util.c 53.8 KB
Newer Older
J
Johannes Berg 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * utilities for mac80211
 */

#include <net/mac80211.h>
#include <linux/netdevice.h>
16
#include <linux/export.h>
J
Johannes Berg 已提交
17 18 19 20 21 22
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/skbuff.h>
#include <linux/etherdevice.h>
#include <linux/if_arp.h>
#include <linux/bitmap.h>
23
#include <linux/crc32.h>
24
#include <net/net_namespace.h>
J
Johannes Berg 已提交
25
#include <net/cfg80211.h>
26
#include <net/rtnetlink.h>
J
Johannes Berg 已提交
27 28

#include "ieee80211_i.h"
29
#include "driver-ops.h"
J
Johannes Berg 已提交
30
#include "rate.h"
31
#include "mesh.h"
J
Johannes Berg 已提交
32
#include "wme.h"
33
#include "led.h"
J
Johannes Berg 已提交
34
#include "wep.h"
J
Johannes Berg 已提交
35 36 37 38

/* privid for wiphys to determine whether they belong to us or not */
void *mac80211_wiphy_privid = &mac80211_wiphy_privid;

39 40 41 42 43 44 45 46 47
struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
{
	struct ieee80211_local *local;
	BUG_ON(!wiphy);

	local = wiphy_priv(wiphy);
	return &local->hw;
}
EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
J
Johannes Berg 已提交
48

49
u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
50
			enum nl80211_iftype type)
J
Johannes Berg 已提交
51
{
52
	__le16 fc = hdr->frame_control;
J
Johannes Berg 已提交
53

54 55
	 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
	if (len < 16)
J
Johannes Berg 已提交
56 57
		return NULL;

58
	if (ieee80211_is_data(fc)) {
59 60
		if (len < 24) /* drop incorrect hdr len (data) */
			return NULL;
61 62

		if (ieee80211_has_a4(fc))
J
Johannes Berg 已提交
63
			return NULL;
64 65 66
		if (ieee80211_has_tods(fc))
			return hdr->addr1;
		if (ieee80211_has_fromds(fc))
J
Johannes Berg 已提交
67
			return hdr->addr2;
68 69 70 71 72

		return hdr->addr3;
	}

	if (ieee80211_is_mgmt(fc)) {
73 74
		if (len < 24) /* drop incorrect hdr len (mgmt) */
			return NULL;
J
Johannes Berg 已提交
75
		return hdr->addr3;
76 77 78 79
	}

	if (ieee80211_is_ctl(fc)) {
		if(ieee80211_is_pspoll(fc))
J
Johannes Berg 已提交
80
			return hdr->addr1;
81 82

		if (ieee80211_is_back_req(fc)) {
83
			switch (type) {
84
			case NL80211_IFTYPE_STATION:
85
				return hdr->addr2;
86 87
			case NL80211_IFTYPE_AP:
			case NL80211_IFTYPE_AP_VLAN:
88 89
				return hdr->addr1;
			default:
90
				break; /* fall through to the return */
91 92
			}
		}
J
Johannes Berg 已提交
93 94 95 96 97
	}

	return NULL;
}

98
void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
J
Johannes Berg 已提交
99
{
100
	struct sk_buff *skb;
J
Johannes Berg 已提交
101 102
	struct ieee80211_hdr *hdr;

103
	skb_queue_walk(&tx->skbs, skb) {
J
Johannes Berg 已提交
104 105
		hdr = (struct ieee80211_hdr *) skb->data;
		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
106
	}
J
Johannes Berg 已提交
107 108
}

109
int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
J
Johannes Berg 已提交
110 111 112 113 114 115 116 117 118 119 120 121 122
			     int rate, int erp, int short_preamble)
{
	int dur;

	/* calculate duration (in microseconds, rounded up to next higher
	 * integer if it includes a fractional microsecond) to send frame of
	 * len bytes (does not include FCS) at the given rate. Duration will
	 * also include SIFS.
	 *
	 * rate is in 100 kbps, so divident is multiplied by 10 in the
	 * DIV_ROUND_UP() operations.
	 */

123
	if (band == IEEE80211_BAND_5GHZ || erp) {
J
Johannes Berg 已提交
124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162
		/*
		 * OFDM:
		 *
		 * N_DBPS = DATARATE x 4
		 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
		 *	(16 = SIGNAL time, 6 = tail bits)
		 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
		 *
		 * T_SYM = 4 usec
		 * 802.11a - 17.5.2: aSIFSTime = 16 usec
		 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
		 *	signal ext = 6 usec
		 */
		dur = 16; /* SIFS + signal ext */
		dur += 16; /* 17.3.2.3: T_PREAMBLE = 16 usec */
		dur += 4; /* 17.3.2.3: T_SIGNAL = 4 usec */
		dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
					4 * rate); /* T_SYM x N_SYM */
	} else {
		/*
		 * 802.11b or 802.11g with 802.11b compatibility:
		 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
		 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
		 *
		 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
		 * aSIFSTime = 10 usec
		 * aPreambleLength = 144 usec or 72 usec with short preamble
		 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
		 */
		dur = 10; /* aSIFSTime = 10 usec */
		dur += short_preamble ? (72 + 24) : (144 + 48);

		dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
	}

	return dur;
}

/* Exported duration function for driver use */
163 164
__le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
					struct ieee80211_vif *vif,
165
					enum ieee80211_band band,
166 167
					size_t frame_len,
					struct ieee80211_rate *rate)
J
Johannes Berg 已提交
168
{
169
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
170 171
	u16 dur;
	int erp;
172
	bool short_preamble = false;
J
Johannes Berg 已提交
173

174
	erp = 0;
175 176
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
177
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
178 179 180
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
181

182
	dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
183
				       short_preamble);
J
Johannes Berg 已提交
184 185 186 187 188

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_generic_frame_duration);

189 190
__le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
			      struct ieee80211_vif *vif, size_t frame_len,
191
			      const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
192 193 194
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
195
	struct ieee80211_sub_if_data *sdata;
196
	bool short_preamble;
J
Johannes Berg 已提交
197 198
	int erp;
	u16 dur;
199 200
	struct ieee80211_supported_band *sband;

201
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
202

203
	short_preamble = false;
204

205
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
206 207

	erp = 0;
208 209
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
210
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
211 212 213
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
214 215

	/* CTS duration */
216
	dur = ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
217 218
				       erp, short_preamble);
	/* Data frame duration */
219
	dur += ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
220 221
					erp, short_preamble);
	/* ACK duration */
222
	dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
223 224 225 226 227 228
					erp, short_preamble);

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_rts_duration);

229 230
__le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
				    struct ieee80211_vif *vif,
J
Johannes Berg 已提交
231
				    size_t frame_len,
232
				    const struct ieee80211_tx_info *frame_txctl)
J
Johannes Berg 已提交
233 234 235
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_rate *rate;
236
	struct ieee80211_sub_if_data *sdata;
237
	bool short_preamble;
J
Johannes Berg 已提交
238 239
	int erp;
	u16 dur;
240 241
	struct ieee80211_supported_band *sband;

242
	sband = local->hw.wiphy->bands[frame_txctl->band];
J
Johannes Berg 已提交
243

244
	short_preamble = false;
245

246
	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
247
	erp = 0;
248 249
	if (vif) {
		sdata = vif_to_sdata(vif);
J
Johannes Berg 已提交
250
		short_preamble = sdata->vif.bss_conf.use_short_preamble;
251 252 253
		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
			erp = rate->flags & IEEE80211_RATE_ERP_G;
	}
J
Johannes Berg 已提交
254 255

	/* Data frame duration */
256
	dur = ieee80211_frame_duration(sband->band, frame_len, rate->bitrate,
J
Johannes Berg 已提交
257
				       erp, short_preamble);
258
	if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
J
Johannes Berg 已提交
259
		/* ACK duration */
260
		dur += ieee80211_frame_duration(sband->band, 10, rate->bitrate,
J
Johannes Berg 已提交
261 262 263 264 265 266 267
						erp, short_preamble);
	}

	return cpu_to_le16(dur);
}
EXPORT_SYMBOL(ieee80211_ctstoself_duration);

268 269 270
void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
{
	struct ieee80211_sub_if_data *sdata;
271 272 273 274
	int n_acs = IEEE80211_NUM_ACS;

	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;
275 276 277 278

	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

279 280 281
		if (!sdata->dev)
			continue;

282 283 284 285 286 287 288
		if (test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state))
			continue;

		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
		    local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
			continue;

289
		for (ac = 0; ac < n_acs; ac++) {
290 291 292 293 294 295 296 297 298 299 300
			int ac_queue = sdata->vif.hw_queue[ac];

			if (ac_queue == queue ||
			    (sdata->vif.cab_queue == queue &&
			     local->queue_stop_reasons[ac_queue] == 0 &&
			     skb_queue_empty(&local->pending[ac_queue])))
				netif_wake_subqueue(sdata->dev, ac);
		}
	}
}

K
Kalle Valo 已提交
301 302
static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
303 304 305
{
	struct ieee80211_local *local = hw_to_local(hw);

J
Johannes Berg 已提交
306 307
	trace_wake_queue(local, queue, reason);

308 309
	if (WARN_ON(queue >= hw->queues))
		return;
K
Kalle Valo 已提交
310

311 312 313
	if (!test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

314 315 316 317 318 319
	__clear_bit(reason, &local->queue_stop_reasons[queue]);

	if (local->queue_stop_reasons[queue] != 0)
		/* someone still has this queue stopped */
		return;

320 321
	if (skb_queue_empty(&local->pending[queue])) {
		rcu_read_lock();
322
		ieee80211_propagate_queue_wake(local, queue);
323 324
		rcu_read_unlock();
	} else
J
Johannes Berg 已提交
325
		tasklet_schedule(&local->tx_pending_tasklet);
J
Johannes Berg 已提交
326
}
K
Kalle Valo 已提交
327

328 329
void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
330 331 332 333 334 335 336 337 338 339 340 341 342 343
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_wake_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_wake_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
344 345
EXPORT_SYMBOL(ieee80211_wake_queue);

K
Kalle Valo 已提交
346 347
static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
				   enum queue_stop_reason reason)
J
Johannes Berg 已提交
348 349
{
	struct ieee80211_local *local = hw_to_local(hw);
350
	struct ieee80211_sub_if_data *sdata;
351
	int n_acs = IEEE80211_NUM_ACS;
J
Johannes Berg 已提交
352

J
Johannes Berg 已提交
353 354
	trace_stop_queue(local, queue, reason);

355 356
	if (WARN_ON(queue >= hw->queues))
		return;
357

358 359 360
	if (test_bit(reason, &local->queue_stop_reasons[queue]))
		return;

361
	__set_bit(reason, &local->queue_stop_reasons[queue]);
362

363 364 365
	if (local->hw.queues < IEEE80211_NUM_ACS)
		n_acs = 1;

366
	rcu_read_lock();
367 368 369
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
		int ac;

370 371 372
		if (!sdata->dev)
			continue;

373
		for (ac = 0; ac < n_acs; ac++) {
374 375 376 377 378
			if (sdata->vif.hw_queue[ac] == queue ||
			    sdata->vif.cab_queue == queue)
				netif_stop_subqueue(sdata->dev, ac);
		}
	}
379
	rcu_read_unlock();
J
Johannes Berg 已提交
380
}
K
Kalle Valo 已提交
381

382 383
void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
				    enum queue_stop_reason reason)
K
Kalle Valo 已提交
384 385 386 387 388 389 390 391 392 393 394 395 396 397
{
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, reason);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
{
	ieee80211_stop_queue_by_reason(hw, queue,
				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
}
J
Johannes Berg 已提交
398 399
EXPORT_SYMBOL(ieee80211_stop_queue);

400 401 402 403 404
void ieee80211_add_pending_skb(struct ieee80211_local *local,
			       struct sk_buff *skb)
{
	struct ieee80211_hw *hw = &local->hw;
	unsigned long flags;
405
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
406
	int queue = info->hw_queue;
407 408

	if (WARN_ON(!info->control.vif)) {
409
		ieee80211_free_txskb(&local->hw, skb);
410 411
		return;
	}
412 413 414

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	__ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
J
Johannes Berg 已提交
415
	__skb_queue_tail(&local->pending[queue], skb);
416 417 418 419
	__ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

420 421 422
void ieee80211_add_pending_skbs_fn(struct ieee80211_local *local,
				   struct sk_buff_head *skbs,
				   void (*fn)(void *data), void *data)
423 424 425 426
{
	struct ieee80211_hw *hw = &local->hw;
	struct sk_buff *skb;
	unsigned long flags;
427
	int queue, i;
428 429 430

	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	while ((skb = skb_dequeue(skbs))) {
431 432 433
		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);

		if (WARN_ON(!info->control.vif)) {
434
			ieee80211_free_txskb(&local->hw, skb);
435 436 437
			continue;
		}

438
		queue = info->hw_queue;
439 440 441 442

		__ieee80211_stop_queue(hw, queue,
				IEEE80211_QUEUE_STOP_REASON_SKB_ADD);

J
Johannes Berg 已提交
443
		__skb_queue_tail(&local->pending[queue], skb);
444 445
	}

446 447 448
	if (fn)
		fn(data);

J
Johannes Berg 已提交
449
	for (i = 0; i < hw->queues; i++)
450 451 452 453 454
		__ieee80211_wake_queue(hw, i,
			IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

K
Kalle Valo 已提交
455 456
void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
				    enum queue_stop_reason reason)
J
Johannes Berg 已提交
457
{
K
Kalle Valo 已提交
458 459
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
460 461
	int i;

K
Kalle Valo 已提交
462 463
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

464
	for (i = 0; i < hw->queues; i++)
K
Kalle Valo 已提交
465 466 467 468 469 470 471 472 473
		__ieee80211_stop_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_stop_queues(struct ieee80211_hw *hw)
{
	ieee80211_stop_queues_by_reason(hw,
					IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
474 475 476
}
EXPORT_SYMBOL(ieee80211_stop_queues);

477 478 479
int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
{
	struct ieee80211_local *local = hw_to_local(hw);
J
Johannes Berg 已提交
480 481
	unsigned long flags;
	int ret;
482

483 484
	if (WARN_ON(queue >= hw->queues))
		return true;
485

J
Johannes Berg 已提交
486 487 488 489
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	ret = !!local->queue_stop_reasons[queue];
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
	return ret;
490 491 492
}
EXPORT_SYMBOL(ieee80211_queue_stopped);

K
Kalle Valo 已提交
493 494
void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
				     enum queue_stop_reason reason)
J
Johannes Berg 已提交
495
{
K
Kalle Valo 已提交
496 497
	struct ieee80211_local *local = hw_to_local(hw);
	unsigned long flags;
J
Johannes Berg 已提交
498 499
	int i;

K
Kalle Valo 已提交
500 501
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);

502
	for (i = 0; i < hw->queues; i++)
K
Kalle Valo 已提交
503 504 505 506 507 508 509 510
		__ieee80211_wake_queue(hw, i, reason);

	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
}

void ieee80211_wake_queues(struct ieee80211_hw *hw)
{
	ieee80211_wake_queues_by_reason(hw, IEEE80211_QUEUE_STOP_REASON_DRIVER);
J
Johannes Berg 已提交
511 512
}
EXPORT_SYMBOL(ieee80211_wake_queues);
513

514
void ieee80211_iterate_active_interfaces(
515
	struct ieee80211_hw *hw, u32 iter_flags,
516 517 518
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
519 520 521 522
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

523
	mutex_lock(&local->iflist_mtx);
524 525 526

	list_for_each_entry(sdata, &local->interfaces, list) {
		switch (sdata->vif.type) {
527 528
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
529
			continue;
530
		default:
531 532
			break;
		}
533 534 535
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
536
		if (ieee80211_sdata_running(sdata))
537
			iterator(data, sdata->vif.addr,
538 539 540
				 &sdata->vif);
	}

541 542
	sdata = rcu_dereference_protected(local->monitor_sdata,
					  lockdep_is_held(&local->iflist_mtx));
543 544 545
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
546 547
		iterator(data, sdata->vif.addr, &sdata->vif);

548
	mutex_unlock(&local->iflist_mtx);
549 550 551 552
}
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);

void ieee80211_iterate_active_interfaces_atomic(
553
	struct ieee80211_hw *hw, u32 iter_flags,
554 555 556 557 558 559 560
	void (*iterator)(void *data, u8 *mac,
			 struct ieee80211_vif *vif),
	void *data)
{
	struct ieee80211_local *local = hw_to_local(hw);
	struct ieee80211_sub_if_data *sdata;

561
	rcu_read_lock();
562

563
	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
564
		switch (sdata->vif.type) {
565 566
		case NL80211_IFTYPE_MONITOR:
		case NL80211_IFTYPE_AP_VLAN:
567
			continue;
568
		default:
569 570
			break;
		}
571 572 573
		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
			continue;
574
		if (ieee80211_sdata_running(sdata))
575
			iterator(data, sdata->vif.addr,
576
				 &sdata->vif);
577
	}
578

579
	sdata = rcu_dereference(local->monitor_sdata);
580 581 582
	if (sdata &&
	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
583 584
		iterator(data, sdata->vif.addr, &sdata->vif);

585
	rcu_read_unlock();
586
}
587
EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
588

589 590 591 592 593 594 595 596 597
/*
 * Nothing should have been stuffed into the workqueue during
 * the suspend->resume cycle. If this WARN is seen then there
 * is a bug with either the driver suspend or something in
 * mac80211 stuffing into the workqueue which we haven't yet
 * cleared during mac80211's suspend cycle.
 */
static bool ieee80211_can_queue_work(struct ieee80211_local *local)
{
J
Johannes Berg 已提交
598 599 600
	if (WARN(local->suspended && !local->resuming,
		 "queueing ieee80211 work while going to suspend\n"))
		return false;
601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628

	return true;
}

void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_work(local->workqueue, work);
}
EXPORT_SYMBOL(ieee80211_queue_work);

void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
				  struct delayed_work *dwork,
				  unsigned long delay)
{
	struct ieee80211_local *local = hw_to_local(hw);

	if (!ieee80211_can_queue_work(local))
		return;

	queue_delayed_work(local->workqueue, dwork, delay);
}
EXPORT_SYMBOL(ieee80211_queue_delayed_work);

629 630 631 632 633 634 635
u32 ieee802_11_parse_elems_crc(u8 *start, size_t len,
			       struct ieee802_11_elems *elems,
			       u64 filter, u32 crc)
{
	size_t left = len;
	u8 *pos = start;
	bool calc_crc = filter != 0;
P
Paul Stewart 已提交
636
	DECLARE_BITMAP(seen_elems, 256);
637

P
Paul Stewart 已提交
638
	bitmap_zero(seen_elems, 256);
639 640 641 642 643 644
	memset(elems, 0, sizeof(*elems));
	elems->ie_start = start;
	elems->total_len = len;

	while (left >= 2) {
		u8 id, elen;
P
Paul Stewart 已提交
645
		bool elem_parse_failed;
646 647 648 649 650

		id = *pos++;
		elen = *pos++;
		left -= 2;

P
Paul Stewart 已提交
651 652
		if (elen > left) {
			elems->parse_error = true;
653
			break;
P
Paul Stewart 已提交
654 655
		}

656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690
		switch (id) {
		case WLAN_EID_SSID:
		case WLAN_EID_SUPP_RATES:
		case WLAN_EID_FH_PARAMS:
		case WLAN_EID_DS_PARAMS:
		case WLAN_EID_CF_PARAMS:
		case WLAN_EID_TIM:
		case WLAN_EID_IBSS_PARAMS:
		case WLAN_EID_CHALLENGE:
		case WLAN_EID_RSN:
		case WLAN_EID_ERP_INFO:
		case WLAN_EID_EXT_SUPP_RATES:
		case WLAN_EID_HT_CAPABILITY:
		case WLAN_EID_HT_OPERATION:
		case WLAN_EID_VHT_CAPABILITY:
		case WLAN_EID_VHT_OPERATION:
		case WLAN_EID_MESH_ID:
		case WLAN_EID_MESH_CONFIG:
		case WLAN_EID_PEER_MGMT:
		case WLAN_EID_PREQ:
		case WLAN_EID_PREP:
		case WLAN_EID_PERR:
		case WLAN_EID_RANN:
		case WLAN_EID_CHANNEL_SWITCH:
		case WLAN_EID_EXT_CHANSWITCH_ANN:
		case WLAN_EID_COUNTRY:
		case WLAN_EID_PWR_CONSTRAINT:
		case WLAN_EID_TIMEOUT_INTERVAL:
			if (test_bit(id, seen_elems)) {
				elems->parse_error = true;
				left -= elen;
				pos += elen;
				continue;
			}
			break;
P
Paul Stewart 已提交
691
		}
692 693 694 695

		if (calc_crc && id < 64 && (filter & (1ULL << id)))
			crc = crc32_be(crc, pos - 2, elen + 2);

P
Paul Stewart 已提交
696 697
		elem_parse_failed = false;

698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722
		switch (id) {
		case WLAN_EID_SSID:
			elems->ssid = pos;
			elems->ssid_len = elen;
			break;
		case WLAN_EID_SUPP_RATES:
			elems->supp_rates = pos;
			elems->supp_rates_len = elen;
			break;
		case WLAN_EID_FH_PARAMS:
			elems->fh_params = pos;
			elems->fh_params_len = elen;
			break;
		case WLAN_EID_DS_PARAMS:
			elems->ds_params = pos;
			elems->ds_params_len = elen;
			break;
		case WLAN_EID_CF_PARAMS:
			elems->cf_params = pos;
			elems->cf_params_len = elen;
			break;
		case WLAN_EID_TIM:
			if (elen >= sizeof(struct ieee80211_tim_ie)) {
				elems->tim = (void *)pos;
				elems->tim_len = elen;
P
Paul Stewart 已提交
723 724
			} else
				elem_parse_failed = true;
725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772
			break;
		case WLAN_EID_IBSS_PARAMS:
			elems->ibss_params = pos;
			elems->ibss_params_len = elen;
			break;
		case WLAN_EID_CHALLENGE:
			elems->challenge = pos;
			elems->challenge_len = elen;
			break;
		case WLAN_EID_VENDOR_SPECIFIC:
			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
			    pos[2] == 0xf2) {
				/* Microsoft OUI (00:50:F2) */

				if (calc_crc)
					crc = crc32_be(crc, pos - 2, elen + 2);

				if (pos[3] == 1) {
					/* OUI Type 1 - WPA IE */
					elems->wpa = pos;
					elems->wpa_len = elen;
				} else if (elen >= 5 && pos[3] == 2) {
					/* OUI Type 2 - WMM IE */
					if (pos[4] == 0) {
						elems->wmm_info = pos;
						elems->wmm_info_len = elen;
					} else if (pos[4] == 1) {
						elems->wmm_param = pos;
						elems->wmm_param_len = elen;
					}
				}
			}
			break;
		case WLAN_EID_RSN:
			elems->rsn = pos;
			elems->rsn_len = elen;
			break;
		case WLAN_EID_ERP_INFO:
			elems->erp_info = pos;
			elems->erp_info_len = elen;
			break;
		case WLAN_EID_EXT_SUPP_RATES:
			elems->ext_supp_rates = pos;
			elems->ext_supp_rates_len = elen;
			break;
		case WLAN_EID_HT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_ht_cap))
				elems->ht_cap_elem = (void *)pos;
P
Paul Stewart 已提交
773 774
			else
				elem_parse_failed = true;
775
			break;
776 777 778
		case WLAN_EID_HT_OPERATION:
			if (elen >= sizeof(struct ieee80211_ht_operation))
				elems->ht_operation = (void *)pos;
P
Paul Stewart 已提交
779 780
			else
				elem_parse_failed = true;
781
			break;
M
Mahesh Palivela 已提交
782 783 784 785 786 787 788 789 790 791 792 793
		case WLAN_EID_VHT_CAPABILITY:
			if (elen >= sizeof(struct ieee80211_vht_cap))
				elems->vht_cap_elem = (void *)pos;
			else
				elem_parse_failed = true;
			break;
		case WLAN_EID_VHT_OPERATION:
			if (elen >= sizeof(struct ieee80211_vht_operation))
				elems->vht_operation = (void *)pos;
			else
				elem_parse_failed = true;
			break;
794 795 796 797 798 799 800
		case WLAN_EID_MESH_ID:
			elems->mesh_id = pos;
			elems->mesh_id_len = elen;
			break;
		case WLAN_EID_MESH_CONFIG:
			if (elen >= sizeof(struct ieee80211_meshconf_ie))
				elems->mesh_config = (void *)pos;
P
Paul Stewart 已提交
801 802
			else
				elem_parse_failed = true;
803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822
			break;
		case WLAN_EID_PEER_MGMT:
			elems->peering = pos;
			elems->peering_len = elen;
			break;
		case WLAN_EID_PREQ:
			elems->preq = pos;
			elems->preq_len = elen;
			break;
		case WLAN_EID_PREP:
			elems->prep = pos;
			elems->prep_len = elen;
			break;
		case WLAN_EID_PERR:
			elems->perr = pos;
			elems->perr_len = elen;
			break;
		case WLAN_EID_RANN:
			if (elen >= sizeof(struct ieee80211_rann_ie))
				elems->rann = (void *)pos;
P
Paul Stewart 已提交
823 824
			else
				elem_parse_failed = true;
825 826
			break;
		case WLAN_EID_CHANNEL_SWITCH:
827 828 829 830 831
			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
				elem_parse_failed = true;
				break;
			}
			elems->ch_switch_ie = (void *)pos;
832 833 834 835 836 837 838 839 840 841 842 843 844
			break;
		case WLAN_EID_QUIET:
			if (!elems->quiet_elem) {
				elems->quiet_elem = pos;
				elems->quiet_elem_len = elen;
			}
			elems->num_of_quiet_elem++;
			break;
		case WLAN_EID_COUNTRY:
			elems->country_elem = pos;
			elems->country_elem_len = elen;
			break;
		case WLAN_EID_PWR_CONSTRAINT:
845 846 847 848
			if (elen != 1) {
				elem_parse_failed = true;
				break;
			}
849 850 851 852 853 854 855 856 857 858
			elems->pwr_constr_elem = pos;
			break;
		case WLAN_EID_TIMEOUT_INTERVAL:
			elems->timeout_int = pos;
			elems->timeout_int_len = elen;
			break;
		default:
			break;
		}

P
Paul Stewart 已提交
859 860 861
		if (elem_parse_failed)
			elems->parse_error = true;
		else
862
			__set_bit(id, seen_elems);
P
Paul Stewart 已提交
863

864 865 866 867
		left -= elen;
		pos += elen;
	}

P
Paul Stewart 已提交
868 869 870
	if (left != 0)
		elems->parse_error = true;

871 872 873
	return crc;
}

874 875
void ieee802_11_parse_elems(u8 *start, size_t len,
			    struct ieee802_11_elems *elems)
876 877 878 879
{
	ieee802_11_parse_elems_crc(start, len, elems, 0, 0);
}

880 881
void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
			       bool bss_notify)
882 883 884
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_tx_queue_params qparam;
J
Johannes Berg 已提交
885
	struct ieee80211_chanctx_conf *chanctx_conf;
886
	int ac;
887
	bool use_11b, enable_qos;
888
	int aCWmin, aCWmax;
889 890 891 892

	if (!local->ops->conf_tx)
		return;

893 894 895
	if (local->hw.queues < IEEE80211_NUM_ACS)
		return;

896 897
	memset(&qparam, 0, sizeof(qparam));

J
Johannes Berg 已提交
898 899 900
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	use_11b = (chanctx_conf &&
901
		   chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
902
		 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
J
Johannes Berg 已提交
903
	rcu_read_unlock();
904

905 906 907 908 909 910 911
	/*
	 * By default disable QoS in STA mode for old access points, which do
	 * not support 802.11e. New APs will provide proper queue parameters,
	 * that we will configure later.
	 */
	enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);

912
	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
913 914 915 916 917 918 919
		/* Set defaults according to 802.11-2007 Table 7-37 */
		aCWmax = 1023;
		if (use_11b)
			aCWmin = 31;
		else
			aCWmin = 15;

920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956
		if (enable_qos) {
			switch (ac) {
			case IEEE80211_AC_BK:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 7;
				break;
			/* never happens but let's not leave undefined */
			default:
			case IEEE80211_AC_BE:
				qparam.cw_max = aCWmax;
				qparam.cw_min = aCWmin;
				qparam.txop = 0;
				qparam.aifs = 3;
				break;
			case IEEE80211_AC_VI:
				qparam.cw_max = aCWmin;
				qparam.cw_min = (aCWmin + 1) / 2 - 1;
				if (use_11b)
					qparam.txop = 6016/32;
				else
					qparam.txop = 3008/32;
				qparam.aifs = 2;
				break;
			case IEEE80211_AC_VO:
				qparam.cw_max = (aCWmin + 1) / 2 - 1;
				qparam.cw_min = (aCWmin + 1) / 4 - 1;
				if (use_11b)
					qparam.txop = 3264/32;
				else
					qparam.txop = 1504/32;
				qparam.aifs = 2;
				break;
			}
		} else {
			/* Confiure old 802.11b/g medium access rules. */
957 958
			qparam.cw_max = aCWmax;
			qparam.cw_min = aCWmin;
959 960 961
			qparam.txop = 0;
			qparam.aifs = 2;
		}
962

K
Kalle Valo 已提交
963 964
		qparam.uapsd = false;

965 966
		sdata->tx_conf[ac] = qparam;
		drv_conf_tx(local, sdata, ac, &qparam);
967
	}
968

969 970
	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
	    sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
971
		sdata->vif.bss_conf.qos = enable_qos;
972 973 974
		if (bss_notify)
			ieee80211_bss_info_change_notify(sdata,
							 BSS_CHANGED_QOS);
975
	}
976
}
J
Johannes Berg 已提交
977

978 979 980 981
void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
				  const size_t supp_rates_len,
				  const u8 *supp_rates)
{
J
Johannes Berg 已提交
982
	struct ieee80211_chanctx_conf *chanctx_conf;
983 984 985 986 987 988 989
	int i, have_higher_than_11mbit = 0;

	/* cf. IEEE 802.11 9.2.12 */
	for (i = 0; i < supp_rates_len; i++)
		if ((supp_rates[i] & 0x7f) * 5 > 110)
			have_higher_than_11mbit = 1;

J
Johannes Berg 已提交
990 991 992 993
	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);

	if (chanctx_conf &&
994
	    chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ &&
995 996 997 998
	    have_higher_than_11mbit)
		sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
	else
		sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
J
Johannes Berg 已提交
999
	rcu_read_unlock();
1000

1001
	ieee80211_set_wmm_default(sdata, true);
1002 1003
}

1004
u32 ieee80211_mandatory_rates(struct ieee80211_local *local,
1005 1006 1007 1008
			      enum ieee80211_band band)
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
1009
	u32 mandatory_rates;
1010 1011 1012 1013
	enum ieee80211_rate_flags mandatory_flag;
	int i;

	sband = local->hw.wiphy->bands[band];
1014 1015
	if (WARN_ON(!sband))
		return 1;
1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028

	if (band == IEEE80211_BAND_2GHZ)
		mandatory_flag = IEEE80211_RATE_MANDATORY_B;
	else
		mandatory_flag = IEEE80211_RATE_MANDATORY_A;

	bitrates = sband->bitrates;
	mandatory_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++)
		if (bitrates[i].flags & mandatory_flag)
			mandatory_rates |= BIT(i);
	return mandatory_rates;
}
1029 1030

void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
1031
			 u16 transaction, u16 auth_alg, u16 status,
1032 1033
			 u8 *extra, size_t extra_len, const u8 *da,
			 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx)
1034 1035 1036 1037
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
J
Johannes Berg 已提交
1038
	int err;
1039 1040

	skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1041
			    sizeof(*mgmt) + 6 + extra_len);
1042
	if (!skb)
1043
		return;
1044

1045 1046 1047 1048 1049 1050
	skb_reserve(skb, local->hw.extra_tx_headroom);

	mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
	memset(mgmt, 0, 24 + 6);
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
					  IEEE80211_STYPE_AUTH);
1051
	memcpy(mgmt->da, da, ETH_ALEN);
1052
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1053 1054 1055
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
	mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
1056
	mgmt->u.auth.status_code = cpu_to_le16(status);
1057 1058 1059
	if (extra)
		memcpy(skb_put(skb, extra_len), extra, extra_len);

J
Johannes Berg 已提交
1060 1061 1062 1063 1064 1065
	if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
		mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
		err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
		WARN_ON(err);
	}

1066 1067
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
	ieee80211_tx_skb(sdata, skb);
1068 1069
}

1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108
void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
				    const u8 *bssid, u16 stype, u16 reason,
				    bool send_frame, u8 *frame_buf)
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt = (void *)frame_buf;

	/* build frame */
	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
	mgmt->duration = 0; /* initialize only */
	mgmt->seq_ctrl = 0; /* initialize only */
	memcpy(mgmt->da, bssid, ETH_ALEN);
	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
	memcpy(mgmt->bssid, bssid, ETH_ALEN);
	/* u.deauth.reason_code == u.disassoc.reason_code */
	mgmt->u.deauth.reason_code = cpu_to_le16(reason);

	if (send_frame) {
		skb = dev_alloc_skb(local->hw.extra_tx_headroom +
				    IEEE80211_DEAUTH_FRAME_LEN);
		if (!skb)
			return;

		skb_reserve(skb, local->hw.extra_tx_headroom);

		/* copy in frame */
		memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
		       mgmt, IEEE80211_DEAUTH_FRAME_LEN);

		if (sdata->vif.type != NL80211_IFTYPE_STATION ||
		    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
			IEEE80211_SKB_CB(skb)->flags |=
				IEEE80211_TX_INTFL_DONT_ENCRYPT;

		ieee80211_tx_skb(sdata, skb);
	}
}

1109
int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1110
			     size_t buffer_len, const u8 *ie, size_t ie_len,
1111 1112
			     enum ieee80211_band band, u32 rate_mask,
			     u8 channel)
1113 1114
{
	struct ieee80211_supported_band *sband;
1115
	u8 *pos = buffer, *end = buffer + buffer_len;
1116 1117
	size_t offset = 0, noffset;
	int supp_rates_len, i;
1118 1119 1120
	u8 rates[32];
	int num_rates;
	int ext_rates_len;
1121

1122
	sband = local->hw.wiphy->bands[band];
1123 1124
	if (WARN_ON_ONCE(!sband))
		return 0;
1125

1126 1127 1128 1129 1130 1131 1132 1133
	num_rates = 0;
	for (i = 0; i < sband->n_bitrates; i++) {
		if ((BIT(i) & rate_mask) == 0)
			continue; /* skip rate */
		rates[num_rates++] = (u8) (sband->bitrates[i].bitrate / 5);
	}

	supp_rates_len = min_t(int, num_rates, 8);
1134

1135 1136
	if (end - pos < 2 + supp_rates_len)
		goto out_err;
1137
	*pos++ = WLAN_EID_SUPP_RATES;
1138
	*pos++ = supp_rates_len;
1139 1140
	memcpy(pos, rates, supp_rates_len);
	pos += supp_rates_len;
1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152

	/* insert "request information" if in custom IEs */
	if (ie && ie_len) {
		static const u8 before_extrates[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_extrates,
					     ARRAY_SIZE(before_extrates),
					     offset);
1153 1154
		if (end - pos < noffset - offset)
			goto out_err;
1155 1156 1157 1158 1159
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
	}

1160 1161
	ext_rates_len = num_rates - supp_rates_len;
	if (ext_rates_len > 0) {
1162 1163
		if (end - pos < 2 + ext_rates_len)
			goto out_err;
1164
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
1165 1166 1167
		*pos++ = ext_rates_len;
		memcpy(pos, rates + supp_rates_len, ext_rates_len);
		pos += ext_rates_len;
1168 1169
	}

1170
	if (channel && sband->band == IEEE80211_BAND_2GHZ) {
1171 1172
		if (end - pos < 3)
			goto out_err;
1173 1174 1175 1176 1177
		*pos++ = WLAN_EID_DS_PARAMS;
		*pos++ = 1;
		*pos++ = channel;
	}

1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190
	/* insert custom IEs that go before HT */
	if (ie && ie_len) {
		static const u8 before_ht[] = {
			WLAN_EID_SSID,
			WLAN_EID_SUPP_RATES,
			WLAN_EID_REQUEST,
			WLAN_EID_EXT_SUPP_RATES,
			WLAN_EID_DS_PARAMS,
			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
		};
		noffset = ieee80211_ie_split(ie, ie_len,
					     before_ht, ARRAY_SIZE(before_ht),
					     offset);
1191 1192
		if (end - pos < noffset - offset)
			goto out_err;
1193 1194 1195
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
		offset = noffset;
1196 1197
	}

1198 1199 1200
	if (sband->ht_cap.ht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
			goto out_err;
B
Ben Greear 已提交
1201 1202
		pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
						sband->ht_cap.cap);
1203
	}
1204

1205 1206 1207 1208 1209
	/*
	 * If adding more here, adjust code in main.c
	 * that calculates local->scan_ies_len.
	 */

1210 1211 1212
	/* add any remaining custom IEs */
	if (ie && ie_len) {
		noffset = ie_len;
1213 1214
		if (end - pos < noffset - offset)
			goto out_err;
1215 1216
		memcpy(pos, ie + offset, noffset - offset);
		pos += noffset - offset;
1217 1218
	}

1219 1220 1221
	if (sband->vht_cap.vht_supported) {
		if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
			goto out_err;
1222 1223
		pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
						 sband->vht_cap.cap);
1224
	}
1225

1226 1227 1228
	return pos - buffer;
 out_err:
	WARN_ONCE(1, "not enough space for preq IEs\n");
1229 1230 1231
	return pos - buffer;
}

1232
struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1233
					  u8 *dst, u32 ratemask,
1234
					  struct ieee80211_channel *chan,
1235
					  const u8 *ssid, size_t ssid_len,
1236 1237
					  const u8 *ie, size_t ie_len,
					  bool directed)
1238 1239 1240 1241
{
	struct ieee80211_local *local = sdata->local;
	struct sk_buff *skb;
	struct ieee80211_mgmt *mgmt;
1242
	u8 chan_no;
1243
	int ies_len;
1244

1245 1246 1247 1248 1249 1250
	/*
	 * Do not send DS Channel parameter for directed probe requests
	 * in order to maximize the chance that we get a response.  Some
	 * badly-behaved APs don't respond when this parameter is included.
	 */
	if (directed)
1251
		chan_no = 0;
1252
	else
1253
		chan_no = ieee80211_frequency_to_channel(chan->center_freq);
1254

1255
	skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
1256
				     ssid, ssid_len, 100 + ie_len);
1257
	if (!skb)
1258 1259 1260 1261 1262 1263 1264
		return NULL;

	ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
					   skb_tailroom(skb),
					   ie, ie_len, chan->band,
					   ratemask, chan_no);
	skb_put(skb, ies_len);
1265

1266
	if (dst) {
1267
		mgmt = (struct ieee80211_mgmt *) skb->data;
1268 1269 1270 1271
		memcpy(mgmt->da, dst, ETH_ALEN);
		memcpy(mgmt->bssid, dst, ETH_ALEN);
	}

1272
	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1273

1274 1275 1276 1277 1278
	return skb;
}

void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
			      const u8 *ssid, size_t ssid_len,
1279
			      const u8 *ie, size_t ie_len,
1280
			      u32 ratemask, bool directed, bool no_cck,
J
Johannes Berg 已提交
1281
			      struct ieee80211_channel *channel, bool scan)
1282 1283 1284
{
	struct sk_buff *skb;

1285
	skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel,
1286
					ssid, ssid_len,
1287
					ie, ie_len, directed);
1288 1289 1290 1291
	if (skb) {
		if (no_cck)
			IEEE80211_SKB_CB(skb)->flags |=
				IEEE80211_TX_CTL_NO_CCK_RATE;
J
Johannes Berg 已提交
1292 1293 1294 1295
		if (scan)
			ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
		else
			ieee80211_tx_skb(sdata, skb);
1296
	}
1297 1298 1299 1300
}

u32 ieee80211_sta_get_rates(struct ieee80211_local *local,
			    struct ieee802_11_elems *elems,
1301
			    enum ieee80211_band band, u32 *basic_rates)
1302 1303 1304 1305 1306 1307 1308 1309
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_rate *bitrates;
	size_t num_rates;
	u32 supp_rates;
	int i, j;
	sband = local->hw.wiphy->bands[band];

1310 1311
	if (WARN_ON(!sband))
		return 1;
1312 1313 1314 1315 1316 1317 1318 1319

	bitrates = sband->bitrates;
	num_rates = sband->n_bitrates;
	supp_rates = 0;
	for (i = 0; i < elems->supp_rates_len +
		     elems->ext_supp_rates_len; i++) {
		u8 rate = 0;
		int own_rate;
1320
		bool is_basic;
1321 1322 1323 1324 1325 1326
		if (i < elems->supp_rates_len)
			rate = elems->supp_rates[i];
		else if (elems->ext_supp_rates)
			rate = elems->ext_supp_rates
				[i - elems->supp_rates_len];
		own_rate = 5 * (rate & 0x7f);
1327 1328 1329 1330 1331 1332 1333
		is_basic = !!(rate & 0x80);

		if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
			continue;

		for (j = 0; j < num_rates; j++) {
			if (bitrates[j].bitrate == own_rate) {
1334
				supp_rates |= BIT(j);
1335 1336 1337 1338
				if (basic_rates && is_basic)
					*basic_rates |= BIT(j);
			}
		}
1339 1340 1341
	}
	return supp_rates;
}
1342

1343 1344 1345
void ieee80211_stop_device(struct ieee80211_local *local)
{
	ieee80211_led_radio(local, false);
1346
	ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1347 1348 1349 1350

	cancel_work_sync(&local->reconfig_filter);

	flush_workqueue(local->workqueue);
1351
	drv_stop(local);
1352 1353
}

1354 1355 1356 1357
int ieee80211_reconfig(struct ieee80211_local *local)
{
	struct ieee80211_hw *hw = &local->hw;
	struct ieee80211_sub_if_data *sdata;
J
Johannes Berg 已提交
1358
	struct ieee80211_chanctx *ctx;
1359
	struct sta_info *sta;
1360
	int res, i;
1361

1362
#ifdef CONFIG_PM
J
Johannes Berg 已提交
1363 1364
	if (local->suspended)
		local->resuming = true;
1365

1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381
	if (local->wowlan) {
		local->wowlan = false;
		res = drv_resume(local);
		if (res < 0) {
			local->resuming = false;
			return res;
		}
		if (res == 0)
			goto wake_up;
		WARN_ON(res > 1);
		/*
		 * res is 1, which means the driver requested
		 * to go through a regular reset on wakeup.
		 */
	}
#endif
1382 1383 1384
	/* everything else happens only if HW was up & running */
	if (!local->open_count)
		goto wake_up;
1385

1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397
	/*
	 * Upon resume hardware can sometimes be goofy due to
	 * various platform / driver / bus issues, so restarting
	 * the device may at times not work immediately. Propagate
	 * the error.
	 */
	res = drv_start(local);
	if (res) {
		WARN(local->suspended, "Hardware became unavailable "
		     "upon resume. This could be a software issue "
		     "prior to suspend or a hardware issue.\n");
		return res;
1398 1399
	}

1400 1401 1402 1403 1404 1405 1406 1407 1408
	/* setup fragmentation threshold */
	drv_set_frag_threshold(local, hw->wiphy->frag_threshold);

	/* setup RTS threshold */
	drv_set_rts_threshold(local, hw->wiphy->rts_threshold);

	/* reset coverage class */
	drv_set_coverage_class(local, hw->wiphy->coverage_class);

1409 1410 1411 1412
	ieee80211_led_radio(local, true);
	ieee80211_mod_tpt_led_trig(local,
				   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);

1413
	/* add interfaces */
1414 1415 1416 1417 1418 1419 1420 1421 1422 1423
	sdata = rtnl_dereference(local->monitor_sdata);
	if (sdata) {
		res = drv_add_interface(local, sdata);
		if (WARN_ON(res)) {
			rcu_assign_pointer(local->monitor_sdata, NULL);
			synchronize_net();
			kfree(sdata);
		}
	}

1424 1425 1426
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
		    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1427
		    ieee80211_sdata_running(sdata))
1428
			res = drv_add_interface(local, sdata);
1429 1430
	}

J
Johannes Berg 已提交
1431
	/* add channel contexts */
1432 1433 1434 1435 1436 1437
	if (local->use_chanctx) {
		mutex_lock(&local->chanctx_mtx);
		list_for_each_entry(ctx, &local->chanctx_list, list)
			WARN_ON(drv_add_chanctx(local, ctx));
		mutex_unlock(&local->chanctx_mtx);
	}
J
Johannes Berg 已提交
1438

1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455
	list_for_each_entry(sdata, &local->interfaces, list) {
		struct ieee80211_chanctx_conf *ctx_conf;

		if (!ieee80211_sdata_running(sdata))
			continue;

		mutex_lock(&local->chanctx_mtx);
		ctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
				lockdep_is_held(&local->chanctx_mtx));
		if (ctx_conf) {
			ctx = container_of(ctx_conf, struct ieee80211_chanctx,
					   conf);
			drv_assign_vif_chanctx(local, sdata, ctx);
		}
		mutex_unlock(&local->chanctx_mtx);
	}

1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470
	sdata = rtnl_dereference(local->monitor_sdata);
	if (sdata && local->use_chanctx && ieee80211_sdata_running(sdata)) {
		struct ieee80211_chanctx_conf *ctx_conf;

		mutex_lock(&local->chanctx_mtx);
		ctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
				lockdep_is_held(&local->chanctx_mtx));
		if (ctx_conf) {
			ctx = container_of(ctx_conf, struct ieee80211_chanctx,
					   conf);
			drv_assign_vif_chanctx(local, sdata, ctx);
		}
		mutex_unlock(&local->chanctx_mtx);
	}

1471
	/* add STAs back */
1472 1473
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
1474
		enum ieee80211_sta_state state;
J
Johannes Berg 已提交
1475

1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486
		if (!sta->uploaded)
			continue;

		/* AP-mode stations will be added later */
		if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
1487
	}
1488
	mutex_unlock(&local->sta_mtx);
1489

1490
	/* reconfigure tx conf */
1491 1492 1493 1494 1495 1496
	if (hw->queues >= IEEE80211_NUM_ACS) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
			    sdata->vif.type == NL80211_IFTYPE_MONITOR ||
			    !ieee80211_sdata_running(sdata))
				continue;
1497

1498 1499 1500 1501
			for (i = 0; i < IEEE80211_NUM_ACS; i++)
				drv_conf_tx(local, sdata, i,
					    &sdata->tx_conf[i]);
		}
1502
	}
1503

1504 1505 1506 1507 1508 1509 1510
	/* reconfigure hardware */
	ieee80211_hw_config(local, ~0);

	ieee80211_configure_filter(local);

	/* Finally also reconfigure all the BSS information */
	list_for_each_entry(sdata, &local->interfaces, list) {
1511 1512
		u32 changed;

1513
		if (!ieee80211_sdata_running(sdata))
1514
			continue;
1515 1516 1517 1518 1519 1520 1521 1522 1523

		/* common change flags for all interface types */
		changed = BSS_CHANGED_ERP_CTS_PROT |
			  BSS_CHANGED_ERP_PREAMBLE |
			  BSS_CHANGED_ERP_SLOT |
			  BSS_CHANGED_HT |
			  BSS_CHANGED_BASIC_RATES |
			  BSS_CHANGED_BEACON_INT |
			  BSS_CHANGED_BSSID |
1524
			  BSS_CHANGED_CQM |
1525
			  BSS_CHANGED_QOS |
1526 1527
			  BSS_CHANGED_IDLE |
			  BSS_CHANGED_TXPOWER;
1528

1529 1530 1531 1532 1533
#ifdef CONFIG_PM
		if (local->resuming)
			sdata->vif.bss_conf = sdata->suspend_bss_conf;
#endif

1534 1535
		switch (sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
1536
			changed |= BSS_CHANGED_ASSOC |
E
Eliad Peller 已提交
1537 1538
				   BSS_CHANGED_ARP_FILTER |
				   BSS_CHANGED_PS;
1539
			mutex_lock(&sdata->u.mgd.mtx);
1540
			ieee80211_bss_info_change_notify(sdata, changed);
1541
			mutex_unlock(&sdata->u.mgd.mtx);
1542
			break;
1543
		case NL80211_IFTYPE_ADHOC:
1544 1545
			changed |= BSS_CHANGED_IBSS;
			/* fall through */
1546
		case NL80211_IFTYPE_AP:
1547
			changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
1548

1549
			if (sdata->vif.type == NL80211_IFTYPE_AP) {
1550 1551
				changed |= BSS_CHANGED_AP_PROBE_RESP;

1552 1553 1554 1555
				if (rcu_access_pointer(sdata->u.ap.beacon))
					drv_start_ap(local, sdata);
			}

1556
			/* fall through */
1557
		case NL80211_IFTYPE_MESH_POINT:
1558 1559
			changed |= BSS_CHANGED_BEACON |
				   BSS_CHANGED_BEACON_ENABLED;
1560
			ieee80211_bss_info_change_notify(sdata, changed);
1561 1562 1563 1564 1565 1566 1567
			break;
		case NL80211_IFTYPE_WDS:
			break;
		case NL80211_IFTYPE_AP_VLAN:
		case NL80211_IFTYPE_MONITOR:
			/* ignore virtual */
			break;
1568
		case NL80211_IFTYPE_P2P_DEVICE:
1569 1570
			changed = BSS_CHANGED_IDLE;
			break;
1571
		case NL80211_IFTYPE_UNSPECIFIED:
1572
		case NUM_NL80211_IFTYPES:
1573 1574
		case NL80211_IFTYPE_P2P_CLIENT:
		case NL80211_IFTYPE_P2P_GO:
1575 1576 1577 1578 1579
			WARN_ON(1);
			break;
		}
	}

1580 1581
	ieee80211_recalc_ps(local, -1);

1582 1583 1584 1585 1586 1587 1588 1589 1590 1591
	/*
	 * The sta might be in psm against the ap (e.g. because
	 * this was the state before a hw restart), so we
	 * explicitly send a null packet in order to make sure
	 * it'll sync against the ap (and get out of psm).
	 */
	if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
		list_for_each_entry(sdata, &local->interfaces, list) {
			if (sdata->vif.type != NL80211_IFTYPE_STATION)
				continue;
1592 1593
			if (!sdata->u.mgd.associated)
				continue;
1594 1595 1596 1597 1598

			ieee80211_send_nullfunc(local, sdata, 0);
		}
	}

1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616
	/* APs are now beaconing, add back stations */
	mutex_lock(&local->sta_mtx);
	list_for_each_entry(sta, &local->sta_list, list) {
		enum ieee80211_sta_state state;

		if (!sta->uploaded)
			continue;

		if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
			continue;

		for (state = IEEE80211_STA_NOTEXIST;
		     state < sta->sta_state; state++)
			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
					      state + 1));
	}
	mutex_unlock(&local->sta_mtx);

1617 1618 1619 1620 1621
	/* add back keys */
	list_for_each_entry(sdata, &local->interfaces, list)
		if (ieee80211_sdata_running(sdata))
			ieee80211_enable_keys(sdata);

1622
 wake_up:
1623 1624 1625
	local->in_reconfig = false;
	barrier();

1626 1627 1628 1629 1630 1631 1632 1633 1634 1635
	/*
	 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
	 * sessions can be established after a resume.
	 *
	 * Also tear down aggregation sessions since reconfiguring
	 * them in a hardware restart scenario is not easily done
	 * right now, and the hardware will have lost information
	 * about the sessions, but we and the AP still think they
	 * are active. This is really a workaround though.
	 */
1636
	if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1637 1638 1639
		mutex_lock(&local->sta_mtx);

		list_for_each_entry(sta, &local->sta_list, list) {
1640
			ieee80211_sta_tear_down_BA_sessions(sta, true);
J
Johannes Berg 已提交
1641
			clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1642
		}
1643 1644

		mutex_unlock(&local->sta_mtx);
1645 1646
	}

1647 1648 1649
	ieee80211_wake_queues_by_reason(hw,
			IEEE80211_QUEUE_STOP_REASON_SUSPEND);

1650 1651 1652 1653
	/*
	 * If this is for hw restart things are still running.
	 * We may want to change that later, however.
	 */
1654 1655
	if (!local->suspended) {
		drv_restart_complete(local);
1656
		return 0;
1657
	}
1658 1659

#ifdef CONFIG_PM
J
Johannes Berg 已提交
1660
	/* first set suspended false, then resuming */
1661
	local->suspended = false;
J
Johannes Berg 已提交
1662 1663
	mb();
	local->resuming = false;
1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680

	list_for_each_entry(sdata, &local->interfaces, list) {
		switch(sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
			ieee80211_sta_restart(sdata);
			break;
		case NL80211_IFTYPE_ADHOC:
			ieee80211_ibss_restart(sdata);
			break;
		case NL80211_IFTYPE_MESH_POINT:
			ieee80211_mesh_restart(sdata);
			break;
		default:
			break;
		}
	}

1681
	mod_timer(&local->sta_cleanup, jiffies + 1);
1682

1683
	mutex_lock(&local->sta_mtx);
1684 1685
	list_for_each_entry(sta, &local->sta_list, list)
		mesh_plink_restart(sta);
1686
	mutex_unlock(&local->sta_mtx);
1687 1688 1689
#else
	WARN_ON(1);
#endif
1690 1691
	return 0;
}
1692

1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719
void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata;
	struct ieee80211_local *local;
	struct ieee80211_key *key;

	if (WARN_ON(!vif))
		return;

	sdata = vif_to_sdata(vif);
	local = sdata->local;

	if (WARN_ON(!local->resuming))
		return;

	if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
		return;

	sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;

	mutex_lock(&local->key_mtx);
	list_for_each_entry(key, &sdata->key_list, list)
		key->flags |= KEY_FLAG_TAINTED;
	mutex_unlock(&local->key_mtx);
}
EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);

1720
void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
1721
{
1722 1723 1724
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_chanctx_conf *chanctx_conf;
	struct ieee80211_chanctx *chanctx;
1725

1726
	mutex_lock(&local->chanctx_mtx);
1727

1728 1729
	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
					lockdep_is_held(&local->chanctx_mtx));
1730

1731
	if (WARN_ON_ONCE(!chanctx_conf))
1732
		goto unlock;
1733

1734 1735
	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
	ieee80211_recalc_smps_chanctx(local, chanctx);
1736
 unlock:
1737
	mutex_unlock(&local->chanctx_mtx);
1738
}
1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794

static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
{
	int i;

	for (i = 0; i < n_ids; i++)
		if (ids[i] == id)
			return true;
	return false;
}

/**
 * ieee80211_ie_split - split an IE buffer according to ordering
 *
 * @ies: the IE buffer
 * @ielen: the length of the IE buffer
 * @ids: an array with element IDs that are allowed before
 *	the split
 * @n_ids: the size of the element ID array
 * @offset: offset where to start splitting in the buffer
 *
 * This function splits an IE buffer by updating the @offset
 * variable to point to the location where the buffer should be
 * split.
 *
 * It assumes that the given IE buffer is well-formed, this
 * has to be guaranteed by the caller!
 *
 * It also assumes that the IEs in the buffer are ordered
 * correctly, if not the result of using this function will not
 * be ordered correctly either, i.e. it does no reordering.
 *
 * The function returns the offset where the next part of the
 * buffer starts, which may be @ielen if the entire (remainder)
 * of the buffer should be used.
 */
size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
			  const u8 *ids, int n_ids, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
		pos += 2 + ies[pos + 1];

	return pos;
}

size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
{
	size_t pos = offset;

	while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
		pos += 2 + ies[pos + 1];

	return pos;
}
1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834

static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
					    int rssi_min_thold,
					    int rssi_max_thold)
{
	trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);

	if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
		return;

	/*
	 * Scale up threshold values before storing it, as the RSSI averaging
	 * algorithm uses a scaled up value as well. Change this scaling
	 * factor if the RSSI averaging algorithm changes.
	 */
	sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
	sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
}

void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
				    int rssi_min_thold,
				    int rssi_max_thold)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	WARN_ON(rssi_min_thold == rssi_max_thold ||
		rssi_min_thold > rssi_max_thold);

	_ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
				       rssi_max_thold);
}
EXPORT_SYMBOL(ieee80211_enable_rssi_reports);

void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);

	_ieee80211_enable_rssi_reports(sdata, 0, 0);
}
EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1835

B
Ben Greear 已提交
1836
u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850
			      u16 cap)
{
	__le16 tmp;

	*pos++ = WLAN_EID_HT_CAPABILITY;
	*pos++ = sizeof(struct ieee80211_ht_cap);
	memset(pos, 0, sizeof(struct ieee80211_ht_cap));

	/* capability flags */
	tmp = cpu_to_le16(cap);
	memcpy(pos, &tmp, sizeof(u16));
	pos += sizeof(u16);

	/* AMPDU parameters */
B
Ben Greear 已提交
1851 1852
	*pos++ = ht_cap->ampdu_factor |
		 (ht_cap->ampdu_density <<
1853 1854 1855
			IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);

	/* MCS set */
B
Ben Greear 已提交
1856 1857
	memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
	pos += sizeof(ht_cap->mcs);
1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870

	/* extended capabilities */
	pos += sizeof(__le16);

	/* BF capabilities */
	pos += sizeof(__le32);

	/* antenna selection */
	pos += sizeof(u8);

	return pos;
}

1871
u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
1872
			       u32 cap)
1873 1874 1875 1876
{
	__le32 tmp;

	*pos++ = WLAN_EID_VHT_CAPABILITY;
M
Mahesh Palivela 已提交
1877 1878
	*pos++ = sizeof(struct ieee80211_vht_cap);
	memset(pos, 0, sizeof(struct ieee80211_vht_cap));
1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891

	/* capability flags */
	tmp = cpu_to_le32(cap);
	memcpy(pos, &tmp, sizeof(u32));
	pos += sizeof(u32);

	/* VHT MCS set */
	memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
	pos += sizeof(vht_cap->vht_mcs);

	return pos;
}

1892
u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1893
			       const struct cfg80211_chan_def *chandef,
1894
			       u16 prot_mode)
1895
{
1896
	struct ieee80211_ht_operation *ht_oper;
1897
	/* Build HT Information */
1898 1899 1900
	*pos++ = WLAN_EID_HT_OPERATION;
	*pos++ = sizeof(struct ieee80211_ht_operation);
	ht_oper = (struct ieee80211_ht_operation *)pos;
1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911
	ht_oper->primary_chan = ieee80211_frequency_to_channel(
					chandef->chan->center_freq);
	switch (chandef->width) {
	case NL80211_CHAN_WIDTH_160:
	case NL80211_CHAN_WIDTH_80P80:
	case NL80211_CHAN_WIDTH_80:
	case NL80211_CHAN_WIDTH_40:
		if (chandef->center_freq1 > chandef->chan->center_freq)
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
		else
			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1912 1913
		break;
	default:
1914
		ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1915 1916
		break;
	}
1917
	if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
1918 1919
	    chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
	    chandef->width != NL80211_CHAN_WIDTH_20)
1920
		ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
1921

1922
	ht_oper->operation_mode = cpu_to_le16(prot_mode);
1923
	ht_oper->stbc_param = 0x0000;
1924 1925 1926

	/* It seems that Basic MCS set and Supported MCS set
	   are identical for the first 10 bytes */
1927 1928
	memset(&ht_oper->basic_set, 0, 16);
	memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
1929

1930
	return pos + sizeof(struct ieee80211_ht_operation);
1931 1932
}

1933 1934 1935
void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
				  struct ieee80211_ht_operation *ht_oper,
				  struct cfg80211_chan_def *chandef)
1936 1937 1938
{
	enum nl80211_channel_type channel_type;

1939 1940 1941 1942 1943
	if (!ht_oper) {
		cfg80211_chandef_create(chandef, control_chan,
					NL80211_CHAN_NO_HT);
		return;
	}
1944

1945
	switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958
	case IEEE80211_HT_PARAM_CHA_SEC_NONE:
		channel_type = NL80211_CHAN_HT20;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
		channel_type = NL80211_CHAN_HT40PLUS;
		break;
	case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
		channel_type = NL80211_CHAN_HT40MINUS;
		break;
	default:
		channel_type = NL80211_CHAN_NO_HT;
	}

1959
	cfg80211_chandef_create(chandef, control_chan, channel_type);
1960 1961
}

1962
int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
1963 1964
			    struct sk_buff *skb, bool need_basic,
			    enum ieee80211_band band)
1965 1966 1967 1968 1969
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, rates, *pos;
1970
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
1971

1972
	sband = local->hw.wiphy->bands[band];
1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983
	rates = sband->n_bitrates;
	if (rates > 8)
		rates = 8;

	if (skb_tailroom(skb) < rates + 2)
		return -ENOMEM;

	pos = skb_put(skb, rates + 2);
	*pos++ = WLAN_EID_SUPP_RATES;
	*pos++ = rates;
	for (i = 0; i < rates; i++) {
1984 1985 1986
		u8 basic = 0;
		if (need_basic && basic_rates & BIT(i))
			basic = 0x80;
1987
		rate = sband->bitrates[i].bitrate;
1988
		*pos++ = basic | (u8) (rate / 5);
1989 1990 1991 1992 1993
	}

	return 0;
}

1994
int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
1995 1996
				struct sk_buff *skb, bool need_basic,
				enum ieee80211_band band)
1997 1998 1999 2000 2001
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_supported_band *sband;
	int rate;
	u8 i, exrates, *pos;
2002
	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2003

2004
	sband = local->hw.wiphy->bands[band];
2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018
	exrates = sband->n_bitrates;
	if (exrates > 8)
		exrates -= 8;
	else
		exrates = 0;

	if (skb_tailroom(skb) < exrates + 2)
		return -ENOMEM;

	if (exrates) {
		pos = skb_put(skb, exrates + 2);
		*pos++ = WLAN_EID_EXT_SUPP_RATES;
		*pos++ = exrates;
		for (i = 8; i < sband->n_bitrates; i++) {
2019 2020 2021
			u8 basic = 0;
			if (need_basic && basic_rates & BIT(i))
				basic = 0x80;
2022
			rate = sband->bitrates[i].bitrate;
2023
			*pos++ = basic | (u8) (rate / 5);
2024 2025 2026 2027
		}
	}
	return 0;
}
2028 2029 2030 2031 2032 2033

int ieee80211_ave_rssi(struct ieee80211_vif *vif)
{
	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;

2034 2035 2036 2037
	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
		/* non-managed type inferfaces */
		return 0;
	}
2038 2039
	return ifmgd->ave_beacon_signal;
}
2040
EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056

u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
{
	if (!mcs)
		return 1;

	/* TODO: consider rx_highest */

	if (mcs->rx_mask[3])
		return 4;
	if (mcs->rx_mask[2])
		return 3;
	if (mcs->rx_mask[1])
		return 2;
	return 1;
}
2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090

/**
 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
 * @local: mac80211 hw info struct
 * @status: RX status
 * @mpdu_len: total MPDU length (including FCS)
 * @mpdu_offset: offset into MPDU to calculate timestamp at
 *
 * This function calculates the RX timestamp at the given MPDU offset, taking
 * into account what the RX timestamp was. An offset of 0 will just normalize
 * the timestamp to TSF at beginning of MPDU reception.
 */
u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
				     struct ieee80211_rx_status *status,
				     unsigned int mpdu_len,
				     unsigned int mpdu_offset)
{
	u64 ts = status->mactime;
	struct rate_info ri;
	u16 rate;

	if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
		return 0;

	memset(&ri, 0, sizeof(ri));

	/* Fill cfg80211 rate info */
	if (status->flag & RX_FLAG_HT) {
		ri.mcs = status->rate_idx;
		ri.flags |= RATE_INFO_FLAGS_MCS;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102 2103 2104
	} else if (status->flag & RX_FLAG_VHT) {
		ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
		ri.mcs = status->rate_idx;
		ri.nss = status->vht_nss;
		if (status->flag & RX_FLAG_40MHZ)
			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_80P80MHZ)
			ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
		if (status->flag & RX_FLAG_160MHZ)
			ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
		if (status->flag & RX_FLAG_SHORT_GI)
			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121
	} else {
		struct ieee80211_supported_band *sband;

		sband = local->hw.wiphy->bands[status->band];
		ri.legacy = sband->bitrates[status->rate_idx].bitrate;
	}

	rate = cfg80211_calculate_bitrate(&ri);

	/* rewind from end of MPDU */
	if (status->flag & RX_FLAG_MACTIME_END)
		ts -= mpdu_len * 8 * 10 / rate;

	ts += mpdu_offset * 8 * 10 / rate;

	return ts;
}