util.c 55.1 KB
Newer Older
J
Johannes Berg 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * utilities for mac80211
 */

#include <net/mac80211.h>
#include <linux/netdevice.h>
16
#include <linux/export.h>
J
Johannes Berg 已提交
17 18 19 20 21 22
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/bitmap.h>
23
#include <linux/crc32.h>
24
#include <net/net_namespace.h>
J
Johannes Berg 已提交
25
#include <net/cfg80211.h>
26
#include <net/rtnetlink.h>
J
Johannes Berg 已提交
27 28

#include "ieee80211_i.h"
29
#include "driver-ops.h"
J
Johannes Berg 已提交
30
#include "rate.h"
31
#include "mesh.h"
J
Johannes Berg 已提交
32
#include "wme.h"
33
#include "led.h"
J
Johannes Berg 已提交
34
#include "wep.h"
J
Johannes Berg 已提交
35 36 37 38

/* privid for wiphys to determine whether they belong to us or not */
void *mac80211_wiphy_privid = &mac80211_wiphy_privid;

39 40 41 42 43 44 45 46 47
struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
{
	struct ieee80211_local *local;
	BUG_ON(!wiphy);

	local = wiphy_priv(wiphy);
	return &local->hw;
}
EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
J
Johannes Berg 已提交
48

49
u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
50
			enum nl80211_iftype type)
J
Johannes Berg 已提交
51
{
52
	__le16 fc = hdr->frame_control;
J
Johannes Berg 已提交
53

54 55
	 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
	if (len < 16)
J
Johannes Berg 已提交
56 57
		return NULL;

58
	if (ieee80211_is_data(fc)) {
59 60
		if (len < 24) /* drop incorrect hdr len (data) */
			return NULL;
61 62

		if (ieee80211_has_a4(fc))
J
Johannes Berg 已提交
63
			return NULL;
64 65 66
		if (ieee80211_has_tods(fc))
			return hdr->addr1;
		if (ieee80211_has_fromds(fc))
J
Johannes Berg 已提交
67
			return hdr->addr2;
68 69 70 71 72

		return hdr->addr3;
	}

	if (ieee80211_is_mgmt(fc)) {
73 74
		if (len < 24) /* drop incorrect hdr len (mgmt) */
			return NULL;
J
Johannes Berg 已提交
75
		return hdr->addr3;
76 77 78 79
	}

	if (ieee80211_is_ctl(fc)) {
		if(ieee80211_is_pspoll(fc))
J
Johannes Berg 已提交
80
			return hdr->addr1;
81 82

		if (ieee80211_is_back_req(fc)) {
83
			switch (type) {
84
			case NL80211_IFTYPE_STATION:
85
				return hdr->addr2;
86 87
			case NL80211_IFTYPE_AP:
			case NL80211_IFTYPE_AP_VLAN:
88 89
				return hdr->addr1;
			default:
90
				break; /* fall through to the return */
91 92
			}
		}
J
Johannes Berg 已提交
93 94 95 96 97
	}

	return NULL;
}

98
void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
J
Johannes Berg 已提交
99
{
100
	struct sk_buff *skb;
J
Johannes Berg 已提交
101 102
	struct ieee80211_hdr *hdr;

103
	skb_queue_walk(&tx->skbs, skb) {
J
Johannes Berg 已提交
104 105
		hdr = (struct ieee80211_hdr *) skb->data;
		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
106
	}
J
Johannes Berg 已提交
107 108
}

109
int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
J
Johannes Berg 已提交
110 111 112 113 114 115 116 117 118 119 120 121 122
			     int rate, int erp, int short_preamble)
{
	int dur;

	/* calculate duration (in microseconds, rounded up to next higher
	 * integer if it includes a fractional microsecond) to send frame of
	 * len bytes (does not include FCS) at the given rate. Duration will
	 * also include SIFS.
	 *
	 * rate is in 100 kbps, so divident is multiplied by 10 in the
	 * DIV_ROUND_UP() operations.
	 */

123
	if (band == IEEE80211_BAND_5GHZ || erp) {
J
Johannes Berg 已提交
124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162
		/*
		 * OFDM:
		 *
		 * N_DBPS = DATARATE x 4
		 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
		 *	(16 = SIGNAL time, 6 = tail bits)
		 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
		 *
		 * T_SYM = 4 usec
		 * 802.11a - 17.5.2: aSIFSTime = 16 usec
		 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
		 *	signal ext = 6 usec
		 */
		dur = 16; /* SIFS + signal ext */
		dur += 16; /* 17.3.2.3: T_PREAMBLE = 16 usec */
		dur += 4; /* 17.3.2.3: T_SIGNAL = 4 usec */
		dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
					4 * rate); /* T_SYM x N_SYM */
	} else {
		/*
		 * 802.11b or 802.11g with 802.11b compatibility:
		 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
		 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
		 *
		 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
		 * aSIFSTime = 10 usec
		 * aPreambleLength = 144 usec or 72 usec with short preamble
		 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
		 */
		dur = 10; /* aSIFSTime = 10 usec */
		dur += short_preamble ? (72 + 24) : (144 + 48);

		dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
	}

	return dur;
}

/* Exported duration function for driver use */
163 164
__le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
					struct ieee80211_vif *vif,
165
					enum ieee80211_band band,
166 167
					size_t frame_len,
					struct ieee80211_rate *rate)
J
Johannes Berg 已提交
168
{
169
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
170 171
	u16 dur;
	int erp;
172
	bool short_preamble = false;
J
Johannes Berg 已提交
173

174
	erp = 0;
175 176
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
177
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
178 179 180
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
181

182
	dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
183
				       short_preamble);
J
Johannes Berg 已提交
184 185 186 187 188

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_generic_frame_duration);

189 190
__le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
			      struct ieee80211_vif *vif, size_t frame_len,
191
			      const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
192 193 194
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
195
	struct ieee80211_sub_if_data *sdata;
196
	bool short_preamble;
J
Johannes Berg 已提交
197 198
	int erp;
	u16 dur;
199 200
	struct ieee80211_supported_band *sband;

201
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
202

203
	short_preamble = false;
204

205
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
206 207

	erp = 0;
208 209
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
210
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
211 212 213
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
214 215

	/* CTS duration */
216
	dur = ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
217 218
				       erp, short_preamble);
	/* Data frame duration */
219
	dur += ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
220 221
					erp, short_preamble);
	/* ACK duration */
222
	dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
223 224 225 226 227 228
					erp, short_preamble);

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_rts_duration);

229 230
__le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
				    struct ieee80211_vif *vif,
J
Johannes Berg 已提交
231
				    size_t frame_len,
232
				    const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
233 234 235
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
236
	struct ieee80211_sub_if_data *sdata;
237
	bool short_preamble;
J
Johannes Berg 已提交
238 239
	int erp;
	u16 dur;
240 241
	struct ieee80211_supported_band *sband;

242
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
243

244
	short_preamble = false;
245

246
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
247
	erp = 0;
248 249
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
250
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
251 252 253
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
254 255

	/* Data frame duration */
256
	dur = ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
257
				       erp, short_preamble);
258
	if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
J
Johannes Berg 已提交
259
		/* ACK duration */
260
		dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
261 262 263 264 265 266 267
						erp, short_preamble);
	}

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_ctstoself_duration);

268 269 270
void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
{
	struct ieee80211_sub_if_data *sdata;
271 272 273 274
	int n_acs = IEEE80211_NUM_ACS;

	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;
275 276 277 278

	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

279 280 281
		if (!sdata->dev)
			continue;

282 283 284 285 286 287 288
		if (test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state))
			continue;

		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
		    local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
			continue;

289
		for (ac = 0; ac < n_acs; ac++) {
290 291 292 293 294 295 296 297 298 299 300
			int ac_queue = sdata->vif.hw_queue[ac];

			if (ac_queue == queue ||
			    (sdata->vif.cab_queue == queue &&
			     local->queue_stop_reasons[ac_queue] == 0 &&
			     skb_queue_empty(&local->pending[ac_queue])))
				netif_wake_subqueue(sdata->dev, ac);
		}
	}
}

K
Kalle Valo 已提交
301 302
static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
303 304 305
{
	struct ieee80211_local *local = hw_to_local(hw);

J
Johannes Berg 已提交
306 307
	trace_wake_queue(local, queue, reason);

308 309
	if (WARN_ON(queue >= hw->queues))
		return;
K
Kalle Valo 已提交
310

311 312 313
	if (!test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

314 315 316 317 318 319
	__clear_bit(reason, &local->queue_stop_reasons[queue]);

	if (local->queue_stop_reasons[queue] != 0)
		/* someone still has this queue stopped */
		return;

320 321
	if (skb_queue_empty(&local->pending[queue])) {
		rcu_read_lock();
322
		ieee80211_propagate_queue_wake(local, queue);
323 324
		rcu_read_unlock();
	} else
J
Johannes Berg 已提交
325
		tasklet_schedule(&local->tx_pending_tasklet);
J
Johannes Berg 已提交
326
}
K
Kalle Valo 已提交
327

328 329
void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
330 331 332 333 334 335 336 337 338 339 340 341 342 343
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_wake_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_wake_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
344 345
EXPORT_SYMBOL(ieee80211_wake_queue);

K
Kalle Valo 已提交
346 347
static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
348 349
{
	struct ieee80211_local *local = hw_to_local(hw);
350
	struct ieee80211_sub_if_data *sdata;
351
	int n_acs = IEEE80211_NUM_ACS;
J
Johannes Berg 已提交
352

J
Johannes Berg 已提交
353 354
	trace_stop_queue(local, queue, reason);

355 356
	if (WARN_ON(queue >= hw->queues))
		return;
357

358 359 360
	if (test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

361
	__set_bit(reason, &local->queue_stop_reasons[queue]);
362

363 364 365
	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;

366
	rcu_read_lock();
367 368 369
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

370 371 372
		if (!sdata->dev)
			continue;

373
		for (ac = 0; ac < n_acs; ac++) {
374 375 376 377 378
			if (sdata->vif.hw_queue[ac] == queue ||
			    sdata->vif.cab_queue == queue)
				netif_stop_subqueue(sdata->dev, ac);
		}
	}
379
	rcu_read_unlock();
J
Johannes Berg 已提交
380
}
K
Kalle Valo 已提交
381

382 383
void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
384 385 386 387 388 389 390 391 392 393 394 395 396 397
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_stop_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
398 399
EXPORT_SYMBOL(ieee80211_stop_queue);

400 401 402 403 404
void ieee80211_add_pending_skb(struct ieee80211_local *local,
			       struct sk_buff *skb)
{
	struct ieee80211_hw *hw = &local->hw;
	unsigned long flags;
405
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
406
	int queue = info->hw_queue;
407 408

	if (WARN_ON(!info->control.vif)) {
409
		ieee80211_free_txskb(&local->hw, skb);
410 411
		return;
	}
412 413 414

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
J
Johannes Berg 已提交
415
	__skb_queue_tail(&local->pending[queue], skb);
416 417 418 419
	__ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

420 421 422
void ieee80211_add_pending_skbs_fn(struct ieee80211_local *local,
				   struct sk_buff_head *skbs,
				   void (*fn)(void *data), void *data)
423 424 425 426
{
	struct ieee80211_hw *hw = &local->hw;
	struct sk_buff *skb;
	unsigned long flags;
427
	int queue, i;
428 429 430

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	while ((skb = skb_dequeue(skbs))) {
431 432 433
		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);

		if (WARN_ON(!info->control.vif)) {
434
			ieee80211_free_txskb(&local->hw, skb);
435 436 437
			continue;
		}

438
		queue = info->hw_queue;
439 440 441 442

		__ieee80211_stop_queue(hw, queue,
				IEEE80211_QUEUE_STOP_REASON_SKB_ADD);

J
Johannes Berg 已提交
443
		__skb_queue_tail(&local->pending[queue], skb);
444 445
	}

446 447 448
	if (fn)
		fn(data);

J
Johannes Berg 已提交
449
	for (i = 0; i < hw->queues; i++)
450 451 452 453 454
		__ieee80211_wake_queue(hw, i,
			IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

K
Kalle Valo 已提交
455 456
void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
				    enum queue_stop_reason reason)
J
Johannes Berg 已提交
457
{
K
Kalle Valo 已提交
458 459
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
460 461
	int i;

K
Kalle Valo 已提交
462 463
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

464
	for (i = 0; i < hw->queues; i++)
K
Kalle Valo 已提交
465 466 467 468 469 470 471 472 473
		__ieee80211_stop_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queues(struct ieee80211_hw *hw)
{
	ieee80211_stop_queues_by_reason(hw,
					IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
474 475 476
}
EXPORT_SYMBOL(ieee80211_stop_queues);

477 478 479
int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
{
	struct ieee80211_local *local = hw_to_local(hw);
J
Johannes Berg 已提交
480 481
	unsigned long flags;
	int ret;
482

483 484
	if (WARN_ON(queue >= hw->queues))
		return true;
485

J
Johannes Berg 已提交
486 487 488 489
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	ret = !!local->queue_stop_reasons[queue];
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
	return ret;
490 491 492
}
EXPORT_SYMBOL(ieee80211_queue_stopped);

K
Kalle Valo 已提交
493 494
void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
				     enum queue_stop_reason reason)
J
Johannes Berg 已提交
495
{
K
Kalle Valo 已提交
496 497
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
498 499
	int i;

K
Kalle Valo 已提交
500 501
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

502
	for (i = 0; i < hw->queues; i++)
K
Kalle Valo 已提交
503 504 505 506 507 508 509 510
		__ieee80211_wake_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queues(struct ieee80211_hw *hw)
{
	ieee80211_wake_queues_by_reason(hw, IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
511 512
}
EXPORT_SYMBOL(ieee80211_wake_queues);
513

514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538
void ieee80211_flush_queues(struct ieee80211_local *local,
			    struct ieee80211_sub_if_data *sdata)
{
	u32 queues;

	if (!local->ops->flush)
		return;

	if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) {
		int ac;

		queues = 0;

		for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
			queues |= BIT(sdata->vif.hw_queue[ac]);
		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE)
			queues |= BIT(sdata->vif.cab_queue);
	} else {
		/* all queues */
		queues = BIT(local->hw.queues) - 1;
	}

	drv_flush(local, queues, false);
}

539
void ieee80211_iterate_active_interfaces(
540
	struct ieee80211_hw *hw, u32 iter_flags,
541 542 543
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
544 545 546 547
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

548
	mutex_lock(&local->iflist_mtx);
549 550 551

	list_for_each_entry(sdata, &local->interfaces, list) {
		switch (sdata->vif.type) {
552 553
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
554
			continue;
555
		default:
556 557
			break;
		}
558 559 560
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
561
		if (ieee80211_sdata_running(sdata))
562
			iterator(data, sdata->vif.addr,
563 564 565
				 &sdata->vif);
	}

566 567
	sdata = rcu_dereference_protected(local->monitor_sdata,
					  lockdep_is_held(&local->iflist_mtx));
568 569 570
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
571 572
		iterator(data, sdata->vif.addr, &sdata->vif);

573
	mutex_unlock(&local->iflist_mtx);
574 575 576 577
}
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);

void ieee80211_iterate_active_interfaces_atomic(
578
	struct ieee80211_hw *hw, u32 iter_flags,
579 580 581 582 583 584 585
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

586
	rcu_read_lock();
587

588
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
589
		switch (sdata->vif.type) {
590 591
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
592
			continue;
593
		default:
594 595
			break;
		}
596 597 598
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
599
		if (ieee80211_sdata_running(sdata))
600
			iterator(data, sdata->vif.addr,
601
				 &sdata->vif);
602
	}
603

604
	sdata = rcu_dereference(local->monitor_sdata);
605 606 607
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
608 609
		iterator(data, sdata->vif.addr, &sdata->vif);

610
	rcu_read_unlock();
611
}
612
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
613

614 615 616 617 618 619 620 621 622
/*
 * Nothing should have been stuffed into the workqueue during
 * the suspend->resume cycle. If this WARN is seen then there
 * is a bug with either the driver suspend or something in
 * mac80211 stuffing into the workqueue which we haven't yet
 * cleared during mac80211's suspend cycle.
 */
static bool ieee80211_can_queue_work(struct ieee80211_local *local)
{
J
Johannes Berg 已提交
623 624 625
	if (WARN(local->suspended && !local->resuming,
		 "queueing ieee80211 work while going to suspend\n"))
		return false;
626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653

	return true;
}

void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_work(local->workqueue, work);
}
EXPORT_SYMBOL(ieee80211_queue_work);

void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
				  struct delayed_work *dwork,
				  unsigned long delay)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_delayed_work(local->workqueue, dwork, delay);
}
EXPORT_SYMBOL(ieee80211_queue_delayed_work);

654 655 656 657 658 659 660
u32 ieee802_11_parse_elems_crc(u8 *start, size_t len,
			       struct ieee802_11_elems *elems,
			       u64 filter, u32 crc)
{
	size_t left = len;
	u8 *pos = start;
	bool calc_crc = filter != 0;
P
Paul Stewart 已提交
661
	DECLARE_BITMAP(seen_elems, 256);
662

P
Paul Stewart 已提交
663
	bitmap_zero(seen_elems, 256);
664 665 666 667 668 669
	memset(elems, 0, sizeof(*elems));
	elems->ie_start = start;
	elems->total_len = len;

	while (left >= 2) {
		u8 id, elen;
P
Paul Stewart 已提交
670
		bool elem_parse_failed;
671 672 673 674 675

		id = *pos++;
		elen = *pos++;
		left -= 2;

P
Paul Stewart 已提交
676 677
		if (elen > left) {
			elems->parse_error = true;
678
			break;
P
Paul Stewart 已提交
679 680
		}

681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715
		switch (id) {
		case WLAN_EID_SSID:
		case WLAN_EID_SUPP_RATES:
		case WLAN_EID_FH_PARAMS:
		case WLAN_EID_DS_PARAMS:
		case WLAN_EID_CF_PARAMS:
		case WLAN_EID_TIM:
		case WLAN_EID_IBSS_PARAMS:
		case WLAN_EID_CHALLENGE:
		case WLAN_EID_RSN:
		case WLAN_EID_ERP_INFO:
		case WLAN_EID_EXT_SUPP_RATES:
		case WLAN_EID_HT_CAPABILITY:
		case WLAN_EID_HT_OPERATION:
		case WLAN_EID_VHT_CAPABILITY:
		case WLAN_EID_VHT_OPERATION:
		case WLAN_EID_MESH_ID:
		case WLAN_EID_MESH_CONFIG:
		case WLAN_EID_PEER_MGMT:
		case WLAN_EID_PREQ:
		case WLAN_EID_PREP:
		case WLAN_EID_PERR:
		case WLAN_EID_RANN:
		case WLAN_EID_CHANNEL_SWITCH:
		case WLAN_EID_EXT_CHANSWITCH_ANN:
		case WLAN_EID_COUNTRY:
		case WLAN_EID_PWR_CONSTRAINT:
		case WLAN_EID_TIMEOUT_INTERVAL:
			if (test_bit(id, seen_elems)) {
				elems->parse_error = true;
				left -= elen;
				pos += elen;
				continue;
			}
			break;
P
Paul Stewart 已提交
716
		}
717 718 719 720

		if (calc_crc && id < 64 && (filter & (1ULL << id)))
			crc = crc32_be(crc, pos - 2, elen + 2);

P
Paul Stewart 已提交
721 722
		elem_parse_failed = false;

723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747
		switch (id) {
		case WLAN_EID_SSID:
			elems->ssid = pos;
			elems->ssid_len = elen;
			break;
		case WLAN_EID_SUPP_RATES:
			elems->supp_rates = pos;
			elems->supp_rates_len = elen;
			break;
		case WLAN_EID_FH_PARAMS:
			elems->fh_params = pos;
			elems->fh_params_len = elen;
			break;
		case WLAN_EID_DS_PARAMS:
			elems->ds_params = pos;
			elems->ds_params_len = elen;
			break;
		case WLAN_EID_CF_PARAMS:
			elems->cf_params = pos;
			elems->cf_params_len = elen;
			break;
		case WLAN_EID_TIM:
			if (elen >= sizeof(struct ieee80211_tim_ie)) {
				elems->tim = (void *)pos;
				elems->tim_len = elen;
P
Paul Stewart 已提交
748 749
			} else
				elem_parse_failed = true;
750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766
			break;
		case WLAN_EID_IBSS_PARAMS:
			elems->ibss_params = pos;
			elems->ibss_params_len = elen;
			break;
		case WLAN_EID_CHALLENGE:
			elems->challenge = pos;
			elems->challenge_len = elen;
			break;
		case WLAN_EID_VENDOR_SPECIFIC:
			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
			    pos[2] == 0xf2) {
				/* Microsoft OUI (00:50:F2) */

				if (calc_crc)
					crc = crc32_be(crc, pos - 2, elen + 2);

767
				if (elen >= 5 && pos[3] == 2) {
768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793
					/* OUI Type 2 - WMM IE */
					if (pos[4] == 0) {
						elems->wmm_info = pos;
						elems->wmm_info_len = elen;
					} else if (pos[4] == 1) {
						elems->wmm_param = pos;
						elems->wmm_param_len = elen;
					}
				}
			}
			break;
		case WLAN_EID_RSN:
			elems->rsn = pos;
			elems->rsn_len = elen;
			break;
		case WLAN_EID_ERP_INFO:
			elems->erp_info = pos;
			elems->erp_info_len = elen;
			break;
		case WLAN_EID_EXT_SUPP_RATES:
			elems->ext_supp_rates = pos;
			elems->ext_supp_rates_len = elen;
			break;
		case WLAN_EID_HT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_ht_cap))
				elems->ht_cap_elem = (void *)pos;
P
Paul Stewart 已提交
794 795
			else
				elem_parse_failed = true;
796
			break;
797 798 799
		case WLAN_EID_HT_OPERATION:
			if (elen >= sizeof(struct ieee80211_ht_operation))
				elems->ht_operation = (void *)pos;
P
Paul Stewart 已提交
800 801
			else
				elem_parse_failed = true;
802
			break;
M
Mahesh Palivela 已提交
803 804 805 806 807 808 809 810 811 812 813 814
		case WLAN_EID_VHT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_vht_cap))
				elems->vht_cap_elem = (void *)pos;
			else
				elem_parse_failed = true;
			break;
		case WLAN_EID_VHT_OPERATION:
			if (elen >= sizeof(struct ieee80211_vht_operation))
				elems->vht_operation = (void *)pos;
			else
				elem_parse_failed = true;
			break;
815 816 817 818 819 820
		case WLAN_EID_OPMODE_NOTIF:
			if (elen > 0)
				elems->opmode_notif = pos;
			else
				elem_parse_failed = true;
			break;
821 822 823 824 825 826 827
		case WLAN_EID_MESH_ID:
			elems->mesh_id = pos;
			elems->mesh_id_len = elen;
			break;
		case WLAN_EID_MESH_CONFIG:
			if (elen >= sizeof(struct ieee80211_meshconf_ie))
				elems->mesh_config = (void *)pos;
P
Paul Stewart 已提交
828 829
			else
				elem_parse_failed = true;
830 831 832 833 834
			break;
		case WLAN_EID_PEER_MGMT:
			elems->peering = pos;
			elems->peering_len = elen;
			break;
M
Marco Porsch 已提交
835 836 837 838
		case WLAN_EID_MESH_AWAKE_WINDOW:
			if (elen >= 2)
				elems->awake_window = (void *)pos;
			break;
839 840 841 842 843 844 845 846 847 848 849 850 851 852 853
		case WLAN_EID_PREQ:
			elems->preq = pos;
			elems->preq_len = elen;
			break;
		case WLAN_EID_PREP:
			elems->prep = pos;
			elems->prep_len = elen;
			break;
		case WLAN_EID_PERR:
			elems->perr = pos;
			elems->perr_len = elen;
			break;
		case WLAN_EID_RANN:
			if (elen >= sizeof(struct ieee80211_rann_ie))
				elems->rann = (void *)pos;
P
Paul Stewart 已提交
854 855
			else
				elem_parse_failed = true;
856 857
			break;
		case WLAN_EID_CHANNEL_SWITCH:
858 859 860 861 862
			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
				elem_parse_failed = true;
				break;
			}
			elems->ch_switch_ie = (void *)pos;
863 864 865 866 867 868 869 870 871 872 873 874 875
			break;
		case WLAN_EID_QUIET:
			if (!elems->quiet_elem) {
				elems->quiet_elem = pos;
				elems->quiet_elem_len = elen;
			}
			elems->num_of_quiet_elem++;
			break;
		case WLAN_EID_COUNTRY:
			elems->country_elem = pos;
			elems->country_elem_len = elen;
			break;
		case WLAN_EID_PWR_CONSTRAINT:
876 877 878 879
			if (elen != 1) {
				elem_parse_failed = true;
				break;
			}
880 881 882 883 884 885 886 887 888 889
			elems->pwr_constr_elem = pos;
			break;
		case WLAN_EID_TIMEOUT_INTERVAL:
			elems->timeout_int = pos;
			elems->timeout_int_len = elen;
			break;
		default:
			break;
		}

P
Paul Stewart 已提交
890 891 892
		if (elem_parse_failed)
			elems->parse_error = true;
		else
893
			__set_bit(id, seen_elems);
P
Paul Stewart 已提交
894

895 896 897 898
		left -= elen;
		pos += elen;
	}

P
Paul Stewart 已提交
899 900 901
	if (left != 0)
		elems->parse_error = true;

902 903 904
	return crc;
}

905 906
void ieee802_11_parse_elems(u8 *start, size_t len,
			    struct ieee802_11_elems *elems)
907 908 909 910
{
	ieee802_11_parse_elems_crc(start, len, elems, 0, 0);
}

911 912
void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
			       bool bss_notify)
913 914 915
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_tx_queue_params qparam;
J
Johannes Berg 已提交
916
	struct ieee80211_chanctx_conf *chanctx_conf;
917
	int ac;
918
	bool use_11b, enable_qos;
919
	int aCWmin, aCWmax;
920 921 922 923

	if (!local->ops->conf_tx)
		return;

924 925 926
	if (local->hw.queues < IEEE80211_NUM_ACS)
		return;

927 928
	memset(&qparam, 0, sizeof(qparam));

J
Johannes Berg 已提交
929 930 931
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	use_11b = (chanctx_conf &&
932
		   chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
933
		 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
J
Johannes Berg 已提交
934
	rcu_read_unlock();
935

936 937 938 939 940 941 942
	/*
	 * By default disable QoS in STA mode for old access points, which do
	 * not support 802.11e. New APs will provide proper queue parameters,
	 * that we will configure later.
	 */
	enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);

943
	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
944 945 946 947 948 949 950
		/* Set defaults according to 802.11-2007 Table 7-37 */
		aCWmax = 1023;
		if (use_11b)
			aCWmin = 31;
		else
			aCWmin = 15;

951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987
		if (enable_qos) {
			switch (ac) {
			case IEEE80211_AC_BK:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 7;
				break;
			/* never happens but let's not leave undefined */
			default:
			case IEEE80211_AC_BE:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 3;
				break;
			case IEEE80211_AC_VI:
				qparam.cw_max = aCWmin;
				qparam.cw_min = (aCWmin + 1) / 2 - 1;
				if (use_11b)
					qparam.txop = 6016/32;
				else
					qparam.txop = 3008/32;
				qparam.aifs = 2;
				break;
			case IEEE80211_AC_VO:
				qparam.cw_max = (aCWmin + 1) / 2 - 1;
				qparam.cw_min = (aCWmin + 1) / 4 - 1;
				if (use_11b)
					qparam.txop = 3264/32;
				else
					qparam.txop = 1504/32;
				qparam.aifs = 2;
				break;
			}
		} else {
			/* Confiure old 802.11b/g medium access rules. */
988 989
			qparam.cw_max = aCWmax;
			qparam.cw_min = aCWmin;
990 991 992
			qparam.txop = 0;
			qparam.aifs = 2;
		}
993

K
Kalle Valo 已提交
994 995
		qparam.uapsd = false;

996 997
		sdata->tx_conf[ac] = qparam;
		drv_conf_tx(local, sdata, ac, &qparam);
998
	}
999

1000 1001
	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
	    sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
1002
		sdata->vif.bss_conf.qos = enable_qos;
1003 1004 1005
		if (bss_notify)
			ieee80211_bss_info_change_notify(sdata,
							 BSS_CHANGED_QOS);
1006
	}
1007
}
J
Johannes Berg 已提交
1008

1009 1010 1011 1012
void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
				  const size_t supp_rates_len,
				  const u8 *supp_rates)
{
J
Johannes Berg 已提交
1013
	struct ieee80211_chanctx_conf *chanctx_conf;
1014 1015 1016 1017 1018 1019 1020
	int i, have_higher_than_11mbit = 0;

	/* cf. IEEE 802.11 9.2.12 */
	for (i = 0; i < supp_rates_len; i++)
		if ((supp_rates[i] & 0x7f) * 5 > 110)
			have_higher_than_11mbit = 1;

J
Johannes Berg 已提交
1021 1022 1023 1024
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);

	if (chanctx_conf &&
1025
	    chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ &&
1026 1027 1028 1029
	    have_higher_than_11mbit)
		sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
	else
		sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
J
Johannes Berg 已提交
1030
	rcu_read_unlock();
1031

1032
	ieee80211_set_wmm_default(sdata, true);
1033 1034
}

1035
u32 ieee80211_mandatory_rates(struct ieee80211_local *local,
1036 1037 1038 1039
			      enum ieee80211_band band)
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
1040
	u32 mandatory_rates;
1041 1042 1043 1044
	enum ieee80211_rate_flags mandatory_flag;
	int i;

	sband = local->hw.wiphy->bands[band];
1045 1046
	if (WARN_ON(!sband))
		return 1;
1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059

	if (band == IEEE80211_BAND_2GHZ)
		mandatory_flag = IEEE80211_RATE_MANDATORY_B;
	else
		mandatory_flag = IEEE80211_RATE_MANDATORY_A;

	bitrates = sband->bitrates;
	mandatory_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++)
		if (bitrates[i].flags & mandatory_flag)
			mandatory_rates |= BIT(i);
	return mandatory_rates;
}
1060 1061

void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
1062
			 u16 transaction, u16 auth_alg, u16 status,
J
Johannes Berg 已提交
1063
			 const u8 *extra, size_t extra_len, const u8 *da,
1064 1065
			 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx,
			 u32 tx_flags)
1066 1067 1068 1069
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
J
Johannes Berg 已提交
1070
	int err;
1071 1072

	skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1073
			    sizeof(*mgmt) + 6 + extra_len);
1074
	if (!skb)
1075
		return;
1076

1077 1078 1079 1080 1081 1082
	skb_reserve(skb, local->hw.extra_tx_headroom);

	mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
	memset(mgmt, 0, 24 + 6);
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
					  IEEE80211_STYPE_AUTH);
1083
	memcpy(mgmt->da, da, ETH_ALEN);
1084
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1085 1086 1087
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
	mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
1088
	mgmt->u.auth.status_code = cpu_to_le16(status);
1089 1090 1091
	if (extra)
		memcpy(skb_put(skb, extra_len), extra, extra_len);

J
Johannes Berg 已提交
1092 1093 1094 1095 1096 1097
	if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
		mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
		err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
		WARN_ON(err);
	}

1098 1099
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT |
					tx_flags;
1100
	ieee80211_tx_skb(sdata, skb);
1101 1102
}

1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141
void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
				    const u8 *bssid, u16 stype, u16 reason,
				    bool send_frame, u8 *frame_buf)
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt = (void *)frame_buf;

	/* build frame */
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
	mgmt->duration = 0; /* initialize only */
	mgmt->seq_ctrl = 0; /* initialize only */
	memcpy(mgmt->da, bssid, ETH_ALEN);
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	/* u.deauth.reason_code == u.disassoc.reason_code */
	mgmt->u.deauth.reason_code = cpu_to_le16(reason);

	if (send_frame) {
		skb = dev_alloc_skb(local->hw.extra_tx_headroom +
				    IEEE80211_DEAUTH_FRAME_LEN);
		if (!skb)
			return;

		skb_reserve(skb, local->hw.extra_tx_headroom);

		/* copy in frame */
		memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
		       mgmt, IEEE80211_DEAUTH_FRAME_LEN);

		if (sdata->vif.type != NL80211_IFTYPE_STATION ||
		    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
			IEEE80211_SKB_CB(skb)->flags |=
				IEEE80211_TX_INTFL_DONT_ENCRYPT;

		ieee80211_tx_skb(sdata, skb);
	}
}

1142
int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1143
			     size_t buffer_len, const u8 *ie, size_t ie_len,
1144 1145
			     enum ieee80211_band band, u32 rate_mask,
			     u8 channel)
1146 1147
{
	struct ieee80211_supported_band *sband;
1148
	u8 *pos = buffer, *end = buffer + buffer_len;
1149 1150
	size_t offset = 0, noffset;
	int supp_rates_len, i;
1151 1152 1153
	u8 rates[32];
	int num_rates;
	int ext_rates_len;
1154

1155
	sband = local->hw.wiphy->bands[band];
1156 1157
	if (WARN_ON_ONCE(!sband))
		return 0;
1158

1159 1160 1161 1162 1163 1164 1165 1166
	num_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++) {
		if ((BIT(i) & rate_mask) == 0)
			continue; /* skip rate */
		rates[num_rates++] = (u8) (sband->bitrates[i].bitrate / 5);
	}

	supp_rates_len = min_t(int, num_rates, 8);
1167

1168 1169
	if (end - pos < 2 + supp_rates_len)
		goto out_err;
1170
	*pos++ = WLAN_EID_SUPP_RATES;
1171
	*pos++ = supp_rates_len;
1172 1173
	memcpy(pos, rates, supp_rates_len);
	pos += supp_rates_len;
1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185

	/* insert "request information" if in custom IEs */
	if (ie && ie_len) {
		static const u8 before_extrates[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_extrates,
					     ARRAY_SIZE(before_extrates),
					     offset);
1186 1187
		if (end - pos < noffset - offset)
			goto out_err;
1188 1189 1190 1191 1192
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
	}

1193 1194
	ext_rates_len = num_rates - supp_rates_len;
	if (ext_rates_len > 0) {
1195 1196
		if (end - pos < 2 + ext_rates_len)
			goto out_err;
1197
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
1198 1199 1200
		*pos++ = ext_rates_len;
		memcpy(pos, rates + supp_rates_len, ext_rates_len);
		pos += ext_rates_len;
1201 1202
	}

1203
	if (channel && sband->band == IEEE80211_BAND_2GHZ) {
1204 1205
		if (end - pos < 3)
			goto out_err;
1206 1207 1208 1209 1210
		*pos++ = WLAN_EID_DS_PARAMS;
		*pos++ = 1;
		*pos++ = channel;
	}

1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223
	/* insert custom IEs that go before HT */
	if (ie && ie_len) {
		static const u8 before_ht[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
			WLAN_EID_EXT_SUPP_RATES,
			WLAN_EID_DS_PARAMS,
			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_ht, ARRAY_SIZE(before_ht),
					     offset);
1224 1225
		if (end - pos < noffset - offset)
			goto out_err;
1226 1227 1228
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
1229 1230
	}

1231 1232 1233
	if (sband->ht_cap.ht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
			goto out_err;
B
Ben Greear 已提交
1234 1235
		pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
						sband->ht_cap.cap);
1236
	}
1237

1238 1239 1240 1241 1242
	/*
	 * If adding more here, adjust code in main.c
	 * that calculates local->scan_ies_len.
	 */

1243 1244 1245
	/* add any remaining custom IEs */
	if (ie && ie_len) {
		noffset = ie_len;
1246 1247
		if (end - pos < noffset - offset)
			goto out_err;
1248 1249
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
1250 1251
	}

1252 1253 1254
	if (sband->vht_cap.vht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
			goto out_err;
1255 1256
		pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
						 sband->vht_cap.cap);
1257
	}
1258

1259 1260 1261
	return pos - buffer;
 out_err:
	WARN_ONCE(1, "not enough space for preq IEs\n");
1262 1263 1264
	return pos - buffer;
}

1265
struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1266
					  u8 *dst, u32 ratemask,
1267
					  struct ieee80211_channel *chan,
1268
					  const u8 *ssid, size_t ssid_len,
1269 1270
					  const u8 *ie, size_t ie_len,
					  bool directed)
1271 1272 1273 1274
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
1275
	u8 chan_no;
1276
	int ies_len;
1277

1278 1279 1280 1281 1282 1283
	/*
	 * Do not send DS Channel parameter for directed probe requests
	 * in order to maximize the chance that we get a response.  Some
	 * badly-behaved APs don't respond when this parameter is included.
	 */
	if (directed)
1284
		chan_no = 0;
1285
	else
1286
		chan_no = ieee80211_frequency_to_channel(chan->center_freq);
1287

1288
	skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
1289
				     ssid, ssid_len, 100 + ie_len);
1290
	if (!skb)
1291 1292 1293 1294 1295 1296 1297
		return NULL;

	ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
					   skb_tailroom(skb),
					   ie, ie_len, chan->band,
					   ratemask, chan_no);
	skb_put(skb, ies_len);
1298

1299
	if (dst) {
1300
		mgmt = (struct ieee80211_mgmt *) skb->data;
1301 1302 1303 1304
		memcpy(mgmt->da, dst, ETH_ALEN);
		memcpy(mgmt->bssid, dst, ETH_ALEN);
	}

1305
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1306

1307 1308 1309 1310 1311
	return skb;
}

void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
			      const u8 *ssid, size_t ssid_len,
1312
			      const u8 *ie, size_t ie_len,
1313
			      u32 ratemask, bool directed, u32 tx_flags,
J
Johannes Berg 已提交
1314
			      struct ieee80211_channel *channel, bool scan)
1315 1316 1317
{
	struct sk_buff *skb;

1318
	skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel,
1319
					ssid, ssid_len,
1320
					ie, ie_len, directed);
1321
	if (skb) {
1322
		IEEE80211_SKB_CB(skb)->flags |= tx_flags;
J
Johannes Berg 已提交
1323 1324 1325 1326
		if (scan)
			ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
		else
			ieee80211_tx_skb(sdata, skb);
1327
	}
1328 1329 1330 1331
}

u32 ieee80211_sta_get_rates(struct ieee80211_local *local,
			    struct ieee802_11_elems *elems,
1332
			    enum ieee80211_band band, u32 *basic_rates)
1333 1334 1335 1336 1337 1338 1339 1340
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
	size_t num_rates;
	u32 supp_rates;
	int i, j;
	sband = local->hw.wiphy->bands[band];

1341 1342
	if (WARN_ON(!sband))
		return 1;
1343 1344 1345 1346 1347 1348 1349 1350

	bitrates = sband->bitrates;
	num_rates = sband->n_bitrates;
	supp_rates = 0;
	for (i = 0; i < elems->supp_rates_len +
		     elems->ext_supp_rates_len; i++) {
		u8 rate = 0;
		int own_rate;
1351
		bool is_basic;
1352 1353 1354 1355 1356 1357
		if (i < elems->supp_rates_len)
			rate = elems->supp_rates[i];
		else if (elems->ext_supp_rates)
			rate = elems->ext_supp_rates
				[i - elems->supp_rates_len];
		own_rate = 5 * (rate & 0x7f);
1358 1359 1360 1361 1362 1363 1364
		is_basic = !!(rate & 0x80);

		if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
			continue;

		for (j = 0; j < num_rates; j++) {
			if (bitrates[j].bitrate == own_rate) {
1365
				supp_rates |= BIT(j);
1366 1367 1368 1369
				if (basic_rates && is_basic)
					*basic_rates |= BIT(j);
			}
		}
1370 1371 1372
	}
	return supp_rates;
}
1373

1374 1375 1376
void ieee80211_stop_device(struct ieee80211_local *local)
{
	ieee80211_led_radio(local, false);
1377
	ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1378 1379 1380 1381

	cancel_work_sync(&local->reconfig_filter);

	flush_workqueue(local->workqueue);
1382
	drv_stop(local);
1383 1384
}

1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403
static void ieee80211_assign_chanctx(struct ieee80211_local *local,
				     struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_chanctx_conf *conf;
	struct ieee80211_chanctx *ctx;

	if (!local->use_chanctx)
		return;

	mutex_lock(&local->chanctx_mtx);
	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
					 lockdep_is_held(&local->chanctx_mtx));
	if (conf) {
		ctx = container_of(conf, struct ieee80211_chanctx, conf);
		drv_assign_vif_chanctx(local, sdata, ctx);
	}
	mutex_unlock(&local->chanctx_mtx);
}

1404 1405 1406 1407
int ieee80211_reconfig(struct ieee80211_local *local)
{
	struct ieee80211_hw *hw = &local->hw;
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
1408
	struct ieee80211_chanctx *ctx;
1409
	struct sta_info *sta;
1410
	int res, i;
J
Johannes Berg 已提交
1411 1412
	bool reconfig_due_to_wowlan = false;

1413
#ifdef CONFIG_PM
J
Johannes Berg 已提交
1414 1415
	if (local->suspended)
		local->resuming = true;
1416

1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430
	if (local->wowlan) {
		local->wowlan = false;
		res = drv_resume(local);
		if (res < 0) {
			local->resuming = false;
			return res;
		}
		if (res == 0)
			goto wake_up;
		WARN_ON(res > 1);
		/*
		 * res is 1, which means the driver requested
		 * to go through a regular reset on wakeup.
		 */
J
Johannes Berg 已提交
1431
		reconfig_due_to_wowlan = true;
1432 1433
	}
#endif
1434 1435 1436
	/* everything else happens only if HW was up & running */
	if (!local->open_count)
		goto wake_up;
1437

1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449
	/*
	 * Upon resume hardware can sometimes be goofy due to
	 * various platform / driver / bus issues, so restarting
	 * the device may at times not work immediately. Propagate
	 * the error.
	 */
	res = drv_start(local);
	if (res) {
		WARN(local->suspended, "Hardware became unavailable "
		     "upon resume. This could be a software issue "
		     "prior to suspend or a hardware issue.\n");
		return res;
1450 1451
	}

1452 1453 1454 1455 1456 1457 1458 1459 1460
	/* setup fragmentation threshold */
	drv_set_frag_threshold(local, hw->wiphy->frag_threshold);

	/* setup RTS threshold */
	drv_set_rts_threshold(local, hw->wiphy->rts_threshold);

	/* reset coverage class */
	drv_set_coverage_class(local, hw->wiphy->coverage_class);

1461 1462 1463 1464
	ieee80211_led_radio(local, true);
	ieee80211_mod_tpt_led_trig(local,
				   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);

1465
	/* add interfaces */
1466 1467 1468 1469 1470 1471 1472 1473 1474 1475
	sdata = rtnl_dereference(local->monitor_sdata);
	if (sdata) {
		res = drv_add_interface(local, sdata);
		if (WARN_ON(res)) {
			rcu_assign_pointer(local->monitor_sdata, NULL);
			synchronize_net();
			kfree(sdata);
		}
	}

1476 1477 1478
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
		    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1479
		    ieee80211_sdata_running(sdata))
1480
			res = drv_add_interface(local, sdata);
1481 1482
	}

J
Johannes Berg 已提交
1483
	/* add channel contexts */
1484 1485 1486 1487 1488 1489
	if (local->use_chanctx) {
		mutex_lock(&local->chanctx_mtx);
		list_for_each_entry(ctx, &local->chanctx_list, list)
			WARN_ON(drv_add_chanctx(local, ctx));
		mutex_unlock(&local->chanctx_mtx);
	}
J
Johannes Berg 已提交
1490

1491 1492 1493
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (!ieee80211_sdata_running(sdata))
			continue;
1494
		ieee80211_assign_chanctx(local, sdata);
1495 1496
	}

1497
	sdata = rtnl_dereference(local->monitor_sdata);
1498 1499
	if (sdata && ieee80211_sdata_running(sdata))
		ieee80211_assign_chanctx(local, sdata);
1500

1501
	/* add STAs back */
1502 1503
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
1504
		enum ieee80211_sta_state state;
J
Johannes Berg 已提交
1505

1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516
		if (!sta->uploaded)
			continue;

		/* AP-mode stations will be added later */
		if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
1517
	}
1518
	mutex_unlock(&local->sta_mtx);
1519

1520
	/* reconfigure tx conf */
1521 1522 1523 1524 1525 1526
	if (hw->queues >= IEEE80211_NUM_ACS) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
			    sdata->vif.type == NL80211_IFTYPE_MONITOR ||
			    !ieee80211_sdata_running(sdata))
				continue;
1527

1528 1529 1530 1531
			for (i = 0; i < IEEE80211_NUM_ACS; i++)
				drv_conf_tx(local, sdata, i,
					    &sdata->tx_conf[i]);
		}
1532
	}
1533

1534 1535 1536 1537 1538 1539 1540
	/* reconfigure hardware */
	ieee80211_hw_config(local, ~0);

	ieee80211_configure_filter(local);

	/* Finally also reconfigure all the BSS information */
	list_for_each_entry(sdata, &local->interfaces, list) {
1541 1542
		u32 changed;

1543
		if (!ieee80211_sdata_running(sdata))
1544
			continue;
1545 1546 1547 1548 1549 1550 1551 1552 1553

		/* common change flags for all interface types */
		changed = BSS_CHANGED_ERP_CTS_PROT |
			  BSS_CHANGED_ERP_PREAMBLE |
			  BSS_CHANGED_ERP_SLOT |
			  BSS_CHANGED_HT |
			  BSS_CHANGED_BASIC_RATES |
			  BSS_CHANGED_BEACON_INT |
			  BSS_CHANGED_BSSID |
1554
			  BSS_CHANGED_CQM |
1555
			  BSS_CHANGED_QOS |
1556 1557
			  BSS_CHANGED_IDLE |
			  BSS_CHANGED_TXPOWER;
1558

1559 1560
		switch (sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
1561
			changed |= BSS_CHANGED_ASSOC |
E
Eliad Peller 已提交
1562 1563
				   BSS_CHANGED_ARP_FILTER |
				   BSS_CHANGED_PS;
1564 1565 1566 1567

			if (sdata->u.mgd.dtim_period)
				changed |= BSS_CHANGED_DTIM_PERIOD;

1568
			mutex_lock(&sdata->u.mgd.mtx);
1569
			ieee80211_bss_info_change_notify(sdata, changed);
1570
			mutex_unlock(&sdata->u.mgd.mtx);
1571
			break;
1572
		case NL80211_IFTYPE_ADHOC:
1573 1574
			changed |= BSS_CHANGED_IBSS;
			/* fall through */
1575
		case NL80211_IFTYPE_AP:
1576
			changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
1577

1578
			if (sdata->vif.type == NL80211_IFTYPE_AP) {
1579 1580
				changed |= BSS_CHANGED_AP_PROBE_RESP;

1581 1582 1583 1584
				if (rcu_access_pointer(sdata->u.ap.beacon))
					drv_start_ap(local, sdata);
			}

1585
			/* fall through */
1586
		case NL80211_IFTYPE_MESH_POINT:
1587 1588 1589 1590 1591
			if (sdata->vif.bss_conf.enable_beacon) {
				changed |= BSS_CHANGED_BEACON |
					   BSS_CHANGED_BEACON_ENABLED;
				ieee80211_bss_info_change_notify(sdata, changed);
			}
1592 1593 1594 1595 1596 1597 1598
			break;
		case NL80211_IFTYPE_WDS:
			break;
		case NL80211_IFTYPE_AP_VLAN:
		case NL80211_IFTYPE_MONITOR:
			/* ignore virtual */
			break;
1599
		case NL80211_IFTYPE_P2P_DEVICE:
1600 1601
			changed = BSS_CHANGED_IDLE;
			break;
1602
		case NL80211_IFTYPE_UNSPECIFIED:
1603
		case NUM_NL80211_IFTYPES:
1604 1605
		case NL80211_IFTYPE_P2P_CLIENT:
		case NL80211_IFTYPE_P2P_GO:
1606 1607 1608 1609 1610
			WARN_ON(1);
			break;
		}
	}

1611 1612
	ieee80211_recalc_ps(local, -1);

1613 1614 1615 1616 1617 1618 1619 1620 1621 1622
	/*
	 * The sta might be in psm against the ap (e.g. because
	 * this was the state before a hw restart), so we
	 * explicitly send a null packet in order to make sure
	 * it'll sync against the ap (and get out of psm).
	 */
	if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type != NL80211_IFTYPE_STATION)
				continue;
1623 1624
			if (!sdata->u.mgd.associated)
				continue;
1625 1626 1627 1628 1629

			ieee80211_send_nullfunc(local, sdata, 0);
		}
	}

1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647
	/* APs are now beaconing, add back stations */
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
		enum ieee80211_sta_state state;

		if (!sta->uploaded)
			continue;

		if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
	}
	mutex_unlock(&local->sta_mtx);

1648 1649 1650 1651 1652
	/* add back keys */
	list_for_each_entry(sdata, &local->interfaces, list)
		if (ieee80211_sdata_running(sdata))
			ieee80211_enable_keys(sdata);

1653
 wake_up:
1654 1655 1656
	local->in_reconfig = false;
	barrier();

1657 1658 1659 1660 1661 1662 1663 1664 1665 1666
	/*
	 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
	 * sessions can be established after a resume.
	 *
	 * Also tear down aggregation sessions since reconfiguring
	 * them in a hardware restart scenario is not easily done
	 * right now, and the hardware will have lost information
	 * about the sessions, but we and the AP still think they
	 * are active. This is really a workaround though.
	 */
1667
	if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1668 1669 1670
		mutex_lock(&local->sta_mtx);

		list_for_each_entry(sta, &local->sta_list, list) {
1671 1672
			ieee80211_sta_tear_down_BA_sessions(
					sta, AGG_STOP_LOCAL_REQUEST);
J
Johannes Berg 已提交
1673
			clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1674
		}
1675 1676

		mutex_unlock(&local->sta_mtx);
1677 1678
	}

1679 1680 1681
	ieee80211_wake_queues_by_reason(hw,
			IEEE80211_QUEUE_STOP_REASON_SUSPEND);

1682 1683 1684 1685
	/*
	 * If this is for hw restart things are still running.
	 * We may want to change that later, however.
	 */
1686
	if (!local->suspended || reconfig_due_to_wowlan)
1687
		drv_restart_complete(local);
1688 1689

	if (!local->suspended)
1690 1691 1692
		return 0;

#ifdef CONFIG_PM
J
Johannes Berg 已提交
1693
	/* first set suspended false, then resuming */
1694
	local->suspended = false;
J
Johannes Berg 已提交
1695 1696
	mb();
	local->resuming = false;
1697

1698
	mod_timer(&local->sta_cleanup, jiffies + 1);
1699 1700 1701
#else
	WARN_ON(1);
#endif
1702 1703
	return 0;
}
1704

1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731
void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata;
	struct ieee80211_local *local;
	struct ieee80211_key *key;

	if (WARN_ON(!vif))
		return;

	sdata = vif_to_sdata(vif);
	local = sdata->local;

	if (WARN_ON(!local->resuming))
		return;

	if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
		return;

	sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;

	mutex_lock(&local->key_mtx);
	list_for_each_entry(key, &sdata->key_list, list)
		key->flags |= KEY_FLAG_TAINTED;
	mutex_unlock(&local->key_mtx);
}
EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);

1732
void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
1733
{
1734 1735 1736
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_chanctx_conf *chanctx_conf;
	struct ieee80211_chanctx *chanctx;
1737

1738
	mutex_lock(&local->chanctx_mtx);
1739

1740 1741
	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
					lockdep_is_held(&local->chanctx_mtx));
1742

1743
	if (WARN_ON_ONCE(!chanctx_conf))
1744
		goto unlock;
1745

1746 1747
	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
	ieee80211_recalc_smps_chanctx(local, chanctx);
1748
 unlock:
1749
	mutex_unlock(&local->chanctx_mtx);
1750
}
1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806

static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
{
	int i;

	for (i = 0; i < n_ids; i++)
		if (ids[i] == id)
			return true;
	return false;
}

/**
 * ieee80211_ie_split - split an IE buffer according to ordering
 *
 * @ies: the IE buffer
 * @ielen: the length of the IE buffer
 * @ids: an array with element IDs that are allowed before
 *	the split
 * @n_ids: the size of the element ID array
 * @offset: offset where to start splitting in the buffer
 *
 * This function splits an IE buffer by updating the @offset
 * variable to point to the location where the buffer should be
 * split.
 *
 * It assumes that the given IE buffer is well-formed, this
 * has to be guaranteed by the caller!
 *
 * It also assumes that the IEs in the buffer are ordered
 * correctly, if not the result of using this function will not
 * be ordered correctly either, i.e. it does no reordering.
 *
 * The function returns the offset where the next part of the
 * buffer starts, which may be @ielen if the entire (remainder)
 * of the buffer should be used.
 */
size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
			  const u8 *ids, int n_ids, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
		pos += 2 + ies[pos + 1];

	return pos;
}

size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
		pos += 2 + ies[pos + 1];

	return pos;
}
1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846

static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
					    int rssi_min_thold,
					    int rssi_max_thold)
{
	trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);

	if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
		return;

	/*
	 * Scale up threshold values before storing it, as the RSSI averaging
	 * algorithm uses a scaled up value as well. Change this scaling
	 * factor if the RSSI averaging algorithm changes.
	 */
	sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
	sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
}

void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
				    int rssi_min_thold,
				    int rssi_max_thold)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	WARN_ON(rssi_min_thold == rssi_max_thold ||
		rssi_min_thold > rssi_max_thold);

	_ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
				       rssi_max_thold);
}
EXPORT_SYMBOL(ieee80211_enable_rssi_reports);

void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	_ieee80211_enable_rssi_reports(sdata, 0, 0);
}
EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1847

B
Ben Greear 已提交
1848
u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862
			      u16 cap)
{
	__le16 tmp;

	*pos++ = WLAN_EID_HT_CAPABILITY;
	*pos++ = sizeof(struct ieee80211_ht_cap);
	memset(pos, 0, sizeof(struct ieee80211_ht_cap));

	/* capability flags */
	tmp = cpu_to_le16(cap);
	memcpy(pos, &tmp, sizeof(u16));
	pos += sizeof(u16);

	/* AMPDU parameters */
B
Ben Greear 已提交
1863 1864
	*pos++ = ht_cap->ampdu_factor |
		 (ht_cap->ampdu_density <<
1865 1866 1867
			IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);

	/* MCS set */
B
Ben Greear 已提交
1868 1869
	memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
	pos += sizeof(ht_cap->mcs);
1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882

	/* extended capabilities */
	pos += sizeof(__le16);

	/* BF capabilities */
	pos += sizeof(__le32);

	/* antenna selection */
	pos += sizeof(u8);

	return pos;
}

1883
u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
1884
			       u32 cap)
1885 1886 1887 1888
{
	__le32 tmp;

	*pos++ = WLAN_EID_VHT_CAPABILITY;
M
Mahesh Palivela 已提交
1889 1890
	*pos++ = sizeof(struct ieee80211_vht_cap);
	memset(pos, 0, sizeof(struct ieee80211_vht_cap));
1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903

	/* capability flags */
	tmp = cpu_to_le32(cap);
	memcpy(pos, &tmp, sizeof(u32));
	pos += sizeof(u32);

	/* VHT MCS set */
	memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
	pos += sizeof(vht_cap->vht_mcs);

	return pos;
}

1904
u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1905
			       const struct cfg80211_chan_def *chandef,
1906
			       u16 prot_mode)
1907
{
1908
	struct ieee80211_ht_operation *ht_oper;
1909
	/* Build HT Information */
1910 1911 1912
	*pos++ = WLAN_EID_HT_OPERATION;
	*pos++ = sizeof(struct ieee80211_ht_operation);
	ht_oper = (struct ieee80211_ht_operation *)pos;
1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923
	ht_oper->primary_chan = ieee80211_frequency_to_channel(
					chandef->chan->center_freq);
	switch (chandef->width) {
	case NL80211_CHAN_WIDTH_160:
	case NL80211_CHAN_WIDTH_80P80:
	case NL80211_CHAN_WIDTH_80:
	case NL80211_CHAN_WIDTH_40:
		if (chandef->center_freq1 > chandef->chan->center_freq)
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
		else
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1924 1925
		break;
	default:
1926
		ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1927 1928
		break;
	}
1929
	if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
1930 1931
	    chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
	    chandef->width != NL80211_CHAN_WIDTH_20)
1932
		ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
1933

1934
	ht_oper->operation_mode = cpu_to_le16(prot_mode);
1935
	ht_oper->stbc_param = 0x0000;
1936 1937 1938

	/* It seems that Basic MCS set and Supported MCS set
	   are identical for the first 10 bytes */
1939 1940
	memset(&ht_oper->basic_set, 0, 16);
	memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
1941

1942
	return pos + sizeof(struct ieee80211_ht_operation);
1943 1944
}

1945
void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
J
Johannes Berg 已提交
1946
				  const struct ieee80211_ht_operation *ht_oper,
1947
				  struct cfg80211_chan_def *chandef)
1948 1949 1950
{
	enum nl80211_channel_type channel_type;

1951 1952 1953 1954 1955
	if (!ht_oper) {
		cfg80211_chandef_create(chandef, control_chan,
					NL80211_CHAN_NO_HT);
		return;
	}
1956

1957
	switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970
	case IEEE80211_HT_PARAM_CHA_SEC_NONE:
		channel_type = NL80211_CHAN_HT20;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
		channel_type = NL80211_CHAN_HT40PLUS;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
		channel_type = NL80211_CHAN_HT40MINUS;
		break;
	default:
		channel_type = NL80211_CHAN_NO_HT;
	}

1971
	cfg80211_chandef_create(chandef, control_chan, channel_type);
1972 1973
}

1974
int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
1975 1976
			    struct sk_buff *skb, bool need_basic,
			    enum ieee80211_band band)
1977 1978 1979 1980 1981
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, rates, *pos;
1982
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
1983

1984
	sband = local->hw.wiphy->bands[band];
1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995
	rates = sband->n_bitrates;
	if (rates > 8)
		rates = 8;

	if (skb_tailroom(skb) < rates + 2)
		return -ENOMEM;

	pos = skb_put(skb, rates + 2);
	*pos++ = WLAN_EID_SUPP_RATES;
	*pos++ = rates;
	for (i = 0; i < rates; i++) {
1996 1997 1998
		u8 basic = 0;
		if (need_basic && basic_rates & BIT(i))
			basic = 0x80;
1999
		rate = sband->bitrates[i].bitrate;
2000
		*pos++ = basic | (u8) (rate / 5);
2001 2002 2003 2004 2005
	}

	return 0;
}

2006
int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
2007 2008
				struct sk_buff *skb, bool need_basic,
				enum ieee80211_band band)
2009 2010 2011 2012 2013
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, exrates, *pos;
2014
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2015

2016
	sband = local->hw.wiphy->bands[band];
2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030
	exrates = sband->n_bitrates;
	if (exrates > 8)
		exrates -= 8;
	else
		exrates = 0;

	if (skb_tailroom(skb) < exrates + 2)
		return -ENOMEM;

	if (exrates) {
		pos = skb_put(skb, exrates + 2);
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
		*pos++ = exrates;
		for (i = 8; i < sband->n_bitrates; i++) {
2031 2032 2033
			u8 basic = 0;
			if (need_basic && basic_rates & BIT(i))
				basic = 0x80;
2034
			rate = sband->bitrates[i].bitrate;
2035
			*pos++ = basic | (u8) (rate / 5);
2036 2037 2038 2039
		}
	}
	return 0;
}
2040 2041 2042 2043 2044 2045

int ieee80211_ave_rssi(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;

2046 2047 2048 2049
	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
		/* non-managed type inferfaces */
		return 0;
	}
2050 2051
	return ifmgd->ave_beacon_signal;
}
2052
EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068

u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
{
	if (!mcs)
		return 1;

	/* TODO: consider rx_highest */

	if (mcs->rx_mask[3])
		return 4;
	if (mcs->rx_mask[2])
		return 3;
	if (mcs->rx_mask[1])
		return 2;
	return 1;
}
2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102

/**
 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
 * @local: mac80211 hw info struct
 * @status: RX status
 * @mpdu_len: total MPDU length (including FCS)
 * @mpdu_offset: offset into MPDU to calculate timestamp at
 *
 * This function calculates the RX timestamp at the given MPDU offset, taking
 * into account what the RX timestamp was. An offset of 0 will just normalize
 * the timestamp to TSF at beginning of MPDU reception.
 */
u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
				     struct ieee80211_rx_status *status,
				     unsigned int mpdu_len,
				     unsigned int mpdu_offset)
{
	u64 ts = status->mactime;
	struct rate_info ri;
	u16 rate;

	if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
		return 0;

	memset(&ri, 0, sizeof(ri));

	/* Fill cfg80211 rate info */
	if (status->flag & RX_FLAG_HT) {
		ri.mcs = status->rate_idx;
		ri.flags |= RATE_INFO_FLAGS_MCS;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2103 2104 2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116
	} else if (status->flag & RX_FLAG_VHT) {
		ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
		ri.mcs = status->rate_idx;
		ri.nss = status->vht_nss;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80P80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_160MHZ)
			ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133
	} else {
		struct ieee80211_supported_band *sband;

		sband = local->hw.wiphy->bands[status->band];
		ri.legacy = sband->bitrates[status->rate_idx].bitrate;
	}

	rate = cfg80211_calculate_bitrate(&ri);

	/* rewind from end of MPDU */
	if (status->flag & RX_FLAG_MACTIME_END)
		ts -= mpdu_len * 8 * 10 / rate;

	ts += mpdu_offset * 8 * 10 / rate;

	return ts;
}
2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174 2175 2176 2177 2178 2179

void ieee80211_dfs_cac_cancel(struct ieee80211_local *local)
{
	struct ieee80211_sub_if_data *sdata;

	mutex_lock(&local->iflist_mtx);
	list_for_each_entry(sdata, &local->interfaces, list) {
		cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);

		if (sdata->wdev.cac_started) {
			ieee80211_vif_release_channel(sdata);
			cfg80211_cac_event(sdata->dev,
					   NL80211_RADAR_CAC_ABORTED,
					   GFP_KERNEL);
		}
	}
	mutex_unlock(&local->iflist_mtx);
}

void ieee80211_dfs_radar_detected_work(struct work_struct *work)
{
	struct ieee80211_local *local =
		container_of(work, struct ieee80211_local, radar_detected_work);
	struct cfg80211_chan_def chandef;

	ieee80211_dfs_cac_cancel(local);

	if (local->use_chanctx)
		/* currently not handled */
		WARN_ON(1);
	else {
		cfg80211_chandef_create(&chandef, local->hw.conf.channel,
					local->hw.conf.channel_type);
		cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL);
	}
}

void ieee80211_radar_detected(struct ieee80211_hw *hw)
{
	struct ieee80211_local *local = hw_to_local(hw);

	trace_api_radar_detected(local);

	ieee80211_queue_work(hw, &local->radar_detected_work);
}
EXPORT_SYMBOL(ieee80211_radar_detected);