xref: /linux/net/mac80211/util.c (revision cc04a46f11ea046ed53e2c832ae29e4790f7e35f)
1 /*
2  * Copyright 2002-2005, Instant802 Networks, Inc.
3  * Copyright 2005-2006, Devicescape Software, Inc.
4  * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
5  * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
6  * Copyright 2013-2014  Intel Mobile Communications GmbH
7  *
8  * This program is free software; you can redistribute it and/or modify
9  * it under the terms of the GNU General Public License version 2 as
10  * published by the Free Software Foundation.
11  *
12  * utilities for mac80211
13  */
14 
15 #include <net/mac80211.h>
16 #include <linux/netdevice.h>
17 #include <linux/export.h>
18 #include <linux/types.h>
19 #include <linux/slab.h>
20 #include <linux/skbuff.h>
21 #include <linux/etherdevice.h>
22 #include <linux/if_arp.h>
23 #include <linux/bitmap.h>
24 #include <linux/crc32.h>
25 #include <net/net_namespace.h>
26 #include <net/cfg80211.h>
27 #include <net/rtnetlink.h>
28 
29 #include "ieee80211_i.h"
30 #include "driver-ops.h"
31 #include "rate.h"
32 #include "mesh.h"
33 #include "wme.h"
34 #include "led.h"
35 #include "wep.h"
36 
37 /* privid for wiphys to determine whether they belong to us or not */
38 const void *const mac80211_wiphy_privid = &mac80211_wiphy_privid;
39 
40 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
41 {
42 	struct ieee80211_local *local;
43 	BUG_ON(!wiphy);
44 
45 	local = wiphy_priv(wiphy);
46 	return &local->hw;
47 }
48 EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
49 
50 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
51 {
52 	struct sk_buff *skb;
53 	struct ieee80211_hdr *hdr;
54 
55 	skb_queue_walk(&tx->skbs, skb) {
56 		hdr = (struct ieee80211_hdr *) skb->data;
57 		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
58 	}
59 }
60 
61 int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
62 			     int rate, int erp, int short_preamble,
63 			     int shift)
64 {
65 	int dur;
66 
67 	/* calculate duration (in microseconds, rounded up to next higher
68 	 * integer if it includes a fractional microsecond) to send frame of
69 	 * len bytes (does not include FCS) at the given rate. Duration will
70 	 * also include SIFS.
71 	 *
72 	 * rate is in 100 kbps, so divident is multiplied by 10 in the
73 	 * DIV_ROUND_UP() operations.
74 	 *
75 	 * shift may be 2 for 5 MHz channels or 1 for 10 MHz channels, and
76 	 * is assumed to be 0 otherwise.
77 	 */
78 
79 	if (band == IEEE80211_BAND_5GHZ || erp) {
80 		/*
81 		 * OFDM:
82 		 *
83 		 * N_DBPS = DATARATE x 4
84 		 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
85 		 *	(16 = SIGNAL time, 6 = tail bits)
86 		 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
87 		 *
88 		 * T_SYM = 4 usec
89 		 * 802.11a - 18.5.2: aSIFSTime = 16 usec
90 		 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
91 		 *	signal ext = 6 usec
92 		 */
93 		dur = 16; /* SIFS + signal ext */
94 		dur += 16; /* IEEE 802.11-2012 18.3.2.4: T_PREAMBLE = 16 usec */
95 		dur += 4; /* IEEE 802.11-2012 18.3.2.4: T_SIGNAL = 4 usec */
96 
97 		/* IEEE 802.11-2012 18.3.2.4: all values above are:
98 		 *  * times 4 for 5 MHz
99 		 *  * times 2 for 10 MHz
100 		 */
101 		dur *= 1 << shift;
102 
103 		/* rates should already consider the channel bandwidth,
104 		 * don't apply divisor again.
105 		 */
106 		dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
107 					4 * rate); /* T_SYM x N_SYM */
108 	} else {
109 		/*
110 		 * 802.11b or 802.11g with 802.11b compatibility:
111 		 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
112 		 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
113 		 *
114 		 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
115 		 * aSIFSTime = 10 usec
116 		 * aPreambleLength = 144 usec or 72 usec with short preamble
117 		 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
118 		 */
119 		dur = 10; /* aSIFSTime = 10 usec */
120 		dur += short_preamble ? (72 + 24) : (144 + 48);
121 
122 		dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
123 	}
124 
125 	return dur;
126 }
127 
128 /* Exported duration function for driver use */
129 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
130 					struct ieee80211_vif *vif,
131 					enum ieee80211_band band,
132 					size_t frame_len,
133 					struct ieee80211_rate *rate)
134 {
135 	struct ieee80211_sub_if_data *sdata;
136 	u16 dur;
137 	int erp, shift = 0;
138 	bool short_preamble = false;
139 
140 	erp = 0;
141 	if (vif) {
142 		sdata = vif_to_sdata(vif);
143 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
144 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
145 			erp = rate->flags & IEEE80211_RATE_ERP_G;
146 		shift = ieee80211_vif_get_shift(vif);
147 	}
148 
149 	dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
150 				       short_preamble, shift);
151 
152 	return cpu_to_le16(dur);
153 }
154 EXPORT_SYMBOL(ieee80211_generic_frame_duration);
155 
156 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
157 			      struct ieee80211_vif *vif, size_t frame_len,
158 			      const struct ieee80211_tx_info *frame_txctl)
159 {
160 	struct ieee80211_local *local = hw_to_local(hw);
161 	struct ieee80211_rate *rate;
162 	struct ieee80211_sub_if_data *sdata;
163 	bool short_preamble;
164 	int erp, shift = 0, bitrate;
165 	u16 dur;
166 	struct ieee80211_supported_band *sband;
167 
168 	sband = local->hw.wiphy->bands[frame_txctl->band];
169 
170 	short_preamble = false;
171 
172 	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
173 
174 	erp = 0;
175 	if (vif) {
176 		sdata = vif_to_sdata(vif);
177 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
178 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
179 			erp = rate->flags & IEEE80211_RATE_ERP_G;
180 		shift = ieee80211_vif_get_shift(vif);
181 	}
182 
183 	bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
184 
185 	/* CTS duration */
186 	dur = ieee80211_frame_duration(sband->band, 10, bitrate,
187 				       erp, short_preamble, shift);
188 	/* Data frame duration */
189 	dur += ieee80211_frame_duration(sband->band, frame_len, bitrate,
190 					erp, short_preamble, shift);
191 	/* ACK duration */
192 	dur += ieee80211_frame_duration(sband->band, 10, bitrate,
193 					erp, short_preamble, shift);
194 
195 	return cpu_to_le16(dur);
196 }
197 EXPORT_SYMBOL(ieee80211_rts_duration);
198 
199 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
200 				    struct ieee80211_vif *vif,
201 				    size_t frame_len,
202 				    const struct ieee80211_tx_info *frame_txctl)
203 {
204 	struct ieee80211_local *local = hw_to_local(hw);
205 	struct ieee80211_rate *rate;
206 	struct ieee80211_sub_if_data *sdata;
207 	bool short_preamble;
208 	int erp, shift = 0, bitrate;
209 	u16 dur;
210 	struct ieee80211_supported_band *sband;
211 
212 	sband = local->hw.wiphy->bands[frame_txctl->band];
213 
214 	short_preamble = false;
215 
216 	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
217 	erp = 0;
218 	if (vif) {
219 		sdata = vif_to_sdata(vif);
220 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
221 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
222 			erp = rate->flags & IEEE80211_RATE_ERP_G;
223 		shift = ieee80211_vif_get_shift(vif);
224 	}
225 
226 	bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
227 
228 	/* Data frame duration */
229 	dur = ieee80211_frame_duration(sband->band, frame_len, bitrate,
230 				       erp, short_preamble, shift);
231 	if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
232 		/* ACK duration */
233 		dur += ieee80211_frame_duration(sband->band, 10, bitrate,
234 						erp, short_preamble, shift);
235 	}
236 
237 	return cpu_to_le16(dur);
238 }
239 EXPORT_SYMBOL(ieee80211_ctstoself_duration);
240 
241 void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
242 {
243 	struct ieee80211_sub_if_data *sdata;
244 	int n_acs = IEEE80211_NUM_ACS;
245 
246 	if (local->hw.queues < IEEE80211_NUM_ACS)
247 		n_acs = 1;
248 
249 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
250 		int ac;
251 
252 		if (!sdata->dev)
253 			continue;
254 
255 		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
256 		    local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
257 			continue;
258 
259 		for (ac = 0; ac < n_acs; ac++) {
260 			int ac_queue = sdata->vif.hw_queue[ac];
261 
262 			if (local->ops->wake_tx_queue &&
263 			    (atomic_read(&sdata->txqs_len[ac]) >
264 			     local->hw.txq_ac_max_pending))
265 				continue;
266 
267 			if (ac_queue == queue ||
268 			    (sdata->vif.cab_queue == queue &&
269 			     local->queue_stop_reasons[ac_queue] == 0 &&
270 			     skb_queue_empty(&local->pending[ac_queue])))
271 				netif_wake_subqueue(sdata->dev, ac);
272 		}
273 	}
274 }
275 
276 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
277 				   enum queue_stop_reason reason,
278 				   bool refcounted)
279 {
280 	struct ieee80211_local *local = hw_to_local(hw);
281 
282 	trace_wake_queue(local, queue, reason);
283 
284 	if (WARN_ON(queue >= hw->queues))
285 		return;
286 
287 	if (!test_bit(reason, &local->queue_stop_reasons[queue]))
288 		return;
289 
290 	if (!refcounted)
291 		local->q_stop_reasons[queue][reason] = 0;
292 	else
293 		local->q_stop_reasons[queue][reason]--;
294 
295 	if (local->q_stop_reasons[queue][reason] == 0)
296 		__clear_bit(reason, &local->queue_stop_reasons[queue]);
297 
298 	if (local->queue_stop_reasons[queue] != 0)
299 		/* someone still has this queue stopped */
300 		return;
301 
302 	if (skb_queue_empty(&local->pending[queue])) {
303 		rcu_read_lock();
304 		ieee80211_propagate_queue_wake(local, queue);
305 		rcu_read_unlock();
306 	} else
307 		tasklet_schedule(&local->tx_pending_tasklet);
308 }
309 
310 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
311 				    enum queue_stop_reason reason,
312 				    bool refcounted)
313 {
314 	struct ieee80211_local *local = hw_to_local(hw);
315 	unsigned long flags;
316 
317 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
318 	__ieee80211_wake_queue(hw, queue, reason, refcounted);
319 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
320 }
321 
322 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
323 {
324 	ieee80211_wake_queue_by_reason(hw, queue,
325 				       IEEE80211_QUEUE_STOP_REASON_DRIVER,
326 				       false);
327 }
328 EXPORT_SYMBOL(ieee80211_wake_queue);
329 
330 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
331 				   enum queue_stop_reason reason,
332 				   bool refcounted)
333 {
334 	struct ieee80211_local *local = hw_to_local(hw);
335 	struct ieee80211_sub_if_data *sdata;
336 	int n_acs = IEEE80211_NUM_ACS;
337 
338 	trace_stop_queue(local, queue, reason);
339 
340 	if (WARN_ON(queue >= hw->queues))
341 		return;
342 
343 	if (!refcounted)
344 		local->q_stop_reasons[queue][reason] = 1;
345 	else
346 		local->q_stop_reasons[queue][reason]++;
347 
348 	if (__test_and_set_bit(reason, &local->queue_stop_reasons[queue]))
349 		return;
350 
351 	if (local->hw.queues < IEEE80211_NUM_ACS)
352 		n_acs = 1;
353 
354 	rcu_read_lock();
355 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
356 		int ac;
357 
358 		if (!sdata->dev)
359 			continue;
360 
361 		for (ac = 0; ac < n_acs; ac++) {
362 			if (sdata->vif.hw_queue[ac] == queue ||
363 			    sdata->vif.cab_queue == queue)
364 				netif_stop_subqueue(sdata->dev, ac);
365 		}
366 	}
367 	rcu_read_unlock();
368 }
369 
370 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
371 				    enum queue_stop_reason reason,
372 				    bool refcounted)
373 {
374 	struct ieee80211_local *local = hw_to_local(hw);
375 	unsigned long flags;
376 
377 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
378 	__ieee80211_stop_queue(hw, queue, reason, refcounted);
379 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
380 }
381 
382 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
383 {
384 	ieee80211_stop_queue_by_reason(hw, queue,
385 				       IEEE80211_QUEUE_STOP_REASON_DRIVER,
386 				       false);
387 }
388 EXPORT_SYMBOL(ieee80211_stop_queue);
389 
390 void ieee80211_add_pending_skb(struct ieee80211_local *local,
391 			       struct sk_buff *skb)
392 {
393 	struct ieee80211_hw *hw = &local->hw;
394 	unsigned long flags;
395 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
396 	int queue = info->hw_queue;
397 
398 	if (WARN_ON(!info->control.vif)) {
399 		ieee80211_free_txskb(&local->hw, skb);
400 		return;
401 	}
402 
403 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
404 	__ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
405 			       false);
406 	__skb_queue_tail(&local->pending[queue], skb);
407 	__ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
408 			       false);
409 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
410 }
411 
412 void ieee80211_add_pending_skbs(struct ieee80211_local *local,
413 				struct sk_buff_head *skbs)
414 {
415 	struct ieee80211_hw *hw = &local->hw;
416 	struct sk_buff *skb;
417 	unsigned long flags;
418 	int queue, i;
419 
420 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
421 	while ((skb = skb_dequeue(skbs))) {
422 		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
423 
424 		if (WARN_ON(!info->control.vif)) {
425 			ieee80211_free_txskb(&local->hw, skb);
426 			continue;
427 		}
428 
429 		queue = info->hw_queue;
430 
431 		__ieee80211_stop_queue(hw, queue,
432 				IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
433 				false);
434 
435 		__skb_queue_tail(&local->pending[queue], skb);
436 	}
437 
438 	for (i = 0; i < hw->queues; i++)
439 		__ieee80211_wake_queue(hw, i,
440 			IEEE80211_QUEUE_STOP_REASON_SKB_ADD,
441 			false);
442 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
443 }
444 
445 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
446 				     unsigned long queues,
447 				     enum queue_stop_reason reason,
448 				     bool refcounted)
449 {
450 	struct ieee80211_local *local = hw_to_local(hw);
451 	unsigned long flags;
452 	int i;
453 
454 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
455 
456 	for_each_set_bit(i, &queues, hw->queues)
457 		__ieee80211_stop_queue(hw, i, reason, refcounted);
458 
459 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
460 }
461 
462 void ieee80211_stop_queues(struct ieee80211_hw *hw)
463 {
464 	ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
465 					IEEE80211_QUEUE_STOP_REASON_DRIVER,
466 					false);
467 }
468 EXPORT_SYMBOL(ieee80211_stop_queues);
469 
470 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
471 {
472 	struct ieee80211_local *local = hw_to_local(hw);
473 	unsigned long flags;
474 	int ret;
475 
476 	if (WARN_ON(queue >= hw->queues))
477 		return true;
478 
479 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
480 	ret = test_bit(IEEE80211_QUEUE_STOP_REASON_DRIVER,
481 		       &local->queue_stop_reasons[queue]);
482 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
483 	return ret;
484 }
485 EXPORT_SYMBOL(ieee80211_queue_stopped);
486 
487 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
488 				     unsigned long queues,
489 				     enum queue_stop_reason reason,
490 				     bool refcounted)
491 {
492 	struct ieee80211_local *local = hw_to_local(hw);
493 	unsigned long flags;
494 	int i;
495 
496 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
497 
498 	for_each_set_bit(i, &queues, hw->queues)
499 		__ieee80211_wake_queue(hw, i, reason, refcounted);
500 
501 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
502 }
503 
504 void ieee80211_wake_queues(struct ieee80211_hw *hw)
505 {
506 	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
507 					IEEE80211_QUEUE_STOP_REASON_DRIVER,
508 					false);
509 }
510 EXPORT_SYMBOL(ieee80211_wake_queues);
511 
512 static unsigned int
513 ieee80211_get_vif_queues(struct ieee80211_local *local,
514 			 struct ieee80211_sub_if_data *sdata)
515 {
516 	unsigned int queues;
517 
518 	if (sdata && ieee80211_hw_check(&local->hw, QUEUE_CONTROL)) {
519 		int ac;
520 
521 		queues = 0;
522 
523 		for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
524 			queues |= BIT(sdata->vif.hw_queue[ac]);
525 		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE)
526 			queues |= BIT(sdata->vif.cab_queue);
527 	} else {
528 		/* all queues */
529 		queues = BIT(local->hw.queues) - 1;
530 	}
531 
532 	return queues;
533 }
534 
535 void __ieee80211_flush_queues(struct ieee80211_local *local,
536 			      struct ieee80211_sub_if_data *sdata,
537 			      unsigned int queues, bool drop)
538 {
539 	if (!local->ops->flush)
540 		return;
541 
542 	/*
543 	 * If no queue was set, or if the HW doesn't support
544 	 * IEEE80211_HW_QUEUE_CONTROL - flush all queues
545 	 */
546 	if (!queues || !ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
547 		queues = ieee80211_get_vif_queues(local, sdata);
548 
549 	ieee80211_stop_queues_by_reason(&local->hw, queues,
550 					IEEE80211_QUEUE_STOP_REASON_FLUSH,
551 					false);
552 
553 	drv_flush(local, sdata, queues, drop);
554 
555 	ieee80211_wake_queues_by_reason(&local->hw, queues,
556 					IEEE80211_QUEUE_STOP_REASON_FLUSH,
557 					false);
558 }
559 
560 void ieee80211_flush_queues(struct ieee80211_local *local,
561 			    struct ieee80211_sub_if_data *sdata, bool drop)
562 {
563 	__ieee80211_flush_queues(local, sdata, 0, drop);
564 }
565 
566 void ieee80211_stop_vif_queues(struct ieee80211_local *local,
567 			       struct ieee80211_sub_if_data *sdata,
568 			       enum queue_stop_reason reason)
569 {
570 	ieee80211_stop_queues_by_reason(&local->hw,
571 					ieee80211_get_vif_queues(local, sdata),
572 					reason, true);
573 }
574 
575 void ieee80211_wake_vif_queues(struct ieee80211_local *local,
576 			       struct ieee80211_sub_if_data *sdata,
577 			       enum queue_stop_reason reason)
578 {
579 	ieee80211_wake_queues_by_reason(&local->hw,
580 					ieee80211_get_vif_queues(local, sdata),
581 					reason, true);
582 }
583 
584 static void __iterate_interfaces(struct ieee80211_local *local,
585 				 u32 iter_flags,
586 				 void (*iterator)(void *data, u8 *mac,
587 						  struct ieee80211_vif *vif),
588 				 void *data)
589 {
590 	struct ieee80211_sub_if_data *sdata;
591 	bool active_only = iter_flags & IEEE80211_IFACE_ITER_ACTIVE;
592 
593 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
594 		switch (sdata->vif.type) {
595 		case NL80211_IFTYPE_MONITOR:
596 			if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
597 				continue;
598 			break;
599 		case NL80211_IFTYPE_AP_VLAN:
600 			continue;
601 		default:
602 			break;
603 		}
604 		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
605 		    active_only && !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
606 			continue;
607 		if (ieee80211_sdata_running(sdata) || !active_only)
608 			iterator(data, sdata->vif.addr,
609 				 &sdata->vif);
610 	}
611 
612 	sdata = rcu_dereference_check(local->monitor_sdata,
613 				      lockdep_is_held(&local->iflist_mtx) ||
614 				      lockdep_rtnl_is_held());
615 	if (sdata &&
616 	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL || !active_only ||
617 	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
618 		iterator(data, sdata->vif.addr, &sdata->vif);
619 }
620 
621 void ieee80211_iterate_interfaces(
622 	struct ieee80211_hw *hw, u32 iter_flags,
623 	void (*iterator)(void *data, u8 *mac,
624 			 struct ieee80211_vif *vif),
625 	void *data)
626 {
627 	struct ieee80211_local *local = hw_to_local(hw);
628 
629 	mutex_lock(&local->iflist_mtx);
630 	__iterate_interfaces(local, iter_flags, iterator, data);
631 	mutex_unlock(&local->iflist_mtx);
632 }
633 EXPORT_SYMBOL_GPL(ieee80211_iterate_interfaces);
634 
635 void ieee80211_iterate_active_interfaces_atomic(
636 	struct ieee80211_hw *hw, u32 iter_flags,
637 	void (*iterator)(void *data, u8 *mac,
638 			 struct ieee80211_vif *vif),
639 	void *data)
640 {
641 	struct ieee80211_local *local = hw_to_local(hw);
642 
643 	rcu_read_lock();
644 	__iterate_interfaces(local, iter_flags | IEEE80211_IFACE_ITER_ACTIVE,
645 			     iterator, data);
646 	rcu_read_unlock();
647 }
648 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
649 
650 void ieee80211_iterate_active_interfaces_rtnl(
651 	struct ieee80211_hw *hw, u32 iter_flags,
652 	void (*iterator)(void *data, u8 *mac,
653 			 struct ieee80211_vif *vif),
654 	void *data)
655 {
656 	struct ieee80211_local *local = hw_to_local(hw);
657 
658 	ASSERT_RTNL();
659 
660 	__iterate_interfaces(local, iter_flags | IEEE80211_IFACE_ITER_ACTIVE,
661 			     iterator, data);
662 }
663 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_rtnl);
664 
665 static void __iterate_stations(struct ieee80211_local *local,
666 			       void (*iterator)(void *data,
667 						struct ieee80211_sta *sta),
668 			       void *data)
669 {
670 	struct sta_info *sta;
671 
672 	list_for_each_entry_rcu(sta, &local->sta_list, list) {
673 		if (!sta->uploaded)
674 			continue;
675 
676 		iterator(data, &sta->sta);
677 	}
678 }
679 
680 void ieee80211_iterate_stations_atomic(struct ieee80211_hw *hw,
681 			void (*iterator)(void *data,
682 					 struct ieee80211_sta *sta),
683 			void *data)
684 {
685 	struct ieee80211_local *local = hw_to_local(hw);
686 
687 	rcu_read_lock();
688 	__iterate_stations(local, iterator, data);
689 	rcu_read_unlock();
690 }
691 EXPORT_SYMBOL_GPL(ieee80211_iterate_stations_atomic);
692 
693 struct ieee80211_vif *wdev_to_ieee80211_vif(struct wireless_dev *wdev)
694 {
695 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
696 
697 	if (!ieee80211_sdata_running(sdata) ||
698 	    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
699 		return NULL;
700 	return &sdata->vif;
701 }
702 EXPORT_SYMBOL_GPL(wdev_to_ieee80211_vif);
703 
704 struct wireless_dev *ieee80211_vif_to_wdev(struct ieee80211_vif *vif)
705 {
706 	struct ieee80211_sub_if_data *sdata;
707 
708 	if (!vif)
709 		return NULL;
710 
711 	sdata = vif_to_sdata(vif);
712 
713 	if (!ieee80211_sdata_running(sdata) ||
714 	    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
715 		return NULL;
716 
717 	return &sdata->wdev;
718 }
719 EXPORT_SYMBOL_GPL(ieee80211_vif_to_wdev);
720 
721 /*
722  * Nothing should have been stuffed into the workqueue during
723  * the suspend->resume cycle. Since we can't check each caller
724  * of this function if we are already quiescing / suspended,
725  * check here and don't WARN since this can actually happen when
726  * the rx path (for example) is racing against __ieee80211_suspend
727  * and suspending / quiescing was set after the rx path checked
728  * them.
729  */
730 static bool ieee80211_can_queue_work(struct ieee80211_local *local)
731 {
732 	if (local->quiescing || (local->suspended && !local->resuming)) {
733 		pr_warn("queueing ieee80211 work while going to suspend\n");
734 		return false;
735 	}
736 
737 	return true;
738 }
739 
740 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
741 {
742 	struct ieee80211_local *local = hw_to_local(hw);
743 
744 	if (!ieee80211_can_queue_work(local))
745 		return;
746 
747 	queue_work(local->workqueue, work);
748 }
749 EXPORT_SYMBOL(ieee80211_queue_work);
750 
751 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
752 				  struct delayed_work *dwork,
753 				  unsigned long delay)
754 {
755 	struct ieee80211_local *local = hw_to_local(hw);
756 
757 	if (!ieee80211_can_queue_work(local))
758 		return;
759 
760 	queue_delayed_work(local->workqueue, dwork, delay);
761 }
762 EXPORT_SYMBOL(ieee80211_queue_delayed_work);
763 
764 u32 ieee802_11_parse_elems_crc(const u8 *start, size_t len, bool action,
765 			       struct ieee802_11_elems *elems,
766 			       u64 filter, u32 crc)
767 {
768 	size_t left = len;
769 	const u8 *pos = start;
770 	bool calc_crc = filter != 0;
771 	DECLARE_BITMAP(seen_elems, 256);
772 	const u8 *ie;
773 
774 	bitmap_zero(seen_elems, 256);
775 	memset(elems, 0, sizeof(*elems));
776 	elems->ie_start = start;
777 	elems->total_len = len;
778 
779 	while (left >= 2) {
780 		u8 id, elen;
781 		bool elem_parse_failed;
782 
783 		id = *pos++;
784 		elen = *pos++;
785 		left -= 2;
786 
787 		if (elen > left) {
788 			elems->parse_error = true;
789 			break;
790 		}
791 
792 		switch (id) {
793 		case WLAN_EID_SSID:
794 		case WLAN_EID_SUPP_RATES:
795 		case WLAN_EID_FH_PARAMS:
796 		case WLAN_EID_DS_PARAMS:
797 		case WLAN_EID_CF_PARAMS:
798 		case WLAN_EID_TIM:
799 		case WLAN_EID_IBSS_PARAMS:
800 		case WLAN_EID_CHALLENGE:
801 		case WLAN_EID_RSN:
802 		case WLAN_EID_ERP_INFO:
803 		case WLAN_EID_EXT_SUPP_RATES:
804 		case WLAN_EID_HT_CAPABILITY:
805 		case WLAN_EID_HT_OPERATION:
806 		case WLAN_EID_VHT_CAPABILITY:
807 		case WLAN_EID_VHT_OPERATION:
808 		case WLAN_EID_MESH_ID:
809 		case WLAN_EID_MESH_CONFIG:
810 		case WLAN_EID_PEER_MGMT:
811 		case WLAN_EID_PREQ:
812 		case WLAN_EID_PREP:
813 		case WLAN_EID_PERR:
814 		case WLAN_EID_RANN:
815 		case WLAN_EID_CHANNEL_SWITCH:
816 		case WLAN_EID_EXT_CHANSWITCH_ANN:
817 		case WLAN_EID_COUNTRY:
818 		case WLAN_EID_PWR_CONSTRAINT:
819 		case WLAN_EID_TIMEOUT_INTERVAL:
820 		case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
821 		case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
822 		case WLAN_EID_CHAN_SWITCH_PARAM:
823 		case WLAN_EID_EXT_CAPABILITY:
824 		case WLAN_EID_CHAN_SWITCH_TIMING:
825 		case WLAN_EID_LINK_ID:
826 		/*
827 		 * not listing WLAN_EID_CHANNEL_SWITCH_WRAPPER -- it seems possible
828 		 * that if the content gets bigger it might be needed more than once
829 		 */
830 			if (test_bit(id, seen_elems)) {
831 				elems->parse_error = true;
832 				left -= elen;
833 				pos += elen;
834 				continue;
835 			}
836 			break;
837 		}
838 
839 		if (calc_crc && id < 64 && (filter & (1ULL << id)))
840 			crc = crc32_be(crc, pos - 2, elen + 2);
841 
842 		elem_parse_failed = false;
843 
844 		switch (id) {
845 		case WLAN_EID_LINK_ID:
846 			if (elen + 2 != sizeof(struct ieee80211_tdls_lnkie)) {
847 				elem_parse_failed = true;
848 				break;
849 			}
850 			elems->lnk_id = (void *)(pos - 2);
851 			break;
852 		case WLAN_EID_CHAN_SWITCH_TIMING:
853 			if (elen != sizeof(struct ieee80211_ch_switch_timing)) {
854 				elem_parse_failed = true;
855 				break;
856 			}
857 			elems->ch_sw_timing = (void *)pos;
858 			break;
859 		case WLAN_EID_EXT_CAPABILITY:
860 			elems->ext_capab = pos;
861 			elems->ext_capab_len = elen;
862 			break;
863 		case WLAN_EID_SSID:
864 			elems->ssid = pos;
865 			elems->ssid_len = elen;
866 			break;
867 		case WLAN_EID_SUPP_RATES:
868 			elems->supp_rates = pos;
869 			elems->supp_rates_len = elen;
870 			break;
871 		case WLAN_EID_DS_PARAMS:
872 			if (elen >= 1)
873 				elems->ds_params = pos;
874 			else
875 				elem_parse_failed = true;
876 			break;
877 		case WLAN_EID_TIM:
878 			if (elen >= sizeof(struct ieee80211_tim_ie)) {
879 				elems->tim = (void *)pos;
880 				elems->tim_len = elen;
881 			} else
882 				elem_parse_failed = true;
883 			break;
884 		case WLAN_EID_CHALLENGE:
885 			elems->challenge = pos;
886 			elems->challenge_len = elen;
887 			break;
888 		case WLAN_EID_VENDOR_SPECIFIC:
889 			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
890 			    pos[2] == 0xf2) {
891 				/* Microsoft OUI (00:50:F2) */
892 
893 				if (calc_crc)
894 					crc = crc32_be(crc, pos - 2, elen + 2);
895 
896 				if (elen >= 5 && pos[3] == 2) {
897 					/* OUI Type 2 - WMM IE */
898 					if (pos[4] == 0) {
899 						elems->wmm_info = pos;
900 						elems->wmm_info_len = elen;
901 					} else if (pos[4] == 1) {
902 						elems->wmm_param = pos;
903 						elems->wmm_param_len = elen;
904 					}
905 				}
906 			}
907 			break;
908 		case WLAN_EID_RSN:
909 			elems->rsn = pos;
910 			elems->rsn_len = elen;
911 			break;
912 		case WLAN_EID_ERP_INFO:
913 			if (elen >= 1)
914 				elems->erp_info = pos;
915 			else
916 				elem_parse_failed = true;
917 			break;
918 		case WLAN_EID_EXT_SUPP_RATES:
919 			elems->ext_supp_rates = pos;
920 			elems->ext_supp_rates_len = elen;
921 			break;
922 		case WLAN_EID_HT_CAPABILITY:
923 			if (elen >= sizeof(struct ieee80211_ht_cap))
924 				elems->ht_cap_elem = (void *)pos;
925 			else
926 				elem_parse_failed = true;
927 			break;
928 		case WLAN_EID_HT_OPERATION:
929 			if (elen >= sizeof(struct ieee80211_ht_operation))
930 				elems->ht_operation = (void *)pos;
931 			else
932 				elem_parse_failed = true;
933 			break;
934 		case WLAN_EID_VHT_CAPABILITY:
935 			if (elen >= sizeof(struct ieee80211_vht_cap))
936 				elems->vht_cap_elem = (void *)pos;
937 			else
938 				elem_parse_failed = true;
939 			break;
940 		case WLAN_EID_VHT_OPERATION:
941 			if (elen >= sizeof(struct ieee80211_vht_operation))
942 				elems->vht_operation = (void *)pos;
943 			else
944 				elem_parse_failed = true;
945 			break;
946 		case WLAN_EID_OPMODE_NOTIF:
947 			if (elen > 0)
948 				elems->opmode_notif = pos;
949 			else
950 				elem_parse_failed = true;
951 			break;
952 		case WLAN_EID_MESH_ID:
953 			elems->mesh_id = pos;
954 			elems->mesh_id_len = elen;
955 			break;
956 		case WLAN_EID_MESH_CONFIG:
957 			if (elen >= sizeof(struct ieee80211_meshconf_ie))
958 				elems->mesh_config = (void *)pos;
959 			else
960 				elem_parse_failed = true;
961 			break;
962 		case WLAN_EID_PEER_MGMT:
963 			elems->peering = pos;
964 			elems->peering_len = elen;
965 			break;
966 		case WLAN_EID_MESH_AWAKE_WINDOW:
967 			if (elen >= 2)
968 				elems->awake_window = (void *)pos;
969 			break;
970 		case WLAN_EID_PREQ:
971 			elems->preq = pos;
972 			elems->preq_len = elen;
973 			break;
974 		case WLAN_EID_PREP:
975 			elems->prep = pos;
976 			elems->prep_len = elen;
977 			break;
978 		case WLAN_EID_PERR:
979 			elems->perr = pos;
980 			elems->perr_len = elen;
981 			break;
982 		case WLAN_EID_RANN:
983 			if (elen >= sizeof(struct ieee80211_rann_ie))
984 				elems->rann = (void *)pos;
985 			else
986 				elem_parse_failed = true;
987 			break;
988 		case WLAN_EID_CHANNEL_SWITCH:
989 			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
990 				elem_parse_failed = true;
991 				break;
992 			}
993 			elems->ch_switch_ie = (void *)pos;
994 			break;
995 		case WLAN_EID_EXT_CHANSWITCH_ANN:
996 			if (elen != sizeof(struct ieee80211_ext_chansw_ie)) {
997 				elem_parse_failed = true;
998 				break;
999 			}
1000 			elems->ext_chansw_ie = (void *)pos;
1001 			break;
1002 		case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
1003 			if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) {
1004 				elem_parse_failed = true;
1005 				break;
1006 			}
1007 			elems->sec_chan_offs = (void *)pos;
1008 			break;
1009 		case WLAN_EID_CHAN_SWITCH_PARAM:
1010 			if (elen !=
1011 			    sizeof(*elems->mesh_chansw_params_ie)) {
1012 				elem_parse_failed = true;
1013 				break;
1014 			}
1015 			elems->mesh_chansw_params_ie = (void *)pos;
1016 			break;
1017 		case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
1018 			if (!action ||
1019 			    elen != sizeof(*elems->wide_bw_chansw_ie)) {
1020 				elem_parse_failed = true;
1021 				break;
1022 			}
1023 			elems->wide_bw_chansw_ie = (void *)pos;
1024 			break;
1025 		case WLAN_EID_CHANNEL_SWITCH_WRAPPER:
1026 			if (action) {
1027 				elem_parse_failed = true;
1028 				break;
1029 			}
1030 			/*
1031 			 * This is a bit tricky, but as we only care about
1032 			 * the wide bandwidth channel switch element, so
1033 			 * just parse it out manually.
1034 			 */
1035 			ie = cfg80211_find_ie(WLAN_EID_WIDE_BW_CHANNEL_SWITCH,
1036 					      pos, elen);
1037 			if (ie) {
1038 				if (ie[1] == sizeof(*elems->wide_bw_chansw_ie))
1039 					elems->wide_bw_chansw_ie =
1040 						(void *)(ie + 2);
1041 				else
1042 					elem_parse_failed = true;
1043 			}
1044 			break;
1045 		case WLAN_EID_COUNTRY:
1046 			elems->country_elem = pos;
1047 			elems->country_elem_len = elen;
1048 			break;
1049 		case WLAN_EID_PWR_CONSTRAINT:
1050 			if (elen != 1) {
1051 				elem_parse_failed = true;
1052 				break;
1053 			}
1054 			elems->pwr_constr_elem = pos;
1055 			break;
1056 		case WLAN_EID_CISCO_VENDOR_SPECIFIC:
1057 			/* Lots of different options exist, but we only care
1058 			 * about the Dynamic Transmit Power Control element.
1059 			 * First check for the Cisco OUI, then for the DTPC
1060 			 * tag (0x00).
1061 			 */
1062 			if (elen < 4) {
1063 				elem_parse_failed = true;
1064 				break;
1065 			}
1066 
1067 			if (pos[0] != 0x00 || pos[1] != 0x40 ||
1068 			    pos[2] != 0x96 || pos[3] != 0x00)
1069 				break;
1070 
1071 			if (elen != 6) {
1072 				elem_parse_failed = true;
1073 				break;
1074 			}
1075 
1076 			if (calc_crc)
1077 				crc = crc32_be(crc, pos - 2, elen + 2);
1078 
1079 			elems->cisco_dtpc_elem = pos;
1080 			break;
1081 		case WLAN_EID_TIMEOUT_INTERVAL:
1082 			if (elen >= sizeof(struct ieee80211_timeout_interval_ie))
1083 				elems->timeout_int = (void *)pos;
1084 			else
1085 				elem_parse_failed = true;
1086 			break;
1087 		default:
1088 			break;
1089 		}
1090 
1091 		if (elem_parse_failed)
1092 			elems->parse_error = true;
1093 		else
1094 			__set_bit(id, seen_elems);
1095 
1096 		left -= elen;
1097 		pos += elen;
1098 	}
1099 
1100 	if (left != 0)
1101 		elems->parse_error = true;
1102 
1103 	return crc;
1104 }
1105 
1106 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
1107 			       bool bss_notify)
1108 {
1109 	struct ieee80211_local *local = sdata->local;
1110 	struct ieee80211_tx_queue_params qparam;
1111 	struct ieee80211_chanctx_conf *chanctx_conf;
1112 	int ac;
1113 	bool use_11b, enable_qos;
1114 	bool is_ocb; /* Use another EDCA parameters if dot11OCBActivated=true */
1115 	int aCWmin, aCWmax;
1116 
1117 	if (!local->ops->conf_tx)
1118 		return;
1119 
1120 	if (local->hw.queues < IEEE80211_NUM_ACS)
1121 		return;
1122 
1123 	memset(&qparam, 0, sizeof(qparam));
1124 
1125 	rcu_read_lock();
1126 	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
1127 	use_11b = (chanctx_conf &&
1128 		   chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
1129 		 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
1130 	rcu_read_unlock();
1131 
1132 	/*
1133 	 * By default disable QoS in STA mode for old access points, which do
1134 	 * not support 802.11e. New APs will provide proper queue parameters,
1135 	 * that we will configure later.
1136 	 */
1137 	enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);
1138 
1139 	is_ocb = (sdata->vif.type == NL80211_IFTYPE_OCB);
1140 
1141 	/* Set defaults according to 802.11-2007 Table 7-37 */
1142 	aCWmax = 1023;
1143 	if (use_11b)
1144 		aCWmin = 31;
1145 	else
1146 		aCWmin = 15;
1147 
1148 	/* Confiure old 802.11b/g medium access rules. */
1149 	qparam.cw_max = aCWmax;
1150 	qparam.cw_min = aCWmin;
1151 	qparam.txop = 0;
1152 	qparam.aifs = 2;
1153 
1154 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
1155 		/* Update if QoS is enabled. */
1156 		if (enable_qos) {
1157 			switch (ac) {
1158 			case IEEE80211_AC_BK:
1159 				qparam.cw_max = aCWmax;
1160 				qparam.cw_min = aCWmin;
1161 				qparam.txop = 0;
1162 				if (is_ocb)
1163 					qparam.aifs = 9;
1164 				else
1165 					qparam.aifs = 7;
1166 				break;
1167 			/* never happens but let's not leave undefined */
1168 			default:
1169 			case IEEE80211_AC_BE:
1170 				qparam.cw_max = aCWmax;
1171 				qparam.cw_min = aCWmin;
1172 				qparam.txop = 0;
1173 				if (is_ocb)
1174 					qparam.aifs = 6;
1175 				else
1176 					qparam.aifs = 3;
1177 				break;
1178 			case IEEE80211_AC_VI:
1179 				qparam.cw_max = aCWmin;
1180 				qparam.cw_min = (aCWmin + 1) / 2 - 1;
1181 				if (is_ocb)
1182 					qparam.txop = 0;
1183 				else if (use_11b)
1184 					qparam.txop = 6016/32;
1185 				else
1186 					qparam.txop = 3008/32;
1187 
1188 				if (is_ocb)
1189 					qparam.aifs = 3;
1190 				else
1191 					qparam.aifs = 2;
1192 				break;
1193 			case IEEE80211_AC_VO:
1194 				qparam.cw_max = (aCWmin + 1) / 2 - 1;
1195 				qparam.cw_min = (aCWmin + 1) / 4 - 1;
1196 				if (is_ocb)
1197 					qparam.txop = 0;
1198 				else if (use_11b)
1199 					qparam.txop = 3264/32;
1200 				else
1201 					qparam.txop = 1504/32;
1202 				qparam.aifs = 2;
1203 				break;
1204 			}
1205 		}
1206 
1207 		qparam.uapsd = false;
1208 
1209 		sdata->tx_conf[ac] = qparam;
1210 		drv_conf_tx(local, sdata, ac, &qparam);
1211 	}
1212 
1213 	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1214 	    sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
1215 		sdata->vif.bss_conf.qos = enable_qos;
1216 		if (bss_notify)
1217 			ieee80211_bss_info_change_notify(sdata,
1218 							 BSS_CHANGED_QOS);
1219 	}
1220 }
1221 
1222 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
1223 			 u16 transaction, u16 auth_alg, u16 status,
1224 			 const u8 *extra, size_t extra_len, const u8 *da,
1225 			 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx,
1226 			 u32 tx_flags)
1227 {
1228 	struct ieee80211_local *local = sdata->local;
1229 	struct sk_buff *skb;
1230 	struct ieee80211_mgmt *mgmt;
1231 	int err;
1232 
1233 	/* 24 + 6 = header + auth_algo + auth_transaction + status_code */
1234 	skb = dev_alloc_skb(local->hw.extra_tx_headroom + IEEE80211_WEP_IV_LEN +
1235 			    24 + 6 + extra_len + IEEE80211_WEP_ICV_LEN);
1236 	if (!skb)
1237 		return;
1238 
1239 	skb_reserve(skb, local->hw.extra_tx_headroom + IEEE80211_WEP_IV_LEN);
1240 
1241 	mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
1242 	memset(mgmt, 0, 24 + 6);
1243 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1244 					  IEEE80211_STYPE_AUTH);
1245 	memcpy(mgmt->da, da, ETH_ALEN);
1246 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1247 	memcpy(mgmt->bssid, bssid, ETH_ALEN);
1248 	mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
1249 	mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
1250 	mgmt->u.auth.status_code = cpu_to_le16(status);
1251 	if (extra)
1252 		memcpy(skb_put(skb, extra_len), extra, extra_len);
1253 
1254 	if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
1255 		mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
1256 		err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
1257 		WARN_ON(err);
1258 	}
1259 
1260 	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT |
1261 					tx_flags;
1262 	ieee80211_tx_skb(sdata, skb);
1263 }
1264 
1265 void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
1266 				    const u8 *bssid, u16 stype, u16 reason,
1267 				    bool send_frame, u8 *frame_buf)
1268 {
1269 	struct ieee80211_local *local = sdata->local;
1270 	struct sk_buff *skb;
1271 	struct ieee80211_mgmt *mgmt = (void *)frame_buf;
1272 
1273 	/* build frame */
1274 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
1275 	mgmt->duration = 0; /* initialize only */
1276 	mgmt->seq_ctrl = 0; /* initialize only */
1277 	memcpy(mgmt->da, bssid, ETH_ALEN);
1278 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1279 	memcpy(mgmt->bssid, bssid, ETH_ALEN);
1280 	/* u.deauth.reason_code == u.disassoc.reason_code */
1281 	mgmt->u.deauth.reason_code = cpu_to_le16(reason);
1282 
1283 	if (send_frame) {
1284 		skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1285 				    IEEE80211_DEAUTH_FRAME_LEN);
1286 		if (!skb)
1287 			return;
1288 
1289 		skb_reserve(skb, local->hw.extra_tx_headroom);
1290 
1291 		/* copy in frame */
1292 		memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
1293 		       mgmt, IEEE80211_DEAUTH_FRAME_LEN);
1294 
1295 		if (sdata->vif.type != NL80211_IFTYPE_STATION ||
1296 		    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
1297 			IEEE80211_SKB_CB(skb)->flags |=
1298 				IEEE80211_TX_INTFL_DONT_ENCRYPT;
1299 
1300 		ieee80211_tx_skb(sdata, skb);
1301 	}
1302 }
1303 
1304 static int ieee80211_build_preq_ies_band(struct ieee80211_local *local,
1305 					 u8 *buffer, size_t buffer_len,
1306 					 const u8 *ie, size_t ie_len,
1307 					 enum ieee80211_band band,
1308 					 u32 rate_mask,
1309 					 struct cfg80211_chan_def *chandef,
1310 					 size_t *offset)
1311 {
1312 	struct ieee80211_supported_band *sband;
1313 	u8 *pos = buffer, *end = buffer + buffer_len;
1314 	size_t noffset;
1315 	int supp_rates_len, i;
1316 	u8 rates[32];
1317 	int num_rates;
1318 	int ext_rates_len;
1319 	int shift;
1320 	u32 rate_flags;
1321 	bool have_80mhz = false;
1322 
1323 	*offset = 0;
1324 
1325 	sband = local->hw.wiphy->bands[band];
1326 	if (WARN_ON_ONCE(!sband))
1327 		return 0;
1328 
1329 	rate_flags = ieee80211_chandef_rate_flags(chandef);
1330 	shift = ieee80211_chandef_get_shift(chandef);
1331 
1332 	num_rates = 0;
1333 	for (i = 0; i < sband->n_bitrates; i++) {
1334 		if ((BIT(i) & rate_mask) == 0)
1335 			continue; /* skip rate */
1336 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
1337 			continue;
1338 
1339 		rates[num_rates++] =
1340 			(u8) DIV_ROUND_UP(sband->bitrates[i].bitrate,
1341 					  (1 << shift) * 5);
1342 	}
1343 
1344 	supp_rates_len = min_t(int, num_rates, 8);
1345 
1346 	if (end - pos < 2 + supp_rates_len)
1347 		goto out_err;
1348 	*pos++ = WLAN_EID_SUPP_RATES;
1349 	*pos++ = supp_rates_len;
1350 	memcpy(pos, rates, supp_rates_len);
1351 	pos += supp_rates_len;
1352 
1353 	/* insert "request information" if in custom IEs */
1354 	if (ie && ie_len) {
1355 		static const u8 before_extrates[] = {
1356 			WLAN_EID_SSID,
1357 			WLAN_EID_SUPP_RATES,
1358 			WLAN_EID_REQUEST,
1359 		};
1360 		noffset = ieee80211_ie_split(ie, ie_len,
1361 					     before_extrates,
1362 					     ARRAY_SIZE(before_extrates),
1363 					     *offset);
1364 		if (end - pos < noffset - *offset)
1365 			goto out_err;
1366 		memcpy(pos, ie + *offset, noffset - *offset);
1367 		pos += noffset - *offset;
1368 		*offset = noffset;
1369 	}
1370 
1371 	ext_rates_len = num_rates - supp_rates_len;
1372 	if (ext_rates_len > 0) {
1373 		if (end - pos < 2 + ext_rates_len)
1374 			goto out_err;
1375 		*pos++ = WLAN_EID_EXT_SUPP_RATES;
1376 		*pos++ = ext_rates_len;
1377 		memcpy(pos, rates + supp_rates_len, ext_rates_len);
1378 		pos += ext_rates_len;
1379 	}
1380 
1381 	if (chandef->chan && sband->band == IEEE80211_BAND_2GHZ) {
1382 		if (end - pos < 3)
1383 			goto out_err;
1384 		*pos++ = WLAN_EID_DS_PARAMS;
1385 		*pos++ = 1;
1386 		*pos++ = ieee80211_frequency_to_channel(
1387 				chandef->chan->center_freq);
1388 	}
1389 
1390 	/* insert custom IEs that go before HT */
1391 	if (ie && ie_len) {
1392 		static const u8 before_ht[] = {
1393 			WLAN_EID_SSID,
1394 			WLAN_EID_SUPP_RATES,
1395 			WLAN_EID_REQUEST,
1396 			WLAN_EID_EXT_SUPP_RATES,
1397 			WLAN_EID_DS_PARAMS,
1398 			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1399 		};
1400 		noffset = ieee80211_ie_split(ie, ie_len,
1401 					     before_ht, ARRAY_SIZE(before_ht),
1402 					     *offset);
1403 		if (end - pos < noffset - *offset)
1404 			goto out_err;
1405 		memcpy(pos, ie + *offset, noffset - *offset);
1406 		pos += noffset - *offset;
1407 		*offset = noffset;
1408 	}
1409 
1410 	if (sband->ht_cap.ht_supported) {
1411 		if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
1412 			goto out_err;
1413 		pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
1414 						sband->ht_cap.cap);
1415 	}
1416 
1417 	/*
1418 	 * If adding more here, adjust code in main.c
1419 	 * that calculates local->scan_ies_len.
1420 	 */
1421 
1422 	/* insert custom IEs that go before VHT */
1423 	if (ie && ie_len) {
1424 		static const u8 before_vht[] = {
1425 			WLAN_EID_SSID,
1426 			WLAN_EID_SUPP_RATES,
1427 			WLAN_EID_REQUEST,
1428 			WLAN_EID_EXT_SUPP_RATES,
1429 			WLAN_EID_DS_PARAMS,
1430 			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1431 			WLAN_EID_HT_CAPABILITY,
1432 			WLAN_EID_BSS_COEX_2040,
1433 			WLAN_EID_EXT_CAPABILITY,
1434 			WLAN_EID_SSID_LIST,
1435 			WLAN_EID_CHANNEL_USAGE,
1436 			WLAN_EID_INTERWORKING,
1437 			/* mesh ID can't happen here */
1438 			/* 60 GHz can't happen here right now */
1439 		};
1440 		noffset = ieee80211_ie_split(ie, ie_len,
1441 					     before_vht, ARRAY_SIZE(before_vht),
1442 					     *offset);
1443 		if (end - pos < noffset - *offset)
1444 			goto out_err;
1445 		memcpy(pos, ie + *offset, noffset - *offset);
1446 		pos += noffset - *offset;
1447 		*offset = noffset;
1448 	}
1449 
1450 	/* Check if any channel in this sband supports at least 80 MHz */
1451 	for (i = 0; i < sband->n_channels; i++) {
1452 		if (sband->channels[i].flags & (IEEE80211_CHAN_DISABLED |
1453 						IEEE80211_CHAN_NO_80MHZ))
1454 			continue;
1455 
1456 		have_80mhz = true;
1457 		break;
1458 	}
1459 
1460 	if (sband->vht_cap.vht_supported && have_80mhz) {
1461 		if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
1462 			goto out_err;
1463 		pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
1464 						 sband->vht_cap.cap);
1465 	}
1466 
1467 	return pos - buffer;
1468  out_err:
1469 	WARN_ONCE(1, "not enough space for preq IEs\n");
1470 	return pos - buffer;
1471 }
1472 
1473 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1474 			     size_t buffer_len,
1475 			     struct ieee80211_scan_ies *ie_desc,
1476 			     const u8 *ie, size_t ie_len,
1477 			     u8 bands_used, u32 *rate_masks,
1478 			     struct cfg80211_chan_def *chandef)
1479 {
1480 	size_t pos = 0, old_pos = 0, custom_ie_offset = 0;
1481 	int i;
1482 
1483 	memset(ie_desc, 0, sizeof(*ie_desc));
1484 
1485 	for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1486 		if (bands_used & BIT(i)) {
1487 			pos += ieee80211_build_preq_ies_band(local,
1488 							     buffer + pos,
1489 							     buffer_len - pos,
1490 							     ie, ie_len, i,
1491 							     rate_masks[i],
1492 							     chandef,
1493 							     &custom_ie_offset);
1494 			ie_desc->ies[i] = buffer + old_pos;
1495 			ie_desc->len[i] = pos - old_pos;
1496 			old_pos = pos;
1497 		}
1498 	}
1499 
1500 	/* add any remaining custom IEs */
1501 	if (ie && ie_len) {
1502 		if (WARN_ONCE(buffer_len - pos < ie_len - custom_ie_offset,
1503 			      "not enough space for preq custom IEs\n"))
1504 			return pos;
1505 		memcpy(buffer + pos, ie + custom_ie_offset,
1506 		       ie_len - custom_ie_offset);
1507 		ie_desc->common_ies = buffer + pos;
1508 		ie_desc->common_ie_len = ie_len - custom_ie_offset;
1509 		pos += ie_len - custom_ie_offset;
1510 	}
1511 
1512 	return pos;
1513 };
1514 
1515 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1516 					  const u8 *src, const u8 *dst,
1517 					  u32 ratemask,
1518 					  struct ieee80211_channel *chan,
1519 					  const u8 *ssid, size_t ssid_len,
1520 					  const u8 *ie, size_t ie_len,
1521 					  bool directed)
1522 {
1523 	struct ieee80211_local *local = sdata->local;
1524 	struct cfg80211_chan_def chandef;
1525 	struct sk_buff *skb;
1526 	struct ieee80211_mgmt *mgmt;
1527 	int ies_len;
1528 	u32 rate_masks[IEEE80211_NUM_BANDS] = {};
1529 	struct ieee80211_scan_ies dummy_ie_desc;
1530 
1531 	/*
1532 	 * Do not send DS Channel parameter for directed probe requests
1533 	 * in order to maximize the chance that we get a response.  Some
1534 	 * badly-behaved APs don't respond when this parameter is included.
1535 	 */
1536 	chandef.width = sdata->vif.bss_conf.chandef.width;
1537 	if (directed)
1538 		chandef.chan = NULL;
1539 	else
1540 		chandef.chan = chan;
1541 
1542 	skb = ieee80211_probereq_get(&local->hw, src, ssid, ssid_len,
1543 				     100 + ie_len);
1544 	if (!skb)
1545 		return NULL;
1546 
1547 	rate_masks[chan->band] = ratemask;
1548 	ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
1549 					   skb_tailroom(skb), &dummy_ie_desc,
1550 					   ie, ie_len, BIT(chan->band),
1551 					   rate_masks, &chandef);
1552 	skb_put(skb, ies_len);
1553 
1554 	if (dst) {
1555 		mgmt = (struct ieee80211_mgmt *) skb->data;
1556 		memcpy(mgmt->da, dst, ETH_ALEN);
1557 		memcpy(mgmt->bssid, dst, ETH_ALEN);
1558 	}
1559 
1560 	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1561 
1562 	return skb;
1563 }
1564 
1565 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata,
1566 			      const u8 *src, const u8 *dst,
1567 			      const u8 *ssid, size_t ssid_len,
1568 			      const u8 *ie, size_t ie_len,
1569 			      u32 ratemask, bool directed, u32 tx_flags,
1570 			      struct ieee80211_channel *channel, bool scan)
1571 {
1572 	struct sk_buff *skb;
1573 
1574 	skb = ieee80211_build_probe_req(sdata, src, dst, ratemask, channel,
1575 					ssid, ssid_len,
1576 					ie, ie_len, directed);
1577 	if (skb) {
1578 		IEEE80211_SKB_CB(skb)->flags |= tx_flags;
1579 		if (scan)
1580 			ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
1581 		else
1582 			ieee80211_tx_skb(sdata, skb);
1583 	}
1584 }
1585 
1586 u32 ieee80211_sta_get_rates(struct ieee80211_sub_if_data *sdata,
1587 			    struct ieee802_11_elems *elems,
1588 			    enum ieee80211_band band, u32 *basic_rates)
1589 {
1590 	struct ieee80211_supported_band *sband;
1591 	size_t num_rates;
1592 	u32 supp_rates, rate_flags;
1593 	int i, j, shift;
1594 	sband = sdata->local->hw.wiphy->bands[band];
1595 
1596 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
1597 	shift = ieee80211_vif_get_shift(&sdata->vif);
1598 
1599 	if (WARN_ON(!sband))
1600 		return 1;
1601 
1602 	num_rates = sband->n_bitrates;
1603 	supp_rates = 0;
1604 	for (i = 0; i < elems->supp_rates_len +
1605 		     elems->ext_supp_rates_len; i++) {
1606 		u8 rate = 0;
1607 		int own_rate;
1608 		bool is_basic;
1609 		if (i < elems->supp_rates_len)
1610 			rate = elems->supp_rates[i];
1611 		else if (elems->ext_supp_rates)
1612 			rate = elems->ext_supp_rates
1613 				[i - elems->supp_rates_len];
1614 		own_rate = 5 * (rate & 0x7f);
1615 		is_basic = !!(rate & 0x80);
1616 
1617 		if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
1618 			continue;
1619 
1620 		for (j = 0; j < num_rates; j++) {
1621 			int brate;
1622 			if ((rate_flags & sband->bitrates[j].flags)
1623 			    != rate_flags)
1624 				continue;
1625 
1626 			brate = DIV_ROUND_UP(sband->bitrates[j].bitrate,
1627 					     1 << shift);
1628 
1629 			if (brate == own_rate) {
1630 				supp_rates |= BIT(j);
1631 				if (basic_rates && is_basic)
1632 					*basic_rates |= BIT(j);
1633 			}
1634 		}
1635 	}
1636 	return supp_rates;
1637 }
1638 
1639 void ieee80211_stop_device(struct ieee80211_local *local)
1640 {
1641 	ieee80211_led_radio(local, false);
1642 	ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1643 
1644 	cancel_work_sync(&local->reconfig_filter);
1645 
1646 	flush_workqueue(local->workqueue);
1647 	drv_stop(local);
1648 }
1649 
1650 static void ieee80211_handle_reconfig_failure(struct ieee80211_local *local)
1651 {
1652 	struct ieee80211_sub_if_data *sdata;
1653 	struct ieee80211_chanctx *ctx;
1654 
1655 	/*
1656 	 * We get here if during resume the device can't be restarted properly.
1657 	 * We might also get here if this happens during HW reset, which is a
1658 	 * slightly different situation and we need to drop all connections in
1659 	 * the latter case.
1660 	 *
1661 	 * Ask cfg80211 to turn off all interfaces, this will result in more
1662 	 * warnings but at least we'll then get into a clean stopped state.
1663 	 */
1664 
1665 	local->resuming = false;
1666 	local->suspended = false;
1667 	local->started = false;
1668 	local->in_reconfig = false;
1669 
1670 	/* scheduled scan clearly can't be running any more, but tell
1671 	 * cfg80211 and clear local state
1672 	 */
1673 	ieee80211_sched_scan_end(local);
1674 
1675 	list_for_each_entry(sdata, &local->interfaces, list)
1676 		sdata->flags &= ~IEEE80211_SDATA_IN_DRIVER;
1677 
1678 	/* Mark channel contexts as not being in the driver any more to avoid
1679 	 * removing them from the driver during the shutdown process...
1680 	 */
1681 	mutex_lock(&local->chanctx_mtx);
1682 	list_for_each_entry(ctx, &local->chanctx_list, list)
1683 		ctx->driver_present = false;
1684 	mutex_unlock(&local->chanctx_mtx);
1685 
1686 	cfg80211_shutdown_all_interfaces(local->hw.wiphy);
1687 }
1688 
1689 static void ieee80211_assign_chanctx(struct ieee80211_local *local,
1690 				     struct ieee80211_sub_if_data *sdata)
1691 {
1692 	struct ieee80211_chanctx_conf *conf;
1693 	struct ieee80211_chanctx *ctx;
1694 
1695 	if (!local->use_chanctx)
1696 		return;
1697 
1698 	mutex_lock(&local->chanctx_mtx);
1699 	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1700 					 lockdep_is_held(&local->chanctx_mtx));
1701 	if (conf) {
1702 		ctx = container_of(conf, struct ieee80211_chanctx, conf);
1703 		drv_assign_vif_chanctx(local, sdata, ctx);
1704 	}
1705 	mutex_unlock(&local->chanctx_mtx);
1706 }
1707 
1708 int ieee80211_reconfig(struct ieee80211_local *local)
1709 {
1710 	struct ieee80211_hw *hw = &local->hw;
1711 	struct ieee80211_sub_if_data *sdata;
1712 	struct ieee80211_chanctx *ctx;
1713 	struct sta_info *sta;
1714 	int res, i;
1715 	bool reconfig_due_to_wowlan = false;
1716 	struct ieee80211_sub_if_data *sched_scan_sdata;
1717 	struct cfg80211_sched_scan_request *sched_scan_req;
1718 	bool sched_scan_stopped = false;
1719 	bool suspended = local->suspended;
1720 
1721 	/* nothing to do if HW shouldn't run */
1722 	if (!local->open_count)
1723 		goto wake_up;
1724 
1725 #ifdef CONFIG_PM
1726 	if (suspended)
1727 		local->resuming = true;
1728 
1729 	if (local->wowlan) {
1730 		/*
1731 		 * In the wowlan case, both mac80211 and the device
1732 		 * are functional when the resume op is called, so
1733 		 * clear local->suspended so the device could operate
1734 		 * normally (e.g. pass rx frames).
1735 		 */
1736 		local->suspended = false;
1737 		res = drv_resume(local);
1738 		local->wowlan = false;
1739 		if (res < 0) {
1740 			local->resuming = false;
1741 			return res;
1742 		}
1743 		if (res == 0)
1744 			goto wake_up;
1745 		WARN_ON(res > 1);
1746 		/*
1747 		 * res is 1, which means the driver requested
1748 		 * to go through a regular reset on wakeup.
1749 		 * restore local->suspended in this case.
1750 		 */
1751 		reconfig_due_to_wowlan = true;
1752 		local->suspended = true;
1753 	}
1754 #endif
1755 
1756 	/*
1757 	 * Upon resume hardware can sometimes be goofy due to
1758 	 * various platform / driver / bus issues, so restarting
1759 	 * the device may at times not work immediately. Propagate
1760 	 * the error.
1761 	 */
1762 	res = drv_start(local);
1763 	if (res) {
1764 		if (suspended)
1765 			WARN(1, "Hardware became unavailable upon resume. This could be a software issue prior to suspend or a hardware issue.\n");
1766 		else
1767 			WARN(1, "Hardware became unavailable during restart.\n");
1768 		ieee80211_handle_reconfig_failure(local);
1769 		return res;
1770 	}
1771 
1772 	/* setup fragmentation threshold */
1773 	drv_set_frag_threshold(local, hw->wiphy->frag_threshold);
1774 
1775 	/* setup RTS threshold */
1776 	drv_set_rts_threshold(local, hw->wiphy->rts_threshold);
1777 
1778 	/* reset coverage class */
1779 	drv_set_coverage_class(local, hw->wiphy->coverage_class);
1780 
1781 	ieee80211_led_radio(local, true);
1782 	ieee80211_mod_tpt_led_trig(local,
1783 				   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1784 
1785 	/* add interfaces */
1786 	sdata = rtnl_dereference(local->monitor_sdata);
1787 	if (sdata) {
1788 		/* in HW restart it exists already */
1789 		WARN_ON(local->resuming);
1790 		res = drv_add_interface(local, sdata);
1791 		if (WARN_ON(res)) {
1792 			RCU_INIT_POINTER(local->monitor_sdata, NULL);
1793 			synchronize_net();
1794 			kfree(sdata);
1795 		}
1796 	}
1797 
1798 	list_for_each_entry(sdata, &local->interfaces, list) {
1799 		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1800 		    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1801 		    ieee80211_sdata_running(sdata)) {
1802 			res = drv_add_interface(local, sdata);
1803 			if (WARN_ON(res))
1804 				break;
1805 		}
1806 	}
1807 
1808 	/* If adding any of the interfaces failed above, roll back and
1809 	 * report failure.
1810 	 */
1811 	if (res) {
1812 		list_for_each_entry_continue_reverse(sdata, &local->interfaces,
1813 						     list)
1814 			if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1815 			    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1816 			    ieee80211_sdata_running(sdata))
1817 				drv_remove_interface(local, sdata);
1818 		ieee80211_handle_reconfig_failure(local);
1819 		return res;
1820 	}
1821 
1822 	/* add channel contexts */
1823 	if (local->use_chanctx) {
1824 		mutex_lock(&local->chanctx_mtx);
1825 		list_for_each_entry(ctx, &local->chanctx_list, list)
1826 			if (ctx->replace_state !=
1827 			    IEEE80211_CHANCTX_REPLACES_OTHER)
1828 				WARN_ON(drv_add_chanctx(local, ctx));
1829 		mutex_unlock(&local->chanctx_mtx);
1830 
1831 		list_for_each_entry(sdata, &local->interfaces, list) {
1832 			if (!ieee80211_sdata_running(sdata))
1833 				continue;
1834 			ieee80211_assign_chanctx(local, sdata);
1835 		}
1836 
1837 		sdata = rtnl_dereference(local->monitor_sdata);
1838 		if (sdata && ieee80211_sdata_running(sdata))
1839 			ieee80211_assign_chanctx(local, sdata);
1840 	}
1841 
1842 	/* add STAs back */
1843 	mutex_lock(&local->sta_mtx);
1844 	list_for_each_entry(sta, &local->sta_list, list) {
1845 		enum ieee80211_sta_state state;
1846 
1847 		if (!sta->uploaded)
1848 			continue;
1849 
1850 		/* AP-mode stations will be added later */
1851 		if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
1852 			continue;
1853 
1854 		for (state = IEEE80211_STA_NOTEXIST;
1855 		     state < sta->sta_state; state++)
1856 			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1857 					      state + 1));
1858 	}
1859 	mutex_unlock(&local->sta_mtx);
1860 
1861 	/* reconfigure tx conf */
1862 	if (hw->queues >= IEEE80211_NUM_ACS) {
1863 		list_for_each_entry(sdata, &local->interfaces, list) {
1864 			if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1865 			    sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1866 			    !ieee80211_sdata_running(sdata))
1867 				continue;
1868 
1869 			for (i = 0; i < IEEE80211_NUM_ACS; i++)
1870 				drv_conf_tx(local, sdata, i,
1871 					    &sdata->tx_conf[i]);
1872 		}
1873 	}
1874 
1875 	/* reconfigure hardware */
1876 	ieee80211_hw_config(local, ~0);
1877 
1878 	ieee80211_configure_filter(local);
1879 
1880 	/* Finally also reconfigure all the BSS information */
1881 	list_for_each_entry(sdata, &local->interfaces, list) {
1882 		u32 changed;
1883 
1884 		if (!ieee80211_sdata_running(sdata))
1885 			continue;
1886 
1887 		/* common change flags for all interface types */
1888 		changed = BSS_CHANGED_ERP_CTS_PROT |
1889 			  BSS_CHANGED_ERP_PREAMBLE |
1890 			  BSS_CHANGED_ERP_SLOT |
1891 			  BSS_CHANGED_HT |
1892 			  BSS_CHANGED_BASIC_RATES |
1893 			  BSS_CHANGED_BEACON_INT |
1894 			  BSS_CHANGED_BSSID |
1895 			  BSS_CHANGED_CQM |
1896 			  BSS_CHANGED_QOS |
1897 			  BSS_CHANGED_IDLE |
1898 			  BSS_CHANGED_TXPOWER;
1899 
1900 		switch (sdata->vif.type) {
1901 		case NL80211_IFTYPE_STATION:
1902 			changed |= BSS_CHANGED_ASSOC |
1903 				   BSS_CHANGED_ARP_FILTER |
1904 				   BSS_CHANGED_PS;
1905 
1906 			/* Re-send beacon info report to the driver */
1907 			if (sdata->u.mgd.have_beacon)
1908 				changed |= BSS_CHANGED_BEACON_INFO;
1909 
1910 			sdata_lock(sdata);
1911 			ieee80211_bss_info_change_notify(sdata, changed);
1912 			sdata_unlock(sdata);
1913 			break;
1914 		case NL80211_IFTYPE_OCB:
1915 			changed |= BSS_CHANGED_OCB;
1916 			ieee80211_bss_info_change_notify(sdata, changed);
1917 			break;
1918 		case NL80211_IFTYPE_ADHOC:
1919 			changed |= BSS_CHANGED_IBSS;
1920 			/* fall through */
1921 		case NL80211_IFTYPE_AP:
1922 			changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
1923 
1924 			if (sdata->vif.type == NL80211_IFTYPE_AP) {
1925 				changed |= BSS_CHANGED_AP_PROBE_RESP;
1926 
1927 				if (rcu_access_pointer(sdata->u.ap.beacon))
1928 					drv_start_ap(local, sdata);
1929 			}
1930 
1931 			/* fall through */
1932 		case NL80211_IFTYPE_MESH_POINT:
1933 			if (sdata->vif.bss_conf.enable_beacon) {
1934 				changed |= BSS_CHANGED_BEACON |
1935 					   BSS_CHANGED_BEACON_ENABLED;
1936 				ieee80211_bss_info_change_notify(sdata, changed);
1937 			}
1938 			break;
1939 		case NL80211_IFTYPE_WDS:
1940 		case NL80211_IFTYPE_AP_VLAN:
1941 		case NL80211_IFTYPE_MONITOR:
1942 		case NL80211_IFTYPE_P2P_DEVICE:
1943 			/* nothing to do */
1944 			break;
1945 		case NL80211_IFTYPE_UNSPECIFIED:
1946 		case NUM_NL80211_IFTYPES:
1947 		case NL80211_IFTYPE_P2P_CLIENT:
1948 		case NL80211_IFTYPE_P2P_GO:
1949 			WARN_ON(1);
1950 			break;
1951 		}
1952 	}
1953 
1954 	ieee80211_recalc_ps(local, -1);
1955 
1956 	/*
1957 	 * The sta might be in psm against the ap (e.g. because
1958 	 * this was the state before a hw restart), so we
1959 	 * explicitly send a null packet in order to make sure
1960 	 * it'll sync against the ap (and get out of psm).
1961 	 */
1962 	if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
1963 		list_for_each_entry(sdata, &local->interfaces, list) {
1964 			if (sdata->vif.type != NL80211_IFTYPE_STATION)
1965 				continue;
1966 			if (!sdata->u.mgd.associated)
1967 				continue;
1968 
1969 			ieee80211_send_nullfunc(local, sdata, 0);
1970 		}
1971 	}
1972 
1973 	/* APs are now beaconing, add back stations */
1974 	mutex_lock(&local->sta_mtx);
1975 	list_for_each_entry(sta, &local->sta_list, list) {
1976 		enum ieee80211_sta_state state;
1977 
1978 		if (!sta->uploaded)
1979 			continue;
1980 
1981 		if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
1982 			continue;
1983 
1984 		for (state = IEEE80211_STA_NOTEXIST;
1985 		     state < sta->sta_state; state++)
1986 			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1987 					      state + 1));
1988 	}
1989 	mutex_unlock(&local->sta_mtx);
1990 
1991 	/* add back keys */
1992 	list_for_each_entry(sdata, &local->interfaces, list)
1993 		ieee80211_reset_crypto_tx_tailroom(sdata);
1994 
1995 	list_for_each_entry(sdata, &local->interfaces, list)
1996 		if (ieee80211_sdata_running(sdata))
1997 			ieee80211_enable_keys(sdata);
1998 
1999  wake_up:
2000 	local->in_reconfig = false;
2001 	barrier();
2002 
2003 	if (local->monitors == local->open_count && local->monitors > 0)
2004 		ieee80211_add_virtual_monitor(local);
2005 
2006 	/*
2007 	 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
2008 	 * sessions can be established after a resume.
2009 	 *
2010 	 * Also tear down aggregation sessions since reconfiguring
2011 	 * them in a hardware restart scenario is not easily done
2012 	 * right now, and the hardware will have lost information
2013 	 * about the sessions, but we and the AP still think they
2014 	 * are active. This is really a workaround though.
2015 	 */
2016 	if (ieee80211_hw_check(hw, AMPDU_AGGREGATION)) {
2017 		mutex_lock(&local->sta_mtx);
2018 
2019 		list_for_each_entry(sta, &local->sta_list, list) {
2020 			ieee80211_sta_tear_down_BA_sessions(
2021 					sta, AGG_STOP_LOCAL_REQUEST);
2022 			clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
2023 		}
2024 
2025 		mutex_unlock(&local->sta_mtx);
2026 	}
2027 
2028 	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
2029 					IEEE80211_QUEUE_STOP_REASON_SUSPEND,
2030 					false);
2031 
2032 	/*
2033 	 * Reconfigure sched scan if it was interrupted by FW restart or
2034 	 * suspend.
2035 	 */
2036 	mutex_lock(&local->mtx);
2037 	sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata,
2038 						lockdep_is_held(&local->mtx));
2039 	sched_scan_req = rcu_dereference_protected(local->sched_scan_req,
2040 						lockdep_is_held(&local->mtx));
2041 	if (sched_scan_sdata && sched_scan_req)
2042 		/*
2043 		 * Sched scan stopped, but we don't want to report it. Instead,
2044 		 * we're trying to reschedule.
2045 		 */
2046 		if (__ieee80211_request_sched_scan_start(sched_scan_sdata,
2047 							 sched_scan_req))
2048 			sched_scan_stopped = true;
2049 	mutex_unlock(&local->mtx);
2050 
2051 	if (sched_scan_stopped)
2052 		cfg80211_sched_scan_stopped_rtnl(local->hw.wiphy);
2053 
2054 	/*
2055 	 * If this is for hw restart things are still running.
2056 	 * We may want to change that later, however.
2057 	 */
2058 	if (local->open_count && (!suspended || reconfig_due_to_wowlan))
2059 		drv_reconfig_complete(local, IEEE80211_RECONFIG_TYPE_RESTART);
2060 
2061 	if (!suspended)
2062 		return 0;
2063 
2064 #ifdef CONFIG_PM
2065 	/* first set suspended false, then resuming */
2066 	local->suspended = false;
2067 	mb();
2068 	local->resuming = false;
2069 
2070 	/* It's possible that we don't handle the scan completion in
2071 	 * time during suspend, so if it's still marked as completed
2072 	 * here, queue the work and flush it to clean things up.
2073 	 * Instead of calling the worker function directly here, we
2074 	 * really queue it to avoid potential races with other flows
2075 	 * scheduling the same work.
2076 	 */
2077 	if (test_bit(SCAN_COMPLETED, &local->scanning)) {
2078 		ieee80211_queue_delayed_work(&local->hw, &local->scan_work, 0);
2079 		flush_delayed_work(&local->scan_work);
2080 	}
2081 
2082 	if (local->open_count && !reconfig_due_to_wowlan)
2083 		drv_reconfig_complete(local, IEEE80211_RECONFIG_TYPE_SUSPEND);
2084 
2085 	list_for_each_entry(sdata, &local->interfaces, list) {
2086 		if (!ieee80211_sdata_running(sdata))
2087 			continue;
2088 		if (sdata->vif.type == NL80211_IFTYPE_STATION)
2089 			ieee80211_sta_restart(sdata);
2090 	}
2091 
2092 	mod_timer(&local->sta_cleanup, jiffies + 1);
2093 #else
2094 	WARN_ON(1);
2095 #endif
2096 
2097 	return 0;
2098 }
2099 
2100 void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
2101 {
2102 	struct ieee80211_sub_if_data *sdata;
2103 	struct ieee80211_local *local;
2104 	struct ieee80211_key *key;
2105 
2106 	if (WARN_ON(!vif))
2107 		return;
2108 
2109 	sdata = vif_to_sdata(vif);
2110 	local = sdata->local;
2111 
2112 	if (WARN_ON(!local->resuming))
2113 		return;
2114 
2115 	if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
2116 		return;
2117 
2118 	sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;
2119 
2120 	mutex_lock(&local->key_mtx);
2121 	list_for_each_entry(key, &sdata->key_list, list)
2122 		key->flags |= KEY_FLAG_TAINTED;
2123 	mutex_unlock(&local->key_mtx);
2124 }
2125 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);
2126 
2127 void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
2128 {
2129 	struct ieee80211_local *local = sdata->local;
2130 	struct ieee80211_chanctx_conf *chanctx_conf;
2131 	struct ieee80211_chanctx *chanctx;
2132 
2133 	mutex_lock(&local->chanctx_mtx);
2134 
2135 	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
2136 					lockdep_is_held(&local->chanctx_mtx));
2137 
2138 	if (WARN_ON_ONCE(!chanctx_conf))
2139 		goto unlock;
2140 
2141 	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
2142 	ieee80211_recalc_smps_chanctx(local, chanctx);
2143  unlock:
2144 	mutex_unlock(&local->chanctx_mtx);
2145 }
2146 
2147 void ieee80211_recalc_min_chandef(struct ieee80211_sub_if_data *sdata)
2148 {
2149 	struct ieee80211_local *local = sdata->local;
2150 	struct ieee80211_chanctx_conf *chanctx_conf;
2151 	struct ieee80211_chanctx *chanctx;
2152 
2153 	mutex_lock(&local->chanctx_mtx);
2154 
2155 	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
2156 					lockdep_is_held(&local->chanctx_mtx));
2157 
2158 	if (WARN_ON_ONCE(!chanctx_conf))
2159 		goto unlock;
2160 
2161 	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
2162 	ieee80211_recalc_chanctx_min_def(local, chanctx);
2163  unlock:
2164 	mutex_unlock(&local->chanctx_mtx);
2165 }
2166 
2167 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
2168 {
2169 	size_t pos = offset;
2170 
2171 	while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
2172 		pos += 2 + ies[pos + 1];
2173 
2174 	return pos;
2175 }
2176 
2177 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
2178 					    int rssi_min_thold,
2179 					    int rssi_max_thold)
2180 {
2181 	trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);
2182 
2183 	if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
2184 		return;
2185 
2186 	/*
2187 	 * Scale up threshold values before storing it, as the RSSI averaging
2188 	 * algorithm uses a scaled up value as well. Change this scaling
2189 	 * factor if the RSSI averaging algorithm changes.
2190 	 */
2191 	sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
2192 	sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
2193 }
2194 
2195 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
2196 				    int rssi_min_thold,
2197 				    int rssi_max_thold)
2198 {
2199 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2200 
2201 	WARN_ON(rssi_min_thold == rssi_max_thold ||
2202 		rssi_min_thold > rssi_max_thold);
2203 
2204 	_ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
2205 				       rssi_max_thold);
2206 }
2207 EXPORT_SYMBOL(ieee80211_enable_rssi_reports);
2208 
2209 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
2210 {
2211 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2212 
2213 	_ieee80211_enable_rssi_reports(sdata, 0, 0);
2214 }
2215 EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
2216 
2217 u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
2218 			      u16 cap)
2219 {
2220 	__le16 tmp;
2221 
2222 	*pos++ = WLAN_EID_HT_CAPABILITY;
2223 	*pos++ = sizeof(struct ieee80211_ht_cap);
2224 	memset(pos, 0, sizeof(struct ieee80211_ht_cap));
2225 
2226 	/* capability flags */
2227 	tmp = cpu_to_le16(cap);
2228 	memcpy(pos, &tmp, sizeof(u16));
2229 	pos += sizeof(u16);
2230 
2231 	/* AMPDU parameters */
2232 	*pos++ = ht_cap->ampdu_factor |
2233 		 (ht_cap->ampdu_density <<
2234 			IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);
2235 
2236 	/* MCS set */
2237 	memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
2238 	pos += sizeof(ht_cap->mcs);
2239 
2240 	/* extended capabilities */
2241 	pos += sizeof(__le16);
2242 
2243 	/* BF capabilities */
2244 	pos += sizeof(__le32);
2245 
2246 	/* antenna selection */
2247 	pos += sizeof(u8);
2248 
2249 	return pos;
2250 }
2251 
2252 u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
2253 			       u32 cap)
2254 {
2255 	__le32 tmp;
2256 
2257 	*pos++ = WLAN_EID_VHT_CAPABILITY;
2258 	*pos++ = sizeof(struct ieee80211_vht_cap);
2259 	memset(pos, 0, sizeof(struct ieee80211_vht_cap));
2260 
2261 	/* capability flags */
2262 	tmp = cpu_to_le32(cap);
2263 	memcpy(pos, &tmp, sizeof(u32));
2264 	pos += sizeof(u32);
2265 
2266 	/* VHT MCS set */
2267 	memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
2268 	pos += sizeof(vht_cap->vht_mcs);
2269 
2270 	return pos;
2271 }
2272 
2273 u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
2274 			       const struct cfg80211_chan_def *chandef,
2275 			       u16 prot_mode)
2276 {
2277 	struct ieee80211_ht_operation *ht_oper;
2278 	/* Build HT Information */
2279 	*pos++ = WLAN_EID_HT_OPERATION;
2280 	*pos++ = sizeof(struct ieee80211_ht_operation);
2281 	ht_oper = (struct ieee80211_ht_operation *)pos;
2282 	ht_oper->primary_chan = ieee80211_frequency_to_channel(
2283 					chandef->chan->center_freq);
2284 	switch (chandef->width) {
2285 	case NL80211_CHAN_WIDTH_160:
2286 	case NL80211_CHAN_WIDTH_80P80:
2287 	case NL80211_CHAN_WIDTH_80:
2288 	case NL80211_CHAN_WIDTH_40:
2289 		if (chandef->center_freq1 > chandef->chan->center_freq)
2290 			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2291 		else
2292 			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2293 		break;
2294 	default:
2295 		ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
2296 		break;
2297 	}
2298 	if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
2299 	    chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
2300 	    chandef->width != NL80211_CHAN_WIDTH_20)
2301 		ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
2302 
2303 	ht_oper->operation_mode = cpu_to_le16(prot_mode);
2304 	ht_oper->stbc_param = 0x0000;
2305 
2306 	/* It seems that Basic MCS set and Supported MCS set
2307 	   are identical for the first 10 bytes */
2308 	memset(&ht_oper->basic_set, 0, 16);
2309 	memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
2310 
2311 	return pos + sizeof(struct ieee80211_ht_operation);
2312 }
2313 
2314 u8 *ieee80211_ie_build_vht_oper(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
2315 				const struct cfg80211_chan_def *chandef)
2316 {
2317 	struct ieee80211_vht_operation *vht_oper;
2318 
2319 	*pos++ = WLAN_EID_VHT_OPERATION;
2320 	*pos++ = sizeof(struct ieee80211_vht_operation);
2321 	vht_oper = (struct ieee80211_vht_operation *)pos;
2322 	vht_oper->center_freq_seg1_idx = ieee80211_frequency_to_channel(
2323 							chandef->center_freq1);
2324 	if (chandef->center_freq2)
2325 		vht_oper->center_freq_seg2_idx =
2326 			ieee80211_frequency_to_channel(chandef->center_freq2);
2327 
2328 	switch (chandef->width) {
2329 	case NL80211_CHAN_WIDTH_160:
2330 		vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_160MHZ;
2331 		break;
2332 	case NL80211_CHAN_WIDTH_80P80:
2333 		vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80P80MHZ;
2334 		break;
2335 	case NL80211_CHAN_WIDTH_80:
2336 		vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_80MHZ;
2337 		break;
2338 	default:
2339 		vht_oper->chan_width = IEEE80211_VHT_CHANWIDTH_USE_HT;
2340 		break;
2341 	}
2342 
2343 	/* don't require special VHT peer rates */
2344 	vht_oper->basic_mcs_set = cpu_to_le16(0xffff);
2345 
2346 	return pos + sizeof(struct ieee80211_vht_operation);
2347 }
2348 
2349 void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
2350 				  const struct ieee80211_ht_operation *ht_oper,
2351 				  struct cfg80211_chan_def *chandef)
2352 {
2353 	enum nl80211_channel_type channel_type;
2354 
2355 	if (!ht_oper) {
2356 		cfg80211_chandef_create(chandef, control_chan,
2357 					NL80211_CHAN_NO_HT);
2358 		return;
2359 	}
2360 
2361 	switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
2362 	case IEEE80211_HT_PARAM_CHA_SEC_NONE:
2363 		channel_type = NL80211_CHAN_HT20;
2364 		break;
2365 	case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
2366 		channel_type = NL80211_CHAN_HT40PLUS;
2367 		break;
2368 	case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
2369 		channel_type = NL80211_CHAN_HT40MINUS;
2370 		break;
2371 	default:
2372 		channel_type = NL80211_CHAN_NO_HT;
2373 	}
2374 
2375 	cfg80211_chandef_create(chandef, control_chan, channel_type);
2376 }
2377 
2378 void ieee80211_vht_oper_to_chandef(struct ieee80211_channel *control_chan,
2379 				   const struct ieee80211_vht_operation *oper,
2380 				   struct cfg80211_chan_def *chandef)
2381 {
2382 	if (!oper)
2383 		return;
2384 
2385 	chandef->chan = control_chan;
2386 
2387 	switch (oper->chan_width) {
2388 	case IEEE80211_VHT_CHANWIDTH_USE_HT:
2389 		break;
2390 	case IEEE80211_VHT_CHANWIDTH_80MHZ:
2391 		chandef->width = NL80211_CHAN_WIDTH_80;
2392 		break;
2393 	case IEEE80211_VHT_CHANWIDTH_160MHZ:
2394 		chandef->width = NL80211_CHAN_WIDTH_160;
2395 		break;
2396 	case IEEE80211_VHT_CHANWIDTH_80P80MHZ:
2397 		chandef->width = NL80211_CHAN_WIDTH_80P80;
2398 		break;
2399 	default:
2400 		break;
2401 	}
2402 
2403 	chandef->center_freq1 =
2404 		ieee80211_channel_to_frequency(oper->center_freq_seg1_idx,
2405 					       control_chan->band);
2406 	chandef->center_freq2 =
2407 		ieee80211_channel_to_frequency(oper->center_freq_seg2_idx,
2408 					       control_chan->band);
2409 }
2410 
2411 int ieee80211_parse_bitrates(struct cfg80211_chan_def *chandef,
2412 			     const struct ieee80211_supported_band *sband,
2413 			     const u8 *srates, int srates_len, u32 *rates)
2414 {
2415 	u32 rate_flags = ieee80211_chandef_rate_flags(chandef);
2416 	int shift = ieee80211_chandef_get_shift(chandef);
2417 	struct ieee80211_rate *br;
2418 	int brate, rate, i, j, count = 0;
2419 
2420 	*rates = 0;
2421 
2422 	for (i = 0; i < srates_len; i++) {
2423 		rate = srates[i] & 0x7f;
2424 
2425 		for (j = 0; j < sband->n_bitrates; j++) {
2426 			br = &sband->bitrates[j];
2427 			if ((rate_flags & br->flags) != rate_flags)
2428 				continue;
2429 
2430 			brate = DIV_ROUND_UP(br->bitrate, (1 << shift) * 5);
2431 			if (brate == rate) {
2432 				*rates |= BIT(j);
2433 				count++;
2434 				break;
2435 			}
2436 		}
2437 	}
2438 	return count;
2439 }
2440 
2441 int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
2442 			    struct sk_buff *skb, bool need_basic,
2443 			    enum ieee80211_band band)
2444 {
2445 	struct ieee80211_local *local = sdata->local;
2446 	struct ieee80211_supported_band *sband;
2447 	int rate, shift;
2448 	u8 i, rates, *pos;
2449 	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2450 	u32 rate_flags;
2451 
2452 	shift = ieee80211_vif_get_shift(&sdata->vif);
2453 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
2454 	sband = local->hw.wiphy->bands[band];
2455 	rates = 0;
2456 	for (i = 0; i < sband->n_bitrates; i++) {
2457 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2458 			continue;
2459 		rates++;
2460 	}
2461 	if (rates > 8)
2462 		rates = 8;
2463 
2464 	if (skb_tailroom(skb) < rates + 2)
2465 		return -ENOMEM;
2466 
2467 	pos = skb_put(skb, rates + 2);
2468 	*pos++ = WLAN_EID_SUPP_RATES;
2469 	*pos++ = rates;
2470 	for (i = 0; i < rates; i++) {
2471 		u8 basic = 0;
2472 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2473 			continue;
2474 
2475 		if (need_basic && basic_rates & BIT(i))
2476 			basic = 0x80;
2477 		rate = sband->bitrates[i].bitrate;
2478 		rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2479 				    5 * (1 << shift));
2480 		*pos++ = basic | (u8) rate;
2481 	}
2482 
2483 	return 0;
2484 }
2485 
2486 int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
2487 				struct sk_buff *skb, bool need_basic,
2488 				enum ieee80211_band band)
2489 {
2490 	struct ieee80211_local *local = sdata->local;
2491 	struct ieee80211_supported_band *sband;
2492 	int rate, shift;
2493 	u8 i, exrates, *pos;
2494 	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2495 	u32 rate_flags;
2496 
2497 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
2498 	shift = ieee80211_vif_get_shift(&sdata->vif);
2499 
2500 	sband = local->hw.wiphy->bands[band];
2501 	exrates = 0;
2502 	for (i = 0; i < sband->n_bitrates; i++) {
2503 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2504 			continue;
2505 		exrates++;
2506 	}
2507 
2508 	if (exrates > 8)
2509 		exrates -= 8;
2510 	else
2511 		exrates = 0;
2512 
2513 	if (skb_tailroom(skb) < exrates + 2)
2514 		return -ENOMEM;
2515 
2516 	if (exrates) {
2517 		pos = skb_put(skb, exrates + 2);
2518 		*pos++ = WLAN_EID_EXT_SUPP_RATES;
2519 		*pos++ = exrates;
2520 		for (i = 8; i < sband->n_bitrates; i++) {
2521 			u8 basic = 0;
2522 			if ((rate_flags & sband->bitrates[i].flags)
2523 			    != rate_flags)
2524 				continue;
2525 			if (need_basic && basic_rates & BIT(i))
2526 				basic = 0x80;
2527 			rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2528 					    5 * (1 << shift));
2529 			*pos++ = basic | (u8) rate;
2530 		}
2531 	}
2532 	return 0;
2533 }
2534 
2535 int ieee80211_ave_rssi(struct ieee80211_vif *vif)
2536 {
2537 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2538 	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
2539 
2540 	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
2541 		/* non-managed type inferfaces */
2542 		return 0;
2543 	}
2544 	return ifmgd->ave_beacon_signal / 16;
2545 }
2546 EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
2547 
2548 u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
2549 {
2550 	if (!mcs)
2551 		return 1;
2552 
2553 	/* TODO: consider rx_highest */
2554 
2555 	if (mcs->rx_mask[3])
2556 		return 4;
2557 	if (mcs->rx_mask[2])
2558 		return 3;
2559 	if (mcs->rx_mask[1])
2560 		return 2;
2561 	return 1;
2562 }
2563 
2564 /**
2565  * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
2566  * @local: mac80211 hw info struct
2567  * @status: RX status
2568  * @mpdu_len: total MPDU length (including FCS)
2569  * @mpdu_offset: offset into MPDU to calculate timestamp at
2570  *
2571  * This function calculates the RX timestamp at the given MPDU offset, taking
2572  * into account what the RX timestamp was. An offset of 0 will just normalize
2573  * the timestamp to TSF at beginning of MPDU reception.
2574  */
2575 u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
2576 				     struct ieee80211_rx_status *status,
2577 				     unsigned int mpdu_len,
2578 				     unsigned int mpdu_offset)
2579 {
2580 	u64 ts = status->mactime;
2581 	struct rate_info ri;
2582 	u16 rate;
2583 
2584 	if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
2585 		return 0;
2586 
2587 	memset(&ri, 0, sizeof(ri));
2588 
2589 	/* Fill cfg80211 rate info */
2590 	if (status->flag & RX_FLAG_HT) {
2591 		ri.mcs = status->rate_idx;
2592 		ri.flags |= RATE_INFO_FLAGS_MCS;
2593 		if (status->flag & RX_FLAG_40MHZ)
2594 			ri.bw = RATE_INFO_BW_40;
2595 		else
2596 			ri.bw = RATE_INFO_BW_20;
2597 		if (status->flag & RX_FLAG_SHORT_GI)
2598 			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2599 	} else if (status->flag & RX_FLAG_VHT) {
2600 		ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
2601 		ri.mcs = status->rate_idx;
2602 		ri.nss = status->vht_nss;
2603 		if (status->flag & RX_FLAG_40MHZ)
2604 			ri.bw = RATE_INFO_BW_40;
2605 		else if (status->vht_flag & RX_VHT_FLAG_80MHZ)
2606 			ri.bw = RATE_INFO_BW_80;
2607 		else if (status->vht_flag & RX_VHT_FLAG_160MHZ)
2608 			ri.bw = RATE_INFO_BW_160;
2609 		else
2610 			ri.bw = RATE_INFO_BW_20;
2611 		if (status->flag & RX_FLAG_SHORT_GI)
2612 			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2613 	} else {
2614 		struct ieee80211_supported_band *sband;
2615 		int shift = 0;
2616 		int bitrate;
2617 
2618 		if (status->flag & RX_FLAG_10MHZ) {
2619 			shift = 1;
2620 			ri.bw = RATE_INFO_BW_10;
2621 		} else if (status->flag & RX_FLAG_5MHZ) {
2622 			shift = 2;
2623 			ri.bw = RATE_INFO_BW_5;
2624 		} else {
2625 			ri.bw = RATE_INFO_BW_20;
2626 		}
2627 
2628 		sband = local->hw.wiphy->bands[status->band];
2629 		bitrate = sband->bitrates[status->rate_idx].bitrate;
2630 		ri.legacy = DIV_ROUND_UP(bitrate, (1 << shift));
2631 	}
2632 
2633 	rate = cfg80211_calculate_bitrate(&ri);
2634 	if (WARN_ONCE(!rate,
2635 		      "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n",
2636 		      status->flag, status->rate_idx, status->vht_nss))
2637 		return 0;
2638 
2639 	/* rewind from end of MPDU */
2640 	if (status->flag & RX_FLAG_MACTIME_END)
2641 		ts -= mpdu_len * 8 * 10 / rate;
2642 
2643 	ts += mpdu_offset * 8 * 10 / rate;
2644 
2645 	return ts;
2646 }
2647 
2648 void ieee80211_dfs_cac_cancel(struct ieee80211_local *local)
2649 {
2650 	struct ieee80211_sub_if_data *sdata;
2651 	struct cfg80211_chan_def chandef;
2652 
2653 	mutex_lock(&local->mtx);
2654 	mutex_lock(&local->iflist_mtx);
2655 	list_for_each_entry(sdata, &local->interfaces, list) {
2656 		/* it might be waiting for the local->mtx, but then
2657 		 * by the time it gets it, sdata->wdev.cac_started
2658 		 * will no longer be true
2659 		 */
2660 		cancel_delayed_work(&sdata->dfs_cac_timer_work);
2661 
2662 		if (sdata->wdev.cac_started) {
2663 			chandef = sdata->vif.bss_conf.chandef;
2664 			ieee80211_vif_release_channel(sdata);
2665 			cfg80211_cac_event(sdata->dev,
2666 					   &chandef,
2667 					   NL80211_RADAR_CAC_ABORTED,
2668 					   GFP_KERNEL);
2669 		}
2670 	}
2671 	mutex_unlock(&local->iflist_mtx);
2672 	mutex_unlock(&local->mtx);
2673 }
2674 
2675 void ieee80211_dfs_radar_detected_work(struct work_struct *work)
2676 {
2677 	struct ieee80211_local *local =
2678 		container_of(work, struct ieee80211_local, radar_detected_work);
2679 	struct cfg80211_chan_def chandef = local->hw.conf.chandef;
2680 	struct ieee80211_chanctx *ctx;
2681 	int num_chanctx = 0;
2682 
2683 	mutex_lock(&local->chanctx_mtx);
2684 	list_for_each_entry(ctx, &local->chanctx_list, list) {
2685 		if (ctx->replace_state == IEEE80211_CHANCTX_REPLACES_OTHER)
2686 			continue;
2687 
2688 		num_chanctx++;
2689 		chandef = ctx->conf.def;
2690 	}
2691 	mutex_unlock(&local->chanctx_mtx);
2692 
2693 	ieee80211_dfs_cac_cancel(local);
2694 
2695 	if (num_chanctx > 1)
2696 		/* XXX: multi-channel is not supported yet */
2697 		WARN_ON(1);
2698 	else
2699 		cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL);
2700 }
2701 
2702 void ieee80211_radar_detected(struct ieee80211_hw *hw)
2703 {
2704 	struct ieee80211_local *local = hw_to_local(hw);
2705 
2706 	trace_api_radar_detected(local);
2707 
2708 	ieee80211_queue_work(hw, &local->radar_detected_work);
2709 }
2710 EXPORT_SYMBOL(ieee80211_radar_detected);
2711 
2712 u32 ieee80211_chandef_downgrade(struct cfg80211_chan_def *c)
2713 {
2714 	u32 ret;
2715 	int tmp;
2716 
2717 	switch (c->width) {
2718 	case NL80211_CHAN_WIDTH_20:
2719 		c->width = NL80211_CHAN_WIDTH_20_NOHT;
2720 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2721 		break;
2722 	case NL80211_CHAN_WIDTH_40:
2723 		c->width = NL80211_CHAN_WIDTH_20;
2724 		c->center_freq1 = c->chan->center_freq;
2725 		ret = IEEE80211_STA_DISABLE_40MHZ |
2726 		      IEEE80211_STA_DISABLE_VHT;
2727 		break;
2728 	case NL80211_CHAN_WIDTH_80:
2729 		tmp = (30 + c->chan->center_freq - c->center_freq1)/20;
2730 		/* n_P40 */
2731 		tmp /= 2;
2732 		/* freq_P40 */
2733 		c->center_freq1 = c->center_freq1 - 20 + 40 * tmp;
2734 		c->width = NL80211_CHAN_WIDTH_40;
2735 		ret = IEEE80211_STA_DISABLE_VHT;
2736 		break;
2737 	case NL80211_CHAN_WIDTH_80P80:
2738 		c->center_freq2 = 0;
2739 		c->width = NL80211_CHAN_WIDTH_80;
2740 		ret = IEEE80211_STA_DISABLE_80P80MHZ |
2741 		      IEEE80211_STA_DISABLE_160MHZ;
2742 		break;
2743 	case NL80211_CHAN_WIDTH_160:
2744 		/* n_P20 */
2745 		tmp = (70 + c->chan->center_freq - c->center_freq1)/20;
2746 		/* n_P80 */
2747 		tmp /= 4;
2748 		c->center_freq1 = c->center_freq1 - 40 + 80 * tmp;
2749 		c->width = NL80211_CHAN_WIDTH_80;
2750 		ret = IEEE80211_STA_DISABLE_80P80MHZ |
2751 		      IEEE80211_STA_DISABLE_160MHZ;
2752 		break;
2753 	default:
2754 	case NL80211_CHAN_WIDTH_20_NOHT:
2755 		WARN_ON_ONCE(1);
2756 		c->width = NL80211_CHAN_WIDTH_20_NOHT;
2757 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2758 		break;
2759 	case NL80211_CHAN_WIDTH_5:
2760 	case NL80211_CHAN_WIDTH_10:
2761 		WARN_ON_ONCE(1);
2762 		/* keep c->width */
2763 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2764 		break;
2765 	}
2766 
2767 	WARN_ON_ONCE(!cfg80211_chandef_valid(c));
2768 
2769 	return ret;
2770 }
2771 
2772 /*
2773  * Returns true if smps_mode_new is strictly more restrictive than
2774  * smps_mode_old.
2775  */
2776 bool ieee80211_smps_is_restrictive(enum ieee80211_smps_mode smps_mode_old,
2777 				   enum ieee80211_smps_mode smps_mode_new)
2778 {
2779 	if (WARN_ON_ONCE(smps_mode_old == IEEE80211_SMPS_AUTOMATIC ||
2780 			 smps_mode_new == IEEE80211_SMPS_AUTOMATIC))
2781 		return false;
2782 
2783 	switch (smps_mode_old) {
2784 	case IEEE80211_SMPS_STATIC:
2785 		return false;
2786 	case IEEE80211_SMPS_DYNAMIC:
2787 		return smps_mode_new == IEEE80211_SMPS_STATIC;
2788 	case IEEE80211_SMPS_OFF:
2789 		return smps_mode_new != IEEE80211_SMPS_OFF;
2790 	default:
2791 		WARN_ON(1);
2792 	}
2793 
2794 	return false;
2795 }
2796 
2797 int ieee80211_send_action_csa(struct ieee80211_sub_if_data *sdata,
2798 			      struct cfg80211_csa_settings *csa_settings)
2799 {
2800 	struct sk_buff *skb;
2801 	struct ieee80211_mgmt *mgmt;
2802 	struct ieee80211_local *local = sdata->local;
2803 	int freq;
2804 	int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.chan_switch) +
2805 			       sizeof(mgmt->u.action.u.chan_switch);
2806 	u8 *pos;
2807 
2808 	if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
2809 	    sdata->vif.type != NL80211_IFTYPE_MESH_POINT)
2810 		return -EOPNOTSUPP;
2811 
2812 	skb = dev_alloc_skb(local->tx_headroom + hdr_len +
2813 			    5 + /* channel switch announcement element */
2814 			    3 + /* secondary channel offset element */
2815 			    8); /* mesh channel switch parameters element */
2816 	if (!skb)
2817 		return -ENOMEM;
2818 
2819 	skb_reserve(skb, local->tx_headroom);
2820 	mgmt = (struct ieee80211_mgmt *)skb_put(skb, hdr_len);
2821 	memset(mgmt, 0, hdr_len);
2822 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
2823 					  IEEE80211_STYPE_ACTION);
2824 
2825 	eth_broadcast_addr(mgmt->da);
2826 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
2827 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
2828 		memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
2829 	} else {
2830 		struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
2831 		memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN);
2832 	}
2833 	mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT;
2834 	mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH;
2835 	pos = skb_put(skb, 5);
2836 	*pos++ = WLAN_EID_CHANNEL_SWITCH;			/* EID */
2837 	*pos++ = 3;						/* IE length */
2838 	*pos++ = csa_settings->block_tx ? 1 : 0;		/* CSA mode */
2839 	freq = csa_settings->chandef.chan->center_freq;
2840 	*pos++ = ieee80211_frequency_to_channel(freq);		/* channel */
2841 	*pos++ = csa_settings->count;				/* count */
2842 
2843 	if (csa_settings->chandef.width == NL80211_CHAN_WIDTH_40) {
2844 		enum nl80211_channel_type ch_type;
2845 
2846 		skb_put(skb, 3);
2847 		*pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET;	/* EID */
2848 		*pos++ = 1;					/* IE length */
2849 		ch_type = cfg80211_get_chandef_type(&csa_settings->chandef);
2850 		if (ch_type == NL80211_CHAN_HT40PLUS)
2851 			*pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2852 		else
2853 			*pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2854 	}
2855 
2856 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
2857 		struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
2858 
2859 		skb_put(skb, 8);
2860 		*pos++ = WLAN_EID_CHAN_SWITCH_PARAM;		/* EID */
2861 		*pos++ = 6;					/* IE length */
2862 		*pos++ = sdata->u.mesh.mshcfg.dot11MeshTTL;	/* Mesh TTL */
2863 		*pos = 0x00;	/* Mesh Flag: Tx Restrict, Initiator, Reason */
2864 		*pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
2865 		*pos++ |= csa_settings->block_tx ?
2866 			  WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00;
2867 		put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); /* Reason Cd */
2868 		pos += 2;
2869 		put_unaligned_le16(ifmsh->pre_value, pos);/* Precedence Value */
2870 		pos += 2;
2871 	}
2872 
2873 	ieee80211_tx_skb(sdata, skb);
2874 	return 0;
2875 }
2876 
2877 bool ieee80211_cs_valid(const struct ieee80211_cipher_scheme *cs)
2878 {
2879 	return !(cs == NULL || cs->cipher == 0 ||
2880 		 cs->hdr_len < cs->pn_len + cs->pn_off ||
2881 		 cs->hdr_len <= cs->key_idx_off ||
2882 		 cs->key_idx_shift > 7 ||
2883 		 cs->key_idx_mask == 0);
2884 }
2885 
2886 bool ieee80211_cs_list_valid(const struct ieee80211_cipher_scheme *cs, int n)
2887 {
2888 	int i;
2889 
2890 	/* Ensure we have enough iftype bitmap space for all iftype values */
2891 	WARN_ON((NUM_NL80211_IFTYPES / 8 + 1) > sizeof(cs[0].iftype));
2892 
2893 	for (i = 0; i < n; i++)
2894 		if (!ieee80211_cs_valid(&cs[i]))
2895 			return false;
2896 
2897 	return true;
2898 }
2899 
2900 const struct ieee80211_cipher_scheme *
2901 ieee80211_cs_get(struct ieee80211_local *local, u32 cipher,
2902 		 enum nl80211_iftype iftype)
2903 {
2904 	const struct ieee80211_cipher_scheme *l = local->hw.cipher_schemes;
2905 	int n = local->hw.n_cipher_schemes;
2906 	int i;
2907 	const struct ieee80211_cipher_scheme *cs = NULL;
2908 
2909 	for (i = 0; i < n; i++) {
2910 		if (l[i].cipher == cipher) {
2911 			cs = &l[i];
2912 			break;
2913 		}
2914 	}
2915 
2916 	if (!cs || !(cs->iftype & BIT(iftype)))
2917 		return NULL;
2918 
2919 	return cs;
2920 }
2921 
2922 int ieee80211_cs_headroom(struct ieee80211_local *local,
2923 			  struct cfg80211_crypto_settings *crypto,
2924 			  enum nl80211_iftype iftype)
2925 {
2926 	const struct ieee80211_cipher_scheme *cs;
2927 	int headroom = IEEE80211_ENCRYPT_HEADROOM;
2928 	int i;
2929 
2930 	for (i = 0; i < crypto->n_ciphers_pairwise; i++) {
2931 		cs = ieee80211_cs_get(local, crypto->ciphers_pairwise[i],
2932 				      iftype);
2933 
2934 		if (cs && headroom < cs->hdr_len)
2935 			headroom = cs->hdr_len;
2936 	}
2937 
2938 	cs = ieee80211_cs_get(local, crypto->cipher_group, iftype);
2939 	if (cs && headroom < cs->hdr_len)
2940 		headroom = cs->hdr_len;
2941 
2942 	return headroom;
2943 }
2944 
2945 static bool
2946 ieee80211_extend_noa_desc(struct ieee80211_noa_data *data, u32 tsf, int i)
2947 {
2948 	s32 end = data->desc[i].start + data->desc[i].duration - (tsf + 1);
2949 	int skip;
2950 
2951 	if (end > 0)
2952 		return false;
2953 
2954 	/* End time is in the past, check for repetitions */
2955 	skip = DIV_ROUND_UP(-end, data->desc[i].interval);
2956 	if (data->count[i] < 255) {
2957 		if (data->count[i] <= skip) {
2958 			data->count[i] = 0;
2959 			return false;
2960 		}
2961 
2962 		data->count[i] -= skip;
2963 	}
2964 
2965 	data->desc[i].start += skip * data->desc[i].interval;
2966 
2967 	return true;
2968 }
2969 
2970 static bool
2971 ieee80211_extend_absent_time(struct ieee80211_noa_data *data, u32 tsf,
2972 			     s32 *offset)
2973 {
2974 	bool ret = false;
2975 	int i;
2976 
2977 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
2978 		s32 cur;
2979 
2980 		if (!data->count[i])
2981 			continue;
2982 
2983 		if (ieee80211_extend_noa_desc(data, tsf + *offset, i))
2984 			ret = true;
2985 
2986 		cur = data->desc[i].start - tsf;
2987 		if (cur > *offset)
2988 			continue;
2989 
2990 		cur = data->desc[i].start + data->desc[i].duration - tsf;
2991 		if (cur > *offset)
2992 			*offset = cur;
2993 	}
2994 
2995 	return ret;
2996 }
2997 
2998 static u32
2999 ieee80211_get_noa_absent_time(struct ieee80211_noa_data *data, u32 tsf)
3000 {
3001 	s32 offset = 0;
3002 	int tries = 0;
3003 	/*
3004 	 * arbitrary limit, used to avoid infinite loops when combined NoA
3005 	 * descriptors cover the full time period.
3006 	 */
3007 	int max_tries = 5;
3008 
3009 	ieee80211_extend_absent_time(data, tsf, &offset);
3010 	do {
3011 		if (!ieee80211_extend_absent_time(data, tsf, &offset))
3012 			break;
3013 
3014 		tries++;
3015 	} while (tries < max_tries);
3016 
3017 	return offset;
3018 }
3019 
3020 void ieee80211_update_p2p_noa(struct ieee80211_noa_data *data, u32 tsf)
3021 {
3022 	u32 next_offset = BIT(31) - 1;
3023 	int i;
3024 
3025 	data->absent = 0;
3026 	data->has_next_tsf = false;
3027 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
3028 		s32 start;
3029 
3030 		if (!data->count[i])
3031 			continue;
3032 
3033 		ieee80211_extend_noa_desc(data, tsf, i);
3034 		start = data->desc[i].start - tsf;
3035 		if (start <= 0)
3036 			data->absent |= BIT(i);
3037 
3038 		if (next_offset > start)
3039 			next_offset = start;
3040 
3041 		data->has_next_tsf = true;
3042 	}
3043 
3044 	if (data->absent)
3045 		next_offset = ieee80211_get_noa_absent_time(data, tsf);
3046 
3047 	data->next_tsf = tsf + next_offset;
3048 }
3049 EXPORT_SYMBOL(ieee80211_update_p2p_noa);
3050 
3051 int ieee80211_parse_p2p_noa(const struct ieee80211_p2p_noa_attr *attr,
3052 			    struct ieee80211_noa_data *data, u32 tsf)
3053 {
3054 	int ret = 0;
3055 	int i;
3056 
3057 	memset(data, 0, sizeof(*data));
3058 
3059 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
3060 		const struct ieee80211_p2p_noa_desc *desc = &attr->desc[i];
3061 
3062 		if (!desc->count || !desc->duration)
3063 			continue;
3064 
3065 		data->count[i] = desc->count;
3066 		data->desc[i].start = le32_to_cpu(desc->start_time);
3067 		data->desc[i].duration = le32_to_cpu(desc->duration);
3068 		data->desc[i].interval = le32_to_cpu(desc->interval);
3069 
3070 		if (data->count[i] > 1 &&
3071 		    data->desc[i].interval < data->desc[i].duration)
3072 			continue;
3073 
3074 		ieee80211_extend_noa_desc(data, tsf, i);
3075 		ret++;
3076 	}
3077 
3078 	if (ret)
3079 		ieee80211_update_p2p_noa(data, tsf);
3080 
3081 	return ret;
3082 }
3083 EXPORT_SYMBOL(ieee80211_parse_p2p_noa);
3084 
3085 void ieee80211_recalc_dtim(struct ieee80211_local *local,
3086 			   struct ieee80211_sub_if_data *sdata)
3087 {
3088 	u64 tsf = drv_get_tsf(local, sdata);
3089 	u64 dtim_count = 0;
3090 	u16 beacon_int = sdata->vif.bss_conf.beacon_int * 1024;
3091 	u8 dtim_period = sdata->vif.bss_conf.dtim_period;
3092 	struct ps_data *ps;
3093 	u8 bcns_from_dtim;
3094 
3095 	if (tsf == -1ULL || !beacon_int || !dtim_period)
3096 		return;
3097 
3098 	if (sdata->vif.type == NL80211_IFTYPE_AP ||
3099 	    sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
3100 		if (!sdata->bss)
3101 			return;
3102 
3103 		ps = &sdata->bss->ps;
3104 	} else if (ieee80211_vif_is_mesh(&sdata->vif)) {
3105 		ps = &sdata->u.mesh.ps;
3106 	} else {
3107 		return;
3108 	}
3109 
3110 	/*
3111 	 * actually finds last dtim_count, mac80211 will update in
3112 	 * __beacon_add_tim().
3113 	 * dtim_count = dtim_period - (tsf / bcn_int) % dtim_period
3114 	 */
3115 	do_div(tsf, beacon_int);
3116 	bcns_from_dtim = do_div(tsf, dtim_period);
3117 	/* just had a DTIM */
3118 	if (!bcns_from_dtim)
3119 		dtim_count = 0;
3120 	else
3121 		dtim_count = dtim_period - bcns_from_dtim;
3122 
3123 	ps->dtim_count = dtim_count;
3124 }
3125 
3126 static u8 ieee80211_chanctx_radar_detect(struct ieee80211_local *local,
3127 					 struct ieee80211_chanctx *ctx)
3128 {
3129 	struct ieee80211_sub_if_data *sdata;
3130 	u8 radar_detect = 0;
3131 
3132 	lockdep_assert_held(&local->chanctx_mtx);
3133 
3134 	if (WARN_ON(ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED))
3135 		return 0;
3136 
3137 	list_for_each_entry(sdata, &ctx->reserved_vifs, reserved_chanctx_list)
3138 		if (sdata->reserved_radar_required)
3139 			radar_detect |= BIT(sdata->reserved_chandef.width);
3140 
3141 	/*
3142 	 * An in-place reservation context should not have any assigned vifs
3143 	 * until it replaces the other context.
3144 	 */
3145 	WARN_ON(ctx->replace_state == IEEE80211_CHANCTX_REPLACES_OTHER &&
3146 		!list_empty(&ctx->assigned_vifs));
3147 
3148 	list_for_each_entry(sdata, &ctx->assigned_vifs, assigned_chanctx_list)
3149 		if (sdata->radar_required)
3150 			radar_detect |= BIT(sdata->vif.bss_conf.chandef.width);
3151 
3152 	return radar_detect;
3153 }
3154 
3155 int ieee80211_check_combinations(struct ieee80211_sub_if_data *sdata,
3156 				 const struct cfg80211_chan_def *chandef,
3157 				 enum ieee80211_chanctx_mode chanmode,
3158 				 u8 radar_detect)
3159 {
3160 	struct ieee80211_local *local = sdata->local;
3161 	struct ieee80211_sub_if_data *sdata_iter;
3162 	enum nl80211_iftype iftype = sdata->wdev.iftype;
3163 	int num[NUM_NL80211_IFTYPES];
3164 	struct ieee80211_chanctx *ctx;
3165 	int num_different_channels = 0;
3166 	int total = 1;
3167 
3168 	lockdep_assert_held(&local->chanctx_mtx);
3169 
3170 	if (WARN_ON(hweight32(radar_detect) > 1))
3171 		return -EINVAL;
3172 
3173 	if (WARN_ON(chandef && chanmode == IEEE80211_CHANCTX_SHARED &&
3174 		    !chandef->chan))
3175 		return -EINVAL;
3176 
3177 	if (chandef)
3178 		num_different_channels = 1;
3179 
3180 	if (WARN_ON(iftype >= NUM_NL80211_IFTYPES))
3181 		return -EINVAL;
3182 
3183 	/* Always allow software iftypes */
3184 	if (local->hw.wiphy->software_iftypes & BIT(iftype)) {
3185 		if (radar_detect)
3186 			return -EINVAL;
3187 		return 0;
3188 	}
3189 
3190 	memset(num, 0, sizeof(num));
3191 
3192 	if (iftype != NL80211_IFTYPE_UNSPECIFIED)
3193 		num[iftype] = 1;
3194 
3195 	list_for_each_entry(ctx, &local->chanctx_list, list) {
3196 		if (ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED)
3197 			continue;
3198 		radar_detect |= ieee80211_chanctx_radar_detect(local, ctx);
3199 		if (ctx->mode == IEEE80211_CHANCTX_EXCLUSIVE) {
3200 			num_different_channels++;
3201 			continue;
3202 		}
3203 		if (chandef && chanmode == IEEE80211_CHANCTX_SHARED &&
3204 		    cfg80211_chandef_compatible(chandef,
3205 						&ctx->conf.def))
3206 			continue;
3207 		num_different_channels++;
3208 	}
3209 
3210 	list_for_each_entry_rcu(sdata_iter, &local->interfaces, list) {
3211 		struct wireless_dev *wdev_iter;
3212 
3213 		wdev_iter = &sdata_iter->wdev;
3214 
3215 		if (sdata_iter == sdata ||
3216 		    !ieee80211_sdata_running(sdata_iter) ||
3217 		    local->hw.wiphy->software_iftypes & BIT(wdev_iter->iftype))
3218 			continue;
3219 
3220 		num[wdev_iter->iftype]++;
3221 		total++;
3222 	}
3223 
3224 	if (total == 1 && !radar_detect)
3225 		return 0;
3226 
3227 	return cfg80211_check_combinations(local->hw.wiphy,
3228 					   num_different_channels,
3229 					   radar_detect, num);
3230 }
3231 
3232 static void
3233 ieee80211_iter_max_chans(const struct ieee80211_iface_combination *c,
3234 			 void *data)
3235 {
3236 	u32 *max_num_different_channels = data;
3237 
3238 	*max_num_different_channels = max(*max_num_different_channels,
3239 					  c->num_different_channels);
3240 }
3241 
3242 int ieee80211_max_num_channels(struct ieee80211_local *local)
3243 {
3244 	struct ieee80211_sub_if_data *sdata;
3245 	int num[NUM_NL80211_IFTYPES] = {};
3246 	struct ieee80211_chanctx *ctx;
3247 	int num_different_channels = 0;
3248 	u8 radar_detect = 0;
3249 	u32 max_num_different_channels = 1;
3250 	int err;
3251 
3252 	lockdep_assert_held(&local->chanctx_mtx);
3253 
3254 	list_for_each_entry(ctx, &local->chanctx_list, list) {
3255 		if (ctx->replace_state == IEEE80211_CHANCTX_WILL_BE_REPLACED)
3256 			continue;
3257 
3258 		num_different_channels++;
3259 
3260 		radar_detect |= ieee80211_chanctx_radar_detect(local, ctx);
3261 	}
3262 
3263 	list_for_each_entry_rcu(sdata, &local->interfaces, list)
3264 		num[sdata->wdev.iftype]++;
3265 
3266 	err = cfg80211_iter_combinations(local->hw.wiphy,
3267 					 num_different_channels, radar_detect,
3268 					 num, ieee80211_iter_max_chans,
3269 					 &max_num_different_channels);
3270 	if (err < 0)
3271 		return err;
3272 
3273 	return max_num_different_channels;
3274 }
3275 
3276 u8 *ieee80211_add_wmm_info_ie(u8 *buf, u8 qosinfo)
3277 {
3278 	*buf++ = WLAN_EID_VENDOR_SPECIFIC;
3279 	*buf++ = 7; /* len */
3280 	*buf++ = 0x00; /* Microsoft OUI 00:50:F2 */
3281 	*buf++ = 0x50;
3282 	*buf++ = 0xf2;
3283 	*buf++ = 2; /* WME */
3284 	*buf++ = 0; /* WME info */
3285 	*buf++ = 1; /* WME ver */
3286 	*buf++ = qosinfo; /* U-APSD no in use */
3287 
3288 	return buf;
3289 }
3290 
3291 void ieee80211_init_tx_queue(struct ieee80211_sub_if_data *sdata,
3292 			     struct sta_info *sta,
3293 			     struct txq_info *txqi, int tid)
3294 {
3295 	skb_queue_head_init(&txqi->queue);
3296 	txqi->txq.vif = &sdata->vif;
3297 
3298 	if (sta) {
3299 		txqi->txq.sta = &sta->sta;
3300 		sta->sta.txq[tid] = &txqi->txq;
3301 		txqi->txq.ac = ieee802_1d_to_ac[tid & 7];
3302 	} else {
3303 		sdata->vif.txq = &txqi->txq;
3304 		txqi->txq.ac = IEEE80211_AC_BE;
3305 	}
3306 }
3307