1d2912cb1SThomas Gleixner // SPDX-License-Identifier: GPL-2.0-only 20a51b27eSJohannes Berg /* 35484e237SJohannes Berg * Scanning implementation 45484e237SJohannes Berg * 50a51b27eSJohannes Berg * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi> 60a51b27eSJohannes Berg * Copyright 2004, Instant802 Networks, Inc. 70a51b27eSJohannes Berg * Copyright 2005, Devicescape Software, Inc. 80a51b27eSJohannes Berg * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 90a51b27eSJohannes Berg * Copyright 2007, Michael Wu <flamingice@sourmilk.net> 1074d803b6SSara Sharon * Copyright 2013-2015 Intel Mobile Communications GmbH 1140b0bd24SRoee Zamir * Copyright 2016-2017 Intel Deutschland GmbH 12c8cb5b85STova Mussai * Copyright (C) 2018-2020 Intel Corporation 130a51b27eSJohannes Berg */ 140a51b27eSJohannes Berg 150a51b27eSJohannes Berg #include <linux/if_arp.h> 16888d04dfSFelix Fietkau #include <linux/etherdevice.h> 17078e1e60SJohannes Berg #include <linux/rtnetlink.h> 18df13cce5SHelmut Schaa #include <net/sch_generic.h> 195a0e3ad6STejun Heo #include <linux/slab.h> 20bc3b2d7fSPaul Gortmaker #include <linux/export.h> 21b9771d41SJohannes Berg #include <linux/random.h> 220a51b27eSJohannes Berg #include <net/mac80211.h> 230a51b27eSJohannes Berg 240a51b27eSJohannes Berg #include "ieee80211_i.h" 2524487981SJohannes Berg #include "driver-ops.h" 265484e237SJohannes Berg #include "mesh.h" 270a51b27eSJohannes Berg 280a51b27eSJohannes Berg #define IEEE80211_PROBE_DELAY (HZ / 33) 290a51b27eSJohannes Berg #define IEEE80211_CHANNEL_TIME (HZ / 33) 303f892b61SStanislaw Gruszka #define IEEE80211_PASSIVE_CHANNEL_TIME (HZ / 9) 310a51b27eSJohannes Berg 325484e237SJohannes Berg void ieee80211_rx_bss_put(struct ieee80211_local *local, 33c2b13452SJohannes Berg struct ieee80211_bss *bss) 345484e237SJohannes Berg { 350c1ad2caSJohannes Berg if (!bss) 360c1ad2caSJohannes Berg return; 375b112d3dSJohannes Berg cfg80211_put_bss(local->hw.wiphy, 385b112d3dSJohannes Berg container_of((void *)bss, struct cfg80211_bss, priv)); 395484e237SJohannes Berg } 405484e237SJohannes Berg 41ab13315aSKalle Valo static bool is_uapsd_supported(struct ieee802_11_elems *elems) 42ab13315aSKalle Valo { 43ab13315aSKalle Valo u8 qos_info; 44ab13315aSKalle Valo 45ab13315aSKalle Valo if (elems->wmm_info && elems->wmm_info_len == 7 46ab13315aSKalle Valo && elems->wmm_info[5] == 1) 47ab13315aSKalle Valo qos_info = elems->wmm_info[6]; 48ab13315aSKalle Valo else if (elems->wmm_param && elems->wmm_param_len == 24 49ab13315aSKalle Valo && elems->wmm_param[5] == 1) 50ab13315aSKalle Valo qos_info = elems->wmm_param[6]; 51ab13315aSKalle Valo else 52ab13315aSKalle Valo /* no valid wmm information or parameter element found */ 53ab13315aSKalle Valo return false; 54ab13315aSKalle Valo 55ab13315aSKalle Valo return qos_info & IEEE80211_WMM_IE_AP_QOSINFO_UAPSD; 56ab13315aSKalle Valo } 57ab13315aSKalle Valo 58fcea7db5SSara Sharon static void 59fcea7db5SSara Sharon ieee80211_update_bss_from_elems(struct ieee80211_local *local, 60fcea7db5SSara Sharon struct ieee80211_bss *bss, 61fcea7db5SSara Sharon struct ieee802_11_elems *elems, 62fcea7db5SSara Sharon struct ieee80211_rx_status *rx_status, 63fcea7db5SSara Sharon bool beacon) 64fcea7db5SSara Sharon { 65fcea7db5SSara Sharon int clen, srlen; 66fcea7db5SSara Sharon 67fcea7db5SSara Sharon if (beacon) 68fcea7db5SSara Sharon bss->device_ts_beacon = rx_status->device_timestamp; 69fcea7db5SSara Sharon else 70fcea7db5SSara Sharon bss->device_ts_presp = rx_status->device_timestamp; 71fcea7db5SSara Sharon 72fcea7db5SSara Sharon if (elems->parse_error) { 73fcea7db5SSara Sharon if (beacon) 74fcea7db5SSara Sharon bss->corrupt_data |= IEEE80211_BSS_CORRUPT_BEACON; 75fcea7db5SSara Sharon else 76fcea7db5SSara Sharon bss->corrupt_data |= IEEE80211_BSS_CORRUPT_PROBE_RESP; 77fcea7db5SSara Sharon } else { 78fcea7db5SSara Sharon if (beacon) 79fcea7db5SSara Sharon bss->corrupt_data &= ~IEEE80211_BSS_CORRUPT_BEACON; 80fcea7db5SSara Sharon else 81fcea7db5SSara Sharon bss->corrupt_data &= ~IEEE80211_BSS_CORRUPT_PROBE_RESP; 82fcea7db5SSara Sharon } 83fcea7db5SSara Sharon 84fcea7db5SSara Sharon /* save the ERP value so that it is available at association time */ 85fcea7db5SSara Sharon if (elems->erp_info && (!elems->parse_error || 86fcea7db5SSara Sharon !(bss->valid_data & IEEE80211_BSS_VALID_ERP))) { 87fcea7db5SSara Sharon bss->erp_value = elems->erp_info[0]; 88fcea7db5SSara Sharon bss->has_erp_value = true; 89fcea7db5SSara Sharon if (!elems->parse_error) 90fcea7db5SSara Sharon bss->valid_data |= IEEE80211_BSS_VALID_ERP; 91fcea7db5SSara Sharon } 92fcea7db5SSara Sharon 93fcea7db5SSara Sharon /* replace old supported rates if we get new values */ 94fcea7db5SSara Sharon if (!elems->parse_error || 95fcea7db5SSara Sharon !(bss->valid_data & IEEE80211_BSS_VALID_RATES)) { 96fcea7db5SSara Sharon srlen = 0; 97fcea7db5SSara Sharon if (elems->supp_rates) { 98fcea7db5SSara Sharon clen = IEEE80211_MAX_SUPP_RATES; 99fcea7db5SSara Sharon if (clen > elems->supp_rates_len) 100fcea7db5SSara Sharon clen = elems->supp_rates_len; 101fcea7db5SSara Sharon memcpy(bss->supp_rates, elems->supp_rates, clen); 102fcea7db5SSara Sharon srlen += clen; 103fcea7db5SSara Sharon } 104fcea7db5SSara Sharon if (elems->ext_supp_rates) { 105fcea7db5SSara Sharon clen = IEEE80211_MAX_SUPP_RATES - srlen; 106fcea7db5SSara Sharon if (clen > elems->ext_supp_rates_len) 107fcea7db5SSara Sharon clen = elems->ext_supp_rates_len; 108fcea7db5SSara Sharon memcpy(bss->supp_rates + srlen, elems->ext_supp_rates, 109fcea7db5SSara Sharon clen); 110fcea7db5SSara Sharon srlen += clen; 111fcea7db5SSara Sharon } 112fcea7db5SSara Sharon if (srlen) { 113fcea7db5SSara Sharon bss->supp_rates_len = srlen; 114fcea7db5SSara Sharon if (!elems->parse_error) 115fcea7db5SSara Sharon bss->valid_data |= IEEE80211_BSS_VALID_RATES; 116fcea7db5SSara Sharon } 117fcea7db5SSara Sharon } 118fcea7db5SSara Sharon 119fcea7db5SSara Sharon if (!elems->parse_error || 120fcea7db5SSara Sharon !(bss->valid_data & IEEE80211_BSS_VALID_WMM)) { 121fcea7db5SSara Sharon bss->wmm_used = elems->wmm_param || elems->wmm_info; 122fcea7db5SSara Sharon bss->uapsd_supported = is_uapsd_supported(elems); 123fcea7db5SSara Sharon if (!elems->parse_error) 124fcea7db5SSara Sharon bss->valid_data |= IEEE80211_BSS_VALID_WMM; 125fcea7db5SSara Sharon } 126fcea7db5SSara Sharon 127fcea7db5SSara Sharon if (beacon) { 128fcea7db5SSara Sharon struct ieee80211_supported_band *sband = 129fcea7db5SSara Sharon local->hw.wiphy->bands[rx_status->band]; 130fcea7db5SSara Sharon if (!(rx_status->encoding == RX_ENC_HT) && 131fcea7db5SSara Sharon !(rx_status->encoding == RX_ENC_VHT)) 132fcea7db5SSara Sharon bss->beacon_rate = 133fcea7db5SSara Sharon &sband->bitrates[rx_status->rate_idx]; 134fcea7db5SSara Sharon } 1352a333a0dSJohannes Berg 1362a333a0dSJohannes Berg if (elems->vht_cap_elem) 1372a333a0dSJohannes Berg bss->vht_cap_info = 1382a333a0dSJohannes Berg le32_to_cpu(elems->vht_cap_elem->vht_cap_info); 1392a333a0dSJohannes Berg else 1402a333a0dSJohannes Berg bss->vht_cap_info = 0; 141fcea7db5SSara Sharon } 142fcea7db5SSara Sharon 143c2b13452SJohannes Berg struct ieee80211_bss * 1445484e237SJohannes Berg ieee80211_bss_info_update(struct ieee80211_local *local, 1455484e237SJohannes Berg struct ieee80211_rx_status *rx_status, 146d45c4172SEmmanuel Grumbach struct ieee80211_mgmt *mgmt, size_t len, 147d45c4172SEmmanuel Grumbach struct ieee80211_channel *channel) 1485484e237SJohannes Berg { 149d45c4172SEmmanuel Grumbach bool beacon = ieee80211_is_beacon(mgmt->frame_control); 15078ac51f8SSara Sharon struct cfg80211_bss *cbss, *non_tx_cbss; 15178ac51f8SSara Sharon struct ieee80211_bss *bss, *non_tx_bss; 152162dd6a7SJohannes Berg struct cfg80211_inform_bss bss_meta = { 153162dd6a7SJohannes Berg .boottime_ns = rx_status->boottime_ns, 154162dd6a7SJohannes Berg }; 15574d803b6SSara Sharon bool signal_valid; 1567947d3e0SAvraham Stern struct ieee80211_sub_if_data *scan_sdata; 1574abb52a4SSara Sharon struct ieee802_11_elems elems; 1584abb52a4SSara Sharon size_t baselen; 1594abb52a4SSara Sharon u8 *elements; 1602a519311SJohannes Berg 1611ad22fb5STosoni if (rx_status->flag & RX_FLAG_NO_SIGNAL_VAL) 1621ad22fb5STosoni bss_meta.signal = 0; /* invalid signal indication */ 1631ad22fb5STosoni else if (ieee80211_hw_check(&local->hw, SIGNAL_DBM)) 16461f6bba0SJohannes Berg bss_meta.signal = rx_status->signal * 100; 16530686bf7SJohannes Berg else if (ieee80211_hw_check(&local->hw, SIGNAL_UNSPEC)) 16661f6bba0SJohannes Berg bss_meta.signal = (rx_status->signal * 100) / local->hw.max_signal; 1672a519311SJohannes Berg 16861f6bba0SJohannes Berg bss_meta.scan_width = NL80211_BSS_CHAN_WIDTH_20; 169da6a4352SJohannes Berg if (rx_status->bw == RATE_INFO_BW_5) 17061f6bba0SJohannes Berg bss_meta.scan_width = NL80211_BSS_CHAN_WIDTH_5; 171da6a4352SJohannes Berg else if (rx_status->bw == RATE_INFO_BW_10) 17261f6bba0SJohannes Berg bss_meta.scan_width = NL80211_BSS_CHAN_WIDTH_10; 1737ca15a0aSSimon Wunderlich 17461f6bba0SJohannes Berg bss_meta.chan = channel; 1757947d3e0SAvraham Stern 1767947d3e0SAvraham Stern rcu_read_lock(); 1777947d3e0SAvraham Stern scan_sdata = rcu_dereference(local->scan_sdata); 1787947d3e0SAvraham Stern if (scan_sdata && scan_sdata->vif.type == NL80211_IFTYPE_STATION && 1797947d3e0SAvraham Stern scan_sdata->vif.bss_conf.assoc && 1807947d3e0SAvraham Stern ieee80211_have_rx_timestamp(rx_status)) { 1817947d3e0SAvraham Stern bss_meta.parent_tsf = 1827947d3e0SAvraham Stern ieee80211_calculate_rx_timestamp(local, rx_status, 1837947d3e0SAvraham Stern len + FCS_LEN, 24); 1847947d3e0SAvraham Stern ether_addr_copy(bss_meta.parent_bssid, 1857947d3e0SAvraham Stern scan_sdata->vif.bss_conf.bssid); 1867947d3e0SAvraham Stern } 1877947d3e0SAvraham Stern rcu_read_unlock(); 1887947d3e0SAvraham Stern 18961f6bba0SJohannes Berg cbss = cfg80211_inform_bss_frame_data(local->hw.wiphy, &bss_meta, 19061f6bba0SJohannes Berg mgmt, len, GFP_ATOMIC); 1910c1ad2caSJohannes Berg if (!cbss) 1925484e237SJohannes Berg return NULL; 1934abb52a4SSara Sharon 1944abb52a4SSara Sharon if (ieee80211_is_probe_resp(mgmt->frame_control)) { 1954abb52a4SSara Sharon elements = mgmt->u.probe_resp.variable; 1964abb52a4SSara Sharon baselen = offsetof(struct ieee80211_mgmt, 1974abb52a4SSara Sharon u.probe_resp.variable); 1984abb52a4SSara Sharon } else { 1994abb52a4SSara Sharon baselen = offsetof(struct ieee80211_mgmt, u.beacon.variable); 2004abb52a4SSara Sharon elements = mgmt->u.beacon.variable; 2014abb52a4SSara Sharon } 2024abb52a4SSara Sharon 2034abb52a4SSara Sharon if (baselen > len) 2044abb52a4SSara Sharon return NULL; 2054abb52a4SSara Sharon 2064abb52a4SSara Sharon ieee802_11_parse_elems(elements, len - baselen, false, &elems, 2074abb52a4SSara Sharon mgmt->bssid, cbss->bssid); 2084abb52a4SSara Sharon 20974d803b6SSara Sharon /* In case the signal is invalid update the status */ 2107bb106ebSEmmanuel Grumbach signal_valid = channel == cbss->channel; 21174d803b6SSara Sharon if (!signal_valid) 21274d803b6SSara Sharon rx_status->flag |= RX_FLAG_NO_SIGNAL_VAL; 21300d3f14cSJohannes Berg 2140c1ad2caSJohannes Berg bss = (void *)cbss->priv; 215fcea7db5SSara Sharon ieee80211_update_bss_from_elems(local, bss, &elems, rx_status, beacon); 216817cee76SAlexander Bondar 21778ac51f8SSara Sharon list_for_each_entry(non_tx_cbss, &cbss->nontrans_list, nontrans_list) { 21878ac51f8SSara Sharon non_tx_bss = (void *)non_tx_cbss->priv; 21978ac51f8SSara Sharon 22078ac51f8SSara Sharon ieee80211_update_bss_from_elems(local, non_tx_bss, &elems, 22178ac51f8SSara Sharon rx_status, beacon); 22278ac51f8SSara Sharon } 22378ac51f8SSara Sharon 2245484e237SJohannes Berg return bss; 2255484e237SJohannes Berg } 2260a51b27eSJohannes Berg 22740b0bd24SRoee Zamir static bool ieee80211_scan_accept_presp(struct ieee80211_sub_if_data *sdata, 22840b0bd24SRoee Zamir u32 scan_flags, const u8 *da) 22940b0bd24SRoee Zamir { 23040b0bd24SRoee Zamir if (!sdata) 23140b0bd24SRoee Zamir return false; 23240b0bd24SRoee Zamir /* accept broadcast for OCE */ 23340b0bd24SRoee Zamir if (scan_flags & NL80211_SCAN_FLAG_ACCEPT_BCAST_PROBE_RESP && 23440b0bd24SRoee Zamir is_broadcast_ether_addr(da)) 23540b0bd24SRoee Zamir return true; 23640b0bd24SRoee Zamir if (scan_flags & NL80211_SCAN_FLAG_RANDOM_ADDR) 23740b0bd24SRoee Zamir return true; 23840b0bd24SRoee Zamir return ether_addr_equal(da, sdata->vif.addr); 23940b0bd24SRoee Zamir } 24040b0bd24SRoee Zamir 241d48b2968SJohannes Berg void ieee80211_scan_rx(struct ieee80211_local *local, struct sk_buff *skb) 24298c8fccfSJohannes Berg { 243f1d58c25SJohannes Berg struct ieee80211_rx_status *rx_status = IEEE80211_SKB_RXCB(skb); 244d48b2968SJohannes Berg struct ieee80211_sub_if_data *sdata1, *sdata2; 245d48b2968SJohannes Berg struct ieee80211_mgmt *mgmt = (void *)skb->data; 246c2b13452SJohannes Berg struct ieee80211_bss *bss; 24798c8fccfSJohannes Berg struct ieee80211_channel *channel; 24898c8fccfSJohannes Berg 249d48b2968SJohannes Berg if (skb->len < 24 || 250d48b2968SJohannes Berg (!ieee80211_is_probe_resp(mgmt->frame_control) && 251d48b2968SJohannes Berg !ieee80211_is_beacon(mgmt->frame_control))) 252d48b2968SJohannes Berg return; 25398c8fccfSJohannes Berg 254d48b2968SJohannes Berg sdata1 = rcu_dereference(local->scan_sdata); 255d48b2968SJohannes Berg sdata2 = rcu_dereference(local->sched_scan_sdata); 25698c8fccfSJohannes Berg 257d48b2968SJohannes Berg if (likely(!sdata1 && !sdata2)) 258d48b2968SJohannes Berg return; 25998c8fccfSJohannes Berg 260d48b2968SJohannes Berg if (ieee80211_is_probe_resp(mgmt->frame_control)) { 261a344d677SJohannes Berg struct cfg80211_scan_request *scan_req; 262a344d677SJohannes Berg struct cfg80211_sched_scan_request *sched_scan_req; 26340b0bd24SRoee Zamir u32 scan_req_flags = 0, sched_scan_req_flags = 0; 264a344d677SJohannes Berg 265a344d677SJohannes Berg scan_req = rcu_dereference(local->scan_req); 266a344d677SJohannes Berg sched_scan_req = rcu_dereference(local->sched_scan_req); 267a344d677SJohannes Berg 26840b0bd24SRoee Zamir if (scan_req) 26940b0bd24SRoee Zamir scan_req_flags = scan_req->flags; 27040b0bd24SRoee Zamir 27140b0bd24SRoee Zamir if (sched_scan_req) 27240b0bd24SRoee Zamir sched_scan_req_flags = sched_scan_req->flags; 27340b0bd24SRoee Zamir 27440b0bd24SRoee Zamir /* ignore ProbeResp to foreign address or non-bcast (OCE) 27540b0bd24SRoee Zamir * unless scanning with randomised address 276a344d677SJohannes Berg */ 27740b0bd24SRoee Zamir if (!ieee80211_scan_accept_presp(sdata1, scan_req_flags, 27840b0bd24SRoee Zamir mgmt->da) && 27940b0bd24SRoee Zamir !ieee80211_scan_accept_presp(sdata2, sched_scan_req_flags, 28040b0bd24SRoee Zamir mgmt->da)) 281d48b2968SJohannes Berg return; 28298c8fccfSJohannes Berg } 28398c8fccfSJohannes Berg 2843b23c184SThomas Pedersen channel = ieee80211_get_channel_khz(local->hw.wiphy, 2853b23c184SThomas Pedersen ieee80211_rx_status_to_khz(rx_status)); 28698c8fccfSJohannes Berg 28798c8fccfSJohannes Berg if (!channel || channel->flags & IEEE80211_CHAN_DISABLED) 288d48b2968SJohannes Berg return; 28998c8fccfSJohannes Berg 290d48b2968SJohannes Berg bss = ieee80211_bss_info_update(local, rx_status, 2914abb52a4SSara Sharon mgmt, skb->len, 292d45c4172SEmmanuel Grumbach channel); 293d048e503SJouni Malinen if (bss) 294d48b2968SJohannes Berg ieee80211_rx_bss_put(local, bss); 29598c8fccfSJohannes Berg } 29698c8fccfSJohannes Berg 2972103dec1SSimon Wunderlich static void 2982103dec1SSimon Wunderlich ieee80211_prepare_scan_chandef(struct cfg80211_chan_def *chandef, 2992103dec1SSimon Wunderlich enum nl80211_bss_scan_width scan_width) 3002103dec1SSimon Wunderlich { 3012103dec1SSimon Wunderlich memset(chandef, 0, sizeof(*chandef)); 3022103dec1SSimon Wunderlich switch (scan_width) { 3032103dec1SSimon Wunderlich case NL80211_BSS_CHAN_WIDTH_5: 3042103dec1SSimon Wunderlich chandef->width = NL80211_CHAN_WIDTH_5; 3052103dec1SSimon Wunderlich break; 3062103dec1SSimon Wunderlich case NL80211_BSS_CHAN_WIDTH_10: 3072103dec1SSimon Wunderlich chandef->width = NL80211_CHAN_WIDTH_10; 3082103dec1SSimon Wunderlich break; 3092103dec1SSimon Wunderlich default: 3102103dec1SSimon Wunderlich chandef->width = NL80211_CHAN_WIDTH_20_NOHT; 3112103dec1SSimon Wunderlich break; 3122103dec1SSimon Wunderlich } 3132103dec1SSimon Wunderlich } 3142103dec1SSimon Wunderlich 3154d36ec58SJohannes Berg /* return false if no more work */ 3162ad2274cSIlan Peer static bool ieee80211_prep_hw_scan(struct ieee80211_sub_if_data *sdata) 3174d36ec58SJohannes Berg { 3182ad2274cSIlan Peer struct ieee80211_local *local = sdata->local; 3196ea0a69cSJohannes Berg struct cfg80211_scan_request *req; 3202103dec1SSimon Wunderlich struct cfg80211_chan_def chandef; 321c56ef672SDavid Spinadel u8 bands_used = 0; 3224d36ec58SJohannes Berg int i, ielen, n_chans; 323b9771d41SJohannes Berg u32 flags = 0; 3244d36ec58SJohannes Berg 3256ea0a69cSJohannes Berg req = rcu_dereference_protected(local->scan_req, 3266ea0a69cSJohannes Berg lockdep_is_held(&local->mtx)); 3276ea0a69cSJohannes Berg 328a754055aSEmmanuel Grumbach if (test_bit(SCAN_HW_CANCELLED, &local->scanning)) 329a754055aSEmmanuel Grumbach return false; 330a754055aSEmmanuel Grumbach 33130686bf7SJohannes Berg if (ieee80211_hw_check(&local->hw, SINGLE_SCAN_ON_ALL_BANDS)) { 332c56ef672SDavid Spinadel for (i = 0; i < req->n_channels; i++) { 333c56ef672SDavid Spinadel local->hw_scan_req->req.channels[i] = req->channels[i]; 334c56ef672SDavid Spinadel bands_used |= BIT(req->channels[i]->band); 335c56ef672SDavid Spinadel } 336c56ef672SDavid Spinadel 337c56ef672SDavid Spinadel n_chans = req->n_channels; 338c56ef672SDavid Spinadel } else { 3394d36ec58SJohannes Berg do { 34057fbcce3SJohannes Berg if (local->hw_scan_band == NUM_NL80211_BANDS) 3414d36ec58SJohannes Berg return false; 3424d36ec58SJohannes Berg 3434d36ec58SJohannes Berg n_chans = 0; 344c56ef672SDavid Spinadel 3454d36ec58SJohannes Berg for (i = 0; i < req->n_channels; i++) { 346c56ef672SDavid Spinadel if (req->channels[i]->band != 347c56ef672SDavid Spinadel local->hw_scan_band) 348c56ef672SDavid Spinadel continue; 349c56ef672SDavid Spinadel local->hw_scan_req->req.channels[n_chans] = 3504d36ec58SJohannes Berg req->channels[i]; 3514d36ec58SJohannes Berg n_chans++; 352c56ef672SDavid Spinadel bands_used |= BIT(req->channels[i]->band); 3534d36ec58SJohannes Berg } 3544d36ec58SJohannes Berg 3554d36ec58SJohannes Berg local->hw_scan_band++; 3564d36ec58SJohannes Berg } while (!n_chans); 357c56ef672SDavid Spinadel } 3584d36ec58SJohannes Berg 359c56ef672SDavid Spinadel local->hw_scan_req->req.n_channels = n_chans; 3602103dec1SSimon Wunderlich ieee80211_prepare_scan_chandef(&chandef, req->scan_width); 3614d36ec58SJohannes Berg 362b9771d41SJohannes Berg if (req->flags & NL80211_SCAN_FLAG_MIN_PREQ_CONTENT) 363b9771d41SJohannes Berg flags |= IEEE80211_PROBE_FLAG_MIN_CONTENT; 364b9771d41SJohannes Berg 3652ad2274cSIlan Peer ielen = ieee80211_build_preq_ies(sdata, 366c56ef672SDavid Spinadel (u8 *)local->hw_scan_req->req.ie, 367c604b9f2SJohannes Berg local->hw_scan_ies_bufsize, 368c56ef672SDavid Spinadel &local->hw_scan_req->ies, 369c56ef672SDavid Spinadel req->ie, req->ie_len, 370b9771d41SJohannes Berg bands_used, req->rates, &chandef, 371b9771d41SJohannes Berg flags); 372c56ef672SDavid Spinadel local->hw_scan_req->req.ie_len = ielen; 373c56ef672SDavid Spinadel local->hw_scan_req->req.no_cck = req->no_cck; 374a344d677SJohannes Berg ether_addr_copy(local->hw_scan_req->req.mac_addr, req->mac_addr); 375a344d677SJohannes Berg ether_addr_copy(local->hw_scan_req->req.mac_addr_mask, 376a344d677SJohannes Berg req->mac_addr_mask); 377e345f44fSJouni Malinen ether_addr_copy(local->hw_scan_req->req.bssid, req->bssid); 3784d36ec58SJohannes Berg 3794d36ec58SJohannes Berg return true; 3804d36ec58SJohannes Berg } 3814d36ec58SJohannes Berg 3828bd2a248SEliad Peller static void __ieee80211_scan_completed(struct ieee80211_hw *hw, bool aborted) 383f3b85252SJohannes Berg { 384f3b85252SJohannes Berg struct ieee80211_local *local = hw_to_local(hw); 385e9da68ddSJohannes Berg bool hw_scan = test_bit(SCAN_HW_SCANNING, &local->scanning); 386a2b70e83SEliad Peller bool was_scanning = local->scanning; 3876ea0a69cSJohannes Berg struct cfg80211_scan_request *scan_req; 388a344d677SJohannes Berg struct ieee80211_sub_if_data *scan_sdata; 3894fa11ec7SSachin Kulkarni struct ieee80211_sub_if_data *sdata; 390f3b85252SJohannes Berg 391e229f844SStanislaw Gruszka lockdep_assert_held(&local->mtx); 392f3b85252SJohannes Berg 3936d3560d4SJohannes Berg /* 3946d3560d4SJohannes Berg * It's ok to abort a not-yet-running scan (that 3956d3560d4SJohannes Berg * we have one at all will be verified by checking 3966d3560d4SJohannes Berg * local->scan_req next), but not to complete it 3976d3560d4SJohannes Berg * successfully. 3986d3560d4SJohannes Berg */ 3996d3560d4SJohannes Berg if (WARN_ON(!local->scanning && !aborted)) 4006d3560d4SJohannes Berg aborted = true; 401f3b85252SJohannes Berg 402e229f844SStanislaw Gruszka if (WARN_ON(!local->scan_req)) 403d07bfd8bSJohannes Berg return; 404f3b85252SJohannes Berg 4052ad2274cSIlan Peer scan_sdata = rcu_dereference_protected(local->scan_sdata, 4062ad2274cSIlan Peer lockdep_is_held(&local->mtx)); 4072ad2274cSIlan Peer 408c56ef672SDavid Spinadel if (hw_scan && !aborted && 40930686bf7SJohannes Berg !ieee80211_hw_check(&local->hw, SINGLE_SCAN_ON_ALL_BANDS) && 4102ad2274cSIlan Peer ieee80211_prep_hw_scan(scan_sdata)) { 411e2fd5dbcSJohannes Berg int rc; 412e2fd5dbcSJohannes Berg 413e2fd5dbcSJohannes Berg rc = drv_hw_scan(local, 414e2fd5dbcSJohannes Berg rcu_dereference_protected(local->scan_sdata, 415e2fd5dbcSJohannes Berg lockdep_is_held(&local->mtx)), 416e2fd5dbcSJohannes Berg local->hw_scan_req); 417e2fd5dbcSJohannes Berg 4186eb11a9aSStanislaw Gruszka if (rc == 0) 419d07bfd8bSJohannes Berg return; 4207947d3e0SAvraham Stern 4217d10f6b1SJohannes Berg /* HW scan failed and is going to be reported as aborted, 4227d10f6b1SJohannes Berg * so clear old scan info. 4237947d3e0SAvraham Stern */ 4247947d3e0SAvraham Stern memset(&local->scan_info, 0, sizeof(local->scan_info)); 4257d10f6b1SJohannes Berg aborted = true; 4264d36ec58SJohannes Berg } 4274d36ec58SJohannes Berg 4284d36ec58SJohannes Berg kfree(local->hw_scan_req); 4294d36ec58SJohannes Berg local->hw_scan_req = NULL; 430f3b85252SJohannes Berg 4316ea0a69cSJohannes Berg scan_req = rcu_dereference_protected(local->scan_req, 4326ea0a69cSJohannes Berg lockdep_is_held(&local->mtx)); 4336ea0a69cSJohannes Berg 4341d76250bSAvraham Stern if (scan_req != local->int_scan_req) { 4357947d3e0SAvraham Stern local->scan_info.aborted = aborted; 4367947d3e0SAvraham Stern cfg80211_scan_done(scan_req, &local->scan_info); 4371d76250bSAvraham Stern } 4386ea0a69cSJohannes Berg RCU_INIT_POINTER(local->scan_req, NULL); 4390c2bef46SMonam Agarwal RCU_INIT_POINTER(local->scan_sdata, NULL); 4402a519311SJohannes Berg 441fbe9c429SHelmut Schaa local->scanning = 0; 4427ca15a0aSSimon Wunderlich local->scan_chandef.chan = NULL; 443f3b85252SJohannes Berg 44459bdf3b0SBen Greear /* Set power back to normal operating levels. */ 44559bdf3b0SBen Greear ieee80211_hw_config(local, 0); 446b23b025fSBen Greear 4478bd2a248SEliad Peller if (!hw_scan) { 448b23b025fSBen Greear ieee80211_configure_filter(local); 449a344d677SJohannes Berg drv_sw_scan_complete(local, scan_sdata); 450aacde9eeSStanislaw Gruszka ieee80211_offchannel_return(local); 451b23b025fSBen Greear } 452b23b025fSBen Greear 4535cff20e6SJohannes Berg ieee80211_recalc_idle(local); 454e229f844SStanislaw Gruszka 4550a51b27eSJohannes Berg ieee80211_mlme_notify_scan_completed(local); 45646900298SJohannes Berg ieee80211_ibss_notify_scan_completed(local); 4574fa11ec7SSachin Kulkarni 4584fa11ec7SSachin Kulkarni /* Requeue all the work that might have been ignored while 4594fa11ec7SSachin Kulkarni * the scan was in progress; if there was none this will 4604fa11ec7SSachin Kulkarni * just be a no-op for the particular interface. 4614fa11ec7SSachin Kulkarni */ 4624fa11ec7SSachin Kulkarni list_for_each_entry_rcu(sdata, &local->interfaces, list) { 4634fa11ec7SSachin Kulkarni if (ieee80211_sdata_running(sdata)) 4644fa11ec7SSachin Kulkarni ieee80211_queue_work(&sdata->local->hw, &sdata->work); 4654fa11ec7SSachin Kulkarni } 4664fa11ec7SSachin Kulkarni 467a2b70e83SEliad Peller if (was_scanning) 4682eb278e0SJohannes Berg ieee80211_start_next_roc(local); 4690a51b27eSJohannes Berg } 4708789d459SJohannes Berg 4717947d3e0SAvraham Stern void ieee80211_scan_completed(struct ieee80211_hw *hw, 4727947d3e0SAvraham Stern struct cfg80211_scan_info *info) 4738789d459SJohannes Berg { 4748789d459SJohannes Berg struct ieee80211_local *local = hw_to_local(hw); 4758789d459SJohannes Berg 47658bd7f11SJohannes Berg trace_api_scan_completed(local, info->aborted); 4778789d459SJohannes Berg 4788789d459SJohannes Berg set_bit(SCAN_COMPLETED, &local->scanning); 4797947d3e0SAvraham Stern if (info->aborted) 4808789d459SJohannes Berg set_bit(SCAN_ABORTED, &local->scanning); 4817947d3e0SAvraham Stern 4827947d3e0SAvraham Stern memcpy(&local->scan_info, info, sizeof(*info)); 4837947d3e0SAvraham Stern 4848789d459SJohannes Berg ieee80211_queue_delayed_work(&local->hw, &local->scan_work, 0); 4858789d459SJohannes Berg } 4860a51b27eSJohannes Berg EXPORT_SYMBOL(ieee80211_scan_completed); 4870a51b27eSJohannes Berg 488a344d677SJohannes Berg static int ieee80211_start_sw_scan(struct ieee80211_local *local, 489a344d677SJohannes Berg struct ieee80211_sub_if_data *sdata) 490f3b85252SJohannes Berg { 491fe57d9f5SJohannes Berg /* Software scan is not supported in multi-channel cases */ 492fe57d9f5SJohannes Berg if (local->use_chanctx) 493fe57d9f5SJohannes Berg return -EOPNOTSUPP; 494fe57d9f5SJohannes Berg 495f3b85252SJohannes Berg /* 496f3b85252SJohannes Berg * Hardware/driver doesn't support hw_scan, so use software 497f3b85252SJohannes Berg * scanning instead. First send a nullfunc frame with power save 498f3b85252SJohannes Berg * bit on so that AP will buffer the frames for us while we are not 499f3b85252SJohannes Berg * listening, then send probe requests to each channel and wait for 500f3b85252SJohannes Berg * the responses. After all channels are scanned, tune back to the 501f3b85252SJohannes Berg * original channel and send a nullfunc frame with power save bit 502f3b85252SJohannes Berg * off to trigger the AP to send us all the buffered frames. 503f3b85252SJohannes Berg * 504f3b85252SJohannes Berg * Note that while local->sw_scanning is true everything else but 505f3b85252SJohannes Berg * nullfunc frames and probe requests will be dropped in 506f3b85252SJohannes Berg * ieee80211_tx_h_check_assoc(). 507f3b85252SJohannes Berg */ 508a344d677SJohannes Berg drv_sw_scan_start(local, sdata, local->scan_addr); 509f3b85252SJohannes Berg 510de312db3SRajkumar Manoharan local->leave_oper_channel_time = jiffies; 511977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 512f3b85252SJohannes Berg local->scan_channel_idx = 0; 513f3b85252SJohannes Berg 514aacde9eeSStanislaw Gruszka ieee80211_offchannel_stop_vifs(local); 515a80f7c0bSJohannes Berg 5169c35d7d2SSeth Forshee /* ensure nullfunc is transmitted before leaving operating channel */ 5173b24f4c6SEmmanuel Grumbach ieee80211_flush_queues(local, NULL, false); 5189c35d7d2SSeth Forshee 5193ac64beeSJohannes Berg ieee80211_configure_filter(local); 520f3b85252SJohannes Berg 52159bdf3b0SBen Greear /* We need to set power level at maximum rate for scanning. */ 52259bdf3b0SBen Greear ieee80211_hw_config(local, 0); 52359bdf3b0SBen Greear 52442935ecaSLuis R. Rodriguez ieee80211_queue_delayed_work(&local->hw, 52507ef03eeSJohannes Berg &local->scan_work, 0); 526f3b85252SJohannes Berg 527f3b85252SJohannes Berg return 0; 528f3b85252SJohannes Berg } 529f3b85252SJohannes Berg 530dc0c18edSAaron Komisar static bool __ieee80211_can_leave_ch(struct ieee80211_sub_if_data *sdata) 531dc0c18edSAaron Komisar { 532dc0c18edSAaron Komisar struct ieee80211_local *local = sdata->local; 533dc0c18edSAaron Komisar struct ieee80211_sub_if_data *sdata_iter; 534dc0c18edSAaron Komisar 535dc0c18edSAaron Komisar if (!ieee80211_is_radar_required(local)) 536dc0c18edSAaron Komisar return true; 537dc0c18edSAaron Komisar 538dc0c18edSAaron Komisar if (!regulatory_pre_cac_allowed(local->hw.wiphy)) 539dc0c18edSAaron Komisar return false; 540dc0c18edSAaron Komisar 541dc0c18edSAaron Komisar mutex_lock(&local->iflist_mtx); 542dc0c18edSAaron Komisar list_for_each_entry(sdata_iter, &local->interfaces, list) { 543dc0c18edSAaron Komisar if (sdata_iter->wdev.cac_started) { 544dc0c18edSAaron Komisar mutex_unlock(&local->iflist_mtx); 545dc0c18edSAaron Komisar return false; 546dc0c18edSAaron Komisar } 547dc0c18edSAaron Komisar } 548dc0c18edSAaron Komisar mutex_unlock(&local->iflist_mtx); 549dc0c18edSAaron Komisar 550dc0c18edSAaron Komisar return true; 551dc0c18edSAaron Komisar } 552dc0c18edSAaron Komisar 553133d40f9SStanislaw Gruszka static bool ieee80211_can_scan(struct ieee80211_local *local, 554133d40f9SStanislaw Gruszka struct ieee80211_sub_if_data *sdata) 555133d40f9SStanislaw Gruszka { 556dc0c18edSAaron Komisar if (!__ieee80211_can_leave_ch(sdata)) 557164eb02dSSimon Wunderlich return false; 558164eb02dSSimon Wunderlich 5592eb278e0SJohannes Berg if (!list_empty(&local->roc_list)) 560133d40f9SStanislaw Gruszka return false; 561133d40f9SStanislaw Gruszka 562133d40f9SStanislaw Gruszka if (sdata->vif.type == NL80211_IFTYPE_STATION && 563392b9ffbSStanislaw Gruszka sdata->u.mgd.flags & IEEE80211_STA_CONNECTION_POLL) 564133d40f9SStanislaw Gruszka return false; 565133d40f9SStanislaw Gruszka 566133d40f9SStanislaw Gruszka return true; 567133d40f9SStanislaw Gruszka } 568133d40f9SStanislaw Gruszka 569133d40f9SStanislaw Gruszka void ieee80211_run_deferred_scan(struct ieee80211_local *local) 570133d40f9SStanislaw Gruszka { 571133d40f9SStanislaw Gruszka lockdep_assert_held(&local->mtx); 572133d40f9SStanislaw Gruszka 573133d40f9SStanislaw Gruszka if (!local->scan_req || local->scanning) 574133d40f9SStanislaw Gruszka return; 575133d40f9SStanislaw Gruszka 576e2fd5dbcSJohannes Berg if (!ieee80211_can_scan(local, 577e2fd5dbcSJohannes Berg rcu_dereference_protected( 578e2fd5dbcSJohannes Berg local->scan_sdata, 579e2fd5dbcSJohannes Berg lockdep_is_held(&local->mtx)))) 580133d40f9SStanislaw Gruszka return; 581133d40f9SStanislaw Gruszka 582133d40f9SStanislaw Gruszka ieee80211_queue_delayed_work(&local->hw, &local->scan_work, 583133d40f9SStanislaw Gruszka round_jiffies_relative(0)); 584133d40f9SStanislaw Gruszka } 585f3b85252SJohannes Berg 58645ad6834SJohannes Berg static void ieee80211_send_scan_probe_req(struct ieee80211_sub_if_data *sdata, 58745ad6834SJohannes Berg const u8 *src, const u8 *dst, 58845ad6834SJohannes Berg const u8 *ssid, size_t ssid_len, 58945ad6834SJohannes Berg const u8 *ie, size_t ie_len, 59045ad6834SJohannes Berg u32 ratemask, u32 flags, u32 tx_flags, 59145ad6834SJohannes Berg struct ieee80211_channel *channel) 59245ad6834SJohannes Berg { 59345ad6834SJohannes Berg struct sk_buff *skb; 59445ad6834SJohannes Berg 59545ad6834SJohannes Berg skb = ieee80211_build_probe_req(sdata, src, dst, ratemask, channel, 59645ad6834SJohannes Berg ssid, ssid_len, 59745ad6834SJohannes Berg ie, ie_len, flags); 598b9771d41SJohannes Berg 59945ad6834SJohannes Berg if (skb) { 600b9771d41SJohannes Berg if (flags & IEEE80211_PROBE_FLAG_RANDOM_SN) { 601b9771d41SJohannes Berg struct ieee80211_hdr *hdr = (void *)skb->data; 6022b3dab13SMathy Vanhoef struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 603b9771d41SJohannes Berg u16 sn = get_random_u32(); 604b9771d41SJohannes Berg 6052b3dab13SMathy Vanhoef info->control.flags |= IEEE80211_TX_CTRL_NO_SEQNO; 606b9771d41SJohannes Berg hdr->seq_ctrl = 607b9771d41SJohannes Berg cpu_to_le16(IEEE80211_SN_TO_SEQ(sn)); 608b9771d41SJohannes Berg } 60945ad6834SJohannes Berg IEEE80211_SKB_CB(skb)->flags |= tx_flags; 61008aca29aSMathy Vanhoef ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band); 61145ad6834SJohannes Berg } 61245ad6834SJohannes Berg } 61345ad6834SJohannes Berg 6148a690674SBen Greear static void ieee80211_scan_state_send_probe(struct ieee80211_local *local, 6158a690674SBen Greear unsigned long *next_delay) 6168a690674SBen Greear { 6178a690674SBen Greear int i; 618e2fd5dbcSJohannes Berg struct ieee80211_sub_if_data *sdata; 6196ea0a69cSJohannes Berg struct cfg80211_scan_request *scan_req; 62057fbcce3SJohannes Berg enum nl80211_band band = local->hw.conf.chandef.chan->band; 621b9771d41SJohannes Berg u32 flags = 0, tx_flags; 6226c17b77bSSeth Forshee 6236ea0a69cSJohannes Berg scan_req = rcu_dereference_protected(local->scan_req, 6246ea0a69cSJohannes Berg lockdep_is_held(&local->mtx)); 6256ea0a69cSJohannes Berg 6266c17b77bSSeth Forshee tx_flags = IEEE80211_TX_INTFL_OFFCHAN_TX_OK; 6276ea0a69cSJohannes Berg if (scan_req->no_cck) 6286c17b77bSSeth Forshee tx_flags |= IEEE80211_TX_CTL_NO_CCK_RATE; 629b9771d41SJohannes Berg if (scan_req->flags & NL80211_SCAN_FLAG_MIN_PREQ_CONTENT) 630b9771d41SJohannes Berg flags |= IEEE80211_PROBE_FLAG_MIN_CONTENT; 631b9771d41SJohannes Berg if (scan_req->flags & NL80211_SCAN_FLAG_RANDOM_SN) 632b9771d41SJohannes Berg flags |= IEEE80211_PROBE_FLAG_RANDOM_SN; 6338a690674SBen Greear 634e2fd5dbcSJohannes Berg sdata = rcu_dereference_protected(local->scan_sdata, 635316b6b5dSPeter Senna Tschudin lockdep_is_held(&local->mtx)); 636e2fd5dbcSJohannes Berg 6376ea0a69cSJohannes Berg for (i = 0; i < scan_req->n_ssids; i++) 63845ad6834SJohannes Berg ieee80211_send_scan_probe_req( 639e345f44fSJouni Malinen sdata, local->scan_addr, scan_req->bssid, 6406ea0a69cSJohannes Berg scan_req->ssids[i].ssid, scan_req->ssids[i].ssid_len, 6416ea0a69cSJohannes Berg scan_req->ie, scan_req->ie_len, 642b9771d41SJohannes Berg scan_req->rates[band], flags, 64345ad6834SJohannes Berg tx_flags, local->hw.conf.chandef.chan); 6448a690674SBen Greear 6458a690674SBen Greear /* 6468a690674SBen Greear * After sending probe requests, wait for probe responses 6478a690674SBen Greear * on the channel. 6488a690674SBen Greear */ 6498a690674SBen Greear *next_delay = IEEE80211_CHANNEL_TIME; 6508a690674SBen Greear local->next_scan_state = SCAN_DECISION; 6518a690674SBen Greear } 6528a690674SBen Greear 653f3b85252SJohannes Berg static int __ieee80211_start_scan(struct ieee80211_sub_if_data *sdata, 654f3b85252SJohannes Berg struct cfg80211_scan_request *req) 655f3b85252SJohannes Berg { 656f3b85252SJohannes Berg struct ieee80211_local *local = sdata->local; 657e9da68ddSJohannes Berg bool hw_scan = local->ops->hw_scan; 658f3b85252SJohannes Berg int rc; 659f3b85252SJohannes Berg 660e229f844SStanislaw Gruszka lockdep_assert_held(&local->mtx); 661e229f844SStanislaw Gruszka 662dc0c18edSAaron Komisar if (local->scan_req) 663dc0c18edSAaron Komisar return -EBUSY; 664dc0c18edSAaron Komisar 665dc0c18edSAaron Komisar if (!__ieee80211_can_leave_ch(sdata)) 666f3b85252SJohannes Berg return -EBUSY; 667f3b85252SJohannes Berg 668133d40f9SStanislaw Gruszka if (!ieee80211_can_scan(local, sdata)) { 6696e7e6213SJohn W. Linville /* wait for the work to finish/time out */ 6706ea0a69cSJohannes Berg rcu_assign_pointer(local->scan_req, req); 671e2fd5dbcSJohannes Berg rcu_assign_pointer(local->scan_sdata, sdata); 672c0ce77b8SJohannes Berg return 0; 673c0ce77b8SJohannes Berg } 674c0ce77b8SJohannes Berg 675e9da68ddSJohannes Berg again: 676e9da68ddSJohannes Berg if (hw_scan) { 677f3b85252SJohannes Berg u8 *ies; 678f3b85252SJohannes Berg 679e4dcbb37SDavid Spinadel local->hw_scan_ies_bufsize = local->scan_ies_len + req->ie_len; 680c56ef672SDavid Spinadel 68130686bf7SJohannes Berg if (ieee80211_hw_check(&local->hw, SINGLE_SCAN_ON_ALL_BANDS)) { 682c56ef672SDavid Spinadel int i, n_bands = 0; 683c56ef672SDavid Spinadel u8 bands_counted = 0; 684c56ef672SDavid Spinadel 685c56ef672SDavid Spinadel for (i = 0; i < req->n_channels; i++) { 686c56ef672SDavid Spinadel if (bands_counted & BIT(req->channels[i]->band)) 687c56ef672SDavid Spinadel continue; 688c56ef672SDavid Spinadel bands_counted |= BIT(req->channels[i]->band); 689c56ef672SDavid Spinadel n_bands++; 690c56ef672SDavid Spinadel } 691c56ef672SDavid Spinadel 692c56ef672SDavid Spinadel local->hw_scan_ies_bufsize *= n_bands; 693c56ef672SDavid Spinadel } 694c56ef672SDavid Spinadel 6954d36ec58SJohannes Berg local->hw_scan_req = kmalloc( 6964d36ec58SJohannes Berg sizeof(*local->hw_scan_req) + 6974d36ec58SJohannes Berg req->n_channels * sizeof(req->channels[0]) + 698c604b9f2SJohannes Berg local->hw_scan_ies_bufsize, GFP_KERNEL); 6994d36ec58SJohannes Berg if (!local->hw_scan_req) 700f3b85252SJohannes Berg return -ENOMEM; 701f3b85252SJohannes Berg 702c56ef672SDavid Spinadel local->hw_scan_req->req.ssids = req->ssids; 703c56ef672SDavid Spinadel local->hw_scan_req->req.n_ssids = req->n_ssids; 7044d36ec58SJohannes Berg ies = (u8 *)local->hw_scan_req + 7054d36ec58SJohannes Berg sizeof(*local->hw_scan_req) + 7064d36ec58SJohannes Berg req->n_channels * sizeof(req->channels[0]); 707c56ef672SDavid Spinadel local->hw_scan_req->req.ie = ies; 708c56ef672SDavid Spinadel local->hw_scan_req->req.flags = req->flags; 709e345f44fSJouni Malinen eth_broadcast_addr(local->hw_scan_req->req.bssid); 7107947d3e0SAvraham Stern local->hw_scan_req->req.duration = req->duration; 7117947d3e0SAvraham Stern local->hw_scan_req->req.duration_mandatory = 7127947d3e0SAvraham Stern req->duration_mandatory; 7134d36ec58SJohannes Berg 7144d36ec58SJohannes Berg local->hw_scan_band = 0; 715c8cb5b85STova Mussai local->hw_scan_req->req.n_6ghz_params = req->n_6ghz_params; 716c8cb5b85STova Mussai local->hw_scan_req->req.scan_6ghz_params = 717c8cb5b85STova Mussai req->scan_6ghz_params; 718c8cb5b85STova Mussai local->hw_scan_req->req.scan_6ghz = req->scan_6ghz; 7196e7e6213SJohn W. Linville 7206e7e6213SJohn W. Linville /* 7216e7e6213SJohn W. Linville * After allocating local->hw_scan_req, we must 7226e7e6213SJohn W. Linville * go through until ieee80211_prep_hw_scan(), so 7236e7e6213SJohn W. Linville * anything that might be changed here and leave 7246e7e6213SJohn W. Linville * this function early must not go after this 7256e7e6213SJohn W. Linville * allocation. 7266e7e6213SJohn W. Linville */ 727f3b85252SJohannes Berg } 728f3b85252SJohannes Berg 7296ea0a69cSJohannes Berg rcu_assign_pointer(local->scan_req, req); 730e2fd5dbcSJohannes Berg rcu_assign_pointer(local->scan_sdata, sdata); 731f3b85252SJohannes Berg 732a344d677SJohannes Berg if (req->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) 733a344d677SJohannes Berg get_random_mask_addr(local->scan_addr, 734a344d677SJohannes Berg req->mac_addr, 735a344d677SJohannes Berg req->mac_addr_mask); 736a344d677SJohannes Berg else 737a344d677SJohannes Berg memcpy(local->scan_addr, sdata->vif.addr, ETH_ALEN); 738a344d677SJohannes Berg 739e9da68ddSJohannes Berg if (hw_scan) { 740fbe9c429SHelmut Schaa __set_bit(SCAN_HW_SCANNING, &local->scanning); 7418a690674SBen Greear } else if ((req->n_channels == 1) && 742675a0b04SKarl Beldan (req->channels[0] == local->_oper_chandef.chan)) { 7439b864870SJohannes Berg /* 7449b864870SJohannes Berg * If we are scanning only on the operating channel 7459b864870SJohannes Berg * then we do not need to stop normal activities 7468a690674SBen Greear */ 7478a690674SBen Greear unsigned long next_delay; 7488a690674SBen Greear 7498a690674SBen Greear __set_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning); 7508a690674SBen Greear 7518a690674SBen Greear ieee80211_recalc_idle(local); 7528a690674SBen Greear 7538a690674SBen Greear /* Notify driver scan is starting, keep order of operations 7548a690674SBen Greear * same as normal software scan, in case that matters. */ 755a344d677SJohannes Berg drv_sw_scan_start(local, sdata, local->scan_addr); 7568a690674SBen Greear 7578a690674SBen Greear ieee80211_configure_filter(local); /* accept probe-responses */ 7588a690674SBen Greear 7598a690674SBen Greear /* We need to ensure power level is at max for scanning. */ 7608a690674SBen Greear ieee80211_hw_config(local, 0); 7618a690674SBen Greear 7624e39ccacSAntonio Quartulli if ((req->channels[0]->flags & (IEEE80211_CHAN_NO_IR | 7634e39ccacSAntonio Quartulli IEEE80211_CHAN_RADAR)) || 7646ea0a69cSJohannes Berg !req->n_ssids) { 7658a690674SBen Greear next_delay = IEEE80211_PASSIVE_CHANNEL_TIME; 7668a690674SBen Greear } else { 7678a690674SBen Greear ieee80211_scan_state_send_probe(local, &next_delay); 7688a690674SBen Greear next_delay = IEEE80211_CHANNEL_TIME; 7698a690674SBen Greear } 7708a690674SBen Greear 7718a690674SBen Greear /* Now, just wait a bit and we are all done! */ 7728a690674SBen Greear ieee80211_queue_delayed_work(&local->hw, &local->scan_work, 7738a690674SBen Greear next_delay); 7748a690674SBen Greear return 0; 7758a690674SBen Greear } else { 7768a690674SBen Greear /* Do normal software scan */ 777fbe9c429SHelmut Schaa __set_bit(SCAN_SW_SCANNING, &local->scanning); 7788a690674SBen Greear } 7796e7e6213SJohn W. Linville 7805cff20e6SJohannes Berg ieee80211_recalc_idle(local); 781f3b85252SJohannes Berg 782e9da68ddSJohannes Berg if (hw_scan) { 7832ad2274cSIlan Peer WARN_ON(!ieee80211_prep_hw_scan(sdata)); 784a060bbfeSJohannes Berg rc = drv_hw_scan(local, sdata, local->hw_scan_req); 785a344d677SJohannes Berg } else { 786a344d677SJohannes Berg rc = ieee80211_start_sw_scan(local, sdata); 787a344d677SJohannes Berg } 788f3b85252SJohannes Berg 789f3b85252SJohannes Berg if (rc) { 7904d36ec58SJohannes Berg kfree(local->hw_scan_req); 7914d36ec58SJohannes Berg local->hw_scan_req = NULL; 792fbe9c429SHelmut Schaa local->scanning = 0; 793f3b85252SJohannes Berg 7945cff20e6SJohannes Berg ieee80211_recalc_idle(local); 7955cff20e6SJohannes Berg 796f3b85252SJohannes Berg local->scan_req = NULL; 7970c2bef46SMonam Agarwal RCU_INIT_POINTER(local->scan_sdata, NULL); 798f3b85252SJohannes Berg } 799f3b85252SJohannes Berg 800e9da68ddSJohannes Berg if (hw_scan && rc == 1) { 801e9da68ddSJohannes Berg /* 802e9da68ddSJohannes Berg * we can't fall back to software for P2P-GO 803e9da68ddSJohannes Berg * as it must update NoA etc. 804e9da68ddSJohannes Berg */ 805e9da68ddSJohannes Berg if (ieee80211_vif_type_p2p(&sdata->vif) == 806e9da68ddSJohannes Berg NL80211_IFTYPE_P2P_GO) 807e9da68ddSJohannes Berg return -EOPNOTSUPP; 808e9da68ddSJohannes Berg hw_scan = false; 809e9da68ddSJohannes Berg goto again; 810e9da68ddSJohannes Berg } 811e9da68ddSJohannes Berg 812f3b85252SJohannes Berg return rc; 813f3b85252SJohannes Berg } 814f3b85252SJohannes Berg 815df13cce5SHelmut Schaa static unsigned long 816df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(struct ieee80211_channel *chan) 817df13cce5SHelmut Schaa { 818df13cce5SHelmut Schaa /* 819df13cce5SHelmut Schaa * TODO: channel switching also consumes quite some time, 820df13cce5SHelmut Schaa * add that delay as well to get a better estimation 821df13cce5SHelmut Schaa */ 8224e39ccacSAntonio Quartulli if (chan->flags & (IEEE80211_CHAN_NO_IR | IEEE80211_CHAN_RADAR)) 823df13cce5SHelmut Schaa return IEEE80211_PASSIVE_CHANNEL_TIME; 824df13cce5SHelmut Schaa return IEEE80211_PROBE_DELAY + IEEE80211_CHANNEL_TIME; 825df13cce5SHelmut Schaa } 826df13cce5SHelmut Schaa 827e229f844SStanislaw Gruszka static void ieee80211_scan_state_decision(struct ieee80211_local *local, 8282fb3f028SHelmut Schaa unsigned long *next_delay) 8292fb3f028SHelmut Schaa { 830142b9f50SHelmut Schaa bool associated = false; 831df13cce5SHelmut Schaa bool tx_empty = true; 832df13cce5SHelmut Schaa bool bad_latency; 833142b9f50SHelmut Schaa struct ieee80211_sub_if_data *sdata; 834df13cce5SHelmut Schaa struct ieee80211_channel *next_chan; 835cd2bb512SSam Leffler enum mac80211_scan_state next_scan_state; 8366ea0a69cSJohannes Berg struct cfg80211_scan_request *scan_req; 837142b9f50SHelmut Schaa 838df13cce5SHelmut Schaa /* 839df13cce5SHelmut Schaa * check if at least one STA interface is associated, 840df13cce5SHelmut Schaa * check if at least one STA interface has pending tx frames 841df13cce5SHelmut Schaa * and grab the lowest used beacon interval 842df13cce5SHelmut Schaa */ 843142b9f50SHelmut Schaa mutex_lock(&local->iflist_mtx); 844142b9f50SHelmut Schaa list_for_each_entry(sdata, &local->interfaces, list) { 8459607e6b6SJohannes Berg if (!ieee80211_sdata_running(sdata)) 846142b9f50SHelmut Schaa continue; 847142b9f50SHelmut Schaa 848142b9f50SHelmut Schaa if (sdata->vif.type == NL80211_IFTYPE_STATION) { 849142b9f50SHelmut Schaa if (sdata->u.mgd.associated) { 850142b9f50SHelmut Schaa associated = true; 851df13cce5SHelmut Schaa 852df13cce5SHelmut Schaa if (!qdisc_all_tx_empty(sdata->dev)) { 853df13cce5SHelmut Schaa tx_empty = false; 854142b9f50SHelmut Schaa break; 855142b9f50SHelmut Schaa } 856142b9f50SHelmut Schaa } 857142b9f50SHelmut Schaa } 858df13cce5SHelmut Schaa } 859142b9f50SHelmut Schaa mutex_unlock(&local->iflist_mtx); 860142b9f50SHelmut Schaa 8616ea0a69cSJohannes Berg scan_req = rcu_dereference_protected(local->scan_req, 8626ea0a69cSJohannes Berg lockdep_is_held(&local->mtx)); 8636ea0a69cSJohannes Berg 8646ea0a69cSJohannes Berg next_chan = scan_req->channels[local->scan_channel_idx]; 865b23b025fSBen Greear 866142b9f50SHelmut Schaa /* 867142b9f50SHelmut Schaa * we're currently scanning a different channel, let's 868df13cce5SHelmut Schaa * see if we can scan another channel without interfering 869df13cce5SHelmut Schaa * with the current traffic situation. 870df13cce5SHelmut Schaa * 8713f892b61SStanislaw Gruszka * Keep good latency, do not stay off-channel more than 125 ms. 872142b9f50SHelmut Schaa */ 873df13cce5SHelmut Schaa 874df13cce5SHelmut Schaa bad_latency = time_after(jiffies + 875df13cce5SHelmut Schaa ieee80211_scan_get_channel_time(next_chan), 8763f892b61SStanislaw Gruszka local->leave_oper_channel_time + HZ / 8); 877df13cce5SHelmut Schaa 878cd2bb512SSam Leffler if (associated && !tx_empty) { 8796ea0a69cSJohannes Berg if (scan_req->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) 880cd2bb512SSam Leffler next_scan_state = SCAN_ABORT; 881142b9f50SHelmut Schaa else 882cd2bb512SSam Leffler next_scan_state = SCAN_SUSPEND; 8833f892b61SStanislaw Gruszka } else if (associated && bad_latency) { 884cd2bb512SSam Leffler next_scan_state = SCAN_SUSPEND; 885cd2bb512SSam Leffler } else { 886cd2bb512SSam Leffler next_scan_state = SCAN_SET_CHANNEL; 887cd2bb512SSam Leffler } 888cd2bb512SSam Leffler 889cd2bb512SSam Leffler local->next_scan_state = next_scan_state; 890142b9f50SHelmut Schaa 891142b9f50SHelmut Schaa *next_delay = 0; 8922fb3f028SHelmut Schaa } 8932fb3f028SHelmut Schaa 8942fb3f028SHelmut Schaa static void ieee80211_scan_state_set_channel(struct ieee80211_local *local, 8957d3be3ccSHelmut Schaa unsigned long *next_delay) 8967d3be3ccSHelmut Schaa { 8977d3be3ccSHelmut Schaa int skip; 8987d3be3ccSHelmut Schaa struct ieee80211_channel *chan; 8997ca15a0aSSimon Wunderlich enum nl80211_bss_scan_width oper_scan_width; 9006ea0a69cSJohannes Berg struct cfg80211_scan_request *scan_req; 9016ea0a69cSJohannes Berg 9026ea0a69cSJohannes Berg scan_req = rcu_dereference_protected(local->scan_req, 9036ea0a69cSJohannes Berg lockdep_is_held(&local->mtx)); 9047d3be3ccSHelmut Schaa 9057d3be3ccSHelmut Schaa skip = 0; 9066ea0a69cSJohannes Berg chan = scan_req->channels[local->scan_channel_idx]; 9077d3be3ccSHelmut Schaa 9087ca15a0aSSimon Wunderlich local->scan_chandef.chan = chan; 9097ca15a0aSSimon Wunderlich local->scan_chandef.center_freq1 = chan->center_freq; 910b6011960SThomas Pedersen local->scan_chandef.freq1_offset = chan->freq_offset; 9117ca15a0aSSimon Wunderlich local->scan_chandef.center_freq2 = 0; 912*75b15935SThomas Pedersen 913*75b15935SThomas Pedersen /* For scanning on the S1G band, ignore scan_width (which is constant 914*75b15935SThomas Pedersen * across all channels) for now since channel width is specific to each 915*75b15935SThomas Pedersen * channel. Detect the required channel width here and likely revisit 916*75b15935SThomas Pedersen * later. Maybe scan_width could be used to build the channel scan list? 917*75b15935SThomas Pedersen */ 918*75b15935SThomas Pedersen if (chan->band == NL80211_BAND_S1GHZ) { 919*75b15935SThomas Pedersen local->scan_chandef.width = ieee80211_s1g_channel_width(chan); 920*75b15935SThomas Pedersen goto set_channel; 921*75b15935SThomas Pedersen } 922*75b15935SThomas Pedersen 9236ea0a69cSJohannes Berg switch (scan_req->scan_width) { 9247ca15a0aSSimon Wunderlich case NL80211_BSS_CHAN_WIDTH_5: 9257ca15a0aSSimon Wunderlich local->scan_chandef.width = NL80211_CHAN_WIDTH_5; 9267ca15a0aSSimon Wunderlich break; 9277ca15a0aSSimon Wunderlich case NL80211_BSS_CHAN_WIDTH_10: 9287ca15a0aSSimon Wunderlich local->scan_chandef.width = NL80211_CHAN_WIDTH_10; 9297ca15a0aSSimon Wunderlich break; 930df78a0c0SThomas Pedersen default: 9317ca15a0aSSimon Wunderlich case NL80211_BSS_CHAN_WIDTH_20: 9327ca15a0aSSimon Wunderlich /* If scanning on oper channel, use whatever channel-type 9337ca15a0aSSimon Wunderlich * is currently in use. 9347ca15a0aSSimon Wunderlich */ 9357ca15a0aSSimon Wunderlich oper_scan_width = cfg80211_chandef_to_scan_width( 9367ca15a0aSSimon Wunderlich &local->_oper_chandef); 9377ca15a0aSSimon Wunderlich if (chan == local->_oper_chandef.chan && 9386ea0a69cSJohannes Berg oper_scan_width == scan_req->scan_width) 9397ca15a0aSSimon Wunderlich local->scan_chandef = local->_oper_chandef; 9407ca15a0aSSimon Wunderlich else 9417ca15a0aSSimon Wunderlich local->scan_chandef.width = NL80211_CHAN_WIDTH_20_NOHT; 9427ca15a0aSSimon Wunderlich break; 943*75b15935SThomas Pedersen case NL80211_BSS_CHAN_WIDTH_1: 944*75b15935SThomas Pedersen case NL80211_BSS_CHAN_WIDTH_2: 945*75b15935SThomas Pedersen /* shouldn't get here, S1G handled above */ 946*75b15935SThomas Pedersen WARN_ON(1); 947*75b15935SThomas Pedersen break; 9487ca15a0aSSimon Wunderlich } 949b23b025fSBen Greear 950*75b15935SThomas Pedersen set_channel: 951584991dcSJohannes Berg if (ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL)) 9527d3be3ccSHelmut Schaa skip = 1; 9537d3be3ccSHelmut Schaa 9547d3be3ccSHelmut Schaa /* advance state machine to next channel/band */ 9557d3be3ccSHelmut Schaa local->scan_channel_idx++; 9567d3be3ccSHelmut Schaa 9570ee9c13cSHelmut Schaa if (skip) { 9580ee9c13cSHelmut Schaa /* if we skip this channel return to the decision state */ 9590ee9c13cSHelmut Schaa local->next_scan_state = SCAN_DECISION; 9602fb3f028SHelmut Schaa return; 9610ee9c13cSHelmut Schaa } 9627d3be3ccSHelmut Schaa 9637d3be3ccSHelmut Schaa /* 9647d3be3ccSHelmut Schaa * Probe delay is used to update the NAV, cf. 11.1.3.2.2 9657d3be3ccSHelmut Schaa * (which unfortunately doesn't say _why_ step a) is done, 9667d3be3ccSHelmut Schaa * but it waits for the probe delay or until a frame is 9677d3be3ccSHelmut Schaa * received - and the received frame would update the NAV). 9687d3be3ccSHelmut Schaa * For now, we do not support waiting until a frame is 9697d3be3ccSHelmut Schaa * received. 9707d3be3ccSHelmut Schaa * 9717d3be3ccSHelmut Schaa * In any case, it is not necessary for a passive scan. 9727d3be3ccSHelmut Schaa */ 9734e39ccacSAntonio Quartulli if ((chan->flags & (IEEE80211_CHAN_NO_IR | IEEE80211_CHAN_RADAR)) || 9744e39ccacSAntonio Quartulli !scan_req->n_ssids) { 9757d3be3ccSHelmut Schaa *next_delay = IEEE80211_PASSIVE_CHANNEL_TIME; 976977923b0SHelmut Schaa local->next_scan_state = SCAN_DECISION; 9772fb3f028SHelmut Schaa return; 9787d3be3ccSHelmut Schaa } 9797d3be3ccSHelmut Schaa 9802fb3f028SHelmut Schaa /* active scan, send probes */ 9817d3be3ccSHelmut Schaa *next_delay = IEEE80211_PROBE_DELAY; 982977923b0SHelmut Schaa local->next_scan_state = SCAN_SEND_PROBE; 9837d3be3ccSHelmut Schaa } 9847d3be3ccSHelmut Schaa 98507ef03eeSJohannes Berg static void ieee80211_scan_state_suspend(struct ieee80211_local *local, 98607ef03eeSJohannes Berg unsigned long *next_delay) 98707ef03eeSJohannes Berg { 98807ef03eeSJohannes Berg /* switch back to the operating channel */ 9897ca15a0aSSimon Wunderlich local->scan_chandef.chan = NULL; 99007ef03eeSJohannes Berg ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_CHANNEL); 99107ef03eeSJohannes Berg 992aacde9eeSStanislaw Gruszka /* disable PS */ 993aacde9eeSStanislaw Gruszka ieee80211_offchannel_return(local); 99407ef03eeSJohannes Berg 99507ef03eeSJohannes Berg *next_delay = HZ / 5; 99607ef03eeSJohannes Berg /* afterwards, resume scan & go to next channel */ 99707ef03eeSJohannes Berg local->next_scan_state = SCAN_RESUME; 99807ef03eeSJohannes Berg } 99907ef03eeSJohannes Berg 100007ef03eeSJohannes Berg static void ieee80211_scan_state_resume(struct ieee80211_local *local, 100107ef03eeSJohannes Berg unsigned long *next_delay) 100207ef03eeSJohannes Berg { 1003aacde9eeSStanislaw Gruszka ieee80211_offchannel_stop_vifs(local); 100407ef03eeSJohannes Berg 100507ef03eeSJohannes Berg if (local->ops->flush) { 10063b24f4c6SEmmanuel Grumbach ieee80211_flush_queues(local, NULL, false); 100707ef03eeSJohannes Berg *next_delay = 0; 100807ef03eeSJohannes Berg } else 100907ef03eeSJohannes Berg *next_delay = HZ / 10; 101007ef03eeSJohannes Berg 101107ef03eeSJohannes Berg /* remember when we left the operating channel */ 101207ef03eeSJohannes Berg local->leave_oper_channel_time = jiffies; 101307ef03eeSJohannes Berg 101407ef03eeSJohannes Berg /* advance to the next channel to be scanned */ 1015de2ee84dSMohammed Shafi Shajakhan local->next_scan_state = SCAN_SET_CHANNEL; 101607ef03eeSJohannes Berg } 101707ef03eeSJohannes Berg 1018c2b13452SJohannes Berg void ieee80211_scan_work(struct work_struct *work) 10190a51b27eSJohannes Berg { 10200a51b27eSJohannes Berg struct ieee80211_local *local = 10210a51b27eSJohannes Berg container_of(work, struct ieee80211_local, scan_work.work); 1022d07bfd8bSJohannes Berg struct ieee80211_sub_if_data *sdata; 10236ea0a69cSJohannes Berg struct cfg80211_scan_request *scan_req; 10240a51b27eSJohannes Berg unsigned long next_delay = 0; 10258bd2a248SEliad Peller bool aborted; 10268789d459SJohannes Berg 1027259b62e3SStanislaw Gruszka mutex_lock(&local->mtx); 1028259b62e3SStanislaw Gruszka 1029332ff7feSLuciano Coelho if (!ieee80211_can_run_worker(local)) { 1030332ff7feSLuciano Coelho aborted = true; 1031332ff7feSLuciano Coelho goto out_complete; 1032332ff7feSLuciano Coelho } 1033332ff7feSLuciano Coelho 1034e2fd5dbcSJohannes Berg sdata = rcu_dereference_protected(local->scan_sdata, 1035e2fd5dbcSJohannes Berg lockdep_is_held(&local->mtx)); 10366ea0a69cSJohannes Berg scan_req = rcu_dereference_protected(local->scan_req, 10376ea0a69cSJohannes Berg lockdep_is_held(&local->mtx)); 1038d07bfd8bSJohannes Berg 10398a690674SBen Greear /* When scanning on-channel, the first-callback means completed. */ 10408a690674SBen Greear if (test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning)) { 10418a690674SBen Greear aborted = test_and_clear_bit(SCAN_ABORTED, &local->scanning); 10428a690674SBen Greear goto out_complete; 10438a690674SBen Greear } 10448a690674SBen Greear 1045259b62e3SStanislaw Gruszka if (test_and_clear_bit(SCAN_COMPLETED, &local->scanning)) { 10468789d459SJohannes Berg aborted = test_and_clear_bit(SCAN_ABORTED, &local->scanning); 1047259b62e3SStanislaw Gruszka goto out_complete; 10488789d459SJohannes Berg } 10498789d459SJohannes Berg 10506ea0a69cSJohannes Berg if (!sdata || !scan_req) 1051259b62e3SStanislaw Gruszka goto out; 1052f3b85252SJohannes Berg 1053ff5db439SEliad Peller if (!local->scanning) { 1054f3b85252SJohannes Berg int rc; 1055f3b85252SJohannes Berg 10566ea0a69cSJohannes Berg RCU_INIT_POINTER(local->scan_req, NULL); 10570c2bef46SMonam Agarwal RCU_INIT_POINTER(local->scan_sdata, NULL); 1058f3b85252SJohannes Berg 10596ea0a69cSJohannes Berg rc = __ieee80211_start_scan(sdata, scan_req); 1060259b62e3SStanislaw Gruszka if (rc) { 10613aed49efSStanislaw Gruszka /* need to complete scan in cfg80211 */ 10626ea0a69cSJohannes Berg rcu_assign_pointer(local->scan_req, scan_req); 1063259b62e3SStanislaw Gruszka aborted = true; 1064259b62e3SStanislaw Gruszka goto out_complete; 1065259b62e3SStanislaw Gruszka } else 1066259b62e3SStanislaw Gruszka goto out; 1067f3b85252SJohannes Berg } 1068f3b85252SJohannes Berg 10695bc75728SJohannes Berg /* 1070f502d09bSHelmut Schaa * as long as no delay is required advance immediately 1071f502d09bSHelmut Schaa * without scheduling a new work 1072f502d09bSHelmut Schaa */ 1073f502d09bSHelmut Schaa do { 1074c29acf20SRajkumar Manoharan if (!ieee80211_sdata_running(sdata)) { 1075c29acf20SRajkumar Manoharan aborted = true; 1076c29acf20SRajkumar Manoharan goto out_complete; 1077c29acf20SRajkumar Manoharan } 1078c29acf20SRajkumar Manoharan 1079977923b0SHelmut Schaa switch (local->next_scan_state) { 10802fb3f028SHelmut Schaa case SCAN_DECISION: 1081e229f844SStanislaw Gruszka /* if no more bands/channels left, complete scan */ 10826ea0a69cSJohannes Berg if (local->scan_channel_idx >= scan_req->n_channels) { 1083e229f844SStanislaw Gruszka aborted = false; 1084e229f844SStanislaw Gruszka goto out_complete; 1085e229f844SStanislaw Gruszka } 1086e229f844SStanislaw Gruszka ieee80211_scan_state_decision(local, &next_delay); 10870a51b27eSJohannes Berg break; 10882fb3f028SHelmut Schaa case SCAN_SET_CHANNEL: 10892fb3f028SHelmut Schaa ieee80211_scan_state_set_channel(local, &next_delay); 10902fb3f028SHelmut Schaa break; 10910a51b27eSJohannes Berg case SCAN_SEND_PROBE: 10927d3be3ccSHelmut Schaa ieee80211_scan_state_send_probe(local, &next_delay); 10930a51b27eSJohannes Berg break; 109407ef03eeSJohannes Berg case SCAN_SUSPEND: 109507ef03eeSJohannes Berg ieee80211_scan_state_suspend(local, &next_delay); 1096142b9f50SHelmut Schaa break; 109707ef03eeSJohannes Berg case SCAN_RESUME: 109807ef03eeSJohannes Berg ieee80211_scan_state_resume(local, &next_delay); 1099142b9f50SHelmut Schaa break; 1100cd2bb512SSam Leffler case SCAN_ABORT: 1101cd2bb512SSam Leffler aborted = true; 1102cd2bb512SSam Leffler goto out_complete; 11030a51b27eSJohannes Berg } 1104f502d09bSHelmut Schaa } while (next_delay == 0); 11050a51b27eSJohannes Berg 110642935ecaSLuis R. Rodriguez ieee80211_queue_delayed_work(&local->hw, &local->scan_work, next_delay); 1107d07bfd8bSJohannes Berg goto out; 1108259b62e3SStanislaw Gruszka 1109259b62e3SStanislaw Gruszka out_complete: 11108bd2a248SEliad Peller __ieee80211_scan_completed(&local->hw, aborted); 1111259b62e3SStanislaw Gruszka out: 1112259b62e3SStanislaw Gruszka mutex_unlock(&local->mtx); 11130a51b27eSJohannes Berg } 11140a51b27eSJohannes Berg 1115c2b13452SJohannes Berg int ieee80211_request_scan(struct ieee80211_sub_if_data *sdata, 11162a519311SJohannes Berg struct cfg80211_scan_request *req) 11170a51b27eSJohannes Berg { 1118f3b85252SJohannes Berg int res; 11190a51b27eSJohannes Berg 1120a1699b75SJohannes Berg mutex_lock(&sdata->local->mtx); 1121f3b85252SJohannes Berg res = __ieee80211_start_scan(sdata, req); 1122a1699b75SJohannes Berg mutex_unlock(&sdata->local->mtx); 11232a519311SJohannes Berg 1124f3b85252SJohannes Berg return res; 11250a51b27eSJohannes Berg } 11260a51b27eSJohannes Berg 112734bcf715SStanislaw Gruszka int ieee80211_request_ibss_scan(struct ieee80211_sub_if_data *sdata, 1128be4a4b6aSJohannes Berg const u8 *ssid, u8 ssid_len, 112976bed0f4SJanusz.Dziedzic@tieto.com struct ieee80211_channel **channels, 113076bed0f4SJanusz.Dziedzic@tieto.com unsigned int n_channels, 11317ca15a0aSSimon Wunderlich enum nl80211_bss_scan_width scan_width) 1132f3b85252SJohannes Berg { 1133f3b85252SJohannes Berg struct ieee80211_local *local = sdata->local; 113476bed0f4SJanusz.Dziedzic@tieto.com int ret = -EBUSY, i, n_ch = 0; 113557fbcce3SJohannes Berg enum nl80211_band band; 11369116dd01SJohannes Berg 1137a1699b75SJohannes Berg mutex_lock(&local->mtx); 1138f3b85252SJohannes Berg 1139f3b85252SJohannes Berg /* busy scanning */ 1140f3b85252SJohannes Berg if (local->scan_req) 1141f3b85252SJohannes Berg goto unlock; 1142f3b85252SJohannes Berg 1143be4a4b6aSJohannes Berg /* fill internal scan request */ 114476bed0f4SJanusz.Dziedzic@tieto.com if (!channels) { 114576bed0f4SJanusz.Dziedzic@tieto.com int max_n; 1146be4a4b6aSJohannes Berg 114757fbcce3SJohannes Berg for (band = 0; band < NUM_NL80211_BANDS; band++) { 1148c8cb5b85STova Mussai if (!local->hw.wiphy->bands[band] || 1149c8cb5b85STova Mussai band == NL80211_BAND_6GHZ) 1150be4a4b6aSJohannes Berg continue; 115134bcf715SStanislaw Gruszka 115234bcf715SStanislaw Gruszka max_n = local->hw.wiphy->bands[band]->n_channels; 115334bcf715SStanislaw Gruszka for (i = 0; i < max_n; i++) { 115434bcf715SStanislaw Gruszka struct ieee80211_channel *tmp_ch = 1155be4a4b6aSJohannes Berg &local->hw.wiphy->bands[band]->channels[i]; 115634bcf715SStanislaw Gruszka 11578fe02e16SLuis R. Rodriguez if (tmp_ch->flags & (IEEE80211_CHAN_NO_IR | 115834bcf715SStanislaw Gruszka IEEE80211_CHAN_DISABLED)) 115934bcf715SStanislaw Gruszka continue; 116034bcf715SStanislaw Gruszka 116134bcf715SStanislaw Gruszka local->int_scan_req->channels[n_ch] = tmp_ch; 116234bcf715SStanislaw Gruszka n_ch++; 1163be4a4b6aSJohannes Berg } 1164be4a4b6aSJohannes Berg } 1165be4a4b6aSJohannes Berg 116634bcf715SStanislaw Gruszka if (WARN_ON_ONCE(n_ch == 0)) 116734bcf715SStanislaw Gruszka goto unlock; 116834bcf715SStanislaw Gruszka 116934bcf715SStanislaw Gruszka local->int_scan_req->n_channels = n_ch; 1170be4a4b6aSJohannes Berg } else { 117176bed0f4SJanusz.Dziedzic@tieto.com for (i = 0; i < n_channels; i++) { 117276bed0f4SJanusz.Dziedzic@tieto.com if (channels[i]->flags & (IEEE80211_CHAN_NO_IR | 117376bed0f4SJanusz.Dziedzic@tieto.com IEEE80211_CHAN_DISABLED)) 117476bed0f4SJanusz.Dziedzic@tieto.com continue; 117576bed0f4SJanusz.Dziedzic@tieto.com 117676bed0f4SJanusz.Dziedzic@tieto.com local->int_scan_req->channels[n_ch] = channels[i]; 117776bed0f4SJanusz.Dziedzic@tieto.com n_ch++; 117876bed0f4SJanusz.Dziedzic@tieto.com } 117976bed0f4SJanusz.Dziedzic@tieto.com 118076bed0f4SJanusz.Dziedzic@tieto.com if (WARN_ON_ONCE(n_ch == 0)) 118134bcf715SStanislaw Gruszka goto unlock; 118234bcf715SStanislaw Gruszka 118376bed0f4SJanusz.Dziedzic@tieto.com local->int_scan_req->n_channels = n_ch; 1184be4a4b6aSJohannes Berg } 1185be4a4b6aSJohannes Berg 1186be4a4b6aSJohannes Berg local->int_scan_req->ssids = &local->scan_ssid; 1187be4a4b6aSJohannes Berg local->int_scan_req->n_ssids = 1; 11887ca15a0aSSimon Wunderlich local->int_scan_req->scan_width = scan_width; 11895ba63533SJohannes Berg memcpy(local->int_scan_req->ssids[0].ssid, ssid, IEEE80211_MAX_SSID_LEN); 11905ba63533SJohannes Berg local->int_scan_req->ssids[0].ssid_len = ssid_len; 1191f3b85252SJohannes Berg 11925ba63533SJohannes Berg ret = __ieee80211_start_scan(sdata, sdata->local->int_scan_req); 1193f3b85252SJohannes Berg unlock: 1194a1699b75SJohannes Berg mutex_unlock(&local->mtx); 1195f3b85252SJohannes Berg return ret; 11960a51b27eSJohannes Berg } 11975bb644a0SJohannes Berg 11984136c422SStanislaw Gruszka /* 11994136c422SStanislaw Gruszka * Only call this function when a scan can't be queued -- under RTNL. 12004136c422SStanislaw Gruszka */ 12015bb644a0SJohannes Berg void ieee80211_scan_cancel(struct ieee80211_local *local) 12025bb644a0SJohannes Berg { 12035bb644a0SJohannes Berg /* 1204b856439bSEliad Peller * We are canceling software scan, or deferred scan that was not 12054136c422SStanislaw Gruszka * yet really started (see __ieee80211_start_scan ). 12064136c422SStanislaw Gruszka * 12074136c422SStanislaw Gruszka * Regarding hardware scan: 12084136c422SStanislaw Gruszka * - we can not call __ieee80211_scan_completed() as when 12094136c422SStanislaw Gruszka * SCAN_HW_SCANNING bit is set this function change 12104136c422SStanislaw Gruszka * local->hw_scan_req to operate on 5G band, what race with 12114136c422SStanislaw Gruszka * driver which can use local->hw_scan_req 12124136c422SStanislaw Gruszka * 12134136c422SStanislaw Gruszka * - we can not cancel scan_work since driver can schedule it 12144136c422SStanislaw Gruszka * by ieee80211_scan_completed(..., true) to finish scan 12154136c422SStanislaw Gruszka * 1216b856439bSEliad Peller * Hence we only call the cancel_hw_scan() callback, but the low-level 1217b856439bSEliad Peller * driver is still responsible for calling ieee80211_scan_completed() 1218b856439bSEliad Peller * after the scan was completed/aborted. 12195bb644a0SJohannes Berg */ 12204136c422SStanislaw Gruszka 1221a1699b75SJohannes Berg mutex_lock(&local->mtx); 1222b856439bSEliad Peller if (!local->scan_req) 1223b856439bSEliad Peller goto out; 1224b856439bSEliad Peller 1225a754055aSEmmanuel Grumbach /* 1226a754055aSEmmanuel Grumbach * We have a scan running and the driver already reported completion, 1227a754055aSEmmanuel Grumbach * but the worker hasn't run yet or is stuck on the mutex - mark it as 1228a754055aSEmmanuel Grumbach * cancelled. 1229a754055aSEmmanuel Grumbach */ 1230a754055aSEmmanuel Grumbach if (test_bit(SCAN_HW_SCANNING, &local->scanning) && 1231a754055aSEmmanuel Grumbach test_bit(SCAN_COMPLETED, &local->scanning)) { 1232a754055aSEmmanuel Grumbach set_bit(SCAN_HW_CANCELLED, &local->scanning); 1233a754055aSEmmanuel Grumbach goto out; 1234a754055aSEmmanuel Grumbach } 1235a754055aSEmmanuel Grumbach 1236b856439bSEliad Peller if (test_bit(SCAN_HW_SCANNING, &local->scanning)) { 1237a754055aSEmmanuel Grumbach /* 1238a754055aSEmmanuel Grumbach * Make sure that __ieee80211_scan_completed doesn't trigger a 1239a754055aSEmmanuel Grumbach * scan on another band. 1240a754055aSEmmanuel Grumbach */ 1241a754055aSEmmanuel Grumbach set_bit(SCAN_HW_CANCELLED, &local->scanning); 1242b856439bSEliad Peller if (local->ops->cancel_hw_scan) 1243e2fd5dbcSJohannes Berg drv_cancel_hw_scan(local, 1244e2fd5dbcSJohannes Berg rcu_dereference_protected(local->scan_sdata, 1245e2fd5dbcSJohannes Berg lockdep_is_held(&local->mtx))); 1246b856439bSEliad Peller goto out; 1247b856439bSEliad Peller } 1248b856439bSEliad Peller 1249d07bfd8bSJohannes Berg /* 1250d07bfd8bSJohannes Berg * If the work is currently running, it must be blocked on 1251d07bfd8bSJohannes Berg * the mutex, but we'll set scan_sdata = NULL and it'll 1252d07bfd8bSJohannes Berg * simply exit once it acquires the mutex. 1253d07bfd8bSJohannes Berg */ 1254d07bfd8bSJohannes Berg cancel_delayed_work(&local->scan_work); 1255d07bfd8bSJohannes Berg /* and clean up */ 12567947d3e0SAvraham Stern memset(&local->scan_info, 0, sizeof(local->scan_info)); 12578bd2a248SEliad Peller __ieee80211_scan_completed(&local->hw, true); 1258b856439bSEliad Peller out: 1259d07bfd8bSJohannes Berg mutex_unlock(&local->mtx); 12605bb644a0SJohannes Berg } 126179f460caSLuciano Coelho 1262d43c6b6eSDavid Spinadel int __ieee80211_request_sched_scan_start(struct ieee80211_sub_if_data *sdata, 126379f460caSLuciano Coelho struct cfg80211_sched_scan_request *req) 126479f460caSLuciano Coelho { 126579f460caSLuciano Coelho struct ieee80211_local *local = sdata->local; 1266633e2713SDavid Spinadel struct ieee80211_scan_ies sched_scan_ies = {}; 12672103dec1SSimon Wunderlich struct cfg80211_chan_def chandef; 1268633e2713SDavid Spinadel int ret, i, iebufsz, num_bands = 0; 126957fbcce3SJohannes Berg u32 rate_masks[NUM_NL80211_BANDS] = {}; 1270633e2713SDavid Spinadel u8 bands_used = 0; 1271633e2713SDavid Spinadel u8 *ie; 1272b9771d41SJohannes Berg u32 flags = 0; 1273c604b9f2SJohannes Berg 1274e4dcbb37SDavid Spinadel iebufsz = local->scan_ies_len + req->ie_len; 127579f460caSLuciano Coelho 1276d43c6b6eSDavid Spinadel lockdep_assert_held(&local->mtx); 127779f460caSLuciano Coelho 1278d43c6b6eSDavid Spinadel if (!local->ops->sched_scan_start) 1279d43c6b6eSDavid Spinadel return -ENOTSUPP; 128079f460caSLuciano Coelho 128157fbcce3SJohannes Berg for (i = 0; i < NUM_NL80211_BANDS; i++) { 1282633e2713SDavid Spinadel if (local->hw.wiphy->bands[i]) { 1283633e2713SDavid Spinadel bands_used |= BIT(i); 1284633e2713SDavid Spinadel rate_masks[i] = (u32) -1; 1285633e2713SDavid Spinadel num_bands++; 1286633e2713SDavid Spinadel } 1287633e2713SDavid Spinadel } 1288c56ef672SDavid Spinadel 1289b9771d41SJohannes Berg if (req->flags & NL80211_SCAN_FLAG_MIN_PREQ_CONTENT) 1290b9771d41SJohannes Berg flags |= IEEE80211_PROBE_FLAG_MIN_CONTENT; 1291b9771d41SJohannes Berg 12926396bb22SKees Cook ie = kcalloc(iebufsz, num_bands, GFP_KERNEL); 1293633e2713SDavid Spinadel if (!ie) { 129479f460caSLuciano Coelho ret = -ENOMEM; 1295633e2713SDavid Spinadel goto out; 129679f460caSLuciano Coelho } 129779f460caSLuciano Coelho 12982103dec1SSimon Wunderlich ieee80211_prepare_scan_chandef(&chandef, req->scan_width); 12992103dec1SSimon Wunderlich 13002ad2274cSIlan Peer ieee80211_build_preq_ies(sdata, ie, num_bands * iebufsz, 1301633e2713SDavid Spinadel &sched_scan_ies, req->ie, 130200387f32SJohannes Berg req->ie_len, bands_used, rate_masks, &chandef, 1303b9771d41SJohannes Berg flags); 130479f460caSLuciano Coelho 130530dd3edfSJohannes Berg ret = drv_sched_scan_start(local, sdata, req, &sched_scan_ies); 1306d43c6b6eSDavid Spinadel if (ret == 0) { 13075260a5b2SJohannes Berg rcu_assign_pointer(local->sched_scan_sdata, sdata); 13086ea0a69cSJohannes Berg rcu_assign_pointer(local->sched_scan_req, req); 1309d43c6b6eSDavid Spinadel } 131079f460caSLuciano Coelho 1311633e2713SDavid Spinadel kfree(ie); 1312d43c6b6eSDavid Spinadel 1313633e2713SDavid Spinadel out: 1314d43c6b6eSDavid Spinadel if (ret) { 1315d43c6b6eSDavid Spinadel /* Clean in case of failure after HW restart or upon resume. */ 13160c2bef46SMonam Agarwal RCU_INIT_POINTER(local->sched_scan_sdata, NULL); 13176ea0a69cSJohannes Berg RCU_INIT_POINTER(local->sched_scan_req, NULL); 1318d43c6b6eSDavid Spinadel } 1319d43c6b6eSDavid Spinadel 1320d43c6b6eSDavid Spinadel return ret; 1321d43c6b6eSDavid Spinadel } 1322d43c6b6eSDavid Spinadel 1323d43c6b6eSDavid Spinadel int ieee80211_request_sched_scan_start(struct ieee80211_sub_if_data *sdata, 1324d43c6b6eSDavid Spinadel struct cfg80211_sched_scan_request *req) 1325d43c6b6eSDavid Spinadel { 1326d43c6b6eSDavid Spinadel struct ieee80211_local *local = sdata->local; 1327d43c6b6eSDavid Spinadel int ret; 1328d43c6b6eSDavid Spinadel 1329d43c6b6eSDavid Spinadel mutex_lock(&local->mtx); 1330d43c6b6eSDavid Spinadel 1331d43c6b6eSDavid Spinadel if (rcu_access_pointer(local->sched_scan_sdata)) { 1332d43c6b6eSDavid Spinadel mutex_unlock(&local->mtx); 1333d43c6b6eSDavid Spinadel return -EBUSY; 1334d43c6b6eSDavid Spinadel } 1335d43c6b6eSDavid Spinadel 1336d43c6b6eSDavid Spinadel ret = __ieee80211_request_sched_scan_start(sdata, req); 1337d43c6b6eSDavid Spinadel 13385260a5b2SJohannes Berg mutex_unlock(&local->mtx); 133979f460caSLuciano Coelho return ret; 134079f460caSLuciano Coelho } 134179f460caSLuciano Coelho 13420d440ea2SEliad Peller int ieee80211_request_sched_scan_stop(struct ieee80211_local *local) 134379f460caSLuciano Coelho { 13440d440ea2SEliad Peller struct ieee80211_sub_if_data *sched_scan_sdata; 13450d440ea2SEliad Peller int ret = -ENOENT; 134679f460caSLuciano Coelho 13475260a5b2SJohannes Berg mutex_lock(&local->mtx); 134879f460caSLuciano Coelho 134979f460caSLuciano Coelho if (!local->ops->sched_scan_stop) { 135079f460caSLuciano Coelho ret = -ENOTSUPP; 135179f460caSLuciano Coelho goto out; 135279f460caSLuciano Coelho } 135379f460caSLuciano Coelho 1354d43c6b6eSDavid Spinadel /* We don't want to restart sched scan anymore. */ 13556ea0a69cSJohannes Berg RCU_INIT_POINTER(local->sched_scan_req, NULL); 1356d43c6b6eSDavid Spinadel 13570d440ea2SEliad Peller sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata, 13580d440ea2SEliad Peller lockdep_is_held(&local->mtx)); 13590d440ea2SEliad Peller if (sched_scan_sdata) { 13600d440ea2SEliad Peller ret = drv_sched_scan_stop(local, sched_scan_sdata); 136171228a1eSAlexander Bondar if (!ret) 1362ad053a96SAndreea-Cristina Bernat RCU_INIT_POINTER(local->sched_scan_sdata, NULL); 136371228a1eSAlexander Bondar } 136479f460caSLuciano Coelho out: 13655260a5b2SJohannes Berg mutex_unlock(&local->mtx); 136679f460caSLuciano Coelho 136779f460caSLuciano Coelho return ret; 136879f460caSLuciano Coelho } 136979f460caSLuciano Coelho 137079f460caSLuciano Coelho void ieee80211_sched_scan_results(struct ieee80211_hw *hw) 137179f460caSLuciano Coelho { 137279f460caSLuciano Coelho struct ieee80211_local *local = hw_to_local(hw); 137379f460caSLuciano Coelho 137479f460caSLuciano Coelho trace_api_sched_scan_results(local); 137579f460caSLuciano Coelho 1376b34939b9SArend Van Spriel cfg80211_sched_scan_results(hw->wiphy, 0); 137779f460caSLuciano Coelho } 137879f460caSLuciano Coelho EXPORT_SYMBOL(ieee80211_sched_scan_results); 137979f460caSLuciano Coelho 1380f6837ba8SJohannes Berg void ieee80211_sched_scan_end(struct ieee80211_local *local) 138185a9994aSLuciano Coelho { 138285a9994aSLuciano Coelho mutex_lock(&local->mtx); 138385a9994aSLuciano Coelho 13845260a5b2SJohannes Berg if (!rcu_access_pointer(local->sched_scan_sdata)) { 138585a9994aSLuciano Coelho mutex_unlock(&local->mtx); 138685a9994aSLuciano Coelho return; 138785a9994aSLuciano Coelho } 138885a9994aSLuciano Coelho 13890c2bef46SMonam Agarwal RCU_INIT_POINTER(local->sched_scan_sdata, NULL); 139085a9994aSLuciano Coelho 1391d43c6b6eSDavid Spinadel /* If sched scan was aborted by the driver. */ 13926ea0a69cSJohannes Berg RCU_INIT_POINTER(local->sched_scan_req, NULL); 1393d43c6b6eSDavid Spinadel 139485a9994aSLuciano Coelho mutex_unlock(&local->mtx); 139585a9994aSLuciano Coelho 1396b34939b9SArend Van Spriel cfg80211_sched_scan_stopped(local->hw.wiphy, 0); 139785a9994aSLuciano Coelho } 139885a9994aSLuciano Coelho 1399f6837ba8SJohannes Berg void ieee80211_sched_scan_stopped_work(struct work_struct *work) 1400f6837ba8SJohannes Berg { 1401f6837ba8SJohannes Berg struct ieee80211_local *local = 1402f6837ba8SJohannes Berg container_of(work, struct ieee80211_local, 1403f6837ba8SJohannes Berg sched_scan_stopped_work); 1404f6837ba8SJohannes Berg 1405f6837ba8SJohannes Berg ieee80211_sched_scan_end(local); 1406f6837ba8SJohannes Berg } 1407f6837ba8SJohannes Berg 140879f460caSLuciano Coelho void ieee80211_sched_scan_stopped(struct ieee80211_hw *hw) 140979f460caSLuciano Coelho { 141079f460caSLuciano Coelho struct ieee80211_local *local = hw_to_local(hw); 141179f460caSLuciano Coelho 141279f460caSLuciano Coelho trace_api_sched_scan_stopped(local); 141379f460caSLuciano Coelho 14142bc533bdSEliad Peller /* 14152bc533bdSEliad Peller * this shouldn't really happen, so for simplicity 14162bc533bdSEliad Peller * simply ignore it, and let mac80211 reconfigure 14172bc533bdSEliad Peller * the sched scan later on. 14182bc533bdSEliad Peller */ 14192bc533bdSEliad Peller if (local->in_reconfig) 14202bc533bdSEliad Peller return; 14212bc533bdSEliad Peller 142218db594aSJohannes Berg schedule_work(&local->sched_scan_stopped_work); 142379f460caSLuciano Coelho } 142479f460caSLuciano Coelho EXPORT_SYMBOL(ieee80211_sched_scan_stopped); 1425