(struct net_device *dev,
 354                                struct iw_request_info *info,
 355                                struct iw_param *rrq, char *extra)
 356{
 357        struct hostap_interface *iface;
 358        local_info_t *local;
 359
 360        iface = netdev_priv(dev);
 361        local = iface->local;
 362
 363        if (rrq->fixed) {
 364                switch (rrq->value) {
 365                case 11000000:
 366                        local->tx_rate_control = HFA384X_RATES_11MBPS;
 367                        break;
 368                case 5500000:
 369                        local->tx_rate_control = HFA384X_RATES_5MBPS;
 370                        break;
 371                case 2000000:
 372                        local->tx_rate_control = HFA384X_RATES_2MBPS;
 373                        break;
 374                case 1000000:
 375                        local->tx_rate_control = HFA384X_RATES_1MBPS;
 376                        break;
 377                default:
 378                        local->tx_rate_control = HFA384X_RATES_1MBPS |
 379                                HFA384X_RATES_2MBPS | HFA384X_RATES_5MBPS |
 380                                HFA384X_RATES_11MBPS;
 381                        break;
 382                }
 383        } else {
 384                switch (rrq->value) {
 385                case 11000000:
 386                        local->tx_rate_control = HFA384X_RATES_1MBPS |
 387                                HFA384X_RATES_2MBPS | HFA384X_RATES_5MBPS |
 388                                HFA384X_RATES_11MBPS;
 389                        break;
 390                case 5500000:
 391                        local->tx_rate_control = HFA384X_RATES_1MBPS |
 392                                HFA384X_RATES_2MBPS | HFA384X_RATES_5MBPS;
 393                        break;
 394                case 2000000:
 395                        local->tx_rate_control = HFA384X_RATES_1MBPS |
 396                                HFA384X_RATES_2MBPS;
 397                        break;
 398                case 1000000:
 399                        local->tx_rate_control = HFA384X_RATES_1MBPS;
 400                        break;
 401                default:
 402                        local->tx_rate_control = HFA384X_RATES_1MBPS |
 403                                HFA384X_RATES_2MBPS | HFA384X_RATES_5MBPS |
 404                                HFA384X_RATES_11MBPS;
 405                        break;
 406                }
 407        }
 408
 409        return hostap_set_rate(dev);
 410}
 411
 412
 413static int prism2_ioctl_giwrate(struct net_device *dev,
 414                                struct iw_request_info *info,
 415                                struct iw_param *rrq, char *extra)
 416{
 417        u16 val;
 418        struct hostap_interface *iface;
 419        local_info_t *local;
 420        int ret = 0;
 421
 422        iface = netdev_priv(dev);
 423        local = iface->local;
 424
 425        if (local->func->get_rid(dev, HFA384X_RID_TXRATECONTROL, &val, 2, 1) <
 426            0)
 427                return -EINVAL;
 428
 429        if ((val & 0x1) && (val > 1))
 430                rrq->fixed = 0;
 431        else
 432                rrq->fixed = 1;
 433
 434        if (local->iw_mode == IW_MODE_MASTER && local->ap != NULL &&
 435            !local->fw_tx_rate_control) {
 436                /* HFA384X_RID_CURRENTTXRATE seems to always be 2 Mbps in
 437                 * Host AP mode, so use the recorded TX rate of the last sent
 438                 * frame */
 439                rrq->value = local->ap->last_tx_rate > 0 ?
 440                        local->ap->last_tx_rate * 100000 : 11000000;
 441                return 0;
 442        }
 443
 444        if (local->func->get_rid(dev, HFA384X_RID_CURRENTTXRATE, &val, 2, 1) <
 445            0)
 446                return -EINVAL;
 447
 448        switch (val) {
 449        case HFA384X_RATES_1MBPS:
 450                rrq->value = 1000000;
 451                break;
 452        case HFA384X_RATES_2MBPS:
 453                rrq->value = 2000000;
 454                break;
 455        case HFA384X_RATES_5MBPS:
 456                rrq->value = 5500000;
 457                break;
 458        case HFA384X_RATES_11MBPS:
 459                rrq->value = 11000000;
 460                break;
 461        default:
 462                /* should not happen */
 463                rrq->value = 11000000;
 464                ret = -EINVAL;
 465                break;
 466        }
 467
 468        return ret;
 469}
 470
 471
 472static int prism2_ioctl_siwsens(struct net_device *dev,
 473                                struct iw_request_info *info,
 474                                struct iw_param *sens, char *extra)
 475{
 476        struct hostap_interface *iface;
 477        local_info_t *local;
 478
 479        iface = netdev_priv(dev);
 480        local = iface->local;
 481
 482        /* Set the desired AP density */
 483        if (sens->value < 1 || sens->value > 3)
 484                return -EINVAL;
 485
 486        if (hostap_set_word(dev, HFA384X_RID_CNFSYSTEMSCALE, sens->value) ||
 487            local->func->reset_port(dev))
 488                return -EINVAL;
 489
 490        return 0;
 491}
 492
 493static int prism2_ioctl_giwsens(struct net_device *dev,
 494                                struct iw_request_info *info,
 495                                struct iw_param *sens, char *extra)
 496{
 497        struct hostap_interface *iface;
 498        local_info_t *local;
 499        __le16 val;
 500
 501        iface = netdev_priv(dev);
 502        local = iface->local;
 503
 504        /* Get the current AP density */
 505        if (local->func->get_rid(dev, HFA384X_RID_CNFSYSTEMSCALE, &val, 2, 1) <
 506            0)
 507                return -EINVAL;
 508
 509        sens->value = le16_to_cpu(val);
 510        sens->fixed = 1;
 511
 512        return 0;
 513}
 514
 515
 516/* Deprecated in new wireless extension API */
 517static int prism2_ioctl_giwaplist(struct net_device *dev,
 518                                  struct iw_request_info *info,
 519                                  struct iw_point *data, char *extra)
 520{
 521        struct hostap_interface *iface;
 522        local_info_t *local;
 523        struct sockaddr *addr;
 524        struct iw_quality *qual;
 525
 526        iface = netdev_priv(dev);
 527        local = iface->local;
 528
 529        if (local->iw_mode != IW_MODE_MASTER) {
 530                printk(KERN_DEBUG "SIOCGIWAPLIST is currently only supported "
 531                       "in Host AP mode\n");
 532                data->length = 0;
 533                return -EOPNOTSUPP;
 534        }
 535
 536        addr = kmalloc(sizeof(struct sockaddr) * IW_MAX_AP, GFP_KERNEL);
 537        qual = kmalloc(sizeof(struct iw_quality) * IW_MAX_AP, GFP_KERNEL);
 538        if (addr == NULL || qual == NULL) {
 539                kfree(addr);
 540                kfree(qual);
 541                data->length = 0;
 542                return -ENOMEM;
 543        }
 544
 545        data->length = prism2_ap_get_sta_qual(local, addr, qual, IW_MAX_AP, 1);
 546
 547        memcpy(extra, &addr, sizeof(struct sockaddr) * data->length);
 548        data->flags = 1; /* has quality information */
 549        memcpy(extra + sizeof(struct sockaddr) * data->length, &qual,
 550               sizeof(struct iw_quality) * data->length);
 551
 552        kfree(addr);
 553        kfree(qual);
 554        return 0;
 555}
 556
 557
 558static int prism2_ioctl_siwrts(struct net_device *dev,
 559                               struct iw_request_info *info,
 560                               struct iw_param *rts, char *extra)
 561{
 562        struct hostap_interface *iface;
 563        local_info_t *local;
 564        __le16 val;
 565
 566        iface = netdev_priv(dev);
 567        local = iface->local;
 568
 569        if (rts->disabled)
 570                val = cpu_to_le16(2347);
 571        else if (rts->value < 0 || rts->value > 2347)
 572                return -EINVAL;
 573        else
 574                val = cpu_to_le16(rts->value);
 575
 576        if (local->func->set_rid(dev, HFA384X_RID_RTSTHRESHOLD, &val, 2) ||
 577            local->func->reset_port(dev))
 578                return -EINVAL;
 579
 580        local->rts_threshold = rts->value;
 581
 582        return 0;
 583}
 584
 585static int prism2_ioctl_giwrts(struct net_device *dev,
 586                               struct iw_request_info *info,
 587                               struct iw_param *rts, char *extra)
 588{
 589        struct hostap_interface *iface;
 590        local_info_t *local;
 591        __le16 val;
 592
 593        iface = netdev_priv(dev);
 594        local = iface->local;
 595
 596        if (local->func->get_rid(dev, HFA384X_RID_RTSTHRESHOLD, &val, 2, 1) <
 597            0)
 598                return -EINVAL;
 599
 600        rts->value = le16_to_cpu(val);
 601        rts->disabled = (rts->value == 2347);
 602        rts->fixed = 1;
 603
 604        return 0;
 605}
 606
 607
 608static int prism2_ioctl_siwfrag(struct net_device *dev,
 609                                struct iw_request_info *info,
 610                                struct iw_param *rts, char *extra)
 611{
 612        struct hostap_interface *iface;
 613        local_info_t *local;
 614        __le16 val;
 615
 616        iface = netdev_priv(dev);
 617        local = iface->local;
 618
 619        if (rts->disabled)
 620                val = cpu_to_le16(2346);
 621        else if (rts->value < 256 || rts->value > 2346)
 622                return -EINVAL;
 623        else
 624                val = cpu_to_le16(rts->value & ~0x1); /* even numbers only */
 625
 626        local->fragm_threshold = rts->value & ~0x1;
 627        if (local->func->set_rid(dev, HFA384X_RID_FRAGMENTATIONTHRESHOLD, &val,
 628                                 2)
 629            || local->func->reset_port(dev))
 630                return -EINVAL;
 631
 632        return 0;
 633}
 634
 635static int prism2_ioctl_giwfrag(struct net_device *dev,
 636                                struct iw_request_info *info,
 637                                struct iw_param *rts, char *extra)
 638{
 639        struct hostap_interface *iface;
 640        local_info_t *local;
 641        __le16 val;
 642
 643        iface = netdev_priv(dev);
 644        local = iface->local;
 645
 646        if (local->func->get_rid(dev, HFA384X_RID_FRAGMENTATIONTHRESHOLD,
 647                                 &val, 2, 1) < 0)
 648                return -EINVAL;
 649
 650        rts->value = le16_to_cpu(val);
 651        rts->disabled = (rts->value == 2346);
 652        rts->fixed = 1;
 653
 654        return 0;
 655}
 656
 657
 658#ifndef PRISM2_NO_STATION_MODES
 659static int hostap_join_ap(struct net_device *dev)
 660{
 661        struct hostap_interface *iface;
 662        local_info_t *local;
 663        struct hfa384x_join_request req;
 664        unsigned long flags;
 665        int i;
 666        struct hfa384x_hostscan_result *entry;
 667        DECLARE_MAC_BUF(mac);
 668
 669        iface = netdev_priv(dev);
 670        local = iface->local;
 671
 672        memcpy(req.bssid, local->preferred_ap, ETH_ALEN);
 673        req.channel = 0;
 674
 675        spin_lock_irqsave(&local->lock, flags);
 676        for (i = 0; i < local->last_scan_results_count; i++) {
 677                if (!local->last_scan_results)
 678                        break;
 679                entry = &local->last_scan_results[i];
 680                if (memcmp(local->preferred_ap, entry->bssid, ETH_ALEN) == 0) {
 681                        req.channel = entry->chid;
 682                        break;
 683                }
 684        }
 685        spin_unlock_irqrestore(&local->lock, flags);
 686
 687        if (local->func->set_rid(dev, HFA384X_RID_JOINREQUEST, &req,
 688                                 sizeof(req))) {
 689                printk(KERN_DEBUG "%s: JoinRequest %s"
 690                       " failed\n",
 691                       dev->name, print_mac(mac, local->preferred_ap));
 692                return -1;
 693        }
 694
 695        printk(KERN_DEBUG "%s: Trying to join BSSID %s\n",
 696               dev->name, print_mac(mac, local->preferred_ap));
 697
 698        return 0;
 699}
 700#endif /* PRISM2_NO_STATION_MODES */
 701
 702
 703static int prism2_ioctl_siwap(struct net_device *dev,
 704                              struct iw_request_info *info,
 705                              struct sockaddr *ap_addr, char *extra)
 706{
 707#ifdef PRISM2_NO_STATION_MODES
 708        return -EOPNOTSUPP;
 709#else /* PRISM2_NO_STATION_MODES */
 710        struct hostap_interface *iface;
 711        local_info_t *local;
 712
 713        iface = netdev_priv(dev);
 714        local = iface->local;
 715
 716        memcpy(local->preferred_ap, &ap_addr->sa_data, ETH_ALEN);
 717
 718        if (local->host_roaming == 1 && local->iw_mode == IW_MODE_INFRA) {
 719                struct hfa384x_scan_request scan_req;
 720                memset(&scan_req, 0, sizeof(scan_req));
 721                scan_req.channel_list = cpu_to_le16(0x3fff);
 722                scan_req.txrate = cpu_to_le16(HFA384X_RATES_1MBPS);
 723                if (local->func->set_rid(dev, HFA384X_RID_SCANREQUEST,
 724                                         &scan_req, sizeof(scan_req))) {
 725                        printk(KERN_DEBUG "%s: ScanResults request failed - "
 726                               "preferred AP delayed to next unsolicited "
 727                               "scan\n", dev->name);
 728                }
 729        } else if (local->host_roaming == 2 &&
 730                   local->iw_mode == IW_MODE_INFRA) {
 731                if (hostap_join_ap(dev))
 732                        return -EINVAL;
 733        } else {
 734                printk(KERN_DEBUG "%s: Preferred AP (SIOCSIWAP) is used only "
 735                       "in Managed mode when host_roaming is enabled\n",
 736                       dev->name);
 737        }
 738
 739        return 0;
 740#endif /* PRISM2_NO_STATION_MODES */
 741}
 742
 743static int prism2_ioctl_giwap(struct net_device *dev,
 744                              struct iw_request_info *info,
 745                              struct sockaddr *ap_addr, char *extra)
 746{
 747        struct hostap_interface *iface;
 748        local_info_t *local;
 749
 750        iface = netdev_priv(dev);
 751        local = iface->local;
 752
 753        ap_addr->sa_family = ARPHRD_ETHER;
 754        switch (iface->type) {
 755        case HOSTAP_INTERFACE_AP:
 756                memcpy(&ap_addr->sa_data, dev->dev_addr, ETH_ALEN);
 757                break;
 758        case HOSTAP_INTERFACE_STA:
 759                memcpy(&ap_addr->sa_data, local->assoc_ap_addr, ETH_ALEN);
 760                break;
 761        case HOSTAP_INTERFACE_WDS:
 762                memcpy(&ap_addr->sa_data, iface->u.wds.remote_addr, ETH_ALEN);
 763                break;
 764        default:
 765                if (local->func->get_rid(dev, HFA384X_RID_CURRENTBSSID,
 766                                         &ap_addr->sa_data, ETH_ALEN, 1) < 0)
 767                        return -EOPNOTSUPP;
 768
 769                /* local->bssid is also updated in LinkStatus handler when in
 770                 * station mode */
 771                memcpy(local->bssid, &ap_addr->sa_data, ETH_ALEN);
 772                break;
 773        }
 774
 775        return 0;
 776}
 777
 778
 779static int prism2_ioctl_siwnickn(struct net_device *dev,
 780                                 struct iw_request_info *info,
 781                                 struct iw_point *data, char *nickname)
 782{
 783        struct hostap_interface *iface;
 784        local_info_t *local;
 785
 786        iface = netdev_priv(dev);
 787        local = iface->local;
 788
 789        memset(local->name, 0, sizeof(local->name));
 790        memcpy(local->name, nickname, data->length);
 791        local->name_set = 1;
 792
 793        if (hostap_set_string(dev, HFA384X_RID_CNFOWNNAME, local->name) ||
 794            local->func->reset_port(dev))
 795                return -EINVAL;
 796
 797        return 0;
 798}
 799
 800static int prism2_ioctl_giwnickn(struct net_device *dev,
 801                                 struct iw_request_info *info,
 802                                 struct iw_point *data, char *nickname)
 803{
 804        struct hostap_interface *iface;
 805        local_info_t *local;
 806        int len;
 807        char name[MAX_NAME_LEN + 3];
 808        u16 val;
 809
 810        iface = netdev_priv(dev);
 811        local = iface->local;
 812
 813        len = local->func->get_rid(dev, HFA384X_RID_CNFOWNNAME,
 814                                   &name, MAX_NAME_LEN + 2, 0);
 815        val = le16_to_cpu(*(__le16 *) name);
 816        if (len > MAX_NAME_LEN + 2 || len < 0 || val > MAX_NAME_LEN)
 817                return -EOPNOTSUPP;
 818
 819        name[val + 2] = '\0';
 820        data->length = val + 1;
 821        memcpy(nickname, name + 2, val + 1);
 822
 823        return 0;
 824}
 825
 826
 827static int prism2_ioctl_siwfreq(struct net_device *dev,
 828                                struct iw_request_info *info,
 829                                struct iw_freq *freq, char *extra)
 830{
 831        struct hostap_interface *iface;
 832        local_info_t *local;
 833
 834        iface = netdev_priv(dev);
 835        local = iface->local;
 836
 837        /* freq => chan. */
 838        if (freq->e == 1 &&
 839            freq->m / 100000 >= freq_list[0] &&
 840            freq->m / 100000 <= freq_list[FREQ_COUNT - 1]) {
 841                int ch;
 842                int fr = freq->m / 100000;
 843                for (ch = 0; ch < FREQ_COUNT; ch++) {
 844                        if (fr == freq_list[ch]) {
 845                                freq->e = 0;
 846                                freq->m = ch + 1;
 847                                break;
 848                        }
 849                }
 850        }
 851
 852        if (freq->e != 0 || freq->m < 1 || freq->m > FREQ_COUNT ||
 853            !(local->channel_mask & (1 << (freq->m - 1))))
 854                return -EINVAL;
 855
 856        local->channel = freq->m; /* channel is used in prism2_setup_rids() */
 857        if (hostap_set_word(dev, HFA384X_RID_CNFOWNCHANNEL, local->channel) ||
 858            local->func->reset_port(dev))
 859                return -EINVAL;
 860
 861        return 0;
 862}
 863
 864static int prism2_ioctl_giwfreq(struct net_device *dev,
 865                                struct iw_request_info *info,
 866                                struct iw_freq *freq, char *extra)
 867{
 868        struct hostap_interface *iface;
 869        local_info_t *local;
 870        u16 val;
 871
 872        iface = netdev_priv(dev);
 873        local = iface->local;
 874
 875        if (local->func->get_rid(dev, HFA384X_RID_CURRENTCHANNEL, &val, 2, 1) <
 876            0)
 877                return -EINVAL;
 878
 879        le16_to_cpus(&val);
 880        if (val < 1 || val > FREQ_COUNT)
 881                return -EINVAL;
 882
 883        freq->m = freq_list[val - 1] * 100000;
 884        freq->e = 1;
 885
 886        return 0;
 887}
 888
 889
 890static void hostap_monitor_set_type(local_info_t *local)
 891{
 892        struct net_device *dev = local->ddev;
 893
 894        if (dev == NULL)
 895                return;
 896
 897        if (local->monitor_type == PRISM2_MONITOR_PRISM ||
 898            local->monitor_type == PRISM2_MONITOR_CAPHDR) {
 899                dev->type = ARPHRD_IEEE80211_PRISM;
 900        } else if (local->monitor_type == PRISM2_MONITOR_RADIOTAP) {
 901                dev->type = ARPHRD_IEEE80211_RADIOTAP;
 902        } else {
 903                dev->type = ARPHRD_IEEE80211;
 904        }
 905}
 906
 907
 908static int prism2_ioctl_siwessid(struct net_device *dev,
 909                                 struct iw_request_info *info,
 910                                 struct iw_point *data, char *ssid)
 911{
 912        struct hostap_interface *iface;
 913        local_info_t *local;
 914
 915        iface = netdev_priv(dev);
 916        local = iface->local;
 917
 918        if (iface->type == HOSTAP_INTERFACE_WDS)
 919                return -EOPNOTSUPP;
 920
 921        if (data->flags == 0)
 922                ssid[0] = '\0'; /* ANY */
 923
 924        if (local->iw_mode == IW_MODE_MASTER && ssid[0] == '\0') {
 925                /* Setting SSID to empty string seems to kill the card in
 926                 * Host AP mode */
 927                printk(KERN_DEBUG "%s: Host AP mode does not support "
 928                       "'Any' essid\n", dev->name);
 929                return -EINVAL;
 930        }
 931
 932        memcpy(local->essid, ssid, data->length);
 933        local->essid[data->length] = '\0';
 934
 935        if ((!local->fw_ap &&
 936             hostap_set_string(dev, HFA384X_RID_CNFDESIREDSSID, local->essid))
 937            || hostap_set_string(dev, HFA384X_RID_CNFOWNSSID, local->essid) ||
 938            local->func->reset_port(dev))
 939                return -EINVAL;
 940
 941        return 0;
 942}
 943
 944static int prism2_ioctl_giwessid(struct net_device *dev,
 945                                 struct iw_request_info *info,
 946                                 struct iw_point *data, char *essid)
 947{
 948        struct hostap_interface *iface;
 949        local_info_t *local;
 950        u16 val;
 951
 952        iface = netdev_priv(dev);
 953        local = iface->local;
 954
 955        if (iface->type == HOSTAP_INTERFACE_WDS)
 956                return -EOPNOTSUPP;
 957
 958        data->flags = 1; /* active */
 959        if (local->iw_mode == IW_MODE_MASTER) {
 960                data->length = strlen(local->essid);
 961                memcpy(essid, local->essid, IW_ESSID_MAX_SIZE);
 962        } else {
 963                int len;
 964                char ssid[MAX_SSID_LEN + 2];
 965                memset(ssid, 0, sizeof(ssid));
 966                len = local->func->get_rid(dev, HFA384X_RID_CURRENTSSID,
 967                                           &ssid, MAX_SSID_LEN + 2, 0);
 968                val = le16_to_cpu(*(__le16 *) ssid);
 969                if (len > MAX_SSID_LEN + 2 || len < 0 || val > MAX_SSID_LEN) {
 970                        return -EOPNOTSUPP;
 971                }
 972                data->length = val;
 973                memcpy(essid, ssid + 2, IW_ESSID_MAX_SIZE);
 974        }
 975
 976        return 0;
 977}
 978
 979
 980static int prism2_ioctl_giwrange(struct net_device *dev,
 981                                 struct iw_request_info *info,
 982                                 struct iw_point *data, char *extra)
 983{
 984        struct hostap_interface *iface;
 985        local_info_t *local;
 986        struct iw_range *range = (struct iw_range *) extra;
 987        u8 rates[10];
 988        u16 val;
 989        int i, len, over2;
 990
 991        iface = netdev_priv(dev);
 992        local = iface->local;
 993
 994        data->length = sizeof(struct iw_range);
 995        memset(range, 0, sizeof(struct iw_range));
 996
 997        /* TODO: could fill num_txpower and txpower array with
 998         * something; however, there are 128 different values.. */
 999
1000        range->txpower_capa = IW_TXPOW_DBM;
1001
1002        if (local->iw_mode == IW_MODE_INFRA || local->iw_mode == IW_MODE_ADHOC)
1003        {
1004                range->min_pmp = 1 * 1024;
1005                range->max_pmp = 65535 * 1024;
1006                range->min_pmt = 1 * 1024;
1007                range->max_pmt = 1000 * 1024;
1008                range->pmp_flags = IW_POWER_PERIOD;
1009                range->pmt_flags = IW_POWER_TIMEOUT;
1010                range->pm_capa = IW_POWER_PERIOD | IW_POWER_TIMEOUT |
1011                        IW_POWER_UNICAST_R | IW_POWER_ALL_R;
1012        }
1013
1014        range->we_version_compiled = WIRELESS_EXT;
1015        range->we_version_source = 18;
1016
1017        range->retry_capa = IW_RETRY_LIMIT;
1018        range->retry_flags = IW_RETRY_LIMIT;
1019        range->min_retry = 0;
1020        range->max_retry = 255;
1021
1022        range->num_channels = FREQ_COUNT;
1023
1024        val = 0;
1025        for (i = 0; i < FREQ_COUNT; i++) {
1026                if (local->channel_mask & (1 << i)) {
1027                        range->freq[val].i = i + 1;
1028                        range->freq[val].m = freq_list[i] * 100000;
1029                        range->freq[val].e = 1;
1030                        val++;
1031                }
1032                if (val == IW_MAX_FREQUENCIES)
1033                        break;
1034        }
1035        range->num_frequency = val;
1036
1037        if (local->sta_fw_ver >= PRISM2_FW_VER(1,3,1)) {
1038                range->max_qual.qual = 70; /* what is correct max? This was not
1039                                            * documented exactly. At least
1040                                            * 69 has been observed. */
1041                range->max_qual.level = 0; /* dB */
1042                range->max_qual.noise = 0; /* dB */
1043
1044                /* What would be suitable values for "average/typical" qual? */
1045                range->avg_qual.qual = 20;
1046                range->avg_qual.level = -60;
1047                range->avg_qual.noise = -95;
1048        } else {
1049                range->max_qual.qual = 92; /* 0 .. 92 */
1050                range->max_qual.level = 154; /* 27 .. 154 */
1051                range->max_qual.noise = 154; /* 27 .. 154 */
1052        }
1053        range->sensitivity = 3;
1054
1055        range->max_encoding_tokens = WEP_KEYS;
1056        range->num_encoding_sizes = 2;
1057        range->encoding_size[0] = 5;
1058        range->encoding_size[1] = 13;
1059
1060        over2 = 0;
1061        len = prism2_get_datarates(dev, rates);
1062        range->num_bitrates = 0;
1063        for (i = 0; i < len; i++) {
1064                if (range->num_bitrates < IW_MAX_BITRATES) {
1065                        range->bitrate[range->num_bitrates] =
1066                                rates[i] * 500000;
1067                        range->num_bitrates++;
1068                }
1069                if (rates[i] == 0x0b || rates[i] == 0x16)
1070                        over2 = 1;
1071        }
1072        /* estimated maximum TCP throughput values (bps) */
1073        range->throughput = over2 ? 5500000 : 1500000;
1074
1075        range->min_rts = 0;
1076        range->max_rts = 2347;
1077        range->min_frag = 256;
1078        range->max_frag = 2346;
1079
1080        /* Event capability (kernel + driver) */
1081        range->event_capa[0] = (IW_EVENT_CAPA_K_0 |
1082                                IW_EVENT_CAPA_MASK(SIOCGIWTHRSPY) |
1083                                IW_EVENT_CAPA_MASK(SIOCGIWAP) |
1084                                IW_EVENT_CAPA_MASK(SIOCGIWSCAN));
1085        range->event_capa[1] = IW_EVENT_CAPA_K_1;
1086        range->event_capa[4] = (IW_EVENT_CAPA_MASK(IWEVTXDROP) |
1087                                IW_EVENT_CAPA_MASK(IWEVCUSTOM) |
1088                                IW_EVENT_CAPA_MASK(IWEVREGISTERED) |
1089                                IW_EVENT_CAPA_MASK(IWEVEXPIRED));
1090
1091        range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
1092                IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
1093
1094        if (local->sta_fw_ver >= PRISM2_FW_VER(1,3,1))
1095                range->scan_capa = IW_SCAN_CAPA_ESSID;
1096
1097        return 0;
1098}
1099
1100
1101static int hostap_monitor_mode_enable(local_info_t *local)
1102{
1103        struct net_device *dev = local->dev;
1104
1105        printk(KERN_DEBUG "Enabling monitor mode\n");
1106        hostap_monitor_set_type(local);
1107
1108        if (hostap_set_word(dev, HFA384X_RID_CNFPORTTYPE,
1109                            HFA384X_PORTTYPE_PSEUDO_IBSS)) {
1110                printk(KERN_DEBUG "Port type setting for monitor mode "
1111                       "failed\n");
1112                return -EOPNOTSUPP;
1113        }
1114
1115        /* Host decrypt is needed to get the IV and ICV fields;
1116         * however, monitor mode seems to remove WEP flag from frame
1117         * control field */
1118        if (hostap_set_word(dev, HFA384X_RID_CNFWEPFLAGS,
1119                            HFA384X_WEPFLAGS_HOSTENCRYPT |
1120                            HFA384X_WEPFLAGS_HOSTDECRYPT)) {
1121                printk(KERN_DEBUG "WEP flags setting failed\n");
1122                return -EOPNOTSUPP;
1123        }
1124
1125        if (local->func->reset_port(dev) ||
1126            local->func->cmd(dev, HFA384X_CMDCODE_TEST |
1127                             (HFA384X_TEST_MONITOR << 8),
1128                             0, NULL, NULL)) {
1129                printk(KERN_DEBUG "Setting monitor mode failed\n");
1130                return -EOPNOTSUPP;
1131        }
1132
1133        return 0;
1134}
1135
1136
1137static int hostap_monitor_mode_disable(local_info_t *local)
1138{
1139        struct net_device *dev = local->ddev;
1140
1141        if (dev == NULL)
1142                return -1;
1143
1144        printk(KERN_DEBUG "%s: Disabling monitor mode\n", dev->name);
1145        dev->type = ARPHRD_ETHER;
1146
1147        if (local->func->cmd(dev, HFA384X_CMDCODE_TEST |
1148                             (HFA384X_TEST_STOP << 8),
1149                             0, NULL, NULL))
1150                return -1;
1151        return hostap_set_encryption(local);
1152}
1153
1154
1155static int prism2_ioctl_siwmode(struct net_device *dev,
1156                                struct iw_request_info *info,
1157                                __u32 *mode, char *extra)
1158{
1159        struct hostap_interface *iface;
1160        local_info_t *local;
1161        int double_reset = 0;
1162
1163        iface = netdev_priv(dev);
1164        local = iface->local;
1165
1166        if (*mode != IW_MODE_ADHOC && *mode != IW_MODE_INFRA &&
1167            *mode != IW_MODE_MASTER && *mode != IW_MODE_REPEAT &&
1168            *mode != IW_MODE_MONITOR)
1169                return -EOPNOTSUPP;
1170
1171#ifdef PRISM2_NO_STATION_MODES
1172        if (*mode == IW_MODE_ADHOC || *mode == IW_MODE_INFRA)
1173                return -EOPNOTSUPP;
1174#endif /* PRISM2_NO_STATION_MODES */
1175
1176        if (*mode == local->iw_mode)
1177                return 0;
1178
1179        if (*mode == IW_MODE_MASTER && local->essid[0] == '\0') {
1180                printk(KERN_WARNING "%s: empty SSID not allowed in Master "
1181                       "mode\n", dev->name);
1182                return -EINVAL;
1183        }
1184
1185        if (local->iw_mode == IW_MODE_MONITOR)
1186                hostap_monitor_mode_disable(local);
1187
1188        if ((local->iw_mode == IW_MODE_ADHOC ||
1189             local->iw_mode == IW_MODE_MONITOR) && *mode == IW_MODE_MASTER) {
1190                /* There seems to be a firmware bug in at least STA f/w v1.5.6
1191                 * that leaves beacon frames to use IBSS type when moving from
1192                 * IBSS to Host AP mode. Doing double Port0 reset seems to be
1193                 * enough to workaround this. */
1194                double_reset = 1;
1195        }
1196
1197        printk(KERN_DEBUG "prism2: %s: operating mode changed "
1198               "%d -> %d\n", dev->name, local->iw_mode, *mode);
1199        local->iw_mode = *mode;
1200
1201        if (local->iw_mode == IW_MODE_MONITOR)
1202                hostap_monitor_mode_enable(local);
1203        else if (local->iw_mode == IW_MODE_MASTER && !local->host_encrypt &&
1204                 !local->fw_encrypt_ok) {
1205                printk(KERN_DEBUG "%s: defaulting to host-based encryption as "
1206                       "a workaround for firmware bug in Host AP mode WEP\n",
1207                       dev->name);
1208                local->host_encrypt = 1;
1209        }
1210
1211        if (hostap_set_word(dev, HFA384X_RID_CNFPORTTYPE,
1212                            hostap_get_porttype(local)))
1213                return -EOPNOTSUPP;
1214
1215        if (local->func->reset_port(dev))
1216                return -EINVAL;
1217        if (double_reset && local->func->reset_port(dev))
1218                return -EINVAL;
1219
1220        if (local->iw_mode != IW_MODE_INFRA && local->iw_mode != IW_MODE_ADHOC)
1221        {
1222                /* netif_carrier is used only in client modes for now, so make
1223                 * sure carrier is on when moving to non-client modes. */
1224                netif_carrier_on(local->dev);
1225                netif_carrier_on(local->ddev);
1226        }
1227        return 0;
1228}
1229
1230
1231static int prism2_ioctl_giwmode(struct net_device *dev,
1232                                struct iw_request_info *info,
1233                                __u32 *mode, char *extra)
1234{
1235        struct hostap_interface *iface;
1236        local_info_t *local;
1237
1238        iface = netdev_priv(dev);
1239        local = iface->local;
1240
1241        switch (iface->type) {
1242        case HOSTAP_INTERFACE_STA:
1243                *mode = IW_MODE_INFRA;
1244                break;
1245        case HOSTAP_INTERFACE_WDS:
1246                *mode = IW_MODE_REPEAT;
1247                break;
1248        default:
1249                *mode = local->iw_mode;
1250                break;
1251        }
1252        return 0;
1253}
1254
1255
1256static int prism2_ioctl_siwpower(struct net_device *dev,
1257                                 struct iw_request_info *info,
1258                                 struct iw_param *wrq, char *extra)
1259{
1260#ifdef PRISM2_NO_STATION_MODES
1261        return -EOPNOTSUPP;
1262#else /* PRISM2_NO_STATION_MODES */
1263        int ret = 0;
1264
1265        if (wrq->disabled)
1266                return hostap_set_word(dev, HFA384X_RID_CNFPMENABLED, 0);
1267
1268        switch (wrq->flags & IW_POWER_MODE) {
1269        case IW_POWER_UNICAST_R:
1270                ret = hostap_set_word(dev, HFA384X_RID_CNFMULTICASTRECEIVE, 0);
1271                if (ret)
1272                        return ret;
1273                ret = hostap_set_word(dev, HFA384X_RID_CNFPMENABLED, 1);
1274                if (ret)
1275                        return ret;
1276                break;
1277        case IW_POWER_ALL_R:
1278                ret = hostap_set_word(dev, HFA384X_RID_CNFMULTICASTRECEIVE, 1);
1279                if (ret)
1280                        return ret;
1281                ret = hostap_set_word(dev, HFA384X_RID_CNFPMENABLED, 1);
1282                if (ret)
1283                        return ret;
1284                break;
1285        case IW_POWER_ON:
1286                break;
1287        default:
1288                return -EINVAL;
1289        }
1290
1291        if (wrq->flags & IW_POWER_TIMEOUT) {
1292                ret = hostap_set_word(dev, HFA384X_RID_CNFPMENABLED, 1);
1293                if (ret)
1294                        return ret;
1295                ret = hostap_set_word(dev, HFA384X_RID_CNFPMHOLDOVERDURATION,
1296                                      wrq->value / 1024);
1297                if (ret)
1298                        return ret;
1299        }
1300        if (wrq->flags & IW_POWER_PERIOD) {
1301                ret = hostap_set_word(dev, HFA384X_RID_CNFPMENABLED, 1);
1302                if (ret)
1303                        return ret;
1304                ret = hostap_set_word(dev, HFA384X_RID_CNFMAXSLEEPDURATION,
1305                                      wrq->value / 1024);
1306                if (ret)
1307                        return ret;
1308        }
1309
1310        return ret;
1311#endif /* PRISM2_NO_STATION_MODES */
1312}
1313
1314
1315static int prism2_ioctl_giwpower(struct net_device *dev,
1316                                 struct iw_request_info *info,
1317                                 struct iw_param *rrq, char *extra)
1318{
1319#ifdef PRISM2_NO_STATION_MODES
1320        return -EOPNOTSUPP;
1321#else /* PRISM2_NO_STATION_MODES */
1322        struct hostap_interface *iface;
1323        local_info_t *local;
1324        __le16 enable, mcast;
1325
1326        iface = netdev_priv(dev);
1327        local = iface->local;
1328
1329        if (local->func->get_rid(dev, HFA384X_RID_CNFPMENABLED, &enable, 2, 1)
1330            < 0)
1331                return -EINVAL;
1332
1333        if (!le16_to_cpu(enable)) {
1334                rrq->disabled = 1;
1335                return 0;
1336        }
1337
1338        rrq->disabled = 0;
1339
1340        if ((rrq->flags & IW_POWER_TYPE) == IW_POWER_TIMEOUT) {
1341                __le16 timeout;
1342                if (local->func->get_rid(dev,
1343                                         HFA384X_RID_CNFPMHOLDOVERDURATION,
1344                                         &timeout, 2, 1) < 0)
1345                        return -EINVAL;
1346
1347                rrq->flags = IW_POWER_TIMEOUT;
1348                rrq->value = le16_to_cpu(timeout) * 1024;
1349        } else {
1350                __le16 period;
1351                if (local->func->get_rid(dev, HFA384X_RID_CNFMAXSLEEPDURATION,
1352                                         &period, 2, 1) < 0)
1353                        return -EINVAL;
1354
1355                rrq->flags = IW_POWER_PERIOD;
1356                rrq->value = le16_to_cpu(period) * 1024;
1357        }
1358
1359        if (local->func->get_rid(dev, HFA384X_RID_CNFMULTICASTRECEIVE, &mcast,
1360                                 2, 1) < 0)
1361                return -EINVAL;
1362
1363        if (le16_to_cpu(mcast))
1364                rrq->flags |= IW_POWER_ALL_R;
1365        else
1366                rrq->flags |= IW_POWER_UNICAST_R;
1367
1368        return 0;
1369#endif /* PRISM2_NO_STATION_MODES */
1370}
1371
1372
1373static int prism2_ioctl_siwretry(struct net_device *dev,
1374                                 struct iw_request_info *info,
1375                                 struct iw_param *rrq, char *extra)
1376{
1377        struct hostap_interface *iface;
1378        local_info_t *local;
1379
1380        iface = netdev_priv(dev);
1381        local = iface->local;
1382
1383        if (rrq->disabled)
1384                return -EINVAL;
1385
1386        /* setting retry limits is not supported with the current station
1387         * firmware code; simulate this with alternative retry count for now */
1388        if (rrq->flags == IW_RETRY_LIMIT) {
1389                if (rrq->value < 0) {
1390                        /* disable manual retry count setting and use firmware
1391                         * defaults */
1392                        local->manual_retry_count = -1;
1393                        local->tx_control &= ~HFA384X_TX_CTRL_ALT_RTRY;
1394                } else {
1395                        if (hostap_set_word(dev, HFA384X_RID_CNFALTRETRYCOUNT,
1396                                            rrq->value)) {
1397                                printk(KERN_DEBUG "%s: Alternate retry count "
1398                                       "setting to %d failed\n",
1399                                       dev->name, rrq->value);
1400                                return -EOPNOTSUPP;
1401                        }
1402
1403                        local->manual_retry_count = rrq->value;
1404                        local->tx_control |= HFA384X_TX_CTRL_ALT_RTRY;
1405                }
1406                return 0;
1407        }
1408
1409        return -EOPNOTSUPP;
1410
1411#if 0
1412        /* what could be done, if firmware would support this.. */
1413
1414        if (rrq->flags & IW_RETRY_LIMIT) {
1415                if (rrq->flags & IW_RETRY_LONG)
1416                        HFA384X_RID_LONGRETRYLIMIT = rrq->value;
1417                else if (rrq->flags & IW_RETRY_SHORT)
1418                        HFA384X_RID_SHORTRETRYLIMIT = rrq->value;
1419                else {
1420                        HFA384X_RID_LONGRETRYLIMIT = rrq->value;
1421                        HFA384X_RID_SHORTRETRYLIMIT = rrq->value;
1422                }
1423
1424        }
1425
1426        if (rrq->flags & IW_RETRY_LIFETIME) {
1427                HFA384X_RID_MAXTRANSMITLIFETIME = rrq->value / 1024;
1428        }
1429
1430        return 0;
1431#endif /* 0 */
1432}
1433
1434static int prism2_ioctl_giwretry(struct net_device *dev,
1435                                 struct iw_request_info *info,
1436                                 struct iw_param *rrq, char *extra)
1437{
1438        struct hostap_interface *iface;
1439        local_info_t *local;
1440        __le16 shortretry, longretry, lifetime, altretry;
1441
1442        iface = netdev_priv(dev);
1443        local = iface->local;
1444
1445        if (local->func->get_rid(dev, HFA384X_RID_SHORTRETRYLIMIT, &shortretry,
1446                                 2, 1) < 0 ||
1447            local->func->get_rid(dev, HFA384X_RID_LONGRETRYLIMIT, &longretry,
1448                                 2, 1) < 0 ||
1449            local->func->get_rid(dev, HFA384X_RID_MAXTRANSMITLIFETIME,
1450                                 &lifetime, 2, 1) < 0)
1451                return -EINVAL;
1452
1453        rrq->disabled = 0;
1454
1455        if ((rrq->flags & IW_RETRY_TYPE) == IW_RETRY_LIFETIME) {
1456                rrq->flags = IW_RETRY_LIFETIME;
1457                rrq->value = le16_to_cpu(lifetime) * 1024;
1458        } else {
1459                if (local->manual_retry_count >= 0) {
1460                        rrq->flags = IW_RETRY_LIMIT;
1461                        if (local->func->get_rid(dev,
1462                                                 HFA384X_RID_CNFALTRETRYCOUNT,
1463                                                 &altretry, 2, 1) >= 0)
1464                                rrq->value = le16_to_cpu(altretry);
1465                        else
1466                                rrq->value = local->manual_retry_count;
1467                } else if ((rrq->flags & IW_RETRY_LONG)) {
1468                        rrq->flags = IW_RETRY_LIMIT | IW_RETRY_LONG;
1469                        rrq->value = le16_to_cpu(longretry);
1470                } else {
1471                        rrq->flags = IW_RETRY_LIMIT;
1472                        rrq->value = le16_to_cpu(shortretry);
1473                        if (shortretry != longretry)
1474                                rrq->flags |= IW_RETRY_SHORT;
1475                }
1476        }
1477        return 0;
1478}
1479
1480
1481/* Note! This TX power controlling is experimental and should not be used in
1482 * production use. It just sets raw power register and does not use any kind of
1483 * feedback information from the measured TX power (CR58). This is now
1484 * commented out to make sure that it is not used by accident. TX power
1485 * configuration will be enabled again after proper algorithm using feedback
1486 * has been implemented. */
1487
1488#ifdef RAW_TXPOWER_SETTING
1489/* Map HFA386x's CR31 to and from dBm with some sort of ad hoc mapping..
1490 * This version assumes following mapping:
1491 * CR31 is 7-bit value with -64 to +63 range.
1492 * -64 is mapped into +20dBm and +63 into -43dBm.
1493 * This is certainly not an exact mapping for every card, but at least
1494 * increasing dBm value should correspond to increasing TX power.
1495 */
1496
1497static int prism2_txpower_hfa386x_to_dBm(u16 val)
1498{
1499        signed char tmp;
1500
1501        if (val > 255)
1502                val = 255;
1503
1504        tmp = val;
1505        tmp >>= 2;
1506
1507        return -12 - tmp;
1508}
1509
1510static u16 prism2_txpower_dBm_to_hfa386x(int val)
1511{
1512        signed char tmp;
1513
1514        if (val > 20)
1515                return 128;
1516        else if (val < -43)
1517                return 127;
1518
1519        tmp = val;
1520        tmp = -12 - tmp;
1521        tmp <<= 2;
1522
1523        return (unsigned char) tmp;
1524}
1525#endif /* RAW_TXPOWER_SETTING */
1526
1527
1528static int prism2_ioctl_siwtxpow(struct net_device *dev,
1529                                 struct iw_request_info *info,
1530                                 struct iw_param *rrq, char *extra)
1531{
1532        struct hostap_interface *iface;
1533        local_info_t *local;
1534#ifdef RAW_TXPOWER_SETTING
1535        char *tmp;
1536#endif
1537        u16 val;
1538        int ret = 0;
1539
1540        iface = netdev_priv(dev);
1541        local = iface->local;
1542
1543        if (rrq->disabled) {
1544                if (local->txpower_type != PRISM2_TXPOWER_OFF) {
1545                        val = 0xff; /* use all standby and sleep modes */
1546                        ret = local->func->cmd(dev, HFA384X_CMDCODE_WRITEMIF,
1547                                               HFA386X_CR_A_D_TEST_MODES2,
1548                                               &val, NULL);
1549                        printk(KERN_DEBUG "%s: Turning radio off: %s\n",
1550                               dev->name, ret ? "failed" : "OK");
1551                        local->txpower_type = PRISM2_TXPOWER_OFF;
1552                }
1553                return (ret ? -EOPNOTSUPP : 0);
1554        }
1555
1556        if (local->txpower_type == PRISM2_TXPOWER_OFF) {
1557                val = 0; /* disable all standby and sleep modes */
1558                ret = local->func->cmd(dev, HFA384X_CMDCODE_WRITEMIF,
1559                                       HFA386X_CR_A_D_TEST_MODES2, &val, NULL);
1560                printk(KERN_DEBUG "%s: Turning radio on: %s\n",
1561                       dev->name, ret ? "failed" : "OK");
1562                local->txpower_type = PRISM2_TXPOWER_UNKNOWN;
1563        }
1564
1565#ifdef RAW_TXPOWER_SETTING
1566        if (!rrq->fixed && local->txpower_type != PRISM2_TXPOWER_AUTO) {
1567                printk(KERN_DEBUG "Setting ALC on\n");
1568                val = HFA384X_TEST_CFG_BIT_ALC;
1569                local->func->cmd(dev, HFA384X_CMDCODE_TEST |
1570                                 (HFA384X_TEST_CFG_BITS << 8), 1, &val, NULL);
1571                local->txpower_type = PRISM2_TXPOWER_AUTO;
1572                return 0;
1573        }
1574
1575        if (local->txpower_type != PRISM2_TXPOWER_FIXED) {
1576                printk(KERN_DEBUG "Setting ALC off\n");
1577                val = HFA384X_TEST_CFG_BIT_ALC;
1578                local->func->cmd(dev, HFA384X_CMDCODE_TEST |
1579                                 (HFA384X_TEST_CFG_BITS << 8), 0, &val, NULL);
1580                        local->txpower_type = PRISM2_TXPOWER_FIXED;
1581        }
1582
1583        if (rrq->flags == IW_TXPOW_DBM)
1584                tmp = "dBm";
1585        else if (rrq->flags == IW_TXPOW_MWATT)
1586                tmp = "mW";
1587        else
1588                tmp = "UNKNOWN";
1589        printk(KERN_DEBUG "Setting TX power to %d %s\n", rrq->value, tmp);
1590
1591        if (rrq->flags != IW_TXPOW_DBM) {
1592                printk("SIOCSIWTXPOW with mW is not supported; use dBm\n");
1593                return -EOPNOTSUPP;
1594        }
1595
1596        local->txpower = rrq->value;
1597        val = prism2_txpower_dBm_to_hfa386x(local->txpower);
1598        if (local->func->cmd(dev, HFA384X_CMDCODE_WRITEMIF,
1599                             HFA386X_CR_MANUAL_TX_POWER, &val, NULL))
1600                ret = -EOPNOTSUPP;
1601#else /* RAW_TXPOWER_SETTING */
1602        if (rrq->fixed)
1603                ret = -EOPNOTSUPP;
1604#endif /* RAW_TXPOWER_SETTING */
1605
1606        return ret;
1607}
1608
1609static int prism2_ioctl_giwtxpow(struct net_device *dev,
1610                                 struct iw_request_info *info,
1611                                 struct iw_param *rrq, char *extra)
1612{
1613#ifdef RAW_TXPOWER_SETTING
1614        struct hostap_interface *iface;
1615        local_info_t *local;
1616        u16 resp0;
1617
1618        iface = netdev_priv(dev);
1619        local = iface->local;
1620
1621        rrq->flags = IW_TXPOW_DBM;
1622        rrq->disabled = 0;
1623        rrq->fixed = 0;
1624
1625        if (local->txpower_type == PRISM2_TXPOWER_AUTO) {
1626                if (local->func->cmd(dev, HFA384X_CMDCODE_READMIF,
1627                                     HFA386X_CR_MANUAL_TX_POWER,
1628                                     NULL, &resp0) == 0) {
1629                        rrq->value = prism2_txpower_hfa386x_to_dBm(resp0);
1630                } else {
1631                        /* Could not get real txpower; guess 15 dBm */
1632                        rrq->value = 15;
1633                }
1634        } else if (local->txpower_type == PRISM2_TXPOWER_OFF) {
1635                rrq->value = 0;
1636                rrq->disabled = 1;
1637        } else if (local->txpower_type == PRISM2_TXPOWER_FIXED) {
1638                rrq->value = local->txpower;
1639                rrq->fixed = 1;
1640        } else {
1641                printk("SIOCGIWTXPOW - unknown txpower_type=%d\n",
1642                       local->txpower_type);
1643        }
1644        return 0;
1645#else /* RAW_TXPOWER_SETTING */
1646        return -EOPNOTSUPP;
1647#endif /* RAW_TXPOWER_SETTING */
1648}
1649
1650
1651#ifndef PRISM2_NO_STATION_MODES
1652
1653/* HostScan request works with and without host_roaming mode. In addition, it
1654 * does not break current association. However, it requires newer station
1655 * firmware version (>= 1.3.1) than scan request. */
1656static int prism2_request_hostscan(struct net_device *dev,
1657                                   u8 *ssid, u8 ssid_len)
1658{
1659        struct hostap_interface *iface;
1660        local_info_t *local;
1661        struct hfa384x_hostscan_request scan_req;
1662
1663        iface = netdev_priv(dev);
1664        local = iface->local;
1665
1666        memset(&scan_req, 0, sizeof(scan_req));
1667        scan_req.channel_list = cpu_to_le16(local->channel_mask &
1668                                            local->scan_channel_mask);
1669        scan_req.txrate = __constant_cpu_to_le16(HFA384X_RATES_1MBPS);
1670        if (ssid) {
1671                if (ssid_len > 32)
1672                        return -EINVAL;
1673                scan_req.target_ssid_len = cpu_to_le16(ssid_len);
1674                memcpy(scan_req.target_ssid, ssid, ssid_len);
1675        }
1676
1677        if (local->func->set_rid(dev, HFA384X_RID_HOSTSCAN, &scan_req,
1678                                 sizeof(scan_req))) {
1679                printk(KERN_DEBUG "%s: HOSTSCAN failed\n", dev->name);
1680                return -EINVAL;
1681        }
1682        return 0;
1683}
1684
1685
1686static int prism2_request_scan(struct net_device *dev)
1687{
1688        struct hostap_interface *iface;
1689        local_info_t *local;
1690        struct hfa384x_scan_request scan_req;
1691        int ret = 0;
1692
1693        iface = netdev_priv(dev);
1694        local = iface->local;
1695
1696        memset(&scan_req, 0, sizeof(scan_req));
1697        scan_req.channel_list = cpu_to_le16(local->channel_mask &
1698                                            local->scan_channel_mask);
1699        scan_req.txrate = __constant_cpu_to_le16(HFA384X_RATES_1MBPS);
1700
1701        /* FIX:
1702         * It seems to be enough to set roaming mode for a short moment to
1703         * host-based and then setup scanrequest data and return the mode to
1704         * firmware-based.
1705         *
1706         * Master mode would need to drop to Managed mode for a short while
1707         * to make scanning work.. Or sweep through the different channels and
1708         * use passive scan based on beacons. */
1709
1710        if (!local->host_roaming)
1711                hostap_set_word(dev, HFA384X_RID_CNFROAMINGMODE,
1712                                HFA384X_ROAMING_HOST);
1713
1714        if (local->func->set_rid(dev, HFA384X_RID_SCANREQUEST, &scan_req,
1715                                 sizeof(scan_req))) {
1716                printk(KERN_DEBUG "SCANREQUEST failed\n");
1717                ret = -EINVAL;
1718        }
1719
1720        if (!local->host_roaming)
1721                hostap_set_word(dev, HFA384X_RID_CNFROAMINGMODE,
1722                                HFA384X_ROAMING_FIRMWARE);
1723
1724        return 0;
1725}
1726
1727#else /* !PRISM2_NO_STATION_MODES */
1728
1729static inline int prism2_request_hostscan(struct net_device *dev,
1730                                          u8 *ssid, u8 ssid_len)
1731{
1732        return -EOPNOTSUPP;
1733}
1734
1735
1736static inline int prism2_request_scan(struct net_device *dev)
1737{
1738        return -EOPNOTSUPP;
1739}
1740
1741#endif /* !PRISM2_NO_STATION_MODES */
1742
1743
1744static int prism2_ioctl_siwscan(struct net_device *dev,
1745                                struct iw_request_info *info,
1746                                struct iw_point *data, char *extra)
1747{
1748        struct hostap_interface *iface;
1749        local_info_t *local;
1750        int ret;
1751        u8 *ssid = NULL, ssid_len = 0;
1752        struct iw_scan_req *req = (struct iw_scan_req *) extra;
1753
1754        iface = netdev_priv(dev);
1755        local = iface->local;
1756
1757        if (data->length < sizeof(struct iw_scan_req))
1758                req = NULL;
1759
1760        if (local->iw_mode == IW_MODE_MASTER) {
1761                /* In master mode, we just return the results of our local
1762                 * tables, so we don't need to start anything...
1763                 * Jean II */
1764                data->length = 0;
1765                return 0;
1766        }
1767
1768        if (!local->dev_enabled)
1769                return -ENETDOWN;
1770
1771        if (req && data->flags & IW_SCAN_THIS_ESSID) {
1772                ssid = req->essid;
1773                ssid_len = req->essid_len;
1774
1775                if (ssid_len &&
1776                    ((local->iw_mode != IW_MODE_INFRA &&
1777                      local->iw_mode != IW_MODE_ADHOC) ||
1778                     (local->sta_fw_ver < PRISM2_FW_VER(1,3,1))))
1779                        return -EOPNOTSUPP;
1780        }
1781
1782        if (local->sta_fw_ver >= PRISM2_FW_VER(1,3,1))
1783                ret = prism2_request_hostscan(dev, ssid, ssid_len);
1784        else
1785                ret = prism2_request_scan(dev);
1786
1787        if (ret == 0)
1788                local->scan_timestamp = jiffies;
1789
1790        /* Could inquire F101, F103 or wait for SIOCGIWSCAN and read RID */
1791
1792        return ret;
1793}
1794
1795
1796#ifndef PRISM2_NO_STATION_MODES
1797static char * __prism2_translate_scan(local_info_t *local,
1798                                      struct iw_request_info *info,
1799                                      struct hfa384x_hostscan_result *scan,
1800                                      struct hostap_bss_info *bss,
1801                                      char *current_ev, char *end_buf)
1802{
1803        int i, chan;
1804        struct iw_event iwe;
1805        char *current_val;
1806        u16 capabilities;
1807        u8 *pos;
1808        u8 *ssid, *bssid;
1809        size_t ssid_len;
1810        char *buf;
1811
1812        if (bss) {
1813                ssid = bss->ssid;
1814                ssid_len = bss->ssid_len;
1815                bssid = bss->bssid;
1816        } else {
1817                ssid = scan->ssid;
1818                ssid_len = le16_to_cpu(scan->ssid_len);
1819                bssid = scan->bssid;
1820        }
1821        if (ssid_len > 32)
1822                ssid_len = 32;
1823
1824        /* First entry *MUST* be the AP MAC address */
1825        memset(&iwe, 0, sizeof(iwe));
1826        iwe.cmd = SIOCGIWAP;
1827        iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
1828        memcpy(iwe.u.ap_addr.sa_data, bssid, ETH_ALEN);
1829        current_ev = iwe_stream_add_event(info, current_ev, end_buf, &iwe,
1830                                          IW_EV_ADDR_LEN);
1831
1832        /* Other entries will be displayed in the order we give them */
1833
1834        memset(&iwe, 0, sizeof(iwe));
1835        iwe.cmd = SIOCGIWESSID;
1836        iwe.u.data.length = ssid_len;
1837        iwe.u.data.flags = 1;
1838        current_ev = iwe_stream_add_point(info, current_ev, end_buf,
1839                                          &iwe, ssid);
1840
1841        memset(&iwe, 0, sizeof(iwe));
1842        iwe.cmd = SIOCGIWMODE;
1843        if (bss) {
1844                capabilities = bss->capab_info;
1845        } else {
1846                capabilities = le16_to_cpu(scan->capability);
1847        }
1848        if (capabilities & (WLAN_CAPABILITY_ESS |
1849                            WLAN_CAPABILITY_IBSS)) {
1850                if (capabilities & WLAN_CAPABILITY_ESS)
1851                        iwe.u.mode = IW_MODE_MASTER;
1852                else
1853                        iwe.u.mode = IW_MODE_ADHOC;
1854                current_ev = iwe_stream_add_event(info, current_ev, end_buf,
1855                                                  &iwe, IW_EV_UINT_LEN);
1856        }
1857
1858        memset(&iwe, 0, sizeof(iwe));
1859        iwe.cmd = SIOCGIWFREQ;
1860        if (scan) {
1861                chan = le16_to_cpu(scan->chid);
1862        } else if (bss) {
1863                chan = bss->chan;
1864        } else {
1865                chan = 0;
1866        }
1867
1868        if (chan > 0) {
1869                iwe.u.freq.m = freq_list[chan - 1] * 100000;
1870                iwe.u.freq.e = 1;
1871                current_ev = iwe_stream_add_event(info, current_ev, end_buf,
1872                                                  &iwe, IW_EV_FREQ_LEN);
1873        }
1874
1875        if (scan) {
1876                memset(&iwe, 0, sizeof(iwe));
1877                iwe.cmd = IWEVQUAL;
1878                if (local->last_scan_type == PRISM2_HOSTSCAN) {
1879                        iwe.u.qual.level = le16_to_cpu(scan->sl);
1880                        iwe.u.qual.noise = le16_to_cpu(scan->anl);
1881                } else {
1882                        iwe.u.qual.level =
1883                                HFA384X_LEVEL_TO_dBm(le16_to_cpu(scan->sl));
1884                        iwe.u.qual.noise =
1885                                HFA384X_LEVEL_TO_dBm(le16_to_cpu(scan->anl));
1886                }
1887                iwe.u.qual.updated = IW_QUAL_LEVEL_UPDATED
1888                        | IW_QUAL_NOISE_UPDATED
1889                        | IW_QUAL_QUAL_INVALID
1890                        | IW_QUAL_DBM;
1891                current_ev = iwe_stream_add_event(info, current_ev, end_buf,
1892                                                  &iwe, IW_EV_QUAL_LEN);
1893        }
1894
1895        memset(&iwe, 0, sizeof(iwe));
1896        iwe.cmd = SIOCGIWENCODE;
1897        if (capabilities & WLAN_CAPABILITY_PRIVACY)
1898                iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
1899        else
1900                iwe.u.data.flags = IW_ENCODE_DISABLED;
1901        iwe.u.data.length = 0;
1902        current_ev = iwe_stream_add_point(info, current_ev, end_buf, &iwe, "");
1903
1904        /* TODO: add SuppRates into BSS table */
1905        if (scan) {
1906                memset(&iwe, 0, sizeof(iwe));
1907                iwe.cmd = SIOCGIWRATE;
1908                current_val = current_ev + iwe_stream_lcp_len(info);
1909                pos = scan->sup_rates;
1910                for (i = 0; i < sizeof(scan->sup_rates); i++) {
1911                        if (pos[i] == 0)
1912                                break;
1913                        /* Bit rate given in 500 kb/s units (+ 0x80) */
1914                        iwe.u.bitrate.value = ((pos[i] & 0x7f) * 500000);
1915                        current_val = iwe_stream_add_value(
1916                                info, current_ev, current_val, end_buf, &iwe,
1917                                IW_EV_PARAM_LEN);
1918                }
1919                /* Check if we added any event */
1920                if ((current_val - current_ev) > iwe_stream_lcp_len(info))
1921                        current_ev = current_val;
1922        }
1923
1924        /* TODO: add BeaconInt,resp_rate,atim into BSS table */
1925        buf = kmalloc(MAX_WPA_IE_LEN * 2 + 30, GFP_ATOMIC);
1926        if (buf && scan) {
1927                memset(&iwe, 0, sizeof(iwe));
1928                iwe.cmd = IWEVCUSTOM;
1929                sprintf(buf, "bcn_int=%d", le16_to_cpu(scan->beacon_interval));
1930                iwe.u.data.length = strlen(buf);
1931                current_ev = iwe_stream_add_point(info, current_ev, end_buf,
1932                                                  &iwe, buf);
1933
1934                memset(&iwe, 0, sizeof(iwe));
1935                iwe.cmd = IWEVCUSTOM;
1936                sprintf(buf, "resp_rate=%d", le16_to_cpu(scan->rate));
1937                iwe.u.data.length = strlen(buf);
1938                current_ev = iwe_stream_add_point(info, current_ev, end_buf,
1939                                                  &iwe, buf);
1940
1941                if (local->last_scan_type == PRISM2_HOSTSCAN &&
1942                    (capabilities & WLAN_CAPABILITY_IBSS)) {
1943                        memset(&iwe, 0, sizeof(iwe));
1944                        iwe.cmd = IWEVCUSTOM;
1945                        sprintf(buf, "atim=%d", le16_to_cpu(scan->atim));
1946                        iwe.u.data.length = strlen(buf);
1947                        current_ev = iwe_stream_add_point(info, current_ev,
1948                                                          end_buf, &iwe, buf);
1949                }
1950        }
1951        kfree(buf);
1952
1953        if (bss && bss->wpa_ie_len > 0 && bss->wpa_ie_len <= MAX_WPA_IE_LEN) {
1954                memset(&iwe, 0, sizeof(iwe));
1955                iwe.cmd = IWEVGENIE;
1956                iwe.u.data.length = bss->wpa_ie_len;
1957                current_ev = iwe_stream_add_point(info, current_ev, end_buf,
1958                                                  &iwe, bss->wpa_ie);
1959        }
1960
1961        if (bss && bss->rsn_ie_len > 0 && bss->rsn_ie_len <= MAX_WPA_IE_LEN) {
1962                memset(&iwe, 0, sizeof(iwe));
1963                iwe.cmd = IWEVGENIE;
1964                iwe.u.data.length = bss->rsn_ie_len;
1965                current_ev = iwe_stream_add_point(info, current_ev, end_buf,
1966                                                  &iwe, bss->rsn_ie);
1967        }
1968
1969        return current_ev;
1970}
1971
1972
1973/* Translate scan data returned from the card to a card independant
1974 * format that the Wireless Tools will understand - Jean II */
1975static inline int prism2_translate_scan(local_info_t *local,
1976                                        struct iw_request_info *info,
1977                                        char *buffer, int buflen)
1978{
1979        struct hfa384x_hostscan_result *scan;
1980        int entry, hostscan;
1981        char *current_ev = buffer;
1982        char *end_buf = buffer + buflen;
1983        struct list_head *ptr;
1984
1985        spin_lock_bh(&local->lock);
1986
1987        list_for_each(ptr, &local->bss_list) {
1988                struct hostap_bss_info *bss;
1989                bss = list_entry(ptr, struct hostap_bss_info, list);
1990                bss->included = 0;
1991        }
1992
1993        hostscan = local->last_scan_type == PRISM2_HOSTSCAN;
1994        for (entry = 0; entry < local->last_scan_results_count; entry++) {
1995                int found = 0;
1996                scan = &local->last_scan_results[entry];
1997
1998                /* Report every SSID if the AP is using multiple SSIDs. If no
1999                 * BSS record is found (e.g., when WPA mode is disabled),
2000                 * report the AP once. */
2001                list_for_each(ptr, &local->bss_list) {
2002                        struct hostap_bss_info *bss;
2003                        bss = list_entry(ptr, struct hostap_bss_info, list);
2004                        if (memcmp(bss->bssid, scan->bssid, ETH_ALEN) == 0) {
2005                                bss->included = 1;
2006                                current_ev = __prism2_translate_scan(
2007                                        local, info, scan, bss, current_ev,
2008                                        end_buf);
2009                                found++;
2010                        }
2011                }
2012                if (!found) {
2013                        current_ev = __prism2_translate_scan(
2014                                local, info, scan, NULL, current_ev, end_buf);
2015                }
2016                /* Check if there is space for one more entry */
2017                if ((end_buf - current_ev) <= IW_EV_ADDR_LEN) {
2018                        /* Ask user space to try again with a bigger buffer */
2019                        spin_unlock_bh(&local->lock);
2020                        return -E2BIG;
2021                }
2022        }
2023
2024        /* Prism2 firmware has limits (32 at least in some versions) for number
2025         * of BSSes in scan results. Extend this limit by using local BSS list.
2026         */
2027        list_for_each(ptr, &local->bss_list) {
2028                struct hostap_bss_info *bss;
2029                bss = list_entry(ptr, struct hostap_bss_info, list);
2030                if (bss->included)
2031                        continue;
2032                current_ev = __prism2_translate_scan(local, info, NULL, bss,
2033                                                     current_ev, end_buf);
2034                /* Check if there is space for one more entry */
2035                if ((end_buf - current_ev) <= IW_EV_ADDR_LEN) {
2036                        /* Ask user space to try again with a bigger buffer */
2037                        spin_unlock_bh(&local->lock);
2038                        return -E2BIG;
2039                }
2040        }
2041
2042        spin_unlock_bh(&local->lock);
2043
2044        return current_ev - buffer;
2045}
2046#endif /* PRISM2_NO_STATION_MODES */
2047
2048
2049static inline int prism2_ioctl_giwscan_sta(struct net_device *dev,
2050                                           struct iw_request_info *info,
2051                                           struct iw_point *data, char *extra)
2052{
2053#ifdef PRISM2_NO_STATION_MODES
2054        return -EOPNOTSUPP;
2055#else /* PRISM2_NO_STATION_MODES */
2056        struct hostap_interface *iface;
2057        local_info_t *local;
2058        int res;
2059
2060        iface = netdev_priv(dev);
2061        local = iface->local;
2062
2063        /* Wait until the scan is finished. We can probably do better
2064         * than that - Jean II */
2065        if (local->scan_timestamp &&
2066            time_before(jiffies, local->scan_timestamp + 3 * HZ)) {
2067                /* Important note : we don't want to block the caller
2068                 * until results are ready for various reasons.
2069                 * First, managing wait queues is complex and racy
2070                 * (there may be multiple simultaneous callers).
2071                 * Second, we grab some rtnetlink lock before comming
2072                 * here (in dev_ioctl()).
2073                 * Third, the caller can wait on the Wireless Event
2074                 * - Jean II */
2075                return -EAGAIN;
2076        }
2077        local->scan_timestamp = 0;
2078
2079        res = prism2_translate_scan(local, info, extra, data->length);
2080
2081        if (res >= 0) {
2082                data->length = res;
2083                return 0;
2084        } else {
2085                data->length = 0;
2086                return res;
2087        }
2088#endif /* PRISM2_NO_STATION_MODES */
2089}
2090
2091
2092static int prism2_ioctl_giwscan(struct net_device *dev,
2093                                struct iw_request_info *info,
2094                                struct iw_point *data, char *extra)
2095{
2096        struct hostap_interface *iface;
2097        local_info_t *local;
2098        int res;
2099
2100        iface = netdev_priv(dev);
2101        local = iface->local;
2102
2103        if (local->iw_mode == IW_MODE_MASTER) {
2104                /* In MASTER mode, it doesn't make sense to go around
2105                 * scanning the frequencies and make the stations we serve
2106                 * wait when what the user is really interested about is the
2107                 * list of stations and access points we are talking to.
2108                 * So, just extract results from our cache...
2109                 * Jean II */
2110
2111                /* Translate to WE format */
2112                res = prism2_ap_translate_scan(dev, info, extra);
2113                if (res >= 0) {
2114                        printk(KERN_DEBUG "Scan result translation succeeded "
2115                               "(length=%d)\n", res);
2116                        data->length = res;
2117                        return 0;
2118                } else {
2119                        printk(KERN_DEBUG
2120                               "Scan result translation failed (res=%d)\n",
2121                               res);
2122                        data->length = 0;
2123                        return res;
2124                }
2125        } else {
2126                /* Station mode */
2127                return prism2_ioctl_giwscan_sta(dev, info, data, extra);
2128        }
2129}
2130
2131
2132static const struct iw_priv_args prism2_priv[] = {
2133        { PRISM2_IOCTL_MONITOR,
2134          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "monitor" },
2135        { PRISM2_IOCTL_READMIF,
2136          IW_PRIV_TYPE_BYTE | IW_PRIV_SIZE_FIXED | 1,
2137          IW_PRIV_TYPE_BYTE | IW_PRIV_SIZE_FIXED | 1, "readmif" },
2138        { PRISM2_IOCTL_WRITEMIF,
2139          IW_PRIV_TYPE_BYTE | IW_PRIV_SIZE_FIXED | 2, 0, "writemif" },
2140        { PRISM2_IOCTL_RESET,
2141          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "reset" },
2142        { PRISM2_IOCTL_INQUIRE,
2143          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "inquire" },
2144        { PRISM2_IOCTL_SET_RID_WORD,
2145          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "set_rid_word" },
2146        { PRISM2_IOCTL_MACCMD,
2147          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "maccmd" },
2148        { PRISM2_IOCTL_WDS_ADD,
2149          IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0, "wds_add" },
2150        { PRISM2_IOCTL_WDS_DEL,
2151          IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0, "wds_del" },
2152        { PRISM2_IOCTL_ADDMAC,
2153          IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0, "addmac" },
2154        { PRISM2_IOCTL_DELMAC,
2155          IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0, "delmac" },
2156        { PRISM2_IOCTL_KICKMAC,
2157          IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0, "kickmac" },
2158        /* --- raw access to sub-ioctls --- */
2159        { PRISM2_IOCTL_PRISM2_PARAM,
2160          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "prism2_param" },
2161        { PRISM2_IOCTL_GET_PRISM2_PARAM,
2162          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
2163          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getprism2_param" },
2164        /* --- sub-ioctls handlers --- */
2165        { PRISM2_IOCTL_PRISM2_PARAM,
2166          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "" },
2167        { PRISM2_IOCTL_GET_PRISM2_PARAM,
2168          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "" },
2169        /* --- sub-ioctls definitions --- */
2170        { PRISM2_PARAM_TXRATECTRL,
2171          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "txratectrl" },
2172        { PRISM2_PARAM_TXRATECTRL,
2173          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gettxratectrl" },
2174        { PRISM2_PARAM_BEACON_INT,
2175          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "beacon_int" },
2176        { PRISM2_PARAM_BEACON_INT,
2177          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getbeacon_int" },
2178#ifndef PRISM2_NO_STATION_MODES
2179        { PRISM2_PARAM_PSEUDO_IBSS,
2180          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "pseudo_ibss" },
2181        { PRISM2_PARAM_PSEUDO_IBSS,
2182          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getpseudo_ibss" },
2183#endif /* PRISM2_NO_STATION_MODES */
2184        { PRISM2_PARAM_ALC,
2185          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "alc" },
2186        { PRISM2_PARAM_ALC,
2187          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getalc" },
2188        { PRISM2_PARAM_DUMP,
2189          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "dump" },
2190        { PRISM2_PARAM_DUMP,
2191          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getdump" },
2192        { PRISM2_PARAM_OTHER_AP_POLICY,
2193          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "other_ap_policy" },
2194        { PRISM2_PARAM_OTHER_AP_POLICY,
2195          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getother_ap_pol" },
2196        { PRISM2_PARAM_AP_MAX_INACTIVITY,
2197          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "max_inactivity" },
2198        { PRISM2_PARAM_AP_MAX_INACTIVITY,
2199          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getmax_inactivi" },
2200        { PRISM2_PARAM_AP_BRIDGE_PACKETS,
2201          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "bridge_packets" },
2202        { PRISM2_PARAM_AP_BRIDGE_PACKETS,
2203          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getbridge_packe" },
2204        { PRISM2_PARAM_DTIM_PERIOD,
2205          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "dtim_period" },
2206        { PRISM2_PARAM_DTIM_PERIOD,
2207          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getdtim_period" },
2208        { PRISM2_PARAM_AP_NULLFUNC_ACK,
2209          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "nullfunc_ack" },
2210        { PRISM2_PARAM_AP_NULLFUNC_ACK,
2211          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getnullfunc_ack" },
2212        { PRISM2_PARAM_MAX_WDS,
2213          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "max_wds" },
2214        { PRISM2_PARAM_MAX_WDS,
2215          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getmax_wds" },
2216        { PRISM2_PARAM_AP_AUTOM_AP_WDS,
2217          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "autom_ap_wds" },
2218        { PRISM2_PARAM_AP_AUTOM_AP_WDS,
2219          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getautom_ap_wds" },
2220        { PRISM2_PARAM_AP_AUTH_ALGS,
2221          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "ap_auth_algs" },
2222        { PRISM2_PARAM_AP_AUTH_ALGS,
2223          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getap_auth_algs" },
2224        { PRISM2_PARAM_MONITOR_ALLOW_FCSERR,
2225          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "allow_fcserr" },
2226        { PRISM2_PARAM_MONITOR_ALLOW_FCSERR,
2227          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getallow_fcserr" },
2228        { PRISM2_PARAM_HOST_ENCRYPT,
2229          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "host_encrypt" },
2230        { PRISM2_PARAM_HOST_ENCRYPT,
2231          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethost_encrypt" },
2232        { PRISM2_PARAM_HOST_DECRYPT,
2233          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "host_decrypt" },
2234        { PRISM2_PARAM_HOST_DECRYPT,
2235          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethost_decrypt" },
2236#ifndef PRISM2_NO_STATION_MODES
2237        { PRISM2_PARAM_HOST_ROAMING,
2238          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "host_roaming" },
2239        { PRISM2_PARAM_HOST_ROAMING,
2240          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethost_roaming" },
2241#endif /* PRISM2_NO_STATION_MODES */
2242        { PRISM2_PARAM_BCRX_STA_KEY,
2243          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "bcrx_sta_key" },
2244        { PRISM2_PARAM_BCRX_STA_KEY,
2245          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getbcrx_sta_key" },
2246        { PRISM2_PARAM_IEEE_802_1X,
2247          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "ieee_802_1x" },
2248        { PRISM2_PARAM_IEEE_802_1X,
2249          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getieee_802_1x" },
2250        { PRISM2_PARAM_ANTSEL_TX,
2251          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "antsel_tx" },
2252        { PRISM2_PARAM_ANTSEL_TX,
2253          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getantsel_tx" },
2254        { PRISM2_PARAM_ANTSEL_RX,
2255          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "antsel_rx" },
2256        { PRISM2_PARAM_ANTSEL_RX,
2257          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getantsel_rx" },
2258        { PRISM2_PARAM_MONITOR_TYPE,
2259          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "monitor_type" },
2260        { PRISM2_PARAM_MONITOR_TYPE,
2261          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getmonitor_type" },
2262        { PRISM2_PARAM_WDS_TYPE,
2263          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wds_type" },
2264        { PRISM2_PARAM_WDS_TYPE,
2265          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getwds_type" },
2266        { PRISM2_PARAM_HOSTSCAN,
2267          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "hostscan" },
2268        { PRISM2_PARAM_HOSTSCAN,
2269          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethostscan" },
2270        { PRISM2_PARAM_AP_SCAN,
2271          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "ap_scan" },
2272        { PRISM2_PARAM_AP_SCAN,
2273          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getap_scan" },
2274        { PRISM2_PARAM_ENH_SEC,
2275          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "enh_sec" },
2276        { PRISM2_PARAM_ENH_SEC,
2277          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getenh_sec" },
2278#ifdef PRISM2_IO_DEBUG
2279        { PRISM2_PARAM_IO_DEBUG,
2280          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "io_debug" },
2281        { PRISM2_PARAM_IO_DEBUG,
2282          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getio_debug" },
2283#endif /* PRISM2_IO_DEBUG */
2284        { PRISM2_PARAM_BASIC_RATES,
2285          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "basic_rates" },
2286        { PRISM2_PARAM_BASIC_RATES,
2287          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getbasic_rates" },
2288        { PRISM2_PARAM_OPER_RATES,
2289          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "oper_rates" },
2290        { PRISM2_PARAM_OPER_RATES,
2291          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getoper_rates" },
2292        { PRISM2_PARAM_HOSTAPD,
2293          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "hostapd" },
2294        { PRISM2_PARAM_HOSTAPD,
2295          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethostapd" },
2296        { PRISM2_PARAM_HOSTAPD_STA,
2297          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "hostapd_sta" },
2298        { PRISM2_PARAM_HOSTAPD_STA,
2299          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethostapd_sta" },
2300        { PRISM2_PARAM_WPA,
2301          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wpa" },
2302        { PRISM2_PARAM_WPA,
2303          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getwpa" },
2304        { PRISM2_PARAM_PRIVACY_INVOKED,
2305          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "privacy_invoked" },
2306        { PRISM2_PARAM_PRIVACY_INVOKED,
2307          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getprivacy_invo" },
2308        { PRISM2_PARAM_TKIP_COUNTERMEASURES,
2309          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "tkip_countermea" },
2310        { PRISM2_PARAM_TKIP_COUNTERMEASURES,
2311          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gettkip_counter" },
2312        { PRISM2_PARAM_DROP_UNENCRYPTED,
2313          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "drop_unencrypte" },
2314        { PRISM2_PARAM_DROP_UNENCRYPTED,
2315          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getdrop_unencry" },
2316        { PRISM2_PARAM_SCAN_CHANNEL_MASK,
2317          IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "scan_channels" },
2318        { PRISM2_PARAM_SCAN_CHANNEL_MASK,
2319          0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getscan_channel" },
2320};
2321
2322
2323static int prism2_ioctl_priv_inquire(struct net_device *dev, int *i)
2324{
2325        struct hostap_interface *iface;
2326        local_info_t *local;
2327
2328        iface = netdev_priv(dev);
2329        local = iface->local;
2330
2331        if (local->func->cmd(dev, HFA384X_CMDCODE_INQUIRE, *i, NULL, NULL))
2332                return -EOPNOTSUPP;
2333
2334        return 0;
2335}
2336
2337
2338static int prism2_ioctl_priv_prism2_param(struct net_device *dev,
2339                                          struct iw_request_info *info,
2340                                          void *wrqu, char *extra)
2341{
2342        struct hostap_interface *iface;
2343        local_info_t *local;
2344        int *i = (int *) extra;
2345        int param = *i;
2346        int value = *(i + 1);
2347        int ret = 0;
2348        u16 val;
2349
2350        iface = netdev_priv(dev);
2351        local = iface->local;
2352
2353        switch (param) {
2354        case PRISM2_PARAM_TXRATECTRL:
2355                local->fw_tx_rate_control = value;
2356                break;
2357
2358        case PRISM2_PARAM_BEACON_INT:
2359                if (hostap_set_word(dev, HFA384X_RID_CNFBEACONINT, value) ||
2360                    local->func->reset_port(dev))
2361                        ret = -EINVAL;
2362                else
2363                        local->beacon_int = value;
2364                break;
2365
2366#ifndef PRISM2_NO_STATION_MODES
2367        case PRISM2_PARAM_PSEUDO_IBSS:
2368                if (value == local->pseudo_adhoc)
2369                        break;
2370
2371                if (value != 0 && value != 1) {
2372                        ret = -EINVAL;
2373                        break;
2374                }
2375
2376                printk(KERN_DEBUG "prism2: %s: pseudo IBSS change %d -> %d\n",
2377                       dev->name, local->pseudo_adhoc, value);
2378                local->pseudo_adhoc = value;
2379                if (local->iw_mode != IW_MODE_ADHOC)
2380                        break;
2381
2382                if (hostap_set_word(dev, HFA384X_RID_CNFPORTTYPE,
2383                                    hostap_get_porttype(local))) {
2384                        ret = -EOPNOTSUPP;
2385                        break;
2386                }
2387
2388                if (local->func->reset_port(dev))
2389                        ret = -EINVAL;
2390                break;
2391#endif /* PRISM2_NO_STATION_MODES */
2392
2393        case PRISM2_PARAM_ALC:
2394                printk(KERN_DEBUG "%s: %s ALC\n", dev->name,
2395                       value == 0 ? "Disabling" : "Enabling");
2396                val = HFA384X_TEST_CFG_BIT_ALC;
2397                local->func->cmd(dev, HFA384X_CMDCODE_TEST |
2398                                 (HFA384X_TEST_CFG_BITS << 8),
2399                                 value == 0 ? 0 : 1, &val, NULL);
2400                break;
2401
2402        case PRISM2_PARAM_DUMP:
2403                local->frame_dump = value;
2404                break;
2405
2406        case PRISM2_PARAM_OTHER_AP_POLICY:
2407                if (value < 0 || value > 3) {
2408                        ret = -EINVAL;
2409                        break;
2410                }
2411                if (local->ap != NULL)
2412                        local->ap->ap_policy = value;
2413                break;
2414
2415        case PRISM2_PARAM_AP_MAX_INACTIVITY:
2416                if (value < 0 || value > 7 * 24 * 60 * 60) {
2417                        ret = -EINVAL;
2418                        break;
2419                }
2420                if (local->ap != NULL)
2421                        local->ap->max_inactivity = value * HZ;
2422                break;
2423
2424        case PRISM2_PARAM_AP_BRIDGE_PACKETS:
2425                if (local->ap != NULL)
2426                        local->ap->bridge_packets = value;
2427                break;
2428
2429        case PRISM2_PARAM_DTIM_PERIOD:
2430                if (value < 0 || value > 65535) {
2431                        ret = -EINVAL;
2432                        break;
2433                }
2434                if (hostap_set_word(dev, HFA384X_RID_CNFOWNDTIMPERIOD, value)
2435                    || local->func->reset_port(dev))
2436                        ret = -EINVAL;
2437                else
2438                        local->dtim_period = value;
2439                break;
2440
2441        case PRISM2_PARAM_AP_NULLFUNC_ACK:
2442                if (local->ap != NULL)
2443                        local->ap->nullfunc_ack = value;
2444                break;
2445
2446        case PRISM2_PARAM_MAX_WDS:
2447                local->wds_max_connections = value;
2448                break;
2449
2450        case PRISM2_PARAM_AP_AUTOM_AP_WDS:
2451                if (local->ap != NULL) {
2452                        if (!local->ap->autom_ap_wds && value) {
2453                                /* add WDS link to all APs in STA table */
2454                                hostap_add_wds_links(local);
2455                        }
2456                        local->ap->autom_ap_wds = value;
2457                }
2458                break;
2459
2460        case PRISM2_PARAM_AP_AUTH_ALGS:
2461                local->auth_algs = value;
2462                if (hostap_set_auth_algs(local))
2463                        ret = -EINVAL;
2464                break;
2465
2466        case PRISM2_PARAM_MONITOR_ALLOW_FCSERR:
2467                local->monitor_allow_fcserr = value;
2468                break;
2469
2470        case PRISM2_PARAM_HOST_ENCRYPT:
2471                local->host_encrypt = value;
2472                if (hostap_set_encryption(local) ||
2473                    local->func->reset_port(dev))
2474                        ret = -EINVAL;
2475                break;
2476
2477        case PRISM2_PARAM_HOST_DECRYPT:
2478                local->host_decrypt = value;
2479                if (hostap_set_encryption(local) ||
2480                    local->func->reset_port(dev))
2481                        ret = -EINVAL;
2482                break;
2483
2484#ifndef PRISM2_NO_STATION_MODES
2485        case PRISM2_PARAM_HOST_ROAMING:
2486                if (value < 0 || value > 2) {
2487                        ret = -EINVAL;
2488                        break;
2489                }
2490                local->host_roaming = value;
2491                if (hostap_set_roaming(local) || local->func->reset_port(dev))
2492                        ret = -EINVAL;
2493                break;
2494#endif /* PRISM2_NO_STATION_MODES */
2495
2496        case PRISM2_PARAM_BCRX_STA_KEY:
2497                local->bcrx_sta_key = value;
2498                break;
2499
2500        case PRISM2_PARAM_IEEE_802_1X:
2501                local->ieee_802_1x = value;
2502                break;
2503
2504        case PRISM2_PARAM_ANTSEL_TX:
2505                if (value < 0 || value > HOSTAP_ANTSEL_HIGH) {
2506                        ret = -EINVAL;
2507                        break;
2508                }
2509                local->antsel_tx = value;
2510                hostap_set_antsel(local);
2511                break;
2512
2513        case PRISM2_PARAM_ANTSEL_RX:
2514                if (value < 0 || value > HOSTAP_ANTSEL_HIGH) {
2515                        ret = -EINVAL;
2516                        break;
2517                }
2518                local->antsel_rx = value;
2519                hostap_set_antsel(local);
2520                break;
2521
2522        case PRISM2_PARAM_MONITOR_TYPE:
2523                if (value != PRISM2_MONITOR_80211 &&
2524                    value != PRISM2_MONITOR_CAPHDR &&
2525                    value != PRISM2_MONITOR_PRISM &&
2526                    value != PRISM2_MONITOR_RADIOTAP) {
2527                        ret = -EINVAL;
2528                        break;
2529                }
2530                local->monitor_type = value;
2531                if (local->iw_mode == IW_MODE_MONITOR)
2532                        hostap_monitor_set_type(local);
2533                break;
2534
2535        case PRISM2_PARAM_WDS_TYPE:
2536                local->wds_type = value;
2537                break;
2538
2539        case PRISM2_PARAM_HOSTSCAN:
2540        {
2541                struct hfa384x_hostscan_request scan_req;
2542                u16 rate;
2543
2544                memset(&scan_req, 0, sizeof(scan_req));
2545                scan_req.channel_list = __constant_cpu_to_le16(0x3fff);
2546                switch (value) {
2547                case 1: rate = HFA384X_RATES_1MBPS; break;
2548                case 2: rate = HFA384X_RATES_2MBPS; break;
2549                case 3: rate = HFA384X_RATES_5MBPS; break;
2550                case 4: rate = HFA384X_RATES_11MBPS; break;
2551                default: rate = HFA384X_RATES_1MBPS; break;
2552                }
2553                scan_req.txrate = cpu_to_le16(rate);
2554                /* leave SSID empty to accept all SSIDs */
2555
2556                if (local->iw_mode == IW_MODE_MASTER) {
2557                        if (hostap_set_word(dev, HFA384X_RID_CNFPORTTYPE,
2558                                            HFA384X_PORTTYPE_BSS) ||
2559                            local->func->reset_port(dev))
2560                                printk(KERN_DEBUG "Leaving Host AP mode "
2561                                       "for HostScan failed\n");
2562                }
2563
2564                if (local->func->set_rid(dev, HFA384X_RID_HOSTSCAN, &scan_req,
2565                                         sizeof(scan_req))) {
2566                        printk(KERN_DEBUG "HOSTSCAN failed\n");
2567                        ret = -EINVAL;
2568                }
2569                if (local->iw_mode == IW_MODE_MASTER) {
2570                        wait_queue_t __wait;
2571                        init_waitqueue_entry(&__wait, current);
2572                        add_wait_queue(&local->hostscan_wq, &__wait);
2573                        set_current_state(TASK_INTERRUPTIBLE);
2574                        schedule_timeout(HZ);
2575                        if (signal_pending(current))
2576                                ret = -EINTR;
2577                        set_current_state(TASK_RUNNING);
2578                        remove_wait_queue(&local->hostscan_wq, &__wait);
2579
2580                        if (hostap_set_word(dev, HFA384X_RID_CNFPORTTYPE,
2581                                            HFA384X_PORTTYPE_HOSTAP) ||
2582                            local->func->reset_port(dev))
2583                                printk(KERN_DEBUG "Returning to Host AP mode "
2584                                       "after HostScan failed\n");
2585                }
2586                break;
2587        }
2588
2589        case PRISM2_PARAM_AP_SCAN:
2590                local->passive_scan_interval = value;
2591                if (timer_pending(&local->passive_scan_timer))
2592                        del_timer(&local->passive_scan_timer);
2593                if (value > 0) {
2594                        local->passive_scan_timer.expires = jiffies +
2595                                local->passive_scan_interval * HZ;
2596                        add_timer(&local->passive_scan_timer);
2597                }
2598                break;
2599
2600        case PRISM2_PARAM_ENH_SEC:
2601                if (value < 0 || value > 3) {
2602                        ret = -EINVAL;
2603                        break;
2604                }
2605                local->enh_sec = value;
2606                if (hostap_set_word(dev, HFA384X_RID_CNFENHSECURITY,
2607                                    local->enh_sec) ||
2608                    local->func->reset_port(dev)) {
2609                        printk(KERN_INFO "%s: cnfEnhSecurity requires STA f/w "
2610                               "1.6.3 or newer\n", dev->name);
2611                        ret = -EOPNOTSUPP;
2612                }
2613                break;
2614
2615#ifdef PRISM2_IO_DEBUG
2616        case PRISM2_PARAM_IO_DEBUG:
2617                local->io_debug_enabled = value;
2618                break;
2619#endif /* PRISM2_IO_DEBUG */
2620
2621        case PRISM2_PARAM_BASIC_RATES:
2622                if ((value & local->tx_rate_control) != value || value == 0) {
2623                        printk(KERN_INFO "%s: invalid basic rate set - basic "
2624                               "rates must be in supported rate set\n",
2625                               dev->name);
2626                        ret = -EINVAL;
2627                        break;
2628                }
2629                local->basic_rates = value;
2630                if (hostap_set_word(dev, HFA384X_RID_CNFBASICRATES,
2631                                    local->basic_rates) ||
2632                    local->func->reset_port(dev))
2633                        ret = -EINVAL;
2634                break;
2635
2636        case PRISM2_PARAM_OPER_RATES:
2637                local->tx_rate_control = value;
2638                if (hostap_set_rate(dev))
2639                        ret = -EINVAL;
2640                break;
2641
2642        case PRISM2_PARAM_HOSTAPD:
2643                ret = hostap_set_hostapd(local, value, 1);
2644                break;
2645
2646        case PRISM2_PARAM_HOSTAPD_STA:
2647                ret = hostap_set_hostapd_sta(local, value, 1);
2648                break;
2649
2650        case PRISM2_PARAM_WPA:
2651                local->wpa = value;
2652                if (local->sta_fw_ver < PRISM2_FW_VER(1,7,0))
2653                        ret = -EOPNOTSUPP;
2654                else if (hostap_set_word(dev, HFA384X_RID_SSNHANDLINGMODE,
2655                                         value ? 1 : 0))
2656                        ret = -EINVAL;
2657                break;
2658
2659        case PRISM2_PARAM_PRIVACY_INVOKED:
2660                local->privacy_invoked = value;
2661                if (hostap_set_encryption(local) ||
2662                    local->func->reset_port(dev))
2663                        ret = -EINVAL;
2664                break;
2665
2666        case PRISM2_PARAM_TKIP_COUNTERMEASURES:
2667                local->tkip_countermeasures = value;
2668                break;
2669
2670        case PRISM2_PARAM_DROP_UNENCRYPTED:
2671                local->drop_unencrypted = value;
2672                break;
2673
2674        case PRISM2_PARAM_SCAN_CHANNEL_MASK:
2675                local->scan_channel_mask = value;
2676                break;
2677
2678        default:
2679                printk(KERN_DEBUG "%s: prism2_param: unknown param %d\n",
2680                       dev->name, param);
2681                ret = -EOPNOTSUPP;
2682                break;
2683        }
2684
2685        return ret;
2686}
2687
2688
2689static int prism2_ioctl_priv_get_prism2_param(struct net_device *dev,
2690                                              struct iw_request_info *info,
2691                                              void *wrqu, char *extra)
2692{
2693        struct hostap_interface *iface;
2694        local_info_t *local;
2695        int *param = (int *) extra;
2696        int ret = 0;
2697
2698        iface = netdev_priv(dev);
2699        local = iface->local;
2700
2701        switch (*param) {
2702        case PRISM2_PARAM_TXRATECTRL:
2703                *param = local->fw_tx_rate_control;
2704                break;
2705
2706        case PRISM2_PARAM_BEACON_INT:
2707                *param = local->beacon_int;
2708                break;
2709
2710        case PRISM2_PARAM_PSEUDO_IBSS:
2711                *param = local->pseudo_adhoc;
2712                break;
2713
2714        case PRISM2_PARAM_ALC:
2715                ret = -EOPNOTSUPP; /* FIX */
2716                break;
2717
2718        case PRISM2_PARAM_DUMP:
2719                *param = local->frame_dump;
2720                break;
2721
2722        case PRISM2_PARAM_OTHER_AP_POLICY:
2723                if (local->ap != NULL)
2724                        *param = local->ap->ap_policy;
2725                else
2726                        ret = -EOPNOTSUPP;
2727                break;
2728
2729        case PRISM2_PARAM_AP_MAX_INACTIVITY:
2730                if (local->ap != NULL)
2731                        *param = local->ap->max_inactivity / HZ;
2732                else
2733                        ret = -EOPNOTSUPP;
2734                break;
2735
2736        case PRISM2_PARAM_AP_BRIDGE_PACKETS:
2737                if (local->ap != NULL)
2738                        *param = local->ap->bridge_packets;
2739                else
2740                        ret = -EOPNOTSUPP;
2741                break;
2742
2743        case PRISM2_PARAM_DTIM_PERIOD:
2744                *param = local->dtim_period;
2745                break;
2746
2747        case PRISM2_PARAM_AP_NULLFUNC_ACK:
2748                if (local->ap != NULL)
2749                        *param = local->ap->nullfunc_ack;
2750                else
2751                        ret = -EOPNOTSUPP;
2752                break;
2753
2754        case PRISM2_PARAM_MAX_WDS:
2755                *param = local->wds_max_connections;
2756                break;
2757
2758        case PRISM2_PARAM_AP_AUTOM_AP_WDS:
2759                if (local->ap != NULL)
2760                        *param = local->ap->autom_ap_wds;
2761                else
2762                        ret = -EOPNOTSUPP;
2763                break;
2764
2765        case PRISM2_PARAM_AP_AUTH_ALGS:
2766                *param = local->auth_algs;
2767                break;
2768
2769        case PRISM2_PARAM_MONITOR_ALLOW_FCSERR:
2770                *param = local->monitor_allow_fcserr;
2771                break;
2772
2773        case PRISM2_PARAM_HOST_ENCRYPT:
2774                *param = local->host_encrypt;
2775                break;
2776
2777        case PRISM2_PARAM_HOST_DECRYPT:
2778                *param = local->host_decrypt;
2779                break;
2780
2781        case PRISM2_PARAM_HOST_ROAMING:
2782                *param = local->host_roaming;
2783                break;
2784
2785        case PRISM2_PARAM_BCRX_STA_KEY:
2786                *param = local->bcrx_sta_key;
2787                break;
2788
2789        case PRISM2_PARAM_IEEE_802_1X:
2790                *param = local->ieee_802_1x;
2791                break;
2792
2793        case PRISM2_PARAM_ANTSEL_TX:
2794                *param = local->antsel_tx;
2795                break;
2796
2797        case PRISM2_PARAM_ANTSEL_RX:
2798                *param = local->antsel_rx;
2799                break;
2800
2801        case PRISM2_PARAM_MONITOR_TYPE:
2802                *param = local->monitor_type;
2803                break;
2804
2805        case PRISM2_PARAM_WDS_TYPE:
2806                *param = local->wds_type;
2807                break;
2808
2809        case PRISM2_PARAM_HOSTSCAN:
2810                ret = -EOPNOTSUPP;
2811                break;
2812
2813        case PRISM2_PARAM_AP_SCAN:
2814                *param = local->passive_scan_interval;
2815                break;
2816
2817        case PRISM2_PARAM_ENH_SEC:
2818                *param = local->enh_sec;
2819                break;
2820
2821#ifdef PRISM2_IO_DEBUG
2822        case PRISM2_PARAM_IO_DEBUG:
2823                *param = local->io_debug_enabled;
2824                break;
2825#endif /* PRISM2_IO_DEBUG */
2826
2827        case PRISM2_PARAM_BASIC_RATES:
2828                *param = local->basic_rates;
2829                break;
2830
2831        case PRISM2_PARAM_OPER_RATES:
2832                *param = local->tx_rate_control;
2833                break;
2834
2835        case PRISM2_PARAM_HOSTAPD:
2836                *param = local->hostapd;
2837                break;
2838
2839        case PRISM2_PARAM_HOSTAPD_STA:
2840                *param = local->hostapd_sta;
2841                break;
2842
2843        case PRISM2_PARAM_WPA:
2844                if (local->sta_fw_ver < PRISM2_FW_VER(1,7,0))
2845                        ret = -EOPNOTSUPP;
2846                *param = local->wpa;
2847                break;
2848
2849        case PRISM2_PARAM_PRIVACY_INVOKED:
2850                *param = local->privacy_invoked;
2851                break;
2852
2853        case PRISM2_PARAM_TKIP_COUNTERMEASURES:
2854                *param = local->tkip_countermeasures;
2855                break;
2856
2857        case PRISM2_PARAM_DROP_UNENCRYPTED:
2858                *param = local->drop_unencrypted;
2859                break;
2860
2861        case PRISM2_PARAM_SCAN_CHANNEL_MASK:
2862                *param = local->scan_channel_mask;
2863                break;
2864
2865        default:
2866                printk(KERN_DEBUG "%s: get_prism2_param: unknown param %d\n",
2867                       dev->name, *param);
2868                ret = -EOPNOTSUPP;
2869                break;
2870        }
2871
2872        return ret;
2873}
2874
2875
2876static int prism2_ioctl_priv_readmif(struct net_device *dev,
2877                                     struct iw_request_info *info,
2878                                     void *wrqu, char *extra)
2879{
2880        struct hostap_interface *iface;
2881        local_info_t *local;
2882        u16 resp0;
2883
2884        iface = netdev_priv(dev);
2885        local = iface->local;
2886
2887        if (local->func->cmd(dev, HFA384X_CMDCODE_READMIF, *extra, NULL,
2888                             &resp0))
2889                return -EOPNOTSUPP;
2890        else
2891                *extra = resp0;
2892
2893        return 0;
2894}
2895
2896
2897static int prism2_ioctl_priv_writemif(struct net_device *dev,
2898                                      struct iw_request_info *info,
2899                                      void *wrqu, char *extra)
2900{
2901        struct hostap_interface *iface;
2902        local_info_t *local;
2903        u16 cr, val;
2904
2905        iface = netdev_priv(dev);
2906        local = iface->local;
2907
2908        cr = *extra;
2909        val = *(extra + 1);
2910        if (local->func->cmd(dev, HFA384X_CMDCODE_WRITEMIF, cr, &val, NULL))
2911                return -EOPNOTSUPP;
2912
2913        return 0;
2914}
2915
2916
2917static int prism2_ioctl_priv_monitor(struct net_device *dev, int *i)
2918{
2919        struct hostap_interface *iface;
2920        local_info_t *local;
2921        int ret = 0;
2922        u32 mode;
2923
2924        iface = netdev_priv(dev);
2925        local = iface->local;
2926
2927        printk(KERN_DEBUG "%s: process %d (%s) used deprecated iwpriv monitor "
2928               "- update software to use iwconfig mode monitor\n",
2929               dev->name, task_pid_nr(current), current->comm);
2930
2931        /* Backward compatibility code - this can be removed at some point */
2932
2933        if (*i == 0) {
2934                /* Disable monitor mode - old mode was not saved, so go to
2935                 * Master mode */
2936                mode = IW_MODE_MASTER;
2937                ret = prism2_ioctl_siwmode(dev, NULL, &mode, NULL);
2938        } else if (*i == 1) {
2939                /* netlink socket mode is not supported anymore since it did
2940                 * not separate different devices from each other and was not
2941                 * best method for delivering large amount of packets to
2942                 * user space */
2943                ret = -EOPNOTSUPP;
2944        } else if (*i == 2 || *i == 3) {
2945                switch (*i) {
2946                case 2:
2947                        local->monitor_type = PRISM2_MONITOR_80211;
2948                        break;
2949                case 3:
2950                        local->monitor_type = PRISM2_MONITOR_PRISM;
2951                        break;
2952                }
2953                mode = IW_MODE_MONITOR;
2954                ret = prism2_ioctl_siwmode(dev, NULL, &mode, NULL);
2955                hostap_monitor_mode_enable(local);
2956        } else
2957                ret = -EINVAL;
2958
2959        return ret;
2960}
2961
2962
2963static int prism2_ioctl_priv_reset(struct net_device *dev, int *i)
2964{
2965        struct hostap_interface *iface;
2966        local_info_t *local;
2967
2968        iface = netdev_priv(dev);
2969        local = iface->local;
2970
2971        printk(KERN_DEBUG "%s: manual reset request(%d)\n", dev->name, *i);
2972        switch (*i) {
2973        case 0:
2974                /* Disable and enable card */
2975                local->func->hw_shutdown(dev, 1);
2976                local->func->hw_config(dev, 0);
2977                break;
2978
2979        case 1:
2980                /* COR sreset */
2981                local->func->hw_reset(dev);
2982                break;
2983
2984        case 2:
2985                /* Disable and enable port 0 */
2986                local->func->reset_port(dev);
2987                break;
2988
2989        case 3:
2990                prism2_sta_deauth(local, WLAN_REASON_DEAUTH_LEAVING);
2991                if (local->func->cmd(dev, HFA384X_CMDCODE_DISABLE, 0, NULL,
2992                                     NULL))
2993                        return -EINVAL;
2994                break;
2995
2996        case 4:
2997                if (local->func->cmd(dev, HFA384X_CMDCODE_ENABLE, 0, NULL,
2998                                     NULL))
2999                        return -EINVAL;
3000                break;
3001
3002        default:
3003                printk(KERN_DEBUG "Unknown reset request %d\n", *i);
3004                return -EOPNOTSUPP;
3005        }
3006
3007        return 0;
3008}
3009
3010
3011static int prism2_ioctl_priv_set_rid_word(struct net_device *dev, int *i)
3012{
3013        int rid = *i;
3014        int value = *(i + 1);
3015
3016        printk(KERN_DEBUG "%s: Set RID[0x%X] = %d\n", dev->name, rid, value);
3017
3018        if (hostap_set_word(dev, rid, value))
3019                return -EINVAL;
3020
3021        return 0;
3022}
3023
3024
3025#ifndef PRISM2_NO_KERNEL_IEEE80211_MGMT
3026static int ap_mac_cmd_ioctl(local_info_t *local, int *cmd)
3027{
3028        int ret = 0;
3029
3030        switch (*cmd) {
3031        case AP_MAC_CMD_POLICY_OPEN:
3032                local->ap->mac_restrictions.policy = MAC_POLICY_OPEN;
3033                break;
3034        case AP_MAC_CMD_POLICY_ALLOW:
3035                local->ap->mac_restrictions.policy = MAC_POLICY_ALLOW;
3036                break;
3037        case AP_MAC_CMD_POLICY_DENY:
3038                local->ap->mac_restrictions.policy = MAC_POLICY_DENY;
3039                break;
3040        case AP_MAC_CMD_FLUSH:
3041                ap_control_flush_macs(&local->ap->mac_restrictions);
3042                break;
3043        case AP_MAC_CMD_KICKALL:
3044                ap_control_kickall(local->ap);
3045                hostap_deauth_all_stas(local->dev, local->ap, 0);
3046                break;
3047        default:
3048                ret = -EOPNOTSUPP;
3049                break;
3050        }
3051
3052        return ret;
3053}
3054#endif /* PRISM2_NO_KERNEL_IEEE80211_MGMT */
3055
3056
3057#ifdef PRISM2_DOWNLOAD_SUPPORT
3058static int prism2_ioctl_priv_download(local_info_t *local, struct iw_point *p)
3059{
3060        struct prism2_download_param *param;
3061        int ret = 0;
3062
3063        if (p->length < sizeof(struct prism2_download_param) ||
3064            p->length > 1024 || !p->pointer)
3065                return -EINVAL;
3066
3067        param = (struct prism2_download_param *)
3068                kmalloc(p->length, GFP_KERNEL);
3069        if (param == NULL)
3070                return -ENOMEM;
3071
3072        if (copy_from_user(param, p->pointer, p->length)) {
3073                ret = -EFAULT;
3074                goto out;
3075        }
3076
3077        if (p->length < sizeof(struct prism2_download_param) +
3078            param->num_areas * sizeof(struct prism2_download_area)) {
3079                ret = -EINVAL;
3080                goto out;
3081        }
3082
3083        ret = local->func->download(local, param);
3084
3085 out:
3086        kfree(param);
3087        return ret;
3088}
3089#endif /* PRISM2_DOWNLOAD_SUPPORT */
3090
3091
3092static int prism2_set_genericelement(struct net_device *dev, u8 *elem,
3093                                     size_t len)
3094{
3095        struct hostap_interface *iface = netdev_priv(dev);
3096        local_info_t *local = iface->local;
3097        u8 *buf;
3098
3099        /*
3100         * Add 16-bit length in the beginning of the buffer because Prism2 RID
3101         * includes it.
3102         */
3103        buf = kmalloc(len + 2, GFP_KERNEL);
3104        if (buf == NULL)
3105                return -ENOMEM;
3106
3107        *((__le16 *) buf) = cpu_to_le16(len);
3108        memcpy(buf + 2, elem, len);
3109
3110        kfree(local->generic_elem);
3111        local->generic_elem = buf;
3112        local->generic_elem_len = len + 2;
3113
3114        return local->func->set_rid(local->dev, HFA384X_RID_GENERICELEMENT,
3115                                    buf, len + 2);
3116}
3117
3118
3119static int prism2_ioctl_siwauth(struct net_device *dev,
3120                                struct iw_request_info *info,
3121                                struct iw_param *data, char *extra)
3122{
3123        struct hostap_interface *iface = netdev_priv(dev);
3124        local_info_t *local = iface->local;
3125
3126        switch (data->flags & IW_AUTH_INDEX) {
3127        case IW_AUTH_WPA_VERSION:
3128        case IW_AUTH_CIPHER_PAIRWISE:
3129        case IW_AUTH_CIPHER_GROUP:
3130        case IW_AUTH_KEY_MGMT:
3131                /*
3132                 * Host AP driver does not use these parameters and allows
3133                 * wpa_supplicant to control them internally.
3134                 */
3135                break;
3136        case IW_AUTH_TKIP_COUNTERMEASURES:
3137                local->tkip_countermeasures = data->value;
3138                break;
3139        case IW_AUTH_DROP_UNENCRYPTED:
3140                local->drop_unencrypted = data->value;
3141                break;
3142        case IW_AUTH_80211_AUTH_ALG:
3143                local->auth_algs = data->value;
3144                break;
3145        case IW_AUTH_WPA_ENABLED:
3146                if (data->value == 0) {
3147                        local->wpa = 0;
3148                        if (local->sta_fw_ver < PRISM2_FW_VER(1,7,0))
3149                                break;
3150                        prism2_set_genericelement(dev, "", 0);
3151                        local->host_roaming = 0;
3152                        local->privacy_invoked = 0;
3153                        if (hostap_set_word(dev, HFA384X_RID_SSNHANDLINGMODE,
3154                                            0) ||
3155                            hostap_set_roaming(local) ||
3156                            hostap_set_encryption(local) ||
3157                            local->func->reset_port(dev))
3158                                return -EINVAL;
3159                        break;
3160                }
3161                if (local->sta_fw_ver < PRISM2_FW_VER(1,7,0))
3162                        return -EOPNOTSUPP;
3163                local->host_roaming = 2;
3164                local->privacy_invoked = 1;
3165                local->wpa = 1;
3166                if (hostap_set_word(dev, HFA384X_RID_SSNHANDLINGMODE, 1) ||
3167                    hostap_set_roaming(local) ||
3168                    hostap_set_encryption(local) ||
3169                    local->func->reset_port(dev))
3170                        return -EINVAL;
3171                break;
3172        case IW_AUTH_RX_UNENCRYPTED_EAPOL:
3173                local->ieee_802_1x = data->value;
3174                break;
3175        case IW_AUTH_PRIVACY_INVOKED:
3176                local->privacy_invoked = data->value;
3177                break;
3178        default:
3179                return -EOPNOTSUPP;
3180        }
3181        return 0;
3182}
3183
3184
3185static int prism2_ioctl_giwauth(struct net_device *dev,
3186                                struct iw_request_info *info,
3187                                struct iw_param *data, char *extra)
3188{
3189        struct hostap_interface *iface = netdev_priv(dev);
3190        local_info_t *local = iface->local;
3191
3192        switch (data->flags & IW_AUTH_INDEX) {
3193        case IW_AUTH_WPA_VERSION:
3194        case IW_AUTH_CIPHER_PAIRWISE:
3195        case IW_AUTH_CIPHER_GROUP:
3196        case IW_AUTH_KEY_MGMT:
3197                /*
3198                 * Host AP driver does not use these parameters and allows
3199                 * wpa_supplicant to control them internally.
3200                 */
3201                return -EOPNOTSUPP;
3202        case IW_AUTH_TKIP_COUNTERMEASURES:
3203                data->value = local->tkip_countermeasures;
3204                break;
3205        case IW_AUTH_DROP_UNENCRYPTED:
3206                data->value = local->drop_unencrypted;
3207                break;
3208        case IW_AUTH_80211_AUTH_ALG:
3209                data->value = local->auth_algs;
3210                break;
3211        case IW_AUTH_WPA_ENABLED:
3212                data->value = local->wpa;
3213                break;
3214        case IW_AUTH_RX_UNENCRYPTED_EAPOL:
3215                data->value = local->ieee_802_1x;
3216                break;
3217        default:
3218                return -EOPNOTSUPP;
3219        }
3220        return 0;
3221}
3222
3223
3224static int prism2_ioctl_siwencodeext(struct net_device *dev,
3225                                     struct iw_request_info *info,
3226                                     struct iw_point *erq, char *extra)
3227{
3228        struct hostap_interface *iface = netdev_priv(dev);
3229        local_info_t *local = iface->local;
3230        struct iw_encode_ext *ext = (struct iw_encode_ext *) extra;
3231        int i, ret = 0;
3232        struct ieee80211_crypto_ops *ops;
3233        struct ieee80211_crypt_data **crypt;
3234        void *sta_ptr;
3235        u8 *addr;
3236        const char *alg, *module;
3237
3238        i = erq->flags & IW_ENCODE_INDEX;
3239        if (i > WEP_KEYS)
3240                return -EINVAL;
3241        if (i < 1 || i > WEP_KEYS)
3242                i = local->tx_keyidx;
3243        else
3244                i--;
3245        if (i < 0 || i >= WEP_KEYS)
3246                return -EINVAL;
3247
3248        addr = ext->addr.sa_data;
3249        if (addr[0] == 0xff && addr[1] == 0xff && addr[2] == 0xff &&
3250            addr[3] == 0xff && addr[4] == 0xff && addr[5] == 0xff) {
3251                sta_ptr = NULL;
3252                crypt = &local->crypt[i];
3253        } else {
3254                if (i != 0)
3255                        return -EINVAL;
3256                sta_ptr = ap_crypt_get_ptrs(local->ap, addr, 0, &crypt);
3257                if (sta_ptr == NULL) {
3258                        if (local->iw_mode == IW_MODE_INFRA) {
3259                                /*
3260                                 * TODO: add STA entry for the current AP so
3261                                 * that unicast key can be used. For now, this
3262                                 * is emulated by using default key idx 0.
3263                                 */
3264                                i = 0;
3265                                crypt = &local->crypt[i];
3266                        } else
3267                                return -EINVAL;
3268                }
3269        }
3270
3271        if ((erq->flags & IW_ENCODE_DISABLED) ||
3272            ext->alg == IW_ENCODE_ALG_NONE) {
3273                if (*crypt)
3274                        prism2_crypt_delayed_deinit(local, crypt);
3275                goto done;
3276        }
3277
3278        switch (ext->alg) {
3279        case IW_ENCODE_ALG_WEP:
3280                alg = "WEP";
3281                module = "ieee80211_crypt_wep";
3282                break;
3283        case IW_ENCODE_ALG_TKIP:
3284                alg = "TKIP";
3285                module = "ieee80211_crypt_tkip";
3286                break;
3287        case IW_ENCODE_ALG_CCMP:
3288                alg = "CCMP";
3289                module = "ieee80211_crypt_ccmp";
3290                break;
3291        default:
3292                printk(KERN_DEBUG "%s: unsupported algorithm %d\n",
3293                       local->dev->name, ext->alg);
3294                ret = -EOPNOTSUPP;
3295                goto done;
3296        }
3297
3298        ops = ieee80211_get_crypto_ops(alg);
3299        if (ops == NULL) {
3300                request_module(module);
3301                ops = ieee80211_get_crypto_ops(alg);
3302        }
3303        if (ops == NULL) {
3304                printk(KERN_DEBUG "%s: unknown crypto alg '%s'\n",
3305                       local->dev->name, alg);
3306                ret = -EOPNOTSUPP;
3307                goto done;
3308        }
3309
3310        if (sta_ptr || ext->alg != IW_ENCODE_ALG_WEP) {
3311                /*
3312                 * Per station encryption and other than WEP algorithms
3313                 * require host-based encryption, so force them on
3314                 * automatically.
3315                 */
3316                local->host_decrypt = local->host_encrypt = 1;
3317        }
3318
3319        if (*crypt == NULL || (*crypt)->ops != ops) {
3320                struct ieee80211_crypt_data *new_crypt;
3321
3322                prism2_crypt_delayed_deinit(local, crypt);
3323
3324                new_crypt = kzalloc(sizeof(struct ieee80211_crypt_data),
3325                                GFP_KERNEL);
3326                if (new_crypt == NULL) {
3327                        ret = -ENOMEM;
3328                        goto done;
3329                }
3330                new_crypt->ops = ops;
3331                new_crypt->priv = new_crypt->ops->init(i);
3332                if (new_crypt->priv == NULL) {
3333                        kfree(new_crypt);
3334                        ret = -EINVAL;
3335                        goto done;
3336                }
3337
3338                *crypt = new_crypt;
3339        }
3340
3341        /*
3342         * TODO: if ext_flags does not have IW_ENCODE_EXT_RX_SEQ_VALID, the
3343         * existing seq# should not be changed.
3344         * TODO: if ext_flags has IW_ENCODE_EXT_TX_SEQ_VALID, next TX seq#
3345         * should be changed to something else than zero.
3346         */
3347        if ((!(ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY) || ext->key_len > 0)
3348            && (*crypt)->ops->set_key &&
3349            (*crypt)->ops->set_key(ext->key, ext->key_len, ext->rx_seq,
3350                                   (*crypt)->priv) < 0) {
3351                printk(KERN_DEBUG "%s: key setting failed\n",
3352                       local->dev->name);
3353                ret = -EINVAL;
3354                goto done;
3355        }
3356
3357        if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY) {
3358                if (!sta_ptr)
3359                        local->tx_keyidx = i;
3360        }
3361
3362
3363        if (sta_ptr == NULL && ext->key_len > 0) {
3364                int first = 1, j;
3365                for (j = 0; j < WEP_KEYS; j++) {
3366                        if (j != i && local->crypt[j]) {
3367                                first = 0;
3368                                break;
3369                        }
3370                }
3371                if (first)
3372                        local->tx_keyidx = i;
3373        }
3374
3375 done:
3376        if (sta_ptr)
3377                hostap_handle_sta_release(sta_ptr);
3378
3379        local->open_wep = erq->flags & IW_ENCODE_OPEN;
3380
3381        /*
3382         * Do not reset port0 if card is in Managed mode since resetting will
3383         * generate new IEEE 802.11 authentication which may end up in looping
3384         * with IEEE 802.1X. Prism2 documentation seem to require port reset
3385         * after WEP configuration. However, keys are apparently changed at
3386         * least in Managed mode.
3387         */
3388        if (ret == 0 &&
3389            (hostap_set_encryption(local) ||
3390             (local->iw_mode != IW_MODE_INFRA &&
3391              local->func->reset_port(local->dev))))
3392                ret = -EINVAL;
3393
3394        return ret;
3395}
3396
3397
3398static int prism2_ioctl_giwencodeext(struct net_device *dev,
3399                                     struct iw_request_info *info,
3400                                     struct iw_point *erq, char *extra)
3401{
3402        struct hostap_interface *iface = netdev_priv(dev);
3403        local_info_t *local = iface->local;
3404        struct ieee80211_crypt_data **crypt;
3405        void *sta_ptr;
3406        int max_key_len, i;
3407        struct iw_encode_ext *ext = (struct iw_encode_ext *) extra;
3408        u8 *addr;
3409
3410        max_key_len = erq->length - sizeof(*ext);
3411        if (max_key_len < 0)
3412                return -EINVAL;
3413
3414        i = erq->flags & IW_ENCODE_INDEX;
3415        if (i < 1 || i > WEP_KEYS)
3416                i = local->tx_keyidx;
3417        else
3418                i--;
3419
3420        addr = ext->addr.sa_data;
3421        if (addr[0] == 0xff && addr[1] == 0xff && addr[2] == 0xff &&
3422            addr[3] == 0xff && addr[4] == 0xff && addr[5] == 0xff) {
3423                sta_ptr = NULL;
3424                crypt = &local->crypt[i];
3425        } else {
3426                i = 0;
3427                sta_ptr = ap_crypt_get_ptrs(local->ap, addr, 0, &crypt);
3428                if (sta_ptr == NULL)
3429                        return -EINVAL;
3430        }
3431        erq->flags = i + 1;
3432        memset(ext, 0, sizeof(*ext));
3433
3434        if (*crypt == NULL || (*crypt)->ops == NULL) {
3435                ext->alg = IW_ENCODE_ALG_NONE;
3436                ext->key_len = 0;
3437                erq->flags |= IW_ENCODE_DISABLED;
3438        } else {
3439                if (strcmp((*crypt)->ops->name, "WEP") == 0)
3440                        ext->alg = IW_ENCODE_ALG_WEP;
3441                else if (strcmp((*crypt)->ops->name, "TKIP") == 0)
3442                        ext->alg = IW_ENCODE_ALG_TKIP;
3443                else if (strcmp((*crypt)->ops->name, "CCMP") == 0)
3444                        ext->alg = IW_ENCODE_ALG_CCMP;
3445                else
3446                        return -EINVAL;
3447
3448                if ((*crypt)->ops->get_key) {
3449                        ext->key_len =
3450                                (*crypt)->ops->get_key(ext->key,
3451                                                       max_key_len,
3452                                                       ext->tx_seq,
3453                                                       (*crypt)->priv);
3454                        if (ext->key_len &&
3455                            (ext->alg == IW_ENCODE_ALG_TKIP ||
3456                             ext->alg == IW_ENCODE_ALG_CCMP))
3457                                ext->ext_flags |= IW_ENCODE_EXT_TX_SEQ_VALID;
3458                }
3459        }
3460
3461        if (sta_ptr)
3462                hostap_handle_sta_release(sta_ptr);
3463
3464        return 0;
3465}
3466
3467
3468static int prism2_ioctl_set_encryption(local_info_t *local,
3469                                       struct prism2_hostapd_param *param,
3470                                       int param_len)
3471{
3472        int ret = 0;
3473        struct ieee80211_crypto_ops *ops;
3474        struct ieee80211_crypt_data **crypt;
3475        void *sta_ptr;
3476
3477        param->u.crypt.err = 0;
3478        param->u.crypt.alg[HOSTAP_CRYPT_ALG_NAME_LEN - 1] = '\0';
3479
3480        if (param_len !=
3481            (int) ((char *) param->u.crypt.key - (char *) param) +
3482            param->u.crypt.key_len)
3483                return -EINVAL;
3484
3485        if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3486            param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3487            param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3488                if (param->u.crypt.idx >= WEP_KEYS)
3489                        return -EINVAL;
3490                sta_ptr = NULL;
3491                crypt = &local->crypt[param->u.crypt.idx];
3492        } else {
3493                if (param->u.crypt.idx)
3494                        return -EINVAL;
3495                sta_ptr = ap_crypt_get_ptrs(
3496                        local->ap, param->sta_addr,
3497                        (param->u.crypt.flags & HOSTAP_CRYPT_FLAG_PERMANENT),
3498                        &crypt);
3499
3500                if (sta_ptr == NULL) {
3501                        param->u.crypt.err = HOSTAP_CRYPT_ERR_UNKNOWN_ADDR;
3502                        return -EINVAL;
3503                }
3504        }
3505
3506        if (strcmp(param->u.crypt.alg, "none") == 0) {
3507                if (crypt)
3508                        prism2_crypt_delayed_deinit(local, crypt);
3509                goto done;
3510        }
3511
3512        ops = ieee80211_get_crypto_ops(param->u.crypt.alg);
3513        if (ops == NULL && strcmp(param->u.crypt.alg, "WEP") == 0) {
3514                request_module("ieee80211_crypt_wep");
3515                ops = ieee80211_get_crypto_ops(param->u.crypt.alg);
3516        } else if (ops == NULL && strcmp(param->u.crypt.alg, "TKIP") == 0) {
3517                request_module("ieee80211_crypt_tkip");
3518                ops = ieee80211_get_crypto_ops(param->u.crypt.alg);
3519        } else if (ops == NULL && strcmp(param->u.crypt.alg, "CCMP") == 0) {
3520                request_module("ieee80211_crypt_ccmp");
3521                ops = ieee80211_get_crypto_ops(param->u.crypt.alg);
3522        }
3523        if (ops == NULL) {
3524                printk(KERN_DEBUG "%s: unknown crypto alg '%s'\n",
3525                       local->dev->name, param->u.crypt.alg);
3526                param->u.crypt.err = HOSTAP_CRYPT_ERR_UNKNOWN_ALG;
3527                ret = -EINVAL;
3528                goto done;
3529        }
3530
3531        /* station based encryption and other than WEP algorithms require
3532         * host-based encryption, so force them on automatically */
3533        local->host_decrypt = local->host_encrypt = 1;
3534
3535        if (*crypt == NULL || (*crypt)->ops != ops) {
3536                struct ieee80211_crypt_data *new_crypt;
3537
3538                prism2_crypt_delayed_deinit(local, crypt);
3539
3540                new_crypt = kzalloc(sizeof(struct ieee80211_crypt_data),
3541                                GFP_KERNEL);
3542                if (new_crypt == NULL) {
3543                        ret = -ENOMEM;
3544                        goto done;
3545                }
3546                new_crypt->ops = ops;
3547                new_crypt->priv = new_crypt->ops->init(param->u.crypt.idx);
3548                if (new_crypt->priv == NULL) {
3549                        kfree(new_crypt);
3550                        param->u.crypt.err =
3551                                HOSTAP_CRYPT_ERR_CRYPT_INIT_FAILED;
3552                        ret = -EINVAL;
3553                        goto done;
3554                }
3555
3556                *crypt = new_crypt;
3557        }
3558
3559        if ((!(param->u.crypt.flags & HOSTAP_CRYPT_FLAG_SET_TX_KEY) ||
3560             param->u.crypt.key_len > 0) && (*crypt)->ops->set_key &&
3561            (*crypt)->ops->set_key(param->u.crypt.key,
3562                                   param->u.crypt.key_len, param->u.crypt.seq,
3563                                   (*crypt)->priv) < 0) {
3564                printk(KERN_DEBUG "%s: key setting failed\n",
3565                       local->dev->name);
3566                param->u.crypt.err = HOSTAP_CRYPT_ERR_KEY_SET_FAILED;
3567                ret = -EINVAL;
3568                goto done;
3569        }
3570
3571        if (param->u.crypt.flags & HOSTAP_CRYPT_FLAG_SET_TX_KEY) {
3572                if (!sta_ptr)
3573                        local->tx_keyidx = param->u.crypt.idx;
3574                else if (param->u.crypt.idx) {
3575                        printk(KERN_DEBUG "%s: TX key idx setting failed\n",
3576                               local->dev->name);
3577                        param->u.crypt.err =
3578                                HOSTAP_CRYPT_ERR_TX_KEY_SET_FAILED;
3579                        ret = -EINVAL;
3580                        goto done;
3581                }
3582        }
3583
3584 done:
3585        if (sta_ptr)
3586                hostap_handle_sta_release(sta_ptr);
3587
3588        /* Do not reset port0 if card is in Managed mode since resetting will
3589         * generate new IEEE 802.11 authentication which may end up in looping
3590         * with IEEE 802.1X. Prism2 documentation seem to require port reset
3591         * after WEP configuration. However, keys are apparently changed at
3592         * least in Managed mode. */
3593        if (ret == 0 &&
3594            (hostap_set_encryption(local) ||
3595             (local->iw_mode != IW_MODE_INFRA &&
3596              local->func->reset_port(local->dev)))) {
3597                param->u.crypt.err = HOSTAP_CRYPT_ERR_CARD_CONF_FAILED;
3598                return -EINVAL;
3599        }
3600
3601        return ret;
3602}
3603
3604
3605static int prism2_ioctl_get_encryption(local_info_t *local,
3606                                       struct prism2_hostapd_param *param,
3607                                       int param_len)
3608{
3609        struct ieee80211_crypt_data **crypt;
3610        void *sta_ptr;
3611        int max_key_len;
3612
3613        param->u.crypt.err = 0;
3614
3615        max_key_len = param_len -
3616                (int) ((char *) param->u.crypt.key - (char *) param);
3617        if (max_key_len < 0)
3618                return -EINVAL;
3619
3620        if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3621            param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3622            param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3623                sta_ptr = NULL;
3624                if (param->u.crypt.idx >= WEP_KEYS)
3625                        param->u.crypt.idx = local->tx_keyidx;
3626                crypt = &local->crypt[param->u.crypt.idx];
3627        } else {
3628                param->u.crypt.idx = 0;
3629                sta_ptr = ap_crypt_get_ptrs(local->ap, param->sta_addr, 0,
3630                                            &crypt);
3631
3632                if (sta_ptr == NULL) {
3633                        param->u.crypt.err = HOSTAP_CRYPT_ERR_UNKNOWN_ADDR;
3634                        return -EINVAL;
3635                }
3636        }
3637
3638        if (*crypt == NULL || (*crypt)->ops == NULL) {
3639                memcpy(param->u.crypt.alg, "none", 5);
3640                param->u.crypt.key_len = 0;
3641                param->u.crypt.idx = 0xff;
3642        } else {
3643                strncpy(param->u.crypt.alg, (*crypt)->ops->name,
3644                        HOSTAP_CRYPT_ALG_NAME_LEN);
3645                param->u.crypt.key_len = 0;
3646
3647                memset(param->u.crypt.seq, 0, 8);
3648                if ((*crypt)->ops->get_key) {
3649                        param->u.crypt.key_len =
3650                                (*crypt)->ops->get_key(param->u.crypt.key,
3651                                                       max_key_len,
3652                                                       param->u.crypt.seq,
3653                                                       (*crypt)->priv);
3654                }
3655        }
3656
3657        if (sta_ptr)
3658                hostap_handle_sta_release(sta_ptr);
3659
3660        return 0;
3661}
3662
3663
3664static int prism2_ioctl_get_rid(local_info_t *local,
3665                                struct prism2_hostapd_param *param,
3666                                int param_len)
3667{
3668        int max_len, res;
3669
3670        max_len = param_len - PRISM2_HOSTAPD_RID_HDR_LEN;
3671        if (max_len < 0)
3672                return -EINVAL;
3673
3674        res = local->func->get_rid(local->dev, param->u.rid.rid,
3675                                   param->u.rid.data, param->u.rid.len, 0);
3676        if (res >= 0) {
3677                param->u.rid.len = res;
3678                return 0;
3679        }
3680
3681        return res;
3682}
3683
3684
3685static int prism2_ioctl_set_rid(local_info_t *local,
3686                                struct prism2_hostapd_param *param,
3687                                int param_len)
3688{
3689        int max_len;
3690
3691        max_len = param_len - PRISM2_HOSTAPD_RID_HDR_LEN;
3692        if (max_len < 0 || max_len < param->u.rid.len)
3693                return -EINVAL;
3694
3695        return local->func->set_rid(local->dev, param->u.rid.rid,
3696                                    param->u.rid.data, param->u.rid.len);
3697}
3698
3699
3700static int prism2_ioctl_set_assoc_ap_addr(local_info_t *local,
3701                                          struct prism2_hostapd_param *param,
3702                                          int param_len)
3703{
3704        DECLARE_MAC_BUF(mac);
3705        printk(KERN_DEBUG "%ssta: associated as client with AP "
3706               "%s\n",
3707               local->dev->name, print_mac(mac, param->sta_addr));
3708        memcpy(local->assoc_ap_addr, param->sta_addr, ETH_ALEN);
3709        return 0;
3710}
3711
3712
3713static int prism2_ioctl_siwgenie(struct net_device *dev,
3714                                 struct iw_request_info *info,
3715                                 struct iw_point *data, char *extra)
3716{
3717        return prism2_set_genericelement(dev, extra, data->length);
3718}
3719
3720
3721static int prism2_ioctl_giwgenie(struct net_device *dev,
3722                                 struct iw_request_info *info,
3723                                 struct iw_point *data, char *extra)
3724{
3725        struct hostap_interface *iface = netdev_priv(dev);
3726        local_info_t *local = iface->local;
3727        int len = local->generic_elem_len - 2;
3728
3729        if (len <= 0 || local->generic_elem == NULL) {
3730                data->length = 0;
3731                return 0;
3732        }
3733
3734        if (data->length < len)
3735                return -E2BIG;
3736
3737        data->length = len;
3738        memcpy(extra, local->generic_elem + 2, len);
3739
3740        return 0;
3741}
3742
3743
3744static int prism2_ioctl_set_generic_element(local_info_t *local,
3745                                            struct prism2_hostapd_param *param,
3746                                            int param_len)
3747{
3748        int max_len, len;
3749
3750        len = param->u.generic_elem.len;
3751        max_len = param_len - PRISM2_HOSTAPD_GENERIC_ELEMENT_HDR_LEN;
3752        if (max_len < 0 || max_len < len)
3753                return -EINVAL;
3754
3755        return prism2_set_genericelement(local->dev,
3756                                         param->u.generic_elem.data, len);
3757}
3758
3759
3760static int prism2_ioctl_siwmlme(struct net_device *dev,
3761                                struct iw_request_info *info,
3762                                struct iw_point *data, char *extra)
3763{
3764        struct hostap_interface *iface = netdev_priv(dev);
3765        local_info_t *local = iface->local;
3766        struct iw_mlme *mlme = (struct iw_mlme *) extra;
3767        __le16 reason;
3768
3769        reason = cpu_to_le16(mlme->reason_code);
3770
3771        switch (mlme->cmd) {
3772        case IW_MLME_DEAUTH:
3773                return prism2_sta_send_mgmt(local, mlme->addr.sa_data,
3774                                            IEEE80211_STYPE_DEAUTH,
3775                                            (u8 *) &reason, 2);
3776        case IW_MLME_DISASSOC:
3777                return prism2_sta_send_mgmt(local, mlme->addr.sa_data,
3778                                            IEEE80211_STYPE_DISASSOC,
3779                                            (u8 *) &reason, 2);
3780        default:
3781                return -EOPNOTSUPP;
3782        }
3783}
3784
3785
3786static int prism2_ioctl_mlme(local_info_t *local,
3787                             struct prism2_hostapd_param *param)
3788{
3789        __le16 reason;
3790
3791        reason = cpu_to_le16(param->u.mlme.reason_code);
3792        switch (param->u.mlme.cmd) {
3793        case MLME_STA_DEAUTH:
3794                return prism2_sta_send_mgmt(local, param->sta_addr,
3795                                            IEEE80211_STYPE_DEAUTH,
3796                                            (u8 *) &reason, 2);
3797        case MLME_STA_DISASSOC:
3798                return prism2_sta_send_mgmt(local, param->sta_addr,
3799                                            IEEE80211_STYPE_DISASSOC,
3800                                            (u8 *) &reason, 2);
3801        default:
3802                return -EOPNOTSUPP;
3803        }
3804}
3805
3806
3807static int prism2_ioctl_scan_req(local_info_t *local,
3808                                 struct prism2_hostapd_param *param)
3809{
3810#ifndef PRISM2_NO_STATION_MODES
3811        if ((local->iw_mode != IW_MODE_INFRA &&
3812             local->iw_mode != IW_MODE_ADHOC) ||
3813            (local->sta_fw_ver < PRISM2_FW_VER(1,3,1)))
3814                return -EOPNOTSUPP;
3815
3816        if (!local->dev_enabled)
3817                return -ENETDOWN;
3818
3819        return prism2_request_hostscan(local->dev, param->u.scan_req.ssid,
3820                                       param->u.scan_req.ssid_len);
3821#else /* PRISM2_NO_STATION_MODES */
3822        return -EOPNOTSUPP;
3823#endif /* PRISM2_NO_STATION_MODES */
3824}
3825
3826
3827static int prism2_ioctl_priv_hostapd(local_info_t *local, struct iw_point *p)
3828{
3829        struct prism2_hostapd_param *param;
3830        int ret = 0;
3831        int ap_ioctl = 0;
3832
3833        if (p->length < sizeof(struct prism2_hostapd_param) ||
3834            p->length > PRISM2_HOSTAPD_MAX_BUF_SIZE || !p->pointer)
3835                return -EINVAL;
3836
3837        param = kmalloc(p->length, GFP_KERNEL);
3838        if (param == NULL)
3839                return -ENOMEM;
3840
3841        if (copy_from_user(param, p->pointer, p->length)) {
3842                ret = -EFAULT;
3843                goto out;
3844        }
3845
3846        switch (param->cmd) {
3847        case PRISM2_SET_ENCRYPTION:
3848                ret = prism2_ioctl_set_encryption(local, param, p->length);
3849                break;
3850        case PRISM2_GET_ENCRYPTION:
3851                ret = prism2_ioctl_get_encryption(local, param, p->length);
3852                break;
3853        case PRISM2_HOSTAPD_GET_RID:
3854                ret = prism2_ioctl_get_rid(local, param, p->length);
3855                break;
3856        case PRISM2_HOSTAPD_SET_RID:
3857                ret = prism2_ioctl_set_rid(local, param, p->length);
3858                break;
3859        case PRISM2_HOSTAPD_SET_ASSOC_AP_ADDR:
3860                ret = prism2_ioctl_set_assoc_ap_addr(local, param, p->length);
3861                break;
3862        case PRISM2_HOSTAPD_SET_GENERIC_ELEMENT:
3863                ret = prism2_ioctl_set_generic_element(local, param,
3864                                                       p->length);
3865                break;
3866        case PRISM2_HOSTAPD_MLME:
3867                ret = prism2_ioctl_mlme(local, param);
3868                break;
3869        case PRISM2_HOSTAPD_SCAN_REQ:
3870                ret = prism2_ioctl_scan_req(local, param);
3871                break;
3872        default:
3873                ret = prism2_hostapd(local->ap, param);
3874                ap_ioctl = 1;
3875                break;
3876        }
3877
3878        if (ret == 1 || !ap_ioctl) {
3879                if (copy_to_user(p->pointer, param, p->length)) {
3880                        ret = -EFAULT;
3881                        goto out;
3882                } else if (ap_ioctl)
3883                        ret = 0;
3884        }
3885
3886 out:
3887        kfree(param);
3888        return ret;
3889}
3890
3891
3892static void prism2_get_drvinfo(struct net_device *dev,
3893                               struct ethtool_drvinfo *info)
3894{
3895        struct hostap_interface *iface;
3896        local_info_t *local;
3897
3898        iface = netdev_priv(dev);
3899        local = iface->local;
3900
3901        strncpy(info->driver, "hostap", sizeof(info->driver) - 1);
3902        snprintf(info->fw_version, sizeof(info->fw_version) - 1,
3903                 "%d.%d.%d", (local->sta_fw_ver >> 16) & 0xff,
3904                 (local->sta_fw_ver >> 8) & 0xff,
3905                 local->sta_fw_ver & 0xff);
3906}
3907
3908const struct ethtool_ops prism2_ethtool_ops = {
3909        .get_drvinfo = prism2_get_drvinfo
3910};
3911
3912
3913/* Structures to export the Wireless Handlers */
3914
3915static const iw_handler prism2_handler[] =
3916{
3917        (iw_handler) NULL,                                /* SIOCSIWCOMMIT */
3918        (iw_handler) prism2_get_name,                        /* SIOCGIWNAME */
3919        (iw_handler) NULL,                                /* SIOCSIWNWID */
3920        (iw_handler) NULL,                                /* SIOCGIWNWID */
3921        (iw_handler) prism2_ioctl_siwfreq,                /* SIOCSIWFREQ */
3922        (iw_handler) prism2_ioctl_giwfreq,                /* SIOCGIWFREQ */
3923        (iw_handler) prism2_ioctl_siwmode,                /* SIOCSIWMODE */
3924        (iw_handler) prism2_ioctl_giwmode,                /* SIOCGIWMODE */
3925        (iw_handler) prism2_ioctl_siwsens,                /* SIOCSIWSENS */
3926        (iw_handler) prism2_ioctl_giwsens,                /* SIOCGIWSENS */
3927        (iw_handler) NULL /* not used */,                /* SIOCSIWRANGE */
3928        (iw_handler) prism2_ioctl_giwrange,                /* SIOCGIWRANGE */
3929        (iw_handler) NULL /* not used */,                /* SIOCSIWPRIV */
3930        (iw_handler) NULL /* kernel code */,                /* SIOCGIWPRIV */
3931        (iw_handler) NULL /* not used */,                /* SIOCSIWSTATS */
3932        (iw_handler) NULL /* kernel code */,                /* SIOCGIWSTATS */
3933        iw_handler_set_spy,                                /* SIOCSIWSPY */
3934        iw_handler_get_spy,                                /* SIOCGIWSPY */
3935        iw_handler_set_thrspy,                                /* SIOCSIWTHRSPY */
3936        iw_handler_get_thrspy,                                /* SIOCGIWTHRSPY */
3937        (iw_handler) prism2_ioctl_siwap,                /* SIOCSIWAP */
3938        (iw_handler) prism2_ioctl_giwap,                /* SIOCGIWAP */
3939        (iw_handler) prism2_ioctl_siwmlme,                /* SIOCSIWMLME */
3940        (iw_handler) prism2_ioctl_giwaplist,                /* SIOCGIWAPLIST */
3941        (iw_handler) prism2_ioctl_siwscan,                /* SIOCSIWSCAN */
3942        (iw_handler) prism2_ioctl_giwscan,                /* SIOCGIWSCAN */
3943        (iw_handler) prism2_ioctl_siwessid,                /* SIOCSIWESSID */
3944        (iw_handler) prism2_ioctl_giwessid,                /* SIOCGIWESSID */
3945        (iw_handler) prism2_ioctl_siwnickn,                /* SIOCSIWNICKN */
3946        (iw_handler) prism2_ioctl_giwnickn,                /* SIOCGIWNICKN */
3947        (iw_handler) NULL,                                /* -- hole -- */
3948        (iw_handler) NULL,                                /* -- hole -- */
3949        (iw_handler) prism2_ioctl_siwrate,                /* SIOCSIWRATE */
3950        (iw_handler) prism2_ioctl_giwrate,                /* SIOCGIWRATE */
3951        (iw_handler) prism2_ioctl_siwrts,                /* SIOCSIWRTS */
3952        (iw_handler) prism2_ioctl_giwrts,                /* SIOCGIWRTS */
3953        (iw_handler) prism2_ioctl_siwfrag,                /* SIOCSIWFRAG */
3954        (iw_handler) prism2_ioctl_giwfrag,                /* SIOCGIWFRAG */
3955        (iw_handler) prism2_ioctl_siwtxpow,                /* SIOCSIWTXPOW */
3956        (iw_handler) prism2_ioctl_giwtxpow,                /* SIOCGIWTXPOW */
3957        (iw_handler) prism2_ioctl_siwretry,                /* SIOCSIWRETRY */
3958        (iw_handler) prism2_ioctl_giwretry,                /* SIOCGIWRETRY */
3959        (iw_handler) prism2_ioctl_siwencode,                /* SIOCSIWENCODE */
3960        (iw_handler) prism2_ioctl_giwencode,                /* SIOCGIWENCODE */
3961        (iw_handler) prism2_ioctl_siwpower,                /* SIOCSIWPOWER */
3962        (iw_handler) prism2_ioctl_giwpower,                /* SIOCGIWPOWER */
3963        (iw_handler) NULL,                                /* -- hole -- */
3964        (iw_handler) NULL,                                /* -- hole -- */
3965        (iw_handler) prism2_ioctl_siwgenie,                /* SIOCSIWGENIE */
3966        (iw_handler) prism2_ioctl_giwgenie,                /* SIOCGIWGENIE */
3967        (iw_handler) prism2_ioctl_siwauth,                /* SIOCSIWAUTH */
3968        (iw_handler) prism2_ioctl_giwauth,                /* SIOCGIWAUTH */
3969        (iw_handler) prism2_ioctl_siwencodeext,                /* SIOCSIWENCODEEXT */
3970        (iw_handler) prism2_ioctl_giwencodeext,                /* SIOCGIWENCODEEXT */
3971        (iw_handler) NULL,                                /* SIOCSIWPMKSA */
3972        (iw_handler) NULL,                                /* -- hole -- */
3973};
3974
3975static const iw_handler prism2_private_handler[] =
3976{                                                        /* SIOCIWFIRSTPRIV + */
3977        (iw_handler) prism2_ioctl_priv_prism2_param,        /* 0 */
3978        (iw_handler) prism2_ioctl_priv_get_prism2_param, /* 1 */
3979        (iw_handler) prism2_ioctl_priv_writemif,        /* 2 */
3980        (iw_handler) prism2_ioctl_priv_readmif,                /* 3 */
3981};
3982
3983const struct iw_handler_def hostap_iw_handler_def =
3984{
3985        .num_standard        = ARRAY_SIZE(prism2_handler),
3986        .num_private        = ARRAY_SIZE(prism2_private_handler),
3987        .num_private_args = ARRAY_SIZE(prism2_priv),
3988        .standard        = (iw_handler *) prism2_handler,
3989        .private        = (iw_handler *) prism2_private_handler,
3990        .private_args        = (struct iw_priv_args *) prism2_priv,
3991        .get_wireless_stats = hostap_get_wireless_stats,
3992};
3993
3994
3995int hostap_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd)
3996{
3997        struct iwreq *wrq = (struct iwreq *) ifr;
3998        struct hostap_interface *iface;
3999        local_info_t *local;
4000        int ret = 0;
4001
4002        iface = netdev_priv(dev);
4003        local = iface->local;
4004
4005        switch (cmd) {
4006                /* Private ioctls (iwpriv) that have not yet been converted
4007                 * into new wireless extensions API */
4008
4009        case PRISM2_IOCTL_INQUIRE:
4010                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4011                else ret = prism2_ioctl_priv_inquire(dev, (int *) wrq->u.name);
4012                break;
4013
4014        case PRISM2_IOCTL_MONITOR:
4015                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4016                else ret = prism2_ioctl_priv_monitor(dev, (int *) wrq->u.name);
4017                break;
4018
4019        case PRISM2_IOCTL_RESET:
4020                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4021                else ret = prism2_ioctl_priv_reset(dev, (int *) wrq->u.name);
4022                break;
4023
4024        case PRISM2_IOCTL_WDS_ADD:
4025                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4026                else ret = prism2_wds_add(local, wrq->u.ap_addr.sa_data, 1);
4027                break;
4028
4029        case PRISM2_IOCTL_WDS_DEL:
4030                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4031                else ret = prism2_wds_del(local, wrq->u.ap_addr.sa_data, 1, 0);
4032                break;
4033
4034        case PRISM2_IOCTL_SET_RID_WORD:
4035                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4036                else ret = prism2_ioctl_priv_set_rid_word(dev,
4037                                                          (int *) wrq->u.name);
4038                break;
4039
4040#ifndef PRISM2_NO_KERNEL_IEEE80211_MGMT
4041        case PRISM2_IOCTL_MACCMD:
4042                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4043                else ret = ap_mac_cmd_ioctl(local, (int *) wrq->u.name);
4044                break;
4045
4046        case PRISM2_IOCTL_ADDMAC:
4047                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4048                else ret = ap_control_add_mac(&local->ap->mac_restrictions,
4049                                              wrq->u.ap_addr.sa_data);
4050                break;
4051        case PRISM2_IOCTL_DELMAC:
4052                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4053                else ret = ap_control_del_mac(&local->ap->mac_restrictions,
4054                                              wrq->u.ap_addr.sa_data);
4055                break;
4056        case PRISM2_IOCTL_KICKMAC:
4057                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4058                else ret = ap_control_kick_mac(local->ap, local->dev,
4059                                               wrq->u.ap_addr.sa_data);
4060                break;
4061#endif /* PRISM2_NO_KERNEL_IEEE80211_MGMT */
4062
4063
4064                /* Private ioctls that are not used with iwpriv;
4065                 * in SIOCDEVPRIVATE range */
4066
4067#ifdef PRISM2_DOWNLOAD_SUPPORT
4068        case PRISM2_IOCTL_DOWNLOAD:
4069                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4070                else ret = prism2_ioctl_priv_download(local, &wrq->u.data);
4071                break;
4072#endif /* PRISM2_DOWNLOAD_SUPPORT */
4073
4074        case PRISM2_IOCTL_HOSTAPD:
4075                if (!capable(CAP_NET_ADMIN)) ret = -EPERM;
4076                else ret = prism2_ioctl_priv_hostapd(local, &wrq->u.data);
4077                break;
4078
4079        default:
4080                ret = -EOPNOTSUPP;
4081                break;
4082        }
4083
4084        return ret;
4085}