1*560424e9SKalle Valo /* 2*560424e9SKalle Valo * Scan implementation for ST-Ericsson CW1200 mac80211 drivers 3*560424e9SKalle Valo * 4*560424e9SKalle Valo * Copyright (c) 2010, ST-Ericsson 5*560424e9SKalle Valo * Author: Dmitry Tarnyagin <dmitry.tarnyagin@lockless.no> 6*560424e9SKalle Valo * 7*560424e9SKalle Valo * This program is free software; you can redistribute it and/or modify 8*560424e9SKalle Valo * it under the terms of the GNU General Public License version 2 as 9*560424e9SKalle Valo * published by the Free Software Foundation. 10*560424e9SKalle Valo */ 11*560424e9SKalle Valo 12*560424e9SKalle Valo #include <linux/sched.h> 13*560424e9SKalle Valo #include "cw1200.h" 14*560424e9SKalle Valo #include "scan.h" 15*560424e9SKalle Valo #include "sta.h" 16*560424e9SKalle Valo #include "pm.h" 17*560424e9SKalle Valo 18*560424e9SKalle Valo static void cw1200_scan_restart_delayed(struct cw1200_common *priv); 19*560424e9SKalle Valo 20*560424e9SKalle Valo static int cw1200_scan_start(struct cw1200_common *priv, struct wsm_scan *scan) 21*560424e9SKalle Valo { 22*560424e9SKalle Valo int ret, i; 23*560424e9SKalle Valo int tmo = 2000; 24*560424e9SKalle Valo 25*560424e9SKalle Valo switch (priv->join_status) { 26*560424e9SKalle Valo case CW1200_JOIN_STATUS_PRE_STA: 27*560424e9SKalle Valo case CW1200_JOIN_STATUS_JOINING: 28*560424e9SKalle Valo return -EBUSY; 29*560424e9SKalle Valo default: 30*560424e9SKalle Valo break; 31*560424e9SKalle Valo } 32*560424e9SKalle Valo 33*560424e9SKalle Valo wiphy_dbg(priv->hw->wiphy, "[SCAN] hw req, type %d, %d channels, flags: 0x%x.\n", 34*560424e9SKalle Valo scan->type, scan->num_channels, scan->flags); 35*560424e9SKalle Valo 36*560424e9SKalle Valo for (i = 0; i < scan->num_channels; ++i) 37*560424e9SKalle Valo tmo += scan->ch[i].max_chan_time + 10; 38*560424e9SKalle Valo 39*560424e9SKalle Valo cancel_delayed_work_sync(&priv->clear_recent_scan_work); 40*560424e9SKalle Valo atomic_set(&priv->scan.in_progress, 1); 41*560424e9SKalle Valo atomic_set(&priv->recent_scan, 1); 42*560424e9SKalle Valo cw1200_pm_stay_awake(&priv->pm_state, msecs_to_jiffies(tmo)); 43*560424e9SKalle Valo queue_delayed_work(priv->workqueue, &priv->scan.timeout, 44*560424e9SKalle Valo msecs_to_jiffies(tmo)); 45*560424e9SKalle Valo ret = wsm_scan(priv, scan); 46*560424e9SKalle Valo if (ret) { 47*560424e9SKalle Valo atomic_set(&priv->scan.in_progress, 0); 48*560424e9SKalle Valo cancel_delayed_work_sync(&priv->scan.timeout); 49*560424e9SKalle Valo cw1200_scan_restart_delayed(priv); 50*560424e9SKalle Valo } 51*560424e9SKalle Valo return ret; 52*560424e9SKalle Valo } 53*560424e9SKalle Valo 54*560424e9SKalle Valo int cw1200_hw_scan(struct ieee80211_hw *hw, 55*560424e9SKalle Valo struct ieee80211_vif *vif, 56*560424e9SKalle Valo struct ieee80211_scan_request *hw_req) 57*560424e9SKalle Valo { 58*560424e9SKalle Valo struct cw1200_common *priv = hw->priv; 59*560424e9SKalle Valo struct cfg80211_scan_request *req = &hw_req->req; 60*560424e9SKalle Valo struct wsm_template_frame frame = { 61*560424e9SKalle Valo .frame_type = WSM_FRAME_TYPE_PROBE_REQUEST, 62*560424e9SKalle Valo }; 63*560424e9SKalle Valo int i, ret; 64*560424e9SKalle Valo 65*560424e9SKalle Valo if (!priv->vif) 66*560424e9SKalle Valo return -EINVAL; 67*560424e9SKalle Valo 68*560424e9SKalle Valo /* Scan when P2P_GO corrupt firmware MiniAP mode */ 69*560424e9SKalle Valo if (priv->join_status == CW1200_JOIN_STATUS_AP) 70*560424e9SKalle Valo return -EOPNOTSUPP; 71*560424e9SKalle Valo 72*560424e9SKalle Valo if (req->n_ssids == 1 && !req->ssids[0].ssid_len) 73*560424e9SKalle Valo req->n_ssids = 0; 74*560424e9SKalle Valo 75*560424e9SKalle Valo wiphy_dbg(hw->wiphy, "[SCAN] Scan request for %d SSIDs.\n", 76*560424e9SKalle Valo req->n_ssids); 77*560424e9SKalle Valo 78*560424e9SKalle Valo if (req->n_ssids > WSM_SCAN_MAX_NUM_OF_SSIDS) 79*560424e9SKalle Valo return -EINVAL; 80*560424e9SKalle Valo 81*560424e9SKalle Valo frame.skb = ieee80211_probereq_get(hw, priv->vif->addr, NULL, 0, 82*560424e9SKalle Valo req->ie_len); 83*560424e9SKalle Valo if (!frame.skb) 84*560424e9SKalle Valo return -ENOMEM; 85*560424e9SKalle Valo 86*560424e9SKalle Valo if (req->ie_len) 87*560424e9SKalle Valo memcpy(skb_put(frame.skb, req->ie_len), req->ie, req->ie_len); 88*560424e9SKalle Valo 89*560424e9SKalle Valo /* will be unlocked in cw1200_scan_work() */ 90*560424e9SKalle Valo down(&priv->scan.lock); 91*560424e9SKalle Valo mutex_lock(&priv->conf_mutex); 92*560424e9SKalle Valo 93*560424e9SKalle Valo ret = wsm_set_template_frame(priv, &frame); 94*560424e9SKalle Valo if (!ret) { 95*560424e9SKalle Valo /* Host want to be the probe responder. */ 96*560424e9SKalle Valo ret = wsm_set_probe_responder(priv, true); 97*560424e9SKalle Valo } 98*560424e9SKalle Valo if (ret) { 99*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 100*560424e9SKalle Valo up(&priv->scan.lock); 101*560424e9SKalle Valo dev_kfree_skb(frame.skb); 102*560424e9SKalle Valo return ret; 103*560424e9SKalle Valo } 104*560424e9SKalle Valo 105*560424e9SKalle Valo wsm_lock_tx(priv); 106*560424e9SKalle Valo 107*560424e9SKalle Valo BUG_ON(priv->scan.req); 108*560424e9SKalle Valo priv->scan.req = req; 109*560424e9SKalle Valo priv->scan.n_ssids = 0; 110*560424e9SKalle Valo priv->scan.status = 0; 111*560424e9SKalle Valo priv->scan.begin = &req->channels[0]; 112*560424e9SKalle Valo priv->scan.curr = priv->scan.begin; 113*560424e9SKalle Valo priv->scan.end = &req->channels[req->n_channels]; 114*560424e9SKalle Valo priv->scan.output_power = priv->output_power; 115*560424e9SKalle Valo 116*560424e9SKalle Valo for (i = 0; i < req->n_ssids; ++i) { 117*560424e9SKalle Valo struct wsm_ssid *dst = &priv->scan.ssids[priv->scan.n_ssids]; 118*560424e9SKalle Valo memcpy(&dst->ssid[0], req->ssids[i].ssid, sizeof(dst->ssid)); 119*560424e9SKalle Valo dst->length = req->ssids[i].ssid_len; 120*560424e9SKalle Valo ++priv->scan.n_ssids; 121*560424e9SKalle Valo } 122*560424e9SKalle Valo 123*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 124*560424e9SKalle Valo 125*560424e9SKalle Valo if (frame.skb) 126*560424e9SKalle Valo dev_kfree_skb(frame.skb); 127*560424e9SKalle Valo queue_work(priv->workqueue, &priv->scan.work); 128*560424e9SKalle Valo return 0; 129*560424e9SKalle Valo } 130*560424e9SKalle Valo 131*560424e9SKalle Valo void cw1200_scan_work(struct work_struct *work) 132*560424e9SKalle Valo { 133*560424e9SKalle Valo struct cw1200_common *priv = container_of(work, struct cw1200_common, 134*560424e9SKalle Valo scan.work); 135*560424e9SKalle Valo struct ieee80211_channel **it; 136*560424e9SKalle Valo struct wsm_scan scan = { 137*560424e9SKalle Valo .type = WSM_SCAN_TYPE_FOREGROUND, 138*560424e9SKalle Valo .flags = WSM_SCAN_FLAG_SPLIT_METHOD, 139*560424e9SKalle Valo }; 140*560424e9SKalle Valo bool first_run = (priv->scan.begin == priv->scan.curr && 141*560424e9SKalle Valo priv->scan.begin != priv->scan.end); 142*560424e9SKalle Valo int i; 143*560424e9SKalle Valo 144*560424e9SKalle Valo if (first_run) { 145*560424e9SKalle Valo /* Firmware gets crazy if scan request is sent 146*560424e9SKalle Valo * when STA is joined but not yet associated. 147*560424e9SKalle Valo * Force unjoin in this case. 148*560424e9SKalle Valo */ 149*560424e9SKalle Valo if (cancel_delayed_work_sync(&priv->join_timeout) > 0) 150*560424e9SKalle Valo cw1200_join_timeout(&priv->join_timeout.work); 151*560424e9SKalle Valo } 152*560424e9SKalle Valo 153*560424e9SKalle Valo mutex_lock(&priv->conf_mutex); 154*560424e9SKalle Valo 155*560424e9SKalle Valo if (first_run) { 156*560424e9SKalle Valo if (priv->join_status == CW1200_JOIN_STATUS_STA && 157*560424e9SKalle Valo !(priv->powersave_mode.mode & WSM_PSM_PS)) { 158*560424e9SKalle Valo struct wsm_set_pm pm = priv->powersave_mode; 159*560424e9SKalle Valo pm.mode = WSM_PSM_PS; 160*560424e9SKalle Valo cw1200_set_pm(priv, &pm); 161*560424e9SKalle Valo } else if (priv->join_status == CW1200_JOIN_STATUS_MONITOR) { 162*560424e9SKalle Valo /* FW bug: driver has to restart p2p-dev mode 163*560424e9SKalle Valo * after scan 164*560424e9SKalle Valo */ 165*560424e9SKalle Valo cw1200_disable_listening(priv); 166*560424e9SKalle Valo } 167*560424e9SKalle Valo } 168*560424e9SKalle Valo 169*560424e9SKalle Valo if (!priv->scan.req || (priv->scan.curr == priv->scan.end)) { 170*560424e9SKalle Valo if (priv->scan.output_power != priv->output_power) 171*560424e9SKalle Valo wsm_set_output_power(priv, priv->output_power * 10); 172*560424e9SKalle Valo if (priv->join_status == CW1200_JOIN_STATUS_STA && 173*560424e9SKalle Valo !(priv->powersave_mode.mode & WSM_PSM_PS)) 174*560424e9SKalle Valo cw1200_set_pm(priv, &priv->powersave_mode); 175*560424e9SKalle Valo 176*560424e9SKalle Valo if (priv->scan.status < 0) 177*560424e9SKalle Valo wiphy_warn(priv->hw->wiphy, 178*560424e9SKalle Valo "[SCAN] Scan failed (%d).\n", 179*560424e9SKalle Valo priv->scan.status); 180*560424e9SKalle Valo else if (priv->scan.req) 181*560424e9SKalle Valo wiphy_dbg(priv->hw->wiphy, 182*560424e9SKalle Valo "[SCAN] Scan completed.\n"); 183*560424e9SKalle Valo else 184*560424e9SKalle Valo wiphy_dbg(priv->hw->wiphy, 185*560424e9SKalle Valo "[SCAN] Scan canceled.\n"); 186*560424e9SKalle Valo 187*560424e9SKalle Valo priv->scan.req = NULL; 188*560424e9SKalle Valo cw1200_scan_restart_delayed(priv); 189*560424e9SKalle Valo wsm_unlock_tx(priv); 190*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 191*560424e9SKalle Valo ieee80211_scan_completed(priv->hw, priv->scan.status ? 1 : 0); 192*560424e9SKalle Valo up(&priv->scan.lock); 193*560424e9SKalle Valo return; 194*560424e9SKalle Valo } else { 195*560424e9SKalle Valo struct ieee80211_channel *first = *priv->scan.curr; 196*560424e9SKalle Valo for (it = priv->scan.curr + 1, i = 1; 197*560424e9SKalle Valo it != priv->scan.end && i < WSM_SCAN_MAX_NUM_OF_CHANNELS; 198*560424e9SKalle Valo ++it, ++i) { 199*560424e9SKalle Valo if ((*it)->band != first->band) 200*560424e9SKalle Valo break; 201*560424e9SKalle Valo if (((*it)->flags ^ first->flags) & 202*560424e9SKalle Valo IEEE80211_CHAN_NO_IR) 203*560424e9SKalle Valo break; 204*560424e9SKalle Valo if (!(first->flags & IEEE80211_CHAN_NO_IR) && 205*560424e9SKalle Valo (*it)->max_power != first->max_power) 206*560424e9SKalle Valo break; 207*560424e9SKalle Valo } 208*560424e9SKalle Valo scan.band = first->band; 209*560424e9SKalle Valo 210*560424e9SKalle Valo if (priv->scan.req->no_cck) 211*560424e9SKalle Valo scan.max_tx_rate = WSM_TRANSMIT_RATE_6; 212*560424e9SKalle Valo else 213*560424e9SKalle Valo scan.max_tx_rate = WSM_TRANSMIT_RATE_1; 214*560424e9SKalle Valo scan.num_probes = 215*560424e9SKalle Valo (first->flags & IEEE80211_CHAN_NO_IR) ? 0 : 2; 216*560424e9SKalle Valo scan.num_ssids = priv->scan.n_ssids; 217*560424e9SKalle Valo scan.ssids = &priv->scan.ssids[0]; 218*560424e9SKalle Valo scan.num_channels = it - priv->scan.curr; 219*560424e9SKalle Valo /* TODO: Is it optimal? */ 220*560424e9SKalle Valo scan.probe_delay = 100; 221*560424e9SKalle Valo /* It is not stated in WSM specification, however 222*560424e9SKalle Valo * FW team says that driver may not use FG scan 223*560424e9SKalle Valo * when joined. 224*560424e9SKalle Valo */ 225*560424e9SKalle Valo if (priv->join_status == CW1200_JOIN_STATUS_STA) { 226*560424e9SKalle Valo scan.type = WSM_SCAN_TYPE_BACKGROUND; 227*560424e9SKalle Valo scan.flags = WSM_SCAN_FLAG_FORCE_BACKGROUND; 228*560424e9SKalle Valo } 229*560424e9SKalle Valo scan.ch = kzalloc( 230*560424e9SKalle Valo sizeof(struct wsm_scan_ch) * (it - priv->scan.curr), 231*560424e9SKalle Valo GFP_KERNEL); 232*560424e9SKalle Valo if (!scan.ch) { 233*560424e9SKalle Valo priv->scan.status = -ENOMEM; 234*560424e9SKalle Valo goto fail; 235*560424e9SKalle Valo } 236*560424e9SKalle Valo for (i = 0; i < scan.num_channels; ++i) { 237*560424e9SKalle Valo scan.ch[i].number = priv->scan.curr[i]->hw_value; 238*560424e9SKalle Valo if (priv->scan.curr[i]->flags & IEEE80211_CHAN_NO_IR) { 239*560424e9SKalle Valo scan.ch[i].min_chan_time = 50; 240*560424e9SKalle Valo scan.ch[i].max_chan_time = 100; 241*560424e9SKalle Valo } else { 242*560424e9SKalle Valo scan.ch[i].min_chan_time = 10; 243*560424e9SKalle Valo scan.ch[i].max_chan_time = 25; 244*560424e9SKalle Valo } 245*560424e9SKalle Valo } 246*560424e9SKalle Valo if (!(first->flags & IEEE80211_CHAN_NO_IR) && 247*560424e9SKalle Valo priv->scan.output_power != first->max_power) { 248*560424e9SKalle Valo priv->scan.output_power = first->max_power; 249*560424e9SKalle Valo wsm_set_output_power(priv, 250*560424e9SKalle Valo priv->scan.output_power * 10); 251*560424e9SKalle Valo } 252*560424e9SKalle Valo priv->scan.status = cw1200_scan_start(priv, &scan); 253*560424e9SKalle Valo kfree(scan.ch); 254*560424e9SKalle Valo if (priv->scan.status) 255*560424e9SKalle Valo goto fail; 256*560424e9SKalle Valo priv->scan.curr = it; 257*560424e9SKalle Valo } 258*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 259*560424e9SKalle Valo return; 260*560424e9SKalle Valo 261*560424e9SKalle Valo fail: 262*560424e9SKalle Valo priv->scan.curr = priv->scan.end; 263*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 264*560424e9SKalle Valo queue_work(priv->workqueue, &priv->scan.work); 265*560424e9SKalle Valo return; 266*560424e9SKalle Valo } 267*560424e9SKalle Valo 268*560424e9SKalle Valo static void cw1200_scan_restart_delayed(struct cw1200_common *priv) 269*560424e9SKalle Valo { 270*560424e9SKalle Valo /* FW bug: driver has to restart p2p-dev mode after scan. */ 271*560424e9SKalle Valo if (priv->join_status == CW1200_JOIN_STATUS_MONITOR) { 272*560424e9SKalle Valo cw1200_enable_listening(priv); 273*560424e9SKalle Valo cw1200_update_filtering(priv); 274*560424e9SKalle Valo } 275*560424e9SKalle Valo 276*560424e9SKalle Valo if (priv->delayed_unjoin) { 277*560424e9SKalle Valo priv->delayed_unjoin = false; 278*560424e9SKalle Valo if (queue_work(priv->workqueue, &priv->unjoin_work) <= 0) 279*560424e9SKalle Valo wsm_unlock_tx(priv); 280*560424e9SKalle Valo } else if (priv->delayed_link_loss) { 281*560424e9SKalle Valo wiphy_dbg(priv->hw->wiphy, "[CQM] Requeue BSS loss.\n"); 282*560424e9SKalle Valo priv->delayed_link_loss = 0; 283*560424e9SKalle Valo cw1200_cqm_bssloss_sm(priv, 1, 0, 0); 284*560424e9SKalle Valo } 285*560424e9SKalle Valo } 286*560424e9SKalle Valo 287*560424e9SKalle Valo static void cw1200_scan_complete(struct cw1200_common *priv) 288*560424e9SKalle Valo { 289*560424e9SKalle Valo queue_delayed_work(priv->workqueue, &priv->clear_recent_scan_work, HZ); 290*560424e9SKalle Valo if (priv->scan.direct_probe) { 291*560424e9SKalle Valo wiphy_dbg(priv->hw->wiphy, "[SCAN] Direct probe complete.\n"); 292*560424e9SKalle Valo cw1200_scan_restart_delayed(priv); 293*560424e9SKalle Valo priv->scan.direct_probe = 0; 294*560424e9SKalle Valo up(&priv->scan.lock); 295*560424e9SKalle Valo wsm_unlock_tx(priv); 296*560424e9SKalle Valo } else { 297*560424e9SKalle Valo cw1200_scan_work(&priv->scan.work); 298*560424e9SKalle Valo } 299*560424e9SKalle Valo } 300*560424e9SKalle Valo 301*560424e9SKalle Valo void cw1200_scan_failed_cb(struct cw1200_common *priv) 302*560424e9SKalle Valo { 303*560424e9SKalle Valo if (priv->mode == NL80211_IFTYPE_UNSPECIFIED) 304*560424e9SKalle Valo /* STA is stopped. */ 305*560424e9SKalle Valo return; 306*560424e9SKalle Valo 307*560424e9SKalle Valo if (cancel_delayed_work_sync(&priv->scan.timeout) > 0) { 308*560424e9SKalle Valo priv->scan.status = -EIO; 309*560424e9SKalle Valo queue_delayed_work(priv->workqueue, &priv->scan.timeout, 0); 310*560424e9SKalle Valo } 311*560424e9SKalle Valo } 312*560424e9SKalle Valo 313*560424e9SKalle Valo 314*560424e9SKalle Valo void cw1200_scan_complete_cb(struct cw1200_common *priv, 315*560424e9SKalle Valo struct wsm_scan_complete *arg) 316*560424e9SKalle Valo { 317*560424e9SKalle Valo if (priv->mode == NL80211_IFTYPE_UNSPECIFIED) 318*560424e9SKalle Valo /* STA is stopped. */ 319*560424e9SKalle Valo return; 320*560424e9SKalle Valo 321*560424e9SKalle Valo if (cancel_delayed_work_sync(&priv->scan.timeout) > 0) { 322*560424e9SKalle Valo priv->scan.status = 1; 323*560424e9SKalle Valo queue_delayed_work(priv->workqueue, &priv->scan.timeout, 0); 324*560424e9SKalle Valo } 325*560424e9SKalle Valo } 326*560424e9SKalle Valo 327*560424e9SKalle Valo void cw1200_clear_recent_scan_work(struct work_struct *work) 328*560424e9SKalle Valo { 329*560424e9SKalle Valo struct cw1200_common *priv = 330*560424e9SKalle Valo container_of(work, struct cw1200_common, 331*560424e9SKalle Valo clear_recent_scan_work.work); 332*560424e9SKalle Valo atomic_xchg(&priv->recent_scan, 0); 333*560424e9SKalle Valo } 334*560424e9SKalle Valo 335*560424e9SKalle Valo void cw1200_scan_timeout(struct work_struct *work) 336*560424e9SKalle Valo { 337*560424e9SKalle Valo struct cw1200_common *priv = 338*560424e9SKalle Valo container_of(work, struct cw1200_common, scan.timeout.work); 339*560424e9SKalle Valo if (atomic_xchg(&priv->scan.in_progress, 0)) { 340*560424e9SKalle Valo if (priv->scan.status > 0) { 341*560424e9SKalle Valo priv->scan.status = 0; 342*560424e9SKalle Valo } else if (!priv->scan.status) { 343*560424e9SKalle Valo wiphy_warn(priv->hw->wiphy, 344*560424e9SKalle Valo "Timeout waiting for scan complete notification.\n"); 345*560424e9SKalle Valo priv->scan.status = -ETIMEDOUT; 346*560424e9SKalle Valo priv->scan.curr = priv->scan.end; 347*560424e9SKalle Valo wsm_stop_scan(priv); 348*560424e9SKalle Valo } 349*560424e9SKalle Valo cw1200_scan_complete(priv); 350*560424e9SKalle Valo } 351*560424e9SKalle Valo } 352*560424e9SKalle Valo 353*560424e9SKalle Valo void cw1200_probe_work(struct work_struct *work) 354*560424e9SKalle Valo { 355*560424e9SKalle Valo struct cw1200_common *priv = 356*560424e9SKalle Valo container_of(work, struct cw1200_common, scan.probe_work.work); 357*560424e9SKalle Valo u8 queue_id = cw1200_queue_get_queue_id(priv->pending_frame_id); 358*560424e9SKalle Valo struct cw1200_queue *queue = &priv->tx_queue[queue_id]; 359*560424e9SKalle Valo const struct cw1200_txpriv *txpriv; 360*560424e9SKalle Valo struct wsm_tx *wsm; 361*560424e9SKalle Valo struct wsm_template_frame frame = { 362*560424e9SKalle Valo .frame_type = WSM_FRAME_TYPE_PROBE_REQUEST, 363*560424e9SKalle Valo }; 364*560424e9SKalle Valo struct wsm_ssid ssids[1] = {{ 365*560424e9SKalle Valo .length = 0, 366*560424e9SKalle Valo } }; 367*560424e9SKalle Valo struct wsm_scan_ch ch[1] = {{ 368*560424e9SKalle Valo .min_chan_time = 0, 369*560424e9SKalle Valo .max_chan_time = 10, 370*560424e9SKalle Valo } }; 371*560424e9SKalle Valo struct wsm_scan scan = { 372*560424e9SKalle Valo .type = WSM_SCAN_TYPE_FOREGROUND, 373*560424e9SKalle Valo .num_probes = 1, 374*560424e9SKalle Valo .probe_delay = 0, 375*560424e9SKalle Valo .num_channels = 1, 376*560424e9SKalle Valo .ssids = ssids, 377*560424e9SKalle Valo .ch = ch, 378*560424e9SKalle Valo }; 379*560424e9SKalle Valo u8 *ies; 380*560424e9SKalle Valo size_t ies_len; 381*560424e9SKalle Valo int ret; 382*560424e9SKalle Valo 383*560424e9SKalle Valo wiphy_dbg(priv->hw->wiphy, "[SCAN] Direct probe work.\n"); 384*560424e9SKalle Valo 385*560424e9SKalle Valo mutex_lock(&priv->conf_mutex); 386*560424e9SKalle Valo if (down_trylock(&priv->scan.lock)) { 387*560424e9SKalle Valo /* Scan is already in progress. Requeue self. */ 388*560424e9SKalle Valo schedule(); 389*560424e9SKalle Valo queue_delayed_work(priv->workqueue, &priv->scan.probe_work, 390*560424e9SKalle Valo msecs_to_jiffies(100)); 391*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 392*560424e9SKalle Valo return; 393*560424e9SKalle Valo } 394*560424e9SKalle Valo 395*560424e9SKalle Valo /* Make sure we still have a pending probe req */ 396*560424e9SKalle Valo if (cw1200_queue_get_skb(queue, priv->pending_frame_id, 397*560424e9SKalle Valo &frame.skb, &txpriv)) { 398*560424e9SKalle Valo up(&priv->scan.lock); 399*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 400*560424e9SKalle Valo wsm_unlock_tx(priv); 401*560424e9SKalle Valo return; 402*560424e9SKalle Valo } 403*560424e9SKalle Valo wsm = (struct wsm_tx *)frame.skb->data; 404*560424e9SKalle Valo scan.max_tx_rate = wsm->max_tx_rate; 405*560424e9SKalle Valo scan.band = (priv->channel->band == IEEE80211_BAND_5GHZ) ? 406*560424e9SKalle Valo WSM_PHY_BAND_5G : WSM_PHY_BAND_2_4G; 407*560424e9SKalle Valo if (priv->join_status == CW1200_JOIN_STATUS_STA || 408*560424e9SKalle Valo priv->join_status == CW1200_JOIN_STATUS_IBSS) { 409*560424e9SKalle Valo scan.type = WSM_SCAN_TYPE_BACKGROUND; 410*560424e9SKalle Valo scan.flags = WSM_SCAN_FLAG_FORCE_BACKGROUND; 411*560424e9SKalle Valo } 412*560424e9SKalle Valo ch[0].number = priv->channel->hw_value; 413*560424e9SKalle Valo 414*560424e9SKalle Valo skb_pull(frame.skb, txpriv->offset); 415*560424e9SKalle Valo 416*560424e9SKalle Valo ies = &frame.skb->data[sizeof(struct ieee80211_hdr_3addr)]; 417*560424e9SKalle Valo ies_len = frame.skb->len - sizeof(struct ieee80211_hdr_3addr); 418*560424e9SKalle Valo 419*560424e9SKalle Valo if (ies_len) { 420*560424e9SKalle Valo u8 *ssidie = 421*560424e9SKalle Valo (u8 *)cfg80211_find_ie(WLAN_EID_SSID, ies, ies_len); 422*560424e9SKalle Valo if (ssidie && ssidie[1] && ssidie[1] <= sizeof(ssids[0].ssid)) { 423*560424e9SKalle Valo u8 *nextie = &ssidie[2 + ssidie[1]]; 424*560424e9SKalle Valo /* Remove SSID from the IE list. It has to be provided 425*560424e9SKalle Valo * as a separate argument in cw1200_scan_start call 426*560424e9SKalle Valo */ 427*560424e9SKalle Valo 428*560424e9SKalle Valo /* Store SSID localy */ 429*560424e9SKalle Valo ssids[0].length = ssidie[1]; 430*560424e9SKalle Valo memcpy(ssids[0].ssid, &ssidie[2], ssids[0].length); 431*560424e9SKalle Valo scan.num_ssids = 1; 432*560424e9SKalle Valo 433*560424e9SKalle Valo /* Remove SSID from IE list */ 434*560424e9SKalle Valo ssidie[1] = 0; 435*560424e9SKalle Valo memmove(&ssidie[2], nextie, &ies[ies_len] - nextie); 436*560424e9SKalle Valo skb_trim(frame.skb, frame.skb->len - ssids[0].length); 437*560424e9SKalle Valo } 438*560424e9SKalle Valo } 439*560424e9SKalle Valo 440*560424e9SKalle Valo /* FW bug: driver has to restart p2p-dev mode after scan */ 441*560424e9SKalle Valo if (priv->join_status == CW1200_JOIN_STATUS_MONITOR) 442*560424e9SKalle Valo cw1200_disable_listening(priv); 443*560424e9SKalle Valo ret = wsm_set_template_frame(priv, &frame); 444*560424e9SKalle Valo priv->scan.direct_probe = 1; 445*560424e9SKalle Valo if (!ret) { 446*560424e9SKalle Valo wsm_flush_tx(priv); 447*560424e9SKalle Valo ret = cw1200_scan_start(priv, &scan); 448*560424e9SKalle Valo } 449*560424e9SKalle Valo mutex_unlock(&priv->conf_mutex); 450*560424e9SKalle Valo 451*560424e9SKalle Valo skb_push(frame.skb, txpriv->offset); 452*560424e9SKalle Valo if (!ret) 453*560424e9SKalle Valo IEEE80211_SKB_CB(frame.skb)->flags |= IEEE80211_TX_STAT_ACK; 454*560424e9SKalle Valo BUG_ON(cw1200_queue_remove(queue, priv->pending_frame_id)); 455*560424e9SKalle Valo 456*560424e9SKalle Valo if (ret) { 457*560424e9SKalle Valo priv->scan.direct_probe = 0; 458*560424e9SKalle Valo up(&priv->scan.lock); 459*560424e9SKalle Valo wsm_unlock_tx(priv); 460*560424e9SKalle Valo } 461*560424e9SKalle Valo 462*560424e9SKalle Valo return; 463*560424e9SKalle Valo } 464