1 /******************************************************************************
2  *
3  * Copyright(c) 2009-2010  Realtek Corporation.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  * The full GNU General Public License is included in this distribution in the
19  * file called LICENSE.
20  *
21  * Contact Information:
22  * wlanfae <wlanfae@realtek.com>
23  * Realtek Corporation, No. 2, Innovation Road II, Hsinchu Science Park,
24  * Hsinchu 300, Taiwan.
25  *
26  * Larry Finger <Larry.Finger@lwfinger.net>
27  *
28  *****************************************************************************/
29 #ifndef __REALTEK_FIRMWARE92S_H__
30 #define __REALTEK_FIRMWARE92S_H__
31 
32 #define RTL8190_MAX_FIRMWARE_CODE_SIZE		64000
33 #define RTL8190_CPU_START_OFFSET		0x80
34 /* Firmware Local buffer size. 64k */
35 #define	MAX_FIRMWARE_CODE_SIZE			0xFF00
36 
37 #define	RT_8192S_FIRMWARE_HDR_SIZE		80
38 #define RT_8192S_FIRMWARE_HDR_EXCLUDE_PRI_SIZE	32
39 
40 /* support till 64 bit bus width OS */
41 #define MAX_DEV_ADDR_SIZE			8
42 #define MAX_FIRMWARE_INFORMATION_SIZE		32
43 #define MAX_802_11_HEADER_LENGTH		(40 + \
44 						MAX_FIRMWARE_INFORMATION_SIZE)
45 #define ENCRYPTION_MAX_OVERHEAD			128
46 #define MAX_FRAGMENT_COUNT			8
47 #define MAX_TRANSMIT_BUFFER_SIZE		(1600 + \
48 						(MAX_802_11_HEADER_LENGTH + \
49 						ENCRYPTION_MAX_OVERHEAD) *\
50 						MAX_FRAGMENT_COUNT)
51 
52 #define H2C_TX_CMD_HDR_LEN			8
53 
54 /* The following DM control code are for Reg0x364, */
55 #define	FW_DIG_ENABLE_CTL			BIT(0)
56 #define	FW_HIGH_PWR_ENABLE_CTL			BIT(1)
57 #define	FW_SS_CTL				BIT(2)
58 #define	FW_RA_INIT_CTL				BIT(3)
59 #define	FW_RA_BG_CTL				BIT(4)
60 #define	FW_RA_N_CTL				BIT(5)
61 #define	FW_PWR_TRK_CTL				BIT(6)
62 #define	FW_IQK_CTL				BIT(7)
63 #define	FW_FA_CTL				BIT(8)
64 #define	FW_DRIVER_CTRL_DM_CTL			BIT(9)
65 #define	FW_PAPE_CTL_BY_SW_HW			BIT(10)
66 #define	FW_DISABLE_ALL_DM			0
67 #define	FW_PWR_TRK_PARAM_CLR			0x0000ffff
68 #define	FW_RA_PARAM_CLR				0xffff0000
69 
70 enum desc_packet_type {
71 	DESC_PACKET_TYPE_INIT = 0,
72 	DESC_PACKET_TYPE_NORMAL = 1,
73 };
74 
75 /* 8-bytes alignment required */
76 struct fw_priv {
77 	/* --- long word 0 ---- */
78 	/* 0x12: CE product, 0x92: IT product */
79 	u8 signature_0;
80 	/* 0x87: CE product, 0x81: IT product */
81 	u8 signature_1;
82 	/* 0x81: PCI-AP, 01:PCIe, 02: 92S-U,
83 	 * 0x82: USB-AP, 0x12: 72S-U, 03:SDIO */
84 	u8 hci_sel;
85 	/* the same value as reigster value  */
86 	u8 chip_version;
87 	/* customer  ID low byte */
88 	u8 customer_id_0;
89 	/* customer  ID high byte */
90 	u8 customer_id_1;
91 	/* 0x11:  1T1R, 0x12: 1T2R,
92 	 * 0x92: 1T2R turbo, 0x22: 2T2R */
93 	u8 rf_config;
94 	/* 4: 4EP, 6: 6EP, 11: 11EP */
95 	u8 usb_ep_num;
96 
97 	/* --- long word 1 ---- */
98 	/* regulatory class bit map 0 */
99 	u8 regulatory_class_0;
100 	/* regulatory class bit map 1 */
101 	u8 regulatory_class_1;
102 	/* regulatory class bit map 2 */
103 	u8 regulatory_class_2;
104 	/* regulatory class bit map 3 */
105 	u8 regulatory_class_3;
106 	/* 0:SWSI, 1:HWSI, 2:HWPI */
107 	u8 rfintfs;
108 	u8 def_nettype;
109 	u8 rsvd010;
110 	u8 rsvd011;
111 
112 	/* --- long word 2 ---- */
113 	/* 0x00: normal, 0x03: MACLBK, 0x01: PHYLBK */
114 	u8 lbk_mode;
115 	/* 1: for MP use, 0: for normal
116 	 * driver (to be discussed) */
117 	u8 mp_mode;
118 	u8 rsvd020;
119 	u8 rsvd021;
120 	u8 rsvd022;
121 	u8 rsvd023;
122 	u8 rsvd024;
123 	u8 rsvd025;
124 
125 	/* --- long word 3 ---- */
126 	/* QoS enable */
127 	u8 qos_en;
128 	/* 40MHz BW enable */
129 	/* 4181 convert AMSDU to AMPDU, 0: disable */
130 	u8 bw_40mhz_en;
131 	u8 amsdu2ampdu_en;
132 	/* 11n AMPDU enable */
133 	u8 ampdu_en;
134 	/* FW offloads, 0: driver handles */
135 	u8 rate_control_offload;
136 	/* FW offloads, 0: driver handles */
137 	u8 aggregation_offload;
138 	u8 rsvd030;
139 	u8 rsvd031;
140 
141 	/* --- long word 4 ---- */
142 	/* 1. FW offloads, 0: driver handles */
143 	u8 beacon_offload;
144 	/* 2. FW offloads, 0: driver handles */
145 	u8 mlme_offload;
146 	/* 3. FW offloads, 0: driver handles */
147 	u8 hwpc_offload;
148 	/* 4. FW offloads, 0: driver handles */
149 	u8 tcp_checksum_offload;
150 	/* 5. FW offloads, 0: driver handles */
151 	u8 tcp_offload;
152 	/* 6. FW offloads, 0: driver handles */
153 	u8 ps_control_offload;
154 	/* 7. FW offloads, 0: driver handles */
155 	u8 wwlan_offload;
156 	u8 rsvd040;
157 
158 	/* --- long word 5 ---- */
159 	/* tcp tx packet length low byte */
160 	u8 tcp_tx_frame_len_L;
161 	/* tcp tx packet length high byte */
162 	u8 tcp_tx_frame_len_H;
163 	/* tcp rx packet length low byte */
164 	u8 tcp_rx_frame_len_L;
165 	/* tcp rx packet length high byte */
166 	u8 tcp_rx_frame_len_H;
167 	u8 rsvd050;
168 	u8 rsvd051;
169 	u8 rsvd052;
170 	u8 rsvd053;
171 };
172 
173 /* 8-byte alinment required */
174 struct fw_hdr {
175 
176 	/* --- LONG WORD 0 ---- */
177 	u16 signature;
178 	/* 0x8000 ~ 0x8FFF for FPGA version,
179 	 * 0x0000 ~ 0x7FFF for ASIC version, */
180 	u16 version;
181 	/* define the size of boot loader */
182 	u32 dmem_size;
183 
184 
185 	/* --- LONG WORD 1 ---- */
186 	/* define the size of FW in IMEM */
187 	u32 img_imem_size;
188 	/* define the size of FW in SRAM */
189 	u32 img_sram_size;
190 
191 	/* --- LONG WORD 2 ---- */
192 	/* define the size of DMEM variable */
193 	u32 fw_priv_size;
194 	u32 rsvd0;
195 
196 	/* --- LONG WORD 3 ---- */
197 	u32 rsvd1;
198 	u32 rsvd2;
199 
200 	struct fw_priv fwpriv;
201 
202 } ;
203 
204 enum fw_status {
205 	FW_STATUS_INIT = 0,
206 	FW_STATUS_LOAD_IMEM = 1,
207 	FW_STATUS_LOAD_EMEM = 2,
208 	FW_STATUS_LOAD_DMEM = 3,
209 	FW_STATUS_READY = 4,
210 };
211 
212 struct rt_firmware {
213 	struct fw_hdr *pfwheader;
214 	enum fw_status fwstatus;
215 	u16 firmwareversion;
216 	u8 fw_imem[RTL8190_MAX_FIRMWARE_CODE_SIZE];
217 	u8 fw_emem[RTL8190_MAX_FIRMWARE_CODE_SIZE];
218 	u32 fw_imem_len;
219 	u32 fw_emem_len;
220 	u8 sz_fw_tmpbuffer[164000];
221 	u32 sz_fw_tmpbufferlen;
222 	u16 cmdpacket_fragthresold;
223 };
224 
225 struct h2c_set_pwrmode_parm {
226 	u8 mode;
227 	u8 flag_low_traffic_en;
228 	u8 flag_lpnav_en;
229 	u8 flag_rf_low_snr_en;
230 	/* 1: dps, 0: 32k */
231 	u8 flag_dps_en;
232 	u8 bcn_rx_en;
233 	u8 bcn_pass_cnt;
234 	/* beacon TO (ms). ¡§=0¡¨ no limit. */
235 	u8 bcn_to;
236 	u16	bcn_itv;
237 	/* only for VOIP mode. */
238 	u8 app_itv;
239 	u8 awake_bcn_itvl;
240 	u8 smart_ps;
241 	/* unit: 100 ms */
242 	u8 bcn_pass_period;
243 };
244 
245 struct h2c_joinbss_rpt_parm {
246 	u8 opmode;
247 	u8 ps_qos_info;
248 	u8 bssid[6];
249 	u16 bcnitv;
250 	u16 aid;
251 } ;
252 
253 struct h2c_wpa_ptk {
254 	/* EAPOL-Key Key Confirmation Key (KCK) */
255 	u8 kck[16];
256 	/* EAPOL-Key Key Encryption Key (KEK) */
257 	u8 kek[16];
258 	/* Temporal Key 1 (TK1) */
259 	u8 tk1[16];
260 	union {
261 		/* Temporal Key 2 (TK2) */
262 		u8 tk2[16];
263 		struct {
264 			u8 tx_mic_key[8];
265 			u8 rx_mic_key[8];
266 		} athu;
267 	} u;
268 };
269 
270 struct h2c_wpa_two_way_parm {
271 	/* algorithm TKIP or AES */
272 	u8 pairwise_en_alg;
273 	u8 group_en_alg;
274 	struct h2c_wpa_ptk wpa_ptk_value;
275 } ;
276 
277 enum h2c_cmd {
278 	FW_H2C_SETPWRMODE = 0,
279 	FW_H2C_JOINBSSRPT = 1,
280 	FW_H2C_WOWLAN_UPDATE_GTK = 2,
281 	FW_H2C_WOWLAN_UPDATE_IV = 3,
282 	FW_H2C_WOWLAN_OFFLOAD = 4,
283 };
284 
285 enum fw_h2c_cmd {
286 	H2C_READ_MACREG_CMD,				/*0*/
287 	H2C_WRITE_MACREG_CMD,
288 	H2C_READBB_CMD,
289 	H2C_WRITEBB_CMD,
290 	H2C_READRF_CMD,
291 	H2C_WRITERF_CMD,				/*5*/
292 	H2C_READ_EEPROM_CMD,
293 	H2C_WRITE_EEPROM_CMD,
294 	H2C_READ_EFUSE_CMD,
295 	H2C_WRITE_EFUSE_CMD,
296 	H2C_READ_CAM_CMD,				/*10*/
297 	H2C_WRITE_CAM_CMD,
298 	H2C_SETBCNITV_CMD,
299 	H2C_SETMBIDCFG_CMD,
300 	H2C_JOINBSS_CMD,
301 	H2C_DISCONNECT_CMD,				/*15*/
302 	H2C_CREATEBSS_CMD,
303 	H2C_SETOPMode_CMD,
304 	H2C_SITESURVEY_CMD,
305 	H2C_SETAUTH_CMD,
306 	H2C_SETKEY_CMD,					/*20*/
307 	H2C_SETSTAKEY_CMD,
308 	H2C_SETASSOCSTA_CMD,
309 	H2C_DELASSOCSTA_CMD,
310 	H2C_SETSTAPWRSTATE_CMD,
311 	H2C_SETBASICRATE_CMD,				/*25*/
312 	H2C_GETBASICRATE_CMD,
313 	H2C_SETDATARATE_CMD,
314 	H2C_GETDATARATE_CMD,
315 	H2C_SETPHYINFO_CMD,
316 	H2C_GETPHYINFO_CMD,				/*30*/
317 	H2C_SETPHY_CMD,
318 	H2C_GETPHY_CMD,
319 	H2C_READRSSI_CMD,
320 	H2C_READGAIN_CMD,
321 	H2C_SETATIM_CMD,				/*35*/
322 	H2C_SETPWRMODE_CMD,
323 	H2C_JOINBSSRPT_CMD,
324 	H2C_SETRATABLE_CMD,
325 	H2C_GETRATABLE_CMD,
326 	H2C_GETCCXREPORT_CMD,				/*40*/
327 	H2C_GETDTMREPORT_CMD,
328 	H2C_GETTXRATESTATICS_CMD,
329 	H2C_SETUSBSUSPEND_CMD,
330 	H2C_SETH2CLBK_CMD,
331 	H2C_TMP1,					/*45*/
332 	H2C_WOWLAN_UPDATE_GTK_CMD,
333 	H2C_WOWLAN_FW_OFFLOAD,
334 	H2C_TMP2,
335 	H2C_TMP3,
336 	H2C_WOWLAN_UPDATE_IV_CMD,			/*50*/
337 	H2C_TMP4,
338 	MAX_H2CCMD					/*52*/
339 };
340 
341 /* The following macros are used for FW
342  * CMD map and parameter updated. */
343 #define FW_CMD_IO_CLR(rtlpriv, _Bit)				\
344 	do {							\
345 		udelay(1000);					\
346 		rtlpriv->rtlhal.fwcmd_iomap &= (~_Bit);		\
347 	} while (0);
348 
349 #define FW_CMD_IO_UPDATE(rtlpriv, _val)				\
350 	rtlpriv->rtlhal.fwcmd_iomap = _val;
351 
352 #define FW_CMD_IO_SET(rtlpriv, _val)				\
353 	do {							\
354 		rtl_write_word(rtlpriv, LBUS_MON_ADDR, (u16)_val);	\
355 		FW_CMD_IO_UPDATE(rtlpriv, _val);		\
356 	} while (0);
357 
358 #define FW_CMD_PARA_SET(rtlpriv, _val)				\
359 	do {							\
360 		rtl_write_dword(rtlpriv, LBUS_ADDR_MASK, _val);	\
361 		rtlpriv->rtlhal.fwcmd_ioparam = _val;		\
362 	} while (0);
363 
364 #define FW_CMD_IO_QUERY(rtlpriv)				\
365 	(u16)(rtlpriv->rtlhal.fwcmd_iomap)
366 #define FW_CMD_IO_PARA_QUERY(rtlpriv)				\
367 	((u32)(rtlpriv->rtlhal.fwcmd_ioparam))
368 
369 int rtl92s_download_fw(struct ieee80211_hw *hw);
370 void rtl92s_set_fw_pwrmode_cmd(struct ieee80211_hw *hw, u8 mode);
371 void rtl92s_set_fw_joinbss_report_cmd(struct ieee80211_hw *hw,
372 				      u8 mstatus, u8 ps_qosinfo);
373 
374 #endif
375 
376