recv.c 16.7 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35
/*
 * Copyright (c) 2008 Atheros Communications Inc.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include "core.h"

/*
 * Setup and link descriptors.
 *
 * 11N: we can no longer afford to self link the last descriptor.
 * MAC acknowledges BA status as long as it copies frames to host
 * buffer (or rx fifo). This can incorrectly acknowledge packets
 * to a sender if last desc is self-linked.
 */
static void ath_rx_buf_link(struct ath_softc *sc, struct ath_buf *bf)
{
	struct ath_hal *ah = sc->sc_ah;
	struct ath_desc *ds;
	struct sk_buff *skb;

	ATH_RXBUF_RESET(bf);

	ds = bf->bf_desc;
S
Sujith 已提交
36
	ds->ds_link = 0; /* link to null */
37 38
	ds->ds_data = bf->bf_buf_addr;

S
Sujith 已提交
39
	/* virtual addr of the beginning of the buffer. */
40 41 42 43
	skb = bf->bf_mpdu;
	ASSERT(skb != NULL);
	ds->ds_vdata = skb->data;

44 45 46
	/* setup rx descriptors. The sc_rxbufsize here tells the harware
	 * how much data it can DMA to us and that we are prepared
	 * to process */
47 48
	ath9k_hw_setuprxdesc(ah,
			     ds,
49
			     sc->sc_rxbufsize,
50 51 52 53 54 55 56 57 58 59 60
			     0);

	if (sc->sc_rxlink == NULL)
		ath9k_hw_putrxbuf(ah, bf->bf_daddr);
	else
		*sc->sc_rxlink = bf->bf_daddr;

	sc->sc_rxlink = &ds->ds_link;
	ath9k_hw_rxena(ah);
}

S
Sujith 已提交
61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82
static void ath_setdefantenna(struct ath_softc *sc, u32 antenna)
{
	/* XXX block beacon interrupts */
	ath9k_hw_setantenna(sc->sc_ah, antenna);
	sc->sc_defant = antenna;
	sc->sc_rxotherant = 0;
}

/*
 *  Extend 15-bit time stamp from rx descriptor to
 *  a full 64-bit TSF using the current h/w TSF.
*/
static u64 ath_extend_tsf(struct ath_softc *sc, u32 rstamp)
{
	u64 tsf;

	tsf = ath9k_hw_gettsf64(sc->sc_ah);
	if ((tsf & 0x7fff) < rstamp)
		tsf -= 0x8000;
	return (tsf & ~0x7fff) | rstamp;
}

S
Sujith 已提交
83
static struct sk_buff *ath_rxbuf_alloc(struct ath_softc *sc, u32 len)
84 85 86 87 88 89 90 91 92 93
{
	struct sk_buff *skb;
	u32 off;

	/*
	 * Cache-line-align.  This is important (for the
	 * 5210 at least) as not doing so causes bogus data
	 * in rx'd frames.
	 */

94 95 96 97 98 99 100
	/* Note: the kernel can allocate a value greater than
	 * what we ask it to give us. We really only need 4 KB as that
	 * is this hardware supports and in fact we need at least 3849
	 * as that is the MAX AMSDU size this hardware supports.
	 * Unfortunately this means we may get 8 KB here from the
	 * kernel... and that is actually what is observed on some
	 * systems :( */
101 102 103 104 105 106 107
	skb = dev_alloc_skb(len + sc->sc_cachelsz - 1);
	if (skb != NULL) {
		off = ((unsigned long) skb->data) % sc->sc_cachelsz;
		if (off != 0)
			skb_reserve(skb, sc->sc_cachelsz - off);
	} else {
		DPRINTF(sc, ATH_DBG_FATAL,
S
Sujith 已提交
108
			"skbuff alloc of size %u failed\n", len);
109 110 111 112 113 114
		return NULL;
	}

	return skb;
}

S
Sujith 已提交
115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139
static int ath_rate2idx(struct ath_softc *sc, int rate)
{
	int i = 0, cur_band, n_rates;
	struct ieee80211_hw *hw = sc->hw;

	cur_band = hw->conf.channel->band;
	n_rates = sc->sbands[cur_band].n_bitrates;

	for (i = 0; i < n_rates; i++) {
		if (sc->sbands[cur_band].bitrates[i].bitrate == rate)
			break;
	}

	/*
	 * NB:mac80211 validates rx rate index against the supported legacy rate
	 * index only (should be done against ht rates also), return the highest
	 * legacy rate index for rx rate which does not match any one of the
	 * supported basic and extended rates to make mac80211 happy.
	 * The following hack will be cleaned up once the issue with
	 * the rx rate index validation in mac80211 is fixed.
	 */
	if (i == n_rates)
		return n_rates - 1;

	return i;
140 141 142
}

/*
S
Sujith 已提交
143 144 145
 * For Decrypt or Demic errors, we only mark packet status here and always push
 * up the frame up to let mac80211 handle the actual error case, be it no
 * decryption key or real decryption error. This let us keep statistics there.
146
 */
S
Sujith 已提交
147 148 149
static int ath_rx_prepare(struct sk_buff *skb, struct ath_desc *ds,
			  struct ieee80211_rx_status *rx_status, bool *decrypt_error,
			  struct ath_softc *sc)
150
{
S
Sujith 已提交
151
	struct ath_rate_table *rate_table = sc->hw_rate_table[sc->sc_curmode];
S
Sujith 已提交
152
	struct ieee80211_hdr *hdr;
S
Sujith 已提交
153
	int ratekbps, rix;
S
Sujith 已提交
154 155 156 157 158 159 160 161 162 163 164 165 166 167
	u8 ratecode;
	__le16 fc;

	hdr = (struct ieee80211_hdr *)skb->data;
	fc = hdr->frame_control;
	memset(rx_status, 0, sizeof(struct ieee80211_rx_status));

	if (ds->ds_rxstat.rs_more) {
		/*
		 * Frame spans multiple descriptors; this cannot happen yet
		 * as we don't support jumbograms. If not in monitor mode,
		 * discard the frame. Enable this if you want to see
		 * error frames in Monitor mode.
		 */
168
		if (sc->sc_ah->ah_opmode != NL80211_IFTYPE_MONITOR)
S
Sujith 已提交
169 170 171 172 173 174
			goto rx_next;
	} else if (ds->ds_rxstat.rs_status != 0) {
		if (ds->ds_rxstat.rs_status & ATH9K_RXERR_CRC)
			rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
		if (ds->ds_rxstat.rs_status & ATH9K_RXERR_PHY)
			goto rx_next;
175

S
Sujith 已提交
176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193
		if (ds->ds_rxstat.rs_status & ATH9K_RXERR_DECRYPT) {
			*decrypt_error = true;
		} else if (ds->ds_rxstat.rs_status & ATH9K_RXERR_MIC) {
			if (ieee80211_is_ctl(fc))
				/*
				 * Sometimes, we get invalid
				 * MIC failures on valid control frames.
				 * Remove these mic errors.
				 */
				ds->ds_rxstat.rs_status &= ~ATH9K_RXERR_MIC;
			else
				rx_status->flag |= RX_FLAG_MMIC_ERROR;
		}
		/*
		 * Reject error frames with the exception of
		 * decryption and MIC failures. For monitor mode,
		 * we also ignore the CRC error.
		 */
194
		if (sc->sc_ah->ah_opmode == NL80211_IFTYPE_MONITOR) {
S
Sujith 已提交
195 196 197 198 199 200 201 202 203 204
			if (ds->ds_rxstat.rs_status &
			    ~(ATH9K_RXERR_DECRYPT | ATH9K_RXERR_MIC |
			      ATH9K_RXERR_CRC))
				goto rx_next;
		} else {
			if (ds->ds_rxstat.rs_status &
			    ~(ATH9K_RXERR_DECRYPT | ATH9K_RXERR_MIC)) {
				goto rx_next;
			}
		}
205 206
	}

S
Sujith 已提交
207
	ratecode = ds->ds_rxstat.rs_rate;
S
Sujith 已提交
208 209
	rix = rate_table->rateCodeToIndex[ratecode];
	ratekbps = rate_table->info[rix].ratekbps;
S
Sujith 已提交
210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241

	/* HT rate */
	if (ratecode & 0x80) {
		if (ds->ds_rxstat.rs_flags & ATH9K_RX_2040)
			ratekbps = (ratekbps * 27) / 13;
		if (ds->ds_rxstat.rs_flags & ATH9K_RX_GI)
			ratekbps = (ratekbps * 10) / 9;
	}

	rx_status->mactime = ath_extend_tsf(sc, ds->ds_rxstat.rs_tstamp);
	rx_status->band = sc->hw->conf.channel->band;
	rx_status->freq =  sc->hw->conf.channel->center_freq;
	rx_status->noise = sc->sc_ani.sc_noise_floor;
	rx_status->signal = rx_status->noise + ds->ds_rxstat.rs_rssi;
	rx_status->rate_idx = ath_rate2idx(sc, (ratekbps / 100));
	rx_status->antenna = ds->ds_rxstat.rs_antenna;

	/* at 45 you will be able to use MCS 15 reliably. A more elaborate
	 * scheme can be used here but it requires tables of SNR/throughput for
	 * each possible mode used. */
	rx_status->qual =  ds->ds_rxstat.rs_rssi * 100 / 45;

	/* rssi can be more than 45 though, anything above that
	 * should be considered at 100% */
	if (rx_status->qual > 100)
		rx_status->qual = 100;

	rx_status->flag |= RX_FLAG_TSFT;

	return 1;
rx_next:
	return 0;
242 243 244 245 246 247 248 249 250 251 252 253
}

static void ath_opmode_init(struct ath_softc *sc)
{
	struct ath_hal *ah = sc->sc_ah;
	u32 rfilt, mfilt[2];

	/* configure rx filter */
	rfilt = ath_calcrxfilter(sc);
	ath9k_hw_setrxfilter(ah, rfilt);

	/* configure bssid mask */
254
	if (ah->ah_caps.hw_caps & ATH9K_HW_CAP_BSSIDMASK)
255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275
		ath9k_hw_setbssidmask(ah, sc->sc_bssidmask);

	/* configure operational mode */
	ath9k_hw_setopmode(ah);

	/* Handle any link-level address change. */
	ath9k_hw_setmac(ah, sc->sc_myaddr);

	/* calculate and install multicast filter */
	mfilt[0] = mfilt[1] = ~0;
	ath9k_hw_setmcastfilter(ah, mfilt[0], mfilt[1]);
}

int ath_rx_init(struct ath_softc *sc, int nbufs)
{
	struct sk_buff *skb;
	struct ath_buf *bf;
	int error = 0;

	do {
		spin_lock_init(&sc->sc_rxflushlock);
S
Sujith 已提交
276
		sc->sc_flags &= ~SC_OP_RXFLUSH;
277 278 279 280 281 282
		spin_lock_init(&sc->sc_rxbuflock);

		sc->sc_rxbufsize = roundup(IEEE80211_MAX_MPDU_LEN,
					   min(sc->sc_cachelsz,
					       (u16)64));

S
Sujith 已提交
283 284
		DPRINTF(sc, ATH_DBG_CONFIG, "cachelsz %u rxbufsize %u\n",
			sc->sc_cachelsz, sc->sc_rxbufsize);
285 286 287 288 289 290 291

		/* Initialize rx descriptors */

		error = ath_descdma_setup(sc, &sc->sc_rxdma, &sc->sc_rxbuf,
					  "rx", nbufs, 1);
		if (error != 0) {
			DPRINTF(sc, ATH_DBG_FATAL,
S
Sujith 已提交
292
				"failed to allocate rx descriptors: %d\n", error);
293 294 295 296 297 298 299 300 301 302 303
			break;
		}

		list_for_each_entry(bf, &sc->sc_rxbuf, list) {
			skb = ath_rxbuf_alloc(sc, sc->sc_rxbufsize);
			if (skb == NULL) {
				error = -ENOMEM;
				break;
			}

			bf->bf_mpdu = skb;
304
			bf->bf_buf_addr = pci_map_single(sc->pdev, skb->data,
305
					 sc->sc_rxbufsize,
306 307
					 PCI_DMA_FROMDEVICE);
			bf->bf_dmacontext = bf->bf_buf_addr;
308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355
		}
		sc->sc_rxlink = NULL;

	} while (0);

	if (error)
		ath_rx_cleanup(sc);

	return error;
}

void ath_rx_cleanup(struct ath_softc *sc)
{
	struct sk_buff *skb;
	struct ath_buf *bf;

	list_for_each_entry(bf, &sc->sc_rxbuf, list) {
		skb = bf->bf_mpdu;
		if (skb)
			dev_kfree_skb(skb);
	}

	if (sc->sc_rxdma.dd_desc_len != 0)
		ath_descdma_cleanup(sc, &sc->sc_rxdma, &sc->sc_rxbuf);
}

/*
 * Calculate the receive filter according to the
 * operating mode and state:
 *
 * o always accept unicast, broadcast, and multicast traffic
 * o maintain current state of phy error reception (the hal
 *   may enable phy error frames for noise immunity work)
 * o probe request frames are accepted only when operating in
 *   hostap, adhoc, or monitor modes
 * o enable promiscuous mode according to the interface state
 * o accept beacons:
 *   - when operating in adhoc mode so the 802.11 layer creates
 *     node table entries for peers,
 *   - when operating in station mode for collecting rssi data when
 *     the station is otherwise quiet, or
 *   - when operating as a repeater so we see repeater-sta beacons
 *   - when scanning
 */

u32 ath_calcrxfilter(struct ath_softc *sc)
{
#define	RX_FILTER_PRESERVE (ATH9K_RX_FILTER_PHYERR | ATH9K_RX_FILTER_PHYRADAR)
S
Sujith 已提交
356

357 358 359 360 361 362 363
	u32 rfilt;

	rfilt = (ath9k_hw_getrxfilter(sc->sc_ah) & RX_FILTER_PRESERVE)
		| ATH9K_RX_FILTER_UCAST | ATH9K_RX_FILTER_BCAST
		| ATH9K_RX_FILTER_MCAST;

	/* If not a STA, enable processing of Probe Requests */
364
	if (sc->sc_ah->ah_opmode != NL80211_IFTYPE_STATION)
365 366 367
		rfilt |= ATH9K_RX_FILTER_PROBEREQ;

	/* Can't set HOSTAP into promiscous mode */
368
	if (((sc->sc_ah->ah_opmode != NL80211_IFTYPE_AP) &&
S
Sujith 已提交
369
	     (sc->rx_filter & FIF_PROMISC_IN_BSS)) ||
370
	    (sc->sc_ah->ah_opmode == NL80211_IFTYPE_MONITOR)) {
371 372 373 374 375
		rfilt |= ATH9K_RX_FILTER_PROM;
		/* ??? To prevent from sending ACK */
		rfilt &= ~ATH9K_RX_FILTER_UCAST;
	}

376 377
	if (sc->sc_ah->ah_opmode == NL80211_IFTYPE_STATION ||
	    sc->sc_ah->ah_opmode == NL80211_IFTYPE_ADHOC)
378 379 380 381
		rfilt |= ATH9K_RX_FILTER_BEACON;

	/* If in HOSTAP mode, want to enable reception of PSPOLL frames
	   & beacon frames */
382
	if (sc->sc_ah->ah_opmode == NL80211_IFTYPE_AP)
383
		rfilt |= (ATH9K_RX_FILTER_BEACON | ATH9K_RX_FILTER_PSPOLL);
S
Sujith 已提交
384

385
	return rfilt;
S
Sujith 已提交
386

387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409
#undef RX_FILTER_PRESERVE
}

int ath_startrecv(struct ath_softc *sc)
{
	struct ath_hal *ah = sc->sc_ah;
	struct ath_buf *bf, *tbf;

	spin_lock_bh(&sc->sc_rxbuflock);
	if (list_empty(&sc->sc_rxbuf))
		goto start_recv;

	sc->sc_rxlink = NULL;
	list_for_each_entry_safe(bf, tbf, &sc->sc_rxbuf, list) {
		ath_rx_buf_link(sc, bf);
	}

	/* We could have deleted elements so the list may be empty now */
	if (list_empty(&sc->sc_rxbuf))
		goto start_recv;

	bf = list_first_entry(&sc->sc_rxbuf, struct ath_buf, list);
	ath9k_hw_putrxbuf(ah, bf->bf_daddr);
S
Sujith 已提交
410
	ath9k_hw_rxena(ah);
411 412 413

start_recv:
	spin_unlock_bh(&sc->sc_rxbuflock);
S
Sujith 已提交
414 415 416
	ath_opmode_init(sc);
	ath9k_hw_startpcureceive(ah);

417 418 419 420 421 422 423 424
	return 0;
}

bool ath_stoprecv(struct ath_softc *sc)
{
	struct ath_hal *ah = sc->sc_ah;
	bool stopped;

S
Sujith 已提交
425 426 427 428 429 430
	ath9k_hw_stoppcurecv(ah);
	ath9k_hw_setrxfilter(ah, 0);
	stopped = ath9k_hw_stopdmarecv(ah);
	mdelay(3); /* 3ms is long enough for 1 frame */
	sc->sc_rxlink = NULL;

431 432 433 434 435 436
	return stopped;
}

void ath_flushrecv(struct ath_softc *sc)
{
	spin_lock_bh(&sc->sc_rxflushlock);
S
Sujith 已提交
437
	sc->sc_flags |= SC_OP_RXFLUSH;
438
	ath_rx_tasklet(sc, 1);
S
Sujith 已提交
439
	sc->sc_flags &= ~SC_OP_RXFLUSH;
440 441 442 443 444 445 446 447 448
	spin_unlock_bh(&sc->sc_rxflushlock);
}

int ath_rx_tasklet(struct ath_softc *sc, int flush)
{
#define PA2DESC(_sc, _pa)                                               \
	((struct ath_desc *)((caddr_t)(_sc)->sc_rxdma.dd_desc +		\
			     ((_pa) - (_sc)->sc_rxdma.dd_desc_paddr)))

S
Sujith 已提交
449
	struct ath_buf *bf;
450
	struct ath_desc *ds;
451
	struct sk_buff *skb = NULL, *requeue_skb;
S
Sujith 已提交
452
	struct ieee80211_rx_status rx_status;
453
	struct ath_hal *ah = sc->sc_ah;
S
Sujith 已提交
454 455 456 457 458 459
	struct ieee80211_hdr *hdr;
	int hdrlen, padsize, retval;
	bool decrypt_error = false;
	u8 keyix;

	spin_lock_bh(&sc->sc_rxbuflock);
460 461 462

	do {
		/* If handling rx interrupt and flush is in progress => exit */
S
Sujith 已提交
463
		if ((sc->sc_flags & SC_OP_RXFLUSH) && (flush == 0))
464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484
			break;

		if (list_empty(&sc->sc_rxbuf)) {
			sc->sc_rxlink = NULL;
			break;
		}

		bf = list_first_entry(&sc->sc_rxbuf, struct ath_buf, list);
		ds = bf->bf_desc;

		/*
		 * Must provide the virtual address of the current
		 * descriptor, the physical address, and the virtual
		 * address of the next descriptor in the h/w chain.
		 * This allows the HAL to look ahead to see if the
		 * hardware is done with a descriptor by checking the
		 * done bit in the following descriptor and the address
		 * of the current descriptor the DMA engine is working
		 * on.  All this is necessary because of our use of
		 * a self-linked list to avoid rx overruns.
		 */
S
Sujith 已提交
485
		retval = ath9k_hw_rxprocdesc(ah, ds,
486 487 488 489 490 491 492 493
					     bf->bf_daddr,
					     PA2DESC(sc, ds->ds_link),
					     0);
		if (retval == -EINPROGRESS) {
			struct ath_buf *tbf;
			struct ath_desc *tds;

			if (list_is_last(&bf->list, &sc->sc_rxbuf)) {
S
Sujith 已提交
494
				sc->sc_rxlink = NULL;
495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511
				break;
			}

			tbf = list_entry(bf->list.next, struct ath_buf, list);

			/*
			 * On some hardware the descriptor status words could
			 * get corrupted, including the done bit. Because of
			 * this, check if the next descriptor's done bit is
			 * set or not.
			 *
			 * If the next descriptor's done bit is set, the current
			 * descriptor has been corrupted. Force s/w to discard
			 * this descriptor and continue...
			 */

			tds = tbf->bf_desc;
S
Sujith 已提交
512 513
			retval = ath9k_hw_rxprocdesc(ah, tds, tbf->bf_daddr,
					     PA2DESC(sc, tds->ds_link), 0);
514 515 516 517 518 519
			if (retval == -EINPROGRESS) {
				break;
			}
		}

		skb = bf->bf_mpdu;
S
Sujith 已提交
520
		if (!skb)
521 522 523
			continue;

		/*
S
Sujith 已提交
524 525
		 * If we're asked to flush receive queue, directly
		 * chain it back at the queue without processing it.
526
		 */
S
Sujith 已提交
527
		if (flush)
528
			goto requeue;
529

S
Sujith 已提交
530
		if (!ds->ds_rxstat.rs_datalen)
531
			goto requeue;
532

S
Sujith 已提交
533
		/* The status portion of the descriptor could get corrupted. */
534
		if (sc->sc_rxbufsize < ds->ds_rxstat.rs_datalen)
535
			goto requeue;
536

S
Sujith 已提交
537
		if (!ath_rx_prepare(skb, ds, &rx_status, &decrypt_error, sc))
538 539 540 541 542 543 544 545 546 547 548 549
			goto requeue;

		/* Ensure we always have an skb to requeue once we are done
		 * processing the current buffer's skb */
		requeue_skb = ath_rxbuf_alloc(sc, sc->sc_rxbufsize);

		/* If there is no memory we ignore the current RX'd frame,
		 * tell hardware it can give us a new frame using the old
		 * skb and put it at the tail of the sc->sc_rxbuf list for
		 * processing. */
		if (!requeue_skb)
			goto requeue;
550 551 552

		pci_dma_sync_single_for_cpu(sc->pdev,
					    bf->bf_buf_addr,
553
					    sc->sc_rxbufsize,
554
					    PCI_DMA_FROMDEVICE);
S
Sujith 已提交
555
		pci_unmap_single(sc->pdev, bf->bf_buf_addr,
556 557 558
				 sc->sc_rxbufsize,
				 PCI_DMA_FROMDEVICE);

S
Sujith 已提交
559 560 561 562 563 564 565 566 567 568 569
		skb_put(skb, ds->ds_rxstat.rs_datalen);
		skb->protocol = cpu_to_be16(ETH_P_CONTROL);

		/* see if any padding is done by the hw and remove it */
		hdr = (struct ieee80211_hdr *)skb->data;
		hdrlen = ieee80211_get_hdrlen_from_skb(skb);

		if (hdrlen & 3) {
			padsize = hdrlen % 4;
			memmove(skb->data + padsize, skb->data, hdrlen);
			skb_pull(skb, padsize);
570 571
		}

S
Sujith 已提交
572
		keyix = ds->ds_rxstat.rs_keyix;
573

S
Sujith 已提交
574 575 576 577 578 579 580 581 582 583 584 585
		if (!(keyix == ATH9K_RXKEYIX_INVALID) && !decrypt_error) {
			rx_status.flag |= RX_FLAG_DECRYPTED;
		} else if ((le16_to_cpu(hdr->frame_control) & IEEE80211_FCTL_PROTECTED)
			   && !decrypt_error && skb->len >= hdrlen + 4) {
			keyix = skb->data[hdrlen + 3] >> 6;

			if (test_bit(keyix, sc->sc_keymap))
				rx_status.flag |= RX_FLAG_DECRYPTED;
		}

		/* Send the frame to mac80211 */
		__ieee80211_rx(sc->hw, skb, &rx_status);
586 587 588 589 590 591 592

		/* We will now give hardware our shiny new allocated skb */
		bf->bf_mpdu = requeue_skb;
		bf->bf_buf_addr = pci_map_single(sc->pdev, requeue_skb->data,
					 sc->sc_rxbufsize,
					 PCI_DMA_FROMDEVICE);
		bf->bf_dmacontext = bf->bf_buf_addr;
593 594 595 596 597 598 599

		/*
		 * change the default rx antenna if rx diversity chooses the
		 * other antenna 3 times in a row.
		 */
		if (sc->sc_defant != ds->ds_rxstat.rs_antenna) {
			if (++sc->sc_rxotherant >= 3)
S
Sujith 已提交
600
				ath_setdefantenna(sc, ds->ds_rxstat.rs_antenna);
601 602 603
		} else {
			sc->sc_rxotherant = 0;
		}
604 605 606
requeue:
		list_move_tail(&bf->list, &sc->sc_rxbuf);
		ath_rx_buf_link(sc, bf);
S
Sujith 已提交
607 608 609
	} while (1);

	spin_unlock_bh(&sc->sc_rxbuflock);
610 611 612 613

	return 0;
#undef PA2DESC
}