libertas: don't exit worker thread until kthread_stop() is called
[cascardo/linux.git] / drivers / net / wireless / libertas / main.c
index d03a2f8..b51513f 100644 (file)
@@ -6,7 +6,6 @@
 
 #include <linux/moduleparam.h>
 #include <linux/delay.h>
-#include <linux/freezer.h>
 #include <linux/etherdevice.h>
 #include <linux/netdevice.h>
 #include <linux/if_arp.h>
@@ -22,6 +21,7 @@
 #include "debugfs.h"
 #include "assoc.h"
 #include "join.h"
+#include "cmd.h"
 
 #define DRIVER_RELEASE_VERSION "323.p0"
 const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
@@ -216,13 +216,15 @@ u8 lbs_data_rate_to_fw_index(u32 rate)
 static ssize_t lbs_anycast_get(struct device *dev,
                struct device_attribute *attr, char * buf)
 {
+       struct lbs_private *priv = to_net_dev(dev)->priv;
        struct cmd_ds_mesh_access mesh_access;
+       int ret;
 
        memset(&mesh_access, 0, sizeof(mesh_access));
-       lbs_prepare_and_send_command(to_net_dev(dev)->priv,
-                       CMD_MESH_ACCESS,
-                       CMD_ACT_MESH_GET_ANYCAST,
-                       CMD_OPTION_WAITFORRSP, 0, (void *)&mesh_access);
+
+       ret = lbs_mesh_access(priv, CMD_ACT_MESH_GET_ANYCAST, &mesh_access);
+       if (ret)
+               return ret;
 
        return snprintf(buf, 12, "0x%X\n", le32_to_cpu(mesh_access.data[0]));
 }
@@ -233,22 +235,27 @@ static ssize_t lbs_anycast_get(struct device *dev,
 static ssize_t lbs_anycast_set(struct device *dev,
                struct device_attribute *attr, const char * buf, size_t count)
 {
+       struct lbs_private *priv = to_net_dev(dev)->priv;
        struct cmd_ds_mesh_access mesh_access;
        uint32_t datum;
+       int ret;
 
        memset(&mesh_access, 0, sizeof(mesh_access));
        sscanf(buf, "%x", &datum);
        mesh_access.data[0] = cpu_to_le32(datum);
 
-       lbs_prepare_and_send_command((to_net_dev(dev))->priv,
-                       CMD_MESH_ACCESS,
-                       CMD_ACT_MESH_SET_ANYCAST,
-                       CMD_OPTION_WAITFORRSP, 0, (void *)&mesh_access);
+       ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_ANYCAST, &mesh_access);
+       if (ret)
+               return ret;
+
        return strlen(buf);
 }
 
-int lbs_add_rtap(struct lbs_private *priv);
-void lbs_remove_rtap(struct lbs_private *priv);
+static int lbs_add_rtap(struct lbs_private *priv);
+static void lbs_remove_rtap(struct lbs_private *priv);
+static int lbs_add_mesh(struct lbs_private *priv);
+static void lbs_remove_mesh(struct lbs_private *priv);
+  
 
 /**
  * Get function for sysfs attribute rtap
@@ -257,8 +264,7 @@ static ssize_t lbs_rtap_get(struct device *dev,
                struct device_attribute *attr, char * buf)
 {
        struct lbs_private *priv = to_net_dev(dev)->priv;
-       struct lbs_adapter *adapter = priv->adapter;
-       return snprintf(buf, 5, "0x%X\n", adapter->monitormode);
+       return snprintf(buf, 5, "0x%X\n", priv->monitormode);
 }
 
 /**
@@ -269,92 +275,101 @@ static ssize_t lbs_rtap_set(struct device *dev,
 {
        int monitor_mode;
        struct lbs_private *priv = to_net_dev(dev)->priv;
-       struct lbs_adapter *adapter = priv->adapter;
 
        sscanf(buf, "%x", &monitor_mode);
        if (monitor_mode != LBS_MONITOR_OFF) {
-               if(adapter->monitormode == monitor_mode)
+               if(priv->monitormode == monitor_mode)
                        return strlen(buf);
-               if (adapter->monitormode == LBS_MONITOR_OFF) {
-                       if (adapter->mode == IW_MODE_INFRA)
+               if (priv->monitormode == LBS_MONITOR_OFF) {
+                       if (priv->infra_open || priv->mesh_open)
+                               return -EBUSY;
+                       if (priv->mode == IW_MODE_INFRA)
                                lbs_send_deauthentication(priv);
-                       else if (adapter->mode == IW_MODE_ADHOC)
+                       else if (priv->mode == IW_MODE_ADHOC)
                                lbs_stop_adhoc_network(priv);
                        lbs_add_rtap(priv);
                }
-               adapter->monitormode = monitor_mode;
+               priv->monitormode = monitor_mode;
        }
 
        else {
-               if (adapter->monitormode == LBS_MONITOR_OFF)
+               if (priv->monitormode == LBS_MONITOR_OFF)
                        return strlen(buf);
-               adapter->monitormode = LBS_MONITOR_OFF;
+               priv->monitormode = LBS_MONITOR_OFF;
                lbs_remove_rtap(priv);
-               netif_wake_queue(priv->dev);
-               netif_wake_queue(priv->mesh_dev);
+
+               if (priv->currenttxskb) {
+                       dev_kfree_skb_any(priv->currenttxskb);
+                       priv->currenttxskb = NULL;
+               }
+
+               /* Wake queues, command thread, etc. */
+               lbs_host_to_card_done(priv);
        }
 
        lbs_prepare_and_send_command(priv,
                        CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
-                       CMD_OPTION_WAITFORRSP, 0, &adapter->monitormode);
+                       CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
        return strlen(buf);
 }
 
 /**
- * lbs_rtap attribute to be exported per mshX interface
- * through sysfs (/sys/class/net/mshX/libertas-rtap)
+ * lbs_rtap attribute to be exported per ethX interface
+ * through sysfs (/sys/class/net/ethX/lbs_rtap)
  */
-static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get,
-               lbs_rtap_set );
+static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );
 
 /**
- * anycast_mask attribute to be exported per mshX interface
- * through sysfs (/sys/class/net/mshX/anycast_mask)
+ * Get function for sysfs attribute mesh
  */
-static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
-
-static ssize_t lbs_autostart_enabled_get(struct device *dev,
+static ssize_t lbs_mesh_get(struct device *dev,
                struct device_attribute *attr, char * buf)
 {
-       struct cmd_ds_mesh_access mesh_access;
-
-       memset(&mesh_access, 0, sizeof(mesh_access));
-       lbs_prepare_and_send_command(to_net_dev(dev)->priv,
-                       CMD_MESH_ACCESS,
-                       CMD_ACT_MESH_GET_AUTOSTART_ENABLED,
-                       CMD_OPTION_WAITFORRSP, 0, (void *)&mesh_access);
-
-       return sprintf(buf, "%d\n", le32_to_cpu(mesh_access.data[0]));
+       struct lbs_private *priv = to_net_dev(dev)->priv;
+       return snprintf(buf, 5, "0x%X\n", !!priv->mesh_dev);
 }
 
-static ssize_t lbs_autostart_enabled_set(struct device *dev,
+/**
+ *  Set function for sysfs attribute mesh
+ */
+static ssize_t lbs_mesh_set(struct device *dev,
                struct device_attribute *attr, const char * buf, size_t count)
 {
-       struct cmd_ds_mesh_access mesh_access;
-       uint32_t datum;
-       struct lbs_private *priv = (to_net_dev(dev))->priv;
+       struct lbs_private *priv = to_net_dev(dev)->priv;
+       int enable;
        int ret;
 
-       memset(&mesh_access, 0, sizeof(mesh_access));
-       sscanf(buf, "%d", &datum);
-       mesh_access.data[0] = cpu_to_le32(datum);
+       sscanf(buf, "%x", &enable);
+       enable = !!enable;
+       if (enable == !!priv->mesh_dev)
+               return count;
 
-       ret = lbs_prepare_and_send_command(priv,
-                       CMD_MESH_ACCESS,
-                       CMD_ACT_MESH_SET_AUTOSTART_ENABLED,
-                       CMD_OPTION_WAITFORRSP, 0, (void *)&mesh_access);
-       if (ret == 0)
-               priv->mesh_autostart_enabled = datum ? 1 : 0;
+       ret = lbs_mesh_config(priv, enable, priv->curbssparams.channel);
+       if (ret)
+               return ret;
+               
+       if (enable)
+               lbs_add_mesh(priv);
+       else
+               lbs_remove_mesh(priv);
 
-       return strlen(buf);
+       return count;
 }
 
-static DEVICE_ATTR(autostart_enabled, 0644,
-               lbs_autostart_enabled_get, lbs_autostart_enabled_set);
+/**
+ * lbs_mesh attribute to be exported per ethX interface
+ * through sysfs (/sys/class/net/ethX/lbs_mesh)
+ */
+static DEVICE_ATTR(lbs_mesh, 0644, lbs_mesh_get, lbs_mesh_set);
+
+/**
+ * anycast_mask attribute to be exported per mshX interface
+ * through sysfs (/sys/class/net/mshX/anycast_mask)
+ */
+static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
 
 static struct attribute *lbs_mesh_sysfs_entries[] = {
        &dev_attr_anycast_mask.attr,
-       &dev_attr_autostart_enabled.attr,
        NULL,
 };
 
@@ -363,118 +378,42 @@ static struct attribute_group lbs_mesh_attr_group = {
 };
 
 /**
- *  @brief Check if the device can be open and wait if necessary.
- *
- *  @param dev     A pointer to net_device structure
- *  @return       0
- *
- * For USB adapter, on some systems the device open handler will be
- * called before FW ready. Use the following flag check and wait
- * function to work around the issue.
- *
- */
-static int pre_open_check(struct net_device *dev)
-{
-       struct lbs_private *priv = (struct lbs_private *) dev->priv;
-       struct lbs_adapter *adapter = priv->adapter;
-       int i = 0;
-
-       while (!adapter->fw_ready && i < 20) {
-               i++;
-               msleep_interruptible(100);
-       }
-       if (!adapter->fw_ready) {
-               lbs_pr_err("firmware not ready\n");
-               return -1;
-       }
-
-       return 0;
-}
-
-/**
- *  @brief This function opens the device
+ *  @brief This function opens the ethX or mshX interface
  *
  *  @param dev     A pointer to net_device structure
- *  @return       0
+ *  @return       0 or -EBUSY if monitor mode active
  */
 static int lbs_dev_open(struct net_device *dev)
 {
-       struct lbs_private *priv = (struct lbs_private *) dev->priv;
-       struct lbs_adapter *adapter = priv->adapter;
-
-       lbs_deb_enter(LBS_DEB_NET);
+       struct lbs_private *priv = (struct lbs_private *) dev->priv ;
+       int ret = 0;
 
-       priv->open = 1;
+       spin_lock_irq(&priv->driver_lock);
 
-       if (adapter->connect_status == LBS_CONNECTED)
-               netif_carrier_on(priv->dev);
-       else
-               netif_carrier_off(priv->dev);
+       if (priv->monitormode != LBS_MONITOR_OFF) {
+               ret = -EBUSY;
+               goto out;
+       }
 
-       if (priv->mesh_dev) {
-               if (adapter->mesh_connect_status == LBS_CONNECTED)
-                       netif_carrier_on(priv->mesh_dev);
+       if (dev == priv->mesh_dev) {
+               priv->mesh_open = 1;
+               priv->mesh_connect_status = LBS_CONNECTED;
+               netif_carrier_on(dev);
+       } else {
+               priv->infra_open = 1;
+               
+               if (priv->connect_status == LBS_CONNECTED)
+                       netif_carrier_on(dev);
                else
-                       netif_carrier_off(priv->mesh_dev);
+                       netif_carrier_off(dev);
        }
 
-       lbs_deb_leave(LBS_DEB_NET);
-       return 0;
-}
-/**
- *  @brief This function opens the mshX interface
- *
- *  @param dev     A pointer to net_device structure
- *  @return       0
- */
-static int lbs_mesh_open(struct net_device *dev)
-{
-       struct lbs_private *priv = (struct lbs_private *) dev->priv ;
-
-       if (pre_open_check(dev) == -1)
-               return -1;
-       priv->mesh_open = 1 ;
-       netif_wake_queue(priv->mesh_dev);
-
-       priv->adapter->mesh_connect_status = LBS_CONNECTED;
-
-       netif_carrier_on(priv->mesh_dev);
-       netif_wake_queue(priv->mesh_dev);
-       if (priv->infra_open == 0)
-               return lbs_dev_open(priv->dev) ;
-       return 0;
-}
-
-/**
- *  @brief This function opens the ethX interface
- *
- *  @param dev     A pointer to net_device structure
- *  @return       0
- */
-static int lbs_open(struct net_device *dev)
-{
-       struct lbs_private *priv = (struct lbs_private *) dev->priv ;
-
-       if(pre_open_check(dev) == -1)
-               return -1;
-       priv->infra_open = 1 ;
-       netif_wake_queue(priv->dev);
-       if (priv->open == 0)
-               return lbs_dev_open(priv->dev) ;
-       return 0;
-}
-
-static int lbs_dev_close(struct net_device *dev)
-{
-       struct lbs_private *priv = dev->priv;
-
-       lbs_deb_enter(LBS_DEB_NET);
-
-       netif_carrier_off(priv->dev);
-       priv->open = 0;
+       if (!priv->tx_pending_len)
+               netif_wake_queue(dev);
+ out:
 
-       lbs_deb_leave(LBS_DEB_NET);
-       return 0;
+       spin_unlock_irq(&priv->driver_lock);
+       return ret;
 }
 
 /**
@@ -483,16 +422,20 @@ static int lbs_dev_close(struct net_device *dev)
  *  @param dev     A pointer to net_device structure
  *  @return       0
  */
-static int lbs_mesh_close(struct net_device *dev)
+static int lbs_mesh_stop(struct net_device *dev)
 {
        struct lbs_private *priv = (struct lbs_private *) (dev->priv);
 
+       spin_lock_irq(&priv->driver_lock);
+
        priv->mesh_open = 0;
-       netif_stop_queue(priv->mesh_dev);
-       if (priv->infra_open == 0)
-               return lbs_dev_close(dev);
-       else
-               return 0;
+       priv->mesh_connect_status = LBS_DISCONNECTED;
+
+       netif_stop_queue(dev);
+       netif_carrier_off(dev);
+       
+       spin_unlock_irq(&priv->driver_lock);
+       return 0;
 }
 
 /**
@@ -501,86 +444,18 @@ static int lbs_mesh_close(struct net_device *dev)
  *  @param dev     A pointer to net_device structure
  *  @return       0
  */
-static int lbs_close(struct net_device *dev)
+static int lbs_eth_stop(struct net_device *dev)
 {
        struct lbs_private *priv = (struct lbs_private *) dev->priv;
 
-       netif_stop_queue(dev);
-       priv->infra_open = 0;
-       if (priv->mesh_open == 0)
-               return lbs_dev_close(dev);
-       else
-               return 0;
-}
-
+       spin_lock_irq(&priv->driver_lock);
 
-static int lbs_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
-{
-       int ret = 0;
-       struct lbs_private *priv = dev->priv;
-
-       lbs_deb_enter(LBS_DEB_TX);
-
-       if (priv->dnld_sent || priv->adapter->TxLockFlag) {
-               priv->stats.tx_dropped++;
-               goto done;
-       }
-
-       netif_stop_queue(priv->dev);
-       if (priv->mesh_dev)
-               netif_stop_queue(priv->mesh_dev);
-
-       if (lbs_process_tx(priv, skb) == 0)
-               dev->trans_start = jiffies;
-done:
-       lbs_deb_leave_args(LBS_DEB_TX, "ret %d", ret);
-       return ret;
-}
-
-/**
- * @brief Mark mesh packets and handover them to lbs_hard_start_xmit
- *
- */
-static int lbs_mesh_pre_start_xmit(struct sk_buff *skb,
-               struct net_device *dev)
-{
-       struct lbs_private *priv = dev->priv;
-       int ret;
-
-       lbs_deb_enter(LBS_DEB_MESH);
-       if (priv->adapter->monitormode != LBS_MONITOR_OFF) {
-               netif_stop_queue(dev);
-               return -EOPNOTSUPP;
-       }
-
-       SET_MESH_FRAME(skb);
-
-       ret = lbs_hard_start_xmit(skb, priv->mesh_dev);
-       lbs_deb_leave_args(LBS_DEB_MESH, "ret %d", ret);
-       return ret;
-}
-
-/**
- * @brief Mark non-mesh packets and handover them to lbs_hard_start_xmit
- *
- */
-static int lbs_pre_start_xmit(struct sk_buff *skb, struct net_device *dev)
-{
-       struct lbs_private *priv = dev->priv;
-       int ret;
-
-       lbs_deb_enter(LBS_DEB_TX);
-
-       if (priv->adapter->monitormode != LBS_MONITOR_OFF) {
-               netif_stop_queue(dev);
-               return -EOPNOTSUPP;
-       }
-
-       UNSET_MESH_FRAME(skb);
+       priv->infra_open = 0;
 
-       ret = lbs_hard_start_xmit(skb, dev);
-       lbs_deb_leave_args(LBS_DEB_TX, "ret %d", ret);
-       return ret;
+       netif_stop_queue(dev);
+       
+       spin_unlock_irq(&priv->driver_lock);
+       return 0;
 }
 
 static void lbs_tx_timeout(struct net_device *dev)
@@ -591,44 +466,32 @@ static void lbs_tx_timeout(struct net_device *dev)
 
        lbs_pr_err("tx watch dog timeout\n");
 
-       priv->dnld_sent = DNLD_RES_RECEIVED;
        dev->trans_start = jiffies;
 
-       if (priv->adapter->currenttxskb) {
-               if (priv->adapter->monitormode != LBS_MONITOR_OFF) {
-                       /* If we are here, we have not received feedback from
-                          the previous packet.  Assume TX_FAIL and move on. */
-                       priv->adapter->eventcause = 0x01000000;
-                       lbs_send_tx_feedback(priv);
-               } else
-                       wake_up_interruptible(&priv->waitq);
-       } else if (dev == priv->dev) {
-               if (priv->adapter->connect_status == LBS_CONNECTED)
-                       netif_wake_queue(priv->dev);
-
-       } else if (dev == priv->mesh_dev) {
-               if (priv->adapter->mesh_connect_status == LBS_CONNECTED)
-                       netif_wake_queue(priv->mesh_dev);
+       if (priv->currenttxskb) {
+               priv->eventcause = 0x01000000;
+               lbs_send_tx_feedback(priv);
        }
+       /* XX: Shouldn't we also call into the hw-specific driver
+          to kick it somehow? */
+       lbs_host_to_card_done(priv);
 
        lbs_deb_leave(LBS_DEB_TX);
 }
 
 void lbs_host_to_card_done(struct lbs_private *priv)
 {
-       struct lbs_adapter *adapter = priv->adapter;
+       unsigned long flags;
+
+       spin_lock_irqsave(&priv->driver_lock, flags);
 
        priv->dnld_sent = DNLD_RES_RECEIVED;
 
        /* Wake main thread if commands are pending */
-       if (!adapter->cur_cmd)
+       if (!priv->cur_cmd || priv->tx_pending_len > 0)
                wake_up_interruptible(&priv->waitq);
 
-       if (priv->dev && adapter->connect_status == LBS_CONNECTED)
-               netif_wake_queue(priv->dev);
-
-       if (priv->mesh_dev && adapter->mesh_connect_status == LBS_CONNECTED)
-               netif_wake_queue(priv->mesh_dev);
+       spin_unlock_irqrestore(&priv->driver_lock, flags);
 }
 EXPORT_SYMBOL_GPL(lbs_host_to_card_done);
 
@@ -649,7 +512,6 @@ static int lbs_set_mac_address(struct net_device *dev, void *addr)
 {
        int ret = 0;
        struct lbs_private *priv = (struct lbs_private *) dev->priv;
-       struct lbs_adapter *adapter = priv->adapter;
        struct sockaddr *phwaddr = addr;
 
        lbs_deb_enter(LBS_DEB_NET);
@@ -657,13 +519,13 @@ static int lbs_set_mac_address(struct net_device *dev, void *addr)
        /* In case it was called from the mesh device */
        dev = priv->dev ;
 
-       memset(adapter->current_addr, 0, ETH_ALEN);
+       memset(priv->current_addr, 0, ETH_ALEN);
 
        /* dev->dev_addr is 8 bytes */
        lbs_deb_hex(LBS_DEB_NET, "dev->dev_addr", dev->dev_addr, ETH_ALEN);
 
        lbs_deb_hex(LBS_DEB_NET, "addr", phwaddr->sa_data, ETH_ALEN);
-       memcpy(adapter->current_addr, phwaddr->sa_data, ETH_ALEN);
+       memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
 
        ret = lbs_prepare_and_send_command(priv, CMD_802_11_MAC_ADDRESS,
                                    CMD_ACT_SET,
@@ -675,24 +537,24 @@ static int lbs_set_mac_address(struct net_device *dev, void *addr)
                goto done;
        }
 
-       lbs_deb_hex(LBS_DEB_NET, "adapter->macaddr", adapter->current_addr, ETH_ALEN);
-       memcpy(dev->dev_addr, adapter->current_addr, ETH_ALEN);
+       lbs_deb_hex(LBS_DEB_NET, "priv->macaddr", priv->current_addr, ETH_ALEN);
+       memcpy(dev->dev_addr, priv->current_addr, ETH_ALEN);
        if (priv->mesh_dev)
-               memcpy(priv->mesh_dev->dev_addr, adapter->current_addr, ETH_ALEN);
+               memcpy(priv->mesh_dev->dev_addr, priv->current_addr, ETH_ALEN);
 
 done:
        lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
        return ret;
 }
 
-static int lbs_copy_multicast_address(struct lbs_adapter *adapter,
+static int lbs_copy_multicast_address(struct lbs_private *priv,
                                     struct net_device *dev)
 {
        int i = 0;
        struct dev_mc_list *mcptr = dev->mc_list;
 
        for (i = 0; i < dev->mc_count; i++) {
-               memcpy(&adapter->multicastlist[i], mcptr->dmi_addr, ETH_ALEN);
+               memcpy(&priv->multicastlist[i], mcptr->dmi_addr, ETH_ALEN);
                mcptr = mcptr->next;
        }
 
@@ -703,50 +565,49 @@ static int lbs_copy_multicast_address(struct lbs_adapter *adapter,
 static void lbs_set_multicast_list(struct net_device *dev)
 {
        struct lbs_private *priv = dev->priv;
-       struct lbs_adapter *adapter = priv->adapter;
        int oldpacketfilter;
        DECLARE_MAC_BUF(mac);
 
        lbs_deb_enter(LBS_DEB_NET);
 
-       oldpacketfilter = adapter->currentpacketfilter;
+       oldpacketfilter = priv->currentpacketfilter;
 
        if (dev->flags & IFF_PROMISC) {
                lbs_deb_net("enable promiscuous mode\n");
-               adapter->currentpacketfilter |=
+               priv->currentpacketfilter |=
                    CMD_ACT_MAC_PROMISCUOUS_ENABLE;
-               adapter->currentpacketfilter &=
+               priv->currentpacketfilter &=
                    ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
                      CMD_ACT_MAC_MULTICAST_ENABLE);
        } else {
                /* Multicast */
-               adapter->currentpacketfilter &=
+               priv->currentpacketfilter &=
                    ~CMD_ACT_MAC_PROMISCUOUS_ENABLE;
 
                if (dev->flags & IFF_ALLMULTI || dev->mc_count >
                    MRVDRV_MAX_MULTICAST_LIST_SIZE) {
                        lbs_deb_net( "enabling all multicast\n");
-                       adapter->currentpacketfilter |=
+                       priv->currentpacketfilter |=
                            CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
-                       adapter->currentpacketfilter &=
+                       priv->currentpacketfilter &=
                            ~CMD_ACT_MAC_MULTICAST_ENABLE;
                } else {
-                       adapter->currentpacketfilter &=
+                       priv->currentpacketfilter &=
                            ~CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
 
                        if (!dev->mc_count) {
                                lbs_deb_net("no multicast addresses, "
                                       "disabling multicast\n");
-                               adapter->currentpacketfilter &=
+                               priv->currentpacketfilter &=
                                    ~CMD_ACT_MAC_MULTICAST_ENABLE;
                        } else {
                                int i;
 
-                               adapter->currentpacketfilter |=
+                               priv->currentpacketfilter |=
                                    CMD_ACT_MAC_MULTICAST_ENABLE;
 
-                               adapter->nr_of_multicastmacaddr =
-                                   lbs_copy_multicast_address(adapter, dev);
+                               priv->nr_of_multicastmacaddr =
+                                   lbs_copy_multicast_address(priv, dev);
 
                                lbs_deb_net("multicast addresses: %d\n",
                                       dev->mc_count);
@@ -754,7 +615,7 @@ static void lbs_set_multicast_list(struct net_device *dev)
                                for (i = 0; i < dev->mc_count; i++) {
                                        lbs_deb_net("Multicast address %d:%s\n",
                                               i, print_mac(mac,
-                                              adapter->multicastlist[i]));
+                                              priv->multicastlist[i]));
                                }
                                /* send multicast addresses to firmware */
                                lbs_prepare_and_send_command(priv,
@@ -765,7 +626,7 @@ static void lbs_set_multicast_list(struct net_device *dev)
                }
        }
 
-       if (adapter->currentpacketfilter != oldpacketfilter) {
+       if (priv->currentpacketfilter != oldpacketfilter) {
                lbs_set_mac_packet_filter(priv);
        }
 
@@ -784,7 +645,6 @@ static int lbs_thread(void *data)
 {
        struct net_device *dev = data;
        struct lbs_private *priv = dev->priv;
-       struct lbs_adapter *adapter = priv->adapter;
        wait_queue_t wait;
        u8 ireg = 0;
 
@@ -792,103 +652,128 @@ static int lbs_thread(void *data)
 
        init_waitqueue_entry(&wait, current);
 
-       set_freezable();
-
        for (;;) {
+               int shouldsleep;
+
                lbs_deb_thread( "main-thread 111: intcounter=%d currenttxskb=%p dnld_sent=%d\n",
-                               adapter->intcounter, adapter->currenttxskb, priv->dnld_sent);
+                               priv->intcounter, priv->currenttxskb, priv->dnld_sent);
 
                add_wait_queue(&priv->waitq, &wait);
                set_current_state(TASK_INTERRUPTIBLE);
-               spin_lock_irq(&adapter->driver_lock);
+               spin_lock_irq(&priv->driver_lock);
+
+               if (kthread_should_stop())
+                       shouldsleep = 0;        /* Bye */
+               else if (priv->surpriseremoved)
+                       shouldsleep = 1;        /* We need to wait until we're _told_ to die */
+               else if (priv->psstate == PS_STATE_SLEEP)
+                       shouldsleep = 1;        /* Sleep mode. Nothing we can do till it wakes */
+               else if (priv->intcounter)
+                       shouldsleep = 0;        /* Interrupt pending. Deal with it now */
+               else if (!priv->fw_ready)
+                       shouldsleep = 1;        /* Firmware not ready. We're waiting for it */
+               else if (priv->dnld_sent)
+                       shouldsleep = 1;        /* Something is en route to the device already */
+               else if (priv->tx_pending_len > 0)
+                       shouldsleep = 0;        /* We've a packet to send */
+               else if (priv->cur_cmd)
+                       shouldsleep = 1;        /* Can't send a command; one already running */
+               else if (!list_empty(&priv->cmdpendingq))
+                       shouldsleep = 0;        /* We have a command to send */
+               else
+                       shouldsleep = 1;        /* No command */
 
-               if ((adapter->psstate == PS_STATE_SLEEP) ||
-                   (!adapter->intcounter && (priv->dnld_sent || adapter->cur_cmd || list_empty(&adapter->cmdpendingq)))) {
+               if (shouldsleep) {
                        lbs_deb_thread("main-thread sleeping... Conn=%d IntC=%d PS_mode=%d PS_State=%d\n",
-                                      adapter->connect_status, adapter->intcounter,
-                                      adapter->psmode, adapter->psstate);
-                       spin_unlock_irq(&adapter->driver_lock);
+                                      priv->connect_status, priv->intcounter,
+                                      priv->psmode, priv->psstate);
+                       spin_unlock_irq(&priv->driver_lock);
                        schedule();
                } else
-                       spin_unlock_irq(&adapter->driver_lock);
+                       spin_unlock_irq(&priv->driver_lock);
 
                lbs_deb_thread("main-thread 222 (waking up): intcounter=%d currenttxskb=%p dnld_sent=%d\n",
-                              adapter->intcounter, adapter->currenttxskb, priv->dnld_sent);
+                              priv->intcounter, priv->currenttxskb, priv->dnld_sent);
 
                set_current_state(TASK_RUNNING);
                remove_wait_queue(&priv->waitq, &wait);
-               try_to_freeze();
 
                lbs_deb_thread("main-thread 333: intcounter=%d currenttxskb=%p dnld_sent=%d\n",
-                              adapter->intcounter, adapter->currenttxskb, priv->dnld_sent);
+                              priv->intcounter, priv->currenttxskb, priv->dnld_sent);
 
-               if (kthread_should_stop() || adapter->surpriseremoved) {
-                       lbs_deb_thread("main-thread: break from main thread: surpriseremoved=0x%x\n",
-                                      adapter->surpriseremoved);
+               if (kthread_should_stop()) {
+                       lbs_deb_thread("main-thread: break from main thread\n");
                        break;
                }
 
+               if (priv->surpriseremoved) {
+                       lbs_deb_thread("adapter removed; waiting to die...\n");
+                       continue;
+               }
 
-               spin_lock_irq(&adapter->driver_lock);
+               spin_lock_irq(&priv->driver_lock);
 
-               if (adapter->intcounter) {
+               if (priv->intcounter) {
                        u8 int_status;
 
-                       adapter->intcounter = 0;
+                       priv->intcounter = 0;
                        int_status = priv->hw_get_int_status(priv, &ireg);
 
                        if (int_status) {
                                lbs_deb_thread("main-thread: reading HOST_INT_STATUS_REG failed\n");
-                               spin_unlock_irq(&adapter->driver_lock);
+                               spin_unlock_irq(&priv->driver_lock);
                                continue;
                        }
-                       adapter->hisregcpy |= ireg;
+                       priv->hisregcpy |= ireg;
                }
 
                lbs_deb_thread("main-thread 444: intcounter=%d currenttxskb=%p dnld_sent=%d\n",
-                              adapter->intcounter, adapter->currenttxskb, priv->dnld_sent);
+                              priv->intcounter, priv->currenttxskb, priv->dnld_sent);
 
                /* command response? */
-               if (adapter->hisregcpy & MRVDRV_CMD_UPLD_RDY) {
+               if (priv->hisregcpy & MRVDRV_CMD_UPLD_RDY) {
                        lbs_deb_thread("main-thread: cmd response ready\n");
 
-                       adapter->hisregcpy &= ~MRVDRV_CMD_UPLD_RDY;
-                       spin_unlock_irq(&adapter->driver_lock);
+                       priv->hisregcpy &= ~MRVDRV_CMD_UPLD_RDY;
+                       spin_unlock_irq(&priv->driver_lock);
                        lbs_process_rx_command(priv);
-                       spin_lock_irq(&adapter->driver_lock);
+                       spin_lock_irq(&priv->driver_lock);
                }
 
                /* Any Card Event */
-               if (adapter->hisregcpy & MRVDRV_CARDEVENT) {
+               if (priv->hisregcpy & MRVDRV_CARDEVENT) {
                        lbs_deb_thread("main-thread: Card Event Activity\n");
 
-                       adapter->hisregcpy &= ~MRVDRV_CARDEVENT;
+                       priv->hisregcpy &= ~MRVDRV_CARDEVENT;
 
                        if (priv->hw_read_event_cause(priv)) {
                                lbs_pr_alert("main-thread: hw_read_event_cause failed\n");
-                               spin_unlock_irq(&adapter->driver_lock);
+                               spin_unlock_irq(&priv->driver_lock);
                                continue;
                        }
-                       spin_unlock_irq(&adapter->driver_lock);
+                       spin_unlock_irq(&priv->driver_lock);
                        lbs_process_event(priv);
                } else
-                       spin_unlock_irq(&adapter->driver_lock);
+                       spin_unlock_irq(&priv->driver_lock);
+
+               if (!priv->fw_ready)
+                       continue;
 
                /* Check if we need to confirm Sleep Request received previously */
-               if (adapter->psstate == PS_STATE_PRE_SLEEP &&
-                   !priv->dnld_sent && !adapter->cur_cmd) {
-                       if (adapter->connect_status == LBS_CONNECTED) {
+               if (priv->psstate == PS_STATE_PRE_SLEEP &&
+                   !priv->dnld_sent && !priv->cur_cmd) {
+                       if (priv->connect_status == LBS_CONNECTED) {
                                lbs_deb_thread("main_thread: PRE_SLEEP--intcounter=%d currenttxskb=%p dnld_sent=%d cur_cmd=%p, confirm now\n",
-                                              adapter->intcounter, adapter->currenttxskb, priv->dnld_sent, adapter->cur_cmd);
+                                              priv->intcounter, priv->currenttxskb, priv->dnld_sent, priv->cur_cmd);
 
-                               lbs_ps_confirm_sleep(priv, (u16) adapter->psmode);
+                               lbs_ps_confirm_sleep(priv, (u16) priv->psmode);
                        } else {
                                /* workaround for firmware sending
                                 * deauth/linkloss event immediately
                                 * after sleep request; remove this
                                 * after firmware fixes it
                                 */
-                               adapter->psstate = PS_STATE_AWAKE;
+                               priv->psstate = PS_STATE_AWAKE;
                                lbs_pr_alert("main-thread: ignore PS_SleepConfirm in non-connected state\n");
                        }
                }
@@ -896,30 +781,102 @@ static int lbs_thread(void *data)
                /* The PS state is changed during processing of Sleep Request
                 * event above
                 */
-               if ((priv->adapter->psstate == PS_STATE_SLEEP) ||
-                   (priv->adapter->psstate == PS_STATE_PRE_SLEEP))
+               if ((priv->psstate == PS_STATE_SLEEP) ||
+                   (priv->psstate == PS_STATE_PRE_SLEEP))
                        continue;
 
                /* Execute the next command */
-               if (!priv->dnld_sent && !priv->adapter->cur_cmd)
+               if (!priv->dnld_sent && !priv->cur_cmd)
                        lbs_execute_next_command(priv);
 
                /* Wake-up command waiters which can't sleep in
                 * lbs_prepare_and_send_command
                 */
-               if (!list_empty(&adapter->cmdpendingq))
-                       wake_up_all(&adapter->cmd_pending);
-
-               lbs_tx_runqueue(priv);
+               if (!list_empty(&priv->cmdpendingq))
+                       wake_up_all(&priv->cmd_pending);
+
+               spin_lock_irq(&priv->driver_lock);
+               if (!priv->dnld_sent && priv->tx_pending_len > 0) {
+                       int ret = priv->hw_host_to_card(priv, MVMS_DAT,
+                                                       priv->tx_pending_buf,
+                                                       priv->tx_pending_len);
+                       if (ret) {
+                               lbs_deb_tx("host_to_card failed %d\n", ret);
+                               priv->dnld_sent = DNLD_RES_RECEIVED;
+                       }
+                       priv->tx_pending_len = 0;
+                       if (!priv->currenttxskb) {
+                               /* We can wake the queues immediately if we aren't
+                                  waiting for TX feedback */
+                               if (priv->connect_status == LBS_CONNECTED)
+                                       netif_wake_queue(priv->dev);
+                               if (priv->mesh_dev &&
+                                   priv->mesh_connect_status == LBS_CONNECTED)
+                                       netif_wake_queue(priv->mesh_dev);
+                       }
+               }
+               spin_unlock_irq(&priv->driver_lock);
        }
 
-       del_timer(&adapter->command_timer);
-       wake_up_all(&adapter->cmd_pending);
+       del_timer(&priv->command_timer);
+       wake_up_all(&priv->cmd_pending);
 
        lbs_deb_leave(LBS_DEB_THREAD);
        return 0;
 }
 
+static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
+                               struct cmd_header *cmd)
+{
+       lbs_deb_fw("HOST_SLEEP_ACTIVATE succeeded\n");
+
+       netif_device_detach(priv->dev);
+       if (priv->mesh_dev)
+               netif_device_detach(priv->mesh_dev);
+
+       priv->fw_ready = 0;
+       return 0;
+}
+
+
+int lbs_suspend(struct lbs_private *priv)
+{
+       struct cmd_header cmd;
+       int ret;
+
+       if (priv->wol_criteria == 0xffffffff) {
+               lbs_pr_info("Suspend attempt without configuring wake params!\n");
+               return -EINVAL;
+       }
+
+       memset(&cmd, 0, sizeof(cmd));
+       
+       ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
+                       sizeof(cmd), lbs_suspend_callback, 0);
+       if (ret)
+               lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);
+
+       return ret;
+}
+EXPORT_SYMBOL_GPL(lbs_suspend);
+
+int lbs_resume(struct lbs_private *priv)
+{
+       priv->fw_ready = 1;
+
+       /* Firmware doesn't seem to give us RX packets any more
+          until we send it some command. Might as well update */
+       lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
+                                    0, 0, NULL);
+
+       netif_device_attach(priv->dev);
+       if (priv->mesh_dev)
+               netif_device_attach(priv->mesh_dev);
+
+       return 0;
+}
+EXPORT_SYMBOL_GPL(lbs_resume);
+
 /**
  *  @brief This function downloads firmware image, gets
  *  HW spec from firmware and set basic parameters to
@@ -931,19 +888,14 @@ static int lbs_thread(void *data)
 static int lbs_setup_firmware(struct lbs_private *priv)
 {
        int ret = -1;
-       struct lbs_adapter *adapter = priv->adapter;
-       struct cmd_ds_mesh_access mesh_access;
 
        lbs_deb_enter(LBS_DEB_FW);
 
        /*
         * Read MAC address from HW
         */
-       memset(adapter->current_addr, 0xff, ETH_ALEN);
-
-       ret = lbs_prepare_and_send_command(priv, CMD_GET_HW_SPEC,
-                                   0, CMD_OPTION_WAITFORRSP, 0, NULL);
-
+       memset(priv->current_addr, 0xff, ETH_ALEN);
+       ret = lbs_update_hw_spec(priv);
        if (ret) {
                ret = -1;
                goto done;
@@ -951,31 +903,12 @@ static int lbs_setup_firmware(struct lbs_private *priv)
 
        lbs_set_mac_packet_filter(priv);
 
-       /* Get the supported Data rates */
-       ret = lbs_prepare_and_send_command(priv, CMD_802_11_DATA_RATE,
-                                   CMD_ACT_GET_TX_RATE,
-                                   CMD_OPTION_WAITFORRSP, 0, NULL);
-
-       if (ret) {
+       ret = lbs_get_data_rate(priv);
+       if (ret < 0) {
                ret = -1;
                goto done;
        }
 
-       /* Disable mesh autostart */
-       if (priv->mesh_dev) {
-               memset(&mesh_access, 0, sizeof(mesh_access));
-               mesh_access.data[0] = cpu_to_le32(0);
-               ret = lbs_prepare_and_send_command(priv,
-                               CMD_MESH_ACCESS,
-                               CMD_ACT_MESH_SET_AUTOSTART_ENABLED,
-                               CMD_OPTION_WAITFORRSP, 0, (void *)&mesh_access);
-               if (ret) {
-                       ret = -1;
-                       goto done;
-               }
-               priv->mesh_autostart_enabled = 0;
-       }
-
        ret = 0;
 done:
        lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
@@ -989,34 +922,31 @@ done:
 static void command_timer_fn(unsigned long data)
 {
        struct lbs_private *priv = (struct lbs_private *)data;
-       struct lbs_adapter *adapter = priv->adapter;
-       struct cmd_ctrl_node *ptempnode;
-       struct cmd_ds_command *cmd;
+       struct cmd_ctrl_node *node;
        unsigned long flags;
 
-       ptempnode = adapter->cur_cmd;
-       if (ptempnode == NULL) {
+       node = priv->cur_cmd;
+       if (node == NULL) {
                lbs_deb_fw("ptempnode empty\n");
                return;
        }
 
-       cmd = (struct cmd_ds_command *)ptempnode->bufvirtualaddr;
-       if (!cmd) {
+       if (!node->cmdbuf) {
                lbs_deb_fw("cmd is NULL\n");
                return;
        }
 
-       lbs_deb_fw("command_timer_fn fired, cmd %x\n", cmd->command);
+       lbs_pr_info("command %x timed out\n", le16_to_cpu(node->cmdbuf->command));
 
-       if (!adapter->fw_ready)
+       if (!priv->fw_ready)
                return;
 
-       spin_lock_irqsave(&adapter->driver_lock, flags);
-       adapter->cur_cmd = NULL;
-       spin_unlock_irqrestore(&adapter->driver_lock, flags);
+       spin_lock_irqsave(&priv->driver_lock, flags);
+       priv->cur_cmd = NULL;
+       spin_unlock_irqrestore(&priv->driver_lock, flags);
 
        lbs_deb_fw("re-sending same command because of timeout\n");
-       lbs_queue_cmd(adapter, ptempnode, 0);
+       lbs_queue_cmd(priv, node, 0);
 
        wake_up_interruptible(&priv->waitq);
 
@@ -1025,63 +955,58 @@ static void command_timer_fn(unsigned long data)
 
 static int lbs_init_adapter(struct lbs_private *priv)
 {
-       struct lbs_adapter *adapter = priv->adapter;
        size_t bufsize;
        int i, ret = 0;
 
        /* Allocate buffer to store the BSSID list */
        bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
-       adapter->networks = kzalloc(bufsize, GFP_KERNEL);
-       if (!adapter->networks) {
+       priv->networks = kzalloc(bufsize, GFP_KERNEL);
+       if (!priv->networks) {
                lbs_pr_err("Out of memory allocating beacons\n");
                ret = -1;
                goto out;
        }
 
        /* Initialize scan result lists */
-       INIT_LIST_HEAD(&adapter->network_free_list);
-       INIT_LIST_HEAD(&adapter->network_list);
+       INIT_LIST_HEAD(&priv->network_free_list);
+       INIT_LIST_HEAD(&priv->network_list);
        for (i = 0; i < MAX_NETWORK_COUNT; i++) {
-               list_add_tail(&adapter->networks[i].list,
-                             &adapter->network_free_list);
+               list_add_tail(&priv->networks[i].list,
+                             &priv->network_free_list);
        }
 
-       adapter->lbs_ps_confirm_sleep.seqnum = cpu_to_le16(++adapter->seqnum);
-       adapter->lbs_ps_confirm_sleep.command =
+       priv->lbs_ps_confirm_sleep.seqnum = cpu_to_le16(++priv->seqnum);
+       priv->lbs_ps_confirm_sleep.command =
            cpu_to_le16(CMD_802_11_PS_MODE);
-       adapter->lbs_ps_confirm_sleep.size =
+       priv->lbs_ps_confirm_sleep.size =
            cpu_to_le16(sizeof(struct PS_CMD_ConfirmSleep));
-       adapter->lbs_ps_confirm_sleep.action =
+       priv->lbs_ps_confirm_sleep.action =
            cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
 
-       memset(adapter->current_addr, 0xff, ETH_ALEN);
+       memset(priv->current_addr, 0xff, ETH_ALEN);
 
-       adapter->connect_status = LBS_DISCONNECTED;
-       adapter->mesh_connect_status = LBS_DISCONNECTED;
-       adapter->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
-       adapter->mode = IW_MODE_INFRA;
-       adapter->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
-       adapter->currentpacketfilter = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
-       adapter->radioon = RADIO_ON;
-       adapter->auto_rate = 1;
-       adapter->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
-       adapter->psmode = LBS802_11POWERMODECAM;
-       adapter->psstate = PS_STATE_FULL_POWER;
+       priv->connect_status = LBS_DISCONNECTED;
+       priv->mesh_connect_status = LBS_DISCONNECTED;
+       priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
+       priv->mode = IW_MODE_INFRA;
+       priv->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
+       priv->currentpacketfilter = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
+       priv->radioon = RADIO_ON;
+       priv->auto_rate = 1;
+       priv->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
+       priv->psmode = LBS802_11POWERMODECAM;
+       priv->psstate = PS_STATE_FULL_POWER;
 
-       mutex_init(&adapter->lock);
+       mutex_init(&priv->lock);
 
-       memset(&adapter->tx_queue_ps, 0, NR_TX_QUEUE*sizeof(struct sk_buff*));
-       adapter->tx_queue_idx = 0;
-       spin_lock_init(&adapter->txqueue_lock);
-
-       setup_timer(&adapter->command_timer, command_timer_fn,
+       setup_timer(&priv->command_timer, command_timer_fn,
                    (unsigned long)priv);
 
-       INIT_LIST_HEAD(&adapter->cmdfreeq);
-       INIT_LIST_HEAD(&adapter->cmdpendingq);
+       INIT_LIST_HEAD(&priv->cmdfreeq);
+       INIT_LIST_HEAD(&priv->cmdpendingq);
 
-       spin_lock_init(&adapter->driver_lock);
-       init_waitqueue_head(&adapter->cmd_pending);
+       spin_lock_init(&priv->driver_lock);
+       init_waitqueue_head(&priv->cmd_pending);
 
        /* Allocate the command buffers */
        if (lbs_allocate_cmd_buffer(priv)) {
@@ -1095,27 +1020,15 @@ out:
 
 static void lbs_free_adapter(struct lbs_private *priv)
 {
-       struct lbs_adapter *adapter = priv->adapter;
-
-       if (!adapter) {
-               lbs_deb_fw("why double free adapter?\n");
-               return;
-       }
-
        lbs_deb_fw("free command buffer\n");
        lbs_free_cmd_buffer(priv);
 
        lbs_deb_fw("free command_timer\n");
-       del_timer(&adapter->command_timer);
+       del_timer(&priv->command_timer);
 
        lbs_deb_fw("free scan results table\n");
-       kfree(adapter->networks);
-       adapter->networks = NULL;
-
-       /* Free the adapter object itself */
-       lbs_deb_fw("free adapter\n");
-       kfree(adapter);
-       priv->adapter = NULL;
+       kfree(priv->networks);
+       priv->networks = NULL;
 }
 
 /**
@@ -1140,13 +1053,6 @@ struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
        }
        priv = dev->priv;
 
-       /* allocate buffer for struct lbs_adapter */
-       priv->adapter = kzalloc(sizeof(struct lbs_adapter), GFP_KERNEL);
-       if (!priv->adapter) {
-               lbs_pr_err("allocate buffer for struct lbs_adapter failed\n");
-               goto err_kzalloc;
-       }
-
        if (lbs_init_adapter(priv)) {
                lbs_pr_err("failed to initialize adapter structure.\n");
                goto err_init_adapter;
@@ -1158,9 +1064,9 @@ struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
        priv->infra_open = 0;
 
        /* Setup the OS Interface to our functions */
-       dev->open = lbs_open;
-       dev->hard_start_xmit = lbs_pre_start_xmit;
-       dev->stop = lbs_close;
+       dev->open = lbs_dev_open;
+       dev->hard_start_xmit = lbs_hard_start_xmit;
+       dev->stop = lbs_eth_stop;
        dev->set_mac_address = lbs_set_mac_address;
        dev->tx_timeout = lbs_tx_timeout;
        dev->get_stats = lbs_get_stats;
@@ -1189,12 +1095,16 @@ struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
        INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
        INIT_WORK(&priv->sync_channel, lbs_sync_channel);
 
+       sprintf(priv->mesh_ssid, "mesh");
+       priv->mesh_ssid_len = 4;
+
+       priv->wol_criteria = 0xffffffff;
+       priv->wol_gpio = 0xff;
+
        goto done;
 
 err_init_adapter:
        lbs_free_adapter(priv);
-
-err_kzalloc:
        free_netdev(dev);
        priv = NULL;
 
@@ -1207,23 +1117,22 @@ EXPORT_SYMBOL_GPL(lbs_add_card);
 
 int lbs_remove_card(struct lbs_private *priv)
 {
-       struct lbs_adapter *adapter = priv->adapter;
        struct net_device *dev = priv->dev;
        union iwreq_data wrqu;
 
        lbs_deb_enter(LBS_DEB_MAIN);
 
+       lbs_remove_mesh(priv);
        lbs_remove_rtap(priv);
 
        dev = priv->dev;
-       device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
 
        cancel_delayed_work(&priv->scan_work);
        cancel_delayed_work(&priv->assoc_work);
        destroy_workqueue(priv->work_thread);
 
-       if (adapter->psmode == LBS802_11POWERMODEMAX_PSP) {
-               adapter->psmode = LBS802_11POWERMODECAM;
+       if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
+               priv->psmode = LBS802_11POWERMODECAM;
                lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
        }
 
@@ -1232,7 +1141,7 @@ int lbs_remove_card(struct lbs_private *priv)
        wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
 
        /* Stop the thread servicing the interrupts */
-       adapter->surpriseremoved = 1;
+       priv->surpriseremoved = 1;
        kthread_stop(priv->main_thread);
 
        lbs_free_adapter(priv);
@@ -1268,6 +1177,33 @@ int lbs_start_card(struct lbs_private *priv)
        if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
                lbs_pr_err("cannot register lbs_rtap attribute\n");
 
+       /* Enable mesh, if supported, and work out which TLV it uses.
+          0x100 + 291 is an unofficial value used in 5.110.20.pXX
+          0x100 + 37 is the official value used in 5.110.21.pXX
+          but we check them in that order because 20.pXX doesn't 
+          give an error -- it just silently fails. */
+
+       /* 5.110.20.pXX firmware will fail the command if the channel
+          doesn't match the existing channel. But only if the TLV
+          is correct. If the channel is wrong, _BOTH_ versions will
+          give an error to 0x100+291, and allow 0x100+37 to succeed.
+          It's just that 5.110.20.pXX will not have done anything
+          useful */
+
+       lbs_update_channel(priv);
+       priv->mesh_tlv = 0x100 + 291;
+       if (lbs_mesh_config(priv, 1, priv->curbssparams.channel)) {
+               priv->mesh_tlv = 0x100 + 37;
+               if (lbs_mesh_config(priv, 1, priv->curbssparams.channel))
+                       priv->mesh_tlv = 0;
+       }
+       if (priv->mesh_tlv) {
+               lbs_add_mesh(priv);
+
+               if (device_create_file(&dev->dev, &dev_attr_lbs_mesh))
+                       lbs_pr_err("cannot register lbs_mesh attribute\n");
+       }
+
        lbs_debugfs_init_one(priv, dev);
 
        lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);
@@ -1294,14 +1230,17 @@ int lbs_stop_card(struct lbs_private *priv)
        netif_carrier_off(priv->dev);
 
        lbs_debugfs_remove_one(priv);
+       device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
+       if (priv->mesh_tlv)
+               device_remove_file(&dev->dev, &dev_attr_lbs_mesh);
 
        /* Flush pending command nodes */
-       spin_lock_irqsave(&priv->adapter->driver_lock, flags);
-       list_for_each_entry(cmdnode, &priv->adapter->cmdpendingq, list) {
+       spin_lock_irqsave(&priv->driver_lock, flags);
+       list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
                cmdnode->cmdwaitqwoken = 1;
                wake_up_interruptible(&cmdnode->cmdwait_q);
        }
-       spin_unlock_irqrestore(&priv->adapter->driver_lock, flags);
+       spin_unlock_irqrestore(&priv->driver_lock, flags);
 
        unregister_netdev(dev);
 
@@ -1317,7 +1256,7 @@ EXPORT_SYMBOL_GPL(lbs_stop_card);
  *  @param priv    A pointer to the struct lbs_private structure
  *  @return       0 if successful, -X otherwise
  */
-int lbs_add_mesh(struct lbs_private *priv, struct device *dev)
+static int lbs_add_mesh(struct lbs_private *priv)
 {
        struct net_device *mesh_dev = NULL;
        int ret = 0;
@@ -1333,16 +1272,16 @@ int lbs_add_mesh(struct lbs_private *priv, struct device *dev)
        mesh_dev->priv = priv;
        priv->mesh_dev = mesh_dev;
 
-       mesh_dev->open = lbs_mesh_open;
-       mesh_dev->hard_start_xmit = lbs_mesh_pre_start_xmit;
-       mesh_dev->stop = lbs_mesh_close;
+       mesh_dev->open = lbs_dev_open;
+       mesh_dev->hard_start_xmit = lbs_hard_start_xmit;
+       mesh_dev->stop = lbs_mesh_stop;
        mesh_dev->get_stats = lbs_get_stats;
        mesh_dev->set_mac_address = lbs_set_mac_address;
        mesh_dev->ethtool_ops = &lbs_ethtool_ops;
        memcpy(mesh_dev->dev_addr, priv->dev->dev_addr,
                        sizeof(priv->dev->dev_addr));
 
-       SET_NETDEV_DEV(priv->mesh_dev, dev);
+       SET_NETDEV_DEV(priv->mesh_dev, priv->dev->dev.parent);
 
 #ifdef WIRELESS_EXT
        mesh_dev->wireless_handlers = (struct iw_handler_def *)&mesh_handler_def;
@@ -1375,7 +1314,7 @@ done:
 EXPORT_SYMBOL_GPL(lbs_add_mesh);
 
 
-void lbs_remove_mesh(struct lbs_private *priv)
+static void lbs_remove_mesh(struct lbs_private *priv)
 {
        struct net_device *mesh_dev;
 
@@ -1385,6 +1324,8 @@ void lbs_remove_mesh(struct lbs_private *priv)
                goto out;
 
        mesh_dev = priv->mesh_dev;
+       if (!mesh_dev)
+               goto out;
 
        netif_stop_queue(mesh_dev);
        netif_carrier_off(priv->mesh_dev);
@@ -1392,7 +1333,7 @@ void lbs_remove_mesh(struct lbs_private *priv)
        sysfs_remove_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
        unregister_netdev(mesh_dev);
 
-       priv->mesh_dev = NULL ;
+       priv->mesh_dev = NULL;
        free_netdev(mesh_dev);
 
 out:
@@ -1433,7 +1374,6 @@ struct chan_freq_power *lbs_get_region_cfp_table(u8 region, u8 band, int *cfp_no
 
 int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
 {
-       struct lbs_adapter *adapter = priv->adapter;
        int ret = 0;
        int i = 0;
 
@@ -1442,22 +1382,22 @@ int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
 
        lbs_deb_enter(LBS_DEB_MAIN);
 
-       memset(adapter->region_channel, 0, sizeof(adapter->region_channel));
+       memset(priv->region_channel, 0, sizeof(priv->region_channel));
 
        {
                cfp = lbs_get_region_cfp_table(region, band, &cfp_no);
                if (cfp != NULL) {
-                       adapter->region_channel[i].nrcfp = cfp_no;
-                       adapter->region_channel[i].CFP = cfp;
+                       priv->region_channel[i].nrcfp = cfp_no;
+                       priv->region_channel[i].CFP = cfp;
                } else {
                        lbs_deb_main("wrong region code %#x in band B/G\n",
                               region);
                        ret = -1;
                        goto out;
                }
-               adapter->region_channel[i].valid = 1;
-               adapter->region_channel[i].region = region;
-               adapter->region_channel[i].band = band;
+               priv->region_channel[i].valid = 1;
+               priv->region_channel[i].region = region;
+               priv->region_channel[i].band = band;
                i++;
        }
 out:
@@ -1473,24 +1413,22 @@ out:
  *  @param dev     A pointer to net_device structure
  *  @return       n/a
  */
-void lbs_interrupt(struct net_device *dev)
+void lbs_interrupt(struct lbs_private *priv)
 {
-       struct lbs_private *priv = dev->priv;
-
        lbs_deb_enter(LBS_DEB_THREAD);
 
-       lbs_deb_thread("lbs_interrupt: intcounter=%d\n",
-              priv->adapter->intcounter);
-
-       priv->adapter->intcounter++;
+       lbs_deb_thread("lbs_interrupt: intcounter=%d\n", priv->intcounter);
 
-       if (priv->adapter->psstate == PS_STATE_SLEEP) {
-               priv->adapter->psstate = PS_STATE_AWAKE;
-               netif_wake_queue(dev);
-               if (priv->mesh_dev)
-                       netif_wake_queue(priv->mesh_dev);
+       if (!spin_is_locked(&priv->driver_lock)) {
+               printk(KERN_CRIT "%s called without driver_lock held\n", __func__);
+               WARN_ON(1);
        }
 
+       priv->intcounter++;
+
+       if (priv->psstate == PS_STATE_SLEEP)
+               priv->psstate = PS_STATE_AWAKE;
+
        wake_up_interruptible(&priv->waitq);
 
        lbs_deb_leave(LBS_DEB_THREAD);
@@ -1534,6 +1472,7 @@ static void __exit lbs_exit_module(void)
 
 static int lbs_rtap_open(struct net_device *dev)
 {
+       /* Yes, _stop_ the queue. Because we don't support injection */
         netif_carrier_off(dev);
         netif_stop_queue(dev);
         return 0;
@@ -1547,57 +1486,52 @@ static int lbs_rtap_stop(struct net_device *dev)
 static int lbs_rtap_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
 {
         netif_stop_queue(dev);
-        return -EOPNOTSUPP;
+        return NETDEV_TX_BUSY;
 }
 
 static struct net_device_stats *lbs_rtap_get_stats(struct net_device *dev)
 {
        struct lbs_private *priv = dev->priv;
-       return &priv->ieee->stats;
+       return &priv->stats;
 }
 
 
-void lbs_remove_rtap(struct lbs_private *priv)
+static void lbs_remove_rtap(struct lbs_private *priv)
 {
        if (priv->rtap_net_dev == NULL)
                return;
        unregister_netdev(priv->rtap_net_dev);
-       free_ieee80211(priv->rtap_net_dev);
+       free_netdev(priv->rtap_net_dev);
        priv->rtap_net_dev = NULL;
 }
 
-int lbs_add_rtap(struct lbs_private *priv)
+static int lbs_add_rtap(struct lbs_private *priv)
 {
        int rc = 0;
+       struct net_device *rtap_dev;
 
        if (priv->rtap_net_dev)
                return -EPERM;
 
-       priv->rtap_net_dev = alloc_ieee80211(0);
-       if (priv->rtap_net_dev == NULL)
+       rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
+       if (rtap_dev == NULL)
                return -ENOMEM;
 
+       memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
+       rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
+       rtap_dev->open = lbs_rtap_open;
+       rtap_dev->stop = lbs_rtap_stop;
+       rtap_dev->get_stats = lbs_rtap_get_stats;
+       rtap_dev->hard_start_xmit = lbs_rtap_hard_start_xmit;
+       rtap_dev->set_multicast_list = lbs_set_multicast_list;
+       rtap_dev->priv = priv;
 
-       priv->ieee = netdev_priv(priv->rtap_net_dev);
-
-       strcpy(priv->rtap_net_dev->name, "rtap%d");
-
-       priv->rtap_net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
-       priv->rtap_net_dev->open = lbs_rtap_open;
-       priv->rtap_net_dev->stop = lbs_rtap_stop;
-       priv->rtap_net_dev->get_stats = lbs_rtap_get_stats;
-       priv->rtap_net_dev->hard_start_xmit = lbs_rtap_hard_start_xmit;
-       priv->rtap_net_dev->set_multicast_list = lbs_set_multicast_list;
-       priv->rtap_net_dev->priv = priv;
-
-       priv->ieee->iw_mode = IW_MODE_MONITOR;
-
-       rc = register_netdev(priv->rtap_net_dev);
+       rc = register_netdev(rtap_dev);
        if (rc) {
-               free_ieee80211(priv->rtap_net_dev);
-               priv->rtap_net_dev = NULL;
+               free_netdev(rtap_dev);
                return rc;
        }
+       priv->rtap_net_dev = rtap_dev;
 
        return 0;
 }