util.c 55.1 KB
Newer Older
J
Johannes Berg 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * utilities for mac80211
 */

#include <net/mac80211.h>
#include <linux/netdevice.h>
16
#include <linux/export.h>
J
Johannes Berg 已提交
17 18 19 20 21 22
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/bitmap.h>
23
#include <linux/crc32.h>
24
#include <net/net_namespace.h>
J
Johannes Berg 已提交
25
#include <net/cfg80211.h>
26
#include <net/rtnetlink.h>
J
Johannes Berg 已提交
27 28

#include "ieee80211_i.h"
29
#include "driver-ops.h"
J
Johannes Berg 已提交
30
#include "rate.h"
31
#include "mesh.h"
J
Johannes Berg 已提交
32
#include "wme.h"
33
#include "led.h"
J
Johannes Berg 已提交
34
#include "wep.h"
J
Johannes Berg 已提交
35 36 37 38

/* privid for wiphys to determine whether they belong to us or not */
void *mac80211_wiphy_privid = &mac80211_wiphy_privid;

39 40 41 42 43 44 45 46 47
struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
{
	struct ieee80211_local *local;
	BUG_ON(!wiphy);

	local = wiphy_priv(wiphy);
	return &local->hw;
}
EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
J
Johannes Berg 已提交
48

49
u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
50
			enum nl80211_iftype type)
J
Johannes Berg 已提交
51
{
52
	__le16 fc = hdr->frame_control;
J
Johannes Berg 已提交
53

54 55
	 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
	if (len < 16)
J
Johannes Berg 已提交
56 57
		return NULL;

58
	if (ieee80211_is_data(fc)) {
59 60
		if (len < 24) /* drop incorrect hdr len (data) */
			return NULL;
61 62

		if (ieee80211_has_a4(fc))
J
Johannes Berg 已提交
63
			return NULL;
64 65 66
		if (ieee80211_has_tods(fc))
			return hdr->addr1;
		if (ieee80211_has_fromds(fc))
J
Johannes Berg 已提交
67
			return hdr->addr2;
68 69 70 71 72

		return hdr->addr3;
	}

	if (ieee80211_is_mgmt(fc)) {
73 74
		if (len < 24) /* drop incorrect hdr len (mgmt) */
			return NULL;
J
Johannes Berg 已提交
75
		return hdr->addr3;
76 77 78 79
	}

	if (ieee80211_is_ctl(fc)) {
		if(ieee80211_is_pspoll(fc))
J
Johannes Berg 已提交
80
			return hdr->addr1;
81 82

		if (ieee80211_is_back_req(fc)) {
83
			switch (type) {
84
			case NL80211_IFTYPE_STATION:
85
				return hdr->addr2;
86 87
			case NL80211_IFTYPE_AP:
			case NL80211_IFTYPE_AP_VLAN:
88 89
				return hdr->addr1;
			default:
90
				break; /* fall through to the return */
91 92
			}
		}
J
Johannes Berg 已提交
93 94 95 96 97
	}

	return NULL;
}

98
void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
J
Johannes Berg 已提交
99
{
100
	struct sk_buff *skb;
J
Johannes Berg 已提交
101 102
	struct ieee80211_hdr *hdr;

103
	skb_queue_walk(&tx->skbs, skb) {
J
Johannes Berg 已提交
104 105
		hdr = (struct ieee80211_hdr *) skb->data;
		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
106
	}
J
Johannes Berg 已提交
107 108
}

109
int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
J
Johannes Berg 已提交
110 111 112 113 114 115 116 117 118 119 120 121 122
			     int rate, int erp, int short_preamble)
{
	int dur;

	/* calculate duration (in microseconds, rounded up to next higher
	 * integer if it includes a fractional microsecond) to send frame of
	 * len bytes (does not include FCS) at the given rate. Duration will
	 * also include SIFS.
	 *
	 * rate is in 100 kbps, so divident is multiplied by 10 in the
	 * DIV_ROUND_UP() operations.
	 */

123
	if (band == IEEE80211_BAND_5GHZ || erp) {
J
Johannes Berg 已提交
124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162
		/*
		 * OFDM:
		 *
		 * N_DBPS = DATARATE x 4
		 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
		 *	(16 = SIGNAL time, 6 = tail bits)
		 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
		 *
		 * T_SYM = 4 usec
		 * 802.11a - 17.5.2: aSIFSTime = 16 usec
		 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
		 *	signal ext = 6 usec
		 */
		dur = 16; /* SIFS + signal ext */
		dur += 16; /* 17.3.2.3: T_PREAMBLE = 16 usec */
		dur += 4; /* 17.3.2.3: T_SIGNAL = 4 usec */
		dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
					4 * rate); /* T_SYM x N_SYM */
	} else {
		/*
		 * 802.11b or 802.11g with 802.11b compatibility:
		 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
		 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
		 *
		 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
		 * aSIFSTime = 10 usec
		 * aPreambleLength = 144 usec or 72 usec with short preamble
		 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
		 */
		dur = 10; /* aSIFSTime = 10 usec */
		dur += short_preamble ? (72 + 24) : (144 + 48);

		dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
	}

	return dur;
}

/* Exported duration function for driver use */
163 164
__le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
					struct ieee80211_vif *vif,
165
					enum ieee80211_band band,
166 167
					size_t frame_len,
					struct ieee80211_rate *rate)
J
Johannes Berg 已提交
168
{
169
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
170 171
	u16 dur;
	int erp;
172
	bool short_preamble = false;
J
Johannes Berg 已提交
173

174
	erp = 0;
175 176
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
177
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
178 179 180
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
181

182
	dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
183
				       short_preamble);
J
Johannes Berg 已提交
184 185 186 187 188

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_generic_frame_duration);

189 190
__le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
			      struct ieee80211_vif *vif, size_t frame_len,
191
			      const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
192 193 194
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
195
	struct ieee80211_sub_if_data *sdata;
196
	bool short_preamble;
J
Johannes Berg 已提交
197 198
	int erp;
	u16 dur;
199 200
	struct ieee80211_supported_band *sband;

201
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
202

203
	short_preamble = false;
204

205
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
206 207

	erp = 0;
208 209
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
210
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
211 212 213
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
214 215

	/* CTS duration */
216
	dur = ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
217 218
				       erp, short_preamble);
	/* Data frame duration */
219
	dur += ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
220 221
					erp, short_preamble);
	/* ACK duration */
222
	dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
223 224 225 226 227 228
					erp, short_preamble);

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_rts_duration);

229 230
__le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
				    struct ieee80211_vif *vif,
J
Johannes Berg 已提交
231
				    size_t frame_len,
232
				    const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
233 234 235
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
236
	struct ieee80211_sub_if_data *sdata;
237
	bool short_preamble;
J
Johannes Berg 已提交
238 239
	int erp;
	u16 dur;
240 241
	struct ieee80211_supported_band *sband;

242
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
243

244
	short_preamble = false;
245

246
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
247
	erp = 0;
248 249
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
250
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
251 252 253
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
254 255

	/* Data frame duration */
256
	dur = ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
257
				       erp, short_preamble);
258
	if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
J
Johannes Berg 已提交
259
		/* ACK duration */
260
		dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
261 262 263 264 265 266 267
						erp, short_preamble);
	}

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_ctstoself_duration);

268 269 270
void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
{
	struct ieee80211_sub_if_data *sdata;
271 272 273 274
	int n_acs = IEEE80211_NUM_ACS;

	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;
275 276 277 278

	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

279 280 281
		if (!sdata->dev)
			continue;

282 283 284 285 286 287 288
		if (test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state))
			continue;

		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
		    local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
			continue;

289
		for (ac = 0; ac < n_acs; ac++) {
290 291 292 293 294 295 296 297 298 299 300
			int ac_queue = sdata->vif.hw_queue[ac];

			if (ac_queue == queue ||
			    (sdata->vif.cab_queue == queue &&
			     local->queue_stop_reasons[ac_queue] == 0 &&
			     skb_queue_empty(&local->pending[ac_queue])))
				netif_wake_subqueue(sdata->dev, ac);
		}
	}
}

K
Kalle Valo 已提交
301 302
static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
303 304 305
{
	struct ieee80211_local *local = hw_to_local(hw);

J
Johannes Berg 已提交
306 307
	trace_wake_queue(local, queue, reason);

308 309
	if (WARN_ON(queue >= hw->queues))
		return;
K
Kalle Valo 已提交
310

311 312 313
	if (!test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

314 315 316 317 318 319
	__clear_bit(reason, &local->queue_stop_reasons[queue]);

	if (local->queue_stop_reasons[queue] != 0)
		/* someone still has this queue stopped */
		return;

320 321
	if (skb_queue_empty(&local->pending[queue])) {
		rcu_read_lock();
322
		ieee80211_propagate_queue_wake(local, queue);
323 324
		rcu_read_unlock();
	} else
J
Johannes Berg 已提交
325
		tasklet_schedule(&local->tx_pending_tasklet);
J
Johannes Berg 已提交
326
}
K
Kalle Valo 已提交
327

328 329
void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
330 331 332 333 334 335 336 337 338 339 340 341 342 343
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_wake_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_wake_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
344 345
EXPORT_SYMBOL(ieee80211_wake_queue);

K
Kalle Valo 已提交
346 347
static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
348 349
{
	struct ieee80211_local *local = hw_to_local(hw);
350
	struct ieee80211_sub_if_data *sdata;
351
	int n_acs = IEEE80211_NUM_ACS;
J
Johannes Berg 已提交
352

J
Johannes Berg 已提交
353 354
	trace_stop_queue(local, queue, reason);

355 356
	if (WARN_ON(queue >= hw->queues))
		return;
357

358 359 360
	if (test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

361
	__set_bit(reason, &local->queue_stop_reasons[queue]);
362

363 364 365
	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;

366
	rcu_read_lock();
367 368 369
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

370 371 372
		if (!sdata->dev)
			continue;

373
		for (ac = 0; ac < n_acs; ac++) {
374 375 376 377 378
			if (sdata->vif.hw_queue[ac] == queue ||
			    sdata->vif.cab_queue == queue)
				netif_stop_subqueue(sdata->dev, ac);
		}
	}
379
	rcu_read_unlock();
J
Johannes Berg 已提交
380
}
K
Kalle Valo 已提交
381

382 383
void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
384 385 386 387 388 389 390 391 392 393 394 395 396 397
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_stop_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
398 399
EXPORT_SYMBOL(ieee80211_stop_queue);

400 401 402 403 404
void ieee80211_add_pending_skb(struct ieee80211_local *local,
			       struct sk_buff *skb)
{
	struct ieee80211_hw *hw = &local->hw;
	unsigned long flags;
405
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
406
	int queue = info->hw_queue;
407 408

	if (WARN_ON(!info->control.vif)) {
409
		ieee80211_free_txskb(&local->hw, skb);
410 411
		return;
	}
412 413 414

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
J
Johannes Berg 已提交
415
	__skb_queue_tail(&local->pending[queue], skb);
416 417 418 419
	__ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

420 421 422
void ieee80211_add_pending_skbs_fn(struct ieee80211_local *local,
				   struct sk_buff_head *skbs,
				   void (*fn)(void *data), void *data)
423 424 425 426
{
	struct ieee80211_hw *hw = &local->hw;
	struct sk_buff *skb;
	unsigned long flags;
427
	int queue, i;
428 429 430

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	while ((skb = skb_dequeue(skbs))) {
431 432 433
		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);

		if (WARN_ON(!info->control.vif)) {
434
			ieee80211_free_txskb(&local->hw, skb);
435 436 437
			continue;
		}

438
		queue = info->hw_queue;
439 440 441 442

		__ieee80211_stop_queue(hw, queue,
				IEEE80211_QUEUE_STOP_REASON_SKB_ADD);

J
Johannes Berg 已提交
443
		__skb_queue_tail(&local->pending[queue], skb);
444 445
	}

446 447 448
	if (fn)
		fn(data);

J
Johannes Berg 已提交
449
	for (i = 0; i < hw->queues; i++)
450 451 452 453 454
		__ieee80211_wake_queue(hw, i,
			IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

K
Kalle Valo 已提交
455
void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
456 457
				     unsigned long queues,
				     enum queue_stop_reason reason)
J
Johannes Berg 已提交
458
{
K
Kalle Valo 已提交
459 460
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
461 462
	int i;

K
Kalle Valo 已提交
463 464
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

465
	for_each_set_bit(i, &queues, hw->queues)
K
Kalle Valo 已提交
466 467 468 469 470 471 472
		__ieee80211_stop_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queues(struct ieee80211_hw *hw)
{
473
	ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
K
Kalle Valo 已提交
474
					IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
475 476 477
}
EXPORT_SYMBOL(ieee80211_stop_queues);

478 479 480
int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
{
	struct ieee80211_local *local = hw_to_local(hw);
J
Johannes Berg 已提交
481 482
	unsigned long flags;
	int ret;
483

484 485
	if (WARN_ON(queue >= hw->queues))
		return true;
486

J
Johannes Berg 已提交
487 488 489 490
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	ret = !!local->queue_stop_reasons[queue];
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
	return ret;
491 492 493
}
EXPORT_SYMBOL(ieee80211_queue_stopped);

K
Kalle Valo 已提交
494
void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
495
				     unsigned long queues,
K
Kalle Valo 已提交
496
				     enum queue_stop_reason reason)
J
Johannes Berg 已提交
497
{
K
Kalle Valo 已提交
498 499
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
500 501
	int i;

K
Kalle Valo 已提交
502 503
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

504
	for_each_set_bit(i, &queues, hw->queues)
K
Kalle Valo 已提交
505 506 507 508 509 510 511
		__ieee80211_wake_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queues(struct ieee80211_hw *hw)
{
512 513
	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
514 515
}
EXPORT_SYMBOL(ieee80211_wake_queues);
516

517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538
void ieee80211_flush_queues(struct ieee80211_local *local,
			    struct ieee80211_sub_if_data *sdata)
{
	u32 queues;

	if (!local->ops->flush)
		return;

	if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) {
		int ac;

		queues = 0;

		for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
			queues |= BIT(sdata->vif.hw_queue[ac]);
		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE)
			queues |= BIT(sdata->vif.cab_queue);
	} else {
		/* all queues */
		queues = BIT(local->hw.queues) - 1;
	}

539 540 541
	ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_FLUSH);

542
	drv_flush(local, queues, false);
543 544 545

	ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_FLUSH);
546 547
}

548
void ieee80211_iterate_active_interfaces(
549
	struct ieee80211_hw *hw, u32 iter_flags,
550 551 552
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
553 554 555 556
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

557
	mutex_lock(&local->iflist_mtx);
558 559 560

	list_for_each_entry(sdata, &local->interfaces, list) {
		switch (sdata->vif.type) {
561 562
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
563
			continue;
564
		default:
565 566
			break;
		}
567 568 569
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
570
		if (ieee80211_sdata_running(sdata))
571
			iterator(data, sdata->vif.addr,
572 573 574
				 &sdata->vif);
	}

575 576
	sdata = rcu_dereference_protected(local->monitor_sdata,
					  lockdep_is_held(&local->iflist_mtx));
577 578 579
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
580 581
		iterator(data, sdata->vif.addr, &sdata->vif);

582
	mutex_unlock(&local->iflist_mtx);
583 584 585 586
}
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);

void ieee80211_iterate_active_interfaces_atomic(
587
	struct ieee80211_hw *hw, u32 iter_flags,
588 589 590 591 592 593 594
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

595
	rcu_read_lock();
596

597
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
598
		switch (sdata->vif.type) {
599 600
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
601
			continue;
602
		default:
603 604
			break;
		}
605 606 607
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
608
		if (ieee80211_sdata_running(sdata))
609
			iterator(data, sdata->vif.addr,
610
				 &sdata->vif);
611
	}
612

613
	sdata = rcu_dereference(local->monitor_sdata);
614 615 616
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
617 618
		iterator(data, sdata->vif.addr, &sdata->vif);

619
	rcu_read_unlock();
620
}
621
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
622

623 624 625 626 627 628 629 630 631
/*
 * Nothing should have been stuffed into the workqueue during
 * the suspend->resume cycle. If this WARN is seen then there
 * is a bug with either the driver suspend or something in
 * mac80211 stuffing into the workqueue which we haven't yet
 * cleared during mac80211's suspend cycle.
 */
static bool ieee80211_can_queue_work(struct ieee80211_local *local)
{
J
Johannes Berg 已提交
632 633 634
	if (WARN(local->suspended && !local->resuming,
		 "queueing ieee80211 work while going to suspend\n"))
		return false;
635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662

	return true;
}

void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_work(local->workqueue, work);
}
EXPORT_SYMBOL(ieee80211_queue_work);

void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
				  struct delayed_work *dwork,
				  unsigned long delay)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_delayed_work(local->workqueue, dwork, delay);
}
EXPORT_SYMBOL(ieee80211_queue_delayed_work);

663 664 665 666 667 668 669
u32 ieee802_11_parse_elems_crc(u8 *start, size_t len,
			       struct ieee802_11_elems *elems,
			       u64 filter, u32 crc)
{
	size_t left = len;
	u8 *pos = start;
	bool calc_crc = filter != 0;
P
Paul Stewart 已提交
670
	DECLARE_BITMAP(seen_elems, 256);
671

P
Paul Stewart 已提交
672
	bitmap_zero(seen_elems, 256);
673 674 675 676 677 678
	memset(elems, 0, sizeof(*elems));
	elems->ie_start = start;
	elems->total_len = len;

	while (left >= 2) {
		u8 id, elen;
P
Paul Stewart 已提交
679
		bool elem_parse_failed;
680 681 682 683 684

		id = *pos++;
		elen = *pos++;
		left -= 2;

P
Paul Stewart 已提交
685 686
		if (elen > left) {
			elems->parse_error = true;
687
			break;
P
Paul Stewart 已提交
688 689
		}

690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724
		switch (id) {
		case WLAN_EID_SSID:
		case WLAN_EID_SUPP_RATES:
		case WLAN_EID_FH_PARAMS:
		case WLAN_EID_DS_PARAMS:
		case WLAN_EID_CF_PARAMS:
		case WLAN_EID_TIM:
		case WLAN_EID_IBSS_PARAMS:
		case WLAN_EID_CHALLENGE:
		case WLAN_EID_RSN:
		case WLAN_EID_ERP_INFO:
		case WLAN_EID_EXT_SUPP_RATES:
		case WLAN_EID_HT_CAPABILITY:
		case WLAN_EID_HT_OPERATION:
		case WLAN_EID_VHT_CAPABILITY:
		case WLAN_EID_VHT_OPERATION:
		case WLAN_EID_MESH_ID:
		case WLAN_EID_MESH_CONFIG:
		case WLAN_EID_PEER_MGMT:
		case WLAN_EID_PREQ:
		case WLAN_EID_PREP:
		case WLAN_EID_PERR:
		case WLAN_EID_RANN:
		case WLAN_EID_CHANNEL_SWITCH:
		case WLAN_EID_EXT_CHANSWITCH_ANN:
		case WLAN_EID_COUNTRY:
		case WLAN_EID_PWR_CONSTRAINT:
		case WLAN_EID_TIMEOUT_INTERVAL:
			if (test_bit(id, seen_elems)) {
				elems->parse_error = true;
				left -= elen;
				pos += elen;
				continue;
			}
			break;
P
Paul Stewart 已提交
725
		}
726 727 728 729

		if (calc_crc && id < 64 && (filter & (1ULL << id)))
			crc = crc32_be(crc, pos - 2, elen + 2);

P
Paul Stewart 已提交
730 731
		elem_parse_failed = false;

732 733 734 735 736 737 738 739 740 741
		switch (id) {
		case WLAN_EID_SSID:
			elems->ssid = pos;
			elems->ssid_len = elen;
			break;
		case WLAN_EID_SUPP_RATES:
			elems->supp_rates = pos;
			elems->supp_rates_len = elen;
			break;
		case WLAN_EID_DS_PARAMS:
742 743 744 745
			if (elen >= 1)
				elems->ds_params = pos;
			else
				elem_parse_failed = true;
746 747 748 749 750
			break;
		case WLAN_EID_TIM:
			if (elen >= sizeof(struct ieee80211_tim_ie)) {
				elems->tim = (void *)pos;
				elems->tim_len = elen;
P
Paul Stewart 已提交
751 752
			} else
				elem_parse_failed = true;
753 754 755 756 757 758 759 760 761 762 763 764 765
			break;
		case WLAN_EID_CHALLENGE:
			elems->challenge = pos;
			elems->challenge_len = elen;
			break;
		case WLAN_EID_VENDOR_SPECIFIC:
			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
			    pos[2] == 0xf2) {
				/* Microsoft OUI (00:50:F2) */

				if (calc_crc)
					crc = crc32_be(crc, pos - 2, elen + 2);

766
				if (elen >= 5 && pos[3] == 2) {
767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782
					/* OUI Type 2 - WMM IE */
					if (pos[4] == 0) {
						elems->wmm_info = pos;
						elems->wmm_info_len = elen;
					} else if (pos[4] == 1) {
						elems->wmm_param = pos;
						elems->wmm_param_len = elen;
					}
				}
			}
			break;
		case WLAN_EID_RSN:
			elems->rsn = pos;
			elems->rsn_len = elen;
			break;
		case WLAN_EID_ERP_INFO:
783 784 785 786
			if (elen >= 1)
				elems->erp_info = pos;
			else
				elem_parse_failed = true;
787 788 789 790 791 792 793 794
			break;
		case WLAN_EID_EXT_SUPP_RATES:
			elems->ext_supp_rates = pos;
			elems->ext_supp_rates_len = elen;
			break;
		case WLAN_EID_HT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_ht_cap))
				elems->ht_cap_elem = (void *)pos;
P
Paul Stewart 已提交
795 796
			else
				elem_parse_failed = true;
797
			break;
798 799 800
		case WLAN_EID_HT_OPERATION:
			if (elen >= sizeof(struct ieee80211_ht_operation))
				elems->ht_operation = (void *)pos;
P
Paul Stewart 已提交
801 802
			else
				elem_parse_failed = true;
803
			break;
M
Mahesh Palivela 已提交
804 805 806 807 808 809 810 811 812 813 814 815
		case WLAN_EID_VHT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_vht_cap))
				elems->vht_cap_elem = (void *)pos;
			else
				elem_parse_failed = true;
			break;
		case WLAN_EID_VHT_OPERATION:
			if (elen >= sizeof(struct ieee80211_vht_operation))
				elems->vht_operation = (void *)pos;
			else
				elem_parse_failed = true;
			break;
816 817 818 819 820 821
		case WLAN_EID_OPMODE_NOTIF:
			if (elen > 0)
				elems->opmode_notif = pos;
			else
				elem_parse_failed = true;
			break;
822 823 824 825 826 827 828
		case WLAN_EID_MESH_ID:
			elems->mesh_id = pos;
			elems->mesh_id_len = elen;
			break;
		case WLAN_EID_MESH_CONFIG:
			if (elen >= sizeof(struct ieee80211_meshconf_ie))
				elems->mesh_config = (void *)pos;
P
Paul Stewart 已提交
829 830
			else
				elem_parse_failed = true;
831 832 833 834 835
			break;
		case WLAN_EID_PEER_MGMT:
			elems->peering = pos;
			elems->peering_len = elen;
			break;
M
Marco Porsch 已提交
836 837 838 839
		case WLAN_EID_MESH_AWAKE_WINDOW:
			if (elen >= 2)
				elems->awake_window = (void *)pos;
			break;
840 841 842 843 844 845 846 847 848 849 850 851 852 853 854
		case WLAN_EID_PREQ:
			elems->preq = pos;
			elems->preq_len = elen;
			break;
		case WLAN_EID_PREP:
			elems->prep = pos;
			elems->prep_len = elen;
			break;
		case WLAN_EID_PERR:
			elems->perr = pos;
			elems->perr_len = elen;
			break;
		case WLAN_EID_RANN:
			if (elen >= sizeof(struct ieee80211_rann_ie))
				elems->rann = (void *)pos;
P
Paul Stewart 已提交
855 856
			else
				elem_parse_failed = true;
857 858
			break;
		case WLAN_EID_CHANNEL_SWITCH:
859 860 861 862 863
			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
				elem_parse_failed = true;
				break;
			}
			elems->ch_switch_ie = (void *)pos;
864 865 866 867 868 869
			break;
		case WLAN_EID_COUNTRY:
			elems->country_elem = pos;
			elems->country_elem_len = elen;
			break;
		case WLAN_EID_PWR_CONSTRAINT:
870 871 872 873
			if (elen != 1) {
				elem_parse_failed = true;
				break;
			}
874 875 876
			elems->pwr_constr_elem = pos;
			break;
		case WLAN_EID_TIMEOUT_INTERVAL:
877 878 879 880
			if (elen >= sizeof(struct ieee80211_timeout_interval_ie))
				elems->timeout_int = (void *)pos;
			else
				elem_parse_failed = true;
881 882 883 884 885
			break;
		default:
			break;
		}

P
Paul Stewart 已提交
886 887 888
		if (elem_parse_failed)
			elems->parse_error = true;
		else
889
			__set_bit(id, seen_elems);
P
Paul Stewart 已提交
890

891 892 893 894
		left -= elen;
		pos += elen;
	}

P
Paul Stewart 已提交
895 896 897
	if (left != 0)
		elems->parse_error = true;

898 899 900
	return crc;
}

901 902
void ieee802_11_parse_elems(u8 *start, size_t len,
			    struct ieee802_11_elems *elems)
903 904 905 906
{
	ieee802_11_parse_elems_crc(start, len, elems, 0, 0);
}

907 908
void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
			       bool bss_notify)
909 910 911
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_tx_queue_params qparam;
J
Johannes Berg 已提交
912
	struct ieee80211_chanctx_conf *chanctx_conf;
913
	int ac;
914
	bool use_11b, enable_qos;
915
	int aCWmin, aCWmax;
916 917 918 919

	if (!local->ops->conf_tx)
		return;

920 921 922
	if (local->hw.queues < IEEE80211_NUM_ACS)
		return;

923 924
	memset(&qparam, 0, sizeof(qparam));

J
Johannes Berg 已提交
925 926 927
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	use_11b = (chanctx_conf &&
928
		   chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
929
		 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
J
Johannes Berg 已提交
930
	rcu_read_unlock();
931

932 933 934 935 936 937 938
	/*
	 * By default disable QoS in STA mode for old access points, which do
	 * not support 802.11e. New APs will provide proper queue parameters,
	 * that we will configure later.
	 */
	enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);

939
	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
940 941 942 943 944 945 946
		/* Set defaults according to 802.11-2007 Table 7-37 */
		aCWmax = 1023;
		if (use_11b)
			aCWmin = 31;
		else
			aCWmin = 15;

947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983
		if (enable_qos) {
			switch (ac) {
			case IEEE80211_AC_BK:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 7;
				break;
			/* never happens but let's not leave undefined */
			default:
			case IEEE80211_AC_BE:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 3;
				break;
			case IEEE80211_AC_VI:
				qparam.cw_max = aCWmin;
				qparam.cw_min = (aCWmin + 1) / 2 - 1;
				if (use_11b)
					qparam.txop = 6016/32;
				else
					qparam.txop = 3008/32;
				qparam.aifs = 2;
				break;
			case IEEE80211_AC_VO:
				qparam.cw_max = (aCWmin + 1) / 2 - 1;
				qparam.cw_min = (aCWmin + 1) / 4 - 1;
				if (use_11b)
					qparam.txop = 3264/32;
				else
					qparam.txop = 1504/32;
				qparam.aifs = 2;
				break;
			}
		} else {
			/* Confiure old 802.11b/g medium access rules. */
984 985
			qparam.cw_max = aCWmax;
			qparam.cw_min = aCWmin;
986 987 988
			qparam.txop = 0;
			qparam.aifs = 2;
		}
989

K
Kalle Valo 已提交
990 991
		qparam.uapsd = false;

992 993
		sdata->tx_conf[ac] = qparam;
		drv_conf_tx(local, sdata, ac, &qparam);
994
	}
995

996 997
	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
	    sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
998
		sdata->vif.bss_conf.qos = enable_qos;
999 1000 1001
		if (bss_notify)
			ieee80211_bss_info_change_notify(sdata,
							 BSS_CHANGED_QOS);
1002
	}
1003
}
J
Johannes Berg 已提交
1004

1005 1006 1007 1008
void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
				  const size_t supp_rates_len,
				  const u8 *supp_rates)
{
J
Johannes Berg 已提交
1009
	struct ieee80211_chanctx_conf *chanctx_conf;
1010 1011 1012 1013 1014 1015 1016
	int i, have_higher_than_11mbit = 0;

	/* cf. IEEE 802.11 9.2.12 */
	for (i = 0; i < supp_rates_len; i++)
		if ((supp_rates[i] & 0x7f) * 5 > 110)
			have_higher_than_11mbit = 1;

J
Johannes Berg 已提交
1017 1018 1019 1020
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);

	if (chanctx_conf &&
1021
	    chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ &&
1022 1023 1024 1025
	    have_higher_than_11mbit)
		sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
	else
		sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
J
Johannes Berg 已提交
1026
	rcu_read_unlock();
1027

1028
	ieee80211_set_wmm_default(sdata, true);
1029 1030
}

1031
u32 ieee80211_mandatory_rates(struct ieee80211_local *local,
1032 1033 1034 1035
			      enum ieee80211_band band)
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
1036
	u32 mandatory_rates;
1037 1038 1039 1040
	enum ieee80211_rate_flags mandatory_flag;
	int i;

	sband = local->hw.wiphy->bands[band];
1041 1042
	if (WARN_ON(!sband))
		return 1;
1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055

	if (band == IEEE80211_BAND_2GHZ)
		mandatory_flag = IEEE80211_RATE_MANDATORY_B;
	else
		mandatory_flag = IEEE80211_RATE_MANDATORY_A;

	bitrates = sband->bitrates;
	mandatory_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++)
		if (bitrates[i].flags & mandatory_flag)
			mandatory_rates |= BIT(i);
	return mandatory_rates;
}
1056 1057

void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
1058
			 u16 transaction, u16 auth_alg, u16 status,
J
Johannes Berg 已提交
1059
			 const u8 *extra, size_t extra_len, const u8 *da,
1060 1061
			 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx,
			 u32 tx_flags)
1062 1063 1064 1065
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
J
Johannes Berg 已提交
1066
	int err;
1067 1068

	skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1069
			    sizeof(*mgmt) + 6 + extra_len);
1070
	if (!skb)
1071
		return;
1072

1073 1074 1075 1076 1077 1078
	skb_reserve(skb, local->hw.extra_tx_headroom);

	mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
	memset(mgmt, 0, 24 + 6);
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
					  IEEE80211_STYPE_AUTH);
1079
	memcpy(mgmt->da, da, ETH_ALEN);
1080
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1081 1082 1083
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
	mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
1084
	mgmt->u.auth.status_code = cpu_to_le16(status);
1085 1086 1087
	if (extra)
		memcpy(skb_put(skb, extra_len), extra, extra_len);

J
Johannes Berg 已提交
1088 1089 1090 1091 1092 1093
	if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
		mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
		err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
		WARN_ON(err);
	}

1094 1095
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT |
					tx_flags;
1096
	ieee80211_tx_skb(sdata, skb);
1097 1098
}

1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137
void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
				    const u8 *bssid, u16 stype, u16 reason,
				    bool send_frame, u8 *frame_buf)
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt = (void *)frame_buf;

	/* build frame */
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
	mgmt->duration = 0; /* initialize only */
	mgmt->seq_ctrl = 0; /* initialize only */
	memcpy(mgmt->da, bssid, ETH_ALEN);
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	/* u.deauth.reason_code == u.disassoc.reason_code */
	mgmt->u.deauth.reason_code = cpu_to_le16(reason);

	if (send_frame) {
		skb = dev_alloc_skb(local->hw.extra_tx_headroom +
				    IEEE80211_DEAUTH_FRAME_LEN);
		if (!skb)
			return;

		skb_reserve(skb, local->hw.extra_tx_headroom);

		/* copy in frame */
		memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
		       mgmt, IEEE80211_DEAUTH_FRAME_LEN);

		if (sdata->vif.type != NL80211_IFTYPE_STATION ||
		    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
			IEEE80211_SKB_CB(skb)->flags |=
				IEEE80211_TX_INTFL_DONT_ENCRYPT;

		ieee80211_tx_skb(sdata, skb);
	}
}

1138
int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1139
			     size_t buffer_len, const u8 *ie, size_t ie_len,
1140 1141
			     enum ieee80211_band band, u32 rate_mask,
			     u8 channel)
1142 1143
{
	struct ieee80211_supported_band *sband;
1144
	u8 *pos = buffer, *end = buffer + buffer_len;
1145 1146
	size_t offset = 0, noffset;
	int supp_rates_len, i;
1147 1148 1149
	u8 rates[32];
	int num_rates;
	int ext_rates_len;
1150

1151
	sband = local->hw.wiphy->bands[band];
1152 1153
	if (WARN_ON_ONCE(!sband))
		return 0;
1154

1155 1156 1157 1158 1159 1160 1161 1162
	num_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++) {
		if ((BIT(i) & rate_mask) == 0)
			continue; /* skip rate */
		rates[num_rates++] = (u8) (sband->bitrates[i].bitrate / 5);
	}

	supp_rates_len = min_t(int, num_rates, 8);
1163

1164 1165
	if (end - pos < 2 + supp_rates_len)
		goto out_err;
1166
	*pos++ = WLAN_EID_SUPP_RATES;
1167
	*pos++ = supp_rates_len;
1168 1169
	memcpy(pos, rates, supp_rates_len);
	pos += supp_rates_len;
1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181

	/* insert "request information" if in custom IEs */
	if (ie && ie_len) {
		static const u8 before_extrates[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_extrates,
					     ARRAY_SIZE(before_extrates),
					     offset);
1182 1183
		if (end - pos < noffset - offset)
			goto out_err;
1184 1185 1186 1187 1188
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
	}

1189 1190
	ext_rates_len = num_rates - supp_rates_len;
	if (ext_rates_len > 0) {
1191 1192
		if (end - pos < 2 + ext_rates_len)
			goto out_err;
1193
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
1194 1195 1196
		*pos++ = ext_rates_len;
		memcpy(pos, rates + supp_rates_len, ext_rates_len);
		pos += ext_rates_len;
1197 1198
	}

1199
	if (channel && sband->band == IEEE80211_BAND_2GHZ) {
1200 1201
		if (end - pos < 3)
			goto out_err;
1202 1203 1204 1205 1206
		*pos++ = WLAN_EID_DS_PARAMS;
		*pos++ = 1;
		*pos++ = channel;
	}

1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219
	/* insert custom IEs that go before HT */
	if (ie && ie_len) {
		static const u8 before_ht[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
			WLAN_EID_EXT_SUPP_RATES,
			WLAN_EID_DS_PARAMS,
			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_ht, ARRAY_SIZE(before_ht),
					     offset);
1220 1221
		if (end - pos < noffset - offset)
			goto out_err;
1222 1223 1224
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
1225 1226
	}

1227 1228 1229
	if (sband->ht_cap.ht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
			goto out_err;
B
Ben Greear 已提交
1230 1231
		pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
						sband->ht_cap.cap);
1232
	}
1233

1234 1235 1236 1237 1238
	/*
	 * If adding more here, adjust code in main.c
	 * that calculates local->scan_ies_len.
	 */

1239 1240 1241
	/* add any remaining custom IEs */
	if (ie && ie_len) {
		noffset = ie_len;
1242 1243
		if (end - pos < noffset - offset)
			goto out_err;
1244 1245
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
1246 1247
	}

1248 1249 1250
	if (sband->vht_cap.vht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
			goto out_err;
1251 1252
		pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
						 sband->vht_cap.cap);
1253
	}
1254

1255 1256 1257
	return pos - buffer;
 out_err:
	WARN_ONCE(1, "not enough space for preq IEs\n");
1258 1259 1260
	return pos - buffer;
}

1261
struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1262
					  u8 *dst, u32 ratemask,
1263
					  struct ieee80211_channel *chan,
1264
					  const u8 *ssid, size_t ssid_len,
1265 1266
					  const u8 *ie, size_t ie_len,
					  bool directed)
1267 1268 1269 1270
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
1271
	u8 chan_no;
1272
	int ies_len;
1273

1274 1275 1276 1277 1278 1279
	/*
	 * Do not send DS Channel parameter for directed probe requests
	 * in order to maximize the chance that we get a response.  Some
	 * badly-behaved APs don't respond when this parameter is included.
	 */
	if (directed)
1280
		chan_no = 0;
1281
	else
1282
		chan_no = ieee80211_frequency_to_channel(chan->center_freq);
1283

1284
	skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
1285
				     ssid, ssid_len, 100 + ie_len);
1286
	if (!skb)
1287 1288 1289 1290 1291 1292 1293
		return NULL;

	ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
					   skb_tailroom(skb),
					   ie, ie_len, chan->band,
					   ratemask, chan_no);
	skb_put(skb, ies_len);
1294

1295
	if (dst) {
1296
		mgmt = (struct ieee80211_mgmt *) skb->data;
1297 1298 1299 1300
		memcpy(mgmt->da, dst, ETH_ALEN);
		memcpy(mgmt->bssid, dst, ETH_ALEN);
	}

1301
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1302

1303 1304 1305 1306 1307
	return skb;
}

void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
			      const u8 *ssid, size_t ssid_len,
1308
			      const u8 *ie, size_t ie_len,
1309
			      u32 ratemask, bool directed, u32 tx_flags,
J
Johannes Berg 已提交
1310
			      struct ieee80211_channel *channel, bool scan)
1311 1312 1313
{
	struct sk_buff *skb;

1314
	skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel,
1315
					ssid, ssid_len,
1316
					ie, ie_len, directed);
1317
	if (skb) {
1318
		IEEE80211_SKB_CB(skb)->flags |= tx_flags;
J
Johannes Berg 已提交
1319 1320 1321 1322
		if (scan)
			ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
		else
			ieee80211_tx_skb(sdata, skb);
1323
	}
1324 1325 1326 1327
}

u32 ieee80211_sta_get_rates(struct ieee80211_local *local,
			    struct ieee802_11_elems *elems,
1328
			    enum ieee80211_band band, u32 *basic_rates)
1329 1330 1331 1332 1333 1334 1335 1336
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
	size_t num_rates;
	u32 supp_rates;
	int i, j;
	sband = local->hw.wiphy->bands[band];

1337 1338
	if (WARN_ON(!sband))
		return 1;
1339 1340 1341 1342 1343 1344 1345 1346

	bitrates = sband->bitrates;
	num_rates = sband->n_bitrates;
	supp_rates = 0;
	for (i = 0; i < elems->supp_rates_len +
		     elems->ext_supp_rates_len; i++) {
		u8 rate = 0;
		int own_rate;
1347
		bool is_basic;
1348 1349 1350 1351 1352 1353
		if (i < elems->supp_rates_len)
			rate = elems->supp_rates[i];
		else if (elems->ext_supp_rates)
			rate = elems->ext_supp_rates
				[i - elems->supp_rates_len];
		own_rate = 5 * (rate & 0x7f);
1354 1355 1356 1357 1358 1359 1360
		is_basic = !!(rate & 0x80);

		if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
			continue;

		for (j = 0; j < num_rates; j++) {
			if (bitrates[j].bitrate == own_rate) {
1361
				supp_rates |= BIT(j);
1362 1363 1364 1365
				if (basic_rates && is_basic)
					*basic_rates |= BIT(j);
			}
		}
1366 1367 1368
	}
	return supp_rates;
}
1369

1370 1371 1372
void ieee80211_stop_device(struct ieee80211_local *local)
{
	ieee80211_led_radio(local, false);
1373
	ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1374 1375 1376 1377

	cancel_work_sync(&local->reconfig_filter);

	flush_workqueue(local->workqueue);
1378
	drv_stop(local);
1379 1380
}

1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399
static void ieee80211_assign_chanctx(struct ieee80211_local *local,
				     struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_chanctx_conf *conf;
	struct ieee80211_chanctx *ctx;

	if (!local->use_chanctx)
		return;

	mutex_lock(&local->chanctx_mtx);
	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
					 lockdep_is_held(&local->chanctx_mtx));
	if (conf) {
		ctx = container_of(conf, struct ieee80211_chanctx, conf);
		drv_assign_vif_chanctx(local, sdata, ctx);
	}
	mutex_unlock(&local->chanctx_mtx);
}

1400 1401 1402 1403
int ieee80211_reconfig(struct ieee80211_local *local)
{
	struct ieee80211_hw *hw = &local->hw;
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
1404
	struct ieee80211_chanctx *ctx;
1405
	struct sta_info *sta;
1406
	int res, i;
J
Johannes Berg 已提交
1407 1408
	bool reconfig_due_to_wowlan = false;

1409
#ifdef CONFIG_PM
J
Johannes Berg 已提交
1410 1411
	if (local->suspended)
		local->resuming = true;
1412

1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426
	if (local->wowlan) {
		local->wowlan = false;
		res = drv_resume(local);
		if (res < 0) {
			local->resuming = false;
			return res;
		}
		if (res == 0)
			goto wake_up;
		WARN_ON(res > 1);
		/*
		 * res is 1, which means the driver requested
		 * to go through a regular reset on wakeup.
		 */
J
Johannes Berg 已提交
1427
		reconfig_due_to_wowlan = true;
1428 1429
	}
#endif
1430 1431 1432
	/* everything else happens only if HW was up & running */
	if (!local->open_count)
		goto wake_up;
1433

1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445
	/*
	 * Upon resume hardware can sometimes be goofy due to
	 * various platform / driver / bus issues, so restarting
	 * the device may at times not work immediately. Propagate
	 * the error.
	 */
	res = drv_start(local);
	if (res) {
		WARN(local->suspended, "Hardware became unavailable "
		     "upon resume. This could be a software issue "
		     "prior to suspend or a hardware issue.\n");
		return res;
1446 1447
	}

1448 1449 1450 1451 1452 1453 1454 1455 1456
	/* setup fragmentation threshold */
	drv_set_frag_threshold(local, hw->wiphy->frag_threshold);

	/* setup RTS threshold */
	drv_set_rts_threshold(local, hw->wiphy->rts_threshold);

	/* reset coverage class */
	drv_set_coverage_class(local, hw->wiphy->coverage_class);

1457 1458 1459 1460
	ieee80211_led_radio(local, true);
	ieee80211_mod_tpt_led_trig(local,
				   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);

1461
	/* add interfaces */
1462 1463 1464 1465 1466 1467 1468 1469 1470 1471
	sdata = rtnl_dereference(local->monitor_sdata);
	if (sdata) {
		res = drv_add_interface(local, sdata);
		if (WARN_ON(res)) {
			rcu_assign_pointer(local->monitor_sdata, NULL);
			synchronize_net();
			kfree(sdata);
		}
	}

1472 1473 1474
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
		    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1475
		    ieee80211_sdata_running(sdata))
1476
			res = drv_add_interface(local, sdata);
1477 1478
	}

J
Johannes Berg 已提交
1479
	/* add channel contexts */
1480 1481 1482 1483 1484 1485
	if (local->use_chanctx) {
		mutex_lock(&local->chanctx_mtx);
		list_for_each_entry(ctx, &local->chanctx_list, list)
			WARN_ON(drv_add_chanctx(local, ctx));
		mutex_unlock(&local->chanctx_mtx);
	}
J
Johannes Berg 已提交
1486

1487 1488 1489
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (!ieee80211_sdata_running(sdata))
			continue;
1490
		ieee80211_assign_chanctx(local, sdata);
1491 1492
	}

1493
	sdata = rtnl_dereference(local->monitor_sdata);
1494 1495
	if (sdata && ieee80211_sdata_running(sdata))
		ieee80211_assign_chanctx(local, sdata);
1496

1497
	/* add STAs back */
1498 1499
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
1500
		enum ieee80211_sta_state state;
J
Johannes Berg 已提交
1501

1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512
		if (!sta->uploaded)
			continue;

		/* AP-mode stations will be added later */
		if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
1513
	}
1514
	mutex_unlock(&local->sta_mtx);
1515

1516
	/* reconfigure tx conf */
1517 1518 1519 1520 1521 1522
	if (hw->queues >= IEEE80211_NUM_ACS) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
			    sdata->vif.type == NL80211_IFTYPE_MONITOR ||
			    !ieee80211_sdata_running(sdata))
				continue;
1523

1524 1525 1526 1527
			for (i = 0; i < IEEE80211_NUM_ACS; i++)
				drv_conf_tx(local, sdata, i,
					    &sdata->tx_conf[i]);
		}
1528
	}
1529

1530 1531 1532 1533 1534 1535 1536
	/* reconfigure hardware */
	ieee80211_hw_config(local, ~0);

	ieee80211_configure_filter(local);

	/* Finally also reconfigure all the BSS information */
	list_for_each_entry(sdata, &local->interfaces, list) {
1537 1538
		u32 changed;

1539
		if (!ieee80211_sdata_running(sdata))
1540
			continue;
1541 1542 1543 1544 1545 1546 1547 1548 1549

		/* common change flags for all interface types */
		changed = BSS_CHANGED_ERP_CTS_PROT |
			  BSS_CHANGED_ERP_PREAMBLE |
			  BSS_CHANGED_ERP_SLOT |
			  BSS_CHANGED_HT |
			  BSS_CHANGED_BASIC_RATES |
			  BSS_CHANGED_BEACON_INT |
			  BSS_CHANGED_BSSID |
1550
			  BSS_CHANGED_CQM |
1551
			  BSS_CHANGED_QOS |
1552 1553
			  BSS_CHANGED_IDLE |
			  BSS_CHANGED_TXPOWER;
1554

1555 1556
		switch (sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
1557
			changed |= BSS_CHANGED_ASSOC |
E
Eliad Peller 已提交
1558 1559
				   BSS_CHANGED_ARP_FILTER |
				   BSS_CHANGED_PS;
1560 1561 1562 1563

			if (sdata->u.mgd.dtim_period)
				changed |= BSS_CHANGED_DTIM_PERIOD;

1564
			mutex_lock(&sdata->u.mgd.mtx);
1565
			ieee80211_bss_info_change_notify(sdata, changed);
1566
			mutex_unlock(&sdata->u.mgd.mtx);
1567
			break;
1568
		case NL80211_IFTYPE_ADHOC:
1569 1570
			changed |= BSS_CHANGED_IBSS;
			/* fall through */
1571
		case NL80211_IFTYPE_AP:
1572
			changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
1573

1574
			if (sdata->vif.type == NL80211_IFTYPE_AP) {
1575 1576
				changed |= BSS_CHANGED_AP_PROBE_RESP;

1577 1578 1579 1580
				if (rcu_access_pointer(sdata->u.ap.beacon))
					drv_start_ap(local, sdata);
			}

1581
			/* fall through */
1582
		case NL80211_IFTYPE_MESH_POINT:
1583 1584 1585 1586 1587
			if (sdata->vif.bss_conf.enable_beacon) {
				changed |= BSS_CHANGED_BEACON |
					   BSS_CHANGED_BEACON_ENABLED;
				ieee80211_bss_info_change_notify(sdata, changed);
			}
1588 1589 1590 1591 1592 1593 1594
			break;
		case NL80211_IFTYPE_WDS:
			break;
		case NL80211_IFTYPE_AP_VLAN:
		case NL80211_IFTYPE_MONITOR:
			/* ignore virtual */
			break;
1595
		case NL80211_IFTYPE_P2P_DEVICE:
1596 1597
			changed = BSS_CHANGED_IDLE;
			break;
1598
		case NL80211_IFTYPE_UNSPECIFIED:
1599
		case NUM_NL80211_IFTYPES:
1600 1601
		case NL80211_IFTYPE_P2P_CLIENT:
		case NL80211_IFTYPE_P2P_GO:
1602 1603 1604 1605 1606
			WARN_ON(1);
			break;
		}
	}

1607 1608
	ieee80211_recalc_ps(local, -1);

1609 1610 1611 1612 1613 1614 1615 1616 1617 1618
	/*
	 * The sta might be in psm against the ap (e.g. because
	 * this was the state before a hw restart), so we
	 * explicitly send a null packet in order to make sure
	 * it'll sync against the ap (and get out of psm).
	 */
	if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type != NL80211_IFTYPE_STATION)
				continue;
1619 1620
			if (!sdata->u.mgd.associated)
				continue;
1621 1622 1623 1624 1625

			ieee80211_send_nullfunc(local, sdata, 0);
		}
	}

1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643
	/* APs are now beaconing, add back stations */
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
		enum ieee80211_sta_state state;

		if (!sta->uploaded)
			continue;

		if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
	}
	mutex_unlock(&local->sta_mtx);

1644 1645 1646 1647 1648
	/* add back keys */
	list_for_each_entry(sdata, &local->interfaces, list)
		if (ieee80211_sdata_running(sdata))
			ieee80211_enable_keys(sdata);

1649
 wake_up:
1650 1651 1652
	local->in_reconfig = false;
	barrier();

1653 1654 1655 1656 1657 1658 1659 1660 1661 1662
	/*
	 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
	 * sessions can be established after a resume.
	 *
	 * Also tear down aggregation sessions since reconfiguring
	 * them in a hardware restart scenario is not easily done
	 * right now, and the hardware will have lost information
	 * about the sessions, but we and the AP still think they
	 * are active. This is really a workaround though.
	 */
1663
	if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1664 1665 1666
		mutex_lock(&local->sta_mtx);

		list_for_each_entry(sta, &local->sta_list, list) {
1667 1668
			ieee80211_sta_tear_down_BA_sessions(
					sta, AGG_STOP_LOCAL_REQUEST);
J
Johannes Berg 已提交
1669
			clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1670
		}
1671 1672

		mutex_unlock(&local->sta_mtx);
1673 1674
	}

1675 1676
	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_SUSPEND);
1677

1678 1679 1680 1681
	/*
	 * If this is for hw restart things are still running.
	 * We may want to change that later, however.
	 */
1682
	if (!local->suspended || reconfig_due_to_wowlan)
1683
		drv_restart_complete(local);
1684 1685

	if (!local->suspended)
1686 1687 1688
		return 0;

#ifdef CONFIG_PM
J
Johannes Berg 已提交
1689
	/* first set suspended false, then resuming */
1690
	local->suspended = false;
J
Johannes Berg 已提交
1691 1692
	mb();
	local->resuming = false;
1693

1694
	mod_timer(&local->sta_cleanup, jiffies + 1);
1695 1696 1697
#else
	WARN_ON(1);
#endif
1698 1699
	return 0;
}
1700

1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727
void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata;
	struct ieee80211_local *local;
	struct ieee80211_key *key;

	if (WARN_ON(!vif))
		return;

	sdata = vif_to_sdata(vif);
	local = sdata->local;

	if (WARN_ON(!local->resuming))
		return;

	if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
		return;

	sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;

	mutex_lock(&local->key_mtx);
	list_for_each_entry(key, &sdata->key_list, list)
		key->flags |= KEY_FLAG_TAINTED;
	mutex_unlock(&local->key_mtx);
}
EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);

1728
void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
1729
{
1730 1731 1732
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_chanctx_conf *chanctx_conf;
	struct ieee80211_chanctx *chanctx;
1733

1734
	mutex_lock(&local->chanctx_mtx);
1735

1736 1737
	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
					lockdep_is_held(&local->chanctx_mtx));
1738

1739
	if (WARN_ON_ONCE(!chanctx_conf))
1740
		goto unlock;
1741

1742 1743
	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
	ieee80211_recalc_smps_chanctx(local, chanctx);
1744
 unlock:
1745
	mutex_unlock(&local->chanctx_mtx);
1746
}
1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802

static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
{
	int i;

	for (i = 0; i < n_ids; i++)
		if (ids[i] == id)
			return true;
	return false;
}

/**
 * ieee80211_ie_split - split an IE buffer according to ordering
 *
 * @ies: the IE buffer
 * @ielen: the length of the IE buffer
 * @ids: an array with element IDs that are allowed before
 *	the split
 * @n_ids: the size of the element ID array
 * @offset: offset where to start splitting in the buffer
 *
 * This function splits an IE buffer by updating the @offset
 * variable to point to the location where the buffer should be
 * split.
 *
 * It assumes that the given IE buffer is well-formed, this
 * has to be guaranteed by the caller!
 *
 * It also assumes that the IEs in the buffer are ordered
 * correctly, if not the result of using this function will not
 * be ordered correctly either, i.e. it does no reordering.
 *
 * The function returns the offset where the next part of the
 * buffer starts, which may be @ielen if the entire (remainder)
 * of the buffer should be used.
 */
size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
			  const u8 *ids, int n_ids, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
		pos += 2 + ies[pos + 1];

	return pos;
}

size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
		pos += 2 + ies[pos + 1];

	return pos;
}
1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841 1842

static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
					    int rssi_min_thold,
					    int rssi_max_thold)
{
	trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);

	if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
		return;

	/*
	 * Scale up threshold values before storing it, as the RSSI averaging
	 * algorithm uses a scaled up value as well. Change this scaling
	 * factor if the RSSI averaging algorithm changes.
	 */
	sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
	sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
}

void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
				    int rssi_min_thold,
				    int rssi_max_thold)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	WARN_ON(rssi_min_thold == rssi_max_thold ||
		rssi_min_thold > rssi_max_thold);

	_ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
				       rssi_max_thold);
}
EXPORT_SYMBOL(ieee80211_enable_rssi_reports);

void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	_ieee80211_enable_rssi_reports(sdata, 0, 0);
}
EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1843

B
Ben Greear 已提交
1844
u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858
			      u16 cap)
{
	__le16 tmp;

	*pos++ = WLAN_EID_HT_CAPABILITY;
	*pos++ = sizeof(struct ieee80211_ht_cap);
	memset(pos, 0, sizeof(struct ieee80211_ht_cap));

	/* capability flags */
	tmp = cpu_to_le16(cap);
	memcpy(pos, &tmp, sizeof(u16));
	pos += sizeof(u16);

	/* AMPDU parameters */
B
Ben Greear 已提交
1859 1860
	*pos++ = ht_cap->ampdu_factor |
		 (ht_cap->ampdu_density <<
1861 1862 1863
			IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);

	/* MCS set */
B
Ben Greear 已提交
1864 1865
	memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
	pos += sizeof(ht_cap->mcs);
1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878

	/* extended capabilities */
	pos += sizeof(__le16);

	/* BF capabilities */
	pos += sizeof(__le32);

	/* antenna selection */
	pos += sizeof(u8);

	return pos;
}

1879
u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
1880
			       u32 cap)
1881 1882 1883 1884
{
	__le32 tmp;

	*pos++ = WLAN_EID_VHT_CAPABILITY;
M
Mahesh Palivela 已提交
1885 1886
	*pos++ = sizeof(struct ieee80211_vht_cap);
	memset(pos, 0, sizeof(struct ieee80211_vht_cap));
1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899

	/* capability flags */
	tmp = cpu_to_le32(cap);
	memcpy(pos, &tmp, sizeof(u32));
	pos += sizeof(u32);

	/* VHT MCS set */
	memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
	pos += sizeof(vht_cap->vht_mcs);

	return pos;
}

1900
u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1901
			       const struct cfg80211_chan_def *chandef,
1902
			       u16 prot_mode)
1903
{
1904
	struct ieee80211_ht_operation *ht_oper;
1905
	/* Build HT Information */
1906 1907 1908
	*pos++ = WLAN_EID_HT_OPERATION;
	*pos++ = sizeof(struct ieee80211_ht_operation);
	ht_oper = (struct ieee80211_ht_operation *)pos;
1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919
	ht_oper->primary_chan = ieee80211_frequency_to_channel(
					chandef->chan->center_freq);
	switch (chandef->width) {
	case NL80211_CHAN_WIDTH_160:
	case NL80211_CHAN_WIDTH_80P80:
	case NL80211_CHAN_WIDTH_80:
	case NL80211_CHAN_WIDTH_40:
		if (chandef->center_freq1 > chandef->chan->center_freq)
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
		else
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1920 1921
		break;
	default:
1922
		ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1923 1924
		break;
	}
1925
	if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
1926 1927
	    chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
	    chandef->width != NL80211_CHAN_WIDTH_20)
1928
		ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
1929

1930
	ht_oper->operation_mode = cpu_to_le16(prot_mode);
1931
	ht_oper->stbc_param = 0x0000;
1932 1933 1934

	/* It seems that Basic MCS set and Supported MCS set
	   are identical for the first 10 bytes */
1935 1936
	memset(&ht_oper->basic_set, 0, 16);
	memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
1937

1938
	return pos + sizeof(struct ieee80211_ht_operation);
1939 1940
}

1941
void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
J
Johannes Berg 已提交
1942
				  const struct ieee80211_ht_operation *ht_oper,
1943
				  struct cfg80211_chan_def *chandef)
1944 1945 1946
{
	enum nl80211_channel_type channel_type;

1947 1948 1949 1950 1951
	if (!ht_oper) {
		cfg80211_chandef_create(chandef, control_chan,
					NL80211_CHAN_NO_HT);
		return;
	}
1952

1953
	switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966
	case IEEE80211_HT_PARAM_CHA_SEC_NONE:
		channel_type = NL80211_CHAN_HT20;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
		channel_type = NL80211_CHAN_HT40PLUS;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
		channel_type = NL80211_CHAN_HT40MINUS;
		break;
	default:
		channel_type = NL80211_CHAN_NO_HT;
	}

1967
	cfg80211_chandef_create(chandef, control_chan, channel_type);
1968 1969
}

1970
int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
1971 1972
			    struct sk_buff *skb, bool need_basic,
			    enum ieee80211_band band)
1973 1974 1975 1976 1977
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, rates, *pos;
1978
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
1979

1980
	sband = local->hw.wiphy->bands[band];
1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991
	rates = sband->n_bitrates;
	if (rates > 8)
		rates = 8;

	if (skb_tailroom(skb) < rates + 2)
		return -ENOMEM;

	pos = skb_put(skb, rates + 2);
	*pos++ = WLAN_EID_SUPP_RATES;
	*pos++ = rates;
	for (i = 0; i < rates; i++) {
1992 1993 1994
		u8 basic = 0;
		if (need_basic && basic_rates & BIT(i))
			basic = 0x80;
1995
		rate = sband->bitrates[i].bitrate;
1996
		*pos++ = basic | (u8) (rate / 5);
1997 1998 1999 2000 2001
	}

	return 0;
}

2002
int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
2003 2004
				struct sk_buff *skb, bool need_basic,
				enum ieee80211_band band)
2005 2006 2007 2008 2009
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, exrates, *pos;
2010
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2011

2012
	sband = local->hw.wiphy->bands[band];
2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026
	exrates = sband->n_bitrates;
	if (exrates > 8)
		exrates -= 8;
	else
		exrates = 0;

	if (skb_tailroom(skb) < exrates + 2)
		return -ENOMEM;

	if (exrates) {
		pos = skb_put(skb, exrates + 2);
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
		*pos++ = exrates;
		for (i = 8; i < sband->n_bitrates; i++) {
2027 2028 2029
			u8 basic = 0;
			if (need_basic && basic_rates & BIT(i))
				basic = 0x80;
2030
			rate = sband->bitrates[i].bitrate;
2031
			*pos++ = basic | (u8) (rate / 5);
2032 2033 2034 2035
		}
	}
	return 0;
}
2036 2037 2038 2039 2040 2041

int ieee80211_ave_rssi(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;

2042 2043 2044 2045
	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
		/* non-managed type inferfaces */
		return 0;
	}
2046
	return ifmgd->ave_beacon_signal / 16;
2047
}
2048
EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064

u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
{
	if (!mcs)
		return 1;

	/* TODO: consider rx_highest */

	if (mcs->rx_mask[3])
		return 4;
	if (mcs->rx_mask[2])
		return 3;
	if (mcs->rx_mask[1])
		return 2;
	return 1;
}
2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098

/**
 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
 * @local: mac80211 hw info struct
 * @status: RX status
 * @mpdu_len: total MPDU length (including FCS)
 * @mpdu_offset: offset into MPDU to calculate timestamp at
 *
 * This function calculates the RX timestamp at the given MPDU offset, taking
 * into account what the RX timestamp was. An offset of 0 will just normalize
 * the timestamp to TSF at beginning of MPDU reception.
 */
u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
				     struct ieee80211_rx_status *status,
				     unsigned int mpdu_len,
				     unsigned int mpdu_offset)
{
	u64 ts = status->mactime;
	struct rate_info ri;
	u16 rate;

	if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
		return 0;

	memset(&ri, 0, sizeof(ri));

	/* Fill cfg80211 rate info */
	if (status->flag & RX_FLAG_HT) {
		ri.mcs = status->rate_idx;
		ri.flags |= RATE_INFO_FLAGS_MCS;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2099 2100 2101 2102 2103 2104 2105 2106 2107 2108 2109 2110 2111 2112
	} else if (status->flag & RX_FLAG_VHT) {
		ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
		ri.mcs = status->rate_idx;
		ri.nss = status->vht_nss;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80P80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_160MHZ)
			ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129
	} else {
		struct ieee80211_supported_band *sband;

		sband = local->hw.wiphy->bands[status->band];
		ri.legacy = sband->bitrates[status->rate_idx].bitrate;
	}

	rate = cfg80211_calculate_bitrate(&ri);

	/* rewind from end of MPDU */
	if (status->flag & RX_FLAG_MACTIME_END)
		ts -= mpdu_len * 8 * 10 / rate;

	ts += mpdu_offset * 8 * 10 / rate;

	return ts;
}
2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160

void ieee80211_dfs_cac_cancel(struct ieee80211_local *local)
{
	struct ieee80211_sub_if_data *sdata;

	mutex_lock(&local->iflist_mtx);
	list_for_each_entry(sdata, &local->interfaces, list) {
		cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);

		if (sdata->wdev.cac_started) {
			ieee80211_vif_release_channel(sdata);
			cfg80211_cac_event(sdata->dev,
					   NL80211_RADAR_CAC_ABORTED,
					   GFP_KERNEL);
		}
	}
	mutex_unlock(&local->iflist_mtx);
}

void ieee80211_dfs_radar_detected_work(struct work_struct *work)
{
	struct ieee80211_local *local =
		container_of(work, struct ieee80211_local, radar_detected_work);
	struct cfg80211_chan_def chandef;

	ieee80211_dfs_cac_cancel(local);

	if (local->use_chanctx)
		/* currently not handled */
		WARN_ON(1);
	else {
2161
		chandef = local->hw.conf.chandef;
2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174
		cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL);
	}
}

void ieee80211_radar_detected(struct ieee80211_hw *hw)
{
	struct ieee80211_local *local = hw_to_local(hw);

	trace_api_radar_detected(local);

	ieee80211_queue_work(hw, &local->radar_detected_work);
}
EXPORT_SYMBOL(ieee80211_radar_detected);