1 /****************************************************************************** 2 * 3 * This file is provided under a dual BSD/GPLv2 license. When using or 4 * redistributing this file, you may do so under either license. 5 * 6 * GPL LICENSE SUMMARY 7 * 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 9 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 10 * Copyright(c) 2016 - 2017 Intel Deutschland GmbH 11 * Copyright(c) 2018 - 2019 Intel Corporation 12 * 13 * This program is free software; you can redistribute it and/or modify 14 * it under the terms of version 2 of the GNU General Public License as 15 * published by the Free Software Foundation. 16 * 17 * This program is distributed in the hope that it will be useful, but 18 * WITHOUT ANY WARRANTY; without even the implied warranty of 19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 20 * General Public License for more details. 21 * 22 * The full GNU General Public License is included in this distribution 23 * in the file called COPYING. 24 * 25 * Contact Information: 26 * Intel Linux Wireless <linuxwifi@intel.com> 27 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 28 * 29 * BSD LICENSE 30 * 31 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 32 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 33 * Copyright(c) 2016 - 2017 Intel Deutschland GmbH 34 * Copyright(c) 2018 - 2019 Intel Corporation 35 * All rights reserved. 36 * 37 * Redistribution and use in source and binary forms, with or without 38 * modification, are permitted provided that the following conditions 39 * are met: 40 * 41 * * Redistributions of source code must retain the above copyright 42 * notice, this list of conditions and the following disclaimer. 43 * * Redistributions in binary form must reproduce the above copyright 44 * notice, this list of conditions and the following disclaimer in 45 * the documentation and/or other materials provided with the 46 * distribution. 47 * * Neither the name Intel Corporation nor the names of its 48 * contributors may be used to endorse or promote products derived 49 * from this software without specific prior written permission. 50 * 51 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 52 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 53 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 54 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 55 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 56 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 57 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 58 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 59 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 60 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 61 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 62 * 63 *****************************************************************************/ 64 65 #include <linux/etherdevice.h> 66 #include <linux/ip.h> 67 #include <linux/fs.h> 68 #include <net/cfg80211.h> 69 #include <net/ipv6.h> 70 #include <net/tcp.h> 71 #include <net/addrconf.h> 72 #include "iwl-modparams.h" 73 #include "fw-api.h" 74 #include "mvm.h" 75 76 void iwl_mvm_set_rekey_data(struct ieee80211_hw *hw, 77 struct ieee80211_vif *vif, 78 struct cfg80211_gtk_rekey_data *data) 79 { 80 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 81 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 82 83 if (iwlwifi_mod_params.swcrypto) 84 return; 85 86 mutex_lock(&mvm->mutex); 87 88 memcpy(mvmvif->rekey_data.kek, data->kek, NL80211_KEK_LEN); 89 memcpy(mvmvif->rekey_data.kck, data->kck, NL80211_KCK_LEN); 90 mvmvif->rekey_data.replay_ctr = 91 cpu_to_le64(be64_to_cpup((__be64 *)data->replay_ctr)); 92 mvmvif->rekey_data.valid = true; 93 94 mutex_unlock(&mvm->mutex); 95 } 96 97 #if IS_ENABLED(CONFIG_IPV6) 98 void iwl_mvm_ipv6_addr_change(struct ieee80211_hw *hw, 99 struct ieee80211_vif *vif, 100 struct inet6_dev *idev) 101 { 102 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 103 struct inet6_ifaddr *ifa; 104 int idx = 0; 105 106 memset(mvmvif->tentative_addrs, 0, sizeof(mvmvif->tentative_addrs)); 107 108 read_lock_bh(&idev->lock); 109 list_for_each_entry(ifa, &idev->addr_list, if_list) { 110 mvmvif->target_ipv6_addrs[idx] = ifa->addr; 111 if (ifa->flags & IFA_F_TENTATIVE) 112 __set_bit(idx, mvmvif->tentative_addrs); 113 idx++; 114 if (idx >= IWL_PROTO_OFFLOAD_NUM_IPV6_ADDRS_MAX) 115 break; 116 } 117 read_unlock_bh(&idev->lock); 118 119 mvmvif->num_target_ipv6_addrs = idx; 120 } 121 #endif 122 123 void iwl_mvm_set_default_unicast_key(struct ieee80211_hw *hw, 124 struct ieee80211_vif *vif, int idx) 125 { 126 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 127 128 mvmvif->tx_key_idx = idx; 129 } 130 131 static void iwl_mvm_convert_p1k(u16 *p1k, __le16 *out) 132 { 133 int i; 134 135 for (i = 0; i < IWL_P1K_SIZE; i++) 136 out[i] = cpu_to_le16(p1k[i]); 137 } 138 139 static const u8 *iwl_mvm_find_max_pn(struct ieee80211_key_conf *key, 140 struct iwl_mvm_key_pn *ptk_pn, 141 struct ieee80211_key_seq *seq, 142 int tid, int queues) 143 { 144 const u8 *ret = seq->ccmp.pn; 145 int i; 146 147 /* get the PN from mac80211, used on the default queue */ 148 ieee80211_get_key_rx_seq(key, tid, seq); 149 150 /* and use the internal data for the other queues */ 151 for (i = 1; i < queues; i++) { 152 const u8 *tmp = ptk_pn->q[i].pn[tid]; 153 154 if (memcmp(ret, tmp, IEEE80211_CCMP_PN_LEN) <= 0) 155 ret = tmp; 156 } 157 158 return ret; 159 } 160 161 struct wowlan_key_data { 162 struct iwl_wowlan_rsc_tsc_params_cmd *rsc_tsc; 163 struct iwl_wowlan_tkip_params_cmd *tkip; 164 bool error, use_rsc_tsc, use_tkip, configure_keys; 165 int wep_key_idx; 166 }; 167 168 static void iwl_mvm_wowlan_program_keys(struct ieee80211_hw *hw, 169 struct ieee80211_vif *vif, 170 struct ieee80211_sta *sta, 171 struct ieee80211_key_conf *key, 172 void *_data) 173 { 174 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 175 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 176 struct wowlan_key_data *data = _data; 177 struct aes_sc *aes_sc, *aes_tx_sc = NULL; 178 struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL; 179 struct iwl_p1k_cache *rx_p1ks; 180 u8 *rx_mic_key; 181 struct ieee80211_key_seq seq; 182 u32 cur_rx_iv32 = 0; 183 u16 p1k[IWL_P1K_SIZE]; 184 int ret, i; 185 186 switch (key->cipher) { 187 case WLAN_CIPHER_SUITE_WEP40: 188 case WLAN_CIPHER_SUITE_WEP104: { /* hack it for now */ 189 struct { 190 struct iwl_mvm_wep_key_cmd wep_key_cmd; 191 struct iwl_mvm_wep_key wep_key; 192 } __packed wkc = { 193 .wep_key_cmd.mac_id_n_color = 194 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 195 mvmvif->color)), 196 .wep_key_cmd.num_keys = 1, 197 /* firmware sets STA_KEY_FLG_WEP_13BYTES */ 198 .wep_key_cmd.decryption_type = STA_KEY_FLG_WEP, 199 .wep_key.key_index = key->keyidx, 200 .wep_key.key_size = key->keylen, 201 }; 202 203 /* 204 * This will fail -- the key functions don't set support 205 * pairwise WEP keys. However, that's better than silently 206 * failing WoWLAN. Or maybe not? 207 */ 208 if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) 209 break; 210 211 memcpy(&wkc.wep_key.key[3], key->key, key->keylen); 212 if (key->keyidx == mvmvif->tx_key_idx) { 213 /* TX key must be at offset 0 */ 214 wkc.wep_key.key_offset = 0; 215 } else { 216 /* others start at 1 */ 217 data->wep_key_idx++; 218 wkc.wep_key.key_offset = data->wep_key_idx; 219 } 220 221 if (data->configure_keys) { 222 mutex_lock(&mvm->mutex); 223 ret = iwl_mvm_send_cmd_pdu(mvm, WEP_KEY, 0, 224 sizeof(wkc), &wkc); 225 data->error = ret != 0; 226 227 mvm->ptk_ivlen = key->iv_len; 228 mvm->ptk_icvlen = key->icv_len; 229 mvm->gtk_ivlen = key->iv_len; 230 mvm->gtk_icvlen = key->icv_len; 231 mutex_unlock(&mvm->mutex); 232 } 233 234 /* don't upload key again */ 235 return; 236 } 237 default: 238 data->error = true; 239 return; 240 case WLAN_CIPHER_SUITE_AES_CMAC: 241 /* 242 * Ignore CMAC keys -- the WoWLAN firmware doesn't support them 243 * but we also shouldn't abort suspend due to that. It does have 244 * support for the IGTK key renewal, but doesn't really use the 245 * IGTK for anything. This means we could spuriously wake up or 246 * be deauthenticated, but that was considered acceptable. 247 */ 248 return; 249 case WLAN_CIPHER_SUITE_TKIP: 250 if (sta) { 251 u64 pn64; 252 253 tkip_sc = data->rsc_tsc->all_tsc_rsc.tkip.unicast_rsc; 254 tkip_tx_sc = &data->rsc_tsc->all_tsc_rsc.tkip.tsc; 255 256 rx_p1ks = data->tkip->rx_uni; 257 258 pn64 = atomic64_read(&key->tx_pn); 259 tkip_tx_sc->iv16 = cpu_to_le16(TKIP_PN_TO_IV16(pn64)); 260 tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64)); 261 262 ieee80211_get_tkip_p1k_iv(key, TKIP_PN_TO_IV32(pn64), 263 p1k); 264 iwl_mvm_convert_p1k(p1k, data->tkip->tx.p1k); 265 266 memcpy(data->tkip->mic_keys.tx, 267 &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY], 268 IWL_MIC_KEY_SIZE); 269 270 rx_mic_key = data->tkip->mic_keys.rx_unicast; 271 } else { 272 tkip_sc = 273 data->rsc_tsc->all_tsc_rsc.tkip.multicast_rsc; 274 rx_p1ks = data->tkip->rx_multi; 275 rx_mic_key = data->tkip->mic_keys.rx_mcast; 276 } 277 278 /* 279 * For non-QoS this relies on the fact that both the uCode and 280 * mac80211 use TID 0 (as they need to to avoid replay attacks) 281 * for checking the IV in the frames. 282 */ 283 for (i = 0; i < IWL_NUM_RSC; i++) { 284 ieee80211_get_key_rx_seq(key, i, &seq); 285 tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16); 286 tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32); 287 /* wrapping isn't allowed, AP must rekey */ 288 if (seq.tkip.iv32 > cur_rx_iv32) 289 cur_rx_iv32 = seq.tkip.iv32; 290 } 291 292 ieee80211_get_tkip_rx_p1k(key, vif->bss_conf.bssid, 293 cur_rx_iv32, p1k); 294 iwl_mvm_convert_p1k(p1k, rx_p1ks[0].p1k); 295 ieee80211_get_tkip_rx_p1k(key, vif->bss_conf.bssid, 296 cur_rx_iv32 + 1, p1k); 297 iwl_mvm_convert_p1k(p1k, rx_p1ks[1].p1k); 298 299 memcpy(rx_mic_key, 300 &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY], 301 IWL_MIC_KEY_SIZE); 302 303 data->use_tkip = true; 304 data->use_rsc_tsc = true; 305 break; 306 case WLAN_CIPHER_SUITE_CCMP: 307 if (sta) { 308 u64 pn64; 309 310 aes_sc = data->rsc_tsc->all_tsc_rsc.aes.unicast_rsc; 311 aes_tx_sc = &data->rsc_tsc->all_tsc_rsc.aes.tsc; 312 313 pn64 = atomic64_read(&key->tx_pn); 314 aes_tx_sc->pn = cpu_to_le64(pn64); 315 } else { 316 aes_sc = data->rsc_tsc->all_tsc_rsc.aes.multicast_rsc; 317 } 318 319 /* 320 * For non-QoS this relies on the fact that both the uCode and 321 * mac80211/our RX code use TID 0 for checking the PN. 322 */ 323 if (sta && iwl_mvm_has_new_rx_api(mvm)) { 324 struct iwl_mvm_sta *mvmsta; 325 struct iwl_mvm_key_pn *ptk_pn; 326 const u8 *pn; 327 328 mvmsta = iwl_mvm_sta_from_mac80211(sta); 329 ptk_pn = rcu_dereference_protected( 330 mvmsta->ptk_pn[key->keyidx], 331 lockdep_is_held(&mvm->mutex)); 332 if (WARN_ON(!ptk_pn)) 333 break; 334 335 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 336 pn = iwl_mvm_find_max_pn(key, ptk_pn, &seq, i, 337 mvm->trans->num_rx_queues); 338 aes_sc[i].pn = cpu_to_le64((u64)pn[5] | 339 ((u64)pn[4] << 8) | 340 ((u64)pn[3] << 16) | 341 ((u64)pn[2] << 24) | 342 ((u64)pn[1] << 32) | 343 ((u64)pn[0] << 40)); 344 } 345 } else { 346 for (i = 0; i < IWL_NUM_RSC; i++) { 347 u8 *pn = seq.ccmp.pn; 348 349 ieee80211_get_key_rx_seq(key, i, &seq); 350 aes_sc[i].pn = cpu_to_le64((u64)pn[5] | 351 ((u64)pn[4] << 8) | 352 ((u64)pn[3] << 16) | 353 ((u64)pn[2] << 24) | 354 ((u64)pn[1] << 32) | 355 ((u64)pn[0] << 40)); 356 } 357 } 358 data->use_rsc_tsc = true; 359 break; 360 } 361 362 if (data->configure_keys) { 363 mutex_lock(&mvm->mutex); 364 /* 365 * The D3 firmware hardcodes the key offset 0 as the key it 366 * uses to transmit packets to the AP, i.e. the PTK. 367 */ 368 if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) { 369 mvm->ptk_ivlen = key->iv_len; 370 mvm->ptk_icvlen = key->icv_len; 371 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, 0); 372 } else { 373 /* 374 * firmware only supports TSC/RSC for a single key, 375 * so if there are multiple keep overwriting them 376 * with new ones -- this relies on mac80211 doing 377 * list_add_tail(). 378 */ 379 mvm->gtk_ivlen = key->iv_len; 380 mvm->gtk_icvlen = key->icv_len; 381 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, 1); 382 } 383 mutex_unlock(&mvm->mutex); 384 data->error = ret != 0; 385 } 386 } 387 388 static int iwl_mvm_send_patterns_v1(struct iwl_mvm *mvm, 389 struct cfg80211_wowlan *wowlan) 390 { 391 struct iwl_wowlan_patterns_cmd_v1 *pattern_cmd; 392 struct iwl_host_cmd cmd = { 393 .id = WOWLAN_PATTERNS, 394 .dataflags[0] = IWL_HCMD_DFL_NOCOPY, 395 }; 396 int i, err; 397 398 if (!wowlan->n_patterns) 399 return 0; 400 401 cmd.len[0] = struct_size(pattern_cmd, patterns, wowlan->n_patterns); 402 403 pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL); 404 if (!pattern_cmd) 405 return -ENOMEM; 406 407 pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns); 408 409 for (i = 0; i < wowlan->n_patterns; i++) { 410 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8); 411 412 memcpy(&pattern_cmd->patterns[i].mask, 413 wowlan->patterns[i].mask, mask_len); 414 memcpy(&pattern_cmd->patterns[i].pattern, 415 wowlan->patterns[i].pattern, 416 wowlan->patterns[i].pattern_len); 417 pattern_cmd->patterns[i].mask_size = mask_len; 418 pattern_cmd->patterns[i].pattern_size = 419 wowlan->patterns[i].pattern_len; 420 } 421 422 cmd.data[0] = pattern_cmd; 423 err = iwl_mvm_send_cmd(mvm, &cmd); 424 kfree(pattern_cmd); 425 return err; 426 } 427 428 static int iwl_mvm_send_patterns(struct iwl_mvm *mvm, 429 struct cfg80211_wowlan *wowlan) 430 { 431 struct iwl_wowlan_patterns_cmd *pattern_cmd; 432 struct iwl_host_cmd cmd = { 433 .id = WOWLAN_PATTERNS, 434 .dataflags[0] = IWL_HCMD_DFL_NOCOPY, 435 }; 436 int i, err; 437 438 if (!wowlan->n_patterns) 439 return 0; 440 441 cmd.len[0] = sizeof(*pattern_cmd) + 442 wowlan->n_patterns * sizeof(struct iwl_wowlan_pattern_v2); 443 444 pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL); 445 if (!pattern_cmd) 446 return -ENOMEM; 447 448 pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns); 449 450 for (i = 0; i < wowlan->n_patterns; i++) { 451 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8); 452 453 pattern_cmd->patterns[i].pattern_type = 454 WOWLAN_PATTERN_TYPE_BITMASK; 455 456 memcpy(&pattern_cmd->patterns[i].u.bitmask.mask, 457 wowlan->patterns[i].mask, mask_len); 458 memcpy(&pattern_cmd->patterns[i].u.bitmask.pattern, 459 wowlan->patterns[i].pattern, 460 wowlan->patterns[i].pattern_len); 461 pattern_cmd->patterns[i].u.bitmask.mask_size = mask_len; 462 pattern_cmd->patterns[i].u.bitmask.pattern_size = 463 wowlan->patterns[i].pattern_len; 464 } 465 466 cmd.data[0] = pattern_cmd; 467 err = iwl_mvm_send_cmd(mvm, &cmd); 468 kfree(pattern_cmd); 469 return err; 470 } 471 472 static int iwl_mvm_d3_reprogram(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 473 struct ieee80211_sta *ap_sta) 474 { 475 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 476 struct ieee80211_chanctx_conf *ctx; 477 u8 chains_static, chains_dynamic; 478 struct cfg80211_chan_def chandef; 479 int ret, i; 480 struct iwl_binding_cmd_v1 binding_cmd = {}; 481 struct iwl_time_quota_cmd quota_cmd = {}; 482 struct iwl_time_quota_data *quota; 483 u32 status; 484 485 if (WARN_ON_ONCE(iwl_mvm_is_cdb_supported(mvm))) 486 return -EINVAL; 487 488 /* add back the PHY */ 489 if (WARN_ON(!mvmvif->phy_ctxt)) 490 return -EINVAL; 491 492 rcu_read_lock(); 493 ctx = rcu_dereference(vif->chanctx_conf); 494 if (WARN_ON(!ctx)) { 495 rcu_read_unlock(); 496 return -EINVAL; 497 } 498 chandef = ctx->def; 499 chains_static = ctx->rx_chains_static; 500 chains_dynamic = ctx->rx_chains_dynamic; 501 rcu_read_unlock(); 502 503 ret = iwl_mvm_phy_ctxt_add(mvm, mvmvif->phy_ctxt, &chandef, 504 chains_static, chains_dynamic); 505 if (ret) 506 return ret; 507 508 /* add back the MAC */ 509 mvmvif->uploaded = false; 510 511 if (WARN_ON(!vif->bss_conf.assoc)) 512 return -EINVAL; 513 514 ret = iwl_mvm_mac_ctxt_add(mvm, vif); 515 if (ret) 516 return ret; 517 518 /* add back binding - XXX refactor? */ 519 binding_cmd.id_and_color = 520 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->phy_ctxt->id, 521 mvmvif->phy_ctxt->color)); 522 binding_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 523 binding_cmd.phy = 524 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->phy_ctxt->id, 525 mvmvif->phy_ctxt->color)); 526 binding_cmd.macs[0] = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 527 mvmvif->color)); 528 for (i = 1; i < MAX_MACS_IN_BINDING; i++) 529 binding_cmd.macs[i] = cpu_to_le32(FW_CTXT_INVALID); 530 531 status = 0; 532 ret = iwl_mvm_send_cmd_pdu_status(mvm, BINDING_CONTEXT_CMD, 533 IWL_BINDING_CMD_SIZE_V1, &binding_cmd, 534 &status); 535 if (ret) { 536 IWL_ERR(mvm, "Failed to add binding: %d\n", ret); 537 return ret; 538 } 539 540 if (status) { 541 IWL_ERR(mvm, "Binding command failed: %u\n", status); 542 return -EIO; 543 } 544 545 ret = iwl_mvm_sta_send_to_fw(mvm, ap_sta, false, 0); 546 if (ret) 547 return ret; 548 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvmvif->ap_sta_id], ap_sta); 549 550 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 551 if (ret) 552 return ret; 553 554 /* and some quota */ 555 quota = iwl_mvm_quota_cmd_get_quota(mvm, "a_cmd, 0); 556 quota->id_and_color = 557 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->phy_ctxt->id, 558 mvmvif->phy_ctxt->color)); 559 quota->quota = cpu_to_le32(IWL_MVM_MAX_QUOTA); 560 quota->max_duration = cpu_to_le32(IWL_MVM_MAX_QUOTA); 561 562 for (i = 1; i < MAX_BINDINGS; i++) { 563 quota = iwl_mvm_quota_cmd_get_quota(mvm, "a_cmd, i); 564 quota->id_and_color = cpu_to_le32(FW_CTXT_INVALID); 565 } 566 567 ret = iwl_mvm_send_cmd_pdu(mvm, TIME_QUOTA_CMD, 0, 568 iwl_mvm_quota_cmd_size(mvm), "a_cmd); 569 if (ret) 570 IWL_ERR(mvm, "Failed to send quota: %d\n", ret); 571 572 if (iwl_mvm_is_lar_supported(mvm) && iwl_mvm_init_fw_regd(mvm)) 573 IWL_ERR(mvm, "Failed to initialize D3 LAR information\n"); 574 575 return 0; 576 } 577 578 static int iwl_mvm_get_last_nonqos_seq(struct iwl_mvm *mvm, 579 struct ieee80211_vif *vif) 580 { 581 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 582 struct iwl_nonqos_seq_query_cmd query_cmd = { 583 .get_set_flag = cpu_to_le32(IWL_NONQOS_SEQ_GET), 584 .mac_id_n_color = 585 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 586 mvmvif->color)), 587 }; 588 struct iwl_host_cmd cmd = { 589 .id = NON_QOS_TX_COUNTER_CMD, 590 .flags = CMD_WANT_SKB, 591 }; 592 int err; 593 u32 size; 594 595 cmd.data[0] = &query_cmd; 596 cmd.len[0] = sizeof(query_cmd); 597 598 err = iwl_mvm_send_cmd(mvm, &cmd); 599 if (err) 600 return err; 601 602 size = iwl_rx_packet_payload_len(cmd.resp_pkt); 603 if (size < sizeof(__le16)) { 604 err = -EINVAL; 605 } else { 606 err = le16_to_cpup((__le16 *)cmd.resp_pkt->data); 607 /* firmware returns next, not last-used seqno */ 608 err = (u16) (err - 0x10); 609 } 610 611 iwl_free_resp(&cmd); 612 return err; 613 } 614 615 void iwl_mvm_set_last_nonqos_seq(struct iwl_mvm *mvm, struct ieee80211_vif *vif) 616 { 617 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 618 struct iwl_nonqos_seq_query_cmd query_cmd = { 619 .get_set_flag = cpu_to_le32(IWL_NONQOS_SEQ_SET), 620 .mac_id_n_color = 621 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 622 mvmvif->color)), 623 .value = cpu_to_le16(mvmvif->seqno), 624 }; 625 626 /* return if called during restart, not resume from D3 */ 627 if (!mvmvif->seqno_valid) 628 return; 629 630 mvmvif->seqno_valid = false; 631 632 if (iwl_mvm_send_cmd_pdu(mvm, NON_QOS_TX_COUNTER_CMD, 0, 633 sizeof(query_cmd), &query_cmd)) 634 IWL_ERR(mvm, "failed to set non-QoS seqno\n"); 635 } 636 637 static int iwl_mvm_switch_to_d3(struct iwl_mvm *mvm) 638 { 639 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true); 640 641 iwl_mvm_stop_device(mvm); 642 /* 643 * Set the HW restart bit -- this is mostly true as we're 644 * going to load new firmware and reprogram that, though 645 * the reprogramming is going to be manual to avoid adding 646 * all the MACs that aren't support. 647 * We don't have to clear up everything though because the 648 * reprogramming is manual. When we resume, we'll actually 649 * go through a proper restart sequence again to switch 650 * back to the runtime firmware image. 651 */ 652 set_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 653 654 /* the fw is reset, so all the keys are cleared */ 655 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table)); 656 657 mvm->ptk_ivlen = 0; 658 mvm->ptk_icvlen = 0; 659 mvm->ptk_ivlen = 0; 660 mvm->ptk_icvlen = 0; 661 662 return iwl_mvm_load_d3_fw(mvm); 663 } 664 665 static int 666 iwl_mvm_get_wowlan_config(struct iwl_mvm *mvm, 667 struct cfg80211_wowlan *wowlan, 668 struct iwl_wowlan_config_cmd *wowlan_config_cmd, 669 struct ieee80211_vif *vif, struct iwl_mvm_vif *mvmvif, 670 struct ieee80211_sta *ap_sta) 671 { 672 int ret; 673 struct iwl_mvm_sta *mvm_ap_sta = iwl_mvm_sta_from_mac80211(ap_sta); 674 675 /* TODO: wowlan_config_cmd->wowlan_ba_teardown_tids */ 676 677 wowlan_config_cmd->is_11n_connection = 678 ap_sta->ht_cap.ht_supported; 679 wowlan_config_cmd->flags = ENABLE_L3_FILTERING | 680 ENABLE_NBNS_FILTERING | ENABLE_DHCP_FILTERING; 681 682 /* Query the last used seqno and set it */ 683 ret = iwl_mvm_get_last_nonqos_seq(mvm, vif); 684 if (ret < 0) 685 return ret; 686 687 wowlan_config_cmd->non_qos_seq = cpu_to_le16(ret); 688 689 iwl_mvm_set_wowlan_qos_seq(mvm_ap_sta, wowlan_config_cmd); 690 691 if (wowlan->disconnect) 692 wowlan_config_cmd->wakeup_filter |= 693 cpu_to_le32(IWL_WOWLAN_WAKEUP_BEACON_MISS | 694 IWL_WOWLAN_WAKEUP_LINK_CHANGE); 695 if (wowlan->magic_pkt) 696 wowlan_config_cmd->wakeup_filter |= 697 cpu_to_le32(IWL_WOWLAN_WAKEUP_MAGIC_PACKET); 698 if (wowlan->gtk_rekey_failure) 699 wowlan_config_cmd->wakeup_filter |= 700 cpu_to_le32(IWL_WOWLAN_WAKEUP_GTK_REKEY_FAIL); 701 if (wowlan->eap_identity_req) 702 wowlan_config_cmd->wakeup_filter |= 703 cpu_to_le32(IWL_WOWLAN_WAKEUP_EAP_IDENT_REQ); 704 if (wowlan->four_way_handshake) 705 wowlan_config_cmd->wakeup_filter |= 706 cpu_to_le32(IWL_WOWLAN_WAKEUP_4WAY_HANDSHAKE); 707 if (wowlan->n_patterns) 708 wowlan_config_cmd->wakeup_filter |= 709 cpu_to_le32(IWL_WOWLAN_WAKEUP_PATTERN_MATCH); 710 711 if (wowlan->rfkill_release) 712 wowlan_config_cmd->wakeup_filter |= 713 cpu_to_le32(IWL_WOWLAN_WAKEUP_RF_KILL_DEASSERT); 714 715 if (wowlan->tcp) { 716 /* 717 * Set the "link change" (really "link lost") flag as well 718 * since that implies losing the TCP connection. 719 */ 720 wowlan_config_cmd->wakeup_filter |= 721 cpu_to_le32(IWL_WOWLAN_WAKEUP_REMOTE_LINK_LOSS | 722 IWL_WOWLAN_WAKEUP_REMOTE_SIGNATURE_TABLE | 723 IWL_WOWLAN_WAKEUP_REMOTE_WAKEUP_PACKET | 724 IWL_WOWLAN_WAKEUP_LINK_CHANGE); 725 } 726 727 if (wowlan->any) { 728 wowlan_config_cmd->wakeup_filter |= 729 cpu_to_le32(IWL_WOWLAN_WAKEUP_BEACON_MISS | 730 IWL_WOWLAN_WAKEUP_LINK_CHANGE | 731 IWL_WOWLAN_WAKEUP_RX_FRAME | 732 IWL_WOWLAN_WAKEUP_BCN_FILTERING); 733 } 734 735 return 0; 736 } 737 738 static int iwl_mvm_wowlan_config_key_params(struct iwl_mvm *mvm, 739 struct ieee80211_vif *vif, 740 u32 cmd_flags) 741 { 742 struct iwl_wowlan_kek_kck_material_cmd kek_kck_cmd = {}; 743 struct iwl_wowlan_tkip_params_cmd tkip_cmd = {}; 744 bool unified = fw_has_capa(&mvm->fw->ucode_capa, 745 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 746 struct wowlan_key_data key_data = { 747 .configure_keys = !unified, 748 .use_rsc_tsc = false, 749 .tkip = &tkip_cmd, 750 .use_tkip = false, 751 }; 752 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 753 int ret; 754 755 key_data.rsc_tsc = kzalloc(sizeof(*key_data.rsc_tsc), GFP_KERNEL); 756 if (!key_data.rsc_tsc) 757 return -ENOMEM; 758 759 /* 760 * if we have to configure keys, call ieee80211_iter_keys(), 761 * as we need non-atomic context in order to take the 762 * required locks. 763 */ 764 /* 765 * Note that currently we don't propagate cmd_flags 766 * to the iterator. In case of key_data.configure_keys, 767 * all the configured commands are SYNC, and 768 * iwl_mvm_wowlan_program_keys() will take care of 769 * locking/unlocking mvm->mutex. 770 */ 771 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_wowlan_program_keys, 772 &key_data); 773 774 if (key_data.error) { 775 ret = -EIO; 776 goto out; 777 } 778 779 if (key_data.use_rsc_tsc) { 780 ret = iwl_mvm_send_cmd_pdu(mvm, 781 WOWLAN_TSC_RSC_PARAM, cmd_flags, 782 sizeof(*key_data.rsc_tsc), 783 key_data.rsc_tsc); 784 if (ret) 785 goto out; 786 } 787 788 if (key_data.use_tkip && 789 !fw_has_api(&mvm->fw->ucode_capa, 790 IWL_UCODE_TLV_API_TKIP_MIC_KEYS)) { 791 ret = iwl_mvm_send_cmd_pdu(mvm, 792 WOWLAN_TKIP_PARAM, 793 cmd_flags, sizeof(tkip_cmd), 794 &tkip_cmd); 795 if (ret) 796 goto out; 797 } 798 799 /* configure rekey data only if offloaded rekey is supported (d3) */ 800 if (mvmvif->rekey_data.valid) { 801 memset(&kek_kck_cmd, 0, sizeof(kek_kck_cmd)); 802 memcpy(kek_kck_cmd.kck, mvmvif->rekey_data.kck, 803 NL80211_KCK_LEN); 804 kek_kck_cmd.kck_len = cpu_to_le16(NL80211_KCK_LEN); 805 memcpy(kek_kck_cmd.kek, mvmvif->rekey_data.kek, 806 NL80211_KEK_LEN); 807 kek_kck_cmd.kek_len = cpu_to_le16(NL80211_KEK_LEN); 808 kek_kck_cmd.replay_ctr = mvmvif->rekey_data.replay_ctr; 809 810 ret = iwl_mvm_send_cmd_pdu(mvm, 811 WOWLAN_KEK_KCK_MATERIAL, cmd_flags, 812 sizeof(kek_kck_cmd), 813 &kek_kck_cmd); 814 if (ret) 815 goto out; 816 } 817 ret = 0; 818 out: 819 kfree(key_data.rsc_tsc); 820 return ret; 821 } 822 823 static int 824 iwl_mvm_wowlan_config(struct iwl_mvm *mvm, 825 struct cfg80211_wowlan *wowlan, 826 struct iwl_wowlan_config_cmd *wowlan_config_cmd, 827 struct ieee80211_vif *vif, struct iwl_mvm_vif *mvmvif, 828 struct ieee80211_sta *ap_sta) 829 { 830 int ret; 831 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 832 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 833 834 mvm->offload_tid = wowlan_config_cmd->offloading_tid; 835 836 if (!unified_image) { 837 ret = iwl_mvm_switch_to_d3(mvm); 838 if (ret) 839 return ret; 840 841 ret = iwl_mvm_d3_reprogram(mvm, vif, ap_sta); 842 if (ret) 843 return ret; 844 } 845 846 if (!iwlwifi_mod_params.swcrypto) { 847 /* 848 * This needs to be unlocked due to lock ordering 849 * constraints. Since we're in the suspend path 850 * that isn't really a problem though. 851 */ 852 mutex_unlock(&mvm->mutex); 853 ret = iwl_mvm_wowlan_config_key_params(mvm, vif, CMD_ASYNC); 854 mutex_lock(&mvm->mutex); 855 if (ret) 856 return ret; 857 } 858 859 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_CONFIGURATION, 0, 860 sizeof(*wowlan_config_cmd), 861 wowlan_config_cmd); 862 if (ret) 863 return ret; 864 865 if (fw_has_api(&mvm->fw->ucode_capa, 866 IWL_UCODE_TLV_API_WOWLAN_TCP_SYN_WAKE)) 867 ret = iwl_mvm_send_patterns(mvm, wowlan); 868 else 869 ret = iwl_mvm_send_patterns_v1(mvm, wowlan); 870 if (ret) 871 return ret; 872 873 return iwl_mvm_send_proto_offload(mvm, vif, false, true, 0); 874 } 875 876 static int 877 iwl_mvm_netdetect_config(struct iwl_mvm *mvm, 878 struct cfg80211_wowlan *wowlan, 879 struct cfg80211_sched_scan_request *nd_config, 880 struct ieee80211_vif *vif) 881 { 882 struct iwl_wowlan_config_cmd wowlan_config_cmd = {}; 883 int ret; 884 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 885 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 886 887 if (!unified_image) { 888 ret = iwl_mvm_switch_to_d3(mvm); 889 if (ret) 890 return ret; 891 } else { 892 /* In theory, we wouldn't have to stop a running sched 893 * scan in order to start another one (for 894 * net-detect). But in practice this doesn't seem to 895 * work properly, so stop any running sched_scan now. 896 */ 897 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true); 898 if (ret) 899 return ret; 900 } 901 902 /* rfkill release can be either for wowlan or netdetect */ 903 if (wowlan->rfkill_release) 904 wowlan_config_cmd.wakeup_filter |= 905 cpu_to_le32(IWL_WOWLAN_WAKEUP_RF_KILL_DEASSERT); 906 907 wowlan_config_cmd.sta_id = mvm->aux_sta.sta_id; 908 909 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_CONFIGURATION, 0, 910 sizeof(wowlan_config_cmd), 911 &wowlan_config_cmd); 912 if (ret) 913 return ret; 914 915 ret = iwl_mvm_sched_scan_start(mvm, vif, nd_config, &mvm->nd_ies, 916 IWL_MVM_SCAN_NETDETECT); 917 if (ret) 918 return ret; 919 920 if (WARN_ON(mvm->nd_match_sets || mvm->nd_channels)) 921 return -EBUSY; 922 923 /* save the sched scan matchsets... */ 924 if (nd_config->n_match_sets) { 925 mvm->nd_match_sets = kmemdup(nd_config->match_sets, 926 sizeof(*nd_config->match_sets) * 927 nd_config->n_match_sets, 928 GFP_KERNEL); 929 if (mvm->nd_match_sets) 930 mvm->n_nd_match_sets = nd_config->n_match_sets; 931 } 932 933 /* ...and the sched scan channels for later reporting */ 934 mvm->nd_channels = kmemdup(nd_config->channels, 935 sizeof(*nd_config->channels) * 936 nd_config->n_channels, 937 GFP_KERNEL); 938 if (mvm->nd_channels) 939 mvm->n_nd_channels = nd_config->n_channels; 940 941 return 0; 942 } 943 944 static void iwl_mvm_free_nd(struct iwl_mvm *mvm) 945 { 946 kfree(mvm->nd_match_sets); 947 mvm->nd_match_sets = NULL; 948 mvm->n_nd_match_sets = 0; 949 kfree(mvm->nd_channels); 950 mvm->nd_channels = NULL; 951 mvm->n_nd_channels = 0; 952 } 953 954 static int __iwl_mvm_suspend(struct ieee80211_hw *hw, 955 struct cfg80211_wowlan *wowlan, 956 bool test) 957 { 958 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 959 struct ieee80211_vif *vif = NULL; 960 struct iwl_mvm_vif *mvmvif = NULL; 961 struct ieee80211_sta *ap_sta = NULL; 962 struct iwl_d3_manager_config d3_cfg_cmd_data = { 963 /* 964 * Program the minimum sleep time to 10 seconds, as many 965 * platforms have issues processing a wakeup signal while 966 * still being in the process of suspending. 967 */ 968 .min_sleep_time = cpu_to_le32(10 * 1000 * 1000), 969 }; 970 struct iwl_host_cmd d3_cfg_cmd = { 971 .id = D3_CONFIG_CMD, 972 .flags = CMD_WANT_SKB, 973 .data[0] = &d3_cfg_cmd_data, 974 .len[0] = sizeof(d3_cfg_cmd_data), 975 }; 976 int ret; 977 int len __maybe_unused; 978 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 979 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 980 981 if (!wowlan) { 982 /* 983 * mac80211 shouldn't get here, but for D3 test 984 * it doesn't warrant a warning 985 */ 986 WARN_ON(!test); 987 return -EINVAL; 988 } 989 990 mutex_lock(&mvm->mutex); 991 992 set_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 993 994 vif = iwl_mvm_get_bss_vif(mvm); 995 if (IS_ERR_OR_NULL(vif)) { 996 ret = 1; 997 goto out_noreset; 998 } 999 1000 mvmvif = iwl_mvm_vif_from_mac80211(vif); 1001 1002 if (mvmvif->ap_sta_id == IWL_MVM_INVALID_STA) { 1003 /* if we're not associated, this must be netdetect */ 1004 if (!wowlan->nd_config) { 1005 ret = 1; 1006 goto out_noreset; 1007 } 1008 1009 ret = iwl_mvm_netdetect_config( 1010 mvm, wowlan, wowlan->nd_config, vif); 1011 if (ret) 1012 goto out; 1013 1014 mvm->net_detect = true; 1015 } else { 1016 struct iwl_wowlan_config_cmd wowlan_config_cmd = {}; 1017 1018 wowlan_config_cmd.sta_id = mvmvif->ap_sta_id; 1019 1020 ap_sta = rcu_dereference_protected( 1021 mvm->fw_id_to_mac_id[mvmvif->ap_sta_id], 1022 lockdep_is_held(&mvm->mutex)); 1023 if (IS_ERR_OR_NULL(ap_sta)) { 1024 ret = -EINVAL; 1025 goto out_noreset; 1026 } 1027 1028 ret = iwl_mvm_get_wowlan_config(mvm, wowlan, &wowlan_config_cmd, 1029 vif, mvmvif, ap_sta); 1030 if (ret) 1031 goto out_noreset; 1032 ret = iwl_mvm_wowlan_config(mvm, wowlan, &wowlan_config_cmd, 1033 vif, mvmvif, ap_sta); 1034 if (ret) 1035 goto out; 1036 1037 mvm->net_detect = false; 1038 } 1039 1040 ret = iwl_mvm_power_update_device(mvm); 1041 if (ret) 1042 goto out; 1043 1044 ret = iwl_mvm_power_update_mac(mvm); 1045 if (ret) 1046 goto out; 1047 1048 #ifdef CONFIG_IWLWIFI_DEBUGFS 1049 if (mvm->d3_wake_sysassert) 1050 d3_cfg_cmd_data.wakeup_flags |= 1051 cpu_to_le32(IWL_WAKEUP_D3_CONFIG_FW_ERROR); 1052 #endif 1053 1054 /* 1055 * Prior to 9000 device family the driver needs to stop the dbg 1056 * recording before entering D3. In later devices the FW stops the 1057 * recording automatically. 1058 */ 1059 if (mvm->trans->trans_cfg->device_family < IWL_DEVICE_FAMILY_9000) 1060 iwl_fw_dbg_stop_restart_recording(&mvm->fwrt, NULL, true); 1061 1062 /* must be last -- this switches firmware state */ 1063 ret = iwl_mvm_send_cmd(mvm, &d3_cfg_cmd); 1064 if (ret) 1065 goto out; 1066 #ifdef CONFIG_IWLWIFI_DEBUGFS 1067 len = iwl_rx_packet_payload_len(d3_cfg_cmd.resp_pkt); 1068 if (len >= sizeof(u32)) { 1069 mvm->d3_test_pme_ptr = 1070 le32_to_cpup((__le32 *)d3_cfg_cmd.resp_pkt->data); 1071 } 1072 #endif 1073 iwl_free_resp(&d3_cfg_cmd); 1074 1075 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 1076 1077 ret = iwl_trans_d3_suspend(mvm->trans, test, !unified_image); 1078 out: 1079 if (ret < 0) { 1080 iwl_mvm_free_nd(mvm); 1081 1082 if (!unified_image) { 1083 if (mvm->fw_restart > 0) { 1084 mvm->fw_restart--; 1085 ieee80211_restart_hw(mvm->hw); 1086 } 1087 } 1088 1089 clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 1090 } 1091 out_noreset: 1092 mutex_unlock(&mvm->mutex); 1093 1094 return ret; 1095 } 1096 1097 int iwl_mvm_suspend(struct ieee80211_hw *hw, struct cfg80211_wowlan *wowlan) 1098 { 1099 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1100 struct iwl_trans *trans = mvm->trans; 1101 int ret; 1102 1103 iwl_mvm_pause_tcm(mvm, true); 1104 1105 iwl_fw_runtime_suspend(&mvm->fwrt); 1106 1107 ret = iwl_trans_suspend(trans); 1108 if (ret) 1109 return ret; 1110 1111 trans->system_pm_mode = IWL_PLAT_PM_MODE_D3; 1112 1113 return __iwl_mvm_suspend(hw, wowlan, false); 1114 } 1115 1116 /* converted data from the different status responses */ 1117 struct iwl_wowlan_status_data { 1118 u16 pattern_number; 1119 u16 qos_seq_ctr[8]; 1120 u32 wakeup_reasons; 1121 u32 wake_packet_length; 1122 u32 wake_packet_bufsize; 1123 const u8 *wake_packet; 1124 }; 1125 1126 static void iwl_mvm_report_wakeup_reasons(struct iwl_mvm *mvm, 1127 struct ieee80211_vif *vif, 1128 struct iwl_wowlan_status_data *status) 1129 { 1130 struct sk_buff *pkt = NULL; 1131 struct cfg80211_wowlan_wakeup wakeup = { 1132 .pattern_idx = -1, 1133 }; 1134 struct cfg80211_wowlan_wakeup *wakeup_report = &wakeup; 1135 u32 reasons = status->wakeup_reasons; 1136 1137 if (reasons == IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) { 1138 wakeup_report = NULL; 1139 goto report; 1140 } 1141 1142 pm_wakeup_event(mvm->dev, 0); 1143 1144 if (reasons & IWL_WOWLAN_WAKEUP_BY_MAGIC_PACKET) 1145 wakeup.magic_pkt = true; 1146 1147 if (reasons & IWL_WOWLAN_WAKEUP_BY_PATTERN) 1148 wakeup.pattern_idx = 1149 status->pattern_number; 1150 1151 if (reasons & (IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_MISSED_BEACON | 1152 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_DEAUTH)) 1153 wakeup.disconnect = true; 1154 1155 if (reasons & IWL_WOWLAN_WAKEUP_BY_GTK_REKEY_FAILURE) 1156 wakeup.gtk_rekey_failure = true; 1157 1158 if (reasons & IWL_WOWLAN_WAKEUP_BY_RFKILL_DEASSERTED) 1159 wakeup.rfkill_release = true; 1160 1161 if (reasons & IWL_WOWLAN_WAKEUP_BY_EAPOL_REQUEST) 1162 wakeup.eap_identity_req = true; 1163 1164 if (reasons & IWL_WOWLAN_WAKEUP_BY_FOUR_WAY_HANDSHAKE) 1165 wakeup.four_way_handshake = true; 1166 1167 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_LINK_LOSS) 1168 wakeup.tcp_connlost = true; 1169 1170 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_SIGNATURE_TABLE) 1171 wakeup.tcp_nomoretokens = true; 1172 1173 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_WAKEUP_PACKET) 1174 wakeup.tcp_match = true; 1175 1176 if (status->wake_packet_bufsize) { 1177 int pktsize = status->wake_packet_bufsize; 1178 int pktlen = status->wake_packet_length; 1179 const u8 *pktdata = status->wake_packet; 1180 struct ieee80211_hdr *hdr = (void *)pktdata; 1181 int truncated = pktlen - pktsize; 1182 1183 /* this would be a firmware bug */ 1184 if (WARN_ON_ONCE(truncated < 0)) 1185 truncated = 0; 1186 1187 if (ieee80211_is_data(hdr->frame_control)) { 1188 int hdrlen = ieee80211_hdrlen(hdr->frame_control); 1189 int ivlen = 0, icvlen = 4; /* also FCS */ 1190 1191 pkt = alloc_skb(pktsize, GFP_KERNEL); 1192 if (!pkt) 1193 goto report; 1194 1195 skb_put_data(pkt, pktdata, hdrlen); 1196 pktdata += hdrlen; 1197 pktsize -= hdrlen; 1198 1199 if (ieee80211_has_protected(hdr->frame_control)) { 1200 /* 1201 * This is unlocked and using gtk_i(c)vlen, 1202 * but since everything is under RTNL still 1203 * that's not really a problem - changing 1204 * it would be difficult. 1205 */ 1206 if (is_multicast_ether_addr(hdr->addr1)) { 1207 ivlen = mvm->gtk_ivlen; 1208 icvlen += mvm->gtk_icvlen; 1209 } else { 1210 ivlen = mvm->ptk_ivlen; 1211 icvlen += mvm->ptk_icvlen; 1212 } 1213 } 1214 1215 /* if truncated, FCS/ICV is (partially) gone */ 1216 if (truncated >= icvlen) { 1217 icvlen = 0; 1218 truncated -= icvlen; 1219 } else { 1220 icvlen -= truncated; 1221 truncated = 0; 1222 } 1223 1224 pktsize -= ivlen + icvlen; 1225 pktdata += ivlen; 1226 1227 skb_put_data(pkt, pktdata, pktsize); 1228 1229 if (ieee80211_data_to_8023(pkt, vif->addr, vif->type)) 1230 goto report; 1231 wakeup.packet = pkt->data; 1232 wakeup.packet_present_len = pkt->len; 1233 wakeup.packet_len = pkt->len - truncated; 1234 wakeup.packet_80211 = false; 1235 } else { 1236 int fcslen = 4; 1237 1238 if (truncated >= 4) { 1239 truncated -= 4; 1240 fcslen = 0; 1241 } else { 1242 fcslen -= truncated; 1243 truncated = 0; 1244 } 1245 pktsize -= fcslen; 1246 wakeup.packet = status->wake_packet; 1247 wakeup.packet_present_len = pktsize; 1248 wakeup.packet_len = pktlen - truncated; 1249 wakeup.packet_80211 = true; 1250 } 1251 } 1252 1253 report: 1254 ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL); 1255 kfree_skb(pkt); 1256 } 1257 1258 static void iwl_mvm_aes_sc_to_seq(struct aes_sc *sc, 1259 struct ieee80211_key_seq *seq) 1260 { 1261 u64 pn; 1262 1263 pn = le64_to_cpu(sc->pn); 1264 seq->ccmp.pn[0] = pn >> 40; 1265 seq->ccmp.pn[1] = pn >> 32; 1266 seq->ccmp.pn[2] = pn >> 24; 1267 seq->ccmp.pn[3] = pn >> 16; 1268 seq->ccmp.pn[4] = pn >> 8; 1269 seq->ccmp.pn[5] = pn; 1270 } 1271 1272 static void iwl_mvm_tkip_sc_to_seq(struct tkip_sc *sc, 1273 struct ieee80211_key_seq *seq) 1274 { 1275 seq->tkip.iv32 = le32_to_cpu(sc->iv32); 1276 seq->tkip.iv16 = le16_to_cpu(sc->iv16); 1277 } 1278 1279 static void iwl_mvm_set_aes_rx_seq(struct iwl_mvm *mvm, struct aes_sc *scs, 1280 struct ieee80211_sta *sta, 1281 struct ieee80211_key_conf *key) 1282 { 1283 int tid; 1284 1285 BUILD_BUG_ON(IWL_NUM_RSC != IEEE80211_NUM_TIDS); 1286 1287 if (sta && iwl_mvm_has_new_rx_api(mvm)) { 1288 struct iwl_mvm_sta *mvmsta; 1289 struct iwl_mvm_key_pn *ptk_pn; 1290 1291 mvmsta = iwl_mvm_sta_from_mac80211(sta); 1292 1293 ptk_pn = rcu_dereference_protected(mvmsta->ptk_pn[key->keyidx], 1294 lockdep_is_held(&mvm->mutex)); 1295 if (WARN_ON(!ptk_pn)) 1296 return; 1297 1298 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 1299 struct ieee80211_key_seq seq = {}; 1300 int i; 1301 1302 iwl_mvm_aes_sc_to_seq(&scs[tid], &seq); 1303 ieee80211_set_key_rx_seq(key, tid, &seq); 1304 for (i = 1; i < mvm->trans->num_rx_queues; i++) 1305 memcpy(ptk_pn->q[i].pn[tid], 1306 seq.ccmp.pn, IEEE80211_CCMP_PN_LEN); 1307 } 1308 } else { 1309 for (tid = 0; tid < IWL_NUM_RSC; tid++) { 1310 struct ieee80211_key_seq seq = {}; 1311 1312 iwl_mvm_aes_sc_to_seq(&scs[tid], &seq); 1313 ieee80211_set_key_rx_seq(key, tid, &seq); 1314 } 1315 } 1316 } 1317 1318 static void iwl_mvm_set_tkip_rx_seq(struct tkip_sc *scs, 1319 struct ieee80211_key_conf *key) 1320 { 1321 int tid; 1322 1323 BUILD_BUG_ON(IWL_NUM_RSC != IEEE80211_NUM_TIDS); 1324 1325 for (tid = 0; tid < IWL_NUM_RSC; tid++) { 1326 struct ieee80211_key_seq seq = {}; 1327 1328 iwl_mvm_tkip_sc_to_seq(&scs[tid], &seq); 1329 ieee80211_set_key_rx_seq(key, tid, &seq); 1330 } 1331 } 1332 1333 static void iwl_mvm_set_key_rx_seq(struct iwl_mvm *mvm, 1334 struct ieee80211_key_conf *key, 1335 struct iwl_wowlan_status *status) 1336 { 1337 union iwl_all_tsc_rsc *rsc = &status->gtk[0].rsc.all_tsc_rsc; 1338 1339 switch (key->cipher) { 1340 case WLAN_CIPHER_SUITE_CCMP: 1341 iwl_mvm_set_aes_rx_seq(mvm, rsc->aes.multicast_rsc, NULL, key); 1342 break; 1343 case WLAN_CIPHER_SUITE_TKIP: 1344 iwl_mvm_set_tkip_rx_seq(rsc->tkip.multicast_rsc, key); 1345 break; 1346 default: 1347 WARN_ON(1); 1348 } 1349 } 1350 1351 struct iwl_mvm_d3_gtk_iter_data { 1352 struct iwl_mvm *mvm; 1353 struct iwl_wowlan_status *status; 1354 void *last_gtk; 1355 u32 cipher; 1356 bool find_phase, unhandled_cipher; 1357 int num_keys; 1358 }; 1359 1360 static void iwl_mvm_d3_update_keys(struct ieee80211_hw *hw, 1361 struct ieee80211_vif *vif, 1362 struct ieee80211_sta *sta, 1363 struct ieee80211_key_conf *key, 1364 void *_data) 1365 { 1366 struct iwl_mvm_d3_gtk_iter_data *data = _data; 1367 1368 if (data->unhandled_cipher) 1369 return; 1370 1371 switch (key->cipher) { 1372 case WLAN_CIPHER_SUITE_WEP40: 1373 case WLAN_CIPHER_SUITE_WEP104: 1374 /* ignore WEP completely, nothing to do */ 1375 return; 1376 case WLAN_CIPHER_SUITE_CCMP: 1377 case WLAN_CIPHER_SUITE_TKIP: 1378 /* we support these */ 1379 break; 1380 default: 1381 /* everything else (even CMAC for MFP) - disconnect from AP */ 1382 data->unhandled_cipher = true; 1383 return; 1384 } 1385 1386 data->num_keys++; 1387 1388 /* 1389 * pairwise key - update sequence counters only; 1390 * note that this assumes no TDLS sessions are active 1391 */ 1392 if (sta) { 1393 struct ieee80211_key_seq seq = {}; 1394 union iwl_all_tsc_rsc *sc = 1395 &data->status->gtk[0].rsc.all_tsc_rsc; 1396 1397 if (data->find_phase) 1398 return; 1399 1400 switch (key->cipher) { 1401 case WLAN_CIPHER_SUITE_CCMP: 1402 iwl_mvm_set_aes_rx_seq(data->mvm, sc->aes.unicast_rsc, 1403 sta, key); 1404 atomic64_set(&key->tx_pn, le64_to_cpu(sc->aes.tsc.pn)); 1405 break; 1406 case WLAN_CIPHER_SUITE_TKIP: 1407 iwl_mvm_tkip_sc_to_seq(&sc->tkip.tsc, &seq); 1408 iwl_mvm_set_tkip_rx_seq(sc->tkip.unicast_rsc, key); 1409 atomic64_set(&key->tx_pn, 1410 (u64)seq.tkip.iv16 | 1411 ((u64)seq.tkip.iv32 << 16)); 1412 break; 1413 } 1414 1415 /* that's it for this key */ 1416 return; 1417 } 1418 1419 if (data->find_phase) { 1420 data->last_gtk = key; 1421 data->cipher = key->cipher; 1422 return; 1423 } 1424 1425 if (data->status->num_of_gtk_rekeys) 1426 ieee80211_remove_key(key); 1427 else if (data->last_gtk == key) 1428 iwl_mvm_set_key_rx_seq(data->mvm, key, data->status); 1429 } 1430 1431 static bool iwl_mvm_setup_connection_keep(struct iwl_mvm *mvm, 1432 struct ieee80211_vif *vif, 1433 struct iwl_wowlan_status *status) 1434 { 1435 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1436 struct iwl_mvm_d3_gtk_iter_data gtkdata = { 1437 .mvm = mvm, 1438 .status = status, 1439 }; 1440 u32 disconnection_reasons = 1441 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_MISSED_BEACON | 1442 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_DEAUTH; 1443 1444 if (!status || !vif->bss_conf.bssid) 1445 return false; 1446 1447 if (le32_to_cpu(status->wakeup_reasons) & disconnection_reasons) 1448 return false; 1449 1450 /* find last GTK that we used initially, if any */ 1451 gtkdata.find_phase = true; 1452 ieee80211_iter_keys(mvm->hw, vif, 1453 iwl_mvm_d3_update_keys, >kdata); 1454 /* not trying to keep connections with MFP/unhandled ciphers */ 1455 if (gtkdata.unhandled_cipher) 1456 return false; 1457 if (!gtkdata.num_keys) 1458 goto out; 1459 if (!gtkdata.last_gtk) 1460 return false; 1461 1462 /* 1463 * invalidate all other GTKs that might still exist and update 1464 * the one that we used 1465 */ 1466 gtkdata.find_phase = false; 1467 ieee80211_iter_keys(mvm->hw, vif, 1468 iwl_mvm_d3_update_keys, >kdata); 1469 1470 if (status->num_of_gtk_rekeys) { 1471 struct ieee80211_key_conf *key; 1472 struct { 1473 struct ieee80211_key_conf conf; 1474 u8 key[32]; 1475 } conf = { 1476 .conf.cipher = gtkdata.cipher, 1477 .conf.keyidx = 1478 iwlmvm_wowlan_gtk_idx(&status->gtk[0]), 1479 }; 1480 __be64 replay_ctr; 1481 1482 switch (gtkdata.cipher) { 1483 case WLAN_CIPHER_SUITE_CCMP: 1484 conf.conf.keylen = WLAN_KEY_LEN_CCMP; 1485 memcpy(conf.conf.key, status->gtk[0].key, 1486 WLAN_KEY_LEN_CCMP); 1487 break; 1488 case WLAN_CIPHER_SUITE_TKIP: 1489 conf.conf.keylen = WLAN_KEY_LEN_TKIP; 1490 memcpy(conf.conf.key, status->gtk[0].key, 16); 1491 /* leave TX MIC key zeroed, we don't use it anyway */ 1492 memcpy(conf.conf.key + 1493 NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY, 1494 status->gtk[0].tkip_mic_key, 8); 1495 break; 1496 } 1497 1498 key = ieee80211_gtk_rekey_add(vif, &conf.conf); 1499 if (IS_ERR(key)) 1500 return false; 1501 iwl_mvm_set_key_rx_seq(mvm, key, status); 1502 1503 replay_ctr = 1504 cpu_to_be64(le64_to_cpu(status->replay_ctr)); 1505 1506 ieee80211_gtk_rekey_notify(vif, vif->bss_conf.bssid, 1507 (void *)&replay_ctr, GFP_KERNEL); 1508 } 1509 1510 out: 1511 mvmvif->seqno_valid = true; 1512 /* +0x10 because the set API expects next-to-use, not last-used */ 1513 mvmvif->seqno = le16_to_cpu(status->non_qos_seq_ctr) + 0x10; 1514 1515 return true; 1516 } 1517 1518 struct iwl_wowlan_status *iwl_mvm_send_wowlan_get_status(struct iwl_mvm *mvm) 1519 { 1520 struct iwl_wowlan_status *v7, *status; 1521 struct iwl_host_cmd cmd = { 1522 .id = WOWLAN_GET_STATUSES, 1523 .flags = CMD_WANT_SKB, 1524 }; 1525 int ret, len, status_size; 1526 1527 lockdep_assert_held(&mvm->mutex); 1528 1529 ret = iwl_mvm_send_cmd(mvm, &cmd); 1530 if (ret) { 1531 IWL_ERR(mvm, "failed to query wakeup status (%d)\n", ret); 1532 return ERR_PTR(ret); 1533 } 1534 1535 if (!fw_has_api(&mvm->fw->ucode_capa, 1536 IWL_UCODE_TLV_API_WOWLAN_KEY_MATERIAL)) { 1537 struct iwl_wowlan_status_v6 *v6 = (void *)cmd.resp_pkt->data; 1538 int data_size; 1539 1540 status_size = sizeof(*v6); 1541 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 1542 1543 if (len < status_size) { 1544 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); 1545 status = ERR_PTR(-EIO); 1546 goto out_free_resp; 1547 } 1548 1549 data_size = ALIGN(le32_to_cpu(v6->wake_packet_bufsize), 4); 1550 1551 if (len != (status_size + data_size)) { 1552 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); 1553 status = ERR_PTR(-EIO); 1554 goto out_free_resp; 1555 } 1556 1557 status = kzalloc(sizeof(*status) + data_size, GFP_KERNEL); 1558 if (!status) 1559 goto out_free_resp; 1560 1561 BUILD_BUG_ON(sizeof(v6->gtk.decrypt_key) > 1562 sizeof(status->gtk[0].key)); 1563 BUILD_BUG_ON(sizeof(v6->gtk.tkip_mic_key) > 1564 sizeof(status->gtk[0].tkip_mic_key)); 1565 1566 /* copy GTK info to the right place */ 1567 memcpy(status->gtk[0].key, v6->gtk.decrypt_key, 1568 sizeof(v6->gtk.decrypt_key)); 1569 memcpy(status->gtk[0].tkip_mic_key, v6->gtk.tkip_mic_key, 1570 sizeof(v6->gtk.tkip_mic_key)); 1571 memcpy(&status->gtk[0].rsc, &v6->gtk.rsc, 1572 sizeof(status->gtk[0].rsc)); 1573 1574 /* hardcode the key length to 16 since v6 only supports 16 */ 1575 status->gtk[0].key_len = 16; 1576 1577 /* 1578 * The key index only uses 2 bits (values 0 to 3) and 1579 * we always set bit 7 which means this is the 1580 * currently used key. 1581 */ 1582 status->gtk[0].key_flags = v6->gtk.key_index | BIT(7); 1583 1584 status->replay_ctr = v6->replay_ctr; 1585 1586 /* everything starting from pattern_number is identical */ 1587 memcpy(&status->pattern_number, &v6->pattern_number, 1588 offsetof(struct iwl_wowlan_status, wake_packet) - 1589 offsetof(struct iwl_wowlan_status, pattern_number) + 1590 data_size); 1591 1592 goto out_free_resp; 1593 } 1594 1595 v7 = (void *)cmd.resp_pkt->data; 1596 status_size = sizeof(*v7); 1597 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 1598 1599 if (len < status_size) { 1600 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); 1601 status = ERR_PTR(-EIO); 1602 goto out_free_resp; 1603 } 1604 1605 if (len != (status_size + 1606 ALIGN(le32_to_cpu(v7->wake_packet_bufsize), 4))) { 1607 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); 1608 status = ERR_PTR(-EIO); 1609 goto out_free_resp; 1610 } 1611 1612 status = kmemdup(v7, len, GFP_KERNEL); 1613 1614 out_free_resp: 1615 iwl_free_resp(&cmd); 1616 return status; 1617 } 1618 1619 static struct iwl_wowlan_status * 1620 iwl_mvm_get_wakeup_status(struct iwl_mvm *mvm) 1621 { 1622 int ret; 1623 1624 /* only for tracing for now */ 1625 ret = iwl_mvm_send_cmd_pdu(mvm, OFFLOADS_QUERY_CMD, 0, 0, NULL); 1626 if (ret) 1627 IWL_ERR(mvm, "failed to query offload statistics (%d)\n", ret); 1628 1629 return iwl_mvm_send_wowlan_get_status(mvm); 1630 } 1631 1632 /* releases the MVM mutex */ 1633 static bool iwl_mvm_query_wakeup_reasons(struct iwl_mvm *mvm, 1634 struct ieee80211_vif *vif) 1635 { 1636 struct iwl_wowlan_status_data status; 1637 struct iwl_wowlan_status *fw_status; 1638 int i; 1639 bool keep; 1640 struct iwl_mvm_sta *mvm_ap_sta; 1641 1642 fw_status = iwl_mvm_get_wakeup_status(mvm); 1643 if (IS_ERR_OR_NULL(fw_status)) 1644 goto out_unlock; 1645 1646 status.pattern_number = le16_to_cpu(fw_status->pattern_number); 1647 for (i = 0; i < 8; i++) 1648 status.qos_seq_ctr[i] = 1649 le16_to_cpu(fw_status->qos_seq_ctr[i]); 1650 status.wakeup_reasons = le32_to_cpu(fw_status->wakeup_reasons); 1651 status.wake_packet_length = 1652 le32_to_cpu(fw_status->wake_packet_length); 1653 status.wake_packet_bufsize = 1654 le32_to_cpu(fw_status->wake_packet_bufsize); 1655 status.wake_packet = fw_status->wake_packet; 1656 1657 /* still at hard-coded place 0 for D3 image */ 1658 mvm_ap_sta = iwl_mvm_sta_from_staid_protected(mvm, 0); 1659 if (!mvm_ap_sta) 1660 goto out_free; 1661 1662 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 1663 u16 seq = status.qos_seq_ctr[i]; 1664 /* firmware stores last-used value, we store next value */ 1665 seq += 0x10; 1666 mvm_ap_sta->tid_data[i].seq_number = seq; 1667 } 1668 1669 if (mvm->trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_22000) { 1670 i = mvm->offload_tid; 1671 iwl_trans_set_q_ptrs(mvm->trans, 1672 mvm_ap_sta->tid_data[i].txq_id, 1673 mvm_ap_sta->tid_data[i].seq_number >> 4); 1674 } 1675 1676 /* now we have all the data we need, unlock to avoid mac80211 issues */ 1677 mutex_unlock(&mvm->mutex); 1678 1679 iwl_mvm_report_wakeup_reasons(mvm, vif, &status); 1680 1681 keep = iwl_mvm_setup_connection_keep(mvm, vif, fw_status); 1682 1683 kfree(fw_status); 1684 return keep; 1685 1686 out_free: 1687 kfree(fw_status); 1688 out_unlock: 1689 mutex_unlock(&mvm->mutex); 1690 return false; 1691 } 1692 1693 #define ND_QUERY_BUF_LEN (sizeof(struct iwl_scan_offload_profile_match) * \ 1694 IWL_SCAN_MAX_PROFILES) 1695 1696 struct iwl_mvm_nd_query_results { 1697 u32 matched_profiles; 1698 u8 matches[ND_QUERY_BUF_LEN]; 1699 }; 1700 1701 static int 1702 iwl_mvm_netdetect_query_results(struct iwl_mvm *mvm, 1703 struct iwl_mvm_nd_query_results *results) 1704 { 1705 struct iwl_scan_offload_profiles_query *query; 1706 struct iwl_host_cmd cmd = { 1707 .id = SCAN_OFFLOAD_PROFILES_QUERY_CMD, 1708 .flags = CMD_WANT_SKB, 1709 }; 1710 int ret, len; 1711 size_t query_len, matches_len; 1712 1713 ret = iwl_mvm_send_cmd(mvm, &cmd); 1714 if (ret) { 1715 IWL_ERR(mvm, "failed to query matched profiles (%d)\n", ret); 1716 return ret; 1717 } 1718 1719 if (fw_has_api(&mvm->fw->ucode_capa, 1720 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 1721 query_len = sizeof(struct iwl_scan_offload_profiles_query); 1722 matches_len = sizeof(struct iwl_scan_offload_profile_match) * 1723 IWL_SCAN_MAX_PROFILES; 1724 } else { 1725 query_len = sizeof(struct iwl_scan_offload_profiles_query_v1); 1726 matches_len = sizeof(struct iwl_scan_offload_profile_match_v1) * 1727 IWL_SCAN_MAX_PROFILES; 1728 } 1729 1730 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 1731 if (len < query_len) { 1732 IWL_ERR(mvm, "Invalid scan offload profiles query response!\n"); 1733 ret = -EIO; 1734 goto out_free_resp; 1735 } 1736 1737 query = (void *)cmd.resp_pkt->data; 1738 1739 results->matched_profiles = le32_to_cpu(query->matched_profiles); 1740 memcpy(results->matches, query->matches, matches_len); 1741 1742 #ifdef CONFIG_IWLWIFI_DEBUGFS 1743 mvm->last_netdetect_scans = le32_to_cpu(query->n_scans_done); 1744 #endif 1745 1746 out_free_resp: 1747 iwl_free_resp(&cmd); 1748 return ret; 1749 } 1750 1751 static int iwl_mvm_query_num_match_chans(struct iwl_mvm *mvm, 1752 struct iwl_mvm_nd_query_results *query, 1753 int idx) 1754 { 1755 int n_chans = 0, i; 1756 1757 if (fw_has_api(&mvm->fw->ucode_capa, 1758 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 1759 struct iwl_scan_offload_profile_match *matches = 1760 (struct iwl_scan_offload_profile_match *)query->matches; 1761 1762 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN; i++) 1763 n_chans += hweight8(matches[idx].matching_channels[i]); 1764 } else { 1765 struct iwl_scan_offload_profile_match_v1 *matches = 1766 (struct iwl_scan_offload_profile_match_v1 *)query->matches; 1767 1768 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN_V1; i++) 1769 n_chans += hweight8(matches[idx].matching_channels[i]); 1770 } 1771 1772 return n_chans; 1773 } 1774 1775 static void iwl_mvm_query_set_freqs(struct iwl_mvm *mvm, 1776 struct iwl_mvm_nd_query_results *query, 1777 struct cfg80211_wowlan_nd_match *match, 1778 int idx) 1779 { 1780 int i; 1781 1782 if (fw_has_api(&mvm->fw->ucode_capa, 1783 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 1784 struct iwl_scan_offload_profile_match *matches = 1785 (struct iwl_scan_offload_profile_match *)query->matches; 1786 1787 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN * 8; i++) 1788 if (matches[idx].matching_channels[i / 8] & (BIT(i % 8))) 1789 match->channels[match->n_channels++] = 1790 mvm->nd_channels[i]->center_freq; 1791 } else { 1792 struct iwl_scan_offload_profile_match_v1 *matches = 1793 (struct iwl_scan_offload_profile_match_v1 *)query->matches; 1794 1795 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN_V1 * 8; i++) 1796 if (matches[idx].matching_channels[i / 8] & (BIT(i % 8))) 1797 match->channels[match->n_channels++] = 1798 mvm->nd_channels[i]->center_freq; 1799 } 1800 } 1801 1802 static void iwl_mvm_query_netdetect_reasons(struct iwl_mvm *mvm, 1803 struct ieee80211_vif *vif) 1804 { 1805 struct cfg80211_wowlan_nd_info *net_detect = NULL; 1806 struct cfg80211_wowlan_wakeup wakeup = { 1807 .pattern_idx = -1, 1808 }; 1809 struct cfg80211_wowlan_wakeup *wakeup_report = &wakeup; 1810 struct iwl_mvm_nd_query_results query; 1811 struct iwl_wowlan_status *fw_status; 1812 unsigned long matched_profiles; 1813 u32 reasons = 0; 1814 int i, n_matches, ret; 1815 1816 fw_status = iwl_mvm_get_wakeup_status(mvm); 1817 if (!IS_ERR_OR_NULL(fw_status)) { 1818 reasons = le32_to_cpu(fw_status->wakeup_reasons); 1819 kfree(fw_status); 1820 } 1821 1822 if (reasons & IWL_WOWLAN_WAKEUP_BY_RFKILL_DEASSERTED) 1823 wakeup.rfkill_release = true; 1824 1825 if (reasons != IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) 1826 goto out; 1827 1828 ret = iwl_mvm_netdetect_query_results(mvm, &query); 1829 if (ret || !query.matched_profiles) { 1830 wakeup_report = NULL; 1831 goto out; 1832 } 1833 1834 matched_profiles = query.matched_profiles; 1835 if (mvm->n_nd_match_sets) { 1836 n_matches = hweight_long(matched_profiles); 1837 } else { 1838 IWL_ERR(mvm, "no net detect match information available\n"); 1839 n_matches = 0; 1840 } 1841 1842 net_detect = kzalloc(struct_size(net_detect, matches, n_matches), 1843 GFP_KERNEL); 1844 if (!net_detect || !n_matches) 1845 goto out_report_nd; 1846 1847 for_each_set_bit(i, &matched_profiles, mvm->n_nd_match_sets) { 1848 struct cfg80211_wowlan_nd_match *match; 1849 int idx, n_channels = 0; 1850 1851 n_channels = iwl_mvm_query_num_match_chans(mvm, &query, i); 1852 1853 match = kzalloc(struct_size(match, channels, n_channels), 1854 GFP_KERNEL); 1855 if (!match) 1856 goto out_report_nd; 1857 1858 net_detect->matches[net_detect->n_matches++] = match; 1859 1860 /* We inverted the order of the SSIDs in the scan 1861 * request, so invert the index here. 1862 */ 1863 idx = mvm->n_nd_match_sets - i - 1; 1864 match->ssid.ssid_len = mvm->nd_match_sets[idx].ssid.ssid_len; 1865 memcpy(match->ssid.ssid, mvm->nd_match_sets[idx].ssid.ssid, 1866 match->ssid.ssid_len); 1867 1868 if (mvm->n_nd_channels < n_channels) 1869 continue; 1870 1871 iwl_mvm_query_set_freqs(mvm, &query, match, i); 1872 } 1873 1874 out_report_nd: 1875 wakeup.net_detect = net_detect; 1876 out: 1877 iwl_mvm_free_nd(mvm); 1878 1879 mutex_unlock(&mvm->mutex); 1880 ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL); 1881 1882 if (net_detect) { 1883 for (i = 0; i < net_detect->n_matches; i++) 1884 kfree(net_detect->matches[i]); 1885 kfree(net_detect); 1886 } 1887 } 1888 1889 static void iwl_mvm_d3_disconnect_iter(void *data, u8 *mac, 1890 struct ieee80211_vif *vif) 1891 { 1892 /* skip the one we keep connection on */ 1893 if (data == vif) 1894 return; 1895 1896 if (vif->type == NL80211_IFTYPE_STATION) 1897 ieee80211_resume_disconnect(vif); 1898 } 1899 1900 static bool iwl_mvm_rt_status(struct iwl_trans *trans, u32 base, u32 *err_id) 1901 { 1902 struct error_table_start { 1903 /* cf. struct iwl_error_event_table */ 1904 u32 valid; 1905 __le32 err_id; 1906 } err_info; 1907 1908 if (!base) 1909 return false; 1910 1911 iwl_trans_read_mem_bytes(trans, base, 1912 &err_info, sizeof(err_info)); 1913 if (err_info.valid && err_id) 1914 *err_id = le32_to_cpu(err_info.err_id); 1915 1916 return !!err_info.valid; 1917 } 1918 1919 static bool iwl_mvm_check_rt_status(struct iwl_mvm *mvm, 1920 struct ieee80211_vif *vif) 1921 { 1922 u32 err_id; 1923 1924 /* check for lmac1 error */ 1925 if (iwl_mvm_rt_status(mvm->trans, 1926 mvm->trans->dbg.lmac_error_event_table[0], 1927 &err_id)) { 1928 if (err_id == RF_KILL_INDICATOR_FOR_WOWLAN) { 1929 struct cfg80211_wowlan_wakeup wakeup = { 1930 .rfkill_release = true, 1931 }; 1932 ieee80211_report_wowlan_wakeup(vif, &wakeup, 1933 GFP_KERNEL); 1934 } 1935 return true; 1936 } 1937 1938 /* check if we have lmac2 set and check for error */ 1939 if (iwl_mvm_rt_status(mvm->trans, 1940 mvm->trans->dbg.lmac_error_event_table[1], NULL)) 1941 return true; 1942 1943 /* check for umac error */ 1944 if (iwl_mvm_rt_status(mvm->trans, 1945 mvm->trans->dbg.umac_error_event_table, NULL)) 1946 return true; 1947 1948 return false; 1949 } 1950 1951 static int __iwl_mvm_resume(struct iwl_mvm *mvm, bool test) 1952 { 1953 struct ieee80211_vif *vif = NULL; 1954 int ret = 1; 1955 enum iwl_d3_status d3_status; 1956 bool keep = false; 1957 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 1958 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1959 bool d0i3_first = fw_has_capa(&mvm->fw->ucode_capa, 1960 IWL_UCODE_TLV_CAPA_D0I3_END_FIRST); 1961 1962 mutex_lock(&mvm->mutex); 1963 1964 clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 1965 1966 /* get the BSS vif pointer again */ 1967 vif = iwl_mvm_get_bss_vif(mvm); 1968 if (IS_ERR_OR_NULL(vif)) 1969 goto err; 1970 1971 iwl_fw_dbg_read_d3_debug_data(&mvm->fwrt); 1972 1973 if (iwl_mvm_check_rt_status(mvm, vif)) { 1974 set_bit(STATUS_FW_ERROR, &mvm->trans->status); 1975 iwl_mvm_dump_nic_error_log(mvm); 1976 iwl_dbg_tlv_time_point(&mvm->fwrt, 1977 IWL_FW_INI_TIME_POINT_FW_ASSERT, NULL); 1978 iwl_fw_dbg_collect_desc(&mvm->fwrt, &iwl_dump_desc_assert, 1979 false, 0); 1980 ret = 1; 1981 goto err; 1982 } 1983 1984 ret = iwl_trans_d3_resume(mvm->trans, &d3_status, test, !unified_image); 1985 if (ret) 1986 goto err; 1987 1988 if (d3_status != IWL_D3_STATUS_ALIVE) { 1989 IWL_INFO(mvm, "Device was reset during suspend\n"); 1990 goto err; 1991 } 1992 1993 if (d0i3_first) { 1994 struct iwl_host_cmd cmd = { 1995 .id = D0I3_END_CMD, 1996 .flags = CMD_WANT_SKB, 1997 }; 1998 int len; 1999 2000 ret = iwl_mvm_send_cmd(mvm, &cmd); 2001 if (ret < 0) { 2002 IWL_ERR(mvm, "Failed to send D0I3_END_CMD first (%d)\n", 2003 ret); 2004 goto err; 2005 } 2006 switch (mvm->cmd_ver.d0i3_resp) { 2007 case 0: 2008 break; 2009 case 1: 2010 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 2011 if (len != sizeof(u32)) { 2012 IWL_ERR(mvm, 2013 "Error with D0I3_END_CMD response size (%d)\n", 2014 len); 2015 goto err; 2016 } 2017 if (IWL_D0I3_RESET_REQUIRE & 2018 le32_to_cpu(*(__le32 *)cmd.resp_pkt->data)) { 2019 iwl_write32(mvm->trans, CSR_RESET, 2020 CSR_RESET_REG_FLAG_FORCE_NMI); 2021 iwl_free_resp(&cmd); 2022 } 2023 break; 2024 default: 2025 WARN_ON(1); 2026 } 2027 } 2028 2029 /* 2030 * Query the current location and source from the D3 firmware so we 2031 * can play it back when we re-intiailize the D0 firmware 2032 */ 2033 iwl_mvm_update_changed_regdom(mvm); 2034 2035 /* Re-configure PPAG settings */ 2036 iwl_mvm_ppag_send_cmd(mvm); 2037 2038 if (!unified_image) 2039 /* Re-configure default SAR profile */ 2040 iwl_mvm_sar_select_profile(mvm, 1, 1); 2041 2042 if (mvm->net_detect) { 2043 /* If this is a non-unified image, we restart the FW, 2044 * so no need to stop the netdetect scan. If that 2045 * fails, continue and try to get the wake-up reasons, 2046 * but trigger a HW restart by keeping a failure code 2047 * in ret. 2048 */ 2049 if (unified_image) 2050 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_NETDETECT, 2051 false); 2052 2053 iwl_mvm_query_netdetect_reasons(mvm, vif); 2054 /* has unlocked the mutex, so skip that */ 2055 goto out; 2056 } else { 2057 keep = iwl_mvm_query_wakeup_reasons(mvm, vif); 2058 #ifdef CONFIG_IWLWIFI_DEBUGFS 2059 if (keep) 2060 mvm->keep_vif = vif; 2061 #endif 2062 /* has unlocked the mutex, so skip that */ 2063 goto out_iterate; 2064 } 2065 2066 err: 2067 iwl_mvm_free_nd(mvm); 2068 mutex_unlock(&mvm->mutex); 2069 2070 out_iterate: 2071 if (!test) 2072 ieee80211_iterate_active_interfaces_rtnl(mvm->hw, 2073 IEEE80211_IFACE_ITER_NORMAL, 2074 iwl_mvm_d3_disconnect_iter, keep ? vif : NULL); 2075 2076 out: 2077 /* no need to reset the device in unified images, if successful */ 2078 if (unified_image && !ret) { 2079 /* nothing else to do if we already sent D0I3_END_CMD */ 2080 if (d0i3_first) 2081 return 0; 2082 2083 ret = iwl_mvm_send_cmd_pdu(mvm, D0I3_END_CMD, 0, 0, NULL); 2084 if (!ret) 2085 return 0; 2086 } 2087 2088 /* 2089 * Reconfigure the device in one of the following cases: 2090 * 1. We are not using a unified image 2091 * 2. We are using a unified image but had an error while exiting D3 2092 */ 2093 set_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED, &mvm->status); 2094 2095 return 1; 2096 } 2097 2098 static int iwl_mvm_resume_d3(struct iwl_mvm *mvm) 2099 { 2100 iwl_trans_resume(mvm->trans); 2101 2102 return __iwl_mvm_resume(mvm, false); 2103 } 2104 2105 int iwl_mvm_resume(struct ieee80211_hw *hw) 2106 { 2107 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2108 int ret; 2109 2110 ret = iwl_mvm_resume_d3(mvm); 2111 2112 mvm->trans->system_pm_mode = IWL_PLAT_PM_MODE_DISABLED; 2113 2114 iwl_mvm_resume_tcm(mvm); 2115 2116 iwl_fw_runtime_resume(&mvm->fwrt); 2117 2118 return ret; 2119 } 2120 2121 void iwl_mvm_set_wakeup(struct ieee80211_hw *hw, bool enabled) 2122 { 2123 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2124 2125 device_set_wakeup_enable(mvm->trans->dev, enabled); 2126 } 2127 2128 #ifdef CONFIG_IWLWIFI_DEBUGFS 2129 static int iwl_mvm_d3_test_open(struct inode *inode, struct file *file) 2130 { 2131 struct iwl_mvm *mvm = inode->i_private; 2132 int err; 2133 2134 if (mvm->d3_test_active) 2135 return -EBUSY; 2136 2137 file->private_data = inode->i_private; 2138 2139 synchronize_net(); 2140 2141 mvm->trans->system_pm_mode = IWL_PLAT_PM_MODE_D3; 2142 2143 iwl_mvm_pause_tcm(mvm, true); 2144 2145 iwl_fw_runtime_suspend(&mvm->fwrt); 2146 2147 /* start pseudo D3 */ 2148 rtnl_lock(); 2149 err = __iwl_mvm_suspend(mvm->hw, mvm->hw->wiphy->wowlan_config, true); 2150 rtnl_unlock(); 2151 if (err > 0) 2152 err = -EINVAL; 2153 if (err) 2154 return err; 2155 2156 mvm->d3_test_active = true; 2157 mvm->keep_vif = NULL; 2158 return 0; 2159 } 2160 2161 static ssize_t iwl_mvm_d3_test_read(struct file *file, char __user *user_buf, 2162 size_t count, loff_t *ppos) 2163 { 2164 struct iwl_mvm *mvm = file->private_data; 2165 u32 pme_asserted; 2166 2167 while (true) { 2168 /* read pme_ptr if available */ 2169 if (mvm->d3_test_pme_ptr) { 2170 pme_asserted = iwl_trans_read_mem32(mvm->trans, 2171 mvm->d3_test_pme_ptr); 2172 if (pme_asserted) 2173 break; 2174 } 2175 2176 if (msleep_interruptible(100)) 2177 break; 2178 } 2179 2180 return 0; 2181 } 2182 2183 static void iwl_mvm_d3_test_disconn_work_iter(void *_data, u8 *mac, 2184 struct ieee80211_vif *vif) 2185 { 2186 /* skip the one we keep connection on */ 2187 if (_data == vif) 2188 return; 2189 2190 if (vif->type == NL80211_IFTYPE_STATION) 2191 ieee80211_connection_loss(vif); 2192 } 2193 2194 static int iwl_mvm_d3_test_release(struct inode *inode, struct file *file) 2195 { 2196 struct iwl_mvm *mvm = inode->i_private; 2197 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 2198 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 2199 2200 mvm->d3_test_active = false; 2201 2202 iwl_fw_dbg_read_d3_debug_data(&mvm->fwrt); 2203 2204 rtnl_lock(); 2205 __iwl_mvm_resume(mvm, true); 2206 rtnl_unlock(); 2207 2208 iwl_mvm_resume_tcm(mvm); 2209 2210 iwl_fw_runtime_resume(&mvm->fwrt); 2211 2212 mvm->trans->system_pm_mode = IWL_PLAT_PM_MODE_DISABLED; 2213 2214 iwl_abort_notification_waits(&mvm->notif_wait); 2215 if (!unified_image) { 2216 int remaining_time = 10; 2217 2218 ieee80211_restart_hw(mvm->hw); 2219 2220 /* wait for restart and disconnect all interfaces */ 2221 while (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 2222 remaining_time > 0) { 2223 remaining_time--; 2224 msleep(1000); 2225 } 2226 2227 if (remaining_time == 0) 2228 IWL_ERR(mvm, "Timed out waiting for HW restart!\n"); 2229 } 2230 2231 ieee80211_iterate_active_interfaces_atomic( 2232 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 2233 iwl_mvm_d3_test_disconn_work_iter, mvm->keep_vif); 2234 2235 return 0; 2236 } 2237 2238 const struct file_operations iwl_dbgfs_d3_test_ops = { 2239 .llseek = no_llseek, 2240 .open = iwl_mvm_d3_test_open, 2241 .read = iwl_mvm_d3_test_read, 2242 .release = iwl_mvm_d3_test_release, 2243 }; 2244 #endif 2245