1 /* 2 * Copyright 2002-2005, Instant802 Networks, Inc. 3 * Copyright 2005-2006, Devicescape Software, Inc. 4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> 5 * Copyright 2007 Johannes Berg <johannes@sipsolutions.net> 6 * 7 * This program is free software; you can redistribute it and/or modify 8 * it under the terms of the GNU General Public License version 2 as 9 * published by the Free Software Foundation. 10 * 11 * utilities for mac80211 12 */ 13 14 #include <net/mac80211.h> 15 #include <linux/netdevice.h> 16 #include <linux/export.h> 17 #include <linux/types.h> 18 #include <linux/slab.h> 19 #include <linux/skbuff.h> 20 #include <linux/etherdevice.h> 21 #include <linux/if_arp.h> 22 #include <linux/bitmap.h> 23 #include <linux/crc32.h> 24 #include <net/net_namespace.h> 25 #include <net/cfg80211.h> 26 #include <net/rtnetlink.h> 27 28 #include "ieee80211_i.h" 29 #include "driver-ops.h" 30 #include "rate.h" 31 #include "mesh.h" 32 #include "wme.h" 33 #include "led.h" 34 #include "wep.h" 35 36 /* privid for wiphys to determine whether they belong to us or not */ 37 const void *const mac80211_wiphy_privid = &mac80211_wiphy_privid; 38 39 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy) 40 { 41 struct ieee80211_local *local; 42 BUG_ON(!wiphy); 43 44 local = wiphy_priv(wiphy); 45 return &local->hw; 46 } 47 EXPORT_SYMBOL(wiphy_to_ieee80211_hw); 48 49 u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len, 50 enum nl80211_iftype type) 51 { 52 __le16 fc = hdr->frame_control; 53 54 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */ 55 if (len < 16) 56 return NULL; 57 58 if (ieee80211_is_data(fc)) { 59 if (len < 24) /* drop incorrect hdr len (data) */ 60 return NULL; 61 62 if (ieee80211_has_a4(fc)) 63 return NULL; 64 if (ieee80211_has_tods(fc)) 65 return hdr->addr1; 66 if (ieee80211_has_fromds(fc)) 67 return hdr->addr2; 68 69 return hdr->addr3; 70 } 71 72 if (ieee80211_is_mgmt(fc)) { 73 if (len < 24) /* drop incorrect hdr len (mgmt) */ 74 return NULL; 75 return hdr->addr3; 76 } 77 78 if (ieee80211_is_ctl(fc)) { 79 if (ieee80211_is_pspoll(fc)) 80 return hdr->addr1; 81 82 if (ieee80211_is_back_req(fc)) { 83 switch (type) { 84 case NL80211_IFTYPE_STATION: 85 return hdr->addr2; 86 case NL80211_IFTYPE_AP: 87 case NL80211_IFTYPE_AP_VLAN: 88 return hdr->addr1; 89 default: 90 break; /* fall through to the return */ 91 } 92 } 93 } 94 95 return NULL; 96 } 97 98 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx) 99 { 100 struct sk_buff *skb; 101 struct ieee80211_hdr *hdr; 102 103 skb_queue_walk(&tx->skbs, skb) { 104 hdr = (struct ieee80211_hdr *) skb->data; 105 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED); 106 } 107 } 108 109 int ieee80211_frame_duration(enum ieee80211_band band, size_t len, 110 int rate, int erp, int short_preamble, 111 int shift) 112 { 113 int dur; 114 115 /* calculate duration (in microseconds, rounded up to next higher 116 * integer if it includes a fractional microsecond) to send frame of 117 * len bytes (does not include FCS) at the given rate. Duration will 118 * also include SIFS. 119 * 120 * rate is in 100 kbps, so divident is multiplied by 10 in the 121 * DIV_ROUND_UP() operations. 122 * 123 * shift may be 2 for 5 MHz channels or 1 for 10 MHz channels, and 124 * is assumed to be 0 otherwise. 125 */ 126 127 if (band == IEEE80211_BAND_5GHZ || erp) { 128 /* 129 * OFDM: 130 * 131 * N_DBPS = DATARATE x 4 132 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS) 133 * (16 = SIGNAL time, 6 = tail bits) 134 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext 135 * 136 * T_SYM = 4 usec 137 * 802.11a - 18.5.2: aSIFSTime = 16 usec 138 * 802.11g - 19.8.4: aSIFSTime = 10 usec + 139 * signal ext = 6 usec 140 */ 141 dur = 16; /* SIFS + signal ext */ 142 dur += 16; /* IEEE 802.11-2012 18.3.2.4: T_PREAMBLE = 16 usec */ 143 dur += 4; /* IEEE 802.11-2012 18.3.2.4: T_SIGNAL = 4 usec */ 144 145 /* IEEE 802.11-2012 18.3.2.4: all values above are: 146 * * times 4 for 5 MHz 147 * * times 2 for 10 MHz 148 */ 149 dur *= 1 << shift; 150 151 /* rates should already consider the channel bandwidth, 152 * don't apply divisor again. 153 */ 154 dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10, 155 4 * rate); /* T_SYM x N_SYM */ 156 } else { 157 /* 158 * 802.11b or 802.11g with 802.11b compatibility: 159 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime + 160 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0. 161 * 162 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4 163 * aSIFSTime = 10 usec 164 * aPreambleLength = 144 usec or 72 usec with short preamble 165 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble 166 */ 167 dur = 10; /* aSIFSTime = 10 usec */ 168 dur += short_preamble ? (72 + 24) : (144 + 48); 169 170 dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate); 171 } 172 173 return dur; 174 } 175 176 /* Exported duration function for driver use */ 177 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw, 178 struct ieee80211_vif *vif, 179 enum ieee80211_band band, 180 size_t frame_len, 181 struct ieee80211_rate *rate) 182 { 183 struct ieee80211_sub_if_data *sdata; 184 u16 dur; 185 int erp, shift = 0; 186 bool short_preamble = false; 187 188 erp = 0; 189 if (vif) { 190 sdata = vif_to_sdata(vif); 191 short_preamble = sdata->vif.bss_conf.use_short_preamble; 192 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 193 erp = rate->flags & IEEE80211_RATE_ERP_G; 194 shift = ieee80211_vif_get_shift(vif); 195 } 196 197 dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp, 198 short_preamble, shift); 199 200 return cpu_to_le16(dur); 201 } 202 EXPORT_SYMBOL(ieee80211_generic_frame_duration); 203 204 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw, 205 struct ieee80211_vif *vif, size_t frame_len, 206 const struct ieee80211_tx_info *frame_txctl) 207 { 208 struct ieee80211_local *local = hw_to_local(hw); 209 struct ieee80211_rate *rate; 210 struct ieee80211_sub_if_data *sdata; 211 bool short_preamble; 212 int erp, shift = 0, bitrate; 213 u16 dur; 214 struct ieee80211_supported_band *sband; 215 216 sband = local->hw.wiphy->bands[frame_txctl->band]; 217 218 short_preamble = false; 219 220 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx]; 221 222 erp = 0; 223 if (vif) { 224 sdata = vif_to_sdata(vif); 225 short_preamble = sdata->vif.bss_conf.use_short_preamble; 226 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 227 erp = rate->flags & IEEE80211_RATE_ERP_G; 228 shift = ieee80211_vif_get_shift(vif); 229 } 230 231 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift); 232 233 /* CTS duration */ 234 dur = ieee80211_frame_duration(sband->band, 10, bitrate, 235 erp, short_preamble, shift); 236 /* Data frame duration */ 237 dur += ieee80211_frame_duration(sband->band, frame_len, bitrate, 238 erp, short_preamble, shift); 239 /* ACK duration */ 240 dur += ieee80211_frame_duration(sband->band, 10, bitrate, 241 erp, short_preamble, shift); 242 243 return cpu_to_le16(dur); 244 } 245 EXPORT_SYMBOL(ieee80211_rts_duration); 246 247 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw, 248 struct ieee80211_vif *vif, 249 size_t frame_len, 250 const struct ieee80211_tx_info *frame_txctl) 251 { 252 struct ieee80211_local *local = hw_to_local(hw); 253 struct ieee80211_rate *rate; 254 struct ieee80211_sub_if_data *sdata; 255 bool short_preamble; 256 int erp, shift = 0, bitrate; 257 u16 dur; 258 struct ieee80211_supported_band *sband; 259 260 sband = local->hw.wiphy->bands[frame_txctl->band]; 261 262 short_preamble = false; 263 264 rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx]; 265 erp = 0; 266 if (vif) { 267 sdata = vif_to_sdata(vif); 268 short_preamble = sdata->vif.bss_conf.use_short_preamble; 269 if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE) 270 erp = rate->flags & IEEE80211_RATE_ERP_G; 271 shift = ieee80211_vif_get_shift(vif); 272 } 273 274 bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift); 275 276 /* Data frame duration */ 277 dur = ieee80211_frame_duration(sband->band, frame_len, bitrate, 278 erp, short_preamble, shift); 279 if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) { 280 /* ACK duration */ 281 dur += ieee80211_frame_duration(sband->band, 10, bitrate, 282 erp, short_preamble, shift); 283 } 284 285 return cpu_to_le16(dur); 286 } 287 EXPORT_SYMBOL(ieee80211_ctstoself_duration); 288 289 void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue) 290 { 291 struct ieee80211_sub_if_data *sdata; 292 int n_acs = IEEE80211_NUM_ACS; 293 294 if (local->hw.queues < IEEE80211_NUM_ACS) 295 n_acs = 1; 296 297 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 298 int ac; 299 300 if (!sdata->dev) 301 continue; 302 303 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE && 304 local->queue_stop_reasons[sdata->vif.cab_queue] != 0) 305 continue; 306 307 for (ac = 0; ac < n_acs; ac++) { 308 int ac_queue = sdata->vif.hw_queue[ac]; 309 310 if (ac_queue == queue || 311 (sdata->vif.cab_queue == queue && 312 local->queue_stop_reasons[ac_queue] == 0 && 313 skb_queue_empty(&local->pending[ac_queue]))) 314 netif_wake_subqueue(sdata->dev, ac); 315 } 316 } 317 } 318 319 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue, 320 enum queue_stop_reason reason) 321 { 322 struct ieee80211_local *local = hw_to_local(hw); 323 324 trace_wake_queue(local, queue, reason); 325 326 if (WARN_ON(queue >= hw->queues)) 327 return; 328 329 if (!test_bit(reason, &local->queue_stop_reasons[queue])) 330 return; 331 332 __clear_bit(reason, &local->queue_stop_reasons[queue]); 333 334 if (local->queue_stop_reasons[queue] != 0) 335 /* someone still has this queue stopped */ 336 return; 337 338 if (skb_queue_empty(&local->pending[queue])) { 339 rcu_read_lock(); 340 ieee80211_propagate_queue_wake(local, queue); 341 rcu_read_unlock(); 342 } else 343 tasklet_schedule(&local->tx_pending_tasklet); 344 } 345 346 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue, 347 enum queue_stop_reason reason) 348 { 349 struct ieee80211_local *local = hw_to_local(hw); 350 unsigned long flags; 351 352 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 353 __ieee80211_wake_queue(hw, queue, reason); 354 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 355 } 356 357 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue) 358 { 359 ieee80211_wake_queue_by_reason(hw, queue, 360 IEEE80211_QUEUE_STOP_REASON_DRIVER); 361 } 362 EXPORT_SYMBOL(ieee80211_wake_queue); 363 364 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue, 365 enum queue_stop_reason reason) 366 { 367 struct ieee80211_local *local = hw_to_local(hw); 368 struct ieee80211_sub_if_data *sdata; 369 int n_acs = IEEE80211_NUM_ACS; 370 371 trace_stop_queue(local, queue, reason); 372 373 if (WARN_ON(queue >= hw->queues)) 374 return; 375 376 if (test_bit(reason, &local->queue_stop_reasons[queue])) 377 return; 378 379 __set_bit(reason, &local->queue_stop_reasons[queue]); 380 381 if (local->hw.queues < IEEE80211_NUM_ACS) 382 n_acs = 1; 383 384 rcu_read_lock(); 385 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 386 int ac; 387 388 if (!sdata->dev) 389 continue; 390 391 for (ac = 0; ac < n_acs; ac++) { 392 if (sdata->vif.hw_queue[ac] == queue || 393 sdata->vif.cab_queue == queue) 394 netif_stop_subqueue(sdata->dev, ac); 395 } 396 } 397 rcu_read_unlock(); 398 } 399 400 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue, 401 enum queue_stop_reason reason) 402 { 403 struct ieee80211_local *local = hw_to_local(hw); 404 unsigned long flags; 405 406 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 407 __ieee80211_stop_queue(hw, queue, reason); 408 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 409 } 410 411 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue) 412 { 413 ieee80211_stop_queue_by_reason(hw, queue, 414 IEEE80211_QUEUE_STOP_REASON_DRIVER); 415 } 416 EXPORT_SYMBOL(ieee80211_stop_queue); 417 418 void ieee80211_add_pending_skb(struct ieee80211_local *local, 419 struct sk_buff *skb) 420 { 421 struct ieee80211_hw *hw = &local->hw; 422 unsigned long flags; 423 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 424 int queue = info->hw_queue; 425 426 if (WARN_ON(!info->control.vif)) { 427 ieee80211_free_txskb(&local->hw, skb); 428 return; 429 } 430 431 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 432 __ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 433 __skb_queue_tail(&local->pending[queue], skb); 434 __ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 435 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 436 } 437 438 void ieee80211_add_pending_skbs(struct ieee80211_local *local, 439 struct sk_buff_head *skbs) 440 { 441 struct ieee80211_hw *hw = &local->hw; 442 struct sk_buff *skb; 443 unsigned long flags; 444 int queue, i; 445 446 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 447 while ((skb = skb_dequeue(skbs))) { 448 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 449 450 if (WARN_ON(!info->control.vif)) { 451 ieee80211_free_txskb(&local->hw, skb); 452 continue; 453 } 454 455 queue = info->hw_queue; 456 457 __ieee80211_stop_queue(hw, queue, 458 IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 459 460 __skb_queue_tail(&local->pending[queue], skb); 461 } 462 463 for (i = 0; i < hw->queues; i++) 464 __ieee80211_wake_queue(hw, i, 465 IEEE80211_QUEUE_STOP_REASON_SKB_ADD); 466 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 467 } 468 469 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw, 470 unsigned long queues, 471 enum queue_stop_reason reason) 472 { 473 struct ieee80211_local *local = hw_to_local(hw); 474 unsigned long flags; 475 int i; 476 477 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 478 479 for_each_set_bit(i, &queues, hw->queues) 480 __ieee80211_stop_queue(hw, i, reason); 481 482 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 483 } 484 485 void ieee80211_stop_queues(struct ieee80211_hw *hw) 486 { 487 ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 488 IEEE80211_QUEUE_STOP_REASON_DRIVER); 489 } 490 EXPORT_SYMBOL(ieee80211_stop_queues); 491 492 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue) 493 { 494 struct ieee80211_local *local = hw_to_local(hw); 495 unsigned long flags; 496 int ret; 497 498 if (WARN_ON(queue >= hw->queues)) 499 return true; 500 501 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 502 ret = test_bit(IEEE80211_QUEUE_STOP_REASON_DRIVER, 503 &local->queue_stop_reasons[queue]); 504 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 505 return ret; 506 } 507 EXPORT_SYMBOL(ieee80211_queue_stopped); 508 509 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw, 510 unsigned long queues, 511 enum queue_stop_reason reason) 512 { 513 struct ieee80211_local *local = hw_to_local(hw); 514 unsigned long flags; 515 int i; 516 517 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 518 519 for_each_set_bit(i, &queues, hw->queues) 520 __ieee80211_wake_queue(hw, i, reason); 521 522 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 523 } 524 525 void ieee80211_wake_queues(struct ieee80211_hw *hw) 526 { 527 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 528 IEEE80211_QUEUE_STOP_REASON_DRIVER); 529 } 530 EXPORT_SYMBOL(ieee80211_wake_queues); 531 532 void ieee80211_flush_queues(struct ieee80211_local *local, 533 struct ieee80211_sub_if_data *sdata) 534 { 535 u32 queues; 536 537 if (!local->ops->flush) 538 return; 539 540 if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) { 541 int ac; 542 543 queues = 0; 544 545 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) 546 queues |= BIT(sdata->vif.hw_queue[ac]); 547 if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE) 548 queues |= BIT(sdata->vif.cab_queue); 549 } else { 550 /* all queues */ 551 queues = BIT(local->hw.queues) - 1; 552 } 553 554 ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP, 555 IEEE80211_QUEUE_STOP_REASON_FLUSH); 556 557 drv_flush(local, sdata, queues, false); 558 559 ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP, 560 IEEE80211_QUEUE_STOP_REASON_FLUSH); 561 } 562 563 static void __iterate_active_interfaces(struct ieee80211_local *local, 564 u32 iter_flags, 565 void (*iterator)(void *data, u8 *mac, 566 struct ieee80211_vif *vif), 567 void *data) 568 { 569 struct ieee80211_sub_if_data *sdata; 570 571 list_for_each_entry_rcu(sdata, &local->interfaces, list) { 572 switch (sdata->vif.type) { 573 case NL80211_IFTYPE_MONITOR: 574 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE)) 575 continue; 576 break; 577 case NL80211_IFTYPE_AP_VLAN: 578 continue; 579 default: 580 break; 581 } 582 if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) && 583 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 584 continue; 585 if (ieee80211_sdata_running(sdata)) 586 iterator(data, sdata->vif.addr, 587 &sdata->vif); 588 } 589 590 sdata = rcu_dereference_check(local->monitor_sdata, 591 lockdep_is_held(&local->iflist_mtx) || 592 lockdep_rtnl_is_held()); 593 if (sdata && 594 (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL || 595 sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 596 iterator(data, sdata->vif.addr, &sdata->vif); 597 } 598 599 void ieee80211_iterate_active_interfaces( 600 struct ieee80211_hw *hw, u32 iter_flags, 601 void (*iterator)(void *data, u8 *mac, 602 struct ieee80211_vif *vif), 603 void *data) 604 { 605 struct ieee80211_local *local = hw_to_local(hw); 606 607 mutex_lock(&local->iflist_mtx); 608 __iterate_active_interfaces(local, iter_flags, iterator, data); 609 mutex_unlock(&local->iflist_mtx); 610 } 611 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces); 612 613 void ieee80211_iterate_active_interfaces_atomic( 614 struct ieee80211_hw *hw, u32 iter_flags, 615 void (*iterator)(void *data, u8 *mac, 616 struct ieee80211_vif *vif), 617 void *data) 618 { 619 struct ieee80211_local *local = hw_to_local(hw); 620 621 rcu_read_lock(); 622 __iterate_active_interfaces(local, iter_flags, iterator, data); 623 rcu_read_unlock(); 624 } 625 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic); 626 627 void ieee80211_iterate_active_interfaces_rtnl( 628 struct ieee80211_hw *hw, u32 iter_flags, 629 void (*iterator)(void *data, u8 *mac, 630 struct ieee80211_vif *vif), 631 void *data) 632 { 633 struct ieee80211_local *local = hw_to_local(hw); 634 635 ASSERT_RTNL(); 636 637 __iterate_active_interfaces(local, iter_flags, iterator, data); 638 } 639 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_rtnl); 640 641 struct ieee80211_vif *wdev_to_ieee80211_vif(struct wireless_dev *wdev) 642 { 643 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 644 645 if (!ieee80211_sdata_running(sdata) || 646 !(sdata->flags & IEEE80211_SDATA_IN_DRIVER)) 647 return NULL; 648 return &sdata->vif; 649 } 650 EXPORT_SYMBOL_GPL(wdev_to_ieee80211_vif); 651 652 /* 653 * Nothing should have been stuffed into the workqueue during 654 * the suspend->resume cycle. If this WARN is seen then there 655 * is a bug with either the driver suspend or something in 656 * mac80211 stuffing into the workqueue which we haven't yet 657 * cleared during mac80211's suspend cycle. 658 */ 659 static bool ieee80211_can_queue_work(struct ieee80211_local *local) 660 { 661 if (WARN(local->suspended && !local->resuming, 662 "queueing ieee80211 work while going to suspend\n")) 663 return false; 664 665 return true; 666 } 667 668 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work) 669 { 670 struct ieee80211_local *local = hw_to_local(hw); 671 672 if (!ieee80211_can_queue_work(local)) 673 return; 674 675 queue_work(local->workqueue, work); 676 } 677 EXPORT_SYMBOL(ieee80211_queue_work); 678 679 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw, 680 struct delayed_work *dwork, 681 unsigned long delay) 682 { 683 struct ieee80211_local *local = hw_to_local(hw); 684 685 if (!ieee80211_can_queue_work(local)) 686 return; 687 688 queue_delayed_work(local->workqueue, dwork, delay); 689 } 690 EXPORT_SYMBOL(ieee80211_queue_delayed_work); 691 692 u32 ieee802_11_parse_elems_crc(const u8 *start, size_t len, bool action, 693 struct ieee802_11_elems *elems, 694 u64 filter, u32 crc) 695 { 696 size_t left = len; 697 const u8 *pos = start; 698 bool calc_crc = filter != 0; 699 DECLARE_BITMAP(seen_elems, 256); 700 const u8 *ie; 701 702 bitmap_zero(seen_elems, 256); 703 memset(elems, 0, sizeof(*elems)); 704 elems->ie_start = start; 705 elems->total_len = len; 706 707 while (left >= 2) { 708 u8 id, elen; 709 bool elem_parse_failed; 710 711 id = *pos++; 712 elen = *pos++; 713 left -= 2; 714 715 if (elen > left) { 716 elems->parse_error = true; 717 break; 718 } 719 720 switch (id) { 721 case WLAN_EID_SSID: 722 case WLAN_EID_SUPP_RATES: 723 case WLAN_EID_FH_PARAMS: 724 case WLAN_EID_DS_PARAMS: 725 case WLAN_EID_CF_PARAMS: 726 case WLAN_EID_TIM: 727 case WLAN_EID_IBSS_PARAMS: 728 case WLAN_EID_CHALLENGE: 729 case WLAN_EID_RSN: 730 case WLAN_EID_ERP_INFO: 731 case WLAN_EID_EXT_SUPP_RATES: 732 case WLAN_EID_HT_CAPABILITY: 733 case WLAN_EID_HT_OPERATION: 734 case WLAN_EID_VHT_CAPABILITY: 735 case WLAN_EID_VHT_OPERATION: 736 case WLAN_EID_MESH_ID: 737 case WLAN_EID_MESH_CONFIG: 738 case WLAN_EID_PEER_MGMT: 739 case WLAN_EID_PREQ: 740 case WLAN_EID_PREP: 741 case WLAN_EID_PERR: 742 case WLAN_EID_RANN: 743 case WLAN_EID_CHANNEL_SWITCH: 744 case WLAN_EID_EXT_CHANSWITCH_ANN: 745 case WLAN_EID_COUNTRY: 746 case WLAN_EID_PWR_CONSTRAINT: 747 case WLAN_EID_TIMEOUT_INTERVAL: 748 case WLAN_EID_SECONDARY_CHANNEL_OFFSET: 749 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH: 750 case WLAN_EID_CHAN_SWITCH_PARAM: 751 /* 752 * not listing WLAN_EID_CHANNEL_SWITCH_WRAPPER -- it seems possible 753 * that if the content gets bigger it might be needed more than once 754 */ 755 if (test_bit(id, seen_elems)) { 756 elems->parse_error = true; 757 left -= elen; 758 pos += elen; 759 continue; 760 } 761 break; 762 } 763 764 if (calc_crc && id < 64 && (filter & (1ULL << id))) 765 crc = crc32_be(crc, pos - 2, elen + 2); 766 767 elem_parse_failed = false; 768 769 switch (id) { 770 case WLAN_EID_SSID: 771 elems->ssid = pos; 772 elems->ssid_len = elen; 773 break; 774 case WLAN_EID_SUPP_RATES: 775 elems->supp_rates = pos; 776 elems->supp_rates_len = elen; 777 break; 778 case WLAN_EID_DS_PARAMS: 779 if (elen >= 1) 780 elems->ds_params = pos; 781 else 782 elem_parse_failed = true; 783 break; 784 case WLAN_EID_TIM: 785 if (elen >= sizeof(struct ieee80211_tim_ie)) { 786 elems->tim = (void *)pos; 787 elems->tim_len = elen; 788 } else 789 elem_parse_failed = true; 790 break; 791 case WLAN_EID_CHALLENGE: 792 elems->challenge = pos; 793 elems->challenge_len = elen; 794 break; 795 case WLAN_EID_VENDOR_SPECIFIC: 796 if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 && 797 pos[2] == 0xf2) { 798 /* Microsoft OUI (00:50:F2) */ 799 800 if (calc_crc) 801 crc = crc32_be(crc, pos - 2, elen + 2); 802 803 if (elen >= 5 && pos[3] == 2) { 804 /* OUI Type 2 - WMM IE */ 805 if (pos[4] == 0) { 806 elems->wmm_info = pos; 807 elems->wmm_info_len = elen; 808 } else if (pos[4] == 1) { 809 elems->wmm_param = pos; 810 elems->wmm_param_len = elen; 811 } 812 } 813 } 814 break; 815 case WLAN_EID_RSN: 816 elems->rsn = pos; 817 elems->rsn_len = elen; 818 break; 819 case WLAN_EID_ERP_INFO: 820 if (elen >= 1) 821 elems->erp_info = pos; 822 else 823 elem_parse_failed = true; 824 break; 825 case WLAN_EID_EXT_SUPP_RATES: 826 elems->ext_supp_rates = pos; 827 elems->ext_supp_rates_len = elen; 828 break; 829 case WLAN_EID_HT_CAPABILITY: 830 if (elen >= sizeof(struct ieee80211_ht_cap)) 831 elems->ht_cap_elem = (void *)pos; 832 else 833 elem_parse_failed = true; 834 break; 835 case WLAN_EID_HT_OPERATION: 836 if (elen >= sizeof(struct ieee80211_ht_operation)) 837 elems->ht_operation = (void *)pos; 838 else 839 elem_parse_failed = true; 840 break; 841 case WLAN_EID_VHT_CAPABILITY: 842 if (elen >= sizeof(struct ieee80211_vht_cap)) 843 elems->vht_cap_elem = (void *)pos; 844 else 845 elem_parse_failed = true; 846 break; 847 case WLAN_EID_VHT_OPERATION: 848 if (elen >= sizeof(struct ieee80211_vht_operation)) 849 elems->vht_operation = (void *)pos; 850 else 851 elem_parse_failed = true; 852 break; 853 case WLAN_EID_OPMODE_NOTIF: 854 if (elen > 0) 855 elems->opmode_notif = pos; 856 else 857 elem_parse_failed = true; 858 break; 859 case WLAN_EID_MESH_ID: 860 elems->mesh_id = pos; 861 elems->mesh_id_len = elen; 862 break; 863 case WLAN_EID_MESH_CONFIG: 864 if (elen >= sizeof(struct ieee80211_meshconf_ie)) 865 elems->mesh_config = (void *)pos; 866 else 867 elem_parse_failed = true; 868 break; 869 case WLAN_EID_PEER_MGMT: 870 elems->peering = pos; 871 elems->peering_len = elen; 872 break; 873 case WLAN_EID_MESH_AWAKE_WINDOW: 874 if (elen >= 2) 875 elems->awake_window = (void *)pos; 876 break; 877 case WLAN_EID_PREQ: 878 elems->preq = pos; 879 elems->preq_len = elen; 880 break; 881 case WLAN_EID_PREP: 882 elems->prep = pos; 883 elems->prep_len = elen; 884 break; 885 case WLAN_EID_PERR: 886 elems->perr = pos; 887 elems->perr_len = elen; 888 break; 889 case WLAN_EID_RANN: 890 if (elen >= sizeof(struct ieee80211_rann_ie)) 891 elems->rann = (void *)pos; 892 else 893 elem_parse_failed = true; 894 break; 895 case WLAN_EID_CHANNEL_SWITCH: 896 if (elen != sizeof(struct ieee80211_channel_sw_ie)) { 897 elem_parse_failed = true; 898 break; 899 } 900 elems->ch_switch_ie = (void *)pos; 901 break; 902 case WLAN_EID_EXT_CHANSWITCH_ANN: 903 if (elen != sizeof(struct ieee80211_ext_chansw_ie)) { 904 elem_parse_failed = true; 905 break; 906 } 907 elems->ext_chansw_ie = (void *)pos; 908 break; 909 case WLAN_EID_SECONDARY_CHANNEL_OFFSET: 910 if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) { 911 elem_parse_failed = true; 912 break; 913 } 914 elems->sec_chan_offs = (void *)pos; 915 break; 916 case WLAN_EID_CHAN_SWITCH_PARAM: 917 if (elen != 918 sizeof(*elems->mesh_chansw_params_ie)) { 919 elem_parse_failed = true; 920 break; 921 } 922 elems->mesh_chansw_params_ie = (void *)pos; 923 break; 924 case WLAN_EID_WIDE_BW_CHANNEL_SWITCH: 925 if (!action || 926 elen != sizeof(*elems->wide_bw_chansw_ie)) { 927 elem_parse_failed = true; 928 break; 929 } 930 elems->wide_bw_chansw_ie = (void *)pos; 931 break; 932 case WLAN_EID_CHANNEL_SWITCH_WRAPPER: 933 if (action) { 934 elem_parse_failed = true; 935 break; 936 } 937 /* 938 * This is a bit tricky, but as we only care about 939 * the wide bandwidth channel switch element, so 940 * just parse it out manually. 941 */ 942 ie = cfg80211_find_ie(WLAN_EID_WIDE_BW_CHANNEL_SWITCH, 943 pos, elen); 944 if (ie) { 945 if (ie[1] == sizeof(*elems->wide_bw_chansw_ie)) 946 elems->wide_bw_chansw_ie = 947 (void *)(ie + 2); 948 else 949 elem_parse_failed = true; 950 } 951 break; 952 case WLAN_EID_COUNTRY: 953 elems->country_elem = pos; 954 elems->country_elem_len = elen; 955 break; 956 case WLAN_EID_PWR_CONSTRAINT: 957 if (elen != 1) { 958 elem_parse_failed = true; 959 break; 960 } 961 elems->pwr_constr_elem = pos; 962 break; 963 case WLAN_EID_TIMEOUT_INTERVAL: 964 if (elen >= sizeof(struct ieee80211_timeout_interval_ie)) 965 elems->timeout_int = (void *)pos; 966 else 967 elem_parse_failed = true; 968 break; 969 default: 970 break; 971 } 972 973 if (elem_parse_failed) 974 elems->parse_error = true; 975 else 976 __set_bit(id, seen_elems); 977 978 left -= elen; 979 pos += elen; 980 } 981 982 if (left != 0) 983 elems->parse_error = true; 984 985 return crc; 986 } 987 988 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata, 989 bool bss_notify) 990 { 991 struct ieee80211_local *local = sdata->local; 992 struct ieee80211_tx_queue_params qparam; 993 struct ieee80211_chanctx_conf *chanctx_conf; 994 int ac; 995 bool use_11b, enable_qos; 996 int aCWmin, aCWmax; 997 998 if (!local->ops->conf_tx) 999 return; 1000 1001 if (local->hw.queues < IEEE80211_NUM_ACS) 1002 return; 1003 1004 memset(&qparam, 0, sizeof(qparam)); 1005 1006 rcu_read_lock(); 1007 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 1008 use_11b = (chanctx_conf && 1009 chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) && 1010 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE); 1011 rcu_read_unlock(); 1012 1013 /* 1014 * By default disable QoS in STA mode for old access points, which do 1015 * not support 802.11e. New APs will provide proper queue parameters, 1016 * that we will configure later. 1017 */ 1018 enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION); 1019 1020 /* Set defaults according to 802.11-2007 Table 7-37 */ 1021 aCWmax = 1023; 1022 if (use_11b) 1023 aCWmin = 31; 1024 else 1025 aCWmin = 15; 1026 1027 /* Confiure old 802.11b/g medium access rules. */ 1028 qparam.cw_max = aCWmax; 1029 qparam.cw_min = aCWmin; 1030 qparam.txop = 0; 1031 qparam.aifs = 2; 1032 1033 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 1034 /* Update if QoS is enabled. */ 1035 if (enable_qos) { 1036 switch (ac) { 1037 case IEEE80211_AC_BK: 1038 qparam.cw_max = aCWmax; 1039 qparam.cw_min = aCWmin; 1040 qparam.txop = 0; 1041 qparam.aifs = 7; 1042 break; 1043 /* never happens but let's not leave undefined */ 1044 default: 1045 case IEEE80211_AC_BE: 1046 qparam.cw_max = aCWmax; 1047 qparam.cw_min = aCWmin; 1048 qparam.txop = 0; 1049 qparam.aifs = 3; 1050 break; 1051 case IEEE80211_AC_VI: 1052 qparam.cw_max = aCWmin; 1053 qparam.cw_min = (aCWmin + 1) / 2 - 1; 1054 if (use_11b) 1055 qparam.txop = 6016/32; 1056 else 1057 qparam.txop = 3008/32; 1058 qparam.aifs = 2; 1059 break; 1060 case IEEE80211_AC_VO: 1061 qparam.cw_max = (aCWmin + 1) / 2 - 1; 1062 qparam.cw_min = (aCWmin + 1) / 4 - 1; 1063 if (use_11b) 1064 qparam.txop = 3264/32; 1065 else 1066 qparam.txop = 1504/32; 1067 qparam.aifs = 2; 1068 break; 1069 } 1070 } 1071 1072 qparam.uapsd = false; 1073 1074 sdata->tx_conf[ac] = qparam; 1075 drv_conf_tx(local, sdata, ac, &qparam); 1076 } 1077 1078 if (sdata->vif.type != NL80211_IFTYPE_MONITOR && 1079 sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) { 1080 sdata->vif.bss_conf.qos = enable_qos; 1081 if (bss_notify) 1082 ieee80211_bss_info_change_notify(sdata, 1083 BSS_CHANGED_QOS); 1084 } 1085 } 1086 1087 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata, 1088 u16 transaction, u16 auth_alg, u16 status, 1089 const u8 *extra, size_t extra_len, const u8 *da, 1090 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx, 1091 u32 tx_flags) 1092 { 1093 struct ieee80211_local *local = sdata->local; 1094 struct sk_buff *skb; 1095 struct ieee80211_mgmt *mgmt; 1096 int err; 1097 1098 /* 24 + 6 = header + auth_algo + auth_transaction + status_code */ 1099 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24 + 6 + extra_len); 1100 if (!skb) 1101 return; 1102 1103 skb_reserve(skb, local->hw.extra_tx_headroom); 1104 1105 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6); 1106 memset(mgmt, 0, 24 + 6); 1107 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 1108 IEEE80211_STYPE_AUTH); 1109 memcpy(mgmt->da, da, ETH_ALEN); 1110 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 1111 memcpy(mgmt->bssid, bssid, ETH_ALEN); 1112 mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg); 1113 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction); 1114 mgmt->u.auth.status_code = cpu_to_le16(status); 1115 if (extra) 1116 memcpy(skb_put(skb, extra_len), extra, extra_len); 1117 1118 if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) { 1119 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED); 1120 err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx); 1121 WARN_ON(err); 1122 } 1123 1124 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT | 1125 tx_flags; 1126 ieee80211_tx_skb(sdata, skb); 1127 } 1128 1129 void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, 1130 const u8 *bssid, u16 stype, u16 reason, 1131 bool send_frame, u8 *frame_buf) 1132 { 1133 struct ieee80211_local *local = sdata->local; 1134 struct sk_buff *skb; 1135 struct ieee80211_mgmt *mgmt = (void *)frame_buf; 1136 1137 /* build frame */ 1138 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype); 1139 mgmt->duration = 0; /* initialize only */ 1140 mgmt->seq_ctrl = 0; /* initialize only */ 1141 memcpy(mgmt->da, bssid, ETH_ALEN); 1142 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 1143 memcpy(mgmt->bssid, bssid, ETH_ALEN); 1144 /* u.deauth.reason_code == u.disassoc.reason_code */ 1145 mgmt->u.deauth.reason_code = cpu_to_le16(reason); 1146 1147 if (send_frame) { 1148 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 1149 IEEE80211_DEAUTH_FRAME_LEN); 1150 if (!skb) 1151 return; 1152 1153 skb_reserve(skb, local->hw.extra_tx_headroom); 1154 1155 /* copy in frame */ 1156 memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN), 1157 mgmt, IEEE80211_DEAUTH_FRAME_LEN); 1158 1159 if (sdata->vif.type != NL80211_IFTYPE_STATION || 1160 !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED)) 1161 IEEE80211_SKB_CB(skb)->flags |= 1162 IEEE80211_TX_INTFL_DONT_ENCRYPT; 1163 1164 ieee80211_tx_skb(sdata, skb); 1165 } 1166 } 1167 1168 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer, 1169 size_t buffer_len, const u8 *ie, size_t ie_len, 1170 enum ieee80211_band band, u32 rate_mask, 1171 struct cfg80211_chan_def *chandef) 1172 { 1173 struct ieee80211_supported_band *sband; 1174 u8 *pos = buffer, *end = buffer + buffer_len; 1175 size_t offset = 0, noffset; 1176 int supp_rates_len, i; 1177 u8 rates[32]; 1178 int num_rates; 1179 int ext_rates_len; 1180 int shift; 1181 u32 rate_flags; 1182 1183 sband = local->hw.wiphy->bands[band]; 1184 if (WARN_ON_ONCE(!sband)) 1185 return 0; 1186 1187 rate_flags = ieee80211_chandef_rate_flags(chandef); 1188 shift = ieee80211_chandef_get_shift(chandef); 1189 1190 num_rates = 0; 1191 for (i = 0; i < sband->n_bitrates; i++) { 1192 if ((BIT(i) & rate_mask) == 0) 1193 continue; /* skip rate */ 1194 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 1195 continue; 1196 1197 rates[num_rates++] = 1198 (u8) DIV_ROUND_UP(sband->bitrates[i].bitrate, 1199 (1 << shift) * 5); 1200 } 1201 1202 supp_rates_len = min_t(int, num_rates, 8); 1203 1204 if (end - pos < 2 + supp_rates_len) 1205 goto out_err; 1206 *pos++ = WLAN_EID_SUPP_RATES; 1207 *pos++ = supp_rates_len; 1208 memcpy(pos, rates, supp_rates_len); 1209 pos += supp_rates_len; 1210 1211 /* insert "request information" if in custom IEs */ 1212 if (ie && ie_len) { 1213 static const u8 before_extrates[] = { 1214 WLAN_EID_SSID, 1215 WLAN_EID_SUPP_RATES, 1216 WLAN_EID_REQUEST, 1217 }; 1218 noffset = ieee80211_ie_split(ie, ie_len, 1219 before_extrates, 1220 ARRAY_SIZE(before_extrates), 1221 offset); 1222 if (end - pos < noffset - offset) 1223 goto out_err; 1224 memcpy(pos, ie + offset, noffset - offset); 1225 pos += noffset - offset; 1226 offset = noffset; 1227 } 1228 1229 ext_rates_len = num_rates - supp_rates_len; 1230 if (ext_rates_len > 0) { 1231 if (end - pos < 2 + ext_rates_len) 1232 goto out_err; 1233 *pos++ = WLAN_EID_EXT_SUPP_RATES; 1234 *pos++ = ext_rates_len; 1235 memcpy(pos, rates + supp_rates_len, ext_rates_len); 1236 pos += ext_rates_len; 1237 } 1238 1239 if (chandef->chan && sband->band == IEEE80211_BAND_2GHZ) { 1240 if (end - pos < 3) 1241 goto out_err; 1242 *pos++ = WLAN_EID_DS_PARAMS; 1243 *pos++ = 1; 1244 *pos++ = ieee80211_frequency_to_channel( 1245 chandef->chan->center_freq); 1246 } 1247 1248 /* insert custom IEs that go before HT */ 1249 if (ie && ie_len) { 1250 static const u8 before_ht[] = { 1251 WLAN_EID_SSID, 1252 WLAN_EID_SUPP_RATES, 1253 WLAN_EID_REQUEST, 1254 WLAN_EID_EXT_SUPP_RATES, 1255 WLAN_EID_DS_PARAMS, 1256 WLAN_EID_SUPPORTED_REGULATORY_CLASSES, 1257 }; 1258 noffset = ieee80211_ie_split(ie, ie_len, 1259 before_ht, ARRAY_SIZE(before_ht), 1260 offset); 1261 if (end - pos < noffset - offset) 1262 goto out_err; 1263 memcpy(pos, ie + offset, noffset - offset); 1264 pos += noffset - offset; 1265 offset = noffset; 1266 } 1267 1268 if (sband->ht_cap.ht_supported) { 1269 if (end - pos < 2 + sizeof(struct ieee80211_ht_cap)) 1270 goto out_err; 1271 pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap, 1272 sband->ht_cap.cap); 1273 } 1274 1275 /* 1276 * If adding more here, adjust code in main.c 1277 * that calculates local->scan_ies_len. 1278 */ 1279 1280 /* insert custom IEs that go before VHT */ 1281 if (ie && ie_len) { 1282 static const u8 before_vht[] = { 1283 WLAN_EID_SSID, 1284 WLAN_EID_SUPP_RATES, 1285 WLAN_EID_REQUEST, 1286 WLAN_EID_EXT_SUPP_RATES, 1287 WLAN_EID_DS_PARAMS, 1288 WLAN_EID_SUPPORTED_REGULATORY_CLASSES, 1289 WLAN_EID_HT_CAPABILITY, 1290 WLAN_EID_BSS_COEX_2040, 1291 WLAN_EID_EXT_CAPABILITY, 1292 WLAN_EID_SSID_LIST, 1293 WLAN_EID_CHANNEL_USAGE, 1294 WLAN_EID_INTERWORKING, 1295 /* mesh ID can't happen here */ 1296 /* 60 GHz can't happen here right now */ 1297 }; 1298 noffset = ieee80211_ie_split(ie, ie_len, 1299 before_vht, ARRAY_SIZE(before_vht), 1300 offset); 1301 if (end - pos < noffset - offset) 1302 goto out_err; 1303 memcpy(pos, ie + offset, noffset - offset); 1304 pos += noffset - offset; 1305 offset = noffset; 1306 } 1307 1308 if (sband->vht_cap.vht_supported) { 1309 if (end - pos < 2 + sizeof(struct ieee80211_vht_cap)) 1310 goto out_err; 1311 pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap, 1312 sband->vht_cap.cap); 1313 } 1314 1315 /* add any remaining custom IEs */ 1316 if (ie && ie_len) { 1317 noffset = ie_len; 1318 if (end - pos < noffset - offset) 1319 goto out_err; 1320 memcpy(pos, ie + offset, noffset - offset); 1321 pos += noffset - offset; 1322 } 1323 1324 return pos - buffer; 1325 out_err: 1326 WARN_ONCE(1, "not enough space for preq IEs\n"); 1327 return pos - buffer; 1328 } 1329 1330 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata, 1331 u8 *dst, u32 ratemask, 1332 struct ieee80211_channel *chan, 1333 const u8 *ssid, size_t ssid_len, 1334 const u8 *ie, size_t ie_len, 1335 bool directed) 1336 { 1337 struct ieee80211_local *local = sdata->local; 1338 struct cfg80211_chan_def chandef; 1339 struct sk_buff *skb; 1340 struct ieee80211_mgmt *mgmt; 1341 int ies_len; 1342 1343 /* 1344 * Do not send DS Channel parameter for directed probe requests 1345 * in order to maximize the chance that we get a response. Some 1346 * badly-behaved APs don't respond when this parameter is included. 1347 */ 1348 chandef.width = sdata->vif.bss_conf.chandef.width; 1349 if (directed) 1350 chandef.chan = NULL; 1351 else 1352 chandef.chan = chan; 1353 1354 skb = ieee80211_probereq_get(&local->hw, &sdata->vif, 1355 ssid, ssid_len, 100 + ie_len); 1356 if (!skb) 1357 return NULL; 1358 1359 ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb), 1360 skb_tailroom(skb), 1361 ie, ie_len, chan->band, 1362 ratemask, &chandef); 1363 skb_put(skb, ies_len); 1364 1365 if (dst) { 1366 mgmt = (struct ieee80211_mgmt *) skb->data; 1367 memcpy(mgmt->da, dst, ETH_ALEN); 1368 memcpy(mgmt->bssid, dst, ETH_ALEN); 1369 } 1370 1371 IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; 1372 1373 return skb; 1374 } 1375 1376 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst, 1377 const u8 *ssid, size_t ssid_len, 1378 const u8 *ie, size_t ie_len, 1379 u32 ratemask, bool directed, u32 tx_flags, 1380 struct ieee80211_channel *channel, bool scan) 1381 { 1382 struct sk_buff *skb; 1383 1384 skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel, 1385 ssid, ssid_len, 1386 ie, ie_len, directed); 1387 if (skb) { 1388 IEEE80211_SKB_CB(skb)->flags |= tx_flags; 1389 if (scan) 1390 ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band); 1391 else 1392 ieee80211_tx_skb(sdata, skb); 1393 } 1394 } 1395 1396 u32 ieee80211_sta_get_rates(struct ieee80211_sub_if_data *sdata, 1397 struct ieee802_11_elems *elems, 1398 enum ieee80211_band band, u32 *basic_rates) 1399 { 1400 struct ieee80211_supported_band *sband; 1401 size_t num_rates; 1402 u32 supp_rates, rate_flags; 1403 int i, j, shift; 1404 sband = sdata->local->hw.wiphy->bands[band]; 1405 1406 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 1407 shift = ieee80211_vif_get_shift(&sdata->vif); 1408 1409 if (WARN_ON(!sband)) 1410 return 1; 1411 1412 num_rates = sband->n_bitrates; 1413 supp_rates = 0; 1414 for (i = 0; i < elems->supp_rates_len + 1415 elems->ext_supp_rates_len; i++) { 1416 u8 rate = 0; 1417 int own_rate; 1418 bool is_basic; 1419 if (i < elems->supp_rates_len) 1420 rate = elems->supp_rates[i]; 1421 else if (elems->ext_supp_rates) 1422 rate = elems->ext_supp_rates 1423 [i - elems->supp_rates_len]; 1424 own_rate = 5 * (rate & 0x7f); 1425 is_basic = !!(rate & 0x80); 1426 1427 if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY) 1428 continue; 1429 1430 for (j = 0; j < num_rates; j++) { 1431 int brate; 1432 if ((rate_flags & sband->bitrates[j].flags) 1433 != rate_flags) 1434 continue; 1435 1436 brate = DIV_ROUND_UP(sband->bitrates[j].bitrate, 1437 1 << shift); 1438 1439 if (brate == own_rate) { 1440 supp_rates |= BIT(j); 1441 if (basic_rates && is_basic) 1442 *basic_rates |= BIT(j); 1443 } 1444 } 1445 } 1446 return supp_rates; 1447 } 1448 1449 void ieee80211_stop_device(struct ieee80211_local *local) 1450 { 1451 ieee80211_led_radio(local, false); 1452 ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO); 1453 1454 cancel_work_sync(&local->reconfig_filter); 1455 1456 flush_workqueue(local->workqueue); 1457 drv_stop(local); 1458 } 1459 1460 static void ieee80211_handle_reconfig_failure(struct ieee80211_local *local) 1461 { 1462 struct ieee80211_sub_if_data *sdata; 1463 struct ieee80211_chanctx *ctx; 1464 1465 /* 1466 * We get here if during resume the device can't be restarted properly. 1467 * We might also get here if this happens during HW reset, which is a 1468 * slightly different situation and we need to drop all connections in 1469 * the latter case. 1470 * 1471 * Ask cfg80211 to turn off all interfaces, this will result in more 1472 * warnings but at least we'll then get into a clean stopped state. 1473 */ 1474 1475 local->resuming = false; 1476 local->suspended = false; 1477 local->started = false; 1478 1479 /* scheduled scan clearly can't be running any more, but tell 1480 * cfg80211 and clear local state 1481 */ 1482 ieee80211_sched_scan_end(local); 1483 1484 list_for_each_entry(sdata, &local->interfaces, list) 1485 sdata->flags &= ~IEEE80211_SDATA_IN_DRIVER; 1486 1487 /* Mark channel contexts as not being in the driver any more to avoid 1488 * removing them from the driver during the shutdown process... 1489 */ 1490 mutex_lock(&local->chanctx_mtx); 1491 list_for_each_entry(ctx, &local->chanctx_list, list) 1492 ctx->driver_present = false; 1493 mutex_unlock(&local->chanctx_mtx); 1494 1495 cfg80211_shutdown_all_interfaces(local->hw.wiphy); 1496 } 1497 1498 static void ieee80211_assign_chanctx(struct ieee80211_local *local, 1499 struct ieee80211_sub_if_data *sdata) 1500 { 1501 struct ieee80211_chanctx_conf *conf; 1502 struct ieee80211_chanctx *ctx; 1503 1504 if (!local->use_chanctx) 1505 return; 1506 1507 mutex_lock(&local->chanctx_mtx); 1508 conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 1509 lockdep_is_held(&local->chanctx_mtx)); 1510 if (conf) { 1511 ctx = container_of(conf, struct ieee80211_chanctx, conf); 1512 drv_assign_vif_chanctx(local, sdata, ctx); 1513 } 1514 mutex_unlock(&local->chanctx_mtx); 1515 } 1516 1517 int ieee80211_reconfig(struct ieee80211_local *local) 1518 { 1519 struct ieee80211_hw *hw = &local->hw; 1520 struct ieee80211_sub_if_data *sdata; 1521 struct ieee80211_chanctx *ctx; 1522 struct sta_info *sta; 1523 int res, i; 1524 bool reconfig_due_to_wowlan = false; 1525 struct ieee80211_sub_if_data *sched_scan_sdata; 1526 bool sched_scan_stopped = false; 1527 1528 #ifdef CONFIG_PM 1529 if (local->suspended) 1530 local->resuming = true; 1531 1532 if (local->wowlan) { 1533 res = drv_resume(local); 1534 local->wowlan = false; 1535 if (res < 0) { 1536 local->resuming = false; 1537 return res; 1538 } 1539 if (res == 0) 1540 goto wake_up; 1541 WARN_ON(res > 1); 1542 /* 1543 * res is 1, which means the driver requested 1544 * to go through a regular reset on wakeup. 1545 */ 1546 reconfig_due_to_wowlan = true; 1547 } 1548 #endif 1549 /* everything else happens only if HW was up & running */ 1550 if (!local->open_count) 1551 goto wake_up; 1552 1553 /* 1554 * Upon resume hardware can sometimes be goofy due to 1555 * various platform / driver / bus issues, so restarting 1556 * the device may at times not work immediately. Propagate 1557 * the error. 1558 */ 1559 res = drv_start(local); 1560 if (res) { 1561 if (local->suspended) 1562 WARN(1, "Hardware became unavailable upon resume. This could be a software issue prior to suspend or a hardware issue.\n"); 1563 else 1564 WARN(1, "Hardware became unavailable during restart.\n"); 1565 ieee80211_handle_reconfig_failure(local); 1566 return res; 1567 } 1568 1569 /* setup fragmentation threshold */ 1570 drv_set_frag_threshold(local, hw->wiphy->frag_threshold); 1571 1572 /* setup RTS threshold */ 1573 drv_set_rts_threshold(local, hw->wiphy->rts_threshold); 1574 1575 /* reset coverage class */ 1576 drv_set_coverage_class(local, hw->wiphy->coverage_class); 1577 1578 ieee80211_led_radio(local, true); 1579 ieee80211_mod_tpt_led_trig(local, 1580 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0); 1581 1582 /* add interfaces */ 1583 sdata = rtnl_dereference(local->monitor_sdata); 1584 if (sdata) { 1585 /* in HW restart it exists already */ 1586 WARN_ON(local->resuming); 1587 res = drv_add_interface(local, sdata); 1588 if (WARN_ON(res)) { 1589 RCU_INIT_POINTER(local->monitor_sdata, NULL); 1590 synchronize_net(); 1591 kfree(sdata); 1592 } 1593 } 1594 1595 list_for_each_entry(sdata, &local->interfaces, list) { 1596 if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN && 1597 sdata->vif.type != NL80211_IFTYPE_MONITOR && 1598 ieee80211_sdata_running(sdata)) 1599 res = drv_add_interface(local, sdata); 1600 } 1601 1602 /* add channel contexts */ 1603 if (local->use_chanctx) { 1604 mutex_lock(&local->chanctx_mtx); 1605 list_for_each_entry(ctx, &local->chanctx_list, list) 1606 WARN_ON(drv_add_chanctx(local, ctx)); 1607 mutex_unlock(&local->chanctx_mtx); 1608 1609 list_for_each_entry(sdata, &local->interfaces, list) { 1610 if (!ieee80211_sdata_running(sdata)) 1611 continue; 1612 ieee80211_assign_chanctx(local, sdata); 1613 } 1614 1615 sdata = rtnl_dereference(local->monitor_sdata); 1616 if (sdata && ieee80211_sdata_running(sdata)) 1617 ieee80211_assign_chanctx(local, sdata); 1618 } 1619 1620 /* add STAs back */ 1621 mutex_lock(&local->sta_mtx); 1622 list_for_each_entry(sta, &local->sta_list, list) { 1623 enum ieee80211_sta_state state; 1624 1625 if (!sta->uploaded) 1626 continue; 1627 1628 /* AP-mode stations will be added later */ 1629 if (sta->sdata->vif.type == NL80211_IFTYPE_AP) 1630 continue; 1631 1632 for (state = IEEE80211_STA_NOTEXIST; 1633 state < sta->sta_state; state++) 1634 WARN_ON(drv_sta_state(local, sta->sdata, sta, state, 1635 state + 1)); 1636 } 1637 mutex_unlock(&local->sta_mtx); 1638 1639 /* reconfigure tx conf */ 1640 if (hw->queues >= IEEE80211_NUM_ACS) { 1641 list_for_each_entry(sdata, &local->interfaces, list) { 1642 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN || 1643 sdata->vif.type == NL80211_IFTYPE_MONITOR || 1644 !ieee80211_sdata_running(sdata)) 1645 continue; 1646 1647 for (i = 0; i < IEEE80211_NUM_ACS; i++) 1648 drv_conf_tx(local, sdata, i, 1649 &sdata->tx_conf[i]); 1650 } 1651 } 1652 1653 /* reconfigure hardware */ 1654 ieee80211_hw_config(local, ~0); 1655 1656 ieee80211_configure_filter(local); 1657 1658 /* Finally also reconfigure all the BSS information */ 1659 list_for_each_entry(sdata, &local->interfaces, list) { 1660 u32 changed; 1661 1662 if (!ieee80211_sdata_running(sdata)) 1663 continue; 1664 1665 /* common change flags for all interface types */ 1666 changed = BSS_CHANGED_ERP_CTS_PROT | 1667 BSS_CHANGED_ERP_PREAMBLE | 1668 BSS_CHANGED_ERP_SLOT | 1669 BSS_CHANGED_HT | 1670 BSS_CHANGED_BASIC_RATES | 1671 BSS_CHANGED_BEACON_INT | 1672 BSS_CHANGED_BSSID | 1673 BSS_CHANGED_CQM | 1674 BSS_CHANGED_QOS | 1675 BSS_CHANGED_IDLE | 1676 BSS_CHANGED_TXPOWER; 1677 1678 switch (sdata->vif.type) { 1679 case NL80211_IFTYPE_STATION: 1680 changed |= BSS_CHANGED_ASSOC | 1681 BSS_CHANGED_ARP_FILTER | 1682 BSS_CHANGED_PS; 1683 1684 /* Re-send beacon info report to the driver */ 1685 if (sdata->u.mgd.have_beacon) 1686 changed |= BSS_CHANGED_BEACON_INFO; 1687 1688 sdata_lock(sdata); 1689 ieee80211_bss_info_change_notify(sdata, changed); 1690 sdata_unlock(sdata); 1691 break; 1692 case NL80211_IFTYPE_ADHOC: 1693 changed |= BSS_CHANGED_IBSS; 1694 /* fall through */ 1695 case NL80211_IFTYPE_AP: 1696 changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS; 1697 1698 if (sdata->vif.type == NL80211_IFTYPE_AP) { 1699 changed |= BSS_CHANGED_AP_PROBE_RESP; 1700 1701 if (rcu_access_pointer(sdata->u.ap.beacon)) 1702 drv_start_ap(local, sdata); 1703 } 1704 1705 /* fall through */ 1706 case NL80211_IFTYPE_MESH_POINT: 1707 if (sdata->vif.bss_conf.enable_beacon) { 1708 changed |= BSS_CHANGED_BEACON | 1709 BSS_CHANGED_BEACON_ENABLED; 1710 ieee80211_bss_info_change_notify(sdata, changed); 1711 } 1712 break; 1713 case NL80211_IFTYPE_WDS: 1714 case NL80211_IFTYPE_AP_VLAN: 1715 case NL80211_IFTYPE_MONITOR: 1716 case NL80211_IFTYPE_P2P_DEVICE: 1717 /* nothing to do */ 1718 break; 1719 case NL80211_IFTYPE_UNSPECIFIED: 1720 case NUM_NL80211_IFTYPES: 1721 case NL80211_IFTYPE_P2P_CLIENT: 1722 case NL80211_IFTYPE_P2P_GO: 1723 WARN_ON(1); 1724 break; 1725 } 1726 } 1727 1728 ieee80211_recalc_ps(local, -1); 1729 1730 /* 1731 * The sta might be in psm against the ap (e.g. because 1732 * this was the state before a hw restart), so we 1733 * explicitly send a null packet in order to make sure 1734 * it'll sync against the ap (and get out of psm). 1735 */ 1736 if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) { 1737 list_for_each_entry(sdata, &local->interfaces, list) { 1738 if (sdata->vif.type != NL80211_IFTYPE_STATION) 1739 continue; 1740 if (!sdata->u.mgd.associated) 1741 continue; 1742 1743 ieee80211_send_nullfunc(local, sdata, 0); 1744 } 1745 } 1746 1747 /* APs are now beaconing, add back stations */ 1748 mutex_lock(&local->sta_mtx); 1749 list_for_each_entry(sta, &local->sta_list, list) { 1750 enum ieee80211_sta_state state; 1751 1752 if (!sta->uploaded) 1753 continue; 1754 1755 if (sta->sdata->vif.type != NL80211_IFTYPE_AP) 1756 continue; 1757 1758 for (state = IEEE80211_STA_NOTEXIST; 1759 state < sta->sta_state; state++) 1760 WARN_ON(drv_sta_state(local, sta->sdata, sta, state, 1761 state + 1)); 1762 } 1763 mutex_unlock(&local->sta_mtx); 1764 1765 /* add back keys */ 1766 list_for_each_entry(sdata, &local->interfaces, list) 1767 if (ieee80211_sdata_running(sdata)) 1768 ieee80211_enable_keys(sdata); 1769 1770 wake_up: 1771 local->in_reconfig = false; 1772 barrier(); 1773 1774 if (local->monitors == local->open_count && local->monitors > 0) 1775 ieee80211_add_virtual_monitor(local); 1776 1777 /* 1778 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation 1779 * sessions can be established after a resume. 1780 * 1781 * Also tear down aggregation sessions since reconfiguring 1782 * them in a hardware restart scenario is not easily done 1783 * right now, and the hardware will have lost information 1784 * about the sessions, but we and the AP still think they 1785 * are active. This is really a workaround though. 1786 */ 1787 if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) { 1788 mutex_lock(&local->sta_mtx); 1789 1790 list_for_each_entry(sta, &local->sta_list, list) { 1791 ieee80211_sta_tear_down_BA_sessions( 1792 sta, AGG_STOP_LOCAL_REQUEST); 1793 clear_sta_flag(sta, WLAN_STA_BLOCK_BA); 1794 } 1795 1796 mutex_unlock(&local->sta_mtx); 1797 } 1798 1799 ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP, 1800 IEEE80211_QUEUE_STOP_REASON_SUSPEND); 1801 1802 /* 1803 * Reconfigure sched scan if it was interrupted by FW restart or 1804 * suspend. 1805 */ 1806 mutex_lock(&local->mtx); 1807 sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata, 1808 lockdep_is_held(&local->mtx)); 1809 if (sched_scan_sdata && local->sched_scan_req) 1810 /* 1811 * Sched scan stopped, but we don't want to report it. Instead, 1812 * we're trying to reschedule. 1813 */ 1814 if (__ieee80211_request_sched_scan_start(sched_scan_sdata, 1815 local->sched_scan_req)) 1816 sched_scan_stopped = true; 1817 mutex_unlock(&local->mtx); 1818 1819 if (sched_scan_stopped) 1820 cfg80211_sched_scan_stopped_rtnl(local->hw.wiphy); 1821 1822 /* 1823 * If this is for hw restart things are still running. 1824 * We may want to change that later, however. 1825 */ 1826 if (!local->suspended || reconfig_due_to_wowlan) 1827 drv_restart_complete(local); 1828 1829 if (!local->suspended) 1830 return 0; 1831 1832 #ifdef CONFIG_PM 1833 /* first set suspended false, then resuming */ 1834 local->suspended = false; 1835 mb(); 1836 local->resuming = false; 1837 1838 list_for_each_entry(sdata, &local->interfaces, list) { 1839 if (!ieee80211_sdata_running(sdata)) 1840 continue; 1841 if (sdata->vif.type == NL80211_IFTYPE_STATION) 1842 ieee80211_sta_restart(sdata); 1843 } 1844 1845 mod_timer(&local->sta_cleanup, jiffies + 1); 1846 #else 1847 WARN_ON(1); 1848 #endif 1849 1850 return 0; 1851 } 1852 1853 void ieee80211_resume_disconnect(struct ieee80211_vif *vif) 1854 { 1855 struct ieee80211_sub_if_data *sdata; 1856 struct ieee80211_local *local; 1857 struct ieee80211_key *key; 1858 1859 if (WARN_ON(!vif)) 1860 return; 1861 1862 sdata = vif_to_sdata(vif); 1863 local = sdata->local; 1864 1865 if (WARN_ON(!local->resuming)) 1866 return; 1867 1868 if (WARN_ON(vif->type != NL80211_IFTYPE_STATION)) 1869 return; 1870 1871 sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME; 1872 1873 mutex_lock(&local->key_mtx); 1874 list_for_each_entry(key, &sdata->key_list, list) 1875 key->flags |= KEY_FLAG_TAINTED; 1876 mutex_unlock(&local->key_mtx); 1877 } 1878 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect); 1879 1880 void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata) 1881 { 1882 struct ieee80211_local *local = sdata->local; 1883 struct ieee80211_chanctx_conf *chanctx_conf; 1884 struct ieee80211_chanctx *chanctx; 1885 1886 mutex_lock(&local->chanctx_mtx); 1887 1888 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 1889 lockdep_is_held(&local->chanctx_mtx)); 1890 1891 if (WARN_ON_ONCE(!chanctx_conf)) 1892 goto unlock; 1893 1894 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf); 1895 ieee80211_recalc_smps_chanctx(local, chanctx); 1896 unlock: 1897 mutex_unlock(&local->chanctx_mtx); 1898 } 1899 1900 void ieee80211_recalc_min_chandef(struct ieee80211_sub_if_data *sdata) 1901 { 1902 struct ieee80211_local *local = sdata->local; 1903 struct ieee80211_chanctx_conf *chanctx_conf; 1904 struct ieee80211_chanctx *chanctx; 1905 1906 mutex_lock(&local->chanctx_mtx); 1907 1908 chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf, 1909 lockdep_is_held(&local->chanctx_mtx)); 1910 1911 if (WARN_ON_ONCE(!chanctx_conf)) 1912 goto unlock; 1913 1914 chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf); 1915 ieee80211_recalc_chanctx_min_def(local, chanctx); 1916 unlock: 1917 mutex_unlock(&local->chanctx_mtx); 1918 } 1919 1920 static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id) 1921 { 1922 int i; 1923 1924 for (i = 0; i < n_ids; i++) 1925 if (ids[i] == id) 1926 return true; 1927 return false; 1928 } 1929 1930 /** 1931 * ieee80211_ie_split - split an IE buffer according to ordering 1932 * 1933 * @ies: the IE buffer 1934 * @ielen: the length of the IE buffer 1935 * @ids: an array with element IDs that are allowed before 1936 * the split 1937 * @n_ids: the size of the element ID array 1938 * @offset: offset where to start splitting in the buffer 1939 * 1940 * This function splits an IE buffer by updating the @offset 1941 * variable to point to the location where the buffer should be 1942 * split. 1943 * 1944 * It assumes that the given IE buffer is well-formed, this 1945 * has to be guaranteed by the caller! 1946 * 1947 * It also assumes that the IEs in the buffer are ordered 1948 * correctly, if not the result of using this function will not 1949 * be ordered correctly either, i.e. it does no reordering. 1950 * 1951 * The function returns the offset where the next part of the 1952 * buffer starts, which may be @ielen if the entire (remainder) 1953 * of the buffer should be used. 1954 */ 1955 size_t ieee80211_ie_split(const u8 *ies, size_t ielen, 1956 const u8 *ids, int n_ids, size_t offset) 1957 { 1958 size_t pos = offset; 1959 1960 while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos])) 1961 pos += 2 + ies[pos + 1]; 1962 1963 return pos; 1964 } 1965 1966 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset) 1967 { 1968 size_t pos = offset; 1969 1970 while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC) 1971 pos += 2 + ies[pos + 1]; 1972 1973 return pos; 1974 } 1975 1976 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata, 1977 int rssi_min_thold, 1978 int rssi_max_thold) 1979 { 1980 trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold); 1981 1982 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION)) 1983 return; 1984 1985 /* 1986 * Scale up threshold values before storing it, as the RSSI averaging 1987 * algorithm uses a scaled up value as well. Change this scaling 1988 * factor if the RSSI averaging algorithm changes. 1989 */ 1990 sdata->u.mgd.rssi_min_thold = rssi_min_thold*16; 1991 sdata->u.mgd.rssi_max_thold = rssi_max_thold*16; 1992 } 1993 1994 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif, 1995 int rssi_min_thold, 1996 int rssi_max_thold) 1997 { 1998 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 1999 2000 WARN_ON(rssi_min_thold == rssi_max_thold || 2001 rssi_min_thold > rssi_max_thold); 2002 2003 _ieee80211_enable_rssi_reports(sdata, rssi_min_thold, 2004 rssi_max_thold); 2005 } 2006 EXPORT_SYMBOL(ieee80211_enable_rssi_reports); 2007 2008 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif) 2009 { 2010 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2011 2012 _ieee80211_enable_rssi_reports(sdata, 0, 0); 2013 } 2014 EXPORT_SYMBOL(ieee80211_disable_rssi_reports); 2015 2016 u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap, 2017 u16 cap) 2018 { 2019 __le16 tmp; 2020 2021 *pos++ = WLAN_EID_HT_CAPABILITY; 2022 *pos++ = sizeof(struct ieee80211_ht_cap); 2023 memset(pos, 0, sizeof(struct ieee80211_ht_cap)); 2024 2025 /* capability flags */ 2026 tmp = cpu_to_le16(cap); 2027 memcpy(pos, &tmp, sizeof(u16)); 2028 pos += sizeof(u16); 2029 2030 /* AMPDU parameters */ 2031 *pos++ = ht_cap->ampdu_factor | 2032 (ht_cap->ampdu_density << 2033 IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT); 2034 2035 /* MCS set */ 2036 memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs)); 2037 pos += sizeof(ht_cap->mcs); 2038 2039 /* extended capabilities */ 2040 pos += sizeof(__le16); 2041 2042 /* BF capabilities */ 2043 pos += sizeof(__le32); 2044 2045 /* antenna selection */ 2046 pos += sizeof(u8); 2047 2048 return pos; 2049 } 2050 2051 u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap, 2052 u32 cap) 2053 { 2054 __le32 tmp; 2055 2056 *pos++ = WLAN_EID_VHT_CAPABILITY; 2057 *pos++ = sizeof(struct ieee80211_vht_cap); 2058 memset(pos, 0, sizeof(struct ieee80211_vht_cap)); 2059 2060 /* capability flags */ 2061 tmp = cpu_to_le32(cap); 2062 memcpy(pos, &tmp, sizeof(u32)); 2063 pos += sizeof(u32); 2064 2065 /* VHT MCS set */ 2066 memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs)); 2067 pos += sizeof(vht_cap->vht_mcs); 2068 2069 return pos; 2070 } 2071 2072 u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap, 2073 const struct cfg80211_chan_def *chandef, 2074 u16 prot_mode) 2075 { 2076 struct ieee80211_ht_operation *ht_oper; 2077 /* Build HT Information */ 2078 *pos++ = WLAN_EID_HT_OPERATION; 2079 *pos++ = sizeof(struct ieee80211_ht_operation); 2080 ht_oper = (struct ieee80211_ht_operation *)pos; 2081 ht_oper->primary_chan = ieee80211_frequency_to_channel( 2082 chandef->chan->center_freq); 2083 switch (chandef->width) { 2084 case NL80211_CHAN_WIDTH_160: 2085 case NL80211_CHAN_WIDTH_80P80: 2086 case NL80211_CHAN_WIDTH_80: 2087 case NL80211_CHAN_WIDTH_40: 2088 if (chandef->center_freq1 > chandef->chan->center_freq) 2089 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; 2090 else 2091 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW; 2092 break; 2093 default: 2094 ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE; 2095 break; 2096 } 2097 if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 && 2098 chandef->width != NL80211_CHAN_WIDTH_20_NOHT && 2099 chandef->width != NL80211_CHAN_WIDTH_20) 2100 ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY; 2101 2102 ht_oper->operation_mode = cpu_to_le16(prot_mode); 2103 ht_oper->stbc_param = 0x0000; 2104 2105 /* It seems that Basic MCS set and Supported MCS set 2106 are identical for the first 10 bytes */ 2107 memset(&ht_oper->basic_set, 0, 16); 2108 memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10); 2109 2110 return pos + sizeof(struct ieee80211_ht_operation); 2111 } 2112 2113 void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan, 2114 const struct ieee80211_ht_operation *ht_oper, 2115 struct cfg80211_chan_def *chandef) 2116 { 2117 enum nl80211_channel_type channel_type; 2118 2119 if (!ht_oper) { 2120 cfg80211_chandef_create(chandef, control_chan, 2121 NL80211_CHAN_NO_HT); 2122 return; 2123 } 2124 2125 switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) { 2126 case IEEE80211_HT_PARAM_CHA_SEC_NONE: 2127 channel_type = NL80211_CHAN_HT20; 2128 break; 2129 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE: 2130 channel_type = NL80211_CHAN_HT40PLUS; 2131 break; 2132 case IEEE80211_HT_PARAM_CHA_SEC_BELOW: 2133 channel_type = NL80211_CHAN_HT40MINUS; 2134 break; 2135 default: 2136 channel_type = NL80211_CHAN_NO_HT; 2137 } 2138 2139 cfg80211_chandef_create(chandef, control_chan, channel_type); 2140 } 2141 2142 int ieee80211_parse_bitrates(struct cfg80211_chan_def *chandef, 2143 const struct ieee80211_supported_band *sband, 2144 const u8 *srates, int srates_len, u32 *rates) 2145 { 2146 u32 rate_flags = ieee80211_chandef_rate_flags(chandef); 2147 int shift = ieee80211_chandef_get_shift(chandef); 2148 struct ieee80211_rate *br; 2149 int brate, rate, i, j, count = 0; 2150 2151 *rates = 0; 2152 2153 for (i = 0; i < srates_len; i++) { 2154 rate = srates[i] & 0x7f; 2155 2156 for (j = 0; j < sband->n_bitrates; j++) { 2157 br = &sband->bitrates[j]; 2158 if ((rate_flags & br->flags) != rate_flags) 2159 continue; 2160 2161 brate = DIV_ROUND_UP(br->bitrate, (1 << shift) * 5); 2162 if (brate == rate) { 2163 *rates |= BIT(j); 2164 count++; 2165 break; 2166 } 2167 } 2168 } 2169 return count; 2170 } 2171 2172 int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata, 2173 struct sk_buff *skb, bool need_basic, 2174 enum ieee80211_band band) 2175 { 2176 struct ieee80211_local *local = sdata->local; 2177 struct ieee80211_supported_band *sband; 2178 int rate, shift; 2179 u8 i, rates, *pos; 2180 u32 basic_rates = sdata->vif.bss_conf.basic_rates; 2181 u32 rate_flags; 2182 2183 shift = ieee80211_vif_get_shift(&sdata->vif); 2184 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 2185 sband = local->hw.wiphy->bands[band]; 2186 rates = 0; 2187 for (i = 0; i < sband->n_bitrates; i++) { 2188 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2189 continue; 2190 rates++; 2191 } 2192 if (rates > 8) 2193 rates = 8; 2194 2195 if (skb_tailroom(skb) < rates + 2) 2196 return -ENOMEM; 2197 2198 pos = skb_put(skb, rates + 2); 2199 *pos++ = WLAN_EID_SUPP_RATES; 2200 *pos++ = rates; 2201 for (i = 0; i < rates; i++) { 2202 u8 basic = 0; 2203 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2204 continue; 2205 2206 if (need_basic && basic_rates & BIT(i)) 2207 basic = 0x80; 2208 rate = sband->bitrates[i].bitrate; 2209 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate, 2210 5 * (1 << shift)); 2211 *pos++ = basic | (u8) rate; 2212 } 2213 2214 return 0; 2215 } 2216 2217 int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata, 2218 struct sk_buff *skb, bool need_basic, 2219 enum ieee80211_band band) 2220 { 2221 struct ieee80211_local *local = sdata->local; 2222 struct ieee80211_supported_band *sband; 2223 int rate, shift; 2224 u8 i, exrates, *pos; 2225 u32 basic_rates = sdata->vif.bss_conf.basic_rates; 2226 u32 rate_flags; 2227 2228 rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef); 2229 shift = ieee80211_vif_get_shift(&sdata->vif); 2230 2231 sband = local->hw.wiphy->bands[band]; 2232 exrates = 0; 2233 for (i = 0; i < sband->n_bitrates; i++) { 2234 if ((rate_flags & sband->bitrates[i].flags) != rate_flags) 2235 continue; 2236 exrates++; 2237 } 2238 2239 if (exrates > 8) 2240 exrates -= 8; 2241 else 2242 exrates = 0; 2243 2244 if (skb_tailroom(skb) < exrates + 2) 2245 return -ENOMEM; 2246 2247 if (exrates) { 2248 pos = skb_put(skb, exrates + 2); 2249 *pos++ = WLAN_EID_EXT_SUPP_RATES; 2250 *pos++ = exrates; 2251 for (i = 8; i < sband->n_bitrates; i++) { 2252 u8 basic = 0; 2253 if ((rate_flags & sband->bitrates[i].flags) 2254 != rate_flags) 2255 continue; 2256 if (need_basic && basic_rates & BIT(i)) 2257 basic = 0x80; 2258 rate = DIV_ROUND_UP(sband->bitrates[i].bitrate, 2259 5 * (1 << shift)); 2260 *pos++ = basic | (u8) rate; 2261 } 2262 } 2263 return 0; 2264 } 2265 2266 int ieee80211_ave_rssi(struct ieee80211_vif *vif) 2267 { 2268 struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif); 2269 struct ieee80211_if_managed *ifmgd = &sdata->u.mgd; 2270 2271 if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) { 2272 /* non-managed type inferfaces */ 2273 return 0; 2274 } 2275 return ifmgd->ave_beacon_signal / 16; 2276 } 2277 EXPORT_SYMBOL_GPL(ieee80211_ave_rssi); 2278 2279 u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs) 2280 { 2281 if (!mcs) 2282 return 1; 2283 2284 /* TODO: consider rx_highest */ 2285 2286 if (mcs->rx_mask[3]) 2287 return 4; 2288 if (mcs->rx_mask[2]) 2289 return 3; 2290 if (mcs->rx_mask[1]) 2291 return 2; 2292 return 1; 2293 } 2294 2295 /** 2296 * ieee80211_calculate_rx_timestamp - calculate timestamp in frame 2297 * @local: mac80211 hw info struct 2298 * @status: RX status 2299 * @mpdu_len: total MPDU length (including FCS) 2300 * @mpdu_offset: offset into MPDU to calculate timestamp at 2301 * 2302 * This function calculates the RX timestamp at the given MPDU offset, taking 2303 * into account what the RX timestamp was. An offset of 0 will just normalize 2304 * the timestamp to TSF at beginning of MPDU reception. 2305 */ 2306 u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local, 2307 struct ieee80211_rx_status *status, 2308 unsigned int mpdu_len, 2309 unsigned int mpdu_offset) 2310 { 2311 u64 ts = status->mactime; 2312 struct rate_info ri; 2313 u16 rate; 2314 2315 if (WARN_ON(!ieee80211_have_rx_timestamp(status))) 2316 return 0; 2317 2318 memset(&ri, 0, sizeof(ri)); 2319 2320 /* Fill cfg80211 rate info */ 2321 if (status->flag & RX_FLAG_HT) { 2322 ri.mcs = status->rate_idx; 2323 ri.flags |= RATE_INFO_FLAGS_MCS; 2324 if (status->flag & RX_FLAG_40MHZ) 2325 ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 2326 if (status->flag & RX_FLAG_SHORT_GI) 2327 ri.flags |= RATE_INFO_FLAGS_SHORT_GI; 2328 } else if (status->flag & RX_FLAG_VHT) { 2329 ri.flags |= RATE_INFO_FLAGS_VHT_MCS; 2330 ri.mcs = status->rate_idx; 2331 ri.nss = status->vht_nss; 2332 if (status->flag & RX_FLAG_40MHZ) 2333 ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH; 2334 if (status->vht_flag & RX_VHT_FLAG_80MHZ) 2335 ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH; 2336 if (status->vht_flag & RX_VHT_FLAG_80P80MHZ) 2337 ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH; 2338 if (status->vht_flag & RX_VHT_FLAG_160MHZ) 2339 ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH; 2340 if (status->flag & RX_FLAG_SHORT_GI) 2341 ri.flags |= RATE_INFO_FLAGS_SHORT_GI; 2342 } else { 2343 struct ieee80211_supported_band *sband; 2344 int shift = 0; 2345 int bitrate; 2346 2347 if (status->flag & RX_FLAG_10MHZ) 2348 shift = 1; 2349 if (status->flag & RX_FLAG_5MHZ) 2350 shift = 2; 2351 2352 sband = local->hw.wiphy->bands[status->band]; 2353 bitrate = sband->bitrates[status->rate_idx].bitrate; 2354 ri.legacy = DIV_ROUND_UP(bitrate, (1 << shift)); 2355 } 2356 2357 rate = cfg80211_calculate_bitrate(&ri); 2358 if (WARN_ONCE(!rate, 2359 "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n", 2360 status->flag, status->rate_idx, status->vht_nss)) 2361 return 0; 2362 2363 /* rewind from end of MPDU */ 2364 if (status->flag & RX_FLAG_MACTIME_END) 2365 ts -= mpdu_len * 8 * 10 / rate; 2366 2367 ts += mpdu_offset * 8 * 10 / rate; 2368 2369 return ts; 2370 } 2371 2372 void ieee80211_dfs_cac_cancel(struct ieee80211_local *local) 2373 { 2374 struct ieee80211_sub_if_data *sdata; 2375 struct cfg80211_chan_def chandef; 2376 2377 mutex_lock(&local->mtx); 2378 mutex_lock(&local->iflist_mtx); 2379 list_for_each_entry(sdata, &local->interfaces, list) { 2380 /* it might be waiting for the local->mtx, but then 2381 * by the time it gets it, sdata->wdev.cac_started 2382 * will no longer be true 2383 */ 2384 cancel_delayed_work(&sdata->dfs_cac_timer_work); 2385 2386 if (sdata->wdev.cac_started) { 2387 chandef = sdata->vif.bss_conf.chandef; 2388 ieee80211_vif_release_channel(sdata); 2389 cfg80211_cac_event(sdata->dev, 2390 &chandef, 2391 NL80211_RADAR_CAC_ABORTED, 2392 GFP_KERNEL); 2393 } 2394 } 2395 mutex_unlock(&local->iflist_mtx); 2396 mutex_unlock(&local->mtx); 2397 } 2398 2399 void ieee80211_dfs_radar_detected_work(struct work_struct *work) 2400 { 2401 struct ieee80211_local *local = 2402 container_of(work, struct ieee80211_local, radar_detected_work); 2403 struct cfg80211_chan_def chandef = local->hw.conf.chandef; 2404 2405 ieee80211_dfs_cac_cancel(local); 2406 2407 if (local->use_chanctx) 2408 /* currently not handled */ 2409 WARN_ON(1); 2410 else 2411 cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL); 2412 } 2413 2414 void ieee80211_radar_detected(struct ieee80211_hw *hw) 2415 { 2416 struct ieee80211_local *local = hw_to_local(hw); 2417 2418 trace_api_radar_detected(local); 2419 2420 ieee80211_queue_work(hw, &local->radar_detected_work); 2421 } 2422 EXPORT_SYMBOL(ieee80211_radar_detected); 2423 2424 u32 ieee80211_chandef_downgrade(struct cfg80211_chan_def *c) 2425 { 2426 u32 ret; 2427 int tmp; 2428 2429 switch (c->width) { 2430 case NL80211_CHAN_WIDTH_20: 2431 c->width = NL80211_CHAN_WIDTH_20_NOHT; 2432 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2433 break; 2434 case NL80211_CHAN_WIDTH_40: 2435 c->width = NL80211_CHAN_WIDTH_20; 2436 c->center_freq1 = c->chan->center_freq; 2437 ret = IEEE80211_STA_DISABLE_40MHZ | 2438 IEEE80211_STA_DISABLE_VHT; 2439 break; 2440 case NL80211_CHAN_WIDTH_80: 2441 tmp = (30 + c->chan->center_freq - c->center_freq1)/20; 2442 /* n_P40 */ 2443 tmp /= 2; 2444 /* freq_P40 */ 2445 c->center_freq1 = c->center_freq1 - 20 + 40 * tmp; 2446 c->width = NL80211_CHAN_WIDTH_40; 2447 ret = IEEE80211_STA_DISABLE_VHT; 2448 break; 2449 case NL80211_CHAN_WIDTH_80P80: 2450 c->center_freq2 = 0; 2451 c->width = NL80211_CHAN_WIDTH_80; 2452 ret = IEEE80211_STA_DISABLE_80P80MHZ | 2453 IEEE80211_STA_DISABLE_160MHZ; 2454 break; 2455 case NL80211_CHAN_WIDTH_160: 2456 /* n_P20 */ 2457 tmp = (70 + c->chan->center_freq - c->center_freq1)/20; 2458 /* n_P80 */ 2459 tmp /= 4; 2460 c->center_freq1 = c->center_freq1 - 40 + 80 * tmp; 2461 c->width = NL80211_CHAN_WIDTH_80; 2462 ret = IEEE80211_STA_DISABLE_80P80MHZ | 2463 IEEE80211_STA_DISABLE_160MHZ; 2464 break; 2465 default: 2466 case NL80211_CHAN_WIDTH_20_NOHT: 2467 WARN_ON_ONCE(1); 2468 c->width = NL80211_CHAN_WIDTH_20_NOHT; 2469 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2470 break; 2471 case NL80211_CHAN_WIDTH_5: 2472 case NL80211_CHAN_WIDTH_10: 2473 WARN_ON_ONCE(1); 2474 /* keep c->width */ 2475 ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT; 2476 break; 2477 } 2478 2479 WARN_ON_ONCE(!cfg80211_chandef_valid(c)); 2480 2481 return ret; 2482 } 2483 2484 /* 2485 * Returns true if smps_mode_new is strictly more restrictive than 2486 * smps_mode_old. 2487 */ 2488 bool ieee80211_smps_is_restrictive(enum ieee80211_smps_mode smps_mode_old, 2489 enum ieee80211_smps_mode smps_mode_new) 2490 { 2491 if (WARN_ON_ONCE(smps_mode_old == IEEE80211_SMPS_AUTOMATIC || 2492 smps_mode_new == IEEE80211_SMPS_AUTOMATIC)) 2493 return false; 2494 2495 switch (smps_mode_old) { 2496 case IEEE80211_SMPS_STATIC: 2497 return false; 2498 case IEEE80211_SMPS_DYNAMIC: 2499 return smps_mode_new == IEEE80211_SMPS_STATIC; 2500 case IEEE80211_SMPS_OFF: 2501 return smps_mode_new != IEEE80211_SMPS_OFF; 2502 default: 2503 WARN_ON(1); 2504 } 2505 2506 return false; 2507 } 2508 2509 int ieee80211_send_action_csa(struct ieee80211_sub_if_data *sdata, 2510 struct cfg80211_csa_settings *csa_settings) 2511 { 2512 struct sk_buff *skb; 2513 struct ieee80211_mgmt *mgmt; 2514 struct ieee80211_local *local = sdata->local; 2515 int freq; 2516 int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.chan_switch) + 2517 sizeof(mgmt->u.action.u.chan_switch); 2518 u8 *pos; 2519 2520 if (sdata->vif.type != NL80211_IFTYPE_ADHOC && 2521 sdata->vif.type != NL80211_IFTYPE_MESH_POINT) 2522 return -EOPNOTSUPP; 2523 2524 skb = dev_alloc_skb(local->tx_headroom + hdr_len + 2525 5 + /* channel switch announcement element */ 2526 3 + /* secondary channel offset element */ 2527 8); /* mesh channel switch parameters element */ 2528 if (!skb) 2529 return -ENOMEM; 2530 2531 skb_reserve(skb, local->tx_headroom); 2532 mgmt = (struct ieee80211_mgmt *)skb_put(skb, hdr_len); 2533 memset(mgmt, 0, hdr_len); 2534 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | 2535 IEEE80211_STYPE_ACTION); 2536 2537 eth_broadcast_addr(mgmt->da); 2538 memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN); 2539 if (ieee80211_vif_is_mesh(&sdata->vif)) { 2540 memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN); 2541 } else { 2542 struct ieee80211_if_ibss *ifibss = &sdata->u.ibss; 2543 memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN); 2544 } 2545 mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT; 2546 mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH; 2547 pos = skb_put(skb, 5); 2548 *pos++ = WLAN_EID_CHANNEL_SWITCH; /* EID */ 2549 *pos++ = 3; /* IE length */ 2550 *pos++ = csa_settings->block_tx ? 1 : 0; /* CSA mode */ 2551 freq = csa_settings->chandef.chan->center_freq; 2552 *pos++ = ieee80211_frequency_to_channel(freq); /* channel */ 2553 *pos++ = csa_settings->count; /* count */ 2554 2555 if (csa_settings->chandef.width == NL80211_CHAN_WIDTH_40) { 2556 enum nl80211_channel_type ch_type; 2557 2558 skb_put(skb, 3); 2559 *pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET; /* EID */ 2560 *pos++ = 1; /* IE length */ 2561 ch_type = cfg80211_get_chandef_type(&csa_settings->chandef); 2562 if (ch_type == NL80211_CHAN_HT40PLUS) 2563 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE; 2564 else 2565 *pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW; 2566 } 2567 2568 if (ieee80211_vif_is_mesh(&sdata->vif)) { 2569 struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh; 2570 2571 skb_put(skb, 8); 2572 *pos++ = WLAN_EID_CHAN_SWITCH_PARAM; /* EID */ 2573 *pos++ = 6; /* IE length */ 2574 *pos++ = sdata->u.mesh.mshcfg.dot11MeshTTL; /* Mesh TTL */ 2575 *pos = 0x00; /* Mesh Flag: Tx Restrict, Initiator, Reason */ 2576 *pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR; 2577 *pos++ |= csa_settings->block_tx ? 2578 WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00; 2579 put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); /* Reason Cd */ 2580 pos += 2; 2581 put_unaligned_le16(ifmsh->pre_value, pos);/* Precedence Value */ 2582 pos += 2; 2583 } 2584 2585 ieee80211_tx_skb(sdata, skb); 2586 return 0; 2587 } 2588 2589 bool ieee80211_cs_valid(const struct ieee80211_cipher_scheme *cs) 2590 { 2591 return !(cs == NULL || cs->cipher == 0 || 2592 cs->hdr_len < cs->pn_len + cs->pn_off || 2593 cs->hdr_len <= cs->key_idx_off || 2594 cs->key_idx_shift > 7 || 2595 cs->key_idx_mask == 0); 2596 } 2597 2598 bool ieee80211_cs_list_valid(const struct ieee80211_cipher_scheme *cs, int n) 2599 { 2600 int i; 2601 2602 /* Ensure we have enough iftype bitmap space for all iftype values */ 2603 WARN_ON((NUM_NL80211_IFTYPES / 8 + 1) > sizeof(cs[0].iftype)); 2604 2605 for (i = 0; i < n; i++) 2606 if (!ieee80211_cs_valid(&cs[i])) 2607 return false; 2608 2609 return true; 2610 } 2611 2612 const struct ieee80211_cipher_scheme * 2613 ieee80211_cs_get(struct ieee80211_local *local, u32 cipher, 2614 enum nl80211_iftype iftype) 2615 { 2616 const struct ieee80211_cipher_scheme *l = local->hw.cipher_schemes; 2617 int n = local->hw.n_cipher_schemes; 2618 int i; 2619 const struct ieee80211_cipher_scheme *cs = NULL; 2620 2621 for (i = 0; i < n; i++) { 2622 if (l[i].cipher == cipher) { 2623 cs = &l[i]; 2624 break; 2625 } 2626 } 2627 2628 if (!cs || !(cs->iftype & BIT(iftype))) 2629 return NULL; 2630 2631 return cs; 2632 } 2633 2634 int ieee80211_cs_headroom(struct ieee80211_local *local, 2635 struct cfg80211_crypto_settings *crypto, 2636 enum nl80211_iftype iftype) 2637 { 2638 const struct ieee80211_cipher_scheme *cs; 2639 int headroom = IEEE80211_ENCRYPT_HEADROOM; 2640 int i; 2641 2642 for (i = 0; i < crypto->n_ciphers_pairwise; i++) { 2643 cs = ieee80211_cs_get(local, crypto->ciphers_pairwise[i], 2644 iftype); 2645 2646 if (cs && headroom < cs->hdr_len) 2647 headroom = cs->hdr_len; 2648 } 2649 2650 cs = ieee80211_cs_get(local, crypto->cipher_group, iftype); 2651 if (cs && headroom < cs->hdr_len) 2652 headroom = cs->hdr_len; 2653 2654 return headroom; 2655 } 2656 2657 static bool 2658 ieee80211_extend_noa_desc(struct ieee80211_noa_data *data, u32 tsf, int i) 2659 { 2660 s32 end = data->desc[i].start + data->desc[i].duration - (tsf + 1); 2661 int skip; 2662 2663 if (end > 0) 2664 return false; 2665 2666 /* End time is in the past, check for repetitions */ 2667 skip = DIV_ROUND_UP(-end, data->desc[i].interval); 2668 if (data->count[i] < 255) { 2669 if (data->count[i] <= skip) { 2670 data->count[i] = 0; 2671 return false; 2672 } 2673 2674 data->count[i] -= skip; 2675 } 2676 2677 data->desc[i].start += skip * data->desc[i].interval; 2678 2679 return true; 2680 } 2681 2682 static bool 2683 ieee80211_extend_absent_time(struct ieee80211_noa_data *data, u32 tsf, 2684 s32 *offset) 2685 { 2686 bool ret = false; 2687 int i; 2688 2689 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2690 s32 cur; 2691 2692 if (!data->count[i]) 2693 continue; 2694 2695 if (ieee80211_extend_noa_desc(data, tsf + *offset, i)) 2696 ret = true; 2697 2698 cur = data->desc[i].start - tsf; 2699 if (cur > *offset) 2700 continue; 2701 2702 cur = data->desc[i].start + data->desc[i].duration - tsf; 2703 if (cur > *offset) 2704 *offset = cur; 2705 } 2706 2707 return ret; 2708 } 2709 2710 static u32 2711 ieee80211_get_noa_absent_time(struct ieee80211_noa_data *data, u32 tsf) 2712 { 2713 s32 offset = 0; 2714 int tries = 0; 2715 /* 2716 * arbitrary limit, used to avoid infinite loops when combined NoA 2717 * descriptors cover the full time period. 2718 */ 2719 int max_tries = 5; 2720 2721 ieee80211_extend_absent_time(data, tsf, &offset); 2722 do { 2723 if (!ieee80211_extend_absent_time(data, tsf, &offset)) 2724 break; 2725 2726 tries++; 2727 } while (tries < max_tries); 2728 2729 return offset; 2730 } 2731 2732 void ieee80211_update_p2p_noa(struct ieee80211_noa_data *data, u32 tsf) 2733 { 2734 u32 next_offset = BIT(31) - 1; 2735 int i; 2736 2737 data->absent = 0; 2738 data->has_next_tsf = false; 2739 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2740 s32 start; 2741 2742 if (!data->count[i]) 2743 continue; 2744 2745 ieee80211_extend_noa_desc(data, tsf, i); 2746 start = data->desc[i].start - tsf; 2747 if (start <= 0) 2748 data->absent |= BIT(i); 2749 2750 if (next_offset > start) 2751 next_offset = start; 2752 2753 data->has_next_tsf = true; 2754 } 2755 2756 if (data->absent) 2757 next_offset = ieee80211_get_noa_absent_time(data, tsf); 2758 2759 data->next_tsf = tsf + next_offset; 2760 } 2761 EXPORT_SYMBOL(ieee80211_update_p2p_noa); 2762 2763 int ieee80211_parse_p2p_noa(const struct ieee80211_p2p_noa_attr *attr, 2764 struct ieee80211_noa_data *data, u32 tsf) 2765 { 2766 int ret = 0; 2767 int i; 2768 2769 memset(data, 0, sizeof(*data)); 2770 2771 for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) { 2772 const struct ieee80211_p2p_noa_desc *desc = &attr->desc[i]; 2773 2774 if (!desc->count || !desc->duration) 2775 continue; 2776 2777 data->count[i] = desc->count; 2778 data->desc[i].start = le32_to_cpu(desc->start_time); 2779 data->desc[i].duration = le32_to_cpu(desc->duration); 2780 data->desc[i].interval = le32_to_cpu(desc->interval); 2781 2782 if (data->count[i] > 1 && 2783 data->desc[i].interval < data->desc[i].duration) 2784 continue; 2785 2786 ieee80211_extend_noa_desc(data, tsf, i); 2787 ret++; 2788 } 2789 2790 if (ret) 2791 ieee80211_update_p2p_noa(data, tsf); 2792 2793 return ret; 2794 } 2795 EXPORT_SYMBOL(ieee80211_parse_p2p_noa); 2796 2797 void ieee80211_recalc_dtim(struct ieee80211_local *local, 2798 struct ieee80211_sub_if_data *sdata) 2799 { 2800 u64 tsf = drv_get_tsf(local, sdata); 2801 u64 dtim_count = 0; 2802 u16 beacon_int = sdata->vif.bss_conf.beacon_int * 1024; 2803 u8 dtim_period = sdata->vif.bss_conf.dtim_period; 2804 struct ps_data *ps; 2805 u8 bcns_from_dtim; 2806 2807 if (tsf == -1ULL || !beacon_int || !dtim_period) 2808 return; 2809 2810 if (sdata->vif.type == NL80211_IFTYPE_AP || 2811 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 2812 if (!sdata->bss) 2813 return; 2814 2815 ps = &sdata->bss->ps; 2816 } else if (ieee80211_vif_is_mesh(&sdata->vif)) { 2817 ps = &sdata->u.mesh.ps; 2818 } else { 2819 return; 2820 } 2821 2822 /* 2823 * actually finds last dtim_count, mac80211 will update in 2824 * __beacon_add_tim(). 2825 * dtim_count = dtim_period - (tsf / bcn_int) % dtim_period 2826 */ 2827 do_div(tsf, beacon_int); 2828 bcns_from_dtim = do_div(tsf, dtim_period); 2829 /* just had a DTIM */ 2830 if (!bcns_from_dtim) 2831 dtim_count = 0; 2832 else 2833 dtim_count = dtim_period - bcns_from_dtim; 2834 2835 ps->dtim_count = dtim_count; 2836 } 2837 2838 int ieee80211_check_combinations(struct ieee80211_sub_if_data *sdata, 2839 const struct cfg80211_chan_def *chandef, 2840 enum ieee80211_chanctx_mode chanmode, 2841 u8 radar_detect) 2842 { 2843 struct ieee80211_local *local = sdata->local; 2844 struct ieee80211_sub_if_data *sdata_iter; 2845 enum nl80211_iftype iftype = sdata->wdev.iftype; 2846 int num[NUM_NL80211_IFTYPES]; 2847 struct ieee80211_chanctx *ctx; 2848 int num_different_channels = 0; 2849 int total = 1; 2850 2851 lockdep_assert_held(&local->chanctx_mtx); 2852 2853 if (WARN_ON(hweight32(radar_detect) > 1)) 2854 return -EINVAL; 2855 2856 if (WARN_ON(chandef && chanmode == IEEE80211_CHANCTX_SHARED && 2857 !chandef->chan)) 2858 return -EINVAL; 2859 2860 if (chandef) 2861 num_different_channels = 1; 2862 2863 if (WARN_ON(iftype >= NUM_NL80211_IFTYPES)) 2864 return -EINVAL; 2865 2866 /* Always allow software iftypes */ 2867 if (local->hw.wiphy->software_iftypes & BIT(iftype)) { 2868 if (radar_detect) 2869 return -EINVAL; 2870 return 0; 2871 } 2872 2873 memset(num, 0, sizeof(num)); 2874 2875 if (iftype != NL80211_IFTYPE_UNSPECIFIED) 2876 num[iftype] = 1; 2877 2878 list_for_each_entry(ctx, &local->chanctx_list, list) { 2879 if (ctx->conf.radar_enabled) 2880 radar_detect |= BIT(ctx->conf.def.width); 2881 if (ctx->mode == IEEE80211_CHANCTX_EXCLUSIVE) { 2882 num_different_channels++; 2883 continue; 2884 } 2885 if (chandef && chanmode == IEEE80211_CHANCTX_SHARED && 2886 cfg80211_chandef_compatible(chandef, 2887 &ctx->conf.def)) 2888 continue; 2889 num_different_channels++; 2890 } 2891 2892 list_for_each_entry_rcu(sdata_iter, &local->interfaces, list) { 2893 struct wireless_dev *wdev_iter; 2894 2895 wdev_iter = &sdata_iter->wdev; 2896 2897 if (sdata_iter == sdata || 2898 rcu_access_pointer(sdata_iter->vif.chanctx_conf) == NULL || 2899 local->hw.wiphy->software_iftypes & BIT(wdev_iter->iftype)) 2900 continue; 2901 2902 num[wdev_iter->iftype]++; 2903 total++; 2904 } 2905 2906 if (total == 1 && !radar_detect) 2907 return 0; 2908 2909 return cfg80211_check_combinations(local->hw.wiphy, 2910 num_different_channels, 2911 radar_detect, num); 2912 } 2913 2914 static void 2915 ieee80211_iter_max_chans(const struct ieee80211_iface_combination *c, 2916 void *data) 2917 { 2918 u32 *max_num_different_channels = data; 2919 2920 *max_num_different_channels = max(*max_num_different_channels, 2921 c->num_different_channels); 2922 } 2923 2924 int ieee80211_max_num_channels(struct ieee80211_local *local) 2925 { 2926 struct ieee80211_sub_if_data *sdata; 2927 int num[NUM_NL80211_IFTYPES] = {}; 2928 struct ieee80211_chanctx *ctx; 2929 int num_different_channels = 0; 2930 u8 radar_detect = 0; 2931 u32 max_num_different_channels = 1; 2932 int err; 2933 2934 lockdep_assert_held(&local->chanctx_mtx); 2935 2936 list_for_each_entry(ctx, &local->chanctx_list, list) { 2937 num_different_channels++; 2938 2939 if (ctx->conf.radar_enabled) 2940 radar_detect |= BIT(ctx->conf.def.width); 2941 } 2942 2943 list_for_each_entry_rcu(sdata, &local->interfaces, list) 2944 num[sdata->wdev.iftype]++; 2945 2946 err = cfg80211_iter_combinations(local->hw.wiphy, 2947 num_different_channels, radar_detect, 2948 num, ieee80211_iter_max_chans, 2949 &max_num_different_channels); 2950 if (err < 0) 2951 return err; 2952 2953 return max_num_different_channels; 2954 } 2955