Pileus Git - ~andy/linux/blob - drivers/net/wireless/wl12xx/scan.c

   1 /*
   2  * This file is part of wl1271
   3  *
   4  * Copyright (C) 2009-2010 Nokia Corporation
   5  *
   6  * Contact: Luciano Coelho <luciano.coelho@nokia.com>
   7  *
   8  * This program is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU General Public License
  10  * version 2 as published by the Free Software Foundation.
  11  *
  12  * This program is distributed in the hope that it will be useful, but
  13  * WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  15  * General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU General Public License
  18  * along with this program; if not, write to the Free Software
  19  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
  20  * 02110-1301 USA
  21  *
  22  */
  23
  24 #include <linux/ieee80211.h>
  25
  26 #include "wl12xx.h"
  27 #include "debug.h"
  28 #include "cmd.h"
  29 #include "scan.h"
  30 #include "acx.h"
  31 #include "ps.h"
  32 #include "tx.h"
  33
  34 void wl1271_scan_complete_work(struct work_struct *work)
  35 {
  36         struct delayed_work *dwork;
  37         struct wl1271 *wl;
  38         struct ieee80211_vif *vif;
  39         struct wl12xx_vif *wlvif;
  40         int ret;
  41
  42         dwork = container_of(work, struct delayed_work, work);
  43         wl = container_of(dwork, struct wl1271, scan_complete_work);
  44
  45         wl1271_debug(DEBUG_SCAN, "Scanning complete");
  46
  47         mutex_lock(&wl->mutex);
  48
  49         if (wl->state == WL1271_STATE_OFF)
  50                 goto out;
  51
  52         if (wl->scan.state == WL1271_SCAN_STATE_IDLE)
  53                 goto out;
  54
  55         vif = wl->scan_vif;
  56         wlvif = wl12xx_vif_to_data(vif);
  57
  58         /*
  59          * Rearm the tx watchdog just before idling scan. This
  60          * prevents just-finished scans from triggering the watchdog
  61          */
  62         wl12xx_rearm_tx_watchdog_locked(wl);
  63
  64         wl->scan.state = WL1271_SCAN_STATE_IDLE;
  65         memset(wl->scan.scanned_ch, 0, sizeof(wl->scan.scanned_ch));
  66         wl->scan.req = NULL;
  67         wl->scan_vif = NULL;
  68
  69         ret = wl1271_ps_elp_wakeup(wl);
  70         if (ret < 0)
  71                 goto out;
  72
  73         if (test_bit(WLVIF_FLAG_STA_ASSOCIATED, &wlvif->flags)) {
  74                 /* restore hardware connection monitoring template */
  75                 wl1271_cmd_build_ap_probe_req(wl, wlvif, wlvif->probereq);
  76         }
  77
  78         wl1271_ps_elp_sleep(wl);
  79
  80         if (wl->scan.failed) {
  81                 wl1271_info("Scan completed due to error.");
  82                 wl12xx_queue_recovery_work(wl);
  83         }
  84
  85         ieee80211_scan_completed(wl->hw, false);
  86
  87 out:
  88         mutex_unlock(&wl->mutex);
  89
  90 }
  91
  92
  93 static int wl1271_get_scan_channels(struct wl1271 *wl,
  94                                     struct cfg80211_scan_request *req,
  95                                     struct basic_scan_channel_params *channels,
  96                                     enum ieee80211_band band, bool passive)
  97 {
  98         struct conf_scan_settings *c = &wl->conf.scan;
  99         int i, j;
 100         u32 flags;
 101
 102         for (i = 0, j = 0;
 103              i < req->n_channels && j < WL1271_SCAN_MAX_CHANNELS;
 104              i++) {
 105                 flags = req->channels[i]->flags;
 106
 107                 if (!test_bit(i, wl->scan.scanned_ch) &&
 108                     !(flags & IEEE80211_CHAN_DISABLED) &&
 109                     (req->channels[i]->band == band) &&
 110                     /*
 111                      * In passive scans, we scan all remaining
 112                      * channels, even if not marked as such.
 113                      * In active scans, we only scan channels not
 114                      * marked as passive.
 115                      */
 116                     (passive || !(flags & IEEE80211_CHAN_PASSIVE_SCAN))) {
 117                         wl1271_debug(DEBUG_SCAN, "band %d, center_freq %d ",
 118                                      req->channels[i]->band,
 119                                      req->channels[i]->center_freq);
 120                         wl1271_debug(DEBUG_SCAN, "hw_value %d, flags %X",
 121                                      req->channels[i]->hw_value,
 122                                      req->channels[i]->flags);
 123                         wl1271_debug(DEBUG_SCAN,
 124                                      "max_antenna_gain %d, max_power %d",
 125                                      req->channels[i]->max_antenna_gain,
 126                                      req->channels[i]->max_power);
 127                         wl1271_debug(DEBUG_SCAN, "beacon_found %d",
 128                                      req->channels[i]->beacon_found);
 129
 130                         if (!passive) {
 131                                 channels[j].min_duration =
 132                                         cpu_to_le32(c->min_dwell_time_active);
 133                                 channels[j].max_duration =
 134                                         cpu_to_le32(c->max_dwell_time_active);
 135                         } else {
 136                                 channels[j].min_duration =
 137                                         cpu_to_le32(c->min_dwell_time_passive);
 138                                 channels[j].max_duration =
 139                                         cpu_to_le32(c->max_dwell_time_passive);
 140                         }
 141                         channels[j].early_termination = 0;
 142                         channels[j].tx_power_att = req->channels[i]->max_power;
 143                         channels[j].channel = req->channels[i]->hw_value;
 144
 145                         memset(&channels[j].bssid_lsb, 0xff, 4);
 146                         memset(&channels[j].bssid_msb, 0xff, 2);
 147
 148                         /* Mark the channels we already used */
 149                         set_bit(i, wl->scan.scanned_ch);
 150
 151                         j++;
 152                 }
 153         }
 154
 155         return j;
 156 }
 157
 158 #define WL1271_NOTHING_TO_SCAN 1
 159
 160 static int wl1271_scan_send(struct wl1271 *wl, struct ieee80211_vif *vif,
 161                             enum ieee80211_band band,
 162                             bool passive, u32 basic_rate)
 163 {
 164         struct wl12xx_vif *wlvif = wl12xx_vif_to_data(vif);
 165         struct wl1271_cmd_scan *cmd;
 166         struct wl1271_cmd_trigger_scan_to *trigger;
 167         int ret;
 168         u16 scan_options = 0;
 169
 170         /* skip active scans if we don't have SSIDs */
 171         if (!passive && wl->scan.req->n_ssids == 0)
 172                 return WL1271_NOTHING_TO_SCAN;
 173
 174         cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 175         trigger = kzalloc(sizeof(*trigger), GFP_KERNEL);
 176         if (!cmd || !trigger) {
 177                 ret = -ENOMEM;
 178                 goto out;
 179         }
 180
 181         if (wl->conf.scan.split_scan_timeout)
 182                 scan_options |= WL1271_SCAN_OPT_SPLIT_SCAN;
 183
 184         if (passive)
 185                 scan_options |= WL1271_SCAN_OPT_PASSIVE;
 186
 187         if (wlvif->bss_type == BSS_TYPE_AP_BSS ||
 188             test_bit(WLVIF_FLAG_STA_ASSOCIATED, &wlvif->flags))
 189                 cmd->params.role_id = wlvif->role_id;
 190         else
 191                 cmd->params.role_id = wlvif->dev_role_id;
 192
 193         if (WARN_ON(cmd->params.role_id == WL12XX_INVALID_ROLE_ID)) {
 194                 ret = -EINVAL;
 195                 goto out;
 196         }
 197
 198         cmd->params.scan_options = cpu_to_le16(scan_options);
 199
 200         cmd->params.n_ch = wl1271_get_scan_channels(wl, wl->scan.req,
 201                                                     cmd->channels,
 202                                                     band, passive);
 203         if (cmd->params.n_ch == 0) {
 204                 ret = WL1271_NOTHING_TO_SCAN;
 205                 goto out;
 206         }
 207
 208         cmd->params.tx_rate = cpu_to_le32(basic_rate);
 209         cmd->params.n_probe_reqs = wl->conf.scan.num_probe_reqs;
 210         cmd->params.tid_trigger = CONF_TX_AC_ANY_TID;
 211         cmd->params.scan_tag = WL1271_SCAN_DEFAULT_TAG;
 212
 213         if (band == IEEE80211_BAND_2GHZ)
 214                 cmd->params.band = WL1271_SCAN_BAND_2_4_GHZ;
 215         else
 216                 cmd->params.band = WL1271_SCAN_BAND_5_GHZ;
 217
 218         if (wl->scan.ssid_len && wl->scan.ssid) {
 219                 cmd->params.ssid_len = wl->scan.ssid_len;
 220                 memcpy(cmd->params.ssid, wl->scan.ssid, wl->scan.ssid_len);
 221         }
 222
 223         memcpy(cmd->addr, vif->addr, ETH_ALEN);
 224
 225         ret = wl12xx_cmd_build_probe_req(wl, wlvif,
 226                                          cmd->params.role_id, band,
 227                                          wl->scan.ssid, wl->scan.ssid_len,
 228                                          wl->scan.req->ie,
 229                                          wl->scan.req->ie_len);
 230         if (ret < 0) {
 231                 wl1271_error("PROBE request template failed");
 232                 goto out;
 233         }
 234
 235         trigger->timeout = cpu_to_le32(wl->conf.scan.split_scan_timeout);
 236         ret = wl1271_cmd_send(wl, CMD_TRIGGER_SCAN_TO, trigger,
 237                               sizeof(*trigger), 0);
 238         if (ret < 0) {
 239                 wl1271_error("trigger scan to failed for hw scan");
 240                 goto out;
 241         }
 242
 243         wl1271_dump(DEBUG_SCAN, "SCAN: ", cmd, sizeof(*cmd));
 244
 245         ret = wl1271_cmd_send(wl, CMD_SCAN, cmd, sizeof(*cmd), 0);
 246         if (ret < 0) {
 247                 wl1271_error("SCAN failed");
 248                 goto out;
 249         }
 250
 251 out:
 252         kfree(cmd);
 253         kfree(trigger);
 254         return ret;
 255 }
 256
 257 void wl1271_scan_stm(struct wl1271 *wl, struct ieee80211_vif *vif)
 258 {
 259         struct wl12xx_vif *wlvif = wl12xx_vif_to_data(vif);
 260         int ret = 0;
 261         enum ieee80211_band band;
 262         u32 rate, mask;
 263
 264         switch (wl->scan.state) {
 265         case WL1271_SCAN_STATE_IDLE:
 266                 break;
 267
 268         case WL1271_SCAN_STATE_2GHZ_ACTIVE:
 269                 band = IEEE80211_BAND_2GHZ;
 270                 mask = wlvif->bitrate_masks[band];
 271                 if (wl->scan.req->no_cck) {
 272                         mask &= ~CONF_TX_CCK_RATES;
 273                         if (!mask)
 274                                 mask = CONF_TX_RATE_MASK_BASIC_P2P;
 275                 }
 276                 rate = wl1271_tx_min_rate_get(wl, mask);
 277                 ret = wl1271_scan_send(wl, vif, band, false, rate);
 278                 if (ret == WL1271_NOTHING_TO_SCAN) {
 279                         wl->scan.state = WL1271_SCAN_STATE_2GHZ_PASSIVE;
 280                         wl1271_scan_stm(wl, vif);
 281                 }
 282
 283                 break;
 284
 285         case WL1271_SCAN_STATE_2GHZ_PASSIVE:
 286                 band = IEEE80211_BAND_2GHZ;
 287                 mask = wlvif->bitrate_masks[band];
 288                 if (wl->scan.req->no_cck) {
 289                         mask &= ~CONF_TX_CCK_RATES;
 290                         if (!mask)
 291                                 mask = CONF_TX_RATE_MASK_BASIC_P2P;
 292                 }
 293                 rate = wl1271_tx_min_rate_get(wl, mask);
 294                 ret = wl1271_scan_send(wl, vif, band, true, rate);
 295                 if (ret == WL1271_NOTHING_TO_SCAN) {
 296                         if (wl->enable_11a)
 297                                 wl->scan.state = WL1271_SCAN_STATE_5GHZ_ACTIVE;
 298                         else
 299                                 wl->scan.state = WL1271_SCAN_STATE_DONE;
 300                         wl1271_scan_stm(wl, vif);
 301                 }
 302
 303                 break;
 304
 305         case WL1271_SCAN_STATE_5GHZ_ACTIVE:
 306                 band = IEEE80211_BAND_5GHZ;
 307                 rate = wl1271_tx_min_rate_get(wl, wlvif->bitrate_masks[band]);
 308                 ret = wl1271_scan_send(wl, vif, band, false, rate);
 309                 if (ret == WL1271_NOTHING_TO_SCAN) {
 310                         wl->scan.state = WL1271_SCAN_STATE_5GHZ_PASSIVE;
 311                         wl1271_scan_stm(wl, vif);
 312                 }
 313
 314                 break;
 315
 316         case WL1271_SCAN_STATE_5GHZ_PASSIVE:
 317                 band = IEEE80211_BAND_5GHZ;
 318                 rate = wl1271_tx_min_rate_get(wl, wlvif->bitrate_masks[band]);
 319                 ret = wl1271_scan_send(wl, vif, band, true, rate);
 320                 if (ret == WL1271_NOTHING_TO_SCAN) {
 321                         wl->scan.state = WL1271_SCAN_STATE_DONE;
 322                         wl1271_scan_stm(wl, vif);
 323                 }
 324
 325                 break;
 326
 327         case WL1271_SCAN_STATE_DONE:
 328                 wl->scan.failed = false;
 329                 cancel_delayed_work(&wl->scan_complete_work);
 330                 ieee80211_queue_delayed_work(wl->hw, &wl->scan_complete_work,
 331                                              msecs_to_jiffies(0));
 332                 break;
 333
 334         default:
 335                 wl1271_error("invalid scan state");
 336                 break;
 337         }
 338
 339         if (ret < 0) {
 340                 cancel_delayed_work(&wl->scan_complete_work);
 341                 ieee80211_queue_delayed_work(wl->hw, &wl->scan_complete_work,
 342                                              msecs_to_jiffies(0));
 343         }
 344 }
 345
 346 int wl1271_scan(struct wl1271 *wl, struct ieee80211_vif *vif,
 347                 const u8 *ssid, size_t ssid_len,
 348                 struct cfg80211_scan_request *req)
 349 {
 350         /*
 351          * cfg80211 should guarantee that we don't get more channels
 352          * than what we have registered.
 353          */
 354         BUG_ON(req->n_channels > WL1271_MAX_CHANNELS);
 355
 356         if (wl->scan.state != WL1271_SCAN_STATE_IDLE)
 357                 return -EBUSY;
 358
 359         wl->scan.state = WL1271_SCAN_STATE_2GHZ_ACTIVE;
 360
 361         if (ssid_len && ssid) {
 362                 wl->scan.ssid_len = ssid_len;
 363                 memcpy(wl->scan.ssid, ssid, ssid_len);
 364         } else {
 365                 wl->scan.ssid_len = 0;
 366         }
 367
 368         wl->scan_vif = vif;
 369         wl->scan.req = req;
 370         memset(wl->scan.scanned_ch, 0, sizeof(wl->scan.scanned_ch));
 371
 372         /* we assume failure so that timeout scenarios are handled correctly */
 373         wl->scan.failed = true;
 374         ieee80211_queue_delayed_work(wl->hw, &wl->scan_complete_work,
 375                                      msecs_to_jiffies(WL1271_SCAN_TIMEOUT));
 376
 377         wl1271_scan_stm(wl, vif);
 378
 379         return 0;
 380 }
 381
 382 int wl1271_scan_stop(struct wl1271 *wl)
 383 {
 384         struct wl1271_cmd_header *cmd = NULL;
 385         int ret = 0;
 386
 387         if (WARN_ON(wl->scan.state == WL1271_SCAN_STATE_IDLE))
 388                 return -EINVAL;
 389
 390         wl1271_debug(DEBUG_CMD, "cmd scan stop");
 391
 392         cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 393         if (!cmd) {
 394                 ret = -ENOMEM;
 395                 goto out;
 396         }
 397
 398         ret = wl1271_cmd_send(wl, CMD_STOP_SCAN, cmd,
 399                               sizeof(*cmd), 0);
 400         if (ret < 0) {
 401                 wl1271_error("cmd stop_scan failed");
 402                 goto out;
 403         }
 404 out:
 405         kfree(cmd);
 406         return ret;
 407 }
 408
 409 static int
 410 wl1271_scan_get_sched_scan_channels(struct wl1271 *wl,
 411                                     struct cfg80211_sched_scan_request *req,
 412                                     struct conn_scan_ch_params *channels,
 413                                     u32 band, bool radar, bool passive,
 414                                     int start, int max_channels)
 415 {
 416         struct conf_sched_scan_settings *c = &wl->conf.sched_scan;
 417         int i, j;
 418         u32 flags;
 419         bool force_passive = !req->n_ssids;
 420
 421         for (i = 0, j = start;
 422              i < req->n_channels && j < max_channels;
 423              i++) {
 424                 flags = req->channels[i]->flags;
 425
 426                 if (force_passive)
 427                         flags |= IEEE80211_CHAN_PASSIVE_SCAN;
 428
 429                 if ((req->channels[i]->band == band) &&
 430                     !(flags & IEEE80211_CHAN_DISABLED) &&
 431                     (!!(flags & IEEE80211_CHAN_RADAR) == radar) &&
 432                     /* if radar is set, we ignore the passive flag */
 433                     (radar ||
 434                      !!(flags & IEEE80211_CHAN_PASSIVE_SCAN) == passive)) {
 435                         wl1271_debug(DEBUG_SCAN, "band %d, center_freq %d ",
 436                                      req->channels[i]->band,
 437                                      req->channels[i]->center_freq);
 438                         wl1271_debug(DEBUG_SCAN, "hw_value %d, flags %X",
 439                                      req->channels[i]->hw_value,
 440                                      req->channels[i]->flags);
 441                         wl1271_debug(DEBUG_SCAN, "max_power %d",
 442                                      req->channels[i]->max_power);
 443
 444                         if (flags & IEEE80211_CHAN_RADAR) {
 445                                 channels[j].flags |= SCAN_CHANNEL_FLAGS_DFS;
 446
 447                                 channels[j].passive_duration =
 448                                         cpu_to_le16(c->dwell_time_dfs);
 449                         } else {
 450                                 channels[j].passive_duration =
 451                                         cpu_to_le16(c->dwell_time_passive);
 452                         }
 453
 454                         channels[j].min_duration =
 455                                 cpu_to_le16(c->min_dwell_time_active);
 456                         channels[j].max_duration =
 457                                 cpu_to_le16(c->max_dwell_time_active);
 458
 459                         channels[j].tx_power_att = req->channels[i]->max_power;
 460                         channels[j].channel = req->channels[i]->hw_value;
 461
 462                         j++;
 463                 }
 464         }
 465
 466         return j - start;
 467 }
 468
 469 static bool
 470 wl1271_scan_sched_scan_channels(struct wl1271 *wl,
 471                                 struct cfg80211_sched_scan_request *req,
 472                                 struct wl1271_cmd_sched_scan_config *cfg)
 473 {
 474         cfg->passive[0] =
 475                 wl1271_scan_get_sched_scan_channels(wl, req, cfg->channels_2,
 476                                                     IEEE80211_BAND_2GHZ,
 477                                                     false, true, 0,
 478                                                     MAX_CHANNELS_2GHZ);
 479         cfg->active[0] =
 480                 wl1271_scan_get_sched_scan_channels(wl, req, cfg->channels_2,
 481                                                     IEEE80211_BAND_2GHZ,
 482                                                     false, false,
 483                                                     cfg->passive[0],
 484                                                     MAX_CHANNELS_2GHZ);
 485         cfg->passive[1] =
 486                 wl1271_scan_get_sched_scan_channels(wl, req, cfg->channels_5,
 487                                                     IEEE80211_BAND_5GHZ,
 488                                                     false, true, 0,
 489                                                     MAX_CHANNELS_5GHZ);
 490         cfg->dfs =
 491                 wl1271_scan_get_sched_scan_channels(wl, req, cfg->channels_5,
 492                                                     IEEE80211_BAND_5GHZ,
 493                                                     true, true,
 494                                                     cfg->passive[1],
 495                                                     MAX_CHANNELS_5GHZ);
 496         cfg->active[1] =
 497                 wl1271_scan_get_sched_scan_channels(wl, req, cfg->channels_5,
 498                                                     IEEE80211_BAND_5GHZ,
 499                                                     false, false,
 500                                                     cfg->passive[1] + cfg->dfs,
 501                                                     MAX_CHANNELS_5GHZ);
 502         /* 802.11j channels are not supported yet */
 503         cfg->passive[2] = 0;
 504         cfg->active[2] = 0;
 505
 506         wl1271_debug(DEBUG_SCAN, "    2.4GHz: active %d passive %d",
 507                      cfg->active[0], cfg->passive[0]);
 508         wl1271_debug(DEBUG_SCAN, "    5GHz: active %d passive %d",
 509                      cfg->active[1], cfg->passive[1]);
 510         wl1271_debug(DEBUG_SCAN, "    DFS: %d", cfg->dfs);
 511
 512         return  cfg->passive[0] || cfg->active[0] ||
 513                 cfg->passive[1] || cfg->active[1] || cfg->dfs ||
 514                 cfg->passive[2] || cfg->active[2];
 515 }
 516
 517 /* Returns the scan type to be used or a negative value on error */
 518 static int
 519 wl12xx_scan_sched_scan_ssid_list(struct wl1271 *wl,
 520                                  struct cfg80211_sched_scan_request *req)
 521 {
 522         struct wl1271_cmd_sched_scan_ssid_list *cmd = NULL;
 523         struct cfg80211_match_set *sets = req->match_sets;
 524         struct cfg80211_ssid *ssids = req->ssids;
 525         int ret = 0, type, i, j, n_match_ssids = 0;
 526
 527         wl1271_debug(DEBUG_CMD, "cmd sched scan ssid list");
 528
 529         /* count the match sets that contain SSIDs */
 530         for (i = 0; i < req->n_match_sets; i++)
 531                 if (sets[i].ssid.ssid_len > 0)
 532                         n_match_ssids++;
 533
 534         /* No filter, no ssids or only bcast ssid */
 535         if (!n_match_ssids &&
 536             (!req->n_ssids ||
 537              (req->n_ssids == 1 && req->ssids[0].ssid_len == 0))) {
 538                 type = SCAN_SSID_FILTER_ANY;
 539                 goto out;
 540         }
 541
 542         cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 543         if (!cmd) {
 544                 ret = -ENOMEM;
 545                 goto out;
 546         }
 547
 548         if (!n_match_ssids) {
 549                 /* No filter, with ssids */
 550                 type = SCAN_SSID_FILTER_DISABLED;
 551
 552                 for (i = 0; i < req->n_ssids; i++) {
 553                         cmd->ssids[cmd->n_ssids].type = (ssids[i].ssid_len) ?
 554                                 SCAN_SSID_TYPE_HIDDEN : SCAN_SSID_TYPE_PUBLIC;
 555                         cmd->ssids[cmd->n_ssids].len = ssids[i].ssid_len;
 556                         memcpy(cmd->ssids[cmd->n_ssids].ssid, ssids[i].ssid,
 557                                ssids[i].ssid_len);
 558                         cmd->n_ssids++;
 559                 }
 560         } else {
 561                 type = SCAN_SSID_FILTER_LIST;
 562
 563                 /* Add all SSIDs from the filters */
 564                 for (i = 0; i < req->n_match_sets; i++) {
 565                         /* ignore sets without SSIDs */
 566                         if (!sets[i].ssid.ssid_len)
 567                                 continue;
 568
 569                         cmd->ssids[cmd->n_ssids].type = SCAN_SSID_TYPE_PUBLIC;
 570                         cmd->ssids[cmd->n_ssids].len = sets[i].ssid.ssid_len;
 571                         memcpy(cmd->ssids[cmd->n_ssids].ssid,
 572                                sets[i].ssid.ssid, sets[i].ssid.ssid_len);
 573                         cmd->n_ssids++;
 574                 }
 575                 if ((req->n_ssids > 1) ||
 576                     (req->n_ssids == 1 && req->ssids[0].ssid_len > 0)) {
 577                         /*
 578                          * Mark all the SSIDs passed in the SSID list as HIDDEN,
 579                          * so they're used in probe requests.
 580                          */
 581                         for (i = 0; i < req->n_ssids; i++) {
 582                                 if (!req->ssids[i].ssid_len)
 583                                         continue;
 584
 585                                 for (j = 0; j < cmd->n_ssids; j++)
 586                                         if (!memcmp(req->ssids[i].ssid,
 587                                                    cmd->ssids[j].ssid,
 588                                                    req->ssids[i].ssid_len)) {
 589                                                 cmd->ssids[j].type =
 590                                                         SCAN_SSID_TYPE_HIDDEN;
 591                                                 break;
 592                                         }
 593                                 /* Fail if SSID isn't present in the filters */
 594                                 if (j == cmd->n_ssids) {
 595                                         ret = -EINVAL;
 596                                         goto out_free;
 597                                 }
 598                         }
 599                 }
 600         }
 601
 602         wl1271_dump(DEBUG_SCAN, "SSID_LIST: ", cmd, sizeof(*cmd));
 603
 604         ret = wl1271_cmd_send(wl, CMD_CONNECTION_SCAN_SSID_CFG, cmd,
 605                               sizeof(*cmd), 0);
 606         if (ret < 0) {
 607                 wl1271_error("cmd sched scan ssid list failed");
 608                 goto out_free;
 609         }
 610
 611 out_free:
 612         kfree(cmd);
 613 out:
 614         if (ret < 0)
 615                 return ret;
 616         return type;
 617 }
 618
 619 int wl1271_scan_sched_scan_config(struct wl1271 *wl,
 620                                   struct wl12xx_vif *wlvif,
 621                                   struct cfg80211_sched_scan_request *req,
 622                                   struct ieee80211_sched_scan_ies *ies)
 623 {
 624         struct wl1271_cmd_sched_scan_config *cfg = NULL;
 625         struct conf_sched_scan_settings *c = &wl->conf.sched_scan;
 626         int i, ret;
 627         bool force_passive = !req->n_ssids;
 628
 629         wl1271_debug(DEBUG_CMD, "cmd sched_scan scan config");
 630
 631         cfg = kzalloc(sizeof(*cfg), GFP_KERNEL);
 632         if (!cfg)
 633                 return -ENOMEM;
 634
 635         cfg->rssi_threshold = c->rssi_threshold;
 636         cfg->snr_threshold  = c->snr_threshold;
 637         cfg->n_probe_reqs = c->num_probe_reqs;
 638         /* cycles set to 0 it means infinite (until manually stopped) */
 639         cfg->cycles = 0;
 640         /* report APs when at least 1 is found */
 641         cfg->report_after = 1;
 642         /* don't stop scanning automatically when something is found */
 643         cfg->terminate = 0;
 644         cfg->tag = WL1271_SCAN_DEFAULT_TAG;
 645         /* don't filter on BSS type */
 646         cfg->bss_type = SCAN_BSS_TYPE_ANY;
 647         /* currently NL80211 supports only a single interval */
 648         for (i = 0; i < SCAN_MAX_CYCLE_INTERVALS; i++)
 649                 cfg->intervals[i] = cpu_to_le32(req->interval);
 650
 651         cfg->ssid_len = 0;
 652         ret = wl12xx_scan_sched_scan_ssid_list(wl, req);
 653         if (ret < 0)
 654                 goto out;
 655
 656         cfg->filter_type = ret;
 657
 658         wl1271_debug(DEBUG_SCAN, "filter_type = %d", cfg->filter_type);
 659
 660         if (!wl1271_scan_sched_scan_channels(wl, req, cfg)) {
 661                 wl1271_error("scan channel list is empty");
 662                 ret = -EINVAL;
 663                 goto out;
 664         }
 665
 666         if (!force_passive && cfg->active[0]) {
 667                 u8 band = IEEE80211_BAND_2GHZ;
 668                 ret = wl12xx_cmd_build_probe_req(wl, wlvif,
 669                                                  wlvif->dev_role_id, band,
 670                                                  req->ssids[0].ssid,
 671                                                  req->ssids[0].ssid_len,
 672                                                  ies->ie[band],
 673                                                  ies->len[band]);
 674                 if (ret < 0) {
 675                         wl1271_error("2.4GHz PROBE request template failed");
 676                         goto out;
 677                 }
 678         }
 679
 680         if (!force_passive && cfg->active[1]) {
 681                 u8 band = IEEE80211_BAND_5GHZ;
 682                 ret = wl12xx_cmd_build_probe_req(wl, wlvif,
 683                                                  wlvif->dev_role_id, band,
 684                                                  req->ssids[0].ssid,
 685                                                  req->ssids[0].ssid_len,
 686                                                  ies->ie[band],
 687                                                  ies->len[band]);
 688                 if (ret < 0) {
 689                         wl1271_error("5GHz PROBE request template failed");
 690                         goto out;
 691                 }
 692         }
 693
 694         wl1271_dump(DEBUG_SCAN, "SCAN_CFG: ", cfg, sizeof(*cfg));
 695
 696         ret = wl1271_cmd_send(wl, CMD_CONNECTION_SCAN_CFG, cfg,
 697                               sizeof(*cfg), 0);
 698         if (ret < 0) {
 699                 wl1271_error("SCAN configuration failed");
 700                 goto out;
 701         }
 702 out:
 703         kfree(cfg);
 704         return ret;
 705 }
 706
 707 int wl1271_scan_sched_scan_start(struct wl1271 *wl, struct wl12xx_vif *wlvif)
 708 {
 709         struct wl1271_cmd_sched_scan_start *start;
 710         int ret = 0;
 711
 712         wl1271_debug(DEBUG_CMD, "cmd periodic scan start");
 713
 714         if (wlvif->bss_type != BSS_TYPE_STA_BSS)
 715                 return -EOPNOTSUPP;
 716
 717         if (test_bit(WLVIF_FLAG_IN_USE, &wlvif->flags))
 718                 return -EBUSY;
 719
 720         start = kzalloc(sizeof(*start), GFP_KERNEL);
 721         if (!start)
 722                 return -ENOMEM;
 723
 724         start->tag = WL1271_SCAN_DEFAULT_TAG;
 725
 726         ret = wl1271_cmd_send(wl, CMD_START_PERIODIC_SCAN, start,
 727                               sizeof(*start), 0);
 728         if (ret < 0) {
 729                 wl1271_error("failed to send scan start command");
 730                 goto out_free;
 731         }
 732
 733 out_free:
 734         kfree(start);
 735         return ret;
 736 }
 737
 738 void wl1271_scan_sched_scan_results(struct wl1271 *wl)
 739 {
 740         wl1271_debug(DEBUG_SCAN, "got periodic scan results");
 741
 742         ieee80211_sched_scan_results(wl->hw);
 743 }
 744
 745 void wl1271_scan_sched_scan_stop(struct wl1271 *wl)
 746 {
 747         struct wl1271_cmd_sched_scan_stop *stop;
 748         int ret = 0;
 749
 750         wl1271_debug(DEBUG_CMD, "cmd periodic scan stop");
 751
 752         /* FIXME: what to do if alloc'ing to stop fails? */
 753         stop = kzalloc(sizeof(*stop), GFP_KERNEL);
 754         if (!stop) {
 755                 wl1271_error("failed to alloc memory to send sched scan stop");
 756                 return;
 757         }
 758
 759         stop->tag = WL1271_SCAN_DEFAULT_TAG;
 760
 761         ret = wl1271_cmd_send(wl, CMD_STOP_PERIODIC_SCAN, stop,
 762                               sizeof(*stop), 0);
 763         if (ret < 0) {
 764                 wl1271_error("failed to send sched scan stop command");
 765                 goto out_free;
 766         }
 767
 768 out_free:
 769         kfree(stop);
 770 }