drivers/net/wireless/quantenna/qtnfmac/commands.c

   1 /*
   2  * Copyright (c) 2015-2016 Quantenna Communications, Inc.
   3  *
   4  * This program is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU General Public License
   6  * as published by the Free Software Foundation; either version 2
   7  * of the License, or (at your option) any later version.
   8  *
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  * GNU General Public License for more details.
  13  *
  14  */
  15
  16 #include <linux/types.h>
  17 #include <linux/skbuff.h>
  18
  19 #include "cfg80211.h"
  20 #include "core.h"
  21 #include "qlink.h"
  22 #include "qlink_util.h"
  23 #include "bus.h"
  24 #include "commands.h"
  25
  26 static int qtnf_cmd_check_reply_header(const struct qlink_resp *resp,
  27                                        u16 cmd_id, u8 mac_id, u8 vif_id,
  28                                        size_t resp_size)
  29 {
  30         if (unlikely(le16_to_cpu(resp->cmd_id) != cmd_id)) {
  31                 pr_warn("VIF%u.%u CMD%x: bad cmd_id in response: 0x%.4X\n",
  32                         mac_id, vif_id, cmd_id, le16_to_cpu(resp->cmd_id));
  33                 return -EINVAL;
  34         }
  35
  36         if (unlikely(resp->macid != mac_id)) {
  37                 pr_warn("VIF%u.%u CMD%x: bad MAC in response: %u\n",
  38                         mac_id, vif_id, cmd_id, resp->macid);
  39                 return -EINVAL;
  40         }
  41
  42         if (unlikely(resp->vifid != vif_id)) {
  43                 pr_warn("VIF%u.%u CMD%x: bad VIF in response: %u\n",
  44                         mac_id, vif_id, cmd_id, resp->vifid);
  45                 return -EINVAL;
  46         }
  47
  48         if (unlikely(le16_to_cpu(resp->mhdr.len) < resp_size)) {
  49                 pr_warn("VIF%u.%u CMD%x: bad response size %u < %zu\n",
  50                         mac_id, vif_id, cmd_id,
  51                         le16_to_cpu(resp->mhdr.len), resp_size);
  52                 return -ENOSPC;
  53         }
  54
  55         return 0;
  56 }
  57
  58 static int qtnf_cmd_resp_result_decode(enum qlink_cmd_result qcode)
  59 {
  60         switch (qcode) {
  61         case QLINK_CMD_RESULT_OK:
  62                 return 0;
  63         case QLINK_CMD_RESULT_INVALID:
  64                 return -EINVAL;
  65         case QLINK_CMD_RESULT_ENOTSUPP:
  66                 return -ENOTSUPP;
  67         case QLINK_CMD_RESULT_ENOTFOUND:
  68                 return -ENOENT;
  69         case QLINK_CMD_RESULT_EALREADY:
  70                 return -EALREADY;
  71         case QLINK_CMD_RESULT_EADDRINUSE:
  72                 return -EADDRINUSE;
  73         case QLINK_CMD_RESULT_EADDRNOTAVAIL:
  74                 return -EADDRNOTAVAIL;
  75         default:
  76                 return -EFAULT;
  77         }
  78 }
  79
  80 static int qtnf_cmd_send_with_reply(struct qtnf_bus *bus,
  81                                     struct sk_buff *cmd_skb,
  82                                     struct sk_buff **response_skb,
  83                                     u16 *result_code,
  84                                     size_t const_resp_size,
  85                                     size_t *var_resp_size)
  86 {
  87         struct qlink_cmd *cmd;
  88         const struct qlink_resp *resp;
  89         struct sk_buff *resp_skb = NULL;
  90         u16 cmd_id;
  91         u8 mac_id, vif_id;
  92         int ret;
  93
  94         cmd = (struct qlink_cmd *)cmd_skb->data;
  95         cmd_id = le16_to_cpu(cmd->cmd_id);
  96         mac_id = cmd->macid;
  97         vif_id = cmd->vifid;
  98         cmd->mhdr.len = cpu_to_le16(cmd_skb->len);
  99
 100         if (unlikely(bus->fw_state != QTNF_FW_STATE_ACTIVE &&
 101                      le16_to_cpu(cmd->cmd_id) != QLINK_CMD_FW_INIT)) {
 102                 pr_warn("VIF%u.%u: drop cmd 0x%.4X in fw state %d\n",
 103                         mac_id, vif_id, le16_to_cpu(cmd->cmd_id),
 104                         bus->fw_state);
 105                 dev_kfree_skb(cmd_skb);
 106                 return -ENODEV;
 107         }
 108
 109         pr_debug("VIF%u.%u cmd=0x%.4X\n", mac_id, vif_id,
 110                  le16_to_cpu(cmd->cmd_id));
 111
 112         ret = qtnf_trans_send_cmd_with_resp(bus, cmd_skb, &resp_skb);
 113
 114         if (unlikely(ret))
 115                 goto out;
 116
 117         resp = (const struct qlink_resp *)resp_skb->data;
 118         ret = qtnf_cmd_check_reply_header(resp, cmd_id, mac_id, vif_id,
 119                                           const_resp_size);
 120
 121         if (unlikely(ret))
 122                 goto out;
 123
 124         if (likely(result_code))
 125                 *result_code = le16_to_cpu(resp->result);
 126
 127         /* Return length of variable part of response */
 128         if (response_skb && var_resp_size)
 129                 *var_resp_size = le16_to_cpu(resp->mhdr.len) - const_resp_size;
 130
 131 out:
 132         if (response_skb)
 133                 *response_skb = resp_skb;
 134         else
 135                 consume_skb(resp_skb);
 136
 137         return ret;
 138 }
 139
 140 static inline int qtnf_cmd_send(struct qtnf_bus *bus,
 141                                 struct sk_buff *cmd_skb,
 142                                 u16 *result_code)
 143 {
 144         return qtnf_cmd_send_with_reply(bus, cmd_skb, NULL, result_code,
 145                                         sizeof(struct qlink_resp), NULL);
 146 }
 147
 148 static struct sk_buff *qtnf_cmd_alloc_new_cmdskb(u8 macid, u8 vifid, u16 cmd_no,
 149                                                  size_t cmd_size)
 150 {
 151         struct qlink_cmd *cmd;
 152         struct sk_buff *cmd_skb;
 153
 154         cmd_skb = __dev_alloc_skb(sizeof(*cmd) +
 155                                   QTNF_MAX_CMD_BUF_SIZE, GFP_KERNEL);
 156         if (unlikely(!cmd_skb)) {
 157                 pr_err("VIF%u.%u CMD %u: alloc failed\n", macid, vifid, cmd_no);
 158                 return NULL;
 159         }
 160
 161         skb_put_zero(cmd_skb, cmd_size);
 162
 163         cmd = (struct qlink_cmd *)cmd_skb->data;
 164         cmd->mhdr.len = cpu_to_le16(cmd_skb->len);
 165         cmd->mhdr.type = cpu_to_le16(QLINK_MSG_TYPE_CMD);
 166         cmd->cmd_id = cpu_to_le16(cmd_no);
 167         cmd->macid = macid;
 168         cmd->vifid = vifid;
 169
 170         return cmd_skb;
 171 }
 172
 173 static void qtnf_cmd_tlv_ie_set_add(struct sk_buff *cmd_skb, u8 frame_type,
 174                                     const u8 *buf, size_t len)
 175 {
 176         struct qlink_tlv_ie_set *tlv;
 177
 178         tlv = (struct qlink_tlv_ie_set *)skb_put(cmd_skb, sizeof(*tlv) + len);
 179         tlv->hdr.type = cpu_to_le16(QTN_TLV_ID_IE_SET);
 180         tlv->hdr.len = cpu_to_le16(len + sizeof(*tlv) - sizeof(tlv->hdr));
 181         tlv->type = frame_type;
 182         tlv->flags = 0;
 183
 184         if (len && buf)
 185                 memcpy(tlv->ie_data, buf, len);
 186 }
 187
 188 static inline size_t qtnf_cmd_acl_data_size(const struct cfg80211_acl_data *acl)
 189 {
 190         size_t size = sizeof(struct qlink_acl_data) +
 191                       acl->n_acl_entries * sizeof(struct qlink_mac_address);
 192
 193         return size;
 194 }
 195
 196 static bool qtnf_cmd_start_ap_can_fit(const struct qtnf_vif *vif,
 197                                       const struct cfg80211_ap_settings *s)
 198 {
 199         unsigned int len = sizeof(struct qlink_cmd_start_ap);
 200
 201         len += s->ssid_len;
 202         len += s->beacon.head_len;
 203         len += s->beacon.tail_len;
 204         len += s->beacon.beacon_ies_len;
 205         len += s->beacon.proberesp_ies_len;
 206         len += s->beacon.assocresp_ies_len;
 207         len += s->beacon.probe_resp_len;
 208
 209         if (cfg80211_chandef_valid(&s->chandef))
 210                 len += sizeof(struct qlink_tlv_chandef);
 211
 212         if (s->acl)
 213                 len += sizeof(struct qlink_tlv_hdr) +
 214                        qtnf_cmd_acl_data_size(s->acl);
 215
 216         if (len > (sizeof(struct qlink_cmd) + QTNF_MAX_CMD_BUF_SIZE)) {
 217                 pr_err("VIF%u.%u: can not fit AP settings: %u\n",
 218                        vif->mac->macid, vif->vifid, len);
 219                 return false;
 220         }
 221
 222         return true;
 223 }
 224
 225 int qtnf_cmd_send_start_ap(struct qtnf_vif *vif,
 226                            const struct cfg80211_ap_settings *s)
 227 {
 228         struct sk_buff *cmd_skb;
 229         struct qlink_cmd_start_ap *cmd;
 230         struct qlink_auth_encr *aen;
 231         u16 res_code = QLINK_CMD_RESULT_OK;
 232         int ret;
 233         int i;
 234
 235         if (!qtnf_cmd_start_ap_can_fit(vif, s))
 236                 return -E2BIG;
 237
 238         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 239                                             QLINK_CMD_START_AP,
 240                                             sizeof(*cmd));
 241         if (!cmd_skb)
 242                 return -ENOMEM;
 243
 244         cmd = (struct qlink_cmd_start_ap *)cmd_skb->data;
 245         cmd->dtim_period = s->dtim_period;
 246         cmd->beacon_interval = cpu_to_le16(s->beacon_interval);
 247         cmd->hidden_ssid = qlink_hidden_ssid_nl2q(s->hidden_ssid);
 248         cmd->inactivity_timeout = cpu_to_le16(s->inactivity_timeout);
 249         cmd->smps_mode = s->smps_mode;
 250         cmd->p2p_ctwindow = s->p2p_ctwindow;
 251         cmd->p2p_opp_ps = s->p2p_opp_ps;
 252         cmd->pbss = s->pbss;
 253         cmd->ht_required = s->ht_required;
 254         cmd->vht_required = s->vht_required;
 255
 256         aen = &cmd->aen;
 257         aen->auth_type = s->auth_type;
 258         aen->privacy = !!s->privacy;
 259         aen->wpa_versions = cpu_to_le32(s->crypto.wpa_versions);
 260         aen->cipher_group = cpu_to_le32(s->crypto.cipher_group);
 261         aen->n_ciphers_pairwise = cpu_to_le32(s->crypto.n_ciphers_pairwise);
 262         for (i = 0; i < QLINK_MAX_NR_CIPHER_SUITES; i++)
 263                 aen->ciphers_pairwise[i] =
 264                                 cpu_to_le32(s->crypto.ciphers_pairwise[i]);
 265         aen->n_akm_suites = cpu_to_le32(s->crypto.n_akm_suites);
 266         for (i = 0; i < QLINK_MAX_NR_AKM_SUITES; i++)
 267                 aen->akm_suites[i] = cpu_to_le32(s->crypto.akm_suites[i]);
 268         aen->control_port = s->crypto.control_port;
 269         aen->control_port_no_encrypt = s->crypto.control_port_no_encrypt;
 270         aen->control_port_ethertype =
 271                 cpu_to_le16(be16_to_cpu(s->crypto.control_port_ethertype));
 272
 273         if (s->ssid && s->ssid_len > 0 && s->ssid_len <= IEEE80211_MAX_SSID_LEN)
 274                 qtnf_cmd_skb_put_tlv_arr(cmd_skb, WLAN_EID_SSID, s->ssid,
 275                                          s->ssid_len);
 276
 277         if (cfg80211_chandef_valid(&s->chandef)) {
 278                 struct qlink_tlv_chandef *chtlv =
 279                         (struct qlink_tlv_chandef *)skb_put(cmd_skb,
 280                                                             sizeof(*chtlv));
 281
 282                 chtlv->hdr.type = cpu_to_le16(QTN_TLV_ID_CHANDEF);
 283                 chtlv->hdr.len = cpu_to_le16(sizeof(*chtlv) -
 284                                              sizeof(chtlv->hdr));
 285                 qlink_chandef_cfg2q(&s->chandef, &chtlv->chdef);
 286         }
 287
 288         qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_BEACON_HEAD,
 289                                 s->beacon.head, s->beacon.head_len);
 290         qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_BEACON_TAIL,
 291                                 s->beacon.tail, s->beacon.tail_len);
 292         qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_BEACON_IES,
 293                                 s->beacon.beacon_ies, s->beacon.beacon_ies_len);
 294         qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_PROBE_RESP,
 295                                 s->beacon.probe_resp, s->beacon.probe_resp_len);
 296         qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_PROBE_RESP_IES,
 297                                 s->beacon.proberesp_ies,
 298                                 s->beacon.proberesp_ies_len);
 299         qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_ASSOC_RESP,
 300                                 s->beacon.assocresp_ies,
 301                                 s->beacon.assocresp_ies_len);
 302
 303         if (s->ht_cap) {
 304                 struct qlink_tlv_hdr *tlv = (struct qlink_tlv_hdr *)
 305                         skb_put(cmd_skb, sizeof(*tlv) + sizeof(*s->ht_cap));
 306
 307                 tlv->type = cpu_to_le16(WLAN_EID_HT_CAPABILITY);
 308                 tlv->len = cpu_to_le16(sizeof(*s->ht_cap));
 309                 memcpy(tlv->val, s->ht_cap, sizeof(*s->ht_cap));
 310         }
 311
 312         if (s->vht_cap) {
 313                 struct qlink_tlv_hdr *tlv = (struct qlink_tlv_hdr *)
 314                         skb_put(cmd_skb, sizeof(*tlv) + sizeof(*s->vht_cap));
 315
 316                 tlv->type = cpu_to_le16(WLAN_EID_VHT_CAPABILITY);
 317                 tlv->len = cpu_to_le16(sizeof(*s->vht_cap));
 318                 memcpy(tlv->val, s->vht_cap, sizeof(*s->vht_cap));
 319         }
 320
 321         if (s->acl) {
 322                 size_t acl_size = qtnf_cmd_acl_data_size(s->acl);
 323                 struct qlink_tlv_hdr *tlv =
 324                         skb_put(cmd_skb, sizeof(*tlv) + acl_size);
 325
 326                 tlv->type = cpu_to_le16(QTN_TLV_ID_ACL_DATA);
 327                 tlv->len = cpu_to_le16(acl_size);
 328                 qlink_acl_data_cfg2q(s->acl, (struct qlink_acl_data *)tlv->val);
 329         }
 330
 331         qtnf_bus_lock(vif->mac->bus);
 332
 333         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
 334
 335         if (unlikely(ret))
 336                 goto out;
 337
 338         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
 339                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
 340                        vif->vifid, res_code);
 341                 ret = -EFAULT;
 342                 goto out;
 343         }
 344
 345         netif_carrier_on(vif->netdev);
 346
 347 out:
 348         qtnf_bus_unlock(vif->mac->bus);
 349         return ret;
 350 }
 351
 352 int qtnf_cmd_send_stop_ap(struct qtnf_vif *vif)
 353 {
 354         struct sk_buff *cmd_skb;
 355         u16 res_code = QLINK_CMD_RESULT_OK;
 356         int ret;
 357
 358         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 359                                             QLINK_CMD_STOP_AP,
 360                                             sizeof(struct qlink_cmd));
 361         if (!cmd_skb)
 362                 return -ENOMEM;
 363
 364         qtnf_bus_lock(vif->mac->bus);
 365
 366         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
 367
 368         if (unlikely(ret))
 369                 goto out;
 370
 371         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
 372                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
 373                        vif->vifid, res_code);
 374                 ret = -EFAULT;
 375                 goto out;
 376         }
 377
 378         netif_carrier_off(vif->netdev);
 379
 380 out:
 381         qtnf_bus_unlock(vif->mac->bus);
 382         return ret;
 383 }
 384
 385 int qtnf_cmd_send_register_mgmt(struct qtnf_vif *vif, u16 frame_type, bool reg)
 386 {
 387         struct sk_buff *cmd_skb;
 388         struct qlink_cmd_mgmt_frame_register *cmd;
 389         u16 res_code = QLINK_CMD_RESULT_OK;
 390         int ret;
 391
 392         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 393                                             QLINK_CMD_REGISTER_MGMT,
 394                                             sizeof(*cmd));
 395         if (!cmd_skb)
 396                 return -ENOMEM;
 397
 398         qtnf_bus_lock(vif->mac->bus);
 399
 400         cmd = (struct qlink_cmd_mgmt_frame_register *)cmd_skb->data;
 401         cmd->frame_type = cpu_to_le16(frame_type);
 402         cmd->do_register = reg;
 403
 404         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
 405
 406         if (unlikely(ret))
 407                 goto out;
 408
 409         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
 410                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
 411                        vif->vifid, res_code);
 412                 ret = -EFAULT;
 413                 goto out;
 414         }
 415
 416 out:
 417         qtnf_bus_unlock(vif->mac->bus);
 418         return ret;
 419 }
 420
 421 int qtnf_cmd_send_mgmt_frame(struct qtnf_vif *vif, u32 cookie, u16 flags,
 422                              u16 freq, const u8 *buf, size_t len)
 423 {
 424         struct sk_buff *cmd_skb;
 425         struct qlink_cmd_mgmt_frame_tx *cmd;
 426         u16 res_code = QLINK_CMD_RESULT_OK;
 427         int ret;
 428
 429         if (sizeof(*cmd) + len > QTNF_MAX_CMD_BUF_SIZE) {
 430                 pr_warn("VIF%u.%u: frame is too big: %zu\n", vif->mac->macid,
 431                         vif->vifid, len);
 432                 return -E2BIG;
 433         }
 434
 435         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 436                                             QLINK_CMD_SEND_MGMT_FRAME,
 437                                             sizeof(*cmd));
 438         if (!cmd_skb)
 439                 return -ENOMEM;
 440
 441         qtnf_bus_lock(vif->mac->bus);
 442
 443         cmd = (struct qlink_cmd_mgmt_frame_tx *)cmd_skb->data;
 444         cmd->cookie = cpu_to_le32(cookie);
 445         cmd->freq = cpu_to_le16(freq);
 446         cmd->flags = cpu_to_le16(flags);
 447
 448         if (len && buf)
 449                 qtnf_cmd_skb_put_buffer(cmd_skb, buf, len);
 450
 451         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
 452
 453         if (unlikely(ret))
 454                 goto out;
 455
 456         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
 457                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
 458                        vif->vifid, res_code);
 459                 ret = -EFAULT;
 460                 goto out;
 461         }
 462
 463 out:
 464         qtnf_bus_unlock(vif->mac->bus);
 465         return ret;
 466 }
 467
 468 int qtnf_cmd_send_mgmt_set_appie(struct qtnf_vif *vif, u8 frame_type,
 469                                  const u8 *buf, size_t len)
 470 {
 471         struct sk_buff *cmd_skb;
 472         u16 res_code = QLINK_CMD_RESULT_OK;
 473         int ret;
 474
 475         if (len > QTNF_MAX_CMD_BUF_SIZE) {
 476                 pr_warn("VIF%u.%u: %u frame is too big: %zu\n", vif->mac->macid,
 477                         vif->vifid, frame_type, len);
 478                 return -E2BIG;
 479         }
 480
 481         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 482                                             QLINK_CMD_MGMT_SET_APPIE,
 483                                             sizeof(struct qlink_cmd));
 484         if (!cmd_skb)
 485                 return -ENOMEM;
 486
 487         qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type, buf, len);
 488
 489         qtnf_bus_lock(vif->mac->bus);
 490
 491         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
 492
 493         if (unlikely(ret))
 494                 goto out;
 495
 496         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
 497                 pr_err("VIF%u.%u frame %u: CMD failed: %u\n", vif->mac->macid,
 498                        vif->vifid, frame_type, res_code);
 499                 ret = -EFAULT;
 500                 goto out;
 501         }
 502
 503 out:
 504         qtnf_bus_unlock(vif->mac->bus);
 505         return ret;
 506 }
 507
 508 static void
 509 qtnf_sta_info_parse_rate(struct rate_info *rate_dst,
 510                          const struct qlink_sta_info_rate *rate_src)
 511 {
 512         rate_dst->legacy = get_unaligned_le16(&rate_src->rate) * 10;
 513
 514         rate_dst->mcs = rate_src->mcs;
 515         rate_dst->nss = rate_src->nss;
 516         rate_dst->flags = 0;
 517
 518         switch (rate_src->bw) {
 519         case QLINK_CHAN_WIDTH_5:
 520                 rate_dst->bw = RATE_INFO_BW_5;
 521                 break;
 522         case QLINK_CHAN_WIDTH_10:
 523                 rate_dst->bw = RATE_INFO_BW_10;
 524                 break;
 525         case QLINK_CHAN_WIDTH_20:
 526         case QLINK_CHAN_WIDTH_20_NOHT:
 527                 rate_dst->bw = RATE_INFO_BW_20;
 528                 break;
 529         case QLINK_CHAN_WIDTH_40:
 530                 rate_dst->bw = RATE_INFO_BW_40;
 531                 break;
 532         case QLINK_CHAN_WIDTH_80:
 533                 rate_dst->bw = RATE_INFO_BW_80;
 534                 break;
 535         case QLINK_CHAN_WIDTH_160:
 536                 rate_dst->bw = RATE_INFO_BW_160;
 537                 break;
 538         default:
 539                 rate_dst->bw = 0;
 540                 break;
 541         }
 542
 543         if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_HT_MCS)
 544                 rate_dst->flags |= RATE_INFO_FLAGS_MCS;
 545         else if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_VHT_MCS)
 546                 rate_dst->flags |= RATE_INFO_FLAGS_VHT_MCS;
 547
 548         if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_SHORT_GI)
 549                 rate_dst->flags |= RATE_INFO_FLAGS_SHORT_GI;
 550 }
 551
 552 static void
 553 qtnf_sta_info_parse_flags(struct nl80211_sta_flag_update *dst,
 554                           const struct qlink_sta_info_state *src)
 555 {
 556         u32 mask, value;
 557
 558         dst->mask = 0;
 559         dst->set = 0;
 560
 561         mask = le32_to_cpu(src->mask);
 562         value = le32_to_cpu(src->value);
 563
 564         if (mask & QLINK_STA_FLAG_AUTHORIZED) {
 565                 dst->mask |= BIT(NL80211_STA_FLAG_AUTHORIZED);
 566                 if (value & QLINK_STA_FLAG_AUTHORIZED)
 567                         dst->set |= BIT(NL80211_STA_FLAG_AUTHORIZED);
 568         }
 569
 570         if (mask & QLINK_STA_FLAG_SHORT_PREAMBLE) {
 571                 dst->mask |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE);
 572                 if (value & QLINK_STA_FLAG_SHORT_PREAMBLE)
 573                         dst->set |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE);
 574         }
 575
 576         if (mask & QLINK_STA_FLAG_WME) {
 577                 dst->mask |= BIT(NL80211_STA_FLAG_WME);
 578                 if (value & QLINK_STA_FLAG_WME)
 579                         dst->set |= BIT(NL80211_STA_FLAG_WME);
 580         }
 581
 582         if (mask & QLINK_STA_FLAG_MFP) {
 583                 dst->mask |= BIT(NL80211_STA_FLAG_MFP);
 584                 if (value & QLINK_STA_FLAG_MFP)
 585                         dst->set |= BIT(NL80211_STA_FLAG_MFP);
 586         }
 587
 588         if (mask & QLINK_STA_FLAG_AUTHENTICATED) {
 589                 dst->mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
 590                 if (value & QLINK_STA_FLAG_AUTHENTICATED)
 591                         dst->set |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
 592         }
 593
 594         if (mask & QLINK_STA_FLAG_TDLS_PEER) {
 595                 dst->mask |= BIT(NL80211_STA_FLAG_TDLS_PEER);
 596                 if (value & QLINK_STA_FLAG_TDLS_PEER)
 597                         dst->set |= BIT(NL80211_STA_FLAG_TDLS_PEER);
 598         }
 599
 600         if (mask & QLINK_STA_FLAG_ASSOCIATED) {
 601                 dst->mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
 602                 if (value & QLINK_STA_FLAG_ASSOCIATED)
 603                         dst->set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
 604         }
 605 }
 606
 607 static void
 608 qtnf_cmd_sta_info_parse(struct station_info *sinfo,
 609                         const struct qlink_tlv_hdr *tlv,
 610                         size_t resp_size)
 611 {
 612         const struct qlink_sta_stats *stats = NULL;
 613         const u8 *map = NULL;
 614         unsigned int map_len = 0;
 615         unsigned int stats_len = 0;
 616         u16 tlv_len;
 617
 618 #define qtnf_sta_stat_avail(stat_name, bitn)    \
 619         (qtnf_utils_is_bit_set(map, bitn, map_len) && \
 620          (offsetofend(struct qlink_sta_stats, stat_name) <= stats_len))
 621
 622         while (resp_size >= sizeof(*tlv)) {
 623                 tlv_len = le16_to_cpu(tlv->len);
 624
 625                 switch (le16_to_cpu(tlv->type)) {
 626                 case QTN_TLV_ID_STA_STATS_MAP:
 627                         map_len = tlv_len;
 628                         map = tlv->val;
 629                         break;
 630                 case QTN_TLV_ID_STA_STATS:
 631                         stats_len = tlv_len;
 632                         stats = (const struct qlink_sta_stats *)tlv->val;
 633                         break;
 634                 default:
 635                         break;
 636                 }
 637
 638                 resp_size -= tlv_len + sizeof(*tlv);
 639                 tlv = (const struct qlink_tlv_hdr *)(tlv->val + tlv_len);
 640         }
 641
 642         if (!map || !stats)
 643                 return;
 644
 645         if (qtnf_sta_stat_avail(inactive_time, QLINK_STA_INFO_INACTIVE_TIME)) {
 646                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_INACTIVE_TIME);
 647                 sinfo->inactive_time = le32_to_cpu(stats->inactive_time);
 648         }
 649
 650         if (qtnf_sta_stat_avail(connected_time,
 651                                 QLINK_STA_INFO_CONNECTED_TIME)) {
 652                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_CONNECTED_TIME);
 653                 sinfo->connected_time = le32_to_cpu(stats->connected_time);
 654         }
 655
 656         if (qtnf_sta_stat_avail(signal, QLINK_STA_INFO_SIGNAL)) {
 657                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_SIGNAL);
 658                 sinfo->signal = stats->signal - QLINK_RSSI_OFFSET;
 659         }
 660
 661         if (qtnf_sta_stat_avail(signal_avg, QLINK_STA_INFO_SIGNAL_AVG)) {
 662                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_SIGNAL_AVG);
 663                 sinfo->signal_avg = stats->signal_avg - QLINK_RSSI_OFFSET;
 664         }
 665
 666         if (qtnf_sta_stat_avail(rxrate, QLINK_STA_INFO_RX_BITRATE)) {
 667                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BITRATE);
 668                 qtnf_sta_info_parse_rate(&sinfo->rxrate, &stats->rxrate);
 669         }
 670
 671         if (qtnf_sta_stat_avail(txrate, QLINK_STA_INFO_TX_BITRATE)) {
 672                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BITRATE);
 673                 qtnf_sta_info_parse_rate(&sinfo->txrate, &stats->txrate);
 674         }
 675
 676         if (qtnf_sta_stat_avail(sta_flags, QLINK_STA_INFO_STA_FLAGS)) {
 677                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_STA_FLAGS);
 678                 qtnf_sta_info_parse_flags(&sinfo->sta_flags, &stats->sta_flags);
 679         }
 680
 681         if (qtnf_sta_stat_avail(rx_bytes, QLINK_STA_INFO_RX_BYTES)) {
 682                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BYTES);
 683                 sinfo->rx_bytes = le64_to_cpu(stats->rx_bytes);
 684         }
 685
 686         if (qtnf_sta_stat_avail(tx_bytes, QLINK_STA_INFO_TX_BYTES)) {
 687                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BYTES);
 688                 sinfo->tx_bytes = le64_to_cpu(stats->tx_bytes);
 689         }
 690
 691         if (qtnf_sta_stat_avail(rx_bytes, QLINK_STA_INFO_RX_BYTES64)) {
 692                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BYTES64);
 693                 sinfo->rx_bytes = le64_to_cpu(stats->rx_bytes);
 694         }
 695
 696         if (qtnf_sta_stat_avail(tx_bytes, QLINK_STA_INFO_TX_BYTES64)) {
 697                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BYTES64);
 698                 sinfo->tx_bytes = le64_to_cpu(stats->tx_bytes);
 699         }
 700
 701         if (qtnf_sta_stat_avail(rx_packets, QLINK_STA_INFO_RX_PACKETS)) {
 702                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_PACKETS);
 703                 sinfo->rx_packets = le32_to_cpu(stats->rx_packets);
 704         }
 705
 706         if (qtnf_sta_stat_avail(tx_packets, QLINK_STA_INFO_TX_PACKETS)) {
 707                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_PACKETS);
 708                 sinfo->tx_packets = le32_to_cpu(stats->tx_packets);
 709         }
 710
 711         if (qtnf_sta_stat_avail(rx_beacon, QLINK_STA_INFO_BEACON_RX)) {
 712                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_BEACON_RX);
 713                 sinfo->rx_beacon = le64_to_cpu(stats->rx_beacon);
 714         }
 715
 716         if (qtnf_sta_stat_avail(rx_dropped_misc, QLINK_STA_INFO_RX_DROP_MISC)) {
 717                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_DROP_MISC);
 718                 sinfo->rx_dropped_misc = le32_to_cpu(stats->rx_dropped_misc);
 719         }
 720
 721         if (qtnf_sta_stat_avail(tx_failed, QLINK_STA_INFO_TX_FAILED)) {
 722                 sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_FAILED);
 723                 sinfo->tx_failed = le32_to_cpu(stats->tx_failed);
 724         }
 725
 726 #undef qtnf_sta_stat_avail
 727 }
 728
 729 int qtnf_cmd_get_sta_info(struct qtnf_vif *vif, const u8 *sta_mac,
 730                           struct station_info *sinfo)
 731 {
 732         struct sk_buff *cmd_skb, *resp_skb = NULL;
 733         struct qlink_cmd_get_sta_info *cmd;
 734         const struct qlink_resp_get_sta_info *resp;
 735         size_t var_resp_len;
 736         u16 res_code = QLINK_CMD_RESULT_OK;
 737         int ret = 0;
 738
 739         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 740                                             QLINK_CMD_GET_STA_INFO,
 741                                             sizeof(*cmd));
 742         if (!cmd_skb)
 743                 return -ENOMEM;
 744
 745         qtnf_bus_lock(vif->mac->bus);
 746
 747         cmd = (struct qlink_cmd_get_sta_info *)cmd_skb->data;
 748         ether_addr_copy(cmd->sta_addr, sta_mac);
 749
 750         ret = qtnf_cmd_send_with_reply(vif->mac->bus, cmd_skb, &resp_skb,
 751                                        &res_code, sizeof(*resp),
 752                                        &var_resp_len);
 753
 754         if (unlikely(ret))
 755                 goto out;
 756
 757         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
 758                 switch (res_code) {
 759                 case QLINK_CMD_RESULT_ENOTFOUND:
 760                         pr_warn("VIF%u.%u: %pM STA not found\n",
 761                                 vif->mac->macid, vif->vifid, sta_mac);
 762                         ret = -ENOENT;
 763                         break;
 764                 default:
 765                         pr_err("VIF%u.%u: can't get info for %pM: %u\n",
 766                                vif->mac->macid, vif->vifid, sta_mac, res_code);
 767                         ret = -EFAULT;
 768                         break;
 769                 }
 770                 goto out;
 771         }
 772
 773         resp = (const struct qlink_resp_get_sta_info *)resp_skb->data;
 774
 775         if (unlikely(!ether_addr_equal(sta_mac, resp->sta_addr))) {
 776                 pr_err("VIF%u.%u: wrong mac in reply: %pM != %pM\n",
 777                        vif->mac->macid, vif->vifid, resp->sta_addr, sta_mac);
 778                 ret = -EINVAL;
 779                 goto out;
 780         }
 781
 782         qtnf_cmd_sta_info_parse(sinfo,
 783                                 (const struct qlink_tlv_hdr *)resp->info,
 784                                 var_resp_len);
 785
 786 out:
 787         qtnf_bus_unlock(vif->mac->bus);
 788         consume_skb(resp_skb);
 789
 790         return ret;
 791 }
 792
 793 static int qtnf_cmd_send_add_change_intf(struct qtnf_vif *vif,
 794                                          enum nl80211_iftype iftype,
 795                                          u8 *mac_addr,
 796                                          enum qlink_cmd_type cmd_type)
 797 {
 798         struct sk_buff *cmd_skb, *resp_skb = NULL;
 799         struct qlink_cmd_manage_intf *cmd;
 800         const struct qlink_resp_manage_intf *resp;
 801         u16 res_code = QLINK_CMD_RESULT_OK;
 802         int ret = 0;
 803
 804         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 805                                             cmd_type,
 806                                             sizeof(*cmd));
 807         if (!cmd_skb)
 808                 return -ENOMEM;
 809
 810         qtnf_bus_lock(vif->mac->bus);
 811
 812         cmd = (struct qlink_cmd_manage_intf *)cmd_skb->data;
 813
 814         switch (iftype) {
 815         case NL80211_IFTYPE_AP:
 816                 cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_AP);
 817                 break;
 818         case NL80211_IFTYPE_STATION:
 819                 cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
 820                 break;
 821         default:
 822                 pr_err("VIF%u.%u: unsupported type %d\n", vif->mac->macid,
 823                        vif->vifid, iftype);
 824                 ret = -EINVAL;
 825                 goto out;
 826         }
 827
 828         if (mac_addr)
 829                 ether_addr_copy(cmd->intf_info.mac_addr, mac_addr);
 830         else
 831                 eth_zero_addr(cmd->intf_info.mac_addr);
 832
 833         ret = qtnf_cmd_send_with_reply(vif->mac->bus, cmd_skb, &resp_skb,
 834                                        &res_code, sizeof(*resp), NULL);
 835
 836         if (unlikely(ret))
 837                 goto out;
 838
 839         ret = qtnf_cmd_resp_result_decode(res_code);
 840         if (ret) {
 841                 pr_err("VIF%u.%u: CMD %d failed: %u\n", vif->mac->macid,
 842                        vif->vifid, cmd_type, res_code);
 843                 goto out;
 844         }
 845
 846         resp = (const struct qlink_resp_manage_intf *)resp_skb->data;
 847         ether_addr_copy(vif->mac_addr, resp->intf_info.mac_addr);
 848
 849 out:
 850         qtnf_bus_unlock(vif->mac->bus);
 851         consume_skb(resp_skb);
 852
 853         return ret;
 854 }
 855
 856 int qtnf_cmd_send_add_intf(struct qtnf_vif *vif,
 857                            enum nl80211_iftype iftype, u8 *mac_addr)
 858 {
 859         return qtnf_cmd_send_add_change_intf(vif, iftype, mac_addr,
 860                         QLINK_CMD_ADD_INTF);
 861 }
 862
 863 int qtnf_cmd_send_change_intf_type(struct qtnf_vif *vif,
 864                                    enum nl80211_iftype iftype, u8 *mac_addr)
 865 {
 866         return qtnf_cmd_send_add_change_intf(vif, iftype, mac_addr,
 867                                              QLINK_CMD_CHANGE_INTF);
 868 }
 869
 870 int qtnf_cmd_send_del_intf(struct qtnf_vif *vif)
 871 {
 872         struct sk_buff *cmd_skb;
 873         struct qlink_cmd_manage_intf *cmd;
 874         u16 res_code = QLINK_CMD_RESULT_OK;
 875         int ret = 0;
 876
 877         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
 878                                             QLINK_CMD_DEL_INTF,
 879                                             sizeof(*cmd));
 880         if (!cmd_skb)
 881                 return -ENOMEM;
 882
 883         qtnf_bus_lock(vif->mac->bus);
 884
 885         cmd = (struct qlink_cmd_manage_intf *)cmd_skb->data;
 886
 887         switch (vif->wdev.iftype) {
 888         case NL80211_IFTYPE_AP:
 889                 cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_AP);
 890                 break;
 891         case NL80211_IFTYPE_STATION:
 892                 cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
 893                 break;
 894         default:
 895                 pr_warn("VIF%u.%u: unsupported iftype %d\n", vif->mac->macid,
 896                         vif->vifid, vif->wdev.iftype);
 897                 dev_kfree_skb(cmd_skb);
 898                 ret = -EINVAL;
 899                 goto out;
 900         }
 901
 902         eth_zero_addr(cmd->intf_info.mac_addr);
 903
 904         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
 905
 906         if (unlikely(ret))
 907                 goto out;
 908
 909         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
 910                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
 911                        vif->vifid, res_code);
 912                 ret = -EFAULT;
 913                 goto out;
 914         }
 915
 916 out:
 917         qtnf_bus_unlock(vif->mac->bus);
 918         return ret;
 919 }
 920
 921 static u32 qtnf_cmd_resp_reg_rule_flags_parse(u32 qflags)
 922 {
 923         u32 flags = 0;
 924
 925         if (qflags & QLINK_RRF_NO_OFDM)
 926                 flags |= NL80211_RRF_NO_OFDM;
 927
 928         if (qflags & QLINK_RRF_NO_CCK)
 929                 flags |= NL80211_RRF_NO_CCK;
 930
 931         if (qflags & QLINK_RRF_NO_INDOOR)
 932                 flags |= NL80211_RRF_NO_INDOOR;
 933
 934         if (qflags & QLINK_RRF_NO_OUTDOOR)
 935                 flags |= NL80211_RRF_NO_OUTDOOR;
 936
 937         if (qflags & QLINK_RRF_DFS)
 938                 flags |= NL80211_RRF_DFS;
 939
 940         if (qflags & QLINK_RRF_PTP_ONLY)
 941                 flags |= NL80211_RRF_PTP_ONLY;
 942
 943         if (qflags & QLINK_RRF_PTMP_ONLY)
 944                 flags |= NL80211_RRF_PTMP_ONLY;
 945
 946         if (qflags & QLINK_RRF_NO_IR)
 947                 flags |= NL80211_RRF_NO_IR;
 948
 949         if (qflags & QLINK_RRF_AUTO_BW)
 950                 flags |= NL80211_RRF_AUTO_BW;
 951
 952         if (qflags & QLINK_RRF_IR_CONCURRENT)
 953                 flags |= NL80211_RRF_IR_CONCURRENT;
 954
 955         if (qflags & QLINK_RRF_NO_HT40MINUS)
 956                 flags |= NL80211_RRF_NO_HT40MINUS;
 957
 958         if (qflags & QLINK_RRF_NO_HT40PLUS)
 959                 flags |= NL80211_RRF_NO_HT40PLUS;
 960
 961         if (qflags & QLINK_RRF_NO_80MHZ)
 962                 flags |= NL80211_RRF_NO_80MHZ;
 963
 964         if (qflags & QLINK_RRF_NO_160MHZ)
 965                 flags |= NL80211_RRF_NO_160MHZ;
 966
 967         return flags;
 968 }
 969
 970 static int
 971 qtnf_cmd_resp_proc_hw_info(struct qtnf_bus *bus,
 972                            const struct qlink_resp_get_hw_info *resp,
 973                            size_t info_len)
 974 {
 975         struct qtnf_hw_info *hwinfo = &bus->hw_info;
 976         const struct qlink_tlv_hdr *tlv;
 977         const struct qlink_tlv_reg_rule *tlv_rule;
 978         const char *bld_name = NULL;
 979         const char *bld_rev = NULL;
 980         const char *bld_type = NULL;
 981         const char *bld_label = NULL;
 982         u32 bld_tmstamp = 0;
 983         u32 plat_id = 0;
 984         const char *hw_id = NULL;
 985         const char *calibration_ver = NULL;
 986         const char *uboot_ver = NULL;
 987         u32 hw_ver = 0;
 988         struct ieee80211_reg_rule *rule;
 989         u16 tlv_type;
 990         u16 tlv_value_len;
 991         unsigned int rule_idx = 0;
 992
 993         if (WARN_ON(resp->n_reg_rules > NL80211_MAX_SUPP_REG_RULES))
 994                 return -E2BIG;
 995
 996         hwinfo->rd = kzalloc(sizeof(*hwinfo->rd)
 997                              + sizeof(struct ieee80211_reg_rule)
 998                              * resp->n_reg_rules, GFP_KERNEL);
 999
1000         if (!hwinfo->rd)
1001                 return -ENOMEM;
1002
1003         hwinfo->num_mac = resp->num_mac;
1004         hwinfo->mac_bitmap = resp->mac_bitmap;
1005         hwinfo->fw_ver = le32_to_cpu(resp->fw_ver);
1006         hwinfo->ql_proto_ver = le16_to_cpu(resp->ql_proto_ver);
1007         hwinfo->total_tx_chain = resp->total_tx_chain;
1008         hwinfo->total_rx_chain = resp->total_rx_chain;
1009         hwinfo->hw_capab = le32_to_cpu(resp->hw_capab);
1010         hwinfo->rd->n_reg_rules = resp->n_reg_rules;
1011         hwinfo->rd->alpha2[0] = resp->alpha2[0];
1012         hwinfo->rd->alpha2[1] = resp->alpha2[1];
1013
1014         bld_tmstamp = le32_to_cpu(resp->bld_tmstamp);
1015         plat_id = le32_to_cpu(resp->plat_id);
1016         hw_ver = le32_to_cpu(resp->hw_ver);
1017
1018         switch (resp->dfs_region) {
1019         case QLINK_DFS_FCC:
1020                 hwinfo->rd->dfs_region = NL80211_DFS_FCC;
1021                 break;
1022         case QLINK_DFS_ETSI:
1023                 hwinfo->rd->dfs_region = NL80211_DFS_ETSI;
1024                 break;
1025         case QLINK_DFS_JP:
1026                 hwinfo->rd->dfs_region = NL80211_DFS_JP;
1027                 break;
1028         case QLINK_DFS_UNSET:
1029         default:
1030                 hwinfo->rd->dfs_region = NL80211_DFS_UNSET;
1031                 break;
1032         }
1033
1034         tlv = (const struct qlink_tlv_hdr *)resp->info;
1035
1036         while (info_len >= sizeof(*tlv)) {
1037                 tlv_type = le16_to_cpu(tlv->type);
1038                 tlv_value_len = le16_to_cpu(tlv->len);
1039
1040                 if (tlv_value_len + sizeof(*tlv) > info_len) {
1041                         pr_warn("malformed TLV 0x%.2X; LEN: %u\n",
1042                                 tlv_type, tlv_value_len);
1043                         return -EINVAL;
1044                 }
1045
1046                 switch (tlv_type) {
1047                 case QTN_TLV_ID_REG_RULE:
1048                         if (rule_idx >= resp->n_reg_rules) {
1049                                 pr_warn("unexpected number of rules: %u\n",
1050                                         resp->n_reg_rules);
1051                                 return -EINVAL;
1052                         }
1053
1054                         if (tlv_value_len != sizeof(*tlv_rule) - sizeof(*tlv)) {
1055                                 pr_warn("malformed TLV 0x%.2X; LEN: %u\n",
1056                                         tlv_type, tlv_value_len);
1057                                 return -EINVAL;
1058                         }
1059
1060                         tlv_rule = (const struct qlink_tlv_reg_rule *)tlv;
1061                         rule = &hwinfo->rd->reg_rules[rule_idx++];
1062
1063                         rule->freq_range.start_freq_khz =
1064                                 le32_to_cpu(tlv_rule->start_freq_khz);
1065                         rule->freq_range.end_freq_khz =
1066                                 le32_to_cpu(tlv_rule->end_freq_khz);
1067                         rule->freq_range.max_bandwidth_khz =
1068                                 le32_to_cpu(tlv_rule->max_bandwidth_khz);
1069                         rule->power_rule.max_antenna_gain =
1070                                 le32_to_cpu(tlv_rule->max_antenna_gain);
1071                         rule->power_rule.max_eirp =
1072                                 le32_to_cpu(tlv_rule->max_eirp);
1073                         rule->dfs_cac_ms =
1074                                 le32_to_cpu(tlv_rule->dfs_cac_ms);
1075                         rule->flags = qtnf_cmd_resp_reg_rule_flags_parse(
1076                                         le32_to_cpu(tlv_rule->flags));
1077                         break;
1078                 case QTN_TLV_ID_BUILD_NAME:
1079                         bld_name = (const void *)tlv->val;
1080                         break;
1081                 case QTN_TLV_ID_BUILD_REV:
1082                         bld_rev = (const void *)tlv->val;
1083                         break;
1084                 case QTN_TLV_ID_BUILD_TYPE:
1085                         bld_type = (const void *)tlv->val;
1086                         break;
1087                 case QTN_TLV_ID_BUILD_LABEL:
1088                         bld_label = (const void *)tlv->val;
1089                         break;
1090                 case QTN_TLV_ID_HW_ID:
1091                         hw_id = (const void *)tlv->val;
1092                         break;
1093                 case QTN_TLV_ID_CALIBRATION_VER:
1094                         calibration_ver = (const void *)tlv->val;
1095                         break;
1096                 case QTN_TLV_ID_UBOOT_VER:
1097                         uboot_ver = (const void *)tlv->val;
1098                         break;
1099                 case QTN_TLV_ID_MAX_SCAN_SSIDS:
1100                         hwinfo->max_scan_ssids = *tlv->val;
1101                         break;
1102                 default:
1103                         break;
1104                 }
1105
1106                 info_len -= tlv_value_len + sizeof(*tlv);
1107                 tlv = (struct qlink_tlv_hdr *)(tlv->val + tlv_value_len);
1108         }
1109
1110         if (rule_idx != resp->n_reg_rules) {
1111                 pr_warn("unexpected number of rules: expected %u got %u\n",
1112                         resp->n_reg_rules, rule_idx);
1113                 kfree(hwinfo->rd);
1114                 hwinfo->rd = NULL;
1115                 return -EINVAL;
1116         }
1117
1118         pr_info("fw_version=%d, MACs map %#x, alpha2=\"%c%c\", chains Tx=%u Rx=%u, capab=0x%x\n",
1119                 hwinfo->fw_ver, hwinfo->mac_bitmap,
1120                 hwinfo->rd->alpha2[0], hwinfo->rd->alpha2[1],
1121                 hwinfo->total_tx_chain, hwinfo->total_rx_chain,
1122                 hwinfo->hw_capab);
1123
1124         pr_info("\nBuild name:            %s"  \
1125                 "\nBuild revision:        %s"  \
1126                 "\nBuild type:            %s"  \
1127                 "\nBuild label:           %s"  \
1128                 "\nBuild timestamp:       %lu" \
1129                 "\nPlatform ID:           %lu" \
1130                 "\nHardware ID:           %s"  \
1131                 "\nCalibration version:   %s"  \
1132                 "\nU-Boot version:        %s"  \
1133                 "\nHardware version:      0x%08x",
1134                 bld_name, bld_rev, bld_type, bld_label,
1135                 (unsigned long)bld_tmstamp,
1136                 (unsigned long)plat_id,
1137                 hw_id, calibration_ver, uboot_ver, hw_ver);
1138
1139         strlcpy(hwinfo->fw_version, bld_label, sizeof(hwinfo->fw_version));
1140         hwinfo->hw_version = hw_ver;
1141
1142         return 0;
1143 }
1144
1145 static void
1146 qtnf_parse_wowlan_info(struct qtnf_wmac *mac,
1147                        const struct qlink_wowlan_capab_data *wowlan)
1148 {
1149         struct qtnf_mac_info *mac_info = &mac->macinfo;
1150         const struct qlink_wowlan_support *data1;
1151         struct wiphy_wowlan_support *supp;
1152
1153         supp = kzalloc(sizeof(*supp), GFP_KERNEL);
1154         if (!supp)
1155                 return;
1156
1157         switch (le16_to_cpu(wowlan->version)) {
1158         case 0x1:
1159                 data1 = (struct qlink_wowlan_support *)wowlan->data;
1160
1161                 supp->flags = WIPHY_WOWLAN_MAGIC_PKT | WIPHY_WOWLAN_DISCONNECT;
1162                 supp->n_patterns = le32_to_cpu(data1->n_patterns);
1163                 supp->pattern_max_len = le32_to_cpu(data1->pattern_max_len);
1164                 supp->pattern_min_len = le32_to_cpu(data1->pattern_min_len);
1165
1166                 mac_info->wowlan = supp;
1167                 break;
1168         default:
1169                 pr_warn("MAC%u: unsupported WoWLAN version 0x%x\n",
1170                         mac->macid, le16_to_cpu(wowlan->version));
1171                 kfree(supp);
1172                 break;
1173         }
1174 }
1175
1176 static int qtnf_parse_variable_mac_info(struct qtnf_wmac *mac,
1177                                         const u8 *tlv_buf, size_t tlv_buf_size)
1178 {
1179         struct ieee80211_iface_combination *comb = NULL;
1180         size_t n_comb = 0;
1181         struct ieee80211_iface_limit *limits;
1182         const struct qlink_iface_comb_num *comb_num;
1183         const struct qlink_iface_limit_record *rec;
1184         const struct qlink_iface_limit *lim;
1185         const struct qlink_wowlan_capab_data *wowlan;
1186         u16 rec_len;
1187         u16 tlv_type;
1188         u16 tlv_value_len;
1189         size_t tlv_full_len;
1190         const struct qlink_tlv_hdr *tlv;
1191         u8 *ext_capa = NULL;
1192         u8 *ext_capa_mask = NULL;
1193         u8 ext_capa_len = 0;
1194         u8 ext_capa_mask_len = 0;
1195         int i = 0;
1196
1197         tlv = (const struct qlink_tlv_hdr *)tlv_buf;
1198         while (tlv_buf_size >= sizeof(struct qlink_tlv_hdr)) {
1199                 tlv_type = le16_to_cpu(tlv->type);
1200                 tlv_value_len = le16_to_cpu(tlv->len);
1201                 tlv_full_len = tlv_value_len + sizeof(struct qlink_tlv_hdr);
1202                 if (tlv_full_len > tlv_buf_size) {
1203                         pr_warn("MAC%u: malformed TLV 0x%.2X; LEN: %u\n",
1204                                 mac->macid, tlv_type, tlv_value_len);
1205                         return -EINVAL;
1206                 }
1207
1208                 switch (tlv_type) {
1209                 case QTN_TLV_ID_NUM_IFACE_COMB:
1210                         if (tlv_value_len != sizeof(*comb_num))
1211                                 return -EINVAL;
1212
1213                         comb_num = (void *)tlv->val;
1214
1215                         /* free earlier iface comb memory */
1216                         qtnf_mac_iface_comb_free(mac);
1217
1218                         mac->macinfo.n_if_comb =
1219                                 le32_to_cpu(comb_num->iface_comb_num);
1220
1221                         mac->macinfo.if_comb =
1222                                 kcalloc(mac->macinfo.n_if_comb,
1223                                         sizeof(*mac->macinfo.if_comb),
1224                                         GFP_KERNEL);
1225
1226                         if (!mac->macinfo.if_comb)
1227                                 return -ENOMEM;
1228
1229                         comb = mac->macinfo.if_comb;
1230
1231                         pr_debug("MAC%u: %zu iface combinations\n",
1232                                  mac->macid, mac->macinfo.n_if_comb);
1233
1234                         break;
1235                 case QTN_TLV_ID_IFACE_LIMIT:
1236                         if (unlikely(!comb)) {
1237                                 pr_warn("MAC%u: no combinations advertised\n",
1238                                         mac->macid);
1239                                 return -EINVAL;
1240                         }
1241
1242                         if (n_comb >= mac->macinfo.n_if_comb) {
1243                                 pr_warn("MAC%u: combinations count exceeded\n",
1244                                         mac->macid);
1245                                 n_comb++;
1246                                 break;
1247                         }
1248
1249                         rec = (void *)tlv->val;
1250                         rec_len = sizeof(*rec) + rec->n_limits * sizeof(*lim);
1251
1252                         if (unlikely(tlv_value_len != rec_len)) {
1253                                 pr_warn("MAC%u: record %zu size mismatch\n",
1254                                         mac->macid, n_comb);
1255                                 return -EINVAL;
1256                         }
1257
1258                         limits = kcalloc(rec->n_limits, sizeof(*limits),
1259                                          GFP_KERNEL);
1260                         if (!limits)
1261                                 return -ENOMEM;
1262
1263                         comb[n_comb].num_different_channels =
1264                                 rec->num_different_channels;
1265                         comb[n_comb].max_interfaces =
1266                                 le16_to_cpu(rec->max_interfaces);
1267                         comb[n_comb].n_limits = rec->n_limits;
1268                         comb[n_comb].limits = limits;
1269
1270                         for (i = 0; i < rec->n_limits; i++) {
1271                                 lim = &rec->limits[i];
1272                                 limits[i].max = le16_to_cpu(lim->max_num);
1273                                 limits[i].types =
1274                                         qlink_iface_type_to_nl_mask(le16_to_cpu(lim->type));
1275                                 pr_debug("MAC%u: comb[%zu]: MAX:%u TYPES:%.4X\n",
1276                                          mac->macid, n_comb,
1277                                          limits[i].max, limits[i].types);
1278                         }
1279
1280                         n_comb++;
1281                         break;
1282                 case WLAN_EID_EXT_CAPABILITY:
1283                         if (unlikely(tlv_value_len > U8_MAX))
1284                                 return -EINVAL;
1285                         ext_capa = (u8 *)tlv->val;
1286                         ext_capa_len = tlv_value_len;
1287                         break;
1288                 case QTN_TLV_ID_EXT_CAPABILITY_MASK:
1289                         if (unlikely(tlv_value_len > U8_MAX))
1290                                 return -EINVAL;
1291                         ext_capa_mask = (u8 *)tlv->val;
1292                         ext_capa_mask_len = tlv_value_len;
1293                         break;
1294                 case QTN_TLV_ID_WOWLAN_CAPAB:
1295                         if (tlv_value_len < sizeof(*wowlan))
1296                                 return -EINVAL;
1297
1298                         wowlan = (void *)tlv->val;
1299                         if (!le16_to_cpu(wowlan->len)) {
1300                                 pr_warn("MAC%u: skip empty WoWLAN data\n",
1301                                         mac->macid);
1302                                 break;
1303                         }
1304
1305                         rec_len = sizeof(*wowlan) + le16_to_cpu(wowlan->len);
1306                         if (unlikely(tlv_value_len != rec_len)) {
1307                                 pr_warn("MAC%u: WoWLAN data size mismatch\n",
1308                                         mac->macid);
1309                                 return -EINVAL;
1310                         }
1311
1312                         kfree(mac->macinfo.wowlan);
1313                         mac->macinfo.wowlan = NULL;
1314                         qtnf_parse_wowlan_info(mac, wowlan);
1315                         break;
1316                 default:
1317                         pr_warn("MAC%u: unknown TLV type %u\n",
1318                                 mac->macid, tlv_type);
1319                         break;
1320                 }
1321
1322                 tlv_buf_size -= tlv_full_len;
1323                 tlv = (struct qlink_tlv_hdr *)(tlv->val + tlv_value_len);
1324         }
1325
1326         if (tlv_buf_size) {
1327                 pr_warn("MAC%u: malformed TLV buf; bytes left: %zu\n",
1328                         mac->macid, tlv_buf_size);
1329                 return -EINVAL;
1330         }
1331
1332         if (mac->macinfo.n_if_comb != n_comb) {
1333                 pr_err("MAC%u: combination mismatch: reported=%zu parsed=%zu\n",
1334                        mac->macid, mac->macinfo.n_if_comb, n_comb);
1335                 return -EINVAL;
1336         }
1337
1338         if (ext_capa_len != ext_capa_mask_len) {
1339                 pr_err("MAC%u: ext_capa/_mask lengths mismatch: %u != %u\n",
1340                        mac->macid, ext_capa_len, ext_capa_mask_len);
1341                 return -EINVAL;
1342         }
1343
1344         if (ext_capa_len > 0) {
1345                 ext_capa = kmemdup(ext_capa, ext_capa_len, GFP_KERNEL);
1346                 if (!ext_capa)
1347                         return -ENOMEM;
1348
1349                 ext_capa_mask =
1350                         kmemdup(ext_capa_mask, ext_capa_mask_len, GFP_KERNEL);
1351                 if (!ext_capa_mask) {
1352                         kfree(ext_capa);
1353                         return -ENOMEM;
1354                 }
1355         } else {
1356                 ext_capa = NULL;
1357                 ext_capa_mask = NULL;
1358         }
1359
1360         qtnf_mac_ext_caps_free(mac);
1361         mac->macinfo.extended_capabilities = ext_capa;
1362         mac->macinfo.extended_capabilities_mask = ext_capa_mask;
1363         mac->macinfo.extended_capabilities_len = ext_capa_len;
1364
1365         return 0;
1366 }
1367
1368 static void
1369 qtnf_cmd_resp_proc_mac_info(struct qtnf_wmac *mac,
1370                             const struct qlink_resp_get_mac_info *resp_info)
1371 {
1372         struct qtnf_mac_info *mac_info;
1373         struct qtnf_vif *vif;
1374
1375         mac_info = &mac->macinfo;
1376
1377         mac_info->bands_cap = resp_info->bands_cap;
1378         memcpy(&mac_info->dev_mac, &resp_info->dev_mac,
1379                sizeof(mac_info->dev_mac));
1380
1381         ether_addr_copy(mac->macaddr, mac_info->dev_mac);
1382
1383         vif = qtnf_mac_get_base_vif(mac);
1384         if (vif)
1385                 ether_addr_copy(vif->mac_addr, mac->macaddr);
1386         else
1387                 pr_err("could not get valid base vif\n");
1388
1389         mac_info->num_tx_chain = resp_info->num_tx_chain;
1390         mac_info->num_rx_chain = resp_info->num_rx_chain;
1391
1392         mac_info->max_ap_assoc_sta = le16_to_cpu(resp_info->max_ap_assoc_sta);
1393         mac_info->radar_detect_widths =
1394                         qlink_chan_width_mask_to_nl(le16_to_cpu(
1395                                         resp_info->radar_detect_widths));
1396         mac_info->max_acl_mac_addrs = le32_to_cpu(resp_info->max_acl_mac_addrs);
1397
1398         memcpy(&mac_info->ht_cap_mod_mask, &resp_info->ht_cap_mod_mask,
1399                sizeof(mac_info->ht_cap_mod_mask));
1400         memcpy(&mac_info->vht_cap_mod_mask, &resp_info->vht_cap_mod_mask,
1401                sizeof(mac_info->vht_cap_mod_mask));
1402 }
1403
1404 static void qtnf_cmd_resp_band_fill_htcap(const u8 *info,
1405                                           struct ieee80211_sta_ht_cap *bcap)
1406 {
1407         const struct ieee80211_ht_cap *ht_cap =
1408                 (const struct ieee80211_ht_cap *)info;
1409
1410         bcap->ht_supported = true;
1411         bcap->cap = le16_to_cpu(ht_cap->cap_info);
1412         bcap->ampdu_factor =
1413                 ht_cap->ampdu_params_info & IEEE80211_HT_AMPDU_PARM_FACTOR;
1414         bcap->ampdu_density =
1415                 (ht_cap->ampdu_params_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >>
1416                 IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT;
1417         memcpy(&bcap->mcs, &ht_cap->mcs, sizeof(bcap->mcs));
1418 }
1419
1420 static void qtnf_cmd_resp_band_fill_vhtcap(const u8 *info,
1421                                            struct ieee80211_sta_vht_cap *bcap)
1422 {
1423         const struct ieee80211_vht_cap *vht_cap =
1424                 (const struct ieee80211_vht_cap *)info;
1425
1426         bcap->vht_supported = true;
1427         bcap->cap = le32_to_cpu(vht_cap->vht_cap_info);
1428         memcpy(&bcap->vht_mcs, &vht_cap->supp_mcs, sizeof(bcap->vht_mcs));
1429 }
1430
1431 static int
1432 qtnf_cmd_resp_fill_band_info(struct ieee80211_supported_band *band,
1433                              struct qlink_resp_band_info_get *resp,
1434                              size_t payload_len)
1435 {
1436         u16 tlv_type;
1437         size_t tlv_len;
1438         size_t tlv_dlen;
1439         const struct qlink_tlv_hdr *tlv;
1440         const struct qlink_channel *qchan;
1441         struct ieee80211_channel *chan;
1442         unsigned int chidx = 0;
1443         u32 qflags;
1444
1445         memset(&band->ht_cap, 0, sizeof(band->ht_cap));
1446         memset(&band->vht_cap, 0, sizeof(band->vht_cap));
1447
1448         if (band->channels) {
1449                 if (band->n_channels == resp->num_chans) {
1450                         memset(band->channels, 0,
1451                                sizeof(*band->channels) * band->n_channels);
1452                 } else {
1453                         kfree(band->channels);
1454                         band->n_channels = 0;
1455                         band->channels = NULL;
1456                 }
1457         }
1458
1459         band->n_channels = resp->num_chans;
1460         if (band->n_channels == 0)
1461                 return 0;
1462
1463         if (!band->channels)
1464                 band->channels = kcalloc(band->n_channels, sizeof(*chan),
1465                                          GFP_KERNEL);
1466         if (!band->channels) {
1467                 band->n_channels = 0;
1468                 return -ENOMEM;
1469         }
1470
1471         tlv = (struct qlink_tlv_hdr *)resp->info;
1472
1473         while (payload_len >= sizeof(*tlv)) {
1474                 tlv_type = le16_to_cpu(tlv->type);
1475                 tlv_dlen = le16_to_cpu(tlv->len);
1476                 tlv_len = tlv_dlen + sizeof(*tlv);
1477
1478                 if (tlv_len > payload_len) {
1479                         pr_warn("malformed TLV 0x%.2X; LEN: %zu\n",
1480                                 tlv_type, tlv_len);
1481                         goto error_ret;
1482                 }
1483
1484                 switch (tlv_type) {
1485                 case QTN_TLV_ID_CHANNEL:
1486                         if (unlikely(tlv_dlen != sizeof(*qchan))) {
1487                                 pr_err("invalid channel TLV len %zu\n",
1488                                        tlv_len);
1489                                 goto error_ret;
1490                         }
1491
1492                         if (chidx == band->n_channels) {
1493                                 pr_err("too many channel TLVs\n");
1494                                 goto error_ret;
1495                         }
1496
1497                         qchan = (const struct qlink_channel *)tlv->val;
1498                         chan = &band->channels[chidx++];
1499                         qflags = le32_to_cpu(qchan->flags);
1500
1501                         chan->hw_value = le16_to_cpu(qchan->hw_value);
1502                         chan->band = band->band;
1503                         chan->center_freq = le16_to_cpu(qchan->center_freq);
1504                         chan->max_antenna_gain = (int)qchan->max_antenna_gain;
1505                         chan->max_power = (int)qchan->max_power;
1506                         chan->max_reg_power = (int)qchan->max_reg_power;
1507                         chan->beacon_found = qchan->beacon_found;
1508                         chan->dfs_cac_ms = le32_to_cpu(qchan->dfs_cac_ms);
1509                         chan->flags = 0;
1510
1511                         if (qflags & QLINK_CHAN_DISABLED)
1512                                 chan->flags |= IEEE80211_CHAN_DISABLED;
1513
1514                         if (qflags & QLINK_CHAN_NO_IR)
1515                                 chan->flags |= IEEE80211_CHAN_NO_IR;
1516
1517                         if (qflags & QLINK_CHAN_NO_HT40PLUS)
1518                                 chan->flags |= IEEE80211_CHAN_NO_HT40PLUS;
1519
1520                         if (qflags & QLINK_CHAN_NO_HT40MINUS)
1521                                 chan->flags |= IEEE80211_CHAN_NO_HT40MINUS;
1522
1523                         if (qflags & QLINK_CHAN_NO_OFDM)
1524                                 chan->flags |= IEEE80211_CHAN_NO_OFDM;
1525
1526                         if (qflags & QLINK_CHAN_NO_80MHZ)
1527                                 chan->flags |= IEEE80211_CHAN_NO_80MHZ;
1528
1529                         if (qflags & QLINK_CHAN_NO_160MHZ)
1530                                 chan->flags |= IEEE80211_CHAN_NO_160MHZ;
1531
1532                         if (qflags & QLINK_CHAN_INDOOR_ONLY)
1533                                 chan->flags |= IEEE80211_CHAN_INDOOR_ONLY;
1534
1535                         if (qflags & QLINK_CHAN_IR_CONCURRENT)
1536                                 chan->flags |= IEEE80211_CHAN_IR_CONCURRENT;
1537
1538                         if (qflags & QLINK_CHAN_NO_20MHZ)
1539                                 chan->flags |= IEEE80211_CHAN_NO_20MHZ;
1540
1541                         if (qflags & QLINK_CHAN_NO_10MHZ)
1542                                 chan->flags |= IEEE80211_CHAN_NO_10MHZ;
1543
1544                         if (qflags & QLINK_CHAN_RADAR) {
1545                                 chan->flags |= IEEE80211_CHAN_RADAR;
1546                                 chan->dfs_state_entered = jiffies;
1547
1548                                 if (qchan->dfs_state == QLINK_DFS_USABLE)
1549                                         chan->dfs_state = NL80211_DFS_USABLE;
1550                                 else if (qchan->dfs_state ==
1551                                         QLINK_DFS_AVAILABLE)
1552                                         chan->dfs_state = NL80211_DFS_AVAILABLE;
1553                                 else
1554                                         chan->dfs_state =
1555                                                 NL80211_DFS_UNAVAILABLE;
1556                         }
1557
1558                         pr_debug("chan=%d flags=%#x max_pow=%d max_reg_pow=%d\n",
1559                                  chan->hw_value, chan->flags, chan->max_power,
1560                                  chan->max_reg_power);
1561                         break;
1562                 case WLAN_EID_HT_CAPABILITY:
1563                         if (unlikely(tlv_dlen !=
1564                                      sizeof(struct ieee80211_ht_cap))) {
1565                                 pr_err("bad HTCAP TLV len %zu\n", tlv_dlen);
1566                                 goto error_ret;
1567                         }
1568
1569                         qtnf_cmd_resp_band_fill_htcap(tlv->val, &band->ht_cap);
1570                         break;
1571                 case WLAN_EID_VHT_CAPABILITY:
1572                         if (unlikely(tlv_dlen !=
1573                                      sizeof(struct ieee80211_vht_cap))) {
1574                                 pr_err("bad VHTCAP TLV len %zu\n", tlv_dlen);
1575                                 goto error_ret;
1576                         }
1577
1578                         qtnf_cmd_resp_band_fill_vhtcap(tlv->val,
1579                                                        &band->vht_cap);
1580                         break;
1581                 default:
1582                         pr_warn("unknown TLV type: %#x\n", tlv_type);
1583                         break;
1584                 }
1585
1586                 payload_len -= tlv_len;
1587                 tlv = (struct qlink_tlv_hdr *)(tlv->val + tlv_dlen);
1588         }
1589
1590         if (payload_len) {
1591                 pr_err("malformed TLV buf; bytes left: %zu\n", payload_len);
1592                 goto error_ret;
1593         }
1594
1595         if (band->n_channels != chidx) {
1596                 pr_err("channel count mismatch: reported=%d, parsed=%d\n",
1597                        band->n_channels, chidx);
1598                 goto error_ret;
1599         }
1600
1601         return 0;
1602
1603 error_ret:
1604         kfree(band->channels);
1605         band->channels = NULL;
1606         band->n_channels = 0;
1607
1608         return -EINVAL;
1609 }
1610
1611 static int qtnf_cmd_resp_proc_phy_params(struct qtnf_wmac *mac,
1612                                          const u8 *payload, size_t payload_len)
1613 {
1614         struct qtnf_mac_info *mac_info;
1615         struct qlink_tlv_frag_rts_thr *phy_thr;
1616         struct qlink_tlv_rlimit *limit;
1617         struct qlink_tlv_cclass *class;
1618         u16 tlv_type;
1619         u16 tlv_value_len;
1620         size_t tlv_full_len;
1621         const struct qlink_tlv_hdr *tlv;
1622
1623         mac_info = &mac->macinfo;
1624
1625         tlv = (struct qlink_tlv_hdr *)payload;
1626         while (payload_len >= sizeof(struct qlink_tlv_hdr)) {
1627                 tlv_type = le16_to_cpu(tlv->type);
1628                 tlv_value_len = le16_to_cpu(tlv->len);
1629                 tlv_full_len = tlv_value_len + sizeof(struct qlink_tlv_hdr);
1630
1631                 if (tlv_full_len > payload_len) {
1632                         pr_warn("MAC%u: malformed TLV 0x%.2X; LEN: %u\n",
1633                                 mac->macid, tlv_type, tlv_value_len);
1634                         return -EINVAL;
1635                 }
1636
1637                 switch (tlv_type) {
1638                 case QTN_TLV_ID_FRAG_THRESH:
1639                         phy_thr = (void *)tlv;
1640                         mac_info->frag_thr = (u32)le16_to_cpu(phy_thr->thr);
1641                         break;
1642                 case QTN_TLV_ID_RTS_THRESH:
1643                         phy_thr = (void *)tlv;
1644                         mac_info->rts_thr = (u32)le16_to_cpu(phy_thr->thr);
1645                         break;
1646                 case QTN_TLV_ID_SRETRY_LIMIT:
1647                         limit = (void *)tlv;
1648                         mac_info->sretry_limit = limit->rlimit;
1649                         break;
1650                 case QTN_TLV_ID_LRETRY_LIMIT:
1651                         limit = (void *)tlv;
1652                         mac_info->lretry_limit = limit->rlimit;
1653                         break;
1654                 case QTN_TLV_ID_COVERAGE_CLASS:
1655                         class = (void *)tlv;
1656                         mac_info->coverage_class = class->cclass;
1657                         break;
1658                 default:
1659                         pr_err("MAC%u: Unknown TLV type: %#x\n", mac->macid,
1660                                le16_to_cpu(tlv->type));
1661                         break;
1662                 }
1663
1664                 payload_len -= tlv_full_len;
1665                 tlv = (struct qlink_tlv_hdr *)(tlv->val + tlv_value_len);
1666         }
1667
1668         if (payload_len) {
1669                 pr_warn("MAC%u: malformed TLV buf; bytes left: %zu\n",
1670                         mac->macid, payload_len);
1671                 return -EINVAL;
1672         }
1673
1674         return 0;
1675 }
1676
1677 static int
1678 qtnf_cmd_resp_proc_chan_stat_info(struct qtnf_chan_stats *stats,
1679                                   const u8 *payload, size_t payload_len)
1680 {
1681         struct qlink_chan_stats *qlink_stats;
1682         const struct qlink_tlv_hdr *tlv;
1683         size_t tlv_full_len;
1684         u16 tlv_value_len;
1685         u16 tlv_type;
1686
1687         tlv = (struct qlink_tlv_hdr *)payload;
1688         while (payload_len >= sizeof(struct qlink_tlv_hdr)) {
1689                 tlv_type = le16_to_cpu(tlv->type);
1690                 tlv_value_len = le16_to_cpu(tlv->len);
1691                 tlv_full_len = tlv_value_len + sizeof(struct qlink_tlv_hdr);
1692                 if (tlv_full_len > payload_len) {
1693                         pr_warn("malformed TLV 0x%.2X; LEN: %u\n",
1694                                 tlv_type, tlv_value_len);
1695                         return -EINVAL;
1696                 }
1697                 switch (tlv_type) {
1698                 case QTN_TLV_ID_CHANNEL_STATS:
1699                         if (unlikely(tlv_value_len != sizeof(*qlink_stats))) {
1700                                 pr_err("invalid CHANNEL_STATS entry size\n");
1701                                 return -EINVAL;
1702                         }
1703
1704                         qlink_stats = (void *)tlv->val;
1705
1706                         stats->chan_num = le32_to_cpu(qlink_stats->chan_num);
1707                         stats->cca_tx = le32_to_cpu(qlink_stats->cca_tx);
1708                         stats->cca_rx = le32_to_cpu(qlink_stats->cca_rx);
1709                         stats->cca_busy = le32_to_cpu(qlink_stats->cca_busy);
1710                         stats->cca_try = le32_to_cpu(qlink_stats->cca_try);
1711                         stats->chan_noise = qlink_stats->chan_noise;
1712
1713                         pr_debug("chan(%u) try(%u) busy(%u) noise(%d)\n",
1714                                  stats->chan_num, stats->cca_try,
1715                                  stats->cca_busy, stats->chan_noise);
1716                         break;
1717                 default:
1718                         pr_warn("Unknown TLV type: %#x\n",
1719                                 le16_to_cpu(tlv->type));
1720                 }
1721                 payload_len -= tlv_full_len;
1722                 tlv = (struct qlink_tlv_hdr *)(tlv->val + tlv_value_len);
1723         }
1724
1725         if (payload_len) {
1726                 pr_warn("malformed TLV buf; bytes left: %zu\n", payload_len);
1727                 return -EINVAL;
1728         }
1729
1730         return 0;
1731 }
1732
1733 int qtnf_cmd_get_mac_info(struct qtnf_wmac *mac)
1734 {
1735         struct sk_buff *cmd_skb, *resp_skb = NULL;
1736         const struct qlink_resp_get_mac_info *resp;
1737         size_t var_data_len;
1738         u16 res_code = QLINK_CMD_RESULT_OK;
1739         int ret = 0;
1740
1741         cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, QLINK_VIFID_RSVD,
1742                                             QLINK_CMD_MAC_INFO,
1743                                             sizeof(struct qlink_cmd));
1744         if (!cmd_skb)
1745                 return -ENOMEM;
1746
1747         qtnf_bus_lock(mac->bus);
1748
1749         ret = qtnf_cmd_send_with_reply(mac->bus, cmd_skb, &resp_skb, &res_code,
1750                                        sizeof(*resp), &var_data_len);
1751         if (unlikely(ret))
1752                 goto out;
1753
1754         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
1755                 pr_err("MAC%u: CMD failed: %u\n", mac->macid, res_code);
1756                 ret = -EFAULT;
1757                 goto out;
1758         }
1759
1760         resp = (const struct qlink_resp_get_mac_info *)resp_skb->data;
1761         qtnf_cmd_resp_proc_mac_info(mac, resp);
1762         ret = qtnf_parse_variable_mac_info(mac, resp->var_info, var_data_len);
1763
1764 out:
1765         qtnf_bus_unlock(mac->bus);
1766         consume_skb(resp_skb);
1767
1768         return ret;
1769 }
1770
1771 int qtnf_cmd_get_hw_info(struct qtnf_bus *bus)
1772 {
1773         struct sk_buff *cmd_skb, *resp_skb = NULL;
1774         const struct qlink_resp_get_hw_info *resp;
1775         u16 res_code = QLINK_CMD_RESULT_OK;
1776         int ret = 0;
1777         size_t info_len;
1778
1779         cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1780                                             QLINK_CMD_GET_HW_INFO,
1781                                             sizeof(struct qlink_cmd));
1782         if (!cmd_skb)
1783                 return -ENOMEM;
1784
1785         qtnf_bus_lock(bus);
1786
1787         ret = qtnf_cmd_send_with_reply(bus, cmd_skb, &resp_skb, &res_code,
1788                                        sizeof(*resp), &info_len);
1789
1790         if (unlikely(ret))
1791                 goto out;
1792
1793         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
1794                 pr_err("cmd exec failed: 0x%.4X\n", res_code);
1795                 ret = -EFAULT;
1796                 goto out;
1797         }
1798
1799         resp = (const struct qlink_resp_get_hw_info *)resp_skb->data;
1800         ret = qtnf_cmd_resp_proc_hw_info(bus, resp, info_len);
1801
1802 out:
1803         qtnf_bus_unlock(bus);
1804         consume_skb(resp_skb);
1805
1806         return ret;
1807 }
1808
1809 int qtnf_cmd_band_info_get(struct qtnf_wmac *mac,
1810                            struct ieee80211_supported_band *band)
1811 {
1812         struct sk_buff *cmd_skb, *resp_skb = NULL;
1813         size_t info_len;
1814         struct qlink_cmd_band_info_get *cmd;
1815         struct qlink_resp_band_info_get *resp;
1816         u16 res_code = QLINK_CMD_RESULT_OK;
1817         int ret = 0;
1818         u8 qband;
1819
1820         switch (band->band) {
1821         case NL80211_BAND_2GHZ:
1822                 qband = QLINK_BAND_2GHZ;
1823                 break;
1824         case NL80211_BAND_5GHZ:
1825                 qband = QLINK_BAND_5GHZ;
1826                 break;
1827         case NL80211_BAND_60GHZ:
1828                 qband = QLINK_BAND_60GHZ;
1829                 break;
1830         default:
1831                 return -EINVAL;
1832         }
1833
1834         cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, 0,
1835                                             QLINK_CMD_BAND_INFO_GET,
1836                                             sizeof(*cmd));
1837         if (!cmd_skb)
1838                 return -ENOMEM;
1839
1840         cmd = (struct qlink_cmd_band_info_get *)cmd_skb->data;
1841         cmd->band = qband;
1842
1843         qtnf_bus_lock(mac->bus);
1844
1845         ret = qtnf_cmd_send_with_reply(mac->bus, cmd_skb, &resp_skb, &res_code,
1846                                        sizeof(*resp), &info_len);
1847
1848         if (unlikely(ret))
1849                 goto out;
1850
1851         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
1852                 pr_err("MAC%u: CMD failed: %u\n", mac->macid, res_code);
1853                 ret = -EFAULT;
1854                 goto out;
1855         }
1856
1857         resp = (struct qlink_resp_band_info_get *)resp_skb->data;
1858         if (resp->band != qband) {
1859                 pr_err("MAC%u: reply band %u != cmd band %u\n", mac->macid,
1860                        resp->band, qband);
1861                 ret = -EINVAL;
1862                 goto out;
1863         }
1864
1865         ret = qtnf_cmd_resp_fill_band_info(band, resp, info_len);
1866
1867 out:
1868         qtnf_bus_unlock(mac->bus);
1869         consume_skb(resp_skb);
1870
1871         return ret;
1872 }
1873
1874 int qtnf_cmd_send_get_phy_params(struct qtnf_wmac *mac)
1875 {
1876         struct sk_buff *cmd_skb, *resp_skb = NULL;
1877         size_t response_size;
1878         struct qlink_resp_phy_params *resp;
1879         u16 res_code = QLINK_CMD_RESULT_OK;
1880         int ret = 0;
1881
1882         cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, 0,
1883                                             QLINK_CMD_PHY_PARAMS_GET,
1884                                             sizeof(struct qlink_cmd));
1885         if (!cmd_skb)
1886                 return -ENOMEM;
1887
1888         qtnf_bus_lock(mac->bus);
1889
1890         ret = qtnf_cmd_send_with_reply(mac->bus, cmd_skb, &resp_skb, &res_code,
1891                                        sizeof(*resp), &response_size);
1892
1893         if (unlikely(ret))
1894                 goto out;
1895
1896         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
1897                 pr_err("MAC%u: CMD failed: %u\n", mac->macid, res_code);
1898                 ret = -EFAULT;
1899                 goto out;
1900         }
1901
1902         resp = (struct qlink_resp_phy_params *)resp_skb->data;
1903         ret = qtnf_cmd_resp_proc_phy_params(mac, resp->info, response_size);
1904
1905 out:
1906         qtnf_bus_unlock(mac->bus);
1907         consume_skb(resp_skb);
1908
1909         return ret;
1910 }
1911
1912 int qtnf_cmd_send_update_phy_params(struct qtnf_wmac *mac, u32 changed)
1913 {
1914         struct wiphy *wiphy = priv_to_wiphy(mac);
1915         struct sk_buff *cmd_skb;
1916         u16 res_code = QLINK_CMD_RESULT_OK;
1917         int ret = 0;
1918
1919         cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, 0,
1920                                             QLINK_CMD_PHY_PARAMS_SET,
1921                                             sizeof(struct qlink_cmd));
1922         if (!cmd_skb)
1923                 return -ENOMEM;
1924
1925         qtnf_bus_lock(mac->bus);
1926
1927         if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1928                 qtnf_cmd_skb_put_tlv_u16(cmd_skb, QTN_TLV_ID_FRAG_THRESH,
1929                                          wiphy->frag_threshold);
1930         if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1931                 qtnf_cmd_skb_put_tlv_u16(cmd_skb, QTN_TLV_ID_RTS_THRESH,
1932                                          wiphy->rts_threshold);
1933         if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1934                 qtnf_cmd_skb_put_tlv_u8(cmd_skb, QTN_TLV_ID_COVERAGE_CLASS,
1935                                         wiphy->coverage_class);
1936
1937         ret = qtnf_cmd_send(mac->bus, cmd_skb, &res_code);
1938
1939         if (unlikely(ret))
1940                 goto out;
1941
1942         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
1943                 pr_err("MAC%u: CMD failed: %u\n", mac->macid, res_code);
1944                 ret = -EFAULT;
1945                 goto out;
1946         }
1947
1948 out:
1949         qtnf_bus_unlock(mac->bus);
1950         return ret;
1951 }
1952
1953 int qtnf_cmd_send_init_fw(struct qtnf_bus *bus)
1954 {
1955         struct sk_buff *cmd_skb;
1956         u16 res_code = QLINK_CMD_RESULT_OK;
1957         int ret = 0;
1958
1959         cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1960                                             QLINK_CMD_FW_INIT,
1961                                             sizeof(struct qlink_cmd));
1962         if (!cmd_skb)
1963                 return -ENOMEM;
1964
1965         qtnf_bus_lock(bus);
1966
1967         ret = qtnf_cmd_send(bus, cmd_skb, &res_code);
1968
1969         if (unlikely(ret))
1970                 goto out;
1971
1972         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
1973                 pr_err("cmd exec failed: 0x%.4X\n", res_code);
1974                 ret = -EFAULT;
1975                 goto out;
1976         }
1977
1978 out:
1979         qtnf_bus_unlock(bus);
1980         return ret;
1981 }
1982
1983 void qtnf_cmd_send_deinit_fw(struct qtnf_bus *bus)
1984 {
1985         struct sk_buff *cmd_skb;
1986
1987         cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1988                                             QLINK_CMD_FW_DEINIT,
1989                                             sizeof(struct qlink_cmd));
1990         if (!cmd_skb)
1991                 return;
1992
1993         qtnf_bus_lock(bus);
1994
1995         qtnf_cmd_send(bus, cmd_skb, NULL);
1996
1997         qtnf_bus_unlock(bus);
1998 }
1999
2000 int qtnf_cmd_send_add_key(struct qtnf_vif *vif, u8 key_index, bool pairwise,
2001                           const u8 *mac_addr, struct key_params *params)
2002 {
2003         struct sk_buff *cmd_skb;
2004         struct qlink_cmd_add_key *cmd;
2005         u16 res_code = QLINK_CMD_RESULT_OK;
2006         int ret = 0;
2007
2008         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2009                                             QLINK_CMD_ADD_KEY,
2010                                             sizeof(*cmd));
2011         if (!cmd_skb)
2012                 return -ENOMEM;
2013
2014         qtnf_bus_lock(vif->mac->bus);
2015
2016         cmd = (struct qlink_cmd_add_key *)cmd_skb->data;
2017
2018         if (mac_addr)
2019                 ether_addr_copy(cmd->addr, mac_addr);
2020         else
2021                 eth_broadcast_addr(cmd->addr);
2022
2023         cmd->cipher = cpu_to_le32(params->cipher);
2024         cmd->key_index = key_index;
2025         cmd->pairwise = pairwise;
2026
2027         if (params->key && params->key_len > 0)
2028                 qtnf_cmd_skb_put_tlv_arr(cmd_skb, QTN_TLV_ID_KEY,
2029                                          params->key,
2030                                          params->key_len);
2031
2032         if (params->seq && params->seq_len > 0)
2033                 qtnf_cmd_skb_put_tlv_arr(cmd_skb, QTN_TLV_ID_SEQ,
2034                                          params->seq,
2035                                          params->seq_len);
2036
2037         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2038         if (unlikely(ret))
2039                 goto out;
2040
2041         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2042                 pr_err("VIF%u.%u: CMD failed: %u\n",
2043                        vif->mac->macid, vif->vifid, res_code);
2044                 ret = -EFAULT;
2045                 goto out;
2046         }
2047
2048 out:
2049         qtnf_bus_unlock(vif->mac->bus);
2050         return ret;
2051 }
2052
2053 int qtnf_cmd_send_del_key(struct qtnf_vif *vif, u8 key_index, bool pairwise,
2054                           const u8 *mac_addr)
2055 {
2056         struct sk_buff *cmd_skb;
2057         struct qlink_cmd_del_key *cmd;
2058         u16 res_code = QLINK_CMD_RESULT_OK;
2059         int ret = 0;
2060
2061         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2062                                             QLINK_CMD_DEL_KEY,
2063                                             sizeof(*cmd));
2064         if (!cmd_skb)
2065                 return -ENOMEM;
2066
2067         qtnf_bus_lock(vif->mac->bus);
2068
2069         cmd = (struct qlink_cmd_del_key *)cmd_skb->data;
2070
2071         if (mac_addr)
2072                 ether_addr_copy(cmd->addr, mac_addr);
2073         else
2074                 eth_broadcast_addr(cmd->addr);
2075
2076         cmd->key_index = key_index;
2077         cmd->pairwise = pairwise;
2078         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2079         if (unlikely(ret))
2080                 goto out;
2081
2082         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2083                 pr_err("VIF%u.%u: CMD failed: %u\n",
2084                        vif->mac->macid, vif->vifid, res_code);
2085                 ret = -EFAULT;
2086                 goto out;
2087         }
2088
2089 out:
2090         qtnf_bus_unlock(vif->mac->bus);
2091         return ret;
2092 }
2093
2094 int qtnf_cmd_send_set_default_key(struct qtnf_vif *vif, u8 key_index,
2095                                   bool unicast, bool multicast)
2096 {
2097         struct sk_buff *cmd_skb;
2098         struct qlink_cmd_set_def_key *cmd;
2099         u16 res_code = QLINK_CMD_RESULT_OK;
2100         int ret = 0;
2101
2102         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2103                                             QLINK_CMD_SET_DEFAULT_KEY,
2104                                             sizeof(*cmd));
2105         if (!cmd_skb)
2106                 return -ENOMEM;
2107
2108         qtnf_bus_lock(vif->mac->bus);
2109
2110         cmd = (struct qlink_cmd_set_def_key *)cmd_skb->data;
2111         cmd->key_index = key_index;
2112         cmd->unicast = unicast;
2113         cmd->multicast = multicast;
2114         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2115         if (unlikely(ret))
2116                 goto out;
2117
2118         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2119                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
2120                        vif->vifid, res_code);
2121                 ret = -EFAULT;
2122                 goto out;
2123         }
2124
2125 out:
2126         qtnf_bus_unlock(vif->mac->bus);
2127         return ret;
2128 }
2129
2130 int qtnf_cmd_send_set_default_mgmt_key(struct qtnf_vif *vif, u8 key_index)
2131 {
2132         struct sk_buff *cmd_skb;
2133         struct qlink_cmd_set_def_mgmt_key *cmd;
2134         u16 res_code = QLINK_CMD_RESULT_OK;
2135         int ret = 0;
2136
2137         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2138                                             QLINK_CMD_SET_DEFAULT_MGMT_KEY,
2139                                             sizeof(*cmd));
2140         if (!cmd_skb)
2141                 return -ENOMEM;
2142
2143         qtnf_bus_lock(vif->mac->bus);
2144
2145         cmd = (struct qlink_cmd_set_def_mgmt_key *)cmd_skb->data;
2146         cmd->key_index = key_index;
2147         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2148         if (unlikely(ret))
2149                 goto out;
2150
2151         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2152                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
2153                        vif->vifid, res_code);
2154                 ret = -EFAULT;
2155                 goto out;
2156         }
2157
2158 out:
2159         qtnf_bus_unlock(vif->mac->bus);
2160         return ret;
2161 }
2162
2163 static u32 qtnf_encode_sta_flags(u32 flags)
2164 {
2165         u32 code = 0;
2166
2167         if (flags & BIT(NL80211_STA_FLAG_AUTHORIZED))
2168                 code |= QLINK_STA_FLAG_AUTHORIZED;
2169         if (flags & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
2170                 code |= QLINK_STA_FLAG_SHORT_PREAMBLE;
2171         if (flags & BIT(NL80211_STA_FLAG_WME))
2172                 code |= QLINK_STA_FLAG_WME;
2173         if (flags & BIT(NL80211_STA_FLAG_MFP))
2174                 code |= QLINK_STA_FLAG_MFP;
2175         if (flags & BIT(NL80211_STA_FLAG_AUTHENTICATED))
2176                 code |= QLINK_STA_FLAG_AUTHENTICATED;
2177         if (flags & BIT(NL80211_STA_FLAG_TDLS_PEER))
2178                 code |= QLINK_STA_FLAG_TDLS_PEER;
2179         if (flags & BIT(NL80211_STA_FLAG_ASSOCIATED))
2180                 code |= QLINK_STA_FLAG_ASSOCIATED;
2181         return code;
2182 }
2183
2184 int qtnf_cmd_send_change_sta(struct qtnf_vif *vif, const u8 *mac,
2185                              struct station_parameters *params)
2186 {
2187         struct sk_buff *cmd_skb;
2188         struct qlink_cmd_change_sta *cmd;
2189         u16 res_code = QLINK_CMD_RESULT_OK;
2190         int ret = 0;
2191
2192         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2193                                             QLINK_CMD_CHANGE_STA,
2194                                             sizeof(*cmd));
2195         if (!cmd_skb)
2196                 return -ENOMEM;
2197
2198         qtnf_bus_lock(vif->mac->bus);
2199
2200         cmd = (struct qlink_cmd_change_sta *)cmd_skb->data;
2201         ether_addr_copy(cmd->sta_addr, mac);
2202         cmd->flag_update.mask =
2203                 cpu_to_le32(qtnf_encode_sta_flags(params->sta_flags_mask));
2204         cmd->flag_update.value =
2205                 cpu_to_le32(qtnf_encode_sta_flags(params->sta_flags_set));
2206
2207         switch (vif->wdev.iftype) {
2208         case NL80211_IFTYPE_AP:
2209                 cmd->if_type = cpu_to_le16(QLINK_IFTYPE_AP);
2210                 break;
2211         case NL80211_IFTYPE_STATION:
2212                 cmd->if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
2213                 break;
2214         default:
2215                 pr_err("unsupported iftype %d\n", vif->wdev.iftype);
2216                 dev_kfree_skb(cmd_skb);
2217                 ret = -EINVAL;
2218                 goto out;
2219         }
2220
2221         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2222         if (unlikely(ret))
2223                 goto out;
2224
2225         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2226                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
2227                        vif->vifid, res_code);
2228                 ret = -EFAULT;
2229                 goto out;
2230         }
2231
2232 out:
2233         qtnf_bus_unlock(vif->mac->bus);
2234         return ret;
2235 }
2236
2237 int qtnf_cmd_send_del_sta(struct qtnf_vif *vif,
2238                           struct station_del_parameters *params)
2239 {
2240         struct sk_buff *cmd_skb;
2241         struct qlink_cmd_del_sta *cmd;
2242         u16 res_code = QLINK_CMD_RESULT_OK;
2243         int ret = 0;
2244
2245         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2246                                             QLINK_CMD_DEL_STA,
2247                                             sizeof(*cmd));
2248         if (!cmd_skb)
2249                 return -ENOMEM;
2250
2251         qtnf_bus_lock(vif->mac->bus);
2252
2253         cmd = (struct qlink_cmd_del_sta *)cmd_skb->data;
2254
2255         if (params->mac)
2256                 ether_addr_copy(cmd->sta_addr, params->mac);
2257         else
2258                 eth_broadcast_addr(cmd->sta_addr);      /* flush all stations */
2259
2260         cmd->subtype = params->subtype;
2261         cmd->reason_code = cpu_to_le16(params->reason_code);
2262
2263         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2264         if (unlikely(ret))
2265                 goto out;
2266
2267         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2268                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
2269                        vif->vifid, res_code);
2270                 ret = -EFAULT;
2271                 goto out;
2272         }
2273
2274 out:
2275         qtnf_bus_unlock(vif->mac->bus);
2276         return ret;
2277 }
2278
2279 static void qtnf_cmd_channel_tlv_add(struct sk_buff *cmd_skb,
2280                                      const struct ieee80211_channel *sc)
2281 {
2282         struct qlink_tlv_channel *qchan;
2283         u32 flags = 0;
2284
2285         qchan = skb_put_zero(cmd_skb, sizeof(*qchan));
2286         qchan->hdr.type = cpu_to_le16(QTN_TLV_ID_CHANNEL);
2287         qchan->hdr.len = cpu_to_le16(sizeof(*qchan) - sizeof(qchan->hdr));
2288         qchan->chan.center_freq = cpu_to_le16(sc->center_freq);
2289         qchan->chan.hw_value = cpu_to_le16(sc->hw_value);
2290
2291         if (sc->flags & IEEE80211_CHAN_NO_IR)
2292                 flags |= QLINK_CHAN_NO_IR;
2293
2294         if (sc->flags & IEEE80211_CHAN_RADAR)
2295                 flags |= QLINK_CHAN_RADAR;
2296
2297         qchan->chan.flags = cpu_to_le32(flags);
2298 }
2299
2300 static void qtnf_cmd_randmac_tlv_add(struct sk_buff *cmd_skb,
2301                                      const u8 *mac_addr,
2302                                      const u8 *mac_addr_mask)
2303 {
2304         struct qlink_random_mac_addr *randmac;
2305         struct qlink_tlv_hdr *hdr =
2306                 skb_put(cmd_skb, sizeof(*hdr) + sizeof(*randmac));
2307
2308         hdr->type = cpu_to_le16(QTN_TLV_ID_RANDOM_MAC_ADDR);
2309         hdr->len = cpu_to_le16(sizeof(*randmac));
2310         randmac = (struct qlink_random_mac_addr *)hdr->val;
2311
2312         memcpy(randmac->mac_addr, mac_addr, ETH_ALEN);
2313         memcpy(randmac->mac_addr_mask, mac_addr_mask, ETH_ALEN);
2314 }
2315
2316 int qtnf_cmd_send_scan(struct qtnf_wmac *mac)
2317 {
2318         struct sk_buff *cmd_skb;
2319         u16 res_code = QLINK_CMD_RESULT_OK;
2320         struct ieee80211_channel *sc;
2321         struct cfg80211_scan_request *scan_req = mac->scan_req;
2322         int n_channels;
2323         int count = 0;
2324         int ret;
2325
2326         cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, QLINK_VIFID_RSVD,
2327                                             QLINK_CMD_SCAN,
2328                                             sizeof(struct qlink_cmd));
2329         if (!cmd_skb)
2330                 return -ENOMEM;
2331
2332         qtnf_bus_lock(mac->bus);
2333
2334         if (scan_req->n_ssids != 0) {
2335                 while (count < scan_req->n_ssids) {
2336                         qtnf_cmd_skb_put_tlv_arr(cmd_skb, WLAN_EID_SSID,
2337                                 scan_req->ssids[count].ssid,
2338                                 scan_req->ssids[count].ssid_len);
2339                         count++;
2340                 }
2341         }
2342
2343         if (scan_req->ie_len != 0)
2344                 qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_PROBE_REQ,
2345                                         scan_req->ie, scan_req->ie_len);
2346
2347         if (scan_req->n_channels) {
2348                 n_channels = scan_req->n_channels;
2349                 count = 0;
2350
2351                 while (n_channels != 0) {
2352                         sc = scan_req->channels[count];
2353                         if (sc->flags & IEEE80211_CHAN_DISABLED) {
2354                                 n_channels--;
2355                                 continue;
2356                         }
2357
2358                         pr_debug("MAC%u: scan chan=%d, freq=%d, flags=%#x\n",
2359                                  mac->macid, sc->hw_value, sc->center_freq,
2360                                  sc->flags);
2361
2362                         qtnf_cmd_channel_tlv_add(cmd_skb, sc);
2363                         n_channels--;
2364                         count++;
2365                 }
2366         }
2367
2368         if (scan_req->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
2369                 pr_debug("MAC%u: scan with random addr=%pM, mask=%pM\n",
2370                          mac->macid,
2371                          scan_req->mac_addr, scan_req->mac_addr_mask);
2372
2373                 qtnf_cmd_randmac_tlv_add(cmd_skb, scan_req->mac_addr,
2374                                          scan_req->mac_addr_mask);
2375         }
2376
2377         ret = qtnf_cmd_send(mac->bus, cmd_skb, &res_code);
2378
2379         if (unlikely(ret))
2380                 goto out;
2381
2382         pr_debug("MAC%u: scan started\n", mac->macid);
2383
2384         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2385                 pr_err("MAC%u: CMD failed: %u\n", mac->macid, res_code);
2386                 ret = -EFAULT;
2387                 goto out;
2388         }
2389 out:
2390         qtnf_bus_unlock(mac->bus);
2391         return ret;
2392 }
2393
2394 int qtnf_cmd_send_connect(struct qtnf_vif *vif,
2395                           struct cfg80211_connect_params *sme)
2396 {
2397         struct sk_buff *cmd_skb;
2398         struct qlink_cmd_connect *cmd;
2399         struct qlink_auth_encr *aen;
2400         u16 res_code = QLINK_CMD_RESULT_OK;
2401         int ret;
2402         int i;
2403         u32 connect_flags = 0;
2404
2405         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2406                                             QLINK_CMD_CONNECT,
2407                                             sizeof(*cmd));
2408         if (!cmd_skb)
2409                 return -ENOMEM;
2410
2411         cmd = (struct qlink_cmd_connect *)cmd_skb->data;
2412
2413         ether_addr_copy(cmd->bssid, vif->bssid);
2414
2415         if (sme->bssid_hint)
2416                 ether_addr_copy(cmd->bssid_hint, sme->bssid_hint);
2417         else
2418                 eth_zero_addr(cmd->bssid_hint);
2419
2420         if (sme->prev_bssid)
2421                 ether_addr_copy(cmd->prev_bssid, sme->prev_bssid);
2422         else
2423                 eth_zero_addr(cmd->prev_bssid);
2424
2425         if ((sme->bg_scan_period >= 0) &&
2426             (sme->bg_scan_period <= SHRT_MAX))
2427                 cmd->bg_scan_period = cpu_to_le16(sme->bg_scan_period);
2428         else
2429                 cmd->bg_scan_period = cpu_to_le16(-1); /* use default value */
2430
2431         if (sme->flags & ASSOC_REQ_DISABLE_HT)
2432                 connect_flags |= QLINK_STA_CONNECT_DISABLE_HT;
2433         if (sme->flags & ASSOC_REQ_DISABLE_VHT)
2434                 connect_flags |= QLINK_STA_CONNECT_DISABLE_VHT;
2435         if (sme->flags & ASSOC_REQ_USE_RRM)
2436                 connect_flags |= QLINK_STA_CONNECT_USE_RRM;
2437
2438         cmd->flags = cpu_to_le32(connect_flags);
2439         memcpy(&cmd->ht_capa, &sme->ht_capa, sizeof(cmd->ht_capa));
2440         memcpy(&cmd->ht_capa_mask, &sme->ht_capa_mask,
2441                sizeof(cmd->ht_capa_mask));
2442         memcpy(&cmd->vht_capa, &sme->vht_capa, sizeof(cmd->vht_capa));
2443         memcpy(&cmd->vht_capa_mask, &sme->vht_capa_mask,
2444                sizeof(cmd->vht_capa_mask));
2445         cmd->pbss = sme->pbss;
2446
2447         aen = &cmd->aen;
2448         aen->auth_type = sme->auth_type;
2449         aen->privacy = !!sme->privacy;
2450         cmd->mfp = sme->mfp;
2451         aen->wpa_versions = cpu_to_le32(sme->crypto.wpa_versions);
2452         aen->cipher_group = cpu_to_le32(sme->crypto.cipher_group);
2453         aen->n_ciphers_pairwise = cpu_to_le32(sme->crypto.n_ciphers_pairwise);
2454
2455         for (i = 0; i < QLINK_MAX_NR_CIPHER_SUITES; i++)
2456                 aen->ciphers_pairwise[i] =
2457                         cpu_to_le32(sme->crypto.ciphers_pairwise[i]);
2458
2459         aen->n_akm_suites = cpu_to_le32(sme->crypto.n_akm_suites);
2460
2461         for (i = 0; i < QLINK_MAX_NR_AKM_SUITES; i++)
2462                 aen->akm_suites[i] = cpu_to_le32(sme->crypto.akm_suites[i]);
2463
2464         aen->control_port = sme->crypto.control_port;
2465         aen->control_port_no_encrypt =
2466                 sme->crypto.control_port_no_encrypt;
2467         aen->control_port_ethertype =
2468                 cpu_to_le16(be16_to_cpu(sme->crypto.control_port_ethertype));
2469
2470         qtnf_cmd_skb_put_tlv_arr(cmd_skb, WLAN_EID_SSID, sme->ssid,
2471                                  sme->ssid_len);
2472
2473         if (sme->ie_len != 0)
2474                 qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_ASSOC_REQ,
2475                                         sme->ie, sme->ie_len);
2476
2477         if (sme->channel)
2478                 qtnf_cmd_channel_tlv_add(cmd_skb, sme->channel);
2479
2480         qtnf_bus_lock(vif->mac->bus);
2481
2482         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2483
2484         if (unlikely(ret))
2485                 goto out;
2486
2487         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2488                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
2489                        vif->vifid, res_code);
2490                 ret = -EFAULT;
2491                 goto out;
2492         }
2493 out:
2494         qtnf_bus_unlock(vif->mac->bus);
2495         return ret;
2496 }
2497
2498 int qtnf_cmd_send_disconnect(struct qtnf_vif *vif, u16 reason_code)
2499 {
2500         struct sk_buff *cmd_skb;
2501         struct qlink_cmd_disconnect *cmd;
2502         u16 res_code = QLINK_CMD_RESULT_OK;
2503         int ret;
2504
2505         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2506                                             QLINK_CMD_DISCONNECT,
2507                                             sizeof(*cmd));
2508         if (!cmd_skb)
2509                 return -ENOMEM;
2510
2511         qtnf_bus_lock(vif->mac->bus);
2512
2513         cmd = (struct qlink_cmd_disconnect *)cmd_skb->data;
2514         cmd->reason = cpu_to_le16(reason_code);
2515
2516         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2517
2518         if (unlikely(ret))
2519                 goto out;
2520
2521         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2522                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
2523                        vif->vifid, res_code);
2524                 ret = -EFAULT;
2525                 goto out;
2526         }
2527 out:
2528         qtnf_bus_unlock(vif->mac->bus);
2529         return ret;
2530 }
2531
2532 int qtnf_cmd_send_updown_intf(struct qtnf_vif *vif, bool up)
2533 {
2534         struct sk_buff *cmd_skb;
2535         struct qlink_cmd_updown *cmd;
2536         u16 res_code = QLINK_CMD_RESULT_OK;
2537         int ret;
2538
2539         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2540                                             QLINK_CMD_UPDOWN_INTF,
2541                                             sizeof(*cmd));
2542         if (!cmd_skb)
2543                 return -ENOMEM;
2544
2545         cmd = (struct qlink_cmd_updown *)cmd_skb->data;
2546         cmd->if_up = !!up;
2547
2548         qtnf_bus_lock(vif->mac->bus);
2549
2550         ret = qtnf_cmd_send(vif->mac->bus, cmd_skb, &res_code);
2551
2552         if (unlikely(ret))
2553                 goto out;
2554
2555         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2556                 pr_err("VIF%u.%u: CMD failed: %u\n", vif->mac->macid,
2557                        vif->vifid, res_code);
2558                 ret = -EFAULT;
2559                 goto out;
2560         }
2561 out:
2562         qtnf_bus_unlock(vif->mac->bus);
2563         return ret;
2564 }
2565
2566 int qtnf_cmd_reg_notify(struct qtnf_bus *bus, struct regulatory_request *req)
2567 {
2568         struct sk_buff *cmd_skb;
2569         int ret;
2570         u16 res_code;
2571         struct qlink_cmd_reg_notify *cmd;
2572
2573         cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
2574                                             QLINK_CMD_REG_NOTIFY,
2575                                             sizeof(*cmd));
2576         if (!cmd_skb)
2577                 return -ENOMEM;
2578
2579         cmd = (struct qlink_cmd_reg_notify *)cmd_skb->data;
2580         cmd->alpha2[0] = req->alpha2[0];
2581         cmd->alpha2[1] = req->alpha2[1];
2582
2583         switch (req->initiator) {
2584         case NL80211_REGDOM_SET_BY_CORE:
2585                 cmd->initiator = QLINK_REGDOM_SET_BY_CORE;
2586                 break;
2587         case NL80211_REGDOM_SET_BY_USER:
2588                 cmd->initiator = QLINK_REGDOM_SET_BY_USER;
2589                 break;
2590         case NL80211_REGDOM_SET_BY_DRIVER:
2591                 cmd->initiator = QLINK_REGDOM_SET_BY_DRIVER;
2592                 break;
2593         case NL80211_REGDOM_SET_BY_COUNTRY_IE:
2594                 cmd->initiator = QLINK_REGDOM_SET_BY_COUNTRY_IE;
2595                 break;
2596         }
2597
2598         switch (req->user_reg_hint_type) {
2599         case NL80211_USER_REG_HINT_USER:
2600                 cmd->user_reg_hint_type = QLINK_USER_REG_HINT_USER;
2601                 break;
2602         case NL80211_USER_REG_HINT_CELL_BASE:
2603                 cmd->user_reg_hint_type = QLINK_USER_REG_HINT_CELL_BASE;
2604                 break;
2605         case NL80211_USER_REG_HINT_INDOOR:
2606                 cmd->user_reg_hint_type = QLINK_USER_REG_HINT_INDOOR;
2607                 break;
2608         }
2609
2610         qtnf_bus_lock(bus);
2611
2612         ret = qtnf_cmd_send(bus, cmd_skb, &res_code);
2613         if (ret)
2614                 goto out;
2615
2616         switch (res_code) {
2617         case QLINK_CMD_RESULT_ENOTSUPP:
2618                 pr_warn("reg update not supported\n");
2619                 ret = -EOPNOTSUPP;
2620                 break;
2621         case QLINK_CMD_RESULT_EALREADY:
2622                 pr_info("regulatory domain is already set to %c%c",
2623                         req->alpha2[0], req->alpha2[1]);
2624                 ret = -EALREADY;
2625                 break;
2626         case QLINK_CMD_RESULT_OK:
2627                 ret = 0;
2628                 break;
2629         default:
2630                 ret = -EFAULT;
2631                 break;
2632         }
2633
2634 out:
2635         qtnf_bus_unlock(bus);
2636
2637         return ret;
2638 }
2639
2640 int qtnf_cmd_get_chan_stats(struct qtnf_wmac *mac, u16 channel,
2641                             struct qtnf_chan_stats *stats)
2642 {
2643         struct sk_buff *cmd_skb, *resp_skb = NULL;
2644         struct qlink_cmd_get_chan_stats *cmd;
2645         struct qlink_resp_get_chan_stats *resp;
2646         size_t var_data_len;
2647         u16 res_code = QLINK_CMD_RESULT_OK;
2648         int ret = 0;
2649
2650         cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, QLINK_VIFID_RSVD,
2651                                             QLINK_CMD_CHAN_STATS,
2652                                             sizeof(*cmd));
2653         if (!cmd_skb)
2654                 return -ENOMEM;
2655
2656         qtnf_bus_lock(mac->bus);
2657
2658         cmd = (struct qlink_cmd_get_chan_stats *)cmd_skb->data;
2659         cmd->channel = cpu_to_le16(channel);
2660
2661         ret = qtnf_cmd_send_with_reply(mac->bus, cmd_skb, &resp_skb, &res_code,
2662                                        sizeof(*resp), &var_data_len);
2663         if (unlikely(ret)) {
2664                 qtnf_bus_unlock(mac->bus);
2665                 return ret;
2666         }
2667
2668         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2669                 switch (res_code) {
2670                 case QLINK_CMD_RESULT_ENOTFOUND:
2671                         ret = -ENOENT;
2672                         break;
2673                 default:
2674                         pr_err("cmd exec failed: 0x%.4X\n", res_code);
2675                         ret = -EFAULT;
2676                         break;
2677                 }
2678                 goto out;
2679         }
2680
2681         resp = (struct qlink_resp_get_chan_stats *)resp_skb->data;
2682         ret = qtnf_cmd_resp_proc_chan_stat_info(stats, resp->info,
2683                                                 var_data_len);
2684
2685 out:
2686         qtnf_bus_unlock(mac->bus);
2687         consume_skb(resp_skb);
2688         return ret;
2689 }
2690
2691 int qtnf_cmd_send_chan_switch(struct qtnf_vif *vif,
2692                               struct cfg80211_csa_settings *params)
2693 {
2694         struct qtnf_wmac *mac = vif->mac;
2695         struct qlink_cmd_chan_switch *cmd;
2696         struct sk_buff *cmd_skb;
2697         u16 res_code = QLINK_CMD_RESULT_OK;
2698         int ret;
2699
2700         cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, vif->vifid,
2701                                             QLINK_CMD_CHAN_SWITCH,
2702                                             sizeof(*cmd));
2703         if (!cmd_skb)
2704                 return -ENOMEM;
2705
2706         qtnf_bus_lock(mac->bus);
2707
2708         cmd = (struct qlink_cmd_chan_switch *)cmd_skb->data;
2709         cmd->channel = cpu_to_le16(params->chandef.chan->hw_value);
2710         cmd->radar_required = params->radar_required;
2711         cmd->block_tx = params->block_tx;
2712         cmd->beacon_count = params->count;
2713
2714         ret = qtnf_cmd_send(mac->bus, cmd_skb, &res_code);
2715
2716         if (unlikely(ret))
2717                 goto out;
2718
2719         switch (res_code) {
2720         case QLINK_CMD_RESULT_OK:
2721                 ret = 0;
2722                 break;
2723         case QLINK_CMD_RESULT_ENOTFOUND:
2724                 ret = -ENOENT;
2725                 break;
2726         case QLINK_CMD_RESULT_ENOTSUPP:
2727                 ret = -EOPNOTSUPP;
2728                 break;
2729         case QLINK_CMD_RESULT_EALREADY:
2730                 ret = -EALREADY;
2731                 break;
2732         case QLINK_CMD_RESULT_INVALID:
2733         default:
2734                 ret = -EFAULT;
2735                 break;
2736         }
2737
2738 out:
2739         qtnf_bus_unlock(mac->bus);
2740         return ret;
2741 }
2742
2743 int qtnf_cmd_get_channel(struct qtnf_vif *vif, struct cfg80211_chan_def *chdef)
2744 {
2745         struct qtnf_bus *bus = vif->mac->bus;
2746         const struct qlink_resp_channel_get *resp;
2747         struct sk_buff *cmd_skb;
2748         struct sk_buff *resp_skb = NULL;
2749         u16 res_code = QLINK_CMD_RESULT_OK;
2750         int ret;
2751
2752         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2753                                             QLINK_CMD_CHAN_GET,
2754                                             sizeof(struct qlink_cmd));
2755         if (!cmd_skb)
2756                 return -ENOMEM;
2757
2758         qtnf_bus_lock(bus);
2759
2760         ret = qtnf_cmd_send_with_reply(bus, cmd_skb, &resp_skb, &res_code,
2761                                        sizeof(*resp), NULL);
2762
2763         qtnf_bus_unlock(bus);
2764
2765         if (unlikely(ret))
2766                 goto out;
2767
2768         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2769                 ret = -ENODATA;
2770                 goto out;
2771         }
2772
2773         resp = (const struct qlink_resp_channel_get *)resp_skb->data;
2774         qlink_chandef_q2cfg(priv_to_wiphy(vif->mac), &resp->chan, chdef);
2775
2776 out:
2777         consume_skb(resp_skb);
2778         return ret;
2779 }
2780
2781 int qtnf_cmd_start_cac(const struct qtnf_vif *vif,
2782                        const struct cfg80211_chan_def *chdef,
2783                        u32 cac_time_ms)
2784 {
2785         struct qtnf_bus *bus = vif->mac->bus;
2786         struct sk_buff *cmd_skb;
2787         struct qlink_cmd_start_cac *cmd;
2788         int ret;
2789         u16 res_code;
2790
2791         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2792                                             QLINK_CMD_START_CAC,
2793                                             sizeof(*cmd));
2794         if (!cmd_skb)
2795                 return -ENOMEM;
2796
2797         cmd = (struct qlink_cmd_start_cac *)cmd_skb->data;
2798         cmd->cac_time_ms = cpu_to_le32(cac_time_ms);
2799         qlink_chandef_cfg2q(chdef, &cmd->chan);
2800
2801         qtnf_bus_lock(bus);
2802         ret = qtnf_cmd_send(bus, cmd_skb, &res_code);
2803         qtnf_bus_unlock(bus);
2804
2805         if (ret)
2806                 return ret;
2807
2808         switch (res_code) {
2809         case QLINK_CMD_RESULT_OK:
2810                 break;
2811         default:
2812                 ret = -EOPNOTSUPP;
2813                 break;
2814         }
2815
2816         return ret;
2817 }
2818
2819 int qtnf_cmd_set_mac_acl(const struct qtnf_vif *vif,
2820                          const struct cfg80211_acl_data *params)
2821 {
2822         struct qtnf_bus *bus = vif->mac->bus;
2823         struct sk_buff *cmd_skb;
2824         struct qlink_tlv_hdr *tlv;
2825         size_t acl_size = qtnf_cmd_acl_data_size(params);
2826         u16 res_code;
2827         int ret;
2828
2829         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2830                                             QLINK_CMD_SET_MAC_ACL,
2831                                             sizeof(struct qlink_cmd));
2832         if (!cmd_skb)
2833                 return -ENOMEM;
2834
2835         tlv = skb_put(cmd_skb, sizeof(*tlv) + acl_size);
2836         tlv->type = cpu_to_le16(QTN_TLV_ID_ACL_DATA);
2837         tlv->len = cpu_to_le16(acl_size);
2838         qlink_acl_data_cfg2q(params, (struct qlink_acl_data *)tlv->val);
2839
2840         qtnf_bus_lock(bus);
2841         ret = qtnf_cmd_send(bus, cmd_skb, &res_code);
2842         qtnf_bus_unlock(bus);
2843
2844         if (unlikely(ret))
2845                 return ret;
2846
2847         switch (res_code) {
2848         case QLINK_CMD_RESULT_OK:
2849                 break;
2850         case QLINK_CMD_RESULT_INVALID:
2851                 ret = -EINVAL;
2852                 break;
2853         default:
2854                 ret = -EOPNOTSUPP;
2855                 break;
2856         }
2857
2858         return ret;
2859 }
2860
2861 int qtnf_cmd_send_pm_set(const struct qtnf_vif *vif, u8 pm_mode, int timeout)
2862 {
2863         struct qtnf_bus *bus = vif->mac->bus;
2864         struct sk_buff *cmd_skb;
2865         u16 res_code = QLINK_CMD_RESULT_OK;
2866         struct qlink_cmd_pm_set *cmd;
2867         int ret = 0;
2868
2869         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2870                                             QLINK_CMD_PM_SET, sizeof(*cmd));
2871         if (!cmd_skb)
2872                 return -ENOMEM;
2873
2874         cmd = (struct qlink_cmd_pm_set *)cmd_skb->data;
2875         cmd->pm_mode = pm_mode;
2876         cmd->pm_standby_timer = cpu_to_le32(timeout);
2877
2878         qtnf_bus_lock(bus);
2879
2880         ret = qtnf_cmd_send(bus, cmd_skb, &res_code);
2881
2882         if (unlikely(ret))
2883                 goto out;
2884
2885         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2886                 pr_err("cmd exec failed: 0x%.4X\n", res_code);
2887                 ret = -EFAULT;
2888         }
2889
2890 out:
2891         qtnf_bus_unlock(bus);
2892         return ret;
2893 }
2894
2895 int qtnf_cmd_send_wowlan_set(const struct qtnf_vif *vif,
2896                              const struct cfg80211_wowlan *wowl)
2897 {
2898         struct qtnf_bus *bus = vif->mac->bus;
2899         struct sk_buff *cmd_skb;
2900         u16 res_code = QLINK_CMD_RESULT_OK;
2901         struct qlink_cmd_wowlan_set *cmd;
2902         u32 triggers = 0;
2903         int count = 0;
2904         int ret = 0;
2905
2906         cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2907                                             QLINK_CMD_WOWLAN_SET, sizeof(*cmd));
2908         if (!cmd_skb)
2909                 return -ENOMEM;
2910
2911         qtnf_bus_lock(bus);
2912
2913         cmd = (struct qlink_cmd_wowlan_set *)cmd_skb->data;
2914
2915         if (wowl) {
2916                 if (wowl->disconnect)
2917                         triggers |=  QLINK_WOWLAN_TRIG_DISCONNECT;
2918
2919                 if (wowl->magic_pkt)
2920                         triggers |= QLINK_WOWLAN_TRIG_MAGIC_PKT;
2921
2922                 if (wowl->n_patterns && wowl->patterns) {
2923                         triggers |= QLINK_WOWLAN_TRIG_PATTERN_PKT;
2924                         while (count < wowl->n_patterns) {
2925                                 qtnf_cmd_skb_put_tlv_arr(cmd_skb,
2926                                         QTN_TLV_ID_WOWLAN_PATTERN,
2927                                         wowl->patterns[count].pattern,
2928                                         wowl->patterns[count].pattern_len);
2929                                 count++;
2930                         }
2931                 }
2932         }
2933
2934         cmd->triggers = cpu_to_le32(triggers);
2935
2936         ret = qtnf_cmd_send(bus, cmd_skb, &res_code);
2937
2938         if (unlikely(ret))
2939                 goto out;
2940
2941         if (unlikely(res_code != QLINK_CMD_RESULT_OK)) {
2942                 pr_err("cmd exec failed: 0x%.4X\n", res_code);
2943                 ret = -EFAULT;
2944         }
2945
2946 out:
2947         qtnf_bus_unlock(bus);
2948         return ret;
2949 }