1 /* 2 * Copyright 2002-2005, Instant802 Networks, Inc. 3 * Copyright 2005-2006, Devicescape Software, Inc. 4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 5 * Copyright 2007 Johannes Berg <johannes@sipsolutions.net> 6 * 7 * This program is free software; you can redistribute it and/or modify 8 * it under the terms of the GNU General Public License version 2 as 9 * published by the Free Software Foundation. 10 * 11 * utilities for mac80211 12 */ 13 14 #include <net/mac80211.h> 15 #include <linux/netdevice.h> 16 #include <linux/export.h> 17 #include <linux/types.h> 18 #include <linux/slab.h> 19 #include <linux/skbuff.h> 20 #include <linux/etherdevice.h> 21 #include <linux/if_arp.h> 22 #include <linux/bitmap.h> 23 #include <linux/crc32.h> 24 #include <net/net_namespace.h> 25 #include <net/cfg80211.h> 26 #include <net/rtnetlink.h> 27 28 #include "ieee80211_i.h" 29 #include "driver-ops.h" 30 #include "rate.h" 31 #include "mesh.h" 32 #include "wme.h" 33 #include "led.h" 34 #include "wep.h" 35 36 /* privid for wiphys to determine whether they belong to us or not */ 37 const void *const mac80211_wiphy_privid = &mac80211_wiphy_privid; 38 39 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy) 40 { 41 struct ieee80211_local *local; 42 BUG_ON(!wiphy); 43 44 local = wiphy_priv(wiphy); 45 return &local->hw; 46 } 47 EXPORT_SYMBOL(wiphy_to_ieee80211_hw); 48 49 u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len, 50 enum nl80211_iftype type) 51 { 52 __le16 fc = hdr->frame_control; 53 54 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */ 55 if (len < 16) 56 return NULL; 57 58 if (ieee80211_is_data(fc)) { 59 if (len < 24) /* drop incorrect hdr len (data) */ 60 return NULL; 61 62 if (ieee80211_has_a4(fc)) 63 return NULL; 64 if (ieee80211_has_tods(fc)) 65 return hdr->addr1; 66 if (ieee80211_has_fromds(fc)) 67 return hdr->addr2; 68 69 return hdr->addr3; 70 } 71 72 if (ieee80211_is_mgmt(fc)) { 73 if (len < 24) /* drop incorrect hdr len (mgmt) */ 74 return NULL; 75 return hdr->addr3; 76 } 77 78 if (ieee80211_is_ctl(fc)) { 79 if (ieee80211_is_pspoll(fc)) 80 return hdr->addr1; 81 82 if (ieee80211_is_back_req(fc)) { 83 switch (type) { 84 case NL80211_IFTYPE_STATION: 85 return hdr->addr2; 86 case NL80211_IFTYPE_AP: 87 case NL80211_IFTYPE_AP_VLAN: 88 return hdr->addr1; 89 default: 90 break; /* fall through to the return */ 91 } 92 } 93 } 94 95 return NULL; 96 } 97 98 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx) 99 { 100 struct sk_buff *skb; 101 struct ieee80211_hdr *hdr; 102 103 skb_queue_walk(&tx->skbs, skb) { 104 hdr = (struct ieee80211_hdr *) skb->data; 105 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED); 106 } 107 } 108 109 int ieee80211_frame_duration(enum ieee80211_band band, size_t len, 110 int rate, int erp, int short_preamble, 111 int shift) 112 { 113 int dur; 114 115 /* calculate duration (in microseconds, rounded up to next higher 116 * integer if it includes a fractional microsecond) to send frame of 117 * len bytes (does not include FCS) at the given rate. Duration will 118 * also include SIFS. 119 * 120 * rate is in 100 kbps, so divident is multiplied by 10 in the 121 * DIV_ROUND_UP() operations. 122 * 123 * shift may be 2 for 5 MHz channels or 1 for 10 MHz channels, and 124 * is assumed to be 0 otherwise. 125 */ 126 127 if (band == IEEE80211_BAND_5GHZ || erp) { 128 /* 129 * OFDM: 130 * 131 * N_DBPS = DATARATE x 4 132 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS) 133 * (16 = SIGNAL time, 6 = tail bits) 134 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext 135 * 136 * T_SYM = 4 usec 137 * 802.11a - 18.5.2: aSIFSTime = 16 usec 138 * 802.11g - 19.8.4: aSIFSTime = 10 usec + 139 * signal ext = 6 usec 140 */ 141 dur = 16; /* SIFS + signal ext */ 142 dur += 16; /* IEEE 802.11-2012 18.3.2.4: T_PREAMBLE = 16 usec */ 143 dur += 4; /* IEEE 802.11-2012 18.3.2.4: T_SIGNAL = 4 usec */ 144 145 /* IEEE 802.11-2012 18.3.2.4: all values above are: 146 * * times 4 for 5 MHz 147 * * times 2 for 10 MHz 148 */ 149 dur *= 1 << shift; 150 151 /* rates should already consider the channel bandwidth, 152 * don't apply divisor again. 153 */ 154 dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10, 155 4 * rate); /* T_SYM x N_SYM */ 156 } else { 157 /* 158 * 802.11b or 802.11g with 802.11b compatibility: 159 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime + 160 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0. 161 * 162 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4 163 * aSIFSTime = 10 usec 164 * aPreambleLength = 144 usec or 72 usec with short preamble 165 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble 166 */ 167 dur = 10; /* aSIFSTime = 10 usec */ 168 dur += short_preamble ? (72 + 24) : (144 + 48); 169 170 dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate); 171 } 172 173 return dur; 174 } 175 176 /* Exported duration function for driver use */ 177 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw, 178 struct ieee80211_vif *vif, 179 enum ieee80211_band band, 180 size_t frame_len, 181 struct ieee80211_rate *rate) 182 { 183 struct ieee80211_sub_if_data *sdata; 184 u16 dur; 185 int erp, shift = 0; 186 bool short_preamble = false; 187 188 erp = 0; 189 if (vif) { 190 sdata = vif_to_sdata(vif); 191 short_preamble = sdata->vif.bss_conf.use_short_preamble; 192 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 193 erp = rate->flags & IEEE80211_RATE_ERP_G; 194 shift = ieee80211_vif_get_shift(vif); 195 } 196 197 dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp, 198 short_preamble, shift); 199 200 return cpu_to_le16(dur); 201 } 202 EXPORT_SYMBOL(ieee80211_generic_frame_duration); 203 204 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw, 205 struct ieee80211_vif *vif, size_t frame_len, 206 const struct ieee80211_tx_info *frame_txctl) 207 { 208 struct ieee80211_local *local = hw_to_local(hw); 209 struct ieee80211_rate *rate; 210 struct ieee80211_sub_if_data *sdata; 211 bool short_preamble; 212 int erp, shift = 0, bitrate; 213 u16 dur; 214 struct ieee80211_supported_band *sband; 215 216 sband = local->hw.wiphy->bands[frame_txctl->band]; 217 218 short_preamble = false; 219 220 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx]; 221 222 erp = 0; 223 if (vif) { 224 sdata = vif_to_sdata(vif); 225 short_preamble = sdata->vif.bss_conf.use_short_preamble; 226 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 227 erp = rate->flags & IEEE80211_RATE_ERP_G; 228 shift = ieee80211_vif_get_shift(vif); 229 } 230 231 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift); 232 233 /* CTS duration */ 234 dur = ieee80211_frame_duration(sband->band, 10, bitrate, 235 erp, short_preamble, shift); 236 /* Data frame duration */ 237 dur += ieee80211_frame_duration(sband->band, frame_len, bitrate, 238 erp, short_preamble, shift); 239 /* ACK duration */ 240 dur += ieee80211_frame_duration(sband->band, 10, bitrate, 241 erp, short_preamble, shift); 242 243 return cpu_to_le16(dur); 244 } 245 EXPORT_SYMBOL(ieee80211_rts_duration); 246 247 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw, 248 struct ieee80211_vif *vif, 249 size_t frame_len, 250 const struct ieee80211_tx_info *frame_txctl) 251 { 252 struct ieee80211_local *local = hw_to_local(hw); 253 struct ieee80211_rate *rate; 254 struct ieee80211_sub_if_data *sdata; 255 bool short_preamble; 256 int erp, shift = 0, bitrate; 257 u16 dur; 258 struct ieee80211_supported_band *sband; 259 260 sband = local->hw.wiphy->bands[frame_txctl->band]; 261 262 short_preamble = false; 263 264 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx]; 265 erp = 0; 266 if (vif) { 267 sdata = vif_to_sdata(vif); 268 short_preamble = sdata->vif.bss_conf.use_short_preamble; 269 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 270 erp = rate->flags & IEEE80211_RATE_ERP_G; 271 shift = ieee80211_vif_get_shift(vif); 272 } 273 274 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift); 275 276 /* Data frame duration */ 277 dur = ieee80211_frame_duration(sband->band, frame_len, bitrate, 278 erp, short_preamble, shift); 279 if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) { 280 /* ACK duration */ 281 dur += ieee80211_frame_duration(sband->band, 10, bitrate, 282 erp, short_preamble, shift); 283 } 284 285 return cpu_to_le16(dur); 286 } 287 EXPORT_SYMBOL(ieee80211_ctstoself_duration); 288 289 void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue) 290 { 291 struct ieee80211_sub_if_data *sdata; 292 int n_acs = IEEE80211_NUM_ACS; 293 294 if (local->hw.queues < IEEE80211_NUM_ACS) 295 n_acs = 1; 296 297 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 298 int ac; 299 300 if (!sdata->dev) 301 continue; 302 303 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE && 304 local->queue_stop_reasons[sdata->vif.cab_queue] != 0) 305 continue; 306 307 for (ac = 0; ac < n_acs; ac++) { 308 int ac_queue = sdata->vif.hw_queue[ac]; 309 310 if (ac_queue == queue || 311 (sdata->vif.cab_queue == queue && 312 local->queue_stop_reasons[ac_queue] == 0 && 313 skb_queue_empty(&local->pending[ac_queue]))) 314 netif_wake_subqueue(sdata->dev, ac); 315 } 316 } 317 } 318 319 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue, 320 enum queue_stop_reason reason) 321 { 322 struct ieee80211_local *local = hw_to_local(hw); 323 324 trace_wake_queue(local, queue, reason); 325 326 if (WARN_ON(queue >= hw->queues)) 327 return; 328 329 if (!test_bit(reason, &local->queue_stop_reasons[queue])) 330 return; 331 332 __clear_bit(reason, &local->queue_stop_reasons[queue]); 333 334 if (local->queue_stop_reasons[queue] != 0) 335 /* someone still has this queue stopped */ 336 return; 337 338 if (skb_queue_empty(&local->pending[queue])) { 339 rcu_read_lock(); 340 ieee80211_propagate_queue_wake(local, queue); 341 rcu_read_unlock(); 342 } else 343 tasklet_schedule(&local->tx_pending_tasklet); 344 } 345 346 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue, 347 enum queue_stop_reason reason) 348 { 349 struct ieee80211_local *local = hw_to_local(hw); 350 unsigned long flags; 351 352 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 353 __ieee80211_wake_queue(hw, queue, reason); 354 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 355 } 356 357 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue) 358 { 359 ieee80211_wake_queue_by_reason(hw, queue, 360 IEEE80211_QUEUE_STOP_REASON_DRIVER); 361 } 362 EXPORT_SYMBOL(ieee80211_wake_queue); 363 364 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue, 365 enum queue_stop_reason reason) 366 { 367 struct ieee80211_local *local = hw_to_local(hw); 368 struct ieee80211_sub_if_data *sdata; 369 int n_acs = IEEE80211_NUM_ACS; 370 371 trace_stop_queue(local, queue, reason); 372 373 if (WARN_ON(queue >= hw->queues)) 374 return; 375 376 if (test_bit(reason, &local->queue_stop_reasons[queue])) 377 return; 378 379 __set_bit(reason, &local->queue_stop_reasons[queue]); 380 381 if (local->hw.queues < IEEE80211_NUM_ACS) 382 n_acs = 1; 383 384 rcu_read_lock(); 385 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 386 int ac; 387 388 if (!sdata->dev) 389 continue; 390 391 for (ac = 0; ac < n_acs; ac++) { 392 if (sdata->vif.hw_queue[ac] == queue || 393 sdata->vif.cab_queue == queue) 394 netif_stop_subqueue(sdata->dev, ac); 395 } 396 } 397 rcu_read_unlock(); 398 } 399 400 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue, 401 enum queue_stop_reason reason) 402 { 403 struct ieee80211_local *local = hw_to_local(hw); 404 unsigned long flags; 405 406 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 407 __ieee80211_stop_queue(hw, queue, reason); 408 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 409 } 410 411 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue) 412 { 413 ieee80211_stop_queue_by_reason(hw, queue, 414 IEEE80211_QUEUE_STOP_REASON_DRIVER); 415 } 416 EXPORT_SYMBOL(ieee80211_stop_queue); 417 418 void ieee80211_add_pending_skb(struct ieee80211_local *local, 419 struct sk_buff *skb) 420 { 421 struct ieee80211_hw *hw = &local->hw; 422 unsigned long flags; 423 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 424 int queue = info->hw_queue; 425 426 if (WARN_ON(!info->control.vif)) { 427 ieee80211_free_txskb(&local->hw, skb); 428 return; 429 } 430 431 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 432 __ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 433 __skb_queue_tail(&local->pending[queue], skb); 434 __ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 435 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 436 } 437 438 void ieee80211_add_pending_skbs(struct ieee80211_local *local, 439 struct sk_buff_head *skbs) 440 { 441 struct ieee80211_hw *hw = &local->hw; 442 struct sk_buff *skb; 443 unsigned long flags; 444 int queue, i; 445 446 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 447 while ((skb = skb_dequeue(skbs))) { 448 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 449 450 if (WARN_ON(!info->control.vif)) { 451 ieee80211_free_txskb(&local->hw, skb); 452 continue; 453 } 454 455 queue = info->hw_queue; 456 457 __ieee80211_stop_queue(hw, queue, 458 IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 459 460 __skb_queue_tail(&local->pending[queue], skb); 461 } 462 463 for (i = 0; i < hw->queues; i++) 464 __ieee80211_wake_queue(hw, i, 465 IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 466 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 467 } 468 469 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw, 470 unsigned long queues, 471 enum queue_stop_reason reason) 472 { 473 struct ieee80211_local *local = hw_to_local(hw); 474 unsigned long flags; 475 int i; 476 477 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 478 479 for_each_set_bit(i, &queues, hw->queues) 480 __ieee80211_stop_queue(hw, i, reason); 481 482 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 483 } 484 485 void ieee80211_stop_queues(struct ieee80211_hw *hw) 486 { 487 ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 488 IEEE80211_QUEUE_STOP_REASON_DRIVER); 489 } 490 EXPORT_SYMBOL(ieee80211_stop_queues); 491 492 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue) 493 { 494 struct ieee80211_local *local = hw_to_local(hw); 495 unsigned long flags; 496 int ret; 497 498 if (WARN_ON(queue >= hw->queues)) 499 return true; 500 501 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 502 ret = test_bit(IEEE80211_QUEUE_STOP_REASON_DRIVER, 503 &local->queue_stop_reasons[queue]); 504 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 505 return ret; 506 } 507 EXPORT_SYMBOL(ieee80211_queue_stopped); 508 509 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw, 510 unsigned long queues, 511 enum queue_stop_reason reason) 512 { 513 struct ieee80211_local *local = hw_to_local(hw); 514 unsigned long flags; 515 int i; 516 517 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 518 519 for_each_set_bit(i, &queues, hw->queues) 520 __ieee80211_wake_queue(hw, i, reason); 521 522 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 523 } 524 525 void ieee80211_wake_queues(struct ieee80211_hw *hw) 526 { 527 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 528 IEEE80211_QUEUE_STOP_REASON_DRIVER); 529 } 530 EXPORT_SYMBOL(ieee80211_wake_queues); 531 532 void ieee80211_flush_queues(struct ieee80211_local *local, 533 struct ieee80211_sub_if_data *sdata) 534 { 535 u32 queues; 536 537 if (!local->ops->flush) 538 return; 539 540 if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) { 541 int ac; 542 543 queues = 0; 544 545 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) 546 queues |= BIT(sdata->vif.hw_queue[ac]); 547 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE) 548 queues |= BIT(sdata->vif.cab_queue); 549 } else { 550 /* all queues */ 551 queues = BIT(local->hw.queues) - 1; 552 } 553 554 ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP, 555 IEEE80211_QUEUE_STOP_REASON_FLUSH); 556 557 drv_flush(local, sdata, queues, false); 558 559 ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP, 560 IEEE80211_QUEUE_STOP_REASON_FLUSH); 561 } 562 563 static void __iterate_active_interfaces(struct ieee80211_local *local, 564 u32 iter_flags, 565 void (*iterator)(void *data, u8 *mac, 566 struct ieee80211_vif *vif), 567 void *data) 568 { 569 struct ieee80211_sub_if_data *sdata; 570 571 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 572 switch (sdata->vif.type) { 573 case NL80211_IFTYPE_MONITOR: 574 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE)) 575 continue; 576 break; 577 case NL80211_IFTYPE_AP_VLAN: 578 continue; 579 default: 580 break; 581 } 582 if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) && 583 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 584 continue; 585 if (ieee80211_sdata_running(sdata)) 586 iterator(data, sdata->vif.addr, 587 &sdata->vif); 588 } 589 590 sdata = rcu_dereference_check(local->monitor_sdata, 591 lockdep_is_held(&local->iflist_mtx) || 592 lockdep_rtnl_is_held()); 593 if (sdata && 594 (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL || 595 sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 596 iterator(data, sdata->vif.addr, &sdata->vif); 597 } 598 599 void ieee80211_iterate_active_interfaces( 600 struct ieee80211_hw *hw, u32 iter_flags, 601 void (*iterator)(void *data, u8 *mac, 602 struct ieee80211_vif *vif), 603 void *data) 604 { 605 struct ieee80211_local *local = hw_to_local(hw); 606 607 mutex_lock(&local->iflist_mtx); 608 __iterate_active_interfaces(local, iter_flags, iterator, data); 609 mutex_unlock(&local->iflist_mtx); 610 } 611 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces); 612 613 void ieee80211_iterate_active_interfaces_atomic( 614 struct ieee80211_hw *hw, u32 iter_flags, 615 void (*iterator)(void *data, u8 *mac, 616 struct ieee80211_vif *vif), 617 void *data) 618 { 619 struct ieee80211_local *local = hw_to_local(hw); 620 621 rcu_read_lock(); 622 __iterate_active_interfaces(local, iter_flags, iterator, data); 623 rcu_read_unlock(); 624 } 625 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic); 626 627 void ieee80211_iterate_active_interfaces_rtnl( 628 struct ieee80211_hw *hw, u32 iter_flags, 629 void (*iterator)(void *data, u8 *mac, 630 struct ieee80211_vif *vif), 631 void *data) 632 { 633 struct ieee80211_local *local = hw_to_local(hw); 634 635 ASSERT_RTNL(); 636 637 __iterate_active_interfaces(local, iter_flags, iterator, data); 638 } 639 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_rtnl); 640 641 struct ieee80211_vif *wdev_to_ieee80211_vif(struct wireless_dev *wdev) 642 { 643 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 644 645 if (!ieee80211_sdata_running(sdata) || 646 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 647 return NULL; 648 return &sdata->vif; 649 } 650 EXPORT_SYMBOL_GPL(wdev_to_ieee80211_vif); 651 652 /* 653 * Nothing should have been stuffed into the workqueue during 654 * the suspend->resume cycle. If this WARN is seen then there 655 * is a bug with either the driver suspend or something in 656 * mac80211 stuffing into the workqueue which we haven't yet 657 * cleared during mac80211's suspend cycle. 658 */ 659 static bool ieee80211_can_queue_work(struct ieee80211_local *local) 660 { 661 if (WARN(local->suspended && !local->resuming, 662 "queueing ieee80211 work while going to suspend\n")) 663 return false; 664 665 return true; 666 } 667 668 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work) 669 { 670 struct ieee80211_local *local = hw_to_local(hw); 671 672 if (!ieee80211_can_queue_work(local)) 673 return; 674 675 queue_work(local->workqueue, work); 676 } 677 EXPORT_SYMBOL(ieee80211_queue_work); 678 679 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw, 680 struct delayed_work *dwork, 681 unsigned long delay) 682 { 683 struct ieee80211_local *local = hw_to_local(hw); 684 685 if (!ieee80211_can_queue_work(local)) 686 return; 687 688 queue_delayed_work(local->workqueue, dwork, delay); 689 } 690 EXPORT_SYMBOL(ieee80211_queue_delayed_work); 691 692 u32 ieee802_11_parse_elems_crc(const u8 *start, size_t len, bool action, 693 struct ieee802_11_elems *elems, 694 u64 filter, u32 crc) 695 { 696 size_t left = len; 697 const u8 *pos = start; 698 bool calc_crc = filter != 0; 699 DECLARE_BITMAP(seen_elems, 256); 700 const u8 *ie; 701 702 bitmap_zero(seen_elems, 256); 703 memset(elems, 0, sizeof(*elems)); 704 elems->ie_start = start; 705 elems->total_len = len; 706 707 while (left >= 2) { 708 u8 id, elen; 709 bool elem_parse_failed; 710 711 id = *pos++; 712 elen = *pos++; 713 left -= 2; 714 715 if (elen > left) { 716 elems->parse_error = true; 717 break; 718 } 719 720 switch (id) { 721 case WLAN_EID_SSID: 722 case WLAN_EID_SUPP_RATES: 723 case WLAN_EID_FH_PARAMS: 724 case WLAN_EID_DS_PARAMS: 725 case WLAN_EID_CF_PARAMS: 726 case WLAN_EID_TIM: 727 case WLAN_EID_IBSS_PARAMS: 728 case WLAN_EID_CHALLENGE: 729 case WLAN_EID_RSN: 730 case WLAN_EID_ERP_INFO: 731 case WLAN_EID_EXT_SUPP_RATES: 732 case WLAN_EID_HT_CAPABILITY: 733 case WLAN_EID_HT_OPERATION: 734 case WLAN_EID_VHT_CAPABILITY: 735 case WLAN_EID_VHT_OPERATION: 736 case WLAN_EID_MESH_ID: 737 case WLAN_EID_MESH_CONFIG: 738 case WLAN_EID_PEER_MGMT: 739 case WLAN_EID_PREQ: 740 case WLAN_EID_PREP: 741 case WLAN_EID_PERR: 742 case WLAN_EID_RANN: 743 case WLAN_EID_CHANNEL_SWITCH: 744 case WLAN_EID_EXT_CHANSWITCH_ANN: 745 case WLAN_EID_COUNTRY: 746 case WLAN_EID_PWR_CONSTRAINT: 747 case WLAN_EID_TIMEOUT_INTERVAL: 748 case WLAN_EID_SECONDARY_CHANNEL_OFFSET: 749 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH: 750 case WLAN_EID_CHAN_SWITCH_PARAM: 751 /* 752 * not listing WLAN_EID_CHANNEL_SWITCH_WRAPPER -- it seems possible 753 * that if the content gets bigger it might be needed more than once 754 */ 755 if (test_bit(id, seen_elems)) { 756 elems->parse_error = true; 757 left -= elen; 758 pos += elen; 759 continue; 760 } 761 break; 762 } 763 764 if (calc_crc && id < 64 && (filter & (1ULL << id))) 765 crc = crc32_be(crc, pos - 2, elen + 2); 766 767 elem_parse_failed = false; 768 769 switch (id) { 770 case WLAN_EID_SSID: 771 elems->ssid = pos; 772 elems->ssid_len = elen; 773 break; 774 case WLAN_EID_SUPP_RATES: 775 elems->supp_rates = pos; 776 elems->supp_rates_len = elen; 777 break; 778 case WLAN_EID_DS_PARAMS: 779 if (elen >= 1) 780 elems->ds_params = pos; 781 else 782 elem_parse_failed = true; 783 break; 784 case WLAN_EID_TIM: 785 if (elen >= sizeof(struct ieee80211_tim_ie)) { 786 elems->tim = (void *)pos; 787 elems->tim_len = elen; 788 } else 789 elem_parse_failed = true; 790 break; 791 case WLAN_EID_CHALLENGE: 792 elems->challenge = pos; 793 elems->challenge_len = elen; 794 break; 795 case WLAN_EID_VENDOR_SPECIFIC: 796 if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 && 797 pos[2] == 0xf2) { 798 /* Microsoft OUI (00:50:F2) */ 799 800 if (calc_crc) 801 crc = crc32_be(crc, pos - 2, elen + 2); 802 803 if (elen >= 5 && pos[3] == 2) { 804 /* OUI Type 2 - WMM IE */ 805 if (pos[4] == 0) { 806 elems->wmm_info = pos; 807 elems->wmm_info_len = elen; 808 } else if (pos[4] == 1) { 809 elems->wmm_param = pos; 810 elems->wmm_param_len = elen; 811 } 812 } 813 } 814 break; 815 case WLAN_EID_RSN: 816 elems->rsn = pos; 817 elems->rsn_len = elen; 818 break; 819 case WLAN_EID_ERP_INFO: 820 if (elen >= 1) 821 elems->erp_info = pos; 822 else 823 elem_parse_failed = true; 824 break; 825 case WLAN_EID_EXT_SUPP_RATES: 826 elems->ext_supp_rates = pos; 827 elems->ext_supp_rates_len = elen; 828 break; 829 case WLAN_EID_HT_CAPABILITY: 830 if (elen >= sizeof(struct ieee80211_ht_cap)) 831 elems->ht_cap_elem = (void *)pos; 832 else 833 elem_parse_failed = true; 834 break; 835 case WLAN_EID_HT_OPERATION: 836 if (elen >= sizeof(struct ieee80211_ht_operation)) 837 elems->ht_operation = (void *)pos; 838 else 839 elem_parse_failed = true; 840 break; 841 case WLAN_EID_VHT_CAPABILITY: 842 if (elen >= sizeof(struct ieee80211_vht_cap)) 843 elems->vht_cap_elem = (void *)pos; 844 else 845 elem_parse_failed = true; 846 break; 847 case WLAN_EID_VHT_OPERATION: 848 if (elen >= sizeof(struct ieee80211_vht_operation)) 849 elems->vht_operation = (void *)pos; 850 else 851 elem_parse_failed = true; 852 break; 853 case WLAN_EID_OPMODE_NOTIF: 854 if (elen > 0) 855 elems->opmode_notif = pos; 856 else 857 elem_parse_failed = true; 858 break; 859 case WLAN_EID_MESH_ID: 860 elems->mesh_id = pos; 861 elems->mesh_id_len = elen; 862 break; 863 case WLAN_EID_MESH_CONFIG: 864 if (elen >= sizeof(struct ieee80211_meshconf_ie)) 865 elems->mesh_config = (void *)pos; 866 else 867 elem_parse_failed = true; 868 break; 869 case WLAN_EID_PEER_MGMT: 870 elems->peering = pos; 871 elems->peering_len = elen; 872 break; 873 case WLAN_EID_MESH_AWAKE_WINDOW: 874 if (elen >= 2) 875 elems->awake_window = (void *)pos; 876 break; 877 case WLAN_EID_PREQ: 878 elems->preq = pos; 879 elems->preq_len = elen; 880 break; 881 case WLAN_EID_PREP: 882 elems->prep = pos; 883 elems->prep_len = elen; 884 break; 885 case WLAN_EID_PERR: 886 elems->perr = pos; 887 elems->perr_len = elen; 888 break; 889 case WLAN_EID_RANN: 890 if (elen >= sizeof(struct ieee80211_rann_ie)) 891 elems->rann = (void *)pos; 892 else 893 elem_parse_failed = true; 894 break; 895 case WLAN_EID_CHANNEL_SWITCH: 896 if (elen != sizeof(struct ieee80211_channel_sw_ie)) { 897 elem_parse_failed = true; 898 break; 899 } 900 elems->ch_switch_ie = (void *)pos; 901 break; 902 case WLAN_EID_EXT_CHANSWITCH_ANN: 903 if (elen != sizeof(struct ieee80211_ext_chansw_ie)) { 904 elem_parse_failed = true; 905 break; 906 } 907 elems->ext_chansw_ie = (void *)pos; 908 break; 909 case WLAN_EID_SECONDARY_CHANNEL_OFFSET: 910 if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) { 911 elem_parse_failed = true; 912 break; 913 } 914 elems->sec_chan_offs = (void *)pos; 915 break; 916 case WLAN_EID_CHAN_SWITCH_PARAM: 917 if (elen != 918 sizeof(*elems->mesh_chansw_params_ie)) { 919 elem_parse_failed = true; 920 break; 921 } 922 elems->mesh_chansw_params_ie = (void *)pos; 923 break; 924 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH: 925 if (!action || 926 elen != sizeof(*elems->wide_bw_chansw_ie)) { 927 elem_parse_failed = true; 928 break; 929 } 930 elems->wide_bw_chansw_ie = (void *)pos; 931 break; 932 case WLAN_EID_CHANNEL_SWITCH_WRAPPER: 933 if (action) { 934 elem_parse_failed = true; 935 break; 936 } 937 /* 938 * This is a bit tricky, but as we only care about 939 * the wide bandwidth channel switch element, so 940 * just parse it out manually. 941 */ 942 ie = cfg80211_find_ie(WLAN_EID_WIDE_BW_CHANNEL_SWITCH, 943 pos, elen); 944 if (ie) { 945 if (ie[1] == sizeof(*elems->wide_bw_chansw_ie)) 946 elems->wide_bw_chansw_ie = 947 (void *)(ie + 2); 948 else 949 elem_parse_failed = true; 950 } 951 break; 952 case WLAN_EID_COUNTRY: 953 elems->country_elem = pos; 954 elems->country_elem_len = elen; 955 break; 956 case WLAN_EID_PWR_CONSTRAINT: 957 if (elen != 1) { 958 elem_parse_failed = true; 959 break; 960 } 961 elems->pwr_constr_elem = pos; 962 break; 963 case WLAN_EID_TIMEOUT_INTERVAL: 964 if (elen >= sizeof(struct ieee80211_timeout_interval_ie)) 965 elems->timeout_int = (void *)pos; 966 else 967 elem_parse_failed = true; 968 break; 969 default: 970 break; 971 } 972 973 if (elem_parse_failed) 974 elems->parse_error = true; 975 else 976 __set_bit(id, seen_elems); 977 978 left -= elen; 979 pos += elen; 980 } 981 982 if (left != 0) 983 elems->parse_error = true; 984 985 return crc; 986 } 987 988 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata, 989 bool bss_notify) 990 { 991 struct ieee80211_local *local = sdata->local; 992 struct ieee80211_tx_queue_params qparam; 993 struct ieee80211_chanctx_conf *chanctx_conf; 994 int ac; 995 bool use_11b, enable_qos; 996 int aCWmin, aCWmax; 997 998 if (!local->ops->conf_tx) 999 return; 1000 1001 if (local->hw.queues < IEEE80211_NUM_ACS) 1002 return; 1003 1004 memset(&qparam, 0, sizeof(qparam)); 1005 1006 rcu_read_lock(); 1007 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 1008 use_11b = (chanctx_conf && 1009 chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) && 1010 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE); 1011 rcu_read_unlock(); 1012 1013 /* 1014 * By default disable QoS in STA mode for old access points, which do 1015 * not support 802.11e. New APs will provide proper queue parameters, 1016 * that we will configure later. 1017 */ 1018 enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION); 1019 1020 /* Set defaults according to 802.11-2007 Table 7-37 */ 1021 aCWmax = 1023; 1022 if (use_11b) 1023 aCWmin = 31; 1024 else 1025 aCWmin = 15; 1026 1027 /* Confiure old 802.11b/g medium access rules. */ 1028 qparam.cw_max = aCWmax; 1029 qparam.cw_min = aCWmin; 1030 qparam.txop = 0; 1031 qparam.aifs = 2; 1032 1033 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 1034 /* Update if QoS is enabled. */ 1035 if (enable_qos) { 1036 switch (ac) { 1037 case IEEE80211_AC_BK: 1038 qparam.cw_max = aCWmax; 1039 qparam.cw_min = aCWmin; 1040 qparam.txop = 0; 1041 qparam.aifs = 7; 1042 break; 1043 /* never happens but let's not leave undefined */ 1044 default: 1045 case IEEE80211_AC_BE: 1046 qparam.cw_max = aCWmax; 1047 qparam.cw_min = aCWmin; 1048 qparam.txop = 0; 1049 qparam.aifs = 3; 1050 break; 1051 case IEEE80211_AC_VI: 1052 qparam.cw_max = aCWmin; 1053 qparam.cw_min = (aCWmin + 1) / 2 - 1; 1054 if (use_11b) 1055 qparam.txop = 6016/32; 1056 else 1057 qparam.txop = 3008/32; 1058 qparam.aifs = 2; 1059 break; 1060 case IEEE80211_AC_VO: 1061 qparam.cw_max = (aCWmin + 1) / 2 - 1; 1062 qparam.cw_min = (aCWmin + 1) / 4 - 1; 1063 if (use_11b) 1064 qparam.txop = 3264/32; 1065 else 1066 qparam.txop = 1504/32; 1067 qparam.aifs = 2; 1068 break; 1069 } 1070 } 1071 1072 qparam.uapsd = false; 1073 1074 sdata->tx_conf[ac] = qparam; 1075 drv_conf_tx(local, sdata, ac, &qparam); 1076 } 1077 1078 if (sdata->vif.type != NL80211_IFTYPE_MONITOR && 1079 sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) { 1080 sdata->vif.bss_conf.qos = enable_qos; 1081 if (bss_notify) 1082 ieee80211_bss_info_change_notify(sdata, 1083 BSS_CHANGED_QOS); 1084 } 1085 } 1086 1087 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata, 1088 u16 transaction, u16 auth_alg, u16 status, 1089 const u8 *extra, size_t extra_len, const u8 *da, 1090 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx, 1091 u32 tx_flags) 1092 { 1093 struct ieee80211_local *local = sdata->local; 1094 struct sk_buff *skb; 1095 struct ieee80211_mgmt *mgmt; 1096 int err; 1097 1098 /* 24 + 6 = header + auth_algo + auth_transaction + status_code */ 1099 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24 + 6 + extra_len); 1100 if (!skb) 1101 return; 1102 1103 skb_reserve(skb, local->hw.extra_tx_headroom); 1104 1105 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6); 1106 memset(mgmt, 0, 24 + 6); 1107 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 1108 IEEE80211_STYPE_AUTH); 1109 memcpy(mgmt->da, da, ETH_ALEN); 1110 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 1111 memcpy(mgmt->bssid, bssid, ETH_ALEN); 1112 mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg); 1113 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction); 1114 mgmt->u.auth.status_code = cpu_to_le16(status); 1115 if (extra) 1116 memcpy(skb_put(skb, extra_len), extra, extra_len); 1117 1118 if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) { 1119 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED); 1120 err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx); 1121 WARN_ON(err); 1122 } 1123 1124 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT | 1125 tx_flags; 1126 ieee80211_tx_skb(sdata, skb); 1127 } 1128 1129 void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, 1130 const u8 *bssid, u16 stype, u16 reason, 1131 bool send_frame, u8 *frame_buf) 1132 { 1133 struct ieee80211_local *local = sdata->local; 1134 struct sk_buff *skb; 1135 struct ieee80211_mgmt *mgmt = (void *)frame_buf; 1136 1137 /* build frame */ 1138 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); 1139 mgmt->duration = 0; /* initialize only */ 1140 mgmt->seq_ctrl = 0; /* initialize only */ 1141 memcpy(mgmt->da, bssid, ETH_ALEN); 1142 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 1143 memcpy(mgmt->bssid, bssid, ETH_ALEN); 1144 /* u.deauth.reason_code == u.disassoc.reason_code */ 1145 mgmt->u.deauth.reason_code = cpu_to_le16(reason); 1146 1147 if (send_frame) { 1148 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 1149 IEEE80211_DEAUTH_FRAME_LEN); 1150 if (!skb) 1151 return; 1152 1153 skb_reserve(skb, local->hw.extra_tx_headroom); 1154 1155 /* copy in frame */ 1156 memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN), 1157 mgmt, IEEE80211_DEAUTH_FRAME_LEN); 1158 1159 if (sdata->vif.type != NL80211_IFTYPE_STATION || 1160 !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED)) 1161 IEEE80211_SKB_CB(skb)->flags |= 1162 IEEE80211_TX_INTFL_DONT_ENCRYPT; 1163 1164 ieee80211_tx_skb(sdata, skb); 1165 } 1166 } 1167 1168 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer, 1169 size_t buffer_len, const u8 *ie, size_t ie_len, 1170 enum ieee80211_band band, u32 rate_mask, 1171 struct cfg80211_chan_def *chandef) 1172 { 1173 struct ieee80211_supported_band *sband; 1174 u8 *pos = buffer, *end = buffer + buffer_len; 1175 size_t offset = 0, noffset; 1176 int supp_rates_len, i; 1177 u8 rates[32]; 1178 int num_rates; 1179 int ext_rates_len; 1180 int shift; 1181 u32 rate_flags; 1182 1183 sband = local->hw.wiphy->bands[band]; 1184 if (WARN_ON_ONCE(!sband)) 1185 return 0; 1186 1187 rate_flags = ieee80211_chandef_rate_flags(chandef); 1188 shift = ieee80211_chandef_get_shift(chandef); 1189 1190 num_rates = 0; 1191 for (i = 0; i < sband->n_bitrates; i++) { 1192 if ((BIT(i) & rate_mask) == 0) 1193 continue; /* skip rate */ 1194 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 1195 continue; 1196 1197 rates[num_rates++] = 1198 (u8) DIV_ROUND_UP(sband->bitrates[i].bitrate, 1199 (1 << shift) * 5); 1200 } 1201 1202 supp_rates_len = min_t(int, num_rates, 8); 1203 1204 if (end - pos < 2 + supp_rates_len) 1205 goto out_err; 1206 *pos++ = WLAN_EID_SUPP_RATES; 1207 *pos++ = supp_rates_len; 1208 memcpy(pos, rates, supp_rates_len); 1209 pos += supp_rates_len; 1210 1211 /* insert "request information" if in custom IEs */ 1212 if (ie && ie_len) { 1213 static const u8 before_extrates[] = { 1214 WLAN_EID_SSID, 1215 WLAN_EID_SUPP_RATES, 1216 WLAN_EID_REQUEST, 1217 }; 1218 noffset = ieee80211_ie_split(ie, ie_len, 1219 before_extrates, 1220 ARRAY_SIZE(before_extrates), 1221 offset); 1222 if (end - pos < noffset - offset) 1223 goto out_err; 1224 memcpy(pos, ie + offset, noffset - offset); 1225 pos += noffset - offset; 1226 offset = noffset; 1227 } 1228 1229 ext_rates_len = num_rates - supp_rates_len; 1230 if (ext_rates_len > 0) { 1231 if (end - pos < 2 + ext_rates_len) 1232 goto out_err; 1233 *pos++ = WLAN_EID_EXT_SUPP_RATES; 1234 *pos++ = ext_rates_len; 1235 memcpy(pos, rates + supp_rates_len, ext_rates_len); 1236 pos += ext_rates_len; 1237 } 1238 1239 if (chandef->chan && sband->band == IEEE80211_BAND_2GHZ) { 1240 if (end - pos < 3) 1241 goto out_err; 1242 *pos++ = WLAN_EID_DS_PARAMS; 1243 *pos++ = 1; 1244 *pos++ = ieee80211_frequency_to_channel( 1245 chandef->chan->center_freq); 1246 } 1247 1248 /* insert custom IEs that go before HT */ 1249 if (ie && ie_len) { 1250 static const u8 before_ht[] = { 1251 WLAN_EID_SSID, 1252 WLAN_EID_SUPP_RATES, 1253 WLAN_EID_REQUEST, 1254 WLAN_EID_EXT_SUPP_RATES, 1255 WLAN_EID_DS_PARAMS, 1256 WLAN_EID_SUPPORTED_REGULATORY_CLASSES, 1257 }; 1258 noffset = ieee80211_ie_split(ie, ie_len, 1259 before_ht, ARRAY_SIZE(before_ht), 1260 offset); 1261 if (end - pos < noffset - offset) 1262 goto out_err; 1263 memcpy(pos, ie + offset, noffset - offset); 1264 pos += noffset - offset; 1265 offset = noffset; 1266 } 1267 1268 if (sband->ht_cap.ht_supported) { 1269 if (end - pos < 2 + sizeof(struct ieee80211_ht_cap)) 1270 goto out_err; 1271 pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap, 1272 sband->ht_cap.cap); 1273 } 1274 1275 /* 1276 * If adding more here, adjust code in main.c 1277 * that calculates local->scan_ies_len. 1278 */ 1279 1280 /* insert custom IEs that go before VHT */ 1281 if (ie && ie_len) { 1282 static const u8 before_vht[] = { 1283 WLAN_EID_SSID, 1284 WLAN_EID_SUPP_RATES, 1285 WLAN_EID_REQUEST, 1286 WLAN_EID_EXT_SUPP_RATES, 1287 WLAN_EID_DS_PARAMS, 1288 WLAN_EID_SUPPORTED_REGULATORY_CLASSES, 1289 WLAN_EID_HT_CAPABILITY, 1290 WLAN_EID_BSS_COEX_2040, 1291 WLAN_EID_EXT_CAPABILITY, 1292 WLAN_EID_SSID_LIST, 1293 WLAN_EID_CHANNEL_USAGE, 1294 WLAN_EID_INTERWORKING, 1295 /* mesh ID can't happen here */ 1296 /* 60 GHz can't happen here right now */ 1297 }; 1298 noffset = ieee80211_ie_split(ie, ie_len, 1299 before_vht, ARRAY_SIZE(before_vht), 1300 offset); 1301 if (end - pos < noffset - offset) 1302 goto out_err; 1303 memcpy(pos, ie + offset, noffset - offset); 1304 pos += noffset - offset; 1305 offset = noffset; 1306 } 1307 1308 if (sband->vht_cap.vht_supported) { 1309 if (end - pos < 2 + sizeof(struct ieee80211_vht_cap)) 1310 goto out_err; 1311 pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap, 1312 sband->vht_cap.cap); 1313 } 1314 1315 /* add any remaining custom IEs */ 1316 if (ie && ie_len) { 1317 noffset = ie_len; 1318 if (end - pos < noffset - offset) 1319 goto out_err; 1320 memcpy(pos, ie + offset, noffset - offset); 1321 pos += noffset - offset; 1322 } 1323 1324 return pos - buffer; 1325 out_err: 1326 WARN_ONCE(1, "not enough space for preq IEs\n"); 1327 return pos - buffer; 1328 } 1329 1330 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata, 1331 u8 *dst, u32 ratemask, 1332 struct ieee80211_channel *chan, 1333 const u8 *ssid, size_t ssid_len, 1334 const u8 *ie, size_t ie_len, 1335 bool directed) 1336 { 1337 struct ieee80211_local *local = sdata->local; 1338 struct cfg80211_chan_def chandef; 1339 struct sk_buff *skb; 1340 struct ieee80211_mgmt *mgmt; 1341 int ies_len; 1342 1343 /* 1344 * Do not send DS Channel parameter for directed probe requests 1345 * in order to maximize the chance that we get a response. Some 1346 * badly-behaved APs don't respond when this parameter is included. 1347 */ 1348 chandef.width = sdata->vif.bss_conf.chandef.width; 1349 if (directed) 1350 chandef.chan = NULL; 1351 else 1352 chandef.chan = chan; 1353 1354 skb = ieee80211_probereq_get(&local->hw, &sdata->vif, 1355 ssid, ssid_len, 100 + ie_len); 1356 if (!skb) 1357 return NULL; 1358 1359 ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb), 1360 skb_tailroom(skb), 1361 ie, ie_len, chan->band, 1362 ratemask, &chandef); 1363 skb_put(skb, ies_len); 1364 1365 if (dst) { 1366 mgmt = (struct ieee80211_mgmt *) skb->data; 1367 memcpy(mgmt->da, dst, ETH_ALEN); 1368 memcpy(mgmt->bssid, dst, ETH_ALEN); 1369 } 1370 1371 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; 1372 1373 return skb; 1374 } 1375 1376 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst, 1377 const u8 *ssid, size_t ssid_len, 1378 const u8 *ie, size_t ie_len, 1379 u32 ratemask, bool directed, u32 tx_flags, 1380 struct ieee80211_channel *channel, bool scan) 1381 { 1382 struct sk_buff *skb; 1383 1384 skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel, 1385 ssid, ssid_len, 1386 ie, ie_len, directed); 1387 if (skb) { 1388 IEEE80211_SKB_CB(skb)->flags |= tx_flags; 1389 if (scan) 1390 ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band); 1391 else 1392 ieee80211_tx_skb(sdata, skb); 1393 } 1394 } 1395 1396 u32 ieee80211_sta_get_rates(struct ieee80211_sub_if_data *sdata, 1397 struct ieee802_11_elems *elems, 1398 enum ieee80211_band band, u32 *basic_rates) 1399 { 1400 struct ieee80211_supported_band *sband; 1401 size_t num_rates; 1402 u32 supp_rates, rate_flags; 1403 int i, j, shift; 1404 sband = sdata->local->hw.wiphy->bands[band]; 1405 1406 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 1407 shift = ieee80211_vif_get_shift(&sdata->vif); 1408 1409 if (WARN_ON(!sband)) 1410 return 1; 1411 1412 num_rates = sband->n_bitrates; 1413 supp_rates = 0; 1414 for (i = 0; i < elems->supp_rates_len + 1415 elems->ext_supp_rates_len; i++) { 1416 u8 rate = 0; 1417 int own_rate; 1418 bool is_basic; 1419 if (i < elems->supp_rates_len) 1420 rate = elems->supp_rates[i]; 1421 else if (elems->ext_supp_rates) 1422 rate = elems->ext_supp_rates 1423 [i - elems->supp_rates_len]; 1424 own_rate = 5 * (rate & 0x7f); 1425 is_basic = !!(rate & 0x80); 1426 1427 if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY) 1428 continue; 1429 1430 for (j = 0; j < num_rates; j++) { 1431 int brate; 1432 if ((rate_flags & sband->bitrates[j].flags) 1433 != rate_flags) 1434 continue; 1435 1436 brate = DIV_ROUND_UP(sband->bitrates[j].bitrate, 1437 1 << shift); 1438 1439 if (brate == own_rate) { 1440 supp_rates |= BIT(j); 1441 if (basic_rates && is_basic) 1442 *basic_rates |= BIT(j); 1443 } 1444 } 1445 } 1446 return supp_rates; 1447 } 1448 1449 void ieee80211_stop_device(struct ieee80211_local *local) 1450 { 1451 ieee80211_led_radio(local, false); 1452 ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO); 1453 1454 cancel_work_sync(&local->reconfig_filter); 1455 1456 flush_workqueue(local->workqueue); 1457 drv_stop(local); 1458 } 1459 1460 static void ieee80211_assign_chanctx(struct ieee80211_local *local, 1461 struct ieee80211_sub_if_data *sdata) 1462 { 1463 struct ieee80211_chanctx_conf *conf; 1464 struct ieee80211_chanctx *ctx; 1465 1466 if (!local->use_chanctx) 1467 return; 1468 1469 mutex_lock(&local->chanctx_mtx); 1470 conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 1471 lockdep_is_held(&local->chanctx_mtx)); 1472 if (conf) { 1473 ctx = container_of(conf, struct ieee80211_chanctx, conf); 1474 drv_assign_vif_chanctx(local, sdata, ctx); 1475 } 1476 mutex_unlock(&local->chanctx_mtx); 1477 } 1478 1479 int ieee80211_reconfig(struct ieee80211_local *local) 1480 { 1481 struct ieee80211_hw *hw = &local->hw; 1482 struct ieee80211_sub_if_data *sdata; 1483 struct ieee80211_chanctx *ctx; 1484 struct sta_info *sta; 1485 int res, i; 1486 bool reconfig_due_to_wowlan = false; 1487 struct ieee80211_sub_if_data *sched_scan_sdata; 1488 bool sched_scan_stopped = false; 1489 1490 #ifdef CONFIG_PM 1491 if (local->suspended) 1492 local->resuming = true; 1493 1494 if (local->wowlan) { 1495 res = drv_resume(local); 1496 local->wowlan = false; 1497 if (res < 0) { 1498 local->resuming = false; 1499 return res; 1500 } 1501 if (res == 0) 1502 goto wake_up; 1503 WARN_ON(res > 1); 1504 /* 1505 * res is 1, which means the driver requested 1506 * to go through a regular reset on wakeup. 1507 */ 1508 reconfig_due_to_wowlan = true; 1509 } 1510 #endif 1511 /* everything else happens only if HW was up & running */ 1512 if (!local->open_count) 1513 goto wake_up; 1514 1515 /* 1516 * Upon resume hardware can sometimes be goofy due to 1517 * various platform / driver / bus issues, so restarting 1518 * the device may at times not work immediately. Propagate 1519 * the error. 1520 */ 1521 res = drv_start(local); 1522 if (res) { 1523 WARN(local->suspended, "Hardware became unavailable " 1524 "upon resume. This could be a software issue " 1525 "prior to suspend or a hardware issue.\n"); 1526 return res; 1527 } 1528 1529 /* setup fragmentation threshold */ 1530 drv_set_frag_threshold(local, hw->wiphy->frag_threshold); 1531 1532 /* setup RTS threshold */ 1533 drv_set_rts_threshold(local, hw->wiphy->rts_threshold); 1534 1535 /* reset coverage class */ 1536 drv_set_coverage_class(local, hw->wiphy->coverage_class); 1537 1538 ieee80211_led_radio(local, true); 1539 ieee80211_mod_tpt_led_trig(local, 1540 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0); 1541 1542 /* add interfaces */ 1543 sdata = rtnl_dereference(local->monitor_sdata); 1544 if (sdata) { 1545 /* in HW restart it exists already */ 1546 WARN_ON(local->resuming); 1547 res = drv_add_interface(local, sdata); 1548 if (WARN_ON(res)) { 1549 RCU_INIT_POINTER(local->monitor_sdata, NULL); 1550 synchronize_net(); 1551 kfree(sdata); 1552 } 1553 } 1554 1555 list_for_each_entry(sdata, &local->interfaces, list) { 1556 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN && 1557 sdata->vif.type != NL80211_IFTYPE_MONITOR && 1558 ieee80211_sdata_running(sdata)) 1559 res = drv_add_interface(local, sdata); 1560 } 1561 1562 /* add channel contexts */ 1563 if (local->use_chanctx) { 1564 mutex_lock(&local->chanctx_mtx); 1565 list_for_each_entry(ctx, &local->chanctx_list, list) 1566 WARN_ON(drv_add_chanctx(local, ctx)); 1567 mutex_unlock(&local->chanctx_mtx); 1568 1569 list_for_each_entry(sdata, &local->interfaces, list) { 1570 if (!ieee80211_sdata_running(sdata)) 1571 continue; 1572 ieee80211_assign_chanctx(local, sdata); 1573 } 1574 1575 sdata = rtnl_dereference(local->monitor_sdata); 1576 if (sdata && ieee80211_sdata_running(sdata)) 1577 ieee80211_assign_chanctx(local, sdata); 1578 } 1579 1580 /* add STAs back */ 1581 mutex_lock(&local->sta_mtx); 1582 list_for_each_entry(sta, &local->sta_list, list) { 1583 enum ieee80211_sta_state state; 1584 1585 if (!sta->uploaded) 1586 continue; 1587 1588 /* AP-mode stations will be added later */ 1589 if (sta->sdata->vif.type == NL80211_IFTYPE_AP) 1590 continue; 1591 1592 for (state = IEEE80211_STA_NOTEXIST; 1593 state < sta->sta_state; state++) 1594 WARN_ON(drv_sta_state(local, sta->sdata, sta, state, 1595 state + 1)); 1596 } 1597 mutex_unlock(&local->sta_mtx); 1598 1599 /* reconfigure tx conf */ 1600 if (hw->queues >= IEEE80211_NUM_ACS) { 1601 list_for_each_entry(sdata, &local->interfaces, list) { 1602 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN || 1603 sdata->vif.type == NL80211_IFTYPE_MONITOR || 1604 !ieee80211_sdata_running(sdata)) 1605 continue; 1606 1607 for (i = 0; i < IEEE80211_NUM_ACS; i++) 1608 drv_conf_tx(local, sdata, i, 1609 &sdata->tx_conf[i]); 1610 } 1611 } 1612 1613 /* reconfigure hardware */ 1614 ieee80211_hw_config(local, ~0); 1615 1616 ieee80211_configure_filter(local); 1617 1618 /* Finally also reconfigure all the BSS information */ 1619 list_for_each_entry(sdata, &local->interfaces, list) { 1620 u32 changed; 1621 1622 if (!ieee80211_sdata_running(sdata)) 1623 continue; 1624 1625 /* common change flags for all interface types */ 1626 changed = BSS_CHANGED_ERP_CTS_PROT | 1627 BSS_CHANGED_ERP_PREAMBLE | 1628 BSS_CHANGED_ERP_SLOT | 1629 BSS_CHANGED_HT | 1630 BSS_CHANGED_BASIC_RATES | 1631 BSS_CHANGED_BEACON_INT | 1632 BSS_CHANGED_BSSID | 1633 BSS_CHANGED_CQM | 1634 BSS_CHANGED_QOS | 1635 BSS_CHANGED_IDLE | 1636 BSS_CHANGED_TXPOWER; 1637 1638 switch (sdata->vif.type) { 1639 case NL80211_IFTYPE_STATION: 1640 changed |= BSS_CHANGED_ASSOC | 1641 BSS_CHANGED_ARP_FILTER | 1642 BSS_CHANGED_PS; 1643 1644 /* Re-send beacon info report to the driver */ 1645 if (sdata->u.mgd.have_beacon) 1646 changed |= BSS_CHANGED_BEACON_INFO; 1647 1648 sdata_lock(sdata); 1649 ieee80211_bss_info_change_notify(sdata, changed); 1650 sdata_unlock(sdata); 1651 break; 1652 case NL80211_IFTYPE_ADHOC: 1653 changed |= BSS_CHANGED_IBSS; 1654 /* fall through */ 1655 case NL80211_IFTYPE_AP: 1656 changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS; 1657 1658 if (sdata->vif.type == NL80211_IFTYPE_AP) { 1659 changed |= BSS_CHANGED_AP_PROBE_RESP; 1660 1661 if (rcu_access_pointer(sdata->u.ap.beacon)) 1662 drv_start_ap(local, sdata); 1663 } 1664 1665 /* fall through */ 1666 case NL80211_IFTYPE_MESH_POINT: 1667 if (sdata->vif.bss_conf.enable_beacon) { 1668 changed |= BSS_CHANGED_BEACON | 1669 BSS_CHANGED_BEACON_ENABLED; 1670 ieee80211_bss_info_change_notify(sdata, changed); 1671 } 1672 break; 1673 case NL80211_IFTYPE_WDS: 1674 case NL80211_IFTYPE_AP_VLAN: 1675 case NL80211_IFTYPE_MONITOR: 1676 case NL80211_IFTYPE_P2P_DEVICE: 1677 /* nothing to do */ 1678 break; 1679 case NL80211_IFTYPE_UNSPECIFIED: 1680 case NUM_NL80211_IFTYPES: 1681 case NL80211_IFTYPE_P2P_CLIENT: 1682 case NL80211_IFTYPE_P2P_GO: 1683 WARN_ON(1); 1684 break; 1685 } 1686 } 1687 1688 ieee80211_recalc_ps(local, -1); 1689 1690 /* 1691 * The sta might be in psm against the ap (e.g. because 1692 * this was the state before a hw restart), so we 1693 * explicitly send a null packet in order to make sure 1694 * it'll sync against the ap (and get out of psm). 1695 */ 1696 if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) { 1697 list_for_each_entry(sdata, &local->interfaces, list) { 1698 if (sdata->vif.type != NL80211_IFTYPE_STATION) 1699 continue; 1700 if (!sdata->u.mgd.associated) 1701 continue; 1702 1703 ieee80211_send_nullfunc(local, sdata, 0); 1704 } 1705 } 1706 1707 /* APs are now beaconing, add back stations */ 1708 mutex_lock(&local->sta_mtx); 1709 list_for_each_entry(sta, &local->sta_list, list) { 1710 enum ieee80211_sta_state state; 1711 1712 if (!sta->uploaded) 1713 continue; 1714 1715 if (sta->sdata->vif.type != NL80211_IFTYPE_AP) 1716 continue; 1717 1718 for (state = IEEE80211_STA_NOTEXIST; 1719 state < sta->sta_state; state++) 1720 WARN_ON(drv_sta_state(local, sta->sdata, sta, state, 1721 state + 1)); 1722 } 1723 mutex_unlock(&local->sta_mtx); 1724 1725 /* add back keys */ 1726 list_for_each_entry(sdata, &local->interfaces, list) 1727 if (ieee80211_sdata_running(sdata)) 1728 ieee80211_enable_keys(sdata); 1729 1730 wake_up: 1731 local->in_reconfig = false; 1732 barrier(); 1733 1734 if (local->monitors == local->open_count && local->monitors > 0) 1735 ieee80211_add_virtual_monitor(local); 1736 1737 /* 1738 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation 1739 * sessions can be established after a resume. 1740 * 1741 * Also tear down aggregation sessions since reconfiguring 1742 * them in a hardware restart scenario is not easily done 1743 * right now, and the hardware will have lost information 1744 * about the sessions, but we and the AP still think they 1745 * are active. This is really a workaround though. 1746 */ 1747 if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) { 1748 mutex_lock(&local->sta_mtx); 1749 1750 list_for_each_entry(sta, &local->sta_list, list) { 1751 ieee80211_sta_tear_down_BA_sessions( 1752 sta, AGG_STOP_LOCAL_REQUEST); 1753 clear_sta_flag(sta, WLAN_STA_BLOCK_BA); 1754 } 1755 1756 mutex_unlock(&local->sta_mtx); 1757 } 1758 1759 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 1760 IEEE80211_QUEUE_STOP_REASON_SUSPEND); 1761 1762 /* 1763 * Reconfigure sched scan if it was interrupted by FW restart or 1764 * suspend. 1765 */ 1766 mutex_lock(&local->mtx); 1767 sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata, 1768 lockdep_is_held(&local->mtx)); 1769 if (sched_scan_sdata && local->sched_scan_req) 1770 /* 1771 * Sched scan stopped, but we don't want to report it. Instead, 1772 * we're trying to reschedule. 1773 */ 1774 if (__ieee80211_request_sched_scan_start(sched_scan_sdata, 1775 local->sched_scan_req)) 1776 sched_scan_stopped = true; 1777 mutex_unlock(&local->mtx); 1778 1779 if (sched_scan_stopped) 1780 cfg80211_sched_scan_stopped_rtnl(local->hw.wiphy); 1781 1782 /* 1783 * If this is for hw restart things are still running. 1784 * We may want to change that later, however. 1785 */ 1786 if (!local->suspended || reconfig_due_to_wowlan) 1787 drv_restart_complete(local); 1788 1789 if (!local->suspended) 1790 return 0; 1791 1792 #ifdef CONFIG_PM 1793 /* first set suspended false, then resuming */ 1794 local->suspended = false; 1795 mb(); 1796 local->resuming = false; 1797 1798 list_for_each_entry(sdata, &local->interfaces, list) { 1799 if (!ieee80211_sdata_running(sdata)) 1800 continue; 1801 if (sdata->vif.type == NL80211_IFTYPE_STATION) 1802 ieee80211_sta_restart(sdata); 1803 } 1804 1805 mod_timer(&local->sta_cleanup, jiffies + 1); 1806 #else 1807 WARN_ON(1); 1808 #endif 1809 1810 return 0; 1811 } 1812 1813 void ieee80211_resume_disconnect(struct ieee80211_vif *vif) 1814 { 1815 struct ieee80211_sub_if_data *sdata; 1816 struct ieee80211_local *local; 1817 struct ieee80211_key *key; 1818 1819 if (WARN_ON(!vif)) 1820 return; 1821 1822 sdata = vif_to_sdata(vif); 1823 local = sdata->local; 1824 1825 if (WARN_ON(!local->resuming)) 1826 return; 1827 1828 if (WARN_ON(vif->type != NL80211_IFTYPE_STATION)) 1829 return; 1830 1831 sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME; 1832 1833 mutex_lock(&local->key_mtx); 1834 list_for_each_entry(key, &sdata->key_list, list) 1835 key->flags |= KEY_FLAG_TAINTED; 1836 mutex_unlock(&local->key_mtx); 1837 } 1838 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect); 1839 1840 void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata) 1841 { 1842 struct ieee80211_local *local = sdata->local; 1843 struct ieee80211_chanctx_conf *chanctx_conf; 1844 struct ieee80211_chanctx *chanctx; 1845 1846 mutex_lock(&local->chanctx_mtx); 1847 1848 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 1849 lockdep_is_held(&local->chanctx_mtx)); 1850 1851 if (WARN_ON_ONCE(!chanctx_conf)) 1852 goto unlock; 1853 1854 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf); 1855 ieee80211_recalc_smps_chanctx(local, chanctx); 1856 unlock: 1857 mutex_unlock(&local->chanctx_mtx); 1858 } 1859 1860 void ieee80211_recalc_min_chandef(struct ieee80211_sub_if_data *sdata) 1861 { 1862 struct ieee80211_local *local = sdata->local; 1863 struct ieee80211_chanctx_conf *chanctx_conf; 1864 struct ieee80211_chanctx *chanctx; 1865 1866 mutex_lock(&local->chanctx_mtx); 1867 1868 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 1869 lockdep_is_held(&local->chanctx_mtx)); 1870 1871 if (WARN_ON_ONCE(!chanctx_conf)) 1872 goto unlock; 1873 1874 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf); 1875 ieee80211_recalc_chanctx_min_def(local, chanctx); 1876 unlock: 1877 mutex_unlock(&local->chanctx_mtx); 1878 } 1879 1880 static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id) 1881 { 1882 int i; 1883 1884 for (i = 0; i < n_ids; i++) 1885 if (ids[i] == id) 1886 return true; 1887 return false; 1888 } 1889 1890 /** 1891 * ieee80211_ie_split - split an IE buffer according to ordering 1892 * 1893 * @ies: the IE buffer 1894 * @ielen: the length of the IE buffer 1895 * @ids: an array with element IDs that are allowed before 1896 * the split 1897 * @n_ids: the size of the element ID array 1898 * @offset: offset where to start splitting in the buffer 1899 * 1900 * This function splits an IE buffer by updating the @offset 1901 * variable to point to the location where the buffer should be 1902 * split. 1903 * 1904 * It assumes that the given IE buffer is well-formed, this 1905 * has to be guaranteed by the caller! 1906 * 1907 * It also assumes that the IEs in the buffer are ordered 1908 * correctly, if not the result of using this function will not 1909 * be ordered correctly either, i.e. it does no reordering. 1910 * 1911 * The function returns the offset where the next part of the 1912 * buffer starts, which may be @ielen if the entire (remainder) 1913 * of the buffer should be used. 1914 */ 1915 size_t ieee80211_ie_split(const u8 *ies, size_t ielen, 1916 const u8 *ids, int n_ids, size_t offset) 1917 { 1918 size_t pos = offset; 1919 1920 while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos])) 1921 pos += 2 + ies[pos + 1]; 1922 1923 return pos; 1924 } 1925 1926 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset) 1927 { 1928 size_t pos = offset; 1929 1930 while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC) 1931 pos += 2 + ies[pos + 1]; 1932 1933 return pos; 1934 } 1935 1936 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata, 1937 int rssi_min_thold, 1938 int rssi_max_thold) 1939 { 1940 trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold); 1941 1942 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) 1943 return; 1944 1945 /* 1946 * Scale up threshold values before storing it, as the RSSI averaging 1947 * algorithm uses a scaled up value as well. Change this scaling 1948 * factor if the RSSI averaging algorithm changes. 1949 */ 1950 sdata->u.mgd.rssi_min_thold = rssi_min_thold*16; 1951 sdata->u.mgd.rssi_max_thold = rssi_max_thold*16; 1952 } 1953 1954 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif, 1955 int rssi_min_thold, 1956 int rssi_max_thold) 1957 { 1958 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 1959 1960 WARN_ON(rssi_min_thold == rssi_max_thold || 1961 rssi_min_thold > rssi_max_thold); 1962 1963 _ieee80211_enable_rssi_reports(sdata, rssi_min_thold, 1964 rssi_max_thold); 1965 } 1966 EXPORT_SYMBOL(ieee80211_enable_rssi_reports); 1967 1968 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif) 1969 { 1970 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 1971 1972 _ieee80211_enable_rssi_reports(sdata, 0, 0); 1973 } 1974 EXPORT_SYMBOL(ieee80211_disable_rssi_reports); 1975 1976 u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap, 1977 u16 cap) 1978 { 1979 __le16 tmp; 1980 1981 *pos++ = WLAN_EID_HT_CAPABILITY; 1982 *pos++ = sizeof(struct ieee80211_ht_cap); 1983 memset(pos, 0, sizeof(struct ieee80211_ht_cap)); 1984 1985 /* capability flags */ 1986 tmp = cpu_to_le16(cap); 1987 memcpy(pos, &tmp, sizeof(u16)); 1988 pos += sizeof(u16); 1989 1990 /* AMPDU parameters */ 1991 *pos++ = ht_cap->ampdu_factor | 1992 (ht_cap->ampdu_density << 1993 IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT); 1994 1995 /* MCS set */ 1996 memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs)); 1997 pos += sizeof(ht_cap->mcs); 1998 1999 /* extended capabilities */ 2000 pos += sizeof(__le16); 2001 2002 /* BF capabilities */ 2003 pos += sizeof(__le32); 2004 2005 /* antenna selection */ 2006 pos += sizeof(u8); 2007 2008 return pos; 2009 } 2010 2011 u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap, 2012 u32 cap) 2013 { 2014 __le32 tmp; 2015 2016 *pos++ = WLAN_EID_VHT_CAPABILITY; 2017 *pos++ = sizeof(struct ieee80211_vht_cap); 2018 memset(pos, 0, sizeof(struct ieee80211_vht_cap)); 2019 2020 /* capability flags */ 2021 tmp = cpu_to_le32(cap); 2022 memcpy(pos, &tmp, sizeof(u32)); 2023 pos += sizeof(u32); 2024 2025 /* VHT MCS set */ 2026 memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs)); 2027 pos += sizeof(vht_cap->vht_mcs); 2028 2029 return pos; 2030 } 2031 2032 u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap, 2033 const struct cfg80211_chan_def *chandef, 2034 u16 prot_mode) 2035 { 2036 struct ieee80211_ht_operation *ht_oper; 2037 /* Build HT Information */ 2038 *pos++ = WLAN_EID_HT_OPERATION; 2039 *pos++ = sizeof(struct ieee80211_ht_operation); 2040 ht_oper = (struct ieee80211_ht_operation *)pos; 2041 ht_oper->primary_chan = ieee80211_frequency_to_channel( 2042 chandef->chan->center_freq); 2043 switch (chandef->width) { 2044 case NL80211_CHAN_WIDTH_160: 2045 case NL80211_CHAN_WIDTH_80P80: 2046 case NL80211_CHAN_WIDTH_80: 2047 case NL80211_CHAN_WIDTH_40: 2048 if (chandef->center_freq1 > chandef->chan->center_freq) 2049 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; 2050 else 2051 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW; 2052 break; 2053 default: 2054 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE; 2055 break; 2056 } 2057 if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 && 2058 chandef->width != NL80211_CHAN_WIDTH_20_NOHT && 2059 chandef->width != NL80211_CHAN_WIDTH_20) 2060 ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY; 2061 2062 ht_oper->operation_mode = cpu_to_le16(prot_mode); 2063 ht_oper->stbc_param = 0x0000; 2064 2065 /* It seems that Basic MCS set and Supported MCS set 2066 are identical for the first 10 bytes */ 2067 memset(&ht_oper->basic_set, 0, 16); 2068 memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10); 2069 2070 return pos + sizeof(struct ieee80211_ht_operation); 2071 } 2072 2073 void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan, 2074 const struct ieee80211_ht_operation *ht_oper, 2075 struct cfg80211_chan_def *chandef) 2076 { 2077 enum nl80211_channel_type channel_type; 2078 2079 if (!ht_oper) { 2080 cfg80211_chandef_create(chandef, control_chan, 2081 NL80211_CHAN_NO_HT); 2082 return; 2083 } 2084 2085 switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { 2086 case IEEE80211_HT_PARAM_CHA_SEC_NONE: 2087 channel_type = NL80211_CHAN_HT20; 2088 break; 2089 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: 2090 channel_type = NL80211_CHAN_HT40PLUS; 2091 break; 2092 case IEEE80211_HT_PARAM_CHA_SEC_BELOW: 2093 channel_type = NL80211_CHAN_HT40MINUS; 2094 break; 2095 default: 2096 channel_type = NL80211_CHAN_NO_HT; 2097 } 2098 2099 cfg80211_chandef_create(chandef, control_chan, channel_type); 2100 } 2101 2102 int ieee80211_parse_bitrates(struct cfg80211_chan_def *chandef, 2103 const struct ieee80211_supported_band *sband, 2104 const u8 *srates, int srates_len, u32 *rates) 2105 { 2106 u32 rate_flags = ieee80211_chandef_rate_flags(chandef); 2107 int shift = ieee80211_chandef_get_shift(chandef); 2108 struct ieee80211_rate *br; 2109 int brate, rate, i, j, count = 0; 2110 2111 *rates = 0; 2112 2113 for (i = 0; i < srates_len; i++) { 2114 rate = srates[i] & 0x7f; 2115 2116 for (j = 0; j < sband->n_bitrates; j++) { 2117 br = &sband->bitrates[j]; 2118 if ((rate_flags & br->flags) != rate_flags) 2119 continue; 2120 2121 brate = DIV_ROUND_UP(br->bitrate, (1 << shift) * 5); 2122 if (brate == rate) { 2123 *rates |= BIT(j); 2124 count++; 2125 break; 2126 } 2127 } 2128 } 2129 return count; 2130 } 2131 2132 int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata, 2133 struct sk_buff *skb, bool need_basic, 2134 enum ieee80211_band band) 2135 { 2136 struct ieee80211_local *local = sdata->local; 2137 struct ieee80211_supported_band *sband; 2138 int rate, shift; 2139 u8 i, rates, *pos; 2140 u32 basic_rates = sdata->vif.bss_conf.basic_rates; 2141 u32 rate_flags; 2142 2143 shift = ieee80211_vif_get_shift(&sdata->vif); 2144 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 2145 sband = local->hw.wiphy->bands[band]; 2146 rates = 0; 2147 for (i = 0; i < sband->n_bitrates; i++) { 2148 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2149 continue; 2150 rates++; 2151 } 2152 if (rates > 8) 2153 rates = 8; 2154 2155 if (skb_tailroom(skb) < rates + 2) 2156 return -ENOMEM; 2157 2158 pos = skb_put(skb, rates + 2); 2159 *pos++ = WLAN_EID_SUPP_RATES; 2160 *pos++ = rates; 2161 for (i = 0; i < rates; i++) { 2162 u8 basic = 0; 2163 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2164 continue; 2165 2166 if (need_basic && basic_rates & BIT(i)) 2167 basic = 0x80; 2168 rate = sband->bitrates[i].bitrate; 2169 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate, 2170 5 * (1 << shift)); 2171 *pos++ = basic | (u8) rate; 2172 } 2173 2174 return 0; 2175 } 2176 2177 int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata, 2178 struct sk_buff *skb, bool need_basic, 2179 enum ieee80211_band band) 2180 { 2181 struct ieee80211_local *local = sdata->local; 2182 struct ieee80211_supported_band *sband; 2183 int rate, shift; 2184 u8 i, exrates, *pos; 2185 u32 basic_rates = sdata->vif.bss_conf.basic_rates; 2186 u32 rate_flags; 2187 2188 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 2189 shift = ieee80211_vif_get_shift(&sdata->vif); 2190 2191 sband = local->hw.wiphy->bands[band]; 2192 exrates = 0; 2193 for (i = 0; i < sband->n_bitrates; i++) { 2194 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2195 continue; 2196 exrates++; 2197 } 2198 2199 if (exrates > 8) 2200 exrates -= 8; 2201 else 2202 exrates = 0; 2203 2204 if (skb_tailroom(skb) < exrates + 2) 2205 return -ENOMEM; 2206 2207 if (exrates) { 2208 pos = skb_put(skb, exrates + 2); 2209 *pos++ = WLAN_EID_EXT_SUPP_RATES; 2210 *pos++ = exrates; 2211 for (i = 8; i < sband->n_bitrates; i++) { 2212 u8 basic = 0; 2213 if ((rate_flags & sband->bitrates[i].flags) 2214 != rate_flags) 2215 continue; 2216 if (need_basic && basic_rates & BIT(i)) 2217 basic = 0x80; 2218 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate, 2219 5 * (1 << shift)); 2220 *pos++ = basic | (u8) rate; 2221 } 2222 } 2223 return 0; 2224 } 2225 2226 int ieee80211_ave_rssi(struct ieee80211_vif *vif) 2227 { 2228 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2229 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; 2230 2231 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) { 2232 /* non-managed type inferfaces */ 2233 return 0; 2234 } 2235 return ifmgd->ave_beacon_signal / 16; 2236 } 2237 EXPORT_SYMBOL_GPL(ieee80211_ave_rssi); 2238 2239 u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs) 2240 { 2241 if (!mcs) 2242 return 1; 2243 2244 /* TODO: consider rx_highest */ 2245 2246 if (mcs->rx_mask[3]) 2247 return 4; 2248 if (mcs->rx_mask[2]) 2249 return 3; 2250 if (mcs->rx_mask[1]) 2251 return 2; 2252 return 1; 2253 } 2254 2255 /** 2256 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame 2257 * @local: mac80211 hw info struct 2258 * @status: RX status 2259 * @mpdu_len: total MPDU length (including FCS) 2260 * @mpdu_offset: offset into MPDU to calculate timestamp at 2261 * 2262 * This function calculates the RX timestamp at the given MPDU offset, taking 2263 * into account what the RX timestamp was. An offset of 0 will just normalize 2264 * the timestamp to TSF at beginning of MPDU reception. 2265 */ 2266 u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local, 2267 struct ieee80211_rx_status *status, 2268 unsigned int mpdu_len, 2269 unsigned int mpdu_offset) 2270 { 2271 u64 ts = status->mactime; 2272 struct rate_info ri; 2273 u16 rate; 2274 2275 if (WARN_ON(!ieee80211_have_rx_timestamp(status))) 2276 return 0; 2277 2278 memset(&ri, 0, sizeof(ri)); 2279 2280 /* Fill cfg80211 rate info */ 2281 if (status->flag & RX_FLAG_HT) { 2282 ri.mcs = status->rate_idx; 2283 ri.flags |= RATE_INFO_FLAGS_MCS; 2284 if (status->flag & RX_FLAG_40MHZ) 2285 ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 2286 if (status->flag & RX_FLAG_SHORT_GI) 2287 ri.flags |= RATE_INFO_FLAGS_SHORT_GI; 2288 } else if (status->flag & RX_FLAG_VHT) { 2289 ri.flags |= RATE_INFO_FLAGS_VHT_MCS; 2290 ri.mcs = status->rate_idx; 2291 ri.nss = status->vht_nss; 2292 if (status->flag & RX_FLAG_40MHZ) 2293 ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 2294 if (status->vht_flag & RX_VHT_FLAG_80MHZ) 2295 ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH; 2296 if (status->vht_flag & RX_VHT_FLAG_80P80MHZ) 2297 ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH; 2298 if (status->vht_flag & RX_VHT_FLAG_160MHZ) 2299 ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH; 2300 if (status->flag & RX_FLAG_SHORT_GI) 2301 ri.flags |= RATE_INFO_FLAGS_SHORT_GI; 2302 } else { 2303 struct ieee80211_supported_band *sband; 2304 int shift = 0; 2305 int bitrate; 2306 2307 if (status->flag & RX_FLAG_10MHZ) 2308 shift = 1; 2309 if (status->flag & RX_FLAG_5MHZ) 2310 shift = 2; 2311 2312 sband = local->hw.wiphy->bands[status->band]; 2313 bitrate = sband->bitrates[status->rate_idx].bitrate; 2314 ri.legacy = DIV_ROUND_UP(bitrate, (1 << shift)); 2315 } 2316 2317 rate = cfg80211_calculate_bitrate(&ri); 2318 if (WARN_ONCE(!rate, 2319 "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n", 2320 status->flag, status->rate_idx, status->vht_nss)) 2321 return 0; 2322 2323 /* rewind from end of MPDU */ 2324 if (status->flag & RX_FLAG_MACTIME_END) 2325 ts -= mpdu_len * 8 * 10 / rate; 2326 2327 ts += mpdu_offset * 8 * 10 / rate; 2328 2329 return ts; 2330 } 2331 2332 void ieee80211_dfs_cac_cancel(struct ieee80211_local *local) 2333 { 2334 struct ieee80211_sub_if_data *sdata; 2335 struct cfg80211_chan_def chandef; 2336 2337 mutex_lock(&local->mtx); 2338 mutex_lock(&local->iflist_mtx); 2339 list_for_each_entry(sdata, &local->interfaces, list) { 2340 /* it might be waiting for the local->mtx, but then 2341 * by the time it gets it, sdata->wdev.cac_started 2342 * will no longer be true 2343 */ 2344 cancel_delayed_work(&sdata->dfs_cac_timer_work); 2345 2346 if (sdata->wdev.cac_started) { 2347 chandef = sdata->vif.bss_conf.chandef; 2348 ieee80211_vif_release_channel(sdata); 2349 cfg80211_cac_event(sdata->dev, 2350 &chandef, 2351 NL80211_RADAR_CAC_ABORTED, 2352 GFP_KERNEL); 2353 } 2354 } 2355 mutex_unlock(&local->iflist_mtx); 2356 mutex_unlock(&local->mtx); 2357 } 2358 2359 void ieee80211_dfs_radar_detected_work(struct work_struct *work) 2360 { 2361 struct ieee80211_local *local = 2362 container_of(work, struct ieee80211_local, radar_detected_work); 2363 struct cfg80211_chan_def chandef = local->hw.conf.chandef; 2364 2365 ieee80211_dfs_cac_cancel(local); 2366 2367 if (local->use_chanctx) 2368 /* currently not handled */ 2369 WARN_ON(1); 2370 else 2371 cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL); 2372 } 2373 2374 void ieee80211_radar_detected(struct ieee80211_hw *hw) 2375 { 2376 struct ieee80211_local *local = hw_to_local(hw); 2377 2378 trace_api_radar_detected(local); 2379 2380 ieee80211_queue_work(hw, &local->radar_detected_work); 2381 } 2382 EXPORT_SYMBOL(ieee80211_radar_detected); 2383 2384 u32 ieee80211_chandef_downgrade(struct cfg80211_chan_def *c) 2385 { 2386 u32 ret; 2387 int tmp; 2388 2389 switch (c->width) { 2390 case NL80211_CHAN_WIDTH_20: 2391 c->width = NL80211_CHAN_WIDTH_20_NOHT; 2392 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2393 break; 2394 case NL80211_CHAN_WIDTH_40: 2395 c->width = NL80211_CHAN_WIDTH_20; 2396 c->center_freq1 = c->chan->center_freq; 2397 ret = IEEE80211_STA_DISABLE_40MHZ | 2398 IEEE80211_STA_DISABLE_VHT; 2399 break; 2400 case NL80211_CHAN_WIDTH_80: 2401 tmp = (30 + c->chan->center_freq - c->center_freq1)/20; 2402 /* n_P40 */ 2403 tmp /= 2; 2404 /* freq_P40 */ 2405 c->center_freq1 = c->center_freq1 - 20 + 40 * tmp; 2406 c->width = NL80211_CHAN_WIDTH_40; 2407 ret = IEEE80211_STA_DISABLE_VHT; 2408 break; 2409 case NL80211_CHAN_WIDTH_80P80: 2410 c->center_freq2 = 0; 2411 c->width = NL80211_CHAN_WIDTH_80; 2412 ret = IEEE80211_STA_DISABLE_80P80MHZ | 2413 IEEE80211_STA_DISABLE_160MHZ; 2414 break; 2415 case NL80211_CHAN_WIDTH_160: 2416 /* n_P20 */ 2417 tmp = (70 + c->chan->center_freq - c->center_freq1)/20; 2418 /* n_P80 */ 2419 tmp /= 4; 2420 c->center_freq1 = c->center_freq1 - 40 + 80 * tmp; 2421 c->width = NL80211_CHAN_WIDTH_80; 2422 ret = IEEE80211_STA_DISABLE_80P80MHZ | 2423 IEEE80211_STA_DISABLE_160MHZ; 2424 break; 2425 default: 2426 case NL80211_CHAN_WIDTH_20_NOHT: 2427 WARN_ON_ONCE(1); 2428 c->width = NL80211_CHAN_WIDTH_20_NOHT; 2429 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2430 break; 2431 case NL80211_CHAN_WIDTH_5: 2432 case NL80211_CHAN_WIDTH_10: 2433 WARN_ON_ONCE(1); 2434 /* keep c->width */ 2435 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2436 break; 2437 } 2438 2439 WARN_ON_ONCE(!cfg80211_chandef_valid(c)); 2440 2441 return ret; 2442 } 2443 2444 /* 2445 * Returns true if smps_mode_new is strictly more restrictive than 2446 * smps_mode_old. 2447 */ 2448 bool ieee80211_smps_is_restrictive(enum ieee80211_smps_mode smps_mode_old, 2449 enum ieee80211_smps_mode smps_mode_new) 2450 { 2451 if (WARN_ON_ONCE(smps_mode_old == IEEE80211_SMPS_AUTOMATIC || 2452 smps_mode_new == IEEE80211_SMPS_AUTOMATIC)) 2453 return false; 2454 2455 switch (smps_mode_old) { 2456 case IEEE80211_SMPS_STATIC: 2457 return false; 2458 case IEEE80211_SMPS_DYNAMIC: 2459 return smps_mode_new == IEEE80211_SMPS_STATIC; 2460 case IEEE80211_SMPS_OFF: 2461 return smps_mode_new != IEEE80211_SMPS_OFF; 2462 default: 2463 WARN_ON(1); 2464 } 2465 2466 return false; 2467 } 2468 2469 int ieee80211_send_action_csa(struct ieee80211_sub_if_data *sdata, 2470 struct cfg80211_csa_settings *csa_settings) 2471 { 2472 struct sk_buff *skb; 2473 struct ieee80211_mgmt *mgmt; 2474 struct ieee80211_local *local = sdata->local; 2475 int freq; 2476 int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.chan_switch) + 2477 sizeof(mgmt->u.action.u.chan_switch); 2478 u8 *pos; 2479 2480 if (sdata->vif.type != NL80211_IFTYPE_ADHOC && 2481 sdata->vif.type != NL80211_IFTYPE_MESH_POINT) 2482 return -EOPNOTSUPP; 2483 2484 skb = dev_alloc_skb(local->tx_headroom + hdr_len + 2485 5 + /* channel switch announcement element */ 2486 3 + /* secondary channel offset element */ 2487 8); /* mesh channel switch parameters element */ 2488 if (!skb) 2489 return -ENOMEM; 2490 2491 skb_reserve(skb, local->tx_headroom); 2492 mgmt = (struct ieee80211_mgmt *)skb_put(skb, hdr_len); 2493 memset(mgmt, 0, hdr_len); 2494 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 2495 IEEE80211_STYPE_ACTION); 2496 2497 eth_broadcast_addr(mgmt->da); 2498 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 2499 if (ieee80211_vif_is_mesh(&sdata->vif)) { 2500 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN); 2501 } else { 2502 struct ieee80211_if_ibss *ifibss = &sdata->u.ibss; 2503 memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN); 2504 } 2505 mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT; 2506 mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH; 2507 pos = skb_put(skb, 5); 2508 *pos++ = WLAN_EID_CHANNEL_SWITCH; /* EID */ 2509 *pos++ = 3; /* IE length */ 2510 *pos++ = csa_settings->block_tx ? 1 : 0; /* CSA mode */ 2511 freq = csa_settings->chandef.chan->center_freq; 2512 *pos++ = ieee80211_frequency_to_channel(freq); /* channel */ 2513 *pos++ = csa_settings->count; /* count */ 2514 2515 if (csa_settings->chandef.width == NL80211_CHAN_WIDTH_40) { 2516 enum nl80211_channel_type ch_type; 2517 2518 skb_put(skb, 3); 2519 *pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET; /* EID */ 2520 *pos++ = 1; /* IE length */ 2521 ch_type = cfg80211_get_chandef_type(&csa_settings->chandef); 2522 if (ch_type == NL80211_CHAN_HT40PLUS) 2523 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; 2524 else 2525 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW; 2526 } 2527 2528 if (ieee80211_vif_is_mesh(&sdata->vif)) { 2529 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 2530 2531 skb_put(skb, 8); 2532 *pos++ = WLAN_EID_CHAN_SWITCH_PARAM; /* EID */ 2533 *pos++ = 6; /* IE length */ 2534 *pos++ = sdata->u.mesh.mshcfg.dot11MeshTTL; /* Mesh TTL */ 2535 *pos = 0x00; /* Mesh Flag: Tx Restrict, Initiator, Reason */ 2536 *pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR; 2537 *pos++ |= csa_settings->block_tx ? 2538 WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00; 2539 put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); /* Reason Cd */ 2540 pos += 2; 2541 put_unaligned_le16(ifmsh->pre_value, pos);/* Precedence Value */ 2542 pos += 2; 2543 } 2544 2545 ieee80211_tx_skb(sdata, skb); 2546 return 0; 2547 } 2548 2549 bool ieee80211_cs_valid(const struct ieee80211_cipher_scheme *cs) 2550 { 2551 return !(cs == NULL || cs->cipher == 0 || 2552 cs->hdr_len < cs->pn_len + cs->pn_off || 2553 cs->hdr_len <= cs->key_idx_off || 2554 cs->key_idx_shift > 7 || 2555 cs->key_idx_mask == 0); 2556 } 2557 2558 bool ieee80211_cs_list_valid(const struct ieee80211_cipher_scheme *cs, int n) 2559 { 2560 int i; 2561 2562 /* Ensure we have enough iftype bitmap space for all iftype values */ 2563 WARN_ON((NUM_NL80211_IFTYPES / 8 + 1) > sizeof(cs[0].iftype)); 2564 2565 for (i = 0; i < n; i++) 2566 if (!ieee80211_cs_valid(&cs[i])) 2567 return false; 2568 2569 return true; 2570 } 2571 2572 const struct ieee80211_cipher_scheme * 2573 ieee80211_cs_get(struct ieee80211_local *local, u32 cipher, 2574 enum nl80211_iftype iftype) 2575 { 2576 const struct ieee80211_cipher_scheme *l = local->hw.cipher_schemes; 2577 int n = local->hw.n_cipher_schemes; 2578 int i; 2579 const struct ieee80211_cipher_scheme *cs = NULL; 2580 2581 for (i = 0; i < n; i++) { 2582 if (l[i].cipher == cipher) { 2583 cs = &l[i]; 2584 break; 2585 } 2586 } 2587 2588 if (!cs || !(cs->iftype & BIT(iftype))) 2589 return NULL; 2590 2591 return cs; 2592 } 2593 2594 int ieee80211_cs_headroom(struct ieee80211_local *local, 2595 struct cfg80211_crypto_settings *crypto, 2596 enum nl80211_iftype iftype) 2597 { 2598 const struct ieee80211_cipher_scheme *cs; 2599 int headroom = IEEE80211_ENCRYPT_HEADROOM; 2600 int i; 2601 2602 for (i = 0; i < crypto->n_ciphers_pairwise; i++) { 2603 cs = ieee80211_cs_get(local, crypto->ciphers_pairwise[i], 2604 iftype); 2605 2606 if (cs && headroom < cs->hdr_len) 2607 headroom = cs->hdr_len; 2608 } 2609 2610 cs = ieee80211_cs_get(local, crypto->cipher_group, iftype); 2611 if (cs && headroom < cs->hdr_len) 2612 headroom = cs->hdr_len; 2613 2614 return headroom; 2615 } 2616 2617 static bool 2618 ieee80211_extend_noa_desc(struct ieee80211_noa_data *data, u32 tsf, int i) 2619 { 2620 s32 end = data->desc[i].start + data->desc[i].duration - (tsf + 1); 2621 int skip; 2622 2623 if (end > 0) 2624 return false; 2625 2626 /* End time is in the past, check for repetitions */ 2627 skip = DIV_ROUND_UP(-end, data->desc[i].interval); 2628 if (data->count[i] < 255) { 2629 if (data->count[i] <= skip) { 2630 data->count[i] = 0; 2631 return false; 2632 } 2633 2634 data->count[i] -= skip; 2635 } 2636 2637 data->desc[i].start += skip * data->desc[i].interval; 2638 2639 return true; 2640 } 2641 2642 static bool 2643 ieee80211_extend_absent_time(struct ieee80211_noa_data *data, u32 tsf, 2644 s32 *offset) 2645 { 2646 bool ret = false; 2647 int i; 2648 2649 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2650 s32 cur; 2651 2652 if (!data->count[i]) 2653 continue; 2654 2655 if (ieee80211_extend_noa_desc(data, tsf + *offset, i)) 2656 ret = true; 2657 2658 cur = data->desc[i].start - tsf; 2659 if (cur > *offset) 2660 continue; 2661 2662 cur = data->desc[i].start + data->desc[i].duration - tsf; 2663 if (cur > *offset) 2664 *offset = cur; 2665 } 2666 2667 return ret; 2668 } 2669 2670 static u32 2671 ieee80211_get_noa_absent_time(struct ieee80211_noa_data *data, u32 tsf) 2672 { 2673 s32 offset = 0; 2674 int tries = 0; 2675 /* 2676 * arbitrary limit, used to avoid infinite loops when combined NoA 2677 * descriptors cover the full time period. 2678 */ 2679 int max_tries = 5; 2680 2681 ieee80211_extend_absent_time(data, tsf, &offset); 2682 do { 2683 if (!ieee80211_extend_absent_time(data, tsf, &offset)) 2684 break; 2685 2686 tries++; 2687 } while (tries < max_tries); 2688 2689 return offset; 2690 } 2691 2692 void ieee80211_update_p2p_noa(struct ieee80211_noa_data *data, u32 tsf) 2693 { 2694 u32 next_offset = BIT(31) - 1; 2695 int i; 2696 2697 data->absent = 0; 2698 data->has_next_tsf = false; 2699 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2700 s32 start; 2701 2702 if (!data->count[i]) 2703 continue; 2704 2705 ieee80211_extend_noa_desc(data, tsf, i); 2706 start = data->desc[i].start - tsf; 2707 if (start <= 0) 2708 data->absent |= BIT(i); 2709 2710 if (next_offset > start) 2711 next_offset = start; 2712 2713 data->has_next_tsf = true; 2714 } 2715 2716 if (data->absent) 2717 next_offset = ieee80211_get_noa_absent_time(data, tsf); 2718 2719 data->next_tsf = tsf + next_offset; 2720 } 2721 EXPORT_SYMBOL(ieee80211_update_p2p_noa); 2722 2723 int ieee80211_parse_p2p_noa(const struct ieee80211_p2p_noa_attr *attr, 2724 struct ieee80211_noa_data *data, u32 tsf) 2725 { 2726 int ret = 0; 2727 int i; 2728 2729 memset(data, 0, sizeof(*data)); 2730 2731 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2732 const struct ieee80211_p2p_noa_desc *desc = &attr->desc[i]; 2733 2734 if (!desc->count || !desc->duration) 2735 continue; 2736 2737 data->count[i] = desc->count; 2738 data->desc[i].start = le32_to_cpu(desc->start_time); 2739 data->desc[i].duration = le32_to_cpu(desc->duration); 2740 data->desc[i].interval = le32_to_cpu(desc->interval); 2741 2742 if (data->count[i] > 1 && 2743 data->desc[i].interval < data->desc[i].duration) 2744 continue; 2745 2746 ieee80211_extend_noa_desc(data, tsf, i); 2747 ret++; 2748 } 2749 2750 if (ret) 2751 ieee80211_update_p2p_noa(data, tsf); 2752 2753 return ret; 2754 } 2755 EXPORT_SYMBOL(ieee80211_parse_p2p_noa); 2756 2757 void ieee80211_recalc_dtim(struct ieee80211_local *local, 2758 struct ieee80211_sub_if_data *sdata) 2759 { 2760 u64 tsf = drv_get_tsf(local, sdata); 2761 u64 dtim_count = 0; 2762 u16 beacon_int = sdata->vif.bss_conf.beacon_int * 1024; 2763 u8 dtim_period = sdata->vif.bss_conf.dtim_period; 2764 struct ps_data *ps; 2765 u8 bcns_from_dtim; 2766 2767 if (tsf == -1ULL || !beacon_int || !dtim_period) 2768 return; 2769 2770 if (sdata->vif.type == NL80211_IFTYPE_AP || 2771 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 2772 if (!sdata->bss) 2773 return; 2774 2775 ps = &sdata->bss->ps; 2776 } else if (ieee80211_vif_is_mesh(&sdata->vif)) { 2777 ps = &sdata->u.mesh.ps; 2778 } else { 2779 return; 2780 } 2781 2782 /* 2783 * actually finds last dtim_count, mac80211 will update in 2784 * __beacon_add_tim(). 2785 * dtim_count = dtim_period - (tsf / bcn_int) % dtim_period 2786 */ 2787 do_div(tsf, beacon_int); 2788 bcns_from_dtim = do_div(tsf, dtim_period); 2789 /* just had a DTIM */ 2790 if (!bcns_from_dtim) 2791 dtim_count = 0; 2792 else 2793 dtim_count = dtim_period - bcns_from_dtim; 2794 2795 ps->dtim_count = dtim_count; 2796 } 2797 2798 int ieee80211_check_combinations(struct ieee80211_sub_if_data *sdata, 2799 const struct cfg80211_chan_def *chandef, 2800 enum ieee80211_chanctx_mode chanmode, 2801 u8 radar_detect) 2802 { 2803 struct ieee80211_local *local = sdata->local; 2804 struct ieee80211_sub_if_data *sdata_iter; 2805 enum nl80211_iftype iftype = sdata->wdev.iftype; 2806 int num[NUM_NL80211_IFTYPES]; 2807 struct ieee80211_chanctx *ctx; 2808 int num_different_channels = 0; 2809 int total = 1; 2810 2811 lockdep_assert_held(&local->chanctx_mtx); 2812 2813 if (WARN_ON(hweight32(radar_detect) > 1)) 2814 return -EINVAL; 2815 2816 if (WARN_ON(chandef && chanmode == IEEE80211_CHANCTX_SHARED && 2817 !chandef->chan)) 2818 return -EINVAL; 2819 2820 if (chandef) 2821 num_different_channels = 1; 2822 2823 if (WARN_ON(iftype >= NUM_NL80211_IFTYPES)) 2824 return -EINVAL; 2825 2826 /* Always allow software iftypes */ 2827 if (local->hw.wiphy->software_iftypes & BIT(iftype)) { 2828 if (radar_detect) 2829 return -EINVAL; 2830 return 0; 2831 } 2832 2833 memset(num, 0, sizeof(num)); 2834 2835 if (iftype != NL80211_IFTYPE_UNSPECIFIED) 2836 num[iftype] = 1; 2837 2838 list_for_each_entry(ctx, &local->chanctx_list, list) { 2839 if (ctx->conf.radar_enabled) 2840 radar_detect |= BIT(ctx->conf.def.width); 2841 if (ctx->mode == IEEE80211_CHANCTX_EXCLUSIVE) { 2842 num_different_channels++; 2843 continue; 2844 } 2845 if (chandef && chanmode == IEEE80211_CHANCTX_SHARED && 2846 cfg80211_chandef_compatible(chandef, 2847 &ctx->conf.def)) 2848 continue; 2849 num_different_channels++; 2850 } 2851 2852 list_for_each_entry_rcu(sdata_iter, &local->interfaces, list) { 2853 struct wireless_dev *wdev_iter; 2854 2855 wdev_iter = &sdata_iter->wdev; 2856 2857 if (sdata_iter == sdata || 2858 rcu_access_pointer(sdata_iter->vif.chanctx_conf) == NULL || 2859 local->hw.wiphy->software_iftypes & BIT(wdev_iter->iftype)) 2860 continue; 2861 2862 num[wdev_iter->iftype]++; 2863 total++; 2864 } 2865 2866 if (total == 1 && !radar_detect) 2867 return 0; 2868 2869 return cfg80211_check_combinations(local->hw.wiphy, 2870 num_different_channels, 2871 radar_detect, num); 2872 } 2873 2874 static void 2875 ieee80211_iter_max_chans(const struct ieee80211_iface_combination *c, 2876 void *data) 2877 { 2878 u32 *max_num_different_channels = data; 2879 2880 *max_num_different_channels = max(*max_num_different_channels, 2881 c->num_different_channels); 2882 } 2883 2884 int ieee80211_max_num_channels(struct ieee80211_local *local) 2885 { 2886 struct ieee80211_sub_if_data *sdata; 2887 int num[NUM_NL80211_IFTYPES] = {}; 2888 struct ieee80211_chanctx *ctx; 2889 int num_different_channels = 0; 2890 u8 radar_detect = 0; 2891 u32 max_num_different_channels = 1; 2892 int err; 2893 2894 lockdep_assert_held(&local->chanctx_mtx); 2895 2896 list_for_each_entry(ctx, &local->chanctx_list, list) { 2897 num_different_channels++; 2898 2899 if (ctx->conf.radar_enabled) 2900 radar_detect |= BIT(ctx->conf.def.width); 2901 } 2902 2903 list_for_each_entry_rcu(sdata, &local->interfaces, list) 2904 num[sdata->wdev.iftype]++; 2905 2906 err = cfg80211_iter_combinations(local->hw.wiphy, 2907 num_different_channels, radar_detect, 2908 num, ieee80211_iter_max_chans, 2909 &max_num_different_channels); 2910 if (err < 0) 2911 return err; 2912 2913 return max_num_different_channels; 2914 } 2915