xref: /openbmc/linux/net/mac80211/util.c (revision e3685e03b40f5ec7926d9a75bf63467fc4071df9)
1 /*
2  * Copyright 2002-2005, Instant802 Networks, Inc.
3  * Copyright 2005-2006, Devicescape Software, Inc.
4  * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
5  * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License version 2 as
9  * published by the Free Software Foundation.
10  *
11  * utilities for mac80211
12  */
13 
14 #include <net/mac80211.h>
15 #include <linux/netdevice.h>
16 #include <linux/export.h>
17 #include <linux/types.h>
18 #include <linux/slab.h>
19 #include <linux/skbuff.h>
20 #include <linux/etherdevice.h>
21 #include <linux/if_arp.h>
22 #include <linux/bitmap.h>
23 #include <linux/crc32.h>
24 #include <net/net_namespace.h>
25 #include <net/cfg80211.h>
26 #include <net/rtnetlink.h>
27 
28 #include "ieee80211_i.h"
29 #include "driver-ops.h"
30 #include "rate.h"
31 #include "mesh.h"
32 #include "wme.h"
33 #include "led.h"
34 #include "wep.h"
35 
36 /* privid for wiphys to determine whether they belong to us or not */
37 void *mac80211_wiphy_privid = &mac80211_wiphy_privid;
38 
39 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
40 {
41 	struct ieee80211_local *local;
42 	BUG_ON(!wiphy);
43 
44 	local = wiphy_priv(wiphy);
45 	return &local->hw;
46 }
47 EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
48 
49 u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
50 			enum nl80211_iftype type)
51 {
52 	__le16 fc = hdr->frame_control;
53 
54 	 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
55 	if (len < 16)
56 		return NULL;
57 
58 	if (ieee80211_is_data(fc)) {
59 		if (len < 24) /* drop incorrect hdr len (data) */
60 			return NULL;
61 
62 		if (ieee80211_has_a4(fc))
63 			return NULL;
64 		if (ieee80211_has_tods(fc))
65 			return hdr->addr1;
66 		if (ieee80211_has_fromds(fc))
67 			return hdr->addr2;
68 
69 		return hdr->addr3;
70 	}
71 
72 	if (ieee80211_is_mgmt(fc)) {
73 		if (len < 24) /* drop incorrect hdr len (mgmt) */
74 			return NULL;
75 		return hdr->addr3;
76 	}
77 
78 	if (ieee80211_is_ctl(fc)) {
79 		if (ieee80211_is_pspoll(fc))
80 			return hdr->addr1;
81 
82 		if (ieee80211_is_back_req(fc)) {
83 			switch (type) {
84 			case NL80211_IFTYPE_STATION:
85 				return hdr->addr2;
86 			case NL80211_IFTYPE_AP:
87 			case NL80211_IFTYPE_AP_VLAN:
88 				return hdr->addr1;
89 			default:
90 				break; /* fall through to the return */
91 			}
92 		}
93 	}
94 
95 	return NULL;
96 }
97 
98 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
99 {
100 	struct sk_buff *skb;
101 	struct ieee80211_hdr *hdr;
102 
103 	skb_queue_walk(&tx->skbs, skb) {
104 		hdr = (struct ieee80211_hdr *) skb->data;
105 		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
106 	}
107 }
108 
109 int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
110 			     int rate, int erp, int short_preamble,
111 			     int shift)
112 {
113 	int dur;
114 
115 	/* calculate duration (in microseconds, rounded up to next higher
116 	 * integer if it includes a fractional microsecond) to send frame of
117 	 * len bytes (does not include FCS) at the given rate. Duration will
118 	 * also include SIFS.
119 	 *
120 	 * rate is in 100 kbps, so divident is multiplied by 10 in the
121 	 * DIV_ROUND_UP() operations.
122 	 *
123 	 * shift may be 2 for 5 MHz channels or 1 for 10 MHz channels, and
124 	 * is assumed to be 0 otherwise.
125 	 */
126 
127 	if (band == IEEE80211_BAND_5GHZ || erp) {
128 		/*
129 		 * OFDM:
130 		 *
131 		 * N_DBPS = DATARATE x 4
132 		 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
133 		 *	(16 = SIGNAL time, 6 = tail bits)
134 		 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
135 		 *
136 		 * T_SYM = 4 usec
137 		 * 802.11a - 18.5.2: aSIFSTime = 16 usec
138 		 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
139 		 *	signal ext = 6 usec
140 		 */
141 		dur = 16; /* SIFS + signal ext */
142 		dur += 16; /* IEEE 802.11-2012 18.3.2.4: T_PREAMBLE = 16 usec */
143 		dur += 4; /* IEEE 802.11-2012 18.3.2.4: T_SIGNAL = 4 usec */
144 
145 		/* IEEE 802.11-2012 18.3.2.4: all values above are:
146 		 *  * times 4 for 5 MHz
147 		 *  * times 2 for 10 MHz
148 		 */
149 		dur *= 1 << shift;
150 
151 		/* rates should already consider the channel bandwidth,
152 		 * don't apply divisor again.
153 		 */
154 		dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
155 					4 * rate); /* T_SYM x N_SYM */
156 	} else {
157 		/*
158 		 * 802.11b or 802.11g with 802.11b compatibility:
159 		 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
160 		 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
161 		 *
162 		 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
163 		 * aSIFSTime = 10 usec
164 		 * aPreambleLength = 144 usec or 72 usec with short preamble
165 		 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
166 		 */
167 		dur = 10; /* aSIFSTime = 10 usec */
168 		dur += short_preamble ? (72 + 24) : (144 + 48);
169 
170 		dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
171 	}
172 
173 	return dur;
174 }
175 
176 /* Exported duration function for driver use */
177 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
178 					struct ieee80211_vif *vif,
179 					enum ieee80211_band band,
180 					size_t frame_len,
181 					struct ieee80211_rate *rate)
182 {
183 	struct ieee80211_sub_if_data *sdata;
184 	u16 dur;
185 	int erp, shift = 0;
186 	bool short_preamble = false;
187 
188 	erp = 0;
189 	if (vif) {
190 		sdata = vif_to_sdata(vif);
191 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
192 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
193 			erp = rate->flags & IEEE80211_RATE_ERP_G;
194 		shift = ieee80211_vif_get_shift(vif);
195 	}
196 
197 	dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
198 				       short_preamble, shift);
199 
200 	return cpu_to_le16(dur);
201 }
202 EXPORT_SYMBOL(ieee80211_generic_frame_duration);
203 
204 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
205 			      struct ieee80211_vif *vif, size_t frame_len,
206 			      const struct ieee80211_tx_info *frame_txctl)
207 {
208 	struct ieee80211_local *local = hw_to_local(hw);
209 	struct ieee80211_rate *rate;
210 	struct ieee80211_sub_if_data *sdata;
211 	bool short_preamble;
212 	int erp, shift = 0, bitrate;
213 	u16 dur;
214 	struct ieee80211_supported_band *sband;
215 
216 	sband = local->hw.wiphy->bands[frame_txctl->band];
217 
218 	short_preamble = false;
219 
220 	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
221 
222 	erp = 0;
223 	if (vif) {
224 		sdata = vif_to_sdata(vif);
225 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
226 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
227 			erp = rate->flags & IEEE80211_RATE_ERP_G;
228 		shift = ieee80211_vif_get_shift(vif);
229 	}
230 
231 	bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
232 
233 	/* CTS duration */
234 	dur = ieee80211_frame_duration(sband->band, 10, bitrate,
235 				       erp, short_preamble, shift);
236 	/* Data frame duration */
237 	dur += ieee80211_frame_duration(sband->band, frame_len, bitrate,
238 					erp, short_preamble, shift);
239 	/* ACK duration */
240 	dur += ieee80211_frame_duration(sband->band, 10, bitrate,
241 					erp, short_preamble, shift);
242 
243 	return cpu_to_le16(dur);
244 }
245 EXPORT_SYMBOL(ieee80211_rts_duration);
246 
247 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
248 				    struct ieee80211_vif *vif,
249 				    size_t frame_len,
250 				    const struct ieee80211_tx_info *frame_txctl)
251 {
252 	struct ieee80211_local *local = hw_to_local(hw);
253 	struct ieee80211_rate *rate;
254 	struct ieee80211_sub_if_data *sdata;
255 	bool short_preamble;
256 	int erp, shift = 0, bitrate;
257 	u16 dur;
258 	struct ieee80211_supported_band *sband;
259 
260 	sband = local->hw.wiphy->bands[frame_txctl->band];
261 
262 	short_preamble = false;
263 
264 	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
265 	erp = 0;
266 	if (vif) {
267 		sdata = vif_to_sdata(vif);
268 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
269 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
270 			erp = rate->flags & IEEE80211_RATE_ERP_G;
271 		shift = ieee80211_vif_get_shift(vif);
272 	}
273 
274 	bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
275 
276 	/* Data frame duration */
277 	dur = ieee80211_frame_duration(sband->band, frame_len, bitrate,
278 				       erp, short_preamble, shift);
279 	if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
280 		/* ACK duration */
281 		dur += ieee80211_frame_duration(sband->band, 10, bitrate,
282 						erp, short_preamble, shift);
283 	}
284 
285 	return cpu_to_le16(dur);
286 }
287 EXPORT_SYMBOL(ieee80211_ctstoself_duration);
288 
289 void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
290 {
291 	struct ieee80211_sub_if_data *sdata;
292 	int n_acs = IEEE80211_NUM_ACS;
293 
294 	if (local->hw.queues < IEEE80211_NUM_ACS)
295 		n_acs = 1;
296 
297 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
298 		int ac;
299 
300 		if (!sdata->dev)
301 			continue;
302 
303 		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
304 		    local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
305 			continue;
306 
307 		for (ac = 0; ac < n_acs; ac++) {
308 			int ac_queue = sdata->vif.hw_queue[ac];
309 
310 			if (ac_queue == queue ||
311 			    (sdata->vif.cab_queue == queue &&
312 			     local->queue_stop_reasons[ac_queue] == 0 &&
313 			     skb_queue_empty(&local->pending[ac_queue])))
314 				netif_wake_subqueue(sdata->dev, ac);
315 		}
316 	}
317 }
318 
319 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
320 				   enum queue_stop_reason reason)
321 {
322 	struct ieee80211_local *local = hw_to_local(hw);
323 
324 	trace_wake_queue(local, queue, reason);
325 
326 	if (WARN_ON(queue >= hw->queues))
327 		return;
328 
329 	if (!test_bit(reason, &local->queue_stop_reasons[queue]))
330 		return;
331 
332 	__clear_bit(reason, &local->queue_stop_reasons[queue]);
333 
334 	if (local->queue_stop_reasons[queue] != 0)
335 		/* someone still has this queue stopped */
336 		return;
337 
338 	if (skb_queue_empty(&local->pending[queue])) {
339 		rcu_read_lock();
340 		ieee80211_propagate_queue_wake(local, queue);
341 		rcu_read_unlock();
342 	} else
343 		tasklet_schedule(&local->tx_pending_tasklet);
344 }
345 
346 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
347 				    enum queue_stop_reason reason)
348 {
349 	struct ieee80211_local *local = hw_to_local(hw);
350 	unsigned long flags;
351 
352 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
353 	__ieee80211_wake_queue(hw, queue, reason);
354 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
355 }
356 
357 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
358 {
359 	ieee80211_wake_queue_by_reason(hw, queue,
360 				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
361 }
362 EXPORT_SYMBOL(ieee80211_wake_queue);
363 
364 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
365 				   enum queue_stop_reason reason)
366 {
367 	struct ieee80211_local *local = hw_to_local(hw);
368 	struct ieee80211_sub_if_data *sdata;
369 	int n_acs = IEEE80211_NUM_ACS;
370 
371 	trace_stop_queue(local, queue, reason);
372 
373 	if (WARN_ON(queue >= hw->queues))
374 		return;
375 
376 	if (test_bit(reason, &local->queue_stop_reasons[queue]))
377 		return;
378 
379 	__set_bit(reason, &local->queue_stop_reasons[queue]);
380 
381 	if (local->hw.queues < IEEE80211_NUM_ACS)
382 		n_acs = 1;
383 
384 	rcu_read_lock();
385 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
386 		int ac;
387 
388 		if (!sdata->dev)
389 			continue;
390 
391 		for (ac = 0; ac < n_acs; ac++) {
392 			if (sdata->vif.hw_queue[ac] == queue ||
393 			    sdata->vif.cab_queue == queue)
394 				netif_stop_subqueue(sdata->dev, ac);
395 		}
396 	}
397 	rcu_read_unlock();
398 }
399 
400 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
401 				    enum queue_stop_reason reason)
402 {
403 	struct ieee80211_local *local = hw_to_local(hw);
404 	unsigned long flags;
405 
406 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
407 	__ieee80211_stop_queue(hw, queue, reason);
408 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
409 }
410 
411 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
412 {
413 	ieee80211_stop_queue_by_reason(hw, queue,
414 				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
415 }
416 EXPORT_SYMBOL(ieee80211_stop_queue);
417 
418 void ieee80211_add_pending_skb(struct ieee80211_local *local,
419 			       struct sk_buff *skb)
420 {
421 	struct ieee80211_hw *hw = &local->hw;
422 	unsigned long flags;
423 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
424 	int queue = info->hw_queue;
425 
426 	if (WARN_ON(!info->control.vif)) {
427 		ieee80211_free_txskb(&local->hw, skb);
428 		return;
429 	}
430 
431 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
432 	__ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
433 	__skb_queue_tail(&local->pending[queue], skb);
434 	__ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
435 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
436 }
437 
438 void ieee80211_add_pending_skbs(struct ieee80211_local *local,
439 				struct sk_buff_head *skbs)
440 {
441 	struct ieee80211_hw *hw = &local->hw;
442 	struct sk_buff *skb;
443 	unsigned long flags;
444 	int queue, i;
445 
446 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
447 	while ((skb = skb_dequeue(skbs))) {
448 		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
449 
450 		if (WARN_ON(!info->control.vif)) {
451 			ieee80211_free_txskb(&local->hw, skb);
452 			continue;
453 		}
454 
455 		queue = info->hw_queue;
456 
457 		__ieee80211_stop_queue(hw, queue,
458 				IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
459 
460 		__skb_queue_tail(&local->pending[queue], skb);
461 	}
462 
463 	for (i = 0; i < hw->queues; i++)
464 		__ieee80211_wake_queue(hw, i,
465 			IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
466 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
467 }
468 
469 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
470 				     unsigned long queues,
471 				     enum queue_stop_reason reason)
472 {
473 	struct ieee80211_local *local = hw_to_local(hw);
474 	unsigned long flags;
475 	int i;
476 
477 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
478 
479 	for_each_set_bit(i, &queues, hw->queues)
480 		__ieee80211_stop_queue(hw, i, reason);
481 
482 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
483 }
484 
485 void ieee80211_stop_queues(struct ieee80211_hw *hw)
486 {
487 	ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
488 					IEEE80211_QUEUE_STOP_REASON_DRIVER);
489 }
490 EXPORT_SYMBOL(ieee80211_stop_queues);
491 
492 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
493 {
494 	struct ieee80211_local *local = hw_to_local(hw);
495 	unsigned long flags;
496 	int ret;
497 
498 	if (WARN_ON(queue >= hw->queues))
499 		return true;
500 
501 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
502 	ret = test_bit(IEEE80211_QUEUE_STOP_REASON_DRIVER,
503 		       &local->queue_stop_reasons[queue]);
504 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
505 	return ret;
506 }
507 EXPORT_SYMBOL(ieee80211_queue_stopped);
508 
509 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
510 				     unsigned long queues,
511 				     enum queue_stop_reason reason)
512 {
513 	struct ieee80211_local *local = hw_to_local(hw);
514 	unsigned long flags;
515 	int i;
516 
517 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
518 
519 	for_each_set_bit(i, &queues, hw->queues)
520 		__ieee80211_wake_queue(hw, i, reason);
521 
522 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
523 }
524 
525 void ieee80211_wake_queues(struct ieee80211_hw *hw)
526 {
527 	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
528 					IEEE80211_QUEUE_STOP_REASON_DRIVER);
529 }
530 EXPORT_SYMBOL(ieee80211_wake_queues);
531 
532 void ieee80211_flush_queues(struct ieee80211_local *local,
533 			    struct ieee80211_sub_if_data *sdata)
534 {
535 	u32 queues;
536 
537 	if (!local->ops->flush)
538 		return;
539 
540 	if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) {
541 		int ac;
542 
543 		queues = 0;
544 
545 		for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
546 			queues |= BIT(sdata->vif.hw_queue[ac]);
547 		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE)
548 			queues |= BIT(sdata->vif.cab_queue);
549 	} else {
550 		/* all queues */
551 		queues = BIT(local->hw.queues) - 1;
552 	}
553 
554 	ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
555 					IEEE80211_QUEUE_STOP_REASON_FLUSH);
556 
557 	drv_flush(local, queues, false);
558 
559 	ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
560 					IEEE80211_QUEUE_STOP_REASON_FLUSH);
561 }
562 
563 static void __iterate_active_interfaces(struct ieee80211_local *local,
564 					u32 iter_flags,
565 					void (*iterator)(void *data, u8 *mac,
566 						struct ieee80211_vif *vif),
567 					void *data)
568 {
569 	struct ieee80211_sub_if_data *sdata;
570 
571 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
572 		switch (sdata->vif.type) {
573 		case NL80211_IFTYPE_MONITOR:
574 			if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
575 				continue;
576 			break;
577 		case NL80211_IFTYPE_AP_VLAN:
578 			continue;
579 		default:
580 			break;
581 		}
582 		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
583 		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
584 			continue;
585 		if (ieee80211_sdata_running(sdata))
586 			iterator(data, sdata->vif.addr,
587 				 &sdata->vif);
588 	}
589 
590 	sdata = rcu_dereference_check(local->monitor_sdata,
591 				      lockdep_is_held(&local->iflist_mtx) ||
592 				      lockdep_rtnl_is_held());
593 	if (sdata &&
594 	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
595 	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
596 		iterator(data, sdata->vif.addr, &sdata->vif);
597 }
598 
599 void ieee80211_iterate_active_interfaces(
600 	struct ieee80211_hw *hw, u32 iter_flags,
601 	void (*iterator)(void *data, u8 *mac,
602 			 struct ieee80211_vif *vif),
603 	void *data)
604 {
605 	struct ieee80211_local *local = hw_to_local(hw);
606 
607 	mutex_lock(&local->iflist_mtx);
608 	__iterate_active_interfaces(local, iter_flags, iterator, data);
609 	mutex_unlock(&local->iflist_mtx);
610 }
611 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);
612 
613 void ieee80211_iterate_active_interfaces_atomic(
614 	struct ieee80211_hw *hw, u32 iter_flags,
615 	void (*iterator)(void *data, u8 *mac,
616 			 struct ieee80211_vif *vif),
617 	void *data)
618 {
619 	struct ieee80211_local *local = hw_to_local(hw);
620 
621 	rcu_read_lock();
622 	__iterate_active_interfaces(local, iter_flags, iterator, data);
623 	rcu_read_unlock();
624 }
625 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
626 
627 void ieee80211_iterate_active_interfaces_rtnl(
628 	struct ieee80211_hw *hw, u32 iter_flags,
629 	void (*iterator)(void *data, u8 *mac,
630 			 struct ieee80211_vif *vif),
631 	void *data)
632 {
633 	struct ieee80211_local *local = hw_to_local(hw);
634 
635 	ASSERT_RTNL();
636 
637 	__iterate_active_interfaces(local, iter_flags, iterator, data);
638 }
639 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_rtnl);
640 
641 struct ieee80211_vif *wdev_to_ieee80211_vif(struct wireless_dev *wdev)
642 {
643 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
644 
645 	if (!ieee80211_sdata_running(sdata) ||
646 	    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
647 		return NULL;
648 	return &sdata->vif;
649 }
650 EXPORT_SYMBOL_GPL(wdev_to_ieee80211_vif);
651 
652 /*
653  * Nothing should have been stuffed into the workqueue during
654  * the suspend->resume cycle. If this WARN is seen then there
655  * is a bug with either the driver suspend or something in
656  * mac80211 stuffing into the workqueue which we haven't yet
657  * cleared during mac80211's suspend cycle.
658  */
659 static bool ieee80211_can_queue_work(struct ieee80211_local *local)
660 {
661 	if (WARN(local->suspended && !local->resuming,
662 		 "queueing ieee80211 work while going to suspend\n"))
663 		return false;
664 
665 	return true;
666 }
667 
668 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
669 {
670 	struct ieee80211_local *local = hw_to_local(hw);
671 
672 	if (!ieee80211_can_queue_work(local))
673 		return;
674 
675 	queue_work(local->workqueue, work);
676 }
677 EXPORT_SYMBOL(ieee80211_queue_work);
678 
679 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
680 				  struct delayed_work *dwork,
681 				  unsigned long delay)
682 {
683 	struct ieee80211_local *local = hw_to_local(hw);
684 
685 	if (!ieee80211_can_queue_work(local))
686 		return;
687 
688 	queue_delayed_work(local->workqueue, dwork, delay);
689 }
690 EXPORT_SYMBOL(ieee80211_queue_delayed_work);
691 
692 u32 ieee802_11_parse_elems_crc(const u8 *start, size_t len, bool action,
693 			       struct ieee802_11_elems *elems,
694 			       u64 filter, u32 crc)
695 {
696 	size_t left = len;
697 	const u8 *pos = start;
698 	bool calc_crc = filter != 0;
699 	DECLARE_BITMAP(seen_elems, 256);
700 	const u8 *ie;
701 
702 	bitmap_zero(seen_elems, 256);
703 	memset(elems, 0, sizeof(*elems));
704 	elems->ie_start = start;
705 	elems->total_len = len;
706 
707 	while (left >= 2) {
708 		u8 id, elen;
709 		bool elem_parse_failed;
710 
711 		id = *pos++;
712 		elen = *pos++;
713 		left -= 2;
714 
715 		if (elen > left) {
716 			elems->parse_error = true;
717 			break;
718 		}
719 
720 		switch (id) {
721 		case WLAN_EID_SSID:
722 		case WLAN_EID_SUPP_RATES:
723 		case WLAN_EID_FH_PARAMS:
724 		case WLAN_EID_DS_PARAMS:
725 		case WLAN_EID_CF_PARAMS:
726 		case WLAN_EID_TIM:
727 		case WLAN_EID_IBSS_PARAMS:
728 		case WLAN_EID_CHALLENGE:
729 		case WLAN_EID_RSN:
730 		case WLAN_EID_ERP_INFO:
731 		case WLAN_EID_EXT_SUPP_RATES:
732 		case WLAN_EID_HT_CAPABILITY:
733 		case WLAN_EID_HT_OPERATION:
734 		case WLAN_EID_VHT_CAPABILITY:
735 		case WLAN_EID_VHT_OPERATION:
736 		case WLAN_EID_MESH_ID:
737 		case WLAN_EID_MESH_CONFIG:
738 		case WLAN_EID_PEER_MGMT:
739 		case WLAN_EID_PREQ:
740 		case WLAN_EID_PREP:
741 		case WLAN_EID_PERR:
742 		case WLAN_EID_RANN:
743 		case WLAN_EID_CHANNEL_SWITCH:
744 		case WLAN_EID_EXT_CHANSWITCH_ANN:
745 		case WLAN_EID_COUNTRY:
746 		case WLAN_EID_PWR_CONSTRAINT:
747 		case WLAN_EID_TIMEOUT_INTERVAL:
748 		case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
749 		case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
750 		case WLAN_EID_CHAN_SWITCH_PARAM:
751 		/*
752 		 * not listing WLAN_EID_CHANNEL_SWITCH_WRAPPER -- it seems possible
753 		 * that if the content gets bigger it might be needed more than once
754 		 */
755 			if (test_bit(id, seen_elems)) {
756 				elems->parse_error = true;
757 				left -= elen;
758 				pos += elen;
759 				continue;
760 			}
761 			break;
762 		}
763 
764 		if (calc_crc && id < 64 && (filter & (1ULL << id)))
765 			crc = crc32_be(crc, pos - 2, elen + 2);
766 
767 		elem_parse_failed = false;
768 
769 		switch (id) {
770 		case WLAN_EID_SSID:
771 			elems->ssid = pos;
772 			elems->ssid_len = elen;
773 			break;
774 		case WLAN_EID_SUPP_RATES:
775 			elems->supp_rates = pos;
776 			elems->supp_rates_len = elen;
777 			break;
778 		case WLAN_EID_DS_PARAMS:
779 			if (elen >= 1)
780 				elems->ds_params = pos;
781 			else
782 				elem_parse_failed = true;
783 			break;
784 		case WLAN_EID_TIM:
785 			if (elen >= sizeof(struct ieee80211_tim_ie)) {
786 				elems->tim = (void *)pos;
787 				elems->tim_len = elen;
788 			} else
789 				elem_parse_failed = true;
790 			break;
791 		case WLAN_EID_CHALLENGE:
792 			elems->challenge = pos;
793 			elems->challenge_len = elen;
794 			break;
795 		case WLAN_EID_VENDOR_SPECIFIC:
796 			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
797 			    pos[2] == 0xf2) {
798 				/* Microsoft OUI (00:50:F2) */
799 
800 				if (calc_crc)
801 					crc = crc32_be(crc, pos - 2, elen + 2);
802 
803 				if (elen >= 5 && pos[3] == 2) {
804 					/* OUI Type 2 - WMM IE */
805 					if (pos[4] == 0) {
806 						elems->wmm_info = pos;
807 						elems->wmm_info_len = elen;
808 					} else if (pos[4] == 1) {
809 						elems->wmm_param = pos;
810 						elems->wmm_param_len = elen;
811 					}
812 				}
813 			}
814 			break;
815 		case WLAN_EID_RSN:
816 			elems->rsn = pos;
817 			elems->rsn_len = elen;
818 			break;
819 		case WLAN_EID_ERP_INFO:
820 			if (elen >= 1)
821 				elems->erp_info = pos;
822 			else
823 				elem_parse_failed = true;
824 			break;
825 		case WLAN_EID_EXT_SUPP_RATES:
826 			elems->ext_supp_rates = pos;
827 			elems->ext_supp_rates_len = elen;
828 			break;
829 		case WLAN_EID_HT_CAPABILITY:
830 			if (elen >= sizeof(struct ieee80211_ht_cap))
831 				elems->ht_cap_elem = (void *)pos;
832 			else
833 				elem_parse_failed = true;
834 			break;
835 		case WLAN_EID_HT_OPERATION:
836 			if (elen >= sizeof(struct ieee80211_ht_operation))
837 				elems->ht_operation = (void *)pos;
838 			else
839 				elem_parse_failed = true;
840 			break;
841 		case WLAN_EID_VHT_CAPABILITY:
842 			if (elen >= sizeof(struct ieee80211_vht_cap))
843 				elems->vht_cap_elem = (void *)pos;
844 			else
845 				elem_parse_failed = true;
846 			break;
847 		case WLAN_EID_VHT_OPERATION:
848 			if (elen >= sizeof(struct ieee80211_vht_operation))
849 				elems->vht_operation = (void *)pos;
850 			else
851 				elem_parse_failed = true;
852 			break;
853 		case WLAN_EID_OPMODE_NOTIF:
854 			if (elen > 0)
855 				elems->opmode_notif = pos;
856 			else
857 				elem_parse_failed = true;
858 			break;
859 		case WLAN_EID_MESH_ID:
860 			elems->mesh_id = pos;
861 			elems->mesh_id_len = elen;
862 			break;
863 		case WLAN_EID_MESH_CONFIG:
864 			if (elen >= sizeof(struct ieee80211_meshconf_ie))
865 				elems->mesh_config = (void *)pos;
866 			else
867 				elem_parse_failed = true;
868 			break;
869 		case WLAN_EID_PEER_MGMT:
870 			elems->peering = pos;
871 			elems->peering_len = elen;
872 			break;
873 		case WLAN_EID_MESH_AWAKE_WINDOW:
874 			if (elen >= 2)
875 				elems->awake_window = (void *)pos;
876 			break;
877 		case WLAN_EID_PREQ:
878 			elems->preq = pos;
879 			elems->preq_len = elen;
880 			break;
881 		case WLAN_EID_PREP:
882 			elems->prep = pos;
883 			elems->prep_len = elen;
884 			break;
885 		case WLAN_EID_PERR:
886 			elems->perr = pos;
887 			elems->perr_len = elen;
888 			break;
889 		case WLAN_EID_RANN:
890 			if (elen >= sizeof(struct ieee80211_rann_ie))
891 				elems->rann = (void *)pos;
892 			else
893 				elem_parse_failed = true;
894 			break;
895 		case WLAN_EID_CHANNEL_SWITCH:
896 			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
897 				elem_parse_failed = true;
898 				break;
899 			}
900 			elems->ch_switch_ie = (void *)pos;
901 			break;
902 		case WLAN_EID_EXT_CHANSWITCH_ANN:
903 			if (elen != sizeof(struct ieee80211_ext_chansw_ie)) {
904 				elem_parse_failed = true;
905 				break;
906 			}
907 			elems->ext_chansw_ie = (void *)pos;
908 			break;
909 		case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
910 			if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) {
911 				elem_parse_failed = true;
912 				break;
913 			}
914 			elems->sec_chan_offs = (void *)pos;
915 			break;
916 		case WLAN_EID_CHAN_SWITCH_PARAM:
917 			if (elen !=
918 			    sizeof(*elems->mesh_chansw_params_ie)) {
919 				elem_parse_failed = true;
920 				break;
921 			}
922 			elems->mesh_chansw_params_ie = (void *)pos;
923 			break;
924 		case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
925 			if (!action ||
926 			    elen != sizeof(*elems->wide_bw_chansw_ie)) {
927 				elem_parse_failed = true;
928 				break;
929 			}
930 			elems->wide_bw_chansw_ie = (void *)pos;
931 			break;
932 		case WLAN_EID_CHANNEL_SWITCH_WRAPPER:
933 			if (action) {
934 				elem_parse_failed = true;
935 				break;
936 			}
937 			/*
938 			 * This is a bit tricky, but as we only care about
939 			 * the wide bandwidth channel switch element, so
940 			 * just parse it out manually.
941 			 */
942 			ie = cfg80211_find_ie(WLAN_EID_WIDE_BW_CHANNEL_SWITCH,
943 					      pos, elen);
944 			if (ie) {
945 				if (ie[1] == sizeof(*elems->wide_bw_chansw_ie))
946 					elems->wide_bw_chansw_ie =
947 						(void *)(ie + 2);
948 				else
949 					elem_parse_failed = true;
950 			}
951 			break;
952 		case WLAN_EID_COUNTRY:
953 			elems->country_elem = pos;
954 			elems->country_elem_len = elen;
955 			break;
956 		case WLAN_EID_PWR_CONSTRAINT:
957 			if (elen != 1) {
958 				elem_parse_failed = true;
959 				break;
960 			}
961 			elems->pwr_constr_elem = pos;
962 			break;
963 		case WLAN_EID_TIMEOUT_INTERVAL:
964 			if (elen >= sizeof(struct ieee80211_timeout_interval_ie))
965 				elems->timeout_int = (void *)pos;
966 			else
967 				elem_parse_failed = true;
968 			break;
969 		default:
970 			break;
971 		}
972 
973 		if (elem_parse_failed)
974 			elems->parse_error = true;
975 		else
976 			__set_bit(id, seen_elems);
977 
978 		left -= elen;
979 		pos += elen;
980 	}
981 
982 	if (left != 0)
983 		elems->parse_error = true;
984 
985 	return crc;
986 }
987 
988 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
989 			       bool bss_notify)
990 {
991 	struct ieee80211_local *local = sdata->local;
992 	struct ieee80211_tx_queue_params qparam;
993 	struct ieee80211_chanctx_conf *chanctx_conf;
994 	int ac;
995 	bool use_11b, enable_qos;
996 	int aCWmin, aCWmax;
997 
998 	if (!local->ops->conf_tx)
999 		return;
1000 
1001 	if (local->hw.queues < IEEE80211_NUM_ACS)
1002 		return;
1003 
1004 	memset(&qparam, 0, sizeof(qparam));
1005 
1006 	rcu_read_lock();
1007 	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
1008 	use_11b = (chanctx_conf &&
1009 		   chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
1010 		 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
1011 	rcu_read_unlock();
1012 
1013 	/*
1014 	 * By default disable QoS in STA mode for old access points, which do
1015 	 * not support 802.11e. New APs will provide proper queue parameters,
1016 	 * that we will configure later.
1017 	 */
1018 	enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);
1019 
1020 	/* Set defaults according to 802.11-2007 Table 7-37 */
1021 	aCWmax = 1023;
1022 	if (use_11b)
1023 		aCWmin = 31;
1024 	else
1025 		aCWmin = 15;
1026 
1027 	/* Confiure old 802.11b/g medium access rules. */
1028 	qparam.cw_max = aCWmax;
1029 	qparam.cw_min = aCWmin;
1030 	qparam.txop = 0;
1031 	qparam.aifs = 2;
1032 
1033 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
1034 		/* Update if QoS is enabled. */
1035 		if (enable_qos) {
1036 			switch (ac) {
1037 			case IEEE80211_AC_BK:
1038 				qparam.cw_max = aCWmax;
1039 				qparam.cw_min = aCWmin;
1040 				qparam.txop = 0;
1041 				qparam.aifs = 7;
1042 				break;
1043 			/* never happens but let's not leave undefined */
1044 			default:
1045 			case IEEE80211_AC_BE:
1046 				qparam.cw_max = aCWmax;
1047 				qparam.cw_min = aCWmin;
1048 				qparam.txop = 0;
1049 				qparam.aifs = 3;
1050 				break;
1051 			case IEEE80211_AC_VI:
1052 				qparam.cw_max = aCWmin;
1053 				qparam.cw_min = (aCWmin + 1) / 2 - 1;
1054 				if (use_11b)
1055 					qparam.txop = 6016/32;
1056 				else
1057 					qparam.txop = 3008/32;
1058 				qparam.aifs = 2;
1059 				break;
1060 			case IEEE80211_AC_VO:
1061 				qparam.cw_max = (aCWmin + 1) / 2 - 1;
1062 				qparam.cw_min = (aCWmin + 1) / 4 - 1;
1063 				if (use_11b)
1064 					qparam.txop = 3264/32;
1065 				else
1066 					qparam.txop = 1504/32;
1067 				qparam.aifs = 2;
1068 				break;
1069 			}
1070 		}
1071 
1072 		qparam.uapsd = false;
1073 
1074 		sdata->tx_conf[ac] = qparam;
1075 		drv_conf_tx(local, sdata, ac, &qparam);
1076 	}
1077 
1078 	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1079 	    sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
1080 		sdata->vif.bss_conf.qos = enable_qos;
1081 		if (bss_notify)
1082 			ieee80211_bss_info_change_notify(sdata,
1083 							 BSS_CHANGED_QOS);
1084 	}
1085 }
1086 
1087 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
1088 			 u16 transaction, u16 auth_alg, u16 status,
1089 			 const u8 *extra, size_t extra_len, const u8 *da,
1090 			 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx,
1091 			 u32 tx_flags)
1092 {
1093 	struct ieee80211_local *local = sdata->local;
1094 	struct sk_buff *skb;
1095 	struct ieee80211_mgmt *mgmt;
1096 	int err;
1097 
1098 	/* 24 + 6 = header + auth_algo + auth_transaction + status_code */
1099 	skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24 + 6 + extra_len);
1100 	if (!skb)
1101 		return;
1102 
1103 	skb_reserve(skb, local->hw.extra_tx_headroom);
1104 
1105 	mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
1106 	memset(mgmt, 0, 24 + 6);
1107 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1108 					  IEEE80211_STYPE_AUTH);
1109 	memcpy(mgmt->da, da, ETH_ALEN);
1110 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1111 	memcpy(mgmt->bssid, bssid, ETH_ALEN);
1112 	mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
1113 	mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
1114 	mgmt->u.auth.status_code = cpu_to_le16(status);
1115 	if (extra)
1116 		memcpy(skb_put(skb, extra_len), extra, extra_len);
1117 
1118 	if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
1119 		mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
1120 		err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
1121 		WARN_ON(err);
1122 	}
1123 
1124 	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT |
1125 					tx_flags;
1126 	ieee80211_tx_skb(sdata, skb);
1127 }
1128 
1129 void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
1130 				    const u8 *bssid, u16 stype, u16 reason,
1131 				    bool send_frame, u8 *frame_buf)
1132 {
1133 	struct ieee80211_local *local = sdata->local;
1134 	struct sk_buff *skb;
1135 	struct ieee80211_mgmt *mgmt = (void *)frame_buf;
1136 
1137 	/* build frame */
1138 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
1139 	mgmt->duration = 0; /* initialize only */
1140 	mgmt->seq_ctrl = 0; /* initialize only */
1141 	memcpy(mgmt->da, bssid, ETH_ALEN);
1142 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1143 	memcpy(mgmt->bssid, bssid, ETH_ALEN);
1144 	/* u.deauth.reason_code == u.disassoc.reason_code */
1145 	mgmt->u.deauth.reason_code = cpu_to_le16(reason);
1146 
1147 	if (send_frame) {
1148 		skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1149 				    IEEE80211_DEAUTH_FRAME_LEN);
1150 		if (!skb)
1151 			return;
1152 
1153 		skb_reserve(skb, local->hw.extra_tx_headroom);
1154 
1155 		/* copy in frame */
1156 		memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
1157 		       mgmt, IEEE80211_DEAUTH_FRAME_LEN);
1158 
1159 		if (sdata->vif.type != NL80211_IFTYPE_STATION ||
1160 		    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
1161 			IEEE80211_SKB_CB(skb)->flags |=
1162 				IEEE80211_TX_INTFL_DONT_ENCRYPT;
1163 
1164 		ieee80211_tx_skb(sdata, skb);
1165 	}
1166 }
1167 
1168 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1169 			     size_t buffer_len, const u8 *ie, size_t ie_len,
1170 			     enum ieee80211_band band, u32 rate_mask,
1171 			     struct cfg80211_chan_def *chandef)
1172 {
1173 	struct ieee80211_supported_band *sband;
1174 	u8 *pos = buffer, *end = buffer + buffer_len;
1175 	size_t offset = 0, noffset;
1176 	int supp_rates_len, i;
1177 	u8 rates[32];
1178 	int num_rates;
1179 	int ext_rates_len;
1180 	int shift;
1181 	u32 rate_flags;
1182 
1183 	sband = local->hw.wiphy->bands[band];
1184 	if (WARN_ON_ONCE(!sband))
1185 		return 0;
1186 
1187 	rate_flags = ieee80211_chandef_rate_flags(chandef);
1188 	shift = ieee80211_chandef_get_shift(chandef);
1189 
1190 	num_rates = 0;
1191 	for (i = 0; i < sband->n_bitrates; i++) {
1192 		if ((BIT(i) & rate_mask) == 0)
1193 			continue; /* skip rate */
1194 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
1195 			continue;
1196 
1197 		rates[num_rates++] =
1198 			(u8) DIV_ROUND_UP(sband->bitrates[i].bitrate,
1199 					  (1 << shift) * 5);
1200 	}
1201 
1202 	supp_rates_len = min_t(int, num_rates, 8);
1203 
1204 	if (end - pos < 2 + supp_rates_len)
1205 		goto out_err;
1206 	*pos++ = WLAN_EID_SUPP_RATES;
1207 	*pos++ = supp_rates_len;
1208 	memcpy(pos, rates, supp_rates_len);
1209 	pos += supp_rates_len;
1210 
1211 	/* insert "request information" if in custom IEs */
1212 	if (ie && ie_len) {
1213 		static const u8 before_extrates[] = {
1214 			WLAN_EID_SSID,
1215 			WLAN_EID_SUPP_RATES,
1216 			WLAN_EID_REQUEST,
1217 		};
1218 		noffset = ieee80211_ie_split(ie, ie_len,
1219 					     before_extrates,
1220 					     ARRAY_SIZE(before_extrates),
1221 					     offset);
1222 		if (end - pos < noffset - offset)
1223 			goto out_err;
1224 		memcpy(pos, ie + offset, noffset - offset);
1225 		pos += noffset - offset;
1226 		offset = noffset;
1227 	}
1228 
1229 	ext_rates_len = num_rates - supp_rates_len;
1230 	if (ext_rates_len > 0) {
1231 		if (end - pos < 2 + ext_rates_len)
1232 			goto out_err;
1233 		*pos++ = WLAN_EID_EXT_SUPP_RATES;
1234 		*pos++ = ext_rates_len;
1235 		memcpy(pos, rates + supp_rates_len, ext_rates_len);
1236 		pos += ext_rates_len;
1237 	}
1238 
1239 	if (chandef->chan && sband->band == IEEE80211_BAND_2GHZ) {
1240 		if (end - pos < 3)
1241 			goto out_err;
1242 		*pos++ = WLAN_EID_DS_PARAMS;
1243 		*pos++ = 1;
1244 		*pos++ = ieee80211_frequency_to_channel(
1245 				chandef->chan->center_freq);
1246 	}
1247 
1248 	/* insert custom IEs that go before HT */
1249 	if (ie && ie_len) {
1250 		static const u8 before_ht[] = {
1251 			WLAN_EID_SSID,
1252 			WLAN_EID_SUPP_RATES,
1253 			WLAN_EID_REQUEST,
1254 			WLAN_EID_EXT_SUPP_RATES,
1255 			WLAN_EID_DS_PARAMS,
1256 			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1257 		};
1258 		noffset = ieee80211_ie_split(ie, ie_len,
1259 					     before_ht, ARRAY_SIZE(before_ht),
1260 					     offset);
1261 		if (end - pos < noffset - offset)
1262 			goto out_err;
1263 		memcpy(pos, ie + offset, noffset - offset);
1264 		pos += noffset - offset;
1265 		offset = noffset;
1266 	}
1267 
1268 	if (sband->ht_cap.ht_supported) {
1269 		if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
1270 			goto out_err;
1271 		pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
1272 						sband->ht_cap.cap);
1273 	}
1274 
1275 	/*
1276 	 * If adding more here, adjust code in main.c
1277 	 * that calculates local->scan_ies_len.
1278 	 */
1279 
1280 	/* add any remaining custom IEs */
1281 	if (ie && ie_len) {
1282 		noffset = ie_len;
1283 		if (end - pos < noffset - offset)
1284 			goto out_err;
1285 		memcpy(pos, ie + offset, noffset - offset);
1286 		pos += noffset - offset;
1287 	}
1288 
1289 	if (sband->vht_cap.vht_supported) {
1290 		if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
1291 			goto out_err;
1292 		pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
1293 						 sband->vht_cap.cap);
1294 	}
1295 
1296 	return pos - buffer;
1297  out_err:
1298 	WARN_ONCE(1, "not enough space for preq IEs\n");
1299 	return pos - buffer;
1300 }
1301 
1302 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1303 					  u8 *dst, u32 ratemask,
1304 					  struct ieee80211_channel *chan,
1305 					  const u8 *ssid, size_t ssid_len,
1306 					  const u8 *ie, size_t ie_len,
1307 					  bool directed)
1308 {
1309 	struct ieee80211_local *local = sdata->local;
1310 	struct cfg80211_chan_def chandef;
1311 	struct sk_buff *skb;
1312 	struct ieee80211_mgmt *mgmt;
1313 	int ies_len;
1314 
1315 	/*
1316 	 * Do not send DS Channel parameter for directed probe requests
1317 	 * in order to maximize the chance that we get a response.  Some
1318 	 * badly-behaved APs don't respond when this parameter is included.
1319 	 */
1320 	chandef.width = sdata->vif.bss_conf.chandef.width;
1321 	if (directed)
1322 		chandef.chan = NULL;
1323 	else
1324 		chandef.chan = chan;
1325 
1326 	skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
1327 				     ssid, ssid_len, 100 + ie_len);
1328 	if (!skb)
1329 		return NULL;
1330 
1331 	ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
1332 					   skb_tailroom(skb),
1333 					   ie, ie_len, chan->band,
1334 					   ratemask, &chandef);
1335 	skb_put(skb, ies_len);
1336 
1337 	if (dst) {
1338 		mgmt = (struct ieee80211_mgmt *) skb->data;
1339 		memcpy(mgmt->da, dst, ETH_ALEN);
1340 		memcpy(mgmt->bssid, dst, ETH_ALEN);
1341 	}
1342 
1343 	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1344 
1345 	return skb;
1346 }
1347 
1348 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
1349 			      const u8 *ssid, size_t ssid_len,
1350 			      const u8 *ie, size_t ie_len,
1351 			      u32 ratemask, bool directed, u32 tx_flags,
1352 			      struct ieee80211_channel *channel, bool scan)
1353 {
1354 	struct sk_buff *skb;
1355 
1356 	skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel,
1357 					ssid, ssid_len,
1358 					ie, ie_len, directed);
1359 	if (skb) {
1360 		IEEE80211_SKB_CB(skb)->flags |= tx_flags;
1361 		if (scan)
1362 			ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
1363 		else
1364 			ieee80211_tx_skb(sdata, skb);
1365 	}
1366 }
1367 
1368 u32 ieee80211_sta_get_rates(struct ieee80211_sub_if_data *sdata,
1369 			    struct ieee802_11_elems *elems,
1370 			    enum ieee80211_band band, u32 *basic_rates)
1371 {
1372 	struct ieee80211_supported_band *sband;
1373 	struct ieee80211_rate *bitrates;
1374 	size_t num_rates;
1375 	u32 supp_rates, rate_flags;
1376 	int i, j, shift;
1377 	sband = sdata->local->hw.wiphy->bands[band];
1378 
1379 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
1380 	shift = ieee80211_vif_get_shift(&sdata->vif);
1381 
1382 	if (WARN_ON(!sband))
1383 		return 1;
1384 
1385 	bitrates = sband->bitrates;
1386 	num_rates = sband->n_bitrates;
1387 	supp_rates = 0;
1388 	for (i = 0; i < elems->supp_rates_len +
1389 		     elems->ext_supp_rates_len; i++) {
1390 		u8 rate = 0;
1391 		int own_rate;
1392 		bool is_basic;
1393 		if (i < elems->supp_rates_len)
1394 			rate = elems->supp_rates[i];
1395 		else if (elems->ext_supp_rates)
1396 			rate = elems->ext_supp_rates
1397 				[i - elems->supp_rates_len];
1398 		own_rate = 5 * (rate & 0x7f);
1399 		is_basic = !!(rate & 0x80);
1400 
1401 		if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
1402 			continue;
1403 
1404 		for (j = 0; j < num_rates; j++) {
1405 			int brate;
1406 			if ((rate_flags & sband->bitrates[j].flags)
1407 			    != rate_flags)
1408 				continue;
1409 
1410 			brate = DIV_ROUND_UP(sband->bitrates[j].bitrate,
1411 					     1 << shift);
1412 
1413 			if (brate == own_rate) {
1414 				supp_rates |= BIT(j);
1415 				if (basic_rates && is_basic)
1416 					*basic_rates |= BIT(j);
1417 			}
1418 		}
1419 	}
1420 	return supp_rates;
1421 }
1422 
1423 void ieee80211_stop_device(struct ieee80211_local *local)
1424 {
1425 	ieee80211_led_radio(local, false);
1426 	ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1427 
1428 	cancel_work_sync(&local->reconfig_filter);
1429 
1430 	flush_workqueue(local->workqueue);
1431 	drv_stop(local);
1432 }
1433 
1434 static void ieee80211_assign_chanctx(struct ieee80211_local *local,
1435 				     struct ieee80211_sub_if_data *sdata)
1436 {
1437 	struct ieee80211_chanctx_conf *conf;
1438 	struct ieee80211_chanctx *ctx;
1439 
1440 	if (!local->use_chanctx)
1441 		return;
1442 
1443 	mutex_lock(&local->chanctx_mtx);
1444 	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1445 					 lockdep_is_held(&local->chanctx_mtx));
1446 	if (conf) {
1447 		ctx = container_of(conf, struct ieee80211_chanctx, conf);
1448 		drv_assign_vif_chanctx(local, sdata, ctx);
1449 	}
1450 	mutex_unlock(&local->chanctx_mtx);
1451 }
1452 
1453 int ieee80211_reconfig(struct ieee80211_local *local)
1454 {
1455 	struct ieee80211_hw *hw = &local->hw;
1456 	struct ieee80211_sub_if_data *sdata;
1457 	struct ieee80211_chanctx *ctx;
1458 	struct sta_info *sta;
1459 	int res, i;
1460 	bool reconfig_due_to_wowlan = false;
1461 	struct ieee80211_sub_if_data *sched_scan_sdata;
1462 	bool sched_scan_stopped = false;
1463 
1464 #ifdef CONFIG_PM
1465 	if (local->suspended)
1466 		local->resuming = true;
1467 
1468 	if (local->wowlan) {
1469 		res = drv_resume(local);
1470 		local->wowlan = false;
1471 		if (res < 0) {
1472 			local->resuming = false;
1473 			return res;
1474 		}
1475 		if (res == 0)
1476 			goto wake_up;
1477 		WARN_ON(res > 1);
1478 		/*
1479 		 * res is 1, which means the driver requested
1480 		 * to go through a regular reset on wakeup.
1481 		 */
1482 		reconfig_due_to_wowlan = true;
1483 	}
1484 #endif
1485 	/* everything else happens only if HW was up & running */
1486 	if (!local->open_count)
1487 		goto wake_up;
1488 
1489 	/*
1490 	 * Upon resume hardware can sometimes be goofy due to
1491 	 * various platform / driver / bus issues, so restarting
1492 	 * the device may at times not work immediately. Propagate
1493 	 * the error.
1494 	 */
1495 	res = drv_start(local);
1496 	if (res) {
1497 		WARN(local->suspended, "Hardware became unavailable "
1498 		     "upon resume. This could be a software issue "
1499 		     "prior to suspend or a hardware issue.\n");
1500 		return res;
1501 	}
1502 
1503 	/* setup fragmentation threshold */
1504 	drv_set_frag_threshold(local, hw->wiphy->frag_threshold);
1505 
1506 	/* setup RTS threshold */
1507 	drv_set_rts_threshold(local, hw->wiphy->rts_threshold);
1508 
1509 	/* reset coverage class */
1510 	drv_set_coverage_class(local, hw->wiphy->coverage_class);
1511 
1512 	ieee80211_led_radio(local, true);
1513 	ieee80211_mod_tpt_led_trig(local,
1514 				   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1515 
1516 	/* add interfaces */
1517 	sdata = rtnl_dereference(local->monitor_sdata);
1518 	if (sdata) {
1519 		/* in HW restart it exists already */
1520 		WARN_ON(local->resuming);
1521 		res = drv_add_interface(local, sdata);
1522 		if (WARN_ON(res)) {
1523 			rcu_assign_pointer(local->monitor_sdata, NULL);
1524 			synchronize_net();
1525 			kfree(sdata);
1526 		}
1527 	}
1528 
1529 	list_for_each_entry(sdata, &local->interfaces, list) {
1530 		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1531 		    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1532 		    ieee80211_sdata_running(sdata))
1533 			res = drv_add_interface(local, sdata);
1534 	}
1535 
1536 	/* add channel contexts */
1537 	if (local->use_chanctx) {
1538 		mutex_lock(&local->chanctx_mtx);
1539 		list_for_each_entry(ctx, &local->chanctx_list, list)
1540 			WARN_ON(drv_add_chanctx(local, ctx));
1541 		mutex_unlock(&local->chanctx_mtx);
1542 	}
1543 
1544 	list_for_each_entry(sdata, &local->interfaces, list) {
1545 		if (!ieee80211_sdata_running(sdata))
1546 			continue;
1547 		ieee80211_assign_chanctx(local, sdata);
1548 	}
1549 
1550 	sdata = rtnl_dereference(local->monitor_sdata);
1551 	if (sdata && ieee80211_sdata_running(sdata))
1552 		ieee80211_assign_chanctx(local, sdata);
1553 
1554 	/* add STAs back */
1555 	mutex_lock(&local->sta_mtx);
1556 	list_for_each_entry(sta, &local->sta_list, list) {
1557 		enum ieee80211_sta_state state;
1558 
1559 		if (!sta->uploaded)
1560 			continue;
1561 
1562 		/* AP-mode stations will be added later */
1563 		if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
1564 			continue;
1565 
1566 		for (state = IEEE80211_STA_NOTEXIST;
1567 		     state < sta->sta_state; state++)
1568 			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1569 					      state + 1));
1570 	}
1571 	mutex_unlock(&local->sta_mtx);
1572 
1573 	/* reconfigure tx conf */
1574 	if (hw->queues >= IEEE80211_NUM_ACS) {
1575 		list_for_each_entry(sdata, &local->interfaces, list) {
1576 			if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1577 			    sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1578 			    !ieee80211_sdata_running(sdata))
1579 				continue;
1580 
1581 			for (i = 0; i < IEEE80211_NUM_ACS; i++)
1582 				drv_conf_tx(local, sdata, i,
1583 					    &sdata->tx_conf[i]);
1584 		}
1585 	}
1586 
1587 	/* reconfigure hardware */
1588 	ieee80211_hw_config(local, ~0);
1589 
1590 	ieee80211_configure_filter(local);
1591 
1592 	/* Finally also reconfigure all the BSS information */
1593 	list_for_each_entry(sdata, &local->interfaces, list) {
1594 		u32 changed;
1595 
1596 		if (!ieee80211_sdata_running(sdata))
1597 			continue;
1598 
1599 		/* common change flags for all interface types */
1600 		changed = BSS_CHANGED_ERP_CTS_PROT |
1601 			  BSS_CHANGED_ERP_PREAMBLE |
1602 			  BSS_CHANGED_ERP_SLOT |
1603 			  BSS_CHANGED_HT |
1604 			  BSS_CHANGED_BASIC_RATES |
1605 			  BSS_CHANGED_BEACON_INT |
1606 			  BSS_CHANGED_BSSID |
1607 			  BSS_CHANGED_CQM |
1608 			  BSS_CHANGED_QOS |
1609 			  BSS_CHANGED_IDLE |
1610 			  BSS_CHANGED_TXPOWER;
1611 
1612 		switch (sdata->vif.type) {
1613 		case NL80211_IFTYPE_STATION:
1614 			changed |= BSS_CHANGED_ASSOC |
1615 				   BSS_CHANGED_ARP_FILTER |
1616 				   BSS_CHANGED_PS;
1617 
1618 			/* Re-send beacon info report to the driver */
1619 			if (sdata->u.mgd.have_beacon)
1620 				changed |= BSS_CHANGED_BEACON_INFO;
1621 
1622 			sdata_lock(sdata);
1623 			ieee80211_bss_info_change_notify(sdata, changed);
1624 			sdata_unlock(sdata);
1625 			break;
1626 		case NL80211_IFTYPE_ADHOC:
1627 			changed |= BSS_CHANGED_IBSS;
1628 			/* fall through */
1629 		case NL80211_IFTYPE_AP:
1630 			changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
1631 
1632 			if (sdata->vif.type == NL80211_IFTYPE_AP) {
1633 				changed |= BSS_CHANGED_AP_PROBE_RESP;
1634 
1635 				if (rcu_access_pointer(sdata->u.ap.beacon))
1636 					drv_start_ap(local, sdata);
1637 			}
1638 
1639 			/* fall through */
1640 		case NL80211_IFTYPE_MESH_POINT:
1641 			if (sdata->vif.bss_conf.enable_beacon) {
1642 				changed |= BSS_CHANGED_BEACON |
1643 					   BSS_CHANGED_BEACON_ENABLED;
1644 				ieee80211_bss_info_change_notify(sdata, changed);
1645 			}
1646 			break;
1647 		case NL80211_IFTYPE_WDS:
1648 			break;
1649 		case NL80211_IFTYPE_AP_VLAN:
1650 		case NL80211_IFTYPE_MONITOR:
1651 			/* ignore virtual */
1652 			break;
1653 		case NL80211_IFTYPE_P2P_DEVICE:
1654 			changed = BSS_CHANGED_IDLE;
1655 			break;
1656 		case NL80211_IFTYPE_UNSPECIFIED:
1657 		case NUM_NL80211_IFTYPES:
1658 		case NL80211_IFTYPE_P2P_CLIENT:
1659 		case NL80211_IFTYPE_P2P_GO:
1660 			WARN_ON(1);
1661 			break;
1662 		}
1663 	}
1664 
1665 	ieee80211_recalc_ps(local, -1);
1666 
1667 	/*
1668 	 * The sta might be in psm against the ap (e.g. because
1669 	 * this was the state before a hw restart), so we
1670 	 * explicitly send a null packet in order to make sure
1671 	 * it'll sync against the ap (and get out of psm).
1672 	 */
1673 	if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
1674 		list_for_each_entry(sdata, &local->interfaces, list) {
1675 			if (sdata->vif.type != NL80211_IFTYPE_STATION)
1676 				continue;
1677 			if (!sdata->u.mgd.associated)
1678 				continue;
1679 
1680 			ieee80211_send_nullfunc(local, sdata, 0);
1681 		}
1682 	}
1683 
1684 	/* APs are now beaconing, add back stations */
1685 	mutex_lock(&local->sta_mtx);
1686 	list_for_each_entry(sta, &local->sta_list, list) {
1687 		enum ieee80211_sta_state state;
1688 
1689 		if (!sta->uploaded)
1690 			continue;
1691 
1692 		if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
1693 			continue;
1694 
1695 		for (state = IEEE80211_STA_NOTEXIST;
1696 		     state < sta->sta_state; state++)
1697 			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1698 					      state + 1));
1699 	}
1700 	mutex_unlock(&local->sta_mtx);
1701 
1702 	/* add back keys */
1703 	list_for_each_entry(sdata, &local->interfaces, list)
1704 		if (ieee80211_sdata_running(sdata))
1705 			ieee80211_enable_keys(sdata);
1706 
1707  wake_up:
1708 	local->in_reconfig = false;
1709 	barrier();
1710 
1711 	if (local->monitors == local->open_count && local->monitors > 0)
1712 		ieee80211_add_virtual_monitor(local);
1713 
1714 	/*
1715 	 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
1716 	 * sessions can be established after a resume.
1717 	 *
1718 	 * Also tear down aggregation sessions since reconfiguring
1719 	 * them in a hardware restart scenario is not easily done
1720 	 * right now, and the hardware will have lost information
1721 	 * about the sessions, but we and the AP still think they
1722 	 * are active. This is really a workaround though.
1723 	 */
1724 	if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1725 		mutex_lock(&local->sta_mtx);
1726 
1727 		list_for_each_entry(sta, &local->sta_list, list) {
1728 			ieee80211_sta_tear_down_BA_sessions(
1729 					sta, AGG_STOP_LOCAL_REQUEST);
1730 			clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1731 		}
1732 
1733 		mutex_unlock(&local->sta_mtx);
1734 	}
1735 
1736 	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
1737 					IEEE80211_QUEUE_STOP_REASON_SUSPEND);
1738 
1739 	/*
1740 	 * Reconfigure sched scan if it was interrupted by FW restart or
1741 	 * suspend.
1742 	 */
1743 	mutex_lock(&local->mtx);
1744 	sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata,
1745 						lockdep_is_held(&local->mtx));
1746 	if (sched_scan_sdata && local->sched_scan_req)
1747 		/*
1748 		 * Sched scan stopped, but we don't want to report it. Instead,
1749 		 * we're trying to reschedule.
1750 		 */
1751 		if (__ieee80211_request_sched_scan_start(sched_scan_sdata,
1752 							 local->sched_scan_req))
1753 			sched_scan_stopped = true;
1754 	mutex_unlock(&local->mtx);
1755 
1756 	if (sched_scan_stopped)
1757 		cfg80211_sched_scan_stopped(local->hw.wiphy);
1758 
1759 	/*
1760 	 * If this is for hw restart things are still running.
1761 	 * We may want to change that later, however.
1762 	 */
1763 	if (!local->suspended || reconfig_due_to_wowlan)
1764 		drv_restart_complete(local);
1765 
1766 	if (!local->suspended)
1767 		return 0;
1768 
1769 #ifdef CONFIG_PM
1770 	/* first set suspended false, then resuming */
1771 	local->suspended = false;
1772 	mb();
1773 	local->resuming = false;
1774 
1775 	list_for_each_entry(sdata, &local->interfaces, list) {
1776 		if (!ieee80211_sdata_running(sdata))
1777 			continue;
1778 		if (sdata->vif.type == NL80211_IFTYPE_STATION)
1779 			ieee80211_sta_restart(sdata);
1780 	}
1781 
1782 	mod_timer(&local->sta_cleanup, jiffies + 1);
1783 #else
1784 	WARN_ON(1);
1785 #endif
1786 
1787 	return 0;
1788 }
1789 
1790 void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
1791 {
1792 	struct ieee80211_sub_if_data *sdata;
1793 	struct ieee80211_local *local;
1794 	struct ieee80211_key *key;
1795 
1796 	if (WARN_ON(!vif))
1797 		return;
1798 
1799 	sdata = vif_to_sdata(vif);
1800 	local = sdata->local;
1801 
1802 	if (WARN_ON(!local->resuming))
1803 		return;
1804 
1805 	if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
1806 		return;
1807 
1808 	sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;
1809 
1810 	mutex_lock(&local->key_mtx);
1811 	list_for_each_entry(key, &sdata->key_list, list)
1812 		key->flags |= KEY_FLAG_TAINTED;
1813 	mutex_unlock(&local->key_mtx);
1814 }
1815 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);
1816 
1817 void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
1818 {
1819 	struct ieee80211_local *local = sdata->local;
1820 	struct ieee80211_chanctx_conf *chanctx_conf;
1821 	struct ieee80211_chanctx *chanctx;
1822 
1823 	mutex_lock(&local->chanctx_mtx);
1824 
1825 	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1826 					lockdep_is_held(&local->chanctx_mtx));
1827 
1828 	if (WARN_ON_ONCE(!chanctx_conf))
1829 		goto unlock;
1830 
1831 	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
1832 	ieee80211_recalc_smps_chanctx(local, chanctx);
1833  unlock:
1834 	mutex_unlock(&local->chanctx_mtx);
1835 }
1836 
1837 void ieee80211_recalc_min_chandef(struct ieee80211_sub_if_data *sdata)
1838 {
1839 	struct ieee80211_local *local = sdata->local;
1840 	struct ieee80211_chanctx_conf *chanctx_conf;
1841 	struct ieee80211_chanctx *chanctx;
1842 
1843 	mutex_lock(&local->chanctx_mtx);
1844 
1845 	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1846 					lockdep_is_held(&local->chanctx_mtx));
1847 
1848 	if (WARN_ON_ONCE(!chanctx_conf))
1849 		goto unlock;
1850 
1851 	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
1852 	ieee80211_recalc_chanctx_min_def(local, chanctx);
1853  unlock:
1854 	mutex_unlock(&local->chanctx_mtx);
1855 }
1856 
1857 static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
1858 {
1859 	int i;
1860 
1861 	for (i = 0; i < n_ids; i++)
1862 		if (ids[i] == id)
1863 			return true;
1864 	return false;
1865 }
1866 
1867 /**
1868  * ieee80211_ie_split - split an IE buffer according to ordering
1869  *
1870  * @ies: the IE buffer
1871  * @ielen: the length of the IE buffer
1872  * @ids: an array with element IDs that are allowed before
1873  *	the split
1874  * @n_ids: the size of the element ID array
1875  * @offset: offset where to start splitting in the buffer
1876  *
1877  * This function splits an IE buffer by updating the @offset
1878  * variable to point to the location where the buffer should be
1879  * split.
1880  *
1881  * It assumes that the given IE buffer is well-formed, this
1882  * has to be guaranteed by the caller!
1883  *
1884  * It also assumes that the IEs in the buffer are ordered
1885  * correctly, if not the result of using this function will not
1886  * be ordered correctly either, i.e. it does no reordering.
1887  *
1888  * The function returns the offset where the next part of the
1889  * buffer starts, which may be @ielen if the entire (remainder)
1890  * of the buffer should be used.
1891  */
1892 size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
1893 			  const u8 *ids, int n_ids, size_t offset)
1894 {
1895 	size_t pos = offset;
1896 
1897 	while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
1898 		pos += 2 + ies[pos + 1];
1899 
1900 	return pos;
1901 }
1902 
1903 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
1904 {
1905 	size_t pos = offset;
1906 
1907 	while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
1908 		pos += 2 + ies[pos + 1];
1909 
1910 	return pos;
1911 }
1912 
1913 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
1914 					    int rssi_min_thold,
1915 					    int rssi_max_thold)
1916 {
1917 	trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);
1918 
1919 	if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
1920 		return;
1921 
1922 	/*
1923 	 * Scale up threshold values before storing it, as the RSSI averaging
1924 	 * algorithm uses a scaled up value as well. Change this scaling
1925 	 * factor if the RSSI averaging algorithm changes.
1926 	 */
1927 	sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
1928 	sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
1929 }
1930 
1931 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
1932 				    int rssi_min_thold,
1933 				    int rssi_max_thold)
1934 {
1935 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1936 
1937 	WARN_ON(rssi_min_thold == rssi_max_thold ||
1938 		rssi_min_thold > rssi_max_thold);
1939 
1940 	_ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
1941 				       rssi_max_thold);
1942 }
1943 EXPORT_SYMBOL(ieee80211_enable_rssi_reports);
1944 
1945 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
1946 {
1947 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1948 
1949 	_ieee80211_enable_rssi_reports(sdata, 0, 0);
1950 }
1951 EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1952 
1953 u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1954 			      u16 cap)
1955 {
1956 	__le16 tmp;
1957 
1958 	*pos++ = WLAN_EID_HT_CAPABILITY;
1959 	*pos++ = sizeof(struct ieee80211_ht_cap);
1960 	memset(pos, 0, sizeof(struct ieee80211_ht_cap));
1961 
1962 	/* capability flags */
1963 	tmp = cpu_to_le16(cap);
1964 	memcpy(pos, &tmp, sizeof(u16));
1965 	pos += sizeof(u16);
1966 
1967 	/* AMPDU parameters */
1968 	*pos++ = ht_cap->ampdu_factor |
1969 		 (ht_cap->ampdu_density <<
1970 			IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);
1971 
1972 	/* MCS set */
1973 	memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
1974 	pos += sizeof(ht_cap->mcs);
1975 
1976 	/* extended capabilities */
1977 	pos += sizeof(__le16);
1978 
1979 	/* BF capabilities */
1980 	pos += sizeof(__le32);
1981 
1982 	/* antenna selection */
1983 	pos += sizeof(u8);
1984 
1985 	return pos;
1986 }
1987 
1988 u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
1989 			       u32 cap)
1990 {
1991 	__le32 tmp;
1992 
1993 	*pos++ = WLAN_EID_VHT_CAPABILITY;
1994 	*pos++ = sizeof(struct ieee80211_vht_cap);
1995 	memset(pos, 0, sizeof(struct ieee80211_vht_cap));
1996 
1997 	/* capability flags */
1998 	tmp = cpu_to_le32(cap);
1999 	memcpy(pos, &tmp, sizeof(u32));
2000 	pos += sizeof(u32);
2001 
2002 	/* VHT MCS set */
2003 	memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
2004 	pos += sizeof(vht_cap->vht_mcs);
2005 
2006 	return pos;
2007 }
2008 
2009 u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
2010 			       const struct cfg80211_chan_def *chandef,
2011 			       u16 prot_mode)
2012 {
2013 	struct ieee80211_ht_operation *ht_oper;
2014 	/* Build HT Information */
2015 	*pos++ = WLAN_EID_HT_OPERATION;
2016 	*pos++ = sizeof(struct ieee80211_ht_operation);
2017 	ht_oper = (struct ieee80211_ht_operation *)pos;
2018 	ht_oper->primary_chan = ieee80211_frequency_to_channel(
2019 					chandef->chan->center_freq);
2020 	switch (chandef->width) {
2021 	case NL80211_CHAN_WIDTH_160:
2022 	case NL80211_CHAN_WIDTH_80P80:
2023 	case NL80211_CHAN_WIDTH_80:
2024 	case NL80211_CHAN_WIDTH_40:
2025 		if (chandef->center_freq1 > chandef->chan->center_freq)
2026 			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2027 		else
2028 			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2029 		break;
2030 	default:
2031 		ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
2032 		break;
2033 	}
2034 	if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
2035 	    chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
2036 	    chandef->width != NL80211_CHAN_WIDTH_20)
2037 		ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
2038 
2039 	ht_oper->operation_mode = cpu_to_le16(prot_mode);
2040 	ht_oper->stbc_param = 0x0000;
2041 
2042 	/* It seems that Basic MCS set and Supported MCS set
2043 	   are identical for the first 10 bytes */
2044 	memset(&ht_oper->basic_set, 0, 16);
2045 	memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
2046 
2047 	return pos + sizeof(struct ieee80211_ht_operation);
2048 }
2049 
2050 void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
2051 				  const struct ieee80211_ht_operation *ht_oper,
2052 				  struct cfg80211_chan_def *chandef)
2053 {
2054 	enum nl80211_channel_type channel_type;
2055 
2056 	if (!ht_oper) {
2057 		cfg80211_chandef_create(chandef, control_chan,
2058 					NL80211_CHAN_NO_HT);
2059 		return;
2060 	}
2061 
2062 	switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
2063 	case IEEE80211_HT_PARAM_CHA_SEC_NONE:
2064 		channel_type = NL80211_CHAN_HT20;
2065 		break;
2066 	case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
2067 		channel_type = NL80211_CHAN_HT40PLUS;
2068 		break;
2069 	case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
2070 		channel_type = NL80211_CHAN_HT40MINUS;
2071 		break;
2072 	default:
2073 		channel_type = NL80211_CHAN_NO_HT;
2074 	}
2075 
2076 	cfg80211_chandef_create(chandef, control_chan, channel_type);
2077 }
2078 
2079 int ieee80211_parse_bitrates(struct cfg80211_chan_def *chandef,
2080 			     const struct ieee80211_supported_band *sband,
2081 			     const u8 *srates, int srates_len, u32 *rates)
2082 {
2083 	u32 rate_flags = ieee80211_chandef_rate_flags(chandef);
2084 	int shift = ieee80211_chandef_get_shift(chandef);
2085 	struct ieee80211_rate *br;
2086 	int brate, rate, i, j, count = 0;
2087 
2088 	*rates = 0;
2089 
2090 	for (i = 0; i < srates_len; i++) {
2091 		rate = srates[i] & 0x7f;
2092 
2093 		for (j = 0; j < sband->n_bitrates; j++) {
2094 			br = &sband->bitrates[j];
2095 			if ((rate_flags & br->flags) != rate_flags)
2096 				continue;
2097 
2098 			brate = DIV_ROUND_UP(br->bitrate, (1 << shift) * 5);
2099 			if (brate == rate) {
2100 				*rates |= BIT(j);
2101 				count++;
2102 				break;
2103 			}
2104 		}
2105 	}
2106 	return count;
2107 }
2108 
2109 int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
2110 			    struct sk_buff *skb, bool need_basic,
2111 			    enum ieee80211_band band)
2112 {
2113 	struct ieee80211_local *local = sdata->local;
2114 	struct ieee80211_supported_band *sband;
2115 	int rate, shift;
2116 	u8 i, rates, *pos;
2117 	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2118 	u32 rate_flags;
2119 
2120 	shift = ieee80211_vif_get_shift(&sdata->vif);
2121 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
2122 	sband = local->hw.wiphy->bands[band];
2123 	rates = 0;
2124 	for (i = 0; i < sband->n_bitrates; i++) {
2125 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2126 			continue;
2127 		rates++;
2128 	}
2129 	if (rates > 8)
2130 		rates = 8;
2131 
2132 	if (skb_tailroom(skb) < rates + 2)
2133 		return -ENOMEM;
2134 
2135 	pos = skb_put(skb, rates + 2);
2136 	*pos++ = WLAN_EID_SUPP_RATES;
2137 	*pos++ = rates;
2138 	for (i = 0; i < rates; i++) {
2139 		u8 basic = 0;
2140 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2141 			continue;
2142 
2143 		if (need_basic && basic_rates & BIT(i))
2144 			basic = 0x80;
2145 		rate = sband->bitrates[i].bitrate;
2146 		rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2147 				    5 * (1 << shift));
2148 		*pos++ = basic | (u8) rate;
2149 	}
2150 
2151 	return 0;
2152 }
2153 
2154 int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
2155 				struct sk_buff *skb, bool need_basic,
2156 				enum ieee80211_band band)
2157 {
2158 	struct ieee80211_local *local = sdata->local;
2159 	struct ieee80211_supported_band *sband;
2160 	int rate, shift;
2161 	u8 i, exrates, *pos;
2162 	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2163 	u32 rate_flags;
2164 
2165 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
2166 	shift = ieee80211_vif_get_shift(&sdata->vif);
2167 
2168 	sband = local->hw.wiphy->bands[band];
2169 	exrates = 0;
2170 	for (i = 0; i < sband->n_bitrates; i++) {
2171 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2172 			continue;
2173 		exrates++;
2174 	}
2175 
2176 	if (exrates > 8)
2177 		exrates -= 8;
2178 	else
2179 		exrates = 0;
2180 
2181 	if (skb_tailroom(skb) < exrates + 2)
2182 		return -ENOMEM;
2183 
2184 	if (exrates) {
2185 		pos = skb_put(skb, exrates + 2);
2186 		*pos++ = WLAN_EID_EXT_SUPP_RATES;
2187 		*pos++ = exrates;
2188 		for (i = 8; i < sband->n_bitrates; i++) {
2189 			u8 basic = 0;
2190 			if ((rate_flags & sband->bitrates[i].flags)
2191 			    != rate_flags)
2192 				continue;
2193 			if (need_basic && basic_rates & BIT(i))
2194 				basic = 0x80;
2195 			rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2196 					    5 * (1 << shift));
2197 			*pos++ = basic | (u8) rate;
2198 		}
2199 	}
2200 	return 0;
2201 }
2202 
2203 int ieee80211_ave_rssi(struct ieee80211_vif *vif)
2204 {
2205 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2206 	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
2207 
2208 	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
2209 		/* non-managed type inferfaces */
2210 		return 0;
2211 	}
2212 	return ifmgd->ave_beacon_signal / 16;
2213 }
2214 EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
2215 
2216 u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
2217 {
2218 	if (!mcs)
2219 		return 1;
2220 
2221 	/* TODO: consider rx_highest */
2222 
2223 	if (mcs->rx_mask[3])
2224 		return 4;
2225 	if (mcs->rx_mask[2])
2226 		return 3;
2227 	if (mcs->rx_mask[1])
2228 		return 2;
2229 	return 1;
2230 }
2231 
2232 /**
2233  * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
2234  * @local: mac80211 hw info struct
2235  * @status: RX status
2236  * @mpdu_len: total MPDU length (including FCS)
2237  * @mpdu_offset: offset into MPDU to calculate timestamp at
2238  *
2239  * This function calculates the RX timestamp at the given MPDU offset, taking
2240  * into account what the RX timestamp was. An offset of 0 will just normalize
2241  * the timestamp to TSF at beginning of MPDU reception.
2242  */
2243 u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
2244 				     struct ieee80211_rx_status *status,
2245 				     unsigned int mpdu_len,
2246 				     unsigned int mpdu_offset)
2247 {
2248 	u64 ts = status->mactime;
2249 	struct rate_info ri;
2250 	u16 rate;
2251 
2252 	if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
2253 		return 0;
2254 
2255 	memset(&ri, 0, sizeof(ri));
2256 
2257 	/* Fill cfg80211 rate info */
2258 	if (status->flag & RX_FLAG_HT) {
2259 		ri.mcs = status->rate_idx;
2260 		ri.flags |= RATE_INFO_FLAGS_MCS;
2261 		if (status->flag & RX_FLAG_40MHZ)
2262 			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
2263 		if (status->flag & RX_FLAG_SHORT_GI)
2264 			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2265 	} else if (status->flag & RX_FLAG_VHT) {
2266 		ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
2267 		ri.mcs = status->rate_idx;
2268 		ri.nss = status->vht_nss;
2269 		if (status->flag & RX_FLAG_40MHZ)
2270 			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
2271 		if (status->flag & RX_FLAG_80MHZ)
2272 			ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
2273 		if (status->flag & RX_FLAG_80P80MHZ)
2274 			ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
2275 		if (status->flag & RX_FLAG_160MHZ)
2276 			ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
2277 		if (status->flag & RX_FLAG_SHORT_GI)
2278 			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2279 	} else {
2280 		struct ieee80211_supported_band *sband;
2281 		int shift = 0;
2282 		int bitrate;
2283 
2284 		if (status->flag & RX_FLAG_10MHZ)
2285 			shift = 1;
2286 		if (status->flag & RX_FLAG_5MHZ)
2287 			shift = 2;
2288 
2289 		sband = local->hw.wiphy->bands[status->band];
2290 		bitrate = sband->bitrates[status->rate_idx].bitrate;
2291 		ri.legacy = DIV_ROUND_UP(bitrate, (1 << shift));
2292 	}
2293 
2294 	rate = cfg80211_calculate_bitrate(&ri);
2295 	if (WARN_ONCE(!rate,
2296 		      "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n",
2297 		      status->flag, status->rate_idx, status->vht_nss))
2298 		return 0;
2299 
2300 	/* rewind from end of MPDU */
2301 	if (status->flag & RX_FLAG_MACTIME_END)
2302 		ts -= mpdu_len * 8 * 10 / rate;
2303 
2304 	ts += mpdu_offset * 8 * 10 / rate;
2305 
2306 	return ts;
2307 }
2308 
2309 void ieee80211_dfs_cac_cancel(struct ieee80211_local *local)
2310 {
2311 	struct ieee80211_sub_if_data *sdata;
2312 	struct cfg80211_chan_def chandef;
2313 
2314 	mutex_lock(&local->mtx);
2315 	mutex_lock(&local->iflist_mtx);
2316 	list_for_each_entry(sdata, &local->interfaces, list) {
2317 		/* it might be waiting for the local->mtx, but then
2318 		 * by the time it gets it, sdata->wdev.cac_started
2319 		 * will no longer be true
2320 		 */
2321 		cancel_delayed_work(&sdata->dfs_cac_timer_work);
2322 
2323 		if (sdata->wdev.cac_started) {
2324 			chandef = sdata->vif.bss_conf.chandef;
2325 			ieee80211_vif_release_channel(sdata);
2326 			cfg80211_cac_event(sdata->dev,
2327 					   &chandef,
2328 					   NL80211_RADAR_CAC_ABORTED,
2329 					   GFP_KERNEL);
2330 		}
2331 	}
2332 	mutex_unlock(&local->iflist_mtx);
2333 	mutex_unlock(&local->mtx);
2334 }
2335 
2336 void ieee80211_dfs_radar_detected_work(struct work_struct *work)
2337 {
2338 	struct ieee80211_local *local =
2339 		container_of(work, struct ieee80211_local, radar_detected_work);
2340 	struct cfg80211_chan_def chandef = local->hw.conf.chandef;
2341 
2342 	ieee80211_dfs_cac_cancel(local);
2343 
2344 	if (local->use_chanctx)
2345 		/* currently not handled */
2346 		WARN_ON(1);
2347 	else
2348 		cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL);
2349 }
2350 
2351 void ieee80211_radar_detected(struct ieee80211_hw *hw)
2352 {
2353 	struct ieee80211_local *local = hw_to_local(hw);
2354 
2355 	trace_api_radar_detected(local);
2356 
2357 	ieee80211_queue_work(hw, &local->radar_detected_work);
2358 }
2359 EXPORT_SYMBOL(ieee80211_radar_detected);
2360 
2361 u32 ieee80211_chandef_downgrade(struct cfg80211_chan_def *c)
2362 {
2363 	u32 ret;
2364 	int tmp;
2365 
2366 	switch (c->width) {
2367 	case NL80211_CHAN_WIDTH_20:
2368 		c->width = NL80211_CHAN_WIDTH_20_NOHT;
2369 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2370 		break;
2371 	case NL80211_CHAN_WIDTH_40:
2372 		c->width = NL80211_CHAN_WIDTH_20;
2373 		c->center_freq1 = c->chan->center_freq;
2374 		ret = IEEE80211_STA_DISABLE_40MHZ |
2375 		      IEEE80211_STA_DISABLE_VHT;
2376 		break;
2377 	case NL80211_CHAN_WIDTH_80:
2378 		tmp = (30 + c->chan->center_freq - c->center_freq1)/20;
2379 		/* n_P40 */
2380 		tmp /= 2;
2381 		/* freq_P40 */
2382 		c->center_freq1 = c->center_freq1 - 20 + 40 * tmp;
2383 		c->width = NL80211_CHAN_WIDTH_40;
2384 		ret = IEEE80211_STA_DISABLE_VHT;
2385 		break;
2386 	case NL80211_CHAN_WIDTH_80P80:
2387 		c->center_freq2 = 0;
2388 		c->width = NL80211_CHAN_WIDTH_80;
2389 		ret = IEEE80211_STA_DISABLE_80P80MHZ |
2390 		      IEEE80211_STA_DISABLE_160MHZ;
2391 		break;
2392 	case NL80211_CHAN_WIDTH_160:
2393 		/* n_P20 */
2394 		tmp = (70 + c->chan->center_freq - c->center_freq1)/20;
2395 		/* n_P80 */
2396 		tmp /= 4;
2397 		c->center_freq1 = c->center_freq1 - 40 + 80 * tmp;
2398 		c->width = NL80211_CHAN_WIDTH_80;
2399 		ret = IEEE80211_STA_DISABLE_80P80MHZ |
2400 		      IEEE80211_STA_DISABLE_160MHZ;
2401 		break;
2402 	default:
2403 	case NL80211_CHAN_WIDTH_20_NOHT:
2404 		WARN_ON_ONCE(1);
2405 		c->width = NL80211_CHAN_WIDTH_20_NOHT;
2406 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2407 		break;
2408 	case NL80211_CHAN_WIDTH_5:
2409 	case NL80211_CHAN_WIDTH_10:
2410 		WARN_ON_ONCE(1);
2411 		/* keep c->width */
2412 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2413 		break;
2414 	}
2415 
2416 	WARN_ON_ONCE(!cfg80211_chandef_valid(c));
2417 
2418 	return ret;
2419 }
2420 
2421 /*
2422  * Returns true if smps_mode_new is strictly more restrictive than
2423  * smps_mode_old.
2424  */
2425 bool ieee80211_smps_is_restrictive(enum ieee80211_smps_mode smps_mode_old,
2426 				   enum ieee80211_smps_mode smps_mode_new)
2427 {
2428 	if (WARN_ON_ONCE(smps_mode_old == IEEE80211_SMPS_AUTOMATIC ||
2429 			 smps_mode_new == IEEE80211_SMPS_AUTOMATIC))
2430 		return false;
2431 
2432 	switch (smps_mode_old) {
2433 	case IEEE80211_SMPS_STATIC:
2434 		return false;
2435 	case IEEE80211_SMPS_DYNAMIC:
2436 		return smps_mode_new == IEEE80211_SMPS_STATIC;
2437 	case IEEE80211_SMPS_OFF:
2438 		return smps_mode_new != IEEE80211_SMPS_OFF;
2439 	default:
2440 		WARN_ON(1);
2441 	}
2442 
2443 	return false;
2444 }
2445 
2446 int ieee80211_send_action_csa(struct ieee80211_sub_if_data *sdata,
2447 			      struct cfg80211_csa_settings *csa_settings)
2448 {
2449 	struct sk_buff *skb;
2450 	struct ieee80211_mgmt *mgmt;
2451 	struct ieee80211_local *local = sdata->local;
2452 	int freq;
2453 	int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.chan_switch) +
2454 			       sizeof(mgmt->u.action.u.chan_switch);
2455 	u8 *pos;
2456 
2457 	if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
2458 	    sdata->vif.type != NL80211_IFTYPE_MESH_POINT)
2459 		return -EOPNOTSUPP;
2460 
2461 	skb = dev_alloc_skb(local->tx_headroom + hdr_len +
2462 			    5 + /* channel switch announcement element */
2463 			    3 + /* secondary channel offset element */
2464 			    8); /* mesh channel switch parameters element */
2465 	if (!skb)
2466 		return -ENOMEM;
2467 
2468 	skb_reserve(skb, local->tx_headroom);
2469 	mgmt = (struct ieee80211_mgmt *)skb_put(skb, hdr_len);
2470 	memset(mgmt, 0, hdr_len);
2471 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
2472 					  IEEE80211_STYPE_ACTION);
2473 
2474 	eth_broadcast_addr(mgmt->da);
2475 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
2476 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
2477 		memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
2478 	} else {
2479 		struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
2480 		memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN);
2481 	}
2482 	mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT;
2483 	mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH;
2484 	pos = skb_put(skb, 5);
2485 	*pos++ = WLAN_EID_CHANNEL_SWITCH;			/* EID */
2486 	*pos++ = 3;						/* IE length */
2487 	*pos++ = csa_settings->block_tx ? 1 : 0;		/* CSA mode */
2488 	freq = csa_settings->chandef.chan->center_freq;
2489 	*pos++ = ieee80211_frequency_to_channel(freq);		/* channel */
2490 	*pos++ = csa_settings->count;				/* count */
2491 
2492 	if (csa_settings->chandef.width == NL80211_CHAN_WIDTH_40) {
2493 		enum nl80211_channel_type ch_type;
2494 
2495 		skb_put(skb, 3);
2496 		*pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET;	/* EID */
2497 		*pos++ = 1;					/* IE length */
2498 		ch_type = cfg80211_get_chandef_type(&csa_settings->chandef);
2499 		if (ch_type == NL80211_CHAN_HT40PLUS)
2500 			*pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2501 		else
2502 			*pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2503 	}
2504 
2505 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
2506 		struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
2507 
2508 		skb_put(skb, 8);
2509 		*pos++ = WLAN_EID_CHAN_SWITCH_PARAM;		/* EID */
2510 		*pos++ = 6;					/* IE length */
2511 		*pos++ = sdata->u.mesh.mshcfg.dot11MeshTTL;	/* Mesh TTL */
2512 		*pos = 0x00;	/* Mesh Flag: Tx Restrict, Initiator, Reason */
2513 		*pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
2514 		*pos++ |= csa_settings->block_tx ?
2515 			  WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00;
2516 		put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); /* Reason Cd */
2517 		pos += 2;
2518 		put_unaligned_le16(ifmsh->pre_value, pos);/* Precedence Value */
2519 		pos += 2;
2520 	}
2521 
2522 	ieee80211_tx_skb(sdata, skb);
2523 	return 0;
2524 }
2525 
2526 bool ieee80211_cs_valid(const struct ieee80211_cipher_scheme *cs)
2527 {
2528 	return !(cs == NULL || cs->cipher == 0 ||
2529 		 cs->hdr_len < cs->pn_len + cs->pn_off ||
2530 		 cs->hdr_len <= cs->key_idx_off ||
2531 		 cs->key_idx_shift > 7 ||
2532 		 cs->key_idx_mask == 0);
2533 }
2534 
2535 bool ieee80211_cs_list_valid(const struct ieee80211_cipher_scheme *cs, int n)
2536 {
2537 	int i;
2538 
2539 	/* Ensure we have enough iftype bitmap space for all iftype values */
2540 	WARN_ON((NUM_NL80211_IFTYPES / 8 + 1) > sizeof(cs[0].iftype));
2541 
2542 	for (i = 0; i < n; i++)
2543 		if (!ieee80211_cs_valid(&cs[i]))
2544 			return false;
2545 
2546 	return true;
2547 }
2548 
2549 const struct ieee80211_cipher_scheme *
2550 ieee80211_cs_get(struct ieee80211_local *local, u32 cipher,
2551 		 enum nl80211_iftype iftype)
2552 {
2553 	const struct ieee80211_cipher_scheme *l = local->hw.cipher_schemes;
2554 	int n = local->hw.n_cipher_schemes;
2555 	int i;
2556 	const struct ieee80211_cipher_scheme *cs = NULL;
2557 
2558 	for (i = 0; i < n; i++) {
2559 		if (l[i].cipher == cipher) {
2560 			cs = &l[i];
2561 			break;
2562 		}
2563 	}
2564 
2565 	if (!cs || !(cs->iftype & BIT(iftype)))
2566 		return NULL;
2567 
2568 	return cs;
2569 }
2570 
2571 int ieee80211_cs_headroom(struct ieee80211_local *local,
2572 			  struct cfg80211_crypto_settings *crypto,
2573 			  enum nl80211_iftype iftype)
2574 {
2575 	const struct ieee80211_cipher_scheme *cs;
2576 	int headroom = IEEE80211_ENCRYPT_HEADROOM;
2577 	int i;
2578 
2579 	for (i = 0; i < crypto->n_ciphers_pairwise; i++) {
2580 		cs = ieee80211_cs_get(local, crypto->ciphers_pairwise[i],
2581 				      iftype);
2582 
2583 		if (cs && headroom < cs->hdr_len)
2584 			headroom = cs->hdr_len;
2585 	}
2586 
2587 	cs = ieee80211_cs_get(local, crypto->cipher_group, iftype);
2588 	if (cs && headroom < cs->hdr_len)
2589 		headroom = cs->hdr_len;
2590 
2591 	return headroom;
2592 }
2593 
2594 static bool
2595 ieee80211_extend_noa_desc(struct ieee80211_noa_data *data, u32 tsf, int i)
2596 {
2597 	s32 end = data->desc[i].start + data->desc[i].duration - (tsf + 1);
2598 	int skip;
2599 
2600 	if (end > 0)
2601 		return false;
2602 
2603 	/* End time is in the past, check for repetitions */
2604 	skip = DIV_ROUND_UP(-end, data->desc[i].interval);
2605 	if (data->count[i] < 255) {
2606 		if (data->count[i] <= skip) {
2607 			data->count[i] = 0;
2608 			return false;
2609 		}
2610 
2611 		data->count[i] -= skip;
2612 	}
2613 
2614 	data->desc[i].start += skip * data->desc[i].interval;
2615 
2616 	return true;
2617 }
2618 
2619 static bool
2620 ieee80211_extend_absent_time(struct ieee80211_noa_data *data, u32 tsf,
2621 			     s32 *offset)
2622 {
2623 	bool ret = false;
2624 	int i;
2625 
2626 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
2627 		s32 cur;
2628 
2629 		if (!data->count[i])
2630 			continue;
2631 
2632 		if (ieee80211_extend_noa_desc(data, tsf + *offset, i))
2633 			ret = true;
2634 
2635 		cur = data->desc[i].start - tsf;
2636 		if (cur > *offset)
2637 			continue;
2638 
2639 		cur = data->desc[i].start + data->desc[i].duration - tsf;
2640 		if (cur > *offset)
2641 			*offset = cur;
2642 	}
2643 
2644 	return ret;
2645 }
2646 
2647 static u32
2648 ieee80211_get_noa_absent_time(struct ieee80211_noa_data *data, u32 tsf)
2649 {
2650 	s32 offset = 0;
2651 	int tries = 0;
2652 	/*
2653 	 * arbitrary limit, used to avoid infinite loops when combined NoA
2654 	 * descriptors cover the full time period.
2655 	 */
2656 	int max_tries = 5;
2657 
2658 	ieee80211_extend_absent_time(data, tsf, &offset);
2659 	do {
2660 		if (!ieee80211_extend_absent_time(data, tsf, &offset))
2661 			break;
2662 
2663 		tries++;
2664 	} while (tries < max_tries);
2665 
2666 	return offset;
2667 }
2668 
2669 void ieee80211_update_p2p_noa(struct ieee80211_noa_data *data, u32 tsf)
2670 {
2671 	u32 next_offset = BIT(31) - 1;
2672 	int i;
2673 
2674 	data->absent = 0;
2675 	data->has_next_tsf = false;
2676 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
2677 		s32 start;
2678 
2679 		if (!data->count[i])
2680 			continue;
2681 
2682 		ieee80211_extend_noa_desc(data, tsf, i);
2683 		start = data->desc[i].start - tsf;
2684 		if (start <= 0)
2685 			data->absent |= BIT(i);
2686 
2687 		if (next_offset > start)
2688 			next_offset = start;
2689 
2690 		data->has_next_tsf = true;
2691 	}
2692 
2693 	if (data->absent)
2694 		next_offset = ieee80211_get_noa_absent_time(data, tsf);
2695 
2696 	data->next_tsf = tsf + next_offset;
2697 }
2698 EXPORT_SYMBOL(ieee80211_update_p2p_noa);
2699 
2700 int ieee80211_parse_p2p_noa(const struct ieee80211_p2p_noa_attr *attr,
2701 			    struct ieee80211_noa_data *data, u32 tsf)
2702 {
2703 	int ret = 0;
2704 	int i;
2705 
2706 	memset(data, 0, sizeof(*data));
2707 
2708 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
2709 		const struct ieee80211_p2p_noa_desc *desc = &attr->desc[i];
2710 
2711 		if (!desc->count || !desc->duration)
2712 			continue;
2713 
2714 		data->count[i] = desc->count;
2715 		data->desc[i].start = le32_to_cpu(desc->start_time);
2716 		data->desc[i].duration = le32_to_cpu(desc->duration);
2717 		data->desc[i].interval = le32_to_cpu(desc->interval);
2718 
2719 		if (data->count[i] > 1 &&
2720 		    data->desc[i].interval < data->desc[i].duration)
2721 			continue;
2722 
2723 		ieee80211_extend_noa_desc(data, tsf, i);
2724 		ret++;
2725 	}
2726 
2727 	if (ret)
2728 		ieee80211_update_p2p_noa(data, tsf);
2729 
2730 	return ret;
2731 }
2732 EXPORT_SYMBOL(ieee80211_parse_p2p_noa);
2733 
2734 void ieee80211_recalc_dtim(struct ieee80211_local *local,
2735 			   struct ieee80211_sub_if_data *sdata)
2736 {
2737 	u64 tsf = drv_get_tsf(local, sdata);
2738 	u64 dtim_count = 0;
2739 	u16 beacon_int = sdata->vif.bss_conf.beacon_int * 1024;
2740 	u8 dtim_period = sdata->vif.bss_conf.dtim_period;
2741 	struct ps_data *ps;
2742 	u8 bcns_from_dtim;
2743 
2744 	if (tsf == -1ULL || !beacon_int || !dtim_period)
2745 		return;
2746 
2747 	if (sdata->vif.type == NL80211_IFTYPE_AP ||
2748 	    sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
2749 		if (!sdata->bss)
2750 			return;
2751 
2752 		ps = &sdata->bss->ps;
2753 	} else if (ieee80211_vif_is_mesh(&sdata->vif)) {
2754 		ps = &sdata->u.mesh.ps;
2755 	} else {
2756 		return;
2757 	}
2758 
2759 	/*
2760 	 * actually finds last dtim_count, mac80211 will update in
2761 	 * __beacon_add_tim().
2762 	 * dtim_count = dtim_period - (tsf / bcn_int) % dtim_period
2763 	 */
2764 	do_div(tsf, beacon_int);
2765 	bcns_from_dtim = do_div(tsf, dtim_period);
2766 	/* just had a DTIM */
2767 	if (!bcns_from_dtim)
2768 		dtim_count = 0;
2769 	else
2770 		dtim_count = dtim_period - bcns_from_dtim;
2771 
2772 	ps->dtim_count = dtim_count;
2773 }
2774