util.c 55.0 KB
Newer Older
J
Johannes Berg 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * utilities for mac80211
 */

#include <net/mac80211.h>
#include <linux/netdevice.h>
16
#include <linux/export.h>
J
Johannes Berg 已提交
17 18 19 20 21 22
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/bitmap.h>
23
#include <linux/crc32.h>
24
#include <net/net_namespace.h>
J
Johannes Berg 已提交
25
#include <net/cfg80211.h>
26
#include <net/rtnetlink.h>
J
Johannes Berg 已提交
27 28

#include "ieee80211_i.h"
29
#include "driver-ops.h"
J
Johannes Berg 已提交
30
#include "rate.h"
31
#include "mesh.h"
J
Johannes Berg 已提交
32
#include "wme.h"
33
#include "led.h"
J
Johannes Berg 已提交
34
#include "wep.h"
J
Johannes Berg 已提交
35 36 37 38

/* privid for wiphys to determine whether they belong to us or not */
void *mac80211_wiphy_privid = &mac80211_wiphy_privid;

39 40 41 42 43 44 45 46 47
struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
{
	struct ieee80211_local *local;
	BUG_ON(!wiphy);

	local = wiphy_priv(wiphy);
	return &local->hw;
}
EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
J
Johannes Berg 已提交
48

49
u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
50
			enum nl80211_iftype type)
J
Johannes Berg 已提交
51
{
52
	__le16 fc = hdr->frame_control;
J
Johannes Berg 已提交
53

54 55
	 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
	if (len < 16)
J
Johannes Berg 已提交
56 57
		return NULL;

58
	if (ieee80211_is_data(fc)) {
59 60
		if (len < 24) /* drop incorrect hdr len (data) */
			return NULL;
61 62

		if (ieee80211_has_a4(fc))
J
Johannes Berg 已提交
63
			return NULL;
64 65 66
		if (ieee80211_has_tods(fc))
			return hdr->addr1;
		if (ieee80211_has_fromds(fc))
J
Johannes Berg 已提交
67
			return hdr->addr2;
68 69 70 71 72

		return hdr->addr3;
	}

	if (ieee80211_is_mgmt(fc)) {
73 74
		if (len < 24) /* drop incorrect hdr len (mgmt) */
			return NULL;
J
Johannes Berg 已提交
75
		return hdr->addr3;
76 77 78 79
	}

	if (ieee80211_is_ctl(fc)) {
		if(ieee80211_is_pspoll(fc))
J
Johannes Berg 已提交
80
			return hdr->addr1;
81 82

		if (ieee80211_is_back_req(fc)) {
83
			switch (type) {
84
			case NL80211_IFTYPE_STATION:
85
				return hdr->addr2;
86 87
			case NL80211_IFTYPE_AP:
			case NL80211_IFTYPE_AP_VLAN:
88 89
				return hdr->addr1;
			default:
90
				break; /* fall through to the return */
91 92
			}
		}
J
Johannes Berg 已提交
93 94 95 96 97
	}

	return NULL;
}

98
void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
J
Johannes Berg 已提交
99
{
100
	struct sk_buff *skb;
J
Johannes Berg 已提交
101 102
	struct ieee80211_hdr *hdr;

103
	skb_queue_walk(&tx->skbs, skb) {
J
Johannes Berg 已提交
104 105
		hdr = (struct ieee80211_hdr *) skb->data;
		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
106
	}
J
Johannes Berg 已提交
107 108
}

109
int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
J
Johannes Berg 已提交
110 111 112 113 114 115 116 117 118 119 120 121 122
			     int rate, int erp, int short_preamble)
{
	int dur;

	/* calculate duration (in microseconds, rounded up to next higher
	 * integer if it includes a fractional microsecond) to send frame of
	 * len bytes (does not include FCS) at the given rate. Duration will
	 * also include SIFS.
	 *
	 * rate is in 100 kbps, so divident is multiplied by 10 in the
	 * DIV_ROUND_UP() operations.
	 */

123
	if (band == IEEE80211_BAND_5GHZ || erp) {
J
Johannes Berg 已提交
124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162
		/*
		 * OFDM:
		 *
		 * N_DBPS = DATARATE x 4
		 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
		 *	(16 = SIGNAL time, 6 = tail bits)
		 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
		 *
		 * T_SYM = 4 usec
		 * 802.11a - 17.5.2: aSIFSTime = 16 usec
		 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
		 *	signal ext = 6 usec
		 */
		dur = 16; /* SIFS + signal ext */
		dur += 16; /* 17.3.2.3: T_PREAMBLE = 16 usec */
		dur += 4; /* 17.3.2.3: T_SIGNAL = 4 usec */
		dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
					4 * rate); /* T_SYM x N_SYM */
	} else {
		/*
		 * 802.11b or 802.11g with 802.11b compatibility:
		 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
		 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
		 *
		 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
		 * aSIFSTime = 10 usec
		 * aPreambleLength = 144 usec or 72 usec with short preamble
		 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
		 */
		dur = 10; /* aSIFSTime = 10 usec */
		dur += short_preamble ? (72 + 24) : (144 + 48);

		dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
	}

	return dur;
}

/* Exported duration function for driver use */
163 164
__le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
					struct ieee80211_vif *vif,
165
					enum ieee80211_band band,
166 167
					size_t frame_len,
					struct ieee80211_rate *rate)
J
Johannes Berg 已提交
168
{
169
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
170 171
	u16 dur;
	int erp;
172
	bool short_preamble = false;
J
Johannes Berg 已提交
173

174
	erp = 0;
175 176
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
177
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
178 179 180
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
181

182
	dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
183
				       short_preamble);
J
Johannes Berg 已提交
184 185 186 187 188

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_generic_frame_duration);

189 190
__le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
			      struct ieee80211_vif *vif, size_t frame_len,
191
			      const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
192 193 194
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
195
	struct ieee80211_sub_if_data *sdata;
196
	bool short_preamble;
J
Johannes Berg 已提交
197 198
	int erp;
	u16 dur;
199 200
	struct ieee80211_supported_band *sband;

201
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
202

203
	short_preamble = false;
204

205
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
206 207

	erp = 0;
208 209
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
210
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
211 212 213
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
214 215

	/* CTS duration */
216
	dur = ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
217 218
				       erp, short_preamble);
	/* Data frame duration */
219
	dur += ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
220 221
					erp, short_preamble);
	/* ACK duration */
222
	dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
223 224 225 226 227 228
					erp, short_preamble);

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_rts_duration);

229 230
__le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
				    struct ieee80211_vif *vif,
J
Johannes Berg 已提交
231
				    size_t frame_len,
232
				    const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
233 234 235
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
236
	struct ieee80211_sub_if_data *sdata;
237
	bool short_preamble;
J
Johannes Berg 已提交
238 239
	int erp;
	u16 dur;
240 241
	struct ieee80211_supported_band *sband;

242
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
243

244
	short_preamble = false;
245

246
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
247
	erp = 0;
248 249
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
250
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
251 252 253
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
254 255

	/* Data frame duration */
256
	dur = ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
257
				       erp, short_preamble);
258
	if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
J
Johannes Berg 已提交
259
		/* ACK duration */
260
		dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
261 262 263 264 265 266 267
						erp, short_preamble);
	}

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_ctstoself_duration);

268 269 270
void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
{
	struct ieee80211_sub_if_data *sdata;
271 272 273 274
	int n_acs = IEEE80211_NUM_ACS;

	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;
275 276 277 278

	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

279 280 281
		if (!sdata->dev)
			continue;

282 283 284 285 286 287 288
		if (test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state))
			continue;

		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
		    local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
			continue;

289
		for (ac = 0; ac < n_acs; ac++) {
290 291 292 293 294 295 296 297 298 299 300
			int ac_queue = sdata->vif.hw_queue[ac];

			if (ac_queue == queue ||
			    (sdata->vif.cab_queue == queue &&
			     local->queue_stop_reasons[ac_queue] == 0 &&
			     skb_queue_empty(&local->pending[ac_queue])))
				netif_wake_subqueue(sdata->dev, ac);
		}
	}
}

K
Kalle Valo 已提交
301 302
static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
303 304 305
{
	struct ieee80211_local *local = hw_to_local(hw);

J
Johannes Berg 已提交
306 307
	trace_wake_queue(local, queue, reason);

308 309
	if (WARN_ON(queue >= hw->queues))
		return;
K
Kalle Valo 已提交
310

311 312 313
	if (!test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

314 315 316 317 318 319
	__clear_bit(reason, &local->queue_stop_reasons[queue]);

	if (local->queue_stop_reasons[queue] != 0)
		/* someone still has this queue stopped */
		return;

320 321
	if (skb_queue_empty(&local->pending[queue])) {
		rcu_read_lock();
322
		ieee80211_propagate_queue_wake(local, queue);
323 324
		rcu_read_unlock();
	} else
J
Johannes Berg 已提交
325
		tasklet_schedule(&local->tx_pending_tasklet);
J
Johannes Berg 已提交
326
}
K
Kalle Valo 已提交
327

328 329
void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
330 331 332 333 334 335 336 337 338 339 340 341 342 343
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_wake_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_wake_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
344 345
EXPORT_SYMBOL(ieee80211_wake_queue);

K
Kalle Valo 已提交
346 347
static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
348 349
{
	struct ieee80211_local *local = hw_to_local(hw);
350
	struct ieee80211_sub_if_data *sdata;
351
	int n_acs = IEEE80211_NUM_ACS;
J
Johannes Berg 已提交
352

J
Johannes Berg 已提交
353 354
	trace_stop_queue(local, queue, reason);

355 356
	if (WARN_ON(queue >= hw->queues))
		return;
357

358 359 360
	if (test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

361
	__set_bit(reason, &local->queue_stop_reasons[queue]);
362

363 364 365
	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;

366
	rcu_read_lock();
367 368 369
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

370 371 372
		if (!sdata->dev)
			continue;

373
		for (ac = 0; ac < n_acs; ac++) {
374 375 376 377 378
			if (sdata->vif.hw_queue[ac] == queue ||
			    sdata->vif.cab_queue == queue)
				netif_stop_subqueue(sdata->dev, ac);
		}
	}
379
	rcu_read_unlock();
J
Johannes Berg 已提交
380
}
K
Kalle Valo 已提交
381

382 383
void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
384 385 386 387 388 389 390 391 392 393 394 395 396 397
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_stop_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
398 399
EXPORT_SYMBOL(ieee80211_stop_queue);

400 401 402 403 404
void ieee80211_add_pending_skb(struct ieee80211_local *local,
			       struct sk_buff *skb)
{
	struct ieee80211_hw *hw = &local->hw;
	unsigned long flags;
405
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
406
	int queue = info->hw_queue;
407 408

	if (WARN_ON(!info->control.vif)) {
409
		ieee80211_free_txskb(&local->hw, skb);
410 411
		return;
	}
412 413 414

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
J
Johannes Berg 已提交
415
	__skb_queue_tail(&local->pending[queue], skb);
416 417 418 419
	__ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

420 421 422
void ieee80211_add_pending_skbs_fn(struct ieee80211_local *local,
				   struct sk_buff_head *skbs,
				   void (*fn)(void *data), void *data)
423 424 425 426
{
	struct ieee80211_hw *hw = &local->hw;
	struct sk_buff *skb;
	unsigned long flags;
427
	int queue, i;
428 429 430

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	while ((skb = skb_dequeue(skbs))) {
431 432 433
		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);

		if (WARN_ON(!info->control.vif)) {
434
			ieee80211_free_txskb(&local->hw, skb);
435 436 437
			continue;
		}

438
		queue = info->hw_queue;
439 440 441 442

		__ieee80211_stop_queue(hw, queue,
				IEEE80211_QUEUE_STOP_REASON_SKB_ADD);

J
Johannes Berg 已提交
443
		__skb_queue_tail(&local->pending[queue], skb);
444 445
	}

446 447 448
	if (fn)
		fn(data);

J
Johannes Berg 已提交
449
	for (i = 0; i < hw->queues; i++)
450 451 452 453 454
		__ieee80211_wake_queue(hw, i,
			IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

K
Kalle Valo 已提交
455
void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
456 457
				     unsigned long queues,
				     enum queue_stop_reason reason)
J
Johannes Berg 已提交
458
{
K
Kalle Valo 已提交
459 460
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
461 462
	int i;

K
Kalle Valo 已提交
463 464
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

465
	for_each_set_bit(i, &queues, hw->queues)
K
Kalle Valo 已提交
466 467 468 469 470 471 472
		__ieee80211_stop_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queues(struct ieee80211_hw *hw)
{
473
	ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
K
Kalle Valo 已提交
474
					IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
475 476 477
}
EXPORT_SYMBOL(ieee80211_stop_queues);

478 479 480
int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
{
	struct ieee80211_local *local = hw_to_local(hw);
J
Johannes Berg 已提交
481 482
	unsigned long flags;
	int ret;
483

484 485
	if (WARN_ON(queue >= hw->queues))
		return true;
486

J
Johannes Berg 已提交
487 488 489 490
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	ret = !!local->queue_stop_reasons[queue];
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
	return ret;
491 492 493
}
EXPORT_SYMBOL(ieee80211_queue_stopped);

K
Kalle Valo 已提交
494
void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
495
				     unsigned long queues,
K
Kalle Valo 已提交
496
				     enum queue_stop_reason reason)
J
Johannes Berg 已提交
497
{
K
Kalle Valo 已提交
498 499
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
500 501
	int i;

K
Kalle Valo 已提交
502 503
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

504
	for_each_set_bit(i, &queues, hw->queues)
K
Kalle Valo 已提交
505 506 507 508 509 510 511
		__ieee80211_wake_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queues(struct ieee80211_hw *hw)
{
512 513
	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
514 515
}
EXPORT_SYMBOL(ieee80211_wake_queues);
516

517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538
void ieee80211_flush_queues(struct ieee80211_local *local,
			    struct ieee80211_sub_if_data *sdata)
{
	u32 queues;

	if (!local->ops->flush)
		return;

	if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) {
		int ac;

		queues = 0;

		for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
			queues |= BIT(sdata->vif.hw_queue[ac]);
		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE)
			queues |= BIT(sdata->vif.cab_queue);
	} else {
		/* all queues */
		queues = BIT(local->hw.queues) - 1;
	}

539 540 541
	ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_FLUSH);

542
	drv_flush(local, queues, false);
543 544 545

	ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_FLUSH);
546 547
}

548
void ieee80211_iterate_active_interfaces(
549
	struct ieee80211_hw *hw, u32 iter_flags,
550 551 552
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
553 554 555 556
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

557
	mutex_lock(&local->iflist_mtx);
558 559 560

	list_for_each_entry(sdata, &local->interfaces, list) {
		switch (sdata->vif.type) {
561 562
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
563
			continue;
564
		default:
565 566
			break;
		}
567 568 569
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
570
		if (ieee80211_sdata_running(sdata))
571
			iterator(data, sdata->vif.addr,
572 573 574
				 &sdata->vif);
	}

575 576
	sdata = rcu_dereference_protected(local->monitor_sdata,
					  lockdep_is_held(&local->iflist_mtx));
577 578 579
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
580 581
		iterator(data, sdata->vif.addr, &sdata->vif);

582
	mutex_unlock(&local->iflist_mtx);
583 584 585 586
}
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);

void ieee80211_iterate_active_interfaces_atomic(
587
	struct ieee80211_hw *hw, u32 iter_flags,
588 589 590 591 592 593 594
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

595
	rcu_read_lock();
596

597
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
598
		switch (sdata->vif.type) {
599 600
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
601
			continue;
602
		default:
603 604
			break;
		}
605 606 607
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
608
		if (ieee80211_sdata_running(sdata))
609
			iterator(data, sdata->vif.addr,
610
				 &sdata->vif);
611
	}
612

613
	sdata = rcu_dereference(local->monitor_sdata);
614 615 616
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
617 618
		iterator(data, sdata->vif.addr, &sdata->vif);

619
	rcu_read_unlock();
620
}
621
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
622

623 624 625 626 627 628 629 630 631
/*
 * Nothing should have been stuffed into the workqueue during
 * the suspend->resume cycle. If this WARN is seen then there
 * is a bug with either the driver suspend or something in
 * mac80211 stuffing into the workqueue which we haven't yet
 * cleared during mac80211's suspend cycle.
 */
static bool ieee80211_can_queue_work(struct ieee80211_local *local)
{
J
Johannes Berg 已提交
632 633 634
	if (WARN(local->suspended && !local->resuming,
		 "queueing ieee80211 work while going to suspend\n"))
		return false;
635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662

	return true;
}

void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_work(local->workqueue, work);
}
EXPORT_SYMBOL(ieee80211_queue_work);

void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
				  struct delayed_work *dwork,
				  unsigned long delay)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_delayed_work(local->workqueue, dwork, delay);
}
EXPORT_SYMBOL(ieee80211_queue_delayed_work);

663 664 665 666 667 668 669
u32 ieee802_11_parse_elems_crc(u8 *start, size_t len,
			       struct ieee802_11_elems *elems,
			       u64 filter, u32 crc)
{
	size_t left = len;
	u8 *pos = start;
	bool calc_crc = filter != 0;
P
Paul Stewart 已提交
670
	DECLARE_BITMAP(seen_elems, 256);
671

P
Paul Stewart 已提交
672
	bitmap_zero(seen_elems, 256);
673 674 675 676 677 678
	memset(elems, 0, sizeof(*elems));
	elems->ie_start = start;
	elems->total_len = len;

	while (left >= 2) {
		u8 id, elen;
P
Paul Stewart 已提交
679
		bool elem_parse_failed;
680 681 682 683 684

		id = *pos++;
		elen = *pos++;
		left -= 2;

P
Paul Stewart 已提交
685 686
		if (elen > left) {
			elems->parse_error = true;
687
			break;
P
Paul Stewart 已提交
688 689
		}

690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724
		switch (id) {
		case WLAN_EID_SSID:
		case WLAN_EID_SUPP_RATES:
		case WLAN_EID_FH_PARAMS:
		case WLAN_EID_DS_PARAMS:
		case WLAN_EID_CF_PARAMS:
		case WLAN_EID_TIM:
		case WLAN_EID_IBSS_PARAMS:
		case WLAN_EID_CHALLENGE:
		case WLAN_EID_RSN:
		case WLAN_EID_ERP_INFO:
		case WLAN_EID_EXT_SUPP_RATES:
		case WLAN_EID_HT_CAPABILITY:
		case WLAN_EID_HT_OPERATION:
		case WLAN_EID_VHT_CAPABILITY:
		case WLAN_EID_VHT_OPERATION:
		case WLAN_EID_MESH_ID:
		case WLAN_EID_MESH_CONFIG:
		case WLAN_EID_PEER_MGMT:
		case WLAN_EID_PREQ:
		case WLAN_EID_PREP:
		case WLAN_EID_PERR:
		case WLAN_EID_RANN:
		case WLAN_EID_CHANNEL_SWITCH:
		case WLAN_EID_EXT_CHANSWITCH_ANN:
		case WLAN_EID_COUNTRY:
		case WLAN_EID_PWR_CONSTRAINT:
		case WLAN_EID_TIMEOUT_INTERVAL:
			if (test_bit(id, seen_elems)) {
				elems->parse_error = true;
				left -= elen;
				pos += elen;
				continue;
			}
			break;
P
Paul Stewart 已提交
725
		}
726 727 728 729

		if (calc_crc && id < 64 && (filter & (1ULL << id)))
			crc = crc32_be(crc, pos - 2, elen + 2);

P
Paul Stewart 已提交
730 731
		elem_parse_failed = false;

732 733 734 735 736 737 738 739 740 741
		switch (id) {
		case WLAN_EID_SSID:
			elems->ssid = pos;
			elems->ssid_len = elen;
			break;
		case WLAN_EID_SUPP_RATES:
			elems->supp_rates = pos;
			elems->supp_rates_len = elen;
			break;
		case WLAN_EID_DS_PARAMS:
742 743 744 745
			if (elen >= 1)
				elems->ds_params = pos;
			else
				elem_parse_failed = true;
746 747 748 749 750
			break;
		case WLAN_EID_TIM:
			if (elen >= sizeof(struct ieee80211_tim_ie)) {
				elems->tim = (void *)pos;
				elems->tim_len = elen;
P
Paul Stewart 已提交
751 752
			} else
				elem_parse_failed = true;
753 754 755 756 757 758 759 760 761 762 763 764 765
			break;
		case WLAN_EID_CHALLENGE:
			elems->challenge = pos;
			elems->challenge_len = elen;
			break;
		case WLAN_EID_VENDOR_SPECIFIC:
			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
			    pos[2] == 0xf2) {
				/* Microsoft OUI (00:50:F2) */

				if (calc_crc)
					crc = crc32_be(crc, pos - 2, elen + 2);

766
				if (elen >= 5 && pos[3] == 2) {
767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792
					/* OUI Type 2 - WMM IE */
					if (pos[4] == 0) {
						elems->wmm_info = pos;
						elems->wmm_info_len = elen;
					} else if (pos[4] == 1) {
						elems->wmm_param = pos;
						elems->wmm_param_len = elen;
					}
				}
			}
			break;
		case WLAN_EID_RSN:
			elems->rsn = pos;
			elems->rsn_len = elen;
			break;
		case WLAN_EID_ERP_INFO:
			elems->erp_info = pos;
			elems->erp_info_len = elen;
			break;
		case WLAN_EID_EXT_SUPP_RATES:
			elems->ext_supp_rates = pos;
			elems->ext_supp_rates_len = elen;
			break;
		case WLAN_EID_HT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_ht_cap))
				elems->ht_cap_elem = (void *)pos;
P
Paul Stewart 已提交
793 794
			else
				elem_parse_failed = true;
795
			break;
796 797 798
		case WLAN_EID_HT_OPERATION:
			if (elen >= sizeof(struct ieee80211_ht_operation))
				elems->ht_operation = (void *)pos;
P
Paul Stewart 已提交
799 800
			else
				elem_parse_failed = true;
801
			break;
M
Mahesh Palivela 已提交
802 803 804 805 806 807 808 809 810 811 812 813
		case WLAN_EID_VHT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_vht_cap))
				elems->vht_cap_elem = (void *)pos;
			else
				elem_parse_failed = true;
			break;
		case WLAN_EID_VHT_OPERATION:
			if (elen >= sizeof(struct ieee80211_vht_operation))
				elems->vht_operation = (void *)pos;
			else
				elem_parse_failed = true;
			break;
814 815 816 817 818 819
		case WLAN_EID_OPMODE_NOTIF:
			if (elen > 0)
				elems->opmode_notif = pos;
			else
				elem_parse_failed = true;
			break;
820 821 822 823 824 825 826
		case WLAN_EID_MESH_ID:
			elems->mesh_id = pos;
			elems->mesh_id_len = elen;
			break;
		case WLAN_EID_MESH_CONFIG:
			if (elen >= sizeof(struct ieee80211_meshconf_ie))
				elems->mesh_config = (void *)pos;
P
Paul Stewart 已提交
827 828
			else
				elem_parse_failed = true;
829 830 831 832 833
			break;
		case WLAN_EID_PEER_MGMT:
			elems->peering = pos;
			elems->peering_len = elen;
			break;
M
Marco Porsch 已提交
834 835 836 837
		case WLAN_EID_MESH_AWAKE_WINDOW:
			if (elen >= 2)
				elems->awake_window = (void *)pos;
			break;
838 839 840 841 842 843 844 845 846 847 848 849 850 851 852
		case WLAN_EID_PREQ:
			elems->preq = pos;
			elems->preq_len = elen;
			break;
		case WLAN_EID_PREP:
			elems->prep = pos;
			elems->prep_len = elen;
			break;
		case WLAN_EID_PERR:
			elems->perr = pos;
			elems->perr_len = elen;
			break;
		case WLAN_EID_RANN:
			if (elen >= sizeof(struct ieee80211_rann_ie))
				elems->rann = (void *)pos;
P
Paul Stewart 已提交
853 854
			else
				elem_parse_failed = true;
855 856
			break;
		case WLAN_EID_CHANNEL_SWITCH:
857 858 859 860 861
			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
				elem_parse_failed = true;
				break;
			}
			elems->ch_switch_ie = (void *)pos;
862 863 864 865 866 867
			break;
		case WLAN_EID_COUNTRY:
			elems->country_elem = pos;
			elems->country_elem_len = elen;
			break;
		case WLAN_EID_PWR_CONSTRAINT:
868 869 870 871
			if (elen != 1) {
				elem_parse_failed = true;
				break;
			}
872 873 874 875 876 877 878 879 880 881
			elems->pwr_constr_elem = pos;
			break;
		case WLAN_EID_TIMEOUT_INTERVAL:
			elems->timeout_int = pos;
			elems->timeout_int_len = elen;
			break;
		default:
			break;
		}

P
Paul Stewart 已提交
882 883 884
		if (elem_parse_failed)
			elems->parse_error = true;
		else
885
			__set_bit(id, seen_elems);
P
Paul Stewart 已提交
886

887 888 889 890
		left -= elen;
		pos += elen;
	}

P
Paul Stewart 已提交
891 892 893
	if (left != 0)
		elems->parse_error = true;

894 895 896
	return crc;
}

897 898
void ieee802_11_parse_elems(u8 *start, size_t len,
			    struct ieee802_11_elems *elems)
899 900 901 902
{
	ieee802_11_parse_elems_crc(start, len, elems, 0, 0);
}

903 904
void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
			       bool bss_notify)
905 906 907
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_tx_queue_params qparam;
J
Johannes Berg 已提交
908
	struct ieee80211_chanctx_conf *chanctx_conf;
909
	int ac;
910
	bool use_11b, enable_qos;
911
	int aCWmin, aCWmax;
912 913 914 915

	if (!local->ops->conf_tx)
		return;

916 917 918
	if (local->hw.queues < IEEE80211_NUM_ACS)
		return;

919 920
	memset(&qparam, 0, sizeof(qparam));

J
Johannes Berg 已提交
921 922 923
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	use_11b = (chanctx_conf &&
924
		   chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
925
		 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
J
Johannes Berg 已提交
926
	rcu_read_unlock();
927

928 929 930 931 932 933 934
	/*
	 * By default disable QoS in STA mode for old access points, which do
	 * not support 802.11e. New APs will provide proper queue parameters,
	 * that we will configure later.
	 */
	enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);

935
	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
936 937 938 939 940 941 942
		/* Set defaults according to 802.11-2007 Table 7-37 */
		aCWmax = 1023;
		if (use_11b)
			aCWmin = 31;
		else
			aCWmin = 15;

943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979
		if (enable_qos) {
			switch (ac) {
			case IEEE80211_AC_BK:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 7;
				break;
			/* never happens but let's not leave undefined */
			default:
			case IEEE80211_AC_BE:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 3;
				break;
			case IEEE80211_AC_VI:
				qparam.cw_max = aCWmin;
				qparam.cw_min = (aCWmin + 1) / 2 - 1;
				if (use_11b)
					qparam.txop = 6016/32;
				else
					qparam.txop = 3008/32;
				qparam.aifs = 2;
				break;
			case IEEE80211_AC_VO:
				qparam.cw_max = (aCWmin + 1) / 2 - 1;
				qparam.cw_min = (aCWmin + 1) / 4 - 1;
				if (use_11b)
					qparam.txop = 3264/32;
				else
					qparam.txop = 1504/32;
				qparam.aifs = 2;
				break;
			}
		} else {
			/* Confiure old 802.11b/g medium access rules. */
980 981
			qparam.cw_max = aCWmax;
			qparam.cw_min = aCWmin;
982 983 984
			qparam.txop = 0;
			qparam.aifs = 2;
		}
985

K
Kalle Valo 已提交
986 987
		qparam.uapsd = false;

988 989
		sdata->tx_conf[ac] = qparam;
		drv_conf_tx(local, sdata, ac, &qparam);
990
	}
991

992 993
	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
	    sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
994
		sdata->vif.bss_conf.qos = enable_qos;
995 996 997
		if (bss_notify)
			ieee80211_bss_info_change_notify(sdata,
							 BSS_CHANGED_QOS);
998
	}
999
}
J
Johannes Berg 已提交
1000

1001 1002 1003 1004
void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
				  const size_t supp_rates_len,
				  const u8 *supp_rates)
{
J
Johannes Berg 已提交
1005
	struct ieee80211_chanctx_conf *chanctx_conf;
1006 1007 1008 1009 1010 1011 1012
	int i, have_higher_than_11mbit = 0;

	/* cf. IEEE 802.11 9.2.12 */
	for (i = 0; i < supp_rates_len; i++)
		if ((supp_rates[i] & 0x7f) * 5 > 110)
			have_higher_than_11mbit = 1;

J
Johannes Berg 已提交
1013 1014 1015 1016
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);

	if (chanctx_conf &&
1017
	    chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ &&
1018 1019 1020 1021
	    have_higher_than_11mbit)
		sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
	else
		sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
J
Johannes Berg 已提交
1022
	rcu_read_unlock();
1023

1024
	ieee80211_set_wmm_default(sdata, true);
1025 1026
}

1027
u32 ieee80211_mandatory_rates(struct ieee80211_local *local,
1028 1029 1030 1031
			      enum ieee80211_band band)
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
1032
	u32 mandatory_rates;
1033 1034 1035 1036
	enum ieee80211_rate_flags mandatory_flag;
	int i;

	sband = local->hw.wiphy->bands[band];
1037 1038
	if (WARN_ON(!sband))
		return 1;
1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051

	if (band == IEEE80211_BAND_2GHZ)
		mandatory_flag = IEEE80211_RATE_MANDATORY_B;
	else
		mandatory_flag = IEEE80211_RATE_MANDATORY_A;

	bitrates = sband->bitrates;
	mandatory_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++)
		if (bitrates[i].flags & mandatory_flag)
			mandatory_rates |= BIT(i);
	return mandatory_rates;
}
1052 1053

void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
1054
			 u16 transaction, u16 auth_alg, u16 status,
J
Johannes Berg 已提交
1055
			 const u8 *extra, size_t extra_len, const u8 *da,
1056 1057
			 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx,
			 u32 tx_flags)
1058 1059 1060 1061
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
J
Johannes Berg 已提交
1062
	int err;
1063 1064

	skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1065
			    sizeof(*mgmt) + 6 + extra_len);
1066
	if (!skb)
1067
		return;
1068

1069 1070 1071 1072 1073 1074
	skb_reserve(skb, local->hw.extra_tx_headroom);

	mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
	memset(mgmt, 0, 24 + 6);
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
					  IEEE80211_STYPE_AUTH);
1075
	memcpy(mgmt->da, da, ETH_ALEN);
1076
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1077 1078 1079
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
	mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
1080
	mgmt->u.auth.status_code = cpu_to_le16(status);
1081 1082 1083
	if (extra)
		memcpy(skb_put(skb, extra_len), extra, extra_len);

J
Johannes Berg 已提交
1084 1085 1086 1087 1088 1089
	if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
		mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
		err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
		WARN_ON(err);
	}

1090 1091
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT |
					tx_flags;
1092
	ieee80211_tx_skb(sdata, skb);
1093 1094
}

1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133
void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
				    const u8 *bssid, u16 stype, u16 reason,
				    bool send_frame, u8 *frame_buf)
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt = (void *)frame_buf;

	/* build frame */
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
	mgmt->duration = 0; /* initialize only */
	mgmt->seq_ctrl = 0; /* initialize only */
	memcpy(mgmt->da, bssid, ETH_ALEN);
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	/* u.deauth.reason_code == u.disassoc.reason_code */
	mgmt->u.deauth.reason_code = cpu_to_le16(reason);

	if (send_frame) {
		skb = dev_alloc_skb(local->hw.extra_tx_headroom +
				    IEEE80211_DEAUTH_FRAME_LEN);
		if (!skb)
			return;

		skb_reserve(skb, local->hw.extra_tx_headroom);

		/* copy in frame */
		memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
		       mgmt, IEEE80211_DEAUTH_FRAME_LEN);

		if (sdata->vif.type != NL80211_IFTYPE_STATION ||
		    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
			IEEE80211_SKB_CB(skb)->flags |=
				IEEE80211_TX_INTFL_DONT_ENCRYPT;

		ieee80211_tx_skb(sdata, skb);
	}
}

1134
int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1135
			     size_t buffer_len, const u8 *ie, size_t ie_len,
1136 1137
			     enum ieee80211_band band, u32 rate_mask,
			     u8 channel)
1138 1139
{
	struct ieee80211_supported_band *sband;
1140
	u8 *pos = buffer, *end = buffer + buffer_len;
1141 1142
	size_t offset = 0, noffset;
	int supp_rates_len, i;
1143 1144 1145
	u8 rates[32];
	int num_rates;
	int ext_rates_len;
1146

1147
	sband = local->hw.wiphy->bands[band];
1148 1149
	if (WARN_ON_ONCE(!sband))
		return 0;
1150

1151 1152 1153 1154 1155 1156 1157 1158
	num_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++) {
		if ((BIT(i) & rate_mask) == 0)
			continue; /* skip rate */
		rates[num_rates++] = (u8) (sband->bitrates[i].bitrate / 5);
	}

	supp_rates_len = min_t(int, num_rates, 8);
1159

1160 1161
	if (end - pos < 2 + supp_rates_len)
		goto out_err;
1162
	*pos++ = WLAN_EID_SUPP_RATES;
1163
	*pos++ = supp_rates_len;
1164 1165
	memcpy(pos, rates, supp_rates_len);
	pos += supp_rates_len;
1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177

	/* insert "request information" if in custom IEs */
	if (ie && ie_len) {
		static const u8 before_extrates[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_extrates,
					     ARRAY_SIZE(before_extrates),
					     offset);
1178 1179
		if (end - pos < noffset - offset)
			goto out_err;
1180 1181 1182 1183 1184
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
	}

1185 1186
	ext_rates_len = num_rates - supp_rates_len;
	if (ext_rates_len > 0) {
1187 1188
		if (end - pos < 2 + ext_rates_len)
			goto out_err;
1189
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
1190 1191 1192
		*pos++ = ext_rates_len;
		memcpy(pos, rates + supp_rates_len, ext_rates_len);
		pos += ext_rates_len;
1193 1194
	}

1195
	if (channel && sband->band == IEEE80211_BAND_2GHZ) {
1196 1197
		if (end - pos < 3)
			goto out_err;
1198 1199 1200 1201 1202
		*pos++ = WLAN_EID_DS_PARAMS;
		*pos++ = 1;
		*pos++ = channel;
	}

1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215
	/* insert custom IEs that go before HT */
	if (ie && ie_len) {
		static const u8 before_ht[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
			WLAN_EID_EXT_SUPP_RATES,
			WLAN_EID_DS_PARAMS,
			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_ht, ARRAY_SIZE(before_ht),
					     offset);
1216 1217
		if (end - pos < noffset - offset)
			goto out_err;
1218 1219 1220
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
1221 1222
	}

1223 1224 1225
	if (sband->ht_cap.ht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
			goto out_err;
B
Ben Greear 已提交
1226 1227
		pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
						sband->ht_cap.cap);
1228
	}
1229

1230 1231 1232 1233 1234
	/*
	 * If adding more here, adjust code in main.c
	 * that calculates local->scan_ies_len.
	 */

1235 1236 1237
	/* add any remaining custom IEs */
	if (ie && ie_len) {
		noffset = ie_len;
1238 1239
		if (end - pos < noffset - offset)
			goto out_err;
1240 1241
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
1242 1243
	}

1244 1245 1246
	if (sband->vht_cap.vht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
			goto out_err;
1247 1248
		pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
						 sband->vht_cap.cap);
1249
	}
1250

1251 1252 1253
	return pos - buffer;
 out_err:
	WARN_ONCE(1, "not enough space for preq IEs\n");
1254 1255 1256
	return pos - buffer;
}

1257
struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1258
					  u8 *dst, u32 ratemask,
1259
					  struct ieee80211_channel *chan,
1260
					  const u8 *ssid, size_t ssid_len,
1261 1262
					  const u8 *ie, size_t ie_len,
					  bool directed)
1263 1264 1265 1266
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
1267
	u8 chan_no;
1268
	int ies_len;
1269

1270 1271 1272 1273 1274 1275
	/*
	 * Do not send DS Channel parameter for directed probe requests
	 * in order to maximize the chance that we get a response.  Some
	 * badly-behaved APs don't respond when this parameter is included.
	 */
	if (directed)
1276
		chan_no = 0;
1277
	else
1278
		chan_no = ieee80211_frequency_to_channel(chan->center_freq);
1279

1280
	skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
1281
				     ssid, ssid_len, 100 + ie_len);
1282
	if (!skb)
1283 1284 1285 1286 1287 1288 1289
		return NULL;

	ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
					   skb_tailroom(skb),
					   ie, ie_len, chan->band,
					   ratemask, chan_no);
	skb_put(skb, ies_len);
1290

1291
	if (dst) {
1292
		mgmt = (struct ieee80211_mgmt *) skb->data;
1293 1294 1295 1296
		memcpy(mgmt->da, dst, ETH_ALEN);
		memcpy(mgmt->bssid, dst, ETH_ALEN);
	}

1297
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1298

1299 1300 1301 1302 1303
	return skb;
}

void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
			      const u8 *ssid, size_t ssid_len,
1304
			      const u8 *ie, size_t ie_len,
1305
			      u32 ratemask, bool directed, u32 tx_flags,
J
Johannes Berg 已提交
1306
			      struct ieee80211_channel *channel, bool scan)
1307 1308 1309
{
	struct sk_buff *skb;

1310
	skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel,
1311
					ssid, ssid_len,
1312
					ie, ie_len, directed);
1313
	if (skb) {
1314
		IEEE80211_SKB_CB(skb)->flags |= tx_flags;
J
Johannes Berg 已提交
1315 1316 1317 1318
		if (scan)
			ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
		else
			ieee80211_tx_skb(sdata, skb);
1319
	}
1320 1321 1322 1323
}

u32 ieee80211_sta_get_rates(struct ieee80211_local *local,
			    struct ieee802_11_elems *elems,
1324
			    enum ieee80211_band band, u32 *basic_rates)
1325 1326 1327 1328 1329 1330 1331 1332
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
	size_t num_rates;
	u32 supp_rates;
	int i, j;
	sband = local->hw.wiphy->bands[band];

1333 1334
	if (WARN_ON(!sband))
		return 1;
1335 1336 1337 1338 1339 1340 1341 1342

	bitrates = sband->bitrates;
	num_rates = sband->n_bitrates;
	supp_rates = 0;
	for (i = 0; i < elems->supp_rates_len +
		     elems->ext_supp_rates_len; i++) {
		u8 rate = 0;
		int own_rate;
1343
		bool is_basic;
1344 1345 1346 1347 1348 1349
		if (i < elems->supp_rates_len)
			rate = elems->supp_rates[i];
		else if (elems->ext_supp_rates)
			rate = elems->ext_supp_rates
				[i - elems->supp_rates_len];
		own_rate = 5 * (rate & 0x7f);
1350 1351 1352 1353 1354 1355 1356
		is_basic = !!(rate & 0x80);

		if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
			continue;

		for (j = 0; j < num_rates; j++) {
			if (bitrates[j].bitrate == own_rate) {
1357
				supp_rates |= BIT(j);
1358 1359 1360 1361
				if (basic_rates && is_basic)
					*basic_rates |= BIT(j);
			}
		}
1362 1363 1364
	}
	return supp_rates;
}
1365

1366 1367 1368
void ieee80211_stop_device(struct ieee80211_local *local)
{
	ieee80211_led_radio(local, false);
1369
	ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1370 1371 1372 1373

	cancel_work_sync(&local->reconfig_filter);

	flush_workqueue(local->workqueue);
1374
	drv_stop(local);
1375 1376
}

1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395
static void ieee80211_assign_chanctx(struct ieee80211_local *local,
				     struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_chanctx_conf *conf;
	struct ieee80211_chanctx *ctx;

	if (!local->use_chanctx)
		return;

	mutex_lock(&local->chanctx_mtx);
	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
					 lockdep_is_held(&local->chanctx_mtx));
	if (conf) {
		ctx = container_of(conf, struct ieee80211_chanctx, conf);
		drv_assign_vif_chanctx(local, sdata, ctx);
	}
	mutex_unlock(&local->chanctx_mtx);
}

1396 1397 1398 1399
int ieee80211_reconfig(struct ieee80211_local *local)
{
	struct ieee80211_hw *hw = &local->hw;
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
1400
	struct ieee80211_chanctx *ctx;
1401
	struct sta_info *sta;
1402
	int res, i;
J
Johannes Berg 已提交
1403 1404
	bool reconfig_due_to_wowlan = false;

1405
#ifdef CONFIG_PM
J
Johannes Berg 已提交
1406 1407
	if (local->suspended)
		local->resuming = true;
1408

1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422
	if (local->wowlan) {
		local->wowlan = false;
		res = drv_resume(local);
		if (res < 0) {
			local->resuming = false;
			return res;
		}
		if (res == 0)
			goto wake_up;
		WARN_ON(res > 1);
		/*
		 * res is 1, which means the driver requested
		 * to go through a regular reset on wakeup.
		 */
J
Johannes Berg 已提交
1423
		reconfig_due_to_wowlan = true;
1424 1425
	}
#endif
1426 1427 1428
	/* everything else happens only if HW was up & running */
	if (!local->open_count)
		goto wake_up;
1429

1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441
	/*
	 * Upon resume hardware can sometimes be goofy due to
	 * various platform / driver / bus issues, so restarting
	 * the device may at times not work immediately. Propagate
	 * the error.
	 */
	res = drv_start(local);
	if (res) {
		WARN(local->suspended, "Hardware became unavailable "
		     "upon resume. This could be a software issue "
		     "prior to suspend or a hardware issue.\n");
		return res;
1442 1443
	}

1444 1445 1446 1447 1448 1449 1450 1451 1452
	/* setup fragmentation threshold */
	drv_set_frag_threshold(local, hw->wiphy->frag_threshold);

	/* setup RTS threshold */
	drv_set_rts_threshold(local, hw->wiphy->rts_threshold);

	/* reset coverage class */
	drv_set_coverage_class(local, hw->wiphy->coverage_class);

1453 1454 1455 1456
	ieee80211_led_radio(local, true);
	ieee80211_mod_tpt_led_trig(local,
				   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);

1457
	/* add interfaces */
1458 1459 1460 1461 1462 1463 1464 1465 1466 1467
	sdata = rtnl_dereference(local->monitor_sdata);
	if (sdata) {
		res = drv_add_interface(local, sdata);
		if (WARN_ON(res)) {
			rcu_assign_pointer(local->monitor_sdata, NULL);
			synchronize_net();
			kfree(sdata);
		}
	}

1468 1469 1470
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
		    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1471
		    ieee80211_sdata_running(sdata))
1472
			res = drv_add_interface(local, sdata);
1473 1474
	}

J
Johannes Berg 已提交
1475
	/* add channel contexts */
1476 1477 1478 1479 1480 1481
	if (local->use_chanctx) {
		mutex_lock(&local->chanctx_mtx);
		list_for_each_entry(ctx, &local->chanctx_list, list)
			WARN_ON(drv_add_chanctx(local, ctx));
		mutex_unlock(&local->chanctx_mtx);
	}
J
Johannes Berg 已提交
1482

1483 1484 1485
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (!ieee80211_sdata_running(sdata))
			continue;
1486
		ieee80211_assign_chanctx(local, sdata);
1487 1488
	}

1489
	sdata = rtnl_dereference(local->monitor_sdata);
1490 1491
	if (sdata && ieee80211_sdata_running(sdata))
		ieee80211_assign_chanctx(local, sdata);
1492

1493
	/* add STAs back */
1494 1495
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
1496
		enum ieee80211_sta_state state;
J
Johannes Berg 已提交
1497

1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508
		if (!sta->uploaded)
			continue;

		/* AP-mode stations will be added later */
		if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
1509
	}
1510
	mutex_unlock(&local->sta_mtx);
1511

1512
	/* reconfigure tx conf */
1513 1514 1515 1516 1517 1518
	if (hw->queues >= IEEE80211_NUM_ACS) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
			    sdata->vif.type == NL80211_IFTYPE_MONITOR ||
			    !ieee80211_sdata_running(sdata))
				continue;
1519

1520 1521 1522 1523
			for (i = 0; i < IEEE80211_NUM_ACS; i++)
				drv_conf_tx(local, sdata, i,
					    &sdata->tx_conf[i]);
		}
1524
	}
1525

1526 1527 1528 1529 1530 1531 1532
	/* reconfigure hardware */
	ieee80211_hw_config(local, ~0);

	ieee80211_configure_filter(local);

	/* Finally also reconfigure all the BSS information */
	list_for_each_entry(sdata, &local->interfaces, list) {
1533 1534
		u32 changed;

1535
		if (!ieee80211_sdata_running(sdata))
1536
			continue;
1537 1538 1539 1540 1541 1542 1543 1544 1545

		/* common change flags for all interface types */
		changed = BSS_CHANGED_ERP_CTS_PROT |
			  BSS_CHANGED_ERP_PREAMBLE |
			  BSS_CHANGED_ERP_SLOT |
			  BSS_CHANGED_HT |
			  BSS_CHANGED_BASIC_RATES |
			  BSS_CHANGED_BEACON_INT |
			  BSS_CHANGED_BSSID |
1546
			  BSS_CHANGED_CQM |
1547
			  BSS_CHANGED_QOS |
1548 1549
			  BSS_CHANGED_IDLE |
			  BSS_CHANGED_TXPOWER;
1550

1551 1552
		switch (sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
1553
			changed |= BSS_CHANGED_ASSOC |
E
Eliad Peller 已提交
1554 1555
				   BSS_CHANGED_ARP_FILTER |
				   BSS_CHANGED_PS;
1556 1557 1558 1559

			if (sdata->u.mgd.dtim_period)
				changed |= BSS_CHANGED_DTIM_PERIOD;

1560
			mutex_lock(&sdata->u.mgd.mtx);
1561
			ieee80211_bss_info_change_notify(sdata, changed);
1562
			mutex_unlock(&sdata->u.mgd.mtx);
1563
			break;
1564
		case NL80211_IFTYPE_ADHOC:
1565 1566
			changed |= BSS_CHANGED_IBSS;
			/* fall through */
1567
		case NL80211_IFTYPE_AP:
1568
			changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
1569

1570
			if (sdata->vif.type == NL80211_IFTYPE_AP) {
1571 1572
				changed |= BSS_CHANGED_AP_PROBE_RESP;

1573 1574 1575 1576
				if (rcu_access_pointer(sdata->u.ap.beacon))
					drv_start_ap(local, sdata);
			}

1577
			/* fall through */
1578
		case NL80211_IFTYPE_MESH_POINT:
1579 1580 1581 1582 1583
			if (sdata->vif.bss_conf.enable_beacon) {
				changed |= BSS_CHANGED_BEACON |
					   BSS_CHANGED_BEACON_ENABLED;
				ieee80211_bss_info_change_notify(sdata, changed);
			}
1584 1585 1586 1587 1588 1589 1590
			break;
		case NL80211_IFTYPE_WDS:
			break;
		case NL80211_IFTYPE_AP_VLAN:
		case NL80211_IFTYPE_MONITOR:
			/* ignore virtual */
			break;
1591
		case NL80211_IFTYPE_P2P_DEVICE:
1592 1593
			changed = BSS_CHANGED_IDLE;
			break;
1594
		case NL80211_IFTYPE_UNSPECIFIED:
1595
		case NUM_NL80211_IFTYPES:
1596 1597
		case NL80211_IFTYPE_P2P_CLIENT:
		case NL80211_IFTYPE_P2P_GO:
1598 1599 1600 1601 1602
			WARN_ON(1);
			break;
		}
	}

1603 1604
	ieee80211_recalc_ps(local, -1);

1605 1606 1607 1608 1609 1610 1611 1612 1613 1614
	/*
	 * The sta might be in psm against the ap (e.g. because
	 * this was the state before a hw restart), so we
	 * explicitly send a null packet in order to make sure
	 * it'll sync against the ap (and get out of psm).
	 */
	if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type != NL80211_IFTYPE_STATION)
				continue;
1615 1616
			if (!sdata->u.mgd.associated)
				continue;
1617 1618 1619 1620 1621

			ieee80211_send_nullfunc(local, sdata, 0);
		}
	}

1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639
	/* APs are now beaconing, add back stations */
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
		enum ieee80211_sta_state state;

		if (!sta->uploaded)
			continue;

		if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
	}
	mutex_unlock(&local->sta_mtx);

1640 1641 1642 1643 1644
	/* add back keys */
	list_for_each_entry(sdata, &local->interfaces, list)
		if (ieee80211_sdata_running(sdata))
			ieee80211_enable_keys(sdata);

1645
 wake_up:
1646 1647 1648
	local->in_reconfig = false;
	barrier();

1649 1650 1651 1652 1653 1654 1655 1656 1657 1658
	/*
	 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
	 * sessions can be established after a resume.
	 *
	 * Also tear down aggregation sessions since reconfiguring
	 * them in a hardware restart scenario is not easily done
	 * right now, and the hardware will have lost information
	 * about the sessions, but we and the AP still think they
	 * are active. This is really a workaround though.
	 */
1659
	if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1660 1661 1662
		mutex_lock(&local->sta_mtx);

		list_for_each_entry(sta, &local->sta_list, list) {
1663 1664
			ieee80211_sta_tear_down_BA_sessions(
					sta, AGG_STOP_LOCAL_REQUEST);
J
Johannes Berg 已提交
1665
			clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1666
		}
1667 1668

		mutex_unlock(&local->sta_mtx);
1669 1670
	}

1671 1672
	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_SUSPEND);
1673

1674 1675 1676 1677
	/*
	 * If this is for hw restart things are still running.
	 * We may want to change that later, however.
	 */
1678
	if (!local->suspended || reconfig_due_to_wowlan)
1679
		drv_restart_complete(local);
1680 1681

	if (!local->suspended)
1682 1683 1684
		return 0;

#ifdef CONFIG_PM
J
Johannes Berg 已提交
1685
	/* first set suspended false, then resuming */
1686
	local->suspended = false;
J
Johannes Berg 已提交
1687 1688
	mb();
	local->resuming = false;
1689

1690
	mod_timer(&local->sta_cleanup, jiffies + 1);
1691 1692 1693
#else
	WARN_ON(1);
#endif
1694 1695
	return 0;
}
1696

1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723
void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata;
	struct ieee80211_local *local;
	struct ieee80211_key *key;

	if (WARN_ON(!vif))
		return;

	sdata = vif_to_sdata(vif);
	local = sdata->local;

	if (WARN_ON(!local->resuming))
		return;

	if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
		return;

	sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;

	mutex_lock(&local->key_mtx);
	list_for_each_entry(key, &sdata->key_list, list)
		key->flags |= KEY_FLAG_TAINTED;
	mutex_unlock(&local->key_mtx);
}
EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);

1724
void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
1725
{
1726 1727 1728
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_chanctx_conf *chanctx_conf;
	struct ieee80211_chanctx *chanctx;
1729

1730
	mutex_lock(&local->chanctx_mtx);
1731

1732 1733
	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
					lockdep_is_held(&local->chanctx_mtx));
1734

1735
	if (WARN_ON_ONCE(!chanctx_conf))
1736
		goto unlock;
1737

1738 1739
	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
	ieee80211_recalc_smps_chanctx(local, chanctx);
1740
 unlock:
1741
	mutex_unlock(&local->chanctx_mtx);
1742
}
1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798

static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
{
	int i;

	for (i = 0; i < n_ids; i++)
		if (ids[i] == id)
			return true;
	return false;
}

/**
 * ieee80211_ie_split - split an IE buffer according to ordering
 *
 * @ies: the IE buffer
 * @ielen: the length of the IE buffer
 * @ids: an array with element IDs that are allowed before
 *	the split
 * @n_ids: the size of the element ID array
 * @offset: offset where to start splitting in the buffer
 *
 * This function splits an IE buffer by updating the @offset
 * variable to point to the location where the buffer should be
 * split.
 *
 * It assumes that the given IE buffer is well-formed, this
 * has to be guaranteed by the caller!
 *
 * It also assumes that the IEs in the buffer are ordered
 * correctly, if not the result of using this function will not
 * be ordered correctly either, i.e. it does no reordering.
 *
 * The function returns the offset where the next part of the
 * buffer starts, which may be @ielen if the entire (remainder)
 * of the buffer should be used.
 */
size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
			  const u8 *ids, int n_ids, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
		pos += 2 + ies[pos + 1];

	return pos;
}

size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
		pos += 2 + ies[pos + 1];

	return pos;
}
1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838

static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
					    int rssi_min_thold,
					    int rssi_max_thold)
{
	trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);

	if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
		return;

	/*
	 * Scale up threshold values before storing it, as the RSSI averaging
	 * algorithm uses a scaled up value as well. Change this scaling
	 * factor if the RSSI averaging algorithm changes.
	 */
	sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
	sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
}

void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
				    int rssi_min_thold,
				    int rssi_max_thold)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	WARN_ON(rssi_min_thold == rssi_max_thold ||
		rssi_min_thold > rssi_max_thold);

	_ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
				       rssi_max_thold);
}
EXPORT_SYMBOL(ieee80211_enable_rssi_reports);

void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	_ieee80211_enable_rssi_reports(sdata, 0, 0);
}
EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1839

B
Ben Greear 已提交
1840
u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854
			      u16 cap)
{
	__le16 tmp;

	*pos++ = WLAN_EID_HT_CAPABILITY;
	*pos++ = sizeof(struct ieee80211_ht_cap);
	memset(pos, 0, sizeof(struct ieee80211_ht_cap));

	/* capability flags */
	tmp = cpu_to_le16(cap);
	memcpy(pos, &tmp, sizeof(u16));
	pos += sizeof(u16);

	/* AMPDU parameters */
B
Ben Greear 已提交
1855 1856
	*pos++ = ht_cap->ampdu_factor |
		 (ht_cap->ampdu_density <<
1857 1858 1859
			IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);

	/* MCS set */
B
Ben Greear 已提交
1860 1861
	memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
	pos += sizeof(ht_cap->mcs);
1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874

	/* extended capabilities */
	pos += sizeof(__le16);

	/* BF capabilities */
	pos += sizeof(__le32);

	/* antenna selection */
	pos += sizeof(u8);

	return pos;
}

1875
u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
1876
			       u32 cap)
1877 1878 1879 1880
{
	__le32 tmp;

	*pos++ = WLAN_EID_VHT_CAPABILITY;
M
Mahesh Palivela 已提交
1881 1882
	*pos++ = sizeof(struct ieee80211_vht_cap);
	memset(pos, 0, sizeof(struct ieee80211_vht_cap));
1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895

	/* capability flags */
	tmp = cpu_to_le32(cap);
	memcpy(pos, &tmp, sizeof(u32));
	pos += sizeof(u32);

	/* VHT MCS set */
	memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
	pos += sizeof(vht_cap->vht_mcs);

	return pos;
}

1896
u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1897
			       const struct cfg80211_chan_def *chandef,
1898
			       u16 prot_mode)
1899
{
1900
	struct ieee80211_ht_operation *ht_oper;
1901
	/* Build HT Information */
1902 1903 1904
	*pos++ = WLAN_EID_HT_OPERATION;
	*pos++ = sizeof(struct ieee80211_ht_operation);
	ht_oper = (struct ieee80211_ht_operation *)pos;
1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915
	ht_oper->primary_chan = ieee80211_frequency_to_channel(
					chandef->chan->center_freq);
	switch (chandef->width) {
	case NL80211_CHAN_WIDTH_160:
	case NL80211_CHAN_WIDTH_80P80:
	case NL80211_CHAN_WIDTH_80:
	case NL80211_CHAN_WIDTH_40:
		if (chandef->center_freq1 > chandef->chan->center_freq)
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
		else
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1916 1917
		break;
	default:
1918
		ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1919 1920
		break;
	}
1921
	if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
1922 1923
	    chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
	    chandef->width != NL80211_CHAN_WIDTH_20)
1924
		ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
1925

1926
	ht_oper->operation_mode = cpu_to_le16(prot_mode);
1927
	ht_oper->stbc_param = 0x0000;
1928 1929 1930

	/* It seems that Basic MCS set and Supported MCS set
	   are identical for the first 10 bytes */
1931 1932
	memset(&ht_oper->basic_set, 0, 16);
	memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
1933

1934
	return pos + sizeof(struct ieee80211_ht_operation);
1935 1936
}

1937
void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
J
Johannes Berg 已提交
1938
				  const struct ieee80211_ht_operation *ht_oper,
1939
				  struct cfg80211_chan_def *chandef)
1940 1941 1942
{
	enum nl80211_channel_type channel_type;

1943 1944 1945 1946 1947
	if (!ht_oper) {
		cfg80211_chandef_create(chandef, control_chan,
					NL80211_CHAN_NO_HT);
		return;
	}
1948

1949
	switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962
	case IEEE80211_HT_PARAM_CHA_SEC_NONE:
		channel_type = NL80211_CHAN_HT20;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
		channel_type = NL80211_CHAN_HT40PLUS;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
		channel_type = NL80211_CHAN_HT40MINUS;
		break;
	default:
		channel_type = NL80211_CHAN_NO_HT;
	}

1963
	cfg80211_chandef_create(chandef, control_chan, channel_type);
1964 1965
}

1966
int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
1967 1968
			    struct sk_buff *skb, bool need_basic,
			    enum ieee80211_band band)
1969 1970 1971 1972 1973
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, rates, *pos;
1974
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
1975

1976
	sband = local->hw.wiphy->bands[band];
1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987
	rates = sband->n_bitrates;
	if (rates > 8)
		rates = 8;

	if (skb_tailroom(skb) < rates + 2)
		return -ENOMEM;

	pos = skb_put(skb, rates + 2);
	*pos++ = WLAN_EID_SUPP_RATES;
	*pos++ = rates;
	for (i = 0; i < rates; i++) {
1988 1989 1990
		u8 basic = 0;
		if (need_basic && basic_rates & BIT(i))
			basic = 0x80;
1991
		rate = sband->bitrates[i].bitrate;
1992
		*pos++ = basic | (u8) (rate / 5);
1993 1994 1995 1996 1997
	}

	return 0;
}

1998
int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
1999 2000
				struct sk_buff *skb, bool need_basic,
				enum ieee80211_band band)
2001 2002 2003 2004 2005
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, exrates, *pos;
2006
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2007

2008
	sband = local->hw.wiphy->bands[band];
2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022
	exrates = sband->n_bitrates;
	if (exrates > 8)
		exrates -= 8;
	else
		exrates = 0;

	if (skb_tailroom(skb) < exrates + 2)
		return -ENOMEM;

	if (exrates) {
		pos = skb_put(skb, exrates + 2);
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
		*pos++ = exrates;
		for (i = 8; i < sband->n_bitrates; i++) {
2023 2024 2025
			u8 basic = 0;
			if (need_basic && basic_rates & BIT(i))
				basic = 0x80;
2026
			rate = sband->bitrates[i].bitrate;
2027
			*pos++ = basic | (u8) (rate / 5);
2028 2029 2030 2031
		}
	}
	return 0;
}
2032 2033 2034 2035 2036 2037

int ieee80211_ave_rssi(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;

2038 2039 2040 2041
	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
		/* non-managed type inferfaces */
		return 0;
	}
2042
	return ifmgd->ave_beacon_signal / 16;
2043
}
2044
EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060

u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
{
	if (!mcs)
		return 1;

	/* TODO: consider rx_highest */

	if (mcs->rx_mask[3])
		return 4;
	if (mcs->rx_mask[2])
		return 3;
	if (mcs->rx_mask[1])
		return 2;
	return 1;
}
2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094

/**
 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
 * @local: mac80211 hw info struct
 * @status: RX status
 * @mpdu_len: total MPDU length (including FCS)
 * @mpdu_offset: offset into MPDU to calculate timestamp at
 *
 * This function calculates the RX timestamp at the given MPDU offset, taking
 * into account what the RX timestamp was. An offset of 0 will just normalize
 * the timestamp to TSF at beginning of MPDU reception.
 */
u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
				     struct ieee80211_rx_status *status,
				     unsigned int mpdu_len,
				     unsigned int mpdu_offset)
{
	u64 ts = status->mactime;
	struct rate_info ri;
	u16 rate;

	if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
		return 0;

	memset(&ri, 0, sizeof(ri));

	/* Fill cfg80211 rate info */
	if (status->flag & RX_FLAG_HT) {
		ri.mcs = status->rate_idx;
		ri.flags |= RATE_INFO_FLAGS_MCS;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107 2108
	} else if (status->flag & RX_FLAG_VHT) {
		ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
		ri.mcs = status->rate_idx;
		ri.nss = status->vht_nss;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80P80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_160MHZ)
			ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125
	} else {
		struct ieee80211_supported_band *sband;

		sband = local->hw.wiphy->bands[status->band];
		ri.legacy = sband->bitrates[status->rate_idx].bitrate;
	}

	rate = cfg80211_calculate_bitrate(&ri);

	/* rewind from end of MPDU */
	if (status->flag & RX_FLAG_MACTIME_END)
		ts -= mpdu_len * 8 * 10 / rate;

	ts += mpdu_offset * 8 * 10 / rate;

	return ts;
}
2126 2127 2128 2129 2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156

void ieee80211_dfs_cac_cancel(struct ieee80211_local *local)
{
	struct ieee80211_sub_if_data *sdata;

	mutex_lock(&local->iflist_mtx);
	list_for_each_entry(sdata, &local->interfaces, list) {
		cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);

		if (sdata->wdev.cac_started) {
			ieee80211_vif_release_channel(sdata);
			cfg80211_cac_event(sdata->dev,
					   NL80211_RADAR_CAC_ABORTED,
					   GFP_KERNEL);
		}
	}
	mutex_unlock(&local->iflist_mtx);
}

void ieee80211_dfs_radar_detected_work(struct work_struct *work)
{
	struct ieee80211_local *local =
		container_of(work, struct ieee80211_local, radar_detected_work);
	struct cfg80211_chan_def chandef;

	ieee80211_dfs_cac_cancel(local);

	if (local->use_chanctx)
		/* currently not handled */
		WARN_ON(1);
	else {
2157
		chandef = local->hw.conf.chandef;
2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170
		cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL);
	}
}

void ieee80211_radar_detected(struct ieee80211_hw *hw)
{
	struct ieee80211_local *local = hw_to_local(hw);

	trace_api_radar_detected(local);

	ieee80211_queue_work(hw, &local->radar_detected_work);
}
EXPORT_SYMBOL(ieee80211_radar_detected);