10a51b27eSJohannes Berg /* 25484e237SJohannes Berg * Scanning implementation 35484e237SJohannes Berg * 40a51b27eSJohannes Berg * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> 50a51b27eSJohannes Berg * Copyright 2004, Instant802 Networks, Inc. 60a51b27eSJohannes Berg * Copyright 2005, Devicescape Software, Inc. 70a51b27eSJohannes Berg * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 80a51b27eSJohannes Berg * Copyright 2007, Michael Wu <flamingice@sourmilk.net> 90a51b27eSJohannes Berg * 100a51b27eSJohannes Berg * This program is free software; you can redistribute it and/or modify 110a51b27eSJohannes Berg * it under the terms of the GNU General Public License version 2 as 120a51b27eSJohannes Berg * published by the Free Software Foundation. 130a51b27eSJohannes Berg */ 140a51b27eSJohannes Berg 150a51b27eSJohannes Berg #include <linux/if_arp.h> 16078e1e60SJohannes Berg #include <linux/rtnetlink.h> 17df13cce5SHelmut Schaa #include <linux/pm_qos_params.h> 18df13cce5SHelmut Schaa #include <net/sch_generic.h> 195a0e3ad6STejun Heo #include <linux/slab.h> 200a51b27eSJohannes Berg #include <net/mac80211.h> 210a51b27eSJohannes Berg 220a51b27eSJohannes Berg #include "ieee80211_i.h" 2324487981SJohannes Berg #include "driver-ops.h" 245484e237SJohannes Berg #include "mesh.h" 250a51b27eSJohannes Berg 260a51b27eSJohannes Berg #define IEEE80211_PROBE_DELAY (HZ / 33) 270a51b27eSJohannes Berg #define IEEE80211_CHANNEL_TIME (HZ / 33) 2896f7e739SHelmut Schaa #define IEEE80211_PASSIVE_CHANNEL_TIME (HZ / 8) 290a51b27eSJohannes Berg 30c2b13452SJohannes Berg struct ieee80211_bss * 315484e237SJohannes Berg ieee80211_rx_bss_get(struct ieee80211_local *local, u8 *bssid, int freq, 325484e237SJohannes Berg u8 *ssid, u8 ssid_len) 335484e237SJohannes Berg { 340c1ad2caSJohannes Berg struct cfg80211_bss *cbss; 350c1ad2caSJohannes Berg 360c1ad2caSJohannes Berg cbss = cfg80211_get_bss(local->hw.wiphy, 370c1ad2caSJohannes Berg ieee80211_get_channel(local->hw.wiphy, freq), 380c1ad2caSJohannes Berg bssid, ssid, ssid_len, 0, 0); 390c1ad2caSJohannes Berg if (!cbss) 400c1ad2caSJohannes Berg return NULL; 410c1ad2caSJohannes Berg return (void *)cbss->priv; 425484e237SJohannes Berg } 435484e237SJohannes Berg 4400d3f14cSJohannes Berg static void ieee80211_rx_bss_free(struct cfg80211_bss *cbss) 455484e237SJohannes Berg { 460c1ad2caSJohannes Berg struct ieee80211_bss *bss = (void *)cbss->priv; 475484e237SJohannes Berg 485484e237SJohannes Berg kfree(bss_mesh_id(bss)); 495484e237SJohannes Berg kfree(bss_mesh_cfg(bss)); 505484e237SJohannes Berg } 515484e237SJohannes Berg 525484e237SJohannes Berg void ieee80211_rx_bss_put(struct ieee80211_local *local, 53c2b13452SJohannes Berg struct ieee80211_bss *bss) 545484e237SJohannes Berg { 550c1ad2caSJohannes Berg if (!bss) 560c1ad2caSJohannes Berg return; 570c1ad2caSJohannes Berg cfg80211_put_bss(container_of((void *)bss, struct cfg80211_bss, priv)); 585484e237SJohannes Berg } 595484e237SJohannes Berg 60ab13315aSKalle Valo static bool is_uapsd_supported(struct ieee802_11_elems *elems) 61ab13315aSKalle Valo { 62ab13315aSKalle Valo u8 qos_info; 63ab13315aSKalle Valo 64ab13315aSKalle Valo if (elems->wmm_info && elems->wmm_info_len == 7 65ab13315aSKalle Valo && elems->wmm_info[5] == 1) 66ab13315aSKalle Valo qos_info = elems->wmm_info[6]; 67ab13315aSKalle Valo else if (elems->wmm_param && elems->wmm_param_len == 24 68ab13315aSKalle Valo && elems->wmm_param[5] == 1) 69ab13315aSKalle Valo qos_info = elems->wmm_param[6]; 70ab13315aSKalle Valo else 71ab13315aSKalle Valo /* no valid wmm information or parameter element found */ 72ab13315aSKalle Valo return false; 73ab13315aSKalle Valo 74ab13315aSKalle Valo return qos_info & IEEE80211_WMM_IE_AP_QOSINFO_UAPSD; 75ab13315aSKalle Valo } 76ab13315aSKalle Valo 77c2b13452SJohannes Berg struct ieee80211_bss * 785484e237SJohannes Berg ieee80211_bss_info_update(struct ieee80211_local *local, 795484e237SJohannes Berg struct ieee80211_rx_status *rx_status, 805484e237SJohannes Berg struct ieee80211_mgmt *mgmt, 815484e237SJohannes Berg size_t len, 825484e237SJohannes Berg struct ieee802_11_elems *elems, 832a519311SJohannes Berg struct ieee80211_channel *channel, 842a519311SJohannes Berg bool beacon) 855484e237SJohannes Berg { 860c1ad2caSJohannes Berg struct cfg80211_bss *cbss; 87c2b13452SJohannes Berg struct ieee80211_bss *bss; 88f0b058b6SStanislaw Gruszka int clen, srlen; 892a519311SJohannes Berg s32 signal = 0; 902a519311SJohannes Berg 9177965c97SJohannes Berg if (local->hw.flags & IEEE80211_HW_SIGNAL_DBM) 922a519311SJohannes Berg signal = rx_status->signal * 100; 9377965c97SJohannes Berg else if (local->hw.flags & IEEE80211_HW_SIGNAL_UNSPEC) 942a519311SJohannes Berg signal = (rx_status->signal * 100) / local->hw.max_signal; 952a519311SJohannes Berg 960c1ad2caSJohannes Berg cbss = cfg80211_inform_bss_frame(local->hw.wiphy, channel, 9777965c97SJohannes Berg mgmt, len, signal, GFP_ATOMIC); 985484e237SJohannes Berg 990c1ad2caSJohannes Berg if (!cbss) 1005484e237SJohannes Berg return NULL; 10100d3f14cSJohannes Berg 1020c1ad2caSJohannes Berg cbss->free_priv = ieee80211_rx_bss_free; 1030c1ad2caSJohannes Berg bss = (void *)cbss->priv; 1045484e237SJohannes Berg 1055484e237SJohannes Berg /* save the ERP value so that it is available at association time */ 1065484e237SJohannes Berg if (elems->erp_info && elems->erp_info_len >= 1) { 1075484e237SJohannes Berg bss->erp_value = elems->erp_info[0]; 1085484e237SJohannes Berg bss->has_erp_value = 1; 1095484e237SJohannes Berg } 1105484e237SJohannes Berg 1115484e237SJohannes Berg if (elems->tim) { 1125484e237SJohannes Berg struct ieee80211_tim_ie *tim_ie = 1135484e237SJohannes Berg (struct ieee80211_tim_ie *)elems->tim; 1145484e237SJohannes Berg bss->dtim_period = tim_ie->dtim_period; 1155484e237SJohannes Berg } 1165484e237SJohannes Berg 117e5b900d2SJohannes Berg /* If the beacon had no TIM IE, or it was invalid, use 1 */ 118e5b900d2SJohannes Berg if (beacon && !bss->dtim_period) 119e5b900d2SJohannes Berg bss->dtim_period = 1; 120e5b900d2SJohannes Berg 121f0b058b6SStanislaw Gruszka /* replace old supported rates if we get new values */ 122f0b058b6SStanislaw Gruszka srlen = 0; 1235484e237SJohannes Berg if (elems->supp_rates) { 124f0b058b6SStanislaw Gruszka clen = IEEE80211_MAX_SUPP_RATES; 1255484e237SJohannes Berg if (clen > elems->supp_rates_len) 1265484e237SJohannes Berg clen = elems->supp_rates_len; 127f0b058b6SStanislaw Gruszka memcpy(bss->supp_rates, elems->supp_rates, clen); 128f0b058b6SStanislaw Gruszka srlen += clen; 1295484e237SJohannes Berg } 1305484e237SJohannes Berg if (elems->ext_supp_rates) { 131f0b058b6SStanislaw Gruszka clen = IEEE80211_MAX_SUPP_RATES - srlen; 1325484e237SJohannes Berg if (clen > elems->ext_supp_rates_len) 1335484e237SJohannes Berg clen = elems->ext_supp_rates_len; 134f0b058b6SStanislaw Gruszka memcpy(bss->supp_rates + srlen, elems->ext_supp_rates, clen); 135f0b058b6SStanislaw Gruszka srlen += clen; 1365484e237SJohannes Berg } 137f0b058b6SStanislaw Gruszka if (srlen) 138f0b058b6SStanislaw Gruszka bss->supp_rates_len = srlen; 1395484e237SJohannes Berg 1405484e237SJohannes Berg bss->wmm_used = elems->wmm_param || elems->wmm_info; 141ab13315aSKalle Valo bss->uapsd_supported = is_uapsd_supported(elems); 1425484e237SJohannes Berg 1435484e237SJohannes Berg if (!beacon) 1445484e237SJohannes Berg bss->last_probe_resp = jiffies; 1455484e237SJohannes Berg 1465484e237SJohannes Berg return bss; 1475484e237SJohannes Berg } 1480a51b27eSJohannes Berg 14998c8fccfSJohannes Berg ieee80211_rx_result 150f1d58c25SJohannes Berg ieee80211_scan_rx(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb) 15198c8fccfSJohannes Berg { 152f1d58c25SJohannes Berg struct ieee80211_rx_status *rx_status = IEEE80211_SKB_RXCB(skb); 15398c8fccfSJohannes Berg struct ieee80211_mgmt *mgmt; 154c2b13452SJohannes Berg struct ieee80211_bss *bss; 15598c8fccfSJohannes Berg u8 *elements; 15698c8fccfSJohannes Berg struct ieee80211_channel *channel; 15798c8fccfSJohannes Berg size_t baselen; 15898c8fccfSJohannes Berg int freq; 15998c8fccfSJohannes Berg __le16 fc; 16098c8fccfSJohannes Berg bool presp, beacon = false; 16198c8fccfSJohannes Berg struct ieee802_11_elems elems; 16298c8fccfSJohannes Berg 16398c8fccfSJohannes Berg if (skb->len < 2) 16498c8fccfSJohannes Berg return RX_DROP_UNUSABLE; 16598c8fccfSJohannes Berg 16698c8fccfSJohannes Berg mgmt = (struct ieee80211_mgmt *) skb->data; 16798c8fccfSJohannes Berg fc = mgmt->frame_control; 16898c8fccfSJohannes Berg 16998c8fccfSJohannes Berg if (ieee80211_is_ctl(fc)) 17098c8fccfSJohannes Berg return RX_CONTINUE; 17198c8fccfSJohannes Berg 17298c8fccfSJohannes Berg if (skb->len < 24) 173*306fe938SLuciano Coelho return RX_CONTINUE; 17498c8fccfSJohannes Berg 17598c8fccfSJohannes Berg presp = ieee80211_is_probe_resp(fc); 17698c8fccfSJohannes Berg if (presp) { 17798c8fccfSJohannes Berg /* ignore ProbeResp to foreign address */ 17847846c9bSJohannes Berg if (memcmp(mgmt->da, sdata->vif.addr, ETH_ALEN)) 17998c8fccfSJohannes Berg return RX_DROP_MONITOR; 18098c8fccfSJohannes Berg 18198c8fccfSJohannes Berg presp = true; 18298c8fccfSJohannes Berg elements = mgmt->u.probe_resp.variable; 18398c8fccfSJohannes Berg baselen = offsetof(struct ieee80211_mgmt, u.probe_resp.variable); 18498c8fccfSJohannes Berg } else { 18598c8fccfSJohannes Berg beacon = ieee80211_is_beacon(fc); 18698c8fccfSJohannes Berg baselen = offsetof(struct ieee80211_mgmt, u.beacon.variable); 18798c8fccfSJohannes Berg elements = mgmt->u.beacon.variable; 18898c8fccfSJohannes Berg } 18998c8fccfSJohannes Berg 19098c8fccfSJohannes Berg if (!presp && !beacon) 19198c8fccfSJohannes Berg return RX_CONTINUE; 19298c8fccfSJohannes Berg 19398c8fccfSJohannes Berg if (baselen > skb->len) 19498c8fccfSJohannes Berg return RX_DROP_MONITOR; 19598c8fccfSJohannes Berg 19698c8fccfSJohannes Berg ieee802_11_parse_elems(elements, skb->len - baselen, &elems); 19798c8fccfSJohannes Berg 19898c8fccfSJohannes Berg if (elems.ds_params && elems.ds_params_len == 1) 19959eb21a6SBruno Randolf freq = ieee80211_channel_to_frequency(elems.ds_params[0], 20059eb21a6SBruno Randolf rx_status->band); 20198c8fccfSJohannes Berg else 20298c8fccfSJohannes Berg freq = rx_status->freq; 20398c8fccfSJohannes Berg 20498c8fccfSJohannes Berg channel = ieee80211_get_channel(sdata->local->hw.wiphy, freq); 20598c8fccfSJohannes Berg 20698c8fccfSJohannes Berg if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) 20798c8fccfSJohannes Berg return RX_DROP_MONITOR; 20898c8fccfSJohannes Berg 20998c8fccfSJohannes Berg bss = ieee80211_bss_info_update(sdata->local, rx_status, 21098c8fccfSJohannes Berg mgmt, skb->len, &elems, 2112a519311SJohannes Berg channel, beacon); 212d048e503SJouni Malinen if (bss) 21398c8fccfSJohannes Berg ieee80211_rx_bss_put(sdata->local, bss); 21498c8fccfSJohannes Berg 215b23b025fSBen Greear /* If we are on-operating-channel, and this packet is for the 216b23b025fSBen Greear * current channel, pass the pkt on up the stack so that 217b23b025fSBen Greear * the rest of the stack can make use of it. 218b23b025fSBen Greear */ 219b23b025fSBen Greear if (ieee80211_cfg_on_oper_channel(sdata->local) 220b23b025fSBen Greear && (channel == sdata->local->oper_channel)) 221b23b025fSBen Greear return RX_CONTINUE; 222b23b025fSBen Greear 22398c8fccfSJohannes Berg dev_kfree_skb(skb); 22498c8fccfSJohannes Berg return RX_QUEUED; 22598c8fccfSJohannes Berg } 22698c8fccfSJohannes Berg 2274d36ec58SJohannes Berg /* return false if no more work */ 2284d36ec58SJohannes Berg static bool ieee80211_prep_hw_scan(struct ieee80211_local *local) 2294d36ec58SJohannes Berg { 2304d36ec58SJohannes Berg struct cfg80211_scan_request *req = local->scan_req; 2314d36ec58SJohannes Berg enum ieee80211_band band; 2324d36ec58SJohannes Berg int i, ielen, n_chans; 2334d36ec58SJohannes Berg 2344d36ec58SJohannes Berg do { 2354d36ec58SJohannes Berg if (local->hw_scan_band == IEEE80211_NUM_BANDS) 2364d36ec58SJohannes Berg return false; 2374d36ec58SJohannes Berg 2384d36ec58SJohannes Berg band = local->hw_scan_band; 2394d36ec58SJohannes Berg n_chans = 0; 2404d36ec58SJohannes Berg for (i = 0; i < req->n_channels; i++) { 2414d36ec58SJohannes Berg if (req->channels[i]->band == band) { 2424d36ec58SJohannes Berg local->hw_scan_req->channels[n_chans] = 2434d36ec58SJohannes Berg req->channels[i]; 2444d36ec58SJohannes Berg n_chans++; 2454d36ec58SJohannes Berg } 2464d36ec58SJohannes Berg } 2474d36ec58SJohannes Berg 2484d36ec58SJohannes Berg local->hw_scan_band++; 2494d36ec58SJohannes Berg } while (!n_chans); 2504d36ec58SJohannes Berg 2514d36ec58SJohannes Berg local->hw_scan_req->n_channels = n_chans; 2524d36ec58SJohannes Berg 2534d36ec58SJohannes Berg ielen = ieee80211_build_preq_ies(local, (u8 *)local->hw_scan_req->ie, 254651b5225SJouni Malinen req->ie, req->ie_len, band, (u32) -1, 255651b5225SJouni Malinen 0); 2564d36ec58SJohannes Berg local->hw_scan_req->ie_len = ielen; 2574d36ec58SJohannes Berg 2584d36ec58SJohannes Berg return true; 2594d36ec58SJohannes Berg } 2604d36ec58SJohannes Berg 261d07bfd8bSJohannes Berg static void __ieee80211_scan_completed(struct ieee80211_hw *hw, bool aborted, 262e229f844SStanislaw Gruszka bool was_hw_scan) 263f3b85252SJohannes Berg { 264f3b85252SJohannes Berg struct ieee80211_local *local = hw_to_local(hw); 265d07bfd8bSJohannes Berg bool on_oper_chan; 266d07bfd8bSJohannes Berg bool enable_beacons = false; 267f3b85252SJohannes Berg 268e229f844SStanislaw Gruszka lockdep_assert_held(&local->mtx); 269f3b85252SJohannes Berg 2706d3560d4SJohannes Berg /* 2716d3560d4SJohannes Berg * It's ok to abort a not-yet-running scan (that 2726d3560d4SJohannes Berg * we have one at all will be verified by checking 2736d3560d4SJohannes Berg * local->scan_req next), but not to complete it 2746d3560d4SJohannes Berg * successfully. 2756d3560d4SJohannes Berg */ 2766d3560d4SJohannes Berg if (WARN_ON(!local->scanning && !aborted)) 2776d3560d4SJohannes Berg aborted = true; 278f3b85252SJohannes Berg 279e229f844SStanislaw Gruszka if (WARN_ON(!local->scan_req)) 280d07bfd8bSJohannes Berg return; 281f3b85252SJohannes Berg 2824d36ec58SJohannes Berg if (was_hw_scan && !aborted && ieee80211_prep_hw_scan(local)) { 2836eb11a9aSStanislaw Gruszka int rc = drv_hw_scan(local, local->scan_sdata, local->hw_scan_req); 2846eb11a9aSStanislaw Gruszka if (rc == 0) 285d07bfd8bSJohannes Berg return; 2864d36ec58SJohannes Berg } 2874d36ec58SJohannes Berg 2884d36ec58SJohannes Berg kfree(local->hw_scan_req); 2894d36ec58SJohannes Berg local->hw_scan_req = NULL; 290f3b85252SJohannes Berg 2915ba63533SJohannes Berg if (local->scan_req != local->int_scan_req) 2922a519311SJohannes Berg cfg80211_scan_done(local->scan_req, aborted); 2932a519311SJohannes Berg local->scan_req = NULL; 29415db0b7fSJohannes Berg local->scan_sdata = NULL; 2952a519311SJohannes Berg 296fbe9c429SHelmut Schaa local->scanning = 0; 29758905ca5SJohannes Berg local->scan_channel = NULL; 298f3b85252SJohannes Berg 299b23b025fSBen Greear on_oper_chan = ieee80211_cfg_on_oper_channel(local); 300b23b025fSBen Greear 301d07bfd8bSJohannes Berg if (was_hw_scan || !on_oper_chan) 302b23b025fSBen Greear ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL); 303d07bfd8bSJohannes Berg else 30459bdf3b0SBen Greear /* Set power back to normal operating levels. */ 30559bdf3b0SBen Greear ieee80211_hw_config(local, 0); 306b23b025fSBen Greear 307b23b025fSBen Greear if (!was_hw_scan) { 308b23b025fSBen Greear bool on_oper_chan2; 309b23b025fSBen Greear ieee80211_configure_filter(local); 310b23b025fSBen Greear drv_sw_scan_complete(local); 311b23b025fSBen Greear on_oper_chan2 = ieee80211_cfg_on_oper_channel(local); 312b23b025fSBen Greear /* We should always be on-channel at this point. */ 313b23b025fSBen Greear WARN_ON(!on_oper_chan2); 314b23b025fSBen Greear if (on_oper_chan2 && (on_oper_chan != on_oper_chan2)) 315b23b025fSBen Greear enable_beacons = true; 316b23b025fSBen Greear 317b23b025fSBen Greear ieee80211_offchannel_return(local, enable_beacons, true); 318b23b025fSBen Greear } 319b23b025fSBen Greear 3205cff20e6SJohannes Berg ieee80211_recalc_idle(local); 321e229f844SStanislaw Gruszka 3220a51b27eSJohannes Berg ieee80211_mlme_notify_scan_completed(local); 32346900298SJohannes Berg ieee80211_ibss_notify_scan_completed(local); 324472dbc45SJohannes Berg ieee80211_mesh_notify_scan_completed(local); 32581ac3462SJohannes Berg ieee80211_queue_work(&local->hw, &local->work_work); 3260a51b27eSJohannes Berg } 3278789d459SJohannes Berg 3288789d459SJohannes Berg void ieee80211_scan_completed(struct ieee80211_hw *hw, bool aborted) 3298789d459SJohannes Berg { 3308789d459SJohannes Berg struct ieee80211_local *local = hw_to_local(hw); 3318789d459SJohannes Berg 3328789d459SJohannes Berg trace_api_scan_completed(local, aborted); 3338789d459SJohannes Berg 3348789d459SJohannes Berg set_bit(SCAN_COMPLETED, &local->scanning); 3358789d459SJohannes Berg if (aborted) 3368789d459SJohannes Berg set_bit(SCAN_ABORTED, &local->scanning); 3378789d459SJohannes Berg ieee80211_queue_delayed_work(&local->hw, &local->scan_work, 0); 3388789d459SJohannes Berg } 3390a51b27eSJohannes Berg EXPORT_SYMBOL(ieee80211_scan_completed); 3400a51b27eSJohannes Berg 341f3b85252SJohannes Berg static int ieee80211_start_sw_scan(struct ieee80211_local *local) 342f3b85252SJohannes Berg { 343f3b85252SJohannes Berg /* 344f3b85252SJohannes Berg * Hardware/driver doesn't support hw_scan, so use software 345f3b85252SJohannes Berg * scanning instead. First send a nullfunc frame with power save 346f3b85252SJohannes Berg * bit on so that AP will buffer the frames for us while we are not 347f3b85252SJohannes Berg * listening, then send probe requests to each channel and wait for 348f3b85252SJohannes Berg * the responses. After all channels are scanned, tune back to the 349f3b85252SJohannes Berg * original channel and send a nullfunc frame with power save bit 350f3b85252SJohannes Berg * off to trigger the AP to send us all the buffered frames. 351f3b85252SJohannes Berg * 352f3b85252SJohannes Berg * Note that while local->sw_scanning is true everything else but 353f3b85252SJohannes Berg * nullfunc frames and probe requests will be dropped in 354f3b85252SJohannes Berg * ieee80211_tx_h_check_assoc(). 355f3b85252SJohannes Berg */ 35624487981SJohannes Berg drv_sw_scan_start(local); 357f3b85252SJohannes Berg 358df13cce5SHelmut Schaa local->leave_oper_channel_time = 0; 359977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 360f3b85252SJohannes Berg local->scan_channel_idx = 0; 361f3b85252SJohannes Berg 362b23b025fSBen Greear /* We always want to use off-channel PS, even if we 363b23b025fSBen Greear * are not really leaving oper-channel. Don't 364b23b025fSBen Greear * tell the AP though, as long as we are on-channel. 365b23b025fSBen Greear */ 366b23b025fSBen Greear ieee80211_offchannel_enable_all_ps(local, false); 367a80f7c0bSJohannes Berg 3683ac64beeSJohannes Berg ieee80211_configure_filter(local); 369f3b85252SJohannes Berg 37059bdf3b0SBen Greear /* We need to set power level at maximum rate for scanning. */ 37159bdf3b0SBen Greear ieee80211_hw_config(local, 0); 37259bdf3b0SBen Greear 37342935ecaSLuis R. Rodriguez ieee80211_queue_delayed_work(&local->hw, 37442935ecaSLuis R. Rodriguez &local->scan_work, 375f3b85252SJohannes Berg IEEE80211_CHANNEL_TIME); 376f3b85252SJohannes Berg 377f3b85252SJohannes Berg return 0; 378f3b85252SJohannes Berg } 379f3b85252SJohannes Berg 380f3b85252SJohannes Berg 381f3b85252SJohannes Berg static int __ieee80211_start_scan(struct ieee80211_sub_if_data *sdata, 382f3b85252SJohannes Berg struct cfg80211_scan_request *req) 383f3b85252SJohannes Berg { 384f3b85252SJohannes Berg struct ieee80211_local *local = sdata->local; 385f3b85252SJohannes Berg int rc; 386f3b85252SJohannes Berg 387e229f844SStanislaw Gruszka lockdep_assert_held(&local->mtx); 388e229f844SStanislaw Gruszka 389f3b85252SJohannes Berg if (local->scan_req) 390f3b85252SJohannes Berg return -EBUSY; 391f3b85252SJohannes Berg 3926e7e6213SJohn W. Linville if (!list_empty(&local->work_list)) { 3936e7e6213SJohn W. Linville /* wait for the work to finish/time out */ 394c0ce77b8SJohannes Berg local->scan_req = req; 395c0ce77b8SJohannes Berg local->scan_sdata = sdata; 396c0ce77b8SJohannes Berg return 0; 397c0ce77b8SJohannes Berg } 398c0ce77b8SJohannes Berg 399f3b85252SJohannes Berg if (local->ops->hw_scan) { 400f3b85252SJohannes Berg u8 *ies; 401f3b85252SJohannes Berg 4024d36ec58SJohannes Berg local->hw_scan_req = kmalloc( 4034d36ec58SJohannes Berg sizeof(*local->hw_scan_req) + 4044d36ec58SJohannes Berg req->n_channels * sizeof(req->channels[0]) + 4054d36ec58SJohannes Berg 2 + IEEE80211_MAX_SSID_LEN + local->scan_ies_len + 4064d36ec58SJohannes Berg req->ie_len, GFP_KERNEL); 4074d36ec58SJohannes Berg if (!local->hw_scan_req) 408f3b85252SJohannes Berg return -ENOMEM; 409f3b85252SJohannes Berg 4104d36ec58SJohannes Berg local->hw_scan_req->ssids = req->ssids; 4114d36ec58SJohannes Berg local->hw_scan_req->n_ssids = req->n_ssids; 4124d36ec58SJohannes Berg ies = (u8 *)local->hw_scan_req + 4134d36ec58SJohannes Berg sizeof(*local->hw_scan_req) + 4144d36ec58SJohannes Berg req->n_channels * sizeof(req->channels[0]); 4154d36ec58SJohannes Berg local->hw_scan_req->ie = ies; 4164d36ec58SJohannes Berg 4174d36ec58SJohannes Berg local->hw_scan_band = 0; 4186e7e6213SJohn W. Linville 4196e7e6213SJohn W. Linville /* 4206e7e6213SJohn W. Linville * After allocating local->hw_scan_req, we must 4216e7e6213SJohn W. Linville * go through until ieee80211_prep_hw_scan(), so 4226e7e6213SJohn W. Linville * anything that might be changed here and leave 4236e7e6213SJohn W. Linville * this function early must not go after this 4246e7e6213SJohn W. Linville * allocation. 4256e7e6213SJohn W. Linville */ 426f3b85252SJohannes Berg } 427f3b85252SJohannes Berg 428f3b85252SJohannes Berg local->scan_req = req; 429f3b85252SJohannes Berg local->scan_sdata = sdata; 430f3b85252SJohannes Berg 431f3b85252SJohannes Berg if (local->ops->hw_scan) 432fbe9c429SHelmut Schaa __set_bit(SCAN_HW_SCANNING, &local->scanning); 433f3b85252SJohannes Berg else 434fbe9c429SHelmut Schaa __set_bit(SCAN_SW_SCANNING, &local->scanning); 4356e7e6213SJohn W. Linville 4365cff20e6SJohannes Berg ieee80211_recalc_idle(local); 437f3b85252SJohannes Berg 4384d36ec58SJohannes Berg if (local->ops->hw_scan) { 4394d36ec58SJohannes Berg WARN_ON(!ieee80211_prep_hw_scan(local)); 440a060bbfeSJohannes Berg rc = drv_hw_scan(local, sdata, local->hw_scan_req); 4414d36ec58SJohannes Berg } else 442f3b85252SJohannes Berg rc = ieee80211_start_sw_scan(local); 443f3b85252SJohannes Berg 444f3b85252SJohannes Berg if (rc) { 4454d36ec58SJohannes Berg kfree(local->hw_scan_req); 4464d36ec58SJohannes Berg local->hw_scan_req = NULL; 447fbe9c429SHelmut Schaa local->scanning = 0; 448f3b85252SJohannes Berg 4495cff20e6SJohannes Berg ieee80211_recalc_idle(local); 4505cff20e6SJohannes Berg 451f3b85252SJohannes Berg local->scan_req = NULL; 452f3b85252SJohannes Berg local->scan_sdata = NULL; 453f3b85252SJohannes Berg } 454f3b85252SJohannes Berg 455f3b85252SJohannes Berg return rc; 456f3b85252SJohannes Berg } 457f3b85252SJohannes Berg 458df13cce5SHelmut Schaa static unsigned long 459df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(struct ieee80211_channel *chan) 460df13cce5SHelmut Schaa { 461df13cce5SHelmut Schaa /* 462df13cce5SHelmut Schaa * TODO: channel switching also consumes quite some time, 463df13cce5SHelmut Schaa * add that delay as well to get a better estimation 464df13cce5SHelmut Schaa */ 465df13cce5SHelmut Schaa if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) 466df13cce5SHelmut Schaa return IEEE80211_PASSIVE_CHANNEL_TIME; 467df13cce5SHelmut Schaa return IEEE80211_PROBE_DELAY + IEEE80211_CHANNEL_TIME; 468df13cce5SHelmut Schaa } 469df13cce5SHelmut Schaa 470e229f844SStanislaw Gruszka static void ieee80211_scan_state_decision(struct ieee80211_local *local, 4712fb3f028SHelmut Schaa unsigned long *next_delay) 4722fb3f028SHelmut Schaa { 473142b9f50SHelmut Schaa bool associated = false; 474df13cce5SHelmut Schaa bool tx_empty = true; 475df13cce5SHelmut Schaa bool bad_latency; 476df13cce5SHelmut Schaa bool listen_int_exceeded; 477df13cce5SHelmut Schaa unsigned long min_beacon_int = 0; 478142b9f50SHelmut Schaa struct ieee80211_sub_if_data *sdata; 479df13cce5SHelmut Schaa struct ieee80211_channel *next_chan; 480142b9f50SHelmut Schaa 481df13cce5SHelmut Schaa /* 482df13cce5SHelmut Schaa * check if at least one STA interface is associated, 483df13cce5SHelmut Schaa * check if at least one STA interface has pending tx frames 484df13cce5SHelmut Schaa * and grab the lowest used beacon interval 485df13cce5SHelmut Schaa */ 486142b9f50SHelmut Schaa mutex_lock(&local->iflist_mtx); 487142b9f50SHelmut Schaa list_for_each_entry(sdata, &local->interfaces, list) { 4889607e6b6SJohannes Berg if (!ieee80211_sdata_running(sdata)) 489142b9f50SHelmut Schaa continue; 490142b9f50SHelmut Schaa 491142b9f50SHelmut Schaa if (sdata->vif.type == NL80211_IFTYPE_STATION) { 492142b9f50SHelmut Schaa if (sdata->u.mgd.associated) { 493142b9f50SHelmut Schaa associated = true; 494df13cce5SHelmut Schaa 495df13cce5SHelmut Schaa if (sdata->vif.bss_conf.beacon_int < 496df13cce5SHelmut Schaa min_beacon_int || min_beacon_int == 0) 497df13cce5SHelmut Schaa min_beacon_int = 498df13cce5SHelmut Schaa sdata->vif.bss_conf.beacon_int; 499df13cce5SHelmut Schaa 500df13cce5SHelmut Schaa if (!qdisc_all_tx_empty(sdata->dev)) { 501df13cce5SHelmut Schaa tx_empty = false; 502142b9f50SHelmut Schaa break; 503142b9f50SHelmut Schaa } 504142b9f50SHelmut Schaa } 505142b9f50SHelmut Schaa } 506df13cce5SHelmut Schaa } 507142b9f50SHelmut Schaa mutex_unlock(&local->iflist_mtx); 508142b9f50SHelmut Schaa 509b23b025fSBen Greear next_chan = local->scan_req->channels[local->scan_channel_idx]; 510b23b025fSBen Greear 511b23b025fSBen Greear if (ieee80211_cfg_on_oper_channel(local)) { 512b23b025fSBen Greear /* We're currently on operating channel. */ 5134f2e9d91SBen Greear if (next_chan == local->oper_channel) 514b23b025fSBen Greear /* We don't need to move off of operating channel. */ 515b23b025fSBen Greear local->next_scan_state = SCAN_SET_CHANNEL; 516b23b025fSBen Greear else 517b23b025fSBen Greear /* 518b23b025fSBen Greear * We do need to leave operating channel, as next 519b23b025fSBen Greear * scan is somewhere else. 520b23b025fSBen Greear */ 521b23b025fSBen Greear local->next_scan_state = SCAN_LEAVE_OPER_CHANNEL; 522b23b025fSBen Greear } else { 523142b9f50SHelmut Schaa /* 524142b9f50SHelmut Schaa * we're currently scanning a different channel, let's 525df13cce5SHelmut Schaa * see if we can scan another channel without interfering 526df13cce5SHelmut Schaa * with the current traffic situation. 527df13cce5SHelmut Schaa * 528df13cce5SHelmut Schaa * Since we don't know if the AP has pending frames for us 529df13cce5SHelmut Schaa * we can only check for our tx queues and use the current 530df13cce5SHelmut Schaa * pm_qos requirements for rx. Hence, if no tx traffic occurs 531df13cce5SHelmut Schaa * at all we will scan as many channels in a row as the pm_qos 532df13cce5SHelmut Schaa * latency allows us to. Additionally we also check for the 533df13cce5SHelmut Schaa * currently negotiated listen interval to prevent losing 534df13cce5SHelmut Schaa * frames unnecessarily. 535df13cce5SHelmut Schaa * 536df13cce5SHelmut Schaa * Otherwise switch back to the operating channel. 537142b9f50SHelmut Schaa */ 538df13cce5SHelmut Schaa 539df13cce5SHelmut Schaa bad_latency = time_after(jiffies + 540df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(next_chan), 541df13cce5SHelmut Schaa local->leave_oper_channel_time + 542f8965467SLinus Torvalds usecs_to_jiffies(pm_qos_request(PM_QOS_NETWORK_LATENCY))); 543df13cce5SHelmut Schaa 544df13cce5SHelmut Schaa listen_int_exceeded = time_after(jiffies + 545df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(next_chan), 546df13cce5SHelmut Schaa local->leave_oper_channel_time + 547df13cce5SHelmut Schaa usecs_to_jiffies(min_beacon_int * 1024) * 548df13cce5SHelmut Schaa local->hw.conf.listen_interval); 549df13cce5SHelmut Schaa 550df13cce5SHelmut Schaa if (associated && ( !tx_empty || bad_latency || 551df13cce5SHelmut Schaa listen_int_exceeded)) 552977923b0SHelmut Schaa local->next_scan_state = SCAN_ENTER_OPER_CHANNEL; 553142b9f50SHelmut Schaa else 554977923b0SHelmut Schaa local->next_scan_state = SCAN_SET_CHANNEL; 555142b9f50SHelmut Schaa } 556142b9f50SHelmut Schaa 557142b9f50SHelmut Schaa *next_delay = 0; 5582fb3f028SHelmut Schaa } 5592fb3f028SHelmut Schaa 560142b9f50SHelmut Schaa static void ieee80211_scan_state_leave_oper_channel(struct ieee80211_local *local, 561142b9f50SHelmut Schaa unsigned long *next_delay) 562142b9f50SHelmut Schaa { 563b23b025fSBen Greear /* PS will already be in off-channel mode, 564b23b025fSBen Greear * we do that once at the beginning of scanning. 565b23b025fSBen Greear */ 566b23b025fSBen Greear ieee80211_offchannel_stop_vifs(local, false); 567142b9f50SHelmut Schaa 568a80f7c0bSJohannes Berg /* 569a80f7c0bSJohannes Berg * What if the nullfunc frames didn't arrive? 570a80f7c0bSJohannes Berg */ 571a80f7c0bSJohannes Berg drv_flush(local, false); 572a80f7c0bSJohannes Berg if (local->ops->flush) 573a80f7c0bSJohannes Berg *next_delay = 0; 574a80f7c0bSJohannes Berg else 575142b9f50SHelmut Schaa *next_delay = HZ / 10; 576a80f7c0bSJohannes Berg 577df13cce5SHelmut Schaa /* remember when we left the operating channel */ 578df13cce5SHelmut Schaa local->leave_oper_channel_time = jiffies; 579df13cce5SHelmut Schaa 580a80f7c0bSJohannes Berg /* advance to the next channel to be scanned */ 581977923b0SHelmut Schaa local->next_scan_state = SCAN_SET_CHANNEL; 582142b9f50SHelmut Schaa } 583142b9f50SHelmut Schaa 584142b9f50SHelmut Schaa static void ieee80211_scan_state_enter_oper_channel(struct ieee80211_local *local, 585142b9f50SHelmut Schaa unsigned long *next_delay) 586142b9f50SHelmut Schaa { 587142b9f50SHelmut Schaa /* switch back to the operating channel */ 588142b9f50SHelmut Schaa local->scan_channel = NULL; 589b23b025fSBen Greear if (!ieee80211_cfg_on_oper_channel(local)) 590142b9f50SHelmut Schaa ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL); 591142b9f50SHelmut Schaa 592142b9f50SHelmut Schaa /* 593b23b025fSBen Greear * Re-enable vifs and beaconing. Leave PS 594b23b025fSBen Greear * in off-channel state..will put that back 595b23b025fSBen Greear * on-channel at the end of scanning. 596142b9f50SHelmut Schaa */ 597b23b025fSBen Greear ieee80211_offchannel_return(local, true, false); 598142b9f50SHelmut Schaa 599142b9f50SHelmut Schaa *next_delay = HZ / 5; 600977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 601142b9f50SHelmut Schaa } 602142b9f50SHelmut Schaa 6032fb3f028SHelmut Schaa static void ieee80211_scan_state_set_channel(struct ieee80211_local *local, 6047d3be3ccSHelmut Schaa unsigned long *next_delay) 6057d3be3ccSHelmut Schaa { 6067d3be3ccSHelmut Schaa int skip; 6077d3be3ccSHelmut Schaa struct ieee80211_channel *chan; 6087d3be3ccSHelmut Schaa 6097d3be3ccSHelmut Schaa skip = 0; 6107d3be3ccSHelmut Schaa chan = local->scan_req->channels[local->scan_channel_idx]; 6117d3be3ccSHelmut Schaa 6127d3be3ccSHelmut Schaa local->scan_channel = chan; 613b23b025fSBen Greear 614b23b025fSBen Greear /* Only call hw-config if we really need to change channels. */ 6154f2e9d91SBen Greear if (chan != local->hw.conf.channel) 616584991dcSJohannes Berg if (ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL)) 6177d3be3ccSHelmut Schaa skip = 1; 6187d3be3ccSHelmut Schaa 6197d3be3ccSHelmut Schaa /* advance state machine to next channel/band */ 6207d3be3ccSHelmut Schaa local->scan_channel_idx++; 6217d3be3ccSHelmut Schaa 6220ee9c13cSHelmut Schaa if (skip) { 6230ee9c13cSHelmut Schaa /* if we skip this channel return to the decision state */ 6240ee9c13cSHelmut Schaa local->next_scan_state = SCAN_DECISION; 6252fb3f028SHelmut Schaa return; 6260ee9c13cSHelmut Schaa } 6277d3be3ccSHelmut Schaa 6287d3be3ccSHelmut Schaa /* 6297d3be3ccSHelmut Schaa * Probe delay is used to update the NAV, cf. 11.1.3.2.2 6307d3be3ccSHelmut Schaa * (which unfortunately doesn't say _why_ step a) is done, 6317d3be3ccSHelmut Schaa * but it waits for the probe delay or until a frame is 6327d3be3ccSHelmut Schaa * received - and the received frame would update the NAV). 6337d3be3ccSHelmut Schaa * For now, we do not support waiting until a frame is 6347d3be3ccSHelmut Schaa * received. 6357d3be3ccSHelmut Schaa * 6367d3be3ccSHelmut Schaa * In any case, it is not necessary for a passive scan. 6377d3be3ccSHelmut Schaa */ 6387d3be3ccSHelmut Schaa if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN || 6397d3be3ccSHelmut Schaa !local->scan_req->n_ssids) { 6407d3be3ccSHelmut Schaa *next_delay = IEEE80211_PASSIVE_CHANNEL_TIME; 641977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 6422fb3f028SHelmut Schaa return; 6437d3be3ccSHelmut Schaa } 6447d3be3ccSHelmut Schaa 6452fb3f028SHelmut Schaa /* active scan, send probes */ 6467d3be3ccSHelmut Schaa *next_delay = IEEE80211_PROBE_DELAY; 647977923b0SHelmut Schaa local->next_scan_state = SCAN_SEND_PROBE; 6487d3be3ccSHelmut Schaa } 6497d3be3ccSHelmut Schaa 6507d3be3ccSHelmut Schaa static void ieee80211_scan_state_send_probe(struct ieee80211_local *local, 6517d3be3ccSHelmut Schaa unsigned long *next_delay) 6527d3be3ccSHelmut Schaa { 6537d3be3ccSHelmut Schaa int i; 6547d3be3ccSHelmut Schaa struct ieee80211_sub_if_data *sdata = local->scan_sdata; 6557d3be3ccSHelmut Schaa 6567d3be3ccSHelmut Schaa for (i = 0; i < local->scan_req->n_ssids; i++) 6577d3be3ccSHelmut Schaa ieee80211_send_probe_req( 6587d3be3ccSHelmut Schaa sdata, NULL, 6597d3be3ccSHelmut Schaa local->scan_req->ssids[i].ssid, 6607d3be3ccSHelmut Schaa local->scan_req->ssids[i].ssid_len, 6617d3be3ccSHelmut Schaa local->scan_req->ie, local->scan_req->ie_len); 6627d3be3ccSHelmut Schaa 6637d3be3ccSHelmut Schaa /* 6647d3be3ccSHelmut Schaa * After sending probe requests, wait for probe responses 6657d3be3ccSHelmut Schaa * on the channel. 6667d3be3ccSHelmut Schaa */ 6677d3be3ccSHelmut Schaa *next_delay = IEEE80211_CHANNEL_TIME; 668977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 6697d3be3ccSHelmut Schaa } 6707d3be3ccSHelmut Schaa 671c2b13452SJohannes Berg void ieee80211_scan_work(struct work_struct *work) 6720a51b27eSJohannes Berg { 6730a51b27eSJohannes Berg struct ieee80211_local *local = 6740a51b27eSJohannes Berg container_of(work, struct ieee80211_local, scan_work.work); 675d07bfd8bSJohannes Berg struct ieee80211_sub_if_data *sdata; 6760a51b27eSJohannes Berg unsigned long next_delay = 0; 677d07bfd8bSJohannes Berg bool aborted, hw_scan; 6788789d459SJohannes Berg 679259b62e3SStanislaw Gruszka mutex_lock(&local->mtx); 680259b62e3SStanislaw Gruszka 681d07bfd8bSJohannes Berg sdata = local->scan_sdata; 682d07bfd8bSJohannes Berg 683259b62e3SStanislaw Gruszka if (test_and_clear_bit(SCAN_COMPLETED, &local->scanning)) { 6848789d459SJohannes Berg aborted = test_and_clear_bit(SCAN_ABORTED, &local->scanning); 685259b62e3SStanislaw Gruszka goto out_complete; 6868789d459SJohannes Berg } 6878789d459SJohannes Berg 688259b62e3SStanislaw Gruszka if (!sdata || !local->scan_req) 689259b62e3SStanislaw Gruszka goto out; 690f3b85252SJohannes Berg 691fbe9c429SHelmut Schaa if (local->scan_req && !local->scanning) { 692f3b85252SJohannes Berg struct cfg80211_scan_request *req = local->scan_req; 693f3b85252SJohannes Berg int rc; 694f3b85252SJohannes Berg 695f3b85252SJohannes Berg local->scan_req = NULL; 69615db0b7fSJohannes Berg local->scan_sdata = NULL; 697f3b85252SJohannes Berg 698f3b85252SJohannes Berg rc = __ieee80211_start_scan(sdata, req); 699259b62e3SStanislaw Gruszka if (rc) { 7003aed49efSStanislaw Gruszka /* need to complete scan in cfg80211 */ 7013aed49efSStanislaw Gruszka local->scan_req = req; 702259b62e3SStanislaw Gruszka aborted = true; 703259b62e3SStanislaw Gruszka goto out_complete; 704259b62e3SStanislaw Gruszka } else 705259b62e3SStanislaw Gruszka goto out; 706f3b85252SJohannes Berg } 707f3b85252SJohannes Berg 7085bc75728SJohannes Berg /* 7095bc75728SJohannes Berg * Avoid re-scheduling when the sdata is going away. 7105bc75728SJohannes Berg */ 7119607e6b6SJohannes Berg if (!ieee80211_sdata_running(sdata)) { 712259b62e3SStanislaw Gruszka aborted = true; 713259b62e3SStanislaw Gruszka goto out_complete; 714f3b85252SJohannes Berg } 7150a51b27eSJohannes Berg 716f502d09bSHelmut Schaa /* 717f502d09bSHelmut Schaa * as long as no delay is required advance immediately 718f502d09bSHelmut Schaa * without scheduling a new work 719f502d09bSHelmut Schaa */ 720f502d09bSHelmut Schaa do { 721977923b0SHelmut Schaa switch (local->next_scan_state) { 7222fb3f028SHelmut Schaa case SCAN_DECISION: 723e229f844SStanislaw Gruszka /* if no more bands/channels left, complete scan */ 724e229f844SStanislaw Gruszka if (local->scan_channel_idx >= local->scan_req->n_channels) { 725e229f844SStanislaw Gruszka aborted = false; 726e229f844SStanislaw Gruszka goto out_complete; 727e229f844SStanislaw Gruszka } 728e229f844SStanislaw Gruszka ieee80211_scan_state_decision(local, &next_delay); 7290a51b27eSJohannes Berg break; 7302fb3f028SHelmut Schaa case SCAN_SET_CHANNEL: 7312fb3f028SHelmut Schaa ieee80211_scan_state_set_channel(local, &next_delay); 7322fb3f028SHelmut Schaa break; 7330a51b27eSJohannes Berg case SCAN_SEND_PROBE: 7347d3be3ccSHelmut Schaa ieee80211_scan_state_send_probe(local, &next_delay); 7350a51b27eSJohannes Berg break; 736142b9f50SHelmut Schaa case SCAN_LEAVE_OPER_CHANNEL: 737142b9f50SHelmut Schaa ieee80211_scan_state_leave_oper_channel(local, &next_delay); 738142b9f50SHelmut Schaa break; 739142b9f50SHelmut Schaa case SCAN_ENTER_OPER_CHANNEL: 740142b9f50SHelmut Schaa ieee80211_scan_state_enter_oper_channel(local, &next_delay); 741142b9f50SHelmut Schaa break; 7420a51b27eSJohannes Berg } 743f502d09bSHelmut Schaa } while (next_delay == 0); 7440a51b27eSJohannes Berg 74542935ecaSLuis R. Rodriguez ieee80211_queue_delayed_work(&local->hw, &local->scan_work, next_delay); 746d07bfd8bSJohannes Berg goto out; 747259b62e3SStanislaw Gruszka 748259b62e3SStanislaw Gruszka out_complete: 749e229f844SStanislaw Gruszka hw_scan = test_bit(SCAN_HW_SCANNING, &local->scanning); 750d07bfd8bSJohannes Berg __ieee80211_scan_completed(&local->hw, aborted, hw_scan); 751259b62e3SStanislaw Gruszka out: 752259b62e3SStanislaw Gruszka mutex_unlock(&local->mtx); 7530a51b27eSJohannes Berg } 7540a51b27eSJohannes Berg 755c2b13452SJohannes Berg int ieee80211_request_scan(struct ieee80211_sub_if_data *sdata, 7562a519311SJohannes Berg struct cfg80211_scan_request *req) 7570a51b27eSJohannes Berg { 758f3b85252SJohannes Berg int res; 7590a51b27eSJohannes Berg 760a1699b75SJohannes Berg mutex_lock(&sdata->local->mtx); 761f3b85252SJohannes Berg res = __ieee80211_start_scan(sdata, req); 762a1699b75SJohannes Berg mutex_unlock(&sdata->local->mtx); 7632a519311SJohannes Berg 764f3b85252SJohannes Berg return res; 7650a51b27eSJohannes Berg } 7660a51b27eSJohannes Berg 767f3b85252SJohannes Berg int ieee80211_request_internal_scan(struct ieee80211_sub_if_data *sdata, 768be4a4b6aSJohannes Berg const u8 *ssid, u8 ssid_len, 769be4a4b6aSJohannes Berg struct ieee80211_channel *chan) 770f3b85252SJohannes Berg { 771f3b85252SJohannes Berg struct ieee80211_local *local = sdata->local; 772f3b85252SJohannes Berg int ret = -EBUSY; 773fb63bc41SGertjan van Wingerde enum ieee80211_band band; 7749116dd01SJohannes Berg 775a1699b75SJohannes Berg mutex_lock(&local->mtx); 776f3b85252SJohannes Berg 777f3b85252SJohannes Berg /* busy scanning */ 778f3b85252SJohannes Berg if (local->scan_req) 779f3b85252SJohannes Berg goto unlock; 780f3b85252SJohannes Berg 781be4a4b6aSJohannes Berg /* fill internal scan request */ 782be4a4b6aSJohannes Berg if (!chan) { 783be4a4b6aSJohannes Berg int i, nchan = 0; 784be4a4b6aSJohannes Berg 785be4a4b6aSJohannes Berg for (band = 0; band < IEEE80211_NUM_BANDS; band++) { 786be4a4b6aSJohannes Berg if (!local->hw.wiphy->bands[band]) 787be4a4b6aSJohannes Berg continue; 788be4a4b6aSJohannes Berg for (i = 0; 789be4a4b6aSJohannes Berg i < local->hw.wiphy->bands[band]->n_channels; 790be4a4b6aSJohannes Berg i++) { 791be4a4b6aSJohannes Berg local->int_scan_req->channels[nchan] = 792be4a4b6aSJohannes Berg &local->hw.wiphy->bands[band]->channels[i]; 793be4a4b6aSJohannes Berg nchan++; 794be4a4b6aSJohannes Berg } 795be4a4b6aSJohannes Berg } 796be4a4b6aSJohannes Berg 797be4a4b6aSJohannes Berg local->int_scan_req->n_channels = nchan; 798be4a4b6aSJohannes Berg } else { 799be4a4b6aSJohannes Berg local->int_scan_req->channels[0] = chan; 800be4a4b6aSJohannes Berg local->int_scan_req->n_channels = 1; 801be4a4b6aSJohannes Berg } 802be4a4b6aSJohannes Berg 803be4a4b6aSJohannes Berg local->int_scan_req->ssids = &local->scan_ssid; 804be4a4b6aSJohannes Berg local->int_scan_req->n_ssids = 1; 8055ba63533SJohannes Berg memcpy(local->int_scan_req->ssids[0].ssid, ssid, IEEE80211_MAX_SSID_LEN); 8065ba63533SJohannes Berg local->int_scan_req->ssids[0].ssid_len = ssid_len; 807f3b85252SJohannes Berg 8085ba63533SJohannes Berg ret = __ieee80211_start_scan(sdata, sdata->local->int_scan_req); 809f3b85252SJohannes Berg unlock: 810a1699b75SJohannes Berg mutex_unlock(&local->mtx); 811f3b85252SJohannes Berg return ret; 8120a51b27eSJohannes Berg } 8135bb644a0SJohannes Berg 8144136c422SStanislaw Gruszka /* 8154136c422SStanislaw Gruszka * Only call this function when a scan can't be queued -- under RTNL. 8164136c422SStanislaw Gruszka */ 8175bb644a0SJohannes Berg void ieee80211_scan_cancel(struct ieee80211_local *local) 8185bb644a0SJohannes Berg { 819494486f8SJohn W. Linville bool abortscan; 8205bb644a0SJohannes Berg 8215bb644a0SJohannes Berg /* 8224136c422SStanislaw Gruszka * We are only canceling software scan, or deferred scan that was not 8234136c422SStanislaw Gruszka * yet really started (see __ieee80211_start_scan ). 8244136c422SStanislaw Gruszka * 8254136c422SStanislaw Gruszka * Regarding hardware scan: 8264136c422SStanislaw Gruszka * - we can not call __ieee80211_scan_completed() as when 8274136c422SStanislaw Gruszka * SCAN_HW_SCANNING bit is set this function change 8284136c422SStanislaw Gruszka * local->hw_scan_req to operate on 5G band, what race with 8294136c422SStanislaw Gruszka * driver which can use local->hw_scan_req 8304136c422SStanislaw Gruszka * 8314136c422SStanislaw Gruszka * - we can not cancel scan_work since driver can schedule it 8324136c422SStanislaw Gruszka * by ieee80211_scan_completed(..., true) to finish scan 8334136c422SStanislaw Gruszka * 8344136c422SStanislaw Gruszka * Hence low lever driver is responsible for canceling HW scan. 8355bb644a0SJohannes Berg */ 8364136c422SStanislaw Gruszka 837a1699b75SJohannes Berg mutex_lock(&local->mtx); 8384136c422SStanislaw Gruszka abortscan = local->scan_req && !test_bit(SCAN_HW_SCANNING, &local->scanning); 8394136c422SStanislaw Gruszka if (abortscan) { 840d07bfd8bSJohannes Berg /* 841d07bfd8bSJohannes Berg * The scan is canceled, but stop work from being pending. 842d07bfd8bSJohannes Berg * 843d07bfd8bSJohannes Berg * If the work is currently running, it must be blocked on 844d07bfd8bSJohannes Berg * the mutex, but we'll set scan_sdata = NULL and it'll 845d07bfd8bSJohannes Berg * simply exit once it acquires the mutex. 846d07bfd8bSJohannes Berg */ 847d07bfd8bSJohannes Berg cancel_delayed_work(&local->scan_work); 848d07bfd8bSJohannes Berg /* and clean up */ 849d07bfd8bSJohannes Berg __ieee80211_scan_completed(&local->hw, true, false); 850494486f8SJohn W. Linville } 851d07bfd8bSJohannes Berg mutex_unlock(&local->mtx); 8525bb644a0SJohannes Berg } 853