1 /*
2  * Marvell Wireless LAN device driver: AP specific command handling
3  *
4  * Copyright (C) 2012-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include "main.h"
21 #include "11ac.h"
22 #include "11n.h"
23 
24 /* This function parses security related parameters from cfg80211_ap_settings
25  * and sets into FW understandable bss_config structure.
26  */
27 int mwifiex_set_secure_params(struct mwifiex_private *priv,
28 			      struct mwifiex_uap_bss_param *bss_config,
29 			      struct cfg80211_ap_settings *params) {
30 	int i;
31 	struct mwifiex_wep_key wep_key;
32 
33 	if (!params->privacy) {
34 		bss_config->protocol = PROTOCOL_NO_SECURITY;
35 		bss_config->key_mgmt = KEY_MGMT_NONE;
36 		bss_config->wpa_cfg.length = 0;
37 		priv->sec_info.wep_enabled = 0;
38 		priv->sec_info.wpa_enabled = 0;
39 		priv->sec_info.wpa2_enabled = 0;
40 
41 		return 0;
42 	}
43 
44 	switch (params->auth_type) {
45 	case NL80211_AUTHTYPE_OPEN_SYSTEM:
46 		bss_config->auth_mode = WLAN_AUTH_OPEN;
47 		break;
48 	case NL80211_AUTHTYPE_SHARED_KEY:
49 		bss_config->auth_mode = WLAN_AUTH_SHARED_KEY;
50 		break;
51 	case NL80211_AUTHTYPE_NETWORK_EAP:
52 		bss_config->auth_mode = WLAN_AUTH_LEAP;
53 		break;
54 	default:
55 		bss_config->auth_mode = MWIFIEX_AUTH_MODE_AUTO;
56 		break;
57 	}
58 
59 	bss_config->key_mgmt_operation |= KEY_MGMT_ON_HOST;
60 
61 	for (i = 0; i < params->crypto.n_akm_suites; i++) {
62 		switch (params->crypto.akm_suites[i]) {
63 		case WLAN_AKM_SUITE_8021X:
64 			if (params->crypto.wpa_versions &
65 			    NL80211_WPA_VERSION_1) {
66 				bss_config->protocol = PROTOCOL_WPA;
67 				bss_config->key_mgmt = KEY_MGMT_EAP;
68 			}
69 			if (params->crypto.wpa_versions &
70 			    NL80211_WPA_VERSION_2) {
71 				bss_config->protocol |= PROTOCOL_WPA2;
72 				bss_config->key_mgmt = KEY_MGMT_EAP;
73 			}
74 			break;
75 		case WLAN_AKM_SUITE_PSK:
76 			if (params->crypto.wpa_versions &
77 			    NL80211_WPA_VERSION_1) {
78 				bss_config->protocol = PROTOCOL_WPA;
79 				bss_config->key_mgmt = KEY_MGMT_PSK;
80 			}
81 			if (params->crypto.wpa_versions &
82 			    NL80211_WPA_VERSION_2) {
83 				bss_config->protocol |= PROTOCOL_WPA2;
84 				bss_config->key_mgmt = KEY_MGMT_PSK;
85 			}
86 			break;
87 		default:
88 			break;
89 		}
90 	}
91 	for (i = 0; i < params->crypto.n_ciphers_pairwise; i++) {
92 		switch (params->crypto.ciphers_pairwise[i]) {
93 		case WLAN_CIPHER_SUITE_WEP40:
94 		case WLAN_CIPHER_SUITE_WEP104:
95 			break;
96 		case WLAN_CIPHER_SUITE_TKIP:
97 			if (params->crypto.wpa_versions & NL80211_WPA_VERSION_1)
98 				bss_config->wpa_cfg.pairwise_cipher_wpa |=
99 								CIPHER_TKIP;
100 			if (params->crypto.wpa_versions & NL80211_WPA_VERSION_2)
101 				bss_config->wpa_cfg.pairwise_cipher_wpa2 |=
102 								CIPHER_TKIP;
103 			break;
104 		case WLAN_CIPHER_SUITE_CCMP:
105 			if (params->crypto.wpa_versions & NL80211_WPA_VERSION_1)
106 				bss_config->wpa_cfg.pairwise_cipher_wpa |=
107 								CIPHER_AES_CCMP;
108 			if (params->crypto.wpa_versions & NL80211_WPA_VERSION_2)
109 				bss_config->wpa_cfg.pairwise_cipher_wpa2 |=
110 								CIPHER_AES_CCMP;
111 		default:
112 			break;
113 		}
114 	}
115 
116 	switch (params->crypto.cipher_group) {
117 	case WLAN_CIPHER_SUITE_WEP40:
118 	case WLAN_CIPHER_SUITE_WEP104:
119 		if (priv->sec_info.wep_enabled) {
120 			bss_config->protocol = PROTOCOL_STATIC_WEP;
121 			bss_config->key_mgmt = KEY_MGMT_NONE;
122 			bss_config->wpa_cfg.length = 0;
123 
124 			for (i = 0; i < NUM_WEP_KEYS; i++) {
125 				wep_key = priv->wep_key[i];
126 				bss_config->wep_cfg[i].key_index = i;
127 
128 				if (priv->wep_key_curr_index == i)
129 					bss_config->wep_cfg[i].is_default = 1;
130 				else
131 					bss_config->wep_cfg[i].is_default = 0;
132 
133 				bss_config->wep_cfg[i].length =
134 							     wep_key.key_length;
135 				memcpy(&bss_config->wep_cfg[i].key,
136 				       &wep_key.key_material,
137 				       wep_key.key_length);
138 			}
139 		}
140 		break;
141 	case WLAN_CIPHER_SUITE_TKIP:
142 		bss_config->wpa_cfg.group_cipher = CIPHER_TKIP;
143 		break;
144 	case WLAN_CIPHER_SUITE_CCMP:
145 		bss_config->wpa_cfg.group_cipher = CIPHER_AES_CCMP;
146 		break;
147 	default:
148 		break;
149 	}
150 
151 	return 0;
152 }
153 
154 /* This function updates 11n related parameters from IE and sets them into
155  * bss_config structure.
156  */
157 void
158 mwifiex_set_ht_params(struct mwifiex_private *priv,
159 		      struct mwifiex_uap_bss_param *bss_cfg,
160 		      struct cfg80211_ap_settings *params)
161 {
162 	const u8 *ht_ie;
163 
164 	if (!ISSUPP_11NENABLED(priv->adapter->fw_cap_info))
165 		return;
166 
167 	ht_ie = cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, params->beacon.tail,
168 				 params->beacon.tail_len);
169 	if (ht_ie) {
170 		memcpy(&bss_cfg->ht_cap, ht_ie + 2,
171 		       sizeof(struct ieee80211_ht_cap));
172 		priv->ap_11n_enabled = 1;
173 	} else {
174 		memset(&bss_cfg->ht_cap, 0, sizeof(struct ieee80211_ht_cap));
175 		bss_cfg->ht_cap.cap_info = cpu_to_le16(MWIFIEX_DEF_HT_CAP);
176 		bss_cfg->ht_cap.ampdu_params_info = MWIFIEX_DEF_AMPDU;
177 	}
178 
179 	return;
180 }
181 
182 /* This function updates 11ac related parameters from IE
183  * and sets them into bss_config structure.
184  */
185 void mwifiex_set_vht_params(struct mwifiex_private *priv,
186 			    struct mwifiex_uap_bss_param *bss_cfg,
187 			    struct cfg80211_ap_settings *params)
188 {
189 	const u8 *vht_ie;
190 
191 	vht_ie = cfg80211_find_ie(WLAN_EID_VHT_CAPABILITY, params->beacon.tail,
192 				  params->beacon.tail_len);
193 	if (vht_ie) {
194 		memcpy(&bss_cfg->vht_cap, vht_ie + 2,
195 		       sizeof(struct ieee80211_vht_cap));
196 		priv->ap_11ac_enabled = 1;
197 	} else {
198 		priv->ap_11ac_enabled = 0;
199 	}
200 
201 	return;
202 }
203 
204 /* This function updates 11ac related parameters from IE
205  * and sets them into bss_config structure.
206  */
207 void mwifiex_set_tpc_params(struct mwifiex_private *priv,
208 			    struct mwifiex_uap_bss_param *bss_cfg,
209 			    struct cfg80211_ap_settings *params)
210 {
211 	const u8 *tpc_ie;
212 
213 	tpc_ie = cfg80211_find_ie(WLAN_EID_TPC_REQUEST, params->beacon.tail,
214 				  params->beacon.tail_len);
215 	if (tpc_ie)
216 		bss_cfg->power_constraint = *(tpc_ie + 2);
217 	else
218 		bss_cfg->power_constraint = 0;
219 }
220 
221 /* Enable VHT only when cfg80211_ap_settings has VHT IE.
222  * Otherwise disable VHT.
223  */
224 void mwifiex_set_vht_width(struct mwifiex_private *priv,
225 			   enum nl80211_chan_width width,
226 			   bool ap_11ac_enable)
227 {
228 	struct mwifiex_adapter *adapter = priv->adapter;
229 	struct mwifiex_11ac_vht_cfg vht_cfg;
230 
231 	vht_cfg.band_config = VHT_CFG_5GHZ;
232 	vht_cfg.cap_info = adapter->hw_dot_11ac_dev_cap;
233 
234 	if (!ap_11ac_enable) {
235 		vht_cfg.mcs_tx_set = DISABLE_VHT_MCS_SET;
236 		vht_cfg.mcs_rx_set = DISABLE_VHT_MCS_SET;
237 	} else {
238 		vht_cfg.mcs_tx_set = DEFAULT_VHT_MCS_SET;
239 		vht_cfg.mcs_rx_set = DEFAULT_VHT_MCS_SET;
240 	}
241 
242 	vht_cfg.misc_config  = VHT_CAP_UAP_ONLY;
243 
244 	if (ap_11ac_enable && width >= NL80211_CHAN_WIDTH_80)
245 		vht_cfg.misc_config |= VHT_BW_80_160_80P80;
246 
247 	mwifiex_send_cmd(priv, HostCmd_CMD_11AC_CFG,
248 			 HostCmd_ACT_GEN_SET, 0, &vht_cfg, true);
249 
250 	return;
251 }
252 
253 /* This function finds supported rates IE from beacon parameter and sets
254  * these rates into bss_config structure.
255  */
256 void
257 mwifiex_set_uap_rates(struct mwifiex_uap_bss_param *bss_cfg,
258 		      struct cfg80211_ap_settings *params)
259 {
260 	struct ieee_types_header *rate_ie;
261 	int var_offset = offsetof(struct ieee80211_mgmt, u.beacon.variable);
262 	const u8 *var_pos = params->beacon.head + var_offset;
263 	int len = params->beacon.head_len - var_offset;
264 	u8 rate_len = 0;
265 
266 	rate_ie = (void *)cfg80211_find_ie(WLAN_EID_SUPP_RATES, var_pos, len);
267 	if (rate_ie) {
268 		memcpy(bss_cfg->rates, rate_ie + 1, rate_ie->len);
269 		rate_len = rate_ie->len;
270 	}
271 
272 	rate_ie = (void *)cfg80211_find_ie(WLAN_EID_EXT_SUPP_RATES,
273 					   params->beacon.tail,
274 					   params->beacon.tail_len);
275 	if (rate_ie)
276 		memcpy(bss_cfg->rates + rate_len, rate_ie + 1, rate_ie->len);
277 
278 	return;
279 }
280 
281 /* This function initializes some of mwifiex_uap_bss_param variables.
282  * This helps FW in ignoring invalid values. These values may or may not
283  * be get updated to valid ones at later stage.
284  */
285 void mwifiex_set_sys_config_invalid_data(struct mwifiex_uap_bss_param *config)
286 {
287 	config->bcast_ssid_ctl = 0x7F;
288 	config->radio_ctl = 0x7F;
289 	config->dtim_period = 0x7F;
290 	config->beacon_period = 0x7FFF;
291 	config->auth_mode = 0x7F;
292 	config->rts_threshold = 0x7FFF;
293 	config->frag_threshold = 0x7FFF;
294 	config->retry_limit = 0x7F;
295 	config->qos_info = 0xFF;
296 }
297 
298 /* This function parses BSS related parameters from structure
299  * and prepares TLVs specific to WPA/WPA2 security.
300  * These TLVs are appended to command buffer.
301  */
302 static void
303 mwifiex_uap_bss_wpa(u8 **tlv_buf, void *cmd_buf, u16 *param_size)
304 {
305 	struct host_cmd_tlv_pwk_cipher *pwk_cipher;
306 	struct host_cmd_tlv_gwk_cipher *gwk_cipher;
307 	struct host_cmd_tlv_passphrase *passphrase;
308 	struct host_cmd_tlv_akmp *tlv_akmp;
309 	struct mwifiex_uap_bss_param *bss_cfg = cmd_buf;
310 	u16 cmd_size = *param_size;
311 	u8 *tlv = *tlv_buf;
312 
313 	tlv_akmp = (struct host_cmd_tlv_akmp *)tlv;
314 	tlv_akmp->header.type = cpu_to_le16(TLV_TYPE_UAP_AKMP);
315 	tlv_akmp->header.len = cpu_to_le16(sizeof(struct host_cmd_tlv_akmp) -
316 					sizeof(struct mwifiex_ie_types_header));
317 	tlv_akmp->key_mgmt_operation = cpu_to_le16(bss_cfg->key_mgmt_operation);
318 	tlv_akmp->key_mgmt = cpu_to_le16(bss_cfg->key_mgmt);
319 	cmd_size += sizeof(struct host_cmd_tlv_akmp);
320 	tlv += sizeof(struct host_cmd_tlv_akmp);
321 
322 	if (bss_cfg->wpa_cfg.pairwise_cipher_wpa & VALID_CIPHER_BITMAP) {
323 		pwk_cipher = (struct host_cmd_tlv_pwk_cipher *)tlv;
324 		pwk_cipher->header.type = cpu_to_le16(TLV_TYPE_PWK_CIPHER);
325 		pwk_cipher->header.len =
326 			cpu_to_le16(sizeof(struct host_cmd_tlv_pwk_cipher) -
327 				    sizeof(struct mwifiex_ie_types_header));
328 		pwk_cipher->proto = cpu_to_le16(PROTOCOL_WPA);
329 		pwk_cipher->cipher = bss_cfg->wpa_cfg.pairwise_cipher_wpa;
330 		cmd_size += sizeof(struct host_cmd_tlv_pwk_cipher);
331 		tlv += sizeof(struct host_cmd_tlv_pwk_cipher);
332 	}
333 
334 	if (bss_cfg->wpa_cfg.pairwise_cipher_wpa2 & VALID_CIPHER_BITMAP) {
335 		pwk_cipher = (struct host_cmd_tlv_pwk_cipher *)tlv;
336 		pwk_cipher->header.type = cpu_to_le16(TLV_TYPE_PWK_CIPHER);
337 		pwk_cipher->header.len =
338 			cpu_to_le16(sizeof(struct host_cmd_tlv_pwk_cipher) -
339 				    sizeof(struct mwifiex_ie_types_header));
340 		pwk_cipher->proto = cpu_to_le16(PROTOCOL_WPA2);
341 		pwk_cipher->cipher = bss_cfg->wpa_cfg.pairwise_cipher_wpa2;
342 		cmd_size += sizeof(struct host_cmd_tlv_pwk_cipher);
343 		tlv += sizeof(struct host_cmd_tlv_pwk_cipher);
344 	}
345 
346 	if (bss_cfg->wpa_cfg.group_cipher & VALID_CIPHER_BITMAP) {
347 		gwk_cipher = (struct host_cmd_tlv_gwk_cipher *)tlv;
348 		gwk_cipher->header.type = cpu_to_le16(TLV_TYPE_GWK_CIPHER);
349 		gwk_cipher->header.len =
350 			cpu_to_le16(sizeof(struct host_cmd_tlv_gwk_cipher) -
351 				    sizeof(struct mwifiex_ie_types_header));
352 		gwk_cipher->cipher = bss_cfg->wpa_cfg.group_cipher;
353 		cmd_size += sizeof(struct host_cmd_tlv_gwk_cipher);
354 		tlv += sizeof(struct host_cmd_tlv_gwk_cipher);
355 	}
356 
357 	if (bss_cfg->wpa_cfg.length) {
358 		passphrase = (struct host_cmd_tlv_passphrase *)tlv;
359 		passphrase->header.type =
360 				cpu_to_le16(TLV_TYPE_UAP_WPA_PASSPHRASE);
361 		passphrase->header.len = cpu_to_le16(bss_cfg->wpa_cfg.length);
362 		memcpy(passphrase->passphrase, bss_cfg->wpa_cfg.passphrase,
363 		       bss_cfg->wpa_cfg.length);
364 		cmd_size += sizeof(struct mwifiex_ie_types_header) +
365 			    bss_cfg->wpa_cfg.length;
366 		tlv += sizeof(struct mwifiex_ie_types_header) +
367 				bss_cfg->wpa_cfg.length;
368 	}
369 
370 	*param_size = cmd_size;
371 	*tlv_buf = tlv;
372 
373 	return;
374 }
375 
376 /* This function parses WMM related parameters from cfg80211_ap_settings
377  * structure and updates bss_config structure.
378  */
379 void
380 mwifiex_set_wmm_params(struct mwifiex_private *priv,
381 		       struct mwifiex_uap_bss_param *bss_cfg,
382 		       struct cfg80211_ap_settings *params)
383 {
384 	const u8 *vendor_ie;
385 	const u8 *wmm_ie;
386 	u8 wmm_oui[] = {0x00, 0x50, 0xf2, 0x02};
387 
388 	vendor_ie = cfg80211_find_vendor_ie(WLAN_OUI_MICROSOFT,
389 					    WLAN_OUI_TYPE_MICROSOFT_WMM,
390 					    params->beacon.tail,
391 					    params->beacon.tail_len);
392 	if (vendor_ie) {
393 		wmm_ie = vendor_ie;
394 		memcpy(&bss_cfg->wmm_info, wmm_ie +
395 		       sizeof(struct ieee_types_header), *(wmm_ie + 1));
396 		priv->wmm_enabled = 1;
397 	} else {
398 		memset(&bss_cfg->wmm_info, 0, sizeof(bss_cfg->wmm_info));
399 		memcpy(&bss_cfg->wmm_info.oui, wmm_oui, sizeof(wmm_oui));
400 		bss_cfg->wmm_info.subtype = MWIFIEX_WMM_SUBTYPE;
401 		bss_cfg->wmm_info.version = MWIFIEX_WMM_VERSION;
402 		priv->wmm_enabled = 0;
403 	}
404 
405 	bss_cfg->qos_info = 0x00;
406 	return;
407 }
408 /* This function parses BSS related parameters from structure
409  * and prepares TLVs specific to WEP encryption.
410  * These TLVs are appended to command buffer.
411  */
412 static void
413 mwifiex_uap_bss_wep(u8 **tlv_buf, void *cmd_buf, u16 *param_size)
414 {
415 	struct host_cmd_tlv_wep_key *wep_key;
416 	u16 cmd_size = *param_size;
417 	int i;
418 	u8 *tlv = *tlv_buf;
419 	struct mwifiex_uap_bss_param *bss_cfg = cmd_buf;
420 
421 	for (i = 0; i < NUM_WEP_KEYS; i++) {
422 		if (bss_cfg->wep_cfg[i].length &&
423 		    (bss_cfg->wep_cfg[i].length == WLAN_KEY_LEN_WEP40 ||
424 		     bss_cfg->wep_cfg[i].length == WLAN_KEY_LEN_WEP104)) {
425 			wep_key = (struct host_cmd_tlv_wep_key *)tlv;
426 			wep_key->header.type =
427 				cpu_to_le16(TLV_TYPE_UAP_WEP_KEY);
428 			wep_key->header.len =
429 				cpu_to_le16(bss_cfg->wep_cfg[i].length + 2);
430 			wep_key->key_index = bss_cfg->wep_cfg[i].key_index;
431 			wep_key->is_default = bss_cfg->wep_cfg[i].is_default;
432 			memcpy(wep_key->key, bss_cfg->wep_cfg[i].key,
433 			       bss_cfg->wep_cfg[i].length);
434 			cmd_size += sizeof(struct mwifiex_ie_types_header) + 2 +
435 				    bss_cfg->wep_cfg[i].length;
436 			tlv += sizeof(struct mwifiex_ie_types_header) + 2 +
437 				    bss_cfg->wep_cfg[i].length;
438 		}
439 	}
440 
441 	*param_size = cmd_size;
442 	*tlv_buf = tlv;
443 
444 	return;
445 }
446 
447 /* This function enable 11D if userspace set the country IE.
448  */
449 void mwifiex_config_uap_11d(struct mwifiex_private *priv,
450 			    struct cfg80211_beacon_data *beacon_data)
451 {
452 	enum state_11d_t state_11d;
453 	const u8 *country_ie;
454 
455 	country_ie = cfg80211_find_ie(WLAN_EID_COUNTRY, beacon_data->tail,
456 				      beacon_data->tail_len);
457 	if (country_ie) {
458 		/* Send cmd to FW to enable 11D function */
459 		state_11d = ENABLE_11D;
460 		if (mwifiex_send_cmd(priv, HostCmd_CMD_802_11_SNMP_MIB,
461 				     HostCmd_ACT_GEN_SET, DOT11D_I,
462 				     &state_11d, true)) {
463 			mwifiex_dbg(priv->adapter, ERROR,
464 				    "11D: failed to enable 11D\n");
465 		}
466 	}
467 }
468 
469 /* This function parses BSS related parameters from structure
470  * and prepares TLVs. These TLVs are appended to command buffer.
471 */
472 static int
473 mwifiex_uap_bss_param_prepare(u8 *tlv, void *cmd_buf, u16 *param_size)
474 {
475 	struct host_cmd_tlv_dtim_period *dtim_period;
476 	struct host_cmd_tlv_beacon_period *beacon_period;
477 	struct host_cmd_tlv_ssid *ssid;
478 	struct host_cmd_tlv_bcast_ssid *bcast_ssid;
479 	struct host_cmd_tlv_channel_band *chan_band;
480 	struct host_cmd_tlv_frag_threshold *frag_threshold;
481 	struct host_cmd_tlv_rts_threshold *rts_threshold;
482 	struct host_cmd_tlv_retry_limit *retry_limit;
483 	struct host_cmd_tlv_encrypt_protocol *encrypt_protocol;
484 	struct host_cmd_tlv_auth_type *auth_type;
485 	struct host_cmd_tlv_rates *tlv_rates;
486 	struct host_cmd_tlv_ageout_timer *ao_timer, *ps_ao_timer;
487 	struct host_cmd_tlv_power_constraint *pwr_ct;
488 	struct mwifiex_ie_types_htcap *htcap;
489 	struct mwifiex_ie_types_wmmcap *wmm_cap;
490 	struct mwifiex_uap_bss_param *bss_cfg = cmd_buf;
491 	int i;
492 	u16 cmd_size = *param_size;
493 
494 	if (bss_cfg->ssid.ssid_len) {
495 		ssid = (struct host_cmd_tlv_ssid *)tlv;
496 		ssid->header.type = cpu_to_le16(TLV_TYPE_UAP_SSID);
497 		ssid->header.len = cpu_to_le16((u16)bss_cfg->ssid.ssid_len);
498 		memcpy(ssid->ssid, bss_cfg->ssid.ssid, bss_cfg->ssid.ssid_len);
499 		cmd_size += sizeof(struct mwifiex_ie_types_header) +
500 			    bss_cfg->ssid.ssid_len;
501 		tlv += sizeof(struct mwifiex_ie_types_header) +
502 				bss_cfg->ssid.ssid_len;
503 
504 		bcast_ssid = (struct host_cmd_tlv_bcast_ssid *)tlv;
505 		bcast_ssid->header.type = cpu_to_le16(TLV_TYPE_UAP_BCAST_SSID);
506 		bcast_ssid->header.len =
507 				cpu_to_le16(sizeof(bcast_ssid->bcast_ctl));
508 		bcast_ssid->bcast_ctl = bss_cfg->bcast_ssid_ctl;
509 		cmd_size += sizeof(struct host_cmd_tlv_bcast_ssid);
510 		tlv += sizeof(struct host_cmd_tlv_bcast_ssid);
511 	}
512 	if (bss_cfg->rates[0]) {
513 		tlv_rates = (struct host_cmd_tlv_rates *)tlv;
514 		tlv_rates->header.type = cpu_to_le16(TLV_TYPE_UAP_RATES);
515 
516 		for (i = 0; i < MWIFIEX_SUPPORTED_RATES && bss_cfg->rates[i];
517 		     i++)
518 			tlv_rates->rates[i] = bss_cfg->rates[i];
519 
520 		tlv_rates->header.len = cpu_to_le16(i);
521 		cmd_size += sizeof(struct host_cmd_tlv_rates) + i;
522 		tlv += sizeof(struct host_cmd_tlv_rates) + i;
523 	}
524 	if (bss_cfg->channel &&
525 	    (((bss_cfg->band_cfg & BIT(0)) == BAND_CONFIG_BG &&
526 	      bss_cfg->channel <= MAX_CHANNEL_BAND_BG) ||
527 	    ((bss_cfg->band_cfg & BIT(0)) == BAND_CONFIG_A &&
528 	     bss_cfg->channel <= MAX_CHANNEL_BAND_A))) {
529 		chan_band = (struct host_cmd_tlv_channel_band *)tlv;
530 		chan_band->header.type = cpu_to_le16(TLV_TYPE_CHANNELBANDLIST);
531 		chan_band->header.len =
532 			cpu_to_le16(sizeof(struct host_cmd_tlv_channel_band) -
533 				    sizeof(struct mwifiex_ie_types_header));
534 		chan_band->band_config = bss_cfg->band_cfg;
535 		chan_band->channel = bss_cfg->channel;
536 		cmd_size += sizeof(struct host_cmd_tlv_channel_band);
537 		tlv += sizeof(struct host_cmd_tlv_channel_band);
538 	}
539 	if (bss_cfg->beacon_period >= MIN_BEACON_PERIOD &&
540 	    bss_cfg->beacon_period <= MAX_BEACON_PERIOD) {
541 		beacon_period = (struct host_cmd_tlv_beacon_period *)tlv;
542 		beacon_period->header.type =
543 					cpu_to_le16(TLV_TYPE_UAP_BEACON_PERIOD);
544 		beacon_period->header.len =
545 			cpu_to_le16(sizeof(struct host_cmd_tlv_beacon_period) -
546 				    sizeof(struct mwifiex_ie_types_header));
547 		beacon_period->period = cpu_to_le16(bss_cfg->beacon_period);
548 		cmd_size += sizeof(struct host_cmd_tlv_beacon_period);
549 		tlv += sizeof(struct host_cmd_tlv_beacon_period);
550 	}
551 	if (bss_cfg->dtim_period >= MIN_DTIM_PERIOD &&
552 	    bss_cfg->dtim_period <= MAX_DTIM_PERIOD) {
553 		dtim_period = (struct host_cmd_tlv_dtim_period *)tlv;
554 		dtim_period->header.type =
555 			cpu_to_le16(TLV_TYPE_UAP_DTIM_PERIOD);
556 		dtim_period->header.len =
557 			cpu_to_le16(sizeof(struct host_cmd_tlv_dtim_period) -
558 				    sizeof(struct mwifiex_ie_types_header));
559 		dtim_period->period = bss_cfg->dtim_period;
560 		cmd_size += sizeof(struct host_cmd_tlv_dtim_period);
561 		tlv += sizeof(struct host_cmd_tlv_dtim_period);
562 	}
563 	if (bss_cfg->rts_threshold <= MWIFIEX_RTS_MAX_VALUE) {
564 		rts_threshold = (struct host_cmd_tlv_rts_threshold *)tlv;
565 		rts_threshold->header.type =
566 					cpu_to_le16(TLV_TYPE_UAP_RTS_THRESHOLD);
567 		rts_threshold->header.len =
568 			cpu_to_le16(sizeof(struct host_cmd_tlv_rts_threshold) -
569 				    sizeof(struct mwifiex_ie_types_header));
570 		rts_threshold->rts_thr = cpu_to_le16(bss_cfg->rts_threshold);
571 		cmd_size += sizeof(struct host_cmd_tlv_frag_threshold);
572 		tlv += sizeof(struct host_cmd_tlv_frag_threshold);
573 	}
574 	if ((bss_cfg->frag_threshold >= MWIFIEX_FRAG_MIN_VALUE) &&
575 	    (bss_cfg->frag_threshold <= MWIFIEX_FRAG_MAX_VALUE)) {
576 		frag_threshold = (struct host_cmd_tlv_frag_threshold *)tlv;
577 		frag_threshold->header.type =
578 				cpu_to_le16(TLV_TYPE_UAP_FRAG_THRESHOLD);
579 		frag_threshold->header.len =
580 			cpu_to_le16(sizeof(struct host_cmd_tlv_frag_threshold) -
581 				    sizeof(struct mwifiex_ie_types_header));
582 		frag_threshold->frag_thr = cpu_to_le16(bss_cfg->frag_threshold);
583 		cmd_size += sizeof(struct host_cmd_tlv_frag_threshold);
584 		tlv += sizeof(struct host_cmd_tlv_frag_threshold);
585 	}
586 	if (bss_cfg->retry_limit <= MWIFIEX_RETRY_LIMIT) {
587 		retry_limit = (struct host_cmd_tlv_retry_limit *)tlv;
588 		retry_limit->header.type =
589 			cpu_to_le16(TLV_TYPE_UAP_RETRY_LIMIT);
590 		retry_limit->header.len =
591 			cpu_to_le16(sizeof(struct host_cmd_tlv_retry_limit) -
592 				    sizeof(struct mwifiex_ie_types_header));
593 		retry_limit->limit = (u8)bss_cfg->retry_limit;
594 		cmd_size += sizeof(struct host_cmd_tlv_retry_limit);
595 		tlv += sizeof(struct host_cmd_tlv_retry_limit);
596 	}
597 	if ((bss_cfg->protocol & PROTOCOL_WPA) ||
598 	    (bss_cfg->protocol & PROTOCOL_WPA2) ||
599 	    (bss_cfg->protocol & PROTOCOL_EAP))
600 		mwifiex_uap_bss_wpa(&tlv, cmd_buf, &cmd_size);
601 	else
602 		mwifiex_uap_bss_wep(&tlv, cmd_buf, &cmd_size);
603 
604 	if ((bss_cfg->auth_mode <= WLAN_AUTH_SHARED_KEY) ||
605 	    (bss_cfg->auth_mode == MWIFIEX_AUTH_MODE_AUTO)) {
606 		auth_type = (struct host_cmd_tlv_auth_type *)tlv;
607 		auth_type->header.type = cpu_to_le16(TLV_TYPE_AUTH_TYPE);
608 		auth_type->header.len =
609 			cpu_to_le16(sizeof(struct host_cmd_tlv_auth_type) -
610 			sizeof(struct mwifiex_ie_types_header));
611 		auth_type->auth_type = (u8)bss_cfg->auth_mode;
612 		cmd_size += sizeof(struct host_cmd_tlv_auth_type);
613 		tlv += sizeof(struct host_cmd_tlv_auth_type);
614 	}
615 	if (bss_cfg->protocol) {
616 		encrypt_protocol = (struct host_cmd_tlv_encrypt_protocol *)tlv;
617 		encrypt_protocol->header.type =
618 			cpu_to_le16(TLV_TYPE_UAP_ENCRY_PROTOCOL);
619 		encrypt_protocol->header.len =
620 			cpu_to_le16(sizeof(struct host_cmd_tlv_encrypt_protocol)
621 			- sizeof(struct mwifiex_ie_types_header));
622 		encrypt_protocol->proto = cpu_to_le16(bss_cfg->protocol);
623 		cmd_size += sizeof(struct host_cmd_tlv_encrypt_protocol);
624 		tlv += sizeof(struct host_cmd_tlv_encrypt_protocol);
625 	}
626 
627 	if (bss_cfg->ht_cap.cap_info) {
628 		htcap = (struct mwifiex_ie_types_htcap *)tlv;
629 		htcap->header.type = cpu_to_le16(WLAN_EID_HT_CAPABILITY);
630 		htcap->header.len =
631 				cpu_to_le16(sizeof(struct ieee80211_ht_cap));
632 		htcap->ht_cap.cap_info = bss_cfg->ht_cap.cap_info;
633 		htcap->ht_cap.ampdu_params_info =
634 					     bss_cfg->ht_cap.ampdu_params_info;
635 		memcpy(&htcap->ht_cap.mcs, &bss_cfg->ht_cap.mcs,
636 		       sizeof(struct ieee80211_mcs_info));
637 		htcap->ht_cap.extended_ht_cap_info =
638 					bss_cfg->ht_cap.extended_ht_cap_info;
639 		htcap->ht_cap.tx_BF_cap_info = bss_cfg->ht_cap.tx_BF_cap_info;
640 		htcap->ht_cap.antenna_selection_info =
641 					bss_cfg->ht_cap.antenna_selection_info;
642 		cmd_size += sizeof(struct mwifiex_ie_types_htcap);
643 		tlv += sizeof(struct mwifiex_ie_types_htcap);
644 	}
645 
646 	if (bss_cfg->wmm_info.qos_info != 0xFF) {
647 		wmm_cap = (struct mwifiex_ie_types_wmmcap *)tlv;
648 		wmm_cap->header.type = cpu_to_le16(WLAN_EID_VENDOR_SPECIFIC);
649 		wmm_cap->header.len = cpu_to_le16(sizeof(wmm_cap->wmm_info));
650 		memcpy(&wmm_cap->wmm_info, &bss_cfg->wmm_info,
651 		       sizeof(wmm_cap->wmm_info));
652 		cmd_size += sizeof(struct mwifiex_ie_types_wmmcap);
653 		tlv += sizeof(struct mwifiex_ie_types_wmmcap);
654 	}
655 
656 	if (bss_cfg->sta_ao_timer) {
657 		ao_timer = (struct host_cmd_tlv_ageout_timer *)tlv;
658 		ao_timer->header.type = cpu_to_le16(TLV_TYPE_UAP_AO_TIMER);
659 		ao_timer->header.len = cpu_to_le16(sizeof(*ao_timer) -
660 					sizeof(struct mwifiex_ie_types_header));
661 		ao_timer->sta_ao_timer = cpu_to_le32(bss_cfg->sta_ao_timer);
662 		cmd_size += sizeof(*ao_timer);
663 		tlv += sizeof(*ao_timer);
664 	}
665 
666 	if (bss_cfg->power_constraint) {
667 		pwr_ct = (void *)tlv;
668 		pwr_ct->header.type = cpu_to_le16(TLV_TYPE_PWR_CONSTRAINT);
669 		pwr_ct->header.len = cpu_to_le16(sizeof(u8));
670 		pwr_ct->constraint = bss_cfg->power_constraint;
671 		cmd_size += sizeof(*pwr_ct);
672 		tlv += sizeof(*pwr_ct);
673 	}
674 
675 	if (bss_cfg->ps_sta_ao_timer) {
676 		ps_ao_timer = (struct host_cmd_tlv_ageout_timer *)tlv;
677 		ps_ao_timer->header.type =
678 				cpu_to_le16(TLV_TYPE_UAP_PS_AO_TIMER);
679 		ps_ao_timer->header.len = cpu_to_le16(sizeof(*ps_ao_timer) -
680 				sizeof(struct mwifiex_ie_types_header));
681 		ps_ao_timer->sta_ao_timer =
682 					cpu_to_le32(bss_cfg->ps_sta_ao_timer);
683 		cmd_size += sizeof(*ps_ao_timer);
684 		tlv += sizeof(*ps_ao_timer);
685 	}
686 
687 	*param_size = cmd_size;
688 
689 	return 0;
690 }
691 
692 /* This function parses custom IEs from IE list and prepares command buffer */
693 static int mwifiex_uap_custom_ie_prepare(u8 *tlv, void *cmd_buf, u16 *ie_size)
694 {
695 	struct mwifiex_ie_list *ap_ie = cmd_buf;
696 	struct mwifiex_ie_types_header *tlv_ie = (void *)tlv;
697 
698 	if (!ap_ie || !ap_ie->len)
699 		return -1;
700 
701 	*ie_size += le16_to_cpu(ap_ie->len) +
702 			sizeof(struct mwifiex_ie_types_header);
703 
704 	tlv_ie->type = cpu_to_le16(TLV_TYPE_MGMT_IE);
705 	tlv_ie->len = ap_ie->len;
706 	tlv += sizeof(struct mwifiex_ie_types_header);
707 
708 	memcpy(tlv, ap_ie->ie_list, le16_to_cpu(ap_ie->len));
709 
710 	return 0;
711 }
712 
713 /* Parse AP config structure and prepare TLV based command structure
714  * to be sent to FW for uAP configuration
715  */
716 static int
717 mwifiex_cmd_uap_sys_config(struct host_cmd_ds_command *cmd, u16 cmd_action,
718 			   u32 type, void *cmd_buf)
719 {
720 	u8 *tlv;
721 	u16 cmd_size, param_size, ie_size;
722 	struct host_cmd_ds_sys_config *sys_cfg;
723 
724 	cmd->command = cpu_to_le16(HostCmd_CMD_UAP_SYS_CONFIG);
725 	cmd_size = (u16)(sizeof(struct host_cmd_ds_sys_config) + S_DS_GEN);
726 	sys_cfg = (struct host_cmd_ds_sys_config *)&cmd->params.uap_sys_config;
727 	sys_cfg->action = cpu_to_le16(cmd_action);
728 	tlv = sys_cfg->tlv;
729 
730 	switch (type) {
731 	case UAP_BSS_PARAMS_I:
732 		param_size = cmd_size;
733 		if (mwifiex_uap_bss_param_prepare(tlv, cmd_buf, &param_size))
734 			return -1;
735 		cmd->size = cpu_to_le16(param_size);
736 		break;
737 	case UAP_CUSTOM_IE_I:
738 		ie_size = cmd_size;
739 		if (mwifiex_uap_custom_ie_prepare(tlv, cmd_buf, &ie_size))
740 			return -1;
741 		cmd->size = cpu_to_le16(ie_size);
742 		break;
743 	default:
744 		return -1;
745 	}
746 
747 	return 0;
748 }
749 
750 /* This function prepares AP specific deauth command with mac supplied in
751  * function parameter.
752  */
753 static int mwifiex_cmd_uap_sta_deauth(struct mwifiex_private *priv,
754 				      struct host_cmd_ds_command *cmd, u8 *mac)
755 {
756 	struct host_cmd_ds_sta_deauth *sta_deauth = &cmd->params.sta_deauth;
757 
758 	cmd->command = cpu_to_le16(HostCmd_CMD_UAP_STA_DEAUTH);
759 	memcpy(sta_deauth->mac, mac, ETH_ALEN);
760 	sta_deauth->reason = cpu_to_le16(WLAN_REASON_DEAUTH_LEAVING);
761 
762 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_sta_deauth) +
763 				S_DS_GEN);
764 	return 0;
765 }
766 
767 /* This function prepares the AP specific commands before sending them
768  * to the firmware.
769  * This is a generic function which calls specific command preparation
770  * routines based upon the command number.
771  */
772 int mwifiex_uap_prepare_cmd(struct mwifiex_private *priv, u16 cmd_no,
773 			    u16 cmd_action, u32 type,
774 			    void *data_buf, void *cmd_buf)
775 {
776 	struct host_cmd_ds_command *cmd = cmd_buf;
777 
778 	switch (cmd_no) {
779 	case HostCmd_CMD_UAP_SYS_CONFIG:
780 		if (mwifiex_cmd_uap_sys_config(cmd, cmd_action, type, data_buf))
781 			return -1;
782 		break;
783 	case HostCmd_CMD_UAP_BSS_START:
784 	case HostCmd_CMD_UAP_BSS_STOP:
785 	case HOST_CMD_APCMD_SYS_RESET:
786 	case HOST_CMD_APCMD_STA_LIST:
787 		cmd->command = cpu_to_le16(cmd_no);
788 		cmd->size = cpu_to_le16(S_DS_GEN);
789 		break;
790 	case HostCmd_CMD_UAP_STA_DEAUTH:
791 		if (mwifiex_cmd_uap_sta_deauth(priv, cmd, data_buf))
792 			return -1;
793 		break;
794 	case HostCmd_CMD_CHAN_REPORT_REQUEST:
795 		if (mwifiex_cmd_issue_chan_report_request(priv, cmd_buf,
796 							  data_buf))
797 			return -1;
798 		break;
799 	default:
800 		mwifiex_dbg(priv->adapter, ERROR,
801 			    "PREP_CMD: unknown cmd %#x\n", cmd_no);
802 		return -1;
803 	}
804 
805 	return 0;
806 }
807 
808 void mwifiex_uap_set_channel(struct mwifiex_private *priv,
809 			     struct mwifiex_uap_bss_param *bss_cfg,
810 			     struct cfg80211_chan_def chandef)
811 {
812 	u8 config_bands = 0, old_bands = priv->adapter->config_bands;
813 
814 	priv->bss_chandef = chandef;
815 
816 	bss_cfg->channel = ieee80211_frequency_to_channel(
817 						     chandef.chan->center_freq);
818 
819 	/* Set appropriate bands */
820 	if (chandef.chan->band == NL80211_BAND_2GHZ) {
821 		bss_cfg->band_cfg = BAND_CONFIG_BG;
822 		config_bands = BAND_B | BAND_G;
823 
824 		if (chandef.width > NL80211_CHAN_WIDTH_20_NOHT)
825 			config_bands |= BAND_GN;
826 	} else {
827 		bss_cfg->band_cfg = BAND_CONFIG_A;
828 		config_bands = BAND_A;
829 
830 		if (chandef.width > NL80211_CHAN_WIDTH_20_NOHT)
831 			config_bands |= BAND_AN;
832 
833 		if (chandef.width > NL80211_CHAN_WIDTH_40)
834 			config_bands |= BAND_AAC;
835 	}
836 
837 	switch (chandef.width) {
838 	case NL80211_CHAN_WIDTH_5:
839 	case NL80211_CHAN_WIDTH_10:
840 	case NL80211_CHAN_WIDTH_20_NOHT:
841 	case NL80211_CHAN_WIDTH_20:
842 		break;
843 	case NL80211_CHAN_WIDTH_40:
844 		if (chandef.center_freq1 < chandef.chan->center_freq)
845 			bss_cfg->band_cfg |= MWIFIEX_SEC_CHAN_BELOW;
846 		else
847 			bss_cfg->band_cfg |= MWIFIEX_SEC_CHAN_ABOVE;
848 		break;
849 	case NL80211_CHAN_WIDTH_80:
850 	case NL80211_CHAN_WIDTH_80P80:
851 	case NL80211_CHAN_WIDTH_160:
852 		bss_cfg->band_cfg |=
853 		    mwifiex_get_sec_chan_offset(bss_cfg->channel) << 4;
854 		break;
855 	default:
856 		mwifiex_dbg(priv->adapter,
857 			    WARN, "Unknown channel width: %d\n",
858 			    chandef.width);
859 		break;
860 	}
861 
862 	priv->adapter->config_bands = config_bands;
863 
864 	if (old_bands != config_bands) {
865 		mwifiex_send_domain_info_cmd_fw(priv->adapter->wiphy);
866 		mwifiex_dnld_txpwr_table(priv);
867 	}
868 }
869 
870 int mwifiex_config_start_uap(struct mwifiex_private *priv,
871 			     struct mwifiex_uap_bss_param *bss_cfg)
872 {
873 	if (mwifiex_send_cmd(priv, HostCmd_CMD_UAP_SYS_CONFIG,
874 			     HostCmd_ACT_GEN_SET,
875 			     UAP_BSS_PARAMS_I, bss_cfg, true)) {
876 		mwifiex_dbg(priv->adapter, ERROR,
877 			    "Failed to set AP configuration\n");
878 		return -1;
879 	}
880 
881 	if (mwifiex_send_cmd(priv, HostCmd_CMD_UAP_BSS_START,
882 			     HostCmd_ACT_GEN_SET, 0, NULL, true)) {
883 		mwifiex_dbg(priv->adapter, ERROR,
884 			    "Failed to start the BSS\n");
885 		return -1;
886 	}
887 
888 	if (priv->sec_info.wep_enabled)
889 		priv->curr_pkt_filter |= HostCmd_ACT_MAC_WEP_ENABLE;
890 	else
891 		priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_WEP_ENABLE;
892 
893 	if (mwifiex_send_cmd(priv, HostCmd_CMD_MAC_CONTROL,
894 			     HostCmd_ACT_GEN_SET, 0,
895 			     &priv->curr_pkt_filter, true))
896 		return -1;
897 
898 	return 0;
899 }
900