Logo Search packages:      
Sourcecode: linux-fsl-imx51 version File versions  Download package

isl_ioctl.c

/*
 *  Copyright (C) 2002 Intersil Americas Inc.
 *            (C) 2003,2004 Aurelien Alleaume <slts@free.fr>
 *            (C) 2003 Herbert Valerio Riedel <hvr@gnu.org>
 *            (C) 2003 Luis R. Rodriguez <mcgrof@ruslug.rutgers.edu>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 */

#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/if_arp.h>
#include <linux/pci.h>

#include <asm/uaccess.h>

#include "prismcompat.h"
#include "isl_ioctl.h"
#include "islpci_mgt.h"
#include "isl_oid.h"          /* additional types and defs for isl38xx fw */
#include "oid_mgt.h"

#include <net/iw_handler.h>   /* New driver API */

#define KEY_SIZE_WEP104 13    /* 104/128-bit WEP keys */
#define KEY_SIZE_WEP40  5     /* 40/64-bit WEP keys */
/* KEY_SIZE_TKIP should match isl_oid.h, struct obj_key.key[] size */
#define KEY_SIZE_TKIP   32    /* TKIP keys */

static void prism54_wpa_bss_ie_add(islpci_private *priv, u8 *bssid,
                        u8 *wpa_ie, size_t wpa_ie_len);
static size_t prism54_wpa_bss_ie_get(islpci_private *priv, u8 *bssid, u8 *wpa_ie);
static int prism54_set_wpa(struct net_device *, struct iw_request_info *,
                        __u32 *, char *);

/* In 500 kbps */
static const unsigned char scan_rate_list[] = { 2, 4, 11, 22,
                                    12, 18, 24, 36,
                                    48, 72, 96, 108 };

/**
 * prism54_mib_mode_helper - MIB change mode helper function
 * @mib: the &struct islpci_mib object to modify
 * @iw_mode: new mode (%IW_MODE_*)
 *
 *  This is a helper function, hence it does not lock. Make sure
 *  caller deals with locking *if* necessary. This function sets the
 *  mode-dependent mib values and does the mapping of the Linux
 *  Wireless API modes to Device firmware modes. It also checks for
 *  correct valid Linux wireless modes.
 */
static int
prism54_mib_mode_helper(islpci_private *priv, u32 iw_mode)
{
      u32 config = INL_CONFIG_MANUALRUN;
      u32 mode, bsstype;

      /* For now, just catch early the Repeater and Secondary modes here */
      if (iw_mode == IW_MODE_REPEAT || iw_mode == IW_MODE_SECOND) {
            printk(KERN_DEBUG
                   "%s(): Sorry, Repeater mode and Secondary mode "
                   "are not yet supported by this driver.\n", __func__);
            return -EINVAL;
      }

      priv->iw_mode = iw_mode;

      switch (iw_mode) {
      case IW_MODE_AUTO:
            mode = INL_MODE_CLIENT;
            bsstype = DOT11_BSSTYPE_ANY;
            break;
      case IW_MODE_ADHOC:
            mode = INL_MODE_CLIENT;
            bsstype = DOT11_BSSTYPE_IBSS;
            break;
      case IW_MODE_INFRA:
            mode = INL_MODE_CLIENT;
            bsstype = DOT11_BSSTYPE_INFRA;
            break;
      case IW_MODE_MASTER:
            mode = INL_MODE_AP;
            bsstype = DOT11_BSSTYPE_INFRA;
            break;
      case IW_MODE_MONITOR:
            mode = INL_MODE_PROMISCUOUS;
            bsstype = DOT11_BSSTYPE_ANY;
            config |= INL_CONFIG_RXANNEX;
            break;
      default:
            return -EINVAL;
      }

      if (init_wds)
            config |= INL_CONFIG_WDS;
      mgt_set(priv, DOT11_OID_BSSTYPE, &bsstype);
      mgt_set(priv, OID_INL_CONFIG, &config);
      mgt_set(priv, OID_INL_MODE, &mode);

      return 0;
}

/**
 * prism54_mib_init - fill MIB cache with defaults
 *
 *  this function initializes the struct given as @mib with defaults,
 *  of which many are retrieved from the global module parameter
 *  variables.
 */

void
prism54_mib_init(islpci_private *priv)
{
      u32 channel, authen, wep, filter, dot1x, mlme, conformance, power, mode;
      struct obj_buffer psm_buffer = {
            .size = PSM_BUFFER_SIZE,
            .addr = priv->device_psm_buffer
      };

      channel = CARD_DEFAULT_CHANNEL;
      authen = CARD_DEFAULT_AUTHEN;
      wep = CARD_DEFAULT_WEP;
      filter = CARD_DEFAULT_FILTER; /* (0) Do not filter un-encrypted data */
      dot1x = CARD_DEFAULT_DOT1X;
      mlme = CARD_DEFAULT_MLME_MODE;
      conformance = CARD_DEFAULT_CONFORMANCE;
      power = 127;
      mode = CARD_DEFAULT_IW_MODE;

      mgt_set(priv, DOT11_OID_CHANNEL, &channel);
      mgt_set(priv, DOT11_OID_AUTHENABLE, &authen);
      mgt_set(priv, DOT11_OID_PRIVACYINVOKED, &wep);
      mgt_set(priv, DOT11_OID_PSMBUFFER, &psm_buffer);
      mgt_set(priv, DOT11_OID_EXUNENCRYPTED, &filter);
      mgt_set(priv, DOT11_OID_DOT1XENABLE, &dot1x);
      mgt_set(priv, DOT11_OID_MLMEAUTOLEVEL, &mlme);
      mgt_set(priv, OID_INL_DOT11D_CONFORMANCE, &conformance);
      mgt_set(priv, OID_INL_OUTPUTPOWER, &power);

      /* This sets all of the mode-dependent values */
      prism54_mib_mode_helper(priv, mode);
}

/* this will be executed outside of atomic context thanks to
 * schedule_work(), thus we can as well use sleeping semaphore
 * locking */
void
prism54_update_stats(struct work_struct *work)
{
      islpci_private *priv = container_of(work, islpci_private, stats_work);
      char *data;
      int j;
      struct obj_bss bss, *bss2;
      union oid_res_t r;

      mutex_lock(&priv->stats_lock);

/* Noise floor.
 * I'm not sure if the unit is dBm.
 * Note : If we are not connected, this value seems to be irrelevant. */

      mgt_get_request(priv, DOT11_OID_NOISEFLOOR, 0, NULL, &r);
      priv->local_iwstatistics.qual.noise = r.u;

/* Get the rssi of the link. To do this we need to retrieve a bss. */

      /* First get the MAC address of the AP we are associated with. */
      mgt_get_request(priv, DOT11_OID_BSSID, 0, NULL, &r);
      data = r.ptr;

      /* copy this MAC to the bss */
      memcpy(bss.address, data, 6);
      kfree(data);

      /* now ask for the corresponding bss */
      j = mgt_get_request(priv, DOT11_OID_BSSFIND, 0, (void *) &bss, &r);
      bss2 = r.ptr;
      /* report the rssi and use it to calculate
       *  link quality through a signal-noise
       *  ratio */
      priv->local_iwstatistics.qual.level = bss2->rssi;
      priv->local_iwstatistics.qual.qual =
          bss2->rssi - priv->iwstatistics.qual.noise;

      kfree(bss2);

      /* report that the stats are new */
      priv->local_iwstatistics.qual.updated = 0x7;

/* Rx : unable to decrypt the MPDU */
      mgt_get_request(priv, DOT11_OID_PRIVRXFAILED, 0, NULL, &r);
      priv->local_iwstatistics.discard.code = r.u;

/* Tx : Max MAC retries num reached */
      mgt_get_request(priv, DOT11_OID_MPDUTXFAILED, 0, NULL, &r);
      priv->local_iwstatistics.discard.retries = r.u;

      mutex_unlock(&priv->stats_lock);

      return;
}

struct iw_statistics *
prism54_get_wireless_stats(struct net_device *ndev)
{
      islpci_private *priv = netdev_priv(ndev);

      /* If the stats are being updated return old data */
      if (mutex_trylock(&priv->stats_lock)) {
            memcpy(&priv->iwstatistics, &priv->local_iwstatistics,
                   sizeof (struct iw_statistics));
            /* They won't be marked updated for the next time */
            priv->local_iwstatistics.qual.updated = 0;
            mutex_unlock(&priv->stats_lock);
      } else
            priv->iwstatistics.qual.updated = 0;

      /* Update our wireless stats, but do not schedule to often
       * (max 1 HZ) */
      if ((priv->stats_timestamp == 0) ||
          time_after(jiffies, priv->stats_timestamp + 1 * HZ)) {
            schedule_work(&priv->stats_work);
            priv->stats_timestamp = jiffies;
      }

      return &priv->iwstatistics;
}

static int
prism54_commit(struct net_device *ndev, struct iw_request_info *info,
             char *cwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);

      /* simply re-set the last set SSID, this should commit most stuff */

      /* Commit in Monitor mode is not necessary, also setting essid
       * in Monitor mode does not make sense and isn't allowed for this
       * device's firmware */
      if (priv->iw_mode != IW_MODE_MONITOR)
            return mgt_set_request(priv, DOT11_OID_SSID, 0, NULL);
      return 0;
}

static int
prism54_get_name(struct net_device *ndev, struct iw_request_info *info,
             char *cwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      char *capabilities;
      union oid_res_t r;
      int rvalue;

      if (islpci_get_state(priv) < PRV_STATE_INIT) {
            strncpy(cwrq, "NOT READY!", IFNAMSIZ);
            return 0;
      }
      rvalue = mgt_get_request(priv, OID_INL_PHYCAPABILITIES, 0, NULL, &r);

      switch (r.u) {
      case INL_PHYCAP_5000MHZ:
            capabilities = "IEEE 802.11a/b/g";
            break;
      case INL_PHYCAP_FAA:
            capabilities = "IEEE 802.11b/g - FAA Support";
            break;
      case INL_PHYCAP_2400MHZ:
      default:
            capabilities = "IEEE 802.11b/g";    /* Default */
            break;
      }
      strncpy(cwrq, capabilities, IFNAMSIZ);
      return rvalue;
}

static int
prism54_set_freq(struct net_device *ndev, struct iw_request_info *info,
             struct iw_freq *fwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      int rvalue;
      u32 c;

      if (fwrq->m < 1000)
            /* we have a channel number */
            c = fwrq->m;
      else
            c = (fwrq->e == 1) ? channel_of_freq(fwrq->m / 100000) : 0;

      rvalue = c ? mgt_set_request(priv, DOT11_OID_CHANNEL, 0, &c) : -EINVAL;

      /* Call commit handler */
      return (rvalue ? rvalue : -EINPROGRESS);
}

static int
prism54_get_freq(struct net_device *ndev, struct iw_request_info *info,
             struct iw_freq *fwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      union oid_res_t r;
      int rvalue;

      rvalue = mgt_get_request(priv, DOT11_OID_CHANNEL, 0, NULL, &r);
      fwrq->i = r.u;
      rvalue |= mgt_get_request(priv, DOT11_OID_FREQUENCY, 0, NULL, &r);
      fwrq->m = r.u;
      fwrq->e = 3;

      return rvalue;
}

static int
prism54_set_mode(struct net_device *ndev, struct iw_request_info *info,
             __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      u32 mlmeautolevel = CARD_DEFAULT_MLME_MODE;

      /* Let's see if the user passed a valid Linux Wireless mode */
      if (*uwrq > IW_MODE_MONITOR || *uwrq < IW_MODE_AUTO) {
            printk(KERN_DEBUG
                   "%s: %s() You passed a non-valid init_mode.\n",
                   priv->ndev->name, __func__);
            return -EINVAL;
      }

      down_write(&priv->mib_sem);

      if (prism54_mib_mode_helper(priv, *uwrq)) {
            up_write(&priv->mib_sem);
            return -EOPNOTSUPP;
      }

      /* the ACL code needs an intermediate mlmeautolevel. The wpa stuff an
       * extended one.
       */
      if ((*uwrq == IW_MODE_MASTER) && (priv->acl.policy != MAC_POLICY_OPEN))
            mlmeautolevel = DOT11_MLME_INTERMEDIATE;
      if (priv->wpa)
            mlmeautolevel = DOT11_MLME_EXTENDED;

      mgt_set(priv, DOT11_OID_MLMEAUTOLEVEL, &mlmeautolevel);

      if (mgt_commit(priv)) {
            up_write(&priv->mib_sem);
            return -EIO;
      }
      priv->ndev->type = (priv->iw_mode == IW_MODE_MONITOR)
          ? priv->monitor_type : ARPHRD_ETHER;
      up_write(&priv->mib_sem);

      return 0;
}

/* Use mib cache */
static int
prism54_get_mode(struct net_device *ndev, struct iw_request_info *info,
             __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);

      BUG_ON((priv->iw_mode < IW_MODE_AUTO) || (priv->iw_mode >
                                      IW_MODE_MONITOR));
      *uwrq = priv->iw_mode;

      return 0;
}

/* we use DOT11_OID_EDTHRESHOLD. From what I guess the card will not try to
 * emit data if (sensitivity > rssi - noise) (in dBm).
 * prism54_set_sens does not seem to work.
 */

static int
prism54_set_sens(struct net_device *ndev, struct iw_request_info *info,
             struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      u32 sens;

      /* by default  the card sets this to 20. */
      sens = vwrq->disabled ? 20 : vwrq->value;

      return mgt_set_request(priv, DOT11_OID_EDTHRESHOLD, 0, &sens);
}

static int
prism54_get_sens(struct net_device *ndev, struct iw_request_info *info,
             struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      union oid_res_t r;
      int rvalue;

      rvalue = mgt_get_request(priv, DOT11_OID_EDTHRESHOLD, 0, NULL, &r);

      vwrq->value = r.u;
      vwrq->disabled = (vwrq->value == 0);
      vwrq->fixed = 1;

      return rvalue;
}

static int
prism54_get_range(struct net_device *ndev, struct iw_request_info *info,
              struct iw_point *dwrq, char *extra)
{
      struct iw_range *range = (struct iw_range *) extra;
      islpci_private *priv = netdev_priv(ndev);
      u8 *data;
      int i, m, rvalue;
      struct obj_frequencies *freq;
      union oid_res_t r;

      memset(range, 0, sizeof (struct iw_range));
      dwrq->length = sizeof (struct iw_range);

      /* set the wireless extension version number */
      range->we_version_source = SUPPORTED_WIRELESS_EXT;
      range->we_version_compiled = WIRELESS_EXT;

      /* Now the encoding capabilities */
      range->num_encoding_sizes = 3;
      /* 64(40) bits WEP */
      range->encoding_size[0] = 5;
      /* 128(104) bits WEP */
      range->encoding_size[1] = 13;
      /* 256 bits for WPA-PSK */
      range->encoding_size[2] = 32;
      /* 4 keys are allowed */
      range->max_encoding_tokens = 4;

      /* we don't know the quality range... */
      range->max_qual.level = 0;
      range->max_qual.noise = 0;
      range->max_qual.qual = 0;
      /* these value describe an average quality. Needs more tweaking... */
      range->avg_qual.level = -80;  /* -80 dBm */
      range->avg_qual.noise = 0;    /* don't know what to put here */
      range->avg_qual.qual = 0;

      range->sensitivity = 200;

      /* retry limit capabilities */
      range->retry_capa = IW_RETRY_LIMIT | IW_RETRY_LIFETIME;
      range->retry_flags = IW_RETRY_LIMIT;
      range->r_time_flags = IW_RETRY_LIFETIME;

      /* I don't know the range. Put stupid things here */
      range->min_retry = 1;
      range->max_retry = 65535;
      range->min_r_time = 1024;
      range->max_r_time = 65535 * 1024;

      /* txpower is supported in dBm's */
      range->txpower_capa = IW_TXPOW_DBM;

      /* Event capability (kernel + driver) */
      range->event_capa[0] = (IW_EVENT_CAPA_K_0 |
      IW_EVENT_CAPA_MASK(SIOCGIWTHRSPY) |
      IW_EVENT_CAPA_MASK(SIOCGIWAP));
      range->event_capa[1] = IW_EVENT_CAPA_K_1;
      range->event_capa[4] = IW_EVENT_CAPA_MASK(IWEVCUSTOM);

      range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
            IW_ENC_CAPA_CIPHER_TKIP;

      if (islpci_get_state(priv) < PRV_STATE_INIT)
            return 0;

      /* Request the device for the supported frequencies
       * not really relevant since some devices will report the 5 GHz band
       * frequencies even if they don't support them.
       */
      rvalue =
          mgt_get_request(priv, DOT11_OID_SUPPORTEDFREQUENCIES, 0, NULL, &r);
      freq = r.ptr;

      range->num_channels = freq->nr;
      range->num_frequency = freq->nr;

      m = min(IW_MAX_FREQUENCIES, (int) freq->nr);
      for (i = 0; i < m; i++) {
            range->freq[i].m = freq->mhz[i];
            range->freq[i].e = 6;
            range->freq[i].i = channel_of_freq(freq->mhz[i]);
      }
      kfree(freq);

      rvalue |= mgt_get_request(priv, DOT11_OID_SUPPORTEDRATES, 0, NULL, &r);
      data = r.ptr;

      /* We got an array of char. It is NULL terminated. */
      i = 0;
      while ((i < IW_MAX_BITRATES) && (*data != 0)) {
            /*       the result must be in bps. The card gives us 500Kbps */
            range->bitrate[i] = *data * 500000;
            i++;
            data++;
      }
      range->num_bitrates = i;
      kfree(r.ptr);

      return rvalue;
}

/* Set AP address*/

static int
prism54_set_wap(struct net_device *ndev, struct iw_request_info *info,
            struct sockaddr *awrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      char bssid[6];
      int rvalue;

      if (awrq->sa_family != ARPHRD_ETHER)
            return -EINVAL;

      /* prepare the structure for the set object */
      memcpy(&bssid[0], awrq->sa_data, 6);

      /* set the bssid -- does this make sense when in AP mode? */
      rvalue = mgt_set_request(priv, DOT11_OID_BSSID, 0, &bssid);

      return (rvalue ? rvalue : -EINPROGRESS);  /* Call commit handler */
}

/* get AP address*/

static int
prism54_get_wap(struct net_device *ndev, struct iw_request_info *info,
            struct sockaddr *awrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      union oid_res_t r;
      int rvalue;

      rvalue = mgt_get_request(priv, DOT11_OID_BSSID, 0, NULL, &r);
      memcpy(awrq->sa_data, r.ptr, 6);
      awrq->sa_family = ARPHRD_ETHER;
      kfree(r.ptr);

      return rvalue;
}

static int
prism54_set_scan(struct net_device *dev, struct iw_request_info *info,
             struct iw_param *vwrq, char *extra)
{
      /* hehe the device does this automagicaly */
      return 0;
}

/* a little helper that will translate our data into a card independent
 * format that the Wireless Tools will understand. This was inspired by
 * the "Aironet driver for 4500 and 4800 series cards" (GPL)
 */

static char *
prism54_translate_bss(struct net_device *ndev, struct iw_request_info *info,
                  char *current_ev, char *end_buf, struct obj_bss *bss,
                  char noise)
{
      struct iw_event iwe;    /* Temporary buffer */
      short cap;
      islpci_private *priv = netdev_priv(ndev);
      u8 wpa_ie[MAX_WPA_IE_LEN];
      size_t wpa_ie_len;

      /* The first entry must be the MAC address */
      memcpy(iwe.u.ap_addr.sa_data, bss->address, 6);
      iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
      iwe.cmd = SIOCGIWAP;
      current_ev = iwe_stream_add_event(info, current_ev, end_buf,
                                &iwe, IW_EV_ADDR_LEN);

      /* The following entries will be displayed in the same order we give them */

      /* The ESSID. */
      iwe.u.data.length = bss->ssid.length;
      iwe.u.data.flags = 1;
      iwe.cmd = SIOCGIWESSID;
      current_ev = iwe_stream_add_point(info, current_ev, end_buf,
                                &iwe, bss->ssid.octets);

      /* Capabilities */
#define CAP_ESS 0x01
#define CAP_IBSS 0x02
#define CAP_CRYPT 0x10

      /* Mode */
      cap = bss->capinfo;
      iwe.u.mode = 0;
      if (cap & CAP_ESS)
            iwe.u.mode = IW_MODE_MASTER;
      else if (cap & CAP_IBSS)
            iwe.u.mode = IW_MODE_ADHOC;
      iwe.cmd = SIOCGIWMODE;
      if (iwe.u.mode)
            current_ev = iwe_stream_add_event(info, current_ev, end_buf,
                                      &iwe, IW_EV_UINT_LEN);

      /* Encryption capability */
      if (cap & CAP_CRYPT)
            iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
      else
            iwe.u.data.flags = IW_ENCODE_DISABLED;
      iwe.u.data.length = 0;
      iwe.cmd = SIOCGIWENCODE;
      current_ev = iwe_stream_add_point(info, current_ev, end_buf,
                                &iwe, NULL);

      /* Add frequency. (short) bss->channel is the frequency in MHz */
      iwe.u.freq.m = bss->channel;
      iwe.u.freq.e = 6;
      iwe.cmd = SIOCGIWFREQ;
      current_ev = iwe_stream_add_event(info, current_ev, end_buf,
                                &iwe, IW_EV_FREQ_LEN);

      /* Add quality statistics */
      iwe.u.qual.level = bss->rssi;
      iwe.u.qual.noise = noise;
      /* do a simple SNR for quality */
      iwe.u.qual.qual = bss->rssi - noise;
      iwe.cmd = IWEVQUAL;
      current_ev = iwe_stream_add_event(info, current_ev, end_buf,
                                &iwe, IW_EV_QUAL_LEN);

      /* Add WPA/RSN Information Element, if any */
      wpa_ie_len = prism54_wpa_bss_ie_get(priv, bss->address, wpa_ie);
      if (wpa_ie_len > 0) {
            iwe.cmd = IWEVGENIE;
            iwe.u.data.length = min(wpa_ie_len, (size_t)MAX_WPA_IE_LEN);
            current_ev = iwe_stream_add_point(info, current_ev, end_buf,
                                      &iwe, wpa_ie);
      }
      /* Do the bitrates */
      {
            char *current_val = current_ev + iwe_stream_lcp_len(info);
            int i;
            int mask;

            iwe.cmd = SIOCGIWRATE;
            /* Those two flags are ignored... */
            iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;

            /* Parse the bitmask */
            mask = 0x1;
            for(i = 0; i < sizeof(scan_rate_list); i++) {
                  if(bss->rates & mask) {
                        iwe.u.bitrate.value = (scan_rate_list[i] * 500000);
                        current_val = iwe_stream_add_value(
                              info, current_ev, current_val,
                              end_buf, &iwe, IW_EV_PARAM_LEN);
                  }
                  mask <<= 1;
            }
            /* Check if we added any event */
            if ((current_val - current_ev) > iwe_stream_lcp_len(info))
                  current_ev = current_val;
      }

      return current_ev;
}

static int
prism54_get_scan(struct net_device *ndev, struct iw_request_info *info,
             struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      int i, rvalue;
      struct obj_bsslist *bsslist;
      u32 noise = 0;
      char *current_ev = extra;
      union oid_res_t r;

      if (islpci_get_state(priv) < PRV_STATE_INIT) {
            /* device is not ready, fail gently */
            dwrq->length = 0;
            return 0;
      }

      /* first get the noise value. We will use it to report the link quality */
      rvalue = mgt_get_request(priv, DOT11_OID_NOISEFLOOR, 0, NULL, &r);
      noise = r.u;

      /* Ask the device for a list of known bss.
      * The old API, using SIOCGIWAPLIST, had a hard limit of IW_MAX_AP=64.
      * The new API, using SIOCGIWSCAN, is only limited by the buffer size.
      * WE-14->WE-16, the buffer is limited to IW_SCAN_MAX_DATA bytes.
      * Starting with WE-17, the buffer can be as big as needed.
      * But the device won't repport anything if you change the value
      * of IWMAX_BSS=24. */

      rvalue |= mgt_get_request(priv, DOT11_OID_BSSLIST, 0, NULL, &r);
      bsslist = r.ptr;

      /* ok now, scan the list and translate its info */
      for (i = 0; i < (int) bsslist->nr; i++) {
            current_ev = prism54_translate_bss(ndev, info, current_ev,
                                       extra + dwrq->length,
                                       &(bsslist->bsslist[i]),
                                       noise);

            /* Check if there is space for one more entry */
            if((extra + dwrq->length - current_ev) <= IW_EV_ADDR_LEN) {
                  /* Ask user space to try again with a bigger buffer */
                  rvalue = -E2BIG;
                  break;
            }
      }

      kfree(bsslist);
      dwrq->length = (current_ev - extra);
      dwrq->flags = 0;  /* todo */

      return rvalue;
}

static int
prism54_set_essid(struct net_device *ndev, struct iw_request_info *info,
              struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct obj_ssid essid;

      memset(essid.octets, 0, 33);

      /* Check if we were asked for `any' */
      if (dwrq->flags && dwrq->length) {
            if (dwrq->length > 32)
                  return -E2BIG;
            essid.length = dwrq->length;
            memcpy(essid.octets, extra, dwrq->length);
      } else
            essid.length = 0;

      if (priv->iw_mode != IW_MODE_MONITOR)
            return mgt_set_request(priv, DOT11_OID_SSID, 0, &essid);

      /* If in monitor mode, just save to mib */
      mgt_set(priv, DOT11_OID_SSID, &essid);
      return 0;

}

static int
prism54_get_essid(struct net_device *ndev, struct iw_request_info *info,
              struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct obj_ssid *essid;
      union oid_res_t r;
      int rvalue;

      rvalue = mgt_get_request(priv, DOT11_OID_SSID, 0, NULL, &r);
      essid = r.ptr;

      if (essid->length) {
            dwrq->flags = 1;  /* set ESSID to ON for Wireless Extensions */
            /* if it is too big, trunk it */
            dwrq->length = min((u8)IW_ESSID_MAX_SIZE, essid->length);
      } else {
            dwrq->flags = 0;
            dwrq->length = 0;
      }
      essid->octets[essid->length] = '\0';
      memcpy(extra, essid->octets, dwrq->length);
      kfree(essid);

      return rvalue;
}

/* Provides no functionality, just completes the ioctl. In essence this is a
 * just a cosmetic ioctl.
 */
static int
prism54_set_nick(struct net_device *ndev, struct iw_request_info *info,
             struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);

      if (dwrq->length > IW_ESSID_MAX_SIZE)
            return -E2BIG;

      down_write(&priv->mib_sem);
      memset(priv->nickname, 0, sizeof (priv->nickname));
      memcpy(priv->nickname, extra, dwrq->length);
      up_write(&priv->mib_sem);

      return 0;
}

static int
prism54_get_nick(struct net_device *ndev, struct iw_request_info *info,
             struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);

      dwrq->length = 0;

      down_read(&priv->mib_sem);
      dwrq->length = strlen(priv->nickname);
      memcpy(extra, priv->nickname, dwrq->length);
      up_read(&priv->mib_sem);

      return 0;
}

/* Set the allowed Bitrates */

static int
prism54_set_rate(struct net_device *ndev,
             struct iw_request_info *info,
             struct iw_param *vwrq, char *extra)
{

      islpci_private *priv = netdev_priv(ndev);
      u32 rate, profile;
      char *data;
      int ret, i;
      union oid_res_t r;

      if (vwrq->value == -1) {
            /* auto mode. No limit. */
            profile = 1;
            return mgt_set_request(priv, DOT11_OID_PROFILES, 0, &profile);
      }

      ret = mgt_get_request(priv, DOT11_OID_SUPPORTEDRATES, 0, NULL, &r);
      if (ret) {
            kfree(r.ptr);
            return ret;
      }

      rate = (u32) (vwrq->value / 500000);
      data = r.ptr;
      i = 0;

      while (data[i]) {
            if (rate && (data[i] == rate)) {
                  break;
            }
            if (vwrq->value == i) {
                  break;
            }
            data[i] |= 0x80;
            i++;
      }

      if (!data[i]) {
            kfree(r.ptr);
            return -EINVAL;
      }

      data[i] |= 0x80;
      data[i + 1] = 0;

      /* Now, check if we want a fixed or auto value */
      if (vwrq->fixed) {
            data[0] = data[i];
            data[1] = 0;
      }

/*
      i = 0;
      printk("prism54 rate: ");
      while(data[i]) {
            printk("%u ", data[i]);
            i++;
      }
      printk("0\n");
*/
      profile = -1;
      ret = mgt_set_request(priv, DOT11_OID_PROFILES, 0, &profile);
      ret |= mgt_set_request(priv, DOT11_OID_EXTENDEDRATES, 0, data);
      ret |= mgt_set_request(priv, DOT11_OID_RATES, 0, data);

      kfree(r.ptr);

      return ret;
}

/* Get the current bit rate */
static int
prism54_get_rate(struct net_device *ndev,
             struct iw_request_info *info,
             struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      int rvalue;
      char *data;
      union oid_res_t r;

      /* Get the current bit rate */
      if ((rvalue = mgt_get_request(priv, GEN_OID_LINKSTATE, 0, NULL, &r)))
            return rvalue;
      vwrq->value = r.u * 500000;

      /* request the device for the enabled rates */
      rvalue = mgt_get_request(priv, DOT11_OID_RATES, 0, NULL, &r);
      if (rvalue) {
            kfree(r.ptr);
            return rvalue;
      }
      data = r.ptr;
      vwrq->fixed = (data[0] != 0) && (data[1] == 0);
      kfree(r.ptr);

      return 0;
}

static int
prism54_set_rts(struct net_device *ndev, struct iw_request_info *info,
            struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);

      return mgt_set_request(priv, DOT11_OID_RTSTHRESH, 0, &vwrq->value);
}

static int
prism54_get_rts(struct net_device *ndev, struct iw_request_info *info,
            struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      union oid_res_t r;
      int rvalue;

      /* get the rts threshold */
      rvalue = mgt_get_request(priv, DOT11_OID_RTSTHRESH, 0, NULL, &r);
      vwrq->value = r.u;

      return rvalue;
}

static int
prism54_set_frag(struct net_device *ndev, struct iw_request_info *info,
             struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);

      return mgt_set_request(priv, DOT11_OID_FRAGTHRESH, 0, &vwrq->value);
}

static int
prism54_get_frag(struct net_device *ndev, struct iw_request_info *info,
             struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      union oid_res_t r;
      int rvalue;

      rvalue = mgt_get_request(priv, DOT11_OID_FRAGTHRESH, 0, NULL, &r);
      vwrq->value = r.u;

      return rvalue;
}

/* Here we have (min,max) = max retries for (small frames, big frames). Where
 * big frame <=>  bigger than the rts threshold
 * small frame <=>  smaller than the rts threshold
 * This is not really the behavior expected by the wireless tool but it seems
 * to be a common behavior in other drivers.
 */

static int
prism54_set_retry(struct net_device *ndev, struct iw_request_info *info,
              struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      u32 slimit = 0, llimit = 0;   /* short and long limit */
      u32 lifetime = 0;
      int rvalue = 0;

      if (vwrq->disabled)
            /* we cannot disable this feature */
            return -EINVAL;

      if (vwrq->flags & IW_RETRY_LIMIT) {
            if (vwrq->flags & IW_RETRY_SHORT)
                  slimit = vwrq->value;
            else if (vwrq->flags & IW_RETRY_LONG)
                  llimit = vwrq->value;
            else {
                  /* we are asked to set both */
                  slimit = vwrq->value;
                  llimit = vwrq->value;
            }
      }
      if (vwrq->flags & IW_RETRY_LIFETIME)
            /* Wireless tools use us unit while the device uses 1024 us unit */
            lifetime = vwrq->value / 1024;

      /* now set what is requested */
      if (slimit)
            rvalue =
                mgt_set_request(priv, DOT11_OID_SHORTRETRIES, 0, &slimit);
      if (llimit)
            rvalue |=
                mgt_set_request(priv, DOT11_OID_LONGRETRIES, 0, &llimit);
      if (lifetime)
            rvalue |=
                mgt_set_request(priv, DOT11_OID_MAXTXLIFETIME, 0,
                            &lifetime);
      return rvalue;
}

static int
prism54_get_retry(struct net_device *ndev, struct iw_request_info *info,
              struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      union oid_res_t r;
      int rvalue = 0;
      vwrq->disabled = 0;     /* It cannot be disabled */

      if ((vwrq->flags & IW_RETRY_TYPE) == IW_RETRY_LIFETIME) {
            /* we are asked for the life time */
            rvalue =
                mgt_get_request(priv, DOT11_OID_MAXTXLIFETIME, 0, NULL, &r);
            vwrq->value = r.u * 1024;
            vwrq->flags = IW_RETRY_LIFETIME;
      } else if ((vwrq->flags & IW_RETRY_LONG)) {
            /* we are asked for the long retry limit */
            rvalue |=
                mgt_get_request(priv, DOT11_OID_LONGRETRIES, 0, NULL, &r);
            vwrq->value = r.u;
            vwrq->flags = IW_RETRY_LIMIT | IW_RETRY_LONG;
      } else {
            /* default. get the  short retry limit */
            rvalue |=
                mgt_get_request(priv, DOT11_OID_SHORTRETRIES, 0, NULL, &r);
            vwrq->value = r.u;
            vwrq->flags = IW_RETRY_LIMIT | IW_RETRY_SHORT;
      }

      return rvalue;
}

static int
prism54_set_encode(struct net_device *ndev, struct iw_request_info *info,
               struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      int rvalue = 0, force = 0;
      int authen = DOT11_AUTH_OS, invoke = 0, exunencrypt = 0;
      union oid_res_t r;

      /* with the new API, it's impossible to get a NULL pointer.
       * New version of iwconfig set the IW_ENCODE_NOKEY flag
       * when no key is given, but older versions don't. */

      if (dwrq->length > 0) {
            /* we have a key to set */
            int index = (dwrq->flags & IW_ENCODE_INDEX) - 1;
            int current_index;
            struct obj_key key = { DOT11_PRIV_WEP, 0, "" };

            /* get the current key index */
            rvalue = mgt_get_request(priv, DOT11_OID_DEFKEYID, 0, NULL, &r);
            current_index = r.u;
            /* Verify that the key is not marked as invalid */
            if (!(dwrq->flags & IW_ENCODE_NOKEY)) {
                  if (dwrq->length > KEY_SIZE_TKIP) {
                        /* User-provided key data too big */
                        return -EINVAL;
                  }
                  if (dwrq->length > KEY_SIZE_WEP104) {
                        /* WPA-PSK TKIP */
                        key.type = DOT11_PRIV_TKIP;
                        key.length = KEY_SIZE_TKIP;
                  } else if (dwrq->length > KEY_SIZE_WEP40) {
                        /* WEP 104/128 */
                        key.length = KEY_SIZE_WEP104;
                  } else {
                        /* WEP 40/64 */
                        key.length = KEY_SIZE_WEP40;
                  }
                  memset(key.key, 0, sizeof (key.key));
                  memcpy(key.key, extra, dwrq->length);

                  if ((index < 0) || (index > 3))
                        /* no index provided use the current one */
                        index = current_index;

                  /* now send the key to the card  */
                  rvalue |=
                      mgt_set_request(priv, DOT11_OID_DEFKEYX, index,
                                  &key);
            }
            /*
             * If a valid key is set, encryption should be enabled
             * (user may turn it off later).
             * This is also how "iwconfig ethX key on" works
             */
            if ((index == current_index) && (key.length > 0))
                  force = 1;
      } else {
            int index = (dwrq->flags & IW_ENCODE_INDEX) - 1;
            if ((index >= 0) && (index <= 3)) {
                  /* we want to set the key index */
                  rvalue |=
                      mgt_set_request(priv, DOT11_OID_DEFKEYID, 0,
                                  &index);
            } else {
                  if (!(dwrq->flags & IW_ENCODE_MODE)) {
                        /* we cannot do anything. Complain. */
                        return -EINVAL;
                  }
            }
      }
      /* now read the flags */
      if (dwrq->flags & IW_ENCODE_DISABLED) {
            /* Encoding disabled,
             * authen = DOT11_AUTH_OS;
             * invoke = 0;
             * exunencrypt = 0; */
      }
      if (dwrq->flags & IW_ENCODE_OPEN)
            /* Encode but accept non-encoded packets. No auth */
            invoke = 1;
      if ((dwrq->flags & IW_ENCODE_RESTRICTED) || force) {
            /* Refuse non-encoded packets. Auth */
            authen = DOT11_AUTH_BOTH;
            invoke = 1;
            exunencrypt = 1;
      }
      /* do the change if requested  */
      if ((dwrq->flags & IW_ENCODE_MODE) || force) {
            rvalue |=
                mgt_set_request(priv, DOT11_OID_AUTHENABLE, 0, &authen);
            rvalue |=
                mgt_set_request(priv, DOT11_OID_PRIVACYINVOKED, 0, &invoke);
            rvalue |=
                mgt_set_request(priv, DOT11_OID_EXUNENCRYPTED, 0,
                            &exunencrypt);
      }
      return rvalue;
}

static int
prism54_get_encode(struct net_device *ndev, struct iw_request_info *info,
               struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct obj_key *key;
      u32 devindex, index = (dwrq->flags & IW_ENCODE_INDEX) - 1;
      u32 authen = 0, invoke = 0, exunencrypt = 0;
      int rvalue;
      union oid_res_t r;

      /* first get the flags */
      rvalue = mgt_get_request(priv, DOT11_OID_AUTHENABLE, 0, NULL, &r);
      authen = r.u;
      rvalue |= mgt_get_request(priv, DOT11_OID_PRIVACYINVOKED, 0, NULL, &r);
      invoke = r.u;
      rvalue |= mgt_get_request(priv, DOT11_OID_EXUNENCRYPTED, 0, NULL, &r);
      exunencrypt = r.u;

      if (invoke && (authen == DOT11_AUTH_BOTH) && exunencrypt)
            dwrq->flags = IW_ENCODE_RESTRICTED;
      else if ((authen == DOT11_AUTH_OS) && !exunencrypt) {
            if (invoke)
                  dwrq->flags = IW_ENCODE_OPEN;
            else
                  dwrq->flags = IW_ENCODE_DISABLED;
      } else
            /* The card should not work in this state */
            dwrq->flags = 0;

      /* get the current device key index */
      rvalue |= mgt_get_request(priv, DOT11_OID_DEFKEYID, 0, NULL, &r);
      devindex = r.u;
      /* Now get the key, return it */
      if (index == -1 || index > 3)
            /* no index provided, use the current one */
            index = devindex;
      rvalue |= mgt_get_request(priv, DOT11_OID_DEFKEYX, index, NULL, &r);
      key = r.ptr;
      dwrq->length = key->length;
      memcpy(extra, key->key, dwrq->length);
      kfree(key);
      /* return the used key index */
      dwrq->flags |= devindex + 1;

      return rvalue;
}

static int
prism54_get_txpower(struct net_device *ndev, struct iw_request_info *info,
                struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      union oid_res_t r;
      int rvalue;

      rvalue = mgt_get_request(priv, OID_INL_OUTPUTPOWER, 0, NULL, &r);
      /* intersil firmware operates in 0.25 dBm (1/4 dBm) */
      vwrq->value = (s32) r.u / 4;
      vwrq->fixed = 1;
      /* radio is not turned of
       * btw: how is possible to turn off only the radio
       */
      vwrq->disabled = 0;

      return rvalue;
}

static int
prism54_set_txpower(struct net_device *ndev, struct iw_request_info *info,
                struct iw_param *vwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      s32 u = vwrq->value;

      /* intersil firmware operates in 0.25 dBm (1/4) */
      u *= 4;
      if (vwrq->disabled) {
            /* don't know how to disable radio */
            printk(KERN_DEBUG
                   "%s: %s() disabling radio is not yet supported.\n",
                   priv->ndev->name, __func__);
            return -ENOTSUPP;
      } else if (vwrq->fixed)
            /* currently only fixed value is supported */
            return mgt_set_request(priv, OID_INL_OUTPUTPOWER, 0, &u);
      else {
            printk(KERN_DEBUG
                   "%s: %s() auto power will be implemented later.\n",
                   priv->ndev->name, __func__);
            return -ENOTSUPP;
      }
}

static int prism54_set_genie(struct net_device *ndev,
                       struct iw_request_info *info,
                       struct iw_point *data, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      int alen, ret = 0;
      struct obj_attachment *attach;

      if (data->length > MAX_WPA_IE_LEN ||
          (data->length && extra == NULL))
            return -EINVAL;

      memcpy(priv->wpa_ie, extra, data->length);
      priv->wpa_ie_len = data->length;

      alen = sizeof(*attach) + priv->wpa_ie_len;
      attach = kzalloc(alen, GFP_KERNEL);
      if (attach == NULL)
            return -ENOMEM;

#define WLAN_FC_TYPE_MGMT 0
#define WLAN_FC_STYPE_ASSOC_REQ 0
#define WLAN_FC_STYPE_REASSOC_REQ 2

      /* Note: endianness is covered by mgt_set_varlen */
      attach->type = (WLAN_FC_TYPE_MGMT << 2) |
               (WLAN_FC_STYPE_ASSOC_REQ << 4);
      attach->id = -1;
      attach->size = priv->wpa_ie_len;
      memcpy(attach->data, extra, priv->wpa_ie_len);

      ret = mgt_set_varlen(priv, DOT11_OID_ATTACHMENT, attach,
            priv->wpa_ie_len);
      if (ret == 0) {
            attach->type = (WLAN_FC_TYPE_MGMT << 2) |
                  (WLAN_FC_STYPE_REASSOC_REQ << 4);

            ret = mgt_set_varlen(priv, DOT11_OID_ATTACHMENT, attach,
                  priv->wpa_ie_len);
            if (ret == 0)
                  printk(KERN_DEBUG "%s: WPA IE Attachment was set\n",
                        ndev->name);
      }

      kfree(attach);
      return ret;
}


static int prism54_get_genie(struct net_device *ndev,
                       struct iw_request_info *info,
                       struct iw_point *data, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      int len = priv->wpa_ie_len;

      if (len <= 0) {
            data->length = 0;
            return 0;
      }

      if (data->length < len)
            return -E2BIG;

      data->length = len;
      memcpy(extra, priv->wpa_ie, len);

      return 0;
}

static int prism54_set_auth(struct net_device *ndev,
                         struct iw_request_info *info,
                         union iwreq_data *wrqu, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct iw_param *param = &wrqu->param;
      u32 mlmelevel = 0, authen = 0, dot1x = 0;
      u32 exunencrypt = 0, privinvoked = 0, wpa = 0;
      u32 old_wpa;
      int ret = 0;
      union oid_res_t r;

      if (islpci_get_state(priv) < PRV_STATE_INIT)
            return 0;

      /* first get the flags */
      down_write(&priv->mib_sem);
      wpa = old_wpa = priv->wpa;
      up_write(&priv->mib_sem);
      ret = mgt_get_request(priv, DOT11_OID_AUTHENABLE, 0, NULL, &r);
      authen = r.u;
      ret = mgt_get_request(priv, DOT11_OID_PRIVACYINVOKED, 0, NULL, &r);
      privinvoked = r.u;
      ret = mgt_get_request(priv, DOT11_OID_EXUNENCRYPTED, 0, NULL, &r);
      exunencrypt = r.u;
      ret = mgt_get_request(priv, DOT11_OID_DOT1XENABLE, 0, NULL, &r);
      dot1x = r.u;
      ret = mgt_get_request(priv, DOT11_OID_MLMEAUTOLEVEL, 0, NULL, &r);
      mlmelevel = r.u;

      if (ret < 0)
            goto out;

      switch (param->flags & IW_AUTH_INDEX) {
      case IW_AUTH_CIPHER_PAIRWISE:
      case IW_AUTH_CIPHER_GROUP:
      case IW_AUTH_KEY_MGMT:
            break;

      case IW_AUTH_WPA_ENABLED:
            /* Do the same thing as IW_AUTH_WPA_VERSION */
            if (param->value) {
                  wpa = 1;
                  privinvoked = 1; /* For privacy invoked */
                  exunencrypt = 1; /* Filter out all unencrypted frames */
                  dot1x = 0x01; /* To enable eap filter */
                  mlmelevel = DOT11_MLME_EXTENDED;
                  authen = DOT11_AUTH_OS; /* Only WEP uses _SK and _BOTH */
            } else {
                  wpa = 0;
                  privinvoked = 0;
                  exunencrypt = 0; /* Do not filter un-encrypted data */
                  dot1x = 0;
                  mlmelevel = DOT11_MLME_AUTO;
            }
            break;

      case IW_AUTH_WPA_VERSION:
            if (param->value & IW_AUTH_WPA_VERSION_DISABLED) {
                  wpa = 0;
                  privinvoked = 0;
                  exunencrypt = 0; /* Do not filter un-encrypted data */
                  dot1x = 0;
                  mlmelevel = DOT11_MLME_AUTO;
            } else {
                  if (param->value & IW_AUTH_WPA_VERSION_WPA)
                        wpa = 1;
                  else if (param->value & IW_AUTH_WPA_VERSION_WPA2)
                        wpa = 2;
                  privinvoked = 1; /* For privacy invoked */
                  exunencrypt = 1; /* Filter out all unencrypted frames */
                  dot1x = 0x01; /* To enable eap filter */
                  mlmelevel = DOT11_MLME_EXTENDED;
                  authen = DOT11_AUTH_OS; /* Only WEP uses _SK and _BOTH */
            }
            break;

      case IW_AUTH_RX_UNENCRYPTED_EAPOL:
            /* dot1x should be the opposite of RX_UNENCRYPTED_EAPOL;
             * turn off dot1x when allowing receipt of unencrypted EAPOL
             * frames, turn on dot1x when receipt should be disallowed
             */
            dot1x = param->value ? 0 : 0x01;
            break;

      case IW_AUTH_PRIVACY_INVOKED:
            privinvoked = param->value ? 1 : 0;
            break;

      case IW_AUTH_DROP_UNENCRYPTED:
            exunencrypt = param->value ? 1 : 0;
            break;

      case IW_AUTH_80211_AUTH_ALG:
            if (param->value & IW_AUTH_ALG_SHARED_KEY) {
                  /* Only WEP uses _SK and _BOTH */
                  if (wpa > 0) {
                        ret = -EINVAL;
                        goto out;
                  }
                  authen = DOT11_AUTH_SK;
            } else if (param->value & IW_AUTH_ALG_OPEN_SYSTEM) {
                  authen = DOT11_AUTH_OS;
            } else {
                  ret = -EINVAL;
                  goto out;
            }
            break;

      default:
            return -EOPNOTSUPP;
      }

      /* Set all the values */
      down_write(&priv->mib_sem);
      priv->wpa = wpa;
      up_write(&priv->mib_sem);
      mgt_set_request(priv, DOT11_OID_AUTHENABLE, 0, &authen);
      mgt_set_request(priv, DOT11_OID_PRIVACYINVOKED, 0, &privinvoked);
      mgt_set_request(priv, DOT11_OID_EXUNENCRYPTED, 0, &exunencrypt);
      mgt_set_request(priv, DOT11_OID_DOT1XENABLE, 0, &dot1x);
      mgt_set_request(priv, DOT11_OID_MLMEAUTOLEVEL, 0, &mlmelevel);

out:
      return ret;
}

static int prism54_get_auth(struct net_device *ndev,
                      struct iw_request_info *info,
                      union iwreq_data *wrqu, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct iw_param *param = &wrqu->param;
      u32 wpa = 0;
      int ret = 0;
      union oid_res_t r;

      if (islpci_get_state(priv) < PRV_STATE_INIT)
            return 0;

      /* first get the flags */
      down_write(&priv->mib_sem);
      wpa = priv->wpa;
      up_write(&priv->mib_sem);

      switch (param->flags & IW_AUTH_INDEX) {
      case IW_AUTH_CIPHER_PAIRWISE:
      case IW_AUTH_CIPHER_GROUP:
      case IW_AUTH_KEY_MGMT:
            /*
             * wpa_supplicant will control these internally
             */
            ret = -EOPNOTSUPP;
            break;

      case IW_AUTH_WPA_VERSION:
            switch (wpa) {
            case 1:
                  param->value = IW_AUTH_WPA_VERSION_WPA;
                  break;
            case 2:
                  param->value = IW_AUTH_WPA_VERSION_WPA2;
                  break;
            case 0:
            default:
                  param->value = IW_AUTH_WPA_VERSION_DISABLED;
                  break;
            }
            break;

      case IW_AUTH_DROP_UNENCRYPTED:
            ret = mgt_get_request(priv, DOT11_OID_EXUNENCRYPTED, 0, NULL, &r);
            if (ret >= 0)
                  param->value = r.u > 0 ? 1 : 0;
            break;

      case IW_AUTH_80211_AUTH_ALG:
            ret = mgt_get_request(priv, DOT11_OID_AUTHENABLE, 0, NULL, &r);
            if (ret >= 0) {
                  switch (r.u) {
                  case DOT11_AUTH_OS:
                        param->value = IW_AUTH_ALG_OPEN_SYSTEM;
                        break;
                  case DOT11_AUTH_BOTH:
                  case DOT11_AUTH_SK:
                        param->value = IW_AUTH_ALG_SHARED_KEY;
                  case DOT11_AUTH_NONE:
                  default:
                        param->value = 0;
                        break;
                  }
            }
            break;

      case IW_AUTH_WPA_ENABLED:
            param->value = wpa > 0 ? 1 : 0;
            break;

      case IW_AUTH_RX_UNENCRYPTED_EAPOL:
            ret = mgt_get_request(priv, DOT11_OID_DOT1XENABLE, 0, NULL, &r);
            if (ret >= 0)
                  param->value = r.u > 0 ? 1 : 0;
            break;

      case IW_AUTH_PRIVACY_INVOKED:
            ret = mgt_get_request(priv, DOT11_OID_PRIVACYINVOKED, 0, NULL, &r);
            if (ret >= 0)
                  param->value = r.u > 0 ? 1 : 0;
            break;

      default:
            return -EOPNOTSUPP;
      }
      return ret;
}

static int prism54_set_encodeext(struct net_device *ndev,
                         struct iw_request_info *info,
                         union iwreq_data *wrqu,
                         char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct iw_point *encoding = &wrqu->encoding;
      struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
      int idx, alg = ext->alg, set_key = 1;
      union oid_res_t r;
      int authen = DOT11_AUTH_OS, invoke = 0, exunencrypt = 0;
      int ret = 0;

      if (islpci_get_state(priv) < PRV_STATE_INIT)
            return 0;

      /* Determine and validate the key index */
      idx = (encoding->flags & IW_ENCODE_INDEX) - 1;
      if (idx) {
            if (idx < 0 || idx > 3)
                  return -EINVAL;
      } else {
            ret = mgt_get_request(priv, DOT11_OID_DEFKEYID, 0, NULL, &r);
            if (ret < 0)
                  goto out;
            idx = r.u;
      }

      if (encoding->flags & IW_ENCODE_DISABLED)
            alg = IW_ENCODE_ALG_NONE;

      if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY) {
            /* Only set transmit key index here, actual
             * key is set below if needed.
             */
            ret = mgt_set_request(priv, DOT11_OID_DEFKEYID, 0, &idx);
            set_key = ext->key_len > 0 ? 1 : 0;
      }

      if (set_key) {
            struct obj_key key = { DOT11_PRIV_WEP, 0, "" };
            switch (alg) {
            case IW_ENCODE_ALG_NONE:
                  break;
            case IW_ENCODE_ALG_WEP:
                  if (ext->key_len > KEY_SIZE_WEP104) {
                        ret = -EINVAL;
                        goto out;
                  }
                  if (ext->key_len > KEY_SIZE_WEP40)
                        key.length = KEY_SIZE_WEP104;
                  else
                        key.length = KEY_SIZE_WEP40;
                  break;
            case IW_ENCODE_ALG_TKIP:
                  if (ext->key_len > KEY_SIZE_TKIP) {
                        ret = -EINVAL;
                        goto out;
                  }
                  key.type = DOT11_PRIV_TKIP;
                  key.length = KEY_SIZE_TKIP;
                  break;
            default:
                  return -EINVAL;
            }

            if (key.length) {
                  memset(key.key, 0, sizeof(key.key));
                  memcpy(key.key, ext->key, ext->key_len);
                  ret = mgt_set_request(priv, DOT11_OID_DEFKEYX, idx,
                                  &key);
                  if (ret < 0)
                        goto out;
            }
      }

      /* Read the flags */
      if (encoding->flags & IW_ENCODE_DISABLED) {
            /* Encoding disabled,
             * authen = DOT11_AUTH_OS;
             * invoke = 0;
             * exunencrypt = 0; */
      }
      if (encoding->flags & IW_ENCODE_OPEN) {
            /* Encode but accept non-encoded packets. No auth */
            invoke = 1;
      }
      if (encoding->flags & IW_ENCODE_RESTRICTED) {
            /* Refuse non-encoded packets. Auth */
            authen = DOT11_AUTH_BOTH;
            invoke = 1;
            exunencrypt = 1;
      }

      /* do the change if requested  */
      if (encoding->flags & IW_ENCODE_MODE) {
            ret = mgt_set_request(priv, DOT11_OID_AUTHENABLE, 0,
                              &authen);
            ret = mgt_set_request(priv, DOT11_OID_PRIVACYINVOKED, 0,
                              &invoke);
            ret = mgt_set_request(priv, DOT11_OID_EXUNENCRYPTED, 0,
                              &exunencrypt);
      }

out:
      return ret;
}


static int prism54_get_encodeext(struct net_device *ndev,
                         struct iw_request_info *info,
                         union iwreq_data *wrqu,
                         char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct iw_point *encoding = &wrqu->encoding;
      struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
      int idx, max_key_len;
      union oid_res_t r;
      int authen = DOT11_AUTH_OS, invoke = 0, exunencrypt = 0, wpa = 0;
      int ret = 0;

      if (islpci_get_state(priv) < PRV_STATE_INIT)
            return 0;

      /* first get the flags */
      ret = mgt_get_request(priv, DOT11_OID_AUTHENABLE, 0, NULL, &r);
      authen = r.u;
      ret = mgt_get_request(priv, DOT11_OID_PRIVACYINVOKED, 0, NULL, &r);
      invoke = r.u;
      ret = mgt_get_request(priv, DOT11_OID_EXUNENCRYPTED, 0, NULL, &r);
      exunencrypt = r.u;
      if (ret < 0)
            goto out;

      max_key_len = encoding->length - sizeof(*ext);
      if (max_key_len < 0)
            return -EINVAL;

      idx = (encoding->flags & IW_ENCODE_INDEX) - 1;
      if (idx) {
            if (idx < 0 || idx > 3)
                  return -EINVAL;
      } else {
            ret = mgt_get_request(priv, DOT11_OID_DEFKEYID, 0, NULL, &r);
            if (ret < 0)
                  goto out;
            idx = r.u;
      }

      encoding->flags = idx + 1;
      memset(ext, 0, sizeof(*ext));

      switch (authen) {
      case DOT11_AUTH_BOTH:
      case DOT11_AUTH_SK:
            wrqu->encoding.flags |= IW_ENCODE_RESTRICTED;
      case DOT11_AUTH_OS:
      default:
            wrqu->encoding.flags |= IW_ENCODE_OPEN;
            break;
      }

      down_write(&priv->mib_sem);
      wpa = priv->wpa;
      up_write(&priv->mib_sem);

      if (authen == DOT11_AUTH_OS && !exunencrypt && !invoke && !wpa) {
            /* No encryption */
            ext->alg = IW_ENCODE_ALG_NONE;
            ext->key_len = 0;
            wrqu->encoding.flags |= IW_ENCODE_DISABLED;
      } else {
            struct obj_key *key;

            ret = mgt_get_request(priv, DOT11_OID_DEFKEYX, idx, NULL, &r);
            if (ret < 0)
                  goto out;
            key = r.ptr;
            if (max_key_len < key->length) {
                  ret = -E2BIG;
                  goto out;
            }
            memcpy(ext->key, key->key, key->length);
            ext->key_len = key->length;

            switch (key->type) {
            case DOT11_PRIV_TKIP:
                  ext->alg = IW_ENCODE_ALG_TKIP;
                  break;
            default:
            case DOT11_PRIV_WEP:
                  ext->alg = IW_ENCODE_ALG_WEP;
                  break;
            }
            wrqu->encoding.flags |= IW_ENCODE_ENABLED;
      }

out:
      return ret;
}


static int
prism54_reset(struct net_device *ndev, struct iw_request_info *info,
            __u32 * uwrq, char *extra)
{
      islpci_reset(netdev_priv(ndev), 0);

      return 0;
}

static int
prism54_get_oid(struct net_device *ndev, struct iw_request_info *info,
            struct iw_point *dwrq, char *extra)
{
      union oid_res_t r;
      int rvalue;
      enum oid_num_t n = dwrq->flags;

      rvalue = mgt_get_request(netdev_priv(ndev), n, 0, NULL, &r);
      dwrq->length = mgt_response_to_str(n, &r, extra);
      if ((isl_oid[n].flags & OID_FLAG_TYPE) != OID_TYPE_U32)
            kfree(r.ptr);
      return rvalue;
}

static int
prism54_set_u32(struct net_device *ndev, struct iw_request_info *info,
            __u32 * uwrq, char *extra)
{
      u32 oid = uwrq[0], u = uwrq[1];

      return mgt_set_request(netdev_priv(ndev), oid, 0, &u);
}

static int
prism54_set_raw(struct net_device *ndev, struct iw_request_info *info,
            struct iw_point *dwrq, char *extra)
{
      u32 oid = dwrq->flags;

      return mgt_set_request(netdev_priv(ndev), oid, 0, extra);
}

void
prism54_acl_init(struct islpci_acl *acl)
{
      mutex_init(&acl->lock);
      INIT_LIST_HEAD(&acl->mac_list);
      acl->size = 0;
      acl->policy = MAC_POLICY_OPEN;
}

static void
prism54_clear_mac(struct islpci_acl *acl)
{
      struct list_head *ptr, *next;
      struct mac_entry *entry;

      mutex_lock(&acl->lock);

      if (acl->size == 0) {
            mutex_unlock(&acl->lock);
            return;
      }

      for (ptr = acl->mac_list.next, next = ptr->next;
           ptr != &acl->mac_list; ptr = next, next = ptr->next) {
            entry = list_entry(ptr, struct mac_entry, _list);
            list_del(ptr);
            kfree(entry);
      }
      acl->size = 0;
      mutex_unlock(&acl->lock);
}

void
prism54_acl_clean(struct islpci_acl *acl)
{
      prism54_clear_mac(acl);
}

static int
prism54_add_mac(struct net_device *ndev, struct iw_request_info *info,
            struct sockaddr *awrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct islpci_acl *acl = &priv->acl;
      struct mac_entry *entry;
      struct sockaddr *addr = (struct sockaddr *) extra;

      if (addr->sa_family != ARPHRD_ETHER)
            return -EOPNOTSUPP;

      entry = kmalloc(sizeof (struct mac_entry), GFP_KERNEL);
      if (entry == NULL)
            return -ENOMEM;

      memcpy(entry->addr, addr->sa_data, ETH_ALEN);

      if (mutex_lock_interruptible(&acl->lock)) {
            kfree(entry);
            return -ERESTARTSYS;
      }
      list_add_tail(&entry->_list, &acl->mac_list);
      acl->size++;
      mutex_unlock(&acl->lock);

      return 0;
}

static int
prism54_del_mac(struct net_device *ndev, struct iw_request_info *info,
            struct sockaddr *awrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct islpci_acl *acl = &priv->acl;
      struct mac_entry *entry;
      struct sockaddr *addr = (struct sockaddr *) extra;

      if (addr->sa_family != ARPHRD_ETHER)
            return -EOPNOTSUPP;

      if (mutex_lock_interruptible(&acl->lock))
            return -ERESTARTSYS;
      list_for_each_entry(entry, &acl->mac_list, _list) {
            if (memcmp(entry->addr, addr->sa_data, ETH_ALEN) == 0) {
                  list_del(&entry->_list);
                  acl->size--;
                  kfree(entry);
                  mutex_unlock(&acl->lock);
                  return 0;
            }
      }
      mutex_unlock(&acl->lock);
      return -EINVAL;
}

static int
prism54_get_mac(struct net_device *ndev, struct iw_request_info *info,
            struct iw_point *dwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct islpci_acl *acl = &priv->acl;
      struct mac_entry *entry;
      struct sockaddr *dst = (struct sockaddr *) extra;

      dwrq->length = 0;

      if (mutex_lock_interruptible(&acl->lock))
            return -ERESTARTSYS;

      list_for_each_entry(entry, &acl->mac_list, _list) {
            memcpy(dst->sa_data, entry->addr, ETH_ALEN);
            dst->sa_family = ARPHRD_ETHER;
            dwrq->length++;
            dst++;
      }
      mutex_unlock(&acl->lock);
      return 0;
}

/* Setting policy also clears the MAC acl, even if we don't change the defaut
 * policy
 */

static int
prism54_set_policy(struct net_device *ndev, struct iw_request_info *info,
               __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct islpci_acl *acl = &priv->acl;
      u32 mlmeautolevel;

      prism54_clear_mac(acl);

      if ((*uwrq < MAC_POLICY_OPEN) || (*uwrq > MAC_POLICY_REJECT))
            return -EINVAL;

      down_write(&priv->mib_sem);

      acl->policy = *uwrq;

      /* the ACL code needs an intermediate mlmeautolevel */
      if ((priv->iw_mode == IW_MODE_MASTER) &&
          (acl->policy != MAC_POLICY_OPEN))
            mlmeautolevel = DOT11_MLME_INTERMEDIATE;
      else
            mlmeautolevel = CARD_DEFAULT_MLME_MODE;
      if (priv->wpa)
            mlmeautolevel = DOT11_MLME_EXTENDED;
      mgt_set(priv, DOT11_OID_MLMEAUTOLEVEL, &mlmeautolevel);
      /* restart the card with our new policy */
      if (mgt_commit(priv)) {
            up_write(&priv->mib_sem);
            return -EIO;
      }
      up_write(&priv->mib_sem);

      return 0;
}

static int
prism54_get_policy(struct net_device *ndev, struct iw_request_info *info,
               __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct islpci_acl *acl = &priv->acl;

      *uwrq = acl->policy;

      return 0;
}

/* Return 1 only if client should be accepted. */

static int
prism54_mac_accept(struct islpci_acl *acl, char *mac)
{
      struct mac_entry *entry;
      int res = 0;

      if (mutex_lock_interruptible(&acl->lock))
            return -ERESTARTSYS;

      if (acl->policy == MAC_POLICY_OPEN) {
            mutex_unlock(&acl->lock);
            return 1;
      }

      list_for_each_entry(entry, &acl->mac_list, _list) {
            if (memcmp(entry->addr, mac, ETH_ALEN) == 0) {
                  res = 1;
                  break;
            }
      }
      res = (acl->policy == MAC_POLICY_ACCEPT) ? !res : res;
      mutex_unlock(&acl->lock);

      return res;
}

static int
prism54_kick_all(struct net_device *ndev, struct iw_request_info *info,
             struct iw_point *dwrq, char *extra)
{
      struct obj_mlme *mlme;
      int rvalue;

      mlme = kmalloc(sizeof (struct obj_mlme), GFP_KERNEL);
      if (mlme == NULL)
            return -ENOMEM;

      /* Tell the card to kick every client */
      mlme->id = 0;
      rvalue =
          mgt_set_request(netdev_priv(ndev), DOT11_OID_DISASSOCIATE, 0, mlme);
      kfree(mlme);

      return rvalue;
}

static int
prism54_kick_mac(struct net_device *ndev, struct iw_request_info *info,
             struct sockaddr *awrq, char *extra)
{
      struct obj_mlme *mlme;
      struct sockaddr *addr = (struct sockaddr *) extra;
      int rvalue;

      if (addr->sa_family != ARPHRD_ETHER)
            return -EOPNOTSUPP;

      mlme = kmalloc(sizeof (struct obj_mlme), GFP_KERNEL);
      if (mlme == NULL)
            return -ENOMEM;

      /* Tell the card to only kick the corresponding bastard */
      memcpy(mlme->address, addr->sa_data, ETH_ALEN);
      mlme->id = -1;
      rvalue =
          mgt_set_request(netdev_priv(ndev), DOT11_OID_DISASSOCIATE, 0, mlme);

      kfree(mlme);

      return rvalue;
}

/* Translate a TRAP oid into a wireless event. Called in islpci_mgt_receive. */

static void
format_event(islpci_private *priv, char *dest, const char *str,
           const struct obj_mlme *mlme, u16 *length, int error)
{
      int n = snprintf(dest, IW_CUSTOM_MAX,
                   "%s %s %pM %s (%2.2X)",
                   str,
                   ((priv->iw_mode == IW_MODE_MASTER) ? "from" : "to"),
                   mlme->address,
                   (error ? (mlme->code ? " : REJECTED " : " : ACCEPTED ")
                    : ""), mlme->code);
      BUG_ON(n > IW_CUSTOM_MAX);
      *length = n;
}

static void
send_formatted_event(islpci_private *priv, const char *str,
                 const struct obj_mlme *mlme, int error)
{
      union iwreq_data wrqu;
      char *memptr;

      memptr = kmalloc(IW_CUSTOM_MAX, GFP_KERNEL);
      if (!memptr)
            return;
      wrqu.data.pointer = memptr;
      wrqu.data.length = 0;
      format_event(priv, memptr, str, mlme, &wrqu.data.length,
                 error);
      wireless_send_event(priv->ndev, IWEVCUSTOM, &wrqu, memptr);
      kfree(memptr);
}

static void
send_simple_event(islpci_private *priv, const char *str)
{
      union iwreq_data wrqu;
      char *memptr;
      int n = strlen(str);

      memptr = kmalloc(IW_CUSTOM_MAX, GFP_KERNEL);
      if (!memptr)
            return;
      BUG_ON(n > IW_CUSTOM_MAX);
      wrqu.data.pointer = memptr;
      wrqu.data.length = n;
      strcpy(memptr, str);
      wireless_send_event(priv->ndev, IWEVCUSTOM, &wrqu, memptr);
      kfree(memptr);
}

static void
link_changed(struct net_device *ndev, u32 bitrate)
{
      islpci_private *priv = netdev_priv(ndev);

      if (bitrate) {
            netif_carrier_on(ndev);
            if (priv->iw_mode == IW_MODE_INFRA) {
                  union iwreq_data uwrq;
                  prism54_get_wap(ndev, NULL, (struct sockaddr *) &uwrq,
                              NULL);
                  wireless_send_event(ndev, SIOCGIWAP, &uwrq, NULL);
            } else
                  send_simple_event(netdev_priv(ndev),
                                "Link established");
      } else {
            netif_carrier_off(ndev);
            send_simple_event(netdev_priv(ndev), "Link lost");
      }
}

/* Beacon/ProbeResp payload header */
02100 struct ieee80211_beacon_phdr {
      u8 timestamp[8];
      u16 beacon_int;
      u16 capab_info;
} __attribute__ ((packed));

#define WLAN_EID_GENERIC 0xdd
static u8 wpa_oid[4] = { 0x00, 0x50, 0xf2, 1 };

static void
prism54_wpa_bss_ie_add(islpci_private *priv, u8 *bssid,
                   u8 *wpa_ie, size_t wpa_ie_len)
{
      struct list_head *ptr;
      struct islpci_bss_wpa_ie *bss = NULL;

      if (wpa_ie_len > MAX_WPA_IE_LEN)
            wpa_ie_len = MAX_WPA_IE_LEN;

      mutex_lock(&priv->wpa_lock);

      /* try to use existing entry */
      list_for_each(ptr, &priv->bss_wpa_list) {
            bss = list_entry(ptr, struct islpci_bss_wpa_ie, list);
            if (memcmp(bss->bssid, bssid, ETH_ALEN) == 0) {
                  list_move(&bss->list, &priv->bss_wpa_list);
                  break;
            }
            bss = NULL;
      }

      if (bss == NULL) {
            /* add a new BSS entry; if max number of entries is already
             * reached, replace the least recently updated */
            if (priv->num_bss_wpa >= MAX_BSS_WPA_IE_COUNT) {
                  bss = list_entry(priv->bss_wpa_list.prev,
                               struct islpci_bss_wpa_ie, list);
                  list_del(&bss->list);
            } else {
                  bss = kzalloc(sizeof (*bss), GFP_ATOMIC);
                  if (bss != NULL)
                        priv->num_bss_wpa++;
            }
            if (bss != NULL) {
                  memcpy(bss->bssid, bssid, ETH_ALEN);
                  list_add(&bss->list, &priv->bss_wpa_list);
            }
      }

      if (bss != NULL) {
            memcpy(bss->wpa_ie, wpa_ie, wpa_ie_len);
            bss->wpa_ie_len = wpa_ie_len;
            bss->last_update = jiffies;
      } else {
            printk(KERN_DEBUG "Failed to add BSS WPA entry for "
                   "%pM\n", bssid);
      }

      /* expire old entries from WPA list */
      while (priv->num_bss_wpa > 0) {
            bss = list_entry(priv->bss_wpa_list.prev,
                         struct islpci_bss_wpa_ie, list);
            if (!time_after(jiffies, bss->last_update + 60 * HZ))
                  break;

            list_del(&bss->list);
            priv->num_bss_wpa--;
            kfree(bss);
      }

      mutex_unlock(&priv->wpa_lock);
}

static size_t
prism54_wpa_bss_ie_get(islpci_private *priv, u8 *bssid, u8 *wpa_ie)
{
      struct list_head *ptr;
      struct islpci_bss_wpa_ie *bss = NULL;
      size_t len = 0;

      mutex_lock(&priv->wpa_lock);

      list_for_each(ptr, &priv->bss_wpa_list) {
            bss = list_entry(ptr, struct islpci_bss_wpa_ie, list);
            if (memcmp(bss->bssid, bssid, ETH_ALEN) == 0)
                  break;
            bss = NULL;
      }
      if (bss) {
            len = bss->wpa_ie_len;
            memcpy(wpa_ie, bss->wpa_ie, len);
      }
      mutex_unlock(&priv->wpa_lock);

      return len;
}

void
prism54_wpa_bss_ie_init(islpci_private *priv)
{
      INIT_LIST_HEAD(&priv->bss_wpa_list);
      mutex_init(&priv->wpa_lock);
}

void
prism54_wpa_bss_ie_clean(islpci_private *priv)
{
      struct islpci_bss_wpa_ie *bss, *n;

      list_for_each_entry_safe(bss, n, &priv->bss_wpa_list, list) {
            kfree(bss);
      }
}

static void
prism54_process_bss_data(islpci_private *priv, u32 oid, u8 *addr,
                   u8 *payload, size_t len)
{
      struct ieee80211_beacon_phdr *hdr;
      u8 *pos, *end;

      if (!priv->wpa)
            return;

      hdr = (struct ieee80211_beacon_phdr *) payload;
      pos = (u8 *) (hdr + 1);
      end = payload + len;
      while (pos < end) {
            if (pos + 2 + pos[1] > end) {
                  printk(KERN_DEBUG "Parsing Beacon/ProbeResp failed "
                         "for %pM\n", addr);
                  return;
            }
            if (pos[0] == WLAN_EID_GENERIC && pos[1] >= 4 &&
                memcmp(pos + 2, wpa_oid, 4) == 0) {
                  prism54_wpa_bss_ie_add(priv, addr, pos, pos[1] + 2);
                  return;
            }
            pos += 2 + pos[1];
      }
}

static void
handle_request(islpci_private *priv, struct obj_mlme *mlme, enum oid_num_t oid)
{
      if (((mlme->state == DOT11_STATE_AUTHING) ||
           (mlme->state == DOT11_STATE_ASSOCING))
          && mgt_mlme_answer(priv)) {
            /* Someone is requesting auth and we must respond. Just send back
             * the trap with error code set accordingly.
             */
            mlme->code = prism54_mac_accept(&priv->acl,
                                    mlme->address) ? 0 : 1;
            mgt_set_request(priv, oid, 0, mlme);
      }
}

static int
prism54_process_trap_helper(islpci_private *priv, enum oid_num_t oid,
                      char *data)
{
      struct obj_mlme *mlme = (struct obj_mlme *) data;
      struct obj_mlmeex *mlmeex = (struct obj_mlmeex *) data;
      struct obj_mlmeex *confirm;
      u8 wpa_ie[MAX_WPA_IE_LEN];
      int wpa_ie_len;
      size_t len = 0; /* u16, better? */
      u8 *payload = NULL, *pos = NULL;
      int ret;

      /* I think all trapable objects are listed here.
       * Some oids have a EX version. The difference is that they are emitted
       * in DOT11_MLME_EXTENDED mode (set with DOT11_OID_MLMEAUTOLEVEL)
       * with more info.
       * The few events already defined by the wireless tools are not really
       * suited. We use the more flexible custom event facility.
       */

      if (oid >= DOT11_OID_BEACON) {
            len = mlmeex->size;
            payload = pos = mlmeex->data;
      }

      /* I fear prism54_process_bss_data won't work with big endian data */
      if ((oid == DOT11_OID_BEACON) || (oid == DOT11_OID_PROBE))
            prism54_process_bss_data(priv, oid, mlmeex->address,
                               payload, len);

      mgt_le_to_cpu(isl_oid[oid].flags & OID_FLAG_TYPE, (void *) mlme);

      switch (oid) {

      case GEN_OID_LINKSTATE:
            link_changed(priv->ndev, (u32) *data);
            break;

      case DOT11_OID_MICFAILURE:
            send_simple_event(priv, "Mic failure");
            break;

      case DOT11_OID_DEAUTHENTICATE:
            send_formatted_event(priv, "DeAuthenticate request", mlme, 0);
            break;

      case DOT11_OID_AUTHENTICATE:
            handle_request(priv, mlme, oid);
            send_formatted_event(priv, "Authenticate request", mlme, 1);
            break;

      case DOT11_OID_DISASSOCIATE:
            send_formatted_event(priv, "Disassociate request", mlme, 0);
            break;

      case DOT11_OID_ASSOCIATE:
            handle_request(priv, mlme, oid);
            send_formatted_event(priv, "Associate request", mlme, 1);
            break;

      case DOT11_OID_REASSOCIATE:
            handle_request(priv, mlme, oid);
            send_formatted_event(priv, "ReAssociate request", mlme, 1);
            break;

      case DOT11_OID_BEACON:
            send_formatted_event(priv,
                             "Received a beacon from an unkown AP",
                             mlme, 0);
            break;

      case DOT11_OID_PROBE:
            /* we received a probe from a client. */
            send_formatted_event(priv, "Received a probe from client", mlme,
                             0);
            break;

            /* Note : "mlme" is actually a "struct obj_mlmeex *" here, but this
             * is backward compatible layout-wise with "struct obj_mlme".
             */

      case DOT11_OID_DEAUTHENTICATEEX:
            send_formatted_event(priv, "DeAuthenticate request", mlme, 0);
            break;

      case DOT11_OID_AUTHENTICATEEX:
            handle_request(priv, mlme, oid);
            send_formatted_event(priv, "Authenticate request (ex)", mlme, 1);

            if (priv->iw_mode != IW_MODE_MASTER
                        && mlmeex->state != DOT11_STATE_AUTHING)
                  break;

            confirm = kmalloc(sizeof(struct obj_mlmeex) + 6, GFP_ATOMIC);

            if (!confirm)
                  break;

            memcpy(&confirm->address, mlmeex->address, ETH_ALEN);
            printk(KERN_DEBUG "Authenticate from: address:\t%pM\n",
                   mlmeex->address);
            confirm->id = -1; /* or mlmeex->id ? */
            confirm->state = 0; /* not used */
            confirm->code = 0;
            confirm->size = 6;
            confirm->data[0] = 0x00;
            confirm->data[1] = 0x00;
            confirm->data[2] = 0x02;
            confirm->data[3] = 0x00;
            confirm->data[4] = 0x00;
            confirm->data[5] = 0x00;

            ret = mgt_set_varlen(priv, DOT11_OID_ASSOCIATEEX, confirm, 6);

            kfree(confirm);
            if (ret)
                  return ret;
            break;

      case DOT11_OID_DISASSOCIATEEX:
            send_formatted_event(priv, "Disassociate request (ex)", mlme, 0);
            break;

      case DOT11_OID_ASSOCIATEEX:
            handle_request(priv, mlme, oid);
            send_formatted_event(priv, "Associate request (ex)", mlme, 1);

            if (priv->iw_mode != IW_MODE_MASTER
                        && mlmeex->state != DOT11_STATE_ASSOCING)
                  break;

            confirm = kmalloc(sizeof(struct obj_mlmeex), GFP_ATOMIC);

            if (!confirm)
                  break;

            memcpy(&confirm->address, mlmeex->address, ETH_ALEN);

            confirm->id = ((struct obj_mlmeex *)mlme)->id;
            confirm->state = 0; /* not used */
            confirm->code = 0;

            wpa_ie_len = prism54_wpa_bss_ie_get(priv, mlmeex->address, wpa_ie);

            if (!wpa_ie_len) {
                  printk(KERN_DEBUG "No WPA IE found from address:\t%pM\n",
                         mlmeex->address);
                  kfree(confirm);
                  break;
            }

            confirm->size = wpa_ie_len;
            memcpy(&confirm->data, wpa_ie, wpa_ie_len);

            mgt_set_varlen(priv, oid, confirm, wpa_ie_len);

            kfree(confirm);

            break;

      case DOT11_OID_REASSOCIATEEX:
            handle_request(priv, mlme, oid);
            send_formatted_event(priv, "Reassociate request (ex)", mlme, 1);

            if (priv->iw_mode != IW_MODE_MASTER
                        && mlmeex->state != DOT11_STATE_ASSOCING)
                  break;

            confirm = kmalloc(sizeof(struct obj_mlmeex), GFP_ATOMIC);

            if (!confirm)
                  break;

            memcpy(&confirm->address, mlmeex->address, ETH_ALEN);

            confirm->id = mlmeex->id;
            confirm->state = 0; /* not used */
            confirm->code = 0;

            wpa_ie_len = prism54_wpa_bss_ie_get(priv, mlmeex->address, wpa_ie);

            if (!wpa_ie_len) {
                  printk(KERN_DEBUG "No WPA IE found from address:\t%pM\n",
                         mlmeex->address);
                  kfree(confirm);
                  break;
            }

            confirm->size = wpa_ie_len;
            memcpy(&confirm->data, wpa_ie, wpa_ie_len);

            mgt_set_varlen(priv, oid, confirm, wpa_ie_len);

            kfree(confirm);

            break;

      default:
            return -EINVAL;
      }

      return 0;
}

/*
 * Process a device trap.  This is called via schedule_work(), outside of
 * interrupt context, no locks held.
 */
void
prism54_process_trap(struct work_struct *work)
{
      struct islpci_mgmtframe *frame =
            container_of(work, struct islpci_mgmtframe, ws);
      struct net_device *ndev = frame->ndev;
      enum oid_num_t n = mgt_oidtonum(frame->header->oid);

      if (n != OID_NUM_LAST)
            prism54_process_trap_helper(netdev_priv(ndev), n, frame->data);
      islpci_mgt_release(frame);
}

int
prism54_set_mac_address(struct net_device *ndev, void *addr)
{
      islpci_private *priv = netdev_priv(ndev);
      int ret;

      if (ndev->addr_len != 6)
            return -EINVAL;
      ret = mgt_set_request(priv, GEN_OID_MACADDRESS, 0,
                        &((struct sockaddr *) addr)->sa_data);
      if (!ret)
            memcpy(priv->ndev->dev_addr,
                   &((struct sockaddr *) addr)->sa_data, 6);

      return ret;
}

/* Note: currently, use hostapd ioctl from the Host AP driver for WPA
 * support. This is to be replaced with Linux wireless extensions once they
 * get WPA support. */

/* Note II: please leave all this together as it will be easier to remove later,
 * once wireless extensions add WPA support -mcgrof */

/* PRISM54_HOSTAPD ioctl() cmd: */
enum {
      PRISM2_SET_ENCRYPTION = 6,
      PRISM2_HOSTAPD_SET_GENERIC_ELEMENT = 12,
      PRISM2_HOSTAPD_MLME = 13,
      PRISM2_HOSTAPD_SCAN_REQ = 14,
};

#define PRISM54_SET_WPA             SIOCIWFIRSTPRIV+12
#define PRISM54_HOSTAPD             SIOCIWFIRSTPRIV+25
#define PRISM54_DROP_UNENCRYPTED    SIOCIWFIRSTPRIV+26

#define PRISM2_HOSTAPD_MAX_BUF_SIZE 1024
#define PRISM2_HOSTAPD_GENERIC_ELEMENT_HDR_LEN \
      offsetof(struct prism2_hostapd_param, u.generic_elem.data)

/* Maximum length for algorithm names (-1 for nul termination)
 * used in ioctl() */
#define HOSTAP_CRYPT_ALG_NAME_LEN 16

struct prism2_hostapd_param {
      u32 cmd;
      u8 sta_addr[ETH_ALEN];
      union {
             struct {
                   u8 alg[HOSTAP_CRYPT_ALG_NAME_LEN];
                   u32 flags;
                   u32 err;
                   u8 idx;
                   u8 seq[8]; /* sequence counter (set: RX, get: TX) */
                   u16 key_len;
                   u8 key[0];
                   } crypt;
               struct {
                       u8 len;
                       u8 data[0];
               } generic_elem;
               struct {
#define MLME_STA_DEAUTH 0
#define MLME_STA_DISASSOC 1
                       u16 cmd;
                       u16 reason_code;
               } mlme;
               struct {
                       u8 ssid_len;
                       u8 ssid[32];
               } scan_req;
       } u;
};


static int
prism2_ioctl_set_encryption(struct net_device *dev,
      struct prism2_hostapd_param *param,
      int param_len)
{
      islpci_private *priv = netdev_priv(dev);
      int rvalue = 0, force = 0;
      int authen = DOT11_AUTH_OS, invoke = 0, exunencrypt = 0;
      union oid_res_t r;

      /* with the new API, it's impossible to get a NULL pointer.
       * New version of iwconfig set the IW_ENCODE_NOKEY flag
       * when no key is given, but older versions don't. */

      if (param->u.crypt.key_len > 0) {
            /* we have a key to set */
            int index = param->u.crypt.idx;
            int current_index;
            struct obj_key key = { DOT11_PRIV_TKIP, 0, "" };

            /* get the current key index */
            rvalue = mgt_get_request(priv, DOT11_OID_DEFKEYID, 0, NULL, &r);
            current_index = r.u;
            /* Verify that the key is not marked as invalid */
            if (!(param->u.crypt.flags & IW_ENCODE_NOKEY)) {
                  key.length = param->u.crypt.key_len > sizeof (param->u.crypt.key) ?
                      sizeof (param->u.crypt.key) : param->u.crypt.key_len;
                  memcpy(key.key, param->u.crypt.key, key.length);
                  if (key.length == 32)
                        /* we want WPA-PSK */
                        key.type = DOT11_PRIV_TKIP;
                  if ((index < 0) || (index > 3))
                        /* no index provided use the current one */
                        index = current_index;

                  /* now send the key to the card  */
                  rvalue |=
                      mgt_set_request(priv, DOT11_OID_DEFKEYX, index,
                                  &key);
            }
            /*
             * If a valid key is set, encryption should be enabled
             * (user may turn it off later).
             * This is also how "iwconfig ethX key on" works
             */
            if ((index == current_index) && (key.length > 0))
                  force = 1;
      } else {
            int index = (param->u.crypt.flags & IW_ENCODE_INDEX) - 1;
            if ((index >= 0) && (index <= 3)) {
                  /* we want to set the key index */
                  rvalue |=
                      mgt_set_request(priv, DOT11_OID_DEFKEYID, 0,
                                  &index);
            } else {
                  if (!(param->u.crypt.flags & IW_ENCODE_MODE)) {
                        /* we cannot do anything. Complain. */
                        return -EINVAL;
                  }
            }
      }
      /* now read the flags */
      if (param->u.crypt.flags & IW_ENCODE_DISABLED) {
            /* Encoding disabled,
             * authen = DOT11_AUTH_OS;
             * invoke = 0;
             * exunencrypt = 0; */
      }
      if (param->u.crypt.flags & IW_ENCODE_OPEN)
            /* Encode but accept non-encoded packets. No auth */
            invoke = 1;
      if ((param->u.crypt.flags & IW_ENCODE_RESTRICTED) || force) {
            /* Refuse non-encoded packets. Auth */
            authen = DOT11_AUTH_BOTH;
            invoke = 1;
            exunencrypt = 1;
      }
      /* do the change if requested  */
      if ((param->u.crypt.flags & IW_ENCODE_MODE) || force) {
            rvalue |=
                mgt_set_request(priv, DOT11_OID_AUTHENABLE, 0, &authen);
            rvalue |=
                mgt_set_request(priv, DOT11_OID_PRIVACYINVOKED, 0, &invoke);
            rvalue |=
                mgt_set_request(priv, DOT11_OID_EXUNENCRYPTED, 0,
                            &exunencrypt);
      }
      return rvalue;
}

static int
prism2_ioctl_set_generic_element(struct net_device *ndev,
      struct prism2_hostapd_param *param,
      int param_len)
{
       islpci_private *priv = netdev_priv(ndev);
       int max_len, len, alen, ret=0;
       struct obj_attachment *attach;

       len = param->u.generic_elem.len;
       max_len = param_len - PRISM2_HOSTAPD_GENERIC_ELEMENT_HDR_LEN;
       if (max_len < 0 || max_len < len)
               return -EINVAL;

       alen = sizeof(*attach) + len;
       attach = kzalloc(alen, GFP_KERNEL);
       if (attach == NULL)
               return -ENOMEM;

#define WLAN_FC_TYPE_MGMT 0
#define WLAN_FC_STYPE_ASSOC_REQ 0
#define WLAN_FC_STYPE_REASSOC_REQ 2

       /* Note: endianness is covered by mgt_set_varlen */

       attach->type = (WLAN_FC_TYPE_MGMT << 2) |
               (WLAN_FC_STYPE_ASSOC_REQ << 4);
       attach->id = -1;
       attach->size = len;
       memcpy(attach->data, param->u.generic_elem.data, len);

       ret = mgt_set_varlen(priv, DOT11_OID_ATTACHMENT, attach, len);

       if (ret == 0) {
               attach->type = (WLAN_FC_TYPE_MGMT << 2) |
                       (WLAN_FC_STYPE_REASSOC_REQ << 4);

             ret = mgt_set_varlen(priv, DOT11_OID_ATTACHMENT, attach, len);

             if (ret == 0)
                   printk(KERN_DEBUG "%s: WPA IE Attachment was set\n",
                               ndev->name);
       }

       kfree(attach);
       return ret;

}

static int
prism2_ioctl_mlme(struct net_device *dev, struct prism2_hostapd_param *param)
{
      return -EOPNOTSUPP;
}

static int
prism2_ioctl_scan_req(struct net_device *ndev,
                     struct prism2_hostapd_param *param)
{
      islpci_private *priv = netdev_priv(ndev);
      struct iw_request_info info;
      int i, rvalue;
      struct obj_bsslist *bsslist;
      u32 noise = 0;
      char *extra = "";
      char *current_ev = "foo";
      union oid_res_t r;

      if (islpci_get_state(priv) < PRV_STATE_INIT) {
            /* device is not ready, fail gently */
            return 0;
      }

      /* first get the noise value. We will use it to report the link quality */
      rvalue = mgt_get_request(priv, DOT11_OID_NOISEFLOOR, 0, NULL, &r);
      noise = r.u;

      /* Ask the device for a list of known bss. We can report at most
       * IW_MAX_AP=64 to the range struct. But the device won't repport anything
       * if you change the value of IWMAX_BSS=24.
       */
      rvalue |= mgt_get_request(priv, DOT11_OID_BSSLIST, 0, NULL, &r);
      bsslist = r.ptr;

      info.cmd = PRISM54_HOSTAPD;
      info.flags = 0;

      /* ok now, scan the list and translate its info */
      for (i = 0; i < min(IW_MAX_AP, (int) bsslist->nr); i++)
            current_ev = prism54_translate_bss(ndev, &info, current_ev,
                                       extra + IW_SCAN_MAX_DATA,
                                       &(bsslist->bsslist[i]),
                                       noise);
      kfree(bsslist);

      return rvalue;
}

static int
prism54_hostapd(struct net_device *ndev, struct iw_point *p)
{
       struct prism2_hostapd_param *param;
       int ret = 0;
       u32 uwrq;

       printk(KERN_DEBUG "prism54_hostapd - len=%d\n", p->length);
       if (p->length < sizeof(struct prism2_hostapd_param) ||
           p->length > PRISM2_HOSTAPD_MAX_BUF_SIZE || !p->pointer)
               return -EINVAL;

       param = kmalloc(p->length, GFP_KERNEL);
       if (param == NULL)
               return -ENOMEM;

       if (copy_from_user(param, p->pointer, p->length)) {
               kfree(param);
               return -EFAULT;
       }

       switch (param->cmd) {
       case PRISM2_SET_ENCRYPTION:
             printk(KERN_DEBUG "%s: Caught WPA supplicant set encryption request\n",
                         ndev->name);
               ret = prism2_ioctl_set_encryption(ndev, param, p->length);
               break;
       case PRISM2_HOSTAPD_SET_GENERIC_ELEMENT:
             printk(KERN_DEBUG "%s: Caught WPA supplicant set WPA IE request\n",
                         ndev->name);
               ret = prism2_ioctl_set_generic_element(ndev, param,
                                                      p->length);
               break;
       case PRISM2_HOSTAPD_MLME:
             printk(KERN_DEBUG "%s: Caught WPA supplicant MLME request\n",
                         ndev->name);
               ret = prism2_ioctl_mlme(ndev, param);
               break;
       case PRISM2_HOSTAPD_SCAN_REQ:
             printk(KERN_DEBUG "%s: Caught WPA supplicant scan request\n",
                         ndev->name);
               ret = prism2_ioctl_scan_req(ndev, param);
               break;
      case PRISM54_SET_WPA:
             printk(KERN_DEBUG "%s: Caught WPA supplicant wpa init request\n",
                         ndev->name);
             uwrq = 1;
             ret = prism54_set_wpa(ndev, NULL, &uwrq, NULL);
             break;
      case PRISM54_DROP_UNENCRYPTED:
             printk(KERN_DEBUG "%s: Caught WPA drop unencrypted request\n",
                         ndev->name);
#if 0
             uwrq = 0x01;
             mgt_set(priv, DOT11_OID_EXUNENCRYPTED, &uwrq);
             down_write(&priv->mib_sem);
             mgt_commit(priv);
             up_write(&priv->mib_sem);
#endif
             /* Not necessary, as set_wpa does it, should we just do it here though? */
             ret = 0;
             break;
       default:
             printk(KERN_DEBUG "%s: Caught a WPA supplicant request that is not supported\n",
                         ndev->name);
               ret = -EOPNOTSUPP;
               break;
       }

       if (ret == 0 && copy_to_user(p->pointer, param, p->length))
               ret = -EFAULT;

       kfree(param);

       return ret;
}

static int
prism54_set_wpa(struct net_device *ndev, struct iw_request_info *info,
            __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      u32 mlme, authen, dot1x, filter, wep;

      if (islpci_get_state(priv) < PRV_STATE_INIT)
            return 0;

      wep = 1; /* For privacy invoked */
      filter = 1; /* Filter out all unencrypted frames */
      dot1x = 0x01; /* To enable eap filter */
      mlme = DOT11_MLME_EXTENDED;
      authen = DOT11_AUTH_OS; /* Only WEP uses _SK and _BOTH */

      down_write(&priv->mib_sem);
      priv->wpa = *uwrq;

      switch (priv->wpa) {
            default:
            case 0: /* Clears/disables WPA and friends */
                  wep = 0;
                  filter = 0; /* Do not filter un-encrypted data */
                  dot1x = 0;
                  mlme = DOT11_MLME_AUTO;
                  printk("%s: Disabling WPA\n", ndev->name);
                  break;
            case 2:
            case 1: /* WPA */
                  printk("%s: Enabling WPA\n", ndev->name);
                  break;
      }
      up_write(&priv->mib_sem);

      mgt_set_request(priv, DOT11_OID_AUTHENABLE, 0, &authen);
      mgt_set_request(priv, DOT11_OID_PRIVACYINVOKED, 0, &wep);
      mgt_set_request(priv, DOT11_OID_EXUNENCRYPTED, 0, &filter);
      mgt_set_request(priv, DOT11_OID_DOT1XENABLE, 0, &dot1x);
      mgt_set_request(priv, DOT11_OID_MLMEAUTOLEVEL, 0, &mlme);

      return 0;
}

static int
prism54_get_wpa(struct net_device *ndev, struct iw_request_info *info,
            __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      *uwrq = priv->wpa;
      return 0;
}

static int
prism54_set_prismhdr(struct net_device *ndev, struct iw_request_info *info,
                 __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      priv->monitor_type =
          (*uwrq ? ARPHRD_IEEE80211_PRISM : ARPHRD_IEEE80211);
      if (priv->iw_mode == IW_MODE_MONITOR)
            priv->ndev->type = priv->monitor_type;

      return 0;
}

static int
prism54_get_prismhdr(struct net_device *ndev, struct iw_request_info *info,
                 __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      *uwrq = (priv->monitor_type == ARPHRD_IEEE80211_PRISM);
      return 0;
}

static int
prism54_debug_oid(struct net_device *ndev, struct iw_request_info *info,
              __u32 * uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);

      priv->priv_oid = *uwrq;
      printk("%s: oid 0x%08X\n", ndev->name, *uwrq);

      return 0;
}

static int
prism54_debug_get_oid(struct net_device *ndev, struct iw_request_info *info,
                  struct iw_point *data, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct islpci_mgmtframe *response;
      int ret = -EIO;

      printk("%s: get_oid 0x%08X\n", ndev->name, priv->priv_oid);
      data->length = 0;

      if (islpci_get_state(priv) >= PRV_STATE_INIT) {
            ret =
                islpci_mgt_transaction(priv->ndev, PIMFOR_OP_GET,
                                 priv->priv_oid, extra, 256,
                                 &response);
            printk("%s: ret: %i\n", ndev->name, ret);
            if (ret || !response
                || response->header->operation == PIMFOR_OP_ERROR) {
                  if (response) {
                        islpci_mgt_release(response);
                  }
                  printk("%s: EIO\n", ndev->name);
                  ret = -EIO;
            }
            if (!ret) {
                  data->length = response->header->length;
                  memcpy(extra, response->data, data->length);
                  islpci_mgt_release(response);
                  printk("%s: len: %i\n", ndev->name, data->length);
            }
      }

      return ret;
}

static int
prism54_debug_set_oid(struct net_device *ndev, struct iw_request_info *info,
                  struct iw_point *data, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      struct islpci_mgmtframe *response;
      int ret = 0, response_op = PIMFOR_OP_ERROR;

      printk("%s: set_oid 0x%08X\tlen: %d\n", ndev->name, priv->priv_oid,
             data->length);

      if (islpci_get_state(priv) >= PRV_STATE_INIT) {
            ret =
                islpci_mgt_transaction(priv->ndev, PIMFOR_OP_SET,
                                 priv->priv_oid, extra, data->length,
                                 &response);
            printk("%s: ret: %i\n", ndev->name, ret);
            if (ret || !response
                || response->header->operation == PIMFOR_OP_ERROR) {
                  if (response) {
                        islpci_mgt_release(response);
                  }
                  printk("%s: EIO\n", ndev->name);
                  ret = -EIO;
            }
            if (!ret) {
                  response_op = response->header->operation;
                  printk("%s: response_op: %i\n", ndev->name,
                         response_op);
                  islpci_mgt_release(response);
            }
      }

      return (ret ? ret : -EINPROGRESS);
}

static int
prism54_set_spy(struct net_device *ndev,
            struct iw_request_info *info,
            union iwreq_data *uwrq, char *extra)
{
      islpci_private *priv = netdev_priv(ndev);
      u32 u;
      enum oid_num_t oid = OID_INL_CONFIG;

      down_write(&priv->mib_sem);
      mgt_get(priv, OID_INL_CONFIG, &u);

      if ((uwrq->data.length == 0) && (priv->spy_data.spy_number > 0))
            /* disable spy */
            u &= ~INL_CONFIG_RXANNEX;
      else if ((uwrq->data.length > 0) && (priv->spy_data.spy_number == 0))
            /* enable spy */
            u |= INL_CONFIG_RXANNEX;

      mgt_set(priv, OID_INL_CONFIG, &u);
      mgt_commit_list(priv, &oid, 1);
      up_write(&priv->mib_sem);

      return iw_handler_set_spy(ndev, info, uwrq, extra);
}

static const iw_handler prism54_handler[] = {
      (iw_handler) prism54_commit,  /* SIOCSIWCOMMIT */
      (iw_handler) prism54_get_name,      /* SIOCGIWNAME */
      (iw_handler) NULL,      /* SIOCSIWNWID */
      (iw_handler) NULL,      /* SIOCGIWNWID */
      (iw_handler) prism54_set_freq,      /* SIOCSIWFREQ */
      (iw_handler) prism54_get_freq,      /* SIOCGIWFREQ */
      (iw_handler) prism54_set_mode,      /* SIOCSIWMODE */
      (iw_handler) prism54_get_mode,      /* SIOCGIWMODE */
      (iw_handler) prism54_set_sens,      /* SIOCSIWSENS */
      (iw_handler) prism54_get_sens,      /* SIOCGIWSENS */
      (iw_handler) NULL,      /* SIOCSIWRANGE */
      (iw_handler) prism54_get_range,     /* SIOCGIWRANGE */
      (iw_handler) NULL,      /* SIOCSIWPRIV */
      (iw_handler) NULL,      /* SIOCGIWPRIV */
      (iw_handler) NULL,      /* SIOCSIWSTATS */
      (iw_handler) NULL,      /* SIOCGIWSTATS */
      prism54_set_spy,  /* SIOCSIWSPY */
      iw_handler_get_spy,     /* SIOCGIWSPY */
      iw_handler_set_thrspy,  /* SIOCSIWTHRSPY */
      iw_handler_get_thrspy,  /* SIOCGIWTHRSPY */
      (iw_handler) prism54_set_wap, /* SIOCSIWAP */
      (iw_handler) prism54_get_wap, /* SIOCGIWAP */
      (iw_handler) NULL,      /* -- hole -- */
      (iw_handler) NULL,      /* SIOCGIWAPLIST deprecated */
      (iw_handler) prism54_set_scan,      /* SIOCSIWSCAN */
      (iw_handler) prism54_get_scan,      /* SIOCGIWSCAN */
      (iw_handler) prism54_set_essid,     /* SIOCSIWESSID */
      (iw_handler) prism54_get_essid,     /* SIOCGIWESSID */
      (iw_handler) prism54_set_nick,      /* SIOCSIWNICKN */
      (iw_handler) prism54_get_nick,      /* SIOCGIWNICKN */
      (iw_handler) NULL,      /* -- hole -- */
      (iw_handler) NULL,      /* -- hole -- */
      (iw_handler) prism54_set_rate,      /* SIOCSIWRATE */
      (iw_handler) prism54_get_rate,      /* SIOCGIWRATE */
      (iw_handler) prism54_set_rts, /* SIOCSIWRTS */
      (iw_handler) prism54_get_rts, /* SIOCGIWRTS */
      (iw_handler) prism54_set_frag,      /* SIOCSIWFRAG */
      (iw_handler) prism54_get_frag,      /* SIOCGIWFRAG */
      (iw_handler) prism54_set_txpower,   /* SIOCSIWTXPOW */
      (iw_handler) prism54_get_txpower,   /* SIOCGIWTXPOW */
      (iw_handler) prism54_set_retry,     /* SIOCSIWRETRY */
      (iw_handler) prism54_get_retry,     /* SIOCGIWRETRY */
      (iw_handler) prism54_set_encode,    /* SIOCSIWENCODE */
      (iw_handler) prism54_get_encode,    /* SIOCGIWENCODE */
      (iw_handler) NULL,      /* SIOCSIWPOWER */
      (iw_handler) NULL,      /* SIOCGIWPOWER */
      NULL,             /* -- hole -- */
      NULL,             /* -- hole -- */
      (iw_handler) prism54_set_genie,     /* SIOCSIWGENIE */
      (iw_handler) prism54_get_genie,     /* SIOCGIWGENIE */
      (iw_handler) prism54_set_auth,      /* SIOCSIWAUTH */
      (iw_handler) prism54_get_auth,      /* SIOCGIWAUTH */
      (iw_handler) prism54_set_encodeext, /* SIOCSIWENCODEEXT */
      (iw_handler) prism54_get_encodeext, /* SIOCGIWENCODEEXT */
      NULL,             /* SIOCSIWPMKSA */
};

/* The low order bit identify a SET (0) or a GET (1) ioctl.  */

#define PRISM54_RESET         SIOCIWFIRSTPRIV
#define PRISM54_GET_POLICY    SIOCIWFIRSTPRIV+1
#define PRISM54_SET_POLICY    SIOCIWFIRSTPRIV+2
#define PRISM54_GET_MAC       SIOCIWFIRSTPRIV+3
#define PRISM54_ADD_MAC       SIOCIWFIRSTPRIV+4

#define PRISM54_DEL_MAC       SIOCIWFIRSTPRIV+6

#define PRISM54_KICK_MAC      SIOCIWFIRSTPRIV+8

#define PRISM54_KICK_ALL      SIOCIWFIRSTPRIV+10

#define PRISM54_GET_WPA       SIOCIWFIRSTPRIV+11
#define PRISM54_SET_WPA       SIOCIWFIRSTPRIV+12

#define PRISM54_DBG_OID       SIOCIWFIRSTPRIV+14
#define PRISM54_DBG_GET_OID   SIOCIWFIRSTPRIV+15
#define PRISM54_DBG_SET_OID   SIOCIWFIRSTPRIV+16

#define PRISM54_GET_OID       SIOCIWFIRSTPRIV+17
#define PRISM54_SET_OID_U32   SIOCIWFIRSTPRIV+18
#define     PRISM54_SET_OID_STR     SIOCIWFIRSTPRIV+20
#define     PRISM54_SET_OID_ADDR    SIOCIWFIRSTPRIV+22

#define PRISM54_GET_PRISMHDR  SIOCIWFIRSTPRIV+23
#define PRISM54_SET_PRISMHDR  SIOCIWFIRSTPRIV+24

#define IWPRIV_SET_U32(n,x)   { n, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "s_"x }
#define IWPRIV_SET_SSID(n,x)  { n, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | 1, 0, "s_"x }
#define IWPRIV_SET_ADDR(n,x)  { n, IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0, "s_"x }
#define IWPRIV_GET(n,x) { n, 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | PRIV_STR_SIZE, "g_"x }

#define IWPRIV_U32(n,x)       IWPRIV_SET_U32(n,x), IWPRIV_GET(n,x)
#define IWPRIV_SSID(n,x)      IWPRIV_SET_SSID(n,x), IWPRIV_GET(n,x)
#define IWPRIV_ADDR(n,x)      IWPRIV_SET_ADDR(n,x), IWPRIV_GET(n,x)

/* Note : limited to 128 private ioctls (wireless tools 26) */

static const struct iw_priv_args prism54_private_args[] = {
/*{ cmd, set_args, get_args, name } */
      {PRISM54_RESET, 0, 0, "reset"},
      {PRISM54_GET_PRISMHDR, 0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
       "get_prismhdr"},
      {PRISM54_SET_PRISMHDR, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0,
       "set_prismhdr"},
      {PRISM54_GET_POLICY, 0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
       "getPolicy"},
      {PRISM54_SET_POLICY, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0,
       "setPolicy"},
      {PRISM54_GET_MAC, 0, IW_PRIV_TYPE_ADDR | 64, "getMac"},
      {PRISM54_ADD_MAC, IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0,
       "addMac"},
      {PRISM54_DEL_MAC, IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0,
       "delMac"},
      {PRISM54_KICK_MAC, IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0,
       "kickMac"},
      {PRISM54_KICK_ALL, 0, 0, "kickAll"},
      {PRISM54_GET_WPA, 0, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
       "get_wpa"},
      {PRISM54_SET_WPA, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0,
       "set_wpa"},
      {PRISM54_DBG_OID, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0,
       "dbg_oid"},
      {PRISM54_DBG_GET_OID, 0, IW_PRIV_TYPE_BYTE | 256, "dbg_get_oid"},
      {PRISM54_DBG_SET_OID, IW_PRIV_TYPE_BYTE | 256, 0, "dbg_set_oid"},
      /* --- sub-ioctls handlers --- */
      {PRISM54_GET_OID,
       0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | PRIV_STR_SIZE, ""},
      {PRISM54_SET_OID_U32,
       IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, ""},
      {PRISM54_SET_OID_STR,
       IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | 1, 0, ""},
      {PRISM54_SET_OID_ADDR,
       IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1, 0, ""},
      /* --- sub-ioctls definitions --- */
      IWPRIV_ADDR(GEN_OID_MACADDRESS, "addr"),
      IWPRIV_GET(GEN_OID_LINKSTATE, "linkstate"),
      IWPRIV_U32(DOT11_OID_BSSTYPE, "bsstype"),
      IWPRIV_ADDR(DOT11_OID_BSSID, "bssid"),
      IWPRIV_U32(DOT11_OID_STATE, "state"),
      IWPRIV_U32(DOT11_OID_AID, "aid"),

      IWPRIV_SSID(DOT11_OID_SSIDOVERRIDE, "ssidoverride"),

      IWPRIV_U32(DOT11_OID_MEDIUMLIMIT, "medlimit"),
      IWPRIV_U32(DOT11_OID_BEACONPERIOD, "beacon"),
      IWPRIV_U32(DOT11_OID_DTIMPERIOD, "dtimperiod"),

      IWPRIV_U32(DOT11_OID_AUTHENABLE, "authenable"),
      IWPRIV_U32(DOT11_OID_PRIVACYINVOKED, "privinvok"),
      IWPRIV_U32(DOT11_OID_EXUNENCRYPTED, "exunencrypt"),

      IWPRIV_U32(DOT11_OID_REKEYTHRESHOLD, "rekeythresh"),

      IWPRIV_U32(DOT11_OID_MAXTXLIFETIME, "maxtxlife"),
      IWPRIV_U32(DOT11_OID_MAXRXLIFETIME, "maxrxlife"),
      IWPRIV_U32(DOT11_OID_ALOFT_FIXEDRATE, "fixedrate"),
      IWPRIV_U32(DOT11_OID_MAXFRAMEBURST, "frameburst"),
      IWPRIV_U32(DOT11_OID_PSM, "psm"),

      IWPRIV_U32(DOT11_OID_BRIDGELOCAL, "bridge"),
      IWPRIV_U32(DOT11_OID_CLIENTS, "clients"),
      IWPRIV_U32(DOT11_OID_CLIENTSASSOCIATED, "clientassoc"),
      IWPRIV_U32(DOT11_OID_DOT1XENABLE, "dot1xenable"),
      IWPRIV_U32(DOT11_OID_ANTENNARX, "rxant"),
      IWPRIV_U32(DOT11_OID_ANTENNATX, "txant"),
      IWPRIV_U32(DOT11_OID_ANTENNADIVERSITY, "antdivers"),
      IWPRIV_U32(DOT11_OID_EDTHRESHOLD, "edthresh"),
      IWPRIV_U32(DOT11_OID_PREAMBLESETTINGS, "preamble"),
      IWPRIV_GET(DOT11_OID_RATES, "rates"),
      IWPRIV_U32(DOT11_OID_OUTPUTPOWER, ".11outpower"),
      IWPRIV_GET(DOT11_OID_SUPPORTEDRATES, "supprates"),
      IWPRIV_GET(DOT11_OID_SUPPORTEDFREQUENCIES, "suppfreq"),

      IWPRIV_U32(DOT11_OID_NOISEFLOOR, "noisefloor"),
      IWPRIV_GET(DOT11_OID_FREQUENCYACTIVITY, "freqactivity"),
      IWPRIV_U32(DOT11_OID_NONERPPROTECTION, "nonerpprotec"),
      IWPRIV_U32(DOT11_OID_PROFILES, "profile"),
      IWPRIV_GET(DOT11_OID_EXTENDEDRATES, "extrates"),
      IWPRIV_U32(DOT11_OID_MLMEAUTOLEVEL, "mlmelevel"),

      IWPRIV_GET(DOT11_OID_BSSS, "bsss"),
      IWPRIV_GET(DOT11_OID_BSSLIST, "bsslist"),
      IWPRIV_U32(OID_INL_MODE, "mode"),
      IWPRIV_U32(OID_INL_CONFIG, "config"),
      IWPRIV_U32(OID_INL_DOT11D_CONFORMANCE, ".11dconform"),
      IWPRIV_GET(OID_INL_PHYCAPABILITIES, "phycapa"),
      IWPRIV_U32(OID_INL_OUTPUTPOWER, "outpower"),
};

static const iw_handler prism54_private_handler[] = {
      (iw_handler) prism54_reset,
      (iw_handler) prism54_get_policy,
      (iw_handler) prism54_set_policy,
      (iw_handler) prism54_get_mac,
      (iw_handler) prism54_add_mac,
      (iw_handler) NULL,
      (iw_handler) prism54_del_mac,
      (iw_handler) NULL,
      (iw_handler) prism54_kick_mac,
      (iw_handler) NULL,
      (iw_handler) prism54_kick_all,
      (iw_handler) prism54_get_wpa,
      (iw_handler) prism54_set_wpa,
      (iw_handler) NULL,
      (iw_handler) prism54_debug_oid,
      (iw_handler) prism54_debug_get_oid,
      (iw_handler) prism54_debug_set_oid,
      (iw_handler) prism54_get_oid,
      (iw_handler) prism54_set_u32,
      (iw_handler) NULL,
      (iw_handler) prism54_set_raw,
      (iw_handler) NULL,
      (iw_handler) prism54_set_raw,
      (iw_handler) prism54_get_prismhdr,
      (iw_handler) prism54_set_prismhdr,
};

const struct iw_handler_def prism54_handler_def = {
      .num_standard = ARRAY_SIZE(prism54_handler),
      .num_private = ARRAY_SIZE(prism54_private_handler),
      .num_private_args = ARRAY_SIZE(prism54_private_args),
      .standard = (iw_handler *) prism54_handler,
      .private = (iw_handler *) prism54_private_handler,
      .private_args = (struct iw_priv_args *) prism54_private_args,
      .get_wireless_stats = prism54_get_wireless_stats,
};

/* For wpa_supplicant */

int
prism54_ioctl(struct net_device *ndev, struct ifreq *rq, int cmd)
{
      struct iwreq *wrq = (struct iwreq *) rq;
      int ret = -1;
      switch (cmd) {
            case PRISM54_HOSTAPD:
            if (!capable(CAP_NET_ADMIN))
            return -EPERM;
            ret = prism54_hostapd(ndev, &wrq->u.data);
            return ret;
      }
      return -EOPNOTSUPP;
}

Generated by  Doxygen 1.6.0   Back to index