10a51b27eSJohannes Berg /* 25484e237SJohannes Berg * Scanning implementation 35484e237SJohannes Berg * 40a51b27eSJohannes Berg * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> 50a51b27eSJohannes Berg * Copyright 2004, Instant802 Networks, Inc. 60a51b27eSJohannes Berg * Copyright 2005, Devicescape Software, Inc. 70a51b27eSJohannes Berg * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 80a51b27eSJohannes Berg * Copyright 2007, Michael Wu <flamingice@sourmilk.net> 90a51b27eSJohannes Berg * 100a51b27eSJohannes Berg * This program is free software; you can redistribute it and/or modify 110a51b27eSJohannes Berg * it under the terms of the GNU General Public License version 2 as 120a51b27eSJohannes Berg * published by the Free Software Foundation. 130a51b27eSJohannes Berg */ 140a51b27eSJohannes Berg 150a51b27eSJohannes Berg #include <linux/if_arp.h> 16078e1e60SJohannes Berg #include <linux/rtnetlink.h> 17df13cce5SHelmut Schaa #include <linux/pm_qos_params.h> 18df13cce5SHelmut Schaa #include <net/sch_generic.h> 195a0e3ad6STejun Heo #include <linux/slab.h> 200a51b27eSJohannes Berg #include <net/mac80211.h> 210a51b27eSJohannes Berg 220a51b27eSJohannes Berg #include "ieee80211_i.h" 2324487981SJohannes Berg #include "driver-ops.h" 245484e237SJohannes Berg #include "mesh.h" 250a51b27eSJohannes Berg 260a51b27eSJohannes Berg #define IEEE80211_PROBE_DELAY (HZ / 33) 270a51b27eSJohannes Berg #define IEEE80211_CHANNEL_TIME (HZ / 33) 2896f7e739SHelmut Schaa #define IEEE80211_PASSIVE_CHANNEL_TIME (HZ / 8) 290a51b27eSJohannes Berg 30c2b13452SJohannes Berg struct ieee80211_bss * 315484e237SJohannes Berg ieee80211_rx_bss_get(struct ieee80211_local *local, u8 *bssid, int freq, 325484e237SJohannes Berg u8 *ssid, u8 ssid_len) 335484e237SJohannes Berg { 340c1ad2caSJohannes Berg struct cfg80211_bss *cbss; 350c1ad2caSJohannes Berg 360c1ad2caSJohannes Berg cbss = cfg80211_get_bss(local->hw.wiphy, 370c1ad2caSJohannes Berg ieee80211_get_channel(local->hw.wiphy, freq), 380c1ad2caSJohannes Berg bssid, ssid, ssid_len, 0, 0); 390c1ad2caSJohannes Berg if (!cbss) 400c1ad2caSJohannes Berg return NULL; 410c1ad2caSJohannes Berg return (void *)cbss->priv; 425484e237SJohannes Berg } 435484e237SJohannes Berg 4400d3f14cSJohannes Berg static void ieee80211_rx_bss_free(struct cfg80211_bss *cbss) 455484e237SJohannes Berg { 460c1ad2caSJohannes Berg struct ieee80211_bss *bss = (void *)cbss->priv; 475484e237SJohannes Berg 485484e237SJohannes Berg kfree(bss_mesh_id(bss)); 495484e237SJohannes Berg kfree(bss_mesh_cfg(bss)); 505484e237SJohannes Berg } 515484e237SJohannes Berg 525484e237SJohannes Berg void ieee80211_rx_bss_put(struct ieee80211_local *local, 53c2b13452SJohannes Berg struct ieee80211_bss *bss) 545484e237SJohannes Berg { 550c1ad2caSJohannes Berg if (!bss) 560c1ad2caSJohannes Berg return; 570c1ad2caSJohannes Berg cfg80211_put_bss(container_of((void *)bss, struct cfg80211_bss, priv)); 585484e237SJohannes Berg } 595484e237SJohannes Berg 60ab13315aSKalle Valo static bool is_uapsd_supported(struct ieee802_11_elems *elems) 61ab13315aSKalle Valo { 62ab13315aSKalle Valo u8 qos_info; 63ab13315aSKalle Valo 64ab13315aSKalle Valo if (elems->wmm_info && elems->wmm_info_len == 7 65ab13315aSKalle Valo && elems->wmm_info[5] == 1) 66ab13315aSKalle Valo qos_info = elems->wmm_info[6]; 67ab13315aSKalle Valo else if (elems->wmm_param && elems->wmm_param_len == 24 68ab13315aSKalle Valo && elems->wmm_param[5] == 1) 69ab13315aSKalle Valo qos_info = elems->wmm_param[6]; 70ab13315aSKalle Valo else 71ab13315aSKalle Valo /* no valid wmm information or parameter element found */ 72ab13315aSKalle Valo return false; 73ab13315aSKalle Valo 74ab13315aSKalle Valo return qos_info & IEEE80211_WMM_IE_AP_QOSINFO_UAPSD; 75ab13315aSKalle Valo } 76ab13315aSKalle Valo 77c2b13452SJohannes Berg struct ieee80211_bss * 785484e237SJohannes Berg ieee80211_bss_info_update(struct ieee80211_local *local, 795484e237SJohannes Berg struct ieee80211_rx_status *rx_status, 805484e237SJohannes Berg struct ieee80211_mgmt *mgmt, 815484e237SJohannes Berg size_t len, 825484e237SJohannes Berg struct ieee802_11_elems *elems, 832a519311SJohannes Berg struct ieee80211_channel *channel, 842a519311SJohannes Berg bool beacon) 855484e237SJohannes Berg { 860c1ad2caSJohannes Berg struct cfg80211_bss *cbss; 87c2b13452SJohannes Berg struct ieee80211_bss *bss; 88f0b058b6SStanislaw Gruszka int clen, srlen; 892a519311SJohannes Berg s32 signal = 0; 902a519311SJohannes Berg 9177965c97SJohannes Berg if (local->hw.flags & IEEE80211_HW_SIGNAL_DBM) 922a519311SJohannes Berg signal = rx_status->signal * 100; 9377965c97SJohannes Berg else if (local->hw.flags & IEEE80211_HW_SIGNAL_UNSPEC) 942a519311SJohannes Berg signal = (rx_status->signal * 100) / local->hw.max_signal; 952a519311SJohannes Berg 960c1ad2caSJohannes Berg cbss = cfg80211_inform_bss_frame(local->hw.wiphy, channel, 9777965c97SJohannes Berg mgmt, len, signal, GFP_ATOMIC); 985484e237SJohannes Berg 990c1ad2caSJohannes Berg if (!cbss) 1005484e237SJohannes Berg return NULL; 10100d3f14cSJohannes Berg 1020c1ad2caSJohannes Berg cbss->free_priv = ieee80211_rx_bss_free; 1030c1ad2caSJohannes Berg bss = (void *)cbss->priv; 1045484e237SJohannes Berg 1055484e237SJohannes Berg /* save the ERP value so that it is available at association time */ 1065484e237SJohannes Berg if (elems->erp_info && elems->erp_info_len >= 1) { 1075484e237SJohannes Berg bss->erp_value = elems->erp_info[0]; 1085484e237SJohannes Berg bss->has_erp_value = 1; 1095484e237SJohannes Berg } 1105484e237SJohannes Berg 1115484e237SJohannes Berg if (elems->tim) { 1125484e237SJohannes Berg struct ieee80211_tim_ie *tim_ie = 1135484e237SJohannes Berg (struct ieee80211_tim_ie *)elems->tim; 1145484e237SJohannes Berg bss->dtim_period = tim_ie->dtim_period; 1155484e237SJohannes Berg } 1165484e237SJohannes Berg 117e5b900d2SJohannes Berg /* If the beacon had no TIM IE, or it was invalid, use 1 */ 118e5b900d2SJohannes Berg if (beacon && !bss->dtim_period) 119e5b900d2SJohannes Berg bss->dtim_period = 1; 120e5b900d2SJohannes Berg 121f0b058b6SStanislaw Gruszka /* replace old supported rates if we get new values */ 122f0b058b6SStanislaw Gruszka srlen = 0; 1235484e237SJohannes Berg if (elems->supp_rates) { 124f0b058b6SStanislaw Gruszka clen = IEEE80211_MAX_SUPP_RATES; 1255484e237SJohannes Berg if (clen > elems->supp_rates_len) 1265484e237SJohannes Berg clen = elems->supp_rates_len; 127f0b058b6SStanislaw Gruszka memcpy(bss->supp_rates, elems->supp_rates, clen); 128f0b058b6SStanislaw Gruszka srlen += clen; 1295484e237SJohannes Berg } 1305484e237SJohannes Berg if (elems->ext_supp_rates) { 131f0b058b6SStanislaw Gruszka clen = IEEE80211_MAX_SUPP_RATES - srlen; 1325484e237SJohannes Berg if (clen > elems->ext_supp_rates_len) 1335484e237SJohannes Berg clen = elems->ext_supp_rates_len; 134f0b058b6SStanislaw Gruszka memcpy(bss->supp_rates + srlen, elems->ext_supp_rates, clen); 135f0b058b6SStanislaw Gruszka srlen += clen; 1365484e237SJohannes Berg } 137f0b058b6SStanislaw Gruszka if (srlen) 138f0b058b6SStanislaw Gruszka bss->supp_rates_len = srlen; 1395484e237SJohannes Berg 1405484e237SJohannes Berg bss->wmm_used = elems->wmm_param || elems->wmm_info; 141ab13315aSKalle Valo bss->uapsd_supported = is_uapsd_supported(elems); 1425484e237SJohannes Berg 1435484e237SJohannes Berg if (!beacon) 1445484e237SJohannes Berg bss->last_probe_resp = jiffies; 1455484e237SJohannes Berg 1465484e237SJohannes Berg return bss; 1475484e237SJohannes Berg } 1480a51b27eSJohannes Berg 14998c8fccfSJohannes Berg ieee80211_rx_result 150f1d58c25SJohannes Berg ieee80211_scan_rx(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb) 15198c8fccfSJohannes Berg { 152f1d58c25SJohannes Berg struct ieee80211_rx_status *rx_status = IEEE80211_SKB_RXCB(skb); 15398c8fccfSJohannes Berg struct ieee80211_mgmt *mgmt; 154c2b13452SJohannes Berg struct ieee80211_bss *bss; 15598c8fccfSJohannes Berg u8 *elements; 15698c8fccfSJohannes Berg struct ieee80211_channel *channel; 15798c8fccfSJohannes Berg size_t baselen; 15898c8fccfSJohannes Berg int freq; 15998c8fccfSJohannes Berg __le16 fc; 16098c8fccfSJohannes Berg bool presp, beacon = false; 16198c8fccfSJohannes Berg struct ieee802_11_elems elems; 16298c8fccfSJohannes Berg 16398c8fccfSJohannes Berg if (skb->len < 2) 16498c8fccfSJohannes Berg return RX_DROP_UNUSABLE; 16598c8fccfSJohannes Berg 16698c8fccfSJohannes Berg mgmt = (struct ieee80211_mgmt *) skb->data; 16798c8fccfSJohannes Berg fc = mgmt->frame_control; 16898c8fccfSJohannes Berg 16998c8fccfSJohannes Berg if (ieee80211_is_ctl(fc)) 17098c8fccfSJohannes Berg return RX_CONTINUE; 17198c8fccfSJohannes Berg 17298c8fccfSJohannes Berg if (skb->len < 24) 17398c8fccfSJohannes Berg return RX_DROP_MONITOR; 17498c8fccfSJohannes Berg 17598c8fccfSJohannes Berg presp = ieee80211_is_probe_resp(fc); 17698c8fccfSJohannes Berg if (presp) { 17798c8fccfSJohannes Berg /* ignore ProbeResp to foreign address */ 17847846c9bSJohannes Berg if (memcmp(mgmt->da, sdata->vif.addr, ETH_ALEN)) 17998c8fccfSJohannes Berg return RX_DROP_MONITOR; 18098c8fccfSJohannes Berg 18198c8fccfSJohannes Berg presp = true; 18298c8fccfSJohannes Berg elements = mgmt->u.probe_resp.variable; 18398c8fccfSJohannes Berg baselen = offsetof(struct ieee80211_mgmt, u.probe_resp.variable); 18498c8fccfSJohannes Berg } else { 18598c8fccfSJohannes Berg beacon = ieee80211_is_beacon(fc); 18698c8fccfSJohannes Berg baselen = offsetof(struct ieee80211_mgmt, u.beacon.variable); 18798c8fccfSJohannes Berg elements = mgmt->u.beacon.variable; 18898c8fccfSJohannes Berg } 18998c8fccfSJohannes Berg 19098c8fccfSJohannes Berg if (!presp && !beacon) 19198c8fccfSJohannes Berg return RX_CONTINUE; 19298c8fccfSJohannes Berg 19398c8fccfSJohannes Berg if (baselen > skb->len) 19498c8fccfSJohannes Berg return RX_DROP_MONITOR; 19598c8fccfSJohannes Berg 19698c8fccfSJohannes Berg ieee802_11_parse_elems(elements, skb->len - baselen, &elems); 19798c8fccfSJohannes Berg 19898c8fccfSJohannes Berg if (elems.ds_params && elems.ds_params_len == 1) 19998c8fccfSJohannes Berg freq = ieee80211_channel_to_frequency(elems.ds_params[0]); 20098c8fccfSJohannes Berg else 20198c8fccfSJohannes Berg freq = rx_status->freq; 20298c8fccfSJohannes Berg 20398c8fccfSJohannes Berg channel = ieee80211_get_channel(sdata->local->hw.wiphy, freq); 20498c8fccfSJohannes Berg 20598c8fccfSJohannes Berg if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) 20698c8fccfSJohannes Berg return RX_DROP_MONITOR; 20798c8fccfSJohannes Berg 20898c8fccfSJohannes Berg bss = ieee80211_bss_info_update(sdata->local, rx_status, 20998c8fccfSJohannes Berg mgmt, skb->len, &elems, 2102a519311SJohannes Berg channel, beacon); 211d048e503SJouni Malinen if (bss) 21298c8fccfSJohannes Berg ieee80211_rx_bss_put(sdata->local, bss); 21398c8fccfSJohannes Berg 21498c8fccfSJohannes Berg dev_kfree_skb(skb); 21598c8fccfSJohannes Berg return RX_QUEUED; 21698c8fccfSJohannes Berg } 21798c8fccfSJohannes Berg 2184d36ec58SJohannes Berg /* return false if no more work */ 2194d36ec58SJohannes Berg static bool ieee80211_prep_hw_scan(struct ieee80211_local *local) 2204d36ec58SJohannes Berg { 2214d36ec58SJohannes Berg struct cfg80211_scan_request *req = local->scan_req; 2224d36ec58SJohannes Berg enum ieee80211_band band; 2234d36ec58SJohannes Berg int i, ielen, n_chans; 2244d36ec58SJohannes Berg 2254d36ec58SJohannes Berg do { 2264d36ec58SJohannes Berg if (local->hw_scan_band == IEEE80211_NUM_BANDS) 2274d36ec58SJohannes Berg return false; 2284d36ec58SJohannes Berg 2294d36ec58SJohannes Berg band = local->hw_scan_band; 2304d36ec58SJohannes Berg n_chans = 0; 2314d36ec58SJohannes Berg for (i = 0; i < req->n_channels; i++) { 2324d36ec58SJohannes Berg if (req->channels[i]->band == band) { 2334d36ec58SJohannes Berg local->hw_scan_req->channels[n_chans] = 2344d36ec58SJohannes Berg req->channels[i]; 2354d36ec58SJohannes Berg n_chans++; 2364d36ec58SJohannes Berg } 2374d36ec58SJohannes Berg } 2384d36ec58SJohannes Berg 2394d36ec58SJohannes Berg local->hw_scan_band++; 2404d36ec58SJohannes Berg } while (!n_chans); 2414d36ec58SJohannes Berg 2424d36ec58SJohannes Berg local->hw_scan_req->n_channels = n_chans; 2434d36ec58SJohannes Berg 2444d36ec58SJohannes Berg ielen = ieee80211_build_preq_ies(local, (u8 *)local->hw_scan_req->ie, 245651b5225SJouni Malinen req->ie, req->ie_len, band, (u32) -1, 246651b5225SJouni Malinen 0); 2474d36ec58SJohannes Berg local->hw_scan_req->ie_len = ielen; 2484d36ec58SJohannes Berg 2494d36ec58SJohannes Berg return true; 2504d36ec58SJohannes Berg } 2514d36ec58SJohannes Berg 2528789d459SJohannes Berg static void __ieee80211_scan_completed(struct ieee80211_hw *hw, bool aborted) 253f3b85252SJohannes Berg { 254f3b85252SJohannes Berg struct ieee80211_local *local = hw_to_local(hw); 255f3b85252SJohannes Berg bool was_hw_scan; 256f3b85252SJohannes Berg 257a1699b75SJohannes Berg mutex_lock(&local->mtx); 258f3b85252SJohannes Berg 2596d3560d4SJohannes Berg /* 2606d3560d4SJohannes Berg * It's ok to abort a not-yet-running scan (that 2616d3560d4SJohannes Berg * we have one at all will be verified by checking 2626d3560d4SJohannes Berg * local->scan_req next), but not to complete it 2636d3560d4SJohannes Berg * successfully. 2646d3560d4SJohannes Berg */ 2656d3560d4SJohannes Berg if (WARN_ON(!local->scanning && !aborted)) 2666d3560d4SJohannes Berg aborted = true; 267f3b85252SJohannes Berg 268f3b85252SJohannes Berg if (WARN_ON(!local->scan_req)) { 269a1699b75SJohannes Berg mutex_unlock(&local->mtx); 270f3b85252SJohannes Berg return; 271f3b85252SJohannes Berg } 272f3b85252SJohannes Berg 2734d36ec58SJohannes Berg was_hw_scan = test_bit(SCAN_HW_SCANNING, &local->scanning); 2744d36ec58SJohannes Berg if (was_hw_scan && !aborted && ieee80211_prep_hw_scan(local)) { 2754d36ec58SJohannes Berg ieee80211_queue_delayed_work(&local->hw, 2764d36ec58SJohannes Berg &local->scan_work, 0); 277a1699b75SJohannes Berg mutex_unlock(&local->mtx); 2784d36ec58SJohannes Berg return; 2794d36ec58SJohannes Berg } 2804d36ec58SJohannes Berg 2814d36ec58SJohannes Berg kfree(local->hw_scan_req); 2824d36ec58SJohannes Berg local->hw_scan_req = NULL; 283f3b85252SJohannes Berg 2845ba63533SJohannes Berg if (local->scan_req != local->int_scan_req) 2852a519311SJohannes Berg cfg80211_scan_done(local->scan_req, aborted); 2862a519311SJohannes Berg local->scan_req = NULL; 28715db0b7fSJohannes Berg local->scan_sdata = NULL; 2882a519311SJohannes Berg 289fbe9c429SHelmut Schaa local->scanning = 0; 29058905ca5SJohannes Berg local->scan_channel = NULL; 291f3b85252SJohannes Berg 292f3b85252SJohannes Berg /* we only have to protect scan_req and hw/sw scan */ 293a1699b75SJohannes Berg mutex_unlock(&local->mtx); 294f3b85252SJohannes Berg 295e8975581SJohannes Berg ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL); 2965cff20e6SJohannes Berg if (was_hw_scan) 2975cff20e6SJohannes Berg goto done; 2980a51b27eSJohannes Berg 2993ac64beeSJohannes Berg ieee80211_configure_filter(local); 3000a51b27eSJohannes Berg 301a0daa0e7SLuis R. Rodriguez drv_sw_scan_complete(local); 302a0daa0e7SLuis R. Rodriguez 303b203ffc3SJouni Malinen ieee80211_offchannel_return(local, true); 3040a51b27eSJohannes Berg 3050a51b27eSJohannes Berg done: 3067da7cc1dSJohannes Berg mutex_lock(&local->mtx); 3075cff20e6SJohannes Berg ieee80211_recalc_idle(local); 3087da7cc1dSJohannes Berg mutex_unlock(&local->mtx); 3090a51b27eSJohannes Berg ieee80211_mlme_notify_scan_completed(local); 31046900298SJohannes Berg ieee80211_ibss_notify_scan_completed(local); 311472dbc45SJohannes Berg ieee80211_mesh_notify_scan_completed(local); 31281ac3462SJohannes Berg ieee80211_queue_work(&local->hw, &local->work_work); 3130a51b27eSJohannes Berg } 3148789d459SJohannes Berg 3158789d459SJohannes Berg void ieee80211_scan_completed(struct ieee80211_hw *hw, bool aborted) 3168789d459SJohannes Berg { 3178789d459SJohannes Berg struct ieee80211_local *local = hw_to_local(hw); 3188789d459SJohannes Berg 3198789d459SJohannes Berg trace_api_scan_completed(local, aborted); 3208789d459SJohannes Berg 3218789d459SJohannes Berg set_bit(SCAN_COMPLETED, &local->scanning); 3228789d459SJohannes Berg if (aborted) 3238789d459SJohannes Berg set_bit(SCAN_ABORTED, &local->scanning); 3248789d459SJohannes Berg ieee80211_queue_delayed_work(&local->hw, &local->scan_work, 0); 3258789d459SJohannes Berg } 3260a51b27eSJohannes Berg EXPORT_SYMBOL(ieee80211_scan_completed); 3270a51b27eSJohannes Berg 328f3b85252SJohannes Berg static int ieee80211_start_sw_scan(struct ieee80211_local *local) 329f3b85252SJohannes Berg { 330f3b85252SJohannes Berg /* 331f3b85252SJohannes Berg * Hardware/driver doesn't support hw_scan, so use software 332f3b85252SJohannes Berg * scanning instead. First send a nullfunc frame with power save 333f3b85252SJohannes Berg * bit on so that AP will buffer the frames for us while we are not 334f3b85252SJohannes Berg * listening, then send probe requests to each channel and wait for 335f3b85252SJohannes Berg * the responses. After all channels are scanned, tune back to the 336f3b85252SJohannes Berg * original channel and send a nullfunc frame with power save bit 337f3b85252SJohannes Berg * off to trigger the AP to send us all the buffered frames. 338f3b85252SJohannes Berg * 339f3b85252SJohannes Berg * Note that while local->sw_scanning is true everything else but 340f3b85252SJohannes Berg * nullfunc frames and probe requests will be dropped in 341f3b85252SJohannes Berg * ieee80211_tx_h_check_assoc(). 342f3b85252SJohannes Berg */ 34324487981SJohannes Berg drv_sw_scan_start(local); 344f3b85252SJohannes Berg 345b203ffc3SJouni Malinen ieee80211_offchannel_stop_beaconing(local); 346f3b85252SJohannes Berg 347df13cce5SHelmut Schaa local->leave_oper_channel_time = 0; 348977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 349f3b85252SJohannes Berg local->scan_channel_idx = 0; 350f3b85252SJohannes Berg 351a80f7c0bSJohannes Berg drv_flush(local, false); 352a80f7c0bSJohannes Berg 3533ac64beeSJohannes Berg ieee80211_configure_filter(local); 354f3b85252SJohannes Berg 35542935ecaSLuis R. Rodriguez ieee80211_queue_delayed_work(&local->hw, 35642935ecaSLuis R. Rodriguez &local->scan_work, 357f3b85252SJohannes Berg IEEE80211_CHANNEL_TIME); 358f3b85252SJohannes Berg 359f3b85252SJohannes Berg return 0; 360f3b85252SJohannes Berg } 361f3b85252SJohannes Berg 362f3b85252SJohannes Berg 363f3b85252SJohannes Berg static int __ieee80211_start_scan(struct ieee80211_sub_if_data *sdata, 364f3b85252SJohannes Berg struct cfg80211_scan_request *req) 365f3b85252SJohannes Berg { 366f3b85252SJohannes Berg struct ieee80211_local *local = sdata->local; 367f3b85252SJohannes Berg int rc; 368f3b85252SJohannes Berg 369f3b85252SJohannes Berg if (local->scan_req) 370f3b85252SJohannes Berg return -EBUSY; 371f3b85252SJohannes Berg 3726e7e6213SJohn W. Linville if (!list_empty(&local->work_list)) { 3736e7e6213SJohn W. Linville /* wait for the work to finish/time out */ 374c0ce77b8SJohannes Berg local->scan_req = req; 375c0ce77b8SJohannes Berg local->scan_sdata = sdata; 376c0ce77b8SJohannes Berg return 0; 377c0ce77b8SJohannes Berg } 378c0ce77b8SJohannes Berg 379f3b85252SJohannes Berg if (local->ops->hw_scan) { 380f3b85252SJohannes Berg u8 *ies; 381f3b85252SJohannes Berg 3824d36ec58SJohannes Berg local->hw_scan_req = kmalloc( 3834d36ec58SJohannes Berg sizeof(*local->hw_scan_req) + 3844d36ec58SJohannes Berg req->n_channels * sizeof(req->channels[0]) + 3854d36ec58SJohannes Berg 2 + IEEE80211_MAX_SSID_LEN + local->scan_ies_len + 3864d36ec58SJohannes Berg req->ie_len, GFP_KERNEL); 3874d36ec58SJohannes Berg if (!local->hw_scan_req) 388f3b85252SJohannes Berg return -ENOMEM; 389f3b85252SJohannes Berg 3904d36ec58SJohannes Berg local->hw_scan_req->ssids = req->ssids; 3914d36ec58SJohannes Berg local->hw_scan_req->n_ssids = req->n_ssids; 3924d36ec58SJohannes Berg ies = (u8 *)local->hw_scan_req + 3934d36ec58SJohannes Berg sizeof(*local->hw_scan_req) + 3944d36ec58SJohannes Berg req->n_channels * sizeof(req->channels[0]); 3954d36ec58SJohannes Berg local->hw_scan_req->ie = ies; 3964d36ec58SJohannes Berg 3974d36ec58SJohannes Berg local->hw_scan_band = 0; 3986e7e6213SJohn W. Linville 3996e7e6213SJohn W. Linville /* 4006e7e6213SJohn W. Linville * After allocating local->hw_scan_req, we must 4016e7e6213SJohn W. Linville * go through until ieee80211_prep_hw_scan(), so 4026e7e6213SJohn W. Linville * anything that might be changed here and leave 4036e7e6213SJohn W. Linville * this function early must not go after this 4046e7e6213SJohn W. Linville * allocation. 4056e7e6213SJohn W. Linville */ 406f3b85252SJohannes Berg } 407f3b85252SJohannes Berg 408f3b85252SJohannes Berg local->scan_req = req; 409f3b85252SJohannes Berg local->scan_sdata = sdata; 410f3b85252SJohannes Berg 411f3b85252SJohannes Berg if (local->ops->hw_scan) 412fbe9c429SHelmut Schaa __set_bit(SCAN_HW_SCANNING, &local->scanning); 413f3b85252SJohannes Berg else 414fbe9c429SHelmut Schaa __set_bit(SCAN_SW_SCANNING, &local->scanning); 4156e7e6213SJohn W. Linville 4165cff20e6SJohannes Berg ieee80211_recalc_idle(local); 417f3b85252SJohannes Berg 4184d36ec58SJohannes Berg if (local->ops->hw_scan) { 4194d36ec58SJohannes Berg WARN_ON(!ieee80211_prep_hw_scan(local)); 420a060bbfeSJohannes Berg rc = drv_hw_scan(local, sdata, local->hw_scan_req); 4214d36ec58SJohannes Berg } else 422f3b85252SJohannes Berg rc = ieee80211_start_sw_scan(local); 423f3b85252SJohannes Berg 424f3b85252SJohannes Berg if (rc) { 4254d36ec58SJohannes Berg kfree(local->hw_scan_req); 4264d36ec58SJohannes Berg local->hw_scan_req = NULL; 427fbe9c429SHelmut Schaa local->scanning = 0; 428f3b85252SJohannes Berg 4295cff20e6SJohannes Berg ieee80211_recalc_idle(local); 4305cff20e6SJohannes Berg 431f3b85252SJohannes Berg local->scan_req = NULL; 432f3b85252SJohannes Berg local->scan_sdata = NULL; 433f3b85252SJohannes Berg } 434f3b85252SJohannes Berg 435f3b85252SJohannes Berg return rc; 436f3b85252SJohannes Berg } 437f3b85252SJohannes Berg 438df13cce5SHelmut Schaa static unsigned long 439df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(struct ieee80211_channel *chan) 440df13cce5SHelmut Schaa { 441df13cce5SHelmut Schaa /* 442df13cce5SHelmut Schaa * TODO: channel switching also consumes quite some time, 443df13cce5SHelmut Schaa * add that delay as well to get a better estimation 444df13cce5SHelmut Schaa */ 445df13cce5SHelmut Schaa if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) 446df13cce5SHelmut Schaa return IEEE80211_PASSIVE_CHANNEL_TIME; 447df13cce5SHelmut Schaa return IEEE80211_PROBE_DELAY + IEEE80211_CHANNEL_TIME; 448df13cce5SHelmut Schaa } 449df13cce5SHelmut Schaa 4502fb3f028SHelmut Schaa static int ieee80211_scan_state_decision(struct ieee80211_local *local, 4512fb3f028SHelmut Schaa unsigned long *next_delay) 4522fb3f028SHelmut Schaa { 453142b9f50SHelmut Schaa bool associated = false; 454df13cce5SHelmut Schaa bool tx_empty = true; 455df13cce5SHelmut Schaa bool bad_latency; 456df13cce5SHelmut Schaa bool listen_int_exceeded; 457df13cce5SHelmut Schaa unsigned long min_beacon_int = 0; 458142b9f50SHelmut Schaa struct ieee80211_sub_if_data *sdata; 459df13cce5SHelmut Schaa struct ieee80211_channel *next_chan; 460142b9f50SHelmut Schaa 461142b9f50SHelmut Schaa /* if no more bands/channels left, complete scan and advance to the idle state */ 4622fb3f028SHelmut Schaa if (local->scan_channel_idx >= local->scan_req->n_channels) { 4638789d459SJohannes Berg __ieee80211_scan_completed(&local->hw, false); 4642fb3f028SHelmut Schaa return 1; 4652fb3f028SHelmut Schaa } 4662fb3f028SHelmut Schaa 467df13cce5SHelmut Schaa /* 468df13cce5SHelmut Schaa * check if at least one STA interface is associated, 469df13cce5SHelmut Schaa * check if at least one STA interface has pending tx frames 470df13cce5SHelmut Schaa * and grab the lowest used beacon interval 471df13cce5SHelmut Schaa */ 472142b9f50SHelmut Schaa mutex_lock(&local->iflist_mtx); 473142b9f50SHelmut Schaa list_for_each_entry(sdata, &local->interfaces, list) { 4749607e6b6SJohannes Berg if (!ieee80211_sdata_running(sdata)) 475142b9f50SHelmut Schaa continue; 476142b9f50SHelmut Schaa 477142b9f50SHelmut Schaa if (sdata->vif.type == NL80211_IFTYPE_STATION) { 478142b9f50SHelmut Schaa if (sdata->u.mgd.associated) { 479142b9f50SHelmut Schaa associated = true; 480df13cce5SHelmut Schaa 481df13cce5SHelmut Schaa if (sdata->vif.bss_conf.beacon_int < 482df13cce5SHelmut Schaa min_beacon_int || min_beacon_int == 0) 483df13cce5SHelmut Schaa min_beacon_int = 484df13cce5SHelmut Schaa sdata->vif.bss_conf.beacon_int; 485df13cce5SHelmut Schaa 486df13cce5SHelmut Schaa if (!qdisc_all_tx_empty(sdata->dev)) { 487df13cce5SHelmut Schaa tx_empty = false; 488142b9f50SHelmut Schaa break; 489142b9f50SHelmut Schaa } 490142b9f50SHelmut Schaa } 491142b9f50SHelmut Schaa } 492df13cce5SHelmut Schaa } 493142b9f50SHelmut Schaa mutex_unlock(&local->iflist_mtx); 494142b9f50SHelmut Schaa 495142b9f50SHelmut Schaa if (local->scan_channel) { 496142b9f50SHelmut Schaa /* 497142b9f50SHelmut Schaa * we're currently scanning a different channel, let's 498df13cce5SHelmut Schaa * see if we can scan another channel without interfering 499df13cce5SHelmut Schaa * with the current traffic situation. 500df13cce5SHelmut Schaa * 501df13cce5SHelmut Schaa * Since we don't know if the AP has pending frames for us 502df13cce5SHelmut Schaa * we can only check for our tx queues and use the current 503df13cce5SHelmut Schaa * pm_qos requirements for rx. Hence, if no tx traffic occurs 504df13cce5SHelmut Schaa * at all we will scan as many channels in a row as the pm_qos 505df13cce5SHelmut Schaa * latency allows us to. Additionally we also check for the 506df13cce5SHelmut Schaa * currently negotiated listen interval to prevent losing 507df13cce5SHelmut Schaa * frames unnecessarily. 508df13cce5SHelmut Schaa * 509df13cce5SHelmut Schaa * Otherwise switch back to the operating channel. 510142b9f50SHelmut Schaa */ 511df13cce5SHelmut Schaa next_chan = local->scan_req->channels[local->scan_channel_idx]; 512df13cce5SHelmut Schaa 513df13cce5SHelmut Schaa bad_latency = time_after(jiffies + 514df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(next_chan), 515df13cce5SHelmut Schaa local->leave_oper_channel_time + 516f8965467SLinus Torvalds usecs_to_jiffies(pm_qos_request(PM_QOS_NETWORK_LATENCY))); 517df13cce5SHelmut Schaa 518df13cce5SHelmut Schaa listen_int_exceeded = time_after(jiffies + 519df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(next_chan), 520df13cce5SHelmut Schaa local->leave_oper_channel_time + 521df13cce5SHelmut Schaa usecs_to_jiffies(min_beacon_int * 1024) * 522df13cce5SHelmut Schaa local->hw.conf.listen_interval); 523df13cce5SHelmut Schaa 524df13cce5SHelmut Schaa if (associated && ( !tx_empty || bad_latency || 525df13cce5SHelmut Schaa listen_int_exceeded)) 526977923b0SHelmut Schaa local->next_scan_state = SCAN_ENTER_OPER_CHANNEL; 527142b9f50SHelmut Schaa else 528977923b0SHelmut Schaa local->next_scan_state = SCAN_SET_CHANNEL; 529142b9f50SHelmut Schaa } else { 530142b9f50SHelmut Schaa /* 531142b9f50SHelmut Schaa * we're on the operating channel currently, let's 532142b9f50SHelmut Schaa * leave that channel now to scan another one 533142b9f50SHelmut Schaa */ 534977923b0SHelmut Schaa local->next_scan_state = SCAN_LEAVE_OPER_CHANNEL; 535142b9f50SHelmut Schaa } 536142b9f50SHelmut Schaa 537142b9f50SHelmut Schaa *next_delay = 0; 5382fb3f028SHelmut Schaa return 0; 5392fb3f028SHelmut Schaa } 5402fb3f028SHelmut Schaa 541142b9f50SHelmut Schaa static void ieee80211_scan_state_leave_oper_channel(struct ieee80211_local *local, 542142b9f50SHelmut Schaa unsigned long *next_delay) 543142b9f50SHelmut Schaa { 544b203ffc3SJouni Malinen ieee80211_offchannel_stop_station(local); 545142b9f50SHelmut Schaa 546142b9f50SHelmut Schaa __set_bit(SCAN_OFF_CHANNEL, &local->scanning); 547142b9f50SHelmut Schaa 548a80f7c0bSJohannes Berg /* 549a80f7c0bSJohannes Berg * What if the nullfunc frames didn't arrive? 550a80f7c0bSJohannes Berg */ 551a80f7c0bSJohannes Berg drv_flush(local, false); 552a80f7c0bSJohannes Berg if (local->ops->flush) 553a80f7c0bSJohannes Berg *next_delay = 0; 554a80f7c0bSJohannes Berg else 555142b9f50SHelmut Schaa *next_delay = HZ / 10; 556a80f7c0bSJohannes Berg 557df13cce5SHelmut Schaa /* remember when we left the operating channel */ 558df13cce5SHelmut Schaa local->leave_oper_channel_time = jiffies; 559df13cce5SHelmut Schaa 560a80f7c0bSJohannes Berg /* advance to the next channel to be scanned */ 561977923b0SHelmut Schaa local->next_scan_state = SCAN_SET_CHANNEL; 562142b9f50SHelmut Schaa } 563142b9f50SHelmut Schaa 564142b9f50SHelmut Schaa static void ieee80211_scan_state_enter_oper_channel(struct ieee80211_local *local, 565142b9f50SHelmut Schaa unsigned long *next_delay) 566142b9f50SHelmut Schaa { 567142b9f50SHelmut Schaa /* switch back to the operating channel */ 568142b9f50SHelmut Schaa local->scan_channel = NULL; 569142b9f50SHelmut Schaa ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL); 570142b9f50SHelmut Schaa 571142b9f50SHelmut Schaa /* 572b203ffc3SJouni Malinen * Only re-enable station mode interface now; beaconing will be 573b203ffc3SJouni Malinen * re-enabled once the full scan has been completed. 574142b9f50SHelmut Schaa */ 575b203ffc3SJouni Malinen ieee80211_offchannel_return(local, false); 576142b9f50SHelmut Schaa 577142b9f50SHelmut Schaa __clear_bit(SCAN_OFF_CHANNEL, &local->scanning); 578142b9f50SHelmut Schaa 579142b9f50SHelmut Schaa *next_delay = HZ / 5; 580977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 581142b9f50SHelmut Schaa } 582142b9f50SHelmut Schaa 5832fb3f028SHelmut Schaa static void ieee80211_scan_state_set_channel(struct ieee80211_local *local, 5847d3be3ccSHelmut Schaa unsigned long *next_delay) 5857d3be3ccSHelmut Schaa { 5867d3be3ccSHelmut Schaa int skip; 5877d3be3ccSHelmut Schaa struct ieee80211_channel *chan; 5887d3be3ccSHelmut Schaa 5897d3be3ccSHelmut Schaa skip = 0; 5907d3be3ccSHelmut Schaa chan = local->scan_req->channels[local->scan_channel_idx]; 5917d3be3ccSHelmut Schaa 5927d3be3ccSHelmut Schaa local->scan_channel = chan; 593584991dcSJohannes Berg if (ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL)) 5947d3be3ccSHelmut Schaa skip = 1; 5957d3be3ccSHelmut Schaa 5967d3be3ccSHelmut Schaa /* advance state machine to next channel/band */ 5977d3be3ccSHelmut Schaa local->scan_channel_idx++; 5987d3be3ccSHelmut Schaa 5990ee9c13cSHelmut Schaa if (skip) { 6000ee9c13cSHelmut Schaa /* if we skip this channel return to the decision state */ 6010ee9c13cSHelmut Schaa local->next_scan_state = SCAN_DECISION; 6022fb3f028SHelmut Schaa return; 6030ee9c13cSHelmut Schaa } 6047d3be3ccSHelmut Schaa 6057d3be3ccSHelmut Schaa /* 6067d3be3ccSHelmut Schaa * Probe delay is used to update the NAV, cf. 11.1.3.2.2 6077d3be3ccSHelmut Schaa * (which unfortunately doesn't say _why_ step a) is done, 6087d3be3ccSHelmut Schaa * but it waits for the probe delay or until a frame is 6097d3be3ccSHelmut Schaa * received - and the received frame would update the NAV). 6107d3be3ccSHelmut Schaa * For now, we do not support waiting until a frame is 6117d3be3ccSHelmut Schaa * received. 6127d3be3ccSHelmut Schaa * 6137d3be3ccSHelmut Schaa * In any case, it is not necessary for a passive scan. 6147d3be3ccSHelmut Schaa */ 6157d3be3ccSHelmut Schaa if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN || 6167d3be3ccSHelmut Schaa !local->scan_req->n_ssids) { 6177d3be3ccSHelmut Schaa *next_delay = IEEE80211_PASSIVE_CHANNEL_TIME; 618977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 6192fb3f028SHelmut Schaa return; 6207d3be3ccSHelmut Schaa } 6217d3be3ccSHelmut Schaa 6222fb3f028SHelmut Schaa /* active scan, send probes */ 6237d3be3ccSHelmut Schaa *next_delay = IEEE80211_PROBE_DELAY; 624977923b0SHelmut Schaa local->next_scan_state = SCAN_SEND_PROBE; 6257d3be3ccSHelmut Schaa } 6267d3be3ccSHelmut Schaa 6277d3be3ccSHelmut Schaa static void ieee80211_scan_state_send_probe(struct ieee80211_local *local, 6287d3be3ccSHelmut Schaa unsigned long *next_delay) 6297d3be3ccSHelmut Schaa { 6307d3be3ccSHelmut Schaa int i; 6317d3be3ccSHelmut Schaa struct ieee80211_sub_if_data *sdata = local->scan_sdata; 6327d3be3ccSHelmut Schaa 6337d3be3ccSHelmut Schaa for (i = 0; i < local->scan_req->n_ssids; i++) 6347d3be3ccSHelmut Schaa ieee80211_send_probe_req( 6357d3be3ccSHelmut Schaa sdata, NULL, 6367d3be3ccSHelmut Schaa local->scan_req->ssids[i].ssid, 6377d3be3ccSHelmut Schaa local->scan_req->ssids[i].ssid_len, 6387d3be3ccSHelmut Schaa local->scan_req->ie, local->scan_req->ie_len); 6397d3be3ccSHelmut Schaa 6407d3be3ccSHelmut Schaa /* 6417d3be3ccSHelmut Schaa * After sending probe requests, wait for probe responses 6427d3be3ccSHelmut Schaa * on the channel. 6437d3be3ccSHelmut Schaa */ 6447d3be3ccSHelmut Schaa *next_delay = IEEE80211_CHANNEL_TIME; 645977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 6467d3be3ccSHelmut Schaa } 6477d3be3ccSHelmut Schaa 648c2b13452SJohannes Berg void ieee80211_scan_work(struct work_struct *work) 6490a51b27eSJohannes Berg { 6500a51b27eSJohannes Berg struct ieee80211_local *local = 6510a51b27eSJohannes Berg container_of(work, struct ieee80211_local, scan_work.work); 6520a51b27eSJohannes Berg struct ieee80211_sub_if_data *sdata = local->scan_sdata; 6530a51b27eSJohannes Berg unsigned long next_delay = 0; 6548789d459SJohannes Berg bool aborted; 6558789d459SJohannes Berg 656*259b62e3SStanislaw Gruszka mutex_lock(&local->mtx); 657*259b62e3SStanislaw Gruszka 658*259b62e3SStanislaw Gruszka if (test_and_clear_bit(SCAN_COMPLETED, &local->scanning)) { 6598789d459SJohannes Berg aborted = test_and_clear_bit(SCAN_ABORTED, &local->scanning); 660*259b62e3SStanislaw Gruszka goto out_complete; 6618789d459SJohannes Berg } 6628789d459SJohannes Berg 663*259b62e3SStanislaw Gruszka if (!sdata || !local->scan_req) 664*259b62e3SStanislaw Gruszka goto out; 665f3b85252SJohannes Berg 6664d36ec58SJohannes Berg if (local->hw_scan_req) { 667a060bbfeSJohannes Berg int rc = drv_hw_scan(local, sdata, local->hw_scan_req); 668*259b62e3SStanislaw Gruszka if (rc) { 669*259b62e3SStanislaw Gruszka aborted = true; 670*259b62e3SStanislaw Gruszka goto out_complete; 671*259b62e3SStanislaw Gruszka } else 672*259b62e3SStanislaw Gruszka goto out; 6734d36ec58SJohannes Berg } 6744d36ec58SJohannes Berg 675fbe9c429SHelmut Schaa if (local->scan_req && !local->scanning) { 676f3b85252SJohannes Berg struct cfg80211_scan_request *req = local->scan_req; 677f3b85252SJohannes Berg int rc; 678f3b85252SJohannes Berg 679f3b85252SJohannes Berg local->scan_req = NULL; 68015db0b7fSJohannes Berg local->scan_sdata = NULL; 681f3b85252SJohannes Berg 682f3b85252SJohannes Berg rc = __ieee80211_start_scan(sdata, req); 683*259b62e3SStanislaw Gruszka if (rc) { 684*259b62e3SStanislaw Gruszka aborted = true; 685*259b62e3SStanislaw Gruszka goto out_complete; 686*259b62e3SStanislaw Gruszka } else 687*259b62e3SStanislaw Gruszka goto out; 688f3b85252SJohannes Berg } 689f3b85252SJohannes Berg 6905bc75728SJohannes Berg /* 6915bc75728SJohannes Berg * Avoid re-scheduling when the sdata is going away. 6925bc75728SJohannes Berg */ 6939607e6b6SJohannes Berg if (!ieee80211_sdata_running(sdata)) { 694*259b62e3SStanislaw Gruszka aborted = true; 695*259b62e3SStanislaw Gruszka goto out_complete; 696f3b85252SJohannes Berg } 6970a51b27eSJohannes Berg 698*259b62e3SStanislaw Gruszka mutex_unlock(&local->mtx); 699*259b62e3SStanislaw Gruszka 700f502d09bSHelmut Schaa /* 701f502d09bSHelmut Schaa * as long as no delay is required advance immediately 702f502d09bSHelmut Schaa * without scheduling a new work 703f502d09bSHelmut Schaa */ 704f502d09bSHelmut Schaa do { 705977923b0SHelmut Schaa switch (local->next_scan_state) { 7062fb3f028SHelmut Schaa case SCAN_DECISION: 7072fb3f028SHelmut Schaa if (ieee80211_scan_state_decision(local, &next_delay)) 7080a51b27eSJohannes Berg return; 7090a51b27eSJohannes Berg break; 7102fb3f028SHelmut Schaa case SCAN_SET_CHANNEL: 7112fb3f028SHelmut Schaa ieee80211_scan_state_set_channel(local, &next_delay); 7122fb3f028SHelmut Schaa break; 7130a51b27eSJohannes Berg case SCAN_SEND_PROBE: 7147d3be3ccSHelmut Schaa ieee80211_scan_state_send_probe(local, &next_delay); 7150a51b27eSJohannes Berg break; 716142b9f50SHelmut Schaa case SCAN_LEAVE_OPER_CHANNEL: 717142b9f50SHelmut Schaa ieee80211_scan_state_leave_oper_channel(local, &next_delay); 718142b9f50SHelmut Schaa break; 719142b9f50SHelmut Schaa case SCAN_ENTER_OPER_CHANNEL: 720142b9f50SHelmut Schaa ieee80211_scan_state_enter_oper_channel(local, &next_delay); 721142b9f50SHelmut Schaa break; 7220a51b27eSJohannes Berg } 723f502d09bSHelmut Schaa } while (next_delay == 0); 7240a51b27eSJohannes Berg 72542935ecaSLuis R. Rodriguez ieee80211_queue_delayed_work(&local->hw, &local->scan_work, next_delay); 726*259b62e3SStanislaw Gruszka return; 727*259b62e3SStanislaw Gruszka 728*259b62e3SStanislaw Gruszka out_complete: 729*259b62e3SStanislaw Gruszka mutex_unlock(&local->mtx); 730*259b62e3SStanislaw Gruszka __ieee80211_scan_completed(&local->hw, aborted); 731*259b62e3SStanislaw Gruszka return; 732*259b62e3SStanislaw Gruszka 733*259b62e3SStanislaw Gruszka out: 734*259b62e3SStanislaw Gruszka mutex_unlock(&local->mtx); 7350a51b27eSJohannes Berg } 7360a51b27eSJohannes Berg 737c2b13452SJohannes Berg int ieee80211_request_scan(struct ieee80211_sub_if_data *sdata, 7382a519311SJohannes Berg struct cfg80211_scan_request *req) 7390a51b27eSJohannes Berg { 740f3b85252SJohannes Berg int res; 7410a51b27eSJohannes Berg 742a1699b75SJohannes Berg mutex_lock(&sdata->local->mtx); 743f3b85252SJohannes Berg res = __ieee80211_start_scan(sdata, req); 744a1699b75SJohannes Berg mutex_unlock(&sdata->local->mtx); 7452a519311SJohannes Berg 746f3b85252SJohannes Berg return res; 7470a51b27eSJohannes Berg } 7480a51b27eSJohannes Berg 749f3b85252SJohannes Berg int ieee80211_request_internal_scan(struct ieee80211_sub_if_data *sdata, 750be4a4b6aSJohannes Berg const u8 *ssid, u8 ssid_len, 751be4a4b6aSJohannes Berg struct ieee80211_channel *chan) 752f3b85252SJohannes Berg { 753f3b85252SJohannes Berg struct ieee80211_local *local = sdata->local; 754f3b85252SJohannes Berg int ret = -EBUSY; 755fb63bc41SGertjan van Wingerde enum ieee80211_band band; 7569116dd01SJohannes Berg 757a1699b75SJohannes Berg mutex_lock(&local->mtx); 758f3b85252SJohannes Berg 759f3b85252SJohannes Berg /* busy scanning */ 760f3b85252SJohannes Berg if (local->scan_req) 761f3b85252SJohannes Berg goto unlock; 762f3b85252SJohannes Berg 763be4a4b6aSJohannes Berg /* fill internal scan request */ 764be4a4b6aSJohannes Berg if (!chan) { 765be4a4b6aSJohannes Berg int i, nchan = 0; 766be4a4b6aSJohannes Berg 767be4a4b6aSJohannes Berg for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 768be4a4b6aSJohannes Berg if (!local->hw.wiphy->bands[band]) 769be4a4b6aSJohannes Berg continue; 770be4a4b6aSJohannes Berg for (i = 0; 771be4a4b6aSJohannes Berg i < local->hw.wiphy->bands[band]->n_channels; 772be4a4b6aSJohannes Berg i++) { 773be4a4b6aSJohannes Berg local->int_scan_req->channels[nchan] = 774be4a4b6aSJohannes Berg &local->hw.wiphy->bands[band]->channels[i]; 775be4a4b6aSJohannes Berg nchan++; 776be4a4b6aSJohannes Berg } 777be4a4b6aSJohannes Berg } 778be4a4b6aSJohannes Berg 779be4a4b6aSJohannes Berg local->int_scan_req->n_channels = nchan; 780be4a4b6aSJohannes Berg } else { 781be4a4b6aSJohannes Berg local->int_scan_req->channels[0] = chan; 782be4a4b6aSJohannes Berg local->int_scan_req->n_channels = 1; 783be4a4b6aSJohannes Berg } 784be4a4b6aSJohannes Berg 785be4a4b6aSJohannes Berg local->int_scan_req->ssids = &local->scan_ssid; 786be4a4b6aSJohannes Berg local->int_scan_req->n_ssids = 1; 7875ba63533SJohannes Berg memcpy(local->int_scan_req->ssids[0].ssid, ssid, IEEE80211_MAX_SSID_LEN); 7885ba63533SJohannes Berg local->int_scan_req->ssids[0].ssid_len = ssid_len; 789f3b85252SJohannes Berg 7905ba63533SJohannes Berg ret = __ieee80211_start_scan(sdata, sdata->local->int_scan_req); 791f3b85252SJohannes Berg unlock: 792a1699b75SJohannes Berg mutex_unlock(&local->mtx); 793f3b85252SJohannes Berg return ret; 7940a51b27eSJohannes Berg } 7955bb644a0SJohannes Berg 7965bb644a0SJohannes Berg void ieee80211_scan_cancel(struct ieee80211_local *local) 7975bb644a0SJohannes Berg { 79815db0b7fSJohannes Berg bool abortscan; 7995bb644a0SJohannes Berg 8005bb644a0SJohannes Berg cancel_delayed_work_sync(&local->scan_work); 8015bb644a0SJohannes Berg 8025bb644a0SJohannes Berg /* 8035bb644a0SJohannes Berg * Only call this function when a scan can't be 8045bb644a0SJohannes Berg * queued -- mostly at suspend under RTNL. 8055bb644a0SJohannes Berg */ 806a1699b75SJohannes Berg mutex_lock(&local->mtx); 80715db0b7fSJohannes Berg abortscan = test_bit(SCAN_SW_SCANNING, &local->scanning) || 80815db0b7fSJohannes Berg (!local->scanning && local->scan_req); 809a1699b75SJohannes Berg mutex_unlock(&local->mtx); 8105bb644a0SJohannes Berg 81115db0b7fSJohannes Berg if (abortscan) 8128789d459SJohannes Berg __ieee80211_scan_completed(&local->hw, true); 8135bb644a0SJohannes Berg } 814