1828c91f7SThomas Gleixner // SPDX-License-Identifier: GPL-2.0-only
2277b024eSKalle Valo /*
3932183aaSGanapathi Bhat  * NXP Wireless LAN device driver: 802.11h
4277b024eSKalle Valo  *
5932183aaSGanapathi Bhat  * Copyright 2011-2020 NXP
6277b024eSKalle Valo  */
7277b024eSKalle Valo 
8277b024eSKalle Valo #include "main.h"
9277b024eSKalle Valo #include "fw.h"
10277b024eSKalle Valo 
11277b024eSKalle Valo 
mwifiex_init_11h_params(struct mwifiex_private * priv)12277b024eSKalle Valo void mwifiex_init_11h_params(struct mwifiex_private *priv)
13277b024eSKalle Valo {
14277b024eSKalle Valo 	priv->state_11h.is_11h_enabled = true;
15277b024eSKalle Valo 	priv->state_11h.is_11h_active = false;
16277b024eSKalle Valo }
17277b024eSKalle Valo 
mwifiex_is_11h_active(struct mwifiex_private * priv)18277b024eSKalle Valo inline int mwifiex_is_11h_active(struct mwifiex_private *priv)
19277b024eSKalle Valo {
20277b024eSKalle Valo 	return priv->state_11h.is_11h_active;
21277b024eSKalle Valo }
22277b024eSKalle Valo /* This function appends 11h info to a buffer while joining an
23277b024eSKalle Valo  * infrastructure BSS
24277b024eSKalle Valo  */
25277b024eSKalle Valo static void
mwifiex_11h_process_infra_join(struct mwifiex_private * priv,u8 ** buffer,struct mwifiex_bssdescriptor * bss_desc)26277b024eSKalle Valo mwifiex_11h_process_infra_join(struct mwifiex_private *priv, u8 **buffer,
27277b024eSKalle Valo 			       struct mwifiex_bssdescriptor *bss_desc)
28277b024eSKalle Valo {
29277b024eSKalle Valo 	struct mwifiex_ie_types_header *ie_header;
30277b024eSKalle Valo 	struct mwifiex_ie_types_pwr_capability *cap;
31277b024eSKalle Valo 	struct mwifiex_ie_types_local_pwr_constraint *constraint;
32277b024eSKalle Valo 	struct ieee80211_supported_band *sband;
33277b024eSKalle Valo 	u8 radio_type;
34277b024eSKalle Valo 	int i;
35277b024eSKalle Valo 
36277b024eSKalle Valo 	if (!buffer || !(*buffer))
37277b024eSKalle Valo 		return;
38277b024eSKalle Valo 
39277b024eSKalle Valo 	radio_type = mwifiex_band_to_radio_type((u8) bss_desc->bss_band);
40277b024eSKalle Valo 	sband = priv->wdev.wiphy->bands[radio_type];
41277b024eSKalle Valo 
42277b024eSKalle Valo 	cap = (struct mwifiex_ie_types_pwr_capability *)*buffer;
43277b024eSKalle Valo 	cap->header.type = cpu_to_le16(WLAN_EID_PWR_CAPABILITY);
44277b024eSKalle Valo 	cap->header.len = cpu_to_le16(2);
45277b024eSKalle Valo 	cap->min_pwr = 0;
46277b024eSKalle Valo 	cap->max_pwr = 0;
47277b024eSKalle Valo 	*buffer += sizeof(*cap);
48277b024eSKalle Valo 
49277b024eSKalle Valo 	constraint = (struct mwifiex_ie_types_local_pwr_constraint *)*buffer;
50277b024eSKalle Valo 	constraint->header.type = cpu_to_le16(WLAN_EID_PWR_CONSTRAINT);
51277b024eSKalle Valo 	constraint->header.len = cpu_to_le16(2);
52277b024eSKalle Valo 	constraint->chan = bss_desc->channel;
53277b024eSKalle Valo 	constraint->constraint = bss_desc->local_constraint;
54277b024eSKalle Valo 	*buffer += sizeof(*constraint);
55277b024eSKalle Valo 
56277b024eSKalle Valo 	ie_header = (struct mwifiex_ie_types_header *)*buffer;
57277b024eSKalle Valo 	ie_header->type = cpu_to_le16(TLV_TYPE_PASSTHROUGH);
58277b024eSKalle Valo 	ie_header->len  = cpu_to_le16(2 * sband->n_channels + 2);
59277b024eSKalle Valo 	*buffer += sizeof(*ie_header);
60277b024eSKalle Valo 	*(*buffer)++ = WLAN_EID_SUPPORTED_CHANNELS;
61277b024eSKalle Valo 	*(*buffer)++ = 2 * sband->n_channels;
62277b024eSKalle Valo 	for (i = 0; i < sband->n_channels; i++) {
63277b024eSKalle Valo 		*(*buffer)++ = ieee80211_frequency_to_channel(
64277b024eSKalle Valo 					sband->channels[i].center_freq);
65277b024eSKalle Valo 		*(*buffer)++ = 1; /* one channel in the subband */
66277b024eSKalle Valo 	}
67277b024eSKalle Valo }
68277b024eSKalle Valo 
69277b024eSKalle Valo /* Enable or disable the 11h extensions in the firmware */
mwifiex_11h_activate(struct mwifiex_private * priv,bool flag)70277b024eSKalle Valo int mwifiex_11h_activate(struct mwifiex_private *priv, bool flag)
71277b024eSKalle Valo {
72277b024eSKalle Valo 	u32 enable = flag;
73277b024eSKalle Valo 
74277b024eSKalle Valo 	/* enable master mode radar detection on AP interface */
75277b024eSKalle Valo 	if ((GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) && enable)
76277b024eSKalle Valo 		enable |= MWIFIEX_MASTER_RADAR_DET_MASK;
77277b024eSKalle Valo 
78277b024eSKalle Valo 	return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_SNMP_MIB,
79277b024eSKalle Valo 				HostCmd_ACT_GEN_SET, DOT11H_I, &enable, true);
80277b024eSKalle Valo }
81277b024eSKalle Valo 
82277b024eSKalle Valo /* This functions processes TLV buffer for a pending BSS Join command.
83277b024eSKalle Valo  *
84277b024eSKalle Valo  * Activate 11h functionality in the firmware if the spectrum management
85277b024eSKalle Valo  * capability bit is found in the network we are joining. Also, necessary
86277b024eSKalle Valo  * TLVs are set based on requested network's 11h capability.
87277b024eSKalle Valo  */
mwifiex_11h_process_join(struct mwifiex_private * priv,u8 ** buffer,struct mwifiex_bssdescriptor * bss_desc)88277b024eSKalle Valo void mwifiex_11h_process_join(struct mwifiex_private *priv, u8 **buffer,
89277b024eSKalle Valo 			      struct mwifiex_bssdescriptor *bss_desc)
90277b024eSKalle Valo {
91277b024eSKalle Valo 	if (bss_desc->sensed_11h) {
92277b024eSKalle Valo 		/* Activate 11h functions in firmware, turns on capability
93277b024eSKalle Valo 		 * bit
94277b024eSKalle Valo 		 */
95277b024eSKalle Valo 		mwifiex_11h_activate(priv, true);
96277b024eSKalle Valo 		priv->state_11h.is_11h_active = true;
97277b024eSKalle Valo 		bss_desc->cap_info_bitmap |= WLAN_CAPABILITY_SPECTRUM_MGMT;
98277b024eSKalle Valo 		mwifiex_11h_process_infra_join(priv, buffer, bss_desc);
99277b024eSKalle Valo 	} else {
100277b024eSKalle Valo 		/* Deactivate 11h functions in the firmware */
101277b024eSKalle Valo 		mwifiex_11h_activate(priv, false);
102277b024eSKalle Valo 		priv->state_11h.is_11h_active = false;
103277b024eSKalle Valo 		bss_desc->cap_info_bitmap &= ~WLAN_CAPABILITY_SPECTRUM_MGMT;
104277b024eSKalle Valo 	}
105277b024eSKalle Valo }
106277b024eSKalle Valo 
107277b024eSKalle Valo /* This is DFS CAC work queue function.
108277b024eSKalle Valo  * This delayed work emits CAC finished event for cfg80211 if
109277b024eSKalle Valo  * CAC was started earlier.
110277b024eSKalle Valo  */
mwifiex_dfs_cac_work_queue(struct work_struct * work)111277b024eSKalle Valo void mwifiex_dfs_cac_work_queue(struct work_struct *work)
112277b024eSKalle Valo {
113277b024eSKalle Valo 	struct cfg80211_chan_def chandef;
1148dd37c7cSAmitoj Kaur Chawla 	struct delayed_work *delayed_work = to_delayed_work(work);
115277b024eSKalle Valo 	struct mwifiex_private *priv =
116277b024eSKalle Valo 			container_of(delayed_work, struct mwifiex_private,
117277b024eSKalle Valo 				     dfs_cac_work);
118277b024eSKalle Valo 
119277b024eSKalle Valo 	chandef = priv->dfs_chandef;
120277b024eSKalle Valo 	if (priv->wdev.cac_started) {
121277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, MSG,
122277b024eSKalle Valo 			    "CAC timer finished; No radar detected\n");
123277b024eSKalle Valo 		cfg80211_cac_event(priv->netdev, &chandef,
124277b024eSKalle Valo 				   NL80211_RADAR_CAC_FINISHED,
125277b024eSKalle Valo 				   GFP_KERNEL);
126277b024eSKalle Valo 	}
127277b024eSKalle Valo }
128277b024eSKalle Valo 
129277b024eSKalle Valo /* This function prepares channel report request command to FW for
130277b024eSKalle Valo  * starting radar detection.
131277b024eSKalle Valo  */
mwifiex_cmd_issue_chan_report_request(struct mwifiex_private * priv,struct host_cmd_ds_command * cmd,void * data_buf)132277b024eSKalle Valo int mwifiex_cmd_issue_chan_report_request(struct mwifiex_private *priv,
133277b024eSKalle Valo 					  struct host_cmd_ds_command *cmd,
134277b024eSKalle Valo 					  void *data_buf)
135277b024eSKalle Valo {
136277b024eSKalle Valo 	struct host_cmd_ds_chan_rpt_req *cr_req = &cmd->params.chan_rpt_req;
137277b024eSKalle Valo 	struct mwifiex_radar_params *radar_params = (void *)data_buf;
138277b024eSKalle Valo 
139277b024eSKalle Valo 	cmd->command = cpu_to_le16(HostCmd_CMD_CHAN_REPORT_REQUEST);
140277b024eSKalle Valo 	cmd->size = cpu_to_le16(S_DS_GEN);
1415653c646SDaniel Mentz 	le16_unaligned_add_cpu(&cmd->size,
1425653c646SDaniel Mentz 			       sizeof(struct host_cmd_ds_chan_rpt_req));
143277b024eSKalle Valo 
144277b024eSKalle Valo 	cr_req->chan_desc.start_freq = cpu_to_le16(MWIFIEX_A_BAND_START_FREQ);
145277b024eSKalle Valo 	cr_req->chan_desc.chan_num = radar_params->chandef->chan->hw_value;
146277b024eSKalle Valo 	cr_req->chan_desc.chan_width = radar_params->chandef->width;
147277b024eSKalle Valo 	cr_req->msec_dwell_time = cpu_to_le32(radar_params->cac_time_ms);
148277b024eSKalle Valo 
149277b024eSKalle Valo 	if (radar_params->cac_time_ms)
150277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, MSG,
151277b024eSKalle Valo 			    "11h: issuing DFS Radar check for channel=%d\n",
152277b024eSKalle Valo 			    radar_params->chandef->chan->hw_value);
153277b024eSKalle Valo 	else
154277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, MSG, "cancelling CAC\n");
155277b024eSKalle Valo 
156277b024eSKalle Valo 	return 0;
157277b024eSKalle Valo }
158277b024eSKalle Valo 
mwifiex_stop_radar_detection(struct mwifiex_private * priv,struct cfg80211_chan_def * chandef)159277b024eSKalle Valo int mwifiex_stop_radar_detection(struct mwifiex_private *priv,
160277b024eSKalle Valo 				 struct cfg80211_chan_def *chandef)
161277b024eSKalle Valo {
162277b024eSKalle Valo 	struct mwifiex_radar_params radar_params;
163277b024eSKalle Valo 
164277b024eSKalle Valo 	memset(&radar_params, 0, sizeof(struct mwifiex_radar_params));
165277b024eSKalle Valo 	radar_params.chandef = chandef;
166277b024eSKalle Valo 	radar_params.cac_time_ms = 0;
167277b024eSKalle Valo 
168277b024eSKalle Valo 	return mwifiex_send_cmd(priv, HostCmd_CMD_CHAN_REPORT_REQUEST,
169277b024eSKalle Valo 				HostCmd_ACT_GEN_SET, 0, &radar_params, true);
170277b024eSKalle Valo }
171277b024eSKalle Valo 
172277b024eSKalle Valo /* This function is to abort ongoing CAC upon stopping AP operations
173277b024eSKalle Valo  * or during unload.
174277b024eSKalle Valo  */
mwifiex_abort_cac(struct mwifiex_private * priv)175277b024eSKalle Valo void mwifiex_abort_cac(struct mwifiex_private *priv)
176277b024eSKalle Valo {
177277b024eSKalle Valo 	if (priv->wdev.cac_started) {
178277b024eSKalle Valo 		if (mwifiex_stop_radar_detection(priv, &priv->dfs_chandef))
179277b024eSKalle Valo 			mwifiex_dbg(priv->adapter, ERROR,
180277b024eSKalle Valo 				    "failed to stop CAC in FW\n");
181277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, MSG,
182277b024eSKalle Valo 			    "Aborting delayed work for CAC.\n");
183277b024eSKalle Valo 		cancel_delayed_work_sync(&priv->dfs_cac_work);
184277b024eSKalle Valo 		cfg80211_cac_event(priv->netdev, &priv->dfs_chandef,
185277b024eSKalle Valo 				   NL80211_RADAR_CAC_ABORTED, GFP_KERNEL);
186277b024eSKalle Valo 	}
187277b024eSKalle Valo }
188277b024eSKalle Valo 
189277b024eSKalle Valo /* This function handles channel report event from FW during CAC period.
190277b024eSKalle Valo  * If radar is detected during CAC, driver indicates the same to cfg80211
191277b024eSKalle Valo  * and also cancels ongoing delayed work.
192277b024eSKalle Valo  */
mwifiex_11h_handle_chanrpt_ready(struct mwifiex_private * priv,struct sk_buff * skb)193277b024eSKalle Valo int mwifiex_11h_handle_chanrpt_ready(struct mwifiex_private *priv,
194277b024eSKalle Valo 				     struct sk_buff *skb)
195277b024eSKalle Valo {
196277b024eSKalle Valo 	struct host_cmd_ds_chan_rpt_event *rpt_event;
197277b024eSKalle Valo 	struct mwifiex_ie_types_chan_rpt_data *rpt;
198277b024eSKalle Valo 	u16 event_len, tlv_len;
199277b024eSKalle Valo 
200277b024eSKalle Valo 	rpt_event = (void *)(skb->data + sizeof(u32));
201277b024eSKalle Valo 	event_len = skb->len - (sizeof(struct host_cmd_ds_chan_rpt_event)+
202277b024eSKalle Valo 				sizeof(u32));
203277b024eSKalle Valo 
204277b024eSKalle Valo 	if (le32_to_cpu(rpt_event->result) != HostCmd_RESULT_OK) {
205277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, ERROR,
206277b024eSKalle Valo 			    "Error in channel report event\n");
207277b024eSKalle Valo 		return -1;
208277b024eSKalle Valo 	}
209277b024eSKalle Valo 
210277b024eSKalle Valo 	while (event_len >= sizeof(struct mwifiex_ie_types_header)) {
211277b024eSKalle Valo 		rpt = (void *)&rpt_event->tlvbuf;
212277b024eSKalle Valo 		tlv_len = le16_to_cpu(rpt->header.len);
213277b024eSKalle Valo 
214277b024eSKalle Valo 		switch (le16_to_cpu(rpt->header.type)) {
215277b024eSKalle Valo 		case TLV_TYPE_CHANRPT_11H_BASIC:
216277b024eSKalle Valo 			if (rpt->map.radar) {
217277b024eSKalle Valo 				mwifiex_dbg(priv->adapter, MSG,
218277b024eSKalle Valo 					    "RADAR Detected on channel %d!\n",
219277b024eSKalle Valo 					    priv->dfs_chandef.chan->hw_value);
220277b024eSKalle Valo 				cancel_delayed_work_sync(&priv->dfs_cac_work);
221277b024eSKalle Valo 				cfg80211_cac_event(priv->netdev,
222277b024eSKalle Valo 						   &priv->dfs_chandef,
223277b024eSKalle Valo 						   NL80211_RADAR_DETECTED,
224277b024eSKalle Valo 						   GFP_KERNEL);
225277b024eSKalle Valo 			}
226277b024eSKalle Valo 			break;
227277b024eSKalle Valo 		default:
228277b024eSKalle Valo 			break;
229277b024eSKalle Valo 		}
230277b024eSKalle Valo 
231277b024eSKalle Valo 		event_len -= (tlv_len + sizeof(rpt->header));
232277b024eSKalle Valo 	}
233277b024eSKalle Valo 
234277b024eSKalle Valo 	return 0;
235277b024eSKalle Valo }
236277b024eSKalle Valo 
237277b024eSKalle Valo /* Handler for radar detected event from FW.*/
mwifiex_11h_handle_radar_detected(struct mwifiex_private * priv,struct sk_buff * skb)238277b024eSKalle Valo int mwifiex_11h_handle_radar_detected(struct mwifiex_private *priv,
239277b024eSKalle Valo 				      struct sk_buff *skb)
240277b024eSKalle Valo {
241277b024eSKalle Valo 	struct mwifiex_radar_det_event *rdr_event;
242277b024eSKalle Valo 
243277b024eSKalle Valo 	rdr_event = (void *)(skb->data + sizeof(u32));
244277b024eSKalle Valo 
245277b024eSKalle Valo 	mwifiex_dbg(priv->adapter, MSG,
246277b024eSKalle Valo 		    "radar detected; indicating kernel\n");
247277b024eSKalle Valo 	if (mwifiex_stop_radar_detection(priv, &priv->dfs_chandef))
248277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, ERROR,
249277b024eSKalle Valo 			    "Failed to stop CAC in FW\n");
250277b024eSKalle Valo 	cfg80211_radar_event(priv->adapter->wiphy, &priv->dfs_chandef,
251277b024eSKalle Valo 			     GFP_KERNEL);
252277b024eSKalle Valo 	mwifiex_dbg(priv->adapter, MSG, "regdomain: %d\n",
253277b024eSKalle Valo 		    rdr_event->reg_domain);
254277b024eSKalle Valo 	mwifiex_dbg(priv->adapter, MSG, "radar detection type: %d\n",
255277b024eSKalle Valo 		    rdr_event->det_type);
256277b024eSKalle Valo 
257277b024eSKalle Valo 	return 0;
258277b024eSKalle Valo }
259277b024eSKalle Valo 
260277b024eSKalle Valo /* This is work queue function for channel switch handling.
261277b024eSKalle Valo  * This function takes care of updating new channel definitin to
262277b024eSKalle Valo  * bss config structure, restart AP and indicate channel switch success
263277b024eSKalle Valo  * to cfg80211.
264277b024eSKalle Valo  */
mwifiex_dfs_chan_sw_work_queue(struct work_struct * work)265277b024eSKalle Valo void mwifiex_dfs_chan_sw_work_queue(struct work_struct *work)
266277b024eSKalle Valo {
267277b024eSKalle Valo 	struct mwifiex_uap_bss_param *bss_cfg;
2688dd37c7cSAmitoj Kaur Chawla 	struct delayed_work *delayed_work = to_delayed_work(work);
269277b024eSKalle Valo 	struct mwifiex_private *priv =
270277b024eSKalle Valo 			container_of(delayed_work, struct mwifiex_private,
271277b024eSKalle Valo 				     dfs_chan_sw_work);
272277b024eSKalle Valo 
273277b024eSKalle Valo 	bss_cfg = &priv->bss_cfg;
274277b024eSKalle Valo 	if (!bss_cfg->beacon_period) {
275277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, ERROR,
276277b024eSKalle Valo 			    "channel switch: AP already stopped\n");
277277b024eSKalle Valo 		return;
278277b024eSKalle Valo 	}
279277b024eSKalle Valo 
280277b024eSKalle Valo 	mwifiex_uap_set_channel(priv, bss_cfg, priv->dfs_chandef);
281277b024eSKalle Valo 
282277b024eSKalle Valo 	if (mwifiex_config_start_uap(priv, bss_cfg)) {
283277b024eSKalle Valo 		mwifiex_dbg(priv->adapter, ERROR,
284277b024eSKalle Valo 			    "Failed to start AP after channel switch\n");
285277b024eSKalle Valo 		return;
286277b024eSKalle Valo 	}
287277b024eSKalle Valo 
288277b024eSKalle Valo 	mwifiex_dbg(priv->adapter, MSG,
289277b024eSKalle Valo 		    "indicating channel switch completion to kernel\n");
2903e12968fSNiels Dossche 	mutex_lock(&priv->wdev.mtx);
291*b345f063SAloka Dixit 	cfg80211_ch_switch_notify(priv->netdev, &priv->dfs_chandef, 0, 0);
2923e12968fSNiels Dossche 	mutex_unlock(&priv->wdev.mtx);
293277b024eSKalle Valo }
294