xref: /openbmc/linux/net/mac80211/util.c (revision b34e08d5)
1 /*
2  * Copyright 2002-2005, Instant802 Networks, Inc.
3  * Copyright 2005-2006, Devicescape Software, Inc.
4  * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
5  * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License version 2 as
9  * published by the Free Software Foundation.
10  *
11  * utilities for mac80211
12  */
13 
14 #include <net/mac80211.h>
15 #include <linux/netdevice.h>
16 #include <linux/export.h>
17 #include <linux/types.h>
18 #include <linux/slab.h>
19 #include <linux/skbuff.h>
20 #include <linux/etherdevice.h>
21 #include <linux/if_arp.h>
22 #include <linux/bitmap.h>
23 #include <linux/crc32.h>
24 #include <net/net_namespace.h>
25 #include <net/cfg80211.h>
26 #include <net/rtnetlink.h>
27 
28 #include "ieee80211_i.h"
29 #include "driver-ops.h"
30 #include "rate.h"
31 #include "mesh.h"
32 #include "wme.h"
33 #include "led.h"
34 #include "wep.h"
35 
36 /* privid for wiphys to determine whether they belong to us or not */
37 const void *const mac80211_wiphy_privid = &mac80211_wiphy_privid;
38 
39 struct ieee80211_hw *wiphy_to_ieee80211_hw(struct wiphy *wiphy)
40 {
41 	struct ieee80211_local *local;
42 	BUG_ON(!wiphy);
43 
44 	local = wiphy_priv(wiphy);
45 	return &local->hw;
46 }
47 EXPORT_SYMBOL(wiphy_to_ieee80211_hw);
48 
49 u8 *ieee80211_get_bssid(struct ieee80211_hdr *hdr, size_t len,
50 			enum nl80211_iftype type)
51 {
52 	__le16 fc = hdr->frame_control;
53 
54 	 /* drop ACK/CTS frames and incorrect hdr len (ctrl) */
55 	if (len < 16)
56 		return NULL;
57 
58 	if (ieee80211_is_data(fc)) {
59 		if (len < 24) /* drop incorrect hdr len (data) */
60 			return NULL;
61 
62 		if (ieee80211_has_a4(fc))
63 			return NULL;
64 		if (ieee80211_has_tods(fc))
65 			return hdr->addr1;
66 		if (ieee80211_has_fromds(fc))
67 			return hdr->addr2;
68 
69 		return hdr->addr3;
70 	}
71 
72 	if (ieee80211_is_mgmt(fc)) {
73 		if (len < 24) /* drop incorrect hdr len (mgmt) */
74 			return NULL;
75 		return hdr->addr3;
76 	}
77 
78 	if (ieee80211_is_ctl(fc)) {
79 		if (ieee80211_is_pspoll(fc))
80 			return hdr->addr1;
81 
82 		if (ieee80211_is_back_req(fc)) {
83 			switch (type) {
84 			case NL80211_IFTYPE_STATION:
85 				return hdr->addr2;
86 			case NL80211_IFTYPE_AP:
87 			case NL80211_IFTYPE_AP_VLAN:
88 				return hdr->addr1;
89 			default:
90 				break; /* fall through to the return */
91 			}
92 		}
93 	}
94 
95 	return NULL;
96 }
97 
98 void ieee80211_tx_set_protected(struct ieee80211_tx_data *tx)
99 {
100 	struct sk_buff *skb;
101 	struct ieee80211_hdr *hdr;
102 
103 	skb_queue_walk(&tx->skbs, skb) {
104 		hdr = (struct ieee80211_hdr *) skb->data;
105 		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
106 	}
107 }
108 
109 int ieee80211_frame_duration(enum ieee80211_band band, size_t len,
110 			     int rate, int erp, int short_preamble,
111 			     int shift)
112 {
113 	int dur;
114 
115 	/* calculate duration (in microseconds, rounded up to next higher
116 	 * integer if it includes a fractional microsecond) to send frame of
117 	 * len bytes (does not include FCS) at the given rate. Duration will
118 	 * also include SIFS.
119 	 *
120 	 * rate is in 100 kbps, so divident is multiplied by 10 in the
121 	 * DIV_ROUND_UP() operations.
122 	 *
123 	 * shift may be 2 for 5 MHz channels or 1 for 10 MHz channels, and
124 	 * is assumed to be 0 otherwise.
125 	 */
126 
127 	if (band == IEEE80211_BAND_5GHZ || erp) {
128 		/*
129 		 * OFDM:
130 		 *
131 		 * N_DBPS = DATARATE x 4
132 		 * N_SYM = Ceiling((16+8xLENGTH+6) / N_DBPS)
133 		 *	(16 = SIGNAL time, 6 = tail bits)
134 		 * TXTIME = T_PREAMBLE + T_SIGNAL + T_SYM x N_SYM + Signal Ext
135 		 *
136 		 * T_SYM = 4 usec
137 		 * 802.11a - 18.5.2: aSIFSTime = 16 usec
138 		 * 802.11g - 19.8.4: aSIFSTime = 10 usec +
139 		 *	signal ext = 6 usec
140 		 */
141 		dur = 16; /* SIFS + signal ext */
142 		dur += 16; /* IEEE 802.11-2012 18.3.2.4: T_PREAMBLE = 16 usec */
143 		dur += 4; /* IEEE 802.11-2012 18.3.2.4: T_SIGNAL = 4 usec */
144 
145 		/* IEEE 802.11-2012 18.3.2.4: all values above are:
146 		 *  * times 4 for 5 MHz
147 		 *  * times 2 for 10 MHz
148 		 */
149 		dur *= 1 << shift;
150 
151 		/* rates should already consider the channel bandwidth,
152 		 * don't apply divisor again.
153 		 */
154 		dur += 4 * DIV_ROUND_UP((16 + 8 * (len + 4) + 6) * 10,
155 					4 * rate); /* T_SYM x N_SYM */
156 	} else {
157 		/*
158 		 * 802.11b or 802.11g with 802.11b compatibility:
159 		 * 18.3.4: TXTIME = PreambleLength + PLCPHeaderTime +
160 		 * Ceiling(((LENGTH+PBCC)x8)/DATARATE). PBCC=0.
161 		 *
162 		 * 802.11 (DS): 15.3.3, 802.11b: 18.3.4
163 		 * aSIFSTime = 10 usec
164 		 * aPreambleLength = 144 usec or 72 usec with short preamble
165 		 * aPLCPHeaderLength = 48 usec or 24 usec with short preamble
166 		 */
167 		dur = 10; /* aSIFSTime = 10 usec */
168 		dur += short_preamble ? (72 + 24) : (144 + 48);
169 
170 		dur += DIV_ROUND_UP(8 * (len + 4) * 10, rate);
171 	}
172 
173 	return dur;
174 }
175 
176 /* Exported duration function for driver use */
177 __le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
178 					struct ieee80211_vif *vif,
179 					enum ieee80211_band band,
180 					size_t frame_len,
181 					struct ieee80211_rate *rate)
182 {
183 	struct ieee80211_sub_if_data *sdata;
184 	u16 dur;
185 	int erp, shift = 0;
186 	bool short_preamble = false;
187 
188 	erp = 0;
189 	if (vif) {
190 		sdata = vif_to_sdata(vif);
191 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
192 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
193 			erp = rate->flags & IEEE80211_RATE_ERP_G;
194 		shift = ieee80211_vif_get_shift(vif);
195 	}
196 
197 	dur = ieee80211_frame_duration(band, frame_len, rate->bitrate, erp,
198 				       short_preamble, shift);
199 
200 	return cpu_to_le16(dur);
201 }
202 EXPORT_SYMBOL(ieee80211_generic_frame_duration);
203 
204 __le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
205 			      struct ieee80211_vif *vif, size_t frame_len,
206 			      const struct ieee80211_tx_info *frame_txctl)
207 {
208 	struct ieee80211_local *local = hw_to_local(hw);
209 	struct ieee80211_rate *rate;
210 	struct ieee80211_sub_if_data *sdata;
211 	bool short_preamble;
212 	int erp, shift = 0, bitrate;
213 	u16 dur;
214 	struct ieee80211_supported_band *sband;
215 
216 	sband = local->hw.wiphy->bands[frame_txctl->band];
217 
218 	short_preamble = false;
219 
220 	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
221 
222 	erp = 0;
223 	if (vif) {
224 		sdata = vif_to_sdata(vif);
225 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
226 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
227 			erp = rate->flags & IEEE80211_RATE_ERP_G;
228 		shift = ieee80211_vif_get_shift(vif);
229 	}
230 
231 	bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
232 
233 	/* CTS duration */
234 	dur = ieee80211_frame_duration(sband->band, 10, bitrate,
235 				       erp, short_preamble, shift);
236 	/* Data frame duration */
237 	dur += ieee80211_frame_duration(sband->band, frame_len, bitrate,
238 					erp, short_preamble, shift);
239 	/* ACK duration */
240 	dur += ieee80211_frame_duration(sband->band, 10, bitrate,
241 					erp, short_preamble, shift);
242 
243 	return cpu_to_le16(dur);
244 }
245 EXPORT_SYMBOL(ieee80211_rts_duration);
246 
247 __le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
248 				    struct ieee80211_vif *vif,
249 				    size_t frame_len,
250 				    const struct ieee80211_tx_info *frame_txctl)
251 {
252 	struct ieee80211_local *local = hw_to_local(hw);
253 	struct ieee80211_rate *rate;
254 	struct ieee80211_sub_if_data *sdata;
255 	bool short_preamble;
256 	int erp, shift = 0, bitrate;
257 	u16 dur;
258 	struct ieee80211_supported_band *sband;
259 
260 	sband = local->hw.wiphy->bands[frame_txctl->band];
261 
262 	short_preamble = false;
263 
264 	rate = &sband->bitrates[frame_txctl->control.rts_cts_rate_idx];
265 	erp = 0;
266 	if (vif) {
267 		sdata = vif_to_sdata(vif);
268 		short_preamble = sdata->vif.bss_conf.use_short_preamble;
269 		if (sdata->flags & IEEE80211_SDATA_OPERATING_GMODE)
270 			erp = rate->flags & IEEE80211_RATE_ERP_G;
271 		shift = ieee80211_vif_get_shift(vif);
272 	}
273 
274 	bitrate = DIV_ROUND_UP(rate->bitrate, 1 << shift);
275 
276 	/* Data frame duration */
277 	dur = ieee80211_frame_duration(sband->band, frame_len, bitrate,
278 				       erp, short_preamble, shift);
279 	if (!(frame_txctl->flags & IEEE80211_TX_CTL_NO_ACK)) {
280 		/* ACK duration */
281 		dur += ieee80211_frame_duration(sband->band, 10, bitrate,
282 						erp, short_preamble, shift);
283 	}
284 
285 	return cpu_to_le16(dur);
286 }
287 EXPORT_SYMBOL(ieee80211_ctstoself_duration);
288 
289 void ieee80211_propagate_queue_wake(struct ieee80211_local *local, int queue)
290 {
291 	struct ieee80211_sub_if_data *sdata;
292 	int n_acs = IEEE80211_NUM_ACS;
293 
294 	if (local->hw.queues < IEEE80211_NUM_ACS)
295 		n_acs = 1;
296 
297 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
298 		int ac;
299 
300 		if (!sdata->dev)
301 			continue;
302 
303 		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE &&
304 		    local->queue_stop_reasons[sdata->vif.cab_queue] != 0)
305 			continue;
306 
307 		for (ac = 0; ac < n_acs; ac++) {
308 			int ac_queue = sdata->vif.hw_queue[ac];
309 
310 			if (ac_queue == queue ||
311 			    (sdata->vif.cab_queue == queue &&
312 			     local->queue_stop_reasons[ac_queue] == 0 &&
313 			     skb_queue_empty(&local->pending[ac_queue])))
314 				netif_wake_subqueue(sdata->dev, ac);
315 		}
316 	}
317 }
318 
319 static void __ieee80211_wake_queue(struct ieee80211_hw *hw, int queue,
320 				   enum queue_stop_reason reason)
321 {
322 	struct ieee80211_local *local = hw_to_local(hw);
323 
324 	trace_wake_queue(local, queue, reason);
325 
326 	if (WARN_ON(queue >= hw->queues))
327 		return;
328 
329 	if (!test_bit(reason, &local->queue_stop_reasons[queue]))
330 		return;
331 
332 	__clear_bit(reason, &local->queue_stop_reasons[queue]);
333 
334 	if (local->queue_stop_reasons[queue] != 0)
335 		/* someone still has this queue stopped */
336 		return;
337 
338 	if (skb_queue_empty(&local->pending[queue])) {
339 		rcu_read_lock();
340 		ieee80211_propagate_queue_wake(local, queue);
341 		rcu_read_unlock();
342 	} else
343 		tasklet_schedule(&local->tx_pending_tasklet);
344 }
345 
346 void ieee80211_wake_queue_by_reason(struct ieee80211_hw *hw, int queue,
347 				    enum queue_stop_reason reason)
348 {
349 	struct ieee80211_local *local = hw_to_local(hw);
350 	unsigned long flags;
351 
352 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
353 	__ieee80211_wake_queue(hw, queue, reason);
354 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
355 }
356 
357 void ieee80211_wake_queue(struct ieee80211_hw *hw, int queue)
358 {
359 	ieee80211_wake_queue_by_reason(hw, queue,
360 				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
361 }
362 EXPORT_SYMBOL(ieee80211_wake_queue);
363 
364 static void __ieee80211_stop_queue(struct ieee80211_hw *hw, int queue,
365 				   enum queue_stop_reason reason)
366 {
367 	struct ieee80211_local *local = hw_to_local(hw);
368 	struct ieee80211_sub_if_data *sdata;
369 	int n_acs = IEEE80211_NUM_ACS;
370 
371 	trace_stop_queue(local, queue, reason);
372 
373 	if (WARN_ON(queue >= hw->queues))
374 		return;
375 
376 	if (test_bit(reason, &local->queue_stop_reasons[queue]))
377 		return;
378 
379 	__set_bit(reason, &local->queue_stop_reasons[queue]);
380 
381 	if (local->hw.queues < IEEE80211_NUM_ACS)
382 		n_acs = 1;
383 
384 	rcu_read_lock();
385 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
386 		int ac;
387 
388 		if (!sdata->dev)
389 			continue;
390 
391 		for (ac = 0; ac < n_acs; ac++) {
392 			if (sdata->vif.hw_queue[ac] == queue ||
393 			    sdata->vif.cab_queue == queue)
394 				netif_stop_subqueue(sdata->dev, ac);
395 		}
396 	}
397 	rcu_read_unlock();
398 }
399 
400 void ieee80211_stop_queue_by_reason(struct ieee80211_hw *hw, int queue,
401 				    enum queue_stop_reason reason)
402 {
403 	struct ieee80211_local *local = hw_to_local(hw);
404 	unsigned long flags;
405 
406 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
407 	__ieee80211_stop_queue(hw, queue, reason);
408 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
409 }
410 
411 void ieee80211_stop_queue(struct ieee80211_hw *hw, int queue)
412 {
413 	ieee80211_stop_queue_by_reason(hw, queue,
414 				       IEEE80211_QUEUE_STOP_REASON_DRIVER);
415 }
416 EXPORT_SYMBOL(ieee80211_stop_queue);
417 
418 void ieee80211_add_pending_skb(struct ieee80211_local *local,
419 			       struct sk_buff *skb)
420 {
421 	struct ieee80211_hw *hw = &local->hw;
422 	unsigned long flags;
423 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
424 	int queue = info->hw_queue;
425 
426 	if (WARN_ON(!info->control.vif)) {
427 		ieee80211_free_txskb(&local->hw, skb);
428 		return;
429 	}
430 
431 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
432 	__ieee80211_stop_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
433 	__skb_queue_tail(&local->pending[queue], skb);
434 	__ieee80211_wake_queue(hw, queue, IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
435 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
436 }
437 
438 void ieee80211_add_pending_skbs(struct ieee80211_local *local,
439 				struct sk_buff_head *skbs)
440 {
441 	struct ieee80211_hw *hw = &local->hw;
442 	struct sk_buff *skb;
443 	unsigned long flags;
444 	int queue, i;
445 
446 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
447 	while ((skb = skb_dequeue(skbs))) {
448 		struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
449 
450 		if (WARN_ON(!info->control.vif)) {
451 			ieee80211_free_txskb(&local->hw, skb);
452 			continue;
453 		}
454 
455 		queue = info->hw_queue;
456 
457 		__ieee80211_stop_queue(hw, queue,
458 				IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
459 
460 		__skb_queue_tail(&local->pending[queue], skb);
461 	}
462 
463 	for (i = 0; i < hw->queues; i++)
464 		__ieee80211_wake_queue(hw, i,
465 			IEEE80211_QUEUE_STOP_REASON_SKB_ADD);
466 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
467 }
468 
469 void ieee80211_stop_queues_by_reason(struct ieee80211_hw *hw,
470 				     unsigned long queues,
471 				     enum queue_stop_reason reason)
472 {
473 	struct ieee80211_local *local = hw_to_local(hw);
474 	unsigned long flags;
475 	int i;
476 
477 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
478 
479 	for_each_set_bit(i, &queues, hw->queues)
480 		__ieee80211_stop_queue(hw, i, reason);
481 
482 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
483 }
484 
485 void ieee80211_stop_queues(struct ieee80211_hw *hw)
486 {
487 	ieee80211_stop_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
488 					IEEE80211_QUEUE_STOP_REASON_DRIVER);
489 }
490 EXPORT_SYMBOL(ieee80211_stop_queues);
491 
492 int ieee80211_queue_stopped(struct ieee80211_hw *hw, int queue)
493 {
494 	struct ieee80211_local *local = hw_to_local(hw);
495 	unsigned long flags;
496 	int ret;
497 
498 	if (WARN_ON(queue >= hw->queues))
499 		return true;
500 
501 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
502 	ret = test_bit(IEEE80211_QUEUE_STOP_REASON_DRIVER,
503 		       &local->queue_stop_reasons[queue]);
504 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
505 	return ret;
506 }
507 EXPORT_SYMBOL(ieee80211_queue_stopped);
508 
509 void ieee80211_wake_queues_by_reason(struct ieee80211_hw *hw,
510 				     unsigned long queues,
511 				     enum queue_stop_reason reason)
512 {
513 	struct ieee80211_local *local = hw_to_local(hw);
514 	unsigned long flags;
515 	int i;
516 
517 	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
518 
519 	for_each_set_bit(i, &queues, hw->queues)
520 		__ieee80211_wake_queue(hw, i, reason);
521 
522 	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
523 }
524 
525 void ieee80211_wake_queues(struct ieee80211_hw *hw)
526 {
527 	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
528 					IEEE80211_QUEUE_STOP_REASON_DRIVER);
529 }
530 EXPORT_SYMBOL(ieee80211_wake_queues);
531 
532 void ieee80211_flush_queues(struct ieee80211_local *local,
533 			    struct ieee80211_sub_if_data *sdata)
534 {
535 	u32 queues;
536 
537 	if (!local->ops->flush)
538 		return;
539 
540 	if (sdata && local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) {
541 		int ac;
542 
543 		queues = 0;
544 
545 		for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
546 			queues |= BIT(sdata->vif.hw_queue[ac]);
547 		if (sdata->vif.cab_queue != IEEE80211_INVAL_HW_QUEUE)
548 			queues |= BIT(sdata->vif.cab_queue);
549 	} else {
550 		/* all queues */
551 		queues = BIT(local->hw.queues) - 1;
552 	}
553 
554 	ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
555 					IEEE80211_QUEUE_STOP_REASON_FLUSH);
556 
557 	drv_flush(local, queues, false);
558 
559 	ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
560 					IEEE80211_QUEUE_STOP_REASON_FLUSH);
561 }
562 
563 static void __iterate_active_interfaces(struct ieee80211_local *local,
564 					u32 iter_flags,
565 					void (*iterator)(void *data, u8 *mac,
566 						struct ieee80211_vif *vif),
567 					void *data)
568 {
569 	struct ieee80211_sub_if_data *sdata;
570 
571 	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
572 		switch (sdata->vif.type) {
573 		case NL80211_IFTYPE_MONITOR:
574 			if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
575 				continue;
576 			break;
577 		case NL80211_IFTYPE_AP_VLAN:
578 			continue;
579 		default:
580 			break;
581 		}
582 		if (!(iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL) &&
583 		    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
584 			continue;
585 		if (ieee80211_sdata_running(sdata))
586 			iterator(data, sdata->vif.addr,
587 				 &sdata->vif);
588 	}
589 
590 	sdata = rcu_dereference_check(local->monitor_sdata,
591 				      lockdep_is_held(&local->iflist_mtx) ||
592 				      lockdep_rtnl_is_held());
593 	if (sdata &&
594 	    (iter_flags & IEEE80211_IFACE_ITER_RESUME_ALL ||
595 	     sdata->flags & IEEE80211_SDATA_IN_DRIVER))
596 		iterator(data, sdata->vif.addr, &sdata->vif);
597 }
598 
599 void ieee80211_iterate_active_interfaces(
600 	struct ieee80211_hw *hw, u32 iter_flags,
601 	void (*iterator)(void *data, u8 *mac,
602 			 struct ieee80211_vif *vif),
603 	void *data)
604 {
605 	struct ieee80211_local *local = hw_to_local(hw);
606 
607 	mutex_lock(&local->iflist_mtx);
608 	__iterate_active_interfaces(local, iter_flags, iterator, data);
609 	mutex_unlock(&local->iflist_mtx);
610 }
611 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces);
612 
613 void ieee80211_iterate_active_interfaces_atomic(
614 	struct ieee80211_hw *hw, u32 iter_flags,
615 	void (*iterator)(void *data, u8 *mac,
616 			 struct ieee80211_vif *vif),
617 	void *data)
618 {
619 	struct ieee80211_local *local = hw_to_local(hw);
620 
621 	rcu_read_lock();
622 	__iterate_active_interfaces(local, iter_flags, iterator, data);
623 	rcu_read_unlock();
624 }
625 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_atomic);
626 
627 void ieee80211_iterate_active_interfaces_rtnl(
628 	struct ieee80211_hw *hw, u32 iter_flags,
629 	void (*iterator)(void *data, u8 *mac,
630 			 struct ieee80211_vif *vif),
631 	void *data)
632 {
633 	struct ieee80211_local *local = hw_to_local(hw);
634 
635 	ASSERT_RTNL();
636 
637 	__iterate_active_interfaces(local, iter_flags, iterator, data);
638 }
639 EXPORT_SYMBOL_GPL(ieee80211_iterate_active_interfaces_rtnl);
640 
641 struct ieee80211_vif *wdev_to_ieee80211_vif(struct wireless_dev *wdev)
642 {
643 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
644 
645 	if (!ieee80211_sdata_running(sdata) ||
646 	    !(sdata->flags & IEEE80211_SDATA_IN_DRIVER))
647 		return NULL;
648 	return &sdata->vif;
649 }
650 EXPORT_SYMBOL_GPL(wdev_to_ieee80211_vif);
651 
652 /*
653  * Nothing should have been stuffed into the workqueue during
654  * the suspend->resume cycle. If this WARN is seen then there
655  * is a bug with either the driver suspend or something in
656  * mac80211 stuffing into the workqueue which we haven't yet
657  * cleared during mac80211's suspend cycle.
658  */
659 static bool ieee80211_can_queue_work(struct ieee80211_local *local)
660 {
661 	if (WARN(local->suspended && !local->resuming,
662 		 "queueing ieee80211 work while going to suspend\n"))
663 		return false;
664 
665 	return true;
666 }
667 
668 void ieee80211_queue_work(struct ieee80211_hw *hw, struct work_struct *work)
669 {
670 	struct ieee80211_local *local = hw_to_local(hw);
671 
672 	if (!ieee80211_can_queue_work(local))
673 		return;
674 
675 	queue_work(local->workqueue, work);
676 }
677 EXPORT_SYMBOL(ieee80211_queue_work);
678 
679 void ieee80211_queue_delayed_work(struct ieee80211_hw *hw,
680 				  struct delayed_work *dwork,
681 				  unsigned long delay)
682 {
683 	struct ieee80211_local *local = hw_to_local(hw);
684 
685 	if (!ieee80211_can_queue_work(local))
686 		return;
687 
688 	queue_delayed_work(local->workqueue, dwork, delay);
689 }
690 EXPORT_SYMBOL(ieee80211_queue_delayed_work);
691 
692 u32 ieee802_11_parse_elems_crc(const u8 *start, size_t len, bool action,
693 			       struct ieee802_11_elems *elems,
694 			       u64 filter, u32 crc)
695 {
696 	size_t left = len;
697 	const u8 *pos = start;
698 	bool calc_crc = filter != 0;
699 	DECLARE_BITMAP(seen_elems, 256);
700 	const u8 *ie;
701 
702 	bitmap_zero(seen_elems, 256);
703 	memset(elems, 0, sizeof(*elems));
704 	elems->ie_start = start;
705 	elems->total_len = len;
706 
707 	while (left >= 2) {
708 		u8 id, elen;
709 		bool elem_parse_failed;
710 
711 		id = *pos++;
712 		elen = *pos++;
713 		left -= 2;
714 
715 		if (elen > left) {
716 			elems->parse_error = true;
717 			break;
718 		}
719 
720 		switch (id) {
721 		case WLAN_EID_SSID:
722 		case WLAN_EID_SUPP_RATES:
723 		case WLAN_EID_FH_PARAMS:
724 		case WLAN_EID_DS_PARAMS:
725 		case WLAN_EID_CF_PARAMS:
726 		case WLAN_EID_TIM:
727 		case WLAN_EID_IBSS_PARAMS:
728 		case WLAN_EID_CHALLENGE:
729 		case WLAN_EID_RSN:
730 		case WLAN_EID_ERP_INFO:
731 		case WLAN_EID_EXT_SUPP_RATES:
732 		case WLAN_EID_HT_CAPABILITY:
733 		case WLAN_EID_HT_OPERATION:
734 		case WLAN_EID_VHT_CAPABILITY:
735 		case WLAN_EID_VHT_OPERATION:
736 		case WLAN_EID_MESH_ID:
737 		case WLAN_EID_MESH_CONFIG:
738 		case WLAN_EID_PEER_MGMT:
739 		case WLAN_EID_PREQ:
740 		case WLAN_EID_PREP:
741 		case WLAN_EID_PERR:
742 		case WLAN_EID_RANN:
743 		case WLAN_EID_CHANNEL_SWITCH:
744 		case WLAN_EID_EXT_CHANSWITCH_ANN:
745 		case WLAN_EID_COUNTRY:
746 		case WLAN_EID_PWR_CONSTRAINT:
747 		case WLAN_EID_TIMEOUT_INTERVAL:
748 		case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
749 		case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
750 		case WLAN_EID_CHAN_SWITCH_PARAM:
751 		/*
752 		 * not listing WLAN_EID_CHANNEL_SWITCH_WRAPPER -- it seems possible
753 		 * that if the content gets bigger it might be needed more than once
754 		 */
755 			if (test_bit(id, seen_elems)) {
756 				elems->parse_error = true;
757 				left -= elen;
758 				pos += elen;
759 				continue;
760 			}
761 			break;
762 		}
763 
764 		if (calc_crc && id < 64 && (filter & (1ULL << id)))
765 			crc = crc32_be(crc, pos - 2, elen + 2);
766 
767 		elem_parse_failed = false;
768 
769 		switch (id) {
770 		case WLAN_EID_SSID:
771 			elems->ssid = pos;
772 			elems->ssid_len = elen;
773 			break;
774 		case WLAN_EID_SUPP_RATES:
775 			elems->supp_rates = pos;
776 			elems->supp_rates_len = elen;
777 			break;
778 		case WLAN_EID_DS_PARAMS:
779 			if (elen >= 1)
780 				elems->ds_params = pos;
781 			else
782 				elem_parse_failed = true;
783 			break;
784 		case WLAN_EID_TIM:
785 			if (elen >= sizeof(struct ieee80211_tim_ie)) {
786 				elems->tim = (void *)pos;
787 				elems->tim_len = elen;
788 			} else
789 				elem_parse_failed = true;
790 			break;
791 		case WLAN_EID_CHALLENGE:
792 			elems->challenge = pos;
793 			elems->challenge_len = elen;
794 			break;
795 		case WLAN_EID_VENDOR_SPECIFIC:
796 			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
797 			    pos[2] == 0xf2) {
798 				/* Microsoft OUI (00:50:F2) */
799 
800 				if (calc_crc)
801 					crc = crc32_be(crc, pos - 2, elen + 2);
802 
803 				if (elen >= 5 && pos[3] == 2) {
804 					/* OUI Type 2 - WMM IE */
805 					if (pos[4] == 0) {
806 						elems->wmm_info = pos;
807 						elems->wmm_info_len = elen;
808 					} else if (pos[4] == 1) {
809 						elems->wmm_param = pos;
810 						elems->wmm_param_len = elen;
811 					}
812 				}
813 			}
814 			break;
815 		case WLAN_EID_RSN:
816 			elems->rsn = pos;
817 			elems->rsn_len = elen;
818 			break;
819 		case WLAN_EID_ERP_INFO:
820 			if (elen >= 1)
821 				elems->erp_info = pos;
822 			else
823 				elem_parse_failed = true;
824 			break;
825 		case WLAN_EID_EXT_SUPP_RATES:
826 			elems->ext_supp_rates = pos;
827 			elems->ext_supp_rates_len = elen;
828 			break;
829 		case WLAN_EID_HT_CAPABILITY:
830 			if (elen >= sizeof(struct ieee80211_ht_cap))
831 				elems->ht_cap_elem = (void *)pos;
832 			else
833 				elem_parse_failed = true;
834 			break;
835 		case WLAN_EID_HT_OPERATION:
836 			if (elen >= sizeof(struct ieee80211_ht_operation))
837 				elems->ht_operation = (void *)pos;
838 			else
839 				elem_parse_failed = true;
840 			break;
841 		case WLAN_EID_VHT_CAPABILITY:
842 			if (elen >= sizeof(struct ieee80211_vht_cap))
843 				elems->vht_cap_elem = (void *)pos;
844 			else
845 				elem_parse_failed = true;
846 			break;
847 		case WLAN_EID_VHT_OPERATION:
848 			if (elen >= sizeof(struct ieee80211_vht_operation))
849 				elems->vht_operation = (void *)pos;
850 			else
851 				elem_parse_failed = true;
852 			break;
853 		case WLAN_EID_OPMODE_NOTIF:
854 			if (elen > 0)
855 				elems->opmode_notif = pos;
856 			else
857 				elem_parse_failed = true;
858 			break;
859 		case WLAN_EID_MESH_ID:
860 			elems->mesh_id = pos;
861 			elems->mesh_id_len = elen;
862 			break;
863 		case WLAN_EID_MESH_CONFIG:
864 			if (elen >= sizeof(struct ieee80211_meshconf_ie))
865 				elems->mesh_config = (void *)pos;
866 			else
867 				elem_parse_failed = true;
868 			break;
869 		case WLAN_EID_PEER_MGMT:
870 			elems->peering = pos;
871 			elems->peering_len = elen;
872 			break;
873 		case WLAN_EID_MESH_AWAKE_WINDOW:
874 			if (elen >= 2)
875 				elems->awake_window = (void *)pos;
876 			break;
877 		case WLAN_EID_PREQ:
878 			elems->preq = pos;
879 			elems->preq_len = elen;
880 			break;
881 		case WLAN_EID_PREP:
882 			elems->prep = pos;
883 			elems->prep_len = elen;
884 			break;
885 		case WLAN_EID_PERR:
886 			elems->perr = pos;
887 			elems->perr_len = elen;
888 			break;
889 		case WLAN_EID_RANN:
890 			if (elen >= sizeof(struct ieee80211_rann_ie))
891 				elems->rann = (void *)pos;
892 			else
893 				elem_parse_failed = true;
894 			break;
895 		case WLAN_EID_CHANNEL_SWITCH:
896 			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
897 				elem_parse_failed = true;
898 				break;
899 			}
900 			elems->ch_switch_ie = (void *)pos;
901 			break;
902 		case WLAN_EID_EXT_CHANSWITCH_ANN:
903 			if (elen != sizeof(struct ieee80211_ext_chansw_ie)) {
904 				elem_parse_failed = true;
905 				break;
906 			}
907 			elems->ext_chansw_ie = (void *)pos;
908 			break;
909 		case WLAN_EID_SECONDARY_CHANNEL_OFFSET:
910 			if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) {
911 				elem_parse_failed = true;
912 				break;
913 			}
914 			elems->sec_chan_offs = (void *)pos;
915 			break;
916 		case WLAN_EID_CHAN_SWITCH_PARAM:
917 			if (elen !=
918 			    sizeof(*elems->mesh_chansw_params_ie)) {
919 				elem_parse_failed = true;
920 				break;
921 			}
922 			elems->mesh_chansw_params_ie = (void *)pos;
923 			break;
924 		case WLAN_EID_WIDE_BW_CHANNEL_SWITCH:
925 			if (!action ||
926 			    elen != sizeof(*elems->wide_bw_chansw_ie)) {
927 				elem_parse_failed = true;
928 				break;
929 			}
930 			elems->wide_bw_chansw_ie = (void *)pos;
931 			break;
932 		case WLAN_EID_CHANNEL_SWITCH_WRAPPER:
933 			if (action) {
934 				elem_parse_failed = true;
935 				break;
936 			}
937 			/*
938 			 * This is a bit tricky, but as we only care about
939 			 * the wide bandwidth channel switch element, so
940 			 * just parse it out manually.
941 			 */
942 			ie = cfg80211_find_ie(WLAN_EID_WIDE_BW_CHANNEL_SWITCH,
943 					      pos, elen);
944 			if (ie) {
945 				if (ie[1] == sizeof(*elems->wide_bw_chansw_ie))
946 					elems->wide_bw_chansw_ie =
947 						(void *)(ie + 2);
948 				else
949 					elem_parse_failed = true;
950 			}
951 			break;
952 		case WLAN_EID_COUNTRY:
953 			elems->country_elem = pos;
954 			elems->country_elem_len = elen;
955 			break;
956 		case WLAN_EID_PWR_CONSTRAINT:
957 			if (elen != 1) {
958 				elem_parse_failed = true;
959 				break;
960 			}
961 			elems->pwr_constr_elem = pos;
962 			break;
963 		case WLAN_EID_TIMEOUT_INTERVAL:
964 			if (elen >= sizeof(struct ieee80211_timeout_interval_ie))
965 				elems->timeout_int = (void *)pos;
966 			else
967 				elem_parse_failed = true;
968 			break;
969 		default:
970 			break;
971 		}
972 
973 		if (elem_parse_failed)
974 			elems->parse_error = true;
975 		else
976 			__set_bit(id, seen_elems);
977 
978 		left -= elen;
979 		pos += elen;
980 	}
981 
982 	if (left != 0)
983 		elems->parse_error = true;
984 
985 	return crc;
986 }
987 
988 void ieee80211_set_wmm_default(struct ieee80211_sub_if_data *sdata,
989 			       bool bss_notify)
990 {
991 	struct ieee80211_local *local = sdata->local;
992 	struct ieee80211_tx_queue_params qparam;
993 	struct ieee80211_chanctx_conf *chanctx_conf;
994 	int ac;
995 	bool use_11b, enable_qos;
996 	int aCWmin, aCWmax;
997 
998 	if (!local->ops->conf_tx)
999 		return;
1000 
1001 	if (local->hw.queues < IEEE80211_NUM_ACS)
1002 		return;
1003 
1004 	memset(&qparam, 0, sizeof(qparam));
1005 
1006 	rcu_read_lock();
1007 	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
1008 	use_11b = (chanctx_conf &&
1009 		   chanctx_conf->def.chan->band == IEEE80211_BAND_2GHZ) &&
1010 		 !(sdata->flags & IEEE80211_SDATA_OPERATING_GMODE);
1011 	rcu_read_unlock();
1012 
1013 	/*
1014 	 * By default disable QoS in STA mode for old access points, which do
1015 	 * not support 802.11e. New APs will provide proper queue parameters,
1016 	 * that we will configure later.
1017 	 */
1018 	enable_qos = (sdata->vif.type != NL80211_IFTYPE_STATION);
1019 
1020 	/* Set defaults according to 802.11-2007 Table 7-37 */
1021 	aCWmax = 1023;
1022 	if (use_11b)
1023 		aCWmin = 31;
1024 	else
1025 		aCWmin = 15;
1026 
1027 	/* Confiure old 802.11b/g medium access rules. */
1028 	qparam.cw_max = aCWmax;
1029 	qparam.cw_min = aCWmin;
1030 	qparam.txop = 0;
1031 	qparam.aifs = 2;
1032 
1033 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
1034 		/* Update if QoS is enabled. */
1035 		if (enable_qos) {
1036 			switch (ac) {
1037 			case IEEE80211_AC_BK:
1038 				qparam.cw_max = aCWmax;
1039 				qparam.cw_min = aCWmin;
1040 				qparam.txop = 0;
1041 				qparam.aifs = 7;
1042 				break;
1043 			/* never happens but let's not leave undefined */
1044 			default:
1045 			case IEEE80211_AC_BE:
1046 				qparam.cw_max = aCWmax;
1047 				qparam.cw_min = aCWmin;
1048 				qparam.txop = 0;
1049 				qparam.aifs = 3;
1050 				break;
1051 			case IEEE80211_AC_VI:
1052 				qparam.cw_max = aCWmin;
1053 				qparam.cw_min = (aCWmin + 1) / 2 - 1;
1054 				if (use_11b)
1055 					qparam.txop = 6016/32;
1056 				else
1057 					qparam.txop = 3008/32;
1058 				qparam.aifs = 2;
1059 				break;
1060 			case IEEE80211_AC_VO:
1061 				qparam.cw_max = (aCWmin + 1) / 2 - 1;
1062 				qparam.cw_min = (aCWmin + 1) / 4 - 1;
1063 				if (use_11b)
1064 					qparam.txop = 3264/32;
1065 				else
1066 					qparam.txop = 1504/32;
1067 				qparam.aifs = 2;
1068 				break;
1069 			}
1070 		}
1071 
1072 		qparam.uapsd = false;
1073 
1074 		sdata->tx_conf[ac] = qparam;
1075 		drv_conf_tx(local, sdata, ac, &qparam);
1076 	}
1077 
1078 	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1079 	    sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
1080 		sdata->vif.bss_conf.qos = enable_qos;
1081 		if (bss_notify)
1082 			ieee80211_bss_info_change_notify(sdata,
1083 							 BSS_CHANGED_QOS);
1084 	}
1085 }
1086 
1087 void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
1088 			 u16 transaction, u16 auth_alg, u16 status,
1089 			 const u8 *extra, size_t extra_len, const u8 *da,
1090 			 const u8 *bssid, const u8 *key, u8 key_len, u8 key_idx,
1091 			 u32 tx_flags)
1092 {
1093 	struct ieee80211_local *local = sdata->local;
1094 	struct sk_buff *skb;
1095 	struct ieee80211_mgmt *mgmt;
1096 	int err;
1097 
1098 	/* 24 + 6 = header + auth_algo + auth_transaction + status_code */
1099 	skb = dev_alloc_skb(local->hw.extra_tx_headroom + 24 + 6 + extra_len);
1100 	if (!skb)
1101 		return;
1102 
1103 	skb_reserve(skb, local->hw.extra_tx_headroom);
1104 
1105 	mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
1106 	memset(mgmt, 0, 24 + 6);
1107 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1108 					  IEEE80211_STYPE_AUTH);
1109 	memcpy(mgmt->da, da, ETH_ALEN);
1110 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1111 	memcpy(mgmt->bssid, bssid, ETH_ALEN);
1112 	mgmt->u.auth.auth_alg = cpu_to_le16(auth_alg);
1113 	mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
1114 	mgmt->u.auth.status_code = cpu_to_le16(status);
1115 	if (extra)
1116 		memcpy(skb_put(skb, extra_len), extra, extra_len);
1117 
1118 	if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
1119 		mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
1120 		err = ieee80211_wep_encrypt(local, skb, key, key_len, key_idx);
1121 		WARN_ON(err);
1122 	}
1123 
1124 	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT |
1125 					tx_flags;
1126 	ieee80211_tx_skb(sdata, skb);
1127 }
1128 
1129 void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
1130 				    const u8 *bssid, u16 stype, u16 reason,
1131 				    bool send_frame, u8 *frame_buf)
1132 {
1133 	struct ieee80211_local *local = sdata->local;
1134 	struct sk_buff *skb;
1135 	struct ieee80211_mgmt *mgmt = (void *)frame_buf;
1136 
1137 	/* build frame */
1138 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
1139 	mgmt->duration = 0; /* initialize only */
1140 	mgmt->seq_ctrl = 0; /* initialize only */
1141 	memcpy(mgmt->da, bssid, ETH_ALEN);
1142 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
1143 	memcpy(mgmt->bssid, bssid, ETH_ALEN);
1144 	/* u.deauth.reason_code == u.disassoc.reason_code */
1145 	mgmt->u.deauth.reason_code = cpu_to_le16(reason);
1146 
1147 	if (send_frame) {
1148 		skb = dev_alloc_skb(local->hw.extra_tx_headroom +
1149 				    IEEE80211_DEAUTH_FRAME_LEN);
1150 		if (!skb)
1151 			return;
1152 
1153 		skb_reserve(skb, local->hw.extra_tx_headroom);
1154 
1155 		/* copy in frame */
1156 		memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
1157 		       mgmt, IEEE80211_DEAUTH_FRAME_LEN);
1158 
1159 		if (sdata->vif.type != NL80211_IFTYPE_STATION ||
1160 		    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
1161 			IEEE80211_SKB_CB(skb)->flags |=
1162 				IEEE80211_TX_INTFL_DONT_ENCRYPT;
1163 
1164 		ieee80211_tx_skb(sdata, skb);
1165 	}
1166 }
1167 
1168 int ieee80211_build_preq_ies(struct ieee80211_local *local, u8 *buffer,
1169 			     size_t buffer_len, const u8 *ie, size_t ie_len,
1170 			     enum ieee80211_band band, u32 rate_mask,
1171 			     struct cfg80211_chan_def *chandef)
1172 {
1173 	struct ieee80211_supported_band *sband;
1174 	u8 *pos = buffer, *end = buffer + buffer_len;
1175 	size_t offset = 0, noffset;
1176 	int supp_rates_len, i;
1177 	u8 rates[32];
1178 	int num_rates;
1179 	int ext_rates_len;
1180 	int shift;
1181 	u32 rate_flags;
1182 
1183 	sband = local->hw.wiphy->bands[band];
1184 	if (WARN_ON_ONCE(!sband))
1185 		return 0;
1186 
1187 	rate_flags = ieee80211_chandef_rate_flags(chandef);
1188 	shift = ieee80211_chandef_get_shift(chandef);
1189 
1190 	num_rates = 0;
1191 	for (i = 0; i < sband->n_bitrates; i++) {
1192 		if ((BIT(i) & rate_mask) == 0)
1193 			continue; /* skip rate */
1194 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
1195 			continue;
1196 
1197 		rates[num_rates++] =
1198 			(u8) DIV_ROUND_UP(sband->bitrates[i].bitrate,
1199 					  (1 << shift) * 5);
1200 	}
1201 
1202 	supp_rates_len = min_t(int, num_rates, 8);
1203 
1204 	if (end - pos < 2 + supp_rates_len)
1205 		goto out_err;
1206 	*pos++ = WLAN_EID_SUPP_RATES;
1207 	*pos++ = supp_rates_len;
1208 	memcpy(pos, rates, supp_rates_len);
1209 	pos += supp_rates_len;
1210 
1211 	/* insert "request information" if in custom IEs */
1212 	if (ie && ie_len) {
1213 		static const u8 before_extrates[] = {
1214 			WLAN_EID_SSID,
1215 			WLAN_EID_SUPP_RATES,
1216 			WLAN_EID_REQUEST,
1217 		};
1218 		noffset = ieee80211_ie_split(ie, ie_len,
1219 					     before_extrates,
1220 					     ARRAY_SIZE(before_extrates),
1221 					     offset);
1222 		if (end - pos < noffset - offset)
1223 			goto out_err;
1224 		memcpy(pos, ie + offset, noffset - offset);
1225 		pos += noffset - offset;
1226 		offset = noffset;
1227 	}
1228 
1229 	ext_rates_len = num_rates - supp_rates_len;
1230 	if (ext_rates_len > 0) {
1231 		if (end - pos < 2 + ext_rates_len)
1232 			goto out_err;
1233 		*pos++ = WLAN_EID_EXT_SUPP_RATES;
1234 		*pos++ = ext_rates_len;
1235 		memcpy(pos, rates + supp_rates_len, ext_rates_len);
1236 		pos += ext_rates_len;
1237 	}
1238 
1239 	if (chandef->chan && sband->band == IEEE80211_BAND_2GHZ) {
1240 		if (end - pos < 3)
1241 			goto out_err;
1242 		*pos++ = WLAN_EID_DS_PARAMS;
1243 		*pos++ = 1;
1244 		*pos++ = ieee80211_frequency_to_channel(
1245 				chandef->chan->center_freq);
1246 	}
1247 
1248 	/* insert custom IEs that go before HT */
1249 	if (ie && ie_len) {
1250 		static const u8 before_ht[] = {
1251 			WLAN_EID_SSID,
1252 			WLAN_EID_SUPP_RATES,
1253 			WLAN_EID_REQUEST,
1254 			WLAN_EID_EXT_SUPP_RATES,
1255 			WLAN_EID_DS_PARAMS,
1256 			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1257 		};
1258 		noffset = ieee80211_ie_split(ie, ie_len,
1259 					     before_ht, ARRAY_SIZE(before_ht),
1260 					     offset);
1261 		if (end - pos < noffset - offset)
1262 			goto out_err;
1263 		memcpy(pos, ie + offset, noffset - offset);
1264 		pos += noffset - offset;
1265 		offset = noffset;
1266 	}
1267 
1268 	if (sband->ht_cap.ht_supported) {
1269 		if (end - pos < 2 + sizeof(struct ieee80211_ht_cap))
1270 			goto out_err;
1271 		pos = ieee80211_ie_build_ht_cap(pos, &sband->ht_cap,
1272 						sband->ht_cap.cap);
1273 	}
1274 
1275 	/*
1276 	 * If adding more here, adjust code in main.c
1277 	 * that calculates local->scan_ies_len.
1278 	 */
1279 
1280 	/* insert custom IEs that go before VHT */
1281 	if (ie && ie_len) {
1282 		static const u8 before_vht[] = {
1283 			WLAN_EID_SSID,
1284 			WLAN_EID_SUPP_RATES,
1285 			WLAN_EID_REQUEST,
1286 			WLAN_EID_EXT_SUPP_RATES,
1287 			WLAN_EID_DS_PARAMS,
1288 			WLAN_EID_SUPPORTED_REGULATORY_CLASSES,
1289 			WLAN_EID_HT_CAPABILITY,
1290 			WLAN_EID_BSS_COEX_2040,
1291 			WLAN_EID_EXT_CAPABILITY,
1292 			WLAN_EID_SSID_LIST,
1293 			WLAN_EID_CHANNEL_USAGE,
1294 			WLAN_EID_INTERWORKING,
1295 			/* mesh ID can't happen here */
1296 			/* 60 GHz can't happen here right now */
1297 		};
1298 		noffset = ieee80211_ie_split(ie, ie_len,
1299 					     before_vht, ARRAY_SIZE(before_vht),
1300 					     offset);
1301 		if (end - pos < noffset - offset)
1302 			goto out_err;
1303 		memcpy(pos, ie + offset, noffset - offset);
1304 		pos += noffset - offset;
1305 		offset = noffset;
1306 	}
1307 
1308 	if (sband->vht_cap.vht_supported) {
1309 		if (end - pos < 2 + sizeof(struct ieee80211_vht_cap))
1310 			goto out_err;
1311 		pos = ieee80211_ie_build_vht_cap(pos, &sband->vht_cap,
1312 						 sband->vht_cap.cap);
1313 	}
1314 
1315 	/* add any remaining custom IEs */
1316 	if (ie && ie_len) {
1317 		noffset = ie_len;
1318 		if (end - pos < noffset - offset)
1319 			goto out_err;
1320 		memcpy(pos, ie + offset, noffset - offset);
1321 		pos += noffset - offset;
1322 	}
1323 
1324 	return pos - buffer;
1325  out_err:
1326 	WARN_ONCE(1, "not enough space for preq IEs\n");
1327 	return pos - buffer;
1328 }
1329 
1330 struct sk_buff *ieee80211_build_probe_req(struct ieee80211_sub_if_data *sdata,
1331 					  u8 *dst, u32 ratemask,
1332 					  struct ieee80211_channel *chan,
1333 					  const u8 *ssid, size_t ssid_len,
1334 					  const u8 *ie, size_t ie_len,
1335 					  bool directed)
1336 {
1337 	struct ieee80211_local *local = sdata->local;
1338 	struct cfg80211_chan_def chandef;
1339 	struct sk_buff *skb;
1340 	struct ieee80211_mgmt *mgmt;
1341 	int ies_len;
1342 
1343 	/*
1344 	 * Do not send DS Channel parameter for directed probe requests
1345 	 * in order to maximize the chance that we get a response.  Some
1346 	 * badly-behaved APs don't respond when this parameter is included.
1347 	 */
1348 	chandef.width = sdata->vif.bss_conf.chandef.width;
1349 	if (directed)
1350 		chandef.chan = NULL;
1351 	else
1352 		chandef.chan = chan;
1353 
1354 	skb = ieee80211_probereq_get(&local->hw, &sdata->vif,
1355 				     ssid, ssid_len, 100 + ie_len);
1356 	if (!skb)
1357 		return NULL;
1358 
1359 	ies_len = ieee80211_build_preq_ies(local, skb_tail_pointer(skb),
1360 					   skb_tailroom(skb),
1361 					   ie, ie_len, chan->band,
1362 					   ratemask, &chandef);
1363 	skb_put(skb, ies_len);
1364 
1365 	if (dst) {
1366 		mgmt = (struct ieee80211_mgmt *) skb->data;
1367 		memcpy(mgmt->da, dst, ETH_ALEN);
1368 		memcpy(mgmt->bssid, dst, ETH_ALEN);
1369 	}
1370 
1371 	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT;
1372 
1373 	return skb;
1374 }
1375 
1376 void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
1377 			      const u8 *ssid, size_t ssid_len,
1378 			      const u8 *ie, size_t ie_len,
1379 			      u32 ratemask, bool directed, u32 tx_flags,
1380 			      struct ieee80211_channel *channel, bool scan)
1381 {
1382 	struct sk_buff *skb;
1383 
1384 	skb = ieee80211_build_probe_req(sdata, dst, ratemask, channel,
1385 					ssid, ssid_len,
1386 					ie, ie_len, directed);
1387 	if (skb) {
1388 		IEEE80211_SKB_CB(skb)->flags |= tx_flags;
1389 		if (scan)
1390 			ieee80211_tx_skb_tid_band(sdata, skb, 7, channel->band);
1391 		else
1392 			ieee80211_tx_skb(sdata, skb);
1393 	}
1394 }
1395 
1396 u32 ieee80211_sta_get_rates(struct ieee80211_sub_if_data *sdata,
1397 			    struct ieee802_11_elems *elems,
1398 			    enum ieee80211_band band, u32 *basic_rates)
1399 {
1400 	struct ieee80211_supported_band *sband;
1401 	size_t num_rates;
1402 	u32 supp_rates, rate_flags;
1403 	int i, j, shift;
1404 	sband = sdata->local->hw.wiphy->bands[band];
1405 
1406 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
1407 	shift = ieee80211_vif_get_shift(&sdata->vif);
1408 
1409 	if (WARN_ON(!sband))
1410 		return 1;
1411 
1412 	num_rates = sband->n_bitrates;
1413 	supp_rates = 0;
1414 	for (i = 0; i < elems->supp_rates_len +
1415 		     elems->ext_supp_rates_len; i++) {
1416 		u8 rate = 0;
1417 		int own_rate;
1418 		bool is_basic;
1419 		if (i < elems->supp_rates_len)
1420 			rate = elems->supp_rates[i];
1421 		else if (elems->ext_supp_rates)
1422 			rate = elems->ext_supp_rates
1423 				[i - elems->supp_rates_len];
1424 		own_rate = 5 * (rate & 0x7f);
1425 		is_basic = !!(rate & 0x80);
1426 
1427 		if (is_basic && (rate & 0x7f) == BSS_MEMBERSHIP_SELECTOR_HT_PHY)
1428 			continue;
1429 
1430 		for (j = 0; j < num_rates; j++) {
1431 			int brate;
1432 			if ((rate_flags & sband->bitrates[j].flags)
1433 			    != rate_flags)
1434 				continue;
1435 
1436 			brate = DIV_ROUND_UP(sband->bitrates[j].bitrate,
1437 					     1 << shift);
1438 
1439 			if (brate == own_rate) {
1440 				supp_rates |= BIT(j);
1441 				if (basic_rates && is_basic)
1442 					*basic_rates |= BIT(j);
1443 			}
1444 		}
1445 	}
1446 	return supp_rates;
1447 }
1448 
1449 void ieee80211_stop_device(struct ieee80211_local *local)
1450 {
1451 	ieee80211_led_radio(local, false);
1452 	ieee80211_mod_tpt_led_trig(local, 0, IEEE80211_TPT_LEDTRIG_FL_RADIO);
1453 
1454 	cancel_work_sync(&local->reconfig_filter);
1455 
1456 	flush_workqueue(local->workqueue);
1457 	drv_stop(local);
1458 }
1459 
1460 static void ieee80211_assign_chanctx(struct ieee80211_local *local,
1461 				     struct ieee80211_sub_if_data *sdata)
1462 {
1463 	struct ieee80211_chanctx_conf *conf;
1464 	struct ieee80211_chanctx *ctx;
1465 
1466 	if (!local->use_chanctx)
1467 		return;
1468 
1469 	mutex_lock(&local->chanctx_mtx);
1470 	conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1471 					 lockdep_is_held(&local->chanctx_mtx));
1472 	if (conf) {
1473 		ctx = container_of(conf, struct ieee80211_chanctx, conf);
1474 		drv_assign_vif_chanctx(local, sdata, ctx);
1475 	}
1476 	mutex_unlock(&local->chanctx_mtx);
1477 }
1478 
1479 int ieee80211_reconfig(struct ieee80211_local *local)
1480 {
1481 	struct ieee80211_hw *hw = &local->hw;
1482 	struct ieee80211_sub_if_data *sdata;
1483 	struct ieee80211_chanctx *ctx;
1484 	struct sta_info *sta;
1485 	int res, i;
1486 	bool reconfig_due_to_wowlan = false;
1487 	struct ieee80211_sub_if_data *sched_scan_sdata;
1488 	bool sched_scan_stopped = false;
1489 
1490 #ifdef CONFIG_PM
1491 	if (local->suspended)
1492 		local->resuming = true;
1493 
1494 	if (local->wowlan) {
1495 		res = drv_resume(local);
1496 		local->wowlan = false;
1497 		if (res < 0) {
1498 			local->resuming = false;
1499 			return res;
1500 		}
1501 		if (res == 0)
1502 			goto wake_up;
1503 		WARN_ON(res > 1);
1504 		/*
1505 		 * res is 1, which means the driver requested
1506 		 * to go through a regular reset on wakeup.
1507 		 */
1508 		reconfig_due_to_wowlan = true;
1509 	}
1510 #endif
1511 	/* everything else happens only if HW was up & running */
1512 	if (!local->open_count)
1513 		goto wake_up;
1514 
1515 	/*
1516 	 * Upon resume hardware can sometimes be goofy due to
1517 	 * various platform / driver / bus issues, so restarting
1518 	 * the device may at times not work immediately. Propagate
1519 	 * the error.
1520 	 */
1521 	res = drv_start(local);
1522 	if (res) {
1523 		WARN(local->suspended, "Hardware became unavailable "
1524 		     "upon resume. This could be a software issue "
1525 		     "prior to suspend or a hardware issue.\n");
1526 		return res;
1527 	}
1528 
1529 	/* setup fragmentation threshold */
1530 	drv_set_frag_threshold(local, hw->wiphy->frag_threshold);
1531 
1532 	/* setup RTS threshold */
1533 	drv_set_rts_threshold(local, hw->wiphy->rts_threshold);
1534 
1535 	/* reset coverage class */
1536 	drv_set_coverage_class(local, hw->wiphy->coverage_class);
1537 
1538 	ieee80211_led_radio(local, true);
1539 	ieee80211_mod_tpt_led_trig(local,
1540 				   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1541 
1542 	/* add interfaces */
1543 	sdata = rtnl_dereference(local->monitor_sdata);
1544 	if (sdata) {
1545 		/* in HW restart it exists already */
1546 		WARN_ON(local->resuming);
1547 		res = drv_add_interface(local, sdata);
1548 		if (WARN_ON(res)) {
1549 			rcu_assign_pointer(local->monitor_sdata, NULL);
1550 			synchronize_net();
1551 			kfree(sdata);
1552 		}
1553 	}
1554 
1555 	list_for_each_entry(sdata, &local->interfaces, list) {
1556 		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1557 		    sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1558 		    ieee80211_sdata_running(sdata))
1559 			res = drv_add_interface(local, sdata);
1560 	}
1561 
1562 	/* add channel contexts */
1563 	if (local->use_chanctx) {
1564 		mutex_lock(&local->chanctx_mtx);
1565 		list_for_each_entry(ctx, &local->chanctx_list, list)
1566 			WARN_ON(drv_add_chanctx(local, ctx));
1567 		mutex_unlock(&local->chanctx_mtx);
1568 	}
1569 
1570 	list_for_each_entry(sdata, &local->interfaces, list) {
1571 		if (!ieee80211_sdata_running(sdata))
1572 			continue;
1573 		ieee80211_assign_chanctx(local, sdata);
1574 	}
1575 
1576 	sdata = rtnl_dereference(local->monitor_sdata);
1577 	if (sdata && ieee80211_sdata_running(sdata))
1578 		ieee80211_assign_chanctx(local, sdata);
1579 
1580 	/* add STAs back */
1581 	mutex_lock(&local->sta_mtx);
1582 	list_for_each_entry(sta, &local->sta_list, list) {
1583 		enum ieee80211_sta_state state;
1584 
1585 		if (!sta->uploaded)
1586 			continue;
1587 
1588 		/* AP-mode stations will be added later */
1589 		if (sta->sdata->vif.type == NL80211_IFTYPE_AP)
1590 			continue;
1591 
1592 		for (state = IEEE80211_STA_NOTEXIST;
1593 		     state < sta->sta_state; state++)
1594 			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1595 					      state + 1));
1596 	}
1597 	mutex_unlock(&local->sta_mtx);
1598 
1599 	/* reconfigure tx conf */
1600 	if (hw->queues >= IEEE80211_NUM_ACS) {
1601 		list_for_each_entry(sdata, &local->interfaces, list) {
1602 			if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1603 			    sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1604 			    !ieee80211_sdata_running(sdata))
1605 				continue;
1606 
1607 			for (i = 0; i < IEEE80211_NUM_ACS; i++)
1608 				drv_conf_tx(local, sdata, i,
1609 					    &sdata->tx_conf[i]);
1610 		}
1611 	}
1612 
1613 	/* reconfigure hardware */
1614 	ieee80211_hw_config(local, ~0);
1615 
1616 	ieee80211_configure_filter(local);
1617 
1618 	/* Finally also reconfigure all the BSS information */
1619 	list_for_each_entry(sdata, &local->interfaces, list) {
1620 		u32 changed;
1621 
1622 		if (!ieee80211_sdata_running(sdata))
1623 			continue;
1624 
1625 		/* common change flags for all interface types */
1626 		changed = BSS_CHANGED_ERP_CTS_PROT |
1627 			  BSS_CHANGED_ERP_PREAMBLE |
1628 			  BSS_CHANGED_ERP_SLOT |
1629 			  BSS_CHANGED_HT |
1630 			  BSS_CHANGED_BASIC_RATES |
1631 			  BSS_CHANGED_BEACON_INT |
1632 			  BSS_CHANGED_BSSID |
1633 			  BSS_CHANGED_CQM |
1634 			  BSS_CHANGED_QOS |
1635 			  BSS_CHANGED_IDLE |
1636 			  BSS_CHANGED_TXPOWER;
1637 
1638 		switch (sdata->vif.type) {
1639 		case NL80211_IFTYPE_STATION:
1640 			changed |= BSS_CHANGED_ASSOC |
1641 				   BSS_CHANGED_ARP_FILTER |
1642 				   BSS_CHANGED_PS;
1643 
1644 			/* Re-send beacon info report to the driver */
1645 			if (sdata->u.mgd.have_beacon)
1646 				changed |= BSS_CHANGED_BEACON_INFO;
1647 
1648 			sdata_lock(sdata);
1649 			ieee80211_bss_info_change_notify(sdata, changed);
1650 			sdata_unlock(sdata);
1651 			break;
1652 		case NL80211_IFTYPE_ADHOC:
1653 			changed |= BSS_CHANGED_IBSS;
1654 			/* fall through */
1655 		case NL80211_IFTYPE_AP:
1656 			changed |= BSS_CHANGED_SSID | BSS_CHANGED_P2P_PS;
1657 
1658 			if (sdata->vif.type == NL80211_IFTYPE_AP) {
1659 				changed |= BSS_CHANGED_AP_PROBE_RESP;
1660 
1661 				if (rcu_access_pointer(sdata->u.ap.beacon))
1662 					drv_start_ap(local, sdata);
1663 			}
1664 
1665 			/* fall through */
1666 		case NL80211_IFTYPE_MESH_POINT:
1667 			if (sdata->vif.bss_conf.enable_beacon) {
1668 				changed |= BSS_CHANGED_BEACON |
1669 					   BSS_CHANGED_BEACON_ENABLED;
1670 				ieee80211_bss_info_change_notify(sdata, changed);
1671 			}
1672 			break;
1673 		case NL80211_IFTYPE_WDS:
1674 			break;
1675 		case NL80211_IFTYPE_AP_VLAN:
1676 		case NL80211_IFTYPE_MONITOR:
1677 			/* ignore virtual */
1678 			break;
1679 		case NL80211_IFTYPE_P2P_DEVICE:
1680 			changed = BSS_CHANGED_IDLE;
1681 			break;
1682 		case NL80211_IFTYPE_UNSPECIFIED:
1683 		case NUM_NL80211_IFTYPES:
1684 		case NL80211_IFTYPE_P2P_CLIENT:
1685 		case NL80211_IFTYPE_P2P_GO:
1686 			WARN_ON(1);
1687 			break;
1688 		}
1689 	}
1690 
1691 	ieee80211_recalc_ps(local, -1);
1692 
1693 	/*
1694 	 * The sta might be in psm against the ap (e.g. because
1695 	 * this was the state before a hw restart), so we
1696 	 * explicitly send a null packet in order to make sure
1697 	 * it'll sync against the ap (and get out of psm).
1698 	 */
1699 	if (!(local->hw.conf.flags & IEEE80211_CONF_PS)) {
1700 		list_for_each_entry(sdata, &local->interfaces, list) {
1701 			if (sdata->vif.type != NL80211_IFTYPE_STATION)
1702 				continue;
1703 			if (!sdata->u.mgd.associated)
1704 				continue;
1705 
1706 			ieee80211_send_nullfunc(local, sdata, 0);
1707 		}
1708 	}
1709 
1710 	/* APs are now beaconing, add back stations */
1711 	mutex_lock(&local->sta_mtx);
1712 	list_for_each_entry(sta, &local->sta_list, list) {
1713 		enum ieee80211_sta_state state;
1714 
1715 		if (!sta->uploaded)
1716 			continue;
1717 
1718 		if (sta->sdata->vif.type != NL80211_IFTYPE_AP)
1719 			continue;
1720 
1721 		for (state = IEEE80211_STA_NOTEXIST;
1722 		     state < sta->sta_state; state++)
1723 			WARN_ON(drv_sta_state(local, sta->sdata, sta, state,
1724 					      state + 1));
1725 	}
1726 	mutex_unlock(&local->sta_mtx);
1727 
1728 	/* add back keys */
1729 	list_for_each_entry(sdata, &local->interfaces, list)
1730 		if (ieee80211_sdata_running(sdata))
1731 			ieee80211_enable_keys(sdata);
1732 
1733  wake_up:
1734 	local->in_reconfig = false;
1735 	barrier();
1736 
1737 	if (local->monitors == local->open_count && local->monitors > 0)
1738 		ieee80211_add_virtual_monitor(local);
1739 
1740 	/*
1741 	 * Clear the WLAN_STA_BLOCK_BA flag so new aggregation
1742 	 * sessions can be established after a resume.
1743 	 *
1744 	 * Also tear down aggregation sessions since reconfiguring
1745 	 * them in a hardware restart scenario is not easily done
1746 	 * right now, and the hardware will have lost information
1747 	 * about the sessions, but we and the AP still think they
1748 	 * are active. This is really a workaround though.
1749 	 */
1750 	if (hw->flags & IEEE80211_HW_AMPDU_AGGREGATION) {
1751 		mutex_lock(&local->sta_mtx);
1752 
1753 		list_for_each_entry(sta, &local->sta_list, list) {
1754 			ieee80211_sta_tear_down_BA_sessions(
1755 					sta, AGG_STOP_LOCAL_REQUEST);
1756 			clear_sta_flag(sta, WLAN_STA_BLOCK_BA);
1757 		}
1758 
1759 		mutex_unlock(&local->sta_mtx);
1760 	}
1761 
1762 	ieee80211_wake_queues_by_reason(hw, IEEE80211_MAX_QUEUE_MAP,
1763 					IEEE80211_QUEUE_STOP_REASON_SUSPEND);
1764 
1765 	/*
1766 	 * Reconfigure sched scan if it was interrupted by FW restart or
1767 	 * suspend.
1768 	 */
1769 	mutex_lock(&local->mtx);
1770 	sched_scan_sdata = rcu_dereference_protected(local->sched_scan_sdata,
1771 						lockdep_is_held(&local->mtx));
1772 	if (sched_scan_sdata && local->sched_scan_req)
1773 		/*
1774 		 * Sched scan stopped, but we don't want to report it. Instead,
1775 		 * we're trying to reschedule.
1776 		 */
1777 		if (__ieee80211_request_sched_scan_start(sched_scan_sdata,
1778 							 local->sched_scan_req))
1779 			sched_scan_stopped = true;
1780 	mutex_unlock(&local->mtx);
1781 
1782 	if (sched_scan_stopped)
1783 		cfg80211_sched_scan_stopped(local->hw.wiphy);
1784 
1785 	/*
1786 	 * If this is for hw restart things are still running.
1787 	 * We may want to change that later, however.
1788 	 */
1789 	if (!local->suspended || reconfig_due_to_wowlan)
1790 		drv_restart_complete(local);
1791 
1792 	if (!local->suspended)
1793 		return 0;
1794 
1795 #ifdef CONFIG_PM
1796 	/* first set suspended false, then resuming */
1797 	local->suspended = false;
1798 	mb();
1799 	local->resuming = false;
1800 
1801 	list_for_each_entry(sdata, &local->interfaces, list) {
1802 		if (!ieee80211_sdata_running(sdata))
1803 			continue;
1804 		if (sdata->vif.type == NL80211_IFTYPE_STATION)
1805 			ieee80211_sta_restart(sdata);
1806 	}
1807 
1808 	mod_timer(&local->sta_cleanup, jiffies + 1);
1809 #else
1810 	WARN_ON(1);
1811 #endif
1812 
1813 	return 0;
1814 }
1815 
1816 void ieee80211_resume_disconnect(struct ieee80211_vif *vif)
1817 {
1818 	struct ieee80211_sub_if_data *sdata;
1819 	struct ieee80211_local *local;
1820 	struct ieee80211_key *key;
1821 
1822 	if (WARN_ON(!vif))
1823 		return;
1824 
1825 	sdata = vif_to_sdata(vif);
1826 	local = sdata->local;
1827 
1828 	if (WARN_ON(!local->resuming))
1829 		return;
1830 
1831 	if (WARN_ON(vif->type != NL80211_IFTYPE_STATION))
1832 		return;
1833 
1834 	sdata->flags |= IEEE80211_SDATA_DISCONNECT_RESUME;
1835 
1836 	mutex_lock(&local->key_mtx);
1837 	list_for_each_entry(key, &sdata->key_list, list)
1838 		key->flags |= KEY_FLAG_TAINTED;
1839 	mutex_unlock(&local->key_mtx);
1840 }
1841 EXPORT_SYMBOL_GPL(ieee80211_resume_disconnect);
1842 
1843 void ieee80211_recalc_smps(struct ieee80211_sub_if_data *sdata)
1844 {
1845 	struct ieee80211_local *local = sdata->local;
1846 	struct ieee80211_chanctx_conf *chanctx_conf;
1847 	struct ieee80211_chanctx *chanctx;
1848 
1849 	mutex_lock(&local->chanctx_mtx);
1850 
1851 	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1852 					lockdep_is_held(&local->chanctx_mtx));
1853 
1854 	if (WARN_ON_ONCE(!chanctx_conf))
1855 		goto unlock;
1856 
1857 	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
1858 	ieee80211_recalc_smps_chanctx(local, chanctx);
1859  unlock:
1860 	mutex_unlock(&local->chanctx_mtx);
1861 }
1862 
1863 void ieee80211_recalc_min_chandef(struct ieee80211_sub_if_data *sdata)
1864 {
1865 	struct ieee80211_local *local = sdata->local;
1866 	struct ieee80211_chanctx_conf *chanctx_conf;
1867 	struct ieee80211_chanctx *chanctx;
1868 
1869 	mutex_lock(&local->chanctx_mtx);
1870 
1871 	chanctx_conf = rcu_dereference_protected(sdata->vif.chanctx_conf,
1872 					lockdep_is_held(&local->chanctx_mtx));
1873 
1874 	if (WARN_ON_ONCE(!chanctx_conf))
1875 		goto unlock;
1876 
1877 	chanctx = container_of(chanctx_conf, struct ieee80211_chanctx, conf);
1878 	ieee80211_recalc_chanctx_min_def(local, chanctx);
1879  unlock:
1880 	mutex_unlock(&local->chanctx_mtx);
1881 }
1882 
1883 static bool ieee80211_id_in_list(const u8 *ids, int n_ids, u8 id)
1884 {
1885 	int i;
1886 
1887 	for (i = 0; i < n_ids; i++)
1888 		if (ids[i] == id)
1889 			return true;
1890 	return false;
1891 }
1892 
1893 /**
1894  * ieee80211_ie_split - split an IE buffer according to ordering
1895  *
1896  * @ies: the IE buffer
1897  * @ielen: the length of the IE buffer
1898  * @ids: an array with element IDs that are allowed before
1899  *	the split
1900  * @n_ids: the size of the element ID array
1901  * @offset: offset where to start splitting in the buffer
1902  *
1903  * This function splits an IE buffer by updating the @offset
1904  * variable to point to the location where the buffer should be
1905  * split.
1906  *
1907  * It assumes that the given IE buffer is well-formed, this
1908  * has to be guaranteed by the caller!
1909  *
1910  * It also assumes that the IEs in the buffer are ordered
1911  * correctly, if not the result of using this function will not
1912  * be ordered correctly either, i.e. it does no reordering.
1913  *
1914  * The function returns the offset where the next part of the
1915  * buffer starts, which may be @ielen if the entire (remainder)
1916  * of the buffer should be used.
1917  */
1918 size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
1919 			  const u8 *ids, int n_ids, size_t offset)
1920 {
1921 	size_t pos = offset;
1922 
1923 	while (pos < ielen && ieee80211_id_in_list(ids, n_ids, ies[pos]))
1924 		pos += 2 + ies[pos + 1];
1925 
1926 	return pos;
1927 }
1928 
1929 size_t ieee80211_ie_split_vendor(const u8 *ies, size_t ielen, size_t offset)
1930 {
1931 	size_t pos = offset;
1932 
1933 	while (pos < ielen && ies[pos] != WLAN_EID_VENDOR_SPECIFIC)
1934 		pos += 2 + ies[pos + 1];
1935 
1936 	return pos;
1937 }
1938 
1939 static void _ieee80211_enable_rssi_reports(struct ieee80211_sub_if_data *sdata,
1940 					    int rssi_min_thold,
1941 					    int rssi_max_thold)
1942 {
1943 	trace_api_enable_rssi_reports(sdata, rssi_min_thold, rssi_max_thold);
1944 
1945 	if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION))
1946 		return;
1947 
1948 	/*
1949 	 * Scale up threshold values before storing it, as the RSSI averaging
1950 	 * algorithm uses a scaled up value as well. Change this scaling
1951 	 * factor if the RSSI averaging algorithm changes.
1952 	 */
1953 	sdata->u.mgd.rssi_min_thold = rssi_min_thold*16;
1954 	sdata->u.mgd.rssi_max_thold = rssi_max_thold*16;
1955 }
1956 
1957 void ieee80211_enable_rssi_reports(struct ieee80211_vif *vif,
1958 				    int rssi_min_thold,
1959 				    int rssi_max_thold)
1960 {
1961 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1962 
1963 	WARN_ON(rssi_min_thold == rssi_max_thold ||
1964 		rssi_min_thold > rssi_max_thold);
1965 
1966 	_ieee80211_enable_rssi_reports(sdata, rssi_min_thold,
1967 				       rssi_max_thold);
1968 }
1969 EXPORT_SYMBOL(ieee80211_enable_rssi_reports);
1970 
1971 void ieee80211_disable_rssi_reports(struct ieee80211_vif *vif)
1972 {
1973 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
1974 
1975 	_ieee80211_enable_rssi_reports(sdata, 0, 0);
1976 }
1977 EXPORT_SYMBOL(ieee80211_disable_rssi_reports);
1978 
1979 u8 *ieee80211_ie_build_ht_cap(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
1980 			      u16 cap)
1981 {
1982 	__le16 tmp;
1983 
1984 	*pos++ = WLAN_EID_HT_CAPABILITY;
1985 	*pos++ = sizeof(struct ieee80211_ht_cap);
1986 	memset(pos, 0, sizeof(struct ieee80211_ht_cap));
1987 
1988 	/* capability flags */
1989 	tmp = cpu_to_le16(cap);
1990 	memcpy(pos, &tmp, sizeof(u16));
1991 	pos += sizeof(u16);
1992 
1993 	/* AMPDU parameters */
1994 	*pos++ = ht_cap->ampdu_factor |
1995 		 (ht_cap->ampdu_density <<
1996 			IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT);
1997 
1998 	/* MCS set */
1999 	memcpy(pos, &ht_cap->mcs, sizeof(ht_cap->mcs));
2000 	pos += sizeof(ht_cap->mcs);
2001 
2002 	/* extended capabilities */
2003 	pos += sizeof(__le16);
2004 
2005 	/* BF capabilities */
2006 	pos += sizeof(__le32);
2007 
2008 	/* antenna selection */
2009 	pos += sizeof(u8);
2010 
2011 	return pos;
2012 }
2013 
2014 u8 *ieee80211_ie_build_vht_cap(u8 *pos, struct ieee80211_sta_vht_cap *vht_cap,
2015 			       u32 cap)
2016 {
2017 	__le32 tmp;
2018 
2019 	*pos++ = WLAN_EID_VHT_CAPABILITY;
2020 	*pos++ = sizeof(struct ieee80211_vht_cap);
2021 	memset(pos, 0, sizeof(struct ieee80211_vht_cap));
2022 
2023 	/* capability flags */
2024 	tmp = cpu_to_le32(cap);
2025 	memcpy(pos, &tmp, sizeof(u32));
2026 	pos += sizeof(u32);
2027 
2028 	/* VHT MCS set */
2029 	memcpy(pos, &vht_cap->vht_mcs, sizeof(vht_cap->vht_mcs));
2030 	pos += sizeof(vht_cap->vht_mcs);
2031 
2032 	return pos;
2033 }
2034 
2035 u8 *ieee80211_ie_build_ht_oper(u8 *pos, struct ieee80211_sta_ht_cap *ht_cap,
2036 			       const struct cfg80211_chan_def *chandef,
2037 			       u16 prot_mode)
2038 {
2039 	struct ieee80211_ht_operation *ht_oper;
2040 	/* Build HT Information */
2041 	*pos++ = WLAN_EID_HT_OPERATION;
2042 	*pos++ = sizeof(struct ieee80211_ht_operation);
2043 	ht_oper = (struct ieee80211_ht_operation *)pos;
2044 	ht_oper->primary_chan = ieee80211_frequency_to_channel(
2045 					chandef->chan->center_freq);
2046 	switch (chandef->width) {
2047 	case NL80211_CHAN_WIDTH_160:
2048 	case NL80211_CHAN_WIDTH_80P80:
2049 	case NL80211_CHAN_WIDTH_80:
2050 	case NL80211_CHAN_WIDTH_40:
2051 		if (chandef->center_freq1 > chandef->chan->center_freq)
2052 			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2053 		else
2054 			ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2055 		break;
2056 	default:
2057 		ht_oper->ht_param = IEEE80211_HT_PARAM_CHA_SEC_NONE;
2058 		break;
2059 	}
2060 	if (ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 &&
2061 	    chandef->width != NL80211_CHAN_WIDTH_20_NOHT &&
2062 	    chandef->width != NL80211_CHAN_WIDTH_20)
2063 		ht_oper->ht_param |= IEEE80211_HT_PARAM_CHAN_WIDTH_ANY;
2064 
2065 	ht_oper->operation_mode = cpu_to_le16(prot_mode);
2066 	ht_oper->stbc_param = 0x0000;
2067 
2068 	/* It seems that Basic MCS set and Supported MCS set
2069 	   are identical for the first 10 bytes */
2070 	memset(&ht_oper->basic_set, 0, 16);
2071 	memcpy(&ht_oper->basic_set, &ht_cap->mcs, 10);
2072 
2073 	return pos + sizeof(struct ieee80211_ht_operation);
2074 }
2075 
2076 void ieee80211_ht_oper_to_chandef(struct ieee80211_channel *control_chan,
2077 				  const struct ieee80211_ht_operation *ht_oper,
2078 				  struct cfg80211_chan_def *chandef)
2079 {
2080 	enum nl80211_channel_type channel_type;
2081 
2082 	if (!ht_oper) {
2083 		cfg80211_chandef_create(chandef, control_chan,
2084 					NL80211_CHAN_NO_HT);
2085 		return;
2086 	}
2087 
2088 	switch (ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
2089 	case IEEE80211_HT_PARAM_CHA_SEC_NONE:
2090 		channel_type = NL80211_CHAN_HT20;
2091 		break;
2092 	case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
2093 		channel_type = NL80211_CHAN_HT40PLUS;
2094 		break;
2095 	case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
2096 		channel_type = NL80211_CHAN_HT40MINUS;
2097 		break;
2098 	default:
2099 		channel_type = NL80211_CHAN_NO_HT;
2100 	}
2101 
2102 	cfg80211_chandef_create(chandef, control_chan, channel_type);
2103 }
2104 
2105 int ieee80211_parse_bitrates(struct cfg80211_chan_def *chandef,
2106 			     const struct ieee80211_supported_band *sband,
2107 			     const u8 *srates, int srates_len, u32 *rates)
2108 {
2109 	u32 rate_flags = ieee80211_chandef_rate_flags(chandef);
2110 	int shift = ieee80211_chandef_get_shift(chandef);
2111 	struct ieee80211_rate *br;
2112 	int brate, rate, i, j, count = 0;
2113 
2114 	*rates = 0;
2115 
2116 	for (i = 0; i < srates_len; i++) {
2117 		rate = srates[i] & 0x7f;
2118 
2119 		for (j = 0; j < sband->n_bitrates; j++) {
2120 			br = &sband->bitrates[j];
2121 			if ((rate_flags & br->flags) != rate_flags)
2122 				continue;
2123 
2124 			brate = DIV_ROUND_UP(br->bitrate, (1 << shift) * 5);
2125 			if (brate == rate) {
2126 				*rates |= BIT(j);
2127 				count++;
2128 				break;
2129 			}
2130 		}
2131 	}
2132 	return count;
2133 }
2134 
2135 int ieee80211_add_srates_ie(struct ieee80211_sub_if_data *sdata,
2136 			    struct sk_buff *skb, bool need_basic,
2137 			    enum ieee80211_band band)
2138 {
2139 	struct ieee80211_local *local = sdata->local;
2140 	struct ieee80211_supported_band *sband;
2141 	int rate, shift;
2142 	u8 i, rates, *pos;
2143 	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2144 	u32 rate_flags;
2145 
2146 	shift = ieee80211_vif_get_shift(&sdata->vif);
2147 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
2148 	sband = local->hw.wiphy->bands[band];
2149 	rates = 0;
2150 	for (i = 0; i < sband->n_bitrates; i++) {
2151 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2152 			continue;
2153 		rates++;
2154 	}
2155 	if (rates > 8)
2156 		rates = 8;
2157 
2158 	if (skb_tailroom(skb) < rates + 2)
2159 		return -ENOMEM;
2160 
2161 	pos = skb_put(skb, rates + 2);
2162 	*pos++ = WLAN_EID_SUPP_RATES;
2163 	*pos++ = rates;
2164 	for (i = 0; i < rates; i++) {
2165 		u8 basic = 0;
2166 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2167 			continue;
2168 
2169 		if (need_basic && basic_rates & BIT(i))
2170 			basic = 0x80;
2171 		rate = sband->bitrates[i].bitrate;
2172 		rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2173 				    5 * (1 << shift));
2174 		*pos++ = basic | (u8) rate;
2175 	}
2176 
2177 	return 0;
2178 }
2179 
2180 int ieee80211_add_ext_srates_ie(struct ieee80211_sub_if_data *sdata,
2181 				struct sk_buff *skb, bool need_basic,
2182 				enum ieee80211_band band)
2183 {
2184 	struct ieee80211_local *local = sdata->local;
2185 	struct ieee80211_supported_band *sband;
2186 	int rate, shift;
2187 	u8 i, exrates, *pos;
2188 	u32 basic_rates = sdata->vif.bss_conf.basic_rates;
2189 	u32 rate_flags;
2190 
2191 	rate_flags = ieee80211_chandef_rate_flags(&sdata->vif.bss_conf.chandef);
2192 	shift = ieee80211_vif_get_shift(&sdata->vif);
2193 
2194 	sband = local->hw.wiphy->bands[band];
2195 	exrates = 0;
2196 	for (i = 0; i < sband->n_bitrates; i++) {
2197 		if ((rate_flags & sband->bitrates[i].flags) != rate_flags)
2198 			continue;
2199 		exrates++;
2200 	}
2201 
2202 	if (exrates > 8)
2203 		exrates -= 8;
2204 	else
2205 		exrates = 0;
2206 
2207 	if (skb_tailroom(skb) < exrates + 2)
2208 		return -ENOMEM;
2209 
2210 	if (exrates) {
2211 		pos = skb_put(skb, exrates + 2);
2212 		*pos++ = WLAN_EID_EXT_SUPP_RATES;
2213 		*pos++ = exrates;
2214 		for (i = 8; i < sband->n_bitrates; i++) {
2215 			u8 basic = 0;
2216 			if ((rate_flags & sband->bitrates[i].flags)
2217 			    != rate_flags)
2218 				continue;
2219 			if (need_basic && basic_rates & BIT(i))
2220 				basic = 0x80;
2221 			rate = DIV_ROUND_UP(sband->bitrates[i].bitrate,
2222 					    5 * (1 << shift));
2223 			*pos++ = basic | (u8) rate;
2224 		}
2225 	}
2226 	return 0;
2227 }
2228 
2229 int ieee80211_ave_rssi(struct ieee80211_vif *vif)
2230 {
2231 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
2232 	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
2233 
2234 	if (WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_STATION)) {
2235 		/* non-managed type inferfaces */
2236 		return 0;
2237 	}
2238 	return ifmgd->ave_beacon_signal / 16;
2239 }
2240 EXPORT_SYMBOL_GPL(ieee80211_ave_rssi);
2241 
2242 u8 ieee80211_mcs_to_chains(const struct ieee80211_mcs_info *mcs)
2243 {
2244 	if (!mcs)
2245 		return 1;
2246 
2247 	/* TODO: consider rx_highest */
2248 
2249 	if (mcs->rx_mask[3])
2250 		return 4;
2251 	if (mcs->rx_mask[2])
2252 		return 3;
2253 	if (mcs->rx_mask[1])
2254 		return 2;
2255 	return 1;
2256 }
2257 
2258 /**
2259  * ieee80211_calculate_rx_timestamp - calculate timestamp in frame
2260  * @local: mac80211 hw info struct
2261  * @status: RX status
2262  * @mpdu_len: total MPDU length (including FCS)
2263  * @mpdu_offset: offset into MPDU to calculate timestamp at
2264  *
2265  * This function calculates the RX timestamp at the given MPDU offset, taking
2266  * into account what the RX timestamp was. An offset of 0 will just normalize
2267  * the timestamp to TSF at beginning of MPDU reception.
2268  */
2269 u64 ieee80211_calculate_rx_timestamp(struct ieee80211_local *local,
2270 				     struct ieee80211_rx_status *status,
2271 				     unsigned int mpdu_len,
2272 				     unsigned int mpdu_offset)
2273 {
2274 	u64 ts = status->mactime;
2275 	struct rate_info ri;
2276 	u16 rate;
2277 
2278 	if (WARN_ON(!ieee80211_have_rx_timestamp(status)))
2279 		return 0;
2280 
2281 	memset(&ri, 0, sizeof(ri));
2282 
2283 	/* Fill cfg80211 rate info */
2284 	if (status->flag & RX_FLAG_HT) {
2285 		ri.mcs = status->rate_idx;
2286 		ri.flags |= RATE_INFO_FLAGS_MCS;
2287 		if (status->flag & RX_FLAG_40MHZ)
2288 			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
2289 		if (status->flag & RX_FLAG_SHORT_GI)
2290 			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2291 	} else if (status->flag & RX_FLAG_VHT) {
2292 		ri.flags |= RATE_INFO_FLAGS_VHT_MCS;
2293 		ri.mcs = status->rate_idx;
2294 		ri.nss = status->vht_nss;
2295 		if (status->flag & RX_FLAG_40MHZ)
2296 			ri.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
2297 		if (status->vht_flag & RX_VHT_FLAG_80MHZ)
2298 			ri.flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
2299 		if (status->vht_flag & RX_VHT_FLAG_80P80MHZ)
2300 			ri.flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
2301 		if (status->vht_flag & RX_VHT_FLAG_160MHZ)
2302 			ri.flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
2303 		if (status->flag & RX_FLAG_SHORT_GI)
2304 			ri.flags |= RATE_INFO_FLAGS_SHORT_GI;
2305 	} else {
2306 		struct ieee80211_supported_band *sband;
2307 		int shift = 0;
2308 		int bitrate;
2309 
2310 		if (status->flag & RX_FLAG_10MHZ)
2311 			shift = 1;
2312 		if (status->flag & RX_FLAG_5MHZ)
2313 			shift = 2;
2314 
2315 		sband = local->hw.wiphy->bands[status->band];
2316 		bitrate = sband->bitrates[status->rate_idx].bitrate;
2317 		ri.legacy = DIV_ROUND_UP(bitrate, (1 << shift));
2318 	}
2319 
2320 	rate = cfg80211_calculate_bitrate(&ri);
2321 	if (WARN_ONCE(!rate,
2322 		      "Invalid bitrate: flags=0x%x, idx=%d, vht_nss=%d\n",
2323 		      status->flag, status->rate_idx, status->vht_nss))
2324 		return 0;
2325 
2326 	/* rewind from end of MPDU */
2327 	if (status->flag & RX_FLAG_MACTIME_END)
2328 		ts -= mpdu_len * 8 * 10 / rate;
2329 
2330 	ts += mpdu_offset * 8 * 10 / rate;
2331 
2332 	return ts;
2333 }
2334 
2335 void ieee80211_dfs_cac_cancel(struct ieee80211_local *local)
2336 {
2337 	struct ieee80211_sub_if_data *sdata;
2338 	struct cfg80211_chan_def chandef;
2339 
2340 	mutex_lock(&local->mtx);
2341 	mutex_lock(&local->iflist_mtx);
2342 	list_for_each_entry(sdata, &local->interfaces, list) {
2343 		/* it might be waiting for the local->mtx, but then
2344 		 * by the time it gets it, sdata->wdev.cac_started
2345 		 * will no longer be true
2346 		 */
2347 		cancel_delayed_work(&sdata->dfs_cac_timer_work);
2348 
2349 		if (sdata->wdev.cac_started) {
2350 			chandef = sdata->vif.bss_conf.chandef;
2351 			ieee80211_vif_release_channel(sdata);
2352 			cfg80211_cac_event(sdata->dev,
2353 					   &chandef,
2354 					   NL80211_RADAR_CAC_ABORTED,
2355 					   GFP_KERNEL);
2356 		}
2357 	}
2358 	mutex_unlock(&local->iflist_mtx);
2359 	mutex_unlock(&local->mtx);
2360 }
2361 
2362 void ieee80211_dfs_radar_detected_work(struct work_struct *work)
2363 {
2364 	struct ieee80211_local *local =
2365 		container_of(work, struct ieee80211_local, radar_detected_work);
2366 	struct cfg80211_chan_def chandef = local->hw.conf.chandef;
2367 
2368 	ieee80211_dfs_cac_cancel(local);
2369 
2370 	if (local->use_chanctx)
2371 		/* currently not handled */
2372 		WARN_ON(1);
2373 	else
2374 		cfg80211_radar_event(local->hw.wiphy, &chandef, GFP_KERNEL);
2375 }
2376 
2377 void ieee80211_radar_detected(struct ieee80211_hw *hw)
2378 {
2379 	struct ieee80211_local *local = hw_to_local(hw);
2380 
2381 	trace_api_radar_detected(local);
2382 
2383 	ieee80211_queue_work(hw, &local->radar_detected_work);
2384 }
2385 EXPORT_SYMBOL(ieee80211_radar_detected);
2386 
2387 u32 ieee80211_chandef_downgrade(struct cfg80211_chan_def *c)
2388 {
2389 	u32 ret;
2390 	int tmp;
2391 
2392 	switch (c->width) {
2393 	case NL80211_CHAN_WIDTH_20:
2394 		c->width = NL80211_CHAN_WIDTH_20_NOHT;
2395 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2396 		break;
2397 	case NL80211_CHAN_WIDTH_40:
2398 		c->width = NL80211_CHAN_WIDTH_20;
2399 		c->center_freq1 = c->chan->center_freq;
2400 		ret = IEEE80211_STA_DISABLE_40MHZ |
2401 		      IEEE80211_STA_DISABLE_VHT;
2402 		break;
2403 	case NL80211_CHAN_WIDTH_80:
2404 		tmp = (30 + c->chan->center_freq - c->center_freq1)/20;
2405 		/* n_P40 */
2406 		tmp /= 2;
2407 		/* freq_P40 */
2408 		c->center_freq1 = c->center_freq1 - 20 + 40 * tmp;
2409 		c->width = NL80211_CHAN_WIDTH_40;
2410 		ret = IEEE80211_STA_DISABLE_VHT;
2411 		break;
2412 	case NL80211_CHAN_WIDTH_80P80:
2413 		c->center_freq2 = 0;
2414 		c->width = NL80211_CHAN_WIDTH_80;
2415 		ret = IEEE80211_STA_DISABLE_80P80MHZ |
2416 		      IEEE80211_STA_DISABLE_160MHZ;
2417 		break;
2418 	case NL80211_CHAN_WIDTH_160:
2419 		/* n_P20 */
2420 		tmp = (70 + c->chan->center_freq - c->center_freq1)/20;
2421 		/* n_P80 */
2422 		tmp /= 4;
2423 		c->center_freq1 = c->center_freq1 - 40 + 80 * tmp;
2424 		c->width = NL80211_CHAN_WIDTH_80;
2425 		ret = IEEE80211_STA_DISABLE_80P80MHZ |
2426 		      IEEE80211_STA_DISABLE_160MHZ;
2427 		break;
2428 	default:
2429 	case NL80211_CHAN_WIDTH_20_NOHT:
2430 		WARN_ON_ONCE(1);
2431 		c->width = NL80211_CHAN_WIDTH_20_NOHT;
2432 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2433 		break;
2434 	case NL80211_CHAN_WIDTH_5:
2435 	case NL80211_CHAN_WIDTH_10:
2436 		WARN_ON_ONCE(1);
2437 		/* keep c->width */
2438 		ret = IEEE80211_STA_DISABLE_HT | IEEE80211_STA_DISABLE_VHT;
2439 		break;
2440 	}
2441 
2442 	WARN_ON_ONCE(!cfg80211_chandef_valid(c));
2443 
2444 	return ret;
2445 }
2446 
2447 /*
2448  * Returns true if smps_mode_new is strictly more restrictive than
2449  * smps_mode_old.
2450  */
2451 bool ieee80211_smps_is_restrictive(enum ieee80211_smps_mode smps_mode_old,
2452 				   enum ieee80211_smps_mode smps_mode_new)
2453 {
2454 	if (WARN_ON_ONCE(smps_mode_old == IEEE80211_SMPS_AUTOMATIC ||
2455 			 smps_mode_new == IEEE80211_SMPS_AUTOMATIC))
2456 		return false;
2457 
2458 	switch (smps_mode_old) {
2459 	case IEEE80211_SMPS_STATIC:
2460 		return false;
2461 	case IEEE80211_SMPS_DYNAMIC:
2462 		return smps_mode_new == IEEE80211_SMPS_STATIC;
2463 	case IEEE80211_SMPS_OFF:
2464 		return smps_mode_new != IEEE80211_SMPS_OFF;
2465 	default:
2466 		WARN_ON(1);
2467 	}
2468 
2469 	return false;
2470 }
2471 
2472 int ieee80211_send_action_csa(struct ieee80211_sub_if_data *sdata,
2473 			      struct cfg80211_csa_settings *csa_settings)
2474 {
2475 	struct sk_buff *skb;
2476 	struct ieee80211_mgmt *mgmt;
2477 	struct ieee80211_local *local = sdata->local;
2478 	int freq;
2479 	int hdr_len = offsetof(struct ieee80211_mgmt, u.action.u.chan_switch) +
2480 			       sizeof(mgmt->u.action.u.chan_switch);
2481 	u8 *pos;
2482 
2483 	if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
2484 	    sdata->vif.type != NL80211_IFTYPE_MESH_POINT)
2485 		return -EOPNOTSUPP;
2486 
2487 	skb = dev_alloc_skb(local->tx_headroom + hdr_len +
2488 			    5 + /* channel switch announcement element */
2489 			    3 + /* secondary channel offset element */
2490 			    8); /* mesh channel switch parameters element */
2491 	if (!skb)
2492 		return -ENOMEM;
2493 
2494 	skb_reserve(skb, local->tx_headroom);
2495 	mgmt = (struct ieee80211_mgmt *)skb_put(skb, hdr_len);
2496 	memset(mgmt, 0, hdr_len);
2497 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
2498 					  IEEE80211_STYPE_ACTION);
2499 
2500 	eth_broadcast_addr(mgmt->da);
2501 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
2502 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
2503 		memcpy(mgmt->bssid, sdata->vif.addr, ETH_ALEN);
2504 	} else {
2505 		struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
2506 		memcpy(mgmt->bssid, ifibss->bssid, ETH_ALEN);
2507 	}
2508 	mgmt->u.action.category = WLAN_CATEGORY_SPECTRUM_MGMT;
2509 	mgmt->u.action.u.chan_switch.action_code = WLAN_ACTION_SPCT_CHL_SWITCH;
2510 	pos = skb_put(skb, 5);
2511 	*pos++ = WLAN_EID_CHANNEL_SWITCH;			/* EID */
2512 	*pos++ = 3;						/* IE length */
2513 	*pos++ = csa_settings->block_tx ? 1 : 0;		/* CSA mode */
2514 	freq = csa_settings->chandef.chan->center_freq;
2515 	*pos++ = ieee80211_frequency_to_channel(freq);		/* channel */
2516 	*pos++ = csa_settings->count;				/* count */
2517 
2518 	if (csa_settings->chandef.width == NL80211_CHAN_WIDTH_40) {
2519 		enum nl80211_channel_type ch_type;
2520 
2521 		skb_put(skb, 3);
2522 		*pos++ = WLAN_EID_SECONDARY_CHANNEL_OFFSET;	/* EID */
2523 		*pos++ = 1;					/* IE length */
2524 		ch_type = cfg80211_get_chandef_type(&csa_settings->chandef);
2525 		if (ch_type == NL80211_CHAN_HT40PLUS)
2526 			*pos++ = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
2527 		else
2528 			*pos++ = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
2529 	}
2530 
2531 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
2532 		struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
2533 
2534 		skb_put(skb, 8);
2535 		*pos++ = WLAN_EID_CHAN_SWITCH_PARAM;		/* EID */
2536 		*pos++ = 6;					/* IE length */
2537 		*pos++ = sdata->u.mesh.mshcfg.dot11MeshTTL;	/* Mesh TTL */
2538 		*pos = 0x00;	/* Mesh Flag: Tx Restrict, Initiator, Reason */
2539 		*pos |= WLAN_EID_CHAN_SWITCH_PARAM_INITIATOR;
2540 		*pos++ |= csa_settings->block_tx ?
2541 			  WLAN_EID_CHAN_SWITCH_PARAM_TX_RESTRICT : 0x00;
2542 		put_unaligned_le16(WLAN_REASON_MESH_CHAN, pos); /* Reason Cd */
2543 		pos += 2;
2544 		put_unaligned_le16(ifmsh->pre_value, pos);/* Precedence Value */
2545 		pos += 2;
2546 	}
2547 
2548 	ieee80211_tx_skb(sdata, skb);
2549 	return 0;
2550 }
2551 
2552 bool ieee80211_cs_valid(const struct ieee80211_cipher_scheme *cs)
2553 {
2554 	return !(cs == NULL || cs->cipher == 0 ||
2555 		 cs->hdr_len < cs->pn_len + cs->pn_off ||
2556 		 cs->hdr_len <= cs->key_idx_off ||
2557 		 cs->key_idx_shift > 7 ||
2558 		 cs->key_idx_mask == 0);
2559 }
2560 
2561 bool ieee80211_cs_list_valid(const struct ieee80211_cipher_scheme *cs, int n)
2562 {
2563 	int i;
2564 
2565 	/* Ensure we have enough iftype bitmap space for all iftype values */
2566 	WARN_ON((NUM_NL80211_IFTYPES / 8 + 1) > sizeof(cs[0].iftype));
2567 
2568 	for (i = 0; i < n; i++)
2569 		if (!ieee80211_cs_valid(&cs[i]))
2570 			return false;
2571 
2572 	return true;
2573 }
2574 
2575 const struct ieee80211_cipher_scheme *
2576 ieee80211_cs_get(struct ieee80211_local *local, u32 cipher,
2577 		 enum nl80211_iftype iftype)
2578 {
2579 	const struct ieee80211_cipher_scheme *l = local->hw.cipher_schemes;
2580 	int n = local->hw.n_cipher_schemes;
2581 	int i;
2582 	const struct ieee80211_cipher_scheme *cs = NULL;
2583 
2584 	for (i = 0; i < n; i++) {
2585 		if (l[i].cipher == cipher) {
2586 			cs = &l[i];
2587 			break;
2588 		}
2589 	}
2590 
2591 	if (!cs || !(cs->iftype & BIT(iftype)))
2592 		return NULL;
2593 
2594 	return cs;
2595 }
2596 
2597 int ieee80211_cs_headroom(struct ieee80211_local *local,
2598 			  struct cfg80211_crypto_settings *crypto,
2599 			  enum nl80211_iftype iftype)
2600 {
2601 	const struct ieee80211_cipher_scheme *cs;
2602 	int headroom = IEEE80211_ENCRYPT_HEADROOM;
2603 	int i;
2604 
2605 	for (i = 0; i < crypto->n_ciphers_pairwise; i++) {
2606 		cs = ieee80211_cs_get(local, crypto->ciphers_pairwise[i],
2607 				      iftype);
2608 
2609 		if (cs && headroom < cs->hdr_len)
2610 			headroom = cs->hdr_len;
2611 	}
2612 
2613 	cs = ieee80211_cs_get(local, crypto->cipher_group, iftype);
2614 	if (cs && headroom < cs->hdr_len)
2615 		headroom = cs->hdr_len;
2616 
2617 	return headroom;
2618 }
2619 
2620 static bool
2621 ieee80211_extend_noa_desc(struct ieee80211_noa_data *data, u32 tsf, int i)
2622 {
2623 	s32 end = data->desc[i].start + data->desc[i].duration - (tsf + 1);
2624 	int skip;
2625 
2626 	if (end > 0)
2627 		return false;
2628 
2629 	/* End time is in the past, check for repetitions */
2630 	skip = DIV_ROUND_UP(-end, data->desc[i].interval);
2631 	if (data->count[i] < 255) {
2632 		if (data->count[i] <= skip) {
2633 			data->count[i] = 0;
2634 			return false;
2635 		}
2636 
2637 		data->count[i] -= skip;
2638 	}
2639 
2640 	data->desc[i].start += skip * data->desc[i].interval;
2641 
2642 	return true;
2643 }
2644 
2645 static bool
2646 ieee80211_extend_absent_time(struct ieee80211_noa_data *data, u32 tsf,
2647 			     s32 *offset)
2648 {
2649 	bool ret = false;
2650 	int i;
2651 
2652 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
2653 		s32 cur;
2654 
2655 		if (!data->count[i])
2656 			continue;
2657 
2658 		if (ieee80211_extend_noa_desc(data, tsf + *offset, i))
2659 			ret = true;
2660 
2661 		cur = data->desc[i].start - tsf;
2662 		if (cur > *offset)
2663 			continue;
2664 
2665 		cur = data->desc[i].start + data->desc[i].duration - tsf;
2666 		if (cur > *offset)
2667 			*offset = cur;
2668 	}
2669 
2670 	return ret;
2671 }
2672 
2673 static u32
2674 ieee80211_get_noa_absent_time(struct ieee80211_noa_data *data, u32 tsf)
2675 {
2676 	s32 offset = 0;
2677 	int tries = 0;
2678 	/*
2679 	 * arbitrary limit, used to avoid infinite loops when combined NoA
2680 	 * descriptors cover the full time period.
2681 	 */
2682 	int max_tries = 5;
2683 
2684 	ieee80211_extend_absent_time(data, tsf, &offset);
2685 	do {
2686 		if (!ieee80211_extend_absent_time(data, tsf, &offset))
2687 			break;
2688 
2689 		tries++;
2690 	} while (tries < max_tries);
2691 
2692 	return offset;
2693 }
2694 
2695 void ieee80211_update_p2p_noa(struct ieee80211_noa_data *data, u32 tsf)
2696 {
2697 	u32 next_offset = BIT(31) - 1;
2698 	int i;
2699 
2700 	data->absent = 0;
2701 	data->has_next_tsf = false;
2702 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
2703 		s32 start;
2704 
2705 		if (!data->count[i])
2706 			continue;
2707 
2708 		ieee80211_extend_noa_desc(data, tsf, i);
2709 		start = data->desc[i].start - tsf;
2710 		if (start <= 0)
2711 			data->absent |= BIT(i);
2712 
2713 		if (next_offset > start)
2714 			next_offset = start;
2715 
2716 		data->has_next_tsf = true;
2717 	}
2718 
2719 	if (data->absent)
2720 		next_offset = ieee80211_get_noa_absent_time(data, tsf);
2721 
2722 	data->next_tsf = tsf + next_offset;
2723 }
2724 EXPORT_SYMBOL(ieee80211_update_p2p_noa);
2725 
2726 int ieee80211_parse_p2p_noa(const struct ieee80211_p2p_noa_attr *attr,
2727 			    struct ieee80211_noa_data *data, u32 tsf)
2728 {
2729 	int ret = 0;
2730 	int i;
2731 
2732 	memset(data, 0, sizeof(*data));
2733 
2734 	for (i = 0; i < IEEE80211_P2P_NOA_DESC_MAX; i++) {
2735 		const struct ieee80211_p2p_noa_desc *desc = &attr->desc[i];
2736 
2737 		if (!desc->count || !desc->duration)
2738 			continue;
2739 
2740 		data->count[i] = desc->count;
2741 		data->desc[i].start = le32_to_cpu(desc->start_time);
2742 		data->desc[i].duration = le32_to_cpu(desc->duration);
2743 		data->desc[i].interval = le32_to_cpu(desc->interval);
2744 
2745 		if (data->count[i] > 1 &&
2746 		    data->desc[i].interval < data->desc[i].duration)
2747 			continue;
2748 
2749 		ieee80211_extend_noa_desc(data, tsf, i);
2750 		ret++;
2751 	}
2752 
2753 	if (ret)
2754 		ieee80211_update_p2p_noa(data, tsf);
2755 
2756 	return ret;
2757 }
2758 EXPORT_SYMBOL(ieee80211_parse_p2p_noa);
2759 
2760 void ieee80211_recalc_dtim(struct ieee80211_local *local,
2761 			   struct ieee80211_sub_if_data *sdata)
2762 {
2763 	u64 tsf = drv_get_tsf(local, sdata);
2764 	u64 dtim_count = 0;
2765 	u16 beacon_int = sdata->vif.bss_conf.beacon_int * 1024;
2766 	u8 dtim_period = sdata->vif.bss_conf.dtim_period;
2767 	struct ps_data *ps;
2768 	u8 bcns_from_dtim;
2769 
2770 	if (tsf == -1ULL || !beacon_int || !dtim_period)
2771 		return;
2772 
2773 	if (sdata->vif.type == NL80211_IFTYPE_AP ||
2774 	    sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
2775 		if (!sdata->bss)
2776 			return;
2777 
2778 		ps = &sdata->bss->ps;
2779 	} else if (ieee80211_vif_is_mesh(&sdata->vif)) {
2780 		ps = &sdata->u.mesh.ps;
2781 	} else {
2782 		return;
2783 	}
2784 
2785 	/*
2786 	 * actually finds last dtim_count, mac80211 will update in
2787 	 * __beacon_add_tim().
2788 	 * dtim_count = dtim_period - (tsf / bcn_int) % dtim_period
2789 	 */
2790 	do_div(tsf, beacon_int);
2791 	bcns_from_dtim = do_div(tsf, dtim_period);
2792 	/* just had a DTIM */
2793 	if (!bcns_from_dtim)
2794 		dtim_count = 0;
2795 	else
2796 		dtim_count = dtim_period - bcns_from_dtim;
2797 
2798 	ps->dtim_count = dtim_count;
2799 }
2800