1 /******************************************************************************
2  *
3  * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved.
4  * Copyright (C) 2018 Intel Corporation
5  *
6  * Portions of this file are derived from the ipw3945 project, as well
7  * as portions of the ieee80211 subsystem header files.
8  *
9  * This program is free software; you can redistribute it and/or modify it
10  * under the terms of version 2 of the GNU General Public License as
11  * published by the Free Software Foundation.
12  *
13  * This program is distributed in the hope that it will be useful, but WITHOUT
14  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
15  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
16  * more details.
17  *
18  * The full GNU General Public License is included in this distribution in the
19  * file called LICENSE.
20  *
21  * Contact Information:
22  *  Intel Linux Wireless <linuxwifi@intel.com>
23  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
24  *
25  *****************************************************************************/
26 #include <linux/kernel.h>
27 #include <linux/module.h>
28 #include <linux/slab.h>
29 #include <linux/dma-mapping.h>
30 #include <linux/delay.h>
31 #include <linux/sched.h>
32 #include <linux/skbuff.h>
33 #include <linux/netdevice.h>
34 #include <linux/etherdevice.h>
35 #include <linux/if_arp.h>
36 
37 #include <net/ieee80211_radiotap.h>
38 #include <net/mac80211.h>
39 
40 #include <asm/div64.h>
41 
42 #include "iwl-io.h"
43 #include "iwl-trans.h"
44 #include "iwl-op-mode.h"
45 #include "iwl-modparams.h"
46 
47 #include "dev.h"
48 #include "calib.h"
49 #include "agn.h"
50 
51 /*****************************************************************************
52  *
53  * mac80211 entry point functions
54  *
55  *****************************************************************************/
56 
57 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
58 	{
59 		.max = 1,
60 		.types = BIT(NL80211_IFTYPE_STATION),
61 	},
62 	{
63 		.max = 1,
64 		.types = BIT(NL80211_IFTYPE_AP),
65 	},
66 };
67 
68 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
69 	{
70 		.max = 2,
71 		.types = BIT(NL80211_IFTYPE_STATION),
72 	},
73 };
74 
75 static const struct ieee80211_iface_combination
76 iwlagn_iface_combinations_dualmode[] = {
77 	{ .num_different_channels = 1,
78 	  .max_interfaces = 2,
79 	  .beacon_int_infra_match = true,
80 	  .limits = iwlagn_sta_ap_limits,
81 	  .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
82 	},
83 	{ .num_different_channels = 1,
84 	  .max_interfaces = 2,
85 	  .limits = iwlagn_2sta_limits,
86 	  .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
87 	},
88 };
89 
90 /*
91  * Not a mac80211 entry point function, but it fits in with all the
92  * other mac80211 functions grouped here.
93  */
94 int iwlagn_mac_setup_register(struct iwl_priv *priv,
95 			      const struct iwl_ucode_capabilities *capa)
96 {
97 	int ret;
98 	struct ieee80211_hw *hw = priv->hw;
99 	struct iwl_rxon_context *ctx;
100 
101 	hw->rate_control_algorithm = "iwl-agn-rs";
102 
103 	/* Tell mac80211 our characteristics */
104 	ieee80211_hw_set(hw, SIGNAL_DBM);
105 	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
106 	ieee80211_hw_set(hw, NEED_DTIM_BEFORE_ASSOC);
107 	ieee80211_hw_set(hw, SPECTRUM_MGMT);
108 	ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
109 	ieee80211_hw_set(hw, QUEUE_CONTROL);
110 	ieee80211_hw_set(hw, SUPPORTS_PS);
111 	ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
112 	ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
113 	ieee80211_hw_set(hw, WANT_MONITOR_VIF);
114 
115 	if (priv->trans->max_skb_frags)
116 		hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
117 
118 	hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE;
119 	hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT;
120 
121 	/*
122 	 * Including the following line will crash some AP's.  This
123 	 * workaround removes the stimulus which causes the crash until
124 	 * the AP software can be fixed.
125 	hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
126 	 */
127 
128 	if (priv->nvm_data->sku_cap_11n_enable)
129 		hw->wiphy->features |= NL80211_FEATURE_DYNAMIC_SMPS |
130 				       NL80211_FEATURE_STATIC_SMPS;
131 
132 	/*
133 	 * Enable 11w if advertised by firmware and software crypto
134 	 * is not enabled (as the firmware will interpret some mgmt
135 	 * packets, so enabling it with software crypto isn't safe)
136 	 */
137 	if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
138 	    !iwlwifi_mod_params.swcrypto)
139 		ieee80211_hw_set(hw, MFP_CAPABLE);
140 
141 	hw->sta_data_size = sizeof(struct iwl_station_priv);
142 	hw->vif_data_size = sizeof(struct iwl_vif_priv);
143 
144 	for_each_context(priv, ctx) {
145 		hw->wiphy->interface_modes |= ctx->interface_modes;
146 		hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
147 	}
148 
149 	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
150 
151 	if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
152 		hw->wiphy->iface_combinations =
153 			iwlagn_iface_combinations_dualmode;
154 		hw->wiphy->n_iface_combinations =
155 			ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
156 	}
157 
158 	hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
159 	hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
160 				       REGULATORY_DISABLE_BEACON_HINTS;
161 
162 #ifdef CONFIG_PM_SLEEP
163 	if (priv->fw->img[IWL_UCODE_WOWLAN].num_sec &&
164 	    priv->trans->ops->d3_suspend &&
165 	    priv->trans->ops->d3_resume &&
166 	    device_can_wakeup(priv->trans->dev)) {
167 		priv->wowlan_support.flags = WIPHY_WOWLAN_MAGIC_PKT |
168 					     WIPHY_WOWLAN_DISCONNECT |
169 					     WIPHY_WOWLAN_EAP_IDENTITY_REQ |
170 					     WIPHY_WOWLAN_RFKILL_RELEASE;
171 		if (!iwlwifi_mod_params.swcrypto)
172 			priv->wowlan_support.flags |=
173 				WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
174 				WIPHY_WOWLAN_GTK_REKEY_FAILURE;
175 
176 		priv->wowlan_support.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
177 		priv->wowlan_support.pattern_min_len =
178 					IWLAGN_WOWLAN_MIN_PATTERN_LEN;
179 		priv->wowlan_support.pattern_max_len =
180 					IWLAGN_WOWLAN_MAX_PATTERN_LEN;
181 		hw->wiphy->wowlan = &priv->wowlan_support;
182 	}
183 #endif
184 
185 	if (iwlwifi_mod_params.power_save)
186 		hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
187 	else
188 		hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
189 
190 	hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
191 	/* we create the 802.11 header and a max-length SSID element */
192 	hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34;
193 
194 	/*
195 	 * We don't use all queues: 4 and 9 are unused and any
196 	 * aggregation queue gets mapped down to the AC queue.
197 	 */
198 	hw->queues = IWLAGN_FIRST_AMPDU_QUEUE;
199 
200 	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
201 
202 	if (priv->nvm_data->bands[NL80211_BAND_2GHZ].n_channels)
203 		priv->hw->wiphy->bands[NL80211_BAND_2GHZ] =
204 			&priv->nvm_data->bands[NL80211_BAND_2GHZ];
205 	if (priv->nvm_data->bands[NL80211_BAND_5GHZ].n_channels)
206 		priv->hw->wiphy->bands[NL80211_BAND_5GHZ] =
207 			&priv->nvm_data->bands[NL80211_BAND_5GHZ];
208 
209 	hw->wiphy->hw_version = priv->trans->hw_id;
210 
211 	iwl_leds_init(priv);
212 
213 	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
214 
215 	ret = ieee80211_register_hw(priv->hw);
216 	if (ret) {
217 		IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
218 		iwl_leds_exit(priv);
219 		return ret;
220 	}
221 	priv->mac80211_registered = 1;
222 
223 	return 0;
224 }
225 
226 void iwlagn_mac_unregister(struct iwl_priv *priv)
227 {
228 	if (!priv->mac80211_registered)
229 		return;
230 	iwl_leds_exit(priv);
231 	ieee80211_unregister_hw(priv->hw);
232 	priv->mac80211_registered = 0;
233 }
234 
235 static int __iwl_up(struct iwl_priv *priv)
236 {
237 	struct iwl_rxon_context *ctx;
238 	int ret;
239 
240 	lockdep_assert_held(&priv->mutex);
241 
242 	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
243 		IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
244 		return -EIO;
245 	}
246 
247 	for_each_context(priv, ctx) {
248 		ret = iwlagn_alloc_bcast_station(priv, ctx);
249 		if (ret) {
250 			iwl_dealloc_bcast_stations(priv);
251 			return ret;
252 		}
253 	}
254 
255 	ret = iwl_trans_start_hw(priv->trans);
256 	if (ret) {
257 		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
258 		goto error;
259 	}
260 
261 	ret = iwl_run_init_ucode(priv);
262 	if (ret) {
263 		IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
264 		goto error;
265 	}
266 
267 	ret = iwl_trans_start_hw(priv->trans);
268 	if (ret) {
269 		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
270 		goto error;
271 	}
272 
273 	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR);
274 	if (ret) {
275 		IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
276 		goto error;
277 	}
278 
279 	ret = iwl_alive_start(priv);
280 	if (ret)
281 		goto error;
282 	return 0;
283 
284  error:
285 	set_bit(STATUS_EXIT_PENDING, &priv->status);
286 	iwl_down(priv);
287 	clear_bit(STATUS_EXIT_PENDING, &priv->status);
288 
289 	IWL_ERR(priv, "Unable to initialize device.\n");
290 	return ret;
291 }
292 
293 static int iwlagn_mac_start(struct ieee80211_hw *hw)
294 {
295 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
296 	int ret;
297 
298 	IWL_DEBUG_MAC80211(priv, "enter\n");
299 
300 	/* we should be verifying the device is ready to be opened */
301 	mutex_lock(&priv->mutex);
302 	ret = __iwl_up(priv);
303 	mutex_unlock(&priv->mutex);
304 	if (ret)
305 		return ret;
306 
307 	IWL_DEBUG_INFO(priv, "Start UP work done.\n");
308 
309 	/* Now we should be done, and the READY bit should be set. */
310 	if (WARN_ON(!test_bit(STATUS_READY, &priv->status)))
311 		ret = -EIO;
312 
313 	iwlagn_led_enable(priv);
314 
315 	priv->is_open = 1;
316 	IWL_DEBUG_MAC80211(priv, "leave\n");
317 	return 0;
318 }
319 
320 static void iwlagn_mac_stop(struct ieee80211_hw *hw)
321 {
322 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
323 
324 	IWL_DEBUG_MAC80211(priv, "enter\n");
325 
326 	if (!priv->is_open)
327 		return;
328 
329 	priv->is_open = 0;
330 
331 	mutex_lock(&priv->mutex);
332 	iwl_down(priv);
333 	mutex_unlock(&priv->mutex);
334 
335 	iwl_cancel_deferred_work(priv);
336 
337 	flush_workqueue(priv->workqueue);
338 
339 	IWL_DEBUG_MAC80211(priv, "leave\n");
340 }
341 
342 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
343 				      struct ieee80211_vif *vif,
344 				      struct cfg80211_gtk_rekey_data *data)
345 {
346 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
347 
348 	if (iwlwifi_mod_params.swcrypto)
349 		return;
350 
351 	IWL_DEBUG_MAC80211(priv, "enter\n");
352 	mutex_lock(&priv->mutex);
353 
354 	if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
355 		goto out;
356 
357 	memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
358 	memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
359 	priv->replay_ctr =
360 		cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
361 	priv->have_rekey_data = true;
362 
363  out:
364 	mutex_unlock(&priv->mutex);
365 	IWL_DEBUG_MAC80211(priv, "leave\n");
366 }
367 
368 #ifdef CONFIG_PM_SLEEP
369 
370 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
371 			      struct cfg80211_wowlan *wowlan)
372 {
373 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
374 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
375 	int ret;
376 
377 	if (WARN_ON(!wowlan))
378 		return -EINVAL;
379 
380 	IWL_DEBUG_MAC80211(priv, "enter\n");
381 	mutex_lock(&priv->mutex);
382 
383 	/* Don't attempt WoWLAN when not associated, tear down instead. */
384 	if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
385 	    !iwl_is_associated_ctx(ctx)) {
386 		ret = 1;
387 		goto out;
388 	}
389 
390 	ret = iwlagn_suspend(priv, wowlan);
391 	if (ret)
392 		goto error;
393 
394 	/* let the ucode operate on its own */
395 	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET,
396 		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
397 
398 	iwl_trans_d3_suspend(priv->trans, false, true);
399 
400 	goto out;
401 
402  error:
403 	priv->wowlan = false;
404 	iwlagn_prepare_restart(priv);
405 	ieee80211_restart_hw(priv->hw);
406  out:
407 	mutex_unlock(&priv->mutex);
408 	IWL_DEBUG_MAC80211(priv, "leave\n");
409 
410 	return ret;
411 }
412 
413 struct iwl_resume_data {
414 	struct iwl_priv *priv;
415 	struct iwlagn_wowlan_status *cmd;
416 	bool valid;
417 };
418 
419 static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait,
420 				 struct iwl_rx_packet *pkt, void *data)
421 {
422 	struct iwl_resume_data *resume_data = data;
423 	struct iwl_priv *priv = resume_data->priv;
424 
425 	if (iwl_rx_packet_payload_len(pkt) != sizeof(*resume_data->cmd)) {
426 		IWL_ERR(priv, "rx wrong size data\n");
427 		return true;
428 	}
429 	memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd));
430 	resume_data->valid = true;
431 
432 	return true;
433 }
434 
435 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
436 {
437 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
438 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
439 	struct ieee80211_vif *vif;
440 	u32 base;
441 	int ret;
442 	enum iwl_d3_status d3_status;
443 	struct error_table_start {
444 		/* cf. struct iwl_error_event_table */
445 		u32 valid;
446 		u32 error_id;
447 	} err_info;
448 	struct iwl_notification_wait status_wait;
449 	static const u16 status_cmd[] = {
450 		REPLY_WOWLAN_GET_STATUS,
451 	};
452 	struct iwlagn_wowlan_status status_data = {};
453 	struct iwl_resume_data resume_data = {
454 		.priv = priv,
455 		.cmd = &status_data,
456 		.valid = false,
457 	};
458 	struct cfg80211_wowlan_wakeup wakeup = {
459 		.pattern_idx = -1,
460 	};
461 #ifdef CONFIG_IWLWIFI_DEBUGFS
462 	const struct fw_img *img;
463 #endif
464 
465 	IWL_DEBUG_MAC80211(priv, "enter\n");
466 	mutex_lock(&priv->mutex);
467 
468 	/* we'll clear ctx->vif during iwlagn_prepare_restart() */
469 	vif = ctx->vif;
470 
471 	ret = iwl_trans_d3_resume(priv->trans, &d3_status, false, true);
472 	if (ret)
473 		goto out_unlock;
474 
475 	if (d3_status != IWL_D3_STATUS_ALIVE) {
476 		IWL_INFO(priv, "Device was reset during suspend\n");
477 		goto out_unlock;
478 	}
479 
480 	/* uCode is no longer operating by itself */
481 	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR,
482 		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
483 
484 	base = priv->device_pointers.error_event_table;
485 	if (!iwlagn_hw_valid_rtc_data_addr(base)) {
486 		IWL_WARN(priv, "Invalid error table during resume!\n");
487 		goto out_unlock;
488 	}
489 
490 	iwl_trans_read_mem_bytes(priv->trans, base,
491 				 &err_info, sizeof(err_info));
492 
493 	if (err_info.valid) {
494 		IWL_INFO(priv, "error table is valid (%d, 0x%x)\n",
495 			 err_info.valid, err_info.error_id);
496 		if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) {
497 			wakeup.rfkill_release = true;
498 			ieee80211_report_wowlan_wakeup(vif, &wakeup,
499 						       GFP_KERNEL);
500 		}
501 		goto out_unlock;
502 	}
503 
504 #ifdef CONFIG_IWLWIFI_DEBUGFS
505 	img = &priv->fw->img[IWL_UCODE_WOWLAN];
506 	if (!priv->wowlan_sram)
507 		priv->wowlan_sram =
508 			kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len,
509 				GFP_KERNEL);
510 
511 	if (priv->wowlan_sram)
512 		iwl_trans_read_mem(priv->trans, 0x800000,
513 				   priv->wowlan_sram,
514 				   img->sec[IWL_UCODE_SECTION_DATA].len / 4);
515 #endif
516 
517 	/*
518 	 * This is very strange. The GET_STATUS command is sent but the device
519 	 * doesn't reply properly, it seems it doesn't close the RBD so one is
520 	 * always left open ... As a result, we need to send another command
521 	 * and have to reset the driver afterwards. As we need to switch to
522 	 * runtime firmware again that'll happen.
523 	 */
524 
525 	iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd,
526 				   ARRAY_SIZE(status_cmd), iwl_resume_status_fn,
527 				   &resume_data);
528 
529 	iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL);
530 	iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL);
531 	/* an RBD is left open in the firmware now! */
532 
533 	ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5);
534 	if (ret)
535 		goto out_unlock;
536 
537 	if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) {
538 		u32 reasons = le32_to_cpu(status_data.wakeup_reason);
539 		struct cfg80211_wowlan_wakeup *wakeup_report;
540 
541 		IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons);
542 
543 		if (reasons) {
544 			if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET)
545 				wakeup.magic_pkt = true;
546 			if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH)
547 				wakeup.pattern_idx = status_data.pattern_number;
548 			if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
549 				       IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE))
550 				wakeup.disconnect = true;
551 			if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL)
552 				wakeup.gtk_rekey_failure = true;
553 			if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ)
554 				wakeup.eap_identity_req = true;
555 			if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE)
556 				wakeup.four_way_handshake = true;
557 			wakeup_report = &wakeup;
558 		} else {
559 			wakeup_report = NULL;
560 		}
561 
562 		ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL);
563 	}
564 
565 	priv->wowlan = false;
566 
567 	iwlagn_prepare_restart(priv);
568 
569 	memset((void *)&ctx->active, 0, sizeof(ctx->active));
570 	iwl_connection_init_rx_config(priv, ctx);
571 	iwlagn_set_rxon_chain(priv, ctx);
572 
573  out_unlock:
574 	mutex_unlock(&priv->mutex);
575 	IWL_DEBUG_MAC80211(priv, "leave\n");
576 
577 	ieee80211_resume_disconnect(vif);
578 
579 	return 1;
580 }
581 
582 static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled)
583 {
584 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
585 
586 	device_set_wakeup_enable(priv->trans->dev, enabled);
587 }
588 #endif
589 
590 static void iwlagn_mac_tx(struct ieee80211_hw *hw,
591 			  struct ieee80211_tx_control *control,
592 			  struct sk_buff *skb)
593 {
594 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
595 
596 	if (iwlagn_tx_skb(priv, control->sta, skb))
597 		ieee80211_free_txskb(hw, skb);
598 }
599 
600 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
601 				       struct ieee80211_vif *vif,
602 				       struct ieee80211_key_conf *keyconf,
603 				       struct ieee80211_sta *sta,
604 				       u32 iv32, u16 *phase1key)
605 {
606 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
607 
608 	iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
609 }
610 
611 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
612 			      struct ieee80211_vif *vif,
613 			      struct ieee80211_sta *sta,
614 			      struct ieee80211_key_conf *key)
615 {
616 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
617 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
618 	struct iwl_rxon_context *ctx = vif_priv->ctx;
619 	int ret;
620 	bool is_default_wep_key = false;
621 
622 	IWL_DEBUG_MAC80211(priv, "enter\n");
623 
624 	if (iwlwifi_mod_params.swcrypto) {
625 		IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
626 		return -EOPNOTSUPP;
627 	}
628 
629 	switch (key->cipher) {
630 	case WLAN_CIPHER_SUITE_TKIP:
631 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
632 		/* fall through */
633 	case WLAN_CIPHER_SUITE_CCMP:
634 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
635 		break;
636 	default:
637 		break;
638 	}
639 
640 	/*
641 	 * We could program these keys into the hardware as well, but we
642 	 * don't expect much multicast traffic in IBSS and having keys
643 	 * for more stations is probably more useful.
644 	 *
645 	 * Mark key TX-only and return 0.
646 	 */
647 	if (vif->type == NL80211_IFTYPE_ADHOC &&
648 	    !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
649 		key->hw_key_idx = WEP_INVALID_OFFSET;
650 		return 0;
651 	}
652 
653 	/* If they key was TX-only, accept deletion */
654 	if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
655 		return 0;
656 
657 	mutex_lock(&priv->mutex);
658 	iwl_scan_cancel_timeout(priv, 100);
659 
660 	BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
661 
662 	/*
663 	 * If we are getting WEP group key and we didn't receive any key mapping
664 	 * so far, we are in legacy wep mode (group key only), otherwise we are
665 	 * in 1X mode.
666 	 * In legacy wep mode, we use another host command to the uCode.
667 	 */
668 	if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
669 	     key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
670 		if (cmd == SET_KEY)
671 			is_default_wep_key = !ctx->key_mapping_keys;
672 		else
673 			is_default_wep_key =
674 				key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
675 	}
676 
677 
678 	switch (cmd) {
679 	case SET_KEY:
680 		if (is_default_wep_key) {
681 			ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
682 			break;
683 		}
684 		ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
685 		if (ret) {
686 			/*
687 			 * can't add key for RX, but we don't need it
688 			 * in the device for TX so still return 0
689 			 */
690 			ret = 0;
691 			key->hw_key_idx = WEP_INVALID_OFFSET;
692 		}
693 
694 		IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
695 		break;
696 	case DISABLE_KEY:
697 		if (is_default_wep_key)
698 			ret = iwl_remove_default_wep_key(priv, ctx, key);
699 		else
700 			ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
701 
702 		IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
703 		break;
704 	default:
705 		ret = -EINVAL;
706 	}
707 
708 	mutex_unlock(&priv->mutex);
709 	IWL_DEBUG_MAC80211(priv, "leave\n");
710 
711 	return ret;
712 }
713 
714 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
715 				   struct ieee80211_vif *vif,
716 				   struct ieee80211_ampdu_params *params)
717 {
718 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
719 	int ret = -EINVAL;
720 	struct ieee80211_sta *sta = params->sta;
721 	enum ieee80211_ampdu_mlme_action action = params->action;
722 	u16 tid = params->tid;
723 	u16 *ssn = &params->ssn;
724 	u8 buf_size = params->buf_size;
725 	struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
726 
727 	IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
728 		     sta->addr, tid);
729 
730 	if (!(priv->nvm_data->sku_cap_11n_enable))
731 		return -EACCES;
732 
733 	IWL_DEBUG_MAC80211(priv, "enter\n");
734 	mutex_lock(&priv->mutex);
735 
736 	switch (action) {
737 	case IEEE80211_AMPDU_RX_START:
738 		if (!iwl_enable_rx_ampdu())
739 			break;
740 		IWL_DEBUG_HT(priv, "start Rx\n");
741 		ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
742 		break;
743 	case IEEE80211_AMPDU_RX_STOP:
744 		IWL_DEBUG_HT(priv, "stop Rx\n");
745 		ret = iwl_sta_rx_agg_stop(priv, sta, tid);
746 		break;
747 	case IEEE80211_AMPDU_TX_START:
748 		if (!priv->trans->ops->txq_enable)
749 			break;
750 		if (!iwl_enable_tx_ampdu())
751 			break;
752 		IWL_DEBUG_HT(priv, "start Tx\n");
753 		ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
754 		break;
755 	case IEEE80211_AMPDU_TX_STOP_FLUSH:
756 	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
757 		IWL_DEBUG_HT(priv, "Flush Tx\n");
758 		ret = iwlagn_tx_agg_flush(priv, vif, sta, tid);
759 		break;
760 	case IEEE80211_AMPDU_TX_STOP_CONT:
761 		IWL_DEBUG_HT(priv, "stop Tx\n");
762 		ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
763 		if ((ret == 0) && (priv->agg_tids_count > 0)) {
764 			priv->agg_tids_count--;
765 			IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
766 				     priv->agg_tids_count);
767 		}
768 		if (!priv->agg_tids_count &&
769 		    priv->hw_params.use_rts_for_aggregation) {
770 			/*
771 			 * switch off RTS/CTS if it was previously enabled
772 			 */
773 			sta_priv->lq_sta.lq.general_params.flags &=
774 				~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
775 			iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
776 					&sta_priv->lq_sta.lq, CMD_ASYNC, false);
777 		}
778 		break;
779 	case IEEE80211_AMPDU_TX_OPERATIONAL:
780 		ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size);
781 		break;
782 	}
783 	mutex_unlock(&priv->mutex);
784 	IWL_DEBUG_MAC80211(priv, "leave\n");
785 	return ret;
786 }
787 
788 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
789 			      struct ieee80211_vif *vif,
790 			      struct ieee80211_sta *sta)
791 {
792 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
793 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
794 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
795 	bool is_ap = vif->type == NL80211_IFTYPE_STATION;
796 	int ret;
797 	u8 sta_id;
798 
799 	IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
800 			sta->addr);
801 	sta_priv->sta_id = IWL_INVALID_STATION;
802 
803 	atomic_set(&sta_priv->pending_frames, 0);
804 	if (vif->type == NL80211_IFTYPE_AP)
805 		sta_priv->client = true;
806 
807 	ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
808 				     is_ap, sta, &sta_id);
809 	if (ret) {
810 		IWL_ERR(priv, "Unable to add station %pM (%d)\n",
811 			sta->addr, ret);
812 		/* Should we return success if return code is EEXIST ? */
813 		return ret;
814 	}
815 
816 	sta_priv->sta_id = sta_id;
817 
818 	return 0;
819 }
820 
821 static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw,
822 				 struct ieee80211_vif *vif,
823 				 struct ieee80211_sta *sta)
824 {
825 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
826 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
827 	int ret;
828 
829 	IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr);
830 
831 	if (vif->type == NL80211_IFTYPE_STATION) {
832 		/*
833 		 * Station will be removed from device when the RXON
834 		 * is set to unassociated -- just deactivate it here
835 		 * to avoid re-programming it.
836 		 */
837 		ret = 0;
838 		iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr);
839 	} else {
840 		ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr);
841 		if (ret)
842 			IWL_DEBUG_QUIET_RFKILL(priv,
843 				"Error removing station %pM\n", sta->addr);
844 	}
845 	return ret;
846 }
847 
848 static int iwlagn_mac_sta_state(struct ieee80211_hw *hw,
849 				struct ieee80211_vif *vif,
850 				struct ieee80211_sta *sta,
851 				enum ieee80211_sta_state old_state,
852 				enum ieee80211_sta_state new_state)
853 {
854 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
855 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
856 	enum {
857 		NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT,
858 	} op = NONE;
859 	int ret;
860 
861 	IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n",
862 			   sta->addr, old_state, new_state);
863 
864 	mutex_lock(&priv->mutex);
865 	if (vif->type == NL80211_IFTYPE_STATION) {
866 		if (old_state == IEEE80211_STA_NOTEXIST &&
867 		    new_state == IEEE80211_STA_NONE)
868 			op = ADD;
869 		else if (old_state == IEEE80211_STA_NONE &&
870 			 new_state == IEEE80211_STA_NOTEXIST)
871 			op = REMOVE;
872 		else if (old_state == IEEE80211_STA_AUTH &&
873 			 new_state == IEEE80211_STA_ASSOC)
874 			op = HT_RATE_INIT;
875 	} else {
876 		if (old_state == IEEE80211_STA_AUTH &&
877 		    new_state == IEEE80211_STA_ASSOC)
878 			op = ADD_RATE_INIT;
879 		else if (old_state == IEEE80211_STA_ASSOC &&
880 			 new_state == IEEE80211_STA_AUTH)
881 			op = REMOVE;
882 	}
883 
884 	switch (op) {
885 	case ADD:
886 		ret = iwlagn_mac_sta_add(hw, vif, sta);
887 		if (ret)
888 			break;
889 		/*
890 		 * Clear the in-progress flag, the AP station entry was added
891 		 * but we'll initialize LQ only when we've associated (which
892 		 * would also clear the in-progress flag). This is necessary
893 		 * in case we never initialize LQ because association fails.
894 		 */
895 		spin_lock_bh(&priv->sta_lock);
896 		priv->stations[iwl_sta_id(sta)].used &=
897 			~IWL_STA_UCODE_INPROGRESS;
898 		spin_unlock_bh(&priv->sta_lock);
899 		break;
900 	case REMOVE:
901 		ret = iwlagn_mac_sta_remove(hw, vif, sta);
902 		break;
903 	case ADD_RATE_INIT:
904 		ret = iwlagn_mac_sta_add(hw, vif, sta);
905 		if (ret)
906 			break;
907 		/* Initialize rate scaling */
908 		IWL_DEBUG_INFO(priv,
909 			       "Initializing rate scaling for station %pM\n",
910 			       sta->addr);
911 		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
912 		ret = 0;
913 		break;
914 	case HT_RATE_INIT:
915 		/* Initialize rate scaling */
916 		ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta);
917 		if (ret)
918 			break;
919 		IWL_DEBUG_INFO(priv,
920 			       "Initializing rate scaling for station %pM\n",
921 			       sta->addr);
922 		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
923 		ret = 0;
924 		break;
925 	default:
926 		ret = 0;
927 		break;
928 	}
929 
930 	/*
931 	 * mac80211 might WARN if we fail, but due the way we
932 	 * (badly) handle hard rfkill, we might fail here
933 	 */
934 	if (iwl_is_rfkill(priv))
935 		ret = 0;
936 
937 	mutex_unlock(&priv->mutex);
938 	IWL_DEBUG_MAC80211(priv, "leave\n");
939 
940 	return ret;
941 }
942 
943 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
944 				      struct ieee80211_vif *vif,
945 				      struct ieee80211_channel_switch *ch_switch)
946 {
947 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
948 	struct ieee80211_conf *conf = &hw->conf;
949 	struct ieee80211_channel *channel = ch_switch->chandef.chan;
950 	struct iwl_ht_config *ht_conf = &priv->current_ht_config;
951 	/*
952 	 * MULTI-FIXME
953 	 * When we add support for multiple interfaces, we need to
954 	 * revisit this. The channel switch command in the device
955 	 * only affects the BSS context, but what does that really
956 	 * mean? And what if we get a CSA on the second interface?
957 	 * This needs a lot of work.
958 	 */
959 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
960 	u16 ch;
961 
962 	IWL_DEBUG_MAC80211(priv, "enter\n");
963 
964 	mutex_lock(&priv->mutex);
965 
966 	if (iwl_is_rfkill(priv))
967 		goto out;
968 
969 	if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
970 	    test_bit(STATUS_SCANNING, &priv->status) ||
971 	    test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
972 		goto out;
973 
974 	if (!iwl_is_associated_ctx(ctx))
975 		goto out;
976 
977 	if (!priv->lib->set_channel_switch)
978 		goto out;
979 
980 	ch = channel->hw_value;
981 	if (le16_to_cpu(ctx->active.channel) == ch)
982 		goto out;
983 
984 	priv->current_ht_config.smps = conf->smps_mode;
985 
986 	/* Configure HT40 channels */
987 	switch (cfg80211_get_chandef_type(&ch_switch->chandef)) {
988 	case NL80211_CHAN_NO_HT:
989 	case NL80211_CHAN_HT20:
990 		ctx->ht.is_40mhz = false;
991 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE;
992 		break;
993 	case NL80211_CHAN_HT40MINUS:
994 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
995 		ctx->ht.is_40mhz = true;
996 		break;
997 	case NL80211_CHAN_HT40PLUS:
998 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
999 		ctx->ht.is_40mhz = true;
1000 		break;
1001 	}
1002 
1003 	if ((le16_to_cpu(ctx->staging.channel) != ch))
1004 		ctx->staging.flags = 0;
1005 
1006 	iwl_set_rxon_channel(priv, channel, ctx);
1007 	iwl_set_rxon_ht(priv, ht_conf);
1008 	iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
1009 
1010 	/*
1011 	 * at this point, staging_rxon has the
1012 	 * configuration for channel switch
1013 	 */
1014 	set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1015 	priv->switch_channel = cpu_to_le16(ch);
1016 	if (priv->lib->set_channel_switch(priv, ch_switch)) {
1017 		clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1018 		priv->switch_channel = 0;
1019 		ieee80211_chswitch_done(ctx->vif, false);
1020 	}
1021 
1022 out:
1023 	mutex_unlock(&priv->mutex);
1024 	IWL_DEBUG_MAC80211(priv, "leave\n");
1025 }
1026 
1027 void iwl_chswitch_done(struct iwl_priv *priv, bool is_success)
1028 {
1029 	/*
1030 	 * MULTI-FIXME
1031 	 * See iwlagn_mac_channel_switch.
1032 	 */
1033 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1034 
1035 	if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1036 		return;
1037 
1038 	if (!test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1039 		return;
1040 
1041 	if (ctx->vif)
1042 		ieee80211_chswitch_done(ctx->vif, is_success);
1043 }
1044 
1045 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
1046 				    unsigned int changed_flags,
1047 				    unsigned int *total_flags,
1048 				    u64 multicast)
1049 {
1050 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1051 	__le32 filter_or = 0, filter_nand = 0;
1052 	struct iwl_rxon_context *ctx;
1053 
1054 #define CHK(test, flag)	do { \
1055 	if (*total_flags & (test))		\
1056 		filter_or |= (flag);		\
1057 	else					\
1058 		filter_nand |= (flag);		\
1059 	} while (0)
1060 
1061 	IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
1062 			changed_flags, *total_flags);
1063 
1064 	CHK(FIF_OTHER_BSS, RXON_FILTER_PROMISC_MSK);
1065 	/* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
1066 	CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
1067 	CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
1068 
1069 #undef CHK
1070 
1071 	mutex_lock(&priv->mutex);
1072 
1073 	for_each_context(priv, ctx) {
1074 		ctx->staging.filter_flags &= ~filter_nand;
1075 		ctx->staging.filter_flags |= filter_or;
1076 
1077 		/*
1078 		 * Not committing directly because hardware can perform a scan,
1079 		 * but we'll eventually commit the filter flags change anyway.
1080 		 */
1081 	}
1082 
1083 	mutex_unlock(&priv->mutex);
1084 
1085 	/*
1086 	 * Receiving all multicast frames is always enabled by the
1087 	 * default flags setup in iwl_connection_init_rx_config()
1088 	 * since we currently do not support programming multicast
1089 	 * filters into the device.
1090 	 */
1091 	*total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI |
1092 			FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
1093 }
1094 
1095 static void iwlagn_mac_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1096 			     u32 queues, bool drop)
1097 {
1098 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1099 	u32 scd_queues;
1100 
1101 	mutex_lock(&priv->mutex);
1102 	IWL_DEBUG_MAC80211(priv, "enter\n");
1103 
1104 	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
1105 		IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
1106 		goto done;
1107 	}
1108 	if (iwl_is_rfkill(priv)) {
1109 		IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
1110 		goto done;
1111 	}
1112 
1113 	scd_queues = BIT(priv->cfg->base_params->num_of_queues) - 1;
1114 	scd_queues &= ~(BIT(IWL_IPAN_CMD_QUEUE_NUM) |
1115 			BIT(IWL_DEFAULT_CMD_QUEUE_NUM));
1116 
1117 	if (drop) {
1118 		IWL_DEBUG_TX_QUEUES(priv, "Flushing SCD queues: 0x%x\n",
1119 				    scd_queues);
1120 		if (iwlagn_txfifo_flush(priv, scd_queues)) {
1121 			IWL_ERR(priv, "flush request fail\n");
1122 			goto done;
1123 		}
1124 	}
1125 
1126 	IWL_DEBUG_TX_QUEUES(priv, "wait transmit/flush all frames\n");
1127 	iwl_trans_wait_tx_queues_empty(priv->trans, scd_queues);
1128 done:
1129 	mutex_unlock(&priv->mutex);
1130 	IWL_DEBUG_MAC80211(priv, "leave\n");
1131 }
1132 
1133 static void iwlagn_mac_event_callback(struct ieee80211_hw *hw,
1134 				      struct ieee80211_vif *vif,
1135 				      const struct ieee80211_event *event)
1136 {
1137 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1138 
1139 	if (event->type != RSSI_EVENT)
1140 		return;
1141 
1142 	IWL_DEBUG_MAC80211(priv, "enter\n");
1143 
1144 	if (priv->lib->bt_params &&
1145 	    priv->lib->bt_params->advanced_bt_coexist) {
1146 		if (event->u.rssi.data == RSSI_EVENT_LOW)
1147 			priv->bt_enable_pspoll = true;
1148 		else if (event->u.rssi.data == RSSI_EVENT_HIGH)
1149 			priv->bt_enable_pspoll = false;
1150 
1151 		queue_work(priv->workqueue, &priv->bt_runtime_config);
1152 	} else {
1153 		IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
1154 				"ignoring RSSI callback\n");
1155 	}
1156 
1157 	IWL_DEBUG_MAC80211(priv, "leave\n");
1158 }
1159 
1160 static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
1161 			      struct ieee80211_sta *sta, bool set)
1162 {
1163 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1164 
1165 	queue_work(priv->workqueue, &priv->beacon_update);
1166 
1167 	return 0;
1168 }
1169 
1170 static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw,
1171 			      struct ieee80211_vif *vif, u16 queue,
1172 			      const struct ieee80211_tx_queue_params *params)
1173 {
1174 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1175 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1176 	struct iwl_rxon_context *ctx = vif_priv->ctx;
1177 	int q;
1178 
1179 	if (WARN_ON(!ctx))
1180 		return -EINVAL;
1181 
1182 	IWL_DEBUG_MAC80211(priv, "enter\n");
1183 
1184 	if (!iwl_is_ready_rf(priv)) {
1185 		IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n");
1186 		return -EIO;
1187 	}
1188 
1189 	if (queue >= AC_NUM) {
1190 		IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue);
1191 		return 0;
1192 	}
1193 
1194 	q = AC_NUM - 1 - queue;
1195 
1196 	mutex_lock(&priv->mutex);
1197 
1198 	ctx->qos_data.def_qos_parm.ac[q].cw_min =
1199 		cpu_to_le16(params->cw_min);
1200 	ctx->qos_data.def_qos_parm.ac[q].cw_max =
1201 		cpu_to_le16(params->cw_max);
1202 	ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
1203 	ctx->qos_data.def_qos_parm.ac[q].edca_txop =
1204 			cpu_to_le16((params->txop * 32));
1205 
1206 	ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0;
1207 
1208 	mutex_unlock(&priv->mutex);
1209 
1210 	IWL_DEBUG_MAC80211(priv, "leave\n");
1211 	return 0;
1212 }
1213 
1214 static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw)
1215 {
1216 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1217 
1218 	return priv->ibss_manager == IWL_IBSS_MANAGER;
1219 }
1220 
1221 static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1222 {
1223 	iwl_connection_init_rx_config(priv, ctx);
1224 
1225 	iwlagn_set_rxon_chain(priv, ctx);
1226 
1227 	return iwlagn_commit_rxon(priv, ctx);
1228 }
1229 
1230 static int iwl_setup_interface(struct iwl_priv *priv,
1231 			       struct iwl_rxon_context *ctx)
1232 {
1233 	struct ieee80211_vif *vif = ctx->vif;
1234 	int err, ac;
1235 
1236 	lockdep_assert_held(&priv->mutex);
1237 
1238 	/*
1239 	 * This variable will be correct only when there's just
1240 	 * a single context, but all code using it is for hardware
1241 	 * that supports only one context.
1242 	 */
1243 	priv->iw_mode = vif->type;
1244 
1245 	ctx->is_active = true;
1246 
1247 	err = iwl_set_mode(priv, ctx);
1248 	if (err) {
1249 		if (!ctx->always_active)
1250 			ctx->is_active = false;
1251 		return err;
1252 	}
1253 
1254 	if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist &&
1255 	    vif->type == NL80211_IFTYPE_ADHOC) {
1256 		/*
1257 		 * pretend to have high BT traffic as long as we
1258 		 * are operating in IBSS mode, as this will cause
1259 		 * the rate scaling etc. to behave as intended.
1260 		 */
1261 		priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1262 	}
1263 
1264 	/* set up queue mappings */
1265 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
1266 		vif->hw_queue[ac] = ctx->ac_to_queue[ac];
1267 
1268 	if (vif->type == NL80211_IFTYPE_AP)
1269 		vif->cab_queue = ctx->mcast_queue;
1270 	else
1271 		vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
1272 
1273 	return 0;
1274 }
1275 
1276 static int iwlagn_mac_add_interface(struct ieee80211_hw *hw,
1277 				    struct ieee80211_vif *vif)
1278 {
1279 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1280 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1281 	struct iwl_rxon_context *tmp, *ctx = NULL;
1282 	int err;
1283 	enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif);
1284 	bool reset = false;
1285 
1286 	IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n",
1287 			   viftype, vif->addr);
1288 
1289 	mutex_lock(&priv->mutex);
1290 
1291 	if (!iwl_is_ready_rf(priv)) {
1292 		IWL_WARN(priv, "Try to add interface when device not ready\n");
1293 		err = -EINVAL;
1294 		goto out;
1295 	}
1296 
1297 	for_each_context(priv, tmp) {
1298 		u32 possible_modes =
1299 			tmp->interface_modes | tmp->exclusive_interface_modes;
1300 
1301 		if (tmp->vif) {
1302 			/* On reset we need to add the same interface again */
1303 			if (tmp->vif == vif) {
1304 				reset = true;
1305 				ctx = tmp;
1306 				break;
1307 			}
1308 
1309 			/* check if this busy context is exclusive */
1310 			if (tmp->exclusive_interface_modes &
1311 						BIT(tmp->vif->type)) {
1312 				err = -EINVAL;
1313 				goto out;
1314 			}
1315 			continue;
1316 		}
1317 
1318 		if (!(possible_modes & BIT(viftype)))
1319 			continue;
1320 
1321 		/* have maybe usable context w/o interface */
1322 		ctx = tmp;
1323 		break;
1324 	}
1325 
1326 	if (!ctx) {
1327 		err = -EOPNOTSUPP;
1328 		goto out;
1329 	}
1330 
1331 	vif_priv->ctx = ctx;
1332 	ctx->vif = vif;
1333 
1334 	/*
1335 	 * In SNIFFER device type, the firmware reports the FCS to
1336 	 * the host, rather than snipping it off. Unfortunately,
1337 	 * mac80211 doesn't (yet) provide a per-packet flag for
1338 	 * this, so that we have to set the hardware flag based
1339 	 * on the interfaces added. As the monitor interface can
1340 	 * only be present by itself, and will be removed before
1341 	 * other interfaces are added, this is safe.
1342 	 */
1343 	if (vif->type == NL80211_IFTYPE_MONITOR)
1344 		ieee80211_hw_set(priv->hw, RX_INCLUDES_FCS);
1345 	else
1346 		__clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, priv->hw->flags);
1347 
1348 	err = iwl_setup_interface(priv, ctx);
1349 	if (!err || reset)
1350 		goto out;
1351 
1352 	ctx->vif = NULL;
1353 	priv->iw_mode = NL80211_IFTYPE_STATION;
1354  out:
1355 	mutex_unlock(&priv->mutex);
1356 
1357 	IWL_DEBUG_MAC80211(priv, "leave\n");
1358 	return err;
1359 }
1360 
1361 static void iwl_teardown_interface(struct iwl_priv *priv,
1362 				   struct ieee80211_vif *vif,
1363 				   bool mode_change)
1364 {
1365 	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1366 
1367 	lockdep_assert_held(&priv->mutex);
1368 
1369 	if (priv->scan_vif == vif) {
1370 		iwl_scan_cancel_timeout(priv, 200);
1371 		iwl_force_scan_end(priv);
1372 	}
1373 
1374 	if (!mode_change) {
1375 		iwl_set_mode(priv, ctx);
1376 		if (!ctx->always_active)
1377 			ctx->is_active = false;
1378 	}
1379 
1380 	/*
1381 	 * When removing the IBSS interface, overwrite the
1382 	 * BT traffic load with the stored one from the last
1383 	 * notification, if any. If this is a device that
1384 	 * doesn't implement this, this has no effect since
1385 	 * both values are the same and zero.
1386 	 */
1387 	if (vif->type == NL80211_IFTYPE_ADHOC)
1388 		priv->bt_traffic_load = priv->last_bt_traffic_load;
1389 }
1390 
1391 static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw,
1392 			      struct ieee80211_vif *vif)
1393 {
1394 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1395 	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1396 
1397 	IWL_DEBUG_MAC80211(priv, "enter\n");
1398 
1399 	mutex_lock(&priv->mutex);
1400 
1401 	WARN_ON(ctx->vif != vif);
1402 	ctx->vif = NULL;
1403 
1404 	iwl_teardown_interface(priv, vif, false);
1405 
1406 	mutex_unlock(&priv->mutex);
1407 
1408 	IWL_DEBUG_MAC80211(priv, "leave\n");
1409 
1410 }
1411 
1412 static int iwlagn_mac_change_interface(struct ieee80211_hw *hw,
1413 				       struct ieee80211_vif *vif,
1414 				       enum nl80211_iftype newtype, bool newp2p)
1415 {
1416 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1417 	struct iwl_rxon_context *ctx, *tmp;
1418 	enum nl80211_iftype newviftype = newtype;
1419 	u32 interface_modes;
1420 	int err;
1421 
1422 	IWL_DEBUG_MAC80211(priv, "enter\n");
1423 
1424 	newtype = ieee80211_iftype_p2p(newtype, newp2p);
1425 
1426 	mutex_lock(&priv->mutex);
1427 
1428 	ctx = iwl_rxon_ctx_from_vif(vif);
1429 
1430 	/*
1431 	 * To simplify this code, only support changes on the
1432 	 * BSS context. The PAN context is usually reassigned
1433 	 * by creating/removing P2P interfaces anyway.
1434 	 */
1435 	if (ctx->ctxid != IWL_RXON_CTX_BSS) {
1436 		err = -EBUSY;
1437 		goto out;
1438 	}
1439 
1440 	if (!ctx->vif || !iwl_is_ready_rf(priv)) {
1441 		/*
1442 		 * Huh? But wait ... this can maybe happen when
1443 		 * we're in the middle of a firmware restart!
1444 		 */
1445 		err = -EBUSY;
1446 		goto out;
1447 	}
1448 
1449 	/* Check if the switch is supported in the same context */
1450 	interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes;
1451 	if (!(interface_modes & BIT(newtype))) {
1452 		err = -EBUSY;
1453 		goto out;
1454 	}
1455 
1456 	if (ctx->exclusive_interface_modes & BIT(newtype)) {
1457 		for_each_context(priv, tmp) {
1458 			if (ctx == tmp)
1459 				continue;
1460 
1461 			if (!tmp->is_active)
1462 				continue;
1463 
1464 			/*
1465 			 * The current mode switch would be exclusive, but
1466 			 * another context is active ... refuse the switch.
1467 			 */
1468 			err = -EBUSY;
1469 			goto out;
1470 		}
1471 	}
1472 
1473 	/* success */
1474 	iwl_teardown_interface(priv, vif, true);
1475 	vif->type = newviftype;
1476 	vif->p2p = newp2p;
1477 	err = iwl_setup_interface(priv, ctx);
1478 	WARN_ON(err);
1479 	/*
1480 	 * We've switched internally, but submitting to the
1481 	 * device may have failed for some reason. Mask this
1482 	 * error, because otherwise mac80211 will not switch
1483 	 * (and set the interface type back) and we'll be
1484 	 * out of sync with it.
1485 	 */
1486 	err = 0;
1487 
1488  out:
1489 	mutex_unlock(&priv->mutex);
1490 	IWL_DEBUG_MAC80211(priv, "leave\n");
1491 
1492 	return err;
1493 }
1494 
1495 static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw,
1496 			      struct ieee80211_vif *vif,
1497 			      struct ieee80211_scan_request *hw_req)
1498 {
1499 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1500 	struct cfg80211_scan_request *req = &hw_req->req;
1501 	int ret;
1502 
1503 	IWL_DEBUG_MAC80211(priv, "enter\n");
1504 
1505 	if (req->n_channels == 0)
1506 		return -EINVAL;
1507 
1508 	mutex_lock(&priv->mutex);
1509 
1510 	/*
1511 	 * If an internal scan is in progress, just set
1512 	 * up the scan_request as per above.
1513 	 */
1514 	if (priv->scan_type != IWL_SCAN_NORMAL) {
1515 		IWL_DEBUG_SCAN(priv,
1516 			       "SCAN request during internal scan - defer\n");
1517 		priv->scan_request = req;
1518 		priv->scan_vif = vif;
1519 		ret = 0;
1520 	} else {
1521 		priv->scan_request = req;
1522 		priv->scan_vif = vif;
1523 		/*
1524 		 * mac80211 will only ask for one band at a time
1525 		 * so using channels[0] here is ok
1526 		 */
1527 		ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL,
1528 					req->channels[0]->band);
1529 		if (ret) {
1530 			priv->scan_request = NULL;
1531 			priv->scan_vif = NULL;
1532 		}
1533 	}
1534 
1535 	IWL_DEBUG_MAC80211(priv, "leave\n");
1536 
1537 	mutex_unlock(&priv->mutex);
1538 
1539 	return ret;
1540 }
1541 
1542 static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id)
1543 {
1544 	struct iwl_addsta_cmd cmd = {
1545 		.mode = STA_CONTROL_MODIFY_MSK,
1546 		.station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1547 		.sta.sta_id = sta_id,
1548 	};
1549 
1550 	iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1551 }
1552 
1553 static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw,
1554 				  struct ieee80211_vif *vif,
1555 				  enum sta_notify_cmd cmd,
1556 				  struct ieee80211_sta *sta)
1557 {
1558 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1559 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
1560 	int sta_id;
1561 
1562 	IWL_DEBUG_MAC80211(priv, "enter\n");
1563 
1564 	switch (cmd) {
1565 	case STA_NOTIFY_SLEEP:
1566 		WARN_ON(!sta_priv->client);
1567 		sta_priv->asleep = true;
1568 		if (atomic_read(&sta_priv->pending_frames) > 0)
1569 			ieee80211_sta_block_awake(hw, sta, true);
1570 		break;
1571 	case STA_NOTIFY_AWAKE:
1572 		WARN_ON(!sta_priv->client);
1573 		if (!sta_priv->asleep)
1574 			break;
1575 		sta_priv->asleep = false;
1576 		sta_id = iwl_sta_id(sta);
1577 		if (sta_id != IWL_INVALID_STATION)
1578 			iwl_sta_modify_ps_wake(priv, sta_id);
1579 		break;
1580 	default:
1581 		break;
1582 	}
1583 	IWL_DEBUG_MAC80211(priv, "leave\n");
1584 }
1585 
1586 const struct ieee80211_ops iwlagn_hw_ops = {
1587 	.tx = iwlagn_mac_tx,
1588 	.start = iwlagn_mac_start,
1589 	.stop = iwlagn_mac_stop,
1590 #ifdef CONFIG_PM_SLEEP
1591 	.suspend = iwlagn_mac_suspend,
1592 	.resume = iwlagn_mac_resume,
1593 	.set_wakeup = iwlagn_mac_set_wakeup,
1594 #endif
1595 	.add_interface = iwlagn_mac_add_interface,
1596 	.remove_interface = iwlagn_mac_remove_interface,
1597 	.change_interface = iwlagn_mac_change_interface,
1598 	.config = iwlagn_mac_config,
1599 	.configure_filter = iwlagn_configure_filter,
1600 	.set_key = iwlagn_mac_set_key,
1601 	.update_tkip_key = iwlagn_mac_update_tkip_key,
1602 	.set_rekey_data = iwlagn_mac_set_rekey_data,
1603 	.conf_tx = iwlagn_mac_conf_tx,
1604 	.bss_info_changed = iwlagn_bss_info_changed,
1605 	.ampdu_action = iwlagn_mac_ampdu_action,
1606 	.hw_scan = iwlagn_mac_hw_scan,
1607 	.sta_notify = iwlagn_mac_sta_notify,
1608 	.sta_state = iwlagn_mac_sta_state,
1609 	.channel_switch = iwlagn_mac_channel_switch,
1610 	.flush = iwlagn_mac_flush,
1611 	.tx_last_beacon = iwlagn_mac_tx_last_beacon,
1612 	.event_callback = iwlagn_mac_event_callback,
1613 	.set_tim = iwlagn_mac_set_tim,
1614 };
1615 
1616 /* This function both allocates and initializes hw and priv. */
1617 struct ieee80211_hw *iwl_alloc_all(void)
1618 {
1619 	struct iwl_priv *priv;
1620 	struct iwl_op_mode *op_mode;
1621 	/* mac80211 allocates memory for this device instance, including
1622 	 *   space for this driver's private structure */
1623 	struct ieee80211_hw *hw;
1624 
1625 	hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) +
1626 				sizeof(struct iwl_op_mode), &iwlagn_hw_ops);
1627 	if (!hw)
1628 		goto out;
1629 
1630 	op_mode = hw->priv;
1631 	priv = IWL_OP_MODE_GET_DVM(op_mode);
1632 	priv->hw = hw;
1633 
1634 out:
1635 	return hw;
1636 }
1637