1 /*
   2  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
   3  * Use is subject to license terms.
   4  */
   5 
   6 /*
   7  * Copyright(c) 2004
   8  *      Damien Bergamini <damien.bergamini@free.fr>. All rights reserved.
   9  *
  10  * Redistribution and use in source and binary forms, with or without
  11  * modification, are permitted provided that the following conditions
  12  * are met:
  13  * 1. Redistributions of source code must retain the above copyright
  14  *    notice unmodified, this list of conditions, and the following
  15  *    disclaimer.
  16  * 2. Redistributions in binary form must reproduce the above copyright
  17  *    notice, this list of conditions and the following disclaimer in the
  18  *    documentation and/or other materials provided with the distribution.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25  * DAMAGES(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  30  * SUCH DAMAGE.
  31  */
  32 
  33 #include <sys/types.h>
  34 #include <sys/byteorder.h>
  35 #include <sys/conf.h>
  36 #include <sys/cmn_err.h>
  37 #include <sys/stat.h>
  38 #include <sys/ddi.h>
  39 #include <sys/sunddi.h>
  40 #include <sys/strsubr.h>
  41 #include <sys/ethernet.h>
  42 #include <inet/common.h>
  43 #include <inet/nd.h>
  44 #include <inet/mi.h>
  45 #include <sys/note.h>
  46 #include <sys/stream.h>
  47 #include <sys/strsun.h>
  48 #include <sys/modctl.h>
  49 #include <sys/devops.h>
  50 #include <sys/dlpi.h>
  51 #include <sys/mac_provider.h>
  52 #include <net/if.h>
  53 #include <sys/mac_wifi.h>
  54 #include <sys/varargs.h>
  55 #include <sys/policy.h>
  56 
  57 #include "ipw2100.h"
  58 #include "ipw2100_impl.h"
  59 #include <inet/wifi_ioctl.h>
  60 
  61 /*
  62  * kCF framework include files
  63  */
  64 #include <sys/crypto/common.h>
  65 #include <sys/crypto/api.h>
  66 
  67 static void   *ipw2100_ssp      = NULL;
  68 static char   ipw2100_ident[]   = IPW2100_DRV_DESC;
  69 
  70 /*
  71  * PIO access attribute for register
  72  */
  73 static ddi_device_acc_attr_t ipw2100_csr_accattr = {
  74         DDI_DEVICE_ATTR_V0,
  75         DDI_STRUCTURE_LE_ACC,
  76         DDI_STRICTORDER_ACC
  77 };
  78 
  79 static ddi_device_acc_attr_t ipw2100_dma_accattr = {
  80         DDI_DEVICE_ATTR_V0,
  81         DDI_NEVERSWAP_ACC,
  82         DDI_STRICTORDER_ACC
  83 };
  84 
  85 static ddi_dma_attr_t ipw2100_dma_attr = {
  86         DMA_ATTR_V0,
  87         0x0000000000000000ULL,
  88         0x00000000ffffffffULL,
  89         0x00000000ffffffffULL,
  90         0x0000000000000004ULL,
  91         0xfff,
  92         1,
  93         0x00000000ffffffffULL,
  94         0x00000000ffffffffULL,
  95         1,
  96         1,
  97         0
  98 };
  99 
 100 static const struct ieee80211_rateset ipw2100_rateset_11b = { 4,
 101         {2, 4, 11, 22}
 102 };
 103 
 104 /*
 105  * For mfthread only
 106  */
 107 extern pri_t minclsyspri;
 108 
 109 /*
 110  * ipw2100 specific hardware operations
 111  */
 112 static void     ipw2100_hwconf_get(struct ipw2100_softc *sc);
 113 static int      ipw2100_chip_reset(struct ipw2100_softc *sc);
 114 static void     ipw2100_master_stop(struct ipw2100_softc *sc);
 115 static void     ipw2100_stop(struct ipw2100_softc *sc);
 116 static int      ipw2100_config(struct ipw2100_softc *sc);
 117 static int      ipw2100_cmd(struct ipw2100_softc *sc, uint32_t type,
 118     void *buf, size_t len);
 119 static int      ipw2100_dma_region_alloc(struct ipw2100_softc *sc,
 120     struct dma_region *dr, size_t size, uint_t dir, uint_t flags);
 121 static void     ipw2100_dma_region_free(struct dma_region *dr);
 122 static void     ipw2100_tables_init(struct ipw2100_softc *sc);
 123 static void     ipw2100_ring_hwsetup(struct ipw2100_softc *sc);
 124 static int      ipw2100_ring_alloc(struct ipw2100_softc *sc);
 125 static void     ipw2100_ring_free(struct ipw2100_softc *sc);
 126 static void     ipw2100_ring_reset(struct ipw2100_softc *sc);
 127 static int      ipw2100_ring_init(struct ipw2100_softc *sc);
 128 
 129 /*
 130  * GLD specific operations
 131  */
 132 static int      ipw2100_m_stat(void *arg, uint_t stat, uint64_t *val);
 133 static int      ipw2100_m_start(void *arg);
 134 static void     ipw2100_m_stop(void *arg);
 135 static int      ipw2100_m_unicst(void *arg, const uint8_t *macaddr);
 136 static int      ipw2100_m_multicst(void *arg, boolean_t add, const uint8_t *m);
 137 static int      ipw2100_m_promisc(void *arg, boolean_t on);
 138 static mblk_t  *ipw2100_m_tx(void *arg, mblk_t *mp);
 139 static void     ipw2100_m_ioctl(void *arg, queue_t *wq, mblk_t *mp);
 140 static int      ipw2100_m_setprop(void *arg, const char *pr_name,
 141     mac_prop_id_t wldp_pr_num, uint_t wldp_length, const void *wldp_buf);
 142 static int      ipw2100_m_getprop(void *arg, const char *pr_name,
 143     mac_prop_id_t wldp_pr_num, uint_t wldp_length, void *wldp_buf);
 144 static void     ipw2100_m_propinfo(void *, const char *, mac_prop_id_t,
 145     mac_prop_info_handle_t);
 146 
 147 /*
 148  * Interrupt and Data transferring operations
 149  */
 150 static uint_t   ipw2100_intr(caddr_t arg);
 151 static int      ipw2100_send(struct ieee80211com *ic, mblk_t *mp, uint8_t type);
 152 static void     ipw2100_rcvpkt(struct ipw2100_softc *sc,
 153     struct ipw2100_status *status, uint8_t *rxbuf);
 154 
 155 /*
 156  * WiFi specific operations
 157  */
 158 static int      ipw2100_newstate(struct ieee80211com *ic,
 159     enum ieee80211_state state, int arg);
 160 static void     ipw2100_thread(struct ipw2100_softc *sc);
 161 
 162 /*
 163  * IOCTL Handler
 164  */
 165 static int      ipw2100_ioctl(struct ipw2100_softc *sc, queue_t *q, mblk_t *m);
 166 static int      ipw2100_getset(struct ipw2100_softc *sc,
 167     mblk_t *m, uint32_t cmd, boolean_t *need_net80211);
 168 static int      ipw_wificfg_radio(struct ipw2100_softc *sc,
 169     uint32_t cmd,  wldp_t *outfp);
 170 static int      ipw_wificfg_desrates(wldp_t *outfp);
 171 static int      ipw_wificfg_disassoc(struct ipw2100_softc *sc,
 172     wldp_t *outfp);
 173 
 174 /*
 175  * Suspend / Resume operations
 176  */
 177 static int      ipw2100_cpr_suspend(struct ipw2100_softc *sc);
 178 static int      ipw2100_cpr_resume(struct ipw2100_softc *sc);
 179 
 180 /*
 181  * Mac Call Back entries
 182  */
 183 mac_callbacks_t ipw2100_m_callbacks = {
 184         MC_IOCTL | MC_SETPROP | MC_GETPROP | MC_PROPINFO,
 185         ipw2100_m_stat,
 186         ipw2100_m_start,
 187         ipw2100_m_stop,
 188         ipw2100_m_promisc,
 189         ipw2100_m_multicst,
 190         ipw2100_m_unicst,
 191         ipw2100_m_tx,
 192         NULL,
 193         ipw2100_m_ioctl,
 194         NULL,
 195         NULL,
 196         NULL,
 197         ipw2100_m_setprop,
 198         ipw2100_m_getprop,
 199         ipw2100_m_propinfo
 200 };
 201 
 202 
 203 /*
 204  * DEBUG Facility
 205  */
 206 #define MAX_MSG (128)
 207 uint32_t ipw2100_debug = 0;
 208 /*
 209  * supported debug marsks:
 210  *      | IPW2100_DBG_INIT
 211  *      | IPW2100_DBG_GLD
 212  *      | IPW2100_DBG_TABLE
 213  *      | IPW2100_DBG_SOFTINT
 214  *      | IPW2100_DBG_CSR
 215  *      | IPW2100_DBG_INT
 216  *      | IPW2100_DBG_FW
 217  *      | IPW2100_DBG_IOCTL
 218  *      | IPW2100_DBG_HWCAP
 219  *      | IPW2100_DBG_STATISTIC
 220  *      | IPW2100_DBG_RING
 221  *      | IPW2100_DBG_WIFI
 222  *      | IPW2100_DBG_BRUSSELS
 223  */
 224 
 225 /*
 226  * global tuning parameters to work around unknown hardware issues
 227  */
 228 static uint32_t delay_config_stable     = 100000;       /* 100ms */
 229 static uint32_t delay_fatal_recover     = 100000 * 20;  /* 2s */
 230 static uint32_t delay_aux_thread        = 100000;       /* 100ms */
 231 
 232 void
 233 ipw2100_dbg(dev_info_t *dip, int level, const char *fmt, ...)
 234 {
 235         va_list ap;
 236         char    buf[MAX_MSG];
 237         int     instance;
 238 
 239         va_start(ap, fmt);
 240         (void) vsnprintf(buf, sizeof (buf), fmt, ap);
 241         va_end(ap);
 242 
 243         if (dip) {
 244                 instance = ddi_get_instance(dip);
 245                 cmn_err(level, "%s%d: %s", IPW2100_DRV_NAME, instance, buf);
 246         } else
 247                 cmn_err(level, "%s: %s", IPW2100_DRV_NAME, buf);
 248 }
 249 
 250 /*
 251  * device operations
 252  */
 253 int
 254 ipw2100_attach(dev_info_t *dip, ddi_attach_cmd_t cmd)
 255 {
 256         struct ipw2100_softc    *sc;
 257         ddi_acc_handle_t        cfgh;
 258         caddr_t                 regs;
 259         struct ieee80211com     *ic;
 260         int                     instance, err, i;
 261         char                    strbuf[32];
 262         wifi_data_t             wd = { 0 };
 263         mac_register_t          *macp;
 264 
 265         switch (cmd) {
 266         case DDI_ATTACH:
 267                 break;
 268         case DDI_RESUME:
 269                 sc = ddi_get_soft_state(ipw2100_ssp, ddi_get_instance(dip));
 270                 if (sc == NULL) {
 271                         err = DDI_FAILURE;
 272                         goto fail1;
 273                 }
 274                 return (ipw2100_cpr_resume(sc));
 275         default:
 276                 err = DDI_FAILURE;
 277                 goto fail1;
 278         }
 279 
 280         instance = ddi_get_instance(dip);
 281         err = ddi_soft_state_zalloc(ipw2100_ssp, instance);
 282         if (err != DDI_SUCCESS) {
 283                 IPW2100_WARN((dip, CE_WARN,
 284                     "ipw2100_attach(): unable to allocate soft state\n"));
 285                 goto fail1;
 286         }
 287         sc = ddi_get_soft_state(ipw2100_ssp, instance);
 288         sc->sc_dip = dip;
 289 
 290         /*
 291          * Map config spaces register
 292          */
 293         err = ddi_regs_map_setup(dip, IPW2100_PCI_CFG_RNUM, &regs,
 294             0, 0, &ipw2100_csr_accattr, &cfgh);
 295         if (err != DDI_SUCCESS) {
 296                 IPW2100_WARN((dip, CE_WARN,
 297                     "ipw2100_attach(): unable to map spaces regs\n"));
 298                 goto fail2;
 299         }
 300         ddi_put8(cfgh, (uint8_t *)(regs + 0x41), 0);
 301         ddi_regs_map_free(&cfgh);
 302 
 303         /*
 304          * Map operating registers
 305          */
 306         err = ddi_regs_map_setup(dip, IPW2100_PCI_CSR_RNUM, &sc->sc_regs,
 307             0, 0, &ipw2100_csr_accattr, &sc->sc_ioh);
 308         if (err != DDI_SUCCESS) {
 309                 IPW2100_WARN((dip, CE_WARN,
 310                     "ipw2100_attach(): unable to map device regs\n"));
 311                 goto fail2;
 312         }
 313 
 314         /*
 315          * Reset the chip
 316          */
 317         err = ipw2100_chip_reset(sc);
 318         if (err != DDI_SUCCESS) {
 319                 IPW2100_WARN((dip, CE_WARN,
 320                     "ipw2100_attach(): reset failed\n"));
 321                 goto fail3;
 322         }
 323 
 324         /*
 325          * Get the hw conf, including MAC address, then init all rings.
 326          */
 327         ipw2100_hwconf_get(sc);
 328         err = ipw2100_ring_init(sc);
 329         if (err != DDI_SUCCESS) {
 330                 IPW2100_WARN((dip, CE_WARN,
 331                     "ipw2100_attach(): "
 332                     "unable to allocate and initialize rings\n"));
 333                 goto fail3;
 334         }
 335 
 336         /*
 337          * Initialize mutexs and condvars
 338          */
 339         err = ddi_get_iblock_cookie(dip, 0, &sc->sc_iblk);
 340         if (err != DDI_SUCCESS) {
 341                 IPW2100_WARN((dip, CE_WARN,
 342                     "ipw2100_attach(): ddi_get_iblock_cookie() failed\n"));
 343                 goto fail4;
 344         }
 345         /*
 346          * interrupt lock
 347          */
 348         mutex_init(&sc->sc_ilock, "interrupt-lock", MUTEX_DRIVER,
 349             (void *) sc->sc_iblk);
 350         cv_init(&sc->sc_fw_cond, "firmware", CV_DRIVER, NULL);
 351         cv_init(&sc->sc_cmd_cond, "command", CV_DRIVER, NULL);
 352         /*
 353          * tx ring lock
 354          */
 355         mutex_init(&sc->sc_tx_lock, "tx-ring", MUTEX_DRIVER,
 356             (void *) sc->sc_iblk);
 357         cv_init(&sc->sc_tx_cond, "tx-ring", CV_DRIVER, NULL);
 358         /*
 359          * rescheuled lock
 360          */
 361         mutex_init(&sc->sc_resched_lock, "reschedule-lock", MUTEX_DRIVER,
 362             (void *) sc->sc_iblk);
 363         /*
 364          * initialize the mfthread
 365          */
 366         mutex_init(&sc->sc_mflock, "function-lock", MUTEX_DRIVER,
 367             (void *) sc->sc_iblk);
 368         cv_init(&sc->sc_mfthread_cv, NULL, CV_DRIVER, NULL);
 369         sc->sc_mf_thread = NULL;
 370         sc->sc_mfthread_switch = 0;
 371         /*
 372          * Initialize the wifi part, which will be used by
 373          * generic layer
 374          */
 375         ic = &sc->sc_ic;
 376         ic->ic_phytype  = IEEE80211_T_DS;
 377         ic->ic_opmode   = IEEE80211_M_STA;
 378         ic->ic_state    = IEEE80211_S_INIT;
 379         ic->ic_maxrssi  = 49;
 380         /*
 381          * Future, could use s/w to handle encryption: IEEE80211_C_WEP
 382          * and need to add support for IEEE80211_C_IBSS
 383          */
 384         ic->ic_caps = IEEE80211_C_SHPREAMBLE | IEEE80211_C_TXPMGT |
 385             IEEE80211_C_PMGT;
 386         ic->ic_sup_rates[IEEE80211_MODE_11B] = ipw2100_rateset_11b;
 387         IEEE80211_ADDR_COPY(ic->ic_macaddr, sc->sc_macaddr);
 388         for (i = 1; i < 16; i++) {
 389                 if (sc->sc_chmask &(1 << i)) {
 390                         /* IEEE80211_CHAN_B */
 391                         ic->ic_sup_channels[i].ich_freq  = ieee80211_ieee2mhz(i,
 392                             IEEE80211_CHAN_2GHZ | IEEE80211_CHAN_CCK);
 393                         ic->ic_sup_channels[i].ich_flags =
 394                             IEEE80211_CHAN_2GHZ | IEEE80211_CHAN_CCK;
 395                 }
 396         }
 397         ic->ic_ibss_chan = &ic->ic_sup_channels[0];
 398         ic->ic_xmit = ipw2100_send;
 399         /*
 400          * init Wifi layer
 401          */
 402         ieee80211_attach(ic);
 403 
 404         /*
 405          * Override 80211 default routines
 406          */
 407         ieee80211_media_init(ic);
 408         sc->sc_newstate = ic->ic_newstate;
 409         ic->ic_newstate = ipw2100_newstate;
 410         /*
 411          * initialize default tx key
 412          */
 413         ic->ic_def_txkey = 0;
 414         /*
 415          * Set the Authentication to AUTH_Open only.
 416          */
 417         sc->sc_authmode = IEEE80211_AUTH_OPEN;
 418 
 419         /*
 420          * Add the interrupt handler
 421          */
 422         err = ddi_add_intr(dip, 0, &sc->sc_iblk, NULL,
 423             ipw2100_intr, (caddr_t)sc);
 424         if (err != DDI_SUCCESS) {
 425                 IPW2100_WARN((dip, CE_WARN,
 426                     "ipw2100_attach(): ddi_add_intr() failed\n"));
 427                 goto fail5;
 428         }
 429 
 430         /*
 431          * Initialize pointer to device specific functions
 432          */
 433         wd.wd_secalloc = WIFI_SEC_NONE;
 434         wd.wd_opmode = ic->ic_opmode;
 435         IEEE80211_ADDR_COPY(wd.wd_bssid, ic->ic_bss->in_bssid);
 436 
 437         macp = mac_alloc(MAC_VERSION);
 438         if (err != 0) {
 439                 IPW2100_WARN((dip, CE_WARN,
 440                     "ipw2100_attach(): mac_alloc() failed\n"));
 441                 goto fail6;
 442         }
 443 
 444         macp->m_type_ident   = MAC_PLUGIN_IDENT_WIFI;
 445         macp->m_driver               = sc;
 446         macp->m_dip          = dip;
 447         macp->m_src_addr     = ic->ic_macaddr;
 448         macp->m_callbacks    = &ipw2100_m_callbacks;
 449         macp->m_min_sdu              = 0;
 450         macp->m_max_sdu              = IEEE80211_MTU;
 451         macp->m_pdata                = &wd;
 452         macp->m_pdata_size   = sizeof (wd);
 453 
 454         /*
 455          * Register the macp to mac
 456          */
 457         err = mac_register(macp, &ic->ic_mach);
 458         mac_free(macp);
 459         if (err != DDI_SUCCESS) {
 460                 IPW2100_WARN((dip, CE_WARN,
 461                     "ipw2100_attach(): mac_register() failed\n"));
 462                 goto fail6;
 463         }
 464 
 465         /*
 466          * Create minor node of type DDI_NT_NET_WIFI
 467          */
 468         (void) snprintf(strbuf, sizeof (strbuf), "%s%d",
 469             IPW2100_DRV_NAME, instance);
 470         err = ddi_create_minor_node(dip, strbuf, S_IFCHR,
 471             instance + 1, DDI_NT_NET_WIFI, 0);
 472         if (err != DDI_SUCCESS)
 473                 IPW2100_WARN((dip, CE_WARN,
 474                     "ipw2100_attach(): ddi_create_minor_node() failed\n"));
 475 
 476         /*
 477          * Cache firmware, always return true
 478          */
 479         (void) ipw2100_cache_firmware(sc);
 480 
 481         /*
 482          * Notify link is down now
 483          */
 484         mac_link_update(ic->ic_mach, LINK_STATE_DOWN);
 485 
 486         /*
 487          * create the mf thread to handle the link status,
 488          * recovery fatal error, etc.
 489          */
 490         sc->sc_mfthread_switch = 1;
 491         if (sc->sc_mf_thread == NULL)
 492                 sc->sc_mf_thread = thread_create((caddr_t)NULL, 0,
 493                     ipw2100_thread, sc, 0, &p0, TS_RUN, minclsyspri);
 494 
 495         return (DDI_SUCCESS);
 496 
 497 fail6:
 498         ddi_remove_intr(dip, 0, sc->sc_iblk);
 499 fail5:
 500         ieee80211_detach(ic);
 501 
 502         mutex_destroy(&sc->sc_ilock);
 503         mutex_destroy(&sc->sc_tx_lock);
 504         mutex_destroy(&sc->sc_mflock);
 505         mutex_destroy(&sc->sc_resched_lock);
 506         cv_destroy(&sc->sc_mfthread_cv);
 507         cv_destroy(&sc->sc_tx_cond);
 508         cv_destroy(&sc->sc_cmd_cond);
 509         cv_destroy(&sc->sc_fw_cond);
 510 fail4:
 511         ipw2100_ring_free(sc);
 512 fail3:
 513         ddi_regs_map_free(&sc->sc_ioh);
 514 fail2:
 515         ddi_soft_state_free(ipw2100_ssp, instance);
 516 fail1:
 517         return (err);
 518 }
 519 
 520 int
 521 ipw2100_detach(dev_info_t *dip, ddi_detach_cmd_t cmd)
 522 {
 523         struct ipw2100_softc    *sc =
 524             ddi_get_soft_state(ipw2100_ssp, ddi_get_instance(dip));
 525         int err;
 526 
 527         ASSERT(sc != NULL);
 528 
 529         switch (cmd) {
 530         case DDI_DETACH:
 531                 break;
 532         case DDI_SUSPEND:
 533                 return (ipw2100_cpr_suspend(sc));
 534         default:
 535                 return (DDI_FAILURE);
 536         }
 537 
 538         /*
 539          * Destroy the mf_thread
 540          */
 541         mutex_enter(&sc->sc_mflock);
 542         sc->sc_mfthread_switch = 0;
 543         while (sc->sc_mf_thread != NULL) {
 544                 if (cv_wait_sig(&sc->sc_mfthread_cv, &sc->sc_mflock) == 0)
 545                         break;
 546         }
 547         mutex_exit(&sc->sc_mflock);
 548 
 549         /*
 550          * Unregister from the MAC layer subsystem
 551          */
 552         err = mac_unregister(sc->sc_ic.ic_mach);
 553         if (err != DDI_SUCCESS)
 554                 return (err);
 555 
 556         ddi_remove_intr(dip, 0, sc->sc_iblk);
 557 
 558         /*
 559          * destroy the cv
 560          */
 561         mutex_destroy(&sc->sc_ilock);
 562         mutex_destroy(&sc->sc_tx_lock);
 563         mutex_destroy(&sc->sc_mflock);
 564         mutex_destroy(&sc->sc_resched_lock);
 565         cv_destroy(&sc->sc_mfthread_cv);
 566         cv_destroy(&sc->sc_tx_cond);
 567         cv_destroy(&sc->sc_cmd_cond);
 568         cv_destroy(&sc->sc_fw_cond);
 569 
 570         /*
 571          * detach ieee80211
 572          */
 573         ieee80211_detach(&sc->sc_ic);
 574 
 575         (void) ipw2100_free_firmware(sc);
 576         ipw2100_ring_free(sc);
 577 
 578         ddi_regs_map_free(&sc->sc_ioh);
 579         ddi_remove_minor_node(dip, NULL);
 580         ddi_soft_state_free(ipw2100_ssp, ddi_get_instance(dip));
 581 
 582         return (DDI_SUCCESS);
 583 }
 584 
 585 int
 586 ipw2100_cpr_suspend(struct ipw2100_softc *sc)
 587 {
 588         IPW2100_DBG(IPW2100_DBG_INIT, (sc->sc_dip, CE_CONT,
 589             "ipw2100_cpr_suspend(): enter\n"));
 590 
 591         /*
 592          * Destroy the mf_thread
 593          */
 594         mutex_enter(&sc->sc_mflock);
 595         sc->sc_mfthread_switch = 0;
 596         while (sc->sc_mf_thread != NULL) {
 597                 if (cv_wait_sig(&sc->sc_mfthread_cv, &sc->sc_mflock) == 0)
 598                         break;
 599         }
 600         mutex_exit(&sc->sc_mflock);
 601 
 602         /*
 603          * stop the hardware; this mask all interrupts
 604          */
 605         ipw2100_stop(sc);
 606         sc->sc_flags &= ~IPW2100_FLAG_RUNNING;
 607         sc->sc_suspended = 1;
 608 
 609         (void) ipw2100_free_firmware(sc);
 610         ipw2100_ring_free(sc);
 611 
 612         return (DDI_SUCCESS);
 613 }
 614 
 615 int
 616 ipw2100_cpr_resume(struct ipw2100_softc *sc)
 617 {
 618         struct ieee80211com     *ic = &sc->sc_ic;
 619         dev_info_t              *dip = sc->sc_dip;
 620         int                     err;
 621 
 622         IPW2100_DBG(IPW2100_DBG_INIT, (sc->sc_dip, CE_CONT,
 623             "ipw2100_cpr_resume(): enter\n"));
 624 
 625         /*
 626          * Reset the chip
 627          */
 628         err = ipw2100_chip_reset(sc);
 629         if (err != DDI_SUCCESS) {
 630                 IPW2100_WARN((dip, CE_WARN,
 631                     "ipw2100_attach(): reset failed\n"));
 632                 return (DDI_FAILURE);
 633         }
 634 
 635         /*
 636          * Get the hw conf, including MAC address, then init all rings.
 637          */
 638         /* ipw2100_hwconf_get(sc); */
 639         err = ipw2100_ring_init(sc);
 640         if (err != DDI_SUCCESS) {
 641                 IPW2100_WARN((dip, CE_WARN,
 642                     "ipw2100_attach(): "
 643                     "unable to allocate and initialize rings\n"));
 644                 return (DDI_FAILURE);
 645         }
 646 
 647         /*
 648          * Cache firmware, always return true
 649          */
 650         (void) ipw2100_cache_firmware(sc);
 651 
 652         /*
 653          * Notify link is down now
 654          */
 655         mac_link_update(ic->ic_mach, LINK_STATE_DOWN);
 656 
 657         /*
 658          * create the mf thread to handle the link status,
 659          * recovery fatal error, etc.
 660          */
 661         sc->sc_mfthread_switch = 1;
 662         if (sc->sc_mf_thread == NULL)
 663                 sc->sc_mf_thread = thread_create((caddr_t)NULL, 0,
 664                     ipw2100_thread, sc, 0, &p0, TS_RUN, minclsyspri);
 665 
 666         /*
 667          * enable all interrupts
 668          */
 669         sc->sc_suspended = 0;
 670         ipw2100_csr_put32(sc, IPW2100_CSR_INTR_MASK, IPW2100_INTR_MASK_ALL);
 671 
 672         /*
 673          * initialize ipw2100 hardware
 674          */
 675         (void) ipw2100_init(sc);
 676 
 677         sc->sc_flags |= IPW2100_FLAG_RUNNING;
 678 
 679         return (DDI_SUCCESS);
 680 }
 681 
 682 /*
 683  * quiesce(9E) entry point.
 684  * This function is called when the system is single-threaded at high
 685  * PIL with preemption disabled. Therefore, this function must not be
 686  * blocked.
 687  * This function returns DDI_SUCCESS on success, or DDI_FAILURE on failure.
 688  * DDI_FAILURE indicates an error condition and should almost never happen.
 689  * Contributed by Juergen Keil, <jk@tools.de>.
 690  */
 691 static int
 692 ipw2100_quiesce(dev_info_t *dip)
 693 {
 694         struct ipw2100_softc    *sc =
 695             ddi_get_soft_state(ipw2100_ssp, ddi_get_instance(dip));
 696 
 697         if (sc == NULL)
 698                 return (DDI_FAILURE);
 699 
 700         /*
 701          * No more blocking is allowed while we are in the
 702          * quiesce(9E) entry point.
 703          */
 704         sc->sc_flags |= IPW2100_FLAG_QUIESCED;
 705 
 706         /*
 707          * Disable and mask all interrupts.
 708          */
 709         ipw2100_stop(sc);
 710         return (DDI_SUCCESS);
 711 }
 712 
 713 static void
 714 ipw2100_tables_init(struct ipw2100_softc *sc)
 715 {
 716         sc->sc_table1_base = ipw2100_csr_get32(sc, IPW2100_CSR_TABLE1_BASE);
 717         sc->sc_table2_base = ipw2100_csr_get32(sc, IPW2100_CSR_TABLE2_BASE);
 718 }
 719 
 720 static void
 721 ipw2100_stop(struct ipw2100_softc *sc)
 722 {
 723         struct ieee80211com     *ic = &sc->sc_ic;
 724 
 725         ipw2100_master_stop(sc);
 726         ipw2100_csr_put32(sc, IPW2100_CSR_RST, IPW2100_RST_SW_RESET);
 727         sc->sc_flags &= ~IPW2100_FLAG_FW_INITED;
 728 
 729         if (!(sc->sc_flags & IPW2100_FLAG_QUIESCED))
 730                 ieee80211_new_state(ic, IEEE80211_S_INIT, -1);
 731 }
 732 
 733 static int
 734 ipw2100_config(struct ipw2100_softc *sc)
 735 {
 736         struct ieee80211com             *ic = &sc->sc_ic;
 737         struct ipw2100_security         sec;
 738         struct ipw2100_wep_key          wkey;
 739         struct ipw2100_scan_options     sopt;
 740         struct ipw2100_configuration    cfg;
 741         uint32_t                        data;
 742         int                             err, i;
 743 
 744         /*
 745          * operation mode
 746          */
 747         switch (ic->ic_opmode) {
 748         case IEEE80211_M_STA:
 749         case IEEE80211_M_HOSTAP:
 750                 data = LE_32(IPW2100_MODE_BSS);
 751                 break;
 752 
 753         case IEEE80211_M_IBSS:
 754         case IEEE80211_M_AHDEMO:
 755                 data = LE_32(IPW2100_MODE_IBSS);
 756                 break;
 757         }
 758 
 759         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 760             "ipw2100_config(): Setting mode to %u\n", LE_32(data)));
 761 
 762         err = ipw2100_cmd(sc, IPW2100_CMD_SET_MODE,
 763             &data, sizeof (data));
 764         if (err != DDI_SUCCESS)
 765                 return (err);
 766 
 767         /*
 768          * operation channel if IBSS or MONITOR
 769          */
 770         if (ic->ic_opmode == IEEE80211_M_IBSS) {
 771 
 772                 data = LE_32(ieee80211_chan2ieee(ic, ic->ic_ibss_chan));
 773 
 774                 IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 775                     "ipw2100_config(): Setting channel to %u\n", LE_32(data)));
 776 
 777                 err = ipw2100_cmd(sc, IPW2100_CMD_SET_CHANNEL,
 778                     &data, sizeof (data));
 779                 if (err != DDI_SUCCESS)
 780                         return (err);
 781         }
 782 
 783         /*
 784          * set MAC address
 785          */
 786         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 787             "ipw2100_config(): Setting MAC address to "
 788             "%02x:%02x:%02x:%02x:%02x:%02x\n",
 789             ic->ic_macaddr[0], ic->ic_macaddr[1], ic->ic_macaddr[2],
 790             ic->ic_macaddr[3], ic->ic_macaddr[4], ic->ic_macaddr[5]));
 791         err = ipw2100_cmd(sc, IPW2100_CMD_SET_MAC_ADDRESS, ic->ic_macaddr,
 792             IEEE80211_ADDR_LEN);
 793         if (err != DDI_SUCCESS)
 794                 return (err);
 795 
 796         /*
 797          * configuration capabilities
 798          */
 799         cfg.flags = IPW2100_CFG_BSS_MASK | IPW2100_CFG_IBSS_MASK |
 800             IPW2100_CFG_PREAMBLE_AUTO | IPW2100_CFG_802_1x_ENABLE;
 801         if (ic->ic_opmode == IEEE80211_M_IBSS)
 802                 cfg.flags |= IPW2100_CFG_IBSS_AUTO_START;
 803         if (sc->if_flags & IFF_PROMISC)
 804                 cfg.flags |= IPW2100_CFG_PROMISCUOUS;
 805         cfg.flags       = LE_32(cfg.flags);
 806         cfg.bss_chan    = LE_32(sc->sc_chmask >> 1);
 807         cfg.ibss_chan   = LE_32(sc->sc_chmask >> 1);
 808 
 809         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 810             "ipw2100_config(): Setting configuration to 0x%x\n",
 811             LE_32(cfg.flags)));
 812 
 813         err = ipw2100_cmd(sc, IPW2100_CMD_SET_CONFIGURATION,
 814             &cfg, sizeof (cfg));
 815 
 816         if (err != DDI_SUCCESS)
 817                 return (err);
 818 
 819         /*
 820          * set 802.11 Tx rates
 821          */
 822         data = LE_32(0x3);  /* 1, 2 */
 823         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 824             "ipw2100_config(): Setting 802.11 Tx rates to 0x%x\n",
 825             LE_32(data)));
 826         err = ipw2100_cmd(sc, IPW2100_CMD_SET_BASIC_TX_RATES,
 827             &data, sizeof (data));
 828         if (err != DDI_SUCCESS)
 829                 return (err);
 830 
 831         /*
 832          * set 802.11b Tx rates
 833          */
 834         data = LE_32(0xf);  /* 1, 2, 5.5, 11 */
 835         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 836             "ipw2100_config(): Setting 802.11b Tx rates to 0x%x\n",
 837             LE_32(data)));
 838         err = ipw2100_cmd(sc, IPW2100_CMD_SET_TX_RATES, &data, sizeof (data));
 839         if (err != DDI_SUCCESS)
 840                 return (err);
 841 
 842         /*
 843          * set power mode
 844          */
 845         data = LE_32(IPW2100_POWER_MODE_CAM);
 846         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 847             "ipw2100_config(): Setting power mode to %u\n", LE_32(data)));
 848         err = ipw2100_cmd(sc, IPW2100_CMD_SET_POWER_MODE, &data, sizeof (data));
 849         if (err != DDI_SUCCESS)
 850                 return (err);
 851 
 852         /*
 853          * set power index
 854          */
 855         if (ic->ic_opmode == IEEE80211_M_IBSS) {
 856                 data = LE_32(32);
 857                 IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 858                     "ipw2100_config(): Setting Tx power index to %u\n",
 859                     LE_32(data)));
 860                 err = ipw2100_cmd(sc, IPW2100_CMD_SET_TX_POWER_INDEX,
 861                     &data, sizeof (data));
 862                 if (err != DDI_SUCCESS)
 863                         return (err);
 864         }
 865 
 866         /*
 867          * set RTS threshold
 868          */
 869         ic->ic_rtsthreshold = 2346;
 870         data = LE_32(ic->ic_rtsthreshold);
 871         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 872             "ipw2100_config(): Setting RTS threshold to %u\n", LE_32(data)));
 873         err = ipw2100_cmd(sc, IPW2100_CMD_SET_RTS_THRESHOLD,
 874             &data, sizeof (data));
 875         if (err != DDI_SUCCESS)
 876                 return (err);
 877 
 878         /*
 879          * set frag threshold
 880          */
 881         ic->ic_fragthreshold = 2346;
 882         data = LE_32(ic->ic_fragthreshold);
 883         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 884             "ipw2100_config(): Setting frag threshold to %u\n", LE_32(data)));
 885         err = ipw2100_cmd(sc, IPW2100_CMD_SET_FRAG_THRESHOLD,
 886             &data, sizeof (data));
 887         if (err != DDI_SUCCESS)
 888                 return (err);
 889 
 890         /*
 891          * set ESSID
 892          */
 893         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 894             "ipw2100_config(): Setting ESSID to %u, ESSID[0]%c\n",
 895             ic->ic_des_esslen, ic->ic_des_essid[0]));
 896         err = ipw2100_cmd(sc, IPW2100_CMD_SET_ESSID,
 897             ic->ic_des_essid, ic->ic_des_esslen);
 898         if (err != DDI_SUCCESS)
 899                 return (err);
 900 
 901         /*
 902          * no mandatory BSSID
 903          */
 904         err = ipw2100_cmd(sc, IPW2100_CMD_SET_MANDATORY_BSSID, NULL, 0);
 905         if (err != DDI_SUCCESS)
 906                 return (err);
 907 
 908         /*
 909          * set BSSID, if any
 910          */
 911         if (ic->ic_flags & IEEE80211_F_DESBSSID) {
 912                 IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 913                     "ipw2100_config(): Setting BSSID to %u\n",
 914                     IEEE80211_ADDR_LEN));
 915                 err = ipw2100_cmd(sc, IPW2100_CMD_SET_DESIRED_BSSID,
 916                     ic->ic_des_bssid, IEEE80211_ADDR_LEN);
 917                 if (err != DDI_SUCCESS)
 918                         return (err);
 919         }
 920 
 921         /*
 922          * set security information
 923          */
 924         (void) memset(&sec, 0, sizeof (sec));
 925         /*
 926          * use the value set to ic_bss to retrieve current sharedmode
 927          */
 928         sec.authmode = (ic->ic_bss->in_authmode == WL_SHAREDKEY) ?
 929             IPW2100_AUTH_SHARED : IPW2100_AUTH_OPEN;
 930         sec.ciphers = LE_32(IPW2100_CIPHER_NONE);
 931         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 932             "ipw2100_config(): Setting authmode to %u\n", sec.authmode));
 933         err = ipw2100_cmd(sc, IPW2100_CMD_SET_SECURITY_INFORMATION,
 934             &sec, sizeof (sec));
 935         if (err != DDI_SUCCESS)
 936                 return (err);
 937 
 938         /*
 939          * set WEP if any
 940          */
 941         if (ic->ic_flags & IEEE80211_F_PRIVACY) {
 942                 for (i = 0; i < IEEE80211_WEP_NKID; i++) {
 943                         if (ic->ic_nw_keys[i].wk_keylen == 0)
 944                                 continue;
 945                         wkey.idx = (uint8_t)i;
 946                         wkey.len = ic->ic_nw_keys[i].wk_keylen;
 947                         (void) memset(wkey.key, 0, sizeof (wkey.key));
 948                         if (ic->ic_nw_keys[i].wk_keylen)
 949                                 (void) memcpy(wkey.key,
 950                                     ic->ic_nw_keys[i].wk_key,
 951                                     ic->ic_nw_keys[i].wk_keylen);
 952                         err = ipw2100_cmd(sc, IPW2100_CMD_SET_WEP_KEY,
 953                             &wkey, sizeof (wkey));
 954                         if (err != DDI_SUCCESS)
 955                                 return (err);
 956                 }
 957                 data = LE_32(ic->ic_def_txkey);
 958                 err = ipw2100_cmd(sc, IPW2100_CMD_SET_WEP_KEY_INDEX,
 959                     &data, sizeof (data));
 960                 if (err != DDI_SUCCESS)
 961                         return (err);
 962         }
 963 
 964         /*
 965          * turn on WEP
 966          */
 967         data = LE_32((ic->ic_flags & IEEE80211_F_PRIVACY) ? 0x8 : 0);
 968         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 969             "ipw2100_config(): Setting WEP flags to %u\n", LE_32(data)));
 970         err = ipw2100_cmd(sc, IPW2100_CMD_SET_WEP_FLAGS, &data, sizeof (data));
 971         if (err != DDI_SUCCESS)
 972                 return (err);
 973 
 974         /*
 975          * set beacon interval if IBSS or HostAP
 976          */
 977         if (ic->ic_opmode == IEEE80211_M_IBSS ||
 978             ic->ic_opmode == IEEE80211_M_HOSTAP) {
 979 
 980                 data = LE_32(ic->ic_lintval);
 981                 IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
 982                     "ipw2100_config(): Setting beacon interval to %u\n",
 983                     LE_32(data)));
 984                 err = ipw2100_cmd(sc, IPW2100_CMD_SET_BEACON_INTERVAL,
 985                     &data, sizeof (data));
 986                 if (err != DDI_SUCCESS)
 987                         return (err);
 988         }
 989 
 990         /*
 991          * set scan options
 992          */
 993         sopt.flags = LE_32(0);
 994         sopt.channels = LE_32(sc->sc_chmask >> 1);
 995         err = ipw2100_cmd(sc, IPW2100_CMD_SET_SCAN_OPTIONS,
 996             &sopt, sizeof (sopt));
 997         if (err != DDI_SUCCESS)
 998                 return (err);
 999 
1000 en_adapter:
1001 
1002         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
1003             "ipw2100_config(): Enabling adapter\n"));
1004 
1005         return (ipw2100_cmd(sc, IPW2100_CMD_ENABLE, NULL, 0));
1006 }
1007 
1008 static int
1009 ipw2100_cmd(struct ipw2100_softc *sc, uint32_t type, void *buf, size_t len)
1010 {
1011         struct ipw2100_bd       *txbd;
1012         clock_t                 clk;
1013         uint32_t                idx;
1014 
1015         /*
1016          * prepare command buffer
1017          */
1018         sc->sc_cmd->type = LE_32(type);
1019         sc->sc_cmd->subtype = LE_32(0);
1020         sc->sc_cmd->seq = LE_32(0);
1021         /*
1022          * copy data if any
1023          */
1024         if (len && buf)
1025                 (void) memcpy(sc->sc_cmd->data, buf, len);
1026         sc->sc_cmd->len = LE_32(len);
1027 
1028         /*
1029          * get host & device descriptor to submit command
1030          */
1031         mutex_enter(&sc->sc_tx_lock);
1032 
1033         IPW2100_DBG(IPW2100_DBG_RING, (sc->sc_dip, CE_CONT,
1034             "ipw2100_cmd(): tx-free=%d\n", sc->sc_tx_free));
1035 
1036         /*
1037          * command need 1 descriptor
1038          */
1039         while (sc->sc_tx_free < 1)  {
1040                 sc->sc_flags |= IPW2100_FLAG_CMD_WAIT;
1041                 cv_wait(&sc->sc_tx_cond, &sc->sc_tx_lock);
1042         }
1043         idx = sc->sc_tx_cur;
1044 
1045         IPW2100_DBG(IPW2100_DBG_RING, (sc->sc_dip, CE_CONT,
1046             "ipw2100_cmd(): tx-cur=%d\n", idx));
1047 
1048         sc->sc_done = 0;
1049 
1050         txbd            = &sc->sc_txbd[idx];
1051         txbd->phyaddr        = LE_32(sc->sc_dma_cmd.dr_pbase);
1052         txbd->len    = LE_32(sizeof (struct ipw2100_cmd));
1053         txbd->flags  = IPW2100_BD_FLAG_TX_FRAME_COMMAND
1054             | IPW2100_BD_FLAG_TX_LAST_FRAGMENT;
1055         txbd->nfrag  = 1;
1056         /*
1057          * sync for device
1058          */
1059         (void) ddi_dma_sync(sc->sc_dma_cmd.dr_hnd, 0,
1060             sizeof (struct ipw2100_cmd), DDI_DMA_SYNC_FORDEV);
1061         (void) ddi_dma_sync(sc->sc_dma_txbd.dr_hnd,
1062             idx * sizeof (struct ipw2100_bd),
1063             sizeof (struct ipw2100_bd), DDI_DMA_SYNC_FORDEV);
1064 
1065         /*
1066          * ring move forward
1067          */
1068         sc->sc_tx_cur = RING_FORWARD(sc->sc_tx_cur, 1, IPW2100_NUM_TXBD);
1069         sc->sc_tx_free--;
1070         ipw2100_csr_put32(sc, IPW2100_CSR_TX_WRITE_INDEX, sc->sc_tx_cur);
1071         mutex_exit(&sc->sc_tx_lock);
1072 
1073         /*
1074          * wait for command done
1075          */
1076         clk = drv_usectohz(1000000);    /* 1 second */
1077         mutex_enter(&sc->sc_ilock);
1078         while (sc->sc_done == 0) {
1079                 /*
1080                  * pending for the response
1081                  */
1082                 if (cv_reltimedwait(&sc->sc_cmd_cond, &sc->sc_ilock,
1083                     clk, TR_CLOCK_TICK) < 0)
1084                         break;
1085         }
1086         mutex_exit(&sc->sc_ilock);
1087 
1088         IPW2100_DBG(IPW2100_DBG_RING, (sc->sc_dip, CE_CONT,
1089             "ipw2100_cmd(): cmd-done=%s\n", sc->sc_done ? "yes" : "no"));
1090 
1091         if (sc->sc_done == 0)
1092                 return (DDI_FAILURE);
1093 
1094         return (DDI_SUCCESS);
1095 }
1096 
1097 int
1098 ipw2100_init(struct ipw2100_softc *sc)
1099 {
1100         int     err;
1101 
1102         IPW2100_DBG(IPW2100_DBG_INIT, (sc->sc_dip, CE_CONT,
1103             "ipw2100_init(): enter\n"));
1104 
1105         /*
1106          * no firmware is available, return fail directly
1107          */
1108         if (!(sc->sc_flags & IPW2100_FLAG_FW_CACHED)) {
1109                 IPW2100_WARN((sc->sc_dip, CE_WARN,
1110                     "ipw2100_init(): no firmware is available\n"));
1111                 return (DDI_FAILURE);
1112         }
1113 
1114         ipw2100_stop(sc);
1115 
1116         err = ipw2100_chip_reset(sc);
1117         if (err != DDI_SUCCESS) {
1118                 IPW2100_WARN((sc->sc_dip, CE_WARN,
1119                     "ipw2100_init(): could not reset adapter\n"));
1120                 goto fail;
1121         }
1122 
1123         /*
1124          * load microcode
1125          */
1126         IPW2100_DBG(IPW2100_DBG_INIT, (sc->sc_dip, CE_CONT,
1127             "ipw2100_init(): loading microcode\n"));
1128         err = ipw2100_load_uc(sc);
1129         if (err != DDI_SUCCESS) {
1130                 IPW2100_WARN((sc->sc_dip, CE_WARN,
1131                     "ipw2100_init(): could not load microcode, try again\n"));
1132                 goto fail;
1133         }
1134 
1135         ipw2100_master_stop(sc);
1136 
1137         ipw2100_ring_hwsetup(sc);
1138 
1139         /*
1140          * load firmware
1141          */
1142         IPW2100_DBG(IPW2100_DBG_INIT, (sc->sc_dip, CE_CONT,
1143             "ipw2100_init(): loading firmware\n"));
1144         err = ipw2100_load_fw(sc);
1145         if (err != DDI_SUCCESS) {
1146                 IPW2100_WARN((sc->sc_dip, CE_WARN,
1147                     "ipw2100_init(): could not load firmware, try again\n"));
1148                 goto fail;
1149         }
1150 
1151         /*
1152          * initialize tables
1153          */
1154         ipw2100_tables_init(sc);
1155         ipw2100_table1_put32(sc, IPW2100_INFO_LOCK, 0);
1156 
1157         /*
1158          * Hardware will be enabled after configuration
1159          */
1160         err = ipw2100_config(sc);
1161         if (err != DDI_SUCCESS) {
1162                 IPW2100_WARN((sc->sc_dip, CE_WARN,
1163                     "ipw2100_init(): device configuration failed\n"));
1164                 goto fail;
1165         }
1166 
1167         delay(drv_usectohz(delay_config_stable));
1168 
1169         return (DDI_SUCCESS);
1170 
1171 fail:
1172         ipw2100_stop(sc);
1173 
1174         return (err);
1175 }
1176 
1177 /*
1178  * get hardware configurations from EEPROM embedded within chip
1179  */
1180 static void
1181 ipw2100_hwconf_get(struct ipw2100_softc *sc)
1182 {
1183         int             i;
1184         uint16_t        val;
1185 
1186         /*
1187          * MAC address
1188          */
1189         i = 0;
1190         val = ipw2100_rom_get16(sc, IPW2100_ROM_MAC + 0);
1191         sc->sc_macaddr[i++] = val >> 8;
1192         sc->sc_macaddr[i++] = val & 0xff;
1193         val = ipw2100_rom_get16(sc, IPW2100_ROM_MAC + 1);
1194         sc->sc_macaddr[i++] = val >> 8;
1195         sc->sc_macaddr[i++] = val & 0xff;
1196         val = ipw2100_rom_get16(sc, IPW2100_ROM_MAC + 2);
1197         sc->sc_macaddr[i++] = val >> 8;
1198         sc->sc_macaddr[i++] = val & 0xff;
1199 
1200         /*
1201          * formatted MAC address string
1202          */
1203         (void) snprintf(sc->sc_macstr, sizeof (sc->sc_macstr),
1204             "%02x:%02x:%02x:%02x:%02x:%02x",
1205             sc->sc_macaddr[0], sc->sc_macaddr[1],
1206             sc->sc_macaddr[2], sc->sc_macaddr[3],
1207             sc->sc_macaddr[4], sc->sc_macaddr[5]);
1208 
1209         /*
1210          * channel mask
1211          */
1212         val = ipw2100_rom_get16(sc, IPW2100_ROM_CHANNEL_LIST);
1213         if (val == 0)
1214                 val = 0x7ff;
1215         sc->sc_chmask = val << 1;
1216         IPW2100_DBG(IPW2100_DBG_HWCAP, (sc->sc_dip, CE_CONT,
1217             "ipw2100_hwconf_get(): channel-mask=0x%08x\n", sc->sc_chmask));
1218 
1219         /*
1220          * radio switch
1221          */
1222         val = ipw2100_rom_get16(sc, IPW2100_ROM_RADIO);
1223         if (val & 0x08)
1224                 sc->sc_flags |= IPW2100_FLAG_HAS_RADIO_SWITCH;
1225 
1226         IPW2100_DBG(IPW2100_DBG_HWCAP, (sc->sc_dip, CE_CONT,
1227             "ipw2100_hwconf_get(): has-radio-switch=%s(%u)\n",
1228             (sc->sc_flags & IPW2100_FLAG_HAS_RADIO_SWITCH)?  "yes" : "no",
1229             val));
1230 }
1231 
1232 /*
1233  * all ipw2100 interrupts will be masked by this routine
1234  */
1235 static void
1236 ipw2100_master_stop(struct ipw2100_softc *sc)
1237 {
1238         uint32_t        tmp;
1239         int             ntries;
1240 
1241         /*
1242          * disable interrupts
1243          */
1244         ipw2100_csr_put32(sc, IPW2100_CSR_INTR_MASK, 0);
1245 
1246         ipw2100_csr_put32(sc, IPW2100_CSR_RST, IPW2100_RST_STOP_MASTER);
1247         for (ntries = 0; ntries < 50; ntries++) {
1248                 if (ipw2100_csr_get32(sc, IPW2100_CSR_RST)
1249                     & IPW2100_RST_MASTER_DISABLED)
1250                         break;
1251                 drv_usecwait(10);
1252         }
1253         if (ntries == 50 && !(sc->sc_flags & IPW2100_FLAG_QUIESCED))
1254                 IPW2100_WARN((sc->sc_dip, CE_WARN,
1255                     "ipw2100_master_stop(): timeout when stop master\n"));
1256 
1257         tmp = ipw2100_csr_get32(sc, IPW2100_CSR_RST);
1258         ipw2100_csr_put32(sc, IPW2100_CSR_RST,
1259             tmp | IPW2100_RST_PRINCETON_RESET);
1260 
1261         sc->sc_flags &= ~IPW2100_FLAG_FW_INITED;
1262 }
1263 
1264 /*
1265  * all ipw2100 interrupts will be masked by this routine
1266  */
1267 static int
1268 ipw2100_chip_reset(struct ipw2100_softc *sc)
1269 {
1270         int             ntries;
1271         uint32_t        tmp;
1272 
1273         ipw2100_master_stop(sc);
1274 
1275         /*
1276          * move adatper to DO state
1277          */
1278         tmp = ipw2100_csr_get32(sc, IPW2100_CSR_CTL);
1279         ipw2100_csr_put32(sc, IPW2100_CSR_CTL, tmp | IPW2100_CTL_INIT);
1280 
1281         /*
1282          * wait for clock stabilization
1283          */
1284         for (ntries = 0; ntries < 1000; ntries++) {
1285                 if (ipw2100_csr_get32(sc, IPW2100_CSR_CTL)
1286                     & IPW2100_CTL_CLOCK_READY)
1287                         break;
1288                 drv_usecwait(200);
1289         }
1290         if (ntries == 1000)
1291                 return (DDI_FAILURE);
1292 
1293         tmp = ipw2100_csr_get32(sc, IPW2100_CSR_RST);
1294         ipw2100_csr_put32(sc, IPW2100_CSR_RST, tmp | IPW2100_RST_SW_RESET);
1295 
1296         drv_usecwait(10);
1297 
1298         tmp = ipw2100_csr_get32(sc, IPW2100_CSR_CTL);
1299         ipw2100_csr_put32(sc, IPW2100_CSR_CTL, tmp | IPW2100_CTL_INIT);
1300 
1301         return (DDI_SUCCESS);
1302 }
1303 
1304 /*
1305  * get the radio status from IPW_CSR_IO, invoked by wificonfig/dladm
1306  */
1307 int
1308 ipw2100_get_radio(struct ipw2100_softc *sc)
1309 {
1310         if (ipw2100_csr_get32(sc, IPW2100_CSR_IO) & IPW2100_IO_RADIO_DISABLED)
1311                 return (0);
1312         else
1313                 return (1);
1314 
1315 }
1316 /*
1317  * This function is used to get the statistic, invoked by wificonfig/dladm
1318  */
1319 void
1320 ipw2100_get_statistics(struct ipw2100_softc *sc)
1321 {
1322         struct ieee80211com     *ic = &sc->sc_ic;
1323         uint32_t                addr, size, i;
1324         uint32_t                atbl[256], *datatbl;
1325 
1326         datatbl = atbl;
1327 
1328         if (!(sc->sc_flags & IPW2100_FLAG_FW_INITED)) {
1329                 IPW2100_DBG(IPW2100_DBG_STATISTIC, (sc->sc_dip, CE_CONT,
1330                     "ipw2100_get_statistic(): fw doesn't download yet."));
1331                 return;
1332         }
1333 
1334         ipw2100_csr_put32(sc, IPW2100_CSR_AUTOINC_ADDR, sc->sc_table1_base);
1335 
1336         size = ipw2100_csr_get32(sc, IPW2100_CSR_AUTOINC_DATA);
1337         atbl[0] = size;
1338         for (i = 1, ++datatbl; i < size; i++, datatbl++) {
1339                 addr = ipw2100_csr_get32(sc, IPW2100_CSR_AUTOINC_DATA);
1340                 *datatbl = ipw2100_imem_get32(sc, addr);
1341         }
1342 
1343         /*
1344          * To retrieve the statistic information into proper places. There are
1345          * lot of information.
1346          */
1347         IPW2100_DBG(IPW2100_DBG_STATISTIC, (sc->sc_dip, CE_CONT,
1348             "ipw2100_get_statistic(): \n"
1349             "operating mode = %u\n"
1350             "type of authentification= %u\n"
1351             "average RSSI= %u\n"
1352             "current channel = %d\n",
1353             atbl[191], atbl[199], atbl[173], atbl[189]));
1354         /* WIFI_STAT_TX_FRAGS */
1355         ic->ic_stats.is_tx_frags = (uint32_t)atbl[2];
1356         /* WIFI_STAT_MCAST_TX = (all frame - unicast frame) */
1357         ic->ic_stats.is_tx_mcast = (uint32_t)atbl[2] - (uint32_t)atbl[3];
1358         /* WIFI_STAT_TX_RETRANS */
1359         ic->ic_stats.is_tx_retries = (uint32_t)atbl[42];
1360         /* WIFI_STAT_TX_FAILED */
1361         ic->ic_stats.is_tx_failed = (uint32_t)atbl[51];
1362         /* MAC_STAT_OBYTES */
1363         ic->ic_stats.is_tx_bytes = (uint32_t)atbl[41];
1364         /* WIFI_STAT_RX_FRAGS */
1365         ic->ic_stats.is_rx_frags = (uint32_t)atbl[61];
1366         /* WIFI_STAT_MCAST_RX */
1367         ic->ic_stats.is_rx_mcast = (uint32_t)atbl[71];
1368         /* MAC_STAT_IBYTES */
1369         ic->ic_stats.is_rx_bytes = (uint32_t)atbl[101];
1370         /* WIFI_STAT_ACK_FAILURE */
1371         ic->ic_stats.is_ack_failure = (uint32_t)atbl[59];
1372         /* WIFI_STAT_RTS_SUCCESS */
1373         ic->ic_stats.is_rts_success = (uint32_t)atbl[22];
1374 }
1375 
1376 /*
1377  * dma region alloc
1378  */
1379 static int
1380 ipw2100_dma_region_alloc(struct ipw2100_softc *sc,
1381     struct dma_region *dr, size_t size, uint_t dir, uint_t flags)
1382 {
1383         dev_info_t      *dip = sc->sc_dip;
1384         int             err;
1385 
1386         IPW2100_DBG(IPW2100_DBG_DMA, (dip, CE_CONT,
1387             "ipw2100_dma_region_alloc() name=%s size=%u\n",
1388             dr->dr_name, size));
1389 
1390         err = ddi_dma_alloc_handle(dip, &ipw2100_dma_attr, DDI_DMA_SLEEP, NULL,
1391             &dr->dr_hnd);
1392         if (err != DDI_SUCCESS) {
1393                 IPW2100_DBG(IPW2100_DBG_DMA, (dip, CE_CONT,
1394                     "ipw2100_dma_region_alloc(): "
1395                     "ddi_dma_alloc_handle() failed\n"));
1396                 goto fail0;
1397         }
1398 
1399         err = ddi_dma_mem_alloc(dr->dr_hnd, size, &ipw2100_dma_accattr,
1400             flags, DDI_DMA_SLEEP, NULL, &dr->dr_base,
1401             &dr->dr_size, &dr->dr_acc);
1402         if (err != DDI_SUCCESS) {
1403                 IPW2100_DBG(IPW2100_DBG_DMA, (dip, CE_CONT,
1404                     "ipw2100_dma_region_alloc(): "
1405                     "ddi_dma_mem_alloc() failed\n"));
1406                 goto fail1;
1407         }
1408 
1409         err = ddi_dma_addr_bind_handle(dr->dr_hnd, NULL,
1410             dr->dr_base, dr->dr_size, dir | flags, DDI_DMA_SLEEP, NULL,
1411             &dr->dr_cookie, &dr->dr_ccnt);
1412         if (err != DDI_DMA_MAPPED) {
1413                 IPW2100_DBG(IPW2100_DBG_DMA, (dip, CE_CONT,
1414                     "ipw2100_dma_region_alloc(): "
1415                     "ddi_dma_addr_bind_handle() failed\n"));
1416                 goto fail2;
1417         }
1418 
1419         if (dr->dr_ccnt != 1) {
1420                 err = DDI_FAILURE;
1421                 goto fail3;
1422         }
1423         dr->dr_pbase = dr->dr_cookie.dmac_address;
1424 
1425         IPW2100_DBG(IPW2100_DBG_DMA, (dip, CE_CONT,
1426             "ipw2100_dma_region_alloc(): get physical-base=0x%08x\n",
1427             dr->dr_pbase));
1428 
1429         return (DDI_SUCCESS);
1430 
1431 fail3:
1432         (void) ddi_dma_unbind_handle(dr->dr_hnd);
1433 fail2:
1434         ddi_dma_mem_free(&dr->dr_acc);
1435 fail1:
1436         ddi_dma_free_handle(&dr->dr_hnd);
1437 fail0:
1438         return (err);
1439 }
1440 
1441 static void
1442 ipw2100_dma_region_free(struct dma_region *dr)
1443 {
1444         (void) ddi_dma_unbind_handle(dr->dr_hnd);
1445         ddi_dma_mem_free(&dr->dr_acc);
1446         ddi_dma_free_handle(&dr->dr_hnd);
1447 }
1448 
1449 static int
1450 ipw2100_ring_alloc(struct ipw2100_softc *sc)
1451 {
1452         int     err, i;
1453 
1454         /*
1455          * tx ring
1456          */
1457         sc->sc_dma_txbd.dr_name = "ipw2100-tx-ring-bd";
1458         err = ipw2100_dma_region_alloc(sc, &sc->sc_dma_txbd,
1459             IPW2100_TXBD_SIZE, DDI_DMA_WRITE, DDI_DMA_CONSISTENT);
1460         if (err != DDI_SUCCESS)
1461                 goto fail0;
1462         /*
1463          * tx bufs
1464          */
1465         for (i = 0; i < IPW2100_NUM_TXBUF; i++) {
1466                 sc->sc_dma_txbufs[i].dr_name = "ipw2100-tx-buf";
1467                 err = ipw2100_dma_region_alloc(sc, &sc->sc_dma_txbufs[i],
1468                     IPW2100_TXBUF_SIZE, DDI_DMA_WRITE, DDI_DMA_STREAMING);
1469                 if (err != DDI_SUCCESS) {
1470                         while (i > 0) {
1471                                 i--;
1472                                 ipw2100_dma_region_free(&sc->sc_dma_txbufs[i]);
1473                         }
1474                         goto fail1;
1475                 }
1476         }
1477         /*
1478          * rx ring
1479          */
1480         sc->sc_dma_rxbd.dr_name = "ipw2100-rx-ring-bd";
1481         err = ipw2100_dma_region_alloc(sc, &sc->sc_dma_rxbd,
1482             IPW2100_RXBD_SIZE, DDI_DMA_WRITE, DDI_DMA_CONSISTENT);
1483         if (err != DDI_SUCCESS)
1484                 goto fail2;
1485         /*
1486          * rx bufs
1487          */
1488         for (i = 0; i < IPW2100_NUM_RXBUF; i++) {
1489                 sc->sc_dma_rxbufs[i].dr_name = "ipw2100-rx-buf";
1490                 err = ipw2100_dma_region_alloc(sc, &sc->sc_dma_rxbufs[i],
1491                     IPW2100_RXBUF_SIZE, DDI_DMA_READ, DDI_DMA_STREAMING);
1492                 if (err != DDI_SUCCESS) {
1493                         while (i > 0) {
1494                                 i--;
1495                                 ipw2100_dma_region_free(&sc->sc_dma_rxbufs[i]);
1496                         }
1497                         goto fail3;
1498                 }
1499         }
1500         /*
1501          * status
1502          */
1503         sc->sc_dma_status.dr_name = "ipw2100-rx-status";
1504         err = ipw2100_dma_region_alloc(sc, &sc->sc_dma_status,
1505             IPW2100_STATUS_SIZE, DDI_DMA_READ, DDI_DMA_CONSISTENT);
1506         if (err != DDI_SUCCESS)
1507                 goto fail4;
1508         /*
1509          * command
1510          */
1511         sc->sc_dma_cmd.dr_name = "ipw2100-cmd";
1512         err = ipw2100_dma_region_alloc(sc, &sc->sc_dma_cmd, IPW2100_CMD_SIZE,
1513             DDI_DMA_WRITE, DDI_DMA_CONSISTENT);
1514         if (err != DDI_SUCCESS)
1515                 goto fail5;
1516 
1517         return (DDI_SUCCESS);
1518 
1519 fail5:
1520         ipw2100_dma_region_free(&sc->sc_dma_status);
1521 fail4:
1522         for (i = 0; i < IPW2100_NUM_RXBUF; i++)
1523                 ipw2100_dma_region_free(&sc->sc_dma_rxbufs[i]);
1524 fail3:
1525         ipw2100_dma_region_free(&sc->sc_dma_rxbd);
1526 fail2:
1527         for (i = 0; i < IPW2100_NUM_TXBUF; i++)
1528                 ipw2100_dma_region_free(&sc->sc_dma_txbufs[i]);
1529 fail1:
1530         ipw2100_dma_region_free(&sc->sc_dma_txbd);
1531 fail0:
1532         return (err);
1533 }
1534 
1535 static void
1536 ipw2100_ring_free(struct ipw2100_softc *sc)
1537 {
1538         int     i;
1539 
1540         /*
1541          * tx ring
1542          */
1543         ipw2100_dma_region_free(&sc->sc_dma_txbd);
1544         /*
1545          * tx buf
1546          */
1547         for (i = 0; i < IPW2100_NUM_TXBUF; i++)
1548                 ipw2100_dma_region_free(&sc->sc_dma_txbufs[i]);
1549         /*
1550          * rx ring
1551          */
1552         ipw2100_dma_region_free(&sc->sc_dma_rxbd);
1553         /*
1554          * rx buf
1555          */
1556         for (i = 0; i < IPW2100_NUM_RXBUF; i++)
1557                 ipw2100_dma_region_free(&sc->sc_dma_rxbufs[i]);
1558         /*
1559          * status
1560          */
1561         ipw2100_dma_region_free(&sc->sc_dma_status);
1562         /*
1563          * command
1564          */
1565         ipw2100_dma_region_free(&sc->sc_dma_cmd);
1566 }
1567 
1568 static void
1569 ipw2100_ring_reset(struct ipw2100_softc *sc)
1570 {
1571         int     i;
1572 
1573         /*
1574          * tx ring
1575          */
1576         sc->sc_tx_cur   = 0;
1577         sc->sc_tx_free  = IPW2100_NUM_TXBD;
1578         sc->sc_txbd  = (struct ipw2100_bd *)sc->sc_dma_txbd.dr_base;
1579         for (i = 0; i < IPW2100_NUM_TXBUF; i++)
1580                 sc->sc_txbufs[i] =
1581                     (struct ipw2100_txb *)sc->sc_dma_txbufs[i].dr_base;
1582         /*
1583          * rx ring
1584          */
1585         sc->sc_rx_cur   = 0;
1586         sc->sc_rx_free  = IPW2100_NUM_RXBD;
1587         sc->sc_status   = (struct ipw2100_status *)sc->sc_dma_status.dr_base;
1588         sc->sc_rxbd  = (struct ipw2100_bd *)sc->sc_dma_rxbd.dr_base;
1589         for (i = 0; i < IPW2100_NUM_RXBUF; i++) {
1590                 sc->sc_rxbufs[i] =
1591                     (struct ipw2100_rxb *)sc->sc_dma_rxbufs[i].dr_base;
1592                 /*
1593                  * initialize Rx buffer descriptors, both host and device
1594                  */
1595                 sc->sc_rxbd[i].phyaddr  = LE_32(sc->sc_dma_rxbufs[i].dr_pbase);
1596                 sc->sc_rxbd[i].len   = LE_32(sc->sc_dma_rxbufs[i].dr_size);
1597                 sc->sc_rxbd[i].flags = 0;
1598                 sc->sc_rxbd[i].nfrag = 1;
1599         }
1600         /*
1601          * command
1602          */
1603         sc->sc_cmd = (struct ipw2100_cmd *)sc->sc_dma_cmd.dr_base;
1604 }
1605 
1606 /*
1607  * tx, rx rings and command initialization
1608  */
1609 static int
1610 ipw2100_ring_init(struct ipw2100_softc *sc)
1611 {
1612         int     err;
1613 
1614         err = ipw2100_ring_alloc(sc);
1615         if (err != DDI_SUCCESS)
1616                 return (err);
1617 
1618         ipw2100_ring_reset(sc);
1619 
1620         return (DDI_SUCCESS);
1621 }
1622 
1623 static void
1624 ipw2100_ring_hwsetup(struct ipw2100_softc *sc)
1625 {
1626         ipw2100_ring_reset(sc);
1627         /*
1628          * tx ring
1629          */
1630         ipw2100_csr_put32(sc, IPW2100_CSR_TX_BD_BASE, sc->sc_dma_txbd.dr_pbase);
1631         ipw2100_csr_put32(sc, IPW2100_CSR_TX_BD_SIZE, IPW2100_NUM_TXBD);
1632         /*
1633          * no new packet to transmit, tx-rd-index == tx-wr-index
1634          */
1635         ipw2100_csr_put32(sc, IPW2100_CSR_TX_READ_INDEX, sc->sc_tx_cur);
1636         ipw2100_csr_put32(sc, IPW2100_CSR_TX_WRITE_INDEX, sc->sc_tx_cur);
1637         /*
1638          * rx ring
1639          */
1640         ipw2100_csr_put32(sc, IPW2100_CSR_RX_BD_BASE, sc->sc_dma_rxbd.dr_pbase);
1641         ipw2100_csr_put32(sc, IPW2100_CSR_RX_BD_SIZE, IPW2100_NUM_RXBD);
1642         /*
1643          * all rx buffer are empty, rx-rd-index == 0 && rx-wr-index == N-1
1644          */
1645         IPW2100_DBG(IPW2100_DBG_RING, (sc->sc_dip, CE_CONT,
1646             "ipw2100_ring_hwsetup(): rx-cur=%u, backward=%u\n",
1647             sc->sc_rx_cur, RING_BACKWARD(sc->sc_rx_cur, 1, IPW2100_NUM_RXBD)));
1648         ipw2100_csr_put32(sc, IPW2100_CSR_RX_READ_INDEX, sc->sc_rx_cur);
1649         ipw2100_csr_put32(sc, IPW2100_CSR_RX_WRITE_INDEX,
1650             RING_BACKWARD(sc->sc_rx_cur, 1, IPW2100_NUM_RXBD));
1651         /*
1652          * status
1653          */
1654         ipw2100_csr_put32(sc, IPW2100_CSR_RX_STATUS_BASE,
1655             sc->sc_dma_status.dr_pbase);
1656 }
1657 
1658 /*
1659  * ieee80211_new_state() is not be used, since the hardware can handle the
1660  * state transfer. Here, we just keep the status of the hardware notification
1661  * result.
1662  */
1663 /* ARGSUSED */
1664 static int
1665 ipw2100_newstate(struct ieee80211com *ic, enum ieee80211_state state, int arg)
1666 {
1667         struct ipw2100_softc    *sc = (struct ipw2100_softc *)ic;
1668         struct ieee80211_node   *in;
1669         uint8_t                 macaddr[IEEE80211_ADDR_LEN];
1670         uint32_t                len;
1671         wifi_data_t             wd = { 0 };
1672 
1673         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
1674             "ipw2100_newstate(): %s -> %s\n",
1675             ieee80211_state_name[ic->ic_state], ieee80211_state_name[state]));
1676 
1677         switch (state) {
1678         case IEEE80211_S_RUN:
1679                 /*
1680                  * we only need to use BSSID as to find the node
1681                  */
1682                 drv_usecwait(200); /* firmware needs a short delay here */
1683                 len = IEEE80211_ADDR_LEN;
1684                 (void) ipw2100_table2_getbuf(sc, IPW2100_INFO_CURRENT_BSSID,
1685                     macaddr, &len);
1686 
1687                 in = ieee80211_find_node(&ic->ic_scan, macaddr);
1688                 if (in == NULL)
1689                         break;
1690 
1691                 (void) ieee80211_sta_join(ic, in);
1692                 ieee80211_node_authorize(in);
1693 
1694                 /*
1695                  * We can send data now; update the fastpath with our
1696                  * current associated BSSID.
1697                  */
1698                 if (ic->ic_flags & IEEE80211_F_PRIVACY)
1699                         wd.wd_secalloc = WIFI_SEC_WEP;
1700                 else
1701                         wd.wd_secalloc = WIFI_SEC_NONE;
1702                 wd.wd_opmode = ic->ic_opmode;
1703                 IEEE80211_ADDR_COPY(wd.wd_bssid, ic->ic_bss->in_bssid);
1704                 (void) mac_pdata_update(ic->ic_mach, &wd, sizeof (wd));
1705 
1706                 break;
1707 
1708         case IEEE80211_S_INIT:
1709         case IEEE80211_S_SCAN:
1710         case IEEE80211_S_AUTH:
1711         case IEEE80211_S_ASSOC:
1712                 break;
1713         }
1714 
1715         /*
1716          * notify to update the link
1717          */
1718         if ((ic->ic_state != IEEE80211_S_RUN) && (state == IEEE80211_S_RUN)) {
1719                 /*
1720                  * previously disconnected and now connected
1721                  */
1722                 sc->sc_linkstate = LINK_STATE_UP;
1723                 sc->sc_flags |= IPW2100_FLAG_LINK_CHANGE;
1724         } else if ((ic->ic_state == IEEE80211_S_RUN) &&
1725             (state != IEEE80211_S_RUN)) {
1726                 /*
1727                  * previously connected andd now disconnected
1728                  */
1729                 sc->sc_linkstate = LINK_STATE_DOWN;
1730                 sc->sc_flags |= IPW2100_FLAG_LINK_CHANGE;
1731         }
1732 
1733         ic->ic_state = state;
1734         return (DDI_SUCCESS);
1735 }
1736 
1737 /*
1738  * GLD operations
1739  */
1740 /* ARGSUSED */
1741 static int
1742 ipw2100_m_stat(void *arg, uint_t stat, uint64_t *val)
1743 {
1744         ieee80211com_t  *ic = (ieee80211com_t *)arg;
1745         IPW2100_DBG(IPW2100_DBG_GLD, (((struct ipw2100_softc *)arg)->sc_dip,
1746             CE_CONT,
1747             "ipw2100_m_stat(): enter\n"));
1748         /*
1749          * some of below statistic data are from hardware, some from net80211
1750          */
1751         switch (stat) {
1752         case MAC_STAT_RBYTES:
1753                 *val = ic->ic_stats.is_rx_bytes;
1754                 break;
1755         case MAC_STAT_IPACKETS:
1756                 *val = ic->ic_stats.is_rx_frags;
1757                 break;
1758         case MAC_STAT_OBYTES:
1759                 *val = ic->ic_stats.is_tx_bytes;
1760                 break;
1761         case MAC_STAT_OPACKETS:
1762                 *val = ic->ic_stats.is_tx_frags;
1763                 break;
1764         /*
1765          * Get below from hardware statistic, retrieve net80211 value once 1s
1766          */
1767         case WIFI_STAT_TX_FRAGS:
1768         case WIFI_STAT_MCAST_TX:
1769         case WIFI_STAT_TX_FAILED:
1770         case WIFI_STAT_TX_RETRANS:
1771         case WIFI_STAT_RTS_SUCCESS:
1772         case WIFI_STAT_ACK_FAILURE:
1773         case WIFI_STAT_RX_FRAGS:
1774         case WIFI_STAT_MCAST_RX:
1775         /*
1776          * Get blow information from net80211
1777          */
1778         case WIFI_STAT_RTS_FAILURE:
1779         case WIFI_STAT_RX_DUPS:
1780         case WIFI_STAT_FCS_ERRORS:
1781         case WIFI_STAT_WEP_ERRORS:
1782                 return (ieee80211_stat(ic, stat, val));
1783         /*
1784          * need be supported in the future
1785          */
1786         case MAC_STAT_IFSPEED:
1787         case MAC_STAT_NOXMTBUF:
1788         case MAC_STAT_IERRORS:
1789         case MAC_STAT_OERRORS:
1790         default:
1791                 return (ENOTSUP);
1792         }
1793         return (0);
1794 }
1795 
1796 /* ARGSUSED */
1797 static int
1798 ipw2100_m_multicst(void *arg, boolean_t add, const uint8_t *mca)
1799 {
1800         /* not supported */
1801         IPW2100_DBG(IPW2100_DBG_GLD, (((struct ipw2100_softc *)arg)->sc_dip,
1802             CE_CONT,
1803             "ipw2100_m_multicst(): enter\n"));
1804 
1805         return (0);
1806 }
1807 
1808 /*
1809  * This thread function is used to handle the fatal error.
1810  */
1811 static void
1812 ipw2100_thread(struct ipw2100_softc *sc)
1813 {
1814         struct ieee80211com     *ic = &sc->sc_ic;
1815         int32_t                 nlstate;
1816         int                     stat_cnt = 0;
1817 
1818         IPW2100_DBG(IPW2100_DBG_SOFTINT, (sc->sc_dip, CE_CONT,
1819             "ipw2100_thread(): into ipw2100 thread--> %d\n",
1820             sc->sc_linkstate));
1821 
1822         mutex_enter(&sc->sc_mflock);
1823 
1824         while (sc->sc_mfthread_switch) {
1825                 /*
1826                  * notify the link state
1827                  */
1828                 if (ic->ic_mach && (sc->sc_flags & IPW2100_FLAG_LINK_CHANGE)) {
1829                         IPW2100_DBG(IPW2100_DBG_SOFTINT, (sc->sc_dip, CE_CONT,
1830                             "ipw2100_thread(): link status --> %d\n",
1831                             sc->sc_linkstate));
1832 
1833                         sc->sc_flags &= ~IPW2100_FLAG_LINK_CHANGE;
1834                         nlstate = sc->sc_linkstate;
1835 
1836                         mutex_exit(&sc->sc_mflock);
1837                         mac_link_update(ic->ic_mach, nlstate);
1838                         mutex_enter(&sc->sc_mflock);
1839                 }
1840 
1841                 /*
1842                  * recovery interrupt fatal error
1843                  */
1844                 if (ic->ic_mach &&
1845                     (sc->sc_flags & IPW2100_FLAG_HW_ERR_RECOVER)) {
1846 
1847                         IPW2100_DBG(IPW2100_DBG_FATAL, (sc->sc_dip, CE_CONT,
1848                             "try to recover fatal hw error\n"));
1849                         sc->sc_flags &= ~IPW2100_FLAG_HW_ERR_RECOVER;
1850 
1851                         mutex_exit(&sc->sc_mflock);
1852                         (void) ipw2100_init(sc); /* Force stat machine */
1853                         delay(drv_usectohz(delay_fatal_recover));
1854                         mutex_enter(&sc->sc_mflock);
1855                 }
1856 
1857                 /*
1858                  * get statistic, the value will be retrieved by m_stat
1859                  */
1860                 if (stat_cnt == 10) {
1861                         stat_cnt = 0; /* re-start */
1862 
1863                         mutex_exit(&sc->sc_mflock);
1864                         ipw2100_get_statistics(sc);
1865                         mutex_enter(&sc->sc_mflock);
1866                 } else
1867                         stat_cnt++; /* until 1s */
1868 
1869                 mutex_exit(&sc->sc_mflock);
1870                 delay(drv_usectohz(delay_aux_thread));
1871                 mutex_enter(&sc->sc_mflock);
1872         }
1873         sc->sc_mf_thread = NULL;
1874         cv_broadcast(&sc->sc_mfthread_cv);
1875         mutex_exit(&sc->sc_mflock);
1876 }
1877 
1878 static int
1879 ipw2100_m_start(void *arg)
1880 {
1881         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
1882 
1883         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
1884             "ipw2100_m_start(): enter\n"));
1885 
1886         /*
1887          * initialize ipw2100 hardware
1888          */
1889         (void) ipw2100_init(sc);
1890 
1891         sc->sc_flags |= IPW2100_FLAG_RUNNING;
1892         /*
1893          * fix KCF bug. - workaround, need to fix it in net80211
1894          */
1895         (void) crypto_mech2id(SUN_CKM_RC4);
1896 
1897         return (0);
1898 }
1899 
1900 static void
1901 ipw2100_m_stop(void *arg)
1902 {
1903         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
1904 
1905         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
1906             "ipw2100_m_stop(): enter\n"));
1907 
1908         ipw2100_stop(sc);
1909 
1910         sc->sc_flags &= ~IPW2100_FLAG_RUNNING;
1911 }
1912 
1913 static int
1914 ipw2100_m_unicst(void *arg, const uint8_t *macaddr)
1915 {
1916         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
1917         struct ieee80211com     *ic = &sc->sc_ic;
1918         int                     err;
1919 
1920         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
1921             "ipw2100_m_unicst(): enter\n"));
1922 
1923         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
1924             "ipw2100_m_unicst(): GLD setting MAC address to "
1925             "%02x:%02x:%02x:%02x:%02x:%02x\n",
1926             macaddr[0], macaddr[1], macaddr[2],
1927             macaddr[3], macaddr[4], macaddr[5]));
1928 
1929         if (!IEEE80211_ADDR_EQ(ic->ic_macaddr, macaddr)) {
1930                 IEEE80211_ADDR_COPY(ic->ic_macaddr, macaddr);
1931 
1932                 if (sc->sc_flags & IPW2100_FLAG_RUNNING) {
1933                         err = ipw2100_config(sc);
1934                         if (err != DDI_SUCCESS) {
1935                                 IPW2100_WARN((sc->sc_dip, CE_WARN,
1936                                     "ipw2100_m_unicst(): "
1937                                     "device configuration failed\n"));
1938                                 goto fail;
1939                         }
1940                 }
1941         }
1942 
1943         return (0);
1944 fail:
1945         return (EIO);
1946 }
1947 
1948 static int
1949 ipw2100_m_promisc(void *arg, boolean_t on)
1950 {
1951         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
1952         int recfg, err;
1953 
1954         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
1955             "ipw2100_m_promisc(): enter. "
1956             "GLD setting promiscuous mode - %d\n", on));
1957 
1958         recfg = 0;
1959         if (on)
1960                 if (!(sc->if_flags & IFF_PROMISC)) {
1961                         sc->if_flags |= IFF_PROMISC;
1962                         recfg = 1;
1963                 }
1964         else
1965                 if (sc->if_flags & IFF_PROMISC) {
1966                         sc->if_flags &= ~IFF_PROMISC;
1967                         recfg = 1;
1968                 }
1969 
1970         if (recfg && (sc->sc_flags & IPW2100_FLAG_RUNNING)) {
1971                 err = ipw2100_config(sc);
1972                 if (err != DDI_SUCCESS) {
1973                         IPW2100_WARN((sc->sc_dip, CE_WARN,
1974                             "ipw2100_m_promisc(): "
1975                             "device configuration failed\n"));
1976                         goto fail;
1977                 }
1978         }
1979 
1980         return (0);
1981 fail:
1982         return (EIO);
1983 }
1984 
1985 static mblk_t *
1986 ipw2100_m_tx(void *arg, mblk_t *mp)
1987 {
1988         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
1989         struct ieee80211com     *ic = &sc->sc_ic;
1990         mblk_t                  *next;
1991 
1992         /*
1993          * No data frames go out unless we're associated; this
1994          * should not happen as the 802.11 layer does not enable
1995          * the xmit queue until we enter the RUN state.
1996          */
1997         if (ic->ic_state != IEEE80211_S_RUN) {
1998                 IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
1999                     "ipw2100_m_tx(): discard msg, ic_state = %u\n",
2000                     ic->ic_state));
2001                 freemsgchain(mp);
2002                 return (NULL);
2003         }
2004 
2005         while (mp != NULL) {
2006                 next = mp->b_next;
2007                 mp->b_next = NULL;
2008                 if (ipw2100_send(ic, mp, IEEE80211_FC0_TYPE_DATA) !=
2009                     DDI_SUCCESS) {
2010                         mp->b_next = next;
2011                         break;
2012                 }
2013                 mp = next;
2014         }
2015         return (mp);
2016 }
2017 
2018 /* ARGSUSED */
2019 static int
2020 ipw2100_send(ieee80211com_t *ic, mblk_t *mp, uint8_t type)
2021 {
2022         struct ipw2100_softc    *sc = (struct ipw2100_softc *)ic;
2023         struct ieee80211_node   *in;
2024         struct ieee80211_frame  wh, *wh_tmp;
2025         struct ieee80211_key    *k;
2026         uint8_t                 *hdat;
2027         mblk_t                  *m0, *m;
2028         size_t                  cnt, off;
2029         struct ipw2100_bd       *txbd[2];
2030         struct ipw2100_txb      *txbuf;
2031         struct dma_region       *dr;
2032         struct ipw2100_hdr      *h;
2033         uint32_t                idx, bidx;
2034         int                     err;
2035 
2036         ASSERT(mp->b_next == NULL);
2037 
2038         m0 = NULL;
2039         m = NULL;
2040         err = DDI_SUCCESS;
2041 
2042         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
2043             "ipw2100_send(): enter\n"));
2044 
2045         if ((type & IEEE80211_FC0_TYPE_MASK) != IEEE80211_FC0_TYPE_DATA) {
2046                 /*
2047                  * it is impossible to send non-data 802.11 frame in current
2048                  * ipw driver. Therefore, drop the package
2049                  */
2050                 freemsg(mp);
2051                 err = DDI_SUCCESS;
2052                 goto fail0;
2053         }
2054 
2055         mutex_enter(&sc->sc_tx_lock);
2056 
2057         /*
2058          * need 2 descriptors: 1 for SEND cmd parameter header,
2059          * and the other for payload, i.e., 802.11 frame including 802.11
2060          * frame header
2061          */
2062         if (sc->sc_tx_free < 2) {
2063                 mutex_enter(&sc->sc_resched_lock);
2064                 IPW2100_DBG(IPW2100_DBG_RING, (sc->sc_dip, CE_WARN,
2065                     "ipw2100_send(): no enough descriptors(%d)\n",
2066                     sc->sc_tx_free));
2067                 ic->ic_stats.is_tx_nobuf++; /* no enough buffer */
2068                 sc->sc_flags |= IPW2100_FLAG_TX_SCHED;
2069                 err = DDI_FAILURE;
2070                 mutex_exit(&sc->sc_resched_lock);
2071                 goto fail1;
2072         }
2073         IPW2100_DBG(IPW2100_DBG_RING, (sc->sc_dip, CE_CONT,
2074             "ipw2100_send(): tx-free=%d,tx-curr=%d\n",
2075             sc->sc_tx_free, sc->sc_tx_cur));
2076 
2077         wh_tmp = (struct ieee80211_frame *)mp->b_rptr;
2078         in = ieee80211_find_txnode(ic, wh_tmp->i_addr1);
2079         if (in == NULL) { /* can not find tx node, drop the package */
2080                 freemsg(mp);
2081                 err = DDI_SUCCESS;
2082                 goto fail1;
2083         }
2084         in->in_inact = 0;
2085         (void) ieee80211_encap(ic, mp, in);
2086         ieee80211_free_node(in);
2087 
2088         if (wh_tmp->i_fc[1] & IEEE80211_FC1_WEP) {
2089                 /*
2090                  * it is very bad that ieee80211_crypto_encap can only accept a
2091                  * single continuous buffer.
2092                  */
2093                 /*
2094                  * allocate 32 more bytes is to be compatible with further
2095                  * ieee802.11i standard.
2096                  */
2097                 m = allocb(msgdsize(mp) + 32, BPRI_MED);
2098                 if (m == NULL) { /* can not alloc buf, drop this package */
2099                         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
2100                             "ipw2100_send(): msg allocation failed\n"));
2101 
2102                         freemsg(mp);
2103 
2104                         err = DDI_SUCCESS;
2105                         goto fail1;
2106                 }
2107                 off = 0;
2108                 m0 = mp;
2109                 while (m0) {
2110                         cnt = MBLKL(m0);
2111                         if (cnt) {
2112                                 (void) memcpy(m->b_rptr + off, m0->b_rptr, cnt);
2113                                 off += cnt;
2114                         }
2115                         m0 = m0->b_cont;
2116                 }
2117                 m->b_wptr += off;
2118                 IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
2119                     "ipw2100_send(): "
2120                     "Encrypting 802.11 frame started, %d, %d\n",
2121                     msgdsize(mp), MBLKL(mp)));
2122                 k = ieee80211_crypto_encap(ic, m);
2123                 if (k == NULL) { /* can not get the key, drop packages */
2124                         IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
2125                             "ipw2100_send(): "
2126                             "Encrypting 802.11 frame failed\n"));
2127 
2128                         freemsg(mp);
2129                         err = DDI_SUCCESS;
2130                         goto fail2;
2131                 }
2132                 IPW2100_DBG(IPW2100_DBG_WIFI, (sc->sc_dip, CE_CONT,
2133                     "ipw2100_send(): "
2134                     "Encrypting 802.11 frame finished, %d, %d, k=0x%08x\n",
2135                     msgdsize(mp), MBLKL(mp), k->wk_flags));
2136         }
2137 
2138         /*
2139          * header descriptor
2140          */
2141         idx = sc->sc_tx_cur;
2142         txbd[0]  = &sc->sc_txbd[idx];
2143         if ((idx & 1) == 0)
2144                 bidx = idx / 2;
2145         sc->sc_tx_cur = RING_FORWARD(sc->sc_tx_cur, 1, IPW2100_NUM_TXBD);
2146         sc->sc_tx_free--;
2147 
2148         /*
2149          * payload descriptor
2150          */
2151         idx = sc->sc_tx_cur;
2152         txbd[1]  = &sc->sc_txbd[idx];
2153         if ((idx & 1) == 0)
2154                 bidx = idx / 2;
2155         sc->sc_tx_cur = RING_FORWARD(sc->sc_tx_cur, 1, IPW2100_NUM_TXBD);
2156         sc->sc_tx_free--;
2157 
2158         /*
2159          * one buffer, SEND cmd header and payload buffer
2160          */
2161         txbuf = sc->sc_txbufs[bidx];
2162         dr = &sc->sc_dma_txbufs[bidx];
2163 
2164         /*
2165          * extract 802.11 header from message, fill wh from m0
2166          */
2167         hdat = (uint8_t *)&wh;
2168         off = 0;
2169         if (m)
2170                 m0 = m;
2171         else
2172                 m0 = mp;
2173         while (off < sizeof (wh)) {
2174                 cnt = MBLKL(m0);
2175                 if (cnt > (sizeof (wh) - off))
2176                         cnt = sizeof (wh) - off;
2177                 if (cnt) {
2178                         (void) memcpy(hdat + off, m0->b_rptr, cnt);
2179                         off += cnt;
2180                         m0->b_rptr += cnt;
2181                 }
2182                 else
2183                         m0 = m0->b_cont;
2184         }
2185 
2186         /*
2187          * prepare SEND cmd header
2188          */
2189         h               = &txbuf->txb_hdr;
2190         h->type              = LE_32(IPW2100_CMD_SEND);
2191         h->subtype   = LE_32(0);
2192         h->encrypted    = ic->ic_flags & IEEE80211_F_PRIVACY ? 1 : 0;
2193         h->encrypt   = 0;
2194         h->keyidx    = 0;
2195         h->keysz     = 0;
2196         h->fragsz    = LE_16(0);
2197         IEEE80211_ADDR_COPY(h->saddr, wh.i_addr2);
2198         if (ic->ic_opmode == IEEE80211_M_STA)
2199                 IEEE80211_ADDR_COPY(h->daddr, wh.i_addr3);
2200         else
2201                 IEEE80211_ADDR_COPY(h->daddr, wh.i_addr1);
2202 
2203         /*
2204          * extract payload from message into tx data buffer
2205          */
2206         off = 0;
2207         while (m0) {
2208                 cnt = MBLKL(m0);
2209                 if (cnt) {
2210                         (void) memcpy(&txbuf->txb_dat[off], m0->b_rptr, cnt);
2211                         off += cnt;
2212                 }
2213                 m0 = m0->b_cont;
2214         }
2215 
2216         /*
2217          * fill SEND cmd header descriptor
2218          */
2219         txbd[0]->phyaddr = LE_32(dr->dr_pbase +
2220             OFFSETOF(struct ipw2100_txb, txb_hdr));
2221         txbd[0]->len = LE_32(sizeof (struct ipw2100_hdr));
2222         txbd[0]->flags       = IPW2100_BD_FLAG_TX_FRAME_802_3 |
2223             IPW2100_BD_FLAG_TX_NOT_LAST_FRAGMENT;
2224         txbd[0]->nfrag       = 2;
2225         /*
2226          * fill payload descriptor
2227          */
2228         txbd[1]->phyaddr = LE_32(dr->dr_pbase +
2229             OFFSETOF(struct ipw2100_txb, txb_dat[0]));
2230         txbd[1]->len = LE_32(off);
2231         txbd[1]->flags       = IPW2100_BD_FLAG_TX_FRAME_802_3 |
2232             IPW2100_BD_FLAG_TX_LAST_FRAGMENT;
2233         txbd[1]->nfrag       = 0;
2234 
2235         /*
2236          * dma sync
2237          */
2238         (void) ddi_dma_sync(dr->dr_hnd, 0, sizeof (struct ipw2100_txb),
2239             DDI_DMA_SYNC_FORDEV);
2240         (void) ddi_dma_sync(sc->sc_dma_txbd.dr_hnd,
2241             (txbd[0] - sc->sc_txbd) * sizeof (struct ipw2100_bd),
2242             sizeof (struct ipw2100_bd), DDI_DMA_SYNC_FORDEV);
2243         /*
2244          * since txbd[1] may not be successive to txbd[0] due to the ring
2245          * organization, another dma_sync is needed to simplify the logic
2246          */
2247         (void) ddi_dma_sync(sc->sc_dma_txbd.dr_hnd,
2248             (txbd[1] - sc->sc_txbd) * sizeof (struct ipw2100_bd),
2249             sizeof (struct ipw2100_bd), DDI_DMA_SYNC_FORDEV);
2250         /*
2251          * update txcur
2252          */
2253         ipw2100_csr_put32(sc, IPW2100_CSR_TX_WRITE_INDEX, sc->sc_tx_cur);
2254 
2255         if (mp) /* success, free the original message */
2256                 freemsg(mp);
2257 fail2:
2258         if (m)
2259                 freemsg(m);
2260 fail1:
2261         mutex_exit(&sc->sc_tx_lock);
2262 fail0:
2263         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
2264             "ipw2100_send(): exit - err=%d\n", err));
2265 
2266         return (err);
2267 }
2268 
2269 /*
2270  * IOCTL Handler
2271  */
2272 #define IEEE80211_IOCTL_REQUIRED        (1)
2273 #define IEEE80211_IOCTL_NOT_REQUIRED    (0)
2274 static void
2275 ipw2100_m_ioctl(void *arg, queue_t *q, mblk_t *m)
2276 {
2277         struct ipw2100_softc    *sc  = (struct ipw2100_softc *)arg;
2278         struct ieee80211com     *ic = &sc->sc_ic;
2279         int                     err;
2280 
2281         IPW2100_DBG(IPW2100_DBG_GLD, (sc->sc_dip, CE_CONT,
2282             "ipw2100_m_ioctl(): enter\n"));
2283 
2284         /*
2285          * check whether or not need to handle this in net80211
2286          */
2287         if (ipw2100_ioctl(sc, q, m) == IEEE80211_IOCTL_NOT_REQUIRED)
2288                 return; /* succes or fail */
2289 
2290         err = ieee80211_ioctl(ic, q, m);
2291         if (err == ENETRESET) {
2292                 if (sc->sc_flags & IPW2100_FLAG_RUNNING) {
2293                         (void) ipw2100_m_start(sc);
2294                         (void) ieee80211_new_state(ic,
2295                             IEEE80211_S_SCAN, -1);
2296                 }
2297         }
2298         if (err == ERESTART) {
2299                 if (sc->sc_flags & IPW2100_FLAG_RUNNING)
2300                         (void) ipw2100_chip_reset(sc);
2301         }
2302 }
2303 
2304 static int
2305 ipw2100_ioctl(struct ipw2100_softc *sc, queue_t *q, mblk_t *m)
2306 {
2307         struct iocblk   *iocp;
2308         uint32_t        len, ret, cmd;
2309         mblk_t          *m0;
2310         boolean_t       need_privilege;
2311         boolean_t       need_net80211;
2312 
2313         if (MBLKL(m) < sizeof (struct iocblk)) {
2314                 IPW2100_DBG(IPW2100_DBG_IOCTL, (sc->sc_dip, CE_CONT,
2315                     "ipw2100_ioctl(): ioctl buffer too short, %u\n",
2316                     MBLKL(m)));
2317                 miocnak(q, m, 0, EINVAL);
2318                 return (IEEE80211_IOCTL_NOT_REQUIRED);
2319         }
2320 
2321         /*
2322          * Validate the command
2323          */
2324         iocp = (struct iocblk *)(uintptr_t)m->b_rptr;
2325         iocp->ioc_error = 0;
2326         cmd = iocp->ioc_cmd;
2327         need_privilege = B_TRUE;
2328         switch (cmd) {
2329         case WLAN_SET_PARAM:
2330         case WLAN_COMMAND:
2331                 break;
2332         case WLAN_GET_PARAM:
2333                 need_privilege = B_FALSE;
2334                 break;
2335         default:
2336                 IPW2100_DBG(IPW2100_DBG_IOCTL, (sc->sc_dip, CE_CONT,
2337                     "ieee80211_ioctl(): unknown cmd 0x%x", cmd));
2338                 miocnak(q, m, 0, EINVAL);
2339                 return (IEEE80211_IOCTL_NOT_REQUIRED);
2340         }
2341 
2342         if (need_privilege && (ret = secpolicy_dl_config(iocp->ioc_cr)) != 0) {
2343                 miocnak(q, m, 0, ret);
2344                 return (IEEE80211_IOCTL_NOT_REQUIRED);
2345         }
2346 
2347         /*
2348          * sanity check
2349          */
2350         m0 = m->b_cont;
2351         if (iocp->ioc_count == 0 || iocp->ioc_count < sizeof (wldp_t) ||
2352             m0 == NULL) {
2353                 miocnak(q, m, 0, EINVAL);
2354                 return (IEEE80211_IOCTL_NOT_REQUIRED);
2355         }
2356         /*
2357          * assuming single data block
2358          */
2359         if (m0->b_cont) {
2360                 freemsg(m0->b_cont);
2361                 m0->b_cont = NULL;
2362         }
2363 
2364         need_net80211 = B_FALSE;
2365         ret = ipw2100_getset(sc, m0, cmd, &need_net80211);
2366         if (!need_net80211) {
2367                 len = msgdsize(m0);
2368 
2369                 IPW2100_DBG(IPW2100_DBG_IOCTL, (sc->sc_dip, CE_CONT,
2370                     "ipw2100_ioctl(): go to call miocack with "
2371                     "ret = %d, len = %d\n", ret, len));
2372                 miocack(q, m, len, ret);
2373                 return (IEEE80211_IOCTL_NOT_REQUIRED);
2374         }
2375 
2376         /*
2377          * IEEE80211_IOCTL_REQUIRED - need net80211 handle
2378          */
2379         return (IEEE80211_IOCTL_REQUIRED);
2380 }
2381 
2382 static int
2383 ipw2100_getset(struct ipw2100_softc *sc, mblk_t *m, uint32_t cmd,
2384         boolean_t *need_net80211)
2385 {
2386         wldp_t          *infp, *outfp;
2387         uint32_t        id;
2388         int             ret; /* IEEE80211_IOCTL - handled by net80211 */
2389 
2390         infp  = (wldp_t *)(uintptr_t)m->b_rptr;
2391         outfp = (wldp_t *)(uintptr_t)m->b_rptr;
2392         outfp->wldp_result = WL_NOTSUPPORTED;
2393 
2394         id = infp->wldp_id;
2395         IPW2100_DBG(IPW2100_DBG_IOCTL, (sc->sc_dip, CE_CONT,
2396             "ipw2100_getset(): id = 0x%x\n", id));
2397         switch (id) {
2398         /*
2399          * which is not supported by net80211, so it
2400          * has to be handled from driver side
2401          */
2402         case WL_RADIO:
2403                 ret = ipw_wificfg_radio(sc, cmd, outfp);
2404                 break;
2405         /*
2406          * so far, drier doesn't support fix-rates
2407          */
2408         case WL_DESIRED_RATES:
2409                 ret = ipw_wificfg_desrates(outfp);
2410                 break;
2411         /*
2412          * current net80211 implementation clears the bssid while
2413          * this command received, which will result in the all zero
2414          * mac address for scan'ed AP which is just disconnected.
2415          * This is a workaround solution until net80211 find a
2416          * better method.
2417          */
2418         case WL_DISASSOCIATE:
2419                 ret = ipw_wificfg_disassoc(sc, outfp);
2420                 break;
2421         default:
2422                 /*
2423                  * The wifi IOCTL net80211 supported:
2424                  *      case WL_ESSID:
2425                  *      case WL_BSSID:
2426                  *      case WL_WEP_KEY_TAB:
2427                  *      case WL_WEP_KEY_ID:
2428                  *      case WL_AUTH_MODE:
2429                  *      case WL_ENCRYPTION:
2430                  *      case WL_BSS_TYPE:
2431                  *      case WL_ESS_LIST:
2432                  *      case WL_LINKSTATUS:
2433                  *      case WL_RSSI:
2434                  *      case WL_SCAN:
2435                  *      case WL_LOAD_DEFAULTS:
2436                  */
2437 
2438                 /*
2439                  * When radio is off, need to ignore all ioctl.  What need to
2440                  * do is to check radio status firstly.  If radio is ON, pass
2441                  * it to net80211, otherwise, return to upper layer directly.
2442                  *
2443                  * Considering the WL_SUCCESS also means WL_CONNECTED for
2444                  * checking linkstatus, one exception for WL_LINKSTATUS is to
2445                  * let net80211 handle it.
2446                  */
2447                 if ((ipw2100_get_radio(sc) == 0) &&
2448                     (id != WL_LINKSTATUS)) {
2449 
2450                         IPW2100_REPORT((sc->sc_dip, CE_WARN,
2451                             "ipw: RADIO is OFF\n"));
2452 
2453                         outfp->wldp_length = WIFI_BUF_OFFSET;
2454                         outfp->wldp_result = WL_SUCCESS;
2455                         ret = 0;
2456                         break;
2457                 }
2458 
2459                 *need_net80211 = B_TRUE; /* let net80211 do the rest */
2460                 return (0);
2461         }
2462         /*
2463          * we will overwrite everything
2464          */
2465         m->b_wptr = m->b_rptr + outfp->wldp_length;
2466 
2467         return (ret);
2468 }
2469 
2470 /*
2471  * Call back functions for get/set proporty
2472  */
2473 static int
2474 ipw2100_m_getprop(void *arg, const char *pr_name, mac_prop_id_t wldp_pr_num,
2475     uint_t wldp_length, void *wldp_buf)
2476 {
2477         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
2478         struct ieee80211com     *ic = &sc->sc_ic;
2479         int                     err = 0;
2480 
2481         switch (wldp_pr_num) {
2482         /* mac_prop_id */
2483         case MAC_PROP_WL_DESIRED_RATES:
2484                 IPW2100_DBG(IPW2100_DBG_BRUSSELS, (sc->sc_dip, CE_CONT,
2485                     "ipw2100_m_getprop(): Not Support DESIRED_RATES\n"));
2486                 break;
2487         case MAC_PROP_WL_RADIO:
2488                 *(wl_linkstatus_t *)wldp_buf = ipw2100_get_radio(sc);
2489                 break;
2490         default:
2491                 /* go through net80211 */
2492                 err = ieee80211_getprop(ic, pr_name, wldp_pr_num,
2493                     wldp_length, wldp_buf);
2494                 break;
2495         }
2496 
2497         return (err);
2498 }
2499 
2500 static void
2501 ipw2100_m_propinfo(void *arg, const char *pr_name, mac_prop_id_t wldp_pr_num,
2502     mac_prop_info_handle_t prh)
2503 {
2504         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
2505         struct ieee80211com     *ic = &sc->sc_ic;
2506 
2507         ieee80211_propinfo(ic, pr_name, wldp_pr_num, prh);
2508 
2509 }
2510 
2511 static int
2512 ipw2100_m_setprop(void *arg, const char *pr_name, mac_prop_id_t wldp_pr_num,
2513     uint_t wldp_length, const void *wldp_buf)
2514 {
2515         struct ipw2100_softc    *sc = (struct ipw2100_softc *)arg;
2516         struct ieee80211com     *ic = &sc->sc_ic;
2517         int                     err;
2518 
2519         switch (wldp_pr_num) {
2520         /* mac_prop_id */
2521         case MAC_PROP_WL_DESIRED_RATES:
2522                 IPW2100_DBG(IPW2100_DBG_BRUSSELS, (sc->sc_dip, CE_CONT,
2523                     "ipw2100_m_setprop(): Not Support DESIRED_RATES\n"));
2524                 err = ENOTSUP;
2525                 break;
2526         case MAC_PROP_WL_RADIO:
2527                 IPW2100_DBG(IPW2100_DBG_BRUSSELS, (sc->sc_dip, CE_CONT,
2528                     "ipw2100_m_setprop(): Not Support RADIO\n"));
2529                 err = ENOTSUP;
2530                 break;
2531         default:
2532                 /* go through net80211 */
2533                 err = ieee80211_setprop(ic, pr_name, wldp_pr_num, wldp_length,
2534                     wldp_buf);
2535                 break;
2536         }
2537 
2538         if (err == ENETRESET) {
2539                 if (sc->sc_flags & IPW2100_FLAG_RUNNING) {
2540                         (void) ipw2100_m_start(sc);
2541                         (void) ieee80211_new_state(ic,
2542                             IEEE80211_S_SCAN, -1);
2543                 }
2544 
2545                 err = 0;
2546         }
2547 
2548         return (err);
2549 }
2550 
2551 static int
2552 ipw_wificfg_radio(struct ipw2100_softc *sc, uint32_t cmd, wldp_t *outfp)
2553 {
2554         uint32_t        ret = ENOTSUP;
2555 
2556         switch (cmd) {
2557         case WLAN_GET_PARAM:
2558                 *(wl_linkstatus_t *)(outfp->wldp_buf) = ipw2100_get_radio(sc);
2559                 outfp->wldp_length = WIFI_BUF_OFFSET + sizeof (wl_linkstatus_t);
2560                 outfp->wldp_result = WL_SUCCESS;
2561                 ret = 0; /* command sucess */
2562                 break;
2563         case WLAN_SET_PARAM:
2564         default:
2565                 break;
2566         }
2567         return (ret);
2568 }
2569 
2570 static int
2571 ipw_wificfg_desrates(wldp_t *outfp)
2572 {
2573         /*
2574          * return success, but with result NOTSUPPORTED
2575          */
2576         outfp->wldp_length = WIFI_BUF_OFFSET;
2577         outfp->wldp_result = WL_NOTSUPPORTED;
2578         return (0);
2579 }
2580 
2581 static int
2582 ipw_wificfg_disassoc(struct ipw2100_softc *sc, wldp_t *outfp)
2583 {
2584         struct ieee80211com     *ic = &sc->sc_ic;
2585 
2586         /*
2587          * init the state
2588          */
2589         if (ic->ic_state != IEEE80211_S_INIT) {
2590                 (void) ieee80211_new_state(ic, IEEE80211_S_INIT, -1);
2591         }
2592 
2593         /*
2594          * return success always
2595          */
2596         outfp->wldp_length = WIFI_BUF_OFFSET;
2597         outfp->wldp_result = WL_SUCCESS;
2598         return (0);
2599 }
2600 /* End of IOCTL Handler */
2601 
2602 static void
2603 ipw2100_fix_channel(struct ieee80211com *ic, mblk_t *m)
2604 {
2605         struct ieee80211_frame  *wh;
2606         uint8_t                 subtype;
2607         uint8_t                 *frm, *efrm;
2608 
2609         wh = (struct ieee80211_frame *)m->b_rptr;
2610 
2611         if ((wh->i_fc[0] & IEEE80211_FC0_TYPE_MASK) != IEEE80211_FC0_TYPE_MGT)
2612                 return;
2613 
2614         subtype = wh->i_fc[0] & IEEE80211_FC0_SUBTYPE_MASK;
2615 
2616         if (subtype != IEEE80211_FC0_SUBTYPE_BEACON &&
2617             subtype != IEEE80211_FC0_SUBTYPE_PROBE_RESP)
2618                 return;
2619 
2620         /*
2621          * assume the message contains only 1 block
2622          */
2623         frm   = (uint8_t *)(wh + 1);
2624         efrm  = (uint8_t *)m->b_wptr;
2625         frm  += 12;  /* skip tstamp, bintval and capinfo fields */
2626         while (frm < efrm) {
2627                 if (*frm == IEEE80211_ELEMID_DSPARMS) {
2628 #if IEEE80211_CHAN_MAX < 255
2629                         if (frm[2] <= IEEE80211_CHAN_MAX)
2630 #endif
2631                         {
2632                                 ic->ic_curchan = &ic->ic_sup_channels[frm[2]];
2633                         }
2634                 }
2635                 frm += frm[1] + 2;
2636         }
2637 }
2638 
2639 static void
2640 ipw2100_rcvpkt(struct ipw2100_softc *sc, struct ipw2100_status *status,
2641     uint8_t *rxbuf)
2642 {
2643         struct ieee80211com     *ic = &sc->sc_ic;
2644         mblk_t                  *m;
2645         struct ieee80211_frame  *wh = (struct ieee80211_frame *)rxbuf;
2646         struct ieee80211_node   *in;
2647         uint32_t                rlen;
2648 
2649         in = ieee80211_find_rxnode(ic, wh);
2650         rlen = LE_32(status->len);
2651         m = allocb(rlen, BPRI_MED);
2652         if (m) {
2653                 (void) memcpy(m->b_wptr, rxbuf, rlen);
2654                 m->b_wptr += rlen;
2655                 if (ic->ic_state == IEEE80211_S_SCAN)
2656                         ipw2100_fix_channel(ic, m);
2657                 (void) ieee80211_input(ic, m, in, status->rssi, 0);
2658         } else
2659                 IPW2100_WARN((sc->sc_dip, CE_WARN,
2660                     "ipw2100_rcvpkg(): cannot allocate receive message(%u)\n",
2661                     LE_32(status->len)));
2662         ieee80211_free_node(in);
2663 }
2664 
2665 static uint_t
2666 ipw2100_intr(caddr_t arg)
2667 {
2668         struct ipw2100_softc    *sc = (struct ipw2100_softc *)(uintptr_t)arg;
2669         uint32_t                ireg, ridx, len, i;
2670         struct ieee80211com     *ic = &sc->sc_ic;
2671         struct ipw2100_status   *status;
2672         uint8_t                 *rxbuf;
2673         struct dma_region       *dr;
2674         uint32_t                state;
2675 #if DEBUG
2676         struct ipw2100_bd *rxbd;
2677 #endif
2678 
2679         if (sc->sc_suspended)
2680                 return (DDI_INTR_UNCLAIMED);
2681 
2682         ireg = ipw2100_csr_get32(sc, IPW2100_CSR_INTR);
2683 
2684         if (!(ireg & IPW2100_INTR_MASK_ALL))
2685                 return (DDI_INTR_UNCLAIMED);
2686 
2687         /*
2688          * mask all interrupts
2689          */
2690         ipw2100_csr_put32(sc, IPW2100_CSR_INTR_MASK, 0);
2691 
2692         /*
2693          * acknowledge all fired interrupts
2694          */
2695         ipw2100_csr_put32(sc, IPW2100_CSR_INTR, ireg);
2696 
2697         IPW2100_DBG(IPW2100_DBG_INT, (sc->sc_dip, CE_CONT,
2698             "ipw2100_intr(): interrupt is fired. int=0x%08x\n", ireg));
2699 
2700         if (ireg & IPW2100_INTR_MASK_ERR) {
2701 
2702                 IPW2100_DBG(IPW2100_DBG_FATAL, (sc->sc_dip, CE_CONT,
2703                     "ipw2100_intr(): interrupt is fired, MASK = 0x%08x\n",
2704                     ireg));
2705 
2706                 /*
2707                  * inform mfthread to recover hw error
2708                  */
2709                 mutex_enter(&sc->sc_mflock);
2710                 sc->sc_flags |= IPW2100_FLAG_HW_ERR_RECOVER;
2711                 mutex_exit(&sc->sc_mflock);
2712 
2713                 goto enable_interrupt;
2714         }
2715 
2716         /*
2717          * FW intr
2718          */
2719         if (ireg & IPW2100_INTR_FW_INIT_DONE) {
2720                 mutex_enter(&sc->sc_ilock);
2721                 sc->sc_flags |= IPW2100_FLAG_FW_INITED;
2722                 cv_signal(&sc->sc_fw_cond);
2723                 mutex_exit(&sc->sc_ilock);
2724         }
2725 
2726         /*
2727          * RX intr
2728          */
2729         if (ireg & IPW2100_INTR_RX_TRANSFER) {
2730                 ridx = ipw2100_csr_get32(sc,
2731                     IPW2100_CSR_RX_READ_INDEX);
2732 
2733                 for (; sc->sc_rx_cur != ridx;
2734                     sc->sc_rx_cur = RING_FORWARD(
2735                     sc->sc_rx_cur, 1, IPW2100_NUM_RXBD)) {
2736 
2737                         i       = sc->sc_rx_cur;
2738                         status  = &sc->sc_status[i];
2739                         rxbuf   = &sc->sc_rxbufs[i]->rxb_dat[0];
2740                         dr      = &sc->sc_dma_rxbufs[i];
2741 
2742                         /*
2743                          * sync
2744                          */
2745                         (void) ddi_dma_sync(sc->sc_dma_status.dr_hnd,
2746                             i * sizeof (struct ipw2100_status),
2747                             sizeof (struct ipw2100_status),
2748                             DDI_DMA_SYNC_FORKERNEL);
2749                         (void) ddi_dma_sync(sc->sc_dma_rxbd.dr_hnd,
2750                             i * sizeof (struct ipw2100_bd),
2751                             sizeof (struct ipw2100_bd),
2752                             DDI_DMA_SYNC_FORKERNEL);
2753                         (void) ddi_dma_sync(dr->dr_hnd, 0,
2754                             sizeof (struct ipw2100_rxb),
2755                             DDI_DMA_SYNC_FORKERNEL);
2756                         IPW2100_DBG(IPW2100_DBG_INT, (sc->sc_dip, CE_CONT,
2757                             "ipw2100_intr(): status code=0x%04x, len=0x%08x, "
2758                             "flags=0x%02x, rssi=%02x\n",
2759                             LE_16(status->code), LE_32(status->len),
2760                             status->flags, status->rssi));
2761 #if DEBUG
2762                         rxbd    = &sc->sc_rxbd[i];
2763                         IPW2100_DBG(IPW2100_DBG_INT, (sc->sc_dip, CE_CONT,
2764                             "ipw2100_intr(): rxbd,phyaddr=0x%08x, len=0x%08x, "
2765                             "flags=0x%02x,nfrag=%02x\n",
2766                             LE_32(rxbd->phyaddr), LE_32(rxbd->len),
2767                             rxbd->flags, rxbd->nfrag));
2768 #endif
2769                         switch (LE_16(status->code) & 0x0f) {
2770                         /*
2771                          * command complete response
2772                          */
2773                         case IPW2100_STATUS_CODE_COMMAND:
2774                                 mutex_enter(&sc->sc_ilock);
2775                                 sc->sc_done = 1;
2776                                 cv_signal(&sc->sc_cmd_cond);
2777                                 mutex_exit(&sc->sc_ilock);
2778                                 break;
2779                         /*
2780                          * change state
2781                          */
2782                         case IPW2100_STATUS_CODE_NEWSTATE:
2783                                 state = LE_32(* ((uint32_t *)(uintptr_t)rxbuf));
2784                                 IPW2100_DBG(IPW2100_DBG_INT,
2785                                     (sc->sc_dip, CE_CONT,
2786                                     "ipw2100_intr(): newstate,state=0x%x\n",
2787                                     state));
2788 
2789                                 switch (state) {
2790                                 case IPW2100_STATE_ASSOCIATED:
2791                                         ieee80211_new_state(ic,
2792                                             IEEE80211_S_RUN, -1);
2793                                         break;
2794                                 case IPW2100_STATE_ASSOCIATION_LOST:
2795                                         case IPW2100_STATE_DISABLED:
2796                                         ieee80211_new_state(ic,
2797                                             IEEE80211_S_INIT, -1);
2798                                         break;
2799                                 /*
2800                                  * When radio is OFF, need a better
2801                                  * scan approach to ensure scan
2802                                  * result correct.
2803                                  */
2804                                 case IPW2100_STATE_RADIO_DISABLED:
2805                                         IPW2100_REPORT((sc->sc_dip, CE_WARN,
2806                                             "ipw2100_intr(): RADIO is OFF\n"));
2807                                         ipw2100_stop(sc);
2808                                         break;
2809                                 case IPW2100_STATE_SCAN_COMPLETE:
2810                                         ieee80211_cancel_scan(ic);
2811                                         break;
2812                                 case IPW2100_STATE_SCANNING:
2813                                         if (ic->ic_state != IEEE80211_S_RUN)
2814                                                 ieee80211_new_state(ic,
2815                                                     IEEE80211_S_SCAN, -1);
2816                                         ic->ic_flags |= IEEE80211_F_SCAN;
2817 
2818                                         break;
2819                                 default:
2820                                         break;
2821                                 }
2822                                 break;
2823                         case IPW2100_STATUS_CODE_DATA_802_11:
2824                         case IPW2100_STATUS_CODE_DATA_802_3:
2825                                 ipw2100_rcvpkt(sc, status, rxbuf);
2826                                 break;
2827                         case IPW2100_STATUS_CODE_NOTIFICATION:
2828                                 break;
2829                         default:
2830                                 IPW2100_WARN((sc->sc_dip, CE_WARN,
2831                                     "ipw2100_intr(): "
2832                                     "unknown status code 0x%04x\n",
2833                                     LE_16(status->code)));
2834                                 break;
2835                         }
2836                 }
2837                 /*
2838                  * write sc_rx_cur backward 1 step to RX_WRITE_INDEX
2839                  */
2840                 ipw2100_csr_put32(sc, IPW2100_CSR_RX_WRITE_INDEX,
2841                     RING_BACKWARD(sc->sc_rx_cur, 1, IPW2100_NUM_RXBD));
2842         }
2843 
2844         /*
2845          * TX intr
2846          */
2847         if (ireg & IPW2100_INTR_TX_TRANSFER) {
2848                 mutex_enter(&sc->sc_tx_lock);
2849                 ridx = ipw2100_csr_get32(sc, IPW2100_CSR_TX_READ_INDEX);
2850                 len = RING_FLEN(RING_FORWARD(sc->sc_tx_cur,
2851                     sc->sc_tx_free, IPW2100_NUM_TXBD),
2852                     ridx, IPW2100_NUM_TXBD);
2853                 sc->sc_tx_free += len;
2854                 IPW2100_DBG(IPW2100_DBG_INT, (sc->sc_dip, CE_CONT,
2855                     "ipw2100_intr(): len=%d\n", len));
2856                 mutex_exit(&sc->sc_tx_lock);
2857 
2858                 mutex_enter(&sc->sc_resched_lock);
2859                 if (len > 1 && (sc->sc_flags & IPW2100_FLAG_TX_SCHED)) {
2860                         sc->sc_flags &= ~IPW2100_FLAG_TX_SCHED;
2861                         mac_tx_update(ic->ic_mach);
2862                 }
2863                 mutex_exit(&sc->sc_resched_lock);
2864         }
2865 
2866 enable_interrupt:
2867         /*
2868          * enable all interrupts
2869          */
2870         ipw2100_csr_put32(sc, IPW2100_CSR_INTR_MASK, IPW2100_INTR_MASK_ALL);
2871 
2872         return (DDI_INTR_CLAIMED);
2873 }
2874 
2875 
2876 /*
2877  * Module Loading Data & Entry Points
2878  */
2879 DDI_DEFINE_STREAM_OPS(ipw2100_devops, nulldev, nulldev, ipw2100_attach,
2880     ipw2100_detach, nodev, NULL, D_MP, NULL, ipw2100_quiesce);
2881 
2882 static struct modldrv ipw2100_modldrv = {
2883         &mod_driverops,
2884         ipw2100_ident,
2885         &ipw2100_devops
2886 };
2887 
2888 static struct modlinkage ipw2100_modlinkage = {
2889         MODREV_1,
2890         &ipw2100_modldrv,
2891         NULL
2892 };
2893 
2894 int
2895 _init(void)
2896 {
2897         int     status;
2898 
2899         status = ddi_soft_state_init(&ipw2100_ssp,
2900             sizeof (struct ipw2100_softc), 1);
2901         if (status != DDI_SUCCESS)
2902                 return (status);
2903 
2904         mac_init_ops(&ipw2100_devops, IPW2100_DRV_NAME);
2905         status = mod_install(&ipw2100_modlinkage);
2906         if (status != DDI_SUCCESS) {
2907                 mac_fini_ops(&ipw2100_devops);
2908                 ddi_soft_state_fini(&ipw2100_ssp);
2909         }
2910 
2911         return (status);
2912 }
2913 
2914 int
2915 _fini(void)
2916 {
2917         int status;
2918 
2919         status = mod_remove(&ipw2100_modlinkage);
2920         if (status == DDI_SUCCESS) {
2921                 mac_fini_ops(&ipw2100_devops);
2922                 ddi_soft_state_fini(&ipw2100_ssp);
2923         }
2924 
2925         return (status);
2926 }
2927 
2928 int
2929 _info(struct modinfo *mip)
2930 {
2931         return (mod_info(&ipw2100_modlinkage, mip));
2932 }