1 // SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause 2 /* 3 * Copyright (C) 2012-2014, 2018-2022 Intel Corporation 4 * Copyright (C) 2013-2015 Intel Mobile Communications GmbH 5 * Copyright (C) 2016-2017 Intel Deutschland GmbH 6 */ 7 #include <linux/etherdevice.h> 8 #include <linux/ip.h> 9 #include <linux/fs.h> 10 #include <net/cfg80211.h> 11 #include <net/ipv6.h> 12 #include <net/tcp.h> 13 #include <net/addrconf.h> 14 #include "iwl-modparams.h" 15 #include "fw-api.h" 16 #include "mvm.h" 17 #include "fw/img.h" 18 19 void iwl_mvm_set_rekey_data(struct ieee80211_hw *hw, 20 struct ieee80211_vif *vif, 21 struct cfg80211_gtk_rekey_data *data) 22 { 23 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 24 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 25 26 mutex_lock(&mvm->mutex); 27 28 mvmvif->rekey_data.kek_len = data->kek_len; 29 mvmvif->rekey_data.kck_len = data->kck_len; 30 memcpy(mvmvif->rekey_data.kek, data->kek, data->kek_len); 31 memcpy(mvmvif->rekey_data.kck, data->kck, data->kck_len); 32 mvmvif->rekey_data.akm = data->akm & 0xFF; 33 mvmvif->rekey_data.replay_ctr = 34 cpu_to_le64(be64_to_cpup((const __be64 *)data->replay_ctr)); 35 mvmvif->rekey_data.valid = true; 36 37 mutex_unlock(&mvm->mutex); 38 } 39 40 #if IS_ENABLED(CONFIG_IPV6) 41 void iwl_mvm_ipv6_addr_change(struct ieee80211_hw *hw, 42 struct ieee80211_vif *vif, 43 struct inet6_dev *idev) 44 { 45 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 46 struct inet6_ifaddr *ifa; 47 int idx = 0; 48 49 memset(mvmvif->tentative_addrs, 0, sizeof(mvmvif->tentative_addrs)); 50 51 read_lock_bh(&idev->lock); 52 list_for_each_entry(ifa, &idev->addr_list, if_list) { 53 mvmvif->target_ipv6_addrs[idx] = ifa->addr; 54 if (ifa->flags & IFA_F_TENTATIVE) 55 __set_bit(idx, mvmvif->tentative_addrs); 56 idx++; 57 if (idx >= IWL_PROTO_OFFLOAD_NUM_IPV6_ADDRS_MAX) 58 break; 59 } 60 read_unlock_bh(&idev->lock); 61 62 mvmvif->num_target_ipv6_addrs = idx; 63 } 64 #endif 65 66 void iwl_mvm_set_default_unicast_key(struct ieee80211_hw *hw, 67 struct ieee80211_vif *vif, int idx) 68 { 69 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 70 71 mvmvif->tx_key_idx = idx; 72 } 73 74 static void iwl_mvm_convert_p1k(u16 *p1k, __le16 *out) 75 { 76 int i; 77 78 for (i = 0; i < IWL_P1K_SIZE; i++) 79 out[i] = cpu_to_le16(p1k[i]); 80 } 81 82 static const u8 *iwl_mvm_find_max_pn(struct ieee80211_key_conf *key, 83 struct iwl_mvm_key_pn *ptk_pn, 84 struct ieee80211_key_seq *seq, 85 int tid, int queues) 86 { 87 const u8 *ret = seq->ccmp.pn; 88 int i; 89 90 /* get the PN from mac80211, used on the default queue */ 91 ieee80211_get_key_rx_seq(key, tid, seq); 92 93 /* and use the internal data for the other queues */ 94 for (i = 1; i < queues; i++) { 95 const u8 *tmp = ptk_pn->q[i].pn[tid]; 96 97 if (memcmp(ret, tmp, IEEE80211_CCMP_PN_LEN) <= 0) 98 ret = tmp; 99 } 100 101 return ret; 102 } 103 104 struct wowlan_key_reprogram_data { 105 bool error; 106 int wep_key_idx; 107 }; 108 109 static void iwl_mvm_wowlan_program_keys(struct ieee80211_hw *hw, 110 struct ieee80211_vif *vif, 111 struct ieee80211_sta *sta, 112 struct ieee80211_key_conf *key, 113 void *_data) 114 { 115 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 116 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 117 struct wowlan_key_reprogram_data *data = _data; 118 int ret; 119 120 switch (key->cipher) { 121 case WLAN_CIPHER_SUITE_WEP40: 122 case WLAN_CIPHER_SUITE_WEP104: { /* hack it for now */ 123 struct { 124 struct iwl_mvm_wep_key_cmd wep_key_cmd; 125 struct iwl_mvm_wep_key wep_key; 126 } __packed wkc = { 127 .wep_key_cmd.mac_id_n_color = 128 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 129 mvmvif->color)), 130 .wep_key_cmd.num_keys = 1, 131 /* firmware sets STA_KEY_FLG_WEP_13BYTES */ 132 .wep_key_cmd.decryption_type = STA_KEY_FLG_WEP, 133 .wep_key.key_index = key->keyidx, 134 .wep_key.key_size = key->keylen, 135 }; 136 137 /* 138 * This will fail -- the key functions don't set support 139 * pairwise WEP keys. However, that's better than silently 140 * failing WoWLAN. Or maybe not? 141 */ 142 if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) 143 break; 144 145 memcpy(&wkc.wep_key.key[3], key->key, key->keylen); 146 if (key->keyidx == mvmvif->tx_key_idx) { 147 /* TX key must be at offset 0 */ 148 wkc.wep_key.key_offset = 0; 149 } else { 150 /* others start at 1 */ 151 data->wep_key_idx++; 152 wkc.wep_key.key_offset = data->wep_key_idx; 153 } 154 155 mutex_lock(&mvm->mutex); 156 ret = iwl_mvm_send_cmd_pdu(mvm, WEP_KEY, 0, sizeof(wkc), &wkc); 157 data->error = ret != 0; 158 159 mvm->ptk_ivlen = key->iv_len; 160 mvm->ptk_icvlen = key->icv_len; 161 mvm->gtk_ivlen = key->iv_len; 162 mvm->gtk_icvlen = key->icv_len; 163 mutex_unlock(&mvm->mutex); 164 165 /* don't upload key again */ 166 return; 167 } 168 default: 169 data->error = true; 170 return; 171 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 172 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 173 return; 174 case WLAN_CIPHER_SUITE_AES_CMAC: 175 /* 176 * Ignore CMAC keys -- the WoWLAN firmware doesn't support them 177 * but we also shouldn't abort suspend due to that. It does have 178 * support for the IGTK key renewal, but doesn't really use the 179 * IGTK for anything. This means we could spuriously wake up or 180 * be deauthenticated, but that was considered acceptable. 181 */ 182 return; 183 case WLAN_CIPHER_SUITE_TKIP: 184 case WLAN_CIPHER_SUITE_CCMP: 185 case WLAN_CIPHER_SUITE_GCMP: 186 case WLAN_CIPHER_SUITE_GCMP_256: 187 break; 188 } 189 190 mutex_lock(&mvm->mutex); 191 /* 192 * The D3 firmware hardcodes the key offset 0 as the key it 193 * uses to transmit packets to the AP, i.e. the PTK. 194 */ 195 if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) { 196 mvm->ptk_ivlen = key->iv_len; 197 mvm->ptk_icvlen = key->icv_len; 198 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, 0); 199 } else { 200 /* 201 * firmware only supports TSC/RSC for a single key, 202 * so if there are multiple keep overwriting them 203 * with new ones -- this relies on mac80211 doing 204 * list_add_tail(). 205 */ 206 mvm->gtk_ivlen = key->iv_len; 207 mvm->gtk_icvlen = key->icv_len; 208 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, 1); 209 } 210 mutex_unlock(&mvm->mutex); 211 data->error = ret != 0; 212 } 213 214 struct wowlan_key_rsc_tsc_data { 215 struct iwl_wowlan_rsc_tsc_params_cmd_v4 *rsc_tsc; 216 bool have_rsc_tsc; 217 }; 218 219 static void iwl_mvm_wowlan_get_rsc_tsc_data(struct ieee80211_hw *hw, 220 struct ieee80211_vif *vif, 221 struct ieee80211_sta *sta, 222 struct ieee80211_key_conf *key, 223 void *_data) 224 { 225 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 226 struct wowlan_key_rsc_tsc_data *data = _data; 227 struct aes_sc *aes_sc; 228 struct tkip_sc *tkip_sc, *tkip_tx_sc = NULL; 229 struct ieee80211_key_seq seq; 230 int i; 231 232 switch (key->cipher) { 233 default: 234 break; 235 case WLAN_CIPHER_SUITE_TKIP: 236 if (sta) { 237 u64 pn64; 238 239 tkip_sc = 240 data->rsc_tsc->params.all_tsc_rsc.tkip.unicast_rsc; 241 tkip_tx_sc = 242 &data->rsc_tsc->params.all_tsc_rsc.tkip.tsc; 243 244 pn64 = atomic64_read(&key->tx_pn); 245 tkip_tx_sc->iv16 = cpu_to_le16(TKIP_PN_TO_IV16(pn64)); 246 tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64)); 247 } else { 248 tkip_sc = 249 data->rsc_tsc->params.all_tsc_rsc.tkip.multicast_rsc; 250 } 251 252 /* 253 * For non-QoS this relies on the fact that both the uCode and 254 * mac80211 use TID 0 (as they need to to avoid replay attacks) 255 * for checking the IV in the frames. 256 */ 257 for (i = 0; i < IWL_NUM_RSC; i++) { 258 ieee80211_get_key_rx_seq(key, i, &seq); 259 tkip_sc[i].iv16 = cpu_to_le16(seq.tkip.iv16); 260 tkip_sc[i].iv32 = cpu_to_le32(seq.tkip.iv32); 261 } 262 263 data->have_rsc_tsc = true; 264 break; 265 case WLAN_CIPHER_SUITE_CCMP: 266 case WLAN_CIPHER_SUITE_GCMP: 267 case WLAN_CIPHER_SUITE_GCMP_256: 268 if (sta) { 269 struct aes_sc *aes_tx_sc; 270 u64 pn64; 271 272 aes_sc = 273 data->rsc_tsc->params.all_tsc_rsc.aes.unicast_rsc; 274 aes_tx_sc = 275 &data->rsc_tsc->params.all_tsc_rsc.aes.tsc; 276 277 pn64 = atomic64_read(&key->tx_pn); 278 aes_tx_sc->pn = cpu_to_le64(pn64); 279 } else { 280 aes_sc = 281 data->rsc_tsc->params.all_tsc_rsc.aes.multicast_rsc; 282 } 283 284 /* 285 * For non-QoS this relies on the fact that both the uCode and 286 * mac80211/our RX code use TID 0 for checking the PN. 287 */ 288 if (sta && iwl_mvm_has_new_rx_api(mvm)) { 289 struct iwl_mvm_sta *mvmsta; 290 struct iwl_mvm_key_pn *ptk_pn; 291 const u8 *pn; 292 293 mvmsta = iwl_mvm_sta_from_mac80211(sta); 294 rcu_read_lock(); 295 ptk_pn = rcu_dereference(mvmsta->ptk_pn[key->keyidx]); 296 if (WARN_ON(!ptk_pn)) { 297 rcu_read_unlock(); 298 break; 299 } 300 301 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 302 pn = iwl_mvm_find_max_pn(key, ptk_pn, &seq, i, 303 mvm->trans->num_rx_queues); 304 aes_sc[i].pn = cpu_to_le64((u64)pn[5] | 305 ((u64)pn[4] << 8) | 306 ((u64)pn[3] << 16) | 307 ((u64)pn[2] << 24) | 308 ((u64)pn[1] << 32) | 309 ((u64)pn[0] << 40)); 310 } 311 312 rcu_read_unlock(); 313 } else { 314 for (i = 0; i < IWL_NUM_RSC; i++) { 315 u8 *pn = seq.ccmp.pn; 316 317 ieee80211_get_key_rx_seq(key, i, &seq); 318 aes_sc[i].pn = cpu_to_le64((u64)pn[5] | 319 ((u64)pn[4] << 8) | 320 ((u64)pn[3] << 16) | 321 ((u64)pn[2] << 24) | 322 ((u64)pn[1] << 32) | 323 ((u64)pn[0] << 40)); 324 } 325 } 326 data->have_rsc_tsc = true; 327 break; 328 } 329 } 330 331 struct wowlan_key_rsc_v5_data { 332 struct iwl_wowlan_rsc_tsc_params_cmd *rsc; 333 bool have_rsc; 334 int gtks; 335 int gtk_ids[4]; 336 }; 337 338 static void iwl_mvm_wowlan_get_rsc_v5_data(struct ieee80211_hw *hw, 339 struct ieee80211_vif *vif, 340 struct ieee80211_sta *sta, 341 struct ieee80211_key_conf *key, 342 void *_data) 343 { 344 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 345 struct wowlan_key_rsc_v5_data *data = _data; 346 struct ieee80211_key_seq seq; 347 __le64 *rsc; 348 int i; 349 350 /* only for ciphers that can be PTK/GTK */ 351 switch (key->cipher) { 352 default: 353 return; 354 case WLAN_CIPHER_SUITE_TKIP: 355 case WLAN_CIPHER_SUITE_CCMP: 356 case WLAN_CIPHER_SUITE_GCMP: 357 case WLAN_CIPHER_SUITE_GCMP_256: 358 break; 359 } 360 361 if (sta) { 362 rsc = data->rsc->ucast_rsc; 363 } else { 364 if (WARN_ON(data->gtks >= ARRAY_SIZE(data->gtk_ids))) 365 return; 366 data->gtk_ids[data->gtks] = key->keyidx; 367 rsc = data->rsc->mcast_rsc[data->gtks % 2]; 368 if (WARN_ON(key->keyidx >= 369 ARRAY_SIZE(data->rsc->mcast_key_id_map))) 370 return; 371 data->rsc->mcast_key_id_map[key->keyidx] = data->gtks % 2; 372 if (data->gtks >= 2) { 373 int prev = data->gtks - 2; 374 int prev_idx = data->gtk_ids[prev]; 375 376 data->rsc->mcast_key_id_map[prev_idx] = 377 IWL_MCAST_KEY_MAP_INVALID; 378 } 379 data->gtks++; 380 } 381 382 switch (key->cipher) { 383 default: 384 WARN_ON(1); 385 break; 386 case WLAN_CIPHER_SUITE_TKIP: 387 388 /* 389 * For non-QoS this relies on the fact that both the uCode and 390 * mac80211 use TID 0 (as they need to to avoid replay attacks) 391 * for checking the IV in the frames. 392 */ 393 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 394 ieee80211_get_key_rx_seq(key, i, &seq); 395 396 rsc[i] = cpu_to_le64(((u64)seq.tkip.iv32 << 16) | 397 seq.tkip.iv16); 398 } 399 400 data->have_rsc = true; 401 break; 402 case WLAN_CIPHER_SUITE_CCMP: 403 case WLAN_CIPHER_SUITE_GCMP: 404 case WLAN_CIPHER_SUITE_GCMP_256: 405 /* 406 * For non-QoS this relies on the fact that both the uCode and 407 * mac80211/our RX code use TID 0 for checking the PN. 408 */ 409 if (sta) { 410 struct iwl_mvm_sta *mvmsta; 411 struct iwl_mvm_key_pn *ptk_pn; 412 const u8 *pn; 413 414 mvmsta = iwl_mvm_sta_from_mac80211(sta); 415 rcu_read_lock(); 416 ptk_pn = rcu_dereference(mvmsta->ptk_pn[key->keyidx]); 417 if (WARN_ON(!ptk_pn)) { 418 rcu_read_unlock(); 419 break; 420 } 421 422 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 423 pn = iwl_mvm_find_max_pn(key, ptk_pn, &seq, i, 424 mvm->trans->num_rx_queues); 425 rsc[i] = cpu_to_le64((u64)pn[5] | 426 ((u64)pn[4] << 8) | 427 ((u64)pn[3] << 16) | 428 ((u64)pn[2] << 24) | 429 ((u64)pn[1] << 32) | 430 ((u64)pn[0] << 40)); 431 } 432 433 rcu_read_unlock(); 434 } else { 435 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 436 u8 *pn = seq.ccmp.pn; 437 438 ieee80211_get_key_rx_seq(key, i, &seq); 439 rsc[i] = cpu_to_le64((u64)pn[5] | 440 ((u64)pn[4] << 8) | 441 ((u64)pn[3] << 16) | 442 ((u64)pn[2] << 24) | 443 ((u64)pn[1] << 32) | 444 ((u64)pn[0] << 40)); 445 } 446 } 447 data->have_rsc = true; 448 break; 449 } 450 } 451 452 static int iwl_mvm_wowlan_config_rsc_tsc(struct iwl_mvm *mvm, 453 struct ieee80211_vif *vif) 454 { 455 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 456 int ver = iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_TSC_RSC_PARAM, 457 IWL_FW_CMD_VER_UNKNOWN); 458 int ret; 459 460 if (ver == 5) { 461 struct wowlan_key_rsc_v5_data data = {}; 462 int i; 463 464 data.rsc = kmalloc(sizeof(*data.rsc), GFP_KERNEL); 465 if (!data.rsc) 466 return -ENOMEM; 467 468 memset(data.rsc, 0xff, sizeof(*data.rsc)); 469 470 for (i = 0; i < ARRAY_SIZE(data.rsc->mcast_key_id_map); i++) 471 data.rsc->mcast_key_id_map[i] = 472 IWL_MCAST_KEY_MAP_INVALID; 473 data.rsc->sta_id = cpu_to_le32(mvmvif->deflink.ap_sta_id); 474 475 ieee80211_iter_keys(mvm->hw, vif, 476 iwl_mvm_wowlan_get_rsc_v5_data, 477 &data); 478 479 if (data.have_rsc) 480 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_TSC_RSC_PARAM, 481 CMD_ASYNC, sizeof(*data.rsc), 482 data.rsc); 483 else 484 ret = 0; 485 kfree(data.rsc); 486 } else if (ver == 4 || ver == 2 || ver == IWL_FW_CMD_VER_UNKNOWN) { 487 struct wowlan_key_rsc_tsc_data data = {}; 488 int size; 489 490 data.rsc_tsc = kzalloc(sizeof(*data.rsc_tsc), GFP_KERNEL); 491 if (!data.rsc_tsc) 492 return -ENOMEM; 493 494 if (ver == 4) { 495 size = sizeof(*data.rsc_tsc); 496 data.rsc_tsc->sta_id = 497 cpu_to_le32(mvmvif->deflink.ap_sta_id); 498 } else { 499 /* ver == 2 || ver == IWL_FW_CMD_VER_UNKNOWN */ 500 size = sizeof(data.rsc_tsc->params); 501 } 502 503 ieee80211_iter_keys(mvm->hw, vif, 504 iwl_mvm_wowlan_get_rsc_tsc_data, 505 &data); 506 507 if (data.have_rsc_tsc) 508 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_TSC_RSC_PARAM, 509 CMD_ASYNC, size, 510 data.rsc_tsc); 511 else 512 ret = 0; 513 kfree(data.rsc_tsc); 514 } else { 515 ret = 0; 516 WARN_ON_ONCE(1); 517 } 518 519 return ret; 520 } 521 522 struct wowlan_key_tkip_data { 523 struct iwl_wowlan_tkip_params_cmd tkip; 524 bool have_tkip_keys; 525 }; 526 527 static void iwl_mvm_wowlan_get_tkip_data(struct ieee80211_hw *hw, 528 struct ieee80211_vif *vif, 529 struct ieee80211_sta *sta, 530 struct ieee80211_key_conf *key, 531 void *_data) 532 { 533 struct wowlan_key_tkip_data *data = _data; 534 struct iwl_p1k_cache *rx_p1ks; 535 u8 *rx_mic_key; 536 struct ieee80211_key_seq seq; 537 u32 cur_rx_iv32 = 0; 538 u16 p1k[IWL_P1K_SIZE]; 539 int i; 540 541 switch (key->cipher) { 542 default: 543 break; 544 case WLAN_CIPHER_SUITE_TKIP: 545 if (sta) { 546 u64 pn64; 547 548 rx_p1ks = data->tkip.rx_uni; 549 550 pn64 = atomic64_read(&key->tx_pn); 551 552 ieee80211_get_tkip_p1k_iv(key, TKIP_PN_TO_IV32(pn64), 553 p1k); 554 iwl_mvm_convert_p1k(p1k, data->tkip.tx.p1k); 555 556 memcpy(data->tkip.mic_keys.tx, 557 &key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY], 558 IWL_MIC_KEY_SIZE); 559 560 rx_mic_key = data->tkip.mic_keys.rx_unicast; 561 } else { 562 rx_p1ks = data->tkip.rx_multi; 563 rx_mic_key = data->tkip.mic_keys.rx_mcast; 564 } 565 566 for (i = 0; i < IWL_NUM_RSC; i++) { 567 /* wrapping isn't allowed, AP must rekey */ 568 if (seq.tkip.iv32 > cur_rx_iv32) 569 cur_rx_iv32 = seq.tkip.iv32; 570 } 571 572 ieee80211_get_tkip_rx_p1k(key, vif->bss_conf.bssid, 573 cur_rx_iv32, p1k); 574 iwl_mvm_convert_p1k(p1k, rx_p1ks[0].p1k); 575 ieee80211_get_tkip_rx_p1k(key, vif->bss_conf.bssid, 576 cur_rx_iv32 + 1, p1k); 577 iwl_mvm_convert_p1k(p1k, rx_p1ks[1].p1k); 578 579 memcpy(rx_mic_key, 580 &key->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY], 581 IWL_MIC_KEY_SIZE); 582 583 data->have_tkip_keys = true; 584 break; 585 } 586 } 587 588 struct wowlan_key_gtk_type_iter { 589 struct iwl_wowlan_kek_kck_material_cmd_v4 *kek_kck_cmd; 590 }; 591 592 static void iwl_mvm_wowlan_gtk_type_iter(struct ieee80211_hw *hw, 593 struct ieee80211_vif *vif, 594 struct ieee80211_sta *sta, 595 struct ieee80211_key_conf *key, 596 void *_data) 597 { 598 struct wowlan_key_gtk_type_iter *data = _data; 599 600 switch (key->cipher) { 601 default: 602 return; 603 case WLAN_CIPHER_SUITE_TKIP: 604 if (!sta) 605 data->kek_kck_cmd->gtk_cipher = 606 cpu_to_le32(STA_KEY_FLG_TKIP); 607 return; 608 case WLAN_CIPHER_SUITE_BIP_GMAC_256: 609 case WLAN_CIPHER_SUITE_BIP_GMAC_128: 610 data->kek_kck_cmd->igtk_cipher = cpu_to_le32(STA_KEY_FLG_GCMP); 611 return; 612 case WLAN_CIPHER_SUITE_AES_CMAC: 613 data->kek_kck_cmd->igtk_cipher = cpu_to_le32(STA_KEY_FLG_CCM); 614 return; 615 case WLAN_CIPHER_SUITE_CCMP: 616 if (!sta) 617 data->kek_kck_cmd->gtk_cipher = 618 cpu_to_le32(STA_KEY_FLG_CCM); 619 return; 620 case WLAN_CIPHER_SUITE_GCMP: 621 case WLAN_CIPHER_SUITE_GCMP_256: 622 if (!sta) 623 data->kek_kck_cmd->gtk_cipher = 624 cpu_to_le32(STA_KEY_FLG_GCMP); 625 return; 626 } 627 } 628 629 static int iwl_mvm_send_patterns_v1(struct iwl_mvm *mvm, 630 struct cfg80211_wowlan *wowlan) 631 { 632 struct iwl_wowlan_patterns_cmd_v1 *pattern_cmd; 633 struct iwl_host_cmd cmd = { 634 .id = WOWLAN_PATTERNS, 635 .dataflags[0] = IWL_HCMD_DFL_NOCOPY, 636 }; 637 int i, err; 638 639 if (!wowlan->n_patterns) 640 return 0; 641 642 cmd.len[0] = struct_size(pattern_cmd, patterns, wowlan->n_patterns); 643 644 pattern_cmd = kmalloc(cmd.len[0], GFP_KERNEL); 645 if (!pattern_cmd) 646 return -ENOMEM; 647 648 pattern_cmd->n_patterns = cpu_to_le32(wowlan->n_patterns); 649 650 for (i = 0; i < wowlan->n_patterns; i++) { 651 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8); 652 653 memcpy(&pattern_cmd->patterns[i].mask, 654 wowlan->patterns[i].mask, mask_len); 655 memcpy(&pattern_cmd->patterns[i].pattern, 656 wowlan->patterns[i].pattern, 657 wowlan->patterns[i].pattern_len); 658 pattern_cmd->patterns[i].mask_size = mask_len; 659 pattern_cmd->patterns[i].pattern_size = 660 wowlan->patterns[i].pattern_len; 661 } 662 663 cmd.data[0] = pattern_cmd; 664 err = iwl_mvm_send_cmd(mvm, &cmd); 665 kfree(pattern_cmd); 666 return err; 667 } 668 669 static int iwl_mvm_send_patterns(struct iwl_mvm *mvm, 670 struct ieee80211_vif *vif, 671 struct cfg80211_wowlan *wowlan) 672 { 673 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 674 struct iwl_wowlan_patterns_cmd *pattern_cmd; 675 struct iwl_host_cmd cmd = { 676 .id = WOWLAN_PATTERNS, 677 .dataflags[0] = IWL_HCMD_DFL_NOCOPY, 678 }; 679 int i, err; 680 int ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd.id, 681 IWL_FW_CMD_VER_UNKNOWN); 682 683 if (!wowlan->n_patterns) 684 return 0; 685 686 cmd.len[0] = sizeof(*pattern_cmd) + 687 wowlan->n_patterns * sizeof(struct iwl_wowlan_pattern_v2); 688 689 pattern_cmd = kzalloc(cmd.len[0], GFP_KERNEL); 690 if (!pattern_cmd) 691 return -ENOMEM; 692 693 pattern_cmd->n_patterns = wowlan->n_patterns; 694 if (ver >= 3) 695 pattern_cmd->sta_id = mvmvif->deflink.ap_sta_id; 696 697 for (i = 0; i < wowlan->n_patterns; i++) { 698 int mask_len = DIV_ROUND_UP(wowlan->patterns[i].pattern_len, 8); 699 700 pattern_cmd->patterns[i].pattern_type = 701 WOWLAN_PATTERN_TYPE_BITMASK; 702 703 memcpy(&pattern_cmd->patterns[i].u.bitmask.mask, 704 wowlan->patterns[i].mask, mask_len); 705 memcpy(&pattern_cmd->patterns[i].u.bitmask.pattern, 706 wowlan->patterns[i].pattern, 707 wowlan->patterns[i].pattern_len); 708 pattern_cmd->patterns[i].u.bitmask.mask_size = mask_len; 709 pattern_cmd->patterns[i].u.bitmask.pattern_size = 710 wowlan->patterns[i].pattern_len; 711 } 712 713 cmd.data[0] = pattern_cmd; 714 err = iwl_mvm_send_cmd(mvm, &cmd); 715 kfree(pattern_cmd); 716 return err; 717 } 718 719 static int iwl_mvm_d3_reprogram(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 720 struct ieee80211_sta *ap_sta) 721 { 722 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 723 struct ieee80211_chanctx_conf *ctx; 724 u8 chains_static, chains_dynamic; 725 struct cfg80211_chan_def chandef; 726 int ret, i; 727 struct iwl_binding_cmd_v1 binding_cmd = {}; 728 struct iwl_time_quota_cmd quota_cmd = {}; 729 struct iwl_time_quota_data *quota; 730 u32 status; 731 732 if (WARN_ON_ONCE(iwl_mvm_is_cdb_supported(mvm))) 733 return -EINVAL; 734 735 /* add back the PHY */ 736 if (WARN_ON(!mvmvif->deflink.phy_ctxt)) 737 return -EINVAL; 738 739 rcu_read_lock(); 740 ctx = rcu_dereference(vif->bss_conf.chanctx_conf); 741 if (WARN_ON(!ctx)) { 742 rcu_read_unlock(); 743 return -EINVAL; 744 } 745 chandef = ctx->def; 746 chains_static = ctx->rx_chains_static; 747 chains_dynamic = ctx->rx_chains_dynamic; 748 rcu_read_unlock(); 749 750 ret = iwl_mvm_phy_ctxt_add(mvm, mvmvif->deflink.phy_ctxt, &chandef, 751 chains_static, chains_dynamic); 752 if (ret) 753 return ret; 754 755 /* add back the MAC */ 756 mvmvif->uploaded = false; 757 758 if (WARN_ON(!vif->cfg.assoc)) 759 return -EINVAL; 760 761 ret = iwl_mvm_mac_ctxt_add(mvm, vif); 762 if (ret) 763 return ret; 764 765 /* add back binding - XXX refactor? */ 766 binding_cmd.id_and_color = 767 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->deflink.phy_ctxt->id, 768 mvmvif->deflink.phy_ctxt->color)); 769 binding_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 770 binding_cmd.phy = 771 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->deflink.phy_ctxt->id, 772 mvmvif->deflink.phy_ctxt->color)); 773 binding_cmd.macs[0] = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 774 mvmvif->color)); 775 for (i = 1; i < MAX_MACS_IN_BINDING; i++) 776 binding_cmd.macs[i] = cpu_to_le32(FW_CTXT_INVALID); 777 778 status = 0; 779 ret = iwl_mvm_send_cmd_pdu_status(mvm, BINDING_CONTEXT_CMD, 780 IWL_BINDING_CMD_SIZE_V1, &binding_cmd, 781 &status); 782 if (ret) { 783 IWL_ERR(mvm, "Failed to add binding: %d\n", ret); 784 return ret; 785 } 786 787 if (status) { 788 IWL_ERR(mvm, "Binding command failed: %u\n", status); 789 return -EIO; 790 } 791 792 ret = iwl_mvm_sta_send_to_fw(mvm, ap_sta, false, 0); 793 if (ret) 794 return ret; 795 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvmvif->deflink.ap_sta_id], 796 ap_sta); 797 798 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 799 if (ret) 800 return ret; 801 802 /* and some quota */ 803 quota = iwl_mvm_quota_cmd_get_quota(mvm, "a_cmd, 0); 804 quota->id_and_color = 805 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->deflink.phy_ctxt->id, 806 mvmvif->deflink.phy_ctxt->color)); 807 quota->quota = cpu_to_le32(IWL_MVM_MAX_QUOTA); 808 quota->max_duration = cpu_to_le32(IWL_MVM_MAX_QUOTA); 809 810 for (i = 1; i < MAX_BINDINGS; i++) { 811 quota = iwl_mvm_quota_cmd_get_quota(mvm, "a_cmd, i); 812 quota->id_and_color = cpu_to_le32(FW_CTXT_INVALID); 813 } 814 815 ret = iwl_mvm_send_cmd_pdu(mvm, TIME_QUOTA_CMD, 0, 816 iwl_mvm_quota_cmd_size(mvm), "a_cmd); 817 if (ret) 818 IWL_ERR(mvm, "Failed to send quota: %d\n", ret); 819 820 if (iwl_mvm_is_lar_supported(mvm) && iwl_mvm_init_fw_regd(mvm)) 821 IWL_ERR(mvm, "Failed to initialize D3 LAR information\n"); 822 823 return 0; 824 } 825 826 static int iwl_mvm_get_last_nonqos_seq(struct iwl_mvm *mvm, 827 struct ieee80211_vif *vif) 828 { 829 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 830 struct iwl_nonqos_seq_query_cmd query_cmd = { 831 .get_set_flag = cpu_to_le32(IWL_NONQOS_SEQ_GET), 832 .mac_id_n_color = 833 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 834 mvmvif->color)), 835 }; 836 struct iwl_host_cmd cmd = { 837 .id = NON_QOS_TX_COUNTER_CMD, 838 .flags = CMD_WANT_SKB, 839 }; 840 int err; 841 u32 size; 842 843 cmd.data[0] = &query_cmd; 844 cmd.len[0] = sizeof(query_cmd); 845 846 err = iwl_mvm_send_cmd(mvm, &cmd); 847 if (err) 848 return err; 849 850 size = iwl_rx_packet_payload_len(cmd.resp_pkt); 851 if (size < sizeof(__le16)) { 852 err = -EINVAL; 853 } else { 854 err = le16_to_cpup((__le16 *)cmd.resp_pkt->data); 855 /* firmware returns next, not last-used seqno */ 856 err = (u16) (err - 0x10); 857 } 858 859 iwl_free_resp(&cmd); 860 return err; 861 } 862 863 void iwl_mvm_set_last_nonqos_seq(struct iwl_mvm *mvm, struct ieee80211_vif *vif) 864 { 865 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 866 struct iwl_nonqos_seq_query_cmd query_cmd = { 867 .get_set_flag = cpu_to_le32(IWL_NONQOS_SEQ_SET), 868 .mac_id_n_color = 869 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, 870 mvmvif->color)), 871 .value = cpu_to_le16(mvmvif->seqno), 872 }; 873 874 /* return if called during restart, not resume from D3 */ 875 if (!mvmvif->seqno_valid) 876 return; 877 878 mvmvif->seqno_valid = false; 879 880 if (iwl_mvm_send_cmd_pdu(mvm, NON_QOS_TX_COUNTER_CMD, 0, 881 sizeof(query_cmd), &query_cmd)) 882 IWL_ERR(mvm, "failed to set non-QoS seqno\n"); 883 } 884 885 static int iwl_mvm_switch_to_d3(struct iwl_mvm *mvm) 886 { 887 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true); 888 889 iwl_mvm_stop_device(mvm); 890 /* 891 * Set the HW restart bit -- this is mostly true as we're 892 * going to load new firmware and reprogram that, though 893 * the reprogramming is going to be manual to avoid adding 894 * all the MACs that aren't support. 895 * We don't have to clear up everything though because the 896 * reprogramming is manual. When we resume, we'll actually 897 * go through a proper restart sequence again to switch 898 * back to the runtime firmware image. 899 */ 900 set_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 901 902 /* the fw is reset, so all the keys are cleared */ 903 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table)); 904 905 mvm->ptk_ivlen = 0; 906 mvm->ptk_icvlen = 0; 907 mvm->ptk_ivlen = 0; 908 mvm->ptk_icvlen = 0; 909 910 return iwl_mvm_load_d3_fw(mvm); 911 } 912 913 static int 914 iwl_mvm_get_wowlan_config(struct iwl_mvm *mvm, 915 struct cfg80211_wowlan *wowlan, 916 struct iwl_wowlan_config_cmd *wowlan_config_cmd, 917 struct ieee80211_vif *vif, struct iwl_mvm_vif *mvmvif, 918 struct ieee80211_sta *ap_sta) 919 { 920 struct iwl_mvm_sta *mvm_ap_sta = iwl_mvm_sta_from_mac80211(ap_sta); 921 922 /* TODO: wowlan_config_cmd->wowlan_ba_teardown_tids */ 923 924 wowlan_config_cmd->is_11n_connection = 925 ap_sta->deflink.ht_cap.ht_supported; 926 wowlan_config_cmd->flags = ENABLE_L3_FILTERING | 927 ENABLE_NBNS_FILTERING | ENABLE_DHCP_FILTERING; 928 929 if (iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_CONFIGURATION, 0) < 6) { 930 /* Query the last used seqno and set it */ 931 int ret = iwl_mvm_get_last_nonqos_seq(mvm, vif); 932 933 if (ret < 0) 934 return ret; 935 936 wowlan_config_cmd->non_qos_seq = cpu_to_le16(ret); 937 } 938 939 iwl_mvm_set_wowlan_qos_seq(mvm_ap_sta, wowlan_config_cmd); 940 941 if (wowlan->disconnect) 942 wowlan_config_cmd->wakeup_filter |= 943 cpu_to_le32(IWL_WOWLAN_WAKEUP_BEACON_MISS | 944 IWL_WOWLAN_WAKEUP_LINK_CHANGE); 945 if (wowlan->magic_pkt) 946 wowlan_config_cmd->wakeup_filter |= 947 cpu_to_le32(IWL_WOWLAN_WAKEUP_MAGIC_PACKET); 948 if (wowlan->gtk_rekey_failure) 949 wowlan_config_cmd->wakeup_filter |= 950 cpu_to_le32(IWL_WOWLAN_WAKEUP_GTK_REKEY_FAIL); 951 if (wowlan->eap_identity_req) 952 wowlan_config_cmd->wakeup_filter |= 953 cpu_to_le32(IWL_WOWLAN_WAKEUP_EAP_IDENT_REQ); 954 if (wowlan->four_way_handshake) 955 wowlan_config_cmd->wakeup_filter |= 956 cpu_to_le32(IWL_WOWLAN_WAKEUP_4WAY_HANDSHAKE); 957 if (wowlan->n_patterns) 958 wowlan_config_cmd->wakeup_filter |= 959 cpu_to_le32(IWL_WOWLAN_WAKEUP_PATTERN_MATCH); 960 961 if (wowlan->rfkill_release) 962 wowlan_config_cmd->wakeup_filter |= 963 cpu_to_le32(IWL_WOWLAN_WAKEUP_RF_KILL_DEASSERT); 964 965 if (wowlan->tcp) { 966 /* 967 * Set the "link change" (really "link lost") flag as well 968 * since that implies losing the TCP connection. 969 */ 970 wowlan_config_cmd->wakeup_filter |= 971 cpu_to_le32(IWL_WOWLAN_WAKEUP_REMOTE_LINK_LOSS | 972 IWL_WOWLAN_WAKEUP_REMOTE_SIGNATURE_TABLE | 973 IWL_WOWLAN_WAKEUP_REMOTE_WAKEUP_PACKET | 974 IWL_WOWLAN_WAKEUP_LINK_CHANGE); 975 } 976 977 if (wowlan->any) { 978 wowlan_config_cmd->wakeup_filter |= 979 cpu_to_le32(IWL_WOWLAN_WAKEUP_BEACON_MISS | 980 IWL_WOWLAN_WAKEUP_LINK_CHANGE | 981 IWL_WOWLAN_WAKEUP_RX_FRAME | 982 IWL_WOWLAN_WAKEUP_BCN_FILTERING); 983 } 984 985 return 0; 986 } 987 988 static int iwl_mvm_wowlan_config_key_params(struct iwl_mvm *mvm, 989 struct ieee80211_vif *vif) 990 { 991 bool unified = fw_has_capa(&mvm->fw->ucode_capa, 992 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 993 struct wowlan_key_reprogram_data key_data = {}; 994 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 995 int ret; 996 u8 cmd_ver; 997 size_t cmd_size; 998 999 if (!unified) { 1000 /* 1001 * if we have to configure keys, call ieee80211_iter_keys(), 1002 * as we need non-atomic context in order to take the 1003 * required locks. 1004 */ 1005 /* 1006 * Note that currently we don't use CMD_ASYNC in the iterator. 1007 * In case of key_data.configure_keys, all the configured 1008 * commands are SYNC, and iwl_mvm_wowlan_program_keys() will 1009 * take care of locking/unlocking mvm->mutex. 1010 */ 1011 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_wowlan_program_keys, 1012 &key_data); 1013 1014 if (key_data.error) 1015 return -EIO; 1016 } 1017 1018 ret = iwl_mvm_wowlan_config_rsc_tsc(mvm, vif); 1019 if (ret) 1020 return ret; 1021 1022 if (!fw_has_api(&mvm->fw->ucode_capa, 1023 IWL_UCODE_TLV_API_TKIP_MIC_KEYS)) { 1024 int ver = iwl_fw_lookup_cmd_ver(mvm->fw, WOWLAN_TKIP_PARAM, 1025 IWL_FW_CMD_VER_UNKNOWN); 1026 struct wowlan_key_tkip_data tkip_data = {}; 1027 int size; 1028 1029 if (ver == 2) { 1030 size = sizeof(tkip_data.tkip); 1031 tkip_data.tkip.sta_id = 1032 cpu_to_le32(mvmvif->deflink.ap_sta_id); 1033 } else if (ver == 1 || ver == IWL_FW_CMD_VER_UNKNOWN) { 1034 size = sizeof(struct iwl_wowlan_tkip_params_cmd_ver_1); 1035 } else { 1036 WARN_ON_ONCE(1); 1037 return -EINVAL; 1038 } 1039 1040 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_wowlan_get_tkip_data, 1041 &tkip_data); 1042 1043 if (tkip_data.have_tkip_keys) { 1044 /* send relevant data according to CMD version */ 1045 ret = iwl_mvm_send_cmd_pdu(mvm, 1046 WOWLAN_TKIP_PARAM, 1047 CMD_ASYNC, size, 1048 &tkip_data.tkip); 1049 if (ret) 1050 return ret; 1051 } 1052 } 1053 1054 /* configure rekey data only if offloaded rekey is supported (d3) */ 1055 if (mvmvif->rekey_data.valid) { 1056 struct iwl_wowlan_kek_kck_material_cmd_v4 kek_kck_cmd = {}; 1057 struct iwl_wowlan_kek_kck_material_cmd_v4 *_kek_kck_cmd = 1058 &kek_kck_cmd; 1059 struct wowlan_key_gtk_type_iter gtk_type_data = { 1060 .kek_kck_cmd = _kek_kck_cmd, 1061 }; 1062 1063 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, 1064 WOWLAN_KEK_KCK_MATERIAL, 1065 IWL_FW_CMD_VER_UNKNOWN); 1066 if (WARN_ON(cmd_ver != 2 && cmd_ver != 3 && cmd_ver != 4 && 1067 cmd_ver != IWL_FW_CMD_VER_UNKNOWN)) 1068 return -EINVAL; 1069 1070 ieee80211_iter_keys(mvm->hw, vif, iwl_mvm_wowlan_gtk_type_iter, 1071 >k_type_data); 1072 1073 memcpy(kek_kck_cmd.kck, mvmvif->rekey_data.kck, 1074 mvmvif->rekey_data.kck_len); 1075 kek_kck_cmd.kck_len = cpu_to_le16(mvmvif->rekey_data.kck_len); 1076 memcpy(kek_kck_cmd.kek, mvmvif->rekey_data.kek, 1077 mvmvif->rekey_data.kek_len); 1078 kek_kck_cmd.kek_len = cpu_to_le16(mvmvif->rekey_data.kek_len); 1079 kek_kck_cmd.replay_ctr = mvmvif->rekey_data.replay_ctr; 1080 kek_kck_cmd.akm = cpu_to_le32(mvmvif->rekey_data.akm); 1081 kek_kck_cmd.sta_id = cpu_to_le32(mvmvif->deflink.ap_sta_id); 1082 1083 if (cmd_ver == 4) { 1084 cmd_size = sizeof(struct iwl_wowlan_kek_kck_material_cmd_v4); 1085 } else { 1086 if (cmd_ver == 3) 1087 cmd_size = 1088 sizeof(struct iwl_wowlan_kek_kck_material_cmd_v3); 1089 else 1090 cmd_size = 1091 sizeof(struct iwl_wowlan_kek_kck_material_cmd_v2); 1092 /* skip the sta_id at the beginning */ 1093 _kek_kck_cmd = (void *) 1094 ((u8 *)_kek_kck_cmd + sizeof(kek_kck_cmd.sta_id)); 1095 } 1096 1097 IWL_DEBUG_WOWLAN(mvm, "setting akm %d\n", 1098 mvmvif->rekey_data.akm); 1099 1100 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_KEK_KCK_MATERIAL, 1101 CMD_ASYNC, cmd_size, _kek_kck_cmd); 1102 if (ret) 1103 return ret; 1104 } 1105 1106 return 0; 1107 } 1108 1109 static int 1110 iwl_mvm_wowlan_config(struct iwl_mvm *mvm, 1111 struct cfg80211_wowlan *wowlan, 1112 struct iwl_wowlan_config_cmd *wowlan_config_cmd, 1113 struct ieee80211_vif *vif, struct iwl_mvm_vif *mvmvif, 1114 struct ieee80211_sta *ap_sta) 1115 { 1116 int ret; 1117 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 1118 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1119 1120 mvm->offload_tid = wowlan_config_cmd->offloading_tid; 1121 1122 if (!unified_image) { 1123 ret = iwl_mvm_switch_to_d3(mvm); 1124 if (ret) 1125 return ret; 1126 1127 ret = iwl_mvm_d3_reprogram(mvm, vif, ap_sta); 1128 if (ret) 1129 return ret; 1130 } 1131 1132 /* 1133 * This needs to be unlocked due to lock ordering 1134 * constraints. Since we're in the suspend path 1135 * that isn't really a problem though. 1136 */ 1137 mutex_unlock(&mvm->mutex); 1138 ret = iwl_mvm_wowlan_config_key_params(mvm, vif); 1139 mutex_lock(&mvm->mutex); 1140 if (ret) 1141 return ret; 1142 1143 ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_CONFIGURATION, 0, 1144 sizeof(*wowlan_config_cmd), 1145 wowlan_config_cmd); 1146 if (ret) 1147 return ret; 1148 1149 if (fw_has_api(&mvm->fw->ucode_capa, 1150 IWL_UCODE_TLV_API_WOWLAN_TCP_SYN_WAKE)) 1151 ret = iwl_mvm_send_patterns(mvm, vif, wowlan); 1152 else 1153 ret = iwl_mvm_send_patterns_v1(mvm, wowlan); 1154 if (ret) 1155 return ret; 1156 1157 return iwl_mvm_send_proto_offload(mvm, vif, false, true, 0); 1158 } 1159 1160 static int 1161 iwl_mvm_netdetect_config(struct iwl_mvm *mvm, 1162 struct cfg80211_wowlan *wowlan, 1163 struct cfg80211_sched_scan_request *nd_config, 1164 struct ieee80211_vif *vif) 1165 { 1166 int ret; 1167 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 1168 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1169 1170 if (!unified_image) { 1171 ret = iwl_mvm_switch_to_d3(mvm); 1172 if (ret) 1173 return ret; 1174 } else { 1175 /* In theory, we wouldn't have to stop a running sched 1176 * scan in order to start another one (for 1177 * net-detect). But in practice this doesn't seem to 1178 * work properly, so stop any running sched_scan now. 1179 */ 1180 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true); 1181 if (ret) 1182 return ret; 1183 } 1184 1185 ret = iwl_mvm_sched_scan_start(mvm, vif, nd_config, &mvm->nd_ies, 1186 IWL_MVM_SCAN_NETDETECT); 1187 if (ret) 1188 return ret; 1189 1190 if (WARN_ON(mvm->nd_match_sets || mvm->nd_channels)) 1191 return -EBUSY; 1192 1193 /* save the sched scan matchsets... */ 1194 if (nd_config->n_match_sets) { 1195 mvm->nd_match_sets = kmemdup(nd_config->match_sets, 1196 sizeof(*nd_config->match_sets) * 1197 nd_config->n_match_sets, 1198 GFP_KERNEL); 1199 if (mvm->nd_match_sets) 1200 mvm->n_nd_match_sets = nd_config->n_match_sets; 1201 } 1202 1203 /* ...and the sched scan channels for later reporting */ 1204 mvm->nd_channels = kmemdup(nd_config->channels, 1205 sizeof(*nd_config->channels) * 1206 nd_config->n_channels, 1207 GFP_KERNEL); 1208 if (mvm->nd_channels) 1209 mvm->n_nd_channels = nd_config->n_channels; 1210 1211 return 0; 1212 } 1213 1214 static void iwl_mvm_free_nd(struct iwl_mvm *mvm) 1215 { 1216 kfree(mvm->nd_match_sets); 1217 mvm->nd_match_sets = NULL; 1218 mvm->n_nd_match_sets = 0; 1219 kfree(mvm->nd_channels); 1220 mvm->nd_channels = NULL; 1221 mvm->n_nd_channels = 0; 1222 } 1223 1224 static int __iwl_mvm_suspend(struct ieee80211_hw *hw, 1225 struct cfg80211_wowlan *wowlan, 1226 bool test) 1227 { 1228 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1229 struct ieee80211_vif *vif = NULL; 1230 struct iwl_mvm_vif *mvmvif = NULL; 1231 struct ieee80211_sta *ap_sta = NULL; 1232 struct iwl_d3_manager_config d3_cfg_cmd_data = { 1233 /* 1234 * Program the minimum sleep time to 10 seconds, as many 1235 * platforms have issues processing a wakeup signal while 1236 * still being in the process of suspending. 1237 */ 1238 .min_sleep_time = cpu_to_le32(10 * 1000 * 1000), 1239 }; 1240 struct iwl_host_cmd d3_cfg_cmd = { 1241 .id = D3_CONFIG_CMD, 1242 .flags = CMD_WANT_SKB | CMD_SEND_IN_D3, 1243 .data[0] = &d3_cfg_cmd_data, 1244 .len[0] = sizeof(d3_cfg_cmd_data), 1245 }; 1246 int ret; 1247 int len __maybe_unused; 1248 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 1249 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 1250 1251 if (!wowlan) { 1252 /* 1253 * mac80211 shouldn't get here, but for D3 test 1254 * it doesn't warrant a warning 1255 */ 1256 WARN_ON(!test); 1257 return -EINVAL; 1258 } 1259 1260 mutex_lock(&mvm->mutex); 1261 1262 set_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 1263 1264 synchronize_net(); 1265 1266 vif = iwl_mvm_get_bss_vif(mvm); 1267 if (IS_ERR_OR_NULL(vif)) { 1268 ret = 1; 1269 goto out_noreset; 1270 } 1271 1272 mvmvif = iwl_mvm_vif_from_mac80211(vif); 1273 1274 if (mvmvif->deflink.ap_sta_id == IWL_MVM_INVALID_STA) { 1275 /* if we're not associated, this must be netdetect */ 1276 if (!wowlan->nd_config) { 1277 ret = 1; 1278 goto out_noreset; 1279 } 1280 1281 ret = iwl_mvm_netdetect_config( 1282 mvm, wowlan, wowlan->nd_config, vif); 1283 if (ret) 1284 goto out; 1285 1286 mvm->net_detect = true; 1287 } else { 1288 struct iwl_wowlan_config_cmd wowlan_config_cmd = {}; 1289 1290 wowlan_config_cmd.sta_id = mvmvif->deflink.ap_sta_id; 1291 1292 ap_sta = rcu_dereference_protected( 1293 mvm->fw_id_to_mac_id[mvmvif->deflink.ap_sta_id], 1294 lockdep_is_held(&mvm->mutex)); 1295 if (IS_ERR_OR_NULL(ap_sta)) { 1296 ret = -EINVAL; 1297 goto out_noreset; 1298 } 1299 1300 ret = iwl_mvm_get_wowlan_config(mvm, wowlan, &wowlan_config_cmd, 1301 vif, mvmvif, ap_sta); 1302 if (ret) 1303 goto out_noreset; 1304 ret = iwl_mvm_wowlan_config(mvm, wowlan, &wowlan_config_cmd, 1305 vif, mvmvif, ap_sta); 1306 if (ret) 1307 goto out; 1308 1309 mvm->net_detect = false; 1310 } 1311 1312 ret = iwl_mvm_power_update_device(mvm); 1313 if (ret) 1314 goto out; 1315 1316 ret = iwl_mvm_power_update_mac(mvm); 1317 if (ret) 1318 goto out; 1319 1320 #ifdef CONFIG_IWLWIFI_DEBUGFS 1321 if (mvm->d3_wake_sysassert) 1322 d3_cfg_cmd_data.wakeup_flags |= 1323 cpu_to_le32(IWL_WAKEUP_D3_CONFIG_FW_ERROR); 1324 #endif 1325 1326 /* 1327 * Prior to 9000 device family the driver needs to stop the dbg 1328 * recording before entering D3. In later devices the FW stops the 1329 * recording automatically. 1330 */ 1331 if (mvm->trans->trans_cfg->device_family < IWL_DEVICE_FAMILY_9000) 1332 iwl_fw_dbg_stop_restart_recording(&mvm->fwrt, NULL, true); 1333 1334 mvm->trans->system_pm_mode = IWL_PLAT_PM_MODE_D3; 1335 1336 /* must be last -- this switches firmware state */ 1337 ret = iwl_mvm_send_cmd(mvm, &d3_cfg_cmd); 1338 if (ret) 1339 goto out; 1340 #ifdef CONFIG_IWLWIFI_DEBUGFS 1341 len = iwl_rx_packet_payload_len(d3_cfg_cmd.resp_pkt); 1342 if (len >= sizeof(u32)) { 1343 mvm->d3_test_pme_ptr = 1344 le32_to_cpup((__le32 *)d3_cfg_cmd.resp_pkt->data); 1345 } 1346 #endif 1347 iwl_free_resp(&d3_cfg_cmd); 1348 1349 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 1350 1351 ret = iwl_trans_d3_suspend(mvm->trans, test, !unified_image); 1352 out: 1353 if (ret < 0) { 1354 iwl_mvm_free_nd(mvm); 1355 1356 if (!unified_image) { 1357 if (mvm->fw_restart > 0) { 1358 mvm->fw_restart--; 1359 ieee80211_restart_hw(mvm->hw); 1360 } 1361 } 1362 1363 clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 1364 } 1365 out_noreset: 1366 mutex_unlock(&mvm->mutex); 1367 1368 return ret; 1369 } 1370 1371 int iwl_mvm_suspend(struct ieee80211_hw *hw, struct cfg80211_wowlan *wowlan) 1372 { 1373 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1374 1375 iwl_mvm_pause_tcm(mvm, true); 1376 1377 iwl_fw_runtime_suspend(&mvm->fwrt); 1378 1379 return __iwl_mvm_suspend(hw, wowlan, false); 1380 } 1381 1382 /* converted data from the different status responses */ 1383 struct iwl_wowlan_status_data { 1384 u64 replay_ctr; 1385 u32 num_of_gtk_rekeys; 1386 u32 received_beacons; 1387 u32 wakeup_reasons; 1388 u32 wake_packet_length; 1389 u32 wake_packet_bufsize; 1390 u16 pattern_number; 1391 u16 non_qos_seq_ctr; 1392 u16 qos_seq_ctr[8]; 1393 u8 tid_tear_down; 1394 1395 struct { 1396 /* including RX MIC key for TKIP */ 1397 u8 key[WOWLAN_KEY_MAX_SIZE]; 1398 u8 len; 1399 u8 flags; 1400 } gtk; 1401 1402 struct { 1403 /* 1404 * We store both the TKIP and AES representations 1405 * coming from the firmware because we decode the 1406 * data from there before we iterate the keys and 1407 * know which one we need. 1408 */ 1409 struct { 1410 struct ieee80211_key_seq seq[IWL_MAX_TID_COUNT]; 1411 } tkip, aes; 1412 1413 /* 1414 * We use -1 for when we have valid data but don't know 1415 * the key ID from firmware, and thus it needs to be 1416 * installed with the last key (depending on rekeying). 1417 */ 1418 s8 key_id; 1419 bool valid; 1420 } gtk_seq[2]; 1421 1422 struct { 1423 /* Same as above */ 1424 struct { 1425 struct ieee80211_key_seq seq[IWL_MAX_TID_COUNT]; 1426 u64 tx_pn; 1427 } tkip, aes; 1428 } ptk; 1429 1430 struct { 1431 u64 ipn; 1432 u8 key[WOWLAN_KEY_MAX_SIZE]; 1433 u8 len; 1434 u8 flags; 1435 } igtk; 1436 1437 u8 *wake_packet; 1438 }; 1439 1440 static void iwl_mvm_report_wakeup_reasons(struct iwl_mvm *mvm, 1441 struct ieee80211_vif *vif, 1442 struct iwl_wowlan_status_data *status) 1443 { 1444 struct sk_buff *pkt = NULL; 1445 struct cfg80211_wowlan_wakeup wakeup = { 1446 .pattern_idx = -1, 1447 }; 1448 struct cfg80211_wowlan_wakeup *wakeup_report = &wakeup; 1449 u32 reasons = status->wakeup_reasons; 1450 1451 if (reasons == IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) { 1452 wakeup_report = NULL; 1453 goto report; 1454 } 1455 1456 pm_wakeup_event(mvm->dev, 0); 1457 1458 if (reasons & IWL_WOWLAN_WAKEUP_BY_MAGIC_PACKET) 1459 wakeup.magic_pkt = true; 1460 1461 if (reasons & IWL_WOWLAN_WAKEUP_BY_PATTERN) 1462 wakeup.pattern_idx = 1463 status->pattern_number; 1464 1465 if (reasons & (IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_MISSED_BEACON | 1466 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_DEAUTH)) 1467 wakeup.disconnect = true; 1468 1469 if (reasons & IWL_WOWLAN_WAKEUP_BY_GTK_REKEY_FAILURE) 1470 wakeup.gtk_rekey_failure = true; 1471 1472 if (reasons & IWL_WOWLAN_WAKEUP_BY_RFKILL_DEASSERTED) 1473 wakeup.rfkill_release = true; 1474 1475 if (reasons & IWL_WOWLAN_WAKEUP_BY_EAPOL_REQUEST) 1476 wakeup.eap_identity_req = true; 1477 1478 if (reasons & IWL_WOWLAN_WAKEUP_BY_FOUR_WAY_HANDSHAKE) 1479 wakeup.four_way_handshake = true; 1480 1481 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_LINK_LOSS) 1482 wakeup.tcp_connlost = true; 1483 1484 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_SIGNATURE_TABLE) 1485 wakeup.tcp_nomoretokens = true; 1486 1487 if (reasons & IWL_WOWLAN_WAKEUP_BY_REM_WAKE_WAKEUP_PACKET) 1488 wakeup.tcp_match = true; 1489 1490 if (status->wake_packet) { 1491 int pktsize = status->wake_packet_bufsize; 1492 int pktlen = status->wake_packet_length; 1493 const u8 *pktdata = status->wake_packet; 1494 const struct ieee80211_hdr *hdr = (const void *)pktdata; 1495 int truncated = pktlen - pktsize; 1496 1497 /* this would be a firmware bug */ 1498 if (WARN_ON_ONCE(truncated < 0)) 1499 truncated = 0; 1500 1501 if (ieee80211_is_data(hdr->frame_control)) { 1502 int hdrlen = ieee80211_hdrlen(hdr->frame_control); 1503 int ivlen = 0, icvlen = 4; /* also FCS */ 1504 1505 pkt = alloc_skb(pktsize, GFP_KERNEL); 1506 if (!pkt) 1507 goto report; 1508 1509 skb_put_data(pkt, pktdata, hdrlen); 1510 pktdata += hdrlen; 1511 pktsize -= hdrlen; 1512 1513 if (ieee80211_has_protected(hdr->frame_control)) { 1514 /* 1515 * This is unlocked and using gtk_i(c)vlen, 1516 * but since everything is under RTNL still 1517 * that's not really a problem - changing 1518 * it would be difficult. 1519 */ 1520 if (is_multicast_ether_addr(hdr->addr1)) { 1521 ivlen = mvm->gtk_ivlen; 1522 icvlen += mvm->gtk_icvlen; 1523 } else { 1524 ivlen = mvm->ptk_ivlen; 1525 icvlen += mvm->ptk_icvlen; 1526 } 1527 } 1528 1529 /* if truncated, FCS/ICV is (partially) gone */ 1530 if (truncated >= icvlen) { 1531 icvlen = 0; 1532 truncated -= icvlen; 1533 } else { 1534 icvlen -= truncated; 1535 truncated = 0; 1536 } 1537 1538 pktsize -= ivlen + icvlen; 1539 pktdata += ivlen; 1540 1541 skb_put_data(pkt, pktdata, pktsize); 1542 1543 if (ieee80211_data_to_8023(pkt, vif->addr, vif->type)) 1544 goto report; 1545 wakeup.packet = pkt->data; 1546 wakeup.packet_present_len = pkt->len; 1547 wakeup.packet_len = pkt->len - truncated; 1548 wakeup.packet_80211 = false; 1549 } else { 1550 int fcslen = 4; 1551 1552 if (truncated >= 4) { 1553 truncated -= 4; 1554 fcslen = 0; 1555 } else { 1556 fcslen -= truncated; 1557 truncated = 0; 1558 } 1559 pktsize -= fcslen; 1560 wakeup.packet = status->wake_packet; 1561 wakeup.packet_present_len = pktsize; 1562 wakeup.packet_len = pktlen - truncated; 1563 wakeup.packet_80211 = true; 1564 } 1565 } 1566 1567 report: 1568 ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL); 1569 kfree_skb(pkt); 1570 } 1571 1572 static void iwl_mvm_le64_to_aes_seq(__le64 le_pn, struct ieee80211_key_seq *seq) 1573 { 1574 u64 pn = le64_to_cpu(le_pn); 1575 1576 seq->ccmp.pn[0] = pn >> 40; 1577 seq->ccmp.pn[1] = pn >> 32; 1578 seq->ccmp.pn[2] = pn >> 24; 1579 seq->ccmp.pn[3] = pn >> 16; 1580 seq->ccmp.pn[4] = pn >> 8; 1581 seq->ccmp.pn[5] = pn; 1582 } 1583 1584 static void iwl_mvm_aes_sc_to_seq(struct aes_sc *sc, 1585 struct ieee80211_key_seq *seq) 1586 { 1587 iwl_mvm_le64_to_aes_seq(sc->pn, seq); 1588 } 1589 1590 static void iwl_mvm_le64_to_tkip_seq(__le64 le_pn, struct ieee80211_key_seq *seq) 1591 { 1592 u64 pn = le64_to_cpu(le_pn); 1593 1594 seq->tkip.iv16 = (u16)pn; 1595 seq->tkip.iv32 = (u32)(pn >> 16); 1596 } 1597 1598 static void iwl_mvm_tkip_sc_to_seq(struct tkip_sc *sc, 1599 struct ieee80211_key_seq *seq) 1600 { 1601 seq->tkip.iv32 = le32_to_cpu(sc->iv32); 1602 seq->tkip.iv16 = le16_to_cpu(sc->iv16); 1603 } 1604 1605 static void iwl_mvm_set_key_rx_seq_tids(struct ieee80211_key_conf *key, 1606 struct ieee80211_key_seq *seq) 1607 { 1608 int tid; 1609 1610 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) 1611 ieee80211_set_key_rx_seq(key, tid, &seq[tid]); 1612 } 1613 1614 static void iwl_mvm_set_aes_ptk_rx_seq(struct iwl_mvm *mvm, 1615 struct iwl_wowlan_status_data *status, 1616 struct ieee80211_sta *sta, 1617 struct ieee80211_key_conf *key) 1618 { 1619 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 1620 struct iwl_mvm_key_pn *ptk_pn; 1621 int tid; 1622 1623 iwl_mvm_set_key_rx_seq_tids(key, status->ptk.aes.seq); 1624 1625 if (!iwl_mvm_has_new_rx_api(mvm)) 1626 return; 1627 1628 1629 rcu_read_lock(); 1630 ptk_pn = rcu_dereference(mvmsta->ptk_pn[key->keyidx]); 1631 if (WARN_ON(!ptk_pn)) { 1632 rcu_read_unlock(); 1633 return; 1634 } 1635 1636 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 1637 int i; 1638 1639 for (i = 1; i < mvm->trans->num_rx_queues; i++) 1640 memcpy(ptk_pn->q[i].pn[tid], 1641 status->ptk.aes.seq[tid].ccmp.pn, 1642 IEEE80211_CCMP_PN_LEN); 1643 } 1644 rcu_read_unlock(); 1645 } 1646 1647 static void iwl_mvm_convert_key_counters(struct iwl_wowlan_status_data *status, 1648 union iwl_all_tsc_rsc *sc) 1649 { 1650 int i; 1651 1652 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_MAX_TID_COUNT); 1653 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_NUM_RSC); 1654 1655 /* GTK RX counters */ 1656 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 1657 iwl_mvm_tkip_sc_to_seq(&sc->tkip.multicast_rsc[i], 1658 &status->gtk_seq[0].tkip.seq[i]); 1659 iwl_mvm_aes_sc_to_seq(&sc->aes.multicast_rsc[i], 1660 &status->gtk_seq[0].aes.seq[i]); 1661 } 1662 status->gtk_seq[0].valid = true; 1663 status->gtk_seq[0].key_id = -1; 1664 1665 /* PTK TX counter */ 1666 status->ptk.tkip.tx_pn = (u64)le16_to_cpu(sc->tkip.tsc.iv16) | 1667 ((u64)le32_to_cpu(sc->tkip.tsc.iv32) << 16); 1668 status->ptk.aes.tx_pn = le64_to_cpu(sc->aes.tsc.pn); 1669 1670 /* PTK RX counters */ 1671 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 1672 iwl_mvm_tkip_sc_to_seq(&sc->tkip.unicast_rsc[i], 1673 &status->ptk.tkip.seq[i]); 1674 iwl_mvm_aes_sc_to_seq(&sc->aes.unicast_rsc[i], 1675 &status->ptk.aes.seq[i]); 1676 } 1677 } 1678 1679 static void 1680 iwl_mvm_convert_key_counters_v5_gtk_seq(struct iwl_wowlan_status_data *status, 1681 struct iwl_wowlan_all_rsc_tsc_v5 *sc, 1682 unsigned int idx, unsigned int key_id) 1683 { 1684 int tid; 1685 1686 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 1687 iwl_mvm_le64_to_tkip_seq(sc->mcast_rsc[idx][tid], 1688 &status->gtk_seq[idx].tkip.seq[tid]); 1689 iwl_mvm_le64_to_aes_seq(sc->mcast_rsc[idx][tid], 1690 &status->gtk_seq[idx].aes.seq[tid]); 1691 } 1692 1693 status->gtk_seq[idx].valid = true; 1694 status->gtk_seq[idx].key_id = key_id; 1695 } 1696 1697 static void 1698 iwl_mvm_convert_key_counters_v5(struct iwl_wowlan_status_data *status, 1699 struct iwl_wowlan_all_rsc_tsc_v5 *sc) 1700 { 1701 int i, tid; 1702 1703 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_MAX_TID_COUNT); 1704 BUILD_BUG_ON(IWL_MAX_TID_COUNT > IWL_NUM_RSC); 1705 BUILD_BUG_ON(ARRAY_SIZE(sc->mcast_rsc) != ARRAY_SIZE(status->gtk_seq)); 1706 1707 /* GTK RX counters */ 1708 for (i = 0; i < ARRAY_SIZE(sc->mcast_key_id_map); i++) { 1709 u8 entry = sc->mcast_key_id_map[i]; 1710 1711 if (entry < ARRAY_SIZE(sc->mcast_rsc)) 1712 iwl_mvm_convert_key_counters_v5_gtk_seq(status, sc, 1713 entry, i); 1714 } 1715 1716 /* PTK TX counters not needed, assigned in device */ 1717 1718 /* PTK RX counters */ 1719 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 1720 iwl_mvm_le64_to_tkip_seq(sc->ucast_rsc[tid], 1721 &status->ptk.tkip.seq[tid]); 1722 iwl_mvm_le64_to_aes_seq(sc->ucast_rsc[tid], 1723 &status->ptk.aes.seq[tid]); 1724 } 1725 } 1726 1727 static void iwl_mvm_set_key_rx_seq_idx(struct ieee80211_key_conf *key, 1728 struct iwl_wowlan_status_data *status, 1729 int idx) 1730 { 1731 switch (key->cipher) { 1732 case WLAN_CIPHER_SUITE_CCMP: 1733 case WLAN_CIPHER_SUITE_GCMP: 1734 case WLAN_CIPHER_SUITE_GCMP_256: 1735 iwl_mvm_set_key_rx_seq_tids(key, status->gtk_seq[idx].aes.seq); 1736 break; 1737 case WLAN_CIPHER_SUITE_TKIP: 1738 iwl_mvm_set_key_rx_seq_tids(key, status->gtk_seq[idx].tkip.seq); 1739 break; 1740 default: 1741 WARN_ON(1); 1742 } 1743 } 1744 1745 static void iwl_mvm_set_key_rx_seq(struct ieee80211_key_conf *key, 1746 struct iwl_wowlan_status_data *status, 1747 bool installed) 1748 { 1749 int i; 1750 1751 for (i = 0; i < ARRAY_SIZE(status->gtk_seq); i++) { 1752 if (!status->gtk_seq[i].valid) 1753 continue; 1754 1755 /* Handle the case where we know the key ID */ 1756 if (status->gtk_seq[i].key_id == key->keyidx) { 1757 s8 new_key_id = -1; 1758 1759 if (status->num_of_gtk_rekeys) 1760 new_key_id = status->gtk.flags & 1761 IWL_WOWLAN_GTK_IDX_MASK; 1762 1763 /* Don't install a new key's value to an old key */ 1764 if (new_key_id != key->keyidx) 1765 iwl_mvm_set_key_rx_seq_idx(key, status, i); 1766 continue; 1767 } 1768 1769 /* handle the case where we didn't, last key only */ 1770 if (status->gtk_seq[i].key_id == -1 && 1771 (!status->num_of_gtk_rekeys || installed)) 1772 iwl_mvm_set_key_rx_seq_idx(key, status, i); 1773 } 1774 } 1775 1776 struct iwl_mvm_d3_gtk_iter_data { 1777 struct iwl_mvm *mvm; 1778 struct iwl_wowlan_status_data *status; 1779 void *last_gtk; 1780 u32 cipher; 1781 bool find_phase, unhandled_cipher; 1782 int num_keys; 1783 }; 1784 1785 static void iwl_mvm_d3_update_keys(struct ieee80211_hw *hw, 1786 struct ieee80211_vif *vif, 1787 struct ieee80211_sta *sta, 1788 struct ieee80211_key_conf *key, 1789 void *_data) 1790 { 1791 struct iwl_mvm_d3_gtk_iter_data *data = _data; 1792 struct iwl_wowlan_status_data *status = data->status; 1793 1794 if (data->unhandled_cipher) 1795 return; 1796 1797 switch (key->cipher) { 1798 case WLAN_CIPHER_SUITE_WEP40: 1799 case WLAN_CIPHER_SUITE_WEP104: 1800 /* ignore WEP completely, nothing to do */ 1801 return; 1802 case WLAN_CIPHER_SUITE_CCMP: 1803 case WLAN_CIPHER_SUITE_GCMP: 1804 case WLAN_CIPHER_SUITE_GCMP_256: 1805 case WLAN_CIPHER_SUITE_TKIP: 1806 /* we support these */ 1807 break; 1808 default: 1809 /* everything else (even CMAC for MFP) - disconnect from AP */ 1810 data->unhandled_cipher = true; 1811 return; 1812 } 1813 1814 data->num_keys++; 1815 1816 /* 1817 * pairwise key - update sequence counters only; 1818 * note that this assumes no TDLS sessions are active 1819 */ 1820 if (sta) { 1821 if (data->find_phase) 1822 return; 1823 1824 switch (key->cipher) { 1825 case WLAN_CIPHER_SUITE_CCMP: 1826 case WLAN_CIPHER_SUITE_GCMP: 1827 case WLAN_CIPHER_SUITE_GCMP_256: 1828 atomic64_set(&key->tx_pn, status->ptk.aes.tx_pn); 1829 iwl_mvm_set_aes_ptk_rx_seq(data->mvm, status, sta, key); 1830 break; 1831 case WLAN_CIPHER_SUITE_TKIP: 1832 atomic64_set(&key->tx_pn, status->ptk.tkip.tx_pn); 1833 iwl_mvm_set_key_rx_seq_tids(key, status->ptk.tkip.seq); 1834 break; 1835 } 1836 1837 /* that's it for this key */ 1838 return; 1839 } 1840 1841 if (data->find_phase) { 1842 data->last_gtk = key; 1843 data->cipher = key->cipher; 1844 return; 1845 } 1846 1847 if (data->status->num_of_gtk_rekeys) 1848 ieee80211_remove_key(key); 1849 1850 if (data->last_gtk == key) 1851 iwl_mvm_set_key_rx_seq(key, data->status, false); 1852 } 1853 1854 static bool iwl_mvm_setup_connection_keep(struct iwl_mvm *mvm, 1855 struct ieee80211_vif *vif, 1856 struct iwl_wowlan_status_data *status) 1857 { 1858 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1859 struct iwl_mvm_d3_gtk_iter_data gtkdata = { 1860 .mvm = mvm, 1861 .status = status, 1862 }; 1863 u32 disconnection_reasons = 1864 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_MISSED_BEACON | 1865 IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_DEAUTH; 1866 1867 if (!status || !vif->bss_conf.bssid) 1868 return false; 1869 1870 if (status->wakeup_reasons & disconnection_reasons) 1871 return false; 1872 1873 /* find last GTK that we used initially, if any */ 1874 gtkdata.find_phase = true; 1875 ieee80211_iter_keys(mvm->hw, vif, 1876 iwl_mvm_d3_update_keys, >kdata); 1877 /* not trying to keep connections with MFP/unhandled ciphers */ 1878 if (gtkdata.unhandled_cipher) 1879 return false; 1880 if (!gtkdata.num_keys) 1881 goto out; 1882 if (!gtkdata.last_gtk) 1883 return false; 1884 1885 /* 1886 * invalidate all other GTKs that might still exist and update 1887 * the one that we used 1888 */ 1889 gtkdata.find_phase = false; 1890 ieee80211_iter_keys(mvm->hw, vif, 1891 iwl_mvm_d3_update_keys, >kdata); 1892 1893 IWL_DEBUG_WOWLAN(mvm, "num of GTK rekeying %d\n", 1894 status->num_of_gtk_rekeys); 1895 if (status->num_of_gtk_rekeys) { 1896 struct ieee80211_key_conf *key; 1897 struct { 1898 struct ieee80211_key_conf conf; 1899 u8 key[32]; 1900 } conf = { 1901 .conf.cipher = gtkdata.cipher, 1902 .conf.keyidx = 1903 status->gtk.flags & IWL_WOWLAN_GTK_IDX_MASK, 1904 }; 1905 __be64 replay_ctr; 1906 1907 IWL_DEBUG_WOWLAN(mvm, 1908 "Received from FW GTK cipher %d, key index %d\n", 1909 conf.conf.cipher, conf.conf.keyidx); 1910 1911 BUILD_BUG_ON(WLAN_KEY_LEN_CCMP != WLAN_KEY_LEN_GCMP); 1912 BUILD_BUG_ON(sizeof(conf.key) < WLAN_KEY_LEN_CCMP); 1913 BUILD_BUG_ON(sizeof(conf.key) < WLAN_KEY_LEN_GCMP_256); 1914 BUILD_BUG_ON(sizeof(conf.key) < WLAN_KEY_LEN_TKIP); 1915 BUILD_BUG_ON(sizeof(conf.key) < sizeof(status->gtk.key)); 1916 1917 memcpy(conf.conf.key, status->gtk.key, sizeof(status->gtk.key)); 1918 1919 switch (gtkdata.cipher) { 1920 case WLAN_CIPHER_SUITE_CCMP: 1921 case WLAN_CIPHER_SUITE_GCMP: 1922 conf.conf.keylen = WLAN_KEY_LEN_CCMP; 1923 break; 1924 case WLAN_CIPHER_SUITE_GCMP_256: 1925 conf.conf.keylen = WLAN_KEY_LEN_GCMP_256; 1926 break; 1927 case WLAN_CIPHER_SUITE_TKIP: 1928 conf.conf.keylen = WLAN_KEY_LEN_TKIP; 1929 break; 1930 } 1931 1932 key = ieee80211_gtk_rekey_add(vif, &conf.conf); 1933 if (IS_ERR(key)) 1934 return false; 1935 iwl_mvm_set_key_rx_seq(key, status, true); 1936 1937 replay_ctr = cpu_to_be64(status->replay_ctr); 1938 1939 ieee80211_gtk_rekey_notify(vif, vif->bss_conf.bssid, 1940 (void *)&replay_ctr, GFP_KERNEL); 1941 } 1942 1943 out: 1944 if (iwl_fw_lookup_notif_ver(mvm->fw, LONG_GROUP, 1945 WOWLAN_GET_STATUSES, 0) < 10) { 1946 mvmvif->seqno_valid = true; 1947 /* +0x10 because the set API expects next-to-use, not last-used */ 1948 mvmvif->seqno = status->non_qos_seq_ctr + 0x10; 1949 } 1950 1951 return true; 1952 } 1953 1954 static void iwl_mvm_convert_gtk_v2(struct iwl_wowlan_status_data *status, 1955 struct iwl_wowlan_gtk_status_v2 *data) 1956 { 1957 BUILD_BUG_ON(sizeof(status->gtk.key) < sizeof(data->key)); 1958 BUILD_BUG_ON(NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY + 1959 sizeof(data->tkip_mic_key) > 1960 sizeof(status->gtk.key)); 1961 1962 status->gtk.len = data->key_len; 1963 status->gtk.flags = data->key_flags; 1964 1965 memcpy(status->gtk.key, data->key, sizeof(data->key)); 1966 1967 /* if it's as long as the TKIP encryption key, copy MIC key */ 1968 if (status->gtk.len == NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY) 1969 memcpy(status->gtk.key + NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY, 1970 data->tkip_mic_key, sizeof(data->tkip_mic_key)); 1971 } 1972 1973 static void iwl_mvm_convert_gtk_v3(struct iwl_wowlan_status_data *status, 1974 struct iwl_wowlan_gtk_status_v3 *data) 1975 { 1976 /* The parts we need are identical in v2 and v3 */ 1977 #define CHECK(_f) do { \ 1978 BUILD_BUG_ON(offsetof(struct iwl_wowlan_gtk_status_v2, _f) != \ 1979 offsetof(struct iwl_wowlan_gtk_status_v3, _f)); \ 1980 BUILD_BUG_ON(offsetofend(struct iwl_wowlan_gtk_status_v2, _f) !=\ 1981 offsetofend(struct iwl_wowlan_gtk_status_v3, _f)); \ 1982 } while (0) 1983 1984 CHECK(key); 1985 CHECK(key_len); 1986 CHECK(key_flags); 1987 CHECK(tkip_mic_key); 1988 #undef CHECK 1989 1990 iwl_mvm_convert_gtk_v2(status, (void *)data); 1991 } 1992 1993 static void iwl_mvm_convert_igtk(struct iwl_wowlan_status_data *status, 1994 struct iwl_wowlan_igtk_status *data) 1995 { 1996 const u8 *ipn = data->ipn; 1997 1998 BUILD_BUG_ON(sizeof(status->igtk.key) < sizeof(data->key)); 1999 2000 status->igtk.len = data->key_len; 2001 status->igtk.flags = data->key_flags; 2002 2003 memcpy(status->igtk.key, data->key, sizeof(data->key)); 2004 2005 status->igtk.ipn = ((u64)ipn[5] << 0) | 2006 ((u64)ipn[4] << 8) | 2007 ((u64)ipn[3] << 16) | 2008 ((u64)ipn[2] << 24) | 2009 ((u64)ipn[1] << 32) | 2010 ((u64)ipn[0] << 40); 2011 } 2012 2013 static void iwl_mvm_parse_wowlan_info_notif(struct iwl_mvm *mvm, 2014 struct iwl_wowlan_info_notif *data, 2015 struct iwl_wowlan_status_data *status, 2016 u32 len) 2017 { 2018 u32 i; 2019 2020 if (len < sizeof(*data)) { 2021 IWL_ERR(mvm, "Invalid WoWLAN info notification!\n"); 2022 status = NULL; 2023 return; 2024 } 2025 2026 iwl_mvm_convert_key_counters_v5(status, &data->gtk[0].sc); 2027 iwl_mvm_convert_gtk_v3(status, &data->gtk[0]); 2028 iwl_mvm_convert_igtk(status, &data->igtk[0]); 2029 2030 status->replay_ctr = le64_to_cpu(data->replay_ctr); 2031 status->pattern_number = le16_to_cpu(data->pattern_number); 2032 for (i = 0; i < IWL_MAX_TID_COUNT; i++) 2033 status->qos_seq_ctr[i] = 2034 le16_to_cpu(data->qos_seq_ctr[i]); 2035 status->wakeup_reasons = le32_to_cpu(data->wakeup_reasons); 2036 status->num_of_gtk_rekeys = 2037 le32_to_cpu(data->num_of_gtk_rekeys); 2038 status->received_beacons = le32_to_cpu(data->received_beacons); 2039 status->tid_tear_down = data->tid_tear_down; 2040 } 2041 2042 /* Occasionally, templates would be nice. This is one of those times ... */ 2043 #define iwl_mvm_parse_wowlan_status_common(_ver) \ 2044 static struct iwl_wowlan_status_data * \ 2045 iwl_mvm_parse_wowlan_status_common_ ## _ver(struct iwl_mvm *mvm, \ 2046 struct iwl_wowlan_status_ ##_ver *data,\ 2047 int len) \ 2048 { \ 2049 struct iwl_wowlan_status_data *status; \ 2050 int data_size, i; \ 2051 \ 2052 if (len < sizeof(*data)) { \ 2053 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); \ 2054 return NULL; \ 2055 } \ 2056 \ 2057 data_size = ALIGN(le32_to_cpu(data->wake_packet_bufsize), 4); \ 2058 if (len != sizeof(*data) + data_size) { \ 2059 IWL_ERR(mvm, "Invalid WoWLAN status response!\n"); \ 2060 return NULL; \ 2061 } \ 2062 \ 2063 status = kzalloc(sizeof(*status), GFP_KERNEL); \ 2064 if (!status) \ 2065 return NULL; \ 2066 \ 2067 /* copy all the common fields */ \ 2068 status->replay_ctr = le64_to_cpu(data->replay_ctr); \ 2069 status->pattern_number = le16_to_cpu(data->pattern_number); \ 2070 status->non_qos_seq_ctr = le16_to_cpu(data->non_qos_seq_ctr); \ 2071 for (i = 0; i < 8; i++) \ 2072 status->qos_seq_ctr[i] = \ 2073 le16_to_cpu(data->qos_seq_ctr[i]); \ 2074 status->wakeup_reasons = le32_to_cpu(data->wakeup_reasons); \ 2075 status->num_of_gtk_rekeys = \ 2076 le32_to_cpu(data->num_of_gtk_rekeys); \ 2077 status->received_beacons = le32_to_cpu(data->received_beacons); \ 2078 status->wake_packet_length = \ 2079 le32_to_cpu(data->wake_packet_length); \ 2080 status->wake_packet_bufsize = \ 2081 le32_to_cpu(data->wake_packet_bufsize); \ 2082 if (status->wake_packet_bufsize) { \ 2083 status->wake_packet = \ 2084 kmemdup(data->wake_packet, \ 2085 status->wake_packet_bufsize, \ 2086 GFP_KERNEL); \ 2087 if (!status->wake_packet) { \ 2088 kfree(status); \ 2089 return NULL; \ 2090 } \ 2091 } else { \ 2092 status->wake_packet = NULL; \ 2093 } \ 2094 \ 2095 return status; \ 2096 } 2097 2098 iwl_mvm_parse_wowlan_status_common(v6) 2099 iwl_mvm_parse_wowlan_status_common(v7) 2100 iwl_mvm_parse_wowlan_status_common(v9) 2101 iwl_mvm_parse_wowlan_status_common(v12) 2102 2103 static struct iwl_wowlan_status_data * 2104 iwl_mvm_send_wowlan_get_status(struct iwl_mvm *mvm, u8 sta_id) 2105 { 2106 struct iwl_wowlan_status_data *status; 2107 struct iwl_wowlan_get_status_cmd get_status_cmd = { 2108 .sta_id = cpu_to_le32(sta_id), 2109 }; 2110 struct iwl_host_cmd cmd = { 2111 .id = WOWLAN_GET_STATUSES, 2112 .flags = CMD_WANT_SKB, 2113 .data = { &get_status_cmd, }, 2114 .len = { sizeof(get_status_cmd), }, 2115 }; 2116 int ret, len; 2117 u8 notif_ver; 2118 u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd.id, 2119 IWL_FW_CMD_VER_UNKNOWN); 2120 2121 if (cmd_ver == IWL_FW_CMD_VER_UNKNOWN) 2122 cmd.len[0] = 0; 2123 2124 lockdep_assert_held(&mvm->mutex); 2125 2126 ret = iwl_mvm_send_cmd(mvm, &cmd); 2127 if (ret) { 2128 IWL_ERR(mvm, "failed to query wakeup status (%d)\n", ret); 2129 return ERR_PTR(ret); 2130 } 2131 2132 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 2133 2134 /* default to 7 (when we have IWL_UCODE_TLV_API_WOWLAN_KEY_MATERIAL) */ 2135 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, LONG_GROUP, 2136 WOWLAN_GET_STATUSES, 0); 2137 if (!notif_ver) 2138 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, LEGACY_GROUP, 2139 WOWLAN_GET_STATUSES, 7); 2140 2141 if (!fw_has_api(&mvm->fw->ucode_capa, 2142 IWL_UCODE_TLV_API_WOWLAN_KEY_MATERIAL)) { 2143 struct iwl_wowlan_status_v6 *v6 = (void *)cmd.resp_pkt->data; 2144 2145 status = iwl_mvm_parse_wowlan_status_common_v6(mvm, v6, len); 2146 if (!status) 2147 goto out_free_resp; 2148 2149 BUILD_BUG_ON(sizeof(v6->gtk.decrypt_key) > 2150 sizeof(status->gtk.key)); 2151 BUILD_BUG_ON(NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY + 2152 sizeof(v6->gtk.tkip_mic_key) > 2153 sizeof(status->gtk.key)); 2154 2155 /* copy GTK info to the right place */ 2156 memcpy(status->gtk.key, v6->gtk.decrypt_key, 2157 sizeof(v6->gtk.decrypt_key)); 2158 memcpy(status->gtk.key + NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY, 2159 v6->gtk.tkip_mic_key, 2160 sizeof(v6->gtk.tkip_mic_key)); 2161 2162 iwl_mvm_convert_key_counters(status, &v6->gtk.rsc.all_tsc_rsc); 2163 2164 /* hardcode the key length to 16 since v6 only supports 16 */ 2165 status->gtk.len = 16; 2166 2167 /* 2168 * The key index only uses 2 bits (values 0 to 3) and 2169 * we always set bit 7 which means this is the 2170 * currently used key. 2171 */ 2172 status->gtk.flags = v6->gtk.key_index | BIT(7); 2173 } else if (notif_ver == 7) { 2174 struct iwl_wowlan_status_v7 *v7 = (void *)cmd.resp_pkt->data; 2175 2176 status = iwl_mvm_parse_wowlan_status_common_v7(mvm, v7, len); 2177 if (!status) 2178 goto out_free_resp; 2179 2180 iwl_mvm_convert_key_counters(status, &v7->gtk[0].rsc.all_tsc_rsc); 2181 iwl_mvm_convert_gtk_v2(status, &v7->gtk[0]); 2182 iwl_mvm_convert_igtk(status, &v7->igtk[0]); 2183 } else if (notif_ver == 9 || notif_ver == 10 || notif_ver == 11) { 2184 struct iwl_wowlan_status_v9 *v9 = (void *)cmd.resp_pkt->data; 2185 2186 /* these three command versions have same layout and size, the 2187 * difference is only in a few not used (reserved) fields. 2188 */ 2189 status = iwl_mvm_parse_wowlan_status_common_v9(mvm, v9, len); 2190 if (!status) 2191 goto out_free_resp; 2192 2193 iwl_mvm_convert_key_counters(status, &v9->gtk[0].rsc.all_tsc_rsc); 2194 iwl_mvm_convert_gtk_v2(status, &v9->gtk[0]); 2195 iwl_mvm_convert_igtk(status, &v9->igtk[0]); 2196 2197 status->tid_tear_down = v9->tid_tear_down; 2198 } else if (notif_ver == 12) { 2199 struct iwl_wowlan_status_v12 *v12 = (void *)cmd.resp_pkt->data; 2200 2201 status = iwl_mvm_parse_wowlan_status_common_v12(mvm, v12, len); 2202 if (!status) 2203 goto out_free_resp; 2204 2205 iwl_mvm_convert_key_counters_v5(status, &v12->gtk[0].sc); 2206 iwl_mvm_convert_gtk_v3(status, &v12->gtk[0]); 2207 iwl_mvm_convert_igtk(status, &v12->igtk[0]); 2208 2209 status->tid_tear_down = v12->tid_tear_down; 2210 } else { 2211 IWL_ERR(mvm, 2212 "Firmware advertises unknown WoWLAN status response %d!\n", 2213 notif_ver); 2214 status = NULL; 2215 } 2216 2217 out_free_resp: 2218 iwl_free_resp(&cmd); 2219 return status; 2220 } 2221 2222 /* releases the MVM mutex */ 2223 static bool iwl_mvm_query_wakeup_reasons(struct iwl_mvm *mvm, 2224 struct ieee80211_vif *vif, 2225 struct iwl_wowlan_status_data *status) 2226 { 2227 int i; 2228 bool keep; 2229 struct iwl_mvm_sta *mvm_ap_sta; 2230 2231 if (!status) 2232 goto out_unlock; 2233 2234 IWL_DEBUG_WOWLAN(mvm, "wakeup reason 0x%x\n", 2235 status->wakeup_reasons); 2236 2237 /* still at hard-coded place 0 for D3 image */ 2238 mvm_ap_sta = iwl_mvm_sta_from_staid_protected(mvm, 0); 2239 if (!mvm_ap_sta) 2240 goto out_unlock; 2241 2242 for (i = 0; i < IWL_MAX_TID_COUNT; i++) { 2243 u16 seq = status->qos_seq_ctr[i]; 2244 /* firmware stores last-used value, we store next value */ 2245 seq += 0x10; 2246 mvm_ap_sta->tid_data[i].seq_number = seq; 2247 } 2248 2249 if (mvm->trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_22000) { 2250 i = mvm->offload_tid; 2251 iwl_trans_set_q_ptrs(mvm->trans, 2252 mvm_ap_sta->tid_data[i].txq_id, 2253 mvm_ap_sta->tid_data[i].seq_number >> 4); 2254 } 2255 2256 /* now we have all the data we need, unlock to avoid mac80211 issues */ 2257 mutex_unlock(&mvm->mutex); 2258 2259 iwl_mvm_report_wakeup_reasons(mvm, vif, status); 2260 2261 keep = iwl_mvm_setup_connection_keep(mvm, vif, status); 2262 2263 return keep; 2264 2265 out_unlock: 2266 mutex_unlock(&mvm->mutex); 2267 return false; 2268 } 2269 2270 #define ND_QUERY_BUF_LEN (sizeof(struct iwl_scan_offload_profile_match) * \ 2271 IWL_SCAN_MAX_PROFILES) 2272 2273 struct iwl_mvm_nd_results { 2274 u32 matched_profiles; 2275 u8 matches[ND_QUERY_BUF_LEN]; 2276 }; 2277 2278 static int 2279 iwl_mvm_netdetect_query_results(struct iwl_mvm *mvm, 2280 struct iwl_mvm_nd_results *results) 2281 { 2282 struct iwl_scan_offload_match_info *query; 2283 struct iwl_host_cmd cmd = { 2284 .id = SCAN_OFFLOAD_PROFILES_QUERY_CMD, 2285 .flags = CMD_WANT_SKB, 2286 }; 2287 int ret, len; 2288 size_t query_len, matches_len; 2289 int max_profiles = iwl_umac_scan_get_max_profiles(mvm->fw); 2290 2291 ret = iwl_mvm_send_cmd(mvm, &cmd); 2292 if (ret) { 2293 IWL_ERR(mvm, "failed to query matched profiles (%d)\n", ret); 2294 return ret; 2295 } 2296 2297 if (fw_has_api(&mvm->fw->ucode_capa, 2298 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 2299 query_len = sizeof(struct iwl_scan_offload_match_info); 2300 matches_len = sizeof(struct iwl_scan_offload_profile_match) * 2301 max_profiles; 2302 } else { 2303 query_len = sizeof(struct iwl_scan_offload_profiles_query_v1); 2304 matches_len = sizeof(struct iwl_scan_offload_profile_match_v1) * 2305 max_profiles; 2306 } 2307 2308 len = iwl_rx_packet_payload_len(cmd.resp_pkt); 2309 if (len < query_len) { 2310 IWL_ERR(mvm, "Invalid scan offload profiles query response!\n"); 2311 ret = -EIO; 2312 goto out_free_resp; 2313 } 2314 2315 query = (void *)cmd.resp_pkt->data; 2316 2317 results->matched_profiles = le32_to_cpu(query->matched_profiles); 2318 memcpy(results->matches, query->matches, matches_len); 2319 2320 #ifdef CONFIG_IWLWIFI_DEBUGFS 2321 mvm->last_netdetect_scans = le32_to_cpu(query->n_scans_done); 2322 #endif 2323 2324 out_free_resp: 2325 iwl_free_resp(&cmd); 2326 return ret; 2327 } 2328 2329 static int iwl_mvm_query_num_match_chans(struct iwl_mvm *mvm, 2330 struct iwl_mvm_nd_results *results, 2331 int idx) 2332 { 2333 int n_chans = 0, i; 2334 2335 if (fw_has_api(&mvm->fw->ucode_capa, 2336 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 2337 struct iwl_scan_offload_profile_match *matches = 2338 (void *)results->matches; 2339 2340 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN; i++) 2341 n_chans += hweight8(matches[idx].matching_channels[i]); 2342 } else { 2343 struct iwl_scan_offload_profile_match_v1 *matches = 2344 (void *)results->matches; 2345 2346 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN_V1; i++) 2347 n_chans += hweight8(matches[idx].matching_channels[i]); 2348 } 2349 2350 return n_chans; 2351 } 2352 2353 static void iwl_mvm_query_set_freqs(struct iwl_mvm *mvm, 2354 struct iwl_mvm_nd_results *results, 2355 struct cfg80211_wowlan_nd_match *match, 2356 int idx) 2357 { 2358 int i; 2359 2360 if (fw_has_api(&mvm->fw->ucode_capa, 2361 IWL_UCODE_TLV_API_SCAN_OFFLOAD_CHANS)) { 2362 struct iwl_scan_offload_profile_match *matches = 2363 (void *)results->matches; 2364 2365 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN * 8; i++) 2366 if (matches[idx].matching_channels[i / 8] & (BIT(i % 8))) 2367 match->channels[match->n_channels++] = 2368 mvm->nd_channels[i]->center_freq; 2369 } else { 2370 struct iwl_scan_offload_profile_match_v1 *matches = 2371 (void *)results->matches; 2372 2373 for (i = 0; i < SCAN_OFFLOAD_MATCHING_CHANNELS_LEN_V1 * 8; i++) 2374 if (matches[idx].matching_channels[i / 8] & (BIT(i % 8))) 2375 match->channels[match->n_channels++] = 2376 mvm->nd_channels[i]->center_freq; 2377 } 2378 } 2379 2380 /** 2381 * enum iwl_d3_notif - d3 notifications 2382 * @IWL_D3_NOTIF_WOWLAN_INFO: WOWLAN_INFO_NOTIF was received 2383 * @IWL_D3_NOTIF_WOWLAN_WAKE_PKT: WOWLAN_WAKE_PKT_NOTIF was received 2384 * @IWL_D3_NOTIF_PROT_OFFLOAD: PROT_OFFLOAD_NOTIF was received 2385 * @IWL_D3_ND_MATCH_INFO: OFFLOAD_MATCH_INFO_NOTIF was received 2386 * @IWL_D3_NOTIF_D3_END_NOTIF: D3_END_NOTIF was received 2387 */ 2388 enum iwl_d3_notif { 2389 IWL_D3_NOTIF_WOWLAN_INFO = BIT(0), 2390 IWL_D3_NOTIF_WOWLAN_WAKE_PKT = BIT(1), 2391 IWL_D3_NOTIF_PROT_OFFLOAD = BIT(2), 2392 IWL_D3_ND_MATCH_INFO = BIT(3), 2393 IWL_D3_NOTIF_D3_END_NOTIF = BIT(4) 2394 }; 2395 2396 /* manage d3 resume data */ 2397 struct iwl_d3_data { 2398 struct iwl_wowlan_status_data *status; 2399 bool test; 2400 u32 d3_end_flags; 2401 u32 notif_expected; /* bitmap - see &enum iwl_d3_notif */ 2402 u32 notif_received; /* bitmap - see &enum iwl_d3_notif */ 2403 struct iwl_mvm_nd_results *nd_results; 2404 bool nd_results_valid; 2405 }; 2406 2407 static void iwl_mvm_query_netdetect_reasons(struct iwl_mvm *mvm, 2408 struct ieee80211_vif *vif, 2409 struct iwl_d3_data *d3_data) 2410 { 2411 struct cfg80211_wowlan_nd_info *net_detect = NULL; 2412 struct cfg80211_wowlan_wakeup wakeup = { 2413 .pattern_idx = -1, 2414 }; 2415 struct cfg80211_wowlan_wakeup *wakeup_report = &wakeup; 2416 unsigned long matched_profiles; 2417 u32 reasons = 0; 2418 int i, n_matches, ret; 2419 2420 if (WARN_ON(!d3_data || !d3_data->status)) 2421 goto out; 2422 2423 reasons = d3_data->status->wakeup_reasons; 2424 2425 if (reasons & IWL_WOWLAN_WAKEUP_BY_RFKILL_DEASSERTED) 2426 wakeup.rfkill_release = true; 2427 2428 if (reasons != IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) 2429 goto out; 2430 2431 if (!iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2432 WOWLAN_INFO_NOTIFICATION, 0)) { 2433 IWL_INFO(mvm, "Query FW for ND results\n"); 2434 ret = iwl_mvm_netdetect_query_results(mvm, d3_data->nd_results); 2435 2436 } else { 2437 IWL_INFO(mvm, "Notification based ND results\n"); 2438 ret = d3_data->nd_results_valid ? 0 : -1; 2439 } 2440 2441 if (ret || !d3_data->nd_results->matched_profiles) { 2442 wakeup_report = NULL; 2443 goto out; 2444 } 2445 2446 matched_profiles = d3_data->nd_results->matched_profiles; 2447 if (mvm->n_nd_match_sets) { 2448 n_matches = hweight_long(matched_profiles); 2449 } else { 2450 IWL_ERR(mvm, "no net detect match information available\n"); 2451 n_matches = 0; 2452 } 2453 2454 net_detect = kzalloc(struct_size(net_detect, matches, n_matches), 2455 GFP_KERNEL); 2456 if (!net_detect || !n_matches) 2457 goto out_report_nd; 2458 2459 for_each_set_bit(i, &matched_profiles, mvm->n_nd_match_sets) { 2460 struct cfg80211_wowlan_nd_match *match; 2461 int idx, n_channels = 0; 2462 2463 n_channels = iwl_mvm_query_num_match_chans(mvm, 2464 d3_data->nd_results, 2465 i); 2466 2467 match = kzalloc(struct_size(match, channels, n_channels), 2468 GFP_KERNEL); 2469 if (!match) 2470 goto out_report_nd; 2471 2472 net_detect->matches[net_detect->n_matches++] = match; 2473 2474 /* We inverted the order of the SSIDs in the scan 2475 * request, so invert the index here. 2476 */ 2477 idx = mvm->n_nd_match_sets - i - 1; 2478 match->ssid.ssid_len = mvm->nd_match_sets[idx].ssid.ssid_len; 2479 memcpy(match->ssid.ssid, mvm->nd_match_sets[idx].ssid.ssid, 2480 match->ssid.ssid_len); 2481 2482 if (mvm->n_nd_channels < n_channels) 2483 continue; 2484 2485 iwl_mvm_query_set_freqs(mvm, d3_data->nd_results, match, i); 2486 } 2487 2488 out_report_nd: 2489 wakeup.net_detect = net_detect; 2490 out: 2491 iwl_mvm_free_nd(mvm); 2492 2493 mutex_unlock(&mvm->mutex); 2494 ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL); 2495 2496 if (net_detect) { 2497 for (i = 0; i < net_detect->n_matches; i++) 2498 kfree(net_detect->matches[i]); 2499 kfree(net_detect); 2500 } 2501 } 2502 2503 static void iwl_mvm_d3_disconnect_iter(void *data, u8 *mac, 2504 struct ieee80211_vif *vif) 2505 { 2506 /* skip the one we keep connection on */ 2507 if (data == vif) 2508 return; 2509 2510 if (vif->type == NL80211_IFTYPE_STATION) 2511 ieee80211_resume_disconnect(vif); 2512 } 2513 2514 static bool iwl_mvm_rt_status(struct iwl_trans *trans, u32 base, u32 *err_id) 2515 { 2516 struct error_table_start { 2517 /* cf. struct iwl_error_event_table */ 2518 u32 valid; 2519 __le32 err_id; 2520 } err_info; 2521 2522 if (!base) 2523 return false; 2524 2525 iwl_trans_read_mem_bytes(trans, base, 2526 &err_info, sizeof(err_info)); 2527 if (err_info.valid && err_id) 2528 *err_id = le32_to_cpu(err_info.err_id); 2529 2530 return !!err_info.valid; 2531 } 2532 2533 static bool iwl_mvm_check_rt_status(struct iwl_mvm *mvm, 2534 struct ieee80211_vif *vif) 2535 { 2536 u32 err_id; 2537 2538 /* check for lmac1 error */ 2539 if (iwl_mvm_rt_status(mvm->trans, 2540 mvm->trans->dbg.lmac_error_event_table[0], 2541 &err_id)) { 2542 if (err_id == RF_KILL_INDICATOR_FOR_WOWLAN) { 2543 struct cfg80211_wowlan_wakeup wakeup = { 2544 .rfkill_release = true, 2545 }; 2546 ieee80211_report_wowlan_wakeup(vif, &wakeup, 2547 GFP_KERNEL); 2548 } 2549 return true; 2550 } 2551 2552 /* check if we have lmac2 set and check for error */ 2553 if (iwl_mvm_rt_status(mvm->trans, 2554 mvm->trans->dbg.lmac_error_event_table[1], NULL)) 2555 return true; 2556 2557 /* check for umac error */ 2558 if (iwl_mvm_rt_status(mvm->trans, 2559 mvm->trans->dbg.umac_error_event_table, NULL)) 2560 return true; 2561 2562 return false; 2563 } 2564 2565 /* 2566 * This function assumes: 2567 * 1. The mutex is already held. 2568 * 2. The callee functions unlock the mutex. 2569 */ 2570 static bool 2571 iwl_mvm_choose_query_wakeup_reasons(struct iwl_mvm *mvm, 2572 struct ieee80211_vif *vif, 2573 struct iwl_d3_data *d3_data) 2574 { 2575 lockdep_assert_held(&mvm->mutex); 2576 2577 /* if FW uses status notification, status shouldn't be NULL here */ 2578 if (!d3_data->status) { 2579 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2580 u8 sta_id = mvm->net_detect ? IWL_MVM_INVALID_STA : 2581 mvmvif->deflink.ap_sta_id; 2582 2583 d3_data->status = iwl_mvm_send_wowlan_get_status(mvm, sta_id); 2584 } 2585 2586 if (mvm->net_detect) { 2587 iwl_mvm_query_netdetect_reasons(mvm, vif, d3_data); 2588 } else { 2589 bool keep = iwl_mvm_query_wakeup_reasons(mvm, vif, 2590 d3_data->status); 2591 2592 #ifdef CONFIG_IWLWIFI_DEBUGFS 2593 if (keep) 2594 mvm->keep_vif = vif; 2595 #endif 2596 2597 return keep; 2598 } 2599 return false; 2600 } 2601 2602 #define IWL_WOWLAN_WAKEUP_REASON_HAS_WAKEUP_PKT (IWL_WOWLAN_WAKEUP_BY_MAGIC_PACKET | \ 2603 IWL_WOWLAN_WAKEUP_BY_PATTERN | \ 2604 IWL_WAKEUP_BY_PATTERN_IPV4_TCP_SYN |\ 2605 IWL_WAKEUP_BY_PATTERN_IPV4_TCP_SYN_WILDCARD |\ 2606 IWL_WAKEUP_BY_PATTERN_IPV6_TCP_SYN |\ 2607 IWL_WAKEUP_BY_PATTERN_IPV6_TCP_SYN_WILDCARD) 2608 2609 static int iwl_mvm_wowlan_store_wake_pkt(struct iwl_mvm *mvm, 2610 struct iwl_wowlan_wake_pkt_notif *notif, 2611 struct iwl_wowlan_status_data *status, 2612 u32 len) 2613 { 2614 u32 data_size, packet_len = le32_to_cpu(notif->wake_packet_length); 2615 2616 if (len < sizeof(*notif)) { 2617 IWL_ERR(mvm, "Invalid WoWLAN wake packet notification!\n"); 2618 return -EIO; 2619 } 2620 2621 if (WARN_ON(!status)) { 2622 IWL_ERR(mvm, "Got wake packet notification but wowlan status data is NULL\n"); 2623 return -EIO; 2624 } 2625 2626 if (WARN_ON(!(status->wakeup_reasons & 2627 IWL_WOWLAN_WAKEUP_REASON_HAS_WAKEUP_PKT))) { 2628 IWL_ERR(mvm, "Got wakeup packet but wakeup reason is %x\n", 2629 status->wakeup_reasons); 2630 return -EIO; 2631 } 2632 2633 data_size = len - offsetof(struct iwl_wowlan_wake_pkt_notif, wake_packet); 2634 2635 /* data_size got the padding from the notification, remove it. */ 2636 if (packet_len < data_size) 2637 data_size = packet_len; 2638 2639 status->wake_packet = kmemdup(notif->wake_packet, data_size, 2640 GFP_ATOMIC); 2641 2642 if (!status->wake_packet) 2643 return -ENOMEM; 2644 2645 status->wake_packet_length = packet_len; 2646 status->wake_packet_bufsize = data_size; 2647 2648 return 0; 2649 } 2650 2651 static void iwl_mvm_nd_match_info_handler(struct iwl_mvm *mvm, 2652 struct iwl_d3_data *d3_data, 2653 struct iwl_scan_offload_match_info *notif, 2654 u32 len) 2655 { 2656 struct iwl_wowlan_status_data *status = d3_data->status; 2657 struct ieee80211_vif *vif = iwl_mvm_get_bss_vif(mvm); 2658 struct iwl_mvm_nd_results *results = d3_data->nd_results; 2659 size_t i, matches_len = sizeof(struct iwl_scan_offload_profile_match) * 2660 iwl_umac_scan_get_max_profiles(mvm->fw); 2661 2662 if (IS_ERR_OR_NULL(vif)) 2663 return; 2664 2665 if (len < sizeof(struct iwl_scan_offload_match_info)) { 2666 IWL_ERR(mvm, "Invalid scan match info notification\n"); 2667 return; 2668 } 2669 2670 if (!mvm->net_detect) { 2671 IWL_ERR(mvm, "Unexpected scan match info notification\n"); 2672 return; 2673 } 2674 2675 if (!status || status->wakeup_reasons != IWL_WOWLAN_WAKEUP_BY_NON_WIRELESS) { 2676 IWL_ERR(mvm, 2677 "Ignore scan match info notification: no reason\n"); 2678 return; 2679 } 2680 2681 #ifdef CONFIG_IWLWIFI_DEBUGFS 2682 mvm->last_netdetect_scans = le32_to_cpu(notif->n_scans_done); 2683 #endif 2684 2685 results->matched_profiles = le32_to_cpu(notif->matched_profiles); 2686 IWL_INFO(mvm, "number of matched profiles=%u\n", 2687 results->matched_profiles); 2688 2689 if (results->matched_profiles) { 2690 memcpy(results->matches, notif->matches, matches_len); 2691 d3_data->nd_results_valid = TRUE; 2692 } 2693 2694 /* no scan should be active at this point */ 2695 mvm->scan_status = 0; 2696 for (i = 0; i < mvm->max_scans; i++) 2697 mvm->scan_uid_status[i] = 0; 2698 } 2699 2700 static bool iwl_mvm_wait_d3_notif(struct iwl_notif_wait_data *notif_wait, 2701 struct iwl_rx_packet *pkt, void *data) 2702 { 2703 struct iwl_mvm *mvm = 2704 container_of(notif_wait, struct iwl_mvm, notif_wait); 2705 struct iwl_d3_data *d3_data = data; 2706 u32 len; 2707 int ret; 2708 2709 switch (WIDE_ID(pkt->hdr.group_id, pkt->hdr.cmd)) { 2710 case WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_INFO_NOTIFICATION): { 2711 struct iwl_wowlan_info_notif *notif = (void *)pkt->data; 2712 2713 if (d3_data->notif_received & IWL_D3_NOTIF_WOWLAN_INFO) { 2714 /* We might get two notifications due to dual bss */ 2715 IWL_DEBUG_WOWLAN(mvm, 2716 "Got additional wowlan info notification\n"); 2717 break; 2718 } 2719 2720 d3_data->notif_received |= IWL_D3_NOTIF_WOWLAN_INFO; 2721 len = iwl_rx_packet_payload_len(pkt); 2722 iwl_mvm_parse_wowlan_info_notif(mvm, notif, d3_data->status, 2723 len); 2724 if (d3_data->status && 2725 d3_data->status->wakeup_reasons & IWL_WOWLAN_WAKEUP_REASON_HAS_WAKEUP_PKT) 2726 /* We are supposed to get also wake packet notif */ 2727 d3_data->notif_expected |= IWL_D3_NOTIF_WOWLAN_WAKE_PKT; 2728 2729 break; 2730 } 2731 case WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_WAKE_PKT_NOTIFICATION): { 2732 struct iwl_wowlan_wake_pkt_notif *notif = (void *)pkt->data; 2733 2734 if (d3_data->notif_received & IWL_D3_NOTIF_WOWLAN_WAKE_PKT) { 2735 /* We shouldn't get two wake packet notifications */ 2736 IWL_ERR(mvm, 2737 "Got additional wowlan wake packet notification\n"); 2738 } else { 2739 d3_data->notif_received |= IWL_D3_NOTIF_WOWLAN_WAKE_PKT; 2740 len = iwl_rx_packet_payload_len(pkt); 2741 ret = iwl_mvm_wowlan_store_wake_pkt(mvm, notif, 2742 d3_data->status, 2743 len); 2744 if (ret) 2745 IWL_ERR(mvm, 2746 "Can't parse WOWLAN_WAKE_PKT_NOTIFICATION\n"); 2747 } 2748 2749 break; 2750 } 2751 case WIDE_ID(SCAN_GROUP, OFFLOAD_MATCH_INFO_NOTIF): { 2752 struct iwl_scan_offload_match_info *notif = (void *)pkt->data; 2753 2754 if (d3_data->notif_received & IWL_D3_ND_MATCH_INFO) { 2755 IWL_ERR(mvm, 2756 "Got additional netdetect match info\n"); 2757 break; 2758 } 2759 2760 d3_data->notif_received |= IWL_D3_ND_MATCH_INFO; 2761 2762 /* explicitly set this in the 'expected' as well */ 2763 d3_data->notif_expected |= IWL_D3_ND_MATCH_INFO; 2764 2765 len = iwl_rx_packet_payload_len(pkt); 2766 iwl_mvm_nd_match_info_handler(mvm, d3_data, notif, len); 2767 break; 2768 } 2769 case WIDE_ID(PROT_OFFLOAD_GROUP, D3_END_NOTIFICATION): { 2770 struct iwl_mvm_d3_end_notif *notif = (void *)pkt->data; 2771 2772 d3_data->d3_end_flags = __le32_to_cpu(notif->flags); 2773 d3_data->notif_received |= IWL_D3_NOTIF_D3_END_NOTIF; 2774 2775 break; 2776 } 2777 default: 2778 WARN_ON(1); 2779 } 2780 2781 return d3_data->notif_received == d3_data->notif_expected; 2782 } 2783 2784 static int iwl_mvm_resume_firmware(struct iwl_mvm *mvm, bool test) 2785 { 2786 int ret; 2787 enum iwl_d3_status d3_status; 2788 struct iwl_host_cmd cmd = { 2789 .id = D0I3_END_CMD, 2790 .flags = CMD_WANT_SKB | CMD_SEND_IN_D3, 2791 }; 2792 bool reset = fw_has_capa(&mvm->fw->ucode_capa, 2793 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 2794 2795 ret = iwl_trans_d3_resume(mvm->trans, &d3_status, test, !reset); 2796 if (ret) 2797 return ret; 2798 2799 if (d3_status != IWL_D3_STATUS_ALIVE) { 2800 IWL_INFO(mvm, "Device was reset during suspend\n"); 2801 return -ENOENT; 2802 } 2803 2804 /* 2805 * We should trigger resume flow using command only for 22000 family 2806 * AX210 and above don't need the command since they have 2807 * the doorbell interrupt. 2808 */ 2809 if (mvm->trans->trans_cfg->device_family <= IWL_DEVICE_FAMILY_22000 && 2810 fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_D0I3_END_FIRST)) { 2811 ret = iwl_mvm_send_cmd(mvm, &cmd); 2812 if (ret < 0) 2813 IWL_ERR(mvm, "Failed to send D0I3_END_CMD first (%d)\n", 2814 ret); 2815 } 2816 2817 return ret; 2818 } 2819 2820 #define IWL_MVM_D3_NOTIF_TIMEOUT (HZ / 5) 2821 2822 static int iwl_mvm_d3_notif_wait(struct iwl_mvm *mvm, 2823 struct iwl_d3_data *d3_data) 2824 { 2825 static const u16 d3_resume_notif[] = { 2826 WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_INFO_NOTIFICATION), 2827 WIDE_ID(PROT_OFFLOAD_GROUP, WOWLAN_WAKE_PKT_NOTIFICATION), 2828 WIDE_ID(SCAN_GROUP, OFFLOAD_MATCH_INFO_NOTIF), 2829 WIDE_ID(PROT_OFFLOAD_GROUP, D3_END_NOTIFICATION) 2830 }; 2831 struct iwl_notification_wait wait_d3_notif; 2832 int ret; 2833 2834 iwl_init_notification_wait(&mvm->notif_wait, &wait_d3_notif, 2835 d3_resume_notif, ARRAY_SIZE(d3_resume_notif), 2836 iwl_mvm_wait_d3_notif, d3_data); 2837 2838 ret = iwl_mvm_resume_firmware(mvm, d3_data->test); 2839 if (ret) { 2840 iwl_remove_notification(&mvm->notif_wait, &wait_d3_notif); 2841 return ret; 2842 } 2843 2844 return iwl_wait_notification(&mvm->notif_wait, &wait_d3_notif, 2845 IWL_MVM_D3_NOTIF_TIMEOUT); 2846 } 2847 2848 static inline bool iwl_mvm_d3_resume_notif_based(struct iwl_mvm *mvm) 2849 { 2850 return iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2851 WOWLAN_INFO_NOTIFICATION, 0) && 2852 iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2853 WOWLAN_WAKE_PKT_NOTIFICATION, 0) && 2854 iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2855 D3_END_NOTIFICATION, 0); 2856 } 2857 2858 static int __iwl_mvm_resume(struct iwl_mvm *mvm, bool test) 2859 { 2860 struct ieee80211_vif *vif = NULL; 2861 int ret = 1; 2862 struct iwl_mvm_nd_results results = {}; 2863 struct iwl_d3_data d3_data = { 2864 .test = test, 2865 .notif_expected = 2866 IWL_D3_NOTIF_WOWLAN_INFO | 2867 IWL_D3_NOTIF_D3_END_NOTIF, 2868 .nd_results_valid = false, 2869 .nd_results = &results, 2870 }; 2871 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 2872 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 2873 bool d0i3_first = fw_has_capa(&mvm->fw->ucode_capa, 2874 IWL_UCODE_TLV_CAPA_D0I3_END_FIRST); 2875 bool resume_notif_based = iwl_mvm_d3_resume_notif_based(mvm); 2876 bool keep = false; 2877 2878 mutex_lock(&mvm->mutex); 2879 2880 mvm->last_reset_or_resume_time_jiffies = jiffies; 2881 2882 /* get the BSS vif pointer again */ 2883 vif = iwl_mvm_get_bss_vif(mvm); 2884 if (IS_ERR_OR_NULL(vif)) 2885 goto err; 2886 2887 iwl_fw_dbg_read_d3_debug_data(&mvm->fwrt); 2888 2889 if (iwl_mvm_check_rt_status(mvm, vif)) { 2890 set_bit(STATUS_FW_ERROR, &mvm->trans->status); 2891 iwl_mvm_dump_nic_error_log(mvm); 2892 iwl_dbg_tlv_time_point(&mvm->fwrt, 2893 IWL_FW_INI_TIME_POINT_FW_ASSERT, NULL); 2894 iwl_fw_dbg_collect_desc(&mvm->fwrt, &iwl_dump_desc_assert, 2895 false, 0); 2896 ret = 1; 2897 goto err; 2898 } 2899 2900 if (resume_notif_based) { 2901 d3_data.status = kzalloc(sizeof(*d3_data.status), GFP_KERNEL); 2902 if (!d3_data.status) { 2903 IWL_ERR(mvm, "Failed to allocate wowlan status\n"); 2904 ret = -ENOMEM; 2905 goto err; 2906 } 2907 2908 ret = iwl_mvm_d3_notif_wait(mvm, &d3_data); 2909 if (ret) 2910 goto err; 2911 } else { 2912 ret = iwl_mvm_resume_firmware(mvm, test); 2913 if (ret < 0) 2914 goto err; 2915 } 2916 2917 /* after the successful handshake, we're out of D3 */ 2918 mvm->trans->system_pm_mode = IWL_PLAT_PM_MODE_DISABLED; 2919 2920 /* when reset is required we can't send these following commands */ 2921 if (d3_data.d3_end_flags & IWL_D0I3_RESET_REQUIRE) 2922 goto query_wakeup_reasons; 2923 2924 /* 2925 * Query the current location and source from the D3 firmware so we 2926 * can play it back when we re-intiailize the D0 firmware 2927 */ 2928 iwl_mvm_update_changed_regdom(mvm); 2929 2930 /* Re-configure PPAG settings */ 2931 iwl_mvm_ppag_send_cmd(mvm); 2932 2933 if (!unified_image) 2934 /* Re-configure default SAR profile */ 2935 iwl_mvm_sar_select_profile(mvm, 1, 1); 2936 2937 if (mvm->net_detect && unified_image) { 2938 /* If this is a non-unified image, we restart the FW, 2939 * so no need to stop the netdetect scan. If that 2940 * fails, continue and try to get the wake-up reasons, 2941 * but trigger a HW restart by keeping a failure code 2942 * in ret. 2943 */ 2944 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_NETDETECT, 2945 false); 2946 } 2947 2948 query_wakeup_reasons: 2949 keep = iwl_mvm_choose_query_wakeup_reasons(mvm, vif, &d3_data); 2950 /* has unlocked the mutex, so skip that */ 2951 goto out; 2952 2953 err: 2954 mutex_unlock(&mvm->mutex); 2955 out: 2956 if (d3_data.status) 2957 kfree(d3_data.status->wake_packet); 2958 kfree(d3_data.status); 2959 iwl_mvm_free_nd(mvm); 2960 2961 if (!d3_data.test && !mvm->net_detect) 2962 ieee80211_iterate_active_interfaces_mtx(mvm->hw, 2963 IEEE80211_IFACE_ITER_NORMAL, 2964 iwl_mvm_d3_disconnect_iter, 2965 keep ? vif : NULL); 2966 2967 clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status); 2968 2969 /* no need to reset the device in unified images, if successful */ 2970 if (unified_image && !ret) { 2971 /* nothing else to do if we already sent D0I3_END_CMD */ 2972 if (d0i3_first) 2973 return 0; 2974 2975 if (!iwl_fw_lookup_notif_ver(mvm->fw, PROT_OFFLOAD_GROUP, 2976 D3_END_NOTIFICATION, 0)) { 2977 ret = iwl_mvm_send_cmd_pdu(mvm, D0I3_END_CMD, 0, 0, NULL); 2978 if (!ret) 2979 return 0; 2980 } else if (!(d3_data.d3_end_flags & IWL_D0I3_RESET_REQUIRE)) { 2981 return 0; 2982 } 2983 } 2984 2985 /* 2986 * Reconfigure the device in one of the following cases: 2987 * 1. We are not using a unified image 2988 * 2. We are using a unified image but had an error while exiting D3 2989 */ 2990 set_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED, &mvm->status); 2991 2992 /* regardless of what happened, we're now out of D3 */ 2993 mvm->trans->system_pm_mode = IWL_PLAT_PM_MODE_DISABLED; 2994 2995 return 1; 2996 } 2997 2998 int iwl_mvm_resume(struct ieee80211_hw *hw) 2999 { 3000 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3001 int ret; 3002 3003 ret = __iwl_mvm_resume(mvm, false); 3004 3005 iwl_mvm_resume_tcm(mvm); 3006 3007 iwl_fw_runtime_resume(&mvm->fwrt); 3008 3009 return ret; 3010 } 3011 3012 void iwl_mvm_set_wakeup(struct ieee80211_hw *hw, bool enabled) 3013 { 3014 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3015 3016 device_set_wakeup_enable(mvm->trans->dev, enabled); 3017 } 3018 3019 #ifdef CONFIG_IWLWIFI_DEBUGFS 3020 static int iwl_mvm_d3_test_open(struct inode *inode, struct file *file) 3021 { 3022 struct iwl_mvm *mvm = inode->i_private; 3023 int err; 3024 3025 if (mvm->d3_test_active) 3026 return -EBUSY; 3027 3028 file->private_data = inode->i_private; 3029 3030 iwl_mvm_pause_tcm(mvm, true); 3031 3032 iwl_fw_runtime_suspend(&mvm->fwrt); 3033 3034 /* start pseudo D3 */ 3035 rtnl_lock(); 3036 wiphy_lock(mvm->hw->wiphy); 3037 err = __iwl_mvm_suspend(mvm->hw, mvm->hw->wiphy->wowlan_config, true); 3038 wiphy_unlock(mvm->hw->wiphy); 3039 rtnl_unlock(); 3040 if (err > 0) 3041 err = -EINVAL; 3042 if (err) 3043 return err; 3044 3045 mvm->d3_test_active = true; 3046 mvm->keep_vif = NULL; 3047 return 0; 3048 } 3049 3050 static ssize_t iwl_mvm_d3_test_read(struct file *file, char __user *user_buf, 3051 size_t count, loff_t *ppos) 3052 { 3053 struct iwl_mvm *mvm = file->private_data; 3054 u32 pme_asserted; 3055 3056 while (true) { 3057 /* read pme_ptr if available */ 3058 if (mvm->d3_test_pme_ptr) { 3059 pme_asserted = iwl_trans_read_mem32(mvm->trans, 3060 mvm->d3_test_pme_ptr); 3061 if (pme_asserted) 3062 break; 3063 } 3064 3065 if (msleep_interruptible(100)) 3066 break; 3067 } 3068 3069 return 0; 3070 } 3071 3072 static void iwl_mvm_d3_test_disconn_work_iter(void *_data, u8 *mac, 3073 struct ieee80211_vif *vif) 3074 { 3075 /* skip the one we keep connection on */ 3076 if (_data == vif) 3077 return; 3078 3079 if (vif->type == NL80211_IFTYPE_STATION) 3080 ieee80211_connection_loss(vif); 3081 } 3082 3083 static int iwl_mvm_d3_test_release(struct inode *inode, struct file *file) 3084 { 3085 struct iwl_mvm *mvm = inode->i_private; 3086 bool unified_image = fw_has_capa(&mvm->fw->ucode_capa, 3087 IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG); 3088 3089 mvm->d3_test_active = false; 3090 3091 iwl_fw_dbg_read_d3_debug_data(&mvm->fwrt); 3092 3093 rtnl_lock(); 3094 wiphy_lock(mvm->hw->wiphy); 3095 __iwl_mvm_resume(mvm, true); 3096 wiphy_unlock(mvm->hw->wiphy); 3097 rtnl_unlock(); 3098 3099 iwl_mvm_resume_tcm(mvm); 3100 3101 iwl_fw_runtime_resume(&mvm->fwrt); 3102 3103 iwl_abort_notification_waits(&mvm->notif_wait); 3104 if (!unified_image) { 3105 int remaining_time = 10; 3106 3107 ieee80211_restart_hw(mvm->hw); 3108 3109 /* wait for restart and disconnect all interfaces */ 3110 while (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 3111 remaining_time > 0) { 3112 remaining_time--; 3113 msleep(1000); 3114 } 3115 3116 if (remaining_time == 0) 3117 IWL_ERR(mvm, "Timed out waiting for HW restart!\n"); 3118 } 3119 3120 ieee80211_iterate_active_interfaces_atomic( 3121 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 3122 iwl_mvm_d3_test_disconn_work_iter, mvm->keep_vif); 3123 3124 return 0; 3125 } 3126 3127 const struct file_operations iwl_dbgfs_d3_test_ops = { 3128 .llseek = no_llseek, 3129 .open = iwl_mvm_d3_test_open, 3130 .read = iwl_mvm_d3_test_read, 3131 .release = iwl_mvm_d3_test_release, 3132 }; 3133 #endif 3134