1 // SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause 2 /* 3 * Copyright (C) 2012-2014, 2018-2025 Intel Corporation 4 * Copyright (C) 2013-2015 Intel Mobile Communications GmbH 5 * Copyright (C) 2016-2017 Intel Deutschland GmbH 6 */ 7 #include <linux/etherdevice.h> 8 #include <linux/ip.h> 9 #include <linux/fs.h> 10 #include <net/cfg80211.h> 11 #include <net/ipv6.h> 12 #include <net/tcp.h> 13 #include <net/addrconf.h> 14 #include "iwl-modparams.h" 15 #include "fw-api.h" 16 #include "mvm.h" 17 #include "fw/img.h" 18 19 void iwl_mvm_set_rekey_data(struct ieee80211_hw *hw, 20 struct ieee80211_vif *vif, 21 struct cfg80211_gtk_rekey_data *data) 22 { 23 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 24 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 25 26 mutex_lock(&mvm->mutex); 27 28 mvmvif->rekey_data.kek_len = data->kek_len; 29 mvmvif->rekey_data.kck_len = data->kck_len; 30 memcpy(mvmvif->rekey_data.kek, data->kek, data->kek_len); 31 memcpy(mvmvif->rekey_data.kck, data->kck, data->kck_len); 32 mvmvif->rekey_data.akm = data->akm & 0xFF; 33 mvmvif->rekey_data.replay_ctr = 34 cpu_to_le64(be64_to_cpup((const __be64 *)data->replay_ctr)); 35 mvmvif->rekey_data.valid = true; 36 37 mutex_unlock(&mvm->mutex); 38 } 39 40 #if IS_ENABLED(CONFIG_IPV6) 41 void iwl_mvm_ipv6_addr_change(struct ieee80211_hw *hw, 42 struct ieee80211_vif *vif, 43 struct inet6_dev *idev) 44 { 45 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 46 struct inet6_ifaddr *ifa; 47 int idx = 0; 48 49 memset(mvmvif->tentative_addrs, 0, sizeof(mvmvif->tentative_addrs)); 50 51 read_lock_bh(&idev->lock); 52 list_for_each_entry(ifa, &idev->addr_list, if_list) { 53 mvmvif->target_ipv6_addrs[idx] = ifa->addr; 54 if (ifa->flags & IFA_F_TENTATIVE) 55 __set_bit(idx, mvmvif->tentative_addrs); 56 idx++; 57 if (idx >= IWL_PROTO_OFFLOAD_NUM_IPV6_ADDRS_MAX) 58 break; 59 } 60 read_unlock_bh(&idev->lock); 61 62 mvmvif->num_target_ipv6_addrs = idx; 63 } 64 #endif 65 66 void iwl_mvm_set_default_unicast_key(struct ieee80211_hw *hw, 67 struct ieee80211_vif *vif, int idx) 68 { 69 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 70 71 mvmvif->tx_key_idx = idx; 72 } 73 74 static void iwl_mvm_convert_p1k(u16 *p1k, __le16 *out) 75 { 76 int i; 77 78 for (i = 0; i < IWL_P1K_SIZE; i++) 79 out[i] = cpu_to_le16(p1k[i]); 80 } 81 82 static const u8 *iwl_mvm_find_max_pn(struct ieee80211_key_conf *key, 83 struct iwl_mvm_key_pn *ptk_pn, 84 struct ieee80211_key_seq *seq, 85 int tid, int queues) 86 { 87 const u8 *ret = seq->ccmp.pn; 88 int i; 89 90 /* get the PN from mac80211, used on the default queue */ 91 ieee80211_get_key_rx_seq(key, tid, seq); 92 93 /* and use the internal data for the other queues */ 94 for (i = 1; i < queues; i++) { 95 const u8 *tmp = ptk_pn->q[i].pn[tid]; 96 97 if (memcmp(ret, tmp, IEEE80211_CCMP_PN_LEN) <= 0) 98 ret = tmp; 99 } 100 101 return ret; 102 } 103 104 struct wowlan_key_reprogram_data { 105 bool error; 106 int wep_key_idx; 107 }; 108 109 static void iwl_mvm_wowlan_program_keys(struct ieee80211_hw *hw, 110 struct ieee80211_vif *vif, 111 struct ieee80211_sta *sta, 112 struct ieee80211_key_conf *key, 113 void *_data) 114 { 115 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 116 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 117 struct wowlan_key_reprogram_data *data = _data; 118 int ret; 119 120 switch (key->cipher) { 121 case WLAN_CIPHER_SUITE_WEP40: 122 case WLAN_CIPHER_SUITE_WEP104: { /* hack it for now */ 123 DEFINE_RAW_FLEX(struct iwl_mvm_wep_key_cmd, wkc, wep_key, 1); 124 struct iwl_mvm_wep_key *wep_key = wkc->wep_key; 125 126 wkc->mac_id_n_color = 127 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 128 mvmvif->color)); 129 wkc->num_keys = 1; 130 /* firmware sets STA_KEY_FLG_WEP_13BYTES */ 131 wkc->decryption_type = STA_KEY_FLG_WEP; 132 wep_key->key_index = key->keyidx; 133 wep_key->key_size = key->keylen; 134 135 /* 136 * This will fail -- the key functions don't set support 137 * pairwise WEP keys. However, that's better than silently 138 * failing WoWLAN. Or maybe not? 139 */ 140 if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) 141 break; 142 143 memcpy(&wep_key->key[3], key->key, key->keylen); 144 if (key->keyidx == mvmvif->tx_key_idx) { 145 /* TX key must be at offset 0 */ 146 wep_key->key_offset = 0; 147 } else { 148 /* others start at 1 */ 149 data->wep_key_idx++; 150 wep_key->key_offset = data->wep_key_idx; 151 } 152 153 mutex_lock(&mvm->mutex); 154 ret = iwl_mvm_send_cmd_pdu(mvm, WEP_KEY, 0, 155 __struct_size(wkc), wkc); 156 data->error = ret != 0; 157 158 mvm->ptk_ivlen = key->iv_len; 159 mvm->ptk_icvlen = key->icv_len; 160 mvm->gtk_ivlen = key->iv_len; 161 mvm->gtk_icvlen = key->icv_len; 162 mutex_unlock(&mvm->mutex); 163 164 /* don't upload key again */ 165 return; 166 } 167 default: 168 data->error = true; 169 return; 170 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 171 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 172 return; 173 case WLAN_CIPHER_SUITE_AES_CMAC: 174 /* 175 * Ignore CMAC keys -- the WoWLAN firmware doesn't support them 176 * but we also shouldn't abort suspend due to that. It does have 177 * support for the IGTK key renewal, but doesn't really use the 178 * IGTK for anything. This means we could spuriously wake up or 179 * be deauthenticated, but that was considered acceptable. 180 */ 181 return; 182 case WLAN_CIPHER_SUITE_TKIP: 183 case WLAN_CIPHER_SUITE_CCMP: 184 case WLAN_CIPHER_SUITE_GCMP: 185 case WLAN_CIPHER_SUITE_GCMP_256: 186 break; 187 } 188 189 mutex_lock(&mvm->mutex); 190 /* 191 * The D3 firmware hardcodes the key offset 0 as the key it 192 * uses to transmit packets to the AP, i.e. the PTK. 193 */ 194 if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) { 195 mvm->ptk_ivlen = key->iv_len; 196 mvm->ptk_icvlen = key->icv_len; 197 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, 0); 198 } else { 199 /* 200 * firmware only supports TSC/RSC for a single key, 201 * so if there are multiple keep overwriting them 202 * with new ones -- this relies on mac80211 doing 203 * list_add_tail(). 204 */ 205 mvm->gtk_ivlen = key->iv_len; 206 mvm->gtk_icvlen = key->icv_len; 207 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, 1); 208 } 209 mutex_unlock(&mvm->mutex); 210 data->error = ret != 0; 211 } 212 213 struct wowlan_key_rsc_tsc_data { 214 struct iwl_wowlan_rsc_tsc_params_cmd_v4 *rsc_tsc; 215 bool have_rsc_tsc; 216 }; 217 218 static void iwl_mvm_wowlan_get_rsc_tsc_data(struct ieee80211_hw *hw, 219 struct ieee80211_vif *vif, 220 struct ieee80211_sta *sta, 221 struct ieee80211_key_conf *key, 222 void *_data) 223 { 224 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 225 struct wowlan_key_rsc_tsc_data *data = _data; 226 struct aes_sc *aes_sc; 227 struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL; 228 struct ieee80211_key_seq seq; 229 int i; 230 231 switch (key->cipher) { 232 default: 233 break; 234 case WLAN_CIPHER_SUITE_TKIP: 235 if (sta) { 236 u64 pn64; 237 238 tkip_sc = 239 data->rsc_tsc->params.all_tsc_rsc.tkip.unicast_rsc; 240 tkip_tx_sc = 241 &data->rsc_tsc->params.all_tsc_rsc.tkip.tsc; 242 243 pn64 = atomic64_read(&key->tx_pn); 244 tkip_tx_sc->iv16 = cpu_to_le16(TKIP_PN_TO_IV16(pn64)); 245 tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64)); 246 } else { 247 tkip_sc = 248 data->rsc_tsc->params.all_tsc_rsc.tkip.multicast_rsc; 249 } 250 251 /* 252 * For non-QoS this relies on the fact that both the uCode and 253 * mac80211 use TID 0 (as they need to to avoid replay attacks) 254 * for checking the IV in the frames. 255 */ 256 for (i = 0; i < IWL_NUM_RSC; i++) { 257 ieee80211_get_key_rx_seq(key, i, &seq); 258 tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16); 259 tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32); 260 } 261 262 data->have_rsc_tsc = true; 263 break; 264 case WLAN_CIPHER_SUITE_CCMP: 265 case WLAN_CIPHER_SUITE_GCMP: 266 case WLAN_CIPHER_SUITE_GCMP_256: 267 if (sta) { 268 struct aes_sc *aes_tx_sc; 269 u64 pn64; 270 271 aes_sc = 272 data->rsc_tsc->params.all_tsc_rsc.aes.unicast_rsc; 273 aes_tx_sc = 274 &data->rsc_tsc->params.all_tsc_rsc.aes.tsc; 275 276 pn64 = atomic64_read(&key->tx_pn); 277 aes_tx_sc->pn = cpu_to_le64(pn64); 278 } else { 279 aes_sc = 280 data->rsc_tsc->params.all_tsc_rsc.aes.multicast_rsc; 281 } 282 283 /* 284 * For non-QoS this relies on the fact that both the uCode and 285 * mac80211/our RX code use TID 0 for checking the PN. 286 */ 287 if (sta && iwl_mvm_has_new_rx_api(mvm)) { 288 struct iwl_mvm_sta *mvmsta; 289 struct iwl_mvm_key_pn *ptk_pn; 290 const u8 *pn; 291 292 mvmsta = iwl_mvm_sta_from_mac80211(sta); 293 rcu_read_lock(); 294 ptk_pn = rcu_dereference(mvmsta->ptk_pn[key->keyidx]); 295 if (WARN_ON(!ptk_pn)) { 296 rcu_read_unlock(); 297 break; 298 } 299 300 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 301 pn = iwl_mvm_find_max_pn(key, ptk_pn, &seq, i, 302 mvm->trans->info.num_rxqs); 303 aes_sc[i].pn = cpu_to_le64((u64)pn[5] | 304 ((u64)pn[4] << 8) | 305 ((u64)pn[3] << 16) | 306 ((u64)pn[2] << 24) | 307 ((u64)pn[1] << 32) | 308 ((u64)pn[0] << 40)); 309 } 310 311 rcu_read_unlock(); 312 } else { 313 for (i = 0; i < IWL_NUM_RSC; i++) { 314 u8 *pn = seq.ccmp.pn; 315 316 ieee80211_get_key_rx_seq(key, i, &seq); 317 aes_sc[i].pn = cpu_to_le64((u64)pn[5] | 318 ((u64)pn[4] << 8) | 319 ((u64)pn[3] << 16) | 320 ((u64)pn[2] << 24) | 321 ((u64)pn[1] << 32) | 322 ((u64)pn[0] << 40)); 323 } 324 } 325 data->have_rsc_tsc = true; 326 break; 327 } 328 } 329 330 struct wowlan_key_rsc_v5_data { 331 struct iwl_wowlan_rsc_tsc_params_cmd *rsc; 332 bool have_rsc; 333 int gtks; 334 int gtk_ids[4]; 335 }; 336 337 static void iwl_mvm_wowlan_get_rsc_v5_data(struct ieee80211_hw *hw, 338 struct ieee80211_vif *vif, 339 struct ieee80211_sta *sta, 340 struct ieee80211_key_conf *key, 341 void *_data) 342 { 343 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 344 struct wowlan_key_rsc_v5_data *data = _data; 345 struct ieee80211_key_seq seq; 346 __le64 *rsc; 347 int i; 348 349 /* only for ciphers that can be PTK/GTK */ 350 switch (key->cipher) { 351 default: 352 return; 353 case WLAN_CIPHER_SUITE_TKIP: 354 case WLAN_CIPHER_SUITE_CCMP: 355 case WLAN_CIPHER_SUITE_GCMP: 356 case WLAN_CIPHER_SUITE_GCMP_256: 357 break; 358 } 359 360 if (sta) { 361 rsc = data->rsc->ucast_rsc; 362 } else { 363 if (WARN_ON(data->gtks >= ARRAY_SIZE(data->gtk_ids))) 364 return; 365 data->gtk_ids[data->gtks] = key->keyidx; 366 rsc = data->rsc->mcast_rsc[data->gtks % 2]; 367 if (WARN_ON(key->keyidx >= 368 ARRAY_SIZE(data->rsc->mcast_key_id_map))) 369 return; 370 data->rsc->mcast_key_id_map[key->keyidx] = data->gtks % 2; 371 if (data->gtks >= 2) { 372 int prev = data->gtks - 2; 373 int prev_idx = data->gtk_ids[prev]; 374 375 data->rsc->mcast_key_id_map[prev_idx] = 376 IWL_MCAST_KEY_MAP_INVALID; 377 } 378 data->gtks++; 379 } 380 381 switch (key->cipher) { 382 default: 383 WARN_ON(1); 384 break; 385 case WLAN_CIPHER_SUITE_TKIP: 386 387 /* 388 * For non-QoS this relies on the fact that both the uCode and 389 * mac80211 use TID 0 (as they need to to avoid replay attacks) 390 * for checking the IV in the frames. 391 */ 392 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 393 ieee80211_get_key_rx_seq(key, i, &seq); 394 395 rsc[i] = cpu_to_le64(((u64)seq.tkip.iv32 << 16) | 396 seq.tkip.iv16); 397 } 398 399 data->have_rsc = true; 400 break; 401 case WLAN_CIPHER_SUITE_CCMP: 402 case WLAN_CIPHER_SUITE_GCMP: 403 case WLAN_CIPHER_SUITE_GCMP_256: 404 /* 405 * For non-QoS this relies on the fact that both the uCode and 406 * mac80211/our RX code use TID 0 for checking the PN. 407 */ 408 if (sta) { 409 struct iwl_mvm_sta *mvmsta; 410 struct iwl_mvm_key_pn *ptk_pn; 411 const u8 *pn; 412 413 mvmsta = iwl_mvm_sta_from_mac80211(sta); 414 rcu_read_lock(); 415 ptk_pn = rcu_dereference(mvmsta->ptk_pn[key->keyidx]); 416 if (WARN_ON(!ptk_pn)) { 417 rcu_read_unlock(); 418 break; 419 } 420 421 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 422 pn = iwl_mvm_find_max_pn(key, ptk_pn, &seq, i, 423 mvm->trans->info.num_rxqs); 424 rsc[i] = cpu_to_le64((u64)pn[5] | 425 ((u64)pn[4] << 8) | 426 ((u64)pn[3] << 16) | 427 ((u64)pn[2] << 24) | 428 ((u64)pn[1] << 32) | 429 ((u64)pn[0] << 40)); 430 } 431 432 rcu_read_unlock(); 433 } else { 434 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 435 u8 *pn = seq.ccmp.pn; 436 437 ieee80211_get_key_rx_seq(key, i, &seq); 438 rsc[i] = cpu_to_le64((u64)pn[5] | 439 ((u64)pn[4] << 8) | 440 ((u64)pn[3] << 16) | 441 ((u64)pn[2] << 24) | 442 ((u64)pn[1] << 32) | 443 ((u64)pn[0] << 40)); 444 } 445 } 446 data->have_rsc = true; 447 break; 448 } 449 } 450 451 static int iwl_mvm_wowlan_config_rsc_tsc(struct iwl_mvm *mvm, 452 struct ieee80211_vif *vif, 453 struct iwl_mvm_vif_link_info *mvm_link) 454 { 455 int ver = iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_TSC_RSC_PARAM, 456 IWL_FW_CMD_VER_UNKNOWN); 457 int ret; 458 459 if (ver == 5) { 460 struct wowlan_key_rsc_v5_data data = {}; 461 int i; 462 463 data.rsc = kzalloc(sizeof(*data.rsc), GFP_KERNEL); 464 if (!data.rsc) 465 return -ENOMEM; 466 467 for (i = 0; i < ARRAY_SIZE(data.rsc->mcast_key_id_map); i++) 468 data.rsc->mcast_key_id_map[i] = 469 IWL_MCAST_KEY_MAP_INVALID; 470 data.rsc->sta_id = cpu_to_le32(mvm_link->ap_sta_id); 471 472 ieee80211_iter_keys(mvm->hw, vif, 473 iwl_mvm_wowlan_get_rsc_v5_data, 474 &data); 475 476 if (data.have_rsc) 477 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_TSC_RSC_PARAM, 478 CMD_ASYNC, sizeof(*data.rsc), 479 data.rsc); 480 else 481 ret = 0; 482 kfree(data.rsc); 483 } else if (ver == 4 || ver == 2 || ver == IWL_FW_CMD_VER_UNKNOWN) { 484 struct wowlan_key_rsc_tsc_data data = {}; 485 int size; 486 487 data.rsc_tsc = kzalloc(sizeof(*data.rsc_tsc), GFP_KERNEL); 488 if (!data.rsc_tsc) 489 return -ENOMEM; 490 491 if (ver == 4) { 492 size = sizeof(*data.rsc_tsc); 493 data.rsc_tsc->sta_id = 494 cpu_to_le32(mvm_link->ap_sta_id); 495 } else { 496 /* ver == 2 || ver == IWL_FW_CMD_VER_UNKNOWN */ 497 size = sizeof(data.rsc_tsc->params); 498 } 499 500 ieee80211_iter_keys(mvm->hw, vif, 501 iwl_mvm_wowlan_get_rsc_tsc_data, 502 &data); 503 504 if (data.have_rsc_tsc) 505 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_TSC_RSC_PARAM, 506 CMD_ASYNC, size, 507 data.rsc_tsc); 508 else 509 ret = 0; 510 kfree(data.rsc_tsc); 511 } else { 512 ret = 0; 513 WARN_ON_ONCE(1); 514 } 515 516 return ret; 517 } 518 519 struct wowlan_key_tkip_data { 520 struct iwl_wowlan_tkip_params_cmd tkip; 521 bool have_tkip_keys; 522 }; 523 524 static void iwl_mvm_wowlan_get_tkip_data(struct ieee80211_hw *hw, 525 struct ieee80211_vif *vif, 526 struct ieee80211_sta *sta, 527 struct ieee80211_key_conf *key, 528 void *_data) 529 { 530 struct wowlan_key_tkip_data *data = _data; 531 struct iwl_p1k_cache *rx_p1ks; 532 u8 *rx_mic_key; 533 struct ieee80211_key_seq seq; 534 u32 cur_rx_iv32 = 0; 535 u16 p1k[IWL_P1K_SIZE]; 536 int i; 537 538 switch (key->cipher) { 539 default: 540 break; 541 case WLAN_CIPHER_SUITE_TKIP: 542 if (sta) { 543 u64 pn64; 544 545 rx_p1ks = data->tkip.rx_uni; 546 547 pn64 = atomic64_read(&key->tx_pn); 548 549 ieee80211_get_tkip_p1k_iv(key, TKIP_PN_TO_IV32(pn64), 550 p1k); 551 iwl_mvm_convert_p1k(p1k, data->tkip.tx.p1k); 552 553 memcpy(data->tkip.mic_keys.tx, 554 &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY], 555 IWL_MIC_KEY_SIZE); 556 557 rx_mic_key = data->tkip.mic_keys.rx_unicast; 558 } else { 559 rx_p1ks = data->tkip.rx_multi; 560 rx_mic_key = data->tkip.mic_keys.rx_mcast; 561 } 562 563 for (i = 0; i < IWL_NUM_RSC; i++) { 564 ieee80211_get_key_rx_seq(key, i, &seq); 565 /* wrapping isn't allowed, AP must rekey */ 566 if (seq.tkip.iv32 > cur_rx_iv32) 567 cur_rx_iv32 = seq.tkip.iv32; 568 } 569 570 ieee80211_get_tkip_rx_p1k(key, vif->bss_conf.bssid, 571 cur_rx_iv32, p1k); 572 iwl_mvm_convert_p1k(p1k, rx_p1ks[0].p1k); 573 ieee80211_get_tkip_rx_p1k(key, vif->bss_conf.bssid, 574 cur_rx_iv32 + 1, p1k); 575 iwl_mvm_convert_p1k(p1k, rx_p1ks[1].p1k); 576 577 memcpy(rx_mic_key, 578 &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY], 579 IWL_MIC_KEY_SIZE); 580 581 data->have_tkip_keys = true; 582 break; 583 } 584 } 585 586 struct wowlan_key_gtk_type_iter { 587 struct iwl_wowlan_kek_kck_material_cmd_v4 *kek_kck_cmd; 588 }; 589 590 static void iwl_mvm_wowlan_gtk_type_iter(struct ieee80211_hw *hw, 591 struct ieee80211_vif *vif, 592 struct ieee80211_sta *sta, 593 struct ieee80211_key_conf *key, 594 void *_data) 595 { 596 struct wowlan_key_gtk_type_iter *data = _data; 597 __le32 *cipher = NULL; 598 599 if (key->keyidx == 4 || key->keyidx == 5) 600 cipher = &data->kek_kck_cmd->igtk_cipher; 601 if (key->keyidx == 6 || key->keyidx == 7) 602 cipher = &data->kek_kck_cmd->bigtk_cipher; 603 604 switch (key->cipher) { 605 default: 606 return; 607 case WLAN_CIPHER_SUITE_TKIP: 608 if (!sta) 609 data->kek_kck_cmd->gtk_cipher = 610 cpu_to_le32(STA_KEY_FLG_TKIP); 611 return; 612 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 613 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 614 if (cipher) 615 *cipher = cpu_to_le32(STA_KEY_FLG_GCMP); 616 return; 617 case WLAN_CIPHER_SUITE_AES_CMAC: 618 case WLAN_CIPHER_SUITE_BIP_CMAC_256: 619 if (cipher) 620 *cipher = cpu_to_le32(STA_KEY_FLG_CCM); 621 return; 622 case WLAN_CIPHER_SUITE_CCMP: 623 if (!sta) 624 data->kek_kck_cmd->gtk_cipher = 625 cpu_to_le32(STA_KEY_FLG_CCM); 626 return; 627 case WLAN_CIPHER_SUITE_GCMP: 628 case WLAN_CIPHER_SUITE_GCMP_256: 629 if (!sta) 630 data->kek_kck_cmd->gtk_cipher = 631 cpu_to_le32(STA_KEY_FLG_GCMP); 632 return; 633 } 634 } 635 636 static int iwl_mvm_send_patterns_v1(struct iwl_mvm *mvm, 637 struct cfg80211_wowlan *wowlan) 638 { 639 struct iwl_wowlan_patterns_cmd_v1 *pattern_cmd; 640 struct iwl_host_cmd cmd = { 641 .id = WOWLAN_PATTERNS, 642 .dataflags[0] = IWL_HCMD_DFL_NOCOPY, 643 }; 644 int i, err; 645 646 if (!wowlan->n_patterns) 647 return 0; 648 649 cmd.len[0] = struct_size(pattern_cmd, patterns, wowlan->n_patterns); 650 651 pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL); 652 if (!pattern_cmd) 653 return -ENOMEM; 654 655 pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns); 656 657 for (i = 0; i < wowlan->n_patterns; i++) { 658 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8); 659 660 memcpy(&pattern_cmd->patterns[i].mask, 661 wowlan->patterns[i].mask, mask_len); 662 memcpy(&pattern_cmd->patterns[i].pattern, 663 wowlan->patterns[i].pattern, 664 wowlan->patterns[i].pattern_len); 665 pattern_cmd->patterns[i].mask_size = mask_len; 666 pattern_cmd->patterns[i].pattern_size = 667 wowlan->patterns[i].pattern_len; 668 } 669 670 cmd.data[0] = pattern_cmd; 671 err = iwl_mvm_send_cmd(mvm, &cmd); 672 kfree(pattern_cmd); 673 return err; 674 } 675 676 static int iwl_mvm_send_patterns(struct iwl_mvm *mvm, 677 struct iwl_mvm_vif_link_info *mvm_link, 678 struct cfg80211_wowlan *wowlan) 679 { 680 struct iwl_wowlan_patterns_cmd *pattern_cmd; 681 struct iwl_host_cmd cmd = { 682 .id = WOWLAN_PATTERNS, 683 .dataflags[0] = IWL_HCMD_DFL_NOCOPY, 684 }; 685 int i, err; 686 int ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd.id, 687 IWL_FW_CMD_VER_UNKNOWN); 688 689 if (!wowlan->n_patterns) 690 return 0; 691 692 cmd.len[0] = sizeof(*pattern_cmd) + 693 wowlan->n_patterns * sizeof(struct iwl_wowlan_pattern_v2); 694 695 pattern_cmd = kzalloc(cmd.len[0], GFP_KERNEL); 696 if (!pattern_cmd) 697 return -ENOMEM; 698 699 pattern_cmd->n_patterns = wowlan->n_patterns; 700 if (ver >= 3) 701 pattern_cmd->sta_id = mvm_link->ap_sta_id; 702 703 for (i = 0; i < wowlan->n_patterns; i++) { 704 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8); 705 706 pattern_cmd->patterns[i].pattern_type = 707 WOWLAN_PATTERN_TYPE_BITMASK; 708 709 memcpy(&pattern_cmd->patterns[i].u.bitmask.mask, 710 wowlan->patterns[i].mask, mask_len); 711 memcpy(&pattern_cmd->patterns[i].u.bitmask.pattern, 712 wowlan->patterns[i].pattern, 713 wowlan->patterns[i].pattern_len); 714 pattern_cmd->patterns[i].u.bitmask.mask_size = mask_len; 715 pattern_cmd->patterns[i].u.bitmask.pattern_size = 716 wowlan->patterns[i].pattern_len; 717 } 718 719 cmd.data[0] = pattern_cmd; 720 err = iwl_mvm_send_cmd(mvm, &cmd); 721 kfree(pattern_cmd); 722 return err; 723 } 724 725 static int iwl_mvm_d3_reprogram(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 726 struct ieee80211_sta *ap_sta) 727 { 728 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 729 struct ieee80211_chanctx_conf *ctx; 730 u8 chains_static, chains_dynamic; 731 struct cfg80211_chan_def chandef, ap_def; 732 int ret, i; 733 struct iwl_binding_cmd_v1 binding_cmd = {}; 734 struct iwl_time_quota_cmd quota_cmd = {}; 735 struct iwl_time_quota_data *quota; 736 u32 status; 737 738 if (WARN_ON_ONCE(iwl_mvm_is_cdb_supported(mvm) || 739 ieee80211_vif_is_mld(vif))) 740 return -EINVAL; 741 742 /* add back the PHY */ 743 if (WARN_ON(!mvmvif->deflink.phy_ctxt)) 744 return -EINVAL; 745 746 rcu_read_lock(); 747 ctx = rcu_dereference(vif->bss_conf.chanctx_conf); 748 if (WARN_ON(!ctx)) { 749 rcu_read_unlock(); 750 return -EINVAL; 751 } 752 chandef = ctx->def; 753 ap_def = ctx->ap; 754 chains_static = ctx->rx_chains_static; 755 chains_dynamic = ctx->rx_chains_dynamic; 756 rcu_read_unlock(); 757 758 ret = iwl_mvm_phy_ctxt_add(mvm, mvmvif->deflink.phy_ctxt, &chandef, 759 &ap_def, chains_static, chains_dynamic); 760 if (ret) 761 return ret; 762 763 /* add back the MAC */ 764 mvmvif->uploaded = false; 765 766 if (WARN_ON(!vif->cfg.assoc)) 767 return -EINVAL; 768 769 ret = iwl_mvm_mac_ctxt_add(mvm, vif); 770 if (ret) 771 return ret; 772 773 /* add back binding - XXX refactor? */ 774 binding_cmd.id_and_color = 775 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->deflink.phy_ctxt->id, 776 mvmvif->deflink.phy_ctxt->color)); 777 binding_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 778 binding_cmd.phy = 779 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->deflink.phy_ctxt->id, 780 mvmvif->deflink.phy_ctxt->color)); 781 binding_cmd.macs[0] = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 782 mvmvif->color)); 783 for (i = 1; i < MAX_MACS_IN_BINDING; i++) 784 binding_cmd.macs[i] = cpu_to_le32(FW_CTXT_INVALID); 785 786 status = 0; 787 ret = iwl_mvm_send_cmd_pdu_status(mvm, BINDING_CONTEXT_CMD, 788 IWL_BINDING_CMD_SIZE_V1, &binding_cmd, 789 &status); 790 if (ret) { 791 IWL_ERR(mvm, "Failed to add binding: %d\n", ret); 792 return ret; 793 } 794 795 if (status) { 796 IWL_ERR(mvm, "Binding command failed: %u\n", status); 797 return -EIO; 798 } 799 800 ret = iwl_mvm_sta_send_to_fw(mvm, ap_sta, false, 0); 801 if (ret) 802 return ret; 803 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvmvif->deflink.ap_sta_id], 804 ap_sta); 805 806 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 807 if (ret) 808 return ret; 809 810 /* and some quota */ 811 quota = iwl_mvm_quota_cmd_get_quota(mvm, "a_cmd, 0); 812 quota->id_and_color = 813 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->deflink.phy_ctxt->id, 814 mvmvif->deflink.phy_ctxt->color)); 815 quota->quota = cpu_to_le32(IWL_MVM_MAX_QUOTA); 816 quota->max_duration = cpu_to_le32(IWL_MVM_MAX_QUOTA); 817 818 for (i = 1; i < MAX_BINDINGS; i++) { 819 quota = iwl_mvm_quota_cmd_get_quota(mvm, "a_cmd, i); 820 quota->id_and_color = cpu_to_le32(FW_CTXT_INVALID); 821 } 822 823 ret = iwl_mvm_send_cmd_pdu(mvm, TIME_QUOTA_CMD, 0, 824 iwl_mvm_quota_cmd_size(mvm), "a_cmd); 825 if (ret) 826 IWL_ERR(mvm, "Failed to send quota: %d\n", ret); 827 828 if (iwl_mvm_is_lar_supported(mvm) && iwl_mvm_init_fw_regd(mvm, false)) 829 IWL_ERR(mvm, "Failed to initialize D3 LAR information\n"); 830 831 return 0; 832 } 833 834 static int iwl_mvm_get_last_nonqos_seq(struct iwl_mvm *mvm, 835 struct ieee80211_vif *vif) 836 { 837 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 838 struct iwl_nonqos_seq_query_cmd query_cmd = { 839 .get_set_flag = cpu_to_le32(IWL_NONQOS_SEQ_GET), 840 .mac_id_n_color = 841 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 842 mvmvif->color)), 843 }; 844 struct iwl_host_cmd cmd = { 845 .id = NON_QOS_TX_COUNTER_CMD, 846 .flags = CMD_WANT_SKB, 847 }; 848 int err; 849 u32 size; 850 851 cmd.data[0] = &query_cmd; 852 cmd.len[0] = sizeof(query_cmd); 853 854 err = iwl_mvm_send_cmd(mvm, &cmd); 855 if (err) 856 return err; 857 858 size = iwl_rx_packet_payload_len(cmd.resp_pkt); 859 if (size < sizeof(__le16)) { 860 err = -EINVAL; 861 } else { 862 err = le16_to_cpup((__le16 *)cmd.resp_pkt->data); 863 /* firmware returns next, not last-used seqno */ 864 err = (u16) (err - 0x10); 865 } 866 867 iwl_free_resp(&cmd); 868 return err; 869 } 870 871 void iwl_mvm_set_last_nonqos_seq(struct iwl_mvm *mvm, struct ieee80211_vif *vif) 872 { 873 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 874 struct iwl_nonqos_seq_query_cmd query_cmd = { 875 .get_set_flag = cpu_to_le32(IWL_NONQOS_SEQ_SET), 876 .mac_id_n_color = 877 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 878 mvmvif->color)), 879 .value = cpu_to_le16(mvmvif->seqno), 880 }; 881 882 /* return if called during restart, not resume from D3 */ 883 if (!mvmvif->seqno_valid) 884 return; 885 886 mvmvif->seqno_valid = false; 887 888 if (iwl_mvm_send_cmd_pdu(mvm, NON_QOS_TX_COUNTER_CMD, 0, 889 sizeof(query_cmd), &query_cmd)) 890 IWL_ERR(mvm, "failed to set non-QoS seqno\n"); 891 } 892 893 static int iwl_mvm_switch_to_d3(struct iwl_mvm *mvm) 894 { 895 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true); 896 897 iwl_mvm_stop_device(mvm); 898 /* 899 * Set the HW restart bit -- this is mostly true as we're 900 * going to load new firmware and reprogram that, though 901 * the reprogramming is going to be manual to avoid adding 902 * all the MACs that aren't support. 903 * We don't have to clear up everything though because the 904 * reprogramming is manual. When we resume, we'll actually 905 * go through a proper restart sequence again to switch 906 * back to the runtime firmware image. 907 */ 908 set_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 909 910 /* the fw is reset, so all the keys are cleared */ 911 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table)); 912 913 mvm->ptk_ivlen = 0; 914 mvm->ptk_icvlen = 0; 915 mvm->ptk_ivlen = 0; 916 mvm->ptk_icvlen = 0; 917 918 return iwl_mvm_load_d3_fw(mvm); 919 } 920 921 static int 922 iwl_mvm_get_wowlan_config(struct iwl_mvm *mvm, 923 struct cfg80211_wowlan *wowlan, 924 struct iwl_wowlan_config_cmd_v6 *wowlan_config_cmd, 925 struct ieee80211_vif *vif, struct iwl_mvm_vif *mvmvif, 926 struct ieee80211_sta *ap_sta) 927 { 928 struct iwl_mvm_sta *mvm_ap_sta = iwl_mvm_sta_from_mac80211(ap_sta); 929 930 /* TODO: wowlan_config_cmd->wowlan_ba_teardown_tids */ 931 932 wowlan_config_cmd->is_11n_connection = 933 ap_sta->deflink.ht_cap.ht_supported; 934 wowlan_config_cmd->flags = ENABLE_L3_FILTERING | 935 ENABLE_NBNS_FILTERING | ENABLE_DHCP_FILTERING; 936 937 if (ap_sta->mfp) 938 wowlan_config_cmd->flags |= IS_11W_ASSOC; 939 940 if (iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_CONFIGURATION, 0) < 6) { 941 /* Query the last used seqno and set it */ 942 int ret = iwl_mvm_get_last_nonqos_seq(mvm, vif); 943 944 if (ret < 0) 945 return ret; 946 947 wowlan_config_cmd->non_qos_seq = cpu_to_le16(ret); 948 } 949 950 if (iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_CONFIGURATION, 0) < 7) 951 iwl_mvm_set_wowlan_qos_seq(mvm_ap_sta, wowlan_config_cmd); 952 953 if (wowlan->disconnect) 954 wowlan_config_cmd->wakeup_filter |= 955 cpu_to_le32(IWL_WOWLAN_WAKEUP_BEACON_MISS | 956 IWL_WOWLAN_WAKEUP_LINK_CHANGE); 957 if (wowlan->magic_pkt) 958 wowlan_config_cmd->wakeup_filter |= 959 cpu_to_le32(IWL_WOWLAN_WAKEUP_MAGIC_PACKET); 960 if (wowlan->gtk_rekey_failure) 961 wowlan_config_cmd->wakeup_filter |= 962 cpu_to_le32(IWL_WOWLAN_WAKEUP_GTK_REKEY_FAIL); 963 if (wowlan->eap_identity_req) 964 wowlan_config_cmd->wakeup_filter |= 965 cpu_to_le32(IWL_WOWLAN_WAKEUP_EAP_IDENT_REQ); 966 if (wowlan->four_way_handshake) 967 wowlan_config_cmd->wakeup_filter |= 968 cpu_to_le32(IWL_WOWLAN_WAKEUP_4WAY_HANDSHAKE); 969 if (wowlan->n_patterns) 970 wowlan_config_cmd->wakeup_filter |= 971 cpu_to_le32(IWL_WOWLAN_WAKEUP_PATTERN_MATCH); 972 973 if (wowlan->rfkill_release) 974 wowlan_config_cmd->wakeup_filter |= 975 cpu_to_le32(IWL_WOWLAN_WAKEUP_RF_KILL_DEASSERT); 976 977 if (wowlan->tcp) { 978 /* 979 * Set the "link change" (really "link lost") flag as well 980 * since that implies losing the TCP connection. 981 */ 982 wowlan_config_cmd->wakeup_filter |= 983 cpu_to_le32(IWL_WOWLAN_WAKEUP_REMOTE_LINK_LOSS | 984 IWL_WOWLAN_WAKEUP_REMOTE_SIGNATURE_TABLE | 985 IWL_WOWLAN_WAKEUP_REMOTE_WAKEUP_PACKET | 986 IWL_WOWLAN_WAKEUP_LINK_CHANGE); 987 } 988 989 if (wowlan->any) { 990 wowlan_config_cmd->wakeup_filter |= 991 cpu_to_le32(IWL_WOWLAN_WAKEUP_BEACON_MISS | 992 IWL_WOWLAN_WAKEUP_LINK_CHANGE | 993 IWL_WOWLAN_WAKEUP_RX_FRAME | 994 IWL_WOWLAN_WAKEUP_BCN_FILTERING); 995 } 996 997 return 0; 998 } 999 1000 static int iwl_mvm_wowlan_config_key_params(struct iwl_mvm *mvm, 1001 struct ieee80211_vif *vif, 1002 struct iwl_mvm_vif_link_info *mvm_link) 1003 { 1004 bool unified = fw_has_capa(&mvm->fw->ucode_capa, 1005 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1006 struct wowlan_key_reprogram_data key_data = {}; 1007 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1008 int ret; 1009 u8 cmd_ver; 1010 size_t cmd_size; 1011 1012 if (!unified) { 1013 /* 1014 * if we have to configure keys, call ieee80211_iter_keys(), 1015 * as we need non-atomic context in order to take the 1016 * required locks. 1017 */ 1018 /* 1019 * Note that currently we don't use CMD_ASYNC in the iterator. 1020 * In case of key_data.configure_keys, all the configured 1021 * commands are SYNC, and iwl_mvm_wowlan_program_keys() will 1022 * take care of locking/unlocking mvm->mutex. 1023 */ 1024 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_wowlan_program_keys, 1025 &key_data); 1026 1027 if (key_data.error) 1028 return -EIO; 1029 } 1030 1031 ret = iwl_mvm_wowlan_config_rsc_tsc(mvm, vif, mvm_link); 1032 if (ret) 1033 return ret; 1034 1035 if (!fw_has_api(&mvm->fw->ucode_capa, 1036 IWL_UCODE_TLV_API_TKIP_MIC_KEYS)) { 1037 int ver = iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_TKIP_PARAM, 1038 IWL_FW_CMD_VER_UNKNOWN); 1039 struct wowlan_key_tkip_data tkip_data = {}; 1040 int size; 1041 1042 if (ver == 2) { 1043 size = sizeof(tkip_data.tkip); 1044 tkip_data.tkip.sta_id = 1045 cpu_to_le32(mvm_link->ap_sta_id); 1046 } else if (ver == 1 || ver == IWL_FW_CMD_VER_UNKNOWN) { 1047 size = sizeof(struct iwl_wowlan_tkip_params_cmd_ver_1); 1048 } else { 1049 WARN_ON_ONCE(1); 1050 return -EINVAL; 1051 } 1052 1053 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_wowlan_get_tkip_data, 1054 &tkip_data); 1055 1056 if (tkip_data.have_tkip_keys) { 1057 /* send relevant data according to CMD version */ 1058 ret = iwl_mvm_send_cmd_pdu(mvm, 1059 WOWLAN_TKIP_PARAM, 1060 CMD_ASYNC, size, 1061 &tkip_data.tkip); 1062 if (ret) 1063 return ret; 1064 } 1065 } 1066 1067 /* configure rekey data only if offloaded rekey is supported (d3) */ 1068 if (mvmvif->rekey_data.valid) { 1069 struct iwl_wowlan_kek_kck_material_cmd_v4 kek_kck_cmd = {}; 1070 struct iwl_wowlan_kek_kck_material_cmd_v4 *_kek_kck_cmd = 1071 &kek_kck_cmd; 1072 struct wowlan_key_gtk_type_iter gtk_type_data = { 1073 .kek_kck_cmd = _kek_kck_cmd, 1074 }; 1075 1076 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, 1077 WOWLAN_KEK_KCK_MATERIAL, 1078 IWL_FW_CMD_VER_UNKNOWN); 1079 if (WARN_ON(cmd_ver != 2 && cmd_ver != 3 && cmd_ver != 4 && 1080 cmd_ver != IWL_FW_CMD_VER_UNKNOWN)) 1081 return -EINVAL; 1082 1083 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_wowlan_gtk_type_iter, 1084 >k_type_data); 1085 1086 memcpy(kek_kck_cmd.kck, mvmvif->rekey_data.kck, 1087 mvmvif->rekey_data.kck_len); 1088 kek_kck_cmd.kck_len = cpu_to_le16(mvmvif->rekey_data.kck_len); 1089 memcpy(kek_kck_cmd.kek, mvmvif->rekey_data.kek, 1090 mvmvif->rekey_data.kek_len); 1091 kek_kck_cmd.kek_len = cpu_to_le16(mvmvif->rekey_data.kek_len); 1092 kek_kck_cmd.replay_ctr = mvmvif->rekey_data.replay_ctr; 1093 kek_kck_cmd.akm = cpu_to_le32(mvmvif->rekey_data.akm); 1094 kek_kck_cmd.sta_id = cpu_to_le32(mvm_link->ap_sta_id); 1095 1096 if (cmd_ver == 4) { 1097 cmd_size = sizeof(struct iwl_wowlan_kek_kck_material_cmd_v4); 1098 } else { 1099 if (cmd_ver == 3) 1100 cmd_size = 1101 sizeof(struct iwl_wowlan_kek_kck_material_cmd_v3); 1102 else 1103 cmd_size = 1104 sizeof(struct iwl_wowlan_kek_kck_material_cmd_v2); 1105 /* skip the sta_id at the beginning */ 1106 _kek_kck_cmd = (void *) 1107 ((u8 *)_kek_kck_cmd + sizeof(kek_kck_cmd.sta_id)); 1108 } 1109 1110 IWL_DEBUG_WOWLAN(mvm, "setting akm %d\n", 1111 mvmvif->rekey_data.akm); 1112 1113 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_KEK_KCK_MATERIAL, 1114 CMD_ASYNC, cmd_size, _kek_kck_cmd); 1115 if (ret) 1116 return ret; 1117 } 1118 1119 return 0; 1120 } 1121 1122 static int 1123 iwl_mvm_wowlan_config(struct iwl_mvm *mvm, 1124 struct cfg80211_wowlan *wowlan, 1125 struct iwl_wowlan_config_cmd_v6 *wowlan_config_cmd_v6, 1126 struct ieee80211_vif *vif, struct iwl_mvm_vif *mvmvif, 1127 struct iwl_mvm_vif_link_info *mvm_link, 1128 struct ieee80211_sta *ap_sta) 1129 { 1130 int ret; 1131 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 1132 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1133 1134 mvm->offload_tid = wowlan_config_cmd_v6->offloading_tid; 1135 1136 if (!unified_image) { 1137 ret = iwl_mvm_switch_to_d3(mvm); 1138 if (ret) 1139 return ret; 1140 1141 ret = iwl_mvm_d3_reprogram(mvm, vif, ap_sta); 1142 if (ret) 1143 return ret; 1144 } 1145 1146 ret = iwl_mvm_wowlan_config_key_params(mvm, vif, mvm_link); 1147 if (ret) 1148 return ret; 1149 1150 if (iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_CONFIGURATION, 0) > 6) { 1151 struct iwl_wowlan_config_cmd wowlan_config_cmd = { 1152 .wakeup_filter = wowlan_config_cmd_v6->wakeup_filter, 1153 .wowlan_ba_teardown_tids = 1154 wowlan_config_cmd_v6->wowlan_ba_teardown_tids, 1155 .is_11n_connection = 1156 wowlan_config_cmd_v6->is_11n_connection, 1157 .offloading_tid = wowlan_config_cmd_v6->offloading_tid, 1158 .flags = wowlan_config_cmd_v6->flags, 1159 .sta_id = wowlan_config_cmd_v6->sta_id, 1160 }; 1161 1162 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_CONFIGURATION, 0, 1163 sizeof(wowlan_config_cmd), 1164 &wowlan_config_cmd); 1165 } else { 1166 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_CONFIGURATION, 0, 1167 sizeof(*wowlan_config_cmd_v6), 1168 wowlan_config_cmd_v6); 1169 } 1170 if (ret) 1171 return ret; 1172 1173 if (fw_has_api(&mvm->fw->ucode_capa, 1174 IWL_UCODE_TLV_API_WOWLAN_TCP_SYN_WAKE)) 1175 ret = iwl_mvm_send_patterns(mvm, mvm_link, wowlan); 1176 else 1177 ret = iwl_mvm_send_patterns_v1(mvm, wowlan); 1178 if (ret) 1179 return ret; 1180 1181 return iwl_mvm_send_proto_offload(mvm, vif, false, true, 0, 1182 mvm_link->ap_sta_id); 1183 } 1184 1185 static int 1186 iwl_mvm_netdetect_config(struct iwl_mvm *mvm, 1187 struct cfg80211_wowlan *wowlan, 1188 struct cfg80211_sched_scan_request *nd_config, 1189 struct ieee80211_vif *vif) 1190 { 1191 int ret; 1192 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 1193 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1194 1195 if (!unified_image) { 1196 ret = iwl_mvm_switch_to_d3(mvm); 1197 if (ret) 1198 return ret; 1199 } else { 1200 /* In theory, we wouldn't have to stop a running sched 1201 * scan in order to start another one (for 1202 * net-detect). But in practice this doesn't seem to 1203 * work properly, so stop any running sched_scan now. 1204 */ 1205 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true); 1206 if (ret) 1207 return ret; 1208 } 1209 1210 ret = iwl_mvm_sched_scan_start(mvm, vif, nd_config, &mvm->nd_ies, 1211 IWL_MVM_SCAN_NETDETECT); 1212 if (ret) 1213 return ret; 1214 1215 if (WARN_ON(mvm->nd_match_sets || mvm->nd_channels)) 1216 return -EBUSY; 1217 1218 /* save the sched scan matchsets... */ 1219 if (nd_config->n_match_sets) { 1220 mvm->nd_match_sets = kmemdup(nd_config->match_sets, 1221 sizeof(*nd_config->match_sets) * 1222 nd_config->n_match_sets, 1223 GFP_KERNEL); 1224 if (mvm->nd_match_sets) 1225 mvm->n_nd_match_sets = nd_config->n_match_sets; 1226 } 1227 1228 /* ...and the sched scan channels for later reporting */ 1229 mvm->nd_channels = kmemdup(nd_config->channels, 1230 sizeof(*nd_config->channels) * 1231 nd_config->n_channels, 1232 GFP_KERNEL); 1233 if (mvm->nd_channels) 1234 mvm->n_nd_channels = nd_config->n_channels; 1235 1236 return 0; 1237 } 1238 1239 static void iwl_mvm_free_nd(struct iwl_mvm *mvm) 1240 { 1241 kfree(mvm->nd_match_sets); 1242 mvm->nd_match_sets = NULL; 1243 mvm->n_nd_match_sets = 0; 1244 kfree(mvm->nd_channels); 1245 mvm->nd_channels = NULL; 1246 mvm->n_nd_channels = 0; 1247 } 1248 1249 static int __iwl_mvm_suspend(struct ieee80211_hw *hw, 1250 struct cfg80211_wowlan *wowlan, 1251 bool test) 1252 { 1253 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1254 struct ieee80211_vif *vif = NULL; 1255 struct iwl_mvm_vif *mvmvif = NULL; 1256 struct ieee80211_sta *ap_sta = NULL; 1257 struct iwl_mvm_vif_link_info *mvm_link; 1258 struct iwl_d3_manager_config d3_cfg_cmd_data = { 1259 /* 1260 * Program the minimum sleep time to 10 seconds, as many 1261 * platforms have issues processing a wakeup signal while 1262 * still being in the process of suspending. 1263 */ 1264 .min_sleep_time = cpu_to_le32(10 * 1000 * 1000), 1265 }; 1266 struct iwl_host_cmd d3_cfg_cmd = { 1267 .id = D3_CONFIG_CMD, 1268 .flags = CMD_WANT_SKB, 1269 .data[0] = &d3_cfg_cmd_data, 1270 .len[0] = sizeof(d3_cfg_cmd_data), 1271 }; 1272 int ret; 1273 int len __maybe_unused; 1274 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 1275 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1276 1277 if (!wowlan) { 1278 /* 1279 * mac80211 shouldn't get here, but for D3 test 1280 * it doesn't warrant a warning 1281 */ 1282 WARN_ON(!test); 1283 return -EINVAL; 1284 } 1285 1286 vif = iwl_mvm_get_bss_vif(mvm); 1287 if (IS_ERR_OR_NULL(vif)) 1288 return 1; 1289 1290 ret = iwl_mvm_block_esr_sync(mvm, vif, IWL_MVM_ESR_BLOCKED_WOWLAN); 1291 if (ret) 1292 return ret; 1293 1294 mutex_lock(&mvm->mutex); 1295 1296 set_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 1297 1298 synchronize_net(); 1299 1300 mvmvif = iwl_mvm_vif_from_mac80211(vif); 1301 1302 mvm_link = mvmvif->link[iwl_mvm_get_primary_link(vif)]; 1303 if (WARN_ON_ONCE(!mvm_link)) { 1304 ret = -EINVAL; 1305 goto out_noreset; 1306 } 1307 1308 if (mvm_link->ap_sta_id == IWL_INVALID_STA) { 1309 /* if we're not associated, this must be netdetect */ 1310 if (!wowlan->nd_config) { 1311 ret = 1; 1312 goto out_noreset; 1313 } 1314 1315 ret = iwl_mvm_netdetect_config( 1316 mvm, wowlan, wowlan->nd_config, vif); 1317 if (ret) 1318 goto out; 1319 1320 mvm->net_detect = true; 1321 } else { 1322 struct iwl_wowlan_config_cmd_v6 wowlan_config_cmd = { 1323 .offloading_tid = 0, 1324 }; 1325 1326 wowlan_config_cmd.sta_id = mvm_link->ap_sta_id; 1327 1328 ap_sta = rcu_dereference_protected( 1329 mvm->fw_id_to_mac_id[mvm_link->ap_sta_id], 1330 lockdep_is_held(&mvm->mutex)); 1331 if (IS_ERR_OR_NULL(ap_sta)) { 1332 ret = -EINVAL; 1333 goto out_noreset; 1334 } 1335 1336 ret = iwl_mvm_sta_ensure_queue( 1337 mvm, ap_sta->txq[wowlan_config_cmd.offloading_tid]); 1338 if (ret) 1339 goto out_noreset; 1340 1341 ret = iwl_mvm_get_wowlan_config(mvm, wowlan, &wowlan_config_cmd, 1342 vif, mvmvif, ap_sta); 1343 if (ret) 1344 goto out_noreset; 1345 ret = iwl_mvm_wowlan_config(mvm, wowlan, &wowlan_config_cmd, 1346 vif, mvmvif, mvm_link, ap_sta); 1347 if (ret) 1348 goto out; 1349 1350 mvm->net_detect = false; 1351 } 1352 1353 ret = iwl_mvm_power_update_device(mvm); 1354 if (ret) 1355 goto out; 1356 1357 ret = iwl_mvm_power_update_mac(mvm); 1358 if (ret) 1359 goto out; 1360 1361 #ifdef CONFIG_IWLWIFI_DEBUGFS 1362 if (mvm->d3_wake_sysassert) 1363 d3_cfg_cmd_data.wakeup_flags |= 1364 cpu_to_le32(IWL_WAKEUP_D3_CONFIG_FW_ERROR); 1365 #endif 1366 1367 /* 1368 * Prior to 9000 device family the driver needs to stop the dbg 1369 * recording before entering D3. In later devices the FW stops the 1370 * recording automatically. 1371 */ 1372 if (mvm->trans->mac_cfg->device_family < IWL_DEVICE_FAMILY_9000) 1373 iwl_fw_dbg_stop_restart_recording(&mvm->fwrt, NULL, true); 1374 1375 /* must be last -- this switches firmware state */ 1376 ret = iwl_mvm_send_cmd(mvm, &d3_cfg_cmd); 1377 if (ret) 1378 goto out; 1379 #ifdef CONFIG_IWLWIFI_DEBUGFS 1380 len = iwl_rx_packet_payload_len(d3_cfg_cmd.resp_pkt); 1381 if (len >= sizeof(u32)) { 1382 mvm->d3_test_pme_ptr = 1383 le32_to_cpup((__le32 *)d3_cfg_cmd.resp_pkt->data); 1384 } 1385 #endif 1386 iwl_free_resp(&d3_cfg_cmd); 1387 1388 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 1389 1390 ret = iwl_trans_d3_suspend(mvm->trans, test, !unified_image); 1391 out: 1392 if (ret < 0) { 1393 iwl_mvm_free_nd(mvm); 1394 1395 clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 1396 } 1397 out_noreset: 1398 mutex_unlock(&mvm->mutex); 1399 1400 return ret; 1401 } 1402 1403 int iwl_mvm_suspend(struct ieee80211_hw *hw, struct cfg80211_wowlan *wowlan) 1404 { 1405 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1406 1407 iwl_mvm_pause_tcm(mvm, true); 1408 1409 mutex_lock(&mvm->mutex); 1410 iwl_fw_runtime_suspend(&mvm->fwrt); 1411 mutex_unlock(&mvm->mutex); 1412 1413 return __iwl_mvm_suspend(hw, wowlan, false); 1414 } 1415 1416 struct iwl_multicast_key_data { 1417 u8 key[WOWLAN_KEY_MAX_SIZE]; 1418 u8 len; 1419 u8 flags; 1420 u8 id; 1421 u8 ipn[6]; 1422 }; 1423 1424 /* converted data from the different status responses */ 1425 struct iwl_wowlan_status_data { 1426 u64 replay_ctr; 1427 u32 num_of_gtk_rekeys; 1428 u32 received_beacons; 1429 u32 wakeup_reasons; 1430 u32 wake_packet_length; 1431 u32 wake_packet_bufsize; 1432 u16 pattern_number; 1433 u16 non_qos_seq_ctr; 1434 u16 qos_seq_ctr[8]; 1435 u8 tid_tear_down; 1436 u8 tid_offloaded_tx; 1437 1438 struct { 1439 /* including RX MIC key for TKIP */ 1440 u8 key[WOWLAN_KEY_MAX_SIZE]; 1441 u8 len; 1442 u8 flags; 1443 u8 id; 1444 } gtk[WOWLAN_GTK_KEYS_NUM]; 1445 1446 struct { 1447 /* 1448 * We store both the TKIP and AES representations 1449 * coming from the firmware because we decode the 1450 * data from there before we iterate the keys and 1451 * know which one we need. 1452 */ 1453 struct { 1454 struct ieee80211_key_seq seq[IWL_MAX_TID_COUNT]; 1455 } tkip, aes; 1456 1457 /* 1458 * We use -1 for when we have valid data but don't know 1459 * the key ID from firmware, and thus it needs to be 1460 * installed with the last key (depending on rekeying). 1461 */ 1462 s8 key_id; 1463 bool valid; 1464 } gtk_seq[2]; 1465 1466 struct { 1467 /* Same as above */ 1468 struct { 1469 struct ieee80211_key_seq seq[IWL_MAX_TID_COUNT]; 1470 u64 tx_pn; 1471 } tkip, aes; 1472 } ptk; 1473 1474 struct iwl_multicast_key_data igtk; 1475 struct iwl_multicast_key_data bigtk[WOWLAN_BIGTK_KEYS_NUM]; 1476 1477 int num_mlo_keys; 1478 struct iwl_wowlan_mlo_gtk mlo_keys[WOWLAN_MAX_MLO_KEYS]; 1479 1480 u8 *wake_packet; 1481 }; 1482 1483 static void iwl_mvm_report_wakeup_reasons(struct iwl_mvm *mvm, 1484 struct ieee80211_vif *vif, 1485 struct iwl_wowlan_status_data *status) 1486 { 1487 struct sk_buff *pkt = NULL; 1488 struct cfg80211_wowlan_wakeup wakeup = { 1489 .pattern_idx = -1, 1490 }; 1491 struct cfg80211_wowlan_wakeup *wakeup_report = &wakeup; 1492 u32 reasons = status->wakeup_reasons; 1493 1494 if (reasons == IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) { 1495 wakeup_report = NULL; 1496 goto report; 1497 } 1498 1499 pm_wakeup_event(mvm->dev, 0); 1500 1501 if (reasons & IWL_WOWLAN_WAKEUP_BY_MAGIC_PACKET) 1502 wakeup.magic_pkt = true; 1503 1504 if (reasons & IWL_WOWLAN_WAKEUP_BY_PATTERN) 1505 wakeup.pattern_idx = 1506 status->pattern_number; 1507 1508 if (reasons & (IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_MISSED_BEACON | 1509 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_DEAUTH | 1510 IWL_WOWLAN_WAKEUP_BY_GTK_REKEY_FAILURE)) 1511 wakeup.disconnect = true; 1512 1513 if (reasons & IWL_WOWLAN_WAKEUP_BY_GTK_REKEY_FAILURE) 1514 wakeup.gtk_rekey_failure = true; 1515 1516 if (reasons & IWL_WOWLAN_WAKEUP_BY_RFKILL_DEASSERTED) 1517 wakeup.rfkill_release = true; 1518 1519 if (reasons & IWL_WOWLAN_WAKEUP_BY_EAPOL_REQUEST) 1520 wakeup.eap_identity_req = true; 1521 1522 if (reasons & IWL_WOWLAN_WAKEUP_BY_FOUR_WAY_HANDSHAKE) 1523 wakeup.four_way_handshake = true; 1524 1525 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_LINK_LOSS) 1526 wakeup.tcp_connlost = true; 1527 1528 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_SIGNATURE_TABLE) 1529 wakeup.tcp_nomoretokens = true; 1530 1531 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_WAKEUP_PACKET) 1532 wakeup.tcp_match = true; 1533 1534 if (reasons & IWL_WAKEUP_BY_11W_UNPROTECTED_DEAUTH_OR_DISASSOC) 1535 wakeup.unprot_deauth_disassoc = true; 1536 1537 if (status->wake_packet) { 1538 int pktsize = status->wake_packet_bufsize; 1539 int pktlen = status->wake_packet_length; 1540 const u8 *pktdata = status->wake_packet; 1541 const struct ieee80211_hdr *hdr = (const void *)pktdata; 1542 int truncated = pktlen - pktsize; 1543 1544 /* this would be a firmware bug */ 1545 if (WARN_ON_ONCE(truncated < 0)) 1546 truncated = 0; 1547 1548 if (ieee80211_is_data(hdr->frame_control)) { 1549 int hdrlen = ieee80211_hdrlen(hdr->frame_control); 1550 int ivlen = 0, icvlen = 4; /* also FCS */ 1551 1552 pkt = alloc_skb(pktsize, GFP_KERNEL); 1553 if (!pkt) 1554 goto report; 1555 1556 skb_put_data(pkt, pktdata, hdrlen); 1557 pktdata += hdrlen; 1558 pktsize -= hdrlen; 1559 1560 if (ieee80211_has_protected(hdr->frame_control)) { 1561 /* 1562 * This is unlocked and using gtk_i(c)vlen, 1563 * but since everything is under RTNL still 1564 * that's not really a problem - changing 1565 * it would be difficult. 1566 */ 1567 if (is_multicast_ether_addr(hdr->addr1)) { 1568 ivlen = mvm->gtk_ivlen; 1569 icvlen += mvm->gtk_icvlen; 1570 } else { 1571 ivlen = mvm->ptk_ivlen; 1572 icvlen += mvm->ptk_icvlen; 1573 } 1574 } 1575 1576 /* if truncated, FCS/ICV is (partially) gone */ 1577 if (truncated >= icvlen) { 1578 icvlen = 0; 1579 truncated -= icvlen; 1580 } else { 1581 icvlen -= truncated; 1582 truncated = 0; 1583 } 1584 1585 pktsize -= ivlen + icvlen; 1586 pktdata += ivlen; 1587 1588 skb_put_data(pkt, pktdata, pktsize); 1589 1590 if (ieee80211_data_to_8023(pkt, vif->addr, vif->type)) 1591 goto report; 1592 wakeup.packet = pkt->data; 1593 wakeup.packet_present_len = pkt->len; 1594 wakeup.packet_len = pkt->len - truncated; 1595 wakeup.packet_80211 = false; 1596 } else { 1597 int fcslen = 4; 1598 1599 if (truncated >= 4) { 1600 truncated -= 4; 1601 fcslen = 0; 1602 } else { 1603 fcslen -= truncated; 1604 truncated = 0; 1605 } 1606 pktsize -= fcslen; 1607 wakeup.packet = status->wake_packet; 1608 wakeup.packet_present_len = pktsize; 1609 wakeup.packet_len = pktlen - truncated; 1610 wakeup.packet_80211 = true; 1611 } 1612 } 1613 1614 report: 1615 ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL); 1616 kfree_skb(pkt); 1617 } 1618 1619 static void iwl_mvm_le64_to_aes_seq(__le64 le_pn, struct ieee80211_key_seq *seq) 1620 { 1621 u64 pn = le64_to_cpu(le_pn); 1622 1623 seq->ccmp.pn[0] = pn >> 40; 1624 seq->ccmp.pn[1] = pn >> 32; 1625 seq->ccmp.pn[2] = pn >> 24; 1626 seq->ccmp.pn[3] = pn >> 16; 1627 seq->ccmp.pn[4] = pn >> 8; 1628 seq->ccmp.pn[5] = pn; 1629 } 1630 1631 static void iwl_mvm_aes_sc_to_seq(struct aes_sc *sc, 1632 struct ieee80211_key_seq *seq) 1633 { 1634 iwl_mvm_le64_to_aes_seq(sc->pn, seq); 1635 } 1636 1637 static void iwl_mvm_le64_to_tkip_seq(__le64 le_pn, struct ieee80211_key_seq *seq) 1638 { 1639 u64 pn = le64_to_cpu(le_pn); 1640 1641 seq->tkip.iv16 = (u16)pn; 1642 seq->tkip.iv32 = (u32)(pn >> 16); 1643 } 1644 1645 static void iwl_mvm_tkip_sc_to_seq(struct tkip_sc *sc, 1646 struct ieee80211_key_seq *seq) 1647 { 1648 seq->tkip.iv32 = le32_to_cpu(sc->iv32); 1649 seq->tkip.iv16 = le16_to_cpu(sc->iv16); 1650 } 1651 1652 static void iwl_mvm_set_key_rx_seq_tids(struct ieee80211_key_conf *key, 1653 struct ieee80211_key_seq *seq) 1654 { 1655 int tid; 1656 1657 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) 1658 ieee80211_set_key_rx_seq(key, tid, &seq[tid]); 1659 } 1660 1661 static void iwl_mvm_set_aes_ptk_rx_seq(struct iwl_mvm *mvm, 1662 struct iwl_wowlan_status_data *status, 1663 struct ieee80211_sta *sta, 1664 struct ieee80211_key_conf *key) 1665 { 1666 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 1667 struct iwl_mvm_key_pn *ptk_pn; 1668 int tid; 1669 1670 iwl_mvm_set_key_rx_seq_tids(key, status->ptk.aes.seq); 1671 1672 if (!iwl_mvm_has_new_rx_api(mvm)) 1673 return; 1674 1675 1676 rcu_read_lock(); 1677 ptk_pn = rcu_dereference(mvmsta->ptk_pn[key->keyidx]); 1678 if (WARN_ON(!ptk_pn)) { 1679 rcu_read_unlock(); 1680 return; 1681 } 1682 1683 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 1684 int i; 1685 1686 for (i = 1; i < mvm->trans->info.num_rxqs; i++) 1687 memcpy(ptk_pn->q[i].pn[tid], 1688 status->ptk.aes.seq[tid].ccmp.pn, 1689 IEEE80211_CCMP_PN_LEN); 1690 } 1691 rcu_read_unlock(); 1692 } 1693 1694 static void iwl_mvm_convert_key_counters(struct iwl_wowlan_status_data *status, 1695 union iwl_all_tsc_rsc *sc) 1696 { 1697 int i; 1698 1699 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_MAX_TID_COUNT); 1700 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_NUM_RSC); 1701 1702 /* GTK RX counters */ 1703 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 1704 iwl_mvm_tkip_sc_to_seq(&sc->tkip.multicast_rsc[i], 1705 &status->gtk_seq[0].tkip.seq[i]); 1706 iwl_mvm_aes_sc_to_seq(&sc->aes.multicast_rsc[i], 1707 &status->gtk_seq[0].aes.seq[i]); 1708 } 1709 status->gtk_seq[0].valid = true; 1710 status->gtk_seq[0].key_id = -1; 1711 1712 /* PTK TX counter */ 1713 status->ptk.tkip.tx_pn = (u64)le16_to_cpu(sc->tkip.tsc.iv16) | 1714 ((u64)le32_to_cpu(sc->tkip.tsc.iv32) << 16); 1715 status->ptk.aes.tx_pn = le64_to_cpu(sc->aes.tsc.pn); 1716 1717 /* PTK RX counters */ 1718 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 1719 iwl_mvm_tkip_sc_to_seq(&sc->tkip.unicast_rsc[i], 1720 &status->ptk.tkip.seq[i]); 1721 iwl_mvm_aes_sc_to_seq(&sc->aes.unicast_rsc[i], 1722 &status->ptk.aes.seq[i]); 1723 } 1724 } 1725 1726 static void 1727 iwl_mvm_convert_key_counters_v5_gtk_seq(struct iwl_wowlan_status_data *status, 1728 struct iwl_wowlan_all_rsc_tsc_v5 *sc, 1729 unsigned int idx, unsigned int key_id) 1730 { 1731 int tid; 1732 1733 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 1734 iwl_mvm_le64_to_tkip_seq(sc->mcast_rsc[idx][tid], 1735 &status->gtk_seq[idx].tkip.seq[tid]); 1736 iwl_mvm_le64_to_aes_seq(sc->mcast_rsc[idx][tid], 1737 &status->gtk_seq[idx].aes.seq[tid]); 1738 } 1739 1740 status->gtk_seq[idx].valid = true; 1741 status->gtk_seq[idx].key_id = key_id; 1742 } 1743 1744 static void 1745 iwl_mvm_convert_key_counters_v5(struct iwl_wowlan_status_data *status, 1746 struct iwl_wowlan_all_rsc_tsc_v5 *sc) 1747 { 1748 int i, tid; 1749 1750 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_MAX_TID_COUNT); 1751 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_NUM_RSC); 1752 BUILD_BUG_ON(ARRAY_SIZE(sc->mcast_rsc) != ARRAY_SIZE(status->gtk_seq)); 1753 1754 /* GTK RX counters */ 1755 for (i = 0; i < ARRAY_SIZE(sc->mcast_key_id_map); i++) { 1756 u8 entry = sc->mcast_key_id_map[i]; 1757 1758 if (entry < ARRAY_SIZE(sc->mcast_rsc)) 1759 iwl_mvm_convert_key_counters_v5_gtk_seq(status, sc, 1760 entry, i); 1761 } 1762 1763 /* PTK TX counters not needed, assigned in device */ 1764 1765 /* PTK RX counters */ 1766 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 1767 iwl_mvm_le64_to_tkip_seq(sc->ucast_rsc[tid], 1768 &status->ptk.tkip.seq[tid]); 1769 iwl_mvm_le64_to_aes_seq(sc->ucast_rsc[tid], 1770 &status->ptk.aes.seq[tid]); 1771 } 1772 } 1773 1774 static void iwl_mvm_set_key_rx_seq_idx(struct ieee80211_key_conf *key, 1775 struct iwl_wowlan_status_data *status, 1776 int idx) 1777 { 1778 switch (key->cipher) { 1779 case WLAN_CIPHER_SUITE_CCMP: 1780 case WLAN_CIPHER_SUITE_GCMP: 1781 case WLAN_CIPHER_SUITE_GCMP_256: 1782 iwl_mvm_set_key_rx_seq_tids(key, status->gtk_seq[idx].aes.seq); 1783 break; 1784 case WLAN_CIPHER_SUITE_TKIP: 1785 iwl_mvm_set_key_rx_seq_tids(key, status->gtk_seq[idx].tkip.seq); 1786 break; 1787 default: 1788 WARN_ON(1); 1789 } 1790 } 1791 1792 static void iwl_mvm_set_key_rx_seq(struct ieee80211_key_conf *key, 1793 struct iwl_wowlan_status_data *status, 1794 bool installed) 1795 { 1796 int i; 1797 1798 for (i = 0; i < ARRAY_SIZE(status->gtk_seq); i++) { 1799 if (!status->gtk_seq[i].valid) 1800 continue; 1801 1802 /* Handle the case where we know the key ID */ 1803 if (status->gtk_seq[i].key_id == key->keyidx) { 1804 s8 new_key_id = -1; 1805 1806 if (status->num_of_gtk_rekeys) 1807 new_key_id = status->gtk[0].flags & 1808 IWL_WOWLAN_GTK_IDX_MASK; 1809 1810 /* Don't install a new key's value to an old key */ 1811 if (new_key_id != key->keyidx) 1812 iwl_mvm_set_key_rx_seq_idx(key, status, i); 1813 continue; 1814 } 1815 1816 /* handle the case where we didn't, last key only */ 1817 if (status->gtk_seq[i].key_id == -1 && 1818 (!status->num_of_gtk_rekeys || installed)) 1819 iwl_mvm_set_key_rx_seq_idx(key, status, i); 1820 } 1821 } 1822 1823 struct iwl_mvm_d3_gtk_iter_data { 1824 struct iwl_mvm *mvm; 1825 struct iwl_wowlan_status_data *status; 1826 u32 gtk_cipher, igtk_cipher, bigtk_cipher; 1827 bool unhandled_cipher, igtk_support, bigtk_support; 1828 int num_keys; 1829 }; 1830 1831 static void iwl_mvm_d3_find_last_keys(struct ieee80211_hw *hw, 1832 struct ieee80211_vif *vif, 1833 struct ieee80211_sta *sta, 1834 struct ieee80211_key_conf *key, 1835 void *_data) 1836 { 1837 struct iwl_mvm_d3_gtk_iter_data *data = _data; 1838 int link_id = vif->active_links ? __ffs(vif->active_links) : -1; 1839 1840 if (link_id >= 0 && key->link_id >= 0 && link_id != key->link_id) 1841 return; 1842 1843 if (data->unhandled_cipher) 1844 return; 1845 1846 switch (key->cipher) { 1847 case WLAN_CIPHER_SUITE_WEP40: 1848 case WLAN_CIPHER_SUITE_WEP104: 1849 /* ignore WEP completely, nothing to do */ 1850 return; 1851 case WLAN_CIPHER_SUITE_CCMP: 1852 case WLAN_CIPHER_SUITE_GCMP: 1853 case WLAN_CIPHER_SUITE_GCMP_256: 1854 case WLAN_CIPHER_SUITE_TKIP: 1855 /* we support these */ 1856 data->gtk_cipher = key->cipher; 1857 break; 1858 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 1859 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 1860 case WLAN_CIPHER_SUITE_BIP_CMAC_256: 1861 case WLAN_CIPHER_SUITE_AES_CMAC: 1862 /* we support these */ 1863 if (data->igtk_support && 1864 (key->keyidx == 4 || key->keyidx == 5)) { 1865 data->igtk_cipher = key->cipher; 1866 } else if (data->bigtk_support && 1867 (key->keyidx == 6 || key->keyidx == 7)) { 1868 data->bigtk_cipher = key->cipher; 1869 } else { 1870 data->unhandled_cipher = true; 1871 return; 1872 } 1873 break; 1874 default: 1875 /* everything else - disconnect from AP */ 1876 data->unhandled_cipher = true; 1877 return; 1878 } 1879 1880 data->num_keys++; 1881 } 1882 1883 static void 1884 iwl_mvm_d3_set_igtk_bigtk_ipn(const struct iwl_multicast_key_data *key, 1885 struct ieee80211_key_seq *seq, u32 cipher) 1886 { 1887 switch (cipher) { 1888 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 1889 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 1890 BUILD_BUG_ON(sizeof(seq->aes_gmac.pn) != sizeof(key->ipn)); 1891 memcpy(seq->aes_gmac.pn, key->ipn, sizeof(seq->aes_gmac.pn)); 1892 break; 1893 case WLAN_CIPHER_SUITE_BIP_CMAC_256: 1894 case WLAN_CIPHER_SUITE_AES_CMAC: 1895 BUILD_BUG_ON(sizeof(seq->aes_cmac.pn) != sizeof(key->ipn)); 1896 memcpy(seq->aes_cmac.pn, key->ipn, sizeof(seq->aes_cmac.pn)); 1897 break; 1898 default: 1899 WARN_ON(1); 1900 } 1901 } 1902 1903 static void 1904 iwl_mvm_d3_update_igtk_bigtk(struct iwl_wowlan_status_data *status, 1905 struct ieee80211_key_conf *key, 1906 struct iwl_multicast_key_data *key_data) 1907 { 1908 if (status->num_of_gtk_rekeys && key_data->len) { 1909 /* remove rekeyed key */ 1910 ieee80211_remove_key(key); 1911 } else { 1912 struct ieee80211_key_seq seq; 1913 1914 iwl_mvm_d3_set_igtk_bigtk_ipn(key_data, 1915 &seq, 1916 key->cipher); 1917 ieee80211_set_key_rx_seq(key, 0, &seq); 1918 } 1919 } 1920 1921 static void iwl_mvm_d3_update_keys(struct ieee80211_hw *hw, 1922 struct ieee80211_vif *vif, 1923 struct ieee80211_sta *sta, 1924 struct ieee80211_key_conf *key, 1925 void *_data) 1926 { 1927 struct iwl_mvm_d3_gtk_iter_data *data = _data; 1928 struct iwl_wowlan_status_data *status = data->status; 1929 s8 keyidx; 1930 int link_id = vif->active_links ? __ffs(vif->active_links) : -1; 1931 1932 if (link_id >= 0 && key->link_id >= 0 && link_id != key->link_id) 1933 return; 1934 1935 if (data->unhandled_cipher) 1936 return; 1937 1938 switch (key->cipher) { 1939 case WLAN_CIPHER_SUITE_WEP40: 1940 case WLAN_CIPHER_SUITE_WEP104: 1941 /* ignore WEP completely, nothing to do */ 1942 return; 1943 case WLAN_CIPHER_SUITE_CCMP: 1944 case WLAN_CIPHER_SUITE_GCMP: 1945 case WLAN_CIPHER_SUITE_GCMP_256: 1946 if (sta) { 1947 atomic64_set(&key->tx_pn, status->ptk.aes.tx_pn); 1948 iwl_mvm_set_aes_ptk_rx_seq(data->mvm, status, sta, key); 1949 return; 1950 } 1951 fallthrough; 1952 case WLAN_CIPHER_SUITE_TKIP: 1953 if (sta) { 1954 atomic64_set(&key->tx_pn, status->ptk.tkip.tx_pn); 1955 iwl_mvm_set_key_rx_seq_tids(key, status->ptk.tkip.seq); 1956 return; 1957 } 1958 keyidx = key->keyidx; 1959 /* The current key is always sent by the FW, even if it wasn't 1960 * rekeyed during D3. 1961 * We remove an existing key if it has the same index as 1962 * a new key 1963 */ 1964 if (status->num_of_gtk_rekeys && 1965 ((status->gtk[0].len && keyidx == status->gtk[0].id) || 1966 (status->gtk[1].len && keyidx == status->gtk[1].id))) { 1967 ieee80211_remove_key(key); 1968 } else { 1969 iwl_mvm_set_key_rx_seq(key, data->status, false); 1970 } 1971 break; 1972 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 1973 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 1974 case WLAN_CIPHER_SUITE_BIP_CMAC_256: 1975 case WLAN_CIPHER_SUITE_AES_CMAC: 1976 if (key->keyidx == 4 || key->keyidx == 5) { 1977 iwl_mvm_d3_update_igtk_bigtk(status, key, 1978 &status->igtk); 1979 } 1980 if (key->keyidx == 6 || key->keyidx == 7) { 1981 u8 idx = key->keyidx == status->bigtk[1].id; 1982 1983 iwl_mvm_d3_update_igtk_bigtk(status, key, 1984 &status->bigtk[idx]); 1985 } 1986 } 1987 } 1988 1989 struct iwl_mvm_d3_mlo_old_keys { 1990 u32 cipher[IEEE80211_MLD_MAX_NUM_LINKS][WOWLAN_MLO_GTK_KEY_NUM_TYPES]; 1991 struct ieee80211_key_conf *key[IEEE80211_MLD_MAX_NUM_LINKS][8]; 1992 }; 1993 1994 static void iwl_mvm_mlo_key_ciphers(struct ieee80211_hw *hw, 1995 struct ieee80211_vif *vif, 1996 struct ieee80211_sta *sta, 1997 struct ieee80211_key_conf *key, 1998 void *data) 1999 { 2000 struct iwl_mvm_d3_mlo_old_keys *old_keys = data; 2001 enum iwl_wowlan_mlo_gtk_type key_type; 2002 2003 if (key->link_id < 0) 2004 return; 2005 2006 if (WARN_ON(key->link_id >= IEEE80211_MLD_MAX_NUM_LINKS || 2007 key->keyidx >= 8)) 2008 return; 2009 2010 if (WARN_ON(old_keys->key[key->link_id][key->keyidx])) 2011 return; 2012 2013 switch (key->cipher) { 2014 case WLAN_CIPHER_SUITE_CCMP: 2015 case WLAN_CIPHER_SUITE_GCMP: 2016 case WLAN_CIPHER_SUITE_GCMP_256: 2017 key_type = WOWLAN_MLO_GTK_KEY_TYPE_GTK; 2018 break; 2019 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 2020 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 2021 case WLAN_CIPHER_SUITE_BIP_CMAC_256: 2022 case WLAN_CIPHER_SUITE_AES_CMAC: 2023 if (key->keyidx == 4 || key->keyidx == 5) { 2024 key_type = WOWLAN_MLO_GTK_KEY_TYPE_IGTK; 2025 break; 2026 } else if (key->keyidx == 6 || key->keyidx == 7) { 2027 key_type = WOWLAN_MLO_GTK_KEY_TYPE_BIGTK; 2028 break; 2029 } 2030 return; 2031 default: 2032 /* ignore WEP/TKIP or unknown ciphers */ 2033 return; 2034 } 2035 2036 old_keys->cipher[key->link_id][key_type] = key->cipher; 2037 old_keys->key[key->link_id][key->keyidx] = key; 2038 } 2039 2040 static bool iwl_mvm_mlo_gtk_rekey(struct iwl_wowlan_status_data *status, 2041 struct ieee80211_vif *vif, 2042 struct iwl_mvm *mvm) 2043 { 2044 int i; 2045 struct iwl_mvm_d3_mlo_old_keys *old_keys; 2046 bool ret = true; 2047 2048 IWL_DEBUG_WOWLAN(mvm, "Num of MLO Keys: %d\n", status->num_mlo_keys); 2049 if (!status->num_mlo_keys) 2050 return true; 2051 2052 old_keys = kzalloc(sizeof(*old_keys), GFP_KERNEL); 2053 if (!old_keys) 2054 return false; 2055 2056 /* find the cipher for each mlo key */ 2057 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_mlo_key_ciphers, old_keys); 2058 2059 for (i = 0; i < status->num_mlo_keys; i++) { 2060 struct iwl_wowlan_mlo_gtk *mlo_key = &status->mlo_keys[i]; 2061 struct ieee80211_key_conf *key, *old_key; 2062 struct ieee80211_key_seq seq; 2063 DEFINE_RAW_FLEX(struct ieee80211_key_conf, conf, key, 2064 WOWLAN_KEY_MAX_SIZE); 2065 u16 flags = le16_to_cpu(mlo_key->flags); 2066 int j, link_id, key_id, key_type; 2067 2068 link_id = u16_get_bits(flags, WOWLAN_MLO_GTK_FLAG_LINK_ID_MSK); 2069 key_id = u16_get_bits(flags, WOWLAN_MLO_GTK_FLAG_KEY_ID_MSK); 2070 key_type = u16_get_bits(flags, 2071 WOWLAN_MLO_GTK_FLAG_KEY_TYPE_MSK); 2072 2073 if (!(vif->valid_links & BIT(link_id))) 2074 continue; 2075 2076 if (WARN_ON(link_id >= IEEE80211_MLD_MAX_NUM_LINKS || 2077 key_id >= 8 || 2078 key_type >= WOWLAN_MLO_GTK_KEY_NUM_TYPES)) 2079 continue; 2080 2081 conf->cipher = old_keys->cipher[link_id][key_type]; 2082 /* WARN_ON? */ 2083 if (!conf->cipher) 2084 continue; 2085 2086 conf->keylen = 0; 2087 switch (conf->cipher) { 2088 case WLAN_CIPHER_SUITE_CCMP: 2089 case WLAN_CIPHER_SUITE_GCMP: 2090 conf->keylen = WLAN_KEY_LEN_CCMP; 2091 break; 2092 case WLAN_CIPHER_SUITE_GCMP_256: 2093 conf->keylen = WLAN_KEY_LEN_GCMP_256; 2094 break; 2095 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 2096 conf->keylen = WLAN_KEY_LEN_BIP_GMAC_128; 2097 break; 2098 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 2099 conf->keylen = WLAN_KEY_LEN_BIP_GMAC_256; 2100 break; 2101 case WLAN_CIPHER_SUITE_AES_CMAC: 2102 conf->keylen = WLAN_KEY_LEN_AES_CMAC; 2103 break; 2104 case WLAN_CIPHER_SUITE_BIP_CMAC_256: 2105 conf->keylen = WLAN_KEY_LEN_BIP_CMAC_256; 2106 break; 2107 } 2108 2109 if (WARN_ON(!conf->keylen || 2110 conf->keylen > WOWLAN_KEY_MAX_SIZE)) 2111 continue; 2112 2113 memcpy(conf->key, mlo_key->key, conf->keylen); 2114 conf->keyidx = key_id; 2115 2116 old_key = old_keys->key[link_id][key_id]; 2117 if (old_key) { 2118 IWL_DEBUG_WOWLAN(mvm, 2119 "Remove MLO key id %d, link id %d\n", 2120 key_id, link_id); 2121 ieee80211_remove_key(old_key); 2122 } 2123 2124 IWL_DEBUG_WOWLAN(mvm, "Add MLO key id %d, link id %d\n", 2125 key_id, link_id); 2126 key = ieee80211_gtk_rekey_add(vif, conf, link_id); 2127 if (WARN_ON(IS_ERR(key))) { 2128 ret = false; 2129 goto out; 2130 } 2131 2132 /* 2133 * mac80211 expects the pn in big-endian 2134 * also note that seq is a union of all cipher types 2135 * (ccmp, gcmp, cmac, gmac), and they all have the same 2136 * pn field (of length 6) so just copy it to ccmp.pn. 2137 */ 2138 for (j = 5; j >= 0; j--) 2139 seq.ccmp.pn[5 - j] = mlo_key->pn[j]; 2140 2141 /* group keys are non-QoS and use TID 0 */ 2142 ieee80211_set_key_rx_seq(key, 0, &seq); 2143 } 2144 2145 out: 2146 kfree(old_keys); 2147 return ret; 2148 } 2149 2150 static bool iwl_mvm_gtk_rekey(struct iwl_wowlan_status_data *status, 2151 struct ieee80211_vif *vif, 2152 struct iwl_mvm *mvm, u32 gtk_cipher) 2153 { 2154 int i, j; 2155 struct ieee80211_key_conf *key; 2156 DEFINE_RAW_FLEX(struct ieee80211_key_conf, conf, key, 2157 WOWLAN_KEY_MAX_SIZE); 2158 int link_id = vif->active_links ? __ffs(vif->active_links) : -1; 2159 2160 conf->cipher = gtk_cipher; 2161 2162 BUILD_BUG_ON(WLAN_KEY_LEN_CCMP != WLAN_KEY_LEN_GCMP); 2163 BUILD_BUG_ON(WOWLAN_KEY_MAX_SIZE < WLAN_KEY_LEN_CCMP); 2164 BUILD_BUG_ON(WOWLAN_KEY_MAX_SIZE < WLAN_KEY_LEN_GCMP_256); 2165 BUILD_BUG_ON(WOWLAN_KEY_MAX_SIZE < WLAN_KEY_LEN_TKIP); 2166 BUILD_BUG_ON(WOWLAN_KEY_MAX_SIZE < sizeof(status->gtk[0].key)); 2167 2168 switch (gtk_cipher) { 2169 case WLAN_CIPHER_SUITE_CCMP: 2170 case WLAN_CIPHER_SUITE_GCMP: 2171 conf->keylen = WLAN_KEY_LEN_CCMP; 2172 break; 2173 case WLAN_CIPHER_SUITE_GCMP_256: 2174 conf->keylen = WLAN_KEY_LEN_GCMP_256; 2175 break; 2176 case WLAN_CIPHER_SUITE_TKIP: 2177 conf->keylen = WLAN_KEY_LEN_TKIP; 2178 break; 2179 default: 2180 WARN_ON(1); 2181 } 2182 2183 for (i = 0; i < ARRAY_SIZE(status->gtk); i++) { 2184 if (!status->gtk[i].len) 2185 continue; 2186 2187 conf->keyidx = status->gtk[i].id; 2188 IWL_DEBUG_WOWLAN(mvm, 2189 "Received from FW GTK cipher %d, key index %d\n", 2190 conf->cipher, conf->keyidx); 2191 memcpy(conf->key, status->gtk[i].key, 2192 sizeof(status->gtk[i].key)); 2193 2194 key = ieee80211_gtk_rekey_add(vif, conf, link_id); 2195 if (IS_ERR(key)) 2196 return false; 2197 2198 for (j = 0; j < ARRAY_SIZE(status->gtk_seq); j++) { 2199 if (!status->gtk_seq[j].valid || 2200 status->gtk_seq[j].key_id != key->keyidx) 2201 continue; 2202 iwl_mvm_set_key_rx_seq_idx(key, status, j); 2203 break; 2204 } 2205 WARN_ON(j == ARRAY_SIZE(status->gtk_seq)); 2206 } 2207 2208 return true; 2209 } 2210 2211 static bool 2212 iwl_mvm_d3_igtk_bigtk_rekey_add(struct iwl_wowlan_status_data *status, 2213 struct ieee80211_vif *vif, u32 cipher, 2214 struct iwl_multicast_key_data *key_data) 2215 { 2216 DEFINE_RAW_FLEX(struct ieee80211_key_conf, conf, key, 2217 WOWLAN_KEY_MAX_SIZE); 2218 struct ieee80211_key_conf *key_config; 2219 struct ieee80211_key_seq seq; 2220 int link_id = vif->active_links ? __ffs(vif->active_links) : -1; 2221 2222 conf->cipher = cipher; 2223 conf->keyidx = key_data->id; 2224 2225 if (!key_data->len) 2226 return true; 2227 2228 iwl_mvm_d3_set_igtk_bigtk_ipn(key_data, &seq, conf->cipher); 2229 2230 switch (cipher) { 2231 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 2232 conf->keylen = WLAN_KEY_LEN_BIP_GMAC_128; 2233 break; 2234 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 2235 conf->keylen = WLAN_KEY_LEN_BIP_GMAC_256; 2236 break; 2237 case WLAN_CIPHER_SUITE_AES_CMAC: 2238 conf->keylen = WLAN_KEY_LEN_AES_CMAC; 2239 break; 2240 case WLAN_CIPHER_SUITE_BIP_CMAC_256: 2241 conf->keylen = WLAN_KEY_LEN_BIP_CMAC_256; 2242 break; 2243 default: 2244 WARN_ON(1); 2245 } 2246 BUILD_BUG_ON(WOWLAN_KEY_MAX_SIZE < sizeof(key_data->key)); 2247 memcpy(conf->key, key_data->key, conf->keylen); 2248 2249 key_config = ieee80211_gtk_rekey_add(vif, conf, link_id); 2250 if (IS_ERR(key_config)) 2251 return false; 2252 ieee80211_set_key_rx_seq(key_config, 0, &seq); 2253 2254 if (key_config->keyidx == 4 || key_config->keyidx == 5) { 2255 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2256 struct iwl_mvm_vif_link_info *mvm_link; 2257 2258 link_id = link_id < 0 ? 0 : link_id; 2259 mvm_link = mvmvif->link[link_id]; 2260 mvm_link->igtk = key_config; 2261 } 2262 2263 return true; 2264 } 2265 2266 static int iwl_mvm_lookup_wowlan_status_ver(struct iwl_mvm *mvm) 2267 { 2268 u8 notif_ver; 2269 2270 if (!fw_has_api(&mvm->fw->ucode_capa, 2271 IWL_UCODE_TLV_API_WOWLAN_KEY_MATERIAL)) 2272 return 6; 2273 2274 /* default to 7 (when we have IWL_UCODE_TLV_API_WOWLAN_KEY_MATERIAL) */ 2275 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, LONG_GROUP, 2276 WOWLAN_GET_STATUSES, 0); 2277 if (!notif_ver) 2278 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, LEGACY_GROUP, 2279 WOWLAN_GET_STATUSES, 7); 2280 2281 return notif_ver; 2282 } 2283 2284 static bool iwl_mvm_setup_connection_keep(struct iwl_mvm *mvm, 2285 struct ieee80211_vif *vif, 2286 struct iwl_wowlan_status_data *status) 2287 { 2288 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2289 struct iwl_mvm_d3_gtk_iter_data gtkdata = { 2290 .mvm = mvm, 2291 .status = status, 2292 }; 2293 int i; 2294 u32 disconnection_reasons = 2295 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_MISSED_BEACON | 2296 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_DEAUTH; 2297 2298 if (!status || !vif->bss_conf.bssid) 2299 return false; 2300 2301 if (iwl_mvm_lookup_wowlan_status_ver(mvm) > 6 || 2302 iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2303 WOWLAN_INFO_NOTIFICATION, 2304 0)) 2305 gtkdata.igtk_support = true; 2306 2307 if (iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2308 WOWLAN_INFO_NOTIFICATION, 2309 0) >= 3) 2310 gtkdata.bigtk_support = true; 2311 2312 /* find last GTK that we used initially, if any */ 2313 ieee80211_iter_keys(mvm->hw, vif, 2314 iwl_mvm_d3_find_last_keys, >kdata); 2315 /* not trying to keep connections with MFP/unhandled ciphers */ 2316 if (gtkdata.unhandled_cipher) 2317 return false; 2318 if (!gtkdata.num_keys) 2319 goto out; 2320 2321 /* 2322 * invalidate all other GTKs that might still exist and update 2323 * the one that we used 2324 */ 2325 ieee80211_iter_keys(mvm->hw, vif, 2326 iwl_mvm_d3_update_keys, >kdata); 2327 2328 if (status->num_of_gtk_rekeys) { 2329 __be64 replay_ctr = cpu_to_be64(status->replay_ctr); 2330 2331 IWL_DEBUG_WOWLAN(mvm, "num of GTK rekeying %d\n", 2332 status->num_of_gtk_rekeys); 2333 2334 if (!iwl_mvm_gtk_rekey(status, vif, mvm, gtkdata.gtk_cipher)) 2335 return false; 2336 2337 if (!iwl_mvm_d3_igtk_bigtk_rekey_add(status, vif, 2338 gtkdata.igtk_cipher, 2339 &status->igtk)) 2340 return false; 2341 2342 for (i = 0; i < ARRAY_SIZE(status->bigtk); i++) { 2343 if (!iwl_mvm_d3_igtk_bigtk_rekey_add(status, vif, 2344 gtkdata.bigtk_cipher, 2345 &status->bigtk[i])) 2346 return false; 2347 } 2348 2349 if (!iwl_mvm_mlo_gtk_rekey(status, vif, mvm)) 2350 return false; 2351 2352 ieee80211_gtk_rekey_notify(vif, vif->bss_conf.bssid, 2353 (void *)&replay_ctr, GFP_KERNEL); 2354 } 2355 2356 out: 2357 if (iwl_fw_lookup_notif_ver(mvm->fw, LONG_GROUP, 2358 WOWLAN_GET_STATUSES, 2359 IWL_FW_CMD_VER_UNKNOWN) < 10) { 2360 mvmvif->seqno_valid = true; 2361 /* +0x10 because the set API expects next-to-use, not last-used */ 2362 mvmvif->seqno = status->non_qos_seq_ctr + 0x10; 2363 } 2364 2365 if (status->wakeup_reasons & disconnection_reasons) 2366 return false; 2367 2368 return true; 2369 } 2370 2371 static void iwl_mvm_convert_gtk_v2(struct iwl_wowlan_status_data *status, 2372 struct iwl_wowlan_gtk_status_v2 *data) 2373 { 2374 BUILD_BUG_ON(sizeof(status->gtk[0].key) < sizeof(data->key)); 2375 BUILD_BUG_ON(NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY + 2376 sizeof(data->tkip_mic_key) > 2377 sizeof(status->gtk[0].key)); 2378 2379 status->gtk[0].len = data->key_len; 2380 status->gtk[0].flags = data->key_flags; 2381 2382 memcpy(status->gtk[0].key, data->key, sizeof(data->key)); 2383 2384 /* if it's as long as the TKIP encryption key, copy MIC key */ 2385 if (status->gtk[0].len == NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY) 2386 memcpy(status->gtk[0].key + NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY, 2387 data->tkip_mic_key, sizeof(data->tkip_mic_key)); 2388 } 2389 2390 static void iwl_mvm_convert_gtk_v3(struct iwl_wowlan_status_data *status, 2391 struct iwl_wowlan_gtk_status_v3 *data) 2392 { 2393 int data_idx, status_idx = 0; 2394 2395 BUILD_BUG_ON(sizeof(status->gtk[0].key) < sizeof(data[0].key)); 2396 BUILD_BUG_ON(NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY + 2397 sizeof(data[0].tkip_mic_key) > 2398 sizeof(status->gtk[0].key)); 2399 BUILD_BUG_ON(ARRAY_SIZE(status->gtk) < WOWLAN_GTK_KEYS_NUM); 2400 for (data_idx = 0; data_idx < ARRAY_SIZE(status->gtk); data_idx++) { 2401 if (!(data[data_idx].key_len)) 2402 continue; 2403 status->gtk[status_idx].len = data[data_idx].key_len; 2404 status->gtk[status_idx].flags = data[data_idx].key_flags; 2405 status->gtk[status_idx].id = status->gtk[status_idx].flags & 2406 IWL_WOWLAN_GTK_IDX_MASK; 2407 2408 memcpy(status->gtk[status_idx].key, data[data_idx].key, 2409 sizeof(data[data_idx].key)); 2410 2411 /* if it's as long as the TKIP encryption key, copy MIC key */ 2412 if (status->gtk[status_idx].len == 2413 NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY) 2414 memcpy(status->gtk[status_idx].key + 2415 NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY, 2416 data[data_idx].tkip_mic_key, 2417 sizeof(data[data_idx].tkip_mic_key)); 2418 status_idx++; 2419 } 2420 } 2421 2422 static void iwl_mvm_convert_igtk(struct iwl_wowlan_status_data *status, 2423 struct iwl_wowlan_igtk_status *data) 2424 { 2425 int i; 2426 2427 BUILD_BUG_ON(sizeof(status->igtk.key) < sizeof(data->key)); 2428 BUILD_BUG_ON(sizeof(status->igtk.ipn) != sizeof(data->ipn)); 2429 2430 if (!data->key_len) 2431 return; 2432 2433 status->igtk.len = data->key_len; 2434 status->igtk.flags = data->key_flags; 2435 status->igtk.id = u32_get_bits(data->key_flags, 2436 IWL_WOWLAN_IGTK_BIGTK_IDX_MASK) 2437 + WOWLAN_IGTK_MIN_INDEX; 2438 2439 memcpy(status->igtk.key, data->key, sizeof(data->key)); 2440 2441 /* mac80211 expects big endian for memcmp() to work, convert */ 2442 for (i = 0; i < sizeof(data->ipn); i++) 2443 status->igtk.ipn[i] = data->ipn[sizeof(data->ipn) - i - 1]; 2444 } 2445 2446 static void iwl_mvm_convert_bigtk(struct iwl_wowlan_status_data *status, 2447 const struct iwl_wowlan_igtk_status *data) 2448 { 2449 int data_idx, status_idx = 0; 2450 2451 BUILD_BUG_ON(ARRAY_SIZE(status->bigtk) < WOWLAN_BIGTK_KEYS_NUM); 2452 2453 for (data_idx = 0; data_idx < WOWLAN_BIGTK_KEYS_NUM; data_idx++) { 2454 if (!data[data_idx].key_len) 2455 continue; 2456 2457 status->bigtk[status_idx].len = data[data_idx].key_len; 2458 status->bigtk[status_idx].flags = data[data_idx].key_flags; 2459 status->bigtk[status_idx].id = 2460 u32_get_bits(data[data_idx].key_flags, 2461 IWL_WOWLAN_IGTK_BIGTK_IDX_MASK) 2462 + WOWLAN_BIGTK_MIN_INDEX; 2463 2464 BUILD_BUG_ON(sizeof(status->bigtk[status_idx].key) < 2465 sizeof(data[data_idx].key)); 2466 BUILD_BUG_ON(sizeof(status->bigtk[status_idx].ipn) < 2467 sizeof(data[data_idx].ipn)); 2468 2469 memcpy(status->bigtk[status_idx].key, data[data_idx].key, 2470 sizeof(data[data_idx].key)); 2471 memcpy(status->bigtk[status_idx].ipn, data[data_idx].ipn, 2472 sizeof(data[data_idx].ipn)); 2473 status_idx++; 2474 } 2475 } 2476 2477 static void iwl_mvm_parse_wowlan_info_notif(struct iwl_mvm *mvm, 2478 struct iwl_wowlan_info_notif *data, 2479 struct iwl_wowlan_status_data *status, 2480 u32 len) 2481 { 2482 u32 expected_len = sizeof(*data) + 2483 data->num_mlo_link_keys * sizeof(status->mlo_keys[0]); 2484 2485 if (len < expected_len) { 2486 IWL_ERR(mvm, "Invalid WoWLAN info notification!\n"); 2487 status = NULL; 2488 return; 2489 } 2490 2491 if (mvm->fast_resume) 2492 return; 2493 2494 iwl_mvm_convert_key_counters_v5(status, &data->gtk[0].sc); 2495 iwl_mvm_convert_gtk_v3(status, data->gtk); 2496 iwl_mvm_convert_igtk(status, &data->igtk[0]); 2497 iwl_mvm_convert_bigtk(status, data->bigtk); 2498 status->replay_ctr = le64_to_cpu(data->replay_ctr); 2499 status->pattern_number = le16_to_cpu(data->pattern_number); 2500 status->tid_offloaded_tx = data->tid_offloaded_tx; 2501 if (IWL_FW_CHECK(mvm, 2502 data->tid_offloaded_tx >= 2503 ARRAY_SIZE(status->qos_seq_ctr), 2504 "tid_offloaded_tx is out of bound %d\n", 2505 data->tid_offloaded_tx)) 2506 data->tid_offloaded_tx = 0; 2507 status->qos_seq_ctr[data->tid_offloaded_tx] = 2508 le16_to_cpu(data->qos_seq_ctr); 2509 status->wakeup_reasons = le32_to_cpu(data->wakeup_reasons); 2510 status->num_of_gtk_rekeys = 2511 le32_to_cpu(data->num_of_gtk_rekeys); 2512 status->received_beacons = le32_to_cpu(data->received_beacons); 2513 status->tid_tear_down = data->tid_tear_down; 2514 2515 if (data->num_mlo_link_keys) { 2516 status->num_mlo_keys = data->num_mlo_link_keys; 2517 if (IWL_FW_CHECK(mvm, 2518 status->num_mlo_keys > WOWLAN_MAX_MLO_KEYS, 2519 "Too many mlo keys: %d, max %d\n", 2520 status->num_mlo_keys, WOWLAN_MAX_MLO_KEYS)) 2521 status->num_mlo_keys = WOWLAN_MAX_MLO_KEYS; 2522 memcpy(status->mlo_keys, data->mlo_gtks, 2523 status->num_mlo_keys * sizeof(status->mlo_keys[0])); 2524 } 2525 } 2526 2527 static void 2528 iwl_mvm_parse_wowlan_info_notif_v4(struct iwl_mvm *mvm, 2529 struct iwl_wowlan_info_notif_v4 *data, 2530 struct iwl_wowlan_status_data *status, 2531 u32 len, bool has_mlo_keys) 2532 { 2533 u32 i; 2534 u32 expected_len = sizeof(*data); 2535 2536 if (has_mlo_keys) 2537 expected_len += (data->num_mlo_link_keys * 2538 sizeof(status->mlo_keys[0])); 2539 2540 if (len < expected_len) { 2541 IWL_ERR(mvm, "Invalid WoWLAN info notification!\n"); 2542 status = NULL; 2543 return; 2544 } 2545 2546 if (mvm->fast_resume) 2547 return; 2548 2549 iwl_mvm_convert_key_counters_v5(status, &data->gtk[0].sc); 2550 iwl_mvm_convert_gtk_v3(status, data->gtk); 2551 iwl_mvm_convert_igtk(status, &data->igtk[0]); 2552 iwl_mvm_convert_bigtk(status, data->bigtk); 2553 status->replay_ctr = le64_to_cpu(data->replay_ctr); 2554 status->pattern_number = le16_to_cpu(data->pattern_number); 2555 for (i = 0; i < IWL_MAX_TID_COUNT; i++) 2556 status->qos_seq_ctr[i] = 2557 le16_to_cpu(data->qos_seq_ctr[i]); 2558 status->wakeup_reasons = le32_to_cpu(data->wakeup_reasons); 2559 status->num_of_gtk_rekeys = 2560 le32_to_cpu(data->num_of_gtk_rekeys); 2561 status->received_beacons = le32_to_cpu(data->received_beacons); 2562 status->tid_tear_down = data->tid_tear_down; 2563 2564 if (has_mlo_keys && data->num_mlo_link_keys) { 2565 status->num_mlo_keys = data->num_mlo_link_keys; 2566 if (IWL_FW_CHECK(mvm, 2567 status->num_mlo_keys > WOWLAN_MAX_MLO_KEYS, 2568 "Too many mlo keys: %d, max %d\n", 2569 status->num_mlo_keys, WOWLAN_MAX_MLO_KEYS)) 2570 status->num_mlo_keys = WOWLAN_MAX_MLO_KEYS; 2571 memcpy(status->mlo_keys, data->mlo_gtks, 2572 status->num_mlo_keys * sizeof(status->mlo_keys[0])); 2573 } 2574 } 2575 2576 static void 2577 iwl_mvm_parse_wowlan_info_notif_v2(struct iwl_mvm *mvm, 2578 struct iwl_wowlan_info_notif_v2 *data, 2579 struct iwl_wowlan_status_data *status, 2580 u32 len) 2581 { 2582 u32 i; 2583 2584 if (len < sizeof(*data)) { 2585 IWL_ERR(mvm, "Invalid WoWLAN info notification!\n"); 2586 status = NULL; 2587 return; 2588 } 2589 2590 iwl_mvm_convert_key_counters_v5(status, &data->gtk[0].sc); 2591 iwl_mvm_convert_gtk_v3(status, data->gtk); 2592 iwl_mvm_convert_igtk(status, &data->igtk[0]); 2593 status->replay_ctr = le64_to_cpu(data->replay_ctr); 2594 status->pattern_number = le16_to_cpu(data->pattern_number); 2595 for (i = 0; i < IWL_MAX_TID_COUNT; i++) 2596 status->qos_seq_ctr[i] = 2597 le16_to_cpu(data->qos_seq_ctr[i]); 2598 status->wakeup_reasons = le32_to_cpu(data->wakeup_reasons); 2599 status->num_of_gtk_rekeys = 2600 le32_to_cpu(data->num_of_gtk_rekeys); 2601 status->received_beacons = le32_to_cpu(data->received_beacons); 2602 status->tid_tear_down = data->tid_tear_down; 2603 } 2604 2605 /* Occasionally, templates would be nice. This is one of those times ... */ 2606 #define iwl_mvm_parse_wowlan_status_common(_ver) \ 2607 static struct iwl_wowlan_status_data * \ 2608 iwl_mvm_parse_wowlan_status_common_ ## _ver(struct iwl_mvm *mvm, \ 2609 struct iwl_wowlan_status_ ##_ver *data,\ 2610 int len) \ 2611 { \ 2612 struct iwl_wowlan_status_data *status; \ 2613 int data_size, i; \ 2614 \ 2615 if (len < sizeof(*data)) { \ 2616 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); \ 2617 return NULL; \ 2618 } \ 2619 \ 2620 data_size = ALIGN(le32_to_cpu(data->wake_packet_bufsize), 4); \ 2621 if (len != sizeof(*data) + data_size) { \ 2622 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); \ 2623 return NULL; \ 2624 } \ 2625 \ 2626 status = kzalloc(sizeof(*status), GFP_KERNEL); \ 2627 if (!status) \ 2628 return NULL; \ 2629 \ 2630 /* copy all the common fields */ \ 2631 status->replay_ctr = le64_to_cpu(data->replay_ctr); \ 2632 status->pattern_number = le16_to_cpu(data->pattern_number); \ 2633 status->non_qos_seq_ctr = le16_to_cpu(data->non_qos_seq_ctr); \ 2634 for (i = 0; i < 8; i++) \ 2635 status->qos_seq_ctr[i] = \ 2636 le16_to_cpu(data->qos_seq_ctr[i]); \ 2637 status->wakeup_reasons = le32_to_cpu(data->wakeup_reasons); \ 2638 status->num_of_gtk_rekeys = \ 2639 le32_to_cpu(data->num_of_gtk_rekeys); \ 2640 status->received_beacons = le32_to_cpu(data->received_beacons); \ 2641 status->wake_packet_length = \ 2642 le32_to_cpu(data->wake_packet_length); \ 2643 status->wake_packet_bufsize = \ 2644 le32_to_cpu(data->wake_packet_bufsize); \ 2645 if (status->wake_packet_bufsize) { \ 2646 status->wake_packet = \ 2647 kmemdup(data->wake_packet, \ 2648 status->wake_packet_bufsize, \ 2649 GFP_KERNEL); \ 2650 if (!status->wake_packet) { \ 2651 kfree(status); \ 2652 return NULL; \ 2653 } \ 2654 } else { \ 2655 status->wake_packet = NULL; \ 2656 } \ 2657 \ 2658 return status; \ 2659 } 2660 2661 iwl_mvm_parse_wowlan_status_common(v6) 2662 iwl_mvm_parse_wowlan_status_common(v7) 2663 iwl_mvm_parse_wowlan_status_common(v9) 2664 iwl_mvm_parse_wowlan_status_common(v12) 2665 2666 static struct iwl_wowlan_status_data * 2667 iwl_mvm_send_wowlan_get_status(struct iwl_mvm *mvm, u8 sta_id) 2668 { 2669 struct iwl_wowlan_status_data *status; 2670 struct iwl_wowlan_get_status_cmd get_status_cmd = { 2671 .sta_id = cpu_to_le32(sta_id), 2672 }; 2673 struct iwl_host_cmd cmd = { 2674 .id = WOWLAN_GET_STATUSES, 2675 .flags = CMD_WANT_SKB, 2676 .data = { &get_status_cmd, }, 2677 .len = { sizeof(get_status_cmd), }, 2678 }; 2679 int ret, len; 2680 u8 notif_ver; 2681 u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd.id, 2682 IWL_FW_CMD_VER_UNKNOWN); 2683 2684 if (cmd_ver == IWL_FW_CMD_VER_UNKNOWN) 2685 cmd.len[0] = 0; 2686 2687 lockdep_assert_held(&mvm->mutex); 2688 2689 ret = iwl_mvm_send_cmd(mvm, &cmd); 2690 if (ret) { 2691 IWL_ERR(mvm, "failed to query wakeup status (%d)\n", ret); 2692 return ERR_PTR(ret); 2693 } 2694 2695 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 2696 2697 /* default to 7 (when we have IWL_UCODE_TLV_API_WOWLAN_KEY_MATERIAL) */ 2698 notif_ver = iwl_mvm_lookup_wowlan_status_ver(mvm); 2699 2700 if (notif_ver < 7) { 2701 struct iwl_wowlan_status_v6 *v6 = (void *)cmd.resp_pkt->data; 2702 2703 status = iwl_mvm_parse_wowlan_status_common_v6(mvm, v6, len); 2704 if (!status) 2705 goto out_free_resp; 2706 2707 BUILD_BUG_ON(sizeof(v6->gtk.decrypt_key) > 2708 sizeof(status->gtk[0].key)); 2709 BUILD_BUG_ON(NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY + 2710 sizeof(v6->gtk.tkip_mic_key) > 2711 sizeof(status->gtk[0].key)); 2712 2713 /* copy GTK info to the right place */ 2714 memcpy(status->gtk[0].key, v6->gtk.decrypt_key, 2715 sizeof(v6->gtk.decrypt_key)); 2716 memcpy(status->gtk[0].key + NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY, 2717 v6->gtk.tkip_mic_key, 2718 sizeof(v6->gtk.tkip_mic_key)); 2719 2720 iwl_mvm_convert_key_counters(status, &v6->gtk.rsc.all_tsc_rsc); 2721 2722 /* hardcode the key length to 16 since v6 only supports 16 */ 2723 status->gtk[0].len = 16; 2724 2725 /* 2726 * The key index only uses 2 bits (values 0 to 3) and 2727 * we always set bit 7 which means this is the 2728 * currently used key. 2729 */ 2730 status->gtk[0].flags = v6->gtk.key_index | BIT(7); 2731 } else if (notif_ver == 7) { 2732 struct iwl_wowlan_status_v7 *v7 = (void *)cmd.resp_pkt->data; 2733 2734 status = iwl_mvm_parse_wowlan_status_common_v7(mvm, v7, len); 2735 if (!status) 2736 goto out_free_resp; 2737 2738 iwl_mvm_convert_key_counters(status, &v7->gtk[0].rsc.all_tsc_rsc); 2739 iwl_mvm_convert_gtk_v2(status, &v7->gtk[0]); 2740 iwl_mvm_convert_igtk(status, &v7->igtk[0]); 2741 } else if (notif_ver == 9 || notif_ver == 10 || notif_ver == 11) { 2742 struct iwl_wowlan_status_v9 *v9 = (void *)cmd.resp_pkt->data; 2743 2744 /* these three command versions have same layout and size, the 2745 * difference is only in a few not used (reserved) fields. 2746 */ 2747 status = iwl_mvm_parse_wowlan_status_common_v9(mvm, v9, len); 2748 if (!status) 2749 goto out_free_resp; 2750 2751 iwl_mvm_convert_key_counters(status, &v9->gtk[0].rsc.all_tsc_rsc); 2752 iwl_mvm_convert_gtk_v2(status, &v9->gtk[0]); 2753 iwl_mvm_convert_igtk(status, &v9->igtk[0]); 2754 2755 status->tid_tear_down = v9->tid_tear_down; 2756 } else if (notif_ver == 12) { 2757 struct iwl_wowlan_status_v12 *v12 = (void *)cmd.resp_pkt->data; 2758 2759 status = iwl_mvm_parse_wowlan_status_common_v12(mvm, v12, len); 2760 if (!status) 2761 goto out_free_resp; 2762 2763 iwl_mvm_convert_key_counters_v5(status, &v12->gtk[0].sc); 2764 iwl_mvm_convert_gtk_v3(status, v12->gtk); 2765 iwl_mvm_convert_igtk(status, &v12->igtk[0]); 2766 2767 status->tid_tear_down = v12->tid_tear_down; 2768 } else { 2769 IWL_ERR(mvm, 2770 "Firmware advertises unknown WoWLAN status response %d!\n", 2771 notif_ver); 2772 status = NULL; 2773 } 2774 2775 out_free_resp: 2776 iwl_free_resp(&cmd); 2777 return status; 2778 } 2779 2780 /* releases the MVM mutex */ 2781 static bool iwl_mvm_query_wakeup_reasons(struct iwl_mvm *mvm, 2782 struct ieee80211_vif *vif, 2783 struct iwl_wowlan_status_data *status) 2784 { 2785 int i; 2786 bool keep = false; 2787 struct iwl_mvm_sta *mvm_ap_sta; 2788 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2789 int link_id = vif->active_links ? __ffs(vif->active_links) : 0; 2790 struct iwl_mvm_vif_link_info *mvm_link = mvmvif->link[link_id]; 2791 int wowlan_info_ver = iwl_fw_lookup_notif_ver(mvm->fw, 2792 PROT_OFFLOAD_GROUP, 2793 WOWLAN_INFO_NOTIFICATION, 2794 IWL_FW_CMD_VER_UNKNOWN); 2795 2796 if (WARN_ON(!mvm_link)) 2797 goto out_unlock; 2798 2799 if (!status) 2800 goto out_unlock; 2801 2802 IWL_DEBUG_WOWLAN(mvm, "wakeup reason 0x%x\n", 2803 status->wakeup_reasons); 2804 2805 mvm_ap_sta = iwl_mvm_sta_from_staid_protected(mvm, mvm_link->ap_sta_id); 2806 if (!mvm_ap_sta) 2807 goto out_unlock; 2808 2809 /* firmware stores last-used value, we store next value */ 2810 if (wowlan_info_ver >= 5) { 2811 mvm_ap_sta->tid_data[status->tid_offloaded_tx].seq_number = 2812 status->qos_seq_ctr[status->tid_offloaded_tx] + 0x10; 2813 } else { 2814 for (i = 0; i < IWL_MAX_TID_COUNT; i++) 2815 mvm_ap_sta->tid_data[i].seq_number = 2816 status->qos_seq_ctr[i] + 0x10; 2817 } 2818 2819 if (mvm->trans->mac_cfg->device_family >= IWL_DEVICE_FAMILY_22000) { 2820 i = mvm->offload_tid; 2821 iwl_trans_set_q_ptrs(mvm->trans, 2822 mvm_ap_sta->tid_data[i].txq_id, 2823 mvm_ap_sta->tid_data[i].seq_number >> 4); 2824 } 2825 2826 iwl_mvm_report_wakeup_reasons(mvm, vif, status); 2827 2828 keep = iwl_mvm_setup_connection_keep(mvm, vif, status); 2829 out_unlock: 2830 mutex_unlock(&mvm->mutex); 2831 return keep; 2832 } 2833 2834 #define ND_QUERY_BUF_LEN (sizeof(struct iwl_scan_offload_profile_match) * \ 2835 IWL_SCAN_MAX_PROFILES) 2836 2837 struct iwl_mvm_nd_results { 2838 u32 matched_profiles; 2839 u8 matches[ND_QUERY_BUF_LEN]; 2840 }; 2841 2842 static int 2843 iwl_mvm_netdetect_query_results(struct iwl_mvm *mvm, 2844 struct iwl_mvm_nd_results *results) 2845 { 2846 struct iwl_scan_offload_match_info *query; 2847 struct iwl_host_cmd cmd = { 2848 .id = SCAN_OFFLOAD_PROFILES_QUERY_CMD, 2849 .flags = CMD_WANT_SKB, 2850 }; 2851 int ret, len; 2852 size_t query_len, matches_len; 2853 int max_profiles = iwl_umac_scan_get_max_profiles(mvm->fw); 2854 2855 ret = iwl_mvm_send_cmd(mvm, &cmd); 2856 if (ret) { 2857 IWL_ERR(mvm, "failed to query matched profiles (%d)\n", ret); 2858 return ret; 2859 } 2860 2861 if (fw_has_api(&mvm->fw->ucode_capa, 2862 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 2863 query_len = sizeof(struct iwl_scan_offload_match_info); 2864 matches_len = sizeof(struct iwl_scan_offload_profile_match) * 2865 max_profiles; 2866 } else { 2867 query_len = sizeof(struct iwl_scan_offload_profiles_query_v1); 2868 matches_len = sizeof(struct iwl_scan_offload_profile_match_v1) * 2869 max_profiles; 2870 } 2871 2872 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 2873 if (len < query_len) { 2874 IWL_ERR(mvm, "Invalid scan offload profiles query response!\n"); 2875 ret = -EIO; 2876 goto out_free_resp; 2877 } 2878 2879 query = (void *)cmd.resp_pkt->data; 2880 2881 results->matched_profiles = le32_to_cpu(query->matched_profiles); 2882 memcpy(results->matches, query->matches, matches_len); 2883 2884 #ifdef CONFIG_IWLWIFI_DEBUGFS 2885 mvm->last_netdetect_scans = le32_to_cpu(query->n_scans_done); 2886 #endif 2887 2888 out_free_resp: 2889 iwl_free_resp(&cmd); 2890 return ret; 2891 } 2892 2893 static int iwl_mvm_query_num_match_chans(struct iwl_mvm *mvm, 2894 struct iwl_mvm_nd_results *results, 2895 int idx) 2896 { 2897 int n_chans = 0, i; 2898 2899 if (fw_has_api(&mvm->fw->ucode_capa, 2900 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 2901 struct iwl_scan_offload_profile_match *matches = 2902 (void *)results->matches; 2903 2904 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN; i++) 2905 n_chans += hweight8(matches[idx].matching_channels[i]); 2906 } else { 2907 struct iwl_scan_offload_profile_match_v1 *matches = 2908 (void *)results->matches; 2909 2910 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN_V1; i++) 2911 n_chans += hweight8(matches[idx].matching_channels[i]); 2912 } 2913 2914 return n_chans; 2915 } 2916 2917 static void iwl_mvm_query_set_freqs(struct iwl_mvm *mvm, 2918 struct iwl_mvm_nd_results *results, 2919 struct cfg80211_wowlan_nd_match *match, 2920 int idx) 2921 { 2922 int i; 2923 int n_channels = 0; 2924 2925 if (fw_has_api(&mvm->fw->ucode_capa, 2926 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 2927 struct iwl_scan_offload_profile_match *matches = 2928 (void *)results->matches; 2929 2930 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN * 8; i++) 2931 if (matches[idx].matching_channels[i / 8] & (BIT(i % 8))) 2932 match->channels[n_channels++] = 2933 mvm->nd_channels[i]->center_freq; 2934 } else { 2935 struct iwl_scan_offload_profile_match_v1 *matches = 2936 (void *)results->matches; 2937 2938 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN_V1 * 8; i++) 2939 if (matches[idx].matching_channels[i / 8] & (BIT(i % 8))) 2940 match->channels[n_channels++] = 2941 mvm->nd_channels[i]->center_freq; 2942 } 2943 /* We may have ended up with fewer channels than we allocated. */ 2944 match->n_channels = n_channels; 2945 } 2946 2947 /** 2948 * enum iwl_d3_notif - d3 notifications 2949 * @IWL_D3_NOTIF_WOWLAN_INFO: WOWLAN_INFO_NOTIF was received 2950 * @IWL_D3_NOTIF_WOWLAN_WAKE_PKT: WOWLAN_WAKE_PKT_NOTIF was received 2951 * @IWL_D3_NOTIF_PROT_OFFLOAD: PROT_OFFLOAD_NOTIF was received 2952 * @IWL_D3_ND_MATCH_INFO: OFFLOAD_MATCH_INFO_NOTIF was received 2953 * @IWL_D3_NOTIF_D3_END_NOTIF: D3_END_NOTIF was received 2954 */ 2955 enum iwl_d3_notif { 2956 IWL_D3_NOTIF_WOWLAN_INFO = BIT(0), 2957 IWL_D3_NOTIF_WOWLAN_WAKE_PKT = BIT(1), 2958 IWL_D3_NOTIF_PROT_OFFLOAD = BIT(2), 2959 IWL_D3_ND_MATCH_INFO = BIT(3), 2960 IWL_D3_NOTIF_D3_END_NOTIF = BIT(4) 2961 }; 2962 2963 /* manage d3 resume data */ 2964 struct iwl_d3_data { 2965 struct iwl_wowlan_status_data *status; 2966 bool test; 2967 u32 d3_end_flags; 2968 u32 notif_expected; /* bitmap - see &enum iwl_d3_notif */ 2969 u32 notif_received; /* bitmap - see &enum iwl_d3_notif */ 2970 struct iwl_mvm_nd_results *nd_results; 2971 bool nd_results_valid; 2972 }; 2973 2974 static void iwl_mvm_query_netdetect_reasons(struct iwl_mvm *mvm, 2975 struct ieee80211_vif *vif, 2976 struct iwl_d3_data *d3_data) 2977 { 2978 struct cfg80211_wowlan_nd_info *net_detect = NULL; 2979 struct cfg80211_wowlan_wakeup wakeup = { 2980 .pattern_idx = -1, 2981 }; 2982 struct cfg80211_wowlan_wakeup *wakeup_report = &wakeup; 2983 unsigned long matched_profiles; 2984 u32 reasons = 0; 2985 int i, n_matches, ret; 2986 2987 if (WARN_ON(!d3_data || !d3_data->status)) 2988 goto out; 2989 2990 reasons = d3_data->status->wakeup_reasons; 2991 2992 if (reasons & IWL_WOWLAN_WAKEUP_BY_RFKILL_DEASSERTED) 2993 wakeup.rfkill_release = true; 2994 2995 if (reasons != IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) 2996 goto out; 2997 2998 if (!iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2999 WOWLAN_INFO_NOTIFICATION, 0)) { 3000 IWL_INFO(mvm, "Query FW for ND results\n"); 3001 ret = iwl_mvm_netdetect_query_results(mvm, d3_data->nd_results); 3002 3003 } else { 3004 IWL_INFO(mvm, "Notification based ND results\n"); 3005 ret = d3_data->nd_results_valid ? 0 : -1; 3006 } 3007 3008 if (ret || !d3_data->nd_results->matched_profiles) { 3009 wakeup_report = NULL; 3010 goto out; 3011 } 3012 3013 matched_profiles = d3_data->nd_results->matched_profiles; 3014 if (mvm->n_nd_match_sets) { 3015 n_matches = hweight_long(matched_profiles); 3016 } else { 3017 IWL_ERR(mvm, "no net detect match information available\n"); 3018 n_matches = 0; 3019 } 3020 3021 net_detect = kzalloc(struct_size(net_detect, matches, n_matches), 3022 GFP_KERNEL); 3023 if (!net_detect || !n_matches) 3024 goto out_report_nd; 3025 net_detect->n_matches = n_matches; 3026 n_matches = 0; 3027 3028 for_each_set_bit(i, &matched_profiles, mvm->n_nd_match_sets) { 3029 struct cfg80211_wowlan_nd_match *match; 3030 int idx, n_channels = 0; 3031 3032 n_channels = iwl_mvm_query_num_match_chans(mvm, 3033 d3_data->nd_results, 3034 i); 3035 3036 match = kzalloc(struct_size(match, channels, n_channels), 3037 GFP_KERNEL); 3038 if (!match) 3039 goto out_report_nd; 3040 match->n_channels = n_channels; 3041 3042 net_detect->matches[n_matches++] = match; 3043 3044 /* We inverted the order of the SSIDs in the scan 3045 * request, so invert the index here. 3046 */ 3047 idx = mvm->n_nd_match_sets - i - 1; 3048 match->ssid.ssid_len = mvm->nd_match_sets[idx].ssid.ssid_len; 3049 memcpy(match->ssid.ssid, mvm->nd_match_sets[idx].ssid.ssid, 3050 match->ssid.ssid_len); 3051 3052 if (mvm->n_nd_channels < n_channels) 3053 continue; 3054 3055 iwl_mvm_query_set_freqs(mvm, d3_data->nd_results, match, i); 3056 } 3057 /* We may have fewer matches than we allocated. */ 3058 net_detect->n_matches = n_matches; 3059 3060 out_report_nd: 3061 wakeup.net_detect = net_detect; 3062 out: 3063 iwl_mvm_free_nd(mvm); 3064 3065 mutex_unlock(&mvm->mutex); 3066 ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL); 3067 3068 if (net_detect) { 3069 for (i = 0; i < net_detect->n_matches; i++) 3070 kfree(net_detect->matches[i]); 3071 kfree(net_detect); 3072 } 3073 } 3074 3075 static void iwl_mvm_d3_disconnect_iter(void *data, u8 *mac, 3076 struct ieee80211_vif *vif) 3077 { 3078 /* skip the one we keep connection on */ 3079 if (data == vif) 3080 return; 3081 3082 if (vif->type == NL80211_IFTYPE_STATION) 3083 ieee80211_resume_disconnect(vif); 3084 } 3085 3086 enum rt_status { 3087 FW_ALIVE, 3088 FW_NEEDS_RESET, 3089 FW_ERROR, 3090 }; 3091 3092 static enum rt_status iwl_mvm_check_rt_status(struct iwl_mvm *mvm, 3093 struct ieee80211_vif *vif) 3094 { 3095 u32 err_id; 3096 3097 /* check for lmac1 error */ 3098 if (iwl_fwrt_read_err_table(mvm->trans, 3099 mvm->trans->dbg.lmac_error_event_table[0], 3100 &err_id)) { 3101 if (err_id == RF_KILL_INDICATOR_FOR_WOWLAN) { 3102 IWL_WARN(mvm, "Rfkill was toggled during suspend\n"); 3103 if (vif) { 3104 struct cfg80211_wowlan_wakeup wakeup = { 3105 .rfkill_release = true, 3106 }; 3107 3108 ieee80211_report_wowlan_wakeup(vif, &wakeup, 3109 GFP_KERNEL); 3110 } 3111 3112 return FW_NEEDS_RESET; 3113 } 3114 return FW_ERROR; 3115 } 3116 3117 /* check if we have lmac2 set and check for error */ 3118 if (iwl_fwrt_read_err_table(mvm->trans, 3119 mvm->trans->dbg.lmac_error_event_table[1], 3120 NULL)) 3121 return FW_ERROR; 3122 3123 /* check for umac error */ 3124 if (iwl_fwrt_read_err_table(mvm->trans, 3125 mvm->trans->dbg.umac_error_event_table, 3126 NULL)) 3127 return FW_ERROR; 3128 3129 return FW_ALIVE; 3130 } 3131 3132 /* 3133 * This function assumes: 3134 * 1. The mutex is already held. 3135 * 2. The callee functions unlock the mutex. 3136 */ 3137 static bool 3138 iwl_mvm_choose_query_wakeup_reasons(struct iwl_mvm *mvm, 3139 struct ieee80211_vif *vif, 3140 struct iwl_d3_data *d3_data) 3141 { 3142 lockdep_assert_held(&mvm->mutex); 3143 3144 /* if FW uses status notification, status shouldn't be NULL here */ 3145 if (!d3_data->status) { 3146 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3147 u8 sta_id = mvm->net_detect ? IWL_INVALID_STA : 3148 mvmvif->deflink.ap_sta_id; 3149 3150 /* bug - FW with MLO has status notification */ 3151 WARN_ON(ieee80211_vif_is_mld(vif)); 3152 3153 d3_data->status = iwl_mvm_send_wowlan_get_status(mvm, sta_id); 3154 } 3155 3156 if (mvm->net_detect) { 3157 iwl_mvm_query_netdetect_reasons(mvm, vif, d3_data); 3158 } else { 3159 bool keep = iwl_mvm_query_wakeup_reasons(mvm, vif, 3160 d3_data->status); 3161 3162 #ifdef CONFIG_IWLWIFI_DEBUGFS 3163 if (keep) 3164 mvm->keep_vif = vif; 3165 #endif 3166 3167 return keep; 3168 } 3169 return false; 3170 } 3171 3172 #define IWL_WOWLAN_WAKEUP_REASON_HAS_WAKEUP_PKT (IWL_WOWLAN_WAKEUP_BY_MAGIC_PACKET | \ 3173 IWL_WOWLAN_WAKEUP_BY_PATTERN | \ 3174 IWL_WAKEUP_BY_PATTERN_IPV4_TCP_SYN |\ 3175 IWL_WAKEUP_BY_PATTERN_IPV4_TCP_SYN_WILDCARD |\ 3176 IWL_WAKEUP_BY_PATTERN_IPV6_TCP_SYN |\ 3177 IWL_WAKEUP_BY_PATTERN_IPV6_TCP_SYN_WILDCARD) 3178 3179 static int iwl_mvm_wowlan_store_wake_pkt(struct iwl_mvm *mvm, 3180 struct iwl_wowlan_wake_pkt_notif *notif, 3181 struct iwl_wowlan_status_data *status, 3182 u32 len) 3183 { 3184 u32 data_size, packet_len = le32_to_cpu(notif->wake_packet_length); 3185 3186 if (len < sizeof(*notif)) { 3187 IWL_ERR(mvm, "Invalid WoWLAN wake packet notification!\n"); 3188 return -EIO; 3189 } 3190 3191 if (WARN_ON(!status)) { 3192 IWL_ERR(mvm, "Got wake packet notification but wowlan status data is NULL\n"); 3193 return -EIO; 3194 } 3195 3196 if (WARN_ON(!(status->wakeup_reasons & 3197 IWL_WOWLAN_WAKEUP_REASON_HAS_WAKEUP_PKT))) { 3198 IWL_ERR(mvm, "Got wakeup packet but wakeup reason is %x\n", 3199 status->wakeup_reasons); 3200 return -EIO; 3201 } 3202 3203 data_size = len - offsetof(struct iwl_wowlan_wake_pkt_notif, wake_packet); 3204 3205 /* data_size got the padding from the notification, remove it. */ 3206 if (packet_len < data_size) 3207 data_size = packet_len; 3208 3209 status->wake_packet = kmemdup(notif->wake_packet, data_size, 3210 GFP_ATOMIC); 3211 3212 if (!status->wake_packet) 3213 return -ENOMEM; 3214 3215 status->wake_packet_length = packet_len; 3216 status->wake_packet_bufsize = data_size; 3217 3218 return 0; 3219 } 3220 3221 static void iwl_mvm_nd_match_info_handler(struct iwl_mvm *mvm, 3222 struct iwl_d3_data *d3_data, 3223 struct iwl_scan_offload_match_info *notif, 3224 u32 len) 3225 { 3226 struct iwl_wowlan_status_data *status = d3_data->status; 3227 struct ieee80211_vif *vif = iwl_mvm_get_bss_vif(mvm); 3228 struct iwl_mvm_nd_results *results = d3_data->nd_results; 3229 size_t i, matches_len = sizeof(struct iwl_scan_offload_profile_match) * 3230 iwl_umac_scan_get_max_profiles(mvm->fw); 3231 3232 if (IS_ERR_OR_NULL(vif)) 3233 return; 3234 3235 if (len < sizeof(struct iwl_scan_offload_match_info)) { 3236 IWL_ERR(mvm, "Invalid scan match info notification\n"); 3237 return; 3238 } 3239 3240 if (!mvm->net_detect) { 3241 IWL_ERR(mvm, "Unexpected scan match info notification\n"); 3242 return; 3243 } 3244 3245 if (!status || status->wakeup_reasons != IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) { 3246 IWL_ERR(mvm, 3247 "Ignore scan match info notification: no reason\n"); 3248 return; 3249 } 3250 3251 #ifdef CONFIG_IWLWIFI_DEBUGFS 3252 mvm->last_netdetect_scans = le32_to_cpu(notif->n_scans_done); 3253 #endif 3254 3255 results->matched_profiles = le32_to_cpu(notif->matched_profiles); 3256 IWL_INFO(mvm, "number of matched profiles=%u\n", 3257 results->matched_profiles); 3258 3259 if (results->matched_profiles) { 3260 memcpy(results->matches, notif->matches, matches_len); 3261 d3_data->nd_results_valid = true; 3262 } 3263 3264 /* no scan should be active at this point */ 3265 mvm->scan_status = 0; 3266 for (i = 0; i < mvm->max_scans; i++) 3267 mvm->scan_uid_status[i] = 0; 3268 } 3269 3270 static bool iwl_mvm_wait_d3_notif(struct iwl_notif_wait_data *notif_wait, 3271 struct iwl_rx_packet *pkt, void *data) 3272 { 3273 struct iwl_mvm *mvm = 3274 container_of(notif_wait, struct iwl_mvm, notif_wait); 3275 struct iwl_d3_data *d3_data = data; 3276 u32 len = iwl_rx_packet_payload_len(pkt); 3277 int ret; 3278 int wowlan_info_ver = iwl_fw_lookup_notif_ver(mvm->fw, 3279 PROT_OFFLOAD_GROUP, 3280 WOWLAN_INFO_NOTIFICATION, 3281 IWL_FW_CMD_VER_UNKNOWN); 3282 3283 3284 switch (WIDE_ID(pkt->hdr.group_id, pkt->hdr.cmd)) { 3285 case WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_INFO_NOTIFICATION): { 3286 3287 if (d3_data->notif_received & IWL_D3_NOTIF_WOWLAN_INFO) { 3288 /* We might get two notifications due to dual bss */ 3289 IWL_DEBUG_WOWLAN(mvm, 3290 "Got additional wowlan info notification\n"); 3291 break; 3292 } 3293 3294 if (wowlan_info_ver < 2) { 3295 struct iwl_wowlan_info_notif_v1 *notif_v1 = 3296 (void *)pkt->data; 3297 struct iwl_wowlan_info_notif_v2 *notif_v2; 3298 3299 notif_v2 = kmemdup(notif_v1, sizeof(*notif_v2), GFP_ATOMIC); 3300 3301 if (!notif_v2) 3302 return false; 3303 3304 notif_v2->tid_tear_down = notif_v1->tid_tear_down; 3305 notif_v2->station_id = notif_v1->station_id; 3306 memset_after(notif_v2, 0, station_id); 3307 iwl_mvm_parse_wowlan_info_notif_v2(mvm, notif_v2, 3308 d3_data->status, 3309 len); 3310 kfree(notif_v2); 3311 3312 } else if (wowlan_info_ver == 2) { 3313 struct iwl_wowlan_info_notif_v2 *notif_v2 = 3314 (void *)pkt->data; 3315 3316 iwl_mvm_parse_wowlan_info_notif_v2(mvm, notif_v2, 3317 d3_data->status, 3318 len); 3319 } else if (wowlan_info_ver < 5) { 3320 struct iwl_wowlan_info_notif_v4 *notif = 3321 (void *)pkt->data; 3322 3323 iwl_mvm_parse_wowlan_info_notif_v4(mvm, notif, 3324 d3_data->status, len, 3325 wowlan_info_ver > 3); 3326 } else { 3327 struct iwl_wowlan_info_notif *notif = 3328 (void *)pkt->data; 3329 3330 iwl_mvm_parse_wowlan_info_notif(mvm, notif, 3331 d3_data->status, len); 3332 } 3333 3334 d3_data->notif_received |= IWL_D3_NOTIF_WOWLAN_INFO; 3335 3336 if (d3_data->status && 3337 d3_data->status->wakeup_reasons & IWL_WOWLAN_WAKEUP_REASON_HAS_WAKEUP_PKT) 3338 /* We are supposed to get also wake packet notif */ 3339 d3_data->notif_expected |= IWL_D3_NOTIF_WOWLAN_WAKE_PKT; 3340 3341 break; 3342 } 3343 case WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_WAKE_PKT_NOTIFICATION): { 3344 struct iwl_wowlan_wake_pkt_notif *notif = (void *)pkt->data; 3345 3346 if (d3_data->notif_received & IWL_D3_NOTIF_WOWLAN_WAKE_PKT) { 3347 /* We shouldn't get two wake packet notifications */ 3348 IWL_ERR(mvm, 3349 "Got additional wowlan wake packet notification\n"); 3350 } else { 3351 d3_data->notif_received |= IWL_D3_NOTIF_WOWLAN_WAKE_PKT; 3352 len = iwl_rx_packet_payload_len(pkt); 3353 ret = iwl_mvm_wowlan_store_wake_pkt(mvm, notif, 3354 d3_data->status, 3355 len); 3356 if (ret) 3357 IWL_ERR(mvm, 3358 "Can't parse WOWLAN_WAKE_PKT_NOTIFICATION\n"); 3359 } 3360 3361 break; 3362 } 3363 case WIDE_ID(SCAN_GROUP, OFFLOAD_MATCH_INFO_NOTIF): { 3364 struct iwl_scan_offload_match_info *notif = (void *)pkt->data; 3365 3366 if (d3_data->notif_received & IWL_D3_ND_MATCH_INFO) { 3367 IWL_ERR(mvm, 3368 "Got additional netdetect match info\n"); 3369 break; 3370 } 3371 3372 d3_data->notif_received |= IWL_D3_ND_MATCH_INFO; 3373 3374 /* explicitly set this in the 'expected' as well */ 3375 d3_data->notif_expected |= IWL_D3_ND_MATCH_INFO; 3376 3377 len = iwl_rx_packet_payload_len(pkt); 3378 iwl_mvm_nd_match_info_handler(mvm, d3_data, notif, len); 3379 break; 3380 } 3381 case WIDE_ID(PROT_OFFLOAD_GROUP, D3_END_NOTIFICATION): { 3382 struct iwl_d3_end_notif *notif = (void *)pkt->data; 3383 3384 d3_data->d3_end_flags = __le32_to_cpu(notif->flags); 3385 d3_data->notif_received |= IWL_D3_NOTIF_D3_END_NOTIF; 3386 3387 break; 3388 } 3389 default: 3390 WARN_ON(1); 3391 } 3392 3393 return d3_data->notif_received == d3_data->notif_expected; 3394 } 3395 3396 static int iwl_mvm_resume_firmware(struct iwl_mvm *mvm, bool test) 3397 { 3398 int ret; 3399 enum iwl_d3_status d3_status; 3400 struct iwl_host_cmd cmd = { 3401 .id = D0I3_END_CMD, 3402 .flags = CMD_WANT_SKB, 3403 }; 3404 bool reset = fw_has_capa(&mvm->fw->ucode_capa, 3405 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 3406 3407 ret = iwl_trans_d3_resume(mvm->trans, &d3_status, test, !reset); 3408 if (ret) 3409 return ret; 3410 3411 if (d3_status != IWL_D3_STATUS_ALIVE) { 3412 IWL_INFO(mvm, "Device was reset during suspend\n"); 3413 return -ENOENT; 3414 } 3415 3416 /* 3417 * We should trigger resume flow using command only for 22000 family 3418 * AX210 and above don't need the command since they have 3419 * the doorbell interrupt. 3420 */ 3421 if (mvm->trans->mac_cfg->device_family <= IWL_DEVICE_FAMILY_22000 && 3422 fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_D0I3_END_FIRST)) { 3423 ret = iwl_mvm_send_cmd(mvm, &cmd); 3424 if (ret < 0) 3425 IWL_ERR(mvm, "Failed to send D0I3_END_CMD first (%d)\n", 3426 ret); 3427 } 3428 3429 return ret; 3430 } 3431 3432 #define IWL_MVM_D3_NOTIF_TIMEOUT (HZ / 3) 3433 3434 static int iwl_mvm_d3_notif_wait(struct iwl_mvm *mvm, 3435 struct iwl_d3_data *d3_data) 3436 { 3437 static const u16 d3_resume_notif[] = { 3438 WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_INFO_NOTIFICATION), 3439 WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_WAKE_PKT_NOTIFICATION), 3440 WIDE_ID(SCAN_GROUP, OFFLOAD_MATCH_INFO_NOTIF), 3441 WIDE_ID(PROT_OFFLOAD_GROUP, D3_END_NOTIFICATION) 3442 }; 3443 static const u16 d3_fast_resume_notif[] = { 3444 WIDE_ID(PROT_OFFLOAD_GROUP, D3_END_NOTIFICATION) 3445 }; 3446 struct iwl_notification_wait wait_d3_notif; 3447 int ret; 3448 3449 if (mvm->fast_resume) 3450 iwl_init_notification_wait(&mvm->notif_wait, &wait_d3_notif, 3451 d3_fast_resume_notif, 3452 ARRAY_SIZE(d3_fast_resume_notif), 3453 iwl_mvm_wait_d3_notif, d3_data); 3454 else 3455 iwl_init_notification_wait(&mvm->notif_wait, &wait_d3_notif, 3456 d3_resume_notif, 3457 ARRAY_SIZE(d3_resume_notif), 3458 iwl_mvm_wait_d3_notif, d3_data); 3459 3460 ret = iwl_mvm_resume_firmware(mvm, d3_data->test); 3461 if (ret) { 3462 iwl_remove_notification(&mvm->notif_wait, &wait_d3_notif); 3463 return ret; 3464 } 3465 3466 return iwl_wait_notification(&mvm->notif_wait, &wait_d3_notif, 3467 IWL_MVM_D3_NOTIF_TIMEOUT); 3468 } 3469 3470 static inline bool iwl_mvm_d3_resume_notif_based(struct iwl_mvm *mvm) 3471 { 3472 return iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 3473 WOWLAN_INFO_NOTIFICATION, 0) && 3474 iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 3475 WOWLAN_WAKE_PKT_NOTIFICATION, 0) && 3476 iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 3477 D3_END_NOTIFICATION, 0); 3478 } 3479 3480 static int __iwl_mvm_resume(struct iwl_mvm *mvm, bool test) 3481 { 3482 struct ieee80211_vif *vif = NULL; 3483 int ret = 1; 3484 struct iwl_mvm_nd_results results = {}; 3485 struct iwl_d3_data d3_data = { 3486 .test = test, 3487 .notif_expected = 3488 IWL_D3_NOTIF_WOWLAN_INFO | 3489 IWL_D3_NOTIF_D3_END_NOTIF, 3490 .nd_results_valid = false, 3491 .nd_results = &results, 3492 }; 3493 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 3494 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 3495 bool d0i3_first = fw_has_capa(&mvm->fw->ucode_capa, 3496 IWL_UCODE_TLV_CAPA_D0I3_END_FIRST); 3497 bool resume_notif_based = iwl_mvm_d3_resume_notif_based(mvm); 3498 enum rt_status rt_status; 3499 bool keep = false; 3500 3501 mutex_lock(&mvm->mutex); 3502 3503 /* Apparently, the device went away and device_powered_off() was called, 3504 * don't even try to read the rt_status, the device is currently 3505 * inaccessible. 3506 */ 3507 if (!test_bit(IWL_MVM_STATUS_IN_D3, &mvm->status)) { 3508 IWL_INFO(mvm, 3509 "Can't resume, device_powered_off() was called during wowlan\n"); 3510 goto err; 3511 } 3512 3513 mvm->last_reset_or_resume_time_jiffies = jiffies; 3514 3515 /* get the BSS vif pointer again */ 3516 vif = iwl_mvm_get_bss_vif(mvm); 3517 if (IS_ERR_OR_NULL(vif)) 3518 goto err; 3519 3520 iwl_fw_dbg_read_d3_debug_data(&mvm->fwrt); 3521 3522 rt_status = iwl_mvm_check_rt_status(mvm, vif); 3523 if (rt_status != FW_ALIVE) { 3524 set_bit(STATUS_FW_ERROR, &mvm->trans->status); 3525 if (rt_status == FW_ERROR) { 3526 IWL_ERR(mvm, "FW Error occurred during suspend. Restarting.\n"); 3527 iwl_mvm_dump_nic_error_log(mvm); 3528 iwl_dbg_tlv_time_point(&mvm->fwrt, 3529 IWL_FW_INI_TIME_POINT_FW_ASSERT, 3530 NULL); 3531 iwl_fw_dbg_collect_desc(&mvm->fwrt, 3532 &iwl_dump_desc_assert, 3533 false, 0); 3534 } 3535 ret = 1; 3536 goto err; 3537 } 3538 3539 if (resume_notif_based) { 3540 d3_data.status = kzalloc(sizeof(*d3_data.status), GFP_KERNEL); 3541 if (!d3_data.status) { 3542 IWL_ERR(mvm, "Failed to allocate wowlan status\n"); 3543 ret = -ENOMEM; 3544 goto err; 3545 } 3546 3547 ret = iwl_mvm_d3_notif_wait(mvm, &d3_data); 3548 if (ret) 3549 goto err; 3550 } else { 3551 ret = iwl_mvm_resume_firmware(mvm, test); 3552 if (ret < 0) 3553 goto err; 3554 } 3555 3556 iwl_mvm_unblock_esr(mvm, vif, IWL_MVM_ESR_BLOCKED_WOWLAN); 3557 3558 /* when reset is required we can't send these following commands */ 3559 if (d3_data.d3_end_flags & IWL_D0I3_RESET_REQUIRE) 3560 goto query_wakeup_reasons; 3561 3562 /* 3563 * Query the current location and source from the D3 firmware so we 3564 * can play it back when we re-intiailize the D0 firmware 3565 */ 3566 iwl_mvm_update_changed_regdom(mvm); 3567 3568 /* Re-configure PPAG settings */ 3569 iwl_mvm_ppag_send_cmd(mvm); 3570 3571 if (!unified_image) 3572 /* Re-configure default SAR profile */ 3573 iwl_mvm_sar_select_profile(mvm, 1, 1); 3574 3575 if (mvm->net_detect && unified_image) { 3576 /* If this is a non-unified image, we restart the FW, 3577 * so no need to stop the netdetect scan. If that 3578 * fails, continue and try to get the wake-up reasons, 3579 * but trigger a HW restart by keeping a failure code 3580 * in ret. 3581 */ 3582 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_NETDETECT, 3583 false); 3584 } 3585 3586 query_wakeup_reasons: 3587 keep = iwl_mvm_choose_query_wakeup_reasons(mvm, vif, &d3_data); 3588 /* has unlocked the mutex, so skip that */ 3589 goto out; 3590 3591 err: 3592 mutex_unlock(&mvm->mutex); 3593 out: 3594 if (d3_data.status) 3595 kfree(d3_data.status->wake_packet); 3596 kfree(d3_data.status); 3597 iwl_mvm_free_nd(mvm); 3598 3599 if (!d3_data.test && !mvm->net_detect) 3600 ieee80211_iterate_active_interfaces_mtx(mvm->hw, 3601 IEEE80211_IFACE_ITER_NORMAL, 3602 iwl_mvm_d3_disconnect_iter, 3603 keep ? vif : NULL); 3604 3605 clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 3606 3607 /* no need to reset the device in unified images, if successful */ 3608 if (unified_image && !ret) { 3609 /* nothing else to do if we already sent D0I3_END_CMD */ 3610 if (d0i3_first) 3611 return 0; 3612 3613 if (!iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 3614 D3_END_NOTIFICATION, 0)) { 3615 ret = iwl_mvm_send_cmd_pdu(mvm, D0I3_END_CMD, 0, 0, NULL); 3616 if (!ret) 3617 return 0; 3618 } else if (!(d3_data.d3_end_flags & IWL_D0I3_RESET_REQUIRE)) { 3619 return 0; 3620 } 3621 } 3622 3623 /* 3624 * Reconfigure the device in one of the following cases: 3625 * 1. We are not using a unified image 3626 * 2. We are using a unified image but had an error while exiting D3 3627 */ 3628 set_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED, &mvm->status); 3629 3630 return 1; 3631 } 3632 3633 int iwl_mvm_resume(struct ieee80211_hw *hw) 3634 { 3635 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3636 int ret; 3637 3638 ret = __iwl_mvm_resume(mvm, false); 3639 3640 iwl_mvm_resume_tcm(mvm); 3641 3642 iwl_fw_runtime_resume(&mvm->fwrt); 3643 3644 return ret; 3645 } 3646 3647 void iwl_mvm_set_wakeup(struct ieee80211_hw *hw, bool enabled) 3648 { 3649 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3650 3651 device_set_wakeup_enable(mvm->trans->dev, enabled); 3652 } 3653 3654 void iwl_mvm_fast_suspend(struct iwl_mvm *mvm) 3655 { 3656 struct iwl_d3_manager_config d3_cfg_cmd_data = {}; 3657 int ret; 3658 3659 lockdep_assert_held(&mvm->mutex); 3660 3661 IWL_DEBUG_WOWLAN(mvm, "Starting fast suspend flow\n"); 3662 3663 mvm->fast_resume = true; 3664 set_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 3665 3666 WARN_ON(iwl_mvm_power_update_device(mvm)); 3667 ret = iwl_mvm_send_cmd_pdu(mvm, D3_CONFIG_CMD, 0, 3668 sizeof(d3_cfg_cmd_data), &d3_cfg_cmd_data); 3669 if (ret) 3670 IWL_ERR(mvm, 3671 "fast suspend: couldn't send D3_CONFIG_CMD %d\n", ret); 3672 3673 ret = iwl_trans_d3_suspend(mvm->trans, false, false); 3674 if (ret) 3675 IWL_ERR(mvm, "fast suspend: trans_d3_suspend failed %d\n", ret); 3676 } 3677 3678 int iwl_mvm_fast_resume(struct iwl_mvm *mvm) 3679 { 3680 struct iwl_d3_data d3_data = { 3681 .notif_expected = 3682 IWL_D3_NOTIF_D3_END_NOTIF, 3683 }; 3684 enum rt_status rt_status; 3685 int ret; 3686 3687 lockdep_assert_held(&mvm->mutex); 3688 3689 IWL_DEBUG_WOWLAN(mvm, "Starting the fast resume flow\n"); 3690 3691 mvm->last_reset_or_resume_time_jiffies = jiffies; 3692 iwl_fw_dbg_read_d3_debug_data(&mvm->fwrt); 3693 3694 rt_status = iwl_mvm_check_rt_status(mvm, NULL); 3695 if (rt_status != FW_ALIVE) { 3696 set_bit(STATUS_FW_ERROR, &mvm->trans->status); 3697 if (rt_status == FW_ERROR) { 3698 IWL_ERR(mvm, 3699 "iwl_mvm_check_rt_status failed, device is gone during suspend\n"); 3700 iwl_mvm_dump_nic_error_log(mvm); 3701 iwl_dbg_tlv_time_point(&mvm->fwrt, 3702 IWL_FW_INI_TIME_POINT_FW_ASSERT, 3703 NULL); 3704 iwl_fw_dbg_collect_desc(&mvm->fwrt, 3705 &iwl_dump_desc_assert, 3706 false, 0); 3707 } 3708 mvm->trans->state = IWL_TRANS_NO_FW; 3709 ret = -ENODEV; 3710 3711 goto out; 3712 } 3713 ret = iwl_mvm_d3_notif_wait(mvm, &d3_data); 3714 3715 if (ret) { 3716 IWL_ERR(mvm, "Couldn't get the d3 notif %d\n", ret); 3717 mvm->trans->state = IWL_TRANS_NO_FW; 3718 } 3719 3720 out: 3721 clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 3722 mvm->fast_resume = false; 3723 3724 return ret; 3725 } 3726 3727 #ifdef CONFIG_IWLWIFI_DEBUGFS 3728 static int iwl_mvm_d3_test_open(struct inode *inode, struct file *file) 3729 { 3730 struct iwl_mvm *mvm = inode->i_private; 3731 int err; 3732 3733 if (mvm->d3_test_active) 3734 return -EBUSY; 3735 3736 file->private_data = inode->i_private; 3737 3738 iwl_mvm_pause_tcm(mvm, true); 3739 3740 iwl_fw_runtime_suspend(&mvm->fwrt); 3741 3742 /* start pseudo D3 */ 3743 rtnl_lock(); 3744 wiphy_lock(mvm->hw->wiphy); 3745 err = __iwl_mvm_suspend(mvm->hw, mvm->hw->wiphy->wowlan_config, true); 3746 wiphy_unlock(mvm->hw->wiphy); 3747 rtnl_unlock(); 3748 if (err > 0) 3749 err = -EINVAL; 3750 if (err) 3751 return err; 3752 3753 mvm->d3_test_active = true; 3754 mvm->keep_vif = NULL; 3755 return 0; 3756 } 3757 3758 static ssize_t iwl_mvm_d3_test_read(struct file *file, char __user *user_buf, 3759 size_t count, loff_t *ppos) 3760 { 3761 struct iwl_mvm *mvm = file->private_data; 3762 unsigned long end = jiffies + 60 * HZ; 3763 u32 pme_asserted; 3764 3765 while (true) { 3766 /* read pme_ptr if available */ 3767 if (mvm->d3_test_pme_ptr) { 3768 pme_asserted = iwl_trans_read_mem32(mvm->trans, 3769 mvm->d3_test_pme_ptr); 3770 if (pme_asserted) 3771 break; 3772 } 3773 3774 if (msleep_interruptible(100)) 3775 break; 3776 3777 if (time_is_before_jiffies(end)) { 3778 IWL_ERR(mvm, 3779 "ending pseudo-D3 with timeout after ~60 seconds\n"); 3780 return -ETIMEDOUT; 3781 } 3782 } 3783 3784 return 0; 3785 } 3786 3787 static void iwl_mvm_d3_test_disconn_work_iter(void *_data, u8 *mac, 3788 struct ieee80211_vif *vif) 3789 { 3790 /* skip the one we keep connection on */ 3791 if (_data == vif) 3792 return; 3793 3794 if (vif->type == NL80211_IFTYPE_STATION) 3795 ieee80211_connection_loss(vif); 3796 } 3797 3798 static int iwl_mvm_d3_test_release(struct inode *inode, struct file *file) 3799 { 3800 struct iwl_mvm *mvm = inode->i_private; 3801 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 3802 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 3803 3804 mvm->d3_test_active = false; 3805 3806 iwl_fw_dbg_read_d3_debug_data(&mvm->fwrt); 3807 3808 rtnl_lock(); 3809 wiphy_lock(mvm->hw->wiphy); 3810 __iwl_mvm_resume(mvm, true); 3811 wiphy_unlock(mvm->hw->wiphy); 3812 rtnl_unlock(); 3813 3814 iwl_mvm_resume_tcm(mvm); 3815 3816 iwl_fw_runtime_resume(&mvm->fwrt); 3817 3818 iwl_abort_notification_waits(&mvm->notif_wait); 3819 if (!unified_image) { 3820 int remaining_time = 10; 3821 3822 ieee80211_restart_hw(mvm->hw); 3823 3824 /* wait for restart and disconnect all interfaces */ 3825 while (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 3826 remaining_time > 0) { 3827 remaining_time--; 3828 msleep(1000); 3829 } 3830 3831 if (remaining_time == 0) 3832 IWL_ERR(mvm, "Timed out waiting for HW restart!\n"); 3833 } 3834 3835 ieee80211_iterate_active_interfaces_atomic( 3836 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 3837 iwl_mvm_d3_test_disconn_work_iter, mvm->keep_vif); 3838 3839 return 0; 3840 } 3841 3842 const struct file_operations iwl_dbgfs_d3_test_ops = { 3843 .open = iwl_mvm_d3_test_open, 3844 .read = iwl_mvm_d3_test_read, 3845 .release = iwl_mvm_d3_test_release, 3846 }; 3847 #endif 3848