1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * HT handling 4 * 5 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> 6 * Copyright 2002-2005, Instant802 Networks, Inc. 7 * Copyright 2005-2006, Devicescape Software, Inc. 8 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 9 * Copyright 2007, Michael Wu <flamingice@sourmilk.net> 10 * Copyright 2007-2010, Intel Corporation 11 * Copyright 2017 Intel Deutschland GmbH 12 * Copyright(c) 2020-2023 Intel Corporation 13 */ 14 15 #include <linux/ieee80211.h> 16 #include <linux/export.h> 17 #include <net/mac80211.h> 18 #include "ieee80211_i.h" 19 #include "rate.h" 20 21 static void __check_htcap_disable(struct ieee80211_ht_cap *ht_capa, 22 struct ieee80211_ht_cap *ht_capa_mask, 23 struct ieee80211_sta_ht_cap *ht_cap, 24 u16 flag) 25 { 26 __le16 le_flag = cpu_to_le16(flag); 27 if (ht_capa_mask->cap_info & le_flag) { 28 if (!(ht_capa->cap_info & le_flag)) 29 ht_cap->cap &= ~flag; 30 } 31 } 32 33 static void __check_htcap_enable(struct ieee80211_ht_cap *ht_capa, 34 struct ieee80211_ht_cap *ht_capa_mask, 35 struct ieee80211_sta_ht_cap *ht_cap, 36 u16 flag) 37 { 38 __le16 le_flag = cpu_to_le16(flag); 39 40 if ((ht_capa_mask->cap_info & le_flag) && 41 (ht_capa->cap_info & le_flag)) 42 ht_cap->cap |= flag; 43 } 44 45 void ieee80211_apply_htcap_overrides(struct ieee80211_sub_if_data *sdata, 46 struct ieee80211_sta_ht_cap *ht_cap) 47 { 48 struct ieee80211_ht_cap *ht_capa, *ht_capa_mask; 49 u8 *scaps, *smask; 50 int i; 51 52 if (!ht_cap->ht_supported) 53 return; 54 55 switch (sdata->vif.type) { 56 case NL80211_IFTYPE_STATION: 57 ht_capa = &sdata->u.mgd.ht_capa; 58 ht_capa_mask = &sdata->u.mgd.ht_capa_mask; 59 break; 60 case NL80211_IFTYPE_ADHOC: 61 ht_capa = &sdata->u.ibss.ht_capa; 62 ht_capa_mask = &sdata->u.ibss.ht_capa_mask; 63 break; 64 default: 65 WARN_ON_ONCE(1); 66 return; 67 } 68 69 scaps = (u8 *)(&ht_capa->mcs.rx_mask); 70 smask = (u8 *)(&ht_capa_mask->mcs.rx_mask); 71 72 /* NOTE: If you add more over-rides here, update register_hw 73 * ht_capa_mod_mask logic in main.c as well. 74 * And, if this method can ever change ht_cap.ht_supported, fix 75 * the check in ieee80211_add_ht_ie. 76 */ 77 78 /* check for HT over-rides, MCS rates first. */ 79 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) { 80 u8 m = smask[i]; 81 ht_cap->mcs.rx_mask[i] &= ~m; /* turn off all masked bits */ 82 /* Add back rates that are supported */ 83 ht_cap->mcs.rx_mask[i] |= (m & scaps[i]); 84 } 85 86 /* Force removal of HT-40 capabilities? */ 87 __check_htcap_disable(ht_capa, ht_capa_mask, ht_cap, 88 IEEE80211_HT_CAP_SUP_WIDTH_20_40); 89 __check_htcap_disable(ht_capa, ht_capa_mask, ht_cap, 90 IEEE80211_HT_CAP_SGI_40); 91 92 /* Allow user to disable SGI-20 (SGI-40 is handled above) */ 93 __check_htcap_disable(ht_capa, ht_capa_mask, ht_cap, 94 IEEE80211_HT_CAP_SGI_20); 95 96 /* Allow user to disable the max-AMSDU bit. */ 97 __check_htcap_disable(ht_capa, ht_capa_mask, ht_cap, 98 IEEE80211_HT_CAP_MAX_AMSDU); 99 100 /* Allow user to disable LDPC */ 101 __check_htcap_disable(ht_capa, ht_capa_mask, ht_cap, 102 IEEE80211_HT_CAP_LDPC_CODING); 103 104 /* Allow user to enable 40 MHz intolerant bit. */ 105 __check_htcap_enable(ht_capa, ht_capa_mask, ht_cap, 106 IEEE80211_HT_CAP_40MHZ_INTOLERANT); 107 108 /* Allow user to enable TX STBC bit */ 109 __check_htcap_enable(ht_capa, ht_capa_mask, ht_cap, 110 IEEE80211_HT_CAP_TX_STBC); 111 112 /* Allow user to configure RX STBC bits */ 113 if (ht_capa_mask->cap_info & cpu_to_le16(IEEE80211_HT_CAP_RX_STBC)) 114 ht_cap->cap |= le16_to_cpu(ht_capa->cap_info) & 115 IEEE80211_HT_CAP_RX_STBC; 116 117 /* Allow user to decrease AMPDU factor */ 118 if (ht_capa_mask->ampdu_params_info & 119 IEEE80211_HT_AMPDU_PARM_FACTOR) { 120 u8 n = ht_capa->ampdu_params_info & 121 IEEE80211_HT_AMPDU_PARM_FACTOR; 122 if (n < ht_cap->ampdu_factor) 123 ht_cap->ampdu_factor = n; 124 } 125 126 /* Allow the user to increase AMPDU density. */ 127 if (ht_capa_mask->ampdu_params_info & 128 IEEE80211_HT_AMPDU_PARM_DENSITY) { 129 u8 n = (ht_capa->ampdu_params_info & 130 IEEE80211_HT_AMPDU_PARM_DENSITY) 131 >> IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT; 132 if (n > ht_cap->ampdu_density) 133 ht_cap->ampdu_density = n; 134 } 135 } 136 137 138 bool ieee80211_ht_cap_ie_to_sta_ht_cap(struct ieee80211_sub_if_data *sdata, 139 struct ieee80211_supported_band *sband, 140 const struct ieee80211_ht_cap *ht_cap_ie, 141 struct link_sta_info *link_sta) 142 { 143 struct ieee80211_bss_conf *link_conf; 144 struct sta_info *sta = link_sta->sta; 145 struct ieee80211_sta_ht_cap ht_cap, own_cap; 146 u8 ampdu_info, tx_mcs_set_cap; 147 int i, max_tx_streams; 148 bool changed; 149 enum ieee80211_sta_rx_bandwidth bw; 150 enum nl80211_chan_width width; 151 152 memset(&ht_cap, 0, sizeof(ht_cap)); 153 154 if (!ht_cap_ie || !sband->ht_cap.ht_supported) 155 goto apply; 156 157 ht_cap.ht_supported = true; 158 159 own_cap = sband->ht_cap; 160 161 /* 162 * If user has specified capability over-rides, take care 163 * of that if the station we're setting up is the AP or TDLS peer that 164 * we advertised a restricted capability set to. Override 165 * our own capabilities and then use those below. 166 */ 167 if (sdata->vif.type == NL80211_IFTYPE_STATION || 168 sdata->vif.type == NL80211_IFTYPE_ADHOC) 169 ieee80211_apply_htcap_overrides(sdata, &own_cap); 170 171 /* 172 * The bits listed in this expression should be 173 * the same for the peer and us, if the station 174 * advertises more then we can't use those thus 175 * we mask them out. 176 */ 177 ht_cap.cap = le16_to_cpu(ht_cap_ie->cap_info) & 178 (own_cap.cap | ~(IEEE80211_HT_CAP_LDPC_CODING | 179 IEEE80211_HT_CAP_SUP_WIDTH_20_40 | 180 IEEE80211_HT_CAP_GRN_FLD | 181 IEEE80211_HT_CAP_SGI_20 | 182 IEEE80211_HT_CAP_SGI_40 | 183 IEEE80211_HT_CAP_DSSSCCK40)); 184 185 /* 186 * The STBC bits are asymmetric -- if we don't have 187 * TX then mask out the peer's RX and vice versa. 188 */ 189 if (!(own_cap.cap & IEEE80211_HT_CAP_TX_STBC)) 190 ht_cap.cap &= ~IEEE80211_HT_CAP_RX_STBC; 191 if (!(own_cap.cap & IEEE80211_HT_CAP_RX_STBC)) 192 ht_cap.cap &= ~IEEE80211_HT_CAP_TX_STBC; 193 194 ampdu_info = ht_cap_ie->ampdu_params_info; 195 ht_cap.ampdu_factor = 196 ampdu_info & IEEE80211_HT_AMPDU_PARM_FACTOR; 197 ht_cap.ampdu_density = 198 (ampdu_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >> 2; 199 200 /* own MCS TX capabilities */ 201 tx_mcs_set_cap = own_cap.mcs.tx_params; 202 203 /* Copy peer MCS TX capabilities, the driver might need them. */ 204 ht_cap.mcs.tx_params = ht_cap_ie->mcs.tx_params; 205 206 /* can we TX with MCS rates? */ 207 if (!(tx_mcs_set_cap & IEEE80211_HT_MCS_TX_DEFINED)) 208 goto apply; 209 210 /* Counting from 0, therefore +1 */ 211 if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_RX_DIFF) 212 max_tx_streams = 213 ((tx_mcs_set_cap & IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK) 214 >> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT) + 1; 215 else 216 max_tx_streams = IEEE80211_HT_MCS_TX_MAX_STREAMS; 217 218 /* 219 * 802.11n-2009 20.3.5 / 20.6 says: 220 * - indices 0 to 7 and 32 are single spatial stream 221 * - 8 to 31 are multiple spatial streams using equal modulation 222 * [8..15 for two streams, 16..23 for three and 24..31 for four] 223 * - remainder are multiple spatial streams using unequal modulation 224 */ 225 for (i = 0; i < max_tx_streams; i++) 226 ht_cap.mcs.rx_mask[i] = 227 own_cap.mcs.rx_mask[i] & ht_cap_ie->mcs.rx_mask[i]; 228 229 if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_UNEQUAL_MODULATION) 230 for (i = IEEE80211_HT_MCS_UNEQUAL_MODULATION_START_BYTE; 231 i < IEEE80211_HT_MCS_MASK_LEN; i++) 232 ht_cap.mcs.rx_mask[i] = 233 own_cap.mcs.rx_mask[i] & 234 ht_cap_ie->mcs.rx_mask[i]; 235 236 /* handle MCS rate 32 too */ 237 if (own_cap.mcs.rx_mask[32/8] & ht_cap_ie->mcs.rx_mask[32/8] & 1) 238 ht_cap.mcs.rx_mask[32/8] |= 1; 239 240 /* set Rx highest rate */ 241 ht_cap.mcs.rx_highest = ht_cap_ie->mcs.rx_highest; 242 243 if (ht_cap.cap & IEEE80211_HT_CAP_MAX_AMSDU) 244 link_sta->pub->agg.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_7935; 245 else 246 link_sta->pub->agg.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_3839; 247 248 ieee80211_sta_recalc_aggregates(&sta->sta); 249 250 apply: 251 changed = memcmp(&link_sta->pub->ht_cap, &ht_cap, sizeof(ht_cap)); 252 253 memcpy(&link_sta->pub->ht_cap, &ht_cap, sizeof(ht_cap)); 254 255 rcu_read_lock(); 256 link_conf = rcu_dereference(sdata->vif.link_conf[link_sta->link_id]); 257 if (WARN_ON(!link_conf)) 258 width = NL80211_CHAN_WIDTH_20_NOHT; 259 else 260 width = link_conf->chandef.width; 261 262 switch (width) { 263 default: 264 WARN_ON_ONCE(1); 265 fallthrough; 266 case NL80211_CHAN_WIDTH_20_NOHT: 267 case NL80211_CHAN_WIDTH_20: 268 bw = IEEE80211_STA_RX_BW_20; 269 break; 270 case NL80211_CHAN_WIDTH_40: 271 case NL80211_CHAN_WIDTH_80: 272 case NL80211_CHAN_WIDTH_80P80: 273 case NL80211_CHAN_WIDTH_160: 274 bw = ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ? 275 IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20; 276 break; 277 } 278 rcu_read_unlock(); 279 280 link_sta->pub->bandwidth = bw; 281 282 link_sta->cur_max_bandwidth = 283 ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ? 284 IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20; 285 286 if (sta->sdata->vif.type == NL80211_IFTYPE_AP || 287 sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 288 enum ieee80211_smps_mode smps_mode; 289 290 switch ((ht_cap.cap & IEEE80211_HT_CAP_SM_PS) 291 >> IEEE80211_HT_CAP_SM_PS_SHIFT) { 292 case WLAN_HT_CAP_SM_PS_INVALID: 293 case WLAN_HT_CAP_SM_PS_STATIC: 294 smps_mode = IEEE80211_SMPS_STATIC; 295 break; 296 case WLAN_HT_CAP_SM_PS_DYNAMIC: 297 smps_mode = IEEE80211_SMPS_DYNAMIC; 298 break; 299 case WLAN_HT_CAP_SM_PS_DISABLED: 300 smps_mode = IEEE80211_SMPS_OFF; 301 break; 302 } 303 304 if (smps_mode != link_sta->pub->smps_mode) 305 changed = true; 306 link_sta->pub->smps_mode = smps_mode; 307 } else { 308 link_sta->pub->smps_mode = IEEE80211_SMPS_OFF; 309 } 310 311 return changed; 312 } 313 314 void ieee80211_sta_tear_down_BA_sessions(struct sta_info *sta, 315 enum ieee80211_agg_stop_reason reason) 316 { 317 int i; 318 319 lockdep_assert_wiphy(sta->local->hw.wiphy); 320 321 for (i = 0; i < IEEE80211_NUM_TIDS; i++) 322 __ieee80211_stop_rx_ba_session(sta, i, WLAN_BACK_RECIPIENT, 323 WLAN_REASON_QSTA_LEAVE_QBSS, 324 reason != AGG_STOP_DESTROY_STA && 325 reason != AGG_STOP_PEER_REQUEST); 326 327 for (i = 0; i < IEEE80211_NUM_TIDS; i++) 328 __ieee80211_stop_tx_ba_session(sta, i, reason); 329 330 /* 331 * In case the tear down is part of a reconfigure due to HW restart 332 * request, it is possible that the low level driver requested to stop 333 * the BA session, so handle it to properly clean tid_tx data. 334 */ 335 if(reason == AGG_STOP_DESTROY_STA) { 336 wiphy_work_cancel(sta->local->hw.wiphy, &sta->ampdu_mlme.work); 337 338 for (i = 0; i < IEEE80211_NUM_TIDS; i++) { 339 struct tid_ampdu_tx *tid_tx = 340 rcu_dereference_protected_tid_tx(sta, i); 341 342 if (!tid_tx) 343 continue; 344 345 if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state)) 346 ieee80211_stop_tx_ba_cb(sta, i, tid_tx); 347 } 348 } 349 } 350 351 void ieee80211_ba_session_work(struct wiphy *wiphy, struct wiphy_work *work) 352 { 353 struct sta_info *sta = 354 container_of(work, struct sta_info, ampdu_mlme.work); 355 struct tid_ampdu_tx *tid_tx; 356 bool blocked; 357 int tid; 358 359 lockdep_assert_wiphy(sta->local->hw.wiphy); 360 361 /* When this flag is set, new sessions should be blocked. */ 362 blocked = test_sta_flag(sta, WLAN_STA_BLOCK_BA); 363 364 for (tid = 0; tid < IEEE80211_NUM_TIDS; tid++) { 365 if (test_and_clear_bit(tid, sta->ampdu_mlme.tid_rx_timer_expired)) 366 __ieee80211_stop_rx_ba_session( 367 sta, tid, WLAN_BACK_RECIPIENT, 368 WLAN_REASON_QSTA_TIMEOUT, true); 369 370 if (test_and_clear_bit(tid, 371 sta->ampdu_mlme.tid_rx_stop_requested)) 372 __ieee80211_stop_rx_ba_session( 373 sta, tid, WLAN_BACK_RECIPIENT, 374 WLAN_REASON_UNSPECIFIED, true); 375 376 if (!blocked && 377 test_and_clear_bit(tid, 378 sta->ampdu_mlme.tid_rx_manage_offl)) 379 __ieee80211_start_rx_ba_session(sta, 0, 0, 0, 1, tid, 380 IEEE80211_MAX_AMPDU_BUF_HT, 381 false, true, NULL); 382 383 if (test_and_clear_bit(tid + IEEE80211_NUM_TIDS, 384 sta->ampdu_mlme.tid_rx_manage_offl)) 385 __ieee80211_stop_rx_ba_session( 386 sta, tid, WLAN_BACK_RECIPIENT, 387 0, false); 388 389 spin_lock_bh(&sta->lock); 390 391 tid_tx = sta->ampdu_mlme.tid_start_tx[tid]; 392 if (!blocked && tid_tx) { 393 struct txq_info *txqi = to_txq_info(sta->sta.txq[tid]); 394 struct ieee80211_sub_if_data *sdata = 395 vif_to_sdata(txqi->txq.vif); 396 struct fq *fq = &sdata->local->fq; 397 398 spin_lock_bh(&fq->lock); 399 400 /* Allow only frags to be dequeued */ 401 set_bit(IEEE80211_TXQ_STOP, &txqi->flags); 402 403 if (!skb_queue_empty(&txqi->frags)) { 404 /* Fragmented Tx is ongoing, wait for it to 405 * finish. Reschedule worker to retry later. 406 */ 407 408 spin_unlock_bh(&fq->lock); 409 spin_unlock_bh(&sta->lock); 410 411 /* Give the task working on the txq a chance 412 * to send out the queued frags 413 */ 414 synchronize_net(); 415 416 wiphy_work_queue(sdata->local->hw.wiphy, work); 417 return; 418 } 419 420 spin_unlock_bh(&fq->lock); 421 422 /* 423 * Assign it over to the normal tid_tx array 424 * where it "goes live". 425 */ 426 427 sta->ampdu_mlme.tid_start_tx[tid] = NULL; 428 /* could there be a race? */ 429 if (sta->ampdu_mlme.tid_tx[tid]) 430 kfree(tid_tx); 431 else 432 ieee80211_assign_tid_tx(sta, tid, tid_tx); 433 spin_unlock_bh(&sta->lock); 434 435 ieee80211_tx_ba_session_handle_start(sta, tid); 436 continue; 437 } 438 spin_unlock_bh(&sta->lock); 439 440 tid_tx = rcu_dereference_protected_tid_tx(sta, tid); 441 if (!tid_tx) 442 continue; 443 444 if (!blocked && 445 test_and_clear_bit(HT_AGG_STATE_START_CB, &tid_tx->state)) 446 ieee80211_start_tx_ba_cb(sta, tid, tid_tx); 447 if (test_and_clear_bit(HT_AGG_STATE_WANT_STOP, &tid_tx->state)) 448 __ieee80211_stop_tx_ba_session(sta, tid, 449 AGG_STOP_LOCAL_REQUEST); 450 if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state)) 451 ieee80211_stop_tx_ba_cb(sta, tid, tid_tx); 452 } 453 } 454 455 void ieee80211_send_delba(struct ieee80211_sub_if_data *sdata, 456 const u8 *da, u16 tid, 457 u16 initiator, u16 reason_code) 458 { 459 struct ieee80211_local *local = sdata->local; 460 struct sk_buff *skb; 461 struct ieee80211_mgmt *mgmt; 462 u16 params; 463 464 skb = dev_alloc_skb(sizeof(*mgmt) + local->hw.extra_tx_headroom); 465 if (!skb) 466 return; 467 468 skb_reserve(skb, local->hw.extra_tx_headroom); 469 mgmt = skb_put_zero(skb, 24); 470 memcpy(mgmt->da, da, ETH_ALEN); 471 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 472 if (sdata->vif.type == NL80211_IFTYPE_AP || 473 sdata->vif.type == NL80211_IFTYPE_AP_VLAN || 474 sdata->vif.type == NL80211_IFTYPE_MESH_POINT) 475 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN); 476 else if (sdata->vif.type == NL80211_IFTYPE_STATION) 477 memcpy(mgmt->bssid, sdata->deflink.u.mgd.bssid, ETH_ALEN); 478 else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) 479 memcpy(mgmt->bssid, sdata->u.ibss.bssid, ETH_ALEN); 480 481 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 482 IEEE80211_STYPE_ACTION); 483 484 skb_put(skb, 1 + sizeof(mgmt->u.action.u.delba)); 485 486 mgmt->u.action.category = WLAN_CATEGORY_BACK; 487 mgmt->u.action.u.delba.action_code = WLAN_ACTION_DELBA; 488 params = (u16)(initiator << 11); /* bit 11 initiator */ 489 params |= (u16)(tid << 12); /* bit 15:12 TID number */ 490 491 mgmt->u.action.u.delba.params = cpu_to_le16(params); 492 mgmt->u.action.u.delba.reason_code = cpu_to_le16(reason_code); 493 494 ieee80211_tx_skb(sdata, skb); 495 } 496 497 void ieee80211_process_delba(struct ieee80211_sub_if_data *sdata, 498 struct sta_info *sta, 499 struct ieee80211_mgmt *mgmt, size_t len) 500 { 501 u16 tid, params; 502 u16 initiator; 503 504 params = le16_to_cpu(mgmt->u.action.u.delba.params); 505 tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12; 506 initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11; 507 508 ht_dbg_ratelimited(sdata, "delba from %pM (%s) tid %d reason code %d\n", 509 mgmt->sa, initiator ? "initiator" : "recipient", 510 tid, 511 le16_to_cpu(mgmt->u.action.u.delba.reason_code)); 512 513 if (initiator == WLAN_BACK_INITIATOR) 514 __ieee80211_stop_rx_ba_session(sta, tid, WLAN_BACK_INITIATOR, 0, 515 true); 516 else 517 __ieee80211_stop_tx_ba_session(sta, tid, AGG_STOP_PEER_REQUEST); 518 } 519 520 enum nl80211_smps_mode 521 ieee80211_smps_mode_to_smps_mode(enum ieee80211_smps_mode smps) 522 { 523 switch (smps) { 524 case IEEE80211_SMPS_OFF: 525 return NL80211_SMPS_OFF; 526 case IEEE80211_SMPS_STATIC: 527 return NL80211_SMPS_STATIC; 528 case IEEE80211_SMPS_DYNAMIC: 529 return NL80211_SMPS_DYNAMIC; 530 default: 531 return NL80211_SMPS_OFF; 532 } 533 } 534 535 int ieee80211_send_smps_action(struct ieee80211_sub_if_data *sdata, 536 enum ieee80211_smps_mode smps, const u8 *da, 537 const u8 *bssid, int link_id) 538 { 539 struct ieee80211_local *local = sdata->local; 540 struct sk_buff *skb; 541 struct ieee80211_mgmt *action_frame; 542 struct ieee80211_tx_info *info; 543 u8 status_link_id = link_id < 0 ? 0 : link_id; 544 545 /* 27 = header + category + action + smps mode */ 546 skb = dev_alloc_skb(27 + local->hw.extra_tx_headroom); 547 if (!skb) 548 return -ENOMEM; 549 550 skb_reserve(skb, local->hw.extra_tx_headroom); 551 action_frame = skb_put(skb, 27); 552 memcpy(action_frame->da, da, ETH_ALEN); 553 memcpy(action_frame->sa, sdata->dev->dev_addr, ETH_ALEN); 554 memcpy(action_frame->bssid, bssid, ETH_ALEN); 555 action_frame->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 556 IEEE80211_STYPE_ACTION); 557 action_frame->u.action.category = WLAN_CATEGORY_HT; 558 action_frame->u.action.u.ht_smps.action = WLAN_HT_ACTION_SMPS; 559 switch (smps) { 560 case IEEE80211_SMPS_AUTOMATIC: 561 case IEEE80211_SMPS_NUM_MODES: 562 WARN_ON(1); 563 smps = IEEE80211_SMPS_OFF; 564 fallthrough; 565 case IEEE80211_SMPS_OFF: 566 action_frame->u.action.u.ht_smps.smps_control = 567 WLAN_HT_SMPS_CONTROL_DISABLED; 568 break; 569 case IEEE80211_SMPS_STATIC: 570 action_frame->u.action.u.ht_smps.smps_control = 571 WLAN_HT_SMPS_CONTROL_STATIC; 572 break; 573 case IEEE80211_SMPS_DYNAMIC: 574 action_frame->u.action.u.ht_smps.smps_control = 575 WLAN_HT_SMPS_CONTROL_DYNAMIC; 576 break; 577 } 578 579 /* we'll do more on status of this frame */ 580 info = IEEE80211_SKB_CB(skb); 581 info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS; 582 /* we have 12 bits, and need 6: link_id 4, smps 2 */ 583 info->status_data = IEEE80211_STATUS_TYPE_SMPS | 584 u16_encode_bits(status_link_id << 2 | smps, 585 IEEE80211_STATUS_SUBDATA_MASK); 586 ieee80211_tx_skb_tid(sdata, skb, 7, link_id); 587 588 return 0; 589 } 590 591 void ieee80211_request_smps(struct ieee80211_vif *vif, unsigned int link_id, 592 enum ieee80211_smps_mode smps_mode) 593 { 594 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 595 struct ieee80211_link_data *link; 596 597 if (WARN_ON_ONCE(vif->type != NL80211_IFTYPE_STATION)) 598 return; 599 600 rcu_read_lock(); 601 link = rcu_dereference(sdata->link[link_id]); 602 if (WARN_ON(!link)) 603 goto out; 604 605 if (link->u.mgd.driver_smps_mode == smps_mode) 606 goto out; 607 608 link->u.mgd.driver_smps_mode = smps_mode; 609 wiphy_work_queue(sdata->local->hw.wiphy, 610 &link->u.mgd.request_smps_work); 611 out: 612 rcu_read_unlock(); 613 } 614 /* this might change ... don't want non-open drivers using it */ 615 EXPORT_SYMBOL_GPL(ieee80211_request_smps); 616