1 /* 2 * Copyright 2002-2005, Instant802 Networks, Inc. 3 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 4 * Copyright 2013-2014 Intel Mobile Communications GmbH 5 * Copyright (C) 2015 - 2017 Intel Deutschland GmbH 6 * 7 * This program is free software; you can redistribute it and/or modify 8 * it under the terms of the GNU General Public License version 2 as 9 * published by the Free Software Foundation. 10 */ 11 12 #include <linux/module.h> 13 #include <linux/init.h> 14 #include <linux/etherdevice.h> 15 #include <linux/netdevice.h> 16 #include <linux/types.h> 17 #include <linux/slab.h> 18 #include <linux/skbuff.h> 19 #include <linux/if_arp.h> 20 #include <linux/timer.h> 21 #include <linux/rtnetlink.h> 22 23 #include <net/codel.h> 24 #include <net/mac80211.h> 25 #include "ieee80211_i.h" 26 #include "driver-ops.h" 27 #include "rate.h" 28 #include "sta_info.h" 29 #include "debugfs_sta.h" 30 #include "mesh.h" 31 #include "wme.h" 32 33 /** 34 * DOC: STA information lifetime rules 35 * 36 * STA info structures (&struct sta_info) are managed in a hash table 37 * for faster lookup and a list for iteration. They are managed using 38 * RCU, i.e. access to the list and hash table is protected by RCU. 39 * 40 * Upon allocating a STA info structure with sta_info_alloc(), the caller 41 * owns that structure. It must then insert it into the hash table using 42 * either sta_info_insert() or sta_info_insert_rcu(); only in the latter 43 * case (which acquires an rcu read section but must not be called from 44 * within one) will the pointer still be valid after the call. Note that 45 * the caller may not do much with the STA info before inserting it, in 46 * particular, it may not start any mesh peer link management or add 47 * encryption keys. 48 * 49 * When the insertion fails (sta_info_insert()) returns non-zero), the 50 * structure will have been freed by sta_info_insert()! 51 * 52 * Station entries are added by mac80211 when you establish a link with a 53 * peer. This means different things for the different type of interfaces 54 * we support. For a regular station this mean we add the AP sta when we 55 * receive an association response from the AP. For IBSS this occurs when 56 * get to know about a peer on the same IBSS. For WDS we add the sta for 57 * the peer immediately upon device open. When using AP mode we add stations 58 * for each respective station upon request from userspace through nl80211. 59 * 60 * In order to remove a STA info structure, various sta_info_destroy_*() 61 * calls are available. 62 * 63 * There is no concept of ownership on a STA entry, each structure is 64 * owned by the global hash table/list until it is removed. All users of 65 * the structure need to be RCU protected so that the structure won't be 66 * freed before they are done using it. 67 */ 68 69 static const struct rhashtable_params sta_rht_params = { 70 .nelem_hint = 3, /* start small */ 71 .automatic_shrinking = true, 72 .head_offset = offsetof(struct sta_info, hash_node), 73 .key_offset = offsetof(struct sta_info, addr), 74 .key_len = ETH_ALEN, 75 .max_size = CONFIG_MAC80211_STA_HASH_MAX_SIZE, 76 }; 77 78 /* Caller must hold local->sta_mtx */ 79 static int sta_info_hash_del(struct ieee80211_local *local, 80 struct sta_info *sta) 81 { 82 return rhltable_remove(&local->sta_hash, &sta->hash_node, 83 sta_rht_params); 84 } 85 86 static void __cleanup_single_sta(struct sta_info *sta) 87 { 88 int ac, i; 89 struct tid_ampdu_tx *tid_tx; 90 struct ieee80211_sub_if_data *sdata = sta->sdata; 91 struct ieee80211_local *local = sdata->local; 92 struct fq *fq = &local->fq; 93 struct ps_data *ps; 94 95 if (test_sta_flag(sta, WLAN_STA_PS_STA) || 96 test_sta_flag(sta, WLAN_STA_PS_DRIVER) || 97 test_sta_flag(sta, WLAN_STA_PS_DELIVER)) { 98 if (sta->sdata->vif.type == NL80211_IFTYPE_AP || 99 sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN) 100 ps = &sdata->bss->ps; 101 else if (ieee80211_vif_is_mesh(&sdata->vif)) 102 ps = &sdata->u.mesh.ps; 103 else 104 return; 105 106 clear_sta_flag(sta, WLAN_STA_PS_STA); 107 clear_sta_flag(sta, WLAN_STA_PS_DRIVER); 108 clear_sta_flag(sta, WLAN_STA_PS_DELIVER); 109 110 atomic_dec(&ps->num_sta_ps); 111 } 112 113 if (sta->sta.txq[0]) { 114 for (i = 0; i < ARRAY_SIZE(sta->sta.txq); i++) { 115 struct txq_info *txqi = to_txq_info(sta->sta.txq[i]); 116 117 spin_lock_bh(&fq->lock); 118 ieee80211_txq_purge(local, txqi); 119 spin_unlock_bh(&fq->lock); 120 } 121 } 122 123 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 124 local->total_ps_buffered -= skb_queue_len(&sta->ps_tx_buf[ac]); 125 ieee80211_purge_tx_queue(&local->hw, &sta->ps_tx_buf[ac]); 126 ieee80211_purge_tx_queue(&local->hw, &sta->tx_filtered[ac]); 127 } 128 129 if (ieee80211_vif_is_mesh(&sdata->vif)) 130 mesh_sta_cleanup(sta); 131 132 cancel_work_sync(&sta->drv_deliver_wk); 133 134 /* 135 * Destroy aggregation state here. It would be nice to wait for the 136 * driver to finish aggregation stop and then clean up, but for now 137 * drivers have to handle aggregation stop being requested, followed 138 * directly by station destruction. 139 */ 140 for (i = 0; i < IEEE80211_NUM_TIDS; i++) { 141 kfree(sta->ampdu_mlme.tid_start_tx[i]); 142 tid_tx = rcu_dereference_raw(sta->ampdu_mlme.tid_tx[i]); 143 if (!tid_tx) 144 continue; 145 ieee80211_purge_tx_queue(&local->hw, &tid_tx->pending); 146 kfree(tid_tx); 147 } 148 } 149 150 static void cleanup_single_sta(struct sta_info *sta) 151 { 152 struct ieee80211_sub_if_data *sdata = sta->sdata; 153 struct ieee80211_local *local = sdata->local; 154 155 __cleanup_single_sta(sta); 156 sta_info_free(local, sta); 157 } 158 159 struct rhlist_head *sta_info_hash_lookup(struct ieee80211_local *local, 160 const u8 *addr) 161 { 162 return rhltable_lookup(&local->sta_hash, addr, sta_rht_params); 163 } 164 165 /* protected by RCU */ 166 struct sta_info *sta_info_get(struct ieee80211_sub_if_data *sdata, 167 const u8 *addr) 168 { 169 struct ieee80211_local *local = sdata->local; 170 struct rhlist_head *tmp; 171 struct sta_info *sta; 172 173 rcu_read_lock(); 174 for_each_sta_info(local, addr, sta, tmp) { 175 if (sta->sdata == sdata) { 176 rcu_read_unlock(); 177 /* this is safe as the caller must already hold 178 * another rcu read section or the mutex 179 */ 180 return sta; 181 } 182 } 183 rcu_read_unlock(); 184 return NULL; 185 } 186 187 /* 188 * Get sta info either from the specified interface 189 * or from one of its vlans 190 */ 191 struct sta_info *sta_info_get_bss(struct ieee80211_sub_if_data *sdata, 192 const u8 *addr) 193 { 194 struct ieee80211_local *local = sdata->local; 195 struct rhlist_head *tmp; 196 struct sta_info *sta; 197 198 rcu_read_lock(); 199 for_each_sta_info(local, addr, sta, tmp) { 200 if (sta->sdata == sdata || 201 (sta->sdata->bss && sta->sdata->bss == sdata->bss)) { 202 rcu_read_unlock(); 203 /* this is safe as the caller must already hold 204 * another rcu read section or the mutex 205 */ 206 return sta; 207 } 208 } 209 rcu_read_unlock(); 210 return NULL; 211 } 212 213 struct sta_info *sta_info_get_by_idx(struct ieee80211_sub_if_data *sdata, 214 int idx) 215 { 216 struct ieee80211_local *local = sdata->local; 217 struct sta_info *sta; 218 int i = 0; 219 220 list_for_each_entry_rcu(sta, &local->sta_list, list) { 221 if (sdata != sta->sdata) 222 continue; 223 if (i < idx) { 224 ++i; 225 continue; 226 } 227 return sta; 228 } 229 230 return NULL; 231 } 232 233 /** 234 * sta_info_free - free STA 235 * 236 * @local: pointer to the global information 237 * @sta: STA info to free 238 * 239 * This function must undo everything done by sta_info_alloc() 240 * that may happen before sta_info_insert(). It may only be 241 * called when sta_info_insert() has not been attempted (and 242 * if that fails, the station is freed anyway.) 243 */ 244 void sta_info_free(struct ieee80211_local *local, struct sta_info *sta) 245 { 246 if (sta->rate_ctrl) 247 rate_control_free_sta(sta); 248 249 sta_dbg(sta->sdata, "Destroyed STA %pM\n", sta->sta.addr); 250 251 if (sta->sta.txq[0]) 252 kfree(to_txq_info(sta->sta.txq[0])); 253 kfree(rcu_dereference_raw(sta->sta.rates)); 254 #ifdef CONFIG_MAC80211_MESH 255 kfree(sta->mesh); 256 #endif 257 free_percpu(sta->pcpu_rx_stats); 258 kfree(sta); 259 } 260 261 /* Caller must hold local->sta_mtx */ 262 static int sta_info_hash_add(struct ieee80211_local *local, 263 struct sta_info *sta) 264 { 265 return rhltable_insert(&local->sta_hash, &sta->hash_node, 266 sta_rht_params); 267 } 268 269 static void sta_deliver_ps_frames(struct work_struct *wk) 270 { 271 struct sta_info *sta; 272 273 sta = container_of(wk, struct sta_info, drv_deliver_wk); 274 275 if (sta->dead) 276 return; 277 278 local_bh_disable(); 279 if (!test_sta_flag(sta, WLAN_STA_PS_STA)) 280 ieee80211_sta_ps_deliver_wakeup(sta); 281 else if (test_and_clear_sta_flag(sta, WLAN_STA_PSPOLL)) 282 ieee80211_sta_ps_deliver_poll_response(sta); 283 else if (test_and_clear_sta_flag(sta, WLAN_STA_UAPSD)) 284 ieee80211_sta_ps_deliver_uapsd(sta); 285 local_bh_enable(); 286 } 287 288 static int sta_prepare_rate_control(struct ieee80211_local *local, 289 struct sta_info *sta, gfp_t gfp) 290 { 291 if (ieee80211_hw_check(&local->hw, HAS_RATE_CONTROL)) 292 return 0; 293 294 sta->rate_ctrl = local->rate_ctrl; 295 sta->rate_ctrl_priv = rate_control_alloc_sta(sta->rate_ctrl, 296 sta, gfp); 297 if (!sta->rate_ctrl_priv) 298 return -ENOMEM; 299 300 return 0; 301 } 302 303 struct sta_info *sta_info_alloc(struct ieee80211_sub_if_data *sdata, 304 const u8 *addr, gfp_t gfp) 305 { 306 struct ieee80211_local *local = sdata->local; 307 struct ieee80211_hw *hw = &local->hw; 308 struct sta_info *sta; 309 int i; 310 311 sta = kzalloc(sizeof(*sta) + hw->sta_data_size, gfp); 312 if (!sta) 313 return NULL; 314 315 if (ieee80211_hw_check(hw, USES_RSS)) { 316 sta->pcpu_rx_stats = 317 alloc_percpu(struct ieee80211_sta_rx_stats); 318 if (!sta->pcpu_rx_stats) 319 goto free; 320 } 321 322 spin_lock_init(&sta->lock); 323 spin_lock_init(&sta->ps_lock); 324 INIT_WORK(&sta->drv_deliver_wk, sta_deliver_ps_frames); 325 INIT_WORK(&sta->ampdu_mlme.work, ieee80211_ba_session_work); 326 mutex_init(&sta->ampdu_mlme.mtx); 327 #ifdef CONFIG_MAC80211_MESH 328 if (ieee80211_vif_is_mesh(&sdata->vif)) { 329 sta->mesh = kzalloc(sizeof(*sta->mesh), gfp); 330 if (!sta->mesh) 331 goto free; 332 spin_lock_init(&sta->mesh->plink_lock); 333 if (ieee80211_vif_is_mesh(&sdata->vif) && 334 !sdata->u.mesh.user_mpm) 335 init_timer(&sta->mesh->plink_timer); 336 sta->mesh->nonpeer_pm = NL80211_MESH_POWER_ACTIVE; 337 } 338 #endif 339 340 memcpy(sta->addr, addr, ETH_ALEN); 341 memcpy(sta->sta.addr, addr, ETH_ALEN); 342 sta->sta.max_rx_aggregation_subframes = 343 local->hw.max_rx_aggregation_subframes; 344 345 sta->local = local; 346 sta->sdata = sdata; 347 sta->rx_stats.last_rx = jiffies; 348 349 u64_stats_init(&sta->rx_stats.syncp); 350 351 sta->sta_state = IEEE80211_STA_NONE; 352 353 /* Mark TID as unreserved */ 354 sta->reserved_tid = IEEE80211_TID_UNRESERVED; 355 356 sta->last_connected = ktime_get_seconds(); 357 ewma_signal_init(&sta->rx_stats_avg.signal); 358 for (i = 0; i < ARRAY_SIZE(sta->rx_stats_avg.chain_signal); i++) 359 ewma_signal_init(&sta->rx_stats_avg.chain_signal[i]); 360 361 if (local->ops->wake_tx_queue) { 362 void *txq_data; 363 int size = sizeof(struct txq_info) + 364 ALIGN(hw->txq_data_size, sizeof(void *)); 365 366 txq_data = kcalloc(ARRAY_SIZE(sta->sta.txq), size, gfp); 367 if (!txq_data) 368 goto free; 369 370 for (i = 0; i < ARRAY_SIZE(sta->sta.txq); i++) { 371 struct txq_info *txq = txq_data + i * size; 372 373 ieee80211_txq_init(sdata, sta, txq, i); 374 } 375 } 376 377 if (sta_prepare_rate_control(local, sta, gfp)) 378 goto free_txq; 379 380 for (i = 0; i < IEEE80211_NUM_TIDS; i++) { 381 /* 382 * timer_to_tid must be initialized with identity mapping 383 * to enable session_timer's data differentiation. See 384 * sta_rx_agg_session_timer_expired for usage. 385 */ 386 sta->timer_to_tid[i] = i; 387 } 388 for (i = 0; i < IEEE80211_NUM_ACS; i++) { 389 skb_queue_head_init(&sta->ps_tx_buf[i]); 390 skb_queue_head_init(&sta->tx_filtered[i]); 391 } 392 393 for (i = 0; i < IEEE80211_NUM_TIDS; i++) 394 sta->last_seq_ctrl[i] = cpu_to_le16(USHRT_MAX); 395 396 sta->sta.smps_mode = IEEE80211_SMPS_OFF; 397 if (sdata->vif.type == NL80211_IFTYPE_AP || 398 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 399 struct ieee80211_supported_band *sband; 400 u8 smps; 401 402 sband = ieee80211_get_sband(sdata); 403 if (!sband) 404 goto free_txq; 405 406 smps = (sband->ht_cap.cap & IEEE80211_HT_CAP_SM_PS) >> 407 IEEE80211_HT_CAP_SM_PS_SHIFT; 408 /* 409 * Assume that hostapd advertises our caps in the beacon and 410 * this is the known_smps_mode for a station that just assciated 411 */ 412 switch (smps) { 413 case WLAN_HT_SMPS_CONTROL_DISABLED: 414 sta->known_smps_mode = IEEE80211_SMPS_OFF; 415 break; 416 case WLAN_HT_SMPS_CONTROL_STATIC: 417 sta->known_smps_mode = IEEE80211_SMPS_STATIC; 418 break; 419 case WLAN_HT_SMPS_CONTROL_DYNAMIC: 420 sta->known_smps_mode = IEEE80211_SMPS_DYNAMIC; 421 break; 422 default: 423 WARN_ON(1); 424 } 425 } 426 427 sta->sta.max_rc_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_BA; 428 429 sta->cparams.ce_threshold = CODEL_DISABLED_THRESHOLD; 430 sta->cparams.target = MS2TIME(20); 431 sta->cparams.interval = MS2TIME(100); 432 sta->cparams.ecn = true; 433 434 sta_dbg(sdata, "Allocated STA %pM\n", sta->sta.addr); 435 436 return sta; 437 438 free_txq: 439 if (sta->sta.txq[0]) 440 kfree(to_txq_info(sta->sta.txq[0])); 441 free: 442 #ifdef CONFIG_MAC80211_MESH 443 kfree(sta->mesh); 444 #endif 445 kfree(sta); 446 return NULL; 447 } 448 449 static int sta_info_insert_check(struct sta_info *sta) 450 { 451 struct ieee80211_sub_if_data *sdata = sta->sdata; 452 453 /* 454 * Can't be a WARN_ON because it can be triggered through a race: 455 * something inserts a STA (on one CPU) without holding the RTNL 456 * and another CPU turns off the net device. 457 */ 458 if (unlikely(!ieee80211_sdata_running(sdata))) 459 return -ENETDOWN; 460 461 if (WARN_ON(ether_addr_equal(sta->sta.addr, sdata->vif.addr) || 462 is_multicast_ether_addr(sta->sta.addr))) 463 return -EINVAL; 464 465 /* The RCU read lock is required by rhashtable due to 466 * asynchronous resize/rehash. We also require the mutex 467 * for correctness. 468 */ 469 rcu_read_lock(); 470 lockdep_assert_held(&sdata->local->sta_mtx); 471 if (ieee80211_hw_check(&sdata->local->hw, NEEDS_UNIQUE_STA_ADDR) && 472 ieee80211_find_sta_by_ifaddr(&sdata->local->hw, sta->addr, NULL)) { 473 rcu_read_unlock(); 474 return -ENOTUNIQ; 475 } 476 rcu_read_unlock(); 477 478 return 0; 479 } 480 481 static int sta_info_insert_drv_state(struct ieee80211_local *local, 482 struct ieee80211_sub_if_data *sdata, 483 struct sta_info *sta) 484 { 485 enum ieee80211_sta_state state; 486 int err = 0; 487 488 for (state = IEEE80211_STA_NOTEXIST; state < sta->sta_state; state++) { 489 err = drv_sta_state(local, sdata, sta, state, state + 1); 490 if (err) 491 break; 492 } 493 494 if (!err) { 495 /* 496 * Drivers using legacy sta_add/sta_remove callbacks only 497 * get uploaded set to true after sta_add is called. 498 */ 499 if (!local->ops->sta_add) 500 sta->uploaded = true; 501 return 0; 502 } 503 504 if (sdata->vif.type == NL80211_IFTYPE_ADHOC) { 505 sdata_info(sdata, 506 "failed to move IBSS STA %pM to state %d (%d) - keeping it anyway\n", 507 sta->sta.addr, state + 1, err); 508 err = 0; 509 } 510 511 /* unwind on error */ 512 for (; state > IEEE80211_STA_NOTEXIST; state--) 513 WARN_ON(drv_sta_state(local, sdata, sta, state, state - 1)); 514 515 return err; 516 } 517 518 /* 519 * should be called with sta_mtx locked 520 * this function replaces the mutex lock 521 * with a RCU lock 522 */ 523 static int sta_info_insert_finish(struct sta_info *sta) __acquires(RCU) 524 { 525 struct ieee80211_local *local = sta->local; 526 struct ieee80211_sub_if_data *sdata = sta->sdata; 527 struct station_info *sinfo = NULL; 528 int err = 0; 529 530 lockdep_assert_held(&local->sta_mtx); 531 532 /* check if STA exists already */ 533 if (sta_info_get_bss(sdata, sta->sta.addr)) { 534 err = -EEXIST; 535 goto out_err; 536 } 537 538 sinfo = kzalloc(sizeof(struct station_info), GFP_KERNEL); 539 if (!sinfo) { 540 err = -ENOMEM; 541 goto out_err; 542 } 543 544 local->num_sta++; 545 local->sta_generation++; 546 smp_mb(); 547 548 /* simplify things and don't accept BA sessions yet */ 549 set_sta_flag(sta, WLAN_STA_BLOCK_BA); 550 551 /* make the station visible */ 552 err = sta_info_hash_add(local, sta); 553 if (err) 554 goto out_drop_sta; 555 556 list_add_tail_rcu(&sta->list, &local->sta_list); 557 558 /* notify driver */ 559 err = sta_info_insert_drv_state(local, sdata, sta); 560 if (err) 561 goto out_remove; 562 563 set_sta_flag(sta, WLAN_STA_INSERTED); 564 /* accept BA sessions now */ 565 clear_sta_flag(sta, WLAN_STA_BLOCK_BA); 566 567 ieee80211_sta_debugfs_add(sta); 568 rate_control_add_sta_debugfs(sta); 569 570 sinfo->generation = local->sta_generation; 571 cfg80211_new_sta(sdata->dev, sta->sta.addr, sinfo, GFP_KERNEL); 572 kfree(sinfo); 573 574 sta_dbg(sdata, "Inserted STA %pM\n", sta->sta.addr); 575 576 /* move reference to rcu-protected */ 577 rcu_read_lock(); 578 mutex_unlock(&local->sta_mtx); 579 580 if (ieee80211_vif_is_mesh(&sdata->vif)) 581 mesh_accept_plinks_update(sdata); 582 583 return 0; 584 out_remove: 585 sta_info_hash_del(local, sta); 586 list_del_rcu(&sta->list); 587 out_drop_sta: 588 local->num_sta--; 589 synchronize_net(); 590 __cleanup_single_sta(sta); 591 out_err: 592 mutex_unlock(&local->sta_mtx); 593 kfree(sinfo); 594 rcu_read_lock(); 595 return err; 596 } 597 598 int sta_info_insert_rcu(struct sta_info *sta) __acquires(RCU) 599 { 600 struct ieee80211_local *local = sta->local; 601 int err; 602 603 might_sleep(); 604 605 mutex_lock(&local->sta_mtx); 606 607 err = sta_info_insert_check(sta); 608 if (err) { 609 mutex_unlock(&local->sta_mtx); 610 rcu_read_lock(); 611 goto out_free; 612 } 613 614 err = sta_info_insert_finish(sta); 615 if (err) 616 goto out_free; 617 618 return 0; 619 out_free: 620 sta_info_free(local, sta); 621 return err; 622 } 623 624 int sta_info_insert(struct sta_info *sta) 625 { 626 int err = sta_info_insert_rcu(sta); 627 628 rcu_read_unlock(); 629 630 return err; 631 } 632 633 static inline void __bss_tim_set(u8 *tim, u16 id) 634 { 635 /* 636 * This format has been mandated by the IEEE specifications, 637 * so this line may not be changed to use the __set_bit() format. 638 */ 639 tim[id / 8] |= (1 << (id % 8)); 640 } 641 642 static inline void __bss_tim_clear(u8 *tim, u16 id) 643 { 644 /* 645 * This format has been mandated by the IEEE specifications, 646 * so this line may not be changed to use the __clear_bit() format. 647 */ 648 tim[id / 8] &= ~(1 << (id % 8)); 649 } 650 651 static inline bool __bss_tim_get(u8 *tim, u16 id) 652 { 653 /* 654 * This format has been mandated by the IEEE specifications, 655 * so this line may not be changed to use the test_bit() format. 656 */ 657 return tim[id / 8] & (1 << (id % 8)); 658 } 659 660 static unsigned long ieee80211_tids_for_ac(int ac) 661 { 662 /* If we ever support TIDs > 7, this obviously needs to be adjusted */ 663 switch (ac) { 664 case IEEE80211_AC_VO: 665 return BIT(6) | BIT(7); 666 case IEEE80211_AC_VI: 667 return BIT(4) | BIT(5); 668 case IEEE80211_AC_BE: 669 return BIT(0) | BIT(3); 670 case IEEE80211_AC_BK: 671 return BIT(1) | BIT(2); 672 default: 673 WARN_ON(1); 674 return 0; 675 } 676 } 677 678 static void __sta_info_recalc_tim(struct sta_info *sta, bool ignore_pending) 679 { 680 struct ieee80211_local *local = sta->local; 681 struct ps_data *ps; 682 bool indicate_tim = false; 683 u8 ignore_for_tim = sta->sta.uapsd_queues; 684 int ac; 685 u16 id = sta->sta.aid; 686 687 if (sta->sdata->vif.type == NL80211_IFTYPE_AP || 688 sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 689 if (WARN_ON_ONCE(!sta->sdata->bss)) 690 return; 691 692 ps = &sta->sdata->bss->ps; 693 #ifdef CONFIG_MAC80211_MESH 694 } else if (ieee80211_vif_is_mesh(&sta->sdata->vif)) { 695 ps = &sta->sdata->u.mesh.ps; 696 #endif 697 } else { 698 return; 699 } 700 701 /* No need to do anything if the driver does all */ 702 if (ieee80211_hw_check(&local->hw, AP_LINK_PS) && !local->ops->set_tim) 703 return; 704 705 if (sta->dead) 706 goto done; 707 708 /* 709 * If all ACs are delivery-enabled then we should build 710 * the TIM bit for all ACs anyway; if only some are then 711 * we ignore those and build the TIM bit using only the 712 * non-enabled ones. 713 */ 714 if (ignore_for_tim == BIT(IEEE80211_NUM_ACS) - 1) 715 ignore_for_tim = 0; 716 717 if (ignore_pending) 718 ignore_for_tim = BIT(IEEE80211_NUM_ACS) - 1; 719 720 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 721 unsigned long tids; 722 723 if (ignore_for_tim & ieee80211_ac_to_qos_mask[ac]) 724 continue; 725 726 indicate_tim |= !skb_queue_empty(&sta->tx_filtered[ac]) || 727 !skb_queue_empty(&sta->ps_tx_buf[ac]); 728 if (indicate_tim) 729 break; 730 731 tids = ieee80211_tids_for_ac(ac); 732 733 indicate_tim |= 734 sta->driver_buffered_tids & tids; 735 indicate_tim |= 736 sta->txq_buffered_tids & tids; 737 } 738 739 done: 740 spin_lock_bh(&local->tim_lock); 741 742 if (indicate_tim == __bss_tim_get(ps->tim, id)) 743 goto out_unlock; 744 745 if (indicate_tim) 746 __bss_tim_set(ps->tim, id); 747 else 748 __bss_tim_clear(ps->tim, id); 749 750 if (local->ops->set_tim && !WARN_ON(sta->dead)) { 751 local->tim_in_locked_section = true; 752 drv_set_tim(local, &sta->sta, indicate_tim); 753 local->tim_in_locked_section = false; 754 } 755 756 out_unlock: 757 spin_unlock_bh(&local->tim_lock); 758 } 759 760 void sta_info_recalc_tim(struct sta_info *sta) 761 { 762 __sta_info_recalc_tim(sta, false); 763 } 764 765 static bool sta_info_buffer_expired(struct sta_info *sta, struct sk_buff *skb) 766 { 767 struct ieee80211_tx_info *info; 768 int timeout; 769 770 if (!skb) 771 return false; 772 773 info = IEEE80211_SKB_CB(skb); 774 775 /* Timeout: (2 * listen_interval * beacon_int * 1024 / 1000000) sec */ 776 timeout = (sta->listen_interval * 777 sta->sdata->vif.bss_conf.beacon_int * 778 32 / 15625) * HZ; 779 if (timeout < STA_TX_BUFFER_EXPIRE) 780 timeout = STA_TX_BUFFER_EXPIRE; 781 return time_after(jiffies, info->control.jiffies + timeout); 782 } 783 784 785 static bool sta_info_cleanup_expire_buffered_ac(struct ieee80211_local *local, 786 struct sta_info *sta, int ac) 787 { 788 unsigned long flags; 789 struct sk_buff *skb; 790 791 /* 792 * First check for frames that should expire on the filtered 793 * queue. Frames here were rejected by the driver and are on 794 * a separate queue to avoid reordering with normal PS-buffered 795 * frames. They also aren't accounted for right now in the 796 * total_ps_buffered counter. 797 */ 798 for (;;) { 799 spin_lock_irqsave(&sta->tx_filtered[ac].lock, flags); 800 skb = skb_peek(&sta->tx_filtered[ac]); 801 if (sta_info_buffer_expired(sta, skb)) 802 skb = __skb_dequeue(&sta->tx_filtered[ac]); 803 else 804 skb = NULL; 805 spin_unlock_irqrestore(&sta->tx_filtered[ac].lock, flags); 806 807 /* 808 * Frames are queued in order, so if this one 809 * hasn't expired yet we can stop testing. If 810 * we actually reached the end of the queue we 811 * also need to stop, of course. 812 */ 813 if (!skb) 814 break; 815 ieee80211_free_txskb(&local->hw, skb); 816 } 817 818 /* 819 * Now also check the normal PS-buffered queue, this will 820 * only find something if the filtered queue was emptied 821 * since the filtered frames are all before the normal PS 822 * buffered frames. 823 */ 824 for (;;) { 825 spin_lock_irqsave(&sta->ps_tx_buf[ac].lock, flags); 826 skb = skb_peek(&sta->ps_tx_buf[ac]); 827 if (sta_info_buffer_expired(sta, skb)) 828 skb = __skb_dequeue(&sta->ps_tx_buf[ac]); 829 else 830 skb = NULL; 831 spin_unlock_irqrestore(&sta->ps_tx_buf[ac].lock, flags); 832 833 /* 834 * frames are queued in order, so if this one 835 * hasn't expired yet (or we reached the end of 836 * the queue) we can stop testing 837 */ 838 if (!skb) 839 break; 840 841 local->total_ps_buffered--; 842 ps_dbg(sta->sdata, "Buffered frame expired (STA %pM)\n", 843 sta->sta.addr); 844 ieee80211_free_txskb(&local->hw, skb); 845 } 846 847 /* 848 * Finally, recalculate the TIM bit for this station -- it might 849 * now be clear because the station was too slow to retrieve its 850 * frames. 851 */ 852 sta_info_recalc_tim(sta); 853 854 /* 855 * Return whether there are any frames still buffered, this is 856 * used to check whether the cleanup timer still needs to run, 857 * if there are no frames we don't need to rearm the timer. 858 */ 859 return !(skb_queue_empty(&sta->ps_tx_buf[ac]) && 860 skb_queue_empty(&sta->tx_filtered[ac])); 861 } 862 863 static bool sta_info_cleanup_expire_buffered(struct ieee80211_local *local, 864 struct sta_info *sta) 865 { 866 bool have_buffered = false; 867 int ac; 868 869 /* This is only necessary for stations on BSS/MBSS interfaces */ 870 if (!sta->sdata->bss && 871 !ieee80211_vif_is_mesh(&sta->sdata->vif)) 872 return false; 873 874 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) 875 have_buffered |= 876 sta_info_cleanup_expire_buffered_ac(local, sta, ac); 877 878 return have_buffered; 879 } 880 881 static int __must_check __sta_info_destroy_part1(struct sta_info *sta) 882 { 883 struct ieee80211_local *local; 884 struct ieee80211_sub_if_data *sdata; 885 int ret; 886 887 might_sleep(); 888 889 if (!sta) 890 return -ENOENT; 891 892 local = sta->local; 893 sdata = sta->sdata; 894 895 lockdep_assert_held(&local->sta_mtx); 896 897 /* 898 * Before removing the station from the driver and 899 * rate control, it might still start new aggregation 900 * sessions -- block that to make sure the tear-down 901 * will be sufficient. 902 */ 903 set_sta_flag(sta, WLAN_STA_BLOCK_BA); 904 ieee80211_sta_tear_down_BA_sessions(sta, AGG_STOP_DESTROY_STA); 905 906 /* 907 * Before removing the station from the driver there might be pending 908 * rx frames on RSS queues sent prior to the disassociation - wait for 909 * all such frames to be processed. 910 */ 911 drv_sync_rx_queues(local, sta); 912 913 ret = sta_info_hash_del(local, sta); 914 if (WARN_ON(ret)) 915 return ret; 916 917 /* 918 * for TDLS peers, make sure to return to the base channel before 919 * removal. 920 */ 921 if (test_sta_flag(sta, WLAN_STA_TDLS_OFF_CHANNEL)) { 922 drv_tdls_cancel_channel_switch(local, sdata, &sta->sta); 923 clear_sta_flag(sta, WLAN_STA_TDLS_OFF_CHANNEL); 924 } 925 926 list_del_rcu(&sta->list); 927 sta->removed = true; 928 929 drv_sta_pre_rcu_remove(local, sta->sdata, sta); 930 931 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN && 932 rcu_access_pointer(sdata->u.vlan.sta) == sta) 933 RCU_INIT_POINTER(sdata->u.vlan.sta, NULL); 934 935 return 0; 936 } 937 938 static void __sta_info_destroy_part2(struct sta_info *sta) 939 { 940 struct ieee80211_local *local = sta->local; 941 struct ieee80211_sub_if_data *sdata = sta->sdata; 942 struct station_info *sinfo; 943 int ret; 944 945 /* 946 * NOTE: This assumes at least synchronize_net() was done 947 * after _part1 and before _part2! 948 */ 949 950 might_sleep(); 951 lockdep_assert_held(&local->sta_mtx); 952 953 /* now keys can no longer be reached */ 954 ieee80211_free_sta_keys(local, sta); 955 956 /* disable TIM bit - last chance to tell driver */ 957 __sta_info_recalc_tim(sta, true); 958 959 sta->dead = true; 960 961 local->num_sta--; 962 local->sta_generation++; 963 964 while (sta->sta_state > IEEE80211_STA_NONE) { 965 ret = sta_info_move_state(sta, sta->sta_state - 1); 966 if (ret) { 967 WARN_ON_ONCE(1); 968 break; 969 } 970 } 971 972 if (sta->uploaded) { 973 ret = drv_sta_state(local, sdata, sta, IEEE80211_STA_NONE, 974 IEEE80211_STA_NOTEXIST); 975 WARN_ON_ONCE(ret != 0); 976 } 977 978 sta_dbg(sdata, "Removed STA %pM\n", sta->sta.addr); 979 980 sinfo = kzalloc(sizeof(*sinfo), GFP_KERNEL); 981 if (sinfo) 982 sta_set_sinfo(sta, sinfo); 983 cfg80211_del_sta_sinfo(sdata->dev, sta->sta.addr, sinfo, GFP_KERNEL); 984 kfree(sinfo); 985 986 rate_control_remove_sta_debugfs(sta); 987 ieee80211_sta_debugfs_remove(sta); 988 989 cleanup_single_sta(sta); 990 } 991 992 int __must_check __sta_info_destroy(struct sta_info *sta) 993 { 994 int err = __sta_info_destroy_part1(sta); 995 996 if (err) 997 return err; 998 999 synchronize_net(); 1000 1001 __sta_info_destroy_part2(sta); 1002 1003 return 0; 1004 } 1005 1006 int sta_info_destroy_addr(struct ieee80211_sub_if_data *sdata, const u8 *addr) 1007 { 1008 struct sta_info *sta; 1009 int ret; 1010 1011 mutex_lock(&sdata->local->sta_mtx); 1012 sta = sta_info_get(sdata, addr); 1013 ret = __sta_info_destroy(sta); 1014 mutex_unlock(&sdata->local->sta_mtx); 1015 1016 return ret; 1017 } 1018 1019 int sta_info_destroy_addr_bss(struct ieee80211_sub_if_data *sdata, 1020 const u8 *addr) 1021 { 1022 struct sta_info *sta; 1023 int ret; 1024 1025 mutex_lock(&sdata->local->sta_mtx); 1026 sta = sta_info_get_bss(sdata, addr); 1027 ret = __sta_info_destroy(sta); 1028 mutex_unlock(&sdata->local->sta_mtx); 1029 1030 return ret; 1031 } 1032 1033 static void sta_info_cleanup(unsigned long data) 1034 { 1035 struct ieee80211_local *local = (struct ieee80211_local *) data; 1036 struct sta_info *sta; 1037 bool timer_needed = false; 1038 1039 rcu_read_lock(); 1040 list_for_each_entry_rcu(sta, &local->sta_list, list) 1041 if (sta_info_cleanup_expire_buffered(local, sta)) 1042 timer_needed = true; 1043 rcu_read_unlock(); 1044 1045 if (local->quiescing) 1046 return; 1047 1048 if (!timer_needed) 1049 return; 1050 1051 mod_timer(&local->sta_cleanup, 1052 round_jiffies(jiffies + STA_INFO_CLEANUP_INTERVAL)); 1053 } 1054 1055 int sta_info_init(struct ieee80211_local *local) 1056 { 1057 int err; 1058 1059 err = rhltable_init(&local->sta_hash, &sta_rht_params); 1060 if (err) 1061 return err; 1062 1063 spin_lock_init(&local->tim_lock); 1064 mutex_init(&local->sta_mtx); 1065 INIT_LIST_HEAD(&local->sta_list); 1066 1067 setup_timer(&local->sta_cleanup, sta_info_cleanup, 1068 (unsigned long)local); 1069 return 0; 1070 } 1071 1072 void sta_info_stop(struct ieee80211_local *local) 1073 { 1074 del_timer_sync(&local->sta_cleanup); 1075 rhltable_destroy(&local->sta_hash); 1076 } 1077 1078 1079 int __sta_info_flush(struct ieee80211_sub_if_data *sdata, bool vlans) 1080 { 1081 struct ieee80211_local *local = sdata->local; 1082 struct sta_info *sta, *tmp; 1083 LIST_HEAD(free_list); 1084 int ret = 0; 1085 1086 might_sleep(); 1087 1088 WARN_ON(vlans && sdata->vif.type != NL80211_IFTYPE_AP); 1089 WARN_ON(vlans && !sdata->bss); 1090 1091 mutex_lock(&local->sta_mtx); 1092 list_for_each_entry_safe(sta, tmp, &local->sta_list, list) { 1093 if (sdata == sta->sdata || 1094 (vlans && sdata->bss == sta->sdata->bss)) { 1095 if (!WARN_ON(__sta_info_destroy_part1(sta))) 1096 list_add(&sta->free_list, &free_list); 1097 ret++; 1098 } 1099 } 1100 1101 if (!list_empty(&free_list)) { 1102 synchronize_net(); 1103 list_for_each_entry_safe(sta, tmp, &free_list, free_list) 1104 __sta_info_destroy_part2(sta); 1105 } 1106 mutex_unlock(&local->sta_mtx); 1107 1108 return ret; 1109 } 1110 1111 void ieee80211_sta_expire(struct ieee80211_sub_if_data *sdata, 1112 unsigned long exp_time) 1113 { 1114 struct ieee80211_local *local = sdata->local; 1115 struct sta_info *sta, *tmp; 1116 1117 mutex_lock(&local->sta_mtx); 1118 1119 list_for_each_entry_safe(sta, tmp, &local->sta_list, list) { 1120 unsigned long last_active = ieee80211_sta_last_active(sta); 1121 1122 if (sdata != sta->sdata) 1123 continue; 1124 1125 if (time_is_before_jiffies(last_active + exp_time)) { 1126 sta_dbg(sta->sdata, "expiring inactive STA %pM\n", 1127 sta->sta.addr); 1128 1129 if (ieee80211_vif_is_mesh(&sdata->vif) && 1130 test_sta_flag(sta, WLAN_STA_PS_STA)) 1131 atomic_dec(&sdata->u.mesh.ps.num_sta_ps); 1132 1133 WARN_ON(__sta_info_destroy(sta)); 1134 } 1135 } 1136 1137 mutex_unlock(&local->sta_mtx); 1138 } 1139 1140 struct ieee80211_sta *ieee80211_find_sta_by_ifaddr(struct ieee80211_hw *hw, 1141 const u8 *addr, 1142 const u8 *localaddr) 1143 { 1144 struct ieee80211_local *local = hw_to_local(hw); 1145 struct rhlist_head *tmp; 1146 struct sta_info *sta; 1147 1148 /* 1149 * Just return a random station if localaddr is NULL 1150 * ... first in list. 1151 */ 1152 for_each_sta_info(local, addr, sta, tmp) { 1153 if (localaddr && 1154 !ether_addr_equal(sta->sdata->vif.addr, localaddr)) 1155 continue; 1156 if (!sta->uploaded) 1157 return NULL; 1158 return &sta->sta; 1159 } 1160 1161 return NULL; 1162 } 1163 EXPORT_SYMBOL_GPL(ieee80211_find_sta_by_ifaddr); 1164 1165 struct ieee80211_sta *ieee80211_find_sta(struct ieee80211_vif *vif, 1166 const u8 *addr) 1167 { 1168 struct sta_info *sta; 1169 1170 if (!vif) 1171 return NULL; 1172 1173 sta = sta_info_get_bss(vif_to_sdata(vif), addr); 1174 if (!sta) 1175 return NULL; 1176 1177 if (!sta->uploaded) 1178 return NULL; 1179 1180 return &sta->sta; 1181 } 1182 EXPORT_SYMBOL(ieee80211_find_sta); 1183 1184 /* powersave support code */ 1185 void ieee80211_sta_ps_deliver_wakeup(struct sta_info *sta) 1186 { 1187 struct ieee80211_sub_if_data *sdata = sta->sdata; 1188 struct ieee80211_local *local = sdata->local; 1189 struct sk_buff_head pending; 1190 int filtered = 0, buffered = 0, ac, i; 1191 unsigned long flags; 1192 struct ps_data *ps; 1193 1194 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) 1195 sdata = container_of(sdata->bss, struct ieee80211_sub_if_data, 1196 u.ap); 1197 1198 if (sdata->vif.type == NL80211_IFTYPE_AP) 1199 ps = &sdata->bss->ps; 1200 else if (ieee80211_vif_is_mesh(&sdata->vif)) 1201 ps = &sdata->u.mesh.ps; 1202 else 1203 return; 1204 1205 clear_sta_flag(sta, WLAN_STA_SP); 1206 1207 BUILD_BUG_ON(BITS_TO_LONGS(IEEE80211_NUM_TIDS) > 1); 1208 sta->driver_buffered_tids = 0; 1209 sta->txq_buffered_tids = 0; 1210 1211 if (!ieee80211_hw_check(&local->hw, AP_LINK_PS)) 1212 drv_sta_notify(local, sdata, STA_NOTIFY_AWAKE, &sta->sta); 1213 1214 if (sta->sta.txq[0]) { 1215 for (i = 0; i < ARRAY_SIZE(sta->sta.txq); i++) { 1216 if (!txq_has_queue(sta->sta.txq[i])) 1217 continue; 1218 1219 drv_wake_tx_queue(local, to_txq_info(sta->sta.txq[i])); 1220 } 1221 } 1222 1223 skb_queue_head_init(&pending); 1224 1225 /* sync with ieee80211_tx_h_unicast_ps_buf */ 1226 spin_lock(&sta->ps_lock); 1227 /* Send all buffered frames to the station */ 1228 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 1229 int count = skb_queue_len(&pending), tmp; 1230 1231 spin_lock_irqsave(&sta->tx_filtered[ac].lock, flags); 1232 skb_queue_splice_tail_init(&sta->tx_filtered[ac], &pending); 1233 spin_unlock_irqrestore(&sta->tx_filtered[ac].lock, flags); 1234 tmp = skb_queue_len(&pending); 1235 filtered += tmp - count; 1236 count = tmp; 1237 1238 spin_lock_irqsave(&sta->ps_tx_buf[ac].lock, flags); 1239 skb_queue_splice_tail_init(&sta->ps_tx_buf[ac], &pending); 1240 spin_unlock_irqrestore(&sta->ps_tx_buf[ac].lock, flags); 1241 tmp = skb_queue_len(&pending); 1242 buffered += tmp - count; 1243 } 1244 1245 ieee80211_add_pending_skbs(local, &pending); 1246 1247 /* now we're no longer in the deliver code */ 1248 clear_sta_flag(sta, WLAN_STA_PS_DELIVER); 1249 1250 /* The station might have polled and then woken up before we responded, 1251 * so clear these flags now to avoid them sticking around. 1252 */ 1253 clear_sta_flag(sta, WLAN_STA_PSPOLL); 1254 clear_sta_flag(sta, WLAN_STA_UAPSD); 1255 spin_unlock(&sta->ps_lock); 1256 1257 atomic_dec(&ps->num_sta_ps); 1258 1259 /* This station just woke up and isn't aware of our SMPS state */ 1260 if (!ieee80211_vif_is_mesh(&sdata->vif) && 1261 !ieee80211_smps_is_restrictive(sta->known_smps_mode, 1262 sdata->smps_mode) && 1263 sta->known_smps_mode != sdata->bss->req_smps && 1264 sta_info_tx_streams(sta) != 1) { 1265 ht_dbg(sdata, 1266 "%pM just woke up and MIMO capable - update SMPS\n", 1267 sta->sta.addr); 1268 ieee80211_send_smps_action(sdata, sdata->bss->req_smps, 1269 sta->sta.addr, 1270 sdata->vif.bss_conf.bssid); 1271 } 1272 1273 local->total_ps_buffered -= buffered; 1274 1275 sta_info_recalc_tim(sta); 1276 1277 ps_dbg(sdata, 1278 "STA %pM aid %d sending %d filtered/%d PS frames since STA woke up\n", 1279 sta->sta.addr, sta->sta.aid, filtered, buffered); 1280 1281 ieee80211_check_fast_xmit(sta); 1282 } 1283 1284 static void ieee80211_send_null_response(struct sta_info *sta, int tid, 1285 enum ieee80211_frame_release_type reason, 1286 bool call_driver, bool more_data) 1287 { 1288 struct ieee80211_sub_if_data *sdata = sta->sdata; 1289 struct ieee80211_local *local = sdata->local; 1290 struct ieee80211_qos_hdr *nullfunc; 1291 struct sk_buff *skb; 1292 int size = sizeof(*nullfunc); 1293 __le16 fc; 1294 bool qos = sta->sta.wme; 1295 struct ieee80211_tx_info *info; 1296 struct ieee80211_chanctx_conf *chanctx_conf; 1297 1298 if (qos) { 1299 fc = cpu_to_le16(IEEE80211_FTYPE_DATA | 1300 IEEE80211_STYPE_QOS_NULLFUNC | 1301 IEEE80211_FCTL_FROMDS); 1302 } else { 1303 size -= 2; 1304 fc = cpu_to_le16(IEEE80211_FTYPE_DATA | 1305 IEEE80211_STYPE_NULLFUNC | 1306 IEEE80211_FCTL_FROMDS); 1307 } 1308 1309 skb = dev_alloc_skb(local->hw.extra_tx_headroom + size); 1310 if (!skb) 1311 return; 1312 1313 skb_reserve(skb, local->hw.extra_tx_headroom); 1314 1315 nullfunc = skb_put(skb, size); 1316 nullfunc->frame_control = fc; 1317 nullfunc->duration_id = 0; 1318 memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN); 1319 memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN); 1320 memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN); 1321 nullfunc->seq_ctrl = 0; 1322 1323 skb->priority = tid; 1324 skb_set_queue_mapping(skb, ieee802_1d_to_ac[tid]); 1325 if (qos) { 1326 nullfunc->qos_ctrl = cpu_to_le16(tid); 1327 1328 if (reason == IEEE80211_FRAME_RELEASE_UAPSD) { 1329 nullfunc->qos_ctrl |= 1330 cpu_to_le16(IEEE80211_QOS_CTL_EOSP); 1331 if (more_data) 1332 nullfunc->frame_control |= 1333 cpu_to_le16(IEEE80211_FCTL_MOREDATA); 1334 } 1335 } 1336 1337 info = IEEE80211_SKB_CB(skb); 1338 1339 /* 1340 * Tell TX path to send this frame even though the 1341 * STA may still remain is PS mode after this frame 1342 * exchange. Also set EOSP to indicate this packet 1343 * ends the poll/service period. 1344 */ 1345 info->flags |= IEEE80211_TX_CTL_NO_PS_BUFFER | 1346 IEEE80211_TX_STATUS_EOSP | 1347 IEEE80211_TX_CTL_REQ_TX_STATUS; 1348 1349 info->control.flags |= IEEE80211_TX_CTRL_PS_RESPONSE; 1350 1351 if (call_driver) 1352 drv_allow_buffered_frames(local, sta, BIT(tid), 1, 1353 reason, false); 1354 1355 skb->dev = sdata->dev; 1356 1357 rcu_read_lock(); 1358 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 1359 if (WARN_ON(!chanctx_conf)) { 1360 rcu_read_unlock(); 1361 kfree_skb(skb); 1362 return; 1363 } 1364 1365 info->band = chanctx_conf->def.chan->band; 1366 ieee80211_xmit(sdata, sta, skb); 1367 rcu_read_unlock(); 1368 } 1369 1370 static int find_highest_prio_tid(unsigned long tids) 1371 { 1372 /* lower 3 TIDs aren't ordered perfectly */ 1373 if (tids & 0xF8) 1374 return fls(tids) - 1; 1375 /* TID 0 is BE just like TID 3 */ 1376 if (tids & BIT(0)) 1377 return 0; 1378 return fls(tids) - 1; 1379 } 1380 1381 /* Indicates if the MORE_DATA bit should be set in the last 1382 * frame obtained by ieee80211_sta_ps_get_frames. 1383 * Note that driver_release_tids is relevant only if 1384 * reason = IEEE80211_FRAME_RELEASE_PSPOLL 1385 */ 1386 static bool 1387 ieee80211_sta_ps_more_data(struct sta_info *sta, u8 ignored_acs, 1388 enum ieee80211_frame_release_type reason, 1389 unsigned long driver_release_tids) 1390 { 1391 int ac; 1392 1393 /* If the driver has data on more than one TID then 1394 * certainly there's more data if we release just a 1395 * single frame now (from a single TID). This will 1396 * only happen for PS-Poll. 1397 */ 1398 if (reason == IEEE80211_FRAME_RELEASE_PSPOLL && 1399 hweight16(driver_release_tids) > 1) 1400 return true; 1401 1402 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 1403 if (ignored_acs & ieee80211_ac_to_qos_mask[ac]) 1404 continue; 1405 1406 if (!skb_queue_empty(&sta->tx_filtered[ac]) || 1407 !skb_queue_empty(&sta->ps_tx_buf[ac])) 1408 return true; 1409 } 1410 1411 return false; 1412 } 1413 1414 static void 1415 ieee80211_sta_ps_get_frames(struct sta_info *sta, int n_frames, u8 ignored_acs, 1416 enum ieee80211_frame_release_type reason, 1417 struct sk_buff_head *frames, 1418 unsigned long *driver_release_tids) 1419 { 1420 struct ieee80211_sub_if_data *sdata = sta->sdata; 1421 struct ieee80211_local *local = sdata->local; 1422 int ac; 1423 1424 /* Get response frame(s) and more data bit for the last one. */ 1425 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 1426 unsigned long tids; 1427 1428 if (ignored_acs & ieee80211_ac_to_qos_mask[ac]) 1429 continue; 1430 1431 tids = ieee80211_tids_for_ac(ac); 1432 1433 /* if we already have frames from software, then we can't also 1434 * release from hardware queues 1435 */ 1436 if (skb_queue_empty(frames)) { 1437 *driver_release_tids |= 1438 sta->driver_buffered_tids & tids; 1439 *driver_release_tids |= sta->txq_buffered_tids & tids; 1440 } 1441 1442 if (!*driver_release_tids) { 1443 struct sk_buff *skb; 1444 1445 while (n_frames > 0) { 1446 skb = skb_dequeue(&sta->tx_filtered[ac]); 1447 if (!skb) { 1448 skb = skb_dequeue( 1449 &sta->ps_tx_buf[ac]); 1450 if (skb) 1451 local->total_ps_buffered--; 1452 } 1453 if (!skb) 1454 break; 1455 n_frames--; 1456 __skb_queue_tail(frames, skb); 1457 } 1458 } 1459 1460 /* If we have more frames buffered on this AC, then abort the 1461 * loop since we can't send more data from other ACs before 1462 * the buffered frames from this. 1463 */ 1464 if (!skb_queue_empty(&sta->tx_filtered[ac]) || 1465 !skb_queue_empty(&sta->ps_tx_buf[ac])) 1466 break; 1467 } 1468 } 1469 1470 static void 1471 ieee80211_sta_ps_deliver_response(struct sta_info *sta, 1472 int n_frames, u8 ignored_acs, 1473 enum ieee80211_frame_release_type reason) 1474 { 1475 struct ieee80211_sub_if_data *sdata = sta->sdata; 1476 struct ieee80211_local *local = sdata->local; 1477 unsigned long driver_release_tids = 0; 1478 struct sk_buff_head frames; 1479 bool more_data; 1480 1481 /* Service or PS-Poll period starts */ 1482 set_sta_flag(sta, WLAN_STA_SP); 1483 1484 __skb_queue_head_init(&frames); 1485 1486 ieee80211_sta_ps_get_frames(sta, n_frames, ignored_acs, reason, 1487 &frames, &driver_release_tids); 1488 1489 more_data = ieee80211_sta_ps_more_data(sta, ignored_acs, reason, driver_release_tids); 1490 1491 if (driver_release_tids && reason == IEEE80211_FRAME_RELEASE_PSPOLL) 1492 driver_release_tids = 1493 BIT(find_highest_prio_tid(driver_release_tids)); 1494 1495 if (skb_queue_empty(&frames) && !driver_release_tids) { 1496 int tid, ac; 1497 1498 /* 1499 * For PS-Poll, this can only happen due to a race condition 1500 * when we set the TIM bit and the station notices it, but 1501 * before it can poll for the frame we expire it. 1502 * 1503 * For uAPSD, this is said in the standard (11.2.1.5 h): 1504 * At each unscheduled SP for a non-AP STA, the AP shall 1505 * attempt to transmit at least one MSDU or MMPDU, but no 1506 * more than the value specified in the Max SP Length field 1507 * in the QoS Capability element from delivery-enabled ACs, 1508 * that are destined for the non-AP STA. 1509 * 1510 * Since we have no other MSDU/MMPDU, transmit a QoS null frame. 1511 */ 1512 1513 /* This will evaluate to 1, 3, 5 or 7. */ 1514 for (ac = IEEE80211_AC_VO; ac < IEEE80211_NUM_ACS; ac++) 1515 if (!(ignored_acs & ieee80211_ac_to_qos_mask[ac])) 1516 break; 1517 tid = 7 - 2 * ac; 1518 1519 ieee80211_send_null_response(sta, tid, reason, true, false); 1520 } else if (!driver_release_tids) { 1521 struct sk_buff_head pending; 1522 struct sk_buff *skb; 1523 int num = 0; 1524 u16 tids = 0; 1525 bool need_null = false; 1526 1527 skb_queue_head_init(&pending); 1528 1529 while ((skb = __skb_dequeue(&frames))) { 1530 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 1531 struct ieee80211_hdr *hdr = (void *) skb->data; 1532 u8 *qoshdr = NULL; 1533 1534 num++; 1535 1536 /* 1537 * Tell TX path to send this frame even though the 1538 * STA may still remain is PS mode after this frame 1539 * exchange. 1540 */ 1541 info->flags |= IEEE80211_TX_CTL_NO_PS_BUFFER; 1542 info->control.flags |= IEEE80211_TX_CTRL_PS_RESPONSE; 1543 1544 /* 1545 * Use MoreData flag to indicate whether there are 1546 * more buffered frames for this STA 1547 */ 1548 if (more_data || !skb_queue_empty(&frames)) 1549 hdr->frame_control |= 1550 cpu_to_le16(IEEE80211_FCTL_MOREDATA); 1551 else 1552 hdr->frame_control &= 1553 cpu_to_le16(~IEEE80211_FCTL_MOREDATA); 1554 1555 if (ieee80211_is_data_qos(hdr->frame_control) || 1556 ieee80211_is_qos_nullfunc(hdr->frame_control)) 1557 qoshdr = ieee80211_get_qos_ctl(hdr); 1558 1559 tids |= BIT(skb->priority); 1560 1561 __skb_queue_tail(&pending, skb); 1562 1563 /* end service period after last frame or add one */ 1564 if (!skb_queue_empty(&frames)) 1565 continue; 1566 1567 if (reason != IEEE80211_FRAME_RELEASE_UAPSD) { 1568 /* for PS-Poll, there's only one frame */ 1569 info->flags |= IEEE80211_TX_STATUS_EOSP | 1570 IEEE80211_TX_CTL_REQ_TX_STATUS; 1571 break; 1572 } 1573 1574 /* For uAPSD, things are a bit more complicated. If the 1575 * last frame has a QoS header (i.e. is a QoS-data or 1576 * QoS-nulldata frame) then just set the EOSP bit there 1577 * and be done. 1578 * If the frame doesn't have a QoS header (which means 1579 * it should be a bufferable MMPDU) then we can't set 1580 * the EOSP bit in the QoS header; add a QoS-nulldata 1581 * frame to the list to send it after the MMPDU. 1582 * 1583 * Note that this code is only in the mac80211-release 1584 * code path, we assume that the driver will not buffer 1585 * anything but QoS-data frames, or if it does, will 1586 * create the QoS-nulldata frame by itself if needed. 1587 * 1588 * Cf. 802.11-2012 10.2.1.10 (c). 1589 */ 1590 if (qoshdr) { 1591 *qoshdr |= IEEE80211_QOS_CTL_EOSP; 1592 1593 info->flags |= IEEE80211_TX_STATUS_EOSP | 1594 IEEE80211_TX_CTL_REQ_TX_STATUS; 1595 } else { 1596 /* The standard isn't completely clear on this 1597 * as it says the more-data bit should be set 1598 * if there are more BUs. The QoS-Null frame 1599 * we're about to send isn't buffered yet, we 1600 * only create it below, but let's pretend it 1601 * was buffered just in case some clients only 1602 * expect more-data=0 when eosp=1. 1603 */ 1604 hdr->frame_control |= 1605 cpu_to_le16(IEEE80211_FCTL_MOREDATA); 1606 need_null = true; 1607 num++; 1608 } 1609 break; 1610 } 1611 1612 drv_allow_buffered_frames(local, sta, tids, num, 1613 reason, more_data); 1614 1615 ieee80211_add_pending_skbs(local, &pending); 1616 1617 if (need_null) 1618 ieee80211_send_null_response( 1619 sta, find_highest_prio_tid(tids), 1620 reason, false, false); 1621 1622 sta_info_recalc_tim(sta); 1623 } else { 1624 int tid; 1625 1626 /* 1627 * We need to release a frame that is buffered somewhere in the 1628 * driver ... it'll have to handle that. 1629 * Note that the driver also has to check the number of frames 1630 * on the TIDs we're releasing from - if there are more than 1631 * n_frames it has to set the more-data bit (if we didn't ask 1632 * it to set it anyway due to other buffered frames); if there 1633 * are fewer than n_frames it has to make sure to adjust that 1634 * to allow the service period to end properly. 1635 */ 1636 drv_release_buffered_frames(local, sta, driver_release_tids, 1637 n_frames, reason, more_data); 1638 1639 /* 1640 * Note that we don't recalculate the TIM bit here as it would 1641 * most likely have no effect at all unless the driver told us 1642 * that the TID(s) became empty before returning here from the 1643 * release function. 1644 * Either way, however, when the driver tells us that the TID(s) 1645 * became empty or we find that a txq became empty, we'll do the 1646 * TIM recalculation. 1647 */ 1648 1649 if (!sta->sta.txq[0]) 1650 return; 1651 1652 for (tid = 0; tid < ARRAY_SIZE(sta->sta.txq); tid++) { 1653 if (!(driver_release_tids & BIT(tid)) || 1654 txq_has_queue(sta->sta.txq[tid])) 1655 continue; 1656 1657 sta_info_recalc_tim(sta); 1658 break; 1659 } 1660 } 1661 } 1662 1663 void ieee80211_sta_ps_deliver_poll_response(struct sta_info *sta) 1664 { 1665 u8 ignore_for_response = sta->sta.uapsd_queues; 1666 1667 /* 1668 * If all ACs are delivery-enabled then we should reply 1669 * from any of them, if only some are enabled we reply 1670 * only from the non-enabled ones. 1671 */ 1672 if (ignore_for_response == BIT(IEEE80211_NUM_ACS) - 1) 1673 ignore_for_response = 0; 1674 1675 ieee80211_sta_ps_deliver_response(sta, 1, ignore_for_response, 1676 IEEE80211_FRAME_RELEASE_PSPOLL); 1677 } 1678 1679 void ieee80211_sta_ps_deliver_uapsd(struct sta_info *sta) 1680 { 1681 int n_frames = sta->sta.max_sp; 1682 u8 delivery_enabled = sta->sta.uapsd_queues; 1683 1684 /* 1685 * If we ever grow support for TSPEC this might happen if 1686 * the TSPEC update from hostapd comes in between a trigger 1687 * frame setting WLAN_STA_UAPSD in the RX path and this 1688 * actually getting called. 1689 */ 1690 if (!delivery_enabled) 1691 return; 1692 1693 switch (sta->sta.max_sp) { 1694 case 1: 1695 n_frames = 2; 1696 break; 1697 case 2: 1698 n_frames = 4; 1699 break; 1700 case 3: 1701 n_frames = 6; 1702 break; 1703 case 0: 1704 /* XXX: what is a good value? */ 1705 n_frames = 128; 1706 break; 1707 } 1708 1709 ieee80211_sta_ps_deliver_response(sta, n_frames, ~delivery_enabled, 1710 IEEE80211_FRAME_RELEASE_UAPSD); 1711 } 1712 1713 void ieee80211_sta_block_awake(struct ieee80211_hw *hw, 1714 struct ieee80211_sta *pubsta, bool block) 1715 { 1716 struct sta_info *sta = container_of(pubsta, struct sta_info, sta); 1717 1718 trace_api_sta_block_awake(sta->local, pubsta, block); 1719 1720 if (block) { 1721 set_sta_flag(sta, WLAN_STA_PS_DRIVER); 1722 ieee80211_clear_fast_xmit(sta); 1723 return; 1724 } 1725 1726 if (!test_sta_flag(sta, WLAN_STA_PS_DRIVER)) 1727 return; 1728 1729 if (!test_sta_flag(sta, WLAN_STA_PS_STA)) { 1730 set_sta_flag(sta, WLAN_STA_PS_DELIVER); 1731 clear_sta_flag(sta, WLAN_STA_PS_DRIVER); 1732 ieee80211_queue_work(hw, &sta->drv_deliver_wk); 1733 } else if (test_sta_flag(sta, WLAN_STA_PSPOLL) || 1734 test_sta_flag(sta, WLAN_STA_UAPSD)) { 1735 /* must be asleep in this case */ 1736 clear_sta_flag(sta, WLAN_STA_PS_DRIVER); 1737 ieee80211_queue_work(hw, &sta->drv_deliver_wk); 1738 } else { 1739 clear_sta_flag(sta, WLAN_STA_PS_DRIVER); 1740 ieee80211_check_fast_xmit(sta); 1741 } 1742 } 1743 EXPORT_SYMBOL(ieee80211_sta_block_awake); 1744 1745 void ieee80211_sta_eosp(struct ieee80211_sta *pubsta) 1746 { 1747 struct sta_info *sta = container_of(pubsta, struct sta_info, sta); 1748 struct ieee80211_local *local = sta->local; 1749 1750 trace_api_eosp(local, pubsta); 1751 1752 clear_sta_flag(sta, WLAN_STA_SP); 1753 } 1754 EXPORT_SYMBOL(ieee80211_sta_eosp); 1755 1756 void ieee80211_send_eosp_nullfunc(struct ieee80211_sta *pubsta, int tid) 1757 { 1758 struct sta_info *sta = container_of(pubsta, struct sta_info, sta); 1759 enum ieee80211_frame_release_type reason; 1760 bool more_data; 1761 1762 trace_api_send_eosp_nullfunc(sta->local, pubsta, tid); 1763 1764 reason = IEEE80211_FRAME_RELEASE_UAPSD; 1765 more_data = ieee80211_sta_ps_more_data(sta, ~sta->sta.uapsd_queues, 1766 reason, 0); 1767 1768 ieee80211_send_null_response(sta, tid, reason, false, more_data); 1769 } 1770 EXPORT_SYMBOL(ieee80211_send_eosp_nullfunc); 1771 1772 void ieee80211_sta_set_buffered(struct ieee80211_sta *pubsta, 1773 u8 tid, bool buffered) 1774 { 1775 struct sta_info *sta = container_of(pubsta, struct sta_info, sta); 1776 1777 if (WARN_ON(tid >= IEEE80211_NUM_TIDS)) 1778 return; 1779 1780 trace_api_sta_set_buffered(sta->local, pubsta, tid, buffered); 1781 1782 if (buffered) 1783 set_bit(tid, &sta->driver_buffered_tids); 1784 else 1785 clear_bit(tid, &sta->driver_buffered_tids); 1786 1787 sta_info_recalc_tim(sta); 1788 } 1789 EXPORT_SYMBOL(ieee80211_sta_set_buffered); 1790 1791 static void 1792 ieee80211_recalc_p2p_go_ps_allowed(struct ieee80211_sub_if_data *sdata) 1793 { 1794 struct ieee80211_local *local = sdata->local; 1795 bool allow_p2p_go_ps = sdata->vif.p2p; 1796 struct sta_info *sta; 1797 1798 rcu_read_lock(); 1799 list_for_each_entry_rcu(sta, &local->sta_list, list) { 1800 if (sdata != sta->sdata || 1801 !test_sta_flag(sta, WLAN_STA_ASSOC)) 1802 continue; 1803 if (!sta->sta.support_p2p_ps) { 1804 allow_p2p_go_ps = false; 1805 break; 1806 } 1807 } 1808 rcu_read_unlock(); 1809 1810 if (allow_p2p_go_ps != sdata->vif.bss_conf.allow_p2p_go_ps) { 1811 sdata->vif.bss_conf.allow_p2p_go_ps = allow_p2p_go_ps; 1812 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_P2P_PS); 1813 } 1814 } 1815 1816 int sta_info_move_state(struct sta_info *sta, 1817 enum ieee80211_sta_state new_state) 1818 { 1819 might_sleep(); 1820 1821 if (sta->sta_state == new_state) 1822 return 0; 1823 1824 /* check allowed transitions first */ 1825 1826 switch (new_state) { 1827 case IEEE80211_STA_NONE: 1828 if (sta->sta_state != IEEE80211_STA_AUTH) 1829 return -EINVAL; 1830 break; 1831 case IEEE80211_STA_AUTH: 1832 if (sta->sta_state != IEEE80211_STA_NONE && 1833 sta->sta_state != IEEE80211_STA_ASSOC) 1834 return -EINVAL; 1835 break; 1836 case IEEE80211_STA_ASSOC: 1837 if (sta->sta_state != IEEE80211_STA_AUTH && 1838 sta->sta_state != IEEE80211_STA_AUTHORIZED) 1839 return -EINVAL; 1840 break; 1841 case IEEE80211_STA_AUTHORIZED: 1842 if (sta->sta_state != IEEE80211_STA_ASSOC) 1843 return -EINVAL; 1844 break; 1845 default: 1846 WARN(1, "invalid state %d", new_state); 1847 return -EINVAL; 1848 } 1849 1850 sta_dbg(sta->sdata, "moving STA %pM to state %d\n", 1851 sta->sta.addr, new_state); 1852 1853 /* 1854 * notify the driver before the actual changes so it can 1855 * fail the transition 1856 */ 1857 if (test_sta_flag(sta, WLAN_STA_INSERTED)) { 1858 int err = drv_sta_state(sta->local, sta->sdata, sta, 1859 sta->sta_state, new_state); 1860 if (err) 1861 return err; 1862 } 1863 1864 /* reflect the change in all state variables */ 1865 1866 switch (new_state) { 1867 case IEEE80211_STA_NONE: 1868 if (sta->sta_state == IEEE80211_STA_AUTH) 1869 clear_bit(WLAN_STA_AUTH, &sta->_flags); 1870 break; 1871 case IEEE80211_STA_AUTH: 1872 if (sta->sta_state == IEEE80211_STA_NONE) { 1873 set_bit(WLAN_STA_AUTH, &sta->_flags); 1874 } else if (sta->sta_state == IEEE80211_STA_ASSOC) { 1875 clear_bit(WLAN_STA_ASSOC, &sta->_flags); 1876 ieee80211_recalc_min_chandef(sta->sdata); 1877 if (!sta->sta.support_p2p_ps) 1878 ieee80211_recalc_p2p_go_ps_allowed(sta->sdata); 1879 } 1880 break; 1881 case IEEE80211_STA_ASSOC: 1882 if (sta->sta_state == IEEE80211_STA_AUTH) { 1883 set_bit(WLAN_STA_ASSOC, &sta->_flags); 1884 ieee80211_recalc_min_chandef(sta->sdata); 1885 if (!sta->sta.support_p2p_ps) 1886 ieee80211_recalc_p2p_go_ps_allowed(sta->sdata); 1887 } else if (sta->sta_state == IEEE80211_STA_AUTHORIZED) { 1888 ieee80211_vif_dec_num_mcast(sta->sdata); 1889 clear_bit(WLAN_STA_AUTHORIZED, &sta->_flags); 1890 ieee80211_clear_fast_xmit(sta); 1891 ieee80211_clear_fast_rx(sta); 1892 } 1893 break; 1894 case IEEE80211_STA_AUTHORIZED: 1895 if (sta->sta_state == IEEE80211_STA_ASSOC) { 1896 ieee80211_vif_inc_num_mcast(sta->sdata); 1897 set_bit(WLAN_STA_AUTHORIZED, &sta->_flags); 1898 ieee80211_check_fast_xmit(sta); 1899 ieee80211_check_fast_rx(sta); 1900 } 1901 break; 1902 default: 1903 break; 1904 } 1905 1906 sta->sta_state = new_state; 1907 1908 return 0; 1909 } 1910 1911 u8 sta_info_tx_streams(struct sta_info *sta) 1912 { 1913 struct ieee80211_sta_ht_cap *ht_cap = &sta->sta.ht_cap; 1914 u8 rx_streams; 1915 1916 if (!sta->sta.ht_cap.ht_supported) 1917 return 1; 1918 1919 if (sta->sta.vht_cap.vht_supported) { 1920 int i; 1921 u16 tx_mcs_map = 1922 le16_to_cpu(sta->sta.vht_cap.vht_mcs.tx_mcs_map); 1923 1924 for (i = 7; i >= 0; i--) 1925 if ((tx_mcs_map & (0x3 << (i * 2))) != 1926 IEEE80211_VHT_MCS_NOT_SUPPORTED) 1927 return i + 1; 1928 } 1929 1930 if (ht_cap->mcs.rx_mask[3]) 1931 rx_streams = 4; 1932 else if (ht_cap->mcs.rx_mask[2]) 1933 rx_streams = 3; 1934 else if (ht_cap->mcs.rx_mask[1]) 1935 rx_streams = 2; 1936 else 1937 rx_streams = 1; 1938 1939 if (!(ht_cap->mcs.tx_params & IEEE80211_HT_MCS_TX_RX_DIFF)) 1940 return rx_streams; 1941 1942 return ((ht_cap->mcs.tx_params & IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK) 1943 >> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT) + 1; 1944 } 1945 1946 static struct ieee80211_sta_rx_stats * 1947 sta_get_last_rx_stats(struct sta_info *sta) 1948 { 1949 struct ieee80211_sta_rx_stats *stats = &sta->rx_stats; 1950 struct ieee80211_local *local = sta->local; 1951 int cpu; 1952 1953 if (!ieee80211_hw_check(&local->hw, USES_RSS)) 1954 return stats; 1955 1956 for_each_possible_cpu(cpu) { 1957 struct ieee80211_sta_rx_stats *cpustats; 1958 1959 cpustats = per_cpu_ptr(sta->pcpu_rx_stats, cpu); 1960 1961 if (time_after(cpustats->last_rx, stats->last_rx)) 1962 stats = cpustats; 1963 } 1964 1965 return stats; 1966 } 1967 1968 static void sta_stats_decode_rate(struct ieee80211_local *local, u16 rate, 1969 struct rate_info *rinfo) 1970 { 1971 rinfo->bw = STA_STATS_GET(BW, rate); 1972 1973 switch (STA_STATS_GET(TYPE, rate)) { 1974 case STA_STATS_RATE_TYPE_VHT: 1975 rinfo->flags = RATE_INFO_FLAGS_VHT_MCS; 1976 rinfo->mcs = STA_STATS_GET(VHT_MCS, rate); 1977 rinfo->nss = STA_STATS_GET(VHT_NSS, rate); 1978 if (STA_STATS_GET(SGI, rate)) 1979 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI; 1980 break; 1981 case STA_STATS_RATE_TYPE_HT: 1982 rinfo->flags = RATE_INFO_FLAGS_MCS; 1983 rinfo->mcs = STA_STATS_GET(HT_MCS, rate); 1984 if (STA_STATS_GET(SGI, rate)) 1985 rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI; 1986 break; 1987 case STA_STATS_RATE_TYPE_LEGACY: { 1988 struct ieee80211_supported_band *sband; 1989 u16 brate; 1990 unsigned int shift; 1991 int band = STA_STATS_GET(LEGACY_BAND, rate); 1992 int rate_idx = STA_STATS_GET(LEGACY_IDX, rate); 1993 1994 rinfo->flags = 0; 1995 sband = local->hw.wiphy->bands[band]; 1996 brate = sband->bitrates[rate_idx].bitrate; 1997 if (rinfo->bw == RATE_INFO_BW_5) 1998 shift = 2; 1999 else if (rinfo->bw == RATE_INFO_BW_10) 2000 shift = 1; 2001 else 2002 shift = 0; 2003 rinfo->legacy = DIV_ROUND_UP(brate, 1 << shift); 2004 break; 2005 } 2006 } 2007 } 2008 2009 static int sta_set_rate_info_rx(struct sta_info *sta, struct rate_info *rinfo) 2010 { 2011 u16 rate = ACCESS_ONCE(sta_get_last_rx_stats(sta)->last_rate); 2012 2013 if (rate == STA_STATS_RATE_INVALID) 2014 return -EINVAL; 2015 2016 sta_stats_decode_rate(sta->local, rate, rinfo); 2017 return 0; 2018 } 2019 2020 static void sta_set_tidstats(struct sta_info *sta, 2021 struct cfg80211_tid_stats *tidstats, 2022 int tid) 2023 { 2024 struct ieee80211_local *local = sta->local; 2025 2026 if (!(tidstats->filled & BIT(NL80211_TID_STATS_RX_MSDU))) { 2027 unsigned int start; 2028 2029 do { 2030 start = u64_stats_fetch_begin(&sta->rx_stats.syncp); 2031 tidstats->rx_msdu = sta->rx_stats.msdu[tid]; 2032 } while (u64_stats_fetch_retry(&sta->rx_stats.syncp, start)); 2033 2034 tidstats->filled |= BIT(NL80211_TID_STATS_RX_MSDU); 2035 } 2036 2037 if (!(tidstats->filled & BIT(NL80211_TID_STATS_TX_MSDU))) { 2038 tidstats->filled |= BIT(NL80211_TID_STATS_TX_MSDU); 2039 tidstats->tx_msdu = sta->tx_stats.msdu[tid]; 2040 } 2041 2042 if (!(tidstats->filled & BIT(NL80211_TID_STATS_TX_MSDU_RETRIES)) && 2043 ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS)) { 2044 tidstats->filled |= BIT(NL80211_TID_STATS_TX_MSDU_RETRIES); 2045 tidstats->tx_msdu_retries = sta->status_stats.msdu_retries[tid]; 2046 } 2047 2048 if (!(tidstats->filled & BIT(NL80211_TID_STATS_TX_MSDU_FAILED)) && 2049 ieee80211_hw_check(&local->hw, REPORTS_TX_ACK_STATUS)) { 2050 tidstats->filled |= BIT(NL80211_TID_STATS_TX_MSDU_FAILED); 2051 tidstats->tx_msdu_failed = sta->status_stats.msdu_failed[tid]; 2052 } 2053 } 2054 2055 static inline u64 sta_get_stats_bytes(struct ieee80211_sta_rx_stats *rxstats) 2056 { 2057 unsigned int start; 2058 u64 value; 2059 2060 do { 2061 start = u64_stats_fetch_begin(&rxstats->syncp); 2062 value = rxstats->bytes; 2063 } while (u64_stats_fetch_retry(&rxstats->syncp, start)); 2064 2065 return value; 2066 } 2067 2068 void sta_set_sinfo(struct sta_info *sta, struct station_info *sinfo) 2069 { 2070 struct ieee80211_sub_if_data *sdata = sta->sdata; 2071 struct ieee80211_local *local = sdata->local; 2072 u32 thr = 0; 2073 int i, ac, cpu; 2074 struct ieee80211_sta_rx_stats *last_rxstats; 2075 2076 last_rxstats = sta_get_last_rx_stats(sta); 2077 2078 sinfo->generation = sdata->local->sta_generation; 2079 2080 /* do before driver, so beacon filtering drivers have a 2081 * chance to e.g. just add the number of filtered beacons 2082 * (or just modify the value entirely, of course) 2083 */ 2084 if (sdata->vif.type == NL80211_IFTYPE_STATION) 2085 sinfo->rx_beacon = sdata->u.mgd.count_beacon_signal; 2086 2087 drv_sta_statistics(local, sdata, &sta->sta, sinfo); 2088 2089 sinfo->filled |= BIT(NL80211_STA_INFO_INACTIVE_TIME) | 2090 BIT(NL80211_STA_INFO_STA_FLAGS) | 2091 BIT(NL80211_STA_INFO_BSS_PARAM) | 2092 BIT(NL80211_STA_INFO_CONNECTED_TIME) | 2093 BIT(NL80211_STA_INFO_RX_DROP_MISC); 2094 2095 if (sdata->vif.type == NL80211_IFTYPE_STATION) { 2096 sinfo->beacon_loss_count = sdata->u.mgd.beacon_loss_count; 2097 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_LOSS); 2098 } 2099 2100 sinfo->connected_time = ktime_get_seconds() - sta->last_connected; 2101 sinfo->inactive_time = 2102 jiffies_to_msecs(jiffies - ieee80211_sta_last_active(sta)); 2103 2104 if (!(sinfo->filled & (BIT(NL80211_STA_INFO_TX_BYTES64) | 2105 BIT(NL80211_STA_INFO_TX_BYTES)))) { 2106 sinfo->tx_bytes = 0; 2107 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) 2108 sinfo->tx_bytes += sta->tx_stats.bytes[ac]; 2109 sinfo->filled |= BIT(NL80211_STA_INFO_TX_BYTES64); 2110 } 2111 2112 if (!(sinfo->filled & BIT(NL80211_STA_INFO_TX_PACKETS))) { 2113 sinfo->tx_packets = 0; 2114 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) 2115 sinfo->tx_packets += sta->tx_stats.packets[ac]; 2116 sinfo->filled |= BIT(NL80211_STA_INFO_TX_PACKETS); 2117 } 2118 2119 if (!(sinfo->filled & (BIT(NL80211_STA_INFO_RX_BYTES64) | 2120 BIT(NL80211_STA_INFO_RX_BYTES)))) { 2121 sinfo->rx_bytes += sta_get_stats_bytes(&sta->rx_stats); 2122 2123 if (sta->pcpu_rx_stats) { 2124 for_each_possible_cpu(cpu) { 2125 struct ieee80211_sta_rx_stats *cpurxs; 2126 2127 cpurxs = per_cpu_ptr(sta->pcpu_rx_stats, cpu); 2128 sinfo->rx_bytes += sta_get_stats_bytes(cpurxs); 2129 } 2130 } 2131 2132 sinfo->filled |= BIT(NL80211_STA_INFO_RX_BYTES64); 2133 } 2134 2135 if (!(sinfo->filled & BIT(NL80211_STA_INFO_RX_PACKETS))) { 2136 sinfo->rx_packets = sta->rx_stats.packets; 2137 if (sta->pcpu_rx_stats) { 2138 for_each_possible_cpu(cpu) { 2139 struct ieee80211_sta_rx_stats *cpurxs; 2140 2141 cpurxs = per_cpu_ptr(sta->pcpu_rx_stats, cpu); 2142 sinfo->rx_packets += cpurxs->packets; 2143 } 2144 } 2145 sinfo->filled |= BIT(NL80211_STA_INFO_RX_PACKETS); 2146 } 2147 2148 if (!(sinfo->filled & BIT(NL80211_STA_INFO_TX_RETRIES))) { 2149 sinfo->tx_retries = sta->status_stats.retry_count; 2150 sinfo->filled |= BIT(NL80211_STA_INFO_TX_RETRIES); 2151 } 2152 2153 if (!(sinfo->filled & BIT(NL80211_STA_INFO_TX_FAILED))) { 2154 sinfo->tx_failed = sta->status_stats.retry_failed; 2155 sinfo->filled |= BIT(NL80211_STA_INFO_TX_FAILED); 2156 } 2157 2158 sinfo->rx_dropped_misc = sta->rx_stats.dropped; 2159 if (sta->pcpu_rx_stats) { 2160 for_each_possible_cpu(cpu) { 2161 struct ieee80211_sta_rx_stats *cpurxs; 2162 2163 cpurxs = per_cpu_ptr(sta->pcpu_rx_stats, cpu); 2164 sinfo->rx_dropped_misc += cpurxs->dropped; 2165 } 2166 } 2167 2168 if (sdata->vif.type == NL80211_IFTYPE_STATION && 2169 !(sdata->vif.driver_flags & IEEE80211_VIF_BEACON_FILTER)) { 2170 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_RX) | 2171 BIT(NL80211_STA_INFO_BEACON_SIGNAL_AVG); 2172 sinfo->rx_beacon_signal_avg = ieee80211_ave_rssi(&sdata->vif); 2173 } 2174 2175 if (ieee80211_hw_check(&sta->local->hw, SIGNAL_DBM) || 2176 ieee80211_hw_check(&sta->local->hw, SIGNAL_UNSPEC)) { 2177 if (!(sinfo->filled & BIT(NL80211_STA_INFO_SIGNAL))) { 2178 sinfo->signal = (s8)last_rxstats->last_signal; 2179 sinfo->filled |= BIT(NL80211_STA_INFO_SIGNAL); 2180 } 2181 2182 if (!sta->pcpu_rx_stats && 2183 !(sinfo->filled & BIT(NL80211_STA_INFO_SIGNAL_AVG))) { 2184 sinfo->signal_avg = 2185 -ewma_signal_read(&sta->rx_stats_avg.signal); 2186 sinfo->filled |= BIT(NL80211_STA_INFO_SIGNAL_AVG); 2187 } 2188 } 2189 2190 /* for the average - if pcpu_rx_stats isn't set - rxstats must point to 2191 * the sta->rx_stats struct, so the check here is fine with and without 2192 * pcpu statistics 2193 */ 2194 if (last_rxstats->chains && 2195 !(sinfo->filled & (BIT(NL80211_STA_INFO_CHAIN_SIGNAL) | 2196 BIT(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)))) { 2197 sinfo->filled |= BIT(NL80211_STA_INFO_CHAIN_SIGNAL); 2198 if (!sta->pcpu_rx_stats) 2199 sinfo->filled |= BIT(NL80211_STA_INFO_CHAIN_SIGNAL_AVG); 2200 2201 sinfo->chains = last_rxstats->chains; 2202 2203 for (i = 0; i < ARRAY_SIZE(sinfo->chain_signal); i++) { 2204 sinfo->chain_signal[i] = 2205 last_rxstats->chain_signal_last[i]; 2206 sinfo->chain_signal_avg[i] = 2207 -ewma_signal_read(&sta->rx_stats_avg.chain_signal[i]); 2208 } 2209 } 2210 2211 if (!(sinfo->filled & BIT(NL80211_STA_INFO_TX_BITRATE))) { 2212 sta_set_rate_info_tx(sta, &sta->tx_stats.last_rate, 2213 &sinfo->txrate); 2214 sinfo->filled |= BIT(NL80211_STA_INFO_TX_BITRATE); 2215 } 2216 2217 if (!(sinfo->filled & BIT(NL80211_STA_INFO_RX_BITRATE))) { 2218 if (sta_set_rate_info_rx(sta, &sinfo->rxrate) == 0) 2219 sinfo->filled |= BIT(NL80211_STA_INFO_RX_BITRATE); 2220 } 2221 2222 sinfo->filled |= BIT(NL80211_STA_INFO_TID_STATS); 2223 for (i = 0; i < IEEE80211_NUM_TIDS + 1; i++) { 2224 struct cfg80211_tid_stats *tidstats = &sinfo->pertid[i]; 2225 2226 sta_set_tidstats(sta, tidstats, i); 2227 } 2228 2229 if (ieee80211_vif_is_mesh(&sdata->vif)) { 2230 #ifdef CONFIG_MAC80211_MESH 2231 sinfo->filled |= BIT(NL80211_STA_INFO_LLID) | 2232 BIT(NL80211_STA_INFO_PLID) | 2233 BIT(NL80211_STA_INFO_PLINK_STATE) | 2234 BIT(NL80211_STA_INFO_LOCAL_PM) | 2235 BIT(NL80211_STA_INFO_PEER_PM) | 2236 BIT(NL80211_STA_INFO_NONPEER_PM); 2237 2238 sinfo->llid = sta->mesh->llid; 2239 sinfo->plid = sta->mesh->plid; 2240 sinfo->plink_state = sta->mesh->plink_state; 2241 if (test_sta_flag(sta, WLAN_STA_TOFFSET_KNOWN)) { 2242 sinfo->filled |= BIT(NL80211_STA_INFO_T_OFFSET); 2243 sinfo->t_offset = sta->mesh->t_offset; 2244 } 2245 sinfo->local_pm = sta->mesh->local_pm; 2246 sinfo->peer_pm = sta->mesh->peer_pm; 2247 sinfo->nonpeer_pm = sta->mesh->nonpeer_pm; 2248 #endif 2249 } 2250 2251 sinfo->bss_param.flags = 0; 2252 if (sdata->vif.bss_conf.use_cts_prot) 2253 sinfo->bss_param.flags |= BSS_PARAM_FLAGS_CTS_PROT; 2254 if (sdata->vif.bss_conf.use_short_preamble) 2255 sinfo->bss_param.flags |= BSS_PARAM_FLAGS_SHORT_PREAMBLE; 2256 if (sdata->vif.bss_conf.use_short_slot) 2257 sinfo->bss_param.flags |= BSS_PARAM_FLAGS_SHORT_SLOT_TIME; 2258 sinfo->bss_param.dtim_period = sdata->vif.bss_conf.dtim_period; 2259 sinfo->bss_param.beacon_interval = sdata->vif.bss_conf.beacon_int; 2260 2261 sinfo->sta_flags.set = 0; 2262 sinfo->sta_flags.mask = BIT(NL80211_STA_FLAG_AUTHORIZED) | 2263 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) | 2264 BIT(NL80211_STA_FLAG_WME) | 2265 BIT(NL80211_STA_FLAG_MFP) | 2266 BIT(NL80211_STA_FLAG_AUTHENTICATED) | 2267 BIT(NL80211_STA_FLAG_ASSOCIATED) | 2268 BIT(NL80211_STA_FLAG_TDLS_PEER); 2269 if (test_sta_flag(sta, WLAN_STA_AUTHORIZED)) 2270 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_AUTHORIZED); 2271 if (test_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE)) 2272 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE); 2273 if (sta->sta.wme) 2274 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_WME); 2275 if (test_sta_flag(sta, WLAN_STA_MFP)) 2276 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_MFP); 2277 if (test_sta_flag(sta, WLAN_STA_AUTH)) 2278 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_AUTHENTICATED); 2279 if (test_sta_flag(sta, WLAN_STA_ASSOC)) 2280 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_ASSOCIATED); 2281 if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) 2282 sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_TDLS_PEER); 2283 2284 thr = sta_get_expected_throughput(sta); 2285 2286 if (thr != 0) { 2287 sinfo->filled |= BIT(NL80211_STA_INFO_EXPECTED_THROUGHPUT); 2288 sinfo->expected_throughput = thr; 2289 } 2290 } 2291 2292 u32 sta_get_expected_throughput(struct sta_info *sta) 2293 { 2294 struct ieee80211_sub_if_data *sdata = sta->sdata; 2295 struct ieee80211_local *local = sdata->local; 2296 struct rate_control_ref *ref = NULL; 2297 u32 thr = 0; 2298 2299 if (test_sta_flag(sta, WLAN_STA_RATE_CONTROL)) 2300 ref = local->rate_ctrl; 2301 2302 /* check if the driver has a SW RC implementation */ 2303 if (ref && ref->ops->get_expected_throughput) 2304 thr = ref->ops->get_expected_throughput(sta->rate_ctrl_priv); 2305 else 2306 thr = drv_get_expected_throughput(local, sta); 2307 2308 return thr; 2309 } 2310 2311 unsigned long ieee80211_sta_last_active(struct sta_info *sta) 2312 { 2313 struct ieee80211_sta_rx_stats *stats = sta_get_last_rx_stats(sta); 2314 2315 if (time_after(stats->last_rx, sta->status_stats.last_ack)) 2316 return stats->last_rx; 2317 return sta->status_stats.last_ack; 2318 } 2319 2320 static void sta_update_codel_params(struct sta_info *sta, u32 thr) 2321 { 2322 if (!sta->sdata->local->ops->wake_tx_queue) 2323 return; 2324 2325 if (thr && thr < STA_SLOW_THRESHOLD * sta->local->num_sta) { 2326 sta->cparams.target = MS2TIME(50); 2327 sta->cparams.interval = MS2TIME(300); 2328 sta->cparams.ecn = false; 2329 } else { 2330 sta->cparams.target = MS2TIME(20); 2331 sta->cparams.interval = MS2TIME(100); 2332 sta->cparams.ecn = true; 2333 } 2334 } 2335 2336 void ieee80211_sta_set_expected_throughput(struct ieee80211_sta *pubsta, 2337 u32 thr) 2338 { 2339 struct sta_info *sta = container_of(pubsta, struct sta_info, sta); 2340 2341 sta_update_codel_params(sta, thr); 2342 } 2343